@vibexp/api-client 0.41.0 → 0.43.0

package/dist/axios/types.gen.d.ts

@@ -935,6 +935,300 @@ export type ValidateModelProviderResponse = {
         error_details?: string;
     };
 };
+/**
+ * A team's own GitHub App registration. Never carries secret values.
+ */
+export type GitHubAppConfig = {
+    id: string;
+    /**
+     * Team that owns this App registration.
+     */
+    team_id: string;
+    /**
+     * Who registered the App. Informational only — the team is the tenancy boundary, and no read is scoped by this field.
+     */
+    user_id?: string | null;
+    /**
+     * GitHub's numeric App id, carried as a string.
+     */
+    app_id: string;
+    /**
+     * The App's slug, which builds its install URL (https://github.com/apps/{app_slug}/installations/new).
+     */
+    app_slug: string;
+    /**
+     * The App's OAuth client id. Not a secret — GitHub shows it on the App settings page, and it is echoed back so an operator can confirm which App is wired up.
+     */
+    client_id: string;
+    created_at: string;
+    updated_at: string;
+    /**
+     * Optimistic-concurrency version counter, incremented on each update.
+     */
+    version: number;
+};
+/**
+ * The App registration as returned by every read. Secrets are replaced by has_* booleans; webhook_url is the URL to paste into the App's settings.
+ */
+export type GitHubAppConfigResponse = GitHubAppConfig & {
+    /**
+     * Whether a private key is stored. The key itself is never returned.
+     */
+    has_private_key: boolean;
+    /**
+     * Whether a client secret is stored. The secret itself is never returned.
+     */
+    has_client_secret: boolean;
+    /**
+     * Whether a webhook secret is stored. The secret is disclosed only once, when it is generated; recovering a lost one means rotating it.
+     */
+    has_webhook_secret: boolean;
+    /**
+     * The webhook URL for this App, carrying its opaque routing token. Paste it into the App's settings on GitHub. Empty when the instance has no public base URL configured.
+     */
+    webhook_url: string;
+};
+/**
+ * The one and only payload that carries a plaintext webhook secret. Returned by create and by webhook-secret rotation; every subsequent read returns GitHubAppConfigResponse, which cannot carry it.
+ */
+export type CreateGitHubAppConfigResponse = GitHubAppConfigResponse & {
+    /**
+     * The generated webhook secret, shown exactly once. Paste it into the App's settings alongside the webhook URL; it cannot be read back.
+     */
+    webhook_secret: string;
+};
+/**
+ * Registers a team's GitHub App. There is deliberately no webhook_secret field — the server generates it and returns it once.
+ */
+export type CreateGitHubAppConfigRequest = {
+    /**
+     * GitHub's numeric App id.
+     */
+    app_id: string;
+    /**
+     * The App's slug, used to build its install URL.
+     */
+    app_slug: string;
+    /**
+     * The App's OAuth client id.
+     */
+    client_id: string;
+    /**
+     * The App's RSA private key, as raw PEM or base64-encoded PEM. Encrypted at rest and never returned.
+     */
+    private_key: string;
+    /**
+     * The App's OAuth client secret. Encrypted at rest and never returned.
+     */
+    client_secret: string;
+};
+/**
+ * Edits the team's App registration. Every field is optional; an omitted field keeps the stored value. An explicitly EMPTY value is rejected rather than treated as a clear — a GitHub App with no private key is not a meaningful state, so a blank value is far more likely a client bug than an intent. webhook_secret is absent for the same reason it is absent from create: it is server-generated, and replaced through the rotation endpoint.
+ */
+export type UpdateGitHubAppConfigRequest = {
+    app_id?: string;
+    app_slug?: string;
+    client_id?: string;
+    /**
+     * Replacement RSA private key (raw PEM or base64-encoded PEM).
+     */
+    private_key?: string;
+    /**
+     * Replacement OAuth client secret.
+     */
+    client_secret?: string;
+};
+/**
+ * Result of probing GitHub with the stored credentials. A failed probe is reported here with is_valid=false, not as an HTTP error — a wrong key is user-correctable, not a server fault. error_details is always one of a fixed set of categories so the response cannot become an oracle for what the server could reach; the real upstream error is logged server-side only.
+ */
+export type ValidateGitHubAppConfigResponse = {
+    is_valid: boolean;
+    /**
+     * Human-readable summary of the outcome.
+     */
+    message: string;
+    /**
+     * The slug GitHub reports for the authenticated App, echoed so a mismatch with the stored value is visible rather than silently producing a broken install URL later.
+     */
+    app_slug?: string;
+    /**
+     * The App's granted permissions, so a missing contents/metadata read can be surfaced before it breaks an import.
+     */
+    permissions?: {
+        [key: string]: string;
+    };
+    details?: ValidateGitHubAppConfigDetails;
+};
+/**
+ * Fixed-category diagnostics for a validation probe.
+ */
+export type ValidateGitHubAppConfigDetails = {
+    response_time_ms?: number;
+    /**
+     * HTTP status GitHub returned, when the probe got that far.
+     */
+    status_code?: number;
+    /**
+     * Fixed failure category. Never carries upstream error text, which would reveal what the server could and could not reach.
+     */
+    error_details?: 'invalid_credentials' | 'app_not_found' | 'slug_mismatch' | 'insufficient_permissions' | 'connection_failed';
+};
+/**
+ * Non-secret SMTP settings. The password is the provider's secret.
+ */
+export type SmtpProviderSettings = {
+    /**
+     * SMTP server hostname.
+     */
+    host: string;
+    /**
+     * SMTP port, as a string. Must parse to 1-65535.
+     */
+    port: string;
+    /**
+     * SMTP username, when the server requires authentication.
+     */
+    username?: string;
+};
+/**
+ * Non-secret Mailgun settings. The sending key is the provider's secret.
+ */
+export type MailgunProviderSettings = {
+    /**
+     * The Mailgun sending domain. Must be a bare domain, not a URL.
+     */
+    domain: string;
+    /**
+     * Optional API base URL, to select a non-US region (for example https://api.eu.mailgun.net/v3). A missing /v2|/v3|/v4 suffix is normalised to /v3.
+     */
+    base_url?: string;
+};
+/**
+ * Non-secret Postmark settings. The server token is the provider's secret.
+ */
+export type PostmarkProviderSettings = {
+    /**
+     * Postmark message stream to send on. Defaults to "outbound", the default transactional stream.
+     */
+    message_stream?: string;
+};
+/**
+ * Per-type non-secret settings. Exactly the block matching `provider_type` may be present; a block belonging to another type is rejected rather than ignored. SendGrid has no block — its only configuration is its API key, which is the secret.
+ */
+export type TeamEmailProviderSettings = {
+    smtp?: SmtpProviderSettings;
+    mailgun?: MailgunProviderSettings;
+    postmark?: PostmarkProviderSettings;
+};
+/**
+ * The team's email provider configuration. This is an upsert, so the same body creates or replaces.
+ */
+export type UpsertTeamEmailProviderRequest = {
+    /**
+     * Which provider to send through. Matched case-insensitively.
+     */
+    provider_type: 'smtp' | 'mailgun' | 'postmark' | 'sendgrid';
+    settings?: TeamEmailProviderSettings;
+    /**
+     * The provider's single credential (SMTP password, Mailgun sending key, Postmark server token, or SendGrid API key). Required when configuring a provider for the first time.
+     * On a team that already has a provider, OMIT this field to keep the stored credential — it is never returned, so a client cannot resend it. An explicitly empty string is rejected: a provider with no credential cannot send, so clearing it would silently disable the team's mail.
+     */
+    secret?: string;
+    /**
+     * The address the team's mail is sent from.
+     */
+    from_address: string;
+    /**
+     * Optional display name shown beside the from address.
+     */
+    from_name?: string | null;
+    /**
+     * Optional Reply-To address.
+     */
+    reply_to?: string | null;
+};
+/**
+ * The email configuration in force for a team — its own provider, or the instance provider it inherits. This is never a 404: a team without its own provider is inheriting one, which is a state the caller needs described.
+ * No field here can carry the credential; `has_credential` reports only that one is stored.
+ */
+export type TeamEmailProviderResponse = {
+    /**
+     * Whether the team has its own provider configured.
+     */
+    configured: boolean;
+    /**
+     * Which provider will actually send: the team's own, or the instance provider from the deployment configuration.
+     */
+    source: 'team' | 'instance';
+    /**
+     * The address mail will actually be sent from — the team's when configured, otherwise the instance's.
+     */
+    effective_from_address: string;
+    /**
+     * The team's provider type, or null when the team inherits the instance provider.
+     */
+    provider_type: 'smtp' | 'mailgun' | 'postmark' | 'sendgrid' | null;
+    /**
+     * Whether a credential is stored for the team's provider. The credential itself is never returned.
+     */
+    has_credential: boolean;
+    /**
+     * The team's configured from address. Absent when inheriting the instance provider.
+     */
+    from_address?: string;
+    /**
+     * The team's configured display name.
+     */
+    from_name?: string | null;
+    /**
+     * The team's configured Reply-To address.
+     */
+    reply_to?: string | null;
+    settings?: TeamEmailProviderSettings;
+    /**
+     * Whether the last observed send succeeded. Derived by comparing last_success_at with last_error_at, so a recovered provider is healthy even though last_error is still populated.
+     */
+    is_healthy?: boolean;
+    /**
+     * When a send through the team's provider last succeeded.
+     */
+    last_success_at?: string | null;
+    /**
+     * The last delivery error. Deliberately retained after recovery for diagnosis, so its presence alone does not mean the provider is broken — use is_healthy.
+     */
+    last_error?: string | null;
+    /**
+     * When the last delivery error occurred.
+     */
+    last_error_at?: string | null;
+};
+/**
+ * Fixed-category detail for a failed test send. The real upstream error is logged server-side only.
+ */
+export type TeamEmailProviderTestDetails = {
+    /**
+     * Why the test failed: `configuration_invalid` when the provider could not be built at all (nothing was dialled), `send_failed` when it was built but delivery failed. Absent on success.
+     */
+    error_details?: 'configuration_invalid' | 'send_failed';
+};
+/**
+ * Outcome of a test send. A failed send is reported here with `is_valid: false`, not as an HTTP error — the caller asked whether the configuration works, and "no, because X" is a successful answer.
+ */
+export type TeamEmailProviderTestResponse = {
+    /**
+     * Whether the test message was accepted by the provider.
+     */
+    is_valid: boolean;
+    /**
+     * Human-readable outcome, safe to show to an admin.
+     */
+    message: string;
+    /**
+     * Where the test message was sent. Always the acting user's own account email — this endpoint never accepts a caller-supplied recipient, so it cannot be used to send mail to third parties.
+     */
+    recipient: string;
+    details: TeamEmailProviderTestDetails;
+};
 export type ResourceUsageItem = {
     /**
      * Type of resource (e.g., prompt, memory, artifact)
@@ -3885,6 +4179,103 @@ export type RelationListResponse = {
      */
     total_pages: number;
 };
+export type MetadataKeysResponse = {
+    /**
+     * Distinct metadata keys present on the caller's rows of the requested resource type, in ascending order.
+     */
+    keys: Array<string>;
+    /**
+     * True when more distinct keys exist than the requested limit returned.
+     */
+    truncated: boolean;
+};
+export type MetadataValuesResponse = {
+    /**
+     * Distinct values stored under the requested key, in ascending order. Values held in an array are flattened, and non-string scalars are rendered in their text form. Keys whose value is a JSON object are skipped, since they have no meaningful value list.
+     */
+    values: Array<string>;
+    /**
+     * True when more distinct values exist than the requested limit returned.
+     */
+    truncated: boolean;
+};
+/**
+ * The search ranking settings in effect for a team, with enough context for a client to render the whole settings surface from this one response: the effective values, where they came from, the instance defaults to preview a reset against, and the instance-owned candidate cap.
+ *
+ */
+export type TeamSearchSettings = {
+    /**
+     * Where the effective values come from. `instance` means the team has no override and inherits the deployment defaults; `team` means the team has stored its own profile.
+     *
+     */
+    source: 'instance' | 'team';
+    /**
+     * Effective value — the team's when source is `team`, otherwise the instance default.
+     */
+    recency_ranking_enabled: boolean;
+    /**
+     * Effective value — the team's when source is `team`, otherwise the instance default.
+     */
+    rank_weight_relevance: number;
+    /**
+     * Effective value — the team's when source is `team`, otherwise the instance default.
+     */
+    rank_weight_created: number;
+    /**
+     * Effective value — the team's when source is `team`, otherwise the instance default.
+     */
+    rank_weight_updated: number;
+    /**
+     * Effective value — the team's when source is `team`, otherwise the instance default.
+     */
+    rank_half_life_days: number;
+    instance_defaults: TeamSearchSettingsValues;
+    /**
+     * How many top-by-relevance rows are pulled and re-ranked in memory per query. Instance-owned and NOT team-configurable — one team must not be able to raise the whole deployment's per-query cost. Exposed so clients can explain why pagination is clamped to this many results when recency ranking is on.
+     * Deliberately NOT marked `readOnly`: the update request uses a separate schema that has no such field, which is what actually makes the cap unsettable. Marking it readOnly additionally makes oapi-codegen emit it as an optional pointer, which would let a required field serialize as absent.
+     *
+     */
+    rank_candidate_cap: number;
+};
+/**
+ * A complete search ranking profile. The three weights are normalized by their sum at ranking time, so they need not pre-sum to 1.
+ *
+ */
+export type TeamSearchSettingsValues = {
+    /**
+     * When false, results keep relevance-only ordering. When true they are re-ranked by a weighted blend of relevance and freshness.
+     *
+     */
+    recency_ranking_enabled: boolean;
+    /**
+     * Weight of semantic relevance. Expected to be the dominant weight.
+     */
+    rank_weight_relevance: number;
+    /**
+     * Weight of how recently the resource was created.
+     */
+    rank_weight_created: number;
+    /**
+     * Weight of how recently the resource was updated.
+     */
+    rank_weight_updated: number;
+    /**
+     * Half-life in days for the exponential freshness decay applied to both created_at and updated_at. An item exactly one half-life old scores 0.5.
+     *
+     */
+    rank_half_life_days: number;
+};
+/**
+ * A complete replacement ranking profile for the team. There is no partial update: every field is required, and the whole profile is stored or replaced atomically. `rank_candidate_cap` is deliberately absent — it is instance-owned.
+ *
+ */
+export type UpdateTeamSearchSettingsRequest = {
+    recency_ranking_enabled: boolean;
+    rank_weight_relevance: number;
+    rank_weight_created: number;
+    rank_weight_updated: number;
+    rank_half_life_days: number;
+};
 /**
  * Instance-wide totals for the top-level entities (unscoped counts).
  */
@@ -5260,6 +5651,10 @@ export type ListArtifactsData = {
          * Search in title, description, and content
          */
         search?: string;
+        /**
+         * Filter by metadata as a JSON object of key to array of string values. Keys are combined with AND, values within a key with OR, and an empty array means "the key exists". Values match metadata stored as a scalar or as an array, and numeric/boolean values are matched by their string form. At most 10 keys, 25 values per key, key length 255, value length 512. Example: {"env":["prod","staging"],"team":["core"]}
+         */
+        metadata?: string;
         /**
          * Sort field
          */
@@ -5280,6 +5675,10 @@ export type ListArtifactsData = {
     url: '/api/v1/{team_id}/artifacts';
 };
 export type ListArtifactsErrors = {
+    /**
+     * Invalid query parameter (for example a malformed `metadata` filter)
+     */
+    400: ErrorResponse;
     /**
      * Unauthorized
      */
@@ -5388,6 +5787,10 @@ export type ListArtifactsByProjectData = {
          * Search in title, description, and content
          */
         search?: string;
+        /**
+         * Filter by metadata as a JSON object of key to array of string values. Keys are combined with AND, values within a key with OR, and an empty array means "the key exists". Values match metadata stored as a scalar or as an array, and numeric/boolean values are matched by their string form. At most 10 keys, 25 values per key, key length 255, value length 512. Example: {"env":["prod","staging"],"team":["core"]}
+         */
+        metadata?: string;
         /**
          * Sort field
          */
@@ -5408,6 +5811,10 @@ export type ListArtifactsByProjectData = {
     url: '/api/v1/{team_id}/artifacts/{project_id}';
 };
 export type ListArtifactsByProjectErrors = {
+    /**
+     * Invalid query parameter (for example a malformed `metadata` filter)
+     */
+    400: ErrorResponse;
     /**
      * Unauthorized
      */
@@ -6170,6 +6577,10 @@ export type ListMemoriesData = {
          * Filter by metadata value (requires metadata_key)
          */
         metadata_value?: string;
+        /**
+         * Filter by metadata as a JSON object of key to array of string values. Keys are combined with AND, values within a key with OR, and an empty array means "the key exists". Values match metadata stored as a scalar or as an array, and numeric/boolean values are matched by their string form. At most 10 keys, 25 values per key, key length 255, value length 512. Example: {"env":["prod","staging"],"team":["core"]}
+         */
+        metadata?: string;
         /**
          * Filter by lifecycle status. When omitted, archived memories are hidden (active and draft are returned); an explicit value returns only that status. Returns 400 for unknown values.
          */
@@ -6194,6 +6605,10 @@ export type ListMemoriesData = {
     url: '/api/v1/{team_id}/memories';
 };
 export type ListMemoriesErrors = {
+    /**
+     * Invalid query parameter (for example an unknown `status` or `sort_by` value, or a malformed `metadata` filter)
+     */
+    400: ErrorResponse;
     /**
      * Unauthorized
      */
@@ -6627,7 +7042,7 @@ export type ListSpecLibrariesData = {
         /**
          * Filter by type
          */
-        type?: 'general';
+        type?: 'general' | 'claude-code' | 'claude' | 'cursor' | 'codex';
         /**
          * Filter by subtype category
          */
@@ -6636,6 +7051,10 @@ export type ListSpecLibrariesData = {
          * Search in title, description, and content
          */
         search?: string;
+        /**
+         * Filter by metadata as a JSON object of key to array of string values. Keys are combined with AND, values within a key with OR, and an empty array means "the key exists". Values match metadata stored as a scalar or as an array, and numeric/boolean values are matched by their string form. At most 10 keys, 25 values per key, key length 255, value length 512. Example: {"env":["prod","staging"],"team":["core"]}
+         */
+        metadata?: string;
         /**
          * Sort field
          */
@@ -6656,6 +7075,10 @@ export type ListSpecLibrariesData = {
     url: '/api/v1/{team_id}/blueprints';
 };
 export type ListSpecLibrariesErrors = {
+    /**
+     * Invalid query parameter (for example a malformed `metadata` filter)
+     */
+    400: ErrorResponse;
     /**
      * Unauthorized
      */
@@ -6759,7 +7182,7 @@ export type ListSpecLibrariesByProjectData = {
         /**
          * Filter by type
          */
-        type?: 'general';
+        type?: 'general' | 'claude-code' | 'claude' | 'cursor' | 'codex';
         /**
          * Filter by subtype category
          */
@@ -6768,6 +7191,10 @@ export type ListSpecLibrariesByProjectData = {
          * Search in title, description, and content
          */
         search?: string;
+        /**
+         * Filter by metadata as a JSON object of key to array of string values. Keys are combined with AND, values within a key with OR, and an empty array means "the key exists". Values match metadata stored as a scalar or as an array, and numeric/boolean values are matched by their string form. At most 10 keys, 25 values per key, key length 255, value length 512. Example: {"env":["prod","staging"],"team":["core"]}
+         */
+        metadata?: string;
         /**
          * Sort field
          */
@@ -8029,6 +8456,10 @@ export type GetGitHubInstallUrlErrors = {
      * Forbidden - user does not have access to this team, or is not a team owner/admin
      */
     403: ErrorResponse;
+    /**
+     * Conflict - the team has no GitHub App configured, so there is no App slug to build an install URL from. Register the team's App first.
+     */
+    409: ErrorResponse;
     /**
      * Internal server error
      */
@@ -8053,7 +8484,7 @@ export type HandleGitHubCallbackData = {
          */
         setup_action?: string;
         /**
-         * HMAC-signed state parameter from the install URL (CSRF protection)
+         * HMAC-signed state parameter from the install URL (CSRF protection). It is bound to the team's GitHub App config, so a state minted before the team replaced or rotated its App is no longer redeemable.
          */
         state: string;
         /**
@@ -8072,7 +8503,7 @@ export type HandleGitHubCallbackData = {
 };
 export type HandleGitHubCallbackErrors = {
     /**
-     * Invalid request body, missing required fields, or invalid/expired state parameter
+     * Invalid request body, missing required fields, an invalid/expired state parameter, or a state bound to a different installation or GitHub App than the team's current one
      */
     400: ErrorResponse;
     /**
@@ -8084,7 +8515,7 @@ export type HandleGitHubCallbackErrors = {
      */
     403: ErrorResponse;
     /**
-     * Conflict - this GitHub organization is already connected to another team
+     * Conflict - this GitHub organization is already connected to another team, or the team has no GitHub App configured to complete the installation against
      */
     409: ErrorResponse;
     /**
@@ -8298,22 +8729,49 @@ export type HandleGitHubWebhookData = {
 };
 export type HandleGitHubWebhookErrors = {
     /**
-     * Invalid payload or missing required headers
+     * Endpoint retired; use the team's per-App webhook URL
+     */
+    410: ErrorResponse;
+};
+export type HandleGitHubWebhookError = HandleGitHubWebhookErrors[keyof HandleGitHubWebhookErrors];
+export type HandleGitHubWebhookByTokenData = {
+    /**
+     * GitHub webhook event payload (varies by event type)
+     */
+    body: {
+        [key: string]: unknown;
+    };
+    path: {
+        /**
+         * Opaque routing token identifying which team's GitHub App this delivery belongs to. Minted as unpadded URL-safe base64, so it needs no percent-encoding. Treat it as a secret: it selects the secret the signature is verified against, and it is redacted from access logs.
+         */
+        token: string;
+    };
+    query?: never;
+    url: '/api/v1/webhooks/github/{token}';
+};
+export type HandleGitHubWebhookByTokenErrors = {
+    /**
+     * Unreadable body, unparseable payload, or missing installation reference
      */
     400: ErrorResponse;
     /**
-     * Invalid webhook signature
+     * Missing or invalid `X-Hub-Signature-256`
      */
     401: ErrorResponse;
+    /**
+     * Unknown or malformed routing token (deliberately indistinguishable)
+     */
+    404: ErrorResponse;
     /**
      * Internal server error
      */
     500: ErrorResponse;
 };
-export type HandleGitHubWebhookError = HandleGitHubWebhookErrors[keyof HandleGitHubWebhookErrors];
-export type HandleGitHubWebhookResponses = {
+export type HandleGitHubWebhookByTokenError = HandleGitHubWebhookByTokenErrors[keyof HandleGitHubWebhookByTokenErrors];
+export type HandleGitHubWebhookByTokenResponses = {
     /**
-     * Webhook received and processed successfully
+     * Delivery accepted (or already processed — dedup by delivery id)
      */
     200: unknown;
 };
@@ -12633,11 +13091,231 @@ export type ValidateEmbeddingProviderResponses = {
     200: ValidateEmbeddingProviderResponse;
 };
 export type ValidateEmbeddingProviderResponse2 = ValidateEmbeddingProviderResponses[keyof ValidateEmbeddingProviderResponses];
-export type ListEmbeddingProvidersSettingsData = {
+export type GetMetadataKeysData = {
     body?: never;
     path: {
         /**
-         * Team that owns the embedding provider(s).
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query: {
+        /**
+         * Which resource type's metadata to enumerate
+         */
+        resource_type: 'artifacts' | 'blueprints' | 'memories';
+        /**
+         * Narrow the catalog to a single project
+         */
+        project_id?: string;
+        /**
+         * Maximum number of keys to return
+         */
+        limit?: number;
+    };
+    url: '/api/v1/{team_id}/metadata/keys';
+};
+export type GetMetadataKeysErrors = {
+    /**
+     * Invalid or missing query parameter
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller is not a member of the team
+     */
+    403: ErrorResponse;
+    /**
+     * Internal server error
+     */
+    500: ErrorResponse;
+};
+export type GetMetadataKeysError = GetMetadataKeysErrors[keyof GetMetadataKeysErrors];
+export type GetMetadataKeysResponses = {
+    /**
+     * Metadata keys retrieved successfully
+     */
+    200: MetadataKeysResponse;
+};
+export type GetMetadataKeysResponse = GetMetadataKeysResponses[keyof GetMetadataKeysResponses];
+export type GetMetadataValuesData = {
+    body?: never;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query: {
+        /**
+         * Which resource type's metadata to enumerate
+         */
+        resource_type: 'artifacts' | 'blueprints' | 'memories';
+        /**
+         * The metadata key whose values to enumerate
+         */
+        key: string;
+        /**
+         * Narrow the catalog to a single project
+         */
+        project_id?: string;
+        /**
+         * Case-insensitive substring filter for typeahead
+         */
+        q?: string;
+        /**
+         * Maximum number of values to return
+         */
+        limit?: number;
+    };
+    url: '/api/v1/{team_id}/metadata/values';
+};
+export type GetMetadataValuesErrors = {
+    /**
+     * Invalid or missing query parameter
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller is not a member of the team
+     */
+    403: ErrorResponse;
+    /**
+     * Internal server error
+     */
+    500: ErrorResponse;
+};
+export type GetMetadataValuesError = GetMetadataValuesErrors[keyof GetMetadataValuesErrors];
+export type GetMetadataValuesResponses = {
+    /**
+     * Metadata values retrieved successfully
+     */
+    200: MetadataValuesResponse;
+};
+export type GetMetadataValuesResponse = GetMetadataValuesResponses[keyof GetMetadataValuesResponses];
+export type ResetTeamSearchSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/search';
+};
+export type ResetTeamSearchSettingsErrors = {
+    /**
+     * Invalid team_id
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller's role does not grant team.settings.update
+     */
+    403: ErrorResponse;
+    /**
+     * Failed to reset the team's search settings
+     */
+    500: ErrorResponse;
+};
+export type ResetTeamSearchSettingsError = ResetTeamSearchSettingsErrors[keyof ResetTeamSearchSettingsErrors];
+export type ResetTeamSearchSettingsResponses = {
+    /**
+     * Settings reset (no content); the team now inherits the instance defaults
+     */
+    204: void;
+};
+export type ResetTeamSearchSettingsResponse = ResetTeamSearchSettingsResponses[keyof ResetTeamSearchSettingsResponses];
+export type GetTeamSearchSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/search';
+};
+export type GetTeamSearchSettingsErrors = {
+    /**
+     * Invalid team_id
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller is not a member of the team
+     */
+    403: ErrorResponse;
+    /**
+     * Failed to read the team's search settings
+     */
+    500: ErrorResponse;
+};
+export type GetTeamSearchSettingsError = GetTeamSearchSettingsErrors[keyof GetTeamSearchSettingsErrors];
+export type GetTeamSearchSettingsResponses = {
+    /**
+     * Settings retrieved successfully
+     */
+    200: TeamSearchSettings;
+};
+export type GetTeamSearchSettingsResponse = GetTeamSearchSettingsResponses[keyof GetTeamSearchSettingsResponses];
+export type UpdateTeamSearchSettingsData = {
+    body: UpdateTeamSearchSettingsRequest;
+    path: {
+        /**
+         * Team identifier
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/search';
+};
+export type UpdateTeamSearchSettingsErrors = {
+    /**
+     * Invalid ranking parameters — a negative weight, all weights zero, or a half-life outside (0, 36500]
+     *
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Caller's role does not grant team.settings.update
+     */
+    403: ErrorResponse;
+    /**
+     * Failed to store the team's search settings
+     */
+    500: ErrorResponse;
+};
+export type UpdateTeamSearchSettingsError = UpdateTeamSearchSettingsErrors[keyof UpdateTeamSearchSettingsErrors];
+export type UpdateTeamSearchSettingsResponses = {
+    /**
+     * Settings stored successfully; the response reports source `team`
+     */
+    200: TeamSearchSettings;
+};
+export type UpdateTeamSearchSettingsResponse = UpdateTeamSearchSettingsResponses[keyof UpdateTeamSearchSettingsResponses];
+export type ListEmbeddingProvidersSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the embedding provider(s).
          */
         team_id: string;
     };
@@ -12970,6 +13648,658 @@ export type ClearEmbeddingsSettingsResponses = {
     200: ClearEmbeddingsResponse;
 };
 export type ClearEmbeddingsSettingsResponse = ClearEmbeddingsSettingsResponses[keyof ClearEmbeddingsSettingsResponses];
+export type DeleteGitHubAppConfigData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/integrations/github/app';
+};
+export type DeleteGitHubAppConfigErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type DeleteGitHubAppConfigError = DeleteGitHubAppConfigErrors[keyof DeleteGitHubAppConfigErrors];
+export type DeleteGitHubAppConfigResponses = {
+    /**
+     * GitHub App configuration deleted
+     */
+    204: void;
+};
+export type DeleteGitHubAppConfigResponse = DeleteGitHubAppConfigResponses[keyof DeleteGitHubAppConfigResponses];
+export type GetGitHubAppConfigData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/integrations/github/app';
+};
+export type GetGitHubAppConfigErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type GetGitHubAppConfigError = GetGitHubAppConfigErrors[keyof GetGitHubAppConfigErrors];
+export type GetGitHubAppConfigResponses = {
+    /**
+     * The team's GitHub App configuration
+     */
+    200: GitHubAppConfigResponse;
+};
+export type GetGitHubAppConfigResponse = GetGitHubAppConfigResponses[keyof GetGitHubAppConfigResponses];
+export type CreateGitHubAppConfigData = {
+    body: CreateGitHubAppConfigRequest;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/integrations/github/app';
+};
+export type CreateGitHubAppConfigErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), missing required fields, or an unparseable private key (`VALIDATION_FAILED` with `validation_errors`)
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team already has an App configured (`GITHUB_APP_CONFIG_EXISTS`), or another team already registered this `app_id` (`GITHUB_APP_ALREADY_REGISTERED`) — a GitHub App has a single webhook URL, so it cannot be shared across teams
+     */
+    409: ErrorResponse;
+};
+export type CreateGitHubAppConfigError = CreateGitHubAppConfigErrors[keyof CreateGitHubAppConfigErrors];
+export type CreateGitHubAppConfigResponses = {
+    /**
+     * GitHub App registered. This is the only response that carries the plaintext `webhook_secret`.
+     */
+    200: CreateGitHubAppConfigResponse;
+};
+export type CreateGitHubAppConfigResponse2 = CreateGitHubAppConfigResponses[keyof CreateGitHubAppConfigResponses];
+export type UpdateGitHubAppConfigData = {
+    body: UpdateGitHubAppConfigRequest;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/integrations/github/app';
+};
+export type UpdateGitHubAppConfigErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), an explicitly empty field, or an unparseable private key (`VALIDATION_FAILED` with `validation_errors`)
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`), another team already registered this `app_id` (`GITHUB_APP_ALREADY_REGISTERED`), or the configuration was modified concurrently (`GITHUB_APP_CONFIG_CONFLICT`)
+     */
+    409: ErrorResponse;
+};
+export type UpdateGitHubAppConfigError = UpdateGitHubAppConfigErrors[keyof UpdateGitHubAppConfigErrors];
+export type UpdateGitHubAppConfigResponses = {
+    /**
+     * GitHub App configuration updated
+     */
+    200: GitHubAppConfigResponse;
+};
+export type UpdateGitHubAppConfigResponse = UpdateGitHubAppConfigResponses[keyof UpdateGitHubAppConfigResponses];
+export type ValidateGitHubAppConfigData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/integrations/github/app/validate';
+};
+export type ValidateGitHubAppConfigErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type ValidateGitHubAppConfigError = ValidateGitHubAppConfigErrors[keyof ValidateGitHubAppConfigErrors];
+export type ValidateGitHubAppConfigResponses = {
+    /**
+     * Validation result (successful or not)
+     */
+    200: ValidateGitHubAppConfigResponse;
+};
+export type ValidateGitHubAppConfigResponse2 = ValidateGitHubAppConfigResponses[keyof ValidateGitHubAppConfigResponses];
+export type RotateGitHubAppWebhookTokenData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/integrations/github/app/rotate-webhook-token';
+};
+export type RotateGitHubAppWebhookTokenErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type RotateGitHubAppWebhookTokenError = RotateGitHubAppWebhookTokenErrors[keyof RotateGitHubAppWebhookTokenErrors];
+export type RotateGitHubAppWebhookTokenResponses = {
+    /**
+     * Token rotated; the response carries the new `webhook_url`
+     */
+    200: GitHubAppConfigResponse;
+};
+export type RotateGitHubAppWebhookTokenResponse = RotateGitHubAppWebhookTokenResponses[keyof RotateGitHubAppWebhookTokenResponses];
+export type DeleteGitHubAppConfigSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/github-app';
+};
+export type DeleteGitHubAppConfigSettingsErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type DeleteGitHubAppConfigSettingsError = DeleteGitHubAppConfigSettingsErrors[keyof DeleteGitHubAppConfigSettingsErrors];
+export type DeleteGitHubAppConfigSettingsResponses = {
+    /**
+     * GitHub App configuration deleted
+     */
+    204: void;
+};
+export type DeleteGitHubAppConfigSettingsResponse = DeleteGitHubAppConfigSettingsResponses[keyof DeleteGitHubAppConfigSettingsResponses];
+export type GetGitHubAppConfigSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/github-app';
+};
+export type GetGitHubAppConfigSettingsErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type GetGitHubAppConfigSettingsError = GetGitHubAppConfigSettingsErrors[keyof GetGitHubAppConfigSettingsErrors];
+export type GetGitHubAppConfigSettingsResponses = {
+    /**
+     * The team's GitHub App configuration
+     */
+    200: GitHubAppConfigResponse;
+};
+export type GetGitHubAppConfigSettingsResponse = GetGitHubAppConfigSettingsResponses[keyof GetGitHubAppConfigSettingsResponses];
+export type CreateGitHubAppConfigSettingsData = {
+    body: CreateGitHubAppConfigRequest;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/github-app';
+};
+export type CreateGitHubAppConfigSettingsErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), missing required fields, or an unparseable private key (`VALIDATION_FAILED` with `validation_errors`)
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team already has an App configured (`GITHUB_APP_CONFIG_EXISTS`), or another team already registered this `app_id` (`GITHUB_APP_ALREADY_REGISTERED`) — a GitHub App has a single webhook URL, so it cannot be shared across teams
+     */
+    409: ErrorResponse;
+};
+export type CreateGitHubAppConfigSettingsError = CreateGitHubAppConfigSettingsErrors[keyof CreateGitHubAppConfigSettingsErrors];
+export type CreateGitHubAppConfigSettingsResponses = {
+    /**
+     * GitHub App registered. This is the only response that carries the plaintext `webhook_secret`.
+     */
+    200: CreateGitHubAppConfigResponse;
+};
+export type CreateGitHubAppConfigSettingsResponse = CreateGitHubAppConfigSettingsResponses[keyof CreateGitHubAppConfigSettingsResponses];
+export type UpdateGitHubAppConfigSettingsData = {
+    body: UpdateGitHubAppConfigRequest;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/github-app';
+};
+export type UpdateGitHubAppConfigSettingsErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), an explicitly empty field, or an unparseable private key (`VALIDATION_FAILED` with `validation_errors`)
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`), another team already registered this `app_id` (`GITHUB_APP_ALREADY_REGISTERED`), or the configuration was modified concurrently (`GITHUB_APP_CONFIG_CONFLICT`)
+     */
+    409: ErrorResponse;
+};
+export type UpdateGitHubAppConfigSettingsError = UpdateGitHubAppConfigSettingsErrors[keyof UpdateGitHubAppConfigSettingsErrors];
+export type UpdateGitHubAppConfigSettingsResponses = {
+    /**
+     * GitHub App configuration updated
+     */
+    200: GitHubAppConfigResponse;
+};
+export type UpdateGitHubAppConfigSettingsResponse = UpdateGitHubAppConfigSettingsResponses[keyof UpdateGitHubAppConfigSettingsResponses];
+export type ValidateGitHubAppConfigSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/github-app/validate';
+};
+export type ValidateGitHubAppConfigSettingsErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type ValidateGitHubAppConfigSettingsError = ValidateGitHubAppConfigSettingsErrors[keyof ValidateGitHubAppConfigSettingsErrors];
+export type ValidateGitHubAppConfigSettingsResponses = {
+    /**
+     * Validation result (successful or not)
+     */
+    200: ValidateGitHubAppConfigResponse;
+};
+export type ValidateGitHubAppConfigSettingsResponse = ValidateGitHubAppConfigSettingsResponses[keyof ValidateGitHubAppConfigSettingsResponses];
+export type RotateGitHubAppWebhookTokenSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the GitHub App registration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/github-app/rotate-webhook-token';
+};
+export type RotateGitHubAppWebhookTokenSettingsErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - managing the GitHub App requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no GitHub App configured (`GITHUB_APP_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type RotateGitHubAppWebhookTokenSettingsError = RotateGitHubAppWebhookTokenSettingsErrors[keyof RotateGitHubAppWebhookTokenSettingsErrors];
+export type RotateGitHubAppWebhookTokenSettingsResponses = {
+    /**
+     * Token rotated; the response carries the new `webhook_url`
+     */
+    200: GitHubAppConfigResponse;
+};
+export type RotateGitHubAppWebhookTokenSettingsResponse = RotateGitHubAppWebhookTokenSettingsResponses[keyof RotateGitHubAppWebhookTokenSettingsResponses];
+export type DeleteTeamEmailProviderData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/email-provider';
+};
+export type DeleteTeamEmailProviderErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - configuring the team's email provider requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no email provider of its own (`TEAM_EMAIL_PROVIDER_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type DeleteTeamEmailProviderError = DeleteTeamEmailProviderErrors[keyof DeleteTeamEmailProviderErrors];
+export type DeleteTeamEmailProviderResponses = {
+    /**
+     * Provider removed; the team now uses the instance provider
+     */
+    204: void;
+};
+export type DeleteTeamEmailProviderResponse = DeleteTeamEmailProviderResponses[keyof DeleteTeamEmailProviderResponses];
+export type GetTeamEmailProviderData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/email-provider';
+};
+export type GetTeamEmailProviderErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+};
+export type GetTeamEmailProviderError = GetTeamEmailProviderErrors[keyof GetTeamEmailProviderErrors];
+export type GetTeamEmailProviderResponses = {
+    /**
+     * The email configuration in force for the team
+     */
+    200: TeamEmailProviderResponse;
+};
+export type GetTeamEmailProviderResponse = GetTeamEmailProviderResponses[keyof GetTeamEmailProviderResponses];
+export type UpsertTeamEmailProviderData = {
+    body: UpsertTeamEmailProviderRequest;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/email-provider';
+};
+export type UpsertTeamEmailProviderErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), or an invalid configuration (`TEAM_EMAIL_PROVIDER_VALIDATION_FAILED` with `validation_errors`) — an unknown provider type, a missing or mismatched settings block, an empty `secret`, a malformed address, or a destination that is not allowed
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - configuring the team's email provider requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+};
+export type UpsertTeamEmailProviderError = UpsertTeamEmailProviderErrors[keyof UpsertTeamEmailProviderErrors];
+export type UpsertTeamEmailProviderResponses = {
+    /**
+     * The stored configuration
+     */
+    200: TeamEmailProviderResponse;
+};
+export type UpsertTeamEmailProviderResponse = UpsertTeamEmailProviderResponses[keyof UpsertTeamEmailProviderResponses];
+export type TestTeamEmailProviderData = {
+    body: UpsertTeamEmailProviderRequest;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/email-provider/test';
+};
+export type TestTeamEmailProviderErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), or an invalid configuration (`TEAM_EMAIL_PROVIDER_VALIDATION_FAILED` with `validation_errors`). `secret` is always required here, since there is no stored credential to fall back on
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - testing the team's email provider requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+};
+export type TestTeamEmailProviderError = TestTeamEmailProviderErrors[keyof TestTeamEmailProviderErrors];
+export type TestTeamEmailProviderResponses = {
+    /**
+     * Test outcome (successful or not)
+     */
+    200: TeamEmailProviderTestResponse;
+};
+export type TestTeamEmailProviderResponse = TestTeamEmailProviderResponses[keyof TestTeamEmailProviderResponses];
+export type DeleteTeamEmailProviderSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/email-provider';
+};
+export type DeleteTeamEmailProviderSettingsErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - configuring the team's email provider requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+    /**
+     * The team has no email provider of its own (`TEAM_EMAIL_PROVIDER_NOT_CONFIGURED`)
+     */
+    409: ErrorResponse;
+};
+export type DeleteTeamEmailProviderSettingsError = DeleteTeamEmailProviderSettingsErrors[keyof DeleteTeamEmailProviderSettingsErrors];
+export type DeleteTeamEmailProviderSettingsResponses = {
+    /**
+     * Provider removed; the team now uses the instance provider
+     */
+    204: void;
+};
+export type DeleteTeamEmailProviderSettingsResponse = DeleteTeamEmailProviderSettingsResponses[keyof DeleteTeamEmailProviderSettingsResponses];
+export type GetTeamEmailProviderSettingsData = {
+    body?: never;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/email-provider';
+};
+export type GetTeamEmailProviderSettingsErrors = {
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+};
+export type GetTeamEmailProviderSettingsError = GetTeamEmailProviderSettingsErrors[keyof GetTeamEmailProviderSettingsErrors];
+export type GetTeamEmailProviderSettingsResponses = {
+    /**
+     * The email configuration in force for the team
+     */
+    200: TeamEmailProviderResponse;
+};
+export type GetTeamEmailProviderSettingsResponse = GetTeamEmailProviderSettingsResponses[keyof GetTeamEmailProviderSettingsResponses];
+export type UpsertTeamEmailProviderSettingsData = {
+    body: UpsertTeamEmailProviderRequest;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/email-provider';
+};
+export type UpsertTeamEmailProviderSettingsErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), or an invalid configuration (`TEAM_EMAIL_PROVIDER_VALIDATION_FAILED` with `validation_errors`) — an unknown provider type, a missing or mismatched settings block, an empty `secret`, a malformed address, or a destination that is not allowed
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - configuring the team's email provider requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+};
+export type UpsertTeamEmailProviderSettingsError = UpsertTeamEmailProviderSettingsErrors[keyof UpsertTeamEmailProviderSettingsErrors];
+export type UpsertTeamEmailProviderSettingsResponses = {
+    /**
+     * The stored configuration
+     */
+    200: TeamEmailProviderResponse;
+};
+export type UpsertTeamEmailProviderSettingsResponse = UpsertTeamEmailProviderSettingsResponses[keyof UpsertTeamEmailProviderSettingsResponses];
+export type TestTeamEmailProviderSettingsData = {
+    body: UpsertTeamEmailProviderRequest;
+    path: {
+        /**
+         * Team that owns the email provider configuration.
+         */
+        team_id: string;
+    };
+    query?: never;
+    url: '/api/v1/{team_id}/settings/email-provider/test';
+};
+export type TestTeamEmailProviderSettingsErrors = {
+    /**
+     * Malformed JSON body (`BAD_REQUEST`), or an invalid configuration (`TEAM_EMAIL_PROVIDER_VALIDATION_FAILED` with `validation_errors`). `secret` is always required here, since there is no stored credential to fall back on
+     */
+    400: ErrorResponse;
+    /**
+     * Unauthorized
+     */
+    401: ErrorResponse;
+    /**
+     * Forbidden - testing the team's email provider requires team owner/admin (`FORBIDDEN`)
+     */
+    403: ErrorResponse;
+};
+export type TestTeamEmailProviderSettingsError = TestTeamEmailProviderSettingsErrors[keyof TestTeamEmailProviderSettingsErrors];
+export type TestTeamEmailProviderSettingsResponses = {
+    /**
+     * Test outcome (successful or not)
+     */
+    200: TeamEmailProviderTestResponse;
+};
+export type TestTeamEmailProviderSettingsResponse = TestTeamEmailProviderSettingsResponses[keyof TestTeamEmailProviderSettingsResponses];
 export type ListModelProvidersData = {
     body?: never;
     path: {