@lessly/sdk-app 9.1.0 → 10.0.0

package/src/gen/types.gen.ts

@@ -56,9 +56,15 @@ snapshotId?: string
 export type BrainBackupStatusOutput = ({
 id: string
 error: (string | null)
-status: ("running" | "completed" | "failed")
+/**
+ * 'running' | 'completed' | 'failed'
+ */
+status: string
 gcsPath: string
-trigger: ("scheduled" | "manual" | "pre-restore")
+/**
+ * 'scheduled' | 'manual' | 'pre-restore'
+ */
+trigger: string
 createdAt: string
 edgeCount: (number | null)
 nodeCount: (number | null)
@@ -77,9 +83,15 @@ export interface BrainBackupsListInput {
 export type BrainBackupsListOutput = {
 id: string
 error: (string | null)
-status: ("running" | "completed" | "failed")
+/**
+ * 'running' | 'completed' | 'failed'
+ */
+status: string
 gcsPath: string
-trigger: ("scheduled" | "manual" | "pre-restore")
+/**
+ * 'scheduled' | 'manual' | 'pre-restore'
+ */
+trigger: string
 createdAt: string
 edgeCount: (number | null)
 nodeCount: (number | null)
@@ -536,107 +548,6 @@ mimeType: string
 }[]
 }[]
 
-export interface BrainKnowledgeEntityMemoriesInput {
-/**
- * Max memories (default 50)
- */
-limit?: number
-/**
- * Read scope; 'both' (default) unions shared + your private
- */
-scope?: ("shared" | "private" | "both")
-/**
- * Pagination offset
- */
-offset?: number
-/**
- * Entity id, name, or alias to fetch backing memories for
- */
-entity_ref: string
-}
-
-export interface BrainKnowledgeEntityMemoriesOutput {
-total: number
-entity: ({
-score?: number
-aliases: string[]
-entity_id: string
-description: (string | null)
-entity_type: string
-display_name: string
-canonical_name: string
-evidence_count: number
-} | null)
-memories: {
-/**
- * Consumer-facing label derived from the layer; 'unknown' for an unrecognised layer
- */
-kind: ("schema" | "intention" | "identity" | "basic" | "fact" | "summary" | "knowledge" | "raw" | "unknown")
-tags: string[]
-/**
- * Engine memory layer (l0_basic_info…l7_intention)
- */
-layer: ("l6_schema" | "l7_intention" | "l4_identity" | "l0_basic_info" | "l2_fact" | "l3_summary" | "l5_knowledge" | "l1_raw")
-custom: {
-[k: string]: unknown
-}
-status: string
-content: string
-user_id: string
-agent_id: string
-memory_at: (number | null)
-memory_id: string
-speculate: (string | null)
-session_id: string
-gmt_created: number
-/**
- * Source authority (highest→lowest): policy > official > team > informal
- */
-source_authority: ("policy" | "official" | "team" | "informal")
-source_raw_memory_id: (string | null)
-}[]
-elapsed_ms: number
-request_id: string
-}
-
-export interface BrainKnowledgeGraphInput {
-/**
- * Max nodes (default 5000). When the cap applies the HIGHEST-DEGREE nodes are kept, so a small limit (e.g. 100) returns the hub concepts — that is usually what you want
- */
-limit?: number
-/**
- * Read scope; 'both' (default) unions shared + your private
- */
-scope?: ("shared" | "private" | "both")
-}
-
-export interface BrainKnowledgeGraphOutput {
-edges: {
-reason: (string | null)
-source: string
-target: string
-symmetric: boolean
-relation_type: string
-}[]
-nodes: {
-id: string
-degree: number
-aliases: string[]
-description: (string | null)
-entity_type: string
-display_name: string
-canonical_name: string
-evidence_count: number
-}[]
-totals: {
-edgeCount: number
-nodeCount: number
-}
-truncated: boolean
-elapsed_ms: number
-request_id: string
-}
-
 export interface BrainKnowledgeNeighborhoodInput {
 /**
  * Hops to expand (engine clamps to 3)
@@ -1017,7 +928,10 @@ restoreId: string
 
 export type BrainRestoreStatusOutput = ({
 error: (string | null)
-status: ("pending" | "wiped" | "importing" | "completed" | "failed")
+/**
+ * 'pending' | 'wiped' | 'importing' | 'completed' | 'failed'
+ */
+status: string
 edgeCount: (number | null)
 nodeCount: (number | null)
 productId: string
@@ -13274,6 +13188,980 @@ name: string
 activeProductId: (string | null)
 }
 
+export interface PlaygroundAnalyticsOverviewInput {
+/**
+ * Max records per entity in recent[]; omit for the endpoint default
+ */
+limit?: number
+}
+
+export interface PlaygroundAnalyticsOverviewOutput {
+ok: boolean
+minted: boolean
+overview?: unknown
+http_status: number
+}
+
+export interface PlaygroundBillingEntitlementsInput {
+
+}
+
+export interface PlaygroundBillingEntitlementsOutput {
+ok: boolean
+minted: boolean
+http_status: number
+entitlements?: unknown
+}
+
+export interface PlaygroundBillingRecordUsageInput {
+/**
+ * Quantity of events to record against playground-events (SUM); defaults to 1
+ */
+value?: number
+}
+
+export interface PlaygroundBillingRecordUsageOutput {
+minted: boolean
+accepted: (number | null)
+recorded: boolean
+duplicates: (number | null)
+http_status: number
+}
+
+export interface PlaygroundClickupCreateTaskInput {
+/**
+ * Task title; defaults to a fixture label
+ */
+name?: string
+/**
+ * ClickUp list id; falls back to CLICKUP_TEST_LIST_ID
+ */
+listId?: string
+}
+
+export interface PlaygroundClickupCreateTaskOutput {
+minted: boolean
+task_id: (string | null)
+list_status: number
+vend_status: number
+clickup_status: number
+installation_count: number
+}
+
+export interface PlaygroundClickupGetLastWebhookInput {
+
+}
+
+export type PlaygroundClickupGetLastWebhookOutput = ({
+payload: string
+event_id: string
+provider: string
+verified: boolean
+product_id: string
+occurred_at: string
+connector_id: string
+clickup_event: (string | null)
+receipt_count: number
+} | {
+found: false
+})
+
+export interface PlaygroundClickupGetOverviewInput {
+
+}
+
+export interface PlaygroundClickupGetOverviewOutput {
+team: ({
+teamId: string
+teamName: string
+} | null)
+lists: PlaygroundClickupGetOverviewOutputItems[]
+tasks: {
+id: string
+name: string
+status: (string | null)
+}[]
+minted: boolean
+spaces: PlaygroundClickupGetOverviewOutputItems[]
+list_status: number
+vend_status: number
+lists_status: number
+tasks_status: number
+spaces_status: number
+folders_status: number
+installation_count: number
+}
+export interface PlaygroundClickupGetOverviewOutputItems {
+id: string
+name: string
+}
+
+export interface PlaygroundGdriveGetLastChangeInput {
+
+}
+
+export type PlaygroundGdriveGetLastChangeOutput = ({
+file_id: string
+removed: boolean
+file_name: (string | null)
+mime_type: (string | null)
+product_id: string
+occurred_at: string
+connector_id: string
+resource_state: string
+} | {
+found: false
+})
+
+export interface PlaygroundGdriveReadFileInput {
+/**
+ * Drive file id; falls back to GDRIVE_TEST_FILE_ID, then the first picked file
+ */
+fileId?: string
+}
+
+export interface PlaygroundGdriveReadFileOutput {
+minted: boolean
+file_id: (string | null)
+file_name: (string | null)
+mime_type: (string | null)
+file_count: number
+get_status: number
+list_status: number
+vend_status: number
+content_bytes: (number | null)
+}
+
+export interface PlaygroundGoogleadsReadCustomerInput {
+
+}
+
+export interface PlaygroundGoogleadsReadCustomerOutput {
+minted: boolean
+vended: boolean
+customer_id: (string | null)
+vend_status: number
+result_count: number
+search_status: number
+login_customer_id: (string | null)
+}
+
+export interface PlaygroundLifecycleGetStateInput {
+
+}
+
+export interface PlaygroundLifecycleGetStateOutput {
+blocked: boolean
+archived: boolean
+productId: string
+lastBlockTransition: ({
+eventId: string
+eventName: string
+productId: string
+occurredAt: string
+recordedAt: string
+receiptCount: number
+organizationId: string
+cascadedFromOrg: boolean
+} | null)
+lastArchiveTransition: ({
+eventId: string
+eventName: string
+productId: string
+occurredAt: string
+recordedAt: string
+receiptCount: number
+organizationId: string
+cascadedFromOrg: boolean
+} | null)
+}
+
+export interface PlaygroundLifecycleListEventsInput {
+
+}
+
+export type PlaygroundLifecycleListEventsOutput = {
+eventId: string
+eventName: string
+productId: string
+occurredAt: string
+recordedAt: string
+receiptCount: number
+organizationId: string
+cascadedFromOrg: boolean
+}[]
+
+export interface PlaygroundWebhookGetLastInput {
+
+}
+
+export type PlaygroundWebhookGetLastOutput = ({
+payload?: unknown
+event_id: string
+provider: string
+verified: boolean
+product_id: string
+occurred_at: string
+connector_id: string
+delivery_count: number
+} | {
+found: false
+})
+
+export interface RealtimeGrantCreateInput {
+/**
+ * Operations granted on matching channels
+ * 
+ * @minItems 1
+ */
+ops: [("subscribe" | "publish" | "presence" | "history"), ...(("subscribe" | "publish" | "presence" | "history"))[]]
+/**
+ * Channel pattern, e.g. "chat:*" ("*" matches exactly one segment)
+ */
+pattern: string
+/**
+ * Identity id the grant applies to, or "*" for every identity in the product
+ */
+subject: string
+}
+
+export interface RealtimeGrantCreateOutput {
+id: string
+ops: ("subscribe" | "publish" | "presence" | "history")[]
+pattern: string
+subject: string
+createdAt: string
+}
+
+export interface RealtimeGrantListInput {
+/**
+ * Filter grants by subject
+ */
+subject?: string
+}
+
+export interface RealtimeGrantListOutput {
+grants: {
+id: string
+ops: ("subscribe" | "publish" | "presence" | "history")[]
+pattern: string
+subject: string
+createdAt: string
+}[]
+}
+
+export interface RealtimeGrantRevokeInput {
+/**
+ * Grant id to revoke
+ */
+id: string
+}
+
+export interface RealtimeGrantRevokeOutput {
+revoked: true
+}
+
+export interface RealtimeHistoryGetInput {
+/**
+ * Cursor: stream epoch the offset belongs to
+ */
+epoch?: string
+/**
+ * Window: return the last N entries
+ */
+last_n?: number
+/**
+ * Cursor: resume strictly after this offset (requires epoch)
+ */
+offset?: string
+/**
+ * Channel to read history from
+ */
+channel: string
+/**
+ * Window: return entries newer than now minus this many milliseconds
+ */
+last_ms?: number
+}
+
+export interface RealtimeHistoryGetOutput {
+/**
+ * Current stream epoch, or null when the channel has no history yet
+ */
+epoch: (string | null)
+/**
+ * Channel the history was read from
+ */
+channel: string
+/**
+ * Entries in stream order
+ */
+entries: {
+/**
+ * Message id from the envelope
+ */
+id: string
+/**
+ * Publish timestamp (ms)
+ */
+ts: number
+/**
+ * Store-and-link reference for payloads over the inline cap
+ */
+ref?: {
+/**
+ * Stored body size in bytes
+ */
+size: number
+/**
+ * Object key in the product-scoped bucket
+ */
+bucket_key: string
+/**
+ * Stored content type
+ */
+content_type?: string
+}
+/**
+ * Inline payload (absent when ref is present)
+ */
+data?: {
+[k: string]: unknown
+}
+/**
+ * Stream offset of the entry
+ */
+offset: string
+}[]
+/**
+ * false when the cursor epoch mismatches or entries aged out — client must resync
+ */
+recovered: boolean
+}
+
+export interface RealtimeMessagesPublishInput {
+/**
+ * JSON payload delivered to channel subscribers
+ */
+data: {
+[k: string]: unknown
+}
+/**
+ * Channel to publish the message to
+ */
+channel: string
+}
+
+export interface RealtimeMessagesPublishOutput {
+/**
+ * Stream epoch of the stored message (present when history is on)
+ */
+epoch?: string
+/**
+ * Stream offset of the stored message (present when history is on)
+ */
+offset?: string
+/**
+ * Channel the message was published to
+ */
+channel: string
+/**
+ * Publish acknowledged by the fan-out backend
+ */
+published: true
+}
+
+export interface RealtimeNamespaceCreateInput {
+/**
+ * Namespace name (the part of a channel name before the first colon)
+ */
+name: string
+/**
+ * History retention policy for channels in this namespace
+ */
+history?: ("none" | "last-message" | "window")
+/**
+ * Whether presence is enabled on channels in this namespace
+ */
+presence?: boolean
+/**
+ * public: any authenticated identity may subscribe without a grant
+ */
+visibility?: ("public" | "authorized")
+/**
+ * Whether clients may publish events directly
+ */
+clientEvents?: boolean
+/**
+ * Whether only identified (non-anonymous) identities get capabilities
+ */
+identifiedOnly?: boolean
+/**
+ * Whether payloads must be end-to-end encrypted
+ */
+encryptionRequired?: boolean
+/**
+ * Retention window in seconds; required when history is "window"
+ */
+historyWindowSeconds?: number
+}
+
+export interface RealtimeNamespaceCreateOutput {
+id: string
+name: string
+history: ("none" | "last-message" | "window")
+presence: boolean
+createdAt: string
+updatedAt: string
+visibility: ("public" | "authorized")
+clientEvents: boolean
+identifiedOnly: boolean
+encryptionRequired: boolean
+historyWindowSeconds: (number | null)
+}
+
+export interface RealtimeNamespaceDeleteInput {
+/**
+ * Namespace name
+ */
+name: string
+}
+
+export interface RealtimeNamespaceDeleteOutput {
+deleted: true
+}
+
+export interface RealtimeNamespaceGetInput {
+/**
+ * Namespace name
+ */
+name: string
+}
+
+export interface RealtimeNamespaceGetOutput {
+id: string
+name: string
+history: ("none" | "last-message" | "window")
+presence: boolean
+createdAt: string
+updatedAt: string
+visibility: ("public" | "authorized")
+clientEvents: boolean
+identifiedOnly: boolean
+encryptionRequired: boolean
+historyWindowSeconds: (number | null)
+}
+
+export interface RealtimeNamespaceListInput {
+
+}
+
+export interface RealtimeNamespaceListOutput {
+namespaces: {
+id: string
+name: string
+history: ("none" | "last-message" | "window")
+presence: boolean
+createdAt: string
+updatedAt: string
+visibility: ("public" | "authorized")
+clientEvents: boolean
+identifiedOnly: boolean
+encryptionRequired: boolean
+historyWindowSeconds: (number | null)
+}[]
+}
+
+export interface RealtimeNamespaceUpdateInput {
+/**
+ * Namespace name to update
+ */
+name: string
+/**
+ * History retention policy for channels in this namespace
+ */
+history?: ("none" | "last-message" | "window")
+/**
+ * Whether presence is enabled on channels in this namespace
+ */
+presence?: boolean
+/**
+ * public: any authenticated identity may subscribe without a grant
+ */
+visibility?: ("public" | "authorized")
+/**
+ * Whether clients may publish events directly
+ */
+clientEvents?: boolean
+/**
+ * Whether only identified (non-anonymous) identities get capabilities
+ */
+identifiedOnly?: boolean
+/**
+ * Whether payloads must be end-to-end encrypted
+ */
+encryptionRequired?: boolean
+/**
+ * Retention window in seconds; required when history is "window"
+ */
+historyWindowSeconds?: number
+}
+
+export interface RealtimeNamespaceUpdateOutput {
+id: string
+name: string
+history: ("none" | "last-message" | "window")
+presence: boolean
+createdAt: string
+updatedAt: string
+visibility: ("public" | "authorized")
+clientEvents: boolean
+identifiedOnly: boolean
+encryptionRequired: boolean
+historyWindowSeconds: (number | null)
+}
+
+export interface RealtimePresenceEnterInput {
+/**
+ * Arbitrary JSON metadata for the member (<=10KB serialized)
+ */
+info?: {
+[k: string]: unknown
+}
+/**
+ * Channel name, "namespace:rest"
+ */
+channel: string
+/**
+ * Act for a synthetic member id instead of the caller identity (backend integrations)
+ */
+member_id?: string
+/**
+ * Presence entry TTL in seconds (1-3600)
+ */
+ttl_seconds?: number
+}
+
+export interface RealtimePresenceEnterOutput {
+/**
+ * The entered/updated member
+ */
+member: {
+/**
+ * Last update timestamp (ms epoch)
+ */
+ts: number
+/**
+ * Arbitrary JSON metadata for the member
+ */
+info?: {
+[k: string]: unknown
+}
+/**
+ * Member identity
+ */
+identity: string
+/**
+ * Number of live sockets for this identity
+ */
+connections: number
+}
+/**
+ * Channel name
+ */
+channel: string
+}
+
+export interface RealtimePresenceGetInput {
+/**
+ * Channel name, "namespace:rest"
+ */
+channel: string
+}
+
+export interface RealtimePresenceGetOutput {
+/**
+ * Channel name
+ */
+channel: string
+/**
+ * Current roster, deduplicated by identity
+ */
+members: {
+/**
+ * Last update timestamp (ms epoch)
+ */
+ts: number
+/**
+ * Arbitrary JSON metadata for the member
+ */
+info?: {
+[k: string]: unknown
+}
+/**
+ * Member identity
+ */
+identity: string
+/**
+ * Number of live sockets for this identity
+ */
+connections: number
+}[]
+}
+
+export interface RealtimePresenceLeaveInput {
+/**
+ * Channel name, "namespace:rest"
+ */
+channel: string
+/**
+ * Act for a synthetic member id instead of the caller identity (backend integrations)
+ */
+member_id?: string
+}
+
+export interface RealtimePresenceLeaveOutput {
+/**
+ * Channel name
+ */
+channel: string
+/**
+ * Whether the member was removed
+ */
+removed: boolean
+}
+
+export interface RealtimePresenceStatsInput {
+/**
+ * Channel name, "namespace:rest"
+ */
+channel: string
+}
+
+export interface RealtimePresenceStatsOutput {
+/**
+ * Channel name
+ */
+channel: string
+/**
+ * Number of distinct identities present
+ */
+members: number
+}
+
+export interface RealtimePresenceUpdateInput {
+/**
+ * Arbitrary JSON metadata for the member (<=10KB serialized)
+ */
+info?: {
+[k: string]: unknown
+}
+/**
+ * Channel name, "namespace:rest"
+ */
+channel: string
+/**
+ * Act for a synthetic member id instead of the caller identity (backend integrations)
+ */
+member_id?: string
+/**
+ * Presence entry TTL in seconds (1-3600)
+ */
+ttl_seconds?: number
+}
+
+export interface RealtimePresenceUpdateOutput {
+/**
+ * The entered/updated member
+ */
+member: {
+/**
+ * Last update timestamp (ms epoch)
+ */
+ts: number
+/**
+ * Arbitrary JSON metadata for the member
+ */
+info?: {
+[k: string]: unknown
+}
+/**
+ * Member identity
+ */
+identity: string
+/**
+ * Number of live sockets for this identity
+ */
+connections: number
+}
+/**
+ * Channel name
+ */
+channel: string
+}
+
+export interface RealtimeStatusGetInput {
+
+}
+
+export interface RealtimeStatusGetOutput {
+/**
+ * Redis fan-out connectivity
+ */
+redis: ("connected" | "disconnected" | "unconfigured")
+/**
+ * API liveness marker
+ */
+service: "ok"
+/**
+ * WebSocket URL of the realtime gateway
+ */
+gatewayUrl: string
+/**
+ * Whether the token signing key is present
+ */
+signingKeyConfigured: boolean
+}
+
+export interface RealtimeTokensCreateInput {
+/**
+ * Concrete channels to filter the resolved capabilities to; omit to receive all capabilities the identity has
+ * 
+ * @minItems 1
+ * @maxItems 32
+ */
+channels?: [string, ...(string)[]]
+}
+
+export interface RealtimeTokensCreateOutput {
+/**
+ * Signed EdDSA capability JWT (60s TTL)
+ */
+token: string
+/**
+ * WebSocket URL of the realtime gateway to connect to
+ */
+gatewayUrl: string
+}
+
+export interface RealtimeWebhookCreateInput {
+/**
+ * Endpoint that receives signed lifecycle POSTs (https in production)
+ */
+url: string
+/**
+ * Lifecycle event types this webhook receives
+ * 
+ * @minItems 1
+ */
+events: [("channel.occupied" | "channel.vacated" | "presence.member-added" | "presence.member-removed"), ...(("channel.occupied" | "channel.vacated" | "presence.member-added" | "presence.member-removed"))[]]
+/**
+ * Free-form note
+ */
+description?: string
+}
+
+export interface RealtimeWebhookCreateOutput {
+/**
+ * Full signing secret — returned only once, at creation. Store it now.
+ */
+secret: string
+webhook: {
+id: string
+url: string
+active: boolean
+events: string[]
+/**
+ * Secret metadata only — never the secret itself
+ */
+secrets: {
+/**
+ * Visible secret prefix — matches the X-Realtime-Key header
+ */
+prefix: string
+createdAt: string
+/**
+ * When this secret stops verifying; null = current signer
+ */
+expiresAt: (string | null)
+}[]
+createdAt: string
+updatedAt: string
+description: (string | null)
+}
+}
+
+export interface RealtimeWebhookDeleteInput {
+/**
+ * Webhook id
+ */
+webhookId: string
+}
+
+export interface RealtimeWebhookDeleteOutput {
+deleted: true
+}
+
+export interface RealtimeWebhookDeliveriesListInput {
+/**
+ * Max deliveries to return (newest first)
+ */
+limit?: number
+/**
+ * Webhook id
+ */
+webhookId: string
+}
+
+export interface RealtimeWebhookDeliveriesListOutput {
+deliveries: {
+id: string
+status: ("pending" | "succeeded" | "failed")
+/**
+ * Source lifecycle event idempotencyKey
+ */
+eventId: string
+attempts: number
+createdAt: string
+eventType: string
+lastError: (string | null)
+lastAttemptAt: (string | null)
+responseStatus: (number | null)
+}[]
+}
+
+export interface RealtimeWebhookGetInput {
+/**
+ * Webhook id
+ */
+webhookId: string
+}
+
+export interface RealtimeWebhookGetOutput {
+id: string
+url: string
+active: boolean
+events: string[]
+/**
+ * Secret metadata only — never the secret itself
+ */
+secrets: {
+/**
+ * Visible secret prefix — matches the X-Realtime-Key header
+ */
+prefix: string
+createdAt: string
+/**
+ * When this secret stops verifying; null = current signer
+ */
+expiresAt: (string | null)
+}[]
+createdAt: string
+updatedAt: string
+description: (string | null)
+}
+
+export interface RealtimeWebhookListInput {
+
+}
+
+export interface RealtimeWebhookListOutput {
+webhooks: {
+id: string
+url: string
+active: boolean
+events: string[]
+/**
+ * Secret metadata only — never the secret itself
+ */
+secrets: {
+/**
+ * Visible secret prefix — matches the X-Realtime-Key header
+ */
+prefix: string
+createdAt: string
+/**
+ * When this secret stops verifying; null = current signer
+ */
+expiresAt: (string | null)
+}[]
+createdAt: string
+updatedAt: string
+description: (string | null)
+}[]
+}
+
+export interface RealtimeWebhookSecretRotateInput {
+/**
+ * Webhook id
+ */
+webhookId: string
+}
+
+export interface RealtimeWebhookSecretRotateOutput {
+/**
+ * Visible prefix of the new secret (X-Realtime-Key)
+ */
+prefix: string
+/**
+ * New full signing secret — returned only once. Store it now.
+ */
+secret: string
+/**
+ * When the rotated-out secret stops verifying (grace window)
+ */
+previousExpiresAt: (string | null)
+}
+
+export interface RealtimeWebhookUpdateInput {
+/**
+ * Endpoint that receives signed lifecycle POSTs (https in production)
+ */
+url?: string
+/**
+ * Inactive webhooks receive no deliveries
+ */
+active?: boolean
+/**
+ * Lifecycle event types this webhook receives
+ * 
+ * @minItems 1
+ */
+events?: [("channel.occupied" | "channel.vacated" | "presence.member-added" | "presence.member-removed"), ...(("channel.occupied" | "channel.vacated" | "presence.member-added" | "presence.member-removed"))[]]
+/**
+ * Webhook id to update
+ */
+webhookId: string
+/**
+ * Free-form note
+ */
+description?: (string | null)
+}
+
+export interface RealtimeWebhookUpdateOutput {
+id: string
+url: string
+active: boolean
+events: string[]
+/**
+ * Secret metadata only — never the secret itself
+ */
+secrets: {
+/**
+ * Visible secret prefix — matches the X-Realtime-Key header
+ */
+prefix: string
+createdAt: string
+/**
+ * When this secret stops verifying; null = current signer
+ */
+expiresAt: (string | null)
+}[]
+createdAt: string
+updatedAt: string
+description: (string | null)
+}
+
 export interface TrackingApiKeysCreateInput {
 name: string
 }