@burdenoff/microfe-store 2026.915.2 → 2026.916.2

package/dist/generated/global-types.d.ts

@@ -151,6 +151,14 @@ export type ActivateSubscriptionForWorkspaceResult = {
     skippedQuotas: Scalars['Int']['output'];
     workspaceId: Scalars['ID']['output'];
 };
+/** Result of activating a subscription's workspace-scoped quotas against multiple workspaces at once. */
+export type ActivateSubscriptionForWorkspacesResult = {
+    __typename?: 'ActivateSubscriptionForWorkspacesResult';
+    /** Every workspace now activated for this subscription (including ones activated by an earlier call) — the full, authoritative set. */
+    activatedWorkspaceIds: Array<Scalars['ID']['output']>;
+    results: Array<WorkspaceActivationOutcome>;
+    subscriptionId: Scalars['ID']['output'];
+};
 export declare enum ActivityAction {
     Create = "CREATE",
     Delete = "DELETE",
@@ -929,6 +937,8 @@ export type AppRevenueSummary = {
     __typename?: 'AppRevenueSummary';
     applicationId: Scalars['ID']['output'];
     applicationName: Scalars['String']['output'];
+    /** Same currency as the parent RevenueSummary — see its doc comment. */
+    currency: Scalars['String']['output'];
     grossRevenue: Scalars['Float']['output'];
     netRevenue: Scalars['Float']['output'];
     salesCount: Scalars['Int']['output'];
@@ -1694,8 +1704,17 @@ export type BillingOrder = {
     /** Tax is calculated at payment time and stored in Transaction/Payment, not BillingOrder. Tax info can be found in metadata.paymentTaxAmount, metadata.paymentTaxRate, metadata.paymentTotal */
     metadata?: Maybe<Scalars['JSON']['output']>;
     orgId: Scalars['String']['output'];
+    /** The Payment/Transaction this order was paid with, once payment completes — cross-reference into the payment record while debugging a stuck callback. */
+    paymentId?: Maybe<Scalars['String']['output']>;
     status: BillingOrderStatus;
     subtotal: Scalars['Float']['output'];
+    transactionId?: Maybe<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+};
+export type BillingOrderCallbacksPage = {
+    __typename?: 'BillingOrderCallbacksPage';
+    orders: Array<BillingOrder>;
+    totalCount: Scalars['Int']['output'];
 };
 export type BillingOrderItemInput = {
     description?: InputMaybe<Scalars['String']['input']>;
@@ -1725,6 +1744,8 @@ export type BillingPaginationInput = {
 };
 export type BillingSubscription = {
     __typename?: 'BillingSubscription';
+    /** Every workspace this subscription has been activated against (each got the full per-workspace quota allotment from the plan). Bounded by plan.maxWorkspaces. Empty if never activated. */
+    activatedWorkspaceIds: Array<Scalars['ID']['output']>;
     addonSubscriptions: Array<AddonSubscription>;
     assignedWorkspaceId?: Maybe<Scalars['ID']['output']>;
     autoRenewal?: Maybe<Scalars['Boolean']['output']>;
@@ -1769,6 +1790,12 @@ export type BillingWebhookLog = {
     processed: Scalars['Boolean']['output'];
     provider: Scalars['String']['output'];
 };
+/** Paginated page of BillingWebhookLog rows, for the admin webhook-log viewer — unlike getUnprocessedFailedWebhooks, not restricted to the payment-succeeded event types eligible for refund creation. */
+export type BillingWebhookLogsPage = {
+    __typename?: 'BillingWebhookLogsPage';
+    logs: Array<BillingWebhookLog>;
+    totalCount: Scalars['Int']['output'];
+};
 export type BounceStats = {
     __typename?: 'BounceStats';
     bounceRate: Scalars['Float']['output'];
@@ -1837,6 +1864,18 @@ export type BulkChannelDeliveryResult = {
     /** Total number of recipients in the batch */
     totalCount: Scalars['Int']['output'];
 };
+/** An application that failed during the bulk custom-email mutation. */
+export type BulkCustomEmailFailed = {
+    __typename?: 'BulkCustomEmailFailed';
+    applicationId: Scalars['ID']['output'];
+    message: Scalars['String']['output'];
+};
+/** Outcome of bulkSendCustomEmail — every requested application lands in exactly one bucket. */
+export type BulkCustomEmailResult = {
+    __typename?: 'BulkCustomEmailResult';
+    failed: Array<BulkCustomEmailFailed>;
+    succeeded: Array<JobApplication>;
+};
 /** A requested application that cannot receive the configured interview round. */
 export type BulkEnsureInterviewRoundFailed = {
     __typename?: 'BulkEnsureInterviewRoundFailed';
@@ -1896,6 +1935,14 @@ export type BulkRoundMessageItemInput = {
     applicationId: Scalars['ID']['input'];
     roundId: Scalars['ID']['input'];
 };
+export type BulkSendCustomEmailInput = {
+    /** Between 1 and 100 unique application IDs, from any status or round — not scoped to a shared interview round. */
+    applicationIds: Array<Scalars['ID']['input']>;
+    /** Rich-text HTML message body from the admin's editor; sanitized to an allowlist before it reaches the email. */
+    message: Scalars['String']['input'];
+    /** Email subject — sent as the actual email Subject line only, never repeated in the body. */
+    subject: Scalars['String']['input'];
+};
 /** A candidate/round that failed during a bulk-send mutation. */
 export type BulkSendFailed = {
     __typename?: 'BulkSendFailed';
@@ -1920,6 +1967,7 @@ export type BulkSendRoundMessageInput = {
 export declare enum BulkSendSkipReason {
     AlreadySent = "ALREADY_SENT",
     NotAssignmentRound = "NOT_ASSIGNMENT_ROUND",
+    NotDuplicate = "NOT_DUPLICATE",
     NoActiveAssignments = "NO_ACTIVE_ASSIGNMENTS"
 }
 /** A candidate/round skipped by a bulk-send mutation, with why. */
@@ -1941,6 +1989,23 @@ export type BulkTranslationInput = {
     pluralForms?: InputMaybe<Scalars['JSON']['input']>;
     value: Scalars['String']['input'];
 };
+/** A requested application ID that could not have its status updated. */
+export type BulkUpdateApplicationStatusFailed = {
+    __typename?: 'BulkUpdateApplicationStatusFailed';
+    applicationId: Scalars['ID']['output'];
+    message: Scalars['String']['output'];
+};
+export type BulkUpdateApplicationStatusInput = {
+    /** Between 1 and 100 unique application IDs, from any status or round. */
+    applicationIds: Array<Scalars['ID']['input']>;
+    status: JobApplicationStatus;
+};
+/** Outcome of bulkUpdateApplicationStatus — every requested ID lands in exactly one bucket. */
+export type BulkUpdateApplicationStatusResult = {
+    __typename?: 'BulkUpdateApplicationStatusResult';
+    failed: Array<BulkUpdateApplicationStatusFailed>;
+    succeeded: Array<JobApplication>;
+};
 /** Input for tax calculation preview */
 export type CalculateTaxInput = {
     /** Amount in USD (base currency) */
@@ -1974,6 +2039,8 @@ export type CandidateEmailLog = {
 };
 export declare enum CandidateEmailType {
     Assignment = "ASSIGNMENT",
+    BulkCustom = "BULK_CUSTOM",
+    DuplicateAssignmentNotice = "DUPLICATE_ASSIGNMENT_NOTICE",
     Reply = "REPLY",
     RoundMessage = "ROUND_MESSAGE"
 }
@@ -2005,6 +2072,14 @@ export type CannedResponseFilterInput = {
     isActive?: InputMaybe<Scalars['Boolean']['input']>;
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
 };
+/** One of a shipping carrier's own registered pickup/warehouse addresses (see carrierPickupLocations query). Not organization-scoped — a pickup location belongs to whichever carrier account it's registered with (e.g. Shiprocket today; more carriers may be added later), since a store's ShippingMethods can each use a different carrier. */
+export type CarrierPickupLocation = {
+    __typename?: 'CarrierPickupLocation';
+    /** Which carrier this pickup address is registered with (matches ShippingMethod.carrier, e.g. "shiprocket"). */
+    carrier: Scalars['String']['output'];
+    label: Scalars['String']['output'];
+    postalCode: Scalars['String']['output'];
+};
 /** Shopping cart for collecting products before checkout */
 export type Cart = {
     __typename?: 'Cart';
@@ -2856,6 +2931,12 @@ export type ConfigureWorkspaceInput = {
     endpoint?: InputMaybe<Scalars['String']['input']>;
     region?: InputMaybe<Scalars['String']['input']>;
 };
+/** Presence and assignment state of one exact configured interview round. */
+export declare enum ConfiguredRoundState {
+    Assigned = "ASSIGNED",
+    Missing = "MISSING",
+    Unassigned = "UNASSIGNED"
+}
 /** Real-time health status of a channel's connection. Monitored by the system based on API calls and health checks. - `status` = Admin-controlled (ACTIVE, INACTIVE, ARCHIVED) - `connectionHealth` = System-monitored (HEALTHY, DEGRADED, UNHEALTHY) Example: Channel status = ACTIVE but connectionHealth = UNHEALTHY means admin enabled the channel but the API is down. */
 export declare enum ConnectionHealth {
     /** Partial failures, high latency, or rate limiting */
@@ -2912,6 +2993,56 @@ export type ConnectionTestResult = {
     /** Whether the test succeeded */
     success: Scalars['Boolean']['output'];
 };
+export type ConsentLedgerFilter = {
+    purpose?: InputMaybe<ConsentPurpose>;
+    status?: InputMaybe<ConsentStatus>;
+    subjectId?: InputMaybe<Scalars['ID']['input']>;
+    subjectType?: InputMaybe<Scalars['String']['input']>;
+    workspaceId?: InputMaybe<Scalars['ID']['input']>;
+};
+export declare enum ConsentPurpose {
+    AiTraining = "AI_TRAINING",
+    Analytics = "ANALYTICS",
+    CookiesAnalytics = "COOKIES_ANALYTICS",
+    CookiesFunctional = "COOKIES_FUNCTIONAL",
+    CookiesMarketing = "COOKIES_MARKETING",
+    Marketing = "MARKETING",
+    ProductUpdates = "PRODUCT_UPDATES",
+    Profiling = "PROFILING",
+    ThirdPartySharing = "THIRD_PARTY_SHARING",
+    Transactional = "TRANSACTIONAL"
+}
+export type ConsentRecord = {
+    __typename?: 'ConsentRecord';
+    createdAt: Scalars['DateTime']['output'];
+    expiresAt?: Maybe<Scalars['DateTime']['output']>;
+    grantedAt?: Maybe<Scalars['DateTime']['output']>;
+    id: Scalars['ID']['output'];
+    lawfulBasis: LawfulBasis;
+    policyVersion: Scalars['String']['output'];
+    proofPayload?: Maybe<Scalars['JSON']['output']>;
+    purpose: ConsentPurpose;
+    source: Scalars['String']['output'];
+    status: ConsentStatus;
+    subjectId: Scalars['ID']['output'];
+    subjectType: Scalars['String']['output'];
+    tenantId?: Maybe<Scalars['ID']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    withdrawnAt?: Maybe<Scalars['DateTime']['output']>;
+    workspaceId?: Maybe<Scalars['ID']['output']>;
+};
+export type ConsentRecordConnection = {
+    __typename?: 'ConsentRecordConnection';
+    hasMore: Scalars['Boolean']['output'];
+    nodes: Array<ConsentRecord>;
+    total: Scalars['Int']['output'];
+};
+export declare enum ConsentStatus {
+    Expired = "EXPIRED",
+    Granted = "GRANTED",
+    Pending = "PENDING",
+    Withdrawn = "WITHDRAWN"
+}
 /** A contact inquiry submitted via a product website contact form. */
 export type ContactInquiry = {
     __typename?: 'ContactInquiry';
@@ -3359,6 +3490,8 @@ export type CreateDeveloperOrganizationInput = {
     logoUrl?: InputMaybe<Scalars['String']['input']>;
     metadata?: InputMaybe<Scalars['JSON']['input']>;
     name: Scalars['String']['input'];
+    /** Optional at creation — dedicated pickup pincode for carrier rate quoting on physical-goods orders (Shiprocket, etc). Only meaningful for createSellerOrganization (PHYSICAL orgs); ignored for DIGITAL orgs. Can always be added or changed later from organization settings. */
+    pickupPostalCode?: InputMaybe<Scalars['String']['input']>;
     slug?: InputMaybe<Scalars['String']['input']>;
     supportEmail?: InputMaybe<Scalars['String']['input']>;
     websiteUrl?: InputMaybe<Scalars['String']['input']>;
@@ -3710,13 +3843,15 @@ export type CreatePermissionOverrideInput = {
 };
 export type CreatePhysicalProductInput = {
     allowBackorder?: InputMaybe<Scalars['Boolean']['input']>;
+    bannerUrl?: InputMaybe<Scalars['String']['input']>;
     brand?: InputMaybe<Scalars['String']['input']>;
     category?: InputMaybe<Scalars['String']['input']>;
+    /** Which platform products this listing is relevant to (e.g. "healthybowl"). Set by the calling seller-portal shell — see DeveloperOrgKind (BOFF-7285). */
+    compatibleProducts?: InputMaybe<Array<Scalars['String']['input']>>;
     countryOfOrigin?: InputMaybe<Scalars['String']['input']>;
     currency?: InputMaybe<Scalars['String']['input']>;
     description?: InputMaybe<Scalars['String']['input']>;
     dimensionUnit?: InputMaybe<DimensionUnit>;
-    expiryDate?: InputMaybe<Scalars['DateTime']['input']>;
     height?: InputMaybe<Scalars['Float']['input']>;
     icon?: InputMaybe<Scalars['String']['input']>;
     length?: InputMaybe<Scalars['Float']['input']>;
@@ -3725,6 +3860,7 @@ export type CreatePhysicalProductInput = {
     manufacturer?: InputMaybe<Scalars['String']['input']>;
     metadata?: InputMaybe<Scalars['JSON']['input']>;
     name: Scalars['String']['input'];
+    organizationId: Scalars['ID']['input'];
     price: Scalars['Float']['input'];
     requiresShipping?: InputMaybe<Scalars['Boolean']['input']>;
     returnPolicy?: InputMaybe<Scalars['String']['input']>;
@@ -3735,7 +3871,6 @@ export type CreatePhysicalProductInput = {
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
     trackInventory?: InputMaybe<Scalars['Boolean']['input']>;
     type: ProductType;
-    unitOfMeasure?: InputMaybe<Scalars['String']['input']>;
     warrantyInfo?: InputMaybe<Scalars['String']['input']>;
     weight?: InputMaybe<Scalars['Float']['input']>;
     weightUnit?: InputMaybe<WeightUnit>;
@@ -4130,8 +4265,11 @@ export type CreateStoreOrderInput = {
     lineItems: Array<StoreLineItemInput>;
     /** Additional metadata */
     metadata?: InputMaybe<Scalars['JSON']['input']>;
-    /** Total product cost (sum of all line items) Note: Currency, tax, and final billing amount calculated by billing service */
-    total: Scalars['Float']['input'];
+    /**
+     * Deprecated client total. The server calculates the total from catalog data.
+     * @deprecated The server calculates the order total
+     */
+    total?: InputMaybe<Scalars['Float']['input']>;
 };
 export type CreateSubscriptionInput = {
     amount: Scalars['Float']['input'];
@@ -4511,6 +4649,62 @@ export declare enum DlqStatus {
     Pending = "PENDING",
     Resolved = "RESOLVED"
 }
+export type DsarFilter = {
+    status?: InputMaybe<DsarStatus>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
+    subjectId?: InputMaybe<Scalars['ID']['input']>;
+    type?: InputMaybe<DsarType>;
+};
+export type DsarRequest = {
+    __typename?: 'DSARRequest';
+    completedAt?: Maybe<Scalars['DateTime']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    dueAt: Scalars['DateTime']['output'];
+    fanoutState?: Maybe<Scalars['JSON']['output']>;
+    id: Scalars['ID']['output'];
+    identityProof?: Maybe<Scalars['JSON']['output']>;
+    identityVerifiedAt?: Maybe<Scalars['DateTime']['output']>;
+    legalHoldFlag: Scalars['Boolean']['output'];
+    notes?: Maybe<Scalars['String']['output']>;
+    receivedAt: Scalars['DateTime']['output'];
+    rejectionReason?: Maybe<Scalars['String']['output']>;
+    requestedBy?: Maybe<Scalars['ID']['output']>;
+    resultArtifactHash?: Maybe<Scalars['String']['output']>;
+    resultArtifactUrl?: Maybe<Scalars['String']['output']>;
+    source: Scalars['String']['output'];
+    status: DsarStatus;
+    subjectEmail: Scalars['String']['output'];
+    subjectId: Scalars['ID']['output'];
+    type: DsarType;
+    updatedAt: Scalars['DateTime']['output'];
+    workflowId?: Maybe<Scalars['String']['output']>;
+    workflowRunId?: Maybe<Scalars['String']['output']>;
+};
+export type DsarRequestConnection = {
+    __typename?: 'DSARRequestConnection';
+    hasMore: Scalars['Boolean']['output'];
+    nodes: Array<DsarRequest>;
+    total: Scalars['Int']['output'];
+};
+export declare enum DsarStatus {
+    AwaitingSubjectInput = "AWAITING_SUBJECT_INPUT",
+    Cancelled = "CANCELLED",
+    Completed = "COMPLETED",
+    IdentityVerificationPending = "IDENTITY_VERIFICATION_PENDING",
+    IdentityVerified = "IDENTITY_VERIFIED",
+    InProgress = "IN_PROGRESS",
+    OnHoldLegal = "ON_HOLD_LEGAL",
+    Received = "RECEIVED",
+    Rejected = "REJECTED"
+}
+export declare enum DsarType {
+    Access = "ACCESS",
+    Erasure = "ERASURE",
+    Objection = "OBJECTION",
+    Portability = "PORTABILITY",
+    Rectification = "RECTIFICATION",
+    Restriction = "RESTRICTION"
+}
 export type DailyUsage = {
     __typename?: 'DailyUsage';
     count: Scalars['Int']['output'];
@@ -4734,6 +4928,11 @@ export type DeveloperOrgInvitationEdge = {
     cursor: Scalars['String']['output'];
     node: DeveloperOrgInvitation;
 };
+/** DIGITAL orgs publish Applications to the store; PHYSICAL orgs list physical goods via the seller portal. Not user-selectable — fixed at creation by which flow provisioned the org. See BOFF-7285. */
+export declare enum DeveloperOrgKind {
+    Digital = "DIGITAL",
+    Physical = "PHYSICAL"
+}
 /** Developer Organization Member - represents a member of a dev organization */
 export type DeveloperOrgMember = {
     __typename?: 'DeveloperOrgMember';
@@ -4768,6 +4967,16 @@ export type DeveloperOrgMemberEdge = {
     cursor: Scalars['String']['output'];
     node: DeveloperOrgMember;
 };
+/** One calendar month of aggregated revenue for a developer organization, computed on demand from DeveloperOrgSale (DeveloperOrgRevenueAnalytics is not currently populated by any writer — same fallback rationale as developerOrgRevenueSummary below). Used to render revenue growth trends on the admin revenue detail page. */
+export type DeveloperOrgMonthlyRevenuePoint = {
+    __typename?: 'DeveloperOrgMonthlyRevenuePoint';
+    grossRevenue: Scalars['Float']['output'];
+    month: Scalars['DateTime']['output'];
+    netRevenue: Scalars['Float']['output'];
+    platformFees: Scalars['Float']['output'];
+    refunds: Scalars['Float']['output'];
+    salesCount: Scalars['Int']['output'];
+};
 /** Developer Organization Payment Method - for receiving payouts */
 export type DeveloperOrgPaymentMethod = {
     __typename?: 'DeveloperOrgPaymentMethod';
@@ -4851,6 +5060,27 @@ export type DeveloperOrgPayoutEdge = {
     cursor: Scalars['String']['output'];
     node: DeveloperOrgPayout;
 };
+/** A real, physical pickup/warehouse address an organization has registered with a shipping carrier (e.g. Shiprocket) for physical-order fulfillment. An org can have several; exactly one is isDefault at a time. Created by global-store-svc's registerCarrierPickupLocation after a successful carrier-side registration (see recordDeveloperOrgPickupAddress) — removing a row here only stops us from using that address for this org, it does not reach out to the carrier (carriers like Shiprocket have no delete API). */
+export type DeveloperOrgPickupAddress = {
+    __typename?: 'DeveloperOrgPickupAddress';
+    address: Scalars['String']['output'];
+    addressLine2?: Maybe<Scalars['String']['output']>;
+    carrier: Scalars['String']['output'];
+    carrierLocationLabel: Scalars['String']['output'];
+    city: Scalars['String']['output'];
+    country: Scalars['String']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    email: Scalars['String']['output'];
+    id: Scalars['ID']['output'];
+    isDefault: Scalars['Boolean']['output'];
+    name: Scalars['String']['output'];
+    organization: DeveloperOrganization;
+    organizationId: Scalars['ID']['output'];
+    phone: Scalars['String']['output'];
+    postalCode: Scalars['String']['output'];
+    state: Scalars['String']['output'];
+    updatedAt: Scalars['DateTime']['output'];
+};
 /** Developer Organization Revenue Analytics - aggregated revenue data */
 export type DeveloperOrgRevenueAnalytics = {
     __typename?: 'DeveloperOrgRevenueAnalytics';
@@ -4882,8 +5112,8 @@ export declare enum DeveloperOrgRole {
 /** Developer Organization Sale - tracks a sale of an application */
 export type DeveloperOrgSale = {
     __typename?: 'DeveloperOrgSale';
-    application: Application;
-    applicationId: Scalars['ID']['output'];
+    application?: Maybe<Application>;
+    applicationId?: Maybe<Scalars['ID']['output']>;
     billingCreditSyncError?: Maybe<Scalars['String']['output']>;
     billingCreditSyncStatus: Scalars['String']['output'];
     billingCreditSyncedAt?: Maybe<Scalars['DateTime']['output']>;
@@ -5022,6 +5252,7 @@ export type DeveloperOrganization = {
     invitations: Array<DeveloperOrgInvitation>;
     isCertified: Scalars['Boolean']['output'];
     isVerified: Scalars['Boolean']['output'];
+    kind: DeveloperOrgKind;
     legalAddress?: Maybe<Scalars['JSON']['output']>;
     legalEntityName?: Maybe<Scalars['String']['output']>;
     legalEntityType?: Maybe<Scalars['String']['output']>;
@@ -5035,6 +5266,9 @@ export type DeveloperOrganization = {
     paymentMethods: Array<DeveloperOrgPaymentMethod>;
     payouts: Array<DeveloperOrgPayout>;
     pendingBalance: Scalars['Float']['output'];
+    pickupAddresses: Array<DeveloperOrgPickupAddress>;
+    /** Legacy single pickup pincode, superseded by pickupAddresses (an org can now register several real addresses with a carrier and pick one as active). Kept only as a fallback for orgs that set this before DeveloperOrgPickupAddress existed — see organizationPickupPostalCode. */
+    pickupPostalCode?: Maybe<Scalars['String']['output']>;
     platformFeeRate: Scalars['Float']['output'];
     publishedApps: Scalars['Int']['output'];
     quotaResetAt?: Maybe<Scalars['DateTime']['output']>;
@@ -5106,14 +5340,20 @@ export type DeveloperProfile = {
     verifiedAt?: Maybe<Scalars['DateTime']['output']>;
     website?: Maybe<Scalars['String']['output']>;
 };
-/** A registered push-notification device (APNs/FCM token) belonging to the authenticated user. Powers native push across product Capacitor shells (e.g. new-listing-matches-saved-search alerts, booking reminders). */
+/** A registered push-notification device (APNs/FCM token). The fleet's single device registry: written by every product Capacitor shell on launch and on token refresh, and read by the delivery side (global-channel-svc) when it needs to reach a user. */
 export type DeviceToken = {
     __typename?: 'DeviceToken';
     createdAt: Scalars['DateTime']['output'];
     deviceId: Scalars['String']['output'];
+    /** Firebase project whose credentials can reach `token`. Derived server-side from `productSlug` — never supplied by a client. Null means the row is not push-routable. */
+    fcmProject?: Maybe<Scalars['String']['output']>;
     id: Scalars['ID']['output'];
     lastUsedAt: Scalars['DateTime']['output'];
     platform: Scalars['String']['output'];
+    /** Product whose app install minted this token (e.g. "vibecontrols"). Null on rows registered before push routing existed; such rows are not deliverable. */
+    productSlug?: Maybe<Scalars['String']['output']>;
+    /** The OS-issued registration token. Only ever reachable by the actor who registered it (`registerDeviceToken` returns the caller's own row) or by a service actor through `pushDevicesForUserInternal` — the delivery side needs the token itself to send. */
+    token: Scalars['String']['output'];
 };
 export declare enum DeviceType {
     Desktop = "DESKTOP",
@@ -5199,6 +5439,26 @@ export type DsarServiceResult = {
     service: Scalars['String']['output'];
     success: Scalars['Boolean']['output'];
 };
+/** A candidate email address that failed during the duplicate-notice mutation. */
+export type DuplicateNoticeFailed = {
+    __typename?: 'DuplicateNoticeFailed';
+    email: Scalars['String']['output'];
+    message: Scalars['String']['output'];
+};
+/** Outcome of notifyDuplicateApplicants — grouped by candidate email address, not by application or round, so every unique email among the requested applications lands in exactly one bucket regardless of how many duplicate applications it appears on. */
+export type DuplicateNoticeResult = {
+    __typename?: 'DuplicateNoticeResult';
+    failed: Array<DuplicateNoticeFailed>;
+    skipped: Array<DuplicateNoticeSkipped>;
+    succeeded: Array<JobApplication>;
+};
+/** A candidate email address skipped by the duplicate-notice mutation, with why. */
+export type DuplicateNoticeSkipped = {
+    __typename?: 'DuplicateNoticeSkipped';
+    email: Scalars['String']['output'];
+    message: Scalars['String']['output'];
+    reason: BulkSendSkipReason;
+};
 export type EarnCreditsInput = {
     amount: Scalars['Float']['input'];
     billingAccountId: Scalars['ID']['input'];
@@ -5389,6 +5649,8 @@ export type EraseResult = {
 export type EvaluateFeatureFlagsInput = {
     /** Specific flag keys to evaluate. If empty, evaluates ALL active flags. */
     keys?: InputMaybe<Array<Scalars['String']['input']>>;
+    /** Product slug to scope the evaluation. When provided, only flags belonging to that product plus platform-wide flags are evaluated — never other products' flags. Product app shells should pass their own slug. */
+    productSlug?: InputMaybe<Scalars['String']['input']>;
     workspaceId: Scalars['String']['input'];
 };
 export type ExchangeTokenInput = {
@@ -5416,6 +5678,298 @@ export declare enum ExecutorType {
     NatsTopic = "NATS_TOPIC",
     Webhook = "WEBHOOK"
 }
+export type ExploreAdminClick = {
+    __typename?: 'ExploreAdminClick';
+    createdAt: Scalars['DateTime']['output'];
+    ctaKind?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    kind: Scalars['String']['output'];
+    product?: Maybe<Scalars['String']['output']>;
+    url: Scalars['String']['output'];
+};
+export type ExploreAdminConversation = {
+    __typename?: 'ExploreAdminConversation';
+    /** Number of links followed across the whole conversation. */
+    clickCount: Scalars['Int']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    /** True when at least one answer in the thread could not be grounded. */
+    hasUnanswered: Scalars['Boolean']['output'];
+    id: Scalars['ID']['output'];
+    /** Salted hash of the visitor's IP. Never an IP — grouping only. */
+    ipHash: Scalars['String']['output'];
+    lastMessageAt?: Maybe<Scalars['DateTime']['output']>;
+    locale?: Maybe<Scalars['String']['output']>;
+    messages: Array<ExploreAdminMessage>;
+    productSlug?: Maybe<Scalars['String']['output']>;
+    turnCount: Scalars['Int']['output'];
+};
+export type ExploreAdminConversationPage = {
+    __typename?: 'ExploreAdminConversationPage';
+    hasMore: Scalars['Boolean']['output'];
+    items: Array<ExploreAdminConversation>;
+    totalCount: Scalars['Int']['output'];
+};
+export type ExploreAdminFilter = {
+    /** Only conversations where at least one link was followed. */
+    convertedOnly?: InputMaybe<Scalars['Boolean']['input']>;
+    from?: InputMaybe<Scalars['DateTime']['input']>;
+    /** Salted IP hash, to group one visitor's sessions. */
+    ipHash?: InputMaybe<Scalars['String']['input']>;
+    /** Match conversations that started on this product's website. */
+    productSlug?: InputMaybe<Scalars['String']['input']>;
+    /** Free-text match against message content. */
+    search?: InputMaybe<Scalars['String']['input']>;
+    to?: InputMaybe<Scalars['DateTime']['input']>;
+    /** Only conversations containing an answer the corpus could not ground. */
+    unansweredOnly?: InputMaybe<Scalars['Boolean']['input']>;
+};
+export type ExploreAdminMessage = {
+    __typename?: 'ExploreAdminMessage';
+    /** Whether the corpus could ground this answer. False = we could not answer. */
+    answered: Scalars['Boolean']['output'];
+    /** Links a visitor actually followed from this answer. */
+    clicks: Array<ExploreAdminClick>;
+    completedAt?: Maybe<Scalars['DateTime']['output']>;
+    content: Scalars['String']['output'];
+    conversationId: Scalars['ID']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    ctas: Array<ExploreCta>;
+    errorCode?: Maybe<Scalars['String']['output']>;
+    followUps: Array<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    references: Array<ExploreReference>;
+    role: ExploreMessageRole;
+    status: ExploreMessageStatus;
+};
+/** Rollup of where the assistant is actually sending people, per product. The signal the product did not have: answers cited vs links followed. */
+export type ExploreAdminProductStat = {
+    __typename?: 'ExploreAdminProductStat';
+    /** Answers that cited this product. */
+    answerCount: Scalars['Int']['output'];
+    /** Links to this product that were actually followed. */
+    clickCount: Scalars['Int']['output'];
+    product: Scalars['String']['output'];
+};
+export declare enum ExploreAdminSort {
+    MostClicks = "MOST_CLICKS",
+    MostTurns = "MOST_TURNS",
+    Newest = "NEWEST",
+    Oldest = "OLDEST"
+}
+export type ExploreAdminStats = {
+    __typename?: 'ExploreAdminStats';
+    byProduct: Array<ExploreAdminProductStat>;
+    clicks: Scalars['Int']['output'];
+    conversations: Scalars['Int']['output'];
+    messages: Scalars['Int']['output'];
+    /** Assistant answers the corpus could not ground. */
+    unanswered: Scalars['Int']['output'];
+};
+export type ExploreAgentActivity = {
+    __typename?: 'ExploreAgentActivity';
+    at: Scalars['DateTime']['output'];
+    detail?: Maybe<Scalars['String']['output']>;
+    kind: Scalars['String']['output'];
+};
+export type ExploreAgentCatalog = {
+    __typename?: 'ExploreAgentCatalog';
+    builtAt: Scalars['DateTime']['output'];
+    products: Array<ExploreAgentProduct>;
+};
+export type ExploreAgentCtaSuggestion = {
+    __typename?: 'ExploreAgentCtaSuggestion';
+    label: Scalars['String']['output'];
+    url: Scalars['String']['output'];
+};
+export type ExploreAgentHistoryTurnInput = {
+    content: Scalars['String']['input'];
+    role: ExploreAgentRole;
+};
+export type ExploreAgentJob = {
+    __typename?: 'ExploreAgentJob';
+    activity: Array<ExploreAgentActivity>;
+    /** The finished answer. Null until status is COMPLETED. */
+    answer?: Maybe<Scalars['String']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    /** Button labels the model proposed for links it already cited, phrased as the action the visitor asked about rather than a generic page name. The edge treats these as a preference over its own templated label and re-validates the URL — a label is copy, a destination is not. */
+    ctaSuggestions: Array<ExploreAgentCtaSuggestion>;
+    errorCode?: Maybe<Scalars['String']['output']>;
+    errorMessage?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** Answer text so far, for a streaming-style preview while the turn runs. */
+    partialText?: Maybe<Scalars['String']['output']>;
+    references: Array<ExploreAgentReference>;
+    status: ExploreAgentJobStatus;
+    updatedAt: Scalars['DateTime']['output'];
+    usage?: Maybe<ExploreAgentUsage>;
+};
+export declare enum ExploreAgentJobStatus {
+    Completed = "COMPLETED",
+    Failed = "FAILED",
+    Queued = "QUEUED",
+    Running = "RUNNING"
+}
+export type ExploreAgentPage = {
+    __typename?: 'ExploreAgentPage';
+    description?: Maybe<Scalars['String']['output']>;
+    group?: Maybe<Scalars['String']['output']>;
+    title: Scalars['String']['output'];
+    url: Scalars['String']['output'];
+};
+export type ExploreAgentProduct = {
+    __typename?: 'ExploreAgentProduct';
+    name: Scalars['String']['output'];
+    pages: Array<ExploreAgentPage>;
+    slug: Scalars['String']['output'];
+    tagline?: Maybe<Scalars['String']['output']>;
+    website: Scalars['String']['output'];
+};
+export type ExploreAgentReference = {
+    __typename?: 'ExploreAgentReference';
+    product?: Maybe<Scalars['String']['output']>;
+    title?: Maybe<Scalars['String']['output']>;
+    url: Scalars['String']['output'];
+};
+export declare enum ExploreAgentRole {
+    Assistant = "ASSISTANT",
+    User = "USER"
+}
+export type ExploreAgentSubmitInput = {
+    /** Context block for files the visitor attached, already sanitised and wrapped as untrusted data by the edge. Injected verbatim alongside the conversation history. */
+    attachmentContext?: InputMaybe<Scalars['String']['input']>;
+    /** Caller correlation id, echoed in logs. Never shown to the model. */
+    clientRef?: InputMaybe<Scalars['String']['input']>;
+    /** Prior turns, oldest first. Truncated to the configured history window. */
+    history?: InputMaybe<Array<ExploreAgentHistoryTurnInput>>;
+    locale?: InputMaybe<Scalars['String']['input']>;
+    /** The visitor's question. Treated as untrusted data by the agent. */
+    message: Scalars['String']['input'];
+    /** Catalog slug of the website the visitor is on. A hint only. */
+    productSlug?: InputMaybe<Scalars['String']['input']>;
+};
+export type ExploreAgentUsage = {
+    __typename?: 'ExploreAgentUsage';
+    costUsd?: Maybe<Scalars['Float']['output']>;
+    durationMs?: Maybe<Scalars['Int']['output']>;
+    inputTokens?: Maybe<Scalars['Int']['output']>;
+    model?: Maybe<Scalars['String']['output']>;
+    outputTokens?: Maybe<Scalars['Int']['output']>;
+    toolCalls?: Maybe<Scalars['Int']['output']>;
+};
+/** What the server accepted, echoed back so the UI can show it honestly. */
+export type ExploreAttachment = {
+    __typename?: 'ExploreAttachment';
+    mimeType: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    size: Scalars['Int']['output'];
+    /** False when only the filename and type could be used as context. */
+    textExtracted: Scalars['Boolean']['output'];
+};
+/** One file a visitor attached as extra context. The browser extracts the text and sends THAT, not the bytes. Two reasons: a 10 MB file is ~13 MB once base64-encoded, which is a poor fit for a GraphQL body behind a gateway; and the harness is text-only by design (it has no webfetch and no file tools), so raw bytes could not be used even if they arrived. `textContent` is therefore null for any format the browser cannot read as text — a PDF or an image contributes its NAME and TYPE to the context and nothing more. The UI says so; do not present these as "read". */
+export type ExploreAttachmentInput = {
+    mimeType: Scalars['String']['input'];
+    name: Scalars['String']['input'];
+    /** Original size in bytes, for display and server-side limit enforcement. */
+    size: Scalars['Int']['input'];
+    /** Extracted text, already truncated by the client. Null for binary formats. */
+    textContent?: InputMaybe<Scalars['String']['input']>;
+};
+/** Everything the `/explore` page needs to render before the first message. `enabled: false` (with an empty product list) means the feature is switched off or the agent is unreachable — the page must not offer the composer. */
+export type ExploreCatalog = {
+    __typename?: 'ExploreCatalog';
+    captchaRequired: Scalars['Boolean']['output'];
+    enabled: Scalars['Boolean']['output'];
+    examplePrompts: Array<Scalars['String']['output']>;
+    limits: ExploreLimits;
+    products: Array<ExploreProduct>;
+    recaptchaSiteKey?: Maybe<Scalars['String']['output']>;
+    welcomeBody: Scalars['String']['output'];
+    welcomeTitle: Scalars['String']['output'];
+};
+/** An explore conversation. `token` is the bearer secret for every subsequent call and is returned ONLY on the request that minted it (or echoed back to the caller that already holds it) — it is never read back out of storage. */
+export type ExploreConversation = {
+    __typename?: 'ExploreConversation';
+    createdAt: Scalars['DateTime']['output'];
+    id: Scalars['ID']['output'];
+    productSlug?: Maybe<Scalars['String']['output']>;
+    token: Scalars['String']['output'];
+    turnCount: Scalars['Int']['output'];
+};
+/** A call-to-action button derived from a cited link. `kind` is one of: CONTACT PARTNERS PRICING SERVICES WAITLIST STORE APP DOCS OTHER. */
+export type ExploreCta = {
+    __typename?: 'ExploreCta';
+    kind: Scalars['String']['output'];
+    label: Scalars['String']['output'];
+    product?: Maybe<Scalars['String']['output']>;
+    url: Scalars['String']['output'];
+};
+/** Server-enforced limits, surfaced so the UI can pre-validate instead of discovering them through an error. */
+export type ExploreLimits = {
+    __typename?: 'ExploreLimits';
+    historyTurns: Scalars['Int']['output'];
+    maxMessageLength: Scalars['Int']['output'];
+    maxTurnsPerConversation: Scalars['Int']['output'];
+    messagesPerDay: Scalars['Int']['output'];
+};
+/** One turn in an explore conversation. USER messages are always COMPLETED on creation; ASSISTANT messages start PENDING and must be polled. */
+export type ExploreMessage = {
+    __typename?: 'ExploreMessage';
+    /** Human-readable progress lines (e.g. "Searching vibecontrols…"). */
+    activity: Array<Scalars['String']['output']>;
+    /** False when the corpus could not answer the question. A grounded answer always cites something, so an answer with no citable source is the honest signal that we did not have it — the UI shows a distinct "couldn't find this" state rather than presenting a hedged paragraph as if it were an answer. */
+    answered: Scalars['Boolean']['output'];
+    /** Files the visitor attached to THIS turn (user messages only). */
+    attachments: Array<ExploreAttachment>;
+    completedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** Final answer (markdown). Empty string while PENDING/RUNNING. */
+    content: Scalars['String']['output'];
+    conversationId: Scalars['ID']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    ctas: Array<ExploreCta>;
+    errorCode?: Maybe<Scalars['String']['output']>;
+    /** Suggested next questions, derived from what this answer actually covered. Empty until the turn completes, and empty when nothing useful can be derived. */
+    followUps: Array<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** Streaming preview while PENDING/RUNNING. */
+    partialContent?: Maybe<Scalars['String']['output']>;
+    references: Array<ExploreReference>;
+    role: ExploreMessageRole;
+    status: ExploreMessageStatus;
+};
+export declare enum ExploreMessageRole {
+    Assistant = "ASSISTANT",
+    User = "USER"
+}
+export declare enum ExploreMessageStatus {
+    Completed = "COMPLETED",
+    Failed = "FAILED",
+    Pending = "PENDING",
+    Running = "RUNNING"
+}
+/** A product the explore agent can answer about, from its baked corpus. */
+export type ExploreProduct = {
+    __typename?: 'ExploreProduct';
+    name: Scalars['String']['output'];
+    slug: Scalars['String']['output'];
+    tagline?: Maybe<Scalars['String']['output']>;
+    website: Scalars['String']['output'];
+};
+/** A page the answer cited. Only links whose origin is in the agent's baked catalog survive — anything else is stripped from the answer text as well. */
+export type ExploreReference = {
+    __typename?: 'ExploreReference';
+    description?: Maybe<Scalars['String']['output']>;
+    imageUrl?: Maybe<Scalars['String']['output']>;
+    /** 1-based citation number. The answer text carries matching `[n]` markers, so a reader can check the specific claim rather than the whole answer. */
+    index: Scalars['Int']['output'];
+    product?: Maybe<Scalars['String']['output']>;
+    title?: Maybe<Scalars['String']['output']>;
+    url: Scalars['String']['output'];
+};
+/** A read-only link to a conversation, so sales or support can send someone a specific answer. `shareToken` is NOT the conversation token. That one authorises posting to the thread, so a URL carrying it would let every recipient continue someone else's conversation and would leak through browser history and referrer headers. This secret only ever opens a read-only view. */
+export type ExploreShareLink = {
+    __typename?: 'ExploreShareLink';
+    shareToken: Scalars['String']['output'];
+};
 export type ExportApplicationsFilter = {
     appType?: InputMaybe<AppType>;
     category?: InputMaybe<Scalars['String']['input']>;
@@ -5729,6 +6283,13 @@ export declare enum FeedbackCategory {
     Other = "OTHER",
     ResponseTime = "RESPONSE_TIME"
 }
+export type FileDsarInput = {
+    notes?: InputMaybe<Scalars['String']['input']>;
+    source: Scalars['String']['input'];
+    subjectEmail: Scalars['String']['input'];
+    subjectId: Scalars['ID']['input'];
+    type: DsarType;
+};
 /** Available filter options for UI dropdowns */
 export type FilterOptionsResult = {
     __typename?: 'FilterOptionsResult';
@@ -5839,6 +6400,18 @@ export type GrantAppWorkspaceAccessInput = {
     tenantId: Scalars['ID']['input'];
     workspaceId: Scalars['ID']['input'];
 };
+export type GrantConsentInput = {
+    expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
+    lawfulBasis?: InputMaybe<LawfulBasis>;
+    policyVersion: Scalars['String']['input'];
+    proofPayload?: InputMaybe<Scalars['JSON']['input']>;
+    purpose: ConsentPurpose;
+    source: Scalars['String']['input'];
+    subjectId: Scalars['ID']['input'];
+    subjectType: Scalars['String']['input'];
+    tenantId?: InputMaybe<Scalars['ID']['input']>;
+    workspaceId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type GrantCreditsInput = {
     amount: Scalars['Float']['input'];
     billingAccountId: Scalars['ID']['input'];
@@ -5860,6 +6433,8 @@ export type GraphQlCallbackInput = {
     endpoint: Scalars['String']['input'];
     /** Name of the GraphQL mutation to call on payment completion Example: updateOrderPaymentStatus */
     mutationName: Scalars['String']['input'];
+    /** Opt in when the callback mutation requires the exact persisted BillingOrder subtotal. Omitted or false preserves the legacy callback document, variables, and signature. */
+    requiresExactSubtotal?: InputMaybe<Scalars['Boolean']['input']>;
 };
 export type Group = {
     __typename?: 'Group';
@@ -6604,13 +7179,23 @@ export type JobApplication = {
     updatedAt: Scalars['DateTime']['output'];
 };
 export type JobApplicationFilterInput = {
+    /** Filter to applications with at least one interview round whose randomly assigned take-home was authored by this owner email. With `roundConfigId`, scoped to that one exact round's assignment; otherwise matches any round. */
+    assignmentOwnerEmail?: InputMaybe<Scalars['String']['input']>;
+    /** Filter that exact configured round by presence and assignment state. Requires `roundConfigId`. */
+    configuredRoundState?: InputMaybe<ConfiguredRoundState>;
+    /** Filter to applications whose email address is shared by more than one application within this filter's other active scope (e.g. within the same `jobPostingId`) — surfaces candidates who accidentally applied twice and so may have received more than one assignment email. Requires `jobPostingId`. */
+    duplicateEmail?: InputMaybe<Scalars['Boolean']['input']>;
     /** Filter by 1-100 unique application IDs. */
     ids?: InputMaybe<Array<Scalars['ID']['input']>>;
+    /** Filter to applications with at least one interview round this interviewer is assigned to review. With `roundConfigId`, scoped to that one exact round; otherwise matches any round. */
+    interviewerId?: InputMaybe<Scalars['ID']['input']>;
     jobPostingId?: InputMaybe<Scalars['String']['input']>;
     /** Filter by position (case-insensitive contains). */
     position?: InputMaybe<Scalars['String']['input']>;
     productId?: InputMaybe<Scalars['String']['input']>;
-    /** Filter to applications with at least one interview round in any of these stages. */
+    /** Filter by one exact configured interview round. */
+    roundConfigId?: InputMaybe<Scalars['ID']['input']>;
+    /** Filter round stages. With `roundConfigId`, stages must match that exact configured round. */
     roundStatuses?: InputMaybe<Array<InterviewRoundStatus>>;
     /** Search in name, email, or position. */
     search?: InputMaybe<Scalars['String']['input']>;
@@ -6632,9 +7217,13 @@ export type JobApplicationReplyResult = {
 };
 export declare enum JobApplicationStatus {
     Archived = "ARCHIVED",
+    /** Marks an application as already sent a (bulk) email — set via bulkUpdateApplicationStatus after bulkSendCustomEmail so re-running the send on the same filter doesn't email the same candidates twice. Not set automatically; the admin who sent the email marks it, and can move affected applications back to any other status once the outcome is decided. */
+    EmailSent = "EMAIL_SENT",
     Hired = "HIRED",
     Interview = "INTERVIEW",
     New = "NEW",
+    /** A candidate parked while the team decides whether to keep evaluating them — not a rejection, just a pause. Set and cleared manually by an admin via updateJobApplicationStatus / bulkUpdateApplicationStatus. */
+    OnHold = "ON_HOLD",
     Rejected = "REJECTED",
     Screening = "SCREENING",
     Shortlisted = "SHORTLISTED"
@@ -6980,6 +7569,40 @@ export declare enum LanguageStatus {
     Deprecated = "DEPRECATED",
     Draft = "DRAFT"
 }
+export declare enum LawfulBasis {
+    Consent = "CONSENT",
+    Contract = "CONTRACT",
+    LegalObligation = "LEGAL_OBLIGATION",
+    LegitimateInterest = "LEGITIMATE_INTEREST",
+    PublicTask = "PUBLIC_TASK",
+    VitalInterest = "VITAL_INTEREST"
+}
+export type LegalHold = {
+    __typename?: 'LegalHold';
+    active: Scalars['Boolean']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    id: Scalars['ID']['output'];
+    placedAt: Scalars['DateTime']['output'];
+    placedBy: Scalars['ID']['output'];
+    reason: Scalars['String']['output'];
+    reference?: Maybe<Scalars['String']['output']>;
+    releasedAt?: Maybe<Scalars['DateTime']['output']>;
+    releasedBy?: Maybe<Scalars['ID']['output']>;
+    subjectEmail?: Maybe<Scalars['String']['output']>;
+    subjectId?: Maybe<Scalars['ID']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+};
+export type LegalHoldConnection = {
+    __typename?: 'LegalHoldConnection';
+    hasMore: Scalars['Boolean']['output'];
+    items: Array<LegalHold>;
+    total: Scalars['Int']['output'];
+};
+export type LegalHoldFilter = {
+    active?: InputMaybe<Scalars['Boolean']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
+    subjectId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type LicenseActivation = {
     __typename?: 'LicenseActivation';
     activatedAt: Scalars['DateTime']['output'];
@@ -7291,7 +7914,7 @@ export type MultiPlatformRecipientInput = {
 /** Root mutation type */
 export type Mutation = {
     __typename?: 'Mutation';
-    /** Placeholder field to allow empty Mutation type extension. Must be @shareable since it exists in multiple subgraphs. */
+    /** Placeholder field so the Mutation type can be extended. @shareable because every subgraph declares it. */
     _empty?: Maybe<Scalars['String']['output']>;
     /** Placeholder mutation (extended by modules) @rbac(public: true, scopeType: "global") */
     _placeholder?: Maybe<Scalars['String']['output']>;
@@ -7308,6 +7931,8 @@ export type Mutation = {
     activateSchedule: ScheduledJob;
     /** Activate a subscription's workspace-scoped quotas for a specific workspace. The backend reads quota definitions directly from the subscription plan — the caller cannot forge quota names, limits, or productIds. Called by the UI immediately after a plan/addon purchase instead of calling assignWorkspaceQuota directly on the workspace layer. */
     activateSubscriptionForWorkspace: ActivateSubscriptionForWorkspaceResult;
+    /** Activate a subscription's workspace-scoped quotas against MULTIPLE workspaces in one call — each listed workspace gets the FULL per-workspace quota allotment from the plan (not divided). Bounded by plan.maxWorkspaces: rejects with WORKSPACE_CAP_EXCEEDED if activating the given workspaceIds (counting only ones not already activated) would exceed the cap. Already- activated workspaces in the list are idempotent no-ops. Shares the same underlying activation logic as activateSubscriptionForWorkspace, so mixing calls to both against the same subscription still enforces the cap correctly. */
+    activateSubscriptionForWorkspaces: ActivateSubscriptionForWorkspacesResult;
     /** Activate a suspended tenant */
     activateTenant: Tenant;
     /** Activate a tour schedule */
@@ -7345,8 +7970,6 @@ export type Mutation = {
     /** Add a member to a workspace */
     addWorkspaceMember: WorkspaceMember;
     adjustInventory: InventoryAdjustment;
-    /** Adjust a physical product's stock by a signed delta (positive to restock, negative to correct/write off) instead of overwriting the absolute count — keeps a reason for audit, and is the seller-facing entry point so a future upstream inventory-sync integration can post deltas the same way without a breaking change. */
-    adjustProductStock: StoreProduct;
     adminMarkAffiliateConversion: AffiliateJourneyEvent;
     /** Apply a billing discount code */
     applyBillingDiscount: BillingDiscount;
@@ -7436,12 +8059,17 @@ export type Mutation = {
     /** Randomize and send a take-home assignment to multiple applications' rounds at once (admin). Each item is processed independently — a candidate already emailed an assignment for that round is skipped unless `force` is set, and one item failing does not abort the rest. */
     bulkRandomizeAndSendAssignment: BulkSendResult;
     bulkResumeSchedules: SchedulerBulkOperationResult;
+    /** Send a custom subject + rich-text message to a bounded batch of applications (admin) — not tied to a shared interview round, so it works across any status or stage (e.g. a progress update to everyone still in the pipeline, or a closing note to everyone not moving forward). No dedup/eligibility gate: re-sending a different message to the same candidates is expected, not blocked. */
+    bulkSendCustomEmail: BulkCustomEmailResult;
     /** Send the same free-text message to multiple candidate rounds at once (admin). Each item is processed independently — a round already messaged is skipped unless `force` is set, and one item failing does not abort the rest. */
     bulkSendRoundMessage: BulkSendResult;
     /** Bulk set user's opt-in/out preference for multiple feature flags. RBAC is scoped to the target workspace via `input.workspaceId`. */
     bulkSetUserFeatureFlagPreferences: Array<UserFeatureFlagPreference>;
+    /** Update status for a batch of applications at once (admin) — e.g. marking everyone a bulk email just went to as EMAIL_SENT so a later bulk-send doesn't re-email the same people, then moving them back to whatever status applies once the outcome is decided. One item failing (e.g. a deleted application) does not abort the rest. */
+    bulkUpdateApplicationStatus: BulkUpdateApplicationStatusResult;
     bulkUpdateSchedules: SchedulerBulkOperationResult;
     bulkUpdateTranslations: BulkOperationResult;
+    cancelDSAR: DsarRequest;
     /** Cancel pending delivery */
     cancelDelivery: Scalars['Boolean']['output'];
     /** Cancel an organization invitation */
@@ -7532,6 +8160,8 @@ export type Mutation = {
     createEditorialCollection: EditorialCollection;
     /** Create a new subscription entitlement (link a plan to a store item) */
     createEntitlement: SubscriptionEntitlement;
+    /** Mint (or return the existing) read-only share secret for a conversation. Requires the conversation token, so only someone already in the thread can create a link to it. */
+    createExploreShareLink: ExploreShareLink;
     createFAQ: Faq;
     /** Create a new feature flag (super admin only) */
     createFeatureFlag: FeatureFlag;
@@ -7615,6 +8245,8 @@ export type Mutation = {
     createScheduleFromTemplate: ScheduledJob;
     createScheduleTemplate: ScheduleTemplate;
     createScheduledJob: ScheduledJob;
+    /** Provision a PHYSICAL-kind developer organization for the seller portal (HealthyBowl and any other physical-goods seller flow). `kind` is not a client-settable input field — using this mutation is what makes the org PHYSICAL, the same way `createDeveloperOrganization` always makes a DIGITAL one. See DeveloperOrgKind. */
+    createSellerOrganization: DeveloperOrganization;
     createShippingAddress: ShippingAddress;
     createShippingMethod: ShippingMethod;
     createShippingRate: ShippingRate;
@@ -7625,6 +8257,7 @@ export type Mutation = {
     createStore: Store;
     /** Create a new store order (called when user clicks checkout). NOTE: Codex P1 on PR #55 — gating is global+create rather than scopeType:"self". The resolver currently forwards client-supplied input.total / input.lineItems to OrderService without server-side re-pricing, so a "self"-gate would let a buyer underprice their own order and harvest entitlements via the billing callback. Buyer checkout flows through the cart path (createCart → addToCart → checkoutCart) which prices server-side. Re-opening this as a buyer-self action requires server-side total rebuild from product ids — tracked as a follow-up. */
     createStoreOrder: StoreOrder;
+    createSubprocessor: Subprocessor;
     /** Link a subscription plan to a store product granting FREE_ACCESS or DISCOUNT. */
     createSubscriptionEntitlement: StoreSubscriptionEntitlement;
     createSupportMessage: SupportMessage;
@@ -7823,6 +8456,8 @@ export type Mutation = {
     deliverMultiPlatformNotification: MultiPlatformDeliveryResult;
     /** Deliver a notification to a single recipient via Channel service. Called by global-notification-svc to deliver through platform adapters. */
     deliverNotification: ChannelDeliveryResult;
+    /** Deliver a push notification to every active device the user has registered for `productSlug`. Resolves devices from the global device registry, groups them by Firebase project, and sends each group through the one channel connection proven to hold that project's credentials. A device whose project cannot be resolved is reported as a failure — it is never sent through a different project. Returns a per-device breakdown; `successCount > 0` means the notification reached at least one device. */
+    deliverPushToUser: UserPushDeliveryResult;
     deprecateApplicationVersion: ApplicationVersion;
     deprecateProduct: StoreProduct;
     /** Detach media from a tour step */
@@ -7853,6 +8488,8 @@ export type Mutation = {
     /** Exchange app token for app-as-user token (Token Exchange flow) */
     exchangeToken: AppAsUserTokenResponse;
     executeJobNow: JobExecution;
+    /** Queue one turn. Returns immediately; poll exploreAgentJob for the answer. */
+    exploreAgentSubmit: ExploreAgentJob;
     /** Export Application records matching the optional filter. */
     exportApplications: DevportalExportJob;
     /** Export AuditLog records matching the optional filter. */
@@ -7875,6 +8512,9 @@ export type Mutation = {
     exportWebhooks: DevportalExportJob;
     /** Feature a review */
     featureAppReview: AppReview;
+    fileDSAR: DsarRequest;
+    /** Seller reports a problem fulfilling a physical order (out of stock, cannot fulfill, wrong address, etc). The resolver verifies organizationId actually owns a physical line item on this order (real evidence in store-svc's own data) — scopeType: "organization" at the gateway only confirms the actor has SOME org context, not that it's this specific one. */
+    flagOrderIssue: OrderIssueFlag;
     freeUpUsage: Scalars['Boolean']['output'];
     generateAPIKey: ApiKeyResult;
     generateAppAsUserToken: AppAsUserTokenResponse;
@@ -7902,6 +8542,7 @@ export type Mutation = {
     grantAppDelegationInternal: AppUserDelegation;
     /** Grant an app access to act on a specific workspace. Idempotent: re-granting an ACTIVE authorization updates its scopes; re-granting a REVOKED one flips it back to ACTIVE and clears the revoke fields. */
     grantAppWorkspaceAccess: AppWorkspaceAuthorization;
+    grantConsent: ConsentRecord;
     grantCredits: CreditTransaction;
     grantDelegation: AppUserDelegation;
     haltRollout: ProductRelease;
@@ -7972,6 +8613,8 @@ export type Mutation = {
     newsletterEraseSubject: NewsletterEraseResult;
     /** Export the subject's newsletter data: subscriber rows, per-list memberships, consent ledger entries, automation enrolments, waitlist entries. */
     newsletterExportSubject: Scalars['JSON']['output'];
+    /** Notify candidates who have more than one application on file (and so may have received more than one take-home assignment email as a result of a since-fixed missing duplicate-email check) that they only need to complete ONE of the assignments they received (admin). Grouped by email address — sends exactly one notice per unique candidate email, never one per duplicate application/round, and re-running this is safe: an email already notified is skipped unless `force` is set. */
+    notifyDuplicateApplicants: DuplicateNoticeResult;
     openCircuitBreaker: CircuitBreakerState;
     /** Pause a subscription */
     pauseDeveloperOrgSubscription: DeveloperOrgSubscription;
@@ -7980,8 +8623,9 @@ export type Mutation = {
     /** Pay an invoice using a payment method */
     payInvoice: Invoice;
     permanentlyDeleteSchedule: Scalars['Boolean']['output'];
+    placeLegalHold: LegalHold;
     prepareSupportAttachmentUpload: SupportAttachmentUploadSession;
-    /** Process a refund for an app sale */
+    /** Process a refund for an app sale. Privileged financial mutation: reverses money to a buyer and adjusts the org's pending balance. Gated on `devportal-sale:manage` (the same permission as `retrySaleCreditSync`), with an in-resolver org-ADMIN check as defense-in-depth. */
     processAppSaleRefund: DeveloperOrgSale;
     processPayoutRequest: PayoutRequest;
     /** Process a refund (one-click - calls payment gateway) */
@@ -7999,6 +8643,8 @@ export type Mutation = {
     publishApplication: Application;
     /** Developer action: submit a draft (or rejected) version for platform review. Status becomes pending_review. The store is NOT updated until an admin approves. */
     publishApplicationVersion: ApplicationVersion;
+    /** Publish ONE curated catalog node version (from the fluidgrids-nodes repo) to every enabled sandbox provider — the same PublishOrchestrator the devportal path uses, so the two cannot drift. That drift is not hypothetical: the catalog previously had no publish trigger at all, so nodes were built and pinned by hand and 14 of 31 prod-bound nodes ended up running code older than fluidgrids-nodes main. One entrypoint, two triggers (devportal publish, catalog CI) is the fix. NOT actor-authenticated: the caller is CI, not a platform user or app, so this verifies a shared secret in the resolver (checked against DEVPORTAL_CALLBACK_SECRET, or CALLBACK_SECRET as shipped by the Secrets Manager bundle) exactly as reportNodeSandboxBuildStatus does. Sent as an argument rather than a header because global-public-gateway forwards only a fixed header allowlist to subgraphs. `zipUrl` must be fetchable by this service — CI uploads the packaged node and passes a presigned URL. `isFirstPublish` tells the orchestrator whether this node type has ever been built before, which is what lets it annotate a provider that cannot self-onboard (Cloudflare) instead of reporting a mystery failure. Defaults to false: a catalog node already running on Cloudflare has a Durable Object class, so only a genuinely new node should pass true. Returns a JSON array of per-provider outcomes so CI can log them and fail the job when nothing could build. */
+    publishCatalogNodeVersion: Scalars['JSON']['output'];
     publishFAQ: Faq;
     publishKnowledgeBaseArticle: KnowledgeBaseArticle;
     publishProduct: StoreProduct;
@@ -8030,8 +8676,12 @@ export type Mutation = {
     recordBounce: NewsletterBounce;
     recordComplaint: NewsletterComplaint;
     recordConsent: NewsletterConsent;
+    /** Service-to-service only: records that global-store-svc successfully registered this address with a carrier, on behalf of the given org. actorId/actorType identify the real end user who requested the registration (for the audit trail) — the caller is responsible for verifying that actor's access via assertDeveloperOrgAccess first. */
+    recordDeveloperOrgPickupAddress: DeveloperOrgPickupAddress;
     recordDownload: ProductDownload;
     recordEarningEntry: EarningsEntry;
+    /** Record that a visitor followed a link the answer offered. Fire-and-forget from the browser: a click must never be blocked or delayed by analytics, so this reports `recorded: false` rather than throwing when the click cannot be attributed. */
+    recordExploreClick: RecordExploreClickResult;
     /** Record a SETTLED (or pending/failed) external/manual Charge + Transaction on behalf of a workspace/org by explicit id. Service/super_admin only — routed through the internal gateway. Bypasses the Stripe/Razorpay sync path. */
     recordExternalSettlement: ExternalSettlementResult;
     recordFAQView: Faq;
@@ -8053,7 +8703,9 @@ export type Mutation = {
     regenerateAffiliateCode: AffiliateCode;
     /** Register (or re-register) an approved application with global-auth-svc so it can issue OAuth clients, API keys, and delegations. Safe to call more than once — skips if appId is already set. */
     registerAppWithAuthService: Application;
-    /** Register (or refresh) a push-notification device token for the current user. Upserts on the OS-issued token — safe to call on every app launch and on every token-refresh event. `platform` is one of "ios", "android", "web". `metadata` is optional free-form context (app version, OS version). */
+    /** Register a seller's real address as a new pickup/warehouse location on a carrier account (currently only "shiprocket" supports this), so it becomes a real, bookable pickup point instead of just an unregistered pincode a seller typed in. This is a real, permanent write to the carrier's account — not a local list we maintain; any address the carrier itself accepts is supported, we never hardcode which pincodes are valid. scopeType: "self" — same authenticated-actor bar as carrierPickupLocations. This doesn't touch a store-svc-owned resource with an ownership row to check against (it writes directly to the carrier account), so there's no org-ownership verification here — a known trust-boundary gap, same shape as flagOrderIssue's caller-supplied organizationId. */
+    registerCarrierPickupLocation: CarrierPickupLocation;
+    /** Register (or refresh) a push-notification device token for the current user. Upserts on the OS-issued token — safe to call on every app launch and on every token-refresh event. `platform` is one of "ios", "android", "web". `productSlug` names the product whose install minted the token; the server derives the Firebase project from it, and an unmapped product is rejected outright rather than stored as an undeliverable row. `metadata` is optional free-form context (app version, OS version). Deliberately takes no `fcmProject` and no identity argument: the project is derived server-side so a client cannot file a device under a project that cannot reach it, and the owner is always the calling actor. */
     registerDeviceToken: DeviceToken;
     registerProductAsset: ProductAsset;
     /** Register a public key for authentication */
@@ -8077,6 +8729,8 @@ export type Mutation = {
     rejectPublisher: Publisher;
     rejectReview: ProductReview;
     rejectWaitlist: NewsletterWaitlist;
+    releaseLegalHold: LegalHold;
+    releaseSuppression: SuppressionEntry;
     removeAgentSkills: AgentProfile;
     /** Remove the license configuration for an application */
     removeAppLicense: Scalars['Boolean']['output'];
@@ -8084,6 +8738,8 @@ export type Mutation = {
     removeAppsFromCollection: AppCollection;
     /** Remove a member from an organization */
     removeDeveloperOrgMember: Scalars['Boolean']['output'];
+    /** Stop using this pickup address for the organization. Only removes our own record — carriers like Shiprocket have no delete API, so the address may still exist on the carrier's account, it just won't be used for this org's shipments anymore. If the removed address was the default and others remain, the most recently added one is promoted to default. */
+    removeDeveloperOrgPickupAddress: Scalars['Boolean']['output'];
     /** Remove an item from the cart */
     removeFromCart: CartPayload;
     /** Remove a waitlist entry entirely (admin operation). */
@@ -8140,18 +8796,20 @@ export type Mutation = {
     replaceStoreProductTags: Array<StoreProductTagAssignment>;
     /** Send an email reply to a contact inquiry. The reply is sent via the notification pipeline (notification-svc → channel-svc → email provider). Auto-updates status to REVIEWED. */
     replyToContactInquiry: ContactInquiryReplyResult;
-    /** Send a branded email reply to an applicant (admin). Delivered to the applicant's email via the notification pipeline. Does not change status — the admin controls status explicitly. */
+    /** Send a branded email reply to an applicant (admin). Delivered to the applicant's email via the notification pipeline. Does not change status — the admin controls status explicitly. `message` is rich-text HTML from the admin's editor; it is sanitized to an allowlist before it reaches the email. */
     replyToJobApplication: JobApplicationReplyResult;
     replyToReview: ProductReviewReply;
     /** Report a review */
     reportAppReview: AppReviewReport;
-    /** Webhook callback from the tool-sandbox-cf-proxy "Deploy Devportal Node" CI pipeline (BOFF-5968) reporting the outcome of a NODE version's sandbox image build+deploy. Not developer-facing, and NOT actor-authenticated — the caller is CI, not a platform user/app, so this verifies a shared secret (the `secret` argument, checked against DEVPORTAL_CALLBACK_SECRET) inside the resolver itself rather than going through the actor/RBAC system. Sent as a mutation argument rather than a header because global-public-gateway only forwards a fixed header allowlist to subgraphs and drops custom headers. Persists onto ApplicationVersion.metadata.sandboxBuildStatus (READY/FAILED), which is what gates "Test in Workflow" in the devportal UI. */
+    /** Webhook callback from the tool-sandbox-cf-proxy "Deploy Devportal Node" CI pipeline (BOFF-5968) reporting the outcome of a NODE version's sandbox image build+deploy. Not developer-facing, and NOT actor-authenticated — the caller is CI, not a platform user/app, so this verifies a shared secret (the `secret` argument, checked against DEVPORTAL_CALLBACK_SECRET, or CALLBACK_SECRET as shipped by the Secrets Manager bundle) inside the resolver itself rather than going through the actor/RBAC system. Sent as a mutation argument rather than a header because global-public-gateway only forwards a fixed header allowlist to subgraphs and drops custom headers. Persists onto ApplicationVersion.metadata.sandboxBuildStatus (READY/FAILED), which is what gates "Test in Workflow" in the devportal UI. */
     reportNodeSandboxBuildStatus: Scalars['Boolean']['output'];
     /** Reprocess a failed webhook event */
     reprocessWebhook: WebhookProcessingResult;
     requestBillingPayout: PayoutRequest;
     /** Request a credit withdrawal. Converts purchased + earned credits to a PayoutRequest denominated in USD at the current credit rate. Uses the specified payout account for payment. */
     requestCreditWithdrawal: PayoutRequest;
+    /** Issue a magic-link identity challenge and email it to the subject. The request parks in IDENTITY_VERIFICATION_PENDING until the token comes back through verifyDSARIdentity. */
+    requestDSARIdentityVerification: DsarRequest;
     /** Request a manual payout (devportal legacy alias) */
     requestDeveloperOrgPayout: DeveloperOrgPayout;
     /** Request return for an order (owner only — ownership asserted in service) */
@@ -8183,6 +8841,8 @@ export type Mutation = {
     resolveContextWidgetConversation: ContextWidgetConversationPayload;
     resolveDLQEntry: Scalars['Boolean']['output'];
     resolveInventoryAlert: InventoryAlert;
+    /** Mark a seller-reported issue flag resolved. Allowed for a super-admin (no organizationId needed) or the org that raised the flag (organizationId must match) — enforced in the resolver. */
+    resolveOrderIssueFlag: OrderIssueFlag;
     resolveSupportTicket: SupportTicket;
     /** Respond to a review (developer) */
     respondToAppReview: AppReview;
@@ -8198,11 +8858,16 @@ export type Mutation = {
     resumeDeveloperOrgSubscription: DeveloperOrgSubscription;
     resumeSLA: SupportTicket;
     resumeScheduledJob: ScheduledJob;
+    /** Retire one push registration the transport has reported permanently dead. Called by global-channel-svc after a send fails with a code that means the token itself is gone: FCM's `UNREGISTERED`, or an `INVALID_ARGUMENT` whose message names the registration token. Without it the registry accumulates tokens no push can ever reach, and every later fan-out keeps paying for uninstalled apps. Keyed on the token — that is what the transport rejected, it is unique in this registry, and a service acting on a transport report has no calling actor to scope by. That is precisely why this is service-gated rather than `scopeType: "self"`. `errorCode` is recorded for traceability; the delivery side owns the policy of which codes are terminal (a routing or credential fault must never retire a device — retiring one hides the misconfiguration and destroys the evidence). Returns true if a registration was removed. */
+    retirePushDeviceInternal: Scalars['Boolean']['output'];
+    retireSubprocessor: Subprocessor;
     /** Manually retry GraphQL callback for a failed billing order (admin only) Useful for retrying after fixing issues in external service */
     retryBillingOrderCallback: RetryBillingOrderCallbackResponse;
     /** Retry a failed delivery attempt */
     retryDelivery: MessageDeliveryResult;
     retryImportJob: ImportJob;
+    /** Retry invoice generation for a successful transaction that never got an invoice recorded (a transient Zoho Books/Stripe Invoicing failure at payment time). transactionId is the transaction that has no invoiceNumber in its metadata yet — surfaced via getTransactionsByBillingAccount / getTransaction, not the invoice list (which only shows transactions that already have an invoice). */
+    retryInvoiceGeneration: Invoice;
     retryJobExecution: JobExecution;
     /** Retry a failed payout */
     retryPayout: DeveloperOrgPayout;
@@ -8260,6 +8925,8 @@ export type Mutation = {
     seedBuildmyiqUserTours: SeedBuildmyiqUserToursResult;
     /** Overwrite the built-in CollabKin user-facing dashboard tour from the service-owned seed file. */
     seedCollabkinUserTours: SeedCollabkinUserToursResult;
+    /** Overwrite the built-in CoolAndLovely user-facing Discover tour from the service-owned seed file. */
+    seedCoolAndLovelyUserTours: SeedCoolAndLovelyUserToursResult;
     /** Seed default feature flags across all products. Creates all default flags if they don't already exist. Returns the count of newly created flags. Skips flags that already exist (by key uniqueness). */
     seedDefaultFeatureFlags: Scalars['Int']['output'];
     /** Bulk create default shortcuts for a product */
@@ -8274,6 +8941,8 @@ export type Mutation = {
     seedVibeControlsUserTours: SeedVibeControlsUserToursResult;
     selectVariantWinner: NewsletterVariant;
     sendContextWidgetMessage: SendContextWidgetMessagePayload;
+    /** Ask the explore agent a question (public, no authentication). Rate-limited per IP, capped globally per day, and optionally reCAPTCHA v3 gated. Returns immediately with a PENDING/RUNNING assistant message to poll. */
+    sendExploreMessage: SendExploreMessageResult;
     sendMagicLink: MagicLinkSendResult;
     /** Send a message to a channel */
     sendMessage: MessageDeliveryResult;
@@ -8292,6 +8961,8 @@ export type Mutation = {
     serviceRequestPayout: PayoutRequest;
     /** Resolve (or create) a canonical default PayoutAccount for a publisher/org owner so a service caller can obtain a `payoutAccountId` for `serviceRequestPayout` without the user-only `addPayoutAccount` path. Idempotent / self-healing: repeated calls return the SAME account (no duplicates). Prefers an existing user-registered account; otherwise creates a placeholder that can be referenced but against which NO money moves until the user completes real payment setup. Service/super_admin only — internal gateway. */
     serviceResolvePayoutAccount: PayoutAccount;
+    /** Mirror a billing PayoutRequest status change back onto the DeveloperOrgPayout it originated from (BOFF-7192). Billing owns the payout system-of-record and is where admins approve/reject/mark-paid; this keeps devportal's own payout history in sync so it doesn't stay stuck showing a stale status forever. Looked up by sourceIdempotencyKey ("devportal:payout:<id>", set when the request was originally mirrored to billing) — a no-op if the key isn't a devportal-originated one, or no matching local payout exists. Service/super_admin only — internal gateway. */
+    serviceSyncPayoutStatus?: Maybe<DeveloperOrgPayout>;
     setAgentAway: AgentProfile;
     setAgentOffline: AgentProfile;
     setAgentOnline: AgentProfile;
@@ -8305,6 +8976,8 @@ export type Mutation = {
     /** Set a payment method as default */
     setDefaultPaymentMethod: DeveloperOrgPaymentMethod;
     setDefaultPayoutAccount: PayoutAccount;
+    /** Mark one of the organization's pickup addresses as the active one used for carrier rate quoting and shipment booking. Unsets any other default. */
+    setDefaultPickupAddress: DeveloperOrgPickupAddress;
     setEntitlementSeatLimit: ProductEntitlement;
     /** Subscribe or unsubscribe the current user from a notification topic */
     setNotificationTopicSubscription: NotificationTopicSubscription;
@@ -8361,6 +9034,7 @@ export type Mutation = {
     supportEraseSubject: SupportEraseResult;
     /** Export the subject's support data: tickets they raised, messages they authored, contact inquiries, CSAT surveys submitted. Called exclusively by the global-tenant-svc DSAR orchestrator (actorType=service) via global-int-gateway. */
     supportExportSubject: Scalars['JSON']['output'];
+    suppressIdentifier: SuppressionEntry;
     /** Suspend an installation (admin) */
     suspendAppInstallation: AppInstallation;
     /** Suspend a member */
@@ -8424,7 +9098,7 @@ export type Mutation = {
     unpublishKnowledgeBaseArticle: KnowledgeBaseArticle;
     /** Unpublish a tour (change status back to DRAFT) */
     unpublishTour: Tour;
-    /** Unregister a device token (e.g. on logout or notification opt-out). Returns true if a token was removed. */
+    /** Unregister a device token (e.g. on logout or notification opt-out). Pass `productSlug` to unsubscribe only that product's install, so signing out of one product does not silently unsubscribe the others sharing the device. Returns true if a token was removed. */
     unregisterDeviceToken: Scalars['Boolean']['output'];
     /** Revoke the public link for a shared WORKFLOW app, setting visibility back to PRIVATE. Only the owning developer can call this. */
     unshareWorkflow: Application;
@@ -8472,6 +9146,7 @@ export type Mutation = {
     updateCoupon: Coupon;
     /** Update the currently authenticated user's own profile. */
     updateCurrentUserProfile: User;
+    updateDSARStatus: DsarRequest;
     updateDelegation: AppUserDelegation;
     /** Update a member's role */
     updateDeveloperOrgMemberRole: DeveloperOrgMember;
@@ -8572,6 +9247,7 @@ export type Mutation = {
     updateStore: Store;
     /** Update order payment status (called by billing service callback) This is a PUBLIC mutation called by the billing service after payment completion */
     updateStoreOrderPaymentStatus: UpdateStoreOrderPaymentStatusResponse;
+    updateSubprocessor: Subprocessor;
     updateSubscriber: NewsletterSubscriber;
     /** Update access type or discount percentage on an existing subscription entitlement. */
     updateSubscriptionEntitlement: StoreSubscriptionEntitlement;
@@ -8635,6 +9311,8 @@ export type Mutation = {
     validateTokens: TokenValidationResponse;
     /** Verify a billing payment method by charging a small amount (e.g., ₹1) that will be refunded */
     verifyBillingPaymentMethod: VerifyPaymentMethodResponse;
+    /** Verify the subject's identity. `identityProof` must carry a `method` of `magic_link` (with `token`), `idp_step_up` (with `assertion`), or `support_override` (super_admin only, with `reason`). The claim is validated — it is not taken at face value. */
+    verifyDSARIdentity: DsarRequest;
     verifyEmail: EmailVerificationResult;
     verifyMFA: AuthResult;
     /** Verify passkey authentication and login */
@@ -8650,6 +9328,7 @@ export type Mutation = {
     voidInvoice: Invoice;
     /** Vote on a review (helpful/not helpful) */
     voteOnAppReview: AppReviewVote;
+    withdrawConsent: ConsentRecord;
 };
 /** Root mutation type */
 export type MutationAcceptDeveloperOrgInvitationArgs = {
@@ -8687,6 +9366,12 @@ export type MutationActivateSubscriptionForWorkspaceArgs = {
     workspaceId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationActivateSubscriptionForWorkspacesArgs = {
+    billingAccountId: Scalars['ID']['input'];
+    subscriptionId: Scalars['ID']['input'];
+    workspaceIds: Array<Scalars['ID']['input']>;
+};
+/** Root mutation type */
 export type MutationActivateTenantArgs = {
     id: Scalars['ID']['input'];
 };
@@ -8797,12 +9482,6 @@ export type MutationAdjustInventoryArgs = {
     input: AdjustInventoryInput;
 };
 /** Root mutation type */
-export type MutationAdjustProductStockArgs = {
-    delta: Scalars['Int']['input'];
-    id: Scalars['ID']['input'];
-    reason?: InputMaybe<Scalars['String']['input']>;
-};
-/** Root mutation type */
 export type MutationAdminMarkAffiliateConversionArgs = {
     input: RecordAffiliateConversionInput;
 };
@@ -9076,6 +9755,10 @@ export type MutationBulkResumeSchedulesArgs = {
     filter: BulkOperationFilter;
 };
 /** Root mutation type */
+export type MutationBulkSendCustomEmailArgs = {
+    input: BulkSendCustomEmailInput;
+};
+/** Root mutation type */
 export type MutationBulkSendRoundMessageArgs = {
     input: BulkSendRoundMessageInput;
 };
@@ -9084,6 +9767,10 @@ export type MutationBulkSetUserFeatureFlagPreferencesArgs = {
     input: BulkSetUserFeatureFlagPreferenceInput;
 };
 /** Root mutation type */
+export type MutationBulkUpdateApplicationStatusArgs = {
+    input: BulkUpdateApplicationStatusInput;
+};
+/** Root mutation type */
 export type MutationBulkUpdateSchedulesArgs = {
     filter: BulkOperationFilter;
     updates: UpdateScheduledJobInput;
@@ -9093,6 +9780,11 @@ export type MutationBulkUpdateTranslationsArgs = {
     translations: Array<BulkTranslationInput>;
 };
 /** Root mutation type */
+export type MutationCancelDsarArgs = {
+    id: Scalars['ID']['input'];
+    reason?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationCancelDeliveryArgs = {
     attemptId: Scalars['ID']['input'];
 };
@@ -9345,6 +10037,10 @@ export type MutationCreateEntitlementArgs = {
     input: CreateEntitlementInput;
 };
 /** Root mutation type */
+export type MutationCreateExploreShareLinkArgs = {
+    conversationToken: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationCreateFaqArgs = {
     input: CreateFaqInput;
 };
@@ -9578,6 +10274,10 @@ export type MutationCreateScheduledJobArgs = {
     input: CreateScheduledJobInput;
 };
 /** Root mutation type */
+export type MutationCreateSellerOrganizationArgs = {
+    input: CreateDeveloperOrganizationInput;
+};
+/** Root mutation type */
 export type MutationCreateShippingAddressArgs = {
     input: CreateShippingAddressInput;
 };
@@ -9610,6 +10310,10 @@ export type MutationCreateStoreOrderArgs = {
     input: CreateStoreOrderInput;
 };
 /** Root mutation type */
+export type MutationCreateSubprocessorArgs = {
+    input: SubprocessorInput;
+};
+/** Root mutation type */
 export type MutationCreateSubscriptionEntitlementArgs = {
     input: StoreSubscriptionEntitlementInput;
     storeProductId: Scalars['ID']['input'];
@@ -10122,6 +10826,10 @@ export type MutationDeliverNotificationArgs = {
     input: ChannelDeliveryInput;
 };
 /** Root mutation type */
+export type MutationDeliverPushToUserArgs = {
+    input: UserPushDeliveryInput;
+};
+/** Root mutation type */
 export type MutationDeprecateApplicationVersionArgs = {
     id: Scalars['ID']['input'];
 };
@@ -10219,6 +10927,10 @@ export type MutationExecuteJobNowArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationExploreAgentSubmitArgs = {
+    input: ExploreAgentSubmitInput;
+};
+/** Root mutation type */
 export type MutationExportApplicationsArgs = {
     filter?: InputMaybe<ExportApplicationsFilter>;
     format: DevportalExportFormat;
@@ -10273,6 +10985,17 @@ export type MutationFeatureAppReviewArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationFileDsarArgs = {
+    input: FileDsarInput;
+};
+/** Root mutation type */
+export type MutationFlagOrderIssueArgs = {
+    category: OrderIssueCategory;
+    note?: InputMaybe<Scalars['String']['input']>;
+    orderId: Scalars['ID']['input'];
+    organizationId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationFreeUpUsageArgs = {
     billingAccountId: Scalars['ID']['input'];
     description?: InputMaybe<Scalars['String']['input']>;
@@ -10349,6 +11072,10 @@ export type MutationGrantAppWorkspaceAccessArgs = {
     input: GrantAppWorkspaceAccessInput;
 };
 /** Root mutation type */
+export type MutationGrantConsentArgs = {
+    input: GrantConsentInput;
+};
+/** Root mutation type */
 export type MutationGrantCreditsArgs = {
     input: GrantCreditsInput;
 };
@@ -10527,6 +11254,10 @@ export type MutationNewsletterExportSubjectArgs = {
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationNotifyDuplicateApplicantsArgs = {
+    input: NotifyDuplicateApplicantsInput;
+};
+/** Root mutation type */
 export type MutationOpenCircuitBreakerArgs = {
     scope: Scalars['String']['input'];
     scopeValue: Scalars['String']['input'];
@@ -10555,6 +11286,10 @@ export type MutationPermanentlyDeleteScheduleArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationPlaceLegalHoldArgs = {
+    input: PlaceLegalHoldInput;
+};
+/** Root mutation type */
 export type MutationPrepareSupportAttachmentUploadArgs = {
     input: PrepareSupportAttachmentUploadInput;
 };
@@ -10603,6 +11338,14 @@ export type MutationPublishApplicationVersionArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationPublishCatalogNodeVersionArgs = {
+    isFirstPublish?: InputMaybe<Scalars['Boolean']['input']>;
+    nodeType: Scalars['String']['input'];
+    secret: Scalars['String']['input'];
+    version: Scalars['String']['input'];
+    zipUrl: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationPublishFaqArgs = {
     id: Scalars['ID']['input'];
 };
@@ -10705,6 +11448,13 @@ export type MutationRecordConsentArgs = {
     input: RecordConsentInput;
 };
 /** Root mutation type */
+export type MutationRecordDeveloperOrgPickupAddressArgs = {
+    actorId: Scalars['ID']['input'];
+    actorType?: InputMaybe<Scalars['String']['input']>;
+    input: RecordPickupAddressInput;
+    organizationId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationRecordDownloadArgs = {
     ipAddress?: InputMaybe<Scalars['String']['input']>;
     productId: Scalars['String']['input'];
@@ -10715,6 +11465,10 @@ export type MutationRecordEarningEntryArgs = {
     input: RecordEarningEntryInput;
 };
 /** Root mutation type */
+export type MutationRecordExploreClickArgs = {
+    input: RecordExploreClickInput;
+};
+/** Root mutation type */
 export type MutationRecordExternalSettlementArgs = {
     input: RecordExternalSettlementInput;
 };
@@ -10768,10 +11522,15 @@ export type MutationRegisterAppWithAuthServiceArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRegisterCarrierPickupLocationArgs = {
+    input: RegisterCarrierPickupLocationInput;
+};
+/** Root mutation type */
 export type MutationRegisterDeviceTokenArgs = {
     deviceId: Scalars['String']['input'];
     metadata?: InputMaybe<Scalars['JSONObject']['input']>;
     platform: Scalars['String']['input'];
+    productSlug?: InputMaybe<Scalars['String']['input']>;
     token: Scalars['String']['input'];
 };
 /** Root mutation type */
@@ -10848,6 +11607,14 @@ export type MutationRejectWaitlistArgs = {
     input: RejectWaitlistInput;
 };
 /** Root mutation type */
+export type MutationReleaseLegalHoldArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
+export type MutationReleaseSuppressionArgs = {
+    input: ReleaseSuppressionInput;
+};
+/** Root mutation type */
 export type MutationRemoveAgentSkillsArgs = {
     id: Scalars['ID']['input'];
     skills: Array<Scalars['String']['input']>;
@@ -10866,6 +11633,10 @@ export type MutationRemoveDeveloperOrgMemberArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRemoveDeveloperOrgPickupAddressArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationRemoveFromCartArgs = {
     cartItemId: Scalars['String']['input'];
 };
@@ -11047,6 +11818,10 @@ export type MutationRequestCreditWithdrawalArgs = {
     input: RequestCreditWithdrawalInput;
 };
 /** Root mutation type */
+export type MutationRequestDsarIdentityVerificationArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationRequestDeveloperOrgPayoutArgs = {
     organizationId: Scalars['ID']['input'];
     paymentMethodId: Scalars['ID']['input'];
@@ -11134,6 +11909,11 @@ export type MutationResolveInventoryAlertArgs = {
     alertId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationResolveOrderIssueFlagArgs = {
+    id: Scalars['ID']['input'];
+    organizationId?: InputMaybe<Scalars['ID']['input']>;
+};
+/** Root mutation type */
 export type MutationResolveSupportTicketArgs = {
     id: Scalars['ID']['input'];
     resolution?: InputMaybe<Scalars['String']['input']>;
@@ -11180,6 +11960,16 @@ export type MutationResumeScheduledJobArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRetirePushDeviceInternalArgs = {
+    errorCode: Scalars['String']['input'];
+    token: Scalars['String']['input'];
+};
+/** Root mutation type */
+export type MutationRetireSubprocessorArgs = {
+    id: Scalars['ID']['input'];
+    reason?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationRetryBillingOrderCallbackArgs = {
     billingAccountId: Scalars['ID']['input'];
     orderId: Scalars['ID']['input'];
@@ -11193,6 +11983,11 @@ export type MutationRetryImportJobArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationRetryInvoiceGenerationArgs = {
+    billingAccountId: Scalars['ID']['input'];
+    transactionId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationRetryJobExecutionArgs = {
     executionId: Scalars['ID']['input'];
 };
@@ -11346,6 +12141,10 @@ export type MutationSendContextWidgetMessageArgs = {
     input: SendContextWidgetMessageInput;
 };
 /** Root mutation type */
+export type MutationSendExploreMessageArgs = {
+    input: SendExploreMessageInput;
+};
+/** Root mutation type */
 export type MutationSendMagicLinkArgs = {
     context?: InputMaybe<AuthContext>;
     email: Scalars['String']['input'];
@@ -11392,6 +12191,10 @@ export type MutationServiceResolvePayoutAccountArgs = {
     input: ServiceResolvePayoutAccountInput;
 };
 /** Root mutation type */
+export type MutationServiceSyncPayoutStatusArgs = {
+    input: ServiceSyncPayoutStatusInput;
+};
+/** Root mutation type */
 export type MutationSetAgentAwayArgs = {
     message?: InputMaybe<Scalars['String']['input']>;
 };
@@ -11422,6 +12225,10 @@ export type MutationSetDefaultPayoutAccountArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationSetDefaultPickupAddressArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationSetEntitlementSeatLimitArgs = {
     entitlementId: Scalars['ID']['input'];
     maxSeats: Scalars['Int']['input'];
@@ -11571,6 +12378,10 @@ export type MutationSupportExportSubjectArgs = {
     subjectId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationSuppressIdentifierArgs = {
+    input: SuppressIdentifierInput;
+};
+/** Root mutation type */
 export type MutationSuspendAppInstallationArgs = {
     id: Scalars['ID']['input'];
     reason: Scalars['String']['input'];
@@ -11741,6 +12552,7 @@ export type MutationUnpublishTourArgs = {
 /** Root mutation type */
 export type MutationUnregisterDeviceTokenArgs = {
     deviceId: Scalars['String']['input'];
+    productSlug?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root mutation type */
 export type MutationUnshareWorkflowArgs = {
@@ -11887,6 +12699,11 @@ export type MutationUpdateCurrentUserProfileArgs = {
     input: UpdateUserInput;
 };
 /** Root mutation type */
+export type MutationUpdateDsarStatusArgs = {
+    id: Scalars['ID']['input'];
+    input: UpdateDsarStatusInput;
+};
+/** Root mutation type */
 export type MutationUpdateDelegationArgs = {
     id: Scalars['ID']['input'];
     input: UpdateDelegationInput;
@@ -12217,12 +13034,18 @@ export type MutationUpdateStoreOrderPaymentStatusArgs = {
     providerSubscriptions?: InputMaybe<Scalars['String']['input']>;
     status: Scalars['String']['input'];
     subtotal?: InputMaybe<Scalars['Float']['input']>;
+    subtotalExact?: InputMaybe<Scalars['String']['input']>;
     taxAmount?: InputMaybe<Scalars['Float']['input']>;
     taxRate?: InputMaybe<Scalars['Float']['input']>;
     taxType?: InputMaybe<Scalars['String']['input']>;
     transactionId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Root mutation type */
+export type MutationUpdateSubprocessorArgs = {
+    id: Scalars['ID']['input'];
+    input: SubprocessorUpdateInput;
+};
+/** Root mutation type */
 export type MutationUpdateSubscriberArgs = {
     id: Scalars['ID']['input'];
     input: UpdateSubscriberInput;
@@ -12416,6 +13239,11 @@ export type MutationVerifyBillingPaymentMethodArgs = {
     input: VerifyPaymentMethodInput;
 };
 /** Root mutation type */
+export type MutationVerifyDsarIdentityArgs = {
+    id: Scalars['ID']['input'];
+    identityProof: Scalars['JSON']['input'];
+};
+/** Root mutation type */
 export type MutationVerifyEmailArgs = {
     token: Scalars['String']['input'];
 };
@@ -12464,6 +13292,10 @@ export type MutationVoteOnAppReviewArgs = {
     isHelpful: Scalars['Boolean']['input'];
     reviewId: Scalars['ID']['input'];
 };
+/** Root mutation type */
+export type MutationWithdrawConsentArgs = {
+    input: WithdrawConsentInput;
+};
 /** Filter inputs for `myContactInquiries`. Search and email-filter are deliberately not exposed — the query is already scoped to the caller's email, so a full-text search across `name`/`subject` would only surface inquiries the caller already owns. */
 export type MyContactInquiryFilterInput = {
     /** Filter by inquiry category (exact match against the stored string). */
@@ -13203,6 +14035,12 @@ export declare enum NotificationType {
     System = "SYSTEM",
     Transactional = "TRANSACTIONAL"
 }
+export type NotifyDuplicateApplicantsInput = {
+    /** Between 1 and 100 unique application IDs — typically every application returned by jobApplications(filter: { duplicateEmail: true, jobPostingId }). Applications are grouped by email address; an email that appears only once among these IDs is skipped (NOT_DUPLICATE), not treated as an error. */
+    applicationIds: Array<Scalars['ID']['input']>;
+    /** Resend even to an email address already notified. Defaults to false. */
+    force?: InputMaybe<Scalars['Boolean']['input']>;
+};
 /** OAuth authorization URL response */
 export type OAuthAuthorizationUrl = {
     __typename?: 'OAuthAuthorizationUrl';
@@ -13304,6 +14142,8 @@ export type OrderEstimateInput = {
 /** Order fulfillment tracking for physical orders */
 export type OrderFulfillment = {
     __typename?: 'OrderFulfillment';
+    /** Carrier shipment-creation attempt history (every retry, not just the last failure) — for admin debugging of "what happened, why, and how to fix it". */
+    attempts: Array<OrderFulfillmentAttempt>;
     /** When order was cancelled */
     cancelledAt?: Maybe<Scalars['DateTime']['output']>;
     /** Shipping carrier name */
@@ -13364,6 +14204,52 @@ export type OrderFulfillment = {
     trackingUrl?: Maybe<Scalars['String']['output']>;
     updatedAt: Scalars['DateTime']['output'];
 };
+/** One carrier shipment-creation attempt — Temporal retries this up to 5 times; this is the full history behind OrderFulfillment.failureReason (which only ever holds the last attempt's message). */
+export type OrderFulfillmentAttempt = {
+    __typename?: 'OrderFulfillmentAttempt';
+    attemptNumber: Scalars['Int']['output'];
+    carrier: Scalars['String']['output'];
+    /** How long this attempt took */
+    durationMs?: Maybe<Scalars['Int']['output']>;
+    /** Error message, when this attempt failed */
+    errorMessage?: Maybe<Scalars['String']['output']>;
+    /** Carrier's HTTP status code, when available */
+    errorStatusCode?: Maybe<Scalars['Int']['output']>;
+    id: Scalars['ID']['output'];
+    occurredAt: Scalars['DateTime']['output'];
+    succeeded: Scalars['Boolean']['output'];
+};
+export type OrderFulfillmentAttemptsPage = {
+    __typename?: 'OrderFulfillmentAttemptsPage';
+    attempts: Array<OrderFulfillmentAttempt>;
+    totalCount: Scalars['Int']['output'];
+};
+/** Category of a seller-reported problem fulfilling an order. */
+export declare enum OrderIssueCategory {
+    CannotFulfill = "CANNOT_FULFILL",
+    Other = "OTHER",
+    OutOfStock = "OUT_OF_STOCK",
+    WrongAddress = "WRONG_ADDRESS"
+}
+/** A seller-reported problem fulfilling a physical order (e.g. out of stock, cannot fulfill, wrong address). Raised by the org that owns the physical line item(s) on the order; resolvable by admin or the org that raised it. */
+export type OrderIssueFlag = {
+    __typename?: 'OrderIssueFlag';
+    category: OrderIssueCategory;
+    createdAt: Scalars['DateTime']['output'];
+    id: Scalars['ID']['output'];
+    note?: Maybe<Scalars['String']['output']>;
+    orderId: Scalars['String']['output'];
+    /** Developer organization ID that raised this flag */
+    raisedByOrgId: Scalars['String']['output'];
+    resolvedAt?: Maybe<Scalars['DateTime']['output']>;
+    resolvedBy?: Maybe<Scalars['String']['output']>;
+    status: OrderIssueStatus;
+    updatedAt: Scalars['DateTime']['output'];
+};
+export declare enum OrderIssueStatus {
+    Open = "OPEN",
+    Resolved = "RESOLVED"
+}
 /** Shipping estimate for a selected method and destination */
 export type OrderShippingEstimate = {
     __typename?: 'OrderShippingEstimate';
@@ -13921,6 +14807,8 @@ export type PayoutRequest = {
     payoutAccountId?: Maybe<Scalars['ID']['output']>;
     processedAt?: Maybe<Scalars['DateTime']['output']>;
     provider: PayoutProvider;
+    /** See PayoutRequestKind — what approving this request actually does. */
+    requestKind: PayoutRequestKind;
     requestedAmount: Scalars['Float']['output'];
     requesterUserId?: Maybe<Scalars['String']['output']>;
     status: PayoutRequestStatus;
@@ -13940,6 +14828,11 @@ export type PayoutRequestFilterInput = {
     startDate?: InputMaybe<Scalars['DateTime']['input']>;
     status?: InputMaybe<PayoutRequestStatus>;
 };
+/** Distinguishes what approving a PayoutRequest actually does (BOFF-7192) — shown as separate tabs on the admin Payout page so a $35 credit conversion never gets mistaken for a real bank transfer sitting in the same list: - CREDIT_CONVERSION: a developer's "Request Withdrawal" on their Revenue page. Approving one converts the amount straight into earned credits on their billing account — no external payout account involved, no real money moves, and the request completes (PAID) the moment it's approved. - CASH_PAYOUT: everything else (credit withdrawals from /billing/credits/withdraw, store/affiliate payouts, etc.) — real money leaves the platform via the normal approve → process/mark-paid flow. */
+export declare enum PayoutRequestKind {
+    CashPayout = "CASH_PAYOUT",
+    CreditConversion = "CREDIT_CONVERSION"
+}
 export declare enum PayoutRequestStatus {
     Approved = "APPROVED",
     Canceled = "CANCELED",
@@ -14053,6 +14946,13 @@ export type PermissionOverride = {
     validFrom?: Maybe<Scalars['DateTime']['output']>;
     validUntil?: Maybe<Scalars['DateTime']['output']>;
 };
+export type PlaceLegalHoldInput = {
+    reason: Scalars['String']['input'];
+    reference?: InputMaybe<Scalars['String']['input']>;
+    subjectEmail?: InputMaybe<Scalars['String']['input']>;
+    /** At least one of subjectId / subjectEmail is required. */
+    subjectId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type Plan = {
     __typename?: 'Plan';
     /** Additional context */
@@ -14079,6 +14979,8 @@ export type Plan = {
     itemEntitlements?: Maybe<Array<Maybe<SubscriptionEntitlement>>>;
     /** Maximum seats allowed (null = unlimited). */
     maxSeats?: Maybe<Scalars['Int']['output']>;
+    /** Maximum number of distinct workspaces one subscription to this plan can be activated against via activateSubscriptionForWorkspace(s). Each activated workspace gets the FULL per-workspace quota allotment from this plan (not divided across workspaces). Null means today's implicit single-workspace behavior (treated as 1). */
+    maxWorkspaces?: Maybe<Scalars['Int']['output']>;
     /** Minimum seats required for this plan (e.g. 5 for Team tier). Null means no minimum. */
     minSeats?: Maybe<Scalars['Int']['output']>;
     /** The name of the plan (e.g., 'Basic', 'Pro', 'Enterprise'). */
@@ -14341,6 +15243,10 @@ export type PriorityBreakdown = {
     percentage: Scalars['Float']['output'];
     priority: SupportTicketPriority;
 };
+export type PrivacyPaginationInput = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+};
 /** Result of processing a refund */
 export type ProcessRefundResult = {
     __typename?: 'ProcessRefundResult';
@@ -14925,6 +15831,34 @@ export declare enum PurchaseType {
     Order = "ORDER",
     Plan = "PLAN"
 }
+/** Outcome for a single device in a push fan-out. */
+export type PushDeviceDeliveryResult = {
+    __typename?: 'PushDeviceDeliveryResult';
+    /** Channel connection actually used. Null when routing refused to select one — the service never substitutes a different project's connection. */
+    connectionId?: Maybe<Scalars['ID']['output']>;
+    /** Whether this device was retired in the registry as a result of this send. Only set for provider errors that mean the token is permanently dead (UNREGISTERED, or an INVALID_ARGUMENT that names the registration token). Routing and credential faults never retire a device. */
+    deactivated: Scalars['Boolean']['output'];
+    /** Stable per-install device id. */
+    deviceId: Scalars['String']['output'];
+    /** Failure details when `success` is false. */
+    error?: Maybe<ChannelDeliveryError>;
+    /** Firebase project the device's token belongs to. */
+    fcmProject?: Maybe<Scalars['String']['output']>;
+    /** Provider message id when the send succeeded. */
+    messageId?: Maybe<Scalars['ID']['output']>;
+    /** Device platform, or null when the registry row could not be validated. */
+    platform?: Maybe<PushDevicePlatform>;
+    /** Device registry row id. Null when the registry row was rejected as malformed. */
+    registryId?: Maybe<Scalars['ID']['output']>;
+    /** Whether the notification reached this device. */
+    success: Scalars['Boolean']['output'];
+};
+/** Device platform as recorded in the device registry. */
+export declare enum PushDevicePlatform {
+    Android = "ANDROID",
+    Ios = "IOS",
+    Web = "WEB"
+}
 export type PushMfaChallengeResult = {
     __typename?: 'PushMFAChallengeResult';
     challengeId: Scalars['ID']['output'];
@@ -14940,11 +15874,13 @@ export type PushMfaStatus = {
 /** Root query type */
 export type Query = {
     __typename?: 'Query';
-    /** Placeholder field to allow empty Query type extension. Must be @shareable since it exists in multiple subgraphs. */
+    /** Placeholder field so the Query type can be extended. @shareable because every subgraph declares it. */
     _empty?: Maybe<Scalars['String']['output']>;
     /** Health check for the service @rbac(public: true, scopeType: "global") */
     _health: Scalars['String']['output'];
     _newsletterSubscriptionsPlaceholder?: Maybe<Scalars['String']['output']>;
+    /** Placeholder so the Query type exists for the domain files to extend. @shareable because every subgraph declares one. */
+    _privacyHealth?: Maybe<Scalars['String']['output']>;
     /** Get action definitions for a resource type */
     actionDefinitions: Array<ActionDefinition>;
     /** Get all active schedules (for background processing). `limit` clamps the page size (default 100, max 500). `cursor` is the ID of the last schedule from the previous page (keyset pagination ordered by `nextExecutionAt` ascending then `id`). Background workers that need to drain every due schedule should loop calling this query with the returned cursor until fewer-than-`limit` rows come back. Addresses the codex review on PR #35: without cursoring, busy tenants could keep schedules permanently outside the first-page window. */
@@ -14966,6 +15902,8 @@ export type Query = {
     adminAffiliateAnalytics: AffiliateAdminAnalytics;
     adminPayoutRequests: PayoutRequestConnection;
     adminPayoutSummary: PayoutAdminSummary;
+    /** Admin-only: paginated list of physical (fulfillment-tracked) orders, with optional status/search filters. Used by the admin fulfillment console. */
+    adminPhysicalOrders: StoreOrdersResult;
     affiliateCode?: Maybe<AffiliateCode>;
     affiliateCodeAnalytics: AffiliateCodeAnalytics;
     affiliateJourneyEvents: Array<AffiliateJourneyEvent>;
@@ -15012,6 +15950,8 @@ export type Query = {
     /** Internal: get all approved waitlist entries for an email. Used by tenant-svc for product access checks. */
     approvedWaitlistProducts: Array<NewsletterWaitlist>;
     appsActingAsCurrentUser: AppConnection;
+    /** Service-to-service only: verifies the given actor (forwarded explicitly by the calling service, since the gateway-level actor on an internal M2M call is the calling service itself, not the original end user) has at least minRole membership on the organization. Used by global-store-svc's registerCarrierPickupLocation before it registers a pickup address on an org's behalf, closing a trust-boundary gap where any authenticated caller could otherwise attribute a carrier registration to an arbitrary org. */
+    assertDeveloperOrgAccess: Scalars['Boolean']['output'];
     auditLogs: AuditLogConnection;
     /** List auth audit events visible to the current user. Resolver filters by actorId/userId — membership IS the access list. */
     authAuditLogs: AuthAuditLogConnection;
@@ -15035,6 +15975,8 @@ export type Query = {
     cannedResponse?: Maybe<CannedResponse>;
     cannedResponseByShortcut?: Maybe<CannedResponse>;
     cannedResponses: CannedResponseConnection;
+    /** Registered pickup/warehouse addresses across every configured shipping carrier (currently Shiprocket; more may be added later — see listCarrierAdapters) — lets a seller pick a pincode that can actually be booked instead of typing an arbitrary one that checkout will later refuse to ship. Each result is tagged with which carrier it belongs to. Carriers that aren't configured, or that don't support pickup-location listing at all (e.g. the manual carrier), simply contribute nothing — never blocks org configuration. */
+    carrierPickupLocations: Array<CarrierPickupLocation>;
     /** Get a cart by ID (admin or owner only) */
     cart?: Maybe<Cart>;
     /** Get available shipping options for the current cart (caller's own cart) */
@@ -15066,6 +16008,8 @@ export type Query = {
     /** Returns compliance-related audit events (consent changes, suppressions, bounces, complaints) for a given platform product, sorted by most recent first. */
     complianceAuditLog: Array<ComplianceAuditLogEntry>;
     complianceSettings?: Maybe<NewsletterComplianceSettings>;
+    consentLedger: ConsentRecordConnection;
+    consentRecord?: Maybe<ConsentRecord>;
     /** Get all contact inquiries with filtering (authenticated, for superadmins) */
     contactInquiries: ContactInquiryList;
     /** Get a single contact inquiry by ID (authenticated, for superadmins) */
@@ -15102,6 +16046,8 @@ export type Query = {
     developerOrgMember?: Maybe<DeveloperOrgMember>;
     /** List members of an organization */
     developerOrgMembers: DeveloperOrgMemberConnection;
+    /** Get month-by-month revenue trend for an organization, computed directly from sales records (most recent `months` calendar months, oldest first). Used for revenue growth charts on both the developer-facing and admin revenue pages. */
+    developerOrgMonthlyRevenue: Array<DeveloperOrgMonthlyRevenuePoint>;
     /** Get a payment method by ID */
     developerOrgPaymentMethod?: Maybe<DeveloperOrgPaymentMethod>;
     /** List payment methods for an organization */
@@ -15126,12 +16072,15 @@ export type Query = {
     developerOrganization?: Maybe<DeveloperOrganization>;
     /** Get a developer organization by slug */
     developerOrganizationBySlug?: Maybe<DeveloperOrganization>;
-    /** List developer organizations with filters */
+    /** List developer organizations with filters. Membership-scoped (Type C self list): the resolver filters by `members.some(userId: <actor>)` for every non-super_admin caller, so the returned set IS the access control. `scopeType: "self"` therefore only has to reject unauthenticated callers at the gateway. */
     developerOrganizations: DeveloperOrganizationConnection;
     developerProfile?: Maybe<DeveloperProfile>;
     /** Look up a previously-created export job by id. */
     devportalExportJob?: Maybe<DevportalExportJob>;
+    dsarRequest?: Maybe<DsarRequest>;
+    dsarRequests: DsarRequestConnection;
     editorialCollections: Array<EditorialCollection>;
+    effectiveConsent?: Maybe<ConsentRecord>;
     /** Get effective permissions for an actor in a scope */
     effectivePermissions: EffectivePermissions;
     entitlement?: Maybe<ProductEntitlement>;
@@ -15148,6 +16097,24 @@ export type Query = {
     estimateOrderShipping: OrderShippingEstimate;
     /** Evaluate feature flags for the current actor in a workspace context. Used by frontend providers for bulk flag evaluation. Returns OpenFeature-compatible ResolutionDetails for each flag. RBAC is scoped to the target workspace via `input.workspaceId`. */
     evaluateFeatureFlags: FeatureFlagBulkEvaluation;
+    /** One conversation with its full transcript, references, CTAs and clicks. Superadmin only. */
+    exploreAdminConversation?: Maybe<ExploreAdminConversation>;
+    /** Explore conversations for the admin console, newest first by default. Superadmin only. */
+    exploreAdminConversations: ExploreAdminConversationPage;
+    /** Counts and per-product routing for the same filter. Superadmin only. */
+    exploreAdminStats: ExploreAdminStats;
+    /** The corpus catalog: every product and the website pages the agent can cite. */
+    exploreAgentCatalog: ExploreAgentCatalog;
+    /** Poll a submitted turn. Null when the job is unknown or has expired. */
+    exploreAgentJob?: Maybe<ExploreAgentJob>;
+    /** Products, example prompts, welcome copy and limits for the `/explore` page. Never throws — an unreachable agent yields `enabled: false`. */
+    exploreCatalog: ExploreCatalog;
+    /** The conversation's messages, oldest first. */
+    exploreConversationMessages: Array<ExploreMessage>;
+    /** Poll one message. Scoped by `conversationToken`; a token that does not own the message is reported as NOT_FOUND, never FORBIDDEN. */
+    exploreMessage?: Maybe<ExploreMessage>;
+    /** A shared conversation, read-only. Returns the transcript for a `shareToken` and nothing that would let the caller continue or modify the thread. */
+    exploreSharedConversation: Array<ExploreMessage>;
     /** Synchronous super_admin export of organizations as a CSV string. Returns inline CSV (RFC-4180 with CWE-1236 protection) plus row count and a truncated flag indicating the result was capped at the requested limit. */
     exportOrganizationsCsv: OrganizationCsvExport;
     exportSubscribers: Array<ExportSubscriber>;
@@ -15172,8 +16139,9 @@ export type Query = {
     getActiveSubscriptions: Array<BillingSubscription>;
     /** Get the price change history for a specific addon */
     getAddonPriceHistory: Array<AddonPriceHistory>;
-    /** Get all addons, optionally filtered by product and free-plan visibility */
+    /** Get all addons, optionally filtered by product and free-plan visibility. Organization-scoped (BOFF-6512): the caller's org-level role (e.g. Owner / Admin, which already grants billing:ADMIN) is what should gate this, not a separate global grant. Requires x-org-id — set by the gateway from the caller's JWT org_id claim for user tokens, or from a gateway-verified x-org-id header (checked against organization membership) for app / app_as_user tokens. */
     getAllAddOns: Array<Addon>;
+    /** Browse the plan catalog (e.g. the upgrade-subscription flow). Self-scoped — any authenticated actor may read it; the catalog itself isn't actor-owned data, so there's nothing further to scope. Previously scopeType "global", which no regular user role is ever assigned at (only Authenticated User — billing:NONE — and Platform Superadmin hold a global-scoped role), so this field was unreachable for every non-superadmin user (BOFF-6512). */
     getAllPlans: Array<Plan>;
     getAllQuotas: Array<Quota>;
     getAllQuotasAssignment: PaginatedQuotaAssignments;
@@ -15196,6 +16164,10 @@ export type Query = {
     getBillingNotifications: Array<BillingNotification>;
     /** Get a billing order by ID */
     getBillingOrder?: Maybe<BillingOrder>;
+    /** Paginated, filterable view of ALL BillingOrder callback deliveries (not just FAILED ones) — the admin ops log/debug viewer for the billing→external service (store, etc.) order-completion handoff, mirroring getBillingWebhookLogs for the inbound provider webhook side. */
+    getBillingOrderCallbacks: BillingOrderCallbacksPage;
+    /** Paginated, filterable view of ALL BillingWebhookLog rows (not just payment-succeeded refund candidates) — the admin ops log/alert viewer for Stripe/Razorpay webhook processing. */
+    getBillingWebhookLogs: BillingWebhookLogsPage;
     /** Get a channel by ID */
     getChannel?: Maybe<Channel>;
     getChannelConnectionTags: Array<ChannelConnectionTagAssignment>;
@@ -15296,6 +16268,7 @@ export type Query = {
     getPayments: Array<Payment>;
     /** Get pending refund records (shortcut for admin dashboard) */
     getPendingRefunds: PaginatedRefundRecords;
+    /** Fetch a single plan's public details/features (e.g. selecting a plan to upgrade to). Same fix and reasoning as getAllPlans above (BOFF-6512): scopeType "global" is unreachable for every non-superadmin user, and a plan's catalog data isn't actor-owned, so there's nothing to scope beyond "is this caller authenticated". */
     getPlan: Plan;
     /** Get all entitlements for a specific plan */
     getPlanEntitlements: Array<SubscriptionEntitlement>;
@@ -15315,12 +16288,13 @@ export type Query = {
     getReferralCodeByCode?: Maybe<ReferralCode>;
     /** Get a single refund record by ID */
     getRefundRecord?: Maybe<RefundRecord>;
-    /** Get refund records with filters and pagination (for admin dashboard). Uses orgId from context by default. Super admins can override with orgIdFilter. */
+    /** Get refund records with filters and pagination (for admin dashboard). Uses orgId from context by default. Super admins can override with orgIdFilter. hasError: true restricts to refunds carrying a non-null errorMessage — an unresolved accounting/reconciliation issue on an otherwise-completed refund (e.g. a Zoho credit-note refund that couldn't be recorded). Powers the admin refund-issue log, independent of status. search: free-text, case-insensitive substring match against the refund record id, the originating transaction id, the gateway payment id, and the gateway refund id — lets an admin trace a specific purchase's refund by whichever identifier they have on hand. */
     getRefundRecords: PaginatedRefundRecords;
     /** Get refund statistics (counts and amounts) */
     getRefundStats: RefundStats;
     /** Get SSO/SAML configuration for a tenant. Returns the full SSOConfig, which includes the SAML signing certificate and IdP endpoints — secret/credential material. Gated to global scope so only a super_admin / global-scope grant (and the trusted service actor) can read it; tenant admins are further narrowed to their own tenant inside the resolver. Pre-auth login pages MUST NOT read this — use `isSSOEnabled` for discovery. */
     getSSOConfig?: Maybe<SsoConfig>;
+    /** Get specific addons by ID. Organization-scoped — see getAllAddOns. */
     getSelectedAddons: Array<Addon>;
     /** Resolve the active per-user storage cap for an org. Used by file-storage services to enforce per-user quotas at upload. Falls back to the platform default (50MB free / 5GB paid) when no override is configured. */
     getStorageLimitForOrg: StorageLimit;
@@ -15334,12 +16308,12 @@ export type Query = {
     getStoreProductTags: Array<StoreProductTagAssignment>;
     /** Get a subscription by ID */
     getSubscription?: Maybe<BillingSubscription>;
-    /** Enhanced subscription overview with better pagination and filtering @param includeExpired - Include past/canceled/expired subscriptions (default: false) @param onlyExpired - Only fetch past subscriptions for lazy loading (default: false) @param searchQuery - Search quotas by name in database (case-insensitive) */
+    /** Enhanced subscription overview with better pagination and filtering @param includeExpired - Include past/canceled/expired subscriptions (default: false) @param onlyExpired - Only fetch past subscriptions for lazy loading (default: false) @param searchQuery - Search quotas by name in database (case-insensitive) @param productId - Restrict to subscriptions for this product (falls back to the requesting product's context when omitted). A billing account carries an active free-plan subscription for every product on the platform, so leaving this unscoped surfaces every other product's subscriptions alongside the caller's own. */
     getSubscriptionUsageOverview?: Maybe<Array<SubscriptionWithQuotas>>;
     getSubscriptionUsages: SubscriptionQuotaUsageWithFilter;
     /** Get tax rates */
     getTaxRates: Array<TaxRate>;
-    /** Get a single transaction by ID (used for refund pre-fill) */
+    /** Get a single transaction by ID (used for refund pre-fill). billingAccountId is optional and only cross-checked when supplied — the whole point of this lookup is finding a transaction (and its billing account) from just its ID. */
     getTransaction?: Maybe<Transaction>;
     /** Get transactions for a billing account with basic account info (paginated) */
     getTransactionsByBillingAccount: PaginatedBillingAccountTransactions;
@@ -15387,6 +16361,7 @@ export type Query = {
     isEmailSuppressed: Scalars['Boolean']['output'];
     /** Public pre-auth discovery probe: whether SAML SSO is enabled for a tenant. Returns ONLY a boolean (no certificate, endpoints, or other secret material) so an unauthenticated login page can decide whether to offer an SSO button. */
     isSSOEnabled: Scalars['Boolean']['output'];
+    isSuppressed: SuppressionCheckResult;
     /** Get a single job application by ID (admin). */
     jobApplication?: Maybe<JobApplication>;
     /** Get all interview rounds for a job application (admin). */
@@ -15415,6 +16390,7 @@ export type Query = {
     language?: Maybe<Language>;
     languageByCode?: Maybe<Language>;
     languages: LanguageList;
+    legalHolds: LegalHoldConnection;
     /** List coupons with optional filters */
     listCoupons: CouponsListResponse;
     /** List all promotions (admin only) */
@@ -15560,6 +16536,10 @@ export type Query = {
     orderEstimate?: Maybe<OrderEstimate>;
     /** Get fulfillment details for an order */
     orderFulfillment?: Maybe<OrderFulfillment>;
+    /** Admin-only: paginated log of carrier shipment-creation attempts across all orders (every Temporal retry, not just the last failure), so ops can debug fulfillment failures without direct DB/log access. */
+    orderFulfillmentAttempts: OrderFulfillmentAttemptsPage;
+    /** Get seller-reported issue flags for an order */
+    orderIssueFlags: Array<OrderIssueFlag>;
     /** Get a single organization by ID */
     organization?: Maybe<Organization>;
     /** Paginated keyset connection over the persistent OrganizationAuditLog table. Returns audit events for a single organization, newest first. Supports optional filtering by `action` (event name) and `actorId`. */
@@ -15568,10 +16548,14 @@ export type Query = {
     organizationBySlug?: Maybe<Organization>;
     /** Get pending invites for an organization (admin view) */
     organizationInvites: OrganizationInviteList;
+    /** Lightweight org-kind lookup used by global-store-svc (service actor) to validate a physical-product listing is being created under a PHYSICAL org before it accepts the write. Returns null if the org doesn't exist. `kind` is not sensitive, so this is public the same way installableApplicationVersions is. See DeveloperOrgKind (BOFF-7285). */
+    organizationKind?: Maybe<DeveloperOrgKind>;
     /** Resolve human-friendly identities for users who are active members of the target organization and visible to the current actor. */
     organizationMemberIdentities: Array<OrganizationMemberIdentity>;
     /** Get members of an organization */
     organizationMembers: OrganizationMemberList;
+    /** M2M lookup for global-store-svc's shipping-cost quote pipeline: the org's active pickup postal code — the default DeveloperOrgPickupAddress's postalCode, falling back to the legacy pickupPostalCode scalar for orgs that set one before DeveloperOrgPickupAddress existed, then null (caller falls back to the linked billing account's address, then a platform-wide default). */
+    organizationPickupPostalCode?: Maybe<Scalars['String']['output']>;
     organizationScheduleQuotas: OrganizationScheduleQuotas;
     payoutRunHistory: Array<PayoutRunLog>;
     pendingDeveloperOrganizationVerifications: DeveloperOrganizationConnection;
@@ -15630,6 +16614,8 @@ export type Query = {
     publicJobPosting?: Maybe<PublicJobPosting>;
     /** List OPEN job postings for public careers pages (no authentication required). */
     publicJobPostings: Array<PublicJobPosting>;
+    /** List OPEN + CLOSED job postings (id/title/slug only) for the public assignment-submission position picker — closing a posting stops new applicants but must not block an existing candidate from selecting it to submit their take-home (no authentication required). */
+    publicJobPostingsForSubmission: Array<PublicJobPosting>;
     /** Get all active plans for a specific product (public, no authentication required). Used by product website pricing pages. Only returns active plans with their features. */
     publicPlans: Array<Plan>;
     /** List public press kit assets for a product (no auth required). Only returns assets with visibility=PUBLIC. */
@@ -15642,6 +16628,8 @@ export type Query = {
     publicResolvedContentPage?: Maybe<ProductContentPage>;
     publicScheduleTemplates: ScheduleTemplateConnection;
     publishedProducts: Array<StoreProduct>;
+    /** The push-routable devices a user has for one product, newest-first. Every row carries the `fcmProject` whose credentials can reach its `token`; rows with no project, and rows not refreshed inside the staleness window, are excluded. Service-to-service only — this is the read global-channel-svc makes before a send, on behalf of the notification's recipient. It therefore takes an explicit `userId`, which is exactly why it is NOT `scopeType: "self"`: a self gate is an authentication check only, so a self-scoped field taking a `userId` would let any signed-in user enumerate anyone's devices. `actorTypes` denies user/app callers at the gateway before any permission round-trip, and the resolver re-checks the actor type for the internal-gateway path (which runs no RBAC middleware). */
+    pushDevicesForUserInternal: Array<DeviceToken>;
     /** Cost-weighted AI credits for one assistant turn, computed from the given model's token prices (USD/1M) and the credit baseline. Unknown models fall back to the `*default*` price row. */
     quoteAiCredits: Scalars['Int']['output'];
     /** Get RBAC analytics for a scope within a date range */
@@ -15718,6 +16706,8 @@ export type Query = {
     storeProductDetails: StoreProductDetailsResult;
     /** List all stores the caller can see. */
     stores: Array<Store>;
+    subprocessor?: Maybe<Subprocessor>;
+    subprocessors: SubprocessorConnection;
     subscriber?: Maybe<NewsletterSubscriber>;
     subscriberByEmail?: Maybe<NewsletterSubscriber>;
     subscriberConsents: Array<NewsletterConsent>;
@@ -15731,6 +16721,8 @@ export type Query = {
     supportTicket?: Maybe<SupportTicket>;
     supportTicketByNumber?: Maybe<SupportTicket>;
     supportTickets: SupportTicketConnection;
+    suppressionEntry?: Maybe<SuppressionEntry>;
+    suppressionList: SuppressionEntryConnection;
     suppressions: Array<NewsletterSuppression>;
     surveyByTicket?: Maybe<CustomerSatisfactionSurvey>;
     /** Fetch one outbox entry by id (includes the full payload for inspection). */
@@ -15914,6 +16906,13 @@ export type QueryAdminPayoutSummaryArgs = {
     filter?: InputMaybe<PayoutRequestFilterInput>;
 };
 /** Root query type */
+export type QueryAdminPhysicalOrdersArgs = {
+    limit: Scalars['Int']['input'];
+    page: Scalars['Int']['input'];
+    search?: InputMaybe<Scalars['String']['input']>;
+    status?: InputMaybe<OrderStatus>;
+};
+/** Root query type */
 export type QueryAffiliateCodeArgs = {
     id: Scalars['ID']['input'];
 };
@@ -16069,6 +17068,13 @@ export type QueryAppsActingAsCurrentUserArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
 /** Root query type */
+export type QueryAssertDeveloperOrgAccessArgs = {
+    actorId: Scalars['ID']['input'];
+    actorType?: InputMaybe<Scalars['String']['input']>;
+    minRole?: InputMaybe<Scalars['String']['input']>;
+    organizationId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryAuditLogsArgs = {
     actorId?: InputMaybe<Scalars['ID']['input']>;
     limit?: InputMaybe<Scalars['Int']['input']>;
@@ -16251,6 +17257,15 @@ export type QueryComplianceSettingsArgs = {
     platformProductId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryConsentLedgerArgs = {
+    filter?: InputMaybe<ConsentLedgerFilter>;
+    pagination?: InputMaybe<PrivacyPaginationInput>;
+};
+/** Root query type */
+export type QueryConsentRecordArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryContactInquiriesArgs = {
     filter?: InputMaybe<ContactInquiryFilterInput>;
     limit?: InputMaybe<Scalars['Int']['input']>;
@@ -16353,6 +17368,11 @@ export type QueryDeveloperOrgMembersArgs = {
     role?: InputMaybe<DeveloperOrgRole>;
 };
 /** Root query type */
+export type QueryDeveloperOrgMonthlyRevenueArgs = {
+    months?: InputMaybe<Scalars['Int']['input']>;
+    organizationId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryDeveloperOrgPaymentMethodArgs = {
     id: Scalars['ID']['input'];
 };
@@ -16425,6 +17445,7 @@ export type QueryDeveloperOrganizationBySlugArgs = {
 export type QueryDeveloperOrganizationsArgs = {
     isCertified?: InputMaybe<Scalars['Boolean']['input']>;
     isVerified?: InputMaybe<Scalars['Boolean']['input']>;
+    kind?: InputMaybe<DeveloperOrgKind>;
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
     partnerTier?: InputMaybe<PartnerTier>;
@@ -16439,10 +17460,24 @@ export type QueryDevportalExportJobArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryDsarRequestArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QueryDsarRequestsArgs = {
+    filter?: InputMaybe<DsarFilter>;
+    pagination?: InputMaybe<PrivacyPaginationInput>;
+};
+/** Root query type */
 export type QueryEditorialCollectionsArgs = {
     storeId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Root query type */
+export type QueryEffectiveConsentArgs = {
+    purpose: ConsentPurpose;
+    subjectId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryEffectivePermissionsArgs = {
     actorId: Scalars['String']['input'];
     actorType: ActorType;
@@ -16491,6 +17526,44 @@ export type QueryEvaluateFeatureFlagsArgs = {
     input: EvaluateFeatureFlagsInput;
 };
 /** Root query type */
+export type QueryExploreAdminConversationArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QueryExploreAdminConversationsArgs = {
+    filter?: InputMaybe<ExploreAdminFilter>;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    sort?: InputMaybe<ExploreAdminSort>;
+};
+/** Root query type */
+export type QueryExploreAdminStatsArgs = {
+    filter?: InputMaybe<ExploreAdminFilter>;
+};
+/** Root query type */
+export type QueryExploreAgentJobArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QueryExploreCatalogArgs = {
+    productSlug?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root query type */
+export type QueryExploreConversationMessagesArgs = {
+    conversationToken: Scalars['String']['input'];
+    limit?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
+export type QueryExploreMessageArgs = {
+    conversationToken: Scalars['String']['input'];
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QueryExploreSharedConversationArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    shareToken: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryExportOrganizationsCsvArgs = {
     filter?: InputMaybe<OrganizationFilterInput>;
     limit?: InputMaybe<Scalars['Int']['input']>;
@@ -16629,6 +17702,22 @@ export type QueryGetBillingOrderArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryGetBillingOrderCallbacksArgs = {
+    callbackStatus?: InputMaybe<Scalars['String']['input']>;
+    externalService?: InputMaybe<Scalars['String']['input']>;
+    hasError?: InputMaybe<Scalars['Boolean']['input']>;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Root query type */
+export type QueryGetBillingWebhookLogsArgs = {
+    hasError?: InputMaybe<Scalars['Boolean']['input']>;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    processed?: InputMaybe<Scalars['Boolean']['input']>;
+    provider?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root query type */
 export type QueryGetChannelArgs = {
     id: Scalars['ID']['input'];
 };
@@ -16925,10 +18014,12 @@ export type QueryGetRefundRecordArgs = {
 export type QueryGetRefundRecordsArgs = {
     billingAccountId?: InputMaybe<Scalars['String']['input']>;
     fromDate?: InputMaybe<Scalars['DateTime']['input']>;
+    hasError?: InputMaybe<Scalars['Boolean']['input']>;
     orgIdFilter?: InputMaybe<Scalars['String']['input']>;
     page?: InputMaybe<Scalars['Int']['input']>;
     pageSize?: InputMaybe<Scalars['Int']['input']>;
     provider?: InputMaybe<Scalars['String']['input']>;
+    search?: InputMaybe<Scalars['String']['input']>;
     source?: InputMaybe<RefundSource>;
     status?: InputMaybe<RefundRecordStatus>;
     toDate?: InputMaybe<Scalars['DateTime']['input']>;
@@ -16979,6 +18070,7 @@ export type QueryGetSubscriptionUsageOverviewArgs = {
     onlyExpired?: InputMaybe<Scalars['Boolean']['input']>;
     page?: InputMaybe<Scalars['Int']['input']>;
     pageSize?: InputMaybe<Scalars['Int']['input']>;
+    productId?: InputMaybe<Scalars['ID']['input']>;
     searchQuery?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root query type */
@@ -16999,7 +18091,7 @@ export type QueryGetTaxRatesArgs = {
 };
 /** Root query type */
 export type QueryGetTransactionArgs = {
-    billingAccountId: Scalars['ID']['input'];
+    billingAccountId?: InputMaybe<Scalars['ID']['input']>;
     id: Scalars['ID']['input'];
 };
 /** Root query type */
@@ -17136,6 +18228,12 @@ export type QueryIsSsoEnabledArgs = {
     tenantId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryIsSuppressedArgs = {
+    channel: SuppressionChannel;
+    identifier: Scalars['String']['input'];
+    identifierType: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryJobApplicationArgs = {
     id: Scalars['ID']['input'];
 };
@@ -17221,6 +18319,11 @@ export type QueryLanguagesArgs = {
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QueryLegalHoldsArgs = {
+    filter?: InputMaybe<LegalHoldFilter>;
+    pagination?: InputMaybe<PrivacyPaginationInput>;
+};
+/** Root query type */
 export type QueryListCouponsArgs = {
     filter?: InputMaybe<CouponFilterInput>;
     limit?: InputMaybe<Scalars['Int']['input']>;
@@ -17583,6 +18686,18 @@ export type QueryOrderFulfillmentArgs = {
     orderId: Scalars['ID']['input'];
 };
 /** Root query type */
+export type QueryOrderFulfillmentAttemptsArgs = {
+    carrier?: InputMaybe<Scalars['String']['input']>;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    orderId?: InputMaybe<Scalars['ID']['input']>;
+    succeeded?: InputMaybe<Scalars['Boolean']['input']>;
+};
+/** Root query type */
+export type QueryOrderIssueFlagsArgs = {
+    orderId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryOrganizationArgs = {
     id: Scalars['ID']['input'];
 };
@@ -17607,6 +18722,10 @@ export type QueryOrganizationInvitesArgs = {
     organizationId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryOrganizationKindArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryOrganizationMemberIdentitiesArgs = {
     organizationId: Scalars['String']['input'];
     userIds: Array<Scalars['ID']['input']>;
@@ -17618,6 +18737,10 @@ export type QueryOrganizationMembersArgs = {
     organizationId: Scalars['String']['input'];
 };
 /** Root query type */
+export type QueryOrganizationPickupPostalCodeArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryPendingDeveloperOrganizationVerificationsArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -17797,6 +18920,12 @@ export type QueryPublicJobPostingsArgs = {
     productId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Root query type */
+export type QueryPublicJobPostingsForSubmissionArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    productId?: InputMaybe<Scalars['ID']['input']>;
+};
+/** Root query type */
 export type QueryPublicPlansArgs = {
     productId: Scalars['String']['input'];
 };
@@ -17835,6 +18964,11 @@ export type QueryPublishedProductsArgs = {
     type?: InputMaybe<ProductType>;
 };
 /** Root query type */
+export type QueryPushDevicesForUserInternalArgs = {
+    productSlug: Scalars['String']['input'];
+    userId: Scalars['ID']['input'];
+};
+/** Root query type */
 export type QueryQuoteAiCreditsArgs = {
     inputTokens: Scalars['Int']['input'];
     model: Scalars['String']['input'];
@@ -18058,6 +19192,15 @@ export type QueryStoresArgs = {
     type?: InputMaybe<StoreType>;
 };
 /** Root query type */
+export type QuerySubprocessorArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QuerySubprocessorsArgs = {
+    filter?: InputMaybe<SubprocessorFilter>;
+    pagination?: InputMaybe<PrivacyPaginationInput>;
+};
+/** Root query type */
 export type QuerySubscriberArgs = {
     id: Scalars['ID']['input'];
 };
@@ -18120,6 +19263,15 @@ export type QuerySupportTicketsArgs = {
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QuerySuppressionEntryArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QuerySuppressionListArgs = {
+    filter?: InputMaybe<SuppressionFilter>;
+    pagination?: InputMaybe<PrivacyPaginationInput>;
+};
+/** Root query type */
 export type QuerySuppressionsArgs = {
     filter?: InputMaybe<SuppressionFilterInput>;
     limit?: InputMaybe<Scalars['Int']['input']>;
@@ -18859,6 +20011,21 @@ export type RecordEarningEntryInput = {
     sourceSubcategory?: InputMaybe<Scalars['String']['input']>;
     unitType?: InputMaybe<EarningUnitType>;
 };
+/** One visitor following a link an answer offered. The conversion signal explore did not have: every answer was recorded, but not whether anyone acted on one. Anonymous like the rest of explore — the visitor is an ipHash, never an IP — and the URL is re-validated against the catalog allow-list on write, so a forged client cannot inject arbitrary URLs into our analytics. */
+export type RecordExploreClickInput = {
+    /** Bearer secret for the conversation the click belongs to. */
+    conversationToken: Scalars['String']['input'];
+    /** CTA or REFERENCE. */
+    kind: Scalars['String']['input'];
+    /** The assistant message whose link was followed. */
+    messageId: Scalars['ID']['input'];
+    /** Destination followed. Must be a link that message actually offered. */
+    url: Scalars['String']['input'];
+};
+export type RecordExploreClickResult = {
+    __typename?: 'RecordExploreClickResult';
+    recorded: Scalars['Boolean']['output'];
+};
 export type RecordExternalSettlementInput = {
     /** Settlement amount in whole currency units (must be > 0). */
     amount: Scalars['Float']['input'];
@@ -18880,6 +20047,20 @@ export type RecordNotificationActionInput = {
     metadata?: InputMaybe<Scalars['JSON']['input']>;
     notificationId: Scalars['ID']['input'];
 };
+export type RecordPickupAddressInput = {
+    address: Scalars['String']['input'];
+    addressLine2?: InputMaybe<Scalars['String']['input']>;
+    carrier: Scalars['String']['input'];
+    carrierLocationLabel: Scalars['String']['input'];
+    city: Scalars['String']['input'];
+    country: Scalars['String']['input'];
+    email: Scalars['String']['input'];
+    isDefault?: InputMaybe<Scalars['Boolean']['input']>;
+    name: Scalars['String']['input'];
+    phone: Scalars['String']['input'];
+    postalCode: Scalars['String']['input'];
+    state: Scalars['String']['input'];
+};
 export type RecordProductVisitInput = {
     /** Optional: app URL the user landed on. Used as CTA target in the welcome email. Defaults to https://app.<slug>.com when omitted. */
     appUrl?: InputMaybe<Scalars['String']['input']>;
@@ -18900,7 +20081,7 @@ export type RecordProductVisitResult = {
     welcomeEmailStatus: Scalars['String']['output'];
 };
 export type RecordSaleInput = {
-    applicationId: Scalars['ID']['input'];
+    applicationId?: InputMaybe<Scalars['ID']['input']>;
     buyerOrgId?: InputMaybe<Scalars['ID']['input']>;
     buyerTenantId?: InputMaybe<Scalars['ID']['input']>;
     buyerUserId: Scalars['ID']['input'];
@@ -19115,6 +20296,22 @@ export declare enum RefundStatus {
     Pending = "PENDING",
     Succeeded = "SUCCEEDED"
 }
+/** A seller's real pickup address, to be registered with a shipping carrier (see registerCarrierPickupLocation). `carrier` selects which configured carrier adapter to register it with — carrier-agnostic by design, since more providers than Shiprocket may be added over time. */
+export type RegisterCarrierPickupLocationInput = {
+    address: Scalars['String']['input'];
+    addressLine2?: InputMaybe<Scalars['String']['input']>;
+    carrier: Scalars['String']['input'];
+    city: Scalars['String']['input'];
+    country: Scalars['String']['input'];
+    email: Scalars['String']['input'];
+    /** Contact person at this address. */
+    name: Scalars['String']['input'];
+    /** The DeveloperOrganization this address is being registered for. Verified via a cross-service call to global-devportal-svc's assertDeveloperOrgAccess before any carrier API call is made. */
+    organizationId: Scalars['ID']['input'];
+    phone: Scalars['String']['input'];
+    postalCode: Scalars['String']['input'];
+    state: Scalars['String']['input'];
+};
 export type RegisterProductAssetInput = {
     caption?: InputMaybe<Scalars['String']['input']>;
     fileName?: InputMaybe<Scalars['String']['input']>;
@@ -19174,6 +20371,11 @@ export declare enum ReleaseStatus {
     RolledBack = "ROLLED_BACK",
     RollingOut = "ROLLING_OUT"
 }
+export type ReleaseSuppressionInput = {
+    channel: SuppressionChannel;
+    identifier: Scalars['String']['input'];
+    identifierType: Scalars['String']['input'];
+};
 export type ReleaseTrack = {
     __typename?: 'ReleaseTrack';
     createdAt: Scalars['DateTime']['output'];
@@ -19308,6 +20510,8 @@ export type RetrySyncOutboxResult = {
 /** Revenue summary for dashboard */
 export type RevenueSummary = {
     __typename?: 'RevenueSummary';
+    /** ISO 4217 currency code these totals are denominated in — derived from the org's DeveloperOrgSale rows (the dominant currency by sale count). Orgs are expected to transact in one currency; if an org's sales genuinely span multiple currencies, only the dominant one is reflected here. */
+    currency: Scalars['String']['output'];
     nextPayoutAmount?: Maybe<Scalars['Float']['output']>;
     nextPayoutDate?: Maybe<Scalars['DateTime']['output']>;
     pendingBalance: Scalars['Float']['output'];
@@ -19903,6 +21107,15 @@ export type SeedCollabkinUserToursResult = {
     updatedCount: Scalars['Int']['output'];
     workspaceId: Scalars['String']['output'];
 };
+export type SeedCoolAndLovelyUserToursResult = {
+    __typename?: 'SeedCoolAndLovelyUserToursResult';
+    createdCount: Scalars['Int']['output'];
+    productId: Scalars['String']['output'];
+    totalCount: Scalars['Int']['output'];
+    tours: Array<SeededUserTourResult>;
+    updatedCount: Scalars['Int']['output'];
+    workspaceId: Scalars['String']['output'];
+};
 export type SeedFluidgridsUserToursResult = {
     __typename?: 'SeedFluidgridsUserToursResult';
     createdCount: Scalars['Int']['output'];
@@ -19969,6 +21182,31 @@ export type SendContextWidgetMessagePayload = {
     messageId?: Maybe<Scalars['ID']['output']>;
     success: Scalars['Boolean']['output'];
 };
+export type SendExploreMessageInput = {
+    /** Files attached as extra context. At most 5, each at most 10 MB. Limits are re-checked server-side — the client's are for feedback, not enforcement. */
+    attachments?: InputMaybe<Array<ExploreAttachmentInput>>;
+    /** Omit to start a new conversation. The result's `conversation.token` is the secret to send back on every following turn. */
+    conversationToken?: InputMaybe<Scalars['String']['input']>;
+    /** BCP-47 locale of the page (e.g. "en-US"). */
+    locale?: InputMaybe<Scalars['String']['input']>;
+    /** The visitor's question. */
+    message: Scalars['String']['input'];
+    /** Absolute URL of the page the visitor asked from. */
+    pageUrl?: InputMaybe<Scalars['String']['input']>;
+    /** Slug of the product website the visitor is on (a soft hint for the agent). */
+    productSlug?: InputMaybe<Scalars['String']['input']>;
+    /** reCAPTCHA v3 token — required only when `exploreCatalog.captchaRequired`. */
+    recaptchaToken?: InputMaybe<Scalars['String']['input']>;
+};
+export type SendExploreMessageResult = {
+    __typename?: 'SendExploreMessageResult';
+    /** Poll THIS id via `exploreMessage(conversationToken, id)` until `status` is COMPLETED or FAILED. */
+    assistantMessage: ExploreMessage;
+    conversation: ExploreConversation;
+    /** Messages left for this IP in the current window, when known. */
+    remainingToday?: Maybe<Scalars['Int']['output']>;
+    userMessage: ExploreMessage;
+};
 /** Input for sending a message to a channel (for bot conversations) */
 export type SendMessageInput = {
     /** Attachments (images, files, etc.) */
@@ -20055,6 +21293,14 @@ export type ServiceResolvePayoutAccountInput = {
     /** Destination type for a newly-created placeholder account (defaults to BANK_ACCOUNT). */
     type?: InputMaybe<PayoutAccountType>;
 };
+export type ServiceSyncPayoutStatusInput = {
+    externalReference?: InputMaybe<Scalars['String']['input']>;
+    failureReason?: InputMaybe<Scalars['String']['input']>;
+    /** The billing PayoutRequest's sourceIdempotencyKey, formatted "devportal:payout:<DeveloperOrgPayout id>" — the id segment identifies which local payout row to update. */
+    sourceIdempotencyKey: Scalars['String']['input'];
+    /** The billing PayoutRequestStatus after the change (e.g. APPROVED, REJECTED, PAID, FAILED). */
+    status: Scalars['String']['input'];
+};
 /** An active user session (login instance) */
 export type Session = {
     __typename?: 'Session';
@@ -20630,23 +21876,38 @@ export type StoreItem = {
 };
 /** Line item representing a single product in an order */
 export type StoreLineItemInput = {
-    /** Item type (DIGITAL, PHYSICAL, or BUNDLE). Defaults to DIGITAL if not provided. */
+    /**
+     * Item type is derived from the catalog product nature.
+     * @deprecated The server derives itemType from product nature
+     */
     itemType?: InputMaybe<Scalars['String']['input']>;
-    /** Product name at time of purchase (for historical accuracy) */
-    name: Scalars['String']['input'];
-    /** Pricing model for subscription awareness (FREE, PAID_ONETIME, SUBSCRIPTION) */
+    /**
+     * Product name is retained only for backwards-compatible clients. The store resolves the authoritative name from productId and variantId.
+     * @deprecated The server resolves product and variant names
+     */
+    name?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Pricing model is derived from the catalog.
+     * @deprecated The server derives pricingModel from the catalog
+     */
     pricingModel?: InputMaybe<Scalars['String']['input']>;
     /** Store product ID */
     productId: Scalars['String']['input'];
     /** Quantity of this item */
     quantity: Scalars['Int']['input'];
-    /** Subtotal for this line item (unitPrice * quantity) */
-    subtotal: Scalars['Float']['input'];
-    /** Unit price for one item (before quantity) */
-    unitPrice: Scalars['Float']['input'];
+    /**
+     * Subtotal is calculated by the server.
+     * @deprecated The server calculates subtotal
+     */
+    subtotal?: InputMaybe<Scalars['Float']['input']>;
+    /**
+     * Unit price is derived from the catalog or variant price.
+     * @deprecated The server resolves unitPrice from the catalog
+     */
+    unitPrice?: InputMaybe<Scalars['Float']['input']>;
     /** Product variant ID if applicable */
     variantId?: InputMaybe<Scalars['String']['input']>;
-    /** Product version at time of purchase */
+    /** Product version is retained as display metadata only. */
     version?: InputMaybe<Scalars['String']['input']>;
 };
 /** External entity stub for StoreOrder from store-svc. Federation gateway will resolve full StoreOrder data from store-svc. Used by: BillingAccount.storeOrders (if extended), Transaction.storeOrder */
@@ -20665,6 +21926,8 @@ export type StoreOrder = {
     /** Fulfillment tracking for physical orders */
     fulfillment?: Maybe<OrderFulfillment>;
     id: Scalars['ID']['output'];
+    /** Seller-reported issues on this order (e.g. out of stock, cannot fulfill). */
+    issueFlags: Array<OrderIssueFlag>;
     /** Array of line items in this order */
     lineItems: Scalars['JSON']['output'];
     metadata?: Maybe<Scalars['JSON']['output']>;
@@ -20736,8 +21999,6 @@ export type StoreProduct = {
     documentationUrl?: Maybe<Scalars['String']['output']>;
     downloads: Scalars['Int']['output'];
     entitlements: Array<ProductEntitlement>;
-    /** Expiry date for perishable goods (physical products) — null if not applicable */
-    expiryDate?: Maybe<Scalars['DateTime']['output']>;
     featured: Scalars['Boolean']['output'];
     /** Product height (physical products) */
     height?: Maybe<Scalars['Float']['output']>;
@@ -20773,6 +22034,8 @@ export type StoreProduct = {
     publishedAt?: Maybe<Scalars['DateTime']['output']>;
     publisher?: Maybe<Publisher>;
     publisherId: Scalars['String']['output'];
+    /** Number of PHYSICAL orders this product has been fulfilled in at least once — incremented alongside OrderFulfillment's first creation for the order (see OrderService.ensurePhysicalFulfillmentRecord), the physical counterpart to how `downloads` counts first-install events for digital products. Always 0 for DIGITAL nature. */
+    purchaseCount: Scalars['Int']['output'];
     rating?: Maybe<Scalars['Float']['output']>;
     rejectedReason?: Maybe<Scalars['String']['output']>;
     repositoryUrl?: Maybe<Scalars['String']['output']>;
@@ -20806,8 +22069,6 @@ export type StoreProduct = {
     /** Whether to track inventory levels (physical products) */
     trackInventory?: Maybe<Scalars['Boolean']['output']>;
     type: ProductType;
-    /** Selling unit for the listed price/quantity, e.g. "kg", "liter", "ml", "g", "unit" (physical products) */
-    unitOfMeasure?: Maybe<Scalars['String']['output']>;
     updatedAt: Scalars['DateTime']['output'];
     /** Product variants (for physical products with size/color options) */
     variants: Array<ProductVariant>;
@@ -21034,6 +22295,91 @@ export type SubmitSatisfactionSurveyInput = {
     rating: Scalars['Int']['input'];
     surveyId: Scalars['ID']['input'];
 };
+export type Subprocessor = {
+    __typename?: 'Subprocessor';
+    activatedAt?: Maybe<Scalars['DateTime']['output']>;
+    category: SubprocessorCategory;
+    contactEmail?: Maybe<Scalars['String']['output']>;
+    countriesOfTransfer: Array<Scalars['String']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    dataCategories: Array<Scalars['String']['output']>;
+    dpaSignedAt?: Maybe<Scalars['DateTime']['output']>;
+    dpaUrl?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    legalEntity: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    notes?: Maybe<Scalars['String']['output']>;
+    privacyPolicyUrl?: Maybe<Scalars['String']['output']>;
+    proposedAt?: Maybe<Scalars['DateTime']['output']>;
+    purpose: Scalars['String']['output'];
+    region: Scalars['String']['output'];
+    retiredAt?: Maybe<Scalars['DateTime']['output']>;
+    securityMeasures?: Maybe<Scalars['String']['output']>;
+    status: SubprocessorStatus;
+    updatedAt: Scalars['DateTime']['output'];
+    websiteUrl?: Maybe<Scalars['String']['output']>;
+};
+export declare enum SubprocessorCategory {
+    AiProvider = "AI_PROVIDER",
+    Analytics = "ANALYTICS",
+    Cdn = "CDN",
+    CloudInfrastructure = "CLOUD_INFRASTRUCTURE",
+    CustomerSupport = "CUSTOMER_SUPPORT",
+    EmailDelivery = "EMAIL_DELIVERY",
+    Monitoring = "MONITORING",
+    Other = "OTHER",
+    Payment = "PAYMENT",
+    Storage = "STORAGE"
+}
+export type SubprocessorConnection = {
+    __typename?: 'SubprocessorConnection';
+    hasMore: Scalars['Boolean']['output'];
+    nodes: Array<Subprocessor>;
+    total: Scalars['Int']['output'];
+};
+export type SubprocessorFilter = {
+    category?: InputMaybe<SubprocessorCategory>;
+    region?: InputMaybe<Scalars['String']['input']>;
+    status?: InputMaybe<SubprocessorStatus>;
+};
+export type SubprocessorInput = {
+    category: SubprocessorCategory;
+    contactEmail?: InputMaybe<Scalars['String']['input']>;
+    countriesOfTransfer: Array<Scalars['String']['input']>;
+    dataCategories: Array<Scalars['String']['input']>;
+    dpaSignedAt?: InputMaybe<Scalars['DateTime']['input']>;
+    dpaUrl?: InputMaybe<Scalars['String']['input']>;
+    legalEntity: Scalars['String']['input'];
+    name: Scalars['String']['input'];
+    notes?: InputMaybe<Scalars['String']['input']>;
+    privacyPolicyUrl?: InputMaybe<Scalars['String']['input']>;
+    purpose: Scalars['String']['input'];
+    region: Scalars['String']['input'];
+    securityMeasures?: InputMaybe<Scalars['String']['input']>;
+    websiteUrl?: InputMaybe<Scalars['String']['input']>;
+};
+export declare enum SubprocessorStatus {
+    Active = "ACTIVE",
+    Proposed = "PROPOSED",
+    Retired = "RETIRED"
+}
+export type SubprocessorUpdateInput = {
+    category?: InputMaybe<SubprocessorCategory>;
+    contactEmail?: InputMaybe<Scalars['String']['input']>;
+    countriesOfTransfer?: InputMaybe<Array<Scalars['String']['input']>>;
+    dataCategories?: InputMaybe<Array<Scalars['String']['input']>>;
+    dpaSignedAt?: InputMaybe<Scalars['DateTime']['input']>;
+    dpaUrl?: InputMaybe<Scalars['String']['input']>;
+    legalEntity?: InputMaybe<Scalars['String']['input']>;
+    name?: InputMaybe<Scalars['String']['input']>;
+    notes?: InputMaybe<Scalars['String']['input']>;
+    privacyPolicyUrl?: InputMaybe<Scalars['String']['input']>;
+    purpose?: InputMaybe<Scalars['String']['input']>;
+    region?: InputMaybe<Scalars['String']['input']>;
+    securityMeasures?: InputMaybe<Scalars['String']['input']>;
+    status?: InputMaybe<SubprocessorStatus>;
+    websiteUrl?: InputMaybe<Scalars['String']['input']>;
+};
 export type SubscribeInput = {
     /** Newsletter context for scoping (workspaceId, userId, productId, tenantId, etc.) */
     context?: InputMaybe<NewsletterContextInput>;
@@ -21334,6 +22680,10 @@ export type SubscriptionWithQuotas = {
     __typename?: 'SubscriptionWithQuotas';
     createdAt: Scalars['DateTime']['output'];
     id: Scalars['String']['output'];
+    /** Name of the subscription's plan (e.g. "VibeControls - Free"). */
+    planName?: Maybe<Scalars['String']['output']>;
+    /** Product the subscription's plan belongs to (e.g. "vibecontrols"). */
+    productId?: Maybe<Scalars['String']['output']>;
     quotas: Array<QuotaAssignmentSummary>;
     status: SubscriptionStatus;
 };
@@ -21553,11 +22903,71 @@ export declare enum SupportTicketStatus {
     Resolved = "RESOLVED",
     WaitingCustomer = "WAITING_CUSTOMER"
 }
+export type SuppressIdentifierInput = {
+    channel: SuppressionChannel;
+    expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
+    identifier: Scalars['String']['input'];
+    identifierType: Scalars['String']['input'];
+    reason: SuppressionReason;
+    reasonNote?: InputMaybe<Scalars['String']['input']>;
+    source: Scalars['String']['input'];
+};
+export declare enum SuppressionChannel {
+    All = "ALL",
+    Email = "EMAIL",
+    InApp = "IN_APP",
+    Push = "PUSH",
+    Sms = "SMS",
+    Whatsapp = "WHATSAPP"
+}
+export type SuppressionCheckResult = {
+    __typename?: 'SuppressionCheckResult';
+    matchedEntry?: Maybe<SuppressionEntry>;
+    suppressed: Scalars['Boolean']['output'];
+};
+export type SuppressionEntry = {
+    __typename?: 'SuppressionEntry';
+    channel: SuppressionChannel;
+    createdAt: Scalars['DateTime']['output'];
+    createdBy?: Maybe<Scalars['ID']['output']>;
+    expiresAt?: Maybe<Scalars['DateTime']['output']>;
+    id: Scalars['ID']['output'];
+    identifier: Scalars['String']['output'];
+    identifierType: Scalars['String']['output'];
+    reason: SuppressionReason;
+    reasonNote?: Maybe<Scalars['String']['output']>;
+    releasedAt?: Maybe<Scalars['DateTime']['output']>;
+    source: Scalars['String']['output'];
+    suppressedAt: Scalars['DateTime']['output'];
+    updatedAt: Scalars['DateTime']['output'];
+};
+export type SuppressionEntryConnection = {
+    __typename?: 'SuppressionEntryConnection';
+    hasMore: Scalars['Boolean']['output'];
+    nodes: Array<SuppressionEntry>;
+    total: Scalars['Int']['output'];
+};
+export type SuppressionFilter = {
+    active?: InputMaybe<Scalars['Boolean']['input']>;
+    channel?: InputMaybe<SuppressionChannel>;
+    identifier?: InputMaybe<Scalars['String']['input']>;
+    identifierType?: InputMaybe<Scalars['String']['input']>;
+    reason?: InputMaybe<SuppressionReason>;
+};
 export type SuppressionFilterInput = {
     email?: InputMaybe<Scalars['String']['input']>;
     platformProductId?: InputMaybe<Scalars['String']['input']>;
     reason?: InputMaybe<Scalars['String']['input']>;
 };
+export declare enum SuppressionReason {
+    AdminAction = "ADMIN_ACTION",
+    ComplianceHold = "COMPLIANCE_HOLD",
+    GdprErasure = "GDPR_ERASURE",
+    HardBounce = "HARD_BOUNCE",
+    SpamComplaint = "SPAM_COMPLAINT",
+    UserRequest = "USER_REQUEST",
+    UserUnsubscribe = "USER_UNSUBSCRIBE"
+}
 /** Input for syncing channel users */
 export type SyncChannelUsersInput = {
     /** Channel ID */
@@ -22808,6 +24218,11 @@ export type UpdateCouponInput = {
     status?: InputMaybe<CouponStatus>;
     validUntil?: InputMaybe<Scalars['DateTime']['input']>;
 };
+export type UpdateDsarStatusInput = {
+    notes?: InputMaybe<Scalars['String']['input']>;
+    rejectionReason?: InputMaybe<Scalars['String']['input']>;
+    status: DsarStatus;
+};
 /** Input for updating dashboard layout preferences. */
 export type UpdateDashboardPreferencesInput = {
     /** Complete list of widget configurations */
@@ -22825,6 +24240,8 @@ export type UpdateDeveloperOrganizationInput = {
     logoUrl?: InputMaybe<Scalars['String']['input']>;
     metadata?: InputMaybe<Scalars['JSON']['input']>;
     name?: InputMaybe<Scalars['String']['input']>;
+    /** Dedicated pickup pincode for carrier rate quoting on physical-goods orders (Shiprocket, etc) — separate from the org's billing address, since a seller's fulfillment/warehouse location isn't necessarily the same place as their billing address. */
+    pickupPostalCode?: InputMaybe<Scalars['String']['input']>;
     settings?: InputMaybe<Scalars['JSON']['input']>;
     supportEmail?: InputMaybe<Scalars['String']['input']>;
     websiteUrl?: InputMaybe<Scalars['String']['input']>;
@@ -23119,13 +24536,13 @@ export type UpdatePayoutAccountInput = {
 };
 export type UpdatePhysicalProductInput = {
     allowBackorder?: InputMaybe<Scalars['Boolean']['input']>;
+    bannerUrl?: InputMaybe<Scalars['String']['input']>;
     brand?: InputMaybe<Scalars['String']['input']>;
     category?: InputMaybe<Scalars['String']['input']>;
     countryOfOrigin?: InputMaybe<Scalars['String']['input']>;
     currency?: InputMaybe<Scalars['String']['input']>;
     description?: InputMaybe<Scalars['String']['input']>;
     dimensionUnit?: InputMaybe<DimensionUnit>;
-    expiryDate?: InputMaybe<Scalars['DateTime']['input']>;
     height?: InputMaybe<Scalars['Float']['input']>;
     icon?: InputMaybe<Scalars['String']['input']>;
     length?: InputMaybe<Scalars['Float']['input']>;
@@ -23143,7 +24560,6 @@ export type UpdatePhysicalProductInput = {
     stockQuantity?: InputMaybe<Scalars['Int']['input']>;
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
     trackInventory?: InputMaybe<Scalars['Boolean']['input']>;
-    unitOfMeasure?: InputMaybe<Scalars['String']['input']>;
     warrantyInfo?: InputMaybe<Scalars['String']['input']>;
     weight?: InputMaybe<Scalars['Float']['input']>;
     weightUnit?: InputMaybe<WeightUnit>;
@@ -24063,6 +25479,39 @@ export declare enum UserPresenceStatus {
     /** User is currently online and active */
     Online = "ONLINE"
 }
+/** Input for a user-targeted push fan-out. Note there is no device token and no connection id: both are resolved by the service. Callers cannot pin a Firebase project, by design. */
+export type UserPushDeliveryInput = {
+    /** Notification content. `title` becomes the push title, `text` the body, and `data` is passed through to the device as the FCM data payload. */
+    content: ChannelDeliveryContentInput;
+    /** Optional lower cap on how many devices to fan out to. Never raises the service-level cap (PUSH_MAX_DEVICES_PER_TRIGGER). */
+    maxDevices?: InputMaybe<Scalars['Int']['input']>;
+    /** Optional reference to originating notification in notification-svc */
+    notificationId?: InputMaybe<Scalars['ID']['input']>;
+    /** Delivery options (priority, TTL, retry policy) */
+    options?: InputMaybe<ChannelDeliveryOptionsInput>;
+    /** Organization ID for multi-tenancy */
+    organizationId: Scalars['ID']['input'];
+    /** Product slug whose app shell minted the tokens (e.g. "vibecontrols"). Determines which of the user's devices are in scope. */
+    productSlug: Scalars['String']['input'];
+    /** Subject user. The device registry is queried for exactly this actor. */
+    userId: Scalars['ID']['input'];
+};
+/** Aggregated result of a user-targeted push fan-out. */
+export type UserPushDeliveryResult = {
+    __typename?: 'UserPushDeliveryResult';
+    /** Devices a send was actually attempted for. */
+    attemptedDevices: Scalars['Int']['output'];
+    /** Devices retired in the registry because the provider reported their token permanently dead. */
+    deactivatedCount: Scalars['Int']['output'];
+    /** Devices the notification did not reach, for any reason. */
+    failedCount: Scalars['Int']['output'];
+    /** Per-device outcomes, one entry per device considered. */
+    results: Array<PushDeviceDeliveryResult>;
+    /** Devices the notification reached. */
+    successCount: Scalars['Int']['output'];
+    /** Devices the registry returned, including any the service refused to send to. */
+    totalDevices: Scalars['Int']['output'];
+};
 /** User role for access control across the platform */
 export declare enum UserRole {
     Guest = "GUEST",
@@ -24486,6 +25935,12 @@ export type WidgetMessageAttachmentInput = {
     thumbnail?: InputMaybe<Scalars['String']['input']>;
     width?: InputMaybe<Scalars['Int']['input']>;
 };
+export type WithdrawConsentInput = {
+    purpose: ConsentPurpose;
+    source: Scalars['String']['input'];
+    subjectId: Scalars['ID']['input'];
+    subjectType: Scalars['String']['input'];
+};
 /** Workspace type stub - represents a workspace entity from the workspace service This service doesn't own the Workspace model, but references it */
 export type Workspace = {
     __typename?: 'Workspace';
@@ -24523,6 +25978,13 @@ export type WorkspaceMembersConnectionArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
+/** Per-workspace outcome within a activateSubscriptionForWorkspaces call. */
+export type WorkspaceActivationOutcome = {
+    __typename?: 'WorkspaceActivationOutcome';
+    assignedQuotas: Scalars['Int']['output'];
+    skippedQuotas: Scalars['Int']['output'];
+    workspaceId: Scalars['ID']['output'];
+};
 /** Workspace-level override for a feature flag. Workspace admins can disable flags or control user opt-in for their workspace. */
 export type WorkspaceFeatureFlagOverride = {
     __typename?: 'WorkspaceFeatureFlagOverride';
@@ -24644,6 +26106,8 @@ export type CreatePlanInput = {
     /** Set to false for enterprise / contact-us plans. Defaults to true. */
     isPurchasable?: InputMaybe<Scalars['Boolean']['input']>;
     maxSeats?: InputMaybe<Scalars['Int']['input']>;
+    /** Maximum number of distinct workspaces one subscription to this plan can be activated against. Each activated workspace gets the FULL per-workspace quota allotment (not divided). Null/omitted = today's implicit single-workspace behavior (treated as 1). */
+    maxWorkspaces?: InputMaybe<Scalars['Int']['input']>;
     minSeats?: InputMaybe<Scalars['Int']['input']>;
     name: Scalars['String']['input'];
     price: Scalars['Float']['input'];
@@ -24672,18 +26136,23 @@ export type UpdateAddOnsInput = {
     quotas: Array<AddonQuotaInput>;
 };
 export type UpdatePlanInput = {
+    /** Immutable once set — see `price`. Throws CURRENCY_CHANGE_NOT_ALLOWED on an actual change. */
     currency?: InputMaybe<Scalars['String']['input']>;
+    /** Not settable on update — any non-empty value throws PRICE_CHANGE_NOT_ALLOWED (same reason as `price`: each currency's price is already registered as its own real Stripe Price / Razorpay Plan). */
     currencyPriceOverrides?: InputMaybe<Array<CurrencyPriceOverrideInput>>;
-    /** Default USD */
+    /** Default USD. Immutable once set — see `price`. Throws DURATION_CHANGE_NOT_ALLOWED on an actual change. */
     duration?: InputMaybe<PlanDuration>;
     geoPricingOverrides?: InputMaybe<Array<GeoPricingOverrideInput>>;
     id: Scalars['String']['input'];
     isActive?: InputMaybe<Scalars['Boolean']['input']>;
     isPurchasable?: InputMaybe<Scalars['Boolean']['input']>;
     maxSeats?: InputMaybe<Scalars['Int']['input']>;
+    maxWorkspaces?: InputMaybe<Scalars['Int']['input']>;
     minSeats?: InputMaybe<Scalars['Int']['input']>;
     name?: InputMaybe<Scalars['String']['input']>;
+    /** Immutable once set — a plan's price is already registered as a real Stripe Price / Razorpay Plan object at creation, and those cannot be edited in place. Passing the plan's current price back is a harmless no-op; passing a different value throws PRICE_CHANGE_NOT_ALLOWED. To change pricing, create a new plan and deactivate this one. */
     price?: InputMaybe<Scalars['Float']['input']>;
+    /** Immutable once set — see `price`. Throws PRICE_CHANGE_NOT_ALLOWED on an actual change. */
     pricePerSeat?: InputMaybe<Scalars['Float']['input']>;
     pricingModel?: InputMaybe<PlanPricingModel>;
     quotas: Array<PlanQuotaInput>;