@burdenoff/microfe-coolandlovely 2026.1101.6 → 2026.1101.7

package/dist/generated/global-types.d.ts

@@ -172,6 +172,10 @@ export declare enum ActivityAction {
 export type ActivityFilterInput = {
     action?: InputMaybe<Scalars['String']['input']>;
     actorId?: InputMaybe<Scalars['String']['input']>;
+    /** Only rows made by this kind of actor origin (BOFF-9649). The only recorded origin is `ai_assistant`: a change an AI assistant session made for its owner. */
+    actorOrigin?: InputMaybe<Scalars['String']['input']>;
+    /** Only rows made by this AI assistant session (BOFF-9649). */
+    assistantSessionId?: InputMaybe<Scalars['String']['input']>;
     endDate?: InputMaybe<Scalars['DateTime']['input']>;
     resource?: InputMaybe<Scalars['String']['input']>;
     resourceId?: InputMaybe<Scalars['String']['input']>;
@@ -185,6 +189,12 @@ export type ActivityLog = {
     __typename?: 'ActivityLog';
     action: Scalars['String']['output'];
     actorId?: Maybe<Scalars['String']['output']>;
+    /** `ai_assistant` when an AI assistant session made the change; null for a human-made change. */
+    actorOrigin?: Maybe<Scalars['String']['output']>;
+    /** Proposal / idempotency key the assistant mutation ran under, when it had one. */
+    assistantCorrelationId?: Maybe<Scalars['String']['output']>;
+    /** Relay session (assistant sandbox) that made the change, when an assistant made it. */
+    assistantSessionId?: Maybe<Scalars['String']['output']>;
     createdAt: Scalars['DateTime']['output'];
     description?: Maybe<Scalars['String']['output']>;
     id: Scalars['ID']['output'];
@@ -416,9 +426,22 @@ export type Addon = {
     priceHistory: Array<AddonPriceHistory>;
     /** Product ID the addon belongs to (reference to product microservice) */
     productID?: Maybe<Scalars['String']['output']>;
+    /** Whether buying this add-on requires a paid subscription to its product (the catalogs' "Free tier exclusion" rule, BOFF-9889). False for items sold to Free users on purpose. */
+    requiresPaidSubscription?: Maybe<Scalars['Boolean']['output']>;
     /** The timestamp when the addon was last updated. */
     updatedAt?: Maybe<Scalars['DateTime']['output']>;
 };
+/** Why an add-on can or cannot be bought by the caller's billing account(s). */
+export declare enum AddonEligibilityReason {
+    /** The add-on can be bought. */
+    Eligible = "ELIGIBLE",
+    /** No add-on with this id exists. */
+    NotFound = "NOT_FOUND",
+    /** The add-on requires a paid subscription to its product and none is active. */
+    PaidSubscriptionRequired = "PAID_SUBSCRIPTION_REQUIRED",
+    /** The chosen subscription is not a paid plan of the add-on's product. */
+    SubscriptionNotEligible = "SUBSCRIPTION_NOT_ELIGIBLE"
+}
 /** Tracks historical price changes for an Addon. A new record is created whenever an addon's price is updated. */
 export type AddonPriceHistory = {
     __typename?: 'AddonPriceHistory';
@@ -439,6 +462,17 @@ export type AddonPriceHistory = {
     /** Optional reason for the price change */
     reason?: Maybe<Scalars['String']['output']>;
 };
+/** Purchase eligibility of one add-on (BOFF-9889). */
+export type AddonPurchaseEligibility = {
+    __typename?: 'AddonPurchaseEligibility';
+    addonId: Scalars['ID']['output'];
+    eligible: Scalars['Boolean']['output'];
+    /** Active paid subscriptions of the add-on's product the add-on may be attached to. */
+    eligibleSubscriptionIds: Array<Scalars['ID']['output']>;
+    productId?: Maybe<Scalars['String']['output']>;
+    reason: AddonEligibilityReason;
+    requiresPaidSubscription: Scalars['Boolean']['output'];
+};
 export type AddonSubscription = {
     __typename?: 'AddonSubscription';
     /** The addon linked to this subscription. */
@@ -754,6 +788,8 @@ export type AiModelPrice = {
     isActive: Scalars['Boolean']['output'];
     model: Scalars['String']['output'];
     outputPer1M: Scalars['Float']['output'];
+    /** When this price row last changed. Ledger cost estimates cite it in their pricing reference (wspace-prompts-svc, BOFF-9935) so a cost stays traceable to the exact price version that produced it. */
+    updatedAt: Scalars['DateTime']['output'];
 };
 /** Amount range filter for queries */
 export type AmountRangeInput = {
@@ -3566,6 +3602,8 @@ export type CreateContentPageInput = {
     category?: InputMaybe<Scalars['String']['input']>;
     content: Scalars['String']['input'];
     contentFormat?: InputMaybe<Scalars['String']['input']>;
+    /** Customer approval for a case study. All three fields are required, and signedAt may not be in the future. */
+    customerSignOff?: InputMaybe<CustomerSignOffInput>;
     excerpt?: InputMaybe<Scalars['String']['input']>;
     featured?: InputMaybe<Scalars['Boolean']['input']>;
     isPublished?: InputMaybe<Scalars['Boolean']['input']>;
@@ -4771,6 +4809,22 @@ export type CustomerSatisfactionSurveyFilterInput = {
     startDate?: InputMaybe<Scalars['DateTime']['input']>;
     ticketId?: InputMaybe<Scalars['String']['input']>;
 };
+/** Who at the customer approved a case study, when, and where the written approval is kept. Never invent one: it is the only thing that lets a case study appear on a public website. */
+export type CustomerSignOff = {
+    __typename?: 'CustomerSignOff';
+    /** Reference to the stored written approval (document id, ticket or file URL). Only returned to callers who manage content pages; null for public visitors. */
+    documentRef?: Maybe<Scalars['String']['output']>;
+    /** When the customer approved the story */
+    signedAt: Scalars['DateTime']['output'];
+    /** Name and role of the approving person at the customer. Only returned to callers who manage content pages; null for public visitors. */
+    signedBy?: Maybe<Scalars['String']['output']>;
+};
+/** Customer approval for a case study (see CustomerSignOff) */
+export type CustomerSignOffInput = {
+    documentRef: Scalars['String']['input'];
+    signedAt: Scalars['DateTime']['input'];
+    signedBy: Scalars['String']['input'];
+};
 export declare enum DlqStatus {
     Discarded = "DISCARDED",
     Investigating = "INVESTIGATING",
@@ -5542,6 +5596,19 @@ export declare enum DimensionUnit {
     Inch = "INCH",
     Meter = "METER"
 }
+/** Input for the M2M dispatchWebhookEvent mutation */
+export type DispatchWebhookEventInput = {
+    /** Caller-supplied event ID; enables idempotent redispatch per subscription */
+    eventId?: InputMaybe<Scalars['String']['input']>;
+    /** Event type being dispatched */
+    eventType: Scalars['String']['input'];
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['input'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['input'];
+    /** Event payload; wrapped in the signed envelope as `data` */
+    payload: Scalars['JSON']['input'];
+};
 /** DSAR mode — GDPR Art. 15 (access/export) or Art. 17 (erasure). */
 export declare enum DsarMode {
     Erase = "ERASE",
@@ -5595,6 +5662,15 @@ export type EarnCreditsInput = {
     productId?: InputMaybe<Scalars['String']['input']>;
     sourceReferenceId?: InputMaybe<Scalars['String']['input']>;
 };
+/** Outcome of serviceReverseEarning. */
+export declare enum EarningReversalOutcome {
+    /** An earlier call already reversed the entry (idempotent replay). */
+    AlreadyReversed = "ALREADY_REVERSED",
+    /** The entry is RESERVED for, or PAID by, a payout and was left unchanged. */
+    NotReversible = "NOT_REVERSIBLE",
+    /** The entry was AVAILABLE and is now REVERSED. */
+    Reversed = "REVERSED"
+}
 export declare enum EarningUnitType {
     Credits = "CREDITS",
     Money = "MONEY"
@@ -5620,6 +5696,9 @@ export type EarningsEntry = {
     paidAt?: Maybe<Scalars['DateTime']['output']>;
     payoutRequestId?: Maybe<Scalars['ID']['output']>;
     reservedAt?: Maybe<Scalars['DateTime']['output']>;
+    reversalReason?: Maybe<Scalars['String']['output']>;
+    /** When the entry was reversed (its source sale was refunded), if it was. */
+    reversedAt?: Maybe<Scalars['DateTime']['output']>;
     sourceCategory: EarningsSourceCategory;
     sourceEventId?: Maybe<Scalars['String']['output']>;
     sourceReferenceId?: Maybe<Scalars['String']['output']>;
@@ -5654,13 +5733,18 @@ export declare enum EarningsSourceCategory {
 }
 export type EarningsSummary = {
     __typename?: 'EarningsSummary';
+    /** Earned, past its hold window and not yet reserved for a payout. */
     availableAmount: Scalars['Float']['output'];
     categoryBreakdown: Array<EarningsCategoryBreakdown>;
     creditsAmount: Scalars['Float']['output'];
     moneyAmount: Scalars['Float']['output'];
     paidAmount: Scalars['Float']['output'];
+    /** Earned but still inside its hold window (availableAt in the future), so not payable yet. */
     pendingAmount: Scalars['Float']['output'];
     reservedAmount: Scalars['Float']['output'];
+    /** Entries reversed because their source sale was refunded. Not part of any other total. */
+    reversedAmount: Scalars['Float']['output'];
+    /** Everything earned, excluding reversed entries. */
     totalLifetimeAmount: Scalars['Float']['output'];
 };
 export type EditorialCollection = {
@@ -6079,6 +6163,17 @@ export type ExploreConversation = {
     token: Scalars['String']['output'];
     turnCount: Scalars['Int']['output'];
 };
+/** What a conversation token reveals about its own conversation, and nothing more. Deliberately a separate type from `ExploreConversation`: that one carries the bearer secret and is only ever handed to the caller that already holds it, while this one is a plain read. It has no token, no IP hash and no stored metadata, and it can never describe a conversation other than the one the caller's token owns. */
+export type ExploreConversationInfo = {
+    __typename?: 'ExploreConversationInfo';
+    createdAt: Scalars['DateTime']['output'];
+    /** The visitor's language: one of `en` `zh` `hi` `es` `ar` `ta`, or null. Null when none was sent, when it was not one of those, and for a conversation stored before the value was checked — never a raw string. */
+    locale?: Maybe<Scalars['String']['output']>;
+    /** Every message the conversation holds, whatever its status. Compare it with the length of an `exploreConversationMessages` read (which is capped at 100) to know whether that read was the whole thread. */
+    messageCount: Scalars['Int']['output'];
+    /** Slug of the product website the conversation started on, as stored. Null when the visitor did not say. */
+    productSlug?: Maybe<Scalars['String']['output']>;
+};
 /** A call-to-action button derived from a cited link. `kind` is one of: CONTACT PARTNERS PRICING SERVICES WAITLIST STORE APP DOCS OTHER. */
 export type ExploreCta = {
     __typename?: 'ExploreCta';
@@ -6596,6 +6691,8 @@ export type GetStoreProductTagsInput = {
 export type GrantAppDelegationInternalInput = {
     /** Client ID of the first-party system app (e.g. burdenoff_integration_core). */
     clientId: Scalars['String']['input'];
+    /** When the delegation lapses (BOFF-9962). Must be in the future. Omit for a delegation without an expiry; a re-grant without it keeps no expiry. */
+    expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
     /** Scopes the delegation must keep for other grants that share it (e.g. the user's other integration connections). A retained scope is kept only while the existing delegation is ACTIVE and already holds it, and only while the app still allows it; otherwise it is dropped, never rejected. A grant therefore never restores or adds a scope beyond the requested scopes. */
     retainedScopes?: InputMaybe<Array<Scalars['String']['input']>>;
     /** Workspaces the delegation must keep for other grants that share it. Kept only while the existing delegation is ACTIVE and already covers them: restoring a REVOKED or EXPIRED delegation covers only workspaceIds. Ignored when workspaceIds is empty (unrestricted). */
@@ -6958,6 +7055,8 @@ export type InitiatePaymentResponse = {
     discountType?: Maybe<Scalars['String']['output']>;
     /** Error message if failed */
     error?: Maybe<Scalars['String']['output']>;
+    /** Machine-readable error code when the initiation failed, e.g. PAID_SUBSCRIPTION_REQUIRED when an add-on needs a paid plan (BOFF-9889). */
+    errorCode?: Maybe<Scalars['String']['output']>;
     /** Tax jurisdiction */
     jurisdiction: Scalars['String']['output'];
     /** Razorpay order ID (for Razorpay payments) */
@@ -8213,6 +8312,8 @@ export type Mutation = {
     approveReview: ProductReview;
     approveTranslation: Translation;
     approveWaitlist: NewsletterWaitlist;
+    /** Admin approves a pending template revision: it becomes the live version of the template (the version goes up) and the revision is removed. */
+    approveWorkflowTemplateRevision: WorkflowTemplateSubmission;
     /** Soft archive a billing account. Financial history is preserved and the account is removed from active billing operations. */
     archiveBillingAccount: BillingAccount;
     /** Archive a channel */
@@ -8287,7 +8388,7 @@ export type Mutation = {
     bulkSendCustomEmail: BulkCustomEmailResult;
     /** Send the same free-text message to multiple candidate rounds at once (admin). Each item is processed independently — a round already messaged is skipped unless `force` is set, and one item failing does not abort the rest. */
     bulkSendRoundMessage: BulkSendResult;
-    /** Bulk set user's opt-in/out preference for multiple feature flags. RBAC is scoped to the target workspace via `input.workspaceId`. */
+    /** Bulk set the calling user's opt-in/out preference for multiple feature flags. Self-scoped: rows are keyed by the caller's user id and the resolver requires membership of `input.workspaceId`. */
     bulkSetUserFeatureFlagPreferences: Array<UserFeatureFlagPreference>;
     /** Update status for a batch of applications at once (admin) — e.g. marking everyone a bulk email just went to as EMAIL_SENT so a later bulk-send doesn't re-email the same people, then moving them back to whatever status applies once the outcome is decided. One item failing (e.g. a deleted application) does not abort the rest. */
     bulkUpdateApplicationStatus: BulkUpdateApplicationStatusResult;
@@ -8678,6 +8779,8 @@ export type Mutation = {
     /** M2M: delete a ShippingAddress owned by an explicit user, on behalf of a calling service. Returns false when no matching row exists for that user. Service-actor only. */
     deleteUserShippingAddress: Scalars['Boolean']['output'];
     deleteWebhook: Scalars['Boolean']['output'];
+    /** Delete a webhook subscription and its delivery log */
+    deleteWebhookSubscription: Scalars['Boolean']['output'];
     /** Admin delists a published product — removes it from store discovery for new users while preserving access for anyone who already installed it. */
     delistProduct: StoreProduct;
     /** Deliver the same notification to multiple recipients in bulk. More efficient than multiple single calls for broadcast scenarios. */
@@ -8700,6 +8803,8 @@ export type Mutation = {
     discardDLQEntry: Scalars['Boolean']['output'];
     /** Dismiss a tour for a user (with option to dismiss permanently) */
     dismissTour: TourUserProgress;
+    /** Dispatch an event to every matching webhook subscription of an owner. M2M only — service / super_admin actors; called by the owning service over the internal gateway. Delivery is HMAC-SHA256 signed with retry/backoff and idempotent per caller-supplied eventId. */
+    dispatchWebhookEvent: WebhookDispatchSummary;
     duplicateNewsletter: Newsletter;
     /** Duplicate a tour with all its steps */
     duplicateTour: Tour;
@@ -8772,7 +8877,15 @@ export type Mutation = {
     /** Generate challenge message for wallet signature */
     generateWalletChallenge: WalletChallengeResult;
     getSupportAttachmentPartUploadUrls: Array<SupportAttachmentPresignedPart>;
-    /** Service-trusted internal grant of a first-party self-delegation, keyed by the app's client id. Lets a trusted backend record the consent created when a user adds a first-party integration, without the workspace-admin gate that the public grantDelegation enforces. Gated to internal service / super_admin callers and restricted to first-party system apps. */
+    /** Discard a reply draft without sending it. */
+    globalDiscardTicketReplyDraft: Scalars['Boolean']['output'];
+    /** Draft a reply from published knowledge-base articles, FAQs and canned responses, with citations. Saved as an internal draft, never sent. Fails with GROUNDING_INSUFFICIENT when no article or FAQ covers the ticket. */
+    globalDraftTicketReply: SupportMessage;
+    /** Send a reply draft to the customer as an agent reply, optionally edited. This is the only way a draft reaches a customer. */
+    globalSendTicketReplyDraft: SupportMessage;
+    /** Triage a ticket now: fill an empty category, raise the priority if the evidence calls for it, select the SLA policy and suggest an agent. */
+    globalTriageTicket: SupportTriageDecision;
+    /** Service-trusted internal grant of a first-party self-delegation, keyed by the app's client id. Lets a trusted backend record the consent created when a user adds a first-party integration, without the workspace-admin gate that the public grantDelegation enforces. Gated to internal service / super_admin callers and restricted to first-party system apps, or to service-managed apps for their managing service (BOFF-9962). */
     grantAppDelegationInternal: AppUserDelegation;
     /** Grant an app access to act on a specific workspace. Idempotent: re-granting an ACTIVE authorization updates its scopes; re-granting a REVOKED one flips it back to ACTIVE and clears the revoke fields. */
     grantAppWorkspaceAccess: AppWorkspaceAuthorization;
@@ -8808,7 +8921,7 @@ export type Mutation = {
     inviteDeveloperOrgMember: DeveloperOrgInvitationCreated;
     /** Invite a user to an organization by email */
     inviteOrganizationMember: OrganizationInvite;
-    /** Service-trusted internal mint of an app-as-user token for a named first-party app. Lets a trusted backend (e.g. wspace-integrations-svc) mint a token for a secret-less system app without holding client credentials. Gated to internal service / super_admin callers; still requires an ACTIVE AppUserDelegation for (clientId, targetUserId), so a user must have granted access first. */
+    /** Service-trusted internal mint of an app-as-user token for a named first-party app. Lets a trusted backend (e.g. wspace-integrations-svc) mint a token for a secret-less system app without holding client credentials. Gated to internal service / super_admin callers; still requires an ACTIVE AppUserDelegation for (clientId, targetUserId), so a user must have granted access first. A service-managed app (BOFF-9962) is minted only by its managing service, always bound to one workspace, for at most 15 minutes and never past the grant. */
     issueAppAsUserTokenInternal: AppAsUserTokenResponse;
     /** Public endpoint — no authentication required. Email is normalized (trimmed, lowercased). Must be protected by API gateway rate limiting (recommended: 5 req/min per IP). */
     joinWaitlist: NewsletterWaitlist;
@@ -8876,6 +8989,8 @@ export type Mutation = {
     provisionDedicatedTenant: Tenant;
     /** Provision Free-tier WORKSPACE-scoped quota assignments for a specific workspace (BOFF-5656). Service-to-service only — called by wspace-layer services' workspace.created event consumers (Redis Streams do not cross the wspace/global layer network boundary, so the wspace-side consumer calls this mutation cross-layer instead of billing consuming the event directly). Reuses the org's existing (or lazily-created) default billing account and every active Free ($0, isActive) subscription on it. Idempotent — safe to call repeatedly for the same workspace. Never creates a Plan/Subscription for a product with no registered Free plan; such products are silently skipped, not errored. */
     provisionFreeTierForWorkspace: ProvisionFreeTierForWorkspaceResult;
+    /** Provision a service-managed app (BOFF-9962): an app a backend service owns for a principal of its own, such as a FluidGrids agent. The calling service becomes the app's manager and owner. The app has no usable client secret, so the only way to act as it is issueAppAsUserTokenInternal, by its managing service, for a user who granted it a delegation. Service actors only. */
+    provisionManagedAppInternal: App;
     /** Public unsubscribe via HMAC-signed token from email link. No authentication required. */
     publicUnsubscribeByToken: Scalars['Boolean']['output'];
     publishApplication: Application;
@@ -8958,6 +9073,8 @@ export type Mutation = {
     registerSupportAttachmentPart: Scalars['Boolean']['output'];
     /** Creates or updates subject mappings for a product. Idempotent: a product's service can call it on every deploy. An existing mapping can only be changed by the actor that registered it, or by a super admin. */
     registerWebhookEventSubjects: Array<WebhookEventSubject>;
+    /** Register an outbound webhook endpoint for an owner */
+    registerWebhookSubscription: WebhookSubscription;
     reinstatePublisher: Publisher;
     rejectApplication: Application;
     /** Platform admin only: reject a pending_review version with a reason. The developer can fix their submission and re-submit. */
@@ -8973,6 +9090,8 @@ export type Mutation = {
     rejectPublisher: Publisher;
     rejectReview: ProductReview;
     rejectWaitlist: NewsletterWaitlist;
+    /** Admin rejects a pending template revision with a reason the author sees. The live version stays listed unchanged. */
+    rejectWorkflowTemplateRevision: WorkflowTemplateRevision;
     releaseLegalHold: LegalHold;
     releaseSuppression: SuppressionEntry;
     removeAgentSkills: AgentProfile;
@@ -9012,7 +9131,7 @@ export type Mutation = {
     /** Revoke a previously-granted tenant-member row. Idempotent on the missing row (returns false). Cascade-removing the user's existing org/workspace memberships under the tenant is NOT performed here — those rows survive and would need to be removed separately if the intent is full ejection. (BOFF-2652) */
     removeTenantMember: Scalars['Boolean']['output'];
     removeTicketTags: SupportTicket;
-    /** Remove user's preference for a feature flag (reverts to default). RBAC is scoped to the target workspace. */
+    /** Remove the calling user's preference for a feature flag (reverts to default). Self-scoped: the row is keyed by the caller's user id and the resolver requires membership of `workspaceId`. */
     removeUserFeatureFlagPreference: Scalars['Boolean']['output'];
     /** Remove a visibility rule */
     removeVisibilityRule: Scalars['Boolean']['output'];
@@ -9109,6 +9228,8 @@ export type Mutation = {
     resumeDeveloperOrgSubscription: DeveloperOrgSubscription;
     resumeSLA: SupportTicket;
     resumeScheduledJob: ScheduledJob;
+    /** Retire a service-managed app (BOFF-9962): mark it REVOKED and withdraw every delegation it holds. Only its managing service may call it. Idempotent: returns false when the app was already retired. */
+    retireManagedAppInternal: Scalars['Boolean']['output'];
     /** Retire one push registration the transport has reported permanently dead. Called by global-channel-svc after a send fails with a code that means the token itself is gone: FCM's `UNREGISTERED`, or an `INVALID_ARGUMENT` whose message names the registration token. Without it the registry accumulates tokens no push can ever reach, and every later fan-out keeps paying for uninstalled apps. Keyed on the token — that is what the transport rejected, it is unique in this registry, and a service acting on a transport report has no calling actor to scope by. That is precisely why this is service-gated rather than `scopeType: "self"`. `errorCode` is recorded for traceability; the delivery side owns the policy of which codes are terminal (a routing or credential fault must never retire a device — retiring one hides the misconfiguration and destroys the evidence). Returns true if a registration was removed. */
     retirePushDeviceInternal: Scalars['Boolean']['output'];
     retireSubprocessor: Subprocessor;
@@ -9178,7 +9299,7 @@ export type Mutation = {
     seedAtheleteBridgeUserTours: SeedAtheleteBridgeUserToursResult;
     /** Overwrite the service-owned BigConsole onboarding tours. Repeated calls update the same slugs. */
     seedBigconsoleUserTours: SeedBigconsoleUserToursResult;
-    /** Overwrite the built-in Buildmyiq user-facing dashboard tour from the service-owned seed file. */
+    /** Overwrite the built-in Buildmyiq user-facing tours (dashboard with the getting-started checklist, authoring, and my learning) from the service-owned seed file. */
     seedBuildmyiqUserTours: SeedBuildmyiqUserToursResult;
     /** Overwrite the built-in CollabKin user-facing dashboard tour from the service-owned seed file. */
     seedCollabkinUserTours: SeedCollabkinUserToursResult;
@@ -9190,8 +9311,12 @@ export type Mutation = {
     seedDefaultShortcuts: Scalars['Int']['output'];
     /** Overwrite the built-in FluidGrids user-facing workflow-builder tour from the service-owned seed file. */
     seedFluidgridsUserTours: SeedFluidgridsUserToursResult;
+    /** Overwrite the built-in HookMovies user-facing tours (overview with the getting-started checklist, catalog, productions and auditions) from the service-owned seed file. */
+    seedHookmoviesUserTours: SeedHookmoviesUserToursResult;
     /** Overwrite the built-in IntelWatchtower user-facing tours for the intelligence workflow. */
     seedIntelWatchtowerUserTours: SeedIntelWatchtowerUserToursResult;
+    /** Overwrite the built-in SemanticFed user-facing tours (first-login getting started, empty workspace, query console and policies) from the service-owned seed file. */
+    seedSemanticFedUserTours: SeedSemanticFedUserToursResult;
     /** Overwrite the built-in TheCulturePost user-facing tours from the service-owned seed file. */
     seedTheCulturePostUserTours: SeedTheCulturePostUserToursResult;
     /** Overwrite the built-in VibeControls user-facing tours for Support, Notifications, and Conversations from the service-owned seed file. */
@@ -9214,10 +9339,14 @@ export type Mutation = {
     sendTestNewsletter: TestNewsletterResult;
     /** Record an EarningsEntry on behalf of an org/user by explicit billingAccountId. Service/super_admin only — internal gateway. */
     serviceRecordEarning: EarningsEntry;
+    /** Refund all or part of a payment on behalf of the service that charged it. Idempotent per sourceIdempotencyKey. Service/super_admin only. */
+    serviceRefundPayment: ServiceRefundPaymentResult;
     /** Request a payout drawn from a user's AVAILABLE earnings on an explicit billing account. Reserves matching earnings and creates a PayoutRequest that the existing approval/processing workflow drives to completion. Service/super_admin only — internal gateway. */
     serviceRequestPayout: PayoutRequest;
     /** Resolve (or create) a canonical default PayoutAccount for a publisher/org owner so a service caller can obtain a `payoutAccountId` for `serviceRequestPayout` without the user-only `addPayoutAccount` path. Idempotent / self-healing: repeated calls return the SAME account (no duplicates). Prefers an existing user-registered account; otherwise creates a placeholder that can be referenced but against which NO money moves until the user completes real payment setup. Service/super_admin only — internal gateway. */
     serviceResolvePayoutAccount: PayoutAccount;
+    /** Reverse an earnings entry (by the source key it was recorded with) whose source sale was refunded. Only an AVAILABLE entry (not reserved for, or paid by, a payout) is reversed; the outcome says what happened. Idempotent. Service/super_admin only — internal gateway. */
+    serviceReverseEarning: ServiceEarningReversal;
     /** Mirror a billing PayoutRequest status change back onto the DeveloperOrgPayout it originated from (BOFF-7192). Billing owns the payout system-of-record and is where admins approve/reject/mark-paid; this keeps devportal's own payout history in sync so it doesn't stay stuck showing a stale status forever. Looked up by sourceIdempotencyKey ("devportal:payout:<id>", set when the request was originally mirrored to billing) — a no-op if the key isn't a devportal-originated one, or no matching local payout exists. Service/super_admin only — internal gateway. */
     serviceSyncPayoutStatus?: Maybe<DeveloperOrgPayout>;
     /** M2M: create or update the calling service's catalogue listing for an item that service sells through its own checkout (BOFF-3430), for cross-product discovery. Idempotent on (calling service identity, input.externalId): call it on every change of the source item. The owning service is always the verified service identity of the caller, never an input field. Set status ARCHIVED to take the listing down. A listing an admin has delisted or rejected stays off display until an admin restores it. Service-actor only. */
@@ -9246,7 +9375,7 @@ export type Mutation = {
     setStoreOrderShipping: StoreOrder;
     /** Set or update the endpoint URL for a DEDICATED tenant. Transitions PROVISIONING → ACTIVE when endpoint is set. */
     setTenantEndpoint: Tenant;
-    /** Set user's opt-in/out preference for a previewable feature flag. RBAC is scoped to the target workspace via `input.workspaceId`. */
+    /** Set the calling user's opt-in/out preference for a previewable feature flag. Self-scoped: the row is keyed by the caller's user id and the resolver requires membership of `input.workspaceId`. */
     setUserFeatureFlagPreference: UserFeatureFlagPreference;
     setUserLanguagePreference: UserLanguagePreference;
     /** Set workspace-level override for a feature flag (super admin or workspace admin). RBAC is scoped to the target workspace via `input.workspaceId`. */
@@ -9289,6 +9418,8 @@ export type Mutation = {
     submitProduct: StoreProduct;
     submitPublisherVerification: Publisher;
     submitSatisfactionSurvey: CustomerSatisfactionSurvey;
+    /** Publish a workflow as a community template (or resubmit one of yours after a rejection). The template is reviewed by a store admin before it is listed. */
+    submitWorkflowTemplate: WorkflowTemplateSubmission;
     /** Public endpoint — no authentication required for website newsletter signup. Email is normalized (trimmed, lowercased) and validated in the provider. Protected by rate limiting (5 req/min per IP) and optional reCAPTCHA at the resolver. */
     subscribe: NewsletterSubscriber;
     subscribeToStore: UserStoreSubscription;
@@ -9326,6 +9457,8 @@ export type Mutation = {
     /** Test RADIUS connection */
     testRADIUSConnection: Scalars['Boolean']['output'];
     testWebhook: WebhookTestResult;
+    /** Send a synthetic test event to a webhook subscription and report the result */
+    testWebhookSubscription: WebhookDispatchResult;
     toggleAddOn: Scalars['Boolean']['output'];
     /** Toggle the featured state of a store product (admin) */
     toggleFeatured: Scalars['Boolean']['output'];
@@ -9494,8 +9627,6 @@ export type Mutation = {
     updatePromotion: Promotion;
     updatePublisher: Publisher;
     updateQuota: Scalars['Boolean']['output'];
-    /** Update RBAC configuration for a scope */
-    updateRbacConfig: RbacConfig;
     updateRecurringBillingPlan: RecurringBillingPlan;
     /** Update a registered resource */
     updateResource: Resource;
@@ -9546,6 +9677,8 @@ export type Mutation = {
     updateUserPlatformConnectionNotifications: UserPlatformConnection;
     updateVariantStats: NewsletterVariant;
     updateWebhook: Webhook;
+    /** Update a webhook subscription (URL, secret, events, enabled, description) */
+    updateWebhookSubscription: WebhookSubscription;
     /** Update an existing workspace */
     updateWorkspace: Workspace;
     /** Update a workspace member's role */
@@ -9592,6 +9725,10 @@ export type Mutation = {
     /** Vote on a review (helpful/not helpful) */
     voteOnAppReview: AppReviewVote;
     withdrawConsent: ConsentRecord;
+    /** Withdraw the pending (or rejected) new version of one of your published templates. The live version is not affected. Takes the template's product id. */
+    withdrawWorkflowTemplateRevision: WorkflowTemplateSubmission;
+    /** Withdraw one of your templates. A published template is taken off the store first; anything not live is deleted. */
+    withdrawWorkflowTemplateSubmission: WithdrawWorkflowTemplateSubmissionResult;
 };
 /** Root mutation type */
 export type MutationAcceptDeveloperOrgInvitationArgs = {
@@ -9818,6 +9955,11 @@ export type MutationApproveWaitlistArgs = {
     input: ApproveWaitlistInput;
 };
 /** Root mutation type */
+export type MutationApproveWorkflowTemplateRevisionArgs = {
+    id: Scalars['ID']['input'];
+    notes?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationArchiveBillingAccountArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -11103,6 +11245,10 @@ export type MutationDeleteWebhookArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationDeleteWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationDelistProductArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -11162,6 +11308,10 @@ export type MutationDismissTourArgs = {
     userId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationDispatchWebhookEventArgs = {
+    input: DispatchWebhookEventInput;
+};
+/** Root mutation type */
 export type MutationDuplicateNewsletterArgs = {
     id: Scalars['ID']['input'];
     newSlug: Scalars['String']['input'];
@@ -11372,6 +11522,23 @@ export type MutationGetSupportAttachmentPartUploadUrlsArgs = {
     ticketId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationGlobalDiscardTicketReplyDraftArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
+export type MutationGlobalDraftTicketReplyArgs = {
+    ticketId: Scalars['ID']['input'];
+};
+/** Root mutation type */
+export type MutationGlobalSendTicketReplyDraftArgs = {
+    id: Scalars['ID']['input'];
+    message?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
+export type MutationGlobalTriageTicketArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationGrantAppDelegationInternalArgs = {
     input: GrantAppDelegationInternalInput;
 };
@@ -11640,6 +11807,10 @@ export type MutationProvisionFreeTierForWorkspaceArgs = {
     workspaceId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationProvisionManagedAppInternalArgs = {
+    input: ProvisionManagedAppInternalInput;
+};
+/** Root mutation type */
 export type MutationPublicUnsubscribeByTokenArgs = {
     token: Scalars['String']['input'];
 };
@@ -11883,6 +12054,10 @@ export type MutationRegisterWebhookEventSubjectsArgs = {
     input: RegisterWebhookEventSubjectsInput;
 };
 /** Root mutation type */
+export type MutationRegisterWebhookSubscriptionArgs = {
+    input: RegisterWebhookSubscriptionInput;
+};
+/** Root mutation type */
 export type MutationReinstatePublisherArgs = {
     id: Scalars['ID']['input'];
 };
@@ -11934,6 +12109,11 @@ export type MutationRejectWaitlistArgs = {
     input: RejectWaitlistInput;
 };
 /** Root mutation type */
+export type MutationRejectWorkflowTemplateRevisionArgs = {
+    id: Scalars['ID']['input'];
+    reason: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationReleaseLegalHoldArgs = {
     id: Scalars['ID']['input'];
 };
@@ -12304,6 +12484,11 @@ export type MutationResumeScheduledJobArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRetireManagedAppInternalArgs = {
+    clientId: Scalars['String']['input'];
+    reason?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationRetirePushDeviceInternalArgs = {
     errorCode: Scalars['String']['input'];
     token: Scalars['String']['input'];
@@ -12536,6 +12721,10 @@ export type MutationServiceRecordEarningArgs = {
     input: ServiceRecordEarningInput;
 };
 /** Root mutation type */
+export type MutationServiceRefundPaymentArgs = {
+    input: ServiceRefundPaymentInput;
+};
+/** Root mutation type */
 export type MutationServiceRequestPayoutArgs = {
     input: ServiceRequestPayoutInput;
 };
@@ -12544,6 +12733,10 @@ export type MutationServiceResolvePayoutAccountArgs = {
     input: ServiceResolvePayoutAccountInput;
 };
 /** Root mutation type */
+export type MutationServiceReverseEarningArgs = {
+    input: ServiceReverseEarningInput;
+};
+/** Root mutation type */
 export type MutationServiceSyncPayoutStatusArgs = {
     input: ServiceSyncPayoutStatusInput;
 };
@@ -12729,6 +12922,10 @@ export type MutationSubmitSatisfactionSurveyArgs = {
     input: SubmitSatisfactionSurveyInput;
 };
 /** Root mutation type */
+export type MutationSubmitWorkflowTemplateArgs = {
+    input: SubmitWorkflowTemplateInput;
+};
+/** Root mutation type */
 export type MutationSubscribeArgs = {
     input: SubscribeInput;
 };
@@ -12825,6 +13022,10 @@ export type MutationTestWebhookArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationTestWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationToggleAddOnArgs = {
     id: Scalars['ID']['input'];
     status: Scalars['Boolean']['input'];
@@ -13337,10 +13538,6 @@ export type MutationUpdateQuotaArgs = {
     input: UpdateQuotaInput;
 };
 /** Root mutation type */
-export type MutationUpdateRbacConfigArgs = {
-    input: UpdateRbacConfigInput;
-};
-/** Root mutation type */
 export type MutationUpdateRecurringBillingPlanArgs = {
     input: UpdateRecurringBillingInput;
 };
@@ -13532,6 +13729,11 @@ export type MutationUpdateWebhookArgs = {
     input: UpdateWebhookInput;
 };
 /** Root mutation type */
+export type MutationUpdateWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+    input: UpdateWebhookSubscriptionInput;
+};
+/** Root mutation type */
 export type MutationUpdateWorkspaceArgs = {
     id: Scalars['ID']['input'];
     input: UpdateWorkspaceInput;
@@ -13666,6 +13868,14 @@ export type MutationVoteOnAppReviewArgs = {
 export type MutationWithdrawConsentArgs = {
     input: WithdrawConsentInput;
 };
+/** Root mutation type */
+export type MutationWithdrawWorkflowTemplateRevisionArgs = {
+    productId: Scalars['ID']['input'];
+};
+/** Root mutation type */
+export type MutationWithdrawWorkflowTemplateSubmissionArgs = {
+    id: Scalars['ID']['input'];
+};
 /** Filter inputs for `myContactInquiries`. Search and email-filter are deliberately not exposed — the query is already scoped to the caller's email, so a full-text search across `name`/`subject` would only surface inquiries the caller already owns. */
 export type MyContactInquiryFilterInput = {
     /** Filter by inquiry category (exact match against the stored string). */
@@ -15790,6 +16000,8 @@ export type ProductContentPage = {
     content: Scalars['String']['output'];
     contentFormat: Scalars['String']['output'];
     createdAt: Scalars['DateTime']['output'];
+    /** The customer's written approval of a case study and its numbers. A page tagged "case-study" is returned by the public content-page queries only when this is set. Null for every other page and for unapproved case studies. */
+    customerSignOff?: Maybe<CustomerSignOff>;
     /** Blog/article fields */
     excerpt?: Maybe<Scalars['String']['output']>;
     featured: Scalars['Boolean']['output'];
@@ -16126,6 +16338,19 @@ export type ProvisionFreeTierForWorkspaceResult = {
     hasBillingAccount: Scalars['Boolean']['output'];
     /** Product IDs the assigned quotas belong to. */
     productIds: Array<Scalars['String']['output']>;
+    /** Free-plan product IDs this workspace received no quotas from because every active free subscription for that product is already activated on plan.maxWorkspaces other workspaces of the org. Empty when nothing was capped. A non-empty list explains an assignedQuotas of 0: activate a plan with spare workspace capacity (activateSubscriptionForWorkspace) or upgrade the plan. */
+    skippedAtCapProductIds: Array<Scalars['String']['output']>;
+};
+/** Input for a service-managed app (BOFF-9962). */
+export type ProvisionManagedAppInternalInput = {
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Display name, 1 to 200 characters. */
+    name: Scalars['String']['input'];
+    /** Scopes a delegation to the app may carry; at least one. */
+    scopes: Array<Scalars['String']['input']>;
+    tenantId?: InputMaybe<Scalars['String']['input']>;
+    /** BOT (default), ASSISTANT, AUTOMATION or WORKFLOW. */
+    type?: InputMaybe<AppType>;
 };
 /** Response for createUserTenantStructure mutation */
 export declare enum ProvisioningStatus {
@@ -16349,6 +16574,8 @@ export type Query = {
     actorRoleAssignments: Array<ActorRoleAssignment>;
     /** List actors with RBAC context in a scope */
     actors: Array<ActorRbacSummary>;
+    /** Whether the caller's organization can buy each add-on (BOFF-9889: add-ons require a paid subscription to their product unless flagged otherwise). With billingAccountId, only that billing account is checked (it must belong to the caller's organization) and subscriptionId, when given, must be one of its paid subscriptions of the add-on's product. Without it, every active billing account of the organization counts. Organization-scoped like getAllAddOns. */
+    addonPurchaseEligibility: Array<AddonPurchaseEligibility>;
     adminAffiliateAnalytics: AffiliateAdminAnalytics;
     adminPayoutRequests: PayoutRequestConnection;
     adminPayoutSummary: PayoutAdminSummary;
@@ -16413,7 +16640,7 @@ export type Query = {
     automationSubscribers: Array<AutomationSubscriber>;
     availableAgents: Array<AgentProfile>;
     availableAuthMethods: Array<AuthMethod>;
-    /** Get available preview features the user can opt-in to within a workspace. Returns only flags that are previewable, active, and allowed by workspace admin. When `productSlug` is provided (each product app shell passes its own slug), the result is scoped to that product's previewable flags PLUS platform-wide previewable flags — so a product's Feature Previews page never surfaces other products' flags. Omit `productSlug` to get every available preview. Bounded by limit/offset to avoid unbounded fetches. */
+    /** Get available preview features the user can opt-in to within a workspace. Returns only flags that are previewable, active, and allowed by workspace admin. When `productSlug` is provided (each product app shell passes its own slug), the result is scoped to that product's previewable flags PLUS platform-wide previewable flags — so a product's Feature Previews page never surfaces other products' flags. Omit `productSlug` to get every available preview. Self-scoped: every workspace member loads this, so the gateway only requires an authenticated actor and the resolver requires membership of `workspaceId`. Bounded by limit/offset to avoid unbounded fetches. */
     availableFeaturePreviews: Array<FeatureFlag>;
     /** Signed (DESIGN 3.7). The workspace's balance, in the person's view when actorId is given. */
     avatarMinutesForService: AvatarMinutesBalance;
@@ -16549,7 +16776,7 @@ export type Query = {
     estimateNewsletterRecipients: NewsletterRecipientEstimate;
     /** Estimate shipping for an order with a specific method */
     estimateOrderShipping: OrderShippingEstimate;
-    /** Evaluate feature flags for the current actor in a workspace context. Used by frontend providers for bulk flag evaluation. Returns OpenFeature-compatible ResolutionDetails for each flag. RBAC is scoped to the target workspace via `input.workspaceId`. */
+    /** Evaluate feature flags for the current actor in a workspace context. Used by frontend providers for bulk flag evaluation. Returns OpenFeature-compatible ResolutionDetails for each flag. Self-scoped: every page evaluates flags, so the gateway only requires an authenticated actor and the resolver requires membership of `input.workspaceId`. */
     evaluateFeatureFlags: FeatureFlagBulkEvaluation;
     /** One conversation with its full transcript, references, CTAs and clicks. Superadmin only. */
     exploreAdminConversation?: Maybe<ExploreAdminConversation>;
@@ -16563,6 +16790,8 @@ export type Query = {
     exploreAgentJob?: Maybe<ExploreAgentJob>;
     /** Products, example prompts, welcome copy and limits for the `/explore` page. Never throws — an unreachable agent yields `enabled: false`. */
     exploreCatalog: ExploreCatalog;
+    /** Product site, language and size of the conversation the token owns. Scoped exactly like `exploreConversationMessages`: a token that owns nothing, or that owns a different conversation, is reported as NOT_FOUND, never FORBIDDEN. */
+    exploreConversationInfo: ExploreConversationInfo;
     /** The conversation's messages, oldest first. */
     exploreConversationMessages: Array<ExploreMessage>;
     /** Poll one message. Scoped by `conversationToken`; a token that does not own the message is reported as NOT_FOUND, never FORBIDDEN. */
@@ -16598,6 +16827,7 @@ export type Query = {
     /** Browse the plan catalog (e.g. the upgrade-subscription flow). Self-scoped — any authenticated actor may read it; the catalog itself isn't actor-owned data, so there's nothing further to scope. Previously scopeType "global", which no regular user role is ever assigned at (only Authenticated User — billing:NONE — and Platform Superadmin hold a global-scoped role), so this field was unreachable for every non-superadmin user (BOFF-6512). */
     getAllPlans: Array<Plan>;
     getAllQuotas: Array<Quota>;
+    /** List account quotas. Date bounds are inclusive on assignment createdAt; amount bounds are inclusive on activity-backed currentUsageSum, before pagination. Status uses remaining limits (WARNING >=75%, CRITICAL >=90%, EXHAUSTED <=0); expired assignments are INACTIVE and non-numeric unlimited quotas are HEALTHY. Both number and legacy numeric limit types are finite. Percentage thresholds use originalValue; when absent, the remaining value is the fallback baseline. Empty status lists apply no status filter. Pages are capped at 100 rows. Amount-filtered requests fail explicitly above 1000 usage lookups; narrow searchQuery or createdAt bounds rather than relying on partial counts. Derived-filter scans also fail above 10000 assignments, without partial counts. */
     getAllQuotasAssignment: PaginatedQuotaAssignments;
     getAllQuotasOfSub: Array<QuotaAssignment>;
     getAllRecurringBillingPlans: Array<RecurringBillingPlan>;
@@ -16732,7 +16962,7 @@ export type Query = {
     getPromotion?: Maybe<Promotion>;
     /** Get usage analytics for a specific quota assignment */
     getQuotaAnalytics: QuotaUsageAnalytics;
-    /** Enhanced quota assignment query with analytics, pagination and filtering */
+    /** The same status, inclusive createdAt and currentUsageSum filters as getAllQuotasAssignment, with analytics for the filtered page. */
     getQuotaAssignmentsWithAnalytics: PaginatedQuotaAssignmentsWithAnalytics;
     getQuotaUsageAndLimit: QuotaUsageAndLimit;
     getQuotaUsageDetails?: Maybe<PaginatedUsages>;
@@ -16783,6 +17013,8 @@ export type Query = {
     getWebhookEvent?: Maybe<WebhookEvent>;
     /** Get webhook statistics for a channel */
     getWebhookStats: WebhookStats;
+    /** Measure the triage engine against historical human categorisation. Support admins see their tenant; super admins see every tenant. Read-only. */
+    globalTriageEvaluation: SupportTriageEvaluation;
     /** Health check endpoint */
     health: HealthStatus;
     /** Get grouped products for homepage. Optionally filter by compatible product (e.g., "bigconsole", "fluidgrids"). */
@@ -16865,6 +17097,8 @@ export type Query = {
     listUserShippingAddresses: Array<ShippingAddress>;
     lookupAffiliateCode?: Maybe<AffiliateCodeLookup>;
     lowStockProducts: Array<LowStockProduct>;
+    /** ACTIVE delegations of a service-managed app (BOFF-9962). Only the service that provisioned the app may list them; any other caller gets NOT_FOUND. */
+    managedAppDelegationsInternal: Array<AppUserDelegation>;
     /** Returns products the current user can access based on their actor type, email domain, and waitlist approval status. Used by app shells for nav. */
     myAccessibleProducts: PlatformProductList;
     myActivityLogs: ActivityLogConnection;
@@ -16947,6 +17181,8 @@ export type Query = {
     /** List user's linked wallets */
     myWallets: Array<WalletInfo>;
     myWishlist: Array<UserWishlist>;
+    /** Your own community workflow templates, newest first. */
+    myWorkflowTemplateSubmissions: WorkflowTemplateSubmissionList;
     /** Get workspaces where the current user is a member (owned + added to). Membership-scoped: the resolver filters by actorId, so the returned set IS the access list. Any authenticated user may call this; no RBAC permission is checked. */
     myWorkspaces: WorkspaceList;
     newsletter?: Maybe<Newsletter>;
@@ -17028,6 +17264,8 @@ export type Query = {
     /** Get pending scheduled notifications that are due for triggering */
     pendingScheduledNotifications: Array<ScheduledNotification>;
     pendingSurveys: CustomerSatisfactionSurveyConnection;
+    /** Admin queue: new versions of published templates, oldest first. */
+    pendingWorkflowTemplateRevisions: WorkflowTemplateRevisionList;
     /** Get permission check audit log */
     permissionAuditLog: Array<PermissionAuditLog>;
     /** Get a single platform product by ID (admin/catalog read). Returns the full PlatformProduct including DRAFT products and internal operational metrics, so it is gated as a global-scope catalog read. Unauthenticated/marketing callers must use publicProduct(slug), which filters to ACTIVE/WAITLIST/COMING_SOON and strips internal fields. */
@@ -17098,10 +17336,6 @@ export type Query = {
     rbacAnalytics: RbacAnalytics;
     /** Get RBAC configuration change history */
     rbacChangeHistory: Array<RbacChangeLog>;
-    /** Get RBAC configuration for a scope */
-    rbacConfig: Array<RbacConfig>;
-    /** Get a specific RBAC configuration value */
-    rbacConfigValue?: Maybe<RbacConfig>;
     recentArticles: Array<KnowledgeBaseArticle>;
     releaseAuditEvents: Array<ProductReleaseAuditEvent>;
     releaseTracks: Array<ReleaseTrack>;
@@ -17259,7 +17493,7 @@ export type Query = {
     userBillingPlan: UserBillingPlan;
     /** Get total count of users (for analytics) */
     userCount: Scalars['Int']['output'];
-    /** Get a user's feature flag preferences in a workspace. Bounded by limit/offset to avoid unbounded fetches. */
+    /** Get the calling user's own feature flag preferences in a workspace. Self-scoped: the resolver filters rows by the caller's user id, so the result is the access control. Bounded by limit/offset to avoid unbounded fetches. */
     userFeatureFlagPreferences: Array<UserFeatureFlagPreference>;
     userLanguagePreference?: Maybe<UserLanguagePreference>;
     /** Check if the current user has reviewed a specific product */
@@ -17288,6 +17522,10 @@ export type Query = {
     webhookEventCatalog: Array<WebhookEventCatalogEntry>;
     /** Registered subject mappings. Platform services and super admins only. */
     webhookEventSubjects: Array<WebhookEventSubject>;
+    /** Fetch a single webhook subscription by ID */
+    webhookSubscription?: Maybe<WebhookSubscription>;
+    /** List webhook subscriptions for an owner (newest first) */
+    webhookSubscriptions: Array<WebhookSubscription>;
     webhooks: Array<Webhook>;
     /** Get a single workspace by ID */
     workspace?: Maybe<Workspace>;
@@ -17358,6 +17596,12 @@ export type QueryActorsArgs = {
     scopeId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryAddonPurchaseEligibilityArgs = {
+    addonIds: Array<Scalars['ID']['input']>;
+    billingAccountId?: InputMaybe<Scalars['ID']['input']>;
+    subscriptionId?: InputMaybe<Scalars['ID']['input']>;
+};
+/** Root query type */
 export type QueryAdminAffiliateAnalyticsArgs = {
     filter?: InputMaybe<AffiliateAnalyticsFilterInput>;
 };
@@ -18022,6 +18266,10 @@ export type QueryExploreCatalogArgs = {
     productSlug?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root query type */
+export type QueryExploreConversationInfoArgs = {
+    conversationToken: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryExploreConversationMessagesArgs = {
     conversationToken: Scalars['String']['input'];
     limit?: InputMaybe<Scalars['Int']['input']>;
@@ -18598,6 +18846,10 @@ export type QueryGetWebhookStatsArgs = {
     startDate?: InputMaybe<Scalars['DateTime']['input']>;
 };
 /** Root query type */
+export type QueryGlobalTriageEvaluationArgs = {
+    sampleSize?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
 export type QueryHomeGroupedProductsArgs = {
     compatibleWith?: InputMaybe<Scalars['String']['input']>;
 };
@@ -18855,6 +19107,10 @@ export type QueryLowStockProductsArgs = {
     storeId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Root query type */
+export type QueryManagedAppDelegationsInternalArgs = {
+    clientId: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryMyAccessibleProductsArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -19028,6 +19284,12 @@ export type QueryMyWalletsArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
 /** Root query type */
+export type QueryMyWorkflowTemplateSubmissionsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    status?: InputMaybe<ProductStatus>;
+};
+/** Root query type */
 export type QueryMyWorkspacesArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -19259,6 +19521,12 @@ export type QueryPendingSurveysArgs = {
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QueryPendingWorkflowTemplateRevisionsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    status?: InputMaybe<WorkflowTemplateRevisionStatus>;
+};
+/** Root query type */
 export type QueryPermissionAuditLogArgs = {
     filter?: InputMaybe<AuditLogFilterInput>;
     pagination?: InputMaybe<PaginationInput>;
@@ -19480,15 +19748,6 @@ export type QueryRbacChangeHistoryArgs = {
     scopeId: Scalars['String']['input'];
 };
 /** Root query type */
-export type QueryRbacConfigArgs = {
-    scopeId: Scalars['String']['input'];
-};
-/** Root query type */
-export type QueryRbacConfigValueArgs = {
-    key: Scalars['String']['input'];
-    scopeId: Scalars['String']['input'];
-};
-/** Root query type */
 export type QueryRecentArticlesArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -20056,6 +20315,15 @@ export type QueryWebhookEventSubjectsArgs = {
     productSlug?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root query type */
+export type QueryWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QueryWebhookSubscriptionsArgs = {
+    ownerId?: InputMaybe<Scalars['String']['input']>;
+    ownerType: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryWebhooksArgs = {
     applicationId: Scalars['ID']['input'];
 };
@@ -20377,18 +20645,6 @@ export declare enum RbacChangeType {
     VisibilityRuleRemoved = "VISIBILITY_RULE_REMOVED",
     VisibilityRuleUpdated = "VISIBILITY_RULE_UPDATED"
 }
-/** RBAC configuration key-value pair */
-export type RbacConfig = {
-    __typename?: 'RbacConfig';
-    createdAt: Scalars['DateTime']['output'];
-    description?: Maybe<Scalars['String']['output']>;
-    id: Scalars['ID']['output'];
-    key: Scalars['String']['output'];
-    scopeId: Scalars['String']['output'];
-    updatedAt: Scalars['DateTime']['output'];
-    value: Scalars['String']['output'];
-    valueType: Scalars['String']['output'];
-};
 /** Delivery result for a single recipient within a platform delivery */
 export type RecipientDeliveryResult = {
     __typename?: 'RecipientDeliveryResult';
@@ -20421,6 +20677,12 @@ export type RecipientInput = {
 export type RecordActivityInput = {
     action: Scalars['String']['input'];
     actorId?: InputMaybe<Scalars['String']['input']>;
+    /** `ai_assistant` when an AI assistant session made the change (BOFF-9649). Honoured only from a service caller relaying a gateway-verified assistant-session marker (the be-sdk tracker); ignored for any other caller, so a user cannot tag or untag their own rows. */
+    actorOrigin?: InputMaybe<Scalars['String']['input']>;
+    /** Proposal / idempotency key the assistant mutation ran under. Same trust rule as actorOrigin. */
+    assistantCorrelationId?: InputMaybe<Scalars['String']['input']>;
+    /** Relay session (assistant sandbox) that made the change. Same trust rule as actorOrigin. */
+    assistantSessionId?: InputMaybe<Scalars['String']['input']>;
     /** Optional idempotency key for backfill/import (audit phase-2). Derive a STABLE key from the source row (e.g. `global_auth_audit:<rowId>`). When set, the write UPSERTs on this key: if a row with the same `dedupeKey` already exists it is returned unchanged (no duplicate, no double-count), so a service can replay ALL of its historical audit rows any number of times and converge to exactly one activity_logs row each — including rows already dual-written in phase-1 (give the dual-write the SAME key so backfill and dual-write converge). When null, behaves exactly as before (plain insert). */
     dedupeKey?: InputMaybe<Scalars['String']['input']>;
     description?: InputMaybe<Scalars['String']['input']>;
@@ -20875,6 +21137,23 @@ export type RegisterWebhookEventSubjectsInput = {
     /** Mappings to create or update (at most 100 per call). */
     subjects: Array<WebhookEventSubjectInput>;
 };
+/** Input for registerWebhookSubscription */
+export type RegisterWebhookSubscriptionInput = {
+    /** Operator-facing description */
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Whether delivery is active (default true) */
+    enabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Event types to receive; empty = all events for the owner */
+    events: Array<Scalars['String']['input']>;
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['input'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['input'];
+    /** HMAC-SHA256 signing secret (write-only, never returned) */
+    secret: Scalars['String']['input'];
+    /** Delivery URL (HTTPS in production) */
+    url: Scalars['String']['input'];
+};
 export type RejectWaitlistInput = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -21692,6 +21971,15 @@ export type SeedFluidgridsUserToursResult = {
     updatedCount: Scalars['Int']['output'];
     workspaceId: Scalars['String']['output'];
 };
+export type SeedHookmoviesUserToursResult = {
+    __typename?: 'SeedHookmoviesUserToursResult';
+    createdCount: Scalars['Int']['output'];
+    productId: Scalars['String']['output'];
+    totalCount: Scalars['Int']['output'];
+    tours: Array<SeededUserTourResult>;
+    updatedCount: Scalars['Int']['output'];
+    workspaceId: Scalars['String']['output'];
+};
 export type SeedIntelWatchtowerUserToursResult = {
     __typename?: 'SeedIntelWatchtowerUserToursResult';
     createdCount: Scalars['Int']['output'];
@@ -21701,6 +21989,15 @@ export type SeedIntelWatchtowerUserToursResult = {
     updatedCount: Scalars['Int']['output'];
     workspaceId: Scalars['String']['output'];
 };
+export type SeedSemanticFedUserToursResult = {
+    __typename?: 'SeedSemanticFedUserToursResult';
+    createdCount: Scalars['Int']['output'];
+    productId: Scalars['String']['output'];
+    totalCount: Scalars['Int']['output'];
+    tours: Array<SeededUserTourResult>;
+    updatedCount: Scalars['Int']['output'];
+    workspaceId: Scalars['String']['output'];
+};
 export type SeedTheCulturePostUserToursResult = {
     __typename?: 'SeedTheCulturePostUserToursResult';
     createdCount: Scalars['Int']['output'];
@@ -21754,7 +22051,7 @@ export type SendExploreMessageInput = {
     attachments?: InputMaybe<Array<ExploreAttachmentInput>>;
     /** Omit to start a new conversation. The result's `conversation.token` is the secret to send back on every following turn. */
     conversationToken?: InputMaybe<Scalars['String']['input']>;
-    /** BCP-47 locale of the page (e.g. "en-US"). */
+    /** BCP-47 locale of the page (e.g. "en-US"). Only the language is kept, and only if it is one of `en` `zh` `hi` `es` `ar` `ta` (any case, with or without region or script subtags such as `en-US` or `zh-Hans-CN`). Anything else is treated as not sent — never an error, so a page with an unexpected locale still gets its answer. */
     locale?: InputMaybe<Scalars['String']['input']>;
     /** The visitor's question. */
     message: Scalars['String']['input'];
@@ -21799,6 +22096,11 @@ export type SendRoundMessageToCandidateInput = {
     message: Scalars['String']['input'];
     roundId: Scalars['ID']['input'];
 };
+export type ServiceEarningReversal = {
+    __typename?: 'ServiceEarningReversal';
+    entry: EarningsEntry;
+    outcome: EarningReversalOutcome;
+};
 /** Consolidated earnings + payout-request status for a billing account, optionally scoped to a single earnings owner. Lets a delegating service poll the outcome of money-movement it handed to billing. */
 export type ServicePayoutStatus = {
     __typename?: 'ServicePayoutStatus';
@@ -21832,6 +22134,37 @@ export type ServiceRecordEarningInput = {
     sourceSubcategory?: InputMaybe<Scalars['String']['input']>;
     unitType?: InputMaybe<EarningUnitType>;
 };
+export type ServiceRefundPaymentInput = {
+    /** Amount to refund in whole currency units. Partial refunds are allowed; the sum of a payment's refunds can never exceed the captured amount. */
+    amount: Scalars['Float']['input'];
+    /** Billing account the payment was charged on (through its BillingOrder or subscription). */
+    billingAccountId: Scalars['ID']['input'];
+    /** Optional; must match the payment currency when given. */
+    currency?: InputMaybe<Scalars['String']['input']>;
+    metadata?: InputMaybe<Scalars['JSON']['input']>;
+    /** Billing Payment id (not the provider's payment id). */
+    paymentId: Scalars['ID']['input'];
+    reason: Scalars['String']['input'];
+    /** Caller-owned idempotency key (e.g. "coolandlovely:refund:<orderId>:<brandId>"), unique per billing account. A replay returns the existing refund; a failed one is retried. */
+    sourceIdempotencyKey: Scalars['String']['input'];
+};
+export type ServiceRefundPaymentResult = {
+    __typename?: 'ServiceRefundPaymentResult';
+    /** True when the key already had a refund and this call did not process it again. */
+    alreadyProcessed: Scalars['Boolean']['output'];
+    amount: Scalars['Float']['output'];
+    currency: Scalars['String']['output'];
+    error?: Maybe<Scalars['String']['output']>;
+    gatewayRefundId?: Maybe<Scalars['String']['output']>;
+    refundId: Scalars['ID']['output'];
+    /** What is still refundable on the payment after this call. */
+    refundableRemaining: Scalars['Float']['output'];
+    /** Sum of the payment's pending, processing and completed refunds after this call. */
+    refundedTotal: Scalars['Float']['output'];
+    status: RefundRecordStatus;
+    /** True when the provider accepted the refund (now or on an earlier call with the same key). */
+    success: Scalars['Boolean']['output'];
+};
 export type ServiceRequestPayoutInput = {
     amount: Scalars['Float']['input'];
     /** Explicit billing account the payout is drawn from. */
@@ -21860,6 +22193,14 @@ export type ServiceResolvePayoutAccountInput = {
     /** Destination type for a newly-created placeholder account (defaults to BANK_ACCOUNT). */
     type?: InputMaybe<PayoutAccountType>;
 };
+export type ServiceReverseEarningInput = {
+    /** Billing account the earning was recorded on. */
+    billingAccountId: Scalars['ID']['input'];
+    /** Why the earning is reversed (e.g. "Order COO-20261024-7F3A9C refunded"). */
+    reason: Scalars['String']['input'];
+    /** The sourceIdempotencyKey the earning was recorded with (serviceRecordEarning). */
+    sourceIdempotencyKey: Scalars['String']['input'];
+};
 export type ServiceSyncPayoutStatusInput = {
     externalReference?: InputMaybe<Scalars['String']['input']>;
     failureReason?: InputMaybe<Scalars['String']['input']>;
@@ -22686,6 +23027,8 @@ export type StoreProduct = {
     weightUnit?: Maybe<WeightUnit>;
     /** Product width (physical products) */
     width?: Maybe<Scalars['Float']['output']>;
+    /** For a WORKFLOW template: its nodes, required inputs and credentials and the cleaning report recorded at submission. Null for other products. */
+    workflowTemplatePreview?: Maybe<WorkflowTemplatePreview>;
     zipFileUrl?: Maybe<Scalars['String']['output']>;
 };
 /** Input for fetching store product details */
@@ -22917,6 +23260,37 @@ export type SubmitSatisfactionSurveyInput = {
     rating: Scalars['Int']['input'];
     surveyId: Scalars['ID']['input'];
 };
+/** Publish a workspace workflow to the public store as a community template. */
+export type SubmitWorkflowTemplateInput = {
+    /** Author name shown on the template. Required for your first template, when it also names your publisher profile; defaults to your publisher name afterwards. */
+    authorName?: InputMaybe<Scalars['String']['input']>;
+    /** Store category: automation, integration, data-processing, ai-ml, communication, devops, marketing, sales, support, productivity or finance. */
+    category: Scalars['String']['input'];
+    /** The workflow definition (definitionJson) to publish. Connection bindings, pinned run data and literal secrets are removed before it is stored. */
+    definitionJson: Scalars['JSON']['input'];
+    /** One-line summary shown on the template card (at most 500 characters). */
+    description: Scalars['String']['input'];
+    /** easy, medium or hard. */
+    difficultyLevel?: InputMaybe<Scalars['String']['input']>;
+    /** Estimated minutes to set the template up (1 to 1440). */
+    estimatedTimeMinutes?: InputMaybe<Scalars['Int']['input']>;
+    /** Iconify icon name, for example mdi:robot. */
+    icon?: InputMaybe<Scalars['String']['input']>;
+    /** Longer description (markdown) shown on the template page. */
+    longDescription?: InputMaybe<Scalars['String']['input']>;
+    /** Template name shown in the store (at most 120 characters). */
+    name: Scalars['String']['input'];
+    /** A note for the store reviewer. */
+    notes?: InputMaybe<Scalars['String']['input']>;
+    /** Resubmit one of your own templates instead of creating a new one. A DRAFT, REJECTED or UNLISTED template is replaced and goes back into review. A PUBLISHED template stays listed unchanged: the submission is kept as its pending revision and replaces the live version only when a reviewer approves it. Either way the template keeps its id and slug and its version goes up by one. */
+    productId?: InputMaybe<Scalars['ID']['input']>;
+    /** Workflow key the template was published from (lineage). */
+    sourceWorkflowKey?: InputMaybe<Scalars['String']['input']>;
+    /** Workflow version the template was published from (lineage). */
+    sourceWorkflowVersion?: InputMaybe<Scalars['String']['input']>;
+    /** Up to 10 search tags. */
+    tags?: InputMaybe<Array<Scalars['String']['input']>>;
+};
 export type Subprocessor = {
     __typename?: 'Subprocessor';
     activatedAt?: Maybe<Scalars['DateTime']['output']>;
@@ -23385,6 +23759,19 @@ export type SupportContextInput = {
     userId?: InputMaybe<Scalars['ID']['input']>;
     workspaceId?: InputMaybe<Scalars['ID']['input']>;
 };
+/** A knowledge row a reply draft was built from. */
+export type SupportDraftCitation = {
+    __typename?: 'SupportDraftCitation';
+    id: Scalars['ID']['output'];
+    kind: SupportDraftCitationKind;
+    score: Scalars['Float']['output'];
+    title: Scalars['String']['output'];
+};
+export declare enum SupportDraftCitationKind {
+    CannedResponse = "CANNED_RESPONSE",
+    Faq = "FAQ",
+    KnowledgeBaseArticle = "KNOWLEDGE_BASE_ARTICLE"
+}
 export type SupportEraseResult = {
     __typename?: 'SupportEraseResult';
     anonymised: Scalars['Int']['output'];
@@ -23411,7 +23798,15 @@ export type SupportMessage = {
     /** Contextual IDs for filtering and scoping (workspaceId, userId, projectId, etc.) */
     context?: Maybe<SupportContext>;
     createdAt: Scalars['DateTime']['output'];
-    id: Scalars['ID']['output'];
+    /** The knowledge-base articles, FAQs and canned responses a draft was built from. Empty for every message that is not a draft. */
+    draftCitations: Array<SupportDraftCitation>;
+    /** When the draft was sent or discarded. */
+    draftResolvedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** The agent reply that was sent from this draft, once sent. */
+    draftSentMessageId?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** True for a reply drafted from the knowledge base that waits for an agent (BOFF-3646). Drafts are always internal and are never sent on their own. */
+    isDraft: Scalars['Boolean']['output'];
     isInternal: Scalars['Boolean']['output'];
     message: Scalars['String']['output'];
     ticket: SupportTicket;
@@ -23460,6 +23855,8 @@ export type SupportTicket = {
     metadata?: Maybe<Scalars['JSON']['output']>;
     priority: SupportTicketPriority;
     reopenedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** The open reply draft for this ticket, if any. Support staff only. */
+    replyDraft?: Maybe<SupportMessage>;
     resolutionDue?: Maybe<Scalars['DateTime']['output']>;
     resolvedAt?: Maybe<Scalars['DateTime']['output']>;
     slaBreachStatus: SlaBreachStatus;
@@ -23475,6 +23872,8 @@ export type SupportTicket = {
     tenantId?: Maybe<Scalars['String']['output']>;
     ticketCategory?: Maybe<TicketCategory>;
     ticketNumber: Scalars['String']['output'];
+    /** The triage engine's latest decision for this ticket, with its evidence (BOFF-3646). Null when the ticket was never triaged, and always null for viewers who cannot read internal notes — the evidence names other tickets. */
+    triageDecision?: Maybe<SupportTriageDecision>;
     updatedAt: Scalars['DateTime']['output'];
     user: User;
     userId: Scalars['String']['output'];
@@ -23525,6 +23924,99 @@ export declare enum SupportTicketStatus {
     Resolved = "RESOLVED",
     WaitingCustomer = "WAITING_CUSTOMER"
 }
+/** An agent the engine suggests for the ticket. A suggestion only: triage never assigns. */
+export type SupportTriageAssigneeSuggestion = {
+    __typename?: 'SupportTriageAssigneeSuggestion';
+    agentProfileId: Scalars['ID']['output'];
+    /** Current tickets divided by the agent's ticket capacity. */
+    load: Scalars['Float']['output'];
+    /** Agent skills that matched the ticket's category and tags. */
+    matchedSkills: Array<Scalars['String']['output']>;
+    userId: Scalars['String']['output'];
+};
+/** One triage decision, with what it replaced so a person can see and undo it. The engine only fills an empty category and only raises a priority. */
+export type SupportTriageDecision = {
+    __typename?: 'SupportTriageDecision';
+    category: SupportTicketCategory;
+    /** True when triage set the category. */
+    categoryApplied: Scalars['Boolean']['output'];
+    /** Share of the evidence weight behind the proposed category (0–1). */
+    categoryConfidence: Scalars['Float']['output'];
+    /** Category the ticket has after triage. */
+    categoryId?: Maybe<Scalars['String']['output']>;
+    decidedAt: Scalars['DateTime']['output'];
+    /** Actor who ran it; system:support-triage for automatic runs. */
+    decidedBy: Scalars['String']['output'];
+    /** Engine name and version that made the decision. */
+    engine: Scalars['String']['output'];
+    evidence: Array<SupportTriageEvidence>;
+    /** Plain-language reasons for anything the engine left alone. */
+    notes: Array<Scalars['String']['output']>;
+    previousCategory: SupportTicketCategory;
+    previousCategoryId?: Maybe<Scalars['String']['output']>;
+    previousPriority: SupportTicketPriority;
+    previousSlaPolicyId?: Maybe<Scalars['String']['output']>;
+    priority: SupportTicketPriority;
+    /** Phrases and similar-ticket votes that set the priority. */
+    prioritySignals: Array<Scalars['String']['output']>;
+    /** Category the evidence pointed to, applied or not. */
+    proposedCategoryId?: Maybe<Scalars['String']['output']>;
+    /** True when triage changed the SLA policy. */
+    slaApplied: Scalars['Boolean']['output'];
+    slaPolicyId?: Maybe<Scalars['String']['output']>;
+    suggestedAssignee?: Maybe<SupportTriageAssigneeSuggestion>;
+    trigger: SupportTriageTrigger;
+};
+/** The engine replayed over recent tickets people categorised and resolved, using only older tickets as evidence for each. */
+export type SupportTriageEvaluation = {
+    __typename?: 'SupportTriageEvaluation';
+    cases: Array<SupportTriageEvaluationCase>;
+    /** Share of cases where the engine would apply a category. */
+    categoryCoverage: Scalars['Float']['output'];
+    /** Share of applied categories that match the person's choice. */
+    categoryPrecision: Scalars['Float']['output'];
+    correctCount: Scalars['Int']['output'];
+    decidedCount: Scalars['Int']['output'];
+    engine: Scalars['String']['output'];
+    /** Share of cases where the engine's priority matches the final priority. */
+    priorityAgreement: Scalars['Float']['output'];
+    sampleSize: Scalars['Int']['output'];
+};
+/** One replayed ticket in a triage evaluation. */
+export type SupportTriageEvaluationCase = {
+    __typename?: 'SupportTriageEvaluationCase';
+    confidence: Scalars['Float']['output'];
+    correct: Scalars['Boolean']['output'];
+    decided: Scalars['Boolean']['output'];
+    /** The category a person gave the ticket. */
+    expectedCategoryId: Scalars['String']['output'];
+    expectedPriority: SupportTicketPriority;
+    /** The category the engine would have applied, or null when it would abstain. */
+    predictedCategoryId?: Maybe<Scalars['String']['output']>;
+    predictedPriority: SupportTicketPriority;
+    ticketId: Scalars['ID']['output'];
+    ticketNumber: Scalars['String']['output'];
+};
+/** A row the triage engine weighed: a similar resolved ticket or a published knowledge-base article. */
+export type SupportTriageEvidence = {
+    __typename?: 'SupportTriageEvidence';
+    id: Scalars['ID']['output'];
+    kind: SupportTriageEvidenceKind;
+    /** Ticket number for tickets, title for articles. */
+    label: Scalars['String']['output'];
+    /** Full-text relevance score (Postgres ts_rank). */
+    score: Scalars['Float']['output'];
+};
+export declare enum SupportTriageEvidenceKind {
+    KnowledgeBaseArticle = "KNOWLEDGE_BASE_ARTICLE",
+    Ticket = "TICKET"
+}
+export declare enum SupportTriageTrigger {
+    /** Run on demand by a support agent. */
+    Manual = "MANUAL",
+    /** Run automatically when the ticket was created. */
+    TicketCreated = "TICKET_CREATED"
+}
 export type SuppressIdentifierInput = {
     channel: SuppressionChannel;
     expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
@@ -24821,6 +25313,8 @@ export type UpdateContentPageInput = {
     category?: InputMaybe<Scalars['String']['input']>;
     content?: InputMaybe<Scalars['String']['input']>;
     contentFormat?: InputMaybe<Scalars['String']['input']>;
+    /** Set, replace or (with null) withdraw the customer approval. Withdrawing it removes a case study from the public queries. */
+    customerSignOff?: InputMaybe<CustomerSignOffInput>;
     excerpt?: InputMaybe<Scalars['String']['input']>;
     featured?: InputMaybe<Scalars['Boolean']['input']>;
     isPublished?: InputMaybe<Scalars['Boolean']['input']>;
@@ -25323,14 +25817,6 @@ export type UpdatePublisherInput = {
     organizationId?: InputMaybe<Scalars['ID']['input']>;
     websiteUrl?: InputMaybe<Scalars['String']['input']>;
 };
-/** Input for updating RBAC configuration */
-export type UpdateRbacConfigInput = {
-    description?: InputMaybe<Scalars['String']['input']>;
-    key: Scalars['String']['input'];
-    scopeId: Scalars['String']['input'];
-    value: Scalars['String']['input'];
-    valueType?: InputMaybe<Scalars['String']['input']>;
-};
 export type UpdateRecurringBillingInput = {
     description?: InputMaybe<Scalars['String']['input']>;
     id: Scalars['ID']['input'];
@@ -25671,6 +26157,19 @@ export type UpdateWebhookInput = {
     retryEnabled?: InputMaybe<Scalars['Boolean']['input']>;
     url?: InputMaybe<Scalars['String']['input']>;
 };
+/** Input for updateWebhookSubscription — all fields optional, omitted fields unchanged */
+export type UpdateWebhookSubscriptionInput = {
+    /** Operator-facing description */
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Whether delivery is active */
+    enabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Event types to receive; empty = all events for the owner */
+    events?: InputMaybe<Array<Scalars['String']['input']>>;
+    /** HMAC-SHA256 signing secret (write-only, never returned) */
+    secret?: InputMaybe<Scalars['String']['input']>;
+    /** Delivery URL (HTTPS in production) */
+    url?: InputMaybe<Scalars['String']['input']>;
+};
 /** Input for updating an existing workspace */
 export type UpdateWorkspaceInput = {
     metadata?: InputMaybe<Scalars['JSON']['input']>;
@@ -26415,6 +26914,30 @@ export type WebhookDeliveryEdge = {
     cursor: Scalars['String']['output'];
     node: WebhookDelivery;
 };
+/** One delivery attempt recorded for a WebhookSubscription. At most one row exists per (subscription, eventId) — a redispatched event updates the row instead of double-delivering. */
+export type WebhookDeliveryLog = {
+    __typename?: 'WebhookDeliveryLog';
+    /** Number of attempts made */
+    attemptCount: Scalars['Int']['output'];
+    /** When the final attempt finished */
+    deliveredAt: Scalars['DateTime']['output'];
+    /** Error message of the final attempt (null on success) */
+    error?: Maybe<Scalars['String']['output']>;
+    /** Caller-supplied event ID (idempotency key) */
+    eventId: Scalars['String']['output'];
+    /** Event type that was dispatched */
+    eventType: Scalars['String']['output'];
+    /** Unique log row ID */
+    id: Scalars['ID']['output'];
+    /** Envelope payload that was signed and posted */
+    payload: Scalars['JSON']['output'];
+    /** HTTP status code of the final attempt (null on transport error) */
+    statusCode?: Maybe<Scalars['Int']['output']>;
+    /** Owning subscription ID */
+    subscriptionId: Scalars['ID']['output'];
+    /** Whether the final attempt succeeded */
+    success: Scalars['Boolean']['output'];
+};
 export declare enum WebhookDeliveryStatus {
     Delivered = "DELIVERED",
     Delivering = "DELIVERING",
@@ -26422,6 +26945,30 @@ export declare enum WebhookDeliveryStatus {
     Pending = "PENDING",
     Retrying = "RETRYING"
 }
+/** Result of a single test delivery */
+export type WebhookDispatchResult = {
+    __typename?: 'WebhookDispatchResult';
+    /** Number of attempts made */
+    attemptCount: Scalars['Int']['output'];
+    /** Error message of the final attempt (null on success) */
+    error?: Maybe<Scalars['String']['output']>;
+    /** HTTP status code of the final attempt (null on transport error) */
+    statusCode?: Maybe<Scalars['Int']['output']>;
+    /** Whether the delivery succeeded */
+    success: Scalars['Boolean']['output'];
+};
+/** Summary returned by the M2M dispatchWebhookEvent mutation */
+export type WebhookDispatchSummary = {
+    __typename?: 'WebhookDispatchSummary';
+    /** Subscriptions skipped because the event was already delivered (idempotent redispatch) */
+    deduplicated: Scalars['Int']['output'];
+    /** Subscriptions delivered successfully */
+    delivered: Scalars['Int']['output'];
+    /** Subscriptions that failed after all retry attempts */
+    failed: Scalars['Int']['output'];
+    /** Enabled subscriptions matched for the owner + event type */
+    matched: Scalars['Int']['output'];
+};
 /** WebhookEvent represents a received webhook (transient, 7-day TTL) Used for debugging and monitoring only */
 export type WebhookEvent = {
     __typename?: 'WebhookEvent';
@@ -26568,6 +27115,34 @@ export declare enum WebhookStatus {
     Failed = "FAILED",
     Paused = "PAUSED"
 }
+/** A registered outbound webhook endpoint owned by a product or operator. `ownerType` namespaces the event stream (e.g. "newsletter-product"); `ownerId` scopes it (e.g. the platform product id). An empty `events` list means the endpoint receives every event dispatched for the owner. */
+export type WebhookSubscription = {
+    __typename?: 'WebhookSubscription';
+    /** Creation timestamp */
+    createdAt: Scalars['DateTime']['output'];
+    /** Delivery audit trail (most recent first) */
+    deliveries: Array<WebhookDeliveryLog>;
+    /** Operator-facing description */
+    description?: Maybe<Scalars['String']['output']>;
+    /** Whether delivery is active */
+    enabled: Scalars['Boolean']['output'];
+    /** Event types this endpoint receives; empty = all events for the owner */
+    events: Array<Scalars['String']['output']>;
+    /** Unique subscription ID */
+    id: Scalars['ID']['output'];
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['output'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['output'];
+    /** Last update timestamp */
+    updatedAt: Scalars['DateTime']['output'];
+    /** Delivery URL (HTTPS in production) */
+    url: Scalars['String']['output'];
+};
+/** A registered outbound webhook endpoint owned by a product or operator. `ownerType` namespaces the event stream (e.g. "newsletter-product"); `ownerId` scopes it (e.g. the platform product id). An empty `events` list means the endpoint receives every event dispatched for the owner. */
+export type WebhookSubscriptionDeliveriesArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+};
 export type WebhookTestResult = {
     __typename?: 'WebhookTestResult';
     error?: Maybe<Scalars['String']['output']>;
@@ -26610,6 +27185,163 @@ export type WithdrawConsentInput = {
     subjectId: Scalars['ID']['input'];
     subjectType: Scalars['String']['input'];
 };
+/** Result of withdrawing a template. */
+export type WithdrawWorkflowTemplateSubmissionResult = {
+    __typename?: 'WithdrawWorkflowTemplateSubmissionResult';
+    id: Scalars['ID']['output'];
+    /** True when the template was deleted; false when it was only taken off the store. */
+    removed: Scalars['Boolean']['output'];
+    /** The template's status when it was kept (UNLISTED), null when removed. */
+    status?: Maybe<ProductStatus>;
+};
+/** What was removed from the author's workflow before it was stored. */
+export type WorkflowTemplateCleaningReport = {
+    __typename?: 'WorkflowTemplateCleaningReport';
+    /** Where each cleared connection was (up to 200). */
+    clearedConnections: Array<WorkflowTemplateFieldRef>;
+    connectionsCleared: Scalars['Int']['output'];
+    pinnedDataRemoved: Scalars['Boolean']['output'];
+    /** Where each removed secret was (up to 200). */
+    removedSecrets: Array<WorkflowTemplateFieldRef>;
+    secretsRemoved: Scalars['Int']['output'];
+};
+/** Where in a template a cleared connection or removed secret was. */
+export type WorkflowTemplateFieldRef = {
+    __typename?: 'WorkflowTemplateFieldRef';
+    /** Path of the field inside the node, for example data.parameters.apiKey. */
+    field: Scalars['String']['output'];
+    nodeId?: Maybe<Scalars['String']['output']>;
+    nodeLabel?: Maybe<Scalars['String']['output']>;
+    nodeType?: Maybe<Scalars['String']['output']>;
+};
+/** A node type a template uses. */
+export type WorkflowTemplateNodeType = {
+    __typename?: 'WorkflowTemplateNodeType';
+    displayName: Scalars['String']['output'];
+    nodeType: Scalars['String']['output'];
+    nodeVersion: Scalars['String']['output'];
+    /** BUILTIN or STORE. */
+    publishType: Scalars['String']['output'];
+};
+/** What a reviewer sees about a workflow template before approving it. */
+export type WorkflowTemplatePreview = {
+    __typename?: 'WorkflowTemplatePreview';
+    /** Recorded at submission; null for templates stored before reports were kept. */
+    cleaningReport?: Maybe<WorkflowTemplateCleaningReport>;
+    /** The cleaned definition importers receive. */
+    definitionJson?: Maybe<Scalars['JSON']['output']>;
+    edgeCount: Scalars['Int']['output'];
+    /** Nodes in the definition (all of them, not just distinct types). */
+    nodeCount: Scalars['Int']['output'];
+    nodeTypes: Array<WorkflowTemplateNodeType>;
+    requiredCredentials: Array<WorkflowTemplateRequiredCredential>;
+    requiredInputs: Array<WorkflowTemplateRequiredInput>;
+};
+/** A credential someone importing the template must connect. */
+export type WorkflowTemplateRequiredCredential = {
+    __typename?: 'WorkflowTemplateRequiredCredential';
+    /** connection: the node was bound to the author's saved connection, which was cleared at submission. reference: the template reads ${credentials.<name>}. */
+    kind: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    nodeId?: Maybe<Scalars['String']['output']>;
+    nodeLabel?: Maybe<Scalars['String']['output']>;
+    nodeType?: Maybe<Scalars['String']['output']>;
+};
+/** A value someone importing the template must supply (a ${name} variable it reads). */
+export type WorkflowTemplateRequiredInput = {
+    __typename?: 'WorkflowTemplateRequiredInput';
+    label: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    required: Scalars['Boolean']['output'];
+    /** secret when it fills a secret field (API key, token, ...), else string. */
+    type: Scalars['String']['output'];
+    /** Nodes that read it. */
+    usedBy: Array<Scalars['String']['output']>;
+};
+/** A new version of a PUBLISHED template, kept apart from the live version while it is reviewed. Approval makes it the live version; rejection leaves the live version untouched. */
+export type WorkflowTemplateRevision = {
+    __typename?: 'WorkflowTemplateRevision';
+    authorName?: Maybe<Scalars['String']['output']>;
+    category: Scalars['String']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    description: Scalars['String']['output'];
+    icon?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** Version currently live in the store. */
+    liveVersion: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    /** Number of distinct node types the revision uses. */
+    nodeCount: Scalars['Int']['output'];
+    /** The author's note for the reviewer. */
+    notes?: Maybe<Scalars['String']['output']>;
+    /** What the revision does: nodes, required inputs and credentials, cleaning report. */
+    preview?: Maybe<WorkflowTemplatePreview>;
+    /** Store product id of the template it revises. */
+    productId: Scalars['ID']['output'];
+    productSlug: Scalars['String']['output'];
+    /** Publisher profile name of the author. */
+    publisherName?: Maybe<Scalars['String']['output']>;
+    rejectedReason?: Maybe<Scalars['String']['output']>;
+    reviewedAt?: Maybe<Scalars['DateTime']['output']>;
+    revision: Scalars['Int']['output'];
+    status: WorkflowTemplateRevisionStatus;
+    submittedAt: Scalars['DateTime']['output'];
+    /** Actor id of the author who submitted it. */
+    submittedBy: Scalars['String']['output'];
+    tags: Array<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    /** Version this revision becomes when approved. */
+    version: Scalars['String']['output'];
+};
+export type WorkflowTemplateRevisionList = {
+    __typename?: 'WorkflowTemplateRevisionList';
+    items: Array<WorkflowTemplateRevision>;
+    totalCount: Scalars['Int']['output'];
+};
+/** PENDING_REVIEW while a store admin reviews it; REJECTED with a reason. */
+export declare enum WorkflowTemplateRevisionStatus {
+    PendingReview = "PENDING_REVIEW",
+    Rejected = "REJECTED"
+}
+/** One of your community workflow templates and where it is in review. */
+export type WorkflowTemplateSubmission = {
+    __typename?: 'WorkflowTemplateSubmission';
+    authorName?: Maybe<Scalars['String']['output']>;
+    category?: Maybe<Scalars['String']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    description?: Maybe<Scalars['String']['output']>;
+    /** Times the template has been imported. */
+    downloads: Scalars['Int']['output'];
+    icon?: Maybe<Scalars['String']['output']>;
+    /** Store product id of the template. */
+    id: Scalars['ID']['output'];
+    name: Scalars['String']['output'];
+    /** Number of distinct node types the template uses. */
+    nodeCount: Scalars['Int']['output'];
+    /** The new version of this published template that is waiting for review, or that a reviewer rejected (with the reason). Null when there is none. */
+    pendingRevision?: Maybe<WorkflowTemplateRevision>;
+    publishedAt?: Maybe<Scalars['DateTime']['output']>;
+    rejectedReason?: Maybe<Scalars['String']['output']>;
+    reviewNotes?: Maybe<Scalars['String']['output']>;
+    reviewedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** How many times the template has been submitted. */
+    revision: Scalars['Int']['output'];
+    slug: Scalars['String']['output'];
+    sourceWorkflowKey?: Maybe<Scalars['String']['output']>;
+    sourceWorkflowVersion?: Maybe<Scalars['String']['output']>;
+    /** PENDING_REVIEW while a store admin reviews it, PUBLISHED once approved, REJECTED with a reason, UNLISTED once taken off the store. */
+    status: ProductStatus;
+    submittedAt?: Maybe<Scalars['DateTime']['output']>;
+    tags: Array<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    /** Template version (1.0.0 for the first submission, 1.1.0 for the second, ...). */
+    version: Scalars['String']['output'];
+};
+export type WorkflowTemplateSubmissionList = {
+    __typename?: 'WorkflowTemplateSubmissionList';
+    items: Array<WorkflowTemplateSubmission>;
+    totalCount: Scalars['Int']['output'];
+};
 /** Workspace type stub - represents a workspace entity from the workspace service This service doesn't own the Workspace model, but references it */
 export type Workspace = {
     __typename?: 'Workspace';
@@ -26765,6 +27497,8 @@ export type CreateAddOnsInput = {
     price: Scalars['Float']['input'];
     productId: Scalars['String']['input'];
     quotas: Array<AddonQuotaInput>;
+    /** Whether buying this add-on requires a paid subscription to its product. Defaults to true; set false only for items sold to Free users on purpose. */
+    requiresPaidSubscription?: InputMaybe<Scalars['Boolean']['input']>;
 };
 export type CreatePlanInput = {
     currency?: InputMaybe<Scalars['String']['input']>;
@@ -26803,6 +27537,8 @@ export type UpdateAddOnsInput = {
     name?: InputMaybe<Scalars['String']['input']>;
     price?: InputMaybe<Scalars['Float']['input']>;
     quotas: Array<AddonQuotaInput>;
+    /** Whether buying this add-on requires a paid subscription to its product. Omit to leave unchanged. */
+    requiresPaidSubscription?: InputMaybe<Scalars['Boolean']['input']>;
 };
 export type UpdatePlanInput = {
     /** Immutable once set — see `price`. Throws CURRENCY_CHANGE_NOT_ALLOWED on an actual change. */