@grantjs/schema 1.0.0 → 1.1.0

package/src/generated/graphql.ts

@@ -234,6 +234,7 @@ export type AddOrganizationTagInput = {
 
 export type AddOrganizationUserInput = {
   organizationId: Scalars['ID']['input'];
+  roleId: Scalars['ID']['input'];
   userId: Scalars['ID']['input'];
 };
 
@@ -277,11 +278,14 @@ export type AddProjectTagInput = {
 
 export type AddProjectUserApiKeyInput = {
   apiKeyId: Scalars['ID']['input'];
+  /** Optional pivot metadata (e.g. CDM `cdmImport` / `cdmSource`); omit for normal API creates. */
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   projectId: Scalars['ID']['input'];
   userId: Scalars['ID']['input'];
 };
 
 export type AddProjectUserInput = {
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   projectId: Scalars['ID']['input'];
   userId: Scalars['ID']['input'];
 };
@@ -397,6 +401,43 @@ export type AuthorizationResult = {
   reason?: Maybe<AuthorizationReason>;
 };
 
+export enum CdmFindBy {
+  Email = 'email',
+  Id = 'id',
+  Key = 'key',
+  Name = 'name',
+  Slug = 'slug',
+}
+
+export enum CdmIfMissing {
+  CreateNew = 'createNew',
+  Fail = 'fail',
+  Skip = 'skip',
+}
+
+export type CdmKeyResolverInput = {
+  findBy?: InputMaybe<CdmFindBy>;
+  ifMissing?: InputMaybe<CdmIfMissing>;
+  value: Scalars['String']['input'];
+};
+
+export type CdmModeInput = {
+  confirmDestructive?: InputMaybe<Scalars['Boolean']['input']>;
+  onConflict?: InputMaybe<CdmOnConflict>;
+  strategy: CdmModeStrategy;
+};
+
+export enum CdmModeStrategy {
+  Merge = 'merge',
+  Replace = 'replace',
+}
+
+export enum CdmOnConflict {
+  Fail = 'fail',
+  Skip = 'skip',
+  Update = 'update',
+}
+
 export type ChangeMyPasswordInput = {
   confirmPassword: Scalars['String']['input'];
   currentPassword: Scalars['String']['input'];
@@ -496,6 +537,7 @@ export type CreatePermissionInput = {
   action: Scalars['String']['input'];
   condition?: InputMaybe<Scalars['JSON']['input']>;
   description?: InputMaybe<Scalars['String']['input']>;
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   name: Scalars['String']['input'];
   primaryTagId?: InputMaybe<Scalars['ID']['input']>;
   resourceId?: InputMaybe<Scalars['ID']['input']>;
@@ -547,8 +589,10 @@ export type CreateProjectInput = {
 
 export type CreateResourceInput = {
   actions?: InputMaybe<Array<Scalars['String']['input']>>;
+  createPermissions?: InputMaybe<Scalars['Boolean']['input']>;
   description?: InputMaybe<Scalars['String']['input']>;
   isActive?: InputMaybe<Scalars['Boolean']['input']>;
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   name: Scalars['String']['input'];
   primaryTagId?: InputMaybe<Scalars['ID']['input']>;
   scope: Scope;
@@ -568,6 +612,7 @@ export type CreateRoleInput = {
 
 export type CreateTagInput = {
   color: Scalars['String']['input'];
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   name: Scalars['String']['input'];
   scope: Scope;
 };
@@ -631,6 +676,10 @@ export type ExchangeApiKeyResult = {
   expiresIn: Scalars['Int']['output'];
 };
 
+export type GenerateMyMfaRecoveryCodesInput = {
+  factorId?: InputMaybe<Scalars['ID']['input']>;
+};
+
 export type GetUserAuthenticationMethodsInput = {
   provider?: InputMaybe<UserAuthenticationMethodProvider>;
   userId?: InputMaybe<Scalars['ID']['input']>;
@@ -663,6 +712,16 @@ export type Group = Auditable & {
   updatedAt: Scalars['Date']['output'];
 };
 
+export type GroupCdmInput = {
+  description?: InputMaybe<Scalars['String']['input']>;
+  key: Scalars['String']['input'];
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
+  name: Scalars['String']['input'];
+  permissions?: InputMaybe<Array<Scalars['String']['input']>>;
+  primaryTag?: InputMaybe<Scalars['String']['input']>;
+  tags?: InputMaybe<Array<Scalars['String']['input']>>;
+};
+
 export type GroupPage = PaginatedResults & {
   __typename?: 'GroupPage';
   groups: Array<Group>;
@@ -756,8 +815,11 @@ export type LoginResponse = {
   accessToken: Scalars['String']['output'];
   accounts: Array<Account>;
   email?: Maybe<Scalars['String']['output']>;
+  mfaVerified?: Maybe<Scalars['Boolean']['output']>;
   refreshToken: Scalars['String']['output'];
   requiresEmailVerification?: Maybe<Scalars['Boolean']['output']>;
+  /** When true, the client should complete MFA before expecting full API access (see AUTH_MIN_AAL_AT_LOGIN). */
+  requiresMfaStepUp?: Maybe<Scalars['Boolean']['output']>;
   verificationExpiry?: Maybe<Scalars['Date']['output']>;
 };
 
@@ -770,6 +832,7 @@ export type MeResponse = {
   __typename?: 'MeResponse';
   accounts: Array<Account>;
   email?: Maybe<Scalars['String']['output']>;
+  mfaVerified?: Maybe<Scalars['Boolean']['output']>;
   requiresEmailVerification?: Maybe<Scalars['Boolean']['output']>;
   verificationExpiry?: Maybe<Scalars['Date']['output']>;
 };
@@ -779,13 +842,63 @@ export enum MemberType {
   Member = 'member',
 }
 
+export type MfaDevice = {
+  __typename?: 'MfaDevice';
+  createdAt: Scalars['Date']['output'];
+  id: Scalars['ID']['output'];
+  isEnabled: Scalars['Boolean']['output'];
+  isPrimary: Scalars['Boolean']['output'];
+  lastUsedAt?: Maybe<Scalars['Date']['output']>;
+  name: Scalars['String']['output'];
+};
+
+export type MfaEnrollment = {
+  __typename?: 'MfaEnrollment';
+  factorId: Scalars['ID']['output'];
+  otpAuthUrl: Scalars['String']['output'];
+  secret: Scalars['String']['output'];
+};
+
+export type MfaRecoveryCodeStatus = {
+  __typename?: 'MfaRecoveryCodeStatus';
+  activeCount: Scalars['Int']['output'];
+  lastGeneratedAt?: Maybe<Scalars['Date']['output']>;
+};
+
+export type MfaSetupResponse = {
+  __typename?: 'MfaSetupResponse';
+  factorId: Scalars['ID']['output'];
+  otpAuthUrl: Scalars['String']['output'];
+  secret: Scalars['String']['output'];
+};
+
+export type MfaVerifyResponse = {
+  __typename?: 'MfaVerifyResponse';
+  accessToken: Scalars['String']['output'];
+  mfaVerified: Scalars['Boolean']['output'];
+  refreshToken: Scalars['String']['output'];
+};
+
+export type MfaVerifyResult = {
+  __typename?: 'MfaVerifyResult';
+  success: Scalars['Boolean']['output'];
+};
+
 export type Mutation = {
   __typename?: 'Mutation';
   _empty?: Maybe<Scalars['String']['output']>;
   acceptInvitation: AcceptInvitationResult;
+  /**
+   * Cancel a pending or running project CDM sync job. Cancellation is
+   * immediate when the job is still PENDING; if the job is already RUNNING, the
+   * cancellation is recorded and the worker stops at the next checkpoint
+   * (best-effort).
+   */
+  cancelProjectSync: ProjectSyncJob;
   changeMyPassword: ChangeMyPasswordResult;
   createApiKey: CreateApiKeyResult;
   createGroup: Group;
+  createMyMfaEnrollment: MfaEnrollment;
   createMySecondaryAccount: CreateMySecondaryAccountResult;
   createMyUserAuthenticationMethod: UserAuthenticationMethod;
   createOrganization: Organization;
@@ -810,11 +923,13 @@ export type Mutation = {
   deleteTag: Tag;
   deleteUser: User;
   exchangeApiKey: ExchangeApiKeyResult;
+  generateMyMfaRecoveryCodes: Array<Scalars['String']['output']>;
   inviteMember: OrganizationInvitation;
   login: LoginResponse;
   logoutMyUser: LogoutMyUserResponse;
   refreshSession: RefreshSessionResponse;
   register: CreateAccountResult;
+  removeMyMfaDevice: MfaVerifyResult;
   removeOrganizationMember: OrganizationMember;
   renewInvitation: OrganizationInvitation;
   requestPasswordReset: RequestPasswordResetResponse;
@@ -831,6 +946,31 @@ export type Mutation = {
    */
   rotateSigningKey: SigningKey;
   setMyPrimaryAuthenticationMethod: UserAuthenticationMethod;
+  setMyPrimaryMfaDevice: MfaDevice;
+  setupMfa: MfaSetupResponse;
+  /**
+   * Enqueue an asynchronous CDM **export** job for the given project. The worker
+   * snapshots current permission state into a replay-ready `SyncProjectInput` and
+   * stores it on the job row (`snapshot`); poll `projectSyncJob` for status.
+   *
+   * Requires Project:update in the given project scope (same as starting import jobs).
+   *
+   * Pass optional `input.jobName` for idempotency with the same rules as import `input.id`.
+   */
+  startProjectExport: ProjectSyncJob;
+  /**
+   * Enqueue an asynchronous project CDM import job for the given project.
+   * Applies a canonical data model document: roles, groups, resources, permissions,
+   * tags, project pivots, and user assignments scoped to the project.
+   * Requires Project:update in the given project scope.
+   *
+   * Returns immediately with a job descriptor in the PENDING status; the actual
+   * import runs in the background. Poll `projectSyncJob` for status.
+   * Pass optional `input.id` as a stable **job name** for idempotency: if an active job
+   * already exists for the same `(project, operation=IMPORT, jobName)`, that job is
+   * returned instead of creating a new one.
+   */
+  startProjectSync: ProjectSyncJob;
   updateGroup: Group;
   updateMyUser: User;
   updateOrganization: Organization;
@@ -846,12 +986,21 @@ export type Mutation = {
   uploadMyUserPicture: UploadUserPictureResult;
   uploadUserPicture: UploadUserPictureResult;
   verifyEmail: VerifyEmailResponse;
+  verifyMfa: MfaVerifyResponse;
+  verifyMfaRecoveryCode: MfaVerifyResponse;
+  verifyMyMfaEnrollment: MfaVerifyResult;
 };
 
 export type MutationAcceptInvitationArgs = {
   input: AcceptInvitationInput;
 };
 
+export type MutationCancelProjectSyncArgs = {
+  id: Scalars['ID']['input'];
+  jobId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
 export type MutationChangeMyPasswordArgs = {
   input: ChangeMyPasswordInput;
 };
@@ -961,6 +1110,10 @@ export type MutationExchangeApiKeyArgs = {
   input: ExchangeApiKeyInput;
 };
 
+export type MutationGenerateMyMfaRecoveryCodesArgs = {
+  input?: InputMaybe<GenerateMyMfaRecoveryCodesInput>;
+};
+
 export type MutationInviteMemberArgs = {
   input: InviteMemberInput;
 };
@@ -973,6 +1126,10 @@ export type MutationRegisterArgs = {
   input: RegisterInput;
 };
 
+export type MutationRemoveMyMfaDeviceArgs = {
+  input: RemoveMyMfaDeviceInput;
+};
+
 export type MutationRemoveOrganizationMemberArgs = {
   input: RemoveOrganizationMemberInput;
   userId: Scalars['ID']['input'];
@@ -1021,6 +1178,22 @@ export type MutationSetMyPrimaryAuthenticationMethodArgs = {
   id: Scalars['ID']['input'];
 };
 
+export type MutationSetMyPrimaryMfaDeviceArgs = {
+  input: SetMyPrimaryMfaDeviceInput;
+};
+
+export type MutationStartProjectExportArgs = {
+  id: Scalars['ID']['input'];
+  input: StartProjectExportInput;
+  scope: Scope;
+};
+
+export type MutationStartProjectSyncArgs = {
+  id: Scalars['ID']['input'];
+  input: SyncProjectInput;
+  scope: Scope;
+};
+
 export type MutationUpdateGroupArgs = {
   id: Scalars['ID']['input'];
   input: UpdateGroupInput;
@@ -1087,6 +1260,18 @@ export type MutationVerifyEmailArgs = {
   input: VerifyEmailInput;
 };
 
+export type MutationVerifyMfaArgs = {
+  input: VerifyMfaInput;
+};
+
+export type MutationVerifyMfaRecoveryCodeArgs = {
+  input: VerifyMfaRecoveryCodeInput;
+};
+
+export type MutationVerifyMyMfaEnrollmentArgs = {
+  input: VerifyMyMfaEnrollmentInput;
+};
+
 export type MyUserSessionsInput = {
   audience?: InputMaybe<Scalars['String']['input']>;
   limit?: InputMaybe<Scalars['Int']['input']>;
@@ -1103,6 +1288,7 @@ export type Organization = Auditable & {
   name: Scalars['String']['output'];
   permissions?: Maybe<Array<Permission>>;
   projects?: Maybe<Array<Project>>;
+  requireMfaForSensitiveActions: Scalars['Boolean']['output'];
   roles?: Maybe<Array<Role>>;
   slug: Scalars['String']['output'];
   tags?: Maybe<Array<Tag>>;
@@ -1327,6 +1513,7 @@ export type OrganizationUser = Auditable & {
   id: Scalars['ID']['output'];
   organization?: Maybe<Organization>;
   organizationId: Scalars['ID']['output'];
+  roleId: Scalars['ID']['output'];
   updatedAt: Scalars['Date']['output'];
   user?: Maybe<User>;
   userId: Scalars['ID']['output'];
@@ -1345,6 +1532,7 @@ export type Permission = Auditable & {
   deletedAt?: Maybe<Scalars['Date']['output']>;
   description?: Maybe<Scalars['String']['output']>;
   id: Scalars['ID']['output'];
+  metadata: Scalars['JSON']['output'];
   name: Scalars['String']['output'];
   resource?: Maybe<Resource>;
   resourceId?: Maybe<Scalars['ID']['output']>;
@@ -1352,6 +1540,20 @@ export type Permission = Auditable & {
   updatedAt: Scalars['Date']['output'];
 };
 
+/** Custom permission for this project; `resource` is an opaque key in the same document. */
+export type PermissionCdmInput = {
+  action: Scalars['String']['input'];
+  condition?: InputMaybe<Scalars['JSON']['input']>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  groups?: InputMaybe<Array<Scalars['String']['input']>>;
+  key: Scalars['String']['input'];
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
+  name: Scalars['String']['input'];
+  primaryTag?: InputMaybe<Scalars['String']['input']>;
+  resource: Scalars['String']['input'];
+  tags?: InputMaybe<Array<Scalars['String']['input']>>;
+};
+
 export type PermissionPage = PaginatedResults & {
   __typename?: 'PermissionPage';
   hasNextPage: Scalars['Boolean']['output'];
@@ -1562,6 +1764,68 @@ export enum ProjectSortableField {
   UpdatedAt = 'updatedAt',
 }
 
+/** Asynchronous project CDM import or export job. */
+export type ProjectSyncJob = {
+  __typename?: 'ProjectSyncJob';
+  cancelledAt?: Maybe<Scalars['Date']['output']>;
+  cdmVersion: Scalars['Int']['output'];
+  completedAt?: Maybe<Scalars['Date']['output']>;
+  enqueuedAt: Scalars['Date']['output'];
+  errorMessage?: Maybe<Scalars['String']['output']>;
+  /** Rollback snapshot (import) or exported CDM (export); REST `.../snapshot`. */
+  hasSnapshot: Scalars['Boolean']['output'];
+  id: Scalars['ID']['output'];
+  /** Client idempotency key from `SyncProjectInput.id` on import. */
+  jobName?: Maybe<Scalars['String']['output']>;
+  /** Import merge/replace; null for export. */
+  modeStrategy?: Maybe<CdmModeStrategy>;
+  operation: ProjectSyncJobOperation;
+  projectId: Scalars['ID']['output'];
+  /** Import counters when completed; null for export (CDM in snapshot download). */
+  result?: Maybe<SyncProjectResult>;
+  snapshotSizeBytes?: Maybe<Scalars['Int']['output']>;
+  snapshotTakenAt?: Maybe<Scalars['Date']['output']>;
+  startedAt?: Maybe<Scalars['Date']['output']>;
+  status: ProjectSyncJobStatus;
+  warnings: Array<Scalars['String']['output']>;
+};
+
+/** CDM import or export work for a project (`project_sync_jobs`). */
+export enum ProjectSyncJobOperation {
+  Export = 'EXPORT',
+  Import = 'IMPORT',
+}
+
+/** Paginated list of project CDM sync jobs. */
+export type ProjectSyncJobPage = PaginatedResults & {
+  __typename?: 'ProjectSyncJobPage';
+  hasNextPage: Scalars['Boolean']['output'];
+  jobs: Array<ProjectSyncJob>;
+  totalCount: Scalars['Int']['output'];
+};
+
+export type ProjectSyncJobSortInput = {
+  field: ProjectSyncJobSortableField;
+  order: SortOrder;
+};
+
+export enum ProjectSyncJobSortableField {
+  CompletedAt = 'completedAt',
+  EnqueuedAt = 'enqueuedAt',
+  JobName = 'jobName',
+  StartedAt = 'startedAt',
+  Status = 'status',
+}
+
+/** Lifecycle status of an asynchronous project CDM sync job. */
+export enum ProjectSyncJobStatus {
+  Cancelled = 'CANCELLED',
+  Completed = 'COMPLETED',
+  Failed = 'FAILED',
+  Pending = 'PENDING',
+  Running = 'RUNNING',
+}
+
 export type ProjectTag = Auditable & {
   __typename?: 'ProjectTag';
   createdAt: Scalars['Date']['output'];
@@ -1583,7 +1847,10 @@ export type ProjectUser = Auditable & {
   __typename?: 'ProjectUser';
   createdAt: Scalars['Date']['output'];
   deletedAt?: Maybe<Scalars['Date']['output']>;
+  displayName?: Maybe<Scalars['String']['output']>;
   id: Scalars['ID']['output'];
+  metadata: Scalars['JSON']['output'];
+  pictureUrl?: Maybe<Scalars['String']['output']>;
   project?: Maybe<Project>;
   projectId: Scalars['ID']['output'];
   updatedAt: Scalars['Date']['output'];
@@ -1617,6 +1884,8 @@ export type Query = {
   invitation?: Maybe<OrganizationInvitation>;
   isAuthorized: AuthorizationResult;
   me: MeResponse;
+  myMfaDevices: Array<MfaDevice>;
+  myMfaRecoveryCodeStatus: MfaRecoveryCodeStatus;
   myUserAuthenticationMethods: Array<UserAuthenticationMethod>;
   myUserDataExport: UserDataExport;
   myUserSessions: UserSessionPage;
@@ -1626,6 +1895,18 @@ export type Query = {
   permissions: PermissionPage;
   /** List OAuth apps for the given project scope. Allowed scopes: accountProject, organizationProject. */
   projectApps: ProjectAppPage;
+  /**
+   * Read the current state of a project CDM sync job. Use this to poll
+   * the lifecycle of a job started via `startProjectSync`.
+   */
+  projectSyncJob: ProjectSyncJob;
+  /**
+   * List project CDM sync jobs for a project, with optional pagination,
+   * search (matches jobName), status filter, and sort. Use this to populate the
+   * job history view. Use `projectSyncJob` to read a single job's
+   * current state for polling.
+   */
+  projectSyncJobs: ProjectSyncJobPage;
   projects: ProjectPage;
   resources: ResourcePage;
   roles: RolePage;
@@ -1717,6 +1998,22 @@ export type QueryProjectAppsArgs = {
   tagIds?: InputMaybe<Array<Scalars['ID']['input']>>;
 };
 
+export type QueryProjectSyncJobArgs = {
+  id: Scalars['ID']['input'];
+  jobId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type QueryProjectSyncJobsArgs = {
+  id: Scalars['ID']['input'];
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  page?: InputMaybe<Scalars['Int']['input']>;
+  scope: Scope;
+  search?: InputMaybe<Scalars['String']['input']>;
+  sort?: InputMaybe<ProjectSyncJobSortInput>;
+  status?: InputMaybe<ProjectSyncJobStatus>;
+};
+
 export type QueryProjectsArgs = {
   ids?: InputMaybe<Array<Scalars['ID']['input']>>;
   limit?: InputMaybe<Scalars['Int']['input']>;
@@ -1974,6 +2271,10 @@ export type RemoveGroupTagInput = {
   tagId: Scalars['ID']['input'];
 };
 
+export type RemoveMyMfaDeviceInput = {
+  factorId: Scalars['ID']['input'];
+};
+
 export type RemoveOrganizationGroupInput = {
   groupId: Scalars['ID']['input'];
   organizationId: Scalars['ID']['input'];
@@ -2133,12 +2434,26 @@ export type Resource = Auditable & {
   description?: Maybe<Scalars['String']['output']>;
   id: Scalars['ID']['output'];
   isActive: Scalars['Boolean']['output'];
+  metadata: Scalars['JSON']['output'];
   name: Scalars['String']['output'];
+  permissions?: Maybe<Array<Permission>>;
   slug: Scalars['String']['output'];
   tags: Array<Tag>;
   updatedAt: Scalars['Date']['output'];
 };
 
+/** Project resource row for CDM import/export. */
+export type ResourceCdmInput = {
+  actions: Array<Scalars['String']['input']>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  key: Scalars['String']['input'];
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
+  name: Scalars['String']['input'];
+  primaryTag?: InputMaybe<Scalars['String']['input']>;
+  slug?: InputMaybe<Scalars['String']['input']>;
+  tags?: InputMaybe<Array<Scalars['String']['input']>>;
+};
+
 export type ResourcePage = PaginatedResults & {
   __typename?: 'ResourcePage';
   hasNextPage: Scalars['Boolean']['output'];
@@ -2209,6 +2524,17 @@ export type Role = Auditable & {
   updatedAt: Scalars['Date']['output'];
 };
 
+export type RoleCdmInput = {
+  description?: InputMaybe<Scalars['String']['input']>;
+  groups?: InputMaybe<Array<Scalars['String']['input']>>;
+  key: Scalars['String']['input'];
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
+  name: Scalars['String']['input'];
+  permissions?: InputMaybe<Array<Scalars['String']['input']>>;
+  primaryTag?: InputMaybe<Scalars['String']['input']>;
+  tags?: InputMaybe<Array<Scalars['String']['input']>>;
+};
+
 export type RoleGroup = Auditable & {
   __typename?: 'RoleGroup';
   createdAt: Scalars['Date']['output'];
@@ -2292,6 +2618,10 @@ export type SessionExportData = {
   userAgent?: Maybe<Scalars['String']['output']>;
 };
 
+export type SetMyPrimaryMfaDeviceInput = {
+  factorId: Scalars['ID']['input'];
+};
+
 /**
  * Signing key for a scope (e.g. project). Used for RS256 API key tokens; public key is exposed in JWKS.
  * Only project scopes (accountProject, organizationProject) have manageable keys; system key is internal.
@@ -2317,6 +2647,77 @@ export enum SortOrder {
   Desc = 'DESC',
 }
 
+/**
+ * Parameters for enqueueing an asynchronous CDM **export** job. The worker
+ * materialises a `SyncProjectInput` document and stores it in the job `snapshot`
+ * column; this input is persisted as the job `payload` (export options only).
+ */
+export type StartProjectExportInput = {
+  /**
+   * When `users` are exported, whether to emit CDM-managed project user API key rows
+   * (identity only). Omit = default true (full export behaviour).
+   */
+  includeUserApiKeys?: InputMaybe<Scalars['Boolean']['input']>;
+  /**
+   * Optional stable idempotency / display name (same column as import `SyncProjectInput.id`).
+   * When set, an active job for the same `(project, operation=EXPORT, jobName)` is returned
+   * instead of creating a new one.
+   */
+  jobName?: InputMaybe<Scalars['String']['input']>;
+  /**
+   * Embedded in the exported CDM document `mode` block for re-import.
+   * Does not change export execution (snapshot is always read-only).
+   */
+  mode?: InputMaybe<CdmModeInput>;
+  /** Subset of CDM slices to export; omit or empty for a full project export. */
+  sections?: InputMaybe<Array<Scalars['String']['input']>>;
+  /** CDM document version (only `1` is supported). */
+  version: Scalars['Int']['input'];
+};
+
+/**
+ * Versioned canonical project document (CDM) for export/import: roles, users,
+ * resources, permissions, groups, and tags scoped to one project.
+ */
+export type SyncProjectInput = {
+  groups?: InputMaybe<Array<GroupCdmInput>>;
+  id?: InputMaybe<Scalars['String']['input']>;
+  mode: CdmModeInput;
+  permissions?: InputMaybe<Array<PermissionCdmInput>>;
+  resources?: InputMaybe<Array<ResourceCdmInput>>;
+  roles: Array<RoleCdmInput>;
+  tags?: InputMaybe<Array<TagCdmInput>>;
+  users: Array<UserCdmInput>;
+  version: Scalars['Int']['input'];
+};
+
+/** Counters and warnings from a completed CDM import. */
+export type SyncProjectResult = {
+  __typename?: 'SyncProjectResult';
+  groupPermissionsLinked: Scalars['Int']['output'];
+  groupTagsLinked: Scalars['Int']['output'];
+  groupsCreated: Scalars['Int']['output'];
+  importId?: Maybe<Scalars['String']['output']>;
+  permissionsCreated: Scalars['Int']['output'];
+  projectGroupsLinked: Scalars['Int']['output'];
+  projectId: Scalars['ID']['output'];
+  projectPermissionsLinked: Scalars['Int']['output'];
+  projectResourcesLinked: Scalars['Int']['output'];
+  projectRolesLinked: Scalars['Int']['output'];
+  projectTagsLinked: Scalars['Int']['output'];
+  projectUserApiKeysCreated: Scalars['Int']['output'];
+  projectUsersEnsured: Scalars['Int']['output'];
+  resourcesCreated: Scalars['Int']['output'];
+  roleGroupsLinked: Scalars['Int']['output'];
+  roleTagsLinked: Scalars['Int']['output'];
+  rolesCreated: Scalars['Int']['output'];
+  tagsCreated: Scalars['Int']['output'];
+  userRolesAssigned: Scalars['Int']['output'];
+  userTagsLinked: Scalars['Int']['output'];
+  usersCreated: Scalars['Int']['output'];
+  warnings: Array<Scalars['String']['output']>;
+};
+
 export type Tag = Auditable & {
   __typename?: 'Tag';
   color: Scalars['String']['output'];
@@ -2324,10 +2725,18 @@ export type Tag = Auditable & {
   deletedAt?: Maybe<Scalars['Date']['output']>;
   id: Scalars['ID']['output'];
   isPrimary?: Maybe<Scalars['Boolean']['output']>;
+  metadata: Scalars['JSON']['output'];
   name: Scalars['String']['output'];
   updatedAt: Scalars['Date']['output'];
 };
 
+export type TagCdmInput = {
+  color: Scalars['String']['input'];
+  key: Scalars['String']['input'];
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
+  name: Scalars['String']['input'];
+};
+
 export type TagPage = PaginatedResults & {
   __typename?: 'TagPage';
   hasNextPage: Scalars['Boolean']['output'];
@@ -2413,6 +2822,7 @@ export type UpdateMyUserInput = {
 
 export type UpdateOrganizationInput = {
   name?: InputMaybe<Scalars['String']['input']>;
+  requireMfaForSensitiveActions?: InputMaybe<Scalars['Boolean']['input']>;
   scope: Scope;
 };
 
@@ -2446,6 +2856,7 @@ export type UpdatePermissionInput = {
   action?: InputMaybe<Scalars['String']['input']>;
   condition?: InputMaybe<Scalars['JSON']['input']>;
   description?: InputMaybe<Scalars['String']['input']>;
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   name?: InputMaybe<Scalars['String']['input']>;
   primaryTagId?: InputMaybe<Scalars['ID']['input']>;
   resourceId?: InputMaybe<Scalars['ID']['input']>;
@@ -2501,6 +2912,7 @@ export type UpdateResourceInput = {
   actions?: InputMaybe<Array<Scalars['String']['input']>>;
   description?: InputMaybe<Scalars['String']['input']>;
   isActive?: InputMaybe<Scalars['Boolean']['input']>;
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   name?: InputMaybe<Scalars['String']['input']>;
   primaryTagId?: InputMaybe<Scalars['ID']['input']>;
   scope: Scope;
@@ -2532,6 +2944,7 @@ export type UpdateRoleTagInput = {
 
 export type UpdateTagInput = {
   color?: InputMaybe<Scalars['String']['input']>;
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
   name?: InputMaybe<Scalars['String']['input']>;
   scope: Scope;
 };
@@ -2602,6 +3015,16 @@ export type User = Auditable & {
   updatedAt: Scalars['Date']['output'];
 };
 
+export type UserApiKeyCdmInput = {
+  clientId?: InputMaybe<Scalars['String']['input']>;
+  clientSecret?: InputMaybe<Scalars['String']['input']>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  expiresAt?: InputMaybe<Scalars['Date']['input']>;
+  key?: InputMaybe<Scalars['String']['input']>;
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
+  name?: InputMaybe<Scalars['String']['input']>;
+};
+
 export enum UserAuthenticationEmailProviderAction {
   Connect = 'connect',
   Login = 'login',
@@ -2630,6 +3053,18 @@ export enum UserAuthenticationMethodProvider {
   Google = 'google',
 }
 
+export type UserCdmInput = {
+  apiKeys?: InputMaybe<Array<UserApiKeyCdmInput>>;
+  groups?: InputMaybe<Array<Scalars['String']['input']>>;
+  key: CdmKeyResolverInput;
+  metadata?: InputMaybe<Scalars['JSON']['input']>;
+  name: Scalars['String']['input'];
+  permissions?: InputMaybe<Array<Scalars['String']['input']>>;
+  primaryTag?: InputMaybe<Scalars['String']['input']>;
+  roles?: InputMaybe<Array<Scalars['String']['input']>>;
+  tags?: InputMaybe<Array<Scalars['String']['input']>>;
+};
+
 export type UserDataExport = {
   __typename?: 'UserDataExport';
   accounts: Array<AccountExportData>;
@@ -2769,6 +3204,18 @@ export type VerifyEmailResponse = {
   success: Scalars['Boolean']['output'];
 };
 
+export type VerifyMfaInput = {
+  code: Scalars['String']['input'];
+};
+
+export type VerifyMfaRecoveryCodeInput = {
+  code: Scalars['String']['input'];
+};
+
+export type VerifyMyMfaEnrollmentInput = {
+  code: Scalars['String']['input'];
+};
+
 export type CreateApiKeyMutationVariables = Exact<{
   input: CreateApiKeyInput;
 }>;
@@ -2901,6 +3348,8 @@ export type LoginMutation = {
     __typename?: 'LoginResponse';
     accessToken: string;
     refreshToken: string;
+    mfaVerified?: boolean | null;
+    requiresMfaStepUp?: boolean | null;
     requiresEmailVerification?: boolean | null;
     verificationExpiry?: Date | null;
     email?: string | null;
@@ -2999,6 +3448,18 @@ export type ResetPasswordMutation = {
   };
 };
 
+export type SetupMfaMutationVariables = Exact<{ [key: string]: never }>;
+
+export type SetupMfaMutation = {
+  __typename?: 'Mutation';
+  setupMfa: {
+    __typename?: 'MfaSetupResponse';
+    factorId: string;
+    secret: string;
+    otpAuthUrl: string;
+  };
+};
+
 export type VerifyEmailMutationVariables = Exact<{
   input: VerifyEmailInput;
 }>;
@@ -3008,6 +3469,34 @@ export type VerifyEmailMutation = {
   verifyEmail: { __typename?: 'VerifyEmailResponse'; success: boolean; message: string };
 };
 
+export type VerifyMfaMutationVariables = Exact<{
+  input: VerifyMfaInput;
+}>;
+
+export type VerifyMfaMutation = {
+  __typename?: 'Mutation';
+  verifyMfa: {
+    __typename?: 'MfaVerifyResponse';
+    accessToken: string;
+    refreshToken: string;
+    mfaVerified: boolean;
+  };
+};
+
+export type VerifyMfaRecoveryCodeMutationVariables = Exact<{
+  input: VerifyMfaRecoveryCodeInput;
+}>;
+
+export type VerifyMfaRecoveryCodeMutation = {
+  __typename?: 'Mutation';
+  verifyMfaRecoveryCode: {
+    __typename?: 'MfaVerifyResponse';
+    accessToken: string;
+    refreshToken: string;
+    mfaVerified: boolean;
+  };
+};
+
 export type CreateGroupMutationVariables = Exact<{
   input: CreateGroupInput;
 }>;
@@ -3176,6 +3665,18 @@ export type CreateMyUserAuthenticationMethodMutation = {
   };
 };
 
+export type CreateMyMfaEnrollmentMutationVariables = Exact<{ [key: string]: never }>;
+
+export type CreateMyMfaEnrollmentMutation = {
+  __typename?: 'Mutation';
+  createMyMfaEnrollment: {
+    __typename?: 'MfaEnrollment';
+    factorId: string;
+    secret: string;
+    otpAuthUrl: string;
+  };
+};
+
 export type DeleteMyAccountsMutationVariables = Exact<{
   input: DeleteMyAccountsInput;
 }>;
@@ -3212,6 +3713,15 @@ export type DeleteMyUserAuthenticationMethodMutation = {
   };
 };
 
+export type GenerateMyMfaRecoveryCodesMutationVariables = Exact<{
+  input?: InputMaybe<GenerateMyMfaRecoveryCodesInput>;
+}>;
+
+export type GenerateMyMfaRecoveryCodesMutation = {
+  __typename?: 'Mutation';
+  generateMyMfaRecoveryCodes: Array<string>;
+};
+
 export type LogoutMyUserMutationVariables = Exact<{ [key: string]: never }>;
 
 export type LogoutMyUserMutation = {
@@ -3225,6 +3735,7 @@ export type MeQuery = {
   __typename?: 'Query';
   me: {
     __typename?: 'MeResponse';
+    mfaVerified?: boolean | null;
     requiresEmailVerification?: boolean | null;
     verificationExpiry?: Date | null;
     email?: string | null;
@@ -3352,6 +3863,41 @@ export type MyUserSessionsQuery = {
   };
 };
 
+export type MyMfaDevicesQueryVariables = Exact<{ [key: string]: never }>;
+
+export type MyMfaDevicesQuery = {
+  __typename?: 'Query';
+  myMfaDevices: Array<{
+    __typename?: 'MfaDevice';
+    id: string;
+    name: string;
+    isPrimary: boolean;
+    isEnabled: boolean;
+    createdAt: Date;
+    lastUsedAt?: Date | null;
+  }>;
+};
+
+export type MyMfaRecoveryCodeStatusQueryVariables = Exact<{ [key: string]: never }>;
+
+export type MyMfaRecoveryCodeStatusQuery = {
+  __typename?: 'Query';
+  myMfaRecoveryCodeStatus: {
+    __typename?: 'MfaRecoveryCodeStatus';
+    activeCount: number;
+    lastGeneratedAt?: Date | null;
+  };
+};
+
+export type RemoveMyMfaDeviceMutationVariables = Exact<{
+  input: RemoveMyMfaDeviceInput;
+}>;
+
+export type RemoveMyMfaDeviceMutation = {
+  __typename?: 'Mutation';
+  removeMyMfaDevice: { __typename?: 'MfaVerifyResult'; success: boolean };
+};
+
 export type RevokeMyUserSessionMutationVariables = Exact<{
   id: Scalars['ID']['input'];
 }>;
@@ -3385,6 +3931,15 @@ export type SetMyPrimaryAuthenticationMethodMutation = {
   };
 };
 
+export type SetMyPrimaryMfaDeviceMutationVariables = Exact<{
+  input: SetMyPrimaryMfaDeviceInput;
+}>;
+
+export type SetMyPrimaryMfaDeviceMutation = {
+  __typename?: 'Mutation';
+  setMyPrimaryMfaDevice: { __typename?: 'MfaDevice'; id: string; isPrimary: boolean };
+};
+
 export type UpdateMyUserMutationVariables = Exact<{
   input: UpdateMyUserInput;
 }>;
@@ -3410,6 +3965,15 @@ export type UploadMyUserPictureMutation = {
   uploadMyUserPicture: { __typename?: 'UploadUserPictureResult'; url: string; path: string };
 };
 
+export type VerifyMyMfaEnrollmentMutationVariables = Exact<{
+  input: VerifyMyMfaEnrollmentInput;
+}>;
+
+export type VerifyMyMfaEnrollmentMutation = {
+  __typename?: 'Mutation';
+  verifyMyMfaEnrollment: { __typename?: 'MfaVerifyResult'; success: boolean };
+};
+
 export type AcceptInvitationMutationVariables = Exact<{
   input: AcceptInvitationInput;
 }>;
@@ -3703,6 +4267,7 @@ export type GetOrganizationsQuery = {
       id: string;
       name: string;
       slug: string;
+      requireMfaForSensitiveActions: boolean;
       createdAt: Date;
       updatedAt: Date;
       tags?: Array<{
@@ -3728,6 +4293,7 @@ export type UpdateOrganizationMutation = {
     id: string;
     name: string;
     slug: string;
+    requireMfaForSensitiveActions: boolean;
     createdAt: Date;
     updatedAt: Date;
   };
@@ -3939,6 +4505,32 @@ export type UpdateProjectAppMutation = {
   };
 };
 
+export type CancelProjectSyncMutationVariables = Exact<{
+  id: Scalars['ID']['input'];
+  scope: Scope;
+  jobId: Scalars['ID']['input'];
+}>;
+
+export type CancelProjectSyncMutation = {
+  __typename?: 'Mutation';
+  cancelProjectSync: {
+    __typename?: 'ProjectSyncJob';
+    id: string;
+    projectId: string;
+    status: ProjectSyncJobStatus;
+    cdmVersion: number;
+    jobName?: string | null;
+    operation: ProjectSyncJobOperation;
+    modeStrategy?: CdmModeStrategy | null;
+    warnings: Array<string>;
+    errorMessage?: string | null;
+    enqueuedAt: Date;
+    startedAt?: Date | null;
+    completedAt?: Date | null;
+    cancelledAt?: Date | null;
+  };
+};
+
 export type CreateProjectMutationVariables = Exact<{
   input: CreateProjectInput;
 }>;
@@ -4048,15 +4640,155 @@ export type GetProjectsQuery = {
   };
 };
 
-export type UpdateProjectMutationVariables = Exact<{
+export type ProjectSyncJobQueryVariables = Exact<{
   id: Scalars['ID']['input'];
-  input: UpdateProjectInput;
+  scope: Scope;
+  jobId: Scalars['ID']['input'];
 }>;
 
-export type UpdateProjectMutation = {
-  __typename?: 'Mutation';
-  updateProject: {
-    __typename?: 'Project';
+export type ProjectSyncJobQuery = {
+  __typename?: 'Query';
+  projectSyncJob: {
+    __typename?: 'ProjectSyncJob';
+    id: string;
+    projectId: string;
+    status: ProjectSyncJobStatus;
+    cdmVersion: number;
+    jobName?: string | null;
+    operation: ProjectSyncJobOperation;
+    modeStrategy?: CdmModeStrategy | null;
+    warnings: Array<string>;
+    errorMessage?: string | null;
+    enqueuedAt: Date;
+    startedAt?: Date | null;
+    completedAt?: Date | null;
+    cancelledAt?: Date | null;
+    hasSnapshot: boolean;
+    snapshotTakenAt?: Date | null;
+    snapshotSizeBytes?: number | null;
+    result?: {
+      __typename?: 'SyncProjectResult';
+      projectId: string;
+      importId?: string | null;
+      rolesCreated: number;
+      groupsCreated: number;
+      roleGroupsLinked: number;
+      groupPermissionsLinked: number;
+      projectRolesLinked: number;
+      projectGroupsLinked: number;
+      projectPermissionsLinked: number;
+      projectResourcesLinked: number;
+      projectUsersEnsured: number;
+      usersCreated: number;
+      userRolesAssigned: number;
+      projectUserApiKeysCreated: number;
+      warnings: Array<string>;
+    } | null;
+  };
+};
+
+export type ProjectSyncJobsQueryVariables = Exact<{
+  id: Scalars['ID']['input'];
+  scope: Scope;
+  page?: InputMaybe<Scalars['Int']['input']>;
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  search?: InputMaybe<Scalars['String']['input']>;
+  sort?: InputMaybe<ProjectSyncJobSortInput>;
+  status?: InputMaybe<ProjectSyncJobStatus>;
+}>;
+
+export type ProjectSyncJobsQuery = {
+  __typename?: 'Query';
+  projectSyncJobs: {
+    __typename?: 'ProjectSyncJobPage';
+    totalCount: number;
+    hasNextPage: boolean;
+    jobs: Array<{
+      __typename?: 'ProjectSyncJob';
+      id: string;
+      projectId: string;
+      status: ProjectSyncJobStatus;
+      cdmVersion: number;
+      jobName?: string | null;
+      operation: ProjectSyncJobOperation;
+      modeStrategy?: CdmModeStrategy | null;
+      warnings: Array<string>;
+      errorMessage?: string | null;
+      enqueuedAt: Date;
+      startedAt?: Date | null;
+      completedAt?: Date | null;
+      cancelledAt?: Date | null;
+      hasSnapshot: boolean;
+      snapshotTakenAt?: Date | null;
+      snapshotSizeBytes?: number | null;
+    }>;
+  };
+};
+
+export type StartProjectExportMutationVariables = Exact<{
+  id: Scalars['ID']['input'];
+  scope: Scope;
+  input: StartProjectExportInput;
+}>;
+
+export type StartProjectExportMutation = {
+  __typename?: 'Mutation';
+  startProjectExport: {
+    __typename?: 'ProjectSyncJob';
+    id: string;
+    projectId: string;
+    status: ProjectSyncJobStatus;
+    cdmVersion: number;
+    jobName?: string | null;
+    operation: ProjectSyncJobOperation;
+    modeStrategy?: CdmModeStrategy | null;
+    warnings: Array<string>;
+    errorMessage?: string | null;
+    enqueuedAt: Date;
+    startedAt?: Date | null;
+    completedAt?: Date | null;
+    cancelledAt?: Date | null;
+    hasSnapshot: boolean;
+    snapshotTakenAt?: Date | null;
+    snapshotSizeBytes?: number | null;
+  };
+};
+
+export type StartProjectSyncMutationVariables = Exact<{
+  id: Scalars['ID']['input'];
+  scope: Scope;
+  input: SyncProjectInput;
+}>;
+
+export type StartProjectSyncMutation = {
+  __typename?: 'Mutation';
+  startProjectSync: {
+    __typename?: 'ProjectSyncJob';
+    id: string;
+    projectId: string;
+    status: ProjectSyncJobStatus;
+    cdmVersion: number;
+    jobName?: string | null;
+    operation: ProjectSyncJobOperation;
+    modeStrategy?: CdmModeStrategy | null;
+    warnings: Array<string>;
+    errorMessage?: string | null;
+    enqueuedAt: Date;
+    startedAt?: Date | null;
+    completedAt?: Date | null;
+    cancelledAt?: Date | null;
+  };
+};
+
+export type UpdateProjectMutationVariables = Exact<{
+  id: Scalars['ID']['input'];
+  input: UpdateProjectInput;
+}>;
+
+export type UpdateProjectMutation = {
+  __typename?: 'Mutation';
+  updateProject: {
+    __typename?: 'Project';
     id: string;
     name: string;
     slug: string;
@@ -4082,6 +4814,13 @@ export type CreateResourceMutation = {
     isActive: boolean;
     createdAt: Date;
     updatedAt: Date;
+    permissions?: Array<{
+      __typename?: 'Permission';
+      id: string;
+      name: string;
+      action: string;
+      resourceId?: string | null;
+    }> | null;
   };
 };
 
@@ -4867,6 +5606,8 @@ export const LoginDocument = {
               selections: [
                 { kind: 'Field', name: { kind: 'Name', value: 'accessToken' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'refreshToken' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'mfaVerified' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'requiresMfaStepUp' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'requiresEmailVerification' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'verificationExpiry' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'email' } },
@@ -5129,6 +5870,33 @@ export const ResetPasswordDocument = {
     },
   ],
 } as unknown as DocumentNode<ResetPasswordMutation, ResetPasswordMutationVariables>;
+export const SetupMfaDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'SetupMfa' },
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'setupMfa' },
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'factorId' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'secret' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'otpAuthUrl' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<SetupMfaMutation, SetupMfaMutationVariables>;
 export const VerifyEmailDocument = {
   kind: 'Document',
   definitions: [
@@ -5172,6 +5940,97 @@ export const VerifyEmailDocument = {
     },
   ],
 } as unknown as DocumentNode<VerifyEmailMutation, VerifyEmailMutationVariables>;
+export const VerifyMfaDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'VerifyMfa' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'VerifyMfaInput' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'verifyMfa' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'accessToken' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'refreshToken' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'mfaVerified' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<VerifyMfaMutation, VerifyMfaMutationVariables>;
+export const VerifyMfaRecoveryCodeDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'VerifyMfaRecoveryCode' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: {
+              kind: 'NamedType',
+              name: { kind: 'Name', value: 'VerifyMfaRecoveryCodeInput' },
+            },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'verifyMfaRecoveryCode' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'accessToken' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'refreshToken' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'mfaVerified' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<VerifyMfaRecoveryCodeMutation, VerifyMfaRecoveryCodeMutationVariables>;
 export const CreateGroupDocument = {
   kind: 'Document',
   definitions: [
@@ -5686,6 +6545,33 @@ export const CreateMyUserAuthenticationMethodDocument = {
   CreateMyUserAuthenticationMethodMutation,
   CreateMyUserAuthenticationMethodMutationVariables
 >;
+export const CreateMyMfaEnrollmentDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'CreateMyMfaEnrollment' },
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'createMyMfaEnrollment' },
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'factorId' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'secret' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'otpAuthUrl' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<CreateMyMfaEnrollmentMutation, CreateMyMfaEnrollmentMutationVariables>;
 export const DeleteMyAccountsDocument = {
   kind: 'Document',
   definitions: [
@@ -5785,6 +6671,45 @@ export const DeleteMyUserAuthenticationMethodDocument = {
   DeleteMyUserAuthenticationMethodMutation,
   DeleteMyUserAuthenticationMethodMutationVariables
 >;
+export const GenerateMyMfaRecoveryCodesDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'GenerateMyMfaRecoveryCodes' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NamedType',
+            name: { kind: 'Name', value: 'GenerateMyMfaRecoveryCodesInput' },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'generateMyMfaRecoveryCodes' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<
+  GenerateMyMfaRecoveryCodesMutation,
+  GenerateMyMfaRecoveryCodesMutationVariables
+>;
 export const LogoutMyUserDocument = {
   kind: 'Document',
   definitions: [
@@ -5853,6 +6778,7 @@ export const MeDocument = {
                     ],
                   },
                 },
+                { kind: 'Field', name: { kind: 'Name', value: 'mfaVerified' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'requiresEmailVerification' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'verificationExpiry' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'email' } },
@@ -6082,41 +7008,28 @@ export const MyUserSessionsDocument = {
     },
   ],
 } as unknown as DocumentNode<MyUserSessionsQuery, MyUserSessionsQueryVariables>;
-export const RevokeMyUserSessionDocument = {
+export const MyMfaDevicesDocument = {
   kind: 'Document',
   definitions: [
     {
       kind: 'OperationDefinition',
-      operation: 'mutation',
-      name: { kind: 'Name', value: 'RevokeMyUserSession' },
-      variableDefinitions: [
-        {
-          kind: 'VariableDefinition',
-          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
-          type: {
-            kind: 'NonNullType',
-            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
-          },
-        },
-      ],
+      operation: 'query',
+      name: { kind: 'Name', value: 'MyMfaDevices' },
       selectionSet: {
         kind: 'SelectionSet',
         selections: [
           {
             kind: 'Field',
-            name: { kind: 'Name', value: 'revokeMyUserSession' },
-            arguments: [
-              {
-                kind: 'Argument',
-                name: { kind: 'Name', value: 'id' },
-                value: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
-              },
-            ],
+            name: { kind: 'Name', value: 'myMfaDevices' },
             selectionSet: {
               kind: 'SelectionSet',
               selections: [
-                { kind: 'Field', name: { kind: 'Name', value: 'success' } },
-                { kind: 'Field', name: { kind: 'Name', value: 'message' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'name' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'isPrimary' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'isEnabled' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'createdAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'lastUsedAt' } },
               ],
             },
           },
@@ -6124,31 +7037,140 @@ export const RevokeMyUserSessionDocument = {
       },
     },
   ],
-} as unknown as DocumentNode<RevokeMyUserSessionMutation, RevokeMyUserSessionMutationVariables>;
-export const SetMyPrimaryAuthenticationMethodDocument = {
+} as unknown as DocumentNode<MyMfaDevicesQuery, MyMfaDevicesQueryVariables>;
+export const MyMfaRecoveryCodeStatusDocument = {
   kind: 'Document',
   definitions: [
     {
       kind: 'OperationDefinition',
-      operation: 'mutation',
-      name: { kind: 'Name', value: 'SetMyPrimaryAuthenticationMethod' },
-      variableDefinitions: [
-        {
-          kind: 'VariableDefinition',
-          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
-          type: {
-            kind: 'NonNullType',
-            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
-          },
-        },
-      ],
+      operation: 'query',
+      name: { kind: 'Name', value: 'MyMfaRecoveryCodeStatus' },
       selectionSet: {
         kind: 'SelectionSet',
         selections: [
           {
             kind: 'Field',
-            name: { kind: 'Name', value: 'setMyPrimaryAuthenticationMethod' },
-            arguments: [
+            name: { kind: 'Name', value: 'myMfaRecoveryCodeStatus' },
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'activeCount' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'lastGeneratedAt' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<MyMfaRecoveryCodeStatusQuery, MyMfaRecoveryCodeStatusQueryVariables>;
+export const RemoveMyMfaDeviceDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'RemoveMyMfaDevice' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'RemoveMyMfaDeviceInput' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'removeMyMfaDevice' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [{ kind: 'Field', name: { kind: 'Name', value: 'success' } }],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<RemoveMyMfaDeviceMutation, RemoveMyMfaDeviceMutationVariables>;
+export const RevokeMyUserSessionDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'RevokeMyUserSession' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'revokeMyUserSession' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'id' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'success' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'message' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<RevokeMyUserSessionMutation, RevokeMyUserSessionMutationVariables>;
+export const SetMyPrimaryAuthenticationMethodDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'SetMyPrimaryAuthenticationMethod' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'setMyPrimaryAuthenticationMethod' },
+            arguments: [
               {
                 kind: 'Argument',
                 name: { kind: 'Name', value: 'id' },
@@ -6178,6 +7200,52 @@ export const SetMyPrimaryAuthenticationMethodDocument = {
   SetMyPrimaryAuthenticationMethodMutation,
   SetMyPrimaryAuthenticationMethodMutationVariables
 >;
+export const SetMyPrimaryMfaDeviceDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'SetMyPrimaryMfaDevice' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: {
+              kind: 'NamedType',
+              name: { kind: 'Name', value: 'SetMyPrimaryMfaDeviceInput' },
+            },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'setMyPrimaryMfaDevice' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'isPrimary' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<SetMyPrimaryMfaDeviceMutation, SetMyPrimaryMfaDeviceMutationVariables>;
 export const UpdateMyUserDocument = {
   kind: 'Document',
   definitions: [
@@ -6267,6 +7335,49 @@ export const UploadMyUserPictureDocument = {
     },
   ],
 } as unknown as DocumentNode<UploadMyUserPictureMutation, UploadMyUserPictureMutationVariables>;
+export const VerifyMyMfaEnrollmentDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'VerifyMyMfaEnrollment' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: {
+              kind: 'NamedType',
+              name: { kind: 'Name', value: 'VerifyMyMfaEnrollmentInput' },
+            },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'verifyMyMfaEnrollment' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [{ kind: 'Field', name: { kind: 'Name', value: 'success' } }],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<VerifyMyMfaEnrollmentMutation, VerifyMyMfaEnrollmentMutationVariables>;
 export const AcceptInvitationDocument = {
   kind: 'Document',
   definitions: [
@@ -7307,6 +8418,10 @@ export const GetOrganizationsDocument = {
                       { kind: 'Field', name: { kind: 'Name', value: 'id' } },
                       { kind: 'Field', name: { kind: 'Name', value: 'name' } },
                       { kind: 'Field', name: { kind: 'Name', value: 'slug' } },
+                      {
+                        kind: 'Field',
+                        name: { kind: 'Name', value: 'requireMfaForSensitiveActions' },
+                      },
                       { kind: 'Field', name: { kind: 'Name', value: 'createdAt' } },
                       { kind: 'Field', name: { kind: 'Name', value: 'updatedAt' } },
                       {
@@ -7384,6 +8499,7 @@ export const UpdateOrganizationDocument = {
                 { kind: 'Field', name: { kind: 'Name', value: 'id' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'name' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'slug' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'requireMfaForSensitiveActions' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'createdAt' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'updatedAt' } },
               ],
@@ -8107,6 +9223,86 @@ export const UpdateProjectAppDocument = {
     },
   ],
 } as unknown as DocumentNode<UpdateProjectAppMutation, UpdateProjectAppMutationVariables>;
+export const CancelProjectSyncDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'CancelProjectSync' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'Scope' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'jobId' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'cancelProjectSync' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'id' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'scope' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'jobId' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'jobId' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'projectId' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'status' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cdmVersion' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'jobName' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'operation' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'modeStrategy' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'warnings' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'errorMessage' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'enqueuedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'startedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'completedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cancelledAt' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<CancelProjectSyncMutation, CancelProjectSyncMutationVariables>;
 export const CreateProjectDocument = {
   kind: 'Document',
   definitions: [
@@ -8490,7 +9686,408 @@ export const GetProjectsDocument = {
     },
   ],
 } as unknown as DocumentNode<GetProjectsQuery, GetProjectsQueryVariables>;
-export const UpdateProjectDocument = {
+export const ProjectSyncJobDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'query',
+      name: { kind: 'Name', value: 'ProjectSyncJob' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'Scope' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'jobId' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'projectSyncJob' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'id' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'scope' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'jobId' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'jobId' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'projectId' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'status' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cdmVersion' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'jobName' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'operation' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'modeStrategy' } },
+                {
+                  kind: 'Field',
+                  name: { kind: 'Name', value: 'result' },
+                  selectionSet: {
+                    kind: 'SelectionSet',
+                    selections: [
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectId' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'importId' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'rolesCreated' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'groupsCreated' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'roleGroupsLinked' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'groupPermissionsLinked' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectRolesLinked' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectGroupsLinked' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectPermissionsLinked' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectResourcesLinked' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectUsersEnsured' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'usersCreated' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'userRolesAssigned' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectUserApiKeysCreated' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'warnings' } },
+                    ],
+                  },
+                },
+                { kind: 'Field', name: { kind: 'Name', value: 'warnings' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'errorMessage' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'enqueuedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'startedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'completedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cancelledAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'hasSnapshot' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'snapshotTakenAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'snapshotSizeBytes' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<ProjectSyncJobQuery, ProjectSyncJobQueryVariables>;
+export const ProjectSyncJobsDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'query',
+      name: { kind: 'Name', value: 'ProjectSyncJobs' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'Scope' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'page' } },
+          type: { kind: 'NamedType', name: { kind: 'Name', value: 'Int' } },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'limit' } },
+          type: { kind: 'NamedType', name: { kind: 'Name', value: 'Int' } },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'search' } },
+          type: { kind: 'NamedType', name: { kind: 'Name', value: 'String' } },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'sort' } },
+          type: { kind: 'NamedType', name: { kind: 'Name', value: 'ProjectSyncJobSortInput' } },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'status' } },
+          type: { kind: 'NamedType', name: { kind: 'Name', value: 'ProjectSyncJobStatus' } },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'projectSyncJobs' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'id' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'scope' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'page' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'page' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'limit' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'limit' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'search' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'search' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'sort' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'sort' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'status' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'status' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                {
+                  kind: 'Field',
+                  name: { kind: 'Name', value: 'jobs' },
+                  selectionSet: {
+                    kind: 'SelectionSet',
+                    selections: [
+                      { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'projectId' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'status' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'cdmVersion' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'jobName' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'operation' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'modeStrategy' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'warnings' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'errorMessage' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'enqueuedAt' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'startedAt' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'completedAt' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'cancelledAt' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'hasSnapshot' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'snapshotTakenAt' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'snapshotSizeBytes' } },
+                    ],
+                  },
+                },
+                { kind: 'Field', name: { kind: 'Name', value: 'totalCount' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'hasNextPage' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<ProjectSyncJobsQuery, ProjectSyncJobsQueryVariables>;
+export const StartProjectExportDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'StartProjectExport' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'Scope' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'StartProjectExportInput' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'startProjectExport' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'id' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'scope' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'projectId' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'status' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cdmVersion' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'jobName' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'operation' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'modeStrategy' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'warnings' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'errorMessage' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'enqueuedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'startedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'completedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cancelledAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'hasSnapshot' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'snapshotTakenAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'snapshotSizeBytes' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<StartProjectExportMutation, StartProjectExportMutationVariables>;
+export const StartProjectSyncDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'StartProjectSync' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'ID' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'Scope' } },
+          },
+        },
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'SyncProjectInput' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'startProjectSync' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'id' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'id' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'scope' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'scope' } },
+              },
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'projectId' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'status' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cdmVersion' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'jobName' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'operation' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'modeStrategy' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'warnings' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'errorMessage' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'enqueuedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'startedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'completedAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'cancelledAt' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<StartProjectSyncMutation, StartProjectSyncMutationVariables>;
+export const UpdateProjectDocument = {
   kind: 'Document',
   definitions: [
     {
@@ -8591,6 +10188,19 @@ export const CreateResourceDocument = {
                 { kind: 'Field', name: { kind: 'Name', value: 'isActive' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'createdAt' } },
                 { kind: 'Field', name: { kind: 'Name', value: 'updatedAt' } },
+                {
+                  kind: 'Field',
+                  name: { kind: 'Name', value: 'permissions' },
+                  selectionSet: {
+                    kind: 'SelectionSet',
+                    selections: [
+                      { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'name' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'action' } },
+                      { kind: 'Field', name: { kind: 'Name', value: 'resourceId' } },
+                    ],
+                  },
+                },
               ],
             },
           },