@constructive-io/react 0.12.7 → 0.12.9

package/esm/public/schema-types.d.ts

@@ -3,7 +3,8 @@
  * @generated by @constructive-io/graphql-codegen
  * DO NOT EDIT - changes will be overwritten
  */
-import type { Api, ApiModule, ApiSchema, App, AppAchievement, AppAdminGrant, AppClaimedInvite, AppGrant, AppInvite, AppLevel, AppLevelRequirement, AppLimit, AppLimitDefault, AppMembership, AppMembershipDefault, AppOwnerGrant, AppPermission, AppPermissionDefault, AppStep, AstMigration, AuditLog, Blueprint, BlueprintConstruction, BlueprintTemplate, CheckConstraint, Commit, ConnectedAccountsModule, CryptoAddress, CryptoAddressesModule, CryptoAuthModule, Database, DatabaseProvisionModule, DatabaseTransfer, DefaultIdsModule, DefaultPrivilege, DenormalizedTableField, DevicesModule, Domain, Email, EmailsModule, EmbeddingChunk, EncryptedSecretsModule, EntityTypeProvision, Enum, Field, ForeignKeyConstraint, FullTextSearch, GetAllRecord, HierarchyModule, Index, InvitesModule, LevelsModule, LimitsModule, MembershipType, MembershipTypesModule, MembershipsModule, MigrateFile, Object, OrgAdminGrant, OrgChartEdge, OrgChartEdgeGrant, OrgClaimedInvite, OrgGetManagersRecord, OrgGetSubordinatesRecord, OrgGrant, OrgInvite, OrgLimit, OrgLimitDefault, OrgMember, OrgMemberProfile, OrgMembership, OrgMembershipDefault, OrgOwnerGrant, OrgPermission, OrgPermissionDefault, PermissionsModule, PhoneNumber, PhoneNumbersModule, Policy, PrimaryKeyConstraint, ProfilesModule, RateLimitsModule, Ref, RelationProvision, RlsModule, RoleType, Schema, SchemaGrant, SecretsModule, SecureTableProvision, SessionSecretsModule, SessionsModule, Site, SiteMetadatum, SiteModule, SiteTheme, SpatialRelation, SqlAction, StorageModule, Store, Table, TableGrant, Trigger, TriggerFunction, UniqueConstraint, User, UserAuthModule, UserConnectedAccount, UsersModule, View, ViewGrant, ViewRule, ViewTable, WebauthnCredentialsModule, BigIntFilter, BitStringFilter, BooleanFilter, DatetimeFilter, FloatFilter, FullTextFilter, IntFilter, InternetAddressFilter, JSONFilter, StringFilter, StringListFilter, UUIDFilter, UUIDListFilter } from './types';
+import type { Api, ApiModule, ApiSchema, App, AppAchievement, AppAdminGrant, AppClaimedInvite, AppGrant, AppInvite, AppLevel, AppLevelRequirement, AppLimit, AppLimitDefault, AppMembership, AppMembershipDefault, AppOwnerGrant, AppPermission, AppPermissionDefault, AppStep, AstMigration, AuditLog, Blueprint, BlueprintConstruction, BlueprintTemplate, CheckConstraint, Commit, ConnectedAccountsModule, CryptoAddress, CryptoAddressesModule, CryptoAuthModule, Database, DatabaseProvisionModule, DatabaseTransfer, DefaultIdsModule, DefaultPrivilege, DenormalizedTableField, DevicesModule, Domain, Email, EmailsModule, EmbeddingChunk, EncryptedSecretsModule, EntityTypeProvision, Enum, Field, ForeignKeyConstraint, FullTextSearch, GetAllRecord, HierarchyModule, IdentityProvider, IdentityProvidersModule, Index, InvitesModule, LevelsModule, LimitsModule, MembershipType, MembershipTypesModule, MembershipsModule, MigrateFile, NotificationsModule, Object, OrgAdminGrant, OrgChartEdge, OrgChartEdgeGrant, OrgClaimedInvite, OrgGetManagersRecord, OrgGetSubordinatesRecord, OrgGrant, OrgInvite, OrgLimit, OrgLimitDefault, OrgMember, OrgMemberProfile, OrgMembership, OrgMembershipDefault, OrgMembershipSetting, OrgOwnerGrant, OrgPermission, OrgPermissionDefault, PermissionsModule, PhoneNumber, PhoneNumbersModule, Policy, PrimaryKeyConstraint, ProfilesModule, RateLimitsModule, Ref, RelationProvision, RlsModule, RoleType, Schema, SchemaGrant, SecretsModule, SecureTableProvision, SessionSecretsModule, SessionsModule, Site, SiteMetadatum, SiteModule, SiteTheme, SpatialRelation, SqlAction, StorageModule, Store, Table, TableGrant, Trigger, TriggerFunction, UniqueConstraint, User, UserAuthModule, UserConnectedAccount, UsersModule, View, ViewGrant, ViewRule, ViewTable, WebauthnAuthModule, WebauthnCredential, WebauthnCredentialsModule, BigIntFilter, BitStringFilter, BooleanFilter, DatetimeFilter, FloatFilter, FullTextFilter, IntFilter, InternetAddressFilter, JSONFilter, StringFilter, StringListFilter, UUIDFilter, UUIDListFilter } from './types';
+export type Base64EncodedBinary = unknown;
 export type ConstructiveInternalTypeAttachment = unknown;
 export type ConstructiveInternalTypeEmail = unknown;
 export type ConstructiveInternalTypeHostname = unknown;
@@ -45,11 +46,13 @@ export type ViewOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | '
 /** Methods to use when ordering `EmbeddingChunk`. */
 export type EmbeddingChunkOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'EMBEDDING_FIELD_ID_ASC' | 'EMBEDDING_FIELD_ID_DESC' | 'CHUNKS_TABLE_ID_ASC' | 'CHUNKS_TABLE_ID_DESC' | 'CHUNKS_TABLE_NAME_ASC' | 'CHUNKS_TABLE_NAME_DESC' | 'CONTENT_FIELD_NAME_ASC' | 'CONTENT_FIELD_NAME_DESC' | 'DIMENSIONS_ASC' | 'DIMENSIONS_DESC' | 'METRIC_ASC' | 'METRIC_DESC' | 'CHUNK_SIZE_ASC' | 'CHUNK_SIZE_DESC' | 'CHUNK_OVERLAP_ASC' | 'CHUNK_OVERLAP_DESC' | 'CHUNK_STRATEGY_ASC' | 'CHUNK_STRATEGY_DESC' | 'METADATA_FIELDS_ASC' | 'METADATA_FIELDS_DESC' | 'ENQUEUE_CHUNKING_JOB_ASC' | 'ENQUEUE_CHUNKING_JOB_DESC' | 'CHUNKING_TASK_NAME_ASC' | 'CHUNKING_TASK_NAME_DESC' | 'PARENT_FK_FIELD_ID_ASC' | 'PARENT_FK_FIELD_ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `SecureTableProvision`. */
-export type SecureTableProvisionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC' | 'NODES_ASC' | 'NODES_DESC' | 'USE_RLS_ASC' | 'USE_RLS_DESC' | 'FIELDS_ASC' | 'FIELDS_DESC' | 'GRANT_ROLES_ASC' | 'GRANT_ROLES_DESC' | 'GRANT_PRIVILEGES_ASC' | 'GRANT_PRIVILEGES_DESC' | 'POLICY_TYPE_ASC' | 'POLICY_TYPE_DESC' | 'POLICY_PRIVILEGES_ASC' | 'POLICY_PRIVILEGES_DESC' | 'POLICY_ROLE_ASC' | 'POLICY_ROLE_DESC' | 'POLICY_PERMISSIVE_ASC' | 'POLICY_PERMISSIVE_DESC' | 'POLICY_NAME_ASC' | 'POLICY_NAME_DESC' | 'POLICY_DATA_ASC' | 'POLICY_DATA_DESC' | 'OUT_FIELDS_ASC' | 'OUT_FIELDS_DESC';
+export type SecureTableProvisionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC' | 'NODES_ASC' | 'NODES_DESC' | 'USE_RLS_ASC' | 'USE_RLS_DESC' | 'FIELDS_ASC' | 'FIELDS_DESC' | 'GRANTS_ASC' | 'GRANTS_DESC' | 'POLICIES_ASC' | 'POLICIES_DESC' | 'OUT_FIELDS_ASC' | 'OUT_FIELDS_DESC';
 /** Methods to use when ordering `RelationProvision`. */
-export type RelationProvisionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'RELATION_TYPE_ASC' | 'RELATION_TYPE_DESC' | 'SOURCE_TABLE_ID_ASC' | 'SOURCE_TABLE_ID_DESC' | 'TARGET_TABLE_ID_ASC' | 'TARGET_TABLE_ID_DESC' | 'FIELD_NAME_ASC' | 'FIELD_NAME_DESC' | 'DELETE_ACTION_ASC' | 'DELETE_ACTION_DESC' | 'IS_REQUIRED_ASC' | 'IS_REQUIRED_DESC' | 'API_REQUIRED_ASC' | 'API_REQUIRED_DESC' | 'JUNCTION_TABLE_ID_ASC' | 'JUNCTION_TABLE_ID_DESC' | 'JUNCTION_TABLE_NAME_ASC' | 'JUNCTION_TABLE_NAME_DESC' | 'JUNCTION_SCHEMA_ID_ASC' | 'JUNCTION_SCHEMA_ID_DESC' | 'SOURCE_FIELD_NAME_ASC' | 'SOURCE_FIELD_NAME_DESC' | 'TARGET_FIELD_NAME_ASC' | 'TARGET_FIELD_NAME_DESC' | 'USE_COMPOSITE_KEY_ASC' | 'USE_COMPOSITE_KEY_DESC' | 'CREATE_INDEX_ASC' | 'CREATE_INDEX_DESC' | 'EXPOSE_IN_API_ASC' | 'EXPOSE_IN_API_DESC' | 'NODES_ASC' | 'NODES_DESC' | 'GRANT_ROLES_ASC' | 'GRANT_ROLES_DESC' | 'GRANT_PRIVILEGES_ASC' | 'GRANT_PRIVILEGES_DESC' | 'POLICY_TYPE_ASC' | 'POLICY_TYPE_DESC' | 'POLICY_PRIVILEGES_ASC' | 'POLICY_PRIVILEGES_DESC' | 'POLICY_ROLE_ASC' | 'POLICY_ROLE_DESC' | 'POLICY_PERMISSIVE_ASC' | 'POLICY_PERMISSIVE_DESC' | 'POLICY_NAME_ASC' | 'POLICY_NAME_DESC' | 'POLICY_DATA_ASC' | 'POLICY_DATA_DESC' | 'OUT_FIELD_ID_ASC' | 'OUT_FIELD_ID_DESC' | 'OUT_JUNCTION_TABLE_ID_ASC' | 'OUT_JUNCTION_TABLE_ID_DESC' | 'OUT_SOURCE_FIELD_ID_ASC' | 'OUT_SOURCE_FIELD_ID_DESC' | 'OUT_TARGET_FIELD_ID_ASC' | 'OUT_TARGET_FIELD_ID_DESC';
+export type RelationProvisionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'RELATION_TYPE_ASC' | 'RELATION_TYPE_DESC' | 'SOURCE_TABLE_ID_ASC' | 'SOURCE_TABLE_ID_DESC' | 'TARGET_TABLE_ID_ASC' | 'TARGET_TABLE_ID_DESC' | 'FIELD_NAME_ASC' | 'FIELD_NAME_DESC' | 'DELETE_ACTION_ASC' | 'DELETE_ACTION_DESC' | 'IS_REQUIRED_ASC' | 'IS_REQUIRED_DESC' | 'API_REQUIRED_ASC' | 'API_REQUIRED_DESC' | 'JUNCTION_TABLE_ID_ASC' | 'JUNCTION_TABLE_ID_DESC' | 'JUNCTION_TABLE_NAME_ASC' | 'JUNCTION_TABLE_NAME_DESC' | 'JUNCTION_SCHEMA_ID_ASC' | 'JUNCTION_SCHEMA_ID_DESC' | 'SOURCE_FIELD_NAME_ASC' | 'SOURCE_FIELD_NAME_DESC' | 'TARGET_FIELD_NAME_ASC' | 'TARGET_FIELD_NAME_DESC' | 'USE_COMPOSITE_KEY_ASC' | 'USE_COMPOSITE_KEY_DESC' | 'CREATE_INDEX_ASC' | 'CREATE_INDEX_DESC' | 'EXPOSE_IN_API_ASC' | 'EXPOSE_IN_API_DESC' | 'NODES_ASC' | 'NODES_DESC' | 'GRANTS_ASC' | 'GRANTS_DESC' | 'POLICIES_ASC' | 'POLICIES_DESC' | 'OUT_FIELD_ID_ASC' | 'OUT_FIELD_ID_DESC' | 'OUT_JUNCTION_TABLE_ID_ASC' | 'OUT_JUNCTION_TABLE_ID_DESC' | 'OUT_SOURCE_FIELD_ID_ASC' | 'OUT_SOURCE_FIELD_ID_DESC' | 'OUT_TARGET_FIELD_ID_ASC' | 'OUT_TARGET_FIELD_ID_DESC';
 /** Methods to use when ordering `SessionSecretsModule`. */
 export type SessionSecretsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC' | 'SESSIONS_TABLE_ID_ASC' | 'SESSIONS_TABLE_ID_DESC';
+/** Methods to use when ordering `IdentityProvidersModule`. */
+export type IdentityProvidersModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC';
 /** Methods to use when ordering `Table`. */
 export type TableOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'LABEL_ASC' | 'LABEL_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'SMART_TAGS_ASC' | 'SMART_TAGS_DESC' | 'CATEGORY_ASC' | 'CATEGORY_DESC' | 'MODULE_ASC' | 'MODULE_DESC' | 'SCOPE_ASC' | 'SCOPE_DESC' | 'USE_RLS_ASC' | 'USE_RLS_DESC' | 'TIMESTAMPS_ASC' | 'TIMESTAMPS_DESC' | 'PEOPLESTAMPS_ASC' | 'PEOPLESTAMPS_DESC' | 'PLURAL_NAME_ASC' | 'PLURAL_NAME_DESC' | 'SINGULAR_NAME_ASC' | 'SINGULAR_NAME_DESC' | 'TAGS_ASC' | 'TAGS_DESC' | 'INHERITS_ID_ASC' | 'INHERITS_ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `SchemaGrant`. */
@@ -105,7 +108,7 @@ export type LimitsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_D
 /** Methods to use when ordering `MembershipTypesModule`. */
 export type MembershipTypesModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC';
 /** Methods to use when ordering `MembershipsModule`. */
-export type MembershipsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'MEMBERSHIPS_TABLE_ID_ASC' | 'MEMBERSHIPS_TABLE_ID_DESC' | 'MEMBERSHIPS_TABLE_NAME_ASC' | 'MEMBERSHIPS_TABLE_NAME_DESC' | 'MEMBERS_TABLE_ID_ASC' | 'MEMBERS_TABLE_ID_DESC' | 'MEMBERS_TABLE_NAME_ASC' | 'MEMBERS_TABLE_NAME_DESC' | 'MEMBERSHIP_DEFAULTS_TABLE_ID_ASC' | 'MEMBERSHIP_DEFAULTS_TABLE_ID_DESC' | 'MEMBERSHIP_DEFAULTS_TABLE_NAME_ASC' | 'MEMBERSHIP_DEFAULTS_TABLE_NAME_DESC' | 'GRANTS_TABLE_ID_ASC' | 'GRANTS_TABLE_ID_DESC' | 'GRANTS_TABLE_NAME_ASC' | 'GRANTS_TABLE_NAME_DESC' | 'ACTOR_TABLE_ID_ASC' | 'ACTOR_TABLE_ID_DESC' | 'LIMITS_TABLE_ID_ASC' | 'LIMITS_TABLE_ID_DESC' | 'DEFAULT_LIMITS_TABLE_ID_ASC' | 'DEFAULT_LIMITS_TABLE_ID_DESC' | 'PERMISSIONS_TABLE_ID_ASC' | 'PERMISSIONS_TABLE_ID_DESC' | 'DEFAULT_PERMISSIONS_TABLE_ID_ASC' | 'DEFAULT_PERMISSIONS_TABLE_ID_DESC' | 'SPRT_TABLE_ID_ASC' | 'SPRT_TABLE_ID_DESC' | 'ADMIN_GRANTS_TABLE_ID_ASC' | 'ADMIN_GRANTS_TABLE_ID_DESC' | 'ADMIN_GRANTS_TABLE_NAME_ASC' | 'ADMIN_GRANTS_TABLE_NAME_DESC' | 'OWNER_GRANTS_TABLE_ID_ASC' | 'OWNER_GRANTS_TABLE_ID_DESC' | 'OWNER_GRANTS_TABLE_NAME_ASC' | 'OWNER_GRANTS_TABLE_NAME_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'ENTITY_TABLE_ID_ASC' | 'ENTITY_TABLE_ID_DESC' | 'ENTITY_TABLE_OWNER_ID_ASC' | 'ENTITY_TABLE_OWNER_ID_DESC' | 'PREFIX_ASC' | 'PREFIX_DESC' | 'ACTOR_MASK_CHECK_ASC' | 'ACTOR_MASK_CHECK_DESC' | 'ACTOR_PERM_CHECK_ASC' | 'ACTOR_PERM_CHECK_DESC' | 'ENTITY_IDS_BY_MASK_ASC' | 'ENTITY_IDS_BY_MASK_DESC' | 'ENTITY_IDS_BY_PERM_ASC' | 'ENTITY_IDS_BY_PERM_DESC' | 'ENTITY_IDS_FUNCTION_ASC' | 'ENTITY_IDS_FUNCTION_DESC' | 'MEMBER_PROFILES_TABLE_ID_ASC' | 'MEMBER_PROFILES_TABLE_ID_DESC';
+export type MembershipsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'MEMBERSHIPS_TABLE_ID_ASC' | 'MEMBERSHIPS_TABLE_ID_DESC' | 'MEMBERSHIPS_TABLE_NAME_ASC' | 'MEMBERSHIPS_TABLE_NAME_DESC' | 'MEMBERS_TABLE_ID_ASC' | 'MEMBERS_TABLE_ID_DESC' | 'MEMBERS_TABLE_NAME_ASC' | 'MEMBERS_TABLE_NAME_DESC' | 'MEMBERSHIP_DEFAULTS_TABLE_ID_ASC' | 'MEMBERSHIP_DEFAULTS_TABLE_ID_DESC' | 'MEMBERSHIP_DEFAULTS_TABLE_NAME_ASC' | 'MEMBERSHIP_DEFAULTS_TABLE_NAME_DESC' | 'MEMBERSHIP_SETTINGS_TABLE_ID_ASC' | 'MEMBERSHIP_SETTINGS_TABLE_ID_DESC' | 'MEMBERSHIP_SETTINGS_TABLE_NAME_ASC' | 'MEMBERSHIP_SETTINGS_TABLE_NAME_DESC' | 'GRANTS_TABLE_ID_ASC' | 'GRANTS_TABLE_ID_DESC' | 'GRANTS_TABLE_NAME_ASC' | 'GRANTS_TABLE_NAME_DESC' | 'ACTOR_TABLE_ID_ASC' | 'ACTOR_TABLE_ID_DESC' | 'LIMITS_TABLE_ID_ASC' | 'LIMITS_TABLE_ID_DESC' | 'DEFAULT_LIMITS_TABLE_ID_ASC' | 'DEFAULT_LIMITS_TABLE_ID_DESC' | 'PERMISSIONS_TABLE_ID_ASC' | 'PERMISSIONS_TABLE_ID_DESC' | 'DEFAULT_PERMISSIONS_TABLE_ID_ASC' | 'DEFAULT_PERMISSIONS_TABLE_ID_DESC' | 'SPRT_TABLE_ID_ASC' | 'SPRT_TABLE_ID_DESC' | 'ADMIN_GRANTS_TABLE_ID_ASC' | 'ADMIN_GRANTS_TABLE_ID_DESC' | 'ADMIN_GRANTS_TABLE_NAME_ASC' | 'ADMIN_GRANTS_TABLE_NAME_DESC' | 'OWNER_GRANTS_TABLE_ID_ASC' | 'OWNER_GRANTS_TABLE_ID_DESC' | 'OWNER_GRANTS_TABLE_NAME_ASC' | 'OWNER_GRANTS_TABLE_NAME_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'ENTITY_TABLE_ID_ASC' | 'ENTITY_TABLE_ID_DESC' | 'ENTITY_TABLE_OWNER_ID_ASC' | 'ENTITY_TABLE_OWNER_ID_DESC' | 'PREFIX_ASC' | 'PREFIX_DESC' | 'ACTOR_MASK_CHECK_ASC' | 'ACTOR_MASK_CHECK_DESC' | 'ACTOR_PERM_CHECK_ASC' | 'ACTOR_PERM_CHECK_DESC' | 'ENTITY_IDS_BY_MASK_ASC' | 'ENTITY_IDS_BY_MASK_DESC' | 'ENTITY_IDS_BY_PERM_ASC' | 'ENTITY_IDS_BY_PERM_DESC' | 'ENTITY_IDS_FUNCTION_ASC' | 'ENTITY_IDS_FUNCTION_DESC' | 'MEMBER_PROFILES_TABLE_ID_ASC' | 'MEMBER_PROFILES_TABLE_ID_DESC';
 /** Methods to use when ordering `PermissionsModule`. */
 export type PermissionsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC' | 'DEFAULT_TABLE_ID_ASC' | 'DEFAULT_TABLE_ID_DESC' | 'DEFAULT_TABLE_NAME_ASC' | 'DEFAULT_TABLE_NAME_DESC' | 'BITLEN_ASC' | 'BITLEN_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'ENTITY_TABLE_ID_ASC' | 'ENTITY_TABLE_ID_DESC' | 'ACTOR_TABLE_ID_ASC' | 'ACTOR_TABLE_ID_DESC' | 'PREFIX_ASC' | 'PREFIX_DESC' | 'GET_PADDED_MASK_ASC' | 'GET_PADDED_MASK_DESC' | 'GET_MASK_ASC' | 'GET_MASK_DESC' | 'GET_BY_MASK_ASC' | 'GET_BY_MASK_DESC' | 'GET_MASK_BY_NAME_ASC' | 'GET_MASK_BY_NAME_DESC';
 /** Methods to use when ordering `PhoneNumbersModule`. */
@@ -127,11 +130,15 @@ export type BlueprintOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC
 /** Methods to use when ordering `BlueprintConstruction`. */
 export type BlueprintConstructionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'BLUEPRINT_ID_ASC' | 'BLUEPRINT_ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'STATUS_ASC' | 'STATUS_DESC' | 'ERROR_DETAILS_ASC' | 'ERROR_DETAILS_DESC' | 'TABLE_MAP_ASC' | 'TABLE_MAP_DESC' | 'CONSTRUCTED_DEFINITION_ASC' | 'CONSTRUCTED_DEFINITION_DESC' | 'CONSTRUCTED_AT_ASC' | 'CONSTRUCTED_AT_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `StorageModule`. */
-export type StorageModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'BUCKETS_TABLE_ID_ASC' | 'BUCKETS_TABLE_ID_DESC' | 'FILES_TABLE_ID_ASC' | 'FILES_TABLE_ID_DESC' | 'UPLOAD_REQUESTS_TABLE_ID_ASC' | 'UPLOAD_REQUESTS_TABLE_ID_DESC' | 'BUCKETS_TABLE_NAME_ASC' | 'BUCKETS_TABLE_NAME_DESC' | 'FILES_TABLE_NAME_ASC' | 'FILES_TABLE_NAME_DESC' | 'UPLOAD_REQUESTS_TABLE_NAME_ASC' | 'UPLOAD_REQUESTS_TABLE_NAME_DESC' | 'ENTITY_TABLE_ID_ASC' | 'ENTITY_TABLE_ID_DESC' | 'ENDPOINT_ASC' | 'ENDPOINT_DESC' | 'PUBLIC_URL_PREFIX_ASC' | 'PUBLIC_URL_PREFIX_DESC' | 'PROVIDER_ASC' | 'PROVIDER_DESC' | 'ALLOWED_ORIGINS_ASC' | 'ALLOWED_ORIGINS_DESC' | 'UPLOAD_URL_EXPIRY_SECONDS_ASC' | 'UPLOAD_URL_EXPIRY_SECONDS_DESC' | 'DOWNLOAD_URL_EXPIRY_SECONDS_ASC' | 'DOWNLOAD_URL_EXPIRY_SECONDS_DESC' | 'DEFAULT_MAX_FILE_SIZE_ASC' | 'DEFAULT_MAX_FILE_SIZE_DESC' | 'MAX_FILENAME_LENGTH_ASC' | 'MAX_FILENAME_LENGTH_DESC' | 'CACHE_TTL_SECONDS_ASC' | 'CACHE_TTL_SECONDS_DESC';
+export type StorageModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'BUCKETS_TABLE_ID_ASC' | 'BUCKETS_TABLE_ID_DESC' | 'FILES_TABLE_ID_ASC' | 'FILES_TABLE_ID_DESC' | 'UPLOAD_REQUESTS_TABLE_ID_ASC' | 'UPLOAD_REQUESTS_TABLE_ID_DESC' | 'BUCKETS_TABLE_NAME_ASC' | 'BUCKETS_TABLE_NAME_DESC' | 'FILES_TABLE_NAME_ASC' | 'FILES_TABLE_NAME_DESC' | 'UPLOAD_REQUESTS_TABLE_NAME_ASC' | 'UPLOAD_REQUESTS_TABLE_NAME_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'POLICIES_ASC' | 'POLICIES_DESC' | 'ENTITY_TABLE_ID_ASC' | 'ENTITY_TABLE_ID_DESC' | 'ENDPOINT_ASC' | 'ENDPOINT_DESC' | 'PUBLIC_URL_PREFIX_ASC' | 'PUBLIC_URL_PREFIX_DESC' | 'PROVIDER_ASC' | 'PROVIDER_DESC' | 'ALLOWED_ORIGINS_ASC' | 'ALLOWED_ORIGINS_DESC' | 'UPLOAD_URL_EXPIRY_SECONDS_ASC' | 'UPLOAD_URL_EXPIRY_SECONDS_DESC' | 'DOWNLOAD_URL_EXPIRY_SECONDS_ASC' | 'DOWNLOAD_URL_EXPIRY_SECONDS_DESC' | 'DEFAULT_MAX_FILE_SIZE_ASC' | 'DEFAULT_MAX_FILE_SIZE_DESC' | 'MAX_FILENAME_LENGTH_ASC' | 'MAX_FILENAME_LENGTH_DESC' | 'CACHE_TTL_SECONDS_ASC' | 'CACHE_TTL_SECONDS_DESC';
 /** Methods to use when ordering `EntityTypeProvision`. */
-export type EntityTypeProvisionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'PREFIX_ASC' | 'PREFIX_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'PARENT_ENTITY_ASC' | 'PARENT_ENTITY_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC' | 'IS_VISIBLE_ASC' | 'IS_VISIBLE_DESC' | 'HAS_LIMITS_ASC' | 'HAS_LIMITS_DESC' | 'HAS_PROFILES_ASC' | 'HAS_PROFILES_DESC' | 'HAS_LEVELS_ASC' | 'HAS_LEVELS_DESC' | 'SKIP_ENTITY_POLICIES_ASC' | 'SKIP_ENTITY_POLICIES_DESC' | 'TABLE_PROVISION_ASC' | 'TABLE_PROVISION_DESC' | 'OUT_MEMBERSHIP_TYPE_ASC' | 'OUT_MEMBERSHIP_TYPE_DESC' | 'OUT_ENTITY_TABLE_ID_ASC' | 'OUT_ENTITY_TABLE_ID_DESC' | 'OUT_ENTITY_TABLE_NAME_ASC' | 'OUT_ENTITY_TABLE_NAME_DESC' | 'OUT_INSTALLED_MODULES_ASC' | 'OUT_INSTALLED_MODULES_DESC';
+export type EntityTypeProvisionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'PREFIX_ASC' | 'PREFIX_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'PARENT_ENTITY_ASC' | 'PARENT_ENTITY_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC' | 'IS_VISIBLE_ASC' | 'IS_VISIBLE_DESC' | 'HAS_LIMITS_ASC' | 'HAS_LIMITS_DESC' | 'HAS_PROFILES_ASC' | 'HAS_PROFILES_DESC' | 'HAS_LEVELS_ASC' | 'HAS_LEVELS_DESC' | 'HAS_STORAGE_ASC' | 'HAS_STORAGE_DESC' | 'STORAGE_CONFIG_ASC' | 'STORAGE_CONFIG_DESC' | 'SKIP_ENTITY_POLICIES_ASC' | 'SKIP_ENTITY_POLICIES_DESC' | 'TABLE_PROVISION_ASC' | 'TABLE_PROVISION_DESC' | 'OUT_MEMBERSHIP_TYPE_ASC' | 'OUT_MEMBERSHIP_TYPE_DESC' | 'OUT_ENTITY_TABLE_ID_ASC' | 'OUT_ENTITY_TABLE_ID_DESC' | 'OUT_ENTITY_TABLE_NAME_ASC' | 'OUT_ENTITY_TABLE_NAME_DESC' | 'OUT_INSTALLED_MODULES_ASC' | 'OUT_INSTALLED_MODULES_DESC' | 'OUT_STORAGE_MODULE_ID_ASC' | 'OUT_STORAGE_MODULE_ID_DESC' | 'OUT_BUCKETS_TABLE_ID_ASC' | 'OUT_BUCKETS_TABLE_ID_DESC' | 'OUT_FILES_TABLE_ID_ASC' | 'OUT_FILES_TABLE_ID_DESC';
 /** Methods to use when ordering `WebauthnCredentialsModule`. */
 export type WebauthnCredentialsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'TABLE_ID_ASC' | 'TABLE_ID_DESC' | 'OWNER_TABLE_ID_ASC' | 'OWNER_TABLE_ID_DESC' | 'TABLE_NAME_ASC' | 'TABLE_NAME_DESC';
+/** Methods to use when ordering `WebauthnAuthModule`. */
+export type WebauthnAuthModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'USERS_TABLE_ID_ASC' | 'USERS_TABLE_ID_DESC' | 'CREDENTIALS_TABLE_ID_ASC' | 'CREDENTIALS_TABLE_ID_DESC' | 'SESSIONS_TABLE_ID_ASC' | 'SESSIONS_TABLE_ID_DESC' | 'SESSION_CREDENTIALS_TABLE_ID_ASC' | 'SESSION_CREDENTIALS_TABLE_ID_DESC' | 'SESSION_SECRETS_TABLE_ID_ASC' | 'SESSION_SECRETS_TABLE_ID_DESC' | 'AUTH_SETTINGS_TABLE_ID_ASC' | 'AUTH_SETTINGS_TABLE_ID_DESC' | 'RP_ID_ASC' | 'RP_ID_DESC' | 'RP_NAME_ASC' | 'RP_NAME_DESC' | 'ORIGIN_ALLOWLIST_ASC' | 'ORIGIN_ALLOWLIST_DESC' | 'ATTESTATION_TYPE_ASC' | 'ATTESTATION_TYPE_DESC' | 'REQUIRE_USER_VERIFICATION_ASC' | 'REQUIRE_USER_VERIFICATION_DESC' | 'RESIDENT_KEY_ASC' | 'RESIDENT_KEY_DESC' | 'CHALLENGE_EXPIRY_ASC' | 'CHALLENGE_EXPIRY_DESC';
+/** Methods to use when ordering `NotificationsModule`. */
+export type NotificationsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'NOTIFICATIONS_TABLE_ID_ASC' | 'NOTIFICATIONS_TABLE_ID_DESC' | 'EVENTS_TABLE_ID_ASC' | 'EVENTS_TABLE_ID_DESC' | 'PREFERENCES_TABLE_ID_ASC' | 'PREFERENCES_TABLE_ID_DESC' | 'CHANNELS_TABLE_ID_ASC' | 'CHANNELS_TABLE_ID_DESC' | 'DELIVERY_LOG_TABLE_ID_ASC' | 'DELIVERY_LOG_TABLE_ID_DESC' | 'OWNER_TABLE_ID_ASC' | 'OWNER_TABLE_ID_DESC' | 'USER_SETTINGS_TABLE_ID_ASC' | 'USER_SETTINGS_TABLE_ID_DESC' | 'ORGANIZATION_SETTINGS_TABLE_ID_ASC' | 'ORGANIZATION_SETTINGS_TABLE_ID_DESC';
 /** Methods to use when ordering `DatabaseProvisionModule`. */
 export type DatabaseProvisionModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_NAME_ASC' | 'DATABASE_NAME_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'SUBDOMAIN_ASC' | 'SUBDOMAIN_DESC' | 'DOMAIN_ASC' | 'DOMAIN_DESC' | 'MODULES_ASC' | 'MODULES_DESC' | 'OPTIONS_ASC' | 'OPTIONS_DESC' | 'BOOTSTRAP_USER_ASC' | 'BOOTSTRAP_USER_DESC' | 'STATUS_ASC' | 'STATUS_DESC' | 'ERROR_MESSAGE_ASC' | 'ERROR_MESSAGE_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'COMPLETED_AT_ASC' | 'COMPLETED_AT_DESC';
 /** Methods to use when ordering `Database`. */
@@ -171,11 +178,13 @@ export type AppAchievementOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY
 /** Methods to use when ordering `AppLevel`. */
 export type AppLevelOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'IMAGE_ASC' | 'IMAGE_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `Email`. */
-export type EmailOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'EMAIL_ASC' | 'EMAIL_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
+export type EmailOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'EMAIL_ASC' | 'EMAIL_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `PhoneNumber`. */
-export type PhoneNumberOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'CC_ASC' | 'CC_DESC' | 'NUMBER_ASC' | 'NUMBER_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
+export type PhoneNumberOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'CC_ASC' | 'CC_DESC' | 'NUMBER_ASC' | 'NUMBER_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `CryptoAddress`. */
-export type CryptoAddressOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'ADDRESS_ASC' | 'ADDRESS_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
+export type CryptoAddressOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'ADDRESS_ASC' | 'ADDRESS_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
+/** Methods to use when ordering `WebauthnCredential`. */
+export type WebauthnCredentialOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'CREDENTIAL_ID_ASC' | 'CREDENTIAL_ID_DESC' | 'PUBLIC_KEY_ASC' | 'PUBLIC_KEY_DESC' | 'SIGN_COUNT_ASC' | 'SIGN_COUNT_DESC' | 'WEBAUTHN_USER_ID_ASC' | 'WEBAUTHN_USER_ID_DESC' | 'TRANSPORTS_ASC' | 'TRANSPORTS_DESC' | 'CREDENTIAL_DEVICE_TYPE_ASC' | 'CREDENTIAL_DEVICE_TYPE_DESC' | 'BACKUP_ELIGIBLE_ASC' | 'BACKUP_ELIGIBLE_DESC' | 'BACKUP_STATE_ASC' | 'BACKUP_STATE_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'LAST_USED_AT_ASC' | 'LAST_USED_AT_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `AppInvite`. */
 export type AppInviteOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'EMAIL_ASC' | 'EMAIL_DESC' | 'SENDER_ID_ASC' | 'SENDER_ID_DESC' | 'INVITE_TOKEN_ASC' | 'INVITE_TOKEN_DESC' | 'INVITE_VALID_ASC' | 'INVITE_VALID_DESC' | 'INVITE_LIMIT_ASC' | 'INVITE_LIMIT_DESC' | 'INVITE_COUNT_ASC' | 'INVITE_COUNT_DESC' | 'MULTIPLE_ASC' | 'MULTIPLE_DESC' | 'DATA_ASC' | 'DATA_DESC' | 'EXPIRES_AT_ASC' | 'EXPIRES_AT_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `AppClaimedInvite`. */
@@ -188,6 +197,8 @@ export type OrgClaimedInviteOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_K
 export type AuditLogOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'EVENT_ASC' | 'EVENT_DESC' | 'ACTOR_ID_ASC' | 'ACTOR_ID_DESC' | 'ORIGIN_ASC' | 'ORIGIN_DESC' | 'USER_AGENT_ASC' | 'USER_AGENT_DESC' | 'IP_ADDRESS_ASC' | 'IP_ADDRESS_DESC' | 'SUCCESS_ASC' | 'SUCCESS_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC';
 /** Methods to use when ordering `AppPermissionDefault`. */
 export type AppPermissionDefaultOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'PERMISSIONS_ASC' | 'PERMISSIONS_DESC';
+/** Methods to use when ordering `IdentityProvider`. */
+export type IdentityProviderOrderBy = 'NATURAL' | 'SLUG_ASC' | 'SLUG_DESC' | 'KIND_ASC' | 'KIND_DESC' | 'DISPLAY_NAME_ASC' | 'DISPLAY_NAME_DESC' | 'ENABLED_ASC' | 'ENABLED_DESC' | 'IS_BUILT_IN_ASC' | 'IS_BUILT_IN_DESC';
 /** Methods to use when ordering `Ref`. */
 export type RefOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'STORE_ID_ASC' | 'STORE_ID_DESC' | 'COMMIT_ID_ASC' | 'COMMIT_ID_DESC';
 /** Methods to use when ordering `Store`. */
@@ -212,20 +223,22 @@ export type AppPermissionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_
 export type OrgPermissionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'BITNUM_ASC' | 'BITNUM_DESC' | 'BITSTR_ASC' | 'BITSTR_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC';
 /** Methods to use when ordering `AppMembershipDefault`. */
 export type AppMembershipDefaultOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'CREATED_BY_ASC' | 'CREATED_BY_DESC' | 'UPDATED_BY_ASC' | 'UPDATED_BY_DESC' | 'IS_APPROVED_ASC' | 'IS_APPROVED_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC';
+/** Methods to use when ordering `OrgMembershipDefault`. */
+export type OrgMembershipDefaultOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'CREATED_BY_ASC' | 'CREATED_BY_DESC' | 'UPDATED_BY_ASC' | 'UPDATED_BY_DESC' | 'IS_APPROVED_ASC' | 'IS_APPROVED_DESC' | 'ENTITY_ID_ASC' | 'ENTITY_ID_DESC';
 /** Methods to use when ordering `Commit`. */
 export type CommitOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'MESSAGE_ASC' | 'MESSAGE_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'STORE_ID_ASC' | 'STORE_ID_DESC' | 'PARENT_IDS_ASC' | 'PARENT_IDS_DESC' | 'AUTHOR_ID_ASC' | 'AUTHOR_ID_DESC' | 'COMMITTER_ID_ASC' | 'COMMITTER_ID_DESC' | 'TREE_ID_ASC' | 'TREE_ID_DESC' | 'DATE_ASC' | 'DATE_DESC';
 /** Methods to use when ordering `RateLimitsModule`. */
 export type RateLimitsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'RATE_LIMIT_SETTINGS_TABLE_ID_ASC' | 'RATE_LIMIT_SETTINGS_TABLE_ID_DESC' | 'IP_RATE_LIMITS_TABLE_ID_ASC' | 'IP_RATE_LIMITS_TABLE_ID_DESC' | 'RATE_LIMITS_TABLE_ID_ASC' | 'RATE_LIMITS_TABLE_ID_DESC' | 'RATE_LIMIT_SETTINGS_TABLE_ASC' | 'RATE_LIMIT_SETTINGS_TABLE_DESC' | 'IP_RATE_LIMITS_TABLE_ASC' | 'IP_RATE_LIMITS_TABLE_DESC' | 'RATE_LIMITS_TABLE_ASC' | 'RATE_LIMITS_TABLE_DESC';
 /** Methods to use when ordering `MembershipType`. */
 export type MembershipTypeOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'PREFIX_ASC' | 'PREFIX_DESC' | 'PARENT_MEMBERSHIP_TYPE_ASC' | 'PARENT_MEMBERSHIP_TYPE_DESC' | 'HAS_USERS_TABLE_ENTRY_ASC' | 'HAS_USERS_TABLE_ENTRY_DESC';
-/** Methods to use when ordering `OrgMembershipDefault`. */
-export type OrgMembershipDefaultOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'CREATED_BY_ASC' | 'CREATED_BY_DESC' | 'UPDATED_BY_ASC' | 'UPDATED_BY_DESC' | 'IS_APPROVED_ASC' | 'IS_APPROVED_DESC' | 'ENTITY_ID_ASC' | 'ENTITY_ID_DESC' | 'DELETE_MEMBER_CASCADE_GROUPS_ASC' | 'DELETE_MEMBER_CASCADE_GROUPS_DESC' | 'CREATE_GROUPS_CASCADE_MEMBERS_ASC' | 'CREATE_GROUPS_CASCADE_MEMBERS_DESC';
 /** Methods to use when ordering `RlsModule`. */
 export type RlsModuleOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'SCHEMA_ID_ASC' | 'SCHEMA_ID_DESC' | 'PRIVATE_SCHEMA_ID_ASC' | 'PRIVATE_SCHEMA_ID_DESC' | 'SESSION_CREDENTIALS_TABLE_ID_ASC' | 'SESSION_CREDENTIALS_TABLE_ID_DESC' | 'SESSIONS_TABLE_ID_ASC' | 'SESSIONS_TABLE_ID_DESC' | 'USERS_TABLE_ID_ASC' | 'USERS_TABLE_ID_DESC' | 'AUTHENTICATE_ASC' | 'AUTHENTICATE_DESC' | 'AUTHENTICATE_STRICT_ASC' | 'AUTHENTICATE_STRICT_DESC' | 'CURRENT_ROLE_ASC' | 'CURRENT_ROLE_DESC' | 'CURRENT_ROLE_ID_ASC' | 'CURRENT_ROLE_ID_DESC';
 /** Methods to use when ordering `AppLevelRequirement`. */
 export type AppLevelRequirementOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'LEVEL_ASC' | 'LEVEL_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'REQUIRED_COUNT_ASC' | 'REQUIRED_COUNT_DESC' | 'PRIORITY_ASC' | 'PRIORITY_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `SqlAction`. */
 export type SqlActionOrderBy = 'NATURAL' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'DEPLOY_ASC' | 'DEPLOY_DESC' | 'DEPS_ASC' | 'DEPS_DESC' | 'PAYLOAD_ASC' | 'PAYLOAD_DESC' | 'CONTENT_ASC' | 'CONTENT_DESC' | 'REVERT_ASC' | 'REVERT_DESC' | 'VERIFY_ASC' | 'VERIFY_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'ACTION_ASC' | 'ACTION_DESC' | 'ACTION_ID_ASC' | 'ACTION_ID_DESC' | 'ACTOR_ID_ASC' | 'ACTOR_ID_DESC';
+/** Methods to use when ordering `OrgMembershipSetting`. */
+export type OrgMembershipSettingOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'CREATED_BY_ASC' | 'CREATED_BY_DESC' | 'UPDATED_BY_ASC' | 'UPDATED_BY_DESC' | 'ENTITY_ID_ASC' | 'ENTITY_ID_DESC' | 'DELETE_MEMBER_CASCADE_CHILDREN_ASC' | 'DELETE_MEMBER_CASCADE_CHILDREN_DESC' | 'CREATE_CHILD_CASCADE_OWNERS_ASC' | 'CREATE_CHILD_CASCADE_OWNERS_DESC' | 'CREATE_CHILD_CASCADE_ADMINS_ASC' | 'CREATE_CHILD_CASCADE_ADMINS_DESC' | 'CREATE_CHILD_CASCADE_MEMBERS_ASC' | 'CREATE_CHILD_CASCADE_MEMBERS_DESC' | 'ALLOW_EXTERNAL_MEMBERS_ASC' | 'ALLOW_EXTERNAL_MEMBERS_DESC' | 'POPULATE_MEMBER_EMAIL_ASC' | 'POPULATE_MEMBER_EMAIL_DESC';
 /** Methods to use when ordering `User`. */
 export type UserOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'USERNAME_ASC' | 'USERNAME_DESC' | 'DISPLAY_NAME_ASC' | 'DISPLAY_NAME_DESC' | 'PROFILE_PICTURE_ASC' | 'PROFILE_PICTURE_DESC' | 'SEARCH_TSV_ASC' | 'SEARCH_TSV_DESC' | 'TYPE_ASC' | 'TYPE_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'SEARCH_TSV_RANK_ASC' | 'SEARCH_TSV_RANK_DESC' | 'DISPLAY_NAME_TRGM_SIMILARITY_ASC' | 'DISPLAY_NAME_TRGM_SIMILARITY_DESC' | 'SEARCH_SCORE_ASC' | 'SEARCH_SCORE_DESC';
 /** Methods to use when ordering `AstMigration`. */
@@ -576,6 +589,18 @@ export interface DatabaseFilter {
     webauthnCredentialsModules?: DatabaseToManyWebauthnCredentialsModuleFilter;
     /** `webauthnCredentialsModules` exist. */
     webauthnCredentialsModulesExist?: boolean;
+    /** Filter by the object’s `webauthnAuthModules` relation. */
+    webauthnAuthModules?: DatabaseToManyWebauthnAuthModuleFilter;
+    /** `webauthnAuthModules` exist. */
+    webauthnAuthModulesExist?: boolean;
+    /** Filter by the object’s `identityProvidersModules` relation. */
+    identityProvidersModules?: DatabaseToManyIdentityProvidersModuleFilter;
+    /** `identityProvidersModules` exist. */
+    identityProvidersModulesExist?: boolean;
+    /** Filter by the object’s `notificationsModules` relation. */
+    notificationsModules?: DatabaseToManyNotificationsModuleFilter;
+    /** `notificationsModules` exist. */
+    notificationsModulesExist?: boolean;
     /** Filter by the object’s `databaseProvisionModules` relation. */
     databaseProvisionModules?: DatabaseToManyDatabaseProvisionModuleFilter;
     /** `databaseProvisionModules` exist. */
@@ -651,6 +676,10 @@ export interface UserFilter {
     orgMembershipDefaultByEntityId?: OrgMembershipDefaultFilter;
     /** A related `orgMembershipDefaultByEntityId` exists. */
     orgMembershipDefaultByEntityIdExists?: boolean;
+    /** Filter by the object’s `orgMembershipSettingByEntityId` relation. */
+    orgMembershipSettingByEntityId?: OrgMembershipSettingFilter;
+    /** A related `orgMembershipSettingByEntityId` exists. */
+    orgMembershipSettingByEntityIdExists?: boolean;
     /** Filter by the object’s `orgMembersByActorId` relation. */
     orgMembersByActorId?: UserToManyOrgMemberFilter;
     /** `orgMembersByActorId` exist. */
@@ -771,6 +800,10 @@ export interface UserFilter {
     ownedCryptoAddresses?: UserToManyCryptoAddressFilter;
     /** `ownedCryptoAddresses` exist. */
     ownedCryptoAddressesExist?: boolean;
+    /** Filter by the object’s `ownedWebauthnCredentials` relation. */
+    ownedWebauthnCredentials?: UserToManyWebauthnCredentialFilter;
+    /** `ownedWebauthnCredentials` exist. */
+    ownedWebauthnCredentialsExist?: boolean;
     /** Filter by the object’s `appInvitesBySenderId` relation. */
     appInvitesBySenderId?: UserToManyAppInviteFilter;
     /** `appInvitesBySenderId` exist. */
@@ -1238,10 +1271,6 @@ export interface OrgMembershipDefaultFilter {
     isApproved?: BooleanFilter;
     /** Filter by the object’s `entityId` field. */
     entityId?: UUIDFilter;
-    /** Filter by the object’s `deleteMemberCascadeGroups` field. */
-    deleteMemberCascadeGroups?: BooleanFilter;
-    /** Filter by the object’s `createGroupsCascadeMembers` field. */
-    createGroupsCascadeMembers?: BooleanFilter;
     /** Checks for all expressions in this list. */
     and?: OrgMembershipDefaultFilter[];
     /** Checks for any expressions in this list. */
@@ -1251,6 +1280,41 @@ export interface OrgMembershipDefaultFilter {
     /** Filter by the object’s `entity` relation. */
     entity?: UserFilter;
 }
+/** A filter to be used against `OrgMembershipSetting` object types. All fields are combined with a logical ‘and.’ */
+export interface OrgMembershipSettingFilter {
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+    /** Filter by the object’s `createdBy` field. */
+    createdBy?: UUIDFilter;
+    /** Filter by the object’s `updatedBy` field. */
+    updatedBy?: UUIDFilter;
+    /** Filter by the object’s `entityId` field. */
+    entityId?: UUIDFilter;
+    /** Filter by the object’s `deleteMemberCascadeChildren` field. */
+    deleteMemberCascadeChildren?: BooleanFilter;
+    /** Filter by the object’s `createChildCascadeOwners` field. */
+    createChildCascadeOwners?: BooleanFilter;
+    /** Filter by the object’s `createChildCascadeAdmins` field. */
+    createChildCascadeAdmins?: BooleanFilter;
+    /** Filter by the object’s `createChildCascadeMembers` field. */
+    createChildCascadeMembers?: BooleanFilter;
+    /** Filter by the object’s `allowExternalMembers` field. */
+    allowExternalMembers?: BooleanFilter;
+    /** Filter by the object’s `populateMemberEmail` field. */
+    populateMemberEmail?: BooleanFilter;
+    /** Checks for all expressions in this list. */
+    and?: OrgMembershipSettingFilter[];
+    /** Checks for any expressions in this list. */
+    or?: OrgMembershipSettingFilter[];
+    /** Negates the expression. */
+    not?: OrgMembershipSettingFilter;
+    /** Filter by the object’s `entity` relation. */
+    entity?: UserFilter;
+}
 /** A filter to be used against many `OrgMember` object types. All fields are combined with a logical ‘and.’ */
 export interface UserToManyOrgMemberFilter {
     /** Filters to entities where at least one related entity matches. */
@@ -1713,6 +1777,8 @@ export interface EmailFilter {
     isVerified?: BooleanFilter;
     /** Filter by the object’s `isPrimary` field. */
     isPrimary?: BooleanFilter;
+    /** Filter by the object’s `name` field. */
+    name?: StringFilter;
     /** Filter by the object’s `createdAt` field. */
     createdAt?: DatetimeFilter;
     /** Filter by the object’s `updatedAt` field. */
@@ -1826,6 +1892,8 @@ export interface PhoneNumberFilter {
     isVerified?: BooleanFilter;
     /** Filter by the object’s `isPrimary` field. */
     isPrimary?: BooleanFilter;
+    /** Filter by the object’s `name` field. */
+    name?: StringFilter;
     /** Filter by the object’s `createdAt` field. */
     createdAt?: DatetimeFilter;
     /** Filter by the object’s `updatedAt` field. */
@@ -1860,6 +1928,8 @@ export interface CryptoAddressFilter {
     isVerified?: BooleanFilter;
     /** Filter by the object’s `isPrimary` field. */
     isPrimary?: BooleanFilter;
+    /** Filter by the object’s `name` field. */
+    name?: StringFilter;
     /** Filter by the object’s `createdAt` field. */
     createdAt?: DatetimeFilter;
     /** Filter by the object’s `updatedAt` field. */
@@ -1873,6 +1943,71 @@ export interface CryptoAddressFilter {
     /** Filter by the object’s `owner` relation. */
     owner?: UserFilter;
 }
+/** A filter to be used against many `WebauthnCredential` object types. All fields are combined with a logical ‘and.’ */
+export interface UserToManyWebauthnCredentialFilter {
+    /** Filters to entities where at least one related entity matches. */
+    some?: WebauthnCredentialFilter;
+    /** Filters to entities where every related entity matches. */
+    every?: WebauthnCredentialFilter;
+    /** Filters to entities where no related entity matches. */
+    none?: WebauthnCredentialFilter;
+}
+/** A filter to be used against `WebauthnCredential` object types. All fields are combined with a logical ‘and.’ */
+export interface WebauthnCredentialFilter {
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `ownerId` field. */
+    ownerId?: UUIDFilter;
+    /** Filter by the object’s `credentialId` field. */
+    credentialId?: StringFilter;
+    /** Filter by the object’s `publicKey` field. */
+    publicKey?: Base64EncodedBinaryFilter;
+    /** Filter by the object’s `signCount` field. */
+    signCount?: BigIntFilter;
+    /** Filter by the object’s `webauthnUserId` field. */
+    webauthnUserId?: StringFilter;
+    /** Filter by the object’s `transports` field. */
+    transports?: StringListFilter;
+    /** Filter by the object’s `credentialDeviceType` field. */
+    credentialDeviceType?: StringFilter;
+    /** Filter by the object’s `backupEligible` field. */
+    backupEligible?: BooleanFilter;
+    /** Filter by the object’s `backupState` field. */
+    backupState?: BooleanFilter;
+    /** Filter by the object’s `name` field. */
+    name?: StringFilter;
+    /** Filter by the object’s `lastUsedAt` field. */
+    lastUsedAt?: DatetimeFilter;
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+    /** Checks for all expressions in this list. */
+    and?: WebauthnCredentialFilter[];
+    /** Checks for any expressions in this list. */
+    or?: WebauthnCredentialFilter[];
+    /** Negates the expression. */
+    not?: WebauthnCredentialFilter;
+    /** Filter by the object’s `owner` relation. */
+    owner?: UserFilter;
+}
+/** A filter to be used against Base64EncodedBinary fields. All fields are combined with a logical ‘and.’ */
+export interface Base64EncodedBinaryFilter {
+    /** Is null (if `true` is specified) or is not null (if `false` is specified). */
+    isNull?: boolean;
+    /** Equal to the specified value. */
+    equalTo?: Base64EncodedBinary;
+    /** Not equal to the specified value. */
+    notEqualTo?: Base64EncodedBinary;
+    /** Not equal to the specified value, treating null like an ordinary value. */
+    distinctFrom?: Base64EncodedBinary;
+    /** Equal to the specified value, treating null like an ordinary value. */
+    notDistinctFrom?: Base64EncodedBinary;
+    /** Included in the specified list. */
+    in?: Base64EncodedBinary[];
+    /** Not included in the specified list. */
+    notIn?: Base64EncodedBinary[];
+}
 /** A filter to be used against many `AppInvite` object types. All fields are combined with a logical ‘and.’ */
 export interface UserToManyAppInviteFilter {
     /** Filters to entities where at least one related entity matches. */
@@ -2233,6 +2368,14 @@ export interface SchemaFilter {
     sessionSecretsModules?: SchemaToManySessionSecretsModuleFilter;
     /** `sessionSecretsModules` exist. */
     sessionSecretsModulesExist?: boolean;
+    /** Filter by the object’s `identityProvidersModulesByPrivateSchemaId` relation. */
+    identityProvidersModulesByPrivateSchemaId?: SchemaToManyIdentityProvidersModuleFilter;
+    /** `identityProvidersModulesByPrivateSchemaId` exist. */
+    identityProvidersModulesByPrivateSchemaIdExist?: boolean;
+    /** Filter by the object’s `identityProvidersModules` relation. */
+    identityProvidersModules?: SchemaToManyIdentityProvidersModuleFilter;
+    /** `identityProvidersModules` exist. */
+    identityProvidersModulesExist?: boolean;
 }
 /** A filter to be used against many `Table` object types. All fields are combined with a logical ‘and.’ */
 export interface SchemaToManyTableFilter {
@@ -2381,6 +2524,10 @@ export interface TableFilter {
     sessionSecretsModules?: TableToManySessionSecretsModuleFilter;
     /** `sessionSecretsModules` exist. */
     sessionSecretsModulesExist?: boolean;
+    /** Filter by the object’s `identityProvidersModules` relation. */
+    identityProvidersModules?: TableToManyIdentityProvidersModuleFilter;
+    /** `identityProvidersModules` exist. */
+    identityProvidersModulesExist?: boolean;
 }
 /** A filter to be used against many `CheckConstraint` object types. All fields are combined with a logical ‘and.’ */
 export interface TableToManyCheckConstraintFilter {
@@ -3214,22 +3361,10 @@ export interface SecureTableProvisionFilter {
     useRls?: BooleanFilter;
     /** Filter by the object’s `fields` field. */
     fields?: JSONListFilter;
-    /** Filter by the object’s `grantRoles` field. */
-    grantRoles?: StringListFilter;
-    /** Filter by the object’s `grantPrivileges` field. */
-    grantPrivileges?: JSONListFilter;
-    /** Filter by the object’s `policyType` field. */
-    policyType?: StringFilter;
-    /** Filter by the object’s `policyPrivileges` field. */
-    policyPrivileges?: StringListFilter;
-    /** Filter by the object’s `policyRole` field. */
-    policyRole?: StringFilter;
-    /** Filter by the object’s `policyPermissive` field. */
-    policyPermissive?: BooleanFilter;
-    /** Filter by the object’s `policyName` field. */
-    policyName?: StringFilter;
-    /** Filter by the object’s `policyData` field. */
-    policyData?: JSONFilter;
+    /** Filter by the object’s `grants` field. */
+    grants?: JSONFilter;
+    /** Filter by the object’s `policies` field. */
+    policies?: JSONFilter;
     /** Filter by the object’s `outFields` field. */
     outFields?: UUIDListFilter;
     /** Checks for all expressions in this list. */
@@ -3331,22 +3466,10 @@ export interface RelationProvisionFilter {
     exposeInApi?: BooleanFilter;
     /** Filter by the object’s `nodes` field. */
     nodes?: JSONFilter;
-    /** Filter by the object’s `grantRoles` field. */
-    grantRoles?: StringListFilter;
-    /** Filter by the object’s `grantPrivileges` field. */
-    grantPrivileges?: JSONListFilter;
-    /** Filter by the object’s `policyType` field. */
-    policyType?: StringFilter;
-    /** Filter by the object’s `policyPrivileges` field. */
-    policyPrivileges?: StringListFilter;
-    /** Filter by the object’s `policyRole` field. */
-    policyRole?: StringFilter;
-    /** Filter by the object’s `policyPermissive` field. */
-    policyPermissive?: BooleanFilter;
-    /** Filter by the object’s `policyName` field. */
-    policyName?: StringFilter;
-    /** Filter by the object’s `policyData` field. */
-    policyData?: JSONFilter;
+    /** Filter by the object’s `grants` field. */
+    grants?: JSONFilter;
+    /** Filter by the object’s `policies` field. */
+    policies?: JSONFilter;
     /** Filter by the object’s `outFieldId` field. */
     outFieldId?: UUIDFilter;
     /** Filter by the object’s `outJunctionTableId` field. */
@@ -3406,6 +3529,44 @@ export interface SessionSecretsModuleFilter {
     /** Filter by the object’s `table` relation. */
     table?: TableFilter;
 }
+/** A filter to be used against many `IdentityProvidersModule` object types. All fields are combined with a logical ‘and.’ */
+export interface TableToManyIdentityProvidersModuleFilter {
+    /** Filters to entities where at least one related entity matches. */
+    some?: IdentityProvidersModuleFilter;
+    /** Filters to entities where every related entity matches. */
+    every?: IdentityProvidersModuleFilter;
+    /** Filters to entities where no related entity matches. */
+    none?: IdentityProvidersModuleFilter;
+}
+/** A filter to be used against `IdentityProvidersModule` object types. All fields are combined with a logical ‘and.’ */
+export interface IdentityProvidersModuleFilter {
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `databaseId` field. */
+    databaseId?: UUIDFilter;
+    /** Filter by the object’s `schemaId` field. */
+    schemaId?: UUIDFilter;
+    /** Filter by the object’s `privateSchemaId` field. */
+    privateSchemaId?: UUIDFilter;
+    /** Filter by the object’s `tableId` field. */
+    tableId?: UUIDFilter;
+    /** Filter by the object’s `tableName` field. */
+    tableName?: StringFilter;
+    /** Checks for all expressions in this list. */
+    and?: IdentityProvidersModuleFilter[];
+    /** Checks for any expressions in this list. */
+    or?: IdentityProvidersModuleFilter[];
+    /** Negates the expression. */
+    not?: IdentityProvidersModuleFilter;
+    /** Filter by the object’s `database` relation. */
+    database?: DatabaseFilter;
+    /** Filter by the object’s `privateSchema` relation. */
+    privateSchema?: SchemaFilter;
+    /** Filter by the object’s `schema` relation. */
+    schema?: SchemaFilter;
+    /** Filter by the object’s `table` relation. */
+    table?: TableFilter;
+}
 /** A filter to be used against many `SchemaGrant` object types. All fields are combined with a logical ‘and.’ */
 export interface SchemaToManySchemaGrantFilter {
     /** Filters to entities where at least one related entity matches. */
@@ -4102,6 +4263,15 @@ export interface SchemaToManySessionSecretsModuleFilter {
     /** Filters to entities where no related entity matches. */
     none?: SessionSecretsModuleFilter;
 }
+/** A filter to be used against many `IdentityProvidersModule` object types. All fields are combined with a logical ‘and.’ */
+export interface SchemaToManyIdentityProvidersModuleFilter {
+    /** Filters to entities where at least one related entity matches. */
+    some?: IdentityProvidersModuleFilter;
+    /** Filters to entities where every related entity matches. */
+    every?: IdentityProvidersModuleFilter;
+    /** Filters to entities where no related entity matches. */
+    none?: IdentityProvidersModuleFilter;
+}
 /** A filter to be used against many `Table` object types. All fields are combined with a logical ‘and.’ */
 export interface DatabaseToManyTableFilter {
     /** Filters to entities where at least one related entity matches. */
@@ -5019,6 +5189,10 @@ export interface MembershipsModuleFilter {
     membershipDefaultsTableId?: UUIDFilter;
     /** Filter by the object’s `membershipDefaultsTableName` field. */
     membershipDefaultsTableName?: StringFilter;
+    /** Filter by the object’s `membershipSettingsTableId` field. */
+    membershipSettingsTableId?: UUIDFilter;
+    /** Filter by the object’s `membershipSettingsTableName` field. */
+    membershipSettingsTableName?: StringFilter;
     /** Filter by the object’s `grantsTableId` field. */
     grantsTableId?: UUIDFilter;
     /** Filter by the object’s `grantsTableName` field. */
@@ -5093,6 +5267,10 @@ export interface MembershipsModuleFilter {
     membersTable?: TableFilter;
     /** Filter by the object’s `membershipDefaultsTable` relation. */
     membershipDefaultsTable?: TableFilter;
+    /** Filter by the object’s `membershipSettingsTable` relation. */
+    membershipSettingsTable?: TableFilter;
+    /** A related `membershipSettingsTable` exists. */
+    membershipSettingsTableExists?: boolean;
     /** Filter by the object’s `membershipsTable` relation. */
     membershipsTable?: TableFilter;
     /** Filter by the object’s `permissionsTable` relation. */
@@ -5889,6 +6067,10 @@ export interface StorageModuleFilter {
     filesTableName?: StringFilter;
     /** Filter by the object’s `uploadRequestsTableName` field. */
     uploadRequestsTableName?: StringFilter;
+    /** Filter by the object’s `membershipType` field. */
+    membershipType?: IntFilter;
+    /** Filter by the object’s `policies` field. */
+    policies?: StringListFilter;
     /** Filter by the object’s `entityTableId` field. */
     entityTableId?: UUIDFilter;
     /** Filter by the object’s `endpoint` field. */
@@ -5965,6 +6147,10 @@ export interface EntityTypeProvisionFilter {
     hasProfiles?: BooleanFilter;
     /** Filter by the object’s `hasLevels` field. */
     hasLevels?: BooleanFilter;
+    /** Filter by the object’s `hasStorage` field. */
+    hasStorage?: BooleanFilter;
+    /** Filter by the object’s `storageConfig` field. */
+    storageConfig?: JSONFilter;
     /** Filter by the object’s `skipEntityPolicies` field. */
     skipEntityPolicies?: BooleanFilter;
     /** Filter by the object’s `tableProvision` field. */
@@ -5977,6 +6163,12 @@ export interface EntityTypeProvisionFilter {
     outEntityTableName?: StringFilter;
     /** Filter by the object’s `outInstalledModules` field. */
     outInstalledModules?: StringListFilter;
+    /** Filter by the object’s `outStorageModuleId` field. */
+    outStorageModuleId?: UUIDFilter;
+    /** Filter by the object’s `outBucketsTableId` field. */
+    outBucketsTableId?: UUIDFilter;
+    /** Filter by the object’s `outFilesTableId` field. */
+    outFilesTableId?: UUIDFilter;
     /** Checks for all expressions in this list. */
     and?: EntityTypeProvisionFilter[];
     /** Checks for any expressions in this list. */
@@ -6105,6 +6297,149 @@ export interface WebauthnCredentialsModuleFilter {
     /** Filter by the object’s `table` relation. */
     table?: TableFilter;
 }
+/** A filter to be used against many `WebauthnAuthModule` object types. All fields are combined with a logical ‘and.’ */
+export interface DatabaseToManyWebauthnAuthModuleFilter {
+    /** Filters to entities where at least one related entity matches. */
+    some?: WebauthnAuthModuleFilter;
+    /** Filters to entities where every related entity matches. */
+    every?: WebauthnAuthModuleFilter;
+    /** Filters to entities where no related entity matches. */
+    none?: WebauthnAuthModuleFilter;
+}
+/** A filter to be used against `WebauthnAuthModule` object types. All fields are combined with a logical ‘and.’ */
+export interface WebauthnAuthModuleFilter {
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `databaseId` field. */
+    databaseId?: UUIDFilter;
+    /** Filter by the object’s `schemaId` field. */
+    schemaId?: UUIDFilter;
+    /** Filter by the object’s `usersTableId` field. */
+    usersTableId?: UUIDFilter;
+    /** Filter by the object’s `credentialsTableId` field. */
+    credentialsTableId?: UUIDFilter;
+    /** Filter by the object’s `sessionsTableId` field. */
+    sessionsTableId?: UUIDFilter;
+    /** Filter by the object’s `sessionCredentialsTableId` field. */
+    sessionCredentialsTableId?: UUIDFilter;
+    /** Filter by the object’s `sessionSecretsTableId` field. */
+    sessionSecretsTableId?: UUIDFilter;
+    /** Filter by the object’s `authSettingsTableId` field. */
+    authSettingsTableId?: UUIDFilter;
+    /** Filter by the object’s `rpId` field. */
+    rpId?: StringFilter;
+    /** Filter by the object’s `rpName` field. */
+    rpName?: StringFilter;
+    /** Filter by the object’s `originAllowlist` field. */
+    originAllowlist?: StringListFilter;
+    /** Filter by the object’s `attestationType` field. */
+    attestationType?: StringFilter;
+    /** Filter by the object’s `requireUserVerification` field. */
+    requireUserVerification?: BooleanFilter;
+    /** Filter by the object’s `residentKey` field. */
+    residentKey?: StringFilter;
+    /** Filter by the object’s `challengeExpiry` field. */
+    challengeExpiry?: IntervalFilter;
+    /** Checks for all expressions in this list. */
+    and?: WebauthnAuthModuleFilter[];
+    /** Checks for any expressions in this list. */
+    or?: WebauthnAuthModuleFilter[];
+    /** Negates the expression. */
+    not?: WebauthnAuthModuleFilter;
+    /** Filter by the object’s `authSettingsTable` relation. */
+    authSettingsTable?: TableFilter;
+    /** Filter by the object’s `credentialsTable` relation. */
+    credentialsTable?: TableFilter;
+    /** Filter by the object’s `database` relation. */
+    database?: DatabaseFilter;
+    /** Filter by the object’s `schema` relation. */
+    schema?: SchemaFilter;
+    /** Filter by the object’s `sessionCredentialsTable` relation. */
+    sessionCredentialsTable?: TableFilter;
+    /** Filter by the object’s `sessionSecretsTable` relation. */
+    sessionSecretsTable?: TableFilter;
+    /** Filter by the object’s `sessionsTable` relation. */
+    sessionsTable?: TableFilter;
+    /** Filter by the object’s `usersTable` relation. */
+    usersTable?: TableFilter;
+}
+/** A filter to be used against many `IdentityProvidersModule` object types. All fields are combined with a logical ‘and.’ */
+export interface DatabaseToManyIdentityProvidersModuleFilter {
+    /** Filters to entities where at least one related entity matches. */
+    some?: IdentityProvidersModuleFilter;
+    /** Filters to entities where every related entity matches. */
+    every?: IdentityProvidersModuleFilter;
+    /** Filters to entities where no related entity matches. */
+    none?: IdentityProvidersModuleFilter;
+}
+/** A filter to be used against many `NotificationsModule` object types. All fields are combined with a logical ‘and.’ */
+export interface DatabaseToManyNotificationsModuleFilter {
+    /** Filters to entities where at least one related entity matches. */
+    some?: NotificationsModuleFilter;
+    /** Filters to entities where every related entity matches. */
+    every?: NotificationsModuleFilter;
+    /** Filters to entities where no related entity matches. */
+    none?: NotificationsModuleFilter;
+}
+/** A filter to be used against `NotificationsModule` object types. All fields are combined with a logical ‘and.’ */
+export interface NotificationsModuleFilter {
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `databaseId` field. */
+    databaseId?: UUIDFilter;
+    /** Filter by the object’s `schemaId` field. */
+    schemaId?: UUIDFilter;
+    /** Filter by the object’s `privateSchemaId` field. */
+    privateSchemaId?: UUIDFilter;
+    /** Filter by the object’s `notificationsTableId` field. */
+    notificationsTableId?: UUIDFilter;
+    /** Filter by the object’s `eventsTableId` field. */
+    eventsTableId?: UUIDFilter;
+    /** Filter by the object’s `preferencesTableId` field. */
+    preferencesTableId?: UUIDFilter;
+    /** Filter by the object’s `channelsTableId` field. */
+    channelsTableId?: UUIDFilter;
+    /** Filter by the object’s `deliveryLogTableId` field. */
+    deliveryLogTableId?: UUIDFilter;
+    /** Filter by the object’s `ownerTableId` field. */
+    ownerTableId?: UUIDFilter;
+    /** Filter by the object’s `userSettingsTableId` field. */
+    userSettingsTableId?: UUIDFilter;
+    /** Filter by the object’s `organizationSettingsTableId` field. */
+    organizationSettingsTableId?: UUIDFilter;
+    /** Checks for all expressions in this list. */
+    and?: NotificationsModuleFilter[];
+    /** Checks for any expressions in this list. */
+    or?: NotificationsModuleFilter[];
+    /** Negates the expression. */
+    not?: NotificationsModuleFilter;
+    /** Filter by the object’s `channelsTableByChannelsTableId` relation. */
+    channelsTableByChannelsTableId?: TableFilter;
+    /** Filter by the object’s `database` relation. */
+    database?: DatabaseFilter;
+    /** Filter by the object’s `deliveryLogTableByDeliveryLogTableId` relation. */
+    deliveryLogTableByDeliveryLogTableId?: TableFilter;
+    /** Filter by the object’s `eventsTableByEventsTableId` relation. */
+    eventsTableByEventsTableId?: TableFilter;
+    /** Filter by the object’s `notificationsTableByNotificationsTableId` relation. */
+    notificationsTableByNotificationsTableId?: TableFilter;
+    /** Filter by the object’s `organizationSettingsTableByOrganizationSettingsTableId` relation. */
+    organizationSettingsTableByOrganizationSettingsTableId?: TableFilter;
+    /** A related `organizationSettingsTableByOrganizationSettingsTableId` exists. */
+    organizationSettingsTableByOrganizationSettingsTableIdExists?: boolean;
+    /** Filter by the object’s `ownerTable` relation. */
+    ownerTable?: TableFilter;
+    /** Filter by the object’s `preferencesTableByPreferencesTableId` relation. */
+    preferencesTableByPreferencesTableId?: TableFilter;
+    /** Filter by the object’s `privateSchema` relation. */
+    privateSchema?: SchemaFilter;
+    /** Filter by the object’s `schema` relation. */
+    schema?: SchemaFilter;
+    /** Filter by the object’s `userSettingsTableByUserSettingsTableId` relation. */
+    userSettingsTableByUserSettingsTableId?: TableFilter;
+    /** A related `userSettingsTableByUserSettingsTableId` exists. */
+    userSettingsTableByUserSettingsTableIdExists?: boolean;
+}
 /** A filter to be used against many `DatabaseProvisionModule` object types. All fields are combined with a logical ‘and.’ */
 export interface DatabaseToManyDatabaseProvisionModuleFilter {
     /** Filters to entities where at least one related entity matches. */
@@ -6168,6 +6503,25 @@ export interface AppPermissionDefaultFilter {
     /** Negates the expression. */
     not?: AppPermissionDefaultFilter;
 }
+/** A filter to be used against `IdentityProvider` object types. All fields are combined with a logical ‘and.’ */
+export interface IdentityProviderFilter {
+    /** Filter by the object’s `slug` field. */
+    slug?: StringFilter;
+    /** Filter by the object’s `kind` field. */
+    kind?: StringFilter;
+    /** Filter by the object’s `displayName` field. */
+    displayName?: StringFilter;
+    /** Filter by the object’s `enabled` field. */
+    enabled?: BooleanFilter;
+    /** Filter by the object’s `isBuiltIn` field. */
+    isBuiltIn?: BooleanFilter;
+    /** Checks for all expressions in this list. */
+    and?: IdentityProviderFilter[];
+    /** Checks for any expressions in this list. */
+    or?: IdentityProviderFilter[];
+    /** Negates the expression. */
+    not?: IdentityProviderFilter;
+}
 /** A filter to be used against `Ref` object types. All fields are combined with a logical ‘and.’ */
 export interface RefFilter {
     /** Filter by the object’s `id` field. */
@@ -6641,12 +6995,6 @@ export interface CopyTemplateToBlueprintInput {
     nameOverride?: string;
     displayNameOverride?: string;
 }
-export interface CreateApiKeyInput {
-    clientMutationId?: string;
-    keyName: string;
-    accessLevel?: string;
-    mfaLevel?: string;
-}
 export interface ProvisionSpatialRelationInput {
     clientMutationId?: string;
     pDatabaseId?: string;
@@ -6761,7 +7109,6 @@ export interface ProvisionRelationInput {
     exposeInApi?: boolean;
     nodes?: unknown;
     grants?: unknown;
-    grantRoles?: string[];
     policies?: unknown;
 }
 export interface ApplyRlsInput {
@@ -6793,6 +7140,13 @@ export interface ExtendTokenExpiresInput {
     clientMutationId?: string;
     amount?: IntervalInput;
 }
+export interface CreateApiKeyInput {
+    clientMutationId?: string;
+    keyName?: string;
+    accessLevel?: string;
+    mfaLevel?: string;
+    expiresIn?: IntervalInput;
+}
 export interface SignUpInput {
     clientMutationId?: string;
     email?: string;
@@ -6827,7 +7181,6 @@ export interface ProvisionTableInput {
     fields?: unknown;
     policies?: unknown;
     grants?: unknown;
-    grantRoles?: string[];
     useRls?: boolean;
     indexes?: unknown;
     fullTextSearches?: unknown;
@@ -6921,6 +7274,19 @@ export interface AppPermissionDefaultInput {
     /** Default permission bitmask applied to new members */
     permissions?: string;
 }
+export interface CreateIdentityProviderInput {
+    clientMutationId?: string;
+    /** The `IdentityProvider` to be created by this mutation. */
+    identityProvider: IdentityProviderInput;
+}
+/** An input for mutations affecting `IdentityProvider` */
+export interface IdentityProviderInput {
+    slug?: string;
+    kind?: string;
+    displayName?: string;
+    enabled?: boolean;
+    isBuiltIn?: boolean;
+}
 export interface CreateRefInput {
     clientMutationId?: string;
     /** The `Ref` to be created by this mutation. */
@@ -7095,6 +7461,21 @@ export interface ViewRuleInput {
     /** NOTHING (for read-only) or custom action */
     action?: string;
 }
+export interface CreateIdentityProvidersModuleInput {
+    clientMutationId?: string;
+    /** The `IdentityProvidersModule` to be created by this mutation. */
+    identityProvidersModule: IdentityProvidersModuleInput;
+}
+/** An input for mutations affecting `IdentityProvidersModule` */
+export interface IdentityProvidersModuleInput {
+    id?: string;
+    databaseId: string;
+    schemaId?: string;
+    /** Private schema that hosts SECURITY DEFINER admin helpers which write to identity_providers (create / update / enable / disable / rotate-secret / delete) and the per-app quota check. */
+    privateSchemaId?: string;
+    tableId?: string;
+    tableName?: string;
+}
 export interface CreateSessionSecretsModuleInput {
     clientMutationId?: string;
     /** The `SessionSecretsModule` to be created by this mutation. */
@@ -7316,7 +7697,7 @@ export interface WebauthnCredentialsModuleInput {
     id?: string;
     databaseId: string;
     schemaId?: string;
-    /** Reserved for future SECURITY DEFINER helpers on webauthn_credentials; unused in Phase 11a. */
+    /** Private schema that hosts SECURITY DEFINER helpers which write to webauthn_credentials (registration / counter-bump / delete). */
     privateSchemaId?: string;
     tableId?: string;
     ownerTableId?: string;
@@ -7358,24 +7739,6 @@ export interface OrgOwnerGrantInput {
     createdAt?: string;
     updatedAt?: string;
 }
-export interface CreateCryptoAddressInput {
-    clientMutationId?: string;
-    /** The `CryptoAddress` to be created by this mutation. */
-    cryptoAddress: CryptoAddressInput;
-}
-/** An input for mutations affecting `CryptoAddress` */
-export interface CryptoAddressInput {
-    id?: string;
-    ownerId?: string;
-    /** The cryptocurrency wallet address, validated against network-specific patterns */
-    address: string;
-    /** Whether ownership of this address has been cryptographically verified */
-    isVerified?: boolean;
-    /** Whether this is the user's primary cryptocurrency address */
-    isPrimary?: boolean;
-    createdAt?: string;
-    updatedAt?: string;
-}
 export interface CreateUserConnectedAccountInput {
     clientMutationId?: string;
     /** The `UserConnectedAccount` to be created by this mutation. */
@@ -7439,23 +7802,23 @@ export interface CryptoAddressesModuleInput {
     tableName: string;
     cryptoNetwork?: string;
 }
-export interface CreatePhoneNumberInput {
+export interface CreateCryptoAddressInput {
     clientMutationId?: string;
-    /** The `PhoneNumber` to be created by this mutation. */
-    phoneNumber: PhoneNumberInput;
+    /** The `CryptoAddress` to be created by this mutation. */
+    cryptoAddress: CryptoAddressInput;
 }
-/** An input for mutations affecting `PhoneNumber` */
-export interface PhoneNumberInput {
+/** An input for mutations affecting `CryptoAddress` */
+export interface CryptoAddressInput {
     id?: string;
     ownerId?: string;
-    /** Country calling code (e.g. +1, +44) */
-    cc: string;
-    /** The phone number without country code */
-    number: string;
-    /** Whether the phone number has been verified via SMS code */
+    /** The cryptocurrency wallet address, validated against network-specific patterns */
+    address: string;
+    /** Whether ownership of this address has been cryptographically verified */
     isVerified?: boolean;
-    /** Whether this is the user's primary phone number */
+    /** Whether this is the user's primary cryptocurrency address */
     isPrimary?: boolean;
+    /** Optional user-provided label for this address (e.g. "Main wallet", "Hardware wallet"). */
+    name?: string;
     createdAt?: string;
     updatedAt?: string;
 }
@@ -7596,6 +7959,23 @@ export interface AppMembershipDefaultInput {
     /** Whether new members are automatically verified upon joining */
     isVerified?: boolean;
 }
+export interface CreateOrgMembershipDefaultInput {
+    clientMutationId?: string;
+    /** The `OrgMembershipDefault` to be created by this mutation. */
+    orgMembershipDefault: OrgMembershipDefaultInput;
+}
+/** An input for mutations affecting `OrgMembershipDefault` */
+export interface OrgMembershipDefaultInput {
+    id?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    createdBy?: string;
+    updatedBy?: string;
+    /** Whether new members are automatically approved upon joining */
+    isApproved?: boolean;
+    /** References the entity these membership defaults apply to */
+    entityId: string;
+}
 export interface CreateFullTextSearchInput {
     clientMutationId?: string;
     /** The `FullTextSearch` to be created by this mutation. */
@@ -7696,20 +8076,42 @@ export interface OrgChartEdgeGrantInput {
     /** Timestamp when this grant or revocation was recorded */
     createdAt?: string;
 }
-export interface CreateOrgLimitInput {
+export interface CreatePhoneNumberInput {
     clientMutationId?: string;
-    /** The `OrgLimit` to be created by this mutation. */
-    orgLimit: OrgLimitInput;
+    /** The `PhoneNumber` to be created by this mutation. */
+    phoneNumber: PhoneNumberInput;
 }
-/** An input for mutations affecting `OrgLimit` */
-export interface OrgLimitInput {
+/** An input for mutations affecting `PhoneNumber` */
+export interface PhoneNumberInput {
     id?: string;
-    /** Name identifier of the limit being tracked */
-    name?: string;
-    /** User whose usage is being tracked against this limit */
-    actorId: string;
-    /** Current usage count for this actor and limit */
-    num?: number;
+    ownerId?: string;
+    /** Country calling code (e.g. +1, +44) */
+    cc: string;
+    /** The phone number without country code */
+    number: string;
+    /** Whether the phone number has been verified via SMS code */
+    isVerified?: boolean;
+    /** Whether this is the user's primary phone number */
+    isPrimary?: boolean;
+    /** Optional user-provided label for this phone number (e.g. "Mobile", "Work"). */
+    name?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+export interface CreateOrgLimitInput {
+    clientMutationId?: string;
+    /** The `OrgLimit` to be created by this mutation. */
+    orgLimit: OrgLimitInput;
+}
+/** An input for mutations affecting `OrgLimit` */
+export interface OrgLimitInput {
+    id?: string;
+    /** Name identifier of the limit being tracked */
+    name?: string;
+    /** User whose usage is being tracked against this limit */
+    actorId: string;
+    /** Current usage count for this actor and limit */
+    num?: number;
     /** Maximum allowed usage; NULL means use the default limit value */
     max?: number;
     entityId: string;
@@ -7831,27 +8233,6 @@ export interface OrgGrantInput {
     createdAt?: string;
     updatedAt?: string;
 }
-export interface CreateOrgMembershipDefaultInput {
-    clientMutationId?: string;
-    /** The `OrgMembershipDefault` to be created by this mutation. */
-    orgMembershipDefault: OrgMembershipDefaultInput;
-}
-/** An input for mutations affecting `OrgMembershipDefault` */
-export interface OrgMembershipDefaultInput {
-    id?: string;
-    createdAt?: string;
-    updatedAt?: string;
-    createdBy?: string;
-    updatedBy?: string;
-    /** Whether new members are automatically approved upon joining */
-    isApproved?: boolean;
-    /** References the entity these membership defaults apply to */
-    entityId: string;
-    /** When an org member is deleted, whether to cascade-remove their group memberships */
-    deleteMemberCascadeGroups?: boolean;
-    /** When a group is created, whether to auto-add existing org members as group members */
-    createGroupsCascadeMembers?: boolean;
-}
 export interface CreateBlueprintConstructionInput {
     clientMutationId?: string;
     /** The `BlueprintConstruction` to be created by this mutation. */
@@ -7983,24 +8364,6 @@ export interface AppLevelInput {
     createdAt?: string;
     updatedAt?: string;
 }
-export interface CreateEmailInput {
-    clientMutationId?: string;
-    /** The `Email` to be created by this mutation. */
-    email: EmailInput;
-}
-/** An input for mutations affecting `Email` */
-export interface EmailInput {
-    id?: string;
-    ownerId?: string;
-    /** The email address */
-    email: ConstructiveInternalTypeEmail;
-    /** Whether the email address has been verified via confirmation link */
-    isVerified?: boolean;
-    /** Whether this is the user's primary email address */
-    isPrimary?: boolean;
-    createdAt?: string;
-    updatedAt?: string;
-}
 export interface CreateBlueprintInput {
     clientMutationId?: string;
     /** The `Blueprint` to be created by this mutation. */
@@ -8053,6 +8416,46 @@ export interface DenormalizedTableFieldInput {
     funcName?: string;
     funcOrder?: number;
 }
+export interface CreateNotificationsModuleInput {
+    clientMutationId?: string;
+    /** The `NotificationsModule` to be created by this mutation. */
+    notificationsModule: NotificationsModuleInput;
+}
+/** An input for mutations affecting `NotificationsModule` */
+export interface NotificationsModuleInput {
+    id?: string;
+    databaseId: string;
+    schemaId?: string;
+    privateSchemaId?: string;
+    notificationsTableId?: string;
+    eventsTableId?: string;
+    preferencesTableId?: string;
+    channelsTableId?: string;
+    deliveryLogTableId?: string;
+    ownerTableId?: string;
+    userSettingsTableId?: string;
+    organizationSettingsTableId?: string;
+}
+export interface CreateEmailInput {
+    clientMutationId?: string;
+    /** The `Email` to be created by this mutation. */
+    email: EmailInput;
+}
+/** An input for mutations affecting `Email` */
+export interface EmailInput {
+    id?: string;
+    ownerId?: string;
+    /** The email address */
+    email: ConstructiveInternalTypeEmail;
+    /** Whether the email address has been verified via confirmation link */
+    isVerified?: boolean;
+    /** Whether this is the user's primary email address */
+    isPrimary?: boolean;
+    /** Optional user-provided label for this email (e.g. "Work", "Personal"). */
+    name?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
 export interface CreateOrgMemberProfileInput {
     clientMutationId?: string;
     /** The `OrgMemberProfile` to be created by this mutation. */
@@ -8101,6 +8504,63 @@ export interface SqlActionInput {
     actionId?: string;
     actorId?: string;
 }
+export interface CreateSecureTableProvisionInput {
+    clientMutationId?: string;
+    /** The `SecureTableProvision` to be created by this mutation. */
+    secureTableProvision: SecureTableProvisionInput;
+}
+/** An input for mutations affecting `SecureTableProvision` */
+export interface SecureTableProvisionInput {
+    /** Unique identifier for this provision row. */
+    id?: string;
+    /** The database this provision belongs to. Required. */
+    databaseId: string;
+    /** Target schema for the table. Defaults to uuid_nil(); the trigger resolves this to the app_public schema if not explicitly provided. */
+    schemaId?: string;
+    /** Target table to provision. Defaults to uuid_nil(); the trigger creates or resolves the table via table_name if not explicitly provided. */
+    tableId?: string;
+    /** Name of the target table. Used to create or look up the table when table_id is not provided. If omitted, it is backfilled from the resolved table. */
+    tableName?: string;
+    /** Array of node objects to apply to the table. Each element is a jsonb object with a required "$type" key (one of: DataId, DataDirectOwner, DataEntityMembership, DataOwnershipInEntity, DataTimestamps, DataPeoplestamps, DataPublishable, DataSoftDelete, DataEmbedding, DataFullTextSearch, DataSlug, etc.) and an optional "data" key containing generator-specific configuration. Supports multiple nodes per row, matching the blueprint definition format. Example: [{"$type": "DataId"}, {"$type": "DataTimestamps"}, {"$type": "DataDirectOwner", "data": {"owner_field_name": "author_id"}}]. Defaults to '[]' (no node processing). */
+    nodes?: unknown;
+    /** If true and Row Level Security is not yet enabled on the target table, enable it. Automatically set to true by the trigger when policies[] is non-empty. Defaults to true. */
+    useRls?: boolean;
+    /** PostgreSQL array of jsonb field definition objects to create on the target table. Each object has keys: "name" (text, required), "type" (text, required), "default" (text, optional), "is_required" (boolean, optional, defaults to false), "min" (float, optional), "max" (float, optional), "regexp" (text, optional), "index" (boolean, optional, defaults to false — creates a btree index on the field). min/max generate CHECK constraints: for text/citext they constrain character_length, for integer/float types they constrain the value. regexp generates a CHECK (col ~ pattern) constraint for text/citext. Fields are created via metaschema.create_field() after any node_type generator runs, and their IDs are appended to out_fields. Example: ARRAY['{"name":"username","type":"citext","max":256,"regexp":"^[a-z0-9_]+$"}'::jsonb, '{"name":"score","type":"integer","min":0,"max":100}'::jsonb]. Defaults to '{}' (no additional fields). */
+    fields?: unknown[];
+    /** Array of grant objects defining table privileges. Each element is a jsonb object with keys: "roles" (text[], required — database roles to grant to, e.g. ["authenticated","admin"]), "privileges" (jsonb[], required — array of [privilege, columns] tuples, e.g. [["select","*"],["insert","*"]]). "*" means all columns; an array means column-level grant. Supports per-role privilege targeting: different grant entries can target different roles with different privileges. Example: [{"roles":["authenticated"],"privileges":[["select","*"]]},{"roles":["admin"],"privileges":[["insert","*"],["update","*"],["delete","*"]]}]. Defaults to '[]' (no grants). When policies[] omit explicit privileges/policy_role, they fall back to the verbs and first role from grants[]. */
+    grants?: unknown;
+    /** Array of policy objects to create on the target table. Each element is a jsonb object with keys: "$type" (text, required — the Authz* policy generator type, e.g. AuthzEntityMembership, AuthzMembership, AuthzDirectOwner, AuthzPublishable, AuthzAllowAll), "data" (jsonb, optional — opaque configuration passed to metaschema.create_policy(), structure varies by type), "privileges" (text[], optional — privileges the policy applies to, e.g. ["select","insert"]; if omitted, derived from grants[] privilege verbs), "policy_role" (text, optional — role the policy targets; if omitted, falls back to first role in first grants[] entry, or 'authenticated' if no grants), "permissive" (boolean, optional — PERMISSIVE or RESTRICTIVE; defaults to true), "policy_name" (text, optional — custom suffix for the generated policy name; if omitted, auto-derived from $type by stripping Authz prefix). Supports multiple policies per row. Example: [{"$type": "AuthzEntityMembership", "data": {"entity_field": "owner_id", "membership_type": 3}, "privileges": ["select", "insert"]}, {"$type": "AuthzDirectOwner", "data": {"entity_field": "actor_id"}, "privileges": ["update", "delete"]}]. Defaults to '[]' (no policies created). When non-empty, the trigger automatically enables RLS. */
+    policies?: unknown;
+    /** Output column populated by the trigger after field creation. Contains the UUIDs of the metaschema fields created on the target table by this provision row's nodes. NULL when nodes is empty or before the trigger runs. Callers should not set this directly. */
+    outFields?: string[];
+}
+export interface CreateOrgMembershipSettingInput {
+    clientMutationId?: string;
+    /** The `OrgMembershipSetting` to be created by this mutation. */
+    orgMembershipSetting: OrgMembershipSettingInput;
+}
+/** An input for mutations affecting `OrgMembershipSetting` */
+export interface OrgMembershipSettingInput {
+    id?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    createdBy?: string;
+    updatedBy?: string;
+    /** References the entity these settings apply to */
+    entityId: string;
+    /** When a member is deleted, whether to cascade-remove their descendant-entity memberships */
+    deleteMemberCascadeChildren?: boolean;
+    /** When a child entity is created, whether to auto-add existing org-level owners as child-entity owners */
+    createChildCascadeOwners?: boolean;
+    /** When a child entity is created, whether to auto-add existing org-level admins as child-entity admins */
+    createChildCascadeAdmins?: boolean;
+    /** When a child entity is created, whether to auto-add existing org-level members (non-admin, non-owner) as child-entity members */
+    createChildCascadeMembers?: boolean;
+    /** Whether descendants of this org may admit members who are not already org members (outside-collaborators toggle) */
+    allowExternalMembers?: boolean;
+    /** Whether member_profiles.email is snapshot on join and kept synced with the user's primary email. When FALSE, the email field is left blank and never synced from the user's primary email. */
+    populateMemberEmail?: boolean;
+}
 export interface CreateDatabaseTransferInput {
     clientMutationId?: string;
     /** The `DatabaseTransfer` to be created by this mutation. */
@@ -8257,6 +8717,30 @@ export interface ViewInput {
     scope?: number;
     tags?: string[];
 }
+export interface CreateWebauthnAuthModuleInput {
+    clientMutationId?: string;
+    /** The `WebauthnAuthModule` to be created by this mutation. */
+    webauthnAuthModule: WebauthnAuthModuleInput;
+}
+/** An input for mutations affecting `WebauthnAuthModule` */
+export interface WebauthnAuthModuleInput {
+    id?: string;
+    databaseId: string;
+    schemaId?: string;
+    usersTableId?: string;
+    credentialsTableId?: string;
+    sessionsTableId?: string;
+    sessionCredentialsTableId?: string;
+    sessionSecretsTableId?: string;
+    authSettingsTableId?: string;
+    rpId?: string;
+    rpName?: string;
+    originAllowlist?: string[];
+    attestationType?: string;
+    requireUserVerification?: boolean;
+    residentKey?: string;
+    challengeExpiry?: IntervalInput;
+}
 export interface CreateAppInput {
     clientMutationId?: string;
     /** The `App` to be created by this mutation. */
@@ -8464,230 +8948,98 @@ export interface PolicyInput {
     createdAt?: string;
     updatedAt?: string;
 }
-export interface CreateEntityTypeProvisionInput {
+export interface CreatePermissionsModuleInput {
     clientMutationId?: string;
-    /** The `EntityTypeProvision` to be created by this mutation. */
-    entityTypeProvision: EntityTypeProvisionInput;
+    /** The `PermissionsModule` to be created by this mutation. */
+    permissionsModule: PermissionsModuleInput;
 }
-/** An input for mutations affecting `EntityTypeProvision` */
-export interface EntityTypeProvisionInput {
-    /** Unique identifier for this provision row. */
+/** An input for mutations affecting `PermissionsModule` */
+export interface PermissionsModuleInput {
+    id?: string;
+    databaseId: string;
+    schemaId?: string;
+    privateSchemaId?: string;
+    tableId?: string;
+    tableName?: string;
+    defaultTableId?: string;
+    defaultTableName?: string;
+    bitlen?: number;
+    membershipType: number;
+    entityTableId?: string;
+    actorTableId?: string;
+    prefix?: string;
+    getPaddedMask?: string;
+    getMask?: string;
+    getByMask?: string;
+    getMaskByName?: string;
+}
+export interface CreateAppInviteInput {
+    clientMutationId?: string;
+    /** The `AppInvite` to be created by this mutation. */
+    appInvite: AppInviteInput;
+}
+/** An input for mutations affecting `AppInvite` */
+export interface AppInviteInput {
+    id?: string;
+    /** Email address of the invited recipient */
+    email?: ConstructiveInternalTypeEmail;
+    /** User ID of the member who sent this invitation */
+    senderId?: string;
+    /** Unique random hex token used to redeem this invitation */
+    inviteToken?: string;
+    /** Whether this invitation is still valid and can be redeemed */
+    inviteValid?: boolean;
+    /** Maximum number of times this invite can be claimed; -1 means unlimited */
+    inviteLimit?: number;
+    /** Running count of how many times this invite has been claimed */
+    inviteCount?: number;
+    /** Whether this invite can be claimed by multiple recipients */
+    multiple?: boolean;
+    /** Optional JSON payload of additional invite metadata */
+    data?: unknown;
+    /** Timestamp after which this invitation can no longer be redeemed */
+    expiresAt?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+export interface CreateEmbeddingChunkInput {
+    clientMutationId?: string;
+    /** The `EmbeddingChunk` to be created by this mutation. */
+    embeddingChunk: EmbeddingChunkInput;
+}
+/** An input for mutations affecting `EmbeddingChunk` */
+export interface EmbeddingChunkInput {
+    id?: string;
+    databaseId?: string;
+    tableId: string;
+    embeddingFieldId?: string;
+    chunksTableId?: string;
+    chunksTableName?: string;
+    contentFieldName?: string;
+    dimensions?: number;
+    metric?: string;
+    chunkSize?: number;
+    chunkOverlap?: number;
+    chunkStrategy?: string;
+    metadataFields?: unknown;
+    enqueueChunkingJob?: boolean;
+    chunkingTaskName?: string;
+    parentFkFieldId?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+export interface CreateSchemaInput {
+    clientMutationId?: string;
+    /** The `Schema` to be created by this mutation. */
+    schema: SchemaInput;
+}
+/** An input for mutations affecting `Schema` */
+export interface SchemaInput {
     id?: string;
-    /** The database to provision this entity type in. Required. */
     databaseId: string;
-    /**
-     * Human-readable name for this membership type, e.g. 'Data Room Member', 'Team Channel Member'. Required.
-     *      Stored in the membership_types registry table.
-     */
     name: string;
-    /**
-     * SQL prefix used for table and module naming, e.g. 'data_room', 'team_channel'. Required.
-     *      Drives entity table name (prefix || 's' by default), module labels (permissions_module:prefix),
-     *      and membership table names (prefix_memberships, prefix_members, etc.).
-     *      Must be unique per database — the (database_id, prefix) constraint ensures graceful ON CONFLICT DO NOTHING.
-     */
-    prefix: string;
-    /** Description of this membership type. Stored in the membership_types registry table. Defaults to empty string. */
-    description?: string;
-    /**
-     * Prefix of the parent entity type. The trigger resolves this to a membership_type integer
-     *      by looking up memberships_module WHERE prefix = parent_entity.
-     *      Defaults to 'org' (the organization-level type). For nested types, set to the parent's prefix
-     *      (e.g. 'data_room' for a team_channel nested under data_room).
-     *      The parent type must already be provisioned before this INSERT.
-     */
-    parentEntity?: string;
-    /**
-     * Override the entity table name. When NULL (default), the table name is derived as prefix || 's'
-     *      (e.g. prefix 'data_room' produces table 'data_rooms').
-     *      Set this when the pluralization rule doesn't apply (e.g. prefix 'staff' should produce 'staff' not 'staffs').
-     */
-    tableName?: string;
-    /**
-     * Whether members of the parent entity can see child entities. Defaults to true.
-     *      When true: a SELECT policy allows parent members to list child entities (e.g. org members can see all data rooms).
-     *      When false: only direct members of the entity itself can see it (private entity mode).
-     *      Controls whether the parent_member SELECT policy is created on the entity table.
-     *      Only meaningful on the defaults path — ignored (no-op) when table_provision is non-NULL or
-     *      skip_entity_policies=true, since no default policies are being applied in those cases.
-     */
-    isVisible?: boolean;
-    /**
-     * Whether to apply limits_module security for this type. Defaults to false.
-     *      The limits_module table structure is always created (memberships_module requires it),
-     *      but when false, no RLS policies are applied to the limits tables.
-     *      Set to true if this entity type needs configurable resource limits per membership.
-     */
-    hasLimits?: boolean;
-    /**
-     * Whether to provision profiles_module for this type. Defaults to false.
-     *      Profiles provide named permission roles (e.g. 'Editor', 'Viewer') with pre-configured permission bitmasks.
-     *      When true, creates profile tables and applies profiles security.
-     */
-    hasProfiles?: boolean;
-    /**
-     * Whether to provision levels_module for this type. Defaults to false.
-     *      Levels provide gamification/achievement tracking for members.
-     *      When true, creates level steps, achievements, and level tables with security.
-     */
-    hasLevels?: boolean;
-    /**
-     * Escape hatch: when true, apply zero RLS policies to the entity table. Defaults to false.
-     *      Use this only when you want the entity table provisioned with zero policies (e.g. because you
-     *      plan to insert secure_table_provision rows yourself later). In most cases, prefer leaving this
-     *      false and either accepting the five defaults (table_provision=NULL) or overriding them via
-     *      table_provision.
-     *      Defaults (applied when table_provision IS NULL and skip_entity_policies=false):
-     *        - SELECT (parent_member): parent entity members can see child entities (only when is_visible=true)
-     *        - SELECT (self_member):   direct members of the entity can see it
-     *        - INSERT:                 create_entity permission on the parent entity
-     *        - UPDATE:                 admin_entity permission on the entity itself
-     *        - DELETE:                 owner of the entity can delete it
-     */
-    skipEntityPolicies?: boolean;
-    /**
-     * Single jsonb object describing the full security setup to apply to the entity table.
-     *      Uses the same vocabulary as metaschema_modules_public.provision_table() and blueprint tables[]
-     *      entries, so an entity table is configured the same way an ordinary blueprint table is.
-     *      Defaults to NULL; when non-NULL, the five default policies are implicitly replaced by
-     *      table_provision.policies[] (is_visible becomes a no-op on this path).
-     *      Recognized keys (all optional):
-     *        - use_rls          (boolean, default true)
-     *        - nodes            (jsonb array of {"$type","data"} Data* module entries)
-     *        - fields           (jsonb array of field objects: name,type,is_required,default,min,max,regexp,index)
-     *        - grant_privileges (jsonb array of [privilege, columns] tuples)
-     *        - grant_roles      (jsonb array of role names; defaults to ["authenticated"])
-     *        - policies         (jsonb array of policy objects; each with $type, privileges, data, name, role, permissive)
-     *      The trigger fans policies[] into N secure_table_provision rows against the newly created entity table,
-     *      with table-level setup (nodes/fields/grants) attached to the first row.
-     *      Example — override with two SELECT policies:
-     *        table_provision := jsonb_build_object(
-     *          'policies', jsonb_build_array(
-     *            jsonb_build_object(
-     *              '$type', 'AuthzEntityMembership',
-     *              'privileges', jsonb_build_array('select'),
-     *              'data', jsonb_build_object('entity_field', 'id', 'membership_type', 3),
-     *              'name', 'self_member'
-     *            ),
-     *            jsonb_build_object(
-     *              '$type', 'AuthzDirectOwner',
-     *              'privileges', jsonb_build_array('select', 'update'),
-     *              'data', jsonb_build_object('owner_field', 'owner_id')
-     *            )
-     *          )
-     *        )
-     */
-    tableProvision?: unknown;
-    /**
-     * Output: the auto-assigned integer membership type ID. Populated by the trigger after successful provisioning.
-     *      This is the ID used in membership_types, memberships_module, and all module tables.
-     */
-    outMembershipType?: number;
-    /**
-     * Output: the UUID of the created entity table. Populated by the trigger.
-     *      Use this to reference the entity table in subsequent relation_provision or secure_table_provision rows.
-     */
-    outEntityTableId?: string;
-    /** Output: the name of the created entity table (e.g. 'data_rooms'). Populated by the trigger. */
-    outEntityTableName?: string;
-    /**
-     * Output: array of installed module labels (e.g. ARRAY['permissions_module:data_room', 'memberships_module:data_room', 'invites_module:data_room']).
-     *      Populated by the trigger. Useful for verifying which modules were provisioned.
-     */
-    outInstalledModules?: string[];
-}
-export interface CreatePermissionsModuleInput {
-    clientMutationId?: string;
-    /** The `PermissionsModule` to be created by this mutation. */
-    permissionsModule: PermissionsModuleInput;
-}
-/** An input for mutations affecting `PermissionsModule` */
-export interface PermissionsModuleInput {
-    id?: string;
-    databaseId: string;
-    schemaId?: string;
-    privateSchemaId?: string;
-    tableId?: string;
-    tableName?: string;
-    defaultTableId?: string;
-    defaultTableName?: string;
-    bitlen?: number;
-    membershipType: number;
-    entityTableId?: string;
-    actorTableId?: string;
-    prefix?: string;
-    getPaddedMask?: string;
-    getMask?: string;
-    getByMask?: string;
-    getMaskByName?: string;
-}
-export interface CreateAppInviteInput {
-    clientMutationId?: string;
-    /** The `AppInvite` to be created by this mutation. */
-    appInvite: AppInviteInput;
-}
-/** An input for mutations affecting `AppInvite` */
-export interface AppInviteInput {
-    id?: string;
-    /** Email address of the invited recipient */
-    email?: ConstructiveInternalTypeEmail;
-    /** User ID of the member who sent this invitation */
-    senderId?: string;
-    /** Unique random hex token used to redeem this invitation */
-    inviteToken?: string;
-    /** Whether this invitation is still valid and can be redeemed */
-    inviteValid?: boolean;
-    /** Maximum number of times this invite can be claimed; -1 means unlimited */
-    inviteLimit?: number;
-    /** Running count of how many times this invite has been claimed */
-    inviteCount?: number;
-    /** Whether this invite can be claimed by multiple recipients */
-    multiple?: boolean;
-    /** Optional JSON payload of additional invite metadata */
-    data?: unknown;
-    /** Timestamp after which this invitation can no longer be redeemed */
-    expiresAt?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-export interface CreateEmbeddingChunkInput {
-    clientMutationId?: string;
-    /** The `EmbeddingChunk` to be created by this mutation. */
-    embeddingChunk: EmbeddingChunkInput;
-}
-/** An input for mutations affecting `EmbeddingChunk` */
-export interface EmbeddingChunkInput {
-    id?: string;
-    databaseId?: string;
-    tableId: string;
-    embeddingFieldId?: string;
-    chunksTableId?: string;
-    chunksTableName?: string;
-    contentFieldName?: string;
-    dimensions?: number;
-    metric?: string;
-    chunkSize?: number;
-    chunkOverlap?: number;
-    chunkStrategy?: string;
-    metadataFields?: unknown;
-    enqueueChunkingJob?: boolean;
-    chunkingTaskName?: string;
-    parentFkFieldId?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-export interface CreateSchemaInput {
-    clientMutationId?: string;
-    /** The `Schema` to be created by this mutation. */
-    schema: SchemaInput;
-}
-/** An input for mutations affecting `Schema` */
-export interface SchemaInput {
-    id?: string;
-    databaseId: string;
-    name: string;
-    schemaName: string;
-    label?: string;
+    schemaName: string;
+    label?: string;
     description?: string;
     smartTags?: unknown;
     category?: ObjectCategory;
@@ -8813,6 +9165,38 @@ export interface IndexInput {
     createdAt?: string;
     updatedAt?: string;
 }
+export interface CreateWebauthnCredentialInput {
+    clientMutationId?: string;
+    /** The `WebauthnCredential` to be created by this mutation. */
+    webauthnCredential: WebauthnCredentialInput;
+}
+/** An input for mutations affecting `WebauthnCredential` */
+export interface WebauthnCredentialInput {
+    id?: string;
+    ownerId?: string;
+    /** Base64url-encoded credential ID returned by the authenticator. Globally unique per WebAuthn spec. */
+    credentialId: string;
+    /** COSE-encoded public key bytes from the authenticator attestation. */
+    publicKey: Base64EncodedBinary;
+    /** Monotonic signature counter. Strict-increase check during sign-in detects cloned credentials. 0 means the authenticator does not implement a counter. */
+    signCount?: string;
+    /** Random per-user handle sent to authenticators as user.id. Privacy-preserving; NOT the internal user UUID. */
+    webauthnUserId: string;
+    /** Authenticator transport hints (e.g. usb, nfc, ble, internal, hybrid). Used to hint browser UI during sign-in. */
+    transports?: string[];
+    /** Either 'singleDevice' (hardware-bound) or 'multiDevice' (synced passkey). Enforced by CHECK constraint below. */
+    credentialDeviceType: string;
+    /** Whether this credential is eligible for backup (syncing) per the authenticator's flags at registration. */
+    backupEligible?: boolean;
+    /** Current backup state; updated on each successful sign-in assertion. */
+    backupState?: boolean;
+    /** User-provided label for this credential (e.g. "YubiKey 5C", "iPhone 15"). Renamed via rename_passkey. */
+    name?: string;
+    /** Timestamp of the most recent successful sign-in assertion using this credential. */
+    lastUsedAt?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
 export interface CreateOrgInviteInput {
     clientMutationId?: string;
     /** The `OrgInvite` to be created by this mutation. */
@@ -8845,48 +9229,6 @@ export interface OrgInviteInput {
     updatedAt?: string;
     entityId: string;
 }
-export interface CreateSecureTableProvisionInput {
-    clientMutationId?: string;
-    /** The `SecureTableProvision` to be created by this mutation. */
-    secureTableProvision: SecureTableProvisionInput;
-}
-/** An input for mutations affecting `SecureTableProvision` */
-export interface SecureTableProvisionInput {
-    /** Unique identifier for this provision row. */
-    id?: string;
-    /** The database this provision belongs to. Required. */
-    databaseId: string;
-    /** Target schema for the table. Defaults to uuid_nil(); the trigger resolves this to the app_public schema if not explicitly provided. */
-    schemaId?: string;
-    /** Target table to provision. Defaults to uuid_nil(); the trigger creates or resolves the table via table_name if not explicitly provided. */
-    tableId?: string;
-    /** Name of the target table. Used to create or look up the table when table_id is not provided. If omitted, it is backfilled from the resolved table. */
-    tableName?: string;
-    /** Array of node objects to apply to the table. Each element is a jsonb object with a required "$type" key (one of: DataId, DataDirectOwner, DataEntityMembership, DataOwnershipInEntity, DataTimestamps, DataPeoplestamps, DataPublishable, DataSoftDelete, DataEmbedding, DataFullTextSearch, DataSlug, etc.) and an optional "data" key containing generator-specific configuration. Supports multiple nodes per row, matching the blueprint definition format. Example: [{"$type": "DataId"}, {"$type": "DataTimestamps"}, {"$type": "DataDirectOwner", "data": {"owner_field_name": "author_id"}}]. Defaults to '[]' (no node processing). */
-    nodes?: unknown;
-    /** If true and Row Level Security is not yet enabled on the target table, enable it. Automatically set to true by the trigger when policy_type is provided. Defaults to true. */
-    useRls?: boolean;
-    /** PostgreSQL array of jsonb field definition objects to create on the target table. Each object has keys: "name" (text, required), "type" (text, required), "default" (text, optional), "is_required" (boolean, optional, defaults to false), "min" (float, optional), "max" (float, optional), "regexp" (text, optional), "index" (boolean, optional, defaults to false — creates a btree index on the field). min/max generate CHECK constraints: for text/citext they constrain character_length, for integer/float types they constrain the value. regexp generates a CHECK (col ~ pattern) constraint for text/citext. Fields are created via metaschema.create_field() after any node_type generator runs, and their IDs are appended to out_fields. Example: ARRAY['{"name":"username","type":"citext","max":256,"regexp":"^[a-z0-9_]+$"}'::jsonb, '{"name":"score","type":"integer","min":0,"max":100}'::jsonb]. Defaults to '{}' (no additional fields). */
-    fields?: unknown[];
-    /** Database roles to grant privileges to. Supports multiple roles, e.g. ARRAY['authenticated', 'admin']. Each role receives all privileges defined in grant_privileges. Defaults to ARRAY['authenticated']. */
-    grantRoles?: string[];
-    /** PostgreSQL array of jsonb [privilege, columns] tuples defining table grants. Examples: ARRAY['["select","*"]'::jsonb, '["insert","*"]'::jsonb] for full access, or ARRAY['["update",["name","bio"]]'::jsonb] for column-level grants. "*" means all columns; an array means column-level grant. Defaults to '{}' (no grants — callers must explicitly specify privileges). Type safety is enforced by PostgreSQL at INSERT time. */
-    grantPrivileges?: unknown[];
-    /** Policy generator type, e.g. 'AuthzEntityMembership', 'AuthzMembership', 'AuthzAllowAll'. NULL means no policy is created. When set, the trigger automatically enables RLS on the target table. */
-    policyType?: string;
-    /** Privileges the policy applies to, e.g. ARRAY['select','update']. NULL means privileges are derived from the grant_privileges verbs. */
-    policyPrivileges?: string[];
-    /** Role the policy targets. NULL means it falls back to the first role in grant_roles. */
-    policyRole?: string;
-    /** Whether the policy is PERMISSIVE (true) or RESTRICTIVE (false). Defaults to true. */
-    policyPermissive?: boolean;
-    /** Custom suffix for the generated policy name. When NULL and policy_type is set, the trigger auto-derives a suffix from policy_type by stripping the Authz prefix and underscoring the remainder (e.g. AuthzDirectOwner becomes direct_owner, producing policy names like auth_sel_direct_owner). When explicitly set, the value is passed through as-is to metaschema.create_policy name parameter. This ensures multiple policies on the same table do not collide (e.g. AuthzDirectOwner + AuthzPublishable each get unique names). */
-    policyName?: string;
-    /** Opaque configuration passed through to metaschema.create_policy(). Structure varies by policy_type and is not interpreted by this trigger. Defaults to '{}'. */
-    policyData?: unknown;
-    /** Output column populated by the trigger after field creation. Contains the UUIDs of the metaschema fields created on the target table by this provision row's nodes. NULL when nodes is empty or before the trigger runs. Callers should not set this directly. */
-    outFields?: string[];
-}
 export interface CreateOrgMembershipInput {
     clientMutationId?: string;
     /** The `OrgMembership` to be created by this mutation. */
@@ -9027,6 +9369,170 @@ export interface ForeignKeyConstraintInput {
     createdAt?: string;
     updatedAt?: string;
 }
+export interface CreateEntityTypeProvisionInput {
+    clientMutationId?: string;
+    /** The `EntityTypeProvision` to be created by this mutation. */
+    entityTypeProvision: EntityTypeProvisionInput;
+}
+/** An input for mutations affecting `EntityTypeProvision` */
+export interface EntityTypeProvisionInput {
+    /** Unique identifier for this provision row. */
+    id?: string;
+    /** The database to provision this entity type in. Required. */
+    databaseId: string;
+    /**
+     * Human-readable name for this membership type, e.g. 'Data Room Member', 'Team Channel Member'. Required.
+     *      Stored in the membership_types registry table.
+     */
+    name: string;
+    /**
+     * SQL prefix used for table and module naming, e.g. 'data_room', 'team_channel'. Required.
+     *      Drives entity table name (prefix || 's' by default), module labels (permissions_module:prefix),
+     *      and membership table names (prefix_memberships, prefix_members, etc.).
+     *      Must be unique per database — the (database_id, prefix) constraint ensures graceful ON CONFLICT DO NOTHING.
+     */
+    prefix: string;
+    /** Description of this membership type. Stored in the membership_types registry table. Defaults to empty string. */
+    description?: string;
+    /**
+     * Prefix of the parent entity type. The trigger resolves this to a membership_type integer
+     *      by looking up memberships_module WHERE prefix = parent_entity.
+     *      Defaults to 'org' (the organization-level type). For nested types, set to the parent's prefix
+     *      (e.g. 'data_room' for a team_channel nested under data_room).
+     *      The parent type must already be provisioned before this INSERT.
+     */
+    parentEntity?: string;
+    /**
+     * Override the entity table name. When NULL (default), the table name is derived as prefix || 's'
+     *      (e.g. prefix 'data_room' produces table 'data_rooms').
+     *      Set this when the pluralization rule doesn't apply (e.g. prefix 'staff' should produce 'staff' not 'staffs').
+     */
+    tableName?: string;
+    /**
+     * Whether members of the parent entity can see child entities. Defaults to true.
+     *      When true: a SELECT policy allows parent members to list child entities (e.g. org members can see all data rooms).
+     *      When false: only direct members of the entity itself can see it (private entity mode).
+     *      Controls whether the parent_member SELECT policy is created on the entity table.
+     *      Only meaningful on the defaults path — ignored (no-op) when table_provision is non-NULL or
+     *      skip_entity_policies=true, since no default policies are being applied in those cases.
+     */
+    isVisible?: boolean;
+    /**
+     * Whether to apply limits_module security for this type. Defaults to false.
+     *      The limits_module table structure is always created (memberships_module requires it),
+     *      but when false, no RLS policies are applied to the limits tables.
+     *      Set to true if this entity type needs configurable resource limits per membership.
+     */
+    hasLimits?: boolean;
+    /**
+     * Whether to provision profiles_module for this type. Defaults to false.
+     *      Profiles provide named permission roles (e.g. 'Editor', 'Viewer') with pre-configured permission bitmasks.
+     *      When true, creates profile tables and applies profiles security.
+     */
+    hasProfiles?: boolean;
+    /**
+     * Whether to provision levels_module for this type. Defaults to false.
+     *      Levels provide gamification/achievement tracking for members.
+     *      When true, creates level steps, achievements, and level tables with security.
+     */
+    hasLevels?: boolean;
+    /**
+     * Whether to provision storage_module for this type. Defaults to false.
+     *      When true, creates {prefix}_buckets, {prefix}_files, and {prefix}_upload_requests tables
+     *      with entity-scoped RLS (AuthzEntityMembership) using the entity's membership_type.
+     *      Storage tables get owner_id FK to the entity table, so files are owned by the entity.
+     */
+    hasStorage?: boolean;
+    /**
+     * Optional jsonb object for storage module configuration and initial bucket seeding.
+     *      Only used when has_storage = true; ignored otherwise. NULL = use defaults.
+     *      Recognized keys (all optional):
+     *        - upload_url_expiry_seconds    (integer) presigned PUT URL expiry override
+     *        - download_url_expiry_seconds  (integer) presigned GET URL expiry override
+     *        - default_max_file_size        (bigint)  global max file size in bytes for this scope
+     *        - allowed_origins              (text[])  default CORS origins for all buckets in this scope
+     *        - buckets                      (jsonb[]) array of initial bucket definitions to seed
+     *      Each bucket in the buckets array recognizes:
+     *        - name               (text, required) bucket name e.g. 'documents'
+     *        - description         (text)           human-readable description
+     *        - is_public           (boolean)        whether files are publicly readable (default false)
+     *        - allowed_mime_types  (text[])         whitelist of MIME types (null = any)
+     *        - max_file_size       (bigint)         max file size in bytes (null = use scope default)
+     *        - allowed_origins     (text[])         per-bucket CORS override
+     *      Example:
+     *        storage_config := '{"buckets": [{"name": "documents", "is_public": false, "allowed_mime_types": ["application/pdf"]}]}'::jsonb
+     */
+    storageConfig?: unknown;
+    /**
+     * Escape hatch: when true, apply zero RLS policies to the entity table. Defaults to false.
+     *      Use this only when you want the entity table provisioned with zero policies (e.g. because you
+     *      plan to insert secure_table_provision rows yourself later). In most cases, prefer leaving this
+     *      false and either accepting the five defaults (table_provision=NULL) or overriding them via
+     *      table_provision.
+     *      Defaults (applied when table_provision IS NULL and skip_entity_policies=false):
+     *        - SELECT (parent_member): parent entity members can see child entities (only when is_visible=true)
+     *        - SELECT (self_member):   direct members of the entity can see it
+     *        - INSERT:                 create_entity permission on the parent entity
+     *        - UPDATE:                 admin_entity permission on the entity itself
+     *        - DELETE:                 owner of the entity can delete it
+     */
+    skipEntityPolicies?: boolean;
+    /**
+     * Single jsonb object describing the full security setup to apply to the entity table.
+     *      Uses the same vocabulary as metaschema_modules_public.provision_table() and blueprint tables[]
+     *      entries, so an entity table is configured the same way an ordinary blueprint table is.
+     *      Defaults to NULL; when non-NULL, the five default policies are implicitly replaced by
+     *      table_provision.policies[] (is_visible becomes a no-op on this path).
+     *      Recognized keys (all optional):
+     *        - use_rls          (boolean, default true)
+     *        - nodes            (jsonb array of {"$type","data"} Data* module entries)
+     *        - fields           (jsonb array of field objects: name,type,is_required,default,min,max,regexp,index)
+     *        - grants           (jsonb array of grant objects; each with roles[] and privileges[])
+     *        - policies         (jsonb array of policy objects; each with $type, privileges, data, name, role, permissive)
+     *      The trigger forwards all setup (nodes/fields/grants/policies) as a single secure_table_provision row
+     *      against the newly created entity table.
+     *      Example — override with two SELECT policies:
+     *        table_provision := jsonb_build_object(
+     *          'policies', jsonb_build_array(
+     *            jsonb_build_object(
+     *              '$type', 'AuthzEntityMembership',
+     *              'privileges', jsonb_build_array('select'),
+     *              'data', jsonb_build_object('entity_field', 'id', 'membership_type', 3),
+     *              'name', 'self_member'
+     *            ),
+     *            jsonb_build_object(
+     *              '$type', 'AuthzDirectOwner',
+     *              'privileges', jsonb_build_array('select', 'update'),
+     *              'data', jsonb_build_object('owner_field', 'owner_id')
+     *            )
+     *          )
+     *        )
+     */
+    tableProvision?: unknown;
+    /**
+     * Output: the auto-assigned integer membership type ID. Populated by the trigger after successful provisioning.
+     *      This is the ID used in membership_types, memberships_module, and all module tables.
+     */
+    outMembershipType?: number;
+    /**
+     * Output: the UUID of the created entity table. Populated by the trigger.
+     *      Use this to reference the entity table in subsequent relation_provision or secure_table_provision rows.
+     */
+    outEntityTableId?: string;
+    /** Output: the name of the created entity table (e.g. 'data_rooms'). Populated by the trigger. */
+    outEntityTableName?: string;
+    /**
+     * Output: array of installed module labels (e.g. ARRAY['permissions_module:data_room', 'memberships_module:data_room', 'invites_module:data_room']).
+     *      Populated by the trigger. Useful for verifying which modules were provisioned.
+     */
+    outInstalledModules?: string[];
+    /** Output: the UUID of the storage_module row created for this entity type. Populated by the trigger when has_storage=true. */
+    outStorageModuleId?: string;
+    /** Output: the UUID of the generated buckets table (e.g. data_room_buckets). Populated by the trigger when has_storage=true. */
+    outBucketsTableId?: string;
+    /** Output: the UUID of the generated files table (e.g. data_room_files). Populated by the trigger when has_storage=true. */
+    outFilesTableId?: string;
+}
 export interface CreateStorageModuleInput {
     clientMutationId?: string;
     /** The `StorageModule` to be created by this mutation. */
@@ -9043,142 +9549,44 @@ export interface StorageModuleInput {
     uploadRequestsTableId?: string;
     bucketsTableName?: string;
     filesTableName?: string;
-    uploadRequestsTableName?: string;
-    entityTableId?: string;
-    endpoint?: string;
-    publicUrlPrefix?: string;
-    provider?: string;
-    allowedOrigins?: string[];
-    uploadUrlExpirySeconds?: number;
-    downloadUrlExpirySeconds?: number;
-    defaultMaxFileSize?: string;
-    maxFilenameLength?: number;
-    cacheTtlSeconds?: number;
-}
-export interface CreateTableInput {
-    clientMutationId?: string;
-    /** The `Table` to be created by this mutation. */
-    table: TableInput;
-}
-/** An input for mutations affecting `Table` */
-export interface TableInput {
-    id?: string;
-    databaseId?: string;
-    schemaId: string;
-    name: string;
-    label?: string;
-    description?: string;
-    smartTags?: unknown;
-    category?: ObjectCategory;
-    module?: string;
-    scope?: number;
-    useRls?: boolean;
-    timestamps?: boolean;
-    peoplestamps?: boolean;
-    pluralName?: string;
-    singularName?: string;
-    tags?: string[];
-    inheritsId?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-export interface CreateLevelsModuleInput {
-    clientMutationId?: string;
-    /** The `LevelsModule` to be created by this mutation. */
-    levelsModule: LevelsModuleInput;
-}
-/** An input for mutations affecting `LevelsModule` */
-export interface LevelsModuleInput {
-    id?: string;
-    databaseId: string;
-    schemaId?: string;
-    privateSchemaId?: string;
-    stepsTableId?: string;
-    stepsTableName?: string;
-    achievementsTableId?: string;
-    achievementsTableName?: string;
-    levelsTableId?: string;
-    levelsTableName?: string;
-    levelRequirementsTableId?: string;
-    levelRequirementsTableName?: string;
-    completedStep?: string;
-    incompletedStep?: string;
-    tgAchievement?: string;
-    tgAchievementToggle?: string;
-    tgAchievementToggleBoolean?: string;
-    tgAchievementBoolean?: string;
-    upsertAchievement?: string;
-    tgUpdateAchievements?: string;
-    stepsRequired?: string;
-    levelAchieved?: string;
-    prefix?: string;
-    membershipType: number;
-    entityTableId?: string;
-    actorTableId?: string;
-}
-export interface CreateUserAuthModuleInput {
-    clientMutationId?: string;
-    /** The `UserAuthModule` to be created by this mutation. */
-    userAuthModule: UserAuthModuleInput;
-}
-/** An input for mutations affecting `UserAuthModule` */
-export interface UserAuthModuleInput {
-    id?: string;
-    databaseId: string;
-    schemaId?: string;
-    emailsTableId?: string;
-    usersTableId?: string;
-    secretsTableId?: string;
-    encryptedTableId?: string;
-    sessionsTableId?: string;
-    sessionCredentialsTableId?: string;
-    auditsTableId?: string;
-    auditsTableName?: string;
-    signInFunction?: string;
-    signUpFunction?: string;
-    signOutFunction?: string;
-    setPasswordFunction?: string;
-    resetPasswordFunction?: string;
-    forgotPasswordFunction?: string;
-    sendVerificationEmailFunction?: string;
-    verifyEmailFunction?: string;
-    verifyPasswordFunction?: string;
-    checkPasswordFunction?: string;
-    sendAccountDeletionEmailFunction?: string;
-    deleteAccountFunction?: string;
-    signInCrossOriginFunction?: string;
-    requestCrossOriginTokenFunction?: string;
-    extendTokenExpires?: string;
+    uploadRequestsTableName?: string;
+    membershipType?: number;
+    policies?: string[];
+    entityTableId?: string;
+    endpoint?: string;
+    publicUrlPrefix?: string;
+    provider?: string;
+    allowedOrigins?: string[];
+    uploadUrlExpirySeconds?: number;
+    downloadUrlExpirySeconds?: number;
+    defaultMaxFileSize?: string;
+    maxFilenameLength?: number;
+    cacheTtlSeconds?: number;
 }
-export interface CreateFieldInput {
+export interface CreateTableInput {
     clientMutationId?: string;
-    /** The `Field` to be created by this mutation. */
-    field: FieldInput;
+    /** The `Table` to be created by this mutation. */
+    table: TableInput;
 }
-/** An input for mutations affecting `Field` */
-export interface FieldInput {
+/** An input for mutations affecting `Table` */
+export interface TableInput {
     id?: string;
     databaseId?: string;
-    tableId: string;
+    schemaId: string;
     name: string;
     label?: string;
     description?: string;
     smartTags?: unknown;
-    isRequired?: boolean;
-    apiRequired?: boolean;
-    defaultValue?: string;
-    defaultValueAst?: unknown;
-    type: string;
-    fieldOrder?: number;
-    regexp?: string;
-    chk?: unknown;
-    chkExpr?: unknown;
-    min?: number;
-    max?: number;
-    tags?: string[];
     category?: ObjectCategory;
     module?: string;
     scope?: number;
+    useRls?: boolean;
+    timestamps?: boolean;
+    peoplestamps?: boolean;
+    pluralName?: string;
+    singularName?: string;
+    tags?: string[];
+    inheritsId?: string;
     createdAt?: string;
     updatedAt?: string;
 }
@@ -9293,34 +9701,15 @@ export interface RelationProvisionInput {
      *      Ignored for RelationBelongsTo/RelationHasOne/RelationHasMany.
      */
     nodes?: unknown;
-    /** For RelationManyToMany: database roles to grant privileges to on the junction table. Forwarded to secure_table_provision as-is. Supports multiple roles, e.g. ARRAY['authenticated', 'admin']. Each role receives all privileges defined in grant_privileges. Defaults to ARRAY['authenticated']. Ignored for RelationBelongsTo/RelationHasOne. */
-    grantRoles?: string[];
-    /** For RelationManyToMany: privilege grants for the junction table. Forwarded to secure_table_provision as-is. Format: PostgreSQL array of jsonb [privilege, columns] tuples. Examples: ARRAY['["select","*"]'::jsonb, '["insert","*"]'::jsonb] for full access, or ARRAY['["update",["name","bio"]]'::jsonb] for column-level grants. "*" means all columns. Defaults to '{}' (no grants — callers must explicitly specify privileges). Ignored for RelationBelongsTo/RelationHasOne. */
-    grantPrivileges?: unknown[];
-    /**
-     * For RelationManyToMany: RLS policy type for the junction table. Forwarded to secure_table_provision as-is. The trigger does not interpret or validate this value.
-     *      Examples: AuthzEntityMembership, AuthzMembership, AuthzAllowAll, AuthzDirectOwner, AuthzOrgHierarchy.
-     *      NULL means no policy is created — the junction table will have RLS enabled but no policies (unless added separately via secure_table_provision).
-     *      Ignored for RelationBelongsTo/RelationHasOne.
-     */
-    policyType?: string;
-    /** For RelationManyToMany: privileges the policy applies to, e.g. ARRAY['select','insert','delete']. Forwarded to secure_table_provision as-is. NULL means privileges are derived from the grant_privileges verbs by secure_table_provision. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyPrivileges?: string[];
-    /** For RelationManyToMany: database role the policy targets, e.g. 'authenticated'. Forwarded to secure_table_provision as-is. NULL means secure_table_provision falls back to the first role in grant_roles. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyRole?: string;
-    /** For RelationManyToMany: whether the policy is PERMISSIVE (true) or RESTRICTIVE (false). Forwarded to secure_table_provision as-is. Defaults to true. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyPermissive?: boolean;
-    /** For RelationManyToMany: custom suffix for the generated policy name. Forwarded to secure_table_provision as-is. When NULL and policy_type is set, secure_table_provision auto-derives a suffix from policy_type (e.g. AuthzDirectOwner becomes direct_owner, producing policy names like auth_sel_direct_owner). When explicitly set, used as-is. This ensures multiple policies on the same junction table do not collide. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyName?: string;
+    /** For RelationManyToMany: array of grant objects for the junction table. Forwarded to provision_table as-is. Each element is a jsonb object with keys: "roles" (text[], required), "privileges" (jsonb[], required — array of [privilege, columns] tuples). Example: [{"roles":["authenticated"],"privileges":[["select","*"],["insert","*"],["delete","*"]]}]. Defaults to '[]' (no grants). Ignored for RelationBelongsTo/RelationHasOne. */
+    grants?: unknown;
     /**
-     * For RelationManyToMany: opaque policy configuration forwarded to secure_table_provision as-is. The trigger does not interpret or validate this value. Structure varies by policy_type. Examples:
-     *      - AuthzEntityMembership: {"entity_field": "entity_id", "membership_type": 2}
-     *      - AuthzDirectOwner: {"owner_field": "owner_id"}
-     *      - AuthzMembership: {"membership_type": 2}
-     *      Defaults to '{}' (empty object).
-     *      Ignored for RelationBelongsTo/RelationHasOne.
+     * For RelationManyToMany: array of policy objects for the junction table. Forwarded to provision_table as-is. Each element is a jsonb object with keys: "$type" (text, required — the Authz* policy generator type), "data" (jsonb, optional — opaque config), "privileges" (text[], optional — e.g. ["select","insert"]; if omitted, derived from grants[] privilege verbs), "policy_role" (text, optional — falls back to first role in first grants[] entry, or 'authenticated'), "permissive" (boolean, optional, defaults to true), "policy_name" (text, optional). Supports multiple policies per row.
+     *      Example: [{"$type": "AuthzEntityMembership", "data": {"entity_field": "entity_id", "membership_type": 2}, "privileges": ["select", "insert", "delete"]}].
+     *      Defaults to '[]' (no policies — the junction table will have RLS enabled but no policies unless added separately).
+     *      Ignored for RelationBelongsTo/RelationHasOne/RelationHasMany.
      */
-    policyData?: unknown;
+    policies?: unknown;
     /** Output column for RelationBelongsTo/RelationHasOne/RelationHasMany: the UUID of the FK field created (or found). For BelongsTo/HasOne this is on the source table; for HasMany this is on the target table. Populated by the trigger. NULL for RelationManyToMany. Callers should not set this directly. */
     outFieldId?: string;
     /** Output column for RelationManyToMany: the UUID of the junction table created (or found). Populated by the trigger. NULL for RelationBelongsTo/RelationHasOne. Callers should not set this directly. */
@@ -9330,6 +9719,106 @@ export interface RelationProvisionInput {
     /** Output column for RelationManyToMany: the UUID of the FK field on the junction table referencing the target table. Populated by the trigger. NULL for RelationBelongsTo/RelationHasOne. Callers should not set this directly. */
     outTargetFieldId?: string;
 }
+export interface CreateLevelsModuleInput {
+    clientMutationId?: string;
+    /** The `LevelsModule` to be created by this mutation. */
+    levelsModule: LevelsModuleInput;
+}
+/** An input for mutations affecting `LevelsModule` */
+export interface LevelsModuleInput {
+    id?: string;
+    databaseId: string;
+    schemaId?: string;
+    privateSchemaId?: string;
+    stepsTableId?: string;
+    stepsTableName?: string;
+    achievementsTableId?: string;
+    achievementsTableName?: string;
+    levelsTableId?: string;
+    levelsTableName?: string;
+    levelRequirementsTableId?: string;
+    levelRequirementsTableName?: string;
+    completedStep?: string;
+    incompletedStep?: string;
+    tgAchievement?: string;
+    tgAchievementToggle?: string;
+    tgAchievementToggleBoolean?: string;
+    tgAchievementBoolean?: string;
+    upsertAchievement?: string;
+    tgUpdateAchievements?: string;
+    stepsRequired?: string;
+    levelAchieved?: string;
+    prefix?: string;
+    membershipType: number;
+    entityTableId?: string;
+    actorTableId?: string;
+}
+export interface CreateUserAuthModuleInput {
+    clientMutationId?: string;
+    /** The `UserAuthModule` to be created by this mutation. */
+    userAuthModule: UserAuthModuleInput;
+}
+/** An input for mutations affecting `UserAuthModule` */
+export interface UserAuthModuleInput {
+    id?: string;
+    databaseId: string;
+    schemaId?: string;
+    emailsTableId?: string;
+    usersTableId?: string;
+    secretsTableId?: string;
+    encryptedTableId?: string;
+    sessionsTableId?: string;
+    sessionCredentialsTableId?: string;
+    auditsTableId?: string;
+    auditsTableName?: string;
+    signInFunction?: string;
+    signUpFunction?: string;
+    signOutFunction?: string;
+    setPasswordFunction?: string;
+    resetPasswordFunction?: string;
+    forgotPasswordFunction?: string;
+    sendVerificationEmailFunction?: string;
+    verifyEmailFunction?: string;
+    verifyPasswordFunction?: string;
+    checkPasswordFunction?: string;
+    sendAccountDeletionEmailFunction?: string;
+    deleteAccountFunction?: string;
+    signInCrossOriginFunction?: string;
+    requestCrossOriginTokenFunction?: string;
+    extendTokenExpires?: string;
+}
+export interface CreateFieldInput {
+    clientMutationId?: string;
+    /** The `Field` to be created by this mutation. */
+    field: FieldInput;
+}
+/** An input for mutations affecting `Field` */
+export interface FieldInput {
+    id?: string;
+    databaseId?: string;
+    tableId: string;
+    name: string;
+    label?: string;
+    description?: string;
+    smartTags?: unknown;
+    isRequired?: boolean;
+    apiRequired?: boolean;
+    defaultValue?: string;
+    defaultValueAst?: unknown;
+    type: string;
+    fieldOrder?: number;
+    regexp?: string;
+    chk?: unknown;
+    chkExpr?: unknown;
+    min?: number;
+    max?: number;
+    tags?: string[];
+    category?: ObjectCategory;
+    module?: string;
+    scope?: number;
+    createdAt?: string;
+    updatedAt?: string;
+}
 export interface CreateMembershipsModuleInput {
     clientMutationId?: string;
     /** The `MembershipsModule` to be created by this mutation. */
@@ -9347,6 +9836,8 @@ export interface MembershipsModuleInput {
     membersTableName?: string;
     membershipDefaultsTableId?: string;
     membershipDefaultsTableName?: string;
+    membershipSettingsTableId?: string;
+    membershipSettingsTableName?: string;
     grantsTableId?: string;
     grantsTableName?: string;
     actorTableId?: string;
@@ -9649,6 +10140,22 @@ export interface ViewRulePatch {
     /** NOTHING (for read-only) or custom action */
     action?: string;
 }
+export interface UpdateIdentityProvidersModuleInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `IdentityProvidersModule` being updated. */
+    identityProvidersModulePatch: IdentityProvidersModulePatch;
+}
+/** Represents an update to a `IdentityProvidersModule`. Fields that are set will be updated. */
+export interface IdentityProvidersModulePatch {
+    id?: string;
+    databaseId?: string;
+    schemaId?: string;
+    /** Private schema that hosts SECURITY DEFINER admin helpers which write to identity_providers (create / update / enable / disable / rotate-secret / delete) and the per-app quota check. */
+    privateSchemaId?: string;
+    tableId?: string;
+    tableName?: string;
+}
 export interface UpdateSessionSecretsModuleInput {
     clientMutationId?: string;
     id: string;
@@ -9874,7 +10381,7 @@ export interface WebauthnCredentialsModulePatch {
     id?: string;
     databaseId?: string;
     schemaId?: string;
-    /** Reserved for future SECURITY DEFINER helpers on webauthn_credentials; unused in Phase 11a. */
+    /** Private schema that hosts SECURITY DEFINER helpers which write to webauthn_credentials (registration / counter-bump / delete). */
     privateSchemaId?: string;
     tableId?: string;
     ownerTableId?: string;
@@ -9918,25 +10425,6 @@ export interface OrgOwnerGrantPatch {
     createdAt?: string;
     updatedAt?: string;
 }
-export interface UpdateCryptoAddressInput {
-    clientMutationId?: string;
-    id: string;
-    /** An object where the defined keys will be set on the `CryptoAddress` being updated. */
-    cryptoAddressPatch: CryptoAddressPatch;
-}
-/** Represents an update to a `CryptoAddress`. Fields that are set will be updated. */
-export interface CryptoAddressPatch {
-    id?: string;
-    ownerId?: string;
-    /** The cryptocurrency wallet address, validated against network-specific patterns */
-    address?: string;
-    /** Whether ownership of this address has been cryptographically verified */
-    isVerified?: boolean;
-    /** Whether this is the user's primary cryptocurrency address */
-    isPrimary?: boolean;
-    createdAt?: string;
-    updatedAt?: string;
-}
 export interface UpdateObjectInput {
     clientMutationId?: string;
     id: string;
@@ -9988,24 +10476,24 @@ export interface CryptoAddressesModulePatch {
     tableName?: string;
     cryptoNetwork?: string;
 }
-export interface UpdatePhoneNumberInput {
+export interface UpdateCryptoAddressInput {
     clientMutationId?: string;
     id: string;
-    /** An object where the defined keys will be set on the `PhoneNumber` being updated. */
-    phoneNumberPatch: PhoneNumberPatch;
+    /** An object where the defined keys will be set on the `CryptoAddress` being updated. */
+    cryptoAddressPatch: CryptoAddressPatch;
 }
-/** Represents an update to a `PhoneNumber`. Fields that are set will be updated. */
-export interface PhoneNumberPatch {
+/** Represents an update to a `CryptoAddress`. Fields that are set will be updated. */
+export interface CryptoAddressPatch {
     id?: string;
     ownerId?: string;
-    /** Country calling code (e.g. +1, +44) */
-    cc?: string;
-    /** The phone number without country code */
-    number?: string;
-    /** Whether the phone number has been verified via SMS code */
+    /** The cryptocurrency wallet address, validated against network-specific patterns */
+    address?: string;
+    /** Whether ownership of this address has been cryptographically verified */
     isVerified?: boolean;
-    /** Whether this is the user's primary phone number */
+    /** Whether this is the user's primary cryptocurrency address */
     isPrimary?: boolean;
+    /** Optional user-provided label for this address (e.g. "Main wallet", "Hardware wallet"). */
+    name?: string;
     createdAt?: string;
     updatedAt?: string;
 }
@@ -10157,6 +10645,24 @@ export interface AppMembershipDefaultPatch {
     /** Whether new members are automatically verified upon joining */
     isVerified?: boolean;
 }
+export interface UpdateOrgMembershipDefaultInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `OrgMembershipDefault` being updated. */
+    orgMembershipDefaultPatch: OrgMembershipDefaultPatch;
+}
+/** Represents an update to a `OrgMembershipDefault`. Fields that are set will be updated. */
+export interface OrgMembershipDefaultPatch {
+    id?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    createdBy?: string;
+    updatedBy?: string;
+    /** Whether new members are automatically approved upon joining */
+    isApproved?: boolean;
+    /** References the entity these membership defaults apply to */
+    entityId?: string;
+}
 export interface UpdateFullTextSearchInput {
     clientMutationId?: string;
     id: string;
@@ -10265,6 +10771,29 @@ export interface OrgChartEdgeGrantPatch {
     /** Timestamp when this grant or revocation was recorded */
     createdAt?: string;
 }
+export interface UpdatePhoneNumberInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `PhoneNumber` being updated. */
+    phoneNumberPatch: PhoneNumberPatch;
+}
+/** Represents an update to a `PhoneNumber`. Fields that are set will be updated. */
+export interface PhoneNumberPatch {
+    id?: string;
+    ownerId?: string;
+    /** Country calling code (e.g. +1, +44) */
+    cc?: string;
+    /** The phone number without country code */
+    number?: string;
+    /** Whether the phone number has been verified via SMS code */
+    isVerified?: boolean;
+    /** Whether this is the user's primary phone number */
+    isPrimary?: boolean;
+    /** Optional user-provided label for this phone number (e.g. "Mobile", "Work"). */
+    name?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
 export interface UpdateOrgLimitInput {
     clientMutationId?: string;
     id: string;
@@ -10403,33 +10932,11 @@ export interface OrgGrantPatch {
     isGrant?: boolean;
     /** The member receiving or losing the permission grant */
     actorId?: string;
-    /** The entity (org or group) this permission grant applies to */
-    entityId?: string;
-    grantorId?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-export interface UpdateOrgMembershipDefaultInput {
-    clientMutationId?: string;
-    id: string;
-    /** An object where the defined keys will be set on the `OrgMembershipDefault` being updated. */
-    orgMembershipDefaultPatch: OrgMembershipDefaultPatch;
-}
-/** Represents an update to a `OrgMembershipDefault`. Fields that are set will be updated. */
-export interface OrgMembershipDefaultPatch {
-    id?: string;
+    /** The entity (org or group) this permission grant applies to */
+    entityId?: string;
+    grantorId?: string;
     createdAt?: string;
     updatedAt?: string;
-    createdBy?: string;
-    updatedBy?: string;
-    /** Whether new members are automatically approved upon joining */
-    isApproved?: boolean;
-    /** References the entity these membership defaults apply to */
-    entityId?: string;
-    /** When an org member is deleted, whether to cascade-remove their group memberships */
-    deleteMemberCascadeGroups?: boolean;
-    /** When a group is created, whether to auto-add existing org members as group members */
-    createGroupsCascadeMembers?: boolean;
 }
 export interface UpdateBlueprintConstructionInput {
     clientMutationId?: string;
@@ -10571,25 +11078,6 @@ export interface AppLevelPatch {
     /** Upload for Badge or icon image associated with this level */
     imageUpload?: File;
 }
-export interface UpdateEmailInput {
-    clientMutationId?: string;
-    id: string;
-    /** An object where the defined keys will be set on the `Email` being updated. */
-    emailPatch: EmailPatch;
-}
-/** Represents an update to a `Email`. Fields that are set will be updated. */
-export interface EmailPatch {
-    id?: string;
-    ownerId?: string;
-    /** The email address */
-    email?: ConstructiveInternalTypeEmail;
-    /** Whether the email address has been verified via confirmation link */
-    isVerified?: boolean;
-    /** Whether this is the user's primary email address */
-    isPrimary?: boolean;
-    createdAt?: string;
-    updatedAt?: string;
-}
 export interface UpdateBlueprintInput {
     clientMutationId?: string;
     /** Unique identifier for this blueprint. */
@@ -10645,6 +11133,48 @@ export interface DenormalizedTableFieldPatch {
     funcName?: string;
     funcOrder?: number;
 }
+export interface UpdateNotificationsModuleInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `NotificationsModule` being updated. */
+    notificationsModulePatch: NotificationsModulePatch;
+}
+/** Represents an update to a `NotificationsModule`. Fields that are set will be updated. */
+export interface NotificationsModulePatch {
+    id?: string;
+    databaseId?: string;
+    schemaId?: string;
+    privateSchemaId?: string;
+    notificationsTableId?: string;
+    eventsTableId?: string;
+    preferencesTableId?: string;
+    channelsTableId?: string;
+    deliveryLogTableId?: string;
+    ownerTableId?: string;
+    userSettingsTableId?: string;
+    organizationSettingsTableId?: string;
+}
+export interface UpdateEmailInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `Email` being updated. */
+    emailPatch: EmailPatch;
+}
+/** Represents an update to a `Email`. Fields that are set will be updated. */
+export interface EmailPatch {
+    id?: string;
+    ownerId?: string;
+    /** The email address */
+    email?: ConstructiveInternalTypeEmail;
+    /** Whether the email address has been verified via confirmation link */
+    isVerified?: boolean;
+    /** Whether this is the user's primary email address */
+    isPrimary?: boolean;
+    /** Optional user-provided label for this email (e.g. "Work", "Personal"). */
+    name?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
 export interface UpdateOrgMemberProfileInput {
     clientMutationId?: string;
     id: string;
@@ -10675,6 +11205,66 @@ export interface OrgMemberProfilePatch {
     /** Upload for Profile picture visible to other entity members */
     profilePictureUpload?: File;
 }
+export interface UpdateSecureTableProvisionInput {
+    clientMutationId?: string;
+    /** Unique identifier for this provision row. */
+    id: string;
+    /** An object where the defined keys will be set on the `SecureTableProvision` being updated. */
+    secureTableProvisionPatch: SecureTableProvisionPatch;
+}
+/** Represents an update to a `SecureTableProvision`. Fields that are set will be updated. */
+export interface SecureTableProvisionPatch {
+    /** Unique identifier for this provision row. */
+    id?: string;
+    /** The database this provision belongs to. Required. */
+    databaseId?: string;
+    /** Target schema for the table. Defaults to uuid_nil(); the trigger resolves this to the app_public schema if not explicitly provided. */
+    schemaId?: string;
+    /** Target table to provision. Defaults to uuid_nil(); the trigger creates or resolves the table via table_name if not explicitly provided. */
+    tableId?: string;
+    /** Name of the target table. Used to create or look up the table when table_id is not provided. If omitted, it is backfilled from the resolved table. */
+    tableName?: string;
+    /** Array of node objects to apply to the table. Each element is a jsonb object with a required "$type" key (one of: DataId, DataDirectOwner, DataEntityMembership, DataOwnershipInEntity, DataTimestamps, DataPeoplestamps, DataPublishable, DataSoftDelete, DataEmbedding, DataFullTextSearch, DataSlug, etc.) and an optional "data" key containing generator-specific configuration. Supports multiple nodes per row, matching the blueprint definition format. Example: [{"$type": "DataId"}, {"$type": "DataTimestamps"}, {"$type": "DataDirectOwner", "data": {"owner_field_name": "author_id"}}]. Defaults to '[]' (no node processing). */
+    nodes?: unknown;
+    /** If true and Row Level Security is not yet enabled on the target table, enable it. Automatically set to true by the trigger when policies[] is non-empty. Defaults to true. */
+    useRls?: boolean;
+    /** PostgreSQL array of jsonb field definition objects to create on the target table. Each object has keys: "name" (text, required), "type" (text, required), "default" (text, optional), "is_required" (boolean, optional, defaults to false), "min" (float, optional), "max" (float, optional), "regexp" (text, optional), "index" (boolean, optional, defaults to false — creates a btree index on the field). min/max generate CHECK constraints: for text/citext they constrain character_length, for integer/float types they constrain the value. regexp generates a CHECK (col ~ pattern) constraint for text/citext. Fields are created via metaschema.create_field() after any node_type generator runs, and their IDs are appended to out_fields. Example: ARRAY['{"name":"username","type":"citext","max":256,"regexp":"^[a-z0-9_]+$"}'::jsonb, '{"name":"score","type":"integer","min":0,"max":100}'::jsonb]. Defaults to '{}' (no additional fields). */
+    fields?: unknown[];
+    /** Array of grant objects defining table privileges. Each element is a jsonb object with keys: "roles" (text[], required — database roles to grant to, e.g. ["authenticated","admin"]), "privileges" (jsonb[], required — array of [privilege, columns] tuples, e.g. [["select","*"],["insert","*"]]). "*" means all columns; an array means column-level grant. Supports per-role privilege targeting: different grant entries can target different roles with different privileges. Example: [{"roles":["authenticated"],"privileges":[["select","*"]]},{"roles":["admin"],"privileges":[["insert","*"],["update","*"],["delete","*"]]}]. Defaults to '[]' (no grants). When policies[] omit explicit privileges/policy_role, they fall back to the verbs and first role from grants[]. */
+    grants?: unknown;
+    /** Array of policy objects to create on the target table. Each element is a jsonb object with keys: "$type" (text, required — the Authz* policy generator type, e.g. AuthzEntityMembership, AuthzMembership, AuthzDirectOwner, AuthzPublishable, AuthzAllowAll), "data" (jsonb, optional — opaque configuration passed to metaschema.create_policy(), structure varies by type), "privileges" (text[], optional — privileges the policy applies to, e.g. ["select","insert"]; if omitted, derived from grants[] privilege verbs), "policy_role" (text, optional — role the policy targets; if omitted, falls back to first role in first grants[] entry, or 'authenticated' if no grants), "permissive" (boolean, optional — PERMISSIVE or RESTRICTIVE; defaults to true), "policy_name" (text, optional — custom suffix for the generated policy name; if omitted, auto-derived from $type by stripping Authz prefix). Supports multiple policies per row. Example: [{"$type": "AuthzEntityMembership", "data": {"entity_field": "owner_id", "membership_type": 3}, "privileges": ["select", "insert"]}, {"$type": "AuthzDirectOwner", "data": {"entity_field": "actor_id"}, "privileges": ["update", "delete"]}]. Defaults to '[]' (no policies created). When non-empty, the trigger automatically enables RLS. */
+    policies?: unknown;
+    /** Output column populated by the trigger after field creation. Contains the UUIDs of the metaschema fields created on the target table by this provision row's nodes. NULL when nodes is empty or before the trigger runs. Callers should not set this directly. */
+    outFields?: string[];
+}
+export interface UpdateOrgMembershipSettingInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `OrgMembershipSetting` being updated. */
+    orgMembershipSettingPatch: OrgMembershipSettingPatch;
+}
+/** Represents an update to a `OrgMembershipSetting`. Fields that are set will be updated. */
+export interface OrgMembershipSettingPatch {
+    id?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    createdBy?: string;
+    updatedBy?: string;
+    /** References the entity these settings apply to */
+    entityId?: string;
+    /** When a member is deleted, whether to cascade-remove their descendant-entity memberships */
+    deleteMemberCascadeChildren?: boolean;
+    /** When a child entity is created, whether to auto-add existing org-level owners as child-entity owners */
+    createChildCascadeOwners?: boolean;
+    /** When a child entity is created, whether to auto-add existing org-level admins as child-entity admins */
+    createChildCascadeAdmins?: boolean;
+    /** When a child entity is created, whether to auto-add existing org-level members (non-admin, non-owner) as child-entity members */
+    createChildCascadeMembers?: boolean;
+    /** Whether descendants of this org may admit members who are not already org members (outside-collaborators toggle) */
+    allowExternalMembers?: boolean;
+    /** Whether member_profiles.email is snapshot on join and kept synced with the user's primary email. When FALSE, the email field is left blank and never synced from the user's primary email. */
+    populateMemberEmail?: boolean;
+}
 export interface UpdateDatabaseTransferInput {
     clientMutationId?: string;
     id: string;
@@ -10840,6 +11430,31 @@ export interface ViewPatch {
     scope?: number;
     tags?: string[];
 }
+export interface UpdateWebauthnAuthModuleInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `WebauthnAuthModule` being updated. */
+    webauthnAuthModulePatch: WebauthnAuthModulePatch;
+}
+/** Represents an update to a `WebauthnAuthModule`. Fields that are set will be updated. */
+export interface WebauthnAuthModulePatch {
+    id?: string;
+    databaseId?: string;
+    schemaId?: string;
+    usersTableId?: string;
+    credentialsTableId?: string;
+    sessionsTableId?: string;
+    sessionCredentialsTableId?: string;
+    sessionSecretsTableId?: string;
+    authSettingsTableId?: string;
+    rpId?: string;
+    rpName?: string;
+    originAllowlist?: string[];
+    attestationType?: string;
+    requireUserVerification?: boolean;
+    residentKey?: string;
+    challengeExpiry?: IntervalInput;
+}
 export interface UpdateAppInput {
     clientMutationId?: string;
     /** Unique identifier for this app */
@@ -11026,159 +11641,25 @@ export interface UpdatePolicyInput {
     /** An object where the defined keys will be set on the `Policy` being updated. */
     policyPatch: PolicyPatch;
 }
-/** Represents an update to a `Policy`. Fields that are set will be updated. */
-export interface PolicyPatch {
-    id?: string;
-    databaseId?: string;
-    tableId?: string;
-    name?: string;
-    granteeName?: string;
-    privilege?: string;
-    permissive?: boolean;
-    disabled?: boolean;
-    policyType?: string;
-    data?: unknown;
-    smartTags?: unknown;
-    category?: ObjectCategory;
-    module?: string;
-    scope?: number;
-    tags?: string[];
-    createdAt?: string;
-    updatedAt?: string;
-}
-export interface UpdateEntityTypeProvisionInput {
-    clientMutationId?: string;
-    /** Unique identifier for this provision row. */
-    id: string;
-    /** An object where the defined keys will be set on the `EntityTypeProvision` being updated. */
-    entityTypeProvisionPatch: EntityTypeProvisionPatch;
-}
-/** Represents an update to a `EntityTypeProvision`. Fields that are set will be updated. */
-export interface EntityTypeProvisionPatch {
-    /** Unique identifier for this provision row. */
-    id?: string;
-    /** The database to provision this entity type in. Required. */
-    databaseId?: string;
-    /**
-     * Human-readable name for this membership type, e.g. 'Data Room Member', 'Team Channel Member'. Required.
-     *      Stored in the membership_types registry table.
-     */
-    name?: string;
-    /**
-     * SQL prefix used for table and module naming, e.g. 'data_room', 'team_channel'. Required.
-     *      Drives entity table name (prefix || 's' by default), module labels (permissions_module:prefix),
-     *      and membership table names (prefix_memberships, prefix_members, etc.).
-     *      Must be unique per database — the (database_id, prefix) constraint ensures graceful ON CONFLICT DO NOTHING.
-     */
-    prefix?: string;
-    /** Description of this membership type. Stored in the membership_types registry table. Defaults to empty string. */
-    description?: string;
-    /**
-     * Prefix of the parent entity type. The trigger resolves this to a membership_type integer
-     *      by looking up memberships_module WHERE prefix = parent_entity.
-     *      Defaults to 'org' (the organization-level type). For nested types, set to the parent's prefix
-     *      (e.g. 'data_room' for a team_channel nested under data_room).
-     *      The parent type must already be provisioned before this INSERT.
-     */
-    parentEntity?: string;
-    /**
-     * Override the entity table name. When NULL (default), the table name is derived as prefix || 's'
-     *      (e.g. prefix 'data_room' produces table 'data_rooms').
-     *      Set this when the pluralization rule doesn't apply (e.g. prefix 'staff' should produce 'staff' not 'staffs').
-     */
-    tableName?: string;
-    /**
-     * Whether members of the parent entity can see child entities. Defaults to true.
-     *      When true: a SELECT policy allows parent members to list child entities (e.g. org members can see all data rooms).
-     *      When false: only direct members of the entity itself can see it (private entity mode).
-     *      Controls whether the parent_member SELECT policy is created on the entity table.
-     *      Only meaningful on the defaults path — ignored (no-op) when table_provision is non-NULL or
-     *      skip_entity_policies=true, since no default policies are being applied in those cases.
-     */
-    isVisible?: boolean;
-    /**
-     * Whether to apply limits_module security for this type. Defaults to false.
-     *      The limits_module table structure is always created (memberships_module requires it),
-     *      but when false, no RLS policies are applied to the limits tables.
-     *      Set to true if this entity type needs configurable resource limits per membership.
-     */
-    hasLimits?: boolean;
-    /**
-     * Whether to provision profiles_module for this type. Defaults to false.
-     *      Profiles provide named permission roles (e.g. 'Editor', 'Viewer') with pre-configured permission bitmasks.
-     *      When true, creates profile tables and applies profiles security.
-     */
-    hasProfiles?: boolean;
-    /**
-     * Whether to provision levels_module for this type. Defaults to false.
-     *      Levels provide gamification/achievement tracking for members.
-     *      When true, creates level steps, achievements, and level tables with security.
-     */
-    hasLevels?: boolean;
-    /**
-     * Escape hatch: when true, apply zero RLS policies to the entity table. Defaults to false.
-     *      Use this only when you want the entity table provisioned with zero policies (e.g. because you
-     *      plan to insert secure_table_provision rows yourself later). In most cases, prefer leaving this
-     *      false and either accepting the five defaults (table_provision=NULL) or overriding them via
-     *      table_provision.
-     *      Defaults (applied when table_provision IS NULL and skip_entity_policies=false):
-     *        - SELECT (parent_member): parent entity members can see child entities (only when is_visible=true)
-     *        - SELECT (self_member):   direct members of the entity can see it
-     *        - INSERT:                 create_entity permission on the parent entity
-     *        - UPDATE:                 admin_entity permission on the entity itself
-     *        - DELETE:                 owner of the entity can delete it
-     */
-    skipEntityPolicies?: boolean;
-    /**
-     * Single jsonb object describing the full security setup to apply to the entity table.
-     *      Uses the same vocabulary as metaschema_modules_public.provision_table() and blueprint tables[]
-     *      entries, so an entity table is configured the same way an ordinary blueprint table is.
-     *      Defaults to NULL; when non-NULL, the five default policies are implicitly replaced by
-     *      table_provision.policies[] (is_visible becomes a no-op on this path).
-     *      Recognized keys (all optional):
-     *        - use_rls          (boolean, default true)
-     *        - nodes            (jsonb array of {"$type","data"} Data* module entries)
-     *        - fields           (jsonb array of field objects: name,type,is_required,default,min,max,regexp,index)
-     *        - grant_privileges (jsonb array of [privilege, columns] tuples)
-     *        - grant_roles      (jsonb array of role names; defaults to ["authenticated"])
-     *        - policies         (jsonb array of policy objects; each with $type, privileges, data, name, role, permissive)
-     *      The trigger fans policies[] into N secure_table_provision rows against the newly created entity table,
-     *      with table-level setup (nodes/fields/grants) attached to the first row.
-     *      Example — override with two SELECT policies:
-     *        table_provision := jsonb_build_object(
-     *          'policies', jsonb_build_array(
-     *            jsonb_build_object(
-     *              '$type', 'AuthzEntityMembership',
-     *              'privileges', jsonb_build_array('select'),
-     *              'data', jsonb_build_object('entity_field', 'id', 'membership_type', 3),
-     *              'name', 'self_member'
-     *            ),
-     *            jsonb_build_object(
-     *              '$type', 'AuthzDirectOwner',
-     *              'privileges', jsonb_build_array('select', 'update'),
-     *              'data', jsonb_build_object('owner_field', 'owner_id')
-     *            )
-     *          )
-     *        )
-     */
-    tableProvision?: unknown;
-    /**
-     * Output: the auto-assigned integer membership type ID. Populated by the trigger after successful provisioning.
-     *      This is the ID used in membership_types, memberships_module, and all module tables.
-     */
-    outMembershipType?: number;
-    /**
-     * Output: the UUID of the created entity table. Populated by the trigger.
-     *      Use this to reference the entity table in subsequent relation_provision or secure_table_provision rows.
-     */
-    outEntityTableId?: string;
-    /** Output: the name of the created entity table (e.g. 'data_rooms'). Populated by the trigger. */
-    outEntityTableName?: string;
-    /**
-     * Output: array of installed module labels (e.g. ARRAY['permissions_module:data_room', 'memberships_module:data_room', 'invites_module:data_room']).
-     *      Populated by the trigger. Useful for verifying which modules were provisioned.
-     */
-    outInstalledModules?: string[];
+/** Represents an update to a `Policy`. Fields that are set will be updated. */
+export interface PolicyPatch {
+    id?: string;
+    databaseId?: string;
+    tableId?: string;
+    name?: string;
+    granteeName?: string;
+    privilege?: string;
+    permissive?: boolean;
+    disabled?: boolean;
+    policyType?: string;
+    data?: unknown;
+    smartTags?: unknown;
+    category?: ObjectCategory;
+    module?: string;
+    scope?: number;
+    tags?: string[];
+    createdAt?: string;
+    updatedAt?: string;
 }
 export interface UpdatePermissionsModuleInput {
     clientMutationId?: string;
@@ -11405,6 +11886,39 @@ export interface IndexPatch {
     createdAt?: string;
     updatedAt?: string;
 }
+export interface UpdateWebauthnCredentialInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `WebauthnCredential` being updated. */
+    webauthnCredentialPatch: WebauthnCredentialPatch;
+}
+/** Represents an update to a `WebauthnCredential`. Fields that are set will be updated. */
+export interface WebauthnCredentialPatch {
+    id?: string;
+    ownerId?: string;
+    /** Base64url-encoded credential ID returned by the authenticator. Globally unique per WebAuthn spec. */
+    credentialId?: string;
+    /** COSE-encoded public key bytes from the authenticator attestation. */
+    publicKey?: Base64EncodedBinary;
+    /** Monotonic signature counter. Strict-increase check during sign-in detects cloned credentials. 0 means the authenticator does not implement a counter. */
+    signCount?: string;
+    /** Random per-user handle sent to authenticators as user.id. Privacy-preserving; NOT the internal user UUID. */
+    webauthnUserId?: string;
+    /** Authenticator transport hints (e.g. usb, nfc, ble, internal, hybrid). Used to hint browser UI during sign-in. */
+    transports?: string[];
+    /** Either 'singleDevice' (hardware-bound) or 'multiDevice' (synced passkey). Enforced by CHECK constraint below. */
+    credentialDeviceType?: string;
+    /** Whether this credential is eligible for backup (syncing) per the authenticator's flags at registration. */
+    backupEligible?: boolean;
+    /** Current backup state; updated on each successful sign-in assertion. */
+    backupState?: boolean;
+    /** User-provided label for this credential (e.g. "YubiKey 5C", "iPhone 15"). Renamed via rename_passkey. */
+    name?: string;
+    /** Timestamp of the most recent successful sign-in assertion using this credential. */
+    lastUsedAt?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
 export interface UpdateOrgInviteInput {
     clientMutationId?: string;
     id: string;
@@ -11438,50 +11952,6 @@ export interface OrgInvitePatch {
     updatedAt?: string;
     entityId?: string;
 }
-export interface UpdateSecureTableProvisionInput {
-    clientMutationId?: string;
-    /** Unique identifier for this provision row. */
-    id: string;
-    /** An object where the defined keys will be set on the `SecureTableProvision` being updated. */
-    secureTableProvisionPatch: SecureTableProvisionPatch;
-}
-/** Represents an update to a `SecureTableProvision`. Fields that are set will be updated. */
-export interface SecureTableProvisionPatch {
-    /** Unique identifier for this provision row. */
-    id?: string;
-    /** The database this provision belongs to. Required. */
-    databaseId?: string;
-    /** Target schema for the table. Defaults to uuid_nil(); the trigger resolves this to the app_public schema if not explicitly provided. */
-    schemaId?: string;
-    /** Target table to provision. Defaults to uuid_nil(); the trigger creates or resolves the table via table_name if not explicitly provided. */
-    tableId?: string;
-    /** Name of the target table. Used to create or look up the table when table_id is not provided. If omitted, it is backfilled from the resolved table. */
-    tableName?: string;
-    /** Array of node objects to apply to the table. Each element is a jsonb object with a required "$type" key (one of: DataId, DataDirectOwner, DataEntityMembership, DataOwnershipInEntity, DataTimestamps, DataPeoplestamps, DataPublishable, DataSoftDelete, DataEmbedding, DataFullTextSearch, DataSlug, etc.) and an optional "data" key containing generator-specific configuration. Supports multiple nodes per row, matching the blueprint definition format. Example: [{"$type": "DataId"}, {"$type": "DataTimestamps"}, {"$type": "DataDirectOwner", "data": {"owner_field_name": "author_id"}}]. Defaults to '[]' (no node processing). */
-    nodes?: unknown;
-    /** If true and Row Level Security is not yet enabled on the target table, enable it. Automatically set to true by the trigger when policy_type is provided. Defaults to true. */
-    useRls?: boolean;
-    /** PostgreSQL array of jsonb field definition objects to create on the target table. Each object has keys: "name" (text, required), "type" (text, required), "default" (text, optional), "is_required" (boolean, optional, defaults to false), "min" (float, optional), "max" (float, optional), "regexp" (text, optional), "index" (boolean, optional, defaults to false — creates a btree index on the field). min/max generate CHECK constraints: for text/citext they constrain character_length, for integer/float types they constrain the value. regexp generates a CHECK (col ~ pattern) constraint for text/citext. Fields are created via metaschema.create_field() after any node_type generator runs, and their IDs are appended to out_fields. Example: ARRAY['{"name":"username","type":"citext","max":256,"regexp":"^[a-z0-9_]+$"}'::jsonb, '{"name":"score","type":"integer","min":0,"max":100}'::jsonb]. Defaults to '{}' (no additional fields). */
-    fields?: unknown[];
-    /** Database roles to grant privileges to. Supports multiple roles, e.g. ARRAY['authenticated', 'admin']. Each role receives all privileges defined in grant_privileges. Defaults to ARRAY['authenticated']. */
-    grantRoles?: string[];
-    /** PostgreSQL array of jsonb [privilege, columns] tuples defining table grants. Examples: ARRAY['["select","*"]'::jsonb, '["insert","*"]'::jsonb] for full access, or ARRAY['["update",["name","bio"]]'::jsonb] for column-level grants. "*" means all columns; an array means column-level grant. Defaults to '{}' (no grants — callers must explicitly specify privileges). Type safety is enforced by PostgreSQL at INSERT time. */
-    grantPrivileges?: unknown[];
-    /** Policy generator type, e.g. 'AuthzEntityMembership', 'AuthzMembership', 'AuthzAllowAll'. NULL means no policy is created. When set, the trigger automatically enables RLS on the target table. */
-    policyType?: string;
-    /** Privileges the policy applies to, e.g. ARRAY['select','update']. NULL means privileges are derived from the grant_privileges verbs. */
-    policyPrivileges?: string[];
-    /** Role the policy targets. NULL means it falls back to the first role in grant_roles. */
-    policyRole?: string;
-    /** Whether the policy is PERMISSIVE (true) or RESTRICTIVE (false). Defaults to true. */
-    policyPermissive?: boolean;
-    /** Custom suffix for the generated policy name. When NULL and policy_type is set, the trigger auto-derives a suffix from policy_type by stripping the Authz prefix and underscoring the remainder (e.g. AuthzDirectOwner becomes direct_owner, producing policy names like auth_sel_direct_owner). When explicitly set, the value is passed through as-is to metaschema.create_policy name parameter. This ensures multiple policies on the same table do not collide (e.g. AuthzDirectOwner + AuthzPublishable each get unique names). */
-    policyName?: string;
-    /** Opaque configuration passed through to metaschema.create_policy(). Structure varies by policy_type and is not interpreted by this trigger. Defaults to '{}'. */
-    policyData?: unknown;
-    /** Output column populated by the trigger after field creation. Contains the UUIDs of the metaschema fields created on the target table by this provision row's nodes. NULL when nodes is empty or before the trigger runs. Callers should not set this directly. */
-    outFields?: string[];
-}
 export interface UpdateOrgMembershipInput {
     clientMutationId?: string;
     id: string;
@@ -11627,163 +12097,228 @@ export interface ForeignKeyConstraintPatch {
     createdAt?: string;
     updatedAt?: string;
 }
-export interface UpdateStorageModuleInput {
-    clientMutationId?: string;
-    id: string;
-    /** An object where the defined keys will be set on the `StorageModule` being updated. */
-    storageModulePatch: StorageModulePatch;
-}
-/** Represents an update to a `StorageModule`. Fields that are set will be updated. */
-export interface StorageModulePatch {
-    id?: string;
-    databaseId?: string;
-    schemaId?: string;
-    privateSchemaId?: string;
-    bucketsTableId?: string;
-    filesTableId?: string;
-    uploadRequestsTableId?: string;
-    bucketsTableName?: string;
-    filesTableName?: string;
-    uploadRequestsTableName?: string;
-    entityTableId?: string;
-    endpoint?: string;
-    publicUrlPrefix?: string;
-    provider?: string;
-    allowedOrigins?: string[];
-    uploadUrlExpirySeconds?: number;
-    downloadUrlExpirySeconds?: number;
-    defaultMaxFileSize?: string;
-    maxFilenameLength?: number;
-    cacheTtlSeconds?: number;
-}
-export interface UpdateTableInput {
+export interface UpdateEntityTypeProvisionInput {
     clientMutationId?: string;
+    /** Unique identifier for this provision row. */
     id: string;
-    /** An object where the defined keys will be set on the `Table` being updated. */
-    tablePatch: TablePatch;
+    /** An object where the defined keys will be set on the `EntityTypeProvision` being updated. */
+    entityTypeProvisionPatch: EntityTypeProvisionPatch;
 }
-/** Represents an update to a `Table`. Fields that are set will be updated. */
-export interface TablePatch {
+/** Represents an update to a `EntityTypeProvision`. Fields that are set will be updated. */
+export interface EntityTypeProvisionPatch {
+    /** Unique identifier for this provision row. */
     id?: string;
+    /** The database to provision this entity type in. Required. */
     databaseId?: string;
-    schemaId?: string;
+    /**
+     * Human-readable name for this membership type, e.g. 'Data Room Member', 'Team Channel Member'. Required.
+     *      Stored in the membership_types registry table.
+     */
     name?: string;
-    label?: string;
-    description?: string;
-    smartTags?: unknown;
-    category?: ObjectCategory;
-    module?: string;
-    scope?: number;
-    useRls?: boolean;
-    timestamps?: boolean;
-    peoplestamps?: boolean;
-    pluralName?: string;
-    singularName?: string;
-    tags?: string[];
-    inheritsId?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-export interface UpdateLevelsModuleInput {
-    clientMutationId?: string;
-    id: string;
-    /** An object where the defined keys will be set on the `LevelsModule` being updated. */
-    levelsModulePatch: LevelsModulePatch;
-}
-/** Represents an update to a `LevelsModule`. Fields that are set will be updated. */
-export interface LevelsModulePatch {
-    id?: string;
-    databaseId?: string;
-    schemaId?: string;
-    privateSchemaId?: string;
-    stepsTableId?: string;
-    stepsTableName?: string;
-    achievementsTableId?: string;
-    achievementsTableName?: string;
-    levelsTableId?: string;
-    levelsTableName?: string;
-    levelRequirementsTableId?: string;
-    levelRequirementsTableName?: string;
-    completedStep?: string;
-    incompletedStep?: string;
-    tgAchievement?: string;
-    tgAchievementToggle?: string;
-    tgAchievementToggleBoolean?: string;
-    tgAchievementBoolean?: string;
-    upsertAchievement?: string;
-    tgUpdateAchievements?: string;
-    stepsRequired?: string;
-    levelAchieved?: string;
+    /**
+     * SQL prefix used for table and module naming, e.g. 'data_room', 'team_channel'. Required.
+     *      Drives entity table name (prefix || 's' by default), module labels (permissions_module:prefix),
+     *      and membership table names (prefix_memberships, prefix_members, etc.).
+     *      Must be unique per database — the (database_id, prefix) constraint ensures graceful ON CONFLICT DO NOTHING.
+     */
     prefix?: string;
-    membershipType?: number;
-    entityTableId?: string;
-    actorTableId?: string;
+    /** Description of this membership type. Stored in the membership_types registry table. Defaults to empty string. */
+    description?: string;
+    /**
+     * Prefix of the parent entity type. The trigger resolves this to a membership_type integer
+     *      by looking up memberships_module WHERE prefix = parent_entity.
+     *      Defaults to 'org' (the organization-level type). For nested types, set to the parent's prefix
+     *      (e.g. 'data_room' for a team_channel nested under data_room).
+     *      The parent type must already be provisioned before this INSERT.
+     */
+    parentEntity?: string;
+    /**
+     * Override the entity table name. When NULL (default), the table name is derived as prefix || 's'
+     *      (e.g. prefix 'data_room' produces table 'data_rooms').
+     *      Set this when the pluralization rule doesn't apply (e.g. prefix 'staff' should produce 'staff' not 'staffs').
+     */
+    tableName?: string;
+    /**
+     * Whether members of the parent entity can see child entities. Defaults to true.
+     *      When true: a SELECT policy allows parent members to list child entities (e.g. org members can see all data rooms).
+     *      When false: only direct members of the entity itself can see it (private entity mode).
+     *      Controls whether the parent_member SELECT policy is created on the entity table.
+     *      Only meaningful on the defaults path — ignored (no-op) when table_provision is non-NULL or
+     *      skip_entity_policies=true, since no default policies are being applied in those cases.
+     */
+    isVisible?: boolean;
+    /**
+     * Whether to apply limits_module security for this type. Defaults to false.
+     *      The limits_module table structure is always created (memberships_module requires it),
+     *      but when false, no RLS policies are applied to the limits tables.
+     *      Set to true if this entity type needs configurable resource limits per membership.
+     */
+    hasLimits?: boolean;
+    /**
+     * Whether to provision profiles_module for this type. Defaults to false.
+     *      Profiles provide named permission roles (e.g. 'Editor', 'Viewer') with pre-configured permission bitmasks.
+     *      When true, creates profile tables and applies profiles security.
+     */
+    hasProfiles?: boolean;
+    /**
+     * Whether to provision levels_module for this type. Defaults to false.
+     *      Levels provide gamification/achievement tracking for members.
+     *      When true, creates level steps, achievements, and level tables with security.
+     */
+    hasLevels?: boolean;
+    /**
+     * Whether to provision storage_module for this type. Defaults to false.
+     *      When true, creates {prefix}_buckets, {prefix}_files, and {prefix}_upload_requests tables
+     *      with entity-scoped RLS (AuthzEntityMembership) using the entity's membership_type.
+     *      Storage tables get owner_id FK to the entity table, so files are owned by the entity.
+     */
+    hasStorage?: boolean;
+    /**
+     * Optional jsonb object for storage module configuration and initial bucket seeding.
+     *      Only used when has_storage = true; ignored otherwise. NULL = use defaults.
+     *      Recognized keys (all optional):
+     *        - upload_url_expiry_seconds    (integer) presigned PUT URL expiry override
+     *        - download_url_expiry_seconds  (integer) presigned GET URL expiry override
+     *        - default_max_file_size        (bigint)  global max file size in bytes for this scope
+     *        - allowed_origins              (text[])  default CORS origins for all buckets in this scope
+     *        - buckets                      (jsonb[]) array of initial bucket definitions to seed
+     *      Each bucket in the buckets array recognizes:
+     *        - name               (text, required) bucket name e.g. 'documents'
+     *        - description         (text)           human-readable description
+     *        - is_public           (boolean)        whether files are publicly readable (default false)
+     *        - allowed_mime_types  (text[])         whitelist of MIME types (null = any)
+     *        - max_file_size       (bigint)         max file size in bytes (null = use scope default)
+     *        - allowed_origins     (text[])         per-bucket CORS override
+     *      Example:
+     *        storage_config := '{"buckets": [{"name": "documents", "is_public": false, "allowed_mime_types": ["application/pdf"]}]}'::jsonb
+     */
+    storageConfig?: unknown;
+    /**
+     * Escape hatch: when true, apply zero RLS policies to the entity table. Defaults to false.
+     *      Use this only when you want the entity table provisioned with zero policies (e.g. because you
+     *      plan to insert secure_table_provision rows yourself later). In most cases, prefer leaving this
+     *      false and either accepting the five defaults (table_provision=NULL) or overriding them via
+     *      table_provision.
+     *      Defaults (applied when table_provision IS NULL and skip_entity_policies=false):
+     *        - SELECT (parent_member): parent entity members can see child entities (only when is_visible=true)
+     *        - SELECT (self_member):   direct members of the entity can see it
+     *        - INSERT:                 create_entity permission on the parent entity
+     *        - UPDATE:                 admin_entity permission on the entity itself
+     *        - DELETE:                 owner of the entity can delete it
+     */
+    skipEntityPolicies?: boolean;
+    /**
+     * Single jsonb object describing the full security setup to apply to the entity table.
+     *      Uses the same vocabulary as metaschema_modules_public.provision_table() and blueprint tables[]
+     *      entries, so an entity table is configured the same way an ordinary blueprint table is.
+     *      Defaults to NULL; when non-NULL, the five default policies are implicitly replaced by
+     *      table_provision.policies[] (is_visible becomes a no-op on this path).
+     *      Recognized keys (all optional):
+     *        - use_rls          (boolean, default true)
+     *        - nodes            (jsonb array of {"$type","data"} Data* module entries)
+     *        - fields           (jsonb array of field objects: name,type,is_required,default,min,max,regexp,index)
+     *        - grants           (jsonb array of grant objects; each with roles[] and privileges[])
+     *        - policies         (jsonb array of policy objects; each with $type, privileges, data, name, role, permissive)
+     *      The trigger forwards all setup (nodes/fields/grants/policies) as a single secure_table_provision row
+     *      against the newly created entity table.
+     *      Example — override with two SELECT policies:
+     *        table_provision := jsonb_build_object(
+     *          'policies', jsonb_build_array(
+     *            jsonb_build_object(
+     *              '$type', 'AuthzEntityMembership',
+     *              'privileges', jsonb_build_array('select'),
+     *              'data', jsonb_build_object('entity_field', 'id', 'membership_type', 3),
+     *              'name', 'self_member'
+     *            ),
+     *            jsonb_build_object(
+     *              '$type', 'AuthzDirectOwner',
+     *              'privileges', jsonb_build_array('select', 'update'),
+     *              'data', jsonb_build_object('owner_field', 'owner_id')
+     *            )
+     *          )
+     *        )
+     */
+    tableProvision?: unknown;
+    /**
+     * Output: the auto-assigned integer membership type ID. Populated by the trigger after successful provisioning.
+     *      This is the ID used in membership_types, memberships_module, and all module tables.
+     */
+    outMembershipType?: number;
+    /**
+     * Output: the UUID of the created entity table. Populated by the trigger.
+     *      Use this to reference the entity table in subsequent relation_provision or secure_table_provision rows.
+     */
+    outEntityTableId?: string;
+    /** Output: the name of the created entity table (e.g. 'data_rooms'). Populated by the trigger. */
+    outEntityTableName?: string;
+    /**
+     * Output: array of installed module labels (e.g. ARRAY['permissions_module:data_room', 'memberships_module:data_room', 'invites_module:data_room']).
+     *      Populated by the trigger. Useful for verifying which modules were provisioned.
+     */
+    outInstalledModules?: string[];
+    /** Output: the UUID of the storage_module row created for this entity type. Populated by the trigger when has_storage=true. */
+    outStorageModuleId?: string;
+    /** Output: the UUID of the generated buckets table (e.g. data_room_buckets). Populated by the trigger when has_storage=true. */
+    outBucketsTableId?: string;
+    /** Output: the UUID of the generated files table (e.g. data_room_files). Populated by the trigger when has_storage=true. */
+    outFilesTableId?: string;
 }
-export interface UpdateUserAuthModuleInput {
+export interface UpdateStorageModuleInput {
     clientMutationId?: string;
     id: string;
-    /** An object where the defined keys will be set on the `UserAuthModule` being updated. */
-    userAuthModulePatch: UserAuthModulePatch;
+    /** An object where the defined keys will be set on the `StorageModule` being updated. */
+    storageModulePatch: StorageModulePatch;
 }
-/** Represents an update to a `UserAuthModule`. Fields that are set will be updated. */
-export interface UserAuthModulePatch {
+/** Represents an update to a `StorageModule`. Fields that are set will be updated. */
+export interface StorageModulePatch {
     id?: string;
     databaseId?: string;
     schemaId?: string;
-    emailsTableId?: string;
-    usersTableId?: string;
-    secretsTableId?: string;
-    encryptedTableId?: string;
-    sessionsTableId?: string;
-    sessionCredentialsTableId?: string;
-    auditsTableId?: string;
-    auditsTableName?: string;
-    signInFunction?: string;
-    signUpFunction?: string;
-    signOutFunction?: string;
-    setPasswordFunction?: string;
-    resetPasswordFunction?: string;
-    forgotPasswordFunction?: string;
-    sendVerificationEmailFunction?: string;
-    verifyEmailFunction?: string;
-    verifyPasswordFunction?: string;
-    checkPasswordFunction?: string;
-    sendAccountDeletionEmailFunction?: string;
-    deleteAccountFunction?: string;
-    signInCrossOriginFunction?: string;
-    requestCrossOriginTokenFunction?: string;
-    extendTokenExpires?: string;
+    privateSchemaId?: string;
+    bucketsTableId?: string;
+    filesTableId?: string;
+    uploadRequestsTableId?: string;
+    bucketsTableName?: string;
+    filesTableName?: string;
+    uploadRequestsTableName?: string;
+    membershipType?: number;
+    policies?: string[];
+    entityTableId?: string;
+    endpoint?: string;
+    publicUrlPrefix?: string;
+    provider?: string;
+    allowedOrigins?: string[];
+    uploadUrlExpirySeconds?: number;
+    downloadUrlExpirySeconds?: number;
+    defaultMaxFileSize?: string;
+    maxFilenameLength?: number;
+    cacheTtlSeconds?: number;
 }
-export interface UpdateFieldInput {
+export interface UpdateTableInput {
     clientMutationId?: string;
     id: string;
-    /** An object where the defined keys will be set on the `Field` being updated. */
-    fieldPatch: FieldPatch;
+    /** An object where the defined keys will be set on the `Table` being updated. */
+    tablePatch: TablePatch;
 }
-/** Represents an update to a `Field`. Fields that are set will be updated. */
-export interface FieldPatch {
+/** Represents an update to a `Table`. Fields that are set will be updated. */
+export interface TablePatch {
     id?: string;
     databaseId?: string;
-    tableId?: string;
+    schemaId?: string;
     name?: string;
     label?: string;
     description?: string;
     smartTags?: unknown;
-    isRequired?: boolean;
-    apiRequired?: boolean;
-    defaultValue?: string;
-    defaultValueAst?: unknown;
-    type?: string;
-    fieldOrder?: number;
-    regexp?: string;
-    chk?: unknown;
-    chkExpr?: unknown;
-    min?: number;
-    max?: number;
-    tags?: string[];
     category?: ObjectCategory;
     module?: string;
     scope?: number;
+    useRls?: boolean;
+    timestamps?: boolean;
+    peoplestamps?: boolean;
+    pluralName?: string;
+    singularName?: string;
+    tags?: string[];
+    inheritsId?: string;
     createdAt?: string;
     updatedAt?: string;
 }
@@ -11900,34 +12435,15 @@ export interface RelationProvisionPatch {
      *      Ignored for RelationBelongsTo/RelationHasOne/RelationHasMany.
      */
     nodes?: unknown;
-    /** For RelationManyToMany: database roles to grant privileges to on the junction table. Forwarded to secure_table_provision as-is. Supports multiple roles, e.g. ARRAY['authenticated', 'admin']. Each role receives all privileges defined in grant_privileges. Defaults to ARRAY['authenticated']. Ignored for RelationBelongsTo/RelationHasOne. */
-    grantRoles?: string[];
-    /** For RelationManyToMany: privilege grants for the junction table. Forwarded to secure_table_provision as-is. Format: PostgreSQL array of jsonb [privilege, columns] tuples. Examples: ARRAY['["select","*"]'::jsonb, '["insert","*"]'::jsonb] for full access, or ARRAY['["update",["name","bio"]]'::jsonb] for column-level grants. "*" means all columns. Defaults to '{}' (no grants — callers must explicitly specify privileges). Ignored for RelationBelongsTo/RelationHasOne. */
-    grantPrivileges?: unknown[];
-    /**
-     * For RelationManyToMany: RLS policy type for the junction table. Forwarded to secure_table_provision as-is. The trigger does not interpret or validate this value.
-     *      Examples: AuthzEntityMembership, AuthzMembership, AuthzAllowAll, AuthzDirectOwner, AuthzOrgHierarchy.
-     *      NULL means no policy is created — the junction table will have RLS enabled but no policies (unless added separately via secure_table_provision).
-     *      Ignored for RelationBelongsTo/RelationHasOne.
-     */
-    policyType?: string;
-    /** For RelationManyToMany: privileges the policy applies to, e.g. ARRAY['select','insert','delete']. Forwarded to secure_table_provision as-is. NULL means privileges are derived from the grant_privileges verbs by secure_table_provision. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyPrivileges?: string[];
-    /** For RelationManyToMany: database role the policy targets, e.g. 'authenticated'. Forwarded to secure_table_provision as-is. NULL means secure_table_provision falls back to the first role in grant_roles. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyRole?: string;
-    /** For RelationManyToMany: whether the policy is PERMISSIVE (true) or RESTRICTIVE (false). Forwarded to secure_table_provision as-is. Defaults to true. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyPermissive?: boolean;
-    /** For RelationManyToMany: custom suffix for the generated policy name. Forwarded to secure_table_provision as-is. When NULL and policy_type is set, secure_table_provision auto-derives a suffix from policy_type (e.g. AuthzDirectOwner becomes direct_owner, producing policy names like auth_sel_direct_owner). When explicitly set, used as-is. This ensures multiple policies on the same junction table do not collide. Ignored for RelationBelongsTo/RelationHasOne. */
-    policyName?: string;
+    /** For RelationManyToMany: array of grant objects for the junction table. Forwarded to provision_table as-is. Each element is a jsonb object with keys: "roles" (text[], required), "privileges" (jsonb[], required — array of [privilege, columns] tuples). Example: [{"roles":["authenticated"],"privileges":[["select","*"],["insert","*"],["delete","*"]]}]. Defaults to '[]' (no grants). Ignored for RelationBelongsTo/RelationHasOne. */
+    grants?: unknown;
     /**
-     * For RelationManyToMany: opaque policy configuration forwarded to secure_table_provision as-is. The trigger does not interpret or validate this value. Structure varies by policy_type. Examples:
-     *      - AuthzEntityMembership: {"entity_field": "entity_id", "membership_type": 2}
-     *      - AuthzDirectOwner: {"owner_field": "owner_id"}
-     *      - AuthzMembership: {"membership_type": 2}
-     *      Defaults to '{}' (empty object).
-     *      Ignored for RelationBelongsTo/RelationHasOne.
+     * For RelationManyToMany: array of policy objects for the junction table. Forwarded to provision_table as-is. Each element is a jsonb object with keys: "$type" (text, required — the Authz* policy generator type), "data" (jsonb, optional — opaque config), "privileges" (text[], optional — e.g. ["select","insert"]; if omitted, derived from grants[] privilege verbs), "policy_role" (text, optional — falls back to first role in first grants[] entry, or 'authenticated'), "permissive" (boolean, optional, defaults to true), "policy_name" (text, optional). Supports multiple policies per row.
+     *      Example: [{"$type": "AuthzEntityMembership", "data": {"entity_field": "entity_id", "membership_type": 2}, "privileges": ["select", "insert", "delete"]}].
+     *      Defaults to '[]' (no policies — the junction table will have RLS enabled but no policies unless added separately).
+     *      Ignored for RelationBelongsTo/RelationHasOne/RelationHasMany.
      */
-    policyData?: unknown;
+    policies?: unknown;
     /** Output column for RelationBelongsTo/RelationHasOne/RelationHasMany: the UUID of the FK field created (or found). For BelongsTo/HasOne this is on the source table; for HasMany this is on the target table. Populated by the trigger. NULL for RelationManyToMany. Callers should not set this directly. */
     outFieldId?: string;
     /** Output column for RelationManyToMany: the UUID of the junction table created (or found). Populated by the trigger. NULL for RelationBelongsTo/RelationHasOne. Callers should not set this directly. */
@@ -11937,6 +12453,109 @@ export interface RelationProvisionPatch {
     /** Output column for RelationManyToMany: the UUID of the FK field on the junction table referencing the target table. Populated by the trigger. NULL for RelationBelongsTo/RelationHasOne. Callers should not set this directly. */
     outTargetFieldId?: string;
 }
+export interface UpdateLevelsModuleInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `LevelsModule` being updated. */
+    levelsModulePatch: LevelsModulePatch;
+}
+/** Represents an update to a `LevelsModule`. Fields that are set will be updated. */
+export interface LevelsModulePatch {
+    id?: string;
+    databaseId?: string;
+    schemaId?: string;
+    privateSchemaId?: string;
+    stepsTableId?: string;
+    stepsTableName?: string;
+    achievementsTableId?: string;
+    achievementsTableName?: string;
+    levelsTableId?: string;
+    levelsTableName?: string;
+    levelRequirementsTableId?: string;
+    levelRequirementsTableName?: string;
+    completedStep?: string;
+    incompletedStep?: string;
+    tgAchievement?: string;
+    tgAchievementToggle?: string;
+    tgAchievementToggleBoolean?: string;
+    tgAchievementBoolean?: string;
+    upsertAchievement?: string;
+    tgUpdateAchievements?: string;
+    stepsRequired?: string;
+    levelAchieved?: string;
+    prefix?: string;
+    membershipType?: number;
+    entityTableId?: string;
+    actorTableId?: string;
+}
+export interface UpdateUserAuthModuleInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `UserAuthModule` being updated. */
+    userAuthModulePatch: UserAuthModulePatch;
+}
+/** Represents an update to a `UserAuthModule`. Fields that are set will be updated. */
+export interface UserAuthModulePatch {
+    id?: string;
+    databaseId?: string;
+    schemaId?: string;
+    emailsTableId?: string;
+    usersTableId?: string;
+    secretsTableId?: string;
+    encryptedTableId?: string;
+    sessionsTableId?: string;
+    sessionCredentialsTableId?: string;
+    auditsTableId?: string;
+    auditsTableName?: string;
+    signInFunction?: string;
+    signUpFunction?: string;
+    signOutFunction?: string;
+    setPasswordFunction?: string;
+    resetPasswordFunction?: string;
+    forgotPasswordFunction?: string;
+    sendVerificationEmailFunction?: string;
+    verifyEmailFunction?: string;
+    verifyPasswordFunction?: string;
+    checkPasswordFunction?: string;
+    sendAccountDeletionEmailFunction?: string;
+    deleteAccountFunction?: string;
+    signInCrossOriginFunction?: string;
+    requestCrossOriginTokenFunction?: string;
+    extendTokenExpires?: string;
+}
+export interface UpdateFieldInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `Field` being updated. */
+    fieldPatch: FieldPatch;
+}
+/** Represents an update to a `Field`. Fields that are set will be updated. */
+export interface FieldPatch {
+    id?: string;
+    databaseId?: string;
+    tableId?: string;
+    name?: string;
+    label?: string;
+    description?: string;
+    smartTags?: unknown;
+    isRequired?: boolean;
+    apiRequired?: boolean;
+    defaultValue?: string;
+    defaultValueAst?: unknown;
+    type?: string;
+    fieldOrder?: number;
+    regexp?: string;
+    chk?: unknown;
+    chkExpr?: unknown;
+    min?: number;
+    max?: number;
+    tags?: string[];
+    category?: ObjectCategory;
+    module?: string;
+    scope?: number;
+    createdAt?: string;
+    updatedAt?: string;
+}
 export interface UpdateMembershipsModuleInput {
     clientMutationId?: string;
     id: string;
@@ -11955,6 +12574,8 @@ export interface MembershipsModulePatch {
     membersTableName?: string;
     membershipDefaultsTableId?: string;
     membershipDefaultsTableName?: string;
+    membershipSettingsTableId?: string;
+    membershipSettingsTableName?: string;
     grantsTableId?: string;
     grantsTableName?: string;
     actorTableId?: string;
@@ -12057,6 +12678,10 @@ export interface DeleteViewRuleInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeleteIdentityProvidersModuleInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface DeleteSessionSecretsModuleInput {
     clientMutationId?: string;
     id: string;
@@ -12122,10 +12747,6 @@ export interface DeleteOrgOwnerGrantInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteCryptoAddressInput {
-    clientMutationId?: string;
-    id: string;
-}
 export interface DeleteObjectInput {
     clientMutationId?: string;
     id: string;
@@ -12139,7 +12760,7 @@ export interface DeleteCryptoAddressesModuleInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeletePhoneNumberInput {
+export interface DeleteCryptoAddressInput {
     clientMutationId?: string;
     id: string;
 }
@@ -12176,6 +12797,10 @@ export interface DeleteAppMembershipDefaultInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeleteOrgMembershipDefaultInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface DeleteFullTextSearchInput {
     clientMutationId?: string;
     id: string;
@@ -12199,6 +12824,10 @@ export interface DeleteOrgChartEdgeGrantInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeletePhoneNumberInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface DeleteOrgLimitInput {
     clientMutationId?: string;
     id: string;
@@ -12229,10 +12858,6 @@ export interface DeleteOrgGrantInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteOrgMembershipDefaultInput {
-    clientMutationId?: string;
-    id: string;
-}
 export interface DeleteBlueprintConstructionInput {
     clientMutationId?: string;
     /** Unique identifier for this construction attempt. */
@@ -12258,10 +12883,6 @@ export interface DeleteAppLevelInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteEmailInput {
-    clientMutationId?: string;
-    id: string;
-}
 export interface DeleteBlueprintInput {
     clientMutationId?: string;
     /** Unique identifier for this blueprint. */
@@ -12271,10 +12892,27 @@ export interface DeleteDenormalizedTableFieldInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeleteNotificationsModuleInput {
+    clientMutationId?: string;
+    id: string;
+}
+export interface DeleteEmailInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface DeleteOrgMemberProfileInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeleteSecureTableProvisionInput {
+    clientMutationId?: string;
+    /** Unique identifier for this provision row. */
+    id: string;
+}
+export interface DeleteOrgMembershipSettingInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface DeleteDatabaseTransferInput {
     clientMutationId?: string;
     id: string;
@@ -12303,6 +12941,10 @@ export interface DeleteViewInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeleteWebauthnAuthModuleInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface DeleteAppInput {
     clientMutationId?: string;
     /** Unique identifier for this app */
@@ -12337,11 +12979,6 @@ export interface DeletePolicyInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteEntityTypeProvisionInput {
-    clientMutationId?: string;
-    /** Unique identifier for this provision row. */
-    id: string;
-}
 export interface DeletePermissionsModuleInput {
     clientMutationId?: string;
     id: string;
@@ -12374,13 +13011,12 @@ export interface DeleteIndexInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteOrgInviteInput {
+export interface DeleteWebauthnCredentialInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteSecureTableProvisionInput {
+export interface DeleteOrgInviteInput {
     clientMutationId?: string;
-    /** Unique identifier for this provision row. */
     id: string;
 }
 export interface DeleteOrgMembershipInput {
@@ -12400,6 +13036,11 @@ export interface DeleteForeignKeyConstraintInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeleteEntityTypeProvisionInput {
+    clientMutationId?: string;
+    /** Unique identifier for this provision row. */
+    id: string;
+}
 export interface DeleteStorageModuleInput {
     clientMutationId?: string;
     id: string;
@@ -12408,21 +13049,21 @@ export interface DeleteTableInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteLevelsModuleInput {
+export interface DeleteRelationProvisionInput {
     clientMutationId?: string;
+    /** Unique identifier for this relation provision row. */
     id: string;
 }
-export interface DeleteUserAuthModuleInput {
+export interface DeleteLevelsModuleInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteFieldInput {
+export interface DeleteUserAuthModuleInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeleteRelationProvisionInput {
+export interface DeleteFieldInput {
     clientMutationId?: string;
-    /** Unique identifier for this relation provision row. */
     id: string;
 }
 export interface DeleteMembershipsModuleInput {
@@ -12432,6 +13073,13 @@ export interface DeleteMembershipsModuleInput {
 export interface RequestUploadUrlInput {
     /** Bucket key (e.g., "public", "private") */
     bucketKey: string;
+    /**
+     * Owner entity ID for entity-scoped uploads.
+     * Omit for app-level (database-wide) storage.
+     * When provided, resolves the storage module for the entity type
+     * that owns this entity instance (e.g., a data room ID, team ID).
+     */
+    ownerId?: string;
     /** SHA-256 content hash computed by the client (hex-encoded, 64 chars) */
     contentHash: string;
     /** MIME type of the file (e.g., "image/png") */
@@ -12448,6 +13096,11 @@ export interface ConfirmUploadInput {
 export interface ProvisionBucketInput {
     /** The logical bucket key (e.g., "public", "private") */
     bucketKey: string;
+    /**
+     * Owner entity ID for entity-scoped bucket provisioning.
+     * Omit for app-level (database-wide) storage.
+     */
+    ownerId?: string;
 }
 /** A connection to a list of `OrgGetManagersRecord` values. */
 export interface OrgGetManagersConnection {
@@ -12540,6 +13193,13 @@ export interface AppPermissionDefaultConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `IdentityProvider` values. */
+export interface IdentityProviderConnection {
+    nodes: IdentityProvider[];
+    edges: IdentityProviderEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `Ref` values. */
 export interface RefConnection {
     nodes: Ref[];
@@ -12624,6 +13284,13 @@ export interface ViewRuleConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `IdentityProvidersModule` values. */
+export interface IdentityProvidersModuleConnection {
+    nodes: IdentityProvidersModule[];
+    edges: IdentityProvidersModuleEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `SessionSecretsModule` values. */
 export interface SessionSecretsModuleConnection {
     nodes: SessionSecretsModule[];
@@ -12743,13 +13410,6 @@ export interface OrgOwnerGrantConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
-/** A connection to a list of `CryptoAddress` values. */
-export interface CryptoAddressConnection {
-    nodes: CryptoAddress[];
-    edges: CryptoAddressEdge[];
-    pageInfo: PageInfo;
-    totalCount: number;
-}
 /** A connection to a list of `UserConnectedAccount` values. */
 export interface UserConnectedAccountConnection {
     nodes: UserConnectedAccount[];
@@ -12771,10 +13431,10 @@ export interface CryptoAddressesModuleConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
-/** A connection to a list of `PhoneNumber` values. */
-export interface PhoneNumberConnection {
-    nodes: PhoneNumber[];
-    edges: PhoneNumberEdge[];
+/** A connection to a list of `CryptoAddress` values. */
+export interface CryptoAddressConnection {
+    nodes: CryptoAddress[];
+    edges: CryptoAddressEdge[];
     pageInfo: PageInfo;
     totalCount: number;
 }
@@ -12820,6 +13480,13 @@ export interface AppMembershipDefaultConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `OrgMembershipDefault` values. */
+export interface OrgMembershipDefaultConnection {
+    nodes: OrgMembershipDefault[];
+    edges: OrgMembershipDefaultEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `FullTextSearch` values. */
 export interface FullTextSearchConnection {
     nodes: FullTextSearch[];
@@ -12855,6 +13522,13 @@ export interface OrgChartEdgeGrantConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `PhoneNumber` values. */
+export interface PhoneNumberConnection {
+    nodes: PhoneNumber[];
+    edges: PhoneNumberEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `OrgLimit` values. */
 export interface OrgLimitConnection {
     nodes: OrgLimit[];
@@ -12904,13 +13578,6 @@ export interface OrgGrantConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
-/** A connection to a list of `OrgMembershipDefault` values. */
-export interface OrgMembershipDefaultConnection {
-    nodes: OrgMembershipDefault[];
-    edges: OrgMembershipDefaultEdge[];
-    pageInfo: PageInfo;
-    totalCount: number;
-}
 /** A connection to a list of `BlueprintConstruction` values. */
 export interface BlueprintConstructionConnection {
     nodes: BlueprintConstruction[];
@@ -12946,13 +13613,6 @@ export interface AppLevelConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
-/** A connection to a list of `Email` values. */
-export interface EmailConnection {
-    nodes: Email[];
-    edges: EmailEdge[];
-    pageInfo: PageInfo;
-    totalCount: number;
-}
 /** A connection to a list of `Blueprint` values. */
 export interface BlueprintConnection {
     nodes: Blueprint[];
@@ -12967,6 +13627,20 @@ export interface DenormalizedTableFieldConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `NotificationsModule` values. */
+export interface NotificationsModuleConnection {
+    nodes: NotificationsModule[];
+    edges: NotificationsModuleEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
+/** A connection to a list of `Email` values. */
+export interface EmailConnection {
+    nodes: Email[];
+    edges: EmailEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `OrgMemberProfile` values. */
 export interface OrgMemberProfileConnection {
     nodes: OrgMemberProfile[];
@@ -12981,6 +13655,20 @@ export interface SqlActionConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `SecureTableProvision` values. */
+export interface SecureTableProvisionConnection {
+    nodes: SecureTableProvision[];
+    edges: SecureTableProvisionEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
+/** A connection to a list of `OrgMembershipSetting` values. */
+export interface OrgMembershipSettingConnection {
+    nodes: OrgMembershipSetting[];
+    edges: OrgMembershipSettingEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `DatabaseTransfer` values. */
 export interface DatabaseTransferConnection {
     nodes: DatabaseTransfer[];
@@ -13030,6 +13718,13 @@ export interface ViewConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `WebauthnAuthModule` values. */
+export interface WebauthnAuthModuleConnection {
+    nodes: WebauthnAuthModule[];
+    edges: WebauthnAuthModuleEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `App` values. */
 export interface AppConnection {
     nodes: App[];
@@ -13093,13 +13788,6 @@ export interface PolicyConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
-/** A connection to a list of `EntityTypeProvision` values. */
-export interface EntityTypeProvisionConnection {
-    nodes: EntityTypeProvision[];
-    edges: EntityTypeProvisionEdge[];
-    pageInfo: PageInfo;
-    totalCount: number;
-}
 /** A connection to a list of `PermissionsModule` values. */
 export interface PermissionsModuleConnection {
     nodes: PermissionsModule[];
@@ -13156,6 +13844,13 @@ export interface IndexConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `WebauthnCredential` values. */
+export interface WebauthnCredentialConnection {
+    nodes: WebauthnCredential[];
+    edges: WebauthnCredentialEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `OrgInvite` values. */
 export interface OrgInviteConnection {
     nodes: OrgInvite[];
@@ -13163,13 +13858,6 @@ export interface OrgInviteConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
-/** A connection to a list of `SecureTableProvision` values. */
-export interface SecureTableProvisionConnection {
-    nodes: SecureTableProvision[];
-    edges: SecureTableProvisionEdge[];
-    pageInfo: PageInfo;
-    totalCount: number;
-}
 /** A connection to a list of `OrgMembership` values. */
 export interface OrgMembershipConnection {
     nodes: OrgMembership[];
@@ -13198,6 +13886,13 @@ export interface ForeignKeyConstraintConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `EntityTypeProvision` values. */
+export interface EntityTypeProvisionConnection {
+    nodes: EntityTypeProvision[];
+    edges: EntityTypeProvisionEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `StorageModule` values. */
 export interface StorageModuleConnection {
     nodes: StorageModule[];
@@ -13212,6 +13907,13 @@ export interface TableConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `RelationProvision` values. */
+export interface RelationProvisionConnection {
+    nodes: RelationProvision[];
+    edges: RelationProvisionEdge[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `LevelsModule` values. */
 export interface LevelsModuleConnection {
     nodes: LevelsModule[];
@@ -13233,13 +13935,6 @@ export interface FieldConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
-/** A connection to a list of `RelationProvision` values. */
-export interface RelationProvisionConnection {
-    nodes: RelationProvision[];
-    edges: RelationProvisionEdge[];
-    pageInfo: PageInfo;
-    totalCount: number;
-}
 /** A connection to a list of `MembershipsModule` values. */
 export interface MembershipsModuleConnection {
     nodes: MembershipsModule[];
@@ -13339,10 +14034,6 @@ export interface CopyTemplateToBlueprintPayload {
     clientMutationId?: string | null;
     result?: string | null;
 }
-export interface CreateApiKeyPayload {
-    clientMutationId?: string | null;
-    result?: CreateApiKeyRecord | null;
-}
 export interface ProvisionSpatialRelationPayload {
     clientMutationId?: string | null;
     result?: string | null;
@@ -13408,6 +14099,10 @@ export interface ExtendTokenExpiresPayload {
     clientMutationId?: string | null;
     result?: ExtendTokenExpiresRecord[] | null;
 }
+export interface CreateApiKeyPayload {
+    clientMutationId?: string | null;
+    result?: CreateApiKeyRecord | null;
+}
 export interface SignUpPayload {
     clientMutationId?: string | null;
     result?: SignUpRecord | null;
@@ -13467,6 +14162,11 @@ export interface CreateAppPermissionDefaultPayload {
     appPermissionDefault?: AppPermissionDefault | null;
     appPermissionDefaultEdge?: AppPermissionDefaultEdge | null;
 }
+export interface CreateIdentityProviderPayload {
+    clientMutationId?: string | null;
+    /** The `IdentityProvider` that was created by this mutation. */
+    identityProvider?: IdentityProvider | null;
+}
 export interface CreateRefPayload {
     clientMutationId?: string | null;
     /** The `Ref` that was created by this mutation. */
@@ -13539,6 +14239,12 @@ export interface CreateViewRulePayload {
     viewRule?: ViewRule | null;
     viewRuleEdge?: ViewRuleEdge | null;
 }
+export interface CreateIdentityProvidersModulePayload {
+    clientMutationId?: string | null;
+    /** The `IdentityProvidersModule` that was created by this mutation. */
+    identityProvidersModule?: IdentityProvidersModule | null;
+    identityProvidersModuleEdge?: IdentityProvidersModuleEdge | null;
+}
 export interface CreateSessionSecretsModulePayload {
     clientMutationId?: string | null;
     /** The `SessionSecretsModule` that was created by this mutation. */
@@ -13640,12 +14346,6 @@ export interface CreateOrgOwnerGrantPayload {
     orgOwnerGrant?: OrgOwnerGrant | null;
     orgOwnerGrantEdge?: OrgOwnerGrantEdge | null;
 }
-export interface CreateCryptoAddressPayload {
-    clientMutationId?: string | null;
-    /** The `CryptoAddress` that was created by this mutation. */
-    cryptoAddress?: CryptoAddress | null;
-    cryptoAddressEdge?: CryptoAddressEdge | null;
-}
 export interface CreateUserConnectedAccountPayload {
     clientMutationId?: string | null;
     /** The `UserConnectedAccount` that was created by this mutation. */
@@ -13669,11 +14369,11 @@ export interface CreateCryptoAddressesModulePayload {
     cryptoAddressesModule?: CryptoAddressesModule | null;
     cryptoAddressesModuleEdge?: CryptoAddressesModuleEdge | null;
 }
-export interface CreatePhoneNumberPayload {
+export interface CreateCryptoAddressPayload {
     clientMutationId?: string | null;
-    /** The `PhoneNumber` that was created by this mutation. */
-    phoneNumber?: PhoneNumber | null;
-    phoneNumberEdge?: PhoneNumberEdge | null;
+    /** The `CryptoAddress` that was created by this mutation. */
+    cryptoAddress?: CryptoAddress | null;
+    cryptoAddressEdge?: CryptoAddressEdge | null;
 }
 export interface CreateAppPermissionPayload {
     clientMutationId?: string | null;
@@ -13723,6 +14423,12 @@ export interface CreateAppMembershipDefaultPayload {
     appMembershipDefault?: AppMembershipDefault | null;
     appMembershipDefaultEdge?: AppMembershipDefaultEdge | null;
 }
+export interface CreateOrgMembershipDefaultPayload {
+    clientMutationId?: string | null;
+    /** The `OrgMembershipDefault` that was created by this mutation. */
+    orgMembershipDefault?: OrgMembershipDefault | null;
+    orgMembershipDefaultEdge?: OrgMembershipDefaultEdge | null;
+}
 export interface CreateFullTextSearchPayload {
     clientMutationId?: string | null;
     /** The `FullTextSearch` that was created by this mutation. */
@@ -13753,6 +14459,12 @@ export interface CreateOrgChartEdgeGrantPayload {
     orgChartEdgeGrant?: OrgChartEdgeGrant | null;
     orgChartEdgeGrantEdge?: OrgChartEdgeGrantEdge | null;
 }
+export interface CreatePhoneNumberPayload {
+    clientMutationId?: string | null;
+    /** The `PhoneNumber` that was created by this mutation. */
+    phoneNumber?: PhoneNumber | null;
+    phoneNumberEdge?: PhoneNumberEdge | null;
+}
 export interface CreateOrgLimitPayload {
     clientMutationId?: string | null;
     /** The `OrgLimit` that was created by this mutation. */
@@ -13795,12 +14507,6 @@ export interface CreateOrgGrantPayload {
     orgGrant?: OrgGrant | null;
     orgGrantEdge?: OrgGrantEdge | null;
 }
-export interface CreateOrgMembershipDefaultPayload {
-    clientMutationId?: string | null;
-    /** The `OrgMembershipDefault` that was created by this mutation. */
-    orgMembershipDefault?: OrgMembershipDefault | null;
-    orgMembershipDefaultEdge?: OrgMembershipDefaultEdge | null;
-}
 export interface CreateBlueprintConstructionPayload {
     clientMutationId?: string | null;
     /** The `BlueprintConstruction` that was created by this mutation. */
@@ -13837,12 +14543,6 @@ export interface CreateAppLevelPayload {
     appLevel?: AppLevel | null;
     appLevelEdge?: AppLevelEdge | null;
 }
-export interface CreateEmailPayload {
-    clientMutationId?: string | null;
-    /** The `Email` that was created by this mutation. */
-    email?: Email | null;
-    emailEdge?: EmailEdge | null;
-}
 export interface CreateBlueprintPayload {
     clientMutationId?: string | null;
     /** The `Blueprint` that was created by this mutation. */
@@ -13855,6 +14555,18 @@ export interface CreateDenormalizedTableFieldPayload {
     denormalizedTableField?: DenormalizedTableField | null;
     denormalizedTableFieldEdge?: DenormalizedTableFieldEdge | null;
 }
+export interface CreateNotificationsModulePayload {
+    clientMutationId?: string | null;
+    /** The `NotificationsModule` that was created by this mutation. */
+    notificationsModule?: NotificationsModule | null;
+    notificationsModuleEdge?: NotificationsModuleEdge | null;
+}
+export interface CreateEmailPayload {
+    clientMutationId?: string | null;
+    /** The `Email` that was created by this mutation. */
+    email?: Email | null;
+    emailEdge?: EmailEdge | null;
+}
 export interface CreateOrgMemberProfilePayload {
     clientMutationId?: string | null;
     /** The `OrgMemberProfile` that was created by this mutation. */
@@ -13866,6 +14578,18 @@ export interface CreateSqlActionPayload {
     /** The `SqlAction` that was created by this mutation. */
     sqlAction?: SqlAction | null;
 }
+export interface CreateSecureTableProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `SecureTableProvision` that was created by this mutation. */
+    secureTableProvision?: SecureTableProvision | null;
+    secureTableProvisionEdge?: SecureTableProvisionEdge | null;
+}
+export interface CreateOrgMembershipSettingPayload {
+    clientMutationId?: string | null;
+    /** The `OrgMembershipSetting` that was created by this mutation. */
+    orgMembershipSetting?: OrgMembershipSetting | null;
+    orgMembershipSettingEdge?: OrgMembershipSettingEdge | null;
+}
 export interface CreateDatabaseTransferPayload {
     clientMutationId?: string | null;
     /** The `DatabaseTransfer` that was created by this mutation. */
@@ -13908,6 +14632,12 @@ export interface CreateViewPayload {
     view?: View | null;
     viewEdge?: ViewEdge | null;
 }
+export interface CreateWebauthnAuthModulePayload {
+    clientMutationId?: string | null;
+    /** The `WebauthnAuthModule` that was created by this mutation. */
+    webauthnAuthModule?: WebauthnAuthModule | null;
+    webauthnAuthModuleEdge?: WebauthnAuthModuleEdge | null;
+}
 export interface CreateAppPayload {
     clientMutationId?: string | null;
     /** The `App` that was created by this mutation. */
@@ -13961,12 +14691,6 @@ export interface CreatePolicyPayload {
     policy?: Policy | null;
     policyEdge?: PolicyEdge | null;
 }
-export interface CreateEntityTypeProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `EntityTypeProvision` that was created by this mutation. */
-    entityTypeProvision?: EntityTypeProvision | null;
-    entityTypeProvisionEdge?: EntityTypeProvisionEdge | null;
-}
 export interface CreatePermissionsModulePayload {
     clientMutationId?: string | null;
     /** The `PermissionsModule` that was created by this mutation. */
@@ -14015,18 +14739,18 @@ export interface CreateIndexPayload {
     index?: Index | null;
     indexEdge?: IndexEdge | null;
 }
+export interface CreateWebauthnCredentialPayload {
+    clientMutationId?: string | null;
+    /** The `WebauthnCredential` that was created by this mutation. */
+    webauthnCredential?: WebauthnCredential | null;
+    webauthnCredentialEdge?: WebauthnCredentialEdge | null;
+}
 export interface CreateOrgInvitePayload {
     clientMutationId?: string | null;
     /** The `OrgInvite` that was created by this mutation. */
     orgInvite?: OrgInvite | null;
     orgInviteEdge?: OrgInviteEdge | null;
 }
-export interface CreateSecureTableProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `SecureTableProvision` that was created by this mutation. */
-    secureTableProvision?: SecureTableProvision | null;
-    secureTableProvisionEdge?: SecureTableProvisionEdge | null;
-}
 export interface CreateOrgMembershipPayload {
     clientMutationId?: string | null;
     /** The `OrgMembership` that was created by this mutation. */
@@ -14051,6 +14775,12 @@ export interface CreateForeignKeyConstraintPayload {
     foreignKeyConstraint?: ForeignKeyConstraint | null;
     foreignKeyConstraintEdge?: ForeignKeyConstraintEdge | null;
 }
+export interface CreateEntityTypeProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `EntityTypeProvision` that was created by this mutation. */
+    entityTypeProvision?: EntityTypeProvision | null;
+    entityTypeProvisionEdge?: EntityTypeProvisionEdge | null;
+}
 export interface CreateStorageModulePayload {
     clientMutationId?: string | null;
     /** The `StorageModule` that was created by this mutation. */
@@ -14063,6 +14793,12 @@ export interface CreateTablePayload {
     table?: Table | null;
     tableEdge?: TableEdge | null;
 }
+export interface CreateRelationProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `RelationProvision` that was created by this mutation. */
+    relationProvision?: RelationProvision | null;
+    relationProvisionEdge?: RelationProvisionEdge | null;
+}
 export interface CreateLevelsModulePayload {
     clientMutationId?: string | null;
     /** The `LevelsModule` that was created by this mutation. */
@@ -14081,12 +14817,6 @@ export interface CreateFieldPayload {
     field?: Field | null;
     fieldEdge?: FieldEdge | null;
 }
-export interface CreateRelationProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `RelationProvision` that was created by this mutation. */
-    relationProvision?: RelationProvision | null;
-    relationProvisionEdge?: RelationProvisionEdge | null;
-}
 export interface CreateMembershipsModulePayload {
     clientMutationId?: string | null;
     /** The `MembershipsModule` that was created by this mutation. */
@@ -14201,6 +14931,12 @@ export interface UpdateViewRulePayload {
     viewRule?: ViewRule | null;
     viewRuleEdge?: ViewRuleEdge | null;
 }
+export interface UpdateIdentityProvidersModulePayload {
+    clientMutationId?: string | null;
+    /** The `IdentityProvidersModule` that was updated by this mutation. */
+    identityProvidersModule?: IdentityProvidersModule | null;
+    identityProvidersModuleEdge?: IdentityProvidersModuleEdge | null;
+}
 export interface UpdateSessionSecretsModulePayload {
     clientMutationId?: string | null;
     /** The `SessionSecretsModule` that was updated by this mutation. */
@@ -14297,12 +15033,6 @@ export interface UpdateOrgOwnerGrantPayload {
     orgOwnerGrant?: OrgOwnerGrant | null;
     orgOwnerGrantEdge?: OrgOwnerGrantEdge | null;
 }
-export interface UpdateCryptoAddressPayload {
-    clientMutationId?: string | null;
-    /** The `CryptoAddress` that was updated by this mutation. */
-    cryptoAddress?: CryptoAddress | null;
-    cryptoAddressEdge?: CryptoAddressEdge | null;
-}
 export interface UpdateObjectPayload {
     clientMutationId?: string | null;
     /** The `Object` that was updated by this mutation. */
@@ -14321,11 +15051,11 @@ export interface UpdateCryptoAddressesModulePayload {
     cryptoAddressesModule?: CryptoAddressesModule | null;
     cryptoAddressesModuleEdge?: CryptoAddressesModuleEdge | null;
 }
-export interface UpdatePhoneNumberPayload {
+export interface UpdateCryptoAddressPayload {
     clientMutationId?: string | null;
-    /** The `PhoneNumber` that was updated by this mutation. */
-    phoneNumber?: PhoneNumber | null;
-    phoneNumberEdge?: PhoneNumberEdge | null;
+    /** The `CryptoAddress` that was updated by this mutation. */
+    cryptoAddress?: CryptoAddress | null;
+    cryptoAddressEdge?: CryptoAddressEdge | null;
 }
 export interface UpdateAppPermissionPayload {
     clientMutationId?: string | null;
@@ -14375,6 +15105,12 @@ export interface UpdateAppMembershipDefaultPayload {
     appMembershipDefault?: AppMembershipDefault | null;
     appMembershipDefaultEdge?: AppMembershipDefaultEdge | null;
 }
+export interface UpdateOrgMembershipDefaultPayload {
+    clientMutationId?: string | null;
+    /** The `OrgMembershipDefault` that was updated by this mutation. */
+    orgMembershipDefault?: OrgMembershipDefault | null;
+    orgMembershipDefaultEdge?: OrgMembershipDefaultEdge | null;
+}
 export interface UpdateFullTextSearchPayload {
     clientMutationId?: string | null;
     /** The `FullTextSearch` that was updated by this mutation. */
@@ -14405,6 +15141,12 @@ export interface UpdateOrgChartEdgeGrantPayload {
     orgChartEdgeGrant?: OrgChartEdgeGrant | null;
     orgChartEdgeGrantEdge?: OrgChartEdgeGrantEdge | null;
 }
+export interface UpdatePhoneNumberPayload {
+    clientMutationId?: string | null;
+    /** The `PhoneNumber` that was updated by this mutation. */
+    phoneNumber?: PhoneNumber | null;
+    phoneNumberEdge?: PhoneNumberEdge | null;
+}
 export interface UpdateOrgLimitPayload {
     clientMutationId?: string | null;
     /** The `OrgLimit` that was updated by this mutation. */
@@ -14447,12 +15189,6 @@ export interface UpdateOrgGrantPayload {
     orgGrant?: OrgGrant | null;
     orgGrantEdge?: OrgGrantEdge | null;
 }
-export interface UpdateOrgMembershipDefaultPayload {
-    clientMutationId?: string | null;
-    /** The `OrgMembershipDefault` that was updated by this mutation. */
-    orgMembershipDefault?: OrgMembershipDefault | null;
-    orgMembershipDefaultEdge?: OrgMembershipDefaultEdge | null;
-}
 export interface UpdateBlueprintConstructionPayload {
     clientMutationId?: string | null;
     /** The `BlueprintConstruction` that was updated by this mutation. */
@@ -14489,12 +15225,6 @@ export interface UpdateAppLevelPayload {
     appLevel?: AppLevel | null;
     appLevelEdge?: AppLevelEdge | null;
 }
-export interface UpdateEmailPayload {
-    clientMutationId?: string | null;
-    /** The `Email` that was updated by this mutation. */
-    email?: Email | null;
-    emailEdge?: EmailEdge | null;
-}
 export interface UpdateBlueprintPayload {
     clientMutationId?: string | null;
     /** The `Blueprint` that was updated by this mutation. */
@@ -14507,12 +15237,36 @@ export interface UpdateDenormalizedTableFieldPayload {
     denormalizedTableField?: DenormalizedTableField | null;
     denormalizedTableFieldEdge?: DenormalizedTableFieldEdge | null;
 }
+export interface UpdateNotificationsModulePayload {
+    clientMutationId?: string | null;
+    /** The `NotificationsModule` that was updated by this mutation. */
+    notificationsModule?: NotificationsModule | null;
+    notificationsModuleEdge?: NotificationsModuleEdge | null;
+}
+export interface UpdateEmailPayload {
+    clientMutationId?: string | null;
+    /** The `Email` that was updated by this mutation. */
+    email?: Email | null;
+    emailEdge?: EmailEdge | null;
+}
 export interface UpdateOrgMemberProfilePayload {
     clientMutationId?: string | null;
     /** The `OrgMemberProfile` that was updated by this mutation. */
     orgMemberProfile?: OrgMemberProfile | null;
     orgMemberProfileEdge?: OrgMemberProfileEdge | null;
 }
+export interface UpdateSecureTableProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `SecureTableProvision` that was updated by this mutation. */
+    secureTableProvision?: SecureTableProvision | null;
+    secureTableProvisionEdge?: SecureTableProvisionEdge | null;
+}
+export interface UpdateOrgMembershipSettingPayload {
+    clientMutationId?: string | null;
+    /** The `OrgMembershipSetting` that was updated by this mutation. */
+    orgMembershipSetting?: OrgMembershipSetting | null;
+    orgMembershipSettingEdge?: OrgMembershipSettingEdge | null;
+}
 export interface UpdateDatabaseTransferPayload {
     clientMutationId?: string | null;
     /** The `DatabaseTransfer` that was updated by this mutation. */
@@ -14555,6 +15309,12 @@ export interface UpdateViewPayload {
     view?: View | null;
     viewEdge?: ViewEdge | null;
 }
+export interface UpdateWebauthnAuthModulePayload {
+    clientMutationId?: string | null;
+    /** The `WebauthnAuthModule` that was updated by this mutation. */
+    webauthnAuthModule?: WebauthnAuthModule | null;
+    webauthnAuthModuleEdge?: WebauthnAuthModuleEdge | null;
+}
 export interface UpdateAppPayload {
     clientMutationId?: string | null;
     /** The `App` that was updated by this mutation. */
@@ -14603,12 +15363,6 @@ export interface UpdatePolicyPayload {
     policy?: Policy | null;
     policyEdge?: PolicyEdge | null;
 }
-export interface UpdateEntityTypeProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `EntityTypeProvision` that was updated by this mutation. */
-    entityTypeProvision?: EntityTypeProvision | null;
-    entityTypeProvisionEdge?: EntityTypeProvisionEdge | null;
-}
 export interface UpdatePermissionsModulePayload {
     clientMutationId?: string | null;
     /** The `PermissionsModule` that was updated by this mutation. */
@@ -14657,18 +15411,18 @@ export interface UpdateIndexPayload {
     index?: Index | null;
     indexEdge?: IndexEdge | null;
 }
+export interface UpdateWebauthnCredentialPayload {
+    clientMutationId?: string | null;
+    /** The `WebauthnCredential` that was updated by this mutation. */
+    webauthnCredential?: WebauthnCredential | null;
+    webauthnCredentialEdge?: WebauthnCredentialEdge | null;
+}
 export interface UpdateOrgInvitePayload {
     clientMutationId?: string | null;
     /** The `OrgInvite` that was updated by this mutation. */
     orgInvite?: OrgInvite | null;
     orgInviteEdge?: OrgInviteEdge | null;
 }
-export interface UpdateSecureTableProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `SecureTableProvision` that was updated by this mutation. */
-    secureTableProvision?: SecureTableProvision | null;
-    secureTableProvisionEdge?: SecureTableProvisionEdge | null;
-}
 export interface UpdateOrgMembershipPayload {
     clientMutationId?: string | null;
     /** The `OrgMembership` that was updated by this mutation. */
@@ -14693,6 +15447,12 @@ export interface UpdateForeignKeyConstraintPayload {
     foreignKeyConstraint?: ForeignKeyConstraint | null;
     foreignKeyConstraintEdge?: ForeignKeyConstraintEdge | null;
 }
+export interface UpdateEntityTypeProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `EntityTypeProvision` that was updated by this mutation. */
+    entityTypeProvision?: EntityTypeProvision | null;
+    entityTypeProvisionEdge?: EntityTypeProvisionEdge | null;
+}
 export interface UpdateStorageModulePayload {
     clientMutationId?: string | null;
     /** The `StorageModule` that was updated by this mutation. */
@@ -14705,6 +15465,12 @@ export interface UpdateTablePayload {
     table?: Table | null;
     tableEdge?: TableEdge | null;
 }
+export interface UpdateRelationProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `RelationProvision` that was updated by this mutation. */
+    relationProvision?: RelationProvision | null;
+    relationProvisionEdge?: RelationProvisionEdge | null;
+}
 export interface UpdateLevelsModulePayload {
     clientMutationId?: string | null;
     /** The `LevelsModule` that was updated by this mutation. */
@@ -14723,12 +15489,6 @@ export interface UpdateFieldPayload {
     field?: Field | null;
     fieldEdge?: FieldEdge | null;
 }
-export interface UpdateRelationProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `RelationProvision` that was updated by this mutation. */
-    relationProvision?: RelationProvision | null;
-    relationProvisionEdge?: RelationProvisionEdge | null;
-}
 export interface UpdateMembershipsModulePayload {
     clientMutationId?: string | null;
     /** The `MembershipsModule` that was updated by this mutation. */
@@ -14843,6 +15603,12 @@ export interface DeleteViewRulePayload {
     viewRule?: ViewRule | null;
     viewRuleEdge?: ViewRuleEdge | null;
 }
+export interface DeleteIdentityProvidersModulePayload {
+    clientMutationId?: string | null;
+    /** The `IdentityProvidersModule` that was deleted by this mutation. */
+    identityProvidersModule?: IdentityProvidersModule | null;
+    identityProvidersModuleEdge?: IdentityProvidersModuleEdge | null;
+}
 export interface DeleteSessionSecretsModulePayload {
     clientMutationId?: string | null;
     /** The `SessionSecretsModule` that was deleted by this mutation. */
@@ -14939,12 +15705,6 @@ export interface DeleteOrgOwnerGrantPayload {
     orgOwnerGrant?: OrgOwnerGrant | null;
     orgOwnerGrantEdge?: OrgOwnerGrantEdge | null;
 }
-export interface DeleteCryptoAddressPayload {
-    clientMutationId?: string | null;
-    /** The `CryptoAddress` that was deleted by this mutation. */
-    cryptoAddress?: CryptoAddress | null;
-    cryptoAddressEdge?: CryptoAddressEdge | null;
-}
 export interface DeleteObjectPayload {
     clientMutationId?: string | null;
     /** The `Object` that was deleted by this mutation. */
@@ -14963,11 +15723,11 @@ export interface DeleteCryptoAddressesModulePayload {
     cryptoAddressesModule?: CryptoAddressesModule | null;
     cryptoAddressesModuleEdge?: CryptoAddressesModuleEdge | null;
 }
-export interface DeletePhoneNumberPayload {
+export interface DeleteCryptoAddressPayload {
     clientMutationId?: string | null;
-    /** The `PhoneNumber` that was deleted by this mutation. */
-    phoneNumber?: PhoneNumber | null;
-    phoneNumberEdge?: PhoneNumberEdge | null;
+    /** The `CryptoAddress` that was deleted by this mutation. */
+    cryptoAddress?: CryptoAddress | null;
+    cryptoAddressEdge?: CryptoAddressEdge | null;
 }
 export interface DeleteAppPermissionPayload {
     clientMutationId?: string | null;
@@ -15017,6 +15777,12 @@ export interface DeleteAppMembershipDefaultPayload {
     appMembershipDefault?: AppMembershipDefault | null;
     appMembershipDefaultEdge?: AppMembershipDefaultEdge | null;
 }
+export interface DeleteOrgMembershipDefaultPayload {
+    clientMutationId?: string | null;
+    /** The `OrgMembershipDefault` that was deleted by this mutation. */
+    orgMembershipDefault?: OrgMembershipDefault | null;
+    orgMembershipDefaultEdge?: OrgMembershipDefaultEdge | null;
+}
 export interface DeleteFullTextSearchPayload {
     clientMutationId?: string | null;
     /** The `FullTextSearch` that was deleted by this mutation. */
@@ -15047,6 +15813,12 @@ export interface DeleteOrgChartEdgeGrantPayload {
     orgChartEdgeGrant?: OrgChartEdgeGrant | null;
     orgChartEdgeGrantEdge?: OrgChartEdgeGrantEdge | null;
 }
+export interface DeletePhoneNumberPayload {
+    clientMutationId?: string | null;
+    /** The `PhoneNumber` that was deleted by this mutation. */
+    phoneNumber?: PhoneNumber | null;
+    phoneNumberEdge?: PhoneNumberEdge | null;
+}
 export interface DeleteOrgLimitPayload {
     clientMutationId?: string | null;
     /** The `OrgLimit` that was deleted by this mutation. */
@@ -15089,12 +15861,6 @@ export interface DeleteOrgGrantPayload {
     orgGrant?: OrgGrant | null;
     orgGrantEdge?: OrgGrantEdge | null;
 }
-export interface DeleteOrgMembershipDefaultPayload {
-    clientMutationId?: string | null;
-    /** The `OrgMembershipDefault` that was deleted by this mutation. */
-    orgMembershipDefault?: OrgMembershipDefault | null;
-    orgMembershipDefaultEdge?: OrgMembershipDefaultEdge | null;
-}
 export interface DeleteBlueprintConstructionPayload {
     clientMutationId?: string | null;
     /** The `BlueprintConstruction` that was deleted by this mutation. */
@@ -15131,12 +15897,6 @@ export interface DeleteAppLevelPayload {
     appLevel?: AppLevel | null;
     appLevelEdge?: AppLevelEdge | null;
 }
-export interface DeleteEmailPayload {
-    clientMutationId?: string | null;
-    /** The `Email` that was deleted by this mutation. */
-    email?: Email | null;
-    emailEdge?: EmailEdge | null;
-}
 export interface DeleteBlueprintPayload {
     clientMutationId?: string | null;
     /** The `Blueprint` that was deleted by this mutation. */
@@ -15149,12 +15909,36 @@ export interface DeleteDenormalizedTableFieldPayload {
     denormalizedTableField?: DenormalizedTableField | null;
     denormalizedTableFieldEdge?: DenormalizedTableFieldEdge | null;
 }
+export interface DeleteNotificationsModulePayload {
+    clientMutationId?: string | null;
+    /** The `NotificationsModule` that was deleted by this mutation. */
+    notificationsModule?: NotificationsModule | null;
+    notificationsModuleEdge?: NotificationsModuleEdge | null;
+}
+export interface DeleteEmailPayload {
+    clientMutationId?: string | null;
+    /** The `Email` that was deleted by this mutation. */
+    email?: Email | null;
+    emailEdge?: EmailEdge | null;
+}
 export interface DeleteOrgMemberProfilePayload {
     clientMutationId?: string | null;
     /** The `OrgMemberProfile` that was deleted by this mutation. */
     orgMemberProfile?: OrgMemberProfile | null;
     orgMemberProfileEdge?: OrgMemberProfileEdge | null;
 }
+export interface DeleteSecureTableProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `SecureTableProvision` that was deleted by this mutation. */
+    secureTableProvision?: SecureTableProvision | null;
+    secureTableProvisionEdge?: SecureTableProvisionEdge | null;
+}
+export interface DeleteOrgMembershipSettingPayload {
+    clientMutationId?: string | null;
+    /** The `OrgMembershipSetting` that was deleted by this mutation. */
+    orgMembershipSetting?: OrgMembershipSetting | null;
+    orgMembershipSettingEdge?: OrgMembershipSettingEdge | null;
+}
 export interface DeleteDatabaseTransferPayload {
     clientMutationId?: string | null;
     /** The `DatabaseTransfer` that was deleted by this mutation. */
@@ -15197,6 +15981,12 @@ export interface DeleteViewPayload {
     view?: View | null;
     viewEdge?: ViewEdge | null;
 }
+export interface DeleteWebauthnAuthModulePayload {
+    clientMutationId?: string | null;
+    /** The `WebauthnAuthModule` that was deleted by this mutation. */
+    webauthnAuthModule?: WebauthnAuthModule | null;
+    webauthnAuthModuleEdge?: WebauthnAuthModuleEdge | null;
+}
 export interface DeleteAppPayload {
     clientMutationId?: string | null;
     /** The `App` that was deleted by this mutation. */
@@ -15245,12 +16035,6 @@ export interface DeletePolicyPayload {
     policy?: Policy | null;
     policyEdge?: PolicyEdge | null;
 }
-export interface DeleteEntityTypeProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `EntityTypeProvision` that was deleted by this mutation. */
-    entityTypeProvision?: EntityTypeProvision | null;
-    entityTypeProvisionEdge?: EntityTypeProvisionEdge | null;
-}
 export interface DeletePermissionsModulePayload {
     clientMutationId?: string | null;
     /** The `PermissionsModule` that was deleted by this mutation. */
@@ -15299,18 +16083,18 @@ export interface DeleteIndexPayload {
     index?: Index | null;
     indexEdge?: IndexEdge | null;
 }
+export interface DeleteWebauthnCredentialPayload {
+    clientMutationId?: string | null;
+    /** The `WebauthnCredential` that was deleted by this mutation. */
+    webauthnCredential?: WebauthnCredential | null;
+    webauthnCredentialEdge?: WebauthnCredentialEdge | null;
+}
 export interface DeleteOrgInvitePayload {
     clientMutationId?: string | null;
     /** The `OrgInvite` that was deleted by this mutation. */
     orgInvite?: OrgInvite | null;
     orgInviteEdge?: OrgInviteEdge | null;
 }
-export interface DeleteSecureTableProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `SecureTableProvision` that was deleted by this mutation. */
-    secureTableProvision?: SecureTableProvision | null;
-    secureTableProvisionEdge?: SecureTableProvisionEdge | null;
-}
 export interface DeleteOrgMembershipPayload {
     clientMutationId?: string | null;
     /** The `OrgMembership` that was deleted by this mutation. */
@@ -15335,6 +16119,12 @@ export interface DeleteForeignKeyConstraintPayload {
     foreignKeyConstraint?: ForeignKeyConstraint | null;
     foreignKeyConstraintEdge?: ForeignKeyConstraintEdge | null;
 }
+export interface DeleteEntityTypeProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `EntityTypeProvision` that was deleted by this mutation. */
+    entityTypeProvision?: EntityTypeProvision | null;
+    entityTypeProvisionEdge?: EntityTypeProvisionEdge | null;
+}
 export interface DeleteStorageModulePayload {
     clientMutationId?: string | null;
     /** The `StorageModule` that was deleted by this mutation. */
@@ -15347,6 +16137,12 @@ export interface DeleteTablePayload {
     table?: Table | null;
     tableEdge?: TableEdge | null;
 }
+export interface DeleteRelationProvisionPayload {
+    clientMutationId?: string | null;
+    /** The `RelationProvision` that was deleted by this mutation. */
+    relationProvision?: RelationProvision | null;
+    relationProvisionEdge?: RelationProvisionEdge | null;
+}
 export interface DeleteLevelsModulePayload {
     clientMutationId?: string | null;
     /** The `LevelsModule` that was deleted by this mutation. */
@@ -15365,12 +16161,6 @@ export interface DeleteFieldPayload {
     field?: Field | null;
     fieldEdge?: FieldEdge | null;
 }
-export interface DeleteRelationProvisionPayload {
-    clientMutationId?: string | null;
-    /** The `RelationProvision` that was deleted by this mutation. */
-    relationProvision?: RelationProvision | null;
-    relationProvisionEdge?: RelationProvisionEdge | null;
-}
 export interface DeleteMembershipsModulePayload {
     clientMutationId?: string | null;
     /** The `MembershipsModule` that was deleted by this mutation. */
@@ -15500,6 +16290,12 @@ export interface AppPermissionDefaultEdge {
     /** The `AppPermissionDefault` at the end of the edge. */
     node?: AppPermissionDefault | null;
 }
+/** A `IdentityProvider` edge in the connection. */
+export interface IdentityProviderEdge {
+    cursor?: string | null;
+    /** The `IdentityProvider` at the end of the edge. */
+    node?: IdentityProvider | null;
+}
 /** A `Ref` edge in the connection. */
 export interface RefEdge {
     cursor?: string | null;
@@ -15572,6 +16368,12 @@ export interface ViewRuleEdge {
     /** The `ViewRule` at the end of the edge. */
     node?: ViewRule | null;
 }
+/** A `IdentityProvidersModule` edge in the connection. */
+export interface IdentityProvidersModuleEdge {
+    cursor?: string | null;
+    /** The `IdentityProvidersModule` at the end of the edge. */
+    node?: IdentityProvidersModule | null;
+}
 /** A `SessionSecretsModule` edge in the connection. */
 export interface SessionSecretsModuleEdge {
     cursor?: string | null;
@@ -15674,12 +16476,6 @@ export interface OrgOwnerGrantEdge {
     /** The `OrgOwnerGrant` at the end of the edge. */
     node?: OrgOwnerGrant | null;
 }
-/** A `CryptoAddress` edge in the connection. */
-export interface CryptoAddressEdge {
-    cursor?: string | null;
-    /** The `CryptoAddress` at the end of the edge. */
-    node?: CryptoAddress | null;
-}
 /** A `UserConnectedAccount` edge in the connection. */
 export interface UserConnectedAccountEdge {
     cursor?: string | null;
@@ -15698,11 +16494,11 @@ export interface CryptoAddressesModuleEdge {
     /** The `CryptoAddressesModule` at the end of the edge. */
     node?: CryptoAddressesModule | null;
 }
-/** A `PhoneNumber` edge in the connection. */
-export interface PhoneNumberEdge {
+/** A `CryptoAddress` edge in the connection. */
+export interface CryptoAddressEdge {
     cursor?: string | null;
-    /** The `PhoneNumber` at the end of the edge. */
-    node?: PhoneNumber | null;
+    /** The `CryptoAddress` at the end of the edge. */
+    node?: CryptoAddress | null;
 }
 /** A `AppLimit` edge in the connection. */
 export interface AppLimitEdge {
@@ -15740,6 +16536,12 @@ export interface AppMembershipDefaultEdge {
     /** The `AppMembershipDefault` at the end of the edge. */
     node?: AppMembershipDefault | null;
 }
+/** A `OrgMembershipDefault` edge in the connection. */
+export interface OrgMembershipDefaultEdge {
+    cursor?: string | null;
+    /** The `OrgMembershipDefault` at the end of the edge. */
+    node?: OrgMembershipDefault | null;
+}
 /** A `FullTextSearch` edge in the connection. */
 export interface FullTextSearchEdge {
     cursor?: string | null;
@@ -15770,6 +16572,12 @@ export interface OrgChartEdgeGrantEdge {
     /** The `OrgChartEdgeGrant` at the end of the edge. */
     node?: OrgChartEdgeGrant | null;
 }
+/** A `PhoneNumber` edge in the connection. */
+export interface PhoneNumberEdge {
+    cursor?: string | null;
+    /** The `PhoneNumber` at the end of the edge. */
+    node?: PhoneNumber | null;
+}
 /** A `OrgLimit` edge in the connection. */
 export interface OrgLimitEdge {
     cursor?: string | null;
@@ -15812,12 +16620,6 @@ export interface OrgGrantEdge {
     /** The `OrgGrant` at the end of the edge. */
     node?: OrgGrant | null;
 }
-/** A `OrgMembershipDefault` edge in the connection. */
-export interface OrgMembershipDefaultEdge {
-    cursor?: string | null;
-    /** The `OrgMembershipDefault` at the end of the edge. */
-    node?: OrgMembershipDefault | null;
-}
 /** A `BlueprintConstruction` edge in the connection. */
 export interface BlueprintConstructionEdge {
     cursor?: string | null;
@@ -15848,12 +16650,6 @@ export interface AppLevelEdge {
     /** The `AppLevel` at the end of the edge. */
     node?: AppLevel | null;
 }
-/** A `Email` edge in the connection. */
-export interface EmailEdge {
-    cursor?: string | null;
-    /** The `Email` at the end of the edge. */
-    node?: Email | null;
-}
 /** A `Blueprint` edge in the connection. */
 export interface BlueprintEdge {
     cursor?: string | null;
@@ -15866,6 +16662,18 @@ export interface DenormalizedTableFieldEdge {
     /** The `DenormalizedTableField` at the end of the edge. */
     node?: DenormalizedTableField | null;
 }
+/** A `NotificationsModule` edge in the connection. */
+export interface NotificationsModuleEdge {
+    cursor?: string | null;
+    /** The `NotificationsModule` at the end of the edge. */
+    node?: NotificationsModule | null;
+}
+/** A `Email` edge in the connection. */
+export interface EmailEdge {
+    cursor?: string | null;
+    /** The `Email` at the end of the edge. */
+    node?: Email | null;
+}
 /** A `OrgMemberProfile` edge in the connection. */
 export interface OrgMemberProfileEdge {
     cursor?: string | null;
@@ -15878,6 +16686,18 @@ export interface SqlActionEdge {
     /** The `SqlAction` at the end of the edge. */
     node?: SqlAction | null;
 }
+/** A `SecureTableProvision` edge in the connection. */
+export interface SecureTableProvisionEdge {
+    cursor?: string | null;
+    /** The `SecureTableProvision` at the end of the edge. */
+    node?: SecureTableProvision | null;
+}
+/** A `OrgMembershipSetting` edge in the connection. */
+export interface OrgMembershipSettingEdge {
+    cursor?: string | null;
+    /** The `OrgMembershipSetting` at the end of the edge. */
+    node?: OrgMembershipSetting | null;
+}
 /** A `DatabaseTransfer` edge in the connection. */
 export interface DatabaseTransferEdge {
     cursor?: string | null;
@@ -15920,6 +16740,12 @@ export interface ViewEdge {
     /** The `View` at the end of the edge. */
     node?: View | null;
 }
+/** A `WebauthnAuthModule` edge in the connection. */
+export interface WebauthnAuthModuleEdge {
+    cursor?: string | null;
+    /** The `WebauthnAuthModule` at the end of the edge. */
+    node?: WebauthnAuthModule | null;
+}
 /** A `App` edge in the connection. */
 export interface AppEdge {
     cursor?: string | null;
@@ -15974,12 +16800,6 @@ export interface PolicyEdge {
     /** The `Policy` at the end of the edge. */
     node?: Policy | null;
 }
-/** A `EntityTypeProvision` edge in the connection. */
-export interface EntityTypeProvisionEdge {
-    cursor?: string | null;
-    /** The `EntityTypeProvision` at the end of the edge. */
-    node?: EntityTypeProvision | null;
-}
 /** A `PermissionsModule` edge in the connection. */
 export interface PermissionsModuleEdge {
     cursor?: string | null;
@@ -16028,18 +16848,18 @@ export interface IndexEdge {
     /** The `Index` at the end of the edge. */
     node?: Index | null;
 }
+/** A `WebauthnCredential` edge in the connection. */
+export interface WebauthnCredentialEdge {
+    cursor?: string | null;
+    /** The `WebauthnCredential` at the end of the edge. */
+    node?: WebauthnCredential | null;
+}
 /** A `OrgInvite` edge in the connection. */
 export interface OrgInviteEdge {
     cursor?: string | null;
     /** The `OrgInvite` at the end of the edge. */
     node?: OrgInvite | null;
 }
-/** A `SecureTableProvision` edge in the connection. */
-export interface SecureTableProvisionEdge {
-    cursor?: string | null;
-    /** The `SecureTableProvision` at the end of the edge. */
-    node?: SecureTableProvision | null;
-}
 /** A `OrgMembership` edge in the connection. */
 export interface OrgMembershipEdge {
     cursor?: string | null;
@@ -16064,6 +16884,12 @@ export interface ForeignKeyConstraintEdge {
     /** The `ForeignKeyConstraint` at the end of the edge. */
     node?: ForeignKeyConstraint | null;
 }
+/** A `EntityTypeProvision` edge in the connection. */
+export interface EntityTypeProvisionEdge {
+    cursor?: string | null;
+    /** The `EntityTypeProvision` at the end of the edge. */
+    node?: EntityTypeProvision | null;
+}
 /** A `StorageModule` edge in the connection. */
 export interface StorageModuleEdge {
     cursor?: string | null;
@@ -16076,6 +16902,12 @@ export interface TableEdge {
     /** The `Table` at the end of the edge. */
     node?: Table | null;
 }
+/** A `RelationProvision` edge in the connection. */
+export interface RelationProvisionEdge {
+    cursor?: string | null;
+    /** The `RelationProvision` at the end of the edge. */
+    node?: RelationProvision | null;
+}
 /** A `LevelsModule` edge in the connection. */
 export interface LevelsModuleEdge {
     cursor?: string | null;
@@ -16094,12 +16926,6 @@ export interface FieldEdge {
     /** The `Field` at the end of the edge. */
     node?: Field | null;
 }
-/** A `RelationProvision` edge in the connection. */
-export interface RelationProvisionEdge {
-    cursor?: string | null;
-    /** The `RelationProvision` at the end of the edge. */
-    node?: RelationProvision | null;
-}
 /** A `MembershipsModule` edge in the connection. */
 export interface MembershipsModuleEdge {
     cursor?: string | null;
@@ -16120,10 +16946,6 @@ export interface MetaTable {
     inflection: MetaInflection;
     query: MetaQuery;
 }
-export interface CreateApiKeyRecord {
-    apiKey?: string | null;
-    keyId?: string | null;
-}
 export interface BootstrapUserRecord {
     outUserId?: string | null;
     outEmail?: string | null;
@@ -16157,6 +16979,11 @@ export interface ExtendTokenExpiresRecord {
     sessionId?: string | null;
     expiresAt?: string | null;
 }
+export interface CreateApiKeyRecord {
+    apiKey?: string | null;
+    keyId?: string | null;
+    expiresAt?: string | null;
+}
 export interface SignUpRecord {
     id?: string | null;
     userId?: string | null;