@burdenoff/microfe-technospam 2026.1102.2 → 2026.1102.4

package/dist/generated/global-types.d.ts

@@ -5596,6 +5596,19 @@ export declare enum DimensionUnit {
     Inch = "INCH",
     Meter = "METER"
 }
+/** Input for the M2M dispatchWebhookEvent mutation */
+export type DispatchWebhookEventInput = {
+    /** Caller-supplied event ID; enables idempotent redispatch per subscription */
+    eventId?: InputMaybe<Scalars['String']['input']>;
+    /** Event type being dispatched */
+    eventType: Scalars['String']['input'];
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['input'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['input'];
+    /** Event payload; wrapped in the signed envelope as `data` */
+    payload: Scalars['JSON']['input'];
+};
 /** DSAR mode — GDPR Art. 15 (access/export) or Art. 17 (erasure). */
 export declare enum DsarMode {
     Erase = "ERASE",
@@ -8299,6 +8312,8 @@ export type Mutation = {
     approveReview: ProductReview;
     approveTranslation: Translation;
     approveWaitlist: NewsletterWaitlist;
+    /** Admin approves a pending template revision: it becomes the live version of the template (the version goes up) and the revision is removed. */
+    approveWorkflowTemplateRevision: WorkflowTemplateSubmission;
     /** Soft archive a billing account. Financial history is preserved and the account is removed from active billing operations. */
     archiveBillingAccount: BillingAccount;
     /** Archive a channel */
@@ -8764,6 +8779,8 @@ export type Mutation = {
     /** M2M: delete a ShippingAddress owned by an explicit user, on behalf of a calling service. Returns false when no matching row exists for that user. Service-actor only. */
     deleteUserShippingAddress: Scalars['Boolean']['output'];
     deleteWebhook: Scalars['Boolean']['output'];
+    /** Delete a webhook subscription and its delivery log */
+    deleteWebhookSubscription: Scalars['Boolean']['output'];
     /** Admin delists a published product — removes it from store discovery for new users while preserving access for anyone who already installed it. */
     delistProduct: StoreProduct;
     /** Deliver the same notification to multiple recipients in bulk. More efficient than multiple single calls for broadcast scenarios. */
@@ -8786,6 +8803,8 @@ export type Mutation = {
     discardDLQEntry: Scalars['Boolean']['output'];
     /** Dismiss a tour for a user (with option to dismiss permanently) */
     dismissTour: TourUserProgress;
+    /** Dispatch an event to every matching webhook subscription of an owner. M2M only — service / super_admin actors; called by the owning service over the internal gateway. Delivery is HMAC-SHA256 signed with retry/backoff and idempotent per caller-supplied eventId. */
+    dispatchWebhookEvent: WebhookDispatchSummary;
     duplicateNewsletter: Newsletter;
     /** Duplicate a tour with all its steps */
     duplicateTour: Tour;
@@ -9054,6 +9073,8 @@ export type Mutation = {
     registerSupportAttachmentPart: Scalars['Boolean']['output'];
     /** Creates or updates subject mappings for a product. Idempotent: a product's service can call it on every deploy. An existing mapping can only be changed by the actor that registered it, or by a super admin. */
     registerWebhookEventSubjects: Array<WebhookEventSubject>;
+    /** Register an outbound webhook endpoint for an owner */
+    registerWebhookSubscription: WebhookSubscription;
     reinstatePublisher: Publisher;
     rejectApplication: Application;
     /** Platform admin only: reject a pending_review version with a reason. The developer can fix their submission and re-submit. */
@@ -9069,6 +9090,8 @@ export type Mutation = {
     rejectPublisher: Publisher;
     rejectReview: ProductReview;
     rejectWaitlist: NewsletterWaitlist;
+    /** Admin rejects a pending template revision with a reason the author sees. The live version stays listed unchanged. */
+    rejectWorkflowTemplateRevision: WorkflowTemplateRevision;
     releaseLegalHold: LegalHold;
     releaseSuppression: SuppressionEntry;
     removeAgentSkills: AgentProfile;
@@ -9434,6 +9457,8 @@ export type Mutation = {
     /** Test RADIUS connection */
     testRADIUSConnection: Scalars['Boolean']['output'];
     testWebhook: WebhookTestResult;
+    /** Send a synthetic test event to a webhook subscription and report the result */
+    testWebhookSubscription: WebhookDispatchResult;
     toggleAddOn: Scalars['Boolean']['output'];
     /** Toggle the featured state of a store product (admin) */
     toggleFeatured: Scalars['Boolean']['output'];
@@ -9602,8 +9627,6 @@ export type Mutation = {
     updatePromotion: Promotion;
     updatePublisher: Publisher;
     updateQuota: Scalars['Boolean']['output'];
-    /** Update RBAC configuration for a scope */
-    updateRbacConfig: RbacConfig;
     updateRecurringBillingPlan: RecurringBillingPlan;
     /** Update a registered resource */
     updateResource: Resource;
@@ -9654,6 +9677,8 @@ export type Mutation = {
     updateUserPlatformConnectionNotifications: UserPlatformConnection;
     updateVariantStats: NewsletterVariant;
     updateWebhook: Webhook;
+    /** Update a webhook subscription (URL, secret, events, enabled, description) */
+    updateWebhookSubscription: WebhookSubscription;
     /** Update an existing workspace */
     updateWorkspace: Workspace;
     /** Update a workspace member's role */
@@ -9700,6 +9725,8 @@ export type Mutation = {
     /** Vote on a review (helpful/not helpful) */
     voteOnAppReview: AppReviewVote;
     withdrawConsent: ConsentRecord;
+    /** Withdraw the pending (or rejected) new version of one of your published templates. The live version is not affected. Takes the template's product id. */
+    withdrawWorkflowTemplateRevision: WorkflowTemplateSubmission;
     /** Withdraw one of your templates. A published template is taken off the store first; anything not live is deleted. */
     withdrawWorkflowTemplateSubmission: WithdrawWorkflowTemplateSubmissionResult;
 };
@@ -9928,6 +9955,11 @@ export type MutationApproveWaitlistArgs = {
     input: ApproveWaitlistInput;
 };
 /** Root mutation type */
+export type MutationApproveWorkflowTemplateRevisionArgs = {
+    id: Scalars['ID']['input'];
+    notes?: InputMaybe<Scalars['String']['input']>;
+};
+/** Root mutation type */
 export type MutationArchiveBillingAccountArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -11213,6 +11245,10 @@ export type MutationDeleteWebhookArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationDeleteWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationDelistProductArgs = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -11272,6 +11308,10 @@ export type MutationDismissTourArgs = {
     userId: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationDispatchWebhookEventArgs = {
+    input: DispatchWebhookEventInput;
+};
+/** Root mutation type */
 export type MutationDuplicateNewsletterArgs = {
     id: Scalars['ID']['input'];
     newSlug: Scalars['String']['input'];
@@ -12014,6 +12054,10 @@ export type MutationRegisterWebhookEventSubjectsArgs = {
     input: RegisterWebhookEventSubjectsInput;
 };
 /** Root mutation type */
+export type MutationRegisterWebhookSubscriptionArgs = {
+    input: RegisterWebhookSubscriptionInput;
+};
+/** Root mutation type */
 export type MutationReinstatePublisherArgs = {
     id: Scalars['ID']['input'];
 };
@@ -12065,6 +12109,11 @@ export type MutationRejectWaitlistArgs = {
     input: RejectWaitlistInput;
 };
 /** Root mutation type */
+export type MutationRejectWorkflowTemplateRevisionArgs = {
+    id: Scalars['ID']['input'];
+    reason: Scalars['String']['input'];
+};
+/** Root mutation type */
 export type MutationReleaseLegalHoldArgs = {
     id: Scalars['ID']['input'];
 };
@@ -12973,6 +13022,10 @@ export type MutationTestWebhookArgs = {
     id: Scalars['ID']['input'];
 };
 /** Root mutation type */
+export type MutationTestWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationToggleAddOnArgs = {
     id: Scalars['ID']['input'];
     status: Scalars['Boolean']['input'];
@@ -13485,10 +13538,6 @@ export type MutationUpdateQuotaArgs = {
     input: UpdateQuotaInput;
 };
 /** Root mutation type */
-export type MutationUpdateRbacConfigArgs = {
-    input: UpdateRbacConfigInput;
-};
-/** Root mutation type */
 export type MutationUpdateRecurringBillingPlanArgs = {
     input: UpdateRecurringBillingInput;
 };
@@ -13680,6 +13729,11 @@ export type MutationUpdateWebhookArgs = {
     input: UpdateWebhookInput;
 };
 /** Root mutation type */
+export type MutationUpdateWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+    input: UpdateWebhookSubscriptionInput;
+};
+/** Root mutation type */
 export type MutationUpdateWorkspaceArgs = {
     id: Scalars['ID']['input'];
     input: UpdateWorkspaceInput;
@@ -13815,6 +13869,10 @@ export type MutationWithdrawConsentArgs = {
     input: WithdrawConsentInput;
 };
 /** Root mutation type */
+export type MutationWithdrawWorkflowTemplateRevisionArgs = {
+    productId: Scalars['ID']['input'];
+};
+/** Root mutation type */
 export type MutationWithdrawWorkflowTemplateSubmissionArgs = {
     id: Scalars['ID']['input'];
 };
@@ -16769,6 +16827,7 @@ export type Query = {
     /** Browse the plan catalog (e.g. the upgrade-subscription flow). Self-scoped — any authenticated actor may read it; the catalog itself isn't actor-owned data, so there's nothing further to scope. Previously scopeType "global", which no regular user role is ever assigned at (only Authenticated User — billing:NONE — and Platform Superadmin hold a global-scoped role), so this field was unreachable for every non-superadmin user (BOFF-6512). */
     getAllPlans: Array<Plan>;
     getAllQuotas: Array<Quota>;
+    /** List account quotas. Date bounds are inclusive on assignment createdAt; amount bounds are inclusive on activity-backed currentUsageSum, before pagination. Status uses remaining limits (WARNING >=75%, CRITICAL >=90%, EXHAUSTED <=0); expired assignments are INACTIVE and non-numeric unlimited quotas are HEALTHY. Both number and legacy numeric limit types are finite. Percentage thresholds use originalValue; when absent, the remaining value is the fallback baseline. Empty status lists apply no status filter. Pages are capped at 100 rows. Amount-filtered requests fail explicitly above 1000 usage lookups; narrow searchQuery or createdAt bounds rather than relying on partial counts. Derived-filter scans also fail above 10000 assignments, without partial counts. */
     getAllQuotasAssignment: PaginatedQuotaAssignments;
     getAllQuotasOfSub: Array<QuotaAssignment>;
     getAllRecurringBillingPlans: Array<RecurringBillingPlan>;
@@ -16903,7 +16962,7 @@ export type Query = {
     getPromotion?: Maybe<Promotion>;
     /** Get usage analytics for a specific quota assignment */
     getQuotaAnalytics: QuotaUsageAnalytics;
-    /** Enhanced quota assignment query with analytics, pagination and filtering */
+    /** The same status, inclusive createdAt and currentUsageSum filters as getAllQuotasAssignment, with analytics for the filtered page. */
     getQuotaAssignmentsWithAnalytics: PaginatedQuotaAssignmentsWithAnalytics;
     getQuotaUsageAndLimit: QuotaUsageAndLimit;
     getQuotaUsageDetails?: Maybe<PaginatedUsages>;
@@ -17205,6 +17264,8 @@ export type Query = {
     /** Get pending scheduled notifications that are due for triggering */
     pendingScheduledNotifications: Array<ScheduledNotification>;
     pendingSurveys: CustomerSatisfactionSurveyConnection;
+    /** Admin queue: new versions of published templates, oldest first. */
+    pendingWorkflowTemplateRevisions: WorkflowTemplateRevisionList;
     /** Get permission check audit log */
     permissionAuditLog: Array<PermissionAuditLog>;
     /** Get a single platform product by ID (admin/catalog read). Returns the full PlatformProduct including DRAFT products and internal operational metrics, so it is gated as a global-scope catalog read. Unauthenticated/marketing callers must use publicProduct(slug), which filters to ACTIVE/WAITLIST/COMING_SOON and strips internal fields. */
@@ -17275,10 +17336,6 @@ export type Query = {
     rbacAnalytics: RbacAnalytics;
     /** Get RBAC configuration change history */
     rbacChangeHistory: Array<RbacChangeLog>;
-    /** Get RBAC configuration for a scope */
-    rbacConfig: Array<RbacConfig>;
-    /** Get a specific RBAC configuration value */
-    rbacConfigValue?: Maybe<RbacConfig>;
     recentArticles: Array<KnowledgeBaseArticle>;
     releaseAuditEvents: Array<ProductReleaseAuditEvent>;
     releaseTracks: Array<ReleaseTrack>;
@@ -17465,6 +17522,10 @@ export type Query = {
     webhookEventCatalog: Array<WebhookEventCatalogEntry>;
     /** Registered subject mappings. Platform services and super admins only. */
     webhookEventSubjects: Array<WebhookEventSubject>;
+    /** Fetch a single webhook subscription by ID */
+    webhookSubscription?: Maybe<WebhookSubscription>;
+    /** List webhook subscriptions for an owner (newest first) */
+    webhookSubscriptions: Array<WebhookSubscription>;
     webhooks: Array<Webhook>;
     /** Get a single workspace by ID */
     workspace?: Maybe<Workspace>;
@@ -19460,6 +19521,12 @@ export type QueryPendingSurveysArgs = {
     offset?: InputMaybe<Scalars['Int']['input']>;
 };
 /** Root query type */
+export type QueryPendingWorkflowTemplateRevisionsArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    status?: InputMaybe<WorkflowTemplateRevisionStatus>;
+};
+/** Root query type */
 export type QueryPermissionAuditLogArgs = {
     filter?: InputMaybe<AuditLogFilterInput>;
     pagination?: InputMaybe<PaginationInput>;
@@ -19681,15 +19748,6 @@ export type QueryRbacChangeHistoryArgs = {
     scopeId: Scalars['String']['input'];
 };
 /** Root query type */
-export type QueryRbacConfigArgs = {
-    scopeId: Scalars['String']['input'];
-};
-/** Root query type */
-export type QueryRbacConfigValueArgs = {
-    key: Scalars['String']['input'];
-    scopeId: Scalars['String']['input'];
-};
-/** Root query type */
 export type QueryRecentArticlesArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
     offset?: InputMaybe<Scalars['Int']['input']>;
@@ -20257,6 +20315,15 @@ export type QueryWebhookEventSubjectsArgs = {
     productSlug?: InputMaybe<Scalars['String']['input']>;
 };
 /** Root query type */
+export type QueryWebhookSubscriptionArgs = {
+    id: Scalars['ID']['input'];
+};
+/** Root query type */
+export type QueryWebhookSubscriptionsArgs = {
+    ownerId?: InputMaybe<Scalars['String']['input']>;
+    ownerType: Scalars['String']['input'];
+};
+/** Root query type */
 export type QueryWebhooksArgs = {
     applicationId: Scalars['ID']['input'];
 };
@@ -20578,18 +20645,6 @@ export declare enum RbacChangeType {
     VisibilityRuleRemoved = "VISIBILITY_RULE_REMOVED",
     VisibilityRuleUpdated = "VISIBILITY_RULE_UPDATED"
 }
-/** RBAC configuration key-value pair */
-export type RbacConfig = {
-    __typename?: 'RbacConfig';
-    createdAt: Scalars['DateTime']['output'];
-    description?: Maybe<Scalars['String']['output']>;
-    id: Scalars['ID']['output'];
-    key: Scalars['String']['output'];
-    scopeId: Scalars['String']['output'];
-    updatedAt: Scalars['DateTime']['output'];
-    value: Scalars['String']['output'];
-    valueType: Scalars['String']['output'];
-};
 /** Delivery result for a single recipient within a platform delivery */
 export type RecipientDeliveryResult = {
     __typename?: 'RecipientDeliveryResult';
@@ -21082,6 +21137,23 @@ export type RegisterWebhookEventSubjectsInput = {
     /** Mappings to create or update (at most 100 per call). */
     subjects: Array<WebhookEventSubjectInput>;
 };
+/** Input for registerWebhookSubscription */
+export type RegisterWebhookSubscriptionInput = {
+    /** Operator-facing description */
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Whether delivery is active (default true) */
+    enabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Event types to receive; empty = all events for the owner */
+    events: Array<Scalars['String']['input']>;
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['input'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['input'];
+    /** HMAC-SHA256 signing secret (write-only, never returned) */
+    secret: Scalars['String']['input'];
+    /** Delivery URL (HTTPS in production) */
+    url: Scalars['String']['input'];
+};
 export type RejectWaitlistInput = {
     id: Scalars['ID']['input'];
     reason?: InputMaybe<Scalars['String']['input']>;
@@ -22955,6 +23027,8 @@ export type StoreProduct = {
     weightUnit?: Maybe<WeightUnit>;
     /** Product width (physical products) */
     width?: Maybe<Scalars['Float']['output']>;
+    /** For a WORKFLOW template: its nodes, required inputs and credentials and the cleaning report recorded at submission. Null for other products. */
+    workflowTemplatePreview?: Maybe<WorkflowTemplatePreview>;
     zipFileUrl?: Maybe<Scalars['String']['output']>;
 };
 /** Input for fetching store product details */
@@ -23208,7 +23282,7 @@ export type SubmitWorkflowTemplateInput = {
     name: Scalars['String']['input'];
     /** A note for the store reviewer. */
     notes?: InputMaybe<Scalars['String']['input']>;
-    /** Resubmit one of your own DRAFT, REJECTED or UNLISTED templates instead of creating a new one. The template keeps its id and slug and its version goes up by one. */
+    /** Resubmit one of your own templates instead of creating a new one. A DRAFT, REJECTED or UNLISTED template is replaced and goes back into review. A PUBLISHED template stays listed unchanged: the submission is kept as its pending revision and replaces the live version only when a reviewer approves it. Either way the template keeps its id and slug and its version goes up by one. */
     productId?: InputMaybe<Scalars['ID']['input']>;
     /** Workflow key the template was published from (lineage). */
     sourceWorkflowKey?: InputMaybe<Scalars['String']['input']>;
@@ -25743,14 +25817,6 @@ export type UpdatePublisherInput = {
     organizationId?: InputMaybe<Scalars['ID']['input']>;
     websiteUrl?: InputMaybe<Scalars['String']['input']>;
 };
-/** Input for updating RBAC configuration */
-export type UpdateRbacConfigInput = {
-    description?: InputMaybe<Scalars['String']['input']>;
-    key: Scalars['String']['input'];
-    scopeId: Scalars['String']['input'];
-    value: Scalars['String']['input'];
-    valueType?: InputMaybe<Scalars['String']['input']>;
-};
 export type UpdateRecurringBillingInput = {
     description?: InputMaybe<Scalars['String']['input']>;
     id: Scalars['ID']['input'];
@@ -26091,6 +26157,19 @@ export type UpdateWebhookInput = {
     retryEnabled?: InputMaybe<Scalars['Boolean']['input']>;
     url?: InputMaybe<Scalars['String']['input']>;
 };
+/** Input for updateWebhookSubscription — all fields optional, omitted fields unchanged */
+export type UpdateWebhookSubscriptionInput = {
+    /** Operator-facing description */
+    description?: InputMaybe<Scalars['String']['input']>;
+    /** Whether delivery is active */
+    enabled?: InputMaybe<Scalars['Boolean']['input']>;
+    /** Event types to receive; empty = all events for the owner */
+    events?: InputMaybe<Array<Scalars['String']['input']>>;
+    /** HMAC-SHA256 signing secret (write-only, never returned) */
+    secret?: InputMaybe<Scalars['String']['input']>;
+    /** Delivery URL (HTTPS in production) */
+    url?: InputMaybe<Scalars['String']['input']>;
+};
 /** Input for updating an existing workspace */
 export type UpdateWorkspaceInput = {
     metadata?: InputMaybe<Scalars['JSON']['input']>;
@@ -26835,6 +26914,30 @@ export type WebhookDeliveryEdge = {
     cursor: Scalars['String']['output'];
     node: WebhookDelivery;
 };
+/** One delivery attempt recorded for a WebhookSubscription. At most one row exists per (subscription, eventId) — a redispatched event updates the row instead of double-delivering. */
+export type WebhookDeliveryLog = {
+    __typename?: 'WebhookDeliveryLog';
+    /** Number of attempts made */
+    attemptCount: Scalars['Int']['output'];
+    /** When the final attempt finished */
+    deliveredAt: Scalars['DateTime']['output'];
+    /** Error message of the final attempt (null on success) */
+    error?: Maybe<Scalars['String']['output']>;
+    /** Caller-supplied event ID (idempotency key) */
+    eventId: Scalars['String']['output'];
+    /** Event type that was dispatched */
+    eventType: Scalars['String']['output'];
+    /** Unique log row ID */
+    id: Scalars['ID']['output'];
+    /** Envelope payload that was signed and posted */
+    payload: Scalars['JSON']['output'];
+    /** HTTP status code of the final attempt (null on transport error) */
+    statusCode?: Maybe<Scalars['Int']['output']>;
+    /** Owning subscription ID */
+    subscriptionId: Scalars['ID']['output'];
+    /** Whether the final attempt succeeded */
+    success: Scalars['Boolean']['output'];
+};
 export declare enum WebhookDeliveryStatus {
     Delivered = "DELIVERED",
     Delivering = "DELIVERING",
@@ -26842,6 +26945,30 @@ export declare enum WebhookDeliveryStatus {
     Pending = "PENDING",
     Retrying = "RETRYING"
 }
+/** Result of a single test delivery */
+export type WebhookDispatchResult = {
+    __typename?: 'WebhookDispatchResult';
+    /** Number of attempts made */
+    attemptCount: Scalars['Int']['output'];
+    /** Error message of the final attempt (null on success) */
+    error?: Maybe<Scalars['String']['output']>;
+    /** HTTP status code of the final attempt (null on transport error) */
+    statusCode?: Maybe<Scalars['Int']['output']>;
+    /** Whether the delivery succeeded */
+    success: Scalars['Boolean']['output'];
+};
+/** Summary returned by the M2M dispatchWebhookEvent mutation */
+export type WebhookDispatchSummary = {
+    __typename?: 'WebhookDispatchSummary';
+    /** Subscriptions skipped because the event was already delivered (idempotent redispatch) */
+    deduplicated: Scalars['Int']['output'];
+    /** Subscriptions delivered successfully */
+    delivered: Scalars['Int']['output'];
+    /** Subscriptions that failed after all retry attempts */
+    failed: Scalars['Int']['output'];
+    /** Enabled subscriptions matched for the owner + event type */
+    matched: Scalars['Int']['output'];
+};
 /** WebhookEvent represents a received webhook (transient, 7-day TTL) Used for debugging and monitoring only */
 export type WebhookEvent = {
     __typename?: 'WebhookEvent';
@@ -26988,6 +27115,34 @@ export declare enum WebhookStatus {
     Failed = "FAILED",
     Paused = "PAUSED"
 }
+/** A registered outbound webhook endpoint owned by a product or operator. `ownerType` namespaces the event stream (e.g. "newsletter-product"); `ownerId` scopes it (e.g. the platform product id). An empty `events` list means the endpoint receives every event dispatched for the owner. */
+export type WebhookSubscription = {
+    __typename?: 'WebhookSubscription';
+    /** Creation timestamp */
+    createdAt: Scalars['DateTime']['output'];
+    /** Delivery audit trail (most recent first) */
+    deliveries: Array<WebhookDeliveryLog>;
+    /** Operator-facing description */
+    description?: Maybe<Scalars['String']['output']>;
+    /** Whether delivery is active */
+    enabled: Scalars['Boolean']['output'];
+    /** Event types this endpoint receives; empty = all events for the owner */
+    events: Array<Scalars['String']['output']>;
+    /** Unique subscription ID */
+    id: Scalars['ID']['output'];
+    /** Owner identifier of the event stream (e.g. platform product id) */
+    ownerId: Scalars['String']['output'];
+    /** Owner namespace of the event stream (e.g. "newsletter-product") */
+    ownerType: Scalars['String']['output'];
+    /** Last update timestamp */
+    updatedAt: Scalars['DateTime']['output'];
+    /** Delivery URL (HTTPS in production) */
+    url: Scalars['String']['output'];
+};
+/** A registered outbound webhook endpoint owned by a product or operator. `ownerType` namespaces the event stream (e.g. "newsletter-product"); `ownerId` scopes it (e.g. the platform product id). An empty `events` list means the endpoint receives every event dispatched for the owner. */
+export type WebhookSubscriptionDeliveriesArgs = {
+    limit?: InputMaybe<Scalars['Int']['input']>;
+};
 export type WebhookTestResult = {
     __typename?: 'WebhookTestResult';
     error?: Maybe<Scalars['String']['output']>;
@@ -27039,6 +27194,115 @@ export type WithdrawWorkflowTemplateSubmissionResult = {
     /** The template's status when it was kept (UNLISTED), null when removed. */
     status?: Maybe<ProductStatus>;
 };
+/** What was removed from the author's workflow before it was stored. */
+export type WorkflowTemplateCleaningReport = {
+    __typename?: 'WorkflowTemplateCleaningReport';
+    /** Where each cleared connection was (up to 200). */
+    clearedConnections: Array<WorkflowTemplateFieldRef>;
+    connectionsCleared: Scalars['Int']['output'];
+    pinnedDataRemoved: Scalars['Boolean']['output'];
+    /** Where each removed secret was (up to 200). */
+    removedSecrets: Array<WorkflowTemplateFieldRef>;
+    secretsRemoved: Scalars['Int']['output'];
+};
+/** Where in a template a cleared connection or removed secret was. */
+export type WorkflowTemplateFieldRef = {
+    __typename?: 'WorkflowTemplateFieldRef';
+    /** Path of the field inside the node, for example data.parameters.apiKey. */
+    field: Scalars['String']['output'];
+    nodeId?: Maybe<Scalars['String']['output']>;
+    nodeLabel?: Maybe<Scalars['String']['output']>;
+    nodeType?: Maybe<Scalars['String']['output']>;
+};
+/** A node type a template uses. */
+export type WorkflowTemplateNodeType = {
+    __typename?: 'WorkflowTemplateNodeType';
+    displayName: Scalars['String']['output'];
+    nodeType: Scalars['String']['output'];
+    nodeVersion: Scalars['String']['output'];
+    /** BUILTIN or STORE. */
+    publishType: Scalars['String']['output'];
+};
+/** What a reviewer sees about a workflow template before approving it. */
+export type WorkflowTemplatePreview = {
+    __typename?: 'WorkflowTemplatePreview';
+    /** Recorded at submission; null for templates stored before reports were kept. */
+    cleaningReport?: Maybe<WorkflowTemplateCleaningReport>;
+    /** The cleaned definition importers receive. */
+    definitionJson?: Maybe<Scalars['JSON']['output']>;
+    edgeCount: Scalars['Int']['output'];
+    /** Nodes in the definition (all of them, not just distinct types). */
+    nodeCount: Scalars['Int']['output'];
+    nodeTypes: Array<WorkflowTemplateNodeType>;
+    requiredCredentials: Array<WorkflowTemplateRequiredCredential>;
+    requiredInputs: Array<WorkflowTemplateRequiredInput>;
+};
+/** A credential someone importing the template must connect. */
+export type WorkflowTemplateRequiredCredential = {
+    __typename?: 'WorkflowTemplateRequiredCredential';
+    /** connection: the node was bound to the author's saved connection, which was cleared at submission. reference: the template reads ${credentials.<name>}. */
+    kind: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    nodeId?: Maybe<Scalars['String']['output']>;
+    nodeLabel?: Maybe<Scalars['String']['output']>;
+    nodeType?: Maybe<Scalars['String']['output']>;
+};
+/** A value someone importing the template must supply (a ${name} variable it reads). */
+export type WorkflowTemplateRequiredInput = {
+    __typename?: 'WorkflowTemplateRequiredInput';
+    label: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    required: Scalars['Boolean']['output'];
+    /** secret when it fills a secret field (API key, token, ...), else string. */
+    type: Scalars['String']['output'];
+    /** Nodes that read it. */
+    usedBy: Array<Scalars['String']['output']>;
+};
+/** A new version of a PUBLISHED template, kept apart from the live version while it is reviewed. Approval makes it the live version; rejection leaves the live version untouched. */
+export type WorkflowTemplateRevision = {
+    __typename?: 'WorkflowTemplateRevision';
+    authorName?: Maybe<Scalars['String']['output']>;
+    category: Scalars['String']['output'];
+    createdAt: Scalars['DateTime']['output'];
+    description: Scalars['String']['output'];
+    icon?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    /** Version currently live in the store. */
+    liveVersion: Scalars['String']['output'];
+    name: Scalars['String']['output'];
+    /** Number of distinct node types the revision uses. */
+    nodeCount: Scalars['Int']['output'];
+    /** The author's note for the reviewer. */
+    notes?: Maybe<Scalars['String']['output']>;
+    /** What the revision does: nodes, required inputs and credentials, cleaning report. */
+    preview?: Maybe<WorkflowTemplatePreview>;
+    /** Store product id of the template it revises. */
+    productId: Scalars['ID']['output'];
+    productSlug: Scalars['String']['output'];
+    /** Publisher profile name of the author. */
+    publisherName?: Maybe<Scalars['String']['output']>;
+    rejectedReason?: Maybe<Scalars['String']['output']>;
+    reviewedAt?: Maybe<Scalars['DateTime']['output']>;
+    revision: Scalars['Int']['output'];
+    status: WorkflowTemplateRevisionStatus;
+    submittedAt: Scalars['DateTime']['output'];
+    /** Actor id of the author who submitted it. */
+    submittedBy: Scalars['String']['output'];
+    tags: Array<Scalars['String']['output']>;
+    updatedAt: Scalars['DateTime']['output'];
+    /** Version this revision becomes when approved. */
+    version: Scalars['String']['output'];
+};
+export type WorkflowTemplateRevisionList = {
+    __typename?: 'WorkflowTemplateRevisionList';
+    items: Array<WorkflowTemplateRevision>;
+    totalCount: Scalars['Int']['output'];
+};
+/** PENDING_REVIEW while a store admin reviews it; REJECTED with a reason. */
+export declare enum WorkflowTemplateRevisionStatus {
+    PendingReview = "PENDING_REVIEW",
+    Rejected = "REJECTED"
+}
 /** One of your community workflow templates and where it is in review. */
 export type WorkflowTemplateSubmission = {
     __typename?: 'WorkflowTemplateSubmission';
@@ -27054,6 +27318,8 @@ export type WorkflowTemplateSubmission = {
     name: Scalars['String']['output'];
     /** Number of distinct node types the template uses. */
     nodeCount: Scalars['Int']['output'];
+    /** The new version of this published template that is waiting for review, or that a reviewer rejected (with the reason). Null when there is none. */
+    pendingRevision?: Maybe<WorkflowTemplateRevision>;
     publishedAt?: Maybe<Scalars['DateTime']['output']>;
     rejectedReason?: Maybe<Scalars['String']['output']>;
     reviewNotes?: Maybe<Scalars['String']['output']>;