@hypequery/cloud-client 0.0.0-canary-20261113132544

package/dist/generated/operations.d.ts

@@ -0,0 +1,3320 @@
+import type { CallOptions } from '../types.js';
+/** The operations spec version this client was generated from. */
+export declare const SPEC_VERSION = 1;
+/** Every operation path is relative to this. */
+export declare const BASE_PATH = "/v1";
+/** Every error category, in the order Cloud lists them. */
+export declare const CLOUD_ERROR_CATEGORIES: readonly ["correctable_input", "unauthenticated", "forbidden", "tenant_unavailable", "budget_exceeded", "cancelled", "stale_contract", "unavailable", "internal"];
+export type CloudErrorCategory = (typeof CLOUD_ERROR_CATEGORIES)[number];
+/** Every error code an operation can return, with what to do about it. */
+export declare const CLOUD_ERRORS: {
+    readonly UNAUTHENTICATED: {
+        readonly status: 401;
+        readonly category: "unauthenticated";
+        readonly retryable: false;
+        readonly hint: "Sign in to hypequery Cloud, or send a valid bearer token.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/unauthenticated";
+    };
+    readonly FORBIDDEN: {
+        readonly status: 403;
+        readonly category: "forbidden";
+        readonly retryable: false;
+        readonly hint: "Ask an organisation Admin to do this, or to change your role.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/forbidden";
+    };
+    readonly INVALID_REQUEST_ORIGIN: {
+        readonly status: 403;
+        readonly category: "forbidden";
+        readonly retryable: false;
+        readonly hint: "Send the request from the Cloud app, or authenticate with a bearer token instead of a cookie.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/invalid-request-origin";
+    };
+    readonly OPERATION_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Check the method and path against operations-v1.json.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/operation-not-found";
+    };
+    readonly INVALID_INPUT: {
+        readonly status: 400;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Fix the fields listed in `issues`, then retry.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/invalid-input";
+    };
+    readonly PROJECT_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List projects (`projects.list`) and use one of their slugs.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/project-not-found";
+    };
+    readonly PROJECT_HAS_SEVERAL_TARGETS: {
+        readonly status: 409;
+        readonly category: "unavailable";
+        readonly retryable: false;
+        readonly hint: "This project still has several environments; contact hypequery support to finish moving it to projects only.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/project-has-several-targets";
+    };
+    readonly VERSION_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List versions (`releases.list`) and use one of their labels.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/version-not-found";
+    };
+    readonly RELEASE_MOVED: {
+        readonly status: 409;
+        readonly category: "stale_contract";
+        readonly retryable: false;
+        readonly hint: "Read the current state again (`releases.status` or `drafts.list`), show the user what changed, then retry with the new values.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/release-moved";
+    };
+    readonly RELEASE_CHANGE_REFUSED: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Read the message: it names the guard that refused the change and how to clear it.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/release-change-refused";
+    };
+    readonly DRAFT_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List drafts (`drafts.list`) and use one of their ids.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/draft-not-found";
+    };
+    readonly DRAFT_NOT_CHECKABLE: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Number checks here are for code drafts with a saved release; deploy the draft again from code first.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/draft-not-checkable";
+    };
+    readonly DRAFT_NOT_READY: {
+        readonly status: 422;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Fix what the message names in the draft (or the code, for a code draft), then publish again.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/draft-not-ready";
+    };
+    readonly CONNECTION_NOT_SAVED: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Call connections_link and give the user its link to enter the connection in the dashboard (or `connections.save` from the CLI); never ask for the password in chat.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/connection-not-saved";
+    };
+    readonly CONNECTION_AUTH_FAILED: {
+        readonly status: 422;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Call connections_link so the user can correct the ClickHouse user and password in the dashboard (or `connections.save` from the CLI), then run `connections.test`. Never ask for the password in chat.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/connection-auth-failed";
+    };
+    readonly CONNECTION_UNREACHABLE: {
+        readonly status: 502;
+        readonly category: "unavailable";
+        readonly retryable: true;
+        readonly hint: "Check the host and port, and that ClickHouse accepts connections from hypequery's egress addresses; then run `connections.test` again.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/connection-unreachable";
+    };
+    readonly CONNECTION_QUERY_FAILED: {
+        readonly status: 422;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "ClickHouse refused the check query: grant the user what the message names, then run `connections.test`.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/connection-query-failed";
+    };
+    readonly CONNECTION_DATABASE_LOCKED: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Keep the default database while a release is live; add other databases to `databases` instead.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/connection-database-locked";
+    };
+    readonly STALE_REVISION: {
+        readonly status: 409;
+        readonly category: "stale_contract";
+        readonly retryable: false;
+        readonly hint: "Read it again, then retry with the new expectedRevision.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/stale-revision";
+    };
+    readonly TENANT_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List customers (`tenants.list`) and use one of their ids.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/tenant-not-found";
+    };
+    readonly TENANT_EXISTS: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "That customer is already registered; update it (`tenants.update`) instead.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/tenant-exists";
+    };
+    readonly PERMISSION_SET_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List permission sets (`permissionSets.list`) and use one of their ids.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/permission-set-not-found";
+    };
+    readonly PERMISSION_SET_EXISTS: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Choose another name, or update the existing set (`permissionSets.update`).";
+        readonly docsUrl: "https://hypequery.com/docs/errors/permission-set-exists";
+    };
+    readonly GRANT_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List connections (`tenantGrants.list`) and use one of their ids.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/grant-not-found";
+    };
+    readonly ISSUER_UNREADABLE: {
+        readonly status: 422;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Check the URL is public https and serves the provider's JSON (a JWKS `keys` array, or openid-configuration), then save again.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/issuer-unreadable";
+    };
+    readonly ISSUER_REQUIRED: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Save the identity provider's JWT settings first (`jwtIssuer.save`).";
+        readonly docsUrl: "https://hypequery.com/docs/errors/issuer-required";
+    };
+    readonly ALREADY_CONFIGURED: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Read the current settings, then save again with their expectedRevision to replace them.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/already-configured";
+    };
+    readonly NOT_CONFIGURED: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Nothing is configured yet; save it first.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/not-configured";
+    };
+    readonly PROJECT_EXISTS: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Choose another slug, or use the existing project (`projects.get`).";
+        readonly docsUrl: "https://hypequery.com/docs/errors/project-exists";
+    };
+    readonly KEY_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List keys (`apiKeys.list` or `deployKeys.list`) and use an active key's id.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/key-not-found";
+    };
+    readonly MEMBER_NOT_FOUND: {
+        readonly status: 404;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "List members (`members.list`) and use one of their ids.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/member-not-found";
+    };
+    readonly SESSION_REQUIRED: {
+        readonly status: 403;
+        readonly category: "forbidden";
+        readonly retryable: false;
+        readonly hint: "Make this change in the dashboard or with `hypequery` signed in as yourself.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/session-required";
+    };
+    readonly DRAFT_READ_ONLY: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "This project's model lives in a repository. Explain it or answer questions; for a change, write a prompt or pull-request description for the user's coding agent.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/draft-read-only";
+    };
+    readonly NOTHING_TO_CONFIRM: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Call customer_scope_list and confirm only a dataset it lists with a candidate column.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/nothing-to-confirm";
+    };
+    readonly FINDINGS_CHANGED: {
+        readonly status: 409;
+        readonly category: "stale_contract";
+        readonly retryable: false;
+        readonly hint: "Read drafts_findings again and answer with the current ids and tokens.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/findings-changed";
+    };
+    readonly RUN_CONFLICT: {
+        readonly status: 409;
+        readonly category: "stale_contract";
+        readonly retryable: false;
+        readonly hint: "Read drafts_run_status and act on the run it returns.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/run-conflict";
+    };
+    readonly DRAFT_NAME_TAKEN: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Choose another name; drafts_list shows the names in use.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/draft-name-taken";
+    };
+    readonly UPDATE_CONFLICTS: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Ask the user which side to keep for each conflict in drafts_update, preview with drafts_apply_update, then apply.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/update-conflicts";
+    };
+    readonly OWNERSHIP_CHANGE_REQUIRED: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Tell the user the live model was built in Cloud and publishing this code draft replaces it, after which the project is managed in code; once they agree, repeat the call with takeOwnership: true.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/ownership-change-required";
+    };
+    readonly CONFIRMATION_REQUIRED: {
+        readonly status: 409;
+        readonly category: "correctable_input";
+        readonly retryable: false;
+        readonly hint: "Show the user what will change; once they agree, repeat the call with `confirm: true`.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/confirmation-required";
+    };
+    readonly INTERNAL: {
+        readonly status: 500;
+        readonly category: "internal";
+        readonly retryable: true;
+        readonly hint: "Retry; if it keeps failing, report it with hypequery_feedback and this requestId.";
+        readonly docsUrl: "https://hypequery.com/docs/errors/internal";
+    };
+};
+export type CloudErrorCode = keyof typeof CLOUD_ERRORS;
+/** Input for `projects.list`. */
+export type ProjectsListInput = Record<string, never>;
+/** Output of `projects.list`. */
+export interface ProjectsListOutput {
+    projects: Array<{
+        name: string;
+        slug: string;
+        /** False until a release is live. */
+        live: boolean;
+    }>;
+}
+/** Input for `projects.get`. */
+export interface ProjectsGetInput {
+    project: string;
+}
+/** Output of `projects.get`. */
+export interface ProjectsGetOutput {
+    name: string;
+    slug: string;
+    /** False until a release is live. */
+    live: boolean;
+    /** The live revision, or null. */
+    currentRevision: string | null;
+}
+/** Input for `projects.connectInfo`. */
+export interface ProjectsConnectInfoInput {
+    project: string;
+}
+/** Output of `projects.connectInfo`. */
+export interface ProjectsConnectInfoOutput {
+    live: boolean;
+    mcp: {
+        url: string;
+    };
+    rest: {
+        baseUrl: string;
+        datasets: Array<{
+            name: string;
+            method: "POST";
+            url: string;
+        }>;
+    };
+    registry: {
+        url: string;
+    };
+    clientContract: {
+        url: string;
+    };
+}
+/** Input for `projects.create`. */
+export interface ProjectsCreateInput {
+    name: string;
+    /** Lowercase letters, digits and hyphens; part of every URL, so it never changes. */
+    slug: string;
+}
+/** Output of `projects.create`. */
+export interface ProjectsCreateOutput {
+    name: string;
+    slug: string;
+    /** False until a release is live. */
+    live: boolean;
+}
+/** Input for `projects.rename`. */
+export interface ProjectsRenameInput {
+    project: string;
+    name: string;
+}
+/** Output of `projects.rename`. */
+export interface ProjectsRenameOutput {
+    name: string;
+    slug: string;
+    /** False until a release is live. */
+    live: boolean;
+}
+/** Input for `releases.status`. */
+export interface ReleasesStatusInput {
+    project: string;
+}
+/** Output of `releases.status`. */
+export interface ReleasesStatusOutput {
+    live: boolean;
+    currentVersion: string | null;
+    /** Pass as expectedRevision to roll back or publish. */
+    currentRevision: string | null;
+}
+/** Input for `releases.list`. */
+export interface ReleasesListInput {
+    project: string;
+    /** @default 20 */
+    limit?: number;
+    /** From a previous nextBefore. */
+    before?: number;
+}
+/** Output of `releases.list`. */
+export interface ReleasesListOutput {
+    versions: Array<{
+        label: string;
+        number: number;
+        releaseIdentity: string;
+        publishedAt: string;
+        draftName?: string | null;
+        createdByUserId: string;
+    }>;
+    nextBefore: number | null;
+    currentVersion: string | null;
+    currentRevision: string | null;
+}
+/** Input for `releases.get`. */
+export interface ReleasesGetInput {
+    project: string;
+    /** A version label, e.g. v12. */
+    version: string;
+}
+/** Output of `releases.get`. */
+export interface ReleasesGetOutput {
+    version: {
+        label: string;
+        number: number;
+        releaseIdentity: string;
+        publishedAt: string;
+        draftName?: string | null;
+        createdByUserId: string;
+    };
+    /** The version's deployment contract. */
+    contract: Record<string, unknown>;
+}
+/** Input for `releases.rollback`. */
+export interface ReleasesRollbackInput {
+    project: string;
+    /** A version label, e.g. v12. */
+    version: string;
+    /** The live revision from releases.status. */
+    expectedRevision: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `releases.rollback`. */
+export interface ReleasesRollbackOutput {
+    status: "activated" | "already-active";
+    version: string;
+}
+/** Input for `drafts.list`. */
+export interface DraftsListInput {
+    project: string;
+    /** @default "false" */
+    archived?: "true" | "false";
+}
+/** Output of `drafts.list`. */
+export interface DraftsListOutput {
+    drafts: Array<{
+        id: string;
+        name: string;
+        source: "code" | "chat";
+        status: "live" | "ready" | "unsaved";
+        /** Pass as releaseIdentity to publish. */
+        latestReleaseIdentity: string | null;
+        /** Pass as expectedRevision to publish. */
+        baseRevision: string | null;
+        /** True when something else was published since this draft began. */
+        stale: boolean;
+        stagingUrl: string;
+        updatedAt: string;
+    }>;
+}
+/** Input for `drafts.open`. */
+export interface DraftsOpenInput {
+    project: string;
+    /**
+     * A draft id; omit for your own working draft.
+     * @format uuid
+     */
+    draft?: string;
+}
+/** Output of `drafts.open`. */
+export interface DraftsOpenOutput {
+    draft: {
+        id: string;
+        name: string;
+        revision: number;
+        /** The draft's content identity; drafts.save checks it hasn't changed. */
+        identity: string | null;
+        /** setup until the project's first publish, then draft. */
+        stage: "setup" | "draft";
+        /** What the user said at setup, saved with drafts_setup; resume from here. */
+        setupAnswers: {
+            description: string;
+            audiences: Array<"dashboards" | "agents" | "internal" | "customers">;
+            tables: Array<string>;
+            priorityMetrics: string;
+            anchor: {
+                metric: string;
+                value: string;
+                period: string;
+                source: string;
+            };
+        } | null;
+    };
+    tables: Array<{
+        name: string;
+        database?: string;
+    }>;
+    datasets: Array<string>;
+}
+/** Input for `drafts.save`. */
+export interface DraftsSaveInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** From drafts.open; refuses if the draft changed since. Omit to save it as it is. */
+    expectedIdentity?: string;
+}
+/** Output of `drafts.save`. */
+export interface DraftsSaveOutput {
+    draftId: string;
+    name: string;
+    revision: number;
+    /** Pass as releaseIdentity to drafts.promote. */
+    releaseIdentity: string;
+    stagingUrl: string;
+}
+/** Input for `drafts.review`. */
+export interface DraftsReviewInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+}
+/** Output of `drafts.review`. */
+export interface DraftsReviewOutput {
+    review: Record<string, unknown>;
+}
+/** Input for `drafts.checks`. */
+export interface DraftsChecksInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** Run again even when a result is stored. */
+    rerun?: boolean;
+}
+/** Output of `drafts.checks`. */
+export interface DraftsChecksOutput {
+    status: "checked" | "unavailable";
+    reason?: string;
+    failures: Array<Record<string, unknown>>;
+    unverified: Array<Record<string, unknown>>;
+    passed: number;
+}
+/** Input for `drafts.promote`. */
+export interface DraftsPromoteInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** The draft's latestReleaseIdentity you reviewed. */
+    releaseIdentity: string;
+    /** The live revision, or null for a first publish. */
+    expectedRevision: string | null;
+    expectedWorkingRevision?: number;
+    /** Code drafts over a model built in Cloud: true only after the user agreed the project is then managed in code. */
+    takeOwnership?: boolean;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `drafts.promote`. */
+export interface DraftsPromoteOutput {
+    status: "activated" | "already-active";
+    version: string | null;
+    draftArchived: boolean;
+}
+/** Input for `drafts.get`. */
+export interface DraftsGetInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+}
+/** Output of `drafts.get`. */
+export interface DraftsGetOutput {
+    draft: Record<string, unknown>;
+}
+/** Input for `drafts.rename`. */
+export interface DraftsRenameInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    name: string;
+}
+/** Output of `drafts.rename`. */
+export interface DraftsRenameOutput {
+    draft: {
+        id: string;
+        name: string;
+    };
+}
+/** Input for `drafts.delete`. */
+export interface DraftsDeleteInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `drafts.delete`. */
+export interface DraftsDeleteOutput {
+    deleted: true;
+}
+/** Input for `drafts.archived`. */
+export interface DraftsArchivedInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+}
+/** Output of `drafts.archived`. */
+export interface DraftsArchivedOutput {
+    archive: Record<string, unknown>;
+}
+/** Input for `drafts.reopen`. */
+export interface DraftsReopenInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** baseRevision from drafts_archived. */
+    expectedBaseRevision: string;
+    /** releaseIdentity from drafts_archived. */
+    expectedReleaseIdentity: string;
+}
+/** Output of `drafts.reopen`. */
+export interface DraftsReopenOutput {
+    draft: Record<string, unknown>;
+}
+/** Input for `drafts.impact`. */
+export interface DraftsImpactInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** The saved release you reviewed (drafts_review). */
+    releaseIdentity: string;
+}
+/** Output of `drafts.impact`. */
+export interface DraftsImpactOutput {
+    impact: Record<string, unknown>;
+}
+/** Input for `drafts.update`. */
+export interface DraftsUpdateInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+}
+/** Output of `drafts.update`. */
+export interface DraftsUpdateOutput {
+    update: Record<string, unknown>;
+}
+/** Input for `drafts.applyUpdate`. */
+export interface DraftsApplyUpdateInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    action: "preview" | "apply";
+    /** workingRevision from drafts_update. */
+    expectedRevision: number;
+    /** baseRevision from drafts_update. */
+    expectedBaseRevision: string | null;
+    /** publishedRevision from drafts_update. */
+    expectedPublishedRevision: string | null;
+    /** latestReleaseIdentity from drafts_update. */
+    expectedReleaseIdentity: string | null;
+    /** Each conflict's key from drafts_update, and which side the user chose. */
+    resolutions: Record<string, "draft" | "published">;
+}
+/** Output of `drafts.applyUpdate`. */
+export interface DraftsApplyUpdateOutput {
+    update?: Record<string, unknown>;
+    draft?: Record<string, unknown>;
+}
+/** Input for `drafts.refreshBase`. */
+export interface DraftsRefreshBaseInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** baseRevision from drafts_review. */
+    expectedBaseRevision: string | null;
+    /** expectedRevision from drafts_review. */
+    expectedPublishedRevision: string | null;
+    /** releaseIdentity from drafts_review. */
+    expectedReleaseIdentity: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `drafts.refreshBase`. */
+export interface DraftsRefreshBaseOutput {
+    draft: Record<string, unknown>;
+}
+/** Input for `drafts.setup`. */
+export interface DraftsSetupInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    /** The draft's revision from drafts_open. */
+    expectedRevision: number;
+    /** The user's own statements; tables must be names drafts_open listed. */
+    answers: {
+        description: string;
+        audiences: Array<"dashboards" | "agents" | "internal" | "customers">;
+        tables: Array<string>;
+        priorityMetrics: string;
+        anchor: {
+            metric: string;
+            value: string;
+            period: string;
+            source: string;
+        };
+    };
+}
+/** Output of `drafts.setup`. */
+export interface DraftsSetupOutput {
+    revision: number;
+    answers: {
+        description: string;
+        audiences: Array<"dashboards" | "agents" | "internal" | "customers">;
+        tables: Array<string>;
+        priorityMetrics: string;
+        anchor: {
+            metric: string;
+            value: string;
+            period: string;
+            source: string;
+        };
+    };
+}
+/** Input for `drafts.findings`. */
+export interface DraftsFindingsInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+}
+/** Output of `drafts.findings`. */
+export interface DraftsFindingsOutput {
+    revision: number;
+    /** Answer each with drafts_answer, passing its id and token. */
+    issues: Array<Record<string, unknown>>;
+    numberFindings: Array<Record<string, unknown>>;
+}
+/** Input for `drafts.answer`. */
+export interface DraftsAnswerInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    expectedRevision: number;
+    answers: Array<{
+        issueId: string;
+        /** The issue's token from drafts_findings. */
+        token: string;
+        answer: "approve" | "reject" | "later";
+        alternative?: "remove" | "custom";
+        /** The user's alternative, in their words. */
+        text?: string;
+    }>;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `drafts.answer`. */
+export interface DraftsAnswerOutput {
+    revision: number;
+    summary: string;
+}
+/** Input for `drafts.runStatus`. */
+export interface DraftsRunStatusInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+}
+/** Output of `drafts.runStatus`. */
+export interface DraftsRunStatusOutput {
+    revision: number;
+    run: {
+        id: string;
+        status: "queued" | "running" | "paused" | "completed" | "cancelled";
+        reason?: string;
+        coverage: Record<string, number>;
+        [key: string]: unknown;
+    } | null;
+}
+/** Input for `drafts.run`. */
+export interface DraftsRunInput {
+    project: string;
+    /** @format uuid */
+    draft: string;
+    action: "start" | "resume" | "cancel";
+    expectedRevision: number;
+    /**
+     * Required to resume or cancel.
+     * @format uuid
+     */
+    runId?: string;
+}
+/** Output of `drafts.run`. */
+export interface DraftsRunOutput {
+    revision: number;
+    run: {
+        id: string;
+        status: "queued" | "running" | "paused" | "completed" | "cancelled";
+        reason?: string;
+        coverage: Record<string, number>;
+        [key: string]: unknown;
+    };
+}
+/** Input for `customerScope.list`. */
+export interface CustomerScopeListInput {
+    project: string;
+}
+/** Output of `customerScope.list`. */
+export interface CustomerScopeListOutput {
+    /** false until the project has a published release. */
+    live: boolean;
+    datasets: Array<{
+        dataset: string;
+        /** Each request names a customer and sees only its rows. */
+        scoped: boolean;
+        scopedBy: string | null;
+        /** A customer-looking column the dataset exposes without being scoped by it. */
+        candidate: string | null;
+        /** A member confirmed it is the same for every customer. */
+        shared: boolean;
+    }>;
+    /** Flagged datasets nobody has settled yet. */
+    unsettled: number;
+}
+/** Input for `customerScope.confirmShared`. */
+export interface CustomerScopeConfirmSharedInput {
+    project: string;
+    dataset: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `customerScope.confirmShared`. */
+export interface CustomerScopeConfirmSharedOutput {
+    /** false until the project has a published release. */
+    live: boolean;
+    datasets: Array<{
+        dataset: string;
+        /** Each request names a customer and sees only its rows. */
+        scoped: boolean;
+        scopedBy: string | null;
+        /** A customer-looking column the dataset exposes without being scoped by it. */
+        candidate: string | null;
+        /** A member confirmed it is the same for every customer. */
+        shared: boolean;
+    }>;
+    /** Flagged datasets nobody has settled yet. */
+    unsettled: number;
+}
+/** Input for `samplePolicy.get`. */
+export interface SamplePolicyGetInput {
+    project: string;
+}
+/** Output of `samplePolicy.get`. */
+export interface SamplePolicyGetOutput {
+    policy: {
+        mode: "all" | "detected" | "none";
+        overrides: Array<{
+            table: string;
+            column: string;
+            send: boolean;
+        }>;
+    };
+}
+/** Input for `samplePolicy.set`. */
+export interface SamplePolicySetInput {
+    project: string;
+    policy: {
+        mode: "all" | "detected" | "none";
+        overrides: Array<{
+            table: string;
+            column: string;
+            send: boolean;
+        }>;
+    };
+}
+/** Output of `samplePolicy.set`. */
+export interface SamplePolicySetOutput {
+    policy: {
+        mode: "all" | "detected" | "none";
+        overrides: Array<{
+            table: string;
+            column: string;
+            send: boolean;
+        }>;
+    };
+}
+/** Input for `connections.get`. */
+export interface ConnectionsGetInput {
+    project: string;
+}
+/** Output of `connections.get`. */
+export interface ConnectionsGetOutput {
+    connection: {
+        host: string;
+        /** The default database: bare dataset sources read it. */
+        database: string;
+        databases?: Array<string>;
+        username: string;
+        verifiedAt?: string | null;
+    } | null;
+}
+/** Input for `connections.save`. */
+export interface ConnectionsSaveInput {
+    /** @format uri */
+    host: string;
+    database: string;
+    databases?: Array<string>;
+    username: string;
+    password: string;
+    project: string;
+}
+/** Output of `connections.save`. */
+export interface ConnectionsSaveOutput {
+    connection: {
+        host: string;
+        /** The default database: bare dataset sources read it. */
+        database: string;
+        databases?: Array<string>;
+        username: string;
+        verifiedAt?: string | null;
+    };
+}
+/** Input for `connections.link`. */
+export interface ConnectionsLinkInput {
+    project: string;
+}
+/** Output of `connections.link`. */
+export interface ConnectionsLinkOutput {
+    /** Give this to the user to open; never ask for the password instead. */
+    url: string;
+    expiresAt: string;
+}
+/** Input for `connections.test`. */
+export interface ConnectionsTestInput {
+    project: string;
+}
+/** Output of `connections.test`. */
+export interface ConnectionsTestOutput {
+    ok: true;
+    access: Record<string, unknown>;
+}
+/** Input for `connections.queryHistory`. */
+export interface ConnectionsQueryHistoryInput {
+    project: string;
+}
+/** Output of `connections.queryHistory`. */
+export interface ConnectionsQueryHistoryOutput {
+    consent: Record<string, unknown>;
+    connected: boolean;
+}
+/** Input for `connections.setQueryHistory`. */
+export interface ConnectionsSetQueryHistoryInput {
+    project: string;
+    enabled: boolean;
+    /** The consent revision from connections.queryHistory. */
+    expectedRevision: number;
+    /** @default [] */
+    serviceAccounts?: Array<string>;
+}
+/** Output of `connections.setQueryHistory`. */
+export interface ConnectionsSetQueryHistoryOutput {
+    consent: Record<string, unknown>;
+}
+/** Input for `logs.query`. */
+export interface LogsQueryInput {
+    project: string;
+    range?: "1h" | "24h" | "7d";
+    status?: "success" | "error";
+    transport?: "rest" | "mcp";
+    source?: "api" | "mcp" | "app";
+    /** Only Published traffic. */
+    target?: "published";
+    /**
+     * Only this draft's staging traffic.
+     * @format uuid
+     */
+    draft?: string;
+    /** An outcome category, e.g. client_error. */
+    outcome?: string;
+    dataset?: string;
+    tenant?: string;
+    /** Search request paths and failure codes. */
+    q?: string;
+    /** From a previous nextCursor. */
+    cursor?: string;
+    /** @default 50 */
+    limit?: number;
+}
+/** Output of `logs.query`. */
+export interface LogsQueryOutput {
+    entries: Array<Record<string, unknown>>;
+    summary: Record<string, unknown>;
+    nextCursor: string | null;
+    retentionDays: number;
+}
+/** Input for `usage.get`. */
+export type UsageGetInput = Record<string, never>;
+/** Output of `usage.get`. */
+export interface UsageGetOutput {
+    queries: Record<string, unknown>;
+    tenants: Record<string, unknown>;
+    embedChat: Record<string, unknown>;
+}
+/** Input for `audit.list`. */
+export interface AuditListInput {
+    /** From a previous nextCursor. */
+    cursor?: string;
+    /** @default 50 */
+    limit?: number;
+}
+/** Output of `audit.list`. */
+export interface AuditListOutput {
+    events: Array<Record<string, unknown>>;
+    nextCursor: string | null;
+}
+/** Input for `tenants.list`. */
+export interface TenantsListInput {
+    project: string;
+}
+/** Output of `tenants.list`. */
+export interface TenantsListOutput {
+    tenants: Array<Record<string, unknown>>;
+}
+/** Input for `tenants.create`. */
+export interface TenantsCreateInput {
+    project: string;
+    /** Your app's id for the customer. */
+    tenantKey: string;
+    displayName: string;
+    enabled?: boolean;
+}
+/** Output of `tenants.create`. */
+export interface TenantsCreateOutput {
+    tenant: Record<string, unknown>;
+}
+/** Input for `tenants.update`. */
+export interface TenantsUpdateInput {
+    project: string;
+    /**
+     * The tenant's id from tenants.list.
+     * @format uuid
+     */
+    tenant: string;
+    displayName?: string;
+    enabled?: boolean;
+    /** Required with enabled: false, after the user agrees: their sign-ins end for good. */
+    confirm?: boolean;
+}
+/** Output of `tenants.update`. */
+export interface TenantsUpdateOutput {
+    tenant: Record<string, unknown>;
+}
+/** Input for `tenants.remove`. */
+export interface TenantsRemoveInput {
+    project: string;
+    /** @format uuid */
+    tenant: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `tenants.remove`. */
+export interface TenantsRemoveOutput {
+    removed: true;
+}
+/** Input for `permissionSets.list`. */
+export interface PermissionSetsListInput {
+    project: string;
+}
+/** Output of `permissionSets.list`. */
+export interface PermissionSetsListOutput {
+    permissionSets: Array<Record<string, unknown>>;
+}
+/** Input for `permissionSets.create`. */
+export interface PermissionSetsCreateInput {
+    project: string;
+    name: string;
+    label: string;
+    /** "*" for every published dataset, or { dataset: { dimensions, measures } }. */
+    datasets: "*" | Record<string, unknown>;
+    starterPrompts?: Array<string>;
+    allowExport?: boolean;
+    showQuery?: boolean;
+    modelTier?: "standard" | "premium";
+    limits?: {
+        messagesPerUserPerDay: number;
+        messagesPerTenantPerDay: number;
+    };
+}
+/** Output of `permissionSets.create`. */
+export interface PermissionSetsCreateOutput {
+    permissionSet: Record<string, unknown>;
+}
+/** Input for `permissionSets.update`. */
+export interface PermissionSetsUpdateInput {
+    project: string;
+    /** @format uuid */
+    permissionSet: string;
+    expectedRevision: number;
+    label?: string;
+    /** "*" for every published dataset, or { dataset: { dimensions, measures } }. */
+    datasets?: "*" | Record<string, unknown>;
+    starterPrompts?: Array<string>;
+    allowExport?: boolean;
+    showQuery?: boolean;
+    modelTier?: "standard" | "premium";
+    limits?: {
+        messagesPerUserPerDay: number;
+        messagesPerTenantPerDay: number;
+    };
+}
+/** Output of `permissionSets.update`. */
+export interface PermissionSetsUpdateOutput {
+    permissionSet: Record<string, unknown>;
+}
+/** Input for `permissionSets.remove`. */
+export interface PermissionSetsRemoveInput {
+    project: string;
+    /** @format uuid */
+    permissionSet: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `permissionSets.remove`. */
+export interface PermissionSetsRemoveOutput {
+    removed: true;
+}
+/** Input for `customerLimits.get`. */
+export interface CustomerLimitsGetInput {
+    project: string;
+}
+/** Output of `customerLimits.get`. */
+export interface CustomerLimitsGetOutput {
+    limits: Record<string, unknown>;
+    defaults: Record<string, unknown>;
+}
+/** Input for `customerLimits.set`. */
+export interface CustomerLimitsSetInput {
+    project: string;
+    requestsPerMinute: number | null;
+    dailyExecutions: number | null;
+    chatTokensPerMonth: number | null;
+}
+/** Output of `customerLimits.set`. */
+export interface CustomerLimitsSetOutput {
+    limits: Record<string, unknown>;
+    defaults: Record<string, unknown>;
+}
+/** Input for `tenantGrants.list`. */
+export interface TenantGrantsListInput {
+    project: string;
+}
+/** Output of `tenantGrants.list`. */
+export interface TenantGrantsListOutput {
+    grants: Array<Record<string, unknown>>;
+}
+/** Input for `tenantGrants.revokeTenant`. */
+export interface TenantGrantsRevokeTenantInput {
+    project: string;
+    tenantKey: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `tenantGrants.revokeTenant`. */
+export interface TenantGrantsRevokeTenantOutput {
+    revoked: number;
+}
+/** Input for `tenantGrants.revoke`. */
+export interface TenantGrantsRevokeInput {
+    project: string;
+    /** @format uuid */
+    grant: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `tenantGrants.revoke`. */
+export interface TenantGrantsRevokeOutput {
+    revoked: true;
+}
+/** Input for `customerAccess.get`. */
+export interface CustomerAccessGetInput {
+    project: string;
+}
+/** Output of `customerAccess.get`. */
+export interface CustomerAccessGetOutput {
+    access: Record<string, unknown>;
+    release: string | null;
+    customerOrigin: string;
+    dataset: Record<string, unknown> | null;
+}
+/** Input for `customerAccess.setMode`. */
+export interface CustomerAccessSetModeInput {
+    project: string;
+    mode: "jwt" | "minted" | "backend" | "internal";
+}
+/** Output of `customerAccess.setMode`. */
+export interface CustomerAccessSetModeOutput {
+    access: Record<string, unknown>;
+}
+/** Input for `customerAccess.createKey`. */
+export interface CustomerAccessCreateKeyInput {
+    project: string;
+    mode: "minted" | "backend";
+    /** @default [] */
+    roles?: Array<string>;
+    /** @default [] */
+    scopes?: Array<string>;
+}
+/** Output of `customerAccess.createKey`. */
+export interface CustomerAccessCreateKeyOutput {
+    access: Record<string, unknown>;
+    token: string;
+}
+/** Input for `customerAccess.prove`. */
+export interface CustomerAccessProveInput {
+    project: string;
+    /** @default null */
+    tenantId?: string | null;
+    /** @default null */
+    origin?: string | null;
+    /** @default null */
+    permissionSetId?: string | null;
+    /**
+     * A JWT from your app; checked and never echoed back.
+     * @default null
+     */
+    sampleToken?: string | null;
+}
+/** Output of `customerAccess.prove`. */
+export interface CustomerAccessProveOutput {
+    result: Record<string, unknown>;
+}
+/** Input for `customerSettings.get`. */
+export interface CustomerSettingsGetInput {
+    project: string;
+}
+/** Output of `customerSettings.get`. */
+export interface CustomerSettingsGetOutput {
+    settings: Record<string, unknown>;
+}
+/** Input for `customerSettings.set`. */
+export interface CustomerSettingsSetInput {
+    project: string;
+    allowedOrigins: Array<string>;
+    /** From customerSettings.get; 0 before any save. */
+    expectedRevision: number;
+    tenantRegistration?: "automatic" | "listed";
+}
+/** Output of `customerSettings.set`. */
+export interface CustomerSettingsSetOutput {
+    settings: Record<string, unknown>;
+}
+/** Input for `jwtIssuer.get`. */
+export interface JwtIssuerGetInput {
+    project: string;
+}
+/** Output of `jwtIssuer.get`. */
+export interface JwtIssuerGetOutput {
+    issuer: Record<string, unknown> | null;
+    health: Record<string, unknown> | null;
+    access: Record<string, unknown> | null;
+}
+/** Input for `jwtIssuer.save`. */
+export interface JwtIssuerSaveInput {
+    /** @default null */
+    credentialId?: string | null;
+    /** @default [] */
+    roles?: Array<string>;
+    /** @default [] */
+    scopes?: Array<string>;
+    issuer: string;
+    audience: string;
+    /** @format uri */
+    jwksUri: string;
+    /** @default ["RS256","ES256"] */
+    algorithms?: Array<"RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | "ES256" | "ES384" | "EdDSA">;
+    /** @default "sub" */
+    subjectClaim?: string;
+    tenantClaim: string;
+    /** @default null */
+    permissionSetClaim?: string | null;
+    /** @default null */
+    defaultPermissionSetId?: string | null;
+    /** @default null */
+    constraintsClaim?: string | null;
+    /** @default 3600 */
+    maxTokenLifetimeSeconds?: number;
+    expectedRevision?: number;
+    project: string;
+}
+/** Output of `jwtIssuer.save`. */
+export interface JwtIssuerSaveOutput {
+    issuer: Record<string, unknown>;
+}
+/** Input for `jwtIssuer.remove`. */
+export interface JwtIssuerRemoveInput {
+    project: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `jwtIssuer.remove`. */
+export interface JwtIssuerRemoveOutput {
+    removed: true;
+}
+/** Input for `oidcClient.get`. */
+export interface OidcClientGetInput {
+    project: string;
+}
+/** Output of `oidcClient.get`. */
+export interface OidcClientGetOutput {
+    client: Record<string, unknown> | null;
+    redirectUri?: string;
+    mcpUrl?: string;
+}
+/** Input for `oidcClient.save`. */
+export interface OidcClientSaveInput {
+    issuer: string;
+    clientId: string;
+    clientSecret?: string;
+    scopes?: Array<string>;
+    expectedRevision?: number;
+    project: string;
+    /** Required to change the issuer, after the user agrees: customers' sign-ins end. */
+    confirm?: boolean;
+}
+/** Output of `oidcClient.save`. */
+export interface OidcClientSaveOutput {
+    client: Record<string, unknown>;
+    redirectUri?: string;
+    mcpUrl?: string;
+}
+/** Input for `oidcClient.remove`. */
+export interface OidcClientRemoveInput {
+    project: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `oidcClient.remove`. */
+export interface OidcClientRemoveOutput {
+    removed: true;
+}
+/** Input for `members.list`. */
+export type MembersListInput = Record<string, never>;
+/** Output of `members.list`. */
+export interface MembersListOutput {
+    members: Array<Record<string, unknown>>;
+    invitations: Array<Record<string, unknown>>;
+}
+/** Input for `members.invite`. */
+export interface MembersInviteInput {
+    /** @format email */
+    email: string;
+    role: "member" | "admin";
+}
+/** Output of `members.invite`. */
+export interface MembersInviteOutput {
+    invitation: Record<string, unknown>;
+}
+/** Input for `members.cancelInvitation`. */
+export interface MembersCancelInvitationInput {
+    invitation: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `members.cancelInvitation`. */
+export interface MembersCancelInvitationOutput {
+    canceled: true;
+}
+/** Input for `org.accessPolicy`. */
+export type OrgAccessPolicyInput = Record<string, never>;
+/** Output of `org.accessPolicy`. */
+export interface OrgAccessPolicyOutput {
+    policy: {
+        inviteMode: "any-email" | "approved-domains";
+        approvedDomains: Array<string>;
+    };
+}
+/** Input for `org.setAccessPolicy`. */
+export interface OrgSetAccessPolicyInput {
+    inviteMode: "any-email" | "approved-domains";
+    approvedDomains: Array<string>;
+}
+/** Output of `org.setAccessPolicy`. */
+export interface OrgSetAccessPolicyOutput {
+    policy: {
+        inviteMode: "any-email" | "approved-domains";
+        approvedDomains: Array<string>;
+    };
+}
+/** Input for `deployKeys.list`. */
+export interface DeployKeysListInput {
+    project: string;
+}
+/** Output of `deployKeys.list`. */
+export interface DeployKeysListOutput {
+    keys: Array<Record<string, unknown>>;
+}
+/** Input for `deployKeys.create`. */
+export interface DeployKeysCreateInput {
+    project: string;
+    label: string;
+}
+/** Output of `deployKeys.create`. */
+export interface DeployKeysCreateOutput {
+    key: Record<string, unknown>;
+}
+/** Input for `deployKeys.revoke`. */
+export interface DeployKeysRevokeInput {
+    project: string;
+    /** @format uuid */
+    key: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `deployKeys.revoke`. */
+export interface DeployKeysRevokeOutput {
+    revoked: true;
+}
+/** Input for `apiKeys.list`. */
+export interface ApiKeysListInput {
+    project: string;
+}
+/** Output of `apiKeys.list`. */
+export interface ApiKeysListOutput {
+    keys: Array<Record<string, unknown>>;
+    mcpConnections: Array<Record<string, unknown>>;
+}
+/** Input for `apiKeys.create`. */
+export interface ApiKeysCreateInput {
+    project: string;
+    label: string;
+    /** @default [] */
+    roles?: Array<string>;
+    /** @default [] */
+    scopes?: Array<string>;
+    /** trusted-server: your backend names the customer per request; bound: only these customers. */
+    tenantAuthority: {
+        kind: "trusted-server";
+    } | {
+        kind: "bound";
+        tenants: Array<string>;
+    };
+    expiresInDays?: number;
+}
+/** Output of `apiKeys.create`. */
+export interface ApiKeysCreateOutput {
+    key: Record<string, unknown>;
+}
+/** Input for `apiKeys.revoke`. */
+export interface ApiKeysRevokeInput {
+    project: string;
+    /** @format uuid */
+    key: string;
+    /** This operation is destructive: set `confirm: true` once the user has agreed to it. The server refuses it otherwise (CONFIRMATION_REQUIRED). */
+    confirm: true;
+}
+/** Output of `apiKeys.revoke`. */
+export interface ApiKeysRevokeOutput {
+    revoked: true;
+}
+/** Input and output types for every operation, by name. */
+export interface CloudOperationTypes {
+    "projects.list": {
+        input: ProjectsListInput;
+        output: ProjectsListOutput;
+        inputRequired: false;
+    };
+    "projects.get": {
+        input: ProjectsGetInput;
+        output: ProjectsGetOutput;
+        inputRequired: true;
+    };
+    "projects.connectInfo": {
+        input: ProjectsConnectInfoInput;
+        output: ProjectsConnectInfoOutput;
+        inputRequired: true;
+    };
+    "projects.create": {
+        input: ProjectsCreateInput;
+        output: ProjectsCreateOutput;
+        inputRequired: true;
+    };
+    "projects.rename": {
+        input: ProjectsRenameInput;
+        output: ProjectsRenameOutput;
+        inputRequired: true;
+    };
+    "releases.status": {
+        input: ReleasesStatusInput;
+        output: ReleasesStatusOutput;
+        inputRequired: true;
+    };
+    "releases.list": {
+        input: ReleasesListInput;
+        output: ReleasesListOutput;
+        inputRequired: true;
+    };
+    "releases.get": {
+        input: ReleasesGetInput;
+        output: ReleasesGetOutput;
+        inputRequired: true;
+    };
+    "releases.rollback": {
+        input: ReleasesRollbackInput;
+        output: ReleasesRollbackOutput;
+        inputRequired: true;
+    };
+    "drafts.list": {
+        input: DraftsListInput;
+        output: DraftsListOutput;
+        inputRequired: true;
+    };
+    "drafts.open": {
+        input: DraftsOpenInput;
+        output: DraftsOpenOutput;
+        inputRequired: true;
+    };
+    "drafts.save": {
+        input: DraftsSaveInput;
+        output: DraftsSaveOutput;
+        inputRequired: true;
+    };
+    "drafts.review": {
+        input: DraftsReviewInput;
+        output: DraftsReviewOutput;
+        inputRequired: true;
+    };
+    "drafts.checks": {
+        input: DraftsChecksInput;
+        output: DraftsChecksOutput;
+        inputRequired: true;
+    };
+    "drafts.promote": {
+        input: DraftsPromoteInput;
+        output: DraftsPromoteOutput;
+        inputRequired: true;
+    };
+    "drafts.get": {
+        input: DraftsGetInput;
+        output: DraftsGetOutput;
+        inputRequired: true;
+    };
+    "drafts.rename": {
+        input: DraftsRenameInput;
+        output: DraftsRenameOutput;
+        inputRequired: true;
+    };
+    "drafts.delete": {
+        input: DraftsDeleteInput;
+        output: DraftsDeleteOutput;
+        inputRequired: true;
+    };
+    "drafts.archived": {
+        input: DraftsArchivedInput;
+        output: DraftsArchivedOutput;
+        inputRequired: true;
+    };
+    "drafts.reopen": {
+        input: DraftsReopenInput;
+        output: DraftsReopenOutput;
+        inputRequired: true;
+    };
+    "drafts.impact": {
+        input: DraftsImpactInput;
+        output: DraftsImpactOutput;
+        inputRequired: true;
+    };
+    "drafts.update": {
+        input: DraftsUpdateInput;
+        output: DraftsUpdateOutput;
+        inputRequired: true;
+    };
+    "drafts.applyUpdate": {
+        input: DraftsApplyUpdateInput;
+        output: DraftsApplyUpdateOutput;
+        inputRequired: true;
+    };
+    "drafts.refreshBase": {
+        input: DraftsRefreshBaseInput;
+        output: DraftsRefreshBaseOutput;
+        inputRequired: true;
+    };
+    "drafts.setup": {
+        input: DraftsSetupInput;
+        output: DraftsSetupOutput;
+        inputRequired: true;
+    };
+    "drafts.findings": {
+        input: DraftsFindingsInput;
+        output: DraftsFindingsOutput;
+        inputRequired: true;
+    };
+    "drafts.answer": {
+        input: DraftsAnswerInput;
+        output: DraftsAnswerOutput;
+        inputRequired: true;
+    };
+    "drafts.runStatus": {
+        input: DraftsRunStatusInput;
+        output: DraftsRunStatusOutput;
+        inputRequired: true;
+    };
+    "drafts.run": {
+        input: DraftsRunInput;
+        output: DraftsRunOutput;
+        inputRequired: true;
+    };
+    "customerScope.list": {
+        input: CustomerScopeListInput;
+        output: CustomerScopeListOutput;
+        inputRequired: true;
+    };
+    "customerScope.confirmShared": {
+        input: CustomerScopeConfirmSharedInput;
+        output: CustomerScopeConfirmSharedOutput;
+        inputRequired: true;
+    };
+    "samplePolicy.get": {
+        input: SamplePolicyGetInput;
+        output: SamplePolicyGetOutput;
+        inputRequired: true;
+    };
+    "samplePolicy.set": {
+        input: SamplePolicySetInput;
+        output: SamplePolicySetOutput;
+        inputRequired: true;
+    };
+    "connections.get": {
+        input: ConnectionsGetInput;
+        output: ConnectionsGetOutput;
+        inputRequired: true;
+    };
+    "connections.save": {
+        input: ConnectionsSaveInput;
+        output: ConnectionsSaveOutput;
+        inputRequired: true;
+    };
+    "connections.link": {
+        input: ConnectionsLinkInput;
+        output: ConnectionsLinkOutput;
+        inputRequired: true;
+    };
+    "connections.test": {
+        input: ConnectionsTestInput;
+        output: ConnectionsTestOutput;
+        inputRequired: true;
+    };
+    "connections.queryHistory": {
+        input: ConnectionsQueryHistoryInput;
+        output: ConnectionsQueryHistoryOutput;
+        inputRequired: true;
+    };
+    "connections.setQueryHistory": {
+        input: ConnectionsSetQueryHistoryInput;
+        output: ConnectionsSetQueryHistoryOutput;
+        inputRequired: true;
+    };
+    "logs.query": {
+        input: LogsQueryInput;
+        output: LogsQueryOutput;
+        inputRequired: true;
+    };
+    "usage.get": {
+        input: UsageGetInput;
+        output: UsageGetOutput;
+        inputRequired: false;
+    };
+    "audit.list": {
+        input: AuditListInput;
+        output: AuditListOutput;
+        inputRequired: false;
+    };
+    "tenants.list": {
+        input: TenantsListInput;
+        output: TenantsListOutput;
+        inputRequired: true;
+    };
+    "tenants.create": {
+        input: TenantsCreateInput;
+        output: TenantsCreateOutput;
+        inputRequired: true;
+    };
+    "tenants.update": {
+        input: TenantsUpdateInput;
+        output: TenantsUpdateOutput;
+        inputRequired: true;
+    };
+    "tenants.remove": {
+        input: TenantsRemoveInput;
+        output: TenantsRemoveOutput;
+        inputRequired: true;
+    };
+    "permissionSets.list": {
+        input: PermissionSetsListInput;
+        output: PermissionSetsListOutput;
+        inputRequired: true;
+    };
+    "permissionSets.create": {
+        input: PermissionSetsCreateInput;
+        output: PermissionSetsCreateOutput;
+        inputRequired: true;
+    };
+    "permissionSets.update": {
+        input: PermissionSetsUpdateInput;
+        output: PermissionSetsUpdateOutput;
+        inputRequired: true;
+    };
+    "permissionSets.remove": {
+        input: PermissionSetsRemoveInput;
+        output: PermissionSetsRemoveOutput;
+        inputRequired: true;
+    };
+    "customerLimits.get": {
+        input: CustomerLimitsGetInput;
+        output: CustomerLimitsGetOutput;
+        inputRequired: true;
+    };
+    "customerLimits.set": {
+        input: CustomerLimitsSetInput;
+        output: CustomerLimitsSetOutput;
+        inputRequired: true;
+    };
+    "tenantGrants.list": {
+        input: TenantGrantsListInput;
+        output: TenantGrantsListOutput;
+        inputRequired: true;
+    };
+    "tenantGrants.revokeTenant": {
+        input: TenantGrantsRevokeTenantInput;
+        output: TenantGrantsRevokeTenantOutput;
+        inputRequired: true;
+    };
+    "tenantGrants.revoke": {
+        input: TenantGrantsRevokeInput;
+        output: TenantGrantsRevokeOutput;
+        inputRequired: true;
+    };
+    "customerAccess.get": {
+        input: CustomerAccessGetInput;
+        output: CustomerAccessGetOutput;
+        inputRequired: true;
+    };
+    "customerAccess.setMode": {
+        input: CustomerAccessSetModeInput;
+        output: CustomerAccessSetModeOutput;
+        inputRequired: true;
+    };
+    "customerAccess.createKey": {
+        input: CustomerAccessCreateKeyInput;
+        output: CustomerAccessCreateKeyOutput;
+        inputRequired: true;
+    };
+    "customerAccess.prove": {
+        input: CustomerAccessProveInput;
+        output: CustomerAccessProveOutput;
+        inputRequired: true;
+    };
+    "customerSettings.get": {
+        input: CustomerSettingsGetInput;
+        output: CustomerSettingsGetOutput;
+        inputRequired: true;
+    };
+    "customerSettings.set": {
+        input: CustomerSettingsSetInput;
+        output: CustomerSettingsSetOutput;
+        inputRequired: true;
+    };
+    "jwtIssuer.get": {
+        input: JwtIssuerGetInput;
+        output: JwtIssuerGetOutput;
+        inputRequired: true;
+    };
+    "jwtIssuer.save": {
+        input: JwtIssuerSaveInput;
+        output: JwtIssuerSaveOutput;
+        inputRequired: true;
+    };
+    "jwtIssuer.remove": {
+        input: JwtIssuerRemoveInput;
+        output: JwtIssuerRemoveOutput;
+        inputRequired: true;
+    };
+    "oidcClient.get": {
+        input: OidcClientGetInput;
+        output: OidcClientGetOutput;
+        inputRequired: true;
+    };
+    "oidcClient.save": {
+        input: OidcClientSaveInput;
+        output: OidcClientSaveOutput;
+        inputRequired: true;
+    };
+    "oidcClient.remove": {
+        input: OidcClientRemoveInput;
+        output: OidcClientRemoveOutput;
+        inputRequired: true;
+    };
+    "members.list": {
+        input: MembersListInput;
+        output: MembersListOutput;
+        inputRequired: false;
+    };
+    "members.invite": {
+        input: MembersInviteInput;
+        output: MembersInviteOutput;
+        inputRequired: true;
+    };
+    "members.cancelInvitation": {
+        input: MembersCancelInvitationInput;
+        output: MembersCancelInvitationOutput;
+        inputRequired: true;
+    };
+    "org.accessPolicy": {
+        input: OrgAccessPolicyInput;
+        output: OrgAccessPolicyOutput;
+        inputRequired: false;
+    };
+    "org.setAccessPolicy": {
+        input: OrgSetAccessPolicyInput;
+        output: OrgSetAccessPolicyOutput;
+        inputRequired: true;
+    };
+    "deployKeys.list": {
+        input: DeployKeysListInput;
+        output: DeployKeysListOutput;
+        inputRequired: true;
+    };
+    "deployKeys.create": {
+        input: DeployKeysCreateInput;
+        output: DeployKeysCreateOutput;
+        inputRequired: true;
+    };
+    "deployKeys.revoke": {
+        input: DeployKeysRevokeInput;
+        output: DeployKeysRevokeOutput;
+        inputRequired: true;
+    };
+    "apiKeys.list": {
+        input: ApiKeysListInput;
+        output: ApiKeysListOutput;
+        inputRequired: true;
+    };
+    "apiKeys.create": {
+        input: ApiKeysCreateInput;
+        output: ApiKeysCreateOutput;
+        inputRequired: true;
+    };
+    "apiKeys.revoke": {
+        input: ApiKeysRevokeInput;
+        output: ApiKeysRevokeOutput;
+        inputRequired: true;
+    };
+}
+/** Route and policy for every operation, by name. */
+export declare const OPERATIONS: {
+    readonly "projects.list": {
+        readonly name: "projects.list";
+        readonly summary: "List the projects in your organisation.";
+        readonly scope: "organization";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "UNAUTHENTICATED"];
+    };
+    readonly "projects.get": {
+        readonly name: "projects.get";
+        readonly summary: "Show one project and whether a release is live.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "projects.connectInfo": {
+        readonly name: "projects.connectInfo";
+        readonly summary: "Where the project is served: the MCP URL, the REST base and dataset URLs, and the client contract.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/connect-info";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "projects.create": {
+        readonly name: "projects.create";
+        readonly summary: "Create a project: one ClickHouse connection, one live data model, its own URLs.";
+        readonly scope: "organization";
+        readonly capability: "environment:create";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_EXISTS", "UNAUTHENTICATED"];
+    };
+    readonly "projects.rename": {
+        readonly name: "projects.rename";
+        readonly summary: "Change a project's display name; its slug and URLs stay the same.";
+        readonly scope: "project";
+        readonly capability: "environment:create";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "releases.status": {
+        readonly name: "releases.status";
+        readonly summary: "Show what is live: the current version and revision.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/releases/live";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "releases.list": {
+        readonly name: "releases.list";
+        readonly summary: "List published versions, newest first.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/releases";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "releases.get": {
+        readonly name: "releases.get";
+        readonly summary: "Show one published version and its data model.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/releases/{version}";
+        readonly pathParams: readonly ["project", "version"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED", "VERSION_NOT_FOUND"];
+    };
+    readonly "releases.rollback": {
+        readonly name: "releases.rollback";
+        readonly summary: "Make an earlier published version live again. The project's owner follows it: rolling back to a version built in Cloud makes the model editable in Cloud again, and to one deployed from code makes it managed in code.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: true;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/releases/{version}/rollback";
+        readonly pathParams: readonly ["project", "version"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "RELEASE_CHANGE_REFUSED", "RELEASE_MOVED", "UNAUTHENTICATED", "VERSION_NOT_FOUND"];
+    };
+    readonly "drafts.list": {
+        readonly name: "drafts.list";
+        readonly summary: "List the project's drafts and whether each is ready to publish.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.open": {
+        readonly name: "drafts.open";
+        readonly summary: "Open your working draft (created on first use, with the ClickHouse schema discovered) or a named draft, and see what it holds.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/open";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONNECTION_NOT_SAVED", "DRAFT_NOT_FOUND", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.save": {
+        readonly name: "drafts.save";
+        readonly summary: "Save the draft as a staging release after its publish gates pass. Nothing goes live; publishing is drafts.promote.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/save";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_NOT_READY", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.review": {
+        readonly name: "drafts.review";
+        readonly summary: "Review a saved draft before publishing: what changes against production, breaking changes, held measures and checks.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts/{draft}/review";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "RELEASE_MOVED", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.checks": {
+        readonly name: "drafts.checks";
+        readonly summary: "Run Cloud's number checks on a code draft's saved release.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/checks";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_CHECKABLE", "DRAFT_NOT_FOUND", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.promote": {
+        readonly name: "drafts.promote";
+        readonly summary: "Publish a draft's saved release to production.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: true;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/promote";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "DRAFT_NOT_FOUND", "DRAFT_NOT_READY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "OWNERSHIP_CHANGE_REQUIRED", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "RELEASE_CHANGE_REFUSED", "RELEASE_MOVED", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.get": {
+        readonly name: "drafts.get";
+        readonly summary: "Read a draft: its model, revision, whether Production moved since it was based, its saved release and its publish gates.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts/{draft}";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.rename": {
+        readonly name: "drafts.rename";
+        readonly summary: "Rename a draft. Its id and staging URL stay the same.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/drafts/{draft}";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NAME_TAKEN", "DRAFT_NOT_FOUND", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.delete": {
+        readonly name: "drafts.delete";
+        readonly summary: "Delete a draft and its staging URL for good. Only its creator can, unless you manage the organisation.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/drafts/{draft}";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "DRAFT_NOT_FOUND", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.archived": {
+        readonly name: "drafts.archived";
+        readonly summary: "Read an archived draft: the release it published and whether it can be reopened against current Production.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts/{draft}/archive";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.reopen": {
+        readonly name: "drafts.reopen";
+        readonly summary: "Reopen an archived draft as a working draft, from the release you read.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/reopen";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.impact": {
+        readonly name: "drafts.impact";
+        readonly summary: "Who a saved draft affects: which apps and customers called the datasets, measures and fields it changes or removes, recently.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts/{draft}/impact";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "RELEASE_MOVED", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.update": {
+        readonly name: "drafts.update";
+        readonly summary: "When Production moved since a draft was based, show the merge onto current Production: what merges cleanly and each conflict to choose.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts/{draft}/update";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_NOT_READY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED", "UPDATE_CONFLICTS"];
+    };
+    readonly "drafts.applyUpdate": {
+        readonly name: "drafts.applyUpdate";
+        readonly summary: "Merge a draft onto current Production with the user's choice for each conflict (keep the draft's or Production's). Preview first; apply once every conflict is chosen.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/update";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_NOT_READY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED", "UPDATE_CONFLICTS"];
+    };
+    readonly "drafts.refreshBase": {
+        readonly name: "drafts.refreshBase";
+        readonly summary: "For a code draft whose base Production moved: acknowledge that publishing it will replace current Production as it is, dropping the changes made there since. Nothing is merged.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: true;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/refresh-base";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "DRAFT_NOT_FOUND", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.setup": {
+        readonly name: "drafts.setup";
+        readonly summary: "Save what the user said about the project on a draft: what it's for, who it serves, the tables to model, priority metrics and one number they trust.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/drafts/{draft}/setup";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.findings": {
+        readonly name: "drafts.findings";
+        readonly summary: "List what discovery found that changes numbers (internal rows, mixed units, versioned rows, grain, customer scope…), each with the question to ask the user and the measures it affects.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts/{draft}/findings";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.answer": {
+        readonly name: "drafts.answer";
+        readonly summary: "Record the user's answers to findings: approve the proposed default, reject it (remove, or their own alternative), or decide later. Each answer becomes the member's decision in the draft's evidence ledger and can release held measures, so ask the user first.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: true;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/answers";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "DRAFT_NOT_FOUND", "DRAFT_NOT_READY", "DRAFT_READ_ONLY", "FINDINGS_CHANGED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.runStatus": {
+        readonly name: "drafts.runStatus";
+        readonly summary: "Read the progress of the draft's background checks (grain, column meaning, measures, joins, query history, the trusted number).";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/drafts/{draft}/run";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["DRAFT_NOT_FOUND", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "drafts.run": {
+        readonly name: "drafts.run";
+        readonly summary: "Start, resume or cancel the draft's background checks against ClickHouse. They run in batches; poll drafts_run_status, then read drafts_findings.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/drafts/{draft}/run";
+        readonly pathParams: readonly ["project", "draft"];
+        readonly errors: readonly ["CONNECTION_NOT_SAVED", "DRAFT_NOT_FOUND", "DRAFT_READ_ONLY", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "RUN_CONFLICT", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "customerScope.list": {
+        readonly name: "customerScope.list";
+        readonly summary: "List each live dataset's customer scope, and the ones flagged for exposing a customer column without being scoped by it.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/onboarding/customer-scope";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerScope.confirmShared": {
+        readonly name: "customerScope.confirmShared";
+        readonly summary: "Record that a flagged dataset is the same for every customer, so it stays unscoped on purpose. Only the user can decide this.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: true;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/onboarding/customer-scope/confirm";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "NOTHING_TO_CONFIRM", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "samplePolicy.get": {
+        readonly name: "samplePolicy.get";
+        readonly summary: "Read which columns' sample values the assistant may see: all, only those not detected as sensitive, or none, with per-column overrides.";
+        readonly scope: "project";
+        readonly capability: "deployment:publish";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/sample-policy";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "samplePolicy.set": {
+        readonly name: "samplePolicy.set";
+        readonly summary: "Set which columns' sample values the assistant may see.";
+        readonly scope: "project";
+        readonly capability: "connection:manage";
+        readonly destructive: false;
+        readonly method: "PUT";
+        readonly path: "/projects/{project}/sample-policy";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "connections.get": {
+        readonly name: "connections.get";
+        readonly summary: "Show the project's ClickHouse connection (never the password).";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/connection";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "connections.save": {
+        readonly name: "connections.save";
+        readonly summary: "Test and save the project's ClickHouse connection; once a release is live, databases can only be added.";
+        readonly scope: "project";
+        readonly capability: "connection:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/connection";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONNECTION_AUTH_FAILED", "CONNECTION_DATABASE_LOCKED", "CONNECTION_QUERY_FAILED", "CONNECTION_UNREACHABLE", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "connections.link": {
+        readonly name: "connections.link";
+        readonly summary: "Get a one-time link for the user to enter the project's ClickHouse connection in the dashboard, so the password never passes through chat. It works for the user who asked, signed in, once, for 15 minutes; then check it with connections.test.";
+        readonly scope: "project";
+        readonly capability: "connection:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/connection/link";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "connections.test": {
+        readonly name: "connections.test";
+        readonly summary: "Check the saved connection now: reachable, the user accepted, and what hypequery needs granted.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/connection/test";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONNECTION_AUTH_FAILED", "CONNECTION_NOT_SAVED", "CONNECTION_QUERY_FAILED", "CONNECTION_UNREACHABLE", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "connections.queryHistory": {
+        readonly name: "connections.queryHistory";
+        readonly summary: "Show whether onboarding may read ClickHouse query history, and which accounts are technical.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/connection/query-history";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "connections.setQueryHistory": {
+        readonly name: "connections.setQueryHistory";
+        readonly summary: "Allow or stop onboarding reading ClickHouse query history (shapes only, never literals).";
+        readonly scope: "project";
+        readonly capability: "connection:manage";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/connection/query-history";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONNECTION_NOT_SAVED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "logs.query": {
+        readonly name: "logs.query";
+        readonly summary: "Search the project's request history (7 days): who queried what, how long it took, and what failed.";
+        readonly scope: "project";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/logs";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "usage.get": {
+        readonly name: "usage.get";
+        readonly summary: "Show this month's queries by day and transport, per customer, and embedded chat usage.";
+        readonly scope: "organization";
+        readonly capability: "workspace:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/org/usage";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "UNAUTHENTICATED"];
+    };
+    readonly "audit.list": {
+        readonly name: "audit.list";
+        readonly summary: "List the organisation's audit log: publishes, rollbacks, members, keys and connection changes.";
+        readonly scope: "organization";
+        readonly capability: "audit:read";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/org/audit";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "UNAUTHENTICATED"];
+    };
+    readonly "tenants.list": {
+        readonly name: "tenants.list";
+        readonly summary: "List the project's customers (tenants) and whether each is enabled.";
+        readonly scope: "project";
+        readonly capability: "embed:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/tenants";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "tenants.create": {
+        readonly name: "tenants.create";
+        readonly summary: "Register a customer by the id your app uses for it, with a display name.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/customers/tenants";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "TENANT_EXISTS", "UNAUTHENTICATED"];
+    };
+    readonly "tenants.update": {
+        readonly name: "tenants.update";
+        readonly summary: "Rename a customer, or disable it (which ends its users' MCP sign-ins).";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/customers/tenants/{tenant}";
+        readonly pathParams: readonly ["project", "tenant"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "TENANT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "tenants.remove": {
+        readonly name: "tenants.remove";
+        readonly summary: "Remove a customer and end its users' MCP sign-ins.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/customers/tenants/{tenant}";
+        readonly pathParams: readonly ["project", "tenant"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "TENANT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "permissionSets.list": {
+        readonly name: "permissionSets.list";
+        readonly summary: "List the permission sets that decide which datasets and fields customers' users see.";
+        readonly scope: "project";
+        readonly capability: "embed:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/permission-sets";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "permissionSets.create": {
+        readonly name: "permissionSets.create";
+        readonly summary: "Create a permission set: the datasets and fields a customer's users may query.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/customers/permission-sets";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PERMISSION_SET_EXISTS", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "permissionSets.update": {
+        readonly name: "permissionSets.update";
+        readonly summary: "Change a permission set, guarded by the revision you read; fields you leave out keep their values.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/customers/permission-sets/{permissionSet}";
+        readonly pathParams: readonly ["project", "permissionSet"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PERMISSION_SET_NOT_FOUND", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "permissionSets.remove": {
+        readonly name: "permissionSets.remove";
+        readonly summary: "Delete a permission set; tokens naming it are refused from then on.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/customers/permission-sets/{permissionSet}";
+        readonly pathParams: readonly ["project", "permissionSet"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PERMISSION_SET_NOT_FOUND", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerLimits.get": {
+        readonly name: "customerLimits.get";
+        readonly summary: "Show each customer's query rate, daily query limit and chat token allowance.";
+        readonly scope: "project";
+        readonly capability: "embed:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/limits";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerLimits.set": {
+        readonly name: "customerLimits.set";
+        readonly summary: "Set each customer's query rate, daily query limit and chat tokens; null keeps the default.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/customers/limits";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "tenantGrants.list": {
+        readonly name: "tenantGrants.list";
+        readonly summary: "List customers' users signed in to MCP, by customer and user.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/mcp-grants";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "tenantGrants.revokeTenant": {
+        readonly name: "tenantGrants.revokeTenant";
+        readonly summary: "End every MCP connection of one customer's users.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: true;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/customers/mcp-grants/revoke-tenant";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "tenantGrants.revoke": {
+        readonly name: "tenantGrants.revoke";
+        readonly summary: "End one customer user's MCP connection; it stops on its next call.";
+        readonly scope: "project";
+        readonly capability: "embed:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/customers/mcp-grants/{grant}";
+        readonly pathParams: readonly ["project", "grant"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "GRANT_NOT_FOUND", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerAccess.get": {
+        readonly name: "customerAccess.get";
+        readonly summary: "Show how the app identifies its customers' users, the customer origin, and a dataset to prove scoping with.";
+        readonly scope: "project";
+        readonly capability: "embed:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/access";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerAccess.setMode": {
+        readonly name: "customerAccess.setMode";
+        readonly summary: "Choose how the app identifies its customers' users: jwt (your provider), minted (your backend mints tokens), backend (your backend names the customer) or internal.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/customers/access";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerAccess.createKey": {
+        readonly name: "customerAccess.createKey";
+        readonly summary: "Create the server key a minted or backend mode uses, for any customer. Its token is returned once.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/customers/access/key";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerAccess.prove": {
+        readonly name: "customerAccess.prove";
+        readonly summary: "Prove customer scoping: one query as a chosen customer through the customer origin, then the same query with no customer, which must be refused.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/customers/access/prove";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerSettings.get": {
+        readonly name: "customerSettings.get";
+        readonly summary: "Show the allowed browser origins and how customers register.";
+        readonly scope: "project";
+        readonly capability: "embed:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/settings";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "customerSettings.set": {
+        readonly name: "customerSettings.set";
+        readonly summary: "Replace the browser origins allowed to call customer endpoints, and choose whether customers register on first use.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "PATCH";
+        readonly path: "/projects/{project}/customers/settings";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "jwtIssuer.get": {
+        readonly name: "jwtIssuer.get";
+        readonly summary: "Show the identity provider whose JWTs your app's users present, with its health.";
+        readonly scope: "project";
+        readonly capability: "embed:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/jwt-issuer";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "jwtIssuer.save": {
+        readonly name: "jwtIssuer.save";
+        readonly summary: "Trust your identity provider's JWTs: issuer, audience, JWKS URL and which claims name the customer and access.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "PUT";
+        readonly path: "/projects/{project}/customers/jwt-issuer";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["ALREADY_CONFIGURED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "ISSUER_UNREADABLE", "NOT_CONFIGURED", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "jwtIssuer.remove": {
+        readonly name: "jwtIssuer.remove";
+        readonly summary: "Stop trusting the identity provider's JWTs; tokens from it are refused from then on.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/customers/jwt-issuer";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "NOT_CONFIGURED", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "oidcClient.get": {
+        readonly name: "oidcClient.get";
+        readonly summary: "Show OIDC sign-in for customers' MCP users, with the redirect and MCP URLs to register (never the client secret).";
+        readonly scope: "project";
+        readonly capability: "embed:view";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/customers/oidc-client";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "oidcClient.save": {
+        readonly name: "oidcClient.save";
+        readonly summary: "Let customers' users sign in to MCP with your identity provider: issuer, client id and (the first time) secret.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "PUT";
+        readonly path: "/projects/{project}/customers/oidc-client";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["ALREADY_CONFIGURED", "CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "ISSUER_REQUIRED", "ISSUER_UNREADABLE", "NOT_CONFIGURED", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "STALE_REVISION", "UNAUTHENTICATED"];
+    };
+    readonly "oidcClient.remove": {
+        readonly name: "oidcClient.remove";
+        readonly summary: "Remove OIDC sign-in; every customer MCP connection ends with it.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/customers/oidc-client";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "NOT_CONFIGURED", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "members.list": {
+        readonly name: "members.list";
+        readonly summary: "List the organisation's members and pending invitations, with their roles.";
+        readonly scope: "organization";
+        readonly capability: "organization:manage";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/org/members";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "UNAUTHENTICATED"];
+    };
+    readonly "members.invite": {
+        readonly name: "members.invite";
+        readonly summary: "Invite someone by email as a Developer (member) or an Admin; they get an email to accept.";
+        readonly scope: "organization";
+        readonly capability: "organization:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/org/members/invitations";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "SESSION_REQUIRED", "UNAUTHENTICATED"];
+    };
+    readonly "members.cancelInvitation": {
+        readonly name: "members.cancelInvitation";
+        readonly summary: "Cancel a pending invitation.";
+        readonly scope: "organization";
+        readonly capability: "organization:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/org/members/invitations/{invitation}";
+        readonly pathParams: readonly ["invitation"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "MEMBER_NOT_FOUND", "SESSION_REQUIRED", "UNAUTHENTICATED"];
+    };
+    readonly "org.accessPolicy": {
+        readonly name: "org.accessPolicy";
+        readonly summary: "Show who may be invited: any email, or only approved email domains.";
+        readonly scope: "organization";
+        readonly capability: "organization:manage";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/org/access-policy";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "UNAUTHENTICATED"];
+    };
+    readonly "org.setAccessPolicy": {
+        readonly name: "org.setAccessPolicy";
+        readonly summary: "Choose who may be invited: any email, or only approved email domains.";
+        readonly scope: "organization";
+        readonly capability: "organization:manage";
+        readonly destructive: false;
+        readonly method: "PUT";
+        readonly path: "/org/access-policy";
+        readonly pathParams: readonly [];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "UNAUTHENTICATED"];
+    };
+    readonly "deployKeys.list": {
+        readonly name: "deployKeys.list";
+        readonly summary: "List the project's deploy keys (for CI), with when each was last used.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/deploy-keys";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "deployKeys.create": {
+        readonly name: "deployKeys.create";
+        readonly summary: "Create a deploy key for CI; its token is returned once.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/deploy-keys";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "deployKeys.revoke": {
+        readonly name: "deployKeys.revoke";
+        readonly summary: "Revoke a deploy key; CI using it stops deploying.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/deploy-keys/{key}";
+        readonly pathParams: readonly ["project", "key"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "KEY_NOT_FOUND", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "apiKeys.list": {
+        readonly name: "apiKeys.list";
+        readonly summary: "List the project's API keys and approved MCP connections, with their roles, scopes and customers.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "GET";
+        readonly path: "/projects/{project}/api-keys";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "apiKeys.create": {
+        readonly name: "apiKeys.create";
+        readonly summary: "Create an API key with roles, scopes and which customers it may act for; its token is returned once.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: false;
+        readonly method: "POST";
+        readonly path: "/projects/{project}/api-keys";
+        readonly pathParams: readonly ["project"];
+        readonly errors: readonly ["FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+    readonly "apiKeys.revoke": {
+        readonly name: "apiKeys.revoke";
+        readonly summary: "Revoke an API key or an approved MCP connection; it stops on its next call.";
+        readonly scope: "project";
+        readonly capability: "credentials:manage";
+        readonly destructive: true;
+        readonly method: "DELETE";
+        readonly path: "/projects/{project}/api-keys/{key}";
+        readonly pathParams: readonly ["project", "key"];
+        readonly errors: readonly ["CONFIRMATION_REQUIRED", "FORBIDDEN", "INTERNAL", "INVALID_INPUT", "INVALID_REQUEST_ORIGIN", "KEY_NOT_FOUND", "PROJECT_HAS_SEVERAL_TARGETS", "PROJECT_NOT_FOUND", "UNAUTHENTICATED"];
+    };
+};
+export type CloudOperationName = keyof typeof OPERATIONS;
+/** One method per Cloud operation, grouped by resource: `client.drafts.promote(...)`. */
+export interface CloudClientOperations {
+    projects: {
+        /**
+         * List the projects in your organisation.
+         *
+         * `GET /projects` · organization scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, UNAUTHENTICATED
+         */
+        list(input?: ProjectsListInput, options?: CallOptions): Promise<ProjectsListOutput>;
+        /**
+         * Show one project and whether a release is live.
+         *
+         * `GET /projects/{project}` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: ProjectsGetInput, options?: CallOptions): Promise<ProjectsGetOutput>;
+        /**
+         * Where the project is served: the MCP URL, the REST base and dataset URLs, and the client contract.
+         *
+         * `GET /projects/{project}/connect-info` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        connectInfo(input: ProjectsConnectInfoInput, options?: CallOptions): Promise<ProjectsConnectInfoOutput>;
+        /**
+         * Create a project: one ClickHouse connection, one live data model, its own URLs.
+         *
+         * `POST /projects` · organization scope · needs `environment:create`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_EXISTS, UNAUTHENTICATED
+         */
+        create(input: ProjectsCreateInput, options?: CallOptions): Promise<ProjectsCreateOutput>;
+        /**
+         * Change a project's display name; its slug and URLs stay the same.
+         *
+         * `PATCH /projects/{project}` · project scope · needs `environment:create`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        rename(input: ProjectsRenameInput, options?: CallOptions): Promise<ProjectsRenameOutput>;
+    };
+    releases: {
+        /**
+         * Show what is live: the current version and revision.
+         *
+         * `GET /projects/{project}/releases/live` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        status(input: ReleasesStatusInput, options?: CallOptions): Promise<ReleasesStatusOutput>;
+        /**
+         * List published versions, newest first.
+         *
+         * `GET /projects/{project}/releases` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: ReleasesListInput, options?: CallOptions): Promise<ReleasesListOutput>;
+        /**
+         * Show one published version and its data model.
+         *
+         * `GET /projects/{project}/releases/{version}` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED, VERSION_NOT_FOUND
+         */
+        get(input: ReleasesGetInput, options?: CallOptions): Promise<ReleasesGetOutput>;
+        /**
+         * Make an earlier published version live again. The project's owner follows it: rolling back to a version built in Cloud makes the model editable in Cloud again, and to one deployed from code makes it managed in code.
+         *
+         * `POST /projects/{project}/releases/{version}/rollback` · project scope · needs `deployment:publish`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, RELEASE_CHANGE_REFUSED, RELEASE_MOVED, UNAUTHENTICATED, VERSION_NOT_FOUND
+         */
+        rollback(input: ReleasesRollbackInput, options?: CallOptions): Promise<ReleasesRollbackOutput>;
+    };
+    drafts: {
+        /**
+         * List the project's drafts and whether each is ready to publish.
+         *
+         * `GET /projects/{project}/drafts` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: DraftsListInput, options?: CallOptions): Promise<DraftsListOutput>;
+        /**
+         * Open your working draft (created on first use, with the ClickHouse schema discovered) or a named draft, and see what it holds.
+         *
+         * `POST /projects/{project}/drafts/open` · project scope · needs `deployment:publish`
+         * Errors: CONNECTION_NOT_SAVED, DRAFT_NOT_FOUND, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        open(input: DraftsOpenInput, options?: CallOptions): Promise<DraftsOpenOutput>;
+        /**
+         * Save the draft as a staging release after its publish gates pass. Nothing goes live; publishing is drafts.promote.
+         *
+         * `POST /projects/{project}/drafts/{draft}/save` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_NOT_READY, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        save(input: DraftsSaveInput, options?: CallOptions): Promise<DraftsSaveOutput>;
+        /**
+         * Review a saved draft before publishing: what changes against production, breaking changes, held measures and checks.
+         *
+         * `GET /projects/{project}/drafts/{draft}/review` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, RELEASE_MOVED, UNAUTHENTICATED
+         */
+        review(input: DraftsReviewInput, options?: CallOptions): Promise<DraftsReviewOutput>;
+        /**
+         * Run Cloud's number checks on a code draft's saved release.
+         *
+         * `POST /projects/{project}/drafts/{draft}/checks` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_CHECKABLE, DRAFT_NOT_FOUND, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        checks(input: DraftsChecksInput, options?: CallOptions): Promise<DraftsChecksOutput>;
+        /**
+         * Publish a draft's saved release to production.
+         *
+         * `POST /projects/{project}/drafts/{draft}/promote` · project scope · needs `deployment:publish`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, DRAFT_NOT_FOUND, DRAFT_NOT_READY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, OWNERSHIP_CHANGE_REQUIRED, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, RELEASE_CHANGE_REFUSED, RELEASE_MOVED, UNAUTHENTICATED
+         */
+        promote(input: DraftsPromoteInput, options?: CallOptions): Promise<DraftsPromoteOutput>;
+        /**
+         * Read a draft: its model, revision, whether Production moved since it was based, its saved release and its publish gates.
+         *
+         * `GET /projects/{project}/drafts/{draft}` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: DraftsGetInput, options?: CallOptions): Promise<DraftsGetOutput>;
+        /**
+         * Rename a draft. Its id and staging URL stay the same.
+         *
+         * `PATCH /projects/{project}/drafts/{draft}` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NAME_TAKEN, DRAFT_NOT_FOUND, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        rename(input: DraftsRenameInput, options?: CallOptions): Promise<DraftsRenameOutput>;
+        /**
+         * Delete a draft and its staging URL for good. Only its creator can, unless you manage the organisation.
+         *
+         * `DELETE /projects/{project}/drafts/{draft}` · project scope · needs `deployment:publish`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, DRAFT_NOT_FOUND, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        delete(input: DraftsDeleteInput, options?: CallOptions): Promise<DraftsDeleteOutput>;
+        /**
+         * Read an archived draft: the release it published and whether it can be reopened against current Production.
+         *
+         * `GET /projects/{project}/drafts/{draft}/archive` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        archived(input: DraftsArchivedInput, options?: CallOptions): Promise<DraftsArchivedOutput>;
+        /**
+         * Reopen an archived draft as a working draft, from the release you read.
+         *
+         * `POST /projects/{project}/drafts/{draft}/reopen` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        reopen(input: DraftsReopenInput, options?: CallOptions): Promise<DraftsReopenOutput>;
+        /**
+         * Who a saved draft affects: which apps and customers called the datasets, measures and fields it changes or removes, recently.
+         *
+         * `GET /projects/{project}/drafts/{draft}/impact` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, RELEASE_MOVED, UNAUTHENTICATED
+         */
+        impact(input: DraftsImpactInput, options?: CallOptions): Promise<DraftsImpactOutput>;
+        /**
+         * When Production moved since a draft was based, show the merge onto current Production: what merges cleanly and each conflict to choose.
+         *
+         * `GET /projects/{project}/drafts/{draft}/update` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_NOT_READY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED, UPDATE_CONFLICTS
+         */
+        update(input: DraftsUpdateInput, options?: CallOptions): Promise<DraftsUpdateOutput>;
+        /**
+         * Merge a draft onto current Production with the user's choice for each conflict (keep the draft's or Production's). Preview first; apply once every conflict is chosen.
+         *
+         * `POST /projects/{project}/drafts/{draft}/update` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_NOT_READY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED, UPDATE_CONFLICTS
+         */
+        applyUpdate(input: DraftsApplyUpdateInput, options?: CallOptions): Promise<DraftsApplyUpdateOutput>;
+        /**
+         * For a code draft whose base Production moved: acknowledge that publishing it will replace current Production as it is, dropping the changes made there since. Nothing is merged.
+         *
+         * `POST /projects/{project}/drafts/{draft}/refresh-base` · project scope · needs `deployment:publish`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, DRAFT_NOT_FOUND, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        refreshBase(input: DraftsRefreshBaseInput, options?: CallOptions): Promise<DraftsRefreshBaseOutput>;
+        /**
+         * Save what the user said about the project on a draft: what it's for, who it serves, the tables to model, priority metrics and one number they trust.
+         *
+         * `PATCH /projects/{project}/drafts/{draft}/setup` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        setup(input: DraftsSetupInput, options?: CallOptions): Promise<DraftsSetupOutput>;
+        /**
+         * List what discovery found that changes numbers (internal rows, mixed units, versioned rows, grain, customer scope…), each with the question to ask the user and the measures it affects.
+         *
+         * `GET /projects/{project}/drafts/{draft}/findings` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        findings(input: DraftsFindingsInput, options?: CallOptions): Promise<DraftsFindingsOutput>;
+        /**
+         * Record the user's answers to findings: approve the proposed default, reject it (remove, or their own alternative), or decide later. Each answer becomes the member's decision in the draft's evidence ledger and can release held measures, so ask the user first.
+         *
+         * `POST /projects/{project}/drafts/{draft}/answers` · project scope · needs `deployment:publish`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, DRAFT_NOT_FOUND, DRAFT_NOT_READY, DRAFT_READ_ONLY, FINDINGS_CHANGED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        answer(input: DraftsAnswerInput, options?: CallOptions): Promise<DraftsAnswerOutput>;
+        /**
+         * Read the progress of the draft's background checks (grain, column meaning, measures, joins, query history, the trusted number).
+         *
+         * `GET /projects/{project}/drafts/{draft}/run` · project scope · needs `deployment:publish`
+         * Errors: DRAFT_NOT_FOUND, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        runStatus(input: DraftsRunStatusInput, options?: CallOptions): Promise<DraftsRunStatusOutput>;
+        /**
+         * Start, resume or cancel the draft's background checks against ClickHouse. They run in batches; poll drafts_run_status, then read drafts_findings.
+         *
+         * `POST /projects/{project}/drafts/{draft}/run` · project scope · needs `deployment:publish`
+         * Errors: CONNECTION_NOT_SAVED, DRAFT_NOT_FOUND, DRAFT_READ_ONLY, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, RUN_CONFLICT, STALE_REVISION, UNAUTHENTICATED
+         */
+        run(input: DraftsRunInput, options?: CallOptions): Promise<DraftsRunOutput>;
+    };
+    customerScope: {
+        /**
+         * List each live dataset's customer scope, and the ones flagged for exposing a customer column without being scoped by it.
+         *
+         * `GET /projects/{project}/onboarding/customer-scope` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: CustomerScopeListInput, options?: CallOptions): Promise<CustomerScopeListOutput>;
+        /**
+         * Record that a flagged dataset is the same for every customer, so it stays unscoped on purpose. Only the user can decide this.
+         *
+         * `POST /projects/{project}/onboarding/customer-scope/confirm` · project scope · needs `deployment:publish`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, NOTHING_TO_CONFIRM, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        confirmShared(input: CustomerScopeConfirmSharedInput, options?: CallOptions): Promise<CustomerScopeConfirmSharedOutput>;
+    };
+    samplePolicy: {
+        /**
+         * Read which columns' sample values the assistant may see: all, only those not detected as sensitive, or none, with per-column overrides.
+         *
+         * `GET /projects/{project}/sample-policy` · project scope · needs `deployment:publish`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: SamplePolicyGetInput, options?: CallOptions): Promise<SamplePolicyGetOutput>;
+        /**
+         * Set which columns' sample values the assistant may see.
+         *
+         * `PUT /projects/{project}/sample-policy` · project scope · needs `connection:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        set(input: SamplePolicySetInput, options?: CallOptions): Promise<SamplePolicySetOutput>;
+    };
+    connections: {
+        /**
+         * Show the project's ClickHouse connection (never the password).
+         *
+         * `GET /projects/{project}/connection` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: ConnectionsGetInput, options?: CallOptions): Promise<ConnectionsGetOutput>;
+        /**
+         * Test and save the project's ClickHouse connection; once a release is live, databases can only be added.
+         *
+         * `POST /projects/{project}/connection` · project scope · needs `connection:manage`
+         * Errors: CONNECTION_AUTH_FAILED, CONNECTION_DATABASE_LOCKED, CONNECTION_QUERY_FAILED, CONNECTION_UNREACHABLE, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        save(input: ConnectionsSaveInput, options?: CallOptions): Promise<ConnectionsSaveOutput>;
+        /**
+         * Get a one-time link for the user to enter the project's ClickHouse connection in the dashboard, so the password never passes through chat. It works for the user who asked, signed in, once, for 15 minutes; then check it with connections.test.
+         *
+         * `POST /projects/{project}/connection/link` · project scope · needs `connection:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        link(input: ConnectionsLinkInput, options?: CallOptions): Promise<ConnectionsLinkOutput>;
+        /**
+         * Check the saved connection now: reachable, the user accepted, and what hypequery needs granted.
+         *
+         * `POST /projects/{project}/connection/test` · project scope · needs `workspace:view`
+         * Errors: CONNECTION_AUTH_FAILED, CONNECTION_NOT_SAVED, CONNECTION_QUERY_FAILED, CONNECTION_UNREACHABLE, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        test(input: ConnectionsTestInput, options?: CallOptions): Promise<ConnectionsTestOutput>;
+        /**
+         * Show whether onboarding may read ClickHouse query history, and which accounts are technical.
+         *
+         * `GET /projects/{project}/connection/query-history` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        queryHistory(input: ConnectionsQueryHistoryInput, options?: CallOptions): Promise<ConnectionsQueryHistoryOutput>;
+        /**
+         * Allow or stop onboarding reading ClickHouse query history (shapes only, never literals).
+         *
+         * `PATCH /projects/{project}/connection/query-history` · project scope · needs `connection:manage`
+         * Errors: CONNECTION_NOT_SAVED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        setQueryHistory(input: ConnectionsSetQueryHistoryInput, options?: CallOptions): Promise<ConnectionsSetQueryHistoryOutput>;
+    };
+    logs: {
+        /**
+         * Search the project's request history (7 days): who queried what, how long it took, and what failed.
+         *
+         * `GET /projects/{project}/logs` · project scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        query(input: LogsQueryInput, options?: CallOptions): Promise<LogsQueryOutput>;
+    };
+    usage: {
+        /**
+         * Show this month's queries by day and transport, per customer, and embedded chat usage.
+         *
+         * `GET /org/usage` · organization scope · needs `workspace:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, UNAUTHENTICATED
+         */
+        get(input?: UsageGetInput, options?: CallOptions): Promise<UsageGetOutput>;
+    };
+    audit: {
+        /**
+         * List the organisation's audit log: publishes, rollbacks, members, keys and connection changes.
+         *
+         * `GET /org/audit` · organization scope · needs `audit:read`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, UNAUTHENTICATED
+         */
+        list(input?: AuditListInput, options?: CallOptions): Promise<AuditListOutput>;
+    };
+    tenants: {
+        /**
+         * List the project's customers (tenants) and whether each is enabled.
+         *
+         * `GET /projects/{project}/customers/tenants` · project scope · needs `embed:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: TenantsListInput, options?: CallOptions): Promise<TenantsListOutput>;
+        /**
+         * Register a customer by the id your app uses for it, with a display name.
+         *
+         * `POST /projects/{project}/customers/tenants` · project scope · needs `embed:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, TENANT_EXISTS, UNAUTHENTICATED
+         */
+        create(input: TenantsCreateInput, options?: CallOptions): Promise<TenantsCreateOutput>;
+        /**
+         * Rename a customer, or disable it (which ends its users' MCP sign-ins).
+         *
+         * `PATCH /projects/{project}/customers/tenants/{tenant}` · project scope · needs `embed:manage`
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, TENANT_NOT_FOUND, UNAUTHENTICATED
+         */
+        update(input: TenantsUpdateInput, options?: CallOptions): Promise<TenantsUpdateOutput>;
+        /**
+         * Remove a customer and end its users' MCP sign-ins.
+         *
+         * `DELETE /projects/{project}/customers/tenants/{tenant}` · project scope · needs `embed:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, TENANT_NOT_FOUND, UNAUTHENTICATED
+         */
+        remove(input: TenantsRemoveInput, options?: CallOptions): Promise<TenantsRemoveOutput>;
+    };
+    permissionSets: {
+        /**
+         * List the permission sets that decide which datasets and fields customers' users see.
+         *
+         * `GET /projects/{project}/customers/permission-sets` · project scope · needs `embed:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: PermissionSetsListInput, options?: CallOptions): Promise<PermissionSetsListOutput>;
+        /**
+         * Create a permission set: the datasets and fields a customer's users may query.
+         *
+         * `POST /projects/{project}/customers/permission-sets` · project scope · needs `embed:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PERMISSION_SET_EXISTS, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        create(input: PermissionSetsCreateInput, options?: CallOptions): Promise<PermissionSetsCreateOutput>;
+        /**
+         * Change a permission set, guarded by the revision you read; fields you leave out keep their values.
+         *
+         * `PATCH /projects/{project}/customers/permission-sets/{permissionSet}` · project scope · needs `embed:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PERMISSION_SET_NOT_FOUND, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        update(input: PermissionSetsUpdateInput, options?: CallOptions): Promise<PermissionSetsUpdateOutput>;
+        /**
+         * Delete a permission set; tokens naming it are refused from then on.
+         *
+         * `DELETE /projects/{project}/customers/permission-sets/{permissionSet}` · project scope · needs `embed:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PERMISSION_SET_NOT_FOUND, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        remove(input: PermissionSetsRemoveInput, options?: CallOptions): Promise<PermissionSetsRemoveOutput>;
+    };
+    customerLimits: {
+        /**
+         * Show each customer's query rate, daily query limit and chat token allowance.
+         *
+         * `GET /projects/{project}/customers/limits` · project scope · needs `embed:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: CustomerLimitsGetInput, options?: CallOptions): Promise<CustomerLimitsGetOutput>;
+        /**
+         * Set each customer's query rate, daily query limit and chat tokens; null keeps the default.
+         *
+         * `PATCH /projects/{project}/customers/limits` · project scope · needs `embed:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        set(input: CustomerLimitsSetInput, options?: CallOptions): Promise<CustomerLimitsSetOutput>;
+    };
+    tenantGrants: {
+        /**
+         * List customers' users signed in to MCP, by customer and user.
+         *
+         * `GET /projects/{project}/customers/mcp-grants` · project scope · needs `embed:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: TenantGrantsListInput, options?: CallOptions): Promise<TenantGrantsListOutput>;
+        /**
+         * End every MCP connection of one customer's users.
+         *
+         * `POST /projects/{project}/customers/mcp-grants/revoke-tenant` · project scope · needs `embed:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        revokeTenant(input: TenantGrantsRevokeTenantInput, options?: CallOptions): Promise<TenantGrantsRevokeTenantOutput>;
+        /**
+         * End one customer user's MCP connection; it stops on its next call.
+         *
+         * `DELETE /projects/{project}/customers/mcp-grants/{grant}` · project scope · needs `embed:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, GRANT_NOT_FOUND, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        revoke(input: TenantGrantsRevokeInput, options?: CallOptions): Promise<TenantGrantsRevokeOutput>;
+    };
+    customerAccess: {
+        /**
+         * Show how the app identifies its customers' users, the customer origin, and a dataset to prove scoping with.
+         *
+         * `GET /projects/{project}/customers/access` · project scope · needs `embed:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: CustomerAccessGetInput, options?: CallOptions): Promise<CustomerAccessGetOutput>;
+        /**
+         * Choose how the app identifies its customers' users: jwt (your provider), minted (your backend mints tokens), backend (your backend names the customer) or internal.
+         *
+         * `PATCH /projects/{project}/customers/access` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        setMode(input: CustomerAccessSetModeInput, options?: CallOptions): Promise<CustomerAccessSetModeOutput>;
+        /**
+         * Create the server key a minted or backend mode uses, for any customer. Its token is returned once.
+         *
+         * `POST /projects/{project}/customers/access/key` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        createKey(input: CustomerAccessCreateKeyInput, options?: CallOptions): Promise<CustomerAccessCreateKeyOutput>;
+        /**
+         * Prove customer scoping: one query as a chosen customer through the customer origin, then the same query with no customer, which must be refused.
+         *
+         * `POST /projects/{project}/customers/access/prove` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        prove(input: CustomerAccessProveInput, options?: CallOptions): Promise<CustomerAccessProveOutput>;
+    };
+    customerSettings: {
+        /**
+         * Show the allowed browser origins and how customers register.
+         *
+         * `GET /projects/{project}/customers/settings` · project scope · needs `embed:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: CustomerSettingsGetInput, options?: CallOptions): Promise<CustomerSettingsGetOutput>;
+        /**
+         * Replace the browser origins allowed to call customer endpoints, and choose whether customers register on first use.
+         *
+         * `PATCH /projects/{project}/customers/settings` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        set(input: CustomerSettingsSetInput, options?: CallOptions): Promise<CustomerSettingsSetOutput>;
+    };
+    jwtIssuer: {
+        /**
+         * Show the identity provider whose JWTs your app's users present, with its health.
+         *
+         * `GET /projects/{project}/customers/jwt-issuer` · project scope · needs `embed:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: JwtIssuerGetInput, options?: CallOptions): Promise<JwtIssuerGetOutput>;
+        /**
+         * Trust your identity provider's JWTs: issuer, audience, JWKS URL and which claims name the customer and access.
+         *
+         * `PUT /projects/{project}/customers/jwt-issuer` · project scope · needs `credentials:manage`
+         * Errors: ALREADY_CONFIGURED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, ISSUER_UNREADABLE, NOT_CONFIGURED, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        save(input: JwtIssuerSaveInput, options?: CallOptions): Promise<JwtIssuerSaveOutput>;
+        /**
+         * Stop trusting the identity provider's JWTs; tokens from it are refused from then on.
+         *
+         * `DELETE /projects/{project}/customers/jwt-issuer` · project scope · needs `credentials:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, NOT_CONFIGURED, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        remove(input: JwtIssuerRemoveInput, options?: CallOptions): Promise<JwtIssuerRemoveOutput>;
+    };
+    oidcClient: {
+        /**
+         * Show OIDC sign-in for customers' MCP users, with the redirect and MCP URLs to register (never the client secret).
+         *
+         * `GET /projects/{project}/customers/oidc-client` · project scope · needs `embed:view`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        get(input: OidcClientGetInput, options?: CallOptions): Promise<OidcClientGetOutput>;
+        /**
+         * Let customers' users sign in to MCP with your identity provider: issuer, client id and (the first time) secret.
+         *
+         * `PUT /projects/{project}/customers/oidc-client` · project scope · needs `credentials:manage`
+         * Errors: ALREADY_CONFIGURED, CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, ISSUER_REQUIRED, ISSUER_UNREADABLE, NOT_CONFIGURED, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, STALE_REVISION, UNAUTHENTICATED
+         */
+        save(input: OidcClientSaveInput, options?: CallOptions): Promise<OidcClientSaveOutput>;
+        /**
+         * Remove OIDC sign-in; every customer MCP connection ends with it.
+         *
+         * `DELETE /projects/{project}/customers/oidc-client` · project scope · needs `credentials:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, NOT_CONFIGURED, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        remove(input: OidcClientRemoveInput, options?: CallOptions): Promise<OidcClientRemoveOutput>;
+    };
+    members: {
+        /**
+         * List the organisation's members and pending invitations, with their roles.
+         *
+         * `GET /org/members` · organization scope · needs `organization:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, UNAUTHENTICATED
+         */
+        list(input?: MembersListInput, options?: CallOptions): Promise<MembersListOutput>;
+        /**
+         * Invite someone by email as a Developer (member) or an Admin; they get an email to accept.
+         *
+         * `POST /org/members/invitations` · organization scope · needs `organization:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, SESSION_REQUIRED, UNAUTHENTICATED
+         */
+        invite(input: MembersInviteInput, options?: CallOptions): Promise<MembersInviteOutput>;
+        /**
+         * Cancel a pending invitation.
+         *
+         * `DELETE /org/members/invitations/{invitation}` · organization scope · needs `organization:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, MEMBER_NOT_FOUND, SESSION_REQUIRED, UNAUTHENTICATED
+         */
+        cancelInvitation(input: MembersCancelInvitationInput, options?: CallOptions): Promise<MembersCancelInvitationOutput>;
+    };
+    org: {
+        /**
+         * Show who may be invited: any email, or only approved email domains.
+         *
+         * `GET /org/access-policy` · organization scope · needs `organization:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, UNAUTHENTICATED
+         */
+        accessPolicy(input?: OrgAccessPolicyInput, options?: CallOptions): Promise<OrgAccessPolicyOutput>;
+        /**
+         * Choose who may be invited: any email, or only approved email domains.
+         *
+         * `PUT /org/access-policy` · organization scope · needs `organization:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, UNAUTHENTICATED
+         */
+        setAccessPolicy(input: OrgSetAccessPolicyInput, options?: CallOptions): Promise<OrgSetAccessPolicyOutput>;
+    };
+    deployKeys: {
+        /**
+         * List the project's deploy keys (for CI), with when each was last used.
+         *
+         * `GET /projects/{project}/deploy-keys` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: DeployKeysListInput, options?: CallOptions): Promise<DeployKeysListOutput>;
+        /**
+         * Create a deploy key for CI; its token is returned once.
+         *
+         * `POST /projects/{project}/deploy-keys` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        create(input: DeployKeysCreateInput, options?: CallOptions): Promise<DeployKeysCreateOutput>;
+        /**
+         * Revoke a deploy key; CI using it stops deploying.
+         *
+         * `DELETE /projects/{project}/deploy-keys/{key}` · project scope · needs `credentials:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, KEY_NOT_FOUND, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        revoke(input: DeployKeysRevokeInput, options?: CallOptions): Promise<DeployKeysRevokeOutput>;
+    };
+    apiKeys: {
+        /**
+         * List the project's API keys and approved MCP connections, with their roles, scopes and customers.
+         *
+         * `GET /projects/{project}/api-keys` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        list(input: ApiKeysListInput, options?: CallOptions): Promise<ApiKeysListOutput>;
+        /**
+         * Create an API key with roles, scopes and which customers it may act for; its token is returned once.
+         *
+         * `POST /projects/{project}/api-keys` · project scope · needs `credentials:manage`
+         * Errors: FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        create(input: ApiKeysCreateInput, options?: CallOptions): Promise<ApiKeysCreateOutput>;
+        /**
+         * Revoke an API key or an approved MCP connection; it stops on its next call.
+         *
+         * `DELETE /projects/{project}/api-keys/{key}` · project scope · needs `credentials:manage`
+         * Destructive: requires `confirm: true`.
+         * Errors: CONFIRMATION_REQUIRED, FORBIDDEN, INTERNAL, INVALID_INPUT, INVALID_REQUEST_ORIGIN, KEY_NOT_FOUND, PROJECT_HAS_SEVERAL_TARGETS, PROJECT_NOT_FOUND, UNAUTHENTICATED
+         */
+        revoke(input: ApiKeysRevokeInput, options?: CallOptions): Promise<ApiKeysRevokeOutput>;
+    };
+}
+//# sourceMappingURL=operations.d.ts.map