@workos-inc/widgets 1.17.1 → 1.17.2-next.1788288181219

package/dist/cjs/api/client-graphql/generated.d.cts

@@ -55,6 +55,18 @@ type Scalars = {
         output: any;
     };
 };
+/** A short-lived link that starts an Admin Portal session for the token’s organization, scoped to a single setup flow. */
+type AdminPortalLink = {
+    __typename?: "AdminPortalLink";
+    /** When the link stops being redeemable. */
+    expiresAt: Scalars["DateTime"]["output"];
+    /** The setup flow the link is scoped to. */
+    intent: AdminPortalLinkIntent;
+    /** The Admin Portal URL to send the user to. It carries a bearer capability, so treat it as a secret and redirect immediately. */
+    link: Scalars["String"]["output"];
+};
+/** The Admin Portal setup flow a link is scoped to. */
+type AdminPortalLinkIntent = "DomainVerification" | "LogStreams" | "Sso";
 /** All other sessions were revoked successfully. */
 type AllSessionsRevoked = {
     __typename?: "AllSessionsRevoked";
@@ -108,6 +120,22 @@ type AuditLogExport = {
     url?: Maybe<Scalars["String"]["output"]>;
 };
 type AuditLogExportState = "Error" | "Expired" | "Pending" | "Ready";
+/** The audit log stream destination configured for the token's organization. Exposes status metadata only; destination settings and credentials are never included. */
+type AuditLogStream = {
+    __typename?: "AuditLogStream";
+    auditLogTrailId: Scalars["ID"]["output"];
+    /** The most recent delivery error message, if any. */
+    errorMessage?: Maybe<Scalars["String"]["output"]>;
+    id: Scalars["ID"]["output"];
+    /** The ID of the last audit log event delivered to the stream. */
+    lastSyncedEventId?: Maybe<Scalars["String"]["output"]>;
+    state: AuditLogStreamState;
+    type: AuditLogStreamType;
+};
+/** The delivery state of an audit log stream. */
+type AuditLogStreamState = "Active" | "Error" | "Inactive" | "Invalid";
+/** The destination provider audit log events are streamed to. */
+type AuditLogStreamType = "AzureSentinel" | "Datadog" | "GenericHttps" | "GoogleCloudStorage" | "S3" | "Snowflake" | "Splunk";
 /** The authentication methods the environment allows, and the password policy it enforces. Distinct from what the authenticated user has set up, which lives on `me`. */
 type AuthenticationSettings = {
     __typename?: "AuthenticationSettings";
@@ -129,6 +157,17 @@ type ConfirmEmailChangeInput = {
     elevatedAccessToken: Scalars["String"]["input"];
 };
 type ConfirmEmailChangeResult = EmailChangeCodeExpired | EmailChangeCodeIncorrect | EmailChangeCodePreviouslyUsed | EmailChangeConfirmed | EmailChangeTooManyAttempts | EmailManagedByProvider | EmailNotAvailable | IdentityVerificationExpired | IdentityVerificationInvalid | InvalidEmail | NoPendingEmailChange;
+type ConnectDataProviderResult = DataProviderAuthMethodUnsupported | DataProviderConfigInvalid | DataProviderConnected | DataProviderConnectionAuthMethodConflict;
+type ConnectDataProviderWithClientCredentialsInput = {
+    /** The OAuth client ID issued by the data provider. Only data providers whose `authMethods` include `client_credentials` can be connected this way. */
+    clientId: Scalars["String"]["input"];
+    /** The OAuth client secret issued by the data provider. Write-only: it is stored encrypted and never returned. */
+    clientSecret: Scalars["String"]["input"];
+    /** Values for the provider’s connection configuration fields. */
+    config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
+    /** The data provider to connect the authenticated user to. */
+    dataProviderId: Scalars["ID"]["input"];
+};
 /** An OAuth profile linked to the authenticated user. */
 type ConnectedAccount = {
     __typename?: "ConnectedAccount";
@@ -171,12 +210,27 @@ type CreateAuditLogExportInput = {
     targetTypes?: InputMaybe<Array<Scalars["String"]["input"]>>;
 };
 type CreateAuditLogExportResult = AuditLogExport | InvalidAuditLogExportDateRange | NoAuditEventsFound;
+type CreateDataProviderAuthorizationInput = {
+    /** Values for the provider’s connect-time configuration fields. Omit when the provider declares none. */
+    config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
+    /** The data provider to authorize for the authenticated user. It must be one the user can connect (`dataProviders`). */
+    dataProviderId: Scalars["ID"]["input"];
+    /** Request a confirmation step at the end of the flow, returning a `handoffToken` the client must complete. Defaults to false. */
+    requireHandoff?: InputMaybe<Scalars["Boolean"]["input"]>;
+};
+type CreateDataProviderAuthorizationResult = DataProviderAuthorization | DataProviderAuthorizationUnavailable | DataProviderConfigInvalid;
 type CreateDataProviderConnectionInput = {
     /** The API key issued by the data provider. Only data providers whose `authMethods` include `api_key` can be connected this way; OAuth providers are connected through the widget's authorization flow. */
     apiKey: Scalars["String"]["input"];
     /** The data provider to connect the authenticated user to. */
     dataProviderId: Scalars["ID"]["input"];
 };
+type CreateOrganizationDataProviderAuthorizationInput = {
+    /** Values for the provider’s connect-time configuration fields. Omit when the provider declares none. */
+    config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
+    /** The organization-owned data provider to authorize (`organizationDataProviders`). */
+    dataProviderId: Scalars["ID"]["input"];
+};
 /** Input for setting a password on an account that does not yet have one (e.g. signed up via OAuth). */
 type CreatePasswordInput = {
     /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */
@@ -236,6 +290,83 @@ type DataProvider = {
     state: Scalars["String"]["output"];
     updatedAt: Scalars["DateTime"]["output"];
 };
+/** The data provider cannot be connected the requested way — for example client credentials for a provider that only supports OAuth. */
+type DataProviderAuthMethodUnsupported = {
+    __typename?: "DataProviderAuthMethodUnsupported";
+    /** The unsupported auth method that was requested. */
+    authMethod: Scalars["String"]["output"];
+    /** The auth methods the data provider does support. */
+    supportedAuthMethods: Array<Scalars["String"]["output"]>;
+};
+/** A started authorization: the URL to open and the state to poll while the user completes it. */
+type DataProviderAuthorization = {
+    __typename?: "DataProviderAuthorization";
+    /** Present when the flow ends on a confirmation step the client must complete instead of finishing silently. Always present for organization-scoped authorization. */
+    handoffToken?: Maybe<Scalars["String"]["output"]>;
+    /** One-time token the interstitial URL is keyed by. Retained so a client can correlate the popup it opened. */
+    redirectToken: Scalars["String"]["output"];
+    /** The OAuth `state` for this attempt. Poll `dataProviderAuthorizationStatus` with it to observe completion. */
+    state: Scalars["String"]["output"];
+    /** The WorkOS interstitial URL to open in the popup. It redirects to the provider once, then expires. */
+    url: Scalars["String"]["output"];
+};
+/** Whether an authorization attempt is still in progress. */
+type DataProviderAuthorizationStatus = {
+    __typename?: "DataProviderAuthorizationStatus";
+    /** True while the attempt is outstanding. It becomes false once the provider callback has been handled or the attempt expired, so a client that sees false reloads the connection to learn the outcome. */
+    connecting: Scalars["Boolean"]["output"];
+    /** The `state` that was polled. */
+    state: Scalars["String"]["output"];
+};
+/** The data provider cannot start an authorization right now — most often because the organization has not supplied its own OAuth credentials yet. */
+type DataProviderAuthorizationUnavailable = {
+    __typename?: "DataProviderAuthorizationUnavailable";
+    message: Scalars["String"]["output"];
+};
+/** A non-secret configuration value set on a data provider. */
+type DataProviderConfigEntry = {
+    __typename?: "DataProviderConfigEntry";
+    /** The configuration field declared by the provider. */
+    name: Scalars["String"]["output"];
+    /** The value set for the field. */
+    value: Scalars["String"]["output"];
+};
+type DataProviderConfigEntryInput = {
+    /** The configuration field declared by the provider. */
+    name: Scalars["String"]["input"];
+    /** The value to set for the field. */
+    value: Scalars["String"]["input"];
+};
+/** The supplied configuration does not satisfy the provider’s declared fields. */
+type DataProviderConfigInvalid = {
+    __typename?: "DataProviderConfigInvalid";
+    /** Which field is missing, unknown, or malformed. Names the field so a client can highlight it. */
+    message: Scalars["String"]["output"];
+};
+/** A data provider's configuration for the token's organization, excluding secret values. */
+type DataProviderConfiguration = {
+    __typename?: "DataProviderConfiguration";
+    /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */
+    availableScopes: Array<Scalars["String"]["output"]>;
+    config: Array<DataProviderConfigEntry>;
+    /** The data provider being configured. */
+    dataProviderId: Scalars["ID"]["output"];
+    dataProviderSlug: Scalars["String"]["output"];
+    /** Whether the organization's users can see and connect the data provider. */
+    enabled: Scalars["Boolean"]["output"];
+    /** Whether the organization has supplied its own OAuth client credentials. Always false for a provider whose credentials the developer manages. The values themselves are never returned. */
+    hasCredentials: Scalars["Boolean"]["output"];
+    /** The organization the configuration applies to. */
+    organizationId: Scalars["ID"]["output"];
+    /** The scopes the organization requests, or null to use the provider defaults. */
+    scopes?: Maybe<Array<Scalars["String"]["output"]>>;
+    updatedAt: Scalars["DateTime"]["output"];
+};
+/** The connection was created or its credentials were replaced. */
+type DataProviderConnected = {
+    __typename?: "DataProviderConnected";
+    connection: DataProviderConnection;
+};
 /** A connection between a data provider and the authenticated user's account. */
 type DataProviderConnection = {
     __typename?: "DataProviderConnection";
@@ -255,6 +386,12 @@ type DataProviderConnection = {
     updatedAt: Scalars["DateTime"]["output"];
     userId?: Maybe<Scalars["ID"]["output"]>;
 };
+/** The user already has a connection to this data provider that authenticates differently, so it must be disconnected first. */
+type DataProviderConnectionAuthMethodConflict = {
+    __typename?: "DataProviderConnectionAuthMethodConflict";
+    /** How the existing connection authenticates. */
+    existingAuthMethod: Scalars["String"]["output"];
+};
 type DataProviderConnectionList = {
     __typename?: "DataProviderConnectionList";
     data: Array<DataProviderConnection>;
@@ -551,9 +688,17 @@ type Mutation = {
     assignPermissionToRole: Role;
     /** Confirms an email change using the verification code sent to the new email address. Requires an elevated access token from `verifyCurrentEmail`. */
     confirmEmailChange: ConfirmEmailChangeResult;
+    /** Connect the authenticated user to a data provider with OAuth client credentials the user supplies. Replaces the credentials when the user already has a client-credentials connection to the data provider, so this is both the connect and the reconnect path. The credentials are stored encrypted and never returned. */
+    connectDataProviderWithClientCredentials: ConnectDataProviderResult;
+    /** Mint a short-lived link that starts an Admin Portal session for the token's organization, scoped to a single setup flow. */
+    createAdminPortalLink: AdminPortalLink;
     createAuditLogExport: CreateAuditLogExportResult;
+    /** Start an OAuth authorization connecting the authenticated user to a data provider. Returns the URL to open in a popup and the `state` to poll with `dataProviderAuthorizationStatus`. Re-authorizing a provider the user is already connected to replaces that connection's credentials once the flow completes, so this is also the reconnect path. */
+    createDataProviderAuthorization: CreateDataProviderAuthorizationResult;
     /** Connect the authenticated user to a data provider with an API key the user supplies. Replaces the API key when the user already has an API-key connection to the data provider. */
     createDataProviderConnection: DataProviderConnection;
+    /** Start an OAuth authorization connecting the token's organization to an organization-owned data provider, producing one connection shared by every member. A handoff is always required: the member completing the flow must confirm it explicitly because the resulting connection is not their own. */
+    createOrganizationDataProviderAuthorization: CreateDataProviderAuthorizationResult;
     /** Add a domain to the token's organization and begin DNS verification. */
     createOrganizationDomain: OrganizationDomain;
     /** Set a password for the authenticated user who does not yet have one (e.g. signed up via OAuth). Validates against the environment password policy. */
@@ -592,6 +737,8 @@ type Mutation = {
     sendEmailChange: SendEmailChangeResult;
     /** Sends a verification code to the user's current email address to prove ownership before changing email. */
     sendVerificationCode: SendVerificationCodeResult;
+    /** Write a data provider's configuration for the token's organization: whether the organization's members can connect it, the scopes it requests, the organization's own OAuth client credentials, and any non-secret configuration values the provider declares. Fields left out are unchanged. Supersedes `setDataProviderEnabled` for anything beyond toggling `enabled`. */
+    setDataProviderConfiguration: SetDataProviderConfigurationResult;
     /** Enable or disable a data provider for the token's organization. Disabling it hides the data provider from the organization's users and stops new connections; existing connections stay readable so they can be disconnected. */
     setDataProviderEnabled: DataProvider;
     /** Update an organization member's roles within the organization the token was issued for. When multiple roles are enabled, all provided role slugs are assigned; otherwise only the first is used. */
@@ -615,12 +762,24 @@ type MutationAssignPermissionToRoleArgs = {
 type MutationConfirmEmailChangeArgs = {
     input: ConfirmEmailChangeInput;
 };
+type MutationConnectDataProviderWithClientCredentialsArgs = {
+    input: ConnectDataProviderWithClientCredentialsInput;
+};
+type MutationCreateAdminPortalLinkArgs = {
+    intent: AdminPortalLinkIntent;
+};
 type MutationCreateAuditLogExportArgs = {
     input: CreateAuditLogExportInput;
 };
+type MutationCreateDataProviderAuthorizationArgs = {
+    input: CreateDataProviderAuthorizationInput;
+};
 type MutationCreateDataProviderConnectionArgs = {
     input: CreateDataProviderConnectionInput;
 };
+type MutationCreateOrganizationDataProviderAuthorizationArgs = {
+    input: CreateOrganizationDataProviderAuthorizationInput;
+};
 type MutationCreateOrganizationDomainArgs = {
     domain: Scalars["String"]["input"];
 };
@@ -672,6 +831,9 @@ type MutationRevokeSessionArgs = {
 type MutationSendEmailChangeArgs = {
     input: SendEmailChangeInput;
 };
+type MutationSetDataProviderConfigurationArgs = {
+    input: SetDataProviderConfigurationInput;
+};
 type MutationSetDataProviderEnabledArgs = {
     input: SetDataProviderEnabledInput;
 };
@@ -728,6 +890,30 @@ type OrganizationBlockedFromSendingInvites = {
     /** Placeholder field to allow an empty @ObjectType. */
     _placeholder?: Maybe<Scalars["Boolean"]["output"]>;
 };
+/** A data provider the token's organization connects on behalf of all its members. */
+type OrganizationDataProvider = {
+    __typename?: "OrganizationDataProvider";
+    authMethods: Array<Scalars["String"]["output"]>;
+    /** The organization's single shared connection, when it has authorized this data provider. */
+    connection?: Maybe<DataProviderConnection>;
+    createdAt: Scalars["DateTime"]["output"];
+    description?: Maybe<Scalars["String"]["output"]>;
+    enabled: Scalars["Boolean"]["output"];
+    /** Whether the organization has supplied its own OAuth client credentials for this data provider. Always false for a provider whose credentials the developer manages. */
+    hasCredentials: Scalars["Boolean"]["output"];
+    id: Scalars["ID"]["output"];
+    integrationType: Scalars["String"]["output"];
+    name: Scalars["String"]["output"];
+    scopes?: Maybe<Array<Scalars["String"]["output"]>>;
+    slug: Scalars["String"]["output"];
+    state: Scalars["String"]["output"];
+    updatedAt: Scalars["DateTime"]["output"];
+};
+type OrganizationDataProviderList = {
+    __typename?: "OrganizationDataProviderList";
+    data: Array<OrganizationDataProvider>;
+    listMetadata: ListMetadata;
+};
 /** A domain belonging to the organization the token was issued for. */
 type OrganizationDomain = {
     __typename?: "OrganizationDomain";
@@ -882,6 +1068,11 @@ type Permission = {
     system: Scalars["Boolean"]["output"];
     updatedAt: Scalars["DateTime"]["output"];
 };
+type PermissionList = {
+    __typename?: "PermissionList";
+    data: Array<Permission>;
+    listMetadata: ListMetadata;
+};
 /** The profile was updated successfully. */
 type ProfileUpdated = {
     __typename?: "ProfileUpdated";
@@ -892,12 +1083,16 @@ type Query = {
     auditEvent: AuditEvent;
     auditEvents: AuditEventList;
     auditLogExport: AuditLogExport;
+    /** The audit log stream destination configured for the token's organization, or null when no stream is configured. */
+    auditLogStream?: Maybe<AuditLogStream>;
     /** The authentication methods the environment allows and the password policy it enforces. Requires a session token. */
     authenticationSettings: AuthenticationSettings;
     /** Placeholder query for the Client GraphQL API scaffold. Returns a static value and is replaced by real resolvers. */
     clientApiStatus: Scalars["String"]["output"];
     /** Return a data provider by ID within the token's environment. */
     dataProvider: DataProvider;
+    /** Report whether an authorization attempt is still outstanding. Poll this with the `state` returned when the authorization was created while the popup is open; it flips to `connecting: false` once the provider callback has been handled or the attempt expired. */
+    dataProviderAuthorizationStatus: DataProviderAuthorizationStatus;
     /** Return one of the authenticated user's data provider connections by ID. */
     dataProviderConnection: DataProviderConnection;
     /** List the authenticated user's data provider connections, including their status. */
@@ -926,6 +1121,8 @@ type Query = {
     me: User;
     /** Returns an organization by ID within the token's environment. */
     organization: Organization;
+    /** List the data providers the token's organization connects on behalf of all its members, with the organization's shared connection when it has one. */
+    organizationDataProviders: OrganizationDataProviderList;
     /** Return a domain by ID within the token's organization, including its verification status. */
     organizationDomain: OrganizationDomain;
     /** List the domains belonging to the organization the token was issued for. */
@@ -937,7 +1134,7 @@ type Query = {
     /** List registered passkeys for the authenticated user. Requires a session token. */
     passkeys: Array<Passkey>;
     /** List the permissions defined in the environment the token was issued for. */
-    permissions: Array<Permission>;
+    permissions: PermissionList;
     /** Fetch a single role available to the organization the token was issued for. */
     role?: Maybe<Role>;
     /** List roles available to the organization the token was issued for, with role assignment configuration. */
@@ -967,6 +1164,10 @@ type QueryAuditLogExportArgs = {
 type QueryDataProviderArgs = {
     id: Scalars["ID"]["input"];
 };
+type QueryDataProviderAuthorizationStatusArgs = {
+    dataProviderId: Scalars["ID"]["input"];
+    state: Scalars["String"]["input"];
+};
 type QueryDataProviderConnectionArgs = {
     id: Scalars["ID"]["input"];
 };
@@ -1033,6 +1234,12 @@ type QueryFlagsArgs = {
 type QueryOrganizationArgs = {
     id: Scalars["ID"]["input"];
 };
+type QueryOrganizationDataProvidersArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+};
 type QueryOrganizationDomainArgs = {
     id: Scalars["ID"]["input"];
 };
@@ -1050,6 +1257,13 @@ type QueryOrganizationMembershipsArgs = {
     roleSlug?: InputMaybe<Scalars["String"]["input"]>;
     search?: InputMaybe<Scalars["String"]["input"]>;
 };
+type QueryPermissionsArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+};
 type QueryRoleArgs = {
     id: Scalars["ID"]["input"];
 };
@@ -1171,6 +1385,21 @@ type SessionState = {
     /** Session state: Issued, Revoked, etc. */
     tag: Scalars["String"]["output"];
 };
+type SetDataProviderConfigurationInput = {
+    /** The organization's own OAuth client ID. Must be supplied together with `clientSecret`. */
+    clientId?: InputMaybe<Scalars["String"]["input"]>;
+    /** The organization's own OAuth client secret. Write-only: it is stored encrypted and never returned; clients read `hasCredentials` instead. */
+    clientSecret?: InputMaybe<Scalars["String"]["input"]>;
+    /** Non-secret configuration values declared by the provider. */
+    config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
+    /** The data provider to configure for the token's organization. Configuration always applies to the token's organization; it cannot be set for another one. */
+    dataProviderId: Scalars["ID"]["input"];
+    /** Whether the organization's users can see and connect the data provider. */
+    enabled?: InputMaybe<Scalars["Boolean"]["input"]>;
+    /** The scopes the organization requests. Only providers where the organization brings its own OAuth credentials may widen beyond the defaults. */
+    scopes?: InputMaybe<Array<Scalars["String"]["input"]>>;
+};
+type SetDataProviderConfigurationResult = DataProviderConfigInvalid | DataProviderConfiguration;
 type SetDataProviderEnabledInput = {
     dataProviderId: Scalars["ID"]["input"];
     /** Whether the data provider is available to the organization the token was issued for. */
@@ -1344,4 +1573,4 @@ declare function getSdk(client: GraphQLClient, withWrapper?: SdkFunctionWrapper)
 };
 type Sdk = ReturnType<typeof getSdk>;
 
-export { type AllSessionsRevoked, type AssignPermissionToRoleInput, type AuditEvent, type AuditEventActor, type AuditEventFilterInput, type AuditEventList, type AuditLogExport, type AuditLogExportState, type AuthenticationSettings, ClientApiStatusDocument, type ClientApiStatusQuery, type ClientApiStatusQueryVariables, type ConfirmEmailChangeInput, type ConfirmEmailChangeResult, type ConnectedAccount, type Connection, type ConnectionState, type ConnectionType, type CreateAuditLogExportInput, type CreateAuditLogExportResult, type CreateDataProviderConnectionInput, type CreatePasswordInput, type CreatePasswordResult, type CreateRoleInput, type CreateSsoConnectionInput, type CurrentEmailVerified, type DailyEmailQuotaExceeded, type DataProvider, type DataProviderConnection, type DataProviderConnectionList, type DataProviderList, type DeleteRoleInput, type Directory, type DirectoryGroup, type DirectoryGroupList, type DirectoryList, type DirectoryUser, type DirectoryUserList, type DomainVerificationNameServer, type ElevatedAccessTokenExpired, type ElevatedAccessTokenInvalid, type EmailChangeCodeExpired, type EmailChangeCodeIncorrect, type EmailChangeCodePreviouslyUsed, type EmailChangeConfirmed, type EmailChangeNotAvailable, type EmailChangeSent, type EmailChangeTooManyAttempts, type EmailManagedByProvider, type EmailNotAvailable, type EnrollTotpInput, type EnrollTotpResult, type Exact, type Flag, type FlagList, type IdentityVerificationExpired, type IdentityVerificationInvalid, type IncorrectPassword, type Incremental, type InputMaybe, type InvalidAuditLogExportDateRange, type InvalidEmail, type InvalidInvitationExpiry, type InvalidInviteeEmail, type InvalidInviteeRole, type InvalidLocale, type InvitationNotFound, type InvitationNotPending, type InvitationResent, type InvitationRevoked, type InviteUserInput, type InviteUserResult, type InviteeAlreadyAccepted, type InviteeAlreadyInvited, type InviteeAlreadyMember, type InviteeEmailNotDeliverable, type ListMetadata, type MakeEmpty, type MakeMaybe, type MakeOptional, type Maybe, type MemberIsManagedByDirectory, type MemberNotFound, type MemberRemoved, type MemberRoleUpdated, type MfaFactorRemoved, type Mutation, type MutationAssignPermissionToRoleArgs, type MutationConfirmEmailChangeArgs, type MutationCreateAuditLogExportArgs, type MutationCreateDataProviderConnectionArgs, type MutationCreateOrganizationDomainArgs, type MutationCreatePasswordArgs, type MutationCreateRoleArgs, type MutationCreateSsoConnectionArgs, type MutationDeleteDataProviderConnectionArgs, type MutationDeleteOrganizationDomainArgs, type MutationDeleteRoleArgs, type MutationDeleteSsoConnectionArgs, type MutationEnrollTotpArgs, type MutationInviteUserArgs, type MutationRemoveMemberArgs, type MutationRemoveMfaFactorArgs, type MutationResendInvitationArgs, type MutationReverifyOrganizationDomainArgs, type MutationRevokeInvitationArgs, type MutationRevokeSessionArgs, type MutationSendEmailChangeArgs, type MutationSetDataProviderEnabledArgs, type MutationUpdateMemberRoleArgs, type MutationUpdatePasswordArgs, type MutationUpdateProfileArgs, type MutationUpdateRoleArgs, type MutationUpdateSsoConnectionArgs, type MutationVerifyCurrentEmailArgs, type MutationVerifyTotpArgs, type NoAuditEventsFound, type NoMfaFactorsEnrolled, type NoPendingEmailChange, type OAuthProvider, type Organization, type OrganizationBlockedFromSendingInvites, type OrganizationDomain, type OrganizationDomainList, type OrganizationDomainState, type OrganizationInvitation, type OrganizationInvitationStatus, type OrganizationMember, type OrganizationMemberList, type OrganizationMemberRole, type OrganizationMemberStatus, type PaginationOrder, type Passkey, type PasswordCharacterType, type PasswordCreated, type PasswordPolicy, type PasswordPolicyViolation, type PasswordUpdated, type PasswordViolation, type Permission, type ProfileUpdated, type Query, type QueryAuditEventArgs, type QueryAuditEventsArgs, type QueryAuditLogExportArgs, type QueryDataProviderArgs, type QueryDataProviderConnectionArgs, type QueryDataProviderConnectionsArgs, type QueryDataProvidersArgs, type QueryDirectoryConnectionArgs, type QueryDirectoryConnectionsArgs, type QueryDirectoryGroupsArgs, type QueryDirectoryUsersArgs, type QueryEffectivePermissionsArgs, type QueryEvaluatedFlagsArgs, type QueryFlagArgs, type QueryFlagBySlugArgs, type QueryFlagsArgs, type QueryOrganizationArgs, type QueryOrganizationDomainArgs, type QueryOrganizationDomainsArgs, type QueryOrganizationMembershipsArgs, type QueryRoleArgs, type QuerySsoConnectionArgs, type QueryUserArgs, type RemoveMemberInput, type RemoveMemberResult, type RemoveMfaFactorInput, type RemoveMfaFactorResult, type ResendInvitationInput, type ResendInvitationNotFound, type ResendInvitationResult, type RevokeAllSessionsResult, type RevokeInvitationInput, type RevokeInvitationResult, type RevokeSessionInput, type RevokeSessionResult, type Role, type RoleDeleted, type RoleNotFound, type RolesResult, type Scalars, type Sdk, type SdkFunctionWrapper, type SendEmailChangeInput, type SendEmailChangeResult, type SendVerificationCodeResult, type Session, type SessionLocation, type SessionNotFound, type SessionRevoked, type SessionState, type SetDataProviderEnabledInput, type TotpAlreadyEnrolled, type TotpFactor, type TotpVerificationFailed, type TotpVerified, type UpdateMemberRoleInput, type UpdateMemberRoleResult, type UpdatePasswordInput, type UpdatePasswordResult, type UpdateProfileInput, type UpdateProfileResult, type UpdateRoleInput, type UpdateSsoConnectionInput, type User, type UserAlreadyHasPassword, type UserInvited, type UserOrganization, type VerificationCodeExpired, type VerificationCodeIncorrect, type VerificationCodePreviouslyUsed, type VerificationCodeSent, type VerificationTooManyAttempts, type VerifyCurrentEmailInput, type VerifyCurrentEmailResult, type VerifyTotpInput, type VerifyTotpResult, getSdk };
+export { type AdminPortalLink, type AdminPortalLinkIntent, type AllSessionsRevoked, type AssignPermissionToRoleInput, type AuditEvent, type AuditEventActor, type AuditEventFilterInput, type AuditEventList, type AuditLogExport, type AuditLogExportState, type AuditLogStream, type AuditLogStreamState, type AuditLogStreamType, type AuthenticationSettings, ClientApiStatusDocument, type ClientApiStatusQuery, type ClientApiStatusQueryVariables, type ConfirmEmailChangeInput, type ConfirmEmailChangeResult, type ConnectDataProviderResult, type ConnectDataProviderWithClientCredentialsInput, type ConnectedAccount, type Connection, type ConnectionState, type ConnectionType, type CreateAuditLogExportInput, type CreateAuditLogExportResult, type CreateDataProviderAuthorizationInput, type CreateDataProviderAuthorizationResult, type CreateDataProviderConnectionInput, type CreateOrganizationDataProviderAuthorizationInput, type CreatePasswordInput, type CreatePasswordResult, type CreateRoleInput, type CreateSsoConnectionInput, type CurrentEmailVerified, type DailyEmailQuotaExceeded, type DataProvider, type DataProviderAuthMethodUnsupported, type DataProviderAuthorization, type DataProviderAuthorizationStatus, type DataProviderAuthorizationUnavailable, type DataProviderConfigEntry, type DataProviderConfigEntryInput, type DataProviderConfigInvalid, type DataProviderConfiguration, type DataProviderConnected, type DataProviderConnection, type DataProviderConnectionAuthMethodConflict, type DataProviderConnectionList, type DataProviderList, type DeleteRoleInput, type Directory, type DirectoryGroup, type DirectoryGroupList, type DirectoryList, type DirectoryUser, type DirectoryUserList, type DomainVerificationNameServer, type ElevatedAccessTokenExpired, type ElevatedAccessTokenInvalid, type EmailChangeCodeExpired, type EmailChangeCodeIncorrect, type EmailChangeCodePreviouslyUsed, type EmailChangeConfirmed, type EmailChangeNotAvailable, type EmailChangeSent, type EmailChangeTooManyAttempts, type EmailManagedByProvider, type EmailNotAvailable, type EnrollTotpInput, type EnrollTotpResult, type Exact, type Flag, type FlagList, type IdentityVerificationExpired, type IdentityVerificationInvalid, type IncorrectPassword, type Incremental, type InputMaybe, type InvalidAuditLogExportDateRange, type InvalidEmail, type InvalidInvitationExpiry, type InvalidInviteeEmail, type InvalidInviteeRole, type InvalidLocale, type InvitationNotFound, type InvitationNotPending, type InvitationResent, type InvitationRevoked, type InviteUserInput, type InviteUserResult, type InviteeAlreadyAccepted, type InviteeAlreadyInvited, type InviteeAlreadyMember, type InviteeEmailNotDeliverable, type ListMetadata, type MakeEmpty, type MakeMaybe, type MakeOptional, type Maybe, type MemberIsManagedByDirectory, type MemberNotFound, type MemberRemoved, type MemberRoleUpdated, type MfaFactorRemoved, type Mutation, type MutationAssignPermissionToRoleArgs, type MutationConfirmEmailChangeArgs, type MutationConnectDataProviderWithClientCredentialsArgs, type MutationCreateAdminPortalLinkArgs, type MutationCreateAuditLogExportArgs, type MutationCreateDataProviderAuthorizationArgs, type MutationCreateDataProviderConnectionArgs, type MutationCreateOrganizationDataProviderAuthorizationArgs, type MutationCreateOrganizationDomainArgs, type MutationCreatePasswordArgs, type MutationCreateRoleArgs, type MutationCreateSsoConnectionArgs, type MutationDeleteDataProviderConnectionArgs, type MutationDeleteOrganizationDomainArgs, type MutationDeleteRoleArgs, type MutationDeleteSsoConnectionArgs, type MutationEnrollTotpArgs, type MutationInviteUserArgs, type MutationRemoveMemberArgs, type MutationRemoveMfaFactorArgs, type MutationResendInvitationArgs, type MutationReverifyOrganizationDomainArgs, type MutationRevokeInvitationArgs, type MutationRevokeSessionArgs, type MutationSendEmailChangeArgs, type MutationSetDataProviderConfigurationArgs, type MutationSetDataProviderEnabledArgs, type MutationUpdateMemberRoleArgs, type MutationUpdatePasswordArgs, type MutationUpdateProfileArgs, type MutationUpdateRoleArgs, type MutationUpdateSsoConnectionArgs, type MutationVerifyCurrentEmailArgs, type MutationVerifyTotpArgs, type NoAuditEventsFound, type NoMfaFactorsEnrolled, type NoPendingEmailChange, type OAuthProvider, type Organization, type OrganizationBlockedFromSendingInvites, type OrganizationDataProvider, type OrganizationDataProviderList, type OrganizationDomain, type OrganizationDomainList, type OrganizationDomainState, type OrganizationInvitation, type OrganizationInvitationStatus, type OrganizationMember, type OrganizationMemberList, type OrganizationMemberRole, type OrganizationMemberStatus, type PaginationOrder, type Passkey, type PasswordCharacterType, type PasswordCreated, type PasswordPolicy, type PasswordPolicyViolation, type PasswordUpdated, type PasswordViolation, type Permission, type PermissionList, type ProfileUpdated, type Query, type QueryAuditEventArgs, type QueryAuditEventsArgs, type QueryAuditLogExportArgs, type QueryDataProviderArgs, type QueryDataProviderAuthorizationStatusArgs, type QueryDataProviderConnectionArgs, type QueryDataProviderConnectionsArgs, type QueryDataProvidersArgs, type QueryDirectoryConnectionArgs, type QueryDirectoryConnectionsArgs, type QueryDirectoryGroupsArgs, type QueryDirectoryUsersArgs, type QueryEffectivePermissionsArgs, type QueryEvaluatedFlagsArgs, type QueryFlagArgs, type QueryFlagBySlugArgs, type QueryFlagsArgs, type QueryOrganizationArgs, type QueryOrganizationDataProvidersArgs, type QueryOrganizationDomainArgs, type QueryOrganizationDomainsArgs, type QueryOrganizationMembershipsArgs, type QueryPermissionsArgs, type QueryRoleArgs, type QuerySsoConnectionArgs, type QueryUserArgs, type RemoveMemberInput, type RemoveMemberResult, type RemoveMfaFactorInput, type RemoveMfaFactorResult, type ResendInvitationInput, type ResendInvitationNotFound, type ResendInvitationResult, type RevokeAllSessionsResult, type RevokeInvitationInput, type RevokeInvitationResult, type RevokeSessionInput, type RevokeSessionResult, type Role, type RoleDeleted, type RoleNotFound, type RolesResult, type Scalars, type Sdk, type SdkFunctionWrapper, type SendEmailChangeInput, type SendEmailChangeResult, type SendVerificationCodeResult, type Session, type SessionLocation, type SessionNotFound, type SessionRevoked, type SessionState, type SetDataProviderConfigurationInput, type SetDataProviderConfigurationResult, type SetDataProviderEnabledInput, type TotpAlreadyEnrolled, type TotpFactor, type TotpVerificationFailed, type TotpVerified, type UpdateMemberRoleInput, type UpdateMemberRoleResult, type UpdatePasswordInput, type UpdatePasswordResult, type UpdateProfileInput, type UpdateProfileResult, type UpdateRoleInput, type UpdateSsoConnectionInput, type User, type UserAlreadyHasPassword, type UserInvited, type UserOrganization, type VerificationCodeExpired, type VerificationCodeIncorrect, type VerificationCodePreviouslyUsed, type VerificationCodeSent, type VerificationTooManyAttempts, type VerifyCurrentEmailInput, type VerifyCurrentEmailResult, type VerifyTotpInput, type VerifyTotpResult, getSdk };