@vibexp/api-client 0.102.0 → 0.104.0

package/dist/schema.d.ts

@@ -444,6 +444,58 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/{team_id}/artifacts/{project_id}/{slug}/lock": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Lock a artifact
+         * @description Locks the artifact to mark it as in use (epic #1285). Any team member may
+         *     lock a resource and must say why in `comment`. Locking is not an edit: it
+         *     does not change `updated_at` or create a version. Locking a artifact that
+         *     is already locked returns 409 and leaves the existing lock untouched.
+         */
+        post: operations["lockArtifact"];
+        /**
+         * Unlock a artifact
+         * @description Releases the lock on the artifact (epic #1285). The member who placed the
+         *     lock may release it; so may a member whose role holds the
+         *     `resource.unlock.any` permission (owners and admins). Unlocking a artifact
+         *     that is not locked returns 409.
+         */
+        delete: operations["unlockArtifact"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/{team_id}/artifacts/{project_id}/{slug}/lock/history": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get the lock history of a artifact
+         * @description Returns the artifact's lock and unlock events, newest first (epic #1285).
+         *     Any team member may read it. The history is not paginated: at most the
+         *     100 most recent events are returned.
+         */
+        get: operations["getArtifactLockHistory"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/{team_id}/attachments": {
         parameters: {
             query?: never;
@@ -908,6 +960,58 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/{team_id}/blueprints/{project_id}/{slug}/lock": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Lock a blueprint
+         * @description Locks the blueprint to mark it as in use (epic #1285). Any team member may
+         *     lock a resource and must say why in `comment`. Locking is not an edit: it
+         *     does not change `updated_at` or create a version. Locking a blueprint that
+         *     is already locked returns 409 and leaves the existing lock untouched.
+         */
+        post: operations["lockBlueprint"];
+        /**
+         * Unlock a blueprint
+         * @description Releases the lock on the blueprint (epic #1285). The member who placed the
+         *     lock may release it; so may a member whose role holds the
+         *     `resource.unlock.any` permission (owners and admins). Unlocking a blueprint
+         *     that is not locked returns 409.
+         */
+        delete: operations["unlockBlueprint"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/{team_id}/blueprints/{project_id}/{slug}/lock/history": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get the lock history of a blueprint
+         * @description Returns the blueprint's lock and unlock events, newest first (epic #1285).
+         *     Any team member may read it. The history is not paginated: at most the
+         *     100 most recent events are returned.
+         */
+        get: operations["getBlueprintLockHistory"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/{team_id}/blueprints/{project_id}/{slug}/versions": {
         parameters: {
             query?: never;
@@ -1041,6 +1145,58 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/{team_id}/prompts/{slug}/lock": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Lock a prompt
+         * @description Locks the prompt to mark it as in use (epic #1285). Any team member may
+         *     lock a resource and must say why in `comment`. Locking is not an edit: it
+         *     does not change `updated_at` or create a version. Locking a prompt that
+         *     is already locked returns 409 and leaves the existing lock untouched.
+         */
+        post: operations["lockPrompt"];
+        /**
+         * Unlock a prompt
+         * @description Releases the lock on the prompt (epic #1285). The member who placed the
+         *     lock may release it; so may a member whose role holds the
+         *     `resource.unlock.any` permission (owners and admins). Unlocking a prompt
+         *     that is not locked returns 409.
+         */
+        delete: operations["unlockPrompt"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/{team_id}/prompts/{slug}/lock/history": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get the lock history of a prompt
+         * @description Returns the prompt's lock and unlock events, newest first (epic #1285).
+         *     Any team member may read it. The history is not paginated: at most the
+         *     100 most recent events are returned.
+         */
+        get: operations["getPromptLockHistory"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/{team_id}/prompts/{slug}/placeholders": {
         parameters: {
             query?: never;
@@ -6396,6 +6552,8 @@ export interface components {
             /** @description Identity of the project this resource belongs to, so a client can render a project label without a second request (issue #929). Guaranteed on the single-resource detail GET; null in list responses, and null wherever the server has not resolved it — a project that no longer exists, or one belonging to another team. `project_id` remains the authoritative field: a client must not read a null here as "this resource has no project". */
             project: components["schemas"]["ProjectSummary"] | null;
             freshness?: components["schemas"]["ResourceFreshnessState"];
+            /** @description The lock held on this resource (epic #1285), or null when it is not locked. Present on every read, list and write response. Always null on a prompt read through a share link: lock state is internal to the team. */
+            lock: components["schemas"]["ResourceLock"] | null;
         };
         CreatePromptRequest: {
             /** @example Code Review Template */
@@ -7939,6 +8097,8 @@ export interface components {
             /** @description Identity of the project this resource belongs to, so a client can render a project label without a second request (issue #929). Guaranteed on the single-resource detail GET; null in list responses, and null wherever the server has not resolved it — a project that no longer exists, or one belonging to another team. `project_id` remains the authoritative field: a client must not read a null here as "this resource has no project". */
             project: components["schemas"]["ProjectSummary"] | null;
             freshness?: components["schemas"]["ResourceFreshnessState"];
+            /** @description The lock held on this resource (epic #1285), or null when it is not locked. Present on every read, list and write response. */
+            lock: components["schemas"]["ResourceLock"] | null;
         };
         CreateArtifactRequest: {
             /**
@@ -8549,6 +8709,74 @@ export interface components {
              */
             slug: string;
         };
+        /** @description A user named on a resource lock or a lock history event. */
+        ResourceLockActor: {
+            /**
+             * @description ID of the user.
+             * @example 01234567-89ab-cdef-0123-456789abcdef
+             */
+            user_id: string;
+            /**
+             * @description The user's display name.
+             * @example Ada Lovelace
+             */
+            display_name: string;
+        };
+        /** @description The lock held on a prompt, blueprint or artifact. A resource carries one while it is locked and `null` when it is not. */
+        ResourceLock: {
+            /** @description The team member holding the lock. */
+            locked_by: components["schemas"]["ResourceLockActor"];
+            /**
+             * @description Why the resource was locked, as given by the locker.
+             * @example Used by the nightly release agent
+             */
+            comment: string;
+            /**
+             * Format: date-time
+             * @description When the lock was taken.
+             * @example 2026-10-11T10:15:30Z
+             */
+            locked_at: string;
+        };
+        LockResourceRequest: {
+            /**
+             * @description Why the resource is being locked. Required: surrounding whitespace is trimmed, and a comment that is then empty or longer than 500 characters is rejected with 400.
+             * @example Used by the nightly release agent
+             */
+            comment: string;
+        };
+        /** @description One entry of a resource's append-only lock history. */
+        ResourceLockEvent: {
+            /**
+             * Format: uuid
+             * @description ID of the history event.
+             * @example 123e4567-e89b-12d3-a456-426614174000
+             */
+            id: string;
+            /**
+             * @description Whether the resource was locked or unlocked.
+             * @example lock
+             * @enum {string}
+             */
+            action: "lock" | "unlock";
+            /** @description Who locked or unlocked the resource. Null once that user's account has been deleted. */
+            actor: components["schemas"]["ResourceLockActor"] | null;
+            /**
+             * @description The lock comment for a `lock` event; null for an `unlock`.
+             * @example Used by the nightly release agent
+             */
+            comment: string | null;
+            /**
+             * Format: date-time
+             * @description When the event happened.
+             * @example 2026-10-11T10:15:30Z
+             */
+            created_at: string;
+        };
+        ResourceLockHistoryResponse: {
+            /** @description Lock and unlock events, newest first. Not paginated: at most the 100 most recent events are returned. */
+            events: components["schemas"]["ResourceLockEvent"][];
+        };
         CreateProjectRequest: {
             /**
              * @description Human-readable name of the project
@@ -9191,6 +9419,8 @@ export interface components {
             /** @description Identity of the project this resource belongs to, so a client can render a project label without a second request (issue #929). Guaranteed on the single-resource detail GET; null in list responses, and null wherever the server has not resolved it — a project that no longer exists, or one belonging to another team. `project_id` remains the authoritative field: a client must not read a null here as "this resource has no project". */
             project: components["schemas"]["ProjectSummary"] | null;
             freshness?: components["schemas"]["ResourceFreshnessState"];
+            /** @description The lock held on this resource (epic #1285), or null when it is not locked. Present on every read, list and write response. */
+            lock: components["schemas"]["ResourceLock"] | null;
         };
         /** @description Read-only import provenance; present only for imported blueprints. */
         BlueprintSource: {
@@ -10046,14 +10276,14 @@ export interface components {
             /**
              * @description Exactly what `role` permits the requesting user to do in this team, expanded server-side from the role matrix (epic #220). Clients MUST gate their UI on these strings rather than re-deriving them from `role` — the matrix lives on the server and may change without a client release.
              *     Computed at read time for the requesting user, alongside `role`, and always present (an empty array means the role grants nothing). The values are stable API surface: renaming one is a breaking change, and they are kept byte-identical to the `internal/authz` constants by a drift test. Meanings:
-             *     * `team.update` — change team name, slug or description. * `team.delete` — delete the team (owner only). * `team.transfer` — transfer ownership to another member (owner only). * `team.settings.update` — change team-level configuration, such as search ranking. * `member.invite` — invite new members. * `member.remove` — remove members from the team. * `member.role.update` — change a member's role. * `project.create` — create a project in the team. * `project.update` — update any project in the team. * `project.delete` — delete any project in the team. * `resource.create` — create a prompt, memory, artifact, blueprint or agent. * `resource.update.any` — update any resource, including other members'. * `resource.delete.own` — delete a resource the caller created. * `resource.delete.any` — delete a resource created by someone else. * `feed.delete.any` — delete another member's feed post or reply (moderation).
+             *     * `team.update` — change team name, slug or description. * `team.delete` — delete the team (owner only). * `team.transfer` — transfer ownership to another member (owner only). * `team.settings.update` — change team-level configuration, such as search ranking. * `member.invite` — invite new members. * `member.remove` — remove members from the team. * `member.role.update` — change a member's role. * `project.create` — create a project in the team. * `project.update` — update any project in the team. * `project.delete` — delete any project in the team. * `resource.create` — create a prompt, memory, artifact, blueprint or agent. * `resource.update.any` — update any resource, including other members'. * `resource.delete.own` — delete a resource the caller created. * `resource.delete.any` — delete a resource created by someone else. * `resource.unlock.any` — unlock a resource locked by someone else. * `feed.delete.any` — delete another member's feed post or reply (moderation).
              * @example [
              *       "resource.create",
              *       "resource.update.any",
              *       "resource.delete.own"
              *     ]
              */
-            permissions: ("team.update" | "team.delete" | "team.transfer" | "team.settings.update" | "member.invite" | "member.remove" | "member.role.update" | "project.create" | "project.update" | "project.delete" | "resource.create" | "resource.update.any" | "resource.delete.own" | "resource.delete.any" | "feed.delete.any")[];
+            permissions: ("team.update" | "team.delete" | "team.transfer" | "team.settings.update" | "member.invite" | "member.remove" | "member.role.update" | "project.create" | "project.update" | "project.delete" | "resource.create" | "resource.update.any" | "resource.delete.own" | "resource.delete.any" | "resource.unlock.any" | "feed.delete.any")[];
             /**
              * @description Number of members in this team. Populated only on list responses; 0 on create and single-team reads.
              * @example 5
@@ -15385,6 +15615,8 @@ export interface operations {
     listArtifacts: {
         parameters: {
             query?: {
+                /** @description Filter by lock state (epic #1285): `true` returns only locked resources, `false` only unlocked ones. Omit for no lock filtering. Returns 400 for a value that is not a boolean. */
+                locked?: boolean;
                 /** @description Filter to resources currently flagged stale by the team's freshness rules (epic #726). Omit for no freshness filtering. Returns 400 for any other value — a silently ignored filter would return the full list, which looks like a legitimate answer. */
                 freshness?: "stale";
                 /** @description Filter by project ID */
@@ -15568,6 +15800,8 @@ export interface operations {
     listArtifactsByProject: {
         parameters: {
             query?: {
+                /** @description Filter by lock state (epic #1285): `true` returns only locked resources, `false` only unlocked ones. Omit for no lock filtering. Returns 400 for a value that is not a boolean. */
+                locked?: boolean;
                 /** @description Filter to resources currently flagged stale by the team's freshness rules (epic #726). Omit for no freshness filtering. Returns 400 for any other value — a silently ignored filter would return the full list, which looks like a legitimate answer. */
                 freshness?: "stale";
                 /** @description Filter by status: one of the system statuses or one of the team's custom statuses for this resource type. Returns 400 for unknown values. */
@@ -15826,33 +16060,36 @@ export interface operations {
             };
         };
     };
-    listAttachments: {
+    lockArtifact: {
         parameters: {
-            query: {
-                /** @description Type of the owning resource (e.g. "artifact") */
-                owner_type: string;
-                /** @description UUID of the owning resource */
-                owner_id: string;
-            };
+            query?: never;
             header?: never;
             path: {
                 /** @description Team identifier */
                 team_id: string;
+                /** @description UUID of the project */
+                project_id: string;
+                /** @description Artifact slug */
+                slug: string;
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["LockResourceRequest"];
+            };
+        };
         responses: {
-            /** @description Attachments retrieved successfully */
+            /** @description Artifact locked; the updated artifact is returned */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["AttachmentListResponse"];
+                    "application/json": components["schemas"]["Artifact"];
                 };
             };
-            /** @description Missing or invalid owner_type / owner_id */
+            /** @description Bad request: a malformed path parameter or request body, or a missing, blank or too long comment */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -15870,7 +16107,16 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Unsupported owner_type, or the owning resource was not found / is not accessible */
+            /** @description Forbidden: not a member of the team */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Artifact not found */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -15879,55 +16125,52 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The artifact is already locked (code `RESOURCE_LOCKED`) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
-    uploadAttachment: {
+    unlockArtifact: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description Team identifier */
                 team_id: string;
+                /** @description UUID of the project */
+                project_id: string;
+                /** @description Artifact slug */
+                slug: string;
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "multipart/form-data": {
-                    /**
-                     * @description Type of the owning resource (e.g. "artifact")
-                     * @example artifact
-                     */
-                    owner_type: string;
-                    /**
-                     * Format: uuid
-                     * @description UUID of the owning resource
-                     */
-                    owner_id: string;
-                    /**
-                     * Format: binary
-                     * @description The file to attach
-                     */
-                    file: string;
-                    /**
-                     * @description Optional path relative to the owner's directory (e.g. "scripts/helper.py"). Must be relative — no leading "/", no "..", no backslashes. Unique per owner. file_name stays the basename.
-                     * @example scripts/helper.py
-                     */
-                    relative_path?: string;
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Attachment uploaded successfully */
-            201: {
+            /** @description Artifact unlocked; the updated artifact is returned */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Attachment"];
+                    "application/json": components["schemas"]["Artifact"];
                 };
             };
-            /** @description Missing fields/file, invalid owner_id, file too large, cumulative limit exceeded, or disallowed type */
+            /** @description Bad request: a malformed path parameter */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -15945,7 +16188,16 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Unsupported owner_type, or the owning resource was not found / is not accessible */
+            /** @description Forbidden: not a member of the team, or the lock was placed by someone else and the caller's role does not hold `resource.unlock.any` */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Artifact not found */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -15954,8 +16206,17 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Attachment storage is not available */
-            503: {
+            /** @description The artifact is not locked (code `RESOURCE_NOT_LOCKED`) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -15965,30 +16226,32 @@ export interface operations {
             };
         };
     };
-    downloadAttachment: {
+    getArtifactLockHistory: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description Team identifier */
                 team_id: string;
-                /** @description Attachment identifier */
-                id: string;
+                /** @description UUID of the project */
+                project_id: string;
+                /** @description Artifact slug */
+                slug: string;
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Attachment file stream */
+            /** @description Lock history retrieved successfully */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/octet-stream": string;
+                    "application/json": components["schemas"]["ResourceLockHistoryResponse"];
                 };
             };
-            /** @description Invalid attachment id */
+            /** @description Bad request: a malformed path parameter */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -16006,8 +16269,8 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Attachment not found, or its owner is not accessible */
-            404: {
+            /** @description Forbidden: not a member of the team */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -16015,7 +16278,216 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Attachment storage is not available */
+            /** @description Artifact not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    listAttachments: {
+        parameters: {
+            query: {
+                /** @description Type of the owning resource (e.g. "artifact") */
+                owner_type: string;
+                /** @description UUID of the owning resource */
+                owner_id: string;
+            };
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Attachments retrieved successfully */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AttachmentListResponse"];
+                };
+            };
+            /** @description Missing or invalid owner_type / owner_id */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unsupported owner_type, or the owning resource was not found / is not accessible */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    uploadAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "multipart/form-data": {
+                    /**
+                     * @description Type of the owning resource (e.g. "artifact")
+                     * @example artifact
+                     */
+                    owner_type: string;
+                    /**
+                     * Format: uuid
+                     * @description UUID of the owning resource
+                     */
+                    owner_id: string;
+                    /**
+                     * Format: binary
+                     * @description The file to attach
+                     */
+                    file: string;
+                    /**
+                     * @description Optional path relative to the owner's directory (e.g. "scripts/helper.py"). Must be relative — no leading "/", no "..", no backslashes. Unique per owner. file_name stays the basename.
+                     * @example scripts/helper.py
+                     */
+                    relative_path?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Attachment uploaded successfully */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Attachment"];
+                };
+            };
+            /** @description Missing fields/file, invalid owner_id, file too large, cumulative limit exceeded, or disallowed type */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unsupported owner_type, or the owning resource was not found / is not accessible */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Attachment storage is not available */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    downloadAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+                /** @description Attachment identifier */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Attachment file stream */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/octet-stream": string;
+                };
+            };
+            /** @description Invalid attachment id */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Attachment not found, or its owner is not accessible */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Attachment storage is not available */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -17280,6 +17752,8 @@ export interface operations {
     listSpecLibraries: {
         parameters: {
             query?: {
+                /** @description Filter by lock state (epic #1285): `true` returns only locked resources, `false` only unlocked ones. Omit for no lock filtering. Returns 400 for a value that is not a boolean. */
+                locked?: boolean;
                 /** @description Filter to resources currently flagged stale by the team's freshness rules (epic #726). Omit for no freshness filtering. Returns 400 for any other value — a silently ignored filter would return the full list, which looks like a legitimate answer. */
                 freshness?: "stale";
                 /** @description Filter by project name */
@@ -17481,6 +17955,8 @@ export interface operations {
     listSpecLibrariesByProject: {
         parameters: {
             query?: {
+                /** @description Filter by lock state (epic #1285): `true` returns only locked resources, `false` only unlocked ones. Omit for no lock filtering. Returns 400 for a value that is not a boolean. */
+                locked?: boolean;
                 /** @description Filter to resources currently flagged stale by the team's freshness rules (epic #726). Omit for no freshness filtering. Returns 400 for any other value — a silently ignored filter would return the full list, which looks like a legitimate answer. */
                 freshness?: "stale";
                 /** @description Filter by status: one of the system statuses or one of the team's custom statuses for this resource type. Returns 400 for unknown values. */
@@ -17768,29 +18244,42 @@ export interface operations {
             };
         };
     };
-    listBlueprintVersions: {
+    lockBlueprint: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description Team identifier */
                 team_id: string;
-                /** @description UUID of the project */
+                /** @description Project identifier (URL-encoded) */
                 project_id: string;
-                /** @description Blueprint slug */
+                /** @description Blueprint slug (URL-encoded) */
                 slug: string;
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["LockResourceRequest"];
+            };
+        };
         responses: {
-            /** @description Blueprint versions retrieved successfully */
+            /** @description Blueprint locked; the updated blueprint is returned */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["BlueprintVersionListResponse"];
+                    "application/json": components["schemas"]["BlueprintDetail"];
+                };
+            };
+            /** @description Bad request: a malformed path parameter or request body, or a missing, blank or too long comment */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
             /** @description Unauthorized */
@@ -17802,7 +18291,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Forbidden (not a team member) */
+            /** @description Forbidden: not a member of the team */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -17820,33 +18309,258 @@ export interface operations {
                     "application/problem+json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The blueprint is already locked (code `RESOURCE_LOCKED`) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
-    getBlueprintVersion: {
+    unlockBlueprint: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description Team identifier */
                 team_id: string;
-                /** @description UUID of the project */
+                /** @description Project identifier (URL-encoded) */
                 project_id: string;
-                /** @description Blueprint slug */
+                /** @description Blueprint slug (URL-encoded) */
                 slug: string;
-                /** @description Version number */
-                version_number: number;
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Blueprint version retrieved successfully */
+            /** @description Blueprint unlocked; the updated blueprint is returned */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ContentVersion"];
+                    "application/json": components["schemas"]["BlueprintDetail"];
+                };
+            };
+            /** @description Bad request: a malformed path parameter */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Forbidden: not a member of the team, or the lock was placed by someone else and the caller's role does not hold `resource.unlock.any` */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Blueprint not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The blueprint is not locked (code `RESOURCE_NOT_LOCKED`) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    getBlueprintLockHistory: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+                /** @description Project identifier (URL-encoded) */
+                project_id: string;
+                /** @description Blueprint slug (URL-encoded) */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Lock history retrieved successfully */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ResourceLockHistoryResponse"];
+                };
+            };
+            /** @description Bad request: a malformed path parameter */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Forbidden: not a member of the team */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Blueprint not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    listBlueprintVersions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+                /** @description UUID of the project */
+                project_id: string;
+                /** @description Blueprint slug */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Blueprint versions retrieved successfully */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["BlueprintVersionListResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Forbidden (not a team member) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Blueprint not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    getBlueprintVersion: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+                /** @description UUID of the project */
+                project_id: string;
+                /** @description Blueprint slug */
+                slug: string;
+                /** @description Version number */
+                version_number: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Blueprint version retrieved successfully */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ContentVersion"];
                 };
             };
             /** @description Invalid version_number */
@@ -17955,6 +18669,8 @@ export interface operations {
     listPrompts: {
         parameters: {
             query?: {
+                /** @description Filter by lock state (epic #1285): `true` returns only locked resources, `false` only unlocked ones. Omit for no lock filtering. Returns 400 for a value that is not a boolean. */
+                locked?: boolean;
                 /** @description Filter to resources currently flagged stale by the team's freshness rules (epic #726). Omit for no freshness filtering. Returns 400 for any other value — a silently ignored filter would return the full list, which looks like a legitimate answer. */
                 freshness?: "stale";
                 /** @description Page number for pagination */
@@ -18308,6 +19024,238 @@ export interface operations {
             };
         };
     };
+    lockPrompt: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+                /** @description Prompt slug identifier */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["LockResourceRequest"];
+            };
+        };
+        responses: {
+            /** @description Prompt locked; the updated prompt is returned */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Prompt"];
+                };
+            };
+            /** @description Bad request: a malformed path parameter or request body, or a missing, blank or too long comment */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Forbidden: not a member of the team */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Prompt not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The prompt is already locked (code `RESOURCE_LOCKED`) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    unlockPrompt: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+                /** @description Prompt slug identifier */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Prompt unlocked; the updated prompt is returned */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Prompt"];
+                };
+            };
+            /** @description Bad request: a malformed path parameter */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Forbidden: not a member of the team, or the lock was placed by someone else and the caller's role does not hold `resource.unlock.any` */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Prompt not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The prompt is not locked (code `RESOURCE_NOT_LOCKED`) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    getPromptLockHistory: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Team identifier */
+                team_id: string;
+                /** @description Prompt slug identifier */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Lock history retrieved successfully */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ResourceLockHistoryResponse"];
+                };
+            };
+            /** @description Bad request: a malformed path parameter */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Forbidden: not a member of the team */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Prompt not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     getPromptPlaceholders: {
         parameters: {
             query?: never;