@burdenoff/microfe-store 2026.1014.1 → 2026.1028.1

package/dist/generated/global-types.d.ts

@@ -748,6 +748,8 @@ export declare enum AgentStatus {
 /** Per-model LLM token prices (USD per 1M tokens) used to weight AI-credit charges. */
 export type AiModelPrice = {
     __typename?: 'AiModelPrice';
+    cacheReadMultiplier: Scalars['Float']['output'];
+    cacheWriteMultiplier: Scalars['Float']['output'];
     inputPer1M: Scalars['Float']['output'];
     isActive: Scalars['Boolean']['output'];
     model: Scalars['String']['output'];
@@ -1566,6 +1568,82 @@ export type AutomationSubscriber = {
     status: AutomationStatus;
     subscriberId: Scalars['String']['output'];
 };
+/** A workspace's avatar credits, in one person's view when actorId is given (contract v2). Whole credits, 0 or more. */
+export type AvatarMinutesBalance = {
+    __typename?: 'AvatarMinutesBalance';
+    /** Credits left for this person now: carried + free within the person's ceiling + plan. */
+    availableMinutes: Scalars['Int']['output'];
+    /** Carried credits left. */
+    carriedRemaining: Scalars['Int']['output'];
+    /** Always 2. */
+    contractVersion: Scalars['Int']['output'];
+    /** The counted free row's amount; 0 without one. */
+    freeMinutesPerMonth: Scalars['Int']['output'];
+    /** Free credits left in this workspace this month, before the person's ceiling. */
+    freeRemaining: Scalars['Int']['output'];
+    /** This person's own open holds that block them; null without actorId. */
+    heldByActorMinutes?: Maybe<Scalars['Int']['output']>;
+    /** Credits reserved by open sessions in this workspace. */
+    heldMinutes: Scalars['Int']['output'];
+    /** Whether a plan with more credits exists for the product. Display only, never an entitlement. */
+    morePlanCreditsAvailable: Scalars['Boolean']['output'];
+    /** The per-person free ceiling; null when off. */
+    personFreeCeiling?: Maybe<Scalars['Int']['output']>;
+    /** The person's free credits left this UTC month; null when the ceiling is off or without actorId. */
+    personFreeRemaining?: Maybe<Scalars['Int']['output']>;
+    /** The counted plans' amounts, summed. */
+    planMinutesPerMonth: Scalars['Int']['output'];
+    /** Plan credits left in this workspace this month. */
+    planRemaining: Scalars['Int']['output'];
+    reason?: Maybe<AvatarMinutesReason>;
+    /** The next 1st, 00:00 UTC (ISO-8601 with milliseconds). */
+    resetsAt: Scalars['String']['output'];
+    state: AvatarMinutesState;
+};
+export declare enum AvatarMinutesEndClass {
+    Exact = "EXACT",
+    None = "NONE",
+    Uncertain = "UNCERTAIN"
+}
+export declare enum AvatarMinutesMode {
+    Enforce = "ENFORCE",
+    Observe = "OBSERVE"
+}
+export declare enum AvatarMinutesReason {
+    FreeCeiling = "FREE_CEILING",
+    NotIncluded = "NOT_INCLUDED",
+    OwnSession = "OWN_SESSION",
+    ZeroSessionLimit = "ZERO_SESSION_LIMIT"
+}
+export type AvatarMinutesReservation = {
+    __typename?: 'AvatarMinutesReservation';
+    chargedMinutes?: Maybe<Scalars['Int']['output']>;
+    /** AVATAR, SWEEPER or SUPERSEDE. */
+    closedBy?: Maybe<Scalars['String']['output']>;
+    reservedMinutes: Scalars['Int']['output'];
+    sessionId: Scalars['ID']['output'];
+    /** RESERVED, ACTIVE, SETTLED, RELEASED or EXPIRED. */
+    state: Scalars['String']['output'];
+};
+/** HMAC-SHA256 envelope of a signed avatar-minutes call (DESIGN 3.7): the key id (environment-prefixed), the signing instant (strict ISO-8601 UTC with milliseconds) and the MAC (64 lowercase hex). */
+export type AvatarMinutesSignature = {
+    issuedAt: Scalars['String']['input'];
+    kid: Scalars['String']['input'];
+    value: Scalars['String']['input'];
+};
+export declare enum AvatarMinutesState {
+    Available = "AVAILABLE",
+    Exhausted = "EXHAUSTED",
+    InUse = "IN_USE"
+}
+/** The provider's session status at settle, noted once on the SETTLED reservation (P-27). */
+export declare enum AvatarProviderSessionStatus {
+    Canceled = "CANCELED",
+    Ended = "ENDED",
+    Ending = "ENDING",
+    Failed = "FAILED",
+    Other = "OTHER"
+}
 export declare enum BackoffStrategy {
     Exponential = "EXPONENTIAL",
     ExponentialWithJitter = "EXPONENTIAL_WITH_JITTER",
@@ -1797,13 +1875,17 @@ export type BillingSubscription = {
 };
 export type BillingWebhookLog = {
     __typename?: 'BillingWebhookLog';
+    attemptCount: Scalars['Int']['output'];
     context?: Maybe<Scalars['JSON']['output']>;
     createdAt: Scalars['DateTime']['output'];
+    deadLetteredAt?: Maybe<Scalars['DateTime']['output']>;
     error?: Maybe<Scalars['String']['output']>;
     event: Scalars['String']['output'];
     id: Scalars['ID']['output'];
+    nextAttemptAt?: Maybe<Scalars['DateTime']['output']>;
     payload: Scalars['JSON']['output'];
     processed: Scalars['Boolean']['output'];
+    processingStartedAt?: Maybe<Scalars['DateTime']['output']>;
     provider: Scalars['String']['output'];
 };
 /** Paginated page of BillingWebhookLog rows, for the admin webhook-log viewer — unlike getUnprocessedFailedWebhooks, not restricted to the payment-succeeded event types eligible for refund creation. */
@@ -2920,6 +3002,20 @@ export declare enum CircuitState {
     HalfOpen = "HALF_OPEN",
     Open = "OPEN"
 }
+export type CloseAvatarMinutesInput = {
+    /** The decider's wall-clock time; audit only. */
+    decidedAt: Scalars['String']['input'];
+    endClass: AvatarMinutesEndClass;
+    /** Sets the rounding by the exhaustive table in DESIGN 3.1. */
+    endReason: Scalars['String']['input'];
+    ownerDecided: Scalars['Boolean']['input'];
+    /** Anchors the lease; absent for a failed start. */
+    readyAt?: InputMaybe<Scalars['String']['input']>;
+    sessionId: Scalars['ID']['input'];
+    /** The decision's span (DESIGN 3.1), whole milliseconds; 0 when not confirmed. */
+    spanMs: Scalars['Int']['input'];
+    workspaceId: Scalars['ID']['input'];
+};
 export type ComplaintStats = {
     __typename?: 'ComplaintStats';
     complaintRate: Scalars['Float']['output'];
@@ -6242,6 +6338,12 @@ export type ExternalOidcConfigurationInput = {
     redirectUri?: InputMaybe<Scalars['String']['input']>;
     scopes?: InputMaybe<Array<Scalars['String']['input']>>;
 };
+export type ExternalRefundResult = {
+    __typename?: 'ExternalRefundResult';
+    alreadyRecorded: Scalars['Boolean']['output'];
+    chargeId: Scalars['ID']['output'];
+    refundId: Scalars['ID']['output'];
+};
 export type ExternalSettlementResult = {
     __typename?: 'ExternalSettlementResult';
     /** True when the externalRef already had a settlement (idempotent replay). */
@@ -6834,6 +6936,8 @@ export type InitiatePaymentInput = {
     quantity?: InputMaybe<Scalars['Int']['input']>;
     /** Whether to save the card for future purchases (only for new card payments) */
     saveCard?: InputMaybe<Scalars['Boolean']['input']>;
+    /** For PLAN purchase of a PER_SEAT plan: the number of seats to charge for. Clamped server-side to [plan.minSeats, plan.maxSeats]; defaults to plan.minSeats (or 1) when omitted. Ignored for FLAT_RATE plans. */
+    seatCount?: InputMaybe<Scalars['Int']['input']>;
     /** For ADDON purchase: subscription ID to attach addon to. Required if billing account has multiple active subscriptions. If only one active subscription exists, it will be auto-selected. */
     subscriptionId?: InputMaybe<Scalars['ID']['input']>;
     /** For PLAN upgrade: the subscription ID being upgraded from. If provided, this is an upgrade - old quotas will be moved to new subscription. */
@@ -8041,6 +8145,8 @@ export type Mutation = {
     /** Accept an organization invite (must be logged in as the invited user) */
     acceptOrganizationInvite: OrganizationMember;
     acceptSourcingOffer: SourcingOrderSummary;
+    /** Signed (DESIGN 3.7). The provider is ready: RESERVED to ACTIVE. */
+    activateAvatarMinutes: AvatarMinutesReservation;
     /** Activate a channel */
     activateChannel: Channel;
     /** Activate a connection */
@@ -8217,6 +8323,8 @@ export type Mutation = {
     /** Clear all items from the cart */
     clearCart: CartPayload;
     cloneSchedule: ScheduledJob;
+    /** Signed (DESIGN 3.7). The avatar's end decision: SETTLED with the charge, or RELEASED. */
+    closeAvatarMinutes: AvatarMinutesReservation;
     closeSupportTicket: SupportTicket;
     /** Complete the OAuth flow after the user returns from the developer's OAuth page. Exchanges the authorization code for tokens and activates the integration connection. */
     completeAppOAuth: AppInstallation;
@@ -8429,6 +8537,8 @@ export type Mutation = {
     deactivateResource: Scalars['Boolean']['output'];
     /** Deactivate a tour schedule */
     deactivateTourSchedule: TourSchedule;
+    /** Stops a subject from firing webhooks. The row is kept so a later registration reactivates it. Same ownership rule as registration. */
+    deactivateWebhookEventSubject: WebhookEventSubject;
     /** Pure quota decrement — called by wspace-activity-svc after writing a UsageRecord. Only decrements QuotaAssignment.limits.value. Does NOT write back to activity-svc. Requires the quotaAssignmentId already resolved by checkQuotaExhausted. */
     decrementQuota: Scalars['Boolean']['output'];
     /** Delete current user's account permanently Requires password confirmation */
@@ -8690,7 +8800,7 @@ export type Mutation = {
     initiateNTLMChallenge: NtlmChallengeResult;
     /** Initiate a payment for credits, plans, or addons This creates a Stripe PaymentIntent or Razorpay Order with tax included Returns client secret (Stripe) or order ID (Razorpay) for frontend to complete payment */
     initiatePayment: InitiatePaymentResponse;
-    /** Install an application */
+    /** Install an application. For a workspace-private custom node, installing a newer version published to the organization over an active installation updates it (BOFF-9766); the previous version stays installed in the workspace so workflows pinned to it keep running, and uninstall removes every version. */
     installApp: AppInstallation;
     /** Install a purchased app to a workspace. Validates that the product was purchased before allowing installation. If orderId is not provided, will find the most recent processed order for this product. version: optional specific version to install (e.g. "1.2.0"), resolved against the linked devportal Application's published/deprecated versions. Omit to install the product's current latest version (default behavior). */
     installPurchasedApp: InstallPurchasedAppResult;
@@ -8737,6 +8847,8 @@ export type Mutation = {
     newsletterEraseSubject: NewsletterEraseResult;
     /** Export the subject's newsletter data: subscriber rows, per-list memberships, consent ledger entries, automation enrolments, waitlist entries. */
     newsletterExportSubject: Scalars['JSON']['output'];
+    /** Signed (P-27). The settle owner's provider-status note for the fault list; writes no credits. */
+    noteAvatarSessionProviderStatus: Scalars['Boolean']['output'];
     /** Notify candidates who have more than one application on file (and so may have received more than one take-home assignment email as a result of a since-fixed missing duplicate-email check) that they only need to complete ONE of the assignments they received (admin). Grouped by email address — sends exactly one notice per unique candidate email, never one per duplicate application/round, and re-running this is safe: an email already notified is skipped unless `force` is set. */
     notifyDuplicateApplicants: DuplicateNoticeResult;
     openCircuitBreaker: CircuitBreakerState;
@@ -8769,6 +8881,8 @@ export type Mutation = {
     publishApplication: Application;
     /** Developer action: submit a draft (or rejected) version for platform review. Status becomes pending_review. The store is NOT updated until an admin approves. */
     publishApplicationVersion: ApplicationVersion;
+    /** Developer-organization admin action (BOFF-9657): publish a draft (or rejected) version of a PRIVATE NODE application straight to the workspaces of your organization, without platform review. The version must carry a package whose validation passed, a READY sandbox image and no failed or running operation smoke test. `workspaceId` is a workspace you administer; its organization becomes the node's owning organization on the first publish, and every later publish must come from that organization. The version is never listed in the public Node Store; it is installable only into workspaces of the owning organization. Authorization is enforced in the resolver: the caller must be an OWNER or ADMIN of the application's developer organization (or own a personal application) and an admin of `workspaceId`. The gateway's organization scope cannot evaluate this today because user sessions carry no verified organization claim, so the directive declares the permission and authenticates the caller. */
+    publishApplicationVersionToOrganization: ApplicationVersion;
     /** Publish ONE curated catalog node version (from the fluidgrids-nodes repo) to every enabled sandbox provider — the same PublishOrchestrator the devportal path uses, so the two cannot drift. That drift is not hypothetical: the catalog previously had no publish trigger at all, so nodes were built and pinned by hand and 14 of 31 prod-bound nodes ended up running code older than fluidgrids-nodes main. One entrypoint, two triggers (devportal publish, catalog CI) is the fix. NOT actor-authenticated: the caller is CI, not a platform user or app, so this verifies a shared secret in the resolver (checked against DEVPORTAL_CALLBACK_SECRET, or CALLBACK_SECRET as shipped by the Secrets Manager bundle) exactly as reportNodeSandboxBuildStatus does. Sent as an argument rather than a header because global-public-gateway forwards only a fixed header allowlist to subgraphs. `zipUrl` must be fetchable by this service — CI uploads the packaged node and passes a presigned URL. `isFirstPublish` tells the orchestrator whether this node type has ever been built before, which is what lets it annotate a provider that cannot self-onboard (Cloudflare) instead of reporting a mystery failure. Defaults to false: a catalog node already running on Cloudflare has a Durable Object class, so only a genuinely new node should pass true. Returns a JSON array of per-provider outcomes so CI can log them and fail the job when nothing could build. */
     publishCatalogNodeVersion: Scalars['JSON']['output'];
     publishFAQ: Faq;
@@ -8808,6 +8922,8 @@ export type Mutation = {
     recordEarningEntry: EarningsEntry;
     /** Record that a visitor followed a link the answer offered. Fire-and-forget from the browser: a click must never be blocked or delayed by analytics, so this reports `recorded: false` rather than throwing when the click cannot be attributed. */
     recordExploreClick: RecordExploreClickResult;
+    /** Record a completed external refund without invoking a payment provider. */
+    recordExternalRefund: ExternalRefundResult;
     /** Record a SETTLED (or pending/failed) external/manual Charge + Transaction on behalf of a workspace/org by explicit id. Service/super_admin only — routed through the internal gateway. Bypasses the Stripe/Razorpay sync path. */
     recordExternalSettlement: ExternalSettlementResult;
     recordFAQView: Faq;
@@ -8840,6 +8956,8 @@ export type Mutation = {
     /** Register a resource with custom RBAC configurations. */
     registerResource: Resource;
     registerSupportAttachmentPart: Scalars['Boolean']['output'];
+    /** Creates or updates subject mappings for a product. Idempotent: a product's service can call it on every deploy. An existing mapping can only be changed by the actor that registered it, or by a super admin. */
+    registerWebhookEventSubjects: Array<WebhookEventSubject>;
     reinstatePublisher: Publisher;
     rejectApplication: Application;
     /** Platform admin only: reject a pending_review version with a reason. The developer can fix their submission and re-submit. */
@@ -8920,6 +9038,8 @@ export type Mutation = {
     replaceChannelTags: Array<ChannelTagAssignment>;
     /** Replace all tags on a store product */
     replaceStoreProductTags: Array<StoreProductTagAssignment>;
+    /** Replay one dead-lettered provider webhook through the durable worker. */
+    replayBillingWebhook?: Maybe<BillingWebhookLog>;
     /** Send an email reply to a contact inquiry. The reply is sent via the notification pipeline (notification-svc → channel-svc → email provider). Auto-updates status to REVIEWED. */
     replyToContactInquiry: ContactInquiryReplyResult;
     /** Send a branded email reply to an applicant (admin). Delivered to the applicant's email via the notification pipeline. Does not change status — the admin controls status explicitly. `message` is rich-text HTML from the admin's editor; it is sanitized to an allowlist before it reaches the email. */
@@ -8958,6 +9078,8 @@ export type Mutation = {
     resendSurvey: CustomerSatisfactionSurvey;
     resendVerificationEmail: ResendVerificationResult;
     reserveAssistantAccountBudget: AssistantBudgetReceipt;
+    /** Signed (DESIGN 3.7). Reserves credits for a session (ENFORCE) or records its shadow (OBSERVE). */
+    reserveAvatarMinutes: AvatarMinutesReservation;
     resetCircuitBreaker: CircuitBreakerState;
     /** Reset password using token from email */
     resetPassword: Scalars['Boolean']['output'];
@@ -9040,7 +9162,7 @@ export type Mutation = {
     rotateConnectionCredentials: ChannelConnection;
     /** Run health check on a channel */
     runChannelHealthCheck: ChannelHealthCheck;
-    /** Admin/service-initiated DSAR for an arbitrary subject (e.g. a support-filed or regulator-filed request, or a same-layer service driving the flow on a subject's behalf). Restricted to super_admin and service actors only — never reachable by a regular user for another person's data. */
+    /** Admin/service-initiated DSAR for an arbitrary subject (e.g. a support-filed or regulator-filed request, or a same-layer service driving the flow on a subject's behalf). Restricted to super_admin and service actors only — never reachable by a regular user for another person's data. `subjectEmail` is optional and additive: it lets the fan-out also reach records that are keyed by email only (e.g. a guest contact-inquiry or a newsletter signup with no account), such as `ContactInquiry`, `NewsletterWaitlist`, and `NewsletterSuppression`. Omit it for a subject who only has account-linked records. */
     runDsarRequestForSubject: DsarOrchestrationResult;
     runMonthlyPayouts: PayoutRunLog;
     /** Self-service DSAR: export or erase the CALLING actor's own data across every fan-out target. Self-scoped (Type-A pattern) — subjectId is always the calling actor's own id; there is no identity argument, so this can never be used to act on someone else's data. */
@@ -9098,6 +9220,8 @@ export type Mutation = {
     serviceResolvePayoutAccount: PayoutAccount;
     /** Mirror a billing PayoutRequest status change back onto the DeveloperOrgPayout it originated from (BOFF-7192). Billing owns the payout system-of-record and is where admins approve/reject/mark-paid; this keeps devportal's own payout history in sync so it doesn't stay stuck showing a stale status forever. Looked up by sourceIdempotencyKey ("devportal:payout:<id>", set when the request was originally mirrored to billing) — a no-op if the key isn't a devportal-originated one, or no matching local payout exists. Service/super_admin only — internal gateway. */
     serviceSyncPayoutStatus?: Maybe<DeveloperOrgPayout>;
+    /** M2M: create or update the calling service's catalogue listing for an item that service sells through its own checkout (BOFF-3430), for cross-product discovery. Idempotent on (calling service identity, input.externalId): call it on every change of the source item. The owning service is always the verified service identity of the caller, never an input field. Set status ARCHIVED to take the listing down. A listing an admin has delisted or rejected stays off display until an admin restores it. Service-actor only. */
+    serviceUpsertExternalListing: StoreProduct;
     setAgentAway: AgentProfile;
     setAgentOffline: AgentProfile;
     setAgentOnline: AgentProfile;
@@ -9187,6 +9311,8 @@ export type Mutation = {
     syncStoreSubmissionStatus: Scalars['Boolean']['output'];
     /** Sync tour steps (smart update in ONE call) Send all desired steps, backend handles: update existing, create new, delete removed */
     syncTourSteps: Array<TourStep>;
+    /** Mirror a workspace deletion from the workspace layer to the global layer. Called by wspace-workspace-svc after its deleteWorkspace soft-deletes the workspace, so the global registry (myWorkspaces, the context switcher, routing) stops listing it as ACTIVE. Marks the global row DELETED and keeps it for audit. Idempotent: an unknown or already-deleted workspace succeeds without changes. */
+    syncWorkspaceDeletionFromWspace: SyncWorkspaceFromWspaceResponse;
     /** Sync workspace metadata from workspace layer to global layer. Called by wspace-workspace-svc when a workspace is created directly via workspace layer. This is the reverse of syncFromGlobal - it syncs global ← wspace. Creates workspace metadata + owner membership in global-tenant-svc. */
     syncWorkspaceFromWspace: SyncWorkspaceFromWspaceResponse;
     tagChannel: ChannelTagAssignment;
@@ -9481,6 +9607,13 @@ export type MutationAcceptSourcingOfferArgs = {
     offerId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationActivateAvatarMinutesArgs = {
+    readyAt: Scalars['String']['input'];
+    sessionId: Scalars['ID']['input'];
+    signature: AvatarMinutesSignature;
+    workspaceId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationActivateChannelArgs = {
     id: Scalars['ID']['input'];
 };
@@ -9771,10 +9904,12 @@ export type MutationAttachMediaToStepArgs = {
 /** Root mutation type */
 export type MutationAuthEraseSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
 export type MutationAuthExportSubjectArgs = {
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -9992,6 +10127,11 @@ export type MutationCloneScheduleArgs = {
     sourceId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationCloseAvatarMinutesArgs = {
+    input: CloseAvatarMinutesInput;
+    signature: AvatarMinutesSignature;
+};
+/** Root mutation type */
 export type MutationCloseSupportTicketArgs = {
     id: Scalars['ID']['input'];
 };
@@ -10600,6 +10740,10 @@ export type MutationDeactivateTourScheduleArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationDeactivateWebhookEventSubjectArgs = {
+    subject: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationDecrementQuotaArgs = {
     amount: Scalars['Int']['input'];
     billingAccountId: Scalars['ID']['input'];
@@ -11064,6 +11208,7 @@ export type MutationEnsureStoreOrderBillingOrderArgs = {
 /** Root mutation type */
 export type MutationEraseSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -11129,6 +11274,7 @@ export type MutationExportRevenueArgs = {
 };
 /** Root mutation type */
 export type MutationExportSubjectArgs = {
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -11416,6 +11562,12 @@ export type MutationNewsletterExportSubjectArgs = {
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationNoteAvatarSessionProviderStatusArgs = {
+    sessionId: Scalars['ID']['input'];
+    signature: AvatarMinutesSignature;
+    status: AvatarProviderSessionStatus;
+};
+/** Root mutation type */
 export type MutationNotifyDuplicateApplicantsArgs = {
     input: NotifyDuplicateApplicantsInput;
 };
@@ -11500,6 +11652,11 @@ export type MutationPublishApplicationVersionArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationPublishApplicationVersionToOrganizationArgs = {
+    id: Scalars['ID']['input'];
+    workspaceId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationPublishCatalogNodeVersionArgs = {
     isFirstPublish?: InputMaybe<Scalars['Boolean']['input']>;
     nodeType: Scalars['String']['input'];
@@ -11631,6 +11788,10 @@ export type MutationRecordExploreClickArgs = {
     input: RecordExploreClickInput;
 };
 /** Root mutation type */
+export type MutationRecordExternalRefundArgs = {
+    input: RecordExternalRefundInput;
+};
+/** Root mutation type */
 export type MutationRecordExternalSettlementArgs = {
     input: RecordExternalSettlementInput;
 };
@@ -11718,6 +11879,10 @@ export type MutationRegisterSupportAttachmentPartArgs = {
     input: RegisterSupportAttachmentPartInput;
 };
 /** Root mutation type */
+export type MutationRegisterWebhookEventSubjectsArgs = {
+    input: RegisterWebhookEventSubjectsInput;
+};
+/** Root mutation type */
 export type MutationReinstatePublisherArgs = {
     id: Scalars['ID']['input'];
 };
@@ -11940,6 +12105,10 @@ export type MutationReplaceStoreProductTagsArgs = {
     input: ReplaceStoreProductTagsInput;
 };
 /** Root mutation type */
+export type MutationReplayBillingWebhookArgs = {
+    logId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationReplyToContactInquiryArgs = {
     id: Scalars['ID']['input'];
     message: Scalars['String']['input'];
@@ -12043,6 +12212,11 @@ export type MutationReserveAssistantAccountBudgetArgs = {
     input: ReserveAssistantBudgetInput;
 };
 /** Root mutation type */
+export type MutationReserveAvatarMinutesArgs = {
+    input: ReserveAvatarMinutesInput;
+    signature: AvatarMinutesSignature;
+};
+/** Root mutation type */
 export type MutationResetCircuitBreakerArgs = {
     scope: Scalars['String']['input'];
     scopeValue: Scalars['String']['input'];
@@ -12276,6 +12450,7 @@ export type MutationRunChannelHealthCheckArgs = {
 export type MutationRunDsarRequestForSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
     mode: DsarMode;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -12373,6 +12548,10 @@ export type MutationServiceSyncPayoutStatusArgs = {
     input: ServiceSyncPayoutStatusInput;
 };
 /** Root mutation type */
+export type MutationServiceUpsertExternalListingArgs = {
+    input: ServiceUpsertExternalListingInput;
+};
+/** Root mutation type */
 export type MutationSetAgentAwayArgs = {
     message?: InputMaybe<Scalars['String']['input']>;
 };
@@ -12560,10 +12739,12 @@ export type MutationSubscribeToStoreArgs = {
 /** Root mutation type */
 export type MutationSupportEraseSubjectArgs = {
     dryRun?: InputMaybe<Scalars['Boolean']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
 export type MutationSupportExportSubjectArgs = {
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
@@ -12607,6 +12788,10 @@ export type MutationSyncTourStepsArgs = {
     tourId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationSyncWorkspaceDeletionFromWspaceArgs = {
+    workspaceId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationSyncWorkspaceFromWspaceArgs = {
     input: SyncWorkspaceFromWspaceInput;
 };
@@ -14157,6 +14342,14 @@ export type NotificationReadFilterInput = {
     type?: InputMaybe<NotificationType>;
     userId: Scalars['ID']['input'];
 };
+/** Sender-owned processing status only; provider acknowledgement is not delivery certification. */
+export type NotificationSendStatus = {
+    __typename?: 'NotificationSendStatus';
+    deliveryStatus?: Maybe<NotificationDeliveryStatus>;
+    id: Scalars['ID']['output'];
+    status: NotificationStatus;
+    triggerStatus: TriggerStatus;
+};
 export type NotificationStats = {
     __typename?: 'NotificationStats';
     byChannel: Scalars['JSON']['output'];
@@ -14654,6 +14847,41 @@ export type OrganizationMemberList = {
     offset: Scalars['Int']['output'];
     total: Scalars['Int']['output'];
 };
+/** A workspace-private custom node of a workspace's organization (BOFF-9766). */
+export type OrganizationPrivateNode = {
+    __typename?: 'OrganizationPrivateNode';
+    applicationId: Scalars['ID']['output'];
+    iconUrl?: Maybe<Scalars['String']['output']>;
+    /** This workspace's active installation. Pass it to uninstallApp to remove the node. */
+    installationId?: Maybe<Scalars['ID']['output']>;
+    /** True when this workspace has an active installation of the node. */
+    installed: Scalars['Boolean']['output'];
+    /** The version this workspace has installed, when installed. */
+    installedVersion?: Maybe<Scalars['String']['output']>;
+    name: Scalars['String']['output'];
+    /** Workflow node type from the version's manifest, e.g. custom/word_counter. */
+    nodeType?: Maybe<Scalars['String']['output']>;
+    nodeVersion?: Maybe<Scalars['String']['output']>;
+    publishedAt?: Maybe<Scalars['DateTime']['output']>;
+    shortDescription?: Maybe<Scalars['String']['output']>;
+    slug: Scalars['String']['output'];
+    /** Installed, and the organization has since published a newer version. */
+    updateAvailable: Scalars['Boolean']['output'];
+    /** Latest version published to the organization. Pass it to installApp. */
+    version: Scalars['String']['output'];
+    /** Id of the latest version published to the organization. */
+    versionId: Scalars['ID']['output'];
+};
+/** The private custom nodes a workspace's organization has published, as seen from one workspace (BOFF-9766). */
+export type OrganizationPrivateNodeListing = {
+    __typename?: 'OrganizationPrivateNodeListing';
+    /** True when the caller administers the workspace and so may install or uninstall. */
+    canManage: Scalars['Boolean']['output'];
+    nodes: Array<OrganizationPrivateNode>;
+    /** Organization the workspace belongs to; null when the caller is not a member or the workspace has no organization. */
+    organizationId?: Maybe<Scalars['ID']['output']>;
+    workspaceId: Scalars['ID']['output'];
+};
 export type OrganizationScheduleQuotas = {
     __typename?: 'OrganizationScheduleQuotas';
     currentActiveSchedules: Scalars['Int']['output'];
@@ -16136,6 +16364,8 @@ export type Query = {
     agentProfile?: Maybe<AgentProfile>;
     agentProfileByUserId?: Maybe<AgentProfile>;
     agentProfiles: AgentProfileConnection;
+    /** Schema capability for optional cache counts. Older callers keep input/output-only pricing. */
+    aiCacheTokenPricingSupported: Scalars['Boolean']['output'];
     /** Active per-model LLM token prices (USD per 1M tokens) used for AI-credit weighting. */
     aiModelPrices: Array<AiModelPrice>;
     /** Admin query: list all organizations in the platform (optionally filtered). Requires global 'organization:read' permission — super admins and platform admins only. For end-user "my orgs" access use myOrganizations instead. */
@@ -16185,6 +16415,8 @@ export type Query = {
     availableAuthMethods: Array<AuthMethod>;
     /** Get available preview features the user can opt-in to within a workspace. Returns only flags that are previewable, active, and allowed by workspace admin. When `productSlug` is provided (each product app shell passes its own slug), the result is scoped to that product's previewable flags PLUS platform-wide previewable flags — so a product's Feature Previews page never surfaces other products' flags. Omit `productSlug` to get every available preview. Bounded by limit/offset to avoid unbounded fetches. */
     availableFeaturePreviews: Array<FeatureFlag>;
+    /** Signed (DESIGN 3.7). The workspace's balance, in the person's view when actorId is given. */
+    avatarMinutesForService: AvatarMinutesBalance;
     bounceStats: BounceStats;
     /** Browse store products with unified filtering, sorting, and pagination. Search is treated as a filter - all filters combine with AND logic. Example usage: ```graphql query { browseStore(input: { filter: { search: "ai notification" type: NODE pricingModel: FREE minRating: 4.0 compatibleWith: "workspaces" } sortBy: RELEVANCE pagination: { limit: 20, offset: 0 } }) { products { id name rating downloads } totalCount hasMore facets { categories { value count } } } } ``` */
     browseStore: BrowseStoreResult;
@@ -16570,6 +16802,8 @@ export type Query = {
     /** Public listing of an application's installable versions (published or deprecated only — draft/pending_review/rejected versions are never returned here, to avoid exposing unreviewed versions). Used by the Store to let buyers pick a specific version at install time, and by global-store-svc (service actor) to resolve a chosen version's manifest when installing. */
     installableApplicationVersions: Array<ApplicationVersion>;
     installationPermissions?: Maybe<Scalars['JSON']['output']>;
+    /** Runtime routing metadata for an active node installation in the gateway-authenticated workspace. Candidate node types are ordered, with the requested spelling before compatibility aliases. Legacy installation versions are not treated as node runtime versions. */
+    installedStoreNodeRuntime?: Maybe<StoreInstalledNodeRuntime>;
     /** Get a single interview round by ID (admin). */
     interviewRound?: Maybe<InterviewRound>;
     /** Get a single interviewer by ID (admin). */
@@ -16663,6 +16897,8 @@ export type Query = {
     myNotificationCountsByApp: Scalars['JSON']['output'];
     /** Get notification counts by channel for authenticated user */
     myNotificationCountsByChannel: NotificationChannelCounts;
+    /** Status of a notification created by the authenticated sender in the current tenant. */
+    myNotificationSendStatus: NotificationSendStatus;
     /** Get all orders for the authenticated user */
     myOrders: Array<StoreOrder>;
     /** Get a SINGLE invite addressed to the current authenticated user, by id. Backs the per-invite acceptance page reached from the invite email link. Self-scoped: the resolver only returns an invite addressed to the caller's own email (or already resolved to their userId); otherwise it returns NOT_FOUND (existence of another account's invite is never revealed). */
@@ -16780,6 +17016,8 @@ export type Query = {
     organizationMembers: OrganizationMemberList;
     /** M2M lookup for global-store-svc's shipping-cost quote pipeline: the org's active pickup postal code — the default DeveloperOrgPickupAddress's postalCode, falling back to the legacy pickupPostalCode scalar for orgs that set one before DeveloperOrgPickupAddress existed, then null (caller falls back to the linked billing account's address, then a platform-wide default). */
     organizationPickupPostalCode?: Maybe<Scalars['String']['output']>;
+    /** The workspace-private custom nodes of a workspace's organization (BOFF-9766): every PRIVATE NODE application bound to the organization the workspace belongs to, with its latest version published to that organization and whether this workspace has it installed. Feeds the "Your organization" section of the FluidGrids Node Store, where a workspace admin installs or updates one with `installApp` and removes it with `uninstallApp`. Self-scoped (Type B): the gateway only authenticates the caller. The resolver lists nothing unless the caller is a member of `workspaceId`, and it only ever lists applications bound to that workspace's own organization, so a workspace of another organization sees none of them. */
+    organizationPrivateNodes: OrganizationPrivateNodeListing;
     organizationScheduleQuotas: OrganizationScheduleQuotas;
     payoutRunHistory: Array<PayoutRunLog>;
     pendingDeveloperOrganizationVerifications: DeveloperOrganizationConnection;
@@ -17046,6 +17284,10 @@ export type Query = {
     webhook?: Maybe<Webhook>;
     webhookDeliveries: WebhookDeliveryConnection;
     webhookDelivery?: Maybe<WebhookDelivery>;
+    /** Every webhook event type currently deliverable, for the webhook event picker. Optionally narrowed to one product. */
+    webhookEventCatalog: Array<WebhookEventCatalogEntry>;
+    /** Registered subject mappings. Platform services and super admins only. */
+    webhookEventSubjects: Array<WebhookEventSubject>;
     webhooks: Array<Webhook>;
     /** Get a single workspace by ID */
     workspace?: Maybe<Workspace>;
@@ -17348,6 +17590,13 @@ export type QueryAvailableFeaturePreviewsArgs = {
     workspaceId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryAvatarMinutesForServiceArgs = {
+    actorId?: InputMaybe<Scalars['ID']['input']>;
+    productId: Scalars['String']['input'];
+    signature: AvatarMinutesSignature;
+    workspaceId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryBounceStatsArgs = {
     campaignId: Scalars['ID']['input'];
 };
@@ -18413,6 +18662,11 @@ export type QueryInstallationPermissionsArgs = {
     installationId: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryInstalledStoreNodeRuntimeArgs = {
+    nodeTypes: Array<Scalars['String']['input']>;
+    nodeVersion?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root query type */
 export type QueryInterviewRoundArgs = {
     id: Scalars['ID']['input'];
 };
@@ -18659,6 +18913,10 @@ export type QueryMyEntitlementsArgs = {
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QueryMyNotificationSendStatusArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryMyOrdersArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -18971,6 +19229,10 @@ export type QueryOrganizationPickupPostalCodeArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryOrganizationPrivateNodesArgs = {
+    workspaceId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryPendingDeveloperOrganizationVerificationsArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -19200,6 +19462,8 @@ export type QueryPushDevicesForUserInternalArgs = {
 };
 /** Root query type */
 export type QueryQuoteAiCreditsArgs = {
+    cacheReadTokens?: InputMaybe<Scalars['Int']['input']>;
+    cacheWriteTokens?: InputMaybe<Scalars['Int']['input']>;
     inputTokens: Scalars['Int']['input'];
     model: Scalars['String']['input'];
     outputTokens: Scalars['Int']['input'];
@@ -19783,6 +20047,15 @@ export type QueryWebhookDeliveryArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryWebhookEventCatalogArgs = {
+    productSlug?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root query type */
+export type QueryWebhookEventSubjectsArgs = {
+    includeInactive?: InputMaybe<Scalars['Boolean']['input']>;
+    productSlug?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root query type */
 export type QueryWebhooksArgs = {
     applicationId: Scalars['ID']['input'];
 };
@@ -20256,6 +20529,15 @@ export type RecordExploreClickResult = {
     __typename?: 'RecordExploreClickResult';
     recorded: Scalars['Boolean']['output'];
 };
+export type RecordExternalRefundInput = {
+    amount: Scalars['Float']['input'];
+    chargeId: Scalars['ID']['input'];
+    currency: Scalars['String']['input'];
+    externalRef: Scalars['String']['input'];
+    orgId: Scalars['ID']['input'];
+    reason?: InputMaybe<Scalars['String']['input']>;
+    workspaceId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type RecordExternalSettlementInput = {
     /** Settlement amount in whole currency units (must be > 0). */
     amount: Scalars['Float']['input'];
@@ -20587,6 +20869,12 @@ export type RegisterSupportAttachmentPartInput = {
     sessionId: Scalars['ID']['input'];
     ticketId: Scalars['ID']['input'];
 };
+export type RegisterWebhookEventSubjectsInput = {
+    /** Product slug that owns the subjects (e.g. `vibecontrols`, `fluidgrids`). */
+    productSlug: Scalars['String']['input'];
+    /** Mappings to create or update (at most 100 per call). */
+    subjects: Array<WebhookEventSubjectInput>;
+};
 export type RejectWaitlistInput = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -20685,6 +20973,17 @@ export type ReserveAssistantBudgetInput = {
     outputTokens: Scalars['Int']['input'];
     workspaceId: Scalars['ID']['input'];
 };
+export type ReserveAvatarMinutesInput = {
+    actorId: Scalars['ID']['input'];
+    mode: AvatarMinutesMode;
+    productId: Scalars['String']['input'];
+    /** 1 to 60; billing reserves min(available, requested, AVATAR_MINUTES_MAX_PER_SESSION). */
+    requestedMinutes: Scalars['Int']['input'];
+    sessionId: Scalars['ID']['input'];
+    supersedesSessionId?: InputMaybe<Scalars['ID']['input']>;
+    surface: Scalars['String']['input'];
+    workspaceId: Scalars['ID']['input'];
+};
 /** Input for resolving (or creating) the default billing account for a user/org. At least one of `orgId` or `ownerUserId` MUST be supplied: - `orgId` present → resolve-or-create the org's default billing account. - `ownerUserId` only → resolve an EXISTING billing account already associated with that user's earnings/payout accounts. Creation requires an `orgId` anchor because a billing account is always org-scoped. */
 export type ResolveBillingAccountInput = {
     /** Opaque org id that anchors the billing account. When present the org's default billing account is resolved-or-created. */
@@ -21569,6 +21868,31 @@ export type ServiceSyncPayoutStatusInput = {
     /** The billing PayoutRequestStatus after the change (e.g. APPROVED, REJECTED, PAID, FAILED). */
     status: Scalars['String']['input'];
 };
+/** Input for serviceUpsertExternalListing (BOFF-3430). */
+export type ServiceUpsertExternalListingInput = {
+    /** Brand or maker shown on the listing. */
+    brand?: InputMaybe<Scalars['String']['input']>;
+    category?: InputMaybe<Scalars['String']['input']>;
+    /** ISO 4217 currency code, upper case. */
+    currency: Scalars['String']['input'];
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** The item's id in the calling service. Together with the caller's service identity it identifies the listing. */
+    externalId: Scalars['String']['input'];
+    /** Absolute https URL of the item's page in the owning product. */
+    externalUrl: Scalars['String']['input'];
+    metadata?: InputMaybe<Scalars['JSON']['input']>;
+    name: Scalars['String']['input'];
+    price: Scalars['Float']['input'];
+    /** Platform product key of the caller (for example "coolandlovely"). Used as the listing's compatible product and as its slug prefix. */
+    productKey: Scalars['String']['input'];
+    /** Display name for the caller's publisher profile, created on its first listing. */
+    publisherName: Scalars['String']['input'];
+    /** PUBLISHED (shown in discovery), UNLISTED (kept but hidden) or ARCHIVED (taken down). */
+    status: ProductStatus;
+    tags?: InputMaybe<Array<Scalars['String']['input']>>;
+    /** A physical product type (MERCHANDISE, HARDWARE, ACCESSORY, BOOK, EQUIPMENT, APPAREL, COLLECTIBLE or CONSUMABLE). */
+    type: ProductType;
+};
 /** An active user session (login instance) */
 export type Session = {
     __typename?: 'Session';
@@ -22136,6 +22460,12 @@ export declare enum StoreInstallationStatus {
     Pending = "PENDING",
     Uninstalled = "UNINSTALLED"
 }
+export type StoreInstalledNodeRuntime = {
+    __typename?: 'StoreInstalledNodeRuntime';
+    endpointUrl: Scalars['String']['output'];
+    nodeType: Scalars['String']['output'];
+    nodeVersion?: Maybe<Scalars['String']['output']>;
+};
 /** StoreItem entity reference. The actual StoreItem is defined in the Store service. In Federation 2 setup, this will be marked with @key directive. For now, this is a reference type that returns the itemId for the Gateway to resolve. */
 export type StoreItem = {
     __typename?: 'StoreItem';
@@ -22267,6 +22597,12 @@ export type StoreProduct = {
     documentationUrl?: Maybe<Scalars['String']['output']>;
     downloads: Scalars['Int']['output'];
     entitlements: Array<ProductEntitlement>;
+    /** The item's id in the owning product backend (only set with externalService). */
+    externalId?: Maybe<Scalars['String']['output']>;
+    /** Service identity of the product backend that owns this listing when the item is sold by that product's own checkout (for example wspace-coolandlovely-svc). Null for products the store sells itself. Such a listing cannot be added to a store cart or ordered here; send buyers to externalUrl instead. */
+    externalService?: Maybe<Scalars['String']['output']>;
+    /** Page in the owning product where the item can be viewed and bought (only set with externalService). */
+    externalUrl?: Maybe<Scalars['String']['output']>;
     featured: Scalars['Boolean']['output'];
     /** Product height (physical products) */
     height?: Maybe<Scalars['Float']['output']>;
@@ -24500,6 +24836,8 @@ export type UpdateContentPageInput = {
     visibility?: InputMaybe<ContentVisibility>;
 };
 export type UpdateCouponInput = {
+    applicableEntityTypes?: InputMaybe<Array<CouponEntityType>>;
+    applicableProductIds?: InputMaybe<Array<Scalars['String']['input']>>;
     description?: InputMaybe<Scalars['String']['input']>;
     maxTotalUses?: InputMaybe<Scalars['Int']['input']>;
     maxUsesPerUser?: InputMaybe<Scalars['Int']['input']>;
@@ -26120,6 +26458,16 @@ export type WebhookEvent = {
     /** Last update timestamp */
     updatedAt: Scalars['DateTime']['output'];
 };
+/** A webhook event type a developer application can subscribe a webhook to. */
+export type WebhookEventCatalogEntry = {
+    __typename?: 'WebhookEventCatalogEntry';
+    description?: Maybe<Scalars['String']['output']>;
+    /** Event type, sent as the X-Event-Type header and the payload `event` field. */
+    eventType: Scalars['String']['output'];
+    /** Product that emits the event (`devportal` for portal lifecycle events). */
+    productSlug: Scalars['String']['output'];
+    source: WebhookEventSource;
+};
 /** Paginated list of webhook events with cursor support. Pass `nextCursor` from a previous response as `cursor` in the next call. */
 export type WebhookEventList = {
     __typename?: 'WebhookEventList';
@@ -26128,6 +26476,33 @@ export type WebhookEventList = {
     nextCursor?: Maybe<Scalars['String']['output']>;
     total: Scalars['Int']['output'];
 };
+/** Where a webhook event type originates. */
+export declare enum WebhookEventSource {
+    /** Fired by the developer portal itself (application and installation lifecycle). */
+    Devportal = "DEVPORTAL",
+    /** Fired from a workspace entity change, through a registered subject mapping. */
+    Workspace = "WORKSPACE"
+}
+/** Maps a workspace graph-event subject to the webhook event type it fires. */
+export type WebhookEventSubject = {
+    __typename?: 'WebhookEventSubject';
+    createdAt: Scalars['DateTime']['output'];
+    description?: Maybe<Scalars['String']['output']>;
+    eventType: Scalars['String']['output'];
+    id: Scalars['ID']['output'];
+    isActive: Scalars['Boolean']['output'];
+    productSlug: Scalars['String']['output'];
+    /** Graph-event subject, `graph.<module>.<Entity>.<action>`. */
+    subject: Scalars['String']['output'];
+    updatedAt: Scalars['DateTime']['output'];
+};
+export type WebhookEventSubjectInput = {
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Dotted lower-case event type, e.g. `vibe.created`. The `application.` and `installation.` namespaces are reserved for the developer portal. */
+    eventType: Scalars['String']['input'];
+    /** Graph-event subject, `graph.<module>.<Entity>.<action>`. */
+    subject: Scalars['String']['input'];
+};
 /** Webhook processing result */
 export type WebhookProcessingResult = {
     __typename?: 'WebhookProcessingResult';