@constructive-io/react 1.19.2 → 1.19.4

package/esm/auth/schema-types.d.ts

@@ -3,13 +3,13 @@
  * @generated by @constructive-io/graphql-codegen
  * DO NOT EDIT - changes will be overwritten
  */
-import type { AuditLogAuth, CryptoAddress, Email, IdentityProvider, OrgApiKeyList, PhoneNumber, Principal, PrincipalEntity, PrincipalScopeOverride, RoleType, User, UserConnectedAccount, WebauthnCredential, BigIntFilter, BitStringFilter, BooleanFilter, DatetimeFilter, FullTextFilter, IntFilter, InternetAddressFilter, JSONFilter, StringFilter, StringListFilter, UUIDFilter } from './types';
+import type { AuditLogAuth, CryptoAddress, Email, IdentityProvider, OrgApiKeyList, PhoneNumber, Principal, PrincipalEntity, PrincipalScopeOverride, RoleType, User, UserConnectedAccount, UserSetting, UserSettingsSecurity, WebauthnCredential, BigIntFilter, BitStringFilter, BooleanFilter, DatetimeFilter, FullTextFilter, IntFilter, InternetAddressFilter, JSONFilter, StringFilter, StringListFilter, UUIDFilter } from './types';
 export type Base64EncodedBinary = unknown;
 export type ConstructiveInternalTypeEmail = unknown;
 export type ConstructiveInternalTypeImage = unknown;
 export type ConstructiveInternalTypeOrigin = unknown;
 /** Methods to use when ordering `AuditLogAuth`. */
-export type AuditLogAuthOrderBy = 'ACTOR_ID_ASC' | 'ACTOR_ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'EVENT_ASC' | 'EVENT_DESC' | 'ID_ASC' | 'ID_DESC' | 'IP_ADDRESS_ASC' | 'IP_ADDRESS_DESC' | 'NATURAL' | 'ORIGIN_ASC' | 'ORIGIN_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'SUCCESS_ASC' | 'SUCCESS_DESC' | 'USER_AGENT_ASC' | 'USER_AGENT_DESC';
+export type AuditLogAuthOrderBy = 'ACTOR_ID_ASC' | 'ACTOR_ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'DETAILS_ASC' | 'DETAILS_DESC' | 'EVENT_ASC' | 'EVENT_DESC' | 'ID_ASC' | 'ID_DESC' | 'IP_ADDRESS_ASC' | 'IP_ADDRESS_DESC' | 'NATURAL' | 'ORIGIN_ASC' | 'ORIGIN_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'SUCCESS_ASC' | 'SUCCESS_DESC' | 'USER_AGENT_ASC' | 'USER_AGENT_DESC';
 /** Methods to use when ordering `CryptoAddress`. */
 export type CryptoAddressOrderBy = 'ADDRESS_ASC' | 'ADDRESS_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'ID_ASC' | 'ID_DESC' | 'IS_PRIMARY_ASC' | 'IS_PRIMARY_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `Email`. */
@@ -23,7 +23,7 @@ export type PhoneNumberOrderBy = 'CC_ASC' | 'CC_DESC' | 'CREATED_AT_ASC' | 'CREA
 /** Methods to use when ordering `PrincipalEntity`. */
 export type PrincipalEntityOrderBy = 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'ENTITY_ID_ASC' | 'ENTITY_ID_DESC' | 'ID_ASC' | 'ID_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `Principal`. */
-export type PrincipalOrderBy = 'BYPASS_STEP_UP_ASC' | 'BYPASS_STEP_UP_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'ID_ASC' | 'ID_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'USER_ID_ASC' | 'USER_ID_DESC' | 'USE_ADMIN_OWNER_ASC' | 'USE_ADMIN_OWNER_DESC';
+export type PrincipalOrderBy = 'API_KEY_MAX_DURATION_ASC' | 'API_KEY_MAX_DURATION_DESC' | 'BYPASS_STEP_UP_ASC' | 'BYPASS_STEP_UP_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'CREATED_BY_SESSION_ID_ASC' | 'CREATED_BY_SESSION_ID_DESC' | 'DEPTH_ASC' | 'DEPTH_DESC' | 'EXPIRES_AT_ASC' | 'EXPIRES_AT_DESC' | 'ID_ASC' | 'ID_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'PARENT_PRINCIPAL_ID_ASC' | 'PARENT_PRINCIPAL_ID_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'USER_ID_ASC' | 'USER_ID_DESC' | 'USE_ADMIN_OWNER_ASC' | 'USE_ADMIN_OWNER_DESC';
 /** Methods to use when ordering `PrincipalScopeOverride`. */
 export type PrincipalScopeOverrideOrderBy = 'ALLOWED_MASK_ASC' | 'ALLOWED_MASK_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'ID_ASC' | 'ID_DESC' | 'IS_ACTIVE_ASC' | 'IS_ACTIVE_DESC' | 'IS_READ_ONLY_ASC' | 'IS_READ_ONLY_DESC' | 'MEMBERSHIP_TYPE_ASC' | 'MEMBERSHIP_TYPE_DESC' | 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'PRINCIPAL_ID_ASC' | 'PRINCIPAL_ID_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'USE_ADMIN_OWNER_ASC' | 'USE_ADMIN_OWNER_DESC';
 /** Methods to use when ordering `RoleType`. */
@@ -32,8 +32,16 @@ export type RoleTypeOrderBy = 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' |
 export type UserConnectedAccountOrderBy = 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'DETAILS_ASC' | 'DETAILS_DESC' | 'IDENTIFIER_ASC' | 'IDENTIFIER_DESC' | 'ID_ASC' | 'ID_DESC' | 'IS_VERIFIED_ASC' | 'IS_VERIFIED_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'SERVICE_ASC' | 'SERVICE_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `User`. */
 export type UserOrderBy = 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'DISPLAY_NAME_ASC' | 'DISPLAY_NAME_DESC' | 'DISPLAY_NAME_TRGM_SIMILARITY_ASC' | 'DISPLAY_NAME_TRGM_SIMILARITY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'PROFILE_PICTURE_ASC' | 'PROFILE_PICTURE_DESC' | 'SEARCH_SCORE_ASC' | 'SEARCH_SCORE_DESC' | 'SEARCH_TSV_ASC' | 'SEARCH_TSV_DESC' | 'SEARCH_TSV_RANK_ASC' | 'SEARCH_TSV_RANK_DESC' | 'TYPE_ASC' | 'TYPE_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'USERNAME_ASC' | 'USERNAME_DESC';
+/** Methods to use when ordering `UserSetting`. */
+export type UserSettingOrderBy = 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'ID_ASC' | 'ID_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
+/** Methods to use when ordering `UserSettingsSecurity`. */
+export type UserSettingsSecurityOrderBy = 'BACKUP_CODES_COUNT_ASC' | 'BACKUP_CODES_COUNT_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'EMAIL_MFA_ENABLED_ASC' | 'EMAIL_MFA_ENABLED_DESC' | 'ID_ASC' | 'ID_DESC' | 'MFA_ENROLLED_AT_ASC' | 'MFA_ENROLLED_AT_DESC' | 'MFA_LAST_USED_AT_ASC' | 'MFA_LAST_USED_AT_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'SMS_MFA_ENABLED_ASC' | 'SMS_MFA_ENABLED_DESC' | 'TOTP_ENABLED_ASC' | 'TOTP_ENABLED_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC';
 /** Methods to use when ordering `WebauthnCredential`. */
 export type WebauthnCredentialOrderBy = 'BACKUP_ELIGIBLE_ASC' | 'BACKUP_ELIGIBLE_DESC' | 'BACKUP_STATE_ASC' | 'BACKUP_STATE_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'CREDENTIAL_DEVICE_TYPE_ASC' | 'CREDENTIAL_DEVICE_TYPE_DESC' | 'CREDENTIAL_ID_ASC' | 'CREDENTIAL_ID_DESC' | 'ID_ASC' | 'ID_DESC' | 'LAST_USED_AT_ASC' | 'LAST_USED_AT_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'NATURAL' | 'OWNER_ID_ASC' | 'OWNER_ID_DESC' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'PUBLIC_KEY_ASC' | 'PUBLIC_KEY_DESC' | 'SIGN_COUNT_ASC' | 'SIGN_COUNT_DESC' | 'TRANSPORTS_ASC' | 'TRANSPORTS_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'WEBAUTHN_USER_ID_ASC' | 'WEBAUTHN_USER_ID_DESC';
+export interface ApproveDeviceInput {
+    approvalToken: string;
+    clientMutationId?: string;
+}
 /** A filter to be used against `AuditLogAuth` object types. All fields are combined with a logical ‘and.’ */
 export interface AuditLogAuthFilter {
     /** Filter by the object’s `actor` relation. */
@@ -46,6 +54,8 @@ export interface AuditLogAuthFilter {
     and?: AuditLogAuthFilter[];
     /** Filter by the object’s `createdAt` field. */
     createdAt?: DatetimeFilter;
+    /** Filter by the object’s `details` field. */
+    details?: JSONFilter;
     /** Filter by the object’s `event` field. */
     event?: StringFilter;
     /** Filter by the object’s `id` field. */
@@ -68,6 +78,8 @@ export interface AuditLogAuthInput {
     /** User who performed the authentication action; NULL if user was deleted */
     actorId?: string;
     createdAt?: string;
+    /** Event-specific structured payload (e.g. preset slug and catalog commit id for create_principal_from_preset) */
+    details?: unknown;
     /** Type of authentication event (e.g. sign_in, sign_up, password_change, verify_email) */
     event: string;
     /** Unique identifier for each audit event (uuidv7 provides temporal ordering) */
@@ -86,6 +98,8 @@ export interface AuditLogAuthPatch {
     /** User who performed the authentication action; NULL if user was deleted */
     actorId?: string;
     createdAt?: string;
+    /** Event-specific structured payload (e.g. preset slug and catalog commit id for create_principal_from_preset) */
+    details?: unknown;
     /** Type of authentication event (e.g. sign_in, sign_up, password_change, verify_email) */
     event?: string;
     /** Unique identifier for each audit event (uuidv7 provides temporal ordering) */
@@ -120,11 +134,27 @@ export interface CheckPasswordInput {
     clientMutationId?: string;
     password?: string;
 }
+export interface CompleteMfaChallengeInput {
+    authMethod?: string;
+    clientMutationId?: string;
+    credentialKind?: string;
+    deviceToken?: string;
+    mfaChallengeToken?: string;
+    mfaMethod?: string;
+    rememberMe?: boolean;
+    totpCode?: string;
+    trustDevice?: boolean;
+    userId?: string;
+}
 export interface ConfirmDeleteAccountInput {
     clientMutationId?: string;
     token?: string;
     userId?: string;
 }
+export interface ConfirmTotpSetupInput {
+    clientMutationId?: string;
+    totpValue: string;
+}
 /** A filter to be used against ConstructiveInternalTypeEmail fields. All fields are combined with a logical ‘and.’ */
 export interface ConstructiveInternalTypeEmailFilter {
     /** Not equal to the specified value, treating null like an ordinary value. */
@@ -327,6 +357,16 @@ export interface CreateAuditLogAuthInput {
     auditLogAuth: AuditLogAuthInput;
     clientMutationId?: string;
 }
+export interface CreateChildPrincipalInput {
+    allowedMask?: string;
+    clientMutationId?: string;
+    entityIds?: string[];
+    expiresAt?: string;
+    intent?: string;
+    isReadOnly?: boolean;
+    name?: string;
+    parentPrincipalId?: string;
+}
 export interface CreateCryptoAddressInput {
     clientMutationId?: string;
     /** The `CryptoAddress` to be created by this mutation. */
@@ -359,10 +399,12 @@ export interface CreatePhoneNumberInput {
     /** The `PhoneNumber` to be created by this mutation. */
     phoneNumber: PhoneNumberInput;
 }
-export interface CreatePrincipalEntityInput {
+export interface CreatePrincipalFromPresetInput {
     clientMutationId?: string;
-    /** The `PrincipalEntity` to be created by this mutation. */
-    principalEntity: PrincipalEntityInput;
+    entityIds?: string[];
+    name?: string;
+    overrides?: unknown;
+    slug?: string;
 }
 export interface CreatePrincipalInput {
     bypassStepUp?: boolean;
@@ -382,6 +424,16 @@ export interface CreateUserInput {
     /** The `User` to be created by this mutation. */
     user: UserInput;
 }
+export interface CreateUserSettingInput {
+    clientMutationId?: string;
+    /** The `UserSetting` to be created by this mutation. */
+    userSetting: UserSettingInput;
+}
+export interface CreateUserSettingsSecurityInput {
+    clientMutationId?: string;
+    /** The `UserSettingsSecurity` to be created by this mutation. */
+    userSettingsSecurity: UserSettingsSecurityInput;
+}
 export interface CreateWebauthnCredentialInput {
     clientMutationId?: string;
     /** The `WebauthnCredential` to be created by this mutation. */
@@ -466,10 +518,6 @@ export interface DeletePhoneNumberInput {
     clientMutationId?: string;
     id: string;
 }
-export interface DeletePrincipalEntityInput {
-    clientMutationId?: string;
-    id: string;
-}
 export interface DeletePrincipalInput {
     clientMutationId?: string;
     principalId?: string;
@@ -482,10 +530,28 @@ export interface DeleteUserInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DeleteUserSettingInput {
+    clientMutationId?: string;
+    id: string;
+}
+export interface DeleteUserSettingsSecurityInput {
+    clientMutationId?: string;
+    id: string;
+}
 export interface DeleteWebauthnCredentialInput {
     clientMutationId?: string;
     id: string;
 }
+export interface DisableEmailMfaInput {
+    clientMutationId?: string;
+}
+export interface DisableSmsMfaInput {
+    clientMutationId?: string;
+}
+export interface DisableTotpInput {
+    clientMutationId?: string;
+    totpValue: string;
+}
 export interface DisconnectAccountInput {
     accountId: string;
     clientMutationId?: string;
@@ -547,6 +613,15 @@ export interface EmailPatch {
     ownerId?: string;
     updatedAt?: string;
 }
+export interface EnableEmailMfaInput {
+    clientMutationId?: string;
+}
+export interface EnableSmsMfaInput {
+    clientMutationId?: string;
+}
+export interface EnableTotpInput {
+    clientMutationId?: string;
+}
 export interface ExtendTokenExpiresInput {
     amount?: IntervalInput;
     clientMutationId?: string;
@@ -555,6 +630,9 @@ export interface ForgotPasswordInput {
     clientMutationId?: string;
     email?: ConstructiveInternalTypeEmail;
 }
+export interface GenerateBackupCodesInput {
+    clientMutationId?: string;
+}
 /** A filter to be used against `IdentityProvider` object types. All fields are combined with a logical ‘and.’ */
 export interface IdentityProviderFilter {
     /** Checks for all expressions in this list. */
@@ -572,6 +650,31 @@ export interface IdentityProviderFilter {
     /** Filter by the object’s `slug` field. */
     slug?: StringFilter;
 }
+/** A filter to be used against Interval fields. All fields are combined with a logical ‘and.’ */
+export interface IntervalFilter {
+    /** Not equal to the specified value, treating null like an ordinary value. */
+    distinctFrom?: IntervalInput;
+    /** Equal to the specified value. */
+    equalTo?: IntervalInput;
+    /** Greater than the specified value. */
+    greaterThan?: IntervalInput;
+    /** Greater than or equal to the specified value. */
+    greaterThanOrEqualTo?: IntervalInput;
+    /** Included in the specified list. */
+    in?: IntervalInput[];
+    /** Is null (if `true` is specified) or is not null (if `false` is specified). */
+    isNull?: boolean;
+    /** Less than the specified value. */
+    lessThan?: IntervalInput;
+    /** Less than or equal to the specified value. */
+    lessThanOrEqualTo?: IntervalInput;
+    /** Equal to the specified value, treating null like an ordinary value. */
+    notDistinctFrom?: IntervalInput;
+    /** Not equal to the specified value. */
+    notEqualTo?: IntervalInput;
+    /** Not included in the specified list. */
+    notIn?: IntervalInput[];
+}
 /** An interval of time that has passed where the smallest distinct unit is a second. */
 export interface IntervalInput {
     /** A quantity of days. */
@@ -597,6 +700,12 @@ export interface LinkIdentityInput {
     identifier: string;
     service: string;
 }
+export interface MintAccessTokenInput {
+    accessTtl?: IntervalInput;
+    clientMutationId?: string;
+    intent?: string;
+    principalId?: string;
+}
 /** A filter to be used against `OrgApiKeyList` object types. All fields are combined with a logical ‘and.’ */
 export interface OrgApiKeyListFilter {
     /** Filter by the object’s `accessLevel` field. */
@@ -720,38 +829,26 @@ export interface PrincipalEntityFilter {
     /** Filter by the object’s `updatedAt` field. */
     updatedAt?: DatetimeFilter;
 }
-/** An input for mutations affecting `PrincipalEntity` */
-export interface PrincipalEntityInput {
-    createdAt?: string;
-    /** The organization this principal is scoped to */
-    entityId: string;
-    id?: string;
-    /** Denormalized owner_id from principals table for RLS */
-    ownerId: string;
-    /** The principal this scoping row belongs to */
-    principalId: string;
-    updatedAt?: string;
-}
-/** Represents an update to a `PrincipalEntity`. Fields that are set will be updated. */
-export interface PrincipalEntityPatch {
-    createdAt?: string;
-    /** The organization this principal is scoped to */
-    entityId?: string;
-    id?: string;
-    /** Denormalized owner_id from principals table for RLS */
-    ownerId?: string;
-    /** The principal this scoping row belongs to */
-    principalId?: string;
-    updatedAt?: string;
-}
 /** A filter to be used against `Principal` object types. All fields are combined with a logical ‘and.’ */
 export interface PrincipalFilter {
     /** Checks for all expressions in this list. */
     and?: PrincipalFilter[];
+    /** Filter by the object’s `apiKeyMaxDuration` field. */
+    apiKeyMaxDuration?: IntervalFilter;
     /** Filter by the object’s `bypassStepUp` field. */
     bypassStepUp?: BooleanFilter;
+    /** Filter by the object’s `child_principals` relation. */
+    child_principals?: PrincipalToManyPrincipalFilter;
+    /** `child_principals` exist. */
+    child_principalsExist?: boolean;
     /** Filter by the object’s `createdAt` field. */
     createdAt?: DatetimeFilter;
+    /** Filter by the object’s `createdBySessionId` field. */
+    createdBySessionId?: UUIDFilter;
+    /** Filter by the object’s `depth` field. */
+    depth?: IntFilter;
+    /** Filter by the object’s `expiresAt` field. */
+    expiresAt?: DatetimeFilter;
     /** Filter by the object’s `id` field. */
     id?: UUIDFilter;
     /** Filter by the object’s `isReadOnly` field. */
@@ -766,6 +863,12 @@ export interface PrincipalFilter {
     owner?: UserFilter;
     /** Filter by the object’s `ownerId` field. */
     ownerId?: UUIDFilter;
+    /** Filter by the object’s `parentPrincipal` relation. */
+    parentPrincipal?: PrincipalFilter;
+    /** A related `parentPrincipal` exists. */
+    parentPrincipalExists?: boolean;
+    /** Filter by the object’s `parentPrincipalId` field. */
+    parentPrincipalId?: UUIDFilter;
     /** Filter by the object’s `principalEntities` relation. */
     principalEntities?: PrincipalToManyPrincipalEntityFilter;
     /** `principalEntities` exist. */
@@ -821,6 +924,15 @@ export interface PrincipalToManyPrincipalEntityFilter {
     /** Filters to entities where at least one related entity matches. */
     some?: PrincipalEntityFilter;
 }
+/** A filter to be used against many `Principal` object types. All fields are combined with a logical ‘and.’ */
+export interface PrincipalToManyPrincipalFilter {
+    /** Filters to entities where every related entity matches. */
+    every?: PrincipalFilter;
+    /** Filters to entities where no related entity matches. */
+    none?: PrincipalFilter;
+    /** Filters to entities where at least one related entity matches. */
+    some?: PrincipalFilter;
+}
 /** A filter to be used against many `PrincipalScopeOverride` object types. All fields are combined with a logical ‘and.’ */
 export interface PrincipalToManyPrincipalScopeOverrideFilter {
     /** Filters to entities where every related entity matches. */
@@ -844,6 +956,10 @@ export interface ProvisionNewUserInput {
     email?: string;
     password?: string;
 }
+export interface RefreshAccessTokenInput {
+    clientMutationId?: string;
+    token?: string;
+}
 export interface RequestCrossOriginTokenInput {
     clientMutationId?: string;
     email?: string;
@@ -896,6 +1012,10 @@ export interface RoleTypePatch {
 export interface SendAccountDeletionEmailInput {
     clientMutationId?: string;
 }
+export interface SendPhoneVerificationCodeInput {
+    clientMutationId?: string;
+    phone?: string;
+}
 export interface SendVerificationEmailInput {
     clientMutationId?: string;
     email?: ConstructiveInternalTypeEmail;
@@ -905,6 +1025,20 @@ export interface SetPasswordInput {
     currentPassword?: string;
     newPassword?: string;
 }
+export interface SetPrincipalEntitiesInput {
+    clientMutationId?: string;
+    entityIds?: string[];
+    principalId?: string;
+}
+export interface SetPrincipalScopeInput {
+    allowedMask?: string;
+    clientMutationId?: string;
+    isActive?: boolean;
+    isReadOnly?: boolean;
+    membershipType?: number;
+    principalId?: string;
+    useAdminOwner?: boolean;
+}
 export interface SignInCrossOriginInput {
     clientMutationId?: string;
     credentialKind?: string;
@@ -943,6 +1077,7 @@ export interface SignUpInput {
     csrfToken?: string;
     deviceToken?: string;
     email?: string;
+    inviteToken?: string;
     password?: string;
     rememberMe?: boolean;
 }
@@ -950,6 +1085,7 @@ export interface SignUpMagicLinkInput {
     clientMutationId?: string;
     credentialKind?: string;
     deviceToken?: string;
+    inviteToken?: string;
     rememberMe?: boolean;
     token?: string;
 }
@@ -958,6 +1094,7 @@ export interface SignUpSmsInput {
     code?: string;
     credentialKind?: string;
     deviceToken?: string;
+    inviteToken?: string;
     phone?: string;
     rememberMe?: boolean;
 }
@@ -1075,11 +1212,14 @@ export interface UpdatePhoneNumberInput {
     /** An object where the defined keys will be set on the `PhoneNumber` being updated. */
     phoneNumberPatch: PhoneNumberPatch;
 }
-export interface UpdatePrincipalEntityInput {
+export interface UpdatePrincipalInput {
+    apiKeyMaxDuration?: IntervalInput;
+    bypassStepUp?: boolean;
     clientMutationId?: string;
-    id: string;
-    /** An object where the defined keys will be set on the `PrincipalEntity` being updated. */
-    principalEntityPatch: PrincipalEntityPatch;
+    isReadOnly?: boolean;
+    name?: string;
+    principalId?: string;
+    useAdminOwner?: boolean;
 }
 export interface UpdateRoleTypeInput {
     clientMutationId?: string;
@@ -1093,6 +1233,18 @@ export interface UpdateUserInput {
     /** An object where the defined keys will be set on the `User` being updated. */
     userPatch: UserPatch;
 }
+export interface UpdateUserSettingInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `UserSetting` being updated. */
+    userSettingPatch: UserSettingPatch;
+}
+export interface UpdateUserSettingsSecurityInput {
+    clientMutationId?: string;
+    id: string;
+    /** An object where the defined keys will be set on the `UserSettingsSecurity` being updated. */
+    userSettingsSecurityPatch: UserSettingsSecurityPatch;
+}
 export interface UpdateWebauthnCredentialInput {
     clientMutationId?: string;
     id: string;
@@ -1150,6 +1302,14 @@ export interface UserFilter {
     not?: UserFilter;
     /** Checks for any expressions in this list. */
     or?: UserFilter[];
+    /** Filter by the object’s `ownedUserSetting` relation. */
+    ownedUserSetting?: UserSettingFilter;
+    /** A related `ownedUserSetting` exists. */
+    ownedUserSettingExists?: boolean;
+    /** Filter by the object’s `ownedUserSettingsSecurity` relation. */
+    ownedUserSettingsSecurity?: UserSettingsSecurityFilter;
+    /** A related `ownedUserSettingsSecurity` exists. */
+    ownedUserSettingsSecurityExists?: boolean;
     /** Filter by the object’s `phoneNumbers` relation. */
     phoneNumbers?: UserToManyPhoneNumberFilter;
     /** `phoneNumbers` exist. */
@@ -1213,6 +1373,108 @@ export interface UserPatch {
     updatedAt?: string;
     username?: string;
 }
+/** A filter to be used against `UserSetting` object types. All fields are combined with a logical ‘and.’ */
+export interface UserSettingFilter {
+    /** Checks for all expressions in this list. */
+    and?: UserSettingFilter[];
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Negates the expression. */
+    not?: UserSettingFilter;
+    /** Checks for any expressions in this list. */
+    or?: UserSettingFilter[];
+    /** Filter by the object’s `owner` relation. */
+    owner?: UserFilter;
+    /** Filter by the object’s `ownerId` field. */
+    ownerId?: UUIDFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+}
+/** An input for mutations affecting `UserSetting` */
+export interface UserSettingInput {
+    createdAt?: string;
+    id?: string;
+    ownerId?: string;
+    updatedAt?: string;
+}
+/** Represents an update to a `UserSetting`. Fields that are set will be updated. */
+export interface UserSettingPatch {
+    createdAt?: string;
+    id?: string;
+    ownerId?: string;
+    updatedAt?: string;
+}
+/** A filter to be used against `UserSettingsSecurity` object types. All fields are combined with a logical ‘and.’ */
+export interface UserSettingsSecurityFilter {
+    /** Checks for all expressions in this list. */
+    and?: UserSettingsSecurityFilter[];
+    /** Filter by the object’s `backupCodesCount` field. */
+    backupCodesCount?: IntFilter;
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `emailMfaEnabled` field. */
+    emailMfaEnabled?: BooleanFilter;
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `mfaEnrolledAt` field. */
+    mfaEnrolledAt?: DatetimeFilter;
+    /** Filter by the object’s `mfaLastUsedAt` field. */
+    mfaLastUsedAt?: DatetimeFilter;
+    /** Negates the expression. */
+    not?: UserSettingsSecurityFilter;
+    /** Checks for any expressions in this list. */
+    or?: UserSettingsSecurityFilter[];
+    /** Filter by the object’s `owner` relation. */
+    owner?: UserFilter;
+    /** Filter by the object’s `ownerId` field. */
+    ownerId?: UUIDFilter;
+    /** Filter by the object’s `smsMfaEnabled` field. */
+    smsMfaEnabled?: BooleanFilter;
+    /** Filter by the object’s `totpEnabled` field. */
+    totpEnabled?: BooleanFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+}
+/** An input for mutations affecting `UserSettingsSecurity` */
+export interface UserSettingsSecurityInput {
+    /** Number of remaining unused backup codes */
+    backupCodesCount?: number;
+    createdAt?: string;
+    /** Whether email-based MFA codes are active for this user */
+    emailMfaEnabled?: boolean;
+    id?: string;
+    /** When the first MFA method was enabled */
+    mfaEnrolledAt?: string;
+    /** When MFA was last successfully verified */
+    mfaLastUsedAt?: string;
+    ownerId?: string;
+    /** Whether SMS-based MFA codes are active for this user */
+    smsMfaEnabled?: boolean;
+    /** Whether TOTP (authenticator app) MFA is active for this user */
+    totpEnabled?: boolean;
+    updatedAt?: string;
+}
+/** Represents an update to a `UserSettingsSecurity`. Fields that are set will be updated. */
+export interface UserSettingsSecurityPatch {
+    /** Number of remaining unused backup codes */
+    backupCodesCount?: number;
+    createdAt?: string;
+    /** Whether email-based MFA codes are active for this user */
+    emailMfaEnabled?: boolean;
+    id?: string;
+    /** When the first MFA method was enabled */
+    mfaEnrolledAt?: string;
+    /** When MFA was last successfully verified */
+    mfaLastUsedAt?: string;
+    ownerId?: string;
+    /** Whether SMS-based MFA codes are active for this user */
+    smsMfaEnabled?: boolean;
+    /** Whether TOTP (authenticator app) MFA is active for this user */
+    totpEnabled?: boolean;
+    updatedAt?: string;
+}
 /** A filter to be used against many `AuditLogAuth` object types. All fields are combined with a logical ‘and.’ */
 export interface UserToManyAuditLogAuthFilter {
     /** Filters to entities where every related entity matches. */
@@ -1285,6 +1547,11 @@ export interface VerifyPasswordInput {
     clientMutationId?: string;
     password: string;
 }
+export interface VerifyPhoneInput {
+    clientMutationId?: string;
+    code?: string;
+    phone?: string;
+}
 export interface VerifyTotpInput {
     clientMutationId?: string;
     totpValue: string;
@@ -1407,6 +1674,12 @@ export interface EmailConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+export interface GetMfaStatusRecord {
+    backupCodesCount?: number | null;
+    emailMfaEnabled?: boolean | null;
+    smsMfaEnabled?: boolean | null;
+    totpEnabled?: boolean | null;
+}
 /** A connection to a list of `IdentityProvider` values. */
 export interface IdentityProviderConnection {
     edges: IdentityProviderEdge[];
@@ -1463,6 +1736,20 @@ export interface UserConnectedAccountConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+/** A connection to a list of `UserSetting` values. */
+export interface UserSettingConnection {
+    edges: UserSettingEdge[];
+    nodes: UserSetting[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
+/** A connection to a list of `UserSettingsSecurity` values. */
+export interface UserSettingsSecurityConnection {
+    edges: UserSettingsSecurityEdge[];
+    nodes: UserSettingsSecurity[];
+    pageInfo: PageInfo;
+    totalCount: number;
+}
 /** A connection to a list of `User` values. */
 export interface UserConnection {
     edges: UserEdge[];
@@ -1477,13 +1764,25 @@ export interface WebauthnCredentialConnection {
     pageInfo: PageInfo;
     totalCount: number;
 }
+export interface ApproveDevicePayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
 export interface CheckPasswordPayload {
     clientMutationId?: string | null;
 }
+export interface CompleteMfaChallengePayload {
+    clientMutationId?: string | null;
+    result?: CompleteMfaChallengeRecord | null;
+}
 export interface ConfirmDeleteAccountPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
+export interface ConfirmTotpSetupPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
 export interface CreateApiKeyPayload {
     clientMutationId?: string | null;
     result?: CreateApiKeyRecord | null;
@@ -1494,6 +1793,10 @@ export interface CreateAuditLogAuthPayload {
     auditLogAuthEdge?: AuditLogAuthEdge | null;
     clientMutationId?: string | null;
 }
+export interface CreateChildPrincipalPayload {
+    clientMutationId?: string | null;
+    result?: string | null;
+}
 export interface CreateCryptoAddressPayload {
     clientMutationId?: string | null;
     /** The `CryptoAddress` that was created by this mutation. */
@@ -1524,11 +1827,9 @@ export interface CreatePrincipalPayload {
     clientMutationId?: string | null;
     result?: string | null;
 }
-export interface CreatePrincipalEntityPayload {
+export interface CreatePrincipalFromPresetPayload {
     clientMutationId?: string | null;
-    /** The `PrincipalEntity` that was created by this mutation. */
-    principalEntity?: PrincipalEntity | null;
-    principalEntityEdge?: PrincipalEntityEdge | null;
+    result?: string | null;
 }
 export interface CreateRoleTypePayload {
     clientMutationId?: string | null;
@@ -1542,6 +1843,18 @@ export interface CreateUserPayload {
     user?: User | null;
     userEdge?: UserEdge | null;
 }
+export interface CreateUserSettingPayload {
+    clientMutationId?: string | null;
+    /** The `UserSetting` that was created by this mutation. */
+    userSetting?: UserSetting | null;
+    userSettingEdge?: UserSettingEdge | null;
+}
+export interface CreateUserSettingsSecurityPayload {
+    clientMutationId?: string | null;
+    /** The `UserSettingsSecurity` that was created by this mutation. */
+    userSettingsSecurity?: UserSettingsSecurity | null;
+    userSettingsSecurityEdge?: UserSettingsSecurityEdge | null;
+}
 export interface CreateWebauthnCredentialPayload {
     clientMutationId?: string | null;
     /** The `WebauthnCredential` that was created by this mutation. */
@@ -1580,12 +1893,6 @@ export interface DeletePrincipalPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
-export interface DeletePrincipalEntityPayload {
-    clientMutationId?: string | null;
-    /** The `PrincipalEntity` that was deleted by this mutation. */
-    principalEntity?: PrincipalEntity | null;
-    principalEntityEdge?: PrincipalEntityEdge | null;
-}
 export interface DeleteRoleTypePayload {
     clientMutationId?: string | null;
     /** The `RoleType` that was deleted by this mutation. */
@@ -1598,16 +1905,52 @@ export interface DeleteUserPayload {
     user?: User | null;
     userEdge?: UserEdge | null;
 }
+export interface DeleteUserSettingPayload {
+    clientMutationId?: string | null;
+    /** The `UserSetting` that was deleted by this mutation. */
+    userSetting?: UserSetting | null;
+    userSettingEdge?: UserSettingEdge | null;
+}
+export interface DeleteUserSettingsSecurityPayload {
+    clientMutationId?: string | null;
+    /** The `UserSettingsSecurity` that was deleted by this mutation. */
+    userSettingsSecurity?: UserSettingsSecurity | null;
+    userSettingsSecurityEdge?: UserSettingsSecurityEdge | null;
+}
 export interface DeleteWebauthnCredentialPayload {
     clientMutationId?: string | null;
     /** The `WebauthnCredential` that was deleted by this mutation. */
     webauthnCredential?: WebauthnCredential | null;
     webauthnCredentialEdge?: WebauthnCredentialEdge | null;
 }
+export interface DisableEmailMfaPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export interface DisableSmsMfaPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export interface DisableTotpPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
 export interface DisconnectAccountPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
+export interface EnableEmailMfaPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export interface EnableSmsMfaPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export interface EnableTotpPayload {
+    clientMutationId?: string | null;
+    result?: string | null;
+}
 export interface ExtendTokenExpiresPayload {
     clientMutationId?: string | null;
     result?: ExtendTokenExpiresRecord[] | null;
@@ -1615,28 +1958,35 @@ export interface ExtendTokenExpiresPayload {
 export interface ForgotPasswordPayload {
     clientMutationId?: string | null;
 }
+export interface GenerateBackupCodesPayload {
+    clientMutationId?: string | null;
+    result?: string | null;
+}
 export interface LinkIdentityPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
+export interface MintAccessTokenPayload {
+    clientMutationId?: string | null;
+    result?: MintAccessTokenRecord | null;
+}
 export interface ProvisionBucketPayload {
-    /** The access type applied */
-    accessType: string;
-    /** The S3 bucket name that was provisioned */
-    bucketName: string;
-    /** The S3 endpoint (null for AWS S3 default) */
-    endpoint?: string | null;
-    /** Error message if provisioning failed */
-    error?: string | null;
-    /** The storage provider used */
-    provider: string;
-    /** Whether provisioning succeeded */
-    success: boolean;
+    /** The logical bucket row that was queued for reconciliation. */
+    bucketId: string;
+    bucketKey: string;
+    /** The reconciler job enqueued to provision this bucket. */
+    jobId: string;
+    /** The physical bucket name already recorded, or null when reconciliation has not completed. */
+    physicalName?: string | null;
 }
 export interface ProvisionNewUserPayload {
     clientMutationId?: string | null;
     result?: string | null;
 }
+export interface RefreshAccessTokenPayload {
+    clientMutationId?: string | null;
+    result?: RefreshAccessTokenRecord | null;
+}
 export interface RequestCrossOriginTokenPayload {
     clientMutationId?: string | null;
     result?: string | null;
@@ -1661,6 +2011,10 @@ export interface SendAccountDeletionEmailPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
+export interface SendPhoneVerificationCodePayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
 export interface SendVerificationEmailPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -1669,6 +2023,14 @@ export interface SetPasswordPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
+export interface SetPrincipalEntitiesPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export interface SetPrincipalScopePayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
 export interface SignInPayload {
     clientMutationId?: string | null;
     result?: SignInRecord | null;
@@ -1724,11 +2086,9 @@ export interface UpdatePhoneNumberPayload {
     phoneNumber?: PhoneNumber | null;
     phoneNumberEdge?: PhoneNumberEdge | null;
 }
-export interface UpdatePrincipalEntityPayload {
+export interface UpdatePrincipalPayload {
     clientMutationId?: string | null;
-    /** The `PrincipalEntity` that was updated by this mutation. */
-    principalEntity?: PrincipalEntity | null;
-    principalEntityEdge?: PrincipalEntityEdge | null;
+    result?: boolean | null;
 }
 export interface UpdateRoleTypePayload {
     clientMutationId?: string | null;
@@ -1742,6 +2102,18 @@ export interface UpdateUserPayload {
     user?: User | null;
     userEdge?: UserEdge | null;
 }
+export interface UpdateUserSettingPayload {
+    clientMutationId?: string | null;
+    /** The `UserSetting` that was updated by this mutation. */
+    userSetting?: UserSetting | null;
+    userSettingEdge?: UserSettingEdge | null;
+}
+export interface UpdateUserSettingsSecurityPayload {
+    clientMutationId?: string | null;
+    /** The `UserSettingsSecurity` that was updated by this mutation. */
+    userSettingsSecurity?: UserSettingsSecurity | null;
+    userSettingsSecurityEdge?: UserSettingsSecurityEdge | null;
+}
 export interface UpdateWebauthnCredentialPayload {
     clientMutationId?: string | null;
     /** The `WebauthnCredential` that was updated by this mutation. */
@@ -1756,6 +2128,10 @@ export interface VerifyPasswordPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
+export interface VerifyPhonePayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
 export interface VerifyTotpPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -1864,6 +2240,18 @@ export interface UserConnectedAccountEdge {
     /** The `UserConnectedAccount` at the end of the edge. */
     node?: UserConnectedAccount | null;
 }
+/** A `UserSetting` edge in the connection. */
+export interface UserSettingEdge {
+    cursor?: string | null;
+    /** The `UserSetting` at the end of the edge. */
+    node?: UserSetting | null;
+}
+/** A `UserSettingsSecurity` edge in the connection. */
+export interface UserSettingsSecurityEdge {
+    cursor?: string | null;
+    /** The `UserSettingsSecurity` at the end of the edge. */
+    node?: UserSettingsSecurity | null;
+}
 /** A `User` edge in the connection. */
 export interface UserEdge {
     cursor?: string | null;
@@ -1876,6 +2264,15 @@ export interface WebauthnCredentialEdge {
     /** The `WebauthnCredential` at the end of the edge. */
     node?: WebauthnCredential | null;
 }
+export interface CompleteMfaChallengeRecord {
+    accessToken?: string | null;
+    accessTokenExpiresAt?: string | null;
+    deviceApprovalRequired?: boolean | null;
+    id?: string | null;
+    isVerified?: boolean | null;
+    outDeviceToken?: string | null;
+    outUserId?: string | null;
+}
 export interface CreateApiKeyRecord {
     apiKey?: string | null;
     expiresAt?: string | null;
@@ -1891,13 +2288,31 @@ export interface ExtendTokenExpiresRecord {
     id?: string | null;
     sessionId?: string | null;
 }
+export interface MintAccessTokenRecord {
+    accessExpiresAt?: string | null;
+    accessToken?: string | null;
+    principalUserId?: string | null;
+    refreshExpiresAt?: string | null;
+    refreshToken?: string | null;
+    sessionId?: string | null;
+}
+export interface RefreshAccessTokenRecord {
+    accessExpiresAt?: string | null;
+    accessToken?: string | null;
+    principalUserId?: string | null;
+    refreshExpiresAt?: string | null;
+    refreshToken?: string | null;
+    sessionId?: string | null;
+}
 export interface SignInRecord {
     accessToken?: string | null;
     accessTokenExpiresAt?: string | null;
+    deviceApprovalRequired?: boolean | null;
     id?: string | null;
     isVerified?: boolean | null;
     mfaChallengeToken?: string | null;
     mfaRequired?: boolean | null;
+    outDeviceToken?: string | null;
     totpEnabled?: boolean | null;
     userId?: string | null;
 }
@@ -1912,11 +2327,15 @@ export interface SignInCrossOriginRecord {
 export interface SignInMagicLinkRecord {
     accessToken?: string | null;
     accessTokenExpiresAt?: string | null;
+    deviceApprovalRequired?: boolean | null;
+    outDeviceToken?: string | null;
     userId?: string | null;
 }
 export interface SignInSmsOtpRecord {
     accessToken?: string | null;
     accessTokenExpiresAt?: string | null;
+    deviceApprovalRequired?: boolean | null;
+    outDeviceToken?: string | null;
     userId?: string | null;
 }
 export interface SignUpRecord {
@@ -1924,17 +2343,20 @@ export interface SignUpRecord {
     accessTokenExpiresAt?: string | null;
     id?: string | null;
     isVerified?: boolean | null;
+    outDeviceToken?: string | null;
     totpEnabled?: boolean | null;
     userId?: string | null;
 }
 export interface SignUpMagicLinkRecord {
     accessToken?: string | null;
     accessTokenExpiresAt?: string | null;
+    outDeviceToken?: string | null;
     userId?: string | null;
 }
 export interface SignUpSmsRecord {
     accessToken?: string | null;
     accessTokenExpiresAt?: string | null;
+    outDeviceToken?: string | null;
     userId?: string | null;
 }
 /** Table constraints */
@@ -2049,10 +2471,18 @@ export interface MetaSearch {
 }
 /** Storage metadata for a table */
 export interface MetaStorage {
+    /** GraphQL type name of the plane's buckets table */
+    bucketsType: string;
+    /** Computed download-URL field on the files type; null on the buckets side */
+    downloadUrlField?: string | null;
+    /** GraphQL type name of the plane's files table */
+    filesType: string;
     /** Whether this table is a storage buckets table */
     isBucketsTable: boolean;
     /** Whether this table is a storage files table */
     isFilesTable: boolean;
+    /** The plane's GraphQL upload surface */
+    upload: MetaStorageUpload;
 }
 /** Information about a unique constraint */
 export interface MetaUniqueConstraint {
@@ -2135,6 +2565,27 @@ export interface MetaSearchConfig {
     /** JSON-encoded per-adapter score weights */
     weights?: string | null;
 }
+/** The GraphQL upload surface of a storage plane, derived from the registry facts the presigned-url plugin emits from */
+export interface MetaStorageUpload {
+    /** Per-file input type inside the bulk input */
+    bulkFileInputType: string;
+    /** Per-file payload type inside the bulk payload */
+    bulkFilePayloadType: string;
+    /** Input type of the bulk upload mutation */
+    bulkInputType: string;
+    /** Root mutation field for bulk upload */
+    bulkMutation: string;
+    /** Payload type of the bulk upload mutation */
+    bulkPayloadType: string;
+    /** Input type of the single upload mutation */
+    inputType: string;
+    /** Root mutation field for single-file upload (e.g. uploadAppFile) */
+    mutation: string;
+    /** Payload type of the single upload mutation */
+    payloadType: string;
+    /** Whether the upload input requires ownerId (entity-keyed plane) */
+    requiresOwnerId: boolean;
+}
 /** How a client must serialize/parse a scalar — the one field-type detail standard GraphQL introspection cannot describe. Null for plain scalars whose wire format is obvious from gqlType. */
 export interface MetaScalarEncoding {
     /** For 'vector': declared length, else null. */