@burdenoff/microfe-housingvista 2026.1001.2 → 2026.1013.1

package/dist/generated/global-types.d.ts

@@ -408,6 +408,8 @@ export type Addon = {
     isActive?: Maybe<Scalars['Boolean']['output']>;
     /** The name of the addon (e.g., 'Extra Bots', 'Additional Storage'). */
     name?: Maybe<Scalars['String']['output']>;
+    /** Apple App Store / Google Play SKU for this addon. */
+    nativeProductId?: Maybe<Scalars['String']['output']>;
     /** The price of the addon. */
     price?: Maybe<Scalars['Float']['output']>;
     /** Historical record of price changes for this addon */
@@ -2921,6 +2923,10 @@ export type ComplianceAuditLogEntry = {
 /** Input for configuring tenant settings */
 export type ConfigureTenantInput = {
     complianceRegion?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Ignored and never stored. Burdenoff does no white-labelling: every product keeps its own brand.
+     * @deprecated No white-labelling — products keep their own brand. This setting is ignored.
+     */
     customBranding?: InputMaybe<Scalars['JSON']['input']>;
     dataResidency?: InputMaybe<Scalars['String']['input']>;
     features?: InputMaybe<Scalars['JSON']['input']>;
@@ -6470,6 +6476,10 @@ export type GetStoreProductTagsInput = {
 export type GrantAppDelegationInternalInput = {
     /** Client ID of the first-party system app (e.g. burdenoff_integration_core). */
     clientId: Scalars['String']['input'];
+    /** Scopes the delegation must keep for other grants that share it (e.g. the user's other integration connections). A retained scope is kept only while the existing delegation is ACTIVE and already holds it, and only while the app still allows it; otherwise it is dropped, never rejected. A grant therefore never restores or adds a scope beyond the requested scopes. */
+    retainedScopes?: InputMaybe<Array<Scalars['String']['input']>>;
+    /** Workspaces the delegation must keep for other grants that share it. Kept only while the existing delegation is ACTIVE and already covers them: restoring a REVOKED or EXPIRED delegation covers only workspaceIds. Ignored when workspaceIds is empty (unrestricted). */
+    retainedWorkspaceIds?: InputMaybe<Array<Scalars['String']['input']>>;
     /** Scopes to grant — must be a subset of the app's scopes. */
     scopes: Array<Scalars['String']['input']>;
     /** The user granting (and target of) the self-delegation. */
@@ -6479,6 +6489,8 @@ export type GrantAppDelegationInternalInput = {
 };
 export type GrantAppWorkspaceAccessInput = {
     appId: Scalars['ID']['input'];
+    /** Restore a REVOKED authorization only if its revokedReason is exactly this value (one conditional write); otherwise behave as create-only. Lets an automated provisioner undo its own withdrawal but never an operator's revocation. Takes precedence over reactivateRevoked. */
+    reactivateIfRevokedReason?: InputMaybe<Scalars['String']['input']>;
     /** Whether an existing REVOKED authorization may be restored. Defaults to true for explicit administrative grants. Automated provisioning should pass false so an operator revocation remains durable. */
     reactivateRevoked?: InputMaybe<Scalars['Boolean']['input']>;
     /** Optional subset of the app's global scopes. Empty array means the authorization inherits the app's full scope list. */
@@ -7200,6 +7212,8 @@ export type IssueAppAsUserTokenInternalInput = {
     scopes?: InputMaybe<Array<Scalars['String']['input']>>;
     /** The user the app will act on behalf of (must have an active delegation). */
     targetUserId: Scalars['String']['input'];
+    /** Bind the token to this one workspace instead of every workspace the delegation covers. The delegation must cover it. Callers minting for a single workspace (an integration connection) should always pass it. */
+    workspaceId?: InputMaybe<Scalars['String']['input']>;
 };
 export type ItemOrder = {
     __typename?: 'ItemOrder';
@@ -8549,6 +8563,7 @@ export type Mutation = {
     /** Detach media from a tour step */
     detachMediaFromStep: Scalars['Boolean']['output'];
     disableAuthMethod: Scalars['Boolean']['output'];
+    /** Disable every MFA method of the caller. When `code` is given (a current TOTP code, or one of the caller's unused backup codes) it must verify against an enabled method before anything is disabled. */
     disableMFA: Scalars['Boolean']['output'];
     disableMaintenanceMode: MaintenanceModeStatus;
     disableSchedule: ScheduledJob;
@@ -8942,6 +8957,8 @@ export type Mutation = {
     restoreChannel: Channel;
     restoreScheduleVersion: ScheduledJob;
     restoreTemplateVersion: NewsletterTemplate;
+    /** Service-trusted internal REDUCTION of a first-party self-delegation, keyed by the app's client id and the user: used when one of several integration connections that share it is deleted or revoked. It never creates, re-enables or widens a delegation: it returns null when there is none (never granted, or erased), a REVOKED or EXPIRED one unchanged, and otherwise the delegation cut down to the requested scopes and workspaces it already held (REVOKED if none are left). Not blocked by a deactivated app: withdrawing access is always permitted. Gated to internal service / super_admin callers and restricted to first-party system apps. */
+    restrictAppDelegationInternal?: Maybe<AppUserDelegation>;
     /** Public endpoint — no authentication required. Email is normalized (trimmed, lowercased) and validated in the provider. Returns NOT_FOUND when no matching unsubscribed record exists; does not leak which side of the check failed. */
     resubscribe: NewsletterSubscriber;
     /** Resume a paused subscription */
@@ -8973,7 +8990,9 @@ export type Mutation = {
     revokeAPIKey: Scalars['Boolean']['output'];
     /** Revoke all sessions except the current one. Returns the number of sessions that were revoked. */
     revokeAllSessions: RevokeAllSessionsResult;
-    /** Revoke an app's access to a workspace. Returns false if the row was already REVOKED or never existed. */
+    /** Service-trusted internal revoke of a first-party self-delegation, keyed by the app's client id and the user — the counterpart of grantAppDelegationInternal, used when the last integration connection that needed it is deleted or revoked. Idempotent: returns true when an ACTIVE delegation was revoked and false when there was none (never granted, already revoked or expired). Gated to internal service / super_admin callers and restricted to first-party system apps. */
+    revokeAppDelegationInternal: Scalars['Boolean']['output'];
+    /** Revoke an app's access to a workspace. Returns false if the row was already REVOKED or never existed. An owner or super_admin revoking an already-REVOKED row replaces the revocation on record (reason, actor, time). */
     revokeAppWorkspaceAccess: Scalars['Boolean']['output'];
     revokeConsent: NewsletterConsent;
     revokeDelegation: Scalars['Boolean']['output'];
@@ -9013,6 +9032,8 @@ export type Mutation = {
     scheduleNotification: ScheduledNotification;
     /** Overwrite the built-in AthleteBridge user-facing tours from the service-owned seed file. */
     seedAtheleteBridgeUserTours: SeedAtheleteBridgeUserToursResult;
+    /** Overwrite the service-owned BigConsole onboarding tours. Repeated calls update the same slugs. */
+    seedBigconsoleUserTours: SeedBigconsoleUserToursResult;
     /** Overwrite the built-in Buildmyiq user-facing dashboard tour from the service-owned seed file. */
     seedBuildmyiqUserTours: SeedBuildmyiqUserToursResult;
     /** Overwrite the built-in CollabKin user-facing dashboard tour from the service-owned seed file. */
@@ -9397,7 +9418,6 @@ export type Mutation = {
     /** M2M: create or update a ShippingAddress for an EXPLICIT user, on behalf of a calling service. Product backends (e.g. Kadaikodi) call this through the INTERNAL gateway so a user's address lives in the canonical store owner rather than a per-product copy. Pass `input.id` to update an existing row (must belong to `input.userId`); omit it to create. Service-actor only. */
     upsertUserShippingAddress: ShippingAddress;
     useCannedResponse: CannedResponse;
-    validateApiKey: TokenValidationResponse;
     /** Validate an HMAC signature */
     validateHMACSignature: HmacValidationResult;
     /** Validate a signed cookie */
@@ -10942,6 +10962,10 @@ export type MutationDisableAuthMethodArgs = {
     authType: AuthType;
 };
 /** Root mutation type */
+export type MutationDisableMfaArgs = {
+    code?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationDisableScheduleArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -12041,6 +12065,10 @@ export type MutationRestoreTemplateVersionArgs = {
     version: Scalars['Int']['input'];
 };
 /** Root mutation type */
+export type MutationRestrictAppDelegationInternalArgs = {
+    input: RestrictAppDelegationInternalInput;
+};
+/** Root mutation type */
 export type MutationResubscribeArgs = {
     email: Scalars['String']['input'];
     platformProductId?: InputMaybe<Scalars['String']['input']>;
@@ -12123,6 +12151,10 @@ export type MutationRevokeApiKeyArgs = {
     keyId: Scalars['String']['input'];
 };
 /** Root mutation type */
+export type MutationRevokeAppDelegationInternalArgs = {
+    input: RevokeAppDelegationInternalInput;
+};
+/** Root mutation type */
 export type MutationRevokeAppWorkspaceAccessArgs = {
     input: RevokeAppWorkspaceAccessInput;
 };
@@ -13321,10 +13353,6 @@ export type MutationUseCannedResponseArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
-export type MutationValidateApiKeyArgs = {
-    apiKey: Scalars['String']['input'];
-};
-/** Root mutation type */
 export type MutationValidateHmacSignatureArgs = {
     algorithm?: InputMaybe<Scalars['String']['input']>;
     appId: Scalars['ID']['input'];
@@ -15126,6 +15154,8 @@ export type Plan = {
     minSeats?: Maybe<Scalars['Int']['output']>;
     /** The name of the plan (e.g., 'Basic', 'Pro', 'Enterprise'). */
     name?: Maybe<Scalars['String']['output']>;
+    /** Apple App Store / Google Play SKU for this plan. */
+    nativeProductId?: Maybe<Scalars['String']['output']>;
     /** The price of the plan. */
     price?: Maybe<Scalars['Float']['output']>;
     /** Historical record of price changes for this plan */
@@ -20644,6 +20674,17 @@ export type ResourceTypeProductInfo = {
     products: Array<Scalars['String']['output']>;
     resourceType: Scalars['String']['output'];
 };
+/** Input for the service-trusted internal reduction of a first-party self-delegation. */
+export type RestrictAppDelegationInternalInput = {
+    /** Client ID of the first-party system app (e.g. burdenoff_integration_core). */
+    clientId: Scalars['String']['input'];
+    /** The most the delegation may keep: it keeps only those of these scopes it already holds (and the app still allows), and is revoked if none are left. */
+    scopes: Array<Scalars['String']['input']>;
+    /** The user whose delegation to the app is reduced. */
+    userId: Scalars['String']['input'];
+    /** The most workspaces the delegation may keep: it keeps only those of these it already covers, and is revoked if none are left. Empty = leave the workspaces as they are. */
+    workspaceIds: Array<Scalars['String']['input']>;
+};
 export type RetryBillingOrderCallbackResponse = {
     __typename?: 'RetryBillingOrderCallbackResponse';
     error?: Maybe<Scalars['String']['output']>;
@@ -20700,8 +20741,19 @@ export type RevokeAllSessionsResult = {
     revokedCount: Scalars['Int']['output'];
     success: Scalars['Boolean']['output'];
 };
+/** Input for the service-trusted internal revoke of a first-party self-delegation. */
+export type RevokeAppDelegationInternalInput = {
+    /** Client ID of the first-party system app (e.g. burdenoff_integration_core). */
+    clientId: Scalars['String']['input'];
+    /** Recorded on the delegation and in the audit log. */
+    reason?: InputMaybe<Scalars['String']['input']>;
+    /** The user whose delegation to the app is revoked. */
+    userId: Scalars['String']['input'];
+};
 export type RevokeAppWorkspaceAccessInput = {
     appId: Scalars['ID']['input'];
+    /** Withdraw only the calling actor's own grant. The authorization is revoked (true) only when the caller is its sole grantor; when others granted it too, only the caller's share is released and it stays ACTIVE (false); one the caller never granted is left untouched (false). An automated provisioner withdrawing its own grant sets this, so it never revokes access an owner or an app installation gave the app, whichever granted first. */
+    onlyIfGrantedByCaller?: InputMaybe<Scalars['Boolean']['input']>;
     reason?: InputMaybe<Scalars['String']['input']>;
     workspaceId: Scalars['ID']['input'];
 };
@@ -21238,6 +21290,15 @@ export type SeedAtheleteBridgeUserToursResult = {
     updatedCount: Scalars['Int']['output'];
     workspaceId: Scalars['String']['output'];
 };
+export type SeedBigconsoleUserToursResult = {
+    __typename?: 'SeedBigconsoleUserToursResult';
+    createdCount: Scalars['Int']['output'];
+    productId: Scalars['String']['output'];
+    totalCount: Scalars['Int']['output'];
+    tours: Array<SeededUserTourResult>;
+    updatedCount: Scalars['Int']['output'];
+    workspaceId: Scalars['String']['output'];
+};
 export type SeedBuildmyiqUserToursResult = {
     __typename?: 'SeedBuildmyiqUserToursResult';
     createdCount: Scalars['Int']['output'];
@@ -23328,10 +23389,14 @@ export type Tenant = {
     /** Workspaces belonging to this tenant */
     workspaces: Array<Workspace>;
 };
-/** Tenant configuration for regional settings, branding, and features */
+/** Tenant configuration for regional settings, data residency, and features */
 export type TenantConfig = {
     __typename?: 'TenantConfig';
     complianceRegion?: Maybe<Scalars['String']['output']>;
+    /**
+     * Always null. Burdenoff does no white-labelling: every product keeps its own brand, so tenants cannot set a custom logo, colour or favicon.
+     * @deprecated No white-labelling — products keep their own brand. This setting is ignored.
+     */
     customBranding?: Maybe<Scalars['JSON']['output']>;
     dataResidency?: Maybe<Scalars['String']['output']>;
     features?: Maybe<Scalars['JSON']['output']>;