@snokam/platform-client 1.0.0

package/dist/apis/PlatformClient.d.ts

@@ -0,0 +1,2194 @@
+/**
+ * Platform API
+ * Self-service business platform management API
+ *
+ * The version of the OpenAPI document: v1.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+import type { ActivateRequest, ActivateResult, AddCustomDomainRequest, ApiTokenSummary, ApiTokenVerifyResult, AppCatalogEntry, AppModule, ApproveDeviceRequest, BillingPaymentMethod, BillingSessionRequest, BillingSessionResponse, BridgeWebhookResult, Business, BusinessAccess, BusinessHealth, Capability, CreateApiTokenRequest, CreateUserRequest, CreatedApiToken, CredentialSummary, CustomDomainProvisioning, DevicePairRequestBody, DevicePairing, DevicePairingStatus, DevicePollRequestBody, DeviceScreen, DirectoryGroupsResponse, DirectoryLicensesResponse, DirectoryMailbox, DirectoryServicePrincipalsResponse, EmployeeSettings, EmployeeSystemAccess, EmployeeSystemConfig, FacebookAccount, GitHubRepo, GoogleAnalyticsProperty, GoogleAnalyticsSelection, ImpersonationHistoryEntry, IntegrationCheckResult, IntegrationSummary, InviteCredentialRequest, InvoiceBasis, LoginConfig, MeApp, MeterEnforcementDecision, OAuthAccessTokenResponse, OAuthStartResponse, OlafApiKeyResponse, OlafTeamsSettings, OnboardBusinessRequest, OnboardingConfig, OnboardingStatus, PasswordLoginRequest, PasswordLoginResult, PatchBusinessRequest, PatchEmployee, PendingDevicePreview, PlanInfo, PlatformIntegration, PlatformSanityConfig, PlatformSecretStatus, PowerOfficeConnectResponse, PowerOfficeProduct, PowerOfficeProductsResponse, PowerOfficeProject, PowerOfficeProjectsResponse, ProtectedEmployee, RecordImpersonationActivityRequest, RenameDeviceRequest, ResetConfirmRequest, ResetRequest, RevokeRequest, ScopeDefinition, SessionBootstrapRequest, SetActiveProviderRequest, SetFacebookAccountRequest, SetGoogleAnalyticsPropertyRequest, SetPlatformSecretRequest, SetScopeGrantsRequest, SetWorkReposRequest, SetWorkspaceRepoRequest, SignupConfig, SignupRequest, SignupResult, SsoExchangeRequest, StartImpersonationRequest, StartImpersonationResult, StudioSanityConfig, TeamsAcsTokenResponse, TeamsAuthStateResponse, TenantInfo, TenantSanityCredentials, TokenExchangeRequest, TokenExchangeResult, TokenReconciliationReport, TotpEnrollRequest, TotpEnrollResult, UpdateAppsRequest, UpdateSecretsRequest, UsageDailySeries, UsageEventsRequest, UsageRollup, UsageSummary, VerifyApiTokenRequest, WorkReposSelection, WorkspaceRepoSelection } from '../models/index';
+export interface AddCustomDomainOperationRequest {
+    id: string;
+    addCustomDomainRequest: AddCustomDomainRequest;
+}
+export interface ApproveDeviceOperationRequest {
+    id: string;
+    approveDeviceRequest: ApproveDeviceRequest;
+}
+export interface AssignBusinessEmployeeSystemRequest {
+    id: string;
+    upn: string;
+    systemKey: string;
+    roleId?: string;
+}
+export interface BackfillBridgeWebhookRequest {
+    id: string;
+}
+export interface CheckIntegrationRequest {
+    id: string;
+    key: string;
+}
+export interface CheckPlatformIntegrationRequest {
+    key: string;
+}
+export interface ConnectTenantRequest {
+    id: string;
+}
+export interface CreateApiTokenOperationRequest {
+    id: string;
+    createApiTokenRequest: CreateApiTokenRequest;
+}
+export interface CreateBillingCheckoutRequest {
+    id: string;
+    billingSessionRequest: BillingSessionRequest;
+}
+export interface CreateBillingPortalRequest {
+    id: string;
+    billingSessionRequest: BillingSessionRequest;
+}
+export interface CreateBusinessRequest {
+    onboardBusinessRequest: OnboardBusinessRequest;
+}
+export interface CreateUserOperationRequest {
+    id: string;
+    createUserRequest: CreateUserRequest;
+}
+export interface DeleteBusinessRequest {
+    id: string;
+}
+export interface DeleteCustomDomainRequest {
+    id: string;
+    host: string;
+}
+export interface DevicePairPollRequest {
+    devicePollRequestBody: DevicePollRequestBody;
+}
+export interface DevicePairRequestRequest {
+    devicePairRequestBody?: DevicePairRequestBody;
+}
+export interface DisableCredentialRequest {
+    id: string;
+    credentialId: string;
+}
+export interface EndImpersonationRequest {
+    tokenId: string;
+}
+export interface ExportBusinessDataRequest {
+    id: string;
+}
+export interface GetBillingPaymentMethodRequest {
+    id: string;
+}
+export interface GetBusinessRequest {
+    id: string;
+}
+export interface GetBusinessAccessRequest {
+    id: string;
+}
+export interface GetBusinessEmployeeSystemsConfigRequest {
+    id: string;
+}
+export interface GetCustomDomainsRequest {
+    id: string;
+}
+export interface GetDirectoryGroupsRequest {
+    id: string;
+}
+export interface GetDirectoryLicensesRequest {
+    id: string;
+}
+export interface GetDirectoryServicePrincipalsRequest {
+    id: string;
+}
+export interface GetFacebookSelectedAccountRequest {
+    id: string;
+}
+export interface GetImpersonationHistoryRequest {
+    limit?: number;
+}
+export interface GetOAuthAccessTokenRequest {
+    id: string;
+    provider: string;
+}
+export interface GetOlafApiKeyRequest {
+    id: string;
+}
+export interface GetOlafTeamsSettingsRequest {
+    id: string;
+}
+export interface GetOnboardingConfigRequest {
+    id: string;
+}
+export interface GetOnboardingStatusRequest {
+    id: string;
+}
+export interface GetPlatformOAuthAccessTokenRequest {
+    provider: string;
+}
+export interface GetProvisioningStatusRequest {
+    id: string;
+}
+export interface GetTeamsAuthStateRequest {
+    id: string;
+}
+export interface GetTeamsUserAcsTokenRequest {
+    id: string;
+}
+export interface GetTokenReconciliationRequest {
+    month?: string;
+}
+export interface GetUsageDailyRequest {
+    businessId: string;
+    month?: string;
+}
+export interface GetUsageMeterDecisionRequest {
+    businessId: string;
+    meter: string;
+}
+export interface GetUsageRollupRequest {
+    month?: string;
+}
+export interface GetUsageSummaryRequest {
+    businessId: string;
+    month?: string;
+}
+export interface GetWorkReposRequest {
+    id: string;
+}
+export interface GetWorkspaceRepoRequest {
+    id: string;
+}
+export interface IngestUsageEventsRequest {
+    usageEventsRequest: UsageEventsRequest;
+}
+export interface InviteCredentialOperationRequest {
+    id: string;
+    inviteCredentialRequest: InviteCredentialRequest;
+}
+export interface ListAccountingProductsRequest {
+    id: string;
+}
+export interface ListAccountingProjectsRequest {
+    id: string;
+}
+export interface ListApiTokensRequest {
+    id: string;
+}
+export interface ListBusinessEmployeeSystemsRequest {
+    id: string;
+    upn: string;
+}
+export interface ListBusinessEmployeesRequest {
+    id: string;
+}
+export interface ListCredentialsRequest {
+    id: string;
+}
+export interface ListDevicesRequest {
+    id: string;
+}
+export interface ListFacebookAccountsRequest {
+    id: string;
+}
+export interface ListGitHubReposRequest {
+    id: string;
+}
+export interface ListIntegrationsRequest {
+    id: string;
+}
+export interface ListMailboxesRequest {
+    id: string;
+}
+export interface OAuthCallbackRequest {
+    provider: string;
+    code: string;
+    state: string;
+}
+export interface PasswordActivateRequest {
+    activateRequest: ActivateRequest;
+}
+export interface PasswordAuthLoginConfigRequest {
+    host: string;
+}
+export interface PasswordEnrollTotpRequest {
+    totpEnrollRequest: TotpEnrollRequest;
+}
+export interface PasswordLoginOperationRequest {
+    passwordLoginRequest: PasswordLoginRequest;
+}
+export interface PasswordResetConfirmRequest {
+    resetConfirmRequest: ResetConfirmRequest;
+}
+export interface PasswordResetRequestRequest {
+    resetRequest: ResetRequest;
+}
+export interface PasswordSessionBootstrapRequest {
+    sessionBootstrapRequest: SessionBootstrapRequest;
+}
+export interface PasswordTokenExchangeRequest {
+    tokenExchangeRequest: TokenExchangeRequest;
+}
+export interface PasswordTokenRevokeRequest {
+    revokeRequest: RevokeRequest;
+}
+export interface PatchBusinessOperationRequest {
+    id: string;
+    patchBusinessRequest: PatchBusinessRequest;
+}
+export interface PatchBusinessEmployeeRequest {
+    id: string;
+    employeeId: string;
+    patchEmployee: PatchEmployee;
+}
+export interface PowerOfficeOnboardingCallbackRequest {
+    reference: string;
+}
+export interface PowerOfficeOnboardingReturnRequest {
+    reference: string;
+}
+export interface PreviewBillingInvoiceRequest {
+    id: string;
+    month?: string;
+}
+export interface PreviewDeviceRequest {
+    id: string;
+    code: string;
+}
+export interface ProvisionBusinessRequest {
+    id: string;
+}
+export interface PublicSignupRequest {
+    signupRequest: SignupRequest;
+}
+export interface RecordImpersonationActivityOperationRequest {
+    recordImpersonationActivityRequest: RecordImpersonationActivityRequest;
+}
+export interface RenameDeviceOperationRequest {
+    id: string;
+    deviceId: string;
+    renameDeviceRequest: RenameDeviceRequest;
+}
+export interface RequestUpgradeRequest {
+    id: string;
+}
+export interface ResetCredentialRequest {
+    id: string;
+    credentialId: string;
+}
+export interface ResolveStudioSanityConfigRequest {
+    host: string;
+}
+export interface ResolveTenantRequest {
+    host?: string;
+    businessId?: string;
+    entraTenantId?: string;
+}
+export interface ResolveTenantSanityCredentialsRequest {
+    host: string;
+}
+export interface RevokeApiTokenRequest {
+    id: string;
+    fingerprint: string;
+}
+export interface RevokeBusinessEmployeeSystemRequest {
+    id: string;
+    upn: string;
+    systemKey: string;
+}
+export interface RevokeDeviceRequest {
+    id: string;
+    deviceId: string;
+}
+export interface SetAccountingGadgetsProjectRequest {
+    id: string;
+    powerOfficeProject: PowerOfficeProject;
+}
+export interface SetAccountingReinvoiceProductRequest {
+    id: string;
+    powerOfficeProduct: PowerOfficeProduct;
+}
+export interface SetActiveProviderOperationRequest {
+    id: string;
+    setActiveProviderRequest: SetActiveProviderRequest;
+}
+export interface SetBusinessEmployeePhotoRequest {
+    id: string;
+    employeeId: string;
+    body: Blob;
+}
+export interface SetEmployeeScopeGrantsRequest {
+    id: string;
+    employeeId: string;
+    setScopeGrantsRequest: SetScopeGrantsRequest;
+}
+export interface SetFacebookSelectedAccountRequest {
+    id: string;
+    setFacebookAccountRequest: SetFacebookAccountRequest;
+}
+export interface SetGoogleAnalyticsSelectedPropertyRequest {
+    setGoogleAnalyticsPropertyRequest: SetGoogleAnalyticsPropertyRequest;
+}
+export interface SetGroupScopeGrantsRequest {
+    id: string;
+    groupId: string;
+    setScopeGrantsRequest: SetScopeGrantsRequest;
+}
+export interface SetMeSettingsRequest {
+    employeeSettings: EmployeeSettings;
+}
+export interface SetOlafTeamsSettingsRequest {
+    id: string;
+    olafTeamsSettings: OlafTeamsSettings;
+}
+export interface SetPlatformSecretOperationRequest {
+    key: string;
+    setPlatformSecretRequest: SetPlatformSecretRequest;
+}
+export interface SetTeamsAuthStateRequest {
+    id: string;
+    body: object;
+}
+export interface SetWorkReposOperationRequest {
+    id: string;
+    setWorkReposRequest: SetWorkReposRequest;
+}
+export interface SetWorkspaceRepoOperationRequest {
+    id: string;
+    setWorkspaceRepoRequest: SetWorkspaceRepoRequest;
+}
+export interface SsoTokenExchangeRequest {
+    ssoExchangeRequest: SsoExchangeRequest;
+}
+export interface StartImpersonationOperationRequest {
+    startImpersonationRequest: StartImpersonationRequest;
+}
+export interface StartOAuthConnectRequest {
+    id: string;
+    provider: string;
+    returnTo?: string;
+}
+export interface StartPlatformOAuthConnectRequest {
+    provider: string;
+    returnTo?: string;
+}
+export interface StartPowerOfficeConnectRequest {
+    id: string;
+    returnTo?: string;
+}
+export interface UpdateAppsOperationRequest {
+    id: string;
+    updateAppsRequest: UpdateAppsRequest;
+}
+export interface UpdateSecretsOperationRequest {
+    id: string;
+    updateSecretsRequest: UpdateSecretsRequest;
+}
+export interface VerifyApiTokenOperationRequest {
+    verifyApiTokenRequest: VerifyApiTokenRequest;
+}
+export interface ViewAsBusinessRequest {
+    id: string;
+}
+/**
+ *
+ */
+export declare class PlatformClient extends runtime.BaseAPI {
+    /**
+     * Creates request options for addCustomDomain without sending the request
+     */
+    addCustomDomainRequestOpts(requestParameters: AddCustomDomainOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Maps a custom domain to the business and returns the DNS records the customer must create.
+     * Add a custom domain
+     */
+    addCustomDomainRaw(requestParameters: AddCustomDomainOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CustomDomainProvisioning>>;
+    /**
+     * Maps a custom domain to the business and returns the DNS records the customer must create.
+     * Add a custom domain
+     */
+    addCustomDomain(requestParameters: AddCustomDomainOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CustomDomainProvisioning>;
+    /**
+     * Creates request options for approveDevice without sending the request
+     */
+    approveDeviceRequestOpts(requestParameters: ApproveDeviceOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Mints a dashboards:read token for this business and hands it to the device on its next poll. The token is never part of this response.
+     * Approve a screen into this business
+     */
+    approveDeviceRaw(requestParameters: ApproveDeviceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeviceScreen>>;
+    /**
+     * Mints a dashboards:read token for this business and hands it to the device on its next poll. The token is never part of this response.
+     * Approve a screen into this business
+     */
+    approveDevice(requestParameters: ApproveDeviceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceScreen>;
+    /**
+     * Creates request options for assignBusinessEmployeeSystem without sending the request
+     */
+    assignBusinessEmployeeSystemRequestOpts(requestParameters: AssignBusinessEmployeeSystemRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Assigns the backing app-role via the tenant\'s employees API. Passing a different roleId than the current assignment replaces it.
+     * Grant an employee a seat in a third-party system
+     */
+    assignBusinessEmployeeSystemRaw(requestParameters: AssignBusinessEmployeeSystemRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EmployeeSystemAccess>>;
+    /**
+     * Assigns the backing app-role via the tenant\'s employees API. Passing a different roleId than the current assignment replaces it.
+     * Grant an employee a seat in a third-party system
+     */
+    assignBusinessEmployeeSystem(requestParameters: AssignBusinessEmployeeSystemRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EmployeeSystemAccess>;
+    /**
+     * Creates request options for backfillBridgeWebhook without sending the request
+     */
+    backfillBridgeWebhookRequestOpts(requestParameters: BackfillBridgeWebhookRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Removes any existing hooks targeting the broker and creates a fresh {abbr}-bridge-{env} hook authenticated with a managed sanity.webhook key.
+     * Re-create a business\'s Sanity bridge webhook with a managed API key
+     */
+    backfillBridgeWebhookRaw(requestParameters: BackfillBridgeWebhookRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<BridgeWebhookResult>>;
+    /**
+     * Removes any existing hooks targeting the broker and creates a fresh {abbr}-bridge-{env} hook authenticated with a managed sanity.webhook key.
+     * Re-create a business\'s Sanity bridge webhook with a managed API key
+     */
+    backfillBridgeWebhook(requestParameters: BackfillBridgeWebhookRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<BridgeWebhookResult>;
+    /**
+     * Creates request options for checkIntegration without sending the request
+     */
+    checkIntegrationRequestOpts(requestParameters: CheckIntegrationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Runs a live read-only probe against the integration using stored credentials.
+     * Run a live integration connectivity check
+     */
+    checkIntegrationRaw(requestParameters: CheckIntegrationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IntegrationCheckResult>>;
+    /**
+     * Runs a live read-only probe against the integration using stored credentials.
+     * Run a live integration connectivity check
+     */
+    checkIntegration(requestParameters: CheckIntegrationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IntegrationCheckResult>;
+    /**
+     * Creates request options for checkPlatformIntegration without sending the request
+     */
+    checkPlatformIntegrationRequestOpts(requestParameters: CheckPlatformIntegrationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Runs a live read-only connectivity probe against a platform-shared integration using the platform\'s own stored credentials.
+     * Live-probe a platform integration
+     */
+    checkPlatformIntegrationRaw(requestParameters: CheckPlatformIntegrationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IntegrationCheckResult>>;
+    /**
+     * Runs a live read-only connectivity probe against a platform-shared integration using the platform\'s own stored credentials.
+     * Live-probe a platform integration
+     */
+    checkPlatformIntegration(requestParameters: CheckPlatformIntegrationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IntegrationCheckResult>;
+    /**
+     * Creates request options for connectTenant without sending the request
+     */
+    connectTenantRequestOpts(requestParameters: ConnectTenantRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Claims an unclaimed business for the authenticated caller\'s Entra tenant. The signup id acts as a one-time claim token until connected; once connected the business is tenant-gated.
+     * Connect the caller\'s tenant to a business
+     */
+    connectTenantRaw(requestParameters: ConnectTenantRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Claims an unclaimed business for the authenticated caller\'s Entra tenant. The signup id acts as a one-time claim token until connected; once connected the business is tenant-gated.
+     * Connect the caller\'s tenant to a business
+     */
+    connectTenant(requestParameters: ConnectTenantRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for createApiToken without sending the request
+     */
+    createApiTokenRequestOpts(requestParameters: CreateApiTokenOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Issues a new customer API token. The raw token is returned ONCE and never again.
+     * Create an API token
+     */
+    createApiTokenRaw(requestParameters: CreateApiTokenOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CreatedApiToken>>;
+    /**
+     * Issues a new customer API token. The raw token is returned ONCE and never again.
+     * Create an API token
+     */
+    createApiToken(requestParameters: CreateApiTokenOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CreatedApiToken>;
+    /**
+     * Creates request options for createBillingCheckout without sending the request
+     */
+    createBillingCheckoutRequestOpts(requestParameters: CreateBillingCheckoutRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Creates a Stripe Checkout session for upgrading the business to the growth plan with card billing. Platform operators can start checkout for any business; tenant admins for their own.
+     * Start a subscription checkout
+     */
+    createBillingCheckoutRaw(requestParameters: CreateBillingCheckoutRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<BillingSessionResponse>>;
+    /**
+     * Creates a Stripe Checkout session for upgrading the business to the growth plan with card billing. Platform operators can start checkout for any business; tenant admins for their own.
+     * Start a subscription checkout
+     */
+    createBillingCheckout(requestParameters: CreateBillingCheckoutRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<BillingSessionResponse>;
+    /**
+     * Creates request options for createBillingPortal without sending the request
+     */
+    createBillingPortalRequestOpts(requestParameters: CreateBillingPortalRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Creates a Stripe billing portal session so the business can update its payment method or manage the subscription. Platform operators can open the portal for any business; tenant admins for their own.
+     * Open the Stripe billing portal
+     */
+    createBillingPortalRaw(requestParameters: CreateBillingPortalRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<BillingSessionResponse>>;
+    /**
+     * Creates a Stripe billing portal session so the business can update its payment method or manage the subscription. Platform operators can open the portal for any business; tenant admins for their own.
+     * Open the Stripe billing portal
+     */
+    createBillingPortal(requestParameters: CreateBillingPortalRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<BillingSessionResponse>;
+    /**
+     * Creates request options for createBusiness without sending the request
+     */
+    createBusinessRequestOpts(requestParameters: CreateBusinessRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Operator-driven creation of a business with full control over tenancy, domain and Sanity config. Used to onboard enterprise tenants that don\'t go through public self-serve signup.
+     * Onboard a business
+     */
+    createBusinessRaw(requestParameters: CreateBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Operator-driven creation of a business with full control over tenancy, domain and Sanity config. Used to onboard enterprise tenants that don\'t go through public self-serve signup.
+     * Onboard a business
+     */
+    createBusiness(requestParameters: CreateBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for createUser without sending the request
+     */
+    createUserRequestOpts(requestParameters: CreateUserOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Creates the tenant Sanity employee with the given scope grants and sends the activation invite so the user sets their own password + TOTP. Scoped to the caller\'s own business.
+     * Add a teammate to the tenant
+     */
+    createUserRaw(requestParameters: CreateUserOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialSummary>>;
+    /**
+     * Creates the tenant Sanity employee with the given scope grants and sends the activation invite so the user sets their own password + TOTP. Scoped to the caller\'s own business.
+     * Add a teammate to the tenant
+     */
+    createUser(requestParameters: CreateUserOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialSummary>;
+    /**
+     * Creates request options for deleteBusiness without sending the request
+     */
+    deleteBusinessRequestOpts(requestParameters: DeleteBusinessRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Deletes a business by ID.
+     * Delete a business
+     */
+    deleteBusinessRaw(requestParameters: DeleteBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Deletes a business by ID.
+     * Delete a business
+     */
+    deleteBusiness(requestParameters: DeleteBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for deleteCustomDomain without sending the request
+     */
+    deleteCustomDomainRequestOpts(requestParameters: DeleteCustomDomainRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Removes a custom domain from the business.
+     * Remove a custom domain
+     */
+    deleteCustomDomainRaw(requestParameters: DeleteCustomDomainRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Removes a custom domain from the business.
+     * Remove a custom domain
+     */
+    deleteCustomDomain(requestParameters: DeleteCustomDomainRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for devicePairPoll without sending the request
+     */
+    devicePairPollRequestOpts(requestParameters: DevicePairPollRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the screen\'s token exactly once, on the first poll after approval. A wrong or unknown poll token is indistinguishable from an unknown device.
+     * Ask whether the code was approved
+     */
+    devicePairPollRaw(requestParameters: DevicePairPollRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DevicePairingStatus>>;
+    /**
+     * Returns the screen\'s token exactly once, on the first poll after approval. A wrong or unknown poll token is indistinguishable from an unknown device.
+     * Ask whether the code was approved
+     */
+    devicePairPoll(requestParameters: DevicePairPollRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DevicePairingStatus>;
+    /**
+     * Creates request options for devicePairRequest without sending the request
+     */
+    devicePairRequestRequestOpts(requestParameters: DevicePairRequestRequest): Promise<runtime.RequestOpts>;
+    /**
+     * A screen asks for a code to display. The link belongs to no business until somebody signed in approves the code, so this grants nothing on its own.
+     * Ask for a pairing code
+     */
+    devicePairRequestRaw(requestParameters: DevicePairRequestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DevicePairing>>;
+    /**
+     * A screen asks for a code to display. The link belongs to no business until somebody signed in approves the code, so this grants nothing on its own.
+     * Ask for a pairing code
+     */
+    devicePairRequest(requestParameters?: DevicePairRequestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DevicePairing>;
+    /**
+     * Creates request options for disableCredential without sending the request
+     */
+    disableCredentialRequestOpts(requestParameters: DisableCredentialRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Disables the credential and revokes all of the user\'s refresh tokens.
+     * Disable a password credential
+     */
+    disableCredentialRaw(requestParameters: DisableCredentialRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Disables the credential and revokes all of the user\'s refresh tokens.
+     * Disable a password credential
+     */
+    disableCredential(requestParameters: DisableCredentialRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for endImpersonation without sending the request
+     */
+    endImpersonationRequestOpts(requestParameters: EndImpersonationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Writes the append-only session-end audit record. Token expiry auto-ends too.
+     * End a view-as-employee session
+     */
+    endImpersonationRaw(requestParameters: EndImpersonationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Writes the append-only session-end audit record. Token expiry auto-ends too.
+     * End a view-as-employee session
+     */
+    endImpersonation(requestParameters: EndImpersonationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for exportBusinessData without sending the request
+     */
+    exportBusinessDataRequestOpts(requestParameters: ExportBusinessDataRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Assembles a machine-readable export of the tenant\'s data: the business record (without secrets), the tenant\'s Sanity documents and usage history. Streams as a downloadable JSON attachment. Rate-limited to about one export per business per hour (best effort, per app instance). Platform operators can export any business; tenant admins can export their own.
+     * Export a business\'s data (GDPR)
+     */
+    exportBusinessDataRaw(requestParameters: ExportBusinessDataRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Blob>>;
+    /**
+     * Assembles a machine-readable export of the tenant\'s data: the business record (without secrets), the tenant\'s Sanity documents and usage history. Streams as a downloadable JSON attachment. Rate-limited to about one export per business per hour (best effort, per app instance). Platform operators can export any business; tenant admins can export their own.
+     * Export a business\'s data (GDPR)
+     */
+    exportBusinessData(requestParameters: ExportBusinessDataRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Blob>;
+    /**
+     * Creates request options for getApiScopes without sending the request
+     */
+    getApiScopesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the catalog of customer-grantable API scopes (key, label, children). Single source of truth for the API-key UI.
+     * List grantable API scopes
+     */
+    getApiScopesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ScopeDefinition>>>;
+    /**
+     * Returns the catalog of customer-grantable API scopes (key, label, children). Single source of truth for the API-key UI.
+     * List grantable API scopes
+     */
+    getApiScopes(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ScopeDefinition>>;
+    /**
+     * Creates request options for getBillingPaymentMethod without sending the request
+     */
+    getBillingPaymentMethodRequestOpts(requestParameters: GetBillingPaymentMethodRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the business\'s billing method and, for card billing, the brand and last four digits of the default card in Stripe. Platform operators can read any business; tenant admins their own.
+     * Payment method on file
+     */
+    getBillingPaymentMethodRaw(requestParameters: GetBillingPaymentMethodRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<BillingPaymentMethod>>;
+    /**
+     * Returns the business\'s billing method and, for card billing, the brand and last four digits of the default card in Stripe. Platform operators can read any business; tenant admins their own.
+     * Payment method on file
+     */
+    getBillingPaymentMethod(requestParameters: GetBillingPaymentMethodRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<BillingPaymentMethod>;
+    /**
+     * Creates request options for getBusiness without sending the request
+     */
+    getBusinessRequestOpts(requestParameters: GetBusinessRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Retrieves a business by ID.
+     * Get a business
+     */
+    getBusinessRaw(requestParameters: GetBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Retrieves a business by ID.
+     * Get a business
+     */
+    getBusiness(requestParameters: GetBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for getBusinessAccess without sending the request
+     */
+    getBusinessAccessRequestOpts(requestParameters: GetBusinessAccessRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the business\'s Sanity groups and employees with the scopes each currently grants.
+     * List a business\'s scope-grant assignments
+     */
+    getBusinessAccessRaw(requestParameters: GetBusinessAccessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<BusinessAccess>>;
+    /**
+     * Returns the business\'s Sanity groups and employees with the scopes each currently grants.
+     * List a business\'s scope-grant assignments
+     */
+    getBusinessAccess(requestParameters: GetBusinessAccessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<BusinessAccess>;
+    /**
+     * Creates request options for getBusinessEmployeeSystemsConfig without sending the request
+     */
+    getBusinessEmployeeSystemsConfigRequestOpts(requestParameters: GetBusinessEmployeeSystemsConfigRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Which Enterprise App backs each registered system. Used by the Systemoppsett admin card.
+     * List the tenant\'s system registry with configuration
+     */
+    getBusinessEmployeeSystemsConfigRaw(requestParameters: GetBusinessEmployeeSystemsConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<EmployeeSystemConfig>>>;
+    /**
+     * Which Enterprise App backs each registered system. Used by the Systemoppsett admin card.
+     * List the tenant\'s system registry with configuration
+     */
+    getBusinessEmployeeSystemsConfig(requestParameters: GetBusinessEmployeeSystemsConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<EmployeeSystemConfig>>;
+    /**
+     * Creates request options for getBusinesses without sending the request
+     */
+    getBusinessesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Retrieves all registered businesses.
+     * List all businesses
+     */
+    getBusinessesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<Business>>>;
+    /**
+     * Retrieves all registered businesses.
+     * List all businesses
+     */
+    getBusinesses(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<Business>>;
+    /**
+     * Creates request options for getCustomDomains without sending the request
+     */
+    getCustomDomainsRequestOpts(requestParameters: GetCustomDomainsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Retrieves the custom domains mapped to a business.
+     * List custom domains
+     */
+    getCustomDomainsRaw(requestParameters: GetCustomDomainsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<CustomDomainProvisioning>>>;
+    /**
+     * Retrieves the custom domains mapped to a business.
+     * List custom domains
+     */
+    getCustomDomains(requestParameters: GetCustomDomainsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<CustomDomainProvisioning>>;
+    /**
+     * Creates request options for getDirectoryGroups without sending the request
+     */
+    getDirectoryGroupsRequestOpts(requestParameters: GetDirectoryGroupsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Lists the groups in the business\'s connected Entra tenant, so an admin can choose which group new hires join during onboarding.
+     * List Entra groups for a business
+     */
+    getDirectoryGroupsRaw(requestParameters: GetDirectoryGroupsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DirectoryGroupsResponse>>;
+    /**
+     * Lists the groups in the business\'s connected Entra tenant, so an admin can choose which group new hires join during onboarding.
+     * List Entra groups for a business
+     */
+    getDirectoryGroups(requestParameters: GetDirectoryGroupsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DirectoryGroupsResponse>;
+    /**
+     * Creates request options for getDirectoryLicenses without sending the request
+     */
+    getDirectoryLicensesRequestOpts(requestParameters: GetDirectoryLicensesRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Lists the subscribed SKUs in the business\'s connected Entra tenant, so an admin can pin which license new hires get during onboarding.
+     * List Microsoft 365 licenses for a business
+     */
+    getDirectoryLicensesRaw(requestParameters: GetDirectoryLicensesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DirectoryLicensesResponse>>;
+    /**
+     * Lists the subscribed SKUs in the business\'s connected Entra tenant, so an admin can pin which license new hires get during onboarding.
+     * List Microsoft 365 licenses for a business
+     */
+    getDirectoryLicenses(requestParameters: GetDirectoryLicensesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DirectoryLicensesResponse>;
+    /**
+     * Creates request options for getDirectoryServicePrincipals without sending the request
+     */
+    getDirectoryServicePrincipalsRequestOpts(requestParameters: GetDirectoryServicePrincipalsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Lists the enterprise applications in the business\'s connected Entra tenant that expose user-assignable app roles, so an admin can map an onboarding system (e.g. Salesforce) to a service principal + role.
+     * List enterprise apps with assignable app roles
+     */
+    getDirectoryServicePrincipalsRaw(requestParameters: GetDirectoryServicePrincipalsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DirectoryServicePrincipalsResponse>>;
+    /**
+     * Lists the enterprise applications in the business\'s connected Entra tenant that expose user-assignable app roles, so an admin can map an onboarding system (e.g. Salesforce) to a service principal + role.
+     * List enterprise apps with assignable app roles
+     */
+    getDirectoryServicePrincipals(requestParameters: GetDirectoryServicePrincipalsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DirectoryServicePrincipalsResponse>;
+    /**
+     * Creates request options for getFacebookSelectedAccount without sending the request
+     */
+    getFacebookSelectedAccountRequestOpts(requestParameters: GetFacebookSelectedAccountRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the Facebook Page or Instagram account the business has chosen to post to, if any.
+     * Get the selected Facebook/Instagram posting account
+     */
+    getFacebookSelectedAccountRaw(requestParameters: GetFacebookSelectedAccountRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FacebookAccount>>;
+    /**
+     * Returns the Facebook Page or Instagram account the business has chosen to post to, if any.
+     * Get the selected Facebook/Instagram posting account
+     */
+    getFacebookSelectedAccount(requestParameters: GetFacebookSelectedAccountRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FacebookAccount | null | undefined>;
+    /**
+     * Creates request options for getFleetHealth without sending the request
+     */
+    getFleetHealthRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Per-business provisioning state and live integration health probes across the fleet. Probe failures are reported per integration, never thrown. Operator only.
+     * Get fleet-wide tenant health
+     */
+    getFleetHealthRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<BusinessHealth>>>;
+    /**
+     * Per-business provisioning state and live integration health probes across the fleet. Probe failures are reported per integration, never thrown. Operator only.
+     * Get fleet-wide tenant health
+     */
+    getFleetHealth(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<BusinessHealth>>;
+    /**
+     * Creates request options for getGoogleAnalyticsSelectedProperty without sending the request
+     */
+    getGoogleAnalyticsSelectedPropertyRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the GA4 property the platform has chosen for analytics, if any.
+     * Get the selected Google Analytics property
+     */
+    getGoogleAnalyticsSelectedPropertyRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GoogleAnalyticsSelection>>;
+    /**
+     * Returns the GA4 property the platform has chosen for analytics, if any.
+     * Get the selected Google Analytics property
+     */
+    getGoogleAnalyticsSelectedProperty(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GoogleAnalyticsSelection | null | undefined>;
+    /**
+     * Creates request options for getImpersonationHistory without sending the request
+     */
+    getImpersonationHistoryRequestOpts(requestParameters: GetImpersonationHistoryRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Operator-only. Returns the tamper-evident impersonation history, newest first, with a chainValid flag per record.
+     * Operator review of the impersonation audit log
+     */
+    getImpersonationHistoryRaw(requestParameters: GetImpersonationHistoryRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ImpersonationHistoryEntry>>>;
+    /**
+     * Operator-only. Returns the tamper-evident impersonation history, newest first, with a chainValid flag per record.
+     * Operator review of the impersonation audit log
+     */
+    getImpersonationHistory(requestParameters?: GetImpersonationHistoryRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ImpersonationHistoryEntry>>;
+    /**
+     * Creates request options for getMeApps without sending the request
+     */
+    getMeAppsRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Resolved app links for the business the caller\'s Entra tenant belongs to. Lets a non-admin employee reach the apps their business has enabled even without an owned business.
+     * List apps for the signed-in employee
+     */
+    getMeAppsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<MeApp>>>;
+    /**
+     * Resolved app links for the business the caller\'s Entra tenant belongs to. Lets a non-admin employee reach the apps their business has enabled even without an owned business.
+     * List apps for the signed-in employee
+     */
+    getMeApps(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<MeApp>>;
+    /**
+     * Creates request options for getMeSettings without sending the request
+     */
+    getMeSettingsRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Reads the caller\'s own employee settings from the business their token belongs to. The control plane holds no tenant-scoped token, so it reads through the platform instead.
+     * Read the signed-in employee\'s settings
+     */
+    getMeSettingsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EmployeeSettings>>;
+    /**
+     * Reads the caller\'s own employee settings from the business their token belongs to. The control plane holds no tenant-scoped token, so it reads through the platform instead.
+     * Read the signed-in employee\'s settings
+     */
+    getMeSettings(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EmployeeSettings>;
+    /**
+     * Creates request options for getModules without sending the request
+     */
+    getModulesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns all available app modules.
+     * List available modules
+     */
+    getModulesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<AppModule>>>;
+    /**
+     * Returns all available app modules.
+     * List available modules
+     */
+    getModules(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AppModule>>;
+    /**
+     * Creates request options for getMyBusinesses without sending the request
+     */
+    getMyBusinessesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Businesses owned by the signed-in user\'s organization.
+     * List my businesses
+     */
+    getMyBusinessesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<Business>>>;
+    /**
+     * Businesses owned by the signed-in user\'s organization.
+     * List my businesses
+     */
+    getMyBusinesses(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<Business>>;
+    /**
+     * Creates request options for getOAuthAccessToken without sending the request
+     */
+    getOAuthAccessTokenRequestOpts(requestParameters: GetOAuthAccessTokenRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Service-to-service: refreshes the business\'s stored OAuth refresh token and returns a short-lived access token for the provider. Used by owning functions (e.g. accounting-function for Coinbase transfers).
+     * Mint a fresh OAuth access token
+     */
+    getOAuthAccessTokenRaw(requestParameters: GetOAuthAccessTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthAccessTokenResponse>>;
+    /**
+     * Service-to-service: refreshes the business\'s stored OAuth refresh token and returns a short-lived access token for the provider. Used by owning functions (e.g. accounting-function for Coinbase transfers).
+     * Mint a fresh OAuth access token
+     */
+    getOAuthAccessToken(requestParameters: GetOAuthAccessTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthAccessTokenResponse>;
+    /**
+     * Creates request options for getOlafApiKey without sending the request
+     */
+    getOlafApiKeyRequestOpts(requestParameters: GetOlafApiKeyRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the managed API key Olaf\'s gateway uses to call Snokam APIs as this business, minting it on first call. Managed, so it cannot be revoked from the UI.
+     * The business\'s Olaf API key
+     */
+    getOlafApiKeyRaw(requestParameters: GetOlafApiKeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OlafApiKeyResponse>>;
+    /**
+     * Returns the managed API key Olaf\'s gateway uses to call Snokam APIs as this business, minting it on first call. Managed, so it cannot be revoked from the UI.
+     * The business\'s Olaf API key
+     */
+    getOlafApiKey(requestParameters: GetOlafApiKeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OlafApiKeyResponse>;
+    /**
+     * Creates request options for getOlafTeamsSettings without sending the request
+     */
+    getOlafTeamsSettingsRequestOpts(requestParameters: GetOlafTeamsSettingsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the per-business Teams meeting-assistant settings (voice and future tuning knobs), with defaults when unset. Read by the business owner in the platform web and by the voice bridge (managed identity) when a meeting starts.
+     * Get the business\'s Olaf meeting-assistant settings
+     */
+    getOlafTeamsSettingsRaw(requestParameters: GetOlafTeamsSettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OlafTeamsSettings>>;
+    /**
+     * Returns the per-business Teams meeting-assistant settings (voice and future tuning knobs), with defaults when unset. Read by the business owner in the platform web and by the voice bridge (managed identity) when a meeting starts.
+     * Get the business\'s Olaf meeting-assistant settings
+     */
+    getOlafTeamsSettings(requestParameters: GetOlafTeamsSettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OlafTeamsSettings>;
+    /**
+     * Creates request options for getOnboardingConfig without sending the request
+     */
+    getOnboardingConfigRequestOpts(requestParameters: GetOnboardingConfigRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the non-sensitive directory identifiers (Entra group, Microsoft 365 license SKU, Salesforce service principal and app role) chosen for automated onboarding, so the management UI can show the current selection.
+     * Get the saved onboarding directory selections for a business
+     */
+    getOnboardingConfigRaw(requestParameters: GetOnboardingConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OnboardingConfig>>;
+    /**
+     * Returns the non-sensitive directory identifiers (Entra group, Microsoft 365 license SKU, Salesforce service principal and app role) chosen for automated onboarding, so the management UI can show the current selection.
+     * Get the saved onboarding directory selections for a business
+     */
+    getOnboardingConfig(requestParameters: GetOnboardingConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OnboardingConfig>;
+    /**
+     * Creates request options for getOnboardingStatus without sending the request
+     */
+    getOnboardingStatusRequestOpts(requestParameters: GetOnboardingStatusRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Derives onboarding step statuses from actual state: configured domains, tenant Sanity branding and content, roster size, chosen modules and connected integrations. Platform operators can read any business; tenant admins can read their own.
+     * Get the onboarding checklist for a business
+     */
+    getOnboardingStatusRaw(requestParameters: GetOnboardingStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OnboardingStatus>>;
+    /**
+     * Derives onboarding step statuses from actual state: configured domains, tenant Sanity branding and content, roster size, chosen modules and connected integrations. Platform operators can read any business; tenant admins can read their own.
+     * Get the onboarding checklist for a business
+     */
+    getOnboardingStatus(requestParameters: GetOnboardingStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OnboardingStatus>;
+    /**
+     * Creates request options for getPlatformIntegrations without sending the request
+     */
+    getPlatformIntegrationsRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the shared integrations every business depends on, grouped by service, with whether each secret is configured. Values are never returned.
+     * List platform-shared integrations
+     */
+    getPlatformIntegrationsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<PlatformIntegration>>>;
+    /**
+     * Returns the shared integrations every business depends on, grouped by service, with whether each secret is configured. Values are never returned.
+     * List platform-shared integrations
+     */
+    getPlatformIntegrations(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<PlatformIntegration>>;
+    /**
+     * Creates request options for getPlatformOAuthAccessToken without sending the request
+     */
+    getPlatformOAuthAccessTokenRequestOpts(requestParameters: GetPlatformOAuthAccessTokenRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Service-to-service: refreshes the platform\'s stored OAuth refresh token and returns a short-lived access token for a platform-connected provider (e.g. Google Analytics).
+     * Mint a fresh platform OAuth access token
+     */
+    getPlatformOAuthAccessTokenRaw(requestParameters: GetPlatformOAuthAccessTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthAccessTokenResponse>>;
+    /**
+     * Service-to-service: refreshes the platform\'s stored OAuth refresh token and returns a short-lived access token for a platform-connected provider (e.g. Google Analytics).
+     * Mint a fresh platform OAuth access token
+     */
+    getPlatformOAuthAccessToken(requestParameters: GetPlatformOAuthAccessTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthAccessTokenResponse>;
+    /**
+     * Creates request options for getPlatformSecrets without sending the request
+     */
+    getPlatformSecretsRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Lists shared platform secret keys and whether each is configured. Values are never returned.
+     * List shared platform secrets
+     */
+    getPlatformSecretsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<PlatformSecretStatus>>>;
+    /**
+     * Lists shared platform secret keys and whether each is configured. Values are never returned.
+     * List shared platform secrets
+     */
+    getPlatformSecrets(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<PlatformSecretStatus>>;
+    /**
+     * Creates request options for getProvisioningStatus without sending the request
+     */
+    getProvisioningStatusRequestOpts(requestParameters: GetProvisioningStatusRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the provisioning status and log for a business.
+     * Get provisioning status
+     */
+    getProvisioningStatusRaw(requestParameters: GetProvisioningStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Returns the provisioning status and log for a business.
+     * Get provisioning status
+     */
+    getProvisioningStatus(requestParameters: GetProvisioningStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for getTeamsAuthState without sending the request
+     */
+    getTeamsAuthStateRequestOpts(requestParameters: GetTeamsAuthStateRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Service-to-service: returns the stored Playwright storageState JSON for the business (teams-auth-state secret), or 404 when unset. Used by the Olaf realtime-tokens cron to deliver each business\'s session to the teams-client auth-state dir.
+     * Read the business\'s stored Teams authenticated join session
+     */
+    getTeamsAuthStateRaw(requestParameters: GetTeamsAuthStateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TeamsAuthStateResponse>>;
+    /**
+     * Service-to-service: returns the stored Playwright storageState JSON for the business (teams-auth-state secret), or 404 when unset. Used by the Olaf realtime-tokens cron to deliver each business\'s session to the teams-client auth-state dir.
+     * Read the business\'s stored Teams authenticated join session
+     */
+    getTeamsAuthState(requestParameters: GetTeamsAuthStateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TeamsAuthStateResponse>;
+    /**
+     * Creates request options for getTeamsUserAcsToken without sending the request
+     */
+    getTeamsUserAcsTokenRequestOpts(requestParameters: GetTeamsUserAcsTokenRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Service-to-service: exchanges the business\'s stored Microsoft refresh token for an Azure Communication Services access token that lets the teams-client join Teams meetings authenticated as the connected org user (bypassing the lobby). Returns 404 when the Microsoft account is not connected or ACS is not configured.
+     * Mint an ACS access token for the connected M365 user as a Teams user
+     */
+    getTeamsUserAcsTokenRaw(requestParameters: GetTeamsUserAcsTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TeamsAcsTokenResponse>>;
+    /**
+     * Service-to-service: exchanges the business\'s stored Microsoft refresh token for an Azure Communication Services access token that lets the teams-client join Teams meetings authenticated as the connected org user (bypassing the lobby). Returns 404 when the Microsoft account is not connected or ACS is not configured.
+     * Mint an ACS access token for the connected M365 user as a Teams user
+     */
+    getTeamsUserAcsToken(requestParameters: GetTeamsUserAcsTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TeamsAcsTokenResponse>;
+    /**
+     * Creates request options for getTokenReconciliation without sending the request
+     */
+    getTokenReconciliationRequestOpts(requestParameters: GetTokenReconciliationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Per-model comparison of the tokens we METERED (across every tenant) against the tokens Azure Monitor reports for the shared AI Foundry resource, for one month. Surfaces metering drift (registered < Azure = a metering hole; registered > Azure = over-counting). Operator only.
+     * Reconcile registered AI tokens against Azure\'s reported tokens
+     */
+    getTokenReconciliationRaw(requestParameters: GetTokenReconciliationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TokenReconciliationReport>>;
+    /**
+     * Per-model comparison of the tokens we METERED (across every tenant) against the tokens Azure Monitor reports for the shared AI Foundry resource, for one month. Surfaces metering drift (registered < Azure = a metering hole; registered > Azure = over-counting). Operator only.
+     * Reconcile registered AI tokens against Azure\'s reported tokens
+     */
+    getTokenReconciliation(requestParameters?: GetTokenReconciliationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TokenReconciliationReport>;
+    /**
+     * Creates request options for getUsageDaily without sending the request
+     */
+    getUsageDailyRequestOpts(requestParameters: GetUsageDailyRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Per-meter daily quantities for a month, zero-filled up to today for the current month or to month-end for past months. Platform operators can read any business; tenant admins can read their own.
+     * Get a month\'s usage as a daily series
+     */
+    getUsageDailyRaw(requestParameters: GetUsageDailyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UsageDailySeries>>;
+    /**
+     * Per-meter daily quantities for a month, zero-filled up to today for the current month or to month-end for past months. Platform operators can read any business; tenant admins can read their own.
+     * Get a month\'s usage as a daily series
+     */
+    getUsageDaily(requestParameters: GetUsageDailyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UsageDailySeries>;
+    /**
+     * Creates request options for getUsageMeterDecision without sending the request
+     */
+    getUsageMeterDecisionRequestOpts(requestParameters: GetUsageMeterDecisionRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns whether a tenant may perform another metered action on the given meter right now, computed from the current month\'s usage via the shared MeterPolicy. For out-of-process producers (the Olaf bridge) that can\'t run MeterGuard in-process. Operator only.
+     * Request-time enforcement decision for one meter
+     */
+    getUsageMeterDecisionRaw(requestParameters: GetUsageMeterDecisionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MeterEnforcementDecision>>;
+    /**
+     * Returns whether a tenant may perform another metered action on the given meter right now, computed from the current month\'s usage via the shared MeterPolicy. For out-of-process producers (the Olaf bridge) that can\'t run MeterGuard in-process. Operator only.
+     * Request-time enforcement decision for one meter
+     */
+    getUsageMeterDecision(requestParameters: GetUsageMeterDecisionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MeterEnforcementDecision>;
+    /**
+     * Creates request options for getUsageRollup without sending the request
+     */
+    getUsageRollupRequestOpts(requestParameters: GetUsageRollupRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Aggregates per-meter usage, overage and cost for every business in the fleet for one month. Operator only.
+     * Get a month\'s usage rollup across all businesses
+     */
+    getUsageRollupRaw(requestParameters: GetUsageRollupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UsageRollup>>;
+    /**
+     * Aggregates per-meter usage, overage and cost for every business in the fleet for one month. Operator only.
+     * Get a month\'s usage rollup across all businesses
+     */
+    getUsageRollup(requestParameters?: GetUsageRollupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UsageRollup>;
+    /**
+     * Creates request options for getUsageSummary without sending the request
+     */
+    getUsageSummaryRequestOpts(requestParameters: GetUsageSummaryRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Per-meter usage for a month with entitlement limits, overage and cost preview. Platform operators can read any business; tenant admins can read their own.
+     * Get a month\'s usage summary
+     */
+    getUsageSummaryRaw(requestParameters: GetUsageSummaryRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UsageSummary>>;
+    /**
+     * Per-meter usage for a month with entitlement limits, overage and cost preview. Platform operators can read any business; tenant admins can read their own.
+     * Get a month\'s usage summary
+     */
+    getUsageSummary(requestParameters: GetUsageSummaryRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UsageSummary>;
+    /**
+     * Creates request options for getWorkRepos without sending the request
+     */
+    getWorkReposRequestOpts(requestParameters: GetWorkReposRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the GitHub repos the business has chosen for Olaf to clone into its VM and work on.
+     * Get the repos Olaf works on
+     */
+    getWorkReposRaw(requestParameters: GetWorkReposRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<WorkReposSelection>>;
+    /**
+     * Returns the GitHub repos the business has chosen for Olaf to clone into its VM and work on.
+     * Get the repos Olaf works on
+     */
+    getWorkRepos(requestParameters: GetWorkReposRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<WorkReposSelection>;
+    /**
+     * Creates request options for getWorkspaceRepo without sending the request
+     */
+    getWorkspaceRepoRequestOpts(requestParameters: GetWorkspaceRepoRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the GitHub repo the business has chosen for syncing its Olaf workspace, if any.
+     * Get the selected workspace repository
+     */
+    getWorkspaceRepoRaw(requestParameters: GetWorkspaceRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<WorkspaceRepoSelection>>;
+    /**
+     * Returns the GitHub repo the business has chosen for syncing its Olaf workspace, if any.
+     * Get the selected workspace repository
+     */
+    getWorkspaceRepo(requestParameters: GetWorkspaceRepoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<WorkspaceRepoSelection | null | undefined>;
+    /**
+     * Creates request options for ingestUsageEvents without sending the request
+     */
+    ingestUsageEventsRequestOpts(requestParameters: IngestUsageEventsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Accepts a batch of usage events from pooled backends and aggregates them into per-tenant/meter/day counters. Accepts platform service principals (managed-identity tokens) and platform operators (delegated tokens) so local development flushes through the developer\'s az session.
+     * Ingest usage events
+     */
+    ingestUsageEventsRaw(requestParameters: IngestUsageEventsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Accepts a batch of usage events from pooled backends and aggregates them into per-tenant/meter/day counters. Accepts platform service principals (managed-identity tokens) and platform operators (delegated tokens) so local development flushes through the developer\'s az session.
+     * Ingest usage events
+     */
+    ingestUsageEvents(requestParameters: IngestUsageEventsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for inviteCredential without sending the request
+     */
+    inviteCredentialRequestOpts(requestParameters: InviteCredentialOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Creates (or re-invites) a password credential for the e-mail and sends the activation link. Already-activated credentials are returned unchanged without a new e-mail.
+     * Invite a user to password login
+     */
+    inviteCredentialRaw(requestParameters: InviteCredentialOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<CredentialSummary>>;
+    /**
+     * Creates (or re-invites) a password credential for the e-mail and sends the activation link. Already-activated credentials are returned unchanged without a new e-mail.
+     * Invite a user to password login
+     */
+    inviteCredential(requestParameters: InviteCredentialOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<CredentialSummary>;
+    /**
+     * Creates request options for listAccountingProducts without sending the request
+     */
+    listAccountingProductsRequestOpts(requestParameters: ListAccountingProductsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the connected accounting client\'s products (code + name) and the currently selected re-invoice product code, for the dropdown.
+     * List accounting products
+     */
+    listAccountingProductsRaw(requestParameters: ListAccountingProductsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PowerOfficeProductsResponse>>;
+    /**
+     * Returns the connected accounting client\'s products (code + name) and the currently selected re-invoice product code, for the dropdown.
+     * List accounting products
+     */
+    listAccountingProducts(requestParameters: ListAccountingProductsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PowerOfficeProductsResponse>;
+    /**
+     * Creates request options for listAccountingProjects without sending the request
+     */
+    listAccountingProjectsRequestOpts(requestParameters: ListAccountingProjectsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the connected accounting client\'s projects (code + name) and the currently selected gadgets project code, for the dropdown.
+     * List accounting projects
+     */
+    listAccountingProjectsRaw(requestParameters: ListAccountingProjectsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PowerOfficeProjectsResponse>>;
+    /**
+     * Returns the connected accounting client\'s projects (code + name) and the currently selected gadgets project code, for the dropdown.
+     * List accounting projects
+     */
+    listAccountingProjects(requestParameters: ListAccountingProjectsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PowerOfficeProjectsResponse>;
+    /**
+     * Creates request options for listApiTokens without sending the request
+     */
+    listApiTokensRequestOpts(requestParameters: ListApiTokensRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Lists a business\'s API tokens by fingerprint. Never returns the raw token.
+     * List API tokens
+     */
+    listApiTokensRaw(requestParameters: ListApiTokensRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ApiTokenSummary>>>;
+    /**
+     * Lists a business\'s API tokens by fingerprint. Never returns the raw token.
+     * List API tokens
+     */
+    listApiTokens(requestParameters: ListApiTokensRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ApiTokenSummary>>;
+    /**
+     * Creates request options for listApps without sending the request
+     */
+    listAppsRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Static metadata for every product app (subdomain, type, env-key, module). The single source of the app→subdomain mapping for frontends and the operator UI.
+     * List the product app catalog
+     */
+    listAppsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<AppCatalogEntry>>>;
+    /**
+     * Static metadata for every product app (subdomain, type, env-key, module). The single source of the app→subdomain mapping for frontends and the operator UI.
+     * List the product app catalog
+     */
+    listApps(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AppCatalogEntry>>;
+    /**
+     * Creates request options for listBusinessEmployeeSystems without sending the request
+     */
+    listBusinessEmployeeSystemsRequestOpts(requestParameters: ListBusinessEmployeeSystemsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Proxies the tenant\'s employees API: per registered system (e.g. Salesforce), whether the employee has a seat, which app-role backs it, and the selectable roles.
+     * List an employee\'s third-party system access
+     */
+    listBusinessEmployeeSystemsRaw(requestParameters: ListBusinessEmployeeSystemsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<EmployeeSystemAccess>>>;
+    /**
+     * Proxies the tenant\'s employees API: per registered system (e.g. Salesforce), whether the employee has a seat, which app-role backs it, and the selectable roles.
+     * List an employee\'s third-party system access
+     */
+    listBusinessEmployeeSystems(requestParameters: ListBusinessEmployeeSystemsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<EmployeeSystemAccess>>;
+    /**
+     * Creates request options for listBusinessEmployees without sending the request
+     */
+    listBusinessEmployeesRequestOpts(requestParameters: ListBusinessEmployeesRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the business\'s Sanity employees with the fields the control plane renders and edits.
+     * List a business\'s employees
+     */
+    listBusinessEmployeesRaw(requestParameters: ListBusinessEmployeesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ProtectedEmployee>>>;
+    /**
+     * Returns the business\'s Sanity employees with the fields the control plane renders and edits.
+     * List a business\'s employees
+     */
+    listBusinessEmployees(requestParameters: ListBusinessEmployeesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ProtectedEmployee>>;
+    /**
+     * Creates request options for listCredentials without sending the request
+     */
+    listCredentialsRequestOpts(requestParameters: ListCredentialsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Lists the business\'s password credentials. Never returns hashes or TOTP material.
+     * List password credentials
+     */
+    listCredentialsRaw(requestParameters: ListCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<CredentialSummary>>>;
+    /**
+     * Lists the business\'s password credentials. Never returns hashes or TOTP material.
+     * List password credentials
+     */
+    listCredentials(requestParameters: ListCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<CredentialSummary>>;
+    /**
+     * Creates request options for listDevices without sending the request
+     */
+    listDevicesRequestOpts(requestParameters: ListDevicesRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Screens paired to this business
+     */
+    listDevicesRaw(requestParameters: ListDevicesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<DeviceScreen>>>;
+    /**
+     * Screens paired to this business
+     */
+    listDevices(requestParameters: ListDevicesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<DeviceScreen>>;
+    /**
+     * Creates request options for listFacebookAccounts without sending the request
+     */
+    listFacebookAccountsRequestOpts(requestParameters: ListFacebookAccountsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Lists the Facebook Pages and linked Instagram Business accounts the connected user can post to, fetched live from the Graph API using the business\'s stored Facebook token.
+     * List connectable Facebook Pages and Instagram accounts
+     */
+    listFacebookAccountsRaw(requestParameters: ListFacebookAccountsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<FacebookAccount>>>;
+    /**
+     * Lists the Facebook Pages and linked Instagram Business accounts the connected user can post to, fetched live from the Graph API using the business\'s stored Facebook token.
+     * List connectable Facebook Pages and Instagram accounts
+     */
+    listFacebookAccounts(requestParameters: ListFacebookAccountsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<FacebookAccount>>;
+    /**
+     * Creates request options for listGitHubRepos without sending the request
+     */
+    listGitHubReposRequestOpts(requestParameters: ListGitHubReposRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Lists repositories the connected GitHub account can access, fetched live from the GitHub API using the business\'s stored token. Used by the workspace repo picker.
+     * List the business\'s GitHub repositories
+     */
+    listGitHubReposRaw(requestParameters: ListGitHubReposRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<GitHubRepo>>>;
+    /**
+     * Lists repositories the connected GitHub account can access, fetched live from the GitHub API using the business\'s stored token. Used by the workspace repo picker.
+     * List the business\'s GitHub repositories
+     */
+    listGitHubRepos(requestParameters: ListGitHubReposRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<GitHubRepo>>;
+    /**
+     * Creates request options for listGoogleAnalyticsProperties without sending the request
+     */
+    listGoogleAnalyticsPropertiesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Lists the GA4 properties the platform\'s connected Google account can read, fetched live from the Google Analytics Admin API using the platform\'s stored Google token.
+     * List connectable Google Analytics properties
+     */
+    listGoogleAnalyticsPropertiesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<GoogleAnalyticsProperty>>>;
+    /**
+     * Lists the GA4 properties the platform\'s connected Google account can read, fetched live from the Google Analytics Admin API using the platform\'s stored Google token.
+     * List connectable Google Analytics properties
+     */
+    listGoogleAnalyticsProperties(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<GoogleAnalyticsProperty>>;
+    /**
+     * Creates request options for listIntegrations without sending the request
+     */
+    listIntegrationsRequestOpts(requestParameters: ListIntegrationsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the available integrations for a business with per-integration configuration status.
+     * List integrations and config status
+     */
+    listIntegrationsRaw(requestParameters: ListIntegrationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<IntegrationSummary>>>;
+    /**
+     * Returns the available integrations for a business with per-integration configuration status.
+     * List integrations and config status
+     */
+    listIntegrations(requestParameters: ListIntegrationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<IntegrationSummary>>;
+    /**
+     * Creates request options for listMailboxes without sending the request
+     */
+    listMailboxesRequestOpts(requestParameters: ListMailboxesRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Mailboxes from the business\'s connected mail provider (Microsoft 365, later Google Workspace), for picking the provisjon inbox.
+     * List the business\'s mailboxes
+     */
+    listMailboxesRaw(requestParameters: ListMailboxesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<DirectoryMailbox>>>;
+    /**
+     * Mailboxes from the business\'s connected mail provider (Microsoft 365, later Google Workspace), for picking the provisjon inbox.
+     * List the business\'s mailboxes
+     */
+    listMailboxes(requestParameters: ListMailboxesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<DirectoryMailbox>>;
+    /**
+     * Creates request options for oAuthCallback without sending the request
+     */
+    oAuthCallbackRequestOpts(requestParameters: OAuthCallbackRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Exchanges the authorization code for a token and stores it in the business Key Vault. Authenticated by the signed state, not a bearer token.
+     * OAuth provider redirect callback
+     */
+    oAuthCallbackRaw(requestParameters: OAuthCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Exchanges the authorization code for a token and stores it in the business Key Vault. Authenticated by the signed state, not a bearer token.
+     * OAuth provider redirect callback
+     */
+    oAuthCallback(requestParameters: OAuthCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for passwordActivate without sending the request
+     */
+    passwordActivateRequestOpts(requestParameters: PasswordActivateRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Consumes a single-use activation token from the invite e-mail, sets the password and returns the TOTP enrolment payload (otpauth URI + enrolment token).
+     * Activate an invited credential
+     */
+    passwordActivateRaw(requestParameters: PasswordActivateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ActivateResult>>;
+    /**
+     * Consumes a single-use activation token from the invite e-mail, sets the password and returns the TOTP enrolment payload (otpauth URI + enrolment token).
+     * Activate an invited credential
+     */
+    passwordActivate(requestParameters: PasswordActivateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ActivateResult>;
+    /**
+     * Creates request options for passwordAuthJwks without sending the request
+     */
+    passwordAuthJwksRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Public signing keys for platform-issued access tokens.
+     * JWKS for the platform issuer
+     */
+    passwordAuthJwksRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<object>>;
+    /**
+     * Public signing keys for platform-issued access tokens.
+     * JWKS for the platform issuer
+     */
+    passwordAuthJwks(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<object>;
+    /**
+     * Creates request options for passwordAuthLoginConfig without sending the request
+     */
+    passwordAuthLoginConfigRequestOpts(requestParameters: PasswordAuthLoginConfigRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Tells the central login page which methods to render: password is always on; Microsoft Entra SSO only when the tenant\'s plan includes it.
+     * Login methods for a tenant host
+     */
+    passwordAuthLoginConfigRaw(requestParameters: PasswordAuthLoginConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginConfig>>;
+    /**
+     * Tells the central login page which methods to render: password is always on; Microsoft Entra SSO only when the tenant\'s plan includes it.
+     * Login methods for a tenant host
+     */
+    passwordAuthLoginConfig(requestParameters: PasswordAuthLoginConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginConfig>;
+    /**
+     * Creates request options for passwordAuthOpenIdConfiguration without sending the request
+     */
+    passwordAuthOpenIdConfigurationRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Backends point their additive JwtBearer scheme at this document.
+     * OIDC discovery for the platform issuer
+     */
+    passwordAuthOpenIdConfigurationRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<object>>;
+    /**
+     * Backends point their additive JwtBearer scheme at this document.
+     * OIDC discovery for the platform issuer
+     */
+    passwordAuthOpenIdConfiguration(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<object>;
+    /**
+     * Creates request options for passwordAuthSignupConfig without sending the request
+     */
+    passwordAuthSignupConfigRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Host-independent flag the marketing signup form reads to decide whether to show the inline password + 2FA fields. Always true — password signup is the only signup.
+     * Whether password-first signup is enabled
+     */
+    passwordAuthSignupConfigRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SignupConfig>>;
+    /**
+     * Host-independent flag the marketing signup form reads to decide whether to show the inline password + 2FA fields. Always true — password signup is the only signup.
+     * Whether password-first signup is enabled
+     */
+    passwordAuthSignupConfig(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SignupConfig>;
+    /**
+     * Creates request options for passwordEnrollTotp without sending the request
+     */
+    passwordEnrollTotpRequestOpts(requestParameters: PasswordEnrollTotpRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Verifies the first authenticator code against the enrolment token, enables TOTP, and returns the single-view recovery codes plus a login bundle.
+     * Confirm TOTP enrolment
+     */
+    passwordEnrollTotpRaw(requestParameters: PasswordEnrollTotpRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TotpEnrollResult>>;
+    /**
+     * Verifies the first authenticator code against the enrolment token, enables TOTP, and returns the single-view recovery codes plus a login bundle.
+     * Confirm TOTP enrolment
+     */
+    passwordEnrollTotp(requestParameters: PasswordEnrollTotpRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TotpEnrollResult>;
+    /**
+     * Creates request options for passwordLogin without sending the request
+     */
+    passwordLoginRequestOpts(requestParameters: PasswordLoginOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Verifies tenant-user credentials for the business serving the given host. Returns a refresh token on success; flat error codes otherwise (no account enumeration).
+     * Log in with email, password and TOTP code
+     */
+    passwordLoginRaw(requestParameters: PasswordLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PasswordLoginResult>>;
+    /**
+     * Verifies tenant-user credentials for the business serving the given host. Returns a refresh token on success; flat error codes otherwise (no account enumeration).
+     * Log in with email, password and TOTP code
+     */
+    passwordLogin(requestParameters: PasswordLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PasswordLoginResult>;
+    /**
+     * Creates request options for passwordResetConfirm without sending the request
+     */
+    passwordResetConfirmRequestOpts(requestParameters: PasswordResetConfirmRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Consumes a single-use reset token. When TOTP is enrolled, a valid authenticator code or recovery code is required. Revokes all refresh tokens on success.
+     * Set a new password with a reset token
+     */
+    passwordResetConfirmRaw(requestParameters: PasswordResetConfirmRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Consumes a single-use reset token. When TOTP is enrolled, a valid authenticator code or recovery code is required. Revokes all refresh tokens on success.
+     * Set a new password with a reset token
+     */
+    passwordResetConfirm(requestParameters: PasswordResetConfirmRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for passwordResetRequest without sending the request
+     */
+    passwordResetRequestRequestOpts(requestParameters: PasswordResetRequestRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Always returns 202 regardless of whether the account exists (no enumeration). Active credentials receive a single-use, one-hour reset link.
+     * Request a password-reset e-mail
+     */
+    passwordResetRequestRaw(requestParameters: PasswordResetRequestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Always returns 202 regardless of whether the account exists (no enumeration). Active credentials receive a single-use, one-hour reset link.
+     * Request a password-reset e-mail
+     */
+    passwordResetRequest(requestParameters: PasswordResetRequestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for passwordSessionBootstrap without sending the request
+     */
+    passwordSessionBootstrapRequestOpts(requestParameters: PasswordSessionBootstrapRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Trades the short-lived single-use bootstrap token from TOTP enrolment for a durable session (refresh token). Called server-side by the auth layer so the refresh token never reaches browser JavaScript.
+     * Redeem an enrolment bootstrap token
+     */
+    passwordSessionBootstrapRaw(requestParameters: PasswordSessionBootstrapRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PasswordLoginResult>>;
+    /**
+     * Trades the short-lived single-use bootstrap token from TOTP enrolment for a durable session (refresh token). Called server-side by the auth layer so the refresh token never reaches browser JavaScript.
+     * Redeem an enrolment bootstrap token
+     */
+    passwordSessionBootstrap(requestParameters: PasswordSessionBootstrapRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PasswordLoginResult>;
+    /**
+     * Creates request options for passwordTokenExchange without sending the request
+     */
+    passwordTokenExchangeRequestOpts(requestParameters: PasswordTokenExchangeRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns a one-hour platform-issued JWT that backends accept additively next to Entra.
+     * Exchange a refresh token for an access token
+     */
+    passwordTokenExchangeRaw(requestParameters: PasswordTokenExchangeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TokenExchangeResult>>;
+    /**
+     * Returns a one-hour platform-issued JWT that backends accept additively next to Entra.
+     * Exchange a refresh token for an access token
+     */
+    passwordTokenExchange(requestParameters: PasswordTokenExchangeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TokenExchangeResult>;
+    /**
+     * Creates request options for passwordTokenRevoke without sending the request
+     */
+    passwordTokenRevokeRequestOpts(requestParameters: PasswordTokenRevokeRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Idempotent; always returns 204.
+     * Revoke a refresh token
+     */
+    passwordTokenRevokeRaw(requestParameters: PasswordTokenRevokeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Idempotent; always returns 204.
+     * Revoke a refresh token
+     */
+    passwordTokenRevoke(requestParameters: PasswordTokenRevokeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for patchBusiness without sending the request
+     */
+    patchBusinessRequestOpts(requestParameters: PatchBusinessOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Partially updates a business.
+     * Update a business
+     */
+    patchBusinessRaw(requestParameters: PatchBusinessOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Partially updates a business.
+     * Update a business
+     */
+    patchBusiness(requestParameters: PatchBusinessOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for patchBusinessEmployee without sending the request
+     */
+    patchBusinessEmployeeRequestOpts(requestParameters: PatchBusinessEmployeeRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Update an employee\'s status or group membership
+     */
+    patchBusinessEmployeeRaw(requestParameters: PatchBusinessEmployeeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ProtectedEmployee>>;
+    /**
+     * Update an employee\'s status or group membership
+     */
+    patchBusinessEmployee(requestParameters: PatchBusinessEmployeeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ProtectedEmployee>;
+    /**
+     * Creates request options for powerOfficeOnboardingCallback without sending the request
+     */
+    powerOfficeOnboardingCallbackRequestOpts(requestParameters: PowerOfficeOnboardingCallbackRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Server-to-server: PowerOffice posts the approved client key here. Authenticated by the signed reference in the path, not a bearer token.
+     * PowerOffice onboarding callback
+     */
+    powerOfficeOnboardingCallbackRaw(requestParameters: PowerOfficeOnboardingCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Server-to-server: PowerOffice posts the approved client key here. Authenticated by the signed reference in the path, not a bearer token.
+     * PowerOffice onboarding callback
+     */
+    powerOfficeOnboardingCallback(requestParameters: PowerOfficeOnboardingCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for powerOfficeOnboardingReturn without sending the request
+     */
+    powerOfficeOnboardingReturnRequestOpts(requestParameters: PowerOfficeOnboardingReturnRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Browser landing after the customer approves. Redirects back to the management surface.
+     * PowerOffice onboarding return
+     */
+    powerOfficeOnboardingReturnRaw(requestParameters: PowerOfficeOnboardingReturnRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Browser landing after the customer approves. Redirects back to the management surface.
+     * PowerOffice onboarding return
+     */
+    powerOfficeOnboardingReturn(requestParameters: PowerOfficeOnboardingReturnRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for previewBillingInvoice without sending the request
+     */
+    previewBillingInvoiceRequestOpts(requestParameters: PreviewBillingInvoiceRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Computes the invoice basis (plan seat line and metered overage lines) for a business and month without creating anything in PowerOffice. Operator only.
+     * Preview a month\'s invoice basis
+     */
+    previewBillingInvoiceRaw(requestParameters: PreviewBillingInvoiceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<InvoiceBasis>>;
+    /**
+     * Computes the invoice basis (plan seat line and metered overage lines) for a business and month without creating anything in PowerOffice. Operator only.
+     * Preview a month\'s invoice basis
+     */
+    previewBillingInvoice(requestParameters: PreviewBillingInvoiceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<InvoiceBasis>;
+    /**
+     * Creates request options for previewDevice without sending the request
+     */
+    previewDeviceRequestOpts(requestParameters: PreviewDeviceRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Shows what is being approved so it is never a blind confirmation. Unknown, expired and already-approved codes all return 404.
+     * Look up a pairing code before approving
+     */
+    previewDeviceRaw(requestParameters: PreviewDeviceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PendingDevicePreview>>;
+    /**
+     * Shows what is being approved so it is never a blind confirmation. Unknown, expired and already-approved codes all return 404.
+     * Look up a pairing code before approving
+     */
+    previewDevice(requestParameters: PreviewDeviceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PendingDevicePreview>;
+    /**
+     * Creates request options for provisionBusiness without sending the request
+     */
+    provisionBusinessRequestOpts(requestParameters: ProvisionBusinessRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Triggers the provisioning workflow for a business.
+     * Provision a business
+     */
+    provisionBusinessRaw(requestParameters: ProvisionBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Triggers the provisioning workflow for a business.
+     * Provision a business
+     */
+    provisionBusiness(requestParameters: ProvisionBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for publicCapabilities without sending the request
+     */
+    publicCapabilitiesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the capabilities that modules depend on, each fulfilled by one or more integration providers.
+     * Get capabilities
+     */
+    publicCapabilitiesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<Capability>>>;
+    /**
+     * Returns the capabilities that modules depend on, each fulfilled by one or more integration providers.
+     * Get capabilities
+     */
+    publicCapabilities(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<Capability>>;
+    /**
+     * Creates request options for publicModules without sending the request
+     */
+    publicModulesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns all available app modules for business signup.
+     * Get available modules
+     */
+    publicModulesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<AppModule>>>;
+    /**
+     * Returns all available app modules for business signup.
+     * Get available modules
+     */
+    publicModules(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AppModule>>;
+    /**
+     * Creates request options for publicPlans without sending the request
+     */
+    publicPlansRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns all plans with their user limits, module access and meter entitlements, straight from the entitlements table.
+     * Get available plans
+     */
+    publicPlansRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<PlanInfo>>>;
+    /**
+     * Returns all plans with their user limits, module access and meter entitlements, straight from the entitlements table.
+     * Get available plans
+     */
+    publicPlans(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<PlanInfo>>;
+    /**
+     * Creates request options for publicSignup without sending the request
+     */
+    publicSignupRequestOpts(requestParameters: PublicSignupRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Creates a new business, its Key Vault, and the founder\'s password credential, and returns the TOTP enrolment payload so 2FA is set up before the account is usable. A password is required.
+     * Submit business signup
+     */
+    publicSignupRaw(requestParameters: PublicSignupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SignupResult>>;
+    /**
+     * Creates a new business, its Key Vault, and the founder\'s password credential, and returns the TOTP enrolment payload so 2FA is set up before the account is usable. A password is required.
+     * Submit business signup
+     */
+    publicSignup(requestParameters: PublicSignupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SignupResult>;
+    /**
+     * Creates request options for recordImpersonationActivity without sending the request
+     */
+    recordImpersonationActivityRequestOpts(requestParameters: RecordImpersonationActivityOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Service-to-service only. Backends call this for every request made with an impersonation token, so the audit log holds the actions, not just the session.
+     * Record one action performed in a view-as-employee session
+     */
+    recordImpersonationActivityRaw(requestParameters: RecordImpersonationActivityOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Service-to-service only. Backends call this for every request made with an impersonation token, so the audit log holds the actions, not just the session.
+     * Record one action performed in a view-as-employee session
+     */
+    recordImpersonationActivity(requestParameters: RecordImpersonationActivityOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for renameDevice without sending the request
+     */
+    renameDeviceRequestOpts(requestParameters: RenameDeviceOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Rename a screen
+     */
+    renameDeviceRaw(requestParameters: RenameDeviceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Rename a screen
+     */
+    renameDevice(requestParameters: RenameDeviceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for requestUpgrade without sending the request
+     */
+    requestUpgradeRequestOpts(requestParameters: RequestUpgradeRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Records interest in Enterprise so the team can open a billing conversation; an operator activates the plan afterwards.
+     * Request an Enterprise upgrade
+     */
+    requestUpgradeRaw(requestParameters: RequestUpgradeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Records interest in Enterprise so the team can open a billing conversation; an operator activates the plan afterwards.
+     * Request an Enterprise upgrade
+     */
+    requestUpgrade(requestParameters: RequestUpgradeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for resetCredential without sending the request
+     */
+    resetCredentialRequestOpts(requestParameters: ResetCredentialRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Sends a password-reset e-mail to an activated user in the caller\'s business. The reset still requires the user\'s own second factor to complete.
+     * Admin-initiated password reset
+     */
+    resetCredentialRaw(requestParameters: ResetCredentialRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Sends a password-reset e-mail to an activated user in the caller\'s business. The reset still requires the user\'s own second factor to complete.
+     * Admin-initiated password reset
+     */
+    resetCredential(requestParameters: ResetCredentialRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for resolvePlatformSanityConfig without sending the request
+     */
+    resolvePlatformSanityConfigRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Resolve the platform Sanity read config
+     */
+    resolvePlatformSanityConfigRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PlatformSanityConfig>>;
+    /**
+     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Resolve the platform Sanity read config
+     */
+    resolvePlatformSanityConfig(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PlatformSanityConfig>;
+    /**
+     * Creates request options for resolveStudioSanityConfig without sending the request
+     */
+    resolveStudioSanityConfigRequestOpts(requestParameters: ResolveStudioSanityConfigRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the non-secret Sanity project id and dataset a studio should point at for the given host. A tenant host returns that tenant\'s project; a host that belongs to no business (the platform host) returns the shared platform project. No read/write token is returned — the studio authenticates the user via Sanity login — so this is a public endpoint safe to call from a browser.
+     * Resolve the Sanity Studio project/dataset for a host
+     */
+    resolveStudioSanityConfigRaw(requestParameters: ResolveStudioSanityConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<StudioSanityConfig>>;
+    /**
+     * Returns the non-secret Sanity project id and dataset a studio should point at for the given host. A tenant host returns that tenant\'s project; a host that belongs to no business (the platform host) returns the shared platform project. No read/write token is returned — the studio authenticates the user via Sanity login — so this is a public endpoint safe to call from a browser.
+     * Resolve the Sanity Studio project/dataset for a host
+     */
+    resolveStudioSanityConfig(requestParameters: ResolveStudioSanityConfigRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<StudioSanityConfig>;
+    /**
+     * Creates request options for resolveTenant without sending the request
+     */
+    resolveTenantRequestOpts(requestParameters: ResolveTenantRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Resolve a business to its full TenantInfo by exactly one of host, businessId or entraTenantId. Accepts platform service principals (managed-identity tokens) and platform operators (delegated tokens with the platform-operator role) so local development resolves tenants through the developer\'s az session.
+     * Resolve a tenant
+     */
+    resolveTenantRaw(requestParameters: ResolveTenantRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TenantInfo>>;
+    /**
+     * Resolve a business to its full TenantInfo by exactly one of host, businessId or entraTenantId. Accepts platform service principals (managed-identity tokens) and platform operators (delegated tokens with the platform-operator role) so local development resolves tenants through the developer\'s az session.
+     * Resolve a tenant
+     */
+    resolveTenant(requestParameters?: ResolveTenantRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TenantInfo>;
+    /**
+     * Creates request options for resolveTenantSanityCredentials without sending the request
+     */
+    resolveTenantSanityCredentialsRequestOpts(requestParameters: ResolveTenantSanityCredentialsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the tenant\'s Sanity project, dataset and read token for server-side content reads. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Resolve a tenant\'s Sanity read credentials by host
+     */
+    resolveTenantSanityCredentialsRaw(requestParameters: ResolveTenantSanityCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TenantSanityCredentials>>;
+    /**
+     * Returns the tenant\'s Sanity project, dataset and read token for server-side content reads. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Resolve a tenant\'s Sanity read credentials by host
+     */
+    resolveTenantSanityCredentials(requestParameters: ResolveTenantSanityCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TenantSanityCredentials>;
+    /**
+     * Creates request options for revokeApiToken without sending the request
+     */
+    revokeApiTokenRequestOpts(requestParameters: RevokeApiTokenRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Permanently revokes the token with the given fingerprint.
+     * Revoke an API token
+     */
+    revokeApiTokenRaw(requestParameters: RevokeApiTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Permanently revokes the token with the given fingerprint.
+     * Revoke an API token
+     */
+    revokeApiToken(requestParameters: RevokeApiTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for revokeBusinessEmployeeSystem without sending the request
+     */
+    revokeBusinessEmployeeSystemRequestOpts(requestParameters: RevokeBusinessEmployeeSystemRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Revoke an employee\'s seat in a third-party system
+     */
+    revokeBusinessEmployeeSystemRaw(requestParameters: RevokeBusinessEmployeeSystemRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EmployeeSystemAccess>>;
+    /**
+     * Revoke an employee\'s seat in a third-party system
+     */
+    revokeBusinessEmployeeSystem(requestParameters: RevokeBusinessEmployeeSystemRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EmployeeSystemAccess>;
+    /**
+     * Creates request options for revokeDevice without sending the request
+     */
+    revokeDeviceRequestOpts(requestParameters: RevokeDeviceRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Revokes the screen\'s token. The screen falls back to showing a fresh pairing code by itself the next time it calls.
+     * Revoke a screen
+     */
+    revokeDeviceRaw(requestParameters: RevokeDeviceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Revokes the screen\'s token. The screen falls back to showing a fresh pairing code by itself the next time it calls.
+     * Revoke a screen
+     */
+    revokeDevice(requestParameters: RevokeDeviceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for setAccountingGadgetsProject without sending the request
+     */
+    setAccountingGadgetsProjectRequestOpts(requestParameters: SetAccountingGadgetsProjectRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Stores the selected accounting gadgets project code for the business.
+     * Set the gadgets project code
+     */
+    setAccountingGadgetsProjectRaw(requestParameters: SetAccountingGadgetsProjectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Stores the selected accounting gadgets project code for the business.
+     * Set the gadgets project code
+     */
+    setAccountingGadgetsProject(requestParameters: SetAccountingGadgetsProjectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for setAccountingReinvoiceProduct without sending the request
+     */
+    setAccountingReinvoiceProductRequestOpts(requestParameters: SetAccountingReinvoiceProductRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Stores the selected accounting product used for subcontractor re-invoice lines (carries the VAT).
+     * Set the re-invoice product code
+     */
+    setAccountingReinvoiceProductRaw(requestParameters: SetAccountingReinvoiceProductRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Stores the selected accounting product used for subcontractor re-invoice lines (carries the VAT).
+     * Set the re-invoice product code
+     */
+    setAccountingReinvoiceProduct(requestParameters: SetAccountingReinvoiceProductRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for setActiveProvider without sending the request
+     */
+    setActiveProviderRequestOpts(requestParameters: SetActiveProviderOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * When a capability has several providers (e.g. PowerOffice vs Tripletex, Coinbase API-key vs OAuth), selects which one the business uses.
+     * Choose the active provider for a capability
+     */
+    setActiveProviderRaw(requestParameters: SetActiveProviderOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * When a capability has several providers (e.g. PowerOffice vs Tripletex, Coinbase API-key vs OAuth), selects which one the business uses.
+     * Choose the active provider for a capability
+     */
+    setActiveProvider(requestParameters: SetActiveProviderOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for setBusinessEmployeePhoto without sending the request
+     */
+    setBusinessEmployeePhotoRequestOpts(requestParameters: SetBusinessEmployeePhotoRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Forwards the raw image bytes to the business\'s employees API, which stores the photo and a blurred variant.
+     * Upload an employee\'s profile photo
+     */
+    setBusinessEmployeePhotoRaw(requestParameters: SetBusinessEmployeePhotoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ProtectedEmployee>>;
+    /**
+     * Forwards the raw image bytes to the business\'s employees API, which stores the photo and a blurred variant.
+     * Upload an employee\'s profile photo
+     */
+    setBusinessEmployeePhoto(requestParameters: SetBusinessEmployeePhotoRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ProtectedEmployee>;
+    /**
+     * Creates request options for setEmployeeScopeGrants without sending the request
+     */
+    setEmployeeScopeGrantsRequestOpts(requestParameters: SetEmployeeScopeGrantsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Set the scopes granted directly to an employee
+     */
+    setEmployeeScopeGrantsRaw(requestParameters: SetEmployeeScopeGrantsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Set the scopes granted directly to an employee
+     */
+    setEmployeeScopeGrants(requestParameters: SetEmployeeScopeGrantsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for setFacebookSelectedAccount without sending the request
+     */
+    setFacebookSelectedAccountRequestOpts(requestParameters: SetFacebookSelectedAccountRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Persists the chosen Facebook Page or Instagram account to the business Key Vault.
+     * Set the selected Facebook/Instagram posting account
+     */
+    setFacebookSelectedAccountRaw(requestParameters: SetFacebookSelectedAccountRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FacebookAccount>>;
+    /**
+     * Persists the chosen Facebook Page or Instagram account to the business Key Vault.
+     * Set the selected Facebook/Instagram posting account
+     */
+    setFacebookSelectedAccount(requestParameters: SetFacebookSelectedAccountRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FacebookAccount>;
+    /**
+     * Creates request options for setGoogleAnalyticsSelectedProperty without sending the request
+     */
+    setGoogleAnalyticsSelectedPropertyRequestOpts(requestParameters: SetGoogleAnalyticsSelectedPropertyRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Persists the chosen GA4 property id to the platform Key Vault.
+     * Set the selected Google Analytics property
+     */
+    setGoogleAnalyticsSelectedPropertyRaw(requestParameters: SetGoogleAnalyticsSelectedPropertyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GoogleAnalyticsSelection>>;
+    /**
+     * Persists the chosen GA4 property id to the platform Key Vault.
+     * Set the selected Google Analytics property
+     */
+    setGoogleAnalyticsSelectedProperty(requestParameters: SetGoogleAnalyticsSelectedPropertyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GoogleAnalyticsSelection>;
+    /**
+     * Creates request options for setGroupScopeGrants without sending the request
+     */
+    setGroupScopeGrantsRequestOpts(requestParameters: SetGroupScopeGrantsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Set the scopes a group grants
+     */
+    setGroupScopeGrantsRaw(requestParameters: SetGroupScopeGrantsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Set the scopes a group grants
+     */
+    setGroupScopeGrants(requestParameters: SetGroupScopeGrantsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for setMeSettings without sending the request
+     */
+    setMeSettingsRequestOpts(requestParameters: SetMeSettingsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Writes the caller\'s own employee settings. A caller without an employee record is a no-op.
+     * Update the signed-in employee\'s settings
+     */
+    setMeSettingsRaw(requestParameters: SetMeSettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EmployeeSettings>>;
+    /**
+     * Writes the caller\'s own employee settings. A caller without an employee record is a no-op.
+     * Update the signed-in employee\'s settings
+     */
+    setMeSettings(requestParameters: SetMeSettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EmployeeSettings>;
+    /**
+     * Creates request options for setOlafTeamsSettings without sending the request
+     */
+    setOlafTeamsSettingsRequestOpts(requestParameters: SetOlafTeamsSettingsRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Persists the per-business Teams meeting-assistant settings. An empty voice clears the override so the bridge falls back to its deploy-time default.
+     * Update the business\'s Olaf meeting-assistant settings
+     */
+    setOlafTeamsSettingsRaw(requestParameters: SetOlafTeamsSettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OlafTeamsSettings>>;
+    /**
+     * Persists the per-business Teams meeting-assistant settings. An empty voice clears the override so the bridge falls back to its deploy-time default.
+     * Update the business\'s Olaf meeting-assistant settings
+     */
+    setOlafTeamsSettings(requestParameters: SetOlafTeamsSettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OlafTeamsSettings>;
+    /**
+     * Creates request options for setPlatformSecret without sending the request
+     */
+    setPlatformSecretRequestOpts(requestParameters: SetPlatformSecretOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Sets the value of a shared platform secret. An empty value clears it.
+     * Set a shared platform secret
+     */
+    setPlatformSecretRaw(requestParameters: SetPlatformSecretOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PlatformSecretStatus>>;
+    /**
+     * Sets the value of a shared platform secret. An empty value clears it.
+     * Set a shared platform secret
+     */
+    setPlatformSecret(requestParameters: SetPlatformSecretOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PlatformSecretStatus>;
+    /**
+     * Creates request options for setTeamsAuthState without sending the request
+     */
+    setTeamsAuthStateRequestOpts(requestParameters: SetTeamsAuthStateRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Persists a Playwright storageState JSON blob to the business Key Vault as the teams-auth-state secret. The pooled teams-client sidecar joins Teams meetings as this signed-in org user (bypassing the lobby) using the per-business session pulled to its auth-state dir.
+     * Store the business\'s Teams authenticated join session
+     */
+    setTeamsAuthStateRaw(requestParameters: SetTeamsAuthStateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Persists a Playwright storageState JSON blob to the business Key Vault as the teams-auth-state secret. The pooled teams-client sidecar joins Teams meetings as this signed-in org user (bypassing the lobby) using the per-business session pulled to its auth-state dir.
+     * Store the business\'s Teams authenticated join session
+     */
+    setTeamsAuthState(requestParameters: SetTeamsAuthStateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for setWorkRepos without sending the request
+     */
+    setWorkReposRequestOpts(requestParameters: SetWorkReposOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Persists the GitHub repos (owner/name) the Olaf deploy clones into the business VM for Olaf to work on.
+     * Set the repos Olaf works on
+     */
+    setWorkReposRaw(requestParameters: SetWorkReposOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<WorkReposSelection>>;
+    /**
+     * Persists the GitHub repos (owner/name) the Olaf deploy clones into the business VM for Olaf to work on.
+     * Set the repos Olaf works on
+     */
+    setWorkRepos(requestParameters: SetWorkReposOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<WorkReposSelection>;
+    /**
+     * Creates request options for setWorkspaceRepo without sending the request
+     */
+    setWorkspaceRepoRequestOpts(requestParameters: SetWorkspaceRepoOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Persists the chosen GitHub repo (owner/name) the Olaf deploy pushes the workspace to.
+     * Set the workspace repository
+     */
+    setWorkspaceRepoRaw(requestParameters: SetWorkspaceRepoOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<WorkspaceRepoSelection>>;
+    /**
+     * Persists the chosen GitHub repo (owner/name) the Olaf deploy pushes the workspace to.
+     * Set the workspace repository
+     */
+    setWorkspaceRepo(requestParameters: SetWorkspaceRepoOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<WorkspaceRepoSelection>;
+    /**
+     * Creates request options for ssoTokenExchange without sending the request
+     */
+    ssoTokenExchangeRequestOpts(requestParameters: SsoTokenExchangeRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Validates a token from a linked identity provider (Entra, Google) and returns a platform-issued access token for the matching business.
+     * Exchange an SSO token for a platform token
+     */
+    ssoTokenExchangeRaw(requestParameters: SsoTokenExchangeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TokenExchangeResult>>;
+    /**
+     * Validates a token from a linked identity provider (Entra, Google) and returns a platform-issued access token for the matching business.
+     * Exchange an SSO token for a platform token
+     */
+    ssoTokenExchange(requestParameters: SsoTokenExchangeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TokenExchangeResult>;
+    /**
+     * Creates request options for startImpersonation without sending the request
+     */
+    startImpersonationRequestOpts(requestParameters: StartImpersonationOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Operator-only. Requires a typed reason. Mints a short-lived, read-only impersonation token presenting as the target employee, writes a tamper-evident audit record, and posts to Slack. Finance surfaces are unlocked only when the operator also holds platform.impersonate.finance.
+     * Start a read-only view-as-employee session
+     */
+    startImpersonationRaw(requestParameters: StartImpersonationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<StartImpersonationResult>>;
+    /**
+     * Operator-only. Requires a typed reason. Mints a short-lived, read-only impersonation token presenting as the target employee, writes a tamper-evident audit record, and posts to Slack. Finance surfaces are unlocked only when the operator also holds platform.impersonate.finance.
+     * Start a read-only view-as-employee session
+     */
+    startImpersonation(requestParameters: StartImpersonationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<StartImpersonationResult>;
+    /**
+     * Creates request options for startOAuthConnect without sending the request
+     */
+    startOAuthConnectRequestOpts(requestParameters: StartOAuthConnectRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the provider authorize URL the browser should redirect to. The callback stores the token in the business Key Vault.
+     * Begin an OAuth connect flow
+     */
+    startOAuthConnectRaw(requestParameters: StartOAuthConnectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthStartResponse>>;
+    /**
+     * Returns the provider authorize URL the browser should redirect to. The callback stores the token in the business Key Vault.
+     * Begin an OAuth connect flow
+     */
+    startOAuthConnect(requestParameters: StartOAuthConnectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthStartResponse>;
+    /**
+     * Creates request options for startPlatformOAuthConnect without sending the request
+     */
+    startPlatformOAuthConnectRequestOpts(requestParameters: StartPlatformOAuthConnectRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Operator-only. Connects the platform\'s own account for a provider (e.g. Slack workspace, GitHub org); the callback stores the token in the platform Key Vault.
+     * Begin a platform-level OAuth connect flow
+     */
+    startPlatformOAuthConnectRaw(requestParameters: StartPlatformOAuthConnectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthStartResponse>>;
+    /**
+     * Operator-only. Connects the platform\'s own account for a provider (e.g. Slack workspace, GitHub org); the callback stores the token in the platform Key Vault.
+     * Begin a platform-level OAuth connect flow
+     */
+    startPlatformOAuthConnect(requestParameters: StartPlatformOAuthConnectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthStartResponse>;
+    /**
+     * Creates request options for startPowerOfficeConnect without sending the request
+     */
+    startPowerOfficeConnectRequestOpts(requestParameters: StartPowerOfficeConnectRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Mints a PowerOffice approval URL for the customer\'s organisation. The customer approves in PowerOffice Go; PowerOffice then posts the client key to our callback, which stores it in the business Key Vault.
+     * Begin PowerOffice onboarding
+     */
+    startPowerOfficeConnectRaw(requestParameters: StartPowerOfficeConnectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PowerOfficeConnectResponse>>;
+    /**
+     * Mints a PowerOffice approval URL for the customer\'s organisation. The customer approves in PowerOffice Go; PowerOffice then posts the client key to our callback, which stores it in the business Key Vault.
+     * Begin PowerOffice onboarding
+     */
+    startPowerOfficeConnect(requestParameters: StartPowerOfficeConnectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PowerOfficeConnectResponse>;
+    /**
+     * Creates request options for stripeWebhookReceiver without sending the request
+     */
+    stripeWebhookReceiverRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Signature-verified receiver for Stripe billing events. Idempotent per event id; unknown event types are acknowledged.
+     * Receive Stripe webhook events
+     */
+    stripeWebhookReceiverRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Signature-verified receiver for Stripe billing events. Idempotent per event id; unknown event types are acknowledged.
+     * Receive Stripe webhook events
+     */
+    stripeWebhookReceiver(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for updateApps without sending the request
+     */
+    updateAppsRequestOpts(requestParameters: UpdateAppsOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Updates the enabled modules and resolves apps for a business.
+     * Update enabled modules/apps
+     */
+    updateAppsRaw(requestParameters: UpdateAppsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Updates the enabled modules and resolves apps for a business.
+     * Update enabled modules/apps
+     */
+    updateApps(requestParameters: UpdateAppsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for updateSecrets without sending the request
+     */
+    updateSecretsRequestOpts(requestParameters: UpdateSecretsOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Updates secrets for a business and regenerates tfvars.
+     * Update business secrets
+     */
+    updateSecretsRaw(requestParameters: UpdateSecretsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Updates secrets for a business and regenerates tfvars.
+     * Update business secrets
+     */
+    updateSecrets(requestParameters: UpdateSecretsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+    /**
+     * Creates request options for verifyApiToken without sending the request
+     */
+    verifyApiTokenRequestOpts(requestParameters: VerifyApiTokenOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Service-to-service only. Returns validity + businessId + scopes for a presented token.
+     * Verify a customer API token
+     */
+    verifyApiTokenRaw(requestParameters: VerifyApiTokenOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiTokenVerifyResult>>;
+    /**
+     * Service-to-service only. Returns validity + businessId + scopes for a presented token.
+     * Verify a customer API token
+     */
+    verifyApiToken(requestParameters: VerifyApiTokenOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiTokenVerifyResult>;
+    /**
+     * Creates request options for viewAsBusiness without sending the request
+     */
+    viewAsBusinessRequestOpts(requestParameters: ViewAsBusinessRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Operator-only. Records an audit entry that the calling operator has entered read-only view-as mode for the target business, and returns that business so the /manage surface can render the tenant\'s own view. Non-operators are rejected with 403.
+     * Enter view-as mode for a business
+     */
+    viewAsBusinessRaw(requestParameters: ViewAsBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Business>>;
+    /**
+     * Operator-only. Records an audit entry that the calling operator has entered read-only view-as mode for the target business, and returns that business so the /manage surface can render the tenant\'s own view. Non-operators are rejected with 403.
+     * Enter view-as mode for a business
+     */
+    viewAsBusiness(requestParameters: ViewAsBusinessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Business>;
+}