@constructive-sdk/cli 0.30.0 → 0.30.1

package/esm/config/orm/input-types.d.ts

@@ -229,33 +229,41 @@ export interface UUIDListFilter {
     anyGreaterThan?: string;
     anyGreaterThanOrEqualTo?: string;
 }
-/** Registry of valid config keys — declares which config entries the platform recognizes */
-export interface PlatformConfigDefinition {
-    /** Unique identifier for this config definition */
+/** Namespace-backed plaintext key-value config store (like a k8s ConfigMap); admin-only, fully CRUD-exposed */
+export interface PlatformConfig {
+    /** Unique identifier for this config entry */
     id: string;
-    createdAt?: string | null;
-    updatedAt?: string | null;
-    /** Config key name (must match config table name for resolution) */
+    /** FK to namespaces — logical grouping for config entries */
+    namespaceId?: string | null;
+    /** Key name identifying the config entry */
     name?: string | null;
-    /** Human-readable description of what this config key controls */
-    description?: string | null;
-    /** Default value used when no config entry exists for a namespace */
-    defaultValue?: string | null;
-    /** Whether this row was seeded as a built-in config definition */
-    isBuiltIn?: boolean | null;
-    /** Key-value metadata for filtering and grouping config definitions */
+    /** Integration provider slug (e.g. mailgun, postgres). Used by the UI to group config entries by integration. No FK. */
+    provider?: string | null;
+    /** Plaintext config value */
+    value?: string | null;
+    /** Key/value pairs for selecting/filtering config entries */
     labels?: Record<string, unknown> | null;
-    /** Freeform metadata annotations for config definitions */
+    /** Freeform metadata for tooling and operational notes */
     annotations?: Record<string, unknown> | null;
+    /** Human-readable note about this config entry */
+    description?: string | null;
+    createdAt?: string | null;
+    updatedAt?: string | null;
+    /** Optional expiration timestamp for time-limited config entries */
+    expiresAt?: string | null;
 }
-/** App-level plaintext key-value config store (like a k8s ConfigMap); admin-only, fully CRUD-exposed */
-export interface PlatformConfig {
+/** Namespace-backed plaintext key-value config store (like a k8s ConfigMap); admin-only, fully CRUD-exposed */
+export interface Config {
     /** Unique identifier for this config entry */
     id: string;
     /** FK to namespaces — logical grouping for config entries */
     namespaceId?: string | null;
+    /** Database that owns this resource (database-scoped isolation) */
+    databaseId?: string | null;
     /** Key name identifying the config entry */
     name?: string | null;
+    /** Integration provider slug (e.g. mailgun, postgres). Used by the UI to group config entries by integration. No FK. */
+    provider?: string | null;
     /** Plaintext config value */
     value?: string | null;
     /** Key/value pairs for selecting/filtering config entries */
@@ -269,6 +277,45 @@ export interface PlatformConfig {
     /** Optional expiration timestamp for time-limited config entries */
     expiresAt?: string | null;
 }
+export interface PlatformInternalSecret {
+    id: string;
+    name?: string | null;
+    namespaceId?: string | null;
+    description?: string | null;
+    labels?: Record<string, unknown> | null;
+    annotations?: Record<string, unknown> | null;
+    createdAt?: string | null;
+    updatedAt?: string | null;
+    rotatedAt?: string | null;
+    retiredAt?: string | null;
+}
+export interface PlatformSecret {
+    id: string;
+    name?: string | null;
+    provider?: string | null;
+    namespaceId?: string | null;
+    description?: string | null;
+    labels?: Record<string, unknown> | null;
+    annotations?: Record<string, unknown> | null;
+    createdAt?: string | null;
+    updatedAt?: string | null;
+    rotatedAt?: string | null;
+    retiredAt?: string | null;
+}
+export interface Secret {
+    databaseId?: string | null;
+    id: string;
+    name?: string | null;
+    provider?: string | null;
+    namespaceId?: string | null;
+    description?: string | null;
+    labels?: Record<string, unknown> | null;
+    annotations?: Record<string, unknown> | null;
+    createdAt?: string | null;
+    updatedAt?: string | null;
+    rotatedAt?: string | null;
+    retiredAt?: string | null;
+}
 export interface ConnectionResult<T> {
     nodes: T[];
     totalCount: number;
@@ -280,27 +327,40 @@ export interface PageInfo {
     startCursor?: string | null;
     endCursor?: string | null;
 }
-export interface PlatformConfigDefinitionRelations {
-}
 export interface PlatformConfigRelations {
 }
-export type PlatformConfigDefinitionWithRelations = PlatformConfigDefinition & PlatformConfigDefinitionRelations;
+export interface ConfigRelations {
+}
+export interface PlatformInternalSecretRelations {
+}
+export interface PlatformSecretRelations {
+}
+export interface SecretRelations {
+}
 export type PlatformConfigWithRelations = PlatformConfig & PlatformConfigRelations;
-export type PlatformConfigDefinitionSelect = {
+export type ConfigWithRelations = Config & ConfigRelations;
+export type PlatformInternalSecretWithRelations = PlatformInternalSecret & PlatformInternalSecretRelations;
+export type PlatformSecretWithRelations = PlatformSecret & PlatformSecretRelations;
+export type SecretWithRelations = Secret & SecretRelations;
+export type PlatformConfigSelect = {
     id?: boolean;
-    createdAt?: boolean;
-    updatedAt?: boolean;
+    namespaceId?: boolean;
     name?: boolean;
-    description?: boolean;
-    defaultValue?: boolean;
-    isBuiltIn?: boolean;
+    provider?: boolean;
+    value?: boolean;
     labels?: boolean;
     annotations?: boolean;
+    description?: boolean;
+    createdAt?: boolean;
+    updatedAt?: boolean;
+    expiresAt?: boolean;
 };
-export type PlatformConfigSelect = {
+export type ConfigSelect = {
     id?: boolean;
     namespaceId?: boolean;
+    databaseId?: boolean;
     name?: boolean;
+    provider?: boolean;
     value?: boolean;
     labels?: boolean;
     annotations?: boolean;
@@ -309,39 +369,86 @@ export type PlatformConfigSelect = {
     updatedAt?: boolean;
     expiresAt?: boolean;
 };
-export interface PlatformConfigDefinitionFilter {
+export type PlatformInternalSecretSelect = {
+    id?: boolean;
+    name?: boolean;
+    namespaceId?: boolean;
+    description?: boolean;
+    labels?: boolean;
+    annotations?: boolean;
+    createdAt?: boolean;
+    updatedAt?: boolean;
+    rotatedAt?: boolean;
+    retiredAt?: boolean;
+};
+export type PlatformSecretSelect = {
+    id?: boolean;
+    name?: boolean;
+    provider?: boolean;
+    namespaceId?: boolean;
+    description?: boolean;
+    labels?: boolean;
+    annotations?: boolean;
+    createdAt?: boolean;
+    updatedAt?: boolean;
+    rotatedAt?: boolean;
+    retiredAt?: boolean;
+};
+export type SecretSelect = {
+    databaseId?: boolean;
+    id?: boolean;
+    name?: boolean;
+    provider?: boolean;
+    namespaceId?: boolean;
+    description?: boolean;
+    labels?: boolean;
+    annotations?: boolean;
+    createdAt?: boolean;
+    updatedAt?: boolean;
+    rotatedAt?: boolean;
+    retiredAt?: boolean;
+};
+export interface PlatformConfigFilter {
     /** Filter by the object’s `id` field. */
     id?: UUIDFilter;
-    /** Filter by the object’s `createdAt` field. */
-    createdAt?: DatetimeFilter;
-    /** Filter by the object’s `updatedAt` field. */
-    updatedAt?: DatetimeFilter;
+    /** Filter by the object’s `namespaceId` field. */
+    namespaceId?: UUIDFilter;
     /** Filter by the object’s `name` field. */
     name?: StringFilter;
-    /** Filter by the object’s `description` field. */
-    description?: StringFilter;
-    /** Filter by the object’s `defaultValue` field. */
-    defaultValue?: StringFilter;
-    /** Filter by the object’s `isBuiltIn` field. */
-    isBuiltIn?: BooleanFilter;
+    /** Filter by the object’s `provider` field. */
+    provider?: StringFilter;
+    /** Filter by the object’s `value` field. */
+    value?: StringFilter;
     /** Filter by the object’s `labels` field. */
     labels?: JSONFilter;
     /** Filter by the object’s `annotations` field. */
     annotations?: JSONFilter;
+    /** Filter by the object’s `description` field. */
+    description?: StringFilter;
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+    /** Filter by the object’s `expiresAt` field. */
+    expiresAt?: DatetimeFilter;
     /** Checks for all expressions in this list. */
-    and?: PlatformConfigDefinitionFilter[];
+    and?: PlatformConfigFilter[];
     /** Checks for any expressions in this list. */
-    or?: PlatformConfigDefinitionFilter[];
+    or?: PlatformConfigFilter[];
     /** Negates the expression. */
-    not?: PlatformConfigDefinitionFilter;
+    not?: PlatformConfigFilter;
 }
-export interface PlatformConfigFilter {
+export interface ConfigFilter {
     /** Filter by the object’s `id` field. */
     id?: UUIDFilter;
     /** Filter by the object’s `namespaceId` field. */
     namespaceId?: UUIDFilter;
+    /** Filter by the object’s `databaseId` field. */
+    databaseId?: UUIDFilter;
     /** Filter by the object’s `name` field. */
     name?: StringFilter;
+    /** Filter by the object’s `provider` field. */
+    provider?: StringFilter;
     /** Filter by the object’s `value` field. */
     value?: StringFilter;
     /** Filter by the object’s `labels` field. */
@@ -357,47 +464,146 @@ export interface PlatformConfigFilter {
     /** Filter by the object’s `expiresAt` field. */
     expiresAt?: DatetimeFilter;
     /** Checks for all expressions in this list. */
-    and?: PlatformConfigFilter[];
+    and?: ConfigFilter[];
     /** Checks for any expressions in this list. */
-    or?: PlatformConfigFilter[];
+    or?: ConfigFilter[];
     /** Negates the expression. */
-    not?: PlatformConfigFilter;
+    not?: ConfigFilter;
+}
+export interface PlatformInternalSecretFilter {
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `name` field. */
+    name?: StringFilter;
+    /** Filter by the object’s `namespaceId` field. */
+    namespaceId?: UUIDFilter;
+    /** Filter by the object’s `description` field. */
+    description?: StringFilter;
+    /** Filter by the object’s `labels` field. */
+    labels?: JSONFilter;
+    /** Filter by the object’s `annotations` field. */
+    annotations?: JSONFilter;
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+    /** Filter by the object’s `rotatedAt` field. */
+    rotatedAt?: DatetimeFilter;
+    /** Filter by the object’s `retiredAt` field. */
+    retiredAt?: DatetimeFilter;
+    /** Checks for all expressions in this list. */
+    and?: PlatformInternalSecretFilter[];
+    /** Checks for any expressions in this list. */
+    or?: PlatformInternalSecretFilter[];
+    /** Negates the expression. */
+    not?: PlatformInternalSecretFilter;
+}
+export interface PlatformSecretFilter {
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `name` field. */
+    name?: StringFilter;
+    /** Filter by the object’s `provider` field. */
+    provider?: StringFilter;
+    /** Filter by the object’s `namespaceId` field. */
+    namespaceId?: UUIDFilter;
+    /** Filter by the object’s `description` field. */
+    description?: StringFilter;
+    /** Filter by the object’s `labels` field. */
+    labels?: JSONFilter;
+    /** Filter by the object’s `annotations` field. */
+    annotations?: JSONFilter;
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+    /** Filter by the object’s `rotatedAt` field. */
+    rotatedAt?: DatetimeFilter;
+    /** Filter by the object’s `retiredAt` field. */
+    retiredAt?: DatetimeFilter;
+    /** Checks for all expressions in this list. */
+    and?: PlatformSecretFilter[];
+    /** Checks for any expressions in this list. */
+    or?: PlatformSecretFilter[];
+    /** Negates the expression. */
+    not?: PlatformSecretFilter;
+}
+export interface SecretFilter {
+    /** Filter by the object’s `databaseId` field. */
+    databaseId?: UUIDFilter;
+    /** Filter by the object’s `id` field. */
+    id?: UUIDFilter;
+    /** Filter by the object’s `name` field. */
+    name?: StringFilter;
+    /** Filter by the object’s `provider` field. */
+    provider?: StringFilter;
+    /** Filter by the object’s `namespaceId` field. */
+    namespaceId?: UUIDFilter;
+    /** Filter by the object’s `description` field. */
+    description?: StringFilter;
+    /** Filter by the object’s `labels` field. */
+    labels?: JSONFilter;
+    /** Filter by the object’s `annotations` field. */
+    annotations?: JSONFilter;
+    /** Filter by the object’s `createdAt` field. */
+    createdAt?: DatetimeFilter;
+    /** Filter by the object’s `updatedAt` field. */
+    updatedAt?: DatetimeFilter;
+    /** Filter by the object’s `rotatedAt` field. */
+    rotatedAt?: DatetimeFilter;
+    /** Filter by the object’s `retiredAt` field. */
+    retiredAt?: DatetimeFilter;
+    /** Checks for all expressions in this list. */
+    and?: SecretFilter[];
+    /** Checks for any expressions in this list. */
+    or?: SecretFilter[];
+    /** Negates the expression. */
+    not?: SecretFilter;
 }
-export type PlatformConfigDefinitionOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'DEFAULT_VALUE_ASC' | 'DEFAULT_VALUE_DESC' | 'IS_BUILT_IN_ASC' | 'IS_BUILT_IN_DESC' | 'LABELS_ASC' | 'LABELS_DESC' | 'ANNOTATIONS_ASC' | 'ANNOTATIONS_DESC';
-export type PlatformConfigOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAMESPACE_ID_ASC' | 'NAMESPACE_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'VALUE_ASC' | 'VALUE_DESC' | 'LABELS_ASC' | 'LABELS_DESC' | 'ANNOTATIONS_ASC' | 'ANNOTATIONS_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'EXPIRES_AT_ASC' | 'EXPIRES_AT_DESC';
-export interface CreatePlatformConfigDefinitionInput {
+export type PlatformConfigOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAMESPACE_ID_ASC' | 'NAMESPACE_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'PROVIDER_ASC' | 'PROVIDER_DESC' | 'VALUE_ASC' | 'VALUE_DESC' | 'LABELS_ASC' | 'LABELS_DESC' | 'ANNOTATIONS_ASC' | 'ANNOTATIONS_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'EXPIRES_AT_ASC' | 'EXPIRES_AT_DESC';
+export type ConfigOrderBy = 'NATURAL' | 'PRIMARY_KEY_ASC' | 'PRIMARY_KEY_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAMESPACE_ID_ASC' | 'NAMESPACE_ID_DESC' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'PROVIDER_ASC' | 'PROVIDER_DESC' | 'VALUE_ASC' | 'VALUE_DESC' | 'LABELS_ASC' | 'LABELS_DESC' | 'ANNOTATIONS_ASC' | 'ANNOTATIONS_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'EXPIRES_AT_ASC' | 'EXPIRES_AT_DESC';
+export type PlatformInternalSecretOrderBy = 'NATURAL' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'NAMESPACE_ID_ASC' | 'NAMESPACE_ID_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'LABELS_ASC' | 'LABELS_DESC' | 'ANNOTATIONS_ASC' | 'ANNOTATIONS_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'ROTATED_AT_ASC' | 'ROTATED_AT_DESC' | 'RETIRED_AT_ASC' | 'RETIRED_AT_DESC';
+export type PlatformSecretOrderBy = 'NATURAL' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'PROVIDER_ASC' | 'PROVIDER_DESC' | 'NAMESPACE_ID_ASC' | 'NAMESPACE_ID_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'LABELS_ASC' | 'LABELS_DESC' | 'ANNOTATIONS_ASC' | 'ANNOTATIONS_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'ROTATED_AT_ASC' | 'ROTATED_AT_DESC' | 'RETIRED_AT_ASC' | 'RETIRED_AT_DESC';
+export type SecretOrderBy = 'NATURAL' | 'DATABASE_ID_ASC' | 'DATABASE_ID_DESC' | 'ID_ASC' | 'ID_DESC' | 'NAME_ASC' | 'NAME_DESC' | 'PROVIDER_ASC' | 'PROVIDER_DESC' | 'NAMESPACE_ID_ASC' | 'NAMESPACE_ID_DESC' | 'DESCRIPTION_ASC' | 'DESCRIPTION_DESC' | 'LABELS_ASC' | 'LABELS_DESC' | 'ANNOTATIONS_ASC' | 'ANNOTATIONS_DESC' | 'CREATED_AT_ASC' | 'CREATED_AT_DESC' | 'UPDATED_AT_ASC' | 'UPDATED_AT_DESC' | 'ROTATED_AT_ASC' | 'ROTATED_AT_DESC' | 'RETIRED_AT_ASC' | 'RETIRED_AT_DESC';
+export interface CreatePlatformConfigInput {
     clientMutationId?: string;
-    platformConfigDefinition: {
+    platformConfig: {
+        namespaceId: string;
         name: string;
-        description?: string;
-        defaultValue?: string;
-        isBuiltIn?: boolean;
+        provider?: string;
+        value?: string;
         labels?: Record<string, unknown>;
         annotations?: Record<string, unknown>;
+        description?: string;
+        expiresAt?: string;
     };
 }
-export interface PlatformConfigDefinitionPatch {
+export interface PlatformConfigPatch {
+    namespaceId?: string | null;
     name?: string | null;
-    description?: string | null;
-    defaultValue?: string | null;
-    isBuiltIn?: boolean | null;
+    provider?: string | null;
+    value?: string | null;
     labels?: Record<string, unknown> | null;
     annotations?: Record<string, unknown> | null;
+    description?: string | null;
+    expiresAt?: string | null;
 }
-export interface UpdatePlatformConfigDefinitionInput {
+export interface UpdatePlatformConfigInput {
     clientMutationId?: string;
     id: string;
-    platformConfigDefinitionPatch: PlatformConfigDefinitionPatch;
+    platformConfigPatch: PlatformConfigPatch;
 }
-export interface DeletePlatformConfigDefinitionInput {
+export interface DeletePlatformConfigInput {
     clientMutationId?: string;
     id: string;
 }
-export interface CreatePlatformConfigInput {
+export interface CreateConfigInput {
     clientMutationId?: string;
-    platformConfig: {
+    config: {
         namespaceId: string;
+        databaseId: string;
         name: string;
+        provider?: string;
         value?: string;
         labels?: Record<string, unknown>;
         annotations?: Record<string, unknown>;
@@ -405,76 +611,200 @@ export interface CreatePlatformConfigInput {
         expiresAt?: string;
     };
 }
-export interface PlatformConfigPatch {
+export interface ConfigPatch {
     namespaceId?: string | null;
+    databaseId?: string | null;
     name?: string | null;
+    provider?: string | null;
     value?: string | null;
     labels?: Record<string, unknown> | null;
     annotations?: Record<string, unknown> | null;
     description?: string | null;
     expiresAt?: string | null;
 }
-export interface UpdatePlatformConfigInput {
+export interface UpdateConfigInput {
     clientMutationId?: string;
     id: string;
-    platformConfigPatch: PlatformConfigPatch;
+    configPatch: ConfigPatch;
 }
-export interface DeletePlatformConfigInput {
+export interface DeleteConfigInput {
+    clientMutationId?: string;
+    id: string;
+}
+export interface CreatePlatformInternalSecretInput {
+    clientMutationId?: string;
+    platformInternalSecret: {
+        name?: string;
+        namespaceId?: string;
+        description?: string;
+        labels?: Record<string, unknown>;
+        annotations?: Record<string, unknown>;
+        rotatedAt?: string;
+        retiredAt?: string;
+    };
+}
+export interface PlatformInternalSecretPatch {
+    name?: string | null;
+    namespaceId?: string | null;
+    description?: string | null;
+    labels?: Record<string, unknown> | null;
+    annotations?: Record<string, unknown> | null;
+    rotatedAt?: string | null;
+    retiredAt?: string | null;
+}
+export interface UpdatePlatformInternalSecretInput {
+    clientMutationId?: string;
+    id: string;
+    platformInternalSecretPatch: PlatformInternalSecretPatch;
+}
+export interface DeletePlatformInternalSecretInput {
+    clientMutationId?: string;
+    id: string;
+}
+export interface CreatePlatformSecretInput {
+    clientMutationId?: string;
+    platformSecret: {
+        name?: string;
+        provider?: string;
+        namespaceId?: string;
+        description?: string;
+        labels?: Record<string, unknown>;
+        annotations?: Record<string, unknown>;
+        rotatedAt?: string;
+        retiredAt?: string;
+    };
+}
+export interface PlatformSecretPatch {
+    name?: string | null;
+    provider?: string | null;
+    namespaceId?: string | null;
+    description?: string | null;
+    labels?: Record<string, unknown> | null;
+    annotations?: Record<string, unknown> | null;
+    rotatedAt?: string | null;
+    retiredAt?: string | null;
+}
+export interface UpdatePlatformSecretInput {
+    clientMutationId?: string;
+    id: string;
+    platformSecretPatch: PlatformSecretPatch;
+}
+export interface DeletePlatformSecretInput {
+    clientMutationId?: string;
+    id: string;
+}
+export interface CreateSecretInput {
+    clientMutationId?: string;
+    secret: {
+        databaseId?: string;
+        name?: string;
+        provider?: string;
+        namespaceId?: string;
+        description?: string;
+        labels?: Record<string, unknown>;
+        annotations?: Record<string, unknown>;
+        rotatedAt?: string;
+        retiredAt?: string;
+    };
+}
+export interface SecretPatch {
+    databaseId?: string | null;
+    name?: string | null;
+    provider?: string | null;
+    namespaceId?: string | null;
+    description?: string | null;
+    labels?: Record<string, unknown> | null;
+    annotations?: Record<string, unknown> | null;
+    rotatedAt?: string | null;
+    retiredAt?: string | null;
+}
+export interface UpdateSecretInput {
+    clientMutationId?: string;
+    id: string;
+    secretPatch: SecretPatch;
+}
+export interface DeleteSecretInput {
     clientMutationId?: string;
     id: string;
 }
 export declare const connectionFieldsMap: Record<string, Record<string, string>>;
+export interface PlatformInternalSecretsDelInput {
+    clientMutationId?: string;
+    secretName?: string;
+    namespaceId?: string;
+}
 export interface PlatformSecretsDelInput {
     clientMutationId?: string;
     secretName?: string;
     namespaceId?: string;
 }
-export interface OrgSecretsDelInput {
+export interface _SecretsDelInput {
     clientMutationId?: string;
-    ownerId?: string;
+    databaseId?: string;
     secretName?: string;
     namespaceId?: string;
 }
+export interface PlatformInternalSecretsRemoveArrayInput {
+    clientMutationId?: string;
+    secretNames?: string[];
+    namespaceId?: string;
+}
 export interface PlatformSecretsRemoveArrayInput {
     clientMutationId?: string;
     secretNames?: string[];
     namespaceId?: string;
 }
-export interface OrgSecretsRemoveArrayInput {
+export interface _SecretsRemoveArrayInput {
     clientMutationId?: string;
-    ownerId?: string;
+    databaseId?: string;
     secretNames?: string[];
     namespaceId?: string;
 }
-export interface PlatformSecretsRotateInput {
+export interface PlatformInternalSecretsRotateInput {
     clientMutationId?: string;
     secretName?: string;
     secretValue?: string;
     namespaceId?: string;
     algo?: string;
 }
-export interface PlatformSecretsSetInput {
+export interface PlatformInternalSecretsSetInput {
     clientMutationId?: string;
     secretName?: string;
     secretValue?: string;
     secretNamespaceId?: string;
     algo?: string;
 }
-export interface OrgSecretsRotateInput {
+export interface PlatformSecretsRotateInput {
+    clientMutationId?: string;
+    secretName?: string;
+    secretValue?: string;
+    namespaceId?: string;
+    algo?: string;
+}
+export interface _SecretsRotateInput {
     clientMutationId?: string;
-    ownerId?: string;
+    databaseId?: string;
     secretName?: string;
     secretValue?: string;
     namespaceId?: string;
     algo?: string;
 }
-export interface OrgSecretsSetInput {
+export interface PlatformSecretsSetInput {
     clientMutationId?: string;
-    scopeOwnerId?: string;
     secretName?: string;
     secretValue?: string;
     secretNamespaceId?: string;
     algo?: string;
+    provider?: string;
+}
+export interface _SecretsSetInput {
+    clientMutationId?: string;
+    scopeDatabaseId?: string;
+    secretName?: string;
+    secretValue?: string;
+    secretNamespaceId?: string;
+    algo?: string;
+    provider?: string;
 }
 export interface ProvisionBucketInput {
     /** The logical bucket key (e.g., "public", "private") */
@@ -485,33 +815,41 @@ export interface ProvisionBucketInput {
      */
     ownerId?: string;
 }
-/** An input for mutations affecting `PlatformConfigDefinition` */
-export interface PlatformConfigDefinitionInput {
-    /** Unique identifier for this config definition */
+/** An input for mutations affecting `PlatformConfig` */
+export interface PlatformConfigInput {
+    /** Unique identifier for this config entry */
     id?: string;
-    createdAt?: string;
-    updatedAt?: string;
-    /** Config key name (must match config table name for resolution) */
+    /** FK to namespaces — logical grouping for config entries */
+    namespaceId: string;
+    /** Key name identifying the config entry */
     name: string;
-    /** Human-readable description of what this config key controls */
-    description?: string;
-    /** Default value used when no config entry exists for a namespace */
-    defaultValue?: string;
-    /** Whether this row was seeded as a built-in config definition */
-    isBuiltIn?: boolean;
-    /** Key-value metadata for filtering and grouping config definitions */
+    /** Integration provider slug (e.g. mailgun, postgres). Used by the UI to group config entries by integration. No FK. */
+    provider?: string;
+    /** Plaintext config value */
+    value?: string;
+    /** Key/value pairs for selecting/filtering config entries */
     labels?: Record<string, unknown>;
-    /** Freeform metadata annotations for config definitions */
+    /** Freeform metadata for tooling and operational notes */
     annotations?: Record<string, unknown>;
+    /** Human-readable note about this config entry */
+    description?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    /** Optional expiration timestamp for time-limited config entries */
+    expiresAt?: string;
 }
-/** An input for mutations affecting `PlatformConfig` */
-export interface PlatformConfigInput {
+/** An input for mutations affecting `Config` */
+export interface ConfigInput {
     /** Unique identifier for this config entry */
     id?: string;
     /** FK to namespaces — logical grouping for config entries */
     namespaceId: string;
+    /** Database that owns this resource (database-scoped isolation) */
+    databaseId: string;
     /** Key name identifying the config entry */
     name: string;
+    /** Integration provider slug (e.g. mailgun, postgres). Used by the UI to group config entries by integration. No FK. */
+    provider?: string;
     /** Plaintext config value */
     value?: string;
     /** Key/value pairs for selecting/filtering config entries */
@@ -525,16 +863,70 @@ export interface PlatformConfigInput {
     /** Optional expiration timestamp for time-limited config entries */
     expiresAt?: string;
 }
+/** An input for mutations affecting `PlatformInternalSecret` */
+export interface PlatformInternalSecretInput {
+    id?: string;
+    name?: string;
+    namespaceId?: string;
+    description?: string;
+    labels?: Record<string, unknown>;
+    annotations?: Record<string, unknown>;
+    createdAt?: string;
+    updatedAt?: string;
+    rotatedAt?: string;
+    retiredAt?: string;
+}
+/** An input for mutations affecting `PlatformSecret` */
+export interface PlatformSecretInput {
+    id?: string;
+    name?: string;
+    provider?: string;
+    namespaceId?: string;
+    description?: string;
+    labels?: Record<string, unknown>;
+    annotations?: Record<string, unknown>;
+    createdAt?: string;
+    updatedAt?: string;
+    rotatedAt?: string;
+    retiredAt?: string;
+}
+/** An input for mutations affecting `Secret` */
+export interface SecretInput {
+    databaseId?: string;
+    id?: string;
+    name?: string;
+    provider?: string;
+    namespaceId?: string;
+    description?: string;
+    labels?: Record<string, unknown>;
+    annotations?: Record<string, unknown>;
+    createdAt?: string;
+    updatedAt?: string;
+    rotatedAt?: string;
+    retiredAt?: string;
+}
+export interface PlatformInternalSecretsDelPayload {
+    clientMutationId?: string | null;
+}
+export type PlatformInternalSecretsDelPayloadSelect = {
+    clientMutationId?: boolean;
+};
 export interface PlatformSecretsDelPayload {
     clientMutationId?: string | null;
 }
 export type PlatformSecretsDelPayloadSelect = {
     clientMutationId?: boolean;
 };
-export interface OrgSecretsDelPayload {
+export interface _SecretsDelPayload {
     clientMutationId?: string | null;
 }
-export type OrgSecretsDelPayloadSelect = {
+export type _SecretsDelPayloadSelect = {
+    clientMutationId?: boolean;
+};
+export interface PlatformInternalSecretsRemoveArrayPayload {
+    clientMutationId?: string | null;
+}
+export type PlatformInternalSecretsRemoveArrayPayloadSelect = {
     clientMutationId?: boolean;
 };
 export interface PlatformSecretsRemoveArrayPayload {
@@ -543,12 +935,28 @@ export interface PlatformSecretsRemoveArrayPayload {
 export type PlatformSecretsRemoveArrayPayloadSelect = {
     clientMutationId?: boolean;
 };
-export interface OrgSecretsRemoveArrayPayload {
+export interface _SecretsRemoveArrayPayload {
     clientMutationId?: string | null;
 }
-export type OrgSecretsRemoveArrayPayloadSelect = {
+export type _SecretsRemoveArrayPayloadSelect = {
     clientMutationId?: boolean;
 };
+export interface PlatformInternalSecretsRotatePayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export type PlatformInternalSecretsRotatePayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
+export interface PlatformInternalSecretsSetPayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export type PlatformInternalSecretsSetPayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface PlatformSecretsRotatePayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -557,27 +965,27 @@ export type PlatformSecretsRotatePayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
-export interface PlatformSecretsSetPayload {
+export interface _SecretsRotatePayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
-export type PlatformSecretsSetPayloadSelect = {
+export type _SecretsRotatePayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
-export interface OrgSecretsRotatePayload {
+export interface PlatformSecretsSetPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
-export type OrgSecretsRotatePayloadSelect = {
+export type PlatformSecretsSetPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
-export interface OrgSecretsSetPayload {
+export interface _SecretsSetPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
 }
-export type OrgSecretsSetPayloadSelect = {
+export type _SecretsSetPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
@@ -603,51 +1011,6 @@ export type ProvisionBucketPayloadSelect = {
     endpoint?: boolean;
     error?: boolean;
 };
-export interface CreatePlatformConfigDefinitionPayload {
-    clientMutationId?: string | null;
-    /** The `PlatformConfigDefinition` that was created by this mutation. */
-    platformConfigDefinition?: PlatformConfigDefinition | null;
-    platformConfigDefinitionEdge?: PlatformConfigDefinitionEdge | null;
-}
-export type CreatePlatformConfigDefinitionPayloadSelect = {
-    clientMutationId?: boolean;
-    platformConfigDefinition?: {
-        select: PlatformConfigDefinitionSelect;
-    };
-    platformConfigDefinitionEdge?: {
-        select: PlatformConfigDefinitionEdgeSelect;
-    };
-};
-export interface UpdatePlatformConfigDefinitionPayload {
-    clientMutationId?: string | null;
-    /** The `PlatformConfigDefinition` that was updated by this mutation. */
-    platformConfigDefinition?: PlatformConfigDefinition | null;
-    platformConfigDefinitionEdge?: PlatformConfigDefinitionEdge | null;
-}
-export type UpdatePlatformConfigDefinitionPayloadSelect = {
-    clientMutationId?: boolean;
-    platformConfigDefinition?: {
-        select: PlatformConfigDefinitionSelect;
-    };
-    platformConfigDefinitionEdge?: {
-        select: PlatformConfigDefinitionEdgeSelect;
-    };
-};
-export interface DeletePlatformConfigDefinitionPayload {
-    clientMutationId?: string | null;
-    /** The `PlatformConfigDefinition` that was deleted by this mutation. */
-    platformConfigDefinition?: PlatformConfigDefinition | null;
-    platformConfigDefinitionEdge?: PlatformConfigDefinitionEdge | null;
-}
-export type DeletePlatformConfigDefinitionPayloadSelect = {
-    clientMutationId?: boolean;
-    platformConfigDefinition?: {
-        select: PlatformConfigDefinitionSelect;
-    };
-    platformConfigDefinitionEdge?: {
-        select: PlatformConfigDefinitionEdgeSelect;
-    };
-};
 export interface CreatePlatformConfigPayload {
     clientMutationId?: string | null;
     /** The `PlatformConfig` that was created by this mutation. */
@@ -693,16 +1056,82 @@ export type DeletePlatformConfigPayloadSelect = {
         select: PlatformConfigEdgeSelect;
     };
 };
-/** A `PlatformConfigDefinition` edge in the connection. */
-export interface PlatformConfigDefinitionEdge {
-    cursor?: string | null;
-    /** The `PlatformConfigDefinition` at the end of the edge. */
-    node?: PlatformConfigDefinition | null;
+export interface CreateConfigPayload {
+    clientMutationId?: string | null;
+    /** The `Config` that was created by this mutation. */
+    config?: Config | null;
+    configEdge?: ConfigEdge | null;
 }
-export type PlatformConfigDefinitionEdgeSelect = {
-    cursor?: boolean;
-    node?: {
-        select: PlatformConfigDefinitionSelect;
+export type CreateConfigPayloadSelect = {
+    clientMutationId?: boolean;
+    config?: {
+        select: ConfigSelect;
+    };
+    configEdge?: {
+        select: ConfigEdgeSelect;
+    };
+};
+export interface UpdateConfigPayload {
+    clientMutationId?: string | null;
+    /** The `Config` that was updated by this mutation. */
+    config?: Config | null;
+    configEdge?: ConfigEdge | null;
+}
+export type UpdateConfigPayloadSelect = {
+    clientMutationId?: boolean;
+    config?: {
+        select: ConfigSelect;
+    };
+    configEdge?: {
+        select: ConfigEdgeSelect;
+    };
+};
+export interface DeleteConfigPayload {
+    clientMutationId?: string | null;
+    /** The `Config` that was deleted by this mutation. */
+    config?: Config | null;
+    configEdge?: ConfigEdge | null;
+}
+export type DeleteConfigPayloadSelect = {
+    clientMutationId?: boolean;
+    config?: {
+        select: ConfigSelect;
+    };
+    configEdge?: {
+        select: ConfigEdgeSelect;
+    };
+};
+export interface CreatePlatformInternalSecretPayload {
+    clientMutationId?: string | null;
+    /** The `PlatformInternalSecret` that was created by this mutation. */
+    platformInternalSecret?: PlatformInternalSecret | null;
+}
+export type CreatePlatformInternalSecretPayloadSelect = {
+    clientMutationId?: boolean;
+    platformInternalSecret?: {
+        select: PlatformInternalSecretSelect;
+    };
+};
+export interface CreatePlatformSecretPayload {
+    clientMutationId?: string | null;
+    /** The `PlatformSecret` that was created by this mutation. */
+    platformSecret?: PlatformSecret | null;
+}
+export type CreatePlatformSecretPayloadSelect = {
+    clientMutationId?: boolean;
+    platformSecret?: {
+        select: PlatformSecretSelect;
+    };
+};
+export interface CreateSecretPayload {
+    clientMutationId?: string | null;
+    /** The `Secret` that was created by this mutation. */
+    secret?: Secret | null;
+}
+export type CreateSecretPayloadSelect = {
+    clientMutationId?: boolean;
+    secret?: {
+        select: SecretSelect;
     };
 };
 /** A `PlatformConfig` edge in the connection. */
@@ -717,3 +1146,15 @@ export type PlatformConfigEdgeSelect = {
         select: PlatformConfigSelect;
     };
 };
+/** A `Config` edge in the connection. */
+export interface ConfigEdge {
+    cursor?: string | null;
+    /** The `Config` at the end of the edge. */
+    node?: Config | null;
+}
+export type ConfigEdgeSelect = {
+    cursor?: boolean;
+    node?: {
+        select: ConfigSelect;
+    };
+};