@lessly/sdk-app 17.0.0 → 17.2.0

package/dist/{client.gen-DYlVp4ZF.d.cts → client.gen-C3-OM0XA.d.cts}

@@ -15172,6 +15172,2619 @@ interface TrackingSnippetsGetOutput {
     scriptUrl: string;
     minimalSnippet: string;
 }
+interface UsersApikeysCreateInput {
+    /**
+     * A label only humans read — which backend or environment holds this key.
+     */
+    name: string;
+    /**
+     * 'server' mints a SECRET key (usk_…) for the Product's backend — returned exactly once and stored hashed. 'publishable' mints a non-secret key (upk_…) that identifies this product in browser flows and stays readable.
+     */
+    type: ("server" | "publishable");
+}
+interface UsersApikeysCreateOutput {
+    id: string;
+    key: string;
+    name: string;
+    type: ("server" | "publishable");
+    value: (string | null);
+    prefix: string;
+    createdAt: string;
+    revokedAt: (string | null);
+}
+interface UsersApikeysListInput {
+}
+interface UsersApikeysListOutput {
+    keys: {
+        id: string;
+        name: string;
+        type: ("server" | "publishable");
+        value: (string | null);
+        prefix: string;
+        createdAt: string;
+        revokedAt: (string | null);
+    }[];
+}
+interface UsersApikeysRevokeInput {
+    /**
+     * Id of the key to revoke. Revocation is immediate and final.
+     */
+    id: string;
+}
+interface UsersApikeysRevokeOutput {
+    id: string;
+    revoked: true;
+}
+interface UsersAuditListInput {
+    /**
+     * Page size, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * ISO-8601 lower bound (inclusive) on the event timestamp.
+     */
+    since?: string;
+    /**
+     * ISO-8601 upper bound (exclusive) on the event timestamp.
+     */
+    until?: string;
+    /**
+     * Exact action to filter by, e.g. 'user.banned'. Omit for all actions.
+     */
+    action?: string;
+    /**
+     * Opaque cursor from a previous response's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Exact id of the audited target, e.g. a user id.
+     */
+    targetId?: string;
+    /**
+     * Target kind to filter by, e.g. 'user'.
+     */
+    targetType?: string;
+}
+interface UsersAuditListOutput {
+    events: {
+        id: string;
+        ip: (string | null);
+        action: string;
+        actorId: (string | null);
+        metadata: {
+            [k: string]: unknown;
+        };
+        targetId: (string | null);
+        actorType: ("operator" | "system" | "end_user");
+        createdAt: string;
+        productId: string;
+        userAgent: (string | null);
+        targetType: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersConfigGetInput {
+}
+interface UsersConfigGetOutput {
+    mfa: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes: number;
+    };
+    email: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds: number;
+    };
+    oauth: {
+        providers: {
+            github: UsersConfigGetOutputGoogle;
+            google: UsersConfigGetOutputGoogle;
+        };
+    };
+    hosted: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor: string;
+    };
+    invite: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes: number;
+    };
+    status: ("active" | "paused");
+    captcha: {
+        enabled: boolean;
+        siteKey: (string | null);
+        provider: "turnstile";
+        riskElevated: boolean;
+    };
+    recovery: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes: number;
+    };
+    testMode: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled: boolean;
+    };
+    waitlist: {
+        /**
+         * The embeddable widget’s copy and colours.
+         */
+        widget: {
+            /**
+             * Heading above the widget form.
+             */
+            title: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours: number;
+    };
+    productId: string;
+    retention: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    protection: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow: number;
+    };
+    signupMode: ("public" | "invite-only" | "waitlist");
+    emailChange: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours: number;
+    };
+    notifications: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged: boolean;
+    };
+    allowedOrigins: string[];
+    passwordPolicy: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase: boolean;
+    };
+    sessionTtlHours: number;
+    lifecycleBlocked: boolean;
+    lifecycleArchived: boolean;
+    refreshSlidingDays: number;
+    refreshAbsoluteDays: number;
+    redirectUriAllowlist: string[];
+    accessTokenTtlMinutes: number;
+    captchaSecretConfigured: boolean;
+}
+interface UsersConfigGetOutputGoogle {
+    enabled: boolean;
+    clientId: (string | null);
+    secretConfigured: boolean;
+}
+interface UsersConfigUpsertInput {
+    /**
+     * MFA settings: backup-code batch size, the operator-reset delay, how fresh authentication must be to enroll, and the second-factor lockout ceilings. Merged field-by-field.
+     */
+    mfa?: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required?: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount?: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours?: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes?: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts?: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts?: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes?: number;
+    };
+    /**
+     * Email OTP / magic-link settings. Merged field-by-field. Set `email.from` to a sender on a domain verified in this product's mail toolkit — until then the email strategies are not offered.
+     */
+    email?: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from?: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled?: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl?: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled?: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes?: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap?: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts?: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds?: number;
+    };
+    /**
+     * OAuth provider credentials and switches, per provider. Merged field-by-field. A provider is offered as a sign-in strategy only when it is enabled AND a full client id + secret pair resolves — from here, or from the deployment's shared development credentials.
+     */
+    oauth?: {
+        github?: UsersConfigUpsertInputGoogle;
+        /**
+         * Google sign-in credentials and switch.
+         */
+        google?: {
+            /**
+             * Offer this provider as a sign-in strategy.
+             */
+            enabled?: boolean;
+            /**
+             * The OAuth client id from the provider console. Pass null to clear it and fall back to the deployment's shared development credentials, if it has any.
+             */
+            clientId?: (string | null);
+            /**
+             * WRITE-ONLY. The OAuth client secret; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+             */
+            clientSecret?: (string | null);
+        };
+    };
+    /**
+     * The hosted sign-in / sign-up / recovery pages: whether they are served, and the product name, logo, colours and footer links they render with. Merged field-by-field, so setting one colour leaves the rest alone.
+     */
+    hosted?: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled?: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl?: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl?: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor?: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText?: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl?: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor?: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName?: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius?: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor?: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor?: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor?: string;
+    };
+    /**
+     * Invite lifetime and re-invite cooldown. Merged field-by-field.
+     */
+    invite?: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays?: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes?: number;
+    };
+    /**
+     * Captcha (Cloudflare Turnstile) settings for flow creation. Merged field-by-field.
+     */
+    captcha?: {
+        /**
+         * Require a captcha token when a flow attempt is created.
+         */
+        enabled?: boolean;
+        /**
+         * The public site key the Product renders the widget with.
+         */
+        siteKey?: (string | null);
+        /**
+         * WRITE-ONLY. The provider secret used server-side to verify tokens; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+         */
+        secretKey?: (string | null);
+        /**
+         * Demand a captcha from an identifier that is currently accumulating failed attempts, even when `enabled` is false. Default true.
+         */
+        riskElevated?: boolean;
+    };
+    /**
+     * Password-recovery settings (whether it is offered, how long a reset link lives). Merged field-by-field.
+     */
+    recovery?: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled?: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes?: number;
+    };
+    /**
+     * Test mode: whether this product may have TEST USERS — accounts that are excluded from metering, kept out of the default directory listing, never really emailed, and (when the deployment sets one) able to sign in with the fixed magic OTP. REFUSED on a production deployment. Merged field-by-field.
+     */
+    testMode?: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled?: boolean;
+    };
+    /**
+     * Waitlist settings: the double-opt-in toggle, how long a pending entry is retained before the sweep erases it, the confirmation link lifetime, and the embeddable widget’s copy and colours. Merged field-by-field, including inside `widget`.
+     */
+    waitlist?: {
+        /**
+         * The embeddable widget’s copy and colours. Merged field-by-field, so setting one line leaves the rest alone.
+         */
+        widget?: {
+            /**
+             * Heading above the widget form.
+             */
+            title?: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl?: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor?: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel?: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText?: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description?: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion?: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage?: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn?: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays?: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours?: number;
+    };
+    /**
+     * How long DEAD rows are kept before the retention sweep removes them: spent one-time tokens, expired flow attempts, expired sessions and their refresh tokens. These are grace periods on top of expiry, never lifetimes — an unswept expired row is inert. Merged field-by-field.
+     */
+    retention?: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays?: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays?: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays?: number;
+    };
+    /**
+     * Rate limits, lockout and breached-password settings. Merged field-by-field.
+     */
+    protection?: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled?: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes?: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts?: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow?: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes?: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow?: number;
+    };
+    /**
+     * How end users may join this product: 'public' (anyone), 'invite-only', or 'waitlist'. Default 'public'.
+     */
+    signupMode?: ("public" | "invite-only" | "waitlist");
+    /**
+     * Email-change settings: confirmation lifetime, the old address's revert window, the post-revert cooldown and the operator-override delay. Merged field-by-field.
+     */
+    emailChange?: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled?: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays?: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays?: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours?: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours?: number;
+    };
+    /**
+     * Which security notification emails this product sends. All on by default. Merged field-by-field.
+     */
+    notifications?: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice?: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange?: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation?: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged?: boolean;
+    };
+    /**
+     * Browser origins allowed to drive this product's end-user flows, up to 20. Scheme + host + port only, matched exactly. Replaces the whole list. Empty means "no browser origin" once this product has a publishable key.
+     *
+     * @maxItems 20
+     */
+    allowedOrigins?: [] | [string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string];
+    /**
+     * Password rules for this product. Merged field-by-field into the current policy.
+     */
+    passwordPolicy?: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength?: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber?: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol?: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase?: boolean;
+    };
+    /**
+     * End-user session lifetime in hours. Default 720 (30 days).
+     */
+    sessionTtlHours?: number;
+    /**
+     * Inactivity window of a session in days — every refresh slides it forward. Default 30.
+     */
+    refreshSlidingDays?: number;
+    /**
+     * Hard time-box of a session in days, counted from sign-in and never extended. Default 365.
+     */
+    refreshAbsoluteDays?: number;
+    /**
+     * Callback URIs the browser code handoff may deliver a one-time authorization code to, up to 20. Matched EXACTLY — no wildcards, no prefixes, no fragments — so list every callback in full. Replaces the whole list.
+     *
+     * @maxItems 20
+     */
+    redirectUriAllowlist?: [] | [string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string];
+    /**
+     * Access JWT lifetime in minutes, 5-60. Default 10. Short on purpose: a revoked session dies within one TTL.
+     */
+    accessTokenTtlMinutes?: number;
+}
+/**
+ * GitHub sign-in credentials and switch.
+ */
+interface UsersConfigUpsertInputGoogle {
+    /**
+     * Offer this provider as a sign-in strategy.
+     */
+    enabled?: boolean;
+    /**
+     * The OAuth client id from the provider console. Pass null to clear it and fall back to the deployment's shared development credentials, if it has any.
+     */
+    clientId?: (string | null);
+    /**
+     * WRITE-ONLY. The OAuth client secret; stored encrypted and never returned. Omit to leave the stored secret untouched, pass null to clear it.
+     */
+    clientSecret?: (string | null);
+}
+interface UsersConfigUpsertOutput {
+    mfa: {
+        /**
+         * Whether a second factor is MANDATORY for this product. When true, a user may not unenroll their last verified factor. Default false.
+         */
+        required: boolean;
+        /**
+         * How many single-use backup codes a batch contains. Default 10.
+         */
+        backupCodeCount: number;
+        /**
+         * Mandatory delay on an operator-initiated factor reset, in hours — the abort window the user is emailed. Default 72.
+         */
+        resetDelayHours: number;
+        /**
+         * How long a passed step-up challenge stays spendable, in minutes. The grant is SINGLE-USE regardless. Default 5.
+         */
+        stepUpGrantMinutes: number;
+        /**
+         * Wrong BACKUP codes before the account is locked, counted separately from TOTP. Default 5.
+         */
+        maxBackupCodeAttempts: number;
+        /**
+         * Wrong second-factor codes before the account is locked. Default 5.
+         */
+        maxSecondFactorAttempts: number;
+        /**
+         * How recently the caller must have authenticated to enroll or regenerate a factor, in minutes. Default 10.
+         */
+        sensitiveAuthAgeMinutes: number;
+    };
+    email: {
+        /**
+         * Sender for auth email, e.g. "Acme <auth@acme.com>". MUST be on a domain verified in this product's mail toolkit. While it is null, email_code/email_link are not offered as strategies.
+         */
+        from: (string | null);
+        /**
+         * Offer the 6-digit code strategy (email_code). Default true.
+         */
+        codeEnabled: boolean;
+        /**
+         * Base URL magic links point at, e.g. "https://public.lessly.com/{productId}/users". Null uses the deployment default.
+         */
+        linkBaseUrl: (string | null);
+        /**
+         * Offer the magic-link strategy (email_link). Default true.
+         */
+        linkEnabled: boolean;
+        /**
+         * How long an emailed code or link stays usable, in minutes. Default 15.
+         */
+        codeTtlMinutes: number;
+        /**
+         * Auth emails one address may receive per day. Default 10.
+         */
+        resendDailyCap: number;
+        /**
+         * Wrong-code entries allowed per token before it is spent. Default 5.
+         */
+        maxCodeAttempts: number;
+        /**
+         * Minimum seconds between two auth emails to one address. Floor of 60 is enforced regardless. Default 60.
+         */
+        resendCooldownSeconds: number;
+    };
+    oauth: {
+        providers: {
+            github: UsersConfigUpsertOutputGoogle;
+            google: UsersConfigUpsertOutputGoogle;
+        };
+    };
+    hosted: {
+        /**
+         * Serve the hosted sign-in, sign-up and recovery pages for this product. Default true. False answers those routes with a refusal page instead — for a product that ships its own frontend and wants no second front door.
+         */
+        enabled: boolean;
+        /**
+         * Absolute https URL of a logo rendered above the form. Null renders no logo.
+         */
+        logoUrl: (string | null);
+        /**
+         * Terms link rendered in the footer. Null renders no link.
+         */
+        termsUrl: (string | null);
+        /**
+         * CSS colour of the body text.
+         */
+        textColor: string;
+        /**
+         * One line under the card. Null renders no footer.
+         */
+        footerText: (string | null);
+        /**
+         * Privacy-policy link rendered in the footer. Null renders no link.
+         */
+        privacyUrl: (string | null);
+        /**
+         * CSS colour for the submit button, the links and the focus ring.
+         */
+        accentColor: string;
+        /**
+         * Shown in the heading and the page title. Default "This product".
+         */
+        productName: string;
+        /**
+         * CSS length for the card and its controls, e.g. "12px".
+         */
+        borderRadius: string;
+        /**
+         * CSS colour of the card itself.
+         */
+        surfaceColor: string;
+        /**
+         * CSS colour of secondary text and hints.
+         */
+        mutedTextColor: string;
+        /**
+         * CSS colour of the page behind the card.
+         */
+        backgroundColor: string;
+    };
+    invite: {
+        /**
+         * How long an invite link stays usable, in days. Default 14.
+         */
+        ttlDays: number;
+        /**
+         * Minimum minutes between two invite emails to one address. Default 60.
+         */
+        resendCooldownMinutes: number;
+    };
+    status: ("active" | "paused");
+    captcha: {
+        enabled: boolean;
+        siteKey: (string | null);
+        provider: "turnstile";
+        riskElevated: boolean;
+    };
+    recovery: {
+        /**
+         * Offer the password-recovery flow at all. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long a reset link stays usable, in minutes. Default 60.
+         */
+        ttlMinutes: number;
+    };
+    testMode: {
+        /**
+         * Opt this product into test mode. Refused outright on a production deployment — the environment gate is checked first and cannot be configured away. Turning it on is audited and raises an alert. Default false.
+         */
+        enabled: boolean;
+    };
+    waitlist: {
+        /**
+         * The embeddable widget’s copy and colours.
+         */
+        widget: {
+            /**
+             * Heading above the widget form.
+             */
+            title: string;
+            /**
+             * Link rendered beside the consent text. Null renders no link.
+             */
+            policyUrl: (string | null);
+            /**
+             * CSS colour for the button and the focus ring.
+             */
+            accentColor: string;
+            /**
+             * Submit button copy.
+             */
+            buttonLabel: string;
+            /**
+             * Consent checkbox copy. Null renders no checkbox, and the signup records the consent proof as `unspecified`.
+             */
+            consentText: (string | null);
+            /**
+             * One line under the heading.
+             */
+            description: string;
+            /**
+             * The privacy-policy version the widget records in each consent proof.
+             */
+            policyVersion: string;
+            /**
+             * Shown after a submission. ONE message for every outcome: the signup route answers identically whether or not the address was already on the list.
+             */
+            successMessage: string;
+        };
+        /**
+         * Require a confirmation email before a waitlist signup counts. Default false — the entry is created either way, but an unconfirmed one is reported separately and is never invited.
+         */
+        doubleOptIn: boolean;
+        /**
+         * How long a still-pending waitlist entry is kept before the sweep erases it. Default 365.
+         */
+        retentionDays: number;
+        /**
+         * How long a double-opt-in confirmation link stays usable, in hours. Default 48.
+         */
+        confirmTtlHours: number;
+    };
+    productId: string;
+    retention: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    protection: {
+        /**
+         * Check passwords against the HaveIBeenPwned breach corpus (k-anonymity). Blocking at sign-up, advisory at sign-in. Default true.
+         */
+        hibpEnabled: boolean;
+        /**
+         * How long an account stays locked. Self-healing — the lock expires on its own. Default 15.
+         */
+        lockoutMinutes: number;
+        /**
+         * Failed sign-ins for one identifier before the account is locked. Default 10.
+         */
+        maxFailedAttempts: number;
+        /**
+         * Flow calls allowed per IP per product per window before HTTP 429. Default 120.
+         */
+        ipAttemptsPerWindow: number;
+        /**
+         * Sliding window the failed sign-ins are counted over, in minutes. Default 15.
+         */
+        failedAttemptWindowMinutes: number;
+        /**
+         * Flow calls allowed per identifier per window before HTTP 429. Default 30.
+         */
+        identifierAttemptsPerWindow: number;
+    };
+    signupMode: ("public" | "invite-only" | "waitlist");
+    emailChange: {
+        /**
+         * Allow end users to change their email address. Default true.
+         */
+        enabled: boolean;
+        /**
+         * How long after a REVERT further email changes are refused, in days. Default 7.
+         */
+        cooldownDays: number;
+        /**
+         * How long the old address may undo the change, in days. Default 30.
+         */
+        revertTtlDays: number;
+        /**
+         * How long the two confirmation links stay usable, in hours. Default 24.
+         */
+        requestTtlHours: number;
+        /**
+         * Mandatory delay on an operator-assisted override, in hours — the abort window the old address is notified with. Default 72.
+         */
+        overrideDelayHours: number;
+    };
+    notifications: {
+        /**
+         * Email the user the first time a session appears from an unseen device. Default true.
+         */
+        newDevice: boolean;
+        /**
+         * Email the old address when an email change is requested, completed, reverted or overridden. Default true.
+         */
+        emailChange: boolean;
+        /**
+         * Email the user when an operator impersonates their account. Default true.
+         */
+        impersonation: boolean;
+        /**
+         * Email the user when their password is set or changed. Default true.
+         */
+        passwordChanged: boolean;
+    };
+    allowedOrigins: string[];
+    passwordPolicy: {
+        /**
+         * Minimum password length. Default 8.
+         */
+        minLength: number;
+        /**
+         * Require at least one digit.
+         */
+        requireNumber: boolean;
+        /**
+         * Require at least one non-alphanumeric character.
+         */
+        requireSymbol: boolean;
+        /**
+         * Require at least one uppercase letter.
+         */
+        requireUppercase: boolean;
+    };
+    sessionTtlHours: number;
+    lifecycleBlocked: boolean;
+    lifecycleArchived: boolean;
+    refreshSlidingDays: number;
+    refreshAbsoluteDays: number;
+    redirectUriAllowlist: string[];
+    accessTokenTtlMinutes: number;
+    captchaSecretConfigured: boolean;
+}
+interface UsersConfigUpsertOutputGoogle {
+    enabled: boolean;
+    clientId: (string | null);
+    secretConfigured: boolean;
+}
+interface UsersFactorsListInput {
+    /**
+     * The end user whose enrolled factors to list.
+     */
+    userId: string;
+}
+interface UsersFactorsListOutput {
+    factors: {
+        type: ("totp" | "backup_codes");
+        status: ("unverified" | "verified");
+        createdAt: string;
+        remaining: (number | null);
+        lastUsedAt: (string | null);
+        verifiedAt: (string | null);
+    }[];
+}
+interface UsersFactorsResetInput {
+    /**
+     * What identity proofing was done and under which ticket. Recorded verbatim in the audit row — this is the whole point of the tool being audited.
+     */
+    reason: string;
+    /**
+     * The end user whose second factor is being reset.
+     */
+    userId: string;
+}
+interface UsersFactorsResetOutput {
+    requestId: string;
+    scheduledFor: string;
+}
+interface UsersKeysListInput {
+}
+interface UsersKeysListOutput {
+    keys: {
+        /**
+         * The RFC 7638 JWK thumbprint — what a token header carries.
+         */
+        kid: string;
+        /**
+         * `standby` is pre-generated and not published; `current` signs; `retired` is still in JWKS for the overlap; `revoked` was evicted.
+         */
+        state: ("standby" | "current" | "retired" | "revoked");
+        createdAt: string;
+        retiredAt: (string | null);
+        revokedAt: (string | null);
+        /**
+         * When a retired key leaves JWKS. Null unless the key is retired.
+         */
+        overlapExpiresAt: (string | null);
+    }[];
+}
+interface UsersKeysRevokeInput {
+    /**
+     * The key to evict, as listed by users_keys_list.
+     */
+    kid: string;
+    /**
+     * Why. Goes into the audit row and is the only account of the incident it keeps.
+     */
+    reason?: string;
+    /**
+     * Sign every end user of this product out as well. Defaults to TRUE: a compromised signing key could have minted any of those sessions. Pass false ONLY when you know no forged token was ever issued.
+     */
+    revokeSessions?: boolean;
+}
+interface UsersKeysRevokeOutput {
+    /**
+     * The fresh key minted or promoted in its place.
+     */
+    currentKid: string;
+    revokedKid: string;
+    sessionsRevoked: number;
+}
+interface UsersKeysRotateInput {
+}
+interface UsersKeysRotateOutput {
+    /**
+     * The key signing from now on.
+     */
+    currentKid: string;
+    /**
+     * The key just retired. Null if there was none.
+     */
+    previousKid: (string | null);
+    /**
+     * When the retired key stops verifying. Both kids are in JWKS until then.
+     */
+    overlapExpiresAt: (string | null);
+}
+interface UsersOpsRetentionGetInput {
+}
+interface UsersOpsRetentionGetOutput {
+    /**
+     * The single retention job. There is exactly one — it replaced the sessions reaper and the waitlist sweep.
+     */
+    sweep: {
+        /**
+         * Its schedule, in cron syntax.
+         */
+        cron: string;
+        /**
+         * What one pass removes, in the order it removes it.
+         */
+        removes: string[];
+        /**
+         * The Synapse cron function that performs every sweep below.
+         */
+        functionId: string;
+    };
+    /**
+     * This product’s EFFECTIVE windows — what it configured, with the documented default filling anything it did not.
+     */
+    windows: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    /**
+     * The documented defaults, so a reader can tell a deliberate window from an inherited one without a second call.
+     */
+    defaults: {
+        /**
+         * How long an EXPIRED flow attempt is kept after its own expiry. Default 0 — swept as soon as it dies, which is what the reaper did before this window existed.
+         */
+        flowAttemptDays: number;
+        /**
+         * How long a SPENT or EXPIRED one-time token row (an OTP, a magic link, a recovery or abort token) is kept after it stops being usable, for forensics. The secret is a hash and the row is already dead — this only decides how long the trail lives. Default 30.
+         */
+        oneTimeTokenDays: number;
+        /**
+         * How long an EXPIRED session and its refresh tokens are kept after expiry. Zero does not shorten any lifetime: a session past either window can never be refreshed again, so the row is already inert. Default 0.
+         */
+        expiredSessionDays: number;
+    };
+    /**
+     * What this service deliberately keeps forever, and why. Reading a retention surface that lists only what IS deleted is how an operator concludes the audit log ages out — it does not.
+     */
+    notSwept: {
+        why: string;
+        what: string;
+    }[];
+    /**
+     * How long a still-PENDING waitlist entry is kept. It lives in the `waitlist` config block rather than in `retention`, because it is not a grace period on a dead row: a pending entry never expires on its own, so this window is the whole of what makes it go away — and the sweep ERASES it (audit row, `users/waitlist-entry.erased`) rather than deleting it.
+     */
+    waitlistRetentionDays: number;
+}
+interface UsersOpsSloGetInput {
+}
+interface UsersOpsSloGetOutput {
+    /**
+     * Every published objective and its verdict for this window.
+     */
+    slos: {
+        /**
+         * Stable id of the objective — the key to quote in a runbook.
+         */
+        id: string;
+        /**
+         * Short human name.
+         */
+        title: string;
+        /**
+         * `insufficient_data` is NOT `ok`: it means the window is too quiet to judge, which an operator reading a dashboard must be able to tell apart from health.
+         */
+        status: ("ok" | "breached" | "insufficient_data");
+        /**
+         * How many events went into `observed`.
+         */
+        samples: number;
+        /**
+         * What this replica sees in the CURRENT window, in the same unit as `objective`. NULL when nothing was observed.
+         */
+        observed: (number | null);
+        /**
+         * The `users/alert.raised` kind a breach of this objective fires, for wiring an alert route.
+         */
+        alertKind: string;
+        /**
+         * The published objective, as a ratio in 0..1.
+         */
+        objective: number;
+        /**
+         * Which side of `objective` is healthy: a success rate is at-least, an error rate at-most.
+         */
+        comparator: ("at-least" | "at-most");
+        /**
+         * Below this many samples the ratio is not judged at all — a quiet window is not an outage.
+         */
+        minSamples: number;
+        /**
+         * What is counted, and what is deliberately NOT counted.
+         */
+        description: string;
+        /**
+         * The window the observation is computed over.
+         */
+        windowSeconds: number;
+    }[];
+    /**
+     * These numbers come from ONE replica’s in-process window, not from the whole deployment. Treat them as a spot check, not as the fleet’s error budget.
+     */
+    scope: "replica";
+    /**
+     * The current window, exactly as the alert hook sees it.
+     */
+    window: {
+        mail: {
+            /**
+             * Auth emails handed to mail (a cooldown or daily cap never reaches this).
+             */
+            total: number;
+            /**
+             * Of those, the ones mail would not take.
+             */
+            failures: number;
+            /**
+             * failures / total. NULL when nothing was sent.
+             */
+            failureRate: (number | null);
+        };
+        signIn: {
+            /**
+             * SETTLED flow attempts — completed or failed. A pending one is neither.
+             */
+            total: number;
+            /**
+             * Of those, the ones that failed.
+             */
+            failures: number;
+            /**
+             * completed / settled. NULL, never 0, when nothing settled.
+             */
+            successRate: (number | null);
+        };
+        refresh: {
+            /**
+             * Refresh attempts.
+             */
+            total: number;
+            /**
+             * Failed refreshes, detected reuse included.
+             */
+            errors: number;
+            /**
+             * Detected token REUSE — theft, counted rather than rated.
+             */
+            reuses: number;
+            /**
+             * errors / total. NULL when nothing was refreshed.
+             */
+            errorRate: (number | null);
+        };
+        /**
+         * Length of the evaluation window.
+         */
+        windowSeconds: number;
+        /**
+         * ISO start of the window these numbers belong to.
+         */
+        windowStartedAt: string;
+        /**
+         * This product’s OWN trailing sign-in failure rate, over CLOSED windows. What the anomaly signal compares the live window against — NULL until at least one window has closed.
+         */
+        signInFailureBaseline: (number | null);
+    };
+}
+interface UsersSessionsGetInput {
+    /**
+     * The session to read.
+     */
+    sessionId: string;
+}
+interface UsersSessionsGetOutput {
+    id: string;
+    ip: (string | null);
+    /**
+     * `aal2` only if a verified second factor completed.
+     */
+    aal: ("aal1" | "aal2");
+    /**
+     * The factors this session was established with.
+     */
+    amr: string[];
+    status: ("active" | "revoked");
+    userId: string;
+    createdAt: string;
+    expiresAt: string;
+    revokedAt: (string | null);
+    userAgent: (string | null);
+    revokedReason: (string | null);
+    /**
+     * The operator behind an impersonated session, or null for an ordinary one.
+     */
+    impersonatedBy: (string | null);
+    lastRefreshedAt: (string | null);
+    absoluteExpiresAt: string;
+}
+interface UsersSessionsImpersonateInput {
+    /**
+     * Why. Recorded in the audit trail and shown to the user in the notification email — write what you would want to read in an incident review (a ticket number and one sentence).
+     */
+    reason: string;
+    /**
+     * The end user to sign in as.
+     */
+    userId: string;
+}
+interface UsersSessionsImpersonateOutput {
+    userId: string;
+    /**
+     * When the session dies. It cannot be extended or refreshed.
+     */
+    expiresAt: string;
+    /**
+     * Seconds until the access token expires.
+     */
+    expiresIn: number;
+    sessionId: string;
+    /**
+     * The access JWT of the impersonated session. There is NO refresh token.
+     */
+    accessToken: string;
+}
+interface UsersSessionsListInput {
+    /**
+     * The end user whose sessions to list.
+     */
+    userId: string;
+}
+interface UsersSessionsListOutput {
+    sessions: {
+        id: string;
+        ip: (string | null);
+        status: ("active" | "revoked");
+        userId: string;
+        createdAt: string;
+        expiresAt: string;
+        revokedAt: (string | null);
+        userAgent: (string | null);
+        lastRefreshedAt: (string | null);
+        absoluteExpiresAt: string;
+    }[];
+}
+interface UsersSessionsRevokeInput {
+    /**
+     * Revoke every session of this user.
+     */
+    userId?: string;
+    /**
+     * Revoke exactly this session.
+     */
+    sessionId?: string;
+}
+interface UsersSessionsRevokeOutput {
+    revoked: number;
+}
+interface UsersStatsGetInput {
+    /**
+     * Look-back window for the TIME-BOUNDED numbers — the sign-in counters, the abuse block and `sessions.createdInWindow`: '24h', '7d', '30d' or '90d'. Default '7d'. The user, live-session and factor populations are point-in-time and ignore it.
+     */
+    window?: ("24h" | "7d" | "30d" | "90d");
+}
+interface UsersStatsGetOutput {
+    /**
+     * Abuse signals over the window. Denied origins are deliberately absent: that check fires on unauthenticated traffic and is served by logs and metrics, not by per-product audit rows.
+     */
+    abuse: {
+        /**
+         * Accounts locked by a failed-attempt ceiling — password and second factor both.
+         */
+        lockouts: number;
+        /**
+         * The subset of `lockouts` caused by the SECOND-factor ceiling.
+         */
+        mfaLockouts: number;
+        /**
+         * Mirrors `signIns.failed`, so the abuse block reads on its own.
+         */
+        failedSignIns: number;
+        /**
+         * Breach-corpus matches against a user's password.
+         */
+        pwnedPasswordsSeen: number;
+        /**
+         * Refresh tokens spent twice outside the grace window — theft, not staleness. Each one revoked a whole session family.
+         */
+        refreshReuseDetected: number;
+    };
+    /**
+     * ISO start of that window — the `created_at` floor every counter used.
+     */
+    since: string;
+    /**
+     * Point-in-time directory populations by DERIVED status — `user` has no status column, these are computed from `waitlisted` and the ban/delete/erase timestamps.
+     */
+    users: {
+        /**
+         * Every directory row, GDPR tombstones included.
+         */
+        total: number;
+        /**
+         * Full accounts: not waitlisted, not banned, not deleted, not erased.
+         */
+        active: number;
+        /**
+         * Banned accounts that are still present.
+         */
+        banned: number;
+        /**
+         * GDPR-erased tombstones: the id survives, the PII does not.
+         */
+        erased: number;
+        /**
+         * SOFT-deleted and still recoverable — not erased.
+         */
+        deleted: number;
+        /**
+         * Waitlist signups with no credential yet.
+         */
+        waitlisted: number;
+    };
+    /**
+     * The window the time-bounded numbers were computed over.
+     */
+    window: ("24h" | "7d" | "30d" | "90d");
+    /**
+     * Enrolled second factors (TOTP and backup-code batches).
+     */
+    factors: {
+        /**
+         * VERIFIED second factors; an unverified enrollment gates nothing.
+         */
+        verified: number;
+        /**
+         * Distinct users holding at least one verified factor.
+         */
+        usersWithFactor: number;
+    };
+    /**
+     * Sign-in outcomes over the window, from the audit log.
+     */
+    signIns: {
+        /**
+         * Failed sign-in attempts in the window.
+         */
+        failed: number;
+        /**
+         * Successful sign-ins in the window.
+         */
+        succeeded: number;
+        /**
+         * succeeded / (succeeded + failed), 4 decimals. NULL — never 0 — when nothing was attempted: an idle window and a totally broken one are opposite facts.
+         */
+        successRate: (number | null);
+    };
+    /**
+     * Device sessions.
+     */
+    sessions: {
+        /**
+         * Live right now: active, unrevoked and inside BOTH the sliding and absolute expiry.
+         */
+        active: number;
+        /**
+         * Sessions established since `since`.
+         */
+        createdInWindow: number;
+    };
+}
+interface UsersUsersBanInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersBanOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersBanOutputPublicMetadata;
+    unsafeMetadata: UsersUsersBanOutputPublicMetadata;
+    privateMetadata: UsersUsersBanOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersBanOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersCreateInput {
+    /**
+     * The user's display name.
+     */
+    name?: string;
+    /**
+     * URL of the user's avatar image.
+     */
+    imageUrl?: string;
+    /**
+     * Optional credential to store for this user. Hashes only — this toolkit never accepts a plaintext password. Nothing verifies it until Phase 2.
+     */
+    password?: {
+        /**
+         * A PHC-format password hash (e.g. an argon2id string) to store as-is. Never send a plaintext password.
+         */
+        phcHash?: string;
+        /**
+         * An imported hash from another system, to be lazily rehashed on the first successful sign-in (Phase 2).
+         */
+        foreignHash?: string;
+        /**
+         * Algorithm of `foreignHash`. Required when `foreignHash` is set.
+         */
+        foreignHashAlgo?: ("bcrypt" | "argon2" | "pbkdf2" | "scrypt");
+    };
+    /**
+     * Create this user as a TEST FIXTURE: excluded from metering (it never counts toward retained-users), hidden from the default users_users_list view, never really emailed, and — when the deployment configures one — able to sign in with the fixed magic OTP. REFUSED unless this product has test mode enabled, which a production deployment cannot do. There is no way to set or clear this later. Default false.
+     */
+    testUser?: boolean;
+    /**
+     * Create the user as a waitlist signup: no way in until promoted. Default false.
+     */
+    waitlisted?: boolean;
+    /**
+     * The email addresses that reach this user. At least one is required.
+     *
+     * @minItems 1
+     */
+    identifiers: [
+        {
+            /**
+             * Identifier kind. Only 'email' exists in this phase.
+             */
+            type: "email";
+            /**
+             * The email address. Stored canonicalised (lowercase, NFC) plus raw for display.
+             */
+            value: string;
+            /**
+             * Record the identifier as already verified (use for trusted imports). Only ONE verified copy of a value may exist per product; unverified duplicates are allowed. Default false.
+             */
+            verified?: boolean;
+            /**
+             * Mark as the primary identifier of its type. The first identifier of a type defaults to primary.
+             */
+            isPrimary?: boolean;
+        },
+        ...({
+            /**
+             * Identifier kind. Only 'email' exists in this phase.
+             */
+            type: "email";
+            /**
+             * The email address. Stored canonicalised (lowercase, NFC) plus raw for display.
+             */
+            value: string;
+            /**
+             * Record the identifier as already verified (use for trusted imports). Only ONE verified copy of a value may exist per product; unverified duplicates are allowed. Default false.
+             */
+            verified?: boolean;
+            /**
+             * Mark as the primary identifier of its type. The first identifier of a type defaults to primary.
+             */
+            isPrimary?: boolean;
+        })[]
+    ];
+    /**
+     * Force a password reset before the user can sign in (use for unverifiable imported hashes). Default false.
+     */
+    requiresReset?: boolean;
+    /**
+     * Metadata the end user may READ and that may flow into the JWT. Management-plane write only.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    unsafeMetadata?: UsersUsersCreateInputPublicMetadata;
+    privateMetadata?: UsersUsersCreateInputPublicMetadata1;
+}
+/**
+ * Metadata the end user may WRITE in a later phase. Never trust it for authorization.
+ */
+interface UsersUsersCreateInputPublicMetadata {
+    [k: string]: unknown;
+}
+/**
+ * Metadata visible to the management plane only. Never exposed to the end user.
+ */
+interface UsersUsersCreateInputPublicMetadata1 {
+    [k: string]: unknown;
+}
+interface UsersUsersCreateOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersCreateOutputPublicMetadata;
+    unsafeMetadata: UsersUsersCreateOutputPublicMetadata;
+    privateMetadata: UsersUsersCreateOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersCreateOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersDeleteInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersDeleteOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersDeleteOutputPublicMetadata;
+    unsafeMetadata: UsersUsersDeleteOutputPublicMetadata;
+    privateMetadata: UsersUsersDeleteOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersDeleteOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersEraseInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersEraseOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersEraseOutputPublicMetadata;
+    unsafeMetadata: UsersUsersEraseOutputPublicMetadata;
+    privateMetadata: UsersUsersEraseOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersEraseOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersExportInput {
+    /**
+     * Rows per page, 1-500. Default 100.
+     */
+    limit?: number;
+    /**
+     * Case-insensitive substring match against the user's identifiers (email) and name.
+     */
+    query?: string;
+    /**
+     * Opaque cursor from the previous page's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by status: 'active', 'banned' or 'waitlisted'. Omit for all.
+     */
+    status?: ("active" | "banned" | "waitlisted");
+    /**
+     * Include soft-deleted users. Default false.
+     */
+    includeDeleted?: boolean;
+}
+interface UsersUsersExportOutput {
+    count: number;
+    users: {
+        id: string;
+        name: (string | null);
+        bannedAt: (string | null);
+        erasedAt: (string | null);
+        imageUrl: (string | null);
+        testUser: boolean;
+        createdAt: string;
+        deletedAt: (string | null);
+        productId: string;
+        updatedAt: string;
+        waitlisted: boolean;
+        identifiers: {
+            id: string;
+            type: "email";
+            value: string;
+            isPrimary: boolean;
+            verifiedAt: (string | null);
+            valueCanonical: string;
+            verificationStatus: ("unverified" | "verified" | "expired");
+        }[];
+        lockedUntil: (string | null);
+        lastSignInAt: (string | null);
+        requiresReset: boolean;
+        publicMetadata: UsersUsersExportOutputPublicMetadata;
+        unsafeMetadata: UsersUsersExportOutputPublicMetadata;
+        privateMetadata: UsersUsersExportOutputPublicMetadata;
+        emailChangeLockedUntil: (string | null);
+    }[];
+    exportedAt: string;
+    nextCursor: (string | null);
+}
+interface UsersUsersExportOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersGetInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersGetOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersGetOutputPublicMetadata;
+    unsafeMetadata: UsersUsersGetOutputPublicMetadata;
+    privateMetadata: UsersUsersGetOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersGetOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersImportInput {
+    /**
+     * The users to import, at most 500 per call — batch client-side beyond that. Each row: identifiers (email), optional profile, optional password HASH, optional flags.
+     *
+     * @minItems 1
+     * @maxItems 500
+     */
+    users: [unknown, ...(unknown)[]];
+}
+interface UsersUsersImportOutput {
+    failed: number;
+    created: number;
+    results: {
+        row: number;
+        reason: (string | null);
+        status: ("created" | "skipped" | "failed");
+        userId: (string | null);
+    }[];
+    skipped: number;
+    requested: number;
+}
+interface UsersUsersInviteInput {
+    /**
+     * The invitee's display name.
+     */
+    name?: string;
+    /**
+     * The address to invite. Stored canonicalised (lowercase, NFC) plus raw for display.
+     */
+    email: string;
+    /**
+     * Metadata the end user may READ and that may flow into the JWT.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    /**
+     * Metadata visible to the management plane only. Never exposed to the end user.
+     */
+    privateMetadata?: {
+        [k: string]: unknown;
+    };
+}
+interface UsersUsersInviteOutput {
+    mailed: boolean;
+    userId: string;
+    created: boolean;
+    expiresAt: string;
+}
+interface UsersUsersListInput {
+    /**
+     * Page size, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * Case-insensitive substring match against the user's identifiers (email) and name.
+     */
+    query?: string;
+    /**
+     * Opaque cursor from a previous response's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by status: 'active' (not banned, not waitlisted), 'banned', or 'waitlisted'. Omit for all.
+     */
+    status?: ("active" | "banned" | "waitlisted");
+    /**
+     * Include soft-deleted users. Default false — deleted users are hidden.
+     */
+    includeDeleted?: boolean;
+    /**
+     * Include TEST USERS. Default false: a test user is a fixture, not a customer — it is excluded from metering and from this listing for the same reason. Ask for it explicitly when you are debugging the fixtures themselves.
+     */
+    includeTestUsers?: boolean;
+    /**
+     * Include waitlist signups. Default false: a waitlisted row is somebody who ASKED to join and cannot sign in, so it is not part of the directory an operator browses. Use `status: "waitlisted"` to see only them, or `users_waitlist_list` for the funnel.
+     */
+    includeWaitlisted?: boolean;
+}
+interface UsersUsersListOutput {
+    users: {
+        id: string;
+        name: (string | null);
+        bannedAt: (string | null);
+        erasedAt: (string | null);
+        imageUrl: (string | null);
+        testUser: boolean;
+        createdAt: string;
+        deletedAt: (string | null);
+        productId: string;
+        updatedAt: string;
+        waitlisted: boolean;
+        identifiers: {
+            id: string;
+            type: "email";
+            value: string;
+            isPrimary: boolean;
+            verifiedAt: (string | null);
+            valueCanonical: string;
+            verificationStatus: ("unverified" | "verified" | "expired");
+        }[];
+        lockedUntil: (string | null);
+        lastSignInAt: (string | null);
+        requiresReset: boolean;
+        publicMetadata: UsersUsersListOutputPublicMetadata;
+        unsafeMetadata: UsersUsersListOutputPublicMetadata;
+        privateMetadata: UsersUsersListOutputPublicMetadata;
+        emailChangeLockedUntil: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersUsersListOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersSetPrimaryIdentifierInput {
+    /**
+     * The address to make primary. Must not already belong, verified, to another user of this product.
+     */
+    email: string;
+    /**
+     * What identity proofing was done and under which ticket. Recorded verbatim in the audit row — this is the whole point of the tool being audited.
+     */
+    reason: string;
+    /**
+     * The user whose primary email address is being replaced.
+     */
+    userId: string;
+}
+interface UsersUsersSetPrimaryIdentifierOutput {
+    requestId: string;
+    scheduledFor: string;
+}
+interface UsersUsersUnbanInput {
+    /**
+     * The opaque user id returned by users_users_create or _list.
+     */
+    userId: string;
+}
+interface UsersUsersUnbanOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersUnbanOutputPublicMetadata;
+    unsafeMetadata: UsersUsersUnbanOutputPublicMetadata;
+    privateMetadata: UsersUsersUnbanOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersUnbanOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersUsersUpdateInput {
+    /**
+     * The user's display name. Pass null to clear.
+     */
+    name?: (string | null);
+    /**
+     * The user to update.
+     */
+    userId: string;
+    /**
+     * URL of the user's avatar image. Pass null to clear.
+     */
+    imageUrl?: (string | null);
+    /**
+     * Whether the user is still a waitlist signup.
+     */
+    waitlisted?: boolean;
+    /**
+     * ISO-8601 timestamp of a temporary, self-healing lockout — the failed-attempt ceiling sets it and it expires on its own. Pass null to unlock the account immediately (audited as `user.unlocked`).
+     */
+    lockedUntil?: (string | null);
+    /**
+     * Whether the user must reset their password before signing in.
+     */
+    requiresReset?: boolean;
+    /**
+     * REPLACES the whole public metadata bag. Management-plane write, end-user read.
+     */
+    publicMetadata?: {
+        [k: string]: unknown;
+    };
+    unsafeMetadata?: UsersUsersUpdateInputPublicMetadata;
+    privateMetadata?: UsersUsersUpdateInputPublicMetadata1;
+}
+/**
+ * REPLACES the whole unsafe metadata bag. End-user writable in a later phase; never authoritative.
+ */
+interface UsersUsersUpdateInputPublicMetadata {
+    [k: string]: unknown;
+}
+/**
+ * REPLACES the whole private metadata bag. Management plane only.
+ */
+interface UsersUsersUpdateInputPublicMetadata1 {
+    [k: string]: unknown;
+}
+interface UsersUsersUpdateOutput {
+    id: string;
+    name: (string | null);
+    bannedAt: (string | null);
+    erasedAt: (string | null);
+    imageUrl: (string | null);
+    testUser: boolean;
+    createdAt: string;
+    deletedAt: (string | null);
+    productId: string;
+    updatedAt: string;
+    waitlisted: boolean;
+    identifiers: {
+        id: string;
+        type: "email";
+        value: string;
+        isPrimary: boolean;
+        verifiedAt: (string | null);
+        valueCanonical: string;
+        verificationStatus: ("unverified" | "verified" | "expired");
+    }[];
+    lockedUntil: (string | null);
+    lastSignInAt: (string | null);
+    requiresReset: boolean;
+    publicMetadata: UsersUsersUpdateOutputPublicMetadata;
+    unsafeMetadata: UsersUsersUpdateOutputPublicMetadata;
+    privateMetadata: UsersUsersUpdateOutputPublicMetadata;
+    emailChangeLockedUntil: (string | null);
+}
+interface UsersUsersUpdateOutputPublicMetadata {
+    [k: string]: unknown;
+}
+interface UsersWaitlistEraseInput {
+    /**
+     * The waitlisted user whose entry and directory row to erase.
+     */
+    userId: string;
+}
+interface UsersWaitlistEraseOutput {
+    erased: boolean;
+}
+interface UsersWaitlistFunnelInput {
+}
+interface UsersWaitlistFunnelOutput {
+    total: number;
+    invited: number;
+    pending: number;
+    withdrawn: number;
+    registered: number;
+    unconfirmed: number;
+}
+interface UsersWaitlistImportInput {
+    /**
+     * The legacy signups to import, at most 500 per call — batch client-side beyond that.
+     *
+     * @minItems 1
+     * @maxItems 500
+     */
+    entries: [
+        {
+            /**
+             * The signup's display name.
+             */
+            name?: string;
+            /**
+             * The consent proof from the source system. REQUIRED: a waitlist entry with no evidence of consent is exactly what this import exists to avoid creating.
+             */
+            consent: {
+                /**
+                 * The IP the source system recorded, when it recorded one.
+                 */
+                ip?: (string | null);
+                /**
+                 * Where the acceptance happened in the source system, e.g. `legacy-widget`.
+                 */
+                source: string;
+                /**
+                 * The user agent the source system recorded, when it recorded one.
+                 */
+                userAgent?: (string | null);
+                /**
+                 * When they accepted it, as recorded by the source system. Carried over verbatim — this is the evidence, and stamping it with the import time would destroy it.
+                 */
+                acceptedAt: string;
+                /**
+                 * The privacy-policy version the signer accepted in the SOURCE system.
+                 */
+                policyVersion: string;
+            };
+            /**
+             * Whether the address had proven itself reachable in the source system. Default true — a legacy list has already been mailed. Pass false to land the row as unconfirmed, where it is reported separately and is never invited.
+             */
+            confirmed?: boolean;
+            /**
+             * The email address on the legacy list. Stored canonicalised plus raw for display.
+             */
+            identifier: string;
+            /**
+             * Referrer / UTM attribution the source system recorded.
+             */
+            attribution?: {
+                /**
+                 * utm_term of the visit.
+                 */
+                utmTerm?: string;
+                /**
+                 * The document referrer of the signup page.
+                 */
+                referrer?: string;
+                /**
+                 * utm_medium of the visit.
+                 */
+                utmMedium?: string;
+                /**
+                 * utm_source of the visit.
+                 */
+                utmSource?: string;
+                /**
+                 * utm_content of the visit.
+                 */
+                utmContent?: string;
+                /**
+                 * The URL the signup was submitted from.
+                 */
+                landingPage?: string;
+                /**
+                 * utm_campaign of the visit.
+                 */
+                utmCampaign?: string;
+            };
+            /**
+             * End-user-writable metadata to carry onto the created user.
+             */
+            unsafeMetadata?: {
+                [k: string]: unknown;
+            };
+        },
+        ...({
+            /**
+             * The signup's display name.
+             */
+            name?: string;
+            /**
+             * The consent proof from the source system. REQUIRED: a waitlist entry with no evidence of consent is exactly what this import exists to avoid creating.
+             */
+            consent: {
+                /**
+                 * The IP the source system recorded, when it recorded one.
+                 */
+                ip?: (string | null);
+                /**
+                 * Where the acceptance happened in the source system, e.g. `legacy-widget`.
+                 */
+                source: string;
+                /**
+                 * The user agent the source system recorded, when it recorded one.
+                 */
+                userAgent?: (string | null);
+                /**
+                 * When they accepted it, as recorded by the source system. Carried over verbatim — this is the evidence, and stamping it with the import time would destroy it.
+                 */
+                acceptedAt: string;
+                /**
+                 * The privacy-policy version the signer accepted in the SOURCE system.
+                 */
+                policyVersion: string;
+            };
+            /**
+             * Whether the address had proven itself reachable in the source system. Default true — a legacy list has already been mailed. Pass false to land the row as unconfirmed, where it is reported separately and is never invited.
+             */
+            confirmed?: boolean;
+            /**
+             * The email address on the legacy list. Stored canonicalised plus raw for display.
+             */
+            identifier: string;
+            /**
+             * Referrer / UTM attribution the source system recorded.
+             */
+            attribution?: {
+                /**
+                 * utm_term of the visit.
+                 */
+                utmTerm?: string;
+                /**
+                 * The document referrer of the signup page.
+                 */
+                referrer?: string;
+                /**
+                 * utm_medium of the visit.
+                 */
+                utmMedium?: string;
+                /**
+                 * utm_source of the visit.
+                 */
+                utmSource?: string;
+                /**
+                 * utm_content of the visit.
+                 */
+                utmContent?: string;
+                /**
+                 * The URL the signup was submitted from.
+                 */
+                landingPage?: string;
+                /**
+                 * utm_campaign of the visit.
+                 */
+                utmCampaign?: string;
+            };
+            /**
+             * End-user-writable metadata to carry onto the created user.
+             */
+            unsafeMetadata?: {
+                [k: string]: unknown;
+            };
+        })[]
+    ];
+}
+interface UsersWaitlistImportOutput {
+    failed: number;
+    results: {
+        row: number;
+        reason: (string | null);
+        status: ("imported" | "skipped" | "failed");
+        userId: (string | null);
+    }[];
+    skipped: number;
+    imported: number;
+    requested: number;
+}
+interface UsersWaitlistInviteInput {
+    /**
+     * The waitlisted users to promote, up to 100 per call. Each gets the STANDARD invite email; accepting it is what creates their credential.
+     *
+     * @minItems 1
+     * @maxItems 100
+     */
+    userIds: [string, ...(string)[]];
+}
+interface UsersWaitlistInviteOutput {
+    invited: number;
+    results: {
+        reason: (("suppressed" | "not_found" | "already_registered") | null);
+        status: ("invited" | "skipped");
+        userId: string;
+    }[];
+    skipped: number;
+}
+interface UsersWaitlistListInput {
+    /**
+     * Entries per page, 1-100. Default 25.
+     */
+    limit?: number;
+    /**
+     * Opaque cursor from the previous page's `nextCursor`. Omit for the first page.
+     */
+    cursor?: string;
+    /**
+     * Filter by funnel status: 'pending', 'invited', 'registered' or 'withdrawn'. Omit for all.
+     */
+    status?: ("pending" | "invited" | "registered" | "withdrawn");
+    /**
+     * Double opt-in only: false returns entries whose address never confirmed. Omit for both.
+     */
+    confirmed?: boolean;
+}
+interface UsersWaitlistListOutput {
+    entries: {
+        status: ("pending" | "invited" | "registered" | "withdrawn");
+        userId: string;
+        createdAt: string;
+        invitedAt: (string | null);
+        identifier: string;
+        attribution: {
+            [k: string]: unknown;
+        };
+        confirmedAt: (string | null);
+        withdrawnAt: (string | null);
+        consentProof: {
+            [k: string]: unknown;
+        };
+        registeredAt: (string | null);
+        inviteTokenId: (string | null);
+    }[];
+    nextCursor: (string | null);
+}
+interface UsersWebhooksCreateInput {
+    /**
+     * Where deliveries are POSTed. HTTPS only, no embedded credentials.
+     */
+    url: string;
+    /**
+     * Which events to deliver. `user.created`, `user.updated` and `user.deleted` mirror the directory; `session.revoked` fires on sign-out, ban, erase and refresh-token reuse.
+     *
+     * @minItems 1
+     */
+    events: [("user.created" | "user.updated" | "user.deleted" | "session.revoked"), ...(("user.created" | "user.updated" | "user.deleted" | "session.revoked"))[]];
+    /**
+     * A label only humans read — which system this endpoint feeds.
+     */
+    description?: string;
+}
+interface UsersWebhooksCreateOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    secret: string;
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksDeleteInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksDeleteOutput {
+    id: string;
+    deleted: true;
+}
+interface UsersWebhooksDeliveriesListInput {
+    /**
+     * Id of the webhook endpoint whose deliveries to list.
+     */
+    id: string;
+    limit?: number;
+}
+interface UsersWebhooksDeliveriesListOutput {
+    deliveries: {
+        id: string;
+        status: ("pending" | "succeeded" | "failed");
+        eventId: string;
+        attempts: number;
+        createdAt: string;
+        eventType: ("user.created" | "user.updated" | "user.deleted" | "session.revoked");
+        lastError: (string | null);
+        webhookId: string;
+        lastAttemptAt: (string | null);
+        responseStatus: (number | null);
+    }[];
+}
+interface UsersWebhooksGetInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksGetOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksListInput {
+}
+interface UsersWebhooksListOutput {
+    webhooks: {
+        id: string;
+        url: string;
+        active: boolean;
+        events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+        createdAt: string;
+        updatedAt: string;
+        description: (string | null);
+        secretPrefix: string;
+    }[];
+}
+interface UsersWebhooksRotateSecretInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+}
+interface UsersWebhooksRotateSecretOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    secret: string;
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
+interface UsersWebhooksUpdateInput {
+    /**
+     * Id of the webhook endpoint.
+     */
+    id: string;
+    /**
+     * Where deliveries are POSTed. HTTPS only, no embedded credentials.
+     */
+    url?: string;
+    /**
+     * false pauses delivery without losing the endpoint or its secret.
+     */
+    active?: boolean;
+    /**
+     * Which events to deliver. `user.created`, `user.updated` and `user.deleted` mirror the directory; `session.revoked` fires on sign-out, ban, erase and refresh-token reuse.
+     *
+     * @minItems 1
+     */
+    events?: [("user.created" | "user.updated" | "user.deleted" | "session.revoked"), ...(("user.created" | "user.updated" | "user.deleted" | "session.revoked"))[]];
+    description?: (string | null);
+}
+interface UsersWebhooksUpdateOutput {
+    id: string;
+    url: string;
+    active: boolean;
+    events: ("user.created" | "user.updated" | "user.deleted" | "session.revoked")[];
+    createdAt: string;
+    updatedAt: string;
+    description: (string | null);
+    secretPrefix: string;
+}
 interface WaitlistConfigGetInput {
 }
 type WaitlistConfigGetOutput = ({
@@ -15978,6 +18591,80 @@ interface GeneratedClient {
             get(input: TrackingSnippetsGetInput): Promise<TrackingSnippetsGetOutput>;
         };
     };
+    users: {
+        apikeys: {
+            create(input: UsersApikeysCreateInput): Promise<UsersApikeysCreateOutput>;
+            list(input: UsersApikeysListInput): Promise<UsersApikeysListOutput>;
+            revoke(input: UsersApikeysRevokeInput): Promise<UsersApikeysRevokeOutput>;
+        };
+        audit: {
+            list(input: UsersAuditListInput): Promise<UsersAuditListOutput>;
+        };
+        config: {
+            get(input: UsersConfigGetInput): Promise<UsersConfigGetOutput>;
+            upsert(input: UsersConfigUpsertInput): Promise<UsersConfigUpsertOutput>;
+        };
+        factors: {
+            list(input: UsersFactorsListInput): Promise<UsersFactorsListOutput>;
+            reset(input: UsersFactorsResetInput): Promise<UsersFactorsResetOutput>;
+        };
+        keys: {
+            list(input: UsersKeysListInput): Promise<UsersKeysListOutput>;
+            revoke(input: UsersKeysRevokeInput): Promise<UsersKeysRevokeOutput>;
+            rotate(input: UsersKeysRotateInput): Promise<UsersKeysRotateOutput>;
+        };
+        'ops-retention': {
+            get(input: UsersOpsRetentionGetInput): Promise<UsersOpsRetentionGetOutput>;
+        };
+        'ops-slo': {
+            get(input: UsersOpsSloGetInput): Promise<UsersOpsSloGetOutput>;
+        };
+        sessions: {
+            get(input: UsersSessionsGetInput): Promise<UsersSessionsGetOutput>;
+            impersonate(input: UsersSessionsImpersonateInput): Promise<UsersSessionsImpersonateOutput>;
+            list(input: UsersSessionsListInput): Promise<UsersSessionsListOutput>;
+            revoke(input: UsersSessionsRevokeInput): Promise<UsersSessionsRevokeOutput>;
+        };
+        stats: {
+            get(input: UsersStatsGetInput): Promise<UsersStatsGetOutput>;
+        };
+        users: {
+            ban(input: UsersUsersBanInput): Promise<UsersUsersBanOutput>;
+            create(input: UsersUsersCreateInput): Promise<UsersUsersCreateOutput>;
+            delete(input: UsersUsersDeleteInput): Promise<UsersUsersDeleteOutput>;
+            erase(input: UsersUsersEraseInput): Promise<UsersUsersEraseOutput>;
+            export(input: UsersUsersExportInput): Promise<UsersUsersExportOutput>;
+            get(input: UsersUsersGetInput): Promise<UsersUsersGetOutput>;
+            import(input: UsersUsersImportInput): Promise<UsersUsersImportOutput>;
+            invite(input: UsersUsersInviteInput): Promise<UsersUsersInviteOutput>;
+            list(input: UsersUsersListInput): Promise<UsersUsersListOutput>;
+            unban(input: UsersUsersUnbanInput): Promise<UsersUsersUnbanOutput>;
+            update(input: UsersUsersUpdateInput): Promise<UsersUsersUpdateOutput>;
+        };
+        'users-set-primary': {
+            identifier(input: UsersUsersSetPrimaryIdentifierInput): Promise<UsersUsersSetPrimaryIdentifierOutput>;
+        };
+        waitlist: {
+            erase(input: UsersWaitlistEraseInput): Promise<UsersWaitlistEraseOutput>;
+            funnel(input: UsersWaitlistFunnelInput): Promise<UsersWaitlistFunnelOutput>;
+            import(input: UsersWaitlistImportInput): Promise<UsersWaitlistImportOutput>;
+            invite(input: UsersWaitlistInviteInput): Promise<UsersWaitlistInviteOutput>;
+            list(input: UsersWaitlistListInput): Promise<UsersWaitlistListOutput>;
+        };
+        webhooks: {
+            create(input: UsersWebhooksCreateInput): Promise<UsersWebhooksCreateOutput>;
+            delete(input: UsersWebhooksDeleteInput): Promise<UsersWebhooksDeleteOutput>;
+            get(input: UsersWebhooksGetInput): Promise<UsersWebhooksGetOutput>;
+            list(input: UsersWebhooksListInput): Promise<UsersWebhooksListOutput>;
+            update(input: UsersWebhooksUpdateInput): Promise<UsersWebhooksUpdateOutput>;
+        };
+        'webhooks-deliveries': {
+            list(input: UsersWebhooksDeliveriesListInput): Promise<UsersWebhooksDeliveriesListOutput>;
+        };
+        'webhooks-rotate': {
+            secret(input: UsersWebhooksRotateSecretInput): Promise<UsersWebhooksRotateSecretOutput>;
+        };
+    };
     waitlist: {
         config: {
             get(input: WaitlistConfigGetInput): Promise<WaitlistConfigGetOutput>;
@@ -15997,4 +18684,4 @@ interface GeneratedClient {
     };
 }
 
-export type { BrainGdriveConnectionsListInput as $, AnalyticsQueryRunInput as A, BrainBackupCreateInput as B, BrainConnectorReposListInput as C, BrainConnectorReposListOutput as D, BrainDaemonBatchStatusInput as E, BrainDaemonBatchStatusOutput as F, GeneratedClient as G, BrainDaemonCreateInput as H, BrainDaemonCreateOutput as I, BrainDaemonGetInput as J, BrainDaemonGetOutput as K, BrainDaemonReingestInput as L, BrainDaemonReingestOutput as M, BrainDaemonRemoveInput as N, BrainDaemonRemoveOutput as O, BrainDaemonRunItemsInput as P, BrainDaemonRunItemsOutput as Q, BrainDaemonRunInput as R, BrainDaemonRunOutput as S, BrainDaemonRunsInput as T, BrainDaemonRunsOutput as U, BrainDaemonStatusInput as V, BrainDaemonStatusOutput as W, BrainDaemonUpdateInput as X, BrainDaemonUpdateOutput as Y, BrainDaemonsListInput as Z, BrainDaemonsListOutput as _, AnalyticsQueryRunOutput as a, DeploymentAlertDeleteInput as a$, BrainGdriveConnectionsListOutput as a0, BrainKnowledgeEntityMemoriesInput as a1, BrainKnowledgeEntityMemoriesOutput as a2, BrainKnowledgeGraphInput as a3, BrainKnowledgeGraphOutput as a4, BrainKnowledgeNeighborhoodInput as a5, BrainKnowledgeNeighborhoodOutput as a6, BrainKnowledgeRelationsInput as a7, BrainKnowledgeRelationsOutput as a8, BrainKnowledgeSearchInput as a9, ConsentConfigFloatingIconUpsertOutput as aA, ConsentConfigThemeUpsertInput as aB, ConsentConfigThemeUpsertOutput as aC, ConsentDashboardConfigGetInput as aD, ConsentDashboardConfigGetOutput as aE, ConsentDashboardDecisionsListInput as aF, ConsentDashboardDecisionsListOutput as aG, ConsentDashboardEmbedSnippetGetInput as aH, ConsentDashboardEmbedSnippetGetOutput as aI, ConsentDashboardStatsGetInput as aJ, ConsentDashboardStatsGetOutput as aK, ConsentEmbedGetInput as aL, ConsentEmbedGetOutput as aM, ConsentProvidersCreateInput as aN, ConsentProvidersCreateOutput as aO, ConsentProvidersDeleteInput as aP, ConsentProvidersDeleteOutput as aQ, ConsentProvidersListInput as aR, ConsentProvidersListOutput as aS, ConsentProvidersUpdateInput as aT, ConsentProvidersUpdateOutput as aU, ConsentRecordsExportInput as aV, ConsentRecordsExportOutput as aW, ConsentStatsGetInput as aX, ConsentStatsGetOutput as aY, DeploymentAlertCreateInput as aZ, DeploymentAlertCreateOutput as a_, BrainKnowledgeSearchOutput as aa, BrainMemoryAddInput as ab, BrainMemoryAddOutput as ac, BrainMemoryDeleteInput as ad, BrainMemoryDeleteOutput as ae, BrainMemoryGetInput as af, BrainMemoryGetOutput as ag, BrainMemoryListInput as ah, BrainMemoryListOutput as ai, BrainMemorySearchInput as aj, BrainMemorySearchOutput as ak, BrainMemoryStatsInput as al, BrainMemoryStatsOutput as am, BrainMemoryUpdateInput as an, BrainMemoryUpdateOutput as ao, BrainProductSharedMemoryResetInput as ap, BrainProductSharedMemoryResetOutput as aq, BrainRestoreStatusInput as ar, BrainRestoreStatusOutput as as, BrainUsageReportInput as at, BrainUsageReportOutput as au, ConsentConfigCookieDomainUpsertInput as av, ConsentConfigCookieDomainUpsertOutput as aw, ConsentConfigCustomizationUpsertInput as ax, ConsentConfigCustomizationUpsertOutput as ay, ConsentConfigFloatingIconUpsertInput as az, BrainBackupCreateOutput as b, DeploymentDomainGetInput as b$, DeploymentAlertDeleteOutput as b0, DeploymentAlertEventsListInput as b1, DeploymentAlertEventsListOutput as b2, DeploymentAlertListInput as b3, DeploymentAlertListOutput as b4, DeploymentAlertUpdateInput as b5, DeploymentAlertUpdateOutput as b6, DeploymentAnalyticsQueryInput as b7, DeploymentAnalyticsQueryOutput as b8, DeploymentAuditListInput as b9, DeploymentCloudSqlInstanceBackupListOutput as bA, DeploymentCloudSqlInstanceBackupInput as bB, DeploymentCloudSqlInstanceBackupOutput as bC, DeploymentCloudSqlInstanceCreateInput as bD, DeploymentCloudSqlInstanceCreateOutput as bE, DeploymentCloudSqlInstanceDeleteInput as bF, DeploymentCloudSqlInstanceDeleteOutput as bG, DeploymentCloudSqlInstanceGetInput as bH, DeploymentCloudSqlInstanceGetOutput as bI, DeploymentCloudSqlInstanceListInput as bJ, DeploymentCloudSqlInstanceListOutput as bK, DeploymentCloudSqlInstanceResizeInput as bL, DeploymentCloudSqlInstanceResizeOutput as bM, DeploymentCloudSqlInstanceRestoreInput as bN, DeploymentCloudSqlInstanceRestoreOutput as bO, DeploymentCloudSqlLogsInput as bP, DeploymentCloudSqlLogsOutput as bQ, DeploymentDeploymentCancelInput as bR, DeploymentDeploymentCancelOutput as bS, DeploymentDeploymentGetInput as bT, DeploymentDeploymentGetOutput as bU, DeploymentDeploymentListInput as bV, DeploymentDeploymentListOutput as bW, DeploymentDomainAddInput as bX, DeploymentDomainAddOutput as bY, DeploymentDomainAllowedListInput as bZ, DeploymentDomainAllowedListOutput as b_, DeploymentAuditListOutput as ba, DeploymentBuildGetInput as bb, DeploymentBuildGetOutput as bc, DeploymentBuildListInput as bd, DeploymentBuildListOutput as be, DeploymentBuildLogsInput as bf, DeploymentBuildLogsOutput as bg, DeploymentCanvasGetInput as bh, DeploymentCanvasGetOutput as bi, DeploymentCanvasMoveNodeInput as bj, DeploymentCanvasMoveNodeOutput as bk, DeploymentCloudSqlBackfillLogFlagsInput as bl, DeploymentCloudSqlBackfillLogFlagsOutput as bm, DeploymentCloudSqlDatabaseAttachInput as bn, DeploymentCloudSqlDatabaseAttachOutput as bo, DeploymentCloudSqlDatabaseCreateInput as bp, DeploymentCloudSqlDatabaseCreateOutput as bq, DeploymentCloudSqlDatabaseDeleteInput as br, DeploymentCloudSqlDatabaseDeleteOutput as bs, DeploymentCloudSqlDatabaseDetachInput as bt, DeploymentCloudSqlDatabaseDetachOutput as bu, DeploymentCloudSqlDatabaseGetInput as bv, DeploymentCloudSqlDatabaseGetOutput as bw, DeploymentCloudSqlDatabaseListInput as bx, DeploymentCloudSqlDatabaseListOutput as by, DeploymentCloudSqlInstanceBackupListInput as bz, BrainBackupRestoreInput as c, DeploymentManagedServiceTypesInput as c$, DeploymentDomainGetOutput as c0, DeploymentDomainListByServiceInput as c1, DeploymentDomainListByServiceOutput as c2, DeploymentDomainListInput as c3, DeploymentDomainListOutput as c4, DeploymentDomainRedirectWwwInput as c5, DeploymentDomainRedirectWwwOutput as c6, DeploymentDomainRemoveInput as c7, DeploymentDomainRemoveOutput as c8, DeploymentDomainRoutesAddInput as c9, DeploymentEventsListByServiceOutput as cA, DeploymentManagedServiceBackupListInput as cB, DeploymentManagedServiceBackupListOutput as cC, DeploymentManagedServiceBackupInput as cD, DeploymentManagedServiceBackupOutput as cE, DeploymentManagedServiceConnectInfoInput as cF, DeploymentManagedServiceConnectInfoOutput as cG, DeploymentManagedServiceDeleteInput as cH, DeploymentManagedServiceDeleteOutput as cI, DeploymentManagedServiceGetInput as cJ, DeploymentManagedServiceGetOutput as cK, DeploymentManagedServiceListInput as cL, DeploymentManagedServiceListOutput as cM, DeploymentManagedServiceLogsInput as cN, DeploymentManagedServiceLogsOutput as cO, DeploymentManagedServiceProvisionInput as cP, DeploymentManagedServiceProvisionOutput as cQ, DeploymentManagedServiceReconcileInput as cR, DeploymentManagedServiceReconcileOutput as cS, DeploymentManagedServiceResizeInput as cT, DeploymentManagedServiceResizeOutput as cU, DeploymentManagedServiceRestoreInput as cV, DeploymentManagedServiceRestoreOutput as cW, DeploymentManagedServiceStartInput as cX, DeploymentManagedServiceStartOutput as cY, DeploymentManagedServiceStopInput as cZ, DeploymentManagedServiceStopOutput as c_, DeploymentDomainRoutesAddOutput as ca, DeploymentDomainRoutesListInput as cb, DeploymentDomainRoutesListOutput as cc, DeploymentDomainRoutesRemoveInput as cd, DeploymentDomainRoutesRemoveOutput as ce, DeploymentDomainRoutesUpdateInput as cf, DeploymentDomainRoutesUpdateOutput as cg, DeploymentDomainVerifyInput as ch, DeploymentDomainVerifyOutput as ci, DeploymentEnvironmentCreateInput as cj, DeploymentEnvironmentCreateOutput as ck, DeploymentEnvironmentDeleteInput as cl, DeploymentEnvironmentDeleteOutput as cm, DeploymentEnvironmentForkInput as cn, DeploymentEnvironmentForkOutput as co, DeploymentEnvironmentGetInput as cp, DeploymentEnvironmentGetOutput as cq, DeploymentEnvironmentListInput as cr, DeploymentEnvironmentListOutput as cs, DeploymentEnvironmentReconcileInput as ct, DeploymentEnvironmentReconcileOutput as cu, DeploymentEnvironmentUpdateInput as cv, DeploymentEnvironmentUpdateOutput as cw, DeploymentEventsListByEnvironmentInput as cx, DeploymentEventsListByEnvironmentOutput as cy, DeploymentEventsListByServiceInput as cz, BrainBackupRestoreOutput as d, DeploymentVariableUnsetProductOutput as d$, DeploymentManagedServiceTypesOutput as d0, DeploymentMetricsGetInput as d1, DeploymentMetricsGetOutput as d2, DeploymentPreviewEnvironmentCreateInput as d3, DeploymentPreviewEnvironmentCreateOutput as d4, DeploymentPreviewEnvironmentDeleteInput as d5, DeploymentPreviewEnvironmentDeleteOutput as d6, DeploymentPreviewEnvironmentListInput as d7, DeploymentPreviewEnvironmentListOutput as d8, DeploymentPreviewPolicyGetInput as d9, DeploymentServiceWakeInput as dA, DeploymentServiceWakeOutput as dB, DeploymentSshCommandInput as dC, DeploymentSshCommandOutput as dD, DeploymentSshKeyDeleteInput as dE, DeploymentSshKeyDeleteOutput as dF, DeploymentSshKeyListInput as dG, DeploymentSshKeyListOutput as dH, DeploymentSshKeyRegisterInput as dI, DeploymentSshKeyRegisterOutput as dJ, DeploymentVariableListEnvInput as dK, DeploymentVariableListEnvOutput as dL, DeploymentVariableListProductInput as dM, DeploymentVariableListProductOutput as dN, DeploymentVariableListInput as dO, DeploymentVariableListOutput as dP, DeploymentVariableSetEnvInput as dQ, DeploymentVariableSetEnvOutput as dR, DeploymentVariableSetInput as dS, DeploymentVariableSetOutput as dT, DeploymentVariableSetProductInput as dU, DeploymentVariableSetProductOutput as dV, DeploymentVariableUnsetEnvInput as dW, DeploymentVariableUnsetEnvOutput as dX, DeploymentVariableUnsetInput as dY, DeploymentVariableUnsetOutput as dZ, DeploymentVariableUnsetProductInput as d_, DeploymentPreviewPolicyGetOutput as da, DeploymentPreviewPolicySetInput as db, DeploymentPreviewPolicySetOutput as dc, DeploymentServiceCreateInput as dd, DeploymentServiceCreateOutput as de, DeploymentServiceDeleteInput as df, DeploymentServiceDeleteOutput as dg, DeploymentServiceExecInput as dh, DeploymentServiceExecOutput as di, DeploymentServiceGetInput as dj, DeploymentServiceGetOutput as dk, DeploymentServiceListInput as dl, DeploymentServiceListOutput as dm, DeploymentServiceLogsInput as dn, DeploymentServiceLogsOutput as dp, DeploymentServiceRedeployInput as dq, DeploymentServiceRedeployOutput as dr, DeploymentServiceRestartInput as ds, DeploymentServiceRestartOutput as dt, DeploymentServiceRollbackInput as du, DeploymentServiceRollbackOutput as dv, DeploymentServiceScaleInput as dw, DeploymentServiceScaleOutput as dx, DeploymentServiceUpdateInput as dy, DeploymentServiceUpdateOutput as dz, BrainBackupStatusInput as e, MailDomainCreateOutput as e$, DeploymentVcsBranchListInput as e0, DeploymentVcsBranchListOutput as e1, DeploymentVcsConnectionListInput as e2, DeploymentVcsConnectionListOutput as e3, DeploymentVcsRepoListInput as e4, DeploymentVcsRepoListOutput as e5, DeploymentVolumeCreateInput as e6, DeploymentVolumeCreateOutput as e7, DeploymentVolumeDeleteInput as e8, DeploymentVolumeDeleteOutput as e9, MailBroadcastCreateInput as eA, MailBroadcastCreateOutput as eB, MailBroadcastDeleteInput as eC, MailBroadcastDeleteOutput as eD, MailBroadcastGetInput as eE, MailBroadcastGetOutput as eF, MailBroadcastListInput as eG, MailBroadcastListOutput as eH, MailBroadcastQueueInput as eI, MailBroadcastQueueOutput as eJ, MailBroadcastStatsInput as eK, MailBroadcastStatsOutput as eL, MailBroadcastUpdateInput as eM, MailBroadcastUpdateOutput as eN, MailContactCreateInput as eO, MailContactCreateOutput as eP, MailContactDeleteInput as eQ, MailContactDeleteOutput as eR, MailContactGetInput as eS, MailContactGetOutput as eT, MailContactListInput as eU, MailContactListOutput as eV, MailContactUpdateInput as eW, MailContactUpdateOutput as eX, MailDomainAllowedListInput as eY, MailDomainAllowedListOutput as eZ, MailDomainCreateInput as e_, DeploymentVolumeDetachInput as ea, DeploymentVolumeDetachOutput as eb, DeploymentVolumeGetInput as ec, DeploymentVolumeGetOutput as ed, DeploymentVolumeListInput as ee, DeploymentVolumeListOutput as ef, DeploymentVolumeResizeInput as eg, DeploymentVolumeResizeOutput as eh, MailApikeyCreateInput as ei, MailApikeyCreateOutput as ej, MailApikeyDeleteInput as ek, MailApikeyDeleteOutput as el, MailApikeyListInput as em, MailApikeyListOutput as en, MailAudienceCreateInput as eo, MailAudienceCreateOutput as ep, MailAudienceDeleteInput as eq, MailAudienceDeleteOutput as er, MailAudienceGetInput as es, MailAudienceGetOutput as et, MailAudienceListInput as eu, MailAudienceListOutput as ev, MailAudienceUpdateInput as ew, MailAudienceUpdateOutput as ex, MailBroadcastCancelInput as ey, MailBroadcastCancelOutput as ez, BrainBackupStatusOutput as f, OrganizationClickupListInstallationsOutput as f$, MailDomainDeleteInput as f0, MailDomainDeleteOutput as f1, MailDomainGetInput as f2, MailDomainGetOutput as f3, MailDomainListInput as f4, MailDomainListOutput as f5, MailDomainUpdateInput as f6, MailDomainUpdateOutput as f7, MailDomainVerifyInput as f8, MailDomainVerifyOutput as f9, MailTemplateListOutput as fA, MailTemplatePublishInput as fB, MailTemplatePublishOutput as fC, MailTemplateUpdateInput as fD, MailTemplateUpdateOutput as fE, MailUsageGetInput as fF, MailUsageGetOutput as fG, MailWebhookCreateInput as fH, MailWebhookCreateOutput as fI, MailWebhookDeleteInput as fJ, MailWebhookDeleteOutput as fK, MailWebhookDeliveriesListInput as fL, MailWebhookDeliveriesListOutput as fM, MailWebhookGetInput as fN, MailWebhookGetOutput as fO, MailWebhookListInput as fP, MailWebhookListOutput as fQ, MailWebhookUpdateInput as fR, MailWebhookUpdateOutput as fS, MailEmailGetOutput as fT, OrganizationAuthMeInput as fU, OrganizationAuthMeOutput as fV, OrganizationBindingsListInput as fW, OrganizationBindingsListOutput as fX, OrganizationClickupInstallInput as fY, OrganizationClickupInstallOutput as fZ, OrganizationClickupListInstallationsInput as f_, MailEmailCancelInput as fa, MailEmailCancelOutput as fb, MailEmailGetInput as fc, MailEmailSendBatchInput as fd, MailEmailSendBatchOutput as fe, MailEmailSendInput as ff, MailEmailSendOutput as fg, MailEmailUpdateInput as fh, MailEmailUpdateOutput as fi, MailReputationGetInput as fj, MailReputationGetOutput as fk, MailStatsGetInput as fl, MailStatsGetOutput as fm, MailSuppressionAddInput as fn, MailSuppressionAddOutput as fo, MailSuppressionListInput as fp, MailSuppressionListOutput as fq, MailSuppressionRemoveInput as fr, MailSuppressionRemoveOutput as fs, MailTemplateCreateInput as ft, MailTemplateCreateOutput as fu, MailTemplateDeleteInput as fv, MailTemplateDeleteOutput as fw, MailTemplateGetInput as fx, MailTemplateGetOutput as fy, MailTemplateListInput as fz, BrainBackupsListInput as g, OrganizationMemberListProductAccessOutput as g$, OrganizationCloudflareInstallInput as g0, OrganizationCloudflareInstallOutput as g1, OrganizationConnectorsApproveRequestInput as g2, OrganizationConnectorsApproveRequestOutput as g3, OrganizationConnectorsAttachInput as g4, OrganizationConnectorsAttachOutput as g5, OrganizationConnectorsDeleteInput as g6, OrganizationConnectorsDeleteOutput as g7, OrganizationConnectorsDenyRequestInput as g8, OrganizationConnectorsDenyRequestOutput as g9, OrganizationExtensionsInstallInput as gA, OrganizationExtensionsInstallOutput as gB, OrganizationExtensionsListInstalledInput as gC, OrganizationExtensionsListInstalledOutput as gD, OrganizationExtensionsListInput as gE, OrganizationExtensionsListOutput as gF, OrganizationExtensionsUninstallInput as gG, OrganizationExtensionsUninstallOutput as gH, OrganizationFeedbackSubmitInput as gI, OrganizationFeedbackSubmitOutput as gJ, OrganizationGdriveInstallInput as gK, OrganizationGdriveInstallOutput as gL, OrganizationGithubInstallInput as gM, OrganizationGithubInstallOutput as gN, OrganizationGithubListInstallationsInput as gO, OrganizationGithubListInstallationsOutput as gP, OrganizationGoogleadsInstallInput as gQ, OrganizationGoogleadsInstallOutput as gR, OrganizationListInput as gS, OrganizationListOutput as gT, OrganizationMemberAcceptInviteInput as gU, OrganizationMemberAcceptInviteOutput as gV, OrganizationMemberInviteInput as gW, OrganizationMemberInviteOutput as gX, OrganizationMemberListInvitationsInput as gY, OrganizationMemberListInvitationsOutput as gZ, OrganizationMemberListProductAccessInput as g_, OrganizationConnectorsDetachInput as ga, OrganizationConnectorsDetachOutput as gb, OrganizationConnectorsListAttachmentsInput as gc, OrganizationConnectorsListAttachmentsOutput as gd, OrganizationConnectorsListAvailableInput as ge, OrganizationConnectorsListAvailableOutput as gf, OrganizationConnectorsListOrgInput as gg, OrganizationConnectorsListOrgOutput as gh, OrganizationConnectorsListInput as gi, OrganizationConnectorsListOutput as gj, OrganizationConnectorsListRequestsInput as gk, OrganizationConnectorsListRequestsOutput as gl, OrganizationConnectorsRemoveInput as gm, OrganizationConnectorsRemoveOutput as gn, OrganizationConnectorsRequestInput as go, OrganizationConnectorsRequestOutput as gp, OrganizationCreateInput as gq, OrganizationCreateOutput as gr, OrganizationDomainsAddInput as gs, OrganizationDomainsAddOutput as gt, OrganizationDomainsGetInput as gu, OrganizationDomainsGetOutput as gv, OrganizationDomainsListInput as gw, OrganizationDomainsListOutput as gx, OrganizationDomainsRemoveInput as gy, OrganizationDomainsRemoveOutput as gz, BrainBackupsListOutput as h, RealtimeGrantCreateOutput as h$, OrganizationMemberListInput as h0, OrganizationMemberListOutput as h1, OrganizationMemberRemoveInput as h2, OrganizationMemberRemoveOutput as h3, OrganizationMemberRevokeInvitationInput as h4, OrganizationMemberRevokeInvitationOutput as h5, OrganizationMemberSetRoleInput as h6, OrganizationMemberSetRoleOutput as h7, OrganizationMemberShareProductInput as h8, OrganizationMemberShareProductOutput as h9, OrganizationRolesCreateInput as hA, OrganizationRolesCreateOutput as hB, OrganizationRolesDeleteInput as hC, OrganizationRolesDeleteOutput as hD, OrganizationRolesGetInput as hE, OrganizationRolesGetOutput as hF, OrganizationRolesListInput as hG, OrganizationRolesListOutput as hH, OrganizationRolesUpdateInput as hI, OrganizationRolesUpdateOutput as hJ, OrganizationSecurityMfaEnableInput as hK, OrganizationSecurityMfaEnableOutput as hL, OrganizationSelectInput as hM, OrganizationSelectOutput as hN, RealtimeApikeyCreateInput as hO, RealtimeApikeyCreateOutput as hP, RealtimeApikeyListInput as hQ, RealtimeApikeyListOutput as hR, RealtimeApikeyRevokeInput as hS, RealtimeApikeyRevokeOutput as hT, RealtimeArchiveExportInput as hU, RealtimeArchiveExportOutput as hV, RealtimeArchiveExportStatusInput as hW, RealtimeArchiveExportStatusOutput as hX, RealtimeArchiveGetInput as hY, RealtimeArchiveGetOutput as hZ, RealtimeGrantCreateInput as h_, OrganizationMemberUnshareProductInput as ha, OrganizationMemberUnshareProductOutput as hb, OrganizationMembersAssignRoleInput as hc, OrganizationMembersAssignRoleOutput as hd, OrganizationPermissionCatalogInput as he, OrganizationPermissionCatalogOutput as hf, OrganizationProductAcceptInvitationInput as hg, OrganizationProductAcceptInvitationOutput as hh, OrganizationProductCreateInput as hi, OrganizationProductCreateOutput as hj, OrganizationProductInviteInput as hk, OrganizationProductInviteOutput as hl, OrganizationProductListInvitationsInput as hm, OrganizationProductListInvitationsOutput as hn, OrganizationProductListMembersInput as ho, OrganizationProductListMembersOutput as hp, OrganizationProductListInput as hq, OrganizationProductListOutput as hr, OrganizationProductListRolesInput as hs, OrganizationProductListRolesOutput as ht, OrganizationProductRevokeInvitationInput as hu, OrganizationProductRevokeInvitationOutput as hv, OrganizationProductSelectInput as hw, OrganizationProductSelectOutput as hx, OrganizationProductUpdateInput as hy, OrganizationProductUpdateOutput as hz, BrainClickupChannelsListInput as i, TrackingDomainsListOutput as i$, RealtimeGrantListInput as i0, RealtimeGrantListOutput as i1, RealtimeGrantRevokeInput as i2, RealtimeGrantRevokeOutput as i3, RealtimeHistoryGetInput as i4, RealtimeHistoryGetOutput as i5, RealtimeMessagesPublishInput as i6, RealtimeMessagesPublishOutput as i7, RealtimeNamespaceCreateInput as i8, RealtimeNamespaceCreateOutput as i9, RealtimeWebhookDeleteInput as iA, RealtimeWebhookDeleteOutput as iB, RealtimeWebhookDeliveriesListInput as iC, RealtimeWebhookDeliveriesListOutput as iD, RealtimeWebhookGetInput as iE, RealtimeWebhookGetOutput as iF, RealtimeWebhookListInput as iG, RealtimeWebhookListOutput as iH, RealtimeWebhookSecretRotateInput as iI, RealtimeWebhookSecretRotateOutput as iJ, RealtimeWebhookUpdateInput as iK, RealtimeWebhookUpdateOutput as iL, TrackingApiKeysCreateInput as iM, TrackingApiKeysCreateOutput as iN, TrackingApiKeysListInput as iO, TrackingApiKeysListOutput as iP, TrackingApiKeysRevokeInput as iQ, TrackingApiKeysRevokeOutput as iR, TrackingApiKeysRotateInput as iS, TrackingApiKeysRotateOutput as iT, TrackingDomainsCreateInput as iU, TrackingDomainsCreateOutput as iV, TrackingDomainsDeleteInput as iW, TrackingDomainsDeleteOutput as iX, TrackingDomainsGetInput as iY, TrackingDomainsGetOutput as iZ, TrackingDomainsListInput as i_, RealtimeNamespaceDeleteInput as ia, RealtimeNamespaceDeleteOutput as ib, RealtimeNamespaceGetInput as ic, RealtimeNamespaceGetOutput as id, RealtimeNamespaceListInput as ie, RealtimeNamespaceListOutput as ig, RealtimeNamespaceUpdateInput as ih, RealtimeNamespaceUpdateOutput as ii, RealtimePresenceEnterInput as ij, RealtimePresenceEnterOutput as ik, RealtimePresenceGetInput as il, RealtimePresenceGetOutput as im, RealtimePresenceLeaveInput as io, RealtimePresenceLeaveOutput as ip, RealtimePresenceStatsInput as iq, RealtimePresenceStatsOutput as ir, RealtimePresenceUpdateInput as is, RealtimePresenceUpdateOutput as it, RealtimeStatusGetInput as iu, RealtimeStatusGetOutput as iv, RealtimeTokensCreateInput as iw, RealtimeTokensCreateOutput as ix, RealtimeWebhookCreateInput as iy, RealtimeWebhookCreateOutput as iz, BrainClickupChannelsListOutput as j, WaitlistConfigGetOutput as j$, TrackingDomainsVerifyInput as j0, TrackingDomainsVerifyOutput as j1, TrackingEventNamesArchiveInput as j2, TrackingEventNamesArchiveOutput as j3, TrackingEventNamesListInput as j4, TrackingEventNamesListOutput as j5, TrackingEventNamesUnarchiveInput as j6, TrackingEventNamesUnarchiveOutput as j7, TrackingGoogleadsConnectionStatusInput as j8, TrackingGoogleadsConnectionStatusOutput as j9, TrackingInstallDomainsListInput as jA, TrackingInstallDomainsListOutput as jB, TrackingLinkDomainsCreateInput as jC, TrackingLinkDomainsCreateOutput as jD, TrackingLinkDomainsDeleteInput as jE, TrackingLinkDomainsDeleteOutput as jF, TrackingLinkDomainsListInput as jG, TrackingLinkDomainsListOutput as jH, TrackingLiveEventsListInput as jI, TrackingLiveEventsListOutput as jJ, TrackingProfilesDeleteInput as jK, TrackingProfilesDeleteOutput as jL, TrackingProfilesExportInput as jM, TrackingProfilesExportOutput as jN, TrackingProfilesGetInput as jO, TrackingProfilesGetOutput as jP, TrackingProfilesListInput as jQ, TrackingProfilesListOutput as jR, TrackingReportsAttributedJourneyInput as jS, TrackingReportsAttributedJourneyOutput as jT, TrackingReportsRevenueBySourceInput as jU, TrackingReportsRevenueBySourceOutput as jV, TrackingReportsSourcePeopleInput as jW, TrackingReportsSourcePeopleOutput as jX, TrackingSnippetsGetInput as jY, TrackingSnippetsGetOutput as jZ, WaitlistConfigGetInput as j_, TrackingGoogleadsConversionActionsInput as ja, TrackingGoogleadsConversionActionsOutput as jb, TrackingGoogleadsFeedbackConfigGetInput as jc, TrackingGoogleadsFeedbackConfigGetOutput as jd, TrackingGoogleadsFeedbackConfigSetInput as je, TrackingGoogleadsFeedbackConfigSetOutput as jf, TrackingGoogleadsFeedbackRunInput as jg, TrackingGoogleadsFeedbackRunOutput as jh, TrackingGoogleadsFeedbackStatusInput as ji, TrackingGoogleadsFeedbackStatusOutput as jj, TrackingGoogleadsFeedbackUploadsInput as jk, TrackingGoogleadsFeedbackUploadsOutput as jl, TrackingGoogleadsRoasReportInput as jm, TrackingGoogleadsRoasReportOutput as jn, TrackingGoogleadsSyncNowInput as jo, TrackingGoogleadsSyncNowOutput as jp, TrackingGoogleadsTrackingHealthInput as jq, TrackingGoogleadsTrackingHealthOutput as jr, TrackingGoogleadsUsVsPlatformInput as js, TrackingGoogleadsUsVsPlatformOutput as jt, TrackingIdentityHealthInput as ju, TrackingIdentityHealthOutput as jv, TrackingInstallDomainsCreateInput as jw, TrackingInstallDomainsCreateOutput as jx, TrackingInstallDomainsDeleteInput as jy, TrackingInstallDomainsDeleteOutput as jz, BrainClickupConnectionsListInput as k, WaitlistConfigUpsertInput as k0, WaitlistConfigUpsertOutput as k1, WaitlistEmbedGetInput as k2, WaitlistEmbedGetOutput as k3, WaitlistInvitesSendInput as k4, WaitlistInvitesSendOutput as k5, WaitlistSignupsEraseInput as k6, WaitlistSignupsEraseOutput as k7, WaitlistSignupsFunnelInput as k8, WaitlistSignupsFunnelOutput as k9, WaitlistSignupsListInput as ka, WaitlistSignupsListOutput as kb, BrainClickupConnectionsListOutput as l, BrainClickupListsListInput as m, BrainClickupListsListOutput as n, BrainClickupSpacesListInput as o, BrainClickupSpacesListOutput as p, BrainCognitionDigestInput as q, BrainCognitionDigestOutput as r, BrainCognitionStatusInput as s, BrainCognitionStatusOutput as t, BrainCognitionSweepInput as u, BrainCognitionSweepOutput as v, BrainConnectorBranchesListInput as w, BrainConnectorBranchesListOutput as x, BrainConnectorConnectionsListInput as y, BrainConnectorConnectionsListOutput as z };
+export type { BrainGdriveConnectionsListInput as $, AnalyticsQueryRunInput as A, BrainBackupCreateInput as B, BrainConnectorReposListInput as C, BrainConnectorReposListOutput as D, BrainDaemonBatchStatusInput as E, BrainDaemonBatchStatusOutput as F, GeneratedClient as G, BrainDaemonCreateInput as H, BrainDaemonCreateOutput as I, BrainDaemonGetInput as J, BrainDaemonGetOutput as K, BrainDaemonReingestInput as L, BrainDaemonReingestOutput as M, BrainDaemonRemoveInput as N, BrainDaemonRemoveOutput as O, BrainDaemonRunItemsInput as P, BrainDaemonRunItemsOutput as Q, BrainDaemonRunInput as R, BrainDaemonRunOutput as S, BrainDaemonRunsInput as T, BrainDaemonRunsOutput as U, BrainDaemonStatusInput as V, BrainDaemonStatusOutput as W, BrainDaemonUpdateInput as X, BrainDaemonUpdateOutput as Y, BrainDaemonsListInput as Z, BrainDaemonsListOutput as _, AnalyticsQueryRunOutput as a, DeploymentAlertDeleteInput as a$, BrainGdriveConnectionsListOutput as a0, BrainKnowledgeEntityMemoriesInput as a1, BrainKnowledgeEntityMemoriesOutput as a2, BrainKnowledgeGraphInput as a3, BrainKnowledgeGraphOutput as a4, BrainKnowledgeNeighborhoodInput as a5, BrainKnowledgeNeighborhoodOutput as a6, BrainKnowledgeRelationsInput as a7, BrainKnowledgeRelationsOutput as a8, BrainKnowledgeSearchInput as a9, ConsentConfigFloatingIconUpsertOutput as aA, ConsentConfigThemeUpsertInput as aB, ConsentConfigThemeUpsertOutput as aC, ConsentDashboardConfigGetInput as aD, ConsentDashboardConfigGetOutput as aE, ConsentDashboardDecisionsListInput as aF, ConsentDashboardDecisionsListOutput as aG, ConsentDashboardEmbedSnippetGetInput as aH, ConsentDashboardEmbedSnippetGetOutput as aI, ConsentDashboardStatsGetInput as aJ, ConsentDashboardStatsGetOutput as aK, ConsentEmbedGetInput as aL, ConsentEmbedGetOutput as aM, ConsentProvidersCreateInput as aN, ConsentProvidersCreateOutput as aO, ConsentProvidersDeleteInput as aP, ConsentProvidersDeleteOutput as aQ, ConsentProvidersListInput as aR, ConsentProvidersListOutput as aS, ConsentProvidersUpdateInput as aT, ConsentProvidersUpdateOutput as aU, ConsentRecordsExportInput as aV, ConsentRecordsExportOutput as aW, ConsentStatsGetInput as aX, ConsentStatsGetOutput as aY, DeploymentAlertCreateInput as aZ, DeploymentAlertCreateOutput as a_, BrainKnowledgeSearchOutput as aa, BrainMemoryAddInput as ab, BrainMemoryAddOutput as ac, BrainMemoryDeleteInput as ad, BrainMemoryDeleteOutput as ae, BrainMemoryGetInput as af, BrainMemoryGetOutput as ag, BrainMemoryListInput as ah, BrainMemoryListOutput as ai, BrainMemorySearchInput as aj, BrainMemorySearchOutput as ak, BrainMemoryStatsInput as al, BrainMemoryStatsOutput as am, BrainMemoryUpdateInput as an, BrainMemoryUpdateOutput as ao, BrainProductSharedMemoryResetInput as ap, BrainProductSharedMemoryResetOutput as aq, BrainRestoreStatusInput as ar, BrainRestoreStatusOutput as as, BrainUsageReportInput as at, BrainUsageReportOutput as au, ConsentConfigCookieDomainUpsertInput as av, ConsentConfigCookieDomainUpsertOutput as aw, ConsentConfigCustomizationUpsertInput as ax, ConsentConfigCustomizationUpsertOutput as ay, ConsentConfigFloatingIconUpsertInput as az, BrainBackupCreateOutput as b, DeploymentDomainGetInput as b$, DeploymentAlertDeleteOutput as b0, DeploymentAlertEventsListInput as b1, DeploymentAlertEventsListOutput as b2, DeploymentAlertListInput as b3, DeploymentAlertListOutput as b4, DeploymentAlertUpdateInput as b5, DeploymentAlertUpdateOutput as b6, DeploymentAnalyticsQueryInput as b7, DeploymentAnalyticsQueryOutput as b8, DeploymentAuditListInput as b9, DeploymentCloudSqlInstanceBackupListOutput as bA, DeploymentCloudSqlInstanceBackupInput as bB, DeploymentCloudSqlInstanceBackupOutput as bC, DeploymentCloudSqlInstanceCreateInput as bD, DeploymentCloudSqlInstanceCreateOutput as bE, DeploymentCloudSqlInstanceDeleteInput as bF, DeploymentCloudSqlInstanceDeleteOutput as bG, DeploymentCloudSqlInstanceGetInput as bH, DeploymentCloudSqlInstanceGetOutput as bI, DeploymentCloudSqlInstanceListInput as bJ, DeploymentCloudSqlInstanceListOutput as bK, DeploymentCloudSqlInstanceResizeInput as bL, DeploymentCloudSqlInstanceResizeOutput as bM, DeploymentCloudSqlInstanceRestoreInput as bN, DeploymentCloudSqlInstanceRestoreOutput as bO, DeploymentCloudSqlLogsInput as bP, DeploymentCloudSqlLogsOutput as bQ, DeploymentDeploymentCancelInput as bR, DeploymentDeploymentCancelOutput as bS, DeploymentDeploymentGetInput as bT, DeploymentDeploymentGetOutput as bU, DeploymentDeploymentListInput as bV, DeploymentDeploymentListOutput as bW, DeploymentDomainAddInput as bX, DeploymentDomainAddOutput as bY, DeploymentDomainAllowedListInput as bZ, DeploymentDomainAllowedListOutput as b_, DeploymentAuditListOutput as ba, DeploymentBuildGetInput as bb, DeploymentBuildGetOutput as bc, DeploymentBuildListInput as bd, DeploymentBuildListOutput as be, DeploymentBuildLogsInput as bf, DeploymentBuildLogsOutput as bg, DeploymentCanvasGetInput as bh, DeploymentCanvasGetOutput as bi, DeploymentCanvasMoveNodeInput as bj, DeploymentCanvasMoveNodeOutput as bk, DeploymentCloudSqlBackfillLogFlagsInput as bl, DeploymentCloudSqlBackfillLogFlagsOutput as bm, DeploymentCloudSqlDatabaseAttachInput as bn, DeploymentCloudSqlDatabaseAttachOutput as bo, DeploymentCloudSqlDatabaseCreateInput as bp, DeploymentCloudSqlDatabaseCreateOutput as bq, DeploymentCloudSqlDatabaseDeleteInput as br, DeploymentCloudSqlDatabaseDeleteOutput as bs, DeploymentCloudSqlDatabaseDetachInput as bt, DeploymentCloudSqlDatabaseDetachOutput as bu, DeploymentCloudSqlDatabaseGetInput as bv, DeploymentCloudSqlDatabaseGetOutput as bw, DeploymentCloudSqlDatabaseListInput as bx, DeploymentCloudSqlDatabaseListOutput as by, DeploymentCloudSqlInstanceBackupListInput as bz, BrainBackupRestoreInput as c, DeploymentManagedServiceTypesInput as c$, DeploymentDomainGetOutput as c0, DeploymentDomainListByServiceInput as c1, DeploymentDomainListByServiceOutput as c2, DeploymentDomainListInput as c3, DeploymentDomainListOutput as c4, DeploymentDomainRedirectWwwInput as c5, DeploymentDomainRedirectWwwOutput as c6, DeploymentDomainRemoveInput as c7, DeploymentDomainRemoveOutput as c8, DeploymentDomainRoutesAddInput as c9, DeploymentEventsListByServiceOutput as cA, DeploymentManagedServiceBackupListInput as cB, DeploymentManagedServiceBackupListOutput as cC, DeploymentManagedServiceBackupInput as cD, DeploymentManagedServiceBackupOutput as cE, DeploymentManagedServiceConnectInfoInput as cF, DeploymentManagedServiceConnectInfoOutput as cG, DeploymentManagedServiceDeleteInput as cH, DeploymentManagedServiceDeleteOutput as cI, DeploymentManagedServiceGetInput as cJ, DeploymentManagedServiceGetOutput as cK, DeploymentManagedServiceListInput as cL, DeploymentManagedServiceListOutput as cM, DeploymentManagedServiceLogsInput as cN, DeploymentManagedServiceLogsOutput as cO, DeploymentManagedServiceProvisionInput as cP, DeploymentManagedServiceProvisionOutput as cQ, DeploymentManagedServiceReconcileInput as cR, DeploymentManagedServiceReconcileOutput as cS, DeploymentManagedServiceResizeInput as cT, DeploymentManagedServiceResizeOutput as cU, DeploymentManagedServiceRestoreInput as cV, DeploymentManagedServiceRestoreOutput as cW, DeploymentManagedServiceStartInput as cX, DeploymentManagedServiceStartOutput as cY, DeploymentManagedServiceStopInput as cZ, DeploymentManagedServiceStopOutput as c_, DeploymentDomainRoutesAddOutput as ca, DeploymentDomainRoutesListInput as cb, DeploymentDomainRoutesListOutput as cc, DeploymentDomainRoutesRemoveInput as cd, DeploymentDomainRoutesRemoveOutput as ce, DeploymentDomainRoutesUpdateInput as cf, DeploymentDomainRoutesUpdateOutput as cg, DeploymentDomainVerifyInput as ch, DeploymentDomainVerifyOutput as ci, DeploymentEnvironmentCreateInput as cj, DeploymentEnvironmentCreateOutput as ck, DeploymentEnvironmentDeleteInput as cl, DeploymentEnvironmentDeleteOutput as cm, DeploymentEnvironmentForkInput as cn, DeploymentEnvironmentForkOutput as co, DeploymentEnvironmentGetInput as cp, DeploymentEnvironmentGetOutput as cq, DeploymentEnvironmentListInput as cr, DeploymentEnvironmentListOutput as cs, DeploymentEnvironmentReconcileInput as ct, DeploymentEnvironmentReconcileOutput as cu, DeploymentEnvironmentUpdateInput as cv, DeploymentEnvironmentUpdateOutput as cw, DeploymentEventsListByEnvironmentInput as cx, DeploymentEventsListByEnvironmentOutput as cy, DeploymentEventsListByServiceInput as cz, BrainBackupRestoreOutput as d, DeploymentVariableUnsetProductOutput as d$, DeploymentManagedServiceTypesOutput as d0, DeploymentMetricsGetInput as d1, DeploymentMetricsGetOutput as d2, DeploymentPreviewEnvironmentCreateInput as d3, DeploymentPreviewEnvironmentCreateOutput as d4, DeploymentPreviewEnvironmentDeleteInput as d5, DeploymentPreviewEnvironmentDeleteOutput as d6, DeploymentPreviewEnvironmentListInput as d7, DeploymentPreviewEnvironmentListOutput as d8, DeploymentPreviewPolicyGetInput as d9, DeploymentServiceWakeInput as dA, DeploymentServiceWakeOutput as dB, DeploymentSshCommandInput as dC, DeploymentSshCommandOutput as dD, DeploymentSshKeyDeleteInput as dE, DeploymentSshKeyDeleteOutput as dF, DeploymentSshKeyListInput as dG, DeploymentSshKeyListOutput as dH, DeploymentSshKeyRegisterInput as dI, DeploymentSshKeyRegisterOutput as dJ, DeploymentVariableListEnvInput as dK, DeploymentVariableListEnvOutput as dL, DeploymentVariableListProductInput as dM, DeploymentVariableListProductOutput as dN, DeploymentVariableListInput as dO, DeploymentVariableListOutput as dP, DeploymentVariableSetEnvInput as dQ, DeploymentVariableSetEnvOutput as dR, DeploymentVariableSetInput as dS, DeploymentVariableSetOutput as dT, DeploymentVariableSetProductInput as dU, DeploymentVariableSetProductOutput as dV, DeploymentVariableUnsetEnvInput as dW, DeploymentVariableUnsetEnvOutput as dX, DeploymentVariableUnsetInput as dY, DeploymentVariableUnsetOutput as dZ, DeploymentVariableUnsetProductInput as d_, DeploymentPreviewPolicyGetOutput as da, DeploymentPreviewPolicySetInput as db, DeploymentPreviewPolicySetOutput as dc, DeploymentServiceCreateInput as dd, DeploymentServiceCreateOutput as de, DeploymentServiceDeleteInput as df, DeploymentServiceDeleteOutput as dg, DeploymentServiceExecInput as dh, DeploymentServiceExecOutput as di, DeploymentServiceGetInput as dj, DeploymentServiceGetOutput as dk, DeploymentServiceListInput as dl, DeploymentServiceListOutput as dm, DeploymentServiceLogsInput as dn, DeploymentServiceLogsOutput as dp, DeploymentServiceRedeployInput as dq, DeploymentServiceRedeployOutput as dr, DeploymentServiceRestartInput as ds, DeploymentServiceRestartOutput as dt, DeploymentServiceRollbackInput as du, DeploymentServiceRollbackOutput as dv, DeploymentServiceScaleInput as dw, DeploymentServiceScaleOutput as dx, DeploymentServiceUpdateInput as dy, DeploymentServiceUpdateOutput as dz, BrainBackupStatusInput as e, MailDomainCreateOutput as e$, DeploymentVcsBranchListInput as e0, DeploymentVcsBranchListOutput as e1, DeploymentVcsConnectionListInput as e2, DeploymentVcsConnectionListOutput as e3, DeploymentVcsRepoListInput as e4, DeploymentVcsRepoListOutput as e5, DeploymentVolumeCreateInput as e6, DeploymentVolumeCreateOutput as e7, DeploymentVolumeDeleteInput as e8, DeploymentVolumeDeleteOutput as e9, MailBroadcastCreateInput as eA, MailBroadcastCreateOutput as eB, MailBroadcastDeleteInput as eC, MailBroadcastDeleteOutput as eD, MailBroadcastGetInput as eE, MailBroadcastGetOutput as eF, MailBroadcastListInput as eG, MailBroadcastListOutput as eH, MailBroadcastQueueInput as eI, MailBroadcastQueueOutput as eJ, MailBroadcastStatsInput as eK, MailBroadcastStatsOutput as eL, MailBroadcastUpdateInput as eM, MailBroadcastUpdateOutput as eN, MailContactCreateInput as eO, MailContactCreateOutput as eP, MailContactDeleteInput as eQ, MailContactDeleteOutput as eR, MailContactGetInput as eS, MailContactGetOutput as eT, MailContactListInput as eU, MailContactListOutput as eV, MailContactUpdateInput as eW, MailContactUpdateOutput as eX, MailDomainAllowedListInput as eY, MailDomainAllowedListOutput as eZ, MailDomainCreateInput as e_, DeploymentVolumeDetachInput as ea, DeploymentVolumeDetachOutput as eb, DeploymentVolumeGetInput as ec, DeploymentVolumeGetOutput as ed, DeploymentVolumeListInput as ee, DeploymentVolumeListOutput as ef, DeploymentVolumeResizeInput as eg, DeploymentVolumeResizeOutput as eh, MailApikeyCreateInput as ei, MailApikeyCreateOutput as ej, MailApikeyDeleteInput as ek, MailApikeyDeleteOutput as el, MailApikeyListInput as em, MailApikeyListOutput as en, MailAudienceCreateInput as eo, MailAudienceCreateOutput as ep, MailAudienceDeleteInput as eq, MailAudienceDeleteOutput as er, MailAudienceGetInput as es, MailAudienceGetOutput as et, MailAudienceListInput as eu, MailAudienceListOutput as ev, MailAudienceUpdateInput as ew, MailAudienceUpdateOutput as ex, MailBroadcastCancelInput as ey, MailBroadcastCancelOutput as ez, BrainBackupStatusOutput as f, OrganizationClickupListInstallationsOutput as f$, MailDomainDeleteInput as f0, MailDomainDeleteOutput as f1, MailDomainGetInput as f2, MailDomainGetOutput as f3, MailDomainListInput as f4, MailDomainListOutput as f5, MailDomainUpdateInput as f6, MailDomainUpdateOutput as f7, MailDomainVerifyInput as f8, MailDomainVerifyOutput as f9, MailTemplateListOutput as fA, MailTemplatePublishInput as fB, MailTemplatePublishOutput as fC, MailTemplateUpdateInput as fD, MailTemplateUpdateOutput as fE, MailUsageGetInput as fF, MailUsageGetOutput as fG, MailWebhookCreateInput as fH, MailWebhookCreateOutput as fI, MailWebhookDeleteInput as fJ, MailWebhookDeleteOutput as fK, MailWebhookDeliveriesListInput as fL, MailWebhookDeliveriesListOutput as fM, MailWebhookGetInput as fN, MailWebhookGetOutput as fO, MailWebhookListInput as fP, MailWebhookListOutput as fQ, MailWebhookUpdateInput as fR, MailWebhookUpdateOutput as fS, MailEmailGetOutput as fT, OrganizationAuthMeInput as fU, OrganizationAuthMeOutput as fV, OrganizationBindingsListInput as fW, OrganizationBindingsListOutput as fX, OrganizationClickupInstallInput as fY, OrganizationClickupInstallOutput as fZ, OrganizationClickupListInstallationsInput as f_, MailEmailCancelInput as fa, MailEmailCancelOutput as fb, MailEmailGetInput as fc, MailEmailSendBatchInput as fd, MailEmailSendBatchOutput as fe, MailEmailSendInput as ff, MailEmailSendOutput as fg, MailEmailUpdateInput as fh, MailEmailUpdateOutput as fi, MailReputationGetInput as fj, MailReputationGetOutput as fk, MailStatsGetInput as fl, MailStatsGetOutput as fm, MailSuppressionAddInput as fn, MailSuppressionAddOutput as fo, MailSuppressionListInput as fp, MailSuppressionListOutput as fq, MailSuppressionRemoveInput as fr, MailSuppressionRemoveOutput as fs, MailTemplateCreateInput as ft, MailTemplateCreateOutput as fu, MailTemplateDeleteInput as fv, MailTemplateDeleteOutput as fw, MailTemplateGetInput as fx, MailTemplateGetOutput as fy, MailTemplateListInput as fz, BrainBackupsListInput as g, OrganizationMemberListProductAccessOutput as g$, OrganizationCloudflareInstallInput as g0, OrganizationCloudflareInstallOutput as g1, OrganizationConnectorsApproveRequestInput as g2, OrganizationConnectorsApproveRequestOutput as g3, OrganizationConnectorsAttachInput as g4, OrganizationConnectorsAttachOutput as g5, OrganizationConnectorsDeleteInput as g6, OrganizationConnectorsDeleteOutput as g7, OrganizationConnectorsDenyRequestInput as g8, OrganizationConnectorsDenyRequestOutput as g9, OrganizationExtensionsInstallInput as gA, OrganizationExtensionsInstallOutput as gB, OrganizationExtensionsListInstalledInput as gC, OrganizationExtensionsListInstalledOutput as gD, OrganizationExtensionsListInput as gE, OrganizationExtensionsListOutput as gF, OrganizationExtensionsUninstallInput as gG, OrganizationExtensionsUninstallOutput as gH, OrganizationFeedbackSubmitInput as gI, OrganizationFeedbackSubmitOutput as gJ, OrganizationGdriveInstallInput as gK, OrganizationGdriveInstallOutput as gL, OrganizationGithubInstallInput as gM, OrganizationGithubInstallOutput as gN, OrganizationGithubListInstallationsInput as gO, OrganizationGithubListInstallationsOutput as gP, OrganizationGoogleadsInstallInput as gQ, OrganizationGoogleadsInstallOutput as gR, OrganizationListInput as gS, OrganizationListOutput as gT, OrganizationMemberAcceptInviteInput as gU, OrganizationMemberAcceptInviteOutput as gV, OrganizationMemberInviteInput as gW, OrganizationMemberInviteOutput as gX, OrganizationMemberListInvitationsInput as gY, OrganizationMemberListInvitationsOutput as gZ, OrganizationMemberListProductAccessInput as g_, OrganizationConnectorsDetachInput as ga, OrganizationConnectorsDetachOutput as gb, OrganizationConnectorsListAttachmentsInput as gc, OrganizationConnectorsListAttachmentsOutput as gd, OrganizationConnectorsListAvailableInput as ge, OrganizationConnectorsListAvailableOutput as gf, OrganizationConnectorsListOrgInput as gg, OrganizationConnectorsListOrgOutput as gh, OrganizationConnectorsListInput as gi, OrganizationConnectorsListOutput as gj, OrganizationConnectorsListRequestsInput as gk, OrganizationConnectorsListRequestsOutput as gl, OrganizationConnectorsRemoveInput as gm, OrganizationConnectorsRemoveOutput as gn, OrganizationConnectorsRequestInput as go, OrganizationConnectorsRequestOutput as gp, OrganizationCreateInput as gq, OrganizationCreateOutput as gr, OrganizationDomainsAddInput as gs, OrganizationDomainsAddOutput as gt, OrganizationDomainsGetInput as gu, OrganizationDomainsGetOutput as gv, OrganizationDomainsListInput as gw, OrganizationDomainsListOutput as gx, OrganizationDomainsRemoveInput as gy, OrganizationDomainsRemoveOutput as gz, BrainBackupsListOutput as h, RealtimeGrantCreateOutput as h$, OrganizationMemberListInput as h0, OrganizationMemberListOutput as h1, OrganizationMemberRemoveInput as h2, OrganizationMemberRemoveOutput as h3, OrganizationMemberRevokeInvitationInput as h4, OrganizationMemberRevokeInvitationOutput as h5, OrganizationMemberSetRoleInput as h6, OrganizationMemberSetRoleOutput as h7, OrganizationMemberShareProductInput as h8, OrganizationMemberShareProductOutput as h9, OrganizationRolesCreateInput as hA, OrganizationRolesCreateOutput as hB, OrganizationRolesDeleteInput as hC, OrganizationRolesDeleteOutput as hD, OrganizationRolesGetInput as hE, OrganizationRolesGetOutput as hF, OrganizationRolesListInput as hG, OrganizationRolesListOutput as hH, OrganizationRolesUpdateInput as hI, OrganizationRolesUpdateOutput as hJ, OrganizationSecurityMfaEnableInput as hK, OrganizationSecurityMfaEnableOutput as hL, OrganizationSelectInput as hM, OrganizationSelectOutput as hN, RealtimeApikeyCreateInput as hO, RealtimeApikeyCreateOutput as hP, RealtimeApikeyListInput as hQ, RealtimeApikeyListOutput as hR, RealtimeApikeyRevokeInput as hS, RealtimeApikeyRevokeOutput as hT, RealtimeArchiveExportInput as hU, RealtimeArchiveExportOutput as hV, RealtimeArchiveExportStatusInput as hW, RealtimeArchiveExportStatusOutput as hX, RealtimeArchiveGetInput as hY, RealtimeArchiveGetOutput as hZ, RealtimeGrantCreateInput as h_, OrganizationMemberUnshareProductInput as ha, OrganizationMemberUnshareProductOutput as hb, OrganizationMembersAssignRoleInput as hc, OrganizationMembersAssignRoleOutput as hd, OrganizationPermissionCatalogInput as he, OrganizationPermissionCatalogOutput as hf, OrganizationProductAcceptInvitationInput as hg, OrganizationProductAcceptInvitationOutput as hh, OrganizationProductCreateInput as hi, OrganizationProductCreateOutput as hj, OrganizationProductInviteInput as hk, OrganizationProductInviteOutput as hl, OrganizationProductListInvitationsInput as hm, OrganizationProductListInvitationsOutput as hn, OrganizationProductListMembersInput as ho, OrganizationProductListMembersOutput as hp, OrganizationProductListInput as hq, OrganizationProductListOutput as hr, OrganizationProductListRolesInput as hs, OrganizationProductListRolesOutput as ht, OrganizationProductRevokeInvitationInput as hu, OrganizationProductRevokeInvitationOutput as hv, OrganizationProductSelectInput as hw, OrganizationProductSelectOutput as hx, OrganizationProductUpdateInput as hy, OrganizationProductUpdateOutput as hz, BrainClickupChannelsListInput as i, TrackingDomainsListOutput as i$, RealtimeGrantListInput as i0, RealtimeGrantListOutput as i1, RealtimeGrantRevokeInput as i2, RealtimeGrantRevokeOutput as i3, RealtimeHistoryGetInput as i4, RealtimeHistoryGetOutput as i5, RealtimeMessagesPublishInput as i6, RealtimeMessagesPublishOutput as i7, RealtimeNamespaceCreateInput as i8, RealtimeNamespaceCreateOutput as i9, RealtimeWebhookDeleteInput as iA, RealtimeWebhookDeleteOutput as iB, RealtimeWebhookDeliveriesListInput as iC, RealtimeWebhookDeliveriesListOutput as iD, RealtimeWebhookGetInput as iE, RealtimeWebhookGetOutput as iF, RealtimeWebhookListInput as iG, RealtimeWebhookListOutput as iH, RealtimeWebhookSecretRotateInput as iI, RealtimeWebhookSecretRotateOutput as iJ, RealtimeWebhookUpdateInput as iK, RealtimeWebhookUpdateOutput as iL, TrackingApiKeysCreateInput as iM, TrackingApiKeysCreateOutput as iN, TrackingApiKeysListInput as iO, TrackingApiKeysListOutput as iP, TrackingApiKeysRevokeInput as iQ, TrackingApiKeysRevokeOutput as iR, TrackingApiKeysRotateInput as iS, TrackingApiKeysRotateOutput as iT, TrackingDomainsCreateInput as iU, TrackingDomainsCreateOutput as iV, TrackingDomainsDeleteInput as iW, TrackingDomainsDeleteOutput as iX, TrackingDomainsGetInput as iY, TrackingDomainsGetOutput as iZ, TrackingDomainsListInput as i_, RealtimeNamespaceDeleteInput as ia, RealtimeNamespaceDeleteOutput as ib, RealtimeNamespaceGetInput as ic, RealtimeNamespaceGetOutput as id, RealtimeNamespaceListInput as ie, RealtimeNamespaceListOutput as ig, RealtimeNamespaceUpdateInput as ih, RealtimeNamespaceUpdateOutput as ii, RealtimePresenceEnterInput as ij, RealtimePresenceEnterOutput as ik, RealtimePresenceGetInput as il, RealtimePresenceGetOutput as im, RealtimePresenceLeaveInput as io, RealtimePresenceLeaveOutput as ip, RealtimePresenceStatsInput as iq, RealtimePresenceStatsOutput as ir, RealtimePresenceUpdateInput as is, RealtimePresenceUpdateOutput as it, RealtimeStatusGetInput as iu, RealtimeStatusGetOutput as iv, RealtimeTokensCreateInput as iw, RealtimeTokensCreateOutput as ix, RealtimeWebhookCreateInput as iy, RealtimeWebhookCreateOutput as iz, BrainClickupChannelsListOutput as j, UsersApikeysCreateOutput as j$, TrackingDomainsVerifyInput as j0, TrackingDomainsVerifyOutput as j1, TrackingEventNamesArchiveInput as j2, TrackingEventNamesArchiveOutput as j3, TrackingEventNamesListInput as j4, TrackingEventNamesListOutput as j5, TrackingEventNamesUnarchiveInput as j6, TrackingEventNamesUnarchiveOutput as j7, TrackingGoogleadsConnectionStatusInput as j8, TrackingGoogleadsConnectionStatusOutput as j9, TrackingInstallDomainsListInput as jA, TrackingInstallDomainsListOutput as jB, TrackingLinkDomainsCreateInput as jC, TrackingLinkDomainsCreateOutput as jD, TrackingLinkDomainsDeleteInput as jE, TrackingLinkDomainsDeleteOutput as jF, TrackingLinkDomainsListInput as jG, TrackingLinkDomainsListOutput as jH, TrackingLiveEventsListInput as jI, TrackingLiveEventsListOutput as jJ, TrackingProfilesDeleteInput as jK, TrackingProfilesDeleteOutput as jL, TrackingProfilesExportInput as jM, TrackingProfilesExportOutput as jN, TrackingProfilesGetInput as jO, TrackingProfilesGetOutput as jP, TrackingProfilesListInput as jQ, TrackingProfilesListOutput as jR, TrackingReportsAttributedJourneyInput as jS, TrackingReportsAttributedJourneyOutput as jT, TrackingReportsRevenueBySourceInput as jU, TrackingReportsRevenueBySourceOutput as jV, TrackingReportsSourcePeopleInput as jW, TrackingReportsSourcePeopleOutput as jX, TrackingSnippetsGetInput as jY, TrackingSnippetsGetOutput as jZ, UsersApikeysCreateInput as j_, TrackingGoogleadsConversionActionsInput as ja, TrackingGoogleadsConversionActionsOutput as jb, TrackingGoogleadsFeedbackConfigGetInput as jc, TrackingGoogleadsFeedbackConfigGetOutput as jd, TrackingGoogleadsFeedbackConfigSetInput as je, TrackingGoogleadsFeedbackConfigSetOutput as jf, TrackingGoogleadsFeedbackRunInput as jg, TrackingGoogleadsFeedbackRunOutput as jh, TrackingGoogleadsFeedbackStatusInput as ji, TrackingGoogleadsFeedbackStatusOutput as jj, TrackingGoogleadsFeedbackUploadsInput as jk, TrackingGoogleadsFeedbackUploadsOutput as jl, TrackingGoogleadsRoasReportInput as jm, TrackingGoogleadsRoasReportOutput as jn, TrackingGoogleadsSyncNowInput as jo, TrackingGoogleadsSyncNowOutput as jp, TrackingGoogleadsTrackingHealthInput as jq, TrackingGoogleadsTrackingHealthOutput as jr, TrackingGoogleadsUsVsPlatformInput as js, TrackingGoogleadsUsVsPlatformOutput as jt, TrackingIdentityHealthInput as ju, TrackingIdentityHealthOutput as jv, TrackingInstallDomainsCreateInput as jw, TrackingInstallDomainsCreateOutput as jx, TrackingInstallDomainsDeleteInput as jy, TrackingInstallDomainsDeleteOutput as jz, BrainClickupConnectionsListInput as k, UsersWaitlistImportOutput as k$, UsersApikeysListInput as k0, UsersApikeysListOutput as k1, UsersApikeysRevokeInput as k2, UsersApikeysRevokeOutput as k3, UsersAuditListInput as k4, UsersAuditListOutput as k5, UsersConfigGetInput as k6, UsersConfigGetOutput as k7, UsersConfigUpsertInput as k8, UsersConfigUpsertOutput as k9, UsersUsersCreateInput as kA, UsersUsersCreateOutput as kB, UsersUsersDeleteInput as kC, UsersUsersDeleteOutput as kD, UsersUsersEraseInput as kE, UsersUsersEraseOutput as kF, UsersUsersExportInput as kG, UsersUsersExportOutput as kH, UsersUsersGetInput as kI, UsersUsersGetOutput as kJ, UsersUsersImportInput as kK, UsersUsersImportOutput as kL, UsersUsersInviteInput as kM, UsersUsersInviteOutput as kN, UsersUsersListInput as kO, UsersUsersListOutput as kP, UsersUsersSetPrimaryIdentifierInput as kQ, UsersUsersSetPrimaryIdentifierOutput as kR, UsersUsersUnbanInput as kS, UsersUsersUnbanOutput as kT, UsersUsersUpdateInput as kU, UsersUsersUpdateOutput as kV, UsersWaitlistEraseInput as kW, UsersWaitlistEraseOutput as kX, UsersWaitlistFunnelInput as kY, UsersWaitlistFunnelOutput as kZ, UsersWaitlistImportInput as k_, UsersFactorsListInput as ka, UsersFactorsListOutput as kb, UsersFactorsResetInput as kc, UsersFactorsResetOutput as kd, UsersKeysListInput as ke, UsersKeysListOutput as kf, UsersKeysRevokeInput as kg, UsersKeysRevokeOutput as kh, UsersKeysRotateInput as ki, UsersKeysRotateOutput as kj, UsersOpsRetentionGetInput as kk, UsersOpsRetentionGetOutput as kl, UsersOpsSloGetInput as km, UsersOpsSloGetOutput as kn, UsersSessionsGetInput as ko, UsersSessionsGetOutput as kp, UsersSessionsImpersonateInput as kq, UsersSessionsImpersonateOutput as kr, UsersSessionsListInput as ks, UsersSessionsListOutput as kt, UsersSessionsRevokeInput as ku, UsersSessionsRevokeOutput as kv, UsersStatsGetInput as kw, UsersStatsGetOutput as kx, UsersUsersBanInput as ky, UsersUsersBanOutput as kz, BrainClickupConnectionsListOutput as l, UsersWaitlistInviteInput as l0, UsersWaitlistInviteOutput as l1, UsersWaitlistListInput as l2, UsersWaitlistListOutput as l3, UsersWebhooksCreateInput as l4, UsersWebhooksCreateOutput as l5, UsersWebhooksDeleteInput as l6, UsersWebhooksDeleteOutput as l7, UsersWebhooksDeliveriesListInput as l8, UsersWebhooksDeliveriesListOutput as l9, UsersWebhooksGetInput as la, UsersWebhooksGetOutput as lb, UsersWebhooksListInput as lc, UsersWebhooksListOutput as ld, UsersWebhooksRotateSecretInput as le, UsersWebhooksRotateSecretOutput as lf, UsersWebhooksUpdateInput as lg, UsersWebhooksUpdateOutput as lh, WaitlistConfigGetInput as li, WaitlistConfigGetOutput as lj, WaitlistConfigUpsertInput as lk, WaitlistConfigUpsertOutput as ll, WaitlistEmbedGetInput as lm, WaitlistEmbedGetOutput as ln, WaitlistInvitesSendInput as lo, WaitlistInvitesSendOutput as lp, WaitlistSignupsEraseInput as lq, WaitlistSignupsEraseOutput as lr, WaitlistSignupsFunnelInput as ls, WaitlistSignupsFunnelOutput as lt, WaitlistSignupsListInput as lu, WaitlistSignupsListOutput as lv, BrainClickupListsListInput as m, BrainClickupListsListOutput as n, BrainClickupSpacesListInput as o, BrainClickupSpacesListOutput as p, BrainCognitionDigestInput as q, BrainCognitionDigestOutput as r, BrainCognitionStatusInput as s, BrainCognitionStatusOutput as t, BrainCognitionSweepInput as u, BrainCognitionSweepOutput as v, BrainConnectorBranchesListInput as w, BrainConnectorBranchesListOutput as x, BrainConnectorConnectionsListInput as y, BrainConnectorConnectionsListOutput as z };