@burdenoff/microfe-technospam 2026.1031.5 → 2026.1031.7

package/dist/generated/wspace-types.d.ts

@@ -209,10 +209,7 @@ export type AcceptMtwReuseReservationInput = {
     idempotencyKey: Scalars['String']['input'];
     proposalId: Scalars['ID']['input'];
 };
-/**
- * The ids a resource shared with people, groups or projects can be granted to, for one person in one
- * workspace.
- */
+/** The ids a resource shared with people, groups or projects can be granted to, for one person in one workspace. */
 export type AccessPrincipals = {
     __typename?: 'AccessPrincipals';
     actorId: Scalars['String']['output'];
@@ -228,10 +225,7 @@ export type AccessPrincipalsInput = {
     /** Opaque actor ID of the person, never the calling service */
     actorId: Scalars['String']['input'];
     actorType: ActorType;
-    /**
-     * Resource type the calling service shares (e.g. "integration-connection", "workflow"); decides
-     * administersResourceType
-     */
+    /** Resource type the calling service shares (e.g. "integration-connection", "workflow"); decides administersResourceType */
     resourceType: Scalars['String']['input'];
 };
 export type AccessShareInput = {
@@ -6879,6 +6873,30 @@ export type BigConsoleSetWidgetTypeStatusInput = {
     /** Workspace used for RBAC scope resolution. */
     workspaceId: Scalars['ID']['input'];
 };
+/** The calling profile's BigConsole preferences in the request workspace. Settings are personal: they belong to the calling actor inside the workspace of the request, are never shared with the team, and follow the user across devices and browsers. When nothing has been saved yet the defaults are returned with `persisted: false`. */
+export type BigConsoleSettings = {
+    __typename?: 'BigConsoleSettings';
+    /** Whether transition animations and effects are enabled */
+    animationsEnabled: Scalars['Boolean']['output'];
+    /** Whether new data sinks enable caching by default */
+    cacheEnabled: Scalars['Boolean']['output'];
+    /** Default cache TTL for new data sinks, in seconds (0-86400) */
+    cacheTTLSeconds: Scalars['Int']['output'];
+    /** Whether dashboards use reduced padding and spacing */
+    compactMode: Scalars['Boolean']['output'];
+    /** Default number of grid columns for new dashboard pages (4-24) */
+    defaultGridColumns: Scalars['Int']['output'];
+    /** Default auto-refresh interval for new widgets, in seconds (0 disables it, max 86400) */
+    defaultRefreshInterval: Scalars['Int']['output'];
+    /** Default height, in grid units, for new widgets (1-12) */
+    defaultWidgetHeight: Scalars['Int']['output'];
+    /** Whether these values were saved by the caller. False means the caller has never saved settings in this workspace and these are the defaults. */
+    persisted: Scalars['Boolean']['output'];
+    /** Whether widgets are drawn with borders */
+    showWidgetBorders: Scalars['Boolean']['output'];
+    /** When the caller last saved their settings; null when never saved */
+    updatedAt?: Maybe<Scalars['DateTime']['output']>;
+};
 /** Input for sharing a dashboard */
 export type BigConsoleShareDashboardInput = {
     /** Dashboard ID to share */
@@ -7108,6 +7126,25 @@ export type BigConsoleUpdateGlobalFilterInput = {
     /** Display order */
     order?: InputMaybe<Scalars['Int']['input']>;
 };
+/** Changes to the caller's BigConsole settings. Omitted or null fields keep their current value (or the default when nothing was saved yet). Out-of-range values are rejected with BAD_USER_INPUT and nothing is written. */
+export type BigConsoleUpdateSettingsInput = {
+    /** Whether transition animations and effects are enabled */
+    animationsEnabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Whether new data sinks enable caching by default */
+    cacheEnabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Default cache TTL for new data sinks, in seconds (0-86400) */
+    cacheTTLSeconds?: InputMaybe<Scalars['Int']['input']>;
+    /** Whether dashboards use reduced padding and spacing */
+    compactMode?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Default number of grid columns for new dashboard pages (4-24) */
+    defaultGridColumns?: InputMaybe<Scalars['Int']['input']>;
+    /** Default auto-refresh interval for new widgets, in seconds (0-86400) */
+    defaultRefreshInterval?: InputMaybe<Scalars['Int']['input']>;
+    /** Default height, in grid units, for new widgets (1-12) */
+    defaultWidgetHeight?: InputMaybe<Scalars['Int']['input']>;
+    /** Whether widgets are drawn with borders */
+    showWidgetBorders?: InputMaybe<Scalars['Boolean']['input']>;
+};
 /** Input for updating a widget action */
 export type BigConsoleUpdateWidgetActionInput = {
     /** Confirmation dialog configuration */
@@ -9975,6 +10012,10 @@ export type BuiCertificate = {
     /** BOFF-3134: the source product's own id for this certificate (opaque). */
     sourceId?: Maybe<Scalars['ID']['output']>;
     status: BuiCertificateStatus;
+    /** The Technospam certificate this canonical certificate was written from. */
+    technospamCertificate?: Maybe<TecCertificate>;
+    /** Why Technospam revoked the certificate, when it did. */
+    technospamRevokeReason?: Maybe<Scalars['String']['output']>;
     updatedAt: Scalars['DateTime']['output'];
     /** BOFF-4431: opaque code for the PUBLIC, unauthenticated verification page (`/verify/buildmyiq/{verificationCode}`) — share this, not the internal id. Null for certificates issued before this field existed. */
     verificationCode?: Maybe<Scalars['String']['output']>;
@@ -10111,6 +10152,12 @@ export type BuiCourse = {
     status: BuiCourseStatus;
     summary?: Maybe<Scalars['String']['output']>;
     tags: Array<Scalars['String']['output']>;
+    /** The Technospam course this canonical course was written from. */
+    technospamCourse?: Maybe<TecCourse>;
+    /** True when the course is premium-only and the calling workspace has no paid TechnoSpam plan. */
+    technospamIsLocked?: Maybe<Scalars['Boolean']['output']>;
+    /** True when the course's lesson bodies need a paid TechnoSpam plan. */
+    technospamIsPremiumOnly?: Maybe<Scalars['Boolean']['output']>;
     title: Scalars['String']['output'];
     updatedAt: Scalars['DateTime']['output'];
     workspaceId: Scalars['ID']['output'];
@@ -10486,6 +10533,12 @@ export type BuiEnrollment = {
     sourceId?: Maybe<Scalars['ID']['output']>;
     startedAt?: Maybe<Scalars['DateTime']['output']>;
     status: BuiEnrollmentStatus;
+    /** Lessons finished in this enrollment, with how each was completed (manual, quiz, code). */
+    technospamCompletions?: Maybe<Array<TecLessonCompletion>>;
+    /** The Technospam enrollment this canonical enrollment was written from. */
+    technospamEnrollment?: Maybe<TecEnrollment>;
+    /** The first Technospam lesson not yet completed; null when every lesson is done. */
+    technospamNextLessonId?: Maybe<Scalars['ID']['output']>;
     updatedAt: Scalars['DateTime']['output'];
     workspaceId: Scalars['ID']['output'];
 };
@@ -10508,6 +10561,43 @@ export declare enum BuiEnrollmentStatus {
 export declare enum BuiExternalSource {
     Technospam = "TECHNOSPAM"
 }
+/** BOFF-10480: which kind of mirrored record a parity read asks for. */
+export declare enum BuiExternalSyncKind {
+    Certificate = "CERTIFICATE",
+    Course = "COURSE",
+    Enrollment = "ENROLLMENT",
+    Lesson = "LESSON",
+    LessonProgress = "LESSON_PROGRESS"
+}
+/** BOFF-10480: the comparable canonical state of one mirrored record, returned to the source product so it can report (and re-sync) any record whose canonical copy drifted. Fields that do not apply to the requested kind are null. `status` carries the kind's own enum value as text. */
+export type BuiExternalSyncRecord = {
+    __typename?: 'BuiExternalSyncRecord';
+    /** The canonical row's id in Buildmyiq. */
+    canonicalId: Scalars['ID']['output'];
+    /** SHA-256 (hex) of the canonical lesson body; null when no body is held. */
+    contentSha256?: Maybe<Scalars['String']['output']>;
+    /** True when the canonical row is soft-deleted (archived). */
+    deleted: Scalars['Boolean']['output'];
+    isPreview?: Maybe<Scalars['Boolean']['output']>;
+    learnerId?: Maybe<Scalars['ID']['output']>;
+    mediaFileId?: Maybe<Scalars['ID']['output']>;
+    position?: Maybe<Scalars['Int']['output']>;
+    progressPct?: Maybe<Scalars['Int']['output']>;
+    serial?: Maybe<Scalars['String']['output']>;
+    /** The source product's own id of the record. */
+    sourceId: Scalars['ID']['output'];
+    status?: Maybe<Scalars['String']['output']>;
+    title?: Maybe<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    /** Course level (COURSE) or lesson type (LESSON). */
+    variant?: Maybe<Scalars['String']['output']>;
+};
+/** BOFF-10480: one source product's batch of record ids to compare against the canonical LMS. At most 200 ids per call. */
+export type BuiExternalSyncRecordsInput = {
+    kind: BuiExternalSyncKind;
+    source: BuiExternalSource;
+    sourceIds: Array<Scalars['ID']['input']>;
+};
 export type BuiGradeSubmissionInput = {
     feedback?: InputMaybe<Scalars['String']['input']>;
     passed?: InputMaybe<Scalars['Boolean']['input']>;
@@ -10555,6 +10645,28 @@ export type BuiLesson = {
     media?: Maybe<File>;
     moduleId?: Maybe<Scalars['ID']['output']>;
     position: Scalars['Int']['output'];
+    /** BOFF-10464: the product this lesson was mirrored from. Null for lessons authored natively in Buildmyiq. */
+    source?: Maybe<BuiExternalSource>;
+    /** BOFF-10464: the source product's own id for this lesson (opaque). */
+    sourceId?: Maybe<Scalars['ID']['output']>;
+    /** True when the calling learner has completed this lesson in Technospam. */
+    technospamCompletedByMe?: Maybe<Scalars['Boolean']['output']>;
+    /** The lesson body as Technospam holds it, gated by the TechnoSpam plan. Use this for premium-only lessons: their body is not stored in Buildmyiq until Buildmyiq has a product-entitlement-aware content gate. Null when locked. */
+    technospamContent?: Maybe<Scalars['String']['output']>;
+    /** INTERACTIVE lessons: the output a correct program prints. Null when locked. */
+    technospamExpectedOutput?: Maybe<Scalars['String']['output']>;
+    /** TechnoSpam free-tier lock for the calling workspace (see TecLesson.isLocked). */
+    technospamIsLocked?: Maybe<Scalars['Boolean']['output']>;
+    /** INTERACTIVE lessons: language slug the runnable workspace executes. */
+    technospamLanguage?: Maybe<Scalars['String']['output']>;
+    /** The Technospam lesson this canonical lesson was written from. */
+    technospamLesson?: Maybe<TecLesson>;
+    /** QUIZ lessons: the questions without the answer key. Empty when locked. */
+    technospamQuizQuestions?: Maybe<Array<TecQuizQuestion>>;
+    /** INTERACTIVE lessons: default stdin for a run. Null when locked. */
+    technospamSampleInput?: Maybe<Scalars['String']['output']>;
+    /** INTERACTIVE lessons: code pre-filled in the editor. Null when locked. */
+    technospamStarterCode?: Maybe<Scalars['String']['output']>;
     title: Scalars['String']['output'];
     type: BuiLessonType;
     updatedAt: Scalars['DateTime']['output'];
@@ -10573,6 +10685,10 @@ export type BuiLessonProgress = {
     id: Scalars['ID']['output'];
     lessonId: Scalars['ID']['output'];
     secondsSpent: Scalars['Int']['output'];
+    /** BOFF-10464: the product this progress row was mirrored from. Null for progress recorded natively in Buildmyiq. */
+    source?: Maybe<BuiExternalSource>;
+    /** BOFF-10464: the source product's own id for this progress row (opaque). */
+    sourceId?: Maybe<Scalars['ID']['output']>;
     status: BuiProgressStatus;
     updatedAt: Scalars['DateTime']['output'];
     workspaceId: Scalars['ID']['output'];
@@ -11125,6 +11241,41 @@ export type BuiSyncExternalEnrollmentInput = {
     startedAt?: InputMaybe<Scalars['DateTime']['input']>;
     status: BuiEnrollmentStatus;
 };
+/** BOFF-10464: a source product's lesson. Only the canonical lesson fields are mirrored; product-specific lesson data (runnable-code metadata, quiz answer keys, entitlement lock state) stays with the source product. */
+export type BuiSyncExternalLessonInput = {
+    /** Lesson body. The source sends null when it must not be exposed outside the source product (for example a premium-only lesson body). */
+    content?: InputMaybe<Scalars['String']['input']>;
+    /** The source product's id of the lesson's course (synced first). */
+    courseSourceId: Scalars['ID']['input'];
+    /** Set when the source soft-deleted the lesson. */
+    deletedAt?: InputMaybe<Scalars['DateTime']['input']>;
+    durationMin?: InputMaybe<Scalars['Int']['input']>;
+    /** Free trailer lesson: readable without an enrollment in a published course. */
+    isPreview: Scalars['Boolean']['input'];
+    /** wspace-files-svc File id of the lesson's primary media asset. */
+    mediaFileId?: InputMaybe<Scalars['ID']['input']>;
+    onBehalfOf: Scalars['ID']['input'];
+    position: Scalars['Int']['input'];
+    source: BuiExternalSource;
+    /** The source product's own lesson id. */
+    sourceId: Scalars['ID']['input'];
+    title: Scalars['String']['input'];
+    type: BuiLessonType;
+};
+/** BOFF-10464: one lesson a learner finished inside an enrollment at the source. */
+export type BuiSyncExternalLessonProgressInput = {
+    completedAt?: InputMaybe<Scalars['DateTime']['input']>;
+    /** The source product's id of the enrollment (synced first). */
+    enrollmentSourceId: Scalars['ID']['input'];
+    /** The source product's id of the lesson (synced first). */
+    lessonSourceId: Scalars['ID']['input'];
+    onBehalfOf: Scalars['ID']['input'];
+    secondsSpent?: InputMaybe<Scalars['Int']['input']>;
+    source: BuiExternalSource;
+    /** The source product's own progress (lesson completion) id. */
+    sourceId: Scalars['ID']['input'];
+    status: BuiProgressStatus;
+};
 export declare enum BuiTutorAdaptiveLevel {
     Advanced = "ADVANCED",
     OnTrack = "ON_TRACK",
@@ -20828,24 +20979,12 @@ export type CreateRoleInput = {
     name: Scalars['String']['input'];
     parentId?: InputMaybe<Scalars['ID']['input']>;
     priority?: InputMaybe<Scalars['Int']['input']>;
-    /**
-     * Product this role belongs to (PlatformProduct.slug). Product shells must pass
-     * their product slug when creating custom roles. Omit/null is reserved for
-     * cross-product platform roles created from the admin app.
-     */
+    /** Product this role belongs to (PlatformProduct.slug). Product shells must pass their product slug when creating custom roles. Omit/null is reserved for cross-product platform roles created from the admin app. */
     productSlug?: InputMaybe<Scalars['String']['input']>;
     scopeId: Scalars['String']['input'];
     scopeType?: InputMaybe<Scalars['String']['input']>;
 };
-/**
- * Input for creating a role permission override.
- *
- * The override's scope is inherited from the role's own scope (role.scopeId);
- * clients no longer pass scopeId. This prevents creating cross-scope overrides
- * where the override and the role live in different workspaces.
- *
- * Overrides cannot be created on system templates (role.scopeId='system').
- */
+/** Input for creating a role permission override. The override's scope is inherited from the role's own scope (role.scopeId); clients no longer pass scopeId. This prevents creating cross-scope overrides where the override and the role live in different workspaces. Overrides cannot be created on system templates (role.scopeId='system'). */
 export type CreateRolePermissionOverrideInput = {
     action: Scalars['String']['input'];
     expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
@@ -25476,16 +25615,9 @@ export type EffectivePermissions = {
     actorId: Scalars['String']['output'];
     /** Cache key for debugging and invalidation */
     cacheKey?: Maybe<Scalars['String']['output']>;
-    /**
-     * When this permission set should be considered stale.
-     * Frontend should refresh after this time.
-     */
+    /** When this permission set should be considered stale. Frontend should refresh after this time. */
     expiresAt: Scalars['DateTime']['output'];
-    /**
-     * Flat permission strings for easy frontend matching.
-     * Format: "{resourceType}:{action}" e.g., ["project:read", "project:write", "task:*"]
-     * Includes wildcards for ADMIN level (e.g., "project:*")
-     */
+    /** Flat permission strings for easy frontend matching. Format: "{resourceType}:{action}" e.g., ["project:read", "project:write", "task:*"] Includes wildcards for ADMIN level (e.g., "project:*") */
     permissionStrings: Array<Scalars['String']['output']>;
     /** Resource types and their effective levels */
     permissions: Array<EffectiveResourcePermission>;
@@ -27670,10 +27802,18 @@ export type ExportTemplateEdge = {
     node: ExportTemplate;
 };
 export type ExportTimeCampusEntitiesInput = {
+    /** Inclusive upper bound on the record date, for entity types that support it. */
+    dateRangeEnd?: InputMaybe<Scalars['DateTime']['input']>;
+    /** Inclusive lower bound on the record date, for entity types that support it. */
+    dateRangeStart?: InputMaybe<Scalars['DateTime']['input']>;
+    /** TimeCampus entity types to export, e.g. `timecampus_time_entries`. */
     entityTypes: Array<Scalars['String']['input']>;
     format?: TimeCampusExportFormat;
     includeMetadata?: InputMaybe<Scalars['Boolean']['input']>;
-    workspaceId: Scalars['ID']['input'];
+    /** Human-readable job name shown in export history (max 120 characters). */
+    name?: InputMaybe<Scalars['String']['input']>;
+    /** Ignored. The workspace always comes from the verified request context; the field stays only so existing callers keep validating. */
+    workspaceId?: InputMaybe<Scalars['ID']['input']>;
 };
 export type ExportTimeCampusUserDataInput = {
     entityTypes: Array<Scalars['String']['input']>;
@@ -54926,6 +55066,10 @@ export type Mutation = {
     buiSyncExternalCourse: BuiCourse;
     /** Service-only (BOFF-3134): upsert the canonical enrollment mirroring a source product's enrollment. The course must have been synced first. */
     buiSyncExternalEnrollment: BuiEnrollment;
+    /** Service-only (BOFF-10464): upsert the canonical lesson mirroring a source product's lesson. The course must have been synced first. */
+    buiSyncExternalLesson: BuiLesson;
+    /** Service-only (BOFF-10464): upsert the canonical lesson progress mirroring a source product's lesson completion. The enrollment and the lesson must have been synced first. */
+    buiSyncExternalLessonProgress: BuiLessonProgress;
     /** Real AGS score-publish for one graded submission to the LMS gradebook via the given resource link's line item. Never re-grades — the submission must already be graded (`buiGradeSubmission`/`buiAutoScoreSubmission`). */
     buiSyncLtiGrade: BuiLtiGradeSync;
     /** Names and Role Provisioning Services roster sync: fetches the LMS course roster for this LTI placement and upserts `BuiLtiContextMembership` rows. */
@@ -55279,6 +55423,10 @@ export type Mutation = {
     /** Compile a docs site (creates a new revision and starts async build) */
     compileDocsSite: VibecontrolsDocsRevision;
     completeActionItem: MeetingActionItem;
+    /** Complete an activity that waits for an asynchronous completion, with the task token it handed out. */
+    completeActivityAsync: Scalars['Boolean']['output'];
+    /** Complete, by its id, an activity that waits for an asynchronous completion. */
+    completeActivityById: Scalars['Boolean']['output'];
     /** BOFF-4388 — moves a CHECKED_IN booking to COMPLETED. BOFF-10194 — host of the listing only; operators use operateGgnomadBooking. */
     completeGgnomadBooking: GgnomadBooking;
     completeHealthyBowlGardenCareTask: GardenCareTask;
@@ -55489,6 +55637,8 @@ export type Mutation = {
     createAction: Action;
     createActionItem: MeetingActionItem;
     createActionShareLink: ShareGrant;
+    /** Create an activity pause rule (at most 100 per workspace). Needs fluidgrids.run-control. */
+    createActivityPauseRule: WorkflowActivityPauseRule;
     /** Create an agent definition and its platform identity. */
     createAgentDefinition: AgentDefinition;
     /** BOFF-4400 — deliberately unmetered, mirroring `createBotlitAgent`: Agents are internal workers, reusable across many Apps within a workspace, and are not the customer-facing unit the free/paid tiers price. `botlit.bots.count` meters the App (see `createBotApp` and `createAppFromTemplate`); adding a second `@usage` here would double-charge a single logical bot that fans out to N internal agents. Note the asymmetry with `createAppFromTemplate` above is intentional — that one mints an App, this one mints an Agent. If this changes, update `botlit-billing-seed.ts`, `createBotlitAgent` and the pricing page together with the `@usage` directive added here. */
@@ -55988,10 +56138,7 @@ export type Mutation = {
     createVibecontrolsScorecardTemplate: VibecontrolsScorecardTemplate;
     /** Create a new assignable tag (inline creation from a picker) */
     createVibecontrolsTag: AvailableTag;
-    /**
-     * Create a visibility rule for a resource.
-     * Auto-registers the resource if not already registered.
-     */
+    /** Create a visibility rule for a resource. Auto-registers the resource if not already registered. */
     createVisibilityRule: VisibilityRule;
     createVocabulary: TagVocabulary;
     createWarehouse: MtwWarehouse;
@@ -56017,6 +56164,14 @@ export type Mutation = {
     createWorkflowSandbox: Sandbox;
     /** Create a new scheduled job */
     createWorkflowScheduledJob: ScheduledJobResponse;
+    /** Save a new test case on a workflow (at most 50 per workflow). */
+    createWorkflowTestCase: WorkflowTestCase;
+    /**
+     * Save a finished run as a test case: its trigger input, and a connection mock
+     * for every non-internal node that completed, holding the output it produced.
+     * The workflow's redacted fields are stored redacted. Private runs cannot be saved.
+     */
+    createWorkflowTestCaseFromRun: WorkflowTestCase;
     createWorkflowVariable: WorkflowVariableResponse;
     createWorkflowVersion: CreateWorkflowVersionResponse;
     /** Create a new workspace. Tenant ID is read from gateway context (x-tenant-id header). Owner defaults to authenticated actor (x-actor-id header). */
@@ -56085,6 +56240,8 @@ export type Mutation = {
     deleteActionItem: Scalars['Boolean']['output'];
     /** Delete an action policy. Needs workflow publish rights. */
     deleteActionPolicy: Scalars['Boolean']['output'];
+    /** Delete an activity pause rule; everything it paused is unpaused. */
+    deleteActivityPauseRule: Scalars['Boolean']['output'];
     /** Delete an agent definition, retire its identity and withdraw every grant. */
     deleteAgentDefinition: Scalars['Boolean']['output'];
     deleteAgentInstructionFile: Scalars['Boolean']['output'];
@@ -56499,6 +56656,8 @@ export type Mutation = {
     deleteWorkflowRun: Scalars['Boolean']['output'];
     /** Delete a scheduled job (soft delete) */
     deleteWorkflowScheduledJob: DeleteConfigResponse;
+    /** Delete a test case. Its past runs keep their results. */
+    deleteWorkflowTestCase: Scalars['Boolean']['output'];
     deleteWorkflowVariable: DeleteConfigResponse;
     /** Soft delete a workspace (sets status to DELETED and populates deletedAt). The workspace and its intra-service records remain recoverable during the platform's documented 30-day retention / grace-period. After the retention period a background purge may hard-delete the row and its cascaded records. The workspace_audit_log row for this event is written after the soft delete and is intentionally NOT foreign-keyed to Workspace so it survives eventual purge (see WorkspaceAuditLog's schema doc-comment). */
     deleteWorkspace: Scalars['Boolean']['output'];
@@ -56827,6 +56986,7 @@ export type Mutation = {
     exportSessions: SessionExport;
     /** Export the subject's files-layer data: owned files (with metadata, versions, tags), folders, file-shares granted by the subject. Object storage payloads are listed by S3 key but not inlined; the privacy-svc orchestrator includes them via signed URLs in the final DSAR bundle. */
     exportSubject: Scalars['JSON']['output'];
+    /** Start a server-side export of TimeCampus data. The job runs asynchronously in wspace-export-svc; poll `timeCampusExportJob(id)` until it reaches a terminal status, then download the archive from `downloadUrl`. */
     exportTimeCampusEntities: TimeCampusExportJob;
     exportTimeCampusUserData: TimeCampusExportJob;
     /** Export audit logs matching the filter as CSV or JSON */
@@ -56842,6 +57002,10 @@ export type Mutation = {
     /** Extend the caller's OWN running Ask or Take-action assistant sandbox (any workspace role), capped exactly as extendSandboxTTL is. Another user's sandbox, or one that is not an assistant sandbox, is NOT_FOUND. */
     extendMyAssistantSandboxTTL: Sandbox;
     extendSandboxTTL: Sandbox;
+    /** Fail an activity that waits for an asynchronous completion; its retry policy decides what follows. */
+    failActivityAsync: Scalars['Boolean']['output'];
+    /** Fail, by its id, an activity that waits for an asynchronous completion. */
+    failActivityById: Scalars['Boolean']['output'];
     /**
      * Run one triage pass now (the hourly workflow runs the same pass). Returns
      * skipped with reason not_enabled or flag_off when triage is off.
@@ -56898,6 +57062,8 @@ export type Mutation = {
     ggnomadGenerateTripPlan: GgnomadTripPlanProposal;
     govAddCaseNote: GovCaseNote;
     govAddDocument: GovDocument;
+    /** Self-scoped (Type B): attach a document to the caller's own application. */
+    govAddMyDocument: GovDocument;
     govArchiveAgency: Scalars['Boolean']['output'];
     govArchiveJurisdiction: GovJurisdiction;
     /** Persist a wspace-files-svc File reference onto an issued permit after the client has saved the rendered PDF via the standard Save-to-Files flow. */
@@ -56915,6 +57081,8 @@ export type Mutation = {
     govCreateIndicator: GovIndicator;
     govCreateJurisdiction: GovJurisdiction;
     govCreateJurisdictionEvent: GovJurisdictionEvent;
+    /** Self-scoped: a citizen files an application for a PUBLISHED service. The applicant is always the authenticated actor. */
+    govCreateMyApplication: GovApplication;
     govCreateOfficial: GovOfficial;
     govCreateOfficialCommitment: GovOfficialCommitment;
     govCreatePayment: GovPayment;
@@ -56955,7 +57123,11 @@ export type Mutation = {
     govRecordElectionResults: GovElection;
     govRecordIndicatorValue: GovIndicatorValue;
     govRefundPayment: GovPayment;
+    /** Self-scoped (Type B): the citizen's reply on their own application's thread (stored as a CITIZEN_MESSAGE case note). */
+    govReplyToMyApplication: GovCaseNote;
     govReportGrievance: GovGrievance;
+    /** Self-scoped: a citizen reports a grievance. The reporter is always the authenticated actor. */
+    govReportMyGrievance: GovGrievance;
     /** Record a review decision. ACCEPTED records the accepted correction and stamps `appliedAt`; it never silently mutates the target record. */
     govReviewDataChangeProposal: GovDataChangeProposal;
     govReviewDocument: GovDocument;
@@ -56970,6 +57142,8 @@ export type Mutation = {
     /** Submit the calling actor's response. One response per actor per consultation. */
     govSubmitConsultationResponse: GovConsultationResponse;
     govSubmitDataChangeProposal: GovDataChangeProposal;
+    /** Self-scoped (Type B): submit the caller's own DRAFT application. */
+    govSubmitMyApplication: GovApplication;
     /** Advance an application through its review lifecycle (validated transitions). */
     govTransitionApplication: GovApplication;
     /** Advance a grievance through its resolution lifecycle (validated transitions). */
@@ -57125,6 +57299,10 @@ export type Mutation = {
     headshotmarketingUpdateSEOKeyword: HeadshotmarketingSeoKeyword;
     /** Notify @-mentioned members of a Farm Tasks comment (IN_APP notification). */
     healthybowlNotifyMention: Scalars['Boolean']['output'];
+    /** Heartbeat an activity that waits for an asynchronous completion (details carry over to a retry). */
+    heartbeatActivityAsync: WorkflowAsyncHeartbeatAck;
+    /** Heartbeat, by its id, an activity that waits for an asynchronous completion. */
+    heartbeatActivityById: WorkflowAsyncHeartbeatAck;
     /** Heartbeat one presence connection (expected about every 15s). Returns false when the presence cache is unavailable; the heartbeat is then dropped without affecting the dashboard. */
     heartbeatDashboardPresence: Scalars['Boolean']['output'];
     hideMessage: Message;
@@ -57305,11 +57483,7 @@ export type Mutation = {
     initializeNewWorkspace: InitializeNewWorkspaceResult;
     /** Initialize a newly created workspace with default configuration */
     initializeWorkspace: Workspace;
-    /**
-     * Service-internal workspace bootstrap: initializes default roles for a workspace
-     * by cloning system roles. Called by wspace-workspace-svc during cross-layer
-     * workspace sync, and safe to retry because it is idempotent.
-     */
+    /** Service-internal workspace bootstrap: initializes default roles for a workspace by cloning system roles. Called by wspace-workspace-svc during cross-layer workspace sync, and safe to retry because it is idempotent. */
     initializeWorkspaceRoles: InitializeWorkspaceRolesResult;
     initiateOAuth: OAuthInitiationResult;
     /** Initiate a new upload session Returns session details and initial presigned URLs */
@@ -57777,6 +57951,11 @@ export type Mutation = {
     operateGgnomadBooking: GgnomadBooking;
     optimizeRoute: MtwRoute;
     overrideTimeCampusWorkspaceQuota: TimeCampusWorkspaceQuotaAssignment;
+    /**
+     * Pause activities of a durable-function run: no new attempt starts, and a running attempt learns of
+     * the pause on its next heartbeat. Needs fluidgrids.run-control.
+     */
+    pauseActivity: WorkflowRun;
     /** BOFF-4388 — pauses an ACTIVE listing (hides it from booking) with an optional reason. */
     pauseGgnomadListing: GgnomadListing;
     /** Pause an ACTIVE workflow — new triggers no longer start runs. */
@@ -58469,6 +58648,7 @@ export type Mutation = {
     pswUpdateDeliverable: PswDeliverable;
     pswUpdateDocument: PswDocument;
     pswUpdateEngagement: PswEngagement;
+    pswUpdateInvoice: PswInvoice;
     pswUpdateMatter: PswMatter;
     pswUpdateMilestone: PswMilestone;
     pswUpdatePracticeArea: PswPracticeArea;
@@ -58643,11 +58823,7 @@ export type Mutation = {
     registerNode: NodeEndpointConfig;
     /** Register (upsert) a parser type in the GLOBAL ParserTypeConfig registry and, with autoInstall, make it the workspace's active version. Re-registering the same (parserTypeKey, parserVersion) refreshes its definition but preserves the operator-set status. TRUST BOUNDARY (same as registerWidgetType): the catalog write is global while RBAC is scoped to input.workspaceId. This is the store service path — restricted to service/super_admin actors at the public gateway. */
     registerParserType: ParserTypeRegistration;
-    /**
-     * Register a resource with custom RBAC configurations.
-     * Called automatically when the first override or visibility rule is created for a resource.
-     * Can also be called manually for explicit registration.
-     */
+    /** Register a resource with custom RBAC configurations. Called automatically when the first override or visibility rule is created for a resource. Can also be called manually for explicit registration. */
     registerResource: Resource;
     /** Register an uploaded part */
     registerUploadedPart: UploadPartResponse;
@@ -58876,6 +59052,10 @@ export type Mutation = {
     resendWorkspaceInvite: WorkspaceInvite;
     /** Reserve a managed subdomain under *.vibetunnels.com. The domain is created in VERIFIED state and can be attached immediately. */
     reserveTunnelSubdomain: TunnelDomain;
+    /** Restart the attempt count of activities waiting for their next attempt, and dispatch them now. */
+    resetActivity: WorkflowRun;
+    /** Restore the caller's BigConsole settings in the request workspace to the defaults, and keep them saved so every device picks the reset up. */
+    resetBigConsoleSettings: BigConsoleSettings;
     resetCircuitBreaker: CircuitBreakerState;
     /** Reset monthly usage counters for the current workspace. Workspace ID is read from gateway context (x-workspace-id header). */
     resetMonthlyUsage: WorkspaceResourceUsage;
@@ -59156,6 +59336,16 @@ export type Mutation = {
     runSecurityScan: SecurityScanRun;
     /** Run the workspace's time-intelligence sweep. Called by wspace-scheduler-svc as this service's own service actor; a super admin may run it on demand. Any other caller is refused. */
     runTimeCampusTimeIntelligenceSweep: TimeCampusTimeIntelligenceSweep;
+    /**
+     * Run a workflow's test cases, each as its own TEST run, and return the suite run
+     * to poll with workflowTestRun. Canvas workflows only.
+     *
+     * Usage tracking: not decorated with `@usage`. Suite runs are TEST runs and are
+     * exempt from the fluidgrids.runs.monthly quota by design; the cases per workflow
+     * (50), the suites in flight per workspace (5) and the suites started per
+     * workspace per hour (60) are capped instead.
+     */
+    runWorkflowTests: WorkflowTestRun;
     /**
      * Append one completed turn (prompt + reply), creating the conversation on the first turn. NOT idempotent: a retried call appends a duplicate turn. This resolver writes both prompt and reply rows internally, so it performs manual quota checks/tracking instead of using a fixed-amount @usage directive.
      * @deprecated Use the my* assistant-history fields (BOFF-7335).
@@ -59877,6 +60067,8 @@ export type Mutation = {
     unlockVault: Vault;
     unmatchHealthyBowlStatementLine: HealthyBowlBankStatementLine;
     unmuteConversation: ConversationMembership;
+    /** Unpause activities; their next attempt is dispatched now. */
+    unpauseActivity: WorkflowRun;
     unpinConversation: ConversationMembership;
     unpinMessage: Message;
     /** Remove pinned data from a node (BOFF-7511). */
@@ -59932,6 +60124,8 @@ export type Mutation = {
     updateActiveSession: UiSession;
     /** Update active vibe */
     updateActiveVibe: UiSession;
+    /** Change the retry policy and timeouts of activities, from their next attempt. Needs fluidgrids.run-control. */
+    updateActivityOptions: WorkflowRun;
     /** Update an agent definition. Narrowing the allowlist or scope applies to the next tool call. */
     updateAgentDefinition: AgentDefinition;
     updateAgentInstructionFile: AgentInstructionFile;
@@ -59958,6 +60152,8 @@ export type Mutation = {
     updateAvailabilityRule: AvailabilityRule;
     /** Update an existing dashboard */
     updateBigConsoleDashboard: BigConsoleDashboard;
+    /** Save changes to the caller's BigConsole settings in the request workspace, creating the record on first save. Self-scoped like bigConsoleSettings. */
+    updateBigConsoleSettings: BigConsoleSettings;
     /** Update a BigConsole widget */
     updateBigConsoleWidget: BigConsoleWidget;
     updateBookingPage: BookingPage;
@@ -60429,8 +60625,16 @@ export type Mutation = {
     updateWorkflowExecutionSettings: WorkflowExecutionSettings;
     /** Change the notification preferences of a workflow. */
     updateWorkflowNotificationSettings: WorkflowNotificationSettings;
+    /**
+     * Send an update to a durable-function run and wait (at most timeoutMs, capped at 15 s) until it
+     * reaches `waitFor`. The updateId is its idempotency key. A rejected update leaves no history. Needs
+     * fluidgrids.run-control and a bundle built with the Phase C SDK.
+     */
+    updateWorkflowRun: WorkflowUpdateResult;
     /** Update an existing scheduled job */
     updateWorkflowScheduledJob: ScheduledJobResponse;
+    /** Replace a test case. */
+    updateWorkflowTestCase: WorkflowTestCase;
     updateWorkflowVariable: WorkflowVariableResponse;
     /** Update an existing workspace */
     updateWorkspace: Workspace;
@@ -60625,6 +60829,13 @@ export type Mutation = {
      * INTERNAL: Requires actorType SERVICE
      */
     workerNotifyHumanResponders: WorkerNotifyHumanRespondersResponse;
+    /**
+     * Park the attempt in flight for asynchronous completion (Phase C): a send-and-wait waiting for a
+     * person, a tool approval, a policy approval, or a user completeAsync() (external, which gets a task
+     * token). Refused with FEATURE_DISABLED while fluidgrids.run-control is off.
+     * INTERNAL: Requires actorType SERVICE
+     */
+    workerParkActivityAsync: WorkerActivityParkResult;
     /**
      * Record an activity heartbeat (never written to history). The acknowledgement carries a pending
      * cancellation.
@@ -62214,6 +62425,14 @@ export type MutationBuiSyncExternalEnrollmentArgs = {
     input: BuiSyncExternalEnrollmentInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationBuiSyncExternalLessonArgs = {
+    input: BuiSyncExternalLessonInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationBuiSyncExternalLessonProgressArgs = {
+    input: BuiSyncExternalLessonProgressInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationBuiSyncLtiGradeArgs = {
     resourceLinkId: Scalars['ID']['input'];
     submissionId: Scalars['ID']['input'];
@@ -63175,6 +63394,18 @@ export type MutationCompleteActionItemArgs = {
     workspaceId: Scalars['ID']['input'];
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCompleteActivityAsyncArgs = {
+    result?: InputMaybe<Scalars['JSON']['input']>;
+    taskToken: Scalars['String']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCompleteActivityByIdArgs = {
+    activityId: Scalars['ID']['input'];
+    result?: InputMaybe<Scalars['JSON']['input']>;
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationCompleteGgnomadBookingArgs = {
     id: Scalars['ID']['input'];
 };
@@ -63767,6 +63998,10 @@ export type MutationCreateActionShareLinkArgs = {
     input: CreateShareGrantLinkInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCreateActivityPauseRuleArgs = {
+    input: WorkflowActivityPauseRuleInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationCreateAgentDefinitionArgs = {
     input: AgentDefinitionInput;
 };
@@ -65318,6 +65553,17 @@ export type MutationCreateWorkflowScheduledJobArgs = {
     input: ScheduledJobInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCreateWorkflowTestCaseArgs = {
+    input: WorkflowTestCaseInput;
+    workflowKey: Scalars['String']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationCreateWorkflowTestCaseFromRunArgs = {
+    description?: InputMaybe<Scalars['String']['input']>;
+    name: Scalars['String']['input'];
+    runId: Scalars['ID']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationCreateWorkflowVariableArgs = {
     input: CreateWorkflowVariableInput;
 };
@@ -65458,6 +65704,10 @@ export type MutationDeleteActionPolicyArgs = {
     id: Scalars['ID']['input'];
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationDeleteActivityPauseRuleArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationDeleteAgentDefinitionArgs = {
     id: Scalars['ID']['input'];
 };
@@ -66784,6 +67034,10 @@ export type MutationDeleteWorkflowScheduledJobArgs = {
     jobId: Scalars['ID']['input'];
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationDeleteWorkflowTestCaseArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationDeleteWorkflowVariableArgs = {
     id: Scalars['ID']['input'];
 };
@@ -67799,6 +68053,18 @@ export type MutationExtendSandboxTtlArgs = {
     id: Scalars['ID']['input'];
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationFailActivityAsyncArgs = {
+    failure: WorkflowAsyncFailureInput;
+    taskToken: Scalars['String']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationFailActivityByIdArgs = {
+    activityId: Scalars['ID']['input'];
+    failure: WorkflowAsyncFailureInput;
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationFgTriageFailedRunsArgs = {
     input?: InputMaybe<FgTriageFailedRunsInput>;
 };
@@ -67924,6 +68190,10 @@ export type MutationGovAddDocumentArgs = {
     input: GovAddDocumentInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationGovAddMyDocumentArgs = {
+    input: GovAddDocumentInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationGovArchiveAgencyArgs = {
     id: Scalars['ID']['input'];
 };
@@ -67985,6 +68255,10 @@ export type MutationGovCreateJurisdictionEventArgs = {
     input: GovCreateJurisdictionEventInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationGovCreateMyApplicationArgs = {
+    input: GovCreateApplicationInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationGovCreateOfficialArgs = {
     input: GovCreateOfficialInput;
 };
@@ -68133,10 +68407,19 @@ export type MutationGovRefundPaymentArgs = {
     id: Scalars['ID']['input'];
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationGovReplyToMyApplicationArgs = {
+    applicationId: Scalars['ID']['input'];
+    body: Scalars['String']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationGovReportGrievanceArgs = {
     input: GovReportGrievanceInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationGovReportMyGrievanceArgs = {
+    input: GovReportGrievanceInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationGovReviewDataChangeProposalArgs = {
     decision: GovProposalStatus;
     id: Scalars['ID']['input'];
@@ -68179,6 +68462,10 @@ export type MutationGovSubmitDataChangeProposalArgs = {
     input: GovSubmitDataChangeProposalInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationGovSubmitMyApplicationArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationGovTransitionApplicationArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -68574,6 +68861,18 @@ export type MutationHealthybowlNotifyMentionArgs = {
     input: HealthyBowlNotifyMentionInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationHeartbeatActivityAsyncArgs = {
+    details?: InputMaybe<Scalars['JSON']['input']>;
+    taskToken: Scalars['String']['input'];
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationHeartbeatActivityByIdArgs = {
+    activityId: Scalars['ID']['input'];
+    details?: InputMaybe<Scalars['JSON']['input']>;
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationHeartbeatDashboardPresenceArgs = {
     connectionId: Scalars['ID']['input'];
     dashboardId: Scalars['ID']['input'];
@@ -70379,6 +70678,13 @@ export type MutationOverrideTimeCampusWorkspaceQuotaArgs = {
     input: OverrideTimeCampusWorkspaceQuotaInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationPauseActivityArgs = {
+    reason: Scalars['String']['input'];
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    selector: WorkflowActivitySelectorInput;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationPauseGgnomadListingArgs = {
     id: Scalars['ID']['input'];
     listingType: GgnomadListingType;
@@ -72139,6 +72445,11 @@ export type MutationPswUpdateEngagementArgs = {
     input: PswUpdateEngagementInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationPswUpdateInvoiceArgs = {
+    id: Scalars['ID']['input'];
+    input: PswUpdateInvoiceInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationPswUpdateMatterArgs = {
     id: Scalars['ID']['input'];
     input: PswUpdateMatterInput;
@@ -73216,6 +73527,13 @@ export type MutationReserveTunnelSubdomainArgs = {
     input: ReserveTunnelSubdomainInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationResetActivityArgs = {
+    resetHeartbeat?: InputMaybe<Scalars['Boolean']['input']>;
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    selector: WorkflowActivitySelectorInput;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationResetCircuitBreakerArgs = {
     scope: Scalars['String']['input'];
     scopeValue: Scalars['String']['input'];
@@ -73911,6 +74229,10 @@ export type MutationRunTimeCampusTimeIntelligenceSweepArgs = {
     input?: InputMaybe<TimeCampusTimeIntelligenceSweepInput>;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationRunWorkflowTestsArgs = {
+    input: RunWorkflowTestsInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationSaveAssistantTurnArgs = {
     input: SaveAssistantTurnInput;
 };
@@ -75760,6 +76082,14 @@ export type MutationUnmuteConversationArgs = {
     conversationId: Scalars['ID']['input'];
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUnpauseActivityArgs = {
+    resetAttempts?: InputMaybe<Scalars['Boolean']['input']>;
+    resetHeartbeat?: InputMaybe<Scalars['Boolean']['input']>;
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    selector: WorkflowActivitySelectorInput;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUnpinConversationArgs = {
     conversationId: Scalars['ID']['input'];
 };
@@ -75927,6 +76257,13 @@ export type MutationUpdateActiveVibeArgs = {
     vibeId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateActivityOptionsArgs = {
+    options: WorkflowActivityOptionsInput;
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    selector: WorkflowActivitySelectorInput;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUpdateAgentDefinitionArgs = {
     id: Scalars['ID']['input'];
     input: AgentDefinitionInput;
@@ -76027,6 +76364,10 @@ export type MutationUpdateBigConsoleDashboardArgs = {
     input: BigConsoleUpdateDashboardInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateBigConsoleSettingsArgs = {
+    input: BigConsoleUpdateSettingsInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUpdateBigConsoleWidgetArgs = {
     input: BigConsoleUpdateWidgetInput;
 };
@@ -77746,11 +78087,26 @@ export type MutationUpdateWorkflowNotificationSettingsArgs = {
     input: UpdateWorkflowNotificationSettingsInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateWorkflowRunArgs = {
+    args?: InputMaybe<Scalars['JSON']['input']>;
+    name: Scalars['String']['input'];
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    target?: InputMaybe<RunTargetInput>;
+    timeoutMs?: InputMaybe<Scalars['Int']['input']>;
+    updateId: Scalars['ID']['input'];
+    waitFor?: InputMaybe<WorkflowUpdateWaitFor>;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUpdateWorkflowScheduledJobArgs = {
     input: WorkflowUpdateScheduledJobInput;
     jobId: Scalars['ID']['input'];
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationUpdateWorkflowTestCaseArgs = {
+    id: Scalars['ID']['input'];
+    input: WorkflowTestCaseInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationUpdateWorkflowVariableArgs = {
     id: Scalars['ID']['input'];
     input: UpdateWorkflowVariableInput;
@@ -77986,6 +78342,10 @@ export type MutationWorkerNotifyHumanRespondersArgs = {
     input: WorkerNotifyHumanRespondersInput;
 };
 /** Base Mutation type with placeholder field. Extended by individual mutation files. */
+export type MutationWorkerParkActivityAsyncArgs = {
+    input: WorkerActivityParkInput;
+};
+/** Base Mutation type with placeholder field. Extended by individual mutation files. */
 export type MutationWorkerRecordActivityHeartbeatArgs = {
     activityId: Scalars['ID']['input'];
     attempt: Scalars['Int']['input'];
@@ -79042,6 +79402,11 @@ export type NodeState = {
     runId: Scalars['String']['output'];
     startTime?: Maybe<Scalars['DateTime']['output']>;
     status: NodeStatus;
+    /**
+     * True when a saved test case's connection mock answered this node instead of a
+     * real call (BOFF-9960). Always false on a PRODUCTION run.
+     */
+    usedMock: Scalars['Boolean']['output'];
     /**
      * True when this node's output came from pinned data instead of a real call
      * (BOFF-7511). Always false on a PRODUCTION run.
@@ -87715,6 +88080,7 @@ export type PswCreateInvoiceInput = {
     dueDate?: InputMaybe<Scalars['DateTime']['input']>;
     engagementId?: InputMaybe<Scalars['ID']['input']>;
     issueDate?: InputMaybe<Scalars['DateTime']['input']>;
+    /** Manually entered lines: [{ description, quantity, rate, amount? }]. When supplied, subtotal and total are derived from the lines (a supplied subtotal or total must match). Cannot be combined with timeEntryIds or milestoneIds. */
     lineItems?: InputMaybe<Scalars['JSON']['input']>;
     milestoneIds?: InputMaybe<Array<Scalars['ID']['input']>>;
     notes?: InputMaybe<Scalars['String']['input']>;
@@ -88810,6 +89176,11 @@ export type PswUpdateEngagementInput = {
     startDate?: InputMaybe<Scalars['DateTime']['input']>;
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
 };
+/** Replaces the manually entered line items of a DRAFT invoice. Each line is { description, quantity, rate } (an optional amount must equal quantity x rate rounded to cents); subtotal and total are recomputed server-side. Omit taxAmount to keep the current tax. */
+export type PswUpdateInvoiceInput = {
+    lineItems: Scalars['JSON']['input'];
+    taxAmount?: InputMaybe<Scalars['Float']['input']>;
+};
 export type PswUpdateMatterInput = {
     description?: InputMaybe<Scalars['String']['input']>;
     dueDate?: InputMaybe<Scalars['DateTime']['input']>;
@@ -89071,11 +89442,7 @@ export type Query = {
     _planmagnetService?: Maybe<Scalars['String']['output']>;
     _planmagnetVersion?: Maybe<Scalars['String']['output']>;
     _serviceHealth: Scalars['String']['output'];
-    /**
-     * Who a person is reached through when a service shares its own resources with chosen people,
-     * groups or projects (service-only): the groups and projects they belong to in the calling
-     * service's workspace, and whether they administer the resource type there
-     */
+    /** Who a person is reached through when a service shares its own resources with chosen people, groups or projects (service-only): the groups and projects they belong to in the calling service's workspace, and whether they administer the resource type there */
     accessPrincipals: AccessPrincipals;
     /** Anonymously reveal the credential(s) behind a signed share link. */
     accessSharedSecret: SharedSecretView;
@@ -89305,6 +89672,8 @@ export type Query = {
     availableSandboxTags: Array<SandboxAvailableTag>;
     /** List assignable tags in the workspace */
     availableVibecontrolsTags: Array<AvailableTag>;
+    /** The caller's BigConsole settings in the request workspace. Self-scoped: the owner is always the calling actor and the workspace is always the request workspace, so the field takes no identity arguments. */
+    bigConsoleSettings: BigConsoleSettings;
     bigconsoleEntityTags: Array<BigConsoleTagAssignment>;
     /**
      * Get billing summary with cost estimation
@@ -89396,15 +89765,18 @@ export type Query = {
     /** Machine-only published course source export; not a learner access grant. */
     buiCourseKnowledgeSources: BuiCourseKnowledgeSourcePage;
     buiEnrollment?: Maybe<BuiEnrollment>;
+    /** Service-only (BOFF-10480): the canonical state of the given source records, for the source product's parity check. Ids with no canonical row are simply absent from the result. */
+    buiExternalSyncRecords: Array<BuiExternalSyncRecord>;
     /** Liveness/identity probe for the Buildmyiq subgraph. */
     buiHealth: Scalars['String']['output'];
     buiListAssessments: BuiAssessmentConnection;
-    /** Workspace-wide certificate list (instructors/facilitators/admins only — see `buildmyiq-certificate` action defaults, `viewerDefault: false` on `list`/`read`). Learners viewing their own credentials MUST use `buiMyCertificates` instead. No `learnerId` arg (BOFF FERPA/IDOR hardening): the elevated instructor/admin list shows the whole workspace; a learner's own credentials come from the self-scoped `buiMyCertificates`. */
+    /** Workspace-wide certificate list (instructors/facilitators/admins only — see `buildmyiq-certificate` action defaults, `viewerDefault: false` on `list`/`read`). Learners viewing their own credentials MUST use `buiMyCertificates` instead. No `learnerId` arg (BOFF FERPA/IDOR hardening): the elevated instructor/admin list shows the whole workspace; a learner's own credentials come from the self-scoped `buiMyCertificates`. `source` (BOFF-10481) narrows the list to the certificates mirrored from one product; omit it to list native and mirrored certificates alike. */
     buiListCertificates: BuiCertificateConnection;
     buiListCertifications: BuiCertificationConnection;
     buiListCohorts: BuiCohortConnection;
+    /** Courses in the workspace. `source` (BOFF-10481) narrows the list to the courses mirrored from one product, so a product's own catalog (for example TechnoSpam's) never lists the workspace's native BuildMyIQ courses. Omit it to list every course, native and mirrored alike. */
     buiListCourses: BuiCourseConnection;
-    /** Workspace-wide enrollment list (instructors/facilitators/admins only — see `buildmyiq-enrollment` action defaults in wspace-rbac-svc's seed, which set `viewerDefault: false` on `list`/`read` so a plain workspace Viewer cannot enumerate every learner's enrollments). Learners viewing their own enrollments MUST use `buiMyEnrollments`/`buiMyEnrollment` instead. No `learnerId` arg (BOFF FERPA/IDOR hardening): the elevated instructor/admin list shows the whole workspace and is filtered client-side; a learner's own enrollments come from the self-scoped `buiMyEnrollments`. The single-learner M2M point read remains available via `buiCourseEnrollment` for consuming subgraphs. */
+    /** Workspace-wide enrollment list (instructors/facilitators/admins only — see `buildmyiq-enrollment` action defaults in wspace-rbac-svc's seed, which set `viewerDefault: false` on `list`/`read` so a plain workspace Viewer cannot enumerate every learner's enrollments). Learners viewing their own enrollments MUST use `buiMyEnrollments`/`buiMyEnrollment` instead. No `learnerId` arg (BOFF FERPA/IDOR hardening): the elevated instructor/admin list shows the whole workspace and is filtered client-side; a learner's own enrollments come from the self-scoped `buiMyEnrollments`. The single-learner M2M point read remains available via `buiCourseEnrollment` for consuming subgraphs. `source` (BOFF-10481) narrows the list to the enrollments mirrored from one product; omit it to list native and mirrored enrollments alike. */
     buiListEnrollments: BuiEnrollmentConnection;
     buiListLessons: BuiLessonConnection;
     buiListModules: BuiModuleConnection;
@@ -89426,7 +89798,9 @@ export type Query = {
     buiLtiResourceLinks: Array<BuiLtiResourceLink>;
     /** Last-synced NRPS roster for one LTI placement's course context. */
     buiLtiRoster: Array<BuiLtiRosterMember>;
-    /** Type-C self-scoped list: the calling learner's own certificates. No `learnerId` arg — see `buiListCertificates` for the workspace-wide/ instructor equivalent. */
+    /** Type-B self-scoped single lookup (BOFF-10481): `id` identifies the certificate, but the resolver owner-filters by `ctx.actor.id` (`learnerId`) and returns null (never FORBIDDEN) when it does not exist or belongs to someone else, so existence is never leaked. */
+    buiMyCertificate?: Maybe<BuiCertificate>;
+    /** Type-C self-scoped list: the calling learner's own certificates. No `learnerId` arg — see `buiListCertificates` for the workspace-wide/ instructor equivalent. `source` (BOFF-10481) narrows the list to the certificates mirrored from one product. */
     buiMyCertificates: BuiCertificateConnection;
     /** Live course access for the authenticated learner; unavailable courses return false. */
     buiMyCourseAccess: BuiLearnerCourseAccess;
@@ -89437,7 +89811,7 @@ export type Query = {
     buiMyCourseAssistantTurn?: Maybe<BuiCourseAssistantTurn>;
     /** Type-B self-scoped single lookup: `id` identifies the enrollment, but the resolver owner-filters by `ctx.actor.id` (`learnerId`) and returns null (never leaks FORBIDDEN) if the caller doesn't own it. */
     buiMyEnrollment?: Maybe<BuiEnrollment>;
-    /** Type-C self-scoped list: the calling learner's own enrollments. No `learnerId` arg — identity comes from the authenticated actor (`ctx.actor.id`), never from client input (BOFF FERPA/IDOR fix — see `buiListEnrollments` for the workspace-wide/instructor equivalent). */
+    /** Type-C self-scoped list: the calling learner's own enrollments. No `learnerId` arg — identity comes from the authenticated actor (`ctx.actor.id`), never from client input (BOFF FERPA/IDOR fix — see `buiListEnrollments` for the workspace-wide/instructor equivalent). `source` (BOFF-10481) narrows the list to the enrollments mirrored from one product (for example the learner's TechnoSpam enrollments). */
     buiMyEnrollments: BuiEnrollmentConnection;
     /** Type-C self-scoped lookup: the calling learner's own current (most recent, unexpired) proctoring session for an assessment. No `learnerId` arg — identity comes from the authenticated actor, never client input. */
     buiMyProctoringSession?: Maybe<BuiProctoringSession>;
@@ -89488,10 +89862,7 @@ export type Query = {
     checkPermission: PermissionCheckResult;
     /** Check multiple permissions at once (max 50) */
     checkPermissions: Array<PermissionCheckResult>;
-    /**
-     * Whether a requester may grant roles workspace-wide — the checks setActorRoles applies to added
-     * roles, with no target actor and no write (service-only)
-     */
+    /** Whether a requester may grant roles workspace-wide — the checks setActorRoles applies to added roles, with no target actor and no write (service-only) */
     checkRoleGrant: RoleGrantCheckResult;
     /** Check if an actor can see a resource */
     checkVisibility: VisibilityCheckResult;
@@ -90841,6 +91212,8 @@ export type Query = {
     govListPermits: GovPermitConnection;
     govListRoutingRules: GovRoutingRuleConnection;
     govListServices: GovServiceConnection;
+    /** Self-scoped (Type B): one of the calling citizen's OWN applications. Owner- filtered by the authenticated actor; anyone else's application is NOT_FOUND, never FORBIDDEN. INTERNAL case notes are never returned on this path. */
+    govMyApplication: GovApplication;
     /** Self-scoped (Type C, no identity arg): the calling citizen's own applications. The resolver filters by the authenticated actor id — that filter IS the access control — so any authenticated actor may call this regardless of workspace RBAC role. Citizen-facing "my applications" UIs must use this instead of `govListApplications`, which is restricted to officer/agency roles. */
     govMyApplications: GovApplicationConnection;
     /** The calling actor's own response to a consultation, if any. */
@@ -90849,6 +91222,8 @@ export type Query = {
     govMyDataChangeProposals: GovDataChangeProposalConnection;
     /** Jurisdictions the calling actor follows. */
     govMyFollowedJurisdictions: GovJurisdictionConnection;
+    /** Self-scoped (Type B): one of the calling citizen's OWN grievances; anyone else's is NOT_FOUND. */
+    govMyGrievance: GovGrievance;
     /** Self-scoped (Type C, no identity arg): grievances filed by the calling citizen (reporterId = authenticated actor id). */
     govMyGrievances: GovGrievanceConnection;
     /** Self-scoped (Type C, no identity arg): payments made by the calling citizen (payerId = authenticated actor id). Citizen-facing "my payments" UIs must use this instead of `govListPayments`, which is restricted to officer/agency roles. */
@@ -90867,6 +91242,10 @@ export type Query = {
     /** Asset counts by category for a jurisdiction — drives map legends and registry summaries. */
     govPublicAssetSummary: Array<GovAssetCategoryCount>;
     govPublicAssets: GovPublicAssetConnection;
+    /** Self-scoped (Type B): one PUBLISHED service; any other status is NOT_FOUND. */
+    govPublishedService: GovService;
+    /** Self-scoped (Type C): the PUBLISHED service catalog for citizens. Draft, suspended and retired services are never returned; no staff permission is needed to browse what an agency has published. */
+    govPublishedServices: GovServiceConnection;
     govService?: Maybe<GovService>;
     /** Public permit verification by its printed code (citizen-facing trust check). */
     govVerifyPermit?: Maybe<GovPermit>;
@@ -91707,10 +92086,7 @@ export type Query = {
     myPendingInvitations: Array<Invitation>;
     /** Invitee-side: list pending invites whose `inviteeEmail` matches the caller's email (resolved from the tenant backend). `scopeType: "self"` because access is the user's own email — membership in any workspace is irrelevant. */
     myPendingInvites: Array<WorkspaceInvite>;
-    /**
-     * Get current user's permissions in a workspace (self-service).
-     * Returns full permission details including roles, permission strings, and cache TTL.
-     */
+    /** Get current user's permissions in a workspace (self-service). Returns full permission details including roles, permission strings, and cache TTL. */
     myPermissions: EffectivePermissions;
     myPersonalDataSummary: TimeCampusPersonalDataSummary;
     /** Get projects for the current authenticated user Self-list (Type C): resolver filters by ctx.userId, so the returned set IS the access list. Any authenticated user may call this; no RBAC permission is checked. (BOFF-2655) */
@@ -91719,10 +92095,7 @@ export type Query = {
     myRecommendations: Array<TimeCampusRecommendation>;
     /** Get resources created by the current authenticated user. Self-scoped: the resolver filters by ctx.actorId (createdBy). */
     myResources: WorkspaceResourceList;
-    /**
-     * Get current user's roles in a workspace (lightweight, self-service).
-     * Use this for quick role checks without fetching full permissions.
-     */
+    /** Get current user's roles in a workspace (lightweight, self-service). Use this for quick role checks without fetching full permissions. */
     myRoles: MyRolesResult;
     /** Usage the assistant LLM proxy recorded for the caller's OWN Ask or Take-action sandbox. Another user's sandbox, or one that is not an assistant sandbox, is NOT_FOUND. */
     mySandboxLlmUsage: SandboxLlmUsage;
@@ -92279,6 +92652,13 @@ export type Query = {
     queryMetrics: MetricsQueryResult;
     queryPaths: PathQueryResult;
     queryRetention: RetentionQueryResult;
+    /**
+     * Ask a run a question without changing it. A durable-function run answers from a replay of its
+     * history in the service (10 s; custom queries need a bundle built with the Phase C SDK); a canvas
+     * run answers status, progress, nodeStates and nodeOutput (args { nodeId }). Needs
+     * fluidgrids.run-control.
+     */
+    queryWorkflowRun: WorkflowQueryResult;
     /** Get RBAC analytics for a scope within a date range */
     rbacAnalytics: RbacAnalytics;
     /** Get RBAC configuration change history */
@@ -92312,24 +92692,11 @@ export type Query = {
     resourceTree: Array<Resource>;
     /** Get root resources for a tree view with bounded offset metadata. */
     resourceTreePage: ResourcePage;
-    /**
-     * Get all resource types. Optionally filter by product (PlatformProduct.slug):
-     * returns resource types mapped to that product, plus cross-product types (those
-     * with no product mapping) unless includeUnmapped is false. With no product arg,
-     * returns every resource type (backward compatible).
-     */
+    /** Get all resource types. Optionally filter by product (PlatformProduct.slug): returns resource types mapped to that product, plus cross-product types (those with no product mapping) unless includeUnmapped is false. With no product arg, returns every resource type (backward compatible). */
     resourceTypes: Array<Scalars['String']['output']>;
-    /**
-     * Get all resource types together with the product slugs each is mapped to.
-     * Drives the permission-management UI (badges, product assignment). A resource
-     * type with an empty products list is cross-product ("All").
-     */
+    /** Get all resource types together with the product slugs each is mapped to. Drives the permission-management UI (badges, product assignment). A resource type with an empty products list is cross-product ("All"). */
     resourceTypesWithProducts: Array<ResourceTypeProductInfo>;
-    /**
-     * List registered resources in a scope, optionally filtered by type, owner,
-     * active state, or a free-text search against `identifier`/`name`.
-     * Returns only resources registered via `registerResource`.
-     */
+    /** List registered resources in a scope, optionally filtered by type, owner, active state, or a free-text search against `identifier`/`name`. Returns only resources registered via `registerResource`. */
     resources: Array<Resource>;
     /** Get resources by type across all workspaces (admin only) */
     resourcesByType: WorkspaceResourceList;
@@ -92613,11 +92980,15 @@ export type Query = {
     teamWorkPatterns: Array<TeamWorkPatternEntry>;
     /** Preview the cost of a session with a mentor before booking it -- does not create anything. Read access mirrors tecMentor (reading the mentor's rate). */
     tecCalculateSessionCost: TecSessionCostEstimate;
-    /** A single certificate by id, for the instructor/admin view (BOFF-3863). Same "list-all" gating as tecListCertificates. A learner reading their own certificate must use tecMyCertificate instead. */
+    /** BOFF-10480: compare up to `limit` (default 200, max 200) records of each kind in the calling workspace with their canonical Buildmyiq records. Read-only; the background parity check repairs drift on its own schedule. */
+    tecCanonicalLmsParity: TecCanonicalParityReport;
+    /** A single certificate by id, for the instructor/admin view (BOFF-3863). Same "list-all" gating as tecListCertificates. A learner reading their own certificate must use buiMyCertificate instead. */
     tecCertificate?: Maybe<TecCertificate>;
     tecCourse?: Maybe<TecCourse>;
-    /** A single enrollment by id, for the instructor/admin view (BOFF-3863). Gated behind "list-all" like tecListEnrollments, because it can return any learner's enrollment. A learner reading their own enrollment must use tecMyEnrollment instead. Returns null for an id outside the workspace. */
+    /** A single enrollment by id, for the instructor/admin view (BOFF-3863). Gated behind "list-all" like tecListEnrollments, because it can return any learner's enrollment. A learner reading their own enrollment must use buiMyEnrollment instead. Returns null for an id outside the workspace. */
     tecEnrollment?: Maybe<TecEnrollment>;
+    /** Export the workspace's learner activity as xAPI statements (BOFF-4430): enrollments (registered), lesson completions (completed), course completions (completed), certificates (passed) and certificate revocations (voided). `since` is inclusive, `until` exclusive; `limit` defaults to 200 and is capped at 1000. Same "list-all" gate as tecListEnrollments, because it covers every learner in the workspace. */
+    tecExportXapiStatements: TecXapiStatementPage;
     tecHackathon?: Maybe<TecHackathon>;
     /** Liveness/identity probe for the Technospam subgraph. */
     tecHealth: Scalars['String']['output'];
@@ -92625,10 +92996,10 @@ export type Query = {
     tecLesson?: Maybe<TecLesson>;
     /** Lesson-author view of a QUIZ lesson including the answer key (BOFF-4107). Gated on technospam-lesson update, the same permission that edits it, so a learner can never read the key. Empty for a lesson without a quiz. */
     tecLessonQuizKey: Array<TecQuizQuestionKey>;
-    /** Cross-learner, instructor/admin view of certificates — same "list-all" gating as tecListEnrollments. A learner viewing their own certificates must use tecMyCertificates instead. */
+    /** Cross-learner, instructor/admin view of certificates — same "list-all" gating as tecListEnrollments. A learner viewing their own certificates must use buiMyCertificates(source: TECHNOSPAM) instead. */
     tecListCertificates: Array<TecCertificate>;
     tecListCourses: TecCourseConnection;
-    /** startDate/endDate filter enrollments by createdAt (inclusive), used to power the analytics page's date-range picker. This is the cross-learner, instructor/admin view — it returns every learner's enrollments in the workspace (optionally filtered to one learnerId). Gated behind the "list-all" action, which is NOT granted to the plain Viewer role by default. A learner viewing their own enrollments must use tecMyEnrollments instead. */
+    /** startDate/endDate filter enrollments by createdAt (inclusive), used to power the analytics page's date-range picker. This is the cross-learner, instructor/admin view — it returns every learner's enrollments in the workspace (optionally filtered to one learnerId). Gated behind the "list-all" action, which is NOT granted to the plain Viewer role by default. A learner viewing their own enrollments must use buiMyEnrollments(source: TECHNOSPAM) instead. */
     tecListEnrollments: TecEnrollmentConnection;
     tecListHackathons: TecHackathonConnection;
     tecListLessons: TecLessonConnection;
@@ -92646,13 +93017,25 @@ export type Query = {
     tecListSubmissions: TecSubmissionConnection;
     tecListTeams: TecHackathonTeamConnection;
     tecMentor?: Maybe<TecMentor>;
-    /** One of the calling learner's own certificates (BOFF-3863). Self-scoped (Type B): owner-filtered by the authenticated actor; null otherwise. */
+    /**
+     * One of the calling learner's own certificates (BOFF-3863). Self-scoped (Type B): owner-filtered by the authenticated actor; null otherwise.
+     * @deprecated Use buiMyCertificate(id: <TecCertificate.buiCertificateId>). Deprecated 2026-10-31 (BOFF-10481, OVL-24); removal no earlier than 2027-01-29.
+     */
     tecMyCertificate?: Maybe<TecCertificate>;
-    /** The calling learner's own certificates. Self-scoped (Type C): identity comes from the authenticated actor, never from a client-supplied argument — the resolver forces learnerId = ctx.actor.id server-side. */
+    /**
+     * The calling learner's own certificates. Self-scoped (Type C): identity comes from the authenticated actor, never from a client-supplied argument — the resolver forces learnerId = ctx.actor.id server-side.
+     * @deprecated Use buiMyCertificates(source: TECHNOSPAM); the Technospam view is on BuiCertificate.technospamCertificate and technospamRevokeReason. Deprecated 2026-10-31 (BOFF-10481, OVL-24); removal no earlier than 2027-01-29.
+     */
     tecMyCertificates: Array<TecCertificate>;
-    /** One of the calling learner's own enrollments (BOFF-3863). Self-scoped (Type B): the id is a client argument, but the resolver owner-filters by the authenticated actor and returns null for an enrollment that does not exist or belongs to someone else, so existence is never leaked. */
+    /**
+     * One of the calling learner's own enrollments (BOFF-3863). Self-scoped (Type B): the id is a client argument, but the resolver owner-filters by the authenticated actor and returns null for an enrollment that does not exist or belongs to someone else, so existence is never leaked.
+     * @deprecated Use buiMyEnrollment(id: <TecEnrollment.buiEnrollmentId>). Deprecated 2026-10-31 (BOFF-10481, OVL-24); removal no earlier than 2027-01-29.
+     */
     tecMyEnrollment?: Maybe<TecEnrollment>;
-    /** The calling learner's own enrollments. Self-scoped (Type C): identity comes from the authenticated actor, never from a client-supplied argument — the resolver forces learnerId = ctx.actor.id server-side. */
+    /**
+     * The calling learner's own enrollments. Self-scoped (Type C): identity comes from the authenticated actor, never from a client-supplied argument — the resolver forces learnerId = ctx.actor.id server-side.
+     * @deprecated Use buiMyEnrollments(source: TECHNOSPAM); the Technospam view is on BuiEnrollment.technospamEnrollment, technospamNextLessonId and technospamCompletions. Deprecated 2026-10-31 (BOFF-10481, OVL-24); removal no earlier than 2027-01-29.
+     */
     tecMyEnrollments: TecEnrollmentConnection;
     /** Return the most recent acceptance of each type for the calling actor in the current workspace. Self-scoped: result is always filtered by ctx.actorId. */
     tecMyLegalAcceptances: Array<TecLegalAcceptance>;
@@ -92683,6 +93066,10 @@ export type Query = {
     tecSubmission?: Maybe<TecSubmission>;
     /** A single hackathon team by id (BOFF-3863). Same read gate as tecListTeams. Returns null for an id outside the caller's workspace. */
     tecTeam?: Maybe<TecHackathonTeam>;
+    /** Public certificate verification for ATS partners and recruiters (BOFF-4430). Returns NOT_FOUND for an unknown serial. */
+    tecVerifyCertificate: TecCertificateVerification;
+    /** Batch variant of tecVerifyCertificate for ATS integrations that verify a whole candidate pipeline at once. At most 25 serials per call; duplicates are collapsed and results keep the request order. */
+    tecVerifyCertificates: Array<TecCertificateVerification>;
     testParserExpression: ParserTestResult;
     theAsset?: Maybe<TheAsset>;
     theComplianceCert?: Maybe<TheComplianceCert>;
@@ -92706,6 +93093,8 @@ export type Query = {
     theSafetyDashboard: TheSafetyDashboard;
     theSafetyIncident?: Maybe<TheSafetyIncident>;
     thread: MessageConnection;
+    /** Activation milestones for the calling workspace (BOFF-3450). */
+    timeCampusActivation: TimeCampusActivation;
     /** The caller's currently ACTIVE focus session, if any. Self-scoped, no arg. */
     timeCampusActiveFocusSession?: Maybe<TimeCampusFocusSession>;
     timeCampusAdminWorkspaceState: TimeCampusAdminWorkspaceState;
@@ -92717,6 +93106,8 @@ export type Query = {
     /** The OAuth-backed sources a capture channel can pull from. */
     timeCampusCapturePullProviders: Array<TimeCampusCapturePullProvider>;
     timeCampusDataErasureRequests: Array<TimeCampusDataErasureRequest>;
+    /** Current state of a TimeCampus export job started in the caller's workspace. Returns null when the job does not exist, belongs to another workspace, or is not a TimeCampus export. */
+    timeCampusExportJob?: Maybe<TimeCampusExportJob>;
     timeCampusFeatureFlags: TimeCampusFeatureFlagList;
     /** Adaptive focus-block suggestions for one local day. `dayStart` is the instant of the caller's local midnight for that day (yesterday up to 14 days ahead). Ranked from the caller's own work patterns, meetings and past focus sessions; slots already accepted, snoozed or dismissed are excluded. */
     timeCampusFocusBlockSuggestions: Array<TimeCampusFocusBlockSuggestion>;
@@ -92955,6 +93346,12 @@ export type Query = {
     workPatternSummary: WorkPatternSummary;
     /** The calling actor's own work patterns. `userId` is accepted for backward compatibility but is neutralized in the resolver (resolveTargetUserId): any non-privileged actor requesting a different user's data is silently redirected back to their own. Managers use `teamWorkPatternSummary` / `teamWorkPatterns` for genuinely workspace-wide visibility. */
     workPatterns: Array<WorkPattern>;
+    /**
+     * The workspace's activity pause rules that have not expired (Phase C), for the graph executor's
+     * rule check: [{ id, activityType, nodeType, workflowKey, reason, expiresAt }].
+     * INTERNAL: Requires actorType SERVICE
+     */
+    workerActivityPauseRules: Scalars['JSON']['output'];
     /**
      * The agent an AI Agent node of a run names, or null when it names none.
      * INTERNAL: Requires actorType SERVICE
@@ -93017,6 +93414,8 @@ export type Query = {
     workerRunStatuses: Array<WorkerRunStatusEntry>;
     /** Get a single workflow by ID */
     workflow?: Maybe<FluidGridsWorkflow>;
+    /** The workspace's activity pause rules that have not expired. */
+    workflowActivityPauseRules: Array<WorkflowActivityPauseRule>;
     /** Get a workflow by its unique key */
     workflowByKey?: Maybe<FluidGridsWorkflow>;
     /** The code bundle of a version; null for a version without code. */
@@ -93124,6 +93523,8 @@ export type Query = {
      * (10 s budget). `enhanced` adds the structured `__enhanced_stack_trace`.
      */
     workflowRunStackTrace: WorkflowRunStackTrace;
+    /** One update of a run, by its updateId (poll after updateWorkflowRun returns before the stage it asked for). */
+    workflowRunUpdate: WorkflowUpdateResult;
     workflowRuns: WorkflowRunListResponse;
     /**
      * How many runs the workflowRuns list returns for `filter` (the same filters and the same
@@ -93147,6 +93548,14 @@ export type Query = {
     workflowStaticDataList: Array<WorkflowStaticDataRecord>;
     /** Get workflow summary with execution statistics */
     workflowSummary: WorkflowSummaryResponse;
+    /** One test case, or null. */
+    workflowTestCase?: Maybe<WorkflowTestCase>;
+    /** The saved test cases of a workflow, in sort order. */
+    workflowTestCases: Array<WorkflowTestCase>;
+    /** One test-suite run and its per-case results, or null. People see the suite runs they started. */
+    workflowTestRun?: Maybe<WorkflowTestRun>;
+    /** The most recent test-suite runs of a workflow, newest first (1 to 50, default 20). */
+    workflowTestRuns: Array<WorkflowTestRun>;
     /** Get a single variable by id (owner-filtered to the caller's workspace). */
     workflowVariable?: Maybe<WorkflowVariable>;
     /** List variables visible in the caller's workspace (optionally filtered to one project's scope). */
@@ -94115,6 +94524,10 @@ export type QueryBuiEnrollmentArgs = {
     id: Scalars['ID']['input'];
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryBuiExternalSyncRecordsArgs = {
+    input: BuiExternalSyncRecordsInput;
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryBuiListAssessmentsArgs = {
     courseId: Scalars['ID']['input'];
     pagination?: InputMaybe<PaginationInput>;
@@ -94124,6 +94537,7 @@ export type QueryBuiListAssessmentsArgs = {
 export type QueryBuiListCertificatesArgs = {
     courseId?: InputMaybe<Scalars['ID']['input']>;
     pagination?: InputMaybe<PaginationInput>;
+    source?: InputMaybe<BuiExternalSource>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryBuiListCertificationsArgs = {
@@ -94140,12 +94554,14 @@ export type QueryBuiListCohortsArgs = {
 export type QueryBuiListCoursesArgs = {
     level?: InputMaybe<BuiCourseLevel>;
     pagination?: InputMaybe<PaginationInput>;
+    source?: InputMaybe<BuiExternalSource>;
     status?: InputMaybe<BuiCourseStatus>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryBuiListEnrollmentsArgs = {
     courseId?: InputMaybe<Scalars['ID']['input']>;
     pagination?: InputMaybe<PaginationInput>;
+    source?: InputMaybe<BuiExternalSource>;
     status?: InputMaybe<BuiEnrollmentStatus>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
@@ -94205,9 +94621,14 @@ export type QueryBuiLtiRosterArgs = {
     resourceLinkId: Scalars['ID']['input'];
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryBuiMyCertificateArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryBuiMyCertificatesArgs = {
     courseId?: InputMaybe<Scalars['ID']['input']>;
     pagination?: InputMaybe<PaginationInput>;
+    source?: InputMaybe<BuiExternalSource>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryBuiMyCourseAccessArgs = {
@@ -94246,6 +94667,7 @@ export type QueryBuiMyEnrollmentArgs = {
 export type QueryBuiMyEnrollmentsArgs = {
     courseId?: InputMaybe<Scalars['ID']['input']>;
     pagination?: InputMaybe<PaginationInput>;
+    source?: InputMaybe<BuiExternalSource>;
     status?: InputMaybe<BuiEnrollmentStatus>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
@@ -98740,6 +99162,10 @@ export type QueryGovListServicesArgs = {
     status?: InputMaybe<GovServiceStatus>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryGovMyApplicationArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryGovMyApplicationsArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
@@ -98756,6 +99182,10 @@ export type QueryGovMyFollowedJurisdictionsArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryGovMyGrievanceArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryGovMyGrievancesArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
@@ -98812,6 +99242,15 @@ export type QueryGovPublicAssetsArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryGovPublishedServiceArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryGovPublishedServicesArgs = {
+    category?: InputMaybe<GovServiceCategory>;
+    pagination?: InputMaybe<PaginationInput>;
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryGovServiceArgs = {
     id: Scalars['ID']['input'];
 };
@@ -103167,6 +103606,14 @@ export type QueryQueryRetentionArgs = {
     input: RetentionQueryInput;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryQueryWorkflowRunArgs = {
+    args?: InputMaybe<Scalars['JSON']['input']>;
+    name: Scalars['String']['input'];
+    rejectCondition?: InputMaybe<WorkflowQueryRejectCondition>;
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    target?: InputMaybe<RunTargetInput>;
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryRbacAnalyticsArgs = {
     dateRange?: InputMaybe<AnalyticsDateRangeInput>;
     scopeId: Scalars['String']['input'];
@@ -104144,6 +104591,10 @@ export type QueryTecCalculateSessionCostArgs = {
     mentorId: Scalars['ID']['input'];
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryTecCanonicalLmsParityArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryTecCertificateArgs = {
     id: Scalars['ID']['input'];
 };
@@ -104156,6 +104607,13 @@ export type QueryTecEnrollmentArgs = {
     id: Scalars['ID']['input'];
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryTecExportXapiStatementsArgs = {
+    courseId?: InputMaybe<Scalars['ID']['input']>;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    since?: InputMaybe<Scalars['DateTime']['input']>;
+    until?: InputMaybe<Scalars['DateTime']['input']>;
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryTecHackathonArgs = {
     id: Scalars['ID']['input'];
 };
@@ -104328,6 +104786,14 @@ export type QueryTecTeamArgs = {
     id: Scalars['ID']['input'];
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryTecVerifyCertificateArgs = {
+    serial: Scalars['String']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryTecVerifyCertificatesArgs = {
+    serials: Array<Scalars['String']['input']>;
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryTestParserExpressionArgs = {
     input: TestParserInput;
 };
@@ -104461,6 +104927,10 @@ export type QueryTimeCampusDataErasureRequestsArgs = {
     workspaceId: Scalars['ID']['input'];
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryTimeCampusExportJobArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryTimeCampusFeatureFlagsArgs = {
     workspaceId: Scalars['ID']['input'];
 };
@@ -105026,6 +105496,10 @@ export type QueryWorkPatternsArgs = {
     userId?: InputMaybe<Scalars['ID']['input']>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkerActivityPauseRulesArgs = {
+    workspaceId: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryWorkerAgentProfileArgs = {
     nodeId: Scalars['String']['input'];
     runId: Scalars['ID']['input'];
@@ -105229,6 +105703,12 @@ export type QueryWorkflowRunStackTraceArgs = {
     target?: InputMaybe<RunTargetInput>;
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowRunUpdateArgs = {
+    runId?: InputMaybe<Scalars['ID']['input']>;
+    target?: InputMaybe<RunTargetInput>;
+    updateId: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryWorkflowRunsArgs = {
     input: ListWorkflowRunsInput;
 };
@@ -105262,6 +105742,23 @@ export type QueryWorkflowSummaryArgs = {
     workflowKey: Scalars['String']['input'];
 };
 /** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowTestCaseArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowTestCasesArgs = {
+    workflowKey: Scalars['String']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowTestRunArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
+export type QueryWorkflowTestRunsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    workflowKey: Scalars['String']['input'];
+};
+/** Base Query type with placeholder field. Extended by individual query files. */
 export type QueryWorkflowVariableArgs = {
     id: Scalars['ID']['input'];
 };
@@ -106772,11 +107269,7 @@ export type ResolvedSecret = {
     value: Scalars['String']['output'];
     vaultId: Scalars['String']['output'];
 };
-/**
- * Registered resource with custom permission configurations.
- * Resources are only registered when they have non-default permissions
- * (overrides, visibility rules, or scoped assignments).
- */
+/** Registered resource with custom permission configurations. Resources are only registered when they have non-default permissions (overrides, visibility rules, or scoped assignments). */
 export type Resource = {
     __typename?: 'Resource';
     children: Array<Resource>;
@@ -106826,22 +107319,11 @@ export declare enum ResourceBookingStatus {
 }
 /** Filter for querying resources */
 export type ResourceFilterInput = {
-    /**
-     * Defaults to `true` — only active resources are returned. Omit the field
-     * or pass `null` to use the default; pass `false` to find deactivated
-     * resources. To list both, issue two separate queries (`true` then
-     * `false`) and merge client-side; tracked in BOFF-2419.
-     */
+    /** Defaults to `true` — only active resources are returned. Omit the field or pass `null` to use the default; pass `false` to find deactivated resources. To list both, issue two separate queries (`true` then `false`) and merge client-side; tracked in BOFF-2419. */
     isActive?: InputMaybe<Scalars['Boolean']['input']>;
     ownerId?: InputMaybe<Scalars['String']['input']>;
     resourceType?: InputMaybe<Scalars['String']['input']>;
-    /**
-     * Case-insensitive substring match against resource `identifier` and `name`.
-     * Blank or whitespace-only values are ignored. Input is capped at 200
-     * characters server-side (truncation happens before LIKE-escaping, so the
-     * cap applies to user content). PostgreSQL LIKE wildcards (`%`, `_`) and
-     * the escape character (`\\`) match literally, not as wildcards.
-     */
+    /** Case-insensitive substring match against resource `identifier` and `name`. Blank or whitespace-only values are ignored. Input is capped at 200 characters server-side (truncation happens before LIKE-escaping, so the cap applies to user content). PostgreSQL LIKE wildcards (`%`, `_`) and the escape character (`\\`) match literally, not as wildcards. */
     search?: InputMaybe<Scalars['String']['input']>;
 };
 /** Resource limits snapshot for a specific point in time */
@@ -106907,10 +107389,7 @@ export type ResourcePlanListResponse = {
     items: Array<ResourcePlan>;
     total: Scalars['Int']['output'];
 };
-/**
- * A resource type (permission group) together with the products it is mapped to.
- * An empty products list means the resource type is cross-product ("All").
- */
+/** A resource type (permission group) together with the products it is mapped to. An empty products list means the resource type is cross-product ("All"). */
 export type ResourceTypeProductInfo = {
     __typename?: 'ResourceTypeProductInfo';
     /** Product slugs (PlatformProduct.slug) this resource type is relevant to. */
@@ -107400,10 +107879,7 @@ export type Role = {
     /** Role-level permission overrides */
     permissionOverrides: Array<RolePermissionOverride>;
     priority: Scalars['Int']['output'];
-    /**
-     * Product this role belongs to (PlatformProduct.slug). Null = cross-product /
-     * platform role (e.g. Workspace Owner, Editor, Viewer) shown under every product.
-     */
+    /** Product this role belongs to (PlatformProduct.slug). Null = cross-product / platform role (e.g. Workspace Owner, Editor, Viewer) shown under every product. */
     productSlug?: Maybe<Scalars['String']['output']>;
     scopeId: Scalars['String']['output'];
     scopeType: Scalars['String']['output'];
@@ -107432,27 +107908,14 @@ export type RoleDefaultPermission = {
     resourceType: Scalars['String']['output'];
     roleId: Scalars['String']['output'];
 };
-/**
- * Filter for querying roles.
- *
- * Note: scopeId is intentionally not part of this filter — the workspace scope
- * is derived from the request context (x-workspace-id) and cannot be overridden
- * by the client. This prevents cross-workspace reads.
- */
+/** Filter for querying roles. Note: scopeId is intentionally not part of this filter — the workspace scope is derived from the request context (x-workspace-id) and cannot be overridden by the client. This prevents cross-workspace reads. */
 export type RoleFilterInput = {
-    /**
-     * Whether to include cross-product/platform roles (productSlug = null) when a
-     * product filter is applied. Defaults to true. Ignored when product is unset.
-     */
+    /** Whether to include cross-product/platform roles (productSlug = null) when a product filter is applied. Defaults to true. Ignored when product is unset. */
     includePlatformRoles?: InputMaybe<Scalars['Boolean']['input']>;
     includeSystem?: InputMaybe<Scalars['Boolean']['input']>;
     isSystem?: InputMaybe<Scalars['Boolean']['input']>;
     parentId?: InputMaybe<Scalars['ID']['input']>;
-    /**
-     * Filter roles by product (PlatformProduct.slug). When set, returns roles for
-     * that product. Cross-product/platform roles (productSlug = null) are included
-     * unless includePlatformRoles is explicitly false.
-     */
+    /** Filter roles by product (PlatformProduct.slug). When set, returns roles for that product. Cross-product/platform roles (productSlug = null) are included unless includePlatformRoles is explicitly false. */
     product?: InputMaybe<Scalars['String']['input']>;
 };
 /** Input for checkRoleGrant: may the requester grant these roles in scopeId? */
@@ -107468,17 +107931,9 @@ export type RoleGrantCheckResult = {
     __typename?: 'RoleGrantCheckResult';
     /** True when setActorRoles would let the requester add every requested role */
     allowed: Scalars['Boolean']['output'];
-    /**
-     * Null when allowed; otherwise ROLE_NOT_FOUND | ROLE_SCOPE_MISMATCH | MAX_ROLES_EXCEEDED |
-     * ASSIGNMENT_CREATE_REQUIRED | PROTECTED_ROLE_OWNER_ONLY | ROLE_ESCALATION
-     */
+    /** Null when allowed; otherwise ROLE_NOT_FOUND | ROLE_SCOPE_MISMATCH | MAX_ROLES_EXCEEDED | ASSIGNMENT_CREATE_REQUIRED | PROTECTED_ROLE_OWNER_ONLY | ROLE_ESCALATION */
     reasonCode?: Maybe<Scalars['String']['output']>;
-    /**
-     * The roles refused for reasonCode: the missing or out-of-scope roles, every requested role
-     * (ASSIGNMENT_CREATE_REQUIRED), the Owner/Admin roles (PROTECTED_ROLE_OWNER_ONLY), or the first
-     * role found above the requester's own authority (ROLE_ESCALATION). Empty when allowed or for
-     * MAX_ROLES_EXCEEDED.
-     */
+    /** The roles refused for reasonCode: the missing or out-of-scope roles, every requested role (ASSIGNMENT_CREATE_REQUIRED), the Owner/Admin roles (PROTECTED_ROLE_OWNER_ONLY), or the first role found above the requester's own authority (ROLE_ESCALATION). Empty when allowed or for MAX_ROLES_EXCEEDED. */
     refusedRoleIds: Array<Scalars['ID']['output']>;
 };
 /** Basic role information */
@@ -107992,6 +108447,15 @@ export type RunVersioningOverride = {
     /** PINNED: the version whose bundle the run is pinned to. */
     version?: Maybe<Scalars['String']['output']>;
 };
+export type RunWorkflowTestsInput = {
+    /** Run only these cases (enabled or not); an empty list runs none. Omitted: every enabled case. */
+    caseIds?: InputMaybe<Array<Scalars['ID']['input']>>;
+    /** Where the run was started from; default API. */
+    source?: InputMaybe<WorkflowTestRunSource>;
+    /** Version or alias to test; default the ACTIVE version, else the newest DRAFT. */
+    version?: InputMaybe<Scalars['String']['input']>;
+    workflowKey: Scalars['String']['input'];
+};
 export type RunningTimer = {
     __typename?: 'RunningTimer';
     elapsedSeconds: Scalars['Int']['output'];
@@ -111944,6 +112408,12 @@ export type StartWorkflowInput = {
     startDelay?: InputMaybe<Scalars['String']['input']>;
     /** One line shown in run lists and the run header (at most 200 characters). Parity. */
     summary?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Phase C update-with-start (needs fluidgrids.run-control): a new run gets the update before its
+     * first workflow task; with idConflictPolicy USE_EXISTING the open run gets it as a normal update.
+     * Refused together with startDelay.
+     */
+    update?: InputMaybe<StartWorkflowUpdateInput>;
     /** An exact version, an alias, or `active` (the default). */
     version?: InputMaybe<Scalars['String']['input']>;
     /**
@@ -111975,12 +112445,23 @@ export type StartWorkflowResult = {
      */
     existing: Scalars['Boolean']['output'];
     run: WorkflowRun;
+    /** The update the start carried (update-with-start), at the stage the start waited for (Phase C). */
+    updateResult?: Maybe<WorkflowUpdateResult>;
 };
 /** A signal delivered to a run as it starts (signal-with-start). */
 export type StartWorkflowSignalInput = {
     name: Scalars['String']['input'];
     payload?: InputMaybe<Scalars['JSON']['input']>;
 };
+/** Update-with-start: the update a startWorkflow sends with the run (Phase C, needs fluidgrids.run-control). */
+export type StartWorkflowUpdateInput = {
+    args?: InputMaybe<Scalars['JSON']['input']>;
+    name: Scalars['String']['input'];
+    /** The update's idempotency id. */
+    updateId: Scalars['ID']['input'];
+    /** How long startWorkflow waits for it; ACCEPTED by default. */
+    waitFor?: InputMaybe<WorkflowUpdateWaitFor>;
+};
 export declare enum StaticDataScope {
     Global = "GLOBAL",
     Node = "NODE"
@@ -115300,6 +115781,29 @@ export type TecBookSessionInput = {
     scheduledAt: Scalars['DateTime']['input'];
     topic: Scalars['String']['input'];
 };
+/** One Technospam LMS record whose canonical Buildmyiq record differs from it. */
+export type TecCanonicalParityMismatch = {
+    __typename?: 'TecCanonicalParityMismatch';
+    /** The fields that differ; `missing` when Buildmyiq holds no record for it. */
+    fields: Array<Scalars['String']['output']>;
+    /** The Technospam record id. */
+    id: Scalars['ID']['output'];
+    /** course, lesson, enrollment, lessonCompletion or certificate. */
+    kind: Scalars['String']['output'];
+};
+/** Result of comparing this workspace's Technospam LMS records with the canonical Buildmyiq records they were written to. */
+export type TecCanonicalParityReport = {
+    __typename?: 'TecCanonicalParityReport';
+    /** Records compared. */
+    checked: Scalars['Int']['output'];
+    /** Batches whose canonical read failed (Buildmyiq unreachable); their records were not compared. */
+    failed: Scalars['Int']['output'];
+    /** Records whose canonical record differs or is missing. */
+    mismatched: Scalars['Int']['output'];
+    mismatches: Array<TecCanonicalParityMismatch>;
+    /** Records skipped because a sync is already queued for them. */
+    pending: Scalars['Int']['output'];
+};
 export type TecCertificate = {
     __typename?: 'TecCertificate';
     /** BOFF-3134: id of the canonical certificate in Buildmyiq; null until mirrored. */
@@ -115324,6 +115828,35 @@ export declare enum TecCertificateStatus {
     Issued = "ISSUED",
     Revoked = "REVOKED"
 }
+/** The public verification result for one certificate serial. Never includes the learner's identity or the revoke reason. */
+export type TecCertificateVerification = {
+    __typename?: 'TecCertificateVerification';
+    /** Course level (BEGINNER / INTERMEDIATE / ADVANCED); null when NOT_FOUND. */
+    courseLevel?: Maybe<Scalars['String']['output']>;
+    /** Title of the course the certificate was earned on; null when NOT_FOUND. */
+    courseTitle?: Maybe<Scalars['String']['output']>;
+    issuedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** Always "TechnoSpam" — the issuing product. */
+    issuer: Scalars['String']['output'];
+    revokedAt?: Maybe<Scalars['DateTime']['output']>;
+    /** Final assessment score (0-100); null when NOT_FOUND. */
+    score?: Maybe<Scalars['Int']['output']>;
+    /** The serial that was checked, normalized (trimmed, upper-cased). */
+    serial: Scalars['String']['output'];
+    status: TecCertificateVerificationStatus;
+    /** True only when status is VALID. */
+    valid: Scalars['Boolean']['output'];
+    /** When this verification was performed (server time). */
+    verifiedAt: Scalars['DateTime']['output'];
+};
+export declare enum TecCertificateVerificationStatus {
+    /** No certificate carries this serial. */
+    NotFound = "NOT_FOUND",
+    /** The serial belongs to a certificate that was revoked after issue. */
+    Revoked = "REVOKED",
+    /** The serial belongs to an issued certificate that has not been revoked. */
+    Valid = "VALID"
+}
 export type TecCourse = {
     __typename?: 'TecCourse';
     /** BOFF-3134: id of the canonical course in Buildmyiq, the platform's LMS system of record. Null until the course has been mirrored there (normally within seconds of a write; the reconcile sweep catches up any backlog). */
@@ -115579,6 +116112,10 @@ export declare enum TecLegalAcceptanceType {
 }
 export type TecLesson = {
     __typename?: 'TecLesson';
+    /** BOFF-10464: id of the canonical lesson in Buildmyiq, the platform's LMS system of record. Null until the lesson has been mirrored there. The canonical lesson carries the shared lesson fields only; runnable-code metadata, quiz questions and the free-tier lock stay on this type, and a premium-only lesson's body is not mirrored. */
+    buiLessonId?: Maybe<Scalars['ID']['output']>;
+    /** BOFF-10464: the canonical Buildmyiq lesson this lesson is mirrored to. */
+    canonicalLesson?: Maybe<BuiLesson>;
     /** True when the calling learner has completed this lesson. */
     completedByMe: Scalars['Boolean']['output'];
     /** Null when `isLocked` is true (BOFF-4416 free-tier gating) -- the gate is enforced here at the API layer, not left to the client to respect. */
@@ -115632,6 +116169,10 @@ export type TecLessonCodeRun = {
 /** A lesson the learner finished inside an enrollment (BOFF-4107). */
 export type TecLessonCompletion = {
     __typename?: 'TecLessonCompletion';
+    /** BOFF-10464: id of the canonical lesson progress in Buildmyiq; null until mirrored. */
+    buiLessonProgressId?: Maybe<Scalars['ID']['output']>;
+    /** BOFF-10464: the canonical Buildmyiq lesson progress this completion is mirrored to. */
+    canonicalLessonProgress?: Maybe<BuiLessonProgress>;
     completedAt: Scalars['DateTime']['output'];
     enrollmentId: Scalars['ID']['output'];
     id: Scalars['ID']['output'];
@@ -116233,6 +116774,16 @@ export type TecUpdateStudyPlanStepStatusInput = {
     status: TecStudyPlanStepStatus;
     stepId: Scalars['ID']['input'];
 };
+/** One page of xAPI 1.0.3 statements. `statements` is an array of standard xAPI Statement objects ready to POST to an LRS `/statements` endpoint. When `hasMore` is true, request the next page with `since: nextSince` (statement ids are deterministic, so the one overlapping timestamp is de-duplicated by the LRS). */
+export type TecXapiStatementPage = {
+    __typename?: 'TecXapiStatementPage';
+    count: Scalars['Int']['output'];
+    hasMore: Scalars['Boolean']['output'];
+    nextSince?: Maybe<Scalars['DateTime']['output']>;
+    statements: Array<Scalars['JSON']['output']>;
+    /** xAPI version the statements conform to. */
+    version: Scalars['String']['output'];
+};
 export declare enum TemplateCategory {
     CodeAssistant = "CODE_ASSISTANT",
     ContentCreation = "CONTENT_CREATION",
@@ -117032,6 +117583,39 @@ export type TimeApprovalRequest = {
 export type TimeApprovalRequestTimeEntriesArgs = {
     pagination?: InputMaybe<PaginationInput>;
 };
+/** The calling workspace's activation progress. */
+export type TimeCampusActivation = {
+    __typename?: 'TimeCampusActivation';
+    /** True once the core milestones (first project and first time entry) are reached. */
+    activated: Scalars['Boolean']['output'];
+    /** When the last core milestone was reached; null until activated. */
+    activatedAt?: Maybe<Scalars['DateTime']['output']>;
+    completedCount: Scalars['Int']['output'];
+    milestones: Array<TimeCampusActivationMilestone>;
+    totalCount: Scalars['Int']['output'];
+    workspaceId: Scalars['ID']['output'];
+};
+/** One milestone's state in the calling workspace. */
+export type TimeCampusActivationMilestone = {
+    __typename?: 'TimeCampusActivationMilestone';
+    /** True once the workspace has ever reached the milestone. */
+    completed: Scalars['Boolean']['output'];
+    /** How many qualifying records the workspace has ever created. */
+    count: Scalars['Int']['output'];
+    /** When the milestone was first reached; null until then. */
+    firstReachedAt?: Maybe<Scalars['DateTime']['output']>;
+    key: TimeCampusActivationMilestoneKey;
+};
+/** A TimeCampus activation milestone: the first time a workspace does something that shows it is getting value from the product. */
+export declare enum TimeCampusActivationMilestoneKey {
+    FirstApproval = "FIRST_APPROVAL",
+    FirstClientPortalShare = "FIRST_CLIENT_PORTAL_SHARE",
+    FirstExpense = "FIRST_EXPENSE",
+    FirstInvoice = "FIRST_INVOICE",
+    FirstPomodoro = "FIRST_POMODORO",
+    FirstProject = "FIRST_PROJECT",
+    FirstTimeEntry = "FIRST_TIME_ENTRY"
+}
 export type TimeCampusAdminMutationResult = {
     __typename?: 'TimeCampusAdminMutationResult';
     message: Scalars['String']['output'];
@@ -117375,11 +117959,18 @@ export declare enum TimeCampusExportFormat {
 }
 export type TimeCampusExportJob = {
     __typename?: 'TimeCampusExportJob';
+    completedAt?: Maybe<Scalars['DateTime']['output']>;
     createdAt: Scalars['DateTime']['output'];
+    downloadExpiresAt?: Maybe<Scalars['DateTime']['output']>;
+    /** Pre-signed archive URL, present once the job is COMPLETED. */
     downloadUrl?: Maybe<Scalars['String']['output']>;
     entityTypes: Array<Scalars['String']['output']>;
+    errorMessage?: Maybe<Scalars['String']['output']>;
     format: TimeCampusExportFormat;
     id: Scalars['ID']['output'];
+    /** Completion percentage, 0-100. */
+    progress?: Maybe<Scalars['Int']['output']>;
+    /** CREATED, QUEUED, RUNNING, COMPLETED, FAILED, CANCELLED, EXPIRED or DELETED. */
     status: Scalars['String']['output'];
     workspaceId: Scalars['ID']['output'];
 };
@@ -117838,6 +118429,8 @@ export type TimeCampusLifeProfile = {
     hideRemainingWeeks: Scalars['Boolean']['output'];
     id: Scalars['ID']['output'];
     lifeExpectancyYears?: Maybe<Scalars['Int']['output']>;
+    /** In-app theme picked on the settings page: light, dark, system, forest, ocean, sunset or high-contrast. Null until the user chooses one. */
+    themePreference?: Maybe<Scalars['String']['output']>;
     timezone: Scalars['String']['output'];
     treatBreakAsSelfCare: Scalars['Boolean']['output'];
     updatedAt: Scalars['DateTime']['output'];
@@ -117853,6 +118446,8 @@ export type TimeCampusLifeProfileInput = {
     gridUnit?: InputMaybe<Scalars['String']['input']>;
     hideRemainingWeeks?: InputMaybe<Scalars['Boolean']['input']>;
     lifeExpectancyYears?: InputMaybe<Scalars['Int']['input']>;
+    /** One of light, dark, system, forest, ocean, sunset or high-contrast; null clears the stored choice. */
+    themePreference?: InputMaybe<Scalars['String']['input']>;
     timezone?: InputMaybe<Scalars['String']['input']>;
     treatBreakAsSelfCare?: InputMaybe<Scalars['Boolean']['input']>;
     weekStartsOn?: InputMaybe<Scalars['Int']['input']>;
@@ -117933,6 +118528,7 @@ export declare enum TimeCampusLoadEvidenceRefType {
 }
 export declare enum TimeCampusLoadFallbackReason {
     AiNotEnabled = "AI_NOT_ENABLED",
+    CreditsExhausted = "CREDITS_EXHAUSTED",
     InsufficientData = "INSUFFICIENT_DATA",
     InvalidReply = "INVALID_REPLY",
     LowConfidence = "LOW_CONFIDENCE",
@@ -122299,10 +122895,7 @@ export type UpdateRoleInput = {
     name?: InputMaybe<Scalars['String']['input']>;
     parentId?: InputMaybe<Scalars['ID']['input']>;
     priority?: InputMaybe<Scalars['Int']['input']>;
-    /**
-     * Product this role belongs to (PlatformProduct.slug). Set to null only from
-     * admin-app flows that intentionally manage cross-product platform roles.
-     */
+    /** Product this role belongs to (PlatformProduct.slug). Set to null only from admin-app flows that intentionally manage cross-product platform roles. */
     productSlug?: InputMaybe<Scalars['String']['input']>;
 };
 export type UpdateRouteInput = {
@@ -126873,6 +127466,33 @@ export type WorkerActionPolicyDecision = {
      */
     reason: Scalars['String']['output'];
 };
+/** Park the attempt in flight for asynchronous completion (Phase C, spec code-first 11 §2.2). */
+export type WorkerActivityParkInput = {
+    activityId: Scalars['ID']['input'];
+    attempt: Scalars['Int']['input'];
+    /** When the park ends; default ASYNC_ACTIVITY_DEFAULT_TTL_SECONDS (30 days), capped by schedule-to-close. */
+    deadline?: InputMaybe<Scalars['DateTime']['input']>;
+    /** human, tool, policy (resumed by that request) or external (completed by token or by id). */
+    reason: Scalars['String']['input'];
+    /** The human-response, tool-approval or policy request id; required unless reason is external. */
+    requestId?: InputMaybe<Scalars['String']['input']>;
+    runId: Scalars['ID']['input'];
+    /** State kept for the resume (at most 256 KiB). */
+    state?: InputMaybe<Scalars['JSON']['input']>;
+};
+export type WorkerActivityParkResult = {
+    __typename?: 'WorkerActivityParkResult';
+    /**
+     * False with a reason when the park is refused: FEATURE_DISABLED (fluidgrids.run-control is off; keep
+     * the Phase B behaviour), RUN_CLOSED, NOT_FOUND, STALE_ATTEMPT, ALREADY_PARKED, CANCELLED,
+     * INVALID_REASON, REQUEST_REQUIRED, STATE_TOO_LARGE or TOKEN_LIMIT.
+     */
+    accepted: Scalars['Boolean']['output'];
+    deadline?: Maybe<Scalars['DateTime']['output']>;
+    reason?: Maybe<Scalars['String']['output']>;
+    /** The task token of an external park (shown once); null otherwise. */
+    taskToken?: Maybe<Scalars['String']['output']>;
+};
 /** The agent an AI Agent node runs under, read from the run's stored definition. */
 export type WorkerAgentProfile = {
     __typename?: 'WorkerAgentProfile';
@@ -127246,6 +127866,11 @@ export type WorkerNodeState = {
     runId: Scalars['String']['output'];
     startTime?: Maybe<Scalars['DateTime']['output']>;
     status: NodeStatus;
+    /**
+     * True when a TEST run's test case mocked this node's connection call, so no
+     * external call was made (BOFF-9960). Observational, like usedPinnedData.
+     */
+    usedMock?: Maybe<Scalars['Boolean']['output']>;
     /**
      * True when this node's output came from pinned data instead of a real call
      * (BOFF-7511). The executor decides this itself from the job message's own
@@ -127464,6 +128089,11 @@ export type WorkerUpdateNodeStateInput = {
     output?: InputMaybe<Scalars['JSON']['input']>;
     startTime?: InputMaybe<Scalars['DateTime']['input']>;
     status: NodeStatus;
+    /**
+     * Set true when the executor answered the node's connection call from a test
+     * case's mock instead of calling it (BOFF-9960). Only ever true on a TEST run.
+     */
+    usedMock?: InputMaybe<Scalars['Boolean']['input']>;
     /**
      * Set true when the executor used pinned data instead of actually calling the
      * node (BOFF-7511).
@@ -127511,6 +128141,8 @@ export type WorkflowActivityFailureInput = {
 export type WorkflowActivityHeartbeatAck = {
     __typename?: 'WorkflowActivityHeartbeatAck';
     cancelRequested: Scalars['Boolean']['output'];
+    pauseReason?: Maybe<Scalars['String']['output']>;
+    /** Phase C (11 §2.28): the activity was paused; stop the attempt with ActivityPausedError. */
     paused: Scalars['Boolean']['output'];
 };
 /** The lease of one activity attempt. */
@@ -127520,6 +128152,11 @@ export type WorkflowActivityLease = {
     activityId: Scalars['ID']['output'];
     args?: Maybe<Scalars['JSON']['output']>;
     attempt: Scalars['Int']['output'];
+    /**
+     * Phase C (C-H4): SYNC for an ordinary attempt; RESUMED for an attempt dispatched again to finish a
+     * park (workerParkActivityAsync), whose `resume` carries what finishes it.
+     */
+    completion: Scalars['String']['output'];
     /** Resolved connections: [{ connectionId, adapter }]. */
     connections?: Maybe<Scalars['JSON']['output']>;
     heartbeatDetails?: Maybe<Scalars['JSON']['output']>;
@@ -127538,6 +128175,8 @@ export type WorkflowActivityLease = {
     pinnedOutput?: Maybe<Scalars['JSON']['output']>;
     /** Why the lease was refused: NOT_FOUND, NOT_DURABLE, RUN_CLOSED, STALE_ATTEMPT, NOT_DUE, CANCELLED, NOT_ALLOWED. */
     reason?: Maybe<Scalars['String']['output']>;
+    /** RESUMED only: { kind, requestId, payload, state }: the park's kind and request, the answer, the parked state. */
+    resume?: Maybe<Scalars['JSON']['output']>;
     rootRunId: Scalars['ID']['output'];
     runId: Scalars['ID']['output'];
     runMode: RunMode;
@@ -127545,6 +128184,71 @@ export type WorkflowActivityLease = {
     scheduleToCloseDeadline?: Maybe<Scalars['DateTime']['output']>;
     startToCloseTimeoutMs: Scalars['Int']['output'];
 };
+/** New options for activities; they apply from the next attempt. */
+export type WorkflowActivityOptionsInput = {
+    heartbeatTimeoutMs?: InputMaybe<Scalars['Int']['input']>;
+    retry?: InputMaybe<WorkflowActivityRetryInput>;
+    scheduleToCloseTimeoutMs?: InputMaybe<Scalars['Int']['input']>;
+    scheduleToStartTimeoutMs?: InputMaybe<Scalars['Int']['input']>;
+    startToCloseTimeoutMs?: InputMaybe<Scalars['Int']['input']>;
+};
+/** A workspace rule that pauses matching durable activities when they are scheduled or retried. */
+export type WorkflowActivityPauseRule = {
+    __typename?: 'WorkflowActivityPauseRule';
+    /** Matches the node type an activity runs (or a user activity's name). */
+    activityType?: Maybe<Scalars['String']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    createdBy: Scalars['String']['output'];
+    /** The rule ends (and unpauses what it paused) at this time; null: until deleted. */
+    expiresAt?: Maybe<Scalars['DateTime']['output']>;
+    id: Scalars['ID']['output'];
+    nodeType?: Maybe<Scalars['String']['output']>;
+    reason: Scalars['String']['output'];
+    workflowKey?: Maybe<Scalars['String']['output']>;
+};
+/** A new pause rule: at least one of activityType, nodeType or workflowKey. */
+export type WorkflowActivityPauseRuleInput = {
+    activityType?: InputMaybe<Scalars['String']['input']>;
+    expiresAt?: InputMaybe<Scalars['DateTime']['input']>;
+    nodeType?: InputMaybe<Scalars['String']['input']>;
+    reason: Scalars['String']['input'];
+    workflowKey?: InputMaybe<Scalars['String']['input']>;
+};
+/** A retry policy change (each field optional). */
+export type WorkflowActivityRetryInput = {
+    backoffMultiplier?: InputMaybe<Scalars['Float']['input']>;
+    /** The longest delay, in milliseconds. */
+    maxDelay?: InputMaybe<Scalars['Int']['input']>;
+    maxRetries?: InputMaybe<Scalars['Int']['input']>;
+    nonRetryableErrorTypes?: InputMaybe<Array<Scalars['String']['input']>>;
+    /** Milliseconds before the first retry. */
+    retryDelay?: InputMaybe<Scalars['Int']['input']>;
+    retryOnErrorTypes?: InputMaybe<Array<ErrorType>>;
+};
+/** Which activities of a run an operation acts on: exactly one of the three. */
+export type WorkflowActivitySelectorInput = {
+    activityId?: InputMaybe<Scalars['ID']['input']>;
+    /** The node type the activities run. */
+    activityType?: InputMaybe<Scalars['String']['input']>;
+    /** Every open activity of the run. */
+    all?: InputMaybe<Scalars['Boolean']['input']>;
+};
+/** A failure reported for an activity from outside the run (asynchronous completion). */
+export type WorkflowAsyncFailureInput = {
+    details?: InputMaybe<Scalars['JSON']['input']>;
+    errorType?: InputMaybe<ErrorType>;
+    message: Scalars['String']['input'];
+    nonRetryable?: InputMaybe<Scalars['Boolean']['input']>;
+    /** The application failure type (an ApplicationError type). */
+    type?: InputMaybe<Scalars['String']['input']>;
+};
+/** What a heartbeat of an asynchronously completed activity answers. */
+export type WorkflowAsyncHeartbeatAck = {
+    __typename?: 'WorkflowAsyncHeartbeatAck';
+    cancelRequested: Scalars['Boolean']['output'];
+    pauseReason?: Maybe<Scalars['String']['output']>;
+    paused: Scalars['Boolean']['output'];
+};
 /**
  * How a workflow version was written (BOFF-3720).
  * DIRECT: a person, with their own sign-in.
@@ -128471,6 +129175,25 @@ export declare enum WorkflowProposalStatus {
     /** The workflow changed after the proposal was made; ask for a new one */
     Stale = "STALE"
 }
+/** When queryWorkflowRun refuses instead of answering (Phase C, spec code-first 11 §2.21). */
+export declare enum WorkflowQueryRejectCondition {
+    None = "NONE",
+    /** Refuse when the run ended other than COMPLETED. */
+    NotCompletedCleanly = "NOT_COMPLETED_CLEANLY",
+    /** Refuse when the run has ended. */
+    NotOpen = "NOT_OPEN"
+}
+/** One query's answer. */
+export type WorkflowQueryResult = {
+    __typename?: 'WorkflowQueryResult';
+    /** Why the query was refused or failed. */
+    error?: Maybe<Scalars['String']['output']>;
+    name: Scalars['String']['output'];
+    /** No handler takes the name, or rejectCondition refused the query (`error` says why). */
+    rejected: Scalars['Boolean']['output'];
+    /** The handler's answer, following the run's data-privacy settings. */
+    value?: Maybe<Scalars['JSON']['output']>;
+};
 /**
  * A gradual rollout (spec code-first 11 §2.27): `percent` % of the automatic starts of the workflow
  * (startWorkflow without a version, or `active`) run `toVersion` instead of the ACTIVE `fromVersion`.
@@ -128831,6 +129554,22 @@ export type WorkflowRunStackTrace = {
     /** Where each pending await of the workflow code is (`__stack_trace`); null for a closed run. */
     trace?: Maybe<Scalars['String']['output']>;
 };
+/**
+ * The lifecycle of an update to a durable-function run (Phase C, spec code-first 11 §2.39). REJECTED
+ * lives on the update only, never in the run's history.
+ */
+export declare enum WorkflowRunUpdateStatus {
+    /** The handler accepted it and is running. */
+    Accepted = "ACCEPTED",
+    /** Already in history (update-with-start); the next workflow task runs it. */
+    Admitted = "ADMITTED",
+    /** The handler finished: `result`, or `failure`. */
+    Completed = "COMPLETED",
+    /** Requested; the next workflow task receives it. */
+    Pending = "PENDING",
+    /** The validator refused it, or no handler answered it (UPDATE_NOT_HANDLED), or the run ended first (RUN_CLOSED). */
+    Rejected = "REJECTED"
+}
 export type WorkflowScheduledJob = {
     __typename?: 'WorkflowScheduledJob';
     config?: Maybe<Scalars['JSON']['output']>;
@@ -128956,6 +129695,11 @@ export type WorkflowTaskLease = {
     buildId?: Maybe<Scalars['String']['output']>;
     bundle?: Maybe<WorkflowCodeBundleAccess>;
     cancelRequested: Scalars['Boolean']['output'];
+    /**
+     * Phase C (D-SDK1-32): the bundle features (code.features names) the workspace's flags enable, sent
+     * as the task request's `features`. A bundle with interceptors runs only when they are listed.
+     */
+    features: Array<Scalars['String']['output']>;
     historyBytes: Scalars['Float']['output'];
     /** The history length the attempt works from; pass it back as expectedHistoryLength. */
     historyLength: Scalars['Int']['output'];
@@ -128975,6 +129719,11 @@ export type WorkflowTaskLease = {
     startedAt: Scalars['DateTime']['output'];
     taskId: Scalars['ID']['output'];
     taskQueue?: Maybe<Scalars['String']['output']>;
+    /**
+     * Phase C (C-ABI-H): the pending updates this task is delivered, each { updateId, name, args,
+     * headers }: the task request's `updates`. Answering them is relief (accepted with any flag state).
+     */
+    updates: Array<Scalars['JSON']['output']>;
     version?: Maybe<Scalars['String']['output']>;
     workflowFn?: Maybe<Scalars['String']['output']>;
     workflowKey?: Maybe<Scalars['String']['output']>;
@@ -128989,11 +129738,208 @@ export type WorkflowTaskLocalActivityInput = {
     operation?: InputMaybe<Scalars['String']['input']>;
     summary?: InputMaybe<Scalars['String']['input']>;
 };
+export declare enum WorkflowTestAssertionOperator {
+    /** A number lies between `min` and `max` (inclusive; either may be omitted). */
+    Between = "BETWEEN",
+    /** A string contains `expected`, or an array contains an element equal to it. */
+    Contains = "CONTAINS",
+    /** The value equals `expected` (deep equality). */
+    Equals = "EQUALS",
+    Exists = "EXISTS",
+    /** An array has between `min` and `max` items (inclusive; either may be omitted). */
+    ItemCount = "ITEM_COUNT",
+    /** The value is valid against the JSON Schema in `expected`. */
+    JsonSchema = "JSON_SCHEMA",
+    /** A string matches the regular expression in `expected`. */
+    Matches = "MATCHES",
+    NotContains = "NOT_CONTAINS",
+    NotEquals = "NOT_EQUALS",
+    NotExists = "NOT_EXISTS"
+}
+/** One rule on a node's output. */
+export type WorkflowTestAssertionRule = {
+    __typename?: 'WorkflowTestAssertionRule';
+    expected?: Maybe<Scalars['JSON']['output']>;
+    max?: Maybe<Scalars['Float']['output']>;
+    /** Shown when the rule does not hold. */
+    message?: Maybe<Scalars['String']['output']>;
+    min?: Maybe<Scalars['Float']['output']>;
+    operator: WorkflowTestAssertionOperator;
+    /** Dotted path into the node output (e.g. `body.items.0.id`); null checks the whole output. */
+    path?: Maybe<Scalars['String']['output']>;
+};
+export type WorkflowTestAssertionRuleInput = {
+    expected?: InputMaybe<Scalars['JSON']['input']>;
+    max?: InputMaybe<Scalars['Float']['input']>;
+    message?: InputMaybe<Scalars['String']['input']>;
+    min?: InputMaybe<Scalars['Float']['input']>;
+    operator: WorkflowTestAssertionOperator;
+    path?: InputMaybe<Scalars['String']['input']>;
+};
+export type WorkflowTestCase = {
+    __typename?: 'WorkflowTestCase';
+    connectionMocks: Array<WorkflowTestConnectionMock>;
+    createdAt: Scalars['DateTime']['output'];
+    createdBy: Scalars['String']['output'];
+    description?: Maybe<Scalars['String']['output']>;
+    enabled: Scalars['Boolean']['output'];
+    expectations: Array<WorkflowTestNodeExpectation>;
+    expectedStatus: WorkflowTestExpectedStatus;
+    id: Scalars['ID']['output'];
+    /** The case's result in the most recent of the workflow's last 20 finished suite runs that ran it; null when none of them did. */
+    lastResult?: Maybe<WorkflowTestCaseResult>;
+    name: Scalars['String']['output'];
+    /** Pinned node outputs: { [nodeId]: { data: { ... } } }. */
+    pinnedOutputs: Scalars['JSON']['output'];
+    sortOrder: Scalars['Int']['output'];
+    triggerData: Scalars['JSON']['output'];
+    /** The node the run starts on; null starts on the workflow's single entry node. */
+    triggerNodeId?: Maybe<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    updatedBy?: Maybe<Scalars['String']['output']>;
+    workflowKey: Scalars['String']['output'];
+};
+/**
+ * A whole test case. Updating replaces every field. At most 256 KiB of JSON per
+ * case, 100 mocks, 100 pinned nodes and 100 checked nodes.
+ */
+export type WorkflowTestCaseInput = {
+    connectionMocks?: InputMaybe<Array<WorkflowTestConnectionMockInput>>;
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Default true; disabled cases are skipped by runWorkflowTests. */
+    enabled?: InputMaybe<Scalars['Boolean']['input']>;
+    expectations?: InputMaybe<Array<WorkflowTestNodeExpectationInput>>;
+    /** Default COMPLETED. */
+    expectedStatus?: InputMaybe<WorkflowTestExpectedStatus>;
+    /** 1 to 200 characters, unique (ignoring case) among the workflow's test cases. */
+    name: Scalars['String']['input'];
+    /** { [nodeId]: { data: { ... } } } */
+    pinnedOutputs?: InputMaybe<Scalars['JSON']['input']>;
+    sortOrder?: InputMaybe<Scalars['Int']['input']>;
+    triggerData?: InputMaybe<Scalars['JSON']['input']>;
+    triggerNodeId?: InputMaybe<Scalars['String']['input']>;
+};
+export type WorkflowTestCaseResult = {
+    __typename?: 'WorkflowTestCaseResult';
+    caseId: Scalars['ID']['output'];
+    caseName: Scalars['String']['output'];
+    completedAt?: Maybe<Scalars['DateTime']['output']>;
+    failures: Array<WorkflowTestFailure>;
+    /** The TEST run of the case; null when it could not start. */
+    runId?: Maybe<Scalars['ID']['output']>;
+    runStatus?: Maybe<RunStatus>;
+    status: WorkflowTestRunStatus;
+};
+/**
+ * A canned connection result: the node returns `response` (or fails with `error`)
+ * instead of calling its connection. `operation` narrows it to one operation.
+ */
+export type WorkflowTestConnectionMock = {
+    __typename?: 'WorkflowTestConnectionMock';
+    error?: Maybe<WorkflowTestMockError>;
+    nodeId: Scalars['String']['output'];
+    operation?: Maybe<Scalars['String']['output']>;
+    response?: Maybe<Scalars['JSON']['output']>;
+};
+export type WorkflowTestConnectionMockInput = {
+    error?: InputMaybe<WorkflowTestMockErrorInput>;
+    nodeId: Scalars['String']['input'];
+    operation?: InputMaybe<Scalars['String']['input']>;
+    /** Set exactly one of response and error. */
+    response?: InputMaybe<Scalars['JSON']['input']>;
+};
+/** The run outcome a test case expects. */
+export declare enum WorkflowTestExpectedStatus {
+    Completed = "COMPLETED",
+    Failed = "FAILED"
+}
+export type WorkflowTestFailure = {
+    __typename?: 'WorkflowTestFailure';
+    /** ASSERTION_FAILED, NODE_FAILED, NODE_TIMEOUT, RUN_FAILED, UNEXPECTED_STATUS, EXPECTED_NODE_NOT_RUN, RUN_NOT_STARTED, UNKNOWN_NODE, RUN_CANCELLED, RUN_TERMINATED, RUN_MISSING or SUITE_TIMEOUT. */
+    code: Scalars['String']['output'];
+    /** For ASSERTION_FAILED, the rules that did not hold; the node's output on the run holds every rule result. */
+    message: Scalars['String']['output'];
+    nodeId?: Maybe<Scalars['String']['output']>;
+};
+export type WorkflowTestMockError = {
+    __typename?: 'WorkflowTestMockError';
+    errorType?: Maybe<ErrorType>;
+    message: Scalars['String']['output'];
+};
+export type WorkflowTestMockErrorInput = {
+    errorType?: InputMaybe<ErrorType>;
+    message: Scalars['String']['input'];
+};
+/** The rules a test case checks on one node's output when the node completes. */
+export type WorkflowTestNodeExpectation = {
+    __typename?: 'WorkflowTestNodeExpectation';
+    nodeId: Scalars['String']['output'];
+    rules: Array<WorkflowTestAssertionRule>;
+};
+export type WorkflowTestNodeExpectationInput = {
+    nodeId: Scalars['String']['input'];
+    /** 1 to 50 rules. */
+    rules: Array<WorkflowTestAssertionRuleInput>;
+};
+export type WorkflowTestRun = {
+    __typename?: 'WorkflowTestRun';
+    completedAt?: Maybe<Scalars['DateTime']['output']>;
+    id: Scalars['ID']['output'];
+    results: Array<WorkflowTestCaseResult>;
+    source: WorkflowTestRunSource;
+    startedAt: Scalars['DateTime']['output'];
+    status: WorkflowTestRunStatus;
+    summary: WorkflowTestRunSummary;
+    triggeredBy: Scalars['String']['output'];
+    version: Scalars['String']['output'];
+    workflowKey: Scalars['String']['output'];
+};
+export declare enum WorkflowTestRunSource {
+    Api = "API",
+    Cli = "CLI",
+    Ui = "UI"
+}
+export declare enum WorkflowTestRunStatus {
+    /** No case failed, but at least one could not run (not started, cancelled or timed out). */
+    Error = "ERROR",
+    /** At least one case failed: an assertion did not hold or the run did not end as expected. */
+    Failed = "FAILED",
+    /** Every case passed. */
+    Passed = "PASSED",
+    /** Started; no case run has begun yet. */
+    Pending = "PENDING",
+    /** At least one case run has not finished. */
+    Running = "RUNNING"
+}
+export type WorkflowTestRunSummary = {
+    __typename?: 'WorkflowTestRunSummary';
+    errored: Scalars['Int']['output'];
+    failed: Scalars['Int']['output'];
+    passed: Scalars['Int']['output'];
+    /** Cases whose run has not finished. */
+    pending: Scalars['Int']['output'];
+    total: Scalars['Int']['output'];
+};
 export type WorkflowTimeRange = {
     __typename?: 'WorkflowTimeRange';
     from: Scalars['String']['output'];
     to: Scalars['String']['output'];
 };
+/** One update of a durable-function run. */
+export type WorkflowUpdateResult = {
+    __typename?: 'WorkflowUpdateResult';
+    acceptedAt?: Maybe<Scalars['DateTime']['output']>;
+    completedAt?: Maybe<Scalars['DateTime']['output']>;
+    createdAt: Scalars['DateTime']['output'];
+    /** The failure of a REJECTED update, or of a COMPLETED one whose handler failed. */
+    failure?: Maybe<Scalars['JSON']['output']>;
+    name: Scalars['String']['output'];
+    /** The handler's result (COMPLETED), following the run's data-privacy settings. */
+    result?: Maybe<Scalars['JSON']['output']>;
+    runId: Scalars['ID']['output'];
+    status: WorkflowRunUpdateStatus;
+    updateId: Scalars['ID']['output'];
+};
 export type WorkflowUpdateScheduledJobInput = {
     config?: InputMaybe<Scalars['JSON']['input']>;
     enabled?: InputMaybe<Scalars['Boolean']['input']>;
@@ -129001,6 +129947,13 @@ export type WorkflowUpdateScheduledJobInput = {
     schedule?: InputMaybe<Scalars['String']['input']>;
     timezone?: InputMaybe<Scalars['String']['input']>;
 };
+/** How long updateWorkflowRun waits before it answers (Phase C). */
+export declare enum WorkflowUpdateWaitFor {
+    /** Until a workflow task accepts or rejects the update. */
+    Accepted = "ACCEPTED",
+    /** Until the update completes (or is rejected). */
+    Completed = "COMPLETED"
+}
 /**
  * One validation finding. `code` is stable (for example `edge.sourceNotFound`,
  * `interface.invalidSchema`, `strict.legacyMirror`); `message` is English.