@nivaro/sdk 0.1.4 → 0.1.5

package/dist/index.d.ts

@@ -9,7 +9,9 @@ interface Command<TResult> {
 /**
  * Administration commands: roles & policies (RBAC/RLS), user management +
  * delegation, CSV import jobs, throughput reporting, notification-subscription
- * admin views, extension/flow registries, mail test.
+ * admin views, extension/flow registries, mail test, Report Studio, pipeline
+ * template versions, metric alerts, scope dimensions, staged imports, access
+ * audits, coverage gaps, integration health.
  */
 
 interface Role {
@@ -124,6 +126,10 @@ declare function setMyDelegate(data: {
     delegate_id?: UUID | null;
     delegate_expires_at?: ISODate | null;
     is_out_of_office?: boolean;
+    /** Scheduled OOO window — the server's ooo-schedule cron flips the toggle
+     *  on entry and clears it after the window passes. */
+    ooo_start?: ISODate | null;
+    ooo_end?: ISODate | null;
 }): Command<{
     data: ManagedUser;
 }>;
@@ -670,8 +676,40 @@ interface ReportWidgetConfig {
     }>;
     /** type='query' widgets only. */
     query?: ReportQueryWidgetConfig;
+    /** Dual-axis second metric on value-dimension charts. */
+    metric2?: {
+        aggregate: 'count' | 'sum' | 'avg' | 'min' | 'max';
+        field?: string;
+        label?: string;
+    };
+    /** type='calc' widgets: formula over sibling widgets' derived metrics. */
+    formula?: string;
+    refs?: Record<string, UUID>;
+    /** Table widgets: value rules → cell/row tints. */
+    format_rules?: Array<{
+        field: string;
+        op: 'gt' | 'gte' | 'lt' | 'lte' | 'eq';
+        value: number;
+        color: string;
+        scope?: 'cell' | 'row';
+    }>;
+    /** KPI mini trend line under the number (needs date_field). */
+    sparkline?: boolean;
+    /** Heatmap column dimension (rows come from `dimension`). */
+    dimension2?: {
+        field: string;
+    } | null;
+    /** Line charts: shaded min/max band from the prior 4 same-length windows. */
+    benchmark?: boolean;
+    /** Narrative widgets: markdown-lite text with {{token}} value refs. */
+    text?: string;
+    /** Drill-to-report: clicking navigates to another report, carrying the value. */
+    link_report?: {
+        report_id: string;
+        filter_field?: string;
+    } | null;
 }
-type ReportWidgetType = 'kpi' | 'kpi_group' | 'bar' | 'line' | 'donut' | 'table' | 'divider' | 'query';
+type ReportWidgetType = 'kpi' | 'kpi_group' | 'bar' | 'line' | 'donut' | 'table' | 'divider' | 'query' | 'calc' | 'movers' | 'heatmap' | 'waterfall' | 'narrative';
 interface ReportWidget {
     id: UUID;
     type: ReportWidgetType;
@@ -724,6 +762,8 @@ interface ReportDef {
     widget_count?: number;
     widgets?: ReportWidget[];
     editable?: boolean;
+    folder?: string | null;
+    snapshot_schedule?: 'weekly' | 'monthly' | null;
     updated_at: ISODate;
 }
 interface ReportWidgetData {
@@ -736,7 +776,30 @@ interface ReportWidgetData {
         dim: string;
         value: number;
         prev?: number;
+        raw?: unknown;
+        value2?: number;
+        other?: boolean;
+        band?: [number, number];
+        band_avg?: number;
     }>;
+    spark?: Array<{
+        dim: string;
+        value: number;
+    }>;
+    cells?: Array<{
+        dim: string;
+        dim2: string;
+        value: number;
+    }>;
+    waterfall?: {
+        start: number;
+        end: number;
+        steps: Array<{
+            dim: string;
+            delta: number;
+        }>;
+    };
+    narrative?: string;
     tiles?: Array<{
         label: string;
         value: number | null;
@@ -938,25 +1001,804 @@ declare function resolveReportAlert(id: UUID, alertId: UUID): Command<{
         resolved: number;
     };
 }>;
-interface ReportAlertLogEntry {
+interface ReportAlertLogEntry {
+    id: number;
+    alert: UUID;
+    status: 'firing' | 'resolved';
+    metric_snapshot: Record<string, number> | null;
+    fired_at: ISODate;
+    resolved_at: ISODate | null;
+}
+declare function readReportAlertLog(id: UUID, alertId: UUID): Command<{
+    data: ReportAlertLogEntry[];
+}>;
+declare function toggleReportAlert(id: UUID, alertId: UUID, isActive: boolean): Command<{
+    data: {
+        updated: boolean;
+    };
+}>;
+declare function deleteReportAlert(id: UUID, alertId: UUID): Command<{
+    data: {
+        deleted: boolean;
+    };
+}>;
+/** Every alert's firing history for a report (newest first, capped 100). */
+declare function readReportAlertsLog(id: UUID): Command<{
+    data: ReportAlertLogEntry[];
+}>;
+/** Currently-firing alerts for a report — drives the report's red strip. */
+declare function readReportFiring(id: UUID): Command<{
+    data: Array<{
+        alert_id: UUID;
+        name: string;
+        widget: UUID;
+        since: ISODate;
+    }>;
+}>;
+interface ReportVersionEntry {
+    id: number;
+    version: number;
+    note: string | null;
+    created_at: ISODate;
+    created_by_name: string | null;
+}
+/** Config version history for a report (newest first, capped 30). */
+declare function listReportVersions(id: UUID): Command<{
+    data: ReportVersionEntry[];
+}>;
+/** Restore a config version. Id-preserving; captures a 'before restore' version first. */
+declare function restoreReportVersion(id: UUID, versionId: number): Command<{
+    data: Record<string, unknown>;
+}>;
+interface ReportSnapshotEntry {
+    id: number;
+    name: string;
+    taken_at: ISODate;
+}
+/** Point-in-time snapshots (one derived metric per widget) for vs-then deltas. */
+declare function listReportSnapshots(id: UUID): Command<{
+    data: ReportSnapshotEntry[];
+}>;
+/** Take a snapshot now, resolved as the caller with the report's own date range. */
+declare function createReportSnapshot(id: UUID, name?: string): Command<{
+    data: {
+        id: number;
+        name: string;
+    };
+}>;
+/** One snapshot with its per-widget values ({ widgetId: { value } }). */
+declare function readReportSnapshot(id: UUID, snapId: number): Command<{
+    data: ReportSnapshotEntry & {
+        data: Record<string, {
+            value: number | null;
+        }>;
+    };
+}>;
+declare function deleteReportSnapshot(id: UUID, snapId: number): Command<{
+    data: {
+        deleted: boolean;
+    };
+}>;
+interface ReportAnnotation {
+    id: number;
+    widget: UUID;
+    note: string;
+    /** 'YYYY-MM' or 'YYYY-MM-DD' bucket key — renders as a chart marker when it
+     *  matches a bucket. */
+    anchor_date: string | null;
+    created_at: ISODate;
+    created_by: UUID;
+    created_by_name: string | null;
+}
+declare function listReportAnnotations(id: UUID): Command<{
+    data: ReportAnnotation[];
+}>;
+declare function createReportAnnotation(id: UUID, body: {
+    widget: UUID;
+    note: string;
+    anchor_date?: string | null;
+}): Command<{
+    data: {
+        id: number;
+    };
+}>;
+/** Delete an annotation (own note, or anyone with edit access to the report). */
+declare function deleteReportAnnotation(id: UUID, annId: number): Command<{
+    data: {
+        deleted: boolean;
+    };
+}>;
+interface ReportTemplateEntry {
+    id: number;
+    name: string;
+    description: string | null;
+    created_at: ISODate;
+}
+/** Whole-report templates (global filters + widget set snapshots). */
+declare function listReportTemplates(): Command<{
+    data: ReportTemplateEntry[];
+}>;
+/** Snapshot a report's current config as a reusable template. */
+declare function saveReportTemplate(id: UUID, body?: {
+    name?: string;
+    description?: string;
+}): Command<{
+    data: {
+        id: number;
+        name: string;
+    };
+}>;
+/** Instantiate a new (private) report from a template. */
+declare function createReportFromTemplate(body: {
+    template_id: number;
+    name?: string;
+}): Command<{
+    data: {
+        id: UUID;
+    };
+}>;
+/** Delete a template (creator or admin). */
+declare function deleteReportTemplate(templateId: number): Command<{
+    data: {
+        deleted: boolean;
+    };
+}>;
+/** Copy a widget into another report (needs edit access to the target). */
+declare function copyReportWidget(id: UUID, widgetId: UUID, targetReportId: UUID): Command<{
+    data: {
+        id: UUID;
+        report: UUID;
+    };
+}>;
+/** Infer the record behind a query-widget row from its column values.
+ *  Resolved as the caller (RBAC/RLS apply); ambiguity is a miss. */
+declare function drillReportRow(values: Record<string, unknown>): Command<{
+    data: {
+        collection: string;
+        item_id: string;
+    } | {
+        resolved: false;
+    };
+}>;
+/** Per-report read stats from the throttled report-view activity log. Admin only. */
+declare function readReportUsage(): Command<{
+    data: Record<string, {
+        last_viewed: ISODate;
+        views_30d: number;
+        viewers_30d: number;
+    }>;
+}>;
+interface ReportWidgetPreset {
+    id: number;
+    name: string;
+    category: string;
+    description: string | null;
+    widget_type: ReportWidgetType;
+    config: ReportWidgetConfig | null;
+    w: number;
+    h: number;
+}
+/** Active prebuilt widget presets, ordered by category/sort/name. */
+declare function listReportWidgetPresets(): Command<{
+    data: ReportWidgetPreset[];
+}>;
+/** Add a preset to the catalog. Admin only. */
+declare function createReportWidgetPreset(body: {
+    name: string;
+    widget_type: ReportWidgetType;
+    category?: string;
+    description?: string | null;
+    config?: ReportWidgetConfig | null;
+    w?: number;
+    h?: number;
+    sort?: number;
+    is_active?: boolean;
+}): Command<{
+    data: {
+        ok: boolean;
+    };
+}>;
+/** Update a preset. Admin only. */
+declare function updateReportWidgetPreset(presetId: number, body: Partial<Omit<ReportWidgetPreset, 'id'>> & {
+    sort?: number;
+    is_active?: boolean;
+}): Command<{
+    data: {
+        ok: boolean;
+    };
+}>;
+/** Delete a preset. Admin only. */
+declare function deleteReportWidgetPreset(presetId: number): Command<{
+    data: {
+        ok: boolean;
+    };
+}>;
+interface PipelineVersionEntry {
+    id: number;
+    version: number;
+    note: string | null;
+    created_at: ISODate;
+    created_by_name: string | null;
+}
+/** Config snapshots for a workflow/pipeline template (newest first). Admin only. */
+declare function listPipelineVersions(templateId: string): Command<{
+    data: PipelineVersionEntry[];
+}>;
+/** One version with its parsed snapshot ({ template, states, transitions, bindings }). */
+declare function readPipelineVersion(templateId: string, versionId: number): Command<{
+    data: PipelineVersionEntry & {
+        snapshot: Record<string, unknown>;
+    };
+}>;
+/** Restore a template config version. Id-preserving — states/bindings are never
+ *  deleted; a 'before restore' version is captured first. Admin only. */
+declare function restorePipelineVersion(templateId: string, versionId: number): Command<{
+    data: Record<string, unknown>;
+}>;
+interface PipelineImpactResult {
+    state: {
+        id: string;
+        label: string | null;
+    };
+    evaluated: number;
+    truncated: boolean;
+    now_skipped: number;
+    now_required: number;
+    changes: Array<{
+        collection: string;
+        item: string;
+        current: boolean;
+        proposed: boolean;
+        proposed_reasons: string[];
+    }>;
+}
+/** Preview a proposed skip-criteria change against real records in active
+ *  instances — returns only records whose skip decision flips. Admin only. */
+declare function simulatePipelineImpact(templateId: string, body: {
+    state_id: string;
+    skip_criteria?: Record<string, unknown> | null;
+    skip_if_no_owners?: boolean;
+    limit?: number;
+}): Command<{
+    data: PipelineImpactResult;
+}>;
+interface ApprovalBrief {
+    entered_at: ISODate;
+    days_in_state: number;
+    revisions: number;
+    field_changes: Array<{
+        field: string;
+        old?: unknown;
+        new: unknown;
+    }>;
+    changed_total: number;
+    comments: number;
+    addendums: {
+        count: number;
+        cost_impact: number;
+    };
+    edited_by: string[];
+}
+/** What changed on a record since it entered its current state — the window an
+ *  approver is signing off on. Null when the record has no workflow instance. */
+declare function readApprovalBrief(collection: string, item: string | number): Command<{
+    data: ApprovalBrief | null;
+}>;
+/** Resolved owner display names per record id (one batched engine pass — feeds
+ *  browser Owners columns). Max 500 ids. */
+declare function readStateOwnersBatch(collection: string, ids: Array<string | number>): Command<{
+    data: Record<string, Array<{
+        id: string;
+        name: string;
+    }>>;
+}>;
+interface MetricDefinition {
+    id: number;
+    name: string;
+    description: string | null;
+    metric_key: string;
+    category: string;
+    unit: string;
+    default_operator: string;
+    default_threshold: number | null;
+    /** Admin callers only — omitted for everyone else. */
+    metric_source?: Record<string, unknown>;
+    supported_filters: unknown;
+    status: string;
+    sort: number | null;
+}
+interface MetricAlertRule {
+    id: number;
+    name: string;
+    definition_id: number;
+    operator: 'gt' | 'gte' | 'lt' | 'lte' | 'eq' | 'change_pct';
+    threshold_value: number;
+    filters: unknown;
+    check_frequency: 'hourly' | 'daily' | 'weekly';
+    is_shared: boolean;
+    status: 'active' | 'paused' | 'archived';
+    created_by: UUID;
+    /** Joined definition summary on list reads. */
+    definition?: {
+        id: number;
+        name: string;
+        description: string | null;
+        category: string;
+        unit: string;
+    };
+}
+interface MetricAlertSubscription {
+    id: number;
+    rule_id: number;
+    user: UUID;
+    delivery_in_app: boolean;
+    delivery_email: boolean;
+    digest_frequency: 'immediate' | 'daily' | 'weekly';
+    status: string;
+    rule_name?: string;
+    definition_name?: string;
+}
+/** The metric catalog (active only unless an admin passes all). */
+declare function listMetricDefinitions(options?: {
+    all?: boolean;
+}): Command<{
+    data: MetricDefinition[];
+}>;
+/** Rules visible to the caller (shared or own). */
+declare function listMetricAlertRules(): Command<{
+    data: MetricAlertRule[];
+}>;
+/** Create a rule (the creator is auto-subscribed, EFP behavior). */
+declare function createMetricAlertRule(body: {
+    name: string;
+    definition_id: number;
+    threshold_value: number;
+    operator?: MetricAlertRule['operator'];
+    filters?: unknown;
+    check_frequency?: MetricAlertRule['check_frequency'];
+    is_shared?: boolean;
+    status?: MetricAlertRule['status'];
+}): Command<{
+    data: MetricAlertRule;
+}>;
+/** Update an own rule (admins may edit any). */
+declare function updateMetricAlertRule(id: number, body: Partial<Omit<MetricAlertRule, 'id' | 'created_by' | 'definition'>>): Command<{
+    data: MetricAlertRule;
+}>;
+/** Delete an own rule. Note: responds { ok: true }, not a data envelope. */
+declare function deleteMetricAlertRule(id: number): Command<{
+    ok: boolean;
+}>;
+/** The caller's own subscriptions (with joined rule/definition summaries). */
+declare function listMetricAlertSubscriptions(): Command<{
+    data: MetricAlertSubscription[];
+}>;
+/** Subscribe to a shared (or own) rule — idempotent, returns the existing row. */
+declare function subscribeMetricAlert(body: {
+    rule_id: number;
+    delivery_in_app?: boolean;
+    delivery_email?: boolean;
+    digest_frequency?: MetricAlertSubscription['digest_frequency'];
+}): Command<{
+    data: MetricAlertSubscription;
+}>;
+declare function updateMetricAlertSubscription(id: number, body: {
+    delivery_in_app?: boolean;
+    delivery_email?: boolean;
+    digest_frequency?: MetricAlertSubscription['digest_frequency'];
+    status?: 'active' | 'paused';
+}): Command<{
+    data: MetricAlertSubscription;
+}>;
+/** Unsubscribe. Note: responds { ok: true }, not a data envelope. */
+declare function unsubscribeMetricAlert(id: number): Command<{
+    ok: boolean;
+}>;
+/** Firing log for rules the caller can see (newest first, cap 500). */
+declare function readMetricAlertLog(options?: {
+    limit?: number;
+}): Command<{
+    data: Array<Record<string, unknown>>;
+}>;
+interface AnomalyDefinition {
+    id: number;
+    key: string;
+    name: string;
+    description: string | null;
+    category: string;
+    /** Admin callers only. */
+    config?: Record<string, unknown>;
+    /** Public scope picker spec: [{key, label, collection?, value_field?, label_field?, sort?}] */
+    scope_options: unknown;
+    sensitivity_hints: unknown;
+    status: string;
+}
+interface AnomalyRule {
+    id: number;
+    name: string;
+    definition_id: number;
+    sensitivity: 'low' | 'medium' | 'high';
+    scopes: unknown;
+    check_frequency: 'daily' | 'weekly';
+    delivery_in_app: boolean;
+    delivery_email: boolean;
+    status: 'active' | 'paused';
+    created_by: UUID;
+    definition?: {
+        id: number;
+        key: string;
+        name: string;
+        description: string | null;
+    };
+}
+/** The anomaly detector catalog (active only unless an admin passes all). */
+declare function listAnomalyDefinitions(options?: {
+    all?: boolean;
+}): Command<{
+    data: AnomalyDefinition[];
+}>;
+declare function listAnomalyRules(): Command<{
+    data: AnomalyRule[];
+}>;
+declare function createAnomalyRule(body: {
+    name: string;
+    definition_id: number;
+    sensitivity?: AnomalyRule['sensitivity'];
+    scopes?: unknown;
+    check_frequency?: AnomalyRule['check_frequency'];
+    delivery_in_app?: boolean;
+    delivery_email?: boolean;
+    status?: AnomalyRule['status'];
+}): Command<{
+    data: AnomalyRule;
+}>;
+/** Update an own anomaly rule (admins may edit any). */
+declare function updateAnomalyRule(id: number, body: Partial<Omit<AnomalyRule, 'id' | 'created_by' | 'definition'>>): Command<{
+    data: AnomalyRule;
+}>;
+/** Delete an own anomaly rule. Note: responds { ok: true }, not a data envelope. */
+declare function deleteAnomalyRule(id: number): Command<{
+    ok: boolean;
+}>;
+/** Detection log (newest first, cap 500); stats_snapshot comes back parsed. */
+declare function readAnomalyLog(options?: {
+    limit?: number;
+}): Command<{
+    data: Array<Record<string, unknown>>;
+}>;
+/** Acknowledge or resolve a detection. */
+declare function updateAnomalyLogEntry(id: number, status: 'acknowledged' | 'resolved'): Command<{
+    data: Record<string, unknown>;
+}>;
+interface ScopeDimension {
+    id: number;
+    name: string;
+    label: string;
+    target_collection: string;
+    display_field: string | null;
+    options_sort: string | null;
+    overrides: Record<string, string[]> | null;
+    exclusions: string[] | null;
+    strict: boolean;
+    is_active: boolean;
+}
+/** The full dimension registry (authenticated; includes inactive rows). */
+declare function listScopeDimensions(): Command<{
+    data: ScopeDimension[];
+}>;
+/** Live coverage preview: how the dimension resolves on every business
+ *  collection (self / auto / override / excluded / unreachable). Admin only. */
+declare function readScopeDimensionCoverage(id: number): Command<{
+    data: Array<{
+        collection: string;
+        status: 'self' | 'auto' | 'override' | 'excluded' | 'unreachable';
+        route: string | null;
+        hops: unknown;
+    }>;
+}>;
+interface StagedImportRun {
+    id: number;
+    definition: number | null;
+    import_key: string;
+    status: 'queued' | 'running' | 'completed' | 'error' | 'canceled';
+    sort: number;
+    file: UUID | null;
+    row_count: number | null;
+    duration: number | null;
+    logs: string | null;
+    started_at: ISODate | null;
+    finished_at: ISODate | null;
+    created_by: UUID | null;
+    created_at: ISODate;
+    updated_at: ISODate | null;
+    legacy_id: number | null;
+    definition_label: string | null;
+    staging_table: string | null;
+    procedure: string | null;
+    loader: string | null;
+    definition_active: boolean | null;
+    file_name: string | null;
+    file_size: number | null;
+    created_by_first_name: string | null;
+    created_by_last_name: string | null;
+    created_by_email: string | null;
+}
+interface StagedImportStats {
+    window_days: number;
+    by_status: Record<string, number>;
+    total: number;
+    all_time_total: number;
+    by_key: Record<string, number>;
+    rows_imported: number;
+    median_duration: number | null;
+    success_rate: number | null;
+    runs_today: number;
+    active: Array<{
+        id: number;
+        import_key: string;
+        status: string;
+        started_at: ISODate | null;
+        created_at: ISODate;
+        row_count: number | null;
+    }>;
+}
+interface ImportDefinition {
+    id: number;
+    key: string;
+    label: string | null;
+    description: string | null;
+    staging_table: string | null;
+    procedure: string | null;
+    loader: 'bulk' | 'insert' | null;
+    sort: number;
+    is_active: boolean;
+    staging_columns?: unknown;
+    validation?: unknown;
+    procedure_body?: string | null;
+}
+/** Paged staged-import runs. `days=0`/absent means all time; `status` accepts a
+ *  comma list; `search` matches key / definition label / file name / run id. */
+declare function listStagedImports(options?: {
+    search?: string;
+    page?: number;
+    days?: number;
+    status?: string;
+    key?: string;
+    limit?: number;
+}): Command<{
+    data: StagedImportRun[];
+    total: number;
+    page: number;
+    limit: number;
+}>;
+/** Windowed aggregate stats (counts, success rate, live queue). `days=0` = all time. */
+declare function readStagedImportStats(days?: number): Command<{
+    data: StagedImportStats;
+}>;
+declare function readStagedImport(id: number): Command<{
+    data: StagedImportRun;
+}>;
+/** Re-queue a finished or failed run without re-uploading its file. Admin only. */
+declare function requeueStagedImport(id: number): Command<{
+    data: {
+        id: number;
+        status: string;
+    };
+}>;
+/** Stop a run that hasn't started, or clear one wedged in `running`. Admin only. */
+declare function cancelStagedImport(id: number): Command<{
+    data: {
+        id: number;
+        status: string;
+    };
+}>;
+/** Import definitions (active only unless `all`). */
+declare function listImportDefinitions(options?: {
+    all?: boolean;
+}): Command<{
+    data: ImportDefinition[];
+}>;
+/** Register a new import definition. Admin only. */
+declare function createImportDefinition(data: {
+    key: string;
+    label?: string;
+    description?: string;
+    staging_table?: string;
+    procedure?: string;
+    loader?: 'bulk' | 'insert';
+    sort?: number;
+}): Command<{
+    data: ImportDefinition;
+}>;
+/** Update a definition (config fields accept objects or JSON strings). Admin only. */
+declare function updateImportDefinition(id: number, data: Partial<Omit<ImportDefinition, 'id' | 'key'>>): Command<{
+    data: ImportDefinition;
+}>;
+/** The LIVE procedure body from SQL Server vs the stored one (+ hashes). Admin only. */
+declare function readImportProcedure(id: number): Command<{
+    data: {
+        procedure: string;
+        live_body: string | null;
+        stored_body: string | null;
+        deployed_hash: string | null;
+        stored_hash: string | null;
+    };
+}>;
+/** Deploy the stored procedure body via CREATE OR ALTER (scoped to the
+ *  definition's own procedure name). Admin only. */
+declare function deployImportProcedure(id: number): Command<{
+    data: {
+        deployed: boolean;
+        hash: string;
+    };
+}>;
+/** Definition version history (proc body + schema + validation together). Admin only. */
+declare function listImportDefinitionVersions(id: number): Command<{
+    data: Array<{
+        id: number;
+        version: number;
+        note: string | null;
+        created_by: UUID | null;
+        created_at: ISODate;
+    }>;
+}>;
+/** Restore a definition version (captures a 'before restore' version first). Admin only. */
+declare function restoreImportDefinitionVersion(id: number, versionId: number): Command<{
+    data: ImportDefinition;
+}>;
+/** Regex-mine the live procedure for join/merge patterns and prefill a
+ *  validation config for review — nothing is saved. Admin only. */
+declare function suggestImportValidation(id: number): Command<{
+    data: {
+        suggestion: {
+            key_columns: string[];
+            target_table?: string;
+            lookups: Array<{
+                column: string;
+                collection: string;
+                match_field: string;
+            }>;
+        };
+        procedure: string;
+        note: string;
+    };
+}>;
+interface AccessAuditSubject {
+    type: 'field' | 'pipeline_owners';
+    field?: string;
+    label: string;
+}
+interface AccessAuditRun {
+    id: number;
+    audit: number;
+    status: 'running' | 'completed' | 'error';
+    checked_records?: number;
+    checked_pairs?: number;
+    violation_count?: number;
+    truncated?: boolean;
+    error?: string | null;
+    triggered_by: UUID | null;
+    started_at: ISODate;
+    finished_at?: ISODate | null;
+}
+interface AccessAudit {
+    id: number;
+    name: string;
+    collection: string;
+    subjects: AccessAuditSubject[];
+    is_active: boolean;
+    sort: number;
+    latest_run?: AccessAuditRun | null;
+}
+interface AccessAuditFinding {
+    id: number;
+    collection: string;
+    item_id: string;
+    item_label: string | null;
+    user: UUID;
+    subject: string;
+    reasons: string[];
+    user_email: string | null;
+    first_name: string | null;
+    last_name: string | null;
+    last_access: ISODate | null;
+}
+/** Audit definitions with each one's latest run. Admin only (all routes here). */
+declare function listAccessAudits(): Command<{
+    data: AccessAudit[];
+}>;
+declare function createAccessAudit(data: {
+    collection: string;
+    subjects: AccessAuditSubject[];
+    name?: string;
+}): Command<{
+    data: AccessAudit;
+}>;
+declare function updateAccessAudit(id: number, data: Partial<{
+    name: string;
+    collection: string;
+    subjects: AccessAuditSubject[];
+    is_active: boolean;
+}>): Command<{
+    data: AccessAudit;
+}>;
+declare function deleteAccessAudit(id: number): Command<{
+    data: {
+        deleted: boolean;
+    };
+}>;
+/** Start a run (fire-and-forget — poll listAccessAuditRuns; 409 while one runs). */
+declare function runAccessAudit(id: number): Command<{
+    data: AccessAuditRun;
+}>;
+/** Run history for an audit (newest first, capped 30). */
+declare function listAccessAuditRuns(id: number): Command<{
+    data: AccessAuditRun[];
+}>;
+/** Paged findings for a run; filter by user id or search item label/id/email. */
+declare function readAccessAuditFindings(runId: number, options?: {
+    page?: number;
+    limit?: number;
+    user?: string;
+    search?: string;
+}): Command<{
+    data: AccessAuditFinding[];
+    total: number;
+}>;
+interface CoverageGapOwner {
+    id: string;
+    name: string;
+    reason: 'suspended' | 'inactive' | 'redacted' | 'ooo_no_delegate';
+}
+interface CoverageGapItem {
+    collection: string;
+    item: string;
+    label: string;
+    state: string | null;
+    template: string;
+    kind: 'all_unavailable' | 'no_owners';
+    owners: CoverageGapOwner[];
+}
+interface CoverageGapReport {
+    open_instances: number;
+    evaluated: number;
+    truncated: boolean;
+    blocked: CoverageGapItem[];
+    no_owner_count: number;
+    by_user: Array<{
+        id: string;
+        name: string;
+        reason: CoverageGapOwner['reason'];
+        blocked_count: number;
+    }>;
+}
+/** Records whose entire resolved owner set cannot act (computed live). Admin only. */
+declare function readCoverageGaps(): Command<{
+    data: CoverageGapReport;
+}>;
+interface IntegrationApiHealth {
     id: number;
-    alert: UUID;
-    status: 'firing' | 'resolved';
-    metric_snapshot: Record<string, number> | null;
-    fired_at: ISODate;
-    resolved_at: ISODate | null;
+    name: string;
+    base_url: string | null;
+    auth_type: string | null;
+    totals: Record<string, number>;
+    last_success_at: ISODate | null;
+    last_activity_at: ISODate | null;
+    window_24h: Record<string, number>;
+    last_failure: {
+        error: string | null;
+        at: ISODate;
+        collection: string;
+        item: string;
+    } | null;
 }
-declare function readReportAlertLog(id: UUID, alertId: UUID): Command<{
-    data: ReportAlertLogEntry[];
-}>;
-declare function toggleReportAlert(id: UUID, alertId: UUID, isActive: boolean): Command<{
-    data: {
-        updated: boolean;
-    };
-}>;
-declare function deleteReportAlert(id: UUID, alertId: UUID): Command<{
+/** Per-external-API push outcomes + flow-run counts + the cron roster. Admin only. */
+declare function readIntegrationHealth(): Command<{
     data: {
-        deleted: boolean;
+        apis: IntegrationApiHealth[];
+        crons: Array<Record<string, unknown>>;
+        dead_letters_24h: number;
+        flow_runs_24h: Record<string, number>;
     };
 }>;
 
@@ -1113,6 +1955,39 @@ declare function approveAiProposal(id: string): Command<{
 }>;
 /** Reject an AI action proposal. */
 declare function rejectAiProposal(id: string): Command<void>;
+interface AiReviewFinding {
+    severity: 'error' | 'warning' | 'suggestion';
+    /** Field name or area the finding is about. */
+    field: string;
+    message: string;
+}
+/**
+ * Pre-submission record review: a findings list over the record plus up to 3
+ * O2M child sets, guided by the collection's configured AI rules. Read-gated.
+ */
+declare function aiReview(body: {
+    collection: string;
+    item: string | number;
+}): Command<{
+    data: {
+        findings: AiReviewFinding[];
+    };
+}>;
+/**
+ * Render a short plain-text briefing from caller-supplied context — the caller
+ * gathers the data, this endpoint only writes the words. NOTE the response key
+ * is `brief`, not `text`.
+ */
+declare function aiBrief(body: {
+    /** The data to brief over (capped server-side at 16k chars). */
+    context: string;
+    /** Optional system-style instructions (capped at 1k chars). */
+    instructions?: string;
+}): Command<{
+    data: {
+        brief: string;
+    };
+}>;
 
 /**
  * Collaboration commands: tasks, approval chains, item locks, notifications
@@ -1443,71 +2318,573 @@ declare function deleteIssue(id: number): Command<void>;
 declare function readNotificationCount(): Command<{
     count: number;
 }>;
-/** Mark one notification read. */
-declare function markNotificationRead(id: number): Command<void>;
-/** Mark every inbox notification read. */
-declare function markAllNotificationsRead(): Command<{
+/** Mark one notification read. */
+declare function markNotificationRead(id: number): Command<void>;
+/** Mark every inbox notification read. */
+declare function markAllNotificationsRead(): Command<{
+    data: {
+        updated: number;
+    };
+}>;
+declare function deleteNotification(id: number): Command<void>;
+/** Whether soft edit-locking is enabled for a collection. */
+declare function readItemLockConfig(collection: string): Command<{
+    data: {
+        collection: string;
+        item_locking_enabled: boolean;
+    };
+}>;
+/** Toggle per-collection edit locking. Disabling releases all active locks. */
+declare function updateItemLockConfig(collection: string, enabled: boolean): Command<{
+    data: {
+        collection: string;
+        item_locking_enabled: boolean;
+    };
+}>;
+interface FieldWatch {
+    id: number;
+    name: string;
+    collection: string;
+    field: string;
+    is_active: boolean;
+    created_by: UUID;
+    subscriber_count?: number;
+    subscribed?: boolean;
+}
+declare function listFieldWatches(): Command<{
+    data: FieldWatch[];
+}>;
+declare function readFieldWatch(id: number): Command<{
+    data: FieldWatch;
+}>;
+declare function createFieldWatch(data: {
+    name: string;
+    collection: string;
+    field: string;
+    is_active?: boolean;
+}): Command<{
+    data: FieldWatch;
+}>;
+declare function updateFieldWatch(id: number, data: {
+    name?: string;
+    collection?: string;
+    field?: string;
+    is_active?: boolean;
+}): Command<{
+    data: FieldWatch;
+}>;
+declare function deleteFieldWatch(id: number): Command<void>;
+/** Subscribe the current user to change notifications for a watch
+ *  (requires read access to the watched collection). */
+declare function subscribeFieldWatch(id: number): Command<{
+    data: {
+        watch: number;
+        user: UUID;
+    };
+}>;
+declare function unsubscribeFieldWatch(id: number): Command<void>;
+type ChatRoomKind = 'global' | 'dm' | 'channel' | 'entity' | 'unknown';
+interface ChatRoomSummary {
+    room: string;
+    kind: ChatRoomKind;
+    label: string | null;
+    unread: number;
+    muted: boolean;
+    notify_mode: 'all' | 'mentions';
+    joined: boolean;
+    /** Channel rooms only. */
+    channel: {
+        id: number;
+        visibility: 'open' | 'role' | 'private';
+        role: string | null;
+        topic: string | null;
+        created_by: string | null;
+        is_direct: boolean;
+    } | null;
+    last_message: {
+        id: number;
+        message: string;
+        sender: string | null;
+        sender_name: string | null;
+        date_created: string;
+    } | null;
+}
+interface ChatChannel {
+    id: number;
+    key: string;
+    name: string;
+    topic: string | null;
+    visibility: 'open' | 'role' | 'private';
+    role: string | null;
+    created_by: string | null;
+    is_archived: boolean;
+    is_direct: boolean;
+}
+interface ChatDirectoryChannel extends ChatChannel {
+    joined: boolean;
+    members: number;
+}
+interface ChatReaction {
+    emoji: string;
+    user: string;
+    user_name: string | null;
+}
+interface ChatMessage {
+    id: number;
+    room: string;
+    message: string;
+    sender: UUID | null;
+    sender_name: string | null;
+    date_created: ISODate;
+    edited_at?: ISODate | null;
+    deleted_at?: ISODate | null;
+    attachments: string[];
+    reactions: ChatReaction[];
+}
+interface ChatPin {
+    pin_id: number;
+    id: number;
+    sender_name: string | null;
+    message: string;
+    date_created: ISODate;
+}
+interface ChatSearchHit {
+    id: number;
+    room: string;
+    sender: UUID | null;
+    sender_name: string | null;
+    message: string;
+    date_created: ISODate;
+}
+interface ChatChannelMember {
+    user: UUID;
+    first_name: string | null;
+    last_name: string | null;
+    email: string | null;
+    joined_at: ISODate | null;
+}
+interface ChatRoomType {
+    id: number;
+    prefix: string;
+    collection: string;
+    match_field: string;
+    label: string | null;
+    is_active: boolean;
+}
+/** The current user's sidebar rooms (joined channels, DMs, global) with unread counts. */
+declare function listChatRooms(): Command<{
+    data: ChatRoomSummary[];
+}>;
+/** Joinable channels (private ones appear only to members). Group DMs are excluded. */
+declare function readChatDirectory(search?: string): Command<{
+    data: ChatDirectoryChannel[];
+}>;
+/** Newest messages in a room, ascending for rendering. `before` = message id cursor. */
+declare function listChatMessages(room: string, options?: {
+    before?: number;
+    limit?: number;
+}): Command<{
+    data: ChatMessage[];
+}>;
+/** Send a message. `attachments` = uploaded nivaro_files ids; mentions notify explicitly. */
+declare function sendChatMessage(body: {
+    room: string;
+    message?: string;
+    mentions?: string[];
+    attachments?: string[];
+}): Command<{
+    data: ChatMessage;
+}>;
+/** Edit your own message within the 15-minute window. Mentions are not re-fired. */
+declare function editChatMessage(id: number, message: string): Command<{
+    data: {
+        id: number;
+        message: string;
+    };
+}>;
+/** Soft-delete a message (own, or admin) — the row survives as a tombstone. */
+declare function deleteChatMessage(id: number): Command<{
+    data: {
+        deleted: boolean;
+    };
+}>;
+/** Toggle a reaction from the fixed palette (👍 ✅ 👀 🎉 ❤️ 😂). */
+declare function toggleChatReaction(id: number, emoji: string): Command<{
+    data: {
+        toggled: string;
+        on: boolean;
+    };
+}>;
+/** Pin or unpin a message. Any room member may toggle. */
+declare function toggleChatPin(id: number): Command<{
+    data: {
+        pinned: boolean;
+    };
+}>;
+/** Pinned messages in a room (newest 20). */
+declare function listChatPins(room: string): Command<{
+    data: ChatPin[];
+}>;
+/** Search messages across the current user's sidebar rooms (min 2 chars). */
+declare function searchChatMessages(q: string): Command<{
+    data: ChatSearchHit[];
+}>;
+/** Create a group DM (a private channel rendered as a conversation). */
+declare function createGroupDm(body: {
+    user_ids: string[];
+    name?: string;
+}): Command<{
+    data: {
+        room: string;
+        name: string;
+    };
+}>;
+/** Instance chat config — bot name/user id when the AI bot is enabled. */
+declare function readChatConfig(): Command<{
+    data: {
+        bot_name: string | null;
+        bot_user_id: string | null;
+    };
+}>;
+/** Mark a room read up to now. */
+declare function markChatRoomRead(room: string): Command<{
+    data: {
+        room: string;
+        read: boolean;
+    };
+}>;
+/** Join a room (adds it to the sidebar). Refused for rooms you cannot see. */
+declare function joinChatRoom(room: string): Command<{
+    data: {
+        room: string;
+        joined: boolean;
+    };
+}>;
+/** Leave a room (removes the membership row). */
+declare function leaveChatRoom(room: string): Command<{
+    data: {
+        room: string;
+        joined: boolean;
+    };
+}>;
+/** Update per-room notification settings. `notify_mode: 'mentions'` = mentions only, null = all. */
+declare function updateChatRoom(room: string, body: {
+    muted?: boolean;
+    notify_mode?: 'mentions' | null;
+}): Command<{
+    data: {
+        room: string;
+        is_muted?: boolean;
+        notify_mode?: string | null;
+    };
+}>;
+/** DM read receipt — when the other participant last read the room. */
+declare function readChatPeerRead(room: string): Command<{
+    data: {
+        last_read_at: ISODate | null;
+    };
+}>;
+/** Create a channel. Role-scoped channels require `role`. (Channel listing = readChatDirectory.) */
+declare function createChatChannel(body: {
+    name: string;
+    key?: string;
+    topic?: string;
+    visibility?: 'open' | 'role' | 'private';
+    role?: string | null;
+}): Command<{
+    data: ChatChannel;
+}>;
+/** Update a channel (owner or admin). */
+declare function updateChatChannel(id: number, body: Partial<{
+    name: string;
+    topic: string | null;
+    visibility: 'open' | 'role' | 'private';
+    role: string | null;
+    is_archived: boolean;
+}>): Command<{
+    data: ChatChannel;
+}>;
+/** Members of a channel (visible to anyone who can see the room). */
+declare function listChatChannelMembers(id: number): Command<{
+    data: ChatChannelMember[];
+}>;
+/** Add someone to a channel (owner or admin). */
+declare function addChatChannelMember(id: number, userId: string): Command<{
+    data: {
+        room: string;
+        user: string;
+    };
+}>;
+/** Remove a member (self, owner, or admin). */
+declare function removeChatChannelMember(id: number, userId: string): Command<{
+    data: {
+        removed: boolean;
+    };
+}>;
+/** Roles (id + name only) for the role-scoped channel picker — readable by any user. */
+declare function listChatRoles(): Command<{
+    data: Array<{
+        id: UUID;
+        name: string;
+    }>;
+}>;
+/** Entity-room registry — which room prefixes map to which collections. */
+declare function listChatRoomTypes(): Command<{
+    data: ChatRoomType[];
+}>;
+/** Register an entity-room prefix (admin). `match_field` defaults to 'id'. */
+declare function createChatRoomType(body: {
+    prefix: string;
+    collection: string;
+    match_field?: string;
+    label?: string;
+}): Command<{
+    data: ChatRoomType;
+}>;
+/** Update an entity-room registration (admin). */
+declare function updateChatRoomType(id: number, body: Partial<{
+    collection: string;
+    match_field: string;
+    label: string | null;
+    is_active: boolean;
+}>): Command<{
+    data: ChatRoomType;
+}>;
+interface MyWorkSla {
+    state_key: string;
+    elapsed_hours: number;
+    duration_hours: number | null;
+    warning_threshold_pct: number | null;
+    business_hours_only: boolean;
+    status: 'ok' | 'warning' | 'breached' | null;
+    remaining_hours: number | null;
+    entered_at: ISODate;
+}
+interface MyWorkOwnedEntry {
+    collection: string;
+    item: string;
+    label: string;
+    state: string | null;
+    state_color: string | null;
+    url: string;
+    sla: MyWorkSla | null;
+}
+interface MyWorkSummary {
+    owned: MyWorkOwnedEntry[];
+    owned_total: number;
+    tasks: Array<{
+        id: number;
+        collection: string;
+        item: string;
+        title: string;
+        due_date: ISODate | null;
+        status: string;
+    }>;
+    approvals: Array<{
+        id: number;
+        collection: string;
+        item: string;
+        chain_name: string;
+        current_step: number;
+    }>;
+    notifications: Array<{
+        id: number;
+        subject: string;
+        message: string | null;
+        sender: UUID | null;
+        collection: string | null;
+        item: string | null;
+        timestamp: ISODate;
+    }>;
+    counts: {
+        owned: number;
+        owned_breached: number;
+        owned_warning: number;
+        tasks: number;
+        approvals: number;
+        notifications: number;
+    };
+}
+/** The current user's actionable inbox: owned records (SLA-first), tasks,
+ *  approval steps, unread notifications. */
+declare function readMyWork(): Command<{
+    data: MyWorkSummary;
+}>;
+/** Mark several notifications read in one call (own rows only, max 200 ids). */
+declare function markNotificationsRead(ids: Array<string | number>): Command<{
     data: {
         updated: number;
     };
 }>;
-declare function deleteNotification(id: number): Command<void>;
-/** Whether soft edit-locking is enabled for a collection. */
-declare function readItemLockConfig(collection: string): Command<{
-    data: {
-        collection: string;
-        item_locking_enabled: boolean;
-    };
+/** Send a user-to-user notification. Sender is always the caller. */
+declare function createNotification(body: {
+    recipient: string;
+    subject: string;
+    message?: string;
+    collection?: string;
+    item?: string;
+}): Command<{
+    ok: boolean;
 }>;
-/** Toggle per-collection edit locking. Disabling releases all active locks. */
-declare function updateItemLockConfig(collection: string, enabled: boolean): Command<{
+/** Admin broadcast: audience = users whose restrict-mode scope for `dimension`
+ *  intersects `values`, plus explicit `user_ids`. */
+declare function sendBulkNotification(body: {
+    subject: string;
+    message?: string;
+    html?: string;
+    dimension?: string;
+    values?: Array<string | number>;
+    user_ids?: string[];
+    channels?: {
+        inapp?: boolean;
+        email?: boolean;
+    };
+}): Command<{
     data: {
-        collection: string;
-        item_locking_enabled: boolean;
+        recipients: number;
+        emails_sent: number;
     };
 }>;
-interface FieldWatch {
+type RecordLinkType = 'relates to' | 'supersedes' | 'duplicates' | 'blocks' | 'caused by';
+interface RecordLink {
     id: number;
-    name: string;
+    direction: 'out' | 'in';
+    /** Incoming links carry the inverse phrasing ('superseded by' etc.). */
+    type: string;
     collection: string;
-    field: string;
-    is_active: boolean;
-    created_by: UUID;
-    subscriber_count?: number;
-    subscribed?: boolean;
+    item: string;
+    label: string | null;
+    note: string | null;
 }
-declare function listFieldWatches(): Command<{
-    data: FieldWatch[];
+/** Links attached to a record, both directions, labels for readable ends. */
+declare function listRecordLinks(collection: string, id: string | number): Command<{
+    data: RecordLink[];
+}>;
+/** Link two records. `link_type` defaults to 'relates to'; duplicates 409. */
+declare function createRecordLink(body: {
+    from_collection: string;
+    from_item: string;
+    to_collection: string;
+    to_item: string;
+    link_type?: RecordLinkType;
+    note?: string;
+}): Command<{
+    data: {
+        linked: boolean;
+    };
 }>;
-declare function readFieldWatch(id: number): Command<{
-    data: FieldWatch;
+/** Remove a link (requires read on the FROM side). */
+declare function deleteRecordLink(id: number): Command<{
+    data: {
+        deleted: boolean;
+    };
 }>;
-declare function createFieldWatch(data: {
-    name: string;
+/** The current user's pinned item ids for a collection. */
+declare function listPinnedItems(collection: string): Command<{
+    data: string[];
+}>;
+/** Pin or unpin a record for the current user. */
+declare function togglePinnedItem(collection: string, itemId: string | number): Command<{
+    data: {
+        pinned: boolean;
+    };
+}>;
+interface LastTouch {
+    action: string;
+    timestamp: ISODate;
+    user_id: UUID | null;
+    user_name: string | null;
+}
+/** Newest create/update on a record ("Edited 3d ago by Beth"). `data: null` when untouched. */
+declare function readLastTouch(collection: string, id: string | number): Command<{
+    data: LastTouch | null;
+}>;
+interface ViewSubscription {
+    id: number;
+    view_id: number;
+    digest: 'daily' | 'weekly';
+    is_active: boolean;
+    last_run_at: ISODate | null;
+    view_name: string;
     collection: string;
-    field: string;
-    is_active?: boolean;
-}): Command<{
-    data: FieldWatch;
+}
+/** The current user's saved-view digest subscriptions. */
+declare function listViewSubscriptions(): Command<{
+    data: ViewSubscription[];
 }>;
-declare function updateFieldWatch(id: number, data: {
-    name?: string;
-    collection?: string;
-    field?: string;
-    is_active?: boolean;
+/** Subscribe to a saved view's new-records digest (upserts by view). */
+declare function createViewSubscription(body: {
+    view_id: number;
+    digest?: 'daily' | 'weekly';
 }): Command<{
-    data: FieldWatch;
+    data: {
+        id: number;
+        view_id: number;
+        digest: string;
+    };
 }>;
-declare function deleteFieldWatch(id: number): Command<void>;
-/** Subscribe the current user to change notifications for a watch
- *  (requires read access to the watched collection). */
-declare function subscribeFieldWatch(id: number): Command<{
+/** Unsubscribe (own rows only). Responds 204 with no body. */
+declare function deleteViewSubscription(id: number): Command<void>;
+interface AccessReason {
+    type: 'permission' | 'not_found' | 'row_filter' | 'scope' | 'scope_strict';
+    message: string;
+    dimension?: string;
+    dimension_label?: string;
+    allowed_values?: string[];
+}
+/** Why a record is (in)visible to the current user — each access gate re-run
+ *  separately, reasons only, never record data. */
+declare function explainRecordAccess(collection: string, id: string | number): Command<{
     data: {
-        watch: number;
-        user: UUID;
+        access: boolean;
+        reasons: AccessReason[];
     };
 }>;
-declare function unsubscribeFieldWatch(id: number): Command<void>;
+/** Ask admins for access to a hidden record. Deduped per user+record per day
+ *  (`already: true` on a repeat). */
+declare function requestRecordAccess(body: {
+    collection: string;
+    item: string;
+    note?: string;
+}): Command<{
+    data: {
+        requested: boolean;
+        already?: boolean;
+        notified?: number;
+    };
+}>;
+interface OnlinePresenceUser {
+    user_id: UUID | null;
+    display_name: string | null;
+    role_name: string | null;
+    current_path: string | null;
+    last_seen: ISODate;
+    is_idle: boolean;
+    last_active: ISODate | null;
+    /** Server-rendered "Collection › Record label" for the current path. */
+    page: string | null;
+    app: string | null;
+    typing_room: string | null;
+    scopes: string[];
+    scopes_by_dimension: Record<string, string[]>;
+    /** Live session recording id — admins only, null otherwise. */
+    recording_id: string | null;
+}
+interface OnlinePresenceConfig {
+    fields: string[];
+    scope_dimensions: string[];
+    admin_url: string;
+    dimensions: Array<{
+        name: string;
+        label: string;
+    }>;
+}
+/** Who is online, scoped by the viewer's own restrictions, with instance
+ *  display config. Response carries `config` beside `data`. */
+declare function readOnlinePresence(): Command<{
+    data: OnlinePresenceUser[];
+    config: OnlinePresenceConfig;
+}>;
 
 /**
  * Content-operations commands: export, draft/publish, scheduled changes,
@@ -1920,6 +3297,8 @@ declare function createAddendum(body: {
     data?: Record<string, unknown>;
     cost_impact?: number | null;
     timeline_impact_days?: number | null;
+    /** nivaro_files ids to attach (server caps at 50). */
+    attachments?: string[];
 }): Command<{
     data: Addendum;
 }>;
@@ -2007,6 +3386,118 @@ declare function updateLayoutUngroupedSort(id: number, ungroupedSort: number): C
         ungrouped_sort: number;
     };
 }>;
+interface RecordViewRecap {
+    /** Baseline of the recap — the caller's previous visit. */
+    since: ISODate;
+    /** Number of distinct fields other users changed since then. */
+    field_changes: number;
+    /** Human labels of the changed fields (first 8). */
+    fields: string[];
+    /** Comments by others since the baseline. */
+    comments: number;
+    /** Workflow transitions by others since the baseline. */
+    transitions: number;
+    /** Display names of the people who edited (first 5). */
+    editors: string[];
+}
+/**
+ * Roll the caller's view watermark for a record and get back the recap of what
+ * OTHERS changed since the previous visit, in one round trip. `data` is null on
+ * a first visit, a same-session refresh with no prior baseline, or when nothing
+ * changed. Call when opening a record.
+ */
+declare function touchRecordView(collection: string, id: string | number): Command<{
+    data: RecordViewRecap | null;
+}>;
+interface FieldChangeEntry {
+    /** The value the field BECAME at this point. */
+    value: unknown;
+    /** Resolved display label — M2O FK → related record label, select value → choice text. */
+    display: string | null;
+    timestamp: ISODate | null;
+    user_name: string | null;
+    action: string;
+}
+/**
+ * One field's actual value changes (newest first, max 25) mined from revision
+ * deltas — consecutive identical values are deduped, M2O FKs resolve to display
+ * labels. Distinct from `readFieldHistory`, which reads the older
+ * /items/…/field-history route.
+ */
+declare function readFieldChangeHistory(collection: string, id: string | number, field: string): Command<{
+    data: FieldChangeEntry[];
+}>;
+interface ImportPreviewDiff {
+    /** 1-based file row (header = row 1). */
+    row: number;
+    id: string;
+    kind: 'changed' | 'conflict';
+    /** Present on conflicts: why the operator must look. */
+    reason?: string;
+    fields: Array<{
+        field: string;
+        old: unknown;
+        new: unknown;
+    }>;
+}
+interface ImportPreview {
+    /** Rows scanned (capped at 5,000 — `truncated` flags a bigger file). */
+    total: number;
+    truncated: boolean;
+    new: number;
+    unchanged: number;
+    changed: number;
+    /** Existing-and-differs under strategy 'skip', or duplicate ids within the file. */
+    conflicts: number;
+    field_change_counts: Record<string, number>;
+    /** Field-level old→new diffs for the first 50 changed/conflicted rows. */
+    diffs: ImportPreviewDiff[];
+}
+/**
+ * Dry-run a CSV import (admin) — mirrors the real import's matching exactly
+ * (same id_field lookup, same strategy semantics) without writing anything.
+ */
+declare function previewImportJob(body: {
+    collection: string;
+    /** Raw CSV text including the header row. */
+    csv_data: string;
+    /** { csvColumn: fieldName } */
+    column_map?: Record<string, string>;
+    id_field?: string | null;
+    /** Defaults to 'skip'. */
+    duplicate_strategy?: string;
+}): Command<{
+    data: ImportPreview;
+}>;
+interface RelatedCommentEntry {
+    id: string;
+    source: 'transition' | 'change_reason' | 'addendum' | 'note';
+    label: string;
+    text: string;
+    user: string | null;
+    user_name: string | null;
+    created_at: ISODate;
+    /** Where the note came from ("Draft → Review", "Forecasts · 2026 · amount"). */
+    context: string | null;
+}
+/**
+ * Read-only notes recorded about a record from other surfaces — workflow
+ * transition comments, change reasons (own + child rows), addendum reasons,
+ * and conventional note child tables. Time-ordered oldest first; merge with
+ * `listComments` for the full thread.
+ */
+declare function listRelatedComments(collection: string, item: string | number): Command<{
+    data: RelatedCommentEntry[];
+}>;
+/**
+ * Distinct non-null values of one PHYSICAL column, ascending — for
+ * column-filter dropdowns. `limit` is clamped to 1–500 (default 200).
+ */
+declare function readDistinctValues(collection: string, field: string, options?: {
+    limit?: number;
+}): Command<{
+    data: unknown[];
+}>;
 
 /**
  * Developer-experience commands: dev-tools exports, webhook deliveries,
@@ -2508,6 +3999,277 @@ declare function executeBulkAction(actionId: string, data: {
 }): Command<{
     data: unknown;
 }>;
+type PreflightSeverity = 'ok' | 'warn' | 'fail';
+interface PreflightCheck {
+    id: string;
+    status: PreflightSeverity;
+    /** One plain sentence for the operator. */
+    summary: string;
+    detail?: Record<string, unknown>;
+}
+interface PreflightReport {
+    status: PreflightSeverity;
+    version: string;
+    environment: string;
+    checks: PreflightCheck[];
+    ts: ISODate;
+}
+/**
+ * Deploy coherence check: migrations (both directions), db/redis reachability,
+ * required extensions, version pinning. Responds 503 when status is 'fail' so
+ * CI can branch on the status code alone.
+ */
+declare function readPreflight(): Command<{
+    data: PreflightReport;
+}>;
+interface CronJob {
+    id: string;
+    expression: string;
+    /** Set when the job was registered by an extension. */
+    extensionId?: string;
+    nextRun: ISODate | null;
+}
+/** All scheduled jobs (core + extension-registered). */
+declare function listCronJobs(): Command<{
+    data: CronJob[];
+}>;
+/** Run a scheduled job now, out of band. Resolves after the job completes. */
+declare function runCronJob(id: string): Command<{
+    data: {
+        id: string;
+        ran: boolean;
+        duration_ms: number;
+    };
+}>;
+interface TraceSpan {
+    seq: number;
+    phase: string;
+    ms: number;
+    /** Offset from request start (waterfall layout). */
+    at: number;
+    detail?: string;
+}
+interface RequestTrace {
+    id: string;
+    method: string;
+    route: string;
+    url: string;
+    status: number;
+    user: string | null;
+    total_ms: number;
+    spans: TraceSpan[];
+    ts: string;
+    unaccounted_ms: number;
+}
+/**
+ * Slow-request traces from THIS replica's in-process ring buffer (requests
+ * faster than TRACE_SLOW_MS are never recorded). `limit` caps at 200;
+ * `route` is a substring filter.
+ */
+declare function listTraces(query?: {
+    limit?: number;
+    route?: string;
+}): Command<{
+    data: {
+        config: Record<string, unknown>;
+        traces: Array<RequestTrace & {
+            slowest_phase: string | null;
+        }>;
+    };
+}>;
+declare function readTrace(id: string): Command<{
+    data: RequestTrace;
+}>;
+declare function clearTraces(): Command<{
+    data: {
+        cleared: boolean;
+    };
+}>;
+interface ConfigTableClassification {
+    config: string[];
+    derived: string[];
+    runtime: string[];
+    /** Present in the database but in none of the lists — a new migration. */
+    unclassified: string[];
+    /** Classified but absent from this database — an older instance. */
+    absent: string[];
+}
+interface ConfigSnapshot {
+    format: 1;
+    generated_at: string;
+    instance: {
+        version: string;
+        environment: string;
+        database: string;
+        label?: string;
+    };
+    classification: ConfigTableClassification;
+    /** table → row id → hashed/serialized row. */
+    tables: Record<string, Record<string, unknown>>;
+    /** Tables that were requested but could not be read, with the reason. */
+    errors: Record<string, string>;
+}
+/** What this instance considers configuration (with row counts), without shipping any of it. */
+declare function readConfigInventory(): Command<{
+    data: {
+        instance: {
+            version: string;
+            environment: string;
+            database: string;
+        };
+        classification: ConfigTableClassification;
+        counts: Record<string, number>;
+    };
+}>;
+/**
+ * Export this instance's config snapshot for comparison on another instance.
+ * Secrets are DROPPED, not masked. Activity-logged.
+ */
+declare function exportConfigSnapshot(options?: {
+    label?: string;
+    /** Restrict to specific tables. */
+    tables?: string[];
+}): Command<{
+    data: ConfigSnapshot;
+}>;
+/**
+ * Compare an uploaded snapshot (`theirs`) against this instance's live config
+ * (`mine`). Body is the snapshot itself or `{snapshot}`. NOTE: real snapshots
+ * are routinely far past 1MB — this route accepts bodies up to 128MB.
+ */
+declare function compareConfigSnapshot(snapshot: unknown): Command<{
+    data: unknown;
+}>;
+interface LayoutVersion {
+    id: number;
+    version: number;
+    note: string | null;
+    created_at: ISODate;
+    created_by_name: string;
+}
+/** Snapshot history for a layout (newest first, pruned to 30 server-side). */
+declare function listLayoutVersions(layoutId: number): Command<{
+    data: LayoutVersion[];
+}>;
+/**
+ * Restore a layout version — id-preserving; a "before restore" snapshot is
+ * captured first so the restore itself is reversible.
+ */
+declare function restoreLayoutVersion(layoutId: number, versionId: number): Command<{
+    data: {
+        restored_assignments: number;
+        restored_groups: number;
+    };
+}>;
+interface OmniSearchHit {
+    collection: string;
+    collection_label: string;
+    id: string;
+    label: string;
+    score: number;
+    matched_field: string | null;
+}
+/**
+ * Cross-collection record search, resolved AS the requesting user (RBAC + RLS
+ * + scopes). `q` must be at least 2 characters. Distinct from `globalSearch`
+ * (the command palette route) and `semanticSearch` (vector similarity).
+ */
+declare function omniSearch(q: string, options?: {
+    collections?: string[];
+    limit?: number;
+    per_collection?: number;
+}): Command<{
+    data: OmniSearchHit[];
+    meta: {
+        searched: number;
+        skipped: string[];
+        truncated: boolean;
+    };
+}>;
+interface FlowTestStep {
+    key: string;
+    name: string;
+    type: string;
+    status: 'resolve' | 'reject' | 'async';
+    /** Rendered side-effect content when dry_run rendered instead of sending. */
+    preview?: unknown;
+}
+/**
+ * Test-run a flow with a caller-supplied payload, regardless of active status.
+ * dry_run defaults TRUE: side-effect ops (mail/webhook/…) render but do not
+ * send. The run records in flow history with trigger 'test'.
+ */
+declare function testFlow(flowId: string, body?: {
+    payload?: Record<string, unknown>;
+    dry_run?: boolean;
+}): Command<{
+    data: {
+        steps: FlowTestStep[];
+        output: Record<string, unknown>;
+        error: string | null;
+        dry_run: boolean;
+    };
+}>;
+interface FlowReplayResult {
+    dry_run: boolean;
+    matched: number;
+    truncated: boolean;
+    skipped_deletes: number;
+    /** Dry run only: first 20 matched activity rows. */
+    sample?: Array<{
+        id: number;
+        collection: string;
+        action: string;
+        item: string;
+        timestamp: string;
+    }>;
+    /** Real run only. */
+    executed?: number;
+    failed?: number;
+    missing?: number;
+}
+/**
+ * Replay an event-trigger flow over a historical window (admin) — re-executes
+ * once per matching create/update in nivaro_activity. dry_run defaults TRUE
+ * (count + sample first — replays fan out real side effects); the payload is
+ * the record's CURRENT row with `$replay: true`, deletes are skipped, and
+ * before-timing flows are refused (400).
+ */
+declare function replayFlow(flowId: string, body: {
+    /** ISO datetime, required. */
+    from: string;
+    /** ISO datetime, required — must be after `from`. */
+    to: string;
+    /** Defaults to true. Pass false to actually execute. */
+    dry_run?: boolean;
+    /** Max writes to replay, 1–1000 (default 500). */
+    limit?: number;
+}): Command<{
+    data: FlowReplayResult;
+}>;
+/**
+ * Mint a masquerade token (admin): a short-lived `nvm_…` Bearer token that
+ * resolves to the target user for up to 4h, with RBAC/RLS genuinely running
+ * as them. Activity-logged.
+ */
+declare function startMasquerade(userId: string): Command<{
+    data: {
+        token: string;
+        user: {
+            id: UUID;
+            first_name: string | null;
+            last_name: string | null;
+            email: string;
+        };
+    };
+}>;
+/**
+ * Revoke the current masquerade session. MUST be called with the `nvm_` token
+ * as the Bearer — 400 otherwise. Bare `{ok}` response, no data envelope.
+ */
+declare function stopMasquerade(): Command<{
+    ok: boolean;
+}>;
 
 /**
  * File manager commands: listing, metadata, presigned uploads, updates,
@@ -5169,4 +6931,4 @@ declare function submitFormItem(collection: string, values: Record<string, unkno
     data: Record<string, unknown>;
 }>;
 
-export { type ActivityEntry, type ActivityQuery, type ActivityReportQuery, type ActivityReportRow, type ActivityReportSummary, type Addendum, type AddendumStatus, type AiChatTraceEntry, type AiCollectionSettings, type AiColumnMapping, type AiDuplicateMatch, type AiQueryFilter, type AiQueryResult, type AiViolation, type AlertDefinition, type AlertLogEntry, type AlertSubscription, type ApiAnalyticsBucket, type ApiAnalyticsCollection, type ApiAnalyticsPath, type ApiAnalyticsSummary, type ApiErrorLog, type ApiKey, type ApiKeyScope, type ApprovalChain, type ApprovalChainStep, type ApprovalDecision, type ApprovalInstance, type ApprovalInstanceDetail, type ApprovalStatus, type ApprovalStepInput, type AtRiskCondition, type AtRiskOp, type AtRiskResult, type AtRiskRule, type AtRiskSummaryEntry, type AttributeDefinition, type AttributeValue, type BlackoutDate, type BoolFilterOps, type CMSCollection, type CascadeFilterRule, type ChangeOrder, type CollectionLayout, type CollectionPresetSummary, type Command, type Comment, type ContentBundle, type ContentExportFormat, type ContentExportOptions, type CustomQuery, type DataQualityRule, type DataQualityRuleResult, type DataQualityRuleType, type DataQualityRun, type DataQualitySeverity, type DeadLetter, type DraftPublishConfig, type DraftStatus, type ErpSubmission, type ErpSubmissionStatus, type ExtensionManifest, type ExternalApi, type ExternalApiEndpoint, type ExternalApiSchema, type ExternalApiSlotContext, type ExternalApiSpecImportResult, type ExternalApiTestResult, type FieldCondition, type FieldConfig, type FieldDependencyConfig, type FieldFilter, type FieldGroup, type FieldHistoryEntry, type FieldTranslations, type FieldVisibilityRules, type FieldWatch, type FileRecord, type FileUploadResult, type FileUsageEntry, type Filter, type FlowRun, type FormFieldDescriptor, type FormFieldRelation, type FormGroupDescriptor, type FormLockCondition, type FormSchema, type FormValidationRule, type FormVisibilityRule, type GlobalSearchRecord, type GlobalSearchResults, type GraphQLResponse, type HierarchyConfigDef, type HierarchyFlatNode, type HierarchyLevelDef, type HierarchyNestedNode, type IDFilterOps, type ISODate, type ImportJob, type ImportParseResponse, type ImportTemplateSummary, type InstanceOwner, type InternalWidget, type Issue, type IssueSeverity, type IssueStatus, type IssueSummary, type ItemLock, type LayoutAssignment, type LayoutGroup, type ListResponse, type ManagedUser, type MyTask, type NivaroClient, type NivaroClientOptions, type NivaroExtensionPlugin, type NivaroRealtime, type NivaroRuntime, type NotificationItem, type NotificationPage, type NotificationSubscription, type NumberFilterOps, type Page, type PageLayout, type PageSlotKey, type PageWidget, type PdfTemplate, type PermissionSimulation, type PersistedQuery, type PickerExclusionStatus, type PipelineFlowEdge, type PipelineFlowState, type PipelineOwnerGroup, type PipelineOwnerGroupUser, type PipelineSimulation, type PipelineState, type PluginSlots, type Policy, type PresenceClient, type PresenceOptions, type PresenceSession, type PresenceSessionInfo, type PresenceViewer, type PromotionApplyResult, type PromotionPreview, type Query, type Queue, type QueueColumnPrefs, type QueueCondition, type QueueDetail, type QueueDisplayConfig, type QueueItem, type QueueItemsResult, type QueueOwner, type QueueRowClickMode, type QueueScope, type QueueSource, type QueueSourceType, type QueueStats, type QueueTrendPoint, type QueueView, type QueueViewKind, type QueueWorkloadRow, type RealtimeEvent, type RecordGraphEdge, type RecordGraphNode, type RecordTemplate, type RegisteredAction, type RelationFilter, type RelationOption, type ReportAlert, type ReportAlertCondition, type ReportAlertLogEntry, type ReportColumnFormat, type ReportDateRange, type ReportDef, type ReportEntityFilter, type ReportFilterPreset, type ReportQueryColumn, type ReportQueryWidgetConfig, type ReportSubscription, type ReportWidget, type ReportWidgetConfig, type ReportWidgetData, type ReportWidgetType, type ResolvedOwner, type RetentionPolicy, type RetentionRun, type RetentionRunResult, type Revision, type Role, type Rule, type SavedView, type ScheduledChange, type ScheduledReport, type ScopeDimensionInfo, type SemanticSearchMatch, type SessionRecording, type ShareLink, type SlaBatchStatus, type SlaRule, type SlaStatus, type StringFilterOps, type SubRow, type SubRowTemplate, type SyncJob, type Task, type TaskStatus, type TimelineEvent, type TreeFlatNode, type TreeNestedNode, type TreeNodeConfig, type TreePermission, type TreePermissionAction, type UUID, type UserActivityEntry, type UserActivitySummary, type UserScopesInfo, type VirtualCollection, type Webhook, type WebhookDelivery, type WidgetFeed, type WorkflowBinding, type WorkflowHistoryEntry, type WorkflowInstance, type WorkflowInstanceData, type WorkflowState, type WorkflowTransition, type Workspace, type WorkspaceQuotas, type WorkspaceTemplate, type WorkspaceUsage, _and, _contains, _ends_with, _eq, _gt, _gte, _in, _lt, _lte, _ncontains, _neq, _nin, _nnull, _none, _null, _or, _some, _starts_with, acquireItemLock, activateLayout, addInstanceOwner, addSubRow, aiBuildReport, aiChat, aiCheckDuplicates, aiGenerate, aiMapColumns, aiQuery, aiReportFilters, aiSummarize, aiValidate, appendSessionRecordingEvents, applyContentBundle, applyRecordTemplate, applySubRowTemplate, approveAddendum, approveAiProposal, asc, backupExportPath, batchPickerExclusionStatus, bulkPickerExclusion, callExternalApi, callExternalApiEndpoint, cancelScheduledChange, cascadeFieldDependencies, checkBlackoutDate, claimQueueItem, cloneItem, cloneLayout, cloneReport, completeTask, createAddendum, createAlertDefinition, createAlertSubscription, createApiKey, createApprovalChain, createAtRiskRule, createAttributeDefinition, createBlackoutDate, createCollectionLayout, createComment, createDataQualityRule, createExternalApi, createExternalApiEndpoint, createFieldGroup, createFieldWatch, createHierarchyConfig, createImportJob, createImportJobFromUrl, createInternalWidget, createIssue, createItem, createNivaro, createNotificationSubscription, createPage, createPdfTemplate, createPersistedQuery, createPresence, createQueue, createQueueView, createRealtime, createRecordTemplate, createReport, createReportAlert, createRetentionPolicy, createRole, createRolePolicy, createRule, createSavedView, createScheduledChange, createScheduledReport, createShareLink, createSlaRule, createSubRowTemplate, createSyncJob, createTask, createTreePermission, createUser, createVirtualCollection, createWebhook, createWidgetFeed, createWorkspace, createWorkspaceTemplate, decideApproval, deleteAddendum, deleteAlertDefinition, deleteAlertSubscription, deleteApiKey, deleteApprovalChain, deleteAtRiskRule, deleteAttributeDefinition, deleteBlackoutDate, deleteCollectionLayout, deleteComment, deleteDataQualityRule, deleteExternalApi, deleteExternalApiEndpoint, deleteExternalApiSchema, deleteFieldGroup, deleteFieldTranslations, deleteFieldWatch, deleteFile, deleteHierarchyConfig, deleteImportJob, deleteInternalWidget, deleteIssue, deleteItem, deleteNotification, deleteNotificationSubscription, deletePage, deletePdfTemplate, deletePersistedQuery, deleteQueue, deleteQueueView, deleteRecordTemplate, deleteReport, deleteReportAlert, deleteReportFilterPreset, deleteRetentionPolicy, deleteRole, deleteRolePolicy, deleteRule, deleteSavedView, deleteScheduledReport, deleteSessionRecording, deleteSlaRule, deleteSubRow, deleteSubRowTemplate, deleteSyncJob, deleteTask, deleteTreePermission, deleteUser, deleteVirtualCollection, deleteWebhook, deleteWidgetFeed, deleteWorkspace, deleteWorkspaceTemplate, desc, disableTwoFactor, endSessionRecording, evaluateAlerts, evaluateAtRisk, evaluateFieldDefaults, evaluateFieldLock, evaluateFieldRules, evaluateFieldVisibility, excludeFromPicker, executeBulkAction, executeCustomQuery, executeImportTemplate, executeItemAction, executeScheduledChange, exportBlueprint, exportContent, exportContentBundle, exportSchemaSnapshot, fetchFormSchema, fileDownloadPath, fileTransformPath, generateToken, generateUserToken, getAlertDefinition, getAttributeValues, getBrunoCollection, getExternalApi, getExternalApiEndpoint, getFieldTranslations, getFlowRun, getLocales, getOpenApi, getPickerExclusionStatus, getPostmanCollection, getPresence, getRetentionPolicy, getSlaRule, getSlaStatus, getTranslations, getTypes, getWebhook, globalSearch, heartbeatItemLock, importExternalApiSpec, importSchemaSnapshot, includeInPicker, installBlueprint, installCollectionPreset, invokeInternalWidgetAction, isPageSlot, listActiveAtRiskRules, listActivePresence, listAddendums, listAlertDefinitions, listAlertSubscriptions, listAllNotificationSubscriptions, listApiKeys, listApprovalChains, listApprovalInstances, listAtRiskRules, listAttributeDefinitions, listBlackoutDates, listBulkActions, listChangeOrders, listCollectionPresets, listCollectionRecordTemplates, listComments, listCustomQueries, listDataQualityRules, listDataQualityRuns, listDeadLetters, listExternalApiEndpoints, listExternalApiSchemas, listExternalApis, listFieldGroups, listFieldWatches, listFiles, listFlowRuns, listHierarchyConfigs, listImportJobs, listImportTemplates, listInternalWidgets, listIssues, listItemActions, listItemScheduledChanges, listMyTasks, listNotificationSubscriptions, listNotifications, listOrphanFiles, listPages, listPdfTemplates, listPersistedQueries, listQueueViews, listQueues, listRecordTemplates, listRegisteredExtensions, listRegisteredFlowOperations, listRegisteredFlowTriggers, listReportAlerts, listReportFilterPresets, listReports, listRetentionPolicies, listRetentionRuns, listRolePolicies, listRoleUsers, listRoles, listRules, listSavedViews, listScheduledChanges, listScheduledReports, listSessionRecordings, listShareLinks, listSlaRules, listSubRowTemplates, listSubRows, listSyncJobs, listTasks, listThroughputCollections, listTreePermissions, listVirtualCollections, listWebhookDeliveries, listWebhooks, listWidgetFeeds, listWorkspaceTemplates, listWorkspaces, markAllNotificationsRead, markNotificationRead, moveTreeNode, presignFileUpload, previewContentBundle, previewReportWidget, publishItem, queryVirtualCollection, readActiveLayout, readActivity, readActivityReportSummary, readAddendum, readAiSettings, readAlertLog, readAllStateOwners, readApiAnalyticsErrors, readApiAnalyticsSummary, readApiAnalyticsTimeseries, readApiAnalyticsTopCollections, readApiAnalyticsTopPaths, readApiKey, readApprovalChain, readAtRiskSummary, readBackupManifest, readCollection, readCollectionLayout, readCollectionLayouts, readCollections, readDataQualityRun, readDetailLayout, readDraftPublishConfig, readErpSubmissionHistory, readFieldConfig, readFieldHistory, readFieldImpact, readFieldWatch, readFileMeta, readFileUsage, readHierarchyConfig, readHierarchyNodeAncestors, readHierarchyNodeChildren, readHierarchyNodes, readHierarchyTree, readImportJob, readInstanceOwners, readInternalWidget, readIssue, readIssueSummary, readItem, readItemLock, readItemLockConfig, readItems, readLayoutAssignments, readLayoutGroups, readMe, readMyScopes, readNotificationCount, readNotificationSubscriptionStats, readOwnerGroups, readPage, readPageWidgetData, readPdfTemplate, readPersistedQuery, readPipelineFlowMap, readPipelineReplay, readPipelineTemplate, readPipelineTemplates, readQueue, readQueueCollectionStates, readQueueColumnPrefs, readQueueItems, readQueueTrends, readQueueWorkload, readRecordGraph, readRelationOptions, readReport, readReportAlertLog, readReportFilterOptions, readReportSubscription, readReportWidgetData, readRevision, readRevisions, readRole, readSessionRecordingEvents, readSettings, readSingleton, readSlaStatusBatch, readStateOwnerGroups, readStateOwners, readSyncJob, readTask, readThroughputReport, readTimeline, readTreeAncestors, readTreeChildren, readTreeConfig, readTreeDescendants, readTreeNested, readTreeNodes, readTwoFactorStatus, readUnreadNotificationCount, readUser, readUserActivity, readUserActivitySummary, readUserCard, readUserScopes, readUsers, readWorkflowBindings, readWorkflowInstance, readWorkflowInstances, readWorkspace, readWorkspaceUsage, rebuildTreePaths, reindexSemanticSearch, rejectAddendum, rejectAiProposal, releaseItemLock, releaseQueueItem, rematerializeQueue, removeInstanceOwner, renderInternalWidget, renderPdfTemplate, reorderFieldGroups, reorderSubRows, reorderTreeSiblings, replaceSubRows, replayActivityEvent, reportClientError, resetReportCache, resolveReportAlert, retryDeadLetter, retryErpSubmission, retryWebhookDelivery, revokeApiKey, revokeShareLink, revokeToken, revokeUserToken, rollbackRevision, rotateWidgetFeedToken, runActivityReport, runActivityReportCsv, runDataQuality, runRetentionPolicy, runScheduledReport, runSyncJob, saveMyScopeDefaults, saveReportFilterPreset, saveReportWidgets, saveUserScope, semanticSearch, sendTestMail, sessionRecordingEnabled, setMyDelegate, setQueueDefaultView, setReportSubscription, setTranslations, setupTwoFactor, simulatePermissions, simulatePipeline, startApproval, startSessionRecording, startWorkflow, submitAddendum, submitFormItem, submitItemForReview, submitToErp, subscribeFieldWatch, suggestQueueLabels, switchWorkspace, testExternalApi, testWebhook, toggleReportAlert, transitionWorkflow, unpublishItem, unsubscribeFieldWatch, updateAddendum, updateAiSettings, updateAlertDefinition, updateApiKey, updateApprovalChain, updateAtRiskRule, updateAttributeDefinition, updateAttributeValues, updateCollectionLayout, updateComment, updateDataQualityRule, updateDraftPublishConfig, updateErpSubmissionStatus, updateExternalApi, updateExternalApiEndpoint, updateFieldConfig, updateFieldGroup, updateFieldWatch, updateFileMeta, updateHierarchyConfig, updateInternalWidget, updateIssue, updateItem, updateItemLockConfig, updateLayoutAssignments, updateLayoutUngroupedSort, updateMe, updateNotificationSubscription, updatePage, updatePdfTemplate, updatePersistedQuery, updateQueue, updateQueueSources, updateQueueView, updateRecordTemplate, updateReport, updateReportAlert, updateRetentionPolicy, updateRole, updateRolePolicy, updateRoleUiPermissions, updateRule, updateSavedView, updateScheduledReport, updateSettings, updateSingleton, updateSlaRule, updateSyncJob, updateTask, updateTreePermission, updateUser, updateVirtualCollection, updateWebhook, updateWidgetFeed, updateWorkflowBinding, updateWorkspace, validateVirtualCollectionSql, verifyTwoFactor };
+export { type AccessAudit, type AccessAuditFinding, type AccessAuditRun, type AccessAuditSubject, type AccessReason, type ActivityEntry, type ActivityQuery, type ActivityReportQuery, type ActivityReportRow, type ActivityReportSummary, type Addendum, type AddendumStatus, type AiChatTraceEntry, type AiCollectionSettings, type AiColumnMapping, type AiDuplicateMatch, type AiQueryFilter, type AiQueryResult, type AiReviewFinding, type AiViolation, type AlertDefinition, type AlertLogEntry, type AlertSubscription, type AnomalyDefinition, type AnomalyRule, type ApiAnalyticsBucket, type ApiAnalyticsCollection, type ApiAnalyticsPath, type ApiAnalyticsSummary, type ApiErrorLog, type ApiKey, type ApiKeyScope, type ApprovalBrief, type ApprovalChain, type ApprovalChainStep, type ApprovalDecision, type ApprovalInstance, type ApprovalInstanceDetail, type ApprovalStatus, type ApprovalStepInput, type AtRiskCondition, type AtRiskOp, type AtRiskResult, type AtRiskRule, type AtRiskSummaryEntry, type AttributeDefinition, type AttributeValue, type BlackoutDate, type BoolFilterOps, type CMSCollection, type CascadeFilterRule, type ChangeOrder, type ChatChannel, type ChatChannelMember, type ChatDirectoryChannel, type ChatMessage, type ChatPin, type ChatReaction, type ChatRoomKind, type ChatRoomSummary, type ChatRoomType, type ChatSearchHit, type CollectionLayout, type CollectionPresetSummary, type Command, type Comment, type ConfigSnapshot, type ConfigTableClassification, type ContentBundle, type ContentExportFormat, type ContentExportOptions, type CoverageGapItem, type CoverageGapOwner, type CoverageGapReport, type CronJob, type CustomQuery, type DataQualityRule, type DataQualityRuleResult, type DataQualityRuleType, type DataQualityRun, type DataQualitySeverity, type DeadLetter, type DraftPublishConfig, type DraftStatus, type ErpSubmission, type ErpSubmissionStatus, type ExtensionManifest, type ExternalApi, type ExternalApiEndpoint, type ExternalApiSchema, type ExternalApiSlotContext, type ExternalApiSpecImportResult, type ExternalApiTestResult, type FieldChangeEntry, type FieldCondition, type FieldConfig, type FieldDependencyConfig, type FieldFilter, type FieldGroup, type FieldHistoryEntry, type FieldTranslations, type FieldVisibilityRules, type FieldWatch, type FileRecord, type FileUploadResult, type FileUsageEntry, type Filter, type FlowReplayResult, type FlowRun, type FlowTestStep, type FormFieldDescriptor, type FormFieldRelation, type FormGroupDescriptor, type FormLockCondition, type FormSchema, type FormValidationRule, type FormVisibilityRule, type GlobalSearchRecord, type GlobalSearchResults, type GraphQLResponse, type HierarchyConfigDef, type HierarchyFlatNode, type HierarchyLevelDef, type HierarchyNestedNode, type IDFilterOps, type ISODate, type ImportDefinition, type ImportJob, type ImportParseResponse, type ImportPreview, type ImportPreviewDiff, type ImportTemplateSummary, type InstanceOwner, type IntegrationApiHealth, type InternalWidget, type Issue, type IssueSeverity, type IssueStatus, type IssueSummary, type ItemLock, type LastTouch, type LayoutAssignment, type LayoutGroup, type LayoutVersion, type ListResponse, type ManagedUser, type MetricAlertRule, type MetricAlertSubscription, type MetricDefinition, type MyTask, type MyWorkOwnedEntry, type MyWorkSla, type MyWorkSummary, type NivaroClient, type NivaroClientOptions, type NivaroExtensionPlugin, type NivaroRealtime, type NivaroRuntime, type NotificationItem, type NotificationPage, type NotificationSubscription, type NumberFilterOps, type OmniSearchHit, type OnlinePresenceConfig, type OnlinePresenceUser, type Page, type PageLayout, type PageSlotKey, type PageWidget, type PdfTemplate, type PermissionSimulation, type PersistedQuery, type PickerExclusionStatus, type PipelineFlowEdge, type PipelineFlowState, type PipelineImpactResult, type PipelineOwnerGroup, type PipelineOwnerGroupUser, type PipelineSimulation, type PipelineState, type PipelineVersionEntry, type PluginSlots, type Policy, type PreflightCheck, type PreflightReport, type PreflightSeverity, type PresenceClient, type PresenceOptions, type PresenceSession, type PresenceSessionInfo, type PresenceViewer, type PromotionApplyResult, type PromotionPreview, type Query, type Queue, type QueueColumnPrefs, type QueueCondition, type QueueDetail, type QueueDisplayConfig, type QueueItem, type QueueItemsResult, type QueueOwner, type QueueRowClickMode, type QueueScope, type QueueSource, type QueueSourceType, type QueueStats, type QueueTrendPoint, type QueueView, type QueueViewKind, type QueueWorkloadRow, type RealtimeEvent, type RecordGraphEdge, type RecordGraphNode, type RecordLink, type RecordLinkType, type RecordTemplate, type RecordViewRecap, type RegisteredAction, type RelatedCommentEntry, type RelationFilter, type RelationOption, type ReportAlert, type ReportAlertCondition, type ReportAlertLogEntry, type ReportAnnotation, type ReportColumnFormat, type ReportDateRange, type ReportDef, type ReportEntityFilter, type ReportFilterPreset, type ReportQueryColumn, type ReportQueryWidgetConfig, type ReportSnapshotEntry, type ReportSubscription, type ReportTemplateEntry, type ReportVersionEntry, type ReportWidget, type ReportWidgetConfig, type ReportWidgetData, type ReportWidgetPreset, type ReportWidgetType, type RequestTrace, type ResolvedOwner, type RetentionPolicy, type RetentionRun, type RetentionRunResult, type Revision, type Role, type Rule, type SavedView, type ScheduledChange, type ScheduledReport, type ScopeDimension, type ScopeDimensionInfo, type SemanticSearchMatch, type SessionRecording, type ShareLink, type SlaBatchStatus, type SlaRule, type SlaStatus, type StagedImportRun, type StagedImportStats, type StringFilterOps, type SubRow, type SubRowTemplate, type SyncJob, type Task, type TaskStatus, type TimelineEvent, type TraceSpan, type TreeFlatNode, type TreeNestedNode, type TreeNodeConfig, type TreePermission, type TreePermissionAction, type UUID, type UserActivityEntry, type UserActivitySummary, type UserScopesInfo, type ViewSubscription, type VirtualCollection, type Webhook, type WebhookDelivery, type WidgetFeed, type WorkflowBinding, type WorkflowHistoryEntry, type WorkflowInstance, type WorkflowInstanceData, type WorkflowState, type WorkflowTransition, type Workspace, type WorkspaceQuotas, type WorkspaceTemplate, type WorkspaceUsage, _and, _contains, _ends_with, _eq, _gt, _gte, _in, _lt, _lte, _ncontains, _neq, _nin, _nnull, _none, _null, _or, _some, _starts_with, acquireItemLock, activateLayout, addChatChannelMember, addInstanceOwner, addSubRow, aiBrief, aiBuildReport, aiChat, aiCheckDuplicates, aiGenerate, aiMapColumns, aiQuery, aiReportFilters, aiReview, aiSummarize, aiValidate, appendSessionRecordingEvents, applyContentBundle, applyRecordTemplate, applySubRowTemplate, approveAddendum, approveAiProposal, asc, backupExportPath, batchPickerExclusionStatus, bulkPickerExclusion, callExternalApi, callExternalApiEndpoint, cancelScheduledChange, cancelStagedImport, cascadeFieldDependencies, checkBlackoutDate, claimQueueItem, clearTraces, cloneItem, cloneLayout, cloneReport, compareConfigSnapshot, completeTask, copyReportWidget, createAccessAudit, createAddendum, createAlertDefinition, createAlertSubscription, createAnomalyRule, createApiKey, createApprovalChain, createAtRiskRule, createAttributeDefinition, createBlackoutDate, createChatChannel, createChatRoomType, createCollectionLayout, createComment, createDataQualityRule, createExternalApi, createExternalApiEndpoint, createFieldGroup, createFieldWatch, createGroupDm, createHierarchyConfig, createImportDefinition, createImportJob, createImportJobFromUrl, createInternalWidget, createIssue, createItem, createMetricAlertRule, createNivaro, createNotification, createNotificationSubscription, createPage, createPdfTemplate, createPersistedQuery, createPresence, createQueue, createQueueView, createRealtime, createRecordLink, createRecordTemplate, createReport, createReportAlert, createReportAnnotation, createReportFromTemplate, createReportSnapshot, createReportWidgetPreset, createRetentionPolicy, createRole, createRolePolicy, createRule, createSavedView, createScheduledChange, createScheduledReport, createShareLink, createSlaRule, createSubRowTemplate, createSyncJob, createTask, createTreePermission, createUser, createViewSubscription, createVirtualCollection, createWebhook, createWidgetFeed, createWorkspace, createWorkspaceTemplate, decideApproval, deleteAccessAudit, deleteAddendum, deleteAlertDefinition, deleteAlertSubscription, deleteAnomalyRule, deleteApiKey, deleteApprovalChain, deleteAtRiskRule, deleteAttributeDefinition, deleteBlackoutDate, deleteChatMessage, deleteCollectionLayout, deleteComment, deleteDataQualityRule, deleteExternalApi, deleteExternalApiEndpoint, deleteExternalApiSchema, deleteFieldGroup, deleteFieldTranslations, deleteFieldWatch, deleteFile, deleteHierarchyConfig, deleteImportJob, deleteInternalWidget, deleteIssue, deleteItem, deleteMetricAlertRule, deleteNotification, deleteNotificationSubscription, deletePage, deletePdfTemplate, deletePersistedQuery, deleteQueue, deleteQueueView, deleteRecordLink, deleteRecordTemplate, deleteReport, deleteReportAlert, deleteReportAnnotation, deleteReportFilterPreset, deleteReportSnapshot, deleteReportTemplate, deleteReportWidgetPreset, deleteRetentionPolicy, deleteRole, deleteRolePolicy, deleteRule, deleteSavedView, deleteScheduledReport, deleteSessionRecording, deleteSlaRule, deleteSubRow, deleteSubRowTemplate, deleteSyncJob, deleteTask, deleteTreePermission, deleteUser, deleteViewSubscription, deleteVirtualCollection, deleteWebhook, deleteWidgetFeed, deleteWorkspace, deleteWorkspaceTemplate, deployImportProcedure, desc, disableTwoFactor, drillReportRow, editChatMessage, endSessionRecording, evaluateAlerts, evaluateAtRisk, evaluateFieldDefaults, evaluateFieldLock, evaluateFieldRules, evaluateFieldVisibility, excludeFromPicker, executeBulkAction, executeCustomQuery, executeImportTemplate, executeItemAction, executeScheduledChange, explainRecordAccess, exportBlueprint, exportConfigSnapshot, exportContent, exportContentBundle, exportSchemaSnapshot, fetchFormSchema, fileDownloadPath, fileTransformPath, generateToken, generateUserToken, getAlertDefinition, getAttributeValues, getBrunoCollection, getExternalApi, getExternalApiEndpoint, getFieldTranslations, getFlowRun, getLocales, getOpenApi, getPickerExclusionStatus, getPostmanCollection, getPresence, getRetentionPolicy, getSlaRule, getSlaStatus, getTranslations, getTypes, getWebhook, globalSearch, heartbeatItemLock, importExternalApiSpec, importSchemaSnapshot, includeInPicker, installBlueprint, installCollectionPreset, invokeInternalWidgetAction, isPageSlot, joinChatRoom, leaveChatRoom, listAccessAuditRuns, listAccessAudits, listActiveAtRiskRules, listActivePresence, listAddendums, listAlertDefinitions, listAlertSubscriptions, listAllNotificationSubscriptions, listAnomalyDefinitions, listAnomalyRules, listApiKeys, listApprovalChains, listApprovalInstances, listAtRiskRules, listAttributeDefinitions, listBlackoutDates, listBulkActions, listChangeOrders, listChatChannelMembers, listChatMessages, listChatPins, listChatRoles, listChatRoomTypes, listChatRooms, listCollectionPresets, listCollectionRecordTemplates, listComments, listCronJobs, listCustomQueries, listDataQualityRules, listDataQualityRuns, listDeadLetters, listExternalApiEndpoints, listExternalApiSchemas, listExternalApis, listFieldGroups, listFieldWatches, listFiles, listFlowRuns, listHierarchyConfigs, listImportDefinitionVersions, listImportDefinitions, listImportJobs, listImportTemplates, listInternalWidgets, listIssues, listItemActions, listItemScheduledChanges, listLayoutVersions, listMetricAlertRules, listMetricAlertSubscriptions, listMetricDefinitions, listMyTasks, listNotificationSubscriptions, listNotifications, listOrphanFiles, listPages, listPdfTemplates, listPersistedQueries, listPinnedItems, listPipelineVersions, listQueueViews, listQueues, listRecordLinks, listRecordTemplates, listRegisteredExtensions, listRegisteredFlowOperations, listRegisteredFlowTriggers, listRelatedComments, listReportAlerts, listReportAnnotations, listReportFilterPresets, listReportSnapshots, listReportTemplates, listReportVersions, listReportWidgetPresets, listReports, listRetentionPolicies, listRetentionRuns, listRolePolicies, listRoleUsers, listRoles, listRules, listSavedViews, listScheduledChanges, listScheduledReports, listScopeDimensions, listSessionRecordings, listShareLinks, listSlaRules, listStagedImports, listSubRowTemplates, listSubRows, listSyncJobs, listTasks, listThroughputCollections, listTraces, listTreePermissions, listViewSubscriptions, listVirtualCollections, listWebhookDeliveries, listWebhooks, listWidgetFeeds, listWorkspaceTemplates, listWorkspaces, markAllNotificationsRead, markChatRoomRead, markNotificationRead, markNotificationsRead, moveTreeNode, omniSearch, presignFileUpload, previewContentBundle, previewImportJob, previewReportWidget, publishItem, queryVirtualCollection, readAccessAuditFindings, readActiveLayout, readActivity, readActivityReportSummary, readAddendum, readAiSettings, readAlertLog, readAllStateOwners, readAnomalyLog, readApiAnalyticsErrors, readApiAnalyticsSummary, readApiAnalyticsTimeseries, readApiAnalyticsTopCollections, readApiAnalyticsTopPaths, readApiKey, readApprovalBrief, readApprovalChain, readAtRiskSummary, readBackupManifest, readChatConfig, readChatDirectory, readChatPeerRead, readCollection, readCollectionLayout, readCollectionLayouts, readCollections, readConfigInventory, readCoverageGaps, readDataQualityRun, readDetailLayout, readDistinctValues, readDraftPublishConfig, readErpSubmissionHistory, readFieldChangeHistory, readFieldConfig, readFieldHistory, readFieldImpact, readFieldWatch, readFileMeta, readFileUsage, readHierarchyConfig, readHierarchyNodeAncestors, readHierarchyNodeChildren, readHierarchyNodes, readHierarchyTree, readImportJob, readImportProcedure, readInstanceOwners, readIntegrationHealth, readInternalWidget, readIssue, readIssueSummary, readItem, readItemLock, readItemLockConfig, readItems, readLastTouch, readLayoutAssignments, readLayoutGroups, readMe, readMetricAlertLog, readMyScopes, readMyWork, readNotificationCount, readNotificationSubscriptionStats, readOnlinePresence, readOwnerGroups, readPage, readPageWidgetData, readPdfTemplate, readPersistedQuery, readPipelineFlowMap, readPipelineReplay, readPipelineTemplate, readPipelineTemplates, readPipelineVersion, readPreflight, readQueue, readQueueCollectionStates, readQueueColumnPrefs, readQueueItems, readQueueTrends, readQueueWorkload, readRecordGraph, readRelationOptions, readReport, readReportAlertLog, readReportAlertsLog, readReportFilterOptions, readReportFiring, readReportSnapshot, readReportSubscription, readReportUsage, readReportWidgetData, readRevision, readRevisions, readRole, readScopeDimensionCoverage, readSessionRecordingEvents, readSettings, readSingleton, readSlaStatusBatch, readStagedImport, readStagedImportStats, readStateOwnerGroups, readStateOwners, readStateOwnersBatch, readSyncJob, readTask, readThroughputReport, readTimeline, readTrace, readTreeAncestors, readTreeChildren, readTreeConfig, readTreeDescendants, readTreeNested, readTreeNodes, readTwoFactorStatus, readUnreadNotificationCount, readUser, readUserActivity, readUserActivitySummary, readUserCard, readUserScopes, readUsers, readWorkflowBindings, readWorkflowInstance, readWorkflowInstances, readWorkspace, readWorkspaceUsage, rebuildTreePaths, reindexSemanticSearch, rejectAddendum, rejectAiProposal, releaseItemLock, releaseQueueItem, rematerializeQueue, removeChatChannelMember, removeInstanceOwner, renderInternalWidget, renderPdfTemplate, reorderFieldGroups, reorderSubRows, reorderTreeSiblings, replaceSubRows, replayActivityEvent, replayFlow, reportClientError, requestRecordAccess, requeueStagedImport, resetReportCache, resolveReportAlert, restoreImportDefinitionVersion, restoreLayoutVersion, restorePipelineVersion, restoreReportVersion, retryDeadLetter, retryErpSubmission, retryWebhookDelivery, revokeApiKey, revokeShareLink, revokeToken, revokeUserToken, rollbackRevision, rotateWidgetFeedToken, runAccessAudit, runActivityReport, runActivityReportCsv, runCronJob, runDataQuality, runRetentionPolicy, runScheduledReport, runSyncJob, saveMyScopeDefaults, saveReportFilterPreset, saveReportTemplate, saveReportWidgets, saveUserScope, searchChatMessages, semanticSearch, sendBulkNotification, sendChatMessage, sendTestMail, sessionRecordingEnabled, setMyDelegate, setQueueDefaultView, setReportSubscription, setTranslations, setupTwoFactor, simulatePermissions, simulatePipeline, simulatePipelineImpact, startApproval, startMasquerade, startSessionRecording, startWorkflow, stopMasquerade, submitAddendum, submitFormItem, submitItemForReview, submitToErp, subscribeFieldWatch, subscribeMetricAlert, suggestImportValidation, suggestQueueLabels, switchWorkspace, testExternalApi, testFlow, testWebhook, toggleChatPin, toggleChatReaction, togglePinnedItem, toggleReportAlert, touchRecordView, transitionWorkflow, unpublishItem, unsubscribeFieldWatch, unsubscribeMetricAlert, updateAccessAudit, updateAddendum, updateAiSettings, updateAlertDefinition, updateAnomalyLogEntry, updateAnomalyRule, updateApiKey, updateApprovalChain, updateAtRiskRule, updateAttributeDefinition, updateAttributeValues, updateChatChannel, updateChatRoom, updateChatRoomType, updateCollectionLayout, updateComment, updateDataQualityRule, updateDraftPublishConfig, updateErpSubmissionStatus, updateExternalApi, updateExternalApiEndpoint, updateFieldConfig, updateFieldGroup, updateFieldWatch, updateFileMeta, updateHierarchyConfig, updateImportDefinition, updateInternalWidget, updateIssue, updateItem, updateItemLockConfig, updateLayoutAssignments, updateLayoutUngroupedSort, updateMe, updateMetricAlertRule, updateMetricAlertSubscription, updateNotificationSubscription, updatePage, updatePdfTemplate, updatePersistedQuery, updateQueue, updateQueueSources, updateQueueView, updateRecordTemplate, updateReport, updateReportAlert, updateReportWidgetPreset, updateRetentionPolicy, updateRole, updateRolePolicy, updateRoleUiPermissions, updateRule, updateSavedView, updateScheduledReport, updateSettings, updateSingleton, updateSlaRule, updateSyncJob, updateTask, updateTreePermission, updateUser, updateVirtualCollection, updateWebhook, updateWidgetFeed, updateWorkflowBinding, updateWorkspace, validateVirtualCollectionSql, verifyTwoFactor };