@sovaria/sdk 0.0.0-stage → 0.4.0

package/dist/generated.js

@@ -0,0 +1,1054 @@
+function dropUndefined(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined && v !== null));
+}
+function need(name, value) {
+    const text = String(value ?? '').trim();
+    if (!text)
+        throw new Error(`${name} is required`);
+    return text;
+}
+/** Every Sovaria API operation, grouped by module. */
+export function createGeneratedApi(request, scope) {
+    return {
+        attestation: {
+            /** App attestation settings, credentials (metadata only), debug tokens and the last 7 days. `GET /api/v1/projects/{project_id}/attestation` */
+            getConfig: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/attestation`);
+            },
+            /** Set mode (off | monitor | enforce), tokenTtlSeconds, providers, playIntegrity, appAttest. `PUT /api/v1/projects/{project_id}/attestation` */
+            updateConfig: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/attestation`, { body: args.body });
+            },
+            /** Google service account for Play Integrity (encrypted, write-only). `PUT /api/v1/projects/{project_id}/attestation/credentials/google` */
+            setGoogleCredentials: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/attestation/credentials/google`, { body: dropUndefined({ "service_account": args.serviceAccount }) });
+            },
+            /** Apple key with DeviceCheck enabled (encrypted, write-only). `PUT /api/v1/projects/{project_id}/attestation/credentials/apple` */
+            setAppleCredentials: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/attestation/credentials/apple`, { body: dropUndefined({ "p8": args.p8, "key_id": args.keyId, "team_id": args.teamId }) });
+            },
+            /** Remove the google or apple attestation credentials. `DELETE /api/v1/projects/{project_id}/attestation/credentials/{which}` */
+            deleteCredentials: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const which = need('which', args.which);
+                return request('DELETE', `/api/v1/projects/${encodeURIComponent(projectId)}/attestation/credentials/${encodeURIComponent(which)}`);
+            },
+            /** Create a debug token for simulators and CI (shown once). `POST /api/v1/projects/{project_id}/attestation/debug-tokens` */
+            createDebugToken: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/projects/${encodeURIComponent(projectId)}/attestation/debug-tokens`, { body: dropUndefined({ "name": args.name }) });
+            },
+            /** Delete a debug token. `DELETE /api/v1/projects/{project_id}/attestation/debug-tokens/{token_id}` */
+            deleteDebugToken: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const tokenId = need('token_id', args.tokenId);
+                return request('DELETE', `/api/v1/projects/${encodeURIComponent(projectId)}/attestation/debug-tokens/${encodeURIComponent(tokenId)}`);
+            },
+            /** One-time challenge to bind attestation evidence to (anon key). `POST /api/v1/attest/challenge` */
+            challenge: () => request('POST', `/api/v1/attest/challenge`, { body: {} }),
+            /** Exchange Play Integrity / App Attest / DeviceCheck / debug evidence for an attestation token. `POST /api/v1/attest/exchange` */
+            exchange: (args) => request('POST', `/api/v1/attest/exchange`, { body: dropUndefined({ "provider": args.provider, "app_id": args.appId, "challenge": args.challenge, "token": args.token, "key_id": args.keyId, "attestation": args.attestation, "assertion": args.assertion, "development": args.development }) }),
+        },
+        auth: {
+            /** Confirm an email verification token. `POST /api/v1/auth/verify-email/confirm` */
+            confirmVerificationEmail: (args) => request('POST', `/api/v1/auth/verify-email/confirm`, { body: dropUndefined({ "token": args.token }), requiresAuth: false }),
+            /** `DELETE /api/v1/auth/mfa` */
+            disableMfa: (args) => request('DELETE', `/api/v1/auth/mfa`, { body: dropUndefined({ "totp_code": args.totpCode }) }),
+            /** `POST /api/v1/auth/mfa/enroll` */
+            enrollMfa: () => request('POST', `/api/v1/auth/mfa/enroll`, { body: {} }),
+            /** `GET /api/v1/auth/mfa/status` */
+            getMfaStatus: () => request('GET', `/api/v1/auth/mfa/status`),
+            /** `GET /api/v1/auth/providers/config` */
+            getProvidersConfig: () => request('GET', `/api/v1/auth/providers/config`),
+            /** `GET /api/v1/auth/sessions/config` */
+            getSessionsConfig: () => request('GET', `/api/v1/auth/sessions/config`),
+            /** `GET /api/v1/auth/product-users` */
+            listConsoleProductUsers: () => request('GET', `/api/v1/auth/product-users`),
+            /** `GET /api/v1/auth/sessions` */
+            listSessions: () => request('GET', `/api/v1/auth/sessions`),
+            /** `POST /api/v1/auth/sessions/revoke-others` */
+            revokeOtherSessions: () => request('POST', `/api/v1/auth/sessions/revoke-others`, { body: {} }),
+            /** `DELETE /api/v1/auth/sessions/{session_id}` */
+            revokeSession: (args) => {
+                const sessionId = need('session_id', args.sessionId);
+                return request('DELETE', `/api/v1/auth/sessions/${encodeURIComponent(sessionId)}`);
+            },
+            /** Trigger a verification email for the authenticated user. `POST /api/v1/auth/verify-email/send` */
+            sendVerificationEmail: () => request('POST', `/api/v1/auth/verify-email/send`, { body: {} }),
+            /** `PUT /api/v1/auth/providers/config` */
+            updateProvidersConfig: (args) => request('PUT', `/api/v1/auth/providers/config`, { body: args.body }),
+            /** `PUT /api/v1/auth/sessions/config` */
+            updateSessionsConfig: (args) => request('PUT', `/api/v1/auth/sessions/config`, { body: args.body }),
+            /** Devices the signed-in user is signed in on (current = this one). `GET /api/v1/auth/devices` */
+            listDevices: () => request('GET', `/api/v1/auth/devices`),
+            /** Sign one device out: its sessions end and push tokens are removed. `DELETE /api/v1/auth/devices/{device_id}` */
+            signOutDevice: (args) => {
+                const deviceId = need('device_id', args.deviceId);
+                return request('DELETE', `/api/v1/auth/devices/${encodeURIComponent(deviceId)}`);
+            },
+        },
+        billing: {
+            /** `POST /api/v1/invoices/{org_id}/build` */
+            buildInvoice: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('POST', `/api/v1/invoices/${encodeURIComponent(orgId)}/build`, { query: dropUndefined({ "period": args.period }) });
+            },
+            /** `POST /api/v1/accounts/{account_id}/cancel` */
+            cancelAccount: (args) => {
+                const accountId = need('account_id', args.accountId);
+                return request('POST', `/api/v1/accounts/${encodeURIComponent(accountId)}/cancel`);
+            },
+            /** `POST /api/v1/billing/checkout` */
+            checkout: (args) => request('POST', `/api/v1/billing/checkout`, { body: args.body }),
+            /** `GET /api/v1/accounts/{account_id}` */
+            getAccount: (args) => {
+                const accountId = need('account_id', args.accountId);
+                return request('GET', `/api/v1/accounts/${encodeURIComponent(accountId)}`);
+            },
+            /** `GET /api/v1/billing/accounts/{account_id}/overage` */
+            getAccountOverage: (args) => {
+                const accountId = need('account_id', args.accountId);
+                return request('GET', `/api/v1/billing/accounts/${encodeURIComponent(accountId)}/overage`);
+            },
+            /** `GET /api/v1/billing/accounts/{account_id}/overage-prefs` */
+            getAccountOveragePrefs: (args) => {
+                const accountId = need('account_id', args.accountId);
+                return request('GET', `/api/v1/billing/accounts/${encodeURIComponent(accountId)}/overage-prefs`);
+            },
+            /** The org's overage switches (one setting for the whole org) `GET /api/v1/billing/orgs/{org_id}/overage-prefs` */
+            getOrgOveragePrefs: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/billing/orgs/${encodeURIComponent(orgId)}/overage-prefs`);
+            },
+            /** `GET /api/v1/compute/{org_id}` */
+            getCompute: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/compute/${encodeURIComponent(orgId)}`, { query: dropUndefined({ "period": args.period }) });
+            },
+            /** `GET /api/v1/billing/fx` */
+            getFx: () => request('GET', `/api/v1/billing/fx`),
+            /** `GET /api/v1/billing/invoices/open` */
+            getOpenInvoice: () => request('GET', `/api/v1/billing/invoices/open`),
+            /** `GET /api/v1/billing/overage/{org_id}` */
+            getOverage: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/billing/overage/${encodeURIComponent(orgId)}`);
+            },
+            /** Fetch a billing plan by name. `GET /api/v1/plans/{name}` */
+            getPlan: (args) => {
+                const name = need('name', args.name);
+                return request('GET', `/api/v1/plans/${encodeURIComponent(name)}`, { requiresAuth: false });
+            },
+            /** `GET /api/v1/billing/provider` */
+            getProvider: () => request('GET', `/api/v1/billing/provider`),
+            /** Fetch the active subscription for an organisation. `GET /api/v1/subscriptions/{org_id}` */
+            getSubscription: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/subscriptions/${encodeURIComponent(orgId)}`);
+            },
+            /** Fetch usage counters for an organisation. `GET /api/v1/usage/{org_id}` */
+            getUsage: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/usage/${encodeURIComponent(orgId)}`, { query: dropUndefined({ "period": args.period }) });
+            },
+            /** Fetch historical usage for an organisation. `GET /api/v1/usage/{org_id}/history` */
+            getUsageHistory: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/usage/${encodeURIComponent(orgId)}/history`, { query: dropUndefined({ "months": args.months }) });
+            },
+            /** `GET /api/v1/invoices/{org_id}` */
+            listInvoices: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/invoices/${encodeURIComponent(orgId)}`);
+            },
+            /** List public billing plans. `GET /api/v1/plans` */
+            listPlans: () => request('GET', `/api/v1/plans`, { requiresAuth: false }),
+            /** List subscriptions visible to the authenticated caller. `GET /api/v1/subscriptions` */
+            listSubscriptions: () => request('GET', `/api/v1/subscriptions`),
+            /** `POST /api/v1/billing/invoices/{org_id}/{period}/pay` */
+            payInvoice: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const period = need('period', args.period);
+                return request('POST', `/api/v1/billing/invoices/${encodeURIComponent(orgId)}/${encodeURIComponent(period)}/pay`);
+            },
+            /** `POST /api/v1/billing/razorpay/create-order` */
+            razorpayCreateOrder: (args) => request('POST', `/api/v1/billing/razorpay/create-order`, { body: args.body }),
+            /** `POST /api/v1/billing/razorpay/verify-payment` */
+            razorpayVerifyPayment: (args) => request('POST', `/api/v1/billing/razorpay/verify-payment`, { body: args.body }),
+            /** `POST /api/v1/accounts/{account_id}/resume` */
+            resumeAccount: (args) => {
+                const accountId = need('account_id', args.accountId);
+                return request('POST', `/api/v1/accounts/${encodeURIComponent(accountId)}/resume`);
+            },
+            /** `PUT /api/v1/billing/accounts/{account_id}/overage-prefs` */
+            setAccountOveragePrefs: (args) => {
+                const accountId = need('account_id', args.accountId);
+                return request('PUT', `/api/v1/billing/accounts/${encodeURIComponent(accountId)}/overage-prefs`, { body: dropUndefined({ "services": args.services }) });
+            },
+            /** Change the org's overage switches (org owners and admins) `PUT /api/v1/billing/orgs/{org_id}/overage-prefs` */
+            setOrgOveragePrefs: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('PUT', `/api/v1/billing/orgs/${encodeURIComponent(orgId)}/overage-prefs`, { body: dropUndefined({ "services": args.services }) });
+            },
+        },
+        builds: {
+            /** Check an app build Sovariq wrote (title, description, migration {name, up_sql, down_sql}, policies [{id, spl}], functions [{name, runtime, files}], tests [rules test cases]) against the project — nothing changes: the migration is dry-run up, down and up again, rules are simulated, rules tests run with the build's rules. Returns the build id and the report. `POST /api/v1/fn/builds/check` */
+            check: (args) => request('POST', `/api/v1/fn/builds/check`, { body: dropUndefined({ "build": args.build }) }),
+            /** Recent app builds of the project: title, status (checked, failed, pr_opened), each check's result and the pull request. `GET /api/v1/fn/builds` */
+            list: (args = {}) => request('GET', `/api/v1/fn/builds`, { query: dropUndefined({ "limit": args.limit }) }),
+            /** One app build: its files (the bundle), the check report and the pull request. `GET /api/v1/fn/builds/{build_id}` */
+            get: (args) => {
+                const buildId = need('build_id', args.buildId);
+                return request('GET', `/api/v1/fn/builds/${encodeURIComponent(buildId)}`);
+            },
+            /** Check the build again and open it as a pull request on the project's linked GitHub repository (one commit on a new branch; dev.app_build_prs_month). GitHub needs repository access: connect it with repository access or pass a token with repo scope. `POST /api/v1/fn/builds/{build_id}/pull-request` */
+            pullRequest: (args) => {
+                const buildId = need('build_id', args.buildId);
+                return request('POST', `/api/v1/fn/builds/${encodeURIComponent(buildId)}/pull-request`, { body: dropUndefined({ "token": args.token }) });
+            },
+            /** Forget an app build (its pull request, if opened, stays on GitHub). `DELETE /api/v1/fn/builds/{build_id}` */
+            delete: (args) => {
+                const buildId = need('build_id', args.buildId);
+                return request('DELETE', `/api/v1/fn/builds/${encodeURIComponent(buildId)}`);
+            },
+        },
+        byok: {
+            /** Your organization's own encryption key (Enterprise): whether it's on, the key, its data key version, whether it is usable now, what it covers, and setup (Sovaria's AWS principal and the key policy statement). `GET /api/v1/byok` */
+            get: () => request('GET', `/api/v1/byok`),
+            /** Use your AWS KMS key (its ARN) for the organization's storage files and backups. Checked end to end first (wrap, unwrap, a file written and read with it). Organization owners. `PUT /api/v1/byok` */
+            set: (args) => request('PUT', `/api/v1/byok`, { body: dropUndefined({ "provider": args.provider, "key_ref": args.keyRef }) }),
+            /** A new data key version under the same KMS key; older versions stay to decrypt what they encrypted. Organization owners. `POST /api/v1/byok/rotate` */
+            rotate: () => request('POST', `/api/v1/byok/rotate`),
+            /** Ask your KMS now whether Sovaria can still use the key. `POST /api/v1/byok/check` */
+            check: () => request('POST', `/api/v1/byok/check`),
+            /** Rewrite the organization's existing storage files under its key (in the background; progress in byok.get). Organization owners. `POST /api/v1/byok/reencrypt-storage` */
+            reencryptStorage: () => request('POST', `/api/v1/byok/reencrypt-storage`),
+        },
+        crashes: {
+            /** App crash issues of the project (grouped reports from sov.crashes), newest first, with the plan's limits. `GET /api/v1/crashes/issues` */
+            listIssues: (args = {}) => request('GET', `/api/v1/crashes/issues`, { query: dropUndefined({ "status": args.status, "limit": args.limit }) }),
+            /** One crash issue: sample report (stack, breadcrumbs, device, release) and its last 50 reports. `GET /api/v1/crashes/issues/{fingerprint}` */
+            getIssue: (args) => {
+                const fingerprint = need('fingerprint', args.fingerprint);
+                return request('GET', `/api/v1/crashes/issues/${encodeURIComponent(fingerprint)}`);
+            },
+            /** Mark a crash issue open, resolved (reopens if it happens again) or ignored. `POST /api/v1/crashes/issues/{fingerprint}/status` */
+            setIssueStatus: (args) => {
+                const fingerprint = need('fingerprint', args.fingerprint);
+                return request('POST', `/api/v1/crashes/issues/${encodeURIComponent(fingerprint)}/status`, { body: dropUndefined({ "status": args.status }) });
+            },
+            /** Crash reports accepted and dropped this month, and the plan's limits. `GET /api/v1/crashes/usage` */
+            usage: () => request('GET', `/api/v1/crashes/usage`),
+        },
+        data: {
+            /** Add a column to an existing table. `POST /api/v1/data/rel/column/add` */
+            addColumn: (args) => request('POST', `/api/v1/data/rel/column/add`, { body: dropUndefined({ "table_name": args.tableName, "column_name": args.columnName, "data_type": args.dataType, "is_nullable": args.isNullable, "is_unique": args.isUnique, "default_value": args.defaultValue }) }),
+            /** Add a foreign-key relation. `POST /api/v1/data/rel/foreign-key/add` */
+            addForeignKey: (args) => request('POST', `/api/v1/data/rel/foreign-key/add`, { body: dropUndefined({ "table_name": args.tableName, "column_name": args.columnName, "referenced_table": args.referencedTable, "referenced_column": args.referencedColumn }) }),
+            /** Start a table transaction and receive tx/snapshot IDs. `POST /api/v1/data/rel/transaction/begin` */
+            beginTransaction: () => request('POST', `/api/v1/data/rel/transaction/begin`),
+            /** Commit a previously opened table transaction. `POST /api/v1/data/rel/transaction/commit` */
+            commitTransaction: (args) => request('POST', `/api/v1/data/rel/transaction/commit`, { body: dropUndefined({ "txid": args.txid }) }),
+            /** Drop a column from a table. `POST /api/v1/data/rel/column/drop` */
+            dropColumn: (args) => request('POST', `/api/v1/data/rel/column/drop`, { body: dropUndefined({ "table_name": args.tableName, "column_name": args.columnName }) }),
+            /** Drop a foreign-key relation. `POST /api/v1/data/rel/foreign-key/drop` */
+            dropForeignKey: (args) => request('POST', `/api/v1/data/rel/foreign-key/drop`, { body: dropUndefined({ "table_name": args.tableName, "column_name": args.columnName, "referenced_table": args.referencedTable, "referenced_column": args.referencedColumn }) }),
+            /** Drop a relational table. `POST /api/v1/data/rel/drop` */
+            dropTable: (args) => request('POST', `/api/v1/data/rel/drop`, { body: dropUndefined({ "table_name": args.tableName }) }),
+            /** `POST /api/v1/data/rel/transaction/rollback` */
+            rollbackTransaction: (args) => request('POST', `/api/v1/data/rel/transaction/rollback`, { body: dropUndefined({ "txid": args.txid }) }),
+            /** Tables that keep history (versions, oldest, retention) and the plan's db.history_* limits. `GET /api/v1/data/rel/history` */
+            tableHistory: () => request('GET', `/api/v1/data/rel/history`),
+            /** Turn a table's history on (every row version kept; read with sov_as_of(NULL::table, time)) or off (versions dropped). `POST /api/v1/data/rel/history` */
+            setTableHistory: (args) => request('POST', `/api/v1/data/rel/history`, { body: dropUndefined({ "table_name": args.tableName, "enabled": args.enabled, "keep_days": args.keepDays }) }),
+            /** The schema as one short line per table: columns with types, keys, →references, allowed values, indexes and owner-only rows. tables (comma-separated) expands only those in a big schema; since=<version> answers unchanged when nothing changed. `GET /api/v1/data/rel/schema/digest` */
+            schemaDigest: (args = {}) => request('GET', `/api/v1/data/rel/schema/digest`, { query: dropUndefined({ "tables": args.tables, "max_chars": args.maxChars, "since": args.since }) }),
+            /** Create or extend tables from one declarative plan ([{name, columns, patterns, unique, indexes}]; columns as objects or short form like "status text!='draft' in(draft|live)" or "customer_id →customers cascade"). Checked first (422 lists every problem, nothing changes), then applied as one reversible migration and verified. dry_run returns the SQL without applying. `POST /api/v1/data/rel/schema/plan` */
+            applySchemaPlan: (args) => request('POST', `/api/v1/data/rel/schema/plan`, { body: dropUndefined({ "tables": args.tables, "dry_run": args.dryRun, "name": args.name }) }),
+            /** Apply a migration and record it in the project's history, in one transaction (all or nothing). down_sql makes it reversible; the same version with the same SQL again does nothing, with different SQL it is refused (409). `POST /api/v1/data/rel/migrations/apply` */
+            applyMigration: (args) => request('POST', `/api/v1/data/rel/migrations/apply`, { body: dropUndefined({ "name": args.name, "up_sql": args.upSql, "down_sql": args.downSql, "version": args.version }) }),
+            /** Run a migration inside a transaction and roll it back: whether it would apply. Nothing is kept. `POST /api/v1/data/rel/migrations/dry-run` */
+            dryRunMigration: (args) => request('POST', `/api/v1/data/rel/migrations/dry-run`, { body: dropUndefined({ "name": args.name, "up_sql": args.upSql, "down_sql": args.downSql }) }),
+            /** Check several migrations ([{name, up_sql}], up to 500 and 5 MB of SQL) in order inside one transaction that is rolled back, so later ones see what earlier ones create. Returns status dry_run_ok, or failed with failed.index, name and error for the first that fails. `POST /api/v1/data/rel/migrations/dry-run-sequence` */
+            dryRunMigrations: (args) => request('POST', `/api/v1/data/rel/migrations/dry-run-sequence`, { body: dropUndefined({ "migrations": args.migrations }) }),
+            /** Undo the most recent migration with its down SQL (or version, with force when it isn't the latest). `POST /api/v1/data/rel/migrations/rollback` */
+            rollbackMigration: (args = {}) => request('POST', `/api/v1/data/rel/migrations/rollback`, { query: dropUndefined({ "version": args.version, "force": args.force }) }),
+        },
+        e2ee: {
+            /** Create (or fetch) the active e2ee channel key. `POST /api/v1/rt/e2ee/keys/bootstrap` */
+            bootstrapKey: (args) => request('POST', `/api/v1/rt/e2ee/keys/bootstrap`, { body: dropUndefined({ "channel": args.channel, "ttl_seconds": args.ttlSeconds, "force_new": args.forceNew }) }),
+            /** Get the active e2ee key for a channel, wrapped for ``client_public_key``. `GET /api/v1/rt/e2ee/keys/active/{channel}` */
+            getActiveKey: (args) => {
+                const channel = need('channel', args.channel);
+                return request('GET', `/api/v1/rt/e2ee/keys/active/${encodeURIComponent(channel)}`, { query: dropUndefined({ "client_public_key_pem": args.clientPublicKey }) });
+            },
+            /** Get key material by channel/key_id, wrapped for ``client_public_key``. `GET /api/v1/rt/e2ee/keys/{channel}/{key_id}` */
+            getKey: (args) => {
+                const channel = need('channel', args.channel);
+                const keyId = need('key_id', args.keyId);
+                return request('GET', `/api/v1/rt/e2ee/keys/${encodeURIComponent(channel)}/${encodeURIComponent(keyId)}`, { query: dropUndefined({ "client_public_key_pem": args.clientPublicKey }) });
+            },
+            /** List key metadata for a channel. `GET /api/v1/rt/e2ee/keys/{channel}` */
+            listKeys: (args) => {
+                const channel = need('channel', args.channel);
+                return request('GET', `/api/v1/rt/e2ee/keys/${encodeURIComponent(channel)}`);
+            },
+            /** Revoke an active or historical channel key. `POST /api/v1/rt/e2ee/keys/revoke` */
+            revokeKey: (args) => request('POST', `/api/v1/rt/e2ee/keys/revoke`, { body: dropUndefined({ "channel": args.channel, "key_id": args.keyId, "reason": args.reason }) }),
+            /** Rotate e2ee key material for a channel. `POST /api/v1/rt/e2ee/keys/rotate` */
+            rotateKey: (args) => request('POST', `/api/v1/rt/e2ee/keys/rotate`, { body: dropUndefined({ "channel": args.channel, "ttl_seconds": args.ttlSeconds }) }),
+        },
+        functions: {
+            /** `DELETE /api/v1/fn/functions/{function_name}` */
+            delete: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('DELETE', `/api/v1/fn/functions/${encodeURIComponent(functionName)}`);
+            },
+            /** `GET /api/v1/fn/functions/{function_name}` */
+            get: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('GET', `/api/v1/fn/functions/${encodeURIComponent(functionName)}`, { query: dropUndefined({ "project_id": args.projectId }) });
+            },
+            /** `GET /api/v1/fn/functions/{function_name}/bindings` */
+            getBindings: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('GET', `/api/v1/fn/functions/${encodeURIComponent(functionName)}/bindings`);
+            },
+            /** `GET /api/v1/fn/functions/{function_name}/policy` */
+            getPolicy: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('GET', `/api/v1/fn/functions/${encodeURIComponent(functionName)}/policy`);
+            },
+            /** `GET /api/v1/fn/functions/{function_name}/source` */
+            getSource: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('GET', `/api/v1/fn/functions/${encodeURIComponent(functionName)}/source`, { query: dropUndefined({ "project_id": args.projectId }) });
+            },
+            /** `POST /api/v1/fn/github/commit` */
+            githubCommit: (args) => request('POST', `/api/v1/fn/github/commit`, { body: args.body }),
+            /** `POST /api/v1/fn/github/import` */
+            githubImport: (args) => request('POST', `/api/v1/fn/github/import`, { body: args.body }),
+            /** Get status for an async Forge invocation id. `GET /api/v1/fn/invocations/{invocation_id}` */
+            invocationStatus: (args) => {
+                const invocationId = need('invocation_id', args.invocationId);
+                return request('GET', `/api/v1/fn/invocations/${encodeURIComponent(invocationId)}`, { query: dropUndefined({ "project_id": args.projectId }) });
+            },
+            /** List Forge functions with active version and queue summary. `GET /api/v1/fn/functions` */
+            list: (args = {}) => request('GET', `/api/v1/fn/functions`, { query: dropUndefined({ "project_id": args.projectId, "limit": args.limit, "offset": args.offset }) }),
+            /** Diff two simulation invocation outputs. `GET /api/v1/fn/{function_name}/history/simulation-diff` */
+            simulationDiff: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('GET', `/api/v1/fn/${encodeURIComponent(functionName)}/history/simulation-diff`, { query: dropUndefined({ "project_id": args.projectId, "left_invocation_id": args.leftInvocationId, "right_invocation_id": args.rightInvocationId }) });
+            },
+            /** Get forge deployment status by deploy id. `GET /api/v1/fn/{deploy_id}/status` */
+            status: (args) => {
+                const deployId = need('deploy_id', args.deployId);
+                return request('GET', `/api/v1/fn/${encodeURIComponent(deployId)}/status`, { query: dropUndefined({ "project_id": args.projectId }) });
+            },
+            /** `PATCH /api/v1/fn/functions/{function_name}` */
+            update: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('PATCH', `/api/v1/fn/functions/${encodeURIComponent(functionName)}`, { body: args.body, query: dropUndefined({ "project_id": args.projectId }) });
+            },
+            /** `PUT /api/v1/fn/functions/{function_name}/bindings` */
+            updateBindings: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('PUT', `/api/v1/fn/functions/${encodeURIComponent(functionName)}/bindings`, { body: dropUndefined({ "bindings": args.bindings }) });
+            },
+            /** `PUT /api/v1/fn/functions/{function_name}/policy` */
+            updatePolicy: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('PUT', `/api/v1/fn/functions/${encodeURIComponent(functionName)}/policy`, { body: args.policy });
+            },
+            /** List deployment versions for a Forge function. `GET /api/v1/fn/{function_name}/versions` */
+            versions: (args) => {
+                const functionName = need('function_name', args.functionName);
+                return request('GET', `/api/v1/fn/${encodeURIComponent(functionName)}/versions`, { query: dropUndefined({ "project_id": args.projectId, "limit": args.limit, "offset": args.offset }) });
+            },
+        },
+        governance: {
+            /** `GET /api/v1/governance/admin/databases` */
+            adminDatabases: () => request('GET', `/api/v1/governance/admin/databases`),
+            /** `GET /api/v1/governance/tenants/{org_id}` */
+            getTenant: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}`);
+            },
+            /** `GET /api/v1/governance/tenants/{org_id}/databases/{project_id}/connection` */
+            getTenantDatabaseConnection: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/connection`);
+            },
+            /** `GET /api/v1/governance/hosts` */
+            listHosts: (args = {}) => request('GET', `/api/v1/governance/hosts`, { query: dropUndefined({ "region_id": args.regionId }) }),
+            /** `GET /api/v1/governance/regions` */
+            listRegions: () => request('GET', `/api/v1/governance/regions`),
+            /** `GET /api/v1/governance/tenants/{org_id}/databases/{project_id}/backups` */
+            listTenantDatabaseBackups: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/backups`, { query: dropUndefined({ "limit": args.limit }) });
+            },
+            /** `GET /api/v1/governance/tenants/{org_id}/databases` */
+            listTenantDatabases: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases`);
+            },
+            /** `GET /api/v1/governance/tenants` */
+            listTenants: () => request('GET', `/api/v1/governance/tenants`),
+            /** `GET /api/v1/governance/metrics/overview` */
+            metricsOverview: () => request('GET', `/api/v1/governance/metrics/overview`),
+            /** `PATCH /api/v1/governance/hosts/{host_id}` */
+            patchHost: (args) => {
+                const hostId = need('host_id', args.hostId);
+                return request('PATCH', `/api/v1/governance/hosts/${encodeURIComponent(hostId)}`, { body: args.body });
+            },
+            /** `PATCH /api/v1/governance/regions/{region_id}` */
+            patchRegion: (args) => {
+                const regionId = need('region_id', args.regionId);
+                return request('PATCH', `/api/v1/governance/regions/${encodeURIComponent(regionId)}`, { body: args.body });
+            },
+            /** `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/pause` */
+            pauseTenantDatabase: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/pause`);
+            },
+            /** `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/resize` */
+            resizeTenantDatabase: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/resize`, { body: dropUndefined({ "compute_size": args.computeSize }) });
+            },
+            /** `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/resume` */
+            resumeTenantDatabase: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/resume`);
+            },
+            /** Reveal a database connection string (staff, with an active access grant). `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/connection/reveal` */
+            revealTenantDatabaseConnection: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/connection/reveal`, { body: dropUndefined({ "grant_id": args.grantId }) });
+            },
+            /** `POST /api/v1/governance/tenants/{org_id}/status` */
+            setTenantStatus: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/status`, { body: dropUndefined({ "status": args.status }) });
+            },
+            /** `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/backups` */
+            triggerTenantDatabaseBackup: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/backups`);
+            },
+            /** Read replicas of the project's dedicated database: status, connection string, lag behind the primary, plan limit. `GET /api/v1/governance/tenants/{org_id}/databases/{project_id}/replicas` */
+            listDatabaseReplicas: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/replicas`);
+            },
+            /** Start a streaming read replica (status provisioning until its base backup is done, then ready). `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/replicas` */
+            createDatabaseReplica: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/replicas`, { body: {} });
+            },
+            /** Remove a read replica and its copy of the data. `DELETE /api/v1/governance/tenants/{org_id}/databases/{project_id}/replicas/{replica_id}` */
+            deleteDatabaseReplica: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const replicaId = need('replica_id', args.replicaId);
+                return request('DELETE', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/replicas/${encodeURIComponent(replicaId)}`);
+            },
+            /** What changed between two moments of the database — a backup id or "now" on each side: schema objects added, removed or changed (with a diff) and rows per table. `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/compare` */
+            compareDatabaseMoments: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/compare`, { body: dropUndefined({ "from": args.fromMoment, "to": args.toMoment, "include_platform": args.includePlatform }) });
+            },
+            /** Replace the project's database with a backup (dedicated databases): a safety backup is taken first, the backup loads beside production in one transaction and is swapped in; undo within 7 days. Org owners and admins. `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/backups/{backup_id}/restore` */
+            restoreDatabaseBackup: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const backupId = need('backup_id', args.backupId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/backups/${encodeURIComponent(backupId)}/restore`, { body: dropUndefined({ "confirm": args.confirm }) });
+            },
+            /** Database restores of the project: status, the backup used, the safety backup and until when it can be undone. `GET /api/v1/governance/tenants/{org_id}/databases/{project_id}/restores` */
+            listDatabaseRestores: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/restores`);
+            },
+            /** Put back the database exactly as it was right before a restore (within the undo window). `POST /api/v1/governance/tenants/{org_id}/databases/{project_id}/restores/{restore_id}/undo` */
+            undoDatabaseRestore: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const restoreId = need('restore_id', args.restoreId);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/databases/${encodeURIComponent(projectId)}/restores/${encodeURIComponent(restoreId)}/undo`, { body: {} });
+            },
+        },
+        history: {
+            /** Create a Chrono commit. `POST /api/v1/chrono/commit` */
+            commit: (args) => request('POST', `/api/v1/chrono/commit`, { body: dropUndefined({ "timeline": args.timeline, "message": args.message, "author": args.author, "event_type": args.eventType }) }),
+            /** Converge source timeline into target timeline. `POST /api/v1/chrono/timelines/converge` */
+            converge: (args) => request('POST', `/api/v1/chrono/timelines/converge`, { body: dropUndefined({ "target": args.target, "source": args.source, "author": args.author, "message": args.message }) }),
+            /** Create a system snapshot. `POST /api/v1/chrono/snapshots/create` */
+            createSnapshot: (args) => request('POST', `/api/v1/chrono/snapshots/create`, { body: dropUndefined({ "message": args.message }) }),
+            /** Delete a timeline. `DELETE /api/v1/chrono/timelines/{name}` */
+            deleteTimeline: (args) => {
+                const name = need('name', args.name);
+                return request('DELETE', `/api/v1/chrono/timelines/${encodeURIComponent(name)}`);
+            },
+            /** Force-jump a timeline head. `POST /api/v1/chrono/timelines/{name}/jump` */
+            jumpTimeline: (args) => {
+                const name = need('name', args.name);
+                return request('POST', `/api/v1/chrono/timelines/${encodeURIComponent(name)}/jump`, { body: dropUndefined({ "target_hex": args.targetHex }) });
+            },
+            /** List known snapshots. `GET /api/v1/chrono/snapshots` */
+            listSnapshots: () => request('GET', `/api/v1/chrono/snapshots`),
+            /** List available timelines. `GET /api/v1/chrono/timelines` */
+            listTimelines: () => request('GET', `/api/v1/chrono/timelines`),
+            /** Restore a snapshot by id. `POST /api/v1/chrono/snapshots/{snapshot_id}/restore` */
+            restoreSnapshot: (args) => {
+                const snapshotId = need('snapshot_id', args.snapshotId);
+                return request('POST', `/api/v1/chrono/snapshots/${encodeURIComponent(snapshotId)}/restore`);
+            },
+            /** Spawn a new timeline from a source chronon. `POST /api/v1/chrono/timelines/spawn` */
+            spawnTimeline: (args) => request('POST', `/api/v1/chrono/timelines/spawn`, { body: dropUndefined({ "name": args.name, "source_hex_id": args.sourceHexId }) }),
+            /** Fetch timeline history chronons. `GET /api/v1/chrono/timelines/{name}/history` */
+            timelineHistory: (args) => {
+                const name = need('name', args.name);
+                return request('GET', `/api/v1/chrono/timelines/${encodeURIComponent(name)}/history`, { query: dropUndefined({ "limit": args.limit, "offset": args.offset }) });
+            },
+            /** Return timeline graph topology. `GET /api/v1/chrono/timelines/topology` */
+            topology: (args = {}) => request('GET', `/api/v1/chrono/timelines/topology`, { query: dropUndefined({ "timeline": args.timeline, "limit": args.limit }) }),
+            /** Calculate variance between two chronons. `POST /api/v1/chrono/variance` */
+            variance: (args) => request('POST', `/api/v1/chrono/variance`, { body: dropUndefined({ "old_chronon_hex": args.oldChrononHex, "new_chronon_hex": args.newChrononHex, "domain_filter": args.domainFilter }) }),
+        },
+        mcp: {
+            /** AI assistants you connected over Sovaria's MCP server: the app, its organization and project, read-only or not, when it was connected and last used. `GET /api/v1/auth/mcp/connections` */
+            listConnections: () => request('GET', `/api/v1/auth/mcp/connections`),
+            /** Disconnect one of your AI assistants: its tokens stop working at once. `DELETE /api/v1/auth/mcp/connections/{grant_id}` */
+            disconnect: (args) => {
+                const grantId = need('grant_id', args.grantId);
+                return request('DELETE', `/api/v1/auth/mcp/connections/${encodeURIComponent(grantId)}`);
+            },
+            /** Whether members may connect AI assistants to this organization, the MCP server URL, and (owners and admins) every member's connection. `GET /api/v1/org/{org_id}/mcp` */
+            orgSettings: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/org/${encodeURIComponent(orgId)}/mcp`);
+            },
+            /** Allow or stop AI assistants for the organization (owners and admins). Turning it off ends every member's connection. `PUT /api/v1/org/{org_id}/mcp` */
+            setOrgAllowed: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('PUT', `/api/v1/org/${encodeURIComponent(orgId)}/mcp`, { body: dropUndefined({ "allowed": args.allowed }) });
+            },
+            /** Disconnect a member's AI assistant from the organization (owners and admins). `DELETE /api/v1/org/{org_id}/mcp/connections/{grant_id}` */
+            orgDisconnect: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const grantId = need('grant_id', args.grantId);
+                return request('DELETE', `/api/v1/org/${encodeURIComponent(orgId)}/mcp/connections/${encodeURIComponent(grantId)}`);
+            },
+        },
+        messaging: {
+            /** Message templates of the project (push and/or email content with {{ variables }}). `GET /api/v1/projects/{project_id}/messaging/templates` */
+            listTemplates: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/templates`);
+            },
+            /** One message template. `GET /api/v1/projects/{project_id}/messaging/templates/{name}` */
+            getTemplate: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/templates/${encodeURIComponent(name)}`);
+            },
+            /** Create or replace a template: push {title, body, image?, data?}, email {subject, html?, text?}; category transactional or marketing (marketing skips opted-out users and adds an unsubscribe link). `PUT /api/v1/projects/{project_id}/messaging/templates/{name}` */
+            putTemplate: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/templates/${encodeURIComponent(name)}`, { body: dropUndefined({ "description": args.description, "category": args.category, "push": args.push, "email": args.email }) });
+            },
+            /** Delete a message template. `DELETE /api/v1/projects/{project_id}/messaging/templates/{name}` */
+            deleteTemplate: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('DELETE', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/templates/${encodeURIComponent(name)}`);
+            },
+            /** Saved audiences: read-only SQL queries returning user_id (other columns become per-user variables). `GET /api/v1/projects/{project_id}/messaging/audiences` */
+            listAudiences: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/audiences`);
+            },
+            /** One audience and its last count. `GET /api/v1/projects/{project_id}/messaging/audiences/{name}` */
+            getAudience: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/audiences/${encodeURIComponent(name)}`);
+            },
+            /** Create or replace an audience: a SELECT on the project database returning user_id (e.g. select user_id, first_name from profiles where plan = 'pro'). `PUT /api/v1/projects/{project_id}/messaging/audiences/{name}` */
+            putAudience: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/audiences/${encodeURIComponent(name)}`, { body: dropUndefined({ "sql": args.sql, "description": args.description }) });
+            },
+            /** Delete an audience. `DELETE /api/v1/projects/{project_id}/messaging/audiences/{name}` */
+            deleteAudience: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('DELETE', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/audiences/${encodeURIComponent(name)}`);
+            },
+            /** Run a saved audience: how many app users it reaches, columns and a sample of 10. `POST /api/v1/projects/{project_id}/messaging/audiences/{name}/preview` */
+            previewAudience: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('POST', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/audiences/${encodeURIComponent(name)}/preview`, { body: {} });
+            },
+            /** Try an audience query before saving it: app users reached, columns and a sample. `POST /api/v1/projects/{project_id}/messaging/audiences/preview` */
+            previewSql: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/audiences/preview`, { body: dropUndefined({ "sql": args.sql }) });
+            },
+            /** Send a template (or content {push, email}) to {user_ids | audience | sql | topic | all_users} on push and/or email, with variables; dry_run reports who would get it and renders a preview. Runs in the background; poll getSend. `POST /api/v1/projects/{project_id}/messaging/send` */
+            send: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/send`, { body: dropUndefined({ "template": args.template, "content": args.content, "to": args.to, "channels": args.channels, "variables": args.variables, "category": args.category, "dry_run": args.dryRun }) });
+            },
+            /** Recent sends with status and per-channel counts. `GET /api/v1/projects/{project_id}/messaging/sends` */
+            listSends: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/sends`, { query: dropUndefined({ "limit": args.limit }) });
+            },
+            /** One send: status (sending, done, failed) and counts per channel and outcome. `GET /api/v1/projects/{project_id}/messaging/sends/{send_id}` */
+            getSend: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const sendId = need('send_id', args.sendId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/sends/${encodeURIComponent(sendId)}`);
+            },
+            /** Delivery log: per recipient and channel, sent / failed / no_device / no_email / opted_out with an error code (never content). `GET /api/v1/projects/{project_id}/messaging/deliveries` */
+            listDeliveries: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/deliveries`, { query: dropUndefined({ "send_id": args.sendId, "user_id": args.userId, "status": args.status, "limit": args.limit, "offset": args.offset }) });
+            },
+            /** Messages sent this month per channel and the plan's messaging limits. `GET /api/v1/projects/{project_id}/messaging/usage` */
+            usage: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/usage`);
+            },
+            /** Record an app user's marketing choice (channel push, email or all) from your own UI. `PUT /api/v1/projects/{project_id}/messaging/users/{user_id}/optouts` */
+            setUserOptout: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const userId = need('user_id', args.userId);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/messaging/users/${encodeURIComponent(userId)}/optouts`, { body: dropUndefined({ "channel": args.channel, "opted_out": args.optedOut }) });
+            },
+            /** The signed-in app user's marketing preferences per channel. `GET /api/v1/messaging/preferences` */
+            getPreferences: () => request('GET', `/api/v1/messaging/preferences`),
+            /** The signed-in app user turns marketing push/email on or off: { marketing: { email: false } }. `PUT /api/v1/messaging/preferences` */
+            setPreferences: (args) => request('PUT', `/api/v1/messaging/preferences`, { body: dropUndefined({ "marketing": args.marketing }) }),
+        },
+        mobile: {
+            /** Registered iOS/Android apps (bundle/package ids, redirect URIs). `GET /api/v1/projects/{project_id}/mobile/apps` */
+            listApps: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/mobile/apps`);
+            },
+            /** Register an app: platform, bundle_id+team_id (iOS) or package_name+sha256_cert_fingerprints (Android), redirect_uris. `POST /api/v1/projects/{project_id}/mobile/apps` */
+            createApp: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/projects/${encodeURIComponent(projectId)}/mobile/apps`, { body: args.body });
+            },
+            /** Change a registered app (name, ids, fingerprints, redirect URIs). `PATCH /api/v1/projects/{project_id}/mobile/apps/{app_id}` */
+            updateApp: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const appId = need('app_id', args.appId);
+                return request('PATCH', `/api/v1/projects/${encodeURIComponent(projectId)}/mobile/apps/${encodeURIComponent(appId)}`, { body: args.body });
+            },
+            /** Remove a registered app. `DELETE /api/v1/projects/{project_id}/mobile/apps/{app_id}` */
+            deleteApp: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const appId = need('app_id', args.appId);
+                return request('DELETE', `/api/v1/projects/${encodeURIComponent(projectId)}/mobile/apps/${encodeURIComponent(appId)}`);
+            },
+            /** An app user's signed-in devices and push tokens. `GET /api/v1/projects/{project_id}/users/{user_id}/devices` */
+            listUserDevices: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const userId = need('user_id', args.userId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/users/${encodeURIComponent(userId)}/devices`);
+            },
+            /** Sign one of an app user's devices out (sessions and push tokens). `DELETE /api/v1/projects/{project_id}/users/{user_id}/devices/{device_id}` */
+            revokeUserDevice: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const userId = need('user_id', args.userId);
+                const deviceId = need('device_id', args.deviceId);
+                return request('DELETE', `/api/v1/projects/${encodeURIComponent(projectId)}/users/${encodeURIComponent(userId)}/devices/${encodeURIComponent(deviceId)}`);
+            },
+        },
+        org: {
+            /** `POST /api/v1/org/invites/accept` */
+            acceptOrgInvite: (args) => request('POST', `/api/v1/org/invites/accept`, { body: dropUndefined({ "token": args.token }) }),
+            /** Add a user as a member of an org/project node. `POST /api/v1/org/{org_id}/member` */
+            addMember: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('POST', `/api/v1/org/${encodeURIComponent(orgId)}/member`, { body: dropUndefined({ "user_id": args.userId, "role": args.role }) });
+            },
+            /** Connect two DAPG nodes with a typed relationship. `POST /api/v1/edge` */
+            createEdge: (args) => request('POST', `/api/v1/edge`, { body: dropUndefined({ "source_id": args.sourceNodeId, "target_id": args.targetNodeId, "relation_type": args.relationType, "role": args.role }) }),
+            /** `POST /api/v1/org/{org_id}/invites` */
+            createOrgInvite: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('POST', `/api/v1/org/${encodeURIComponent(orgId)}/invites`, { body: dropUndefined({ "email": args.email, "role": args.role }) });
+            },
+            /** `DELETE /api/v1/org/{org_id}` */
+            deleteOrg: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('DELETE', `/api/v1/org/${encodeURIComponent(orgId)}`);
+            },
+            /** `POST /api/v1/apikeys/ensure-defaults` */
+            ensureDefaultApiKeys: () => request('POST', `/api/v1/apikeys/ensure-defaults`, { body: {} }),
+            /** List child nodes attached by a relation (e.g. OWNS, HAS_ENV). `GET /api/v1/org/{parent_id}/children` */
+            getChildren: (args) => {
+                const parentId = need('parent_id', args.parentId);
+                return request('GET', `/api/v1/org/${encodeURIComponent(parentId)}/children`, { query: dropUndefined({ "relation": args.relation }) });
+            },
+            /** Resolve a user's roles on a resource by walking the DAPG. `GET /api/v1/context/{user_id}/{resource_id}` */
+            getContext: (args) => {
+                const userId = need('user_id', args.userId);
+                const resourceId = need('resource_id', args.resourceId);
+                return request('GET', `/api/v1/context/${encodeURIComponent(userId)}/${encodeURIComponent(resourceId)}`);
+            },
+            /** Fetch a single graph node by ID. `GET /api/v1/org/{node_id}` */
+            getNode: (args) => {
+                const nodeId = need('node_id', args.nodeId);
+                return request('GET', `/api/v1/org/${encodeURIComponent(nodeId)}`);
+            },
+            /** `GET /api/v1/org/{project_id}/ref` */
+            getProjectRef: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/org/${encodeURIComponent(projectId)}/ref`);
+            },
+            /** `GET /api/v1/project-settings` */
+            getProjectSettings: () => request('GET', `/api/v1/project-settings`),
+            /** `GET /api/v1/roles/catalog` */
+            getRoleCatalog: () => request('GET', `/api/v1/roles/catalog`),
+            /** `GET /api/v1/roles/matrix` */
+            getRoleMatrix: () => request('GET', `/api/v1/roles/matrix`),
+            /** `GET /api/v1/apikeys` */
+            listApiKeys: () => request('GET', `/api/v1/apikeys`),
+            /** List graph nodes; when provided, ``node_type`` filters by type. `GET /api/v1/org` */
+            listNodes: (args = {}) => request('GET', `/api/v1/org`, { query: dropUndefined({ "type": args.nodeType }) }),
+            /** `GET /api/v1/org/{org_id}/members` */
+            listOrgMembers: (args = {}) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('GET', `/api/v1/org/${encodeURIComponent(orgId)}/members`);
+            },
+            /** `DELETE /api/v1/org/{org_id}/member/{user_id}` */
+            removeOrgMember: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const userId = need('user_id', args.userId);
+                return request('DELETE', `/api/v1/org/${encodeURIComponent(orgId)}/member/${encodeURIComponent(userId)}`);
+            },
+            /** `DELETE /api/v1/apikeys/{key_id}` */
+            revokeApiKey: (args) => {
+                const keyId = need('key_id', args.keyId);
+                return request('DELETE', `/api/v1/apikeys/${encodeURIComponent(keyId)}`);
+            },
+            /** `PUT /api/v1/org/{org_id}/plan` */
+            setOrgPlan: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('PUT', `/api/v1/org/${encodeURIComponent(orgId)}/plan`, { body: dropUndefined({ "plan": args.plan }) });
+            },
+            /** `PUT /api/v1/org/{org_id}/member/{user_id}` */
+            updateMemberRole: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const userId = need('user_id', args.userId);
+                return request('PUT', `/api/v1/org/${encodeURIComponent(orgId)}/member/${encodeURIComponent(userId)}`, { body: dropUndefined({ "role": args.role }) });
+            },
+            /** `PUT /api/v1/org/{org_id}` */
+            updateOrg: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                return request('PUT', `/api/v1/org/${encodeURIComponent(orgId)}`, { body: args.body });
+            },
+            /** `PUT /api/v1/project-settings` */
+            updateProjectSettings: (args) => request('PUT', `/api/v1/project-settings`, { body: dropUndefined({ "settings": args.settings }) }),
+            /** `PUT /api/v1/roles/matrix` */
+            updateRoleMatrix: (args) => request('PUT', `/api/v1/roles/matrix`, { body: dropUndefined({ "matrix": args.matrix }) }),
+        },
+        platform: {
+            /** `POST /api/v1/auth/event-hooks` */
+            createEventHook: (args) => request('POST', `/api/v1/auth/event-hooks`, { body: args.body }),
+            /** `DELETE /api/v1/auth/event-hooks/{hook_id}` */
+            deleteEventHook: (args) => {
+                const hookId = need('hook_id', args.hookId);
+                return request('DELETE', `/api/v1/auth/event-hooks/${encodeURIComponent(hookId)}`);
+            },
+            /** `DELETE /api/v1/auth/github/connection-state` */
+            disconnectGithub: (args = {}) => request('DELETE', `/api/v1/auth/github/connection-state`, { query: dropUndefined({ "project_id": args.projectId }) }),
+            /** `GET /healthz` */
+            gatewayHealth: () => request('GET', `/healthz`, { requiresAuth: false }),
+            /** Return aggregate gateway health for downstream engines. `GET /api/v1/system/engines/health` */
+            getEnginesHealth: () => request('GET', `/api/v1/system/engines/health`, { requiresAuth: false }),
+            /** `GET /api/v1/error-traces/{trace_id}` */
+            getErrorTrace: (args) => {
+                const traceId = need('trace_id', args.traceId);
+                return request('GET', `/api/v1/error-traces/${encodeURIComponent(traceId)}`);
+            },
+            /** `GET /api/v1/auth/github/connection-state` */
+            getGithubConnectionState: (args = {}) => request('GET', `/api/v1/auth/github/connection-state`, { query: dropUndefined({ "project_id": args.projectId }) }),
+            /** `GET /api/v1/auth/event-hooks` */
+            listEventHooks: () => request('GET', `/api/v1/auth/event-hooks`),
+            /** `PATCH /api/v1/error-traces/{trace_id}/resolved` */
+            resolveErrorTrace: (args) => {
+                const traceId = need('trace_id', args.traceId);
+                return request('PATCH', `/api/v1/error-traces/${encodeURIComponent(traceId)}/resolved`, { body: dropUndefined({ "resolved": args.resolved }) });
+            },
+        },
+        policy: {
+            /** Return current audit-entry count. `GET /api/v1/audit/count` */
+            auditCount: () => request('GET', `/api/v1/audit/count`),
+            /** Verify audit hash-chain integrity. `GET /api/v1/audit/verify` */
+            auditVerify: () => request('GET', `/api/v1/audit/verify`),
+            /** Create and compile a policy. `POST /api/v1/policies/` */
+            policyCreate: (args) => request('POST', `/api/v1/policies/`, { body: dropUndefined({ "policy_id": args.policyId, "name": args.name, "spl_source": args.splSource, "org_id": args.orgId }) }),
+            /** Delete (deactivate) a policy. `DELETE /api/v1/policies/{policy_id}` */
+            policyDelete: (args) => {
+                const policyId = need('policy_id', args.policyId);
+                return request('DELETE', `/api/v1/policies/${encodeURIComponent(policyId)}`);
+            },
+            /** Evaluate a policy against an explicit debug context. `POST /api/v1/policies/{policy_id}/evaluate` */
+            policyEvaluate: (args) => {
+                const policyId = need('policy_id', args.policyId);
+                return request('POST', `/api/v1/policies/${encodeURIComponent(policyId)}/evaluate`, { body: dropUndefined({ "context": args.context }) });
+            },
+            /** Get a single policy by ID. `GET /api/v1/policies/{policy_id}` */
+            policyGet: (args) => {
+                const policyId = need('policy_id', args.policyId);
+                return request('GET', `/api/v1/policies/${encodeURIComponent(policyId)}`);
+            },
+            /** Return version history for a policy. `GET /api/v1/policies/{policy_id}/history` */
+            policyHistory: (args) => {
+                const policyId = need('policy_id', args.policyId);
+                return request('GET', `/api/v1/policies/${encodeURIComponent(policyId)}/history`);
+            },
+            /** List active policies visible in current tenant scope. `GET /api/v1/policies/` */
+            policyList: () => request('GET', `/api/v1/policies/`),
+            /** Rollback a policy to a historical version. `POST /api/v1/policies/{policy_id}/rollback` */
+            policyRollback: (args) => {
+                const policyId = need('policy_id', args.policyId);
+                return request('POST', `/api/v1/policies/${encodeURIComponent(policyId)}/rollback`, { body: dropUndefined({ "version": args.version }) });
+            },
+            /** List server-authoritative SPL templates. `GET /api/v1/policies/templates` */
+            policyTemplates: () => request('GET', `/api/v1/policies/templates`),
+        },
+        push: {
+            /** Which push providers are set up (never the keys). `GET /api/v1/projects/{project_id}/push/credentials` */
+            getCredentials: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/push/credentials`);
+            },
+            /** Upload the Firebase service account JSON (encrypted, write-only). `PUT /api/v1/projects/{project_id}/push/credentials/fcm` */
+            setFcmCredentials: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/push/credentials/fcm`, { body: dropUndefined({ "service_account": args.serviceAccount }) });
+            },
+            /** Upload the APNs .p8 key (encrypted, write-only). `PUT /api/v1/projects/{project_id}/push/credentials/apns` */
+            setApnsCredentials: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('PUT', `/api/v1/projects/${encodeURIComponent(projectId)}/push/credentials/apns`, { body: dropUndefined({ "p8": args.p8, "key_id": args.keyId, "team_id": args.teamId, "bundle_id": args.bundleId, "environment": args.environment }) });
+            },
+            /** Remove FCM or APNs credentials. `DELETE /api/v1/projects/{project_id}/push/credentials/{provider}` */
+            deleteCredentials: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const provider = need('provider', args.provider);
+                return request('DELETE', `/api/v1/projects/${encodeURIComponent(projectId)}/push/credentials/${encodeURIComponent(provider)}`);
+            },
+            /** Push devices registered in the project (tokens are never returned). `GET /api/v1/projects/{project_id}/push/devices` */
+            listDevices: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/push/devices`, { query: dropUndefined({ "user_id": args.userId, "limit": args.limit, "before": args.before }) });
+            },
+            /** Send a push: to {user_ids|device_ids|topic}, notification {title, body, image}, data, badge, priority, ttl_seconds, dry_run. `POST /api/v1/projects/{project_id}/push/send` */
+            send: (args) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('POST', `/api/v1/projects/${encodeURIComponent(projectId)}/push/send`, { body: args.message });
+            },
+            /** Recent sends (counts and error codes) and this month's total. `GET /api/v1/projects/{project_id}/push/sends` */
+            listSends: (args = {}) => {
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                return request('GET', `/api/v1/projects/${encodeURIComponent(projectId)}/push/sends`, { query: dropUndefined({ "limit": args.limit }) });
+            },
+            /** Register the signed-in app user's push token (FCM or APNs). `POST /api/v1/push/devices` */
+            registerDevice: (args) => request('POST', `/api/v1/push/devices`, { body: dropUndefined({ "token": args.token, "platform": args.platform, "provider": args.provider, "device_id": args.deviceId, "app_id": args.appId, "topics": args.topics, "locale": args.locale }) }),
+            /** The signed-in app user's push tokens. `GET /api/v1/push/devices` */
+            myDevices: () => request('GET', `/api/v1/push/devices`),
+            /** Subscribe a device to topics or unsubscribe it. `PATCH /api/v1/push/devices/{device_row_id}/topics` */
+            updateTopics: (args) => {
+                const deviceRowId = need('device_row_id', args.deviceRowId);
+                return request('PATCH', `/api/v1/push/devices/${encodeURIComponent(deviceRowId)}/topics`, { body: dropUndefined({ "subscribe": args.subscribe, "unsubscribe": args.unsubscribe, "replace": args.replace }) });
+            },
+            /** Remove one of the signed-in user's push devices. `DELETE /api/v1/push/devices/{device_row_id}` */
+            deleteDevice: (args) => {
+                const deviceRowId = need('device_row_id', args.deviceRowId);
+                return request('DELETE', `/api/v1/push/devices/${encodeURIComponent(deviceRowId)}`);
+            },
+            /** Drop a push token (sign-out, notifications turned off). `POST /api/v1/push/devices/unregister` */
+            unregisterToken: (args) => request('POST', `/api/v1/push/devices/unregister`, { body: dropUndefined({ "token": args.token }) }),
+        },
+        realtime: {
+            /** List active realtime channels. `GET /api/v1/rt/stream/channels` */
+            channels: () => request('GET', `/api/v1/rt/stream/channels`),
+            /** Fetch presence for a realtime channel. `GET /api/v1/rt/stream/presence/{channel}` */
+            presence: (args) => {
+                const channel = need('channel', args.channel);
+                return request('GET', `/api/v1/rt/stream/presence/${encodeURIComponent(channel)}`);
+            },
+            /** Replay events for a realtime channel. `GET /api/v1/rt/stream/replay/{channel}` */
+            replay: (args) => {
+                const channel = need('channel', args.channel);
+                return request('GET', `/api/v1/rt/stream/replay/${encodeURIComponent(channel)}`, { query: dropUndefined({ "after": args.after, "limit": args.limit }) });
+            },
+            /** Subscribe a client ID to a realtime channel. `POST /api/v1/rt/stream/subscribe` */
+            subscribe: (args) => request('POST', `/api/v1/rt/stream/subscribe`, { body: dropUndefined({ "channel": args.channel, "client_id": args.clientId }) }),
+            /** Unsubscribe a client ID from a realtime channel. `POST /api/v1/rt/stream/unsubscribe` */
+            unsubscribe: (args) => request('POST', `/api/v1/rt/stream/unsubscribe`, { body: dropUndefined({ "channel": args.channel, "client_id": args.clientId }) }),
+        },
+        simulation: {
+            /** `GET /api/v1/sim/runs/{target_run_id}/compare/{baseline_run_id}` */
+            compareRuns: (args) => {
+                const targetRunId = need('target_run_id', args.targetRunId);
+                const baselineRunId = need('baseline_run_id', args.baselineRunId);
+                return request('GET', `/api/v1/sim/runs/${encodeURIComponent(targetRunId)}/compare/${encodeURIComponent(baselineRunId)}`);
+            },
+            /** `POST /api/v1/sim/discover` */
+            discover: () => request('POST', `/api/v1/sim/discover`, { body: {} }),
+            /** `GET /api/v1/sim/runs/{run_id}` */
+            getRun: (args) => {
+                const runId = need('run_id', args.runId);
+                return request('GET', `/api/v1/sim/runs/${encodeURIComponent(runId)}`);
+            },
+            /** `GET /api/v1/sim/runs` */
+            listRuns: (args = {}) => request('GET', `/api/v1/sim/runs`, { query: dropUndefined({ "limit": args.limit, "offset": args.offset }) }),
+        },
+        storage: {
+            /** `POST /api/v1/store/buckets` */
+            createBucket: (args) => request('POST', `/api/v1/store/buckets`, { body: args.body }),
+            /** `DELETE /api/v1/store/buckets/{name}` */
+            deleteBucket: (args) => {
+                const name = need('name', args.name);
+                return request('DELETE', `/api/v1/store/buckets/${encodeURIComponent(name)}`);
+            },
+            /** `GET /api/v1/store/buckets/{name}` */
+            getBucket: (args) => {
+                const name = need('name', args.name);
+                return request('GET', `/api/v1/store/buckets/${encodeURIComponent(name)}`);
+            },
+            /** `GET /api/v1/store/buckets` */
+            listBuckets: () => request('GET', `/api/v1/store/buckets`),
+            /** `POST /api/v1/store/objects/move` */
+            moveObject: (args) => request('POST', `/api/v1/store/objects/move`, { body: dropUndefined({ "from_path": args.fromPath, "to_path": args.toPath }) }),
+            /** `PATCH /api/v1/store/buckets/{name}` */
+            updateBucket: (args) => {
+                const name = need('name', args.name);
+                return request('PATCH', `/api/v1/store/buckets/${encodeURIComponent(name)}`, { body: args.body });
+            },
+        },
+        templates: {
+            /** App templates (SaaS, marketplace, chat): what each creates, the tables it adds and its steps. Project team only. `GET /api/v1/templates` */
+            list: () => request('GET', `/api/v1/templates`),
+            /** One app template, including the SQL its migration runs. `GET /api/v1/templates/{name}` */
+            get: (args) => {
+                const name = need('name', args.name);
+                return request('GET', `/api/v1/templates/${encodeURIComponent(name)}`);
+            },
+            /** Apply a template to the project: its migration (tables + row-level security), buckets and their rules, realtime — each step with your own permissions, stopping at the first refusal. dry_run checks for tables that already exist and changes nothing. Needs database.admin. `POST /api/v1/governance/tenants/{org_id}/projects/{project_id}/templates/{name}/apply` */
+            apply: (args) => {
+                const orgId = need('org_id', args.orgId ?? scope()?.orgId);
+                const projectId = need('project_id', args.projectId ?? scope()?.projectId);
+                const name = need('name', args.name);
+                return request('POST', `/api/v1/governance/tenants/${encodeURIComponent(orgId)}/projects/${encodeURIComponent(projectId)}/templates/${encodeURIComponent(name)}/apply`, { body: dropUndefined({ "dry_run": args.dryRun }) });
+            },
+        },
+        traces: {
+            /** The project's recent refused (4xx) and failed (5xx) requests, each with who refused it, why and what to do (kind: denied, failed or all). Project team only. `GET /api/v1/request-traces` */
+            list: (args = {}) => request('GET', `/api/v1/request-traces`, { query: dropUndefined({ "kind": args.kind, "before": args.before, "limit": args.limit }) }),
+            /** One request by its trace id (SovariaError.traceId, the X-Request-ID header): every hop — gateway checks, engine, SQL — and the explanation. `GET /api/v1/request-traces/{trace_id}` */
+            get: (args) => {
+                const traceId = need('trace_id', args.traceId);
+                return request('GET', `/api/v1/request-traces/${encodeURIComponent(traceId)}`);
+            },
+        },
+        vector: {
+            /** Delete an entire vector collection. `DELETE /api/v1/collections/{collection}` */
+            deleteCollection: (args) => {
+                const collection = need('collection', args.collection);
+                return request('DELETE', `/api/v1/collections/${encodeURIComponent(collection)}`);
+            },
+            /** Delete a record from a vector collection. `DELETE /api/v1/collections/{collection}/records/{record_id}` */
+            deleteRecord: (args) => {
+                const collection = need('collection', args.collection);
+                const recordId = need('record_id', args.recordId);
+                return request('DELETE', `/api/v1/collections/${encodeURIComponent(collection)}/records/${encodeURIComponent(recordId)}`);
+            },
+            /** Generate embeddings for one or more texts. `POST /api/v1/embed` */
+            embed: (args) => request('POST', `/api/v1/embed`, { body: dropUndefined({ "texts": args.texts }) }),
+            /** List vector collections in the current project scope. `GET /api/v1/collections` */
+            listCollections: () => request('GET', `/api/v1/collections`),
+            /** Embed and upsert documents into a vector collection. `POST /api/v1/vectors/upsert` */
+            upsert: (args) => request('POST', `/api/v1/vectors/upsert`, { body: dropUndefined({ "collection": args.collection, "docs": args.docs }) }),
+            /** Collection settings. app_search: true lets the project's apps (anon key, signed-in users) search it; they can never write or list it. `PATCH /api/v1/collections/{collection}` */
+            setCollection: (args) => {
+                const collection = need('collection', args.collection);
+                return request('PATCH', `/api/v1/collections/${encodeURIComponent(collection)}`, { body: dropUndefined({ "app_search": args.appSearch }) });
+            },
+            /** Embed every stored text again with the project's current model (large collections need this after a model change). `POST /api/v1/collections/{collection}/reembed` */
+            reembedCollection: (args) => {
+                const collection = need('collection', args.collection);
+                return request('POST', `/api/v1/collections/${encodeURIComponent(collection)}/reembed`, { query: dropUndefined({ "force": args.force }) });
+            },
+            /** Search a SQL table: mode vector (nearest embeddings), keyword (full text) or hybrid (both, reciprocal rank fusion). text is embedded with the project's model when no vector is given. Only rows the caller may read. `POST /api/v1/data/rel/vector/search` */
+            sqlSearch: (args) => request('POST', `/api/v1/data/rel/vector/search`, { body: dropUndefined({ "table_name": args.tableName, "column_name": args.columnName, "vector": args.vector, "text": args.text, "mode": args.mode, "text_columns": args.textColumns, "language": args.language, "k": args.k, "metric": args.metric, "select": args.select, "filter": args.filter, "max_distance": args.maxDistance }) }),
+            /** Tables whose vector column Sovaria keeps embedded, rows embedded and waiting, last error, and the project's model. `GET /api/v1/data/rel/vector/auto` */
+            sqlAutoStatus: () => request('GET', `/api/v1/data/rel/vector/auto`),
+            /** Keep a vector column (created if missing) filled with embeddings of the source columns; edited rows are embedded again automatically. rebuild re-embeds the whole table. `POST /api/v1/data/rel/vector/auto` */
+            sqlAutoEnable: (args) => request('POST', `/api/v1/data/rel/vector/auto`, { body: dropUndefined({ "table_name": args.tableName, "column_name": args.columnName, "source_columns": args.sourceColumns, "rebuild": args.rebuild }) }),
+            /** Stop keeping a table's vectors up to date (the column and its vectors stay). `DELETE /api/v1/data/rel/vector/auto/{table_name}` */
+            sqlAutoDisable: (args) => {
+                const tableName = need('table_name', args.tableName);
+                return request('DELETE', `/api/v1/data/rel/vector/auto/${encodeURIComponent(tableName)}`);
+            },
+            /** Embed waiting rows now instead of on the next background pass (up to limit per table). `POST /api/v1/data/rel/vector/auto/sync` */
+            sqlAutoSync: (args = {}) => request('POST', `/api/v1/data/rel/vector/auto/sync`, { body: dropUndefined({ "table_name": args.tableName, "limit": args.limit }) }),
+        },
+        workflows: {
+            /** Start a durable workflow run of a function that uses context.step; key makes the start idempotent. `POST /api/v1/fn/workflows` */
+            start: (args) => request('POST', `/api/v1/fn/workflows`, { body: dropUndefined({ "function_name": args.functionName, "input": args.input, "key": args.key }) }),
+            /** Workflow runs, newest first, with the plan's workflow limits. `GET /api/v1/fn/workflows` */
+            list: (args = {}) => request('GET', `/api/v1/fn/workflows`, { query: dropUndefined({ "function": args.functionName, "status": args.status, "before": args.before, "limit": args.limit }) }),
+            /** One run: status, input, output or error, and every finished step with its result. `GET /api/v1/fn/workflows/{run_id}` */
+            get: (args) => {
+                const runId = need('run_id', args.runId);
+                return request('GET', `/api/v1/fn/workflows/${encodeURIComponent(runId)}`);
+            },
+            /** Wake step.waitForSignal(name) with data (kept until the run waits for it). `POST /api/v1/fn/workflows/{run_id}/signal` */
+            signal: (args) => {
+                const runId = need('run_id', args.runId);
+                return request('POST', `/api/v1/fn/workflows/${encodeURIComponent(runId)}/signal`, { body: dropUndefined({ "name": args.name, "data": args.data }) });
+            },
+            /** Stop an unfinished run for good. `POST /api/v1/fn/workflows/{run_id}/cancel` */
+            cancel: (args) => {
+                const runId = need('run_id', args.runId);
+                return request('POST', `/api/v1/fn/workflows/${encodeURIComponent(runId)}/cancel`);
+            },
+            /** Resume a failed run from its failed step; latest moves it to the live function version. `POST /api/v1/fn/workflows/{run_id}/retry` */
+            retry: (args) => {
+                const runId = need('run_id', args.runId);
+                return request('POST', `/api/v1/fn/workflows/${encodeURIComponent(runId)}/retry`, { body: dropUndefined({ "latest": args.latest }) });
+            },
+        },
+    };
+}