@lessly/sdk-app 39.1.0 → 41.0.0

package/src/gen/types.gen.ts

@@ -1028,98 +1028,6 @@ snapshotId: string
 preRestoreSnapshotId: (string | null)
 } | null)
 
-export interface BrainUsageReportInput {
-/**
- * How many UTC days of this product's ledger to return, ending today (default 30, max 90)
- */
-days?: number
-}
-
-export interface BrainUsageReportOutput {
-note: string
-/**
- * Brain's own ledger, for THIS product only
- */
-product: {
-/**
- * Inclusive UTC end of the window (today), YYYY-MM-DD
- */
-to: string
-/**
- * The window actually used, after clamping
- */
-days: number
-/**
- * Inclusive UTC start of the window, YYYY-MM-DD
- */
-from: string
-rows: {
-/**
- * 'sync' | 'batch'; '' when the push carried none
- */
-mode: string
-/**
- * Manifest meter slug, e.g. llm-tokens
- */
-meter: string
-/**
- * Model dimension; '' when the push carried none
- */
-model: string
-/**
- * How many record() calls landed in this slice
- */
-events: number
-/**
- * Tokens we metered for this slice, delivered or not
- */
-tokens: number
-/**
- * Purpose dimension; '' when the push carried none
- */
-purpose: string
-/**
- * UTC calendar day, YYYY-MM-DD
- */
-usage_date: string
-/**
- * Of those events, how many billing did not accept
- */
-delivery_failed: number
-}[]
-/**
- * The rows rolled up per meter across the whole window
- */
-totals: {
-meter: string
-events: number
-tokens: number
-delivery_failed: number
-}[]
-product_id: string
-}
-/**
- * The platform billing aggregate for the whole ORG; null if it could not be read
- */
-platform: ({
-plan: string
-scope: "org"
-meters: {
-unit?: string
-used?: number
-limit?: (number | null)
-remaining?: (number | null)
-unlimited?: boolean
-meter_slug: string
-}[]
-org_id: string
-} | null)
-/**
- * Why the platform aggregate is null; null when it was read successfully
- */
-platform_error: (string | null)
-}
-
 export interface ConsentConfigCookieDomainUpsertInput {
 cookieDomain: ("" | null | string)
 }
@@ -1749,6 +1657,7 @@ outputDir?: string
 }
 markdown?: boolean
 })
+tracing?: string
 replicas: number
 createdAt: string
 dependsOn: string[]
@@ -2721,7 +2630,7 @@ baseEnvironmentId: (string | null)
 }
 
 export interface DeploymentEventsListByEnvironmentInput {
-type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored")
+type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.sourcemaps.uploaded" | "deployment.sourcemaps.upload-failed" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored" | "managed-service.restarted")
 limit?: number
 since?: string
 until?: string
@@ -2730,7 +2639,7 @@ environmentId: string
 
 export type DeploymentEventsListByEnvironmentOutput = {
 id: string
-type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored")
+type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.sourcemaps.uploaded" | "deployment.sourcemaps.upload-failed" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored" | "managed-service.restarted")
 payload: {
 [k: string]: unknown
 }
@@ -2743,7 +2652,7 @@ environmentId: (string | null)
 }[]
 
 export interface DeploymentEventsListByServiceInput {
-type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored")
+type?: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.sourcemaps.uploaded" | "deployment.sourcemaps.upload-failed" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored" | "managed-service.restarted")
 limit?: number
 since?: string
 until?: string
@@ -2753,7 +2662,7 @@ deploymentId?: string
 
 export type DeploymentEventsListByServiceOutput = {
 id: string
-type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored")
+type: ("deployment.queued" | "deployment.build.started" | "deployment.build.succeeded" | "deployment.build.failed" | "deployment.deploying" | "deployment.variable.ignored" | "deployment.healthcheck.passed" | "deployment.healthcheck.failed" | "deployment.healthy" | "deployment.failed" | "deployment.replaced" | "deployment.sourcemaps.uploaded" | "deployment.sourcemaps.upload-failed" | "deployment.requeue-failed" | "deployment.release.started" | "deployment.release.log" | "deployment.release.succeeded" | "deployment.release.failed" | "replica.restarted" | "service.scaled" | "service.restarted" | "service.restart-failed" | "domain.verified" | "domain.tls.issued" | "domain.tls.failed" | "domain.www-tls.issued" | "domain.www-tls.failed" | "domain.routing.active" | "domain.routing.failed" | "domain.removed" | "domain.governance.mirror-failed" | "service.slept" | "service.woke" | "service.wake_failed" | "service.sleep-enabled" | "service.sleep-disabled" | "service.sleep-enable-failed" | "cloud-sql.instance.stopped" | "cloud-sql.instance.started" | "cloud-sql.instance.stop-failed" | "cloud-sql.instance.start-failed" | "suspension.workload-stopped" | "suspension.workload-restored" | "managed-service.restarted")
 payload: {
 [k: string]: unknown
 }
@@ -3247,6 +3156,10 @@ outputDir?: string
 }
 markdown?: boolean
 })
+/**
+ * OTel SDK to inject into this service's pods: 'off' (none), 'node' or 'python'. Read when a deploy builds the workload — takes effect on the next deploy, running pods are untouched.
+ */
+tracing?: ("off" | "node" | "python")
 replicas?: number
 resources?: {
 limits?: {
@@ -3302,6 +3215,7 @@ outputDir?: string
 }
 markdown?: boolean
 })
+tracing?: string
 replicas: number
 createdAt: string
 dependsOn: string[]
@@ -3407,6 +3321,7 @@ outputDir?: string
 }
 markdown?: boolean
 })
+tracing?: string
 replicas: number
 createdAt: string
 dependsOn: string[]
@@ -3479,6 +3394,7 @@ outputDir?: string
 }
 markdown?: boolean
 })
+tracing?: string
 replicas: number
 createdAt: string
 dependsOn: string[]
@@ -3628,6 +3544,7 @@ outputDir?: string
 }
 markdown?: boolean
 })
+tracing?: string
 replicas: number
 createdAt: string
 dependsOn: string[]
@@ -3695,6 +3612,10 @@ outputDir?: string
 }
 markdown?: boolean
 })
+/**
+ * OTel SDK to inject into this service's pods: 'off' (none), 'node' or 'python'. Read when a deploy builds the workload — takes effect on the next deploy, running pods are untouched.
+ */
+tracing?: ("off" | "node" | "python")
 replicas?: number
 resources?: {
 limits?: {
@@ -3752,6 +3673,7 @@ outputDir?: string
 }
 markdown?: boolean
 })
+tracing?: string
 replicas: number
 createdAt: string
 dependsOn: string[]
@@ -15039,6 +14961,7 @@ displayName: (string | null)
 orgRoles: {
 id: string
 name: string
+description: (string | null)
 }[]
 canManage: boolean
 inherited: {
@@ -15435,6 +15358,226 @@ lastMessagePreview: (string | null)
 }[]
 }
 
+export interface PlaygroundAnalyticsOverviewInput {
+/**
+ * Max records per entity in recent[]; omit for the endpoint default
+ */
+limit?: number
+}
+
+export interface PlaygroundAnalyticsOverviewOutput {
+ok: boolean
+minted: boolean
+overview?: unknown
+http_status: number
+}
+
+export interface PlaygroundBillingEntitlementsInput {
+
+}
+
+export interface PlaygroundBillingEntitlementsOutput {
+ok: boolean
+minted: boolean
+http_status: number
+entitlements?: unknown
+}
+
+export interface PlaygroundBillingRecordUsageInput {
+/**
+ * Quantity of events to record against playground-events (SUM); defaults to 1
+ */
+value?: number
+}
+
+export interface PlaygroundBillingRecordUsageOutput {
+minted: boolean
+accepted: (number | null)
+recorded: boolean
+duplicates: (number | null)
+http_status: number
+}
+
+export interface PlaygroundClickupCreateTaskInput {
+/**
+ * Task title; defaults to a fixture label
+ */
+name?: string
+/**
+ * ClickUp list id; falls back to CLICKUP_TEST_LIST_ID
+ */
+listId?: string
+}
+
+export interface PlaygroundClickupCreateTaskOutput {
+minted: boolean
+task_id: (string | null)
+list_status: number
+vend_status: number
+clickup_status: number
+installation_count: number
+}
+
+export interface PlaygroundClickupGetLastWebhookInput {
+
+}
+
+export type PlaygroundClickupGetLastWebhookOutput = ({
+payload: string
+event_id: string
+provider: string
+verified: boolean
+product_id: string
+occurred_at: string
+connector_id: string
+clickup_event: (string | null)
+receipt_count: number
+} | {
+found: false
+})
+
+export interface PlaygroundClickupGetOverviewInput {
+
+}
+
+export interface PlaygroundClickupGetOverviewOutput {
+team: ({
+teamId: string
+teamName: string
+} | null)
+lists: PlaygroundClickupGetOverviewOutputItems[]
+tasks: {
+id: string
+name: string
+status: (string | null)
+}[]
+minted: boolean
+spaces: PlaygroundClickupGetOverviewOutputItems[]
+list_status: number
+vend_status: number
+lists_status: number
+tasks_status: number
+spaces_status: number
+folders_status: number
+installation_count: number
+}
+export interface PlaygroundClickupGetOverviewOutputItems {
+id: string
+name: string
+}
+
+export interface PlaygroundGdriveGetLastChangeInput {
+
+}
+
+export type PlaygroundGdriveGetLastChangeOutput = ({
+file_id: string
+removed: boolean
+file_name: (string | null)
+mime_type: (string | null)
+product_id: string
+occurred_at: string
+connector_id: string
+resource_state: string
+} | {
+found: false
+})
+
+export interface PlaygroundGdriveReadFileInput {
+/**
+ * Drive file id; falls back to GDRIVE_TEST_FILE_ID, then the first picked file
+ */
+fileId?: string
+}
+
+export interface PlaygroundGdriveReadFileOutput {
+minted: boolean
+file_id: (string | null)
+file_name: (string | null)
+mime_type: (string | null)
+file_count: number
+get_status: number
+list_status: number
+vend_status: number
+content_bytes: (number | null)
+}
+
+export interface PlaygroundGoogleadsReadCustomerInput {
+
+}
+
+export interface PlaygroundGoogleadsReadCustomerOutput {
+minted: boolean
+vended: boolean
+customer_id: (string | null)
+vend_status: number
+result_count: number
+search_status: number
+login_customer_id: (string | null)
+}
+
+export interface PlaygroundLifecycleGetStateInput {
+
+}
+
+export interface PlaygroundLifecycleGetStateOutput {
+blocked: boolean
+archived: boolean
+productId: string
+lastBlockTransition: ({
+eventId: string
+eventName: string
+productId: string
+occurredAt: string
+recordedAt: string
+receiptCount: number
+organizationId: string
+cascadedFromOrg: boolean
+} | null)
+lastArchiveTransition: ({
+eventId: string
+eventName: string
+productId: string
+occurredAt: string
+recordedAt: string
+receiptCount: number
+organizationId: string
+cascadedFromOrg: boolean
+} | null)
+}
+
+export interface PlaygroundLifecycleListEventsInput {
+
+}
+
+export type PlaygroundLifecycleListEventsOutput = {
+eventId: string
+eventName: string
+productId: string
+occurredAt: string
+recordedAt: string
+receiptCount: number
+organizationId: string
+cascadedFromOrg: boolean
+}[]
+
+export interface PlaygroundWebhookGetLastInput {
+
+}
+
+export type PlaygroundWebhookGetLastOutput = ({
+payload?: unknown
+event_id: string
+provider: string
+verified: boolean
+product_id: string
+occurred_at: string
+connector_id: string
+delivery_count: number
+} | {
+found: false
+})
+
 export interface RealtimeArchiveExportInput {
 /**
  * Only entries with ts <= to_ts (epoch ms)
@@ -37646,6 +37789,24 @@ siteKey: (string | null)
 provider: "turnstile"
 riskElevated: boolean
 }
+passkeys: {
+/**
+ * The WebAuthn Relying Party ID — the product's own domain, without a scheme or port. Leave null to derive it from `allowedOrigins`, which works whenever they all sit on one host. Set it to the shared PARENT domain when they do not (`example.com` covering `app.example.com` and `www.example.com`); it must cover EVERY allowed origin or passkeys stay off. CHANGING IT ORPHANS every credential already enrolled — an authenticator only ever asserts a credential back to the RP ID it was created for.
+ */
+rpId: (string | null)
+/**
+ * The user-visible relying-party name the operating system's passkey prompt shows. Defaults to the RP ID.
+ */
+rpName: (string | null)
+/**
+ * Whether this product is a WebAuthn relying party: passkeys can be enrolled and offered as a sign-in strategy. Default false. Switching it on is not enough on its own — the product also needs at least one browser origin in `allowedOrigins` for the RP ID to be derived from.
+ */
+enabled: boolean
+/**
+ * Whether the authenticator must verify the user (biometric, PIN) rather than merely being present. Default false, which asks for verification but accepts an assertion without it — at `aal1`. A verified assertion always mints `aal2`, whatever this says; setting it true refuses the unverified one outright.
+ */
+requireUserVerification: boolean
+}
 recovery: {
 /**
  * Offer the password-recovery flow at all. Default true.
@@ -37957,6 +38118,27 @@ secretKey?: (string | null)
  */
 riskElevated?: boolean
 }
+/**
+ * Passkey (WebAuthn) settings: whether this product is a relying party, the RP ID and name, and whether an assertion must be user-verified. Merged field-by-field. The `passkey` strategy is offered only when `enabled` is true AND an RP ID resolves.
+ */
+passkeys?: {
+/**
+ * The WebAuthn Relying Party ID — the product's own domain, without a scheme or port. Leave null to derive it from `allowedOrigins`, which works whenever they all sit on one host. Set it to the shared PARENT domain when they do not (`example.com` covering `app.example.com` and `www.example.com`); it must cover EVERY allowed origin or passkeys stay off. CHANGING IT ORPHANS every credential already enrolled — an authenticator only ever asserts a credential back to the RP ID it was created for.
+ */
+rpId?: (string | null)
+/**
+ * The user-visible relying-party name the operating system's passkey prompt shows. Defaults to the RP ID.
+ */
+rpName?: (string | null)
+/**
+ * Whether this product is a WebAuthn relying party: passkeys can be enrolled and offered as a sign-in strategy. Default false. Switching it on is not enough on its own — the product also needs at least one browser origin in `allowedOrigins` for the RP ID to be derived from.
+ */
+enabled?: boolean
+/**
+ * Whether the authenticator must verify the user (biometric, PIN) rather than merely being present. Default false, which asks for verification but accepts an assertion without it — at `aal1`. A verified assertion always mints `aal2`, whatever this says; setting it true refuses the unverified one outright.
+ */
+requireUserVerification?: boolean
+}
 /**
  * Password-recovery settings (whether it is offered, how long a reset link lives). Merged field-by-field.
  */
@@ -38285,6 +38467,24 @@ siteKey: (string | null)
 provider: "turnstile"
 riskElevated: boolean
 }
+passkeys: {
+/**
+ * The WebAuthn Relying Party ID — the product's own domain, without a scheme or port. Leave null to derive it from `allowedOrigins`, which works whenever they all sit on one host. Set it to the shared PARENT domain when they do not (`example.com` covering `app.example.com` and `www.example.com`); it must cover EVERY allowed origin or passkeys stay off. CHANGING IT ORPHANS every credential already enrolled — an authenticator only ever asserts a credential back to the RP ID it was created for.
+ */
+rpId: (string | null)
+/**
+ * The user-visible relying-party name the operating system's passkey prompt shows. Defaults to the RP ID.
+ */
+rpName: (string | null)
+/**
+ * Whether this product is a WebAuthn relying party: passkeys can be enrolled and offered as a sign-in strategy. Default false. Switching it on is not enough on its own — the product also needs at least one browser origin in `allowedOrigins` for the RP ID to be derived from.
+ */
+enabled: boolean
+/**
+ * Whether the authenticator must verify the user (biometric, PIN) rather than merely being present. Default false, which asks for verification but accepts an assertion without it — at `aal1`. A verified assertion always mints `aal2`, whatever this says; setting it true refuses the unverified one outright.
+ */
+requireUserVerification: boolean
+}
 recovery: {
 /**
  * Offer the password-recovery flow at all. Default true.
@@ -38477,7 +38677,7 @@ userId: string
 
 export interface UsersFactorsListOutput {
 factors: {
-type: ("totp" | "backup_codes")
+type: ("totp" | "backup_codes" | "webauthn")
 status: ("unverified" | "verified")
 createdAt: string
 remaining: (number | null)
@@ -38794,6 +38994,52 @@ signInFailureBaseline: (number | null)
 }
 }
 
+export interface UsersPasskeysListInput {
+/**
+ * The end user whose passkeys to list.
+ */
+userId: string
+}
+
+export interface UsersPasskeysListOutput {
+passkeys: {
+id: string
+name: (string | null)
+aaguid: (string | null)
+backedUp: boolean
+createdAt: string
+signCount: number
+lastUsedAt: (string | null)
+transports: string[]
+}[]
+}
+
+export interface UsersPasskeysRevokeInput {
+/**
+ * Why this credential is being revoked, and under which ticket. Recorded verbatim in the audit row — this is the whole point of the tool being audited.
+ */
+reason: string
+/**
+ * The end user whose passkey is being revoked.
+ */
+userId: string
+/**
+ * Which credential to revoke — the `id` from `users_passkeys_list`.
+ */
+passkeyId: string
+}
+
+export interface UsersPasskeysRevokeOutput {
+/**
+ * Present when the revoke was refused — today, only because it was the last way in.
+ */
+error: ({
+code: string
+message: string
+} | null)
+status: ("deleted" | "failed")
+}
+
 export interface UsersSessionsGetInput {
 /**
  * The session to read.

package/src/gen/users/index.ts

@@ -1,3 +1,3 @@
 // AUTOGENERATED by scripts/generate.ts — do not edit.
 export * from './queryOptions.gen';
-export type { UsersApikeysCreateInput, UsersApikeysCreateOutput, UsersApikeysListInput, UsersApikeysListOutput, UsersApikeysRevokeInput, UsersApikeysRevokeOutput, UsersAuditListInput, UsersAuditListOutput, UsersConfigGetInput, UsersConfigGetOutput, UsersConfigUpsertInput, UsersConfigUpsertOutput, UsersFactorsListInput, UsersFactorsListOutput, UsersFactorsResetInput, UsersFactorsResetOutput, UsersKeysListInput, UsersKeysListOutput, UsersKeysRevokeInput, UsersKeysRevokeOutput, UsersKeysRotateInput, UsersKeysRotateOutput, UsersOpsRetentionGetInput, UsersOpsRetentionGetOutput, UsersOpsSloGetInput, UsersOpsSloGetOutput, UsersSessionsGetInput, UsersSessionsGetOutput, UsersSessionsImpersonateInput, UsersSessionsImpersonateOutput, UsersSessionsListInput, UsersSessionsListOutput, UsersSessionsRevokeInput, UsersSessionsRevokeOutput, UsersStatsGetInput, UsersStatsGetOutput, UsersUsersBanInput, UsersUsersBanOutput, UsersUsersCreateInput, UsersUsersCreateOutput, UsersUsersDeleteInput, UsersUsersDeleteOutput, UsersUsersEraseInput, UsersUsersEraseOutput, UsersUsersExportInput, UsersUsersExportOutput, UsersUsersGetInput, UsersUsersGetOutput, UsersUsersImportInput, UsersUsersImportOutput, UsersUsersInviteInput, UsersUsersInviteOutput, UsersUsersListInput, UsersUsersListOutput, UsersUsersSetPrimaryIdentifierInput, UsersUsersSetPrimaryIdentifierOutput, UsersUsersUnbanInput, UsersUsersUnbanOutput, UsersUsersUpdateInput, UsersUsersUpdateOutput, UsersWaitlistEraseInput, UsersWaitlistEraseOutput, UsersWaitlistFunnelInput, UsersWaitlistFunnelOutput, UsersWaitlistImportInput, UsersWaitlistImportOutput, UsersWaitlistInviteInput, UsersWaitlistInviteOutput, UsersWaitlistListInput, UsersWaitlistListOutput, UsersWebhooksCreateInput, UsersWebhooksCreateOutput, UsersWebhooksDeleteInput, UsersWebhooksDeleteOutput, UsersWebhooksDeliveriesListInput, UsersWebhooksDeliveriesListOutput, UsersWebhooksGetInput, UsersWebhooksGetOutput, UsersWebhooksListInput, UsersWebhooksListOutput, UsersWebhooksRotateSecretInput, UsersWebhooksRotateSecretOutput, UsersWebhooksUpdateInput, UsersWebhooksUpdateOutput } from '../types.gen';
+export type { UsersApikeysCreateInput, UsersApikeysCreateOutput, UsersApikeysListInput, UsersApikeysListOutput, UsersApikeysRevokeInput, UsersApikeysRevokeOutput, UsersAuditListInput, UsersAuditListOutput, UsersConfigGetInput, UsersConfigGetOutput, UsersConfigUpsertInput, UsersConfigUpsertOutput, UsersFactorsListInput, UsersFactorsListOutput, UsersFactorsResetInput, UsersFactorsResetOutput, UsersKeysListInput, UsersKeysListOutput, UsersKeysRevokeInput, UsersKeysRevokeOutput, UsersKeysRotateInput, UsersKeysRotateOutput, UsersOpsRetentionGetInput, UsersOpsRetentionGetOutput, UsersOpsSloGetInput, UsersOpsSloGetOutput, UsersPasskeysListInput, UsersPasskeysListOutput, UsersPasskeysRevokeInput, UsersPasskeysRevokeOutput, UsersSessionsGetInput, UsersSessionsGetOutput, UsersSessionsImpersonateInput, UsersSessionsImpersonateOutput, UsersSessionsListInput, UsersSessionsListOutput, UsersSessionsRevokeInput, UsersSessionsRevokeOutput, UsersStatsGetInput, UsersStatsGetOutput, UsersUsersBanInput, UsersUsersBanOutput, UsersUsersCreateInput, UsersUsersCreateOutput, UsersUsersDeleteInput, UsersUsersDeleteOutput, UsersUsersEraseInput, UsersUsersEraseOutput, UsersUsersExportInput, UsersUsersExportOutput, UsersUsersGetInput, UsersUsersGetOutput, UsersUsersImportInput, UsersUsersImportOutput, UsersUsersInviteInput, UsersUsersInviteOutput, UsersUsersListInput, UsersUsersListOutput, UsersUsersSetPrimaryIdentifierInput, UsersUsersSetPrimaryIdentifierOutput, UsersUsersUnbanInput, UsersUsersUnbanOutput, UsersUsersUpdateInput, UsersUsersUpdateOutput, UsersWaitlistEraseInput, UsersWaitlistEraseOutput, UsersWaitlistFunnelInput, UsersWaitlistFunnelOutput, UsersWaitlistImportInput, UsersWaitlistImportOutput, UsersWaitlistInviteInput, UsersWaitlistInviteOutput, UsersWaitlistListInput, UsersWaitlistListOutput, UsersWebhooksCreateInput, UsersWebhooksCreateOutput, UsersWebhooksDeleteInput, UsersWebhooksDeleteOutput, UsersWebhooksDeliveriesListInput, UsersWebhooksDeliveriesListOutput, UsersWebhooksGetInput, UsersWebhooksGetOutput, UsersWebhooksListInput, UsersWebhooksListOutput, UsersWebhooksRotateSecretInput, UsersWebhooksRotateSecretOutput, UsersWebhooksUpdateInput, UsersWebhooksUpdateOutput } from '../types.gen';

package/src/gen/users/queryOptions.gen.ts

@@ -19,6 +19,9 @@ import type {
   UsersKeysRotateInput,
   UsersOpsRetentionGetInput,
   UsersOpsSloGetInput,
+  UsersPasskeysListInput,
+  UsersPasskeysListOutput,
+  UsersPasskeysRevokeInput,
   UsersSessionsGetInput,
   UsersSessionsGetOutput,
   UsersSessionsImpersonateInput,
@@ -122,6 +125,16 @@ export const usersOpsSloGetMutationOptions = (sdk: GeneratedClient) => ({
   mutationFn: (input: UsersOpsSloGetInput) => sdk['users']['ops-slo']['get'](input),
 });
 
+export const usersPasskeysListQueryOptions = (sdk: GeneratedClient, input: UsersPasskeysListInput) => ({
+  queryKey: ['users', 'passkeys', 'list', input] as const,
+  queryFn: () => sdk['users']['passkeys']['list'](input),
+});
+
+export const usersPasskeysRevokeMutationOptions = (sdk: GeneratedClient) => ({
+  mutationKey: ['users', 'passkeys', 'revoke'],
+  mutationFn: (input: UsersPasskeysRevokeInput) => sdk['users']['passkeys']['revoke'](input),
+});
+
 export const usersSessionsGetQueryOptions = (sdk: GeneratedClient, input: UsersSessionsGetInput) => ({
   queryKey: ['users', 'sessions', 'get', input] as const,
   queryFn: () => sdk['users']['sessions']['get'](input),