@lessly/sdk-app 15.0.1 → 15.1.0

package/dist/{client.gen-ClvT4E7P.d.ts → client.gen-BeFnNb6g.d.ts}

@@ -15225,6 +15225,2619 @@ interface TrackingSnippetsGetOutput {
     scriptUrl: string;
     minimalSnippet: string;
 }
+interface UsersApikeysCreateInput {
+    /**
+     * A label only humans read — which backend or environment holds this key.
+     */
+    name: string;
+    /**
+     * 'server' mints a SECRET key (usk_…) for the Product's backend — returned exactly once and stored hashed. 'publishable' mints a non-secret key (upk_…) that identifies this product in browser flows and stays readable.
+     */
+    type: ("server" | "publishable");
+}
+interface UsersApikeysCreateOutput {
+    id: string;
+    key: string;
+    name: string;
+    type: ("server" | "publishable");
+    value: (string | null);
+    prefix: string;
+    createdAt: string;
+    revokedAt: (string | null);
+}
+interface UsersApikeysListInput {
+}
+interface UsersApikeysListOutput {
+    keys: {
+        id: string;
+        name: string;
+        type: ("server" | "publishable");
+        value: (string | null);
+        prefix: string;
+        createdAt: string;
+        revokedAt: (string | null);
+    }[];
+}
+interface UsersApikeysRevokeInput {
+    /**
+     * Id of the key to revoke. Revocation is immediate and final.
+     */
+    id: string;
+}
+interface UsersApikeysRevokeOutput {
+    id: string;
+    revoked: true;
+}
+interface UsersAuditListInput {
+    /**
+     * Page size, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * ISO-8601 lower bound (inclusive) on the event timestamp.
+     */
+    since?: string;
+    /**
+     * ISO-8601 upper bound (exclusive) on the event timestamp.
+     */
+    until?: string;
+    /**
+     * Exact action to filter by, e.g. 'user.banned'. Omit for all actions.
+     */
+    action?: string;
+    /**
+     * Opaque cursor from a previous response's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Exact id of the audited target, e.g. a user id.
+     */
+    targetId?: string;
+    /**
+     * Target kind to filter by, e.g. 'user'.
+     */
+    targetType?: string;
+}
+interface UsersAuditListOutput {
+    events: {
+        id: string;
+        ip: (string | null);
+        action: string;
+        actorId: (string | null);
+        metadata: {
+            [k: string]: unknown;
+        };
+        targetId: (string | null);
+        actorType: ("operator" | "system" | "end_user");
+        createdAt: string;
+        productId: string;
+        userAgent: (string | null);
+        targetType: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersConfigGetInput {
+}
+interface UsersConfigGetOutput {
+    mfa: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes: number;
+    };
+    email: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds: number;
+    };
+    oauth: {
+        providers: {
+            github: UsersConfigGetOutputGoogle;
+            google: UsersConfigGetOutputGoogle;
+        };
+    };
+    hosted: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor: string;
+    };
+    invite: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes: number;
+    };
+    status: ("active" | "paused");
+    captcha: {
+        enabled: boolean;
+        siteKey: (string | null);
+        provider: "turnstile";
+        riskElevated: boolean;
+    };
+    recovery: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes: number;
+    };
+    testMode: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled: boolean;
+    };
+    waitlist: {
+        /**
+         * The embeddable widget’s copy and colours.
+         */
+        widget: {
+            /**
+             * Heading above the widget form.
+             */
+            title: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours: number;
+    };
+    productId: string;
+    retention: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    protection: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow: number;
+    };
+    signupMode: ("public" | "invite-only" | "waitlist");
+    emailChange: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours: number;
+    };
+    notifications: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged: boolean;
+    };
+    allowedOrigins: string[];
+    passwordPolicy: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase: boolean;
+    };
+    sessionTtlHours: number;
+    lifecycleBlocked: boolean;
+    lifecycleArchived: boolean;
+    refreshSlidingDays: number;
+    refreshAbsoluteDays: number;
+    redirectUriAllowlist: string[];
+    accessTokenTtlMinutes: number;
+    captchaSecretConfigured: boolean;
+}
+interface UsersConfigGetOutputGoogle {
+    enabled: boolean;
+    clientId: (string | null);
+    secretConfigured: boolean;
+}
+interface UsersConfigUpsertInput {
+    /**
+     * MFA settings: backup-code batch size, the operator-reset delay, how fresh authentication must be to enroll, and the second-factor lockout ceilings. Merged field-by-field.
+     */
+    mfa?: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required?: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount?: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours?: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes?: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts?: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts?: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes?: number;
+    };
+    /**
+     * Email OTP / magic-link settings. Merged field-by-field. Set `email.from` to a sender on a domain verified in this product's mail toolkit — until then the email strategies are not offered.
+     */
+    email?: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from?: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled?: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl?: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled?: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes?: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap?: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts?: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds?: number;
+    };
+    /**
+     * OAuth provider credentials and switches, per provider. Merged field-by-field. A provider is offered as a sign-in strategy only when it is enabled AND a full client id + secret pair resolves — from here, or from the deployment's shared development credentials.
+     */
+    oauth?: {
+        github?: UsersConfigUpsertInputGoogle;
+        /**
+         * Google sign-in credentials and switch.
+         */
+        google?: {
+            /**
+             * Offer this provider as a sign-in strategy.
+             */
+            enabled?: boolean;
+            /**
+             * The OAuth client id from the provider console. Pass null to clear it and fall back to the deployment's shared development credentials, if it has any.
+             */
+            clientId?: (string | null);
+            /**
+             * WRITE-ONLY. The OAuth client secret; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+             */
+            clientSecret?: (string | null);
+        };
+    };
+    /**
+     * The hosted sign-in / sign-up / recovery pages: whether they are served, and the product name, logo, colours and footer links they render with. Merged field-by-field, so setting one colour leaves the rest alone.
+     */
+    hosted?: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled?: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl?: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl?: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor?: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText?: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl?: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor?: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName?: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius?: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor?: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor?: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor?: string;
+    };
+    /**
+     * Invite lifetime and re-invite cooldown. Merged field-by-field.
+     */
+    invite?: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays?: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes?: number;
+    };
+    /**
+     * Captcha (Cloudflare Turnstile) settings for flow creation. Merged field-by-field.
+     */
+    captcha?: {
+        /**
+         * Require a captcha token when a flow attempt is created.
+         */
+        enabled?: boolean;
+        /**
+         * The public site key the Product renders the widget with.
+         */
+        siteKey?: (string | null);
+        /**
+         * WRITE-ONLY. The provider secret used server-side to verify tokens; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+         */
+        secretKey?: (string | null);
+        /**
+         * Demand a captcha from an identifier that is currently accumulating failed attempts, even when `enabled` is false. Default true.
+         */
+        riskElevated?: boolean;
+    };
+    /**
+     * Password-recovery settings (whether it is offered, how long a reset link lives). Merged field-by-field.
+     */
+    recovery?: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled?: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes?: number;
+    };
+    /**
+     * Test mode: whether this product may have TEST USERS — accounts that are excluded from metering, kept out of the default directory listing, never really emailed, and (when the deployment sets one) able to sign in with the fixed magic OTP. REFUSED on a production deployment. Merged field-by-field.
+     */
+    testMode?: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled?: boolean;
+    };
+    /**
+     * Waitlist settings: the double-opt-in toggle, how long a pending entry is retained before the sweep erases it, the confirmation link lifetime, and the embeddable widget’s copy and colours. Merged field-by-field, including inside `widget`.
+     */
+    waitlist?: {
+        /**
+         * The embeddable widget’s copy and colours. Merged field-by-field, so setting one line leaves the rest alone.
+         */
+        widget?: {
+            /**
+             * Heading above the widget form.
+             */
+            title?: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl?: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor?: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel?: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText?: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description?: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion?: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage?: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn?: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays?: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours?: number;
+    };
+    /**
+     * How long DEAD rows are kept before the retention sweep removes them: spent one-time tokens, expired flow attempts, expired sessions and their refresh tokens. These are grace periods on top of expiry, never lifetimes — an unswept expired row is inert. Merged field-by-field.
+     */
+    retention?: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays?: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays?: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays?: number;
+    };
+    /**
+     * Rate limits, lockout and breached-password settings. Merged field-by-field.
+     */
+    protection?: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled?: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes?: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts?: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow?: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes?: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow?: number;
+    };
+    /**
+     * How end users may join this product: 'public' (anyone), 'invite-only', or 'waitlist'. Default 'public'.
+     */
+    signupMode?: ("public" | "invite-only" | "waitlist");
+    /**
+     * Email-change settings: confirmation lifetime, the old address's revert window, the post-revert cooldown and the operator-override delay. Merged field-by-field.
+     */
+    emailChange?: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled?: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays?: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays?: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours?: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours?: number;
+    };
+    /**
+     * Which security notification emails this product sends. All on by default. Merged field-by-field.
+     */
+    notifications?: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice?: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange?: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation?: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged?: boolean;
+    };
+    /**
+     * Browser origins allowed to drive this product's end-user flows, up to 20. Scheme + host + port only, matched exactly. Replaces the whole list. Empty means "no browser origin" once this product has a publishable key.
+     *
+     * @maxItems 20
+     */
+    allowedOrigins?: [] | [string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string];
+    /**
+     * Password rules for this product. Merged field-by-field into the current policy.
+     */
+    passwordPolicy?: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength?: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber?: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol?: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase?: boolean;
+    };
+    /**
+     * End-user session lifetime in hours. Default 720 (30 days).
+     */
+    sessionTtlHours?: number;
+    /**
+     * Inactivity window of a session in days — every refresh slides it forward. Default 30.
+     */
+    refreshSlidingDays?: number;
+    /**
+     * Hard time-box of a session in days, counted from sign-in and never extended. Default 365.
+     */
+    refreshAbsoluteDays?: number;
+    /**
+     * Callback URIs the browser code handoff may deliver a one-time authorization code to, up to 20. Matched EXACTLY — no wildcards, no prefixes, no fragments — so list every callback in full. Replaces the whole list.
+     *
+     * @maxItems 20
+     */
+    redirectUriAllowlist?: [] | [string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string];
+    /**
+     * Access JWT lifetime in minutes, 5-60. Default 10. Short on purpose: a revoked session dies within one TTL.
+     */
+    accessTokenTtlMinutes?: number;
+}
+/**
+ * GitHub sign-in credentials and switch.
+ */
+interface UsersConfigUpsertInputGoogle {
+    /**
+     * Offer this provider as a sign-in strategy.
+     */
+    enabled?: boolean;
+    /**
+     * The OAuth client id from the provider console. Pass null to clear it and fall back to the deployment's shared development credentials, if it has any.
+     */
+    clientId?: (string | null);
+    /**
+     * WRITE-ONLY. The OAuth client secret; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+     */
+    clientSecret?: (string | null);
+}
+interface UsersConfigUpsertOutput {
+    mfa: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes: number;
+    };
+    email: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds: number;
+    };
+    oauth: {
+        providers: {
+            github: UsersConfigUpsertOutputGoogle;
+            google: UsersConfigUpsertOutputGoogle;
+        };
+    };
+    hosted: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor: string;
+    };
+    invite: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes: number;
+    };
+    status: ("active" | "paused");
+    captcha: {
+        enabled: boolean;
+        siteKey: (string | null);
+        provider: "turnstile";
+        riskElevated: boolean;
+    };
+    recovery: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes: number;
+    };
+    testMode: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled: boolean;
+    };
+    waitlist: {
+        /**
+         * The embeddable widget’s copy and colours.
+         */
+        widget: {
+            /**
+             * Heading above the widget form.
+             */
+            title: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours: number;
+    };
+    productId: string;
+    retention: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    protection: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow: number;
+    };
+    signupMode: ("public" | "invite-only" | "waitlist");
+    emailChange: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours: number;
+    };
+    notifications: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged: boolean;
+    };
+    allowedOrigins: string[];
+    passwordPolicy: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase: boolean;
+    };
+    sessionTtlHours: number;
+    lifecycleBlocked: boolean;
+    lifecycleArchived: boolean;
+    refreshSlidingDays: number;
+    refreshAbsoluteDays: number;
+    redirectUriAllowlist: string[];
+    accessTokenTtlMinutes: number;
+    captchaSecretConfigured: boolean;
+}
+interface UsersConfigUpsertOutputGoogle {
+    enabled: boolean;
+    clientId: (string | null);
+    secretConfigured: boolean;
+}
+interface UsersFactorsListInput {
+    /**
+     * The end user whose enrolled factors to list.
+     */
+    userId: string;
+}
+interface UsersFactorsListOutput {
+    factors: {
+        type: ("totp" | "backup_codes");
+        status: ("unverified" | "verified");
+        createdAt: string;
+        remaining: (number | null);
+        lastUsedAt: (string | null);
+        verifiedAt: (string | null);
+    }[];
+}
+interface UsersFactorsResetInput {
+    /**
+     * What identity proofing was done and under which ticket. Recorded verbatim in the audit row — this is the whole point of the tool being audited.
+     */
+    reason: string;
+    /**
+     * The end user whose second factor is being reset.
+     */
+    userId: string;
+}
+interface UsersFactorsResetOutput {
+    requestId: string;
+    scheduledFor: string;
+}
+interface UsersKeysListInput {
+}
+interface UsersKeysListOutput {
+    keys: {
+        /**
+         * The RFC 7638 JWK thumbprint — what a token header carries.
+         */
+        kid: string;
+        /**
+         * `standby` is pre-generated and not published; `current` signs; `retired` is still in JWKS for the overlap; `revoked` was evicted.
+         */
+        state: ("standby" | "current" | "retired" | "revoked");
+        createdAt: string;
+        retiredAt: (string | null);
+        revokedAt: (string | null);
+        /**
+         * When a retired key leaves JWKS. Null unless the key is retired.
+         */
+        overlapExpiresAt: (string | null);
+    }[];
+}
+interface UsersKeysRevokeInput {
+    /**
+     * The key to evict, as listed by users_keys_list.
+     */
+    kid: string;
+    /**
+     * Why. Goes into the audit row and is the only account of the incident it keeps.
+     */
+    reason?: string;
+    /**
+     * Sign every end user of this product out as well. Defaults to TRUE: a compromised signing key could have minted any of those sessions. Pass false ONLY when you know no forged token was ever issued.
+     */
+    revokeSessions?: boolean;
+}
+interface UsersKeysRevokeOutput {
+    /**
+     * The fresh key minted or promoted in its place.
+     */
+    currentKid: string;
+    revokedKid: string;
+    sessionsRevoked: number;
+}
+interface UsersKeysRotateInput {
+}
+interface UsersKeysRotateOutput {
+    /**
+     * The key signing from now on.
+     */
+    currentKid: string;
+    /**
+     * The key just retired. Null if there was none.
+     */
+    previousKid: (string | null);
+    /**
+     * When the retired key stops verifying. Both kids are in JWKS until then.
+     */
+    overlapExpiresAt: (string | null);
+}
+interface UsersOpsRetentionGetInput {
+}
+interface UsersOpsRetentionGetOutput {
+    /**
+     * The single retention job. There is exactly one — it replaced the sessions reaper and the waitlist sweep.
+     */
+    sweep: {
+        /**
+         * Its schedule, in cron syntax.
+         */
+        cron: string;
+        /**
+         * What one pass removes, in the order it removes it.
+         */
+        removes: string[];
+        /**
+         * The Synapse cron function that performs every sweep below.
+         */
+        functionId: string;
+    };
+    /**
+     * This product’s EFFECTIVE windows — what it configured, with the documented default filling anything it did not.
+     */
+    windows: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    /**
+     * The documented defaults, so a reader can tell a deliberate window from an inherited one without a second call.
+     */
+    defaults: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    /**
+     * What this service deliberately keeps forever, and why. Reading a retention surface that lists only what IS deleted is how an operator concludes the audit log ages out — it does not.
+     */
+    notSwept: {
+        why: string;
+        what: string;
+    }[];
+    /**
+     * How long a still-PENDING waitlist entry is kept. It lives in the `waitlist` config block rather than in `retention`, because it is not a grace period on a dead row: a pending entry never expires on its own, so this window is the whole of what makes it go away — and the sweep ERASES it (audit row, `users/waitlist-entry.erased`) rather than deleting it.
+     */
+    waitlistRetentionDays: number;
+}
+interface UsersOpsSloGetInput {
+}
+interface UsersOpsSloGetOutput {
+    /**
+     * Every published objective and its verdict for this window.
+     */
+    slos: {
+        /**
+         * Stable id of the objective — the key to quote in a runbook.
+         */
+        id: string;
+        /**
+         * Short human name.
+         */
+        title: string;
+        /**
+         * `insufficient_data` is NOT `ok`: it means the window is too quiet to judge, which an operator reading a dashboard must be able to tell apart from health.
+         */
+        status: ("ok" | "breached" | "insufficient_data");
+        /**
+         * How many events went into `observed`.
+         */
+        samples: number;
+        /**
+         * What this replica sees in the CURRENT window, in the same unit as `objective`. NULL when nothing was observed.
+         */
+        observed: (number | null);
+        /**
+         * The `users/alert.raised` kind a breach of this objective fires, for wiring an alert route.
+         */
+        alertKind: string;
+        /**
+         * The published objective, as a ratio in 0..1.
+         */
+        objective: number;
+        /**
+         * Which side of `objective` is healthy: a success rate is at-least, an error rate at-most.
+         */
+        comparator: ("at-least" | "at-most");
+        /**
+         * Below this many samples the ratio is not judged at all — a quiet window is not an outage.
+         */
+        minSamples: number;
+        /**
+         * What is counted, and what is deliberately NOT counted.
+         */
+        description: string;
+        /**
+         * The window the observation is computed over.
+         */
+        windowSeconds: number;
+    }[];
+    /**
+     * These numbers come from ONE replica’s in-process window, not from the whole deployment. Treat them as a spot check, not as the fleet’s error budget.
+     */
+    scope: "replica";
+    /**
+     * The current window, exactly as the alert hook sees it.
+     */
+    window: {
+        mail: {
+            /**
+             * Auth emails handed to mail (a cooldown or daily cap never reaches this).
+             */
+            total: number;
+            /**
+             * Of those, the ones mail would not take.
+             */
+            failures: number;
+            /**
+             * failures / total. NULL when nothing was sent.
+             */
+            failureRate: (number | null);
+        };
+        signIn: {
+            /**
+             * SETTLED flow attempts — completed or failed. A pending one is neither.
+             */
+            total: number;
+            /**
+             * Of those, the ones that failed.
+             */
+            failures: number;
+            /**
+             * completed / settled. NULL, never 0, when nothing settled.
+             */
+            successRate: (number | null);
+        };
+        refresh: {
+            /**
+             * Refresh attempts.
+             */
+            total: number;
+            /**
+             * Failed refreshes, detected reuse included.
+             */
+            errors: number;
+            /**
+             * Detected token REUSE — theft, counted rather than rated.
+             */
+            reuses: number;
+            /**
+             * errors / total. NULL when nothing was refreshed.
+             */
+            errorRate: (number | null);
+        };
+        /**
+         * Length of the evaluation window.
+         */
+        windowSeconds: number;
+        /**
+         * ISO start of the window these numbers belong to.
+         */
+        windowStartedAt: string;
+        /**
+         * This product’s OWN trailing sign-in failure rate, over CLOSED windows. What the anomaly signal compares the live window against — NULL until at least one window has closed.
+         */
+        signInFailureBaseline: (number | null);
+    };
+}
+interface UsersSessionsGetInput {
+    /**
+     * The session to read.
+     */
+    sessionId: string;
+}
+interface UsersSessionsGetOutput {
+    id: string;
+    ip: (string | null);
+    /**
+     * `aal2` only if a verified second factor completed.
+     */
+    aal: ("aal1" | "aal2");
+    /**
+     * The factors this session was established with.
+     */
+    amr: string[];
+    status: ("active" | "revoked");
+    userId: string;
+    createdAt: string;
+    expiresAt: string;
+    revokedAt: (string | null);
+    userAgent: (string | null);
+    revokedReason: (string | null);
+    /**
+     * The operator behind an impersonated session, or null for an ordinary one.
+     */
+    impersonatedBy: (string | null);
+    lastRefreshedAt: (string | null);
+    absoluteExpiresAt: string;
+}
+interface UsersSessionsImpersonateInput {
+    /**
+     * Why. Recorded in the audit trail and shown to the user in the notification email — write what you would want to read in an incident review (a ticket number and one sentence).
+     */
+    reason: string;
+    /**
+     * The end user to sign in as.
+     */
+    userId: string;
+}
+interface UsersSessionsImpersonateOutput {
+    userId: string;
+    /**
+     * When the session dies. It cannot be extended or refreshed.
+     */
+    expiresAt: string;
+    /**
+     * Seconds until the access token expires.
+     */
+    expiresIn: number;
+    sessionId: string;
+    /**
+     * The access JWT of the impersonated session. There is NO refresh token.
+     */
+    accessToken: string;
+}
+interface UsersSessionsListInput {
+    /**
+     * The end user whose sessions to list.
+     */
+    userId: string;
+}
+interface UsersSessionsListOutput {
+    sessions: {
+        id: string;
+        ip: (string | null);
+        status: ("active" | "revoked");
+        userId: string;
+        createdAt: string;
+        expiresAt: string;
+        revokedAt: (string | null);
+        userAgent: (string | null);
+        lastRefreshedAt: (string | null);
+        absoluteExpiresAt: string;
+    }[];
+}
+interface UsersSessionsRevokeInput {
+    /**
+     * Revoke every session of this user.
+     */
+    userId?: string;
+    /**
+     * Revoke exactly this session.
+     */
+    sessionId?: string;
+}
+interface UsersSessionsRevokeOutput {
+    revoked: number;
+}
+interface UsersStatsGetInput {
+    /**
+     * Look-back window for the TIME-BOUNDED numbers — the sign-in counters, the abuse block and `sessions.createdInWindow`: '24h', '7d', '30d' or '90d'. Default '7d'. The user, live-session and factor populations are point-in-time and ignore it.
+     */
+    window?: ("24h" | "7d" | "30d" | "90d");
+}
+interface UsersStatsGetOutput {
+    /**
+     * Abuse signals over the window. Denied origins are deliberately absent: that check fires on unauthenticated traffic and is served by logs and metrics, not by per-product audit rows.
+     */
+    abuse: {
+        /**
+         * Accounts locked by a failed-attempt ceiling — password and second factor both.
+         */
+        lockouts: number;
+        /**
+         * The subset of `lockouts` caused by the SECOND-factor ceiling.
+         */
+        mfaLockouts: number;
+        /**
+         * Mirrors `signIns.failed`, so the abuse block reads on its own.
+         */
+        failedSignIns: number;
+        /**
+         * Breach-corpus matches against a user's password.
+         */
+        pwnedPasswordsSeen: number;
+        /**
+         * Refresh tokens spent twice outside the grace window — theft, not staleness. Each one revoked a whole session family.
+         */
+        refreshReuseDetected: number;
+    };
+    /**
+     * ISO start of that window — the `created_at` floor every counter used.
+     */
+    since: string;
+    /**
+     * Point-in-time directory populations by DERIVED status — `user` has no status column, these are computed from `waitlisted` and the ban/delete/erase timestamps.
+     */
+    users: {
+        /**
+         * Every directory row, GDPR tombstones included.
+         */
+        total: number;
+        /**
+         * Full accounts: not waitlisted, not banned, not deleted, not erased.
+         */
+        active: number;
+        /**
+         * Banned accounts that are still present.
+         */
+        banned: number;
+        /**
+         * GDPR-erased tombstones: the id survives, the PII does not.
+         */
+        erased: number;
+        /**
+         * SOFT-deleted and still recoverable — not erased.
+         */
+        deleted: number;
+        /**
+         * Waitlist signups with no credential yet.
+         */
+        waitlisted: number;
+    };
+    /**
+     * The window the time-bounded numbers were computed over.
+     */
+    window: ("24h" | "7d" | "30d" | "90d");
+    /**
+     * Enrolled second factors (TOTP and backup-code batches).
+     */
+    factors: {
+        /**
+         * VERIFIED second factors; an unverified enrollment gates nothing.
+         */
+        verified: number;
+        /**
+         * Distinct users holding at least one verified factor.
+         */
+        usersWithFactor: number;
+    };
+    /**
+     * Sign-in outcomes over the window, from the audit log.
+     */
+    signIns: {
+        /**
+         * Failed sign-in attempts in the window.
+         */
+        failed: number;
+        /**
+         * Successful sign-ins in the window.
+         */
+        succeeded: number;
+        /**
+         * succeeded / (succeeded + failed), 4 decimals. NULL — never 0 — when nothing was attempted: an idle window and a totally broken one are opposite facts.
+         */
+        successRate: (number | null);
+    };
+    /**
+     * Device sessions.
+     */
+    sessions: {
+        /**
+         * Live right now: active, unrevoked and inside BOTH the sliding and absolute expiry.
+         */
+        active: number;
+        /**
+         * Sessions established since `since`.
+         */
+        createdInWindow: number;
+    };
+}
+interface UsersUsersBanInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersBanOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersBanOutputPublicMetadata;
+    unsafeMetadata: UsersUsersBanOutputPublicMetadata;
+    privateMetadata: UsersUsersBanOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersBanOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersCreateInput {
+    /**
+     * The user's display name.
+     */
+    name?: string;
+    /**
+     * URL of the user's avatar image.
+     */
+    imageUrl?: string;
+    /**
+     * Optional credential to store for this user. Hashes only — this toolkit never accepts a plaintext password. Nothing verifies it until Phase 2.
+     */
+    password?: {
+        /**
+         * A PHC-format password hash (e.g. an argon2id string) to store as-is. Never send a plaintext password.
+         */
+        phcHash?: string;
+        /**
+         * An imported hash from another system, to be lazily rehashed on the first successful sign-in (Phase 2).
+         */
+        foreignHash?: string;
+        /**
+         * Algorithm of `foreignHash`. Required when `foreignHash` is set.
+         */
+        foreignHashAlgo?: ("bcrypt" | "argon2" | "pbkdf2" | "scrypt");
+    };
+    /**
+     * Create this user as a TEST FIXTURE: excluded from metering (it never counts toward retained-users), hidden from the default users_users_list view, never really emailed, and — when the deployment configures one — able to sign in with the fixed magic OTP. REFUSED unless this product has test mode enabled, which a production deployment cannot do. There is no way to set or clear this later. Default false.
+     */
+    testUser?: boolean;
+    /**
+     * Create the user as a waitlist signup: no way in until promoted. Default false.
+     */
+    waitlisted?: boolean;
+    /**
+     * The email addresses that reach this user. At least one is required.
+     *
+     * @minItems 1
+     */
+    identifiers: [
+        {
+            /**
+             * Identifier kind. Only 'email' exists in this phase.
+             */
+            type: "email";
+            /**
+             * The email address. Stored canonicalised (lowercase, NFC) plus raw for display.
+             */
+            value: string;
+            /**
+             * Record the identifier as already verified (use for trusted imports). Only ONE verified copy of a value may exist per product; unverified duplicates are allowed. Default false.
+             */
+            verified?: boolean;
+            /**
+             * Mark as the primary identifier of its type. The first identifier of a type defaults to primary.
+             */
+            isPrimary?: boolean;
+        },
+        ...({
+            /**
+             * Identifier kind. Only 'email' exists in this phase.
+             */
+            type: "email";
+            /**
+             * The email address. Stored canonicalised (lowercase, NFC) plus raw for display.
+             */
+            value: string;
+            /**
+             * Record the identifier as already verified (use for trusted imports). Only ONE verified copy of a value may exist per product; unverified duplicates are allowed. Default false.
+             */
+            verified?: boolean;
+            /**
+             * Mark as the primary identifier of its type. The first identifier of a type defaults to primary.
+             */
+            isPrimary?: boolean;
+        })[]
+    ];
+    /**
+     * Force a password reset before the user can sign in (use for unverifiable imported hashes). Default false.
+     */
+    requiresReset?: boolean;
+    /**
+     * Metadata the end user may READ and that may flow into the JWT. Management-plane write only.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    unsafeMetadata?: UsersUsersCreateInputPublicMetadata;
+    privateMetadata?: UsersUsersCreateInputPublicMetadata1;
+}
+/**
+ * Metadata the end user may WRITE in a later phase. Never trust it for authorization.
+ */
+interface UsersUsersCreateInputPublicMetadata {
+    [k: string]: unknown;
+}
+/**
+ * Metadata visible to the management plane only. Never exposed to the end user.
+ */
+interface UsersUsersCreateInputPublicMetadata1 {
+    [k: string]: unknown;
+}
+interface UsersUsersCreateOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersCreateOutputPublicMetadata;
+    unsafeMetadata: UsersUsersCreateOutputPublicMetadata;
+    privateMetadata: UsersUsersCreateOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersCreateOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersDeleteInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersDeleteOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersDeleteOutputPublicMetadata;
+    unsafeMetadata: UsersUsersDeleteOutputPublicMetadata;
+    privateMetadata: UsersUsersDeleteOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersDeleteOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersEraseInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersEraseOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersEraseOutputPublicMetadata;
+    unsafeMetadata: UsersUsersEraseOutputPublicMetadata;
+    privateMetadata: UsersUsersEraseOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersEraseOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersExportInput {
+    /**
+     * Rows per page, 1-500. Default 100.
+     */
+    limit?: number;
+    /**
+     * Case-insensitive substring match against the user's identifiers (email) and name.
+     */
+    query?: string;
+    /**
+     * Opaque cursor from the previous page's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by status: 'active', 'banned' or 'waitlisted'. Omit for all.
+     */
+    status?: ("active" | "banned" | "waitlisted");
+    /**
+     * Include soft-deleted users. Default false.
+     */
+    includeDeleted?: boolean;
+}
+interface UsersUsersExportOutput {
+    count: number;
+    users: {
+        id: string;
+        name: (string | null);
+        bannedAt: (string | null);
+        erasedAt: (string | null);
+        imageUrl: (string | null);
+        testUser: boolean;
+        createdAt: string;
+        deletedAt: (string | null);
+        productId: string;
+        updatedAt: string;
+        waitlisted: boolean;
+        identifiers: {
+            id: string;
+            type: "email";
+            value: string;
+            isPrimary: boolean;
+            verifiedAt: (string | null);
+            valueCanonical: string;
+            verificationStatus: ("unverified" | "verified" | "expired");
+        }[];
+        lockedUntil: (string | null);
+        lastSignInAt: (string | null);
+        requiresReset: boolean;
+        publicMetadata: UsersUsersExportOutputPublicMetadata;
+        unsafeMetadata: UsersUsersExportOutputPublicMetadata;
+        privateMetadata: UsersUsersExportOutputPublicMetadata;
+        emailChangeLockedUntil: (string | null);
+    }[];
+    exportedAt: string;
+    nextCursor: (string | null);
+}
+interface UsersUsersExportOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersGetInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersGetOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersGetOutputPublicMetadata;
+    unsafeMetadata: UsersUsersGetOutputPublicMetadata;
+    privateMetadata: UsersUsersGetOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersGetOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersImportInput {
+    /**
+     * The users to import, at most 500 per call — batch client-side beyond that. Each row: identifiers (email), optional profile, optional password HASH, optional flags.
+     *
+     * @minItems 1
+     * @maxItems 500
+     */
+    users: [unknown, ...(unknown)[]];
+}
+interface UsersUsersImportOutput {
+    failed: number;
+    created: number;
+    results: {
+        row: number;
+        reason: (string | null);
+        status: ("created" | "skipped" | "failed");
+        userId: (string | null);
+    }[];
+    skipped: number;
+    requested: number;
+}
+interface UsersUsersInviteInput {
+    /**
+     * The invitee's display name.
+     */
+    name?: string;
+    /**
+     * The address to invite. Stored canonicalised (lowercase, NFC) plus raw for display.
+     */
+    email: string;
+    /**
+     * Metadata the end user may READ and that may flow into the JWT.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    /**
+     * Metadata visible to the management plane only. Never exposed to the end user.
+     */
+    privateMetadata?: {
+        [k: string]: unknown;
+    };
+}
+interface UsersUsersInviteOutput {
+    mailed: boolean;
+    userId: string;
+    created: boolean;
+    expiresAt: string;
+}
+interface UsersUsersListInput {
+    /**
+     * Page size, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * Case-insensitive substring match against the user's identifiers (email) and name.
+     */
+    query?: string;
+    /**
+     * Opaque cursor from a previous response's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by status: 'active' (not banned, not waitlisted), 'banned', or 'waitlisted'. Omit for all.
+     */
+    status?: ("active" | "banned" | "waitlisted");
+    /**
+     * Include soft-deleted users. Default false — deleted users are hidden.
+     */
+    includeDeleted?: boolean;
+    /**
+     * Include TEST USERS. Default false: a test user is a fixture, not a customer — it is excluded from metering and from this listing for the same reason. Ask for it explicitly when you are debugging the fixtures themselves.
+     */
+    includeTestUsers?: boolean;
+    /**
+     * Include waitlist signups. Default false: a waitlisted row is somebody who ASKED to join and cannot sign in, so it is not part of the directory an operator browses. Use `status: "waitlisted"` to see only them, or `users_waitlist_list` for the funnel.
+     */
+    includeWaitlisted?: boolean;
+}
+interface UsersUsersListOutput {
+    users: {
+        id: string;
+        name: (string | null);
+        bannedAt: (string | null);
+        erasedAt: (string | null);
+        imageUrl: (string | null);
+        testUser: boolean;
+        createdAt: string;
+        deletedAt: (string | null);
+        productId: string;
+        updatedAt: string;
+        waitlisted: boolean;
+        identifiers: {
+            id: string;
+            type: "email";
+            value: string;
+            isPrimary: boolean;
+            verifiedAt: (string | null);
+            valueCanonical: string;
+            verificationStatus: ("unverified" | "verified" | "expired");
+        }[];
+        lockedUntil: (string | null);
+        lastSignInAt: (string | null);
+        requiresReset: boolean;
+        publicMetadata: UsersUsersListOutputPublicMetadata;
+        unsafeMetadata: UsersUsersListOutputPublicMetadata;
+        privateMetadata: UsersUsersListOutputPublicMetadata;
+        emailChangeLockedUntil: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersUsersListOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersSetPrimaryIdentifierInput {
+    /**
+     * The address to make primary. Must not already belong, verified, to another user of this product.
+     */
+    email: string;
+    /**
+     * What identity proofing was done and under which ticket. Recorded verbatim in the audit row — this is the whole point of the tool being audited.
+     */
+    reason: string;
+    /**
+     * The user whose primary email address is being replaced.
+     */
+    userId: string;
+}
+interface UsersUsersSetPrimaryIdentifierOutput {
+    requestId: string;
+    scheduledFor: string;
+}
+interface UsersUsersUnbanInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersUnbanOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersUnbanOutputPublicMetadata;
+    unsafeMetadata: UsersUsersUnbanOutputPublicMetadata;
+    privateMetadata: UsersUsersUnbanOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersUnbanOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersUpdateInput {
+    /**
+     * The user's display name. Pass null to clear.
+     */
+    name?: (string | null);
+    /**
+     * The user to update.
+     */
+    userId: string;
+    /**
+     * URL of the user's avatar image. Pass null to clear.
+     */
+    imageUrl?: (string | null);
+    /**
+     * Whether the user is still a waitlist signup.
+     */
+    waitlisted?: boolean;
+    /**
+     * ISO-8601 timestamp of a temporary, self-healing lockout — the failed-attempt ceiling sets it and it expires on its own. Pass null to unlock the account immediately (audited as `user.unlocked`).
+     */
+    lockedUntil?: (string | null);
+    /**
+     * Whether the user must reset their password before signing in.
+     */
+    requiresReset?: boolean;
+    /**
+     * REPLACES the whole public metadata bag. Management-plane write, end-user read.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    unsafeMetadata?: UsersUsersUpdateInputPublicMetadata;
+    privateMetadata?: UsersUsersUpdateInputPublicMetadata1;
+}
+/**
+ * REPLACES the whole unsafe metadata bag. End-user writable in a later phase; never authoritative.
+ */
+interface UsersUsersUpdateInputPublicMetadata {
+    [k: string]: unknown;
+}
+/**
+ * REPLACES the whole private metadata bag. Management plane only.
+ */
+interface UsersUsersUpdateInputPublicMetadata1 {
+    [k: string]: unknown;
+}
+interface UsersUsersUpdateOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersUpdateOutputPublicMetadata;
+    unsafeMetadata: UsersUsersUpdateOutputPublicMetadata;
+    privateMetadata: UsersUsersUpdateOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersUpdateOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersWaitlistEraseInput {
+    /**
+     * The waitlisted user whose entry and directory row to erase.
+     */
+    userId: string;
+}
+interface UsersWaitlistEraseOutput {
+    erased: boolean;
+}
+interface UsersWaitlistFunnelInput {
+}
+interface UsersWaitlistFunnelOutput {
+    total: number;
+    invited: number;
+    pending: number;
+    withdrawn: number;
+    registered: number;
+    unconfirmed: number;
+}
+interface UsersWaitlistImportInput {
+    /**
+     * The legacy signups to import, at most 500 per call — batch client-side beyond that.
+     *
+     * @minItems 1
+     * @maxItems 500
+     */
+    entries: [
+        {
+            /**
+             * The signup's display name.
+             */
+            name?: string;
+            /**
+             * The consent proof from the source system. REQUIRED: a waitlist entry with no evidence of consent is exactly what this import exists to avoid creating.
+             */
+            consent: {
+                /**
+                 * The IP the source system recorded, when it recorded one.
+                 */
+                ip?: (string | null);
+                /**
+                 * Where the acceptance happened in the source system, e.g. `legacy-widget`.
+                 */
+                source: string;
+                /**
+                 * The user agent the source system recorded, when it recorded one.
+                 */
+                userAgent?: (string | null);
+                /**
+                 * When they accepted it, as recorded by the source system. Carried over verbatim — this is the evidence, and stamping it with the import time would destroy it.
+                 */
+                acceptedAt: string;
+                /**
+                 * The privacy-policy version the signer accepted in the SOURCE system.
+                 */
+                policyVersion: string;
+            };
+            /**
+             * Whether the address had proven itself reachable in the source system. Default true — a legacy list has already been mailed. Pass false to land the row as unconfirmed, where it is reported separately and is never invited.
+             */
+            confirmed?: boolean;
+            /**
+             * The email address on the legacy list. Stored canonicalised plus raw for display.
+             */
+            identifier: string;
+            /**
+             * Referrer / UTM attribution the source system recorded.
+             */
+            attribution?: {
+                /**
+                 * utm_term of the visit.
+                 */
+                utmTerm?: string;
+                /**
+                 * The document referrer of the signup page.
+                 */
+                referrer?: string;
+                /**
+                 * utm_medium of the visit.
+                 */
+                utmMedium?: string;
+                /**
+                 * utm_source of the visit.
+                 */
+                utmSource?: string;
+                /**
+                 * utm_content of the visit.
+                 */
+                utmContent?: string;
+                /**
+                 * The URL the signup was submitted from.
+                 */
+                landingPage?: string;
+                /**
+                 * utm_campaign of the visit.
+                 */
+                utmCampaign?: string;
+            };
+            /**
+             * End-user-writable metadata to carry onto the created user.
+             */
+            unsafeMetadata?: {
+                [k: string]: unknown;
+            };
+        },
+        ...({
+            /**
+             * The signup's display name.
+             */
+            name?: string;
+            /**
+             * The consent proof from the source system. REQUIRED: a waitlist entry with no evidence of consent is exactly what this import exists to avoid creating.
+             */
+            consent: {
+                /**
+                 * The IP the source system recorded, when it recorded one.
+                 */
+                ip?: (string | null);
+                /**
+                 * Where the acceptance happened in the source system, e.g. `legacy-widget`.
+                 */
+                source: string;
+                /**
+                 * The user agent the source system recorded, when it recorded one.
+                 */
+                userAgent?: (string | null);
+                /**
+                 * When they accepted it, as recorded by the source system. Carried over verbatim — this is the evidence, and stamping it with the import time would destroy it.
+                 */
+                acceptedAt: string;
+                /**
+                 * The privacy-policy version the signer accepted in the SOURCE system.
+                 */
+                policyVersion: string;
+            };
+            /**
+             * Whether the address had proven itself reachable in the source system. Default true — a legacy list has already been mailed. Pass false to land the row as unconfirmed, where it is reported separately and is never invited.
+             */
+            confirmed?: boolean;
+            /**
+             * The email address on the legacy list. Stored canonicalised plus raw for display.
+             */
+            identifier: string;
+            /**
+             * Referrer / UTM attribution the source system recorded.
+             */
+            attribution?: {
+                /**
+                 * utm_term of the visit.
+                 */
+                utmTerm?: string;
+                /**
+                 * The document referrer of the signup page.
+                 */
+                referrer?: string;
+                /**
+                 * utm_medium of the visit.
+                 */
+                utmMedium?: string;
+                /**
+                 * utm_source of the visit.
+                 */
+                utmSource?: string;
+                /**
+                 * utm_content of the visit.
+                 */
+                utmContent?: string;
+                /**
+                 * The URL the signup was submitted from.
+                 */
+                landingPage?: string;
+                /**
+                 * utm_campaign of the visit.
+                 */
+                utmCampaign?: string;
+            };
+            /**
+             * End-user-writable metadata to carry onto the created user.
+             */
+            unsafeMetadata?: {
+                [k: string]: unknown;
+            };
+        })[]
+    ];
+}
+interface UsersWaitlistImportOutput {
+    failed: number;
+    results: {
+        row: number;
+        reason: (string | null);
+        status: ("imported" | "skipped" | "failed");
+        userId: (string | null);
+    }[];
+    skipped: number;
+    imported: number;
+    requested: number;
+}
+interface UsersWaitlistInviteInput {
+    /**
+     * The waitlisted users to promote, up to 100 per call. Each gets the STANDARD invite email; accepting it is what creates their credential.
+     *
+     * @minItems 1
+     * @maxItems 100
+     */
+    userIds: [string, ...(string)[]];
+}
+interface UsersWaitlistInviteOutput {
+    invited: number;
+    results: {
+        reason: (("suppressed" | "not_found" | "already_registered") | null);
+        status: ("invited" | "skipped");
+        userId: string;
+    }[];
+    skipped: number;
+}
+interface UsersWaitlistListInput {
+    /**
+     * Entries per page, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * Opaque cursor from the previous page's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by funnel status: 'pending', 'invited', 'registered' or 'withdrawn'. Omit for all.
+     */
+    status?: ("pending" | "invited" | "registered" | "withdrawn");
+    /**
+     * Double opt-in only: false returns entries whose address never confirmed. Omit for both.
+     */
+    confirmed?: boolean;
+}
+interface UsersWaitlistListOutput {
+    entries: {
+        status: ("pending" | "invited" | "registered" | "withdrawn");
+        userId: string;
+        createdAt: string;
+        invitedAt: (string | null);
+        identifier: string;
+        attribution: {
+            [k: string]: unknown;
+        };
+        confirmedAt: (string | null);
+        withdrawnAt: (string | null);
+        consentProof: {
+            [k: string]: unknown;
+        };
+        registeredAt: (string | null);
+        inviteTokenId: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersWebhooksCreateInput {
+    /**
+     * Where deliveries are POSTed. HTTPS only, no embedded credentials.
+     */
+    url: string;
+    /**
+     * Which events to deliver. `user.created`, `user.updated` and `user.deleted` mirror the directory; `session.revoked` fires on sign-out, ban, erase and refresh-token reuse.
+     *
+     * @minItems 1
+     */
+    events: [("user.created" | "user.updated" | "user.deleted" | "session.revoked"), ...(("user.created" | "user.updated" | "user.deleted" | "session.revoked"))[]];
+    /**
+     * A label only humans read — which system this endpoint feeds.
+     */
+    description?: string;
+}
+interface UsersWebhooksCreateOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    secret: string;
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksDeleteInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksDeleteOutput {
+    id: string;
+    deleted: true;
+}
+interface UsersWebhooksDeliveriesListInput {
+    /**
+     * Id of the webhook endpoint whose deliveries to list.
+     */
+    id: string;
+    limit?: number;
+}
+interface UsersWebhooksDeliveriesListOutput {
+    deliveries: {
+        id: string;
+        status: ("pending" | "succeeded" | "failed");
+        eventId: string;
+        attempts: number;
+        createdAt: string;
+        eventType: ("user.created" | "user.updated" | "user.deleted" | "session.revoked");
+        lastError: (string | null);
+        webhookId: string;
+        lastAttemptAt: (string | null);
+        responseStatus: (number | null);
+    }[];
+}
+interface UsersWebhooksGetInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksGetOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksListInput {
+}
+interface UsersWebhooksListOutput {
+    webhooks: {
+        id: string;
+        url: string;
+        active: boolean;
+        events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+        createdAt: string;
+        updatedAt: string;
+        description: (string | null);
+        secretPrefix: string;
+    }[];
+}
+interface UsersWebhooksRotateSecretInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksRotateSecretOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    secret: string;
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksUpdateInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+    /**
+     * Where deliveries are POSTed. HTTPS only, no embedded credentials.
+     */
+    url?: string;
+    /**
+     * false pauses delivery without losing the endpoint or its secret.
+     */
+    active?: boolean;
+    /**
+     * Which events to deliver. `user.created`, `user.updated` and `user.deleted` mirror the directory; `session.revoked` fires on sign-out, ban, erase and refresh-token reuse.
+     *
+     * @minItems 1
+     */
+    events?: [("user.created" | "user.updated" | "user.deleted" | "session.revoked"), ...(("user.created" | "user.updated" | "user.deleted" | "session.revoked"))[]];
+    description?: (string | null);
+}
+interface UsersWebhooksUpdateOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
 interface WaitlistConfigGetInput {
 }
 type WaitlistConfigGetOutput = ({
@@ -16052,6 +18665,80 @@ interface GeneratedClient {
             get(input: TrackingSnippetsGetInput): Promise<TrackingSnippetsGetOutput>;
         };
     };
+    users: {
+        apikeys: {
+            create(input: UsersApikeysCreateInput): Promise<UsersApikeysCreateOutput>;
+            list(input: UsersApikeysListInput): Promise<UsersApikeysListOutput>;
+            revoke(input: UsersApikeysRevokeInput): Promise<UsersApikeysRevokeOutput>;
+        };
+        audit: {
+            list(input: UsersAuditListInput): Promise<UsersAuditListOutput>;
+        };
+        config: {
+            get(input: UsersConfigGetInput): Promise<UsersConfigGetOutput>;
+            upsert(input: UsersConfigUpsertInput): Promise<UsersConfigUpsertOutput>;
+        };
+        factors: {
+            list(input: UsersFactorsListInput): Promise<UsersFactorsListOutput>;
+            reset(input: UsersFactorsResetInput): Promise<UsersFactorsResetOutput>;
+        };
+        keys: {
+            list(input: UsersKeysListInput): Promise<UsersKeysListOutput>;
+            revoke(input: UsersKeysRevokeInput): Promise<UsersKeysRevokeOutput>;
+            rotate(input: UsersKeysRotateInput): Promise<UsersKeysRotateOutput>;
+        };
+        'ops-retention': {
+            get(input: UsersOpsRetentionGetInput): Promise<UsersOpsRetentionGetOutput>;
+        };
+        'ops-slo': {
+            get(input: UsersOpsSloGetInput): Promise<UsersOpsSloGetOutput>;
+        };
+        sessions: {
+            get(input: UsersSessionsGetInput): Promise<UsersSessionsGetOutput>;
+            impersonate(input: UsersSessionsImpersonateInput): Promise<UsersSessionsImpersonateOutput>;
+            list(input: UsersSessionsListInput): Promise<UsersSessionsListOutput>;
+            revoke(input: UsersSessionsRevokeInput): Promise<UsersSessionsRevokeOutput>;
+        };
+        stats: {
+            get(input: UsersStatsGetInput): Promise<UsersStatsGetOutput>;
+        };
+        users: {
+            ban(input: UsersUsersBanInput): Promise<UsersUsersBanOutput>;
+            create(input: UsersUsersCreateInput): Promise<UsersUsersCreateOutput>;
+            delete(input: UsersUsersDeleteInput): Promise<UsersUsersDeleteOutput>;
+            erase(input: UsersUsersEraseInput): Promise<UsersUsersEraseOutput>;
+            export(input: UsersUsersExportInput): Promise<UsersUsersExportOutput>;
+            get(input: UsersUsersGetInput): Promise<UsersUsersGetOutput>;
+            import(input: UsersUsersImportInput): Promise<UsersUsersImportOutput>;
+            invite(input: UsersUsersInviteInput): Promise<UsersUsersInviteOutput>;
+            list(input: UsersUsersListInput): Promise<UsersUsersListOutput>;
+            unban(input: UsersUsersUnbanInput): Promise<UsersUsersUnbanOutput>;
+            update(input: UsersUsersUpdateInput): Promise<UsersUsersUpdateOutput>;
+        };
+        'users-set-primary': {
+            identifier(input: UsersUsersSetPrimaryIdentifierInput): Promise<UsersUsersSetPrimaryIdentifierOutput>;
+        };
+        waitlist: {
+            erase(input: UsersWaitlistEraseInput): Promise<UsersWaitlistEraseOutput>;
+            funnel(input: UsersWaitlistFunnelInput): Promise<UsersWaitlistFunnelOutput>;
+            import(input: UsersWaitlistImportInput): Promise<UsersWaitlistImportOutput>;
+            invite(input: UsersWaitlistInviteInput): Promise<UsersWaitlistInviteOutput>;
+            list(input: UsersWaitlistListInput): Promise<UsersWaitlistListOutput>;
+        };
+        webhooks: {
+            create(input: UsersWebhooksCreateInput): Promise<UsersWebhooksCreateOutput>;
+            delete(input: UsersWebhooksDeleteInput): Promise<UsersWebhooksDeleteOutput>;
+            get(input: UsersWebhooksGetInput): Promise<UsersWebhooksGetOutput>;
+            list(input: UsersWebhooksListInput): Promise<UsersWebhooksListOutput>;
+            update(input: UsersWebhooksUpdateInput): Promise<UsersWebhooksUpdateOutput>;
+        };
+        'webhooks-deliveries': {
+            list(input: UsersWebhooksDeliveriesListInput): Promise<UsersWebhooksDeliveriesListOutput>;
+        };
+        'webhooks-rotate': {
+            secret(input: UsersWebhooksRotateSecretInput): Promise<UsersWebhooksRotateSecretOutput>;
+        };
+    };
     waitlist: {
         config: {
             get(input: WaitlistConfigGetInput): Promise<WaitlistConfigGetOutput>;
@@ -16071,4 +18758,4 @@ interface GeneratedClient {
     };
 }
 
-export type { BrainGdriveConnectionsListInput as $, AnalyticsQueryRunInput as A, BrainBackupCreateInput as B, BrainConnectorReposListInput as C, BrainConnectorReposListOutput as D, BrainDaemonBatchStatusInput as E, BrainDaemonBatchStatusOutput as F, GeneratedClient as G, BrainDaemonCreateInput as H, BrainDaemonCreateOutput as I, BrainDaemonGetInput as J, BrainDaemonGetOutput as K, BrainDaemonReingestInput as L, BrainDaemonReingestOutput as M, BrainDaemonRemoveInput as N, BrainDaemonRemoveOutput as O, BrainDaemonRunItemsInput as P, BrainDaemonRunItemsOutput as Q, BrainDaemonRunInput as R, BrainDaemonRunOutput as S, BrainDaemonRunsInput as T, BrainDaemonRunsOutput as U, BrainDaemonStatusInput as V, BrainDaemonStatusOutput as W, BrainDaemonUpdateInput as X, BrainDaemonUpdateOutput as Y, BrainDaemonsListInput as Z, BrainDaemonsListOutput as _, AnalyticsQueryRunOutput as a, DeploymentAlertEventsListInput as a$, BrainGdriveConnectionsListOutput as a0, BrainKnowledgeEntityMemoriesInput as a1, BrainKnowledgeEntityMemoriesOutput as a2, BrainKnowledgeGraphInput as a3, BrainKnowledgeGraphOutput as a4, BrainKnowledgeNeighborhoodInput as a5, BrainKnowledgeNeighborhoodOutput as a6, BrainKnowledgeRelationsInput as a7, BrainKnowledgeRelationsOutput as a8, BrainKnowledgeSearchInput as a9, ConsentConfigThemeUpsertOutput as aA, ConsentDashboardConfigGetInput as aB, ConsentDashboardConfigGetOutput as aC, ConsentDashboardDecisionsListInput as aD, ConsentDashboardDecisionsListOutput as aE, ConsentDashboardEmbedSnippetGetInput as aF, ConsentDashboardEmbedSnippetGetOutput as aG, ConsentDashboardStatsGetInput as aH, ConsentDashboardStatsGetOutput as aI, ConsentEmbedGetInput as aJ, ConsentEmbedGetOutput as aK, ConsentProvidersCreateInput as aL, ConsentProvidersCreateOutput as aM, ConsentProvidersDeleteInput as aN, ConsentProvidersDeleteOutput as aO, ConsentProvidersListInput as aP, ConsentProvidersListOutput as aQ, ConsentProvidersUpdateInput as aR, ConsentProvidersUpdateOutput as aS, ConsentRecordsExportInput as aT, ConsentRecordsExportOutput as aU, ConsentStatsGetInput as aV, ConsentStatsGetOutput as aW, DeploymentAlertCreateInput as aX, DeploymentAlertCreateOutput as aY, DeploymentAlertDeleteInput as aZ, DeploymentAlertDeleteOutput as a_, BrainKnowledgeSearchOutput as aa, BrainMemoryAddInput as ab, BrainMemoryAddOutput as ac, BrainMemoryDeleteInput as ad, BrainMemoryDeleteOutput as ae, BrainMemoryGetInput as af, BrainMemoryGetOutput as ag, BrainMemoryListInput as ah, BrainMemoryListOutput as ai, BrainMemorySearchInput as aj, BrainMemorySearchOutput as ak, BrainMemoryStatsInput as al, BrainMemoryStatsOutput as am, BrainMemoryUpdateInput as an, BrainMemoryUpdateOutput as ao, BrainProductSharedMemoryResetInput as ap, BrainProductSharedMemoryResetOutput as aq, BrainRestoreStatusInput as ar, BrainRestoreStatusOutput as as, ConsentConfigCookieDomainUpsertInput as at, ConsentConfigCookieDomainUpsertOutput as au, ConsentConfigCustomizationUpsertInput as av, ConsentConfigCustomizationUpsertOutput as aw, ConsentConfigFloatingIconUpsertInput as ax, ConsentConfigFloatingIconUpsertOutput as ay, ConsentConfigThemeUpsertInput as az, BrainBackupCreateOutput as b, DeploymentDomainListByServiceInput as b$, DeploymentAlertEventsListOutput as b0, DeploymentAlertListInput as b1, DeploymentAlertListOutput as b2, DeploymentAlertUpdateInput as b3, DeploymentAlertUpdateOutput as b4, DeploymentAnalyticsQueryInput as b5, DeploymentAnalyticsQueryOutput as b6, DeploymentAuditListInput as b7, DeploymentAuditListOutput as b8, DeploymentBuildGetInput as b9, DeploymentCloudSqlInstanceBackupOutput as bA, DeploymentCloudSqlInstanceCreateInput as bB, DeploymentCloudSqlInstanceCreateOutput as bC, DeploymentCloudSqlInstanceDeleteInput as bD, DeploymentCloudSqlInstanceDeleteOutput as bE, DeploymentCloudSqlInstanceGetInput as bF, DeploymentCloudSqlInstanceGetOutput as bG, DeploymentCloudSqlInstanceListInput as bH, DeploymentCloudSqlInstanceListOutput as bI, DeploymentCloudSqlInstanceResizeInput as bJ, DeploymentCloudSqlInstanceResizeOutput as bK, DeploymentCloudSqlInstanceRestoreInput as bL, DeploymentCloudSqlInstanceRestoreOutput as bM, DeploymentCloudSqlLogsInput as bN, DeploymentCloudSqlLogsOutput as bO, DeploymentDeploymentCancelInput as bP, DeploymentDeploymentCancelOutput as bQ, DeploymentDeploymentGetInput as bR, DeploymentDeploymentGetOutput as bS, DeploymentDeploymentListInput as bT, DeploymentDeploymentListOutput as bU, DeploymentDomainAddInput as bV, DeploymentDomainAddOutput as bW, DeploymentDomainAllowedListInput as bX, DeploymentDomainAllowedListOutput as bY, DeploymentDomainGetInput as bZ, DeploymentDomainGetOutput as b_, DeploymentBuildGetOutput as ba, DeploymentBuildListInput as bb, DeploymentBuildListOutput as bc, DeploymentBuildLogsInput as bd, DeploymentBuildLogsOutput as be, DeploymentCanvasGetInput as bf, DeploymentCanvasGetOutput as bg, DeploymentCanvasMoveNodeInput as bh, DeploymentCanvasMoveNodeOutput as bi, DeploymentCloudSqlBackfillLogFlagsInput as bj, DeploymentCloudSqlBackfillLogFlagsOutput as bk, DeploymentCloudSqlDatabaseAttachInput as bl, DeploymentCloudSqlDatabaseAttachOutput as bm, DeploymentCloudSqlDatabaseCreateInput as bn, DeploymentCloudSqlDatabaseCreateOutput as bo, DeploymentCloudSqlDatabaseDeleteInput as bp, DeploymentCloudSqlDatabaseDeleteOutput as bq, DeploymentCloudSqlDatabaseDetachInput as br, DeploymentCloudSqlDatabaseDetachOutput as bs, DeploymentCloudSqlDatabaseGetInput as bt, DeploymentCloudSqlDatabaseGetOutput as bu, DeploymentCloudSqlDatabaseListInput as bv, DeploymentCloudSqlDatabaseListOutput as bw, DeploymentCloudSqlInstanceBackupListInput as bx, DeploymentCloudSqlInstanceBackupListOutput as by, DeploymentCloudSqlInstanceBackupInput as bz, BrainBackupRestoreInput as c, DeploymentMetricsGetInput as c$, DeploymentDomainListByServiceOutput as c0, DeploymentDomainListInput as c1, DeploymentDomainListOutput as c2, DeploymentDomainRedirectWwwInput as c3, DeploymentDomainRedirectWwwOutput as c4, DeploymentDomainRemoveInput as c5, DeploymentDomainRemoveOutput as c6, DeploymentDomainRoutesAddInput as c7, DeploymentDomainRoutesAddOutput as c8, DeploymentDomainRoutesListInput as c9, DeploymentManagedServiceBackupListOutput as cA, DeploymentManagedServiceBackupInput as cB, DeploymentManagedServiceBackupOutput as cC, DeploymentManagedServiceConnectInfoInput as cD, DeploymentManagedServiceConnectInfoOutput as cE, DeploymentManagedServiceDeleteInput as cF, DeploymentManagedServiceDeleteOutput as cG, DeploymentManagedServiceGetInput as cH, DeploymentManagedServiceGetOutput as cI, DeploymentManagedServiceListInput as cJ, DeploymentManagedServiceListOutput as cK, DeploymentManagedServiceLogsInput as cL, DeploymentManagedServiceLogsOutput as cM, DeploymentManagedServiceProvisionInput as cN, DeploymentManagedServiceProvisionOutput as cO, DeploymentManagedServiceReconcileInput as cP, DeploymentManagedServiceReconcileOutput as cQ, DeploymentManagedServiceResizeInput as cR, DeploymentManagedServiceResizeOutput as cS, DeploymentManagedServiceRestoreInput as cT, DeploymentManagedServiceRestoreOutput as cU, DeploymentManagedServiceStartInput as cV, DeploymentManagedServiceStartOutput as cW, DeploymentManagedServiceStopInput as cX, DeploymentManagedServiceStopOutput as cY, DeploymentManagedServiceTypesInput as cZ, DeploymentManagedServiceTypesOutput as c_, DeploymentDomainRoutesListOutput as ca, DeploymentDomainRoutesRemoveInput as cb, DeploymentDomainRoutesRemoveOutput as cc, DeploymentDomainRoutesUpdateInput as cd, DeploymentDomainRoutesUpdateOutput as ce, DeploymentDomainVerifyInput as cf, DeploymentDomainVerifyOutput as cg, DeploymentEnvironmentCreateInput as ch, DeploymentEnvironmentCreateOutput as ci, DeploymentEnvironmentDeleteInput as cj, DeploymentEnvironmentDeleteOutput as ck, DeploymentEnvironmentForkInput as cl, DeploymentEnvironmentForkOutput as cm, DeploymentEnvironmentGetInput as cn, DeploymentEnvironmentGetOutput as co, DeploymentEnvironmentListInput as cp, DeploymentEnvironmentListOutput as cq, DeploymentEnvironmentReconcileInput as cr, DeploymentEnvironmentReconcileOutput as cs, DeploymentEnvironmentUpdateInput as ct, DeploymentEnvironmentUpdateOutput as cu, DeploymentEventsListByEnvironmentInput as cv, DeploymentEventsListByEnvironmentOutput as cw, DeploymentEventsListByServiceInput as cx, DeploymentEventsListByServiceOutput as cy, DeploymentManagedServiceBackupListInput as cz, BrainBackupRestoreOutput as d, DeploymentVcsBranchListOutput as d$, DeploymentMetricsGetOutput as d0, DeploymentPreviewEnvironmentCreateInput as d1, DeploymentPreviewEnvironmentCreateOutput as d2, DeploymentPreviewEnvironmentDeleteInput as d3, DeploymentPreviewEnvironmentDeleteOutput as d4, DeploymentPreviewEnvironmentListInput as d5, DeploymentPreviewEnvironmentListOutput as d6, DeploymentPreviewPolicyGetInput as d7, DeploymentPreviewPolicyGetOutput as d8, DeploymentPreviewPolicySetInput as d9, DeploymentSshCommandInput as dA, DeploymentSshCommandOutput as dB, DeploymentSshKeyDeleteInput as dC, DeploymentSshKeyDeleteOutput as dD, DeploymentSshKeyListInput as dE, DeploymentSshKeyListOutput as dF, DeploymentSshKeyRegisterInput as dG, DeploymentSshKeyRegisterOutput as dH, DeploymentVariableListEnvInput as dI, DeploymentVariableListEnvOutput as dJ, DeploymentVariableListProductInput as dK, DeploymentVariableListProductOutput as dL, DeploymentVariableListInput as dM, DeploymentVariableListOutput as dN, DeploymentVariableSetEnvInput as dO, DeploymentVariableSetEnvOutput as dP, DeploymentVariableSetInput as dQ, DeploymentVariableSetOutput as dR, DeploymentVariableSetProductInput as dS, DeploymentVariableSetProductOutput as dT, DeploymentVariableUnsetEnvInput as dU, DeploymentVariableUnsetEnvOutput as dV, DeploymentVariableUnsetInput as dW, DeploymentVariableUnsetOutput as dX, DeploymentVariableUnsetProductInput as dY, DeploymentVariableUnsetProductOutput as dZ, DeploymentVcsBranchListInput as d_, DeploymentPreviewPolicySetOutput as da, DeploymentServiceCreateInput as db, DeploymentServiceCreateOutput as dc, DeploymentServiceDeleteInput as dd, DeploymentServiceDeleteOutput as de, DeploymentServiceExecInput as df, DeploymentServiceExecOutput as dg, DeploymentServiceGetInput as dh, DeploymentServiceGetOutput as di, DeploymentServiceListInput as dj, DeploymentServiceListOutput as dk, DeploymentServiceLogsInput as dl, DeploymentServiceLogsOutput as dm, DeploymentServiceRedeployInput as dn, DeploymentServiceRedeployOutput as dp, DeploymentServiceRestartInput as dq, DeploymentServiceRestartOutput as dr, DeploymentServiceRollbackInput as ds, DeploymentServiceRollbackOutput as dt, DeploymentServiceScaleInput as du, DeploymentServiceScaleOutput as dv, DeploymentServiceUpdateInput as dw, DeploymentServiceUpdateOutput as dx, DeploymentServiceWakeInput as dy, DeploymentServiceWakeOutput as dz, BrainBackupStatusInput as e, MailDomainDeleteOutput as e$, DeploymentVcsConnectionListInput as e0, DeploymentVcsConnectionListOutput as e1, DeploymentVcsRepoListInput as e2, DeploymentVcsRepoListOutput as e3, DeploymentVolumeCreateInput as e4, DeploymentVolumeCreateOutput as e5, DeploymentVolumeDeleteInput as e6, DeploymentVolumeDeleteOutput as e7, DeploymentVolumeDetachInput as e8, DeploymentVolumeDetachOutput as e9, MailBroadcastDeleteInput as eA, MailBroadcastDeleteOutput as eB, MailBroadcastGetInput as eC, MailBroadcastGetOutput as eD, MailBroadcastListInput as eE, MailBroadcastListOutput as eF, MailBroadcastQueueInput as eG, MailBroadcastQueueOutput as eH, MailBroadcastStatsInput as eI, MailBroadcastStatsOutput as eJ, MailBroadcastUpdateInput as eK, MailBroadcastUpdateOutput as eL, MailContactCreateInput as eM, MailContactCreateOutput as eN, MailContactDeleteInput as eO, MailContactDeleteOutput as eP, MailContactGetInput as eQ, MailContactGetOutput as eR, MailContactListInput as eS, MailContactListOutput as eT, MailContactUpdateInput as eU, MailContactUpdateOutput as eV, MailDomainAllowedListInput as eW, MailDomainAllowedListOutput as eX, MailDomainCreateInput as eY, MailDomainCreateOutput as eZ, MailDomainDeleteInput as e_, DeploymentVolumeGetInput as ea, DeploymentVolumeGetOutput as eb, DeploymentVolumeListInput as ec, DeploymentVolumeListOutput as ed, DeploymentVolumeResizeInput as ee, DeploymentVolumeResizeOutput as ef, MailApikeyCreateInput as eg, MailApikeyCreateOutput as eh, MailApikeyDeleteInput as ei, MailApikeyDeleteOutput as ej, MailApikeyListInput as ek, MailApikeyListOutput as el, MailAudienceCreateInput as em, MailAudienceCreateOutput as en, MailAudienceDeleteInput as eo, MailAudienceDeleteOutput as ep, MailAudienceGetInput as eq, MailAudienceGetOutput as er, MailAudienceListInput as es, MailAudienceListOutput as et, MailAudienceUpdateInput as eu, MailAudienceUpdateOutput as ev, MailBroadcastCancelInput as ew, MailBroadcastCancelOutput as ex, MailBroadcastCreateInput as ey, MailBroadcastCreateOutput as ez, BrainBackupStatusOutput as f, OrganizationCloudflareInstallOutput as f$, MailDomainGetInput as f0, MailDomainGetOutput as f1, MailDomainListInput as f2, MailDomainListOutput as f3, MailDomainUpdateInput as f4, MailDomainUpdateOutput as f5, MailDomainVerifyInput as f6, MailDomainVerifyOutput as f7, MailEmailCancelInput as f8, MailEmailCancelOutput as f9, MailTemplatePublishOutput as fA, MailTemplateUpdateInput as fB, MailTemplateUpdateOutput as fC, MailUsageGetInput as fD, MailUsageGetOutput as fE, MailWebhookCreateInput as fF, MailWebhookCreateOutput as fG, MailWebhookDeleteInput as fH, MailWebhookDeleteOutput as fI, MailWebhookDeliveriesListInput as fJ, MailWebhookDeliveriesListOutput as fK, MailWebhookGetInput as fL, MailWebhookGetOutput as fM, MailWebhookListInput as fN, MailWebhookListOutput as fO, MailWebhookUpdateInput as fP, MailWebhookUpdateOutput as fQ, MailEmailGetOutput as fR, OrganizationAuthMeInput as fS, OrganizationAuthMeOutput as fT, OrganizationBindingsListInput as fU, OrganizationBindingsListOutput as fV, OrganizationClickupInstallInput as fW, OrganizationClickupInstallOutput as fX, OrganizationClickupListInstallationsInput as fY, OrganizationClickupListInstallationsOutput as fZ, OrganizationCloudflareInstallInput as f_, MailEmailGetInput as fa, MailEmailSendBatchInput as fb, MailEmailSendBatchOutput as fc, MailEmailSendInput as fd, MailEmailSendOutput as fe, MailEmailUpdateInput as ff, MailEmailUpdateOutput as fg, MailReputationGetInput as fh, MailReputationGetOutput as fi, MailStatsGetInput as fj, MailStatsGetOutput as fk, MailSuppressionAddInput as fl, MailSuppressionAddOutput as fm, MailSuppressionListInput as fn, MailSuppressionListOutput as fo, MailSuppressionRemoveInput as fp, MailSuppressionRemoveOutput as fq, MailTemplateCreateInput as fr, MailTemplateCreateOutput as fs, MailTemplateDeleteInput as ft, MailTemplateDeleteOutput as fu, MailTemplateGetInput as fv, MailTemplateGetOutput as fw, MailTemplateListInput as fx, MailTemplateListOutput as fy, MailTemplatePublishInput as fz, BrainBackupsListInput as g, OrganizationMemberListOutput as g$, OrganizationConnectorsApproveRequestInput as g0, OrganizationConnectorsApproveRequestOutput as g1, OrganizationConnectorsAttachInput as g2, OrganizationConnectorsAttachOutput as g3, OrganizationConnectorsDeleteInput as g4, OrganizationConnectorsDeleteOutput as g5, OrganizationConnectorsDenyRequestInput as g6, OrganizationConnectorsDenyRequestOutput as g7, OrganizationConnectorsDetachInput as g8, OrganizationConnectorsDetachOutput as g9, OrganizationExtensionsListInstalledInput as gA, OrganizationExtensionsListInstalledOutput as gB, OrganizationExtensionsListInput as gC, OrganizationExtensionsListOutput as gD, OrganizationExtensionsUninstallInput as gE, OrganizationExtensionsUninstallOutput as gF, OrganizationFeedbackSubmitInput as gG, OrganizationFeedbackSubmitOutput as gH, OrganizationGdriveInstallInput as gI, OrganizationGdriveInstallOutput as gJ, OrganizationGithubInstallInput as gK, OrganizationGithubInstallOutput as gL, OrganizationGithubListInstallationsInput as gM, OrganizationGithubListInstallationsOutput as gN, OrganizationGoogleadsInstallInput as gO, OrganizationGoogleadsInstallOutput as gP, OrganizationListInput as gQ, OrganizationListOutput as gR, OrganizationMemberAcceptInviteInput as gS, OrganizationMemberAcceptInviteOutput as gT, OrganizationMemberInviteInput as gU, OrganizationMemberInviteOutput as gV, OrganizationMemberListInvitationsInput as gW, OrganizationMemberListInvitationsOutput as gX, OrganizationMemberListProductAccessInput as gY, OrganizationMemberListProductAccessOutput as gZ, OrganizationMemberListInput as g_, OrganizationConnectorsListAttachmentsInput as ga, OrganizationConnectorsListAttachmentsOutput as gb, OrganizationConnectorsListAvailableInput as gc, OrganizationConnectorsListAvailableOutput as gd, OrganizationConnectorsListOrgInput as ge, OrganizationConnectorsListOrgOutput as gf, OrganizationConnectorsListInput as gg, OrganizationConnectorsListOutput as gh, OrganizationConnectorsListRequestsInput as gi, OrganizationConnectorsListRequestsOutput as gj, OrganizationConnectorsRemoveInput as gk, OrganizationConnectorsRemoveOutput as gl, OrganizationConnectorsRequestInput as gm, OrganizationConnectorsRequestOutput as gn, OrganizationCreateInput as go, OrganizationCreateOutput as gp, OrganizationDomainsAddInput as gq, OrganizationDomainsAddOutput as gr, OrganizationDomainsGetInput as gs, OrganizationDomainsGetOutput as gt, OrganizationDomainsListInput as gu, OrganizationDomainsListOutput as gv, OrganizationDomainsRemoveInput as gw, OrganizationDomainsRemoveOutput as gx, OrganizationExtensionsInstallInput as gy, OrganizationExtensionsInstallOutput as gz, BrainBackupsListOutput as h, PlaygroundLifecycleGetStateOutput as h$, OrganizationMemberRemoveInput as h0, OrganizationMemberRemoveOutput as h1, OrganizationMemberRevokeInvitationInput as h2, OrganizationMemberRevokeInvitationOutput as h3, OrganizationMemberSetRoleInput as h4, OrganizationMemberSetRoleOutput as h5, OrganizationMemberShareProductInput as h6, OrganizationMemberShareProductOutput as h7, OrganizationMemberUnshareProductInput as h8, OrganizationMemberUnshareProductOutput as h9, OrganizationRolesGetInput as hA, OrganizationRolesGetOutput as hB, OrganizationRolesListInput as hC, OrganizationRolesListOutput as hD, OrganizationRolesUpdateInput as hE, OrganizationRolesUpdateOutput as hF, OrganizationSelectInput as hG, OrganizationSelectOutput as hH, PlaygroundAnalyticsOverviewInput as hI, PlaygroundAnalyticsOverviewOutput as hJ, PlaygroundBillingEntitlementsInput as hK, PlaygroundBillingEntitlementsOutput as hL, PlaygroundBillingRecordUsageInput as hM, PlaygroundBillingRecordUsageOutput as hN, PlaygroundClickupCreateTaskInput as hO, PlaygroundClickupCreateTaskOutput as hP, PlaygroundClickupGetLastWebhookInput as hQ, PlaygroundClickupGetLastWebhookOutput as hR, PlaygroundClickupGetOverviewInput as hS, PlaygroundClickupGetOverviewOutput as hT, PlaygroundGdriveGetLastChangeInput as hU, PlaygroundGdriveGetLastChangeOutput as hV, PlaygroundGdriveReadFileInput as hW, PlaygroundGdriveReadFileOutput as hX, PlaygroundGoogleadsReadCustomerInput as hY, PlaygroundGoogleadsReadCustomerOutput as hZ, PlaygroundLifecycleGetStateInput as h_, OrganizationMembersAssignRoleInput as ha, OrganizationMembersAssignRoleOutput as hb, OrganizationPermissionCatalogInput as hc, OrganizationPermissionCatalogOutput as hd, OrganizationProductAcceptInvitationInput as he, OrganizationProductAcceptInvitationOutput as hf, OrganizationProductCreateInput as hg, OrganizationProductCreateOutput as hh, OrganizationProductInviteInput as hi, OrganizationProductInviteOutput as hj, OrganizationProductListInvitationsInput as hk, OrganizationProductListInvitationsOutput as hl, OrganizationProductListMembersInput as hm, OrganizationProductListMembersOutput as hn, OrganizationProductListInput as ho, OrganizationProductListOutput as hp, OrganizationProductListRolesInput as hq, OrganizationProductListRolesOutput as hr, OrganizationProductRevokeInvitationInput as hs, OrganizationProductRevokeInvitationOutput as ht, OrganizationProductSelectInput as hu, OrganizationProductSelectOutput as hv, OrganizationRolesCreateInput as hw, OrganizationRolesCreateOutput as hx, OrganizationRolesDeleteInput as hy, OrganizationRolesDeleteOutput as hz, BrainClickupChannelsListInput as i, RealtimeWebhookSecretRotateOutput as i$, PlaygroundLifecycleListEventsInput as i0, PlaygroundLifecycleListEventsOutput as i1, PlaygroundWebhookGetLastInput as i2, PlaygroundWebhookGetLastOutput as i3, RealtimeApikeyCreateInput as i4, RealtimeApikeyCreateOutput as i5, RealtimeApikeyListInput as i6, RealtimeApikeyListOutput as i7, RealtimeApikeyRevokeInput as i8, RealtimeApikeyRevokeOutput as i9, RealtimeNamespaceUpdateInput as iA, RealtimeNamespaceUpdateOutput as iB, RealtimePresenceEnterInput as iC, RealtimePresenceEnterOutput as iD, RealtimePresenceGetInput as iE, RealtimePresenceGetOutput as iF, RealtimePresenceLeaveInput as iG, RealtimePresenceLeaveOutput as iH, RealtimePresenceStatsInput as iI, RealtimePresenceStatsOutput as iJ, RealtimePresenceUpdateInput as iK, RealtimePresenceUpdateOutput as iL, RealtimeStatusGetInput as iM, RealtimeStatusGetOutput as iN, RealtimeTokensCreateInput as iO, RealtimeTokensCreateOutput as iP, RealtimeWebhookCreateInput as iQ, RealtimeWebhookCreateOutput as iR, RealtimeWebhookDeleteInput as iS, RealtimeWebhookDeleteOutput as iT, RealtimeWebhookDeliveriesListInput as iU, RealtimeWebhookDeliveriesListOutput as iV, RealtimeWebhookGetInput as iW, RealtimeWebhookGetOutput as iX, RealtimeWebhookListInput as iY, RealtimeWebhookListOutput as iZ, RealtimeWebhookSecretRotateInput as i_, RealtimeArchiveExportInput as ia, RealtimeArchiveExportOutput as ib, RealtimeArchiveExportStatusInput as ic, RealtimeArchiveExportStatusOutput as id, RealtimeArchiveGetInput as ie, RealtimeArchiveGetOutput as ig, RealtimeGrantCreateInput as ih, RealtimeGrantCreateOutput as ii, RealtimeGrantListInput as ij, RealtimeGrantListOutput as ik, RealtimeGrantRevokeInput as il, RealtimeGrantRevokeOutput as im, RealtimeHistoryGetInput as io, RealtimeHistoryGetOutput as ip, RealtimeMessagesPublishInput as iq, RealtimeMessagesPublishOutput as ir, RealtimeNamespaceCreateInput as is, RealtimeNamespaceCreateOutput as it, RealtimeNamespaceDeleteInput as iu, RealtimeNamespaceDeleteOutput as iv, RealtimeNamespaceGetInput as iw, RealtimeNamespaceGetOutput as ix, RealtimeNamespaceListInput as iy, RealtimeNamespaceListOutput as iz, BrainClickupChannelsListOutput as j, TrackingLiveEventsListOutput as j$, RealtimeWebhookUpdateInput as j0, RealtimeWebhookUpdateOutput as j1, TrackingApiKeysCreateInput as j2, TrackingApiKeysCreateOutput as j3, TrackingApiKeysListInput as j4, TrackingApiKeysListOutput as j5, TrackingApiKeysRevokeInput as j6, TrackingApiKeysRevokeOutput as j7, TrackingApiKeysRotateInput as j8, TrackingApiKeysRotateOutput as j9, TrackingGoogleadsFeedbackStatusInput as jA, TrackingGoogleadsFeedbackStatusOutput as jB, TrackingGoogleadsFeedbackUploadsInput as jC, TrackingGoogleadsFeedbackUploadsOutput as jD, TrackingGoogleadsRoasReportInput as jE, TrackingGoogleadsRoasReportOutput as jF, TrackingGoogleadsSyncNowInput as jG, TrackingGoogleadsSyncNowOutput as jH, TrackingGoogleadsTrackingHealthInput as jI, TrackingGoogleadsTrackingHealthOutput as jJ, TrackingGoogleadsUsVsPlatformInput as jK, TrackingGoogleadsUsVsPlatformOutput as jL, TrackingIdentityHealthInput as jM, TrackingIdentityHealthOutput as jN, TrackingInstallDomainsCreateInput as jO, TrackingInstallDomainsCreateOutput as jP, TrackingInstallDomainsDeleteInput as jQ, TrackingInstallDomainsDeleteOutput as jR, TrackingInstallDomainsListInput as jS, TrackingInstallDomainsListOutput as jT, TrackingLinkDomainsCreateInput as jU, TrackingLinkDomainsCreateOutput as jV, TrackingLinkDomainsDeleteInput as jW, TrackingLinkDomainsDeleteOutput as jX, TrackingLinkDomainsListInput as jY, TrackingLinkDomainsListOutput as jZ, TrackingLiveEventsListInput as j_, TrackingDomainsCreateInput as ja, TrackingDomainsCreateOutput as jb, TrackingDomainsDeleteInput as jc, TrackingDomainsDeleteOutput as jd, TrackingDomainsGetInput as je, TrackingDomainsGetOutput as jf, TrackingDomainsListInput as jg, TrackingDomainsListOutput as jh, TrackingDomainsVerifyInput as ji, TrackingDomainsVerifyOutput as jj, TrackingEventNamesArchiveInput as jk, TrackingEventNamesArchiveOutput as jl, TrackingEventNamesListInput as jm, TrackingEventNamesListOutput as jn, TrackingEventNamesUnarchiveInput as jo, TrackingEventNamesUnarchiveOutput as jp, TrackingGoogleadsConnectionStatusInput as jq, TrackingGoogleadsConnectionStatusOutput as jr, TrackingGoogleadsConversionActionsInput as js, TrackingGoogleadsConversionActionsOutput as jt, TrackingGoogleadsFeedbackConfigGetInput as ju, TrackingGoogleadsFeedbackConfigGetOutput as jv, TrackingGoogleadsFeedbackConfigSetInput as jw, TrackingGoogleadsFeedbackConfigSetOutput as jx, TrackingGoogleadsFeedbackRunInput as jy, TrackingGoogleadsFeedbackRunOutput as jz, BrainClickupConnectionsListInput as k, TrackingProfilesDeleteInput as k0, TrackingProfilesDeleteOutput as k1, TrackingProfilesExportInput as k2, TrackingProfilesExportOutput as k3, TrackingProfilesGetInput as k4, TrackingProfilesGetOutput as k5, TrackingProfilesListInput as k6, TrackingProfilesListOutput as k7, TrackingReportsAttributedJourneyInput as k8, TrackingReportsAttributedJourneyOutput as k9, TrackingReportsRevenueBySourceInput as ka, TrackingReportsRevenueBySourceOutput as kb, TrackingReportsSourcePeopleInput as kc, TrackingReportsSourcePeopleOutput as kd, TrackingSnippetsGetInput as ke, TrackingSnippetsGetOutput as kf, WaitlistConfigGetInput as kg, WaitlistConfigGetOutput as kh, WaitlistConfigUpsertInput as ki, WaitlistConfigUpsertOutput as kj, WaitlistEmbedGetInput as kk, WaitlistEmbedGetOutput as kl, WaitlistInvitesSendInput as km, WaitlistInvitesSendOutput as kn, WaitlistSignupsEraseInput as ko, WaitlistSignupsEraseOutput as kp, WaitlistSignupsFunnelInput as kq, WaitlistSignupsFunnelOutput as kr, WaitlistSignupsListInput as ks, WaitlistSignupsListOutput as kt, BrainClickupConnectionsListOutput as l, BrainClickupListsListInput as m, BrainClickupListsListOutput as n, BrainClickupSpacesListInput as o, BrainClickupSpacesListOutput as p, BrainCognitionDigestInput as q, BrainCognitionDigestOutput as r, BrainCognitionStatusInput as s, BrainCognitionStatusOutput as t, BrainCognitionSweepInput as u, BrainCognitionSweepOutput as v, BrainConnectorBranchesListInput as w, BrainConnectorBranchesListOutput as x, BrainConnectorConnectionsListInput as y, BrainConnectorConnectionsListOutput as z };
+export type { BrainGdriveConnectionsListInput as $, AnalyticsQueryRunInput as A, BrainBackupCreateInput as B, BrainConnectorReposListInput as C, BrainConnectorReposListOutput as D, BrainDaemonBatchStatusInput as E, BrainDaemonBatchStatusOutput as F, GeneratedClient as G, BrainDaemonCreateInput as H, BrainDaemonCreateOutput as I, BrainDaemonGetInput as J, BrainDaemonGetOutput as K, BrainDaemonReingestInput as L, BrainDaemonReingestOutput as M, BrainDaemonRemoveInput as N, BrainDaemonRemoveOutput as O, BrainDaemonRunItemsInput as P, BrainDaemonRunItemsOutput as Q, BrainDaemonRunInput as R, BrainDaemonRunOutput as S, BrainDaemonRunsInput as T, BrainDaemonRunsOutput as U, BrainDaemonStatusInput as V, BrainDaemonStatusOutput as W, BrainDaemonUpdateInput as X, BrainDaemonUpdateOutput as Y, BrainDaemonsListInput as Z, BrainDaemonsListOutput as _, AnalyticsQueryRunOutput as a, DeploymentAlertEventsListInput as a$, BrainGdriveConnectionsListOutput as a0, BrainKnowledgeEntityMemoriesInput as a1, BrainKnowledgeEntityMemoriesOutput as a2, BrainKnowledgeGraphInput as a3, BrainKnowledgeGraphOutput as a4, BrainKnowledgeNeighborhoodInput as a5, BrainKnowledgeNeighborhoodOutput as a6, BrainKnowledgeRelationsInput as a7, BrainKnowledgeRelationsOutput as a8, BrainKnowledgeSearchInput as a9, ConsentConfigThemeUpsertOutput as aA, ConsentDashboardConfigGetInput as aB, ConsentDashboardConfigGetOutput as aC, ConsentDashboardDecisionsListInput as aD, ConsentDashboardDecisionsListOutput as aE, ConsentDashboardEmbedSnippetGetInput as aF, ConsentDashboardEmbedSnippetGetOutput as aG, ConsentDashboardStatsGetInput as aH, ConsentDashboardStatsGetOutput as aI, ConsentEmbedGetInput as aJ, ConsentEmbedGetOutput as aK, ConsentProvidersCreateInput as aL, ConsentProvidersCreateOutput as aM, ConsentProvidersDeleteInput as aN, ConsentProvidersDeleteOutput as aO, ConsentProvidersListInput as aP, ConsentProvidersListOutput as aQ, ConsentProvidersUpdateInput as aR, ConsentProvidersUpdateOutput as aS, ConsentRecordsExportInput as aT, ConsentRecordsExportOutput as aU, ConsentStatsGetInput as aV, ConsentStatsGetOutput as aW, DeploymentAlertCreateInput as aX, DeploymentAlertCreateOutput as aY, DeploymentAlertDeleteInput as aZ, DeploymentAlertDeleteOutput as a_, BrainKnowledgeSearchOutput as aa, BrainMemoryAddInput as ab, BrainMemoryAddOutput as ac, BrainMemoryDeleteInput as ad, BrainMemoryDeleteOutput as ae, BrainMemoryGetInput as af, BrainMemoryGetOutput as ag, BrainMemoryListInput as ah, BrainMemoryListOutput as ai, BrainMemorySearchInput as aj, BrainMemorySearchOutput as ak, BrainMemoryStatsInput as al, BrainMemoryStatsOutput as am, BrainMemoryUpdateInput as an, BrainMemoryUpdateOutput as ao, BrainProductSharedMemoryResetInput as ap, BrainProductSharedMemoryResetOutput as aq, BrainRestoreStatusInput as ar, BrainRestoreStatusOutput as as, ConsentConfigCookieDomainUpsertInput as at, ConsentConfigCookieDomainUpsertOutput as au, ConsentConfigCustomizationUpsertInput as av, ConsentConfigCustomizationUpsertOutput as aw, ConsentConfigFloatingIconUpsertInput as ax, ConsentConfigFloatingIconUpsertOutput as ay, ConsentConfigThemeUpsertInput as az, BrainBackupCreateOutput as b, DeploymentDomainListByServiceInput as b$, DeploymentAlertEventsListOutput as b0, DeploymentAlertListInput as b1, DeploymentAlertListOutput as b2, DeploymentAlertUpdateInput as b3, DeploymentAlertUpdateOutput as b4, DeploymentAnalyticsQueryInput as b5, DeploymentAnalyticsQueryOutput as b6, DeploymentAuditListInput as b7, DeploymentAuditListOutput as b8, DeploymentBuildGetInput as b9, DeploymentCloudSqlInstanceBackupOutput as bA, DeploymentCloudSqlInstanceCreateInput as bB, DeploymentCloudSqlInstanceCreateOutput as bC, DeploymentCloudSqlInstanceDeleteInput as bD, DeploymentCloudSqlInstanceDeleteOutput as bE, DeploymentCloudSqlInstanceGetInput as bF, DeploymentCloudSqlInstanceGetOutput as bG, DeploymentCloudSqlInstanceListInput as bH, DeploymentCloudSqlInstanceListOutput as bI, DeploymentCloudSqlInstanceResizeInput as bJ, DeploymentCloudSqlInstanceResizeOutput as bK, DeploymentCloudSqlInstanceRestoreInput as bL, DeploymentCloudSqlInstanceRestoreOutput as bM, DeploymentCloudSqlLogsInput as bN, DeploymentCloudSqlLogsOutput as bO, DeploymentDeploymentCancelInput as bP, DeploymentDeploymentCancelOutput as bQ, DeploymentDeploymentGetInput as bR, DeploymentDeploymentGetOutput as bS, DeploymentDeploymentListInput as bT, DeploymentDeploymentListOutput as bU, DeploymentDomainAddInput as bV, DeploymentDomainAddOutput as bW, DeploymentDomainAllowedListInput as bX, DeploymentDomainAllowedListOutput as bY, DeploymentDomainGetInput as bZ, DeploymentDomainGetOutput as b_, DeploymentBuildGetOutput as ba, DeploymentBuildListInput as bb, DeploymentBuildListOutput as bc, DeploymentBuildLogsInput as bd, DeploymentBuildLogsOutput as be, DeploymentCanvasGetInput as bf, DeploymentCanvasGetOutput as bg, DeploymentCanvasMoveNodeInput as bh, DeploymentCanvasMoveNodeOutput as bi, DeploymentCloudSqlBackfillLogFlagsInput as bj, DeploymentCloudSqlBackfillLogFlagsOutput as bk, DeploymentCloudSqlDatabaseAttachInput as bl, DeploymentCloudSqlDatabaseAttachOutput as bm, DeploymentCloudSqlDatabaseCreateInput as bn, DeploymentCloudSqlDatabaseCreateOutput as bo, DeploymentCloudSqlDatabaseDeleteInput as bp, DeploymentCloudSqlDatabaseDeleteOutput as bq, DeploymentCloudSqlDatabaseDetachInput as br, DeploymentCloudSqlDatabaseDetachOutput as bs, DeploymentCloudSqlDatabaseGetInput as bt, DeploymentCloudSqlDatabaseGetOutput as bu, DeploymentCloudSqlDatabaseListInput as bv, DeploymentCloudSqlDatabaseListOutput as bw, DeploymentCloudSqlInstanceBackupListInput as bx, DeploymentCloudSqlInstanceBackupListOutput as by, DeploymentCloudSqlInstanceBackupInput as bz, BrainBackupRestoreInput as c, DeploymentMetricsGetInput as c$, DeploymentDomainListByServiceOutput as c0, DeploymentDomainListInput as c1, DeploymentDomainListOutput as c2, DeploymentDomainRedirectWwwInput as c3, DeploymentDomainRedirectWwwOutput as c4, DeploymentDomainRemoveInput as c5, DeploymentDomainRemoveOutput as c6, DeploymentDomainRoutesAddInput as c7, DeploymentDomainRoutesAddOutput as c8, DeploymentDomainRoutesListInput as c9, DeploymentManagedServiceBackupListOutput as cA, DeploymentManagedServiceBackupInput as cB, DeploymentManagedServiceBackupOutput as cC, DeploymentManagedServiceConnectInfoInput as cD, DeploymentManagedServiceConnectInfoOutput as cE, DeploymentManagedServiceDeleteInput as cF, DeploymentManagedServiceDeleteOutput as cG, DeploymentManagedServiceGetInput as cH, DeploymentManagedServiceGetOutput as cI, DeploymentManagedServiceListInput as cJ, DeploymentManagedServiceListOutput as cK, DeploymentManagedServiceLogsInput as cL, DeploymentManagedServiceLogsOutput as cM, DeploymentManagedServiceProvisionInput as cN, DeploymentManagedServiceProvisionOutput as cO, DeploymentManagedServiceReconcileInput as cP, DeploymentManagedServiceReconcileOutput as cQ, DeploymentManagedServiceResizeInput as cR, DeploymentManagedServiceResizeOutput as cS, DeploymentManagedServiceRestoreInput as cT, DeploymentManagedServiceRestoreOutput as cU, DeploymentManagedServiceStartInput as cV, DeploymentManagedServiceStartOutput as cW, DeploymentManagedServiceStopInput as cX, DeploymentManagedServiceStopOutput as cY, DeploymentManagedServiceTypesInput as cZ, DeploymentManagedServiceTypesOutput as c_, DeploymentDomainRoutesListOutput as ca, DeploymentDomainRoutesRemoveInput as cb, DeploymentDomainRoutesRemoveOutput as cc, DeploymentDomainRoutesUpdateInput as cd, DeploymentDomainRoutesUpdateOutput as ce, DeploymentDomainVerifyInput as cf, DeploymentDomainVerifyOutput as cg, DeploymentEnvironmentCreateInput as ch, DeploymentEnvironmentCreateOutput as ci, DeploymentEnvironmentDeleteInput as cj, DeploymentEnvironmentDeleteOutput as ck, DeploymentEnvironmentForkInput as cl, DeploymentEnvironmentForkOutput as cm, DeploymentEnvironmentGetInput as cn, DeploymentEnvironmentGetOutput as co, DeploymentEnvironmentListInput as cp, DeploymentEnvironmentListOutput as cq, DeploymentEnvironmentReconcileInput as cr, DeploymentEnvironmentReconcileOutput as cs, DeploymentEnvironmentUpdateInput as ct, DeploymentEnvironmentUpdateOutput as cu, DeploymentEventsListByEnvironmentInput as cv, DeploymentEventsListByEnvironmentOutput as cw, DeploymentEventsListByServiceInput as cx, DeploymentEventsListByServiceOutput as cy, DeploymentManagedServiceBackupListInput as cz, BrainBackupRestoreOutput as d, DeploymentVcsBranchListOutput as d$, DeploymentMetricsGetOutput as d0, DeploymentPreviewEnvironmentCreateInput as d1, DeploymentPreviewEnvironmentCreateOutput as d2, DeploymentPreviewEnvironmentDeleteInput as d3, DeploymentPreviewEnvironmentDeleteOutput as d4, DeploymentPreviewEnvironmentListInput as d5, DeploymentPreviewEnvironmentListOutput as d6, DeploymentPreviewPolicyGetInput as d7, DeploymentPreviewPolicyGetOutput as d8, DeploymentPreviewPolicySetInput as d9, DeploymentSshCommandInput as dA, DeploymentSshCommandOutput as dB, DeploymentSshKeyDeleteInput as dC, DeploymentSshKeyDeleteOutput as dD, DeploymentSshKeyListInput as dE, DeploymentSshKeyListOutput as dF, DeploymentSshKeyRegisterInput as dG, DeploymentSshKeyRegisterOutput as dH, DeploymentVariableListEnvInput as dI, DeploymentVariableListEnvOutput as dJ, DeploymentVariableListProductInput as dK, DeploymentVariableListProductOutput as dL, DeploymentVariableListInput as dM, DeploymentVariableListOutput as dN, DeploymentVariableSetEnvInput as dO, DeploymentVariableSetEnvOutput as dP, DeploymentVariableSetInput as dQ, DeploymentVariableSetOutput as dR, DeploymentVariableSetProductInput as dS, DeploymentVariableSetProductOutput as dT, DeploymentVariableUnsetEnvInput as dU, DeploymentVariableUnsetEnvOutput as dV, DeploymentVariableUnsetInput as dW, DeploymentVariableUnsetOutput as dX, DeploymentVariableUnsetProductInput as dY, DeploymentVariableUnsetProductOutput as dZ, DeploymentVcsBranchListInput as d_, DeploymentPreviewPolicySetOutput as da, DeploymentServiceCreateInput as db, DeploymentServiceCreateOutput as dc, DeploymentServiceDeleteInput as dd, DeploymentServiceDeleteOutput as de, DeploymentServiceExecInput as df, DeploymentServiceExecOutput as dg, DeploymentServiceGetInput as dh, DeploymentServiceGetOutput as di, DeploymentServiceListInput as dj, DeploymentServiceListOutput as dk, DeploymentServiceLogsInput as dl, DeploymentServiceLogsOutput as dm, DeploymentServiceRedeployInput as dn, DeploymentServiceRedeployOutput as dp, DeploymentServiceRestartInput as dq, DeploymentServiceRestartOutput as dr, DeploymentServiceRollbackInput as ds, DeploymentServiceRollbackOutput as dt, DeploymentServiceScaleInput as du, DeploymentServiceScaleOutput as dv, DeploymentServiceUpdateInput as dw, DeploymentServiceUpdateOutput as dx, DeploymentServiceWakeInput as dy, DeploymentServiceWakeOutput as dz, BrainBackupStatusInput as e, MailDomainDeleteOutput as e$, DeploymentVcsConnectionListInput as e0, DeploymentVcsConnectionListOutput as e1, DeploymentVcsRepoListInput as e2, DeploymentVcsRepoListOutput as e3, DeploymentVolumeCreateInput as e4, DeploymentVolumeCreateOutput as e5, DeploymentVolumeDeleteInput as e6, DeploymentVolumeDeleteOutput as e7, DeploymentVolumeDetachInput as e8, DeploymentVolumeDetachOutput as e9, MailBroadcastDeleteInput as eA, MailBroadcastDeleteOutput as eB, MailBroadcastGetInput as eC, MailBroadcastGetOutput as eD, MailBroadcastListInput as eE, MailBroadcastListOutput as eF, MailBroadcastQueueInput as eG, MailBroadcastQueueOutput as eH, MailBroadcastStatsInput as eI, MailBroadcastStatsOutput as eJ, MailBroadcastUpdateInput as eK, MailBroadcastUpdateOutput as eL, MailContactCreateInput as eM, MailContactCreateOutput as eN, MailContactDeleteInput as eO, MailContactDeleteOutput as eP, MailContactGetInput as eQ, MailContactGetOutput as eR, MailContactListInput as eS, MailContactListOutput as eT, MailContactUpdateInput as eU, MailContactUpdateOutput as eV, MailDomainAllowedListInput as eW, MailDomainAllowedListOutput as eX, MailDomainCreateInput as eY, MailDomainCreateOutput as eZ, MailDomainDeleteInput as e_, DeploymentVolumeGetInput as ea, DeploymentVolumeGetOutput as eb, DeploymentVolumeListInput as ec, DeploymentVolumeListOutput as ed, DeploymentVolumeResizeInput as ee, DeploymentVolumeResizeOutput as ef, MailApikeyCreateInput as eg, MailApikeyCreateOutput as eh, MailApikeyDeleteInput as ei, MailApikeyDeleteOutput as ej, MailApikeyListInput as ek, MailApikeyListOutput as el, MailAudienceCreateInput as em, MailAudienceCreateOutput as en, MailAudienceDeleteInput as eo, MailAudienceDeleteOutput as ep, MailAudienceGetInput as eq, MailAudienceGetOutput as er, MailAudienceListInput as es, MailAudienceListOutput as et, MailAudienceUpdateInput as eu, MailAudienceUpdateOutput as ev, MailBroadcastCancelInput as ew, MailBroadcastCancelOutput as ex, MailBroadcastCreateInput as ey, MailBroadcastCreateOutput as ez, BrainBackupStatusOutput as f, OrganizationCloudflareInstallOutput as f$, MailDomainGetInput as f0, MailDomainGetOutput as f1, MailDomainListInput as f2, MailDomainListOutput as f3, MailDomainUpdateInput as f4, MailDomainUpdateOutput as f5, MailDomainVerifyInput as f6, MailDomainVerifyOutput as f7, MailEmailCancelInput as f8, MailEmailCancelOutput as f9, MailTemplatePublishOutput as fA, MailTemplateUpdateInput as fB, MailTemplateUpdateOutput as fC, MailUsageGetInput as fD, MailUsageGetOutput as fE, MailWebhookCreateInput as fF, MailWebhookCreateOutput as fG, MailWebhookDeleteInput as fH, MailWebhookDeleteOutput as fI, MailWebhookDeliveriesListInput as fJ, MailWebhookDeliveriesListOutput as fK, MailWebhookGetInput as fL, MailWebhookGetOutput as fM, MailWebhookListInput as fN, MailWebhookListOutput as fO, MailWebhookUpdateInput as fP, MailWebhookUpdateOutput as fQ, MailEmailGetOutput as fR, OrganizationAuthMeInput as fS, OrganizationAuthMeOutput as fT, OrganizationBindingsListInput as fU, OrganizationBindingsListOutput as fV, OrganizationClickupInstallInput as fW, OrganizationClickupInstallOutput as fX, OrganizationClickupListInstallationsInput as fY, OrganizationClickupListInstallationsOutput as fZ, OrganizationCloudflareInstallInput as f_, MailEmailGetInput as fa, MailEmailSendBatchInput as fb, MailEmailSendBatchOutput as fc, MailEmailSendInput as fd, MailEmailSendOutput as fe, MailEmailUpdateInput as ff, MailEmailUpdateOutput as fg, MailReputationGetInput as fh, MailReputationGetOutput as fi, MailStatsGetInput as fj, MailStatsGetOutput as fk, MailSuppressionAddInput as fl, MailSuppressionAddOutput as fm, MailSuppressionListInput as fn, MailSuppressionListOutput as fo, MailSuppressionRemoveInput as fp, MailSuppressionRemoveOutput as fq, MailTemplateCreateInput as fr, MailTemplateCreateOutput as fs, MailTemplateDeleteInput as ft, MailTemplateDeleteOutput as fu, MailTemplateGetInput as fv, MailTemplateGetOutput as fw, MailTemplateListInput as fx, MailTemplateListOutput as fy, MailTemplatePublishInput as fz, BrainBackupsListInput as g, OrganizationMemberListOutput as g$, OrganizationConnectorsApproveRequestInput as g0, OrganizationConnectorsApproveRequestOutput as g1, OrganizationConnectorsAttachInput as g2, OrganizationConnectorsAttachOutput as g3, OrganizationConnectorsDeleteInput as g4, OrganizationConnectorsDeleteOutput as g5, OrganizationConnectorsDenyRequestInput as g6, OrganizationConnectorsDenyRequestOutput as g7, OrganizationConnectorsDetachInput as g8, OrganizationConnectorsDetachOutput as g9, OrganizationExtensionsListInstalledInput as gA, OrganizationExtensionsListInstalledOutput as gB, OrganizationExtensionsListInput as gC, OrganizationExtensionsListOutput as gD, OrganizationExtensionsUninstallInput as gE, OrganizationExtensionsUninstallOutput as gF, OrganizationFeedbackSubmitInput as gG, OrganizationFeedbackSubmitOutput as gH, OrganizationGdriveInstallInput as gI, OrganizationGdriveInstallOutput as gJ, OrganizationGithubInstallInput as gK, OrganizationGithubInstallOutput as gL, OrganizationGithubListInstallationsInput as gM, OrganizationGithubListInstallationsOutput as gN, OrganizationGoogleadsInstallInput as gO, OrganizationGoogleadsInstallOutput as gP, OrganizationListInput as gQ, OrganizationListOutput as gR, OrganizationMemberAcceptInviteInput as gS, OrganizationMemberAcceptInviteOutput as gT, OrganizationMemberInviteInput as gU, OrganizationMemberInviteOutput as gV, OrganizationMemberListInvitationsInput as gW, OrganizationMemberListInvitationsOutput as gX, OrganizationMemberListProductAccessInput as gY, OrganizationMemberListProductAccessOutput as gZ, OrganizationMemberListInput as g_, OrganizationConnectorsListAttachmentsInput as ga, OrganizationConnectorsListAttachmentsOutput as gb, OrganizationConnectorsListAvailableInput as gc, OrganizationConnectorsListAvailableOutput as gd, OrganizationConnectorsListOrgInput as ge, OrganizationConnectorsListOrgOutput as gf, OrganizationConnectorsListInput as gg, OrganizationConnectorsListOutput as gh, OrganizationConnectorsListRequestsInput as gi, OrganizationConnectorsListRequestsOutput as gj, OrganizationConnectorsRemoveInput as gk, OrganizationConnectorsRemoveOutput as gl, OrganizationConnectorsRequestInput as gm, OrganizationConnectorsRequestOutput as gn, OrganizationCreateInput as go, OrganizationCreateOutput as gp, OrganizationDomainsAddInput as gq, OrganizationDomainsAddOutput as gr, OrganizationDomainsGetInput as gs, OrganizationDomainsGetOutput as gt, OrganizationDomainsListInput as gu, OrganizationDomainsListOutput as gv, OrganizationDomainsRemoveInput as gw, OrganizationDomainsRemoveOutput as gx, OrganizationExtensionsInstallInput as gy, OrganizationExtensionsInstallOutput as gz, BrainBackupsListOutput as h, PlaygroundLifecycleGetStateOutput as h$, OrganizationMemberRemoveInput as h0, OrganizationMemberRemoveOutput as h1, OrganizationMemberRevokeInvitationInput as h2, OrganizationMemberRevokeInvitationOutput as h3, OrganizationMemberSetRoleInput as h4, OrganizationMemberSetRoleOutput as h5, OrganizationMemberShareProductInput as h6, OrganizationMemberShareProductOutput as h7, OrganizationMemberUnshareProductInput as h8, OrganizationMemberUnshareProductOutput as h9, OrganizationRolesGetInput as hA, OrganizationRolesGetOutput as hB, OrganizationRolesListInput as hC, OrganizationRolesListOutput as hD, OrganizationRolesUpdateInput as hE, OrganizationRolesUpdateOutput as hF, OrganizationSelectInput as hG, OrganizationSelectOutput as hH, PlaygroundAnalyticsOverviewInput as hI, PlaygroundAnalyticsOverviewOutput as hJ, PlaygroundBillingEntitlementsInput as hK, PlaygroundBillingEntitlementsOutput as hL, PlaygroundBillingRecordUsageInput as hM, PlaygroundBillingRecordUsageOutput as hN, PlaygroundClickupCreateTaskInput as hO, PlaygroundClickupCreateTaskOutput as hP, PlaygroundClickupGetLastWebhookInput as hQ, PlaygroundClickupGetLastWebhookOutput as hR, PlaygroundClickupGetOverviewInput as hS, PlaygroundClickupGetOverviewOutput as hT, PlaygroundGdriveGetLastChangeInput as hU, PlaygroundGdriveGetLastChangeOutput as hV, PlaygroundGdriveReadFileInput as hW, PlaygroundGdriveReadFileOutput as hX, PlaygroundGoogleadsReadCustomerInput as hY, PlaygroundGoogleadsReadCustomerOutput as hZ, PlaygroundLifecycleGetStateInput as h_, OrganizationMembersAssignRoleInput as ha, OrganizationMembersAssignRoleOutput as hb, OrganizationPermissionCatalogInput as hc, OrganizationPermissionCatalogOutput as hd, OrganizationProductAcceptInvitationInput as he, OrganizationProductAcceptInvitationOutput as hf, OrganizationProductCreateInput as hg, OrganizationProductCreateOutput as hh, OrganizationProductInviteInput as hi, OrganizationProductInviteOutput as hj, OrganizationProductListInvitationsInput as hk, OrganizationProductListInvitationsOutput as hl, OrganizationProductListMembersInput as hm, OrganizationProductListMembersOutput as hn, OrganizationProductListInput as ho, OrganizationProductListOutput as hp, OrganizationProductListRolesInput as hq, OrganizationProductListRolesOutput as hr, OrganizationProductRevokeInvitationInput as hs, OrganizationProductRevokeInvitationOutput as ht, OrganizationProductSelectInput as hu, OrganizationProductSelectOutput as hv, OrganizationRolesCreateInput as hw, OrganizationRolesCreateOutput as hx, OrganizationRolesDeleteInput as hy, OrganizationRolesDeleteOutput as hz, BrainClickupChannelsListInput as i, RealtimeWebhookSecretRotateOutput as i$, PlaygroundLifecycleListEventsInput as i0, PlaygroundLifecycleListEventsOutput as i1, PlaygroundWebhookGetLastInput as i2, PlaygroundWebhookGetLastOutput as i3, RealtimeApikeyCreateInput as i4, RealtimeApikeyCreateOutput as i5, RealtimeApikeyListInput as i6, RealtimeApikeyListOutput as i7, RealtimeApikeyRevokeInput as i8, RealtimeApikeyRevokeOutput as i9, RealtimeNamespaceUpdateInput as iA, RealtimeNamespaceUpdateOutput as iB, RealtimePresenceEnterInput as iC, RealtimePresenceEnterOutput as iD, RealtimePresenceGetInput as iE, RealtimePresenceGetOutput as iF, RealtimePresenceLeaveInput as iG, RealtimePresenceLeaveOutput as iH, RealtimePresenceStatsInput as iI, RealtimePresenceStatsOutput as iJ, RealtimePresenceUpdateInput as iK, RealtimePresenceUpdateOutput as iL, RealtimeStatusGetInput as iM, RealtimeStatusGetOutput as iN, RealtimeTokensCreateInput as iO, RealtimeTokensCreateOutput as iP, RealtimeWebhookCreateInput as iQ, RealtimeWebhookCreateOutput as iR, RealtimeWebhookDeleteInput as iS, RealtimeWebhookDeleteOutput as iT, RealtimeWebhookDeliveriesListInput as iU, RealtimeWebhookDeliveriesListOutput as iV, RealtimeWebhookGetInput as iW, RealtimeWebhookGetOutput as iX, RealtimeWebhookListInput as iY, RealtimeWebhookListOutput as iZ, RealtimeWebhookSecretRotateInput as i_, RealtimeArchiveExportInput as ia, RealtimeArchiveExportOutput as ib, RealtimeArchiveExportStatusInput as ic, RealtimeArchiveExportStatusOutput as id, RealtimeArchiveGetInput as ie, RealtimeArchiveGetOutput as ig, RealtimeGrantCreateInput as ih, RealtimeGrantCreateOutput as ii, RealtimeGrantListInput as ij, RealtimeGrantListOutput as ik, RealtimeGrantRevokeInput as il, RealtimeGrantRevokeOutput as im, RealtimeHistoryGetInput as io, RealtimeHistoryGetOutput as ip, RealtimeMessagesPublishInput as iq, RealtimeMessagesPublishOutput as ir, RealtimeNamespaceCreateInput as is, RealtimeNamespaceCreateOutput as it, RealtimeNamespaceDeleteInput as iu, RealtimeNamespaceDeleteOutput as iv, RealtimeNamespaceGetInput as iw, RealtimeNamespaceGetOutput as ix, RealtimeNamespaceListInput as iy, RealtimeNamespaceListOutput as iz, BrainClickupChannelsListOutput as j, TrackingLiveEventsListOutput as j$, RealtimeWebhookUpdateInput as j0, RealtimeWebhookUpdateOutput as j1, TrackingApiKeysCreateInput as j2, TrackingApiKeysCreateOutput as j3, TrackingApiKeysListInput as j4, TrackingApiKeysListOutput as j5, TrackingApiKeysRevokeInput as j6, TrackingApiKeysRevokeOutput as j7, TrackingApiKeysRotateInput as j8, TrackingApiKeysRotateOutput as j9, TrackingGoogleadsFeedbackStatusInput as jA, TrackingGoogleadsFeedbackStatusOutput as jB, TrackingGoogleadsFeedbackUploadsInput as jC, TrackingGoogleadsFeedbackUploadsOutput as jD, TrackingGoogleadsRoasReportInput as jE, TrackingGoogleadsRoasReportOutput as jF, TrackingGoogleadsSyncNowInput as jG, TrackingGoogleadsSyncNowOutput as jH, TrackingGoogleadsTrackingHealthInput as jI, TrackingGoogleadsTrackingHealthOutput as jJ, TrackingGoogleadsUsVsPlatformInput as jK, TrackingGoogleadsUsVsPlatformOutput as jL, TrackingIdentityHealthInput as jM, TrackingIdentityHealthOutput as jN, TrackingInstallDomainsCreateInput as jO, TrackingInstallDomainsCreateOutput as jP, TrackingInstallDomainsDeleteInput as jQ, TrackingInstallDomainsDeleteOutput as jR, TrackingInstallDomainsListInput as jS, TrackingInstallDomainsListOutput as jT, TrackingLinkDomainsCreateInput as jU, TrackingLinkDomainsCreateOutput as jV, TrackingLinkDomainsDeleteInput as jW, TrackingLinkDomainsDeleteOutput as jX, TrackingLinkDomainsListInput as jY, TrackingLinkDomainsListOutput as jZ, TrackingLiveEventsListInput as j_, TrackingDomainsCreateInput as ja, TrackingDomainsCreateOutput as jb, TrackingDomainsDeleteInput as jc, TrackingDomainsDeleteOutput as jd, TrackingDomainsGetInput as je, TrackingDomainsGetOutput as jf, TrackingDomainsListInput as jg, TrackingDomainsListOutput as jh, TrackingDomainsVerifyInput as ji, TrackingDomainsVerifyOutput as jj, TrackingEventNamesArchiveInput as jk, TrackingEventNamesArchiveOutput as jl, TrackingEventNamesListInput as jm, TrackingEventNamesListOutput as jn, TrackingEventNamesUnarchiveInput as jo, TrackingEventNamesUnarchiveOutput as jp, TrackingGoogleadsConnectionStatusInput as jq, TrackingGoogleadsConnectionStatusOutput as jr, TrackingGoogleadsConversionActionsInput as js, TrackingGoogleadsConversionActionsOutput as jt, TrackingGoogleadsFeedbackConfigGetInput as ju, TrackingGoogleadsFeedbackConfigGetOutput as jv, TrackingGoogleadsFeedbackConfigSetInput as jw, TrackingGoogleadsFeedbackConfigSetOutput as jx, TrackingGoogleadsFeedbackRunInput as jy, TrackingGoogleadsFeedbackRunOutput as jz, BrainClickupConnectionsListInput as k, UsersUsersGetOutput as k$, TrackingProfilesDeleteInput as k0, TrackingProfilesDeleteOutput as k1, TrackingProfilesExportInput as k2, TrackingProfilesExportOutput as k3, TrackingProfilesGetInput as k4, TrackingProfilesGetOutput as k5, TrackingProfilesListInput as k6, TrackingProfilesListOutput as k7, TrackingReportsAttributedJourneyInput as k8, TrackingReportsAttributedJourneyOutput as k9, UsersKeysRotateInput as kA, UsersKeysRotateOutput as kB, UsersOpsRetentionGetInput as kC, UsersOpsRetentionGetOutput as kD, UsersOpsSloGetInput as kE, UsersOpsSloGetOutput as kF, UsersSessionsGetInput as kG, UsersSessionsGetOutput as kH, UsersSessionsImpersonateInput as kI, UsersSessionsImpersonateOutput as kJ, UsersSessionsListInput as kK, UsersSessionsListOutput as kL, UsersSessionsRevokeInput as kM, UsersSessionsRevokeOutput as kN, UsersStatsGetInput as kO, UsersStatsGetOutput as kP, UsersUsersBanInput as kQ, UsersUsersBanOutput as kR, UsersUsersCreateInput as kS, UsersUsersCreateOutput as kT, UsersUsersDeleteInput as kU, UsersUsersDeleteOutput as kV, UsersUsersEraseInput as kW, UsersUsersEraseOutput as kX, UsersUsersExportInput as kY, UsersUsersExportOutput as kZ, UsersUsersGetInput as k_, TrackingReportsRevenueBySourceInput as ka, TrackingReportsRevenueBySourceOutput as kb, TrackingReportsSourcePeopleInput as kc, TrackingReportsSourcePeopleOutput as kd, TrackingSnippetsGetInput as ke, TrackingSnippetsGetOutput as kf, UsersApikeysCreateInput as kg, UsersApikeysCreateOutput as kh, UsersApikeysListInput as ki, UsersApikeysListOutput as kj, UsersApikeysRevokeInput as kk, UsersApikeysRevokeOutput as kl, UsersAuditListInput as km, UsersAuditListOutput as kn, UsersConfigGetInput as ko, UsersConfigGetOutput as kp, UsersConfigUpsertInput as kq, UsersConfigUpsertOutput as kr, UsersFactorsListInput as ks, UsersFactorsListOutput as kt, UsersFactorsResetInput as ku, UsersFactorsResetOutput as kv, UsersKeysListInput as kw, UsersKeysListOutput as kx, UsersKeysRevokeInput as ky, UsersKeysRevokeOutput as kz, BrainClickupConnectionsListOutput as l, UsersUsersImportInput as l0, UsersUsersImportOutput as l1, UsersUsersInviteInput as l2, UsersUsersInviteOutput as l3, UsersUsersListInput as l4, UsersUsersListOutput as l5, UsersUsersSetPrimaryIdentifierInput as l6, UsersUsersSetPrimaryIdentifierOutput as l7, UsersUsersUnbanInput as l8, UsersUsersUnbanOutput as l9, WaitlistConfigGetInput as lA, WaitlistConfigGetOutput as lB, WaitlistConfigUpsertInput as lC, WaitlistConfigUpsertOutput as lD, WaitlistEmbedGetInput as lE, WaitlistEmbedGetOutput as lF, WaitlistInvitesSendInput as lG, WaitlistInvitesSendOutput as lH, WaitlistSignupsEraseInput as lI, WaitlistSignupsEraseOutput as lJ, WaitlistSignupsFunnelInput as lK, WaitlistSignupsFunnelOutput as lL, WaitlistSignupsListInput as lM, WaitlistSignupsListOutput as lN, UsersUsersUpdateInput as la, UsersUsersUpdateOutput as lb, UsersWaitlistEraseInput as lc, UsersWaitlistEraseOutput as ld, UsersWaitlistFunnelInput as le, UsersWaitlistFunnelOutput as lf, UsersWaitlistImportInput as lg, UsersWaitlistImportOutput as lh, UsersWaitlistInviteInput as li, UsersWaitlistInviteOutput as lj, UsersWaitlistListInput as lk, UsersWaitlistListOutput as ll, UsersWebhooksCreateInput as lm, UsersWebhooksCreateOutput as ln, UsersWebhooksDeleteInput as lo, UsersWebhooksDeleteOutput as lp, UsersWebhooksDeliveriesListInput as lq, UsersWebhooksDeliveriesListOutput as lr, UsersWebhooksGetInput as ls, UsersWebhooksGetOutput as lt, UsersWebhooksListInput as lu, UsersWebhooksListOutput as lv, UsersWebhooksRotateSecretInput as lw, UsersWebhooksRotateSecretOutput as lx, UsersWebhooksUpdateInput as ly, UsersWebhooksUpdateOutput as lz, BrainClickupListsListInput as m, BrainClickupListsListOutput as n, BrainClickupSpacesListInput as o, BrainClickupSpacesListOutput as p, BrainCognitionDigestInput as q, BrainCognitionDigestOutput as r, BrainCognitionStatusInput as s, BrainCognitionStatusOutput as t, BrainCognitionSweepInput as u, BrainCognitionSweepOutput as v, BrainConnectorBranchesListInput as w, BrainConnectorBranchesListOutput as x, BrainConnectorConnectionsListInput as y, BrainConnectorConnectionsListOutput as z };