@nivaro/sdk 0.2.6 → 0.3.0

package/dist/index.d.ts

@@ -1878,6 +1878,169 @@ declare function readIntegrationHealth(): Command<{
     };
 }>;
 
+/**
+ * Agents working with people: ask_human questions (#3220), agent task assignees (#3223) and
+ * agent triggers (#3210, administrators).
+ */
+
+type AgentQuestionStatus = 'open' | 'answered' | 'expired' | 'cancelled';
+interface AgentQuestion {
+    id: UUID;
+    status: AgentQuestionStatus;
+    question: string;
+    choices: string[];
+    /** false = the answer must be one of the choices. */
+    allow_text: boolean;
+    collection: string | null;
+    item: string | null;
+    /** The assistant's name (its OAuth app or API key). */
+    asked_by: string;
+    /** The person the assistant acts for. */
+    asked_for: UUID;
+    asked_for_name: string | null;
+    recipient: UUID;
+    recipient_name: string | null;
+    answer: string | null;
+    answer_choice: string | null;
+    answered_at: ISODate | null;
+    expires_at: ISODate;
+    created_at: ISODate;
+    /** Asker only: the connection key it came from and when the answer was collected. */
+    connection?: string;
+    answer_seen_at?: ISODate | null;
+}
+/** Ask a person (default: the caller's own person) a question; it lands in their inbox. */
+declare function askHuman(body: {
+    to?: UUID | 'me';
+    question: string;
+    choices?: string[];
+    allow_text?: boolean;
+    expires_in_minutes?: number;
+    collection?: string;
+    item?: string;
+}): Command<{
+    data: AgentQuestion;
+}>;
+/** Read a question; `wait` (0–25 s) holds the request until it is answered. */
+declare function readAgentQuestion(id: UUID, wait?: number): Command<{
+    data: AgentQuestion;
+}>;
+/** Questions waiting on the caller. `can_answer` is false outside a signed-in browser. */
+declare function listMyAgentQuestions(): Command<{
+    data: AgentQuestion[];
+    ready: boolean;
+    can_answer?: boolean;
+}>;
+/** What the calling connection asked (`unseen` = answered, not collected yet). */
+declare function listAskedQuestions(query?: {
+    status?: 'open' | 'unseen' | 'answered' | 'expired' | 'cancelled' | 'all';
+    limit?: number;
+}): Command<{
+    data: AgentQuestion[];
+}>;
+/** Answer a question (the person asked, from a signed-in session only). */
+declare function answerAgentQuestion(id: UUID, body: {
+    choice?: string;
+    answer?: string;
+}): Command<{
+    data: AgentQuestion;
+}>;
+declare function cancelAgentQuestion(id: UUID): Command<{
+    data: AgentQuestion;
+}>;
+interface TaskAgent {
+    /** Connection key: o<grant id> (a connected app) or k<api key id>. */
+    conn: string;
+    kind: 'oauth' | 'api_key';
+    name: string;
+    /** The person the agent acts for — the task's assignee. */
+    user_id: UUID;
+    user_name: string | null;
+}
+/** Agents the caller may hand a task to (their own; `all` for an administrator). */
+declare function listTaskAgents(opts?: {
+    all?: boolean;
+}): Command<{
+    data: TaskAgent[];
+    ready: boolean;
+    me?: string | null;
+}>;
+/** Tasks handed to the calling agent connection. */
+declare function listAgentTasks(status?: string): Command<{
+    data: Array<Record<string, unknown>>;
+}>;
+type AgentTriggerEvent = 'create' | 'update' | 'transition';
+interface AgentTrigger {
+    id: number;
+    name: string;
+    description: string | null;
+    enabled: boolean;
+    collection: string;
+    events: AgentTriggerEvent[];
+    conditions: Array<{
+        field: string;
+        op: string;
+        value: unknown;
+    }>;
+    to_states: string[];
+    fields: string[] | null;
+    instructions: string | null;
+    url: string;
+    /** Masked when set. */
+    signing_secret: string | null;
+    /** Values masked. */
+    headers: Record<string, string>;
+    max_attempts: number;
+    owner: UUID;
+    owner_name: string | null;
+    last_fired_at: ISODate | null;
+    created_at: ISODate;
+    updated_at: ISODate;
+    last_7_days?: {
+        delivered: number;
+        dead: number;
+        retrying: number;
+        skipped: number;
+    };
+}
+interface AgentTriggerDelivery {
+    id: number;
+    trigger_id: number;
+    delivery_id: UUID;
+    event: string;
+    collection: string;
+    item: string | null;
+    status: 'sending' | 'retrying' | 'delivered' | 'dead' | 'discarded' | 'skipped';
+    attempts: number;
+    max_attempts: number;
+    next_attempt_at: ISODate | null;
+    last_status_code: number | null;
+    last_error: string | null;
+    latency_ms: number | null;
+    delivered_at: ISODate | null;
+    created_at: ISODate;
+    request_body?: string | null;
+    response_body?: string | null;
+}
+declare function listAgentTriggers(): Command<{
+    data: {
+        ready: boolean;
+        triggers: AgentTrigger[];
+        events: AgentTriggerEvent[];
+        ops: string[];
+        max_attempts_cap: number;
+    };
+}>;
+declare function listAgentTriggerDeliveries(query?: {
+    trigger?: number;
+    status?: string;
+    limit?: number;
+    before?: number;
+}): Command<{
+    data: AgentTriggerDelivery[];
+    has_more: boolean;
+}>;
+
 /**
  * AI commands: field generation, record summarization, natural-language
  * query, CSV column mapping, and semantic (vector) search.
@@ -2114,11 +2277,6 @@ declare function chaosWhatIf(dependency: string): Command<{
     data: ChaosWhatIfAnswer;
 }>;
 
-/**
- * Collaboration commands: tasks, approval chains, item locks, notifications
- * (paginated center), per-user activity, issues.
- */
-
 type TaskStatus = 'open' | 'in_progress' | 'done' | 'cancelled';
 type TaskPriority = 'low' | 'normal' | 'urgent';
 /** One `[{field, op, value}]` rule: the task closes itself when the record
@@ -2156,6 +2314,9 @@ interface Task {
     team_name?: string | null;
     /** The record's human id (TP26-80366). */
     item_label?: string | null;
+    /** #3223 — the agent connection the task is handed to (assignee = the person it acts for). */
+    agent_assignee?: string | null;
+    agent_name?: string | null;
 }
 interface MyTask extends Task {
     item_label: string | null;
@@ -2223,6 +2384,8 @@ declare function createTask(body: {
     due_date?: string | null;
     priority?: TaskPriority;
     done_when?: TaskDoneWhenRule[] | null;
+    /** #3223 — hand it to an agent connection (o<grant id> | k<api key id>) instead of a person. */
+    agent?: string | null;
 }): Command<{
     data: Task & {
         delegated_from: UUID | null;
@@ -2236,6 +2399,8 @@ declare function updateTask(id: number, body: Partial<{
     status: TaskStatus;
     priority: TaskPriority;
     done_when: TaskDoneWhenRule[] | null;
+    /** #3223 — hand to an agent connection; null takes it back. */
+    agent: string | null;
 }>): Command<{
     data: Task;
 }>;
@@ -2407,6 +2572,21 @@ interface NotificationItem {
     category?: string | null;
     /** Per-channel delivery outcome (in-app / push / email / sms). */
     delivery?: Record<string, unknown> | null;
+    archived?: boolean;
+    /** Set when the sender asked for an explicit acknowledgement. */
+    ack?: {
+        required: true;
+        at: ISODate | null;
+        by: string | null;
+    } | null;
+    sender?: UUID | null;
+    sender_name?: string | null;
+    snoozed_until?: ISODate | null;
+    snooze_until_change?: boolean;
+    /** The record's revision current when the notification was written. */
+    revision_id?: number | null;
+    /** Where opening it leads, for the app named by `app` (else the recipient's). */
+    url?: string | null;
 }
 interface NotificationPage {
     data: NotificationItem[];
@@ -2424,6 +2604,8 @@ interface NotificationPage {
         ids: number[];
         rows: NotificationItem[];
     }>;
+    /** Page 1: acknowledgement-required rows, pinned whatever the filter. */
+    pinned?: NotificationItem[];
     total: number;
     page: number;
     limit: number;
@@ -2433,7 +2615,17 @@ interface NotificationPage {
 declare function listNotifications(query?: {
     page?: number;
     limit?: number;
-    status?: 'all' | 'inbox' | 'read';
+    /** 'archived' lists only archived rows (they are left out of every other view). */
+    status?: 'all' | 'inbox' | 'read' | 'archived';
+    /** Unread only (same as `status: 'inbox'`). */
+    unread?: boolean;
+    /** Contains-match on subject or message. */
+    search?: string;
+    collection?: string;
+    /** A sender's user id. */
+    sender?: string;
+    /** true = only the snoozed (sleeping) rows. */
+    snoozed?: boolean;
     app?: string;
     /** 'critical' | 'needs_you' | 'fyi' | 'attention' (= critical + needs_you). */
     lane?: string;
@@ -2863,9 +3055,24 @@ declare function updateChatChannel(id: number, body: Partial<{
 }>): Command<{
     data: ChatChannel;
 }>;
-/** Members of a channel (visible to anyone who can see the room). */
-declare function listChatChannelMembers(id: number): Command<{
-    data: ChatChannelMember[];
+/**
+ * Members of a channel (visible to anyone who can see the room). With no
+ * options the full list comes back (old shape). Pass `limit` (default 50, max
+ * 200), `offset` and/or `q` (name, @handle, email local part) to get one page,
+ * online people first, plus `total` and `has_more`.
+ */
+declare function listChatChannelMembers(id: number, opts?: {
+    limit?: number;
+    offset?: number;
+    q?: string;
+}): Command<{
+    data: Array<ChatChannelMember & {
+        name?: string;
+        title?: string | null;
+        online?: boolean;
+    }>;
+    total?: number;
+    has_more?: boolean;
 }>;
 /** Add someone to a channel (owner or admin). */
 declare function addChatChannelMember(id: number, userId: string): Command<{
@@ -2955,6 +3162,17 @@ interface MyWorkSummary {
         item: string | null;
         timestamp: ISODate;
     }>;
+    /** #3220 — questions assistants asked the caller (open). */
+    questions?: AgentQuestion[];
+    /** #3223 / #3220 — present only when the caller is an agent connection. */
+    agent?: {
+        connection: string;
+    };
+    agent_tasks?: Array<Task & {
+        item_label?: string | null;
+    }>;
+    /** Answers to this connection's questions it had not collected (now collected). */
+    answers?: AgentQuestion[];
     counts: {
         owned: number;
         owned_breached: number;
@@ -2962,6 +3180,9 @@ interface MyWorkSummary {
         tasks: number;
         approvals: number;
         notifications: number;
+        questions?: number;
+        agent_tasks?: number;
+        answers?: number;
     };
 }
 /** The current user's actionable inbox: owned records (SLA-first), tasks,
@@ -3824,6 +4045,58 @@ declare function readDashboard(id: UUID): Command<{
 declare function readDashboardWidgetData(widgetId: UUID, filters?: DashboardFilter[] | null): Command<{
     data: DashboardWidgetData | null;
 }>;
+/**
+ * Create a dashboard owned by the caller. A `role_id` shares it with that role (and forces
+ * `is_shared`).
+ */
+declare function createDashboard(body: {
+    name: string;
+    is_shared?: boolean;
+    role_id?: UUID | null;
+}): Command<{
+    data: Dashboard;
+}>;
+/** Rename, share or set the saved filter bar of a dashboard (its owner or an admin). */
+declare function updateDashboard(id: UUID, body: {
+    name?: string;
+    is_shared?: boolean;
+    role_id?: UUID | null;
+    /** Up to 20 filters; an empty list clears the bar. */
+    global_filters?: DashboardFilter[] | null;
+}): Command<{
+    data: Dashboard;
+}>;
+/** Delete a dashboard and its widgets (its owner or an admin). */
+declare function deleteDashboard(id: UUID): Command<void>;
+/** A widget's settings on create / update. Grid units: `col`/`row` position, `width`/`height`. */
+interface DashboardWidgetInput {
+    /**
+     * count | sum | avg | latest | bar_chart | line_chart | report_preset | saved_view |
+     * cumulative_flow | ai_query.
+     */
+    type: DashboardWidgetType;
+    title: string;
+    collection?: string | null;
+    /** The summed/averaged field, the `latest` column list, a saved view or preset id. */
+    field?: string | null;
+    filters?: unknown;
+    col?: number;
+    row?: number;
+    width?: number;
+    height?: number;
+    /** Refetch interval in seconds (10–86400); null = the page default. */
+    refresh_seconds?: number | null;
+}
+/** Add a widget to a dashboard (its owner or an admin). */
+declare function createDashboardWidget(dashboardId: UUID, body: DashboardWidgetInput): Command<{
+    data: DashboardWidget;
+}>;
+/** Change a widget (its dashboard's owner or an admin). */
+declare function updateDashboardWidget(widgetId: UUID, body: Partial<DashboardWidgetInput>): Command<{
+    data: DashboardWidget;
+}>;
+/** Remove a widget (its dashboard's owner or an admin). */
+declare function deleteDashboardWidget(widgetId: UUID): Command<void>;
 
 /**
  * Layout editor commands: the bundle + atomic ops save model, the overview and
@@ -4202,7 +4475,7 @@ declare function readPickerExclusion(collection: string, itemId: string | number
         excluded: boolean;
     };
 }>;
-/** Which of these ids are excluded from pickers? */
+/** Which of these ids are hidden from pickers? */
 declare function readPickerExclusions(collection: string, ids: Array<string | number>): Command<{
     data: {
         excluded: string[];
@@ -4345,6 +4618,27 @@ interface GlobalSearchRecord {
     id: string | number;
     label: string;
     snippet: string;
+    display_name?: string | null;
+    /** The field the match was found in — always one the caller may read. */
+    matched_field?: string;
+    matched_label?: string;
+    /** Its value as the caller read it (≤80 characters). */
+    matched_value?: string;
+    exact?: boolean;
+    score?: number;
+    /** The caller created it, owns it, or opened it from search lately. */
+    mine?: boolean;
+    updated_at?: string;
+}
+interface GlobalSearchPerson {
+    id: string;
+    first_name: string | null;
+    last_name: string | null;
+    email: string | null;
+    title: string | null;
+    department: string | null;
+    status?: string | null;
+    account_kind?: string | null;
 }
 interface GlobalSearchResults {
     records: GlobalSearchRecord[];
@@ -4356,9 +4650,38 @@ interface GlobalSearchResults {
         label: string;
         path: string;
     }>;
+    /** People matches (`@name` scopes to people only). */
+    people?: GlobalSearchPerson[];
+    /** Meaning-based matches when semantic search is on. */
+    semantic?: Array<{
+        collection: string;
+        id: unknown;
+        label: string;
+        snippet: string;
+    }>;
+    /** An exact id / friendly-id hit. */
+    exact?: GlobalSearchRecord | null;
+    /** "Did you mean" rewordings. */
+    suggestions?: string[];
+    /** How the query was read: plain text, scope prefix and field filters. */
+    query?: {
+        text: string;
+        scope: string | null;
+        filters: unknown[];
+    };
+    /** Other kinds (comments, files, videos, docs, chat, config) — shape per kind. */
+    extra?: unknown;
+    /** Commands the client may offer (run only through their own routes, after a confirm). */
+    commands?: unknown;
 }
-/** Search records (permission-scoped), admin pages, and quick actions. */
-declare function globalSearch(q: string): Command<{
+/**
+ * Search records (permission-scoped), people, admin pages and quick actions. Understands
+ * the query language (scope prefixes, field filters, exact ids). `labels: true` matches
+ * only what each record's label shows.
+ */
+declare function globalSearch(q: string, opts?: {
+    labels?: boolean;
+}): Command<{
     data: GlobalSearchResults;
 }>;
 interface ApiKeyScope {
@@ -5179,6 +5502,37 @@ declare function updateFileMeta(id: string, data: {
     data: FileRecord;
 }>;
 declare function deleteFile(id: string): Command<void>;
+/** What POST /files/attach answers (#3212). */
+interface AttachedFile {
+    collection: string;
+    item: string;
+    field: string;
+    /** The file a single-file field held before (`replace: true`), else null. */
+    replaced: string | null;
+    file: {
+        id: string;
+        filename_download: string;
+        type: string;
+        filesize: number;
+    };
+}
+/**
+ * Upload a file as base64 and link it to a record's file field in one call (#3212): the
+ * record is judged as the caller (read gate, update permission, field list, edit lock) and the
+ * link goes through the items service. 10 MB decoded at most. A single-file field that already
+ * holds a file answers 409 FIELD_HAS_FILE unless `replace` is true.
+ */
+declare function attachFileToRecord(data: {
+    collection: string;
+    item: string | number;
+    field?: string;
+    filename: string;
+    content_base64: string;
+    type?: string;
+    replace?: boolean;
+}): Command<{
+    data: AttachedFile;
+}>;
 interface FileUsageEntry {
     table: string;
     column: string;
@@ -5211,6 +5565,181 @@ declare function fileTransformPath(id: string, options?: {
     quality?: number;
 }): string;
 
+/**
+ * Form and widget drill-down reads for assistants (#3208 #3216 #3217 #3218).
+ * Every one is computed AS THE CALLER — permissions, row filters, User Scopes
+ * and field lists bind; a role preview is for administrators only.
+ */
+
+type UUID$1 = string;
+/** The rows behind a dashboard or report widget's number. */
+interface WidgetDrillRows {
+    /** What the number is: type, collection, metric, filters, date range, segment, query. */
+    definition: Record<string, unknown>;
+    collection: string | null;
+    total: number | null;
+    capped: boolean;
+    columns: string[];
+    rows: Array<Record<string, unknown>>;
+    /** The record filter the rows came from (items filter syntax). */
+    filter?: Record<string, unknown> | null;
+    note?: string;
+    dashboard?: {
+        id: string;
+        name?: string;
+    };
+    report?: {
+        id: string;
+        name?: string;
+    };
+}
+interface WidgetDrillBody {
+    /** One part of the figure: a chart bar's value, a series dimension, a day ('date'). */
+    segment?: {
+        field?: string | null;
+        value?: unknown;
+    } | null;
+    /** Columns to return (readable, registered fields only). Default: the widget's own. */
+    fields?: string[];
+    /** Rows (1–100, default 25). */
+    limit?: number;
+}
+/** The definition and rows behind a dashboard widget, as the caller. */
+declare function drillDashboardWidgetRows(widgetId: UUID$1, body?: WidgetDrillBody & {
+    extra_filters?: DashboardFilter[];
+}): Command<{
+    data: WidgetDrillRows;
+}>;
+/** The definition and rows behind a Report Studio widget, as the caller. */
+declare function drillReportWidgetRows(reportId: UUID$1, widgetId: UUID$1, body?: WidgetDrillBody & {
+    date_range?: {
+        preset: string;
+        start?: string;
+        end?: string;
+    } | null;
+    entity_filters?: Array<{
+        field: string;
+        values: Array<string | number>;
+    }>;
+}): Command<{
+    data: WidgetDrillRows;
+}>;
+interface FormFieldStateRow {
+    field: string;
+    label: string;
+    group_key: string | null;
+    section: string | null;
+    visible: boolean;
+    required: boolean;
+    locked: boolean;
+    missing?: true;
+    hidden_by?: string;
+    locked_by?: string;
+    why?: string;
+}
+interface FormStateAnswer {
+    collection: string;
+    record: string | null;
+    as: {
+        role: string | null;
+        admin: boolean;
+        preview: boolean;
+    };
+    layout: {
+        id: number;
+        name: string;
+        why: string | null;
+    } | null;
+    can_update: boolean;
+    derived: Record<string, unknown>;
+    groups: Array<{
+        key: string;
+        label: string;
+        type: string;
+        parent_key: string | null;
+        visible: boolean;
+        locked: boolean;
+        why?: string;
+    }>;
+    fields: FormFieldStateRow[];
+    summary: {
+        visible: number;
+        hidden: number;
+        required: string[];
+        locked: string[];
+        missing: string[];
+    };
+    note?: string;
+}
+interface FormStateQuery {
+    collection: string;
+    item?: string | number;
+    layout_id?: number;
+    /** Field values laid over the record (or a new one) before the rules run. */
+    values?: Record<string, unknown>;
+    /** Administrators only: judge as this role (name or id). */
+    role?: string;
+    viewport?: 'phone';
+}
+/** Which fields the resolved form shows, requires and locks, and why. */
+declare function readFormState(query: FormStateQuery): Command<{
+    data: FormStateAnswer;
+}>;
+interface FormImageAnswer {
+    mime: 'image/png';
+    base64: string;
+    bytes: number;
+    width: number;
+    collection: string;
+    record: string | null;
+    as: FormStateAnswer['as'];
+    layout: FormStateAnswer['layout'];
+    can_update: boolean;
+    summary: FormStateAnswer['summary'];
+}
+/** A PNG of how the form looks (base64), values only where the caller may read them. */
+declare function renderFormImage(query: FormStateQuery & {
+    theme?: 'light' | 'dark';
+    show_hidden?: boolean;
+}): Command<{
+    data: FormImageAnswer;
+}>;
+interface LayoutLintAnswer {
+    layout: {
+        id: number;
+        name: string;
+        collection: string;
+    };
+    score: number;
+    costs: Array<{
+        label: string;
+        points: number;
+    }>;
+    counts: {
+        error: number;
+        warn: number;
+        info: number;
+    };
+    findings: Array<{
+        id: string;
+        rule: string;
+        severity: 'error' | 'warn' | 'info';
+        where: string;
+        target: Record<string, unknown>;
+        message: string;
+        fix?: {
+            label: string;
+            ops: Array<Record<string, unknown>>;
+        };
+    }>;
+    truncated?: true;
+    total?: number;
+}
+/** The layout editor's lint findings and health score for a saved form. Admin only. */
+declare function readLayoutLint(layoutId: number): Command<{
+    data: LayoutLintAnswer;
+}>;
+
 /**
  * Help videos: tutorial recordings with edits, versions, where they show,
  * required viewing and progress. Upload parts are raw octet-stream PUTs to
@@ -5700,43 +6229,227 @@ declare const executeImportTemplate: (id: string, payload: {
 }>;
 
 /**
- * Infrastructure commands: workspaces (usage/quotas/templates), sync jobs,
- * ERP submissions, PDF templates, custom pages, two-factor auth, settings.
+ * The caller's inbox beyond the list: snooze, acknowledge, bulk actions, archive, per-record
+ * mutes, what they sent; their reminders; and search helpers (saved searches, per-collection
+ * match counts and pages). Everything here acts on the caller's own rows only.
  */
 
-interface WorkspaceQuotas {
-    max_collections?: number;
-    max_users?: number;
-    max_roles?: number;
-    [key: string]: number | undefined;
-}
-interface Workspace {
-    id: UUID;
-    name: string;
-    slug: string;
-    icon: string | null;
-    color: string | null;
-    quotas?: string | WorkspaceQuotas | null;
-    created_at: ISODate;
-    updated_at: ISODate;
-}
-interface WorkspaceUsage {
-    quotas: WorkspaceQuotas;
-    usage: Record<string, number>;
-}
-interface WorkspaceTemplate {
-    id: number;
-    name: string;
-    description: string | null;
-    source_workspace: UUID;
-    created_by: UUID;
-    created_at: ISODate;
-}
-declare function listWorkspaces(): Command<{
-    data: Workspace[];
+/**
+ * Snooze a notification until a time (`until`, ISO, in the future), wake it (`until: null`),
+ * or sleep it until the record it names next changes (`untilChange: true`).
+ */
+declare function snoozeNotification(id: number, opts: {
+    until?: string | null;
+    untilChange?: boolean;
+}): Command<{
+    data: {
+        snoozed_until: ISODate | string | null;
+        snooze_until_change?: boolean;
+    };
 }>;
-declare function readWorkspace(id: string): Command<{
-    data: Workspace;
+/** Acknowledge a notification whose sender asked for an explicit acknowledgement. */
+declare function acknowledgeNotification(id: number): Command<{
+    data: {
+        id: number;
+        ack: {
+            required: true;
+            at: ISODate;
+            by: string;
+        };
+    };
+}>;
+/** The notification-center filter (the list's own) for "everything matching" actions. */
+interface NotificationFilter {
+    status?: 'inbox' | 'read' | 'archived';
+    unread?: boolean;
+    search?: string;
+    collection?: string;
+    sender?: string;
+    snoozed?: boolean;
+    lane?: 'critical' | 'needs_you' | 'fyi' | 'attention';
+    category?: string;
+}
+/**
+ * One action over several of the caller's notifications: explicit `ids` (up to 1000) or
+ * everything matching `filter` (up to 2000). `snooze` needs a future `until`.
+ */
+declare function bulkNotificationAction(body: {
+    action: 'read' | 'archive' | 'snooze';
+    ids?: number[];
+    filter?: NotificationFilter;
+    until?: string;
+}): Command<{
+    data: {
+        updated: number;
+        ids?: number[];
+    };
+}>;
+/** Archive every read notification older than `days` (1–3650). */
+declare function archiveReadNotifications(days: number): Command<{
+    data: {
+        updated: number;
+    };
+}>;
+interface SentNotificationGroup {
+    key: string;
+    subject: string;
+    message: string | null;
+    created_at: ISODate;
+    lane: string | null;
+    category: string | null;
+    collection: string | null;
+    item: string | null;
+    recipients: Array<{
+        id: string;
+        name: string;
+        read: boolean;
+        read_at: ISODate | null;
+        ack: 'pending' | 'acked' | null;
+        ack_at: string | null;
+    }>;
+    read_count: number;
+    ack_required: boolean;
+    ack_count: number;
+    total: number;
+}
+/**
+ * What the caller sent, grouped per message with each recipient's read / acknowledgement
+ * state. Critical-lane sends only unless `lane: 'all'`.
+ */
+declare function listSentNotifications(query?: {
+    lane?: 'all';
+    /** Groups (default 50, max 100). */
+    limit?: number;
+}): Command<{
+    data: SentNotificationGroup[];
+}>;
+/** Whether the caller muted notifications about one record. */
+declare function readRecordMute(collection: string, item: string | number): Command<{
+    data: {
+        muted: boolean;
+    };
+}>;
+/** Mute or unmute notifications about one record for the caller; answers the new state. */
+declare function toggleRecordMute(collection: string, item: string | number): Command<{
+    data: {
+        muted: boolean;
+    };
+}>;
+interface Reminder {
+    id: number;
+    user: string;
+    note: string;
+    room: string | null;
+    remind_at: ISODate;
+    sent: boolean | number;
+}
+/** The caller's reminders, soonest first; `includeSent` adds delivered ones (max 200). */
+declare function listReminders(includeSent?: boolean): Command<{
+    data: Reminder[];
+}>;
+/** Remind the caller at `remind_at` (ISO, not in the past); delivered in-app. */
+declare function createReminder(body: {
+    note: string;
+    remind_at: string;
+}): Command<{
+    data: Reminder;
+}>;
+/** Change the note or time of an undelivered reminder. */
+declare function updateReminder(id: number, body: {
+    note?: string;
+    remind_at?: string;
+}): Command<{
+    data: Reminder;
+}>;
+/** Cancel (or clear a delivered) reminder. */
+declare function deleteReminder(id: number): Command<void>;
+interface SavedSearch {
+    id: string;
+    name: string;
+    q: string;
+    scope: string | null;
+    created_at: ISODate;
+}
+/** The caller's saved searches. */
+declare function listSavedSearches(): Command<{
+    data: SavedSearch[];
+}>;
+/** Save a search for the caller. */
+declare function createSavedSearch(body: {
+    name: string;
+    q: string;
+    scope?: string | null;
+}): Command<{
+    data: SavedSearch;
+}>;
+/** Remove one of the caller's saved searches. */
+declare function deleteSavedSearch(id: string): Command<{
+    data: {
+        ok: true;
+    };
+}>;
+/**
+ * How many records match `q` in each listed collection (up to 40), as the caller — the
+ * search page's tabs. Empty when `q` is under 2 characters.
+ */
+declare function readSearchCounts(q: string, collections: string[], opts?: {
+    labels?: boolean;
+}): Command<{
+    data: Array<{
+        collection: string;
+        display_name: string | null;
+        count: number;
+    }>;
+}>;
+/** One collection's search matches, a page at a time (default 25). */
+declare function readSearchRecords(q: string, collection: string, opts?: {
+    offset?: number;
+    limit?: number;
+    labels?: boolean;
+}): Command<{
+    data: GlobalSearchRecord[];
+    total: number | null;
+    query?: unknown;
+}>;
+
+/**
+ * Infrastructure commands: workspaces (usage/quotas/templates), sync jobs,
+ * ERP submissions, PDF templates, custom pages, two-factor auth, settings.
+ */
+
+interface WorkspaceQuotas {
+    max_collections?: number;
+    max_users?: number;
+    max_roles?: number;
+    [key: string]: number | undefined;
+}
+interface Workspace {
+    id: UUID;
+    name: string;
+    slug: string;
+    icon: string | null;
+    color: string | null;
+    quotas?: string | WorkspaceQuotas | null;
+    created_at: ISODate;
+    updated_at: ISODate;
+}
+interface WorkspaceUsage {
+    quotas: WorkspaceQuotas;
+    usage: Record<string, number>;
+}
+interface WorkspaceTemplate {
+    id: number;
+    name: string;
+    description: string | null;
+    source_workspace: UUID;
+    created_by: UUID;
+    created_at: ISODate;
+}
+declare function listWorkspaces(): Command<{
+    data: Workspace[];
+}>;
+declare function readWorkspace(id: string): Command<{
+    data: Workspace;
 }>;
 /** Usage counters vs configured quota limits. */
 declare function readWorkspaceUsage(id: string): Command<{
@@ -6307,6 +7020,8 @@ interface McpCapabilities {
     admin_tools: boolean;
     /** Chat tools (#2492): none, reading only, or reading and posting. */
     chat: 'none' | 'read' | 'post';
+    /** PATCH /items/:collection/:id?dry_run=1 rehearses an update (#3222); absent on older instances. */
+    update_preview?: boolean;
 }
 /** What the MCP server may offer this credential (GET /api/mcp/capabilities). */
 declare function readMcpCapabilities(): Command<{
@@ -6314,79 +7029,517 @@ declare function readMcpCapabilities(): Command<{
 }>;
 
 /**
- * Operations reads (admin): readiness, detailed health, this process's runtime
- * stats, the instance roster, the DB connection pool, expensive SQL, the
- * Traffic Map snapshot, the background-job registry + run history, and a
- * summarized CPU profile of the replica that answers.
+ * Observability commands: the audit log beyond the list (one entry, the action list, export
+ * reporting), the change feed, background job runs (live log, cancel, what is busy), the
+ * caller's own jobs and background reads, the API request log, per-key usage, the outbound
+ * mail log and the caller's own notification delivery history.
+ *
+ * Admin-only reads say so; everything else is scoped to the caller by the API.
  */
 
-interface ReadyReport {
-    ready: boolean;
-    checks: Array<{
-        id: string;
-        ok: boolean;
-        summary: string;
-    }>;
-}
-/** May traffic be routed here? Public; answers 503 (with the same body) when not ready. */
-declare function readReadiness(): Command<ReadyReport>;
-interface HealthDetailed {
-    db: {
-        ok: boolean;
-        latency_ms: number;
-    };
-    redis: {
-        ok: boolean;
-        latency_ms: number;
+/** One audit-log entry with its user agent and agent badge (admin). */
+declare function readActivityEntry(id: number): Command<{
+    data: ActivityEntry;
+}>;
+/** Every action name the audit log holds, sorted (admin) — for an action filter. */
+declare function listActivityActions(): Command<{
+    data: string[];
+}>;
+/**
+ * Record a client-side export (CSV / xlsx / PDF made in the browser) in the audit log as an
+ * `export` entry for the caller. Any signed-in person may report their own export.
+ */
+declare function logExport(body: {
+    collection: string;
+    row_count?: number;
+    /** csv | xlsx | pdf … (first 10 characters kept). */
+    format?: string;
+    /** The filters the export ran with (first 300 characters of their JSON kept). */
+    filters?: unknown;
+}): Command<{
+    data: {
+        logged: true;
     };
-    migrations: {
-        latest: string | null;
-        count: number;
+}>;
+/**
+ * Write an audit entry by hand. Administrators only in practice: a non-admin may write only
+ * the actions the server lists as client-writable (none today). `action` is 1–50 of
+ * letters, digits and `- _ : .`.
+ */
+declare function createActivityEntry(body: {
+    action: string;
+    collection?: string;
+    item?: string | number;
+    comment?: string;
+}): Command<{
+    ok: true;
+}>;
+/** One record change in the feed — ids, actions and field NAMES only, never values. */
+interface FeedChange {
+    collection: string;
+    id: string;
+    /** A record created and changed within one page reads `create`. */
+    action: 'create' | 'update' | 'delete';
+    /** Updates: the readable fields that changed; absent when unknown. */
+    fields?: string[];
+    at: ISODate;
+}
+interface FeedPage {
+    changes: FeedChange[];
+    /** Pass back as `cursor` for the next page. */
+    cursor: string;
+    /** More changes are already waiting: call again at once. */
+    has_more: boolean;
+    /** Named collections the caller cannot read (or that do not exist). */
+    not_readable?: string[];
+    notes?: string[];
+}
+/**
+ * The change feed for clients without a live socket (`GET /changes`): records the caller
+ * can see now that were created, changed or deleted since a cursor or a time. Without
+ * `cursor` or `since` the feed starts from now (an empty page with a cursor). Refusals
+ * carry a `code` (e.g. a cursor this feed did not issue).
+ *
+ *   let page = (await nivaro.request(readChanges({ since: '2026-10-29T12:00:00Z' }))).data
+ *   while (page.has_more) page = (await nivaro.request(readChanges({ cursor: page.cursor }))).data
+ */
+declare function readChanges(query?: {
+    cursor?: string;
+    /** ISO time to start from (ignored with a cursor). */
+    since?: string;
+    /** Up to 50 collection names; default every collection the caller may read. */
+    collections?: string[];
+    /** Changes per page (default 100, max 500). */
+    limit?: number;
+}): Command<{
+    data: FeedPage;
+}>;
+interface JobLogLine {
+    seq: number;
+    at: ISODate;
+    level: 'info' | 'warn' | 'error' | (string & {});
+    line: string;
+}
+/**
+ * A run's live log: the lines written so far (`after` = the last `seq` you already have),
+ * plus its status, progress and first error line (admin).
+ */
+declare function readJobRunLog(id: number, after?: number): Command<{
+    data: {
+        run: {
+            id: number;
+            status: string;
+            progress: string | null;
+            outcome: string | null;
+            error: string | null;
+        };
+        lines: JobLogLine[];
     };
-    sockets: {
-        connections: number | null;
+}>;
+/**
+ * Ask a running job to stop (admin). Cooperative: cancel-aware loops stop at their next
+ * chunk; the flag is per process, so a run on another replica may finish anyway.
+ */
+declare function cancelJobRun(id: number): Command<{
+    data: {
+        cancel_requested: true;
     };
-    read_gate?: Record<string, unknown>;
-    redis_degradation?: {
-        redis_ok: boolean;
-        consumers: Array<Record<string, unknown>>;
+}>;
+interface BusyJob {
+    /** The job run id; -1 for an import in flight. */
+    id: number;
+    kind: string;
+    label: string;
+    started_at: ISODate;
+    elapsed_ms: number;
+    /** Median of the same job's recent runs; null without history. */
+    expected_ms: number | null;
+    remaining_ms: number | null;
+    overrun: boolean;
+}
+/** What heavy work is running right now — heavy crons, backfills, exports, imports (admin). */
+declare function readBusyJobs(): Command<{
+    data: {
+        busy: boolean;
+        items: BusyJob[];
+        heavy_slot: unknown;
     };
-    db_posture?: unknown;
-    uptime_s: number;
-    version: string;
-    node_version: string;
-    memory_mb: number;
+}>;
+/** One entry of the caller's jobs tray (a job run or a staged import they queued). */
+interface MyJob {
+    key: string;
+    kind: string;
+    label?: string | null;
+    status: 'queued' | 'running' | 'completed' | 'error' | 'canceled';
+    progress?: Record<string, unknown> | null;
+    outcome?: string | null;
+    error?: string | null;
+    /** App path to the details page or the finished file. */
+    href?: string | null;
+    /** A file the job produced. */
+    file_id?: string | null;
+    /** API path (under /api) to POST to cancel the running job. */
+    cancel_path?: string | null;
+    /** Import queue: 1 = next up. */
+    position?: number | null;
+    eta_seconds?: number | null;
+    at: ISODate;
 }
-/** Subsystem diagnostics for the replica that answers (admin). */
-declare function readHealthDetailed(): Command<{
-    data: HealthDetailed;
+/** What the caller started that is running or finished in the last 30 minutes. */
+declare function listMyJobs(): Command<{
+    data: MyJob[];
 }>;
-interface PoolStats {
-    used: number;
-    free: number;
-    pending_acquires: number;
-    pending_creates: number;
-    max: number;
+interface BackgroundRun {
+    id: string;
+    kind: 'custom-query' | 'widget' | 'report-widget' | 'dashboard-widget' | (string & {});
+    subject: string;
+    label: string;
+    href: string | null;
+    method: 'GET' | 'POST';
+    url: string;
+    status: 'running' | 'completed' | 'error';
+    started_at: ISODate;
+    finished_at: ISODate | null;
+    /** Typical duration when the run started (progress = elapsed / expected). */
+    expected_ms: number | null;
+    http_status: number | null;
+    error: string | null;
+    /** False when the answer was too big to keep: ask the route again. */
+    result_kept: boolean;
 }
-interface RuntimeStats {
-    uptime_seconds: number;
-    rss_mb: number;
-    heap_used_mb: number;
-    heap_total_mb: number;
-    event_loop_lag_ms: {
-        current: number;
-        max_1m: number;
+/** How long a replayable read usually takes and whether it counts as slow. */
+declare function estimateBackgroundRun(method: 'GET' | 'POST', url: string): Command<{
+    data: {
+        typical_ms: number | null;
+        runs: number;
+        slow: boolean;
+        threshold_ms: number;
     };
-    pool: PoolStats;
-}
-/** Memory, event-loop lag and pool of the replica that answers (admin). */
-declare function readRuntimeStats(): Command<{
-    data: RuntimeStats;
 }>;
-/** Every registered API process, plus which one holds the scheduler lease (admin). */
-declare function readInstanceRoster(): Command<{
-    data: Array<Record<string, unknown>>;
-    scheduler: Record<string, unknown> | null;
+/**
+ * Hand a slow read to the server (a custom query execute or a widget read). It is replayed
+ * AS the caller; the same question asked twice joins the first run (`joined: true`).
+ */
+declare function startBackgroundRun(body: {
+    method: 'GET' | 'POST';
+    /** The API path of the read, e.g. `/api/custom-queries/q/execute`. */
+    url: string;
+    body?: unknown;
+    label?: string;
+    /** App-relative link back to the page. */
+    href?: string;
+}): Command<{
+    data: BackgroundRun & {
+        joined: boolean;
+    };
+}>;
+/** The caller's background reads, newest first. */
+declare function listBackgroundRuns(): Command<{
+    data: BackgroundRun[];
+}>;
+/** One of the caller's background reads (404 for anyone else's). */
+declare function readBackgroundRun(id: string): Command<{
+    data: BackgroundRun;
+}>;
+/**
+ * The finished answer, exactly as the route gave it. 409 BACKGROUND_RUN_RUNNING while it
+ * runs, 422 when it failed, 410 RESULT_GONE once no longer kept.
+ */
+declare function readBackgroundRunResult<T = unknown>(id: string): Command<T>;
+interface ApiRequestLogEntry {
+    id: number;
+    method: string;
+    path: string;
+    status: number;
+    latency_ms: number;
+    user: UUID | null;
+    user_name: string | null;
+    user_email: string | null;
+    collection: string | null;
+    api_key_id: number | null;
+    api_key_name: string | null;
+    /** session | token | api_key | masquerade | none */
+    auth: string | null;
+    ip: string | null;
+    user_agent: string | null;
+    error: string | null;
+    request_body: string | null;
+    query: string | null;
+    created_at: ISODate;
+}
+interface ApiRequestLogQuery {
+    /** Look-back window (default 24). */
+    hours?: number;
+    /** ISO bounds; `from` beats `hours`. */
+    from?: string;
+    to?: string;
+    /** Contains-match on the path. */
+    path?: string;
+    method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    /** Exact (`404`) or a class (`4xx`, `5xx`). */
+    status?: string;
+    /** Errors only (status ≥ 400). */
+    errors?: boolean;
+    /** A user id. */
+    user?: UUID;
+    /** A named API key id. */
+    api_key?: number;
+    /** Comma list of session | token | api_key | masquerade | none. */
+    auth?: string;
+    /** Every caller that is not a person's browser session (token + API key). */
+    inbound?: boolean;
+    /** Rank instead of list: the top 20 callers or paths. */
+    group?: 'caller' | 'path';
+    page?: number;
+    /** Rows per page (default 50, max 200). */
+    limit?: number;
+    /** Include development instances' rows. */
+    all_instances?: boolean;
+}
+/**
+ * The per-request API log behind the analytics (admin). With `group` the answer ranks
+ * callers or paths in `groups` and `data` is empty.
+ */
+declare function listApiRequests(query?: ApiRequestLogQuery): Command<{
+    data: ApiRequestLogEntry[];
+    total: number;
+    page?: number;
+    limit?: number;
+    groups?: Array<Record<string, unknown>>;
+}>;
+interface ApiKeyTraffic {
+    api_key_id: number;
+    name: string;
+    count: number;
+    avg_latency: number;
+    errors: number;
+    last_seen: ISODate | null;
+}
+/** Traffic per named API key over the window (admin; session traffic excluded). */
+declare function readApiAnalyticsByKey(hours?: number): Command<{
+    data: ApiKeyTraffic[];
+}>;
+interface ApiKeyUsage {
+    key: {
+        id: number;
+        name: string;
+        is_active: boolean;
+    };
+    window_days: number;
+    total: number;
+    errors: number;
+    last_seen: ISODate | null;
+    /** One entry per day of the window, gaps as zero. */
+    days: Array<{
+        day: string;
+        count: number;
+        errors: number;
+    }>;
+    top_routes: Array<{
+        method: string;
+        path: string;
+        count: number;
+        avg_latency: number;
+        errors: number;
+    }>;
+}
+/** A key's last 30 days: daily calls and errors, top routes (admin). */
+declare function readApiKeyUsage(id: number): Command<{
+    data: ApiKeyUsage;
+}>;
+interface ApiKeyUsageBucket {
+    calls: number;
+    errors: number;
+    rate_limited: number;
+    avg_ms: number | null;
+}
+interface ApiKeyMonthlyUsage {
+    key: {
+        id: number;
+        name: string;
+        prefix: string | null;
+    };
+    month: string;
+    window: {
+        start: ISODate;
+        end: ISODate;
+    };
+    retention: {
+        days: number;
+        oldest_log: ISODate | null;
+        partial: boolean;
+        note: string | null;
+    };
+    totals: ApiKeyUsageBucket & {
+        error_rate: number;
+        refused: number;
+        reads_ok: number;
+        writes_ok: number;
+    };
+    by_day: Array<ApiKeyUsageBucket & {
+        day: string;
+    }>;
+    by_family: Array<ApiKeyUsageBucket & {
+        family: string;
+    }>;
+    graphql: Array<{
+        operation: string;
+        kind: string | null;
+        calls: number;
+        errors: number;
+    }>;
+    egress: {
+        reads_ok: number;
+        note: string;
+    };
+}
+/**
+ * A key's usage statement for one calendar month (`YYYY-MM`, admin). `format: 'csv'`
+ * answers the statement as CSV text.
+ */
+declare function readApiKeyMonthlyUsage(id: number, month: string, format?: 'json'): Command<{
+    data: ApiKeyMonthlyUsage;
+}>;
+declare function readApiKeyMonthlyUsage(id: number, month: string, format: 'csv'): Command<string>;
+interface MailLogEntry {
+    id: number;
+    /** Comma list of recipients. */
+    to: string;
+    subject: string | null;
+    template: string | null;
+    status: 'sent' | 'failed' | 'dropped' | 'deferred' | (string & {});
+    error: string | null;
+    created_at: ISODate;
+}
+/** Every send attempt with its outcome, newest first, 50 a page (admin). */
+declare function listMailLog(query?: {
+    status?: 'sent' | 'failed' | 'dropped' | 'deferred';
+    /** A template key; `(untemplated)` = sends without one. */
+    template?: string;
+    /** Contains-match on recipient or subject. */
+    search?: string;
+    page?: number;
+}): Command<{
+    data: MailLogEntry[];
+    total: number;
+    page: number;
+}>;
+/** One send with its stored body (admin). */
+declare function readMailLogEntry(id: number): Command<{
+    data: MailLogEntry & {
+        body?: string | null;
+    } & Record<string, unknown>;
+}>;
+/** Send a logged mail again from its stored body (admin; test mode applies). 502 on failure. */
+declare function resendMail(id: number): Command<{
+    data: {
+        resent: true;
+    };
+}>;
+/** The delivery board: the window rolled up per day, template and recipient (admin). */
+declare function readMailStats(days?: 7 | 14 | 30): Command<{
+    data: Record<string, unknown>;
+}>;
+/**
+ * The mail sent about one record (headers only, never bodies, newest 50) — for anyone who
+ * can read the record.
+ */
+declare function listRecordMail(collection: string, item: string | number): Command<{
+    data: MailLogEntry[];
+}>;
+interface NotificationHistoryEntry {
+    kind: 'notification' | 'metric_alert' | 'record_alert' | 'report_alert' | 'digest_email';
+    at: ISODate;
+    title: string;
+    detail: string | null;
+    collection?: string | null;
+    item?: string | null;
+    status?: string | null;
+    /** How it reached the caller: 'in-app' | 'push' | 'email' | 'digest email'. */
+    channels?: string[];
+}
+/**
+ * What actually reached the caller, newest first: in-app notifications, alert firings for
+ * rules they subscribe to, report alerts they created and digest-queued emails.
+ */
+declare function readNotificationHistory(limit?: number): Command<{
+    data: NotificationHistoryEntry[];
+}>;
+
+/**
+ * Operations reads (admin): readiness, detailed health, this process's runtime
+ * stats, the instance roster, the DB connection pool, expensive SQL, the
+ * Traffic Map snapshot, the background-job registry + run history, and a
+ * summarized CPU profile of the replica that answers.
+ */
+
+interface ReadyReport {
+    ready: boolean;
+    checks: Array<{
+        id: string;
+        ok: boolean;
+        summary: string;
+    }>;
+}
+/** May traffic be routed here? Public; answers 503 (with the same body) when not ready. */
+declare function readReadiness(): Command<ReadyReport>;
+interface HealthDetailed {
+    db: {
+        ok: boolean;
+        latency_ms: number;
+    };
+    redis: {
+        ok: boolean;
+        latency_ms: number;
+    };
+    migrations: {
+        latest: string | null;
+        count: number;
+    };
+    sockets: {
+        connections: number | null;
+    };
+    read_gate?: Record<string, unknown>;
+    redis_degradation?: {
+        redis_ok: boolean;
+        consumers: Array<Record<string, unknown>>;
+    };
+    db_posture?: unknown;
+    uptime_s: number;
+    version: string;
+    node_version: string;
+    memory_mb: number;
+}
+/** Subsystem diagnostics for the replica that answers (admin). */
+declare function readHealthDetailed(): Command<{
+    data: HealthDetailed;
+}>;
+interface PoolStats {
+    used: number;
+    free: number;
+    pending_acquires: number;
+    pending_creates: number;
+    max: number;
+}
+interface RuntimeStats {
+    uptime_seconds: number;
+    rss_mb: number;
+    heap_used_mb: number;
+    heap_total_mb: number;
+    event_loop_lag_ms: {
+        current: number;
+        max_1m: number;
+    };
+    pool: PoolStats;
+}
+/** Memory, event-loop lag and pool of the replica that answers (admin). */
+declare function readRuntimeStats(): Command<{
+    data: RuntimeStats;
+}>;
+/** Every registered API process, plus which one holds the scheduler lease (admin). */
+declare function readInstanceRoster(): Command<{
+    data: Array<Record<string, unknown>>;
+    scheduler: Record<string, unknown> | null;
 }>;
 interface CpuProfileSummary {
     /** The saved .cpuprofile, downloadable from /ops-runtime/cpu-profile/:name. */
@@ -6750,114 +7903,587 @@ declare function updateQueue(id: UUID, data: {
     column_aliases?: Record<string, string>;
     display_config?: Partial<QueueDisplayConfig>;
 }): Command<{
-    data: QueueDetail;
+    data: QueueDetail;
+}>;
+declare function deleteQueue(id: UUID): Command<void>;
+/** Replace a queue's sources wholesale (max 10). Cache-affecting edits demote
+ *  a materialized queue and enqueue a rebuild; display-only edits apply in place. */
+declare function updateQueueSources(id: UUID, sources: Array<Omit<QueueSource, 'id' | 'sort'> & {
+    id?: number;
+    sort?: number;
+}>): Command<{
+    data: QueueSource[];
+}>;
+/** Force a full materialized-cache rebuild (owner or admin). */
+declare function rematerializeQueue(id: UUID): Command<{
+    data: {
+        enqueued: boolean;
+    };
+}>;
+/** Resolve a queue's items. Omit page/limit for the full set (kanban); pass
+ *  them for table pagination (adds `total`). `filters` = per-column contains
+ *  filters keyed by column key ('state', 'owners', 'extra.<path>' …). */
+declare function readQueueItems(id: UUID, options?: {
+    scope?: QueueScope;
+    sort?: string;
+    filters?: Record<string, string>;
+    page?: number;
+    limit?: number;
+}): Command<QueueItemsResult>;
+/** Items grouped per owner with each owner's WIP limit — the Workload view. */
+declare function readQueueWorkload(id: UUID): Command<{
+    data: Array<QueueWorkloadRow & {
+        items: QueueItem[];
+    }>;
+}>;
+/** Daily stat-snapshot series for the stat-tile sparklines.
+ *  scope 'mine' returns the caller's own series; anything else = queue-wide. */
+declare function readQueueTrends(id: UUID, options?: {
+    days?: number;
+    scope?: string;
+}): Command<{
+    data: Record<string, QueueTrendPoint[]>;
+}>;
+/** Sample rendered labels for a source's label template (builder preview). */
+declare function suggestQueueLabels(id: UUID, options?: {
+    collection: string;
+    template?: string;
+}): Command<{
+    data: string[];
+}>;
+/** Pipeline states available for a collection (builder state pickers).
+ *  Includes the '__none__' sentinel for stateless items. */
+declare function readQueueCollectionStates(collection: string): Command<{
+    data: Array<{
+        id: string;
+        key: string;
+        label: string;
+        color: string | null;
+    }>;
+}>;
+/** Claim an item in a queue (writes through to pipeline instance owners for
+ *  real business records). 403 when the queue has claims disabled. */
+declare function claimQueueItem(id: UUID, item: {
+    collection: string;
+    item_id: string;
+}): Command<{
+    data: {
+        claimed: boolean;
+    };
+}>;
+/** Release a claim (self-added instance-owner grants are removed too). */
+declare function releaseQueueItem(id: UUID, item: {
+    collection: string;
+    item_id: string;
+}): Command<{
+    data: {
+        released: boolean;
+    };
+}>;
+/** Saved views visible to the caller (own + shared behind queue visibility). */
+declare function listQueueViews(id: UUID): Command<{
+    data: QueueView[];
+}>;
+declare function createQueueView(id: UUID, data: {
+    name: string;
+    is_shared?: boolean;
+    role?: UUID | null;
+    state: QueueView['state'];
+}): Command<{
+    data: QueueView;
+}>;
+/** Overwrite a view's name/sharing/state in place (owner or admin). */
+declare function updateQueueView(viewId: number, data: {
+    name?: string;
+    is_shared?: boolean;
+    state?: QueueView['state'];
+}): Command<{
+    data: QueueView;
+}>;
+declare function deleteQueueView(viewId: number): Command<void>;
+/** The caller's per-queue prefs (default saved view; visible_columns is legacy). */
+declare function readQueueColumnPrefs(id: UUID): Command<{
+    data: QueueColumnPrefs;
+}>;
+/** Star/unstar a saved view as the caller's default for this queue
+ *  (null reverts to the queue's general default). */
+declare function setQueueDefaultView(id: UUID, viewId: number | null): Command<{
+    data: {
+        default_view_id: number | null;
+    };
+}>;
+
+/**
+ * Record commands beyond plain CRUD: rehearsed updates, filter checks, slug and distinct
+ * reads, bulk and batch writes, the trash bin, owner history, comment counts and reactions,
+ * the pipeline outline a caller may act on, and the sign-in session (logout, socket token).
+ *
+ * Every write goes through the items service AS THE CALLER — permissions, row filters,
+ * User Scopes, validation, hooks, revisions and edit locks all apply, row by row.
+ */
+
+/** What an update would do. Nothing is stored. */
+interface UpdateDryRunReport {
+    dry_run: true;
+    ok: boolean;
+    /** The status the real request would answer. */
+    status: number;
+    would: 'update' | null;
+    id: string | number;
+    /** Stored fields the write would change, as the caller reads them before and after. */
+    changes: Array<{
+        field: string;
+        from: unknown;
+        to: unknown;
+    }>;
+    /** Fields the write names whose value would stay as it is. */
+    unchanged: string[];
+    /** Fields the write would change that the caller may not read: names only. */
+    hidden: string[];
+    /** Changed fields the caller did not send (rules, derived values, audit stamps). */
+    filled: string[];
+    /** Keys of the payload that are stored nowhere. */
+    ignored: string[];
+    links: Record<string, Array<string | number>>;
+    nested: Record<string, Array<Record<string, unknown>>>;
+    notes: string[];
+    change_reason?: string;
+    error?: string;
+    code?: string;
+    /** Someone else holds the record's edit lock. */
+    locked_by_name?: string | null;
+    violations?: unknown;
+    fields?: unknown;
+    conflicts?: unknown;
+}
+/**
+ * Rehearse an update (`PATCH ?dry_run=1`): rules, validation, the edit lock and the
+ * database's own checks run, the write is rolled back. The report lists `changes` (field,
+ * from, to) or why it would be refused.
+ */
+declare function rehearseUpdateItem<T = Record<string, unknown>>(collection: string, id: string | number, data: Partial<T>): Command<UpdateDryRunReport>;
+interface FilterProblem {
+    path: string;
+    code: string;
+    message: string;
+    fix?: string;
+}
+interface FilterCheck {
+    ok: boolean;
+    collection: string;
+    errors: FilterProblem[];
+    warnings: FilterProblem[];
+    /** A corrected filter when the server could suggest one. */
+    suggestion: Record<string, unknown> | null;
+    clauses: number;
+    truncated?: boolean;
+}
+/**
+ * Check a filter against the server's own gates (unknown fields, operators, types, fields
+ * the caller may not filter on) without reading a row.
+ */
+declare function checkItemFilter(collection: string, filter: Record<string, unknown>): Command<{
+    data: FilterCheck;
+}>;
+/**
+ * One record by its alias / friendly id or the collection's slug field (404 when none
+ * matches or the caller cannot read it).
+ */
+declare function readItemBySlug<T = Record<string, unknown>>(collection: string, slug: string, query?: {
+    fields?: string[];
+}): Command<{
+    data: T;
+}>;
+/**
+ * Distinct non-null values of one stored column over the rows the caller may read — for a
+ * filter dropdown. Default 200 values, max 500.
+ */
+declare function readItemDistinct(collection: string, field: string, limit?: number): Command<{
+    data: unknown[];
+}>;
+/**
+ * Set the same values on several records. A record that already holds every value is
+ * `skipped`; one whose form locks a field for the caller is `refused` (`by_form: true` also
+ * refuses fields that are not on the record's form). Per-record failures never fail the call.
+ */
+declare function bulkUpdateItems(collection: string, ids: Array<string | number>, data: Record<string, unknown>, opts?: {
+    by_form?: boolean;
+}): Command<{
+    updated: number;
+    skipped: number;
+    refused: number;
+    refused_reason?: string;
+}>;
+/** Delete several records; ones the caller may not delete are skipped (not counted). */
+declare function bulkDeleteItems(collection: string, ids: Array<string | number>): Command<{
+    deleted: number;
+}>;
+/**
+ * Run one pipeline transition on several records. `comment` is the note a transition that
+ * requires one asks for, given once for all.
+ */
+declare function bulkTransitionItems(collection: string, ids: Array<string | number>, transitionId: string, comment?: string): Command<{
+    succeeded: number;
+    failed: number;
+    errors: Array<{
+        item: string;
+        error: string;
+    }>;
+}>;
+interface BatchWriteResult {
+    op: 'create' | 'update';
+    index: number;
+    ok: boolean;
+    id?: string | number;
+    data?: Record<string, unknown>;
+    error?: string;
+    /** Written, but hidden from the writer's own read-back (User Scope / row filter). */
+    readable?: false;
+    link_failures?: string[];
+}
+/**
+ * Create and update up to 100 records in one call, one result per row. The API answers
+ * 422 (a NivaroError whose `response.data` holds the results) when every row failed.
+ */
+declare function batchItems(collection: string, body: {
+    create?: Array<Record<string, unknown>>;
+    /** Each row names its `id`. */
+    update?: Array<Record<string, unknown> & {
+        id: string | number;
+    }>;
+}): Command<{
+    data: {
+        results: BatchWriteResult[];
+        ok: number;
+        failed: number;
+    };
+}>;
+interface BulkRowResult {
+    index: number;
+    op: 'create' | 'update';
+    status: number;
+    id?: string | number;
+    data?: Record<string, unknown>;
+    error?: string;
+    code?: string;
+    /** A create the collection's natural key routed to an existing record. */
+    upserted?: boolean;
+    readable?: false;
+}
+interface BulkWriteOutcome {
+    results: BulkRowResult[];
+    ok: number;
+    failed: number;
+    rolled_back: boolean;
+    stopped_at: number | null;
+    leftover: Array<string | number>;
+}
+/**
+ * Up to 500 rows in one call: a row with an `id` is an update, without one a create
+ * (answers 207 with per-row status). `atomic: true` = creates only, all or nothing (a
+ * refused row → 422 BULK_ATOMIC_REFUSED, nothing kept). `returnIds` answers ids only.
+ */
+declare function bulkWriteItems(collection: string, rows: Array<Record<string, unknown>>, opts?: {
+    atomic?: boolean;
+    returnIds?: boolean;
+}): Command<{
+    data: BulkWriteOutcome;
+}>;
+/**
+ * Queue a bulk write as a background job (`?async=1`, 202). Read its results with
+ * {@link readBulkRun} — they are kept 24 hours.
+ */
+declare function queueBulkWriteItems(collection: string, rows: Array<Record<string, unknown>>, opts?: {
+    atomic?: boolean;
+    returnIds?: boolean;
+}): Command<{
+    data: {
+        run_id: number;
+        total: number;
+        status: 'running';
+        results_url: string;
+    };
+}>;
+/** The results of a queued bulk write (its owner or an admin). */
+declare function readBulkRun(collection: string, runId: number): Command<{
+    data: Partial<BulkWriteOutcome> & {
+        run_id: number;
+        collection: string;
+        job: Record<string, unknown> | null;
+    } & Record<string, unknown>;
+}>;
+interface TrashEntry {
+    id: number;
+    collection: string;
+    item_id: string;
+    label: string;
+    deleted_by: UUID | null;
+    deleted_by_name: string | null;
+    deleted_at: ISODate;
+}
+/**
+ * Deleted records: administrators see every deletion, everyone else their own. `collections`
+ * lists every collection with entries in the caller's view (for a filter).
+ */
+declare function listTrash(query?: {
+    collection?: string;
+    /** Contains-match over the snapshot and the item id. */
+    search?: string;
+    /** Only deletions in the last N days. */
+    days?: number;
+    page?: number;
+    /** Default 50, max 100. */
+    limit?: number;
+}): Command<{
+    data: TrashEntry[];
+    collections: string[];
+    total: number;
+    page: number;
+    limit: number;
 }>;
-declare function deleteQueue(id: UUID): Command<void>;
-/** Replace a queue's sources wholesale (max 10). Cache-affecting edits demote
- *  a materialized queue and enqueue a rebuild; display-only edits apply in place. */
-declare function updateQueueSources(id: UUID, sources: Array<Omit<QueueSource, 'id' | 'sort'> & {
-    id?: number;
-    sort?: number;
-}>): Command<{
-    data: QueueSource[];
+/**
+ * The latest deletion of one record — described only to an unrestricted admin or the person
+ * who deleted it (`data: null` otherwise, the same as "not deleted").
+ */
+declare function readRecordDeletion(collection: string, item: string | number): Command<{
+    data: {
+        deleted_at: ISODate;
+        deleted_by_name: string | null;
+        can_restore: boolean;
+        trash_id: number | null;
+    } | null;
 }>;
-/** Force a full materialized-cache rebuild (owner or admin). */
-declare function rematerializeQueue(id: UUID): Command<{
+/** Put a deleted record back with its original id (create permission required; 409 if taken). */
+declare function restoreTrashItem(trashId: number): Command<{
     data: {
-        enqueued: boolean;
+        restored: true;
+        collection: string;
+        item_id: string;
     };
 }>;
-/** Resolve a queue's items. Omit page/limit for the full set (kanban); pass
- *  them for table pagination (adds `total`). `filters` = per-column contains
- *  filters keyed by column key ('state', 'owners', 'extra.<path>' …). */
-declare function readQueueItems(id: UUID, options?: {
-    scope?: QueueScope;
-    sort?: string;
-    filters?: Record<string, string>;
-    page?: number;
-    limit?: number;
-}): Command<QueueItemsResult>;
-/** Items grouped per owner with each owner's WIP limit — the Workload view. */
-declare function readQueueWorkload(id: UUID): Command<{
-    data: Array<QueueWorkloadRow & {
-        items: QueueItem[];
+/** Restore up to 100 entries, one result each (never all-or-nothing). */
+declare function bulkRestoreTrash(ids: number[]): Command<{
+    data: {
+        results: Array<{
+            id: number;
+            ok: boolean;
+            collection?: string;
+            item_id?: string;
+            error?: string;
+        }>;
+        restored: number;
+        failed: number;
+    };
+}>;
+/** Purge an entry for good (admin or the deleter; 423 while the record is under legal hold). */
+declare function purgeTrashItem(trashId: number): Command<{
+    data: {
+        purged: true;
+    };
+}>;
+interface OwnerHistoryEntry {
+    state_label: string | null;
+    entered_at: ISODate;
+    left_at: ISODate | null;
+    moved_by: string | null;
+    /** The state's resolved owners. */
+    owners: Array<{
+        id: UUID;
+        name: string;
     }>;
+}
+/** Who owned a record in each pipeline state it passed through, oldest first. */
+declare function readOwnerHistory(collection: string, item: string | number): Command<{
+    data: OwnerHistoryEntry[];
 }>;
-/** Daily stat-snapshot series for the stat-tile sparklines.
- *  scope 'mine' returns the caller's own series; anything else = queue-wide. */
-declare function readQueueTrends(id: UUID, options?: {
-    days?: number;
-    scope?: string;
-}): Command<{
-    data: Record<string, QueueTrendPoint[]>;
+/** Comment counts per record id (up to 500 ids; only rows the caller can open are counted). */
+declare function readCommentCounts(collection: string, ids: Array<string | number>): Command<{
+    data: Record<string, number>;
 }>;
-/** Sample rendered labels for a source's label template (builder preview). */
-declare function suggestQueueLabels(id: UUID, options?: {
+/** The reactions a comment or recorded note takes. */
+type CommentReaction = '👍' | '✅' | '👀' | '🎉' | '❤️' | '😂';
+/** Toggle the caller's reaction on a comment. */
+declare function toggleCommentReaction(commentId: string, emoji: CommentReaction): Command<{
+    data: {
+        reacted: boolean;
+    };
+}>;
+/** Toggle a reaction on a recorded note (transition comment, change reason) by its entry key. */
+declare function toggleEntryReaction(body: {
     collection: string;
-    template?: string;
+    item: string | number;
+    entry_key: string;
+    emoji: CommentReaction;
 }): Command<{
-    data: string[];
+    data: {
+        reacted: boolean;
+    };
 }>;
-/** Pipeline states available for a collection (builder state pickers).
- *  Includes the '__none__' sentinel for stateless items. */
-declare function readQueueCollectionStates(collection: string): Command<{
-    data: Array<{
-        id: string;
+interface PipelineOutline {
+    id: UUID;
+    name: string | null;
+    states: Array<{
+        id: UUID;
         key: string;
         label: string;
         color: string | null;
+        sort: number | null;
+        is_initial: boolean;
+        is_terminal: boolean;
+    }>;
+    /** Manual transitions the caller's role may run (automatic ones are left out). */
+    transitions: Array<{
+        id: UUID;
+        label: string;
+        from_state: UUID | null;
+        to_state: UUID;
+        color: string | null;
+        sort: number | null;
+        group_label: string | null;
+        require_owner: boolean;
+        allow_creator: boolean;
     }>;
+}
+/** A pipeline's states and the manual transitions the caller's role may run (any sign-in). */
+declare function readPipelineOutline(templateId: string): Command<{
+    data: PipelineOutline;
 }>;
-/** Claim an item in a queue (writes through to pipeline instance owners for
- *  real business records). 403 when the queue has claims disabled. */
-declare function claimQueueItem(id: UUID, item: {
-    collection: string;
-    item_id: string;
-}): Command<{
-    data: {
-        claimed: boolean;
+interface OwnerSeat {
+    group_id: UUID;
+    group_name: string | null;
+    /** The group's filters, named by dimension label. */
+    filters: unknown;
+    is_default: boolean | number | null;
+    state_label: string;
+    state_key: string;
+    template_id: UUID;
+    template_name: string;
+}
+/** The owner-matrix seats the caller holds across every pipeline. */
+declare function readMyOwnerSeats(): Command<{
+    data: OwnerSeat[];
+}>;
+/** End the current session (cookie sign-in; also ends any View-as the person started). */
+declare function logout(): Command<{
+    ok: true;
+}>;
+/** End every session of the caller across apps and tabs. */
+declare function logoutAll(): Command<{
+    ok: true;
+    destroyed: number;
+}>;
+/**
+ * A one-time socket token (2 minutes) for `createRealtime().connect(url, getter)` — the way
+ * a session-cookie, API-key or static-token caller signs a socket in. 403 WS_UNBINDABLE for
+ * a sign-in with nothing to bind the socket to.
+ */
+declare function readWsToken(): Command<{
+    token: string;
+}>;
+interface AuthProviders {
+    oidc: {
+        enabled: boolean;
+        label: string;
+    };
+    static_token: {
+        enabled: boolean;
+    };
+    saml: {
+        enabled: boolean;
+        label: string;
     };
+    password: {
+        enabled: boolean;
+    };
+    sso: Array<{
+        id: number;
+        key: string;
+        label: string;
+        logo_url?: string | null;
+        button_color?: string | null;
+    }>;
+}
+/** The sign-in methods this instance offers (public; display data only). */
+declare function readAuthProviders(): Command<{
+    data: AuthProviders;
 }>;
-/** Release a claim (self-added instance-owner grants are removed too). */
-declare function releaseQueueItem(id: UUID, item: {
+
+/**
+ * Schema change proposals (#3209): draft a field or collection change for an administrator to
+ * review. Nothing changes until an administrator applies it on the Data Model page.
+ */
+
+type SchemaFieldType = 'string' | 'text' | 'integer' | 'bigInteger' | 'boolean' | 'decimal' | 'float' | 'date' | 'datetime' | 'uuid';
+interface SchemaChoice {
+    value: string | number;
+    text?: string;
+}
+interface ProposedField {
+    field: string;
+    type?: SchemaFieldType;
+    label?: string;
+    note?: string;
+    choices?: SchemaChoice[];
+    required?: boolean;
+    max_length?: number;
+}
+type ProposedSchemaChange = ({
+    kind: 'add_field';
     collection: string;
-    item_id: string;
+} & ProposedField) | {
+    kind: 'update_field';
+    collection: string;
+    field: string;
+    label?: string;
+    note?: string;
+    choices?: SchemaChoice[];
+    required?: boolean;
+} | {
+    kind: 'add_collection';
+    collection: string;
+    display_name?: string;
+    singular?: string;
+    plural?: string;
+    icon?: string;
+    note?: string;
+    fields?: ProposedField[];
+};
+/**
+ * Store a schema proposal (POST /schema-proposals). Answers the plain-words reading of each
+ * change; changes that would not hold (a field that exists, an unknown collection) are refused
+ * with 400 and `change_index`.
+ */
+declare function proposeSchemaChange(body: {
+    changes: ProposedSchemaChange[];
+    note?: string;
 }): Command<{
     data: {
-        released: boolean;
+        id: string;
+        status: 'proposed';
+        changes: string[];
+        note: string;
     };
 }>;
-/** Saved views visible to the caller (own + shared behind queue visibility). */
-declare function listQueueViews(id: UUID): Command<{
-    data: QueueView[];
-}>;
-declare function createQueueView(id: UUID, data: {
-    name: string;
-    is_shared?: boolean;
-    role?: UUID | null;
-    state: QueueView['state'];
-}): Command<{
-    data: QueueView;
-}>;
-/** Overwrite a view's name/sharing/state in place (owner or admin). */
-declare function updateQueueView(viewId: number, data: {
-    name?: string;
-    is_shared?: boolean;
-    state?: QueueView['state'];
-}): Command<{
-    data: QueueView;
-}>;
-declare function deleteQueueView(viewId: number): Command<void>;
-/** The caller's per-queue prefs (default saved view; visible_columns is legacy). */
-declare function readQueueColumnPrefs(id: UUID): Command<{
-    data: QueueColumnPrefs;
-}>;
-/** Star/unstar a saved view as the caller's default for this queue
- *  (null reverts to the queue's general default). */
-declare function setQueueDefaultView(id: UUID, viewId: number | null): Command<{
-    data: {
-        default_view_id: number | null;
+interface SchemaProposal {
+    id: string;
+    status: 'proposed' | 'applied' | 'rejected' | 'expired';
+    collections: string[];
+    changes: ProposedSchemaChange[];
+    sentences: string[];
+    note: string | null;
+    proposed_by: {
+        id: string;
+        name: string;
     };
+    via: string;
+    client: string | null;
+    created_at: string;
+    resolved_at: string | null;
+    result: Record<string, unknown> | null;
+}
+/** One proposal and its outcome (the proposer or an administrator). */
+declare function readSchemaProposal(id: string): Command<{
+    data: SchemaProposal;
 }>;
 
 /**
@@ -6996,8 +8622,25 @@ interface PresenceClient {
 declare function createPresence(options: PresenceOptions): PresenceClient;
 
 type RealtimeEvent = 'create' | 'update' | 'delete' | '*';
+/** One record change as the server announced it. Values never ride the socket. */
+interface RealtimeChange {
+    collection: string;
+    /** The record id; null when a coalesced burst was too large to list (`many`). */
+    item: string | number | null;
+    action: 'create' | 'update' | 'delete';
+    /** Changed field names (updates), when the server knew them. */
+    changed_fields?: string[];
+    /** `import` when a staged import run made the write. */
+    source?: string;
+    /** Part of a coalesced burst (several writes folded into one message). */
+    coalesced?: boolean;
+    /** A burst too large to list ids: refetch the list instead. */
+    many?: boolean;
+}
+/** A token, or a function asked on every (re)connect — ws-tokens are single-use. */
+type RealtimeToken = string | (() => string | null | undefined | Promise<string | null | undefined>);
 interface NivaroRealtime {
-    connect(url: string, token?: string): void;
+    connect(url: string, token?: RealtimeToken): void;
     disconnect(): void;
     subscribe(collection: string, opts: {
         event?: RealtimeEvent;
@@ -7005,10 +8648,73 @@ interface NivaroRealtime {
     }, callback: (data: unknown[]) => void): () => void;
     onConnect(fn: () => void): void;
     onDisconnect(fn: (reason: string) => void): void;
+    /** Called when the server accepted the sign-in (`auth:ok`); rooms are joined then. */
+    onAuthenticated(fn: (userId: string) => void): void;
     connected: boolean;
+    /** True between `auth:ok` and the next disconnect. */
+    authenticated: boolean;
 }
+/** Pseudo-collection: subscribe to it to hear `notification:new` for the signed-in person. */
+declare const NOTIFICATIONS_CHANNEL = "cms_notifications";
+type UpdatePayload = {
+    collection?: string;
+    item?: string | number | null;
+    items?: Array<string | number> | null;
+    many?: boolean;
+    action?: string;
+    changed_fields?: string[];
+    source?: string;
+    coalesced?: boolean;
+};
+/** The changes one `collection:update` message names. Exported for tests. */
+declare function parseRealtimeChanges(payload: UpdatePayload): RealtimeChange[];
 declare function createRealtime(): NivaroRealtime;
 
+/** Response header the API stamps on every traced /api answer (plugins/request-trace.ts). */
+declare const REQUEST_ID_HEADER = "x-nivaro-request-id";
+/** A non-2xx answer from the Nivaro API. */
+declare class NivaroError extends Error {
+    /** HTTP status of the answer. */
+    readonly status: number;
+    /** The API's machine code (`body.code`, e.g. `QUOTA_EXCEEDED`, `SERVER_BUSY`), else null. */
+    readonly code: string | null;
+    /**
+     * The `x-nivaro-request-id` the server stamped — the id its slow-trace buffer, access
+     * log and API request log carry. Null when the header was absent or unreadable (a
+     * cross-origin browser call only sees it if the API exposes the header through CORS).
+     */
+    readonly requestId: string | null;
+    /** The parsed JSON body (or `{ error: statusText }` when the body was not JSON). */
+    readonly response: unknown;
+    readonly method: string;
+    /** Path under `/api` (no query string). */
+    readonly path: string;
+    /** Milliseconds from a `Retry-After` header (429 / 503), else null. */
+    readonly retryAfterMs: number | null;
+    /** Import parse refusals: the per-row problems the API listed. */
+    readonly issues?: unknown;
+    constructor(init: {
+        message: string;
+        status: number;
+        code?: string | null;
+        requestId?: string | null;
+        response?: unknown;
+        method: string;
+        path: string;
+        retryAfterMs?: number | null;
+        issues?: unknown;
+    });
+}
+/** True for a NivaroError (also across bundled copies of the SDK). */
+declare function isNivaroError(err: unknown): err is NivaroError;
+/**
+ * The human message of an error body. Route handlers answer `{ error: 'Not found' }`;
+ * Fastify's own errors (validation, the SERVER_BUSY 503) answer
+ * `{ statusCode, error: 'Bad Request', message: '…' }`, where `error` is only the status
+ * phrase and `message` is the reason.
+ */
+declare function errorBodyMessage(body: unknown): string | null;
+
 /**
  * Nivaro SDK — typed client for the Nivaro CMS API.
  *
@@ -7045,9 +8751,17 @@ declare function createRealtime(): NivaroRealtime;
  *     }
  *   `)
  *
- *   // Realtime (Socket.io)
- *   nivaro.realtime.connect('https://nivaro.example.com')
- *   const unsub = nivaro.realtime.subscribe('projects', { event: 'update' }, (data) => console.log(data))
+ *   // Realtime (Socket.io) — a separate client; sign in with a token or a ws-token getter
+ *   const rt = createRealtime()
+ *   rt.connect('https://nivaro.example.com', () => nivaro.request(readWsToken()).then((r) => r.token))
+ *   const unsub = rt.subscribe('projects', { event: 'update' }, (changes) => console.log(changes))
+ *
+ *   // Observability (opt-in): hooks, request ids, retries
+ *   const traced = createNivaro(url, {
+ *     token,
+ *     onResponse: (r) => console.log(r.method, r.path, r.status, r.requestId),
+ *     retry: 2
+ *   })
  */
 
 type UUID = string;
@@ -7129,14 +8843,23 @@ interface Query<T = Record<string, unknown>> {
     offset?: number;
     page?: number;
     search?: string;
+    /** Limit `search` to these fields (each one the caller may read). */
+    search_fields?: string[];
+    /** Order `search` matches by relevance (exact, then prefix, then contains). */
+    search_rank?: boolean;
     /**
      * Keyset paging for walking a large collection: 'start' for the first page,
      * then the `next_cursor` of the page before. Sort by the record's own fields
      * only; `id` is added as the tie-break. Replaces offset/page.
      */
     after?: string;
-    /** false = skip the count query; `total` answers null. */
-    count?: boolean;
+    /**
+     * false = skip the count query; `total` answers null. 'approx' = a total up to a few
+     * seconds old may stand in for COUNT(*) (the answer then carries `total_approx: true`).
+     */
+    count?: boolean | 'approx';
+    /** Flatten each to-one relation's display label into the row (one batched read). */
+    labels?: boolean;
 }
 interface ListResponse<T> {
     data: T[];
@@ -7148,6 +8871,13 @@ interface ListResponse<T> {
     next_cursor?: string | null;
     /** To-many aliases whose lists were cut at the per-record limit. */
     truncated_relations?: string[];
+    /** The total came from the list-total cache or the partition row count (`count: 'approx'`). */
+    total_approx?: boolean;
+    /** The count ran out of time: `total` is null, the page itself is complete. */
+    total_timed_out?: boolean;
+    /** The asked `limit` was above the server cap; `applied_limit` is what was used. */
+    limit_capped?: boolean;
+    applied_limit?: number;
 }
 interface WorkflowState {
     id: UUID;
@@ -7271,27 +9001,71 @@ interface InstanceOwner {
     last_name: string | null;
     email: string;
 }
+/** Common audit actions; the log also carries feature actions (`export`, `trash-purge`, …). */
+type ActivityAction = 'create' | 'update' | 'delete' | 'login' | 'logout' | 'export' | 'transition' | (string & {});
+/** One audit-log row (`GET /activity`, admin). */
 interface ActivityEntry {
     id: number;
-    action: 'create' | 'update' | 'delete' | 'login';
+    action: ActivityAction;
     collection: string | null;
     item: string | null;
     user: UUID | null;
     timestamp: ISODate;
+    ip?: string | null;
+    comment?: string | null;
+    /** Where the write came from (`ui`, `api`, `import`, `flow`, …) when recorded. */
+    origin?: string | null;
+    first_name?: string | null;
+    last_name?: string | null;
+    user_email?: string | null;
+    /** The badge of a write an agent made through MCP ("via Claude"), else null. */
+    via_agent?: string | null;
+    /** Single-entry reads only (`readActivityEntry`). */
+    user_agent?: string | null;
 }
+/**
+ * One entry of a record's history. Snapshot rows carry `data`/`delta`; pipeline moves and
+ * O2M child events are folded in without a snapshot (`id` null, `event` set or an `o2m-*`
+ * action).
+ */
 interface Revision {
-    id: number;
+    /** Null for a folded entry with no revision row (a transition, an O2M child event). */
+    id: number | null;
     activity: number | null;
     collection: string;
     item: string;
-    data: Record<string, unknown>;
+    data: Record<string, unknown> | null;
     delta: Record<string, unknown> | null;
-    action: 'create' | 'update' | 'delete';
+    parent?: number | null;
+    action: 'create' | 'update' | 'delete' | (string & {});
     timestamp: ISODate;
-    user: UUID | null;
+    /** The person behind the entry (the API names it `user_id`). */
+    user_id?: UUID | null;
+    /** @deprecated never sent by the API — read `user_id`. */
+    user?: UUID | null;
     first_name: string | null;
     last_name: string | null;
     user_email: string | null;
+    comment?: string | null;
+    /** The badge of a write an agent made through MCP ("via Claude"), else absent. */
+    via_agent?: string | null;
+    /** A pipeline event folded into the history (no snapshot). */
+    event?: {
+        kind: 'transition' | 'start';
+        history_id?: number;
+        from_label: string | null;
+        to_label: string | null;
+        transition_label: string | null;
+        source: string | null;
+        addendum?: {
+            id: string;
+            title: string | null;
+        } | null;
+        on_behalf_of?: {
+            id: string;
+            name: string | null;
+        } | null;
+    } | null;
 }
 interface ExternalApi {
     id: number;
@@ -7579,7 +9353,13 @@ declare function aggregateItems(collection: string, query: AggregateQuery): Comm
     limit: number;
     offset: number;
 }>;
-declare function readItem<T = Record<string, unknown>>(collection: string, id: string | number): Command<{
+/**
+ * One record as the caller may read it (404 when it does not exist or is hidden from them).
+ * `query.fields` projects the answer, dotted paths included (`owner.email`).
+ */
+declare function readItem<T = Record<string, unknown>>(collection: string, id: string | number, query?: {
+    fields?: string[];
+}): Command<{
     data: T;
 }>;
 /** One read inside {@link readMany}. Without `id` it is a list read. */
@@ -7722,19 +9502,34 @@ declare function readCollections(): Command<{
 declare function readCollection(collection: string): Command<{
     data: CMSCollection;
 }>;
-/** All revisions for a specific item (newest first). */
-declare function readRevisions(collection: string, item: string | number): Command<ListResponse<Revision>>;
+/**
+ * A record's history, newest first (up to 100 revisions plus folded pipeline / O2M events).
+ * Same gate as opening the record; snapshots are cut to the fields the caller may read.
+ * The answer is `{ data }` only — there is no total or paging.
+ */
+declare function readRevisions(collection: string, item: string | number): Command<{
+    data: Revision[];
+}>;
+/** The newest revision id of a record (collision baseline), without the history. */
+declare function readLatestRevisionId(collection: string, item: string | number): Command<{
+    data: {
+        latest: number | null;
+    };
+}>;
 /** Single revision by ID. */
 declare function readRevision(id: number): Command<{
     data: Revision;
 }>;
 interface ActivityQuery {
     collection?: string;
-    action?: 'create' | 'update' | 'delete' | 'login';
+    /** Any recorded action — `listActivityActions()` lists the ones in the log. */
+    action?: ActivityAction;
     user?: string;
+    /** Rows per page (default 25, max 200). */
     limit?: number;
     offset?: number;
 }
+/** The audit log, newest first (admin). */
 declare function readActivity(query?: ActivityQuery): Command<ListResponse<ActivityEntry>>;
 /**
  * Get workflow instance for an item: current state, available transitions
@@ -8405,7 +10200,55 @@ declare function listActivePresence(): Command<{
     data: PresenceSessionInfo[];
     total: number;
 }>;
+/** What a request hook sees before the fetch. `headers` may be changed in place. */
+interface NivaroRequestInfo {
+    method: string;
+    /** Path under `/api` (no query string), e.g. `/items/orders`. */
+    path: string;
+    /** The full URL about to be fetched. */
+    url: string;
+    /** The request's headers — add tracing or app headers here. */
+    headers: Record<string, string>;
+    /** 0 on the first try, 1.. on a retry (see `retry`). */
+    attempt: number;
+    /** `request` (commands), `graphql`, `upload` or `import-parse`. */
+    kind: 'request' | 'graphql' | 'upload' | 'import-parse';
+}
+/** What a response hook sees once the status line arrived (the body is not read yet). */
+interface NivaroResponseInfo {
+    method: string;
+    path: string;
+    url: string;
+    attempt: number;
+    kind: NivaroRequestInfo['kind'];
+    status: number;
+    ok: boolean;
+    /** The `x-nivaro-request-id` the server stamped, else null (see NivaroError.requestId). */
+    requestId: string | null;
+    /** From the fetch call to the status line. */
+    durationMs: number;
+    /** True when the client is about to retry this answer. */
+    willRetry: boolean;
+}
+/** Opt-in retries for idempotent reads (off unless `retry` is set). */
+interface NivaroRetryOptions {
+    /** Further tries after the first (default 2 when `retry` is an object). */
+    retries?: number;
+    /** Methods that may be retried (default `['GET']` — writes are never retried by default). */
+    methods?: Array<Command<unknown>['_method']>;
+    /** Statuses that are retried (default 408, 429, 502, 503, 504). Network errors always are. */
+    statuses?: number[];
+    /** First backoff (default 300 ms), doubled per try with jitter; a Retry-After wins. */
+    baseDelayMs?: number;
+    /** Longest single wait (default 10 000 ms). */
+    maxDelayMs?: number;
+}
 interface NivaroClientOptions {
+    /**
+     * Bearer credential: a static user token, a named API key (`nvk_…`), a View-as token, or
+     * an MCP OAuth access token (`nvo_…`, accepted on `/api/mcp` and its tool calls only).
+     * Omit it to ride the browser's session cookie (same-origin admin / portal).
+     */
     token?: string;
     fetch?: typeof fetch;
     /**
@@ -8422,6 +10265,34 @@ interface NivaroClientOptions {
      * short.
      */
     timeoutMs?: number;
+    /**
+     * Extra headers on every request (e.g. `x-nivaro-app`, `x-workspace`), or a function read
+     * per request. The client's own `Authorization` / `Content-Type` win over these.
+     */
+    headers?: Record<string, string> | (() => Record<string, string>);
+    /** Called before every fetch (each retry too); may change `info.headers`. A throw fails the request. */
+    onRequest?: (info: NivaroRequestInfo) => void | Promise<void>;
+    /** Called when each answer's status line arrives (each retry too). Never fails the request. */
+    onResponse?: (info: NivaroResponseInfo) => void;
+    /**
+     * Called once when a request finally fails — a NivaroError (non-2xx), a TimeoutError or a
+     * network error. A caller's own abort is not reported. Never fails the request further.
+     */
+    onError?: (error: Error, info: {
+        method: string;
+        path: string;
+        kind: NivaroRequestInfo['kind'];
+    }) => void;
+    /**
+     * Log one line per request: `true` = `console.debug`, or a function of your own.
+     * Lines carry method, path, status, duration and request id — never headers or bodies.
+     */
+    debug?: boolean | ((line: string, details: Record<string, unknown>) => void);
+    /**
+     * Retry idempotent reads on 408 / 429 / 502 / 503 / 504 and network errors, honouring
+     * Retry-After. A number = that many retries with the defaults. Off by default.
+     */
+    retry?: number | NivaroRetryOptions;
 }
 interface FileUploadResult {
     id: string;
@@ -8920,4 +10791,4 @@ declare function submitFormItem(collection: string, values: Record<string, unkno
     data: Record<string, unknown>;
 }>;
 
-export { type AccessAudit, type AccessAuditFinding, type AccessAuditRun, type AccessAuditSubject, type AccessReason, type ActivityEntry, type ActivityQuery, type ActivityReportQuery, type ActivityReportRow, type ActivityReportSummary, type Addendum, type AddendumStatus, type AggregateQuery, type AggregateRow, type AiChatTraceEntry, type AiCollectionSettings, type AiColumnMapping, type AiDuplicateMatch, type AiQueryFilter, type AiQueryResult, type AiReviewFinding, type AiViolation, type AlertDefinition, type AlertLogEntry, type AlertSubscription, type AnomalyDefinition, type AnomalyRule, type ApiAnalyticsBucket, type ApiAnalyticsCollection, type ApiAnalyticsPath, type ApiAnalyticsSummary, type ApiErrorLog, type ApiKey, type ApiKeyScope, type ApprovalBrief, type ApprovalChain, type ApprovalChainStep, type ApprovalDecision, type ApprovalInstance, type ApprovalInstanceDetail, type ApprovalStatus, type ApprovalStepInput, type AtRiskCondition, type AtRiskOp, type AtRiskResult, type AtRiskRule, type AtRiskSummaryEntry, type AttributeDefinition, type AttributeValue, type BatchRead, type BatchReadResult, type BlackoutDate, type BoolFilterOps, type CMSCollection, type CascadeFilterRule, type ChangeOrder, type ChaosWhatIfAnswer, type ChatChannel, type ChatChannelMember, type ChatDirectoryChannel, type ChatMessage, type ChatPin, type ChatReaction, type ChatRoomKind, type ChatRoomSummary, type ChatRoomType, type ChatSearchHit, type CollectionLayout, type CollectionLayoutType, type CollectionPresetSummary, type Command, type Comment, type CommentVersion, type ConfigSnapshot, type ConfigTableClassification, type ContentBundle, type ContentExportFormat, type ContentExportOptions, type CoverageGapItem, type CoverageGapOwner, type CoverageGapReport, type CpuProfileSummary, type CronJob, type CustomQuery, type CustomQueryCatalogEntry, type Dashboard, type DashboardFilter, type DashboardWidget, type DashboardWidgetData, type DashboardWidgetType, type DataQualityRule, type DataQualityRuleResult, type DataQualityRuleType, type DataQualityRun, type DataQualitySeverity, type DeadLetter, type DmvResult, type DraftPublishConfig, type DraftStatus, type DryRunReport, EDITOR_NOTE_MAX, type ErpSubmission, type ErpSubmissionStatus, type ExpensiveStatement, type ExtensionManifest, type ExternalApi, type ExternalApiEndpoint, type ExternalApiSchema, type ExternalApiSlotContext, type ExternalApiSpecImportResult, type ExternalApiTestResult, type FieldChangeEntry, type FieldCondition, type FieldConfig, type FieldDependencyConfig, type FieldFilter, type FieldGroup, type FieldTranslations, type FieldVisibilityRules, type FieldWatch, type FileRecord, type FileUploadResult, type FileUsageEntry, type Filter, type FlowReplayResult, type FlowRun, type FlowTestStep, type FormFieldDescriptor, type FormFieldRelation, type FormGroupDescriptor, type FormLockCondition, type FormSchema, type FormValidationRule, type FormVisibilityRule, GROUP_PATCH_KEYS, type GlobalSearchRecord, type GlobalSearchResults, type GraphQLResponse, type GroupPatch, type GroupRow, type HealthDetailed, type HelpVideo, type HelpVideoClick, type HelpVideoContext, type HelpVideoDownloadUrls, type HelpVideoFinalizedUpload, type HelpVideoProgress, type HelpVideoUploadSession, type HelpVideoVersion, type HelpVideoVisibility, type HelpVideoWalkStep, type HelpVideoWhatsNew, type HierarchyConfigDef, type HierarchyFlatNode, type HierarchyLevelDef, type HierarchyNestedNode, type IDFilterOps, type ISODate, type ImportDefinition, type ImportJob, type ImportParseResponse, type ImportPreview, type ImportPreviewDiff, type ImportTemplateSummary, type InfrastructureSummaryTool, type InstanceOwner, type InstanceToolEntry, type IntegrationApiHealth, type InternalWidget, type Issue, type IssueSeverity, type IssueStatus, type IssueSummary, type ItemLock, type ItemWriteMeta, type JobRegistryCron, type JobRun, LAYOUT_PATCH_KEYS, type LastTouch, type LayoutAssignment, type LayoutBundle, type LayoutDescription, type LayoutFieldExplanation, type LayoutGroup, type LayoutOp, type LayoutOverviewRow, type LayoutPatch, type LayoutPickReason, type LayoutProposal, type LayoutRow, type LayoutVersion, type ListResponse, type ManagedUser, type McpCapabilities, type McpToolsConfig, type MetricAlertRule, type MetricAlertSubscription, type MetricDefinition, type MyTask, type MyWorkOwnedEntry, type MyWorkSla, type MyWorkSummary, type NamedMcpToolConfig, type NivaroClient, type NivaroClientOptions, type NivaroExtensionPlugin, type NivaroRealtime, type NivaroRuntime, type NotificationItem, type NotificationPage, type NotificationSubscription, type NumberFilterOps, type OmniSearchHit, type OnlinePresenceConfig, type OnlinePresenceUser, PLACEMENT_PATCH_KEYS, type Page, type PageLayout, type PageSlotKey, type PageWidget, type PdfTemplate, type PermissionSimulation, type PersistedQuery, type PickerExclusionStatus, type PipelineFlowEdge, type PipelineFlowState, type PipelineImpactResult, type PipelineOwnerGroup, type PipelineOwnerGroupUser, type PipelineSimulation, type PipelineState, type PipelineVersionEntry, type PlacementKey, type PlacementPatch, type PlacementRow, type PluginSlots, type Policy, type PoolStats, type PreflightCheck, type PreflightReport, type PreflightSeverity, type PresenceClient, type PresenceOptions, type PresenceSession, type PresenceSessionInfo, type PresenceViewer, type ProjectedPlacement, type PromotionApplyResult, type PromotionPreview, type Query, type Queue, type QueueColumnPrefs, type QueueCondition, type QueueDetail, type QueueDisplayConfig, type QueueItem, type QueueItemsResult, type QueueOwner, type QueueRowClickMode, type QueueScope, type QueueSource, type QueueSourceType, type QueueStats, type QueueTrendPoint, type QueueView, type QueueViewKind, type QueueWorkloadRow, READ_MANY_MAX, type ReadyReport, type RealtimeEvent, type RecordGraphEdge, type RecordGraphNode, type RecordLink, type RecordLinkType, type RecordTemplate, type RecordViewRecap, type RegisteredAction, type RelatedCommentEntry, type RelationFilter, type RelationOption, type ReportAlert, type ReportAlertCondition, type ReportAlertLogEntry, type ReportAnnotation, type ReportColumnFormat, type ReportDateRange, type ReportDef, type ReportEntityFilter, type ReportFilterPreset, type ReportQueryColumn, type ReportQueryWidgetConfig, type ReportSnapshotEntry, type ReportSubscription, type ReportTemplateEntry, type ReportVersionEntry, type ReportWidget, type ReportWidgetConfig, type ReportWidgetData, type ReportWidgetPreset, type ReportWidgetType, type RequestTrace, type ResolvedOwner, type RetentionPolicy, type RetentionRun, type RetentionRunResult, type Revision, type Role, type Rule, type RuntimeStats, type SavedView, type ScheduledChange, type ScheduledReport, type ScopeDimension, type ScopeDimensionInfo, type SemanticSearchMatch, type SessionRecording, type SessionReplayMasking, type ShareLink, type SlaBatchStatus, type SlaRule, type SlaStatus, type StagedImportRun, type StagedImportStats, type StringFilterOps, type SubRow, type SubRowTemplate, type SupportTicket, type SupportTicketDetail, type SupportTicketStatus, type SyncJob, type Task, type TaskDoneWhenRule, type TaskPriority, type TaskStatus, type TimelineEvent, type TraceSpan, type TrafficSnapshot, type TrafficSnapshotEntity, type TreeFlatNode, type TreeNestedNode, type TreeNodeConfig, type TreePermission, type TreePermissionAction, type UUID, type UserActivityEntry, type UserActivitySummary, type UserScopesInfo, type ViewSubscription, type VirtualCollection, type Webhook, type WebhookDelivery, type WhichLayoutForm, type WidgetFeed, type WorkflowBinding, type WorkflowHistoryEntry, type WorkflowInstance, type WorkflowInstanceData, type WorkflowState, type WorkflowTransition, type Workspace, type WorkspaceQuotas, type WorkspaceTemplate, type WorkspaceUsage, _and, _contains, _ends_with, _eq, _gt, _gte, _in, _lt, _lte, _ncontains, _neq, _nin, _nnull, _none, _null, _or, _some, _starts_with, abandonHelpVideoUpload, acquireItemLock, activateLayout, addChatChannelMember, addInstanceOwner, addSubRow, aggregateItems, aiBrief, aiBuildReport, aiChat, aiCheckDuplicates, aiGenerate, aiMapColumns, aiQuery, aiReportFilters, aiReview, aiSummarize, aiValidate, appendSessionRecordingEvents, applyContentBundle, applyHelpVideoPackageImport, applyRecordTemplate, applySubRowTemplate, approveAddendum, approveAiProposal, archiveHelpVideo, asc, backupExportPath, batchPickerExclusionStatus, bulkPickerExclusion, callExternalApi, callExternalApiEndpoint, callInstanceTool, cancelScheduledChange, cancelStagedImport, captureCpuProfile, cascadeFieldDependencies, chaosWhatIf, checkBlackoutDate, claimQueueItem, claimSupportTicket, claimTask, clearTraces, cloneItem, cloneLayout, cloneReport, compareConfigSnapshot, completeTask, copyReportWidget, createAccessAudit, createAddendum, createAlertDefinition, createAlertSubscription, createAnomalyRule, createApiKey, createApprovalChain, createAtRiskRule, createAttributeDefinition, createBlackoutDate, createChatChannel, createChatRoomType, createCollectionLayout, createComment, createDataQualityRule, createExternalApi, createExternalApiEndpoint, createFieldGroup, createFieldWatch, createGroupDm, createHelpVideo, createHierarchyConfig, createImportDefinition, createImportJob, createImportJobFromUrl, createInternalWidget, createIssue, createItem, createMetricAlertRule, createNivaro, createNotification, createNotificationSubscription, createPage, createPdfTemplate, createPersistedQuery, createPresence, createQueue, createQueueView, createRealtime, createRecordLink, createRecordTemplate, createReport, createReportAlert, createReportAnnotation, createReportFromTemplate, createReportSnapshot, createReportWidgetPreset, createRetentionPolicy, createRole, createRolePolicy, createRule, createSavedView, createScheduledChange, createScheduledReport, createShareLink, createSlaRule, createSubRowTemplate, createSyncJob, createTask, createTreePermission, createUser, createViewSubscription, createVirtualCollection, createWebhook, createWidgetFeed, createWorkspace, createWorkspaceTemplate, decideApproval, deleteAccessAudit, deleteAddendum, deleteAlertDefinition, deleteAlertSubscription, deleteAnomalyRule, deleteApiKey, deleteApprovalChain, deleteAtRiskRule, deleteAttributeDefinition, deleteBlackoutDate, deleteChatMessage, deleteCollectionLayout, deleteComment, deleteDataQualityRule, deleteExternalApi, deleteExternalApiEndpoint, deleteExternalApiSchema, deleteFieldGroup, deleteFieldTranslations, deleteFieldWatch, deleteFile, deleteHierarchyConfig, deleteImportJob, deleteInternalWidget, deleteIssue, deleteItem, deleteMetricAlertRule, deleteNotification, deleteNotificationSubscription, deletePage, deletePdfTemplate, deletePersistedQuery, deleteQueue, deleteQueueView, deleteRecordLink, deleteRecordTemplate, deleteReport, deleteReportAlert, deleteReportAnnotation, deleteReportFilterPreset, deleteReportSnapshot, deleteReportTemplate, deleteReportWidgetPreset, deleteRetentionPolicy, deleteRole, deleteRolePolicy, deleteRule, deleteSavedView, deleteScheduledReport, deleteSessionRecording, deleteSlaRule, deleteSubRow, deleteSubRowTemplate, deleteSyncJob, deleteTask, deleteTreePermission, deleteUser, deleteViewSubscription, deleteVirtualCollection, deleteWebhook, deleteWidgetFeed, deleteWorkspace, deleteWorkspaceTemplate, deployImportProcedure, desc, describeLayoutForm, diffLayoutVersion, disableTwoFactor, discardHelpVideoPackageImport, drillReportRow, editChatMessage, endSessionRecording, evaluateAlerts, evaluateAtRisk, evaluateFieldDefaults, evaluateFieldLock, evaluateFieldRules, evaluateFieldVisibility, excludeFromPicker, excludeFromPickers, executeBulkAction, executeCustomQuery, executeImportTemplate, executeItemAction, executeScheduledChange, explainLayout, explainLayoutField, explainRecordAccess, explainReportTrend, exportBlueprint, exportConfigSnapshot, exportContent, exportContentBundle, exportHelpVideoPackage, exportSchemaSnapshot, fetchFormSchema, fileDownloadPath, fileTransformPath, finalizeHelpVideoUpload, generateToken, generateUserToken, getAlertDefinition, getAttributeValues, getBrunoCollection, getCommentHistory, getExternalApi, getExternalApiEndpoint, getFieldTranslations, getFlowRun, getLocales, getOpenApi, getPickerExclusionStatus, getPostmanCollection, getPresence, getRetentionPolicy, getSlaRule, getSlaStatus, getTranslations, getTypes, getWebhook, globalSearch, heartbeatItemLock, helpVideosFor, importExternalApiSpec, importSchemaSnapshot, includeInPicker, includeInPickers, installBlueprint, installCollectionPreset, invokeInternalWidgetAction, isPageSlot, joinChatRoom, leaveChatRoom, listAccessAuditRuns, listAccessAudits, listActiveAtRiskRules, listActivePresence, listAddendums, listAlertDefinitions, listAlertSubscriptions, listAllNotificationSubscriptions, listAnomalyDefinitions, listAnomalyRules, listApiKeys, listApprovalChains, listApprovalInstances, listAtRiskRules, listAttributeDefinitions, listBlackoutDates, listBulkActions, listChangeOrders, listChatChannelMembers, listChatMessages, listChatPins, listChatRoles, listChatRoomTypes, listChatRooms, listCollectionPresets, listCollectionRecordTemplates, listComments, listCronJobs, listCustomQueries, listCustomQueryCatalog, listDashboards, listDataQualityRules, listDataQualityRuns, listDeadLetters, listExternalApiEndpoints, listExternalApiSchemas, listExternalApis, listFieldGroups, listFieldWatches, listFiles, listFlowRuns, listHelpVideoPages, listHelpVideoVersions, listHelpVideos, listHierarchyConfigs, listImportDefinitionVersions, listImportDefinitions, listImportJobs, listImportTemplates, listInstanceTools, listInternalWidgetPlacements, listInternalWidgets, listIssues, listItemActions, listItemScheduledChanges, listJobRuns, listLayoutVersions, listMetricAlertRules, listMetricAlertSubscriptions, listMetricDefinitions, listMyHelpVideoUploads, listMyTasks, listNotificationSubscriptions, listNotifications, listOrphanFiles, listPages, listPdfTemplates, listPersistedQueries, listPinnedItems, listPipelineVersions, listQueueViews, listQueues, listRecordLinks, listRecordTemplates, listRegisteredExtensions, listRegisteredFlowOperations, listRegisteredFlowTriggers, listRelatedComments, listReportAlerts, listReportAnnotations, listReportFilterPresets, listReportSnapshots, listReportTemplates, listReportVersions, listReportWidgetPresets, listReports, listRequestedTasks, listRetentionPolicies, listRetentionRuns, listRolePolicies, listRoleUsers, listRoles, listRules, listSavedViews, listScheduledChanges, listScheduledReports, listScopeDimensions, listSessionRecordings, listShareLinks, listSlaRules, listStagedImports, listSubRowTemplates, listSubRows, listSupportTickets, listSyncJobs, listTasks, listTeamTasks, listThroughputCollections, listTraces, listTreePermissions, listViewSubscriptions, listVirtualCollections, listWebhookDeliveries, listWebhooks, listWidgetFeeds, listWorkspaceTemplates, listWorkspaces, markAllNotificationsRead, markChatRoomRead, markNotificationRead, markNotificationsRead, moveTreeNode, nudgeTask, omniSearch, openHelpVideoPackageImport, openHelpVideoUpload, presignFileUpload, previewContentBundle, previewHelpVideoPackageImport, previewImportJob, previewReportWidget, projectFieldConfig, proposeLayoutOps, publishHelpVideo, publishItem, queryVirtualCollection, readAccessAuditFindings, readActiveLayout, readActivity, readActivityReportSummary, readAddendum, readAiSettings, readAlertLog, readAllStateOwners, readAnomalyLog, readApiAnalyticsErrors, readApiAnalyticsSummary, readApiAnalyticsTimeseries, readApiAnalyticsTopCollections, readApiAnalyticsTopPaths, readApiKey, readApprovalBrief, readApprovalChain, readAtRiskSummary, readBackupManifest, readChatConfig, readChatDirectory, readChatPeerRead, readCollection, readCollectionLayout, readCollectionLayouts, readCollections, readConfigInventory, readCoverageGaps, readDashboard, readDashboardWidgetData, readDataQualityRun, readDbPool, readDetailLayout, readDistinctValues, readDraftPublishConfig, readErpSubmissionHistory, readExpensiveSql, readFieldChangeHistory, readFieldConfig, readFieldImpact, readFieldWatch, readFileMeta, readFileUsage, readFilesByIds, readHealthDetailed, readHelpVideo, readHelpVideoAnalytics, readHelpVideoDownloadLink, readHelpVideoDraft, readHelpVideoWalk, readHierarchyConfig, readHierarchyNodeAncestors, readHierarchyNodeChildren, readHierarchyNodes, readHierarchyTree, readImportJob, readImportProcedure, readInfrastructureSummary, readInstanceOwners, readInstanceRoster, readIntegrationHealth, readInternalWidget, readIssue, readIssueSummary, readItem, readItemLock, readItemLockConfig, readItems, readJobRegistry, readLastTouch, readLayoutAssignments, readLayoutBundle, readLayoutDrift, readLayoutGroups, readLayoutOverview, readLayoutProposals, readLayoutVersion, readMany, readMcpCapabilities, readMcpToolsConfig, readMe, readMetricAlertLog, readMyScopes, readMyWork, readNotificationCount, readNotificationSubscriptionStats, readOnlinePresence, readOwnerGroups, readPage, readPageWidgetData, readPdfTemplate, readPersistedQuery, readPickerExclusion, readPickerExclusions, readPipelineFlowMap, readPipelineReplay, readPipelineTemplate, readPipelineTemplates, readPipelineVersion, readPreflight, readQueue, readQueueCollectionStates, readQueueColumnPrefs, readQueueItems, readQueueTrends, readQueueWorkload, readReadiness, readRecordGraph, readRelationOptions, readReport, readReportAlertLog, readReportAlertsLog, readReportFilterOptions, readReportFiring, readReportSnapshot, readReportSubscription, readReportUsage, readReportWidgetData, readRequiredHelpVideos, readRevision, readRevisions, readRole, readRuntimeStats, readScopeDimensionCoverage, readSessionRecordingEvents, readSettings, readSingleton, readSlaStatusBatch, readStagedImport, readStagedImportStats, readStateOwnerGroups, readStateOwners, readStateOwnersBatch, readSupportTicket, readSyncJob, readTask, readTaskCounts, readTaskHistory, readThroughputReport, readTimeline, readTrace, readTrafficSnapshot, readTreeAncestors, readTreeChildren, readTreeConfig, readTreeDescendants, readTreeNested, readTreeNodes, readTwoFactorStatus, readUnreadNotificationCount, readUser, readUserActivity, readUserActivitySummary, readUserCard, readUserScopes, readUsers, readWorkflowBindings, readWorkflowInstance, readWorkflowInstances, readWorkspace, readWorkspaceUsage, rebuildTreePaths, recordHelpVideoProgress, registerHelpVideoPage, rehearseCreateItem, reindexSemanticSearch, rejectAddendum, rejectAiProposal, releaseItemLock, releaseQueueItem, rematerializeQueue, removeChatChannelMember, removeInstanceOwner, renderInternalWidget, renderPdfTemplate, reorderFieldGroups, reorderSubRows, reorderTreeSiblings, replaceSubRows, replayActivityEvent, replayFlow, replySupportTicket, reportClientError, requestRecordAccess, requeueStagedImport, rerecordHelpVideo, rerenderHelpVideo, resetReportCache, resolveLayoutProposal, resolveReportAlert, restoreHelpVideoVersion, restoreImportDefinitionVersion, restoreLayoutVersion, restorePipelineVersion, restoreReportVersion, retryDeadLetter, retryErpSubmission, retryWebhookDelivery, revokeApiKey, revokeShareLink, revokeToken, revokeUserToken, rollbackRevision, rotateWidgetFeedToken, runAccessAudit, runActivityReport, runActivityReportCsv, runCronJob, runDataQuality, runRetentionPolicy, runScheduledReport, runSyncJob, saveHelpVideoDraft, saveMcpToolsConfig, saveMyScopeDefaults, saveReportFilterPreset, saveReportTemplate, saveReportWidgets, saveUserScope, searchChatMessages, semanticSearch, sendBulkNotification, sendChatMessage, sendTestMail, sessionRecordingEnabled, setHelpVideoContexts, setHelpVideoRequirements, setMyDelegate, setQueueDefaultView, setReportSubscription, setSupportTicketStatus, setTranslations, setupTwoFactor, simulatePermissions, simulatePipeline, simulatePipelineImpact, startApproval, startMasquerade, startSessionRecording, startWorkflow, stopMasquerade, submitAddendum, submitFormItem, submitItemForReview, submitLayoutOps, submitToErp, subscribeFieldWatch, subscribeMetricAlert, suggestImportValidation, suggestQueueLabels, switchWorkspace, testExternalApi, testFlow, testWebhook, toggleChatPin, toggleChatReaction, togglePinnedItem, toggleReportAlert, touchRecordView, transitionWorkflow, unpublishHelpVideo, unpublishItem, unsubscribeFieldWatch, unsubscribeMetricAlert, updateAccessAudit, updateAddendum, updateAiSettings, updateAlertDefinition, updateAnomalyLogEntry, updateAnomalyRule, updateApiKey, updateApprovalChain, updateAtRiskRule, updateAttributeDefinition, updateAttributeValues, updateChatChannel, updateChatRoom, updateChatRoomType, updateCollectionLayout, updateComment, updateDataQualityRule, updateDraftPublishConfig, updateErpSubmissionStatus, updateExternalApi, updateExternalApiEndpoint, updateFieldConfig, updateFieldGroup, updateFieldWatch, updateFileMeta, updateHelpVideo, updateHierarchyConfig, updateImportDefinition, updateInternalWidget, updateIssue, updateItem, updateItemLockConfig, updateLayoutAssignments, updateLayoutUngroupedSort, updateMe, updateMetricAlertRule, updateMetricAlertSubscription, updateNotificationSubscription, updatePage, updatePdfTemplate, updatePersistedQuery, updateQueue, updateQueueSources, updateQueueView, updateRecordTemplate, updateReport, updateReportAlert, updateReportWidgetPreset, updateRetentionPolicy, updateRole, updateRolePolicy, updateRoleUiPermissions, updateRule, updateSavedView, updateScheduledReport, updateSettings, updateSingleton, updateSlaRule, updateSyncJob, updateTask, updateTreePermission, updateUser, updateVirtualCollection, updateWebhook, updateWidgetFeed, updateWorkflowBinding, updateWorkspace, validateVirtualCollectionSql, verifyTwoFactor, whichLayoutForm, withSignal };
+export { type AccessAudit, type AccessAuditFinding, type AccessAuditRun, type AccessAuditSubject, type AccessReason, type ActivityAction, type ActivityEntry, type ActivityQuery, type ActivityReportQuery, type ActivityReportRow, type ActivityReportSummary, type Addendum, type AddendumStatus, type AgentQuestion, type AgentQuestionStatus, type AgentTrigger, type AgentTriggerDelivery, type AgentTriggerEvent, type AggregateQuery, type AggregateRow, type AiChatTraceEntry, type AiCollectionSettings, type AiColumnMapping, type AiDuplicateMatch, type AiQueryFilter, type AiQueryResult, type AiReviewFinding, type AiViolation, type AlertDefinition, type AlertLogEntry, type AlertSubscription, type AnomalyDefinition, type AnomalyRule, type ApiAnalyticsBucket, type ApiAnalyticsCollection, type ApiAnalyticsPath, type ApiAnalyticsSummary, type ApiErrorLog, type ApiKey, type ApiKeyMonthlyUsage, type ApiKeyScope, type ApiKeyTraffic, type ApiKeyUsage, type ApiKeyUsageBucket, type ApiRequestLogEntry, type ApiRequestLogQuery, type ApprovalBrief, type ApprovalChain, type ApprovalChainStep, type ApprovalDecision, type ApprovalInstance, type ApprovalInstanceDetail, type ApprovalStatus, type ApprovalStepInput, type AtRiskCondition, type AtRiskOp, type AtRiskResult, type AtRiskRule, type AtRiskSummaryEntry, type AttachedFile, type AttributeDefinition, type AttributeValue, type AuthProviders, type BackgroundRun, type BatchRead, type BatchReadResult, type BatchWriteResult, type BlackoutDate, type BoolFilterOps, type BulkRowResult, type BulkWriteOutcome, type BusyJob, type CMSCollection, type CascadeFilterRule, type ChangeOrder, type ChaosWhatIfAnswer, type ChatChannel, type ChatChannelMember, type ChatDirectoryChannel, type ChatMessage, type ChatPin, type ChatReaction, type ChatRoomKind, type ChatRoomSummary, type ChatRoomType, type ChatSearchHit, type CollectionLayout, type CollectionLayoutType, type CollectionPresetSummary, type Command, type Comment, type CommentReaction, type CommentVersion, type ConfigSnapshot, type ConfigTableClassification, type ContentBundle, type ContentExportFormat, type ContentExportOptions, type CoverageGapItem, type CoverageGapOwner, type CoverageGapReport, type CpuProfileSummary, type CronJob, type CustomQuery, type CustomQueryCatalogEntry, type Dashboard, type DashboardFilter, type DashboardWidget, type DashboardWidgetData, type DashboardWidgetInput, type DashboardWidgetType, type DataQualityRule, type DataQualityRuleResult, type DataQualityRuleType, type DataQualityRun, type DataQualitySeverity, type DeadLetter, type DmvResult, type DraftPublishConfig, type DraftStatus, type DryRunReport, EDITOR_NOTE_MAX, type ErpSubmission, type ErpSubmissionStatus, type ExpensiveStatement, type ExtensionManifest, type ExternalApi, type ExternalApiEndpoint, type ExternalApiSchema, type ExternalApiSlotContext, type ExternalApiSpecImportResult, type ExternalApiTestResult, type FeedChange, type FeedPage, type FieldChangeEntry, type FieldCondition, type FieldConfig, type FieldDependencyConfig, type FieldFilter, type FieldGroup, type FieldTranslations, type FieldVisibilityRules, type FieldWatch, type FileRecord, type FileUploadResult, type FileUsageEntry, type Filter, type FilterCheck, type FilterProblem, type FlowReplayResult, type FlowRun, type FlowTestStep, type FormFieldDescriptor, type FormFieldRelation, type FormFieldStateRow, type FormGroupDescriptor, type FormImageAnswer, type FormLockCondition, type FormSchema, type FormStateAnswer, type FormStateQuery, type FormValidationRule, type FormVisibilityRule, GROUP_PATCH_KEYS, type GlobalSearchPerson, type GlobalSearchRecord, type GlobalSearchResults, type GraphQLResponse, type GroupPatch, type GroupRow, type HealthDetailed, type HelpVideo, type HelpVideoClick, type HelpVideoContext, type HelpVideoDownloadUrls, type HelpVideoFinalizedUpload, type HelpVideoProgress, type HelpVideoUploadSession, type HelpVideoVersion, type HelpVideoVisibility, type HelpVideoWalkStep, type HelpVideoWhatsNew, type HierarchyConfigDef, type HierarchyFlatNode, type HierarchyLevelDef, type HierarchyNestedNode, type IDFilterOps, type ISODate, type ImportDefinition, type ImportJob, type ImportParseResponse, type ImportPreview, type ImportPreviewDiff, type ImportTemplateSummary, type InfrastructureSummaryTool, type InstanceOwner, type InstanceToolEntry, type IntegrationApiHealth, type InternalWidget, type Issue, type IssueSeverity, type IssueStatus, type IssueSummary, type ItemLock, type ItemWriteMeta, type JobLogLine, type JobRegistryCron, type JobRun, LAYOUT_PATCH_KEYS, type LastTouch, type LayoutAssignment, type LayoutBundle, type LayoutDescription, type LayoutFieldExplanation, type LayoutGroup, type LayoutLintAnswer, type LayoutOp, type LayoutOverviewRow, type LayoutPatch, type LayoutPickReason, type LayoutProposal, type LayoutRow, type LayoutVersion, type ListResponse, type MailLogEntry, type ManagedUser, type McpCapabilities, type McpToolsConfig, type MetricAlertRule, type MetricAlertSubscription, type MetricDefinition, type MyJob, type MyTask, type MyWorkOwnedEntry, type MyWorkSla, type MyWorkSummary, NOTIFICATIONS_CHANNEL, type NamedMcpToolConfig, type NivaroClient, type NivaroClientOptions, NivaroError, type NivaroExtensionPlugin, type NivaroRealtime, type NivaroRequestInfo, type NivaroResponseInfo, type NivaroRetryOptions, type NivaroRuntime, type NotificationFilter, type NotificationHistoryEntry, type NotificationItem, type NotificationPage, type NotificationSubscription, type NumberFilterOps, type OmniSearchHit, type OnlinePresenceConfig, type OnlinePresenceUser, type OwnerHistoryEntry, type OwnerSeat, PLACEMENT_PATCH_KEYS, type Page, type PageLayout, type PageSlotKey, type PageWidget, type PdfTemplate, type PermissionSimulation, type PersistedQuery, type PickerExclusionStatus, type PipelineFlowEdge, type PipelineFlowState, type PipelineImpactResult, type PipelineOutline, type PipelineOwnerGroup, type PipelineOwnerGroupUser, type PipelineSimulation, type PipelineState, type PipelineVersionEntry, type PlacementKey, type PlacementPatch, type PlacementRow, type PluginSlots, type Policy, type PoolStats, type PreflightCheck, type PreflightReport, type PreflightSeverity, type PresenceClient, type PresenceOptions, type PresenceSession, type PresenceSessionInfo, type PresenceViewer, type ProjectedPlacement, type PromotionApplyResult, type PromotionPreview, type ProposedField, type ProposedSchemaChange, type Query, type Queue, type QueueColumnPrefs, type QueueCondition, type QueueDetail, type QueueDisplayConfig, type QueueItem, type QueueItemsResult, type QueueOwner, type QueueRowClickMode, type QueueScope, type QueueSource, type QueueSourceType, type QueueStats, type QueueTrendPoint, type QueueView, type QueueViewKind, type QueueWorkloadRow, READ_MANY_MAX, REQUEST_ID_HEADER, type ReadyReport, type RealtimeChange, type RealtimeEvent, type RealtimeToken, type RecordGraphEdge, type RecordGraphNode, type RecordLink, type RecordLinkType, type RecordTemplate, type RecordViewRecap, type RegisteredAction, type RelatedCommentEntry, type RelationFilter, type RelationOption, type Reminder, type ReportAlert, type ReportAlertCondition, type ReportAlertLogEntry, type ReportAnnotation, type ReportColumnFormat, type ReportDateRange, type ReportDef, type ReportEntityFilter, type ReportFilterPreset, type ReportQueryColumn, type ReportQueryWidgetConfig, type ReportSnapshotEntry, type ReportSubscription, type ReportTemplateEntry, type ReportVersionEntry, type ReportWidget, type ReportWidgetConfig, type ReportWidgetData, type ReportWidgetPreset, type ReportWidgetType, type RequestTrace, type ResolvedOwner, type RetentionPolicy, type RetentionRun, type RetentionRunResult, type Revision, type Role, type Rule, type RuntimeStats, type SavedSearch, type SavedView, type ScheduledChange, type ScheduledReport, type SchemaChoice, type SchemaFieldType, type SchemaProposal, type ScopeDimension, type ScopeDimensionInfo, type SemanticSearchMatch, type SentNotificationGroup, type SessionRecording, type SessionReplayMasking, type ShareLink, type SlaBatchStatus, type SlaRule, type SlaStatus, type StagedImportRun, type StagedImportStats, type StringFilterOps, type SubRow, type SubRowTemplate, type SupportTicket, type SupportTicketDetail, type SupportTicketStatus, type SyncJob, type Task, type TaskAgent, type TaskDoneWhenRule, type TaskPriority, type TaskStatus, type TimelineEvent, type TraceSpan, type TrafficSnapshot, type TrafficSnapshotEntity, type TrashEntry, type TreeFlatNode, type TreeNestedNode, type TreeNodeConfig, type TreePermission, type TreePermissionAction, type UUID, type UpdateDryRunReport, type UserActivityEntry, type UserActivitySummary, type UserScopesInfo, type ViewSubscription, type VirtualCollection, type Webhook, type WebhookDelivery, type WhichLayoutForm, type WidgetDrillBody, type WidgetDrillRows, type WidgetFeed, type WorkflowBinding, type WorkflowHistoryEntry, type WorkflowInstance, type WorkflowInstanceData, type WorkflowState, type WorkflowTransition, type Workspace, type WorkspaceQuotas, type WorkspaceTemplate, type WorkspaceUsage, _and, _contains, _ends_with, _eq, _gt, _gte, _in, _lt, _lte, _ncontains, _neq, _nin, _nnull, _none, _null, _or, _some, _starts_with, abandonHelpVideoUpload, acknowledgeNotification, acquireItemLock, activateLayout, addChatChannelMember, addInstanceOwner, addSubRow, aggregateItems, aiBrief, aiBuildReport, aiChat, aiCheckDuplicates, aiGenerate, aiMapColumns, aiQuery, aiReportFilters, aiReview, aiSummarize, aiValidate, answerAgentQuestion, appendSessionRecordingEvents, applyContentBundle, applyHelpVideoPackageImport, applyRecordTemplate, applySubRowTemplate, approveAddendum, approveAiProposal, archiveHelpVideo, archiveReadNotifications, asc, askHuman, attachFileToRecord, backupExportPath, batchItems, batchPickerExclusionStatus, bulkDeleteItems, bulkNotificationAction, bulkPickerExclusion, bulkRestoreTrash, bulkTransitionItems, bulkUpdateItems, bulkWriteItems, callExternalApi, callExternalApiEndpoint, callInstanceTool, cancelAgentQuestion, cancelJobRun, cancelScheduledChange, cancelStagedImport, captureCpuProfile, cascadeFieldDependencies, chaosWhatIf, checkBlackoutDate, checkItemFilter, claimQueueItem, claimSupportTicket, claimTask, clearTraces, cloneItem, cloneLayout, cloneReport, compareConfigSnapshot, completeTask, copyReportWidget, createAccessAudit, createActivityEntry, createAddendum, createAlertDefinition, createAlertSubscription, createAnomalyRule, createApiKey, createApprovalChain, createAtRiskRule, createAttributeDefinition, createBlackoutDate, createChatChannel, createChatRoomType, createCollectionLayout, createComment, createDashboard, createDashboardWidget, createDataQualityRule, createExternalApi, createExternalApiEndpoint, createFieldGroup, createFieldWatch, createGroupDm, createHelpVideo, createHierarchyConfig, createImportDefinition, createImportJob, createImportJobFromUrl, createInternalWidget, createIssue, createItem, createMetricAlertRule, createNivaro, createNotification, createNotificationSubscription, createPage, createPdfTemplate, createPersistedQuery, createPresence, createQueue, createQueueView, createRealtime, createRecordLink, createRecordTemplate, createReminder, createReport, createReportAlert, createReportAnnotation, createReportFromTemplate, createReportSnapshot, createReportWidgetPreset, createRetentionPolicy, createRole, createRolePolicy, createRule, createSavedSearch, createSavedView, createScheduledChange, createScheduledReport, createShareLink, createSlaRule, createSubRowTemplate, createSyncJob, createTask, createTreePermission, createUser, createViewSubscription, createVirtualCollection, createWebhook, createWidgetFeed, createWorkspace, createWorkspaceTemplate, decideApproval, deleteAccessAudit, deleteAddendum, deleteAlertDefinition, deleteAlertSubscription, deleteAnomalyRule, deleteApiKey, deleteApprovalChain, deleteAtRiskRule, deleteAttributeDefinition, deleteBlackoutDate, deleteChatMessage, deleteCollectionLayout, deleteComment, deleteDashboard, deleteDashboardWidget, deleteDataQualityRule, deleteExternalApi, deleteExternalApiEndpoint, deleteExternalApiSchema, deleteFieldGroup, deleteFieldTranslations, deleteFieldWatch, deleteFile, deleteHierarchyConfig, deleteImportJob, deleteInternalWidget, deleteIssue, deleteItem, deleteMetricAlertRule, deleteNotification, deleteNotificationSubscription, deletePage, deletePdfTemplate, deletePersistedQuery, deleteQueue, deleteQueueView, deleteRecordLink, deleteRecordTemplate, deleteReminder, deleteReport, deleteReportAlert, deleteReportAnnotation, deleteReportFilterPreset, deleteReportSnapshot, deleteReportTemplate, deleteReportWidgetPreset, deleteRetentionPolicy, deleteRole, deleteRolePolicy, deleteRule, deleteSavedSearch, deleteSavedView, deleteScheduledReport, deleteSessionRecording, deleteSlaRule, deleteSubRow, deleteSubRowTemplate, deleteSyncJob, deleteTask, deleteTreePermission, deleteUser, deleteViewSubscription, deleteVirtualCollection, deleteWebhook, deleteWidgetFeed, deleteWorkspace, deleteWorkspaceTemplate, deployImportProcedure, desc, describeLayoutForm, diffLayoutVersion, disableTwoFactor, discardHelpVideoPackageImport, drillDashboardWidgetRows, drillReportRow, drillReportWidgetRows, editChatMessage, endSessionRecording, errorBodyMessage, estimateBackgroundRun, evaluateAlerts, evaluateAtRisk, evaluateFieldDefaults, evaluateFieldLock, evaluateFieldRules, evaluateFieldVisibility, excludeFromPicker, excludeFromPickers, executeBulkAction, executeCustomQuery, executeImportTemplate, executeItemAction, executeScheduledChange, explainLayout, explainLayoutField, explainRecordAccess, explainReportTrend, exportBlueprint, exportConfigSnapshot, exportContent, exportContentBundle, exportHelpVideoPackage, exportSchemaSnapshot, fetchFormSchema, fileDownloadPath, fileTransformPath, finalizeHelpVideoUpload, generateToken, generateUserToken, getAlertDefinition, getAttributeValues, getBrunoCollection, getCommentHistory, getExternalApi, getExternalApiEndpoint, getFieldTranslations, getFlowRun, getLocales, getOpenApi, getPickerExclusionStatus, getPostmanCollection, getPresence, getRetentionPolicy, getSlaRule, getSlaStatus, getTranslations, getTypes, getWebhook, globalSearch, heartbeatItemLock, helpVideosFor, importExternalApiSpec, importSchemaSnapshot, includeInPicker, includeInPickers, installBlueprint, installCollectionPreset, invokeInternalWidgetAction, isNivaroError, isPageSlot, joinChatRoom, leaveChatRoom, listAccessAuditRuns, listAccessAudits, listActiveAtRiskRules, listActivePresence, listActivityActions, listAddendums, listAgentTasks, listAgentTriggerDeliveries, listAgentTriggers, listAlertDefinitions, listAlertSubscriptions, listAllNotificationSubscriptions, listAnomalyDefinitions, listAnomalyRules, listApiKeys, listApiRequests, listApprovalChains, listApprovalInstances, listAskedQuestions, listAtRiskRules, listAttributeDefinitions, listBackgroundRuns, listBlackoutDates, listBulkActions, listChangeOrders, listChatChannelMembers, listChatMessages, listChatPins, listChatRoles, listChatRoomTypes, listChatRooms, listCollectionPresets, listCollectionRecordTemplates, listComments, listCronJobs, listCustomQueries, listCustomQueryCatalog, listDashboards, listDataQualityRules, listDataQualityRuns, listDeadLetters, listExternalApiEndpoints, listExternalApiSchemas, listExternalApis, listFieldGroups, listFieldWatches, listFiles, listFlowRuns, listHelpVideoPages, listHelpVideoVersions, listHelpVideos, listHierarchyConfigs, listImportDefinitionVersions, listImportDefinitions, listImportJobs, listImportTemplates, listInstanceTools, listInternalWidgetPlacements, listInternalWidgets, listIssues, listItemActions, listItemScheduledChanges, listJobRuns, listLayoutVersions, listMailLog, listMetricAlertRules, listMetricAlertSubscriptions, listMetricDefinitions, listMyAgentQuestions, listMyHelpVideoUploads, listMyJobs, listMyTasks, listNotificationSubscriptions, listNotifications, listOrphanFiles, listPages, listPdfTemplates, listPersistedQueries, listPinnedItems, listPipelineVersions, listQueueViews, listQueues, listRecordLinks, listRecordMail, listRecordTemplates, listRegisteredExtensions, listRegisteredFlowOperations, listRegisteredFlowTriggers, listRelatedComments, listReminders, listReportAlerts, listReportAnnotations, listReportFilterPresets, listReportSnapshots, listReportTemplates, listReportVersions, listReportWidgetPresets, listReports, listRequestedTasks, listRetentionPolicies, listRetentionRuns, listRolePolicies, listRoleUsers, listRoles, listRules, listSavedSearches, listSavedViews, listScheduledChanges, listScheduledReports, listScopeDimensions, listSentNotifications, listSessionRecordings, listShareLinks, listSlaRules, listStagedImports, listSubRowTemplates, listSubRows, listSupportTickets, listSyncJobs, listTaskAgents, listTasks, listTeamTasks, listThroughputCollections, listTraces, listTrash, listTreePermissions, listViewSubscriptions, listVirtualCollections, listWebhookDeliveries, listWebhooks, listWidgetFeeds, listWorkspaceTemplates, listWorkspaces, logExport, logout, logoutAll, markAllNotificationsRead, markChatRoomRead, markNotificationRead, markNotificationsRead, moveTreeNode, nudgeTask, omniSearch, openHelpVideoPackageImport, openHelpVideoUpload, parseRealtimeChanges, presignFileUpload, previewContentBundle, previewHelpVideoPackageImport, previewImportJob, previewReportWidget, projectFieldConfig, proposeLayoutOps, proposeSchemaChange, publishHelpVideo, publishItem, purgeTrashItem, queryVirtualCollection, queueBulkWriteItems, readAccessAuditFindings, readActiveLayout, readActivity, readActivityEntry, readActivityReportSummary, readAddendum, readAgentQuestion, readAiSettings, readAlertLog, readAllStateOwners, readAnomalyLog, readApiAnalyticsByKey, readApiAnalyticsErrors, readApiAnalyticsSummary, readApiAnalyticsTimeseries, readApiAnalyticsTopCollections, readApiAnalyticsTopPaths, readApiKey, readApiKeyMonthlyUsage, readApiKeyUsage, readApprovalBrief, readApprovalChain, readAtRiskSummary, readAuthProviders, readBackgroundRun, readBackgroundRunResult, readBackupManifest, readBulkRun, readBusyJobs, readChanges, readChatConfig, readChatDirectory, readChatPeerRead, readCollection, readCollectionLayout, readCollectionLayouts, readCollections, readCommentCounts, readConfigInventory, readCoverageGaps, readDashboard, readDashboardWidgetData, readDataQualityRun, readDbPool, readDetailLayout, readDistinctValues, readDraftPublishConfig, readErpSubmissionHistory, readExpensiveSql, readFieldChangeHistory, readFieldConfig, readFieldImpact, readFieldWatch, readFileMeta, readFileUsage, readFilesByIds, readFormState, readHealthDetailed, readHelpVideo, readHelpVideoAnalytics, readHelpVideoDownloadLink, readHelpVideoDraft, readHelpVideoWalk, readHierarchyConfig, readHierarchyNodeAncestors, readHierarchyNodeChildren, readHierarchyNodes, readHierarchyTree, readImportJob, readImportProcedure, readInfrastructureSummary, readInstanceOwners, readInstanceRoster, readIntegrationHealth, readInternalWidget, readIssue, readIssueSummary, readItem, readItemBySlug, readItemDistinct, readItemLock, readItemLockConfig, readItems, readJobRegistry, readJobRunLog, readLastTouch, readLatestRevisionId, readLayoutAssignments, readLayoutBundle, readLayoutDrift, readLayoutGroups, readLayoutLint, readLayoutOverview, readLayoutProposals, readLayoutVersion, readMailLogEntry, readMailStats, readMany, readMcpCapabilities, readMcpToolsConfig, readMe, readMetricAlertLog, readMyOwnerSeats, readMyScopes, readMyWork, readNotificationCount, readNotificationHistory, readNotificationSubscriptionStats, readOnlinePresence, readOwnerGroups, readOwnerHistory, readPage, readPageWidgetData, readPdfTemplate, readPersistedQuery, readPickerExclusion, readPickerExclusions, readPipelineFlowMap, readPipelineOutline, readPipelineReplay, readPipelineTemplate, readPipelineTemplates, readPipelineVersion, readPreflight, readQueue, readQueueCollectionStates, readQueueColumnPrefs, readQueueItems, readQueueTrends, readQueueWorkload, readReadiness, readRecordDeletion, readRecordGraph, readRecordMute, readRelationOptions, readReport, readReportAlertLog, readReportAlertsLog, readReportFilterOptions, readReportFiring, readReportSnapshot, readReportSubscription, readReportUsage, readReportWidgetData, readRequiredHelpVideos, readRevision, readRevisions, readRole, readRuntimeStats, readSchemaProposal, readScopeDimensionCoverage, readSearchCounts, readSearchRecords, readSessionRecordingEvents, readSettings, readSingleton, readSlaStatusBatch, readStagedImport, readStagedImportStats, readStateOwnerGroups, readStateOwners, readStateOwnersBatch, readSupportTicket, readSyncJob, readTask, readTaskCounts, readTaskHistory, readThroughputReport, readTimeline, readTrace, readTrafficSnapshot, readTreeAncestors, readTreeChildren, readTreeConfig, readTreeDescendants, readTreeNested, readTreeNodes, readTwoFactorStatus, readUnreadNotificationCount, readUser, readUserActivity, readUserActivitySummary, readUserCard, readUserScopes, readUsers, readWorkflowBindings, readWorkflowInstance, readWorkflowInstances, readWorkspace, readWorkspaceUsage, readWsToken, rebuildTreePaths, recordHelpVideoProgress, registerHelpVideoPage, rehearseCreateItem, rehearseUpdateItem, reindexSemanticSearch, rejectAddendum, rejectAiProposal, releaseItemLock, releaseQueueItem, rematerializeQueue, removeChatChannelMember, removeInstanceOwner, renderFormImage, renderInternalWidget, renderPdfTemplate, reorderFieldGroups, reorderSubRows, reorderTreeSiblings, replaceSubRows, replayActivityEvent, replayFlow, replySupportTicket, reportClientError, requestRecordAccess, requeueStagedImport, rerecordHelpVideo, rerenderHelpVideo, resendMail, resetReportCache, resolveLayoutProposal, resolveReportAlert, restoreHelpVideoVersion, restoreImportDefinitionVersion, restoreLayoutVersion, restorePipelineVersion, restoreReportVersion, restoreTrashItem, retryDeadLetter, retryErpSubmission, retryWebhookDelivery, revokeApiKey, revokeShareLink, revokeToken, revokeUserToken, rollbackRevision, rotateWidgetFeedToken, runAccessAudit, runActivityReport, runActivityReportCsv, runCronJob, runDataQuality, runRetentionPolicy, runScheduledReport, runSyncJob, saveHelpVideoDraft, saveMcpToolsConfig, saveMyScopeDefaults, saveReportFilterPreset, saveReportTemplate, saveReportWidgets, saveUserScope, searchChatMessages, semanticSearch, sendBulkNotification, sendChatMessage, sendTestMail, sessionRecordingEnabled, setHelpVideoContexts, setHelpVideoRequirements, setMyDelegate, setQueueDefaultView, setReportSubscription, setSupportTicketStatus, setTranslations, setupTwoFactor, simulatePermissions, simulatePipeline, simulatePipelineImpact, snoozeNotification, startApproval, startBackgroundRun, startMasquerade, startSessionRecording, startWorkflow, stopMasquerade, submitAddendum, submitFormItem, submitItemForReview, submitLayoutOps, submitToErp, subscribeFieldWatch, subscribeMetricAlert, suggestImportValidation, suggestQueueLabels, switchWorkspace, testExternalApi, testFlow, testWebhook, toggleChatPin, toggleChatReaction, toggleCommentReaction, toggleEntryReaction, togglePinnedItem, toggleRecordMute, toggleReportAlert, touchRecordView, transitionWorkflow, unpublishHelpVideo, unpublishItem, unsubscribeFieldWatch, unsubscribeMetricAlert, updateAccessAudit, updateAddendum, updateAiSettings, updateAlertDefinition, updateAnomalyLogEntry, updateAnomalyRule, updateApiKey, updateApprovalChain, updateAtRiskRule, updateAttributeDefinition, updateAttributeValues, updateChatChannel, updateChatRoom, updateChatRoomType, updateCollectionLayout, updateComment, updateDashboard, updateDashboardWidget, updateDataQualityRule, updateDraftPublishConfig, updateErpSubmissionStatus, updateExternalApi, updateExternalApiEndpoint, updateFieldConfig, updateFieldGroup, updateFieldWatch, updateFileMeta, updateHelpVideo, updateHierarchyConfig, updateImportDefinition, updateInternalWidget, updateIssue, updateItem, updateItemLockConfig, updateLayoutAssignments, updateLayoutUngroupedSort, updateMe, updateMetricAlertRule, updateMetricAlertSubscription, updateNotificationSubscription, updatePage, updatePdfTemplate, updatePersistedQuery, updateQueue, updateQueueSources, updateQueueView, updateRecordTemplate, updateReminder, updateReport, updateReportAlert, updateReportWidgetPreset, updateRetentionPolicy, updateRole, updateRolePolicy, updateRoleUiPermissions, updateRule, updateSavedView, updateScheduledReport, updateSettings, updateSingleton, updateSlaRule, updateSyncJob, updateTask, updateTreePermission, updateUser, updateVirtualCollection, updateWebhook, updateWidgetFeed, updateWorkflowBinding, updateWorkspace, validateVirtualCollectionSql, verifyTwoFactor, whichLayoutForm, withSignal };