@burdenoff/microfe-movethewheels 2026.921.1 → 2026.923.1

package/src/generated/wspace-types.ts

@@ -14561,6 +14561,12 @@ export type CreateDataSinkInput = {
   ttl?: InputMaybe<Scalars['Int']['input']>;
 };
 
+export type CreateDataTableInput = {
+  columns: Array<DataTableColumnInput>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  name: Scalars['String']['input'];
+};
+
 export type CreateDeliveryJobInput = {
   cargoItems: Scalars['JSON']['input'];
   context?: InputMaybe<ContextInput>;
@@ -14571,6 +14577,7 @@ export type CreateDeliveryJobInput = {
   pickupAddress: Scalars['JSON']['input'];
   pricing?: InputMaybe<Scalars['JSON']['input']>;
   priority?: InputMaybe<DeliveryPriority>;
+  routeId?: InputMaybe<Scalars['ID']['input']>;
   scheduledDelivery?: InputMaybe<Scalars['DateTime']['input']>;
   specialInstructions?: InputMaybe<Scalars['String']['input']>;
   status?: InputMaybe<DeliveryJobStatus>;
@@ -14618,6 +14625,7 @@ export type CreateDriverInput = {
   status?: InputMaybe<DriverStatus>;
   userId?: InputMaybe<Scalars['String']['input']>;
   vehicleId?: InputMaybe<Scalars['String']['input']>;
+  vehicleIds?: InputMaybe<Array<Scalars['ID']['input']>>;
 };
 
 export type CreateEmailTimeEntryInput = {
@@ -16312,6 +16320,17 @@ export type CreateLocationEntryInput = {
   userId: Scalars['ID']['input'];
 };
 
+export type CreateLogStreamDestinationInput = {
+  config?: InputMaybe<Scalars['JSON']['input']>;
+  endpoint: Scalars['String']['input'];
+  eventFilters?: InputMaybe<Array<LogStreamEventType>>;
+  isEnabled?: InputMaybe<Scalars['Boolean']['input']>;
+  name: Scalars['String']['input'];
+  provider: LogStreamProvider;
+  /** WEBHOOK only: plaintext signing secret, encrypted at rest. Omit for SYSLOG/SENTRY. */
+  secret?: InputMaybe<Scalars['String']['input']>;
+};
+
 export type CreateMcpConnectionInput = {
   config: Scalars['JSON']['input'];
   credentials?: InputMaybe<Scalars['JSON']['input']>;
@@ -17782,6 +17801,19 @@ export type CreateWorkflowInput = {
   status?: InputMaybe<FluidGridsWorkflowStatus>;
 };
 
+export type CreateWorkflowVariableInput = {
+  description?: InputMaybe<Scalars['String']['input']>;
+  externalProvider?: InputMaybe<SecretProviderType>;
+  externalRef?: InputMaybe<Scalars['String']['input']>;
+  isSecret?: InputMaybe<Scalars['Boolean']['input']>;
+  key: Scalars['String']['input'];
+  /** Required when scope = PROJECT. */
+  projectId?: InputMaybe<Scalars['ID']['input']>;
+  scope?: InputMaybe<VariableScope>;
+  /** Local plaintext value. Mutually exclusive with `externalProvider` != NONE + `externalRef` — a variable is either stored (encrypted, when `isSecret`) in this service or resolved from an external provider, never both. */
+  value?: InputMaybe<Scalars['String']['input']>;
+};
+
 /** Input for creating a new workflow version */
 export type CreateWorkflowVersionInput = {
   /** Alias to attach to the new version (movable pointer — cleared from any sibling version). Omitted = no alias. */
@@ -19376,6 +19408,10 @@ export type DashboardSummary = {
   runsPendingCount: Scalars['Int']['output'];
   runsRunningCount: Scalars['Int']['output'];
   runsWaitingCount: Scalars['Int']['output'];
+  /** Rough estimate of manual-effort time saved by automation (BOFF-7519): `completedRunsCount * avgNodesPerRun * ASSUMED_MANUAL_SECONDS_PER_NODE`, converted to hours. A deliberately coarse heuristic (see `DashboardProvider.TIME_SAVED_ASSUMED_MANUAL_SECONDS_PER_NODE`'s doc comment for the assumption) — directional, not a billing-grade figure. Null when there is no completed-run history yet to estimate from. */
+  timeSavedEstimateHours?: Maybe<Scalars['Float']['output']>;
+  /** Workflows with the most FAILED runs, worst-first (BOFF-7519). Capped at 10. */
+  topFailingWorkflows: Array<FailingWorkflowStat>;
   totalNodesExecutedCount: Scalars['Int']['output'];
   userId: Scalars['String']['output'];
   username?: Maybe<Scalars['String']['output']>;
@@ -19922,6 +19958,114 @@ export enum DataSourceType {
   Websocket = 'WEBSOCKET'
 }
 
+export type DataTable = {
+  __typename?: 'DataTable';
+  columns: Array<DataTableColumn>;
+  createdAt: Scalars['DateTime']['output'];
+  createdBy: Scalars['String']['output'];
+  description?: Maybe<Scalars['String']['output']>;
+  id: Scalars['ID']['output'];
+  name: Scalars['String']['output'];
+  rowCount: Scalars['Int']['output'];
+  sizeBytes: Scalars['Int']['output'];
+  updatedAt: Scalars['DateTime']['output'];
+  updatedBy?: Maybe<Scalars['String']['output']>;
+  workspaceId: Scalars['ID']['output'];
+};
+
+export type DataTableColumn = {
+  __typename?: 'DataTableColumn';
+  defaultValue?: Maybe<Scalars['JSON']['output']>;
+  key: Scalars['String']['output'];
+  label: Scalars['String']['output'];
+  required: Scalars['Boolean']['output'];
+  type: DataTableColumnType;
+};
+
+export type DataTableColumnInput = {
+  defaultValue?: InputMaybe<Scalars['JSON']['input']>;
+  key: Scalars['String']['input'];
+  label: Scalars['String']['input'];
+  required?: InputMaybe<Scalars['Boolean']['input']>;
+  type: DataTableColumnType;
+};
+
+export enum DataTableColumnType {
+  Boolean = 'BOOLEAN',
+  Date = 'DATE',
+  Json = 'JSON',
+  Number = 'NUMBER',
+  String = 'STRING'
+}
+
+export enum DataTableFilterOp {
+  Contains = 'CONTAINS',
+  Eq = 'EQ',
+  Gt = 'GT',
+  Gte = 'GTE',
+  IsNotNull = 'IS_NOT_NULL',
+  IsNull = 'IS_NULL',
+  Lt = 'LT',
+  Lte = 'LTE',
+  Neq = 'NEQ'
+}
+
+export type DataTableListResponse = {
+  __typename?: 'DataTableListResponse';
+  tables: Array<DataTable>;
+  total: Scalars['Int']['output'];
+};
+
+export type DataTableResponse = MutationResponse & {
+  __typename?: 'DataTableResponse';
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+  table?: Maybe<DataTable>;
+};
+
+export type DataTableRow = {
+  __typename?: 'DataTableRow';
+  createdAt: Scalars['DateTime']['output'];
+  data: Scalars['JSON']['output'];
+  id: Scalars['ID']['output'];
+  tableId: Scalars['ID']['output'];
+  updatedAt: Scalars['DateTime']['output'];
+};
+
+export type DataTableRowFilterInput = {
+  column: Scalars['String']['input'];
+  op: DataTableFilterOp;
+  /** Omitted/null for IS_NULL / IS_NOT_NULL. */
+  value?: InputMaybe<Scalars['JSON']['input']>;
+};
+
+export type DataTableRowResponse = MutationResponse & {
+  __typename?: 'DataTableRowResponse';
+  message: Scalars['String']['output'];
+  row?: Maybe<DataTableRow>;
+  success: Scalars['Boolean']['output'];
+};
+
+export type DataTableRowsMutationResponse = MutationResponse & {
+  __typename?: 'DataTableRowsMutationResponse';
+  affected: Scalars['Int']['output'];
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+};
+
+export type DataTableRowsQueryInput = {
+  filters?: InputMaybe<Array<DataTableRowFilterInput>>;
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  offset?: InputMaybe<Scalars['Int']['input']>;
+  tableId: Scalars['ID']['input'];
+};
+
+export type DataTableRowsResponse = {
+  __typename?: 'DataTableRowsResponse';
+  rows: Array<DataTableRow>;
+  total: Scalars['Int']['output'];
+};
+
 /** Standard date range output */
 export type DateRange = {
   __typename?: 'DateRange';
@@ -19988,6 +20132,15 @@ export type DecideHealthyBowlFarmRecommendationInput = {
   id: Scalars['ID']['input'];
 };
 
+export type DecideToolApprovalResponse = {
+  __typename?: 'DecideToolApprovalResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  request?: Maybe<ToolApprovalRequest>;
+  /** The node the run resumed from, when the decision resumed it. */
+  resumedFromNodeId?: Maybe<Scalars['String']['output']>;
+  success: Scalars['Boolean']['output'];
+};
+
 /** Returned when explicitly decrypting a secret value. */
 export type DecryptedSecret = {
   __typename?: 'DecryptedSecret';
@@ -20046,6 +20199,7 @@ export type DeliveryJobFilterInput = {
   customerId?: InputMaybe<Scalars['ID']['input']>;
   driverId?: InputMaybe<Scalars['ID']['input']>;
   priority?: InputMaybe<DeliveryPriority>;
+  routeId?: InputMaybe<Scalars['ID']['input']>;
   search?: InputMaybe<Scalars['String']['input']>;
   status?: InputMaybe<DeliveryJobStatus>;
   storeOrderId?: InputMaybe<Scalars['ID']['input']>;
@@ -21854,6 +22008,28 @@ export type EnvVarInput = {
   value: Scalars['String']['input'];
 };
 
+/** Error analytics for the caller's workspace over a time window (BOFF-7519). */
+export type ErrorAnalytics = {
+  __typename?: 'ErrorAnalytics';
+  errorsByType: Array<ErrorTypeBreakdown>;
+  /** Worst-first, capped at `input.limit` (default 10). */
+  topFailingNodes: Array<FailingNodeStat>;
+  /** Worst-first, capped at `input.limit` (default 10). */
+  topFailingWorkflows: Array<FailingWorkflowStat>;
+  totalErrors: Scalars['Int']['output'];
+  /** Daily error counts across the queried window, oldest first. Every day in the window is present (zero-filled), so the frontend can chart it without gap-filling itself. */
+  trend: Array<ErrorTrendPoint>;
+};
+
+export type ErrorAnalyticsInput = {
+  /** Defaults to now. */
+  endDate?: InputMaybe<Scalars['DateTime']['input']>;
+  /** Caps topFailingWorkflows/topFailingNodes. Default 10, clamped to 50. */
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  /** Defaults to 30 days before `endDate` (or now, if endDate is also omitted). */
+  startDate?: InputMaybe<Scalars['DateTime']['input']>;
+};
+
 export type ErrorLogEntry = {
   __typename?: 'ErrorLogEntry';
   errorMessage: Scalars['String']['output'];
@@ -21866,6 +22042,13 @@ export type ErrorLogEntry = {
   userId?: Maybe<Scalars['String']['output']>;
 };
 
+/** One day's error count, oldest first, for the Error Analytics trend chart (BOFF-7519). `date` is an ISO 8601 calendar date (YYYY-MM-DD), UTC. */
+export type ErrorTrendPoint = {
+  __typename?: 'ErrorTrendPoint';
+  count: Scalars['Int']['output'];
+  date: Scalars['String']['output'];
+};
+
 export enum ErrorType {
   Authorization = 'AUTHORIZATION',
   Dependency = 'DEPENDENCY',
@@ -21876,6 +22059,13 @@ export enum ErrorType {
   Validation = 'VALIDATION'
 }
 
+/** Error breakdown by classification, for the Error Analytics screen (BOFF-7519). */
+export type ErrorTypeBreakdown = {
+  __typename?: 'ErrorTypeBreakdown';
+  count: Scalars['Int']['output'];
+  errorType: ErrorType;
+};
+
 export type Event = {
   __typename?: 'Event';
   anonymousId?: Maybe<Scalars['String']['output']>;
@@ -23731,6 +23921,27 @@ export type ExternalSync = {
   workspaceId: Scalars['String']['output'];
 };
 
+/** Per-node failure aggregate for the Error Analytics screen (BOFF-7519). */
+export type FailingNodeStat = {
+  __typename?: 'FailingNodeStat';
+  failureCount: Scalars['Int']['output'];
+  failureRate: Scalars['Float']['output'];
+  nodeType: Scalars['String']['output'];
+  /** One representative error message from this node's most recent failure, so the screen has something concrete to show without a drill-down. */
+  sampleError?: Maybe<Scalars['String']['output']>;
+  totalExecutions: Scalars['Int']['output'];
+};
+
+/** Per-workflow failure aggregate for the Insights/Error Analytics screens (BOFF-7519). */
+export type FailingWorkflowStat = {
+  __typename?: 'FailingWorkflowStat';
+  failureCount: Scalars['Int']['output'];
+  failureRate: Scalars['Float']['output'];
+  name?: Maybe<Scalars['String']['output']>;
+  totalRuns: Scalars['Int']['output'];
+  workflowKey: Scalars['String']['output'];
+};
+
 export type Farm = {
   __typename?: 'Farm';
   areaUnit: Scalars['String']['output'];
@@ -39672,6 +39883,35 @@ export type ImportValidationWarning = {
   suggestion?: Maybe<Scalars['String']['output']>;
 };
 
+/** Input for importing a portable workflow export. */
+export type ImportWorkflowInput = {
+  alias?: InputMaybe<Scalars['String']['input']>;
+  /** Allow an import to be created while reporting missing installed nodes. */
+  allowMissingNodes?: InputMaybe<Scalars['Boolean']['input']>;
+  category?: InputMaybe<Scalars['String']['input']>;
+  context?: InputMaybe<Scalars['JSON']['input']>;
+  /** Raw definition JSON, or the `definitionJson` member of a WorkflowExport. */
+  definitionJson: Scalars['JSON']['input'];
+  description?: InputMaybe<Scalars['String']['input']>;
+  icon?: InputMaybe<Scalars['String']['input']>;
+  name: Scalars['String']['input'];
+  /** Map source node type/version keys to installed node type/version values. */
+  nodeMappings?: InputMaybe<Scalars['JSON']['input']>;
+  tags?: InputMaybe<Array<Scalars['String']['input']>>;
+  tagsV2?: InputMaybe<Scalars['JSON']['input']>;
+  version?: InputMaybe<Scalars['String']['input']>;
+  workflowKey?: InputMaybe<Scalars['String']['input']>;
+};
+
+/** Result of importing a portable workflow document. */
+export type ImportWorkflowResponse = {
+  __typename?: 'ImportWorkflowResponse';
+  message?: Maybe<Scalars['String']['output']>;
+  success: Scalars['Boolean']['output'];
+  validation: WorkflowImportValidation;
+  workflow?: Maybe<WorkflowDefinition>;
+};
+
 /** Input for importing a workflow from a store template */
 export type ImportWorkflowTemplateInput = {
   /** Category */
@@ -43722,15 +43962,25 @@ export type ListWorkflowDefinitionsInput = {
 
 /** Input for listing runs */
 export type ListWorkflowRunsInput = {
+  /** Filter runs whose duration (seconds) is at most this value (BOFF-7519). Runs still in progress never match. */
+  durationMaxSeconds?: InputMaybe<Scalars['Float']['input']>;
+  /** Filter runs whose duration (seconds) is at least this value (BOFF-7519). Runs still in progress never match. */
+  durationMinSeconds?: InputMaybe<Scalars['Float']['input']>;
   /** Filter runs created at-or-before this instant (inclusive). Bound to `createdAt` on WorkflowRun. */
   endDate?: InputMaybe<Scalars['DateTime']['input']>;
+  /** Filter by the run's terminal error classification (BOFF-7519). */
+  errorType?: InputMaybe<ErrorType>;
   limit?: InputMaybe<Scalars['Int']['input']>;
+  /** Filter to runs that executed — in any status — a node with this id (BOFF-7519). */
+  nodeId?: InputMaybe<Scalars['String']['input']>;
   offset?: InputMaybe<Scalars['Int']['input']>;
   /** Free-text filter for the Runs screen's search box. Case-insensitive; matches a run whose id starts with the term, or whose workflow key or workflow name contains it. Blank or whitespace-only is treated as no filter. */
   search?: InputMaybe<Scalars['String']['input']>;
   /** Filter runs created at-or-after this instant (inclusive). Bound to `createdAt` on WorkflowRun. */
   startDate?: InputMaybe<Scalars['DateTime']['input']>;
   status?: InputMaybe<RunStatus>;
+  /** Filter by coarse trigger type (BOFF-7519). */
+  triggerType?: InputMaybe<RunTriggerType>;
   workflowKey?: InputMaybe<Scalars['String']['input']>;
 };
 
@@ -43902,6 +44152,54 @@ export type LogPlantScanToPestIssueInput = {
   type?: InputMaybe<Scalars['String']['input']>;
 };
 
+export type LogStreamDestination = {
+  __typename?: 'LogStreamDestination';
+  /** Provider-specific extras (syslog facility/appName, webhook extra headers, Sentry environment/release tag). */
+  config?: Maybe<Scalars['JSON']['output']>;
+  createdAt: Scalars['DateTime']['output'];
+  createdBy: Scalars['String']['output'];
+  /** WEBHOOK: the URL to POST to. SYSLOG: "host:port" (UDP). SENTRY: the DSN. */
+  endpoint: Scalars['String']['output'];
+  eventFilters: Array<LogStreamEventType>;
+  /** True when a WEBHOOK signing secret is configured. The secret itself is never returned by any query. */
+  hasSecret: Scalars['Boolean']['output'];
+  id: Scalars['ID']['output'];
+  isEnabled: Scalars['Boolean']['output'];
+  lastDispatchError?: Maybe<Scalars['String']['output']>;
+  lastDispatchStatus?: Maybe<Scalars['String']['output']>;
+  lastDispatchedAt?: Maybe<Scalars['DateTime']['output']>;
+  name: Scalars['String']['output'];
+  provider: LogStreamProvider;
+  updatedAt: Scalars['DateTime']['output'];
+  updatedBy?: Maybe<Scalars['String']['output']>;
+  workspaceId: Scalars['ID']['output'];
+};
+
+export type LogStreamDestinationResponse = MutationResponse & {
+  __typename?: 'LogStreamDestinationResponse';
+  destination?: Maybe<LogStreamDestination>;
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+};
+
+/** Run/node lifecycle events a destination can subscribe to. LOG_ERROR/LOG_WARN forward individual run-log lines at or above that severity; the rest forward a single summary event for the run/node transition. */
+export enum LogStreamEventType {
+  LogError = 'LOG_ERROR',
+  LogWarn = 'LOG_WARN',
+  NodeFailed = 'NODE_FAILED',
+  NodeRetried = 'NODE_RETRIED',
+  RunCancelled = 'RUN_CANCELLED',
+  RunCompleted = 'RUN_COMPLETED',
+  RunFailed = 'RUN_FAILED',
+  RunStarted = 'RUN_STARTED'
+}
+
+export enum LogStreamProvider {
+  Sentry = 'SENTRY',
+  Syslog = 'SYSLOG',
+  Webhook = 'WEBHOOK'
+}
+
 export type McpConnection = {
   __typename?: 'MCPConnection';
   config: Scalars['JSON']['output'];
@@ -44067,15 +44365,24 @@ export type ManAsset = {
   __typename?: 'ManAsset';
   assetTag: Scalars['String']['output'];
   createdAt: Scalars['DateTime']['output'];
+  /** Meter (running hours) at the last completed preventive service — the PM baseline. */
+  hoursAtLastService?: Maybe<Scalars['Float']['output']>;
+  /** Running hours since the last completed preventive service (lifetime hours if never serviced). */
+  hoursSinceService: Scalars['Float']['output'];
   id: Scalars['ID']['output'];
   installedAt?: Maybe<Scalars['DateTime']['output']>;
   lastServicedAt?: Maybe<Scalars['DateTime']['output']>;
   manufacturer?: Maybe<Scalars['String']['output']>;
   model?: Maybe<Scalars['String']['output']>;
   name: Scalars['String']['output'];
+  /** Hours until the next preventive service is due; negative once overdue. Null without a PM interval. */
+  pmDueInHours?: Maybe<Scalars['Float']['output']>;
   pmIntervalHours: Scalars['Float']['output'];
+  pmState: ManPmState;
   runningHours: Scalars['Float']['output'];
   serialNumber?: Maybe<Scalars['String']['output']>;
+  /** Immutable preventive-service history, newest first. */
+  serviceHistory: Array<ManAssetServiceRecord>;
   status: ManAssetStatus;
   tags: Array<Scalars['String']['output']>;
   updatedAt: Scalars['DateTime']['output'];
@@ -44095,6 +44402,16 @@ export type ManAssetConnection = {
   pageInfo: ManPageInfo;
 };
 
+export type ManAssetServiceRecord = {
+  __typename?: 'ManAssetServiceRecord';
+  actorId: Scalars['ID']['output'];
+  id: Scalars['ID']['output'];
+  /** Meter at service. Null only for services from before meter readings were captured. */
+  meterReading?: Maybe<Scalars['Float']['output']>;
+  servicedAt: Scalars['DateTime']['output'];
+  workOrderId: Scalars['ID']['output'];
+};
+
 export enum ManAssetStatus {
   Degraded = 'DEGRADED',
   Down = 'DOWN',
@@ -44103,6 +44420,14 @@ export enum ManAssetStatus {
   Retired = 'RETIRED'
 }
 
+export type ManAssignMaterialSerialInput = {
+  /** Record the unit as consumed (default: allocated). */
+  consume?: InputMaybe<Scalars['Boolean']['input']>;
+  operationId?: InputMaybe<Scalars['ID']['input']>;
+  productionOrderId: Scalars['ID']['input'];
+  reason?: InputMaybe<Scalars['String']['input']>;
+};
+
 export type ManBillOfMaterial = {
   __typename?: 'ManBillOfMaterial';
   code: Scalars['String']['output'];
@@ -44148,6 +44473,44 @@ export type ManBomLineConnection = {
   pageInfo: ManPageInfo;
 };
 
+/** Effectiveness check of an NCR's corrective action. Only EFFECTIVE allows the NCR to close. */
+export enum ManCapaVerificationResult {
+  Effective = 'EFFECTIVE',
+  NotEffective = 'NOT_EFFECTIVE'
+}
+
+export enum ManChecklistItemResult {
+  Fail = 'FAIL',
+  Na = 'NA',
+  Pass = 'PASS'
+}
+
+export type ManChecklistResult = {
+  __typename?: 'ManChecklistResult';
+  item: Scalars['String']['output'];
+  reading?: Maybe<Scalars['String']['output']>;
+  result: ManChecklistItemResult;
+};
+
+export type ManChecklistResultInput = {
+  item: Scalars['String']['input'];
+  reading?: InputMaybe<Scalars['String']['input']>;
+  result: ManChecklistItemResult;
+};
+
+export type ManCompleteMaintenanceWorkOrderInput = {
+  checklistResults?: InputMaybe<Array<ManChecklistResultInput>>;
+  /** What was done and found. Required. */
+  completionNotes: Scalars['String']['input'];
+  /** Actual labor time. Must be greater than zero. */
+  laborMinutes: Scalars['Int']['input'];
+  /** Asset meter (running hours) at completion; cannot go below the last service reading. */
+  meterReading?: InputMaybe<Scalars['Float']['input']>;
+  partsUsed?: InputMaybe<Array<ManPartUsedInput>>;
+  /** Accountable technician. Defaults to the assigned technician; one is required. */
+  technicianId?: InputMaybe<Scalars['ID']['input']>;
+};
+
 export type ManControlChartInput = {
   /** Required for XBAR_R / INDIVIDUAL_MR (the characteristic name as recorded in `measurements`). Ignored for P_CHART/C_CHART. */
   characteristic?: InputMaybe<Scalars['String']['input']>;
@@ -44259,6 +44622,7 @@ export type ManCreateInventoryItemInput = {
   reorderPoint?: InputMaybe<Scalars['Float']['input']>;
   sku: Scalars['String']['input'];
   standardCost?: InputMaybe<Scalars['Float']['input']>;
+  trackingMode?: InputMaybe<ManTrackingMode>;
   uom?: InputMaybe<Scalars['String']['input']>;
 };
 
@@ -44281,14 +44645,19 @@ export type ManCreateMaterialLotInput = {
   productionOrderId?: InputMaybe<Scalars['ID']['input']>;
   quantity?: InputMaybe<Scalars['Float']['input']>;
   receivedAt?: InputMaybe<Scalars['DateTime']['input']>;
+  /** Units received, for a serial-controlled SKU (required then; refused for any other SKU). The lot quantity becomes the number of serials registered. */
+  serials?: InputMaybe<ManSerialEntryInput>;
   supplier?: InputMaybe<Scalars['String']['input']>;
   tags?: InputMaybe<Array<Scalars['String']['input']>>;
   uom?: InputMaybe<Scalars['String']['input']>;
 };
 
 export type ManCreateOperationInput = {
+  /** Client-generated key (e.g. one UUID per form submission). A retried request with the same key returns the operation already created instead of adding a duplicate. */
+  idempotencyKey?: InputMaybe<Scalars['String']['input']>;
   name: Scalars['String']['input'];
   productionOrderId: Scalars['ID']['input'];
+  /** Defaults to the next free step (highest sequence in use + 10). */
   sequence?: InputMaybe<Scalars['Int']['input']>;
   workCenterId?: InputMaybe<Scalars['ID']['input']>;
 };
@@ -44326,6 +44695,8 @@ export type ManDowntimeEvent = {
   durationMinutes: Scalars['Int']['output'];
   endedAt?: Maybe<Scalars['DateTime']['output']>;
   id: Scalars['ID']['output'];
+  /** Maintenance work order that caused or resolved this downtime. */
+  maintenanceWorkOrderId?: Maybe<Scalars['ID']['output']>;
   productionOrderId?: Maybe<Scalars['ID']['output']>;
   reason: ManDowntimeReason;
   startedAt: Scalars['DateTime']['output'];
@@ -44466,6 +44837,12 @@ export enum ManInspectionStage {
   InProcess = 'IN_PROCESS'
 }
 
+export type ManInvalidSerial = {
+  __typename?: 'ManInvalidSerial';
+  reason: Scalars['String']['output'];
+  value: Scalars['String']['output'];
+};
+
 export type ManInventoryItem = {
   __typename?: 'ManInventoryItem';
   createdAt: Scalars['DateTime']['output'];
@@ -44479,6 +44856,8 @@ export type ManInventoryItem = {
   reorderPoint: Scalars['Float']['output'];
   sku: Scalars['String']['output'];
   standardCost: Scalars['Float']['output'];
+  /** How received units are identified. SERIAL makes every receipt register one unique serial per unit; a change applies to future receipts (each lot keeps the mode it was received under). */
+  trackingMode: ManTrackingMode;
   uom: Scalars['String']['output'];
   updatedAt: Scalars['DateTime']['output'];
   workspaceId: Scalars['ID']['output'];
@@ -44527,6 +44906,15 @@ export enum ManLegalCheckpointType {
   TenantDpaAccept = 'TENANT_DPA_ACCEPT'
 }
 
+export type ManLinkLotToOrderInput = {
+  /** Operation on the order that consumed / produced the material. */
+  operationId?: InputMaybe<Scalars['ID']['input']>;
+  productionOrderId: Scalars['ID']['input'];
+  quantity: Scalars['Float']['input'];
+  reason?: InputMaybe<Scalars['String']['input']>;
+  role: ManMaterialLinkRole;
+};
+
 export type ManMachineTagReading = {
   __typename?: 'ManMachineTagReading';
   createdAt: Scalars['DateTime']['output'];
@@ -44570,12 +44958,23 @@ export type ManMaintenanceWorkOrder = {
   __typename?: 'ManMaintenanceWorkOrder';
   asset?: Maybe<ManAsset>;
   assetId: Scalars['ID']['output'];
+  checklistResults: Array<ManChecklistResult>;
   completedAt?: Maybe<Scalars['DateTime']['output']>;
+  /** Actor who recorded the completion. */
+  completedBy?: Maybe<Scalars['ID']['output']>;
+  completionNotes?: Maybe<Scalars['String']['output']>;
   createdAt: Scalars['DateTime']['output'];
   description?: Maybe<Scalars['String']['output']>;
+  /** Downtime events recorded against this work order. */
+  downtimeEvents: Array<ManDowntimeEvent>;
+  /** Sum of the downtime events linked to this work order (the single source of downtime). */
   downtimeMinutes: Scalars['Int']['output'];
+  /** Immutable history: creation, every status change, completion evidence. */
+  history: Array<ManMaintenanceWorkOrderEvent>;
   id: Scalars['ID']['output'];
   laborMinutes: Scalars['Int']['output'];
+  meterReadingAtCompletion?: Maybe<Scalars['Float']['output']>;
+  partsUsed: Array<ManPartUsed>;
   scheduledFor?: Maybe<Scalars['DateTime']['output']>;
   startedAt?: Maybe<Scalars['DateTime']['output']>;
   status: ManMaintenanceStatus;
@@ -44593,23 +44992,76 @@ export type ManMaintenanceWorkOrderConnection = {
   pageInfo: ManPageInfo;
 };
 
+export type ManMaintenanceWorkOrderEvent = {
+  __typename?: 'ManMaintenanceWorkOrderEvent';
+  actorId: Scalars['ID']['output'];
+  /** Completion evidence snapshot for COMPLETED. */
+  changes?: Maybe<Scalars['JSON']['output']>;
+  eventType: ManMaintenanceWorkOrderEventType;
+  fromStatus?: Maybe<ManMaintenanceStatus>;
+  id: Scalars['ID']['output'];
+  occurredAt: Scalars['DateTime']['output'];
+  toStatus?: Maybe<ManMaintenanceStatus>;
+};
+
+export enum ManMaintenanceWorkOrderEventType {
+  Completed = 'COMPLETED',
+  Created = 'CREATED',
+  StatusChanged = 'STATUS_CHANGED'
+}
+
+/** How a lot relates to a production order. */
+export enum ManMaterialLinkRole {
+  ByProduct = 'BY_PRODUCT',
+  /** Consumed by the order. */
+  Input = 'INPUT',
+  /** Produced by the order. */
+  Output = 'OUTPUT',
+  /** Returned to stock from the order. */
+  Returned = 'RETURNED'
+}
+
 export type ManMaterialLot = {
   __typename?: 'ManMaterialLot';
   childLots: ManMaterialLotConnection;
   createdAt: Scalars['DateTime']['output'];
   expiresAt?: Maybe<Scalars['DateTime']['output']>;
-  id: Scalars['ID']['output'];
+  /** Immutable status and disposition history, oldest first. */
+  history: Array<ManMaterialLotEvent>;
+  /** Inspection that put the lot on hold, when the quarantine came from one. */
+  holdInspectionId?: Maybe<Scalars['ID']['output']>;
+  /** NCR that put the lot on hold, when the quarantine came from one. */
+  holdNonConformanceId?: Maybe<Scalars['ID']['output']>;
+  id: Scalars['ID']['output'];
+  /** True once expiresAt has passed — expired lots cannot be allocated or consumed. */
+  isExpired: Scalars['Boolean']['output'];
   lotNumber: Scalars['String']['output'];
   materialName: Scalars['String']['output'];
   materialSku: Scalars['String']['output'];
+  /** NCRs linked to this material lot. */
+  nonConformances: Array<ManNonConformance>;
+  /** Every order link — active and reversed — with role, quantity and operation. */
+  orderLinks: Array<ManMaterialLotOrderLink>;
   parentLot?: Maybe<ManMaterialLot>;
   parentLotId?: Maybe<Scalars['ID']['output']>;
+  /** The lot's primary consuming order (legacy single link), resolved for display. */
+  productionOrder?: Maybe<ManProductionOrder>;
   productionOrderId?: Maybe<Scalars['ID']['output']>;
   quantity: Scalars['Float']['output'];
   receivedAt?: Maybe<Scalars['DateTime']['output']>;
+  /** Unit count per status for a serial-controlled lot. */
+  serialCounts: Array<ManSerialStatusCount>;
+  /** Units in a serial-controlled lot (empty for other lots). */
+  serials: ManMaterialSerialConnection;
   status: ManMaterialLotStatus;
+  /** Every other status, each marked allowed or blocked with the reason. A quarantined lot offers none here: it leaves quarantine only through manReleaseMaterialLot. */
+  statusOptions: Array<ManMaterialLotStatusOption>;
+  /** Reason recorded with the most recent status change (quarantine, release, scrap). */
+  statusReason?: Maybe<Scalars['String']['output']>;
   supplier?: Maybe<Scalars['String']['output']>;
   tags: Array<Scalars['String']['output']>;
+  /** Tracking mode of the SKU when the lot was received. SERIAL lots hold uniquely identified units. */
+  trackingMode: ManTrackingMode;
   uom: Scalars['String']['output'];
   updatedAt: Scalars['DateTime']['output'];
   workspaceId: Scalars['ID']['output'];
@@ -44620,12 +45072,75 @@ export type ManMaterialLotChildLotsArgs = {
   pagination?: InputMaybe<PaginationInput>;
 };
 
+
+export type ManMaterialLotSerialsArgs = {
+  pagination?: InputMaybe<PaginationInput>;
+  search?: InputMaybe<Scalars['String']['input']>;
+  status?: InputMaybe<ManMaterialLotStatus>;
+};
+
 export type ManMaterialLotConnection = {
   __typename?: 'ManMaterialLotConnection';
   items: Array<ManMaterialLot>;
   pageInfo: ManPageInfo;
 };
 
+export type ManMaterialLotEvent = {
+  __typename?: 'ManMaterialLotEvent';
+  actorId: Scalars['ID']['output'];
+  /** Field diff for UPDATED ({ field: { from, to } }). */
+  changes?: Maybe<Scalars['JSON']['output']>;
+  eventType: ManMaterialLotEventType;
+  fromStatus?: Maybe<ManMaterialLotStatus>;
+  id: Scalars['ID']['output'];
+  inspectionId?: Maybe<Scalars['ID']['output']>;
+  nonConformanceId?: Maybe<Scalars['ID']['output']>;
+  occurredAt: Scalars['DateTime']['output'];
+  productionOrderId?: Maybe<Scalars['ID']['output']>;
+  reason?: Maybe<Scalars['String']['output']>;
+  toStatus?: Maybe<ManMaterialLotStatus>;
+};
+
+/** Kind of immutable material-lot history event. */
+export enum ManMaterialLotEventType {
+  Created = 'CREATED',
+  Dispositioned = 'DISPOSITIONED',
+  Linked = 'LINKED',
+  LinkReversed = 'LINK_REVERSED',
+  Quarantined = 'QUARANTINED',
+  Released = 'RELEASED',
+  StatusChanged = 'STATUS_CHANGED',
+  Updated = 'UPDATED'
+}
+
+export type ManMaterialLotOrderLink = {
+  __typename?: 'ManMaterialLotOrderLink';
+  createdAt: Scalars['DateTime']['output'];
+  createdBy: Scalars['ID']['output'];
+  id: Scalars['ID']['output'];
+  materialLot?: Maybe<ManMaterialLot>;
+  materialLotId: Scalars['ID']['output'];
+  operation?: Maybe<ManProductionOperation>;
+  operationId?: Maybe<Scalars['ID']['output']>;
+  productionOrder?: Maybe<ManProductionOrder>;
+  productionOrderId: Scalars['ID']['output'];
+  quantity: Scalars['Float']['output'];
+  reason?: Maybe<Scalars['String']['output']>;
+  reversalReason?: Maybe<Scalars['String']['output']>;
+  /** Set when the link was reversed (corrections reverse + re-link; nothing is edited). */
+  reversedAt?: Maybe<Scalars['DateTime']['output']>;
+  reversedBy?: Maybe<Scalars['ID']['output']>;
+  role: ManMaterialLinkRole;
+};
+
+/** Outcome of a quarantine review. */
+export enum ManMaterialLotReleaseDecision {
+  /** Return the lot to AVAILABLE. */
+  Release = 'RELEASE',
+  /** Disposition the lot as SCRAPPED. */
+  Scrap = 'SCRAP'
+}
+
 export enum ManMaterialLotStatus {
   Allocated = 'ALLOCATED',
   Available = 'AVAILABLE',
@@ -44634,6 +45149,16 @@ export enum ManMaterialLotStatus {
   Scrapped = 'SCRAPPED'
 }
 
+export type ManMaterialLotStatusOption = {
+  __typename?: 'ManMaterialLotStatusOption';
+  allowed: Scalars['Boolean']['output'];
+  /** Why the move is blocked. Null when allowed. */
+  reason?: Maybe<Scalars['String']['output']>;
+  /** The move must carry a reason (quarantine, scrap). */
+  requiresReason: Scalars['Boolean']['output'];
+  status: ManMaterialLotStatus;
+};
+
 /** One line of a persisted material-requirements-planning run for a production order: real quantity required (BOM-exploded), real quantity on hand (netted from ManMaterialLot AVAILABLE quantity), and the resulting shortage. */
 export type ManMaterialRequirement = {
   __typename?: 'ManMaterialRequirement';
@@ -44650,26 +45175,117 @@ export type ManMaterialRequirement = {
   workspaceId: Scalars['ID']['output'];
 };
 
+export type ManMaterialSerial = {
+  __typename?: 'ManMaterialSerial';
+  createdAt: Scalars['DateTime']['output'];
+  createdBy: Scalars['ID']['output'];
+  /** The unit is held because its whole lot is quarantined (released with the lot). */
+  heldByLot: Scalars['Boolean']['output'];
+  /** Immutable per-unit history, oldest first. */
+  history: Array<ManMaterialSerialEvent>;
+  /** NCR behind the unit's quarantine, when it came from one. */
+  holdNonConformanceId?: Maybe<Scalars['ID']['output']>;
+  id: Scalars['ID']['output'];
+  /** True once the unit's lot has expired — expired units cannot be allocated or consumed. */
+  isExpired: Scalars['Boolean']['output'];
+  materialLot?: Maybe<ManMaterialLot>;
+  materialLotId: Scalars['ID']['output'];
+  materialSku: Scalars['String']['output'];
+  operation?: Maybe<ManProductionOperation>;
+  operationId?: Maybe<Scalars['ID']['output']>;
+  productionOrder?: Maybe<ManProductionOrder>;
+  /** Order the unit is allocated to or was consumed by. */
+  productionOrderId?: Maybe<Scalars['ID']['output']>;
+  serialNumber: Scalars['String']['output'];
+  status: ManMaterialLotStatus;
+  /** Every other status, each marked allowed or blocked with the reason. QUARANTINED and SCRAPPED go through manSetMaterialSerialStatus, ALLOCATED and CONSUMED through manAssignMaterialSerial, AVAILABLE (from ALLOCATED) through manUnassignMaterialSerial. */
+  statusOptions: Array<ManMaterialLotStatusOption>;
+  /** Reason recorded with the most recent change. */
+  statusReason?: Maybe<Scalars['String']['output']>;
+  updatedAt: Scalars['DateTime']['output'];
+  workspaceId: Scalars['ID']['output'];
+};
+
+export type ManMaterialSerialConnection = {
+  __typename?: 'ManMaterialSerialConnection';
+  items: Array<ManMaterialSerial>;
+  pageInfo: ManPageInfo;
+};
+
+export type ManMaterialSerialEvent = {
+  __typename?: 'ManMaterialSerialEvent';
+  actorId: Scalars['ID']['output'];
+  eventType: ManMaterialSerialEventType;
+  fromStatus?: Maybe<ManMaterialLotStatus>;
+  id: Scalars['ID']['output'];
+  nonConformanceId?: Maybe<Scalars['ID']['output']>;
+  occurredAt: Scalars['DateTime']['output'];
+  operationId?: Maybe<Scalars['ID']['output']>;
+  productionOrderId?: Maybe<Scalars['ID']['output']>;
+  reason?: Maybe<Scalars['String']['output']>;
+  toStatus?: Maybe<ManMaterialLotStatus>;
+};
+
+/** Kind of immutable per-unit history event. */
+export enum ManMaterialSerialEventType {
+  /** Allocated to / consumed by a production order. */
+  Assigned = 'ASSIGNED',
+  Dispositioned = 'DISPOSITIONED',
+  Quarantined = 'QUARANTINED',
+  Received = 'RECEIVED',
+  Released = 'RELEASED',
+  StatusChanged = 'STATUS_CHANGED',
+  /** Order allocation removed (unassigned, or cleared by a hold). */
+  Unassigned = 'UNASSIGNED'
+}
+
+export type ManMaterialSerialFilterInput = {
+  materialLotId?: InputMaybe<Scalars['ID']['input']>;
+  materialSku?: InputMaybe<Scalars['String']['input']>;
+  productionOrderId?: InputMaybe<Scalars['ID']['input']>;
+  /** Case-insensitive part of the serial number. */
+  search?: InputMaybe<Scalars['String']['input']>;
+  status?: InputMaybe<ManMaterialLotStatus>;
+};
+
 export type ManNonConformance = {
   __typename?: 'ManNonConformance';
+  /** Immediate containment performed (quarantine, sort, hold). */
+  containmentAction?: Maybe<Scalars['String']['output']>;
   correctiveAction?: Maybe<Scalars['String']['output']>;
   createdAt: Scalars['DateTime']['output'];
+  createdBy: Scalars['ID']['output'];
   description?: Maybe<Scalars['String']['output']>;
   disposition: ManNonConformanceDisposition;
+  /** Why the chosen disposition is acceptable. */
+  dispositionJustification?: Maybe<Scalars['String']['output']>;
   dueDate?: Maybe<Scalars['DateTime']['output']>;
+  /** Immutable audit trail, oldest first. */
+  history: Array<ManNonConformanceEvent>;
   id: Scalars['ID']['output'];
   inspection?: Maybe<ManQualityInspection>;
   inspectionId?: Maybe<Scalars['ID']['output']>;
+  /** Active affected-entity links. */
+  links: Array<ManNonConformanceLink>;
   ncrNumber: Scalars['String']['output'];
+  /** Legal next statuses, each with the evidence still missing before the move is accepted. Empty for a CLOSED NCR (use manReopenNonConformance). */
+  nextTransitions: Array<ManNonConformanceTransitionOption>;
   ownerId?: Maybe<Scalars['ID']['output']>;
   quantityAffected: Scalars['Float']['output'];
   resolvedAt?: Maybe<Scalars['DateTime']['output']>;
   rootCause?: Maybe<Scalars['String']['output']>;
   severity: ManSeverity;
+  /** Why the NCR is not tied to an order, operation, lot or inspection. */
+  standaloneReason?: Maybe<Scalars['String']['output']>;
   status: ManNonConformanceStatus;
   tags: Array<Scalars['String']['output']>;
   title: Scalars['String']['output'];
   updatedAt: Scalars['DateTime']['output'];
+  verificationNotes?: Maybe<Scalars['String']['output']>;
+  verificationResult?: Maybe<ManCapaVerificationResult>;
+  verifiedAt?: Maybe<Scalars['DateTime']['output']>;
+  /** Actor who recorded the verification. */
+  verifiedBy?: Maybe<Scalars['ID']['output']>;
   workspaceId: Scalars['ID']['output'];
 };
 
@@ -44687,6 +45303,54 @@ export enum ManNonConformanceDisposition {
   UseAsIs = 'USE_AS_IS'
 }
 
+export type ManNonConformanceEvent = {
+  __typename?: 'ManNonConformanceEvent';
+  actorId: Scalars['ID']['output'];
+  /** Field diff for UPDATED ({ field: { from, to } }); the link for LINK_ADDED / LINK_REMOVED. */
+  changes?: Maybe<Scalars['JSON']['output']>;
+  comment?: Maybe<Scalars['String']['output']>;
+  eventType: ManNonConformanceEventType;
+  fromStatus?: Maybe<ManNonConformanceStatus>;
+  id: Scalars['ID']['output'];
+  occurredAt: Scalars['DateTime']['output'];
+  toStatus?: Maybe<ManNonConformanceStatus>;
+};
+
+/** Kind of immutable NCR audit event. */
+export enum ManNonConformanceEventType {
+  Created = 'CREATED',
+  LinkAdded = 'LINK_ADDED',
+  LinkRemoved = 'LINK_REMOVED',
+  Reopened = 'REOPENED',
+  StatusChanged = 'STATUS_CHANGED',
+  Updated = 'UPDATED',
+  Verified = 'VERIFIED'
+}
+
+export type ManNonConformanceLink = {
+  __typename?: 'ManNonConformanceLink';
+  createdAt: Scalars['DateTime']['output'];
+  createdBy: Scalars['ID']['output'];
+  entityId: Scalars['ID']['output'];
+  entityType: ManNonConformanceLinkType;
+  id: Scalars['ID']['output'];
+  materialLot?: Maybe<ManMaterialLot>;
+  operation?: Maybe<ManProductionOperation>;
+  productionOrder?: Maybe<ManProductionOrder>;
+};
+
+export type ManNonConformanceLinkInput = {
+  entityId: Scalars['ID']['input'];
+  entityType: ManNonConformanceLinkType;
+};
+
+/** Entity an NCR can be linked to. Inspections link through ManNonConformance.inspectionId. */
+export enum ManNonConformanceLinkType {
+  MaterialLot = 'MATERIAL_LOT',
+  Operation = 'OPERATION',
+  ProductionOrder = 'PRODUCTION_ORDER'
+}
+
 export enum ManNonConformanceStatus {
   Closed = 'CLOSED',
   Contained = 'CONTAINED',
@@ -44695,6 +45359,13 @@ export enum ManNonConformanceStatus {
   Open = 'OPEN'
 }
 
+export type ManNonConformanceTransitionOption = {
+  __typename?: 'ManNonConformanceTransitionOption';
+  /** Field names that must be recorded first. Empty means the move is allowed. */
+  missingFields: Array<Scalars['String']['output']>;
+  status: ManNonConformanceStatus;
+};
+
 export enum ManOperationStatus {
   Done = 'DONE',
   Pending = 'PENDING',
@@ -44737,13 +45408,41 @@ export type ManPageInfo = {
   hasMore: Scalars['Boolean']['output'];
 };
 
+export type ManPartUsed = {
+  __typename?: 'ManPartUsed';
+  description?: Maybe<Scalars['String']['output']>;
+  lotNumber?: Maybe<Scalars['String']['output']>;
+  partNumber: Scalars['String']['output'];
+  quantity: Scalars['Float']['output'];
+  serialNumber?: Maybe<Scalars['String']['output']>;
+};
+
+export type ManPartUsedInput = {
+  description?: InputMaybe<Scalars['String']['input']>;
+  lotNumber?: InputMaybe<Scalars['String']['input']>;
+  partNumber: Scalars['String']['input'];
+  quantity: Scalars['Float']['input'];
+  serialNumber?: InputMaybe<Scalars['String']['input']>;
+};
+
+export enum ManPmState {
+  DueSoon = 'DUE_SOON',
+  NotScheduled = 'NOT_SCHEDULED',
+  Ok = 'OK',
+  Overdue = 'OVERDUE'
+}
+
 export type ManProductionOperation = {
   __typename?: 'ManProductionOperation';
+  /** True while the step is PENDING and unstarted — only then can it be edited or removed. */
+  canEditRouting: Scalars['Boolean']['output'];
   completedAt?: Maybe<Scalars['DateTime']['output']>;
   createdAt: Scalars['DateTime']['output'];
   goodCount: Scalars['Float']['output'];
   id: Scalars['ID']['output'];
   name: Scalars['String']['output'];
+  /** NCRs linked to this operation. */
+  nonConformances: Array<ManNonConformance>;
   operatorId?: Maybe<Scalars['ID']['output']>;
   plannedEnd?: Maybe<Scalars['DateTime']['output']>;
   /** Finite-capacity schedule output (BOFF-4287) — set by manScheduleProductionOrders. Null until a schedule run has placed this operation. */
@@ -44775,7 +45474,11 @@ export type ManProductionOrder = {
   dueDate?: Maybe<Scalars['DateTime']['output']>;
   erpReference?: Maybe<Scalars['String']['output']>;
   id: Scalars['ID']['output'];
+  /** Material linked to this order (consumed, produced, by-product, returned), active and reversed. */
+  materialLinks: Array<ManMaterialLotOrderLink>;
   materialLots: ManMaterialLotConnection;
+  /** NCRs linked to this production order. */
+  nonConformances: Array<ManNonConformance>;
   notes?: Maybe<Scalars['String']['output']>;
   operations: ManProductionOperationConnection;
   orderNumber: Scalars['String']['output'];
@@ -44786,6 +45489,10 @@ export type ManProductionOrder = {
   productSku: Scalars['String']['output'];
   quantity: Scalars['Float']['output'];
   quantityDone: Scalars['Float']['output'];
+  /** Immutable routing-change history (operations added, edited, removed), oldest first. */
+  routingHistory: Array<ManRoutingEvent>;
+  /** Serial-controlled units allocated to or consumed by this order. */
+  serials: ManMaterialSerialConnection;
   status: ManProductionOrderStatus;
   tags: Array<Scalars['String']['output']>;
   uom: Scalars['String']['output'];
@@ -44803,6 +45510,11 @@ export type ManProductionOrderOperationsArgs = {
   pagination?: InputMaybe<PaginationInput>;
 };
 
+
+export type ManProductionOrderSerialsArgs = {
+  pagination?: InputMaybe<PaginationInput>;
+};
+
 export type ManProductionOrderConnection = {
   __typename?: 'ManProductionOrderConnection';
   items: Array<ManProductionOrder>;
@@ -44860,6 +45572,8 @@ export type ManQualityInspectionConnection = {
 };
 
 export type ManRaiseNonConformanceInput = {
+  /** Production orders, operations and material lots the defect affects. At least one affected entity, an inspectionId, or a standaloneReason is required. */
+  affected?: InputMaybe<Array<ManNonConformanceLinkInput>>;
   description?: InputMaybe<Scalars['String']['input']>;
   disposition?: InputMaybe<ManNonConformanceDisposition>;
   dueDate?: InputMaybe<Scalars['DateTime']['input']>;
@@ -44868,15 +45582,18 @@ export type ManRaiseNonConformanceInput = {
   ownerId?: InputMaybe<Scalars['ID']['input']>;
   quantityAffected?: InputMaybe<Scalars['Float']['input']>;
   severity?: InputMaybe<ManSeverity>;
+  standaloneReason?: InputMaybe<Scalars['String']['input']>;
   tags?: InputMaybe<Array<Scalars['String']['input']>>;
   title: Scalars['String']['input'];
 };
 
 export type ManRecordDowntimeInput = {
+  /** Optional when maintenanceWorkOrderId is given (the work order's asset is used); must match it otherwise. */
   assetId?: InputMaybe<Scalars['ID']['input']>;
   description?: InputMaybe<Scalars['String']['input']>;
   durationMinutes?: InputMaybe<Scalars['Int']['input']>;
   endedAt?: InputMaybe<Scalars['DateTime']['input']>;
+  maintenanceWorkOrderId?: InputMaybe<Scalars['ID']['input']>;
   productionOrderId?: InputMaybe<Scalars['ID']['input']>;
   reason?: InputMaybe<ManDowntimeReason>;
   startedAt: Scalars['DateTime']['input'];
@@ -44920,6 +45637,32 @@ export type ManRecordOperationInput = {
   status?: InputMaybe<ManOperationStatus>;
 };
 
+export type ManReleaseMaterialLotInput = {
+  decision: ManMaterialLotReleaseDecision;
+  /** Why the material is fit for use (or why it is scrapped). Required. */
+  reason: Scalars['String']['input'];
+};
+
+export type ManRoutingEvent = {
+  __typename?: 'ManRoutingEvent';
+  actorId: Scalars['ID']['output'];
+  /** Operation snapshot for ADDED/REMOVED; { field: { from, to } } for CHANGED. */
+  changes?: Maybe<Scalars['JSON']['output']>;
+  eventType: ManRoutingEventType;
+  id: Scalars['ID']['output'];
+  occurredAt: Scalars['DateTime']['output'];
+  operationId: Scalars['ID']['output'];
+  /** Removal reason (REMOVED). */
+  reason?: Maybe<Scalars['String']['output']>;
+};
+
+/** Kind of immutable routing-change event. */
+export enum ManRoutingEventType {
+  Added = 'ADDED',
+  Changed = 'CHANGED',
+  Removed = 'REMOVED'
+}
+
 export type ManScheduleProductionOrdersInput = {
   /** Scheduling horizon in days from today. Default 30, max 90. */
   horizonDays?: InputMaybe<Scalars['Int']['input']>;
@@ -44945,6 +45688,61 @@ export type ManScheduledOperation = {
   workCenterId: Scalars['ID']['output'];
 };
 
+/** Units for one receipt — any mix of single values, a range, and pasted/imported text (split on lines, commas, semicolons, tabs and spaces). Up to 5000 per request. */
+export type ManSerialEntryInput = {
+  bulkText?: InputMaybe<Scalars['String']['input']>;
+  range?: InputMaybe<ManSerialRangeInput>;
+  serialNumbers?: InputMaybe<Array<Scalars['String']['input']>>;
+};
+
+/** What a receipt would register, and every problem with it — nothing is written. */
+export type ManSerialEntryReport = {
+  __typename?: 'ManSerialEntryReport';
+  /** Serials that would be registered (well-formed, unique, not yet registered). */
+  accepted: Array<Scalars['String']['output']>;
+  alreadyRegistered: Array<Scalars['String']['output']>;
+  duplicatesInInput: Array<Scalars['String']['output']>;
+  /** Problems with the entry itself (bad range, over the limit, SKU not serial-controlled). */
+  errors: Array<Scalars['String']['output']>;
+  invalid: Array<ManInvalidSerial>;
+  materialSku: Scalars['String']['output'];
+  /** The whole entry can be registered as entered. */
+  ok: Scalars['Boolean']['output'];
+  /** Distinct, well-formed serials in the entry. */
+  total: Scalars['Int']['output'];
+  trackingMode: ManTrackingMode;
+};
+
+/** A counter range: prefix + zero-padded number + suffix, start..end inclusive. */
+export type ManSerialRangeInput = {
+  end: Scalars['Int']['input'];
+  /** Minimum digits for the counter (zero-padded). */
+  padding?: InputMaybe<Scalars['Int']['input']>;
+  prefix?: InputMaybe<Scalars['String']['input']>;
+  start: Scalars['Int']['input'];
+  suffix?: InputMaybe<Scalars['String']['input']>;
+};
+
+/** Recall scope for one unit: its lot and everything received with it. */
+export type ManSerialRecall = {
+  __typename?: 'ManSerialRecall';
+  /** Orders that consumed or hold units from the same lot. */
+  affectedOrders: Array<ManProductionOrder>;
+  lot?: Maybe<ManMaterialLot>;
+  /** Every unit received in the same lot (up to 2000), with status and order. */
+  lotUnits: Array<ManMaterialSerial>;
+  serial: ManMaterialSerial;
+  statusCounts: Array<ManSerialStatusCount>;
+  /** More units exist in the lot than lotUnits lists. */
+  truncated: Scalars['Boolean']['output'];
+};
+
+export type ManSerialStatusCount = {
+  __typename?: 'ManSerialStatusCount';
+  count: Scalars['Int']['output'];
+  status: ManMaterialLotStatus;
+};
+
 export enum ManSeverity {
   Critical = 'CRITICAL',
   Major = 'MAJOR',
@@ -44964,6 +45762,16 @@ export enum ManTagSource {
   OpcUa = 'OPC_UA'
 }
 
+/** How received units of a material are identified. */
+export enum ManTrackingMode {
+  /** Traced by lot number with an aggregate quantity. */
+  Lot = 'LOT',
+  /** Not individually traced. */
+  None = 'NONE',
+  /** Every unit carries its own unique serial number. */
+  Serial = 'SERIAL'
+}
+
 export type ManUnscheduledOperation = {
   __typename?: 'ManUnscheduledOperation';
   operationId: Scalars['ID']['output'];
@@ -44997,6 +45805,7 @@ export type ManUpdateInventoryItemInput = {
   name?: InputMaybe<Scalars['String']['input']>;
   reorderPoint?: InputMaybe<Scalars['Float']['input']>;
   standardCost?: InputMaybe<Scalars['Float']['input']>;
+  trackingMode?: InputMaybe<ManTrackingMode>;
   uom?: InputMaybe<Scalars['String']['input']>;
 };
 
@@ -45012,18 +45821,27 @@ export type ManUpdateMaterialLotInput = {
 };
 
 export type ManUpdateNonConformanceInput = {
+  containmentAction?: InputMaybe<Scalars['String']['input']>;
   correctiveAction?: InputMaybe<Scalars['String']['input']>;
   description?: InputMaybe<Scalars['String']['input']>;
   disposition?: InputMaybe<ManNonConformanceDisposition>;
+  dispositionJustification?: InputMaybe<Scalars['String']['input']>;
   dueDate?: InputMaybe<Scalars['DateTime']['input']>;
   ownerId?: InputMaybe<Scalars['ID']['input']>;
   quantityAffected?: InputMaybe<Scalars['Float']['input']>;
   rootCause?: InputMaybe<Scalars['String']['input']>;
   severity?: InputMaybe<ManSeverity>;
+  standaloneReason?: InputMaybe<Scalars['String']['input']>;
   tags?: InputMaybe<Array<Scalars['String']['input']>>;
   title?: InputMaybe<Scalars['String']['input']>;
 };
 
+export type ManUpdateOperationInput = {
+  name?: InputMaybe<Scalars['String']['input']>;
+  sequence?: InputMaybe<Scalars['Int']['input']>;
+  workCenterId?: InputMaybe<Scalars['ID']['input']>;
+};
+
 export type ManUpdateProductionOrderInput = {
   dueDate?: InputMaybe<Scalars['DateTime']['input']>;
   erpReference?: InputMaybe<Scalars['String']['input']>;
@@ -45047,6 +45865,12 @@ export type ManUpdateWorkCenterInput = {
   type?: InputMaybe<ManWorkCenterType>;
 };
 
+export type ManVerifyNonConformanceInput = {
+  /** Required when result is NOT_EFFECTIVE. */
+  notes?: InputMaybe<Scalars['String']['input']>;
+  result: ManCapaVerificationResult;
+};
+
 export type ManWorkCenter = {
   __typename?: 'ManWorkCenter';
   capacityHours: Scalars['Float']['output'];
@@ -46085,6 +46909,8 @@ export type MtwDeliveryJob = {
   pickupAddress: Scalars['JSON']['output'];
   pricing?: Maybe<Scalars['JSON']['output']>;
   priority: DeliveryPriority;
+  route?: Maybe<MtwRoute>;
+  routeId?: Maybe<Scalars['ID']['output']>;
   scheduledDelivery?: Maybe<Scalars['DateTime']['output']>;
   shipment?: Maybe<MtwShipment>;
   specialInstructions?: Maybe<Scalars['String']['output']>;
@@ -46190,7 +47016,13 @@ export type MtwDriver = {
   updatedAt: Scalars['DateTime']['output'];
   updatedBy?: Maybe<Scalars['String']['output']>;
   userId?: Maybe<Scalars['String']['output']>;
+  /**
+   * Deprecated: use the many-to-many vehicleIds relationship.
+   * @deprecated Use vehicles/vehicleIds for many-to-many fleet assignments.
+   */
   vehicleId?: Maybe<Scalars['String']['output']>;
+  /** Vehicles linked to this driver through the workspace fleet relationship. */
+  vehicles: Array<MtwVehicle>;
   workspaceId: Scalars['ID']['output'];
 };
 
@@ -46649,6 +47481,7 @@ export type MtwVehicle = {
   createdBy: Scalars['String']['output'];
   currentLocation?: Maybe<Scalars['JSON']['output']>;
   deletedAt?: Maybe<Scalars['DateTime']['output']>;
+  drivers: Array<MtwDriver>;
   fuelEfficiencyLPer100Km?: Maybe<Scalars['Float']['output']>;
   fuelLevel?: Maybe<Scalars['Float']['output']>;
   fuelType?: Maybe<FuelType>;
@@ -47690,6 +48523,7 @@ export type Mutation = {
   createDashboardView: DashboardView;
   /** Create a data sink */
   createDataSink: DataSink;
+  createDataTable: DataTableResponse;
   createDeliveryJob: MtwDeliveryJob;
   createDigitalTwin: DigitalTwin;
   /** Create a disposable workspace (BOFF-6560): the ONLY supported path that can set `Workspace.isDisposable`. Restricted to service actors — same security model as syncFromGlobal (actorTypes over action/resource RBAC, because the workspace doesn't exist yet and this is M2M-only by design). No user/billing quota is enforced; disposable workspaces are ops/test tooling, not customer seats. Callers (e.g. a product's demo-seed job) are responsible for tearing the workspace down through the normal deleteWorkspace mutation when done. */
@@ -47930,6 +48764,7 @@ export type Mutation = {
   createLegalHold: LegalHold;
   createLifeGoal: TimeCampusLifeGoal;
   createLocationEntry: LocationEntry;
+  createLogStreamDestination: LogStreamDestinationResponse;
   createMCPConnection: McpConnection;
   /** Create a recurring maintenance schedule on an asset (BOFF-6031). */
   createMaintenancePlan: MaintenancePlan;
@@ -48067,6 +48902,7 @@ export type Mutation = {
   createWorkflowSandbox: Sandbox;
   /** Create a new scheduled job */
   createWorkflowScheduledJob: ScheduledJobResponse;
+  createWorkflowVariable: WorkflowVariableResponse;
   createWorkflowVersion: CreateWorkflowVersionResponse;
   /** Create a new workspace. Tenant ID is read from gateway context (x-tenant-id header). Owner defaults to authenticated actor (x-actor-id header). */
   createWorkspace: Workspace;
@@ -48088,6 +48924,8 @@ export type Mutation = {
   decideHealthyBowlAgronomyDecision: AgronomyDecision;
   /** BOFF-3676 — record a human verdict on a recommendation. ACCEPTED moves it to ACKNOWLEDGED, not RESOLVED: accepting advice is not doing the work, and resolving it would hide outstanding work from every "what needs doing" read. Re-deciding is refused rather than overwritten — the first verdict is the record of what someone judged. */
   decideHealthyBowlFarmRecommendation: HealthyBowlFarmRecommendation;
+  /** Approve or reject some/all of a pending request's tool calls and resume the run. Any call not listed in `decisions` is treated as REJECTED — approval must be explicit, never implicit (BOFF-7521 safety invariant: a call the caller did not decide on must never execute). */
+  decideToolApproval: DecideToolApprovalResponse;
   declareLifeValue: TimeCampusLifeValue;
   /** Decline a file/folder share invitation. */
   declineFileShare: Scalars['Boolean']['output'];
@@ -48158,6 +48996,8 @@ export type Mutation = {
   deleteDashboardView: Scalars['Boolean']['output'];
   /** Delete a data sink (soft delete) */
   deleteDataSink: DataSink;
+  deleteDataTable: DeleteConfigResponse;
+  deleteDataTableRows: DataTableRowsMutationResponse;
   deleteDeliveryJob: Scalars['Boolean']['output'];
   /** Remove a component's deployment record for an environment. */
   deleteDeployment: Scalars['Boolean']['output'];
@@ -48351,6 +49191,7 @@ export type Mutation = {
   deleteLifeGoal: TimeCampusLifeGoal;
   deleteLifeValue: TimeCampusLifeValue;
   deleteLocationEntry: LocationEntry;
+  deleteLogStreamDestination: DeleteConfigResponse;
   deleteMCPConnection: Scalars['Boolean']['output'];
   /** Delete a plan. Records it already generated are KEPT and simply lose their link — the service history is a fact, and deleting a schedule must never delete the evidence that the work was done. */
   deleteMaintenancePlan: Scalars['Boolean']['output'];
@@ -48471,6 +49312,7 @@ export type Mutation = {
   deleteWorkflowDefinition: Scalars['Boolean']['output'];
   /** Delete a scheduled job (soft delete) */
   deleteWorkflowScheduledJob: DeleteConfigResponse;
+  deleteWorkflowVariable: DeleteConfigResponse;
   /** Soft delete a workspace (sets status to DELETED and populates deletedAt). The workspace and its intra-service records remain recoverable during the platform's documented 30-day retention / grace-period. After the retention period a background purge may hard-delete the row and its cascaded records. The workspace_audit_log row for this event is written after the soft delete and is intentionally NOT foreign-keyed to Workspace so it survives eventual purge (see WorkspaceAuditLog's schema doc-comment). */
   deleteWorkspace: Scalars['Boolean']['output'];
   /** Delete a workspace resource */
@@ -49094,6 +49936,8 @@ export type Mutation = {
   importSecrets: SecretImportResult;
   /** Import hosts from SSH config scan as targets (batch create). */
   importTargetsFromConfig: TargetImportResult;
+  /** Import a portable workflow JSON document as a new DRAFT. */
+  importWorkflow: ImportWorkflowResponse;
   /** Import a workflow from a store template. Creates a new DRAFT workflow definition from the provided definitionJson and tracks the source template for lineage/analytics. Usage tracking: consumes one slot from fluidgrids.workflows.count, same as createWorkflowDefinition (which this delegates to internally). */
   importWorkflowTemplate: ImportWorkflowTemplateResponse;
   /** Import a resource configuration to create a new resource. Workspace ID is read from gateway context (x-workspace-id header). */
@@ -49123,6 +49967,7 @@ export type Mutation = {
   initiateOAuth: OAuthInitiationResult;
   /** Initiate a new upload session Returns session details and initial presigned URLs */
   initiateUpload: UploadSessionWithUrls;
+  insertDataTableRow: DataTableRowResponse;
   /** Install an action from the store (creates a local instance) */
   installActionFromStore: Action;
   installAgentOnTarget: InstallJob;
@@ -49375,10 +50220,15 @@ export type Mutation = {
   /** Self-report an interruption during the caller's own ACTIVE focus session. Returns the updated session (with the new interruption included). */
   logTimeCampusFocusInterruption: TimeCampusFocusSession;
   manAddBomLine: ManBomLine;
+  /** Add a routing operation. Retry-safe with idempotencyKey; a sequence already used on the order is rejected with MAN_OPERATION_SEQUENCE_TAKEN. Rejected with MAN_ROUTING_LOCKED once the order is completed, closed or cancelled. */
   manAddOperation: ManProductionOperation;
   manArchiveWorkCenter: Scalars['Boolean']['output'];
+  /** Allocate a unit to (or consume it on) a production order, optionally naming the operation. */
+  manAssignMaterialSerial: ManMaterialSerial;
   /** Explode the production order's BOM (recursively through sub-assemblies) against real on-hand inventory (sum of ManMaterialLot AVAILABLE quantity per SKU) and persist the net requirement per leaf component, replacing any prior run for this order. */
   manCalculateMaterialRequirements: Array<ManMaterialRequirement>;
+  /** Complete an in-progress work order with its evidence (technician, labor time and notes required; parts, checklist and meter reading optional). Completing a PREVENTIVE work order resets the asset's service baseline. */
+  manCompleteMaintenanceWorkOrder: ManMaintenanceWorkOrder;
   manCreateAsset: ManAsset;
   manCreateBom: ManBillOfMaterial;
   manCreateErpConnection: ManErpConnection;
@@ -49394,7 +50244,13 @@ export type Mutation = {
   manErpPushInventoryItem: ManErpSyncRecord;
   /** Record one machine tag reading. This is the SAME ingestion path real MQTT messages flow through (src/modules/connectivity/services/mqtt-ingestion.service.ts) — useful as a manual/backfill entry point and to live-verify the ingestion pipeline end-to-end via GraphQL in environments where no MQTT broker is reachable (e.g. behind the ACA network's egress policy). */
   manIngestTagReading: ManMachineTagReading;
+  /** Link a lot to a production order with a role and quantity (post-receipt allocation). Quantities are checked against the lot (MAN_LOT_OVERALLOCATED); blocked lots cannot be consumed. */
+  manLinkMaterialLotToOrder: ManMaterialLotOrderLink;
+  /** Link an affected production order, operation or material lot. Idempotent. */
+  manLinkNonConformanceEntity: ManNonConformance;
   manRaiseNonConformance: ManNonConformance;
+  /** Partial receipt: register more units into an AVAILABLE serial lot. Rejected with MAN_SERIAL_DUPLICATE (already registered / entered twice) or MAN_SERIAL_INVALID. */
+  manReceiveMaterialSerials: ManMaterialLot;
   manRecordDowntime: ManDowntimeEvent;
   manRecordInspection: ManQualityInspection;
   /** Record that the CALLING actor accepted a legal document/version at an in-product checkpoint. Self-scoped (Type A): no identity arg. Idempotent — re-accepting the same (checkpointType, documentVersion) updates the timestamp/audit fields rather than duplicating the row. */
@@ -49403,23 +50259,44 @@ export type Mutation = {
   manRecordMeasurement: ManQualityInspection;
   /** Record progress against a routing operation (setup/run time, good/scrap counts). */
   manRecordOperation: ManProductionOperation;
+  /** Quarantine review — the only way out of QUARANTINED. RELEASE returns the lot to AVAILABLE, SCRAP dispositions it; both need a reason and are recorded as their own history event. Gated behind the separate `release` permission. */
+  manReleaseMaterialLot: ManMaterialLot;
+  /** Quarantine review for a held unit (separate `release` permission). RELEASE is refused while the unit's lot is quarantined (MAN_SERIAL_HELD_BY_LOT) — lot-held units return with the lot's release; SCRAP is always available. */
+  manReleaseMaterialSerial: ManMaterialSerial;
+  /** Remove a routing step that has not started. Soft removal: the step and the required reason stay on the routing history. */
+  manRemoveOperation: ManProductionOperation;
+  /** Reopen a CLOSED NCR (returns to INVESTIGATING). The reason is recorded on the audit trail; the previous verification is cleared. */
+  manReopenNonConformance: ManNonConformance;
+  /** Reverse a lot-order link with a reason (corrections = reverse + re-link). Refused once the lot is consumed or the order is finished (MAN_LOT_LINK_LOCKED). */
+  manReverseMaterialLotLink: ManMaterialLotOrderLink;
   /** Deterministic priority + due-date greedy finite-capacity scheduler. Orders the given (or all open) production orders by priority then due date, walks each order's routing operations in sequence, and assigns each to the earliest day its work center still has capacity (ManWorkCenter.capacityHours), persisting plannedStart/plannedEnd on ManProductionOperation (and rolling the min/max up onto the order). Does NOT reoptimize a global objective — no constraint solver / genetic algorithm; see PlanningService.scheduleProductionOrders for the documented follow-up. */
   manScheduleProductionOrders: ManScheduleResult;
+  /** Move a lot along its lifecycle. Rejected with MAN_LOT_INVALID_TRANSITION when the move is blocked (quarantined lots need manReleaseMaterialLot; consumed and scrapped lots are final; expired lots cannot be allocated or consumed). QUARANTINED and SCRAPPED require a reason (MAN_LOT_REASON_REQUIRED); a quarantine may cite the NCR or inspection behind it. */
   manSetMaterialLotStatus: ManMaterialLot;
-  /** Advance a maintenance work order through its lifecycle (validated transitions). */
+  /** Quarantine or scrap one unit (reason required; a quarantine may cite its NCR). Quarantining an allocated unit releases its order allocation. */
+  manSetMaterialSerialStatus: ManMaterialSerial;
+  /** Move a work order between SCHEDULED / IN_PROGRESS / ON_HOLD / CANCELLED. COMPLETED is rejected here (MAN_MWO_COMPLETION_REQUIRED): use manCompleteMaintenanceWorkOrder with the completion evidence. */
   manTransitionMaintenanceWorkOrder: ManMaintenanceWorkOrder;
-  /** Advance an NCR/CAPA through its resolution lifecycle (validated transitions). */
+  /** Advance an NCR/CAPA one step: OPEN → INVESTIGATING → CONTAINED → CORRECTIVE_ACTION → CLOSED. Skipped steps are rejected (MAN_NCR_INVALID_TRANSITION) and each step requires its evidence (MAN_NCR_EVIDENCE_REQUIRED, with extensions.missingFields). The comment is recorded on the audit trail. */
   manTransitionNonConformance: ManNonConformance;
   /** Advance a production order through its execution lifecycle (validated transitions). */
   manTransitionProductionOrder: ManProductionOrder;
+  /** Free an allocated unit (reason required). Consumed units are final (MAN_SERIAL_LOCKED). */
+  manUnassignMaterialSerial: ManMaterialSerial;
+  /** Remove an affected-entity link. The removal stays on the audit trail. */
+  manUnlinkNonConformanceEntity: ManNonConformance;
   manUpdateAsset: ManAsset;
   manUpdateErpConnection: ManErpConnection;
   manUpdateInventoryItem: ManInventoryItem;
   /** Partially update a material lot's descriptive fields (name, quantity, uom, supplier, receipt/expiry dates, tags). Status changes go through `manSetMaterialLotStatus`. */
   manUpdateMaterialLot: ManMaterialLot;
   manUpdateNonConformance: ManNonConformance;
+  /** Correct a routing step that has not started (MAN_OPERATION_STARTED once it has). Recorded on the order's routing history. */
+  manUpdateOperation: ManProductionOperation;
   manUpdateProductionOrder: ManProductionOrder;
   manUpdateWorkCenter: ManWorkCenter;
+  /** Record the effectiveness check of the corrective action (NCR must be in CORRECTIVE_ACTION with root cause and corrective action recorded). The verifier is the calling actor. */
+  manVerifyNonConformance: ManNonConformance;
   /** Manage workflow node containers (start/stop/restart). PLATFORM: operates on the shared cross-tenant node container fleet, so it is restricted to super_admin (matches cleanupNatsQueues / terminateWorkflow). */
   manageContainers: ContainerActionResponse;
   /** Execute AI-powered workflow management */
@@ -49520,6 +50397,8 @@ export type Mutation = {
   /** Pin or unpin a comment */
   pinEntityComment: EntityComment;
   pinMessage: Message;
+  /** Pin mock/sample output data on a node (BOFF-7511). Persists with the workflow definition so it round-trips with the draft. Only used by TEST-mode runs — see `RunMode`; never affects a PRODUCTION run. */
+  pinNodeData: WorkflowDefinition;
   /** Pin a note */
   pinNote: VibecontrolsNote;
   /** Place a bid on a live auction. Fails if the auction is not live, has ended, or the amount is below the minimum. */
@@ -50143,6 +51022,8 @@ export type Mutation = {
   replaceSecretTags: Array<SecretTagAssignment>;
   replaceVibecontrolsEntityTags: Array<EntityTagAssignment>;
   replaceWorkspaceTags: Array<WorkspaceTagAssignment>;
+  /** Whole-run replay (BOFF-7519): re-trigger `runId`'s exact workflow/version/triggerNodeId/triggerData/context as a brand-new TEST-mode run (BOFF-7511) — a debugging/verification replay of a past run from the run history screen, never counted as a production execution. The original run is untouched. Usage tracking: same `fluidgrids.runs.monthly` quota as `triggerWorkflow` — a replay still executes real nodes. */
+  replayWorkflowRun: TriggerResponse;
   /** Record an agent → agent mesh edge. Called by the SOURCE agent after a successful mesh-deploy/connect (or by an operator). Authorization: the caller must control BOTH agents (same workspace + ownerUserId boundary on each). Topology only — no scoped peer credential is stored. */
   reportAgentMeshLink: AgentMeshLink;
   /** Records the real token usage of a completed assistant turn. The resolver computes COST-WEIGHTED credits server-side (billing.quoteAiCredits, per-model prices) and charges them once via addUsageForWorkspace — so the amount is never client-supplied. No @usage(trackUsage) directive here: that would charge a second time (flat token count) on top of the resolver's weighted charge. */
@@ -50179,6 +51060,8 @@ export type Mutation = {
   resetVibecontrolsAgent: ResetAgentResult;
   /** Reset webhook failure count */
   resetWebhookFailures: Webhook;
+  /** Manually clear a static-data blob (ops/debug escape hatch for a stuck cursor — there is deliberately no other way to edit static data by hand). */
+  resetWorkflowStaticData: DeleteConfigResponse;
   resolveContextConversation: ResolveContextConversationPayload;
   /** Mark a comment resolved or unresolved. */
   resolveDashboardComment: DashboardComment;
@@ -50246,6 +51129,10 @@ export type Mutation = {
   retrySubmission: Submission;
   retryWebhookDelivery: RetryWebhookDeliveryResponse;
   retryWebhookExecution: WebhookExecution;
+  /** Bulk/list-level retry (BOFF-7519): re-trigger 1..10 past runs' exact input as brand-new PRODUCTION runs — the Runs list's "Retry" action, which previously only navigated to the run detail page. Each id is retried independently; the original run(s) are untouched. Usage tracking KNOWN LIMITATION: the `@usage` directive charges a flat 1 `fluidgrids.runs.monthly` unit per CALL, not per run created — it has no way to express "N units for N runIds" from this SDL alone. A 2-10 run batch is therefore under-counted against the workspace's monthly quota. The batch size is capped at 10 (rather than a larger bulk-action limit) to bound the worst case while this is tracked as a follow-up. Every retried run is still fully persisted with its own row and its own audit trail — only the AGGREGATE usage counter under-counts, nothing about the run itself is skipped. */
+  retryWorkflowRuns: Array<TriggerResponse>;
+  /** Explicit reveal action for a secret-flagged (or externally-backed) variable's real value — audited via trackOperation. */
+  revealWorkflowVariableValue: RevealWorkflowVariableValueResponse;
   reviewHousingvistaRentalApplication: HousingVistaRentalApplication;
   reviewVaultSecurityEvent: VaultSecurityEvent;
   revokeActionShare: ShareGrant;
@@ -50359,6 +51246,8 @@ export type Mutation = {
   runAgentCommand: AgentProxyResponse;
   /** Claim a `PENDING` execution, run it, and return the terminal execution. The run transitions `PENDING → RUNNING → COMPLETED/FAILED`. Both transitions are published to `agentExecutionUpdated`. This is the billing boundary for `botlit.runs.count` when the run is executed through this mutation. */
   runExecution: Execution;
+  /** Run a workflow from a chosen node onward, reusing the upstream node outputs already captured by `input.sourceRunId` instead of re-executing the whole upstream chain (BOFF-7511). Every direct and transitive ancestor of `input.nodeId` must have a COMPLETED node state in the source run — this reuses stored outputs, it never falls back to re-running anything upstream. Usage tracking: this executes real nodes downstream of the chosen node, so it consumes the same `fluidgrids.runs.monthly` quota as `triggerWorkflow`. */
+  runFromNode: TriggerResponse;
   /** Idempotent sweep: certificate expiry ladder, banned inputs, MRL breaches, overdue inspections, missing documents. */
   runHealthyBowlComplianceScan: HealthyBowlComplianceScanResult;
   /** Run a rule now (on-demand): triggers its FluidGrids workflow immediately, which calls back into HB to evaluate weather + notify. Returns the WorkflowRun id (or null). */
@@ -50388,6 +51277,7 @@ export type Mutation = {
   saveMyNavPreferences: NavPreferences;
   /** Save an AI-assistant sandbox artifact directly into Files without round- tripping bytes through the browser. Calls `wspace-sandbox-svc` over the internal gateway, decodes the artifact, uploads to S3, and creates a File row in the target folder. Returns the freshly created File. Larger artifacts (decoded > 50 MB) return `SANDBOX_ARTIFACT_TOO_LARGE` and the caller falls back to the client-side download path. */
   saveSandboxArtifactToFiles: File;
+  saveSecretsProviderConfig: SecretsProviderConfigResponse;
   /** Save UI session */
   saveUISession: UiSession;
   /** Re-run the Trivy CVE scan for an existing image without touching APPROVED state. Returns the row in SCANNING; transitions to PASSED/FAILED happen out-of-band. */
@@ -50468,6 +51358,7 @@ export type Mutation = {
   setDefaultVibecontrolsAgentProfile: VibecontrolsAgentProfile;
   /** Set a view as the default */
   setDefaultView: DashboardView;
+  setDriverVehicles: MtwDriver;
   setEventWebhook: WebhookConfig;
   /** BOFF-6030 — publish or update a consultant's weekly availability. One rule per weekday. */
   setHealthyBowlConsultAvailability: Scalars['ID']['output'];
@@ -50782,8 +51673,12 @@ export type Mutation = {
   terminateWorkflow: TerminateWorkflowResponse;
   testConnection: ConnectionTestResult;
   testLlmConnection: Scalars['Boolean']['output'];
+  /** Send a synthetic test event to the destination right now, without waiting for a real run to fire one. Does not require `isEnabled`. */
+  testLogStreamDestination: TestLogStreamDestinationResponse;
   testMCPConnection: Scalars['Boolean']['output'];
   testPipeline: PipelineExecution;
+  /** Connection test button: validates the configured provider without persisting a secret. */
+  testSecretsProviderConnection: TestSecretsProviderConnectionResponse;
   testTarget: TargetTestResult;
   /** Test webhook */
   testWebhook: Scalars['Boolean']['output'];
@@ -50904,6 +51799,8 @@ export type Mutation = {
   unmuteConversation: ConversationMembership;
   unpinConversation: ConversationMembership;
   unpinMessage: Message;
+  /** Remove pinned data from a node (BOFF-7511). */
+  unpinNodeData: WorkflowDefinition;
   /** Unpin a note */
   unpinNote: VibecontrolsNote;
   /** Hides the storefront from the public query without deleting it. */
@@ -51040,6 +51937,8 @@ export type Mutation = {
   updateDataSink: DataSink;
   /** Update a DataSink-Workflow link */
   updateDataSinkLink: DataSinkWorkflowLink;
+  updateDataTable: DataTableResponse;
+  updateDataTableRow: DataTableRowResponse;
   updateDeliveryJob: MtwDeliveryJob;
   updateDeliveryJobStatus: MtwDeliveryJob;
   updateDocsBuildImage: VibecontrolsDocsBuildImage;
@@ -51261,6 +52160,7 @@ export type Mutation = {
   updateLifeValue: TimeCampusLifeValue;
   /** Owner-filtered by the calling actor — throws NOT_FOUND if `id` doesn't belong to the caller (never leaks another user's row via FORBIDDEN). */
   updateLocationEntry: LocationEntry;
+  updateLogStreamDestination: LogStreamDestinationResponse;
   updateMCPConnection: McpConnection;
   updateMCPTool: McpTool;
   updateMaintenancePlan: MaintenancePlan;
@@ -51418,6 +52318,7 @@ export type Mutation = {
   updateWorkflowDefinition: WorkflowDefinition;
   /** Update an existing scheduled job */
   updateWorkflowScheduledJob: ScheduledJobResponse;
+  updateWorkflowVariable: WorkflowVariableResponse;
   /** Update an existing workspace */
   updateWorkspace: Workspace;
   /** Update workspace-level defaults. Requires admin permission. Merges provided fields with existing values. */
@@ -51473,8 +52374,22 @@ export type Mutation = {
   workerCompleteRun: WorkerCompleteRunResponse;
   /** Create a new node state (for pending nodes) INTERNAL: Requires actorType SERVICE */
   workerCreateNodeState: WorkerNodeStateResponse;
+  /** Record a batch of AI-agent tool calls parked for human approval (BOFF-7521). Called by the executor right after it parks the run/node in WAITING for an opt-in AI Agent node — creates the approval-inbox row the user decides on. INTERNAL: Requires actorType SERVICE */
+  workerCreateToolApprovalRequest: WorkerToolApprovalRequestResponse;
+  /** WORKER-INTERNAL: Data Table node's delete operation — by explicit row ids or by filter. */
+  workerDataTableDeleteRows: WorkerDataTableDeleteResponse;
+  /** WORKER-INTERNAL: Data Table node's insert operation. */
+  workerDataTableInsertRow: WorkerDataTableRowResponse;
+  /** WORKER-INTERNAL: Data Table node's update operation. */
+  workerDataTableUpdateRow: WorkerDataTableRowResponse;
+  /** WORKER-INTERNAL: Data Table node's upsert operation — matches an existing row by `matchColumns`, updates it if found, otherwise inserts. */
+  workerDataTableUpsertRow: WorkerDataTableRowResponse;
+  /** WORKER-INTERNAL: cross-run dedupe check for the Dedupe node's "cross-run" mode — atomically checks which of `hashes` are new and records them as seen in the same call. */
+  workerDedupeCheckAndMark: WorkerDedupeCheckAndMarkResponse;
   /** Get or create node state (atomic operation) INTERNAL: Requires actorType SERVICE */
   workerGetOrCreateNodeState: WorkerNodeStateResponse;
+  /** WORKER-INTERNAL: atomically persist the static-data writes made during one run. Restricted to the `service` actor type AND re-validated against the run's actual persisted `mode`/`status` — see `SyncWorkflowStaticDataInput` and `StaticDataProvider.syncForRun`. A TEST-mode or not-yet-COMPLETED run is rejected, never silently ignored, so a caller-side bug surfaces loudly instead of leaking mock data into the persisted cursor. */
+  workerSyncWorkflowStaticData: WorkerStaticDataSyncResponse;
   /** Update an existing node state INTERNAL: Requires actorType SERVICE */
   workerUpdateNodeState: WorkerNodeStateResponse;
   /** Update workflow run status INTERNAL: Requires actorType SERVICE */
@@ -55643,6 +56558,12 @@ export type MutationCreateDataSinkArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCreateDataTableArgs = {
+  input: CreateDataTableInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationCreateDeliveryJobArgs = {
   input: CreateDeliveryJobInput;
@@ -56752,6 +57673,12 @@ export type MutationCreateLocationEntryArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCreateLogStreamDestinationArgs = {
+  input: CreateLogStreamDestinationInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationCreateMcpConnectionArgs = {
   input: CreateMcpConnectionInput;
@@ -57366,6 +58293,12 @@ export type MutationCreateWorkflowScheduledJobArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCreateWorkflowVariableArgs = {
+  input: CreateWorkflowVariableInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationCreateWorkflowVersionArgs = {
   input: CreateWorkflowVersionInput;
@@ -57434,6 +58367,13 @@ export type MutationDecideHealthyBowlFarmRecommendationArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationDecideToolApprovalArgs = {
+  decisions: Array<ToolApprovalDecisionInput>;
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationDeclareLifeValueArgs = {
   input: TimeCampusLifeValueInput;
@@ -57757,6 +58697,19 @@ export type MutationDeleteDataSinkArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationDeleteDataTableArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationDeleteDataTableRowsArgs = {
+  ids: Array<Scalars['ID']['input']>;
+  tableId: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationDeleteDeliveryJobArgs = {
   id: Scalars['ID']['input'];
@@ -58787,6 +59740,12 @@ export type MutationDeleteLocationEntryArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationDeleteLogStreamDestinationArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationDeleteMcpConnectionArgs = {
   id: Scalars['ID']['input'];
@@ -59329,6 +60288,12 @@ export type MutationDeleteWorkflowScheduledJobArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationDeleteWorkflowVariableArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationDeleteWorkspaceArgs = {
   id: Scalars['ID']['input'];
@@ -62077,6 +63042,12 @@ export type MutationImportTargetsFromConfigArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationImportWorkflowArgs = {
+  input: ImportWorkflowInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationImportWorkflowTemplateArgs = {
   input: ImportWorkflowTemplateInput;
@@ -62169,6 +63140,13 @@ export type MutationInitiateUploadArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationInsertDataTableRowArgs = {
+  data: Scalars['JSON']['input'];
+  tableId: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationInstallActionFromStoreArgs = {
   name?: InputMaybe<Scalars['String']['input']>;
@@ -63273,12 +64251,26 @@ export type MutationManArchiveWorkCenterArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManAssignMaterialSerialArgs = {
+  id: Scalars['ID']['input'];
+  input: ManAssignMaterialSerialInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManCalculateMaterialRequirementsArgs = {
   productionOrderId: Scalars['ID']['input'];
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManCompleteMaintenanceWorkOrderArgs = {
+  id: Scalars['ID']['input'];
+  input: ManCompleteMaintenanceWorkOrderInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManCreateAssetArgs = {
   input: ManCreateAssetInput;
@@ -63352,12 +64344,33 @@ export type MutationManIngestTagReadingArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManLinkMaterialLotToOrderArgs = {
+  input: ManLinkLotToOrderInput;
+  lotId: Scalars['ID']['input'];
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManLinkNonConformanceEntityArgs = {
+  id: Scalars['ID']['input'];
+  input: ManNonConformanceLinkInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManRaiseNonConformanceArgs = {
   input: ManRaiseNonConformanceInput;
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManReceiveMaterialSerialsArgs = {
+  entry: ManSerialEntryInput;
+  lotId: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManRecordDowntimeArgs = {
   input: ManRecordDowntimeInput;
@@ -63390,6 +64403,41 @@ export type MutationManRecordOperationArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManReleaseMaterialLotArgs = {
+  id: Scalars['ID']['input'];
+  input: ManReleaseMaterialLotInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManReleaseMaterialSerialArgs = {
+  id: Scalars['ID']['input'];
+  input: ManReleaseMaterialLotInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManRemoveOperationArgs = {
+  id: Scalars['ID']['input'];
+  reason: Scalars['String']['input'];
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManReopenNonConformanceArgs = {
+  id: Scalars['ID']['input'];
+  reason: Scalars['String']['input'];
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManReverseMaterialLotLinkArgs = {
+  linkId: Scalars['ID']['input'];
+  reason: Scalars['String']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManScheduleProductionOrdersArgs = {
   input: ManScheduleProductionOrdersInput;
@@ -63399,6 +64447,18 @@ export type MutationManScheduleProductionOrdersArgs = {
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManSetMaterialLotStatusArgs = {
   id: Scalars['ID']['input'];
+  inspectionId?: InputMaybe<Scalars['ID']['input']>;
+  nonConformanceId?: InputMaybe<Scalars['ID']['input']>;
+  reason?: InputMaybe<Scalars['String']['input']>;
+  status: ManMaterialLotStatus;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManSetMaterialSerialStatusArgs = {
+  id: Scalars['ID']['input'];
+  nonConformanceId?: InputMaybe<Scalars['ID']['input']>;
+  reason?: InputMaybe<Scalars['String']['input']>;
   status: ManMaterialLotStatus;
 };
 
@@ -63412,6 +64472,7 @@ export type MutationManTransitionMaintenanceWorkOrderArgs = {
 
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManTransitionNonConformanceArgs = {
+  comment?: InputMaybe<Scalars['String']['input']>;
   id: Scalars['ID']['input'];
   status: ManNonConformanceStatus;
 };
@@ -63424,6 +64485,20 @@ export type MutationManTransitionProductionOrderArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManUnassignMaterialSerialArgs = {
+  id: Scalars['ID']['input'];
+  reason: Scalars['String']['input'];
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManUnlinkNonConformanceEntityArgs = {
+  id: Scalars['ID']['input'];
+  linkId: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManUpdateAssetArgs = {
   id: Scalars['ID']['input'];
@@ -63459,6 +64534,13 @@ export type MutationManUpdateNonConformanceArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManUpdateOperationArgs = {
+  id: Scalars['ID']['input'];
+  input: ManUpdateOperationInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManUpdateProductionOrderArgs = {
   id: Scalars['ID']['input'];
@@ -63473,6 +64555,13 @@ export type MutationManUpdateWorkCenterArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationManVerifyNonConformanceArgs = {
+  id: Scalars['ID']['input'];
+  input: ManVerifyNonConformanceInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationManageContainersArgs = {
   action: Scalars['String']['input'];
@@ -63929,6 +65018,14 @@ export type MutationPinMessageArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationPinNodeDataArgs = {
+  data: Scalars['JSON']['input'];
+  id: Scalars['ID']['input'];
+  nodeId: Scalars['String']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationPinNoteArgs = {
   id: Scalars['ID']['input'];
@@ -66395,6 +67492,12 @@ export type MutationReplaceWorkspaceTagsArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationReplayWorkflowRunArgs = {
+  runId: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationReportAgentMeshLinkArgs = {
   input: ReportAgentMeshLinkInput;
@@ -66527,6 +67630,14 @@ export type MutationResetWebhookFailuresArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationResetWorkflowStaticDataArgs = {
+  nodeId?: InputMaybe<Scalars['String']['input']>;
+  scope: StaticDataScope;
+  workflowKey: Scalars['String']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationResolveContextConversationArgs = {
   input: ResolveContextConversationInput;
@@ -66816,6 +67927,18 @@ export type MutationRetryWebhookExecutionArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationRetryWorkflowRunsArgs = {
+  runIds: Array<Scalars['ID']['input']>;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationRevealWorkflowVariableValueArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationReviewHousingvistaRentalApplicationArgs = {
   id: Scalars['ID']['input'];
@@ -67324,6 +68447,12 @@ export type MutationRunExecutionArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationRunFromNodeArgs = {
+  input: RunFromNodeInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationRunHealthyBowlComplianceScanArgs = {
   context: ContextInput;
@@ -67425,6 +68554,12 @@ export type MutationSaveSandboxArtifactToFilesArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationSaveSecretsProviderConfigArgs = {
+  input: SaveSecretsProviderConfigInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationSaveUiSessionArgs = {
   input: SaveUiSessionInput;
@@ -67786,6 +68921,13 @@ export type MutationSetDefaultViewArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationSetDriverVehiclesArgs = {
+  id: Scalars['ID']['input'];
+  vehicleIds: Array<Scalars['ID']['input']>;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationSetEventWebhookArgs = {
   config: WebhookConfigInput;
@@ -69154,6 +70296,12 @@ export type MutationTestLlmConnectionArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationTestLogStreamDestinationArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationTestMcpConnectionArgs = {
   id: Scalars['ID']['input'];
@@ -69166,6 +70314,12 @@ export type MutationTestPipelineArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationTestSecretsProviderConnectionArgs = {
+  provider: SecretProviderType;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationTestTargetArgs = {
   id: Scalars['ID']['input'];
@@ -69688,6 +70842,13 @@ export type MutationUnpinMessageArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUnpinNodeDataArgs = {
+  id: Scalars['ID']['input'];
+  nodeId: Scalars['String']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUnpinNoteArgs = {
   id: Scalars['ID']['input'];
@@ -70389,6 +71550,20 @@ export type MutationUpdateDataSinkLinkArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateDataTableArgs = {
+  id: Scalars['ID']['input'];
+  input: UpdateDataTableInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateDataTableRowArgs = {
+  data: Scalars['JSON']['input'];
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUpdateDeliveryJobArgs = {
   id: Scalars['ID']['input'];
@@ -71570,6 +72745,13 @@ export type MutationUpdateLocationEntryArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateLogStreamDestinationArgs = {
+  id: Scalars['ID']['input'];
+  input: UpdateLogStreamDestinationInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUpdateMcpConnectionArgs = {
   id: Scalars['ID']['input'];
@@ -72382,6 +73564,13 @@ export type MutationUpdateWorkflowScheduledJobArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateWorkflowVariableArgs = {
+  id: Scalars['ID']['input'];
+  input: UpdateWorkflowVariableInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUpdateWorkspaceArgs = {
   id: Scalars['ID']['input'];
@@ -72588,12 +73777,54 @@ export type MutationWorkerCreateNodeStateArgs = {
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerCreateToolApprovalRequestArgs = {
+  input: WorkerCreateToolApprovalRequestInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerDataTableDeleteRowsArgs = {
+  input: WorkerDataTableDeleteRowsInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerDataTableInsertRowArgs = {
+  input: WorkerDataTableInsertRowInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerDataTableUpdateRowArgs = {
+  input: WorkerDataTableUpdateRowInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerDataTableUpsertRowArgs = {
+  input: WorkerDataTableUpsertRowInput;
+};
+
+
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerDedupeCheckAndMarkArgs = {
+  input: WorkerDedupeCheckAndMarkInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationWorkerGetOrCreateNodeStateArgs = {
   input: WorkerCreateNodeStateInput;
 };
 
 
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerSyncWorkflowStaticDataArgs = {
+  input: SyncWorkflowStaticDataInput;
+};
+
+
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationWorkerUpdateNodeStateArgs = {
   input: WorkerUpdateNodeStateInput;
@@ -73556,6 +74787,7 @@ export type NodeEndpointConfig = {
   category?: Maybe<Scalars['String']['output']>;
   createdAt: Scalars['DateTime']['output'];
   description?: Maybe<Scalars['String']['output']>;
+  docsUrl?: Maybe<Scalars['String']['output']>;
   endpointUrl: Scalars['String']['output'];
   favicon?: Maybe<Scalars['String']['output']>;
   healthCheckUrl?: Maybe<Scalars['String']['output']>;
@@ -73636,6 +74868,13 @@ export type NodeIntrospection = {
   operations: Scalars['JSON']['output'];
 };
 
+/** A single selectable option for a dynamic ("load options") node parameter dropdown — e.g. one Slack channel returned by the Slack node's listChannels operation. */
+export type NodeLoadOption = {
+  __typename?: 'NodeLoadOption';
+  label: Scalars['String']['output'];
+  value: Scalars['String']['output'];
+};
+
 export type NodeLogsResponse = {
   __typename?: 'NodeLogsResponse';
   logCount: Scalars['Int']['output'];
@@ -73679,10 +74918,14 @@ export type NodeState = {
   nodeVersion: Scalars['String']['output'];
   output?: Maybe<Scalars['JSON']['output']>;
   resumeTime?: Maybe<Scalars['DateTime']['output']>;
+  /** Set when `runFromNode` copied this node's state from an earlier run instead of executing it in this one (BOFF-7511). */
+  reusedFromRunId?: Maybe<Scalars['String']['output']>;
   run?: Maybe<WorkflowRun>;
   runId: Scalars['String']['output'];
   startTime?: Maybe<Scalars['DateTime']['output']>;
   status: NodeStatus;
+  /** True when this node's output came from pinned data instead of a real call (BOFF-7511). Always false on a PRODUCTION run. */
+  usedPinnedData: Scalars['Boolean']['output'];
 };
 
 /** Node relationship statistics */
@@ -74207,6 +75450,15 @@ export type PayHealthyBowlInsurancePremiumInput = {
   paymentMethodId?: InputMaybe<Scalars['String']['input']>;
 };
 
+/** One tool call the agent proposed, awaiting (or already given) a decision. */
+export type PendingToolCall = {
+  __typename?: 'PendingToolCall';
+  /** JSON-encoded arguments the agent proposed for this call. */
+  argsJson: Scalars['String']['output'];
+  callId: Scalars['ID']['output'];
+  name: Scalars['String']['output'];
+};
+
 /** Permission audit log entry */
 export type PermissionAuditLog = {
   __typename?: 'PermissionAuditLog';
@@ -80035,6 +81287,9 @@ export type Query = {
   dashboardOverview: DashboardOverview;
   dashboardSummary: DashboardSummary;
   dashboards: Array<AnalyticsDashboard>;
+  dataTable?: Maybe<DataTable>;
+  dataTableRows: DataTableRowsResponse;
+  dataTables: DataTableListResponse;
   deadLetterQueueEntries: DeadLetterQueueConnection;
   deadLetterQueueEntry?: Maybe<DeadLetterQueue>;
   decryptSecret?: Maybe<DecryptedSecret>;
@@ -80137,6 +81392,8 @@ export type Query = {
   envTopology: Array<EnvTopologyRow>;
   /** The completed ePOD record for a delivery job — for the shipper/customer to view or download once capture is complete. Returns null if no capture exists yet. */
   epod?: Maybe<MtwProofOfDelivery>;
+  /** Error analytics (breakdown by type/workflow/node + a daily trend) for the Error Analytics screen (BOFF-7519). */
+  errorAnalytics: ErrorAnalytics;
   esgMetric?: Maybe<EcoMetric>;
   /** Workspace-level ESG metrics delegated to wspace-ecoimpacthub-svc. Filters to AssetHandler-sourced metrics when no category is supplied so the page shows the same estate-scoped view it did before the migration. */
   esgMetrics: Array<EcoMetric>;
@@ -80211,6 +81468,8 @@ export type Query = {
   exportEventToIcs: Scalars['String']['output'];
   /** Export every active secret in a vault as a passphrase-encrypted blob. The passphrase must be at least 8 characters and is used as the only key needed to decrypt the returned payload — it is never persisted server-side. */
   exportSecrets: SecretExportResult;
+  /** Export a workflow version as a portable JSON document. */
+  exportWorkflow: WorkflowExport;
   /** Pre-login preview of a file/folder share invite by token. */
   fileShareGrantByToken?: Maybe<ShareGrantPreview>;
   /** File/folder grants where the current user is the accepted grantee. */
@@ -81562,12 +82821,17 @@ export type Query = {
   listWidgets: WidgetConnection;
   /** List all widgets for a dashboard (across all pages) */
   listWidgetsByDashboard: Array<Widget>;
+  loadNodeOptions: Array<NodeLoadOption>;
   /** The calling actor's own location entries. Self-scoped: `filter.userId` is accepted for backward compatibility but is neutralized in the resolver (resolveTargetUserId) — a non-privileged actor requesting another user's entries is silently redirected back to their own, and an omitted filter no longer defaults to "every user in the workspace". Managers use the aggregate `locationStats` for workspace-wide visibility (no raw GPS). */
   locationEntries: LocationEntryListResponse;
   /** A single location entry by id, owner-filtered to the calling actor — returns null (not another user's row) if the id doesn't belong to the caller. */
   locationEntry?: Maybe<LocationEntry>;
   /** Aggregate location statistics for the workspace (no raw coordinates) — the intended manager/admin visibility surface, mirroring the workpattern module's team-summary pattern. */
   locationStats: LocationStats;
+  /** Get a single log streaming destination by id (owner-filtered to the caller's workspace). */
+  logStreamDestination?: Maybe<LogStreamDestination>;
+  /** List the log streaming destinations configured for the caller's workspace. */
+  logStreamDestinations: Array<LogStreamDestination>;
   /** Resolve a user email to an actor identity for workspace role assignment. */
   lookupUserActorByEmail?: Maybe<UserActorLookupResult>;
   maintenanceLog: Array<MaintenanceRecord>;
@@ -81581,10 +82845,14 @@ export type Query = {
   /** Statistical Process Control control chart computed on demand from recorded inspection measurements — X-bar/R, Individual/Moving-Range, p-chart, or c-chart, with 3-sigma control limits, out-of-control flagging, and Cp/Cpk/Pp/Ppk capability indices where the plan carries spec limits. */
   manControlChart: ManControlChartResult;
   manErpConnection?: Maybe<ManErpConnection>;
+  /** Exact serial-number lookup across SKUs (traceability / recall entry point). */
+  manFindMaterialSerials: Array<ManMaterialSerial>;
   /** Liveness/identity probe for the Manufacturedops subgraph. */
   manHealth: Scalars['String']['output'];
   manInspection?: Maybe<ManQualityInspection>;
   manInventoryItem?: Maybe<ManInventoryItem>;
+  /** The item master row for a SKU (null when the SKU has none) — lot intake reads its tracking mode. */
+  manInventoryItemBySku?: Maybe<ManInventoryItem>;
   manListAssets: ManAssetConnection;
   manListBoms: ManBillOfMaterialConnection;
   manListDowntimeEvents: ManDowntimeEventConnection;
@@ -81598,16 +82866,30 @@ export type Query = {
   manListMaterialLots: ManMaterialLotConnection;
   /** The latest persisted MRP run's requirement rows for one production order. */
   manListMaterialRequirements: Array<ManMaterialRequirement>;
+  /** Units, filtered by lot, SKU, status, order or part of the serial number — also the export feed. */
+  manListMaterialSerials: ManMaterialSerialConnection;
   manListNonConformances: ManNonConformanceConnection;
   manListProductionOrders: ManProductionOrderConnection;
   manListWorkCenters: ManWorkCenterConnection;
   manMachineTagReading?: Maybe<ManMachineTagReading>;
+  /** One maintenance work order, with its completion evidence, linked downtime and history. */
+  manMaintenanceWorkOrder?: Maybe<ManMaintenanceWorkOrder>;
+  /** One material lot, with its status options and history. */
+  manMaterialLot?: Maybe<ManMaterialLot>;
+  /** One unit with its status options and history. */
+  manMaterialSerial?: Maybe<ManMaterialSerial>;
+  /** Recall scope for one unit. */
+  manMaterialSerialRecall: ManSerialRecall;
   /** Legal-acceptance checkpoints recorded by the CALLING actor for a specific checkpoint type. Self-scoped (Type C): the ctx.actorId filter IS the access control, no identity arg. Used by the app shell to decide whether to show the acceptance gate before letting the actor into core flows. */
   manMyLegalAcceptances: ManLegalAcceptanceConnection;
   manNonConformance?: Maybe<ManNonConformance>;
+  /** NCRs with an active link to one production order, operation or material lot. */
+  manNonConformancesForEntity: Array<ManNonConformance>;
   /** Real, DB-computed operations KPIs for the dashboard (counts/aggregates across production orders, non-conformances, maintenance work orders and material lots) — correct at any scale, not a capped client-side aggregation. */
   manOperationsSummary: ManOperationsSummary;
   manProductionOrder?: Maybe<ManProductionOrder>;
+  /** Bulk-import preview: validate serials for a SKU without registering them. */
+  manValidateMaterialSerials: ManSerialEntryReport;
   manWorkCenter?: Maybe<ManWorkCenter>;
   meeting?: Maybe<MeetingMeta>;
   meetingStats: MeetingStats;
@@ -81748,6 +83030,8 @@ export type Query = {
   organizationCount: Scalars['Int']['output'];
   parser?: Maybe<Parser>;
   pendingApprovals: Array<TimeApprovalRequest>;
+  /** Pending tool-approval requests for the caller's workspace — the approval inbox. Ordered newest-first. */
+  pendingToolApprovals: ToolApprovalRequestPage;
   /** Get permission check audit log */
   permissionAuditLog: Array<PermissionAuditLog>;
   /** Get permission check audit logs with bounded offset metadata. */
@@ -82138,6 +83422,8 @@ export type Query = {
   secretShareLinkInfo?: Maybe<SecretShareLinkInfo>;
   /** List the shares on a vault (or a specific secret). Vault view access required. */
   secretShares: SecretShareList;
+  /** List the external secrets provider configurations for the caller's workspace. */
+  secretsProviderConfigs: Array<SecretsProviderConfig>;
   securityComplianceFramework?: Maybe<SecurityComplianceFramework>;
   securityComplianceFrameworks: SecurityComplianceFrameworkList;
   securityFindings: SecurityFindingList;
@@ -82394,6 +83680,7 @@ export type Query = {
   timeEntryStats: TimeEntryStats;
   todayFocusScore?: Maybe<FocusScore>;
   todayWorkPattern?: Maybe<WorkPattern>;
+  toolApprovalRequest?: Maybe<ToolApprovalRequest>;
   topApplications: Array<AppUsageRank>;
   trackingAlerts: Array<MtwTrackingAlert>;
   transaction?: Maybe<AssetTransaction>;
@@ -82561,10 +83848,16 @@ export type Query = {
   workPatternSummary: WorkPatternSummary;
   /** The calling actor's own work patterns. `userId` is accepted for backward compatibility but is neutralized in the resolver (resolveTargetUserId): any non-privileged actor requesting a different user's data is silently redirected back to their own. Managers use `teamWorkPatternSummary` / `teamWorkPatterns` for genuinely workspace-wide visibility. */
   workPatterns: Array<WorkPattern>;
+  /** WORKER-INTERNAL: read rows for the Data Table node's get/list operation. */
+  workerDataTableGetRows: WorkerDataTableRowsResponse;
   /** Get execution context for a workflow run Returns run data, workflow definition, and all necessary context INTERNAL: Requires actorType SERVICE */
   workerGetExecutionContext: WorkerExecutionContext;
   /** Get all node states for a run INTERNAL: Requires actorType SERVICE */
   workerGetNodeStates: Array<WorkerNodeState>;
+  /** WORKER-INTERNAL: hydrate the current static data for a workflow. Restricted to the `service` actor type — fluidgrids-workers calls this via the internal gateway with `x-actor-type: service`. */
+  workerGetWorkflowStaticData: WorkerStaticDataResponse;
+  /** WORKER-INTERNAL: resolve every variable visible to a run into a flat `$vars` map, secrets resolved server-side. Restricted to the `service` actor type — fluidgrids-workers calls this via the internal gateway with `x-actor-type: service`, never `x-actor-id` (see wspace-integrations-svc's CLAUDE.md cross-layer M2M note for why). */
+  workerGetWorkflowVariables: WorkerVariablesResponse;
   /** Resolve node endpoint from registry INTERNAL: Requires actorType SERVICE */
   workerResolveNodeEndpoint: WorkerNodeEndpointResponse;
   /** Get a single workflow by ID */
@@ -82593,8 +83886,18 @@ export type Query = {
   workflowScheduledJobs: ScheduledJobsListResponse;
   /** Get status of all scheduled jobs */
   workflowScheduledJobsStatus: Scalars['JSON']['output'];
+  /** Read a single static-data blob (debug/inspection UI). GLOBAL scope ignores `nodeId`; NODE scope requires it. */
+  workflowStaticData?: Maybe<WorkflowStaticDataRecord>;
+  /** List every static-data blob (global + all nodes) persisted for a workflow key. */
+  workflowStaticDataList: Array<WorkflowStaticDataRecord>;
   /** Get workflow summary with execution statistics */
   workflowSummary: WorkflowSummaryResponse;
+  /** Get a single variable by id (owner-filtered to the caller's workspace). */
+  workflowVariable?: Maybe<WorkflowVariable>;
+  /** List variables visible in the caller's workspace (optionally filtered to one project's scope). */
+  workflowVariables: WorkflowVariablesListResponse;
+  /** Compare the definition JSON of two versions. */
+  workflowVersionDiff: WorkflowVersionDiff;
   /** Get all versions of a workflow */
   workflowVersions: Array<WorkflowDefinition>;
   /** Get all workflows in the workspace */
@@ -85284,6 +86587,26 @@ export type QueryDashboardsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryDataTableArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryDataTableRowsArgs = {
+  input: DataTableRowsQueryInput;
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryDataTablesArgs = {
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  offset?: InputMaybe<Scalars['Int']['input']>;
+  search?: InputMaybe<Scalars['String']['input']>;
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryDeadLetterQueueEntriesArgs = {
   filter?: InputMaybe<JobFilterInput>;
@@ -85768,6 +87091,12 @@ export type QueryEpodArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryErrorAnalyticsArgs = {
+  input?: InputMaybe<ErrorAnalyticsInput>;
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryEsgMetricArgs = {
   id: Scalars['ID']['input'];
@@ -86248,6 +87577,13 @@ export type QueryExportSecretsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryExportWorkflowArgs = {
+  version?: InputMaybe<Scalars['String']['input']>;
+  workflowKey: Scalars['String']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryFileShareGrantByTokenArgs = {
   token: Scalars['String']['input'];
@@ -92488,6 +93824,19 @@ export type QueryListWidgetsByDashboardArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryLoadNodeOptionsArgs = {
+  args?: InputMaybe<Scalars['JSON']['input']>;
+  connectionId?: InputMaybe<Scalars['ID']['input']>;
+  labelField: Scalars['String']['input'];
+  nodeType: Scalars['String']['input'];
+  nodeVersion: Scalars['String']['input'];
+  operationName: Scalars['String']['input'];
+  resultPath?: InputMaybe<Scalars['String']['input']>;
+  valueField: Scalars['String']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryLocationEntriesArgs = {
   filter?: InputMaybe<LocationEntryFilterInput>;
@@ -92508,6 +93857,12 @@ export type QueryLocationStatsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryLogStreamDestinationArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryLookupUserActorByEmailArgs = {
   email: Scalars['String']['input'];
@@ -92572,6 +93927,12 @@ export type QueryManErpConnectionArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManFindMaterialSerialsArgs = {
+  serialNumber: Scalars['String']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryManInspectionArgs = {
   id: Scalars['ID']['input'];
@@ -92584,6 +93945,12 @@ export type QueryManInventoryItemArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManInventoryItemBySkuArgs = {
+  sku: Scalars['String']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryManListAssetsArgs = {
   pagination?: InputMaybe<PaginationInput>;
@@ -92677,6 +94044,13 @@ export type QueryManListMaterialRequirementsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManListMaterialSerialsArgs = {
+  filter?: InputMaybe<ManMaterialSerialFilterInput>;
+  pagination?: InputMaybe<PaginationInput>;
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryManListNonConformancesArgs = {
   pagination?: InputMaybe<PaginationInput>;
@@ -92706,6 +94080,30 @@ export type QueryManMachineTagReadingArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManMaintenanceWorkOrderArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManMaterialLotArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManMaterialSerialArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManMaterialSerialRecallArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryManMyLegalAcceptancesArgs = {
   checkpointType: ManLegalCheckpointType;
@@ -92719,12 +94117,26 @@ export type QueryManNonConformanceArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManNonConformancesForEntityArgs = {
+  entityId: Scalars['ID']['input'];
+  entityType: ManNonConformanceLinkType;
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryManProductionOrderArgs = {
   id: Scalars['ID']['input'];
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryManValidateMaterialSerialsArgs = {
+  entry: ManSerialEntryInput;
+  materialSku: Scalars['String']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryManWorkCenterArgs = {
   id: Scalars['ID']['input'];
@@ -93280,6 +94692,13 @@ export type QueryPendingApprovalsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryPendingToolApprovalsArgs = {
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  offset?: InputMaybe<Scalars['Int']['input']>;
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryPermissionAuditLogArgs = {
   filter?: InputMaybe<AuditLogFilterInput>;
@@ -96163,6 +97582,12 @@ export type QueryTimeEntryStatsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryToolApprovalRequestArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryTopApplicationsArgs = {
   endDate?: InputMaybe<Scalars['DateTime']['input']>;
@@ -96763,6 +98188,12 @@ export type QueryWorkPatternsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkerDataTableGetRowsArgs = {
+  input: WorkerDataTableRowsQueryInput;
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryWorkerGetExecutionContextArgs = {
   runId: Scalars['ID']['input'];
@@ -96777,6 +98208,20 @@ export type QueryWorkerGetNodeStatesArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkerGetWorkflowStaticDataArgs = {
+  workflowKey: Scalars['String']['input'];
+  workspaceId: Scalars['ID']['input'];
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkerGetWorkflowVariablesArgs = {
+  projectId?: InputMaybe<Scalars['ID']['input']>;
+  workspaceId: Scalars['ID']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryWorkerResolveNodeEndpointArgs = {
   nodeType: Scalars['String']['input'];
@@ -96874,12 +98319,47 @@ export type QueryWorkflowScheduledJobsArgs = {
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowStaticDataArgs = {
+  nodeId?: InputMaybe<Scalars['String']['input']>;
+  scope: StaticDataScope;
+  workflowKey: Scalars['String']['input'];
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowStaticDataListArgs = {
+  workflowKey: Scalars['String']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryWorkflowSummaryArgs = {
   workflowKey: Scalars['String']['input'];
 };
 
 
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowVariableArgs = {
+  id: Scalars['ID']['input'];
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowVariablesArgs = {
+  projectId?: InputMaybe<Scalars['ID']['input']>;
+  scope?: InputMaybe<VariableScope>;
+};
+
+
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowVersionDiffArgs = {
+  fromVersion: Scalars['String']['input'];
+  toVersion: Scalars['String']['input'];
+  workflowKey: Scalars['String']['input'];
+};
+
+
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryWorkflowVersionsArgs = {
   workflowKey: Scalars['String']['input'];
@@ -97621,6 +99101,7 @@ export type RegisterNodeInput = {
   author?: InputMaybe<Scalars['String']['input']>;
   category?: InputMaybe<Scalars['String']['input']>;
   description?: InputMaybe<Scalars['String']['input']>;
+  docsUrl?: InputMaybe<Scalars['String']['input']>;
   endpointUrl: Scalars['String']['input'];
   favicon?: InputMaybe<Scalars['String']['input']>;
   healthCheckUrl?: InputMaybe<Scalars['String']['input']>;
@@ -98643,6 +100124,13 @@ export type RetryWebhookDeliveryResponse = {
   success: Scalars['Boolean']['output'];
 };
 
+export type RevealWorkflowVariableValueResponse = MutationResponse & {
+  __typename?: 'RevealWorkflowVariableValueResponse';
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+  value?: Maybe<Scalars['String']['output']>;
+};
+
 export type RevenueChartPoint = {
   __typename?: 'RevenueChartPoint';
   expenses: Scalars['Float']['output'];
@@ -99034,6 +100522,16 @@ export enum RuleRunMode {
   Realtime = 'REALTIME'
 }
 
+/** Input for re-running a workflow from a chosen node onward, reusing the upstream node outputs already captured by an earlier run instead of re-executing the whole upstream chain (BOFF-7511). */
+export type RunFromNodeInput = {
+  /** Manual (TEST) vs real (PRODUCTION) execution. Defaults to TEST — this is a debugging affordance, not a production replay mechanism. */
+  mode?: InputMaybe<RunMode>;
+  /** Node to (re-)execute; everything downstream of it executes normally. */
+  nodeId: Scalars['String']['input'];
+  /** The earlier run to reuse upstream node outputs from. */
+  sourceRunId: Scalars['ID']['input'];
+};
+
 /** Severity of a run log line. */
 export enum RunLogLevel {
   Debug = 'DEBUG',
@@ -99082,6 +100580,12 @@ export enum RunLogStream {
   System = 'SYSTEM'
 }
 
+/** Manual/debug (TEST) vs real (PRODUCTION) execution — BOFF-7511. Pinned node data, step-debug and run-from-node are TEST-only affordances. Defaults to PRODUCTION everywhere for backward compatibility with every caller that predates this distinction (webhooks, schedules, existing API/SDK callers). The executor MUST refuse to read pinned data for a PRODUCTION run — this is a hard safety invariant, not a UX default. */
+export enum RunMode {
+  Production = 'PRODUCTION',
+  Test = 'TEST'
+}
+
 export type RunSandboxScriptInput = {
   context: ContextInput;
   /** bash | sh | python | node */
@@ -99101,6 +100605,18 @@ export enum RunStatus {
   Waiting = 'WAITING'
 }
 
+/** Coarse trigger-type filter for the Runs screen (BOFF-7519). Derived from a run's `context` at query time (see `WorkflowRunProvider.runTriggerTypeWhere`) — there is no dedicated trigger-type column. */
+export enum RunTriggerType {
+  /** Started by an internal event, a polling-detected change, or a chained workflow trigger. */
+  Event = 'EVENT',
+  /** Builder "Test workflow", the SDK, or a bare API call — the default when nothing else stamped a trigger type. */
+  Manual = 'MANUAL',
+  /** Started by a scheduled/cron fire. */
+  Schedule = 'SCHEDULE',
+  /** Started by an inbound webhook delivery. */
+  Webhook = 'WEBHOOK'
+}
+
 export type RunningTimer = {
   __typename?: 'RunningTimer';
   elapsedSeconds: Scalars['Int']['output'];
@@ -99544,6 +101060,17 @@ export type SaveSandboxArtifactInput = {
   sessionId: Scalars['String']['input'];
 };
 
+export type SaveSecretsProviderConfigInput = {
+  awsRegion?: InputMaybe<Scalars['String']['input']>;
+  awsSecretsManagerPrefix?: InputMaybe<Scalars['String']['input']>;
+  azureKeyVaultUri?: InputMaybe<Scalars['String']['input']>;
+  gcpProjectId?: InputMaybe<Scalars['String']['input']>;
+  isEnabled?: InputMaybe<Scalars['Boolean']['input']>;
+  provider: SecretProviderType;
+  vaultAddress?: InputMaybe<Scalars['String']['input']>;
+  vaultMountPath?: InputMaybe<Scalars['String']['input']>;
+};
+
 export type SaveUiSessionInput = {
   activeSessionId?: InputMaybe<Scalars['ID']['input']>;
   activeVibeId?: InputMaybe<Scalars['ID']['input']>;
@@ -100256,6 +101783,14 @@ export type SecretList = {
   total: Scalars['Int']['output'];
 };
 
+export enum SecretProviderType {
+  AwsSecretsManager = 'AWS_SECRETS_MANAGER',
+  AzureKeyVault = 'AZURE_KEY_VAULT',
+  GcpSecretManager = 'GCP_SECRET_MANAGER',
+  None = 'NONE',
+  Vault = 'VAULT'
+}
+
 export type SecretRotatedPayload = {
   __typename?: 'SecretRotatedPayload';
   secret: Secret;
@@ -100421,6 +101956,32 @@ export type SecretVersionList = {
   total: Scalars['Int']['output'];
 };
 
+export type SecretsProviderConfig = {
+  __typename?: 'SecretsProviderConfig';
+  awsRegion?: Maybe<Scalars['String']['output']>;
+  awsSecretsManagerPrefix?: Maybe<Scalars['String']['output']>;
+  azureKeyVaultUri?: Maybe<Scalars['String']['output']>;
+  createdAt: Scalars['DateTime']['output'];
+  gcpProjectId?: Maybe<Scalars['String']['output']>;
+  id: Scalars['ID']['output'];
+  isEnabled: Scalars['Boolean']['output'];
+  lastTestMessage?: Maybe<Scalars['String']['output']>;
+  lastTestStatus?: Maybe<Scalars['String']['output']>;
+  lastTestedAt?: Maybe<Scalars['DateTime']['output']>;
+  provider: SecretProviderType;
+  updatedAt: Scalars['DateTime']['output'];
+  vaultAddress?: Maybe<Scalars['String']['output']>;
+  vaultMountPath?: Maybe<Scalars['String']['output']>;
+  workspaceId: Scalars['ID']['output'];
+};
+
+export type SecretsProviderConfigResponse = MutationResponse & {
+  __typename?: 'SecretsProviderConfigResponse';
+  config?: Maybe<SecretsProviderConfig>;
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+};
+
 export type SecurityComplianceFramework = {
   __typename?: 'SecurityComplianceFramework';
   createdAt: Scalars['DateTime']['output'];
@@ -102776,6 +104337,11 @@ export type StartTimerInput = {
   taskId?: InputMaybe<Scalars['ID']['input']>;
 };
 
+export enum StaticDataScope {
+  Global = 'GLOBAL',
+  Node = 'NODE'
+}
+
 /** Status statistics */
 export type StatusStats = {
   __typename?: 'StatusStats';
@@ -104662,6 +106228,17 @@ export enum SyncProvider {
   OutlookCalendar = 'OUTLOOK_CALENDAR'
 }
 
+export type SyncWorkflowStaticDataInput = {
+  /** Omit to leave the global blob untouched (no node in the run wrote to it). */
+  global?: InputMaybe<Scalars['JSON']['input']>;
+  /** Only the node-scoped blobs that were actually touched during the run — omitted nodes are left untouched. */
+  nodes?: InputMaybe<Array<WorkerStaticDataNodeWriteInput>>;
+  /** The run this write is attributed to. Re-fetched and re-validated server-side (mode === PRODUCTION, status === COMPLETED) before anything is written — see the module doc comment. The caller's own belief about the run's mode is NEVER trusted on its own. */
+  runId: Scalars['ID']['input'];
+  workflowKey: Scalars['String']['input'];
+  workspaceId: Scalars['ID']['input'];
+};
+
 export type SystemConfig = {
   __typename?: 'SystemConfig';
   deploymentType: Scalars['String']['output'];
@@ -106774,6 +108351,12 @@ export type TerraceGarden = {
   waterSource?: Maybe<Scalars['String']['output']>;
 };
 
+export type TestLogStreamDestinationResponse = MutationResponse & {
+  __typename?: 'TestLogStreamDestinationResponse';
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+};
+
 export type TestParserInput = {
   /** BOFF-5518: test the expression against a stored DataSink by id. The backend loads the payload server-side (workspace-scoped, soft-delete-aware, field-masked) — the client sends only the reference. Mutually exclusive with sampleData and with dataSinkKey. */
   dataSinkId?: InputMaybe<Scalars['ID']['input']>;
@@ -106792,6 +108375,12 @@ export type TestPipelineInput = {
   pipelineId: Scalars['ID']['input'];
 };
 
+export type TestSecretsProviderConnectionResponse = MutationResponse & {
+  __typename?: 'TestSecretsProviderConnectionResponse';
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+};
+
 export type TheAsset = {
   __typename?: 'TheAsset';
   /** Areal extent of the asset (field / lease / concession), in square kilometers. */
@@ -108561,6 +110150,65 @@ export type TokenVerificationResult = {
   valid: Scalars['Boolean']['output'];
 };
 
+export type ToolApprovalDecisionInput = {
+  callId: Scalars['ID']['input'];
+  decision: ToolApprovalDecisionValue;
+  reason?: InputMaybe<Scalars['String']['input']>;
+};
+
+/** The decision recorded for one `callId` inside a request's `toolCalls`. */
+export type ToolApprovalDecisionRecord = {
+  __typename?: 'ToolApprovalDecisionRecord';
+  callId: Scalars['ID']['output'];
+  decision: ToolApprovalDecisionValue;
+  reason?: Maybe<Scalars['String']['output']>;
+};
+
+export enum ToolApprovalDecisionValue {
+  Approved = 'APPROVED',
+  Rejected = 'REJECTED'
+}
+
+/** A batch of AI-agent tool calls parked for human approval. Federated entity identified by id. */
+export type ToolApprovalRequest = {
+  __typename?: 'ToolApprovalRequest';
+  createdAt: Scalars['DateTime']['output'];
+  decidedAt?: Maybe<Scalars['DateTime']['output']>;
+  decidedBy?: Maybe<Scalars['String']['output']>;
+  decisions?: Maybe<Array<ToolApprovalDecisionRecord>>;
+  id: Scalars['ID']['output'];
+  nodeId: Scalars['String']['output'];
+  requestedAt: Scalars['DateTime']['output'];
+  runId: Scalars['ID']['output'];
+  status: ToolApprovalStatus;
+  timeoutAction: ToolApprovalTimeoutAction;
+  timeoutAt?: Maybe<Scalars['DateTime']['output']>;
+  toolCalls: Array<PendingToolCall>;
+  updatedAt: Scalars['DateTime']['output'];
+  workflowId: Scalars['String']['output'];
+  workflowKey: Scalars['String']['output'];
+  workspaceId: Scalars['String']['output'];
+};
+
+export type ToolApprovalRequestPage = {
+  __typename?: 'ToolApprovalRequestPage';
+  items: Array<ToolApprovalRequest>;
+  totalCount: Scalars['Int']['output'];
+};
+
+export enum ToolApprovalStatus {
+  Approved = 'APPROVED',
+  Partial = 'PARTIAL',
+  Pending = 'PENDING',
+  Rejected = 'REJECTED',
+  TimedOut = 'TIMED_OUT'
+}
+
+export enum ToolApprovalTimeoutAction {
+  AutoApprove = 'AUTO_APPROVE',
+  AutoReject = 'AUTO_REJECT'
+}
+
 export enum ToolRiskLevel {
   High = 'HIGH',
   Low = 'LOW',
@@ -108859,6 +110507,8 @@ export type TriggerScheduledCommentInput = {
 /** Input for triggering workflow */
 export type TriggerWorkflowInput = {
   context?: InputMaybe<Scalars['JSON']['input']>;
+  /** Manual (TEST) vs real (PRODUCTION) execution — BOFF-7511. Defaults to PRODUCTION so every existing caller (webhooks, schedules, the SDK, older builder clients) keeps behaving exactly as before. Only a TEST run may use pinned node data — set this to TEST for builder "Test workflow"/step/ run-from-node actions. */
+  mode?: InputMaybe<RunMode>;
   /** Optional: Stop execution after this node ID. When set, workflow executes from trigger up to and including this node, then marks the run as COMPLETED without continuing to subsequent nodes. Used for step-by-step debugging (n8n-style "Execute step" feature). */
   stopAtNodeId?: InputMaybe<Scalars['String']['input']>;
   triggerData?: InputMaybe<Scalars['JSON']['input']>;
@@ -110510,6 +112160,13 @@ export type UpdateDataSinkLinkInput = {
   priority?: InputMaybe<Scalars['Int']['input']>;
 };
 
+export type UpdateDataTableInput = {
+  /** Replaces the full column list. Existing rows are NOT retroactively re-validated against a narrowed schema (e.g. a column newly marked `required`) — only rows written AFTER the change are validated against it. */
+  columns?: InputMaybe<Array<DataTableColumnInput>>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  name?: InputMaybe<Scalars['String']['input']>;
+};
+
 export type UpdateDeliveryJobInput = {
   cargoItems?: InputMaybe<Scalars['JSON']['input']>;
   context?: InputMaybe<ContextInput>;
@@ -110519,6 +112176,7 @@ export type UpdateDeliveryJobInput = {
   pickupAddress?: InputMaybe<Scalars['JSON']['input']>;
   pricing?: InputMaybe<Scalars['JSON']['input']>;
   priority?: InputMaybe<DeliveryPriority>;
+  routeId?: InputMaybe<Scalars['ID']['input']>;
   scheduledDelivery?: InputMaybe<Scalars['DateTime']['input']>;
   specialInstructions?: InputMaybe<Scalars['String']['input']>;
   status?: InputMaybe<DeliveryJobStatus>;
@@ -110549,6 +112207,7 @@ export type UpdateDriverInput = {
   status?: InputMaybe<DriverStatus>;
   userId?: InputMaybe<Scalars['String']['input']>;
   vehicleId?: InputMaybe<Scalars['String']['input']>;
+  vehicleIds?: InputMaybe<Array<Scalars['ID']['input']>>;
 };
 
 export type UpdateEmailTimeEntryInput = {
@@ -111987,6 +113646,16 @@ export type UpdateLocationEntryInput = {
   startTime?: InputMaybe<Scalars['DateTime']['input']>;
 };
 
+export type UpdateLogStreamDestinationInput = {
+  config?: InputMaybe<Scalars['JSON']['input']>;
+  endpoint?: InputMaybe<Scalars['String']['input']>;
+  eventFilters?: InputMaybe<Array<LogStreamEventType>>;
+  isEnabled?: InputMaybe<Scalars['Boolean']['input']>;
+  name?: InputMaybe<Scalars['String']['input']>;
+  /** WEBHOOK only. Pass null-omit to leave unchanged; pass an empty string to clear a previously configured secret. */
+  secret?: InputMaybe<Scalars['String']['input']>;
+};
+
 export type UpdateMcpConnectionInput = {
   config?: InputMaybe<Scalars['JSON']['input']>;
   credentials?: InputMaybe<Scalars['JSON']['input']>;
@@ -113345,6 +115014,14 @@ export type UpdateWorkflowInput = {
   status?: InputMaybe<FluidGridsWorkflowStatus>;
 };
 
+export type UpdateWorkflowVariableInput = {
+  description?: InputMaybe<Scalars['String']['input']>;
+  externalProvider?: InputMaybe<SecretProviderType>;
+  externalRef?: InputMaybe<Scalars['String']['input']>;
+  isSecret?: InputMaybe<Scalars['Boolean']['input']>;
+  value?: InputMaybe<Scalars['String']['input']>;
+};
+
 export type UpdateWorkspaceDefaultsInput = {
   agentAutoReconnect?: InputMaybe<Scalars['Boolean']['input']>;
   agentHeartbeatInterval?: InputMaybe<Scalars['Int']['input']>;
@@ -114001,6 +115678,11 @@ export enum ValidationMethod {
   Signature = 'SIGNATURE'
 }
 
+export enum VariableScope {
+  Project = 'PROJECT',
+  Workspace = 'WORKSPACE'
+}
+
 export type Vault = {
   __typename?: 'Vault';
   /** Contextual IDs for filtering and scoping (workspaceId, userId, projectId, etc.) */
@@ -114515,6 +116197,7 @@ export type VaultUpdatedPayload = {
 };
 
 export type VehicleFilterInput = {
+  driverId?: InputMaybe<Scalars['ID']['input']>;
   search?: InputMaybe<Scalars['String']['input']>;
   status?: InputMaybe<VehicleStatus>;
   type?: InputMaybe<VehicleType>;
@@ -117674,6 +119357,104 @@ export type WorkerCreateNodeStateInput = {
   status: NodeStatus;
 };
 
+/** Input for recording a pending tool-approval request. */
+export type WorkerCreateToolApprovalRequestInput = {
+  nodeId: Scalars['String']['input'];
+  nodeStateId: Scalars['ID']['input'];
+  runId: Scalars['ID']['input'];
+  timeoutAction?: InputMaybe<ToolApprovalTimeoutAction>;
+  /** Minutes from now before the timeout sweep auto-resolves this request. Omitted/0 means no timeout (it waits indefinitely for a human). */
+  timeoutMinutes?: InputMaybe<Scalars['Int']['input']>;
+  /** JSON array of `{ callId, name, argsJson }` — the calls awaiting a decision. */
+  toolCalls: Scalars['JSON']['input'];
+  workflowId: Scalars['String']['input'];
+  workflowKey: Scalars['String']['input'];
+  workspaceId: Scalars['String']['input'];
+};
+
+export type WorkerDataTableDeleteResponse = {
+  __typename?: 'WorkerDataTableDeleteResponse';
+  affected: Scalars['Int']['output'];
+  error?: Maybe<Scalars['String']['output']>;
+  success: Scalars['Boolean']['output'];
+};
+
+export type WorkerDataTableDeleteRowsInput = {
+  filters?: InputMaybe<Array<DataTableRowFilterInput>>;
+  rowIds?: InputMaybe<Array<Scalars['ID']['input']>>;
+  tableId?: InputMaybe<Scalars['ID']['input']>;
+  tableName?: InputMaybe<Scalars['String']['input']>;
+  workspaceId: Scalars['ID']['input'];
+};
+
+export type WorkerDataTableInsertRowInput = {
+  data: Scalars['JSON']['input'];
+  tableId?: InputMaybe<Scalars['ID']['input']>;
+  tableName?: InputMaybe<Scalars['String']['input']>;
+  workspaceId: Scalars['ID']['input'];
+};
+
+export type WorkerDataTableRowResponse = {
+  __typename?: 'WorkerDataTableRowResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  row?: Maybe<Scalars['JSON']['output']>;
+  success: Scalars['Boolean']['output'];
+};
+
+export type WorkerDataTableRowsQueryInput = {
+  filters?: InputMaybe<Array<DataTableRowFilterInput>>;
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  tableId?: InputMaybe<Scalars['ID']['input']>;
+  tableName?: InputMaybe<Scalars['String']['input']>;
+  workspaceId: Scalars['ID']['input'];
+};
+
+/** WORKER-INTERNAL: response shape for the Data Table node's operations. Mirrors the user-facing responses but never throws on a business-logic failure (quota exceeded, validation failed, row not found) — the Data Table node surfaces `error` as a normal node failure instead of an unhandled GraphQL exception. */
+export type WorkerDataTableRowsResponse = {
+  __typename?: 'WorkerDataTableRowsResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  rows: Scalars['JSON']['output'];
+  success: Scalars['Boolean']['output'];
+  total: Scalars['Int']['output'];
+};
+
+export type WorkerDataTableUpdateRowInput = {
+  data: Scalars['JSON']['input'];
+  rowId: Scalars['ID']['input'];
+  tableId?: InputMaybe<Scalars['ID']['input']>;
+  tableName?: InputMaybe<Scalars['String']['input']>;
+  workspaceId: Scalars['ID']['input'];
+};
+
+export type WorkerDataTableUpsertRowInput = {
+  data: Scalars['JSON']['input'];
+  matchColumns: Array<Scalars['String']['input']>;
+  tableId?: InputMaybe<Scalars['ID']['input']>;
+  tableName?: InputMaybe<Scalars['String']['input']>;
+  workspaceId: Scalars['ID']['input'];
+};
+
+export type WorkerDedupeCheckAndMarkInput = {
+  /** SHA-256 hex digests of each item's compare-key (never the raw item value — see the `WorkflowDedupeSeen` model doc comment). */
+  hashes: Array<Scalars['String']['input']>;
+  /** Cap on distinct values remembered per node — oldest entries are pruned once exceeded. Defaults to 10000. */
+  maxTracked?: InputMaybe<Scalars['Int']['input']>;
+  /** The Dedupe node's id in the DAG — scopes the "seen" set to this one node instance, matching PollState's (workflowKey, triggerNodeId) scoping. */
+  nodeId: Scalars['String']['input'];
+  /** Only treat a previously-seen hash as "still seen" if it was recorded within the last N seconds. Omitted = remember indefinitely (until `maxTracked` pruning). */
+  windowSeconds?: InputMaybe<Scalars['Int']['input']>;
+  workflowKey: Scalars['String']['input'];
+  workspaceId: Scalars['ID']['input'];
+};
+
+export type WorkerDedupeCheckAndMarkResponse = {
+  __typename?: 'WorkerDedupeCheckAndMarkResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  /** Subset of the input `hashes` that were NOT already seen (within the window, if any) — these are the ones this call just recorded as seen. */
+  newHashes: Array<Scalars['String']['output']>;
+  success: Scalars['Boolean']['output'];
+};
+
 /** Definition data for worker execution */
 export type WorkerDefinitionData = {
   __typename?: 'WorkerDefinitionData';
@@ -117734,6 +119515,8 @@ export type WorkerNodeState = {
   runId: Scalars['String']['output'];
   startTime?: Maybe<Scalars['DateTime']['output']>;
   status: NodeStatus;
+  /** True when this node's output came from pinned data instead of a real call (BOFF-7511). The executor decides this itself from the job message's own `mode`/pinned data (never a server round-trip) and stamps the result here purely for the UI/audit trail — the server never reads this to decide behavior. */
+  usedPinnedData?: Maybe<Scalars['Boolean']['output']>;
 };
 
 /** Response for node state operations */
@@ -117765,6 +119548,8 @@ export type WorkerRunData = {
   __typename?: 'WorkerRunData';
   context?: Maybe<Scalars['JSON']['output']>;
   id: Scalars['ID']['output'];
+  /** BOFF-7650: cached by the executor alongside the rest of this record so `completeRun` can gate static-data persistence on it without a second round trip. Re-verified independently server-side in `StaticDataProvider.syncForRun` regardless — this field is a convenience for the caller, never the source of truth for the safety check. */
+  mode: RunMode;
   parentRunId?: Maybe<Scalars['String']['output']>;
   startedAt?: Maybe<Scalars['DateTime']['output']>;
   status: RunStatus;
@@ -117799,6 +119584,37 @@ export type WorkerRunStatusResponse = {
   success: Scalars['Boolean']['output'];
 };
 
+export type WorkerStaticDataNodeWriteInput = {
+  data: Scalars['JSON']['input'];
+  nodeId: Scalars['String']['input'];
+};
+
+/** WORKER-INTERNAL: current persisted static data for a workflow, hydrated by fluidgrids-workers at the start of every node execution that might read it. */
+export type WorkerStaticDataResponse = {
+  __typename?: 'WorkerStaticDataResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  /** Global-scope blob (`{}` when never written). */
+  global: Scalars['JSON']['output'];
+  /** Node-scope blobs, keyed by nodeId (`{}` when a given node has never written one). */
+  nodes: Scalars['JSON']['output'];
+  success: Scalars['Boolean']['output'];
+};
+
+export type WorkerStaticDataSyncResponse = {
+  __typename?: 'WorkerStaticDataSyncResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  /** True only when at least one blob's `data` actually changed content (server-side content compare) — lets the caller avoid bumping `version` unnecessarily and gives the run log a meaningful "persisted" vs "no-op" line. */
+  persisted: Scalars['Boolean']['output'];
+  success: Scalars['Boolean']['output'];
+};
+
+export type WorkerToolApprovalRequestResponse = {
+  __typename?: 'WorkerToolApprovalRequestResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  request?: Maybe<ToolApprovalRequest>;
+  success: Scalars['Boolean']['output'];
+};
+
 /** Input for updating node state */
 export type WorkerUpdateNodeStateInput = {
   attemptCount?: InputMaybe<Scalars['Int']['input']>;
@@ -117811,6 +119627,8 @@ export type WorkerUpdateNodeStateInput = {
   output?: InputMaybe<Scalars['JSON']['input']>;
   startTime?: InputMaybe<Scalars['DateTime']['input']>;
   status: NodeStatus;
+  /** Set true when the executor used pinned data instead of actually calling the node (BOFF-7511). */
+  usedPinnedData?: InputMaybe<Scalars['Boolean']['input']>;
 };
 
 /** Input for updating run status */
@@ -117823,6 +119641,17 @@ export type WorkerUpdateRunStatusInput = {
   status: RunStatus;
 };
 
+/** Worker-only, execution-time resolution of every variable visible to a run (workspace-scope merged with project-scope overrides), with secret values resolved (local decrypt or external provider fetch). Never exposed to normal user-facing callers — see the `actorTypes: ["service"]` directive below. */
+export type WorkerVariablesResponse = {
+  __typename?: 'WorkerVariablesResponse';
+  error?: Maybe<Scalars['String']['output']>;
+  /** Keys whose value is secret — the caller (fluidgrids-workers) uses this to scrub the values out of run log lines before they are ever persisted. */
+  secretKeys: Array<Scalars['String']['output']>;
+  success: Scalars['Boolean']['output'];
+  /** Flattened `{ key: value }` map, ready to use as `$vars`. */
+  vars: Scalars['JSON']['output'];
+};
+
 /** WorkflowDefinition: Reusable workflow template with versioning Federated entity identified by id */
 export type WorkflowDefinition = {
   __typename?: 'WorkflowDefinition';
@@ -117839,6 +119668,10 @@ export type WorkflowDefinition = {
   /** Computed field: true if status is ACTIVE */
   isActive: Scalars['Boolean']['output'];
   name: Scalars['String']['output'];
+  /** Stable references for the nodes used by this workflow version */
+  nodeReferences: Array<WorkflowNodeReference>;
+  /** Pinned/mock output data, keyed by nodeId (BOFF-7511). Mirrors `definitionJson.pinnedData` as a typed convenience field so the builder doesn't need to reach into the raw definition blob. Each value is `{ data, pinnedAt, pinnedBy }`. Honored ONLY by TEST-mode runs — see `TriggerWorkflowInput.mode` / `RunMode`. */
+  pinnedNodeData: Scalars['JSON']['output'];
   projectId?: Maybe<Scalars['String']['output']>;
   runs: Array<WorkflowRun>;
   status: WorkflowStatus;
@@ -117871,6 +119704,12 @@ export type WorkflowDefinitionListResponse = {
   total: Scalars['Int']['output'];
 };
 
+export enum WorkflowDiffKind {
+  Added = 'ADDED',
+  Changed = 'CHANGED',
+  Removed = 'REMOVED'
+}
+
 /** WorkflowExecutionLog: Detailed execution logs for debugging Note: Consider using tenantmodule-activity for production */
 export type WorkflowExecutionLog = {
   __typename?: 'WorkflowExecutionLog';
@@ -117897,6 +119736,34 @@ export type WorkflowExecutionMetrics = {
   totalRuns: Scalars['Int']['output'];
 };
 
+/** Portable workflow document returned by exportWorkflow. */
+export type WorkflowExport = {
+  __typename?: 'WorkflowExport';
+  category?: Maybe<Scalars['String']['output']>;
+  context?: Maybe<Scalars['JSON']['output']>;
+  definitionJson: Scalars['JSON']['output'];
+  description?: Maybe<Scalars['String']['output']>;
+  exportedAt: Scalars['DateTime']['output'];
+  format: Scalars['String']['output'];
+  icon?: Maybe<Scalars['String']['output']>;
+  name: Scalars['String']['output'];
+  nodeReferences: Array<WorkflowNodeReference>;
+  schemaVersion: Scalars['Int']['output'];
+  tags: Array<Scalars['String']['output']>;
+  tagsV2: Scalars['JSON']['output'];
+  version: Scalars['String']['output'];
+  workflowKey: Scalars['String']['output'];
+};
+
+/** Validation result returned for a workflow import. */
+export type WorkflowImportValidation = {
+  __typename?: 'WorkflowImportValidation';
+  errors: Array<Scalars['String']['output']>;
+  missingNodes: Array<WorkflowNodeReference>;
+  valid: Scalars['Boolean']['output'];
+  warnings: Array<Scalars['String']['output']>;
+};
+
 export type WorkflowInstanceInfo = {
   __typename?: 'WorkflowInstanceInfo';
   createdAt: Scalars['DateTime']['output'];
@@ -117912,6 +119779,14 @@ export type WorkflowInstanceInfo = {
   workflowVersion: Scalars['String']['output'];
 };
 
+/** A node reference included in a portable workflow export. */
+export type WorkflowNodeReference = {
+  __typename?: 'WorkflowNodeReference';
+  nodeId: Scalars['String']['output'];
+  nodeType: Scalars['String']['output'];
+  nodeVersion?: Maybe<Scalars['String']['output']>;
+};
+
 /** Pagination input for listing operations */
 export type WorkflowPaginationInput = {
   limit?: InputMaybe<Scalars['Int']['input']>;
@@ -117933,12 +119808,16 @@ export type WorkflowRun = {
   failedNodes?: Maybe<Scalars['Int']['output']>;
   id: Scalars['ID']['output'];
   isSubWorkflowRun: Scalars['Boolean']['output'];
+  /** Manual/debug (TEST) vs real (PRODUCTION) run — BOFF-7511. Defaults to PRODUCTION. Only a TEST run may use pinned node data. */
+  mode: RunMode;
   nodeStates: Array<NodeState>;
   parentRun?: Maybe<WorkflowRun>;
   parentRunId?: Maybe<Scalars['String']['output']>;
   progress: Scalars['Float']['output'];
   rootRunId?: Maybe<Scalars['String']['output']>;
   skippedNodes?: Maybe<Scalars['Int']['output']>;
+  /** Debug-in-editor / run-from-node (BOFF-7511): the run this one reused upstream node outputs from, if it was started via `runFromNode`. */
+  sourceRunId?: Maybe<Scalars['String']['output']>;
   startedAt?: Maybe<Scalars['DateTime']['output']>;
   status: RunStatus;
   subworkflowDepth: Scalars['Int']['output'];
@@ -118006,6 +119885,21 @@ export type WorkflowSearchResponse = {
   totalResults: Scalars['Int']['output'];
 };
 
+export type WorkflowStaticDataRecord = {
+  __typename?: 'WorkflowStaticDataRecord';
+  createdAt: Scalars['DateTime']['output'];
+  data: Scalars['JSON']['output'];
+  id: Scalars['ID']['output'];
+  /** Empty string for GLOBAL-scoped records. */
+  nodeId: Scalars['String']['output'];
+  scope: StaticDataScope;
+  sizeBytes: Scalars['Int']['output'];
+  updatedAt: Scalars['DateTime']['output'];
+  version: Scalars['Int']['output'];
+  workflowKey: Scalars['String']['output'];
+  workspaceId: Scalars['ID']['output'];
+};
+
 export enum WorkflowStatus {
   Active = 'ACTIVE',
   Archived = 'ARCHIVED',
@@ -118036,6 +119930,57 @@ export type WorkflowUpdateScheduledJobInput = {
   schedule?: InputMaybe<Scalars['String']['input']>;
 };
 
+export type WorkflowVariable = {
+  __typename?: 'WorkflowVariable';
+  createdAt: Scalars['DateTime']['output'];
+  createdBy: Scalars['String']['output'];
+  description?: Maybe<Scalars['String']['output']>;
+  externalProvider: SecretProviderType;
+  externalRef?: Maybe<Scalars['String']['output']>;
+  id: Scalars['ID']['output'];
+  isSecret: Scalars['Boolean']['output'];
+  key: Scalars['String']['output'];
+  projectId?: Maybe<Scalars['ID']['output']>;
+  scope: VariableScope;
+  updatedAt: Scalars['DateTime']['output'];
+  updatedBy?: Maybe<Scalars['String']['output']>;
+  /** Resolved value for display. Always null when `isSecret` is true, or when the variable is externally-backed (`externalProvider != NONE`) — use `revealWorkflowVariableValue` to fetch the real value in either case. */
+  value?: Maybe<Scalars['String']['output']>;
+  workspaceId: Scalars['ID']['output'];
+};
+
+export type WorkflowVariableResponse = MutationResponse & {
+  __typename?: 'WorkflowVariableResponse';
+  message: Scalars['String']['output'];
+  success: Scalars['Boolean']['output'];
+  variable?: Maybe<WorkflowVariable>;
+};
+
+export type WorkflowVariablesListResponse = {
+  __typename?: 'WorkflowVariablesListResponse';
+  total: Scalars['Int']['output'];
+  variables: Array<WorkflowVariable>;
+};
+
+/** Deterministic JSON diff between two versions of one workflow. */
+export type WorkflowVersionDiff = {
+  __typename?: 'WorkflowVersionDiff';
+  entries: Array<WorkflowVersionDiffEntry>;
+  fromVersion: Scalars['String']['output'];
+  toVersion: Scalars['String']['output'];
+  truncated: Scalars['Boolean']['output'];
+  workflowKey: Scalars['String']['output'];
+};
+
+/** One structural change between two workflow versions. */
+export type WorkflowVersionDiffEntry = {
+  __typename?: 'WorkflowVersionDiffEntry';
+  after?: Maybe<Scalars['JSON']['output']>;
+  before?: Maybe<Scalars['JSON']['output']>;
+  kind: WorkflowDiffKind;
+  path: Scalars['String']['output'];
+};
+
 /** Workspace type (owned by workspace service) */
 export type Workspace = {
   __typename?: 'Workspace';