@typeship-ax/mcp 0.6.0 → 0.9.1

package/src/types.ts

@@ -7,29 +7,47 @@ export type ProjectId = string;
 /** Unique identifier for a generation. */
 export type GenerationId = string;
 
-/** Unique identifier for an immutable specification revision. */
-export type SpecRevisionId = string;
+/** Unique identifier for a project's logical API Definition. */
+export type DefinitionId = string;
 
-/** Identifier used to correlate an API error with Typeship logs. */
+/** Unique identifier for a source document captured in a Definition Revision. */
+export type DefinitionDocumentId = string;
+
+/** Unique identifier for an immutable resolved Definition Revision. */
+export type DefinitionRevisionId = string;
+
+/** Server-generated identifier used to correlate this response with Typeship logs. */
 export type RequestId = string;
 
+/** Request-level metadata present at the top level of every JSON response. */
+export interface ResponseMetadata {
+  request_id: RequestId;
+}
+
 /** Identifies a cursor-paginated collection. */
 export type ListObject = "list";
 
+/** Stable identifier for one configured generated product. */
+export type TargetId = string;
+
+export type DeliveryId = string;
+
+export type TargetReleaseId = string;
+
 /**
- * One customer-selected output. CLI and MCP include the private TypeScript request runtime they
- * need; that dependency is not a selected or billable TypeScript SDK.
+ * Generator implementation selected by a Target. This is configuration, not identity; several
+ * Targets may use the same generator.
  */
-export const OutputId = {
+export const GeneratorKind = {
   TYPESCRIPT_SDK: "typescript-sdk",
   PYTHON_SDK: "python-sdk",
   GO_SDK: "go-sdk",
   CLI: "cli",
   MCP: "mcp",
 } as const;
-export type OutputId = (typeof OutputId)[keyof typeof OutputId];
+export type GeneratorKind = (typeof GeneratorKind)[keyof typeof GeneratorKind];
 
-export interface UrlSpecInput {
+export interface UrlDefinitionInput {
   /**
    * URL of an OpenAPI document, a GraphQL SDL file, or a GraphQL
    * endpoint (introspected automatically). Fetched server-side.
@@ -43,29 +61,66 @@ export interface UrlSpecInput {
   headers?: Record<string, string>;
 }
 
-export interface InlineSpecInput {
-  /** Raw spec text (OpenAPI JSON/YAML or GraphQL SDL). Up to 10MB. */
+/** Response shape for UrlDefinitionInput. */
+export interface UrlDefinitionInputRead {
+  /**
+   * URL of an OpenAPI document, a GraphQL SDL file, or a GraphQL
+   * endpoint (introspected automatically). Fetched server-side.
+   * Format: uri
+   */
+  url: string;
+}
+
+export interface InlineDefinitionInput {
+  /** Raw Definition text (OpenAPI JSON/YAML or GraphQL SDL). Up to 10MB. */
   inline: string;
 }
 
-/** The specification for stateless generation, provided as exactly one URL or inline document. */
-export type SpecInput = UrlSpecInput | InlineSpecInput;
+/** A Definition for stateless generation, provided as exactly one URL or inline entrypoint. */
+export type DefinitionInput = UrlDefinitionInput | InlineDefinitionInput;
+
+/** Response shape for DefinitionInput. */
+export type DefinitionInputRead = UrlDefinitionInputRead | InlineDefinitionInput;
 
 export interface GenerateRequest {
-  spec: SpecInput;
+  definition: DefinitionInput;
+  /** Stateless generator descriptor; no persisted Target is created. */
+  target: {
+    generator: GeneratorKind;
+  };
   /**
-   * The one output package to generate. Linked projects can select any combination of outputs and
-   * keep each package current.
+   * npm package or Python distribution override. Valid only for the TypeScript and Python SDK
+   * targets.
    */
-  outputs: OutputId[];
+  package_name?: string;
   /**
-   * Registry name for the selected delivery package: an npm package, Python distribution, or Go
-   * module path. Defaults to a name derived from the API title.
+   * Go module path override. Valid only for the Go SDK. Linked projects derive this from the Go
+   * destination repository by default.
    */
-  package_name?: string;
+  module_path?: string;
   config?: Config;
 }
 
+/** Response shape for GenerateRequest. */
+export interface GenerateRequestRead {
+  definition: DefinitionInputRead;
+  /** Stateless generator descriptor; no persisted Target is created. */
+  target: {
+    generator: GeneratorKind | (string & {});
+  };
+  /**
+   * npm package or Python distribution override. Valid only for the TypeScript and Python SDK
+   * targets.
+   */
+  package_name?: string;
+  /**
+   * Go module path override. Valid only for the Go SDK. Linked projects derive this from the Go
+   * destination repository by default.
+   */
+  module_path?: string;
+  config?: ConfigRead;
+}
+
 export interface GeneratedFile {
   /** Repo-relative path inside the generated package. */
   path: string;
@@ -74,22 +129,31 @@ export interface GeneratedFile {
 
 export interface GenerationMeta {
   title: string;
+  /** Version declared by the customer's API Definition. It never controls package releases. */
+  api_version: string;
+  /** Package version selected by the Target's release stream for this generation. */
   version: string;
   spec_format?: "openapi" | "graphql";
-  /** Detected spec version, "2.0", "3.0", or "3.1". */
+  /** Detected OpenAPI version, "2.0", "3.0", or "3.1". */
   oas_version: string;
   /** True when the input was Swagger 2.0 and was converted. */
   converted?: boolean;
-  package_name: string;
+  /** Ecosystem-neutral identity of the generated artifact. */
+  artifact_name: string;
   client_name: string;
-  /** Customer-selected outputs present in this delivery package. */
-  outputs: OutputId[];
+  /**
+   * Generator implementations present in this artifact. Persisted Target identity is reported on
+   * Generation.
+   */
+  generators: GeneratorKind[];
   resource_count?: number;
   operation_count?: number;
   schema_count?: number;
   paginated_operation_count?: number;
   /** Operations beyond the plan's endpoint allowance, not generated. */
   omitted_operation_count?: number;
+  /** METHOD/path identities of operations omitted by the generation cap. */
+  omitted_operations?: string[];
   /** Pull request opened by this regeneration, when one was. */
   pr_url?: string | null;
   pr_number?: number | null;
@@ -117,18 +181,121 @@ export interface GenerationMeta {
    * What the diff was measured against; "destination" means the .typeship/surface.json merged in
    * the destination repository.
    */
-  baseline?: "destination" | "last-generation" | "none";
+  baseline?: "destination" | "none";
+  /** Objective compatibility of the generated API surface against the merged destination baseline. */
+  api_compatibility?: "compatible" | "breaking" | "unknown";
+  /**
+   * Objective compatibility of public package entry points and selected targets against the merged
+   * destination baseline.
+   */
+  package_compatibility?: "compatible" | "breaking" | "unknown";
+  /**
+   * Whether the generated package version satisfies the cumulative change. Null when there is no
+   * prior version or analysis is unavailable.
+   */
+  version_correct?: boolean | null;
+  /**
+   * The destination pull request's combined readiness decision for the exact bot-generated head.
+   * Compatibility and version correctness remain separate fields above.
+   */
+  release_readiness?: "success" | "failure" | "error";
+  /** The release-readiness decision in one line, as the commit status describes it. */
+  release_readiness_note?: string;
+  /** The package version the destination had before this regeneration. */
+  previous_version?: string;
+  file_count?: number;
+  total_lines?: number;
+  /** Deterministic Diagnostic summary for the exact Definition Revision consumed. */
+  diagnostics?: {
+    format: "openapi" | "graphql";
+    summary: DiagnosticSummary;
+  };
+}
+
+/** Response shape for GenerationMeta. */
+export interface GenerationMetaRead {
+  title: string;
+  /** Version declared by the customer's API Definition. It never controls package releases. */
+  api_version: string;
+  /** Package version selected by the Target's release stream for this generation. */
+  version: string;
+  spec_format?: ("openapi" | "graphql") | (string & {});
+  /** Detected OpenAPI version, "2.0", "3.0", or "3.1". */
+  oas_version: string;
+  /** True when the input was Swagger 2.0 and was converted. */
+  converted?: boolean;
+  /** Ecosystem-neutral identity of the generated artifact. */
+  artifact_name: string;
+  client_name: string;
+  /**
+   * Generator implementations present in this artifact. Persisted Target identity is reported on
+   * Generation.
+   */
+  generators: Array<GeneratorKind | (string & {})>;
+  resource_count?: number;
+  operation_count?: number;
+  schema_count?: number;
+  paginated_operation_count?: number;
+  /** Operations beyond the plan's endpoint allowance, not generated. */
+  omitted_operation_count?: number;
+  /** METHOD/path identities of operations omitted by the generation cap. */
+  omitted_operations?: string[];
+  /** Pull request opened by this regeneration, when one was. */
+  pr_url?: string | null;
+  pr_number?: number | null;
+  /**
+   * Whether a destination pull request opened, was unnecessary because the generated tree already
+   * matched, or could not be opened.
+   */
+  pr_status?: ("opened" | "no_changes" | "blocked") | (string & {});
+  /**
+   * Why the configured destination pull request was not opened. Generation itself still succeeded;
+   * fix this action and regenerate.
+   */
+  pr_error?: string;
+  /**
+   * Markdown changelog entry for this regeneration, from the API surface diff. Absent on a first
+   * generation or when nothing changed.
+   */
+  changelog?: string;
+  /**
+   * Breaking changes in the diff; removed methods and fields, changed types, inputs that became
+   * required.
+   */
+  breaking_count?: number;
+  /**
+   * What the diff was measured against; "destination" means the .typeship/surface.json merged in
+   * the destination repository.
+   */
+  baseline?: ("destination" | "none") | (string & {});
+  /** Objective compatibility of the generated API surface against the merged destination baseline. */
+  api_compatibility?: ("compatible" | "breaking" | "unknown") | (string & {});
+  /**
+   * Objective compatibility of public package entry points and selected targets against the merged
+   * destination baseline.
+   */
+  package_compatibility?: ("compatible" | "breaking" | "unknown") | (string & {});
+  /**
+   * Whether the generated package version satisfies the cumulative change. Null when there is no
+   * prior version or analysis is unavailable.
+   */
+  version_correct?: boolean | null;
   /**
-   * The package compatibility verdict on the regeneration pull request; failure means breaking
-   * changes without a major version bump.
+   * The destination pull request's combined readiness decision for the exact bot-generated head.
+   * Compatibility and version correctness remain separate fields above.
    */
-  package_compatibility?: "success" | "failure";
-  /** The verdict in one line, as the commit status describes it. */
-  package_compatibility_note?: string;
+  release_readiness?: ("success" | "failure" | "error") | (string & {});
+  /** The release-readiness decision in one line, as the commit status describes it. */
+  release_readiness_note?: string;
   /** The package version the destination had before this regeneration. */
   previous_version?: string;
   file_count?: number;
   total_lines?: number;
+  /** Deterministic Diagnostic summary for the exact Definition Revision consumed. */
+  diagnostics?: {
+    format: ("openapi" | "graphql") | (string & {});
+    summary: DiagnosticSummary;
+  };
 }
 
 export interface GenerationResult {
@@ -138,8 +305,28 @@ export interface GenerationResult {
   limits?: GenerationLimits;
   /**
    * Anonymous, URL-sourced generations only. A link a signed-in person can open to turn this run
-   * into a project in their organization (same spec, outputs, and config). Lasts seven days. Null
-   * for inline specs; absent on keyed calls.
+   * into a project in their organization (same Definition, Target, and config). Lasts seven days.
+   * Null for inline Definitions; absent on keyed calls.
+   */
+  claim?: null
+    | {
+        url: string;
+        /** Format: date-time */
+        expires_at: string;
+      };
+  request_id: RequestId;
+}
+
+/** Response shape for GenerationResult. */
+export interface GenerationResultRead {
+  files: GeneratedFile[];
+  warnings: string[];
+  meta: GenerationMetaRead;
+  limits?: GenerationLimitsRead;
+  /**
+   * Anonymous, URL-sourced generations only. A link a signed-in person can open to turn this run
+   * into a project in their organization (same Definition, Target, and config). Lasts seven days.
+   * Null for inline Definitions; absent on keyed calls.
    */
   claim?: null
     | {
@@ -147,6 +334,7 @@ export interface GenerationResult {
         /** Format: date-time */
         expires_at: string;
       };
+  request_id: RequestId;
 }
 
 /**
@@ -156,8 +344,12 @@ export interface GenerationResult {
 export interface GenerationLimits {
   /** How many operations this generation was allowed to include. */
   max_operations: number;
-  /** How many operations in the spec were left out. */
+  /** How many operations are present in the generated package. */
+  generated_operations: number;
+  /** How many operations in the Definition were left out. */
   omitted_operations: number;
+  /** How many operations Typeship found in the complete Definition. */
+  total_operations: number;
   reason: "anonymous" | "free_plan";
   /** Anonymous calls only. Where to create an account. */
   signup_url?: string;
@@ -165,7 +357,24 @@ export interface GenerationLimits {
   upgrade_url: string;
 }
 
-export interface UrlProjectSource {
+/** Response shape for GenerationLimits. */
+export interface GenerationLimitsRead {
+  /** How many operations this generation was allowed to include. */
+  max_operations: number;
+  /** How many operations are present in the generated package. */
+  generated_operations: number;
+  /** How many operations in the Definition were left out. */
+  omitted_operations: number;
+  /** How many operations Typeship found in the complete Definition. */
+  total_operations: number;
+  reason: ("anonymous" | "free_plan") | (string & {});
+  /** Anonymous calls only. Where to create an account. */
+  signup_url?: string;
+  /** Where the cap is lifted. */
+  upgrade_url: string;
+}
+
+export interface UrlDefinitionSource {
   kind: "url";
   /**
    * URL fetched for every generation.
@@ -176,18 +385,70 @@ export interface UrlProjectSource {
   headers_configured: boolean;
 }
 
-export interface GithubProjectSource {
-  kind: "github";
-  /** GitHub repository in owner/name form. */
-  repository: string;
-  /** Repository-relative path to the specification. */
+/** Request shape for UrlDefinitionSource. */
+export interface UrlDefinitionSourceWrite {
+  kind: "url";
+  /**
+   * URL fetched for every generation.
+   * Format: uri
+   */
+  url: string;
+}
+
+/** Response shape for UrlDefinitionSource. */
+export interface UrlDefinitionSourceRead {
+  kind: "url" | (string & {});
+  /**
+   * URL fetched for every generation.
+   * Format: uri
+   */
+  url: string;
+  /** Whether Typeship has stored write-only request headers for this URL. */
+  headers_configured: boolean;
+}
+
+export interface RepositoryReference {
+  /** GitHub is the only launch provider; the field is stable for future adapters. */
+  provider: "github";
+  /** Provider-native repository identity, opaque outside its adapter. */
+  identifier: string;
+}
+
+/** Response shape for RepositoryReference. */
+export interface RepositoryReferenceRead {
+  /** GitHub is the only launch provider; the field is stable for future adapters. */
+  provider: "github" | (string & {});
+  /** Provider-native repository identity, opaque outside its adapter. */
+  identifier: string;
+}
+
+export interface RepositoryDefinitionSource {
+  kind: "repository";
+  repository: RepositoryReference;
+  /** Repository-relative Definition entrypoint. */
+  path: string;
+}
+
+/** Response shape for RepositoryDefinitionSource. */
+export interface RepositoryDefinitionSourceRead {
+  kind: "repository" | (string & {});
+  repository: RepositoryReferenceRead;
+  /** Repository-relative Definition entrypoint. */
   path: string;
 }
 
-/** The single source of truth for where a project's specification lives. */
-export type ProjectSource = UrlProjectSource | GithubProjectSource;
+/** The single source of truth for where a Project's Definition lives. */
+export type DefinitionSource = UrlDefinitionSource | RepositoryDefinitionSource;
 
-export interface UrlProjectSourceInput {
+/** Request shape for DefinitionSource. */
+export type DefinitionSourceWrite = UrlDefinitionSourceWrite | RepositoryDefinitionSource;
+
+/** Response shape for DefinitionSource. */
+export type DefinitionSourceRead = UrlDefinitionSourceRead
+  | RepositoryDefinitionSourceRead
+  | Record<string, unknown> & { kind?: string };
+
+export interface UrlDefinitionSourceInput {
   kind: "url";
   /**
    * URL of an OpenAPI document, GraphQL SDL file, or GraphQL endpoint.
@@ -203,22 +464,44 @@ export interface UrlProjectSourceInput {
   headers?: Record<string, string> | null;
 }
 
-export interface GithubProjectSourceInput {
-  kind: "github";
-  /** GitHub repository in owner/name form. */
-  repository: string;
-  /** Repository-relative path to the specification. */
+/** Response shape for UrlDefinitionSourceInput. */
+export interface UrlDefinitionSourceInputRead {
+  kind: "url" | (string & {});
+  /**
+   * URL of an OpenAPI document, GraphQL SDL file, or GraphQL endpoint.
+   * Format: uri
+   */
+  url: string;
+}
+
+export interface RepositoryDefinitionSourceInput {
+  kind: "repository";
+  repository: RepositoryReference;
+  /** Repository-relative Definition entrypoint. */
+  path: string;
+}
+
+/** Response shape for RepositoryDefinitionSourceInput. */
+export interface RepositoryDefinitionSourceInputRead {
+  kind: "repository" | (string & {});
+  repository: RepositoryReferenceRead;
+  /** Repository-relative Definition entrypoint. */
   path: string;
 }
 
-export type ProjectSourceInput = UrlProjectSourceInput | GithubProjectSourceInput;
+export type DefinitionSourceInput = UrlDefinitionSourceInput | RepositoryDefinitionSourceInput;
+
+/** Response shape for DefinitionSourceInput. */
+export type DefinitionSourceInputRead = UrlDefinitionSourceInputRead
+  | RepositoryDefinitionSourceInputRead
+  | Record<string, unknown> & { kind?: string };
 
 /**
- * A fix applied to the spec before generation. Targets are JSON
+ * A fix applied to the resolved Definition before generation. Paths are JSON
  * Pointers into the document. A patch whose target no longer exists is
  * skipped and reported as a warning on the generation, never silently.
  */
-export interface SpecPatch {
+export interface DefinitionPatch {
   op: "set" | "append" | "remove" | "rename";
   /**
    * JSON-Pointer-style path. Pattern segments enable bulk fixes:
@@ -234,236 +517,1199 @@ export interface SpecPatch {
   reason?: string | null;
 }
 
-/** Where regeneration pull requests land. */
-export interface Destination {
-  /** Defaults to the source repository when the source is a repo. */
-  repo?: string | null;
-  /** Directory the generated package is written to. */
-  directory?: string | null;
-}
-
-/** Registry identity and reviewed pull-request destination for one delivery package. */
-export interface PackageDelivery {
+/** Response shape for DefinitionPatch. */
+export interface DefinitionPatchRead {
+  op: ("set" | "append" | "remove" | "rename") | (string & {});
   /**
-   * npm package name, Python distribution name, or Go module path. Null derives a name from the API
-   * title.
-   */
-  name?: string | null;
-  /**
-   * Release version for this output package. Null falls back to the legacy config.package.version,
-   * then the specification version.
+   * JSON-Pointer-style path. Pattern segments enable bulk fixes:
+   * * (any child), ** (any depth), [key=value] (filter), e.g.
+   * /paths/**\/parameters/[name=account_id]/schema/type. Renaming a
+   * schema under /components/schemas also rewrites its $refs.
    */
-  version?: string | null;
-  destination?: Destination | null;
-}
-
-/**
- * Independent delivery packages keyed by output. Every selected output owns its registry identity,
- * version, destination pull request, and release lifecycle. Selected outputs must resolve to
- * distinct repository-and-directory trees; the TypeScript SDK, CLI, and MCP packages must also have
- * distinct npm names.
- */
-export interface Packages {
-  "typescript-sdk"?: PackageDelivery;
-  "python-sdk"?: PackageDelivery;
-  "go-sdk"?: PackageDelivery;
-  cli?: PackageDelivery;
-  mcp?: PackageDelivery;
+  path: string;
+  /** set only; the replacement value. */
+  value?: unknown;
+  /** rename only; the new key name. */
+  to?: string | null;
+  reason?: string | null;
 }
 
-export interface ProjectDestination {
-  repo: string | null;
-  directory: string | null;
+/** One exact place where a Diagnostic rule found evidence. */
+export interface DiagnosticLocation {
+  /** Source document coordinate when the Definition contains multiple files. */
+  document?: string;
+  /** JSON Pointer for OpenAPI, or schema coordinate for GraphQL. */
+  path: string;
+  /** Human-readable operation coordinate when the location belongs to an operation. */
+  operation?: string;
+  /** Occurrence-specific evidence. This is not a remediation instruction. */
+  evidence?: string;
 }
 
-export interface ProjectPackageDelivery {
-  name: string | null;
-  version: string | null;
-  destination: ProjectDestination | null;
+/** A reviewable remediation that does not invent API behavior. */
+export interface DiagnosticFix {
+  /** Concise action for the API author. */
+  title: string;
+  /**
+   * spec_patch is an exact OpenAPI edit Typeship can derive; source_edit requires author intent or
+   * a lossless GraphQL source edit.
+   */
+  kind: "spec_patch" | "source_edit";
+  /** Exact patches when kind is spec_patch. */
+  patches?: DefinitionPatch[];
+  /** Source-level guidance when an exact patch would invent intent. */
+  instructions?: string;
 }
 
-/**
- * Complete package configuration. All outputs are returned even when their output is not selected,
- * so saved delivery settings do not disappear when an output is disabled.
- */
-export interface ProjectPackages {
-  "typescript-sdk": ProjectPackageDelivery;
-  "python-sdk": ProjectPackageDelivery;
-  "go-sdk": ProjectPackageDelivery;
-  cli: ProjectPackageDelivery;
-  mcp: ProjectPackageDelivery;
+/** Response shape for DiagnosticFix. */
+export interface DiagnosticFixRead {
+  /** Concise action for the API author. */
+  title: string;
+  /**
+   * spec_patch is an exact OpenAPI edit Typeship can derive; source_edit requires author intent or
+   * a lossless GraphQL source edit.
+   */
+  kind: ("spec_patch" | "source_edit") | (string & {});
+  /** Exact patches when kind is spec_patch. */
+  patches?: DefinitionPatchRead[];
+  /** Source-level guidance when an exact patch would invent intent. */
+  instructions?: string;
 }
 
-export interface GithubHealthIssue {
-  code: "installation_missing"
-    | "spec_unreadable"
-    | "contents_write_missing"
-    | "breaking_label_missing"
-    | "github_unavailable";
-  message: string;
+/** Every occurrence of one stable Diagnostic rule, grouped into one decision. */
+export interface Diagnostic {
+  /** Stable rule identifier for automation and suppressions. */
+  id: string;
+  /** Whether the rule reports invalid behavior, material risk, or an improvement. */
+  severity: "error" | "warning" | "suggestion";
+  /** Product dimension affected by the diagnostic. */
+  category: "correctness" | "sdk_ergonomics" | "agent_usability" | "safety";
+  /** Concise statement of the root cause. */
+  title: string;
+  /** What the API author should change. */
+  description: string;
+  /** Why consumers of generated SDK, CLI, or MCP surfaces care. */
+  impact: string;
+  /** Public surfaces affected by the root cause. */
+  surfaces: Array<"api" | "sdk" | "cli" | "mcp">;
+  /** All affected coordinates, kept under one grouped diagnostic. */
+  locations: DiagnosticLocation[];
+  fix?: DiagnosticFix;
+  /**
+   * Grounded instructions an agent can use to edit the source. The brief preserves existing
+   * behavior and requires owner input when the contract cannot prove the missing product decision.
+   */
+  authoring_brief: string;
 }
 
-export interface GithubRepositoryHealth {
-  repository: string;
-  roles: Array<"source" | "destination">;
-  status: "ready" | "action_required";
-  default_branch?: string;
-  can_read?: boolean;
-  can_write?: boolean;
-  breaking_label?: boolean | null;
-  spec?: "readable" | "missing";
-  issues: GithubHealthIssue[];
+/** Response shape for Diagnostic. */
+export interface DiagnosticRead {
+  /** Stable rule identifier for automation and suppressions. */
+  id: string;
+  /** Whether the rule reports invalid behavior, material risk, or an improvement. */
+  severity: ("error" | "warning" | "suggestion") | (string & {});
+  /** Product dimension affected by the diagnostic. */
+  category: ("correctness" | "sdk_ergonomics" | "agent_usability" | "safety") | (string & {});
+  /** Concise statement of the root cause. */
+  title: string;
+  /** What the API author should change. */
+  description: string;
+  /** Why consumers of generated SDK, CLI, or MCP surfaces care. */
+  impact: string;
+  /** Public surfaces affected by the root cause. */
+  surfaces: Array<("api" | "sdk" | "cli" | "mcp") | (string & {})>;
+  /** All affected coordinates, kept under one grouped diagnostic. */
+  locations: DiagnosticLocation[];
+  fix?: DiagnosticFixRead;
+  /**
+   * Grounded instructions an agent can use to edit the source. The brief preserves existing
+   * behavior and requires owner input when the contract cannot prove the missing product decision.
+   */
+  authoring_brief: string;
 }
 
-export interface GithubDeliveryHealth {
-  id: string;
-  event: string;
-  status: "queued" | "processing" | "succeeded" | "failed" | "superseded";
-  error: string | null;
-  /** Format: date-time */
-  created_at: string;
+/** Counts distinguish decisions from the number of affected schema locations. */
+export interface DiagnosticSummary {
+  /** Number of grouped rule diagnostics. */
+  diagnostics: number;
+  /** Total affected locations across all diagnostics. */
+  occurrences: number;
+  /** Grouped correctness errors. */
+  errors: number;
+  /** Grouped material risks. */
+  warnings: number;
+  /** Grouped improvements. */
+  suggestions: number;
+  /** Diagnostics with exact reviewable Definition patches. */
+  auto_fixable: number;
 }
 
-export interface GithubIntegrationHealth {
-  object: "github_integration_health";
-  project_id: ProjectId;
-  status: "ready" | "action_required";
-  repositories: GithubRepositoryHealth[];
-  required_statuses: {
-    source: string[];
-    destination: string[];
-  };
-  last_delivery: GithubDeliveryHealth | null;
+export interface DiagnosticSuppression {
+  rule_id: string;
+  /** Exact schema coordinate. Omit only to suppress every occurrence of the rule. */
+  path?: string;
+  /** The reviewed product decision behind this exception. */
+  reason: string;
 }
 
-export interface Project {
-  id: ProjectId;
-  object: "project";
-  name: string;
-  source: ProjectSource;
-  packages: ProjectPackages;
-  /**
-   * Regenerate when the spec changes: on every push to the default branch for a repository source,
-   * every 30 minutes for a URL source. Off by default: the first generation is always one you asked
-   * for. Off means only "generate now" and POST /projects/{project_id}/generations regenerate.
-   */
-  auto_regen: boolean;
-  spec_patches: SpecPatch[];
-  config: Config | null;
-  /**
-   * Whether the hosted MCP endpoint is on. Requires the MCP output and Enterprise; turning the
-   * output off turns this off.
-   */
-  mcp_enabled: boolean;
-  /** Path of the hosted MCP endpoint while it is on; read-only. */
-  mcp_url: string | null;
-  /**
-   * Whether the webhook relay is on, letting the generated CLI's webhooks listen command mint relay
-   * sessions. Requires the cli output and Pro; turning the output off turns this off.
-   */
-  relay_enabled: boolean;
+/**
+ * Source pull-request enforcement threshold, new-versus-complete baseline, and explicitly reviewed
+ * rule or location exceptions.
+ */
+export interface DiagnosticPolicy {
   /**
-   * First-class generated outputs. Any non-empty combination is valid. Free keeps every selected
-   * output current for the first 25 operations in one linked project. On Pro, each selected output
-   * is billed once; shared implementation runtimes are included.
+   * Severity threshold that fails the API change review check.
+   * Default: "error"
    */
-  outputs: OutputId[];
-  /** Format: date-time */
-  created_at: string;
+  fail_on: "never" | "error" | "warning";
   /**
-   * When the project configuration last changed.
-   * Format: date-time
+   * Enforce only occurrences introduced by the proposed source change.
+   * Default: true
    */
-  updated_at: string;
+  only_new: boolean;
+  /** Default: [] */
+  suppressions: DiagnosticSuppression[];
 }
 
-export interface CreateProjectRequest {
-  name: string;
-  source: ProjectSourceInput;
-  /** First-class outputs Typeship will keep current for this project. */
-  outputs: OutputId[];
-  /**
-   * Initial package names, versions, and destinations. Omitted outputs use derived names and no
-   * destination.
-   */
-  packages?: Packages;
-  /**
-   * Whether Typeship should regenerate automatically when the source changes.
-   * Default: false
-   */
-  auto_regen?: boolean;
-  /** Initial patches. Omit or pass an empty array for none. */
-  spec_patches?: SpecPatch[];
+/** Response shape for DiagnosticPolicy. */
+export interface DiagnosticPolicyRead {
   /**
-   * Serve this project as a hosted MCP endpoint. Requires the MCP output and Enterprise.
-   * Default: false
+   * Severity threshold that fails the API change review check.
+   * Default: "error"
    */
-  mcp_enabled?: boolean;
+  fail_on: ("never" | "error" | "warning") | (string & {});
   /**
-   * Enable webhook relay sessions. Requires the CLI output and Pro.
-   * Default: false
+   * Enforce only occurrences introduced by the proposed source change.
+   * Default: true
    */
-  relay_enabled?: boolean;
-  config?: Config | null;
+  only_new: boolean;
+  /** Default: [] */
+  suppressions: DiagnosticSuppression[];
 }
 
-export interface UpdateProjectRequest {
-  name?: string;
-  source?: ProjectSourceInput;
-  /** Replaces the selected outputs; delivered files are not deleted. */
-  outputs?: OutputId[];
-  /**
-   * Replaces package configuration for every output. Include any existing output settings you want
-   * to keep.
-   */
-  packages?: Packages;
-  auto_regen?: boolean;
-  /** Replaces the full patch list. Pass an empty array to clear it. */
-  spec_patches?: SpecPatch[];
-  /** Serve this project as a hosted MCP endpoint. Requires the MCP output and Enterprise. */
-  mcp_enabled?: boolean;
-  /** Enable webhook relay sessions. Requires the CLI output and Pro. */
-  relay_enabled?: boolean;
-  /** Replaces the entire configuration; pass null to clear it. */
-  config?: Config | null;
+export interface DiagnosticEvaluation {
+  state: "pass" | "fail";
+  blocking: DiagnosticReference[];
+  considered_occurrences: number;
+  suppressed_occurrences: number;
 }
 
-/**
- * The organization an API key belongs to. Members share its projects, keys, and plan; sign-in
- * identity is not part of the API.
- */
-export interface Account {
-  id: string;
-  object: "account";
-  /** The organization's display name. */
-  name: string;
-  plan: "free" | "pro" | "enterprise";
-  /** Format: date-time */
-  created_at: string;
+/** Response shape for DiagnosticEvaluation. */
+export interface DiagnosticEvaluationRead {
+  state: ("pass" | "fail") | (string & {});
+  blocking: DiagnosticReferenceRead[];
+  considered_occurrences: number;
+  suppressed_occurrences: number;
 }
 
-/** How the generated CLI behaves. Part of Config. */
-export interface CliBehavior {
-  /**
-   * resource.method of a zero-argument GET that the generated CLI's whoami command calls. Overrides
-   * auto-detection; a value that matches nothing is reported as a generation warning.
-   */
-  whoami_operation?: string | null;
-  /**
-   * OAuth client id baked into the generated CLI for device-flow login. Without it, login prompts
-   * for a pasted credential.
-   */
-  oauth_client_id?: string | null;
-  /**
-   * Scopes requested during device-flow login. Include offline_access if the authorization server
-   * gates refresh tokens behind it.
-   */
-  oauth_scopes?: string[];
-  /**
-   * Audience sent with the device-authorization request, for authorization servers that require one
-   * to issue API-valid access tokens.
+/** Compact rule and location reference; full guidance appears once in diagnostics. */
+export interface DiagnosticReference {
+  rule_id: string;
+  severity: "error" | "warning" | "suggestion";
+  title: string;
+  locations: DiagnosticLocation[];
+}
+
+/** Response shape for DiagnosticReference. */
+export interface DiagnosticReferenceRead {
+  rule_id: string;
+  severity: ("error" | "warning" | "suggestion") | (string & {});
+  title: string;
+  locations: DiagnosticLocation[];
+}
+
+export interface DiagnosticDelta {
+  added: DiagnosticReference[];
+  resolved: DiagnosticReference[];
+  baseline_definition_revision_id: DefinitionRevisionId | null;
+}
+
+/** Response shape for DiagnosticDelta. */
+export interface DiagnosticDeltaRead {
+  added: DiagnosticReferenceRead[];
+  resolved: DiagnosticReferenceRead[];
+  baseline_definition_revision_id: DefinitionRevisionId | null;
+}
+
+/**
+ * Deterministic Diagnostics for one immutable Definition Revision after existing patches. No
+ * model-generated facts or silent edits.
+ */
+export interface DiagnosticReport {
+  object: "diagnostic_report";
+  /** Contract format Typeship analyzed. */
+  format: "openapi" | "graphql";
+  project_id: ProjectId;
+  definition_revision_id: DefinitionRevisionId;
+  /** SHA-256 digest of the immutable raw source revision. */
+  source_sha256: string;
+  /** SHA-256 digest after applying the Definition's current patches. */
+  analyzed_sha256: string;
+  /** Loud misses or conflicts from the Definition's existing patches. */
+  patch_diagnostics: string[];
+  summary: DiagnosticSummary;
+  /** Stable grouped diagnostics, ordered by severity and rule identifier. */
+  diagnostics: Diagnostic[];
+  policy: DiagnosticPolicy;
+  evaluation: DiagnosticEvaluation;
+  delta: DiagnosticDelta;
+  request_id: RequestId;
+}
+
+/** Response shape for DiagnosticReport. */
+export interface DiagnosticReportRead {
+  object: "diagnostic_report" | (string & {});
+  /** Contract format Typeship analyzed. */
+  format: ("openapi" | "graphql") | (string & {});
+  project_id: ProjectId;
+  definition_revision_id: DefinitionRevisionId;
+  /** SHA-256 digest of the immutable raw source revision. */
+  source_sha256: string;
+  /** SHA-256 digest after applying the Definition's current patches. */
+  analyzed_sha256: string;
+  /** Loud misses or conflicts from the Definition's existing patches. */
+  patch_diagnostics: string[];
+  summary: DiagnosticSummary;
+  /** Stable grouped diagnostics, ordered by severity and rule identifier. */
+  diagnostics: DiagnosticRead[];
+  policy: DiagnosticPolicyRead;
+  evaluation: DiagnosticEvaluationRead;
+  delta: DiagnosticDeltaRead;
+  request_id: RequestId;
+}
+
+export interface DiagnosticRemediationRequest {
+  /** Stable IDs of current diagnostics whose exact patches should be reviewed and applied. */
+  diagnostic_ids: string[];
+}
+
+export interface DiagnosticRemediation {
+  object: "diagnostic_remediation";
+  kind: "overlay" | "source_review";
+  patches_applied: number;
+  /**
+   * Source pull request for repository projects; absent for URL overlays.
+   * Format: uri
+   */
+  review_url?: string | null;
+  request_id: RequestId;
+}
+
+/** Response shape for DiagnosticRemediation. */
+export interface DiagnosticRemediationRead {
+  object: "diagnostic_remediation" | (string & {});
+  kind: ("overlay" | "source_review") | (string & {});
+  patches_applied: number;
+  /**
+   * Source pull request for repository projects; absent for URL overlays.
+   * Format: uri
+   */
+  review_url?: string | null;
+  request_id: RequestId;
+}
+
+export interface RepositoryDeliveryInput {
+  kind: "repository";
+  repository: RepositoryReference;
+  directory?: string | null;
+  /** npm or Python registry identity where applicable. */
+  package_name?: string | null;
+  /** Explicit Go module path where applicable. */
+  module_path?: string | null;
+}
+
+/** Response shape for RepositoryDeliveryInput. */
+export interface RepositoryDeliveryInputRead {
+  kind: "repository" | (string & {});
+  repository: RepositoryReferenceRead;
+  directory?: string | null;
+  /** npm or Python registry identity where applicable. */
+  package_name?: string | null;
+  /** Explicit Go module path where applicable. */
+  module_path?: string | null;
+}
+
+export interface HostedMcpDeliveryInput {
+  kind: "hosted_mcp";
+}
+
+/** Response shape for HostedMcpDeliveryInput. */
+export interface HostedMcpDeliveryInputRead {
+  kind: "hosted_mcp" | (string & {});
+}
+
+export type DeliveryInput = RepositoryDeliveryInput | HostedMcpDeliveryInput;
+
+/** Response shape for DeliveryInput. */
+export type DeliveryInputRead = RepositoryDeliveryInputRead
+  | HostedMcpDeliveryInputRead
+  | Record<string, unknown> & { kind?: string };
+
+export interface RepositoryDelivery {
+  id: DeliveryId;
+  object: "delivery";
+  target_id: TargetId;
+  kind: "repository";
+  state: "active" | "disabled";
+  repository: RepositoryReference;
+  directory: string | null;
+  package_name: string | null;
+  module_path: string | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+}
+
+/** Response shape for RepositoryDelivery. */
+export interface RepositoryDeliveryRead {
+  id: DeliveryId;
+  object: "delivery" | (string & {});
+  target_id: TargetId;
+  kind: "repository" | (string & {});
+  state: ("active" | "disabled") | (string & {});
+  repository: RepositoryReferenceRead;
+  directory: string | null;
+  package_name: string | null;
+  module_path: string | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+}
+
+export interface HostedMcpDelivery {
+  id: DeliveryId;
+  object: "delivery";
+  target_id: TargetId;
+  kind: "hosted_mcp";
+  state: "active" | "disabled";
+  /** Format: uri */
+  url: string | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+}
+
+/** Response shape for HostedMcpDelivery. */
+export interface HostedMcpDeliveryRead {
+  id: DeliveryId;
+  object: "delivery" | (string & {});
+  target_id: TargetId;
+  kind: "hosted_mcp" | (string & {});
+  state: ("active" | "disabled") | (string & {});
+  /** Format: uri */
+  url: string | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+}
+
+export type Delivery = RepositoryDelivery | HostedMcpDelivery;
+
+/** Response shape for Delivery. */
+export type DeliveryRead = RepositoryDeliveryRead
+  | HostedMcpDeliveryRead
+  | Record<string, unknown> & { kind?: string };
+
+export interface TargetFields {
+  name: string;
+  definition_id: DefinitionId;
+  generator: GeneratorKind;
+  /** Default: "active" */
+  state?: "active" | "disabled";
+  /** Default: "2026-08-24" */
+  edition?: string;
+  /** Default: "stable" */
+  release_channel?: "stable" | "prerelease";
+  /** Optional larger or prerelease SemVer for the next reviewed release. */
+  proposed_version?: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
+   * belong to the Definition.
+   */
+  config?: TargetConfig | null;
+  deliveries?: DeliveryInput[];
+}
+
+/** Response shape for TargetFields. */
+export interface TargetFieldsRead {
+  name: string;
+  definition_id: DefinitionId;
+  generator: GeneratorKind | (string & {});
+  /** Default: "active" */
+  state?: ("active" | "disabled") | (string & {});
+  /** Default: "2026-08-24" */
+  edition?: string;
+  /** Default: "stable" */
+  release_channel?: ("stable" | "prerelease") | (string & {});
+  /** Optional larger or prerelease SemVer for the next reviewed release. */
+  proposed_version?: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
+   * belong to the Definition.
+   */
+  config?: TargetConfigRead | null;
+  deliveries?: DeliveryInputRead[];
+}
+
+export interface InitialTargetFields {
+  name: string;
+  generator: GeneratorKind;
+  /** Default: "active" */
+  state?: "active" | "disabled";
+  /** Default: "2026-08-24" */
+  edition?: string;
+  /** Default: "stable" */
+  release_channel?: "stable" | "prerelease";
+  proposed_version?: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
+   * belong to the Definition.
+   */
+  config?: TargetConfig | null;
+  deliveries?: DeliveryInput[];
+}
+
+/** Response shape for InitialTargetFields. */
+export interface InitialTargetFieldsRead {
+  name: string;
+  generator: GeneratorKind | (string & {});
+  /** Default: "active" */
+  state?: ("active" | "disabled") | (string & {});
+  /** Default: "2026-08-24" */
+  edition?: string;
+  /** Default: "stable" */
+  release_channel?: ("stable" | "prerelease") | (string & {});
+  proposed_version?: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
+   * belong to the Definition.
+   */
+  config?: TargetConfigRead | null;
+  deliveries?: DeliveryInputRead[];
+}
+
+export interface TargetUpdateRequest {
+  name?: string;
+  state?: "active" | "disabled";
+  edition?: string;
+  release_channel?: "stable" | "prerelease";
+  proposed_version?: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
+   * belong to the Definition.
+   */
+  config?: TargetConfig | null;
+  deliveries?: DeliveryInput[];
+}
+
+/** Response shape for TargetUpdateRequest. */
+export interface TargetUpdateRequestRead {
+  name?: string;
+  state?: ("active" | "disabled") | (string & {});
+  edition?: string;
+  release_channel?: ("stable" | "prerelease") | (string & {});
+  proposed_version?: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
+   * belong to the Definition.
+   */
+  config?: TargetConfigRead | null;
+  deliveries?: DeliveryInputRead[];
+}
+
+export interface Target {
+  id: TargetId;
+  object: "target";
+  project_id: ProjectId;
+  definition_id: DefinitionId;
+  name: string;
+  generator: GeneratorKind;
+  state: "active" | "disabled";
+  edition: string;
+  release_channel: "stable" | "prerelease";
+  version_policy: {
+    mode: "reviewed_semver";
+    pre1_breaking: "minor";
+  };
+  current_version: string;
+  proposed_version: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are Definition-owned and
+   * never appear here.
+   */
+  config: TargetConfig | null;
+  /** At most one repository and one hosted MCP Delivery. */
+  deliveries: Delivery[];
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id?: RequestId;
+}
+
+/** Response shape for Target. */
+export interface TargetRead {
+  id: TargetId;
+  object: "target" | (string & {});
+  project_id: ProjectId;
+  definition_id: DefinitionId;
+  name: string;
+  generator: GeneratorKind | (string & {});
+  state: ("active" | "disabled") | (string & {});
+  edition: string;
+  release_channel: ("stable" | "prerelease") | (string & {});
+  version_policy: {
+    mode: "reviewed_semver" | (string & {});
+    pre1_breaking: "minor" | (string & {});
+  };
+  current_version: string;
+  proposed_version: string | null;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are Definition-owned and
+   * never appear here.
+   */
+  config: TargetConfigRead | null;
+  /** At most one repository and one hosted MCP Delivery. */
+  deliveries: DeliveryRead[];
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id?: RequestId;
+}
+
+export type TargetResponse = Target & ResponseMetadata;
+
+/** Response shape for TargetResponse. */
+export type TargetResponseRead = TargetRead & ResponseMetadata;
+
+export interface TargetList {
+  object: ListObject;
+  data: Target[];
+  has_more: boolean;
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+/** Response shape for TargetList. */
+export interface TargetListRead {
+  object: ListObject;
+  data: TargetRead[];
+  has_more: boolean;
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+export interface TargetRelease {
+  id: TargetReleaseId;
+  object: "target_release";
+  target_id: TargetId;
+  generation_id: GenerationId;
+  /** Immutable package version released from this Target. */
+  version: string;
+  channel: "stable" | "prerelease";
+  /** Delivery provider that accepted the release. */
+  provider: string;
+  repository: RepositoryReference | null;
+  definition_revision_id: DefinitionRevisionId | null;
+  /** Immutable provider-native revision that was merged or published. */
+  delivery_revision: string;
+  /** Format: date-time */
+  created_at: string;
+  request_id?: RequestId;
+}
+
+/** Response shape for TargetRelease. */
+export interface TargetReleaseRead {
+  id: TargetReleaseId;
+  object: "target_release" | (string & {});
+  target_id: TargetId;
+  generation_id: GenerationId;
+  /** Immutable package version released from this Target. */
+  version: string;
+  channel: ("stable" | "prerelease") | (string & {});
+  /** Delivery provider that accepted the release. */
+  provider: string;
+  repository: RepositoryReferenceRead | null;
+  definition_revision_id: DefinitionRevisionId | null;
+  /** Immutable provider-native revision that was merged or published. */
+  delivery_revision: string;
+  /** Format: date-time */
+  created_at: string;
+  request_id?: RequestId;
+}
+
+export type TargetReleaseResponse = TargetRelease & ResponseMetadata;
+
+/** Response shape for TargetReleaseResponse. */
+export type TargetReleaseResponseRead = TargetReleaseRead & ResponseMetadata;
+
+export interface TargetReleaseList {
+  object: ListObject;
+  data: TargetRelease[];
+  has_more: boolean;
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+/** Response shape for TargetReleaseList. */
+export interface TargetReleaseListRead {
+  object: ListObject;
+  data: TargetReleaseRead[];
+  has_more: boolean;
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+export interface RepositoryHealthIssue {
+  code: "connection_missing"
+    | "definition_unreadable"
+    | "contents_write_missing"
+    | "review_write_missing"
+    | "breaking_acknowledgement_missing"
+    | "provider_unavailable";
+  message: string;
+}
+
+/** Response shape for RepositoryHealthIssue. */
+export interface RepositoryHealthIssueRead {
+  code: ("connection_missing"
+    | "definition_unreadable"
+    | "contents_write_missing"
+    | "review_write_missing"
+    | "breaking_acknowledgement_missing"
+    | "provider_unavailable") | (string & {});
+  message: string;
+}
+
+export interface RepositoryHealth {
+  repository: RepositoryReference;
+  roles: Array<"source" | "destination">;
+  status: "ready" | "action_required";
+  default_branch?: string;
+  capabilities?: string[];
+  /**
+   * Whether a source repository has the optional typeship:breaking-approved policy label. Null when
+   * the repository is not a source or labels could not be read.
+   */
+  breaking_acknowledgement?: boolean | null;
+  definition?: "readable" | "missing";
+  issues: RepositoryHealthIssue[];
+}
+
+/** Response shape for RepositoryHealth. */
+export interface RepositoryHealthRead {
+  repository: RepositoryReferenceRead;
+  roles: Array<("source" | "destination") | (string & {})>;
+  status: ("ready" | "action_required") | (string & {});
+  default_branch?: string;
+  capabilities?: string[];
+  /**
+   * Whether a source repository has the optional typeship:breaking-approved policy label. Null when
+   * the repository is not a source or labels could not be read.
+   */
+  breaking_acknowledgement?: boolean | null;
+  definition?: ("readable" | "missing") | (string & {});
+  issues: RepositoryHealthIssueRead[];
+}
+
+export interface RepositoryEventHealth {
+  provider: string;
+  id: string;
+  event: string;
+  status: "queued" | "processing" | "succeeded" | "failed" | "superseded";
+  error: string | null;
+  /** Format: date-time */
+  created_at: string;
+}
+
+/** Response shape for RepositoryEventHealth. */
+export interface RepositoryEventHealthRead {
+  provider: string;
+  id: string;
+  event: string;
+  status: ("queued" | "processing" | "succeeded" | "failed" | "superseded") | (string & {});
+  error: string | null;
+  /** Format: date-time */
+  created_at: string;
+}
+
+export interface RepositoryIntegrationHealth {
+  object: "repository_integration_health";
+  project_id: ProjectId;
+  status: "ready" | "action_required";
+  repositories: RepositoryHealth[];
+  required_checks: {
+    source: string[];
+    destination: string[];
+  };
+  last_event: RepositoryEventHealth | null;
+  request_id: RequestId;
+}
+
+/** Response shape for RepositoryIntegrationHealth. */
+export interface RepositoryIntegrationHealthRead {
+  object: "repository_integration_health" | (string & {});
+  project_id: ProjectId;
+  status: ("ready" | "action_required") | (string & {});
+  repositories: RepositoryHealthRead[];
+  required_checks: {
+    source: string[];
+    destination: string[];
+  };
+  last_event: RepositoryEventHealthRead | null;
+  request_id: RequestId;
+}
+
+export interface DefinitionFields {
+  source: DefinitionSourceInput;
+  /** Default: [] */
+  patches?: DefinitionPatch[];
+  /** GraphQL-only endpoint, auth, environment, title, and scalar settings. */
+  graphql?: GraphqlSettings | null;
+  diagnostic_policy?: DiagnosticPolicy;
+}
+
+/** Response shape for DefinitionFields. */
+export interface DefinitionFieldsRead {
+  source: DefinitionSourceInputRead;
+  /** Default: [] */
+  patches?: DefinitionPatchRead[];
+  /** GraphQL-only endpoint, auth, environment, title, and scalar settings. */
+  graphql?: GraphqlSettingsRead | null;
+  diagnostic_policy?: DiagnosticPolicyRead;
+}
+
+export interface Definition {
+  id: DefinitionId;
+  object: "definition";
+  project_id: ProjectId;
+  source: DefinitionSource;
+  format: "openapi" | "graphql" | null;
+  patches: DefinitionPatch[];
+  graphql: GraphqlSettings | null;
+  diagnostic_policy: DiagnosticPolicy;
+  latest_revision_id: DefinitionRevisionId | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id: RequestId;
+}
+
+/** Request shape for Definition. */
+export interface DefinitionWrite {
+  id: DefinitionId;
+  object: "definition";
+  project_id: ProjectId;
+  source: DefinitionSourceWrite;
+  format: "openapi" | "graphql" | null;
+  patches: DefinitionPatch[];
+  graphql: GraphqlSettings | null;
+  diagnostic_policy: DiagnosticPolicy;
+  latest_revision_id: DefinitionRevisionId | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id: RequestId;
+}
+
+/** Response shape for Definition. */
+export interface DefinitionRead {
+  id: DefinitionId;
+  object: "definition" | (string & {});
+  project_id: ProjectId;
+  source: DefinitionSourceRead;
+  format: ("openapi" | "graphql" | null) | (string & {}) | null;
+  patches: DefinitionPatchRead[];
+  graphql: GraphqlSettingsRead | null;
+  diagnostic_policy: DiagnosticPolicyRead;
+  latest_revision_id: DefinitionRevisionId | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id: RequestId;
+}
+
+export interface DefinitionUpdateRequest {
+  source?: DefinitionSourceInput;
+  patches?: DefinitionPatch[];
+  graphql?: GraphqlSettings | null;
+  diagnostic_policy?: DiagnosticPolicy;
+}
+
+/** Response shape for DefinitionUpdateRequest. */
+export interface DefinitionUpdateRequestRead {
+  source?: DefinitionSourceInputRead;
+  patches?: DefinitionPatchRead[];
+  graphql?: GraphqlSettingsRead | null;
+  diagnostic_policy?: DiagnosticPolicyRead;
+}
+
+/**
+ * Project-owned identity, Definition reference, generation controls, and shared configuration.
+ * Targets and Deliveries are available only through their canonical Target endpoints.
+ */
+export interface Project {
+  id: ProjectId;
+  object: "project";
+  name: string;
+  definition_id: DefinitionId;
+  /**
+   * Regenerate when the Definition changes: on every push to the default branch for a repository
+   * source, every 30 minutes for a URL source. Off by default: the first generation is always one
+   * you asked for. Off means only "generate now" and POST /projects/{project_id}/generations
+   * regenerate.
+   */
+  auto_generate: boolean;
+  /**
+   * Whether the webhook relay is on, letting the generated CLI's webhooks listen command mint relay
+   * sessions. Requires the cli target and Pro; turning the target off turns this off.
+   */
+  relay_enabled: boolean;
+  /**
+   * Shared defaults inherited by every Target. A Target's config overrides these defaults; GraphQL
+   * settings remain Definition-owned.
+   */
+  config: ProjectConfig | null;
+  /** Format: date-time */
+  created_at: string;
+  /**
+   * When the project configuration last changed.
+   * Format: date-time
+   */
+  updated_at: string;
+  request_id: RequestId;
+}
+
+/** Request shape for Project. */
+export interface ProjectWrite {
+  name: string;
+  definition_id: DefinitionId;
+  /**
+   * Regenerate when the Definition changes: on every push to the default branch for a repository
+   * source, every 30 minutes for a URL source. Off by default: the first generation is always one
+   * you asked for. Off means only "generate now" and POST /projects/{project_id}/generations
+   * regenerate.
+   */
+  auto_generate: boolean;
+  /**
+   * Whether the webhook relay is on, letting the generated CLI's webhooks listen command mint relay
+   * sessions. Requires the cli target and Pro; turning the target off turns this off.
+   */
+  relay_enabled: boolean;
+  /**
+   * Shared defaults inherited by every Target. A Target's config overrides these defaults; GraphQL
+   * settings remain Definition-owned.
+   */
+  config: ProjectConfig | null;
+  request_id: RequestId;
+}
+
+/** Response shape for Project. */
+export interface ProjectRead {
+  id: ProjectId;
+  object: "project" | (string & {});
+  name: string;
+  definition_id: DefinitionId;
+  /**
+   * Regenerate when the Definition changes: on every push to the default branch for a repository
+   * source, every 30 minutes for a URL source. Off by default: the first generation is always one
+   * you asked for. Off means only "generate now" and POST /projects/{project_id}/generations
+   * regenerate.
+   */
+  auto_generate: boolean;
+  /**
+   * Whether the webhook relay is on, letting the generated CLI's webhooks listen command mint relay
+   * sessions. Requires the cli target and Pro; turning the target off turns this off.
+   */
+  relay_enabled: boolean;
+  /**
+   * Shared defaults inherited by every Target. A Target's config overrides these defaults; GraphQL
+   * settings remain Definition-owned.
+   */
+  config: ProjectConfigRead | null;
+  /** Format: date-time */
+  created_at: string;
+  /**
+   * When the project configuration last changed.
+   * Format: date-time
+   */
+  updated_at: string;
+  request_id: RequestId;
+}
+
+/**
+ * Lean Project identity returned by collection endpoints. Retrieve the Project for shared
+ * configuration and list its Targets for the complete canonical child collection.
+ */
+export interface ProjectSummary {
+  id: ProjectId;
+  object: "project";
+  name: string;
+  definition_id: DefinitionId;
+  auto_generate: boolean;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+}
+
+/** Response shape for ProjectSummary. */
+export interface ProjectSummaryRead {
+  id: ProjectId;
+  object: "project" | (string & {});
+  name: string;
+  definition_id: DefinitionId;
+  auto_generate: boolean;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+}
+
+export interface CreateProjectRequest {
+  name: string;
+  definition: DefinitionFields;
+  /**
+   * Initial first-class Targets. More than one may use the same generator with different identities
+   * or Deliveries.
+   */
+  targets: InitialTargetFields[];
+  /**
+   * Whether Typeship should regenerate automatically when the source changes.
+   * Default: false
+   */
+  auto_generate?: boolean;
+  /**
+   * Enable webhook relay sessions. Requires the CLI target and Pro.
+   * Default: false
+   */
+  relay_enabled?: boolean;
+  /** Shared defaults inherited by every Target. GraphQL settings belong in definition.graphql. */
+  config?: ProjectConfig | null;
+}
+
+/** Response shape for CreateProjectRequest. */
+export interface CreateProjectRequestRead {
+  name: string;
+  definition: DefinitionFieldsRead;
+  /**
+   * Initial first-class Targets. More than one may use the same generator with different identities
+   * or Deliveries.
+   */
+  targets: InitialTargetFieldsRead[];
+  /**
+   * Whether Typeship should regenerate automatically when the source changes.
+   * Default: false
+   */
+  auto_generate?: boolean;
+  /**
+   * Enable webhook relay sessions. Requires the CLI target and Pro.
+   * Default: false
+   */
+  relay_enabled?: boolean;
+  /** Shared defaults inherited by every Target. GraphQL settings belong in definition.graphql. */
+  config?: ProjectConfigRead | null;
+}
+
+export interface UpdateProjectRequest {
+  name?: string;
+  auto_generate?: boolean;
+  /** Enable webhook relay sessions. Requires the CLI target and Pro. */
+  relay_enabled?: boolean;
+  /** Replaces the Project's shared Target defaults. Send null to clear them. */
+  config?: ProjectConfig | null;
+}
+
+/** Response shape for UpdateProjectRequest. */
+export interface UpdateProjectRequestRead {
+  name?: string;
+  auto_generate?: boolean;
+  /** Enable webhook relay sessions. Requires the CLI target and Pro. */
+  relay_enabled?: boolean;
+  /** Replaces the Project's shared Target defaults. Send null to clear them. */
+  config?: ProjectConfigRead | null;
+}
+
+/**
+ * The organization an API key belongs to. Members share its projects, keys, and plan; sign-in
+ * identity is not part of the API.
+ */
+export interface Account {
+  id: string;
+  object: "account";
+  /** The organization's display name. */
+  name: string;
+  plan: "free" | "pro" | "enterprise";
+  /** Format: date-time */
+  created_at: string;
+  request_id: RequestId;
+}
+
+/** Response shape for Account. */
+export interface AccountRead {
+  id: string;
+  object: "account" | (string & {});
+  /** The organization's display name. */
+  name: string;
+  plan: ("free" | "pro" | "enterprise") | (string & {});
+  /** Format: date-time */
+  created_at: string;
+  request_id: RequestId;
+}
+
+/**
+ * Authorization-server metadata used by generated OAuth flows. Secrets and runtime credentials are
+ * never accepted here.
+ */
+export interface OAuthServer {
+  /**
+   * Exact authorization-server issuer, including any tenant path.
+   * Format: uri
+   */
+  issuer?: string | null;
+  /**
+   * Exact metadata URL when it cannot be derived from the issuer.
+   * Format: uri
+   */
+  discovery_url?: string | null;
+  /**
+   * Authorization endpoint override.
+   * Format: uri
+   */
+  authorization_url?: string | null;
+  /**
+   * Token endpoint override.
+   * Format: uri
+   */
+  token_url?: string | null;
+  /**
+   * Device-authorization endpoint override.
+   * Format: uri
+   */
+  device_authorization_url?: string | null;
+  /** Default scopes requested during login. */
+  scopes?: string[] | null;
+  /** Default audience included in authorization and token requests. */
+  audience?: string | null;
+  /**
+   * Protected API resource included in authorization and token requests.
+   * Format: uri
+   */
+  resource?: string | null;
+}
+
+/**
+ * OAuth application available to generated products. Public clients support interactive login;
+ * confidential clients support runtime-supplied machine credentials. Client secrets are never
+ * stored.
+ */
+export interface OAuthApplication {
+  /** OAuth client identifier. */
+  client_id: string;
+  /** Interactive login method. Browser login uses Authorization Code with PKCE. */
+  login_method?: "browser" | "device" | null;
+  /** How a runtime-supplied client secret is sent for machine grants. */
+  client_auth_method?: "post" | "basic" | null;
+  /**
+   * Loopback callback URL for browser login.
+   * Format: uri
+   */
+  redirect_uri?: string | null;
+  /** Provider parameter used to request an organization during browser login. */
+  organization_parameter?: "organization" | "organization_id" | null;
+}
+
+/** Response shape for OAuthApplication. */
+export interface OAuthApplicationRead {
+  /** OAuth client identifier. */
+  client_id: string;
+  /** Interactive login method. Browser login uses Authorization Code with PKCE. */
+  login_method?: ("browser" | "device" | null) | (string & {}) | null;
+  /** How a runtime-supplied client secret is sent for machine grants. */
+  client_auth_method?: ("post" | "basic" | null) | (string & {}) | null;
+  /**
+   * Loopback callback URL for browser login.
+   * Format: uri
+   */
+  redirect_uri?: string | null;
+  /** Provider parameter used to request an organization during browser login. */
+  organization_parameter?: ("organization" | "organization_id" | null) | (string & {}) | null;
+}
+
+/**
+ * Authenticated identity read used to verify a login before it is saved. Operation is auto-detected
+ * when omitted. Requests must include at least one of subject_field, account_field, or
+ * organization_field.
+ */
+export interface IdentityVerification {
+  /** resource.method of a safe identity read with no required arguments. */
+  operation?: string;
+  /** JSON Pointer to the stable caller ID in the identity response. */
+  subject_field?: string;
+  /** JSON Pointer to the customer account ID. */
+  account_field?: string;
+  /** JSON Pointer to the customer organization ID. */
+  organization_field?: string;
+}
+
+/** OAuth application and request-value overrides for one named API environment. */
+export interface AuthenticationEnvironment {
+  oauth_application?: string | null;
+  scopes?: string[] | null;
+  audience?: string | null;
+  /** Format: uri */
+  resource?: string | null;
+}
+
+/**
+ * Public authentication defaults for generated clients and tools. Stored Projects own the OAuth
+ * server, application catalog, and identity policy; stateless generation accepts the same shape for
+ * one run. Runtime credentials and client secrets are never accepted.
+ */
+export interface AuthenticationConfig {
+  oauth_server?: OAuthServer | null;
+  /** OAuth applications keyed by a stable name. */
+  oauth_applications?: Record<string, OAuthApplication> | null;
+  /** Default OAuth application used by generated products. */
+  oauth_application?: string | null;
+  identity_verification?: IdentityVerification | null;
+  /**
+   * Base URL of a custom browser-approval backend implementing the start, status, and revoke
+   * contract. Used only when OAuth is not configured.
+   * Format: uri
    */
-  oauth_audience?: string | null;
+  approval_url?: string | null;
+  /** Authentication selections keyed by generated API environment name. */
+  environments?: Record<string, AuthenticationEnvironment> | null;
+}
+
+export interface TargetAuthenticationEnvironment {
+  oauth_application?: string | null;
+}
+
+/**
+ * Selects a Project OAuth application for one Target. OAuth server metadata, applications, and
+ * identity policy remain Project-owned.
+ */
+export interface TargetAuthenticationConfig {
+  /** Project OAuth application to use. Omit to inherit the Project default. */
+  oauth_application?: string | null;
+  /** Project OAuth application selections keyed by API environment. */
+  environments?: Record<string, TargetAuthenticationEnvironment> | null;
+}
+
+/** How the generated CLI behaves. Part of Config. */
+export interface CliBehavior {
+  /** Command users run, independent of how the CLI is distributed. */
+  command_name?: string | null;
   /**
    * Opt in to a once-a-day registry check that prints an upgrade hint. Off by default; generated
    * code phones nobody unless this is enabled.
@@ -474,11 +1720,6 @@ export interface CliBehavior {
    * title and environment details.
    */
   support_url?: string | null;
-  /**
-   * Base URL of the browser-approval endpoint pair used by CLI login. The CLI keeps the verifier
-   * and receives the credential directly; no key is pasted through a conversation.
-   */
-  auth_url?: string | null;
   /**
    * Hosted MCP endpoint installed by the generated CLI instead of launching the package's local
    * stdio server.
@@ -488,8 +1729,34 @@ export interface CliBehavior {
   skills_repo?: string | null;
 }
 
-/** How the generated MCP server and the hosted endpoint behave. Part of Config. */
+/** How generated MCP servers and the Typeship-hosted endpoint behave. Part of Config. */
 export interface McpBehavior {
+  /** Stable official MCP registry name, independent of the server runtime. */
+  registry_name?: string | null;
+  /**
+   * Authorization for callers connecting to a generated MCP server deployed over HTTP. The hosting
+   * application resolves upstream API credentials separately at runtime. This setting does not
+   * apply to the Typeship-hosted endpoint.
+   */
+  access?: {
+    /**
+     * Exact issuer allowed to sign MCP connection tokens.
+     * Format: uri
+     */
+    issuer: string;
+    /**
+     * Canonical public URL of the self-hosted MCP endpoint that connection tokens must target.
+     * Format: uri
+     */
+    resource: string;
+    /**
+     * Public signing-key endpoint. Omit to discover it from the issuer.
+     * Format: uri
+     */
+    jwks_url?: string;
+    /** Minimum scopes required to connect to the self-hosted MCP server. */
+    scopes?: string[];
+  };
   /**
    * MCP tool shape. meta collapses per-operation tools into search_docs, read_docs, and execute so
    * large APIs don't flood an agent's context window. Auto considers the serialized tool schemas,
@@ -509,19 +1776,100 @@ export interface McpBehavior {
    * match no operation are reported as generation warnings.
    */
   tool_descriptions?: Record<string, string>;
+  /**
+   * Exact name-or-ID resolver overrides keyed first by the target operationId or "METHOD /path",
+   * then by its wire argument name. A resolver names one read collection operation plus 1-4 item
+   * fields to match case-insensitively; false opts that argument out of strict inference.
+   */
+  reference_resolvers?: Record<string, Record<string, false
+    | {
+        /** OperationId, "METHOD /path", MCP tool name, or dotted resource.method of the list operation. */
+        via: string;
+        /** Item fields compared exactly and case-insensitively, such as name, slug, key, or email. */
+        match: string[];
+        /** Item field substituted into the requested argument. Defaults to id. */
+        id?: string;
+      }>>;
+}
+
+/** Response shape for McpBehavior. */
+export interface McpBehaviorRead {
+  /** Stable official MCP registry name, independent of the server runtime. */
+  registry_name?: string | null;
+  /**
+   * Authorization for callers connecting to a generated MCP server deployed over HTTP. The hosting
+   * application resolves upstream API credentials separately at runtime. This setting does not
+   * apply to the Typeship-hosted endpoint.
+   */
+  access?: {
+    /**
+     * Exact issuer allowed to sign MCP connection tokens.
+     * Format: uri
+     */
+    issuer: string;
+    /**
+     * Canonical public URL of the self-hosted MCP endpoint that connection tokens must target.
+     * Format: uri
+     */
+    resource: string;
+    /**
+     * Public signing-key endpoint. Omit to discover it from the issuer.
+     * Format: uri
+     */
+    jwks_url?: string;
+    /** Minimum scopes required to connect to the self-hosted MCP server. */
+    scopes?: string[];
+  };
+  /**
+   * MCP tool shape. meta collapses per-operation tools into search_docs, read_docs, and execute so
+   * large APIs don't flood an agent's context window. Auto considers the serialized tool schemas,
+   * switching near 10k tokens or above 100 operations.
+   */
+  tool_mode?: ("auto" | "operations" | "meta") | (string & {});
+  /**
+   * Guidance appended to the MCP server's instructions, which agents read once when they connect
+   * (server/discover): what to call first, conventions the spec does not state, what not to do.
+   * Carried by the package's server and the hosted endpoint alike.
+   */
+  instructions?: string | null;
+  /**
+   * Hand-written MCP tool descriptions keyed by operationId or "METHOD /path". Each replaces the
+   * text typeship derives for that operation (summary, first sentence, method and path, deprecation
+   * and auth notes). For flows the spec cannot describe, such as a multi-step upload. Keys that
+   * match no operation are reported as generation warnings.
+   */
+  tool_descriptions?: Record<string, string>;
+  /**
+   * Exact name-or-ID resolver overrides keyed first by the target operationId or "METHOD /path",
+   * then by its wire argument name. A resolver names one read collection operation plus 1-4 item
+   * fields to match case-insensitively; false opts that argument out of strict inference.
+   */
+  reference_resolvers?: Record<string, Record<string, false | (string & {})
+    | {
+        /** OperationId, "METHOD /path", MCP tool name, or dotted resource.method of the list operation. */
+        via: string;
+        /** Item fields compared exactly and case-insensitively, such as name, slug, key, or email. */
+        match: string[];
+        /** Item field substituted into the requested argument. Defaults to id. */
+        id?: string;
+      }>>;
+}
+
+/** Generated README behavior. Part of Config. */
+export interface ReadmeBehavior {
+  /**
+   * operationId or "METHOD /path" to feature as the README's first API call. It must be present in
+   * the generated package and callable with no required input beyond path placeholders. Missing or
+   * unsuitable choices produce a warning and use the automatic example.
+   */
+  quickstart_operation?: string | null;
 }
 
 /**
  * Published-package metadata the API spec does not own. Repository is derived from each
- * destination; release versions belong to packages.
+ * destination.
  */
 export interface PackageBehavior {
-  /**
-   * Lockstep version fallback. Prefer packages.<output>.version so every SDK, CLI, and MCP package
-   * can advance independently.
-   * @deprecated
-   */
-  version?: string | null;
   /** Homepage written into registry metadata. */
   homepage?: string | null;
   /** SPDX identifier written into registry metadata. Defaults to info.license. */
@@ -530,50 +1878,233 @@ export interface PackageBehavior {
    * Exact LICENSE file contents. Supply this for licences the engine does not build in; MIT is
    * built in when copyright is also set.
    */
-  license_text?: string | null;
-  /** Copyright line used in generated license files. */
-  copyright?: string | null;
-  /** CLI executable name when it differs from the npm package name. */
-  bin_name?: string | null;
-  /** Go identifier when the destination repository name is unsuitable. */
-  go_package_name?: string | null;
-  /** Official MCP registry name written into package.json. */
-  mcp_name?: string | null;
-}
-
-/**
- * Everything typeship needs beyond the spec, in one object: generation customization (globals,
- * retries, pagination) and how the generated tooling behaves (cli, mcp, package, docs_url). Plain
- * configuration. typeship never requires vendor extensions inside the spec itself. The same shape
- * is accepted on a project and on POST /generate.
- */
-export interface Config {
+  license_text?: string | null;
+  /** Copyright line used in generated license files. */
+  copyright?: string | null;
+  /** Go identifier when the destination repository name is unsuitable. */
+  go_package_name?: string | null;
+}
+
+/**
+ * Everything Typeship needs beyond the Definition, in one object: generation customization
+ * (globals, retries, pagination, readme) and how the generated tooling behaves (cli, mcp, package,
+ * docs_url). Plain configuration. Typeship never requires vendor extensions inside the Definition
+ * itself. Stateless generation also accepts GraphQL settings here; stored projects keep those
+ * settings on their Definition.
+ */
+export interface Config {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuning;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRule | boolean>;
+  graphql?: GraphqlSettings;
+  auth?: AuthenticationConfig;
+  cli?: CliBehavior;
+  mcp?: McpBehavior;
+  readme?: ReadmeBehavior;
+  package?: PackageBehavior;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/** Response shape for Config. */
+export interface ConfigRead {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuning;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleRead | boolean>;
+  graphql?: GraphqlSettingsRead;
+  auth?: AuthenticationConfig;
+  cli?: CliBehavior;
+  mcp?: McpBehaviorRead;
+  readme?: ReadmeBehavior;
+  package?: PackageBehavior;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/**
+ * Shared generated-client and tooling behavior for a stored Project. Every Target inherits these
+ * defaults. Target.config is merged over them for one Target; top-level values replace defaults
+ * while cli, mcp, auth, readme, and package merge by field. GraphQL-only source settings live on
+ * the Project's Definition and are rejected in both stored config scopes.
+ */
+export interface ProjectConfig {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuning;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRule | boolean>;
+  auth?: AuthenticationConfig;
+  cli?: CliBehavior;
+  mcp?: McpBehavior;
+  readme?: ReadmeBehavior;
+  package?: PackageBehavior;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/** Response shape for ProjectConfig. */
+export interface ProjectConfigRead {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuning;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleRead | boolean>;
+  auth?: AuthenticationConfig;
+  cli?: CliBehavior;
+  mcp?: McpBehaviorRead;
+  readme?: ReadmeBehavior;
+  package?: PackageBehavior;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/**
+ * Target-specific generation and delivery overrides. Authentication may only select a Project-owned
+ * OAuth application. OAuth server metadata, applications, and identity policy remain Project-owned.
+ * Self-hosted MCP access may be overridden for a Target-specific deployment.
+ */
+export interface TargetConfig {
+  globals?: string[];
+  retries?: RetryTuning;
+  pagination?: Record<string, PaginationRule | boolean>;
+  auth?: TargetAuthenticationConfig;
+  cli?: CliBehavior;
+  mcp?: McpBehavior;
+  readme?: ReadmeBehavior;
+  package?: PackageBehavior;
+  /** Format: uri */
+  docs_url?: string | null;
+  /** Format: uri */
+  docs_index_url?: string | null;
+}
+
+/** Response shape for TargetConfig. */
+export interface TargetConfigRead {
+  globals?: string[];
+  retries?: RetryTuning;
+  pagination?: Record<string, PaginationRuleRead | boolean>;
+  auth?: TargetAuthenticationConfig;
+  cli?: CliBehavior;
+  mcp?: McpBehaviorRead;
+  readme?: ReadmeBehavior;
+  package?: PackageBehavior;
+  /** Format: uri */
+  docs_url?: string | null;
+  /** Format: uri */
+  docs_index_url?: string | null;
+}
+
+/** What a GraphQL schema cannot say about itself. Ignored for OpenAPI specs. */
+export interface GraphqlSettings {
+  /**
+   * The URL every request is POSTed to; the generated client's default baseUrl. Defaults to the URL
+   * the schema was fetched from. Without either, baseUrl is a required client option.
+   * Format: uri
+   */
+  endpoint?: string;
+  /**
+   * Named endpoints (sandbox, production). Each becomes a client environment; the first is the
+   * default unless endpoint is set.
+   */
+  environments?: Array<{
+    name: string;
+    /** Format: uri */
+    url: string;
+  }>;
+  /**
+   * How requests authenticate. bearer sends Authorization: Bearer; basic is for key-pair APIs
+   * (public key as username, private key as password); api_key sends a header named by
+   * api_key_header; none generates no auth option.
+   * Default: "bearer"
+   */
+  auth?: "bearer" | "basic" | "api_key" | "none";
   /**
-   * Wire names of query/header parameters that become settable once on the generated client and
-   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
-   * are reported as generation warnings.
+   * Header carrying the key when auth is api_key. Required for that mode; Typeship does not invent
+   * a vendor-specific header name.
    */
-  globals?: string[];
-  retries?: RetryTuning;
+  api_key_header?: string;
   /**
-   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
-   * reported as generation warnings.
+   * The API's name; drives the package and client names ("Acme" gives acme and AcmeClient).
+   * Defaults to a name derived from the endpoint's host.
    */
-  pagination?: Record<string, PaginationRule | boolean>;
-  graphql?: GraphqlSettings;
-  cli?: CliBehavior;
-  mcp?: McpBehavior;
-  package?: PackageBehavior;
+  title?: string;
   /**
-   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
-   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the spec's externalDocs
-   * URL.
+   * JSON representation of each custom scalar, keyed by GraphQL scalar name. Unmapped scalars
+   * generate as the language's untyped JSON value and produce a warning. Unmatched keys warn.
    */
-  docs_url?: string | null;
+  scalars?: Record<string, "string" | "integer" | "number" | "boolean" | "json">;
 }
 
-/** What a GraphQL schema cannot say about itself. Ignored for OpenAPI specs. */
-export interface GraphqlSettings {
+/** Response shape for GraphqlSettings. */
+export interface GraphqlSettingsRead {
   /**
    * The URL every request is POSTed to; the generated client's default baseUrl. Defaults to the URL
    * the schema was fetched from. Without either, baseUrl is a required client option.
@@ -595,22 +2126,22 @@ export interface GraphqlSettings {
    * api_key_header; none generates no auth option.
    * Default: "bearer"
    */
-  auth?: "bearer" | "basic" | "api_key" | "none";
+  auth?: ("bearer" | "basic" | "api_key" | "none") | (string & {});
   /**
    * Header carrying the key when auth is api_key. Required for that mode; Typeship does not invent
    * a vendor-specific header name.
    */
   api_key_header?: string;
   /**
-   * The API's name; drives the package and client names ("Braintree" gives braintree and
-   * BraintreeClient). Defaults to a name derived from the endpoint's host.
+   * The API's name; drives the package and client names ("Acme" gives acme and AcmeClient).
+   * Defaults to a name derived from the endpoint's host.
    */
   title?: string;
   /**
    * JSON representation of each custom scalar, keyed by GraphQL scalar name. Unmapped scalars
    * generate as the language's untyped JSON value and produce a warning. Unmatched keys warn.
    */
-  scalars?: Record<string, "string" | "integer" | "number" | "boolean" | "json">;
+  scalars?: Record<string, ("string" | "integer" | "number" | "boolean" | "json") | (string & {})>;
 }
 
 /**
@@ -644,25 +2175,105 @@ export interface PaginationRule {
   limit_param?: string;
 }
 
+/** Response shape for PaginationRule. */
+export interface PaginationRuleRead {
+  /** Default: "cursor" */
+  style?: ("cursor" | "cursorFromLastId" | "page" | "offset") | (string & {});
+  /** Response field holding the item array. */
+  items_field: string;
+  cursor_param?: string;
+  next_cursor_field?: string;
+  has_more_field?: string;
+  id_field?: string;
+  page_param?: string;
+  offset_param?: string;
+  limit_param?: string;
+}
+
 export interface FileStub {
   path: string;
   bytes: number;
 }
 
+export const GenerationStatus = {
+  SUCCEEDED: "succeeded",
+  FAILED: "failed",
+} as const;
+export type GenerationStatus = (typeof GenerationStatus)[keyof typeof GenerationStatus];
+
+export const GenerationTrigger = {
+  MANUAL: "manual",
+  WEBHOOK: "webhook",
+  POLL: "poll",
+  PREVIEW: "preview",
+} as const;
+export type GenerationTrigger = (typeof GenerationTrigger)[keyof typeof GenerationTrigger];
+
+export interface GenerationProvenance {
+  /** Pinned generator contract edition. */
+  generator_edition: string;
+  /** Exact engine build identifier used for replay and support. */
+  engine_build: string;
+  /**
+   * Immutable effective Target configuration used by this run; source credentials are never
+   * included.
+   */
+  resolved_config: Record<string, unknown> | null;
+  config_hash: string | null;
+  /** Resolved generator and entitlement plan used to select the emitted public surface. */
+  surface_plan: Record<string, unknown> | null;
+  surface_plan_hash: string | null;
+  entitlement_cap: number | null;
+  package_version: string | null;
+}
+
 export interface Generation {
   id: GenerationId;
   object: "generation";
   /**
-   * Present and true when the generated output was too large to inline; files_index lists paths,
+   * Present and true when the generated target was too large to inline; files_index lists paths,
+   * fetched one at a time via GET /generations/{generation_id}/file.
+   */
+  files_omitted?: boolean;
+  files_index?: FileStub[];
+  project_id: ProjectId;
+  definition_revision_id: DefinitionRevisionId | null;
+  status: GenerationStatus;
+  trigger: GenerationTrigger;
+  /** Persisted Target identity. Null only for stateless generation. */
+  target_id: TargetId | null;
+  /** Resolved generator implementation; provenance rather than resource identity. */
+  generator: GeneratorKind;
+  provenance: GenerationProvenance;
+  /** Null only for a failed or legacy generation that produced no metadata. */
+  meta: GenerationMeta | null;
+  warnings: string[];
+  /** Present on retrieve and create; omitted in lists. */
+  files?: GeneratedFile[];
+  error: string | null;
+  /** Format: date-time */
+  created_at: string;
+  request_id?: RequestId;
+}
+
+/** Request shape for Generation. */
+export interface GenerationWrite {
+  id: GenerationId;
+  /**
+   * Present and true when the generated target was too large to inline; files_index lists paths,
    * fetched one at a time via GET /generations/{generation_id}/file.
    */
   files_omitted?: boolean;
   files_index?: FileStub[];
   project_id: ProjectId;
-  status: "succeeded" | "failed";
-  trigger: "manual" | "webhook" | "poll" | "preview";
-  /** The independently delivered output this run generated. */
-  output: OutputId;
+  definition_revision_id: DefinitionRevisionId | null;
+  status: GenerationStatus;
+  trigger: GenerationTrigger;
+  /** Persisted Target identity. Null only for stateless generation. */
+  target_id: TargetId | null;
+  /** Resolved generator implementation; provenance rather than resource identity. */
+  generator: GeneratorKind;
+  provenance: GenerationProvenance;
   /** Null only for a failed or legacy generation that produced no metadata. */
   meta: GenerationMeta | null;
   warnings: string[];
@@ -671,17 +2282,147 @@ export interface Generation {
   error: string | null;
   /** Format: date-time */
   created_at: string;
+  request_id?: RequestId;
+}
+
+/** Response shape for Generation. */
+export interface GenerationRead {
+  id: GenerationId;
+  object: "generation" | (string & {});
+  /**
+   * Present and true when the generated target was too large to inline; files_index lists paths,
+   * fetched one at a time via GET /generations/{generation_id}/file.
+   */
+  files_omitted?: boolean;
+  files_index?: FileStub[];
+  project_id: ProjectId;
+  definition_revision_id: DefinitionRevisionId | null;
+  status: GenerationStatus | (string & {});
+  trigger: GenerationTrigger | (string & {});
+  /** Persisted Target identity. Null only for stateless generation. */
+  target_id: TargetId | null;
+  /** Resolved generator implementation; provenance rather than resource identity. */
+  generator: GeneratorKind | (string & {});
+  provenance: GenerationProvenance;
+  /** Null only for a failed or legacy generation that produced no metadata. */
+  meta: GenerationMetaRead | null;
+  warnings: string[];
+  /** Present on retrieve and create; omitted in lists. */
+  files?: GeneratedFile[];
+  error: string | null;
+  /** Format: date-time */
+  created_at: string;
+  request_id?: RequestId;
+}
+
+/**
+ * Generation metadata returned by collection endpoints. Generated file contents and file indexes
+ * are available only from retrieve and create operations.
+ */
+export interface GenerationSummary {
+  id: GenerationId;
+  object: "generation";
+  project_id: ProjectId;
+  definition_revision_id: DefinitionRevisionId | null;
+  status: GenerationStatus;
+  trigger: GenerationTrigger;
+  /** Persisted Target identity. Null only for stateless generation. */
+  target_id: TargetId | null;
+  /** Resolved generator implementation; provenance rather than resource identity. */
+  generator: GeneratorKind;
+  provenance: GenerationProvenance;
+  /** Null only for a failed or legacy generation that produced no metadata. */
+  meta: GenerationMeta | null;
+  warnings: string[];
+  error: string | null;
+  /** Format: date-time */
+  created_at: string;
+}
+
+/** Request shape for GenerationSummary. */
+export interface GenerationSummaryWrite {
+  id: GenerationId;
+  project_id: ProjectId;
+  definition_revision_id: DefinitionRevisionId | null;
+  status: GenerationStatus;
+  trigger: GenerationTrigger;
+  /** Persisted Target identity. Null only for stateless generation. */
+  target_id: TargetId | null;
+  /** Resolved generator implementation; provenance rather than resource identity. */
+  generator: GeneratorKind;
+  provenance: GenerationProvenance;
+  /** Null only for a failed or legacy generation that produced no metadata. */
+  meta: GenerationMeta | null;
+  warnings: string[];
+  error: string | null;
+  /** Format: date-time */
+  created_at: string;
+}
+
+/** Response shape for GenerationSummary. */
+export interface GenerationSummaryRead {
+  id: GenerationId;
+  object: "generation" | (string & {});
+  project_id: ProjectId;
+  definition_revision_id: DefinitionRevisionId | null;
+  status: GenerationStatus | (string & {});
+  trigger: GenerationTrigger | (string & {});
+  /** Persisted Target identity. Null only for stateless generation. */
+  target_id: TargetId | null;
+  /** Resolved generator implementation; provenance rather than resource identity. */
+  generator: GeneratorKind | (string & {});
+  provenance: GenerationProvenance;
+  /** Null only for a failed or legacy generation that produced no metadata. */
+  meta: GenerationMetaRead | null;
+  warnings: string[];
+  error: string | null;
+  /** Format: date-time */
+  created_at: string;
 }
 
-/** A selected output that did not generate in a multi-output run. */
+export type GenerationResponse = Generation & ResponseMetadata;
+
+/** Request shape for GenerationResponse. */
+export type GenerationResponseWrite = GenerationWrite & ResponseMetadata;
+
+/** Response shape for GenerationResponse. */
+export type GenerationResponseRead = GenerationRead & ResponseMetadata;
+
+/** A selected target that did not generate in a multi-target run. */
 export interface GenerationFailure {
-  output: OutputId;
+  target_id: TargetId;
+  generator: GeneratorKind;
   status: "failed";
   error: string;
 }
 
+/** Response shape for GenerationFailure. */
+export interface GenerationFailureRead {
+  target_id: TargetId;
+  generator: GeneratorKind | (string & {});
+  status: "failed" | (string & {});
+  error: string;
+}
+
+/**
+ * Metadata for each Target generation attempted by a Project run. Retrieve one Generation
+ * separately for generated files.
+ */
 export interface GenerationBatch {
-  data: Array<Generation | GenerationFailure>;
+  data: Array<GenerationSummary | GenerationFailure>;
+  request_id: RequestId;
+}
+
+/** Request shape for GenerationBatch. */
+export interface GenerationBatchWrite {
+  data: Array<GenerationSummaryWrite | GenerationFailure>;
+  request_id: RequestId;
+}
+
+/** Response shape for GenerationBatch. */
+export interface GenerationBatchRead {
+  data: Array<GenerationSummaryRead | GenerationFailureRead>;
+  request_id: RequestId;
 }
 
 export interface ApiKey {
@@ -695,19 +2436,58 @@ export interface ApiKey {
   last_used_at: string | null;
   /** Format: date-time */
   created_at: string;
+  request_id?: RequestId;
+}
+
+/** Response shape for ApiKey. */
+export interface ApiKeyRead {
+  id: string;
+  object: "api_key" | (string & {});
+  name: string;
+  /** Last four characters of the secret; the secret itself is never stored. */
+  last4: string;
+  revoked: boolean;
+  /** Format: date-time */
+  last_used_at: string | null;
+  /** Format: date-time */
+  created_at: string;
+  request_id?: RequestId;
 }
 
-export interface UrlSpecRevisionSource {
+export type ApiKeyResponse = ApiKey & ResponseMetadata;
+
+/** Response shape for ApiKeyResponse. */
+export type ApiKeyResponseRead = ApiKeyRead & ResponseMetadata;
+
+export interface UrlDefinitionRevisionSource {
   kind: "url";
   /** Format: uri */
   url: string;
 }
 
-export interface GithubSpecRevisionSource {
-  kind: "github";
-  /** GitHub repository in owner/name form. */
-  repository: string;
-  /** Repository-relative specification path. */
+/** Response shape for UrlDefinitionRevisionSource. */
+export interface UrlDefinitionRevisionSourceRead {
+  kind: "url" | (string & {});
+  /** Format: uri */
+  url: string;
+}
+
+export interface RepositoryDefinitionRevisionSource {
+  kind: "repository";
+  repository: RepositoryReference;
+  /** Repository-relative Definition entrypoint path. */
+  path: string;
+  /** Git ref resolved for this revision, when recorded. */
+  ref?: string | null;
+  /** Exact Git commit consumed, when recorded. */
+  commit_sha?: string | null;
+}
+
+/** Response shape for RepositoryDefinitionRevisionSource. */
+export interface RepositoryDefinitionRevisionSourceRead {
+  kind: "repository" | (string & {});
+  repository: RepositoryReferenceRead;
+  /** Repository-relative Definition entrypoint path. */
   path: string;
   /** Git ref resolved for this revision, when recorded. */
   ref?: string | null;
@@ -715,47 +2495,150 @@ export interface GithubSpecRevisionSource {
   commit_sha?: string | null;
 }
 
-export type SpecRevisionSource = UrlSpecRevisionSource | GithubSpecRevisionSource;
+export type DefinitionRevisionSource = UrlDefinitionRevisionSource | RepositoryDefinitionRevisionSource;
+
+/** Response shape for DefinitionRevisionSource. */
+export type DefinitionRevisionSourceRead = UrlDefinitionRevisionSourceRead
+  | RepositoryDefinitionRevisionSourceRead
+  | Record<string, unknown> & { kind?: string };
+
+export interface DefinitionDocument {
+  id: DefinitionDocumentId;
+  role: "entrypoint" | "reference";
+  /** Repository-relative path or same-origin URL captured in this revision. */
+  coordinate: string;
+  sha256: string;
+  size_bytes: number;
+}
+
+/** Response shape for DefinitionDocument. */
+export interface DefinitionDocumentRead {
+  id: DefinitionDocumentId;
+  role: ("entrypoint" | "reference") | (string & {});
+  /** Repository-relative path or same-origin URL captured in this revision. */
+  coordinate: string;
+  sha256: string;
+  size_bytes: number;
+}
+
+export interface DefinitionRevision {
+  id: DefinitionRevisionId;
+  object: "definition_revision";
+  project_id: ProjectId;
+  definition_id: DefinitionId;
+  format: "openapi" | "graphql";
+  document_count: number;
+  /** Present on retrieve; list responses use document_count. */
+  documents?: DefinitionDocument[];
+  /** SHA-256 digest of every document coordinate, digest, and size in the resolved graph. */
+  sha256: string;
+  /** Total bytes across all source documents. */
+  size_bytes: number;
+  /** Origin recorded when this immutable revision was created. */
+  source: DefinitionRevisionSource | null;
+  /** Format: date-time */
+  created_at: string;
+  request_id?: RequestId;
+}
 
-export interface SpecRevision {
-  id: SpecRevisionId;
-  object: "spec_revision";
+/** Response shape for DefinitionRevision. */
+export interface DefinitionRevisionRead {
+  id: DefinitionRevisionId;
+  object: "definition_revision" | (string & {});
   project_id: ProjectId;
-  /** SHA-256 digest of the exact raw specification text. */
+  definition_id: DefinitionId;
+  format: ("openapi" | "graphql") | (string & {});
+  document_count: number;
+  /** Present on retrieve; list responses use document_count. */
+  documents?: DefinitionDocumentRead[];
+  /** SHA-256 digest of every document coordinate, digest, and size in the resolved graph. */
   sha256: string;
-  /** Size of the raw specification text in bytes. */
+  /** Total bytes across all source documents. */
   size_bytes: number;
   /** Origin recorded when this immutable revision was created. */
-  source: SpecRevisionSource | null;
+  source: DefinitionRevisionSourceRead | null;
   /** Format: date-time */
   created_at: string;
+  request_id?: RequestId;
 }
 
+export type DefinitionRevisionResponse = DefinitionRevision & ResponseMetadata;
+
+/** Response shape for DefinitionRevisionResponse. */
+export type DefinitionRevisionResponseRead = DefinitionRevisionRead & ResponseMetadata;
+
 export interface ProjectList {
   object: ListObject;
-  data: Project[];
+  data: ProjectSummary[];
+  /** Whether another page is available after this one. */
+  has_more: boolean;
+  /** Pass this value as cursor to retrieve the next page; null on the last page. */
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+/** Response shape for ProjectList. */
+export interface ProjectListRead {
+  object: ListObject;
+  data: ProjectSummaryRead[];
   /** Whether another page is available after this one. */
   has_more: boolean;
   /** Pass this value as cursor to retrieve the next page; null on the last page. */
   next_cursor: string | null;
+  request_id: RequestId;
 }
 
 export interface GenerationList {
   object: ListObject;
-  data: Generation[];
+  data: GenerationSummary[];
+  /** Whether another page is available after this one. */
+  has_more: boolean;
+  /** Pass this value as cursor to retrieve the next page; null on the last page. */
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+/** Request shape for GenerationList. */
+export interface GenerationListWrite {
+  object: ListObject;
+  data: GenerationSummaryWrite[];
+  /** Whether another page is available after this one. */
+  has_more: boolean;
+  /** Pass this value as cursor to retrieve the next page; null on the last page. */
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+/** Response shape for GenerationList. */
+export interface GenerationListRead {
+  object: ListObject;
+  data: GenerationSummaryRead[];
+  /** Whether another page is available after this one. */
+  has_more: boolean;
+  /** Pass this value as cursor to retrieve the next page; null on the last page. */
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+export interface DefinitionRevisionList {
+  object: ListObject;
+  data: DefinitionRevision[];
   /** Whether another page is available after this one. */
   has_more: boolean;
   /** Pass this value as cursor to retrieve the next page; null on the last page. */
   next_cursor: string | null;
+  request_id: RequestId;
 }
 
-export interface SpecRevisionList {
+/** Response shape for DefinitionRevisionList. */
+export interface DefinitionRevisionListRead {
   object: ListObject;
-  data: SpecRevision[];
+  data: DefinitionRevisionRead[];
   /** Whether another page is available after this one. */
   has_more: boolean;
   /** Pass this value as cursor to retrieve the next page; null on the last page. */
   next_cursor: string | null;
+  request_id: RequestId;
 }
 
 export interface ApiKeyList {
@@ -765,12 +2648,48 @@ export interface ApiKeyList {
   has_more: boolean;
   /** Pass this value as cursor to retrieve the next page; null on the last page. */
   next_cursor: string | null;
+  request_id: RequestId;
+}
+
+/** Response shape for ApiKeyList. */
+export interface ApiKeyListRead {
+  object: ListObject;
+  data: ApiKeyRead[];
+  /** Whether another page is available after this one. */
+  has_more: boolean;
+  /** Pass this value as cursor to retrieve the next page; null on the last page. */
+  next_cursor: string | null;
+  request_id: RequestId;
 }
 
 export interface DeletedProject {
   id: ProjectId;
   object: "project";
   deleted: true;
+  request_id: RequestId;
+}
+
+/** Response shape for DeletedProject. */
+export interface DeletedProjectRead {
+  id: ProjectId;
+  object: "project" | (string & {});
+  deleted: true;
+  request_id: RequestId;
+}
+
+export interface DeletedTarget {
+  id: TargetId;
+  object: "target";
+  deleted: true;
+  request_id: RequestId;
+}
+
+/** Response shape for DeletedTarget. */
+export interface DeletedTargetRead {
+  id: TargetId;
+  object: "target" | (string & {});
+  deleted: true;
+  request_id: RequestId;
 }
 
 /** Stable category for deciding how to handle the error. */
@@ -791,9 +2710,16 @@ export const ErrorCode = {
   IDEMPOTENCY_KEY_REUSED: "idempotency_key_reused",
   UNAUTHORIZED: "unauthorized",
   ORGANIZATION_REQUIRED: "organization_required",
+  INSUFFICIENT_SCOPE: "insufficient_scope",
+  FORBIDDEN: "forbidden",
   NOT_FOUND: "not_found",
   SPEC_ERROR: "spec_error",
   FETCH_ERROR: "fetch_error",
+  REPOSITORY_PROVIDER_UNSUPPORTED: "repository_provider_unsupported",
+  EDITION_UNAVAILABLE: "edition_unavailable",
+  TARGET_BUSY: "target_busy",
+  DELIVERY_CONFLICT: "delivery_conflict",
+  RESOURCE_HAS_DEPENDENCIES: "resource_has_dependencies",
   PLAN_LIMIT_REACHED: "plan_limit_reached",
   PAYLOAD_TOO_LARGE: "payload_too_large",
   RATE_LIMITED: "rate_limited",
@@ -819,7 +2745,32 @@ export interface ErrorDetail {
   docs_url: string;
 }
 
+/** Response shape for ErrorDetail. */
+export interface ErrorDetailRead {
+  type: ErrorType | (string & {});
+  code: ErrorCode | (string & {});
+  /** JSON Pointer to the invalid request field, when one field caused the error. */
+  field?: string;
+  /** Human-readable explanation. Its wording may change. */
+  message: string;
+  /** Whether retrying later can succeed without changing the request. */
+  retryable: boolean;
+  /** Stable, concise recovery instruction suitable for a person or agent. */
+  suggested_action: string;
+  /**
+   * Documentation for this class of error.
+   * Format: uri
+   */
+  docs_url: string;
+}
+
 export interface ErrorModel {
   errors: ErrorDetail[];
   request_id: RequestId;
 }
+
+/** Response shape for ErrorModel. */
+export interface ErrorModelRead {
+  errors: ErrorDetailRead[];
+  request_id: RequestId;
+}