@lumibase/sdk 0.10.0

package/dist/index.d.ts

@@ -0,0 +1,1753 @@
+type DefaultSchema = Record<string, Record<string, unknown>>;
+type ID = string;
+type Locale = string;
+type Brand<TBrand extends string, TValue> = TValue & {
+    readonly __brand: TBrand;
+};
+type AgentRiskLevel = "safe" | "review_required" | "dangerous" | "blocked";
+interface AgentGoalResource {
+    id: string;
+    siteId: string;
+    title: string;
+    description: string | null;
+    source: string;
+    createdBy: string | null;
+    assigneeAgent: string;
+    priority: string;
+    deadline: string | null;
+    status: string;
+    successCriteria: Record<string, unknown>;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+}
+interface AgentGoalCreateInput {
+    title: string;
+    description?: string;
+    source?: "user" | "flow" | "api" | "schedule";
+    assigneeAgent?: string;
+    priority?: "low" | "normal" | "high" | "urgent";
+    successCriteria?: Record<string, unknown>;
+}
+interface AgentRunResource {
+    id: string;
+    goalId: string;
+    siteId: string;
+    agentName: string;
+    provider: string;
+    model: string;
+    status: string;
+    budget: Record<string, unknown>;
+    policySnapshotHash: string | null;
+    risk: AgentRiskLevel | string;
+    metrics: Record<string, unknown>;
+    error: string | null;
+    retryOfRunId: string | null;
+    startedAt: string;
+    finishedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface AgentToolResource {
+    name: string;
+    description: string;
+    requiredCapabilities: string[];
+    service: "schema" | "items" | "ai";
+    inputSchema: Record<string, unknown>;
+    outputSchema: Record<string, unknown>;
+    riskPolicy: {
+        level: AgentRiskLevel;
+        approvalPolicy?: string;
+    };
+    rateLimit: {
+        maxCallsPerMinute?: number;
+        maxCallsPerRun?: number;
+    };
+    enabled: boolean;
+    owner: string;
+    extensionId?: string | null;
+}
+interface AgentApprovalResource {
+    id: string;
+    runId: string;
+    siteId: string;
+    legacyApprovalId: string | null;
+    subjectType: "plan" | "tool_call" | "artifact" | "schema_diff" | string;
+    subjectId: string;
+    status: string;
+    approvalPolicy: string;
+    requestedByAgent: string;
+    decidedBy: string | null;
+    decisionReason: string | null;
+    expiresAt: string | null;
+    createdAt: string;
+    decidedAt: string | null;
+}
+type AgentArtifactType = "schema_diff" | "page_spec" | "component_spec" | "seed_data" | "api_spec" | "prompt" | "migration";
+interface AgentArtifactResource {
+    id: string;
+    runId: string;
+    siteId: string;
+    type: AgentArtifactType | string;
+    target: string | null;
+    title: string;
+    contentRef: string | null;
+    content: Record<string, unknown>;
+    hash: string;
+    version: number;
+    status: string;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+}
+interface AgentArtifactCreateInput {
+    runId: string;
+    type: AgentArtifactType;
+    title: string;
+    target?: string;
+    content: Record<string, unknown>;
+}
+interface AgentEvaluationResource {
+    id: string;
+    runId: string;
+    siteId: string;
+    artifactId: string | null;
+    kind: string;
+    status: "pass" | "warn" | "fail" | string;
+    score: number | null;
+    summary: string;
+    details: Record<string, unknown>;
+    artifactHash: string | null;
+    createdAt: string;
+}
+interface AgentMemoryResource {
+    id: string;
+    siteId: string;
+    scope: string;
+    scopeId: string | null;
+    sourceType: string;
+    sourceId: string | null;
+    content: string;
+    embedding: unknown;
+    confidence: number;
+    metadata: Record<string, unknown>;
+    expiresAt: string | null;
+    createdAt: string;
+}
+interface AgentMemoryContext {
+    siteId: string;
+    memories: AgentMemoryResource[];
+    recentRuns: AgentRunResource[];
+    approvedArtifacts: AgentArtifactResource[];
+}
+interface AgentMemoryWriteInput {
+    scope: string;
+    scopeId?: string;
+    sourceType: string;
+    sourceId?: string;
+    content: string;
+    confidence?: number;
+}
+interface AgentGenerateAppInput {
+    collections?: string[];
+    targetApp?: string;
+    constraints?: Record<string, unknown>;
+    budget?: Record<string, unknown>;
+    approvalPolicy?: string;
+}
+interface AgentGenerateAppResult {
+    run: {
+        goalId: string;
+        runId: string;
+        agentName: string;
+    };
+    artifacts: AgentArtifactResource[];
+    evaluations: AgentEvaluationResource[];
+}
+type PrimaryKeyType = "nanoid" | "uuid" | "integer" | "bigInteger" | "string";
+type StorageMode = "jsonb" | "materialized" | "physical" | "external";
+interface CollectionResource {
+    id: string;
+    siteId: string;
+    name: string;
+    label?: string | null;
+    pluralLabel?: string | null;
+    hidden?: boolean;
+    system?: boolean;
+    singleton: boolean;
+    icon?: string | null;
+    color?: string | null;
+    note?: string | null;
+    primaryKeyField?: string;
+    displayTemplate: string | null;
+    sortField: string | null;
+    archiveField: string | null;
+    archiveValue: string | null;
+    unarchiveValue?: string | null;
+    itemDuplicationFields?: string[];
+    translations?: Record<string, unknown>;
+    accountability?: "all" | "activity" | "none";
+    versioning?: boolean;
+    primaryKeyType?: PrimaryKeyType;
+    storageMode?: StorageMode;
+    meta: Record<string, unknown>;
+    fields?: FieldResource[];
+    systemFields?: FieldResource[];
+    createdAt?: string;
+    updatedAt?: string;
+}
+type CollectionInput = Omit<Partial<CollectionResource>, "id" | "siteId" | "fields" | "systemFields" | "createdAt" | "updatedAt"> & {
+    name: string;
+};
+interface FieldResource {
+    id: string;
+    collectionId: string;
+    name: string;
+    type: string;
+    interface: string;
+    display?: string | null;
+    label?: string | null;
+    note?: string | null;
+    defaultValue?: unknown;
+    nullable?: boolean;
+    unique?: boolean;
+    indexed?: boolean;
+    searchable?: boolean;
+    length?: number | null;
+    precision?: number | null;
+    scale?: number | null;
+    special?: unknown[];
+    translations?: Record<string, unknown>;
+    options?: Record<string, unknown>;
+    displayOptions?: Record<string, unknown>;
+    validation?: Record<string, unknown>;
+    conditions?: unknown[];
+    required: boolean;
+    readonly?: boolean;
+    hidden: boolean;
+    encrypted?: boolean;
+    versioned?: boolean;
+    rawEnabled?: boolean;
+    width?: "half" | "full" | "fill";
+    group?: string | null;
+    sortOrder: number;
+    system?: boolean;
+    locked?: boolean;
+    generated?: boolean;
+    column?: string;
+    renameFrom?: string;
+    migrationPlan?: Record<string, unknown>;
+    confirmRiskyChange?: boolean;
+    [key: string]: unknown;
+}
+type FieldInput = Omit<Partial<FieldResource>, "id" | "collectionId"> & {
+    name: string;
+    type: string;
+    interface: string;
+};
+interface FieldMutationOptions {
+    migrationPlan?: Record<string, unknown>;
+    confirmRiskyChange?: boolean;
+}
+interface FieldRenameInput extends FieldMutationOptions {
+    type: string;
+    interface: string;
+    display?: string | null;
+    label?: string | null;
+    note?: string | null;
+    defaultValue?: unknown;
+    nullable?: boolean;
+    unique?: boolean;
+    indexed?: boolean;
+    searchable?: boolean;
+    length?: number | null;
+    precision?: number | null;
+    scale?: number | null;
+    special?: unknown[];
+    options?: Record<string, unknown>;
+    displayOptions?: Record<string, unknown>;
+    validation?: Record<string, unknown>;
+    conditions?: unknown[];
+    required?: boolean;
+    readonly?: boolean;
+    hidden?: boolean;
+    encrypted?: boolean;
+    versioned?: boolean;
+    rawEnabled?: boolean;
+    width?: "half" | "full" | "fill";
+    group?: string | null;
+    sortOrder?: number;
+    [key: string]: unknown;
+}
+interface FieldDeleteOptions extends FieldMutationOptions {
+    force?: boolean;
+    backupToRevisions?: boolean;
+}
+interface RelationResource {
+    id: string;
+    siteId: string;
+    manyCollection: string;
+    manyField: string;
+    oneCollection: string;
+    oneField: string | null;
+    junctionCollection: string | null;
+    type?: RelationType;
+    aliasField?: string | null;
+    relatedDisplayTemplate?: string | null;
+    junctionManyField?: string | null;
+    junctionOneField?: string | null;
+    sortField?: string | null;
+    onDelete?: "restrict" | "cascade" | "set null" | "no action";
+    meta?: Record<string, unknown>;
+}
+type RelationType = "m2o" | "o2m" | "m2m" | "m2a";
+type RelationInput = Omit<Partial<RelationResource>, "id" | "siteId"> & {
+    manyCollection: string;
+    manyField: string;
+    oneCollection: string;
+    type?: RelationType;
+};
+type SchemaDiffRisk = "low" | "medium" | "high";
+type SchemaRuntimeImpact = "cache_invalidation" | "permission_recompile" | "typegen_rebuild" | "data_migration_required" | "relation_reindex" | "storage_runtime_change";
+interface SchemaDiffEntry {
+    name?: string;
+    field?: string;
+    identity?: string;
+    type?: string;
+    changes?: string[];
+    risk: SchemaDiffRisk;
+    runtimeImpact: SchemaRuntimeImpact[];
+}
+interface SchemaDiff {
+    risk: SchemaDiffRisk;
+    runtimeImpact: SchemaRuntimeImpact[];
+    collection: {
+        added: string[];
+        removed: string[];
+        changed: SchemaDiffEntry[];
+    };
+    fields: {
+        added: SchemaDiffEntry[];
+        removed: SchemaDiffEntry[];
+        changed: SchemaDiffEntry[];
+    };
+    relations: {
+        added: SchemaDiffEntry[];
+        removed: SchemaDiffEntry[];
+        changed: SchemaDiffEntry[];
+    };
+}
+interface SchemaChangedEvent {
+    type: "schema.changed";
+    siteId: string;
+    collection: string;
+    affectedCollections: string[];
+    diff: SchemaDiff;
+}
+interface SchemaApplyResult {
+    collection: CollectionResource;
+    diff: SchemaDiff;
+    affectedCollections: string[];
+    event: SchemaChangedEvent;
+}
+type SchemaApplyInput = Partial<CollectionInput> & {
+    fields?: FieldInput[];
+    relations?: RelationInput[];
+};
+type SchemaDiffInput = SchemaApplyInput & {
+    name: string;
+};
+interface TypegenSchemaFilters {
+    include?: string[];
+    exclude?: string[];
+}
+type ItemFilterOp = "_eq" | "_neq" | "_in" | "_nin" | "_gt" | "_gte" | "_lt" | "_lte" | "_contains" | "_starts_with" | "_ends_with" | "_null" | "_nnull";
+interface ItemFilter {
+    _and?: ItemFilter[];
+    _or?: ItemFilter[];
+    [key: string]: {
+        [op in ItemFilterOp]?: unknown;
+    } | ItemFilter[] | undefined;
+}
+interface ListItemsParams {
+    fields?: string[];
+    filter?: ItemFilter;
+    sort?: string[];
+    limit?: number;
+    offset?: number;
+    status?: string | null;
+    search?: string;
+}
+interface ItemRow<TData extends Record<string, unknown> = Record<string, unknown>> {
+    id: string;
+    siteId: string;
+    collectionId: string;
+    status: string;
+    data: TData;
+    sort: number;
+    /** Content scheduling window (Publish_Window); null when not scheduled. */
+    publishAt?: string | null;
+    unpublishAt?: string | null;
+    /** Editorial workflow state; null when the workflow is not in use. */
+    editorialState?: string | null;
+    userCreated: string | null;
+    userUpdated: string | null;
+    createdAt: string;
+    updatedAt: string;
+    deletedAt: string | null;
+}
+interface RevisionRow {
+    id: string;
+    siteId: string;
+    collectionId: string;
+    itemId: string;
+    delta: {
+        before?: Record<string, unknown> | null;
+        after?: Record<string, unknown>;
+    };
+    userId: string | null;
+    createdAt: string;
+    authorType?: "human" | "agent";
+    createdByRunId?: string | null;
+    model?: string | null;
+    constitutionHash?: string | null;
+    confidence?: number | null;
+    sources?: unknown[] | null;
+    staged?: boolean;
+    autoCommitAt?: string | null;
+}
+interface ListItemsResponse<T extends Record<string, unknown> = Record<string, unknown>> {
+    data: ItemRow<T>[];
+    meta: {
+        total: number;
+        limit: number;
+        offset: number;
+    };
+}
+type PermissionAction = "create" | "read" | "update" | "delete" | "share" | "read_decrypted";
+interface RoleResource {
+    id: string;
+    siteId: string;
+    key: string | null;
+    systemKey: string | null;
+    name: string;
+    description: string | null;
+    icon: string | null;
+    parentId: string | null;
+    adminAccess: boolean;
+    appAccess: boolean;
+    createdAt?: string;
+}
+interface RoleDetail extends RoleResource {
+    policies: Array<{
+        policyId: string;
+        priority: number;
+    }>;
+    users: Array<{
+        userId: string;
+    }>;
+}
+interface PolicyResource {
+    id: string;
+    siteId: string;
+    key: string | null;
+    name: string;
+    icon: string | null;
+    description: string | null;
+    adminAccess: boolean;
+    appAccess: boolean;
+    enforceTfa: boolean;
+    ipAllow: string[];
+    ipDeny: string[];
+    validFrom: string | null;
+    validUntil: string | null;
+    /** Top-level guardrails: time window, IP allow/deny. */
+    rules: Record<string, unknown>;
+    createdAt?: string;
+}
+interface PermissionRow {
+    id: string;
+    siteId: string;
+    policyId: string;
+    collection: string;
+    action: PermissionAction;
+    permissions: Record<string, unknown>;
+    validation: Record<string, unknown>;
+    presets: Record<string, unknown>;
+    fields: string[];
+}
+interface PolicyDetail extends PolicyResource {
+    permissions: PermissionRow[];
+}
+interface CompiledPermission {
+    collection: string;
+    action: PermissionAction;
+    rule: Record<string, unknown> | null;
+    fields: string[];
+    presets: Record<string, unknown>;
+    validation: Record<string, unknown>;
+    sources?: Array<{
+        policyId: string;
+        policyName: string;
+    }>;
+}
+interface PermissionBundle {
+    admin: boolean;
+    appAccess: boolean;
+    tfaRequired: boolean;
+    byKey: Record<string, CompiledPermission>;
+    roles: Array<{
+        id: string;
+        name: string;
+        adminAccess: boolean;
+        appAccess: boolean;
+    }>;
+    policies: Array<{
+        id: string;
+        name: string;
+        key: string | null;
+    }>;
+}
+interface PermissionCheckResult {
+    allowed: boolean;
+    reason: string | null;
+    fields: string[];
+    rule?: Record<string, unknown> | null;
+    presets?: Record<string, unknown>;
+}
+interface AccessConflict {
+    severity: "warning" | "blocking";
+    collection: string;
+    action: PermissionAction;
+    existingPolicy: string;
+    incomingPolicy: string;
+    reason: string;
+}
+interface AccessConflictReport {
+    ok: boolean;
+    conflicts: AccessConflict[];
+    warnings: AccessConflict[];
+}
+interface AccessConflictCheckInput {
+    target: {
+        type: "role" | "user" | "api_key";
+        id: string;
+    };
+    addPolicies?: string[];
+    removePolicies?: string[];
+}
+declare const ACCESS_EXPORT_SCHEMA = "lumibase.access@v1";
+type AccessImportMode = "merge" | "replace-managed" | "replace-all";
+interface AccessExportManifest {
+    schema: typeof ACCESS_EXPORT_SCHEMA;
+    exportedAt: string;
+    roles: AccessExportRole[];
+    policies: AccessExportPolicy[];
+    bindings: AccessExportBindings;
+    apiKeys: AccessExportApiKey[];
+}
+interface AccessExportRole {
+    ref: string;
+    key: string | null;
+    systemKey: string | null;
+    name: string;
+    description: string | null;
+    icon: string | null;
+    parent: string | null;
+    adminAccess: boolean;
+    appAccess: boolean;
+}
+interface AccessExportPolicy {
+    ref: string;
+    key: string | null;
+    name: string;
+    icon: string | null;
+    description: string | null;
+    adminAccess: boolean;
+    appAccess: boolean;
+    enforceTfa: boolean;
+    ipAllow: string[];
+    ipDeny: string[];
+    validFrom: string | null;
+    validUntil: string | null;
+    rules: Record<string, unknown>;
+    permissions: AccessExportPermission[];
+}
+interface AccessExportPermission {
+    collection: string;
+    action: PermissionAction;
+    permissions: Record<string, unknown>;
+    validation: Record<string, unknown>;
+    presets: Record<string, unknown>;
+    fields: string[];
+}
+interface AccessExportBindings {
+    rolePolicies: Array<{
+        role: string;
+        policy: string;
+        priority: number;
+    }>;
+    userRoles: Array<{
+        userId: string;
+        role: string;
+        primary: boolean;
+    }>;
+    userPolicies: Array<{
+        userId: string;
+        policy: string;
+        priority: number;
+    }>;
+    apiKeyRoles: Array<{
+        apiKey: string;
+        role: string;
+        priority: number;
+    }>;
+    apiKeyPolicies: Array<{
+        apiKey: string;
+        policy: string;
+        priority: number;
+    }>;
+}
+interface AccessExportApiKey {
+    ref: string;
+    name: string;
+    description: string | null;
+    prefix: string;
+    expiresAt: string | null;
+    revokedAt: string | null;
+    metadata: Record<string, unknown>;
+}
+interface AccessImportIssue {
+    code: string;
+    message: string;
+    path?: string;
+}
+interface AccessImportDiffEntry {
+    ref: string;
+    status: "create" | "update" | "unchanged" | "delete";
+}
+interface AccessImportDiffSection {
+    create: number;
+    update: number;
+    unchanged: number;
+    delete: number;
+    entries: AccessImportDiffEntry[];
+}
+interface AccessImportDiff {
+    roles: AccessImportDiffSection;
+    policies: AccessImportDiffSection;
+    apiKeys: AccessImportDiffSection;
+    bindings: {
+        rolePolicies: AccessImportDiffSection;
+        userRoles: AccessImportDiffSection;
+        userPolicies: AccessImportDiffSection;
+        apiKeyRoles: AccessImportDiffSection;
+        apiKeyPolicies: AccessImportDiffSection;
+    };
+}
+interface AccessImportDryRunResult {
+    dryRun: true;
+    valid: boolean;
+    errors: AccessImportIssue[];
+    diff: AccessImportDiff;
+    conflicts: AccessConflictReport;
+}
+interface AccessImportSummary {
+    mode: AccessImportMode;
+    roles: AccessImportDiffSection;
+    policies: AccessImportDiffSection;
+    apiKeys: AccessImportDiffSection;
+    bindings: AccessImportDiff["bindings"];
+}
+interface AccessImportApplyResult extends Omit<AccessImportDryRunResult, "dryRun"> {
+    dryRun: false;
+    mode: AccessImportMode;
+    applied: boolean;
+    audit: {
+        event: "access_import_applied";
+        summary: AccessImportSummary;
+    };
+}
+interface AccessImportOptions {
+    mode?: AccessImportMode;
+}
+interface ApiKeyResource {
+    id: string;
+    siteId: string;
+    name: string;
+    description: string | null;
+    prefix: string;
+    createdBy: string | null;
+    rotatedAt: string | null;
+    rotatedBy: string | null;
+    expiresAt: string | null;
+    revokedAt: string | null;
+    revokedBy: string | null;
+    lastUsedAt: string | null;
+    lastUsedIp: string | null;
+    lastUsedUserAgent: string | null;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+    roles: Array<{
+        roleId: string;
+        priority: number;
+    }>;
+    policies: Array<{
+        policyId: string;
+        priority: number;
+    }>;
+}
+interface ApiKeyCreateInput {
+    name: string;
+    description?: string;
+    expiresAt?: string | Date | null;
+    metadata?: Record<string, unknown>;
+}
+interface ApiKeyRotateInput {
+    expiresAt?: string | Date | null;
+}
+interface ApiKeySecretResult extends ApiKeyResource {
+    /** Plaintext token. Returned only by create/rotate responses. */
+    token: string;
+}
+interface ApiKeyRoleAttachment {
+    apiKeyId: string;
+    siteId: string;
+    roleId: string;
+    priority: number;
+    createdAt?: string;
+}
+interface ApiKeyPolicyAttachment {
+    apiKeyId: string;
+    siteId: string;
+    policyId: string;
+    priority: number;
+    createdAt?: string;
+}
+interface ShareResource {
+    id: string;
+    siteId: string;
+    collection: string;
+    itemId: string;
+    roleId: string;
+    validFrom: string | null;
+    validUntil: string | null;
+    maxUses: number | null;
+    usedCount: number;
+    revokedAt: string | null;
+    revokedBy: string | null;
+    createdBy: string | null;
+    lastUsedAt: string | null;
+    createdAt: string;
+}
+interface ShareCreateInput {
+    collection: string;
+    itemId: string;
+    roleId: string;
+    password?: string;
+    validFrom?: string | Date | null;
+    validUntil?: string | Date | null;
+    maxUses?: number | null;
+}
+interface ShareSecretResult extends ShareResource {
+    token: string;
+    url: string;
+}
+interface PresetResource {
+    id: string;
+    siteId: string;
+    bookmark: string | null;
+    collection: string;
+    userId: string | null;
+    roleId: string | null;
+    layout: string;
+    layoutQuery: Record<string, unknown>;
+    layoutOptions: Record<string, unknown>;
+    search: string | null;
+    filter: Record<string, unknown>;
+    icon: string | null;
+    color: string | null;
+    refreshInterval: number;
+    createdAt: string;
+}
+interface TranslationResource {
+    id: string;
+    siteId: string;
+    language: string;
+    namespace: string;
+    key: string;
+    value: string;
+    status: string;
+    updatedAt: string;
+}
+interface SettingResource {
+    id: string;
+    siteId: string;
+    key: string;
+    value: Record<string, unknown>;
+    scope: string;
+    updatedAt: string;
+}
+/** Site (tenant) configuration row — identity, branding and theme defaults. */
+interface SiteResource {
+    id: string;
+    name: string;
+    domain: string | null;
+    displayTitle: string | null;
+    siteUrl: string | null;
+    descriptor: string | null;
+    defaultLanguage: string;
+    defaultAppearance: string;
+    branding: {
+        logoUrl?: string;
+        faviconUrl?: string;
+        brandColor?: string;
+    };
+    themeOverrides: {
+        light?: Record<string, string>;
+        dark?: Record<string, string>;
+    };
+    customCss: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** PATCH payload for `/api/v1/site`; every field optional. */
+type SiteConfigUpdate = Partial<Omit<SiteResource, 'id' | 'createdAt' | 'updatedAt'>>;
+type CdcConnectorType = "debezium_kafka" | "materialized_engine" | "airbyte";
+type CdcPipelineStatus = "active" | "paused" | "error" | "provisioning";
+type CdcDeploymentTarget = "docker_compose" | "cloudflare_workers";
+type CdcDeploymentStatus = "pending" | "running" | "completed" | "failed" | "rolled_back";
+interface CdcPipelineResource {
+    id: string;
+    siteId: string;
+    pipelineName: string;
+    connectorType: CdcConnectorType;
+    status: CdcPipelineStatus;
+    statusMessage: string | null;
+    replicationTables: string[];
+    config: Record<string, unknown>;
+    lastSyncAt: string | null;
+    lastSyncRecordCount: number | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface CdcPipelineCreateInput {
+    pipeline_name: string;
+    cdc_connector_type: CdcConnectorType;
+    source_database_connection: string;
+    clickhouse_sink_connection: string;
+    replication_tables: string[];
+    intermediary_connection?: string;
+    config?: Record<string, unknown>;
+}
+interface CdcPipelinePatchInput {
+    pipeline_name?: string;
+    source_database_connection?: string;
+    clickhouse_sink_connection?: string;
+    intermediary_connection?: string | null;
+    replication_tables?: string[];
+    config?: Record<string, unknown>;
+}
+interface CdcHealthCheckResult {
+    healthy: boolean;
+    latencyMs?: number;
+    error?: string;
+    details?: Record<string, unknown>;
+}
+interface CdcPipelineMetrics {
+    pipelineId?: string;
+    replicationLagMs: number;
+    eventsPerSecond: number;
+    errorCount: number;
+    lastEventAt?: string | null;
+    status?: string;
+}
+interface CdcHealthMetricEntry {
+    pipelineId: string;
+    replicationLagMs: number;
+    eventsPerSecond: number;
+    errorCount: number;
+    recordedAt: string;
+}
+interface CdcDeploymentStep {
+    id?: string;
+    name: string;
+    status: string;
+    startedAt?: string;
+    completedAt?: string;
+    error?: string | Record<string, unknown>;
+    [key: string]: unknown;
+}
+interface CdcDeploymentResult {
+    deploymentId: string;
+    status: CdcDeploymentStatus;
+    steps: CdcDeploymentStep[];
+    completedAt: string;
+    error?: {
+        code?: string;
+        description?: string;
+        [key: string]: unknown;
+    };
+}
+interface CdcDeployInput {
+    approach: CdcConnectorType;
+    target: CdcDeploymentTarget;
+    pipeline_id?: string;
+    env?: Record<string, string>;
+}
+interface CdcValidateEnvInput {
+    approach: CdcConnectorType;
+    target: CdcDeploymentTarget;
+    env: Record<string, string>;
+}
+interface CdcEnvValidationResult {
+    valid: boolean;
+    invalidFields: Array<{
+        key: string;
+        reason: string;
+    }>;
+}
+interface CdcRollbackResult {
+    deploymentId: string;
+    status: CdcDeploymentStatus;
+    steps: CdcDeploymentStep[];
+    rolledBackAt?: string;
+    error?: string | Record<string, unknown>;
+}
+interface UserResource {
+    id: string;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    avatar: string | null;
+    status: string;
+    lastSeenAt: string | null;
+    roleId: string | null;
+    joinedAt: string;
+}
+interface TeamResource {
+    id: string;
+    siteId: string;
+    name: string;
+    description: string | null;
+    createdAt: string;
+}
+interface TeamMemberResource {
+    teamId: string;
+    userId: string;
+    addedAt: string;
+}
+interface FolderResource {
+    id: string;
+    siteId: string;
+    name: string;
+    parent: string | null;
+    createdAt: string;
+}
+interface FileResource {
+    id: string;
+    siteId: string;
+    storage: string;
+    filenameDisk: string;
+    filenameDownload: string;
+    mime: string;
+    filesize: number;
+    width: number | null;
+    height: number | null;
+    duration: number | null;
+    folder: string | null;
+    metadata: Record<string, unknown>;
+    uploadedBy: string | null;
+    createdAt: string;
+}
+interface WebhookResource {
+    id: string;
+    siteId: string;
+    name: string;
+    url: string;
+    actions: string[];
+    collections: string[];
+    headers: Record<string, string>;
+    status: string;
+    secret: string | null;
+    createdAt: string;
+}
+interface ActivityResource {
+    id: string;
+    siteId: string;
+    action: string;
+    userId: string | null;
+    collection: string | null;
+    itemId: string | null;
+    ip: string | null;
+    userAgent: string | null;
+    comment: string | null;
+    payload: Record<string, unknown>;
+    createdAt: string;
+}
+interface ExtensionResource {
+    id: string;
+    siteId: string | null;
+    key: string | null;
+    name: string;
+    version: string;
+    type: string;
+    enabled: boolean;
+    bundleUrl: string;
+    manifest: Record<string, unknown>;
+    capabilities: string[];
+    installedBy: string | null;
+    installedAt: string;
+}
+type AIChatStatus = "executed" | "pending_approval" | "denied";
+interface AIChatResponse {
+    status: AIChatStatus;
+    message: string;
+    conversationId: string;
+    pendingId: string | null;
+    result: Record<string, unknown> | null;
+}
+interface AIConversation {
+    id: string;
+    siteId: string;
+    userId: string | null;
+    title: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface AIMessage {
+    id: string;
+    conversationId: string;
+    role: "user" | "assistant" | "system";
+    content: string;
+    toolCalls: Array<Record<string, unknown>> | null;
+    metadata: Record<string, unknown> | null;
+    createdAt: string;
+}
+type AIApprovalStatus = "pending" | "approved" | "rejected";
+interface AIApproval {
+    id: string;
+    siteId: string;
+    userId: string | null;
+    conversationId: string | null;
+    toolName: string;
+    toolArgs: Record<string, unknown>;
+    status: AIApprovalStatus;
+    decidedBy: string | null;
+    decidedAt: string | null;
+    createdAt: string;
+}
+interface AIFieldSuggestion {
+    type: string;
+    interface: string;
+    confidence: number;
+}
+interface AIContentAssistResult {
+    content: string;
+    tokensUsed: number;
+}
+interface FlowNode {
+    id: string;
+    key: string;
+    options?: Record<string, unknown>;
+    next?: string | null;
+    onError?: string | null;
+}
+interface FlowGraph {
+    entry?: string | null;
+    nodes: FlowNode[];
+}
+type FlowStatus = "active" | "inactive" | "draft";
+type FlowTriggerType = "webhook" | "event" | "schedule" | "manual";
+interface FlowResource {
+    id: string;
+    siteId: string;
+    name: string;
+    description: string | null;
+    status: FlowStatus;
+    triggerType: FlowTriggerType;
+    triggerOptions: Record<string, unknown>;
+    graph: FlowGraph;
+    createdAt: string;
+    updatedAt: string;
+}
+type FlowRunStatus = "running" | "success" | "error";
+interface FlowRun {
+    id: string;
+    flowId: string;
+    siteId: string;
+    status: FlowRunStatus;
+    input: Record<string, unknown>;
+    steps: Array<Record<string, unknown>>;
+    error: string | null;
+    startedAt: string;
+    finishedAt: string | null;
+}
+interface FlowRunResult {
+    runId: string;
+    status: "success" | "error";
+    steps: Array<Record<string, unknown>>;
+    error: string | null;
+}
+interface MarketplaceExtension {
+    id: string;
+    name: string;
+    slug: string;
+    version: string;
+    type: string;
+    bundleUrl: string;
+    /** Base64-encoded Ed25519 detached signature of SHA-256(bundle). */
+    signature: string;
+    keyId: string;
+    manifest: Record<string, unknown>;
+    capabilities: string[];
+    publishedAt: string;
+    verified: boolean;
+}
+interface ListMarketplaceExtensionsParams {
+    type?: string;
+    search?: string;
+    limit?: number;
+    offset?: number;
+}
+interface MarketplaceListResponse {
+    data: MarketplaceExtension[];
+    meta: {
+        total: number;
+        limit: number;
+        offset: number;
+    };
+}
+type MaterializeRefreshStrategy = "auto" | "cron" | "manual";
+interface MaterializeProjection {
+    fields: string[];
+    orderBy?: string | null;
+}
+interface MaterializedCollection {
+    id: string;
+    siteId: string;
+    collection: string;
+    target: string;
+    refreshStrategy: MaterializeRefreshStrategy;
+    refreshCron: string | null;
+    projection: MaterializeProjection;
+    filter: Record<string, unknown>;
+    lastRefreshedAt: string | null;
+    rowCount: number | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface MaterializeRefreshResult {
+    rowsInserted: number;
+    refreshedAt: string;
+}
+interface MaterializeDataResponse {
+    data: Array<Record<string, unknown>>;
+    meta: {
+        total: number;
+        limit: number;
+        offset: number;
+    };
+}
+interface SCIMTokenMeta {
+    id: string;
+    label: string;
+    createdBy: string;
+    expiresAt: string | null;
+    lastUsedAt: string | null;
+    createdAt: string;
+}
+interface SCIMTokenCreated extends SCIMTokenMeta {
+    /** Raw bearer token — returned exactly once in plaintext. Store immediately. */
+    token: string;
+}
+interface SCIMTokenRotated extends SCIMTokenCreated {
+    /** Old token continues to accept requests until this ISO-8601 timestamp (24h grace). */
+    oldTokenGraceExpiresAt: string;
+}
+interface CreateSCIMTokenParams {
+    label: string;
+    /** Number of days until expiry. Default: 90. Max: 365. */
+    lifespanDays?: number;
+}
+
+/**
+ * LumiBase JS SDK
+ * Composable Client Architecture
+ */
+
+interface LumiClientOptions {
+    /** Base URL of the API, e.g. `http://127.0.0.1:1989` or `https://api.lumibase.dev`. */
+    url: string;
+    /** Bearer token (Logto access token, or `dev:<logtoId>` in dev mode). */
+    token: string;
+    /** Active tenant id. Sent as `X-Lumi-Site`. */
+    siteId: string;
+    /** Override fetch (Node/Workers polyfills). Defaults to `globalThis.fetch`. */
+    fetcher?: typeof fetch;
+    /** Additional headers sent with every request. */
+    headers?: Record<string, string>;
+    /**
+     * Invoked once whenever the server answers a request with `401
+     * Unauthorized` — i.e. the bearer token is missing, expired, or no
+     * longer valid for the resolved site/user. Fires before the `LumiError`
+     * is thrown so a host (e.g. Studio) can clear the stale token and route
+     * the operator back to the login screen. Errors thrown by the callback
+     * are swallowed so they never mask the original `LumiError`.
+     */
+    onUnauthorized?: () => void;
+}
+interface LumiResponse<T> {
+    data: T;
+    meta?: Record<string, unknown>;
+}
+interface LumiErrorBody {
+    errors: Array<{
+        code: string;
+        message: string;
+        path?: string | string[];
+        risk?: string;
+        trace?: unknown;
+        [key: string]: unknown;
+    }>;
+}
+declare class LumiError extends Error {
+    status: number;
+    body: LumiErrorBody | any;
+    constructor(status: number, body: LumiErrorBody | any);
+}
+interface LumiClient<TSchema extends DefaultSchema = DefaultSchema> {
+    url: string;
+    token: string;
+    siteId: string;
+    fetcher: typeof fetch;
+    rawRequest: <T>(path: string, init?: RequestInit) => Promise<LumiResponse<T>>;
+    request: <Output>(command: (client: LumiClient<TSchema>) => Promise<Output>) => Promise<Output>;
+    with: <Extension>(plugin: (client: LumiClient<TSchema>) => Extension) => LumiClient<TSchema> & Extension;
+}
+declare function createLumiClient<TSchema extends DefaultSchema = DefaultSchema>(opts: LumiClientOptions): LumiClient<TSchema>;
+
+/**
+ * RealtimeClient — typed WebSocket client for the LumiBase realtime API.
+ *
+ * Features:
+ * - subscribe/unsubscribe to collections
+ * - presence tracking (send + receive)
+ * - pong response to server heartbeat pings
+ * - automatic exponential-backoff reconnection
+ * - typed event callbacks
+ *
+ * Usage:
+ *   const rt = new RealtimeClient({ baseUrl, token, siteId });
+ *   rt.subscribe('posts', (event) => console.log(event));
+ *   rt.presence({ collection: 'posts', itemId: '123' });
+ *   rt.connect();
+ *   // ... later
+ *   rt.disconnect();
+ */
+interface RealtimeEvent {
+    type: 'event';
+    collection: string;
+    action: 'create' | 'update' | 'delete';
+    itemId: string;
+    payload: unknown;
+}
+interface PresenceEntry {
+    sessionId: string;
+    userId: string;
+    collection?: string;
+    itemId?: string;
+    meta?: Record<string, unknown>;
+    lastSeen: string;
+}
+type RealtimeEventCallback = (event: RealtimeEvent) => void;
+type PresenceCallback = (users: PresenceEntry[]) => void;
+interface RealtimeClientOptions {
+    /** Base HTTP URL of the CMS (e.g. https://cms.example.com). wss:// prefix is derived automatically. */
+    baseUrl: string;
+    /** Bearer token passed as ?token= query param (WS handshake cannot carry Authorization headers in browsers). */
+    token: string;
+    /** Site ID forwarded to the SiteRoom DO. */
+    siteId: string;
+    /** Optional user ID included in presence meta. */
+    userId?: string;
+    /** Initial backoff in milliseconds. Default: 1000. */
+    initialBackoffMs?: number;
+    /** Maximum backoff in milliseconds. Default: 30000. */
+    maxBackoffMs?: number;
+}
+declare class RealtimeClient {
+    private readonly opts;
+    private ws;
+    private readonly subscriptions;
+    private presenceListeners;
+    private currentPresence;
+    private sessionId;
+    private reconnectTimeout;
+    private backoffMs;
+    private stopped;
+    constructor(opts: RealtimeClientOptions);
+    /** Open the WebSocket connection. Safe to call multiple times. */
+    connect(): this;
+    /** Close the WebSocket and stop reconnect attempts. */
+    disconnect(): void;
+    /**
+     * Subscribe to item mutation events for a specific collection.
+     * Multiple handlers per collection are supported.
+     *
+     * @returns Unsubscribe function.
+     */
+    subscribe(collection: string, callback: RealtimeEventCallback): () => void;
+    /** Remove a specific handler from a collection subscription. */
+    unsubscribe(collection: string, callback: RealtimeEventCallback): void;
+    /** Update the current user's presence. Sent immediately and on reconnect. */
+    presence(opts: {
+        collection?: string;
+        itemId?: string;
+        meta?: Record<string, unknown>;
+    }): void;
+    /** Register a callback for peer presence updates. */
+    onPresence(callback: PresenceCallback): () => void;
+    /** Returns the current session ID assigned by the server after connection. */
+    get session(): string | null;
+    /** Whether the WebSocket is currently OPEN. */
+    get isConnected(): boolean;
+    private _connect;
+    private _handleMessage;
+    private _scheduleReconnect;
+    private _send;
+    private _sendRaw;
+}
+
+declare function legacyRest(): <TSchema extends DefaultSchema>(client: LumiClient<TSchema>) => {
+    schema: {
+        collections: {
+            list: () => Promise<LumiResponse<CollectionResource[]>>;
+            get: (name: string) => Promise<LumiResponse<CollectionResource>>;
+            compiled: (name: string) => Promise<LumiResponse<CollectionResource>>;
+            create: (input: CollectionInput) => Promise<LumiResponse<CollectionResource>>;
+            update: (name: string, patch: Partial<CollectionInput>) => Promise<LumiResponse<CollectionResource>>;
+            delete: (name: string) => Promise<LumiResponse<null>>;
+        };
+        fields: {
+            list: (collectionName: string) => Promise<LumiResponse<FieldResource[]>>;
+            upsert: (collectionName: string, fieldName: string, input: FieldInput) => Promise<LumiResponse<FieldResource>>;
+            create: (collectionName: string, input: FieldInput) => Promise<LumiResponse<FieldResource>>;
+            update: (collectionName: string, fieldName: string, input: FieldInput) => Promise<LumiResponse<FieldResource>>;
+            rename: (collectionName: string, fromFieldName: string, toFieldName: string, input: FieldRenameInput) => Promise<LumiResponse<FieldResource>>;
+            delete: (collectionName: string, fieldName: string, options?: FieldDeleteOptions) => Promise<LumiResponse<null>>;
+        };
+        relations: {
+            list: () => Promise<LumiResponse<RelationResource[]>>;
+            create: (input: RelationInput) => Promise<LumiResponse<RelationResource>>;
+            delete: (id: string) => Promise<LumiResponse<null>>;
+        };
+        diff: (name: string, proposed: SchemaApplyInput) => Promise<LumiResponse<SchemaDiff>>;
+        diffInput: (input: SchemaDiffInput) => Promise<LumiResponse<SchemaDiff>>;
+        apply: (name: string, proposed: SchemaApplyInput) => Promise<LumiResponse<SchemaApplyResult>>;
+        typegen: (filters?: TypegenSchemaFilters) => Promise<LumiResponse<unknown>>;
+        listCollections: () => Promise<LumiResponse<CollectionResource[]>>;
+        getCollection: (name: string) => Promise<LumiResponse<CollectionResource>>;
+        getCompiled: (name: string) => Promise<LumiResponse<CollectionResource>>;
+        createCollection: (input: CollectionInput) => Promise<LumiResponse<CollectionResource>>;
+        updateCollection: (name: string, patch: Partial<CollectionInput>) => Promise<LumiResponse<CollectionResource>>;
+        deleteCollection: (name: string) => Promise<LumiResponse<null>>;
+        listFields: (collectionName: string) => Promise<LumiResponse<FieldResource[]>>;
+        upsertField: (collectionName: string, fieldName: string, input: FieldInput) => Promise<LumiResponse<FieldResource>>;
+        deleteField: (collectionName: string, fieldName: string, options?: FieldDeleteOptions) => Promise<LumiResponse<null>>;
+        listRelations: () => Promise<LumiResponse<RelationResource[]>>;
+        createRelation: (input: RelationInput) => Promise<LumiResponse<RelationResource>>;
+        deleteRelation: (id: string) => Promise<LumiResponse<null>>;
+    };
+    items: <TName extends keyof TSchema & string>(name: TName) => {
+        list: (params?: ListItemsParams) => Promise<ListItemsResponse<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>>;
+        detail: (id: string, fields?: string[]) => Promise<LumiResponse<ItemRow<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>>>;
+        create: (input: {
+            data: Partial<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>;
+            status?: string;
+            sort?: number;
+            /** ISO timestamps for content scheduling (Publish_Window). */
+            publishAt?: string | null;
+            unpublishAt?: string | null;
+        }) => Promise<LumiResponse<ItemRow<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>>>;
+        patch: (id: string, input: {
+            data?: Partial<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>;
+            status?: string;
+            sort?: number;
+            /** ISO timestamps for content scheduling (Publish_Window). */
+            publishAt?: string | null;
+            unpublishAt?: string | null;
+        }) => Promise<LumiResponse<ItemRow<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>>>;
+        replace: (id: string, input: {
+            data: TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>;
+            status?: string;
+            sort?: number;
+        }) => Promise<LumiResponse<ItemRow<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+        bulk: (op: "create" | "update" | "delete", payload: Array<Record<string, unknown>>) => Promise<LumiResponse<ItemRow<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>[]>>;
+        listRevisions: (id: string) => Promise<LumiResponse<RevisionRow[]>>;
+        revertRevision: (id: string, revisionId: string) => Promise<LumiResponse<ItemRow<TSchema[TName] extends Record<string, unknown> ? TSchema[TName] : Record<string, unknown>>>>;
+        listPins: (id: string) => Promise<LumiResponse<{
+            pinnedFields: string[];
+        }>>;
+        releasePin: (id: string, field: string) => Promise<LumiResponse<{
+            pinnedFields: string[];
+        }>>;
+    };
+    roles: {
+        list: () => Promise<LumiResponse<RoleResource[]>>;
+        detail: (id: string) => Promise<LumiResponse<RoleDetail>>;
+        create: (input: Partial<RoleResource> & {
+            name: string;
+        }) => Promise<LumiResponse<RoleResource>>;
+        update: (id: string, patch: Partial<RoleResource>) => Promise<LumiResponse<RoleResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+        attachPolicy: (id: string, input: {
+            policyId: string;
+            priority?: number;
+            overrideWarnings?: boolean;
+        }) => Promise<LumiResponse<{
+            roleId: string;
+            policyId: string;
+            priority: number;
+        }>>;
+        detachPolicy: (id: string, policyId: string) => Promise<LumiResponse<null>>;
+        assignUser: (id: string, input: {
+            userId: string;
+        }) => Promise<LumiResponse<{
+            userId: string;
+            siteId: string;
+            roleId: string;
+        }>>;
+        removeUser: (id: string, userId: string) => Promise<LumiResponse<null>>;
+    };
+    policies: {
+        list: () => Promise<LumiResponse<PolicyResource[]>>;
+        detail: (id: string) => Promise<LumiResponse<PolicyDetail>>;
+        create: (input: Partial<PolicyResource> & {
+            name: string;
+        }) => Promise<LumiResponse<PolicyResource>>;
+        update: (id: string, patch: Partial<PolicyResource>) => Promise<LumiResponse<PolicyResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+        addPermission: (id: string, input: {
+            collection: string;
+            action: PermissionAction;
+            permissions?: Record<string, unknown>;
+            validation?: Record<string, unknown>;
+            presets?: Record<string, unknown>;
+            fields?: string[];
+        }) => Promise<LumiResponse<PermissionRow>>;
+        patchPermission: (id: string, permId: string, patch: Partial<PermissionRow>) => Promise<LumiResponse<PermissionRow>>;
+        removePermission: (id: string, permId: string) => Promise<LumiResponse<null>>;
+        attachUser: (id: string, input: {
+            userId: string;
+            priority?: number;
+        }) => Promise<LumiResponse<{
+            userId: string;
+            policyId: string;
+            priority: number;
+        }>>;
+        detachUser: (id: string, userId: string) => Promise<LumiResponse<null>>;
+    };
+    access: {
+        checkConflicts: (input: AccessConflictCheckInput) => Promise<LumiResponse<AccessConflictReport>>;
+        exportManifest: () => Promise<LumiResponse<AccessExportManifest>>;
+        dryRunImport: (manifest: AccessExportManifest) => Promise<LumiResponse<AccessImportDryRunResult>>;
+        importManifest: (manifest: AccessExportManifest, options?: AccessImportOptions) => Promise<LumiResponse<AccessImportApplyResult>>;
+    };
+    apiKeys: {
+        list: () => Promise<LumiResponse<ApiKeyResource[]>>;
+        get: (id: string) => Promise<LumiResponse<ApiKeyResource>>;
+        create: (input: ApiKeyCreateInput) => Promise<LumiResponse<ApiKeySecretResult>>;
+        rotate: (id: string, input?: ApiKeyRotateInput) => Promise<LumiResponse<ApiKeySecretResult>>;
+        revoke: (id: string) => Promise<LumiResponse<ApiKeyResource>>;
+        attachRole: (id: string, input: {
+            roleId: string;
+            priority?: number;
+            overrideWarnings?: boolean;
+        }) => Promise<LumiResponse<ApiKeyRoleAttachment>>;
+        detachRole: (id: string, roleId: string) => Promise<LumiResponse<null>>;
+        attachPolicy: (id: string, input: {
+            policyId: string;
+            priority?: number;
+            overrideWarnings?: boolean;
+        }) => Promise<LumiResponse<ApiKeyPolicyAttachment>>;
+        detachPolicy: (id: string, policyId: string) => Promise<LumiResponse<null>>;
+        previewConflicts: (id: string, input: Omit<AccessConflictCheckInput, "target">) => Promise<LumiResponse<AccessConflictReport>>;
+    };
+    shares: {
+        create: (input: ShareCreateInput) => Promise<LumiResponse<ShareSecretResult>>;
+        revoke: (id: string) => Promise<LumiResponse<ShareResource>>;
+    };
+    permissions: {
+        me: () => Promise<LumiResponse<PermissionBundle>>;
+        check: (input: {
+            collection: string;
+            action: PermissionAction;
+            item?: Record<string, unknown>;
+        }) => Promise<LumiResponse<PermissionCheckResult>>;
+    };
+    presets: {
+        list: (collection?: string) => Promise<LumiResponse<PresetResource[]>>;
+        get: (id: string) => Promise<LumiResponse<PresetResource>>;
+        create: (input: Partial<PresetResource> & {
+            collection: string;
+        }) => Promise<LumiResponse<PresetResource>>;
+        update: (id: string, patch: Partial<PresetResource>) => Promise<LumiResponse<PresetResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+    };
+    translations: {
+        list: (params?: {
+            namespace?: string;
+            language?: string;
+        }) => Promise<LumiResponse<TranslationResource[]>>;
+        get: (id: string) => Promise<LumiResponse<TranslationResource>>;
+        create: (input: Partial<TranslationResource> & {
+            language: string;
+            namespace: string;
+            key: string;
+            value: string;
+        }) => Promise<LumiResponse<TranslationResource>>;
+        update: (id: string, patch: Partial<TranslationResource>) => Promise<LumiResponse<TranslationResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+    };
+    settings: {
+        list: (scope?: string) => Promise<LumiResponse<SettingResource[]>>;
+        get: (key: string) => Promise<LumiResponse<SettingResource>>;
+        set: (key: string, value: Record<string, unknown>, scope?: string) => Promise<LumiResponse<SettingResource>>;
+        delete: (key: string) => Promise<LumiResponse<null>>;
+    };
+    site: {
+        get: () => Promise<LumiResponse<SiteResource>>;
+        update: (patch: SiteConfigUpdate) => Promise<LumiResponse<SiteResource>>;
+    };
+    users: {
+        list: () => Promise<LumiResponse<UserResource[]>>;
+        get: (id: string) => Promise<LumiResponse<UserResource>>;
+        invite: (input: {
+            email: string;
+            roleId?: string;
+        }) => Promise<LumiResponse<UserResource>>;
+        update: (id: string, patch: {
+            roleId?: string | null;
+            status?: string;
+        }) => Promise<LumiResponse<{
+            id: string;
+        }>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+        impersonate: (id: string) => Promise<LumiResponse<{
+            token: string;
+        }>>;
+    };
+    teams: {
+        list: () => Promise<LumiResponse<TeamResource[]>>;
+        get: (id: string) => Promise<LumiResponse<TeamResource>>;
+        create: (input: {
+            name: string;
+            description?: string;
+        }) => Promise<LumiResponse<TeamResource>>;
+        update: (id: string, patch: {
+            name?: string;
+            description?: string;
+        }) => Promise<LumiResponse<TeamResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+        members: {
+            list: (teamId: string) => Promise<LumiResponse<TeamMemberResource[]>>;
+            add: (teamId: string, userId: string) => Promise<LumiResponse<TeamMemberResource>>;
+            remove: (teamId: string, userId: string) => Promise<LumiResponse<null>>;
+        };
+    };
+    folders: {
+        list: () => Promise<LumiResponse<FolderResource[]>>;
+        create: (input: {
+            name: string;
+            parent?: string | null;
+        }) => Promise<LumiResponse<FolderResource>>;
+        update: (id: string, patch: {
+            name?: string;
+            parent?: string | null;
+        }) => Promise<LumiResponse<FolderResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+    };
+    files: {
+        list: () => Promise<LumiResponse<FileResource[]>>;
+        create: (input: Record<string, unknown>) => Promise<LumiResponse<FileResource>>;
+        update: (id: string, patch: Record<string, unknown>) => Promise<LumiResponse<FileResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+        getPresignedUrl: (filename: string) => Promise<LumiResponse<{
+            url: string;
+            method: string;
+            key: string;
+        }>>;
+    };
+    webhooks: {
+        list: () => Promise<LumiResponse<WebhookResource[]>>;
+        create: (input: Record<string, unknown>) => Promise<LumiResponse<WebhookResource>>;
+        update: (id: string, patch: Record<string, unknown>) => Promise<LumiResponse<WebhookResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+    };
+    activity: {
+        list: (params?: {
+            limit?: number;
+            offset?: number;
+        }) => Promise<LumiResponse<ActivityResource[]>>;
+    };
+    extensions: {
+        list: () => Promise<LumiResponse<ExtensionResource[]>>;
+        create: (input: Record<string, unknown>) => Promise<LumiResponse<ExtensionResource>>;
+        update: (id: string, patch: Record<string, unknown>) => Promise<LumiResponse<ExtensionResource>>;
+        delete: (id: string) => Promise<LumiResponse<null>>;
+    };
+    realtime: {
+        /**
+         * Create a RealtimeClient for the current site.
+         *
+         * @param token  Bearer token (or dev token) for the WS handshake.
+         * @param opts   Optional overrides (userId, backoff timing).
+         */
+        create: (token: string, opts?: {
+            userId?: string;
+            initialBackoffMs?: number;
+            maxBackoffMs?: number;
+        }) => RealtimeClient;
+        /** @deprecated Use .realtime.create() instead. */
+        connect: (siteId: string) => Promise<WebSocket>;
+    };
+    auth: {
+        me: () => Promise<LumiResponse<{
+            logtoId: string;
+            email?: string;
+            roles: string[];
+            siteId: string;
+        }>>;
+    };
+    _schemaType: TSchema;
+    request: <T>(path: string, init?: RequestInit) => Promise<LumiResponse<T>>;
+};
+
+declare function readItems<Schema extends DefaultSchema, Collection extends keyof Schema & string, Row = ItemRow<Schema[Collection] extends Record<string, unknown> ? Schema[Collection] : Record<string, unknown>>, ListResp = ListItemsResponse<Schema[Collection] extends Record<string, unknown> ? Schema[Collection] : Record<string, unknown>>>(collection: Collection, params?: ListItemsParams): (client: LumiClient<Schema>) => Promise<ListResp>;
+declare function readItem<Schema extends DefaultSchema, Collection extends keyof Schema & string, Row = ItemRow<Schema[Collection] extends Record<string, unknown> ? Schema[Collection] : Record<string, unknown>>>(collection: Collection, id: string, fields?: string[]): (client: LumiClient<Schema>) => Promise<Row>;
+declare function exportAccessManifest(): (client: LumiClient) => Promise<AccessExportManifest>;
+declare function dryRunAccessImport(manifest: AccessExportManifest): (client: LumiClient) => Promise<AccessImportDryRunResult>;
+declare function importAccessManifest(manifest: AccessExportManifest, options?: AccessImportOptions): (client: LumiClient) => Promise<AccessImportApplyResult>;
+declare function createCdcPipeline(input: CdcPipelineCreateInput): (client: LumiClient) => Promise<CdcPipelineResource>;
+declare function listCdcPipelines(): (client: LumiClient) => Promise<CdcPipelineResource[]>;
+declare function readCdcPipeline(id: string): (client: LumiClient) => Promise<CdcPipelineResource>;
+declare function updateCdcPipeline(id: string, input: CdcPipelinePatchInput): (client: LumiClient) => Promise<CdcPipelineResource>;
+declare function deleteCdcPipeline(id: string): (client: LumiClient) => Promise<{
+    deleted: boolean;
+    id: string;
+}>;
+declare function startCdcPipeline(id: string): (client: LumiClient) => Promise<CdcPipelineResource>;
+declare function stopCdcPipeline(id: string): (client: LumiClient) => Promise<CdcPipelineResource>;
+declare function checkCdcPipelineHealth(id: string): (client: LumiClient) => Promise<CdcHealthCheckResult>;
+declare function readCdcPipelineMetrics(id: string): (client: LumiClient) => Promise<CdcPipelineMetrics>;
+declare function readCdcPipelineMetricHistory(id: string, since?: string | Date): (client: LumiClient) => Promise<{
+    history: CdcHealthMetricEntry[];
+    since: string;
+}>;
+declare function deployCdc(input: CdcDeployInput): (client: LumiClient) => Promise<CdcDeploymentResult>;
+declare function validateCdcDeploymentEnv(input: CdcValidateEnvInput): (client: LumiClient) => Promise<CdcEnvValidationResult>;
+declare function rollbackCdcDeployment(id: string): (client: LumiClient) => Promise<CdcRollbackResult>;
+declare function listAgentGoals(): (client: LumiClient) => Promise<AgentGoalResource[]>;
+declare function createAgentGoal(input: AgentGoalCreateInput): (client: LumiClient) => Promise<AgentGoalResource>;
+declare function listAgentRuns(): (client: LumiClient) => Promise<AgentRunResource[]>;
+declare function retryAgentRun(id: string): (client: LumiClient) => Promise<{
+    goalId: string;
+    runId: string;
+    agentName: string;
+}>;
+declare function listAgentTools(): (client: LumiClient) => Promise<AgentToolResource[]>;
+declare function listAgentApprovals(): (client: LumiClient) => Promise<AgentApprovalResource[]>;
+declare function decideAgentApproval(id: string, decision: "approved" | "rejected", reason?: string): (client: LumiClient) => Promise<AgentApprovalResource>;
+declare function listAgentArtifacts(runId?: string): (client: LumiClient) => Promise<AgentArtifactResource[]>;
+declare function createAgentArtifact(input: AgentArtifactCreateInput): (client: LumiClient) => Promise<AgentArtifactResource>;
+declare function evaluateAgentArtifact(id: string, runId: string): (client: LumiClient) => Promise<AgentEvaluationResource>;
+declare function publishAgentArtifact(id: string, overrideReason?: string): (client: LumiClient) => Promise<AgentArtifactResource>;
+declare function rollbackAgentArtifact(id: string, reason?: string): (client: LumiClient) => Promise<AgentArtifactResource>;
+declare function readAgentMemoryContext(scope?: string, scopeId?: string): (client: LumiClient) => Promise<AgentMemoryContext>;
+declare function writeAgentMemory(input: AgentMemoryWriteInput): (client: LumiClient) => Promise<AgentMemoryContext["memories"][number]>;
+declare function generateAgentApp(input: AgentGenerateAppInput): (client: LumiClient) => Promise<AgentGenerateAppResult>;
+
+interface GraphQLExtension {
+    /** Executes a GraphQL document and returns the `data` payload. */
+    query: <T = unknown>(document: string, variables?: Record<string, unknown>) => Promise<T>;
+    /** Alias of `query` — semantic helper for mutations. */
+    mutate: <T = unknown>(document: string, variables?: Record<string, unknown>) => Promise<T>;
+}
+declare function graphql(endpoint?: string): (client: LumiClient) => GraphQLExtension;
+
+interface TypegenManifest {
+    version: number;
+    site: string;
+    collections: TypegenCollection[];
+}
+interface TypegenCollection {
+    name: string;
+    primaryKey: string;
+    primaryKeyField?: string;
+    primaryKeyType?: 'nanoid' | 'uuid' | 'integer' | 'bigInteger' | 'string';
+    fields: TypegenField[];
+    relations?: TypegenRelation[];
+}
+interface TypegenField {
+    name: string;
+    type: string;
+    required: boolean;
+    nullable: boolean;
+    readonly?: boolean;
+    generated?: boolean;
+    system?: boolean;
+    encrypted?: boolean;
+    primaryKey?: boolean;
+    branded?: string;
+    kind?: 'm2o' | 'o2m' | 'm2m' | 'm2a';
+    target?: string;
+    enum?: string[];
+}
+interface TypegenRelation {
+    field: string;
+    kind: 'm2o' | 'o2m' | 'm2m' | 'm2a';
+    target: string;
+    manyCollection?: string;
+    manyField?: string;
+    oneCollection?: string;
+    oneField?: string | null;
+    junctionCollection?: string | null;
+}
+
+interface GenerateOptions {
+    format?: 'single' | 'per-collection';
+    branded?: boolean;
+}
+declare function generateTypes(manifest: TypegenManifest, options?: GenerateOptions): string;
+
+/**
+ * SEO helpers for consuming the Delivery API's `_seo` block (Req 14.4).
+ *
+ * Use {@link toNextMetadata} inside a Next.js `generateMetadata` to map a
+ * delivery item's `_seo` into the framework's Metadata shape without
+ * re-deriving anything client-side.
+ */
+interface DeliverySeo {
+    title?: string;
+    description?: string;
+    canonical?: string;
+    openGraph?: Record<string, unknown>;
+    jsonLd?: Record<string, unknown>;
+}
+/** Extract the `_seo` block from a delivery item, if present. */
+declare function extractSeo(item: unknown): DeliverySeo | undefined;
+/**
+ * Map a delivery item's `_seo` to a Next.js `generateMetadata` return value.
+ * The shape is intentionally framework-agnostic (a plain object) so it does
+ * not create a hard dependency on `next`.
+ */
+declare function toNextMetadata(item: unknown): Record<string, unknown>;
+/**
+ * Render the JSON-LD block as a string suitable for a
+ * `<script type="application/ld+json">` tag.
+ */
+declare function jsonLdScript(item: unknown): string | undefined;
+
+export { ACCESS_EXPORT_SCHEMA, type AIApproval, type AIApprovalStatus, type AIChatResponse, type AIChatStatus, type AIContentAssistResult, type AIConversation, type AIFieldSuggestion, type AIMessage, type AccessConflict, type AccessConflictCheckInput, type AccessConflictReport, type AccessExportApiKey, type AccessExportBindings, type AccessExportManifest, type AccessExportPermission, type AccessExportPolicy, type AccessExportRole, type AccessImportApplyResult, type AccessImportDiff, type AccessImportDiffEntry, type AccessImportDiffSection, type AccessImportDryRunResult, type AccessImportIssue, type AccessImportMode, type AccessImportOptions, type AccessImportSummary, type ActivityResource, type AgentApprovalResource, type AgentArtifactCreateInput, type AgentArtifactResource, type AgentArtifactType, type AgentEvaluationResource, type AgentGenerateAppInput, type AgentGenerateAppResult, type AgentGoalCreateInput, type AgentGoalResource, type AgentMemoryContext, type AgentMemoryResource, type AgentMemoryWriteInput, type AgentRiskLevel, type AgentRunResource, type AgentToolResource, type ApiKeyCreateInput, type ApiKeyPolicyAttachment, type ApiKeyResource, type ApiKeyRoleAttachment, type ApiKeyRotateInput, type ApiKeySecretResult, type Brand, type CdcConnectorType, type CdcDeployInput, type CdcDeploymentResult, type CdcDeploymentStatus, type CdcDeploymentStep, type CdcDeploymentTarget, type CdcEnvValidationResult, type CdcHealthCheckResult, type CdcHealthMetricEntry, type CdcPipelineCreateInput, type CdcPipelineMetrics, type CdcPipelinePatchInput, type CdcPipelineResource, type CdcPipelineStatus, type CdcRollbackResult, type CdcValidateEnvInput, type CollectionInput, type CollectionResource, type CompiledPermission, type CreateSCIMTokenParams, type DefaultSchema, type DeliverySeo, type ExtensionResource, type FieldDeleteOptions, type FieldInput, type FieldMutationOptions, type FieldRenameInput, type FieldResource, type FileResource, type FlowGraph, type FlowNode, type FlowResource, type FlowRun, type FlowRunResult, type FlowRunStatus, type FlowStatus, type FlowTriggerType, type FolderResource, type GenerateOptions, type GraphQLExtension, type ID, type ItemFilter, type ItemFilterOp, type ItemRow, type ListItemsParams, type ListItemsResponse, type ListMarketplaceExtensionsParams, type Locale, type LumiClient, type LumiClientOptions, LumiError, type LumiErrorBody, type LumiResponse, type MarketplaceExtension, type MarketplaceListResponse, type MaterializeDataResponse, type MaterializeProjection, type MaterializeRefreshResult, type MaterializeRefreshStrategy, type MaterializedCollection, type PermissionAction, type PermissionBundle, type PermissionCheckResult, type PermissionRow, type PolicyDetail, type PolicyResource, type PresenceCallback, type PresenceEntry, type PresetResource, type PrimaryKeyType, RealtimeClient, type RealtimeEvent, type RealtimeEventCallback, type RelationInput, type RelationResource, type RelationType, type RevisionRow, type RoleDetail, type RoleResource, type SCIMTokenCreated, type SCIMTokenMeta, type SCIMTokenRotated, type SchemaApplyInput, type SchemaApplyResult, type SchemaChangedEvent, type SchemaDiff, type SchemaDiffEntry, type SchemaDiffInput, type SchemaDiffRisk, type SchemaRuntimeImpact, type SettingResource, type ShareCreateInput, type ShareResource, type ShareSecretResult, type SiteConfigUpdate, type SiteResource, type StorageMode, type TeamMemberResource, type TeamResource, type TranslationResource, type TypegenCollection, type TypegenField, type TypegenManifest, type TypegenRelation, type TypegenSchemaFilters, type UserResource, type WebhookResource, checkCdcPipelineHealth, createAgentArtifact, createAgentGoal, createCdcPipeline, createLumiClient, decideAgentApproval, deleteCdcPipeline, deployCdc, dryRunAccessImport, evaluateAgentArtifact, exportAccessManifest, extractSeo, generateAgentApp, generateTypes, graphql, importAccessManifest, jsonLdScript, legacyRest, listAgentApprovals, listAgentArtifacts, listAgentGoals, listAgentRuns, listAgentTools, listCdcPipelines, publishAgentArtifact, readAgentMemoryContext, readCdcPipeline, readCdcPipelineMetricHistory, readCdcPipelineMetrics, readItem, readItems, retryAgentRun, rollbackAgentArtifact, rollbackCdcDeployment, startCdcPipeline, stopCdcPipeline, toNextMetadata, updateCdcPipeline, validateCdcDeploymentEnv, writeAgentMemory };