@lessly/sdk-app 15.1.1 → 16.0.0

package/dist/{client.gen-CxFsxxHW.d.cts → client.gen-lpkpZleM.d.cts}

@@ -935,96 +935,6 @@ type BrainRestoreStatusOutput = ({
     snapshotId: string;
     preRestoreSnapshotId: (string | null);
 } | null);
-interface BrainUsageReportInput {
-    /**
-     * How many UTC days of this product's ledger to return, ending today (default 30, max 90)
-     */
-    days?: number;
-}
-interface BrainUsageReportOutput {
-    note: string;
-    /**
-     * Brain's own ledger, for THIS product only
-     */
-    product: {
-        /**
-         * Inclusive UTC end of the window (today), YYYY-MM-DD
-         */
-        to: string;
-        /**
-         * The window actually used, after clamping
-         */
-        days: number;
-        /**
-         * Inclusive UTC start of the window, YYYY-MM-DD
-         */
-        from: string;
-        rows: {
-            /**
-             * 'sync' | 'batch'; '' when the push carried none
-             */
-            mode: string;
-            /**
-             * Manifest meter slug, e.g. llm-tokens
-             */
-            meter: string;
-            /**
-             * Model dimension; '' when the push carried none
-             */
-            model: string;
-            /**
-             * How many record() calls landed in this slice
-             */
-            events: number;
-            /**
-             * Tokens we metered for this slice, delivered or not
-             */
-            tokens: number;
-            /**
-             * Purpose dimension; '' when the push carried none
-             */
-            purpose: string;
-            /**
-             * UTC calendar day, YYYY-MM-DD
-             */
-            usage_date: string;
-            /**
-             * Of those events, how many billing did not accept
-             */
-            delivery_failed: number;
-        }[];
-        /**
-         * The rows rolled up per meter across the whole window
-         */
-        totals: {
-            meter: string;
-            events: number;
-            tokens: number;
-            delivery_failed: number;
-        }[];
-        product_id: string;
-    };
-    /**
-     * The platform billing aggregate for the whole ORG; null if it could not be read
-     */
-    platform: ({
-        plan: string;
-        scope: "org";
-        meters: {
-            unit?: string;
-            used?: number;
-            limit?: (number | null);
-            remaining?: (number | null);
-            unlimited?: boolean;
-            meter_slug: string;
-        }[];
-        org_id: string;
-    } | null);
-    /**
-     * Why the platform aggregate is null; null when it was read successfully
-     */
-    platform_error: (string | null);
-}
 interface ConsentConfigCookieDomainUpsertInput {
     cookieDomain: ("" | null | string);
 }
@@ -2485,7 +2395,7 @@ interface DeploymentEnvironmentUpdateOutput {
     baseEnvironmentId: (string | null);
 }
 interface DeploymentEventsListByEnvironmentInput {
-    type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed");
+    type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled");
     limit?: number;
     since?: string;
     until?: string;
@@ -2493,7 +2403,7 @@ interface DeploymentEventsListByEnvironmentInput {
 }
 type DeploymentEventsListByEnvironmentOutput = {
     id: string;
-    type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed");
+    type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled");
     payload: {
         [k: string]: unknown;
     };
@@ -2505,7 +2415,7 @@ type DeploymentEventsListByEnvironmentOutput = {
     environmentId: (string | null);
 }[];
 interface DeploymentEventsListByServiceInput {
-    type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed");
+    type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled");
     limit?: number;
     since?: string;
     until?: string;
@@ -2514,7 +2424,7 @@ interface DeploymentEventsListByServiceInput {
 }
 type DeploymentEventsListByServiceOutput = {
     id: string;
-    type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed");
+    type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled");
     payload: {
         [k: string]: unknown;
     };
@@ -12757,6 +12667,19 @@ interface OrganizationConnectorsRequestOutput {
 }
 interface OrganizationCreateInput {
     name: string;
+    legalName?: string;
+    ownerName?: string;
+    /**
+     * @maxItems 50
+     */
+    beneficialOwners?: {
+        name: string;
+        country: string;
+        share_pct: number;
+    }[];
+    residencyCountry?: string;
+    ownershipConfirmed?: boolean;
+    countryOfIncorporation?: string;
 }
 interface OrganizationCreateOutput {
     id: string;
@@ -12824,7 +12747,7 @@ interface OrganizationExtensionsListOutput {
         id: string;
         name: string;
         status: string;
-        uiMode: ("federation" | "standalone");
+        uiMode: ("federation" | "standalone" | "none");
         version: string;
         manifest: {
             [k: string]: unknown;
@@ -12839,7 +12762,7 @@ interface OrganizationExtensionsListInstalledOutput {
         id: string;
         name: string;
         status: string;
-        uiMode: ("federation" | "standalone");
+        uiMode: ("federation" | "standalone" | "none");
         version: string;
         manifest: {
             [k: string]: unknown;
@@ -13116,6 +13039,7 @@ interface OrganizationProductAcceptInvitationOutput {
 }
 interface OrganizationProductCreateInput {
     name: string;
+    organizationId?: string;
 }
 interface OrganizationProductCreateOutput {
     id: string;
@@ -13130,17 +13054,25 @@ interface OrganizationProductCreateOutput {
     organizationId: string;
 }
 interface OrganizationProductInviteInput {
+    role?: ("admin" | "member" | "viewer");
     email: string;
     productId: string;
 }
-interface OrganizationProductInviteOutput {
+type OrganizationProductInviteOutput = ({
     id: string;
     role: string;
     email: (string | null);
     status: string;
+    outcome: "invited";
     createdAt: string;
     expiresAt: string;
-}
+} | {
+    role: string;
+    userId: string;
+    outcome: "added";
+    memberId: string;
+    productId: string;
+});
 interface OrganizationProductListInput {
 }
 interface OrganizationProductListOutput {
@@ -13217,6 +13149,22 @@ interface OrganizationProductSelectOutput {
     name: string;
     slug: string;
 }
+interface OrganizationProductUpdateInput {
+    name: string;
+    productId: string;
+}
+interface OrganizationProductUpdateOutput {
+    id: string;
+    name: string;
+    role: string;
+    slug: string;
+    demoAt: (string | null);
+    status: string;
+    blockedAt: (string | null);
+    createdAt: string;
+    archivedAt: (string | null);
+    organizationId: string;
+}
 interface OrganizationRolesCreateInput {
     deny?: string[];
     name: string;
@@ -13286,6 +13234,13 @@ interface OrganizationRolesUpdateOutput {
     updatedAt: string;
     organizationId: string;
 }
+interface OrganizationSecurityMfaEnableInput {
+    organizationId: string;
+}
+interface OrganizationSecurityMfaEnableOutput {
+    mfaRequired: true;
+    trustedDeviceAllowed: boolean;
+}
 interface OrganizationSelectInput {
     organizationId: string;
 }
@@ -13296,6 +13251,194 @@ interface OrganizationSelectOutput {
     };
     activeProductId: (string | null);
 }
+interface PlaygroundAnalyticsOverviewInput {
+    /**
+     * Max records per entity in recent[]; omit for the endpoint default
+     */
+    limit?: number;
+}
+interface PlaygroundAnalyticsOverviewOutput {
+    ok: boolean;
+    minted: boolean;
+    overview?: unknown;
+    http_status: number;
+}
+interface PlaygroundBillingEntitlementsInput {
+}
+interface PlaygroundBillingEntitlementsOutput {
+    ok: boolean;
+    minted: boolean;
+    http_status: number;
+    entitlements?: unknown;
+}
+interface PlaygroundBillingRecordUsageInput {
+    /**
+     * Quantity of events to record against playground-events (SUM); defaults to 1
+     */
+    value?: number;
+}
+interface PlaygroundBillingRecordUsageOutput {
+    minted: boolean;
+    accepted: (number | null);
+    recorded: boolean;
+    duplicates: (number | null);
+    http_status: number;
+}
+interface PlaygroundClickupCreateTaskInput {
+    /**
+     * Task title; defaults to a fixture label
+     */
+    name?: string;
+    /**
+     * ClickUp list id; falls back to CLICKUP_TEST_LIST_ID
+     */
+    listId?: string;
+}
+interface PlaygroundClickupCreateTaskOutput {
+    minted: boolean;
+    task_id: (string | null);
+    list_status: number;
+    vend_status: number;
+    clickup_status: number;
+    installation_count: number;
+}
+interface PlaygroundClickupGetLastWebhookInput {
+}
+type PlaygroundClickupGetLastWebhookOutput = ({
+    payload: string;
+    event_id: string;
+    provider: string;
+    verified: boolean;
+    product_id: string;
+    occurred_at: string;
+    connector_id: string;
+    clickup_event: (string | null);
+    receipt_count: number;
+} | {
+    found: false;
+});
+interface PlaygroundClickupGetOverviewInput {
+}
+interface PlaygroundClickupGetOverviewOutput {
+    team: ({
+        teamId: string;
+        teamName: string;
+    } | null);
+    lists: PlaygroundClickupGetOverviewOutputItems[];
+    tasks: {
+        id: string;
+        name: string;
+        status: (string | null);
+    }[];
+    minted: boolean;
+    spaces: PlaygroundClickupGetOverviewOutputItems[];
+    list_status: number;
+    vend_status: number;
+    lists_status: number;
+    tasks_status: number;
+    spaces_status: number;
+    folders_status: number;
+    installation_count: number;
+}
+interface PlaygroundClickupGetOverviewOutputItems {
+    id: string;
+    name: string;
+}
+interface PlaygroundGdriveGetLastChangeInput {
+}
+type PlaygroundGdriveGetLastChangeOutput = ({
+    file_id: string;
+    removed: boolean;
+    file_name: (string | null);
+    mime_type: (string | null);
+    product_id: string;
+    occurred_at: string;
+    connector_id: string;
+    resource_state: string;
+} | {
+    found: false;
+});
+interface PlaygroundGdriveReadFileInput {
+    /**
+     * Drive file id; falls back to GDRIVE_TEST_FILE_ID, then the first picked file
+     */
+    fileId?: string;
+}
+interface PlaygroundGdriveReadFileOutput {
+    minted: boolean;
+    file_id: (string | null);
+    file_name: (string | null);
+    mime_type: (string | null);
+    file_count: number;
+    get_status: number;
+    list_status: number;
+    vend_status: number;
+    content_bytes: (number | null);
+}
+interface PlaygroundGoogleadsReadCustomerInput {
+}
+interface PlaygroundGoogleadsReadCustomerOutput {
+    minted: boolean;
+    vended: boolean;
+    customer_id: (string | null);
+    vend_status: number;
+    result_count: number;
+    search_status: number;
+    login_customer_id: (string | null);
+}
+interface PlaygroundLifecycleGetStateInput {
+}
+interface PlaygroundLifecycleGetStateOutput {
+    blocked: boolean;
+    archived: boolean;
+    productId: string;
+    lastBlockTransition: ({
+        eventId: string;
+        eventName: string;
+        productId: string;
+        occurredAt: string;
+        recordedAt: string;
+        receiptCount: number;
+        organizationId: string;
+        cascadedFromOrg: boolean;
+    } | null);
+    lastArchiveTransition: ({
+        eventId: string;
+        eventName: string;
+        productId: string;
+        occurredAt: string;
+        recordedAt: string;
+        receiptCount: number;
+        organizationId: string;
+        cascadedFromOrg: boolean;
+    } | null);
+}
+interface PlaygroundLifecycleListEventsInput {
+}
+type PlaygroundLifecycleListEventsOutput = {
+    eventId: string;
+    eventName: string;
+    productId: string;
+    occurredAt: string;
+    recordedAt: string;
+    receiptCount: number;
+    organizationId: string;
+    cascadedFromOrg: boolean;
+}[];
+interface PlaygroundWebhookGetLastInput {
+}
+type PlaygroundWebhookGetLastOutput = ({
+    payload?: unknown;
+    event_id: string;
+    provider: string;
+    verified: boolean;
+    product_id: string;
+    occurred_at: string;
+    connector_id: string;
+    delivery_count: number;
+} | {
+    found: false;
+});
 interface RealtimeApikeyCreateInput {
     /**
      * Human-readable label for the key, e.g. "production backend"
@@ -15127,105 +15270,2718 @@ interface TrackingSnippetsGetOutput {
     scriptUrl: string;
     minimalSnippet: string;
 }
-interface WaitlistConfigGetInput {
-}
-type WaitlistConfigGetOutput = ({
-    createdAt: string;
-    policyUrl: (string | null);
-    productId: string;
-    updatedAt: string;
-    senderName: (string | null);
-    consentText: string;
-    policyLabel: (string | null);
-    siteBaseUrl: (string | null);
-    senderDomain: (string | null);
-    inviteSubject: (string | null);
-    policyVersion: string;
-    inviteTemplate: (string | null);
-} | null);
-interface WaitlistConfigUpsertInput {
+interface UsersApikeysCreateInput {
     /**
-     * Policy link URL (http/https/mailto). Rendered as a structured link in the form. Null to clear.
+     * A label only humans read — which backend or environment holds this key.
      */
-    policyUrl?: (string | null);
+    name: string;
     /**
-     * Controller display name shown as the invite From name and in the default email body (A7§64 controller identity). Stored as-is. Null to clear (falls back to a generic sender name).
+     * 'server' mints a SECRET key (usk_…) for the Product's backend — returned exactly once and stored hashed. 'publishable' mints a non-secret key (upk_…) that identifies this product in browser flows and stays readable.
      */
-    senderName?: (string | null);
+    type: ("server" | "publishable");
+}
+interface UsersApikeysCreateOutput {
+    id: string;
+    key: string;
+    name: string;
+    type: ("server" | "publishable");
+    value: (string | null);
+    prefix: string;
+    createdAt: string;
+    revokedAt: (string | null);
+}
+interface UsersApikeysListInput {
+}
+interface UsersApikeysListOutput {
+    keys: {
+        id: string;
+        name: string;
+        type: ("server" | "publishable");
+        value: (string | null);
+        prefix: string;
+        createdAt: string;
+        revokedAt: (string | null);
+    }[];
+}
+interface UsersApikeysRevokeInput {
     /**
-     * Plain-text consent statement shown at signup. May contain a {policy} placeholder marking the policy link. Stored as-is (no HTML sanitization).
+     * Id of the key to revoke. Revocation is immediate and final.
      */
-    consentText: string;
+    id: string;
+}
+interface UsersApikeysRevokeOutput {
+    id: string;
+    revoked: true;
+}
+interface UsersAuditListInput {
     /**
-     * Visible text for the policy link. Falls back to the URL itself if absent.
+     * Page size, 1-100. Default 25.
      */
-    policyLabel?: (string | null);
+    limit?: number;
     /**
-     * Per-product public base URL of the tenant site; invite (/signup) and opt-out (/withdraw) links are built from it. http/https only, path allowed, trailing slash stripped. Stored as-is (DP-013); not content-verified. Null to clear.
+     * ISO-8601 lower bound (inclusive) on the event timestamp.
      */
-    siteBaseUrl?: (string | null);
+    since?: string;
     /**
-     * Sender domain for invite emails (bare hostname). Verification happens at send time, not here. Null to clear.
+     * ISO-8601 upper bound (exclusive) on the event timestamp.
      */
-    senderDomain?: (string | null);
+    until?: string;
     /**
-     * Invite email subject line. Plain text, stored as-is; CR/LF stripped at send time. Null to clear (falls back to a default subject).
+     * Exact action to filter by, e.g. 'user.banned'. Omit for all actions.
      */
-    inviteSubject?: (string | null);
+    action?: string;
     /**
-     * Policy version label, controller-owned free string. Stored as-is, not validated for monotonicity.
+     * Opaque cursor from a previous response's `nextCursor`. Omit for the first page.
      */
-    policyVersion: string;
+    cursor?: string;
     /**
-     * Invite email template ({{vars}}). Stored as-is; rendered/validated at send time. Null to clear.
+     * Exact id of the audited target, e.g. a user id.
      */
-    inviteTemplate?: (string | null);
-}
-interface WaitlistConfigUpsertOutput {
-    createdAt: string;
-    policyUrl: (string | null);
-    productId: string;
-    updatedAt: string;
-    senderName: (string | null);
-    consentText: string;
-    policyLabel: (string | null);
-    siteBaseUrl: (string | null);
-    senderDomain: (string | null);
-    inviteSubject: (string | null);
-    policyVersion: string;
-    inviteTemplate: (string | null);
+    targetId?: string;
+    /**
+     * Target kind to filter by, e.g. 'user'.
+     */
+    targetType?: string;
 }
-interface WaitlistEmbedGetInput {
+interface UsersAuditListOutput {
+    events: {
+        id: string;
+        ip: (string | null);
+        action: string;
+        actorId: (string | null);
+        metadata: {
+            [k: string]: unknown;
+        };
+        targetId: (string | null);
+        actorType: ("operator" | "system" | "end_user");
+        createdAt: string;
+        productId: string;
+        userAgent: (string | null);
+        targetType: (string | null);
+    }[];
+    nextCursor: (string | null);
 }
-interface WaitlistEmbedGetOutput {
-    product_id: string;
-    script_tag: string;
-    public_edge_url: string;
+interface UsersConfigGetInput {
 }
-interface WaitlistInvitesSendInput {
-    /**
-     * Resend even when a live invite token already exists (mints a fresh token).
-     */
-    force?: boolean;
-    /**
-     * Explicit recipient emails (e.g. from waitlist_signups_list). Combined with filter if both given.
-     */
-    emails?: string[];
-    /**
-     * Selection filter over signups; resolved server-side with pagination.
-     */
-    filter?: {
+interface UsersConfigGetOutput {
+    mfa: {
         /**
-         * Prefix match on email (case-insensitive).
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
          */
-        q?: string;
+        required: boolean;
         /**
-         * Select signups by status (single value or array).
+         * How many single-use backup codes a batch contains. Default 10.
          */
-        status?: (("pending" | "invited" | "registered") | ("pending" | "invited" | "registered")[]);
+        backupCodeCount: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes: number;
     };
-}
-interface WaitlistInvitesSendOutput {
+    email: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds: number;
+    };
+    oauth: {
+        providers: {
+            github: UsersConfigGetOutputGoogle;
+            google: UsersConfigGetOutputGoogle;
+        };
+    };
+    hosted: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor: string;
+    };
+    invite: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes: number;
+    };
+    status: ("active" | "paused");
+    captcha: {
+        enabled: boolean;
+        siteKey: (string | null);
+        provider: "turnstile";
+        riskElevated: boolean;
+    };
+    recovery: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes: number;
+    };
+    testMode: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled: boolean;
+    };
+    waitlist: {
+        /**
+         * The embeddable widget’s copy and colours.
+         */
+        widget: {
+            /**
+             * Heading above the widget form.
+             */
+            title: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours: number;
+    };
+    productId: string;
+    retention: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    protection: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow: number;
+    };
+    signupMode: ("public" | "invite-only" | "waitlist");
+    emailChange: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours: number;
+    };
+    notifications: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged: boolean;
+    };
+    allowedOrigins: string[];
+    passwordPolicy: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase: boolean;
+    };
+    sessionTtlHours: number;
+    lifecycleBlocked: boolean;
+    lifecycleArchived: boolean;
+    refreshSlidingDays: number;
+    refreshAbsoluteDays: number;
+    redirectUriAllowlist: string[];
+    accessTokenTtlMinutes: number;
+    captchaSecretConfigured: boolean;
+}
+interface UsersConfigGetOutputGoogle {
+    enabled: boolean;
+    clientId: (string | null);
+    secretConfigured: boolean;
+}
+interface UsersConfigUpsertInput {
+    /**
+     * MFA settings: backup-code batch size, the operator-reset delay, how fresh authentication must be to enroll, and the second-factor lockout ceilings. Merged field-by-field.
+     */
+    mfa?: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required?: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount?: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours?: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes?: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts?: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts?: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes?: number;
+    };
+    /**
+     * Email OTP / magic-link settings. Merged field-by-field. Set `email.from` to a sender on a domain verified in this product's mail toolkit — until then the email strategies are not offered.
+     */
+    email?: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from?: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled?: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl?: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled?: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes?: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap?: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts?: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds?: number;
+    };
+    /**
+     * OAuth provider credentials and switches, per provider. Merged field-by-field. A provider is offered as a sign-in strategy only when it is enabled AND a full client id + secret pair resolves — from here, or from the deployment's shared development credentials.
+     */
+    oauth?: {
+        github?: UsersConfigUpsertInputGoogle;
+        /**
+         * Google sign-in credentials and switch.
+         */
+        google?: {
+            /**
+             * Offer this provider as a sign-in strategy.
+             */
+            enabled?: boolean;
+            /**
+             * The OAuth client id from the provider console. Pass null to clear it and fall back to the deployment's shared development credentials, if it has any.
+             */
+            clientId?: (string | null);
+            /**
+             * WRITE-ONLY. The OAuth client secret; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+             */
+            clientSecret?: (string | null);
+        };
+    };
+    /**
+     * The hosted sign-in / sign-up / recovery pages: whether they are served, and the product name, logo, colours and footer links they render with. Merged field-by-field, so setting one colour leaves the rest alone.
+     */
+    hosted?: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled?: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl?: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl?: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor?: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText?: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl?: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor?: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName?: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius?: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor?: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor?: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor?: string;
+    };
+    /**
+     * Invite lifetime and re-invite cooldown. Merged field-by-field.
+     */
+    invite?: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays?: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes?: number;
+    };
+    /**
+     * Captcha (Cloudflare Turnstile) settings for flow creation. Merged field-by-field.
+     */
+    captcha?: {
+        /**
+         * Require a captcha token when a flow attempt is created.
+         */
+        enabled?: boolean;
+        /**
+         * The public site key the Product renders the widget with.
+         */
+        siteKey?: (string | null);
+        /**
+         * WRITE-ONLY. The provider secret used server-side to verify tokens; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+         */
+        secretKey?: (string | null);
+        /**
+         * Demand a captcha from an identifier that is currently accumulating failed attempts, even when `enabled` is false. Default true.
+         */
+        riskElevated?: boolean;
+    };
+    /**
+     * Password-recovery settings (whether it is offered, how long a reset link lives). Merged field-by-field.
+     */
+    recovery?: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled?: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes?: number;
+    };
+    /**
+     * Test mode: whether this product may have TEST USERS — accounts that are excluded from metering, kept out of the default directory listing, never really emailed, and (when the deployment sets one) able to sign in with the fixed magic OTP. REFUSED on a production deployment. Merged field-by-field.
+     */
+    testMode?: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled?: boolean;
+    };
+    /**
+     * Waitlist settings: the double-opt-in toggle, how long a pending entry is retained before the sweep erases it, the confirmation link lifetime, and the embeddable widget’s copy and colours. Merged field-by-field, including inside `widget`.
+     */
+    waitlist?: {
+        /**
+         * The embeddable widget’s copy and colours. Merged field-by-field, so setting one line leaves the rest alone.
+         */
+        widget?: {
+            /**
+             * Heading above the widget form.
+             */
+            title?: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl?: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor?: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel?: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText?: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description?: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion?: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage?: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn?: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays?: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours?: number;
+    };
+    /**
+     * How long DEAD rows are kept before the retention sweep removes them: spent one-time tokens, expired flow attempts, expired sessions and their refresh tokens. These are grace periods on top of expiry, never lifetimes — an unswept expired row is inert. Merged field-by-field.
+     */
+    retention?: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays?: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays?: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays?: number;
+    };
+    /**
+     * Rate limits, lockout and breached-password settings. Merged field-by-field.
+     */
+    protection?: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled?: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes?: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts?: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow?: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes?: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow?: number;
+    };
+    /**
+     * How end users may join this product: 'public' (anyone), 'invite-only', or 'waitlist'. Default 'public'.
+     */
+    signupMode?: ("public" | "invite-only" | "waitlist");
+    /**
+     * Email-change settings: confirmation lifetime, the old address's revert window, the post-revert cooldown and the operator-override delay. Merged field-by-field.
+     */
+    emailChange?: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled?: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays?: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays?: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours?: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours?: number;
+    };
+    /**
+     * Which security notification emails this product sends. All on by default. Merged field-by-field.
+     */
+    notifications?: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice?: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange?: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation?: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged?: boolean;
+    };
+    /**
+     * Browser origins allowed to drive this product's end-user flows, up to 20. Scheme + host + port only, matched exactly. Replaces the whole list. Empty means "no browser origin" once this product has a publishable key.
+     *
+     * @maxItems 20
+     */
+    allowedOrigins?: [] | [string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string];
+    /**
+     * Password rules for this product. Merged field-by-field into the current policy.
+     */
+    passwordPolicy?: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength?: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber?: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol?: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase?: boolean;
+    };
+    /**
+     * End-user session lifetime in hours. Default 720 (30 days).
+     */
+    sessionTtlHours?: number;
+    /**
+     * Inactivity window of a session in days — every refresh slides it forward. Default 30.
+     */
+    refreshSlidingDays?: number;
+    /**
+     * Hard time-box of a session in days, counted from sign-in and never extended. Default 365.
+     */
+    refreshAbsoluteDays?: number;
+    /**
+     * Callback URIs the browser code handoff may deliver a one-time authorization code to, up to 20. Matched EXACTLY — no wildcards, no prefixes, no fragments — so list every callback in full. Replaces the whole list.
+     *
+     * @maxItems 20
+     */
+    redirectUriAllowlist?: [] | [string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string];
+    /**
+     * Access JWT lifetime in minutes, 5-60. Default 10. Short on purpose: a revoked session dies within one TTL.
+     */
+    accessTokenTtlMinutes?: number;
+}
+/**
+ * GitHub sign-in credentials and switch.
+ */
+interface UsersConfigUpsertInputGoogle {
+    /**
+     * Offer this provider as a sign-in strategy.
+     */
+    enabled?: boolean;
+    /**
+     * The OAuth client id from the provider console. Pass null to clear it and fall back to the deployment's shared development credentials, if it has any.
+     */
+    clientId?: (string | null);
+    /**
+     * WRITE-ONLY. The OAuth client secret; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+     */
+    clientSecret?: (string | null);
+}
+interface UsersConfigUpsertOutput {
+    mfa: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes: number;
+    };
+    email: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds: number;
+    };
+    oauth: {
+        providers: {
+            github: UsersConfigUpsertOutputGoogle;
+            google: UsersConfigUpsertOutputGoogle;
+        };
+    };
+    hosted: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor: string;
+    };
+    invite: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes: number;
+    };
+    status: ("active" | "paused");
+    captcha: {
+        enabled: boolean;
+        siteKey: (string | null);
+        provider: "turnstile";
+        riskElevated: boolean;
+    };
+    recovery: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes: number;
+    };
+    testMode: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled: boolean;
+    };
+    waitlist: {
+        /**
+         * The embeddable widget’s copy and colours.
+         */
+        widget: {
+            /**
+             * Heading above the widget form.
+             */
+            title: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours: number;
+    };
+    productId: string;
+    retention: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    protection: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow: number;
+    };
+    signupMode: ("public" | "invite-only" | "waitlist");
+    emailChange: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours: number;
+    };
+    notifications: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged: boolean;
+    };
+    allowedOrigins: string[];
+    passwordPolicy: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase: boolean;
+    };
+    sessionTtlHours: number;
+    lifecycleBlocked: boolean;
+    lifecycleArchived: boolean;
+    refreshSlidingDays: number;
+    refreshAbsoluteDays: number;
+    redirectUriAllowlist: string[];
+    accessTokenTtlMinutes: number;
+    captchaSecretConfigured: boolean;
+}
+interface UsersConfigUpsertOutputGoogle {
+    enabled: boolean;
+    clientId: (string | null);
+    secretConfigured: boolean;
+}
+interface UsersFactorsListInput {
+    /**
+     * The end user whose enrolled factors to list.
+     */
+    userId: string;
+}
+interface UsersFactorsListOutput {
+    factors: {
+        type: ("totp" | "backup_codes");
+        status: ("unverified" | "verified");
+        createdAt: string;
+        remaining: (number | null);
+        lastUsedAt: (string | null);
+        verifiedAt: (string | null);
+    }[];
+}
+interface UsersFactorsResetInput {
+    /**
+     * What identity proofing was done and under which ticket. Recorded verbatim in the audit row — this is the whole point of the tool being audited.
+     */
+    reason: string;
+    /**
+     * The end user whose second factor is being reset.
+     */
+    userId: string;
+}
+interface UsersFactorsResetOutput {
+    requestId: string;
+    scheduledFor: string;
+}
+interface UsersKeysListInput {
+}
+interface UsersKeysListOutput {
+    keys: {
+        /**
+         * The RFC 7638 JWK thumbprint — what a token header carries.
+         */
+        kid: string;
+        /**
+         * `standby` is pre-generated and not published; `current` signs; `retired` is still in JWKS for the overlap; `revoked` was evicted.
+         */
+        state: ("standby" | "current" | "retired" | "revoked");
+        createdAt: string;
+        retiredAt: (string | null);
+        revokedAt: (string | null);
+        /**
+         * When a retired key leaves JWKS. Null unless the key is retired.
+         */
+        overlapExpiresAt: (string | null);
+    }[];
+}
+interface UsersKeysRevokeInput {
+    /**
+     * The key to evict, as listed by users_keys_list.
+     */
+    kid: string;
+    /**
+     * Why. Goes into the audit row and is the only account of the incident it keeps.
+     */
+    reason?: string;
+    /**
+     * Sign every end user of this product out as well. Defaults to TRUE: a compromised signing key could have minted any of those sessions. Pass false ONLY when you know no forged token was ever issued.
+     */
+    revokeSessions?: boolean;
+}
+interface UsersKeysRevokeOutput {
+    /**
+     * The fresh key minted or promoted in its place.
+     */
+    currentKid: string;
+    revokedKid: string;
+    sessionsRevoked: number;
+}
+interface UsersKeysRotateInput {
+}
+interface UsersKeysRotateOutput {
+    /**
+     * The key signing from now on.
+     */
+    currentKid: string;
+    /**
+     * The key just retired. Null if there was none.
+     */
+    previousKid: (string | null);
+    /**
+     * When the retired key stops verifying. Both kids are in JWKS until then.
+     */
+    overlapExpiresAt: (string | null);
+}
+interface UsersOpsRetentionGetInput {
+}
+interface UsersOpsRetentionGetOutput {
+    /**
+     * The single retention job. There is exactly one — it replaced the sessions reaper and the waitlist sweep.
+     */
+    sweep: {
+        /**
+         * Its schedule, in cron syntax.
+         */
+        cron: string;
+        /**
+         * What one pass removes, in the order it removes it.
+         */
+        removes: string[];
+        /**
+         * The Synapse cron function that performs every sweep below.
+         */
+        functionId: string;
+    };
+    /**
+     * This product’s EFFECTIVE windows — what it configured, with the documented default filling anything it did not.
+     */
+    windows: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    /**
+     * The documented defaults, so a reader can tell a deliberate window from an inherited one without a second call.
+     */
+    defaults: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    /**
+     * What this service deliberately keeps forever, and why. Reading a retention surface that lists only what IS deleted is how an operator concludes the audit log ages out — it does not.
+     */
+    notSwept: {
+        why: string;
+        what: string;
+    }[];
+    /**
+     * How long a still-PENDING waitlist entry is kept. It lives in the `waitlist` config block rather than in `retention`, because it is not a grace period on a dead row: a pending entry never expires on its own, so this window is the whole of what makes it go away — and the sweep ERASES it (audit row, `users/waitlist-entry.erased`) rather than deleting it.
+     */
+    waitlistRetentionDays: number;
+}
+interface UsersOpsSloGetInput {
+}
+interface UsersOpsSloGetOutput {
+    /**
+     * Every published objective and its verdict for this window.
+     */
+    slos: {
+        /**
+         * Stable id of the objective — the key to quote in a runbook.
+         */
+        id: string;
+        /**
+         * Short human name.
+         */
+        title: string;
+        /**
+         * `insufficient_data` is NOT `ok`: it means the window is too quiet to judge, which an operator reading a dashboard must be able to tell apart from health.
+         */
+        status: ("ok" | "breached" | "insufficient_data");
+        /**
+         * How many events went into `observed`.
+         */
+        samples: number;
+        /**
+         * What this replica sees in the CURRENT window, in the same unit as `objective`. NULL when nothing was observed.
+         */
+        observed: (number | null);
+        /**
+         * The `users/alert.raised` kind a breach of this objective fires, for wiring an alert route.
+         */
+        alertKind: string;
+        /**
+         * The published objective, as a ratio in 0..1.
+         */
+        objective: number;
+        /**
+         * Which side of `objective` is healthy: a success rate is at-least, an error rate at-most.
+         */
+        comparator: ("at-least" | "at-most");
+        /**
+         * Below this many samples the ratio is not judged at all — a quiet window is not an outage.
+         */
+        minSamples: number;
+        /**
+         * What is counted, and what is deliberately NOT counted.
+         */
+        description: string;
+        /**
+         * The window the observation is computed over.
+         */
+        windowSeconds: number;
+    }[];
+    /**
+     * These numbers come from ONE replica’s in-process window, not from the whole deployment. Treat them as a spot check, not as the fleet’s error budget.
+     */
+    scope: "replica";
+    /**
+     * The current window, exactly as the alert hook sees it.
+     */
+    window: {
+        mail: {
+            /**
+             * Auth emails handed to mail (a cooldown or daily cap never reaches this).
+             */
+            total: number;
+            /**
+             * Of those, the ones mail would not take.
+             */
+            failures: number;
+            /**
+             * failures / total. NULL when nothing was sent.
+             */
+            failureRate: (number | null);
+        };
+        signIn: {
+            /**
+             * SETTLED flow attempts — completed or failed. A pending one is neither.
+             */
+            total: number;
+            /**
+             * Of those, the ones that failed.
+             */
+            failures: number;
+            /**
+             * completed / settled. NULL, never 0, when nothing settled.
+             */
+            successRate: (number | null);
+        };
+        refresh: {
+            /**
+             * Refresh attempts.
+             */
+            total: number;
+            /**
+             * Failed refreshes, detected reuse included.
+             */
+            errors: number;
+            /**
+             * Detected token REUSE — theft, counted rather than rated.
+             */
+            reuses: number;
+            /**
+             * errors / total. NULL when nothing was refreshed.
+             */
+            errorRate: (number | null);
+        };
+        /**
+         * Length of the evaluation window.
+         */
+        windowSeconds: number;
+        /**
+         * ISO start of the window these numbers belong to.
+         */
+        windowStartedAt: string;
+        /**
+         * This product’s OWN trailing sign-in failure rate, over CLOSED windows. What the anomaly signal compares the live window against — NULL until at least one window has closed.
+         */
+        signInFailureBaseline: (number | null);
+    };
+}
+interface UsersSessionsGetInput {
+    /**
+     * The session to read.
+     */
+    sessionId: string;
+}
+interface UsersSessionsGetOutput {
+    id: string;
+    ip: (string | null);
+    /**
+     * `aal2` only if a verified second factor completed.
+     */
+    aal: ("aal1" | "aal2");
+    /**
+     * The factors this session was established with.
+     */
+    amr: string[];
+    status: ("active" | "revoked");
+    userId: string;
+    createdAt: string;
+    expiresAt: string;
+    revokedAt: (string | null);
+    userAgent: (string | null);
+    revokedReason: (string | null);
+    /**
+     * The operator behind an impersonated session, or null for an ordinary one.
+     */
+    impersonatedBy: (string | null);
+    lastRefreshedAt: (string | null);
+    absoluteExpiresAt: string;
+}
+interface UsersSessionsImpersonateInput {
+    /**
+     * Why. Recorded in the audit trail and shown to the user in the notification email — write what you would want to read in an incident review (a ticket number and one sentence).
+     */
+    reason: string;
+    /**
+     * The end user to sign in as.
+     */
+    userId: string;
+}
+interface UsersSessionsImpersonateOutput {
+    userId: string;
+    /**
+     * When the session dies. It cannot be extended or refreshed.
+     */
+    expiresAt: string;
+    /**
+     * Seconds until the access token expires.
+     */
+    expiresIn: number;
+    sessionId: string;
+    /**
+     * The access JWT of the impersonated session. There is NO refresh token.
+     */
+    accessToken: string;
+}
+interface UsersSessionsListInput {
+    /**
+     * The end user whose sessions to list.
+     */
+    userId: string;
+}
+interface UsersSessionsListOutput {
+    sessions: {
+        id: string;
+        ip: (string | null);
+        status: ("active" | "revoked");
+        userId: string;
+        createdAt: string;
+        expiresAt: string;
+        revokedAt: (string | null);
+        userAgent: (string | null);
+        lastRefreshedAt: (string | null);
+        absoluteExpiresAt: string;
+    }[];
+}
+interface UsersSessionsRevokeInput {
+    /**
+     * Revoke every session of this user.
+     */
+    userId?: string;
+    /**
+     * Revoke exactly this session.
+     */
+    sessionId?: string;
+}
+interface UsersSessionsRevokeOutput {
+    revoked: number;
+}
+interface UsersStatsGetInput {
+    /**
+     * Look-back window for the TIME-BOUNDED numbers — the sign-in counters, the abuse block and `sessions.createdInWindow`: '24h', '7d', '30d' or '90d'. Default '7d'. The user, live-session and factor populations are point-in-time and ignore it.
+     */
+    window?: ("24h" | "7d" | "30d" | "90d");
+}
+interface UsersStatsGetOutput {
+    /**
+     * Abuse signals over the window. Denied origins are deliberately absent: that check fires on unauthenticated traffic and is served by logs and metrics, not by per-product audit rows.
+     */
+    abuse: {
+        /**
+         * Accounts locked by a failed-attempt ceiling — password and second factor both.
+         */
+        lockouts: number;
+        /**
+         * The subset of `lockouts` caused by the SECOND-factor ceiling.
+         */
+        mfaLockouts: number;
+        /**
+         * Mirrors `signIns.failed`, so the abuse block reads on its own.
+         */
+        failedSignIns: number;
+        /**
+         * Breach-corpus matches against a user's password.
+         */
+        pwnedPasswordsSeen: number;
+        /**
+         * Refresh tokens spent twice outside the grace window — theft, not staleness. Each one revoked a whole session family.
+         */
+        refreshReuseDetected: number;
+    };
+    /**
+     * ISO start of that window — the `created_at` floor every counter used.
+     */
+    since: string;
+    /**
+     * Point-in-time directory populations by DERIVED status — `user` has no status column, these are computed from `waitlisted` and the ban/delete/erase timestamps.
+     */
+    users: {
+        /**
+         * Every directory row, GDPR tombstones included.
+         */
+        total: number;
+        /**
+         * Full accounts: not waitlisted, not banned, not deleted, not erased.
+         */
+        active: number;
+        /**
+         * Banned accounts that are still present.
+         */
+        banned: number;
+        /**
+         * GDPR-erased tombstones: the id survives, the PII does not.
+         */
+        erased: number;
+        /**
+         * SOFT-deleted and still recoverable — not erased.
+         */
+        deleted: number;
+        /**
+         * Waitlist signups with no credential yet.
+         */
+        waitlisted: number;
+    };
+    /**
+     * The window the time-bounded numbers were computed over.
+     */
+    window: ("24h" | "7d" | "30d" | "90d");
+    /**
+     * Enrolled second factors (TOTP and backup-code batches).
+     */
+    factors: {
+        /**
+         * VERIFIED second factors; an unverified enrollment gates nothing.
+         */
+        verified: number;
+        /**
+         * Distinct users holding at least one verified factor.
+         */
+        usersWithFactor: number;
+    };
+    /**
+     * Sign-in outcomes over the window, from the audit log.
+     */
+    signIns: {
+        /**
+         * Failed sign-in attempts in the window.
+         */
+        failed: number;
+        /**
+         * Successful sign-ins in the window.
+         */
+        succeeded: number;
+        /**
+         * succeeded / (succeeded + failed), 4 decimals. NULL — never 0 — when nothing was attempted: an idle window and a totally broken one are opposite facts.
+         */
+        successRate: (number | null);
+    };
+    /**
+     * Device sessions.
+     */
+    sessions: {
+        /**
+         * Live right now: active, unrevoked and inside BOTH the sliding and absolute expiry.
+         */
+        active: number;
+        /**
+         * Sessions established since `since`.
+         */
+        createdInWindow: number;
+    };
+}
+interface UsersUsersBanInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersBanOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersBanOutputPublicMetadata;
+    unsafeMetadata: UsersUsersBanOutputPublicMetadata;
+    privateMetadata: UsersUsersBanOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersBanOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersCreateInput {
+    /**
+     * The user's display name.
+     */
+    name?: string;
+    /**
+     * URL of the user's avatar image.
+     */
+    imageUrl?: string;
+    /**
+     * Optional credential to store for this user. Hashes only — this toolkit never accepts a plaintext password. Nothing verifies it until Phase 2.
+     */
+    password?: {
+        /**
+         * A PHC-format password hash (e.g. an argon2id string) to store as-is. Never send a plaintext password.
+         */
+        phcHash?: string;
+        /**
+         * An imported hash from another system, to be lazily rehashed on the first successful sign-in (Phase 2).
+         */
+        foreignHash?: string;
+        /**
+         * Algorithm of `foreignHash`. Required when `foreignHash` is set.
+         */
+        foreignHashAlgo?: ("bcrypt" | "argon2" | "pbkdf2" | "scrypt");
+    };
+    /**
+     * Create this user as a TEST FIXTURE: excluded from metering (it never counts toward retained-users), hidden from the default users_users_list view, never really emailed, and — when the deployment configures one — able to sign in with the fixed magic OTP. REFUSED unless this product has test mode enabled, which a production deployment cannot do. There is no way to set or clear this later. Default false.
+     */
+    testUser?: boolean;
+    /**
+     * Create the user as a waitlist signup: no way in until promoted. Default false.
+     */
+    waitlisted?: boolean;
+    /**
+     * The email addresses that reach this user. At least one is required.
+     *
+     * @minItems 1
+     */
+    identifiers: [
+        {
+            /**
+             * Identifier kind. Only 'email' exists in this phase.
+             */
+            type: "email";
+            /**
+             * The email address. Stored canonicalised (lowercase, NFC) plus raw for display.
+             */
+            value: string;
+            /**
+             * Record the identifier as already verified (use for trusted imports). Only ONE verified copy of a value may exist per product; unverified duplicates are allowed. Default false.
+             */
+            verified?: boolean;
+            /**
+             * Mark as the primary identifier of its type. The first identifier of a type defaults to primary.
+             */
+            isPrimary?: boolean;
+        },
+        ...({
+            /**
+             * Identifier kind. Only 'email' exists in this phase.
+             */
+            type: "email";
+            /**
+             * The email address. Stored canonicalised (lowercase, NFC) plus raw for display.
+             */
+            value: string;
+            /**
+             * Record the identifier as already verified (use for trusted imports). Only ONE verified copy of a value may exist per product; unverified duplicates are allowed. Default false.
+             */
+            verified?: boolean;
+            /**
+             * Mark as the primary identifier of its type. The first identifier of a type defaults to primary.
+             */
+            isPrimary?: boolean;
+        })[]
+    ];
+    /**
+     * Force a password reset before the user can sign in (use for unverifiable imported hashes). Default false.
+     */
+    requiresReset?: boolean;
+    /**
+     * Metadata the end user may READ and that may flow into the JWT. Management-plane write only.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    unsafeMetadata?: UsersUsersCreateInputPublicMetadata;
+    privateMetadata?: UsersUsersCreateInputPublicMetadata1;
+}
+/**
+ * Metadata the end user may WRITE in a later phase. Never trust it for authorization.
+ */
+interface UsersUsersCreateInputPublicMetadata {
+    [k: string]: unknown;
+}
+/**
+ * Metadata visible to the management plane only. Never exposed to the end user.
+ */
+interface UsersUsersCreateInputPublicMetadata1 {
+    [k: string]: unknown;
+}
+interface UsersUsersCreateOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersCreateOutputPublicMetadata;
+    unsafeMetadata: UsersUsersCreateOutputPublicMetadata;
+    privateMetadata: UsersUsersCreateOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersCreateOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersDeleteInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersDeleteOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersDeleteOutputPublicMetadata;
+    unsafeMetadata: UsersUsersDeleteOutputPublicMetadata;
+    privateMetadata: UsersUsersDeleteOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersDeleteOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersEraseInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersEraseOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersEraseOutputPublicMetadata;
+    unsafeMetadata: UsersUsersEraseOutputPublicMetadata;
+    privateMetadata: UsersUsersEraseOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersEraseOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersExportInput {
+    /**
+     * Rows per page, 1-500. Default 100.
+     */
+    limit?: number;
+    /**
+     * Case-insensitive substring match against the user's identifiers (email) and name.
+     */
+    query?: string;
+    /**
+     * Opaque cursor from the previous page's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by status: 'active', 'banned' or 'waitlisted'. Omit for all.
+     */
+    status?: ("active" | "banned" | "waitlisted");
+    /**
+     * Include soft-deleted users. Default false.
+     */
+    includeDeleted?: boolean;
+}
+interface UsersUsersExportOutput {
+    count: number;
+    users: {
+        id: string;
+        name: (string | null);
+        bannedAt: (string | null);
+        erasedAt: (string | null);
+        imageUrl: (string | null);
+        testUser: boolean;
+        createdAt: string;
+        deletedAt: (string | null);
+        productId: string;
+        updatedAt: string;
+        waitlisted: boolean;
+        identifiers: {
+            id: string;
+            type: "email";
+            value: string;
+            isPrimary: boolean;
+            verifiedAt: (string | null);
+            valueCanonical: string;
+            verificationStatus: ("unverified" | "verified" | "expired");
+        }[];
+        lockedUntil: (string | null);
+        lastSignInAt: (string | null);
+        requiresReset: boolean;
+        publicMetadata: UsersUsersExportOutputPublicMetadata;
+        unsafeMetadata: UsersUsersExportOutputPublicMetadata;
+        privateMetadata: UsersUsersExportOutputPublicMetadata;
+        emailChangeLockedUntil: (string | null);
+    }[];
+    exportedAt: string;
+    nextCursor: (string | null);
+}
+interface UsersUsersExportOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersGetInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersGetOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersGetOutputPublicMetadata;
+    unsafeMetadata: UsersUsersGetOutputPublicMetadata;
+    privateMetadata: UsersUsersGetOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersGetOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersImportInput {
+    /**
+     * The users to import, at most 500 per call — batch client-side beyond that. Each row: identifiers (email), optional profile, optional password HASH, optional flags.
+     *
+     * @minItems 1
+     * @maxItems 500
+     */
+    users: [unknown, ...(unknown)[]];
+}
+interface UsersUsersImportOutput {
+    failed: number;
+    created: number;
+    results: {
+        row: number;
+        reason: (string | null);
+        status: ("created" | "skipped" | "failed");
+        userId: (string | null);
+    }[];
+    skipped: number;
+    requested: number;
+}
+interface UsersUsersInviteInput {
+    /**
+     * The invitee's display name.
+     */
+    name?: string;
+    /**
+     * The address to invite. Stored canonicalised (lowercase, NFC) plus raw for display.
+     */
+    email: string;
+    /**
+     * Metadata the end user may READ and that may flow into the JWT.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    /**
+     * Metadata visible to the management plane only. Never exposed to the end user.
+     */
+    privateMetadata?: {
+        [k: string]: unknown;
+    };
+}
+interface UsersUsersInviteOutput {
+    mailed: boolean;
+    userId: string;
+    created: boolean;
+    expiresAt: string;
+}
+interface UsersUsersListInput {
+    /**
+     * Page size, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * Case-insensitive substring match against the user's identifiers (email) and name.
+     */
+    query?: string;
+    /**
+     * Opaque cursor from a previous response's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by status: 'active' (not banned, not waitlisted), 'banned', or 'waitlisted'. Omit for all.
+     */
+    status?: ("active" | "banned" | "waitlisted");
+    /**
+     * Include soft-deleted users. Default false — deleted users are hidden.
+     */
+    includeDeleted?: boolean;
+    /**
+     * Include TEST USERS. Default false: a test user is a fixture, not a customer — it is excluded from metering and from this listing for the same reason. Ask for it explicitly when you are debugging the fixtures themselves.
+     */
+    includeTestUsers?: boolean;
+    /**
+     * Include waitlist signups. Default false: a waitlisted row is somebody who ASKED to join and cannot sign in, so it is not part of the directory an operator browses. Use `status: "waitlisted"` to see only them, or `users_waitlist_list` for the funnel.
+     */
+    includeWaitlisted?: boolean;
+}
+interface UsersUsersListOutput {
+    users: {
+        id: string;
+        name: (string | null);
+        bannedAt: (string | null);
+        erasedAt: (string | null);
+        imageUrl: (string | null);
+        testUser: boolean;
+        createdAt: string;
+        deletedAt: (string | null);
+        productId: string;
+        updatedAt: string;
+        waitlisted: boolean;
+        identifiers: {
+            id: string;
+            type: "email";
+            value: string;
+            isPrimary: boolean;
+            verifiedAt: (string | null);
+            valueCanonical: string;
+            verificationStatus: ("unverified" | "verified" | "expired");
+        }[];
+        lockedUntil: (string | null);
+        lastSignInAt: (string | null);
+        requiresReset: boolean;
+        publicMetadata: UsersUsersListOutputPublicMetadata;
+        unsafeMetadata: UsersUsersListOutputPublicMetadata;
+        privateMetadata: UsersUsersListOutputPublicMetadata;
+        emailChangeLockedUntil: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersUsersListOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersSetPrimaryIdentifierInput {
+    /**
+     * The address to make primary. Must not already belong, verified, to another user of this product.
+     */
+    email: string;
+    /**
+     * What identity proofing was done and under which ticket. Recorded verbatim in the audit row — this is the whole point of the tool being audited.
+     */
+    reason: string;
+    /**
+     * The user whose primary email address is being replaced.
+     */
+    userId: string;
+}
+interface UsersUsersSetPrimaryIdentifierOutput {
+    requestId: string;
+    scheduledFor: string;
+}
+interface UsersUsersUnbanInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersUnbanOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersUnbanOutputPublicMetadata;
+    unsafeMetadata: UsersUsersUnbanOutputPublicMetadata;
+    privateMetadata: UsersUsersUnbanOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersUnbanOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersUpdateInput {
+    /**
+     * The user's display name. Pass null to clear.
+     */
+    name?: (string | null);
+    /**
+     * The user to update.
+     */
+    userId: string;
+    /**
+     * URL of the user's avatar image. Pass null to clear.
+     */
+    imageUrl?: (string | null);
+    /**
+     * Whether the user is still a waitlist signup.
+     */
+    waitlisted?: boolean;
+    /**
+     * ISO-8601 timestamp of a temporary, self-healing lockout — the failed-attempt ceiling sets it and it expires on its own. Pass null to unlock the account immediately (audited as `user.unlocked`).
+     */
+    lockedUntil?: (string | null);
+    /**
+     * Whether the user must reset their password before signing in.
+     */
+    requiresReset?: boolean;
+    /**
+     * REPLACES the whole public metadata bag. Management-plane write, end-user read.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    unsafeMetadata?: UsersUsersUpdateInputPublicMetadata;
+    privateMetadata?: UsersUsersUpdateInputPublicMetadata1;
+}
+/**
+ * REPLACES the whole unsafe metadata bag. End-user writable in a later phase; never authoritative.
+ */
+interface UsersUsersUpdateInputPublicMetadata {
+    [k: string]: unknown;
+}
+/**
+ * REPLACES the whole private metadata bag. Management plane only.
+ */
+interface UsersUsersUpdateInputPublicMetadata1 {
+    [k: string]: unknown;
+}
+interface UsersUsersUpdateOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersUpdateOutputPublicMetadata;
+    unsafeMetadata: UsersUsersUpdateOutputPublicMetadata;
+    privateMetadata: UsersUsersUpdateOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersUpdateOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersWaitlistEraseInput {
+    /**
+     * The waitlisted user whose entry and directory row to erase.
+     */
+    userId: string;
+}
+interface UsersWaitlistEraseOutput {
+    erased: boolean;
+}
+interface UsersWaitlistFunnelInput {
+}
+interface UsersWaitlistFunnelOutput {
+    total: number;
+    invited: number;
+    pending: number;
+    withdrawn: number;
+    registered: number;
+    unconfirmed: number;
+}
+interface UsersWaitlistImportInput {
+    /**
+     * The legacy signups to import, at most 500 per call — batch client-side beyond that.
+     *
+     * @minItems 1
+     * @maxItems 500
+     */
+    entries: [
+        {
+            /**
+             * The signup's display name.
+             */
+            name?: string;
+            /**
+             * The consent proof from the source system. REQUIRED: a waitlist entry with no evidence of consent is exactly what this import exists to avoid creating.
+             */
+            consent: {
+                /**
+                 * The IP the source system recorded, when it recorded one.
+                 */
+                ip?: (string | null);
+                /**
+                 * Where the acceptance happened in the source system, e.g. `legacy-widget`.
+                 */
+                source: string;
+                /**
+                 * The user agent the source system recorded, when it recorded one.
+                 */
+                userAgent?: (string | null);
+                /**
+                 * When they accepted it, as recorded by the source system. Carried over verbatim — this is the evidence, and stamping it with the import time would destroy it.
+                 */
+                acceptedAt: string;
+                /**
+                 * The privacy-policy version the signer accepted in the SOURCE system.
+                 */
+                policyVersion: string;
+            };
+            /**
+             * Whether the address had proven itself reachable in the source system. Default true — a legacy list has already been mailed. Pass false to land the row as unconfirmed, where it is reported separately and is never invited.
+             */
+            confirmed?: boolean;
+            /**
+             * The email address on the legacy list. Stored canonicalised plus raw for display.
+             */
+            identifier: string;
+            /**
+             * Referrer / UTM attribution the source system recorded.
+             */
+            attribution?: {
+                /**
+                 * utm_term of the visit.
+                 */
+                utmTerm?: string;
+                /**
+                 * The document referrer of the signup page.
+                 */
+                referrer?: string;
+                /**
+                 * utm_medium of the visit.
+                 */
+                utmMedium?: string;
+                /**
+                 * utm_source of the visit.
+                 */
+                utmSource?: string;
+                /**
+                 * utm_content of the visit.
+                 */
+                utmContent?: string;
+                /**
+                 * The URL the signup was submitted from.
+                 */
+                landingPage?: string;
+                /**
+                 * utm_campaign of the visit.
+                 */
+                utmCampaign?: string;
+            };
+            /**
+             * End-user-writable metadata to carry onto the created user.
+             */
+            unsafeMetadata?: {
+                [k: string]: unknown;
+            };
+        },
+        ...({
+            /**
+             * The signup's display name.
+             */
+            name?: string;
+            /**
+             * The consent proof from the source system. REQUIRED: a waitlist entry with no evidence of consent is exactly what this import exists to avoid creating.
+             */
+            consent: {
+                /**
+                 * The IP the source system recorded, when it recorded one.
+                 */
+                ip?: (string | null);
+                /**
+                 * Where the acceptance happened in the source system, e.g. `legacy-widget`.
+                 */
+                source: string;
+                /**
+                 * The user agent the source system recorded, when it recorded one.
+                 */
+                userAgent?: (string | null);
+                /**
+                 * When they accepted it, as recorded by the source system. Carried over verbatim — this is the evidence, and stamping it with the import time would destroy it.
+                 */
+                acceptedAt: string;
+                /**
+                 * The privacy-policy version the signer accepted in the SOURCE system.
+                 */
+                policyVersion: string;
+            };
+            /**
+             * Whether the address had proven itself reachable in the source system. Default true — a legacy list has already been mailed. Pass false to land the row as unconfirmed, where it is reported separately and is never invited.
+             */
+            confirmed?: boolean;
+            /**
+             * The email address on the legacy list. Stored canonicalised plus raw for display.
+             */
+            identifier: string;
+            /**
+             * Referrer / UTM attribution the source system recorded.
+             */
+            attribution?: {
+                /**
+                 * utm_term of the visit.
+                 */
+                utmTerm?: string;
+                /**
+                 * The document referrer of the signup page.
+                 */
+                referrer?: string;
+                /**
+                 * utm_medium of the visit.
+                 */
+                utmMedium?: string;
+                /**
+                 * utm_source of the visit.
+                 */
+                utmSource?: string;
+                /**
+                 * utm_content of the visit.
+                 */
+                utmContent?: string;
+                /**
+                 * The URL the signup was submitted from.
+                 */
+                landingPage?: string;
+                /**
+                 * utm_campaign of the visit.
+                 */
+                utmCampaign?: string;
+            };
+            /**
+             * End-user-writable metadata to carry onto the created user.
+             */
+            unsafeMetadata?: {
+                [k: string]: unknown;
+            };
+        })[]
+    ];
+}
+interface UsersWaitlistImportOutput {
+    failed: number;
+    results: {
+        row: number;
+        reason: (string | null);
+        status: ("imported" | "skipped" | "failed");
+        userId: (string | null);
+    }[];
+    skipped: number;
+    imported: number;
+    requested: number;
+}
+interface UsersWaitlistInviteInput {
+    /**
+     * The waitlisted users to promote, up to 100 per call. Each gets the STANDARD invite email; accepting it is what creates their credential.
+     *
+     * @minItems 1
+     * @maxItems 100
+     */
+    userIds: [string, ...(string)[]];
+}
+interface UsersWaitlistInviteOutput {
+    invited: number;
+    results: {
+        reason: (("suppressed" | "not_found" | "already_registered") | null);
+        status: ("invited" | "skipped");
+        userId: string;
+    }[];
+    skipped: number;
+}
+interface UsersWaitlistListInput {
+    /**
+     * Entries per page, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * Opaque cursor from the previous page's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by funnel status: 'pending', 'invited', 'registered' or 'withdrawn'. Omit for all.
+     */
+    status?: ("pending" | "invited" | "registered" | "withdrawn");
+    /**
+     * Double opt-in only: false returns entries whose address never confirmed. Omit for both.
+     */
+    confirmed?: boolean;
+}
+interface UsersWaitlistListOutput {
+    entries: {
+        status: ("pending" | "invited" | "registered" | "withdrawn");
+        userId: string;
+        createdAt: string;
+        invitedAt: (string | null);
+        identifier: string;
+        attribution: {
+            [k: string]: unknown;
+        };
+        confirmedAt: (string | null);
+        withdrawnAt: (string | null);
+        consentProof: {
+            [k: string]: unknown;
+        };
+        registeredAt: (string | null);
+        inviteTokenId: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersWebhooksCreateInput {
+    /**
+     * Where deliveries are POSTed. HTTPS only, no embedded credentials.
+     */
+    url: string;
+    /**
+     * Which events to deliver. `user.created`, `user.updated` and `user.deleted` mirror the directory; `session.revoked` fires on sign-out, ban, erase and refresh-token reuse.
+     *
+     * @minItems 1
+     */
+    events: [("user.created" | "user.updated" | "user.deleted" | "session.revoked"), ...(("user.created" | "user.updated" | "user.deleted" | "session.revoked"))[]];
+    /**
+     * A label only humans read — which system this endpoint feeds.
+     */
+    description?: string;
+}
+interface UsersWebhooksCreateOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    secret: string;
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksDeleteInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksDeleteOutput {
+    id: string;
+    deleted: true;
+}
+interface UsersWebhooksDeliveriesListInput {
+    /**
+     * Id of the webhook endpoint whose deliveries to list.
+     */
+    id: string;
+    limit?: number;
+}
+interface UsersWebhooksDeliveriesListOutput {
+    deliveries: {
+        id: string;
+        status: ("pending" | "succeeded" | "failed");
+        eventId: string;
+        attempts: number;
+        createdAt: string;
+        eventType: ("user.created" | "user.updated" | "user.deleted" | "session.revoked");
+        lastError: (string | null);
+        webhookId: string;
+        lastAttemptAt: (string | null);
+        responseStatus: (number | null);
+    }[];
+}
+interface UsersWebhooksGetInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksGetOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksListInput {
+}
+interface UsersWebhooksListOutput {
+    webhooks: {
+        id: string;
+        url: string;
+        active: boolean;
+        events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+        createdAt: string;
+        updatedAt: string;
+        description: (string | null);
+        secretPrefix: string;
+    }[];
+}
+interface UsersWebhooksRotateSecretInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksRotateSecretOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    secret: string;
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksUpdateInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+    /**
+     * Where deliveries are POSTed. HTTPS only, no embedded credentials.
+     */
+    url?: string;
+    /**
+     * false pauses delivery without losing the endpoint or its secret.
+     */
+    active?: boolean;
+    /**
+     * Which events to deliver. `user.created`, `user.updated` and `user.deleted` mirror the directory; `session.revoked` fires on sign-out, ban, erase and refresh-token reuse.
+     *
+     * @minItems 1
+     */
+    events?: [("user.created" | "user.updated" | "user.deleted" | "session.revoked"), ...(("user.created" | "user.updated" | "user.deleted" | "session.revoked"))[]];
+    description?: (string | null);
+}
+interface UsersWebhooksUpdateOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface WaitlistConfigGetInput {
+}
+type WaitlistConfigGetOutput = ({
+    createdAt: string;
+    policyUrl: (string | null);
+    productId: string;
+    updatedAt: string;
+    senderName: (string | null);
+    consentText: string;
+    policyLabel: (string | null);
+    siteBaseUrl: (string | null);
+    senderDomain: (string | null);
+    inviteSubject: (string | null);
+    policyVersion: string;
+    inviteTemplate: (string | null);
+} | null);
+interface WaitlistConfigUpsertInput {
+    /**
+     * Policy link URL (http/https/mailto). Rendered as a structured link in the form. Null to clear.
+     */
+    policyUrl?: (string | null);
+    /**
+     * Controller display name shown as the invite From name and in the default email body (A7§64 controller identity). Stored as-is. Null to clear (falls back to a generic sender name).
+     */
+    senderName?: (string | null);
+    /**
+     * Plain-text consent statement shown at signup. May contain a {policy} placeholder marking the policy link. Stored as-is (no HTML sanitization).
+     */
+    consentText: string;
+    /**
+     * Visible text for the policy link. Falls back to the URL itself if absent.
+     */
+    policyLabel?: (string | null);
+    /**
+     * Per-product public base URL of the tenant site; invite (/signup) and opt-out (/withdraw) links are built from it. http/https only, path allowed, trailing slash stripped. Stored as-is (DP-013); not content-verified. Null to clear.
+     */
+    siteBaseUrl?: (string | null);
+    /**
+     * Sender domain for invite emails (bare hostname). Verification happens at send time, not here. Null to clear.
+     */
+    senderDomain?: (string | null);
+    /**
+     * Invite email subject line. Plain text, stored as-is; CR/LF stripped at send time. Null to clear (falls back to a default subject).
+     */
+    inviteSubject?: (string | null);
+    /**
+     * Policy version label, controller-owned free string. Stored as-is, not validated for monotonicity.
+     */
+    policyVersion: string;
+    /**
+     * Invite email template ({{vars}}). Stored as-is; rendered/validated at send time. Null to clear.
+     */
+    inviteTemplate?: (string | null);
+}
+interface WaitlistConfigUpsertOutput {
+    createdAt: string;
+    policyUrl: (string | null);
+    productId: string;
+    updatedAt: string;
+    senderName: (string | null);
+    consentText: string;
+    policyLabel: (string | null);
+    siteBaseUrl: (string | null);
+    senderDomain: (string | null);
+    inviteSubject: (string | null);
+    policyVersion: string;
+    inviteTemplate: (string | null);
+}
+interface WaitlistEmbedGetInput {
+}
+interface WaitlistEmbedGetOutput {
+    product_id: string;
+    script_tag: string;
+    public_edge_url: string;
+}
+interface WaitlistInvitesSendInput {
+    /**
+     * Resend even when a live invite token already exists (mints a fresh token).
+     */
+    force?: boolean;
+    /**
+     * Explicit recipient emails (e.g. from waitlist_signups_list). Combined with filter if both given.
+     */
+    emails?: string[];
+    /**
+     * Selection filter over signups; resolved server-side with pagination.
+     */
+    filter?: {
+        /**
+         * Prefix match on email (case-insensitive).
+         */
+        q?: string;
+        /**
+         * Select signups by status (single value or array).
+         */
+        status?: (("pending" | "invited" | "registered") | ("pending" | "invited" | "registered")[]);
+    };
+}
+interface WaitlistInvitesSendOutput {
     sent: {
         email: string;
         emailId: string;
@@ -15387,9 +18143,6 @@ interface GeneratedClient {
         restore: {
             status(input: BrainRestoreStatusInput): Promise<BrainRestoreStatusOutput>;
         };
-        usage: {
-            report(input: BrainUsageReportInput): Promise<BrainUsageReportOutput>;
-        };
     };
     consent: {
         'config-cookie-domain': {
@@ -15781,6 +18534,7 @@ interface GeneratedClient {
             'list-roles'(input: OrganizationProductListRolesInput): Promise<OrganizationProductListRolesOutput>;
             'revoke-invitation'(input: OrganizationProductRevokeInvitationInput): Promise<OrganizationProductRevokeInvitationOutput>;
             select(input: OrganizationProductSelectInput): Promise<OrganizationProductSelectOutput>;
+            update(input: OrganizationProductUpdateInput): Promise<OrganizationProductUpdateOutput>;
         };
         roles: {
             create(input: OrganizationRolesCreateInput): Promise<OrganizationRolesCreateOutput>;
@@ -15789,6 +18543,37 @@ interface GeneratedClient {
             list(input: OrganizationRolesListInput): Promise<OrganizationRolesListOutput>;
             update(input: OrganizationRolesUpdateInput): Promise<OrganizationRolesUpdateOutput>;
         };
+        'security-mfa': {
+            enable(input: OrganizationSecurityMfaEnableInput): Promise<OrganizationSecurityMfaEnableOutput>;
+        };
+    };
+    playground: {
+        analytics: {
+            overview(input: PlaygroundAnalyticsOverviewInput): Promise<PlaygroundAnalyticsOverviewOutput>;
+        };
+        billing: {
+            entitlements(input: PlaygroundBillingEntitlementsInput): Promise<PlaygroundBillingEntitlementsOutput>;
+            'record-usage'(input: PlaygroundBillingRecordUsageInput): Promise<PlaygroundBillingRecordUsageOutput>;
+        };
+        clickup: {
+            'create-task'(input: PlaygroundClickupCreateTaskInput): Promise<PlaygroundClickupCreateTaskOutput>;
+            'get-last-webhook'(input: PlaygroundClickupGetLastWebhookInput): Promise<PlaygroundClickupGetLastWebhookOutput>;
+            'get-overview'(input: PlaygroundClickupGetOverviewInput): Promise<PlaygroundClickupGetOverviewOutput>;
+        };
+        gdrive: {
+            'get-last-change'(input: PlaygroundGdriveGetLastChangeInput): Promise<PlaygroundGdriveGetLastChangeOutput>;
+            'read-file'(input: PlaygroundGdriveReadFileInput): Promise<PlaygroundGdriveReadFileOutput>;
+        };
+        googleads: {
+            'read-customer'(input: PlaygroundGoogleadsReadCustomerInput): Promise<PlaygroundGoogleadsReadCustomerOutput>;
+        };
+        lifecycle: {
+            'get-state'(input: PlaygroundLifecycleGetStateInput): Promise<PlaygroundLifecycleGetStateOutput>;
+            'list-events'(input: PlaygroundLifecycleListEventsInput): Promise<PlaygroundLifecycleListEventsOutput>;
+        };
+        webhook: {
+            'get-last'(input: PlaygroundWebhookGetLastInput): Promise<PlaygroundWebhookGetLastOutput>;
+        };
     };
     realtime: {
         apikey: {
@@ -15929,6 +18714,80 @@ interface GeneratedClient {
             get(input: TrackingSnippetsGetInput): Promise<TrackingSnippetsGetOutput>;
         };
     };
+    users: {
+        apikeys: {
+            create(input: UsersApikeysCreateInput): Promise<UsersApikeysCreateOutput>;
+            list(input: UsersApikeysListInput): Promise<UsersApikeysListOutput>;
+            revoke(input: UsersApikeysRevokeInput): Promise<UsersApikeysRevokeOutput>;
+        };
+        audit: {
+            list(input: UsersAuditListInput): Promise<UsersAuditListOutput>;
+        };
+        config: {
+            get(input: UsersConfigGetInput): Promise<UsersConfigGetOutput>;
+            upsert(input: UsersConfigUpsertInput): Promise<UsersConfigUpsertOutput>;
+        };
+        factors: {
+            list(input: UsersFactorsListInput): Promise<UsersFactorsListOutput>;
+            reset(input: UsersFactorsResetInput): Promise<UsersFactorsResetOutput>;
+        };
+        keys: {
+            list(input: UsersKeysListInput): Promise<UsersKeysListOutput>;
+            revoke(input: UsersKeysRevokeInput): Promise<UsersKeysRevokeOutput>;
+            rotate(input: UsersKeysRotateInput): Promise<UsersKeysRotateOutput>;
+        };
+        'ops-retention': {
+            get(input: UsersOpsRetentionGetInput): Promise<UsersOpsRetentionGetOutput>;
+        };
+        'ops-slo': {
+            get(input: UsersOpsSloGetInput): Promise<UsersOpsSloGetOutput>;
+        };
+        sessions: {
+            get(input: UsersSessionsGetInput): Promise<UsersSessionsGetOutput>;
+            impersonate(input: UsersSessionsImpersonateInput): Promise<UsersSessionsImpersonateOutput>;
+            list(input: UsersSessionsListInput): Promise<UsersSessionsListOutput>;
+            revoke(input: UsersSessionsRevokeInput): Promise<UsersSessionsRevokeOutput>;
+        };
+        stats: {
+            get(input: UsersStatsGetInput): Promise<UsersStatsGetOutput>;
+        };
+        users: {
+            ban(input: UsersUsersBanInput): Promise<UsersUsersBanOutput>;
+            create(input: UsersUsersCreateInput): Promise<UsersUsersCreateOutput>;
+            delete(input: UsersUsersDeleteInput): Promise<UsersUsersDeleteOutput>;
+            erase(input: UsersUsersEraseInput): Promise<UsersUsersEraseOutput>;
+            export(input: UsersUsersExportInput): Promise<UsersUsersExportOutput>;
+            get(input: UsersUsersGetInput): Promise<UsersUsersGetOutput>;
+            import(input: UsersUsersImportInput): Promise<UsersUsersImportOutput>;
+            invite(input: UsersUsersInviteInput): Promise<UsersUsersInviteOutput>;
+            list(input: UsersUsersListInput): Promise<UsersUsersListOutput>;
+            unban(input: UsersUsersUnbanInput): Promise<UsersUsersUnbanOutput>;
+            update(input: UsersUsersUpdateInput): Promise<UsersUsersUpdateOutput>;
+        };
+        'users-set-primary': {
+            identifier(input: UsersUsersSetPrimaryIdentifierInput): Promise<UsersUsersSetPrimaryIdentifierOutput>;
+        };
+        waitlist: {
+            erase(input: UsersWaitlistEraseInput): Promise<UsersWaitlistEraseOutput>;
+            funnel(input: UsersWaitlistFunnelInput): Promise<UsersWaitlistFunnelOutput>;
+            import(input: UsersWaitlistImportInput): Promise<UsersWaitlistImportOutput>;
+            invite(input: UsersWaitlistInviteInput): Promise<UsersWaitlistInviteOutput>;
+            list(input: UsersWaitlistListInput): Promise<UsersWaitlistListOutput>;
+        };
+        webhooks: {
+            create(input: UsersWebhooksCreateInput): Promise<UsersWebhooksCreateOutput>;
+            delete(input: UsersWebhooksDeleteInput): Promise<UsersWebhooksDeleteOutput>;
+            get(input: UsersWebhooksGetInput): Promise<UsersWebhooksGetOutput>;
+            list(input: UsersWebhooksListInput): Promise<UsersWebhooksListOutput>;
+            update(input: UsersWebhooksUpdateInput): Promise<UsersWebhooksUpdateOutput>;
+        };
+        'webhooks-deliveries': {
+            list(input: UsersWebhooksDeliveriesListInput): Promise<UsersWebhooksDeliveriesListOutput>;
+        };
+        'webhooks-rotate': {
+            secret(input: UsersWebhooksRotateSecretInput): Promise<UsersWebhooksRotateSecretOutput>;
+        };
+    };
     waitlist: {
         config: {
             get(input: WaitlistConfigGetInput): Promise<WaitlistConfigGetOutput>;
@@ -15948,4 +18807,4 @@ interface GeneratedClient {
     };
 }
 
-export type { BrainGdriveConnectionsListInput as $, AnalyticsQueryRunInput as A, BrainBackupCreateInput as B, BrainConnectorReposListInput as C, BrainConnectorReposListOutput as D, BrainDaemonBatchStatusInput as E, BrainDaemonBatchStatusOutput as F, GeneratedClient as G, BrainDaemonCreateInput as H, BrainDaemonCreateOutput as I, BrainDaemonGetInput as J, BrainDaemonGetOutput as K, BrainDaemonReingestInput as L, BrainDaemonReingestOutput as M, BrainDaemonRemoveInput as N, BrainDaemonRemoveOutput as O, BrainDaemonRunItemsInput as P, BrainDaemonRunItemsOutput as Q, BrainDaemonRunInput as R, BrainDaemonRunOutput as S, BrainDaemonRunsInput as T, BrainDaemonRunsOutput as U, BrainDaemonStatusInput as V, BrainDaemonStatusOutput as W, BrainDaemonUpdateInput as X, BrainDaemonUpdateOutput as Y, BrainDaemonsListInput as Z, BrainDaemonsListOutput as _, AnalyticsQueryRunOutput as a, DeploymentAlertDeleteInput as a$, BrainGdriveConnectionsListOutput as a0, BrainKnowledgeEntityMemoriesInput as a1, BrainKnowledgeEntityMemoriesOutput as a2, BrainKnowledgeGraphInput as a3, BrainKnowledgeGraphOutput as a4, BrainKnowledgeNeighborhoodInput as a5, BrainKnowledgeNeighborhoodOutput as a6, BrainKnowledgeRelationsInput as a7, BrainKnowledgeRelationsOutput as a8, BrainKnowledgeSearchInput as a9, ConsentConfigFloatingIconUpsertOutput as aA, ConsentConfigThemeUpsertInput as aB, ConsentConfigThemeUpsertOutput as aC, ConsentDashboardConfigGetInput as aD, ConsentDashboardConfigGetOutput as aE, ConsentDashboardDecisionsListInput as aF, ConsentDashboardDecisionsListOutput as aG, ConsentDashboardEmbedSnippetGetInput as aH, ConsentDashboardEmbedSnippetGetOutput as aI, ConsentDashboardStatsGetInput as aJ, ConsentDashboardStatsGetOutput as aK, ConsentEmbedGetInput as aL, ConsentEmbedGetOutput as aM, ConsentProvidersCreateInput as aN, ConsentProvidersCreateOutput as aO, ConsentProvidersDeleteInput as aP, ConsentProvidersDeleteOutput as aQ, ConsentProvidersListInput as aR, ConsentProvidersListOutput as aS, ConsentProvidersUpdateInput as aT, ConsentProvidersUpdateOutput as aU, ConsentRecordsExportInput as aV, ConsentRecordsExportOutput as aW, ConsentStatsGetInput as aX, ConsentStatsGetOutput as aY, DeploymentAlertCreateInput as aZ, DeploymentAlertCreateOutput as a_, BrainKnowledgeSearchOutput as aa, BrainMemoryAddInput as ab, BrainMemoryAddOutput as ac, BrainMemoryDeleteInput as ad, BrainMemoryDeleteOutput as ae, BrainMemoryGetInput as af, BrainMemoryGetOutput as ag, BrainMemoryListInput as ah, BrainMemoryListOutput as ai, BrainMemorySearchInput as aj, BrainMemorySearchOutput as ak, BrainMemoryStatsInput as al, BrainMemoryStatsOutput as am, BrainMemoryUpdateInput as an, BrainMemoryUpdateOutput as ao, BrainProductSharedMemoryResetInput as ap, BrainProductSharedMemoryResetOutput as aq, BrainRestoreStatusInput as ar, BrainRestoreStatusOutput as as, BrainUsageReportInput as at, BrainUsageReportOutput as au, ConsentConfigCookieDomainUpsertInput as av, ConsentConfigCookieDomainUpsertOutput as aw, ConsentConfigCustomizationUpsertInput as ax, ConsentConfigCustomizationUpsertOutput as ay, ConsentConfigFloatingIconUpsertInput as az, BrainBackupCreateOutput as b, DeploymentDomainGetInput as b$, DeploymentAlertDeleteOutput as b0, DeploymentAlertEventsListInput as b1, DeploymentAlertEventsListOutput as b2, DeploymentAlertListInput as b3, DeploymentAlertListOutput as b4, DeploymentAlertUpdateInput as b5, DeploymentAlertUpdateOutput as b6, DeploymentAnalyticsQueryInput as b7, DeploymentAnalyticsQueryOutput as b8, DeploymentAuditListInput as b9, DeploymentCloudSqlInstanceBackupListOutput as bA, DeploymentCloudSqlInstanceBackupInput as bB, DeploymentCloudSqlInstanceBackupOutput as bC, DeploymentCloudSqlInstanceCreateInput as bD, DeploymentCloudSqlInstanceCreateOutput as bE, DeploymentCloudSqlInstanceDeleteInput as bF, DeploymentCloudSqlInstanceDeleteOutput as bG, DeploymentCloudSqlInstanceGetInput as bH, DeploymentCloudSqlInstanceGetOutput as bI, DeploymentCloudSqlInstanceListInput as bJ, DeploymentCloudSqlInstanceListOutput as bK, DeploymentCloudSqlInstanceResizeInput as bL, DeploymentCloudSqlInstanceResizeOutput as bM, DeploymentCloudSqlInstanceRestoreInput as bN, DeploymentCloudSqlInstanceRestoreOutput as bO, DeploymentCloudSqlLogsInput as bP, DeploymentCloudSqlLogsOutput as bQ, DeploymentDeploymentCancelInput as bR, DeploymentDeploymentCancelOutput as bS, DeploymentDeploymentGetInput as bT, DeploymentDeploymentGetOutput as bU, DeploymentDeploymentListInput as bV, DeploymentDeploymentListOutput as bW, DeploymentDomainAddInput as bX, DeploymentDomainAddOutput as bY, DeploymentDomainAllowedListInput as bZ, DeploymentDomainAllowedListOutput as b_, DeploymentAuditListOutput as ba, DeploymentBuildGetInput as bb, DeploymentBuildGetOutput as bc, DeploymentBuildListInput as bd, DeploymentBuildListOutput as be, DeploymentBuildLogsInput as bf, DeploymentBuildLogsOutput as bg, DeploymentCanvasGetInput as bh, DeploymentCanvasGetOutput as bi, DeploymentCanvasMoveNodeInput as bj, DeploymentCanvasMoveNodeOutput as bk, DeploymentCloudSqlBackfillLogFlagsInput as bl, DeploymentCloudSqlBackfillLogFlagsOutput as bm, DeploymentCloudSqlDatabaseAttachInput as bn, DeploymentCloudSqlDatabaseAttachOutput as bo, DeploymentCloudSqlDatabaseCreateInput as bp, DeploymentCloudSqlDatabaseCreateOutput as bq, DeploymentCloudSqlDatabaseDeleteInput as br, DeploymentCloudSqlDatabaseDeleteOutput as bs, DeploymentCloudSqlDatabaseDetachInput as bt, DeploymentCloudSqlDatabaseDetachOutput as bu, DeploymentCloudSqlDatabaseGetInput as bv, DeploymentCloudSqlDatabaseGetOutput as bw, DeploymentCloudSqlDatabaseListInput as bx, DeploymentCloudSqlDatabaseListOutput as by, DeploymentCloudSqlInstanceBackupListInput as bz, BrainBackupRestoreInput as c, DeploymentManagedServiceTypesInput as c$, DeploymentDomainGetOutput as c0, DeploymentDomainListByServiceInput as c1, DeploymentDomainListByServiceOutput as c2, DeploymentDomainListInput as c3, DeploymentDomainListOutput as c4, DeploymentDomainRedirectWwwInput as c5, DeploymentDomainRedirectWwwOutput as c6, DeploymentDomainRemoveInput as c7, DeploymentDomainRemoveOutput as c8, DeploymentDomainRoutesAddInput as c9, DeploymentEventsListByServiceOutput as cA, DeploymentManagedServiceBackupListInput as cB, DeploymentManagedServiceBackupListOutput as cC, DeploymentManagedServiceBackupInput as cD, DeploymentManagedServiceBackupOutput as cE, DeploymentManagedServiceConnectInfoInput as cF, DeploymentManagedServiceConnectInfoOutput as cG, DeploymentManagedServiceDeleteInput as cH, DeploymentManagedServiceDeleteOutput as cI, DeploymentManagedServiceGetInput as cJ, DeploymentManagedServiceGetOutput as cK, DeploymentManagedServiceListInput as cL, DeploymentManagedServiceListOutput as cM, DeploymentManagedServiceLogsInput as cN, DeploymentManagedServiceLogsOutput as cO, DeploymentManagedServiceProvisionInput as cP, DeploymentManagedServiceProvisionOutput as cQ, DeploymentManagedServiceReconcileInput as cR, DeploymentManagedServiceReconcileOutput as cS, DeploymentManagedServiceResizeInput as cT, DeploymentManagedServiceResizeOutput as cU, DeploymentManagedServiceRestoreInput as cV, DeploymentManagedServiceRestoreOutput as cW, DeploymentManagedServiceStartInput as cX, DeploymentManagedServiceStartOutput as cY, DeploymentManagedServiceStopInput as cZ, DeploymentManagedServiceStopOutput as c_, DeploymentDomainRoutesAddOutput as ca, DeploymentDomainRoutesListInput as cb, DeploymentDomainRoutesListOutput as cc, DeploymentDomainRoutesRemoveInput as cd, DeploymentDomainRoutesRemoveOutput as ce, DeploymentDomainRoutesUpdateInput as cf, DeploymentDomainRoutesUpdateOutput as cg, DeploymentDomainVerifyInput as ch, DeploymentDomainVerifyOutput as ci, DeploymentEnvironmentCreateInput as cj, DeploymentEnvironmentCreateOutput as ck, DeploymentEnvironmentDeleteInput as cl, DeploymentEnvironmentDeleteOutput as cm, DeploymentEnvironmentForkInput as cn, DeploymentEnvironmentForkOutput as co, DeploymentEnvironmentGetInput as cp, DeploymentEnvironmentGetOutput as cq, DeploymentEnvironmentListInput as cr, DeploymentEnvironmentListOutput as cs, DeploymentEnvironmentReconcileInput as ct, DeploymentEnvironmentReconcileOutput as cu, DeploymentEnvironmentUpdateInput as cv, DeploymentEnvironmentUpdateOutput as cw, DeploymentEventsListByEnvironmentInput as cx, DeploymentEventsListByEnvironmentOutput as cy, DeploymentEventsListByServiceInput as cz, BrainBackupRestoreOutput as d, DeploymentVariableUnsetProductOutput as d$, DeploymentManagedServiceTypesOutput as d0, DeploymentMetricsGetInput as d1, DeploymentMetricsGetOutput as d2, DeploymentPreviewEnvironmentCreateInput as d3, DeploymentPreviewEnvironmentCreateOutput as d4, DeploymentPreviewEnvironmentDeleteInput as d5, DeploymentPreviewEnvironmentDeleteOutput as d6, DeploymentPreviewEnvironmentListInput as d7, DeploymentPreviewEnvironmentListOutput as d8, DeploymentPreviewPolicyGetInput as d9, DeploymentServiceWakeInput as dA, DeploymentServiceWakeOutput as dB, DeploymentSshCommandInput as dC, DeploymentSshCommandOutput as dD, DeploymentSshKeyDeleteInput as dE, DeploymentSshKeyDeleteOutput as dF, DeploymentSshKeyListInput as dG, DeploymentSshKeyListOutput as dH, DeploymentSshKeyRegisterInput as dI, DeploymentSshKeyRegisterOutput as dJ, DeploymentVariableListEnvInput as dK, DeploymentVariableListEnvOutput as dL, DeploymentVariableListProductInput as dM, DeploymentVariableListProductOutput as dN, DeploymentVariableListInput as dO, DeploymentVariableListOutput as dP, DeploymentVariableSetEnvInput as dQ, DeploymentVariableSetEnvOutput as dR, DeploymentVariableSetInput as dS, DeploymentVariableSetOutput as dT, DeploymentVariableSetProductInput as dU, DeploymentVariableSetProductOutput as dV, DeploymentVariableUnsetEnvInput as dW, DeploymentVariableUnsetEnvOutput as dX, DeploymentVariableUnsetInput as dY, DeploymentVariableUnsetOutput as dZ, DeploymentVariableUnsetProductInput as d_, DeploymentPreviewPolicyGetOutput as da, DeploymentPreviewPolicySetInput as db, DeploymentPreviewPolicySetOutput as dc, DeploymentServiceCreateInput as dd, DeploymentServiceCreateOutput as de, DeploymentServiceDeleteInput as df, DeploymentServiceDeleteOutput as dg, DeploymentServiceExecInput as dh, DeploymentServiceExecOutput as di, DeploymentServiceGetInput as dj, DeploymentServiceGetOutput as dk, DeploymentServiceListInput as dl, DeploymentServiceListOutput as dm, DeploymentServiceLogsInput as dn, DeploymentServiceLogsOutput as dp, DeploymentServiceRedeployInput as dq, DeploymentServiceRedeployOutput as dr, DeploymentServiceRestartInput as ds, DeploymentServiceRestartOutput as dt, DeploymentServiceRollbackInput as du, DeploymentServiceRollbackOutput as dv, DeploymentServiceScaleInput as dw, DeploymentServiceScaleOutput as dx, DeploymentServiceUpdateInput as dy, DeploymentServiceUpdateOutput as dz, BrainBackupStatusInput as e, MailDomainCreateOutput as e$, DeploymentVcsBranchListInput as e0, DeploymentVcsBranchListOutput as e1, DeploymentVcsConnectionListInput as e2, DeploymentVcsConnectionListOutput as e3, DeploymentVcsRepoListInput as e4, DeploymentVcsRepoListOutput as e5, DeploymentVolumeCreateInput as e6, DeploymentVolumeCreateOutput as e7, DeploymentVolumeDeleteInput as e8, DeploymentVolumeDeleteOutput as e9, MailBroadcastCreateInput as eA, MailBroadcastCreateOutput as eB, MailBroadcastDeleteInput as eC, MailBroadcastDeleteOutput as eD, MailBroadcastGetInput as eE, MailBroadcastGetOutput as eF, MailBroadcastListInput as eG, MailBroadcastListOutput as eH, MailBroadcastQueueInput as eI, MailBroadcastQueueOutput as eJ, MailBroadcastStatsInput as eK, MailBroadcastStatsOutput as eL, MailBroadcastUpdateInput as eM, MailBroadcastUpdateOutput as eN, MailContactCreateInput as eO, MailContactCreateOutput as eP, MailContactDeleteInput as eQ, MailContactDeleteOutput as eR, MailContactGetInput as eS, MailContactGetOutput as eT, MailContactListInput as eU, MailContactListOutput as eV, MailContactUpdateInput as eW, MailContactUpdateOutput as eX, MailDomainAllowedListInput as eY, MailDomainAllowedListOutput as eZ, MailDomainCreateInput as e_, DeploymentVolumeDetachInput as ea, DeploymentVolumeDetachOutput as eb, DeploymentVolumeGetInput as ec, DeploymentVolumeGetOutput as ed, DeploymentVolumeListInput as ee, DeploymentVolumeListOutput as ef, DeploymentVolumeResizeInput as eg, DeploymentVolumeResizeOutput as eh, MailApikeyCreateInput as ei, MailApikeyCreateOutput as ej, MailApikeyDeleteInput as ek, MailApikeyDeleteOutput as el, MailApikeyListInput as em, MailApikeyListOutput as en, MailAudienceCreateInput as eo, MailAudienceCreateOutput as ep, MailAudienceDeleteInput as eq, MailAudienceDeleteOutput as er, MailAudienceGetInput as es, MailAudienceGetOutput as et, MailAudienceListInput as eu, MailAudienceListOutput as ev, MailAudienceUpdateInput as ew, MailAudienceUpdateOutput as ex, MailBroadcastCancelInput as ey, MailBroadcastCancelOutput as ez, BrainBackupStatusOutput as f, OrganizationClickupListInstallationsOutput as f$, MailDomainDeleteInput as f0, MailDomainDeleteOutput as f1, MailDomainGetInput as f2, MailDomainGetOutput as f3, MailDomainListInput as f4, MailDomainListOutput as f5, MailDomainUpdateInput as f6, MailDomainUpdateOutput as f7, MailDomainVerifyInput as f8, MailDomainVerifyOutput as f9, MailTemplateListOutput as fA, MailTemplatePublishInput as fB, MailTemplatePublishOutput as fC, MailTemplateUpdateInput as fD, MailTemplateUpdateOutput as fE, MailUsageGetInput as fF, MailUsageGetOutput as fG, MailWebhookCreateInput as fH, MailWebhookCreateOutput as fI, MailWebhookDeleteInput as fJ, MailWebhookDeleteOutput as fK, MailWebhookDeliveriesListInput as fL, MailWebhookDeliveriesListOutput as fM, MailWebhookGetInput as fN, MailWebhookGetOutput as fO, MailWebhookListInput as fP, MailWebhookListOutput as fQ, MailWebhookUpdateInput as fR, MailWebhookUpdateOutput as fS, MailEmailGetOutput as fT, OrganizationAuthMeInput as fU, OrganizationAuthMeOutput as fV, OrganizationBindingsListInput as fW, OrganizationBindingsListOutput as fX, OrganizationClickupInstallInput as fY, OrganizationClickupInstallOutput as fZ, OrganizationClickupListInstallationsInput as f_, MailEmailCancelInput as fa, MailEmailCancelOutput as fb, MailEmailGetInput as fc, MailEmailSendBatchInput as fd, MailEmailSendBatchOutput as fe, MailEmailSendInput as ff, MailEmailSendOutput as fg, MailEmailUpdateInput as fh, MailEmailUpdateOutput as fi, MailReputationGetInput as fj, MailReputationGetOutput as fk, MailStatsGetInput as fl, MailStatsGetOutput as fm, MailSuppressionAddInput as fn, MailSuppressionAddOutput as fo, MailSuppressionListInput as fp, MailSuppressionListOutput as fq, MailSuppressionRemoveInput as fr, MailSuppressionRemoveOutput as fs, MailTemplateCreateInput as ft, MailTemplateCreateOutput as fu, MailTemplateDeleteInput as fv, MailTemplateDeleteOutput as fw, MailTemplateGetInput as fx, MailTemplateGetOutput as fy, MailTemplateListInput as fz, BrainBackupsListInput as g, OrganizationMemberListProductAccessOutput as g$, OrganizationCloudflareInstallInput as g0, OrganizationCloudflareInstallOutput as g1, OrganizationConnectorsApproveRequestInput as g2, OrganizationConnectorsApproveRequestOutput as g3, OrganizationConnectorsAttachInput as g4, OrganizationConnectorsAttachOutput as g5, OrganizationConnectorsDeleteInput as g6, OrganizationConnectorsDeleteOutput as g7, OrganizationConnectorsDenyRequestInput as g8, OrganizationConnectorsDenyRequestOutput as g9, OrganizationExtensionsInstallInput as gA, OrganizationExtensionsInstallOutput as gB, OrganizationExtensionsListInstalledInput as gC, OrganizationExtensionsListInstalledOutput as gD, OrganizationExtensionsListInput as gE, OrganizationExtensionsListOutput as gF, OrganizationExtensionsUninstallInput as gG, OrganizationExtensionsUninstallOutput as gH, OrganizationFeedbackSubmitInput as gI, OrganizationFeedbackSubmitOutput as gJ, OrganizationGdriveInstallInput as gK, OrganizationGdriveInstallOutput as gL, OrganizationGithubInstallInput as gM, OrganizationGithubInstallOutput as gN, OrganizationGithubListInstallationsInput as gO, OrganizationGithubListInstallationsOutput as gP, OrganizationGoogleadsInstallInput as gQ, OrganizationGoogleadsInstallOutput as gR, OrganizationListInput as gS, OrganizationListOutput as gT, OrganizationMemberAcceptInviteInput as gU, OrganizationMemberAcceptInviteOutput as gV, OrganizationMemberInviteInput as gW, OrganizationMemberInviteOutput as gX, OrganizationMemberListInvitationsInput as gY, OrganizationMemberListInvitationsOutput as gZ, OrganizationMemberListProductAccessInput as g_, OrganizationConnectorsDetachInput as ga, OrganizationConnectorsDetachOutput as gb, OrganizationConnectorsListAttachmentsInput as gc, OrganizationConnectorsListAttachmentsOutput as gd, OrganizationConnectorsListAvailableInput as ge, OrganizationConnectorsListAvailableOutput as gf, OrganizationConnectorsListOrgInput as gg, OrganizationConnectorsListOrgOutput as gh, OrganizationConnectorsListInput as gi, OrganizationConnectorsListOutput as gj, OrganizationConnectorsListRequestsInput as gk, OrganizationConnectorsListRequestsOutput as gl, OrganizationConnectorsRemoveInput as gm, OrganizationConnectorsRemoveOutput as gn, OrganizationConnectorsRequestInput as go, OrganizationConnectorsRequestOutput as gp, OrganizationCreateInput as gq, OrganizationCreateOutput as gr, OrganizationDomainsAddInput as gs, OrganizationDomainsAddOutput as gt, OrganizationDomainsGetInput as gu, OrganizationDomainsGetOutput as gv, OrganizationDomainsListInput as gw, OrganizationDomainsListOutput as gx, OrganizationDomainsRemoveInput as gy, OrganizationDomainsRemoveOutput as gz, BrainBackupsListOutput as h, RealtimeGrantRevokeOutput as h$, OrganizationMemberListInput as h0, OrganizationMemberListOutput as h1, OrganizationMemberRemoveInput as h2, OrganizationMemberRemoveOutput as h3, OrganizationMemberRevokeInvitationInput as h4, OrganizationMemberRevokeInvitationOutput as h5, OrganizationMemberSetRoleInput as h6, OrganizationMemberSetRoleOutput as h7, OrganizationMemberShareProductInput as h8, OrganizationMemberShareProductOutput as h9, OrganizationRolesDeleteInput as hA, OrganizationRolesDeleteOutput as hB, OrganizationRolesGetInput as hC, OrganizationRolesGetOutput as hD, OrganizationRolesListInput as hE, OrganizationRolesListOutput as hF, OrganizationRolesUpdateInput as hG, OrganizationRolesUpdateOutput as hH, OrganizationSelectInput as hI, OrganizationSelectOutput as hJ, RealtimeApikeyCreateInput as hK, RealtimeApikeyCreateOutput as hL, RealtimeApikeyListInput as hM, RealtimeApikeyListOutput as hN, RealtimeApikeyRevokeInput as hO, RealtimeApikeyRevokeOutput as hP, RealtimeArchiveExportInput as hQ, RealtimeArchiveExportOutput as hR, RealtimeArchiveExportStatusInput as hS, RealtimeArchiveExportStatusOutput as hT, RealtimeArchiveGetInput as hU, RealtimeArchiveGetOutput as hV, RealtimeGrantCreateInput as hW, RealtimeGrantCreateOutput as hX, RealtimeGrantListInput as hY, RealtimeGrantListOutput as hZ, RealtimeGrantRevokeInput as h_, OrganizationMemberUnshareProductInput as ha, OrganizationMemberUnshareProductOutput as hb, OrganizationMembersAssignRoleInput as hc, OrganizationMembersAssignRoleOutput as hd, OrganizationPermissionCatalogInput as he, OrganizationPermissionCatalogOutput as hf, OrganizationProductAcceptInvitationInput as hg, OrganizationProductAcceptInvitationOutput as hh, OrganizationProductCreateInput as hi, OrganizationProductCreateOutput as hj, OrganizationProductInviteInput as hk, OrganizationProductInviteOutput as hl, OrganizationProductListInvitationsInput as hm, OrganizationProductListInvitationsOutput as hn, OrganizationProductListMembersInput as ho, OrganizationProductListMembersOutput as hp, OrganizationProductListInput as hq, OrganizationProductListOutput as hr, OrganizationProductListRolesInput as hs, OrganizationProductListRolesOutput as ht, OrganizationProductRevokeInvitationInput as hu, OrganizationProductRevokeInvitationOutput as hv, OrganizationProductSelectInput as hw, OrganizationProductSelectOutput as hx, OrganizationRolesCreateInput as hy, OrganizationRolesCreateOutput as hz, BrainClickupChannelsListInput as i, TrackingEventNamesArchiveOutput as i$, RealtimeHistoryGetInput as i0, RealtimeHistoryGetOutput as i1, RealtimeMessagesPublishInput as i2, RealtimeMessagesPublishOutput as i3, RealtimeNamespaceCreateInput as i4, RealtimeNamespaceCreateOutput as i5, RealtimeNamespaceDeleteInput as i6, RealtimeNamespaceDeleteOutput as i7, RealtimeNamespaceGetInput as i8, RealtimeNamespaceGetOutput as i9, RealtimeWebhookGetInput as iA, RealtimeWebhookGetOutput as iB, RealtimeWebhookListInput as iC, RealtimeWebhookListOutput as iD, RealtimeWebhookSecretRotateInput as iE, RealtimeWebhookSecretRotateOutput as iF, RealtimeWebhookUpdateInput as iG, RealtimeWebhookUpdateOutput as iH, TrackingApiKeysCreateInput as iI, TrackingApiKeysCreateOutput as iJ, TrackingApiKeysListInput as iK, TrackingApiKeysListOutput as iL, TrackingApiKeysRevokeInput as iM, TrackingApiKeysRevokeOutput as iN, TrackingApiKeysRotateInput as iO, TrackingApiKeysRotateOutput as iP, TrackingDomainsCreateInput as iQ, TrackingDomainsCreateOutput as iR, TrackingDomainsDeleteInput as iS, TrackingDomainsDeleteOutput as iT, TrackingDomainsGetInput as iU, TrackingDomainsGetOutput as iV, TrackingDomainsListInput as iW, TrackingDomainsListOutput as iX, TrackingDomainsVerifyInput as iY, TrackingDomainsVerifyOutput as iZ, TrackingEventNamesArchiveInput as i_, RealtimeNamespaceListInput as ia, RealtimeNamespaceListOutput as ib, RealtimeNamespaceUpdateInput as ic, RealtimeNamespaceUpdateOutput as id, RealtimePresenceEnterInput as ie, RealtimePresenceEnterOutput as ig, RealtimePresenceGetInput as ih, RealtimePresenceGetOutput as ii, RealtimePresenceLeaveInput as ij, RealtimePresenceLeaveOutput as ik, RealtimePresenceStatsInput as il, RealtimePresenceStatsOutput as im, RealtimePresenceUpdateInput as io, RealtimePresenceUpdateOutput as ip, RealtimeStatusGetInput as iq, RealtimeStatusGetOutput as ir, RealtimeTokensCreateInput as is, RealtimeTokensCreateOutput as it, RealtimeWebhookCreateInput as iu, RealtimeWebhookCreateOutput as iv, RealtimeWebhookDeleteInput as iw, RealtimeWebhookDeleteOutput as ix, RealtimeWebhookDeliveriesListInput as iy, RealtimeWebhookDeliveriesListOutput as iz, BrainClickupChannelsListOutput as j, WaitlistEmbedGetOutput as j$, TrackingEventNamesListInput as j0, TrackingEventNamesListOutput as j1, TrackingEventNamesUnarchiveInput as j2, TrackingEventNamesUnarchiveOutput as j3, TrackingGoogleadsConnectionStatusInput as j4, TrackingGoogleadsConnectionStatusOutput as j5, TrackingGoogleadsConversionActionsInput as j6, TrackingGoogleadsConversionActionsOutput as j7, TrackingGoogleadsFeedbackConfigGetInput as j8, TrackingGoogleadsFeedbackConfigGetOutput as j9, TrackingLinkDomainsDeleteInput as jA, TrackingLinkDomainsDeleteOutput as jB, TrackingLinkDomainsListInput as jC, TrackingLinkDomainsListOutput as jD, TrackingLiveEventsListInput as jE, TrackingLiveEventsListOutput as jF, TrackingProfilesDeleteInput as jG, TrackingProfilesDeleteOutput as jH, TrackingProfilesExportInput as jI, TrackingProfilesExportOutput as jJ, TrackingProfilesGetInput as jK, TrackingProfilesGetOutput as jL, TrackingProfilesListInput as jM, TrackingProfilesListOutput as jN, TrackingReportsAttributedJourneyInput as jO, TrackingReportsAttributedJourneyOutput as jP, TrackingReportsRevenueBySourceInput as jQ, TrackingReportsRevenueBySourceOutput as jR, TrackingReportsSourcePeopleInput as jS, TrackingReportsSourcePeopleOutput as jT, TrackingSnippetsGetInput as jU, TrackingSnippetsGetOutput as jV, WaitlistConfigGetInput as jW, WaitlistConfigGetOutput as jX, WaitlistConfigUpsertInput as jY, WaitlistConfigUpsertOutput as jZ, WaitlistEmbedGetInput as j_, TrackingGoogleadsFeedbackConfigSetInput as ja, TrackingGoogleadsFeedbackConfigSetOutput as jb, TrackingGoogleadsFeedbackRunInput as jc, TrackingGoogleadsFeedbackRunOutput as jd, TrackingGoogleadsFeedbackStatusInput as je, TrackingGoogleadsFeedbackStatusOutput as jf, TrackingGoogleadsFeedbackUploadsInput as jg, TrackingGoogleadsFeedbackUploadsOutput as jh, TrackingGoogleadsRoasReportInput as ji, TrackingGoogleadsRoasReportOutput as jj, TrackingGoogleadsSyncNowInput as jk, TrackingGoogleadsSyncNowOutput as jl, TrackingGoogleadsTrackingHealthInput as jm, TrackingGoogleadsTrackingHealthOutput as jn, TrackingGoogleadsUsVsPlatformInput as jo, TrackingGoogleadsUsVsPlatformOutput as jp, TrackingIdentityHealthInput as jq, TrackingIdentityHealthOutput as jr, TrackingInstallDomainsCreateInput as js, TrackingInstallDomainsCreateOutput as jt, TrackingInstallDomainsDeleteInput as ju, TrackingInstallDomainsDeleteOutput as jv, TrackingInstallDomainsListInput as jw, TrackingInstallDomainsListOutput as jx, TrackingLinkDomainsCreateInput as jy, TrackingLinkDomainsCreateOutput as jz, BrainClickupConnectionsListInput as k, WaitlistInvitesSendInput as k0, WaitlistInvitesSendOutput as k1, WaitlistSignupsEraseInput as k2, WaitlistSignupsEraseOutput as k3, WaitlistSignupsFunnelInput as k4, WaitlistSignupsFunnelOutput as k5, WaitlistSignupsListInput as k6, WaitlistSignupsListOutput as k7, BrainClickupConnectionsListOutput as l, BrainClickupListsListInput as m, BrainClickupListsListOutput as n, BrainClickupSpacesListInput as o, BrainClickupSpacesListOutput as p, BrainCognitionDigestInput as q, BrainCognitionDigestOutput as r, BrainCognitionStatusInput as s, BrainCognitionStatusOutput as t, BrainCognitionSweepInput as u, BrainCognitionSweepOutput as v, BrainConnectorBranchesListInput as w, BrainConnectorBranchesListOutput as x, BrainConnectorConnectionsListInput as y, BrainConnectorConnectionsListOutput as z };
+export type { BrainGdriveConnectionsListInput as $, AnalyticsQueryRunInput as A, BrainBackupCreateInput as B, BrainConnectorReposListInput as C, BrainConnectorReposListOutput as D, BrainDaemonBatchStatusInput as E, BrainDaemonBatchStatusOutput as F, GeneratedClient as G, BrainDaemonCreateInput as H, BrainDaemonCreateOutput as I, BrainDaemonGetInput as J, BrainDaemonGetOutput as K, BrainDaemonReingestInput as L, BrainDaemonReingestOutput as M, BrainDaemonRemoveInput as N, BrainDaemonRemoveOutput as O, BrainDaemonRunItemsInput as P, BrainDaemonRunItemsOutput as Q, BrainDaemonRunInput as R, BrainDaemonRunOutput as S, BrainDaemonRunsInput as T, BrainDaemonRunsOutput as U, BrainDaemonStatusInput as V, BrainDaemonStatusOutput as W, BrainDaemonUpdateInput as X, BrainDaemonUpdateOutput as Y, BrainDaemonsListInput as Z, BrainDaemonsListOutput as _, AnalyticsQueryRunOutput as a, DeploymentAlertEventsListInput as a$, BrainGdriveConnectionsListOutput as a0, BrainKnowledgeEntityMemoriesInput as a1, BrainKnowledgeEntityMemoriesOutput as a2, BrainKnowledgeGraphInput as a3, BrainKnowledgeGraphOutput as a4, BrainKnowledgeNeighborhoodInput as a5, BrainKnowledgeNeighborhoodOutput as a6, BrainKnowledgeRelationsInput as a7, BrainKnowledgeRelationsOutput as a8, BrainKnowledgeSearchInput as a9, ConsentConfigThemeUpsertOutput as aA, ConsentDashboardConfigGetInput as aB, ConsentDashboardConfigGetOutput as aC, ConsentDashboardDecisionsListInput as aD, ConsentDashboardDecisionsListOutput as aE, ConsentDashboardEmbedSnippetGetInput as aF, ConsentDashboardEmbedSnippetGetOutput as aG, ConsentDashboardStatsGetInput as aH, ConsentDashboardStatsGetOutput as aI, ConsentEmbedGetInput as aJ, ConsentEmbedGetOutput as aK, ConsentProvidersCreateInput as aL, ConsentProvidersCreateOutput as aM, ConsentProvidersDeleteInput as aN, ConsentProvidersDeleteOutput as aO, ConsentProvidersListInput as aP, ConsentProvidersListOutput as aQ, ConsentProvidersUpdateInput as aR, ConsentProvidersUpdateOutput as aS, ConsentRecordsExportInput as aT, ConsentRecordsExportOutput as aU, ConsentStatsGetInput as aV, ConsentStatsGetOutput as aW, DeploymentAlertCreateInput as aX, DeploymentAlertCreateOutput as aY, DeploymentAlertDeleteInput as aZ, DeploymentAlertDeleteOutput as a_, BrainKnowledgeSearchOutput as aa, BrainMemoryAddInput as ab, BrainMemoryAddOutput as ac, BrainMemoryDeleteInput as ad, BrainMemoryDeleteOutput as ae, BrainMemoryGetInput as af, BrainMemoryGetOutput as ag, BrainMemoryListInput as ah, BrainMemoryListOutput as ai, BrainMemorySearchInput as aj, BrainMemorySearchOutput as ak, BrainMemoryStatsInput as al, BrainMemoryStatsOutput as am, BrainMemoryUpdateInput as an, BrainMemoryUpdateOutput as ao, BrainProductSharedMemoryResetInput as ap, BrainProductSharedMemoryResetOutput as aq, BrainRestoreStatusInput as ar, BrainRestoreStatusOutput as as, ConsentConfigCookieDomainUpsertInput as at, ConsentConfigCookieDomainUpsertOutput as au, ConsentConfigCustomizationUpsertInput as av, ConsentConfigCustomizationUpsertOutput as aw, ConsentConfigFloatingIconUpsertInput as ax, ConsentConfigFloatingIconUpsertOutput as ay, ConsentConfigThemeUpsertInput as az, BrainBackupCreateOutput as b, DeploymentDomainListByServiceInput as b$, DeploymentAlertEventsListOutput as b0, DeploymentAlertListInput as b1, DeploymentAlertListOutput as b2, DeploymentAlertUpdateInput as b3, DeploymentAlertUpdateOutput as b4, DeploymentAnalyticsQueryInput as b5, DeploymentAnalyticsQueryOutput as b6, DeploymentAuditListInput as b7, DeploymentAuditListOutput as b8, DeploymentBuildGetInput as b9, DeploymentCloudSqlInstanceBackupOutput as bA, DeploymentCloudSqlInstanceCreateInput as bB, DeploymentCloudSqlInstanceCreateOutput as bC, DeploymentCloudSqlInstanceDeleteInput as bD, DeploymentCloudSqlInstanceDeleteOutput as bE, DeploymentCloudSqlInstanceGetInput as bF, DeploymentCloudSqlInstanceGetOutput as bG, DeploymentCloudSqlInstanceListInput as bH, DeploymentCloudSqlInstanceListOutput as bI, DeploymentCloudSqlInstanceResizeInput as bJ, DeploymentCloudSqlInstanceResizeOutput as bK, DeploymentCloudSqlInstanceRestoreInput as bL, DeploymentCloudSqlInstanceRestoreOutput as bM, DeploymentCloudSqlLogsInput as bN, DeploymentCloudSqlLogsOutput as bO, DeploymentDeploymentCancelInput as bP, DeploymentDeploymentCancelOutput as bQ, DeploymentDeploymentGetInput as bR, DeploymentDeploymentGetOutput as bS, DeploymentDeploymentListInput as bT, DeploymentDeploymentListOutput as bU, DeploymentDomainAddInput as bV, DeploymentDomainAddOutput as bW, DeploymentDomainAllowedListInput as bX, DeploymentDomainAllowedListOutput as bY, DeploymentDomainGetInput as bZ, DeploymentDomainGetOutput as b_, DeploymentBuildGetOutput as ba, DeploymentBuildListInput as bb, DeploymentBuildListOutput as bc, DeploymentBuildLogsInput as bd, DeploymentBuildLogsOutput as be, DeploymentCanvasGetInput as bf, DeploymentCanvasGetOutput as bg, DeploymentCanvasMoveNodeInput as bh, DeploymentCanvasMoveNodeOutput as bi, DeploymentCloudSqlBackfillLogFlagsInput as bj, DeploymentCloudSqlBackfillLogFlagsOutput as bk, DeploymentCloudSqlDatabaseAttachInput as bl, DeploymentCloudSqlDatabaseAttachOutput as bm, DeploymentCloudSqlDatabaseCreateInput as bn, DeploymentCloudSqlDatabaseCreateOutput as bo, DeploymentCloudSqlDatabaseDeleteInput as bp, DeploymentCloudSqlDatabaseDeleteOutput as bq, DeploymentCloudSqlDatabaseDetachInput as br, DeploymentCloudSqlDatabaseDetachOutput as bs, DeploymentCloudSqlDatabaseGetInput as bt, DeploymentCloudSqlDatabaseGetOutput as bu, DeploymentCloudSqlDatabaseListInput as bv, DeploymentCloudSqlDatabaseListOutput as bw, DeploymentCloudSqlInstanceBackupListInput as bx, DeploymentCloudSqlInstanceBackupListOutput as by, DeploymentCloudSqlInstanceBackupInput as bz, BrainBackupRestoreInput as c, DeploymentMetricsGetInput as c$, DeploymentDomainListByServiceOutput as c0, DeploymentDomainListInput as c1, DeploymentDomainListOutput as c2, DeploymentDomainRedirectWwwInput as c3, DeploymentDomainRedirectWwwOutput as c4, DeploymentDomainRemoveInput as c5, DeploymentDomainRemoveOutput as c6, DeploymentDomainRoutesAddInput as c7, DeploymentDomainRoutesAddOutput as c8, DeploymentDomainRoutesListInput as c9, DeploymentManagedServiceBackupListOutput as cA, DeploymentManagedServiceBackupInput as cB, DeploymentManagedServiceBackupOutput as cC, DeploymentManagedServiceConnectInfoInput as cD, DeploymentManagedServiceConnectInfoOutput as cE, DeploymentManagedServiceDeleteInput as cF, DeploymentManagedServiceDeleteOutput as cG, DeploymentManagedServiceGetInput as cH, DeploymentManagedServiceGetOutput as cI, DeploymentManagedServiceListInput as cJ, DeploymentManagedServiceListOutput as cK, DeploymentManagedServiceLogsInput as cL, DeploymentManagedServiceLogsOutput as cM, DeploymentManagedServiceProvisionInput as cN, DeploymentManagedServiceProvisionOutput as cO, DeploymentManagedServiceReconcileInput as cP, DeploymentManagedServiceReconcileOutput as cQ, DeploymentManagedServiceResizeInput as cR, DeploymentManagedServiceResizeOutput as cS, DeploymentManagedServiceRestoreInput as cT, DeploymentManagedServiceRestoreOutput as cU, DeploymentManagedServiceStartInput as cV, DeploymentManagedServiceStartOutput as cW, DeploymentManagedServiceStopInput as cX, DeploymentManagedServiceStopOutput as cY, DeploymentManagedServiceTypesInput as cZ, DeploymentManagedServiceTypesOutput as c_, DeploymentDomainRoutesListOutput as ca, DeploymentDomainRoutesRemoveInput as cb, DeploymentDomainRoutesRemoveOutput as cc, DeploymentDomainRoutesUpdateInput as cd, DeploymentDomainRoutesUpdateOutput as ce, DeploymentDomainVerifyInput as cf, DeploymentDomainVerifyOutput as cg, DeploymentEnvironmentCreateInput as ch, DeploymentEnvironmentCreateOutput as ci, DeploymentEnvironmentDeleteInput as cj, DeploymentEnvironmentDeleteOutput as ck, DeploymentEnvironmentForkInput as cl, DeploymentEnvironmentForkOutput as cm, DeploymentEnvironmentGetInput as cn, DeploymentEnvironmentGetOutput as co, DeploymentEnvironmentListInput as cp, DeploymentEnvironmentListOutput as cq, DeploymentEnvironmentReconcileInput as cr, DeploymentEnvironmentReconcileOutput as cs, DeploymentEnvironmentUpdateInput as ct, DeploymentEnvironmentUpdateOutput as cu, DeploymentEventsListByEnvironmentInput as cv, DeploymentEventsListByEnvironmentOutput as cw, DeploymentEventsListByServiceInput as cx, DeploymentEventsListByServiceOutput as cy, DeploymentManagedServiceBackupListInput as cz, BrainBackupRestoreOutput as d, DeploymentVcsBranchListOutput as d$, DeploymentMetricsGetOutput as d0, DeploymentPreviewEnvironmentCreateInput as d1, DeploymentPreviewEnvironmentCreateOutput as d2, DeploymentPreviewEnvironmentDeleteInput as d3, DeploymentPreviewEnvironmentDeleteOutput as d4, DeploymentPreviewEnvironmentListInput as d5, DeploymentPreviewEnvironmentListOutput as d6, DeploymentPreviewPolicyGetInput as d7, DeploymentPreviewPolicyGetOutput as d8, DeploymentPreviewPolicySetInput as d9, DeploymentSshCommandInput as dA, DeploymentSshCommandOutput as dB, DeploymentSshKeyDeleteInput as dC, DeploymentSshKeyDeleteOutput as dD, DeploymentSshKeyListInput as dE, DeploymentSshKeyListOutput as dF, DeploymentSshKeyRegisterInput as dG, DeploymentSshKeyRegisterOutput as dH, DeploymentVariableListEnvInput as dI, DeploymentVariableListEnvOutput as dJ, DeploymentVariableListProductInput as dK, DeploymentVariableListProductOutput as dL, DeploymentVariableListInput as dM, DeploymentVariableListOutput as dN, DeploymentVariableSetEnvInput as dO, DeploymentVariableSetEnvOutput as dP, DeploymentVariableSetInput as dQ, DeploymentVariableSetOutput as dR, DeploymentVariableSetProductInput as dS, DeploymentVariableSetProductOutput as dT, DeploymentVariableUnsetEnvInput as dU, DeploymentVariableUnsetEnvOutput as dV, DeploymentVariableUnsetInput as dW, DeploymentVariableUnsetOutput as dX, DeploymentVariableUnsetProductInput as dY, DeploymentVariableUnsetProductOutput as dZ, DeploymentVcsBranchListInput as d_, DeploymentPreviewPolicySetOutput as da, DeploymentServiceCreateInput as db, DeploymentServiceCreateOutput as dc, DeploymentServiceDeleteInput as dd, DeploymentServiceDeleteOutput as de, DeploymentServiceExecInput as df, DeploymentServiceExecOutput as dg, DeploymentServiceGetInput as dh, DeploymentServiceGetOutput as di, DeploymentServiceListInput as dj, DeploymentServiceListOutput as dk, DeploymentServiceLogsInput as dl, DeploymentServiceLogsOutput as dm, DeploymentServiceRedeployInput as dn, DeploymentServiceRedeployOutput as dp, DeploymentServiceRestartInput as dq, DeploymentServiceRestartOutput as dr, DeploymentServiceRollbackInput as ds, DeploymentServiceRollbackOutput as dt, DeploymentServiceScaleInput as du, DeploymentServiceScaleOutput as dv, DeploymentServiceUpdateInput as dw, DeploymentServiceUpdateOutput as dx, DeploymentServiceWakeInput as dy, DeploymentServiceWakeOutput as dz, BrainBackupStatusInput as e, MailDomainDeleteOutput as e$, DeploymentVcsConnectionListInput as e0, DeploymentVcsConnectionListOutput as e1, DeploymentVcsRepoListInput as e2, DeploymentVcsRepoListOutput as e3, DeploymentVolumeCreateInput as e4, DeploymentVolumeCreateOutput as e5, DeploymentVolumeDeleteInput as e6, DeploymentVolumeDeleteOutput as e7, DeploymentVolumeDetachInput as e8, DeploymentVolumeDetachOutput as e9, MailBroadcastDeleteInput as eA, MailBroadcastDeleteOutput as eB, MailBroadcastGetInput as eC, MailBroadcastGetOutput as eD, MailBroadcastListInput as eE, MailBroadcastListOutput as eF, MailBroadcastQueueInput as eG, MailBroadcastQueueOutput as eH, MailBroadcastStatsInput as eI, MailBroadcastStatsOutput as eJ, MailBroadcastUpdateInput as eK, MailBroadcastUpdateOutput as eL, MailContactCreateInput as eM, MailContactCreateOutput as eN, MailContactDeleteInput as eO, MailContactDeleteOutput as eP, MailContactGetInput as eQ, MailContactGetOutput as eR, MailContactListInput as eS, MailContactListOutput as eT, MailContactUpdateInput as eU, MailContactUpdateOutput as eV, MailDomainAllowedListInput as eW, MailDomainAllowedListOutput as eX, MailDomainCreateInput as eY, MailDomainCreateOutput as eZ, MailDomainDeleteInput as e_, DeploymentVolumeGetInput as ea, DeploymentVolumeGetOutput as eb, DeploymentVolumeListInput as ec, DeploymentVolumeListOutput as ed, DeploymentVolumeResizeInput as ee, DeploymentVolumeResizeOutput as ef, MailApikeyCreateInput as eg, MailApikeyCreateOutput as eh, MailApikeyDeleteInput as ei, MailApikeyDeleteOutput as ej, MailApikeyListInput as ek, MailApikeyListOutput as el, MailAudienceCreateInput as em, MailAudienceCreateOutput as en, MailAudienceDeleteInput as eo, MailAudienceDeleteOutput as ep, MailAudienceGetInput as eq, MailAudienceGetOutput as er, MailAudienceListInput as es, MailAudienceListOutput as et, MailAudienceUpdateInput as eu, MailAudienceUpdateOutput as ev, MailBroadcastCancelInput as ew, MailBroadcastCancelOutput as ex, MailBroadcastCreateInput as ey, MailBroadcastCreateOutput as ez, BrainBackupStatusOutput as f, OrganizationCloudflareInstallOutput as f$, MailDomainGetInput as f0, MailDomainGetOutput as f1, MailDomainListInput as f2, MailDomainListOutput as f3, MailDomainUpdateInput as f4, MailDomainUpdateOutput as f5, MailDomainVerifyInput as f6, MailDomainVerifyOutput as f7, MailEmailCancelInput as f8, MailEmailCancelOutput as f9, MailTemplatePublishOutput as fA, MailTemplateUpdateInput as fB, MailTemplateUpdateOutput as fC, MailUsageGetInput as fD, MailUsageGetOutput as fE, MailWebhookCreateInput as fF, MailWebhookCreateOutput as fG, MailWebhookDeleteInput as fH, MailWebhookDeleteOutput as fI, MailWebhookDeliveriesListInput as fJ, MailWebhookDeliveriesListOutput as fK, MailWebhookGetInput as fL, MailWebhookGetOutput as fM, MailWebhookListInput as fN, MailWebhookListOutput as fO, MailWebhookUpdateInput as fP, MailWebhookUpdateOutput as fQ, MailEmailGetOutput as fR, OrganizationAuthMeInput as fS, OrganizationAuthMeOutput as fT, OrganizationBindingsListInput as fU, OrganizationBindingsListOutput as fV, OrganizationClickupInstallInput as fW, OrganizationClickupInstallOutput as fX, OrganizationClickupListInstallationsInput as fY, OrganizationClickupListInstallationsOutput as fZ, OrganizationCloudflareInstallInput as f_, MailEmailGetInput as fa, MailEmailSendBatchInput as fb, MailEmailSendBatchOutput as fc, MailEmailSendInput as fd, MailEmailSendOutput as fe, MailEmailUpdateInput as ff, MailEmailUpdateOutput as fg, MailReputationGetInput as fh, MailReputationGetOutput as fi, MailStatsGetInput as fj, MailStatsGetOutput as fk, MailSuppressionAddInput as fl, MailSuppressionAddOutput as fm, MailSuppressionListInput as fn, MailSuppressionListOutput as fo, MailSuppressionRemoveInput as fp, MailSuppressionRemoveOutput as fq, MailTemplateCreateInput as fr, MailTemplateCreateOutput as fs, MailTemplateDeleteInput as ft, MailTemplateDeleteOutput as fu, MailTemplateGetInput as fv, MailTemplateGetOutput as fw, MailTemplateListInput as fx, MailTemplateListOutput as fy, MailTemplatePublishInput as fz, BrainBackupsListInput as g, OrganizationMemberListOutput as g$, OrganizationConnectorsApproveRequestInput as g0, OrganizationConnectorsApproveRequestOutput as g1, OrganizationConnectorsAttachInput as g2, OrganizationConnectorsAttachOutput as g3, OrganizationConnectorsDeleteInput as g4, OrganizationConnectorsDeleteOutput as g5, OrganizationConnectorsDenyRequestInput as g6, OrganizationConnectorsDenyRequestOutput as g7, OrganizationConnectorsDetachInput as g8, OrganizationConnectorsDetachOutput as g9, OrganizationExtensionsListInstalledInput as gA, OrganizationExtensionsListInstalledOutput as gB, OrganizationExtensionsListInput as gC, OrganizationExtensionsListOutput as gD, OrganizationExtensionsUninstallInput as gE, OrganizationExtensionsUninstallOutput as gF, OrganizationFeedbackSubmitInput as gG, OrganizationFeedbackSubmitOutput as gH, OrganizationGdriveInstallInput as gI, OrganizationGdriveInstallOutput as gJ, OrganizationGithubInstallInput as gK, OrganizationGithubInstallOutput as gL, OrganizationGithubListInstallationsInput as gM, OrganizationGithubListInstallationsOutput as gN, OrganizationGoogleadsInstallInput as gO, OrganizationGoogleadsInstallOutput as gP, OrganizationListInput as gQ, OrganizationListOutput as gR, OrganizationMemberAcceptInviteInput as gS, OrganizationMemberAcceptInviteOutput as gT, OrganizationMemberInviteInput as gU, OrganizationMemberInviteOutput as gV, OrganizationMemberListInvitationsInput as gW, OrganizationMemberListInvitationsOutput as gX, OrganizationMemberListProductAccessInput as gY, OrganizationMemberListProductAccessOutput as gZ, OrganizationMemberListInput as g_, OrganizationConnectorsListAttachmentsInput as ga, OrganizationConnectorsListAttachmentsOutput as gb, OrganizationConnectorsListAvailableInput as gc, OrganizationConnectorsListAvailableOutput as gd, OrganizationConnectorsListOrgInput as ge, OrganizationConnectorsListOrgOutput as gf, OrganizationConnectorsListInput as gg, OrganizationConnectorsListOutput as gh, OrganizationConnectorsListRequestsInput as gi, OrganizationConnectorsListRequestsOutput as gj, OrganizationConnectorsRemoveInput as gk, OrganizationConnectorsRemoveOutput as gl, OrganizationConnectorsRequestInput as gm, OrganizationConnectorsRequestOutput as gn, OrganizationCreateInput as go, OrganizationCreateOutput as gp, OrganizationDomainsAddInput as gq, OrganizationDomainsAddOutput as gr, OrganizationDomainsGetInput as gs, OrganizationDomainsGetOutput as gt, OrganizationDomainsListInput as gu, OrganizationDomainsListOutput as gv, OrganizationDomainsRemoveInput as gw, OrganizationDomainsRemoveOutput as gx, OrganizationExtensionsInstallInput as gy, OrganizationExtensionsInstallOutput as gz, BrainBackupsListOutput as h, PlaygroundGdriveReadFileOutput as h$, OrganizationMemberRemoveInput as h0, OrganizationMemberRemoveOutput as h1, OrganizationMemberRevokeInvitationInput as h2, OrganizationMemberRevokeInvitationOutput as h3, OrganizationMemberSetRoleInput as h4, OrganizationMemberSetRoleOutput as h5, OrganizationMemberShareProductInput as h6, OrganizationMemberShareProductOutput as h7, OrganizationMemberUnshareProductInput as h8, OrganizationMemberUnshareProductOutput as h9, OrganizationRolesDeleteInput as hA, OrganizationRolesDeleteOutput as hB, OrganizationRolesGetInput as hC, OrganizationRolesGetOutput as hD, OrganizationRolesListInput as hE, OrganizationRolesListOutput as hF, OrganizationRolesUpdateInput as hG, OrganizationRolesUpdateOutput as hH, OrganizationSecurityMfaEnableInput as hI, OrganizationSecurityMfaEnableOutput as hJ, OrganizationSelectInput as hK, OrganizationSelectOutput as hL, PlaygroundAnalyticsOverviewInput as hM, PlaygroundAnalyticsOverviewOutput as hN, PlaygroundBillingEntitlementsInput as hO, PlaygroundBillingEntitlementsOutput as hP, PlaygroundBillingRecordUsageInput as hQ, PlaygroundBillingRecordUsageOutput as hR, PlaygroundClickupCreateTaskInput as hS, PlaygroundClickupCreateTaskOutput as hT, PlaygroundClickupGetLastWebhookInput as hU, PlaygroundClickupGetLastWebhookOutput as hV, PlaygroundClickupGetOverviewInput as hW, PlaygroundClickupGetOverviewOutput as hX, PlaygroundGdriveGetLastChangeInput as hY, PlaygroundGdriveGetLastChangeOutput as hZ, PlaygroundGdriveReadFileInput as h_, OrganizationMembersAssignRoleInput as ha, OrganizationMembersAssignRoleOutput as hb, OrganizationPermissionCatalogInput as hc, OrganizationPermissionCatalogOutput as hd, OrganizationProductAcceptInvitationInput as he, OrganizationProductAcceptInvitationOutput as hf, OrganizationProductCreateInput as hg, OrganizationProductCreateOutput as hh, OrganizationProductInviteInput as hi, OrganizationProductInviteOutput as hj, OrganizationProductListInvitationsInput as hk, OrganizationProductListInvitationsOutput as hl, OrganizationProductListMembersInput as hm, OrganizationProductListMembersOutput as hn, OrganizationProductListInput as ho, OrganizationProductListOutput as hp, OrganizationProductListRolesInput as hq, OrganizationProductListRolesOutput as hr, OrganizationProductRevokeInvitationInput as hs, OrganizationProductRevokeInvitationOutput as ht, OrganizationProductSelectInput as hu, OrganizationProductSelectOutput as hv, OrganizationProductUpdateInput as hw, OrganizationProductUpdateOutput as hx, OrganizationRolesCreateInput as hy, OrganizationRolesCreateOutput as hz, BrainClickupChannelsListInput as i, RealtimeWebhookGetOutput as i$, PlaygroundGoogleadsReadCustomerInput as i0, PlaygroundGoogleadsReadCustomerOutput as i1, PlaygroundLifecycleGetStateInput as i2, PlaygroundLifecycleGetStateOutput as i3, PlaygroundLifecycleListEventsInput as i4, PlaygroundLifecycleListEventsOutput as i5, PlaygroundWebhookGetLastInput as i6, PlaygroundWebhookGetLastOutput as i7, RealtimeApikeyCreateInput as i8, RealtimeApikeyCreateOutput as i9, RealtimeNamespaceGetInput as iA, RealtimeNamespaceGetOutput as iB, RealtimeNamespaceListInput as iC, RealtimeNamespaceListOutput as iD, RealtimeNamespaceUpdateInput as iE, RealtimeNamespaceUpdateOutput as iF, RealtimePresenceEnterInput as iG, RealtimePresenceEnterOutput as iH, RealtimePresenceGetInput as iI, RealtimePresenceGetOutput as iJ, RealtimePresenceLeaveInput as iK, RealtimePresenceLeaveOutput as iL, RealtimePresenceStatsInput as iM, RealtimePresenceStatsOutput as iN, RealtimePresenceUpdateInput as iO, RealtimePresenceUpdateOutput as iP, RealtimeStatusGetInput as iQ, RealtimeStatusGetOutput as iR, RealtimeTokensCreateInput as iS, RealtimeTokensCreateOutput as iT, RealtimeWebhookCreateInput as iU, RealtimeWebhookCreateOutput as iV, RealtimeWebhookDeleteInput as iW, RealtimeWebhookDeleteOutput as iX, RealtimeWebhookDeliveriesListInput as iY, RealtimeWebhookDeliveriesListOutput as iZ, RealtimeWebhookGetInput as i_, RealtimeApikeyListInput as ia, RealtimeApikeyListOutput as ib, RealtimeApikeyRevokeInput as ic, RealtimeApikeyRevokeOutput as id, RealtimeArchiveExportInput as ie, RealtimeArchiveExportOutput as ig, RealtimeArchiveExportStatusInput as ih, RealtimeArchiveExportStatusOutput as ii, RealtimeArchiveGetInput as ij, RealtimeArchiveGetOutput as ik, RealtimeGrantCreateInput as il, RealtimeGrantCreateOutput as im, RealtimeGrantListInput as io, RealtimeGrantListOutput as ip, RealtimeGrantRevokeInput as iq, RealtimeGrantRevokeOutput as ir, RealtimeHistoryGetInput as is, RealtimeHistoryGetOutput as it, RealtimeMessagesPublishInput as iu, RealtimeMessagesPublishOutput as iv, RealtimeNamespaceCreateInput as iw, RealtimeNamespaceCreateOutput as ix, RealtimeNamespaceDeleteInput as iy, RealtimeNamespaceDeleteOutput as iz, BrainClickupChannelsListOutput as j, TrackingLinkDomainsDeleteOutput as j$, RealtimeWebhookListInput as j0, RealtimeWebhookListOutput as j1, RealtimeWebhookSecretRotateInput as j2, RealtimeWebhookSecretRotateOutput as j3, RealtimeWebhookUpdateInput as j4, RealtimeWebhookUpdateOutput as j5, TrackingApiKeysCreateInput as j6, TrackingApiKeysCreateOutput as j7, TrackingApiKeysListInput as j8, TrackingApiKeysListOutput as j9, TrackingGoogleadsFeedbackConfigSetInput as jA, TrackingGoogleadsFeedbackConfigSetOutput as jB, TrackingGoogleadsFeedbackRunInput as jC, TrackingGoogleadsFeedbackRunOutput as jD, TrackingGoogleadsFeedbackStatusInput as jE, TrackingGoogleadsFeedbackStatusOutput as jF, TrackingGoogleadsFeedbackUploadsInput as jG, TrackingGoogleadsFeedbackUploadsOutput as jH, TrackingGoogleadsRoasReportInput as jI, TrackingGoogleadsRoasReportOutput as jJ, TrackingGoogleadsSyncNowInput as jK, TrackingGoogleadsSyncNowOutput as jL, TrackingGoogleadsTrackingHealthInput as jM, TrackingGoogleadsTrackingHealthOutput as jN, TrackingGoogleadsUsVsPlatformInput as jO, TrackingGoogleadsUsVsPlatformOutput as jP, TrackingIdentityHealthInput as jQ, TrackingIdentityHealthOutput as jR, TrackingInstallDomainsCreateInput as jS, TrackingInstallDomainsCreateOutput as jT, TrackingInstallDomainsDeleteInput as jU, TrackingInstallDomainsDeleteOutput as jV, TrackingInstallDomainsListInput as jW, TrackingInstallDomainsListOutput as jX, TrackingLinkDomainsCreateInput as jY, TrackingLinkDomainsCreateOutput as jZ, TrackingLinkDomainsDeleteInput as j_, TrackingApiKeysRevokeInput as ja, TrackingApiKeysRevokeOutput as jb, TrackingApiKeysRotateInput as jc, TrackingApiKeysRotateOutput as jd, TrackingDomainsCreateInput as je, TrackingDomainsCreateOutput as jf, TrackingDomainsDeleteInput as jg, TrackingDomainsDeleteOutput as jh, TrackingDomainsGetInput as ji, TrackingDomainsGetOutput as jj, TrackingDomainsListInput as jk, TrackingDomainsListOutput as jl, TrackingDomainsVerifyInput as jm, TrackingDomainsVerifyOutput as jn, TrackingEventNamesArchiveInput as jo, TrackingEventNamesArchiveOutput as jp, TrackingEventNamesListInput as jq, TrackingEventNamesListOutput as jr, TrackingEventNamesUnarchiveInput as js, TrackingEventNamesUnarchiveOutput as jt, TrackingGoogleadsConnectionStatusInput as ju, TrackingGoogleadsConnectionStatusOutput as jv, TrackingGoogleadsConversionActionsInput as jw, TrackingGoogleadsConversionActionsOutput as jx, TrackingGoogleadsFeedbackConfigGetInput as jy, TrackingGoogleadsFeedbackConfigGetOutput as jz, BrainClickupConnectionsListInput as k, UsersUsersEraseOutput as k$, TrackingLinkDomainsListInput as k0, TrackingLinkDomainsListOutput as k1, TrackingLiveEventsListInput as k2, TrackingLiveEventsListOutput as k3, TrackingProfilesDeleteInput as k4, TrackingProfilesDeleteOutput as k5, TrackingProfilesExportInput as k6, TrackingProfilesExportOutput as k7, TrackingProfilesGetInput as k8, TrackingProfilesGetOutput as k9, UsersKeysListInput as kA, UsersKeysListOutput as kB, UsersKeysRevokeInput as kC, UsersKeysRevokeOutput as kD, UsersKeysRotateInput as kE, UsersKeysRotateOutput as kF, UsersOpsRetentionGetInput as kG, UsersOpsRetentionGetOutput as kH, UsersOpsSloGetInput as kI, UsersOpsSloGetOutput as kJ, UsersSessionsGetInput as kK, UsersSessionsGetOutput as kL, UsersSessionsImpersonateInput as kM, UsersSessionsImpersonateOutput as kN, UsersSessionsListInput as kO, UsersSessionsListOutput as kP, UsersSessionsRevokeInput as kQ, UsersSessionsRevokeOutput as kR, UsersStatsGetInput as kS, UsersStatsGetOutput as kT, UsersUsersBanInput as kU, UsersUsersBanOutput as kV, UsersUsersCreateInput as kW, UsersUsersCreateOutput as kX, UsersUsersDeleteInput as kY, UsersUsersDeleteOutput as kZ, UsersUsersEraseInput as k_, TrackingProfilesListInput as ka, TrackingProfilesListOutput as kb, TrackingReportsAttributedJourneyInput as kc, TrackingReportsAttributedJourneyOutput as kd, TrackingReportsRevenueBySourceInput as ke, TrackingReportsRevenueBySourceOutput as kf, TrackingReportsSourcePeopleInput as kg, TrackingReportsSourcePeopleOutput as kh, TrackingSnippetsGetInput as ki, TrackingSnippetsGetOutput as kj, UsersApikeysCreateInput as kk, UsersApikeysCreateOutput as kl, UsersApikeysListInput as km, UsersApikeysListOutput as kn, UsersApikeysRevokeInput as ko, UsersApikeysRevokeOutput as kp, UsersAuditListInput as kq, UsersAuditListOutput as kr, UsersConfigGetInput as ks, UsersConfigGetOutput as kt, UsersConfigUpsertInput as ku, UsersConfigUpsertOutput as kv, UsersFactorsListInput as kw, UsersFactorsListOutput as kx, UsersFactorsResetInput as ky, UsersFactorsResetOutput as kz, BrainClickupConnectionsListOutput as l, UsersUsersExportInput as l0, UsersUsersExportOutput as l1, UsersUsersGetInput as l2, UsersUsersGetOutput as l3, UsersUsersImportInput as l4, UsersUsersImportOutput as l5, UsersUsersInviteInput as l6, UsersUsersInviteOutput as l7, UsersUsersListInput as l8, UsersUsersListOutput as l9, UsersWebhooksRotateSecretInput as lA, UsersWebhooksRotateSecretOutput as lB, UsersWebhooksUpdateInput as lC, UsersWebhooksUpdateOutput as lD, WaitlistConfigGetInput as lE, WaitlistConfigGetOutput as lF, WaitlistConfigUpsertInput as lG, WaitlistConfigUpsertOutput as lH, WaitlistEmbedGetInput as lI, WaitlistEmbedGetOutput as lJ, WaitlistInvitesSendInput as lK, WaitlistInvitesSendOutput as lL, WaitlistSignupsEraseInput as lM, WaitlistSignupsEraseOutput as lN, WaitlistSignupsFunnelInput as lO, WaitlistSignupsFunnelOutput as lP, WaitlistSignupsListInput as lQ, WaitlistSignupsListOutput as lR, UsersUsersSetPrimaryIdentifierInput as la, UsersUsersSetPrimaryIdentifierOutput as lb, UsersUsersUnbanInput as lc, UsersUsersUnbanOutput as ld, UsersUsersUpdateInput as le, UsersUsersUpdateOutput as lf, UsersWaitlistEraseInput as lg, UsersWaitlistEraseOutput as lh, UsersWaitlistFunnelInput as li, UsersWaitlistFunnelOutput as lj, UsersWaitlistImportInput as lk, UsersWaitlistImportOutput as ll, UsersWaitlistInviteInput as lm, UsersWaitlistInviteOutput as ln, UsersWaitlistListInput as lo, UsersWaitlistListOutput as lp, UsersWebhooksCreateInput as lq, UsersWebhooksCreateOutput as lr, UsersWebhooksDeleteInput as ls, UsersWebhooksDeleteOutput as lt, UsersWebhooksDeliveriesListInput as lu, UsersWebhooksDeliveriesListOutput as lv, UsersWebhooksGetInput as lw, UsersWebhooksGetOutput as lx, UsersWebhooksListInput as ly, UsersWebhooksListOutput as lz, BrainClickupListsListInput as m, BrainClickupListsListOutput as n, BrainClickupSpacesListInput as o, BrainClickupSpacesListOutput as p, BrainCognitionDigestInput as q, BrainCognitionDigestOutput as r, BrainCognitionStatusInput as s, BrainCognitionStatusOutput as t, BrainCognitionSweepInput as u, BrainCognitionSweepOutput as v, BrainConnectorBranchesListInput as w, BrainConnectorBranchesListOutput as x, BrainConnectorConnectionsListInput as y, BrainConnectorConnectionsListOutput as z };