@buildbase/sdk 0.0.53 → 0.0.55

package/dist/index.d.ts

@@ -1003,7 +1003,7 @@ interface ISettings {
         /** Auto-create workspace on first login */
         autoCreateFirst: boolean;
     };
-    [key: string]: any;
+    [key: string]: unknown;
 }
 
 /**
@@ -1017,9 +1017,14 @@ interface IOsConfig {
     version: ApiVersion;
     orgId: string;
 }
+/** Lifecycle of the one-time org-settings fetch. */
+type SettingsStatus = 'idle' | 'loading' | 'loaded' | 'error';
 interface IOsState extends IOsConfig {
     auth?: IAuthConfig;
     settings?: ISettings | null;
+    /** State of the settings fetch — lets UI wait instead of guessing with `?? true` defaults. */
+    settingsStatus?: SettingsStatus;
+    settingsError?: string | null;
 }
 
 /**
@@ -1082,6 +1087,7 @@ interface IBaseApiConfig {
  * - getAuthHeaders()
  * - fetchJson<T>(path, init, errorMessage): GET/POST/etc. with handleApiResponse
  * - fetchResponse(path, init): raw Response for custom parsing (e.g. non-JSON or custom error handling)
+ * - fetchUnwrapped<T>(path, init, errorMessage): fetch → throw on !ok → unwrap { success, data } envelope
  */
 declare abstract class BaseApi {
     protected readonly serverUrl: string;
@@ -1116,6 +1122,8 @@ declare abstract class BaseApi {
     private reportError;
     /** Execute fetch with timeout, retries, debug logging, and error callback. */
     private executeFetch;
+    /** Backoff sleep that ends early (with an AbortError) when the signal fires. */
+    private static delay;
     /** Internal: execute fetch against a resolved URL with timeout, retries, debug logging, and error callback. */
     private executeFetchUrl;
     /**
@@ -1128,6 +1136,12 @@ declare abstract class BaseApi {
      * Caller is responsible for checking response.ok and parsing body.
      */
     protected fetchResponse(path: string, init?: RequestInit): Promise<Response>;
+    /**
+     * Execute request, throw a parsed error on !response.ok, and unwrap the
+     * `{ success, data }` envelope. Shorthand for the common
+     * fetchResponse → throwResponseError → unwrapResponse sequence.
+     */
+    protected fetchUnwrapped<T>(path: string, init?: RequestInit, errorMessage?: string): Promise<T>;
     /**
      * Execute request against an absolute URL (bypasses baseUrl).
      * Useful for endpoints outside the default basePath (e.g. /auth vs /public).
@@ -1169,21 +1183,26 @@ interface AuthRequestParams {
     };
     state?: string;
 }
+/**
+ * Unwrapped payload of a successful auth request.
+ * ⚠️ Prior to the envelope unification this type described the raw
+ * `{ success, data, message }` wire envelope; `requestAuth` now unwraps the
+ * envelope like every other SDK method and resolves with the payload only.
+ */
 interface AuthRequestResponse {
-    success: boolean;
-    data: {
-        redirectUrl: string;
-    };
-    message: string;
+    redirectUrl: string;
 }
 declare class AuthApi extends BaseApi {
     constructor(config: Pick<IOsConfig, 'serverUrl' | 'version'> & {
         sessionId?: string;
     });
     /**
-     * Initiate OAuth sign-in flow. Returns redirect URL to the auth provider.
+     * Initiate OAuth sign-in flow. Resolves with the redirect URL to the auth provider.
      * Auth endpoints sit at /api/v1/auth/ (outside the /public basePath),
-     * so we use fetchAbsoluteUrl to get timeout, retry, and error handling via BaseApi.
+     * so we use fetchAbsoluteUrl to get timeout, retry, and error handling via
+     * BaseApi, then apply the standard throwResponseError → unwrapResponse
+     * sequence (the fetchUnwrapped convention). Non-2xx responses and 2xx
+     * envelopes with `success: false` both throw a structured Error.
      */
     requestAuth(params: AuthRequestParams): Promise<AuthRequestResponse>;
     /** Fetch user profile with the given session ID (used after OAuth redirect or from storage). */
@@ -1334,7 +1353,7 @@ interface NotificationData {
         push?: boolean;
     };
     /** Any additional merge tags available as {{key}} in the email template. */
-    [key: string]: any;
+    [key: string]: unknown;
 }
 /** Result of sending a notification. */
 interface NotificationResult {
@@ -1365,64 +1384,64 @@ declare class WorkspaceApi extends BaseApi {
         sessionId?: string;
         onUnauthorized?: () => void;
     });
-    getWorkspaces(): Promise<IWorkspace[]>;
+    getWorkspaces(signal?: AbortSignal): Promise<IWorkspace[]>;
     createWorkspace(data: {
         name: string;
         image?: string;
-    }): Promise<IWorkspace>;
-    updateWorkspace(id: string, data: Partial<IWorkspace>): Promise<IWorkspace>;
-    deleteWorkspace(id: string): Promise<{
+    }, signal?: AbortSignal): Promise<IWorkspace>;
+    updateWorkspace(id: string, data: Partial<IWorkspace>, signal?: AbortSignal): Promise<IWorkspace>;
+    deleteWorkspace(id: string, signal?: AbortSignal): Promise<{
         success: boolean;
     }>;
-    getWorkspaceUsers(workspaceId: string): Promise<IWorkspaceUser[]>;
+    getWorkspaceUsers(workspaceId: string, signal?: AbortSignal): Promise<IWorkspaceUser[]>;
     addUser(workspaceId: string, config: {
         email: string;
         role: string;
-    }): Promise<{
+    }, signal?: AbortSignal): Promise<{
         userId: string;
         workspace: IWorkspace;
         message: string;
     }>;
-    removeUser(workspaceId: string, userId: string): Promise<{
+    removeUser(workspaceId: string, userId: string, signal?: AbortSignal): Promise<{
         userId: string;
         workspace: IWorkspace;
         message: string;
     }>;
-    updateUser(workspaceId: string, userId: string, data: Partial<IWorkspaceUser>): Promise<{
+    updateUser(workspaceId: string, userId: string, data: Partial<IWorkspaceUser>, signal?: AbortSignal): Promise<{
         userId: string;
         workspace: IWorkspace;
         message: string;
     }>;
     updateSettings(data: {
         permissions: Record<string, string[]>;
-    }): Promise<any>;
-    updateWorkspacePermissions(workspaceId: string, permissions: Record<string, string[]>): Promise<any>;
-    getFeatures(): Promise<IWorkspaceFeature[]>;
-    updateFeature(workspaceId: string, key: string, value: boolean): Promise<IWorkspace>;
-    getWorkspace(workspaceId: string): Promise<IWorkspace>;
-    getProfile(): Promise<IUser>;
-    updateUserProfile(config: Partial<IUser>): Promise<IUser>;
-    getPasskeys(): Promise<IPasskeySummary[]>;
-    renamePasskey(passkeyId: string, name: string): Promise<void>;
-    deletePasskey(passkeyId: string): Promise<void>;
+    }, signal?: AbortSignal): Promise<any>;
+    updateWorkspacePermissions(workspaceId: string, permissions: Record<string, string[]>, signal?: AbortSignal): Promise<any>;
+    getFeatures(signal?: AbortSignal): Promise<IWorkspaceFeature[]>;
+    updateFeature(workspaceId: string, key: string, value: boolean, signal?: AbortSignal): Promise<IWorkspace>;
+    getWorkspace(workspaceId: string, signal?: AbortSignal): Promise<IWorkspace>;
+    getProfile(signal?: AbortSignal): Promise<IUser>;
+    updateUserProfile(config: Partial<IUser>, signal?: AbortSignal): Promise<IUser>;
+    getPasskeys(signal?: AbortSignal): Promise<IPasskeySummary[]>;
+    renamePasskey(passkeyId: string, name: string, signal?: AbortSignal): Promise<void>;
+    deletePasskey(passkeyId: string, signal?: AbortSignal): Promise<void>;
     /**
      * Get current subscription for a workspace
      * Returns subscription details including plan, plan version, and group information
      */
-    getCurrentSubscription(workspaceId: string): Promise<ISubscriptionResponse>;
+    getCurrentSubscription(workspaceId: string, signal?: AbortSignal): Promise<ISubscriptionResponse>;
     /**
      * Get plan group for a workspace
      * Returns the plan group containing the current plan if subscription exists,
      * otherwise returns the latest published group
      */
-    getPlanGroup(workspaceId: string): Promise<IPlanGroupResponse>;
+    getPlanGroup(workspaceId: string, signal?: AbortSignal): Promise<IPlanGroupResponse>;
     /**
      * Get plan group for a workspace with a specific version
      * @param workspaceId - The workspace ID
      * @param groupVersionId - The plan group version ID to fetch
      * @returns Plan group response with the specified version
      */
-    getPlanGroupByVersion(workspaceId: string, groupVersionId: string): Promise<IPlanGroupResponse>;
+    getPlanGroupByVersion(workspaceId: string, groupVersionId: string, signal?: AbortSignal): Promise<IPlanGroupResponse>;
     /**
      * Get current group version and available newer versions of the same group
      * - If user has active subscription: returns their current group version + newer versions
@@ -1432,7 +1451,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param workspaceId - The workspace ID
      * @returns Plan group versions response with currentVersion and availableVersions
      */
-    getPlanGroupVersions(workspaceId: string): Promise<IPlanGroupVersionsResponse>;
+    getPlanGroupVersions(workspaceId: string, signal?: AbortSignal): Promise<IPlanGroupVersionsResponse>;
     /**
      * Get plan group versions by slug (public, no auth required).
      * Returns the latest published plan group versions for the given plan group slug.
@@ -1441,7 +1460,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param slug - Plan group slug (e.g. 'default', 'enterprise')
      * @returns Plan group versions response with currentVersion and availableVersions
      */
-    getPublicPlans(slug: string): Promise<IPublicPlansResponse>;
+    getPublicPlans(slug: string, signal?: AbortSignal): Promise<IPublicPlansResponse>;
     /**
      * Get credit packages (public, no auth required).
      * Returns active credit packages for the org with pricing info.
@@ -1449,7 +1468,7 @@ declare class WorkspaceApi extends BaseApi {
      *
      * @returns Credit packages with pricing variants
      */
-    getPublicCreditPackages(): Promise<IPublicCreditPackagesResponse>;
+    getPublicCreditPackages(signal?: AbortSignal): Promise<IPublicCreditPackagesResponse>;
     /**
      * Get plan group version details by ID (public, no auth required).
      * Returns the full plan group version with populated plan versions.
@@ -1458,15 +1477,24 @@ declare class WorkspaceApi extends BaseApi {
      * @param groupVersionId - The plan group version ID to fetch
      * @returns Plan group version with populated plan versions
      */
-    getPlanGroupVersion(groupVersionId: string): Promise<IPlanGroupVersion>;
+    getPlanGroupVersion(groupVersionId: string, signal?: AbortSignal): Promise<IPlanGroupVersion>;
     /**
      * Create checkout session for new subscription
      * @param workspaceId - The workspace ID
      * @param request - Checkout session request with planVersionId and optional billing interval/URLs
      * @returns Checkout session response with checkoutUrl to redirect user
      */
-    createCheckoutSession(workspaceId: string, request: ICheckoutSessionRequest): Promise<CheckoutResult>;
-    selectFreePlan(workspaceId: string, planVersionId: string): Promise<{
+    createCheckoutSession(workspaceId: string, request: ICheckoutSessionRequest, signal?: AbortSignal): Promise<CheckoutResult>;
+    /**
+     * Assign a free (freemium) plan to the workspace without a Stripe checkout.
+     *
+     * This endpoint's envelope carries no `data` payload — it is
+     * `{ success, message }` — so `fetchUnwrapped` resolves with the envelope
+     * itself (its unwrap only extracts `data` when present). On resolution
+     * `success` is therefore always `true`: non-2xx responses and 2xx envelopes
+     * with `success: false` both throw a structured Error.
+     */
+    selectFreePlan(workspaceId: string, planVersionId: string, signal?: AbortSignal): Promise<{
         success: boolean;
         message: string;
     }>;
@@ -1475,12 +1503,12 @@ declare class WorkspaceApi extends BaseApi {
      * Only allows plan changes within the same plan group
      * Returns checkout session if payment is required, otherwise returns subscription update response
      */
-    updateSubscription(workspaceId: string, request: ISubscriptionUpdateRequest): Promise<ISubscriptionUpdateResponse | ICheckoutSessionResponse>;
+    updateSubscription(workspaceId: string, request: ISubscriptionUpdateRequest, signal?: AbortSignal): Promise<ISubscriptionUpdateResponse | ICheckoutSessionResponse>;
     /**
      * Create a Stripe Customer Portal session for managing payment methods, invoices, etc.
      * Returns the portal URL — redirect user to it.
      */
-    createBillingPortalSession(workspaceId: string, returnUrl?: string): Promise<{
+    createBillingPortalSession(workspaceId: string, returnUrl?: string, signal?: AbortSignal): Promise<{
         url: string;
     }>;
     /**
@@ -1490,35 +1518,35 @@ declare class WorkspaceApi extends BaseApi {
      * @param startingAfter - Invoice ID to start after (for pagination)
      * @returns List of invoices with pagination info
      */
-    listInvoices(workspaceId: string, limit?: number, startingAfter?: string): Promise<IInvoiceListResponse>;
+    listInvoices(workspaceId: string, limit?: number, startingAfter?: string, signal?: AbortSignal): Promise<IInvoiceListResponse>;
     /**
      * Get a single invoice by ID
      * @param workspaceId - The workspace ID
      * @param invoiceId - The invoice ID
      * @returns Invoice details
      */
-    getInvoice(workspaceId: string, invoiceId: string): Promise<IInvoiceResponse>;
+    getInvoice(workspaceId: string, invoiceId: string, signal?: AbortSignal): Promise<IInvoiceResponse>;
     /**
      * Cancel subscription at the end of the current billing period
      * Sets cancelAtPeriodEnd: true - subscription remains active until period ends
      * @param workspaceId - The workspace ID
      * @returns Updated subscription with cancelAtPeriodEnd and stripeCurrentPeriodEnd
      */
-    cancelSubscriptionAtPeriodEnd(workspaceId: string): Promise<ISubscriptionResponse>;
+    cancelSubscriptionAtPeriodEnd(workspaceId: string, signal?: AbortSignal): Promise<ISubscriptionResponse>;
     /**
      * Resume a subscription that was scheduled for cancellation
      * Sets cancelAtPeriodEnd: false - subscription will continue after period ends
      * @param workspaceId - The workspace ID
      * @returns Updated subscription with cancelAtPeriodEnd set to false
      */
-    resumeSubscription(workspaceId: string): Promise<ISubscriptionResponse>;
+    resumeSubscription(workspaceId: string, signal?: AbortSignal): Promise<ISubscriptionResponse>;
     /**
      * Record quota usage for a workspace
      * @param workspaceId - The workspace ID
      * @param request - Usage request with quotaSlug, quantity, and optional metadata/source
      * @returns Usage result with consumed/included/available/overage
      */
-    recordUsage(workspaceId: string, request: IRecordUsageRequest): Promise<IRecordUsageResponse>;
+    recordUsage(workspaceId: string, request: IRecordUsageRequest, signal?: AbortSignal): Promise<IRecordUsageResponse>;
     /**
      * Record multiple quota usage entries in a single request.
      * Designed for backend-to-backend high-volume scenarios (bulk exports, batch jobs).
@@ -1542,7 +1570,7 @@ declare class WorkspaceApi extends BaseApi {
             source?: string;
             idempotencyKey?: string;
         }>;
-    }): Promise<{
+    }, signal?: AbortSignal): Promise<{
         success: boolean;
         total: number;
         succeeded: number;
@@ -1560,20 +1588,20 @@ declare class WorkspaceApi extends BaseApi {
      * @param quotaSlug - The quota slug to check
      * @returns Quota usage status with consumed/included/available/overage/hasOverage
      */
-    getQuotaUsageStatus(workspaceId: string, quotaSlug: string): Promise<IQuotaUsageStatusResponse>;
+    getQuotaUsageStatus(workspaceId: string, quotaSlug: string, signal?: AbortSignal): Promise<IQuotaUsageStatusResponse>;
     /**
      * Get usage status for all quotas in the workspace's current plan
      * @param workspaceId - The workspace ID
      * @returns All quota usage statuses keyed by quota slug
      */
-    getAllQuotaUsage(workspaceId: string): Promise<IAllQuotaUsageResponse>;
+    getAllQuotaUsage(workspaceId: string, signal?: AbortSignal): Promise<IAllQuotaUsageResponse>;
     /**
      * Get paginated usage logs for a workspace
      * @param workspaceId - The workspace ID
      * @param query - Optional filters: quotaSlug, from, to, source, page, limit
      * @returns Paginated usage log entries
      */
-    getUsageLogs(workspaceId: string, query?: IUsageLogsQuery): Promise<IUsageLogsResponse>;
+    getUsageLogs(workspaceId: string, query?: IUsageLogsQuery, signal?: AbortSignal): Promise<IUsageLogsResponse>;
     /**
      * Trigger a notification event for a workspace.
      * Respects all notification gates (org settings, event config, workspace preferences).
@@ -1596,16 +1624,16 @@ declare class WorkspaceApi extends BaseApi {
      * });
      * ```
      */
-    sendNotification(workspaceId: string, event: string, userId?: string, data?: NotificationData): Promise<NotificationResult>;
-    getNotificationEvents(workspaceId: string): Promise<NotificationEvent[]>;
-    getNotificationPreferences(workspaceId: string): Promise<Record<string, {
+    sendNotification(workspaceId: string, event: string, userId?: string, data?: NotificationData, signal?: AbortSignal): Promise<NotificationResult>;
+    getNotificationEvents(workspaceId: string, signal?: AbortSignal): Promise<NotificationEvent[]>;
+    getNotificationPreferences(workspaceId: string, signal?: AbortSignal): Promise<Record<string, {
         email?: boolean;
         push?: boolean;
     }>>;
     updateNotificationPreferences(workspaceId: string, preferences: Record<string, {
         email?: boolean;
         push?: boolean;
-    }>): Promise<Record<string, {
+    }>, signal?: AbortSignal): Promise<Record<string, {
         email?: boolean;
         push?: boolean;
     }>>;
@@ -1614,7 +1642,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param workspaceId - The workspace ID
      * @returns Credit balance with available, totalGranted, totalConsumed, totalExpired, totalRefunded
      */
-    getCreditBalance(workspaceId: string): Promise<ICreditBalance>;
+    getCreditBalance(workspaceId: string, signal?: AbortSignal): Promise<ICreditBalance>;
     /**
      * Consume credits from a workspace balance.
      * Throws an error with `code: 'INSUFFICIENT_CREDITS'` and `available`/`requested` fields on 402.
@@ -1622,7 +1650,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param request - Consume request with amount, optional description, idempotencyKey, metadata
      * @returns Consume result with consumed amount and balanceAfter
      */
-    consumeCredits(workspaceId: string, request: IConsumeCreditsRequest): Promise<IConsumeCreditsResponse>;
+    consumeCredits(workspaceId: string, request: IConsumeCreditsRequest, signal?: AbortSignal): Promise<IConsumeCreditsResponse>;
     /**
      * Create a Stripe checkout session for purchasing a credit package.
      * Returns a checkout URL to redirect the user to.
@@ -1630,35 +1658,35 @@ declare class WorkspaceApi extends BaseApi {
      * @param request - Purchase request with creditPackageId, successUrl, cancelUrl, optional currency
      * @returns Checkout session ID and URL
      */
-    purchaseCredits(workspaceId: string, request: ICreditPurchaseRequest): Promise<ICreditPurchaseResponse>;
+    purchaseCredits(workspaceId: string, request: ICreditPurchaseRequest, signal?: AbortSignal): Promise<ICreditPurchaseResponse>;
     /**
      * List available credit packages for purchase.
      * Returns active, non-archived packages sorted by sortOrder then creditAmount.
      * @param workspaceId - The workspace ID
      * @returns Array of credit packages
      */
-    getCreditPackages(workspaceId: string): Promise<ICreditPackage[]>;
+    getCreditPackages(workspaceId: string, signal?: AbortSignal): Promise<ICreditPackage[]>;
     /**
      * Get paginated credit transaction history.
      * @param workspaceId - The workspace ID
      * @param query - Optional filters: type, page, limit
      * @returns Paginated credit transactions
      */
-    getCreditTransactions(workspaceId: string, query?: ICreditTransactionsQuery): Promise<ICreditTransactionsResponse>;
+    getCreditTransactions(workspaceId: string, query?: ICreditTransactionsQuery, signal?: AbortSignal): Promise<ICreditTransactionsResponse>;
     /**
      * Get paginated credit buckets.
      * @param workspaceId - The workspace ID
      * @param query - Optional filters: status, source, page, limit
      * @returns Paginated credit buckets
      */
-    getCreditBuckets(workspaceId: string, query?: ICreditBucketsQuery): Promise<ICreditBucketsResponse>;
+    getCreditBuckets(workspaceId: string, query?: ICreditBucketsQuery, signal?: AbortSignal): Promise<ICreditBucketsResponse>;
     /**
      * Get credits expiring within N days.
      * @param workspaceId - The workspace ID
      * @param days - Look-ahead window in days (1-90, default 7)
      * @returns Expiring credits summary with bucket list
      */
-    getExpiringCredits(workspaceId: string, days?: number): Promise<IExpiringCreditsResponse>;
+    getExpiringCredits(workspaceId: string, days?: number, signal?: AbortSignal): Promise<IExpiringCreditsResponse>;
 }
 
 /**
@@ -1785,6 +1813,7 @@ declare const BBAction: {
     readonly SelectPlan: "selectPlan";
     readonly CreditPurchase: "creditPurchase";
     readonly OpenCreditStore: "openCreditStore";
+    readonly OpenConnectGuide: "openConnectGuide";
     readonly Invite: "invite";
 };
 type BBActionType = (typeof BBAction)[keyof typeof BBAction];
@@ -1860,15 +1889,40 @@ declare function cleanBBParams(): void;
 /**
  * Security utilities for the SDK.
  */
+/** Options for {@link validateRedirectUrl}. */
+interface RedirectValidationOptions {
+    /**
+     * Require absolute URLs to be same-origin with the current page
+     * (`window.location.origin`). Relative paths always pass. Use for any
+     * user-controllable target (return URLs, `?next=` params) — it turns an
+     * open redirect into a same-site navigation. Outside a browser there is no
+     * origin to compare against, so absolute URLs are rejected.
+     */
+    sameOrigin?: boolean;
+    /**
+     * Origins additionally allowed for absolute URLs, e.g.
+     * `['https://checkout.stripe.com']`. Matched against `URL.origin` exactly.
+     */
+    allowedOrigins?: string[];
+}
 /**
- * Validate that a URL is safe to redirect to.
- * Prevents open redirect attacks by ensuring the URL uses https (or http on localhost).
- * Returns the URL if safe, or null if not.
+ * Validate that a URL is safe to redirect to. Returns the URL if safe, null if
+ * not.
+ *
+ * - **Relative paths** (`/dashboard`) are safe and always allowed —
+ *   protocol-relative (`//evil.com`) and backslash (`/\evil.com`) forms are
+ *   not treated as relative.
+ * - **Absolute URLs** must be `https:` (or `http:` on localhost). By default
+ *   any such URL passes (needed for cross-origin targets like Stripe checkout);
+ *   pass `sameOrigin` and/or `allowedOrigins` to restrict — then the URL must
+ *   match at least one of them. Always restrict user-controllable targets.
  */
-declare function validateRedirectUrl(url: string | null | undefined): string | null;
+declare function validateRedirectUrl(url: string | null | undefined, options?: RedirectValidationOptions): string | null;
 /**
  * Safely redirect to a URL after validating it.
- * Falls back to fallbackUrl if the target URL is invalid.
+ * Falls back to fallbackUrl (itself validated — else `/`) if the target URL is
+ * invalid. Pass `options` to restrict user-controllable targets (see
+ * {@link validateRedirectUrl}).
  *
  * Browser-only: navigation requires `window.location`. On non-browser runtimes
  * (Node, edge, Deno, Bun) there is nothing to navigate, so this is a no-op that
@@ -1876,7 +1930,7 @@ declare function validateRedirectUrl(url: string | null | undefined): string | n
  * that needs the resolved target should call {@link validateRedirectUrl} and
  * issue the redirect with its own framework (e.g. `Response.redirect`).
  */
-declare function safeRedirect(url: string | null | undefined, fallbackUrl?: string): boolean;
+declare function safeRedirect(url: string | null | undefined, fallbackUrl?: string, options?: RedirectValidationOptions): boolean;
 
 /**
  * Auth intent preservation — saves and restores the URL the user was on
@@ -1884,7 +1938,8 @@ declare function safeRedirect(url: string | null | undefined, fallbackUrl?: stri
  */
 /**
  * Save the current URL as the post-auth redirect target.
- * Validates the URL before storing — rejects unsafe URLs silently.
+ * Validates the URL before storing — rejects unsafe URLs silently. Same-origin
+ * only: the return URL is "where the user was", never another site.
  */
 declare function saveAuthIntent(returnUrl: string): void;
 /**
@@ -1916,7 +1971,34 @@ declare const PLAN_CURRENCY_OPTIONS: {
     value: "usd" | "eur" | "gbp" | "jpy" | "cad" | "aud" | "chf" | "cny" | "hkd" | "sgd" | "inr" | "mxn" | "brl" | "nzd" | "sek" | "nok" | "dkk" | "pln" | "thb";
     label: string;
 }[];
-/** Format cents as money string (e.g. 1999, "usd" -> "$19.99"). Caller must pass currency (e.g. from plan or workspace). */
+/**
+ * Minor-unit digits for a currency per ISO 4217: 0 (JPY, KRW, …), 2 (most),
+ * or 3 (KWD, BHD, …). The zero- and three-decimal sets are pinned to Stripe's
+ * treatment (the billing backend defines amount semantics); ISK is pinned to 2
+ * (Stripe legacy — ISO 4217 says 0). Any other code defers to the runtime's
+ * CLDR data (IQD/LYD → 3, CLF/UYW → 4, UYI → 0), falling back to 2 for codes
+ * unknown to Intl or malformed.
+ */
+declare function getCurrencyDecimals(currency: string | null | undefined): number;
+/** True when `currency` has no minor unit (JPY, KRW, …) — amounts are whole units, not cents. */
+declare function isZeroDecimalCurrency(currency: string | null | undefined): boolean;
+/**
+ * Convert a minor-unit amount to its display number for `currency`:
+ * `minorAmountToDisplay(1999, 'usd')` → `"19.99"`,
+ * `minorAmountToDisplay(1000, 'jpy')` → `"1,000"` (zero-decimal — no division),
+ * `minorAmountToDisplay(12345, 'kwd')` → `"12.345"` (three-decimal — ÷1000).
+ */
+declare function minorAmountToDisplay(amount: number, currency: string): string;
+/**
+ * Locale-aware currency formatting of a minor-unit amount via `Intl.NumberFormat`
+ * (`(1999, 'usd', 'en-US')` → `"$19.99"`; `(1000, 'jpy', 'ja-JP')` → `"￥1,000"`;
+ * `(12345, 'kwd')` → `"KWD 12.345"`). The divisor follows the currency's ISO 4217
+ * minor-unit digits (see `getCurrencyDecimals`) — zero-decimal currencies are
+ * never divided, three-decimal divide by 1000. Falls back to the symbol table
+ * when the currency code is empty or malformed.
+ */
+declare function formatMinorAmountIntl(amount: number, currency: string, locale?: string): string;
+/** Format cents as money string (e.g. 1999, "usd" -> "$19.99"; 1000, "jpy" -> "¥1,000"). Caller must pass currency (e.g. from plan or workspace). */
 declare function formatCents(cents: number, currency: string): string;
 /** Translatable labels for overage/quota formatting */
 interface OverageLabels {
@@ -1935,15 +2017,16 @@ interface OverageLabels {
 }
 /**
  * Format overage rate for display. When unitSize > 1: "$1.00/1,000 units"; else "$1.00/unit".
- * Pass `labels` for i18n support.
+ * Pass `labels` for i18n support and `locale` to group numbers in the display locale.
  */
-declare function formatOverageRate(overageCents: number | undefined, unitSize: number | undefined, currency: string, labels?: Partial<OverageLabels>): string | null;
+declare function formatOverageRate(overageCents: number | undefined, unitSize: number | undefined, currency: string, labels?: Partial<OverageLabels>, locale?: string): string | null;
 /**
  * Format overage rate with optional unit label for comparison/preview UIs.
  * e.g. formatOverageRateWithLabel(50, 1000, "video", "usd") -> "$0.50/1,000 videos"
  * Pass `labels` for i18n support. Pass `pluralUnitLabel` to avoid English "s" pluralization.
+ * Pass `locale` to group numbers in the display locale.
  */
-declare function formatOverageRateWithLabel(overageCents: number | undefined, unitSize: number | undefined, unitLabel: string | undefined, currency: string, pluralUnitLabel?: string, labels?: Partial<OverageLabels>): string | null;
+declare function formatOverageRateWithLabel(overageCents: number | undefined, unitSize: number | undefined, unitLabel: string | undefined, currency: string, pluralUnitLabel?: string, labels?: Partial<OverageLabels>, locale?: string): string | null;
 /**
  * Get singular unit label from item name or slug (e.g. "Videos" -> "video", "reels" -> "reel").
  * Used for quota display in comparison and preview.
@@ -1952,9 +2035,10 @@ declare function formatOverageRateWithLabel(overageCents: number | undefined, un
 declare function getQuotaUnitLabelFromName(nameOrSlug: string, fallback?: string): string;
 /**
  * Format quota "included + overage" for display.
- * Pass `labels` and `pluralUnitLabel` for i18n support.
+ * Pass `labels` and `pluralUnitLabel` for i18n support, and `locale` to group
+ * numbers in the display locale.
  */
-declare function formatQuotaIncludedOverage(included: number | undefined, overageCents: number | undefined, unitLabel: string, currency: string, unitSize?: number, pluralUnitLabel?: string, labels?: Partial<OverageLabels>, allowOverage?: boolean): string;
+declare function formatQuotaIncludedOverage(included: number | undefined, overageCents: number | undefined, unitLabel: string, currency: string, unitSize?: number, pluralUnitLabel?: string, labels?: Partial<OverageLabels>, allowOverage?: boolean, locale?: string): string;
 
 type QuotaDisplayValue = {
     included: number;
@@ -1986,6 +2070,8 @@ interface QuotaLabels {
     included: string;
     /** e.g. "then" — separator between included and price */
     then: string;
+    /** e.g. "hard limit" — shown when overage is not allowed */
+    hardLimit?: string;
 }
 /**
  * Format a quota display value as "X included, then $Y.YY / unit".
@@ -2113,6 +2199,18 @@ declare function validateInvite(opts: {
     requireSubscription?: boolean;
 }): InviteValidation;
 
+/** Minimal workspace shape needed for ownership/role checks. Extended by `permissions.WorkspaceLike`. */
+interface WorkspaceLike$1 {
+    _id: string;
+    createdBy: string | {
+        _id: string;
+    } | null | undefined;
+    users?: Array<string | {
+        _id: string;
+        role?: string;
+    }>;
+}
+
 /**
  * Role-based permission system.
  * Framework-agnostic — used by both React hooks and server-side BuildBase.
@@ -2130,6 +2228,7 @@ declare function validateInvite(opts: {
  * Both are resolved from the same role→permission map. Owner always gets all
  * platform permissions + any app permissions defined in the config.
  */
+
 declare const Permission: {
     readonly WORKSPACE_SETTINGS_VIEW: "workspace:settings:view";
     readonly WORKSPACE_SETTINGS_EDIT: "workspace:settings:edit";
@@ -2147,15 +2246,7 @@ declare const Permission: {
 type PermissionKey = (typeof Permission)[keyof typeof Permission];
 type RolePermissionMap = Record<string, string[]>;
 declare const DEFAULT_ROLE_PERMISSIONS: RolePermissionMap;
-interface WorkspaceLike {
-    _id: string;
-    createdBy: string | {
-        _id: string;
-    } | null | undefined;
-    users?: Array<string | {
-        _id: string;
-        role?: string;
-    }>;
+interface WorkspaceLike extends WorkspaceLike$1 {
     permissions?: Record<string, string[]>;
 }
 interface SettingsLike {
@@ -2212,7 +2303,7 @@ declare function hasPermission(permission: string | string[], ctx: PermissionCon
  *
  * Or manually create `public/push-sw.js` with this content.
  */
-declare const PUSH_SERVICE_WORKER_SCRIPT = "\n// BuildBase Push Notification Service Worker\n// Place this file in your app's public directory (e.g. public/push-sw.js)\n\nself.addEventListener('push', function(event) {\n  if (!event.data) return;\n\n  try {\n    const payload = event.data.json();\n    const title = payload.title || 'Notification';\n    const options = {\n      body: payload.body || '',\n      icon: payload.icon || undefined,\n      badge: payload.icon || undefined,\n      data: { url: payload.url, ...(payload.data || {}) },\n      tag: 'buildbase-push-' + Date.now(),\n    };\n\n    event.waitUntil(\n      self.registration.showNotification(title, options)\n    );\n  } catch (e) {\n    console.error('[PushSW] Failed to show notification:', e);\n  }\n});\n\nself.addEventListener('notificationclick', function(event) {\n  event.notification.close();\n\n  const url = event.notification.data && event.notification.data.url;\n  if (url) {\n    event.waitUntil(\n      clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(clientList) {\n        for (let i = 0; i < clientList.length; i++) {\n          const client = clientList[i];\n          if (client.url === url && 'focus' in client) {\n            return client.focus();\n          }\n        }\n        if (clients.openWindow) {\n          return clients.openWindow(url);\n        }\n      })\n    );\n  }\n});\n";
+declare const PUSH_SERVICE_WORKER_SCRIPT = "\n// BuildBase Push Notification Service Worker\n// Place this file in your app's public directory (e.g. public/push-sw.js)\n\nself.addEventListener('push', function(event) {\n  if (!event.data) return;\n\n  try {\n    const payload = event.data.json();\n    // i18n exception: service workers run outside the SDK's translation\n    // provider, so this last-resort fallback stays English. The server should\n    // always send a localized payload.title.\n    const title = payload.title || 'Notification';\n    const options = {\n      body: payload.body || '',\n      icon: payload.icon || undefined,\n      badge: payload.icon || undefined,\n      data: { url: payload.url, ...(payload.data || {}) },\n      tag: 'buildbase-push-' + Date.now(),\n    };\n\n    event.waitUntil(\n      self.registration.showNotification(title, options)\n    );\n  } catch (e) {\n    console.error('[PushSW] Failed to show notification:', e);\n  }\n});\n\nself.addEventListener('notificationclick', function(event) {\n  event.notification.close();\n\n  const url = event.notification.data && event.notification.data.url;\n  if (url) {\n    event.waitUntil(\n      clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(clientList) {\n        for (let i = 0; i < clientList.length; i++) {\n          const client = clientList[i];\n          if (client.url === url && 'focus' in client) {\n            return client.focus();\n          }\n        }\n        if (clients.openWindow) {\n          return clients.openWindow(url);\n        }\n      })\n    );\n  }\n});\n";
 
 interface BetaFormData {
     name?: string;
@@ -2235,6 +2326,24 @@ interface SDKMessages {
         connectedAgentsEmpty: string;
         connectedAgentsAccess: string;
         connectedAgentsGranted: string;
+        connectedAgentsLoadFailed: string;
+        connectedAgentsRevokeFailed: string;
+        mcpConnectAction: string;
+        mcpGuideTitle: string;
+        mcpGuideDescription: string;
+        mcpServerUrlLabel: string;
+        mcpServerUrlHint: string;
+        mcpPromptLabel: string;
+        mcpPromptHint: string;
+        mcpPromptTemplate: string;
+        mcpClientsLabel: string;
+        mcpAddToConfigFile: string;
+        mcpClientChatgptInstructions: string;
+        mcpClientClaudeInstructions: string;
+        mcpClientClineInstructions: string;
+        mcpCopy: string;
+        mcpCopied: string;
+        mcpLearnMore: string;
         inactive: string;
         inactiveHint: string;
         passkeysTitle: string;
@@ -2298,6 +2407,7 @@ interface SDKMessages {
             billingManageOnly: string;
             openSettings: string;
             back: string;
+            close: string;
         };
     };
     subscription: {
@@ -2584,6 +2694,7 @@ interface SDKMessages {
         featureSuccess: string;
         updateSuccess: string;
         actionStatus: string;
+        fallbackName: string;
     };
     danger: {
         title: string;
@@ -2804,6 +2915,7 @@ interface SDKMessages {
         purchaseFailed: string;
         errorLoading: string;
         insufficientCredits: string;
+        insufficientDetail: string;
     };
     loading: {
         restoringSession: string;
@@ -2839,6 +2951,7 @@ interface SDKMessages {
         fetchCreditPackages: string;
         fetchCreditTransactions: string;
         fetchExpiringCredits: string;
+        fetchWorkspaces: string;
     };
 }
 /**
@@ -2957,17 +3070,17 @@ declare function parseWebhookEvent(options: {
  *
  * Makes a consuming app "agent ready" (see https://isitagentready.com) by
  * serving the standard machine-readable discovery documents an AI agent looks
- * for — with the BuildBase server as the source of truth.
- *
- * The heavy lifting already lives on the platform: an org admin configures
- * agent readiness once (protected resources, scopes, llms.txt) and the server
- * publishes the OAuth2 authorization-server metadata (RFC 8414) and the
- * per-resource protected-resource metadata (RFC 9728). This module lets an app
- * re-serve those documents from its own origin — where agents actually look —
- * plus generate the static discovery documents (Agent Card, Agent Skills,
- * security.txt) from local config. The result: an org admin adds full agent
- * support to their app in a couple of lines, and never hand-writes a
- * `.well-known` route.
+ * for.
+ *
+ * Ownership is split: the platform owns AUTH — it publishes the OAuth2
+ * authorization-server metadata (RFC 8414) and this module re-serves it from
+ * the app's origin, where agents actually look. Everything else (protected
+ * resources and their scopes, RFC 9728 metadata, llms.txt, sitemap, Agent
+ * Card, Agent Skills, security.txt) is CONTENT the app owns — declared locally
+ * in {@link AgentReadyConfig} and generated here; the shared authorization
+ * server stays scope- and resource-agnostic. The result: an org admin adds
+ * full agent support to their app in a couple of lines, and never hand-writes
+ * a `.well-known` route.
  *
  * Zero React and no framework types — every function returns plain data. The
  * only runtime dependency is `fetch`; SHA-256 (for Agent Skills digests) is a
@@ -2983,8 +3096,8 @@ declare function parseWebhookEvent(options: {
  * export const agentConfig: AgentReadyConfig = {
  *   serverUrl: process.env.BUILDBASE_URL!,
  *   orgId: process.env.BUILDBASE_ORG_ID!,
- *   siteUrl: "https://imejis.io",
- *   site: { name: "Imejis", description: "Generate images from templates via API." },
+ *   siteUrl: "https://example.com",
+ *   site: { name: "Acme", description: "Generate images from templates via API." },
  *   robots: { contentSignals: { search: true, aiInput: true, aiTrain: false } },
  * };
  * export async function serveAgentPath(req: Request): Promise<Response> {
@@ -3027,7 +3140,7 @@ interface AgentReadinessBundle {
 }
 /** An Agent Skill (Agent Skills Discovery RFC v0.2.0) published by this app. */
 interface AgentSkill {
-    /** Stable slug, e.g. `imejis-api`. */
+    /** Stable slug, e.g. `acme-api`. */
     name: string;
     /** One-line human/agent-readable summary. */
     description: string;
@@ -3043,7 +3156,7 @@ interface AgentSkill {
 }
 /** One API described in an API Catalog (RFC 9727 / RFC 9264 linkset). */
 interface ApiCatalogApi {
-    /** Anchor URL identifying the API, e.g. `https://api.imejis.io`. */
+    /** Anchor URL identifying the API, e.g. `https://api.example.com`. */
     anchor: string;
     /** OpenAPI / machine-readable description URL (link rel `service-desc`). */
     serviceDesc?: string;
@@ -3054,7 +3167,7 @@ interface ApiCatalogApi {
     /** Optional human title for the API. */
     title?: string;
 }
-/** MCP Server Card (SEP-1649 / SEP-2127), advertising a live MCP server. */
+/** MCP Server Card (SEP-1649 v1.0), advertising a live MCP server. */
 interface McpServerCard {
     /** Server name. */
     name: string;
@@ -3064,13 +3177,50 @@ interface McpServerCard {
     endpoint: string;
     /** Transport type. Defaults to `"streamable-http"`. */
     transport?: string;
-    /** Capabilities object, e.g. `{ tools: {}, resources: {} }`. */
+    /** MCP protocol version the server speaks. Defaults to `"2025-11-25"`. */
+    protocolVersion?: string;
+    /**
+     * Capability flags. Booleans per SEP-1649 v1.0; a legacy object value
+     * (e.g. `{ tools: {} }`) is normalized to booleans by presence.
+     */
     capabilities?: Record<string, unknown>;
     /** Optional human description. */
     description?: string;
     /** Documentation URL. */
     documentationUrl?: string;
 }
+/** One OAuth scope an app declares in its scope catalog. */
+interface AppScope {
+    /** Scope name, e.g. `designs:read`. */
+    name: string;
+    /** Human-readable description, shown on the consent screen. */
+    description: string;
+}
+/** One skill advertised on the A2A Agent Card. */
+interface A2ACardSkill {
+    id: string;
+    name: string;
+    description: string;
+    tags?: string[];
+}
+/**
+ * Overrides for the A2A Agent Card (`/.well-known/agent-card.json`). Every
+ * field is optional — the card is fully derived from `site` + `skills` by
+ * default. See {@link buildA2AAgentCard}.
+ */
+interface A2ACardConfig {
+    name?: string;
+    version?: string;
+    description?: string;
+    /** The endpoint agents connect to. Defaults to `siteUrl`. */
+    serviceUrl?: string;
+    /** Transport protocol advertised for `serviceUrl`. Defaults to `'http'`. */
+    transportProtocol?: string;
+    /** A2A capability flags. Defaults to `{ streaming: false, pushNotifications: false }`. */
+    capabilities?: Record<string, unknown>;
+    /** Skills; defaults to a mapping of `config.skills` (or a generic site skill). */
+    skills?: A2ACardSkill[];
+}
 /** One robots.txt policy group (a `User-agent:` block). */
 interface RobotsPolicy {
     /** User-agent(s) this group applies to, e.g. `'*'` or `'GPTBot'`. */
@@ -3131,7 +3281,7 @@ interface AgentReadyConfig {
     /** The org id (24-hex) whose agent-readiness config to serve. */
     orgId: string;
     /**
-     * This app's public origin, e.g. `https://imejis.io`. Used to build absolute
+     * This app's public origin, e.g. `https://example.com`. Used to build absolute
      * URLs in the Agent Card and to match RFC 9728 resource paths.
      */
     siteUrl: string;
@@ -3151,6 +3301,15 @@ interface AgentReadyConfig {
     };
     /** Agent Skills to publish. Omit to skip the Agent Skills documents. */
     skills?: AgentSkill[];
+    /**
+     * The app's OAuth scope catalog — the source of truth for `scopes_supported`
+     * in this app's RFC 9728 protected-resource metadata (served from your own
+     * origin). Declare real, per-app scopes here (`designs:read`,
+     * `render:execute`, …) instead of placeholders. A `protectedResources` entry
+     * without its own `scopes` list inherits every catalog scope name. Scopes are
+     * app-owned: the shared BuildBase authorization server stays scope-agnostic.
+     */
+    scopes?: AppScope[];
     /** security.txt fields (RFC 9116). Omit to skip serving security.txt. */
     security?: {
         /** Contact URI(s) — email (`mailto:`) or URL. */
@@ -3181,6 +3340,41 @@ interface AgentReadyConfig {
      * from the platform bundle — use when the app owns richer llms.txt content.
      */
     llmsTxt?: string;
+    /**
+     * Local `/llms-full.txt` content (llmstxt.org expanded document). Omit to
+     * skip serving it (or serve your own static file, which then wins).
+     */
+    llmsFullTxt?: string;
+    /**
+     * A2A Agent Card served at `/.well-known/agent-card.json`. Served by
+     * DEFAULT, derived from `site` + `skills`, so readiness scanners find a
+     * valid card with zero config. Pass `false` to disable, or an object to
+     * override any derived field.
+     */
+    a2aCard?: false | A2ACardConfig;
+    /**
+     * Web Bot Auth key directory (IETF WebBotAuth) served at
+     * `/.well-known/http-message-signatures-directory`. Only for apps whose own
+     * outbound bot/agent signs its requests — publish the JWKS public keys here
+     * so receiving sites can verify the signatures. Omitted = not served.
+     */
+    webBotAuth?: {
+        keys: Array<Record<string, unknown>>;
+    };
+    /**
+     * Extra literal documents served by {@link resolveAgentPath}, keyed by exact
+     * request path. The escape hatch for anything the SDK has no builder for —
+     * commerce discovery (x402, UCP, ACP, MPP), `/openapi.json`, future
+     * `.well-known` documents. A string value infers its content type from the
+     * path extension. Extra paths take precedence over built-in documents, so
+     * they can also override any SDK-generated document.
+     */
+    extraPaths?: Record<string, string | {
+        body: string;
+        contentType?: string;
+        status?: number;
+        cacheControl?: string;
+    }>;
     /** robots.txt generation (`buildRobotsTxt`). Omitted = sane defaults. */
     robots?: RobotsConfig;
     /**
@@ -3258,11 +3452,12 @@ declare function buildAgentCard(config: AgentReadyConfig, bundle: AgentReadiness
  * Resolve the RFC 9728 protected-resource metadata for a request path, or null
  * if no configured resource maps to it.
  *
- * App-owned and local: built entirely from `config.protectedResources`, with
- * `authorization_servers` derived from `serverUrl`/`orgId` (the BuildBase
- * issuer). No platform round-trip.
+ * App-owned. `authorization_servers` uses the platform bundle's real
+ * `authorizationServer.issuer` when provided (so this doc can't advertise a
+ * different issuer than the AS metadata / agent card / auth.md), falling back
+ * to the `serverUrl`/`orgId` heuristic when the bundle isn't available.
  */
-declare function buildProtectedResourceMetadata(requestPath: string, config: AgentReadyConfig): DiscoveryDocument | null;
+declare function buildProtectedResourceMetadata(requestPath: string, config: AgentReadyConfig, authServerIssuer?: string): DiscoveryDocument | null;
 /** Agent Skills discovery index (Agent Skills Discovery RFC v0.2.0). */
 declare function buildAgentSkillsIndex(config: AgentReadyConfig): DiscoveryDocument | null;
 /** Serve a single skill's SKILL.md by request path, or null if none matches. */
@@ -3275,16 +3470,68 @@ declare function buildSecurityTxt(config: AgentReadyConfig): DiscoveryDocument |
  * not platform-managed.
  */
 declare function buildLlmsTxt(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * The `/llms-full.txt` document from `config.llmsFullTxt` (app-authored).
+ * Returns null when not set — serve your own static file instead.
+ */
+declare function buildLlmsFullTxt(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * A2A Agent Card (https://a2a-protocol.org) for `/.well-known/agent-card.json`.
+ * Served by default, fully derived from `site` + `skills`, so a consumer is
+ * A2A-discoverable with zero config; `config.a2aCard` overrides any field or
+ * disables the card entirely (`false`). Skills fall back to a generic
+ * site-content skill when none are configured — the card must carry at least
+ * one skill to validate.
+ */
+declare function buildA2AAgentCard(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * Web Bot Auth key directory (JWKS) for
+ * `/.well-known/http-message-signatures-directory`. Returns null unless
+ * `config.webBotAuth.keys` is set — signing keys are the app's own and can't
+ * be derived.
+ */
+declare function buildWebBotAuthDirectory(config: AgentReadyConfig): DiscoveryDocument | null;
+/** One DNS record the org should publish for DNS-AID agent discovery. */
+interface DnsAidRecord {
+    /** Fully-qualified record name, e.g. `_a2a._agents.example.com`. */
+    name: string;
+    /** Record type — HTTPS for HTTPS endpoints, SVCB otherwise. */
+    type: 'HTTPS' | 'SVCB';
+    ttl: number;
+    /** Record data, e.g. `1 example.com. alpn="h2" port=443`. */
+    data: string;
+}
+/**
+ * DNS-AID (DNS for AI Discovery) records this app should publish under its
+ * domain's `_agents` namespace. DNS records can't be served over HTTP — hand
+ * these to the org's DNS provider (and DNSSEC-sign the zone). Derived from the
+ * same config as the HTTP discovery surface, so the two never disagree.
+ */
+declare function buildDnsAidRecords(config: AgentReadyConfig): DnsAidRecord[];
 /**
  * API Catalog (RFC 9727) as a `linkset+json` document for
  * `/.well-known/api-catalog`. Returns null when no APIs are configured.
  */
 declare function buildApiCatalog(config: AgentReadyConfig): DiscoveryDocument | null;
 /**
- * MCP Server Card (SEP-1649) for `/.well-known/mcp/server-card.json`. Returns
- * null when no card is configured (i.e. no MCP server is running).
+ * MCP Server Card (SEP-1649 v1.0) for `/.well-known/mcp/server-card.json`.
+ * Returns null when no card is configured (i.e. no MCP server is running).
  */
 declare function buildMcpServerCard(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * MCP discovery manifest (SEP-1960) for `/.well-known/mcp.json` — the
+ * origin-level index of every MCP server this app exposes. Complements the
+ * per-server card (SEP-1649): scanners and agents probe this path first, then
+ * follow `server_card` for detail. Returns null when no MCP server is
+ * configured.
+ *
+ * The transport endpoint may live on a different origin than the app serving
+ * this manifest (e.g. card on `www.`, server on `api.`); the `authentication`
+ * pointer is derived from the ENDPOINT's origin per RFC 9728 path derivation,
+ * so agents land on the metadata the server's own WWW-Authenticate challenge
+ * advertises.
+ */
+declare function buildMcpDiscoveryManifest(config: AgentReadyConfig): DiscoveryDocument | null;
 /**
  * The `/auth.md` document (agent registration + authentication instructions).
  * Uses `config.authMd` verbatim when provided; otherwise generates one from the
@@ -3348,14 +3595,20 @@ declare function resolveWellKnown(requestPath: string, config: AgentReadyConfig)
  * agent-readiness surface. Returns null for paths this app doesn't serve.
  */
 declare function resolveAgentPath(requestPath: string, config: AgentReadyConfig): Promise<DiscoveryDocument | null>;
-/** A WebMCP tool definition exposed to in-page agents via `navigator.modelContext`. */
-interface WebMcpTool {
+/**
+ * A WebMCP tool definition exposed to in-page agents via `navigator.modelContext`.
+ * `TInput` is the shape your `inputSchema` describes — type your `execute`
+ * parameter inline (`execute: (input: { path: string }) => …`) or pin it with
+ * `WebMcpTool<{ path: string }>`. The default is deliberately loose: the input
+ * arrives from the agent unvalidated, so treat it as untrusted regardless.
+ */
+interface WebMcpTool<TInput = any> {
     name: string;
     description: string;
     /** JSON Schema for the tool's input. */
     inputSchema: Record<string, unknown>;
     /** Called when an agent invokes the tool. */
-    execute: (input: any) => unknown | Promise<unknown>;
+    execute: (input: TInput) => unknown | Promise<unknown>;
 }
 /**
  * Register WebMCP tools with the browser so in-page AI agents can invoke your
@@ -3450,6 +3703,24 @@ interface AppRevokeRequestClaims {
     reason: string;
     [claim: string]: unknown;
 }
+/**
+ * A verified JWT payload: registered claims (RFC 7519) are typed AND
+ * runtime-validated by {@link verifyClientJwt} (a signed token whose `sub` is
+ * a number is rejected, so the types here are real guarantees). Every other
+ * claim is `unknown` — custom claims are attacker-influenced input until you
+ * narrow them (`typeof payload.sid === 'string'`), even after the signature
+ * checks out.
+ */
+interface VerifiedJwtPayload {
+    iss?: string;
+    sub?: string;
+    aud?: string | string[];
+    exp?: number;
+    nbf?: number;
+    iat?: number;
+    jti?: string;
+    [claim: string]: unknown;
+}
 /** Options for {@link verifyClientJwt} (all optional; secure defaults). */
 interface VerifyClientJwtOptions {
     /** Allowed clock skew in seconds for `exp`/`nbf`. Default 60. */
@@ -3470,11 +3741,8 @@ interface VerifyClientJwtOptions {
  * its payload. Checks the signature (timing-safe), the algorithm, `exp`/`nbf`,
  * and — by default — that an `exp` is present at all. Optionally pins `iss`/`aud`.
  * Throws {@link AppBridgeError} on any failure.
- *
- * The third argument accepts either the legacy `clockToleranceSec` number or a
- * {@link VerifyClientJwtOptions} object.
  */
-declare function verifyClientJwt(token: string, clientSecret: string, optionsOrTolerance?: number | VerifyClientJwtOptions): Record<string, any>;
+declare function verifyClientJwt(token: string, clientSecret: string, options?: VerifyClientJwtOptions): VerifiedJwtPayload;
 /** Extract the token from an `Authorization: Bearer <token>` header. */
 declare function extractBearerToken(authorization: string | null | undefined): string | null;
 /**
@@ -3855,5 +4123,205 @@ interface BuildBaseResult extends ScopedActions {
 }
 declare function BuildBase(config: BuildBaseConfig): BuildBaseResult;
 
-export { AI_BOT_USER_AGENTS, ApiVersion, AppBridgeError, AuthApi, AuthStatus, BBAction, BBScreen, BBStatus, BB_PARAM, BaseApi, BetaForm, BillingIntervals, BuildBase, CURRENCY_DISPLAY, CURRENCY_FLAG, CreditBucketSource, CreditBucketStatus, CreditTransactionType, DEFAULT_ROLE_PERMISSIONS, DunningState, EventEmitter, InvoiceStatuses, PLAN_CURRENCY_CODES, PLAN_CURRENCY_OPTIONS, PUSH_SERVICE_WORKER_SCRIPT, Permission, PushApi, SDKEvent, SettingsApi, SubscriptionItemType, SubscriptionStatus, UserApi, WorkspaceApi, appTokenFailure, appTokenSuccess, bearerChallenge, buildAgentCard, buildAgentSkillsIndex, buildApiCatalog, buildAuthMd, buildDiscoveryLinkHeader, buildLlmsTxt, buildMcpServerCard, buildProtectedResourceMetadata, buildRobotsTxt, buildSecurityTxt, buildSitemap, buildSkillMd, calculateBillableSeats, calculateSeatOverageCents, calculateTotalSubscriptionCents, cleanBBParams, clearAgentReadinessCache, clearAuthIntent, consumeAuthIntent, createBBUrl, createCheckoutRedirectUrls, createCreditPurchaseRedirectUrls, BuildBase as default, eventEmitter, extractBearerToken, fetchAgentReadiness, formatCents, formatOverageRate, formatOverageRateWithLabel, formatQuotaIncludedOverage, formatQuotaWithPrice, getAvailableCurrenciesFromPlans, getBasePriceCents, getBillingIntervalAndCurrencyFromPriceId, getCurrencyFlag, getCurrencySymbol, getDisplayCurrency, getPerSeatPriceCents, getPricingVariant, getQuotaDisplayValue, getQuotaDisplayWithVariant, getQuotaOverageCents, getQuotaUnitLabelFromName, getSeatPricing, getStripePriceIdForInterval, handleAppRevokeRequest, handleAppTokenRequest, hasPermission, invalidateCreditBalance, invalidateQuotaUsage, invalidateSubscription, negotiateMarkdown, parseWebhookEvent, provideWebMcpTools, readBBParams, resolveAgentPath, resolveMaxUsers, resolvePermissions, resolveWellKnown, safeRedirect, saveAuthIntent, sha256Digest, signClientJwt, validateInvite, validateRedirectUrl, verifyAppRevokeRequest, verifyAppTokenRequest, verifyClientJwt, verifyWebhookSignature, wantsMarkdown };
-export type { AgentReadinessBundle, AgentReadyConfig, AgentSkill, ApiCatalogApi, AppRevokeRequestClaims, AppTokenRequestClaims, AppTokenResponseBody, AppTokenResult, BBActionType, BBScreenType, BBStatusType, BetaFormData, BetaFormResponse, BillingInterval, BuildBaseConfig, BuildBaseResult, BuildBaseSession, CheckoutResult, ContentSignals, CreditActions, CreditBucketSourceType, CreditBucketStatusType, CreditTransactionTypeValue, DiscoveryDocument, DunningStateType, EventData, EventType, FeatureActions, FormatQuotaWithPriceOptions, GetCheckoutStripeParams, HandlerResult, IAllQuotaUsageResponse, IBaseApiConfig, IBasePricing, IBetaConfig, ICheckoutSessionRequest, ICheckoutSessionResponse, ICheckoutStripeOptions, IConsumeCreditsRequest, IConsumeCreditsResponse, ICreditBalance, ICreditBucket, ICreditBucketsQuery, ICreditBucketsResponse, ICreditPackage, ICreditPackagePricingVariant, ICreditPurchaseRequest, ICreditPurchaseResponse, ICreditTransaction, ICreditTransactionsQuery, ICreditTransactionsResponse, IEventCallbacks, IExpiringCreditsResponse, IInvoice, IInvoiceListResponse, IInvoiceResponse, IOsConfig, IOsState, IPlan, IPlanGroup, IPlanGroupInfo, IPlanGroupLatestVersion, IPlanGroupResponse, IPlanGroupVersion, IPlanGroupVersionWithPlans, IPlanGroupVersionsResponse, IPlanVersion, IPlanVersionSummary, IPlanVersionWithPlan, IPricingVariant, IPublicCreditPackage, IPublicCreditPackagesResponse, IPublicPlanItem, IPublicPlanItemCategory, IPublicPlanVersion, IPublicPlansResponse, IQuotaByInterval, IQuotaIntervalValue, IQuotaOveragePriceIdsByInterval, IQuotaOveragesByInterval, IQuotaUsageStatus, IQuotaUsageStatusResponse, IRecordUsageRequest, IRecordUsageResponse, ISettings, IStripePricesByInterval, ISubscription, ISubscriptionItem, ISubscriptionResponse, ISubscriptionUpdateRequest, ISubscriptionUpdateResponse, IUsageLogEntry, IUsageLogsQuery, IUsageLogsResponse, IUser, IWorkspace, InviteBlockReason, InviteValidation, InvoiceActions, InvoiceStatus, InvoiceStatusType, MaxUsersConfig, McpServerCard, NotificationData, NotificationEvent, NotificationResult, OnWorkspaceChangeParams, PermissionActions, PermissionContext, PermissionKey, PlanActions, PlanVersionWithPricingVariants, QuotaDisplayValue, QuotaDisplayWithOverage, RobotsConfig, RobotsPolicy, RolePermissionMap, ScopedActions, SettingsActions, SitemapUrl, SubscriptionActions, SubscriptionItemTypeValue, SubscriptionStatusType, TranslationKey, UsageActions, UserActions, UserCreatedEventData, UserUpdatedEventData, WebMcpTool, WorkspaceActions, WorkspaceChangedEventData, WorkspaceCreatedEventData, WorkspaceDeletedEventData, WorkspaceUpdatedEventData, WorkspaceUserAddedEventData, WorkspaceUserRemovedEventData, WorkspaceUserRoleChangedEventData };
+/**
+ * MCP server toolkit (server-side, framework-agnostic).
+ *
+ * Turns a consuming app into a live MCP (Model Context Protocol) server so AI
+ * agents can operate its BuildBase capabilities — workspaces, subscriptions,
+ * quotas, credits, feature flags, permissions — plus any custom tools the app
+ * defines. The transport is stateless Streamable HTTP: a single JSON-RPC
+ * message per POST, no sessions and no SSE, which keeps the handler pure and
+ * identical on Node 18+, edge, Deno, and Bun.
+ *
+ * Zero framework types: the core `handle()` takes a plain
+ * `{ method, headers, body }` and returns `{ status, headers, body }` (wire it
+ * into Express/Fastify/Hono yourself), while `fetch()` adapts Web-standard
+ * `Request` → `Response` for Next.js App Router and edge runtimes.
+ *
+ * Agents authenticate with the Bearer tokens the app mints via the OAuth2
+ * app-bridge (`handleAppTokenRequest` + `signClientJwt`); the `auth.verify`
+ * callback maps a verified token to the BuildBase session the tools run under.
+ *
+ * @example Next.js App Router — the entire integration:
+ * ```ts
+ * // lib/mcp.ts
+ * import BuildBase from '@buildbase/sdk';
+ * import { createMcpHandler, verifyClientJwt } from '@buildbase/sdk/mcp';
+ *
+ * const buildbase = BuildBase({
+ *   serverUrl: process.env.BUILDBASE_URL!,
+ *   orgId: process.env.BUILDBASE_ORG_ID!,
+ * });
+ *
+ * export const mcp = createMcpHandler({
+ *   buildbase,
+ *   serverInfo: { name: 'acme', version: '1.0.0' },
+ *   auth: {
+ *     verify: (token) => {
+ *       const c = verifyClientJwt(token, process.env.BUILDBASE_CLIENT_SECRET!);
+ *       // Claims beyond RFC 7519 are `unknown` — narrow before use.
+ *       return {
+ *         sessionId: typeof c.sid === 'string' ? c.sid : '',
+ *         userId: c.sub,
+ *         scopes: Array.isArray(c.scope)
+ *           ? c.scope.filter((s): s is string => typeof s === 'string')
+ *           : undefined,
+ *       };
+ *     },
+ *     resourceMetadataUrl: 'https://example.com/.well-known/oauth-protected-resource',
+ *   },
+ * });
+ *
+ * // app/api/mcp/route.ts
+ * import { mcp } from '@/lib/mcp';
+ * export const POST = (req: Request) => mcp.fetch(req);
+ * export const GET = (req: Request) => mcp.fetch(req);    // 405 per spec (no SSE)
+ * export const DELETE = (req: Request) => mcp.fetch(req); // 405 (stateless)
+ * ```
+ */
+
+/** A transport-agnostic HTTP request (mirror of the DiscoveryDocument idea). */
+interface McpHttpRequest {
+    /** HTTP method, e.g. `'POST'`. */
+    method: string;
+    /** Header map. Keys are matched case-insensitively. */
+    headers: Record<string, string | undefined>;
+    /** Raw JSON body string, or an already-parsed value (e.g. Express req.body). */
+    body?: string | unknown;
+}
+/** The identity a verified Bearer token resolves to. */
+interface McpAuthInfo {
+    /** BuildBase session all tool calls run under (`buildbase.withSession(...)`). */
+    sessionId: string;
+    /** The acting BuildBase user id — default subject for permission checks. */
+    userId?: string;
+    /** Pin tools to one workspace; used when the agent omits `workspaceId`. */
+    workspaceId?: string;
+    /** OAuth scopes granted to the agent; filters tools with `requiredScopes`. */
+    scopes?: string[];
+    /** Raw verified claims, passed through to tool context. */
+    claims?: Record<string, unknown>;
+}
+
+/**
+ * BuildBase agent-auth presets (server-side, framework-agnostic).
+ *
+ * The BuildBase security model: the platform runs the OAuth2 flow (login,
+ * consent, PKCE, refresh) but the APP mints and verifies its own user tokens,
+ * signed with the app's own secret. The platform only relays the minted token
+ * to the agent — it never sees the secret, so it can neither forge nor decode
+ * an app token. The per-user BuildBase session travels inside the token only
+ * as an AES-256-GCM-encrypted `sid` claim, so it is never stored and never
+ * plaintext anywhere; access to it expires with the token.
+ *
+ * These presets make that model a one-liner on each side of the flow, and run
+ * entirely in the app's process — pure local crypto, zero platform calls:
+ *
+ *   • {@link mintAgentToken}  — inside your `applicationTokenUrl` handler:
+ *     signs the app JWT (HS256) with your secret, stamps `aud` from the RFC
+ *     8707 resource, and embeds the encrypted `sid` automatically.
+ *   • {@link buildbaseAuth}   — the `auth` config for `createMcpHandler`:
+ *     verifies the JWT, enforces audience binding, decrypts the `sid`, and
+ *     maps the claims to `McpAuthInfo`.
+ *
+ * @example The full loop:
+ * ```ts
+ * // applicationTokenUrl route — the platform calls this on every grant
+ * const { status, body } = await handleAppTokenRequest({
+ *   authorization: req.headers.get("authorization"),
+ *   clientSecret: process.env.BUILDBASE_CLIENT_SECRET!,
+ *   mintToken: (claims) => mintAgentToken({ claims, secret: process.env.SYSTEM_SECRET! }),
+ * });
+ *
+ * // MCP server — verifies what the route above minted
+ * const mcp = createMcpHandler({
+ *   buildbase,
+ *   auth: buildbaseAuth({ secret: process.env.SYSTEM_SECRET!, resource: "https://app.example.com/api/mcp" }),
+ * });
+ * ```
+ *
+ * AES-GCM comes from WebCrypto (`globalThis.crypto.subtle`) — Node 18+, Bun,
+ * Deno, edge runtimes, browsers. The wire format is
+ * `base64url(iv(12) || authTag(16) || ciphertext)` with the key derived as
+ * `SHA-256(secret + ":bb-session")`, byte-compatible with Node
+ * `createCipheriv("aes-256-gcm", ...)` implementations of the same layout.
+ */
+
+/** Encrypt/decrypt pair for the `sid` claim, bound to one app secret. */
+interface SessionRefCrypto {
+    /** Encrypt a BuildBase session id for embedding in an app JWT. */
+    encryptSessionRef(sessionId: string): Promise<string>;
+    /** Decrypt a `sid` claim. Returns null on any failure (wrong key, garbage). */
+    decryptSessionRef(ref: string): Promise<string | null>;
+}
+/**
+ * Session-ref crypto derived from the app's secret. Both sides of the loop
+ * ({@link mintAgentToken}, {@link buildbaseAuth}) use this internally — reach
+ * for it directly only when minting or verifying tokens by hand.
+ */
+declare function createSessionRefCrypto(secret: string): SessionRefCrypto;
+/** Options for {@link mintAgentToken}. */
+interface MintAgentTokenOptions {
+    /** The verified platform claims (from `handleAppTokenRequest`'s callback). */
+    claims: AppTokenRequestClaims;
+    /** The APP's token-signing secret. Never leaves this process. */
+    secret: string;
+    /** Token lifetime in seconds. Default 3600 — keep agent tokens short-lived. */
+    expiresInSec?: number;
+    /**
+     * App-specific claims merged into the token — e.g. a `workspaceId` resolved
+     * by your own user sync. Merged last, so they can override the defaults.
+     */
+    extraClaims?: Record<string, unknown>;
+}
+/**
+ * Mint the app's agent access token from a platform grant: HS256-signed with
+ * YOUR secret, `aud` bound to the granted RFC 8707 resource(s), scopes carried
+ * through, and the per-user BuildBase session embedded as an encrypted `sid`
+ * claim. The result plugs straight into `handleAppTokenRequest`'s `mintToken`.
+ */
+declare function mintAgentToken(options: MintAgentTokenOptions): Promise<{
+    token: string;
+    expiresIn: number;
+}>;
+/** Options for {@link buildbaseAuth}. */
+interface BuildBaseAuthOptions {
+    /** The APP's token-signing secret — the same one `mintAgentToken` used. */
+    secret: string;
+    /**
+     * The protected resource(s) this server IS. Enforces RFC 8707 audience
+     * binding — the token's `aud` must include one of these URIs. Pass an array
+     * when the server is addressable under more than one resource identifier
+     * (e.g. the canonical `<host>/mcp` plus the literal endpoint URL); the
+     * FIRST entry is the canonical one used to derive `resourceMetadataUrl`.
+     */
+    resource?: string | string[];
+    /**
+     * Explicit RFC 9728 metadata URL for the 401 challenge. Defaults to the
+     * path-derived `/.well-known/oauth-protected-resource<path>` of the first
+     * `resource`.
+     */
+    resourceMetadataUrl?: string;
+    /**
+     * Reject tokens that carry no `aud` claim at all. Default false: audience is
+     * enforced when present, and legacy audience-less tokens still work. Turn
+     * this on once every minted token is audience-bound.
+     */
+    requireAudience?: boolean;
+    /** Extra JWT verification options (clock tolerance, issuer pinning). */
+    verify?: Pick<VerifyClientJwtOptions, 'clockToleranceSec' | 'issuer'>;
+}
+/**
+ * The `auth` config for `createMcpHandler`, prewired for BuildBase-minted app
+ * tokens: HS256 verification with your secret, RFC 8707 audience binding,
+ * `sid` decryption to the BuildBase session, claim mapping to `McpAuthInfo`,
+ * and the derived RFC 9728 `resourceMetadataUrl`. Entirely local — the token
+ * and secret never leave this process.
+ */
+declare function buildbaseAuth(options: BuildBaseAuthOptions): {
+    verify: (token: string, req: McpHttpRequest) => Promise<McpAuthInfo | null>;
+    resourceMetadataUrl?: string;
+};
+
+export { AI_BOT_USER_AGENTS, ApiVersion, AppBridgeError, AuthApi, AuthStatus, BBAction, BBScreen, BBStatus, BB_PARAM, BaseApi, BetaForm, BillingIntervals, BuildBase, CURRENCY_DISPLAY, CURRENCY_FLAG, CreditBucketSource, CreditBucketStatus, CreditTransactionType, DEFAULT_ROLE_PERMISSIONS, DunningState, EventEmitter, InvoiceStatuses, PLAN_CURRENCY_CODES, PLAN_CURRENCY_OPTIONS, PUSH_SERVICE_WORKER_SCRIPT, Permission, PushApi, SDKEvent, SettingsApi, SubscriptionItemType, SubscriptionStatus, UserApi, WorkspaceApi, appTokenFailure, appTokenSuccess, bearerChallenge, buildA2AAgentCard, buildAgentCard, buildAgentSkillsIndex, buildApiCatalog, buildAuthMd, buildDiscoveryLinkHeader, buildDnsAidRecords, buildLlmsFullTxt, buildLlmsTxt, buildMcpDiscoveryManifest, buildMcpServerCard, buildProtectedResourceMetadata, buildRobotsTxt, buildSecurityTxt, buildSitemap, buildSkillMd, buildWebBotAuthDirectory, buildbaseAuth, calculateBillableSeats, calculateSeatOverageCents, calculateTotalSubscriptionCents, cleanBBParams, clearAgentReadinessCache, clearAuthIntent, consumeAuthIntent, createBBUrl, createCheckoutRedirectUrls, createCreditPurchaseRedirectUrls, createSessionRefCrypto, BuildBase as default, eventEmitter, extractBearerToken, fetchAgentReadiness, formatCents, formatMinorAmountIntl, formatOverageRate, formatOverageRateWithLabel, formatQuotaIncludedOverage, formatQuotaWithPrice, getAvailableCurrenciesFromPlans, getBasePriceCents, getBillingIntervalAndCurrencyFromPriceId, getCurrencyDecimals, getCurrencyFlag, getCurrencySymbol, getDisplayCurrency, getPerSeatPriceCents, getPricingVariant, getQuotaDisplayValue, getQuotaDisplayWithVariant, getQuotaOverageCents, getQuotaUnitLabelFromName, getSeatPricing, getStripePriceIdForInterval, handleAppRevokeRequest, handleAppTokenRequest, hasPermission, invalidateCreditBalance, invalidateQuotaUsage, invalidateSubscription, isZeroDecimalCurrency, minorAmountToDisplay, mintAgentToken, negotiateMarkdown, parseWebhookEvent, provideWebMcpTools, readBBParams, resolveAgentPath, resolveMaxUsers, resolvePermissions, resolveWellKnown, safeRedirect, saveAuthIntent, sha256Digest, signClientJwt, validateInvite, validateRedirectUrl, verifyAppRevokeRequest, verifyAppTokenRequest, verifyClientJwt, verifyWebhookSignature, wantsMarkdown };
+export type { A2ACardConfig, A2ACardSkill, AgentReadinessBundle, AgentReadyConfig, AgentSkill, ApiCatalogApi, AppRevokeRequestClaims, AppScope, AppTokenRequestClaims, AppTokenResponseBody, AppTokenResult, BBActionType, BBScreenType, BBStatusType, BetaFormData, BetaFormResponse, BillingInterval, BuildBaseAuthOptions, BuildBaseConfig, BuildBaseResult, BuildBaseSession, CheckoutResult, ContentSignals, CreditActions, CreditBucketSourceType, CreditBucketStatusType, CreditTransactionTypeValue, DiscoveryDocument, DnsAidRecord, DunningStateType, EventData, EventType, FeatureActions, FormatQuotaWithPriceOptions, GetCheckoutStripeParams, HandlerResult, IAllQuotaUsageResponse, IBaseApiConfig, IBasePricing, IBetaConfig, ICheckoutSessionRequest, ICheckoutSessionResponse, ICheckoutStripeOptions, IConsumeCreditsRequest, IConsumeCreditsResponse, ICreditBalance, ICreditBucket, ICreditBucketsQuery, ICreditBucketsResponse, ICreditPackage, ICreditPackagePricingVariant, ICreditPurchaseRequest, ICreditPurchaseResponse, ICreditTransaction, ICreditTransactionsQuery, ICreditTransactionsResponse, IEventCallbacks, IExpiringCreditsResponse, IInvoice, IInvoiceListResponse, IInvoiceResponse, IOsConfig, IOsState, IPlan, IPlanGroup, IPlanGroupInfo, IPlanGroupLatestVersion, IPlanGroupResponse, IPlanGroupVersion, IPlanGroupVersionWithPlans, IPlanGroupVersionsResponse, IPlanVersion, IPlanVersionSummary, IPlanVersionWithPlan, IPricingVariant, IPublicCreditPackage, IPublicCreditPackagesResponse, IPublicPlanItem, IPublicPlanItemCategory, IPublicPlanVersion, IPublicPlansResponse, IQuotaByInterval, IQuotaIntervalValue, IQuotaOveragePriceIdsByInterval, IQuotaOveragesByInterval, IQuotaUsageStatus, IQuotaUsageStatusResponse, IRecordUsageRequest, IRecordUsageResponse, ISettings, IStripePricesByInterval, ISubscription, ISubscriptionItem, ISubscriptionResponse, ISubscriptionUpdateRequest, ISubscriptionUpdateResponse, IUsageLogEntry, IUsageLogsQuery, IUsageLogsResponse, IUser, IWorkspace, InviteBlockReason, InviteValidation, InvoiceActions, InvoiceStatus, InvoiceStatusType, MaxUsersConfig, McpServerCard, MintAgentTokenOptions, NotificationData, NotificationEvent, NotificationResult, OnWorkspaceChangeParams, PermissionActions, PermissionContext, PermissionKey, PlanActions, PlanVersionWithPricingVariants, QuotaDisplayValue, QuotaDisplayWithOverage, RedirectValidationOptions, RobotsConfig, RobotsPolicy, RolePermissionMap, ScopedActions, SessionRefCrypto, SettingsActions, SitemapUrl, SubscriptionActions, SubscriptionItemTypeValue, SubscriptionStatusType, TranslationKey, UsageActions, UserActions, UserCreatedEventData, UserUpdatedEventData, WebMcpTool, WorkspaceActions, WorkspaceChangedEventData, WorkspaceCreatedEventData, WorkspaceDeletedEventData, WorkspaceUpdatedEventData, WorkspaceUserAddedEventData, WorkspaceUserRemovedEventData, WorkspaceUserRoleChangedEventData };