@vibexp/api-client 0.15.0 → 0.17.0

package/dist/axios/types.gen.d.ts

@@ -2469,6 +2469,10 @@ export type InvitationResponse = {
     created_at?: string;
     invited_by?: InviterInfo;
 };
+/**
+ * Bare list of team invitations returned by the list endpoint.
+ */
+export type InvitationResponseList = Array<InvitationResponse>;
 /**
  * Wrapper response for the get-invitation-by-token endpoint
  */
@@ -2962,7 +2966,7 @@ export type CursorRecentActivitiesApiResponse = {
     data: CursorRecentActivitiesResponse;
 };
 /**
- * A team (workspace) in the system. `role` and `member_count` are computed at read time for the requesting user.
+ * A team (workspace) in the system. `role`, `permissions` and `member_count` are computed at read time for the requesting user.
  */
 export type Team = {
     id: string;
@@ -2978,9 +2982,15 @@ export type Team = {
      */
     is_personal: boolean;
     /**
-     * The requesting user's role in this team: owner, admin, or member. Populated at runtime on list and single-team reads; empty string on create responses (not an enum constraint for that reason).
+     * The requesting user's role in this team: owner, admin, or member. Populated at runtime on every response that carries a team, including create (where the caller is by definition the owner). Not an enum constraint: older responses may still carry an empty string.
      */
     role?: string;
+    /**
+     * Exactly what `role` permits the requesting user to do in this team, expanded server-side from the role matrix (epic #220). Clients MUST gate their UI on these strings rather than re-deriving them from `role` — the matrix lives on the server and may change without a client release.
+     * Computed at read time for the requesting user, alongside `role`, and always present (an empty array means the role grants nothing). The values are stable API surface: renaming one is a breaking change, and they are kept byte-identical to the `internal/authz` constants by a drift test. Meanings:
+     * * `team.update` — change team name, slug or description. * `team.delete` — delete the team (owner only). * `team.transfer` — transfer ownership to another member (owner only). * `member.invite` — invite new members. * `member.remove` — remove members from the team. * `member.role.update` — change a member's role. * `project.create` — create a project in the team. * `project.update` — update any project in the team. * `project.delete` — delete any project in the team. * `resource.create` — create a prompt, memory, artifact, blueprint or agent. * `resource.update.any` — update any resource, including other members'. * `resource.delete.own` — delete a resource the caller created. * `resource.delete.any` — delete a resource created by someone else. * `feed.delete.any` — delete another member's feed post or reply (moderation).
+     */
+    permissions: Array<'team.update' | 'team.delete' | 'team.transfer' | 'member.invite' | 'member.remove' | 'member.role.update' | 'project.create' | 'project.update' | 'project.delete' | 'resource.create' | 'resource.update.any' | 'resource.delete.own' | 'resource.delete.any' | 'feed.delete.any'>;
     /**
      * Number of members in this team. Populated only on list responses; 0 on create and single-team reads.
      */
@@ -3040,6 +3050,42 @@ export type TeamMemberDetail = {
      */
     invitation_status?: 'pending' | 'accepted';
 };
+/**
+ * Request body for changing a team member's role. Only `member` and `admin` are
+ * accepted: a team has exactly one owner, and ownership moves solely through
+ * the transfer-ownership operation.
+ *
+ */
+export type UpdateTeamMemberRoleRequest = {
+    /**
+     * The role to assign to the member
+     */
+    role: 'member' | 'admin';
+};
+/**
+ * The team member after the role change
+ */
+export type UpdateTeamMemberRoleResponse = {
+    member: TeamMemberDetail;
+};
+/**
+ * Request body for transferring team ownership. The target must already be a
+ * member of the team; they become the owner and the current owner becomes an
+ * admin, in a single transaction.
+ *
+ */
+export type TransferTeamOwnershipRequest = {
+    /**
+     * User ID of the member who will become the team owner
+     */
+    new_owner_id: string;
+};
+/**
+ * The team after ownership has been transferred
+ */
+export type TransferTeamOwnershipResponse = {
+    team: Team;
+};
 /**
  * Paginated list of team members
  */
@@ -3330,6 +3376,145 @@ export type TypeListResponse = {
      */
     total_count: number;
 };
+/**
+ * A team-visible comment on a resource.
+ */
+export type Comment = {
+    /**
+     * Unique comment identifier
+     */
+    id: string;
+    /**
+     * Owning team
+     */
+    team_id: string;
+    /**
+     * Type of the commented resource (artifact, memory, prompt, or blueprint)
+     */
+    resource_type: string;
+    /**
+     * Identifier of the commented resource
+     */
+    resource_id: string;
+    /**
+     * Author of the comment
+     */
+    user_id: string;
+    /**
+     * Comment body (markdown, 1–10,000 characters)
+     */
+    content: string;
+    /**
+     * When the comment was created
+     */
+    created_at: string;
+    /**
+     * When the comment was last edited (equals created_at if never edited)
+     */
+    updated_at: string;
+};
+/**
+ * Request body for creating a comment on a resource.
+ */
+export type CreateCommentRequest = {
+    /**
+     * Type of the resource being commented on (artifact, memory, prompt, or blueprint)
+     */
+    resource_type: string;
+    /**
+     * Identifier of the resource being commented on
+     */
+    resource_id: string;
+    /**
+     * Comment body (markdown, 1–10,000 characters)
+     */
+    content: string;
+};
+/**
+ * Request body for editing a comment's content.
+ */
+export type UpdateCommentRequest = {
+    /**
+     * New comment body (markdown, 1–10,000 characters)
+     */
+    content: string;
+};
+/**
+ * A page of a resource's comments, newest first.
+ */
+export type CommentListResponse = {
+    /**
+     * Comments on the resource, newest first
+     */
+    comments: Array<Comment>;
+    /**
+     * Total number of comments on the resource
+     */
+    total_count: number;
+    /**
+     * Current page number
+     */
+    page: number;
+    /**
+     * Number of items per page
+     */
+    per_page: number;
+    /**
+     * Total number of pages
+     */
+    total_pages: number;
+};
+/**
+ * A recent comment for the homepage activity card: the comment's latest state plus its resource's resolved title and link fields. No comment body snippet. project_id is present for every resource type; slug is present for artifact/blueprint/prompt and absent for memory.
+ *
+ */
+export type RecentComment = {
+    /**
+     * Author of the comment
+     */
+    user_id: string;
+    /**
+     * When the comment was created
+     */
+    created_at: string;
+    /**
+     * When the comment was last edited (updated_at > created_at means edited)
+     */
+    updated_at: string;
+    /**
+     * Type of the commented resource
+     */
+    resource_type: string;
+    /**
+     * Identifier of the commented resource
+     */
+    resource_id: string;
+    /**
+     * Resolved display title of the resource
+     */
+    resource_title: string;
+    /**
+     * Project the resource belongs to (for building the detail link)
+     */
+    project_id?: string;
+    /**
+     * Resource slug for the detail link (absent for memories)
+     */
+    slug?: string;
+};
+/**
+ * The team's most recent comment activity, latest-activity first.
+ */
+export type RecentCommentListResponse = {
+    /**
+     * Recent comments across the team, most-recently-active first
+     */
+    comments: Array<RecentComment>;
+    /**
+     * Number of entries in the list
+     */
+    total_count: number;
+};
 export type ProjectResponse = Project & {
     /**
      * Whether the project's git URL matches a repository accessible via the team's GitHub App installation
@@ -3908,6 +4093,12 @@ export type DevLoginErrors = {
      * Invalid request body or missing required fields
      */
     400: ErrorResponse;
+    /**
+     * Sign-in denied by the access allowlist. The response `code` is the
+     * stable string `access_restricted`.
+     *
+     */
+    403: ErrorResponse;
     /**
      * Endpoint not available outside development environment
      */
@@ -9429,6 +9620,92 @@ export type RemoveTeamMemberResponses = {
     204: void;
 };
 export type RemoveTeamMemberResponse = RemoveTeamMemberResponses[keyof RemoveTeamMemberResponses];
+export type UpdateTeamMemberRoleData = {
+    body: UpdateTeamMemberRoleRequest;
+    path: {
+        /**
+         * Team identifier
+         */
+        id: string;
+        /**
+         * User ID of the member whose role is changing
+         */
+        userId: string;
+    };
+    query?: never;
+    url: '/api/v1/teams/{id}/members/{userId}/role';
+};
+export type UpdateTeamMemberRoleErrors = {
+    /**
+     * Invalid request body or role value
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden — caller is not an owner or admin of the team, or the target is the team owner
+     */
+    403: ErrorResponse;
+    /**
+     * Team not found, or the target user is not a member of the team
+     */
+    404: ErrorResponse;
+    /**
+     * Internal server error
+     */
+    500: ErrorResponse;
+};
+export type UpdateTeamMemberRoleError = UpdateTeamMemberRoleErrors[keyof UpdateTeamMemberRoleErrors];
+export type UpdateTeamMemberRoleResponses = {
+    /**
+     * Role updated successfully
+     */
+    200: UpdateTeamMemberRoleResponse;
+};
+export type UpdateTeamMemberRoleResponse2 = UpdateTeamMemberRoleResponses[keyof UpdateTeamMemberRoleResponses];
+export type TransferTeamOwnershipData = {
+    body: TransferTeamOwnershipRequest;
+    path: {
+        /**
+         * Team identifier
+         */
+        id: string;
+    };
+    query?: never;
+    url: '/api/v1/teams/{id}/transfer-ownership';
+};
+export type TransferTeamOwnershipErrors = {
+    /**
+     * Invalid request body, or the caller is already the target owner
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden — caller is not the team owner, or the team is a personal workspace
+     */
+    403: ErrorResponse;
+    /**
+     * Team not found, or the target user is not a member of the team
+     */
+    404: ErrorResponse;
+    /**
+     * Internal server error
+     */
+    500: ErrorResponse;
+};
+export type TransferTeamOwnershipError = TransferTeamOwnershipErrors[keyof TransferTeamOwnershipErrors];
+export type TransferTeamOwnershipResponses = {
+    /**
+     * Ownership transferred successfully
+     */
+    200: TransferTeamOwnershipResponse;
+};
+export type TransferTeamOwnershipResponse2 = TransferTeamOwnershipResponses[keyof TransferTeamOwnershipResponses];
 export type ListTeamInvitationsData = {
     body?: never;
     path: {
@@ -9463,7 +9740,7 @@ export type ListTeamInvitationsResponses = {
     /**
      * Invitations retrieved successfully
      */
-    200: Array<InvitationResponse>;
+    200: InvitationResponseList;
 };
 export type ListTeamInvitationsResponse = ListTeamInvitationsResponses[keyof ListTeamInvitationsResponses];
 export type SendTeamInvitationsData = {
@@ -9512,7 +9789,7 @@ export type SendTeamInvitationsResponses = {
     /**
      * Invitations created successfully (the `token`, `team_name` and `invited_by` fields are not populated on this response)
      */
-    201: Array<InvitationResponse>;
+    201: InvitationResponseList;
 };
 export type SendTeamInvitationsResponse = SendTeamInvitationsResponses[keyof SendTeamInvitationsResponses];
 export type RevokeTeamInvitationData = {
@@ -10129,6 +10406,233 @@ export type DeleteTypeResponses = {
     204: void;
 };
 export type DeleteTypeResponse = DeleteTypeResponses[keyof DeleteTypeResponses];
+export type ListCommentsData = {
+    body?: never;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query: {
+        /**
+         * Type of the commented resource (artifact, memory, prompt, or blueprint)
+         */
+        resource_type: string;
+        /**
+         * Identifier of the commented resource
+         */
+        resource_id: string;
+        /**
+         * Page number (1-based)
+         */
+        page?: number;
+        /**
+         * Items per page
+         */
+        limit?: number;
+    };
+    url: '/api/v1/{team_id}/comments';
+};
+export type ListCommentsErrors = {
+    /**
+     * Invalid resource_type or query parameters
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller is not a member of the team
+     */
+    403: ErrorResponse;
+    /**
+     * Failed to list comments
+     */
+    500: ErrorResponse;
+};
+export type ListCommentsError = ListCommentsErrors[keyof ListCommentsErrors];
+export type ListCommentsResponses = {
+    /**
+     * Comments retrieved successfully
+     */
+    200: CommentListResponse;
+};
+export type ListCommentsResponse = ListCommentsResponses[keyof ListCommentsResponses];
+export type CreateCommentData = {
+    body: CreateCommentRequest;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/comments';
+};
+export type CreateCommentErrors = {
+    /**
+     * Invalid resource_type or content
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller may not comment in the team
+     */
+    403: ErrorResponse;
+    /**
+     * Target resource not found in the team
+     */
+    404: ErrorResponse;
+    /**
+     * Failed to create comment
+     */
+    500: ErrorResponse;
+};
+export type CreateCommentError = CreateCommentErrors[keyof CreateCommentErrors];
+export type CreateCommentResponses = {
+    /**
+     * Comment created successfully
+     */
+    201: Comment;
+};
+export type CreateCommentResponse = CreateCommentResponses[keyof CreateCommentResponses];
+export type ListRecentCommentsData = {
+    body?: never;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query?: {
+        /**
+         * Maximum number of entries to return
+         */
+        limit?: number;
+    };
+    url: '/api/v1/{team_id}/comments/recent';
+};
+export type ListRecentCommentsErrors = {
+    /**
+     * Invalid query parameters
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller is not a member of the team
+     */
+    403: ErrorResponse;
+    /**
+     * Failed to list recent comments
+     */
+    500: ErrorResponse;
+};
+export type ListRecentCommentsError = ListRecentCommentsErrors[keyof ListRecentCommentsErrors];
+export type ListRecentCommentsResponses = {
+    /**
+     * Recent comments retrieved successfully
+     */
+    200: RecentCommentListResponse;
+};
+export type ListRecentCommentsResponse = ListRecentCommentsResponses[keyof ListRecentCommentsResponses];
+export type DeleteCommentData = {
+    body?: never;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+        /**
+         * Comment identifier
+         */
+        comment_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/comments/{comment_id}';
+};
+export type DeleteCommentErrors = {
+    /**
+     * comment_id is not a valid UUID
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller may not delete this comment
+     */
+    403: ErrorResponse;
+    /**
+     * Comment not found in the team
+     */
+    404: ErrorResponse;
+    /**
+     * Failed to delete comment
+     */
+    500: ErrorResponse;
+};
+export type DeleteCommentError = DeleteCommentErrors[keyof DeleteCommentErrors];
+export type DeleteCommentResponses = {
+    /**
+     * Comment deleted (no content)
+     */
+    204: void;
+};
+export type DeleteCommentResponse = DeleteCommentResponses[keyof DeleteCommentResponses];
+export type UpdateCommentData = {
+    body: UpdateCommentRequest;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+        /**
+         * Comment identifier
+         */
+        comment_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/comments/{comment_id}';
+};
+export type UpdateCommentErrors = {
+    /**
+     * Invalid content
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller is not the comment's author
+     */
+    403: ErrorResponse;
+    /**
+     * Comment not found in the team
+     */
+    404: ErrorResponse;
+    /**
+     * Failed to update comment
+     */
+    500: ErrorResponse;
+};
+export type UpdateCommentError = UpdateCommentErrors[keyof UpdateCommentErrors];
+export type UpdateCommentResponses = {
+    /**
+     * Comment updated successfully
+     */
+    200: Comment;
+};
+export type UpdateCommentResponse = UpdateCommentResponses[keyof UpdateCommentResponses];
 export type ListEmbeddingProvidersData = {
     body?: never;
     path: {