@cboxdk/id-js 0.19.0 → 0.21.0

package/dist/management.d.ts

@@ -233,6 +233,23 @@ declare class ManagementTransport {
     }, options?: O): Promise<Outcome<TBody, O>>;
 }
 
+interface OrganizationServiceGrant {
+    id: string;
+    organization_id: string;
+    service: string;
+    consumer_client_id: string;
+    audience: string;
+    scopes: string[];
+    revoked_at: string | null;
+}
+interface UserPropertySnapshot {
+    user_id: string;
+    namespace: string;
+    data: {
+        [key: string]: unknown;
+    };
+    version: number;
+}
 /** A management key of this environment. `token` is present once, on the answer that minted it, and never again. */
 interface ManagementKey {
     id: string;
@@ -329,10 +346,12 @@ interface Approval {
     organization_id?: string | null;
     requested_at?: string | null;
     expires_at?: string | null;
+    status?: 'pending' | 'approved' | 'denied' | 'expired' | 'reported';
+    purpose?: string;
 }
 interface ApprovalDecision {
     id: string;
-    status: 'approved' | 'denied';
+    status: 'approved' | 'denied' | 'reported';
 }
 interface VaultSecret {
     id: string;
@@ -394,6 +413,9 @@ interface Invitation {
     role: 'owner' | 'admin' | 'developer' | 'member' | 'viewer';
     /** Ids of the access roles granted when the invitation is accepted. */
     roles: string[];
+    /** The subject that accepted this invitation. Null for pending or historical invitations without a receipt. */
+    accepted_by?: string | null;
+    accepted_at?: string | null;
     status: 'pending' | 'accepted' | 'revoked';
     /** The app it came from. */
     client_id?: string | null;
@@ -418,7 +440,16 @@ interface Role {
      */
     tenant_assignable: boolean;
     permissions: string[];
+    /** The activated app definition. Publishing a new manifest does not change existing holders' permissions. */
+    active_definition_version?: string | null;
+    /** A published change waiting for an environment administrator to explicitly activate this version. */
+    pending_definition?: {
+        version: string;
+        permissions: string[];
+        tenant_assignable: boolean;
+    } | null;
 }
+type RoleAssignments = RoleAssignment[];
 interface RoleAssignment {
     role_id: string;
     key?: string | null;
@@ -1720,6 +1751,51 @@ interface ApisUpdateBody {
 type ApisUpdateResponse = {
     data: Api;
 };
+/** Request body of `app_catalog.delete`. */
+interface AppCatalogDeleteBody {
+    version: number;
+}
+/** Response body of `app_catalog.delete`. */
+type AppCatalogDeleteResponse = void;
+/** Response body of `app_catalog.list`. */
+type AppCatalogListResponse = {
+    data: Array<{
+        key: string;
+        name: string;
+        description: string | null;
+        launch_url: string;
+        icon_url: string | null;
+        position: number;
+        version: number;
+    }>;
+};
+/** Request body of `app_catalog.save`. */
+interface AppCatalogSaveBody {
+    version: number;
+    name: string;
+    description?: string | null;
+    /** Explicit HTTPS entry point. Never inferred from OAuth redirects. */
+    launch_url: string;
+    enabled: boolean;
+    position: number;
+    audience: 'everyone' | 'organizations' | 'users';
+    organization_ids?: string[];
+    user_ids?: string[];
+    /** Environment-wide OAuth client ids associated with this app. Does not grant access. */
+    client_ids?: string[];
+    /** Optional feature-flag key. Hidden when off for this person and organization. */
+    required_feature?: string | null;
+    /** PNG, JPEG or WebP data URI, up to 128 KiB and 512 pixels. Omit to retain; null clears. SVG and remote URLs are refused. */
+    icon?: string | null;
+}
+/** Response body of `app_catalog.save`. */
+type AppCatalogSaveResponse = {
+    data: Record<string, unknown>;
+};
+/** Response body of `app_catalog.show`. */
+type AppCatalogShowResponse = {
+    data: Record<string, unknown>;
+};
 /** Response body of `approvals.deny`. */
 type ApprovalsDenyResponse = void;
 /** Query parameters of `approvals.list`. */
@@ -1780,13 +1856,13 @@ type AppsGetResponse = {
     data: App;
 };
 /** Query parameters of `apps.list`. */
-interface AppsListQuery {
+interface AppsListQuery$1 {
     limit?: number;
     /** Opaque cursor — the `meta.next_cursor` from the previous page. */
     after?: string;
 }
 /** Response body of `apps.list`. */
-type AppsListResponse = {
+type AppsListResponse$1 = {
     data: App[];
     meta: PageMeta$1;
 };
@@ -1848,6 +1924,14 @@ interface AppsSettingsBackchannelLogoutBody {
 type AppsSettingsBackchannelLogoutResponse = {
     data: App;
 };
+/** Request body of `apps.settings.client_credentials`. */
+interface AppsSettingsClientCredentialsBody {
+    enabled: boolean;
+}
+/** Response body of `apps.settings.client_credentials`. */
+type AppsSettingsClientCredentialsResponse = {
+    data: App;
+};
 /** Request body of `apps.settings.token_exchange`. */
 interface AppsSettingsTokenExchangeBody {
     enabled: boolean;
@@ -2069,6 +2153,13 @@ type AuditListResponse = {
     data: AuditEntry[];
     meta: PageMeta$1;
 };
+/** Response body of `authenticator.me.list`. */
+type AuthenticatorMeListResponse = {
+    data: {
+        subject: string;
+        label: string;
+    };
+};
 /** Query parameters of `branding.appearance.get`. */
 interface BrandingAppearanceGetQuery {
     /** Read this organization's theme. Left out, the environment default. */
@@ -2767,6 +2858,10 @@ interface HooksUpdateBody {
 type HooksUpdateResponse = {
     data: InlineHook;
 };
+/** Response body of `invitations.get`. */
+type InvitationsGetResponse = {
+    data: Invitation;
+};
 /** Query parameters of `invitations.list`. */
 interface InvitationsListQuery {
     limit?: number;
@@ -2997,6 +3092,17 @@ interface MembersAddBody {
 type MembersAddResponse = {
     data: Member$1;
 };
+/** Request body of `members.apps.roles.replace`. */
+interface MembersAppsRolesReplaceBody {
+    /** SHA-256 of the JSON array of current role ids for this app, sorted lexicographically. Read member roles first. */
+    version: string;
+    /** Manifest keys to assign. An empty list removes manual access to this app. */
+    roles: string[];
+}
+/** Response body of `members.apps.roles.replace`. */
+type MembersAppsRolesReplaceResponse = {
+    data: RoleAssignments;
+};
 /** Query parameters of `members.list`. */
 interface MembersListQuery {
     limit?: number;
@@ -3126,7 +3232,7 @@ interface OrganizationsPortalLinksCreateBody {
     /** Mail the link to this address — the customer's IT contact. Left out, nothing is sent. */
     email?: string | null;
     /** The language of that mail. Left out, the environment's default language. */
-    locale?: 'en' | 'da' | 'de' | 'sv' | 'nb' | 'fr' | null;
+    locale?: 'en' | 'da' | 'de' | 'sv' | 'nb' | 'fr' | 'fi' | 'es' | 'it' | 'nl' | 'pt' | 'pl' | 'ro' | 'cs' | 'hu' | 'el' | 'bg' | 'hr' | 'sk' | 'tr' | 'uk' | null;
 }
 /** Response body of `organizations.portal_links.create`. */
 type OrganizationsPortalLinksCreateResponse = {
@@ -3560,6 +3666,14 @@ interface RolesCreateBody {
 type RolesCreateResponse = {
     data: Role;
 };
+/** Request body of `roles.definition.activate`. */
+interface RolesDefinitionActivateBody {
+    version: string;
+}
+/** Response body of `roles.definition.activate`. */
+type RolesDefinitionActivateResponse = {
+    data: Role;
+};
 /** Response body of `roles.delete`. */
 type RolesDeleteResponse = void;
 /** Query parameters of `roles.get`. */
@@ -3671,6 +3785,60 @@ interface SamlAppsUpdateBody {
 type SamlAppsUpdateResponse = {
     data: SamlApp;
 };
+/** Query parameters of `signals.source.erasures.list`. */
+interface SignalsSourceErasuresListQuery {
+    after?: string;
+    limit?: number;
+}
+/** Response body of `signals.source.erasures.list`. */
+type SignalsSourceErasuresListResponse = {
+    data: Array<Record<string, unknown>>;
+    meta: {
+        next_cursor: string;
+        has_more: boolean;
+        commit_through: string;
+        generation: string;
+    };
+};
+/** Query parameters of `signals.source.list`. */
+interface SignalsSourceListQuery {
+    after?: string;
+    limit?: number;
+}
+/** Response body of `signals.source.list`. */
+type SignalsSourceListResponse = {
+    data: Array<{
+        contract_version: '2.0.0';
+        id: string;
+        producer_environment: string;
+        organization_id: string | null;
+        position: {
+            source_id: string;
+            partition: '0';
+            generation: string;
+            sequence: string;
+        };
+        kind: 'event' | 'relation';
+        name?: 'identity.authentication' | 'identity.session' | 'identity.token' | 'identity.account' | 'identity.activity';
+        occurred_at: string;
+        recorded_at: string;
+        data?: Record<string, unknown>;
+    }>;
+    meta: {
+        next_cursor: string;
+        has_more: boolean;
+        source_id: string;
+        generation: string;
+        commit_through: string;
+        accepted_through: string;
+        capture_started_at: string;
+        heartbeat_at: string | null;
+        observed_at: string;
+        families: string[];
+        retention_days: number;
+        coverage: 'partial';
+    };
+};
 /** Query parameters of `signin.policy.get`. */
 interface SigninPolicyGetQuery {
     /** Read one organization's rules. Left out, the environment baseline. */
@@ -4245,6 +4413,23 @@ interface TokenVaultSecretsRotateBody {
 type TokenVaultSecretsRotateResponse = {
     data: TokenVaultSecret;
 };
+/** Request body of `user_property_namespaces.configure`. */
+interface UserPropertyNamespacesConfigureBody {
+    /** OAuth client ids allowed to read. Omit or use an empty list to revoke all access. */
+    readers?: string[];
+    /** Reader client ids also allowed to write. */
+    writers?: string[];
+    /** Map webhook endpoint ids to reader client ids. Omit to remove all webhook grants. */
+    webhooks?: Record<string, unknown>;
+}
+/** Response body of `user_property_namespaces.configure`. */
+type UserPropertyNamespacesConfigureResponse = {
+    data: Record<string, unknown>;
+};
+/** Response body of `user_property_namespaces.show`. */
+type UserPropertyNamespacesShowResponse = {
+    data: Record<string, unknown>;
+};
 /** Request body of `users.create`. */
 interface UsersCreateBody {
     email: string;
@@ -4372,7 +4557,7 @@ interface WebhooksCreateBody {
     /** A public HTTPS URL. Signed deliveries are POSTed here. */
     url: string;
     /** The events it receives. */
-    event_types: Array<'user.created' | 'user.updated' | 'user.deactivated' | 'user.login' | 'user.reactivated' | 'identity.linked' | 'user.erased' | 'organization.created' | 'organization.suspended' | 'organization.reactivated' | 'organization.updated' | 'organization.deleted' | 'membership.created' | 'membership.updated' | 'membership.deleted' | 'invitation.created' | 'invitation.accepted' | 'invitation.revoked' | 'role.assigned' | 'role.unassigned' | 'role.assigned_everywhere' | 'role.unassigned_everywhere' | 'api_key.created' | 'api_key.revoked' | 'support_session.started' | 'directory.user.provisioned' | 'directory.user.deprovisioned' | 'directory.user.deactivated' | 'directory.group.membership_changed' | 'domain.added' | 'domain.removed' | 'domain.verified' | 'connection.activated' | 'connection.certificate_expiring' | 'entitlement.set' | 'entitlement.updated' | 'entitlement.revoked' | 'vault.grant.created' | 'vault.grant.revoked' | 'vault.secret.revoked' | 'pipe.connection.connected' | 'pipe.connection.needs_reauth' | 'pipe.connection.disconnected' | 'governance.access.revoked' | 'feature_flag.created' | 'feature_flag.updated' | 'feature_flag.deleted'>;
+    event_types: Array<'user.created' | 'user.updated' | 'user.preferences.updated' | 'user.metadata.updated' | 'user.deactivated' | 'user.login' | 'user.reactivated' | 'identity.linked' | 'user.erased' | 'organization.created' | 'organization.suspended' | 'organization.reactivated' | 'organization.updated' | 'organization.deleted' | 'membership.created' | 'membership.updated' | 'membership.deleted' | 'invitation.created' | 'invitation.accepted' | 'invitation.revoked' | 'role.assigned' | 'role.unassigned' | 'role.assigned_everywhere' | 'role.unassigned_everywhere' | 'api_key.created' | 'api_key.revoked' | 'support_session.started' | 'directory.user.provisioned' | 'directory.user.deprovisioned' | 'directory.user.deactivated' | 'directory.group.membership_changed' | 'domain.added' | 'domain.removed' | 'domain.verified' | 'connection.activated' | 'connection.certificate_expiring' | 'entitlement.set' | 'entitlement.updated' | 'entitlement.revoked' | 'vault.grant.created' | 'vault.grant.revoked' | 'vault.secret.revoked' | 'pipe.connection.connected' | 'pipe.connection.needs_reauth' | 'pipe.connection.disconnected' | 'governance.access.revoked' | 'feature_flag.created' | 'feature_flag.updated' | 'feature_flag.deleted'>;
     /** How deliveries are signed: `cbox` (X-Cbox-Signature, the default) or `standard_webhooks` (webhook-id / webhook-timestamp / webhook-signature, verifiable with any Standard Webhooks library; the secret is a `whsec_` secret). */
     signature_scheme?: 'cbox' | 'standard_webhooks';
     /** The organization it belongs to; it carries that organization's traffic only. Send this or environment_wide. */
@@ -4628,6 +4813,54 @@ declare const environmentOperations: {
         readonly body: true;
         readonly pagination: null;
     };
+    readonly 'app_catalog.delete': {
+        readonly action: "app_catalog.delete";
+        readonly operationId: "app_catalog_delete";
+        readonly method: "DELETE";
+        readonly path: "/app-catalog/{key}";
+        readonly pathParams: readonly ["key"];
+        readonly scope: "app_catalog:write";
+        readonly danger: "destructive";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
+    readonly 'app_catalog.list': {
+        readonly action: "app_catalog.list";
+        readonly operationId: "app_catalog_list";
+        readonly method: "GET";
+        readonly path: "/app-catalog";
+        readonly pathParams: readonly [];
+        readonly scope: "app_catalog:read";
+        readonly danger: "read";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
+    readonly 'app_catalog.save': {
+        readonly action: "app_catalog.save";
+        readonly operationId: "app_catalog_save";
+        readonly method: "PUT";
+        readonly path: "/app-catalog/{key}";
+        readonly pathParams: readonly ["key"];
+        readonly scope: "app_catalog:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
+    readonly 'app_catalog.show': {
+        readonly action: "app_catalog.show";
+        readonly operationId: "app_catalog_show";
+        readonly method: "GET";
+        readonly path: "/app-catalog/{key}";
+        readonly pathParams: readonly ["key"];
+        readonly scope: "app_catalog:read";
+        readonly danger: "read";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'approvals.deny': {
         readonly action: "approvals.deny";
         readonly operationId: "approvals_deny";
@@ -4820,6 +5053,18 @@ declare const environmentOperations: {
         readonly body: true;
         readonly pagination: null;
     };
+    readonly 'apps.settings.client_credentials': {
+        readonly action: "apps.settings.client_credentials";
+        readonly operationId: "apps_settings_client_credentials";
+        readonly method: "PUT";
+        readonly path: "/apps/{id}/settings/client-credentials";
+        readonly pathParams: readonly ["id"];
+        readonly scope: "apps:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
     readonly 'apps.settings.token_exchange': {
         readonly action: "apps.settings.token_exchange";
         readonly operationId: "apps_settings_token_exchange";
@@ -5012,6 +5257,18 @@ declare const environmentOperations: {
         readonly body: false;
         readonly pagination: "cursor";
     };
+    readonly 'authenticator.me.list': {
+        readonly action: null;
+        readonly operationId: "authenticatorIdentity";
+        readonly method: "GET";
+        readonly path: "/authenticator/me";
+        readonly pathParams: readonly [];
+        readonly scope: null;
+        readonly danger: null;
+        readonly approval: false;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'branding.appearance.get': {
         readonly action: "branding.appearance.get";
         readonly operationId: "branding_appearance_get";
@@ -5588,6 +5845,18 @@ declare const environmentOperations: {
         readonly body: true;
         readonly pagination: null;
     };
+    readonly 'invitations.get': {
+        readonly action: "invitations.get";
+        readonly operationId: "invitations_get";
+        readonly method: "GET";
+        readonly path: "/organizations/{organization_id}/invitations/{invitation_id}";
+        readonly pathParams: readonly ["organization_id", "invitation_id"];
+        readonly scope: "invitations:read";
+        readonly danger: "read";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'invitations.list': {
         readonly action: "invitations.list";
         readonly operationId: "invitations_list";
@@ -5816,6 +6085,18 @@ declare const environmentOperations: {
         readonly body: true;
         readonly pagination: null;
     };
+    readonly 'members.apps.roles.replace': {
+        readonly action: "members.apps.roles.replace";
+        readonly operationId: "members_apps_roles_replace";
+        readonly method: "PUT";
+        readonly path: "/organizations/{organization_id}/members/{user_id}/apps/{client_id}/roles";
+        readonly pathParams: readonly ["organization_id", "user_id", "client_id"];
+        readonly scope: "roles:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
     readonly 'members.list': {
         readonly action: "members.list";
         readonly operationId: "members_list";
@@ -6476,6 +6757,18 @@ declare const environmentOperations: {
         readonly body: true;
         readonly pagination: null;
     };
+    readonly 'roles.definition.activate': {
+        readonly action: "roles.definition.activate";
+        readonly operationId: "roles_definition_activate";
+        readonly method: "POST";
+        readonly path: "/roles/{id}/definition/activate";
+        readonly pathParams: readonly ["id"];
+        readonly scope: "role_definitions:write";
+        readonly danger: "destructive";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
     readonly 'roles.delete': {
         readonly action: "roles.delete";
         readonly operationId: "roles_delete";
@@ -6608,6 +6901,30 @@ declare const environmentOperations: {
         readonly body: true;
         readonly pagination: null;
     };
+    readonly 'signals.source.erasures.list': {
+        readonly action: null;
+        readonly operationId: "signals_source_erasures";
+        readonly method: "GET";
+        readonly path: "/signals/source/erasures";
+        readonly pathParams: readonly [];
+        readonly scope: null;
+        readonly danger: null;
+        readonly approval: false;
+        readonly body: false;
+        readonly pagination: "cursor";
+    };
+    readonly 'signals.source.list': {
+        readonly action: null;
+        readonly operationId: "signals_source_list";
+        readonly method: "GET";
+        readonly path: "/signals/source";
+        readonly pathParams: readonly [];
+        readonly scope: null;
+        readonly danger: null;
+        readonly approval: false;
+        readonly body: false;
+        readonly pagination: "cursor";
+    };
     readonly 'signin.policy.get': {
         readonly action: "signin.policy.get";
         readonly operationId: "signin_policy_get";
@@ -7148,6 +7465,30 @@ declare const environmentOperations: {
         readonly body: true;
         readonly pagination: null;
     };
+    readonly 'user_property_namespaces.configure': {
+        readonly action: "user_property_namespaces.configure";
+        readonly operationId: "user_property_namespaces_configure";
+        readonly method: "PUT";
+        readonly path: "/user-property-namespaces/{name}";
+        readonly pathParams: readonly ["name"];
+        readonly scope: "user_property_namespaces:write";
+        readonly danger: "critical";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
+    readonly 'user_property_namespaces.show': {
+        readonly action: "user_property_namespaces.show";
+        readonly operationId: "user_property_namespaces_show";
+        readonly method: "GET";
+        readonly path: "/user-property-namespaces/{name}";
+        readonly pathParams: readonly ["name"];
+        readonly scope: "user_property_namespaces:read";
+        readonly danger: "read";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'users.create': {
         readonly action: "users.create";
         readonly operationId: "users_create";
@@ -7727,6 +8068,52 @@ declare class EnvironmentClient {
             remove: <O extends CallOptions = CallOptions>(id: string, key: string, options?: O) => Promise<Outcome<ApisScopesRemoveResponse, O>>;
         };
     };
+    readonly appCatalog: {
+        /**
+         * Remove a catalog app without deleting its OAuth clients or user data.
+         *
+         * Requires scope `app_catalog:write`. Danger: destructive.
+         *
+         * `DELETE /app-catalog/{key}` · action `app_catalog.delete`
+         * @scope `app_catalog:write`
+         * @danger destructive
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        delete: <O extends CallOptions = CallOptions>(key: string, body: AppCatalogDeleteBody, options?: O) => Promise<Outcome<AppCatalogDeleteResponse, O>>;
+        /**
+         * List catalog apps, including drafts and visibility settings.
+         *
+         * Requires scope `app_catalog:read`. Danger: read.
+         *
+         * `GET /app-catalog` · action `app_catalog.list`
+         * @scope `app_catalog:read`
+         * @danger read
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        list: <O extends CallOptions = CallOptions>(options?: O) => Promise<Outcome<AppCatalogListResponse, O>>;
+        /**
+         * Create or replace a catalog app, its icon and visibility. Version zero creates; a stale version conflicts.
+         *
+         * Requires scope `app_catalog:write`. Danger: write.
+         *
+         * `PUT /app-catalog/{key}` · action `app_catalog.save`
+         * @scope `app_catalog:write`
+         * @danger write
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        save: <O extends CallOptions = CallOptions>(key: string, body: AppCatalogSaveBody, options?: O) => Promise<Outcome<AppCatalogSaveResponse, O>>;
+        /**
+         * Read a catalog app and its publication settings.
+         *
+         * Requires scope `app_catalog:read`. Danger: read.
+         *
+         * `GET /app-catalog/{key}` · action `app_catalog.show`
+         * @scope `app_catalog:read`
+         * @danger read
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        show: <O extends CallOptions = CallOptions>(key: string, options?: O) => Promise<Outcome<AppCatalogShowResponse, O>>;
+    };
     readonly approvals: {
         /**
          * Deny a pending approval request (CIBA) for the person it was raised for: the agent gets access_denied and no token.
@@ -7838,9 +8225,9 @@ declare class EnvironmentClient {
          * @danger read
          * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
          */
-        list: <O extends CallOptions = CallOptions>(query?: AppsListQuery, options?: O) => Promise<Outcome<AppsListResponse, O>>;
+        list: <O extends CallOptions = CallOptions>(query?: AppsListQuery$1, options?: O) => Promise<Outcome<AppsListResponse$1, O>>;
         /** Every item of `apps.list`, fetching pages as the iteration reaches them. */
-        listAll: (query?: Omit<AppsListQuery, "after">, options?: Omit<CallOptions, "approval">) => AsyncGenerator<App, void, undefined>;
+        listAll: (query?: Omit<AppsListQuery$1, "after">, options?: Omit<CallOptions, "approval">) => AsyncGenerator<App, void, undefined>;
         /**
          * Rename an app and replace its redirect URIs or sign-out redirect URIs. Fields left out are unchanged.
          *
@@ -7950,6 +8337,17 @@ declare class EnvironmentClient {
              * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
              */
             backchannelLogout: <O extends CallOptions = CallOptions>(id: string, body?: AppsSettingsBackchannelLogoutBody, options?: O) => Promise<Outcome<AppsSettingsBackchannelLogoutResponse, O>>;
+            /**
+             * Turn client-credentials authentication on or off for a confidential app; other grants and scopes stay unchanged.
+             *
+             * Requires scope `apps:write`. Danger: write.
+             *
+             * `PUT /apps/{id}/settings/client-credentials` · action `apps.settings.client_credentials`
+             * @scope `apps:write`
+             * @danger write
+             * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+             */
+            clientCredentials: <O extends CallOptions = CallOptions>(id: string, body: AppsSettingsClientCredentialsBody, options?: O) => Promise<Outcome<AppsSettingsClientCredentialsResponse, O>>;
             /**
              * Turn token exchange (RFC 8693) on or off for a confidential app.
              *
@@ -8135,6 +8533,18 @@ declare class EnvironmentClient {
         /** Every item of `audit.list`, fetching pages as the iteration reaches them. */
         listAll: (query?: Omit<AuditListQuery, "after">, options?: Omit<CallOptions, "approval">) => AsyncGenerator<AuditEntry, void, undefined>;
     };
+    readonly authenticator: {
+        me: {
+            /**
+             * Verified identity for the authenticator
+             *
+             * Requires the provisioned public authenticator client, devices.manage and a DPoP proof. Available before device registration; revoked keys are refused.
+             *
+             * `GET /authenticator/me`
+             */
+            list: <O extends CallOptions = CallOptions>(options?: O) => Promise<Outcome<AuthenticatorMeListResponse, O>>;
+        };
+    };
     readonly branding: {
         appearance: {
             /**
@@ -8722,6 +9132,17 @@ declare class EnvironmentClient {
         update: <O extends CallOptions = CallOptions>(id: string, body: HooksUpdateBody, options?: O) => Promise<Outcome<HooksUpdateResponse, O>>;
     };
     readonly invitations: {
+        /**
+         * Get an invitation and its acceptance receipt, confined to its organization.
+         *
+         * Requires scope `invitations:read`. Danger: read.
+         *
+         * `GET /organizations/{organization_id}/invitations/{invitation_id}` · action `invitations.get`
+         * @scope `invitations:read`
+         * @danger read
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        get: <O extends CallOptions = CallOptions>(organizationId: string, invitationId: string, options?: O) => Promise<Outcome<InvitationsGetResponse, O>>;
         /**
          * List an organization's pending invitations
          *
@@ -9021,6 +9442,21 @@ declare class EnvironmentClient {
          * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
          */
         update: <O extends CallOptions = CallOptions>(organizationId: string, userId: string, body: MembersUpdateBody, options?: O) => Promise<Outcome<MembersUpdateResponse, O>>;
+        apps: {
+            roles: {
+                /**
+                 * Replace one app's member roles atomically. Other apps and the organization membership remain unchanged. An empty role list removes this app's access only.
+                 *
+                 * Requires scope `roles:write`. Danger: write.
+                 *
+                 * `PUT /organizations/{organization_id}/members/{user_id}/apps/{client_id}/roles` · action `members.apps.roles.replace`
+                 * @scope `roles:write`
+                 * @danger write
+                 * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+                 */
+                replace: <O extends CallOptions = CallOptions>(organizationId: string, userId: string, clientId: string, body: MembersAppsRolesReplaceBody, options?: O) => Promise<Outcome<MembersAppsRolesReplaceResponse, O>>;
+            };
+        };
         roles: {
             /**
              * Grant a member a role in the organization
@@ -9724,6 +10160,19 @@ declare class EnvironmentClient {
          * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
          */
         update: <O extends CallOptions = CallOptions>(id: string, body?: RolesUpdateBody, options?: O) => Promise<Outcome<RolesUpdateResponse, O>>;
+        definition: {
+            /**
+             * Activate a reviewed application role definition for its existing holders.
+             *
+             * Requires scope `role_definitions:write`. Danger: destructive.
+             *
+             * `POST /roles/{id}/definition/activate` · action `roles.definition.activate`
+             * @scope `role_definitions:write`
+             * @danger destructive
+             * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+             */
+            activate: <O extends CallOptions = CallOptions>(id: string, body: RolesDefinitionActivateBody, options?: O) => Promise<Outcome<RolesDefinitionActivateResponse, O>>;
+        };
         permissions: {
             /**
              * Add a permission to a role: everyone holding the role gains it. The permission must be unscoped or declared by the role's own app.
@@ -9808,6 +10257,61 @@ declare class EnvironmentClient {
          */
         update: <O extends CallOptions = CallOptions>(id: string, body?: SamlAppsUpdateBody, options?: O) => Promise<Outcome<SamlAppsUpdateResponse, O>>;
     };
+    readonly signals: {
+        source: {
+            /**
+             * Read the environment-owner identity source
+             *
+             * Requires an environment key with `signals_source:read` and explicit operator
+             * opt-in for this environment. Organization grants and delegated user tokens
+             * cannot read this source. Records include pre-organization authentication.
+             * The cursor follows committed sequence order and is bound to the source generation.
+             * Follow `next_cursor`, including on empty pages; a stale generation or purged
+             * cursor requires an explicit restart. Pages are at most 1000 records / 1 MiB.
+             * Data follows the Signals 2.0.0 identity event contracts. Scope is attached by
+             * the consumer's explicit grant; producer_environment is always host-bound.
+             * Replay is limited to seven days, including raw-IP retention. A heartbeat
+             * proves exporter maintenance, not complete coverage of every identity flow.
+             *
+             * `GET /signals/source`
+             */
+            list: <O extends CallOptions = CallOptions>(query?: SignalsSourceListQuery, options?: O) => Promise<Outcome<SignalsSourceListResponse, O>>;
+            /** Every item of `signals.source.list`, fetching pages as the iteration reaches them. */
+            listAll: (query?: Omit<SignalsSourceListQuery, "after">, options?: Omit<CallOptions, "approval">) => AsyncGenerator<{
+                contract_version: "2.0.0";
+                id: string;
+                producer_environment: string;
+                organization_id: string | null;
+                position: {
+                    source_id: string;
+                    partition: "0";
+                    generation: string;
+                    sequence: string;
+                };
+                kind: "event" | "relation";
+                name?: "identity.authentication" | "identity.session" | "identity.token" | "identity.account" | "identity.activity";
+                occurred_at: string;
+                recorded_at: string;
+                data?: Record<string, unknown>;
+            }, void, undefined>;
+            erasures: {
+                /**
+                 * Replay source deletion receipts
+                 *
+                 * Requires `signals_source:read` on an environment-owner key. Replay this stream
+                 * before making a restored or newly backfilled consumer eligible. It retains only
+                 * opaque subject references and deletion facts beyond the raw-event replay window.
+                 * Publication order and cursor integrity match the event source. The credential
+                 * is checked on every page. Ordinary tenant grants cannot access this stream.
+                 *
+                 * `GET /signals/source/erasures`
+                 */
+                list: <O extends CallOptions = CallOptions>(query?: SignalsSourceErasuresListQuery, options?: O) => Promise<Outcome<SignalsSourceErasuresListResponse, O>>;
+                /** Every item of `signals.source.erasures.list`, fetching pages as the iteration reaches them. */
+                listAll: (query?: Omit<SignalsSourceErasuresListQuery, "after">, options?: Omit<CallOptions, "approval">) => AsyncGenerator<Record<string, unknown>, void, undefined>;
+            };
+        };
+    };
     readonly signin: {
         policy: {
             /**
@@ -10367,6 +10871,30 @@ declare class EnvironmentClient {
             rotate: <O extends CallOptions = CallOptions>(id: string, body: TokenVaultSecretsRotateBody, options?: O) => Promise<Outcome<TokenVaultSecretsRotateResponse, O>>;
         };
     };
+    readonly userPropertyNamespaces: {
+        /**
+         * Create or replace the app and webhook grants for a user-property namespace. Empty grants revoke access without deleting user data.
+         *
+         * Requires scope `user_property_namespaces:write`. Danger: critical.
+         *
+         * `PUT /user-property-namespaces/{name}` · action `user_property_namespaces.configure`
+         * @scope `user_property_namespaces:write`
+         * @danger critical
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        configure: <O extends CallOptions = CallOptions>(name: string, body?: UserPropertyNamespacesConfigureBody, options?: O) => Promise<Outcome<UserPropertyNamespacesConfigureResponse, O>>;
+        /**
+         * Read the app and webhook grants for a user-property namespace.
+         *
+         * Requires scope `user_property_namespaces:read`. Danger: read.
+         *
+         * `GET /user-property-namespaces/{name}` · action `user_property_namespaces.show`
+         * @scope `user_property_namespaces:read`
+         * @danger read
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        show: <O extends CallOptions = CallOptions>(name: string, options?: O) => Promise<Outcome<UserPropertyNamespacesShowResponse, O>>;
+    };
     readonly users: {
         /**
          * Create a user
@@ -10761,6 +11289,12 @@ type environment_ApisUpdateBody = ApisUpdateBody;
 type environment_ApisUpdateResponse = ApisUpdateResponse;
 type environment_App = App;
 type environment_AppBlueprint = AppBlueprint;
+type environment_AppCatalogDeleteBody = AppCatalogDeleteBody;
+type environment_AppCatalogDeleteResponse = AppCatalogDeleteResponse;
+type environment_AppCatalogListResponse = AppCatalogListResponse;
+type environment_AppCatalogSaveBody = AppCatalogSaveBody;
+type environment_AppCatalogSaveResponse = AppCatalogSaveResponse;
+type environment_AppCatalogShowResponse = AppCatalogShowResponse;
 type environment_AppSecret = AppSecret;
 type environment_Appearance = Appearance;
 type environment_Approval = Approval;
@@ -10775,8 +11309,6 @@ type environment_AppsCreateBody = AppsCreateBody;
 type environment_AppsCreateResponse = AppsCreateResponse;
 type environment_AppsDeleteResponse = AppsDeleteResponse;
 type environment_AppsGetResponse = AppsGetResponse;
-type environment_AppsListQuery = AppsListQuery;
-type environment_AppsListResponse = AppsListResponse;
 type environment_AppsManifestSetBody = AppsManifestSetBody;
 type environment_AppsManifestSetResponse = AppsManifestSetResponse;
 type environment_AppsManifestSyncResponse = AppsManifestSyncResponse;
@@ -10790,6 +11322,8 @@ type environment_AppsSettingsApiKeyPrefixBody = AppsSettingsApiKeyPrefixBody;
 type environment_AppsSettingsApiKeyPrefixResponse = AppsSettingsApiKeyPrefixResponse;
 type environment_AppsSettingsBackchannelLogoutBody = AppsSettingsBackchannelLogoutBody;
 type environment_AppsSettingsBackchannelLogoutResponse = AppsSettingsBackchannelLogoutResponse;
+type environment_AppsSettingsClientCredentialsBody = AppsSettingsClientCredentialsBody;
+type environment_AppsSettingsClientCredentialsResponse = AppsSettingsClientCredentialsResponse;
 type environment_AppsSettingsTokenExchangeBody = AppsSettingsTokenExchangeBody;
 type environment_AppsSettingsTokenExchangeResponse = AppsSettingsTokenExchangeResponse;
 type environment_AppsSettingsTokenLifetimeBody = AppsSettingsTokenLifetimeBody;
@@ -10826,6 +11360,7 @@ type environment_AuditLogsSettingsUpdateBody = AuditLogsSettingsUpdateBody;
 type environment_AuditLogsSettingsUpdateResponse = AuditLogsSettingsUpdateResponse;
 type environment_AuditLogsVerifyQuery = AuditLogsVerifyQuery;
 type environment_AuditLogsVerifyResponse = AuditLogsVerifyResponse;
+type environment_AuthenticatorMeListResponse = AuthenticatorMeListResponse;
 type environment_BearerChallenge = BearerChallenge;
 type environment_BrandingAppearanceGetQuery = BrandingAppearanceGetQuery;
 type environment_BrandingAppearanceGetResponse = BrandingAppearanceGetResponse;
@@ -10937,6 +11472,7 @@ type environment_HooksUpdateBody = HooksUpdateBody;
 type environment_HooksUpdateResponse = HooksUpdateResponse;
 type environment_InlineHook = InlineHook;
 type environment_Invitation = Invitation;
+type environment_InvitationsGetResponse = InvitationsGetResponse;
 type environment_InvitationsListQuery = InvitationsListQuery;
 type environment_InvitationsListResponse = InvitationsListResponse;
 type environment_InvitationsResendResponse = InvitationsResendResponse;
@@ -10972,6 +11508,8 @@ type environment_ManagementKey = ManagementKey;
 type environment_ManifestSync = ManifestSync;
 type environment_MembersAddBody = MembersAddBody;
 type environment_MembersAddResponse = MembersAddResponse;
+type environment_MembersAppsRolesReplaceBody = MembersAppsRolesReplaceBody;
+type environment_MembersAppsRolesReplaceResponse = MembersAppsRolesReplaceResponse;
 type environment_MembersListQuery = MembersListQuery;
 type environment_MembersListResponse = MembersListResponse;
 type environment_MembersRemoveResponse = MembersRemoveResponse;
@@ -10985,6 +11523,7 @@ type environment_MembersUpdateResponse = MembersUpdateResponse;
 type environment_OAuthClientError = OAuthClientError;
 type environment_OfferedSocialProviders = OfferedSocialProviders;
 type environment_OrganizationDomain = OrganizationDomain;
+type environment_OrganizationServiceGrant = OrganizationServiceGrant;
 type environment_OrganizationsDeleteResponse = OrganizationsDeleteResponse;
 type environment_OrganizationsDomainsAddBody = OrganizationsDomainsAddBody;
 type environment_OrganizationsDomainsAddResponse = OrganizationsDomainsAddResponse;
@@ -11073,8 +11612,11 @@ type environment_RadarSettingsUpdateBody = RadarSettingsUpdateBody;
 type environment_RadarSettingsUpdateResponse = RadarSettingsUpdateResponse;
 type environment_Role = Role;
 type environment_RoleAssignment = RoleAssignment;
+type environment_RoleAssignments = RoleAssignments;
 type environment_RolesCreateBody = RolesCreateBody;
 type environment_RolesCreateResponse = RolesCreateResponse;
+type environment_RolesDefinitionActivateBody = RolesDefinitionActivateBody;
+type environment_RolesDefinitionActivateResponse = RolesDefinitionActivateResponse;
 type environment_RolesDeleteResponse = RolesDeleteResponse;
 type environment_RolesGetQuery = RolesGetQuery;
 type environment_RolesGetResponse = RolesGetResponse;
@@ -11098,6 +11640,10 @@ type environment_SelfServiceSignup = SelfServiceSignup;
 type environment_SignInMethodsInForce = SignInMethodsInForce;
 type environment_SignInPolicy = SignInPolicy;
 type environment_SignInRules = SignInRules;
+type environment_SignalsSourceErasuresListQuery = SignalsSourceErasuresListQuery;
+type environment_SignalsSourceErasuresListResponse = SignalsSourceErasuresListResponse;
+type environment_SignalsSourceListQuery = SignalsSourceListQuery;
+type environment_SignalsSourceListResponse = SignalsSourceListResponse;
 type environment_SigninPolicyGetQuery = SigninPolicyGetQuery;
 type environment_SigninPolicyGetResponse = SigninPolicyGetResponse;
 type environment_SigninPolicyInheritResponse = SigninPolicyInheritResponse;
@@ -11195,6 +11741,10 @@ type environment_TokenVaultSecretsRevokeResponse = TokenVaultSecretsRevokeRespon
 type environment_TokenVaultSecretsRotateBody = TokenVaultSecretsRotateBody;
 type environment_TokenVaultSecretsRotateResponse = TokenVaultSecretsRotateResponse;
 type environment_User = User;
+type environment_UserPropertyNamespacesConfigureBody = UserPropertyNamespacesConfigureBody;
+type environment_UserPropertyNamespacesConfigureResponse = UserPropertyNamespacesConfigureResponse;
+type environment_UserPropertyNamespacesShowResponse = UserPropertyNamespacesShowResponse;
+type environment_UserPropertySnapshot = UserPropertySnapshot;
 type environment_UserSession = UserSession;
 type environment_UsersCreateBody = UsersCreateBody;
 type environment_UsersCreateResponse = UsersCreateResponse;
@@ -11241,7 +11791,7 @@ type environment_WebhooksUpdateResponse = WebhooksUpdateResponse;
 type environment_WhitelabelBranding = WhitelabelBranding;
 declare const environment_environmentOperations: typeof environmentOperations;
 declare namespace environment {
-  export { type environment_AccessReview as AccessReview, type environment_AccessReviewItem as AccessReviewItem, type environment_AccessReviewsCloseBody as AccessReviewsCloseBody, type environment_AccessReviewsCloseResponse as AccessReviewsCloseResponse, type environment_AccessReviewsCreateBody as AccessReviewsCreateBody, type environment_AccessReviewsCreateResponse as AccessReviewsCreateResponse, type environment_AccessReviewsGetQuery as AccessReviewsGetQuery, type environment_AccessReviewsGetResponse as AccessReviewsGetResponse, type environment_AccessReviewsItemsDecideBody as AccessReviewsItemsDecideBody, type environment_AccessReviewsItemsDecideResponse as AccessReviewsItemsDecideResponse, type environment_AccessReviewsItemsListQuery as AccessReviewsItemsListQuery, type environment_AccessReviewsItemsListResponse as AccessReviewsItemsListResponse, type environment_AccessReviewsListQuery as AccessReviewsListQuery, type environment_AccessReviewsListResponse as AccessReviewsListResponse, type ActionApprovalsGetResponse$3 as ActionApprovalsGetResponse, type environment_AgentRequest as AgentRequest, type environment_Api as Api, type environment_ApiKey as ApiKey, type environment_ApiKeyVerification as ApiKeyVerification, type environment_ApiKeyVerificationRequest as ApiKeyVerificationRequest, type environment_ApiKeysListQuery as ApiKeysListQuery, type environment_ApiKeysListResponse as ApiKeysListResponse, type ApiKeysRevokeResponse$1 as ApiKeysRevokeResponse, type environment_ApiScope as ApiScope, type environment_ApisCreateBody as ApisCreateBody, type environment_ApisCreateResponse as ApisCreateResponse, type environment_ApisDeleteResponse as ApisDeleteResponse, type environment_ApisGetResponse as ApisGetResponse, type environment_ApisListQuery as ApisListQuery, type environment_ApisListResponse as ApisListResponse, type environment_ApisScopesDefineBody as ApisScopesDefineBody, type environment_ApisScopesDefineResponse as ApisScopesDefineResponse, type environment_ApisScopesRemoveResponse as ApisScopesRemoveResponse, type environment_ApisUpdateBody as ApisUpdateBody, type environment_ApisUpdateResponse as ApisUpdateResponse, type environment_App as App, type environment_AppBlueprint as AppBlueprint, type environment_AppSecret as AppSecret, type environment_Appearance as Appearance, type environment_Approval as Approval, type environment_ApprovalDecision as ApprovalDecision, type environment_ApprovalsDenyResponse as ApprovalsDenyResponse, type environment_ApprovalsListQuery as ApprovalsListQuery, type environment_ApprovalsListResponse as ApprovalsListResponse, type environment_AppsBlueprintResponse as AppsBlueprintResponse, type environment_AppsCopyBody as AppsCopyBody, type environment_AppsCopyResponse as AppsCopyResponse, type environment_AppsCreateBody as AppsCreateBody, type environment_AppsCreateResponse as AppsCreateResponse, type environment_AppsDeleteResponse as AppsDeleteResponse, type environment_AppsGetResponse as AppsGetResponse, type environment_AppsListQuery as AppsListQuery, type environment_AppsListResponse as AppsListResponse, type environment_AppsManifestSetBody as AppsManifestSetBody, type environment_AppsManifestSetResponse as AppsManifestSetResponse, type environment_AppsManifestSyncResponse as AppsManifestSyncResponse, type environment_AppsScopesSetBody as AppsScopesSetBody, type environment_AppsScopesSetResponse as AppsScopesSetResponse, type environment_AppsSecretsListResponse as AppsSecretsListResponse, type environment_AppsSecretsRevokeResponse as AppsSecretsRevokeResponse, type environment_AppsSecretsRotateBody as AppsSecretsRotateBody, type environment_AppsSecretsRotateResponse as AppsSecretsRotateResponse, type environment_AppsSettingsApiKeyPrefixBody as AppsSettingsApiKeyPrefixBody, type environment_AppsSettingsApiKeyPrefixResponse as AppsSettingsApiKeyPrefixResponse, type environment_AppsSettingsBackchannelLogoutBody as AppsSettingsBackchannelLogoutBody, type environment_AppsSettingsBackchannelLogoutResponse as AppsSettingsBackchannelLogoutResponse, type environment_AppsSettingsTokenExchangeBody as AppsSettingsTokenExchangeBody, type environment_AppsSettingsTokenExchangeResponse as AppsSettingsTokenExchangeResponse, type environment_AppsSettingsTokenLifetimeBody as AppsSettingsTokenLifetimeBody, type environment_AppsSettingsTokenLifetimeResponse as AppsSettingsTokenLifetimeResponse, type environment_AppsUpdateBody as AppsUpdateBody, type environment_AppsUpdateResponse as AppsUpdateResponse, type environment_AssignableMemberRole as AssignableMemberRole, type environment_AuditEntry as AuditEntry, type environment_AuditListQuery as AuditListQuery, type environment_AuditListResponse as AuditListResponse, type environment_AuditLogEvent as AuditLogEvent, type environment_AuditLogEventBatch as AuditLogEventBatch, type environment_AuditLogExport as AuditLogExport, type environment_AuditLogSchema as AuditLogSchema, type environment_AuditLogSettings as AuditLogSettings, type environment_AuditLogVerification as AuditLogVerification, type environment_AuditLogsEventsCreateBody as AuditLogsEventsCreateBody, type environment_AuditLogsEventsCreateResponse as AuditLogsEventsCreateResponse, type environment_AuditLogsEventsListQuery as AuditLogsEventsListQuery, type environment_AuditLogsEventsListResponse as AuditLogsEventsListResponse, type environment_AuditLogsExportsCreateBody as AuditLogsExportsCreateBody, type environment_AuditLogsExportsCreateResponse as AuditLogsExportsCreateResponse, type environment_AuditLogsExportsGetResponse as AuditLogsExportsGetResponse, type environment_AuditLogsSchemasCreateBody as AuditLogsSchemasCreateBody, type environment_AuditLogsSchemasCreateResponse as AuditLogsSchemasCreateResponse, type environment_AuditLogsSchemasDeleteResponse as AuditLogsSchemasDeleteResponse, type environment_AuditLogsSchemasGetResponse as AuditLogsSchemasGetResponse, type environment_AuditLogsSchemasListQuery as AuditLogsSchemasListQuery, type environment_AuditLogsSchemasListResponse as AuditLogsSchemasListResponse, type environment_AuditLogsSchemasUpdateBody as AuditLogsSchemasUpdateBody, type environment_AuditLogsSchemasUpdateResponse as AuditLogsSchemasUpdateResponse, type environment_AuditLogsSettingsGetResponse as AuditLogsSettingsGetResponse, type environment_AuditLogsSettingsUpdateBody as AuditLogsSettingsUpdateBody, type environment_AuditLogsSettingsUpdateResponse as AuditLogsSettingsUpdateResponse, type environment_AuditLogsVerifyQuery as AuditLogsVerifyQuery, type environment_AuditLogsVerifyResponse as AuditLogsVerifyResponse, type environment_BearerChallenge as BearerChallenge, type environment_BrandingAppearanceGetQuery as BrandingAppearanceGetQuery, type environment_BrandingAppearanceGetResponse as BrandingAppearanceGetResponse, type environment_BrandingAppearanceSetBody as BrandingAppearanceSetBody, type environment_BrandingAppearanceSetResponse as BrandingAppearanceSetResponse, type environment_BrandingWhitelabelGetQuery as BrandingWhitelabelGetQuery, type environment_BrandingWhitelabelGetResponse as BrandingWhitelabelGetResponse, type environment_BrandingWhitelabelSetBody as BrandingWhitelabelSetBody, type environment_BrandingWhitelabelSetResponse as BrandingWhitelabelSetResponse, type CustomDomain$1 as CustomDomain, type environment_Device as Device, type environment_DirectoriesConnectBody as DirectoriesConnectBody, type environment_DirectoriesConnectResponse as DirectoriesConnectResponse, type environment_DirectoriesCreateBody as DirectoriesCreateBody, type environment_DirectoriesCreateResponse as DirectoriesCreateResponse, type environment_DirectoriesCredentialsReplaceBody as DirectoriesCredentialsReplaceBody, type environment_DirectoriesCredentialsReplaceResponse as DirectoriesCredentialsReplaceResponse, type environment_DirectoriesDeleteBody as DirectoriesDeleteBody, type environment_DirectoriesDeleteResponse as DirectoriesDeleteResponse, type environment_DirectoriesGetQuery as DirectoriesGetQuery, type environment_DirectoriesGetResponse as DirectoriesGetResponse, type environment_DirectoriesGroupsListQuery as DirectoriesGroupsListQuery, type environment_DirectoriesGroupsListResponse as DirectoriesGroupsListResponse, type environment_DirectoriesGroupsMapBody as DirectoriesGroupsMapBody, type environment_DirectoriesGroupsMapResponse as DirectoriesGroupsMapResponse, type environment_DirectoriesHrisConnectBody as DirectoriesHrisConnectBody, type environment_DirectoriesHrisConnectResponse as DirectoriesHrisConnectResponse, type environment_DirectoriesListQuery as DirectoriesListQuery, type environment_DirectoriesListResponse as DirectoriesListResponse, type environment_DirectoriesStatusSetBody as DirectoriesStatusSetBody, type environment_DirectoriesStatusSetResponse as DirectoriesStatusSetResponse, type environment_DirectoriesSyncBody as DirectoriesSyncBody, type environment_DirectoriesSyncResponse as DirectoriesSyncResponse, type environment_DirectoriesSyncSettingsUpdateBody as DirectoriesSyncSettingsUpdateBody, type environment_DirectoriesSyncSettingsUpdateResponse as DirectoriesSyncSettingsUpdateResponse, type environment_DirectoriesTokenRotateBody as DirectoriesTokenRotateBody, type environment_DirectoriesTokenRotateResponse as DirectoriesTokenRotateResponse, type environment_DirectoriesUpdateBody as DirectoriesUpdateBody, type environment_DirectoriesUpdateResponse as DirectoriesUpdateResponse, type environment_Directory as Directory, type environment_DirectoryGroup as DirectoryGroup, type environment_DomainEvent as DomainEvent, type environment_DomainsAddBody as DomainsAddBody, type environment_DomainsAddResponse as DomainsAddResponse, type environment_DomainsGetResponse as DomainsGetResponse, type environment_DomainsRemoveResponse as DomainsRemoveResponse, type environment_DomainsVerifyResponse as DomainsVerifyResponse, environment_EnvironmentClient as EnvironmentClient, type environment_EnvironmentClientOptions as EnvironmentClientOptions, type environment_ErasureReceipt as ErasureReceipt, type ErrorSchema$3 as ErrorSchema, type environment_EventsListQuery as EventsListQuery, type environment_EventsListResponse as EventsListResponse, type environment_FeatureFlag as FeatureFlag, type environment_FeatureFlagEvaluation as FeatureFlagEvaluation, type environment_FeatureFlagRule as FeatureFlagRule, type environment_FeatureFlagsCreateBody as FeatureFlagsCreateBody, type environment_FeatureFlagsCreateResponse as FeatureFlagsCreateResponse, type environment_FeatureFlagsDeleteResponse as FeatureFlagsDeleteResponse, type environment_FeatureFlagsEvaluateQuery as FeatureFlagsEvaluateQuery, type environment_FeatureFlagsEvaluateResponse as FeatureFlagsEvaluateResponse, type environment_FeatureFlagsGetResponse as FeatureFlagsGetResponse, type environment_FeatureFlagsListQuery as FeatureFlagsListQuery, type environment_FeatureFlagsListResponse as FeatureFlagsListResponse, type environment_FeatureFlagsUpdateBody as FeatureFlagsUpdateBody, type environment_FeatureFlagsUpdateResponse as FeatureFlagsUpdateResponse, type environment_FgaCheck as FgaCheck, type environment_FgaCheckBatch as FgaCheckBatch, type environment_FgaCheckBatchQuery as FgaCheckBatchQuery, type environment_FgaCheckBatchResponse as FgaCheckBatchResponse, type environment_FgaCheckQuery as FgaCheckQuery, type environment_FgaCheckResponse as FgaCheckResponse, type environment_FgaObject as FgaObject, type environment_FgaResourcesListQuery as FgaResourcesListQuery, type environment_FgaResourcesListResponse as FgaResourcesListResponse, type environment_FgaSchema as FgaSchema, type environment_FgaSchemaGetResponse as FgaSchemaGetResponse, type environment_FgaSchemaUpdateBody as FgaSchemaUpdateBody, type environment_FgaSchemaUpdateResponse as FgaSchemaUpdateResponse, type environment_FgaSchemaValidateQuery as FgaSchemaValidateQuery, type environment_FgaSchemaValidateResponse as FgaSchemaValidateResponse, type environment_FgaSchemaValidation as FgaSchemaValidation, type environment_FgaSubject as FgaSubject, type environment_FgaSubjectsListQuery as FgaSubjectsListQuery, type environment_FgaSubjectsListResponse as FgaSubjectsListResponse, type environment_FgaTuple as FgaTuple, type environment_FgaTupleWrite as FgaTupleWrite, type environment_FgaTuplesDeleteBody as FgaTuplesDeleteBody, type environment_FgaTuplesDeleteResponse as FgaTuplesDeleteResponse, type environment_FgaTuplesListQuery as FgaTuplesListQuery, type environment_FgaTuplesListResponse as FgaTuplesListResponse, type environment_FgaTuplesWriteBody as FgaTuplesWriteBody, type environment_FgaTuplesWriteResponse as FgaTuplesWriteResponse, type environment_FgaType as FgaType, type environment_FrontendKey as FrontendKey, type environment_FrontendKeysCreateBody as FrontendKeysCreateBody, type environment_FrontendKeysCreateResponse as FrontendKeysCreateResponse, type environment_FrontendKeysListQuery as FrontendKeysListQuery, type environment_FrontendKeysListResponse as FrontendKeysListResponse, type environment_FrontendKeysRevokeResponse as FrontendKeysRevokeResponse, type environment_FrontendKeysSetOriginsBody as FrontendKeysSetOriginsBody, type environment_FrontendKeysSetOriginsResponse as FrontendKeysSetOriginsResponse, type environment_HooksCreateBody as HooksCreateBody, type environment_HooksCreateResponse as HooksCreateResponse, type environment_HooksDeleteResponse as HooksDeleteResponse, type environment_HooksGetResponse as HooksGetResponse, type environment_HooksListQuery as HooksListQuery, type environment_HooksListResponse as HooksListResponse, type environment_HooksUpdateBody as HooksUpdateBody, type environment_HooksUpdateResponse as HooksUpdateResponse, type environment_InlineHook as InlineHook, type environment_Invitation as Invitation, type environment_InvitationsListQuery as InvitationsListQuery, type environment_InvitationsListResponse as InvitationsListResponse, type environment_InvitationsResendResponse as InvitationsResendResponse, type environment_InvitationsRevokeResponse as InvitationsRevokeResponse, type environment_InvitationsSendBody as InvitationsSendBody, type environment_InvitationsSendResponse as InvitationsSendResponse, type environment_KeysCreateBody as KeysCreateBody, type environment_KeysCreateResponse as KeysCreateResponse, type environment_KeysListQuery as KeysListQuery, type environment_KeysListResponse as KeysListResponse, type environment_KeysRevokeResponse as KeysRevokeResponse, type environment_KeysRotateBody as KeysRotateBody, type environment_KeysRotateResponse as KeysRotateResponse, type environment_LegacyLogin as LegacyLogin, type environment_LegacyLoginApproveResponse as LegacyLoginApproveResponse, type environment_LegacyLoginGetResponse as LegacyLoginGetResponse, type environment_LegacyLoginProbe as LegacyLoginProbe, type environment_LegacyLoginProbeBody as LegacyLoginProbeBody, type environment_LegacyLoginProbeResponse as LegacyLoginProbeResponse, type environment_LegacyLoginRevokeResponse as LegacyLoginRevokeResponse, type environment_LogStream as LogStream, type environment_LogStreamTest as LogStreamTest, type environment_LogStreamsCreateBody as LogStreamsCreateBody, type environment_LogStreamsCreateResponse as LogStreamsCreateResponse, type environment_LogStreamsDeleteResponse as LogStreamsDeleteResponse, type environment_LogStreamsGetResponse as LogStreamsGetResponse, type environment_LogStreamsListQuery as LogStreamsListQuery, type environment_LogStreamsListResponse as LogStreamsListResponse, type environment_LogStreamsTestResponse as LogStreamsTestResponse, type environment_LogStreamsUpdateBody as LogStreamsUpdateBody, type environment_LogStreamsUpdateResponse as LogStreamsUpdateResponse, type environment_ManagementKey as ManagementKey, type environment_ManifestSync as ManifestSync, type Member$1 as Member, type environment_MembersAddBody as MembersAddBody, type environment_MembersAddResponse as MembersAddResponse, type environment_MembersListQuery as MembersListQuery, type environment_MembersListResponse as MembersListResponse, type environment_MembersRemoveResponse as MembersRemoveResponse, type environment_MembersRolesGrantQuery as MembersRolesGrantQuery, type environment_MembersRolesGrantResponse as MembersRolesGrantResponse, type environment_MembersRolesListResponse as MembersRolesListResponse, type environment_MembersRolesRevokeQuery as MembersRolesRevokeQuery, type environment_MembersRolesRevokeResponse as MembersRolesRevokeResponse, type environment_MembersUpdateBody as MembersUpdateBody, type environment_MembersUpdateResponse as MembersUpdateResponse, type environment_OAuthClientError as OAuthClientError, type environment_OfferedSocialProviders as OfferedSocialProviders, type Organization$1 as Organization, type environment_OrganizationDomain as OrganizationDomain, type OrganizationsCreateBody$1 as OrganizationsCreateBody, type OrganizationsCreateResponse$1 as OrganizationsCreateResponse, type environment_OrganizationsDeleteResponse as OrganizationsDeleteResponse, type environment_OrganizationsDomainsAddBody as OrganizationsDomainsAddBody, type environment_OrganizationsDomainsAddResponse as OrganizationsDomainsAddResponse, type environment_OrganizationsDomainsCaptureBody as OrganizationsDomainsCaptureBody, type environment_OrganizationsDomainsCaptureResponse as OrganizationsDomainsCaptureResponse, type environment_OrganizationsDomainsListResponse as OrganizationsDomainsListResponse, type environment_OrganizationsDomainsRemoveResponse as OrganizationsDomainsRemoveResponse, type environment_OrganizationsDomainsVerifyResponse as OrganizationsDomainsVerifyResponse, type environment_OrganizationsGetResponse as OrganizationsGetResponse, type environment_OrganizationsListQuery as OrganizationsListQuery, type environment_OrganizationsListResponse as OrganizationsListResponse, type environment_OrganizationsPortalLinksCreateBody as OrganizationsPortalLinksCreateBody, type environment_OrganizationsPortalLinksCreateResponse as OrganizationsPortalLinksCreateResponse, type environment_OrganizationsPortalLinksListResponse as OrganizationsPortalLinksListResponse, type environment_OrganizationsPortalLinksRevokeResponse as OrganizationsPortalLinksRevokeResponse, type environment_OrganizationsReactivateResponse as OrganizationsReactivateResponse, type environment_OrganizationsSuspendResponse as OrganizationsSuspendResponse, type environment_OrganizationsTransferOwnershipBody as OrganizationsTransferOwnershipBody, type environment_OrganizationsTransferOwnershipResponse as OrganizationsTransferOwnershipResponse, type environment_OrganizationsUpdateBody as OrganizationsUpdateBody, type environment_OrganizationsUpdateResponse as OrganizationsUpdateResponse, type PageMeta$1 as PageMeta, type environment_Permission as Permission, type environment_PermissionsCreateBody as PermissionsCreateBody, type environment_PermissionsCreateResponse as PermissionsCreateResponse, type environment_PermissionsDeleteResponse as PermissionsDeleteResponse, type environment_PermissionsListQuery as PermissionsListQuery, type environment_PermissionsListResponse as PermissionsListResponse, type environment_PermissionsUpdateBody as PermissionsUpdateBody, type environment_PermissionsUpdateResponse as PermissionsUpdateResponse, type environment_Pipe as Pipe, type environment_PipeConnectRequired as PipeConnectRequired, type environment_PipeConnection as PipeConnection, type environment_PipesConnectionsDeleteResponse as PipesConnectionsDeleteResponse, type environment_PipesConnectionsListQuery as PipesConnectionsListQuery, type environment_PipesConnectionsListResponse as PipesConnectionsListResponse, type environment_PipesCreateBody as PipesCreateBody, type environment_PipesCreateResponse as PipesCreateResponse, type environment_PipesDeleteResponse as PipesDeleteResponse, type environment_PipesGetResponse as PipesGetResponse, type environment_PipesGrantsCreateBody as PipesGrantsCreateBody, type environment_PipesGrantsCreateResponse as PipesGrantsCreateResponse, type environment_PipesGrantsDeleteResponse as PipesGrantsDeleteResponse, type environment_PipesListQuery as PipesListQuery, type environment_PipesListResponse as PipesListResponse, type environment_PipesUpdateBody as PipesUpdateBody, type environment_PipesUpdateResponse as PipesUpdateResponse, type environment_PortalLink as PortalLink, type environment_PortalLinkRecord as PortalLinkRecord, type environment_ProvisioningTarget as ProvisioningTarget, type environment_ProvisioningTargetsCreateBody as ProvisioningTargetsCreateBody, type environment_ProvisioningTargetsCreateResponse as ProvisioningTargetsCreateResponse, type environment_ProvisioningTargetsDeleteBody as ProvisioningTargetsDeleteBody, type environment_ProvisioningTargetsDeleteResponse as ProvisioningTargetsDeleteResponse, type environment_ProvisioningTargetsGetQuery as ProvisioningTargetsGetQuery, type environment_ProvisioningTargetsGetResponse as ProvisioningTargetsGetResponse, type environment_ProvisioningTargetsListQuery as ProvisioningTargetsListQuery, type environment_ProvisioningTargetsListResponse as ProvisioningTargetsListResponse, type environment_ProvisioningTargetsStatusSetBody as ProvisioningTargetsStatusSetBody, type environment_ProvisioningTargetsStatusSetResponse as ProvisioningTargetsStatusSetResponse, type environment_RadarDecision as RadarDecision, type environment_RadarDecisionsGetResponse as RadarDecisionsGetResponse, type environment_RadarDecisionsListQuery as RadarDecisionsListQuery, type environment_RadarDecisionsListResponse as RadarDecisionsListResponse, type environment_RadarListEntry as RadarListEntry, type environment_RadarListsAddBody as RadarListsAddBody, type environment_RadarListsAddResponse as RadarListsAddResponse, type environment_RadarListsListQuery as RadarListsListQuery, type environment_RadarListsListResponse as RadarListsListResponse, type environment_RadarListsRemoveResponse as RadarListsRemoveResponse, type environment_RadarModeSetBody as RadarModeSetBody, type environment_RadarModeSetResponse as RadarModeSetResponse, type environment_RadarRule as RadarRule, type environment_RadarRulesCreateBody as RadarRulesCreateBody, type environment_RadarRulesCreateResponse as RadarRulesCreateResponse, type environment_RadarRulesDeleteResponse as RadarRulesDeleteResponse, type environment_RadarRulesGetResponse as RadarRulesGetResponse, type environment_RadarRulesListQuery as RadarRulesListQuery, type environment_RadarRulesListResponse as RadarRulesListResponse, type environment_RadarRulesReorderBody as RadarRulesReorderBody, type environment_RadarRulesReorderResponse as RadarRulesReorderResponse, type environment_RadarRulesUpdateBody as RadarRulesUpdateBody, type environment_RadarRulesUpdateResponse as RadarRulesUpdateResponse, type environment_RadarSettings as RadarSettings, type environment_RadarSettingsGetResponse as RadarSettingsGetResponse, type environment_RadarSettingsUpdateBody as RadarSettingsUpdateBody, type environment_RadarSettingsUpdateResponse as RadarSettingsUpdateResponse, type environment_Role as Role, type environment_RoleAssignment as RoleAssignment, type environment_RolesCreateBody as RolesCreateBody, type environment_RolesCreateResponse as RolesCreateResponse, type environment_RolesDeleteResponse as RolesDeleteResponse, type environment_RolesGetQuery as RolesGetQuery, type environment_RolesGetResponse as RolesGetResponse, type environment_RolesListQuery as RolesListQuery, type environment_RolesListResponse as RolesListResponse, type environment_RolesPermissionsGrantResponse as RolesPermissionsGrantResponse, type environment_RolesPermissionsRevokeResponse as RolesPermissionsRevokeResponse, type environment_RolesUpdateBody as RolesUpdateBody, type environment_RolesUpdateResponse as RolesUpdateResponse, type environment_SamlApp as SamlApp, type environment_SamlAppsCreateBody as SamlAppsCreateBody, type environment_SamlAppsCreateResponse as SamlAppsCreateResponse, type environment_SamlAppsDeleteResponse as SamlAppsDeleteResponse, type environment_SamlAppsGetResponse as SamlAppsGetResponse, type environment_SamlAppsListQuery as SamlAppsListQuery, type environment_SamlAppsListResponse as SamlAppsListResponse, type environment_SamlAppsUpdateBody as SamlAppsUpdateBody, type environment_SamlAppsUpdateResponse as SamlAppsUpdateResponse, type environment_SamlMetadata as SamlMetadata, type environment_SelfServiceSignup as SelfServiceSignup, type environment_SignInMethodsInForce as SignInMethodsInForce, type environment_SignInPolicy as SignInPolicy, type environment_SignInRules as SignInRules, type environment_SigninPolicyGetQuery as SigninPolicyGetQuery, type environment_SigninPolicyGetResponse as SigninPolicyGetResponse, type environment_SigninPolicyInheritResponse as SigninPolicyInheritResponse, type environment_SigninPolicyUpdateBody as SigninPolicyUpdateBody, type environment_SigninPolicyUpdateResponse as SigninPolicyUpdateResponse, type environment_SigninSelfServiceSignupSetBody as SigninSelfServiceSignupSetBody, type environment_SigninSelfServiceSignupSetResponse as SigninSelfServiceSignupSetResponse, type environment_SigninSmsGetResponse as SigninSmsGetResponse, type environment_SigninSmsUpdateBody as SigninSmsUpdateBody, type environment_SigninSmsUpdateResponse as SigninSmsUpdateResponse, type environment_SigninSocialDeleteBody as SigninSocialDeleteBody, type environment_SigninSocialDeleteResponse as SigninSocialDeleteResponse, type environment_SigninSocialDisableBody as SigninSocialDisableBody, type environment_SigninSocialDisableResponse as SigninSocialDisableResponse, type environment_SigninSocialEnableBody as SigninSocialEnableBody, type environment_SigninSocialEnableResponse as SigninSocialEnableResponse, type environment_SigninSocialInheritBody as SigninSocialInheritBody, type environment_SigninSocialInheritResponse as SigninSocialInheritResponse, type environment_SigninSocialListQuery as SigninSocialListQuery, type environment_SigninSocialListResponse as SigninSocialListResponse, type environment_SigninSocialOfferedQuery as SigninSocialOfferedQuery, type environment_SigninSocialOfferedResponse as SigninSocialOfferedResponse, type environment_SigninSocialSetBody as SigninSocialSetBody, type environment_SigninSocialSetResponse as SigninSocialSetResponse, type environment_SigninSocialUpdateBody as SigninSocialUpdateBody, type environment_SigninSocialUpdateResponse as SigninSocialUpdateResponse, type environment_SmsFactorPolicy as SmsFactorPolicy, type environment_SocialProvider as SocialProvider, type environment_SodPoliciesCreateBody as SodPoliciesCreateBody, type environment_SodPoliciesCreateResponse as SodPoliciesCreateResponse, type environment_SodPoliciesDeleteBody as SodPoliciesDeleteBody, type environment_SodPoliciesDeleteResponse as SodPoliciesDeleteResponse, type environment_SodPoliciesGetQuery as SodPoliciesGetQuery, type environment_SodPoliciesGetResponse as SodPoliciesGetResponse, type environment_SodPoliciesListQuery as SodPoliciesListQuery, type environment_SodPoliciesListResponse as SodPoliciesListResponse, type environment_SodPoliciesStatusSetBody as SodPoliciesStatusSetBody, type environment_SodPoliciesStatusSetResponse as SodPoliciesStatusSetResponse, type environment_SodPolicy as SodPolicy, type environment_SsoCertificates as SsoCertificates, type environment_SsoConnection as SsoConnection, type environment_SsoConnectionsActivateBody as SsoConnectionsActivateBody, type environment_SsoConnectionsActivateResponse as SsoConnectionsActivateResponse, type environment_SsoConnectionsCertificatesActivateBody as SsoConnectionsCertificatesActivateBody, type environment_SsoConnectionsCertificatesActivateResponse as SsoConnectionsCertificatesActivateResponse, type environment_SsoConnectionsCertificatesListQuery as SsoConnectionsCertificatesListQuery, type environment_SsoConnectionsCertificatesListResponse as SsoConnectionsCertificatesListResponse, type environment_SsoConnectionsCertificatesStageBody as SsoConnectionsCertificatesStageBody, type environment_SsoConnectionsCertificatesStageResponse as SsoConnectionsCertificatesStageResponse, type environment_SsoConnectionsCreateBody as SsoConnectionsCreateBody, type environment_SsoConnectionsCreateResponse as SsoConnectionsCreateResponse, type environment_SsoConnectionsDeleteBody as SsoConnectionsDeleteBody, type environment_SsoConnectionsDeleteResponse as SsoConnectionsDeleteResponse, type environment_SsoConnectionsDisableBody as SsoConnectionsDisableBody, type environment_SsoConnectionsDisableResponse as SsoConnectionsDisableResponse, type environment_SsoConnectionsGetQuery as SsoConnectionsGetQuery, type environment_SsoConnectionsGetResponse as SsoConnectionsGetResponse, type environment_SsoConnectionsListQuery as SsoConnectionsListQuery, type environment_SsoConnectionsListResponse as SsoConnectionsListResponse, type environment_SsoConnectionsRequireSsoBody as SsoConnectionsRequireSsoBody, type environment_SsoConnectionsRequireSsoResponse as SsoConnectionsRequireSsoResponse, type environment_SsoConnectionsUpdateBody as SsoConnectionsUpdateBody, type environment_SsoConnectionsUpdateResponse as SsoConnectionsUpdateResponse, type environment_SsoDomain as SsoDomain, type environment_SsoDomainsCaptureBody as SsoDomainsCaptureBody, type environment_SsoDomainsCaptureResponse as SsoDomainsCaptureResponse, type environment_SsoDomainsCreateBody as SsoDomainsCreateBody, type environment_SsoDomainsCreateResponse as SsoDomainsCreateResponse, type environment_SsoDomainsDeleteBody as SsoDomainsDeleteBody, type environment_SsoDomainsDeleteResponse as SsoDomainsDeleteResponse, type environment_SsoDomainsListQuery as SsoDomainsListQuery, type environment_SsoDomainsListResponse as SsoDomainsListResponse, type environment_SsoDomainsVerifyBody as SsoDomainsVerifyBody, type environment_SsoDomainsVerifyResponse as SsoDomainsVerifyResponse, type environment_SsoSamlMetadataImportBody as SsoSamlMetadataImportBody, type environment_SsoSamlMetadataImportResponse as SsoSamlMetadataImportResponse, type environment_SupportSession as SupportSession, type environment_SupportSessionsEndResponse as SupportSessionsEndResponse, type environment_SupportSessionsStartBody as SupportSessionsStartBody, type environment_SupportSessionsStartResponse as SupportSessionsStartResponse, type environment_ThemeMode as ThemeMode, type environment_TokenVaultGrantsCreateBody as TokenVaultGrantsCreateBody, type environment_TokenVaultGrantsCreateResponse as TokenVaultGrantsCreateResponse, type environment_TokenVaultGrantsDeleteBody as TokenVaultGrantsDeleteBody, type environment_TokenVaultGrantsDeleteResponse as TokenVaultGrantsDeleteResponse, type environment_TokenVaultSecret as TokenVaultSecret, type environment_TokenVaultSecretsCreateBody as TokenVaultSecretsCreateBody, type environment_TokenVaultSecretsCreateResponse as TokenVaultSecretsCreateResponse, type environment_TokenVaultSecretsGetQuery as TokenVaultSecretsGetQuery, type environment_TokenVaultSecretsGetResponse as TokenVaultSecretsGetResponse, type environment_TokenVaultSecretsListQuery as TokenVaultSecretsListQuery, type environment_TokenVaultSecretsListResponse as TokenVaultSecretsListResponse, type environment_TokenVaultSecretsRevokeBody as TokenVaultSecretsRevokeBody, type environment_TokenVaultSecretsRevokeResponse as TokenVaultSecretsRevokeResponse, type environment_TokenVaultSecretsRotateBody as TokenVaultSecretsRotateBody, type environment_TokenVaultSecretsRotateResponse as TokenVaultSecretsRotateResponse, type environment_User as User, type environment_UserSession as UserSession, type environment_UsersCreateBody as UsersCreateBody, type environment_UsersCreateResponse as UsersCreateResponse, type environment_UsersDeactivateResponse as UsersDeactivateResponse, type environment_UsersEnvironmentRolesGetQuery as UsersEnvironmentRolesGetQuery, type environment_UsersEnvironmentRolesGetResponse as UsersEnvironmentRolesGetResponse, type environment_UsersEnvironmentRolesGrantQuery as UsersEnvironmentRolesGrantQuery, type environment_UsersEnvironmentRolesGrantResponse as UsersEnvironmentRolesGrantResponse, type environment_UsersEnvironmentRolesListResponse as UsersEnvironmentRolesListResponse, type environment_UsersEnvironmentRolesRevokeQuery as UsersEnvironmentRolesRevokeQuery, type environment_UsersEnvironmentRolesRevokeResponse as UsersEnvironmentRolesRevokeResponse, type environment_UsersEraseResponse as UsersEraseResponse, type environment_UsersGetResponse as UsersGetResponse, type environment_UsersListQuery as UsersListQuery, type environment_UsersListResponse as UsersListResponse, type environment_UsersMfaResetResponse as UsersMfaResetResponse, type environment_UsersMfaSmsRemoveResponse as UsersMfaSmsRemoveResponse, type environment_UsersPasswordResetSendResponse as UsersPasswordResetSendResponse, type environment_UsersPasswordSetBody as UsersPasswordSetBody, type environment_UsersPasswordSetResponse as UsersPasswordSetResponse, type environment_UsersReactivateResponse as UsersReactivateResponse, type environment_UsersSessionsListResponse as UsersSessionsListResponse, type environment_UsersSessionsRevokeAllResponse as UsersSessionsRevokeAllResponse, type environment_UsersSessionsRevokeResponse as UsersSessionsRevokeResponse, type environment_UsersUpdateBody as UsersUpdateBody, type environment_UsersUpdateResponse as UsersUpdateResponse, type environment_UsersVerificationSendResponse as UsersVerificationSendResponse, type environment_UsersVerifyResponse as UsersVerifyResponse, type environment_VaultSecret as VaultSecret, type environment_Webhook as Webhook, type environment_WebhooksCreateBody as WebhooksCreateBody, type environment_WebhooksCreateResponse as WebhooksCreateResponse, type environment_WebhooksDeleteResponse as WebhooksDeleteResponse, type environment_WebhooksGetResponse as WebhooksGetResponse, type environment_WebhooksListQuery as WebhooksListQuery, type environment_WebhooksListResponse as WebhooksListResponse, type environment_WebhooksPauseResponse as WebhooksPauseResponse, type environment_WebhooksResumeResponse as WebhooksResumeResponse, type environment_WebhooksSecretRotateResponse as WebhooksSecretRotateResponse, type environment_WebhooksSignatureSchemeChangeBody as WebhooksSignatureSchemeChangeBody, type environment_WebhooksSignatureSchemeChangeResponse as WebhooksSignatureSchemeChangeResponse, type environment_WebhooksUpdateBody as WebhooksUpdateBody, type environment_WebhooksUpdateResponse as WebhooksUpdateResponse, type environment_WhitelabelBranding as WhitelabelBranding, environment_environmentOperations as environmentOperations };
+  export { type environment_AccessReview as AccessReview, type environment_AccessReviewItem as AccessReviewItem, type environment_AccessReviewsCloseBody as AccessReviewsCloseBody, type environment_AccessReviewsCloseResponse as AccessReviewsCloseResponse, type environment_AccessReviewsCreateBody as AccessReviewsCreateBody, type environment_AccessReviewsCreateResponse as AccessReviewsCreateResponse, type environment_AccessReviewsGetQuery as AccessReviewsGetQuery, type environment_AccessReviewsGetResponse as AccessReviewsGetResponse, type environment_AccessReviewsItemsDecideBody as AccessReviewsItemsDecideBody, type environment_AccessReviewsItemsDecideResponse as AccessReviewsItemsDecideResponse, type environment_AccessReviewsItemsListQuery as AccessReviewsItemsListQuery, type environment_AccessReviewsItemsListResponse as AccessReviewsItemsListResponse, type environment_AccessReviewsListQuery as AccessReviewsListQuery, type environment_AccessReviewsListResponse as AccessReviewsListResponse, type ActionApprovalsGetResponse$3 as ActionApprovalsGetResponse, type environment_AgentRequest as AgentRequest, type environment_Api as Api, type environment_ApiKey as ApiKey, type environment_ApiKeyVerification as ApiKeyVerification, type environment_ApiKeyVerificationRequest as ApiKeyVerificationRequest, type environment_ApiKeysListQuery as ApiKeysListQuery, type environment_ApiKeysListResponse as ApiKeysListResponse, type ApiKeysRevokeResponse$1 as ApiKeysRevokeResponse, type environment_ApiScope as ApiScope, type environment_ApisCreateBody as ApisCreateBody, type environment_ApisCreateResponse as ApisCreateResponse, type environment_ApisDeleteResponse as ApisDeleteResponse, type environment_ApisGetResponse as ApisGetResponse, type environment_ApisListQuery as ApisListQuery, type environment_ApisListResponse as ApisListResponse, type environment_ApisScopesDefineBody as ApisScopesDefineBody, type environment_ApisScopesDefineResponse as ApisScopesDefineResponse, type environment_ApisScopesRemoveResponse as ApisScopesRemoveResponse, type environment_ApisUpdateBody as ApisUpdateBody, type environment_ApisUpdateResponse as ApisUpdateResponse, type environment_App as App, type environment_AppBlueprint as AppBlueprint, type environment_AppCatalogDeleteBody as AppCatalogDeleteBody, type environment_AppCatalogDeleteResponse as AppCatalogDeleteResponse, type environment_AppCatalogListResponse as AppCatalogListResponse, type environment_AppCatalogSaveBody as AppCatalogSaveBody, type environment_AppCatalogSaveResponse as AppCatalogSaveResponse, type environment_AppCatalogShowResponse as AppCatalogShowResponse, type environment_AppSecret as AppSecret, type environment_Appearance as Appearance, type environment_Approval as Approval, type environment_ApprovalDecision as ApprovalDecision, type environment_ApprovalsDenyResponse as ApprovalsDenyResponse, type environment_ApprovalsListQuery as ApprovalsListQuery, type environment_ApprovalsListResponse as ApprovalsListResponse, type environment_AppsBlueprintResponse as AppsBlueprintResponse, type environment_AppsCopyBody as AppsCopyBody, type environment_AppsCopyResponse as AppsCopyResponse, type environment_AppsCreateBody as AppsCreateBody, type environment_AppsCreateResponse as AppsCreateResponse, type environment_AppsDeleteResponse as AppsDeleteResponse, type environment_AppsGetResponse as AppsGetResponse, type AppsListQuery$1 as AppsListQuery, type AppsListResponse$1 as AppsListResponse, type environment_AppsManifestSetBody as AppsManifestSetBody, type environment_AppsManifestSetResponse as AppsManifestSetResponse, type environment_AppsManifestSyncResponse as AppsManifestSyncResponse, type environment_AppsScopesSetBody as AppsScopesSetBody, type environment_AppsScopesSetResponse as AppsScopesSetResponse, type environment_AppsSecretsListResponse as AppsSecretsListResponse, type environment_AppsSecretsRevokeResponse as AppsSecretsRevokeResponse, type environment_AppsSecretsRotateBody as AppsSecretsRotateBody, type environment_AppsSecretsRotateResponse as AppsSecretsRotateResponse, type environment_AppsSettingsApiKeyPrefixBody as AppsSettingsApiKeyPrefixBody, type environment_AppsSettingsApiKeyPrefixResponse as AppsSettingsApiKeyPrefixResponse, type environment_AppsSettingsBackchannelLogoutBody as AppsSettingsBackchannelLogoutBody, type environment_AppsSettingsBackchannelLogoutResponse as AppsSettingsBackchannelLogoutResponse, type environment_AppsSettingsClientCredentialsBody as AppsSettingsClientCredentialsBody, type environment_AppsSettingsClientCredentialsResponse as AppsSettingsClientCredentialsResponse, type environment_AppsSettingsTokenExchangeBody as AppsSettingsTokenExchangeBody, type environment_AppsSettingsTokenExchangeResponse as AppsSettingsTokenExchangeResponse, type environment_AppsSettingsTokenLifetimeBody as AppsSettingsTokenLifetimeBody, type environment_AppsSettingsTokenLifetimeResponse as AppsSettingsTokenLifetimeResponse, type environment_AppsUpdateBody as AppsUpdateBody, type environment_AppsUpdateResponse as AppsUpdateResponse, type environment_AssignableMemberRole as AssignableMemberRole, type environment_AuditEntry as AuditEntry, type environment_AuditListQuery as AuditListQuery, type environment_AuditListResponse as AuditListResponse, type environment_AuditLogEvent as AuditLogEvent, type environment_AuditLogEventBatch as AuditLogEventBatch, type environment_AuditLogExport as AuditLogExport, type environment_AuditLogSchema as AuditLogSchema, type environment_AuditLogSettings as AuditLogSettings, type environment_AuditLogVerification as AuditLogVerification, type environment_AuditLogsEventsCreateBody as AuditLogsEventsCreateBody, type environment_AuditLogsEventsCreateResponse as AuditLogsEventsCreateResponse, type environment_AuditLogsEventsListQuery as AuditLogsEventsListQuery, type environment_AuditLogsEventsListResponse as AuditLogsEventsListResponse, type environment_AuditLogsExportsCreateBody as AuditLogsExportsCreateBody, type environment_AuditLogsExportsCreateResponse as AuditLogsExportsCreateResponse, type environment_AuditLogsExportsGetResponse as AuditLogsExportsGetResponse, type environment_AuditLogsSchemasCreateBody as AuditLogsSchemasCreateBody, type environment_AuditLogsSchemasCreateResponse as AuditLogsSchemasCreateResponse, type environment_AuditLogsSchemasDeleteResponse as AuditLogsSchemasDeleteResponse, type environment_AuditLogsSchemasGetResponse as AuditLogsSchemasGetResponse, type environment_AuditLogsSchemasListQuery as AuditLogsSchemasListQuery, type environment_AuditLogsSchemasListResponse as AuditLogsSchemasListResponse, type environment_AuditLogsSchemasUpdateBody as AuditLogsSchemasUpdateBody, type environment_AuditLogsSchemasUpdateResponse as AuditLogsSchemasUpdateResponse, type environment_AuditLogsSettingsGetResponse as AuditLogsSettingsGetResponse, type environment_AuditLogsSettingsUpdateBody as AuditLogsSettingsUpdateBody, type environment_AuditLogsSettingsUpdateResponse as AuditLogsSettingsUpdateResponse, type environment_AuditLogsVerifyQuery as AuditLogsVerifyQuery, type environment_AuditLogsVerifyResponse as AuditLogsVerifyResponse, type environment_AuthenticatorMeListResponse as AuthenticatorMeListResponse, type environment_BearerChallenge as BearerChallenge, type environment_BrandingAppearanceGetQuery as BrandingAppearanceGetQuery, type environment_BrandingAppearanceGetResponse as BrandingAppearanceGetResponse, type environment_BrandingAppearanceSetBody as BrandingAppearanceSetBody, type environment_BrandingAppearanceSetResponse as BrandingAppearanceSetResponse, type environment_BrandingWhitelabelGetQuery as BrandingWhitelabelGetQuery, type environment_BrandingWhitelabelGetResponse as BrandingWhitelabelGetResponse, type environment_BrandingWhitelabelSetBody as BrandingWhitelabelSetBody, type environment_BrandingWhitelabelSetResponse as BrandingWhitelabelSetResponse, type CustomDomain$1 as CustomDomain, type environment_Device as Device, type environment_DirectoriesConnectBody as DirectoriesConnectBody, type environment_DirectoriesConnectResponse as DirectoriesConnectResponse, type environment_DirectoriesCreateBody as DirectoriesCreateBody, type environment_DirectoriesCreateResponse as DirectoriesCreateResponse, type environment_DirectoriesCredentialsReplaceBody as DirectoriesCredentialsReplaceBody, type environment_DirectoriesCredentialsReplaceResponse as DirectoriesCredentialsReplaceResponse, type environment_DirectoriesDeleteBody as DirectoriesDeleteBody, type environment_DirectoriesDeleteResponse as DirectoriesDeleteResponse, type environment_DirectoriesGetQuery as DirectoriesGetQuery, type environment_DirectoriesGetResponse as DirectoriesGetResponse, type environment_DirectoriesGroupsListQuery as DirectoriesGroupsListQuery, type environment_DirectoriesGroupsListResponse as DirectoriesGroupsListResponse, type environment_DirectoriesGroupsMapBody as DirectoriesGroupsMapBody, type environment_DirectoriesGroupsMapResponse as DirectoriesGroupsMapResponse, type environment_DirectoriesHrisConnectBody as DirectoriesHrisConnectBody, type environment_DirectoriesHrisConnectResponse as DirectoriesHrisConnectResponse, type environment_DirectoriesListQuery as DirectoriesListQuery, type environment_DirectoriesListResponse as DirectoriesListResponse, type environment_DirectoriesStatusSetBody as DirectoriesStatusSetBody, type environment_DirectoriesStatusSetResponse as DirectoriesStatusSetResponse, type environment_DirectoriesSyncBody as DirectoriesSyncBody, type environment_DirectoriesSyncResponse as DirectoriesSyncResponse, type environment_DirectoriesSyncSettingsUpdateBody as DirectoriesSyncSettingsUpdateBody, type environment_DirectoriesSyncSettingsUpdateResponse as DirectoriesSyncSettingsUpdateResponse, type environment_DirectoriesTokenRotateBody as DirectoriesTokenRotateBody, type environment_DirectoriesTokenRotateResponse as DirectoriesTokenRotateResponse, type environment_DirectoriesUpdateBody as DirectoriesUpdateBody, type environment_DirectoriesUpdateResponse as DirectoriesUpdateResponse, type environment_Directory as Directory, type environment_DirectoryGroup as DirectoryGroup, type environment_DomainEvent as DomainEvent, type environment_DomainsAddBody as DomainsAddBody, type environment_DomainsAddResponse as DomainsAddResponse, type environment_DomainsGetResponse as DomainsGetResponse, type environment_DomainsRemoveResponse as DomainsRemoveResponse, type environment_DomainsVerifyResponse as DomainsVerifyResponse, environment_EnvironmentClient as EnvironmentClient, type environment_EnvironmentClientOptions as EnvironmentClientOptions, type environment_ErasureReceipt as ErasureReceipt, type ErrorSchema$3 as ErrorSchema, type environment_EventsListQuery as EventsListQuery, type environment_EventsListResponse as EventsListResponse, type environment_FeatureFlag as FeatureFlag, type environment_FeatureFlagEvaluation as FeatureFlagEvaluation, type environment_FeatureFlagRule as FeatureFlagRule, type environment_FeatureFlagsCreateBody as FeatureFlagsCreateBody, type environment_FeatureFlagsCreateResponse as FeatureFlagsCreateResponse, type environment_FeatureFlagsDeleteResponse as FeatureFlagsDeleteResponse, type environment_FeatureFlagsEvaluateQuery as FeatureFlagsEvaluateQuery, type environment_FeatureFlagsEvaluateResponse as FeatureFlagsEvaluateResponse, type environment_FeatureFlagsGetResponse as FeatureFlagsGetResponse, type environment_FeatureFlagsListQuery as FeatureFlagsListQuery, type environment_FeatureFlagsListResponse as FeatureFlagsListResponse, type environment_FeatureFlagsUpdateBody as FeatureFlagsUpdateBody, type environment_FeatureFlagsUpdateResponse as FeatureFlagsUpdateResponse, type environment_FgaCheck as FgaCheck, type environment_FgaCheckBatch as FgaCheckBatch, type environment_FgaCheckBatchQuery as FgaCheckBatchQuery, type environment_FgaCheckBatchResponse as FgaCheckBatchResponse, type environment_FgaCheckQuery as FgaCheckQuery, type environment_FgaCheckResponse as FgaCheckResponse, type environment_FgaObject as FgaObject, type environment_FgaResourcesListQuery as FgaResourcesListQuery, type environment_FgaResourcesListResponse as FgaResourcesListResponse, type environment_FgaSchema as FgaSchema, type environment_FgaSchemaGetResponse as FgaSchemaGetResponse, type environment_FgaSchemaUpdateBody as FgaSchemaUpdateBody, type environment_FgaSchemaUpdateResponse as FgaSchemaUpdateResponse, type environment_FgaSchemaValidateQuery as FgaSchemaValidateQuery, type environment_FgaSchemaValidateResponse as FgaSchemaValidateResponse, type environment_FgaSchemaValidation as FgaSchemaValidation, type environment_FgaSubject as FgaSubject, type environment_FgaSubjectsListQuery as FgaSubjectsListQuery, type environment_FgaSubjectsListResponse as FgaSubjectsListResponse, type environment_FgaTuple as FgaTuple, type environment_FgaTupleWrite as FgaTupleWrite, type environment_FgaTuplesDeleteBody as FgaTuplesDeleteBody, type environment_FgaTuplesDeleteResponse as FgaTuplesDeleteResponse, type environment_FgaTuplesListQuery as FgaTuplesListQuery, type environment_FgaTuplesListResponse as FgaTuplesListResponse, type environment_FgaTuplesWriteBody as FgaTuplesWriteBody, type environment_FgaTuplesWriteResponse as FgaTuplesWriteResponse, type environment_FgaType as FgaType, type environment_FrontendKey as FrontendKey, type environment_FrontendKeysCreateBody as FrontendKeysCreateBody, type environment_FrontendKeysCreateResponse as FrontendKeysCreateResponse, type environment_FrontendKeysListQuery as FrontendKeysListQuery, type environment_FrontendKeysListResponse as FrontendKeysListResponse, type environment_FrontendKeysRevokeResponse as FrontendKeysRevokeResponse, type environment_FrontendKeysSetOriginsBody as FrontendKeysSetOriginsBody, type environment_FrontendKeysSetOriginsResponse as FrontendKeysSetOriginsResponse, type environment_HooksCreateBody as HooksCreateBody, type environment_HooksCreateResponse as HooksCreateResponse, type environment_HooksDeleteResponse as HooksDeleteResponse, type environment_HooksGetResponse as HooksGetResponse, type environment_HooksListQuery as HooksListQuery, type environment_HooksListResponse as HooksListResponse, type environment_HooksUpdateBody as HooksUpdateBody, type environment_HooksUpdateResponse as HooksUpdateResponse, type environment_InlineHook as InlineHook, type environment_Invitation as Invitation, type environment_InvitationsGetResponse as InvitationsGetResponse, type environment_InvitationsListQuery as InvitationsListQuery, type environment_InvitationsListResponse as InvitationsListResponse, type environment_InvitationsResendResponse as InvitationsResendResponse, type environment_InvitationsRevokeResponse as InvitationsRevokeResponse, type environment_InvitationsSendBody as InvitationsSendBody, type environment_InvitationsSendResponse as InvitationsSendResponse, type environment_KeysCreateBody as KeysCreateBody, type environment_KeysCreateResponse as KeysCreateResponse, type environment_KeysListQuery as KeysListQuery, type environment_KeysListResponse as KeysListResponse, type environment_KeysRevokeResponse as KeysRevokeResponse, type environment_KeysRotateBody as KeysRotateBody, type environment_KeysRotateResponse as KeysRotateResponse, type environment_LegacyLogin as LegacyLogin, type environment_LegacyLoginApproveResponse as LegacyLoginApproveResponse, type environment_LegacyLoginGetResponse as LegacyLoginGetResponse, type environment_LegacyLoginProbe as LegacyLoginProbe, type environment_LegacyLoginProbeBody as LegacyLoginProbeBody, type environment_LegacyLoginProbeResponse as LegacyLoginProbeResponse, type environment_LegacyLoginRevokeResponse as LegacyLoginRevokeResponse, type environment_LogStream as LogStream, type environment_LogStreamTest as LogStreamTest, type environment_LogStreamsCreateBody as LogStreamsCreateBody, type environment_LogStreamsCreateResponse as LogStreamsCreateResponse, type environment_LogStreamsDeleteResponse as LogStreamsDeleteResponse, type environment_LogStreamsGetResponse as LogStreamsGetResponse, type environment_LogStreamsListQuery as LogStreamsListQuery, type environment_LogStreamsListResponse as LogStreamsListResponse, type environment_LogStreamsTestResponse as LogStreamsTestResponse, type environment_LogStreamsUpdateBody as LogStreamsUpdateBody, type environment_LogStreamsUpdateResponse as LogStreamsUpdateResponse, type environment_ManagementKey as ManagementKey, type environment_ManifestSync as ManifestSync, type Member$1 as Member, type environment_MembersAddBody as MembersAddBody, type environment_MembersAddResponse as MembersAddResponse, type environment_MembersAppsRolesReplaceBody as MembersAppsRolesReplaceBody, type environment_MembersAppsRolesReplaceResponse as MembersAppsRolesReplaceResponse, type environment_MembersListQuery as MembersListQuery, type environment_MembersListResponse as MembersListResponse, type environment_MembersRemoveResponse as MembersRemoveResponse, type environment_MembersRolesGrantQuery as MembersRolesGrantQuery, type environment_MembersRolesGrantResponse as MembersRolesGrantResponse, type environment_MembersRolesListResponse as MembersRolesListResponse, type environment_MembersRolesRevokeQuery as MembersRolesRevokeQuery, type environment_MembersRolesRevokeResponse as MembersRolesRevokeResponse, type environment_MembersUpdateBody as MembersUpdateBody, type environment_MembersUpdateResponse as MembersUpdateResponse, type environment_OAuthClientError as OAuthClientError, type environment_OfferedSocialProviders as OfferedSocialProviders, type Organization$1 as Organization, type environment_OrganizationDomain as OrganizationDomain, type environment_OrganizationServiceGrant as OrganizationServiceGrant, type OrganizationsCreateBody$1 as OrganizationsCreateBody, type OrganizationsCreateResponse$1 as OrganizationsCreateResponse, type environment_OrganizationsDeleteResponse as OrganizationsDeleteResponse, type environment_OrganizationsDomainsAddBody as OrganizationsDomainsAddBody, type environment_OrganizationsDomainsAddResponse as OrganizationsDomainsAddResponse, type environment_OrganizationsDomainsCaptureBody as OrganizationsDomainsCaptureBody, type environment_OrganizationsDomainsCaptureResponse as OrganizationsDomainsCaptureResponse, type environment_OrganizationsDomainsListResponse as OrganizationsDomainsListResponse, type environment_OrganizationsDomainsRemoveResponse as OrganizationsDomainsRemoveResponse, type environment_OrganizationsDomainsVerifyResponse as OrganizationsDomainsVerifyResponse, type environment_OrganizationsGetResponse as OrganizationsGetResponse, type environment_OrganizationsListQuery as OrganizationsListQuery, type environment_OrganizationsListResponse as OrganizationsListResponse, type environment_OrganizationsPortalLinksCreateBody as OrganizationsPortalLinksCreateBody, type environment_OrganizationsPortalLinksCreateResponse as OrganizationsPortalLinksCreateResponse, type environment_OrganizationsPortalLinksListResponse as OrganizationsPortalLinksListResponse, type environment_OrganizationsPortalLinksRevokeResponse as OrganizationsPortalLinksRevokeResponse, type environment_OrganizationsReactivateResponse as OrganizationsReactivateResponse, type environment_OrganizationsSuspendResponse as OrganizationsSuspendResponse, type environment_OrganizationsTransferOwnershipBody as OrganizationsTransferOwnershipBody, type environment_OrganizationsTransferOwnershipResponse as OrganizationsTransferOwnershipResponse, type environment_OrganizationsUpdateBody as OrganizationsUpdateBody, type environment_OrganizationsUpdateResponse as OrganizationsUpdateResponse, type PageMeta$1 as PageMeta, type environment_Permission as Permission, type environment_PermissionsCreateBody as PermissionsCreateBody, type environment_PermissionsCreateResponse as PermissionsCreateResponse, type environment_PermissionsDeleteResponse as PermissionsDeleteResponse, type environment_PermissionsListQuery as PermissionsListQuery, type environment_PermissionsListResponse as PermissionsListResponse, type environment_PermissionsUpdateBody as PermissionsUpdateBody, type environment_PermissionsUpdateResponse as PermissionsUpdateResponse, type environment_Pipe as Pipe, type environment_PipeConnectRequired as PipeConnectRequired, type environment_PipeConnection as PipeConnection, type environment_PipesConnectionsDeleteResponse as PipesConnectionsDeleteResponse, type environment_PipesConnectionsListQuery as PipesConnectionsListQuery, type environment_PipesConnectionsListResponse as PipesConnectionsListResponse, type environment_PipesCreateBody as PipesCreateBody, type environment_PipesCreateResponse as PipesCreateResponse, type environment_PipesDeleteResponse as PipesDeleteResponse, type environment_PipesGetResponse as PipesGetResponse, type environment_PipesGrantsCreateBody as PipesGrantsCreateBody, type environment_PipesGrantsCreateResponse as PipesGrantsCreateResponse, type environment_PipesGrantsDeleteResponse as PipesGrantsDeleteResponse, type environment_PipesListQuery as PipesListQuery, type environment_PipesListResponse as PipesListResponse, type environment_PipesUpdateBody as PipesUpdateBody, type environment_PipesUpdateResponse as PipesUpdateResponse, type environment_PortalLink as PortalLink, type environment_PortalLinkRecord as PortalLinkRecord, type environment_ProvisioningTarget as ProvisioningTarget, type environment_ProvisioningTargetsCreateBody as ProvisioningTargetsCreateBody, type environment_ProvisioningTargetsCreateResponse as ProvisioningTargetsCreateResponse, type environment_ProvisioningTargetsDeleteBody as ProvisioningTargetsDeleteBody, type environment_ProvisioningTargetsDeleteResponse as ProvisioningTargetsDeleteResponse, type environment_ProvisioningTargetsGetQuery as ProvisioningTargetsGetQuery, type environment_ProvisioningTargetsGetResponse as ProvisioningTargetsGetResponse, type environment_ProvisioningTargetsListQuery as ProvisioningTargetsListQuery, type environment_ProvisioningTargetsListResponse as ProvisioningTargetsListResponse, type environment_ProvisioningTargetsStatusSetBody as ProvisioningTargetsStatusSetBody, type environment_ProvisioningTargetsStatusSetResponse as ProvisioningTargetsStatusSetResponse, type environment_RadarDecision as RadarDecision, type environment_RadarDecisionsGetResponse as RadarDecisionsGetResponse, type environment_RadarDecisionsListQuery as RadarDecisionsListQuery, type environment_RadarDecisionsListResponse as RadarDecisionsListResponse, type environment_RadarListEntry as RadarListEntry, type environment_RadarListsAddBody as RadarListsAddBody, type environment_RadarListsAddResponse as RadarListsAddResponse, type environment_RadarListsListQuery as RadarListsListQuery, type environment_RadarListsListResponse as RadarListsListResponse, type environment_RadarListsRemoveResponse as RadarListsRemoveResponse, type environment_RadarModeSetBody as RadarModeSetBody, type environment_RadarModeSetResponse as RadarModeSetResponse, type environment_RadarRule as RadarRule, type environment_RadarRulesCreateBody as RadarRulesCreateBody, type environment_RadarRulesCreateResponse as RadarRulesCreateResponse, type environment_RadarRulesDeleteResponse as RadarRulesDeleteResponse, type environment_RadarRulesGetResponse as RadarRulesGetResponse, type environment_RadarRulesListQuery as RadarRulesListQuery, type environment_RadarRulesListResponse as RadarRulesListResponse, type environment_RadarRulesReorderBody as RadarRulesReorderBody, type environment_RadarRulesReorderResponse as RadarRulesReorderResponse, type environment_RadarRulesUpdateBody as RadarRulesUpdateBody, type environment_RadarRulesUpdateResponse as RadarRulesUpdateResponse, type environment_RadarSettings as RadarSettings, type environment_RadarSettingsGetResponse as RadarSettingsGetResponse, type environment_RadarSettingsUpdateBody as RadarSettingsUpdateBody, type environment_RadarSettingsUpdateResponse as RadarSettingsUpdateResponse, type environment_Role as Role, type environment_RoleAssignment as RoleAssignment, type environment_RoleAssignments as RoleAssignments, type environment_RolesCreateBody as RolesCreateBody, type environment_RolesCreateResponse as RolesCreateResponse, type environment_RolesDefinitionActivateBody as RolesDefinitionActivateBody, type environment_RolesDefinitionActivateResponse as RolesDefinitionActivateResponse, type environment_RolesDeleteResponse as RolesDeleteResponse, type environment_RolesGetQuery as RolesGetQuery, type environment_RolesGetResponse as RolesGetResponse, type environment_RolesListQuery as RolesListQuery, type environment_RolesListResponse as RolesListResponse, type environment_RolesPermissionsGrantResponse as RolesPermissionsGrantResponse, type environment_RolesPermissionsRevokeResponse as RolesPermissionsRevokeResponse, type environment_RolesUpdateBody as RolesUpdateBody, type environment_RolesUpdateResponse as RolesUpdateResponse, type environment_SamlApp as SamlApp, type environment_SamlAppsCreateBody as SamlAppsCreateBody, type environment_SamlAppsCreateResponse as SamlAppsCreateResponse, type environment_SamlAppsDeleteResponse as SamlAppsDeleteResponse, type environment_SamlAppsGetResponse as SamlAppsGetResponse, type environment_SamlAppsListQuery as SamlAppsListQuery, type environment_SamlAppsListResponse as SamlAppsListResponse, type environment_SamlAppsUpdateBody as SamlAppsUpdateBody, type environment_SamlAppsUpdateResponse as SamlAppsUpdateResponse, type environment_SamlMetadata as SamlMetadata, type environment_SelfServiceSignup as SelfServiceSignup, type environment_SignInMethodsInForce as SignInMethodsInForce, type environment_SignInPolicy as SignInPolicy, type environment_SignInRules as SignInRules, type environment_SignalsSourceErasuresListQuery as SignalsSourceErasuresListQuery, type environment_SignalsSourceErasuresListResponse as SignalsSourceErasuresListResponse, type environment_SignalsSourceListQuery as SignalsSourceListQuery, type environment_SignalsSourceListResponse as SignalsSourceListResponse, type environment_SigninPolicyGetQuery as SigninPolicyGetQuery, type environment_SigninPolicyGetResponse as SigninPolicyGetResponse, type environment_SigninPolicyInheritResponse as SigninPolicyInheritResponse, type environment_SigninPolicyUpdateBody as SigninPolicyUpdateBody, type environment_SigninPolicyUpdateResponse as SigninPolicyUpdateResponse, type environment_SigninSelfServiceSignupSetBody as SigninSelfServiceSignupSetBody, type environment_SigninSelfServiceSignupSetResponse as SigninSelfServiceSignupSetResponse, type environment_SigninSmsGetResponse as SigninSmsGetResponse, type environment_SigninSmsUpdateBody as SigninSmsUpdateBody, type environment_SigninSmsUpdateResponse as SigninSmsUpdateResponse, type environment_SigninSocialDeleteBody as SigninSocialDeleteBody, type environment_SigninSocialDeleteResponse as SigninSocialDeleteResponse, type environment_SigninSocialDisableBody as SigninSocialDisableBody, type environment_SigninSocialDisableResponse as SigninSocialDisableResponse, type environment_SigninSocialEnableBody as SigninSocialEnableBody, type environment_SigninSocialEnableResponse as SigninSocialEnableResponse, type environment_SigninSocialInheritBody as SigninSocialInheritBody, type environment_SigninSocialInheritResponse as SigninSocialInheritResponse, type environment_SigninSocialListQuery as SigninSocialListQuery, type environment_SigninSocialListResponse as SigninSocialListResponse, type environment_SigninSocialOfferedQuery as SigninSocialOfferedQuery, type environment_SigninSocialOfferedResponse as SigninSocialOfferedResponse, type environment_SigninSocialSetBody as SigninSocialSetBody, type environment_SigninSocialSetResponse as SigninSocialSetResponse, type environment_SigninSocialUpdateBody as SigninSocialUpdateBody, type environment_SigninSocialUpdateResponse as SigninSocialUpdateResponse, type environment_SmsFactorPolicy as SmsFactorPolicy, type environment_SocialProvider as SocialProvider, type environment_SodPoliciesCreateBody as SodPoliciesCreateBody, type environment_SodPoliciesCreateResponse as SodPoliciesCreateResponse, type environment_SodPoliciesDeleteBody as SodPoliciesDeleteBody, type environment_SodPoliciesDeleteResponse as SodPoliciesDeleteResponse, type environment_SodPoliciesGetQuery as SodPoliciesGetQuery, type environment_SodPoliciesGetResponse as SodPoliciesGetResponse, type environment_SodPoliciesListQuery as SodPoliciesListQuery, type environment_SodPoliciesListResponse as SodPoliciesListResponse, type environment_SodPoliciesStatusSetBody as SodPoliciesStatusSetBody, type environment_SodPoliciesStatusSetResponse as SodPoliciesStatusSetResponse, type environment_SodPolicy as SodPolicy, type environment_SsoCertificates as SsoCertificates, type environment_SsoConnection as SsoConnection, type environment_SsoConnectionsActivateBody as SsoConnectionsActivateBody, type environment_SsoConnectionsActivateResponse as SsoConnectionsActivateResponse, type environment_SsoConnectionsCertificatesActivateBody as SsoConnectionsCertificatesActivateBody, type environment_SsoConnectionsCertificatesActivateResponse as SsoConnectionsCertificatesActivateResponse, type environment_SsoConnectionsCertificatesListQuery as SsoConnectionsCertificatesListQuery, type environment_SsoConnectionsCertificatesListResponse as SsoConnectionsCertificatesListResponse, type environment_SsoConnectionsCertificatesStageBody as SsoConnectionsCertificatesStageBody, type environment_SsoConnectionsCertificatesStageResponse as SsoConnectionsCertificatesStageResponse, type environment_SsoConnectionsCreateBody as SsoConnectionsCreateBody, type environment_SsoConnectionsCreateResponse as SsoConnectionsCreateResponse, type environment_SsoConnectionsDeleteBody as SsoConnectionsDeleteBody, type environment_SsoConnectionsDeleteResponse as SsoConnectionsDeleteResponse, type environment_SsoConnectionsDisableBody as SsoConnectionsDisableBody, type environment_SsoConnectionsDisableResponse as SsoConnectionsDisableResponse, type environment_SsoConnectionsGetQuery as SsoConnectionsGetQuery, type environment_SsoConnectionsGetResponse as SsoConnectionsGetResponse, type environment_SsoConnectionsListQuery as SsoConnectionsListQuery, type environment_SsoConnectionsListResponse as SsoConnectionsListResponse, type environment_SsoConnectionsRequireSsoBody as SsoConnectionsRequireSsoBody, type environment_SsoConnectionsRequireSsoResponse as SsoConnectionsRequireSsoResponse, type environment_SsoConnectionsUpdateBody as SsoConnectionsUpdateBody, type environment_SsoConnectionsUpdateResponse as SsoConnectionsUpdateResponse, type environment_SsoDomain as SsoDomain, type environment_SsoDomainsCaptureBody as SsoDomainsCaptureBody, type environment_SsoDomainsCaptureResponse as SsoDomainsCaptureResponse, type environment_SsoDomainsCreateBody as SsoDomainsCreateBody, type environment_SsoDomainsCreateResponse as SsoDomainsCreateResponse, type environment_SsoDomainsDeleteBody as SsoDomainsDeleteBody, type environment_SsoDomainsDeleteResponse as SsoDomainsDeleteResponse, type environment_SsoDomainsListQuery as SsoDomainsListQuery, type environment_SsoDomainsListResponse as SsoDomainsListResponse, type environment_SsoDomainsVerifyBody as SsoDomainsVerifyBody, type environment_SsoDomainsVerifyResponse as SsoDomainsVerifyResponse, type environment_SsoSamlMetadataImportBody as SsoSamlMetadataImportBody, type environment_SsoSamlMetadataImportResponse as SsoSamlMetadataImportResponse, type environment_SupportSession as SupportSession, type environment_SupportSessionsEndResponse as SupportSessionsEndResponse, type environment_SupportSessionsStartBody as SupportSessionsStartBody, type environment_SupportSessionsStartResponse as SupportSessionsStartResponse, type environment_ThemeMode as ThemeMode, type environment_TokenVaultGrantsCreateBody as TokenVaultGrantsCreateBody, type environment_TokenVaultGrantsCreateResponse as TokenVaultGrantsCreateResponse, type environment_TokenVaultGrantsDeleteBody as TokenVaultGrantsDeleteBody, type environment_TokenVaultGrantsDeleteResponse as TokenVaultGrantsDeleteResponse, type environment_TokenVaultSecret as TokenVaultSecret, type environment_TokenVaultSecretsCreateBody as TokenVaultSecretsCreateBody, type environment_TokenVaultSecretsCreateResponse as TokenVaultSecretsCreateResponse, type environment_TokenVaultSecretsGetQuery as TokenVaultSecretsGetQuery, type environment_TokenVaultSecretsGetResponse as TokenVaultSecretsGetResponse, type environment_TokenVaultSecretsListQuery as TokenVaultSecretsListQuery, type environment_TokenVaultSecretsListResponse as TokenVaultSecretsListResponse, type environment_TokenVaultSecretsRevokeBody as TokenVaultSecretsRevokeBody, type environment_TokenVaultSecretsRevokeResponse as TokenVaultSecretsRevokeResponse, type environment_TokenVaultSecretsRotateBody as TokenVaultSecretsRotateBody, type environment_TokenVaultSecretsRotateResponse as TokenVaultSecretsRotateResponse, type environment_User as User, type environment_UserPropertyNamespacesConfigureBody as UserPropertyNamespacesConfigureBody, type environment_UserPropertyNamespacesConfigureResponse as UserPropertyNamespacesConfigureResponse, type environment_UserPropertyNamespacesShowResponse as UserPropertyNamespacesShowResponse, type environment_UserPropertySnapshot as UserPropertySnapshot, type environment_UserSession as UserSession, type environment_UsersCreateBody as UsersCreateBody, type environment_UsersCreateResponse as UsersCreateResponse, type environment_UsersDeactivateResponse as UsersDeactivateResponse, type environment_UsersEnvironmentRolesGetQuery as UsersEnvironmentRolesGetQuery, type environment_UsersEnvironmentRolesGetResponse as UsersEnvironmentRolesGetResponse, type environment_UsersEnvironmentRolesGrantQuery as UsersEnvironmentRolesGrantQuery, type environment_UsersEnvironmentRolesGrantResponse as UsersEnvironmentRolesGrantResponse, type environment_UsersEnvironmentRolesListResponse as UsersEnvironmentRolesListResponse, type environment_UsersEnvironmentRolesRevokeQuery as UsersEnvironmentRolesRevokeQuery, type environment_UsersEnvironmentRolesRevokeResponse as UsersEnvironmentRolesRevokeResponse, type environment_UsersEraseResponse as UsersEraseResponse, type environment_UsersGetResponse as UsersGetResponse, type environment_UsersListQuery as UsersListQuery, type environment_UsersListResponse as UsersListResponse, type environment_UsersMfaResetResponse as UsersMfaResetResponse, type environment_UsersMfaSmsRemoveResponse as UsersMfaSmsRemoveResponse, type environment_UsersPasswordResetSendResponse as UsersPasswordResetSendResponse, type environment_UsersPasswordSetBody as UsersPasswordSetBody, type environment_UsersPasswordSetResponse as UsersPasswordSetResponse, type environment_UsersReactivateResponse as UsersReactivateResponse, type environment_UsersSessionsListResponse as UsersSessionsListResponse, type environment_UsersSessionsRevokeAllResponse as UsersSessionsRevokeAllResponse, type environment_UsersSessionsRevokeResponse as UsersSessionsRevokeResponse, type environment_UsersUpdateBody as UsersUpdateBody, type environment_UsersUpdateResponse as UsersUpdateResponse, type environment_UsersVerificationSendResponse as UsersVerificationSendResponse, type environment_UsersVerifyResponse as UsersVerifyResponse, type environment_VaultSecret as VaultSecret, type environment_Webhook as Webhook, type environment_WebhooksCreateBody as WebhooksCreateBody, type environment_WebhooksCreateResponse as WebhooksCreateResponse, type environment_WebhooksDeleteResponse as WebhooksDeleteResponse, type environment_WebhooksGetResponse as WebhooksGetResponse, type environment_WebhooksListQuery as WebhooksListQuery, type environment_WebhooksListResponse as WebhooksListResponse, type environment_WebhooksPauseResponse as WebhooksPauseResponse, type environment_WebhooksResumeResponse as WebhooksResumeResponse, type environment_WebhooksSecretRotateResponse as WebhooksSecretRotateResponse, type environment_WebhooksSignatureSchemeChangeBody as WebhooksSignatureSchemeChangeBody, type environment_WebhooksSignatureSchemeChangeResponse as WebhooksSignatureSchemeChangeResponse, type environment_WebhooksUpdateBody as WebhooksUpdateBody, type environment_WebhooksUpdateResponse as WebhooksUpdateResponse, type environment_WhitelabelBranding as WhitelabelBranding, environment_environmentOperations as environmentOperations };
 }
 
 interface VerificationResend {
@@ -11252,16 +11802,15 @@ interface Organization {
     id?: string;
     name?: string;
     status?: 'active' | 'suspended';
-    /** The workspace's projects with each one's plan/allowance. Present only for billing-readers (plans are per project). */
-    projects?: Project[];
 }
 interface Project {
     id?: string;
     name?: string;
     slug?: string;
     status?: 'active' | 'suspended';
-    /** This project's plan environment allowance. */
+    /** Local per-project ceiling; creating environments also requires sufficient current Billing entitlement. */
     environment_limit?: number;
+    /** Number of environments visible to the caller. */
     environments_used?: number;
 }
 interface Environment {
@@ -11278,11 +11827,16 @@ interface Environment {
 }
 interface Member {
     id?: string;
-    email?: string;
+    email?: string | null;
     name?: string | null;
+    /** Shared membership tier; only current owner implies app authority. */
     role?: 'owner' | 'admin' | 'developer' | 'member' | 'viewer';
-    status?: 'active' | 'invited';
+    roles?: Array<'admin' | 'developer' | 'billing' | 'viewer'>;
+    roles_version?: string;
+    status?: 'active' | 'invited' | 'suspended';
     all_environments?: boolean;
+    environment_ids?: string[];
+    environment_access_version?: string;
 }
 /** An environment, and — when the request asked for one — its first management key. */
 type CreatedEnvironment = Environment & {
@@ -11306,7 +11860,7 @@ interface WorkspaceKey {
     prefix?: string;
     role: 'owner' | 'admin' | 'developer' | 'member' | 'viewer';
     /** Null when the role alone bounds the key. */
-    scopes?: Array<'workspace:read' | 'projects:write' | 'environments:write' | 'team:read' | 'team:write' | 'keys:write' | 'settings:write'> | null;
+    scopes?: Array<'workspace:read' | 'projects:write' | 'environments:write' | 'team:read' | 'team:write' | 'keys:write' | 'settings:write' | 'billing:write'> | null;
     /** The key that minted it, if a key did. Revoking the parent revokes it. */
     parent_key_id?: string | null;
     /** `organization_member` or `workspace_key`; null for a key minted before this was recorded. */
@@ -11320,12 +11874,20 @@ interface WorkspaceKey {
 interface TeamInvitation {
     id: string;
     email: string;
-    role: 'admin' | 'developer' | 'member' | 'viewer';
+    role?: 'admin' | 'developer' | 'member' | 'viewer';
+    roles: Array<'admin' | 'developer' | 'billing' | 'viewer'>;
+    app_role_label?: string | null;
     /** The person, or the API key, that sent it — by name. */
     invited_by?: string | null;
     invited_at?: string | null;
     expires_at: string;
 }
+interface TeamInvitationReceipt {
+    id: string;
+    email: string;
+    roles: Array<'admin' | 'developer' | 'billing' | 'viewer'>;
+    status: 'invited';
+}
 interface CustomDomain {
     /** The verified domain serving the environment. */
     domain: string | null;
@@ -11369,6 +11931,23 @@ type ActionApprovalsGetResponse$2 = {
         status: 'pending' | 'approved' | 'denied' | 'expired' | 'consumed';
     };
 };
+/** Request body of `billing.account.update`. */
+interface BillingAccountUpdateBody {
+    billing_email: string;
+    invoice_name: string;
+    address_line1: string;
+    address_line2?: string | null;
+    postal_code: string;
+    city: string;
+    country: 'AD' | 'AE' | 'AF' | 'AG' | 'AI' | 'AL' | 'AM' | 'AO' | 'AQ' | 'AR' | 'AS' | 'AT' | 'AU' | 'AW' | 'AX' | 'AZ' | 'BA' | 'BB' | 'BD' | 'BE' | 'BF' | 'BG' | 'BH' | 'BI' | 'BJ' | 'BL' | 'BM' | 'BN' | 'BO' | 'BQ' | 'BR' | 'BS' | 'BT' | 'BV' | 'BW' | 'BY' | 'BZ' | 'CA' | 'CC' | 'CD' | 'CF' | 'CG' | 'CH' | 'CI' | 'CK' | 'CL' | 'CM' | 'CN' | 'CO' | 'CR' | 'CU' | 'CV' | 'CW' | 'CX' | 'CY' | 'CZ' | 'DE' | 'DJ' | 'DK' | 'DM' | 'DO' | 'DZ' | 'EC' | 'EE' | 'EG' | 'EH' | 'ER' | 'ES' | 'ET' | 'FI' | 'FJ' | 'FK' | 'FM' | 'FO' | 'FR' | 'GA' | 'GB' | 'GD' | 'GE' | 'GF' | 'GG' | 'GH' | 'GI' | 'GL' | 'GM' | 'GN' | 'GP' | 'GQ' | 'GR' | 'GS' | 'GT' | 'GU' | 'GW' | 'GY' | 'HK' | 'HM' | 'HN' | 'HR' | 'HT' | 'HU' | 'ID' | 'IE' | 'IL' | 'IM' | 'IN' | 'IO' | 'IQ' | 'IR' | 'IS' | 'IT' | 'JE' | 'JM' | 'JO' | 'JP' | 'KE' | 'KG' | 'KH' | 'KI' | 'KM' | 'KN' | 'KP' | 'KR' | 'KW' | 'KY' | 'KZ' | 'LA' | 'LB' | 'LC' | 'LI' | 'LK' | 'LR' | 'LS' | 'LT' | 'LU' | 'LV' | 'LY' | 'MA' | 'MC' | 'MD' | 'ME' | 'MF' | 'MG' | 'MH' | 'MK' | 'ML' | 'MM' | 'MN' | 'MO' | 'MP' | 'MQ' | 'MR' | 'MS' | 'MT' | 'MU' | 'MV' | 'MW' | 'MX' | 'MY' | 'MZ' | 'NA' | 'NC' | 'NE' | 'NF' | 'NG' | 'NI' | 'NL' | 'NO' | 'NP' | 'NR' | 'NU' | 'NZ' | 'OM' | 'PA' | 'PE' | 'PF' | 'PG' | 'PH' | 'PK' | 'PL' | 'PM' | 'PN' | 'PR' | 'PS' | 'PT' | 'PW' | 'PY' | 'QA' | 'RE' | 'RO' | 'RS' | 'RU' | 'RW' | 'SA' | 'SB' | 'SC' | 'SD' | 'SE' | 'SG' | 'SH' | 'SI' | 'SJ' | 'SK' | 'SL' | 'SM' | 'SN' | 'SO' | 'SR' | 'SS' | 'ST' | 'SV' | 'SX' | 'SY' | 'SZ' | 'TC' | 'TD' | 'TF' | 'TG' | 'TH' | 'TJ' | 'TK' | 'TL' | 'TM' | 'TN' | 'TO' | 'TR' | 'TT' | 'TV' | 'TW' | 'TZ' | 'UA' | 'UG' | 'UM' | 'US' | 'UY' | 'UZ' | 'VA' | 'VC' | 'VE' | 'VG' | 'VI' | 'VN' | 'VU' | 'WF' | 'WS' | 'YE' | 'YT' | 'ZA' | 'ZM' | 'ZW';
+    tax_id?: string | null;
+}
+/** Response body of `billing.account.update`. */
+type BillingAccountUpdateResponse = void;
+/** Response body of `billing.payment_method.default`. */
+type BillingPaymentMethodDefaultResponse = void;
+/** Response body of `billing.payment_method.remove`. */
+type BillingPaymentMethodRemoveResponse = void;
 /** Request body of `environments.create`. */
 interface EnvironmentsCreateBody$1 {
     name: string;
@@ -11431,7 +12010,7 @@ interface KeysWorkspaceCreateBody {
     name: string;
     role: 'admin' | 'developer' | 'member' | 'viewer';
     /** Narrow the key below its role. Left out, the role alone bounds it — or, minted by a key with scopes, that key's scopes. */
-    scopes?: Array<'workspace:read' | 'projects:write' | 'environments:write' | 'team:read' | 'team:write' | 'keys:write' | 'settings:write'> | null;
+    scopes?: Array<'workspace:read' | 'projects:write' | 'environments:write' | 'team:read' | 'team:write' | 'keys:write' | 'billing:write' | 'settings:write'> | null;
     /** When it stops working. Left out, it does not expire — or, minted by a key that does, expires with it. */
     expires_at?: string | null;
 }
@@ -11456,7 +12035,7 @@ type KeysWorkspaceRevokeResponse = void;
 /** Request body of `projects.create`. */
 interface ProjectsCreateBody {
     name: string;
-    /** This project's plan environment allowance (default 2). */
+    /** Optional lower per-project environment allowance. Defaults to the account's current Billing entitlement and cannot exceed it. */
     environment_limit?: number;
 }
 /** Response body of `projects.create`. */
@@ -11489,6 +12068,7 @@ type ProjectsVerificationResendResponse = {
 };
 /** Request body of `team.environment_access`. */
 interface TeamEnvironmentAccessBody {
+    environment_access_version: string;
     /** True: every environment, including ones created later. */
     all_environments: boolean;
     /** With `all_environments` false: the environments they reach. */
@@ -11504,7 +12084,7 @@ type TeamInvitationsListResponse = {
 };
 /** Response body of `team.invitations.resend`. */
 type TeamInvitationsResendResponse = {
-    data?: Member;
+    data?: TeamInvitationReceipt;
 };
 /** Response body of `team.invitations.revoke`. */
 type TeamInvitationsRevokeResponse = void;
@@ -11512,11 +12092,11 @@ type TeamInvitationsRevokeResponse = void;
 interface TeamInviteBody {
     email: string;
     name?: string | null;
-    role: 'admin' | 'developer' | 'member' | 'viewer';
+    roles: Array<'admin' | 'developer' | 'billing' | 'viewer'>;
 }
 /** Response body of `team.invite`. */
 type TeamInviteResponse = {
-    data?: Member;
+    data?: TeamInvitationReceipt;
 };
 /** Query parameters of `team.list`. */
 interface TeamListQuery {
@@ -11528,11 +12108,16 @@ type TeamListResponse = {
     data?: Member[];
     meta?: PageMeta;
 };
+/** Request body of `team.remove`. */
+interface TeamRemoveBody {
+    roles_version: string;
+}
 /** Response body of `team.remove`. */
 type TeamRemoveResponse = void;
 /** Request body of `team.role`. */
 interface TeamRoleBody {
-    role: 'admin' | 'developer' | 'member' | 'viewer';
+    roles: Array<'viewer' | 'developer' | 'billing' | 'admin'>;
+    roles_version: string;
 }
 /** Response body of `team.role`. */
 type TeamRoleResponse = {
@@ -11566,6 +12151,42 @@ declare const workspaceOperations: {
         readonly body: false;
         readonly pagination: null;
     };
+    readonly 'billing.account.update': {
+        readonly action: "billing.account.update";
+        readonly operationId: "billing_account_update";
+        readonly method: "PATCH";
+        readonly path: "/workspace/billing/account";
+        readonly pathParams: readonly [];
+        readonly scope: "billing:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
+    readonly 'billing.payment_method.default': {
+        readonly action: "billing.payment_method.default";
+        readonly operationId: "billing_payment_method_default";
+        readonly method: "PATCH";
+        readonly path: "/workspace/billing/payment-methods/{id}/default";
+        readonly pathParams: readonly ["id"];
+        readonly scope: "billing:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
+    readonly 'billing.payment_method.remove': {
+        readonly action: "billing.payment_method.remove";
+        readonly operationId: "billing_payment_method_remove";
+        readonly method: "DELETE";
+        readonly path: "/workspace/billing/payment-methods/{id}";
+        readonly pathParams: readonly ["id"];
+        readonly scope: "billing:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'environments.create': {
         readonly action: "environments.create";
         readonly operationId: "environments_create";
@@ -11839,7 +12460,7 @@ declare const workspaceOperations: {
         readonly scope: "team:write";
         readonly danger: "destructive";
         readonly approval: true;
-        readonly body: false;
+        readonly body: true;
         readonly pagination: null;
     };
     readonly 'team.role': {
@@ -11920,12 +12541,51 @@ declare class WorkspaceClient {
          */
         get: <O extends CallOptions = CallOptions>(id: string, options?: O) => Promise<Outcome<ActionApprovalsGetResponse$2, O>>;
     };
+    readonly billing: {
+        account: {
+            /**
+             * Update the workspace billing contact and invoice address.
+             *
+             * Requires scope `billing:write` and a role that may `manage-billing`. Danger: write.
+             *
+             * `PATCH /workspace/billing/account` · action `billing.account.update`
+             * @scope `billing:write`
+             * @danger write
+             * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+             */
+            update: <O extends CallOptions = CallOptions>(body: BillingAccountUpdateBody, options?: O) => Promise<Outcome<BillingAccountUpdateResponse, O>>;
+        };
+        paymentMethod: {
+            /**
+             * Choose the workspace default payment card.
+             *
+             * Requires scope `billing:write` and a role that may `manage-billing`. Danger: write.
+             *
+             * `PATCH /workspace/billing/payment-methods/{id}/default` · action `billing.payment_method.default`
+             * @scope `billing:write`
+             * @danger write
+             * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+             */
+            default: <O extends CallOptions = CallOptions>(id: string, options?: O) => Promise<Outcome<BillingPaymentMethodDefaultResponse, O>>;
+            /**
+             * Remove an unneeded payment card from this workspace.
+             *
+             * Requires scope `billing:write` and a role that may `manage-billing`. Danger: write.
+             *
+             * `DELETE /workspace/billing/payment-methods/{id}` · action `billing.payment_method.remove`
+             * @scope `billing:write`
+             * @danger write
+             * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+             */
+            remove: <O extends CallOptions = CallOptions>(id: string, options?: O) => Promise<Outcome<BillingPaymentMethodRemoveResponse, O>>;
+        };
+    };
     readonly environments: {
         /**
          * Create an environment
          *
          * Requires scope `environments:write` and the `manage-environments` capability
-         * (owner/admin/developer). Danger: critical — with `initial_key` it mints a credential.
+         * (`id:write` for human members, or current ownership). Danger: critical — with `initial_key` it mints a credential.
          *
          * With `initial_key`, the environment's first management key is minted in the same
          * call and returned once as `initial_key.token` — enough for an agent holding one
@@ -11941,7 +12601,7 @@ declare class WorkspaceClient {
         /**
          * List environments
          *
-         * Requires scope `workspace:read` (any role).
+         * Requires scope `workspace:read` and permission to read environments. Returns only currently permitted environments; Billing-only members cannot list them.
          *
          * `GET /workspace/environments` · action `environments.list`
          * @scope `workspace:read`
@@ -12054,7 +12714,7 @@ declare class WorkspaceClient {
         /**
          * Create a project
          *
-         * Stand up another independently-billed IdP product. Requires scope `projects:write` and the `manage-environments` capability (owner/admin/developer).
+         * Stand up another independently-billed IdP product. Requires scope `projects:write` and the `manage-environments` capability (`id:write` for human members, or current ownership).
          *
          * `POST /workspace/projects` · action `projects.create`
          * @scope `projects:write`
@@ -12065,7 +12725,7 @@ declare class WorkspaceClient {
         /**
          * List projects
          *
-         * Requires scope `workspace:read` (any role). The workspace's projects (IdP products). Each carries its own plan and environment allowance.
+         * Requires scope `workspace:read` and permission to read environments. Human callers see only projects containing environments they may access; environment counts include only those environments. Billing-only members cannot list projects.
          *
          * `GET /workspace/projects` · action `projects.list`
          * @scope `workspace:read`
@@ -12135,11 +12795,10 @@ declare class WorkspaceClient {
         /**
          * Invite a member
          *
-         * Requires scope `team:write` and the `manage-members` capability (owner/admin). Invites the address onto the
-         * workspace's team — the same invitation the console's Team page sends: a mail naming
-         * this key as the inviter and the role, with a signed link on which the invitee sets a
-         * password and is signed in. Owner is never invited; ownership is transferred. An
-         * earlier pending invitation for the same address is superseded. List, re-send and
+         * Requires scope `team:write` and the `manage-members` capability (`members:manage` for human members, or current ownership). Invites the address onto the
+         * ID product team with the selected app roles. Existing shared membership and other
+         * apps are preserved. Owner is never invited; ownership is transferred separately. An
+         * earlier pending invitation for the same address and this app is superseded. List, re-send and
          * withdraw it under `/workspace/invitations`.
          *
          * `POST /workspace/members` · action `team.invite`
@@ -12151,7 +12810,7 @@ declare class WorkspaceClient {
         /**
          * List members
          *
-         * Requires scope `team:read` and the `read-members` capability (owner/admin/viewer). The roster is PII — a developer key is refused.
+         * Requires scope `team:read` and the `read-members` capability (`members:read` for human members, or current ownership). The roster contains personal information; a machine key also needs an explicit role allowing member reads.
          *
          * `GET /workspace/members` · action `team.list`
          * @scope `team:read`
@@ -12162,7 +12821,7 @@ declare class WorkspaceClient {
         /** Every item of `team.list`, fetching pages as the iteration reaches them. */
         listAll: (query?: Omit<TeamListQuery, "page">, options?: Omit<CallOptions, "approval">) => AsyncGenerator<Member, void, undefined>;
         /**
-         * Remove a member from the workspace's team. The owner is never removed; transfer ownership first.
+         * Remove native ID app roles while preserving shared organization membership and other apps. The current owner cannot be removed.
          *
          * Requires scope `team:write` and a role that may `manage-members`. Danger: destructive.
          *
@@ -12171,9 +12830,9 @@ declare class WorkspaceClient {
          * @danger destructive
          * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
          */
-        remove: <O extends CallOptions = CallOptions>(id: string, options?: O) => Promise<Outcome<TeamRemoveResponse, O>>;
+        remove: <O extends CallOptions = CallOptions>(id: string, body: TeamRemoveBody, options?: O) => Promise<Outcome<TeamRemoveResponse, O>>;
         /**
-         * Change a team member's role (admin, developer, member or viewer). The owner's role changes only by transferring ownership.
+         * Replace native ID app roles atomically. Shared organization membership is preserved.
          *
          * Requires scope `team:write` and a role that may `manage-members`. Danger: write.
          *
@@ -12184,7 +12843,7 @@ declare class WorkspaceClient {
          */
         role: <O extends CallOptions = CallOptions>(id: string, body: TeamRoleBody, options?: O) => Promise<Outcome<TeamRoleResponse, O>>;
         /**
-         * Make another member the workspace's owner; the current owner stays on as an admin. Only the owner, signed in, may do this.
+         * Transfer shared organization ownership. Existing app roles are preserved; the previous owner may lose native ID access. Only the current owner, signed in, may do this.
          *
          * Requires scope `team:write` and a role that may `manage-members`. Danger: critical.
          *
@@ -12236,7 +12895,7 @@ declare class WorkspaceClient {
         /**
          * Get the workspace
          *
-         * Requires scope `workspace:read` (any role). Returns the workspace's identity. The `projects` block (each project's plan/allowance) is included only for keys whose role can read billing (owner/admin/viewer — not developer).
+         * Requires scope `workspace:read` and current workspace access. Returns only the workspace identity and status, including for members with only the Billing app role.
          *
          * `GET /workspace` · action `workspace.get`
          * @scope `workspace:read`
@@ -12248,7 +12907,7 @@ declare class WorkspaceClient {
             /**
              * Rename the workspace.
              *
-             * Requires scope `settings:write` and a role that may `manage-members`. Danger: write.
+             * Requires scope `settings:write` and a role that may `own-organization` and `manage-members`. Danger: write.
              *
              * `PATCH /workspace` · action `workspace.settings.update`
              * @scope `settings:write`
@@ -12260,6 +12919,10 @@ declare class WorkspaceClient {
     };
 }
 
+type workspace_BillingAccountUpdateBody = BillingAccountUpdateBody;
+type workspace_BillingAccountUpdateResponse = BillingAccountUpdateResponse;
+type workspace_BillingPaymentMethodDefaultResponse = BillingPaymentMethodDefaultResponse;
+type workspace_BillingPaymentMethodRemoveResponse = BillingPaymentMethodRemoveResponse;
 type workspace_CreatedEnvironment = CreatedEnvironment;
 type workspace_CustomDomain = CustomDomain;
 type workspace_Environment = Environment;
@@ -12293,6 +12956,7 @@ type workspace_ProjectsVerificationResendResponse = ProjectsVerificationResendRe
 type workspace_TeamEnvironmentAccessBody = TeamEnvironmentAccessBody;
 type workspace_TeamEnvironmentAccessResponse = TeamEnvironmentAccessResponse;
 type workspace_TeamInvitation = TeamInvitation;
+type workspace_TeamInvitationReceipt = TeamInvitationReceipt;
 type workspace_TeamInvitationsListResponse = TeamInvitationsListResponse;
 type workspace_TeamInvitationsResendResponse = TeamInvitationsResendResponse;
 type workspace_TeamInvitationsRevokeResponse = TeamInvitationsRevokeResponse;
@@ -12300,6 +12964,7 @@ type workspace_TeamInviteBody = TeamInviteBody;
 type workspace_TeamInviteResponse = TeamInviteResponse;
 type workspace_TeamListQuery = TeamListQuery;
 type workspace_TeamListResponse = TeamListResponse;
+type workspace_TeamRemoveBody = TeamRemoveBody;
 type workspace_TeamRemoveResponse = TeamRemoveResponse;
 type workspace_TeamRoleBody = TeamRoleBody;
 type workspace_TeamRoleResponse = TeamRoleResponse;
@@ -12314,7 +12979,7 @@ type workspace_WorkspaceSettingsUpdateBody = WorkspaceSettingsUpdateBody;
 type workspace_WorkspaceSettingsUpdateResponse = WorkspaceSettingsUpdateResponse;
 declare const workspace_workspaceOperations: typeof workspaceOperations;
 declare namespace workspace {
-  export { type ActionApprovalsGetResponse$2 as ActionApprovalsGetResponse, type workspace_CreatedEnvironment as CreatedEnvironment, type workspace_CustomDomain as CustomDomain, type workspace_Environment as Environment, type workspace_EnvironmentKey as EnvironmentKey, type EnvironmentsCreateBody$1 as EnvironmentsCreateBody, type EnvironmentsCreateResponse$1 as EnvironmentsCreateResponse, type workspace_EnvironmentsDomainRemoveResponse as EnvironmentsDomainRemoveResponse, type workspace_EnvironmentsDomainRequestBody as EnvironmentsDomainRequestBody, type workspace_EnvironmentsDomainRequestResponse as EnvironmentsDomainRequestResponse, type workspace_EnvironmentsDomainVerifyResponse as EnvironmentsDomainVerifyResponse, type workspace_EnvironmentsListQuery as EnvironmentsListQuery, type workspace_EnvironmentsListResponse as EnvironmentsListResponse, type ErrorSchema$2 as ErrorSchema, type workspace_KeysEnvironmentCreateBody as KeysEnvironmentCreateBody, type workspace_KeysEnvironmentCreateResponse as KeysEnvironmentCreateResponse, type workspace_KeysEnvironmentRevokeResponse as KeysEnvironmentRevokeResponse, type workspace_KeysWorkspaceCreateBody as KeysWorkspaceCreateBody, type workspace_KeysWorkspaceCreateResponse as KeysWorkspaceCreateResponse, type workspace_KeysWorkspaceListQuery as KeysWorkspaceListQuery, type workspace_KeysWorkspaceListResponse as KeysWorkspaceListResponse, type workspace_KeysWorkspaceRevokeResponse as KeysWorkspaceRevokeResponse, type workspace_Member as Member, type workspace_Organization as Organization, type workspace_PageMeta as PageMeta, type workspace_Project as Project, type workspace_ProjectsCreateBody as ProjectsCreateBody, type workspace_ProjectsCreateResponse as ProjectsCreateResponse, type workspace_ProjectsListResponse as ProjectsListResponse, type workspace_ProjectsReactivateResponse as ProjectsReactivateResponse, type workspace_ProjectsRenameBody as ProjectsRenameBody, type workspace_ProjectsRenameResponse as ProjectsRenameResponse, type workspace_ProjectsSuspendResponse as ProjectsSuspendResponse, type workspace_ProjectsVerificationResendResponse as ProjectsVerificationResendResponse, type workspace_TeamEnvironmentAccessBody as TeamEnvironmentAccessBody, type workspace_TeamEnvironmentAccessResponse as TeamEnvironmentAccessResponse, type workspace_TeamInvitation as TeamInvitation, type workspace_TeamInvitationsListResponse as TeamInvitationsListResponse, type workspace_TeamInvitationsResendResponse as TeamInvitationsResendResponse, type workspace_TeamInvitationsRevokeResponse as TeamInvitationsRevokeResponse, type workspace_TeamInviteBody as TeamInviteBody, type workspace_TeamInviteResponse as TeamInviteResponse, type workspace_TeamListQuery as TeamListQuery, type workspace_TeamListResponse as TeamListResponse, type workspace_TeamRemoveResponse as TeamRemoveResponse, type workspace_TeamRoleBody as TeamRoleBody, type workspace_TeamRoleResponse as TeamRoleResponse, type workspace_TeamTransferOwnershipResponse as TeamTransferOwnershipResponse, type workspace_VerificationResend as VerificationResend, workspace_WorkspaceClient as WorkspaceClient, type workspace_WorkspaceClientOptions as WorkspaceClientOptions, type workspace_WorkspaceGetResponse as WorkspaceGetResponse, type workspace_WorkspaceKey as WorkspaceKey, type workspace_WorkspaceSettingsUpdateBody as WorkspaceSettingsUpdateBody, type workspace_WorkspaceSettingsUpdateResponse as WorkspaceSettingsUpdateResponse, workspace_workspaceOperations as workspaceOperations };
+  export { type ActionApprovalsGetResponse$2 as ActionApprovalsGetResponse, type workspace_BillingAccountUpdateBody as BillingAccountUpdateBody, type workspace_BillingAccountUpdateResponse as BillingAccountUpdateResponse, type workspace_BillingPaymentMethodDefaultResponse as BillingPaymentMethodDefaultResponse, type workspace_BillingPaymentMethodRemoveResponse as BillingPaymentMethodRemoveResponse, type workspace_CreatedEnvironment as CreatedEnvironment, type workspace_CustomDomain as CustomDomain, type workspace_Environment as Environment, type workspace_EnvironmentKey as EnvironmentKey, type EnvironmentsCreateBody$1 as EnvironmentsCreateBody, type EnvironmentsCreateResponse$1 as EnvironmentsCreateResponse, type workspace_EnvironmentsDomainRemoveResponse as EnvironmentsDomainRemoveResponse, type workspace_EnvironmentsDomainRequestBody as EnvironmentsDomainRequestBody, type workspace_EnvironmentsDomainRequestResponse as EnvironmentsDomainRequestResponse, type workspace_EnvironmentsDomainVerifyResponse as EnvironmentsDomainVerifyResponse, type workspace_EnvironmentsListQuery as EnvironmentsListQuery, type workspace_EnvironmentsListResponse as EnvironmentsListResponse, type ErrorSchema$2 as ErrorSchema, type workspace_KeysEnvironmentCreateBody as KeysEnvironmentCreateBody, type workspace_KeysEnvironmentCreateResponse as KeysEnvironmentCreateResponse, type workspace_KeysEnvironmentRevokeResponse as KeysEnvironmentRevokeResponse, type workspace_KeysWorkspaceCreateBody as KeysWorkspaceCreateBody, type workspace_KeysWorkspaceCreateResponse as KeysWorkspaceCreateResponse, type workspace_KeysWorkspaceListQuery as KeysWorkspaceListQuery, type workspace_KeysWorkspaceListResponse as KeysWorkspaceListResponse, type workspace_KeysWorkspaceRevokeResponse as KeysWorkspaceRevokeResponse, type workspace_Member as Member, type workspace_Organization as Organization, type workspace_PageMeta as PageMeta, type workspace_Project as Project, type workspace_ProjectsCreateBody as ProjectsCreateBody, type workspace_ProjectsCreateResponse as ProjectsCreateResponse, type workspace_ProjectsListResponse as ProjectsListResponse, type workspace_ProjectsReactivateResponse as ProjectsReactivateResponse, type workspace_ProjectsRenameBody as ProjectsRenameBody, type workspace_ProjectsRenameResponse as ProjectsRenameResponse, type workspace_ProjectsSuspendResponse as ProjectsSuspendResponse, type workspace_ProjectsVerificationResendResponse as ProjectsVerificationResendResponse, type workspace_TeamEnvironmentAccessBody as TeamEnvironmentAccessBody, type workspace_TeamEnvironmentAccessResponse as TeamEnvironmentAccessResponse, type workspace_TeamInvitation as TeamInvitation, type workspace_TeamInvitationReceipt as TeamInvitationReceipt, type workspace_TeamInvitationsListResponse as TeamInvitationsListResponse, type workspace_TeamInvitationsResendResponse as TeamInvitationsResendResponse, type workspace_TeamInvitationsRevokeResponse as TeamInvitationsRevokeResponse, type workspace_TeamInviteBody as TeamInviteBody, type workspace_TeamInviteResponse as TeamInviteResponse, type workspace_TeamListQuery as TeamListQuery, type workspace_TeamListResponse as TeamListResponse, type workspace_TeamRemoveBody as TeamRemoveBody, type workspace_TeamRemoveResponse as TeamRemoveResponse, type workspace_TeamRoleBody as TeamRoleBody, type workspace_TeamRoleResponse as TeamRoleResponse, type workspace_TeamTransferOwnershipResponse as TeamTransferOwnershipResponse, type workspace_VerificationResend as VerificationResend, workspace_WorkspaceClient as WorkspaceClient, type workspace_WorkspaceClientOptions as WorkspaceClientOptions, type workspace_WorkspaceGetResponse as WorkspaceGetResponse, type workspace_WorkspaceKey as WorkspaceKey, type workspace_WorkspaceSettingsUpdateBody as WorkspaceSettingsUpdateBody, type workspace_WorkspaceSettingsUpdateResponse as WorkspaceSettingsUpdateResponse, workspace_workspaceOperations as workspaceOperations };
 }
 
 interface ProvisionedWorkspace {
@@ -12775,6 +13440,14 @@ interface Profile {
     name: string | null;
     email: string | null;
 }
+interface Passkey {
+    id: string;
+    /** What you call it — one to 64 characters. */
+    name: string;
+    created_at?: string | null;
+    /** When it last signed you in; null if it never has since this was recorded. */
+    last_used_at?: string | null;
+}
 interface SessionsRevoked {
     /** How many sessions were signed out. */
     revoked: number;
@@ -12828,14 +13501,47 @@ type ApiKeysCreateResponse = {
 type ApiKeysRevokeResponse = void;
 /** Response body of `applications.revoke`. */
 type ApplicationsRevokeResponse = void;
+/** Query parameters of `apps.list`. */
+interface AppsListQuery {
+    organization_id?: string | null;
+}
+/** Response body of `apps.list`. */
+type AppsListResponse = {
+    data: Array<{
+        key: string;
+        name: string;
+        description: string | null;
+        launch_url: string;
+        icon_url: string | null;
+        position: number;
+        version: number;
+    }>;
+    meta: {
+        revision: string;
+        refresh_after: number;
+    };
+};
 /** Response body of `devices.remove`. */
 type DevicesRemoveResponse = void;
+/** Response body of `email.confirmation.send`. */
+type EmailConfirmationSendResponse = {
+    data: Record<string, unknown>;
+};
 /** Response body of `mfa.sms.remove`. */
 type MfaSmsRemoveResponse = void;
 /** Response body of `organizations.leave`. */
 type OrganizationsLeaveResponse = void;
 /** Response body of `passkeys.remove`. */
 type PasskeysRemoveResponse = void;
+/** Request body of `passkeys.rename`. */
+interface PasskeysRenameBody {
+    /** What to call the passkey: one to 64 characters, no line breaks. */
+    name: string;
+}
+/** Response body of `passkeys.rename`. */
+type PasskeysRenameResponse = {
+    data: Passkey;
+};
 /** Response body of `pipes.disconnect`. */
 type PipesDisconnectResponse = void;
 /** Request body of `profile.update`. */
@@ -12853,8 +13559,44 @@ type SessionsRevokeResponse = void;
 type SessionsRevokeOthersResponse = {
     data: SessionsRevoked;
 };
+/** Response body of `sign_in_methods.disconnect`. */
+type SignInMethodsDisconnectResponse = void;
 /** Response body of `social.unlink`. */
 type SocialUnlinkResponse = void;
+/** Response body of `totp.remove`. */
+type TotpRemoveResponse = void;
+/** Request body of `totp.rename`. */
+interface TotpRenameBody {
+    name: string;
+}
+/** Response body of `totp.rename`. */
+type TotpRenameResponse = void;
+/** Request body of `waitlists.join`. */
+interface WaitlistsJoinBody {
+    /** An active team you belong to; required for feature waitlists. */
+    organization?: string | null;
+    /** Feature updates or participation in a test group. */
+    interest?: 'notify' | 'test' | null;
+    /** Optional two-letter country code. */
+    country?: string | null;
+    /** Answers by the programme’s question keys, at most 2000 characters each. */
+    answers?: Record<string, unknown>;
+    /** A stable UUID for this signup attempt, also used for Billing idempotency. */
+    reference: string;
+}
+/** Response body of `waitlists.join`. */
+type WaitlistsJoinResponse = {
+    data: Record<string, unknown>;
+};
+/** Request body of `waitlists.leave`. */
+interface WaitlistsLeaveBody {
+    organization: string;
+    reference: string;
+}
+/** Response body of `waitlists.leave`. */
+type WaitlistsLeaveResponse = {
+    data: Record<string, unknown>;
+};
 /** Every operation of the Cbox ID — My Account API — method, path, scope and danger — keyed by action name. */
 declare const accountOperations: {
     readonly 'action_approvals.get': {
@@ -12905,6 +13647,18 @@ declare const accountOperations: {
         readonly body: false;
         readonly pagination: null;
     };
+    readonly 'account.apps.list': {
+        readonly action: "account.apps.list";
+        readonly operationId: "account_apps_list";
+        readonly method: "GET";
+        readonly path: "/me/apps";
+        readonly pathParams: readonly [];
+        readonly scope: "account:apps:read";
+        readonly danger: "read";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'account.devices.remove': {
         readonly action: "account.devices.remove";
         readonly operationId: "account_devices_remove";
@@ -12917,6 +13671,18 @@ declare const accountOperations: {
         readonly body: false;
         readonly pagination: null;
     };
+    readonly 'account.email.confirmation.send': {
+        readonly action: "account.email.confirmation.send";
+        readonly operationId: "account_email_confirmation_send";
+        readonly method: "POST";
+        readonly path: "/me/email/confirmation";
+        readonly pathParams: readonly [];
+        readonly scope: "account:profile:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'account.mfa.sms.remove': {
         readonly action: "account.mfa.sms.remove";
         readonly operationId: "account_mfa_sms_remove";
@@ -12953,6 +13719,18 @@ declare const accountOperations: {
         readonly body: false;
         readonly pagination: null;
     };
+    readonly 'account.passkeys.rename': {
+        readonly action: "account.passkeys.rename";
+        readonly operationId: "account_passkeys_rename";
+        readonly method: "PATCH";
+        readonly path: "/me/passkeys/{passkey_id}";
+        readonly pathParams: readonly ["passkey_id"];
+        readonly scope: "account:sign_in:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
     readonly 'account.pipes.disconnect': {
         readonly action: "account.pipes.disconnect";
         readonly operationId: "account_pipes_disconnect";
@@ -13001,6 +13779,18 @@ declare const accountOperations: {
         readonly body: false;
         readonly pagination: null;
     };
+    readonly 'account.sign_in_methods.disconnect': {
+        readonly action: "account.sign_in_methods.disconnect";
+        readonly operationId: "account_sign_in_methods_disconnect";
+        readonly method: "DELETE";
+        readonly path: "/me/sign-in-methods/{identity_id}";
+        readonly pathParams: readonly ["identity_id"];
+        readonly scope: "account:sign_in:write";
+        readonly danger: "critical";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
     readonly 'account.social.unlink': {
         readonly action: "account.social.unlink";
         readonly operationId: "account_social_unlink";
@@ -13013,6 +13803,54 @@ declare const accountOperations: {
         readonly body: false;
         readonly pagination: null;
     };
+    readonly 'account.totp.remove': {
+        readonly action: "account.totp.remove";
+        readonly operationId: "account_totp_remove";
+        readonly method: "DELETE";
+        readonly path: "/me/two-factor/apps/{factor_id}";
+        readonly pathParams: readonly ["factor_id"];
+        readonly scope: "account:sign_in:write";
+        readonly danger: "critical";
+        readonly approval: true;
+        readonly body: false;
+        readonly pagination: null;
+    };
+    readonly 'account.totp.rename': {
+        readonly action: "account.totp.rename";
+        readonly operationId: "account_totp_rename";
+        readonly method: "PATCH";
+        readonly path: "/me/two-factor/apps/{factor_id}";
+        readonly pathParams: readonly ["factor_id"];
+        readonly scope: "account:sign_in:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
+    readonly 'account.waitlists.join': {
+        readonly action: "account.waitlists.join";
+        readonly operationId: "account_waitlists_join";
+        readonly method: "POST";
+        readonly path: "/me/services/{program}/waitlist";
+        readonly pathParams: readonly ["program"];
+        readonly scope: "account:waitlists:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
+    readonly 'account.waitlists.leave': {
+        readonly action: "account.waitlists.leave";
+        readonly operationId: "account_waitlists_leave";
+        readonly method: "POST";
+        readonly path: "/me/services/{program}/waitlist/leave";
+        readonly pathParams: readonly ["program"];
+        readonly scope: "account:waitlists:write";
+        readonly danger: "write";
+        readonly approval: true;
+        readonly body: true;
+        readonly pagination: null;
+    };
 };
 /** Options for a {@link AccountClient}. `baseUrl` is required: the environment's own host. */
 type AccountClientOptions = ManagementClientOptions & {
@@ -13083,6 +13921,19 @@ declare class AccountClient {
          */
         revoke: <O extends CallOptions = CallOptions>(clientId: string, options?: O) => Promise<Outcome<ApplicationsRevokeResponse, O>>;
     };
+    readonly apps: {
+        /**
+         * List the published apps visible to you in this environment. Optional organization context must be one you actively belong to.
+         *
+         * Requires scope `account:apps:read` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: read.
+         *
+         * `GET /me/apps` · action `account.apps.list`
+         * @scope `account:apps:read`
+         * @danger read
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        list: <O extends CallOptions = CallOptions>(query?: AppsListQuery, options?: O) => Promise<Outcome<AppsListResponse, O>>;
+    };
     readonly devices: {
         /**
          * Remove one of your trusted devices; it is no longer asked to approve anything.
@@ -13096,6 +13947,21 @@ declare class AccountClient {
          */
         remove: <O extends CallOptions = CallOptions>(deviceId: string, options?: O) => Promise<Outcome<DevicesRemoveResponse, O>>;
     };
+    readonly email: {
+        confirmation: {
+            /**
+             * Mail yourself a link that confirms your email address.
+             *
+             * Requires scope `account:profile:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: write.
+             *
+             * `POST /me/email/confirmation` · action `account.email.confirmation.send`
+             * @scope `account:profile:write`
+             * @danger write
+             * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+             */
+            send: <O extends CallOptions = CallOptions>(options?: O) => Promise<Outcome<EmailConfirmationSendResponse, O>>;
+        };
+    };
     readonly mfa: {
         sms: {
             /**
@@ -13136,6 +14002,17 @@ declare class AccountClient {
          * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
          */
         remove: <O extends CallOptions = CallOptions>(passkeyId: string, options?: O) => Promise<Outcome<PasskeysRemoveResponse, O>>;
+        /**
+         * Rename one of your passkeys.
+         *
+         * Requires scope `account:sign_in:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: write.
+         *
+         * `PATCH /me/passkeys/{passkey_id}` · action `account.passkeys.rename`
+         * @scope `account:sign_in:write`
+         * @danger write
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        rename: <O extends CallOptions = CallOptions>(passkeyId: string, body: PasskeysRenameBody, options?: O) => Promise<Outcome<PasskeysRenameResponse, O>>;
     };
     readonly pipes: {
         /**
@@ -13187,6 +14064,19 @@ declare class AccountClient {
          */
         revokeOthers: <O extends CallOptions = CallOptions>(options?: O) => Promise<Outcome<SessionsRevokeOthersResponse, O>>;
     };
+    readonly signInMethods: {
+        /**
+         * Disconnect one linked sign-in identity (Google, GitHub, …) from your account — never the last way you can sign in.
+         *
+         * Requires scope `account:sign_in:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: critical.
+         *
+         * `DELETE /me/sign-in-methods/{identity_id}` · action `account.sign_in_methods.disconnect`
+         * @scope `account:sign_in:write`
+         * @danger critical
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        disconnect: <O extends CallOptions = CallOptions>(identityId: string, options?: O) => Promise<Outcome<SignInMethodsDisconnectResponse, O>>;
+    };
     readonly social: {
         /**
          * Disconnect a social account from yours — never the last way you can sign in.
@@ -13200,6 +14090,54 @@ declare class AccountClient {
          */
         unlink: <O extends CallOptions = CallOptions>(provider: string, options?: O) => Promise<Outcome<SocialUnlinkResponse, O>>;
     };
+    readonly totp: {
+        /**
+         * Remove one of your authenticator apps.
+         *
+         * Requires scope `account:sign_in:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: critical.
+         *
+         * `DELETE /me/two-factor/apps/{factor_id}` · action `account.totp.remove`
+         * @scope `account:sign_in:write`
+         * @danger critical
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        remove: <O extends CallOptions = CallOptions>(factorId: string, options?: O) => Promise<Outcome<TotpRemoveResponse, O>>;
+        /**
+         * Rename one of your authenticator apps.
+         *
+         * Requires scope `account:sign_in:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: write.
+         *
+         * `PATCH /me/two-factor/apps/{factor_id}` · action `account.totp.rename`
+         * @scope `account:sign_in:write`
+         * @danger write
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        rename: <O extends CallOptions = CallOptions>(factorId: string, body: TotpRenameBody, options?: O) => Promise<Outcome<TotpRenameResponse, O>>;
+    };
+    readonly waitlists: {
+        /**
+         * Join a published service waitlist with your verified email. Does not buy a plan or grant access.
+         *
+         * Requires scope `account:waitlists:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: write.
+         *
+         * `POST /me/services/{program}/waitlist` · action `account.waitlists.join`
+         * @scope `account:waitlists:write`
+         * @danger write
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        join: <O extends CallOptions = CallOptions>(program: string, body: WaitlistsJoinBody, options?: O) => Promise<Outcome<WaitlistsJoinResponse, O>>;
+        /**
+         * Withdraw your own feature interest or beta application for a team. Active grants are managed by the service.
+         *
+         * Requires scope `account:waitlists:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: write.
+         *
+         * `POST /me/services/{program}/waitlist/leave` · action `account.waitlists.leave`
+         * @scope `account:waitlists:write`
+         * @danger write
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        leave: <O extends CallOptions = CallOptions>(program: string, body: WaitlistsLeaveBody, options?: O) => Promise<Outcome<WaitlistsLeaveResponse, O>>;
+    };
 }
 
 type account_AccountClient = AccountClient;
@@ -13210,11 +14148,17 @@ type account_ApiKeysCreateBody = ApiKeysCreateBody;
 type account_ApiKeysCreateResponse = ApiKeysCreateResponse;
 type account_ApiKeysRevokeResponse = ApiKeysRevokeResponse;
 type account_ApplicationsRevokeResponse = ApplicationsRevokeResponse;
+type account_AppsListQuery = AppsListQuery;
+type account_AppsListResponse = AppsListResponse;
 type account_DevicesRemoveResponse = DevicesRemoveResponse;
+type account_EmailConfirmationSendResponse = EmailConfirmationSendResponse;
 type account_ErrorSchema = ErrorSchema;
 type account_MfaSmsRemoveResponse = MfaSmsRemoveResponse;
 type account_OrganizationsLeaveResponse = OrganizationsLeaveResponse;
+type account_Passkey = Passkey;
 type account_PasskeysRemoveResponse = PasskeysRemoveResponse;
+type account_PasskeysRenameBody = PasskeysRenameBody;
+type account_PasskeysRenameResponse = PasskeysRenameResponse;
 type account_PersonalApiKey = PersonalApiKey;
 type account_PipesDisconnectResponse = PipesDisconnectResponse;
 type account_Profile = Profile;
@@ -13223,10 +14167,18 @@ type account_ProfileUpdateResponse = ProfileUpdateResponse;
 type account_SessionsRevokeOthersResponse = SessionsRevokeOthersResponse;
 type account_SessionsRevokeResponse = SessionsRevokeResponse;
 type account_SessionsRevoked = SessionsRevoked;
+type account_SignInMethodsDisconnectResponse = SignInMethodsDisconnectResponse;
 type account_SocialUnlinkResponse = SocialUnlinkResponse;
+type account_TotpRemoveResponse = TotpRemoveResponse;
+type account_TotpRenameBody = TotpRenameBody;
+type account_TotpRenameResponse = TotpRenameResponse;
+type account_WaitlistsJoinBody = WaitlistsJoinBody;
+type account_WaitlistsJoinResponse = WaitlistsJoinResponse;
+type account_WaitlistsLeaveBody = WaitlistsLeaveBody;
+type account_WaitlistsLeaveResponse = WaitlistsLeaveResponse;
 declare const account_accountOperations: typeof accountOperations;
 declare namespace account {
-  export { account_AccountClient as AccountClient, type account_AccountClientOptions as AccountClientOptions, type account_ActionApprovalsGetResponse as ActionApprovalsGetResponse, type account_ApiKeysCreateBody as ApiKeysCreateBody, type account_ApiKeysCreateResponse as ApiKeysCreateResponse, type account_ApiKeysRevokeResponse as ApiKeysRevokeResponse, type account_ApplicationsRevokeResponse as ApplicationsRevokeResponse, type account_DevicesRemoveResponse as DevicesRemoveResponse, type account_ErrorSchema as ErrorSchema, type account_MfaSmsRemoveResponse as MfaSmsRemoveResponse, type account_OrganizationsLeaveResponse as OrganizationsLeaveResponse, type account_PasskeysRemoveResponse as PasskeysRemoveResponse, type account_PersonalApiKey as PersonalApiKey, type account_PipesDisconnectResponse as PipesDisconnectResponse, type account_Profile as Profile, type account_ProfileUpdateBody as ProfileUpdateBody, type account_ProfileUpdateResponse as ProfileUpdateResponse, type account_SessionsRevokeOthersResponse as SessionsRevokeOthersResponse, type account_SessionsRevokeResponse as SessionsRevokeResponse, type account_SessionsRevoked as SessionsRevoked, type account_SocialUnlinkResponse as SocialUnlinkResponse, account_accountOperations as accountOperations };
+  export { account_AccountClient as AccountClient, type account_AccountClientOptions as AccountClientOptions, type account_ActionApprovalsGetResponse as ActionApprovalsGetResponse, type account_ApiKeysCreateBody as ApiKeysCreateBody, type account_ApiKeysCreateResponse as ApiKeysCreateResponse, type account_ApiKeysRevokeResponse as ApiKeysRevokeResponse, type account_ApplicationsRevokeResponse as ApplicationsRevokeResponse, type account_AppsListQuery as AppsListQuery, type account_AppsListResponse as AppsListResponse, type account_DevicesRemoveResponse as DevicesRemoveResponse, type account_EmailConfirmationSendResponse as EmailConfirmationSendResponse, type account_ErrorSchema as ErrorSchema, type account_MfaSmsRemoveResponse as MfaSmsRemoveResponse, type account_OrganizationsLeaveResponse as OrganizationsLeaveResponse, type account_Passkey as Passkey, type account_PasskeysRemoveResponse as PasskeysRemoveResponse, type account_PasskeysRenameBody as PasskeysRenameBody, type account_PasskeysRenameResponse as PasskeysRenameResponse, type account_PersonalApiKey as PersonalApiKey, type account_PipesDisconnectResponse as PipesDisconnectResponse, type account_Profile as Profile, type account_ProfileUpdateBody as ProfileUpdateBody, type account_ProfileUpdateResponse as ProfileUpdateResponse, type account_SessionsRevokeOthersResponse as SessionsRevokeOthersResponse, type account_SessionsRevokeResponse as SessionsRevokeResponse, type account_SessionsRevoked as SessionsRevoked, type account_SignInMethodsDisconnectResponse as SignInMethodsDisconnectResponse, type account_SocialUnlinkResponse as SocialUnlinkResponse, type account_TotpRemoveResponse as TotpRemoveResponse, type account_TotpRenameBody as TotpRenameBody, type account_TotpRenameResponse as TotpRenameResponse, type account_WaitlistsJoinBody as WaitlistsJoinBody, type account_WaitlistsJoinResponse as WaitlistsJoinResponse, type account_WaitlistsLeaveBody as WaitlistsLeaveBody, type account_WaitlistsLeaveResponse as WaitlistsLeaveResponse, account_accountOperations as accountOperations };
 }
 
 /**