@burdenoff/microfe-devportal 2026.1107.2 → 2026.1108.1

package/dist/generated/global-types.d.ts

@@ -172,6 +172,13 @@ export declare enum ActivityAction {
 export type ActivityFilterInput = {
     action?: InputMaybe<Scalars['String']['input']>;
     actorId?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Only rows made by this kind of actor origin (BOFF-9649). The only recorded origin is
+     * `ai_assistant`: a change an AI assistant session made for its owner.
+     */
+    actorOrigin?: InputMaybe<Scalars['String']['input']>;
+    /** Only rows made by this AI assistant session (BOFF-9649). */
+    assistantSessionId?: InputMaybe<Scalars['String']['input']>;
     endDate?: InputMaybe<Scalars['DateTime']['input']>;
     resource?: InputMaybe<Scalars['String']['input']>;
     resourceId?: InputMaybe<Scalars['String']['input']>;
@@ -185,6 +192,12 @@ export type ActivityLog = {
     __typename?: 'ActivityLog';
     action: Scalars['String']['output'];
     actorId?: Maybe<Scalars['String']['output']>;
+    /** `ai_assistant` when an AI assistant session made the change; null for a human-made change. */
+    actorOrigin?: Maybe<Scalars['String']['output']>;
+    /** Proposal / idempotency key the assistant mutation ran under, when it had one. */
+    assistantCorrelationId?: Maybe<Scalars['String']['output']>;
+    /** Relay session (assistant sandbox) that made the change, when an assistant made it. */
+    assistantSessionId?: Maybe<Scalars['String']['output']>;
     createdAt: Scalars['DateTime']['output'];
     description?: Maybe<Scalars['String']['output']>;
     id: Scalars['ID']['output'];
@@ -304,6 +317,29 @@ export type AddFulfillmentTrackingEventInput = {
     occurredAt?: InputMaybe<Scalars['DateTime']['input']>;
     status: FulfillmentStatus;
 };
+/**
+ * Input for a publisher adding their own payout method. Only masked details are
+ * stored: the last four digits of the account plus the bank code. The payout
+ * processor (RazorpayX for India, Stripe Connect for international publishers)
+ * holds the full account and is referenced through externalAccountId, which an
+ * admin confirms or supplies when verifying the method.
+ */
+export type AddMyPublisherPayoutMethodInput = {
+    accountHolderName: Scalars['String']['input'];
+    /** Last four digits of the bank account (BANK_TRANSFER and RAZORPAY_X). */
+    accountNumberLast4?: InputMaybe<Scalars['String']['input']>;
+    /** IFSC for Indian accounts, SWIFT/BIC elsewhere (BANK_TRANSFER and RAZORPAY_X). */
+    bankCode?: InputMaybe<Scalars['String']['input']>;
+    bankName?: InputMaybe<Scalars['String']['input']>;
+    /** ISO 3166-1 alpha-2 country of the payout account. */
+    country: Scalars['String']['input'];
+    /** ISO 4217 payout currency. Defaults to INR for India and USD elsewhere. */
+    currency?: InputMaybe<Scalars['String']['input']>;
+    /** Processor account reference when the publisher already has one (Stripe acct_..., RazorpayX fa_...). */
+    externalAccountId?: InputMaybe<Scalars['String']['input']>;
+    isDefault?: InputMaybe<Scalars['Boolean']['input']>;
+    type: PayoutMethodType;
+};
 export type AddOnInputPayment = {
     id: Scalars['String']['input'];
     quantity?: InputMaybe<Scalars['Int']['input']>;
@@ -416,9 +452,22 @@ export type Addon = {
     priceHistory: Array<AddonPriceHistory>;
     /** Product ID the addon belongs to (reference to product microservice) */
     productID?: Maybe<Scalars['String']['output']>;
+    /** Whether buying this add-on requires a paid subscription to its product (the catalogs' "Free tier exclusion" rule, BOFF-9889). False for items sold to Free users on purpose. */
+    requiresPaidSubscription?: Maybe<Scalars['Boolean']['output']>;
     /** The timestamp when the addon was last updated. */
     updatedAt?: Maybe<Scalars['DateTime']['output']>;
 };
+/** Why an add-on can or cannot be bought by the caller's billing account(s). */
+export declare enum AddonEligibilityReason {
+    /** The add-on can be bought. */
+    Eligible = "ELIGIBLE",
+    /** No add-on with this id exists. */
+    NotFound = "NOT_FOUND",
+    /** The add-on requires a paid subscription to its product and none is active. */
+    PaidSubscriptionRequired = "PAID_SUBSCRIPTION_REQUIRED",
+    /** The chosen subscription is not a paid plan of the add-on's product. */
+    SubscriptionNotEligible = "SUBSCRIPTION_NOT_ELIGIBLE"
+}
 /** Tracks historical price changes for an Addon. A new record is created whenever an addon's price is updated. */
 export type AddonPriceHistory = {
     __typename?: 'AddonPriceHistory';
@@ -439,6 +488,17 @@ export type AddonPriceHistory = {
     /** Optional reason for the price change */
     reason?: Maybe<Scalars['String']['output']>;
 };
+/** Purchase eligibility of one add-on (BOFF-9889). */
+export type AddonPurchaseEligibility = {
+    __typename?: 'AddonPurchaseEligibility';
+    addonId: Scalars['ID']['output'];
+    eligible: Scalars['Boolean']['output'];
+    /** Active paid subscriptions of the add-on's product the add-on may be attached to. */
+    eligibleSubscriptionIds: Array<Scalars['ID']['output']>;
+    productId?: Maybe<Scalars['String']['output']>;
+    reason: AddonEligibilityReason;
+    requiresPaidSubscription: Scalars['Boolean']['output'];
+};
 export type AddonSubscription = {
     __typename?: 'AddonSubscription';
     /** The addon linked to this subscription. */
@@ -754,6 +814,8 @@ export type AiModelPrice = {
     isActive: Scalars['Boolean']['output'];
     model: Scalars['String']['output'];
     outputPer1M: Scalars['Float']['output'];
+    /** When this price row last changed. Ledger cost estimates cite it in their pricing reference (wspace-prompts-svc, BOFF-9935) so a cost stays traceable to the exact price version that produced it. */
+    updatedAt: Scalars['DateTime']['output'];
 };
 /** Amount range filter for queries */
 export type AmountRangeInput = {
@@ -1875,13 +1937,17 @@ export type BillingSubscription = {
 };
 export type BillingWebhookLog = {
     __typename?: 'BillingWebhookLog';
+    attemptCount: Scalars['Int']['output'];
     context?: Maybe<Scalars['JSON']['output']>;
     createdAt: Scalars['DateTime']['output'];
+    deadLetteredAt?: Maybe<Scalars['DateTime']['output']>;
     error?: Maybe<Scalars['String']['output']>;
     event: Scalars['String']['output'];
     id: Scalars['ID']['output'];
+    nextAttemptAt?: Maybe<Scalars['DateTime']['output']>;
     payload: Scalars['JSON']['output'];
     processed: Scalars['Boolean']['output'];
+    processingStartedAt?: Maybe<Scalars['DateTime']['output']>;
     provider: Scalars['String']['output'];
 };
 /** Paginated page of BillingWebhookLog rows, for the admin webhook-log viewer — unlike getUnprocessedFailedWebhooks, not restricted to the payment-succeeded event types eligible for refund creation. */
@@ -2166,10 +2232,19 @@ export type CannedResponseFilterInput = {
     isActive?: InputMaybe<Scalars['Boolean']['input']>;
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
 };
-/** One of a shipping carrier's own registered pickup/warehouse addresses (see carrierPickupLocations query). Not organization-scoped — a pickup location belongs to whichever carrier account it's registered with (e.g. Shiprocket today; more carriers may be added later), since a store's ShippingMethods can each use a different carrier. */
+/**
+ * One of a shipping carrier's own registered pickup/warehouse addresses (see
+ * carrierPickupLocations query). Not organization-scoped — a pickup location
+ * belongs to whichever carrier account it's registered with (e.g. Shiprocket
+ * today; more carriers may be added later), since a store's ShippingMethods
+ * can each use a different carrier.
+ */
 export type CarrierPickupLocation = {
     __typename?: 'CarrierPickupLocation';
-    /** Which carrier this pickup address is registered with (matches ShippingMethod.carrier, e.g. "shiprocket"). */
+    /**
+     * Which carrier this pickup address is registered with (matches
+     * ShippingMethod.carrier, e.g. "shiprocket").
+     */
     carrier: Scalars['String']['output'];
     label: Scalars['String']['output'];
     postalCode: Scalars['String']['output'];
@@ -2328,6 +2403,32 @@ export declare enum CartStatus {
     /** Cart was merged into another cart (e.g., after login) */
     Merged = "MERGED"
 }
+export type CatalogProductSync = {
+    __typename?: 'CatalogProductSync';
+    productId: Scalars['ID']['output'];
+    reason?: Maybe<Scalars['String']['output']>;
+    slug: Scalars['String']['output'];
+    status: CatalogProductSyncStatus;
+};
+/** What a catalog sync did to one Store listing of the node (BOFF-9458). */
+export declare enum CatalogProductSyncStatus {
+    /** The listing is a draft, under review, rejected or archived; left alone. */
+    InactiveListing = "INACTIVE_LISTING",
+    /** The listing belongs to a publisher that is not a catalog publisher; left alone. */
+    NotCatalogManaged = "NOT_CATALOG_MANAGED",
+    /** The listing already matched; nothing was written. */
+    Unchanged = "UNCHANGED",
+    /** The listing's node contract now matches the catalog manifest. */
+    Updated = "UPDATED",
+    /** The listing is for another node version; left alone. */
+    VersionMismatch = "VERSION_MISMATCH"
+}
+export type CatalogRegistrySync = {
+    __typename?: 'CatalogRegistrySync';
+    reason?: Maybe<Scalars['String']['output']>;
+    /** wspace-workflow-svc's outcome (UPDATED, UNCHANGED, NOT_REGISTERED, INVALID_MANIFEST), or FAILED when it was not reached. */
+    status: Scalars['String']['output'];
+};
 export type CategoryBreakdown = {
     __typename?: 'CategoryBreakdown';
     category: SupportTicketCategory;
@@ -2396,8 +2497,6 @@ export type Channel = {
     priority: Scalars['Int']['output'];
     /** Current channel status (admin-controlled: ACTIVE, INACTIVE, etc.) */
     status: ChannelStatus;
-    /** Tag assignments for this channel (stub — returns empty until wspace-tags-svc supports org-scoped assignments) */
-    tagAssignments: Array<ChannelTagAssignment>;
     /** Number of times this channel has been triggered (e.g., for workflows, automations) */
     triggerCount: Scalars['Int']['output'];
     /** Last update timestamp */
@@ -2490,8 +2589,6 @@ export type ChannelConnection = {
     needsTokenRefresh: Scalars['Boolean']['output'];
     /** Platform-specific metadata (channel IDs, team info, etc.) NOTE: Non-sensitive data only */
     platformMetadata?: Maybe<Scalars['JSON']['output']>;
-    /** Tag assignments for this connection (stub — returns empty until wspace-tags-svc supports org-scoped assignments) */
-    tagAssignments: Array<ChannelConnectionTagAssignment>;
     /** Connection test status message */
     testStatus?: Maybe<Scalars['String']['output']>;
     /** OAuth token expiration (for OAuth flows) */
@@ -2507,18 +2604,6 @@ export type ChannelConnectionList = {
     nextCursor?: Maybe<Scalars['String']['output']>;
     total: Scalars['Int']['output'];
 };
-export type ChannelConnectionTagAssignment = {
-    __typename?: 'ChannelConnectionTagAssignment';
-    assignedAt?: Maybe<Scalars['DateTime']['output']>;
-    assignedBy?: Maybe<Scalars['ID']['output']>;
-    entityId: Scalars['ID']['output'];
-    entityType: Scalars['String']['output'];
-    id: Scalars['ID']['output'];
-    metadata?: Maybe<Scalars['JSON']['output']>;
-    source: Scalars['String']['output'];
-    tag?: Maybe<UniversalTag>;
-    tagId: Scalars['ID']['output'];
-};
 /** Attachment input for channel delivery */
 export type ChannelDeliveryAttachmentInput = {
     /** Content (Base64 encoded) or URL */
@@ -2889,18 +2974,6 @@ export declare enum ChannelStatus {
     /** Channel is suspended (rate limit, violation) */
     Suspended = "SUSPENDED"
 }
-export type ChannelTagAssignment = {
-    __typename?: 'ChannelTagAssignment';
-    assignedAt?: Maybe<Scalars['DateTime']['output']>;
-    assignedBy?: Maybe<Scalars['ID']['output']>;
-    entityId: Scalars['ID']['output'];
-    entityType: Scalars['String']['output'];
-    id: Scalars['ID']['output'];
-    metadata?: Maybe<Scalars['JSON']['output']>;
-    source: Scalars['String']['output'];
-    tag?: Maybe<UniversalTag>;
-    tagId: Scalars['ID']['output'];
-};
 /** Channel type discriminator — determines delivery behaviour and webhook handling. NOTIFICATION channels (EMAIL, SMS) are outbound-only: - Support priority-based failover across adapters. - No inbound webhook processing. - No DM conversations. - Recipient resolved via externalEmail (email) or externalUserId (phone). COMMUNICATION channels (SLACK, TEAMS, DISCORD, WHATSAPP, WEBCHAT, INAPP, WEBHOOK) are bi-directional: - Inbound webhooks processed and forwarded to conversations-svc. - DM conversations tracked via dmConversationId. - Recipient resolved via dmConversationId set during OAuth / pairing. */
 export declare enum ChannelType {
     /** Bi-directional platform channels: SLACK, TEAMS, DISCORD, WHATSAPP, WEBCHAT, INAPP, WEBHOOK. Processes inbound webhooks and supports DM conversations. */
@@ -2946,11 +3019,17 @@ export declare enum ChartWindow {
 }
 /** Input for checkout */
 export type CheckoutInput = {
-    /** Billing account ID. When omitted, the store resolves the caller's default billing account from billing-svc automatically. */
+    /**
+     * Billing account ID. When omitted, the store resolves the caller's default
+     * billing account from billing-svc automatically.
+     */
     billingAccountId?: InputMaybe<Scalars['String']['input']>;
     /** Order notes */
     notes?: InputMaybe<Scalars['String']['input']>;
-    /** Payment method ID. When omitted, the store uses the default payment method on the resolved billing account. */
+    /**
+     * Payment method ID. When omitted, the store uses the default payment method
+     * on the resolved billing account.
+     */
     paymentMethodId?: InputMaybe<Scalars['String']['input']>;
     /** Shipping address ID (required for physical items) */
     shippingAddressId?: InputMaybe<Scalars['String']['input']>;
@@ -3562,6 +3641,8 @@ export type CreateContentPageInput = {
     category?: InputMaybe<Scalars['String']['input']>;
     content: Scalars['String']['input'];
     contentFormat?: InputMaybe<Scalars['String']['input']>;
+    /** Customer approval for a case study. All three fields are required, and signedAt may not be in the future. */
+    customerSignOff?: InputMaybe<CustomerSignOffInput>;
     excerpt?: InputMaybe<Scalars['String']['input']>;
     featured?: InputMaybe<Scalars['Boolean']['input']>;
     isPublished?: InputMaybe<Scalars['Boolean']['input']>;
@@ -3970,7 +4051,10 @@ export type CreatePhysicalProductInput = {
     bannerUrl?: InputMaybe<Scalars['String']['input']>;
     brand?: InputMaybe<Scalars['String']['input']>;
     category?: InputMaybe<Scalars['String']['input']>;
-    /** Which platform products this listing is relevant to (e.g. "healthybowl"). Set by the calling seller-portal shell — see DeveloperOrgKind (BOFF-7285). */
+    /**
+     * Which platform products this listing is relevant to (e.g. "healthybowl").
+     * Set by the calling seller-portal shell — see DeveloperOrgKind (BOFF-7285).
+     */
     compatibleProducts?: InputMaybe<Array<Scalars['String']['input']>>;
     countryOfOrigin?: InputMaybe<Scalars['String']['input']>;
     currency?: InputMaybe<Scalars['String']['input']>;
@@ -4196,9 +4280,13 @@ export type CreateReleaseTrackInput = {
 };
 export type CreateReviewInput = {
     comment?: InputMaybe<Scalars['String']['input']>;
+    isVerifiedInstall?: InputMaybe<Scalars['Boolean']['input']>;
+    metadata?: InputMaybe<Scalars['JSON']['input']>;
     productId: Scalars['String']['input'];
     rating: Scalars['Int']['input'];
+    status?: InputMaybe<ReviewStatus>;
     title?: InputMaybe<Scalars['String']['input']>;
+    verifiedPurchase?: InputMaybe<Scalars['Boolean']['input']>;
 };
 export type CreateReviewReplyInput = {
     productId: Scalars['ID']['input'];
@@ -4430,11 +4518,6 @@ export type CreateSupportTicketInput = {
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
     workspaceId?: InputMaybe<Scalars['String']['input']>;
 };
-export type CreateTagInput = {
-    description?: InputMaybe<Scalars['String']['input']>;
-    name: Scalars['String']['input'];
-    slug: Scalars['String']['input'];
-};
 export type CreateTemplateInput = {
     bodyTemplate: Scalars['String']['input'];
     /** Default delivery channel for this template (defaults to EMAIL if not specified) */
@@ -4767,6 +4850,22 @@ export type CustomerSatisfactionSurveyFilterInput = {
     startDate?: InputMaybe<Scalars['DateTime']['input']>;
     ticketId?: InputMaybe<Scalars['String']['input']>;
 };
+/** Who at the customer approved a case study, when, and where the written approval is kept. Never invent one: it is the only thing that lets a case study appear on a public website. */
+export type CustomerSignOff = {
+    __typename?: 'CustomerSignOff';
+    /** Reference to the stored written approval (document id, ticket or file URL). Only returned to callers who manage content pages; null for public visitors. */
+    documentRef?: Maybe<Scalars['String']['output']>;
+    /** When the customer approved the story */
+    signedAt: Scalars['DateTime']['output'];
+    /** Name and role of the approving person at the customer. Only returned to callers who manage content pages; null for public visitors. */
+    signedBy?: Maybe<Scalars['String']['output']>;
+};
+/** Customer approval for a case study (see CustomerSignOff) */
+export type CustomerSignOffInput = {
+    documentRef: Scalars['String']['input'];
+    signedAt: Scalars['DateTime']['input'];
+    signedBy: Scalars['String']['input'];
+};
 export declare enum DlqStatus {
     Discarded = "DISCARDED",
     Investigating = "INVESTIGATING",
@@ -4880,6 +4979,12 @@ export type DeadLetterQueueConnection = {
     hasMore: Scalars['Boolean']['output'];
     total: Scalars['Int']['output'];
 };
+export type DecideGovernanceAppealInput = {
+    decision: GovernanceAppealDecision;
+    id: Scalars['ID']['input'];
+    /** Decision note the publisher sees. */
+    note: Scalars['String']['input'];
+};
 export declare enum DelegationStatus {
     Active = "ACTIVE",
     Expired = "EXPIRED",
@@ -5538,6 +5643,73 @@ export declare enum DimensionUnit {
     Inch = "INCH",
     Meter = "METER"
 }
+/** What a directory sync did (or, in a dry run, would do) for one worker. */
+export declare enum DirectorySyncAction {
+    Conflict = "CONFLICT",
+    Create = "CREATE",
+    Deactivate = "DEACTIVATE",
+    Error = "ERROR",
+    Reactivate = "REACTIVATE",
+    Skip = "SKIP",
+    Unchanged = "UNCHANGED",
+    Update = "UPDATE"
+}
+export type DirectorySyncInput = {
+    /** Compute the outcome without writing anything. */
+    dryRun: Scalars['Boolean']['input'];
+    source: DirectorySyncSource;
+    /** The connector that sent the batch (its integration connection id), recorded as the actor on every account it creates, changes or deactivates. */
+    sourceRef: Scalars['String']['input'];
+    /** At most 200 workers per call. */
+    workers: Array<DirectoryWorkerInput>;
+};
+export type DirectorySyncItem = {
+    __typename?: 'DirectorySyncItem';
+    action: DirectorySyncAction;
+    detail?: Maybe<Scalars['String']['output']>;
+    email?: Maybe<Scalars['String']['output']>;
+    externalId: Scalars['String']['output'];
+    userId?: Maybe<Scalars['ID']['output']>;
+};
+export type DirectorySyncResult = {
+    __typename?: 'DirectorySyncResult';
+    conflicts: Scalars['Int']['output'];
+    created: Scalars['Int']['output'];
+    deactivated: Scalars['Int']['output'];
+    dryRun: Scalars['Boolean']['output'];
+    errors: Scalars['Int']['output'];
+    items: Array<DirectorySyncItem>;
+    reactivated: Scalars['Int']['output'];
+    skipped: Scalars['Int']['output'];
+    unchanged: Scalars['Int']['output'];
+    updated: Scalars['Int']['output'];
+};
+/** Where an HR-system directory sync comes from (BOFF-10564). */
+export declare enum DirectorySyncSource {
+    SapSuccessfactors = "SAP_SUCCESSFACTORS",
+    Workday = "WORKDAY"
+}
+/** One worker as the HR system reports it. `externalId` is the HR system's stable worker id; the platform namespaces it by source before storing it. */
+export type DirectoryWorkerInput = {
+    active: Scalars['Boolean']['input'];
+    email?: InputMaybe<Scalars['String']['input']>;
+    externalId: Scalars['String']['input'];
+    familyName?: InputMaybe<Scalars['String']['input']>;
+    givenName?: InputMaybe<Scalars['String']['input']>;
+};
+/** Input for the M2M dispatchWebhookEvent mutation */
+export type DispatchWebhookEventInput = {
+    /** Caller-supplied event ID; enables idempotent redispatch per subscription */
+    eventId?: InputMaybe<Scalars['String']['input']>;
+    /** Event type being dispatched */
+    eventType: Scalars['String']['input'];
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['input'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['input'];
+    /** Event payload; wrapped in the signed envelope as `data` */
+    payload: Scalars['JSON']['input'];
+};
 /** DSAR mode — GDPR Art. 15 (access/export) or Art. 17 (erasure). */
 export declare enum DsarMode {
     Erase = "ERASE",
@@ -5591,6 +5763,15 @@ export type EarnCreditsInput = {
     productId?: InputMaybe<Scalars['String']['input']>;
     sourceReferenceId?: InputMaybe<Scalars['String']['input']>;
 };
+/** Outcome of serviceReverseEarning. */
+export declare enum EarningReversalOutcome {
+    /** An earlier call already reversed the entry (idempotent replay). */
+    AlreadyReversed = "ALREADY_REVERSED",
+    /** The entry is RESERVED for, or PAID by, a payout and was left unchanged. */
+    NotReversible = "NOT_REVERSIBLE",
+    /** The entry was AVAILABLE and is now REVERSED. */
+    Reversed = "REVERSED"
+}
 export declare enum EarningUnitType {
     Credits = "CREDITS",
     Money = "MONEY"
@@ -5616,6 +5797,9 @@ export type EarningsEntry = {
     paidAt?: Maybe<Scalars['DateTime']['output']>;
     payoutRequestId?: Maybe<Scalars['ID']['output']>;
     reservedAt?: Maybe<Scalars['DateTime']['output']>;
+    reversalReason?: Maybe<Scalars['String']['output']>;
+    /** When the entry was reversed (its source sale was refunded), if it was. */
+    reversedAt?: Maybe<Scalars['DateTime']['output']>;
     sourceCategory: EarningsSourceCategory;
     sourceEventId?: Maybe<Scalars['String']['output']>;
     sourceReferenceId?: Maybe<Scalars['String']['output']>;
@@ -5650,13 +5834,18 @@ export declare enum EarningsSourceCategory {
 }
 export type EarningsSummary = {
     __typename?: 'EarningsSummary';
+    /** Earned, past its hold window and not yet reserved for a payout. */
     availableAmount: Scalars['Float']['output'];
     categoryBreakdown: Array<EarningsCategoryBreakdown>;
     creditsAmount: Scalars['Float']['output'];
     moneyAmount: Scalars['Float']['output'];
     paidAmount: Scalars['Float']['output'];
+    /** Earned but still inside its hold window (availableAt in the future), so not payable yet. */
     pendingAmount: Scalars['Float']['output'];
     reservedAmount: Scalars['Float']['output'];
+    /** Entries reversed because their source sale was refunded. Not part of any other total. */
+    reversedAmount: Scalars['Float']['output'];
+    /** Everything earned, excluding reversed entries. */
     totalLifetimeAmount: Scalars['Float']['output'];
 };
 export type EditorialCollection = {
@@ -6013,6 +6202,8 @@ export type ExploreAgentSubmitInput = {
     message: Scalars['String']['input'];
     /** Catalog slug of the website the visitor is on. A hint only. */
     productSlug?: InputMaybe<Scalars['String']['input']>;
+    /** The website avatar asked: the visitor sent this question from the avatar's own question box (BOFF-9797). A hint only. It may let a typed first question, or with the service's follow-up setting a later question of the same conversation, be answered in the shape the avatar can read aloud, when the service's settings allow it; it never changes any other turn. */
+    readAloud?: InputMaybe<Scalars['Boolean']['input']>;
 };
 export type ExploreAgentUsage = {
     __typename?: 'ExploreAgentUsage';
@@ -6075,6 +6266,29 @@ export type ExploreConversation = {
     token: Scalars['String']['output'];
     turnCount: Scalars['Int']['output'];
 };
+/** What a conversation token reveals about its own conversation, and nothing more. Deliberately a separate type from `ExploreConversation`: that one carries the bearer secret and is only ever handed to the caller that already holds it, while this one is a plain read. It has no token, no IP hash and no stored metadata, and it can never describe a conversation other than the one the caller's token owns. */
+export type ExploreConversationInfo = {
+    __typename?: 'ExploreConversationInfo';
+    createdAt: Scalars['DateTime']['output'];
+    /** The visitor's language: one of `en` `zh` `hi` `es` `ar` `ta`, or null. Null when none was sent, when it was not one of those, and for a conversation stored before the value was checked — never a raw string. */
+    locale?: Maybe<Scalars['String']['output']>;
+    /** Every message the conversation holds, whatever its status. Compare it with the length of an `exploreConversationMessages` read (which is capped at 100) to know whether that read was the whole thread. */
+    messageCount: Scalars['Int']['output'];
+    /** Slug of the product website the conversation started on, as stored. Null when the visitor did not say. */
+    productSlug?: Maybe<Scalars['String']['output']>;
+};
+/** One answer, the question it replies to, and where that pair sits in its conversation. Read by the answer's id, so the reader is bound to the exact answer it named rather than to whichever one happens to be newest. Always exactly two messages, however long the thread is. */
+export type ExploreConversationPair = {
+    __typename?: 'ExploreConversationPair';
+    /** The answer the read named, in whatever state it is in. An unfinished one is reconciled exactly as `exploreMessage` reconciles it. */
+    answer: ExploreMessage;
+    /** True when nothing has been written to the conversation after this answer: no later question, whatever became of it. */
+    latest: Scalars['Boolean']['output'];
+    /** The visitor's question that this answer replies to. */
+    question: ExploreMessage;
+    /** 1-based number of this question and answer in the conversation: the first question and its answer are turn 1. */
+    turn: Scalars['Int']['output'];
+};
 /** A call-to-action button derived from a cited link. `kind` is one of: CONTACT PARTNERS PRICING SERVICES WAITLIST STORE APP DOCS OTHER. */
 export type ExploreCta = {
     __typename?: 'ExploreCta';
@@ -6172,6 +6386,13 @@ export type ExploreShareLink = {
     __typename?: 'ExploreShareLink';
     shareToken: Scalars['String']['output'];
 };
+/** Where on the website the visitor asked from. A hint about presentation only: it grants nothing and is never stored. */
+export declare enum ExploreSurface {
+    /** The Avatar tab, whose answers the live avatar may read aloud: the first one of a conversation, and a later one where the deployment enables follow-ups. */
+    Avatar = "AVATAR",
+    /** The Chat view of the website assistant (the default when omitted). */
+    Chat = "CHAT"
+}
 export type ExportApplicationsFilter = {
     appType?: InputMaybe<AppType>;
     category?: InputMaybe<Scalars['String']['input']>;
@@ -6261,37 +6482,6 @@ export type ExportSubscriber = {
     unsubscribedAt?: Maybe<Scalars['DateTime']['output']>;
     userId?: Maybe<Scalars['String']['output']>;
 };
-export type ExportSupportInput = {
-    /** Date range filter - end date */
-    endDate?: InputMaybe<Scalars['DateTime']['input']>;
-    /** Export format (CSV or JSON) */
-    format: SupportExportFormat;
-    /** Include support messages in export */
-    includeMessages?: InputMaybe<Scalars['Boolean']['input']>;
-    /** Filter by priority */
-    priority?: InputMaybe<Array<SupportTicketPriority>>;
-    /** Date range filter - start date */
-    startDate?: InputMaybe<Scalars['DateTime']['input']>;
-    /** Filter by ticket status */
-    status?: InputMaybe<Array<SupportTicketStatus>>;
-    /** User ID for which to export support data */
-    userId: Scalars['ID']['input'];
-    /** Workspace ID (optional) */
-    workspaceId?: InputMaybe<Scalars['ID']['input']>;
-};
-export type ExportSupportResponse = {
-    __typename?: 'ExportSupportResponse';
-    /** Download URL (when ready) */
-    downloadUrl?: Maybe<Scalars['String']['output']>;
-    /** Estimated number of records */
-    estimatedRecords?: Maybe<Scalars['Int']['output']>;
-    /** Export job ID */
-    jobId: Scalars['ID']['output'];
-    /** Message */
-    message: Scalars['String']['output'];
-    /** Export status */
-    status: Scalars['String']['output'];
-};
 /** Filter for webhook event exports */
 export type ExportWebhookEventsFilter = {
     channelId?: InputMaybe<Scalars['ID']['input']>;
@@ -6334,6 +6524,12 @@ export type ExternalOidcConfigurationInput = {
     redirectUri?: InputMaybe<Scalars['String']['input']>;
     scopes?: InputMaybe<Array<Scalars['String']['input']>>;
 };
+export type ExternalRefundResult = {
+    __typename?: 'ExternalRefundResult';
+    alreadyRecorded: Scalars['Boolean']['output'];
+    chargeId: Scalars['ID']['output'];
+    refundId: Scalars['ID']['output'];
+};
 export type ExternalSettlementResult = {
     __typename?: 'ExternalSettlementResult';
     /** True when the externalRef already had a settlement (idempotent replay). */
@@ -6492,6 +6688,13 @@ export type FileDsarInput = {
     subjectId: Scalars['ID']['input'];
     type: DsarType;
 };
+export type FileGovernanceAppealInput = {
+    /** Required for a LISTING appeal: the taken-down listing. */
+    productId?: InputMaybe<Scalars['ID']['input']>;
+    /** Why the action should be reversed, up to 4000 characters. */
+    statement: Scalars['String']['input'];
+    targetType: GovernanceAppealTarget;
+};
 /** Available filter options for UI dropdowns */
 export type FilterOptionsResult = {
     __typename?: 'FilterOptionsResult';
@@ -6573,19 +6776,100 @@ export type GeoPricingOverrideInput = {
 export type GetApplicationTagsInput = {
     applicationId: Scalars['ID']['input'];
 };
-export type GetChannelConnectionTagsInput = {
+export type GetStoreProductTagsInput = {
     entityId: Scalars['ID']['input'];
 };
-export type GetChannelTagsInput = {
-    entityId: Scalars['ID']['input'];
+/** A publisher's appeal against a takedown or suspension. */
+export type GovernanceAppeal = {
+    __typename?: 'GovernanceAppeal';
+    actionAt?: Maybe<Scalars['DateTime']['output']>;
+    /** The reason recorded on the action when the appeal was filed. */
+    actionReason?: Maybe<Scalars['String']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    decidedAt?: Maybe<Scalars['DateTime']['output']>;
+    decidedBy?: Maybe<Scalars['String']['output']>;
+    /** The reviewer's decision note, shown to the publisher. */
+    decisionNote?: Maybe<Scalars['String']['output']>;
+    filedBy: Scalars['String']['output'];
+    id: Scalars['ID']['output'];
+    isReviewOverdue: Scalars['Boolean']['output'];
+    product?: Maybe<StoreProduct>;
+    productId?: Maybe<Scalars['ID']['output']>;
+    publisherId: Scalars['ID']['output'];
+    /** Five business days after filing. */
+    reviewDueAt: Scalars['DateTime']['output'];
+    statement: Scalars['String']['output'];
+    status: GovernanceAppealStatus;
+    submittedAt: Scalars['DateTime']['output'];
+    targetType: GovernanceAppealTarget;
+};
+export declare enum GovernanceAppealDecision {
+    Reversed = "REVERSED",
+    Upheld = "UPHELD"
+}
+export type GovernanceAppealList = {
+    __typename?: 'GovernanceAppealList';
+    appeals: Array<GovernanceAppeal>;
+    totalCount: Scalars['Int']['output'];
 };
-export type GetStoreProductTagsInput = {
-    entityId: Scalars['ID']['input'];
+export declare enum GovernanceAppealStatus {
+    Pending = "PENDING",
+    /** The action was undone. */
+    Reversed = "REVERSED",
+    /** The action stays in place. */
+    Upheld = "UPHELD"
+}
+/** What a governance appeal is against. */
+export declare enum GovernanceAppealTarget {
+    /** A takedown of one listing. */
+    Listing = "LISTING",
+    /** A suspension of the whole publisher account. */
+    Publisher = "PUBLISHER"
+}
+/** The review a report is about, as the reviewer queue shows it. */
+export type GovernanceReportedReview = {
+    __typename?: 'GovernanceReportedReview';
+    comment?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    productId: Scalars['ID']['output'];
+    productName?: Maybe<Scalars['String']['output']>;
+    productSlug?: Maybe<Scalars['String']['output']>;
+    rating: Scalars['Int']['output'];
+    status: Scalars['String']['output'];
+    title?: Maybe<Scalars['String']['output']>;
+    userId: Scalars['String']['output'];
+};
+/** A report against a review, in the reviewer queue. */
+export type GovernanceReviewReport = {
+    __typename?: 'GovernanceReviewReport';
+    actionTaken?: Maybe<Scalars['String']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    details?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** True when the product's publisher filed this report to dispute the rating. */
+    isRatingDispute: Scalars['Boolean']['output'];
+    reason: Scalars['String']['output'];
+    reportedBy: Scalars['String']['output'];
+    /** True when the reporter is the publisher of the reviewed product. */
+    reportedByPublisher: Scalars['Boolean']['output'];
+    resolutionNote?: Maybe<Scalars['String']['output']>;
+    review?: Maybe<GovernanceReportedReview>;
+    reviewId: Scalars['ID']['output'];
+    reviewedAt?: Maybe<Scalars['DateTime']['output']>;
+    reviewedBy?: Maybe<Scalars['String']['output']>;
+    status: ReviewReportStatus;
+};
+export type GovernanceReviewReportList = {
+    __typename?: 'GovernanceReviewReportList';
+    reports: Array<GovernanceReviewReport>;
+    totalCount: Scalars['Int']['output'];
 };
 /** Input for the service-trusted internal self-delegation grant path. Called by a trusted backend (e.g. wspace-integrations-svc) when a user "adds" a first-party integration: it creates a self-delegation (the user grants the first-party app the ability to act as themselves) without a separate consent screen and without the workspace-admin gate (the user is only granting access to their own data, still bounded by their role-based RBAC at the target service). Only callable by service/super_admin actors through an internal gateway. */
 export type GrantAppDelegationInternalInput = {
     /** Client ID of the first-party system app (e.g. burdenoff_integration_core). */
     clientId: Scalars['String']['input'];
+    /** When the delegation lapses (BOFF-9962). Must be in the future. Omit for a delegation without an expiry; a re-grant without it keeps no expiry. */
+    expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
     /** Scopes the delegation must keep for other grants that share it (e.g. the user's other integration connections). A retained scope is kept only while the existing delegation is ACTIVE and already holds it, and only while the app still allows it; otherwise it is dropped, never rejected. A grant therefore never restores or adds a scope beyond the requested scopes. */
     retainedScopes?: InputMaybe<Array<Scalars['String']['input']>>;
     /** Workspaces the delegation must keep for other grants that share it. Kept only while the existing delegation is ACTIVE and already covers them: restoring a REVOKED or EXPIRED delegation covers only workspaceIds. Ignored when workspaceIds is empty (unrestricted). */
@@ -6926,6 +7210,8 @@ export type InitiatePaymentInput = {
     quantity?: InputMaybe<Scalars['Int']['input']>;
     /** Whether to save the card for future purchases (only for new card payments) */
     saveCard?: InputMaybe<Scalars['Boolean']['input']>;
+    /** For PLAN purchase of a PER_SEAT plan: the number of seats to charge for. Clamped server-side to [plan.minSeats, plan.maxSeats]; defaults to plan.minSeats (or 1) when omitted. Ignored for FLAT_RATE plans. */
+    seatCount?: InputMaybe<Scalars['Int']['input']>;
     /** For ADDON purchase: subscription ID to attach addon to. Required if billing account has multiple active subscriptions. If only one active subscription exists, it will be auto-selected. */
     subscriptionId?: InputMaybe<Scalars['ID']['input']>;
     /** For PLAN upgrade: the subscription ID being upgraded from. If provided, this is an upgrade - old quotas will be moved to new subscription. */
@@ -6946,6 +7232,8 @@ export type InitiatePaymentResponse = {
     discountType?: Maybe<Scalars['String']['output']>;
     /** Error message if failed */
     error?: Maybe<Scalars['String']['output']>;
+    /** Machine-readable error code when the initiation failed, e.g. PAID_SUBSCRIPTION_REQUIRED when an add-on needs a paid plan (BOFF-9889). */
+    errorCode?: Maybe<Scalars['String']['output']>;
     /** Tax jurisdiction */
     jurisdiction: Scalars['String']['output'];
     /** Razorpay order ID (for Razorpay payments) */
@@ -7929,6 +8217,64 @@ export declare enum LinkType {
     Parent = "PARENT",
     Related = "RELATED"
 }
+/** A buyer's report against a listing. */
+export type ListingReport = {
+    __typename?: 'ListingReport';
+    createdAt: Scalars['DateTime']['output'];
+    details?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    product?: Maybe<StoreProduct>;
+    productId: Scalars['ID']['output'];
+    reason: ListingReportReason;
+    /** Actor id of the reporter. Visible to store admins only (the reporter sees their own). */
+    reportedBy: Scalars['String']['output'];
+    resolutionNote?: Maybe<Scalars['String']['output']>;
+    resolvedAt?: Maybe<Scalars['DateTime']['output']>;
+    resolvedBy?: Maybe<Scalars['String']['output']>;
+    status: ListingReportStatus;
+    updatedAt: Scalars['DateTime']['output'];
+};
+export type ListingReportList = {
+    __typename?: 'ListingReportList';
+    reports: Array<ListingReport>;
+    totalCount: Scalars['Int']['output'];
+};
+/** Why a buyer reports a listing. */
+export declare enum ListingReportReason {
+    /** Abusive, hateful or otherwise unacceptable content. */
+    Abuse = "ABUSE",
+    /** The listing does not install or does not work. */
+    Broken = "BROKEN",
+    /** The listing infringes someone's intellectual property. */
+    IpInfringement = "IP_INFRINGEMENT",
+    /** The description, screenshots or pricing misrepresent the listing. */
+    Misleading = "MISLEADING",
+    Other = "OTHER",
+    /** The listing poses a security, privacy or safety risk. */
+    Security = "SECURITY",
+    /** Spam or a duplicate listing. */
+    Spam = "SPAM"
+}
+/** Lifecycle of a listing report. */
+export declare enum ListingReportStatus {
+    Actioned = "ACTIONED",
+    Dismissed = "DISMISSED",
+    Open = "OPEN"
+}
+/**
+ * The active takedown of a listing. Visible to store admins and to the listing's
+ * publisher only.
+ */
+export type ListingTakedown = {
+    __typename?: 'ListingTakedown';
+    category?: Maybe<TakedownCategory>;
+    reason?: Maybe<Scalars['String']['output']>;
+    source: TakedownSource;
+    /** The status a reinstatement restores. */
+    statusBeforeTakedown?: Maybe<ProductStatus>;
+    takenDownAt: Scalars['DateTime']['output'];
+    takenDownBy?: Maybe<Scalars['String']['output']>;
+};
 export type LowStockProduct = {
     __typename?: 'LowStockProduct';
     name: Scalars['String']['output'];
@@ -8132,6 +8478,8 @@ export type Mutation = {
     acceptDeveloperOrgInvitation: DeveloperOrgMember;
     /** Accept an organization invite (must be logged in as the invited user) */
     acceptOrganizationInvite: OrganizationMember;
+    /** Accept the current Marketplace & Developer Agreement on the calling user's publisher profile. The version must match the published one. */
+    acceptPublisherDeveloperAgreement: Publisher;
     acceptSourcingOffer: SourcingOrderSummary;
     /** Signed (DESIGN 3.7). The provider is ready: RESERVED to ACTIVE. */
     activateAvatarMinutes: AvatarMinutesReservation;
@@ -8157,6 +8505,8 @@ export type Mutation = {
     addAppsToCollection: AppCollection;
     /** Add a payment method to an organization */
     addDeveloperOrgPaymentMethod: DeveloperOrgPaymentMethod;
+    /** Add a payout method to the calling user's publisher profile. Requires the current developer agreement to be accepted. */
+    addMyPublisherPayoutMethod: PublisherPayoutMethod;
     /** Append a tracking event to fulfillment history (admin) */
     addOrderTrackingEvent: FulfillmentTrackingEvent;
     /** Add a member to an organization */
@@ -8201,6 +8551,11 @@ export type Mutation = {
     approveReview: ProductReview;
     approveTranslation: Translation;
     approveWaitlist: NewsletterWaitlist;
+    /**
+     * Admin approves a pending template revision: it becomes the live version of
+     * the template (the version goes up) and the revision is removed.
+     */
+    approveWorkflowTemplateRevision: WorkflowTemplateSubmission;
     /** Soft archive a billing account. Financial history is preserved and the account is removed from active billing operations. */
     archiveBillingAccount: BillingAccount;
     /** Archive a channel */
@@ -8275,7 +8630,7 @@ export type Mutation = {
     bulkSendCustomEmail: BulkCustomEmailResult;
     /** Send the same free-text message to multiple candidate rounds at once (admin). Each item is processed independently — a round already messaged is skipped unless `force` is set, and one item failing does not abort the rest. */
     bulkSendRoundMessage: BulkSendResult;
-    /** Bulk set user's opt-in/out preference for multiple feature flags. RBAC is scoped to the target workspace via `input.workspaceId`. */
+    /** Bulk set the calling user's opt-in/out preference for multiple feature flags. Self-scoped: rows are keyed by the caller's user id and the resolver requires membership of `input.workspaceId`. */
     bulkSetUserFeatureFlagPreferences: Array<UserFeatureFlagPreference>;
     /** Update status for a batch of applications at once (admin) — e.g. marking everyone a bulk email just went to as EMAIL_SENT so a later bulk-send doesn't re-email the same people, then moving them back to whatever status applies once the outcome is decided. One item failing (e.g. a deleted application) does not abort the rest. */
     bulkUpdateApplicationStatus: BulkUpdateApplicationStatusResult;
@@ -8471,14 +8826,25 @@ export type Mutation = {
     createSignedCookieSession: SignedCookieResult;
     createSourcingRequest: SourcingRequest;
     createStore: Store;
-    /** Create a new store order (called when user clicks checkout). NOTE: Codex P1 on PR #55 — gating is global+create rather than scopeType:"self". The resolver currently forwards client-supplied input.total / input.lineItems to OrderService without server-side re-pricing, so a "self"-gate would let a buyer underprice their own order and harvest entitlements via the billing callback. Buyer checkout flows through the cart path (createCart → addToCart → checkoutCart) which prices server-side. Re-opening this as a buyer-self action requires server-side total rebuild from product ids — tracked as a follow-up. */
+    /**
+     * Create a new store order (called when user clicks checkout).
+     *
+     * NOTE: Codex P1 on PR #55 — gating is global+create rather than
+     * scopeType:"self". The resolver currently forwards client-supplied
+     * input.total / input.lineItems to OrderService without server-side
+     * re-pricing, so a "self"-gate would let a buyer underprice their own
+     * order and harvest entitlements via the billing callback. Buyer
+     * checkout flows through the cart path (createCart → addToCart →
+     * checkoutCart) which prices server-side. Re-opening this as a
+     * buyer-self action requires server-side total rebuild from product
+     * ids — tracked as a follow-up.
+     */
     createStoreOrder: StoreOrder;
     createSubprocessor: Subprocessor;
     /** Link a subscription plan to a store product granting FREE_ACCESS or DISCOUNT. */
     createSubscriptionEntitlement: StoreSubscriptionEntitlement;
     createSupportMessage: SupportMessage;
     createSupportTicket: SupportTicket;
-    createTag: ProductTag;
     /** Create a tax rate */
     createTaxRate: TaxRate;
     /** Create a new tenant (requires admin privileges) */
@@ -8527,6 +8893,8 @@ export type Mutation = {
     deactivateTourSchedule: TourSchedule;
     /** Stops a subject from firing webhooks. The row is kept so a later registration reactivates it. Same ownership rule as registration. */
     deactivateWebhookEventSubject: WebhookEventSubject;
+    /** Decide a pending appeal. REVERSED reinstates the listing or publisher. */
+    decideGovernanceAppeal: GovernanceAppeal;
     /** Pure quota decrement — called by wspace-activity-svc after writing a UsageRecord. Only decrements QuotaAssignment.limits.value. Does NOT write back to activity-svc. Requires the quotaAssignmentId already resolved by checkQuotaExhausted. */
     decrementQuota: Scalars['Boolean']['output'];
     /** Delete current user's account permanently Requires password confirmation */
@@ -8639,7 +9007,6 @@ export type Mutation = {
     deleteSubscriptionEntitlement: Scalars['Boolean']['output'];
     deleteSupportMessage: Scalars['Boolean']['output'];
     deleteSupportTicket: Scalars['Boolean']['output'];
-    deleteTag: Scalars['Boolean']['output'];
     /** Delete a tax rate */
     deleteTaxRate: Scalars['Boolean']['output'];
     /** Soft delete a tenant */
@@ -8663,10 +9030,18 @@ export type Mutation = {
     deleteUserLanguagePreference: Scalars['Boolean']['output'];
     /** Soft-delete a user platform connection */
     deleteUserPlatformConnection: Scalars['Boolean']['output'];
-    /** M2M: delete a ShippingAddress owned by an explicit user, on behalf of a calling service. Returns false when no matching row exists for that user. Service-actor only. */
+    /**
+     * M2M: delete a ShippingAddress owned by an explicit user, on behalf of a calling
+     * service. Returns false when no matching row exists for that user. Service-actor only.
+     */
     deleteUserShippingAddress: Scalars['Boolean']['output'];
     deleteWebhook: Scalars['Boolean']['output'];
-    /** Admin delists a published product — removes it from store discovery for new users while preserving access for anyone who already installed it. */
+    /** Delete a webhook subscription and its delivery log */
+    deleteWebhookSubscription: Scalars['Boolean']['output'];
+    /**
+     * Admin delists a published product — removes it from store discovery for
+     * new users while preserving access for anyone who already installed it.
+     */
     delistProduct: StoreProduct;
     /** Deliver the same notification to multiple recipients in bulk. More efficient than multiple single calls for broadcast scenarios. */
     deliverBulkNotification: BulkChannelDeliveryResult;
@@ -8688,6 +9063,8 @@ export type Mutation = {
     discardDLQEntry: Scalars['Boolean']['output'];
     /** Dismiss a tour for a user (with option to dismiss permanently) */
     dismissTour: TourUserProgress;
+    /** Dispatch an event to every matching webhook subscription of an owner. M2M only — service / super_admin actors; called by the owning service over the internal gateway. Delivery is HMAC-SHA256 signed with retry/backoff and idempotent per caller-supplied eventId. */
+    dispatchWebhookEvent: WebhookDispatchSummary;
     duplicateNewsletter: Newsletter;
     /** Duplicate a tour with all its steps */
     duplicateTour: Tour;
@@ -8699,7 +9076,14 @@ export type Mutation = {
     enrollSubscriberInAutomation: AutomationSubscriber;
     /** Idempotently ensure a user is an organization member, primarily for the workspace-invite-accept flow where an invitee gains a workspace inside an org they're not yet a member of. Unlike `addOrganizationMember`: * Returns `OrganizationMember` whether the row was inserted or already existed — no CONFLICT on repeat calls (case 1: already a member). * Does NOT overwrite the existing `role` column on a pre-existing row (case 2: don't demote). * Triggers a real-role assignment in global-rbac-svc at scope = orgId only when the actor has NO existing role assignment at that scope (case 3: real role comes from RBAC, not the data-layer string). The `role` arg defaults to `GUEST` — the most restrictive enum value — because invitees arriving via a workspace invite should not gain first-class org membership. The data-layer string column is a coarse classifier; the authoritative permission decision is evaluated by global-rbac-svc against `actor_role_assignments`. See BOFF-2649 + the RBAC guide at `dev/platform/context/identity/rbac/RBAC_GUIDE_FOR_AI_TOOLS.md`. Called from wspace-workspace-svc::acceptInvitation via service-context (`X-Actor-Type: service`), which bypasses the workspace-admin check inside the resolver. Best-effort from the caller's side — failures must NOT block the upstream invite acceptance. */
     ensureOrganizationMember: EnsureOrganizationMemberResult;
-    /** Ensure a billing order exists for a store order. Called from the checkout frontend when no billingOrderId is present (e.g. the buyer had no billing account at order-creation time). Creates the billing order server-side so the correct callbackGraphQL endpoint is registered and the billing service can call back after payment to confirm the store order. */
+    /**
+     * Ensure a billing order exists for a store order.
+     *
+     * Called from the checkout frontend when no billingOrderId is present (e.g. the
+     * buyer had no billing account at order-creation time). Creates the billing order
+     * server-side so the correct callbackGraphQL endpoint is registered and the
+     * billing service can call back after payment to confirm the store order.
+     */
     ensureStoreOrderBillingOrder: EnsureStoreOrderBillingOrderResponse;
     /** Anonymise the subject on the billing layer. With dryRun=true, returns what would change without mutating. Financial records (Transaction, Invoice, Payment) are RETAINED for the statutory 7-year window. */
     eraseSubject: EraseResult;
@@ -8734,8 +9118,17 @@ export type Mutation = {
     exportWebhooks: DevportalExportJob;
     /** Feature a review */
     featureAppReview: AppReview;
+    featureReview: ProductReview;
     fileDSAR: DsarRequest;
-    /** Seller reports a problem fulfilling a physical order (out of stock, cannot fulfill, wrong address, etc). The resolver verifies organizationId actually owns a physical line item on this order (real evidence in store-svc's own data) — scopeType: "organization" at the gateway only confirms the actor has SOME org context, not that it's this specific one. */
+    /** Appeal a takedown of one of your listings, or your publisher suspension. */
+    fileGovernanceAppeal: GovernanceAppeal;
+    /**
+     * Seller reports a problem fulfilling a physical order (out of stock, cannot
+     * fulfill, wrong address, etc). The resolver verifies organizationId actually
+     * owns a physical line item on this order (real evidence in store-svc's own
+     * data) — scopeType: "organization" at the gateway only confirms the actor has
+     * SOME org context, not that it's this specific one.
+     */
     flagOrderIssue: OrderIssueFlag;
     freeUpUsage: Scalars['Boolean']['output'];
     generateAPIKey: ApiKeyResult;
@@ -8760,7 +9153,15 @@ export type Mutation = {
     /** Generate challenge message for wallet signature */
     generateWalletChallenge: WalletChallengeResult;
     getSupportAttachmentPartUploadUrls: Array<SupportAttachmentPresignedPart>;
-    /** Service-trusted internal grant of a first-party self-delegation, keyed by the app's client id. Lets a trusted backend record the consent created when a user adds a first-party integration, without the workspace-admin gate that the public grantDelegation enforces. Gated to internal service / super_admin callers and restricted to first-party system apps. */
+    /** Discard a reply draft without sending it. */
+    globalDiscardTicketReplyDraft: Scalars['Boolean']['output'];
+    /** Draft a reply from published knowledge-base articles, FAQs and canned responses, with citations. Saved as an internal draft, never sent. Fails with GROUNDING_INSUFFICIENT when no article or FAQ covers the ticket. */
+    globalDraftTicketReply: SupportMessage;
+    /** Send a reply draft to the customer as an agent reply, optionally edited. This is the only way a draft reaches a customer. */
+    globalSendTicketReplyDraft: SupportMessage;
+    /** Triage a ticket now: fill an empty category, raise the priority if the evidence calls for it, select the SLA policy and suggest an agent. */
+    globalTriageTicket: SupportTriageDecision;
+    /** Service-trusted internal grant of a first-party self-delegation, keyed by the app's client id. Lets a trusted backend record the consent created when a user adds a first-party integration, without the workspace-admin gate that the public grantDelegation enforces. Gated to internal service / super_admin callers and restricted to first-party system apps, or to service-managed apps for their managing service (BOFF-9962). */
     grantAppDelegationInternal: AppUserDelegation;
     /** Grant an app access to act on a specific workspace. Idempotent: re-granting an ACTIVE authorization updates its scopes; re-granting a REVOKED one flips it back to ACTIVE and clears the revoke fields. */
     grantAppWorkspaceAccess: AppWorkspaceAuthorization;
@@ -8788,15 +9189,22 @@ export type Mutation = {
     initiateNTLMChallenge: NtlmChallengeResult;
     /** Initiate a payment for credits, plans, or addons This creates a Stripe PaymentIntent or Razorpay Order with tax included Returns client secret (Stripe) or order ID (Razorpay) for frontend to complete payment */
     initiatePayment: InitiatePaymentResponse;
-    /** Install an application */
+    /** Install an application. For a workspace-private custom node, installing a newer version published to the organization over an active installation updates it (BOFF-9766); the previous version stays installed in the workspace so workflows pinned to it keep running, and uninstall removes every version. */
     installApp: AppInstallation;
-    /** Install a purchased app to a workspace. Validates that the product was purchased before allowing installation. If orderId is not provided, will find the most recent processed order for this product. version: optional specific version to install (e.g. "1.2.0"), resolved against the linked devportal Application's published/deprecated versions. Omit to install the product's current latest version (default behavior). */
+    /**
+     * Install a purchased app to a workspace.
+     * Validates that the product was purchased before allowing installation.
+     * If orderId is not provided, will find the most recent processed order for this product.
+     * version: optional specific version to install (e.g. "1.2.0"), resolved against
+     * the linked devportal Application's published/deprecated versions. Omit to
+     * install the product's current latest version (default behavior).
+     */
     installPurchasedApp: InstallPurchasedAppResult;
     /** Invite a user to join an organization */
     inviteDeveloperOrgMember: DeveloperOrgInvitationCreated;
     /** Invite a user to an organization by email */
     inviteOrganizationMember: OrganizationInvite;
-    /** Service-trusted internal mint of an app-as-user token for a named first-party app. Lets a trusted backend (e.g. wspace-integrations-svc) mint a token for a secret-less system app without holding client credentials. Gated to internal service / super_admin callers; still requires an ACTIVE AppUserDelegation for (clientId, targetUserId), so a user must have granted access first. */
+    /** Service-trusted internal mint of an app-as-user token for a named first-party app. Lets a trusted backend (e.g. wspace-integrations-svc) mint a token for a secret-less system app without holding client credentials. Gated to internal service / super_admin callers; still requires an ACTIVE AppUserDelegation for (clientId, targetUserId), so a user must have granted access first. A service-managed app (BOFF-9962) is minted only by its managing service, always bound to one workspace, for at most 15 minutes and never past the grant. */
     issueAppAsUserTokenInternal: AppAsUserTokenResponse;
     /** Public endpoint — no authentication required. Email is normalized (trimmed, lowercased). Must be protected by API gateway rate limiting (recommended: 5 req/min per IP). */
     joinWaitlist: NewsletterWaitlist;
@@ -8831,6 +9239,7 @@ export type Mutation = {
     mintSsoSession: AuthPayload;
     /** Moderate a review (admin) */
     moderateAppReview: AppReview;
+    moderateReview: ProductReview;
     /** Erase newsletter subscriber data. With dryRun=true returns counts. Subscriber + per-list rows + automation enrolments PURGED. Suppression entry ANONYMISED (email hashed) — kept to honour CAN-SPAM unsubscribe permanence. Bounce/complaint/consent-audit rows anonymised but retained for deliverability forensics. */
     newsletterEraseSubject: NewsletterEraseResult;
     /** Export the subject's newsletter data: subscriber rows, per-list memberships, consent ledger entries, automation enrolments, waitlist entries. */
@@ -8848,6 +9257,8 @@ export type Mutation = {
     payInvoice: Invoice;
     permanentlyDeleteSchedule: Scalars['Boolean']['output'];
     placeLegalHold: LegalHold;
+    /** Advance one asynchronous catalog build by a single poll (BOFF-9882). A catalog publish has no ApplicationVersion row, so nothing in this service polls its builds. Catalog CI keeps the `buildRef` of each pending outcome from publishCatalogNodeVersion and calls this until the status is terminal. For `ecr` each poll may move the build to its next stage (architecture builds, then the push); without these polls the image is never pushed. When an `ecr` build turns READY, the node's start-up snapshots are requested. Same authentication as publishCatalogNodeVersion: the shared callback secret, sent as an argument. Returns the outcome shape of publishCatalogNodeVersion ({ provider, status, image, error, reason, buildRef }), where `buildRef` is the handle to poll next. A failed status check returns PENDING with the same handle, so CI simply polls again. */
+    pollCatalogNodeBuild: Scalars['JSON']['output'];
     /** Internal-only: polls "Deploy Devportal Node" GitHub Actions run history and records the result in NodeSandboxBuildCheck — see services/nodeSandboxBuildPoll.ts. Invoked on a schedule by global-scheduler-svc's INTERNAL_API executor; also callable from the admin build-log UI for an on-demand refresh. Returns `skipped: true` (not an error) when NODE_SANDBOX_DISPATCH_TOKEN is unset OR the GitHub call itself fails (e.g. the token lacks Actions:read) — callers must check `skipped` rather than assume a non-error response means it actually polled. */
     pollNodeSandboxBuildChecks: NodeSandboxBuildPollResult;
     prepareSupportAttachmentUpload: SupportAttachmentUploadSession;
@@ -8864,6 +9275,8 @@ export type Mutation = {
     provisionDedicatedTenant: Tenant;
     /** Provision Free-tier WORKSPACE-scoped quota assignments for a specific workspace (BOFF-5656). Service-to-service only — called by wspace-layer services' workspace.created event consumers (Redis Streams do not cross the wspace/global layer network boundary, so the wspace-side consumer calls this mutation cross-layer instead of billing consuming the event directly). Reuses the org's existing (or lazily-created) default billing account and every active Free ($0, isActive) subscription on it. Idempotent — safe to call repeatedly for the same workspace. Never creates a Plan/Subscription for a product with no registered Free plan; such products are silently skipped, not errored. */
     provisionFreeTierForWorkspace: ProvisionFreeTierForWorkspaceResult;
+    /** Provision a service-managed app (BOFF-9962): an app a backend service owns for a principal of its own, such as a FluidGrids agent. The calling service becomes the app's manager and owner. The app has no usable client secret, so the only way to act as it is issueAppAsUserTokenInternal, by its managing service, for a user who granted it a delegation. Service actors only. */
+    provisionManagedAppInternal: App;
     /** Public unsubscribe via HMAC-signed token from email link. No authentication required. */
     publicUnsubscribeByToken: Scalars['Boolean']['output'];
     publishApplication: Application;
@@ -8871,7 +9284,9 @@ export type Mutation = {
     publishApplicationVersion: ApplicationVersion;
     /** Developer-organization admin action (BOFF-9657): publish a draft (or rejected) version of a PRIVATE NODE application straight to the workspaces of your organization, without platform review. The version must carry a package whose validation passed, a READY sandbox image and no failed or running operation smoke test. `workspaceId` is a workspace you administer; its organization becomes the node's owning organization on the first publish, and every later publish must come from that organization. The version is never listed in the public Node Store; it is installable only into workspaces of the owning organization. Authorization is enforced in the resolver: the caller must be an OWNER or ADMIN of the application's developer organization (or own a personal application) and an admin of `workspaceId`. The gateway's organization scope cannot evaluate this today because user sessions carry no verified organization claim, so the directive declares the permission and authenticates the caller. */
     publishApplicationVersionToOrganization: ApplicationVersion;
-    /** Publish ONE curated catalog node version (from the fluidgrids-nodes repo) to every enabled sandbox provider — the same PublishOrchestrator the devportal path uses, so the two cannot drift. That drift is not hypothetical: the catalog previously had no publish trigger at all, so nodes were built and pinned by hand and 14 of 31 prod-bound nodes ended up running code older than fluidgrids-nodes main. One entrypoint, two triggers (devportal publish, catalog CI) is the fix. NOT actor-authenticated: the caller is CI, not a platform user or app, so this verifies a shared secret in the resolver (checked against DEVPORTAL_CALLBACK_SECRET, or CALLBACK_SECRET as shipped by the Secrets Manager bundle) exactly as reportNodeSandboxBuildStatus does. Sent as an argument rather than a header because global-public-gateway forwards only a fixed header allowlist to subgraphs. `zipUrl` must be fetchable by this service — CI uploads the packaged node and passes a presigned URL. `isFirstPublish` tells the orchestrator whether this node type has ever been built before, which is what lets it annotate a provider that cannot self-onboard (Cloudflare) instead of reporting a mystery failure. Defaults to false: a catalog node already running on Cloudflare has a Durable Object class, so only a genuinely new node should pass true. Returns a JSON array of per-provider outcomes so CI can log them and fail the job when nothing could build. */
+    /** Apply a published catalog node version's manifest.json to the platform (BOFF-9458). Catalog CI calls this once a node version's image build is READY (and once per node for a backfill), sending the manifest.json it built from. The manifest is validated against nodeType@version, then global-store-svc refreshes the node contract inside the catalog publishers' Store listings of the node and the node's global registry row in wspace-workflow-svc. Nothing else is changed: other publishers' listings, install snapshots and DevPortal application versions stay as they are. Named publishCatalogNodeManifest, not sync…: global-store-svc owns the service-only Mutation.syncCatalogNodeManifest this forwards to, and both subgraphs share the global supergraph. Same authentication as publishCatalogNodeVersion: the shared callback secret, sent as an argument. Returns { ok, nodeType, version, errors?, error?, digest?, products?, registry? }; a validation failure or an unreachable store comes back with ok false rather than as a GraphQL error, so CI can report it per node. */
+    publishCatalogNodeManifest: Scalars['JSON']['output'];
+    /** Publish ONE curated catalog node version (from the fluidgrids-nodes repo) to every enabled sandbox provider — the same PublishOrchestrator the devportal path uses, so the two cannot drift. That drift is not hypothetical: the catalog previously had no publish trigger at all, so nodes were built and pinned by hand and 14 of 31 prod-bound nodes ended up running code older than fluidgrids-nodes main. One entrypoint, two triggers (devportal publish, catalog CI) is the fix. NOT actor-authenticated: the caller is CI, not a platform user or app, so this verifies a shared secret in the resolver (checked against DEVPORTAL_CALLBACK_SECRET, or CALLBACK_SECRET as shipped by the Secrets Manager bundle) exactly as reportNodeSandboxBuildStatus does. Sent as an argument rather than a header because global-public-gateway forwards only a fixed header allowlist to subgraphs. `zipUrl` must be fetchable by this service — CI uploads the packaged node and passes a presigned URL. `isFirstPublish` tells the orchestrator whether this node type has ever been built before, which is what lets it annotate a provider that cannot self-onboard (Cloudflare) instead of reporting a mystery failure. Defaults to false: a catalog node already running on Cloudflare has a Durable Object class, so only a genuinely new node should pass true. `providers` limits the publish to some of the providers the catalog rule enables (BOFF-9882). CI uses it to retry only a provider that an account limit turned away (reason BUILD_CONCURRENCY_LIMIT), without building the version a second time on the providers that already accepted it. Omitted, every enabled provider is published. A name the rule does not enable is reported as UNSUPPORTED and nothing is built for it. Returns a JSON array of per-provider outcomes so CI can log them and fail the job when nothing could build. */
     publishCatalogNodeVersion: Scalars['JSON']['output'];
     publishFAQ: Faq;
     publishKnowledgeBaseArticle: KnowledgeBaseArticle;
@@ -8910,6 +9325,8 @@ export type Mutation = {
     recordEarningEntry: EarningsEntry;
     /** Record that a visitor followed a link the answer offered. Fire-and-forget from the browser: a click must never be blocked or delayed by analytics, so this reports `recorded: false` rather than throwing when the click cannot be attributed. */
     recordExploreClick: RecordExploreClickResult;
+    /** Record a completed external refund without invoking a payment provider. */
+    recordExternalRefund: ExternalRefundResult;
     /** Record a SETTLED (or pending/failed) external/manual Charge + Transaction on behalf of a workspace/org by explicit id. Service/super_admin only — routed through the internal gateway. Bypasses the Stripe/Razorpay sync path. */
     recordExternalSettlement: ExternalSettlementResult;
     recordFAQView: Faq;
@@ -8918,6 +9335,8 @@ export type Mutation = {
     recordNotificationAction: Notification;
     /** Record the user's first visit to a product's app shell after login. - Idempotent on (userId, productSlug): subsequent calls return the same result with `isFirstVisit: false`. - On the first visit, fires a product-specific welcome email (best-effort — email failure does NOT fail the mutation). - Safe to call on every app-shell mount; the frontend hook should debounce per session. */
     recordProductVisit: RecordProductVisitResult;
+    /** Record a chargeback event (opened, won or lost) on a store order. Holds the publisher share while the dispute is open, releases it when won, and deducts the dispute fee when lost (Developer Agreement Section 6). */
+    recordPublisherChargeback: Array<PublisherChargeback>;
     /** Record a sale (usually called by store service) */
     recordSale: DeveloperOrgSale;
     /** Record user progress for a tour */
@@ -8926,12 +9345,27 @@ export type Mutation = {
     refreshApplicationVersionPackageUrl?: Maybe<Scalars['String']['output']>;
     /** Refresh OAuth tokens manually */
     refreshConnectionTokens: ChannelConnection;
+    /** Re-read the processor state of one of the calling user's payout methods. */
+    refreshMyPublisherPayoutOnboarding: PublisherPayoutOnboarding;
     refreshProductAssetUrl?: Maybe<Scalars['String']['output']>;
     refreshToken: AuthPayload;
     regenerateAffiliateCode: AffiliateCode;
     /** Register (or re-register) an approved application with global-auth-svc so it can issue OAuth clients, API keys, and delegations. Safe to call more than once — skips if appId is already set. */
     registerAppWithAuthService: Application;
-    /** Register a seller's real address as a new pickup/warehouse location on a carrier account (currently only "shiprocket" supports this), so it becomes a real, bookable pickup point instead of just an unregistered pincode a seller typed in. This is a real, permanent write to the carrier's account — not a local list we maintain; any address the carrier itself accepts is supported, we never hardcode which pincodes are valid. scopeType: "self" — same authenticated-actor bar as carrierPickupLocations. This doesn't touch a store-svc-owned resource with an ownership row to check against (it writes directly to the carrier account), so there's no org-ownership verification here — a known trust-boundary gap, same shape as flagOrderIssue's caller-supplied organizationId. */
+    /**
+     * Register a seller's real address as a new pickup/warehouse location on a
+     * carrier account (currently only "shiprocket" supports this), so it becomes
+     * a real, bookable pickup point instead of just an unregistered pincode a
+     * seller typed in. This is a real, permanent write to the carrier's account
+     * — not a local list we maintain; any address the carrier itself accepts is
+     * supported, we never hardcode which pincodes are valid.
+     *
+     * scopeType: "self" — same authenticated-actor bar as carrierPickupLocations.
+     * This doesn't touch a store-svc-owned resource with an ownership row to
+     * check against (it writes directly to the carrier account), so there's no
+     * org-ownership verification here — a known trust-boundary gap, same shape
+     * as flagOrderIssue's caller-supplied organizationId.
+     */
     registerCarrierPickupLocation: CarrierPickupLocation;
     /** Register (or refresh) a push-notification device token for the current user. Upserts on the OS-issued token — safe to call on every app launch and on every token-refresh event. `platform` is one of "ios", "android", "web". `productSlug` names the product whose install minted the token; the server derives the Firebase project from it, and an unmapped product is rejected outright rather than stored as an undeliverable row. `metadata` is optional free-form context (app version, OS version). Deliberately takes no `fcmProject` and no identity argument: the project is derived server-side so a client cannot file a device under a project that cannot reach it, and the owner is always the calling actor. */
     registerDeviceToken: DeviceToken;
@@ -8944,6 +9378,10 @@ export type Mutation = {
     registerSupportAttachmentPart: Scalars['Boolean']['output'];
     /** Creates or updates subject mappings for a product. Idempotent: a product's service can call it on every deploy. An existing mapping can only be changed by the actor that registered it, or by a super admin. */
     registerWebhookEventSubjects: Array<WebhookEventSubject>;
+    /** Register an outbound webhook endpoint for an owner */
+    registerWebhookSubscription: WebhookSubscription;
+    /** Reinstate a listing the store team took down, restoring its previous status. */
+    reinstateListing: StoreProduct;
     reinstatePublisher: Publisher;
     rejectApplication: Application;
     /** Platform admin only: reject a pending_review version with a reason. The developer can fix their submission and re-submit. */
@@ -8954,12 +9392,24 @@ export type Mutation = {
     /** Reject an organization invite (must be logged in as the invited user) */
     rejectOrganizationInvite: OrganizationInvite;
     rejectPayoutRequest: PayoutRequest;
-    /** Admin rejects a submitted product with a mandatory reason. Publisher can edit and resubmit afterwards. */
+    /**
+     * Admin rejects a submitted product with a mandatory reason. Publisher can
+     * edit and resubmit afterwards.
+     */
     rejectProduct: StoreProduct;
     rejectPublisher: Publisher;
+    /** Admin rejects a pending payout method with a reason the publisher can act on. */
+    rejectPublisherPayoutMethod: PublisherPayoutMethod;
     rejectReview: ProductReview;
     rejectWaitlist: NewsletterWaitlist;
+    /**
+     * Admin rejects a pending template revision with a reason the author sees. The
+     * live version stays listed unchanged.
+     */
+    rejectWorkflowTemplateRevision: WorkflowTemplateRevision;
     releaseLegalHold: LegalHold;
+    /** Release a payout held for a missing verified payout method or a chargeback rate above 1%, and request it on billing. */
+    releasePublisherPayoutHold: PublisherPayout;
     releaseSuppression: SuppressionEntry;
     removeAgentSkills: AgentProfile;
     /** Remove the license configuration for an application */
@@ -8977,6 +9427,8 @@ export type Mutation = {
     removeFromWishlist: Scalars['Boolean']['output'];
     /** Remove an interviewer from an interview round (admin). */
     removeInterviewerFromRound: Scalars['Boolean']['output'];
+    /** Close one of the calling user's own payout methods. */
+    removeMyPublisherPayoutMethod: Scalars['Boolean']['output'];
     /** Remove a member from an organization */
     removeOrganizationMember: Scalars['Boolean']['output'];
     /** Remove a passkey */
@@ -8998,7 +9450,7 @@ export type Mutation = {
     /** Revoke a previously-granted tenant-member row. Idempotent on the missing row (returns false). Cascade-removing the user's existing org/workspace memberships under the tenant is NOT performed here — those rows survive and would need to be removed separately if the intent is full ejection. (BOFF-2652) */
     removeTenantMember: Scalars['Boolean']['output'];
     removeTicketTags: SupportTicket;
-    /** Remove user's preference for a feature flag (reverts to default). RBAC is scoped to the target workspace. */
+    /** Remove the calling user's preference for a feature flag (reverts to default). Self-scoped: the row is keyed by the caller's user id and the resolver requires membership of `workspaceId`. */
     removeUserFeatureFlagPreference: Scalars['Boolean']['output'];
     /** Remove a visibility rule */
     removeVisibilityRule: Scalars['Boolean']['output'];
@@ -9020,10 +9472,10 @@ export type Mutation = {
     reorderTourSteps: Array<TourStep>;
     /** Replace the full set of tag bindings on an Application. */
     replaceApplicationTags: Array<ApplicationTagAssignment>;
-    replaceChannelConnectionTags: Array<ChannelConnectionTagAssignment>;
-    replaceChannelTags: Array<ChannelTagAssignment>;
     /** Replace all tags on a store product */
     replaceStoreProductTags: Array<StoreProductTagAssignment>;
+    /** Replay one dead-lettered provider webhook through the durable worker. */
+    replayBillingWebhook?: Maybe<BillingWebhookLog>;
     /** Send an email reply to a contact inquiry. The reply is sent via the notification pipeline (notification-svc → channel-svc → email provider). Auto-updates status to REVIEWED. */
     replyToContactInquiry: ContactInquiryReplyResult;
     /** Send a branded email reply to an applicant (admin). Delivered to the applicant's email via the notification pipeline. Does not change status — the admin controls status explicitly. `message` is rich-text HTML from the admin's editor; it is sanitized to an allowlist before it reaches the email. */
@@ -9031,8 +9483,11 @@ export type Mutation = {
     replyToReview: ProductReviewReply;
     /** Report a review */
     reportAppReview: AppReviewReport;
+    /** Report a listing to the store team. Reporting again updates your report. */
+    reportListing: ListingReport;
     /** Webhook callback from the tool-sandbox-cf-proxy "Deploy Devportal Node" CI pipeline (BOFF-5968) reporting the outcome of a NODE version's sandbox image build+deploy. Not developer-facing, and NOT actor-authenticated — the caller is CI, not a platform user/app, so this verifies a shared secret (the `secret` argument, checked against DEVPORTAL_CALLBACK_SECRET, or CALLBACK_SECRET as shipped by the Secrets Manager bundle) inside the resolver itself rather than going through the actor/RBAC system. Sent as a mutation argument rather than a header because global-public-gateway only forwards a fixed header allowlist to subgraphs and drops custom headers. Persists onto ApplicationVersion.metadata.sandboxBuildStatus (READY/FAILED), which is what gates "Test in Workflow" in the devportal UI. */
     reportNodeSandboxBuildStatus: Scalars['Boolean']['output'];
+    reportReview: ProductReviewReport;
     /** Reprocess a failed webhook event */
     reprocessWebhook: WebhookProcessingResult;
     requestBillingPayout: PayoutRequest;
@@ -9074,8 +9529,16 @@ export type Mutation = {
     resolveContextWidgetConversation: ContextWidgetConversationPayload;
     resolveDLQEntry: Scalars['Boolean']['output'];
     resolveInventoryAlert: InventoryAlert;
-    /** Mark a seller-reported issue flag resolved. Allowed for a super-admin (no organizationId needed) or the org that raised the flag (organizationId must match) — enforced in the resolver. */
+    /** Close an open listing report. */
+    resolveListingReport: ListingReport;
+    /**
+     * Mark a seller-reported issue flag resolved. Allowed for a super-admin (no
+     * organizationId needed) or the org that raised the flag (organizationId must
+     * match) — enforced in the resolver.
+     */
     resolveOrderIssueFlag: OrderIssueFlag;
+    /** Close a pending review report, optionally hiding the review. */
+    resolveReviewReport: GovernanceReviewReport;
     resolveSupportTicket: SupportTicket;
     /** Respond to a review (developer) */
     respondToAppReview: AppReview;
@@ -9093,6 +9556,8 @@ export type Mutation = {
     resumeDeveloperOrgSubscription: DeveloperOrgSubscription;
     resumeSLA: SupportTicket;
     resumeScheduledJob: ScheduledJob;
+    /** Retire a service-managed app (BOFF-9962): mark it REVOKED and withdraw every delegation it holds. Only its managing service may call it. Idempotent: returns false when the app was already retired. */
+    retireManagedAppInternal: Scalars['Boolean']['output'];
     /** Retire one push registration the transport has reported permanently dead. Called by global-channel-svc after a send fails with a code that means the token itself is gone: FCM's `UNREGISTERED`, or an `INVALID_ARGUMENT` whose message names the registration token. Without it the registry accumulates tokens no push can ever reach, and every later fan-out keeps paying for uninstalled apps. Keyed on the token — that is what the transport rejected, it is unique in this registry, and a service acting on a transport report has no calling actor to scope by. That is precisely why this is service-gated rather than `scopeType: "self"`. `errorCode` is recorded for traceability; the delivery side owns the policy of which codes are terminal (a routing or credential fault must never retire a device — retiring one hides the misconfiguration and destroys the evidence). Returns true if a registration was removed. */
     retirePushDeviceInternal: Scalars['Boolean']['output'];
     retireSubprocessor: Subprocessor;
@@ -9146,7 +9611,7 @@ export type Mutation = {
     rotateConnectionCredentials: ChannelConnection;
     /** Run health check on a channel */
     runChannelHealthCheck: ChannelHealthCheck;
-    /** Admin/service-initiated DSAR for an arbitrary subject (e.g. a support-filed or regulator-filed request, or a same-layer service driving the flow on a subject's behalf). Restricted to super_admin and service actors only — never reachable by a regular user for another person's data. */
+    /** Admin/service-initiated DSAR for an arbitrary subject (e.g. a support-filed or regulator-filed request, or a same-layer service driving the flow on a subject's behalf). Restricted to super_admin and service actors only — never reachable by a regular user for another person's data. `subjectEmail` is optional and additive: it lets the fan-out also reach records that are keyed by email only (e.g. a guest contact-inquiry or a newsletter signup with no account), such as `ContactInquiry`, `NewsletterWaitlist`, and `NewsletterSuppression`. Omit it for a subject who only has account-linked records. */
     runDsarRequestForSubject: DsarOrchestrationResult;
     runMonthlyPayouts: PayoutRunLog;
     /** Self-service DSAR: export or erase the CALLING actor's own data across every fan-out target. Self-scoped (Type-A pattern) — subjectId is always the calling actor's own id; there is no identity argument, so this can never be used to act on someone else's data. */
@@ -9162,7 +9627,7 @@ export type Mutation = {
     seedAtheleteBridgeUserTours: SeedAtheleteBridgeUserToursResult;
     /** Overwrite the service-owned BigConsole onboarding tours. Repeated calls update the same slugs. */
     seedBigconsoleUserTours: SeedBigconsoleUserToursResult;
-    /** Overwrite the built-in Buildmyiq user-facing dashboard tour from the service-owned seed file. */
+    /** Overwrite the built-in Buildmyiq user-facing tours (dashboard with the getting-started checklist, authoring, and my learning) from the service-owned seed file. */
     seedBuildmyiqUserTours: SeedBuildmyiqUserToursResult;
     /** Overwrite the built-in CollabKin user-facing dashboard tour from the service-owned seed file. */
     seedCollabkinUserTours: SeedCollabkinUserToursResult;
@@ -9174,8 +9639,14 @@ export type Mutation = {
     seedDefaultShortcuts: Scalars['Int']['output'];
     /** Overwrite the built-in FluidGrids user-facing workflow-builder tour from the service-owned seed file. */
     seedFluidgridsUserTours: SeedFluidgridsUserToursResult;
+    /** Overwrite the built-in HookMovies user-facing tours (overview with the getting-started checklist, catalog, productions and auditions) from the service-owned seed file. */
+    seedHookmoviesUserTours: SeedHookmoviesUserToursResult;
     /** Overwrite the built-in IntelWatchtower user-facing tours for the intelligence workflow. */
     seedIntelWatchtowerUserTours: SeedIntelWatchtowerUserToursResult;
+    /** Overwrite the built-in SemanticFed user-facing tours (first-login getting started, empty workspace, query console and policies) from the service-owned seed file. */
+    seedSemanticFedUserTours: SeedSemanticFedUserToursResult;
+    /** Overwrite the built-in Subscriber Bot user-facing tours (dashboard overview, adding a relationship and connecting a bank or card) from the service-owned seed file. */
+    seedSubscriberbotUserTours: SeedSubscriberbotUserToursResult;
     /** Overwrite the built-in TheCulturePost user-facing tours from the service-owned seed file. */
     seedTheCulturePostUserTours: SeedTheCulturePostUserToursResult;
     /** Overwrite the built-in VibeControls user-facing tours for Support, Notifications, and Conversations from the service-owned seed file. */
@@ -9188,8 +9659,6 @@ export type Mutation = {
     /** Send a message to a channel */
     sendMessage: MessageDeliveryResult;
     sendNewsletter: Newsletter;
-    /** Send a product-specific welcome email to a single recipient. Renders the per-product template (header logo, primary color, body, CTA, resource links) and delivers via EMAIL platform with failover. Idempotent on `idempotencyKey` if provided. */
-    sendProductWelcomeEmail: ChannelDeliveryResult;
     /** Send push MFA challenge to user's device */
     sendPushMFAChallenge: PushMfaChallengeResult;
     /** Send a message to the candidate for a specific round and mark it sent (admin). */
@@ -9198,13 +9667,25 @@ export type Mutation = {
     sendTestNewsletter: TestNewsletterResult;
     /** Record an EarningsEntry on behalf of an org/user by explicit billingAccountId. Service/super_admin only — internal gateway. */
     serviceRecordEarning: EarningsEntry;
+    /** Refund all or part of a payment on behalf of the service that charged it. Idempotent per sourceIdempotencyKey. Service/super_admin only. */
+    serviceRefundPayment: ServiceRefundPaymentResult;
     /** Request a payout drawn from a user's AVAILABLE earnings on an explicit billing account. Reserves matching earnings and creates a PayoutRequest that the existing approval/processing workflow drives to completion. Service/super_admin only — internal gateway. */
     serviceRequestPayout: PayoutRequest;
     /** Resolve (or create) a canonical default PayoutAccount for a publisher/org owner so a service caller can obtain a `payoutAccountId` for `serviceRequestPayout` without the user-only `addPayoutAccount` path. Idempotent / self-healing: repeated calls return the SAME account (no duplicates). Prefers an existing user-registered account; otherwise creates a placeholder that can be referenced but against which NO money moves until the user completes real payment setup. Service/super_admin only — internal gateway. */
     serviceResolvePayoutAccount: PayoutAccount;
+    /** Reverse an earnings entry (by the source key it was recorded with) whose source sale was refunded. Only an AVAILABLE entry (not reserved for, or paid by, a payout) is reversed; the outcome says what happened. Idempotent. Service/super_admin only — internal gateway. */
+    serviceReverseEarning: ServiceEarningReversal;
     /** Mirror a billing PayoutRequest status change back onto the DeveloperOrgPayout it originated from (BOFF-7192). Billing owns the payout system-of-record and is where admins approve/reject/mark-paid; this keeps devportal's own payout history in sync so it doesn't stay stuck showing a stale status forever. Looked up by sourceIdempotencyKey ("devportal:payout:<id>", set when the request was originally mirrored to billing) — a no-op if the key isn't a devportal-originated one, or no matching local payout exists. Service/super_admin only — internal gateway. */
     serviceSyncPayoutStatus?: Maybe<DeveloperOrgPayout>;
-    /** M2M: create or update the calling service's catalogue listing for an item that service sells through its own checkout (BOFF-3430), for cross-product discovery. Idempotent on (calling service identity, input.externalId): call it on every change of the source item. The owning service is always the verified service identity of the caller, never an input field. Set status ARCHIVED to take the listing down. A listing an admin has delisted or rejected stays off display until an admin restores it. Service-actor only. */
+    /**
+     * M2M: create or update the calling service's catalogue listing for an item that
+     * service sells through its own checkout (BOFF-3430), for cross-product
+     * discovery. Idempotent on (calling service identity, input.externalId): call it
+     * on every change of the source item. The owning service is always the verified
+     * service identity of the caller, never an input field. Set status ARCHIVED to
+     * take the listing down. A listing an admin has delisted or rejected stays off
+     * display until an admin restores it. Service-actor only.
+     */
     serviceUpsertExternalListing: StoreProduct;
     setAgentAway: AgentProfile;
     setAgentOffline: AgentProfile;
@@ -9226,11 +9707,21 @@ export type Mutation = {
     setNotificationTopicSubscription: NotificationTopicSubscription;
     /** Set default permission level for a role on a resource type */
     setRoleDefaultPermission: Role;
-    /** Set (or update) the shipping address + method for a store order (physical orders). The backend recomputes the AUTHORITATIVE shipping cost from the order's own line-item weights via the same quote engine as estimateOrderShipping — the client never supplies a cost. Verifies the address belongs to the order's buyer and freezes an immutable shippingSnapshot for delivery integrity. `StoreOrder.total` stays product-cost-only; the billing/checkout layer must add `shippingCost` to the payable amount. */
+    /**
+     * Set (or update) the shipping address + method for a store order (physical orders).
+     *
+     * The backend recomputes the AUTHORITATIVE shipping cost from the order's own
+     * line-item weights via the same quote engine as estimateOrderShipping — the
+     * client never supplies a cost. Verifies the address belongs to the order's buyer
+     * and freezes an immutable shippingSnapshot for delivery integrity.
+     *
+     * `StoreOrder.total` stays product-cost-only; the billing/checkout layer must add
+     * `shippingCost` to the payable amount.
+     */
     setStoreOrderShipping: StoreOrder;
     /** Set or update the endpoint URL for a DEDICATED tenant. Transitions PROVISIONING → ACTIVE when endpoint is set. */
     setTenantEndpoint: Tenant;
-    /** Set user's opt-in/out preference for a previewable feature flag. RBAC is scoped to the target workspace via `input.workspaceId`. */
+    /** Set the calling user's opt-in/out preference for a previewable feature flag. Self-scoped: the row is keyed by the caller's user id and the resolver requires membership of `input.workspaceId`. */
     setUserFeatureFlagPreference: UserFeatureFlagPreference;
     setUserLanguagePreference: UserLanguagePreference;
     /** Set workspace-level override for a feature flag (super admin or workspace admin). RBAC is scoped to the target workspace via `input.workspaceId`. */
@@ -9253,6 +9744,14 @@ export type Mutation = {
     spendCredits: SpendCreditResponse;
     /** Start a trial for an application */
     startAppTrial: AppInstallation;
+    /**
+     * Start automatic payout onboarding for one of the calling user's PENDING
+     * RAZORPAY_X or STRIPE_CONNECT payout methods: RazorpayX fund-account validation
+     * (penny drop) or Stripe Connect Express onboarding (open onboardingUrl). The
+     * method turns VERIFIED automatically once the processor confirms the account
+     * and the publisher has passed verification.
+     */
+    startMyPublisherPayoutOnboarding: PublisherPayoutOnboarding;
     startStagedRollout: ProductRelease;
     /** Mark a tour as started for a user */
     startTour: TourUserProgress;
@@ -9269,10 +9768,19 @@ export type Mutation = {
     submitInterviewFeedback: InterviewFeedback;
     /** Submit a job application from a public website (no authentication required). Validates reCAPTCHA, stores the resume in private storage, and notifies the applicant + careers inbox. */
     submitJobApplication: SubmitJobApplicationResult;
-    /** Submit a product to its target store for review. The store's requiresApproval flag decides whether the product goes to PENDING_REVIEW or is auto-published. */
+    /**
+     * Submit a product to its target store for review. The store's
+     * requiresApproval flag decides whether the product goes to PENDING_REVIEW
+     * or is auto-published.
+     */
     submitProduct: StoreProduct;
     submitPublisherVerification: Publisher;
     submitSatisfactionSurvey: CustomerSatisfactionSurvey;
+    /**
+     * Publish a workflow as a community template (or resubmit one of yours after a
+     * rejection). The template is reviewed by a store admin before it is listed.
+     */
+    submitWorkflowTemplate: WorkflowTemplateSubmission;
     /** Public endpoint — no authentication required for website newsletter signup. Email is normalized (trimmed, lowercased) and validated in the provider. Protected by rate limiting (5 req/min per IP) and optional reCAPTCHA at the resolver. */
     subscribe: NewsletterSubscriber;
     subscribeToStore: UserStoreSubscription;
@@ -9291,6 +9799,17 @@ export type Mutation = {
     suspendTenant: Tenant;
     /** Suspend a workspace */
     suspendWorkspace: Workspace;
+    /**
+     * M2M (BOFF-9458): apply a published catalog node version's manifest.json. Replaces the node
+     * contract (operations, inputs, outputs, adapters, endpoint) inside every active Store listing of
+     * that node owned by a catalog publisher, then refreshes the node's global registry row in
+     * wspace-workflow-svc. Listings of other publishers, other node versions and install snapshots
+     * are never changed. Idempotent. Only global-devportal-svc may call it: catalog CI reaches it
+     * through devportal's callback-secret mutation.
+     */
+    syncCatalogNodeManifest: SyncCatalogNodeManifestResult;
+    /** Apply one batch of HR-system workers to a workspace with the same outcomes SCIM provisioning produces (BOFF-10564). Internal: only the integrations service's Workday and SAP SuccessFactors connectors may call it, after a workspace administrator configured the connector. */
+    syncDirectoryWorkersInternal: DirectorySyncResult;
     /** Called by global-store-svc (service actor only) when a product submission is approved or rejected. Updates the Application reviewStatus + metadata and fires applicationStoreStatusChanged subscription. */
     syncStoreSubmissionStatus: Scalars['Boolean']['output'];
     /** Sync tour steps (smart update in ONE call) Send all desired steps, backend handles: update existing, create new, delete removed */
@@ -9299,10 +9818,13 @@ export type Mutation = {
     syncWorkspaceDeletionFromWspace: SyncWorkspaceFromWspaceResponse;
     /** Sync workspace metadata from workspace layer to global layer. Called by wspace-workspace-svc when a workspace is created directly via workspace layer. This is the reverse of syncFromGlobal - it syncs global ← wspace. Creates workspace metadata + owner membership in global-tenant-svc. */
     syncWorkspaceFromWspace: SyncWorkspaceFromWspaceResponse;
-    tagChannel: ChannelTagAssignment;
-    tagChannelConnection: ChannelConnectionTagAssignment;
     /** Assign a tag to a store product */
     tagStoreProduct: StoreProductTagAssignment;
+    /**
+     * Take a listing down: it leaves the store immediately (existing installs keep
+     * working) and the publisher sees the category and reason and may appeal.
+     */
+    takedownListing: StoreProduct;
     /** Test connection health */
     testConnectionHealth: ConnectionTestResult;
     /** Test LDAP connection */
@@ -9310,6 +9832,8 @@ export type Mutation = {
     /** Test RADIUS connection */
     testRADIUSConnection: Scalars['Boolean']['output'];
     testWebhook: WebhookTestResult;
+    /** Send a synthetic test event to a webhook subscription and report the result */
+    testWebhookSubscription: WebhookDispatchResult;
     toggleAddOn: Scalars['Boolean']['output'];
     /** Toggle the featured state of a store product (admin) */
     toggleFeatured: Scalars['Boolean']['output'];
@@ -9352,8 +9876,6 @@ export type Mutation = {
     unshareWorkflow: Application;
     unsubscribe: Scalars['Boolean']['output'];
     unsubscribeFromStore: Scalars['Boolean']['output'];
-    untagChannel: Scalars['Boolean']['output'];
-    untagChannelConnection: Scalars['Boolean']['output'];
     /** Remove a tag from a store product */
     untagStoreProduct: Scalars['Boolean']['output'];
     updateAPIKey: ApiKey;
@@ -9478,8 +10000,6 @@ export type Mutation = {
     updatePromotion: Promotion;
     updatePublisher: Publisher;
     updateQuota: Scalars['Boolean']['output'];
-    /** Update RBAC configuration for a scope */
-    updateRbacConfig: RbacConfig;
     updateRecurringBillingPlan: RecurringBillingPlan;
     /** Update a registered resource */
     updateResource: Resource;
@@ -9493,7 +10013,11 @@ export type Mutation = {
     updateShippingAddress: ShippingAddress;
     updateShippingMethod: ShippingMethod;
     updateStore: Store;
-    /** Update order payment status (called by billing service callback) This is a PUBLIC mutation called by the billing service after payment completion */
+    /**
+     * Update order payment status (called by billing service callback)
+     *
+     * This is a PUBLIC mutation called by the billing service after payment completion
+     */
     updateStoreOrderPaymentStatus: UpdateStoreOrderPaymentStatusResponse;
     updateSubprocessor: Subprocessor;
     updateSubscriber: NewsletterSubscriber;
@@ -9530,6 +10054,8 @@ export type Mutation = {
     updateUserPlatformConnectionNotifications: UserPlatformConnection;
     updateVariantStats: NewsletterVariant;
     updateWebhook: Webhook;
+    /** Update a webhook subscription (URL, secret, events, enabled, description) */
+    updateWebhookSubscription: WebhookSubscription;
     /** Update an existing workspace */
     updateWorkspace: Workspace;
     /** Update a workspace member's role */
@@ -9548,7 +10074,13 @@ export type Mutation = {
     /** Upsert a platform connection from a passively-observed webhook event (source = SEEN). Used by WebhookProcessor to track users without granting DM access. */
     upsertSeenUser: UserPlatformConnection;
     upsertSourcingOffer: SourcingOffer;
-    /** M2M: create or update a ShippingAddress for an EXPLICIT user, on behalf of a calling service. Product backends (e.g. Kadaikodi) call this through the INTERNAL gateway so a user's address lives in the canonical store owner rather than a per-product copy. Pass `input.id` to update an existing row (must belong to `input.userId`); omit it to create. Service-actor only. */
+    /**
+     * M2M: create or update a ShippingAddress for an EXPLICIT user, on behalf of a
+     * calling service. Product backends (e.g. Kadaikodi) call this through the
+     * INTERNAL gateway so a user's address lives in the canonical store owner rather
+     * than a per-product copy. Pass `input.id` to update an existing row (must belong
+     * to `input.userId`); omit it to create. Service-actor only.
+     */
     upsertUserShippingAddress: ShippingAddress;
     useCannedResponse: CannedResponse;
     /** Validate an HMAC signature */
@@ -9568,6 +10100,7 @@ export type Mutation = {
     verifyPasskeyRegistration: PasskeyRegistrationResult;
     /** Verify a payment method (micro-deposits) */
     verifyPaymentMethod: DeveloperOrgPaymentMethod;
+    /** Admin verifies a pending payout method once the processor account is confirmed. externalAccountId is required unless the publisher already supplied one. Methods onboarded through startMyPublisherPayoutOnboarding are verified automatically; this is the manual fallback. */
     verifyPublisherPayoutMethod: PublisherPayoutMethod;
     /** Verify a WhatsApp pairing code entered by the user in the dashboard. Called by wspace-integrations-svc during its CUSTOM auth step. Looks up the UserPlatformConnection (source=SEEN) for the channel + phone number, checks the pairing code matches and has not expired, then: - Sets pairingStatus = APPROVED - Sets dmAllowed = true - Sets dmConversationId to the WhatsApp JID format Returns true on success, throws on failure. */
     verifyWhatsAppPairingCode: Scalars['Boolean']['output'];
@@ -9575,7 +10108,18 @@ export type Mutation = {
     voidInvoice: Invoice;
     /** Vote on a review (helpful/not helpful) */
     voteOnAppReview: AppReviewVote;
+    voteOnReview: ProductReviewVote;
     withdrawConsent: ConsentRecord;
+    /**
+     * Withdraw the pending (or rejected) new version of one of your published
+     * templates. The live version is not affected. Takes the template's product id.
+     */
+    withdrawWorkflowTemplateRevision: WorkflowTemplateSubmission;
+    /**
+     * Withdraw one of your templates. A published template is taken off the store
+     * first; anything not live is deleted.
+     */
+    withdrawWorkflowTemplateSubmission: WithdrawWorkflowTemplateSubmissionResult;
 };
 /** Root mutation type */
 export type MutationAcceptDeveloperOrgInvitationArgs = {
@@ -9587,6 +10131,10 @@ export type MutationAcceptOrganizationInviteArgs = {
     recaptchaToken?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root mutation type */
+export type MutationAcceptPublisherDeveloperAgreementArgs = {
+    version: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationAcceptSourcingOfferArgs = {
     offerId: Scalars['ID']['input'];
 };
@@ -9657,6 +10205,10 @@ export type MutationAddDeveloperOrgPaymentMethodArgs = {
     organizationId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationAddMyPublisherPayoutMethodArgs = {
+    input: AddMyPublisherPayoutMethodInput;
+};
+/** Root mutation type */
 export type MutationAddOrderTrackingEventArgs = {
     input: AddFulfillmentTrackingEventInput;
 };
@@ -9802,6 +10354,11 @@ export type MutationApproveWaitlistArgs = {
     input: ApproveWaitlistInput;
 };
 /** Root mutation type */
+export type MutationApproveWorkflowTemplateRevisionArgs = {
+    id: Scalars['ID']['input'];
+    notes?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationArchiveBillingAccountArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -9888,10 +10445,12 @@ export type MutationAttachMediaToStepArgs = {
 /** Root mutation type */
 export type MutationAuthEraseSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
 export type MutationAuthExportSubjectArgs = {
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -10599,10 +11158,6 @@ export type MutationCreateSupportTicketArgs = {
     input: CreateSupportTicketInput;
 };
 /** Root mutation type */
-export type MutationCreateTagArgs = {
-    input: CreateTagInput;
-};
-/** Root mutation type */
 export type MutationCreateTaxRateArgs = {
     active?: InputMaybe<Scalars['Boolean']['input']>;
     country: Scalars['String']['input'];
@@ -10726,6 +11281,10 @@ export type MutationDeactivateWebhookEventSubjectArgs = {
     subject: Scalars['String']['input'];
 };
 /** Root mutation type */
+export type MutationDecideGovernanceAppealArgs = {
+    input: DecideGovernanceAppealInput;
+};
+/** Root mutation type */
 export type MutationDecrementQuotaArgs = {
     amount: Scalars['Int']['input'];
     billingAccountId: Scalars['ID']['input'];
@@ -11015,10 +11574,6 @@ export type MutationDeleteSupportTicketArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
-export type MutationDeleteTagArgs = {
-    id: Scalars['ID']['input'];
-};
-/** Root mutation type */
 export type MutationDeleteTaxRateArgs = {
     id: Scalars['ID']['input'];
 };
@@ -11085,6 +11640,10 @@ export type MutationDeleteWebhookArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationDeleteWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationDelistProductArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -11144,6 +11703,10 @@ export type MutationDismissTourArgs = {
     userId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationDispatchWebhookEventArgs = {
+    input: DispatchWebhookEventInput;
+};
+/** Root mutation type */
 export type MutationDuplicateNewsletterArgs = {
     id: Scalars['ID']['input'];
     newSlug: Scalars['String']['input'];
@@ -11190,6 +11753,7 @@ export type MutationEnsureStoreOrderBillingOrderArgs = {
 /** Root mutation type */
 export type MutationEraseSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -11255,6 +11819,7 @@ export type MutationExportRevenueArgs = {
 };
 /** Root mutation type */
 export type MutationExportSubjectArgs = {
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -11273,10 +11838,19 @@ export type MutationFeatureAppReviewArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationFeatureReviewArgs = {
+    featured: Scalars['Boolean']['input'];
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationFileDsarArgs = {
     input: FileDsarInput;
 };
 /** Root mutation type */
+export type MutationFileGovernanceAppealArgs = {
+    input: FileGovernanceAppealInput;
+};
+/** Root mutation type */
 export type MutationFlagOrderIssueArgs = {
     category: OrderIssueCategory;
     note?: InputMaybe<Scalars['String']['input']>;
@@ -11352,6 +11926,23 @@ export type MutationGetSupportAttachmentPartUploadUrlsArgs = {
     ticketId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationGlobalDiscardTicketReplyDraftArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
+export type MutationGlobalDraftTicketReplyArgs = {
+    ticketId: Scalars['ID']['input'];
+};
+/** Root mutation type */
+export type MutationGlobalSendTicketReplyDraftArgs = {
+    id: Scalars['ID']['input'];
+    message?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
+export type MutationGlobalTriageTicketArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationGrantAppDelegationInternalArgs = {
     input: GrantAppDelegationInternalInput;
 };
@@ -11533,6 +12124,13 @@ export type MutationModerateAppReviewArgs = {
     status: AppReviewStatus;
 };
 /** Root mutation type */
+export type MutationModerateReviewArgs = {
+    id: Scalars['ID']['input'];
+    note?: InputMaybe<Scalars['String']['input']>;
+    rejectionReason?: InputMaybe<Scalars['String']['input']>;
+    status: ReviewStatus;
+};
+/** Root mutation type */
 export type MutationNewsletterEraseSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
     subjectId: Scalars['ID']['input'];
@@ -11584,11 +12182,19 @@ export type MutationPlaceLegalHoldArgs = {
     input: PlaceLegalHoldInput;
 };
 /** Root mutation type */
-export type MutationPrepareSupportAttachmentUploadArgs = {
-    input: PrepareSupportAttachmentUploadInput;
-};
-/** Root mutation type */
-export type MutationProcessAppSaleRefundArgs = {
+export type MutationPollCatalogNodeBuildArgs = {
+    buildRef: Scalars['String']['input'];
+    nodeType: Scalars['String']['input'];
+    provider: Scalars['String']['input'];
+    secret: Scalars['String']['input'];
+    version: Scalars['String']['input'];
+};
+/** Root mutation type */
+export type MutationPrepareSupportAttachmentUploadArgs = {
+    input: PrepareSupportAttachmentUploadInput;
+};
+/** Root mutation type */
+export type MutationProcessAppSaleRefundArgs = {
     amount?: InputMaybe<Scalars['Float']['input']>;
     reason: Scalars['String']['input'];
     saleId: Scalars['ID']['input'];
@@ -11620,6 +12226,10 @@ export type MutationProvisionFreeTierForWorkspaceArgs = {
     workspaceId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationProvisionManagedAppInternalArgs = {
+    input: ProvisionManagedAppInternalInput;
+};
+/** Root mutation type */
 export type MutationPublicUnsubscribeByTokenArgs = {
     token: Scalars['String']['input'];
 };
@@ -11637,9 +12247,17 @@ export type MutationPublishApplicationVersionToOrganizationArgs = {
     workspaceId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationPublishCatalogNodeManifestArgs = {
+    manifest: Scalars['JSON']['input'];
+    nodeType: Scalars['String']['input'];
+    secret: Scalars['String']['input'];
+    version: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationPublishCatalogNodeVersionArgs = {
     isFirstPublish?: InputMaybe<Scalars['Boolean']['input']>;
     nodeType: Scalars['String']['input'];
+    providers?: InputMaybe<Array<Scalars['String']['input']>>;
     secret: Scalars['String']['input'];
     version: Scalars['String']['input'];
     zipUrl: Scalars['String']['input'];
@@ -11768,6 +12386,10 @@ export type MutationRecordExploreClickArgs = {
     input: RecordExploreClickInput;
 };
 /** Root mutation type */
+export type MutationRecordExternalRefundArgs = {
+    input: RecordExternalRefundInput;
+};
+/** Root mutation type */
 export type MutationRecordExternalSettlementArgs = {
     input: RecordExternalSettlementInput;
 };
@@ -11788,6 +12410,10 @@ export type MutationRecordProductVisitArgs = {
     input: RecordProductVisitInput;
 };
 /** Root mutation type */
+export type MutationRecordPublisherChargebackArgs = {
+    input: RecordPublisherChargebackInput;
+};
+/** Root mutation type */
 export type MutationRecordSaleArgs = {
     input: RecordSaleInput;
 };
@@ -11804,6 +12430,10 @@ export type MutationRefreshConnectionTokensArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRefreshMyPublisherPayoutOnboardingArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationRefreshProductAssetUrlArgs = {
     assetId: Scalars['ID']['input'];
     expiresInSeconds?: InputMaybe<Scalars['Int']['input']>;
@@ -11859,6 +12489,15 @@ export type MutationRegisterWebhookEventSubjectsArgs = {
     input: RegisterWebhookEventSubjectsInput;
 };
 /** Root mutation type */
+export type MutationRegisterWebhookSubscriptionArgs = {
+    input: RegisterWebhookSubscriptionInput;
+};
+/** Root mutation type */
+export type MutationReinstateListingArgs = {
+    note?: InputMaybe<Scalars['String']['input']>;
+    productId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationReinstatePublisherArgs = {
     id: Scalars['ID']['input'];
 };
@@ -11902,6 +12541,11 @@ export type MutationRejectPublisherArgs = {
     reason: Scalars['String']['input'];
 };
 /** Root mutation type */
+export type MutationRejectPublisherPayoutMethodArgs = {
+    id: Scalars['ID']['input'];
+    reason: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationRejectReviewArgs = {
     id: Scalars['ID']['input'];
 };
@@ -11910,10 +12554,19 @@ export type MutationRejectWaitlistArgs = {
     input: RejectWaitlistInput;
 };
 /** Root mutation type */
+export type MutationRejectWorkflowTemplateRevisionArgs = {
+    id: Scalars['ID']['input'];
+    reason: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationReleaseLegalHoldArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationReleasePublisherPayoutHoldArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationReleaseSuppressionArgs = {
     input: ReleaseSuppressionInput;
 };
@@ -11957,6 +12610,10 @@ export type MutationRemoveInterviewerFromRoundArgs = {
     roundId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRemoveMyPublisherPayoutMethodArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationRemoveOrganizationMemberArgs = {
     organizationId: Scalars['String']['input'];
     userId: Scalars['String']['input'];
@@ -12069,18 +12726,14 @@ export type MutationReplaceApplicationTagsArgs = {
     input: ReplaceApplicationTagsInput;
 };
 /** Root mutation type */
-export type MutationReplaceChannelConnectionTagsArgs = {
-    input: ReplaceChannelConnectionTagsInput;
-};
-/** Root mutation type */
-export type MutationReplaceChannelTagsArgs = {
-    input: ReplaceChannelTagsInput;
-};
-/** Root mutation type */
 export type MutationReplaceStoreProductTagsArgs = {
     input: ReplaceStoreProductTagsInput;
 };
 /** Root mutation type */
+export type MutationReplayBillingWebhookArgs = {
+    logId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationReplyToContactInquiryArgs = {
     id: Scalars['ID']['input'];
     message: Scalars['String']['input'];
@@ -12101,6 +12754,10 @@ export type MutationReportAppReviewArgs = {
     reviewId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationReportListingArgs = {
+    input: ReportListingInput;
+};
+/** Root mutation type */
 export type MutationReportNodeSandboxBuildStatusArgs = {
     applicationVersionId: Scalars['ID']['input'];
     error?: InputMaybe<Scalars['String']['input']>;
@@ -12109,6 +12766,12 @@ export type MutationReportNodeSandboxBuildStatusArgs = {
     status: Scalars['String']['input'];
 };
 /** Root mutation type */
+export type MutationReportReviewArgs = {
+    details?: InputMaybe<Scalars['String']['input']>;
+    reason: Scalars['String']['input'];
+    reviewId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationReprocessWebhookArgs = {
     eventId: Scalars['ID']['input'];
 };
@@ -12221,11 +12884,19 @@ export type MutationResolveInventoryAlertArgs = {
     alertId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationResolveListingReportArgs = {
+    input: ResolveListingReportInput;
+};
+/** Root mutation type */
 export type MutationResolveOrderIssueFlagArgs = {
     id: Scalars['ID']['input'];
     organizationId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Root mutation type */
+export type MutationResolveReviewReportArgs = {
+    input: ResolveReviewReportInput;
+};
+/** Root mutation type */
 export type MutationResolveSupportTicketArgs = {
     id: Scalars['ID']['input'];
     resolution?: InputMaybe<Scalars['String']['input']>;
@@ -12276,6 +12947,11 @@ export type MutationResumeScheduledJobArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRetireManagedAppInternalArgs = {
+    clientId: Scalars['String']['input'];
+    reason?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationRetirePushDeviceInternalArgs = {
     errorCode: Scalars['String']['input'];
     token: Scalars['String']['input'];
@@ -12422,6 +13098,7 @@ export type MutationRunChannelHealthCheckArgs = {
 export type MutationRunDsarRequestForSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
     mode: DsarMode;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -12482,10 +13159,6 @@ export type MutationSendNewsletterArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
-export type MutationSendProductWelcomeEmailArgs = {
-    input: ProductWelcomeEmailInput;
-};
-/** Root mutation type */
 export type MutationSendPushMfaChallengeArgs = {
     deviceId?: InputMaybe<Scalars['String']['input']>;
 };
@@ -12507,6 +13180,10 @@ export type MutationServiceRecordEarningArgs = {
     input: ServiceRecordEarningInput;
 };
 /** Root mutation type */
+export type MutationServiceRefundPaymentArgs = {
+    input: ServiceRefundPaymentInput;
+};
+/** Root mutation type */
 export type MutationServiceRequestPayoutArgs = {
     input: ServiceRequestPayoutInput;
 };
@@ -12515,6 +13192,10 @@ export type MutationServiceResolvePayoutAccountArgs = {
     input: ServiceResolvePayoutAccountInput;
 };
 /** Root mutation type */
+export type MutationServiceReverseEarningArgs = {
+    input: ServiceReverseEarningInput;
+};
+/** Root mutation type */
 export type MutationServiceSyncPayoutStatusArgs = {
     input: ServiceSyncPayoutStatusInput;
 };
@@ -12646,6 +13327,11 @@ export type MutationStartAppTrialArgs = {
     installationId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationStartMyPublisherPayoutOnboardingArgs = {
+    id: Scalars['ID']['input'];
+    input: StartMyPublisherPayoutOnboardingInput;
+};
+/** Root mutation type */
 export type MutationStartStagedRolloutArgs = {
     initialPercentage?: InputMaybe<Scalars['Int']['input']>;
     releaseId: Scalars['ID']['input'];
@@ -12700,6 +13386,10 @@ export type MutationSubmitSatisfactionSurveyArgs = {
     input: SubmitSatisfactionSurveyInput;
 };
 /** Root mutation type */
+export type MutationSubmitWorkflowTemplateArgs = {
+    input: SubmitWorkflowTemplateInput;
+};
+/** Root mutation type */
 export type MutationSubscribeArgs = {
     input: SubscribeInput;
 };
@@ -12710,10 +13400,12 @@ export type MutationSubscribeToStoreArgs = {
 /** Root mutation type */
 export type MutationSupportEraseSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
 export type MutationSupportExportSubjectArgs = {
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -12748,6 +13440,15 @@ export type MutationSuspendWorkspaceArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationSyncCatalogNodeManifestArgs = {
+    input: SyncCatalogNodeManifestInput;
+};
+/** Root mutation type */
+export type MutationSyncDirectoryWorkersInternalArgs = {
+    input: DirectorySyncInput;
+    workspaceId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationSyncStoreSubmissionStatusArgs = {
     input: SyncStoreSubmissionInput;
 };
@@ -12765,18 +13466,14 @@ export type MutationSyncWorkspaceFromWspaceArgs = {
     input: SyncWorkspaceFromWspaceInput;
 };
 /** Root mutation type */
-export type MutationTagChannelArgs = {
-    input: TagChannelInput;
-};
-/** Root mutation type */
-export type MutationTagChannelConnectionArgs = {
-    input: TagChannelConnectionInput;
-};
-/** Root mutation type */
 export type MutationTagStoreProductArgs = {
     input: TagStoreProductInput;
 };
 /** Root mutation type */
+export type MutationTakedownListingArgs = {
+    input: TakedownListingInput;
+};
+/** Root mutation type */
 export type MutationTestConnectionHealthArgs = {
     id: Scalars['ID']['input'];
 };
@@ -12794,6 +13491,10 @@ export type MutationTestWebhookArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationTestWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationToggleAddOnArgs = {
     id: Scalars['ID']['input'];
     status: Scalars['Boolean']['input'];
@@ -12911,14 +13612,6 @@ export type MutationUnsubscribeFromStoreArgs = {
     storeId: Scalars['ID']['input'];
 };
 /** Root mutation type */
-export type MutationUntagChannelArgs = {
-    input: UntagChannelInput;
-};
-/** Root mutation type */
-export type MutationUntagChannelConnectionArgs = {
-    input: UntagChannelConnectionInput;
-};
-/** Root mutation type */
 export type MutationUntagStoreProductArgs = {
     input: UntagStoreProductInput;
 };
@@ -13306,10 +13999,6 @@ export type MutationUpdateQuotaArgs = {
     input: UpdateQuotaInput;
 };
 /** Root mutation type */
-export type MutationUpdateRbacConfigArgs = {
-    input: UpdateRbacConfigInput;
-};
-/** Root mutation type */
 export type MutationUpdateRecurringBillingPlanArgs = {
     input: UpdateRecurringBillingInput;
 };
@@ -13501,6 +14190,11 @@ export type MutationUpdateWebhookArgs = {
     input: UpdateWebhookInput;
 };
 /** Root mutation type */
+export type MutationUpdateWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+    input: UpdateWebhookSubscriptionInput;
+};
+/** Root mutation type */
 export type MutationUpdateWorkspaceArgs = {
     id: Scalars['ID']['input'];
     input: UpdateWorkspaceInput;
@@ -13613,6 +14307,7 @@ export type MutationVerifyPaymentMethodArgs = {
 };
 /** Root mutation type */
 export type MutationVerifyPublisherPayoutMethodArgs = {
+    externalAccountId?: InputMaybe<Scalars['String']['input']>;
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -13632,9 +14327,22 @@ export type MutationVoteOnAppReviewArgs = {
     reviewId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationVoteOnReviewArgs = {
+    isHelpful: Scalars['Boolean']['input'];
+    reviewId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationWithdrawConsentArgs = {
     input: WithdrawConsentInput;
 };
+/** Root mutation type */
+export type MutationWithdrawWorkflowTemplateRevisionArgs = {
+    productId: Scalars['ID']['input'];
+};
+/** Root mutation type */
+export type MutationWithdrawWorkflowTemplateSubmissionArgs = {
+    id: Scalars['ID']['input'];
+};
 /** Filter inputs for `myContactInquiries`. Search and email-filter are deliberately not exposed — the query is already scoped to the caller's email, so a full-text search across `name`/`subject` would only surface inquiries the caller already owns. */
 export type MyContactInquiryFilterInput = {
     /** Filter by inquiry category (exact match against the stored string). */
@@ -14522,7 +15230,10 @@ export type OrderEstimateInput = {
 /** Order fulfillment tracking for physical orders */
 export type OrderFulfillment = {
     __typename?: 'OrderFulfillment';
-    /** Carrier shipment-creation attempt history (every retry, not just the last failure) — for admin debugging of "what happened, why, and how to fix it". */
+    /**
+     * Carrier shipment-creation attempt history (every retry, not just the last
+     * failure) — for admin debugging of "what happened, why, and how to fix it".
+     */
     attempts: Array<OrderFulfillmentAttempt>;
     /** When order was cancelled */
     cancelledAt?: Maybe<Scalars['DateTime']['output']>;
@@ -14584,7 +15295,11 @@ export type OrderFulfillment = {
     trackingUrl?: Maybe<Scalars['String']['output']>;
     updatedAt: Scalars['DateTime']['output'];
 };
-/** One carrier shipment-creation attempt — Temporal retries this up to 5 times; this is the full history behind OrderFulfillment.failureReason (which only ever holds the last attempt's message). */
+/**
+ * One carrier shipment-creation attempt — Temporal retries this up to 5 times;
+ * this is the full history behind OrderFulfillment.failureReason (which only
+ * ever holds the last attempt's message).
+ */
 export type OrderFulfillmentAttempt = {
     __typename?: 'OrderFulfillmentAttempt';
     attemptNumber: Scalars['Int']['output'];
@@ -14611,7 +15326,11 @@ export declare enum OrderIssueCategory {
     OutOfStock = "OUT_OF_STOCK",
     WrongAddress = "WRONG_ADDRESS"
 }
-/** A seller-reported problem fulfilling a physical order (e.g. out of stock, cannot fulfill, wrong address). Raised by the org that owns the physical line item(s) on the order; resolvable by admin or the org that raised it. */
+/**
+ * A seller-reported problem fulfilling a physical order (e.g. out of stock,
+ * cannot fulfill, wrong address). Raised by the org that owns the physical
+ * line item(s) on the order; resolvable by admin or the org that raised it.
+ */
 export type OrderIssueFlag = {
     __typename?: 'OrderIssueFlag';
     category: OrderIssueCategory;
@@ -14816,6 +15535,41 @@ export type OrganizationMemberList = {
     offset: Scalars['Int']['output'];
     total: Scalars['Int']['output'];
 };
+/** A workspace-private custom node of a workspace's organization (BOFF-9766). */
+export type OrganizationPrivateNode = {
+    __typename?: 'OrganizationPrivateNode';
+    applicationId: Scalars['ID']['output'];
+    iconUrl?: Maybe<Scalars['String']['output']>;
+    /** This workspace's active installation. Pass it to uninstallApp to remove the node. */
+    installationId?: Maybe<Scalars['ID']['output']>;
+    /** True when this workspace has an active installation of the node. */
+    installed: Scalars['Boolean']['output'];
+    /** The version this workspace has installed, when installed. */
+    installedVersion?: Maybe<Scalars['String']['output']>;
+    name: Scalars['String']['output'];
+    /** Workflow node type from the version's manifest, e.g. custom/word_counter. */
+    nodeType?: Maybe<Scalars['String']['output']>;
+    nodeVersion?: Maybe<Scalars['String']['output']>;
+    publishedAt?: Maybe<Scalars['DateTime']['output']>;
+    shortDescription?: Maybe<Scalars['String']['output']>;
+    slug: Scalars['String']['output'];
+    /** Installed, and the organization has since published a newer version. */
+    updateAvailable: Scalars['Boolean']['output'];
+    /** Latest version published to the organization. Pass it to installApp. */
+    version: Scalars['String']['output'];
+    /** Id of the latest version published to the organization. */
+    versionId: Scalars['ID']['output'];
+};
+/** The private custom nodes a workspace's organization has published, as seen from one workspace (BOFF-9766). */
+export type OrganizationPrivateNodeListing = {
+    __typename?: 'OrganizationPrivateNodeListing';
+    /** True when the caller administers the workspace and so may install or uninstall. */
+    canManage: Scalars['Boolean']['output'];
+    nodes: Array<OrganizationPrivateNode>;
+    /** Organization the workspace belongs to; null when the caller is not a member or the workspace has no organization. */
+    organizationId?: Maybe<Scalars['ID']['output']>;
+    workspaceId: Scalars['ID']['output'];
+};
 export type OrganizationScheduleQuotas = {
     __typename?: 'OrganizationScheduleQuotas';
     currentActiveSchedules: Scalars['Int']['output'];
@@ -15724,6 +16478,8 @@ export type ProductContentPage = {
     content: Scalars['String']['output'];
     contentFormat: Scalars['String']['output'];
     createdAt: Scalars['DateTime']['output'];
+    /** The customer's written approval of a case study and its numbers. A page tagged "case-study" is returned by the public content-page queries only when this is set. Null for every other page and for unapproved case studies. */
+    customerSignOff?: Maybe<CustomerSignOff>;
     /** Blog/article fields */
     excerpt?: Maybe<Scalars['String']['output']>;
     featured: Scalars['Boolean']['output'];
@@ -15870,11 +16626,22 @@ export type ProductReview = {
     comment?: Maybe<Scalars['String']['output']>;
     context?: Maybe<Scalars['JSON']['output']>;
     createdAt: Scalars['DateTime']['output'];
+    featuredAt?: Maybe<Scalars['DateTime']['output']>;
     helpful: Scalars['Int']['output'];
     id: Scalars['ID']['output'];
+    isFeatured: Scalars['Boolean']['output'];
+    isVerifiedInstall: Scalars['Boolean']['output'];
+    metadata?: Maybe<Scalars['JSON']['output']>;
+    moderatedAt?: Maybe<Scalars['DateTime']['output']>;
+    moderatedBy?: Maybe<Scalars['String']['output']>;
+    moderationNote?: Maybe<Scalars['String']['output']>;
+    notHelpful: Scalars['Int']['output'];
     product: StoreProduct;
     productId: Scalars['String']['output'];
+    publisherReply?: Maybe<ProductReviewReply>;
     rating: Scalars['Int']['output'];
+    rejectionReason?: Maybe<Scalars['String']['output']>;
+    reportCount: Scalars['Int']['output'];
     status: ReviewStatus;
     title?: Maybe<Scalars['String']['output']>;
     updatedAt: Scalars['DateTime']['output'];
@@ -15892,6 +16659,33 @@ export type ProductReviewReply = {
     reviewId: Scalars['ID']['output'];
     updatedAt: Scalars['DateTime']['output'];
 };
+export type ProductReviewReport = {
+    __typename?: 'ProductReviewReport';
+    actionTaken?: Maybe<Scalars['String']['output']>;
+    context?: Maybe<Scalars['JSON']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    details?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    metadata?: Maybe<Scalars['JSON']['output']>;
+    reason: Scalars['String']['output'];
+    reportedBy: Scalars['String']['output'];
+    reviewId: Scalars['ID']['output'];
+    reviewedAt?: Maybe<Scalars['DateTime']['output']>;
+    reviewedBy?: Maybe<Scalars['String']['output']>;
+    status: Scalars['String']['output'];
+    updatedAt: Scalars['DateTime']['output'];
+};
+export type ProductReviewVote = {
+    __typename?: 'ProductReviewVote';
+    context?: Maybe<Scalars['JSON']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    id: Scalars['ID']['output'];
+    isHelpful: Scalars['Boolean']['output'];
+    metadata?: Maybe<Scalars['JSON']['output']>;
+    reviewId: Scalars['ID']['output'];
+    updatedAt: Scalars['DateTime']['output'];
+    userId: Scalars['String']['output'];
+};
 export declare enum ProductStatus {
     Archived = "ARCHIVED",
     Deprecated = "DEPRECATED",
@@ -15901,15 +16695,6 @@ export declare enum ProductStatus {
     Rejected = "REJECTED",
     Unlisted = "UNLISTED"
 }
-export type ProductTag = {
-    __typename?: 'ProductTag';
-    context?: Maybe<Scalars['JSON']['output']>;
-    createdAt: Scalars['DateTime']['output'];
-    description?: Maybe<Scalars['String']['output']>;
-    id: Scalars['ID']['output'];
-    name: Scalars['String']['output'];
-    slug: Scalars['String']['output'];
-};
 export type ProductTourStatistics = {
     __typename?: 'ProductTourStatistics';
     averageCompletionRate: Scalars['Float']['output'];
@@ -15983,22 +16768,6 @@ export type ProductVariant = {
     /** Weight unit for this variant */
     weightUnit?: Maybe<WeightUnit>;
 };
-export type ProductWelcomeEmailInput = {
-    /** URL the user just landed on (e.g. https://app.vibecontrols.com). Used as the primary CTA target if the template doesn't override it. */
-    appUrl?: InputMaybe<Scalars['String']['input']>;
-    /** Idempotency key — same key + same input = at-most-once delivery. Recommended format: "welcome:<productSlug>:<userId>". */
-    idempotencyKey?: InputMaybe<Scalars['String']['input']>;
-    /** Organization ID for multi-tenancy / connection lookup. */
-    organizationId: Scalars['ID']['input'];
-    /** PlatformProduct.slug — e.g. "vibecontrols", "botlit", "workspaces". Falls back to the `default` template if no matching template is registered. */
-    productSlug: Scalars['String']['input'];
-    /** Recipient email address. */
-    recipientEmail: Scalars['String']['input'];
-    /** Recipient display name for the greeting line. Defaults to "there" if empty. First name is preferred. */
-    recipientName?: InputMaybe<Scalars['String']['input']>;
-    /** Optional unsubscribe URL injected into the footer. */
-    unsubscribeUrl?: InputMaybe<Scalars['String']['input']>;
-};
 export type PromoCode = {
     __typename?: 'PromoCode';
     applicableProductIds: Array<Scalars['ID']['output']>;
@@ -16060,6 +16829,19 @@ export type ProvisionFreeTierForWorkspaceResult = {
     hasBillingAccount: Scalars['Boolean']['output'];
     /** Product IDs the assigned quotas belong to. */
     productIds: Array<Scalars['String']['output']>;
+    /** Free-plan product IDs this workspace received no quotas from because every active free subscription for that product is already activated on plan.maxWorkspaces other workspaces of the org. Empty when nothing was capped. A non-empty list explains an assignedQuotas of 0: activate a plan with spare workspace capacity (activateSubscriptionForWorkspace) or upgrade the plan. */
+    skippedAtCapProductIds: Array<Scalars['String']['output']>;
+};
+/** Input for a service-managed app (BOFF-9962). */
+export type ProvisionManagedAppInternalInput = {
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Display name, 1 to 200 characters. */
+    name: Scalars['String']['input'];
+    /** Scopes a delegation to the app may carry; at least one. */
+    scopes: Array<Scalars['String']['input']>;
+    tenantId?: InputMaybe<Scalars['String']['input']>;
+    /** BOT (default), ASSISTANT, AUTOMATION or WORKFLOW. */
+    type?: InputMaybe<AppType>;
 };
 /** Response for createUserTenantStructure mutation */
 export declare enum ProvisioningStatus {
@@ -16140,6 +16922,10 @@ export type Publisher = {
     context?: Maybe<Scalars['JSON']['output']>;
     country?: Maybe<Scalars['String']['output']>;
     createdAt: Scalars['DateTime']['output'];
+    /** When the publisher accepted the Marketplace & Developer Agreement. Visible to the publisher and admins only. */
+    developerAgreementAcceptedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** Version (YYYY-MM-DD) of the Marketplace & Developer Agreement the publisher accepted. Visible to the publisher and admins only. */
+    developerAgreementVersion?: Maybe<Scalars['String']['output']>;
     /** The devportal developer organization that owns this publisher profile. Resolved via federation from global-devportal-svc. */
     developerOrganization?: Maybe<DeveloperOrganization>;
     email: Scalars['String']['output'];
@@ -16156,19 +16942,51 @@ export type Publisher = {
     rejectionReason?: Maybe<Scalars['String']['output']>;
     supportUrl?: Maybe<Scalars['String']['output']>;
     suspensionReason?: Maybe<Scalars['String']['output']>;
+    /** Tax form type declared with the tax ID (for example PAN, GSTIN, W-9, W-8BEN). Visible to the publisher and admins only. */
+    taxFormType?: Maybe<Scalars['String']['output']>;
     taxId?: Maybe<Scalars['String']['output']>;
     tier: PublisherTier;
     totalEarnings: Scalars['Float']['output'];
     totalSales: Scalars['Int']['output'];
     updatedAt: Scalars['DateTime']['output'];
     userId: Scalars['String']['output'];
+    /** KYC documents submitted for review ([{type, filesSvcId, description, uploadedAt}]). Visible to the publisher and admins only. */
+    verificationDocuments?: Maybe<Scalars['JSON']['output']>;
     verificationReviewedAt?: Maybe<Scalars['DateTime']['output']>;
     verificationReviewedBy?: Maybe<Scalars['String']['output']>;
     verificationStatus: PublisherVerificationStatus;
     verificationSubmittedAt?: Maybe<Scalars['DateTime']['output']>;
     websiteUrl?: Maybe<Scalars['String']['output']>;
 };
-/** Consolidated earnings + payout status for the calling publisher, sourced from billing's canonical earnings ledger (global-billing-svc) rather than store's local figures. Null when the publisher has no billing account yet or billing is temporarily unavailable. */
+/** A payment dispute (chargeback) on a store order, for one publisher on it. */
+export type PublisherChargeback = {
+    __typename?: 'PublisherChargeback';
+    /** The publisher share of the disputed amount (held while the dispute is open). */
+    amount: Scalars['Float']['output'];
+    currency: Scalars['String']['output'];
+    /** The publisher part of the processor dispute fee (deducted when the dispute is lost). */
+    disputeFee: Scalars['Float']['output'];
+    externalDisputeId: Scalars['String']['output'];
+    id: Scalars['ID']['output'];
+    openedAt: Scalars['DateTime']['output'];
+    orderId: Scalars['ID']['output'];
+    platformFault: Scalars['Boolean']['output'];
+    publisherId: Scalars['ID']['output'];
+    reason?: Maybe<Scalars['String']['output']>;
+    resolvedAt?: Maybe<Scalars['DateTime']['output']>;
+    status: PublisherChargebackStatus;
+};
+export declare enum PublisherChargebackStatus {
+    Lost = "LOST",
+    Open = "OPEN",
+    Won = "WON"
+}
+/**
+ * Consolidated earnings + payout status for the calling publisher, sourced from
+ * billing's canonical earnings ledger (global-billing-svc) rather than store's
+ * local figures. Null when the publisher has no billing account yet or billing is
+ * temporarily unavailable.
+ */
 export type PublisherEarningsStatus = {
     __typename?: 'PublisherEarningsStatus';
     availableAmount: Scalars['Float']['output'];
@@ -16180,17 +16998,144 @@ export type PublisherEarningsStatus = {
     reservedAmount: Scalars['Float']['output'];
     totalLifetimeAmount: Scalars['Float']['output'];
 };
+/** The calling user's progress through paid-listing publisher onboarding. */
+export type PublisherOnboardingStatus = {
+    __typename?: 'PublisherOnboardingStatus';
+    agreementUrl: Scalars['String']['output'];
+    currentAgreementVersion: Scalars['String']['output'];
+    payoutRoute: PublisherPayoutRoute;
+    publisher?: Maybe<Publisher>;
+    /** True when every step is COMPLETE, so the publisher may submit paid listings to stores that do not allow unverified publishers. */
+    readyToSell: Scalars['Boolean']['output'];
+    /** Publisher share of net sales revenue, in percent, under the published agreement. */
+    revenueSharePercent: Scalars['Float']['output'];
+    steps: Array<PublisherOnboardingStep>;
+};
+export type PublisherOnboardingStep = {
+    __typename?: 'PublisherOnboardingStep';
+    /** Free-text detail from a reviewer, such as a rejection reason. */
+    detail?: Maybe<Scalars['String']['output']>;
+    key: PublisherOnboardingStepKey;
+    /** Machine-readable reason code for the status (for example REJECTED, AGREEMENT_OUTDATED). */
+    reason?: Maybe<Scalars['String']['output']>;
+    status: PublisherOnboardingStepStatus;
+};
+export declare enum PublisherOnboardingStepKey {
+    DeveloperAgreement = "DEVELOPER_AGREEMENT",
+    Kyc = "KYC",
+    PayoutMethod = "PAYOUT_METHOD",
+    Profile = "PROFILE",
+    Tax = "TAX"
+}
+export declare enum PublisherOnboardingStepStatus {
+    ActionRequired = "ACTION_REQUIRED",
+    Blocked = "BLOCKED",
+    Complete = "COMPLETE",
+    InReview = "IN_REVIEW"
+}
+/**
+ * A monthly publisher payout. amount is the net payable after refund and
+ * chargeback netting: grossAmount (the publisher share of the period's sales)
+ * plus adjustmentsAmount (the signed sum of the adjustments applied).
+ */
+export type PublisherPayout = {
+    __typename?: 'PublisherPayout';
+    adjustmentsAmount?: Maybe<Scalars['Float']['output']>;
+    /** Net payable amount. */
+    amount: Scalars['Float']['output'];
+    billingPayoutRequestId?: Maybe<Scalars['ID']['output']>;
+    /** Share of the period's transactions that received a chargeback (0 to 1). */
+    chargebackRate?: Maybe<Scalars['Float']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    currency: Scalars['String']['output'];
+    grossAmount?: Maybe<Scalars['Float']['output']>;
+    heldAt?: Maybe<Scalars['DateTime']['output']>;
+    /** Why the payout is held back from disbursement: NO_VERIFIED_PAYOUT_METHOD or CHARGEBACK_RATE. Null when it is released. */
+    holdReason?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    ordersCount: Scalars['Int']['output'];
+    payoutPeriod?: Maybe<Scalars['String']['output']>;
+    publisherId: Scalars['ID']['output'];
+    releasedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** PENDING, PROCESSING, COMPLETED, FAILED or CANCELLED. */
+    status: Scalars['String']['output'];
+};
+/**
+ * A signed money movement netted into a publisher's next payout (Developer
+ * Agreement Section 6). Negative amounts are deductions, positive are credits.
+ */
+export type PublisherPayoutAdjustment = {
+    __typename?: 'PublisherPayoutAdjustment';
+    amount: Scalars['Float']['output'];
+    appliedAt?: Maybe<Scalars['DateTime']['output']>;
+    appliedPayoutId?: Maybe<Scalars['ID']['output']>;
+    appliedPeriod?: Maybe<Scalars['String']['output']>;
+    chargebackId?: Maybe<Scalars['ID']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    currency: Scalars['String']['output'];
+    id: Scalars['ID']['output'];
+    orderId?: Maybe<Scalars['ID']['output']>;
+    publisherId: Scalars['ID']['output'];
+    reason?: Maybe<Scalars['String']['output']>;
+    /** OPEN (waiting for the next payout run), APPLIED or VOID. */
+    status: Scalars['String']['output'];
+    /** REFUND, DISPUTE_HOLD, DISPUTE_RELEASE, DISPUTE_FEE or CARRY_FORWARD. */
+    type: Scalars['String']['output'];
+};
 export type PublisherPayoutMethod = {
     __typename?: 'PublisherPayoutMethod';
+    country?: Maybe<Scalars['String']['output']>;
     createdAt: Scalars['DateTime']['output'];
+    currency?: Maybe<Scalars['String']['output']>;
+    /** Masked label for the method, for example "HDFC Bank •••• 1234". Full account numbers are never stored. */
+    displayLabel?: Maybe<Scalars['String']['output']>;
     externalAccountId?: Maybe<Scalars['String']['output']>;
     id: Scalars['ID']['output'];
     isDefault: Scalars['Boolean']['output'];
+    /** Masked payout details (holder name, bank name, last four digits, bank code). */
+    maskedDetails?: Maybe<Scalars['JSON']['output']>;
+    /** Why the processor could not verify the account (for example NAME_MISMATCH or VALIDATION_FAILED). */
+    processorFailureReason?: Maybe<Scalars['String']['output']>;
+    /**
+     * State of the processor-side payout account billing created for this method:
+     * PENDING_VERIFICATION, ACTIVE or FAILED_VERIFICATION. Null until onboarding starts.
+     */
+    processorStatus?: Maybe<Scalars['String']['output']>;
+    /** When the processor state was last read from billing. */
+    processorSyncedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** The publisher that owns this payout method (resolved for admins and the owner). */
+    publisher?: Maybe<Publisher>;
     publisherId: Scalars['ID']['output'];
+    rejectionReason?: Maybe<Scalars['String']['output']>;
+    /** PENDING (awaiting admin verification), VERIFIED, REJECTED, SUSPENDED or CLOSED. */
     status: Scalars['String']['output'];
     type: PayoutMethodType;
     verifiedAt?: Maybe<Scalars['DateTime']['output']>;
 };
+/** Progress of automatic payout onboarding for a payout method. */
+export type PublisherPayoutOnboarding = {
+    __typename?: 'PublisherPayoutOnboarding';
+    failureReason?: Maybe<Scalars['String']['output']>;
+    method: PublisherPayoutMethod;
+    /** STRIPE_CONNECT: Stripe's hosted onboarding page for the publisher to complete. Null for RazorpayX and once verified. */
+    onboardingUrl?: Maybe<Scalars['String']['output']>;
+    /** RAZORPAYX or STRIPE_CONNECT. */
+    processor: Scalars['String']['output'];
+    /** PENDING_VERIFICATION, ACTIVE or FAILED_VERIFICATION on the processor side. */
+    processorStatus?: Maybe<Scalars['String']['output']>;
+};
+/**
+ * Which payout processor and methods apply to a publisher's country.
+ * India: RazorpayX payouts in INR. Everywhere else: Stripe Connect in USD, with an
+ * international bank transfer as the alternative. PAYPAL is not offered.
+ */
+export type PublisherPayoutRoute = {
+    __typename?: 'PublisherPayoutRoute';
+    country?: Maybe<Scalars['String']['output']>;
+    currency: Scalars['String']['output'];
+    methodTypes: Array<PayoutMethodType>;
+    processor: Scalars['String']['output'];
+};
 export declare enum PublisherTier {
     Enterprise = "ENTERPRISE",
     Individual = "INDIVIDUAL",
@@ -16269,9 +17214,15 @@ export type Query = {
     actionDefinitions: Array<ActionDefinition>;
     /** Get all active schedules (for background processing). `limit` clamps the page size (default 100, max 500). `cursor` is the ID of the last schedule from the previous page (keyset pagination ordered by `nextExecutionAt` ascending then `id`). Background workers that need to drain every due schedule should loop calling this query with the returned cursor until fewer-than-`limit` rows come back. Addresses the codex review on PR #35: without cursoring, busy tenants could keep schedules permanently outside the first-page window. */
     activeSchedules: Array<TourSchedule>;
-    /** Get all active sessions for the current user. The `isCurrent` field indicates which session belongs to this request. Resolver filters by actorId — membership IS the access list. */
+    /** Get active sessions for the current user. An optional exact clientSessionNonce filters only that authenticated owner's sessions; it never grants access. The `isCurrent` field indicates which session belongs to this request. Resolver filters by actorId — membership IS the access list. */
     activeSessions: SessionConnection;
-    /** Count activity logs matching the filter (action, resource, resourceType, workspaceId, tenantId, date range, etc.). Lets a service migrating its local audit table verify exact parity (local table count == owner count for its slice) before dropping the local table. Uses the SAME where-builder as `activityLogs`, and applies the SAME tenant/workspace scoping, so the count matches the list it verifies. */
+    /**
+     * Count activity logs matching the filter (action, resource, resourceType, workspaceId, tenantId,
+     * date range, etc.). Lets a service migrating its local audit table verify exact parity (local
+     * table count == owner count for its slice) before dropping the local table. Uses the SAME
+     * where-builder as `activityLogs`, and applies the SAME tenant/workspace scoping, so the count
+     * matches the list it verifies.
+     */
     activityCount: Scalars['Int']['output'];
     activityLog?: Maybe<ActivityLog>;
     activityLogs: ActivityLogConnection;
@@ -16283,10 +17234,15 @@ export type Query = {
     actorRoleAssignments: Array<ActorRoleAssignment>;
     /** List actors with RBAC context in a scope */
     actors: Array<ActorRbacSummary>;
+    /** Whether the caller's organization can buy each add-on (BOFF-9889: add-ons require a paid subscription to their product unless flagged otherwise). With billingAccountId, only that billing account is checked (it must belong to the caller's organization) and subscriptionId, when given, must be one of its paid subscriptions of the add-on's product. Without it, every active billing account of the organization counts. Organization-scoped like getAllAddOns. */
+    addonPurchaseEligibility: Array<AddonPurchaseEligibility>;
     adminAffiliateAnalytics: AffiliateAdminAnalytics;
     adminPayoutRequests: PayoutRequestConnection;
     adminPayoutSummary: PayoutAdminSummary;
-    /** Admin-only: paginated list of physical (fulfillment-tracked) orders, with optional status/search filters. Used by the admin fulfillment console. */
+    /**
+     * Admin-only: paginated list of physical (fulfillment-tracked) orders, with
+     * optional status/search filters. Used by the admin fulfillment console.
+     */
     adminPhysicalOrders: StoreOrdersResult;
     affiliateCode?: Maybe<AffiliateCode>;
     affiliateCodeAnalytics: AffiliateCodeAnalytics;
@@ -16347,12 +17303,37 @@ export type Query = {
     automationSubscribers: Array<AutomationSubscriber>;
     availableAgents: Array<AgentProfile>;
     availableAuthMethods: Array<AuthMethod>;
-    /** Get available preview features the user can opt-in to within a workspace. Returns only flags that are previewable, active, and allowed by workspace admin. When `productSlug` is provided (each product app shell passes its own slug), the result is scoped to that product's previewable flags PLUS platform-wide previewable flags — so a product's Feature Previews page never surfaces other products' flags. Omit `productSlug` to get every available preview. Bounded by limit/offset to avoid unbounded fetches. */
+    /** Get available preview features the user can opt-in to within a workspace. Returns only flags that are previewable, active, and allowed by workspace admin. When `productSlug` is provided (each product app shell passes its own slug), the result is scoped to that product's previewable flags PLUS platform-wide previewable flags — so a product's Feature Previews page never surfaces other products' flags. Omit `productSlug` to get every available preview. Self-scoped: every workspace member loads this, so the gateway only requires an authenticated actor and the resolver requires membership of `workspaceId`. Bounded by limit/offset to avoid unbounded fetches. */
     availableFeaturePreviews: Array<FeatureFlag>;
     /** Signed (DESIGN 3.7). The workspace's balance, in the person's view when actorId is given. */
     avatarMinutesForService: AvatarMinutesBalance;
     bounceStats: BounceStats;
-    /** Browse store products with unified filtering, sorting, and pagination. Search is treated as a filter - all filters combine with AND logic. Example usage: ```graphql query { browseStore(input: { filter: { search: "ai notification" type: NODE pricingModel: FREE minRating: 4.0 compatibleWith: "workspaces" } sortBy: RELEVANCE pagination: { limit: 20, offset: 0 } }) { products { id name rating downloads } totalCount hasMore facets { categories { value count } } } } ``` */
+    /**
+     * Browse store products with unified filtering, sorting, and pagination.
+     * Search is treated as a filter - all filters combine with AND logic.
+     *
+     * Example usage:
+     * ```graphql
+     * query {
+     *   browseStore(input: {
+     *     filter: {
+     *       search: "ai notification"
+     *       type: NODE
+     *       pricingModel: FREE
+     *       minRating: 4.0
+     *       compatibleWith: "workspaces"
+     *     }
+     *     sortBy: RELEVANCE
+     *     pagination: { limit: 20, offset: 0 }
+     *   }) {
+     *     products { id name rating downloads }
+     *     totalCount
+     *     hasMore
+     *     facets { categories { value count } }
+     *   }
+     * }
+     * ```
+     */
     browseStore: BrowseStoreResult;
     /** Calculate tax for a purchase (preview without creating payment) Used by checkout to show tax breakdown before payment */
     calculateTax: TaxCalculationResult;
@@ -16363,7 +17344,16 @@ export type Query = {
     cannedResponse?: Maybe<CannedResponse>;
     cannedResponseByShortcut?: Maybe<CannedResponse>;
     cannedResponses: CannedResponseConnection;
-    /** Registered pickup/warehouse addresses across every configured shipping carrier (currently Shiprocket; more may be added later — see listCarrierAdapters) — lets a seller pick a pincode that can actually be booked instead of typing an arbitrary one that checkout will later refuse to ship. Each result is tagged with which carrier it belongs to. Carriers that aren't configured, or that don't support pickup-location listing at all (e.g. the manual carrier), simply contribute nothing — never blocks org configuration. */
+    /**
+     * Registered pickup/warehouse addresses across every configured shipping
+     * carrier (currently Shiprocket; more may be added later — see
+     * listCarrierAdapters) — lets a seller pick a pincode that can actually be
+     * booked instead of typing an arbitrary one that checkout will later refuse
+     * to ship. Each result is tagged with which carrier it belongs to. Carriers
+     * that aren't configured, or that don't support pickup-location listing at
+     * all (e.g. the manual carrier), simply contribute nothing — never blocks
+     * org configuration.
+     */
     carrierPickupLocations: Array<CarrierPickupLocation>;
     /** Get a cart by ID (admin or owner only) */
     cart?: Maybe<Cart>;
@@ -16483,7 +17473,7 @@ export type Query = {
     estimateNewsletterRecipients: NewsletterRecipientEstimate;
     /** Estimate shipping for an order with a specific method */
     estimateOrderShipping: OrderShippingEstimate;
-    /** Evaluate feature flags for the current actor in a workspace context. Used by frontend providers for bulk flag evaluation. Returns OpenFeature-compatible ResolutionDetails for each flag. RBAC is scoped to the target workspace via `input.workspaceId`. */
+    /** Evaluate feature flags for the current actor in a workspace context. Used by frontend providers for bulk flag evaluation. Returns OpenFeature-compatible ResolutionDetails for each flag. Self-scoped: every page evaluates flags, so the gateway only requires an authenticated actor and the resolver requires membership of `input.workspaceId`. */
     evaluateFeatureFlags: FeatureFlagBulkEvaluation;
     /** One conversation with its full transcript, references, CTAs and clicks. Superadmin only. */
     exploreAdminConversation?: Maybe<ExploreAdminConversation>;
@@ -16497,8 +17487,12 @@ export type Query = {
     exploreAgentJob?: Maybe<ExploreAgentJob>;
     /** Products, example prompts, welcome copy and limits for the `/explore` page. Never throws — an unreachable agent yields `enabled: false`. */
     exploreCatalog: ExploreCatalog;
+    /** Product site, language and size of the conversation the token owns. Scoped exactly like `exploreConversationMessages`: a token that owns nothing, or that owns a different conversation, is reported as NOT_FOUND, never FORBIDDEN. */
+    exploreConversationInfo: ExploreConversationInfo;
     /** The conversation's messages, oldest first. */
     exploreConversationMessages: Array<ExploreMessage>;
+    /** One answer and the question it replies to, by the answer's id, from the conversation the token owns. Scoped exactly like `exploreMessage`: a token that owns nothing, an id from a different conversation, the id of a USER message and an unknown id are all reported as NOT_FOUND, never FORBIDDEN. So is an answer whose question cannot be told apart from another turn's, as when two questions were sent on the conversation at once. */
+    exploreConversationPair?: Maybe<ExploreConversationPair>;
     /** Poll one message. Scoped by `conversationToken`; a token that does not own the message is reported as NOT_FOUND, never FORBIDDEN. */
     exploreMessage?: Maybe<ExploreMessage>;
     /** A shared conversation, read-only. Returns the transcript for a `shareToken` and nothing that would let the caller continue or modify the thread. */
@@ -16519,7 +17513,10 @@ export type Query = {
     /** List feature flags with optional filtering (super admin only) */
     featureFlags: FeatureFlagList;
     featuredProducts: Array<StoreProduct>;
-    /** Get available filter options for a given context. Useful for populating filter dropdowns in UI. */
+    /**
+     * Get available filter options for a given context.
+     * Useful for populating filter dropdowns in UI.
+     */
     filterOptions: FilterOptionsResult;
     /** Get currently active promotions for a product/plan (public — used at checkout) */
     getActivePromotions: Array<Promotion>;
@@ -16532,6 +17529,7 @@ export type Query = {
     /** Browse the plan catalog (e.g. the upgrade-subscription flow). Self-scoped — any authenticated actor may read it; the catalog itself isn't actor-owned data, so there's nothing further to scope. Previously scopeType "global", which no regular user role is ever assigned at (only Authenticated User — billing:NONE — and Platform Superadmin hold a global-scoped role), so this field was unreachable for every non-superadmin user (BOFF-6512). */
     getAllPlans: Array<Plan>;
     getAllQuotas: Array<Quota>;
+    /** List account quotas. Date bounds are inclusive on assignment createdAt; amount bounds are inclusive on activity-backed currentUsageSum, before pagination. Status uses remaining limits (WARNING >=75%, CRITICAL >=90%, EXHAUSTED <=0); expired assignments are INACTIVE and non-numeric unlimited quotas are HEALTHY. Both number and legacy numeric limit types are finite. Percentage thresholds use originalValue; when absent, the remaining value is the fallback baseline. Empty status lists apply no status filter. Pages are capped at 100 rows. Amount-filtered requests fail explicitly above 1000 usage lookups; narrow searchQuery or createdAt bounds rather than relying on partial counts. Derived-filter scans also fail above 10000 assignments, without partial counts. */
     getAllQuotasAssignment: PaginatedQuotaAssignments;
     getAllQuotasOfSub: Array<QuotaAssignment>;
     getAllRecurringBillingPlans: Array<RecurringBillingPlan>;
@@ -16558,14 +17556,12 @@ export type Query = {
     getBillingWebhookLogs: BillingWebhookLogsPage;
     /** Get a channel by ID */
     getChannel?: Maybe<Channel>;
-    getChannelConnectionTags: Array<ChannelConnectionTagAssignment>;
     /** Get recent delivery attempts for a channel. Supports cursor pagination — pass `cursor` from the previous page's `nextCursor`. Falls back to offset when `cursor` is absent. */
     getChannelDeliveryAttempts: DeliveryAttemptList;
     /** Get organization-level channel settings. Returns defaults when no settings have been saved yet. */
     getChannelOrgSettings: ChannelOrgSettings;
     /** Get channel statistics */
     getChannelStats: ChannelStats;
-    getChannelTags: Array<ChannelTagAssignment>;
     /** Get recent webhook events for a channel. Supports cursor pagination — pass `cursor` from the previous page's `nextCursor`. */
     getChannelWebhookEvents: WebhookEventList;
     /** Get all channels with optional filtering */
@@ -16666,7 +17662,7 @@ export type Query = {
     getPromotion?: Maybe<Promotion>;
     /** Get usage analytics for a specific quota assignment */
     getQuotaAnalytics: QuotaUsageAnalytics;
-    /** Enhanced quota assignment query with analytics, pagination and filtering */
+    /** The same status, inclusive createdAt and currentUsageSum filters as getAllQuotasAssignment, with analytics for the filtered page. */
     getQuotaAssignmentsWithAnalytics: PaginatedQuotaAssignmentsWithAnalytics;
     getQuotaUsageAndLimit: QuotaUsageAndLimit;
     getQuotaUsageDetails?: Maybe<PaginatedUsages>;
@@ -16717,9 +17713,16 @@ export type Query = {
     getWebhookEvent?: Maybe<WebhookEvent>;
     /** Get webhook statistics for a channel */
     getWebhookStats: WebhookStats;
+    /** Measure the triage engine against historical human categorisation. Support admins see their tenant; super admins see every tenant. Read-only. */
+    globalTriageEvaluation: SupportTriageEvaluation;
+    /** Publisher appeals, oldest first. */
+    governanceAppeals: GovernanceAppealList;
     /** Health check endpoint */
     health: HealthStatus;
-    /** Get grouped products for homepage. Optionally filter by compatible product (e.g., "bigconsole", "fluidgrids"). */
+    /**
+     * Get grouped products for homepage.
+     * Optionally filter by compatible product (e.g., "bigconsole", "fluidgrids").
+     */
     homeGroupedProducts: GroupedStoreProducts;
     homepageSections: Array<HomepageSection>;
     i18nModule?: Maybe<I18nModule>;
@@ -16736,6 +17739,12 @@ export type Query = {
     /** Public listing of an application's installable versions (published or deprecated only — draft/pending_review/rejected versions are never returned here, to avoid exposing unreviewed versions). Used by the Store to let buyers pick a specific version at install time, and by global-store-svc (service actor) to resolve a chosen version's manifest when installing. */
     installableApplicationVersions: Array<ApplicationVersion>;
     installationPermissions?: Maybe<Scalars['JSON']['output']>;
+    /**
+     * Runtime routing metadata for an active node installation in the gateway-authenticated workspace.
+     * Candidate node types are ordered, with the requested spelling before compatibility aliases.
+     * Legacy installation versions are not treated as node runtime versions.
+     */
+    installedStoreNodeRuntime?: Maybe<StoreInstalledNodeRuntime>;
     /** Get a single interview round by ID (admin). */
     interviewRound?: Maybe<InterviewRound>;
     /** Get a single interviewer by ID (admin). */
@@ -16793,10 +17802,19 @@ export type Query = {
     listUserPlatformConnectionsByOrganization: UserPlatformConnectionList;
     /** List all platform connections for a given internal user. Supports cursor pagination — pass `cursor` from the previous page's `nextCursor`. */
     listUserPlatformConnectionsByUser: UserPlatformConnectionList;
-    /** M2M: list every ShippingAddress owned by an explicit user, on behalf of a calling service. Product backends (e.g. Kadaikodi) call this through the INTERNAL gateway to read a user's canonical addresses instead of keeping a local copy. Service-actor only — the userId is supplied by the caller. */
+    /**
+     * M2M: list every ShippingAddress owned by an explicit user, on behalf of a
+     * calling service. Product backends (e.g. Kadaikodi) call this through the
+     * INTERNAL gateway to read a user's canonical addresses instead of keeping a
+     * local copy. Service-actor only — the userId is supplied by the caller.
+     */
     listUserShippingAddresses: Array<ShippingAddress>;
+    /** Buyer reports against listings, oldest first. */
+    listingReports: ListingReportList;
     lookupAffiliateCode?: Maybe<AffiliateCodeLookup>;
     lowStockProducts: Array<LowStockProduct>;
+    /** ACTIVE delegations of a service-managed app (BOFF-9962). Only the service that provisioned the app may list them; any other caller gets NOT_FOUND. */
+    managedAppDelegationsInternal: Array<AppUserDelegation>;
     /** Returns products the current user can access based on their actor type, email domain, and waitlist approval status. Used by app shells for nav. */
     myAccessibleProducts: PlatformProductList;
     myActivityLogs: ActivityLogConnection;
@@ -16825,6 +17843,8 @@ export type Query = {
     myEarningsEntries: EarningsEntryConnection;
     myEarningsSummary: EarningsSummary;
     myEntitlements: Array<ProductEntitlement>;
+    /** Your own appeals as a publisher, newest first. */
+    myGovernanceAppeals: GovernanceAppealList;
     /** Get notification counts grouped by app name for authenticated user */
     myNotificationCountsByApp: Scalars['JSON']['output'];
     /** Get notification counts by channel for authenticated user */
@@ -16853,8 +17873,19 @@ export type Query = {
     myPublicKeys: Array<PublicKeyInfo>;
     /** Get the current user's publisher profile, or null if none exists yet. */
     myPublisher?: Maybe<Publisher>;
-    /** Earnings + payout status for the calling user's publisher profile, read from billing's canonical ledger. Self-scoped: resolved from the authenticated actor. */
+    /**
+     * Earnings + payout status for the calling user's publisher profile, read from
+     * billing's canonical ledger. Self-scoped: resolved from the authenticated actor.
+     */
     myPublisherEarningsStatus?: Maybe<PublisherEarningsStatus>;
+    /** The calling user's paid-listing publisher onboarding checklist (BOFF-10634). */
+    myPublisherOnboarding: PublisherOnboardingStatus;
+    /** Refund and chargeback adjustments on the calling user's publisher profile, newest first. */
+    myPublisherPayoutAdjustments: Array<PublisherPayoutAdjustment>;
+    /** Payout methods on the calling user's publisher profile (closed methods excluded). */
+    myPublisherPayoutMethods: Array<PublisherPayoutMethod>;
+    /** Payouts of the calling user's publisher profile, newest first. */
+    myPublisherPayouts: Array<PublisherPayout>;
     myReviews: Array<ProductReview>;
     /** Get current user's roles in a scope (lightweight, self-service). Use this for quick role checks without fetching full permissions. Self-scoped — see myPermissions for the rationale. (BOFF-2655) */
     myRoles: MyRolesResult;
@@ -16868,6 +17899,8 @@ export type Query = {
     mySubscribedStores: Array<Store>;
     mySupportTickets: SupportTicketConnection;
     mySurveys: CustomerSatisfactionSurveyConnection;
+    /** Your listings that the store team has taken down, with the reason. */
+    myTakenDownListings: Array<StoreProduct>;
     /** Get tenants the calling user has access to. Returns the union of: - every ACTIVE SHARED tenant (every authenticated user implicitly has access) - every tenant for which the caller has a `TenantMember` row Self-list (Type C): the resolver filters by `actorId`, so the returned set IS the access list. Any authenticated user may call this; no RBAC permission is checked. The dropdown that picks a target tenant for `createOrganization` must use this query so the FE never offers a tenant the server would reject. (BOFF-2652) */
     myTenants: TenantList;
     /** Get unread notification count for authenticated user */
@@ -16879,6 +17912,8 @@ export type Query = {
     /** List user's linked wallets */
     myWallets: Array<WalletInfo>;
     myWishlist: Array<UserWishlist>;
+    /** Your own community workflow templates, newest first. */
+    myWorkflowTemplateSubmissions: WorkflowTemplateSubmissionList;
     /** Get workspaces where the current user is a member (owned + added to). Membership-scoped: the resolver filters by actorId, so the returned set IS the access list. Any authenticated user may call this; no RBAC permission is checked. */
     myWorkspaces: WorkspaceList;
     newsletter?: Maybe<Newsletter>;
@@ -16928,7 +17963,11 @@ export type Query = {
     orderEstimate?: Maybe<OrderEstimate>;
     /** Get fulfillment details for an order */
     orderFulfillment?: Maybe<OrderFulfillment>;
-    /** Admin-only: paginated log of carrier shipment-creation attempts across all orders (every Temporal retry, not just the last failure), so ops can debug fulfillment failures without direct DB/log access. */
+    /**
+     * Admin-only: paginated log of carrier shipment-creation attempts across all
+     * orders (every Temporal retry, not just the last failure), so ops can debug
+     * fulfillment failures without direct DB/log access.
+     */
     orderFulfillmentAttempts: OrderFulfillmentAttemptsPage;
     /** Get seller-reported issue flags for an order */
     orderIssueFlags: Array<OrderIssueFlag>;
@@ -16948,9 +17987,13 @@ export type Query = {
     organizationMembers: OrganizationMemberList;
     /** M2M lookup for global-store-svc's shipping-cost quote pipeline: the org's active pickup postal code — the default DeveloperOrgPickupAddress's postalCode, falling back to the legacy pickupPostalCode scalar for orgs that set one before DeveloperOrgPickupAddress existed, then null (caller falls back to the linked billing account's address, then a platform-wide default). */
     organizationPickupPostalCode?: Maybe<Scalars['String']['output']>;
+    /** The workspace-private custom nodes of a workspace's organization (BOFF-9766): every PRIVATE NODE application bound to the organization the workspace belongs to, with its latest version published to that organization and whether this workspace has it installed. Feeds the "Your organization" section of the FluidGrids Node Store, where a workspace admin installs or updates one with `installApp` and removes it with `uninstallApp`. Self-scoped (Type B): the gateway only authenticates the caller. The resolver lists nothing unless the caller is a member of `workspaceId`, and it only ever lists applications bound to that workspace's own organization, so a workspace of another organization sees none of them. */
+    organizationPrivateNodes: OrganizationPrivateNodeListing;
     organizationScheduleQuotas: OrganizationScheduleQuotas;
     payoutRunHistory: Array<PayoutRunLog>;
     pendingDeveloperOrganizationVerifications: DeveloperOrganizationConnection;
+    /** Payout methods awaiting admin verification (admin queue). */
+    pendingPublisherPayoutMethods: Array<PublisherPayoutMethod>;
     /** Publishers awaiting verification review (admin queue). */
     pendingPublishers: Array<Publisher>;
     /** Admin queue: products awaiting review. */
@@ -16958,6 +18001,8 @@ export type Query = {
     /** Get pending scheduled notifications that are due for triggering */
     pendingScheduledNotifications: Array<ScheduledNotification>;
     pendingSurveys: CustomerSatisfactionSurveyConnection;
+    /** Admin queue: new versions of published templates, oldest first. */
+    pendingWorkflowTemplateRevisions: WorkflowTemplateRevisionList;
     /** Get permission check audit log */
     permissionAuditLog: Array<PermissionAuditLog>;
     /** Get a single platform product by ID (admin/catalog read). Returns the full PlatformProduct including DRAFT products and internal operational metrics, so it is gated as a global-scope catalog read. Unauthenticated/marketing callers must use publicProduct(slug), which filters to ACTIVE/WAITLIST/COMING_SOON and strips internal fields. */
@@ -16990,6 +18035,7 @@ export type Query = {
     productOrders: ItemOrdersList;
     productReleases: Array<ProductRelease>;
     productReviews: Array<ProductReview>;
+    productReviewsCount: Scalars['Int']['output'];
     /** Get shortcuts for a specific product (includes global shortcuts). Bounded by limit/offset to avoid unbounded fetches. */
     productShortcuts: Array<KeyboardShortcut>;
     /** Get product-level tour statistics */
@@ -17020,6 +18066,14 @@ export type Query = {
     publicResolvedContentPage?: Maybe<ProductContentPage>;
     publicScheduleTemplates: ScheduleTemplateConnection;
     publishedProducts: Array<StoreProduct>;
+    /** Chargebacks recorded against publisher sales (admin). */
+    publisherChargebacks: Array<PublisherChargeback>;
+    /** Refund and chargeback adjustments netted into publisher payouts (admin). */
+    publisherPayoutAdjustments: Array<PublisherPayoutAdjustment>;
+    /** Monthly publisher payouts with their netting breakdown and hold state (admin). */
+    publisherPayouts: Array<PublisherPayout>;
+    /** Short-lived (5 minute) download URL for one of a publisher's KYC documents (admin review). */
+    publisherVerificationDocumentUrl: Scalars['String']['output'];
     /** The push-routable devices a user has for one product, newest-first. Every row carries the `fcmProject` whose credentials can reach its `token`; rows with no project, and rows not refreshed inside the staleness window, are excluded. Service-to-service only — this is the read global-channel-svc makes before a send, on behalf of the notification's recipient. It therefore takes an explicit `userId`, which is exactly why it is NOT `scopeType: "self"`: a self gate is an authentication check only, so a self-scoped field taking a `userId` would let any signed-in user enumerate anyone's devices. `actorTypes` denies user/app callers at the gateway before any permission round-trip, and the resolver re-checks the actor type for the internal-gateway path (which runs no RBAC middleware). */
     pushDevicesForUserInternal: Array<DeviceToken>;
     /** Cost-weighted AI credits for one assistant turn, computed from the given model's token prices (USD/1M) and the credit baseline. Unknown models fall back to the `*default*` price row. */
@@ -17028,10 +18082,6 @@ export type Query = {
     rbacAnalytics: RbacAnalytics;
     /** Get RBAC configuration change history */
     rbacChangeHistory: Array<RbacChangeLog>;
-    /** Get RBAC configuration for a scope */
-    rbacConfig: Array<RbacConfig>;
-    /** Get a specific RBAC configuration value */
-    rbacConfigValue?: Maybe<RbacConfig>;
     recentArticles: Array<KnowledgeBaseArticle>;
     releaseAuditEvents: Array<ProductReleaseAuditEvent>;
     releaseTracks: Array<ReleaseTrack>;
@@ -17049,6 +18099,8 @@ export type Query = {
     resources: Array<Resource>;
     review?: Maybe<ProductReview>;
     reviewReplies: Array<ProductReviewReply>;
+    /** Reports against reviews (including publishers' rating disputes), oldest first. */
+    reviewReports: GovernanceReviewReportList;
     /** Get a role by ID */
     role?: Maybe<Role>;
     /** Get actors assigned to a role */
@@ -17075,7 +18127,11 @@ export type Query = {
     searchFAQs: Array<Faq>;
     searchKnowledgeBase: Array<KnowledgeBaseArticle>;
     searchProducts: Array<StoreProduct>;
-    /** Get search suggestions for autocomplete. Returns suggestions from product names, tags, categories, and authors. Uses trigram matching for fuzzy search. */
+    /**
+     * Get search suggestions for autocomplete.
+     * Returns suggestions from product names, tags, categories, and authors.
+     * Uses trigram matching for fuzzy search.
+     */
     searchSuggestions: Array<SearchSuggestion>;
     searchTicketTemplates: Array<TicketTemplate>;
     searchTickets: Array<SupportTicket>;
@@ -17094,8 +18150,31 @@ export type Query = {
     /** Fetch a store by id or slug. */
     store?: Maybe<Store>;
     storeAppInstallation?: Maybe<StoreAppInstallation>;
-    /** Get detailed product information for the app details page. Includes product data, reviews, related products, publisher info, and version history. Automatically increments view count. Example usage: ```graphql query { storeProductDetails(input: { id: "product-123" }) { product { id name description manifest rating downloads } reviews { id rating comment } relatedProducts { id name icon } publisher { id name isVerified } versions { id version status } userReview { id rating } isPurchased } } ``` */
+    /** Counters for the store reviewer console: review SLA, reports, appeals. */
+    storeGovernanceStats: StoreGovernanceStats;
+    /**
+     * Get detailed product information for the app details page.
+     * Includes product data, reviews, related products, publisher info, and version history.
+     * Automatically increments view count.
+     *
+     * Example usage:
+     * ```graphql
+     * query {
+     *   storeProductDetails(input: { id: "product-123" }) {
+     *     product { id name description manifest rating downloads }
+     *     reviews { id rating comment }
+     *     relatedProducts { id name icon }
+     *     publisher { id name isVerified }
+     *     versions { id version status }
+     *     userReview { id rating }
+     *     isPurchased
+     *   }
+     * }
+     * ```
+     */
     storeProductDetails: StoreProductDetailsResult;
+    /** Listing submissions waiting for review, oldest first. */
+    storeReviewQueue: PaginatedProducts;
     /** List all stores the caller can see. */
     stores: Array<Store>;
     subprocessor?: Maybe<Subprocessor>;
@@ -17121,9 +18200,8 @@ export type Query = {
     syncOutboxEntry?: Maybe<SyncOutboxEntry>;
     /** Aggregate counts for the outbox, used by the admin dashboard tile. */
     syncOutboxStats: SyncOutboxStats;
-    tag?: Maybe<ProductTag>;
-    tagBySlug?: Maybe<ProductTag>;
-    tags: Array<ProductTag>;
+    /** Listings currently taken down, most recent first. */
+    takenDownListings: PaginatedProducts;
     /** Get a single tenant by ID */
     tenant?: Maybe<Tenant>;
     /** Get a tenant by slug */
@@ -17181,7 +18259,10 @@ export type Query = {
     translationKeys: TranslationKeyList;
     translationStats: Scalars['JSON']['output'];
     translations: TranslationList;
-    /** Get popular/trending search terms. Useful for showing suggestions when search input is empty. */
+    /**
+     * Get popular/trending search terms.
+     * Useful for showing suggestions when search input is empty.
+     */
     trendingSearches: Array<Scalars['String']['output']>;
     /** Get a user by ID (admin only) */
     user?: Maybe<User>;
@@ -17189,7 +18270,7 @@ export type Query = {
     userBillingPlan: UserBillingPlan;
     /** Get total count of users (for analytics) */
     userCount: Scalars['Int']['output'];
-    /** Get a user's feature flag preferences in a workspace. Bounded by limit/offset to avoid unbounded fetches. */
+    /** Get the calling user's own feature flag preferences in a workspace. Self-scoped: the resolver filters rows by the caller's user id, so the result is the access control. Bounded by limit/offset to avoid unbounded fetches. */
     userFeatureFlagPreferences: Array<UserFeatureFlagPreference>;
     userLanguagePreference?: Maybe<UserLanguagePreference>;
     /** Check if the current user has reviewed a specific product */
@@ -17202,7 +18283,10 @@ export type Query = {
     usersByIds: Array<User>;
     /** Validate a coupon code for a specific order */
     validateCoupon: ValidateCouponResponse;
-    /** Validate a license key without modifying state. Used by vibecontrols agents + wspace services to check license validity before plugin load. */
+    /**
+     * Validate a license key without modifying state. Used by vibecontrols
+     * agents + wspace services to check license validity before plugin load.
+     */
     validateLicense: LicenseValidationResult;
     validatePromoCode: PromoCodeValidationResult;
     /** Verify an installation using the app signing secret. Called server-to-server by integration backends after receiving the post-install redirect with ?installation_id=xxx. Returns the full installation context (workspaceId, scope, status, consentedPermissions). Responds with NOT_FOUND for any invalid combination to prevent enumeration. */
@@ -17218,6 +18302,10 @@ export type Query = {
     webhookEventCatalog: Array<WebhookEventCatalogEntry>;
     /** Registered subject mappings. Platform services and super admins only. */
     webhookEventSubjects: Array<WebhookEventSubject>;
+    /** Fetch a single webhook subscription by ID */
+    webhookSubscription?: Maybe<WebhookSubscription>;
+    /** List webhook subscriptions for an owner (newest first) */
+    webhookSubscriptions: Array<WebhookSubscription>;
     webhooks: Array<Webhook>;
     /** Get a single workspace by ID */
     workspace?: Maybe<Workspace>;
@@ -17247,6 +18335,7 @@ export type QueryActiveSchedulesArgs = {
 };
 /** Root query type */
 export type QueryActiveSessionsArgs = {
+    clientSessionNonce?: InputMaybe<Scalars['ID']['input']>;
     pagination?: InputMaybe<PaginationInput>;
 };
 /** Root query type */
@@ -17288,6 +18377,12 @@ export type QueryActorsArgs = {
     scopeId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryAddonPurchaseEligibilityArgs = {
+    addonIds: Array<Scalars['ID']['input']>;
+    billingAccountId?: InputMaybe<Scalars['ID']['input']>;
+    subscriptionId?: InputMaybe<Scalars['ID']['input']>;
+};
+/** Root query type */
 export type QueryAdminAffiliateAnalyticsArgs = {
     filter?: InputMaybe<AffiliateAnalyticsFilterInput>;
 };
@@ -17952,12 +19047,21 @@ export type QueryExploreCatalogArgs = {
     productSlug?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root query type */
+export type QueryExploreConversationInfoArgs = {
+    conversationToken: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryExploreConversationMessagesArgs = {
     conversationToken: Scalars['String']['input'];
     limit?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
-export type QueryExploreMessageArgs = {
+export type QueryExploreConversationPairArgs = {
+    answerId: Scalars['ID']['input'];
+    conversationToken: Scalars['String']['input'];
+};
+/** Root query type */
+export type QueryExploreMessageArgs = {
     conversationToken: Scalars['String']['input'];
     id: Scalars['ID']['input'];
 };
@@ -18125,10 +19229,6 @@ export type QueryGetChannelArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
-export type QueryGetChannelConnectionTagsArgs = {
-    input: GetChannelConnectionTagsInput;
-};
-/** Root query type */
 export type QueryGetChannelDeliveryAttemptsArgs = {
     channelId: Scalars['ID']['input'];
     cursor?: InputMaybe<Scalars['String']['input']>;
@@ -18143,10 +19243,6 @@ export type QueryGetChannelStatsArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
-export type QueryGetChannelTagsArgs = {
-    input: GetChannelTagsInput;
-};
-/** Root query type */
 export type QueryGetChannelWebhookEventsArgs = {
     channelId: Scalars['ID']['input'];
     cursor?: InputMaybe<Scalars['String']['input']>;
@@ -18528,6 +19624,16 @@ export type QueryGetWebhookStatsArgs = {
     startDate?: InputMaybe<Scalars['DateTime']['input']>;
 };
 /** Root query type */
+export type QueryGlobalTriageEvaluationArgs = {
+    sampleSize?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
+export type QueryGovernanceAppealsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    status?: InputMaybe<GovernanceAppealStatus>;
+};
+/** Root query type */
 export type QueryHomeGroupedProductsArgs = {
     compatibleWith?: InputMaybe<Scalars['String']['input']>;
 };
@@ -18592,6 +19698,11 @@ export type QueryInstallationPermissionsArgs = {
     installationId: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryInstalledStoreNodeRuntimeArgs = {
+    nodeTypes: Array<Scalars['String']['input']>;
+    nodeVersion?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root query type */
 export type QueryInterviewRoundArgs = {
     id: Scalars['ID']['input'];
 };
@@ -18772,6 +19883,13 @@ export type QueryListUserShippingAddressesArgs = {
     userId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryListingReportsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    productId?: InputMaybe<Scalars['ID']['input']>;
+    status?: InputMaybe<ListingReportStatus>;
+};
+/** Root query type */
 export type QueryLookupAffiliateCodeArgs = {
     code: Scalars['String']['input'];
 };
@@ -18780,6 +19898,10 @@ export type QueryLowStockProductsArgs = {
     storeId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Root query type */
+export type QueryManagedAppDelegationsInternalArgs = {
+    clientId: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryMyAccessibleProductsArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -18838,6 +19960,11 @@ export type QueryMyEntitlementsArgs = {
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QueryMyGovernanceAppealsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
 export type QueryMyNotificationSendStatusArgs = {
     id: Scalars['ID']['input'];
 };
@@ -18885,6 +20012,16 @@ export type QueryMyPublicKeysArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
 /** Root query type */
+export type QueryMyPublisherPayoutAdjustmentsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
+export type QueryMyPublisherPayoutsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
 export type QueryMyReviewsArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -18953,6 +20090,12 @@ export type QueryMyWalletsArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
 /** Root query type */
+export type QueryMyWorkflowTemplateSubmissionsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    status?: InputMaybe<ProductStatus>;
+};
+/** Root query type */
 export type QueryMyWorkspacesArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -19154,11 +20297,20 @@ export type QueryOrganizationPickupPostalCodeArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryOrganizationPrivateNodesArgs = {
+    workspaceId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryPendingDeveloperOrganizationVerificationsArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QueryPendingPublisherPayoutMethodsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
 export type QueryPendingPublishersArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -19180,6 +20332,12 @@ export type QueryPendingSurveysArgs = {
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QueryPendingWorkflowTemplateRevisionsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    status?: InputMaybe<WorkflowTemplateRevisionStatus>;
+};
+/** Root query type */
 export type QueryPermissionAuditLogArgs = {
     filter?: InputMaybe<AuditLogFilterInput>;
     pagination?: InputMaybe<PaginationInput>;
@@ -19279,8 +20437,15 @@ export type QueryProductReleasesArgs = {
 };
 /** Root query type */
 export type QueryProductReviewsArgs = {
+    isVerifiedPurchase?: InputMaybe<Scalars['Boolean']['input']>;
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
+    productId: Scalars['String']['input'];
+    rating?: InputMaybe<Scalars['Int']['input']>;
+    status?: InputMaybe<ReviewStatus>;
+};
+/** Root query type */
+export type QueryProductReviewsCountArgs = {
     productId: Scalars['String']['input'];
     status?: InputMaybe<ReviewStatus>;
 };
@@ -19377,6 +20542,33 @@ export type QueryPublishedProductsArgs = {
     type?: InputMaybe<ProductType>;
 };
 /** Root query type */
+export type QueryPublisherChargebacksArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    publisherId?: InputMaybe<Scalars['ID']['input']>;
+    status?: InputMaybe<PublisherChargebackStatus>;
+};
+/** Root query type */
+export type QueryPublisherPayoutAdjustmentsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    publisherId?: InputMaybe<Scalars['ID']['input']>;
+    status?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root query type */
+export type QueryPublisherPayoutsArgs = {
+    held?: InputMaybe<Scalars['Boolean']['input']>;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    period?: InputMaybe<Scalars['String']['input']>;
+    publisherId?: InputMaybe<Scalars['ID']['input']>;
+};
+/** Root query type */
+export type QueryPublisherVerificationDocumentUrlArgs = {
+    filesSvcId: Scalars['ID']['input'];
+    publisherId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryPushDevicesForUserInternalArgs = {
     productSlug: Scalars['String']['input'];
     userId: Scalars['ID']['input'];
@@ -19401,15 +20593,6 @@ export type QueryRbacChangeHistoryArgs = {
     scopeId: Scalars['String']['input'];
 };
 /** Root query type */
-export type QueryRbacConfigArgs = {
-    scopeId: Scalars['String']['input'];
-};
-/** Root query type */
-export type QueryRbacConfigValueArgs = {
-    key: Scalars['String']['input'];
-    scopeId: Scalars['String']['input'];
-};
-/** Root query type */
 export type QueryRecentArticlesArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -19460,6 +20643,13 @@ export type QueryReviewRepliesArgs = {
     reviewId: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryReviewReportsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    ratingDisputesOnly?: InputMaybe<Scalars['Boolean']['input']>;
+    status?: InputMaybe<ReviewReportStatus>;
+};
+/** Root query type */
 export type QueryRoleArgs = {
     id: Scalars['ID']['input'];
 };
@@ -19602,6 +20792,13 @@ export type QueryStoreProductDetailsArgs = {
     input: StoreProductDetailsInput;
 };
 /** Root query type */
+export type QueryStoreReviewQueueArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    overdueOnly?: InputMaybe<Scalars['Boolean']['input']>;
+    storeId?: InputMaybe<Scalars['ID']['input']>;
+};
+/** Root query type */
 export type QueryStoresArgs = {
     search?: InputMaybe<Scalars['String']['input']>;
     type?: InputMaybe<StoreType>;
@@ -19701,12 +20898,9 @@ export type QuerySyncOutboxEntryArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
-export type QueryTagArgs = {
-    id: Scalars['ID']['input'];
-};
-/** Root query type */
-export type QueryTagBySlugArgs = {
-    slug: Scalars['String']['input'];
+export type QueryTakenDownListingsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
 export type QueryTenantArgs = {
@@ -19977,6 +21171,15 @@ export type QueryWebhookEventSubjectsArgs = {
     productSlug?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root query type */
+export type QueryWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QueryWebhookSubscriptionsArgs = {
+    ownerId?: InputMaybe<Scalars['String']['input']>;
+    ownerType: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryWebhooksArgs = {
     applicationId: Scalars['ID']['input'];
 };
@@ -20298,18 +21501,6 @@ export declare enum RbacChangeType {
     VisibilityRuleRemoved = "VISIBILITY_RULE_REMOVED",
     VisibilityRuleUpdated = "VISIBILITY_RULE_UPDATED"
 }
-/** RBAC configuration key-value pair */
-export type RbacConfig = {
-    __typename?: 'RbacConfig';
-    createdAt: Scalars['DateTime']['output'];
-    description?: Maybe<Scalars['String']['output']>;
-    id: Scalars['ID']['output'];
-    key: Scalars['String']['output'];
-    scopeId: Scalars['String']['output'];
-    updatedAt: Scalars['DateTime']['output'];
-    value: Scalars['String']['output'];
-    valueType: Scalars['String']['output'];
-};
 /** Delivery result for a single recipient within a platform delivery */
 export type RecipientDeliveryResult = {
     __typename?: 'RecipientDeliveryResult';
@@ -20342,7 +21533,25 @@ export type RecipientInput = {
 export type RecordActivityInput = {
     action: Scalars['String']['input'];
     actorId?: InputMaybe<Scalars['String']['input']>;
-    /** Optional idempotency key for backfill/import (audit phase-2). Derive a STABLE key from the source row (e.g. `global_auth_audit:<rowId>`). When set, the write UPSERTs on this key: if a row with the same `dedupeKey` already exists it is returned unchanged (no duplicate, no double-count), so a service can replay ALL of its historical audit rows any number of times and converge to exactly one activity_logs row each — including rows already dual-written in phase-1 (give the dual-write the SAME key so backfill and dual-write converge). When null, behaves exactly as before (plain insert). */
+    /**
+     * `ai_assistant` when an AI assistant session made the change (BOFF-9649). Honoured only from a
+     * service caller relaying a gateway-verified assistant-session marker (the be-sdk tracker); ignored
+     * for any other caller, so a user cannot tag or untag their own rows.
+     */
+    actorOrigin?: InputMaybe<Scalars['String']['input']>;
+    /** Proposal / idempotency key the assistant mutation ran under. Same trust rule as actorOrigin. */
+    assistantCorrelationId?: InputMaybe<Scalars['String']['input']>;
+    /** Relay session (assistant sandbox) that made the change. Same trust rule as actorOrigin. */
+    assistantSessionId?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Optional idempotency key for backfill/import (audit phase-2). Derive a STABLE key from the
+     * source row (e.g. `global_auth_audit:<rowId>`). When set, the write UPSERTs on this key: if a row
+     * with the same `dedupeKey` already exists it is returned unchanged (no duplicate, no double-count),
+     * so a service can replay ALL of its historical audit rows any number of times and converge to
+     * exactly one activity_logs row each — including rows already dual-written in phase-1 (give the
+     * dual-write the SAME key so backfill and dual-write converge). When null, behaves exactly as
+     * before (plain insert).
+     */
     dedupeKey?: InputMaybe<Scalars['String']['input']>;
     description?: InputMaybe<Scalars['String']['input']>;
     ipAddress?: InputMaybe<Scalars['String']['input']>;
@@ -20450,6 +21659,15 @@ export type RecordExploreClickResult = {
     __typename?: 'RecordExploreClickResult';
     recorded: Scalars['Boolean']['output'];
 };
+export type RecordExternalRefundInput = {
+    amount: Scalars['Float']['input'];
+    chargeId: Scalars['ID']['input'];
+    currency: Scalars['String']['input'];
+    externalRef: Scalars['String']['input'];
+    orgId: Scalars['ID']['input'];
+    reason?: InputMaybe<Scalars['String']['input']>;
+    workspaceId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type RecordExternalSettlementInput = {
     /** Settlement amount in whole currency units (must be > 0). */
     amount: Scalars['Float']['input'];
@@ -20504,6 +21722,23 @@ export type RecordProductVisitResult = {
     /** Outcome of the welcome-email side effect on first visit: "SENT" — successfully queued via channel-svc "FAILED" — channel-svc errored or no organization found "SKIPPED" — not the first visit; no email attempted */
     welcomeEmailStatus: Scalars['String']['output'];
 };
+/**
+ * A chargeback event from the payment processor or finance. Recording the same
+ * externalDisputeId and status again is a no-op.
+ */
+export type RecordPublisherChargebackInput = {
+    /** Processor dispute fee, deducted from the publisher only when the dispute is lost. */
+    disputeFee?: InputMaybe<Scalars['Float']['input']>;
+    /** Disputed amount on the order. Defaults to the full order total. */
+    disputedAmount?: InputMaybe<Scalars['Float']['input']>;
+    /** Processor dispute reference (for example Stripe dp_... or a Razorpay dispute id). */
+    externalDisputeId: Scalars['String']['input'];
+    orderId: Scalars['ID']['input'];
+    /** The chargeback was caused by an error on Burdenoff's side and is never charged to the publisher. */
+    platformFault?: InputMaybe<Scalars['Boolean']['input']>;
+    reason?: InputMaybe<Scalars['String']['input']>;
+    status: PublisherChargebackStatus;
+};
 export type RecordSaleInput = {
     applicationId?: InputMaybe<Scalars['ID']['input']>;
     buyerOrgId?: InputMaybe<Scalars['ID']['input']>;
@@ -20720,7 +21955,12 @@ export declare enum RefundStatus {
     Pending = "PENDING",
     Succeeded = "SUCCEEDED"
 }
-/** A seller's real pickup address, to be registered with a shipping carrier (see registerCarrierPickupLocation). `carrier` selects which configured carrier adapter to register it with — carrier-agnostic by design, since more providers than Shiprocket may be added over time. */
+/**
+ * A seller's real pickup address, to be registered with a shipping carrier
+ * (see registerCarrierPickupLocation). `carrier` selects which configured
+ * carrier adapter to register it with — carrier-agnostic by design, since more
+ * providers than Shiprocket may be added over time.
+ */
 export type RegisterCarrierPickupLocationInput = {
     address: Scalars['String']['input'];
     addressLine2?: InputMaybe<Scalars['String']['input']>;
@@ -20730,7 +21970,11 @@ export type RegisterCarrierPickupLocationInput = {
     email: Scalars['String']['input'];
     /** Contact person at this address. */
     name: Scalars['String']['input'];
-    /** The DeveloperOrganization this address is being registered for. Verified via a cross-service call to global-devportal-svc's assertDeveloperOrgAccess before any carrier API call is made. */
+    /**
+     * The DeveloperOrganization this address is being registered for. Verified
+     * via a cross-service call to global-devportal-svc's assertDeveloperOrgAccess
+     * before any carrier API call is made.
+     */
     organizationId: Scalars['ID']['input'];
     phone: Scalars['String']['input'];
     postalCode: Scalars['String']['input'];
@@ -20740,10 +21984,18 @@ export type RegisterProductAssetInput = {
     caption?: InputMaybe<Scalars['String']['input']>;
     fileName?: InputMaybe<Scalars['String']['input']>;
     fileType: ProductAssetType;
-    /** File ID returned from wspace-files-svc's completeUpload mutation. The browser uploads the file directly to files-svc, then calls this mutation to link it to the product. */
+    /**
+     * File ID returned from wspace-files-svc's completeUpload mutation.
+     * The browser uploads the file directly to files-svc, then calls this
+     * mutation to link it to the product.
+     */
     filesSvcId: Scalars['ID']['input'];
     locale?: InputMaybe<Scalars['String']['input']>;
-    /** If true (default), marks previous assets of the same fileType+locale as no longer current. Set to false to keep multiple live copies (e.g. when building a screenshot gallery). */
+    /**
+     * If true (default), marks previous assets of the same fileType+locale as
+     * no longer current. Set to false to keep multiple live copies (e.g. when
+     * building a screenshot gallery).
+     */
     makeCurrent?: InputMaybe<Scalars['Boolean']['input']>;
     mimeType?: InputMaybe<Scalars['String']['input']>;
     orderIndex?: InputMaybe<Scalars['Int']['input']>;
@@ -20787,6 +22039,23 @@ export type RegisterWebhookEventSubjectsInput = {
     /** Mappings to create or update (at most 100 per call). */
     subjects: Array<WebhookEventSubjectInput>;
 };
+/** Input for registerWebhookSubscription */
+export type RegisterWebhookSubscriptionInput = {
+    /** Operator-facing description */
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Whether delivery is active (default true) */
+    enabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Event types to receive; empty = all events for the owner */
+    events: Array<Scalars['String']['input']>;
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['input'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['input'];
+    /** HMAC-SHA256 signing secret (write-only, never returned) */
+    secret: Scalars['String']['input'];
+    /** Delivery URL (HTTPS in production) */
+    url: Scalars['String']['input'];
+};
 export type RejectWaitlistInput = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -20836,18 +22105,23 @@ export type ReplaceApplicationTagsInput = {
     applicationId: Scalars['ID']['input'];
     tagIds: Array<Scalars['ID']['input']>;
 };
-export type ReplaceChannelConnectionTagsInput = {
-    entityId: Scalars['ID']['input'];
-    tagIds: Array<Scalars['ID']['input']>;
-};
-export type ReplaceChannelTagsInput = {
-    entityId: Scalars['ID']['input'];
-    tagIds: Array<Scalars['ID']['input']>;
-};
 export type ReplaceStoreProductTagsInput = {
     entityId: Scalars['ID']['input'];
     tagIds: Array<Scalars['ID']['input']>;
 };
+export type ReportListingInput = {
+    /** What is wrong, up to 2000 characters. */
+    details?: InputMaybe<Scalars['String']['input']>;
+    productId: Scalars['ID']['input'];
+    reason: ListingReportReason;
+};
+/** How a reviewer closes a report. */
+export declare enum ReportResolution {
+    /** The report was valid and the store team acted on it. */
+    Actioned = "ACTIONED",
+    /** No action was needed. */
+    Dismissed = "DISMISSED"
+}
 export type RequestCreditWithdrawalInput = {
     billingAccountId: Scalars['ID']['input'];
     creditAmount: Scalars['Float']['input'];
@@ -20911,6 +22185,20 @@ export type ResolveContextWidgetConversationInput = {
     title?: InputMaybe<Scalars['String']['input']>;
     workspaceId: Scalars['ID']['input'];
 };
+export type ResolveListingReportInput = {
+    id: Scalars['ID']['input'];
+    /** Required note for the record. */
+    note: Scalars['String']['input'];
+    resolution: ReportResolution;
+};
+export type ResolveReviewReportInput = {
+    /** With ACTIONED, hide the reported review from the store. */
+    hideReview?: InputMaybe<Scalars['Boolean']['input']>;
+    id: Scalars['ID']['input'];
+    /** Required note for the record. */
+    note: Scalars['String']['input'];
+    resolution: ReportResolution;
+};
 /** Registered resource with custom permission configurations. Resources are only registered when they have non-default permissions (overrides, visibility rules, or scoped assignments). */
 export type Resource = {
     __typename?: 'Resource';
@@ -20986,9 +22274,17 @@ export type RevenueSummary = {
     totalRefundsCount: Scalars['Int']['output'];
     totalSales: Scalars['Int']['output'];
 };
+/** Lifecycle of a report against a review. */
+export declare enum ReviewReportStatus {
+    Actioned = "ACTIONED",
+    Dismissed = "DISMISSED",
+    Pending = "PENDING"
+}
 export declare enum ReviewStatus {
     Approved = "APPROVED",
     ChangesRequested = "CHANGES_REQUESTED",
+    Flagged = "FLAGGED",
+    Hidden = "HIDDEN",
     InProgress = "IN_PROGRESS",
     Pending = "PENDING",
     Rejected = "REJECTED"
@@ -21604,6 +22900,15 @@ export type SeedFluidgridsUserToursResult = {
     updatedCount: Scalars['Int']['output'];
     workspaceId: Scalars['String']['output'];
 };
+export type SeedHookmoviesUserToursResult = {
+    __typename?: 'SeedHookmoviesUserToursResult';
+    createdCount: Scalars['Int']['output'];
+    productId: Scalars['String']['output'];
+    totalCount: Scalars['Int']['output'];
+    tours: Array<SeededUserTourResult>;
+    updatedCount: Scalars['Int']['output'];
+    workspaceId: Scalars['String']['output'];
+};
 export type SeedIntelWatchtowerUserToursResult = {
     __typename?: 'SeedIntelWatchtowerUserToursResult';
     createdCount: Scalars['Int']['output'];
@@ -21613,6 +22918,24 @@ export type SeedIntelWatchtowerUserToursResult = {
     updatedCount: Scalars['Int']['output'];
     workspaceId: Scalars['String']['output'];
 };
+export type SeedSemanticFedUserToursResult = {
+    __typename?: 'SeedSemanticFedUserToursResult';
+    createdCount: Scalars['Int']['output'];
+    productId: Scalars['String']['output'];
+    totalCount: Scalars['Int']['output'];
+    tours: Array<SeededUserTourResult>;
+    updatedCount: Scalars['Int']['output'];
+    workspaceId: Scalars['String']['output'];
+};
+export type SeedSubscriberbotUserToursResult = {
+    __typename?: 'SeedSubscriberbotUserToursResult';
+    createdCount: Scalars['Int']['output'];
+    productId: Scalars['String']['output'];
+    totalCount: Scalars['Int']['output'];
+    tours: Array<SeededUserTourResult>;
+    updatedCount: Scalars['Int']['output'];
+    workspaceId: Scalars['String']['output'];
+};
 export type SeedTheCulturePostUserToursResult = {
     __typename?: 'SeedTheCulturePostUserToursResult';
     createdCount: Scalars['Int']['output'];
@@ -21666,7 +22989,7 @@ export type SendExploreMessageInput = {
     attachments?: InputMaybe<Array<ExploreAttachmentInput>>;
     /** Omit to start a new conversation. The result's `conversation.token` is the secret to send back on every following turn. */
     conversationToken?: InputMaybe<Scalars['String']['input']>;
-    /** BCP-47 locale of the page (e.g. "en-US"). */
+    /** BCP-47 locale of the page (e.g. "en-US"). Only the language is kept, and only if it is one of `en` `zh` `hi` `es` `ar` `ta` (any case, with or without region or script subtags such as `en-US` or `zh-Hans-CN`). Anything else is treated as not sent — never an error, so a page with an unexpected locale still gets its answer. */
     locale?: InputMaybe<Scalars['String']['input']>;
     /** The visitor's question. */
     message: Scalars['String']['input'];
@@ -21676,6 +22999,8 @@ export type SendExploreMessageInput = {
     productSlug?: InputMaybe<Scalars['String']['input']>;
     /** reCAPTCHA v3 token — required only when `exploreCatalog.captchaRequired`. */
     recaptchaToken?: InputMaybe<Scalars['String']['input']>;
+    /** Where the visitor asked from. Omit (or send CHAT) for an ordinary chat turn. AVATAR on the first question of a new conversation asks the agent for an answer short enough to be read aloud. On a later turn it does the same only where the deployment enables follow-ups, and is ignored otherwise. It is always ignored on a turn with attachments, and while the deployment has forwarding switched off. */
+    surface?: InputMaybe<ExploreSurface>;
 };
 export type SendExploreMessageResult = {
     __typename?: 'SendExploreMessageResult';
@@ -21711,6 +23036,11 @@ export type SendRoundMessageToCandidateInput = {
     message: Scalars['String']['input'];
     roundId: Scalars['ID']['input'];
 };
+export type ServiceEarningReversal = {
+    __typename?: 'ServiceEarningReversal';
+    entry: EarningsEntry;
+    outcome: EarningReversalOutcome;
+};
 /** Consolidated earnings + payout-request status for a billing account, optionally scoped to a single earnings owner. Lets a delegating service poll the outcome of money-movement it handed to billing. */
 export type ServicePayoutStatus = {
     __typename?: 'ServicePayoutStatus';
@@ -21744,6 +23074,37 @@ export type ServiceRecordEarningInput = {
     sourceSubcategory?: InputMaybe<Scalars['String']['input']>;
     unitType?: InputMaybe<EarningUnitType>;
 };
+export type ServiceRefundPaymentInput = {
+    /** Amount to refund in whole currency units. Partial refunds are allowed; the sum of a payment's refunds can never exceed the captured amount. */
+    amount: Scalars['Float']['input'];
+    /** Billing account the payment was charged on (through its BillingOrder or subscription). */
+    billingAccountId: Scalars['ID']['input'];
+    /** Optional; must match the payment currency when given. */
+    currency?: InputMaybe<Scalars['String']['input']>;
+    metadata?: InputMaybe<Scalars['JSON']['input']>;
+    /** Billing Payment id (not the provider's payment id). */
+    paymentId: Scalars['ID']['input'];
+    reason: Scalars['String']['input'];
+    /** Caller-owned idempotency key (e.g. "coolandlovely:refund:<orderId>:<brandId>"), unique per billing account. A replay returns the existing refund; a failed one is retried. */
+    sourceIdempotencyKey: Scalars['String']['input'];
+};
+export type ServiceRefundPaymentResult = {
+    __typename?: 'ServiceRefundPaymentResult';
+    /** True when the key already had a refund and this call did not process it again. */
+    alreadyProcessed: Scalars['Boolean']['output'];
+    amount: Scalars['Float']['output'];
+    currency: Scalars['String']['output'];
+    error?: Maybe<Scalars['String']['output']>;
+    gatewayRefundId?: Maybe<Scalars['String']['output']>;
+    refundId: Scalars['ID']['output'];
+    /** What is still refundable on the payment after this call. */
+    refundableRemaining: Scalars['Float']['output'];
+    /** Sum of the payment's pending, processing and completed refunds after this call. */
+    refundedTotal: Scalars['Float']['output'];
+    status: RefundRecordStatus;
+    /** True when the provider accepted the refund (now or on an earlier call with the same key). */
+    success: Scalars['Boolean']['output'];
+};
 export type ServiceRequestPayoutInput = {
     amount: Scalars['Float']['input'];
     /** Explicit billing account the payout is drawn from. */
@@ -21772,6 +23133,14 @@ export type ServiceResolvePayoutAccountInput = {
     /** Destination type for a newly-created placeholder account (defaults to BANK_ACCOUNT). */
     type?: InputMaybe<PayoutAccountType>;
 };
+export type ServiceReverseEarningInput = {
+    /** Billing account the earning was recorded on. */
+    billingAccountId: Scalars['ID']['input'];
+    /** Why the earning is reversed (e.g. "Order COO-20261024-7F3A9C refunded"). */
+    reason: Scalars['String']['input'];
+    /** The sourceIdempotencyKey the earning was recorded with (serviceRecordEarning). */
+    sourceIdempotencyKey: Scalars['String']['input'];
+};
 export type ServiceSyncPayoutStatusInput = {
     externalReference?: InputMaybe<Scalars['String']['input']>;
     failureReason?: InputMaybe<Scalars['String']['input']>;
@@ -21788,21 +23157,30 @@ export type ServiceUpsertExternalListingInput = {
     /** ISO 4217 currency code, upper case. */
     currency: Scalars['String']['input'];
     description?: InputMaybe<Scalars['String']['input']>;
-    /** The item's id in the calling service. Together with the caller's service identity it identifies the listing. */
+    /**
+     * The item's id in the calling service. Together with the caller's service
+     * identity it identifies the listing.
+     */
     externalId: Scalars['String']['input'];
     /** Absolute https URL of the item's page in the owning product. */
     externalUrl: Scalars['String']['input'];
     metadata?: InputMaybe<Scalars['JSON']['input']>;
     name: Scalars['String']['input'];
     price: Scalars['Float']['input'];
-    /** Platform product key of the caller (for example "coolandlovely"). Used as the listing's compatible product and as its slug prefix. */
+    /**
+     * Platform product key of the caller (for example "coolandlovely"). Used as the
+     * listing's compatible product and as its slug prefix.
+     */
     productKey: Scalars['String']['input'];
     /** Display name for the caller's publisher profile, created on its first listing. */
     publisherName: Scalars['String']['input'];
     /** PUBLISHED (shown in discovery), UNLISTED (kept but hidden) or ARCHIVED (taken down). */
     status: ProductStatus;
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
-    /** A physical product type (MERCHANDISE, HARDWARE, ACCESSORY, BOOK, EQUIPMENT, APPAREL, COLLECTIBLE or CONSUMABLE). */
+    /**
+     * A physical product type (MERCHANDISE, HARDWARE, ACCESSORY, BOOK, EQUIPMENT,
+     * APPAREL, COLLECTIBLE or CONSUMABLE).
+     */
     type: ProductType;
 };
 /** An active user session (login instance) */
@@ -21860,13 +23238,26 @@ export type SetRoleDefaultPermissionInput = {
     resourceType: Scalars['String']['input'];
     roleId: Scalars['ID']['input'];
 };
-/** Input for setting the shipping address + method on a store order (physical orders). The client sends IDs ONLY. The backend recomputes the authoritative shipping cost server-side from the order's own line-item weights (same quote engine as estimateOrderShipping) — a client-supplied cost is never trusted. */
+/**
+ * Input for setting the shipping address + method on a store order (physical orders).
+ *
+ * The client sends IDs ONLY. The backend recomputes the authoritative shipping cost
+ * server-side from the order's own line-item weights (same quote engine as
+ * estimateOrderShipping) — a client-supplied cost is never trusted.
+ */
 export type SetStoreOrderShippingInput = {
     /** Store order to attach shipping to */
     orderId: Scalars['ID']['input'];
-    /** Selected ShippingAddress ID (from myShippingAddresses or a freshly createdShippingAddress). Must belong to the order's buyer. */
+    /**
+     * Selected ShippingAddress ID (from myShippingAddresses or a freshly
+     * createdShippingAddress). Must belong to the order's buyer.
+     */
     shippingAddressId: Scalars['ID']['input'];
-    /** Selected ShippingMethod ID (from the shippingMethods query). NOTE: a ShippingMethod, NOT a ShippingRate — only ShippingMethod is wired to the quote engine. */
+    /**
+     * Selected ShippingMethod ID (from the shippingMethods query).
+     * NOTE: a ShippingMethod, NOT a ShippingRate — only ShippingMethod is wired to
+     * the quote engine.
+     */
     shippingMethodId: Scalars['ID']['input'];
 };
 export type SetUserFeatureFlagPreferenceInput = {
@@ -22046,6 +23437,8 @@ export type SideloadAppInput = {
     workspaceType?: InputMaybe<Scalars['String']['input']>;
 };
 export type SignInInput = {
+    /** Optional per-login UUIDv4 correlation nonce. This is not a credential or authorization grant. */
+    clientSessionNonce?: InputMaybe<Scalars['ID']['input']>;
     email?: InputMaybe<Scalars['String']['input']>;
     password: Scalars['String']['input'];
     recaptchaToken?: InputMaybe<Scalars['String']['input']>;
@@ -22225,6 +23618,18 @@ export type SpendCreditsInput = {
     /** For plan upgrades - the subscription ID to upgrade from. Old quotas will be moved to the new subscription. */
     upgradeFromSubscriptionId?: InputMaybe<Scalars['String']['input']>;
 };
+/**
+ * Details for starting automatic payout onboarding of a RAZORPAY_X or
+ * STRIPE_CONNECT payout method.
+ */
+export type StartMyPublisherPayoutOnboardingInput = {
+    /** RAZORPAY_X only: the full bank account number, ending in the four digits given when the method was added. It is sent to RazorpayX for fund-account validation and is never stored. */
+    accountNumber?: InputMaybe<Scalars['String']['input']>;
+    /** Contact email the payout processor uses for the account. */
+    contactEmail: Scalars['String']['input'];
+    /** Contact phone number (RazorpayX), 8 to 15 digits with an optional leading +. */
+    contactPhone?: InputMaybe<Scalars['String']['input']>;
+};
 /** Resolved storage cap (in bytes) for a billing account. Returned by `getStorageLimitForOrg`. Source order, first-hit wins: 1) plan.storageBytesLimit when set 2) plan-attached quota named "storage_bytes" (limits.value) 3) platform default: 50MB (free / no active sub) or 5GB (paid plan) */
 export type StorageLimit = {
     __typename?: 'StorageLimit';
@@ -22303,7 +23708,10 @@ export type StoreFacets = {
     /** Available types with counts */
     types: Array<FacetCount>;
 };
-/** Unified filter input for browsing/searching store products. All filters combine with AND logic - search is treated as a filter. */
+/**
+ * Unified filter input for browsing/searching store products.
+ * All filters combine with AND logic - search is treated as a filter.
+ */
 export type StoreFilterInput = {
     /** Filter by author name (partial match) */
     authorName?: InputMaybe<Scalars['String']['input']>;
@@ -22313,7 +23721,10 @@ export type StoreFilterInput = {
     categories?: InputMaybe<Array<Scalars['String']['input']>>;
     /** Filter by exact category match (e.g., "Customer Support", "Notification") */
     category?: InputMaybe<Scalars['String']['input']>;
-    /** Filter by compatible product (e.g., "workspaces", "fluidgrids", "bigconsole") Products must be compatible with this product. */
+    /**
+     * Filter by compatible product (e.g., "workspaces", "fluidgrids", "bigconsole")
+     * Products must be compatible with this product.
+     */
     compatibleWith?: InputMaybe<Scalars['String']['input']>;
     /** Filter only featured products */
     featured?: InputMaybe<Scalars['Boolean']['input']>;
@@ -22343,11 +23754,24 @@ export type StoreFilterInput = {
     publisherId?: InputMaybe<Scalars['String']['input']>;
     /** Filter products that require shipping */
     requiresShipping?: InputMaybe<Scalars['Boolean']['input']>;
-    /** Full-text search query. Searches across: - name (highest priority) - description - tags - authorName, category (lowest priority) Uses PostgreSQL tsvector with weighted ranking. */
+    /**
+     * Full-text search query. Searches across:
+     * - name (highest priority)
+     * - description
+     * - tags
+     * - authorName, category (lowest priority)
+     * Uses PostgreSQL tsvector with weighted ranking.
+     */
     search?: InputMaybe<Scalars['String']['input']>;
     /** Filter by product status (defaults to PUBLISHED for consumer queries) */
     status?: InputMaybe<ProductStatus>;
-    /** Filter by type-specific subtype. Examples: - For AGENT: "task_automation", "conversational", "research" - For NODE: "action", "trigger", "integration", "ai" - For WIDGET: "chart", "metric", "table", "map" */
+    /**
+     * Filter by type-specific subtype.
+     * Examples:
+     * - For AGENT: "task_automation", "conversational", "research"
+     * - For NODE: "action", "trigger", "integration", "ai"
+     * - For WIDGET: "chart", "metric", "table", "map"
+     */
     subType?: InputMaybe<Scalars['String']['input']>;
     /** Filter by multiple subtypes (OR within this filter) */
     subTypes?: InputMaybe<Array<Scalars['String']['input']>>;
@@ -22364,6 +23788,23 @@ export type StoreFilterInput = {
     /** Filter by multiple integrations - must use ALL (AND logic) */
     usesIntegrations?: InputMaybe<Array<Scalars['String']['input']>>;
 };
+/** Counters for the store reviewer console. */
+export type StoreGovernanceStats = {
+    __typename?: 'StoreGovernanceStats';
+    oldestPendingSubmittedAt?: Maybe<Scalars['DateTime']['output']>;
+    openListingReports: Scalars['Int']['output'];
+    /** Pending review reports filed as rating disputes. */
+    openRatingDisputes: Scalars['Int']['output'];
+    openReviewReports: Scalars['Int']['output'];
+    overdueAppeals: Scalars['Int']['output'];
+    /** Listings waiting for review past their due date. */
+    overdueSubmissions: Scalars['Int']['output'];
+    pendingAppeals: Scalars['Int']['output'];
+    /** Listings waiting for review. */
+    pendingSubmissions: Scalars['Int']['output'];
+    /** Listings currently taken down. */
+    takenDownListings: Scalars['Int']['output'];
+};
 export declare enum StoreInstallationStatus {
     Active = "ACTIVE",
     Failed = "FAILED",
@@ -22372,6 +23813,12 @@ export declare enum StoreInstallationStatus {
     Pending = "PENDING",
     Uninstalled = "UNINSTALLED"
 }
+export type StoreInstalledNodeRuntime = {
+    __typename?: 'StoreInstalledNodeRuntime';
+    endpointUrl: Scalars['String']['output'];
+    nodeType: Scalars['String']['output'];
+    nodeVersion?: Maybe<Scalars['String']['output']>;
+};
 /** StoreItem entity reference. The actual StoreItem is defined in the Store service. In Federation 2 setup, this will be marked with @key directive. For now, this is a reference type that returns the itemId for the Gateway to resolve. */
 export type StoreItem = {
     __typename?: 'StoreItem';
@@ -22386,7 +23833,8 @@ export type StoreLineItemInput = {
      */
     itemType?: InputMaybe<Scalars['String']['input']>;
     /**
-     * Product name is retained only for backwards-compatible clients. The store resolves the authoritative name from productId and variantId.
+     * Product name is retained only for backwards-compatible clients. The store
+     * resolves the authoritative name from productId and variantId.
      * @deprecated The server resolves product and variant names
      */
     name?: InputMaybe<Scalars['String']['input']>;
@@ -22425,7 +23873,11 @@ export type StoreOrder = {
     /** Context JSON (must include workspace_id) */
     context: Scalars['JSON']['output'];
     createdAt: Scalars['DateTime']['output'];
-    /** Currency captured when the store order was created. Billing may still convert at payment time, but this is the canonical order currency for checkout display and reconciliation. */
+    /**
+     * Currency captured when the store order was created.
+     * Billing may still convert at payment time, but this is the canonical
+     * order currency for checkout display and reconciliation.
+     */
     currency: Scalars['String']['output'];
     /** Fulfillment tracking for physical orders */
     fulfillment?: Maybe<OrderFulfillment>;
@@ -22443,7 +23895,11 @@ export type StoreOrder = {
     shippingAddress?: Maybe<ShippingAddress>;
     /** Selected shipping address ID (physical orders) */
     shippingAddressId?: Maybe<Scalars['ID']['output']>;
-    /** Server-computed shipping cost, in the order currency. SEPARATE from `total` (which is product-cost-only); billing must add this to the payable amount. */
+    /**
+     * Server-computed shipping cost, in the order currency.
+     * SEPARATE from `total` (which is product-cost-only); billing must add this to
+     * the payable amount.
+     */
     shippingCost?: Maybe<Scalars['Float']['output']>;
     /** Currency of the shipping cost quote */
     shippingCurrency?: Maybe<Scalars['String']['output']>;
@@ -22451,10 +23907,17 @@ export type StoreOrder = {
     shippingMethod?: Maybe<ShippingMethod>;
     /** Selected shipping method ID (physical orders) */
     shippingMethodId?: Maybe<Scalars['ID']['output']>;
-    /** Immutable snapshot frozen at shipping-selection time: { address, method, cost, currency, quotedAt }. Used by order/confirmation pages so a later edit/delete of the ShippingAddress cannot alter the ship-to. */
+    /**
+     * Immutable snapshot frozen at shipping-selection time:
+     * { address, method, cost, currency, quotedAt }. Used by order/confirmation
+     * pages so a later edit/delete of the ShippingAddress cannot alter the ship-to.
+     */
     shippingSnapshot?: Maybe<Scalars['JSON']['output']>;
     status: OrderStatus;
-    /** Total product cost (sum of line items) Note: Currency, tax, and final billing amount handled by billing service */
+    /**
+     * Total product cost (sum of line items)
+     * Note: Currency, tax, and final billing amount handled by billing service
+     */
     total: Scalars['Float']['output'];
     transaction?: Maybe<Transaction>;
     /** Transaction ID from billing service (set after payment) */
@@ -22489,7 +23952,10 @@ export type StoreProduct = {
     /** Brand name (physical products) */
     brand?: Maybe<Scalars['String']['output']>;
     category?: Maybe<Scalars['String']['output']>;
-    /** Compatible products (from manifest.compatibility.products) Examples: ["fluidgrids", "workspaces", "bigconsole", "botlit"] */
+    /**
+     * Compatible products (from manifest.compatibility.products)
+     * Examples: ["fluidgrids", "workspaces", "bigconsole", "botlit"]
+     */
     compatibleProducts: Array<Scalars['String']['output']>;
     content?: Maybe<Scalars['JSON']['output']>;
     context?: Maybe<Scalars['JSON']['output']>;
@@ -22505,19 +23971,37 @@ export type StoreProduct = {
     entitlements: Array<ProductEntitlement>;
     /** The item's id in the owning product backend (only set with externalService). */
     externalId?: Maybe<Scalars['String']['output']>;
-    /** Service identity of the product backend that owns this listing when the item is sold by that product's own checkout (for example wspace-coolandlovely-svc). Null for products the store sells itself. Such a listing cannot be added to a store cart or ordered here; send buyers to externalUrl instead. */
+    /**
+     * Service identity of the product backend that owns this listing when the item
+     * is sold by that product's own checkout (for example wspace-coolandlovely-svc).
+     * Null for products the store sells itself. Such a listing cannot be added to a
+     * store cart or ordered here; send buyers to externalUrl instead.
+     */
     externalService?: Maybe<Scalars['String']['output']>;
-    /** Page in the owning product where the item can be viewed and bought (only set with externalService). */
+    /**
+     * Page in the owning product where the item can be viewed and bought (only set
+     * with externalService).
+     */
     externalUrl?: Maybe<Scalars['String']['output']>;
     featured: Scalars['Boolean']['output'];
     /** Product height (physical products) */
     height?: Maybe<Scalars['Float']['output']>;
     icon?: Maybe<Scalars['String']['output']>;
     id: Scalars['ID']['output'];
-    /** Integration dependencies (from manifest.dependencies.integrations) Examples: ["slack", "sendgrid", "zendesk", "salesforce"] */
+    /**
+     * Integration dependencies (from manifest.dependencies.integrations)
+     * Examples: ["slack", "sendgrid", "zendesk", "salesforce"]
+     */
     integrationDeps: Array<Scalars['String']['output']>;
-    /** Whether this product is already purchased by the current billing account. Computed field based on billingAccountId context. */
+    /**
+     * Whether this product is already purchased by the current billing account.
+     * Computed field based on billingAccountId context.
+     */
     isPurchased?: Maybe<Scalars['Boolean']['output']>;
+    /** True while the submission waits for review past reviewDueAt. */
+    isReviewOverdue: Scalars['Boolean']['output'];
+    /** True while the store team has this listing taken down. */
+    isTakenDown: Scalars['Boolean']['output'];
     /** Product length (physical products) */
     length?: Maybe<Scalars['Float']['output']>;
     /** License type (from manifest.license, e.g., "MIT", "Apache-2.0") */
@@ -22544,18 +24028,32 @@ export type StoreProduct = {
     publishedAt?: Maybe<Scalars['DateTime']['output']>;
     publisher?: Maybe<Publisher>;
     publisherId: Scalars['String']['output'];
-    /** Number of PHYSICAL orders this product has been fulfilled in at least once — incremented alongside OrderFulfillment's first creation for the order (see OrderService.ensurePhysicalFulfillmentRecord), the physical counterpart to how `downloads` counts first-install events for digital products. Always 0 for DIGITAL nature. */
+    /**
+     * Number of PHYSICAL orders this product has been fulfilled in at least
+     * once — incremented alongside OrderFulfillment's first creation for the
+     * order (see OrderService.ensurePhysicalFulfillmentRecord), the physical
+     * counterpart to how `downloads` counts first-install events for digital
+     * products. Always 0 for DIGITAL nature.
+     */
     purchaseCount: Scalars['Int']['output'];
     rating?: Maybe<Scalars['Float']['output']>;
     rejectedReason?: Maybe<Scalars['String']['output']>;
     repositoryUrl?: Maybe<Scalars['String']['output']>;
-    /** Required permissions (from manifest.permissions) Examples: ["network.outbound", "database.write", "notification.email"] */
+    /**
+     * Required permissions (from manifest.permissions)
+     * Examples: ["network.outbound", "database.write", "notification.email"]
+     */
     requiredPermissions: Array<Scalars['String']['output']>;
     /** Whether this product requires shipping (physical products) */
     requiresShipping?: Maybe<Scalars['Boolean']['output']>;
     /** Return policy details (physical products) */
     returnPolicy?: Maybe<Scalars['String']['output']>;
     reviewCount: Scalars['Int']['output'];
+    /**
+     * When a reviewer is due to have decided this submission: five business days
+     * (Monday to Friday, UTC) after it was submitted. Null if never submitted.
+     */
+    reviewDueAt?: Maybe<Scalars['DateTime']['output']>;
     reviewNotes?: Maybe<Scalars['String']['output']>;
     reviewedAt?: Maybe<Scalars['DateTime']['output']>;
     reviewedBy?: Maybe<Scalars['String']['output']>;
@@ -22568,7 +24066,13 @@ export type StoreProduct = {
     /** Current stock quantity (physical products) */
     stockQuantity?: Maybe<Scalars['Int']['output']>;
     storeId?: Maybe<Scalars['ID']['output']>;
-    /** Type-specific subtype from manifest.json. Examples: - Agent: task_automation, conversational, research, code_assistant - Node: action, transform, trigger, logic, integration, data, notification, ai - Widget: chart, metric, table, map, form, text, custom */
+    /**
+     * Type-specific subtype from manifest.json.
+     * Examples:
+     * - Agent: task_automation, conversational, research, code_assistant
+     * - Node: action, transform, trigger, logic, integration, data, notification, ai
+     * - Widget: chart, metric, table, map, form, text, custom
+     */
     subType?: Maybe<Scalars['String']['output']>;
     submittedAt?: Maybe<Scalars['DateTime']['output']>;
     submittedBy?: Maybe<Scalars['String']['output']>;
@@ -22576,6 +24080,11 @@ export type StoreProduct = {
     /** Structured tag assignments via wspace-tags-svc */
     tagAssignments: Array<StoreProductTagAssignment>;
     tags: Array<Scalars['String']['output']>;
+    /**
+     * Takedown details for store admins and the listing's publisher; null for
+     * everyone else and when the listing is not taken down.
+     */
+    takedown?: Maybe<ListingTakedown>;
     /** Whether to track inventory levels (physical products) */
     trackInventory?: Maybe<Scalars['Boolean']['output']>;
     type: ProductType;
@@ -22592,6 +24101,11 @@ export type StoreProduct = {
     weightUnit?: Maybe<WeightUnit>;
     /** Product width (physical products) */
     width?: Maybe<Scalars['Float']['output']>;
+    /**
+     * For a WORKFLOW template: its nodes, required inputs and credentials and the
+     * cleaning report recorded at submission. Null for other products.
+     */
+    workflowTemplatePreview?: Maybe<WorkflowTemplatePreview>;
     zipFileUrl?: Maybe<Scalars['String']['output']>;
 };
 /** Input for fetching store product details */
@@ -22814,6 +24328,8 @@ export type SubmitPublisherVerificationInput = {
     documents: Array<PublisherVerificationDocumentInput>;
     legalName: Scalars['String']['input'];
     supportUrl?: InputMaybe<Scalars['String']['input']>;
+    /** Tax form type that goes with taxId (for example PAN, GSTIN, W-9, W-8BEN). */
+    taxFormType?: InputMaybe<Scalars['String']['input']>;
     taxId: Scalars['String']['input'];
     websiteUrl?: InputMaybe<Scalars['String']['input']>;
 };
@@ -22823,6 +24339,52 @@ export type SubmitSatisfactionSurveyInput = {
     rating: Scalars['Int']['input'];
     surveyId: Scalars['ID']['input'];
 };
+/** Publish a workspace workflow to the public store as a community template. */
+export type SubmitWorkflowTemplateInput = {
+    /**
+     * Author name shown on the template. Required for your first template, when it
+     * also names your publisher profile; defaults to your publisher name afterwards.
+     */
+    authorName?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Store category: automation, integration, data-processing, ai-ml,
+     * communication, devops, marketing, sales, support, productivity or finance.
+     */
+    category: Scalars['String']['input'];
+    /**
+     * The workflow definition (definitionJson) to publish. Connection bindings,
+     * pinned run data and literal secrets are removed before it is stored.
+     */
+    definitionJson: Scalars['JSON']['input'];
+    /** One-line summary shown on the template card (at most 500 characters). */
+    description: Scalars['String']['input'];
+    /** easy, medium or hard. */
+    difficultyLevel?: InputMaybe<Scalars['String']['input']>;
+    /** Estimated minutes to set the template up (1 to 1440). */
+    estimatedTimeMinutes?: InputMaybe<Scalars['Int']['input']>;
+    /** Iconify icon name, for example mdi:robot. */
+    icon?: InputMaybe<Scalars['String']['input']>;
+    /** Longer description (markdown) shown on the template page. */
+    longDescription?: InputMaybe<Scalars['String']['input']>;
+    /** Template name shown in the store (at most 120 characters). */
+    name: Scalars['String']['input'];
+    /** A note for the store reviewer. */
+    notes?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Resubmit one of your own templates instead of creating a new one. A DRAFT,
+     * REJECTED or UNLISTED template is replaced and goes back into review. A
+     * PUBLISHED template stays listed unchanged: the submission is kept as its
+     * pending revision and replaces the live version only when a reviewer approves
+     * it. Either way the template keeps its id and slug and its version goes up by one.
+     */
+    productId?: InputMaybe<Scalars['ID']['input']>;
+    /** Workflow key the template was published from (lineage). */
+    sourceWorkflowKey?: InputMaybe<Scalars['String']['input']>;
+    /** Workflow version the template was published from (lineage). */
+    sourceWorkflowVersion?: InputMaybe<Scalars['String']['input']>;
+    /** Up to 10 search tags. */
+    tags?: InputMaybe<Array<Scalars['String']['input']>>;
+};
 export type Subprocessor = {
     __typename?: 'Subprocessor';
     activatedAt?: Maybe<Scalars['DateTime']['output']>;
@@ -22955,7 +24517,11 @@ export type Subscription = {
     /** Emits the deleted feature-flag id so clients can drop it from their cache. */
     featureFlagDeleted: Scalars['ID']['output'];
     importJobProgress: ImportJobProgressEvent;
-    /** Subscribe to app installation status changes for a workspace. TODO(BOFF-2658): wspace scope on a global svc subgraph — this subscription conceptually belongs on the workspace gateway; flagged for follow-up. */
+    /**
+     * Subscribe to app installation status changes for a workspace.
+     * TODO(BOFF-2658): wspace scope on a global svc subgraph — this subscription
+     * conceptually belongs on the workspace gateway; flagged for follow-up.
+     */
     installationStatusUpdated?: Maybe<InstallationStatusUpdatedEvent>;
     jobStatusUpdated: JobStatusUpdate;
     /** Notifies clients when a keyboard shortcut is created, updated, or toggled. Subscribers can pass `productId` to scope the stream to a single product. */
@@ -23291,6 +24857,19 @@ export type SupportContextInput = {
     userId?: InputMaybe<Scalars['ID']['input']>;
     workspaceId?: InputMaybe<Scalars['ID']['input']>;
 };
+/** A knowledge row a reply draft was built from. */
+export type SupportDraftCitation = {
+    __typename?: 'SupportDraftCitation';
+    id: Scalars['ID']['output'];
+    kind: SupportDraftCitationKind;
+    score: Scalars['Float']['output'];
+    title: Scalars['String']['output'];
+};
+export declare enum SupportDraftCitationKind {
+    CannedResponse = "CANNED_RESPONSE",
+    Faq = "FAQ",
+    KnowledgeBaseArticle = "KNOWLEDGE_BASE_ARTICLE"
+}
 export type SupportEraseResult = {
     __typename?: 'SupportEraseResult';
     anonymised: Scalars['Int']['output'];
@@ -23300,13 +24879,6 @@ export type SupportEraseResult = {
     retainedForLegalReason?: Maybe<Scalars['String']['output']>;
     service: Scalars['String']['output'];
 };
-export declare enum SupportExportFormat {
-    Csv = "CSV",
-    Json = "JSON",
-    Po = "PO",
-    Xliff = "XLIFF",
-    Xlsx = "XLSX"
-}
 export type SupportMessage = {
     __typename?: 'SupportMessage';
     attachmentCount: Scalars['Int']['output'];
@@ -23317,7 +24889,15 @@ export type SupportMessage = {
     /** Contextual IDs for filtering and scoping (workspaceId, userId, projectId, etc.) */
     context?: Maybe<SupportContext>;
     createdAt: Scalars['DateTime']['output'];
-    id: Scalars['ID']['output'];
+    /** The knowledge-base articles, FAQs and canned responses a draft was built from. Empty for every message that is not a draft. */
+    draftCitations: Array<SupportDraftCitation>;
+    /** When the draft was sent or discarded. */
+    draftResolvedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** The agent reply that was sent from this draft, once sent. */
+    draftSentMessageId?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** True for a reply drafted from the knowledge base that waits for an agent (BOFF-3646). Drafts are always internal and are never sent on their own. */
+    isDraft: Scalars['Boolean']['output'];
     isInternal: Scalars['Boolean']['output'];
     message: Scalars['String']['output'];
     ticket: SupportTicket;
@@ -23366,6 +24946,8 @@ export type SupportTicket = {
     metadata?: Maybe<Scalars['JSON']['output']>;
     priority: SupportTicketPriority;
     reopenedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** The open reply draft for this ticket, if any. Support staff only. */
+    replyDraft?: Maybe<SupportMessage>;
     resolutionDue?: Maybe<Scalars['DateTime']['output']>;
     resolvedAt?: Maybe<Scalars['DateTime']['output']>;
     slaBreachStatus: SlaBreachStatus;
@@ -23381,6 +24963,8 @@ export type SupportTicket = {
     tenantId?: Maybe<Scalars['String']['output']>;
     ticketCategory?: Maybe<TicketCategory>;
     ticketNumber: Scalars['String']['output'];
+    /** The triage engine's latest decision for this ticket, with its evidence (BOFF-3646). Null when the ticket was never triaged, and always null for viewers who cannot read internal notes — the evidence names other tickets. */
+    triageDecision?: Maybe<SupportTriageDecision>;
     updatedAt: Scalars['DateTime']['output'];
     user: User;
     userId: Scalars['String']['output'];
@@ -23431,6 +25015,99 @@ export declare enum SupportTicketStatus {
     Resolved = "RESOLVED",
     WaitingCustomer = "WAITING_CUSTOMER"
 }
+/** An agent the engine suggests for the ticket. A suggestion only: triage never assigns. */
+export type SupportTriageAssigneeSuggestion = {
+    __typename?: 'SupportTriageAssigneeSuggestion';
+    agentProfileId: Scalars['ID']['output'];
+    /** Current tickets divided by the agent's ticket capacity. */
+    load: Scalars['Float']['output'];
+    /** Agent skills that matched the ticket's category and tags. */
+    matchedSkills: Array<Scalars['String']['output']>;
+    userId: Scalars['String']['output'];
+};
+/** One triage decision, with what it replaced so a person can see and undo it. The engine only fills an empty category and only raises a priority. */
+export type SupportTriageDecision = {
+    __typename?: 'SupportTriageDecision';
+    category: SupportTicketCategory;
+    /** True when triage set the category. */
+    categoryApplied: Scalars['Boolean']['output'];
+    /** Share of the evidence weight behind the proposed category (0–1). */
+    categoryConfidence: Scalars['Float']['output'];
+    /** Category the ticket has after triage. */
+    categoryId?: Maybe<Scalars['String']['output']>;
+    decidedAt: Scalars['DateTime']['output'];
+    /** Actor who ran it; system:support-triage for automatic runs. */
+    decidedBy: Scalars['String']['output'];
+    /** Engine name and version that made the decision. */
+    engine: Scalars['String']['output'];
+    evidence: Array<SupportTriageEvidence>;
+    /** Plain-language reasons for anything the engine left alone. */
+    notes: Array<Scalars['String']['output']>;
+    previousCategory: SupportTicketCategory;
+    previousCategoryId?: Maybe<Scalars['String']['output']>;
+    previousPriority: SupportTicketPriority;
+    previousSlaPolicyId?: Maybe<Scalars['String']['output']>;
+    priority: SupportTicketPriority;
+    /** Phrases and similar-ticket votes that set the priority. */
+    prioritySignals: Array<Scalars['String']['output']>;
+    /** Category the evidence pointed to, applied or not. */
+    proposedCategoryId?: Maybe<Scalars['String']['output']>;
+    /** True when triage changed the SLA policy. */
+    slaApplied: Scalars['Boolean']['output'];
+    slaPolicyId?: Maybe<Scalars['String']['output']>;
+    suggestedAssignee?: Maybe<SupportTriageAssigneeSuggestion>;
+    trigger: SupportTriageTrigger;
+};
+/** The engine replayed over recent tickets people categorised and resolved, using only older tickets as evidence for each. */
+export type SupportTriageEvaluation = {
+    __typename?: 'SupportTriageEvaluation';
+    cases: Array<SupportTriageEvaluationCase>;
+    /** Share of cases where the engine would apply a category. */
+    categoryCoverage: Scalars['Float']['output'];
+    /** Share of applied categories that match the person's choice. */
+    categoryPrecision: Scalars['Float']['output'];
+    correctCount: Scalars['Int']['output'];
+    decidedCount: Scalars['Int']['output'];
+    engine: Scalars['String']['output'];
+    /** Share of cases where the engine's priority matches the final priority. */
+    priorityAgreement: Scalars['Float']['output'];
+    sampleSize: Scalars['Int']['output'];
+};
+/** One replayed ticket in a triage evaluation. */
+export type SupportTriageEvaluationCase = {
+    __typename?: 'SupportTriageEvaluationCase';
+    confidence: Scalars['Float']['output'];
+    correct: Scalars['Boolean']['output'];
+    decided: Scalars['Boolean']['output'];
+    /** The category a person gave the ticket. */
+    expectedCategoryId: Scalars['String']['output'];
+    expectedPriority: SupportTicketPriority;
+    /** The category the engine would have applied, or null when it would abstain. */
+    predictedCategoryId?: Maybe<Scalars['String']['output']>;
+    predictedPriority: SupportTicketPriority;
+    ticketId: Scalars['ID']['output'];
+    ticketNumber: Scalars['String']['output'];
+};
+/** A row the triage engine weighed: a similar resolved ticket or a published knowledge-base article. */
+export type SupportTriageEvidence = {
+    __typename?: 'SupportTriageEvidence';
+    id: Scalars['ID']['output'];
+    kind: SupportTriageEvidenceKind;
+    /** Ticket number for tickets, title for articles. */
+    label: Scalars['String']['output'];
+    /** Full-text relevance score (Postgres ts_rank). */
+    score: Scalars['Float']['output'];
+};
+export declare enum SupportTriageEvidenceKind {
+    KnowledgeBaseArticle = "KNOWLEDGE_BASE_ARTICLE",
+    Ticket = "TICKET"
+}
+export declare enum SupportTriageTrigger {
+    /** Run on demand by a support agent. */
+    Manual = "MANUAL",
+    /** Run automatically when the ticket was created. */
+    TicketCreated = "TICKET_CREATED"
+}
 export type SuppressIdentifierInput = {
     channel: SuppressionChannel;
     expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
@@ -23496,6 +25173,21 @@ export declare enum SuppressionReason {
     UserRequest = "USER_REQUEST",
     UserUnsubscribe = "USER_UNSUBSCRIBE"
 }
+export type SyncCatalogNodeManifestInput = {
+    /** The node's manifest.json from fluidgrids-nodes, unchanged. */
+    manifest: Scalars['JSON']['input'];
+    nodeType: Scalars['String']['input'];
+    nodeVersion: Scalars['String']['input'];
+};
+export type SyncCatalogNodeManifestResult = {
+    __typename?: 'SyncCatalogNodeManifestResult';
+    /** sha256 of the canonical catalog manifest. */
+    digest: Scalars['String']['output'];
+    nodeType: Scalars['String']['output'];
+    nodeVersion: Scalars['String']['output'];
+    products: Array<CatalogProductSync>;
+    registry: CatalogRegistrySync;
+};
 /** Input for syncing channel users */
 export type SyncChannelUsersInput = {
     /** Channel ID */
@@ -23596,18 +25288,6 @@ export type SyncWorkspaceFromWspaceResponse = {
     success: Scalars['Boolean']['output'];
     workspaceId?: Maybe<Scalars['String']['output']>;
 };
-export type TagChannelConnectionInput = {
-    entityId: Scalars['ID']['input'];
-    metadata?: InputMaybe<Scalars['JSON']['input']>;
-    source?: InputMaybe<Scalars['String']['input']>;
-    tagId: Scalars['ID']['input'];
-};
-export type TagChannelInput = {
-    entityId: Scalars['ID']['input'];
-    metadata?: InputMaybe<Scalars['JSON']['input']>;
-    source?: InputMaybe<Scalars['String']['input']>;
-    tagId: Scalars['ID']['input'];
-};
 export type TagStoreProductInput = {
     entityId: Scalars['ID']['input'];
     metadata?: InputMaybe<Scalars['JSON']['input']>;
@@ -23623,6 +25303,31 @@ export type TagsAndResourceTypes = {
     /** Available tags from usage records */
     tags: Array<Scalars['String']['output']>;
 };
+/** Policy ground for taking a listing down. */
+export declare enum TakedownCategory {
+    Broken = "BROKEN",
+    IpInfringement = "IP_INFRINGEMENT",
+    Misleading = "MISLEADING",
+    Other = "OTHER",
+    PolicyViolation = "POLICY_VIOLATION",
+    PublisherVerification = "PUBLISHER_VERIFICATION",
+    SecurityRisk = "SECURITY_RISK"
+}
+export type TakedownListingInput = {
+    category: TakedownCategory;
+    productId: Scalars['ID']['input'];
+    /** Reason the publisher sees, up to 2000 characters. */
+    reason: Scalars['String']['input'];
+    /** Open listing reports this takedown answers; they are marked ACTIONED. */
+    reportIds?: InputMaybe<Array<Scalars['ID']['input']>>;
+};
+/** What took a listing down. */
+export declare enum TakedownSource {
+    /** A store admin took this listing down. */
+    Listing = "LISTING",
+    /** The listing went down with its publisher's suspension. */
+    PublisherSuspension = "PUBLISHER_SUSPENSION"
+}
 /** Result of tax calculation */
 export type TaxCalculationResult = {
     __typename?: 'TaxCalculationResult';
@@ -24468,6 +26173,8 @@ export type TriggerNotificationWithTemplateInput = {
     /** Specific channel instance ID from channel service (takes precedence) */
     channelId?: InputMaybe<Scalars['ID']['input']>;
     expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
+    /** At-most-once delivery key forwarded to channel-svc (same key + same input = one delivery) */
+    idempotencyKey?: InputMaybe<Scalars['String']['input']>;
     /** Also deliver as in-app notification alongside the primary platform */
     includeInApp?: InputMaybe<Scalars['Boolean']['input']>;
     media?: InputMaybe<Array<NotificationMediaInput>>;
@@ -24505,14 +26212,6 @@ export type UnreadCountResult = {
     count: Scalars['Int']['output'];
     userId: Scalars['ID']['output'];
 };
-export type UntagChannelConnectionInput = {
-    entityId: Scalars['ID']['input'];
-    tagId: Scalars['ID']['input'];
-};
-export type UntagChannelInput = {
-    entityId: Scalars['ID']['input'];
-    tagId: Scalars['ID']['input'];
-};
 export type UntagStoreProductInput = {
     entityId: Scalars['ID']['input'];
     tagId: Scalars['ID']['input'];
@@ -24727,6 +26426,8 @@ export type UpdateContentPageInput = {
     category?: InputMaybe<Scalars['String']['input']>;
     content?: InputMaybe<Scalars['String']['input']>;
     contentFormat?: InputMaybe<Scalars['String']['input']>;
+    /** Set, replace or (with null) withdraw the customer approval. Withdrawing it removes a case study from the public queries. */
+    customerSignOff?: InputMaybe<CustomerSignOffInput>;
     excerpt?: InputMaybe<Scalars['String']['input']>;
     featured?: InputMaybe<Scalars['Boolean']['input']>;
     isPublished?: InputMaybe<Scalars['Boolean']['input']>;
@@ -24742,6 +26443,8 @@ export type UpdateContentPageInput = {
     visibility?: InputMaybe<ContentVisibility>;
 };
 export type UpdateCouponInput = {
+    applicableEntityTypes?: InputMaybe<Array<CouponEntityType>>;
+    applicableProductIds?: InputMaybe<Array<Scalars['String']['input']>>;
     description?: InputMaybe<Scalars['String']['input']>;
     maxTotalUses?: InputMaybe<Scalars['Int']['input']>;
     maxUsesPerUser?: InputMaybe<Scalars['Int']['input']>;
@@ -25174,7 +26877,10 @@ export type UpdatePressKitAssetInput = {
 export type UpdateProductInput = {
     bannerUrl?: InputMaybe<Scalars['String']['input']>;
     category?: InputMaybe<Scalars['String']['input']>;
-    /** Which products this item is compatible with (e.g. "fluidgrids", "workspaces"). When provided without a manifest, updates the field directly. */
+    /**
+     * Which products this item is compatible with (e.g. "fluidgrids", "workspaces").
+     * When provided without a manifest, updates the field directly.
+     */
     compatibleProducts?: InputMaybe<Array<Scalars['String']['input']>>;
     content?: InputMaybe<Scalars['JSON']['input']>;
     currency?: InputMaybe<Scalars['String']['input']>;
@@ -25227,14 +26933,6 @@ export type UpdatePublisherInput = {
     organizationId?: InputMaybe<Scalars['ID']['input']>;
     websiteUrl?: InputMaybe<Scalars['String']['input']>;
 };
-/** Input for updating RBAC configuration */
-export type UpdateRbacConfigInput = {
-    description?: InputMaybe<Scalars['String']['input']>;
-    key: Scalars['String']['input'];
-    scopeId: Scalars['String']['input'];
-    value: Scalars['String']['input'];
-    valueType?: InputMaybe<Scalars['String']['input']>;
-};
 export type UpdateRecurringBillingInput = {
     description?: InputMaybe<Scalars['String']['input']>;
     id: Scalars['ID']['input'];
@@ -25251,6 +26949,7 @@ export type UpdateResourceInput = {
 };
 export type UpdateReviewInput = {
     comment?: InputMaybe<Scalars['String']['input']>;
+    metadata?: InputMaybe<Scalars['JSON']['input']>;
     rating?: InputMaybe<Scalars['Int']['input']>;
     title?: InputMaybe<Scalars['String']['input']>;
 };
@@ -25575,6 +27274,19 @@ export type UpdateWebhookInput = {
     retryEnabled?: InputMaybe<Scalars['Boolean']['input']>;
     url?: InputMaybe<Scalars['String']['input']>;
 };
+/** Input for updateWebhookSubscription — all fields optional, omitted fields unchanged */
+export type UpdateWebhookSubscriptionInput = {
+    /** Operator-facing description */
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Whether delivery is active */
+    enabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Event types to receive; empty = all events for the owner */
+    events?: InputMaybe<Array<Scalars['String']['input']>>;
+    /** HMAC-SHA256 signing secret (write-only, never returned) */
+    secret?: InputMaybe<Scalars['String']['input']>;
+    /** Delivery URL (HTTPS in production) */
+    url?: InputMaybe<Scalars['String']['input']>;
+};
 /** Input for updating an existing workspace */
 export type UpdateWorkspaceInput = {
     metadata?: InputMaybe<Scalars['JSON']['input']>;
@@ -25651,7 +27363,11 @@ export type UpsertSourcingOfferInput = {
     /** Exact decimal string with at most two fractional digits. */
     unitPrice: Scalars['String']['input'];
 };
-/** M2M input for managing a ShippingAddress on behalf of an explicit user. The calling service supplies `userId` (the opaque owner) directly; `id` selects an existing row to update (omit to create). */
+/**
+ * M2M input for managing a ShippingAddress on behalf of an explicit user.
+ * The calling service supplies `userId` (the opaque owner) directly; `id` selects
+ * an existing row to update (omit to create).
+ */
 export type UpsertUserShippingAddressInput = {
     addressLine1: Scalars['String']['input'];
     addressLine2?: InputMaybe<Scalars['String']['input']>;
@@ -25659,7 +27375,10 @@ export type UpsertUserShippingAddressInput = {
     country: Scalars['String']['input'];
     email?: InputMaybe<Scalars['String']['input']>;
     fullName: Scalars['String']['input'];
-    /** Existing ShippingAddress id to update. Omit to create a new address. When provided, the row must already belong to `userId` (else NOT_FOUND). */
+    /**
+     * Existing ShippingAddress id to update. Omit to create a new address. When
+     * provided, the row must already belong to `userId` (else NOT_FOUND).
+     */
     id?: InputMaybe<Scalars['ID']['input']>;
     instructions?: InputMaybe<Scalars['String']['input']>;
     isDefault?: InputMaybe<Scalars['Boolean']['input']>;
@@ -26319,6 +28038,30 @@ export type WebhookDeliveryEdge = {
     cursor: Scalars['String']['output'];
     node: WebhookDelivery;
 };
+/** One delivery attempt recorded for a WebhookSubscription. At most one row exists per (subscription, eventId) — a redispatched event updates the row instead of double-delivering. */
+export type WebhookDeliveryLog = {
+    __typename?: 'WebhookDeliveryLog';
+    /** Number of attempts made */
+    attemptCount: Scalars['Int']['output'];
+    /** When the final attempt finished */
+    deliveredAt: Scalars['DateTime']['output'];
+    /** Error message of the final attempt (null on success) */
+    error?: Maybe<Scalars['String']['output']>;
+    /** Caller-supplied event ID (idempotency key) */
+    eventId: Scalars['String']['output'];
+    /** Event type that was dispatched */
+    eventType: Scalars['String']['output'];
+    /** Unique log row ID */
+    id: Scalars['ID']['output'];
+    /** Envelope payload that was signed and posted */
+    payload: Scalars['JSON']['output'];
+    /** HTTP status code of the final attempt (null on transport error) */
+    statusCode?: Maybe<Scalars['Int']['output']>;
+    /** Owning subscription ID */
+    subscriptionId: Scalars['ID']['output'];
+    /** Whether the final attempt succeeded */
+    success: Scalars['Boolean']['output'];
+};
 export declare enum WebhookDeliveryStatus {
     Delivered = "DELIVERED",
     Delivering = "DELIVERING",
@@ -26326,6 +28069,30 @@ export declare enum WebhookDeliveryStatus {
     Pending = "PENDING",
     Retrying = "RETRYING"
 }
+/** Result of a single test delivery */
+export type WebhookDispatchResult = {
+    __typename?: 'WebhookDispatchResult';
+    /** Number of attempts made */
+    attemptCount: Scalars['Int']['output'];
+    /** Error message of the final attempt (null on success) */
+    error?: Maybe<Scalars['String']['output']>;
+    /** HTTP status code of the final attempt (null on transport error) */
+    statusCode?: Maybe<Scalars['Int']['output']>;
+    /** Whether the delivery succeeded */
+    success: Scalars['Boolean']['output'];
+};
+/** Summary returned by the M2M dispatchWebhookEvent mutation */
+export type WebhookDispatchSummary = {
+    __typename?: 'WebhookDispatchSummary';
+    /** Subscriptions skipped because the event was already delivered (idempotent redispatch) */
+    deduplicated: Scalars['Int']['output'];
+    /** Subscriptions delivered successfully */
+    delivered: Scalars['Int']['output'];
+    /** Subscriptions that failed after all retry attempts */
+    failed: Scalars['Int']['output'];
+    /** Enabled subscriptions matched for the owner + event type */
+    matched: Scalars['Int']['output'];
+};
 /** WebhookEvent represents a received webhook (transient, 7-day TTL) Used for debugging and monitoring only */
 export type WebhookEvent = {
     __typename?: 'WebhookEvent';
@@ -26472,6 +28239,34 @@ export declare enum WebhookStatus {
     Failed = "FAILED",
     Paused = "PAUSED"
 }
+/** A registered outbound webhook endpoint owned by a product or operator. `ownerType` namespaces the event stream (e.g. "newsletter-product"); `ownerId` scopes it (e.g. the platform product id). An empty `events` list means the endpoint receives every event dispatched for the owner. */
+export type WebhookSubscription = {
+    __typename?: 'WebhookSubscription';
+    /** Creation timestamp */
+    createdAt: Scalars['DateTime']['output'];
+    /** Delivery audit trail (most recent first) */
+    deliveries: Array<WebhookDeliveryLog>;
+    /** Operator-facing description */
+    description?: Maybe<Scalars['String']['output']>;
+    /** Whether delivery is active */
+    enabled: Scalars['Boolean']['output'];
+    /** Event types this endpoint receives; empty = all events for the owner */
+    events: Array<Scalars['String']['output']>;
+    /** Unique subscription ID */
+    id: Scalars['ID']['output'];
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['output'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['output'];
+    /** Last update timestamp */
+    updatedAt: Scalars['DateTime']['output'];
+    /** Delivery URL (HTTPS in production) */
+    url: Scalars['String']['output'];
+};
+/** A registered outbound webhook endpoint owned by a product or operator. `ownerType` namespaces the event stream (e.g. "newsletter-product"); `ownerId` scopes it (e.g. the platform product id). An empty `events` list means the endpoint receives every event dispatched for the owner. */
+export type WebhookSubscriptionDeliveriesArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+};
 export type WebhookTestResult = {
     __typename?: 'WebhookTestResult';
     error?: Maybe<Scalars['String']['output']>;
@@ -26514,6 +28309,176 @@ export type WithdrawConsentInput = {
     subjectId: Scalars['ID']['input'];
     subjectType: Scalars['String']['input'];
 };
+/** Result of withdrawing a template. */
+export type WithdrawWorkflowTemplateSubmissionResult = {
+    __typename?: 'WithdrawWorkflowTemplateSubmissionResult';
+    id: Scalars['ID']['output'];
+    /** True when the template was deleted; false when it was only taken off the store. */
+    removed: Scalars['Boolean']['output'];
+    /** The template's status when it was kept (UNLISTED), null when removed. */
+    status?: Maybe<ProductStatus>;
+};
+/** What was removed from the author's workflow before it was stored. */
+export type WorkflowTemplateCleaningReport = {
+    __typename?: 'WorkflowTemplateCleaningReport';
+    /** Where each cleared connection was (up to 200). */
+    clearedConnections: Array<WorkflowTemplateFieldRef>;
+    connectionsCleared: Scalars['Int']['output'];
+    pinnedDataRemoved: Scalars['Boolean']['output'];
+    /** Where each removed secret was (up to 200). */
+    removedSecrets: Array<WorkflowTemplateFieldRef>;
+    secretsRemoved: Scalars['Int']['output'];
+};
+/** Where in a template a cleared connection or removed secret was. */
+export type WorkflowTemplateFieldRef = {
+    __typename?: 'WorkflowTemplateFieldRef';
+    /** Path of the field inside the node, for example data.parameters.apiKey. */
+    field: Scalars['String']['output'];
+    nodeId?: Maybe<Scalars['String']['output']>;
+    nodeLabel?: Maybe<Scalars['String']['output']>;
+    nodeType?: Maybe<Scalars['String']['output']>;
+};
+/** A node type a template uses. */
+export type WorkflowTemplateNodeType = {
+    __typename?: 'WorkflowTemplateNodeType';
+    displayName: Scalars['String']['output'];
+    nodeType: Scalars['String']['output'];
+    nodeVersion: Scalars['String']['output'];
+    /** BUILTIN or STORE. */
+    publishType: Scalars['String']['output'];
+};
+/** What a reviewer sees about a workflow template before approving it. */
+export type WorkflowTemplatePreview = {
+    __typename?: 'WorkflowTemplatePreview';
+    /** Recorded at submission; null for templates stored before reports were kept. */
+    cleaningReport?: Maybe<WorkflowTemplateCleaningReport>;
+    /** The cleaned definition importers receive. */
+    definitionJson?: Maybe<Scalars['JSON']['output']>;
+    edgeCount: Scalars['Int']['output'];
+    /** Nodes in the definition (all of them, not just distinct types). */
+    nodeCount: Scalars['Int']['output'];
+    nodeTypes: Array<WorkflowTemplateNodeType>;
+    requiredCredentials: Array<WorkflowTemplateRequiredCredential>;
+    requiredInputs: Array<WorkflowTemplateRequiredInput>;
+};
+/** A credential someone importing the template must connect. */
+export type WorkflowTemplateRequiredCredential = {
+    __typename?: 'WorkflowTemplateRequiredCredential';
+    /**
+     * connection: the node was bound to the author's saved connection, which was
+     * cleared at submission. reference: the template reads ${credentials.<name>}.
+     */
+    kind: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    nodeId?: Maybe<Scalars['String']['output']>;
+    nodeLabel?: Maybe<Scalars['String']['output']>;
+    nodeType?: Maybe<Scalars['String']['output']>;
+};
+/** A value someone importing the template must supply (a ${name} variable it reads). */
+export type WorkflowTemplateRequiredInput = {
+    __typename?: 'WorkflowTemplateRequiredInput';
+    label: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    required: Scalars['Boolean']['output'];
+    /** secret when it fills a secret field (API key, token, ...), else string. */
+    type: Scalars['String']['output'];
+    /** Nodes that read it. */
+    usedBy: Array<Scalars['String']['output']>;
+};
+/**
+ * A new version of a PUBLISHED template, kept apart from the live version while
+ * it is reviewed. Approval makes it the live version; rejection leaves the live
+ * version untouched.
+ */
+export type WorkflowTemplateRevision = {
+    __typename?: 'WorkflowTemplateRevision';
+    authorName?: Maybe<Scalars['String']['output']>;
+    category: Scalars['String']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    description: Scalars['String']['output'];
+    icon?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** Version currently live in the store. */
+    liveVersion: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    /** Number of distinct node types the revision uses. */
+    nodeCount: Scalars['Int']['output'];
+    /** The author's note for the reviewer. */
+    notes?: Maybe<Scalars['String']['output']>;
+    /** What the revision does: nodes, required inputs and credentials, cleaning report. */
+    preview?: Maybe<WorkflowTemplatePreview>;
+    /** Store product id of the template it revises. */
+    productId: Scalars['ID']['output'];
+    productSlug: Scalars['String']['output'];
+    /** Publisher profile name of the author. */
+    publisherName?: Maybe<Scalars['String']['output']>;
+    rejectedReason?: Maybe<Scalars['String']['output']>;
+    reviewedAt?: Maybe<Scalars['DateTime']['output']>;
+    revision: Scalars['Int']['output'];
+    status: WorkflowTemplateRevisionStatus;
+    submittedAt: Scalars['DateTime']['output'];
+    /** Actor id of the author who submitted it. */
+    submittedBy: Scalars['String']['output'];
+    tags: Array<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    /** Version this revision becomes when approved. */
+    version: Scalars['String']['output'];
+};
+export type WorkflowTemplateRevisionList = {
+    __typename?: 'WorkflowTemplateRevisionList';
+    items: Array<WorkflowTemplateRevision>;
+    totalCount: Scalars['Int']['output'];
+};
+/** PENDING_REVIEW while a store admin reviews it; REJECTED with a reason. */
+export declare enum WorkflowTemplateRevisionStatus {
+    PendingReview = "PENDING_REVIEW",
+    Rejected = "REJECTED"
+}
+/** One of your community workflow templates and where it is in review. */
+export type WorkflowTemplateSubmission = {
+    __typename?: 'WorkflowTemplateSubmission';
+    authorName?: Maybe<Scalars['String']['output']>;
+    category?: Maybe<Scalars['String']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    description?: Maybe<Scalars['String']['output']>;
+    /** Times the template has been imported. */
+    downloads: Scalars['Int']['output'];
+    icon?: Maybe<Scalars['String']['output']>;
+    /** Store product id of the template. */
+    id: Scalars['ID']['output'];
+    name: Scalars['String']['output'];
+    /** Number of distinct node types the template uses. */
+    nodeCount: Scalars['Int']['output'];
+    /**
+     * The new version of this published template that is waiting for review, or
+     * that a reviewer rejected (with the reason). Null when there is none.
+     */
+    pendingRevision?: Maybe<WorkflowTemplateRevision>;
+    publishedAt?: Maybe<Scalars['DateTime']['output']>;
+    rejectedReason?: Maybe<Scalars['String']['output']>;
+    reviewNotes?: Maybe<Scalars['String']['output']>;
+    reviewedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** How many times the template has been submitted. */
+    revision: Scalars['Int']['output'];
+    slug: Scalars['String']['output'];
+    sourceWorkflowKey?: Maybe<Scalars['String']['output']>;
+    sourceWorkflowVersion?: Maybe<Scalars['String']['output']>;
+    /**
+     * PENDING_REVIEW while a store admin reviews it, PUBLISHED once approved,
+     * REJECTED with a reason, UNLISTED once taken off the store.
+     */
+    status: ProductStatus;
+    submittedAt?: Maybe<Scalars['DateTime']['output']>;
+    tags: Array<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    /** Template version (1.0.0 for the first submission, 1.1.0 for the second, ...). */
+    version: Scalars['String']['output'];
+};
+export type WorkflowTemplateSubmissionList = {
+    __typename?: 'WorkflowTemplateSubmissionList';
+    items: Array<WorkflowTemplateSubmission>;
+    totalCount: Scalars['Int']['output'];
+};
 /** Workspace type stub - represents a workspace entity from the workspace service This service doesn't own the Workspace model, but references it */
 export type Workspace = {
     __typename?: 'Workspace';
@@ -26669,6 +28634,8 @@ export type CreateAddOnsInput = {
     price: Scalars['Float']['input'];
     productId: Scalars['String']['input'];
     quotas: Array<AddonQuotaInput>;
+    /** Whether buying this add-on requires a paid subscription to its product. Defaults to true; set false only for items sold to Free users on purpose. */
+    requiresPaidSubscription?: InputMaybe<Scalars['Boolean']['input']>;
 };
 export type CreatePlanInput = {
     currency?: InputMaybe<Scalars['String']['input']>;
@@ -26707,6 +28674,8 @@ export type UpdateAddOnsInput = {
     name?: InputMaybe<Scalars['String']['input']>;
     price?: InputMaybe<Scalars['Float']['input']>;
     quotas: Array<AddonQuotaInput>;
+    /** Whether buying this add-on requires a paid subscription to its product. Omit to leave unchanged. */
+    requiresPaidSubscription?: InputMaybe<Scalars['Boolean']['input']>;
 };
 export type UpdatePlanInput = {
     /** Immutable once set — see `price`. Throws CURRENCY_CHANGE_NOT_ALLOWED on an actual change. */