@workos-inc/widgets 1.18.0 → 1.19.0-next.1790102694835

package/dist/cjs/api/client-graphql/generated.d.cts

@@ -66,12 +66,31 @@ type AdminPortalLink = {
     link: Scalars["String"]["output"];
 };
 /** The Admin Portal setup flow a link is scoped to. */
-type AdminPortalLinkIntent = "DomainVerification" | "LogStreams" | "Sso";
+type AdminPortalLinkIntent = "DomainVerification" | "Dsync" | "LogStreams" | "Sso";
 /** All other sessions were revoked successfully. */
 type AllSessionsRevoked = {
     __typename?: "AllSessionsRevoked";
     success: Scalars["Boolean"]["output"];
 };
+/** The key is already expired, so its expiration cannot change. */
+type ApiKeyAlreadyExpired = {
+    __typename?: "ApiKeyAlreadyExpired";
+    apiKeyId: Scalars["ID"]["output"];
+};
+/** One or more requested permission slugs are not held by the caller. A key never carries more than the caller minting it holds, so the caller must be granted a permission before it can grant it to a key. */
+type ApiKeyPermissionsNotHeld = {
+    __typename?: "ApiKeyPermissionsNotHeld";
+    message: Scalars["String"]["output"];
+    /** The requested permission slugs the caller does not hold. */
+    unheldPermissions: Array<Scalars["String"]["output"]>;
+};
+/** The token cannot grant permissions to a key. The caller is not acting as a member of the organization, so there is no set of held permissions to bound the key to; such a token can only create a key with no permissions. */
+type ApiKeyPermissionsUnsupportedForToken = {
+    __typename?: "ApiKeyPermissionsUnsupportedForToken";
+    message: Scalars["String"]["output"];
+    /** The permission slugs that were requested for the key. */
+    requestedPermissions: Array<Scalars["String"]["output"]>;
+};
 type AssignPermissionToRoleInput = {
     /** The slug of the permission to assign. */
     permissionSlug: Scalars["String"]["input"];
@@ -169,6 +188,48 @@ type Branding = {
     /** The fully resolved light-mode logo URL, or null when it is not configured. */
     logoLightPath?: Maybe<Scalars["String"]["output"]>;
 };
+/** A data provider members connect individually, with the token's organization's configuration of it. */
+type ConfigurableDataProvider = {
+    __typename?: "ConfigurableDataProvider";
+    /** How accounts authenticate with this data provider. */
+    authMethods: Array<Scalars["String"]["output"]>;
+    /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */
+    availableScopes: Array<Scalars["String"]["output"]>;
+    /** The non-secret configuration values pinned for the token's organization. */
+    config: Array<DataProviderConfigEntry>;
+    /** The configuration fields the provider declares. */
+    configFields: Array<DataProviderConfigField>;
+    createdAt: Scalars["DateTime"]["output"];
+    /** The redacted OAuth application credentials configured for the token's organization. */
+    credentials: DataProviderCredentials;
+    /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */
+    credentialsType: Scalars["String"]["output"];
+    /** The scopes the developer configured, before any organization override. */
+    defaultScopes: Array<Scalars["String"]["output"]>;
+    description?: Maybe<Scalars["String"]["output"]>;
+    /** Whether members may connect this provider: the organization's override when one exists, otherwise the developer default. */
+    enabled: Scalars["Boolean"]["output"];
+    /** The URL of the provider logo for dark backgrounds, when one is served. */
+    iconDarkUrl?: Maybe<Scalars["String"]["output"]>;
+    /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */
+    iconSlug?: Maybe<Scalars["String"]["output"]>;
+    /** The URL of the provider logo for light backgrounds, when one is served. */
+    iconUrl?: Maybe<Scalars["String"]["output"]>;
+    id: Scalars["ID"]["output"];
+    integrationType: Scalars["String"]["output"];
+    name: Scalars["String"]["output"];
+    /** The organization's override when set, otherwise the developer default. */
+    scopes?: Maybe<Array<Scalars["String"]["output"]>>;
+    slug: Scalars["String"]["output"];
+    /** The configuration state of the data provider: `valid`, `invalid`, or `requested`. */
+    state: Scalars["String"]["output"];
+    updatedAt: Scalars["DateTime"]["output"];
+};
+type ConfigurableDataProviderList = {
+    __typename?: "ConfigurableDataProviderList";
+    data: Array<ConfigurableDataProvider>;
+    listMetadata: ListMetadata;
+};
 /** Input for confirming an email change with the verification code. */
 type ConfirmEmailChangeInput = {
     /** The verification code sent to the new email address. */
@@ -185,9 +246,27 @@ type ConnectDataProviderWithClientCredentialsInput = {
     clientSecret: Scalars["String"]["input"];
     /** Values for the provider’s connection configuration fields. */
     config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
+    /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */
+    connectedAccountId?: InputMaybe<Scalars["ID"]["input"]>;
+    /** Set to Add to create another connection. Omit for permanent compatibility behavior. */
+    connectionIntent?: InputMaybe<ConnectionIntent>;
     /** The data provider to connect the authenticated user to. */
     dataProviderId: Scalars["ID"]["input"];
 };
+type ConnectOrganizationDataProviderWithClientCredentialsInput = {
+    /** The OAuth client ID issued by the data provider. Only data providers whose `authMethods` include `client_credentials` can be connected this way. */
+    clientId: Scalars["String"]["input"];
+    /** The OAuth client secret issued by the data provider, shared by every member of the organization. Write-only: it is stored encrypted and never returned. */
+    clientSecret: Scalars["String"]["input"];
+    /** Values for the provider’s connection configuration fields. */
+    config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
+    /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */
+    connectedAccountId?: InputMaybe<Scalars["ID"]["input"]>;
+    /** Set to Add to create another connection. Omit for permanent compatibility behavior. */
+    connectionIntent?: InputMaybe<ConnectionIntent>;
+    /** The organization-owned data provider to connect (`organizationDataProviders`). */
+    dataProviderId: Scalars["ID"]["input"];
+};
 /** An OAuth profile linked to the authenticated user. */
 type ConnectedAccount = {
     __typename?: "ConnectedAccount";
@@ -204,10 +283,18 @@ type Connection = {
     __typename?: "Connection";
     createdAt: Scalars["DateTime"]["output"];
     id: Scalars["ID"]["output"];
+    /** The most recent sign-in session through this connection, if any. */
+    lastSession?: Maybe<SsoConnectionSession>;
+    /** The most recently expired SAML certificate when the connection has no valid certificate left, if any. Always null for OpenID Connect connections. */
+    latestExpiredCertificate?: Maybe<X509Certificate>;
+    /** The connection's longest-lived unexpired SAML certificate when it expires within the next three months, if any. Null when a certificate valid beyond that window exists. Always null for OpenID Connect connections. */
+    latestExpiringCertificate?: Maybe<X509Certificate>;
     /** A human-readable name for the connection. */
     name: Scalars["String"]["output"];
     /** The organization the connection belongs to. */
     organizationId?: Maybe<Scalars["ID"]["output"]>;
+    /** Whether the connection speaks SAML or OpenID Connect. */
+    providerTag: SsoProviderTag;
     /** Whether the connection has completed its IdP setup and can authenticate users (equivalent to an `Active` state). */
     setupComplete: Scalars["Boolean"]["output"];
     /** The connection's IdP setup status. `Active` indicates setup is complete; other states indicate where the connection is in its setup flow. */
@@ -216,10 +303,21 @@ type Connection = {
     type: ConnectionType;
     updatedAt: Scalars["DateTime"]["output"];
 };
+/** An explicit request to add another connection or reauthorize one exact connection. Omit it for permanent compatibility behavior. */
+type ConnectionIntent = "Add" | "Reauthorize";
 /** Enum represents the state of the connection. */
 type ConnectionState = "Active" | "Deleting" | "Inactive" | "Validating";
 /** Enum represents the type of connection. */
 type ConnectionType = "ADFSSAML" | "AdpOidc" | "AppleOAuth" | "Auth0Migration" | "Auth0SAML" | "AzureSAML" | "BitbucketOAuth" | "CasSAML" | "ClassLinkSAML" | "CleverOIDC" | "CloudflareSAML" | "CyberArkSAML" | "DiscordOAuth" | "DuoSAML" | "EntraIdOIDC" | "GenericOIDC" | "GenericSAML" | "GitLabOAuth" | "GithubOAuth" | "GoogleOAuth" | "GoogleOIDC" | "GoogleSAML" | "GrokOAuth" | "IntuitOAuth" | "JumpCloudSAML" | "KeycloakSAML" | "LastPassSAML" | "LinkedInOAuth" | "LoginGovOidc" | "MagicLink" | "MicrosoftOAuth" | "MiniOrangeSAML" | "NetIqSAML" | "OktaOIDC" | "OktaSAML" | "OneLoginSAML" | "OracleSAML" | "PingFederateSAML" | "PingOneSAML" | "RipplingSAML" | "SalesforceOAuth" | "SalesforceSAML" | "ShibbolethGenericSAML" | "ShibbolethSAML" | "SimpleSamlPhpSAML" | "SlackOAuth" | "TestIdp" | "VMwareSAML" | "VercelMarketplaceOAuth" | "VercelOAuth" | "XOAuth" | "XeroOAuth";
+/** Input for creating an API key. The organization is taken from the token, never from an argument. */
+type CreateApiKeyInput = {
+    /** When the key should expire. Must be in the future. Omit for a key that never expires. */
+    expiresAt?: InputMaybe<Scalars["DateTime"]["input"]>;
+    /** The human-readable name of the key. */
+    name: Scalars["String"]["input"];
+    /** The permission slugs to grant the key. Each slug must be enabled for API keys in the environment, and must be a permission the caller itself holds. Defaults to no permissions. */
+    permissions?: InputMaybe<Array<Scalars["String"]["input"]>>;
+};
 type CreateAuditLogExportInput = {
     actions?: InputMaybe<Array<Scalars["String"]["input"]>>;
     actorIds?: InputMaybe<Array<Scalars["String"]["input"]>>;
@@ -242,15 +340,30 @@ type CreateDataProviderAuthorizationResult = DataProviderAuthorization | DataPro
 type CreateDataProviderConnectionInput = {
     /** The API key issued by the data provider. Only data providers whose `authMethods` include `api_key` can be connected this way; OAuth providers are connected through the widget's authorization flow. */
     apiKey: Scalars["String"]["input"];
+    /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */
+    connectedAccountId?: InputMaybe<Scalars["ID"]["input"]>;
+    /** Set to Add to create another connection. Omit for permanent compatibility behavior. */
+    connectionIntent?: InputMaybe<ConnectionIntent>;
     /** The data provider to connect the authenticated user to. */
     dataProviderId: Scalars["ID"]["input"];
 };
+type CreateOrganizationApiKeyResult = ApiKeyPermissionsNotHeld | ApiKeyPermissionsUnsupportedForToken | InvalidApiKeyExpiration | InvalidApiKeyName | InvalidApiKeyPermissions | OrganizationApiKeyCreated;
 type CreateOrganizationDataProviderAuthorizationInput = {
     /** Values for the provider’s connect-time configuration fields. Omit when the provider declares none. */
     config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
     /** The organization-owned data provider to authorize (`organizationDataProviders`). */
     dataProviderId: Scalars["ID"]["input"];
 };
+type CreateOrganizationDataProviderConnectionInput = {
+    /** The API key issued by the data provider, shared by every member of the organization. Only data providers whose `authMethods` include `api_key` can be connected this way. Write-only: it is stored encrypted and never returned. */
+    apiKey: Scalars["String"]["input"];
+    /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */
+    connectedAccountId?: InputMaybe<Scalars["ID"]["input"]>;
+    /** Set to Add to create another connection. Omit for permanent compatibility behavior. */
+    connectionIntent?: InputMaybe<ConnectionIntent>;
+    /** The organization-owned data provider to connect (`organizationDataProviders`). */
+    dataProviderId: Scalars["ID"]["input"];
+};
 /** Input for setting a password on an account that does not yet have one (e.g. signed up via OAuth). */
 type CreatePasswordInput = {
     /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */
@@ -275,6 +388,7 @@ type CreateSsoConnectionInput = {
     /** The identity provider type of the connection to create. */
     type: ConnectionType;
 };
+type CreateUserApiKeyResult = ApiKeyPermissionsNotHeld | ApiKeyPermissionsUnsupportedForToken | InvalidApiKeyExpiration | InvalidApiKeyName | InvalidApiKeyPermissions | UserApiKeyCreated;
 /** The current email was verified successfully. */
 type CurrentEmailVerified = {
     __typename?: "CurrentEmailVerified";
@@ -288,15 +402,29 @@ type DailyEmailQuotaExceeded = {
     __typename?: "DailyEmailQuotaExceeded";
     message: Scalars["String"]["output"];
 };
+/** Whether a data installation is the compatibility connection or a standard connection. */
+type DataInstallationConnectionRole = "Compatibility" | "Standard";
 /** A third-party data provider configured for the current environment. */
 type DataProvider = {
     __typename?: "DataProvider";
     /** How accounts authenticate with this data provider. */
     authMethods: Array<Scalars["String"]["output"]>;
+    /** The non-secret configuration values pinned for the token's organization (or by the developer, for a provider whose credentials the developer manages). */
+    config: Array<DataProviderConfigEntry>;
+    /** The configuration fields the provider declares. */
+    configFields: Array<DataProviderConfigField>;
     createdAt: Scalars["DateTime"]["output"];
+    /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */
+    credentialsType: Scalars["String"]["output"];
     description?: Maybe<Scalars["String"]["output"]>;
-    /** Whether the data provider is enabled in the environment. */
+    /** Whether the data provider is enabled for the token's organization: it must be enabled in the environment and not disabled by the organization's override. */
     enabled: Scalars["Boolean"]["output"];
+    /** The URL of the provider logo for dark backgrounds, when one is served. */
+    iconDarkUrl?: Maybe<Scalars["String"]["output"]>;
+    /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */
+    iconSlug?: Maybe<Scalars["String"]["output"]>;
+    /** The URL of the provider logo for light backgrounds, when one is served. */
+    iconUrl?: Maybe<Scalars["String"]["output"]>;
     id: Scalars["ID"]["output"];
     /** The provider type this data provider was created from. */
     integrationType: Scalars["String"]["output"];
@@ -357,6 +485,30 @@ type DataProviderConfigEntryInput = {
     /** The value to set for the field. */
     value: Scalars["String"]["input"];
 };
+/** A configuration field a data provider declares, describing a value collected when the provider is configured or connected. */
+type DataProviderConfigField = {
+    __typename?: "DataProviderConfigField";
+    /** The value used when the field is left unset. */
+    default?: Maybe<Scalars["String"]["output"]>;
+    description?: Maybe<Scalars["String"]["output"]>;
+    /** An example value, for display only. */
+    example?: Maybe<Scalars["String"]["output"]>;
+    /** The name of the field. Matches `name` on the corresponding config entry. */
+    key: Scalars["String"]["output"];
+    /** The label to show for the field. */
+    label: Scalars["String"]["output"];
+    /** The position of the field relative to its siblings. */
+    order?: Maybe<Scalars["Int"]["output"]>;
+    /** A regular expression the value must match. */
+    pattern?: Maybe<Scalars["String"]["output"]>;
+    /** The flags to apply `pattern` with (`i` and/or `u`). */
+    patternFlags?: Maybe<Scalars["String"]["output"]>;
+    required: Scalars["Boolean"]["output"];
+    /** Whether the value is set once for the data provider (`integration`) or collected from each account that connects (`installation`). */
+    scope: Scalars["String"]["output"];
+    /** Whether the value is sensitive, so it is masked on input. Secret `installation`-scope values are never read back on a connection. */
+    secret?: Maybe<Scalars["Boolean"]["output"]>;
+};
 /** The supplied configuration does not satisfy the provider’s declared fields. */
 type DataProviderConfigInvalid = {
     __typename?: "DataProviderConfigInvalid";
@@ -387,11 +539,27 @@ type DataProviderConnected = {
     __typename?: "DataProviderConnected";
     connection: DataProviderConnection;
 };
-/** A connection between a data provider and the authenticated user's account. */
+/** A connection between a data provider and a user or organization. */
 type DataProviderConnection = {
     __typename?: "DataProviderConnection";
+    /** A mutable, non-unique display name for this connection. */
+    accountDisplayName?: Maybe<Scalars["String"]["output"]>;
+    /** A best-effort provider account identifier used for correlation, not connection selection. */
+    accountIdentifier?: Maybe<Scalars["String"]["output"]>;
+    /** The last four characters of the API key of an `api_key` connection, to recognise it by. The key itself is never returned. */
+    apiKeyLast4?: Maybe<Scalars["String"]["output"]>;
     /** How the connection authenticates: `oauth`, `api_key`, or `client_credentials`. */
     authMethod: Scalars["String"]["output"];
+    /** Whether the connection can be used right now: `available`, or `needs_admin_attention` when it must be re-authorized first. */
+    availability: Scalars["String"]["output"];
+    /** The OAuth client ID of a `client_credentials` connection. Null for other auth methods. */
+    clientId?: Maybe<Scalars["String"]["output"]>;
+    /** The last four characters of the OAuth client secret of a `client_credentials` connection, to recognise it by. The secret itself is never returned. */
+    clientSecretLast4?: Maybe<Scalars["String"]["output"]>;
+    /** The non-secret connection-scope configuration values supplied when a `client_credentials` connection was created. Empty for other auth methods. */
+    config: Array<DataProviderConfigEntry>;
+    /** Whether this is the compatibility connection or a standard connection. */
+    connectionRole: DataInstallationConnectionRole;
     createdAt: Scalars["DateTime"]["output"];
     /** The data provider this connection was created for. */
     dataProviderId: Scalars["ID"]["output"];
@@ -406,7 +574,7 @@ type DataProviderConnection = {
     updatedAt: Scalars["DateTime"]["output"];
     userId?: Maybe<Scalars["ID"]["output"]>;
 };
-/** The user already has a connection to this data provider that authenticates differently, so it must be disconnected first. */
+/** The connection owner already has a connection to this data provider that authenticates differently, so it must be disconnected first. */
 type DataProviderConnectionAuthMethodConflict = {
     __typename?: "DataProviderConnectionAuthMethodConflict";
     /** How the existing connection authenticates. */
@@ -417,6 +585,20 @@ type DataProviderConnectionList = {
     data: Array<DataProviderConnection>;
     listMetadata: ListMetadata;
 };
+/** The OAuth application credentials configured for a data provider in the token's organization, redacted to what an admin needs to recognise them. */
+type DataProviderCredentials = {
+    __typename?: "DataProviderCredentials";
+    /** The OAuth client ID the organization supplied. Null unless the organization brings its own credentials. */
+    clientId?: Maybe<Scalars["String"]["output"]>;
+    /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */
+    credentialsType: Scalars["String"]["output"];
+    /** Whether the organization has supplied its own OAuth client credentials. Always false for a provider whose credentials the developer manages. */
+    hasCredentials: Scalars["Boolean"]["output"];
+    /** The last four characters of the OAuth client secret the organization supplied, to recognise it by. The secret itself is never returned. */
+    redactedClientSecret?: Maybe<Scalars["String"]["output"]>;
+    /** The redirect URI to register with the provider when creating an OAuth application. */
+    redirectUri: Scalars["String"]["output"];
+};
 type DataProviderList = {
     __typename?: "DataProviderList";
     data: Array<DataProvider>;
@@ -440,6 +622,10 @@ type Directory = {
     createdAt: Scalars["DateTime"]["output"];
     externalKey: Scalars["String"]["output"];
     id: Scalars["ID"]["output"];
+    /** When the most recent sync run for the directory was last updated, or null if no sync run has started. */
+    lastSyncRunAt?: Maybe<Scalars["DateTime"]["output"]>;
+    /** Counts of the users and groups provisioned through the directory. */
+    metadata: DirectoryMetadata;
     name: Scalars["String"]["output"];
     organizationId: Scalars["ID"]["output"];
     /** The linking state of the directory. */
@@ -470,6 +656,12 @@ type DirectoryList = {
     data: Array<Directory>;
     listMetadata: ListMetadata;
 };
+/** Counts of the users and groups provisioned through a directory. */
+type DirectoryMetadata = {
+    __typename?: "DirectoryMetadata";
+    groups: Scalars["Int"]["output"];
+    users: DirectoryUsersMetadata;
+};
 /** A user provisioned through a Directory Sync connection. */
 type DirectoryUser = {
     __typename?: "DirectoryUser";
@@ -492,6 +684,12 @@ type DirectoryUserList = {
     data: Array<DirectoryUser>;
     listMetadata: ListMetadata;
 };
+/** Counts of the users provisioned through a directory, by state. */
+type DirectoryUsersMetadata = {
+    __typename?: "DirectoryUsersMetadata";
+    active: Scalars["Int"]["output"];
+    inactive: Scalars["Int"]["output"];
+};
 /** The DNS name server provider detected for a domain. */
 type DomainVerificationNameServer = "AwsRoute53" | "CloudFlare" | "GoDaddy" | "GoogleDomains" | "Other";
 /** The elevated access token has expired. The user must re-verify their identity. */
@@ -560,6 +758,15 @@ type EnrollTotpInput = {
     elevatedAccessToken: Scalars["String"]["input"];
 };
 type EnrollTotpResult = ElevatedAccessTokenExpired | ElevatedAccessTokenInvalid | TotpAlreadyEnrolled | TotpFactor;
+/** Input for expiring an API key. Expiring revokes the key while retaining it and its audit trail; use the delete mutations to remove it. */
+type ExpireApiKeyInput = {
+    /** The ID of the key to expire. */
+    apiKeyId: Scalars["ID"]["input"];
+    /** When the key should expire. A future date schedules expiration; `null` clears any scheduled expiration; omitting the field, or passing a date in the past, revokes the key immediately. */
+    expiresAt?: InputMaybe<Scalars["DateTime"]["input"]>;
+};
+type ExpireOrganizationApiKeyResult = ApiKeyAlreadyExpired | OrganizationApiKeyExpired;
+type ExpireUserApiKeyResult = ApiKeyAlreadyExpired | UserApiKeyExpired;
 /** A feature flag defined in the project that owns the environment the token was issued for. Mirrors the Feature Flag exposed by the REST feature flags API. */
 type Flag = {
     __typename?: "Flag";
@@ -598,6 +805,23 @@ type IncorrectPassword = {
     __typename?: "IncorrectPassword";
     _placeholder: Scalars["Boolean"]["output"];
 };
+/** The requested expiration is not valid. */
+type InvalidApiKeyExpiration = {
+    __typename?: "InvalidApiKeyExpiration";
+    message: Scalars["String"]["output"];
+};
+/** The provided name is not a valid API key name. */
+type InvalidApiKeyName = {
+    __typename?: "InvalidApiKeyName";
+    message: Scalars["String"]["output"];
+};
+/** One or more requested permission slugs are not enabled for API keys of this kind in the environment. */
+type InvalidApiKeyPermissions = {
+    __typename?: "InvalidApiKeyPermissions";
+    /** The permission slugs that were rejected. */
+    invalidPermissions: Array<Scalars["String"]["output"]>;
+    message: Scalars["String"]["output"];
+};
 type InvalidAuditLogExportDateRange = {
     __typename?: "InvalidAuditLogExportDateRange";
     message: Scalars["String"]["output"];
@@ -718,6 +942,8 @@ type Mutation = {
     confirmEmailChange: ConfirmEmailChangeResult;
     /** Connect the authenticated user to a data provider with OAuth client credentials the user supplies. Replaces the credentials when the user already has a client-credentials connection to the data provider, so this is both the connect and the reconnect path. The credentials are stored encrypted and never returned. */
     connectDataProviderWithClientCredentials: ConnectDataProviderResult;
+    /** Connect the token's organization to an organization-owned data provider with OAuth client credentials, producing one connection shared by every member. Replaces the credentials when the organization already has a client-credentials connection to the data provider, so this is both the connect and the reconnect path. The credentials are stored encrypted and never returned. */
+    connectOrganizationDataProviderWithClientCredentials: ConnectDataProviderResult;
     /** Mint a short-lived link that starts an Admin Portal session for the token's organization, scoped to a single setup flow. */
     createAdminPortalLink: AdminPortalLink;
     createAuditLogExport: CreateAuditLogExportResult;
@@ -725,8 +951,12 @@ type Mutation = {
     createDataProviderAuthorization: CreateDataProviderAuthorizationResult;
     /** Connect the authenticated user to a data provider with an API key the user supplies. Replaces the API key when the user already has an API-key connection to the data provider. */
     createDataProviderConnection: DataProviderConnection;
+    /** Create an API key owned by the token's organization. The plaintext secret is returned exactly once, in this response. */
+    createOrganizationApiKey: CreateOrganizationApiKeyResult;
     /** Start an OAuth authorization connecting the token's organization to an organization-owned data provider, producing one connection shared by every member. A handoff is always required: the member completing the flow must confirm it explicitly because the resulting connection is not their own. */
     createOrganizationDataProviderAuthorization: CreateDataProviderAuthorizationResult;
+    /** Connect the token's organization to an organization-owned data provider with an API key, producing one connection shared by every member. Replaces the API key when the organization already has an API-key connection to the data provider. */
+    createOrganizationDataProviderConnection: DataProviderConnection;
     /** Add a domain to the token's organization and begin DNS verification. */
     createOrganizationDomain: OrganizationDomain;
     /** Set a password for the authenticated user who does not yet have one (e.g. signed up via OAuth). Validates against the environment password policy. */
@@ -735,8 +965,14 @@ type Mutation = {
     createRole: Role;
     /** Create an SSO connection for the token’s organization. */
     createSsoConnection: Connection;
+    /** Create an API key owned by the token user within the organization the token was issued for. The plaintext secret is returned exactly once, in this response. */
+    createUserApiKey: CreateUserApiKeyResult;
     /** Disconnect one of the authenticated user's data provider connections, revoking the stored credentials. */
     deleteDataProviderConnection: Scalars["ID"]["output"];
+    /** Delete an API key owned by the token's organization and return the deleted key. Unlike expiring, this removes the key entirely. */
+    deleteOrganizationApiKey: OrganizationApiKey;
+    /** Disconnect one of the token organization's shared data provider connections, revoking the stored credentials for every member. */
+    deleteOrganizationDataProviderConnection: Scalars["ID"]["output"];
     /** Delete a domain belonging to the token's organization and return it. */
     deleteOrganizationDomain: OrganizationDomain;
     /** Remove the specified passkey from the authenticated user's account. */
@@ -745,8 +981,14 @@ type Mutation = {
     deleteRole: RoleDeleted;
     /** Delete an SSO connection belonging to the token’s organization. */
     deleteSsoConnection: Scalars["ID"]["output"];
+    /** Delete a user-scoped API key and return the deleted key. Unlike expiring, this removes the key entirely. */
+    deleteUserApiKey: UserApiKey;
     /** Create a TOTP factor and return the secret and QR URI for the user to scan. This is step 1 of TOTP enrollment. */
     enrollTotp: EnrollTotpResult;
+    /** Revoke an API key owned by the token's organization by setting its expiration. The key and its audit trail are retained; use `deleteOrganizationApiKey` to remove it. */
+    expireOrganizationApiKey: ExpireOrganizationApiKeyResult;
+    /** Revoke a user-scoped API key by setting its expiration. The key and its audit trail are retained; use `deleteUserApiKey` to remove it. */
+    expireUserApiKey: ExpireUserApiKeyResult;
     /** Invite a user to the organization the token was issued for, assigning a role and sending the invitation email. */
     inviteUser: InviteUserResult;
     /** Begin passkey (WebAuthn) registration for the authenticated user by returning the credential creation options. This is step 1 of the registration ceremony; complete it with `verifyPasskey`. */
@@ -759,7 +1001,7 @@ type Mutation = {
     resendInvitation: ResendInvitationResult;
     /** Restart verification for a domain belonging to the token's organization. */
     reverifyOrganizationDomain: OrganizationDomain;
-    /** Revokes all active sessions for the authenticated user except the current one. */
+    /** Revokes all active sessions for the authenticated user except the current one and, if provided, `input.currentSessionId`. */
     revokeAllSessions: RevokeAllSessionsResult;
     /** Revoke a pending invitation for the organization the token was issued for. */
     revokeInvitation: RevokeInvitationResult;
@@ -773,6 +1015,8 @@ type Mutation = {
     setDataProviderConfiguration: SetDataProviderConfigurationResult;
     /** Enable or disable a data provider for the token's organization. Disabling it hides the data provider from the organization's users and stops new connections; existing connections stay readable so they can be disconnected. */
     setDataProviderEnabled: DataProvider;
+    /** Write an organization-owned data provider's configuration for the token's organization: whether the organization's shared connection is enabled, the scopes it requests, the organization's own OAuth client credentials, and any non-secret configuration values the provider declares. Fields left out are unchanged. */
+    setOrganizationDataProviderConfiguration: SetDataProviderConfigurationResult;
     /** Update an organization member's roles within the organization the token was issued for. When multiple roles are enabled, all provided role slugs are assigned; otherwise only the first is used. */
     updateMemberRole: UpdateMemberRoleResult;
     /** Change the password for the authenticated user. Requires the current password for verification and validates the new password against the environment password policy. */
@@ -799,6 +1043,9 @@ type MutationConfirmEmailChangeArgs = {
 type MutationConnectDataProviderWithClientCredentialsArgs = {
     input: ConnectDataProviderWithClientCredentialsInput;
 };
+type MutationConnectOrganizationDataProviderWithClientCredentialsArgs = {
+    input: ConnectOrganizationDataProviderWithClientCredentialsInput;
+};
 type MutationCreateAdminPortalLinkArgs = {
     intent: AdminPortalLinkIntent;
 };
@@ -811,9 +1058,15 @@ type MutationCreateDataProviderAuthorizationArgs = {
 type MutationCreateDataProviderConnectionArgs = {
     input: CreateDataProviderConnectionInput;
 };
+type MutationCreateOrganizationApiKeyArgs = {
+    input: CreateApiKeyInput;
+};
 type MutationCreateOrganizationDataProviderAuthorizationArgs = {
     input: CreateOrganizationDataProviderAuthorizationInput;
 };
+type MutationCreateOrganizationDataProviderConnectionArgs = {
+    input: CreateOrganizationDataProviderConnectionInput;
+};
 type MutationCreateOrganizationDomainArgs = {
     domain: Scalars["String"]["input"];
 };
@@ -826,9 +1079,18 @@ type MutationCreateRoleArgs = {
 type MutationCreateSsoConnectionArgs = {
     input: CreateSsoConnectionInput;
 };
+type MutationCreateUserApiKeyArgs = {
+    input: CreateApiKeyInput;
+};
 type MutationDeleteDataProviderConnectionArgs = {
     id: Scalars["ID"]["input"];
 };
+type MutationDeleteOrganizationApiKeyArgs = {
+    apiKeyId: Scalars["ID"]["input"];
+};
+type MutationDeleteOrganizationDataProviderConnectionArgs = {
+    id: Scalars["ID"]["input"];
+};
 type MutationDeleteOrganizationDomainArgs = {
     id: Scalars["ID"]["input"];
 };
@@ -841,9 +1103,18 @@ type MutationDeleteRoleArgs = {
 type MutationDeleteSsoConnectionArgs = {
     id: Scalars["ID"]["input"];
 };
+type MutationDeleteUserApiKeyArgs = {
+    apiKeyId: Scalars["ID"]["input"];
+};
 type MutationEnrollTotpArgs = {
     input: EnrollTotpInput;
 };
+type MutationExpireOrganizationApiKeyArgs = {
+    input: ExpireApiKeyInput;
+};
+type MutationExpireUserApiKeyArgs = {
+    input: ExpireApiKeyInput;
+};
 type MutationInviteUserArgs = {
     input: InviteUserInput;
 };
@@ -862,6 +1133,9 @@ type MutationResendInvitationArgs = {
 type MutationReverifyOrganizationDomainArgs = {
     id: Scalars["ID"]["input"];
 };
+type MutationRevokeAllSessionsArgs = {
+    input?: InputMaybe<RevokeAllSessionsInput>;
+};
 type MutationRevokeInvitationArgs = {
     input: RevokeInvitationInput;
 };
@@ -877,6 +1151,9 @@ type MutationSetDataProviderConfigurationArgs = {
 type MutationSetDataProviderEnabledArgs = {
     input: SetDataProviderEnabledInput;
 };
+type MutationSetOrganizationDataProviderConfigurationArgs = {
+    input: SetOrganizationDataProviderConfigurationInput;
+};
 type MutationUpdateMemberRoleArgs = {
     input: UpdateMemberRoleInput;
 };
@@ -927,6 +1204,40 @@ type Organization = {
     name: Scalars["String"]["output"];
     updatedAt: Scalars["DateTime"]["output"];
 };
+/** An API key owned by the organization the token was issued for. A tenant-level credential: it is not tied to any user. */
+type OrganizationApiKey = {
+    __typename?: "OrganizationApiKey";
+    createdAt: Scalars["DateTime"]["output"];
+    /** When the key expires. A key with an expiration in the past is revoked and can no longer authenticate. */
+    expiresAt?: Maybe<Scalars["DateTime"]["output"]>;
+    id: Scalars["ID"]["output"];
+    /** When the key was last used to authenticate, if ever. */
+    lastUsedAt?: Maybe<Scalars["DateTime"]["output"]>;
+    /** The human-readable name of the key. */
+    name: Scalars["String"]["output"];
+    /** A redacted form of the secret, safe to display. The secret itself is only ever returned when the key is created. */
+    obfuscatedValue: Scalars["String"]["output"];
+    /** The permission slugs the key carries. */
+    permissions: Array<Scalars["String"]["output"]>;
+    updatedAt: Scalars["DateTime"]["output"];
+};
+/** The organization API key was created. */
+type OrganizationApiKeyCreated = {
+    __typename?: "OrganizationApiKeyCreated";
+    apiKey: OrganizationApiKey;
+    /** The plaintext secret, returned exactly once at creation. It is never retrievable again — no query or other mutation returns it. */
+    value: Scalars["String"]["output"];
+};
+/** The expiration of the organization API key was updated. The key is retained. */
+type OrganizationApiKeyExpired = {
+    __typename?: "OrganizationApiKeyExpired";
+    apiKey: OrganizationApiKey;
+};
+type OrganizationApiKeyList = {
+    __typename?: "OrganizationApiKeyList";
+    data: Array<OrganizationApiKey>;
+    listMetadata: ListMetadata;
+};
 /** This organization is not allowed to send invites. */
 type OrganizationBlockedFromSendingInvites = {
     __typename?: "OrganizationBlockedFromSendingInvites";
@@ -937,13 +1248,39 @@ type OrganizationBlockedFromSendingInvites = {
 type OrganizationDataProvider = {
     __typename?: "OrganizationDataProvider";
     authMethods: Array<Scalars["String"]["output"]>;
-    /** The organization's single shared connection, when it has authorized this data provider. */
+    /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */
+    availableScopes: Array<Scalars["String"]["output"]>;
+    /** The actions the organization may take on this data provider right now. */
+    capabilities: OrganizationDataProviderCapabilities;
+    /** The non-secret configuration values pinned for the token's organization (or by the developer, for a provider whose credentials the developer manages). */
+    config: Array<DataProviderConfigEntry>;
+    /** The configuration fields the provider declares. */
+    configFields: Array<DataProviderConfigField>;
+    /** Whether the provider can be connected: always true when the developer manages the OAuth application, otherwise true once the organization has supplied a full credential pair. */
+    configured: Scalars["Boolean"]["output"];
+    /** Every shared connection the organization holds to this data provider, in creation order. */
+    connectedAccounts: Array<DataProviderConnection>;
+    /** The organization's sole shared connection, when it has exactly one. Use `connectedAccounts` when several may exist. */
     connection?: Maybe<DataProviderConnection>;
     createdAt: Scalars["DateTime"]["output"];
+    /** The redacted OAuth application credentials configured for the token's organization, seeding the credentials dialog. */
+    credentials: DataProviderCredentials;
+    /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */
+    credentialsType: Scalars["String"]["output"];
+    /** The scopes the developer configured, before any organization override. */
+    defaultScopes: Array<Scalars["String"]["output"]>;
     description?: Maybe<Scalars["String"]["output"]>;
+    /** Who disabled the provider when `enabled` is false: `developer` (the environment) or `organization` (the organization override). Null while enabled. */
+    disabledSource?: Maybe<Scalars["String"]["output"]>;
     enabled: Scalars["Boolean"]["output"];
     /** Whether the organization has supplied its own OAuth client credentials for this data provider. Always false for a provider whose credentials the developer manages. */
     hasCredentials: Scalars["Boolean"]["output"];
+    /** The URL of the provider logo for dark backgrounds, when one is served. */
+    iconDarkUrl?: Maybe<Scalars["String"]["output"]>;
+    /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */
+    iconSlug?: Maybe<Scalars["String"]["output"]>;
+    /** The URL of the provider logo for light backgrounds, when one is served. */
+    iconUrl?: Maybe<Scalars["String"]["output"]>;
     id: Scalars["ID"]["output"];
     integrationType: Scalars["String"]["output"];
     name: Scalars["String"]["output"];
@@ -952,6 +1289,20 @@ type OrganizationDataProvider = {
     state: Scalars["String"]["output"];
     updatedAt: Scalars["DateTime"]["output"];
 };
+/** The actions the token's organization may take on a data provider right now. */
+type OrganizationDataProviderCapabilities = {
+    __typename?: "OrganizationDataProviderCapabilities";
+    /** Whether the organization may change the configuration of the data provider. */
+    canConfigure: Scalars["Boolean"]["output"];
+    /** Whether the organization may create a shared connection to the data provider. */
+    canConnect: Scalars["Boolean"]["output"];
+    /** Whether the organization may disconnect a shared connection. */
+    canDisconnect: Scalars["Boolean"]["output"];
+    /** Whether the organization may re-authorize a shared connection that needs it. */
+    canReauthorize: Scalars["Boolean"]["output"];
+    /** Whether the organization may replace its shared connection's API key or client credentials. */
+    canUpdateCredentials: Scalars["Boolean"]["output"];
+};
 type OrganizationDataProviderList = {
     __typename?: "OrganizationDataProviderList";
     data: Array<OrganizationDataProvider>;
@@ -1000,12 +1351,18 @@ type OrganizationInvitationStatus = "Accepted" | "Expired" | "Pending" | "Revoke
 /** An organization member — a user with their membership status and assigned roles. */
 type OrganizationMember = {
     __typename?: "OrganizationMember";
+    /** The actions the calling user may take on this member. Computed relative to the caller: empty for the caller themselves and for members whose permissions exceed the caller’s. */
+    actions: Array<OrganizationMemberAction>;
     createdAt: Scalars["DateTime"]["output"];
     email: Scalars["String"]["output"];
     emailVerified: Scalars["Boolean"]["output"];
     firstName?: Maybe<Scalars["String"]["output"]>;
     /** The user ID of the member. */
     id: Scalars["ID"]["output"];
+    /** Whether this member is the calling user. */
+    isCurrentUser: Scalars["Boolean"]["output"];
+    /** Whether this member is provisioned by a directory. Directory-managed memberships cannot be revoked. */
+    isDirectoryManaged: Scalars["Boolean"]["output"];
     /** Timestamp of the member's most recent session activity. */
     lastActivityAt?: Maybe<Scalars["DateTime"]["output"]>;
     lastName?: Maybe<Scalars["String"]["output"]>;
@@ -1013,6 +1370,8 @@ type OrganizationMember = {
     roles: Array<OrganizationMemberRole>;
     status: OrganizationMemberStatus;
 };
+/** An action the calling user is allowed to take on an organization member. */
+type OrganizationMemberAction = "EditRole" | "ResendInvite" | "RevokeInvite" | "RevokeMembership";
 /** A paginated list of organization members. */
 type OrganizationMemberList = {
     __typename?: "OrganizationMemberList";
@@ -1169,6 +1528,8 @@ type Query = {
     branding: Branding;
     /** Placeholder query for the Client GraphQL API scaffold. Returns a static value and is replaced by real resolvers. */
     clientApiStatus: Scalars["String"]["output"];
+    /** List the data providers the token's organization can configure for its members, with the organization's current configuration of each. */
+    configurableDataProviders: ConfigurableDataProviderList;
     /** Return a data provider by ID within the token's environment. */
     dataProvider: DataProvider;
     /** Report whether an authorization attempt is still outstanding. Poll this with the `state` returned when the authorization was created while the popup is open; it flips to `connecting: false` once the provider callback has been handled or the attempt expired. */
@@ -1201,6 +1562,8 @@ type Query = {
     me: User;
     /** Returns an organization by ID within the token's environment. */
     organization: Organization;
+    /** List the active API keys owned by the token's organization. Secrets are never included. */
+    organizationApiKeys: OrganizationApiKeyList;
     /** List the data providers the token's organization connects on behalf of all its members, with the organization's shared connection when it has one. */
     organizationDataProviders: OrganizationDataProviderList;
     /** Return a domain by ID within the token's organization, including its verification status. */
@@ -1221,12 +1584,16 @@ type Query = {
     roles: RolesResult;
     /** List active sessions for the authenticated user. Requires a session token. */
     sessions: Array<Session>;
+    /** List the data providers the token's organization has connected for all its members, with the shared connections the caller may use. Available to any active member of the organization. */
+    sharedDataProviders: SharedDataProviderList;
     /** Returns an SSO connection by ID, including its IdP setup status, provided it belongs to the token's organization. */
     ssoConnection: Connection;
     /** List the SSO connections belonging to the organization the token was issued for. */
     ssoConnections: Array<Connection>;
     /** Returns a user by ID, provided they are a member of the token's organization. */
     user: User;
+    /** List the active user-scoped API keys in the token's organization. Returns only the token user's own keys unless the token holds the organization-wide user API key grant. Secrets are never included. */
+    userApiKeys: UserApiKeyList;
 };
 type QueryAuditEventArgs = {
     id: Scalars["ID"]["input"];
@@ -1241,6 +1608,12 @@ type QueryAuditEventsArgs = {
 type QueryAuditLogExportArgs = {
     id: Scalars["ID"]["input"];
 };
+type QueryConfigurableDataProvidersArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+};
 type QueryDataProviderArgs = {
     id: Scalars["ID"]["input"];
 };
@@ -1314,6 +1687,13 @@ type QueryFlagsArgs = {
 type QueryOrganizationArgs = {
     id: Scalars["ID"]["input"];
 };
+type QueryOrganizationApiKeysArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+};
 type QueryOrganizationDataProvidersArgs = {
     after?: InputMaybe<Scalars["String"]["input"]>;
     before?: InputMaybe<Scalars["String"]["input"]>;
@@ -1347,12 +1727,26 @@ type QueryPermissionsArgs = {
 type QueryRoleArgs = {
     id: Scalars["ID"]["input"];
 };
+type QuerySharedDataProvidersArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    supportsMultipleConnections?: InputMaybe<Scalars["Boolean"]["input"]>;
+};
 type QuerySsoConnectionArgs = {
     id: Scalars["ID"]["input"];
 };
 type QueryUserArgs = {
     id: Scalars["ID"]["input"];
 };
+type QueryUserApiKeysArgs = {
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+};
 /** Input for beginning passkey (WebAuthn) registration. */
 type RegisterPasskeyInput = {
     /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */
@@ -1380,6 +1774,11 @@ type ResendInvitationNotFound = {
     userId: Scalars["ID"]["output"];
 };
 type ResendInvitationResult = InvitationResent | InviteeAlreadyAccepted | InviteeEmailNotDeliverable | ResendInvitationNotFound;
+/** Input for revoking all sessions. */
+type RevokeAllSessionsInput = {
+    /** The ID of the session to keep active in addition to the session the request was authenticated with. Use this when the token is not itself a user session. Ignored unless it is one of the authenticated user’s own active sessions. */
+    currentSessionId?: InputMaybe<Scalars["ID"]["input"]>;
+};
 type RevokeAllSessionsResult = AllSessionsRevoked;
 type RevokeInvitationInput = {
     /** The ID of the user whose pending invitation should be revoked. */
@@ -1491,6 +1890,78 @@ type SetDataProviderEnabledInput = {
     /** Whether the data provider is available to the organization the token was issued for. */
     enabled: Scalars["Boolean"]["input"];
 };
+type SetOrganizationDataProviderConfigurationInput = {
+    /** The organization's own OAuth client ID. Must be supplied together with `clientSecret`. */
+    clientId?: InputMaybe<Scalars["String"]["input"]>;
+    /** The organization's own OAuth client secret. Write-only: it is stored encrypted and never returned; clients read `hasCredentials` instead. */
+    clientSecret?: InputMaybe<Scalars["String"]["input"]>;
+    /** Non-secret configuration values declared by the provider. */
+    config?: InputMaybe<Array<DataProviderConfigEntryInput>>;
+    /** The organization-owned data provider to configure (`organizationDataProviders`). Configuration always applies to the token's organization; it cannot be set for another one. */
+    dataProviderId: Scalars["ID"]["input"];
+    /** Whether the organization's shared connection to the data provider is enabled. */
+    enabled?: InputMaybe<Scalars["Boolean"]["input"]>;
+    /** The scopes the organization requests. Only providers where the organization brings its own OAuth credentials may widen beyond the defaults. */
+    scopes?: InputMaybe<Array<Scalars["String"]["input"]>>;
+};
+/** A data provider the token's organization has connected on behalf of all its members, with the shared connections a member may use. */
+type SharedDataProvider = {
+    __typename?: "SharedDataProvider";
+    /** The organization's shared connections to the provider that the caller may use. Never empty: providers without a usable shared connection are not listed. */
+    connectedAccounts: Array<SharedDataProviderConnection>;
+    createdAt: Scalars["DateTime"]["output"];
+    description?: Maybe<Scalars["String"]["output"]>;
+    /** The URL of the provider's icon for dark backgrounds. */
+    iconDarkUrl?: Maybe<Scalars["String"]["output"]>;
+    /** The slug of the icon the widget displays for the provider. */
+    iconSlug?: Maybe<Scalars["String"]["output"]>;
+    /** The URL of the provider's icon. */
+    iconUrl?: Maybe<Scalars["String"]["output"]>;
+    id: Scalars["ID"]["output"];
+    /** The provider type this data provider was created from. */
+    integrationType: Scalars["String"]["output"];
+    /** The display name of the provider. */
+    name: Scalars["String"]["output"];
+    /** The stable identifier for the provider. */
+    slug: Scalars["String"]["output"];
+    updatedAt: Scalars["DateTime"]["output"];
+};
+/** One of the organization's shared connections to a data provider, as visible to any active member. */
+type SharedDataProviderConnection = {
+    __typename?: "SharedDataProviderConnection";
+    /** How the connection authenticates: `oauth`, `api_key`, or `client_credentials`. */
+    authMethod: Scalars["String"]["output"];
+    /** Whether the connection can be used right now: `available`, or `needs_admin_attention` when an admin must re-authorize it first. */
+    availability: Scalars["String"]["output"];
+    /** Whether this is the compatibility connection or a standard connection. */
+    connectionRole: DataInstallationConnectionRole;
+    createdAt: Scalars["DateTime"]["output"];
+    /** The data provider this connection was created for. */
+    dataProviderId: Scalars["ID"]["output"];
+    /** The slug of the connected data provider. */
+    dataProviderSlug: Scalars["String"]["output"];
+    id: Scalars["ID"]["output"];
+    /** The status of the connection: `connected` or `needs_reauthorization`. */
+    state: Scalars["String"]["output"];
+    updatedAt: Scalars["DateTime"]["output"];
+};
+type SharedDataProviderList = {
+    __typename?: "SharedDataProviderList";
+    data: Array<SharedDataProvider>;
+    listMetadata: ListMetadata;
+};
+/** A sign-in session initiated through an SSO connection. Mirrors the session exposed by the Widgets SSO connections API. */
+type SsoConnectionSession = {
+    __typename?: "SsoConnectionSession";
+    createdAt: Scalars["DateTime"]["output"];
+    id: Scalars["ID"]["output"];
+    /** The state the session reached. */
+    state: SsoSessionState;
+};
+/** The protocol family (SAML or OpenID Connect) of an SSO connection. */
+type SsoProviderTag = "OpenIdConnect" | "Saml";
+/** The state an SSO sign-in session reached. */
+type SsoSessionState = "Authorized" | "Failed" | "Started" | "Successful" | "Terminated" | "Timedout";
 /** The user already has a verified TOTP factor enrolled. */
 type TotpAlreadyEnrolled = {
     __typename?: "TotpAlreadyEnrolled";
@@ -1586,6 +2057,51 @@ type UserAlreadyHasPassword = {
     __typename?: "UserAlreadyHasPassword";
     _placeholder: Scalars["Boolean"]["output"];
 };
+/** An API key owned by a member of the token's organization. A user-scoped key acts as that user, so it is never interchangeable with an organization API key. */
+type UserApiKey = {
+    __typename?: "UserApiKey";
+    createdAt: Scalars["DateTime"]["output"];
+    /** When the key expires. A key with an expiration in the past is revoked and can no longer authenticate. */
+    expiresAt?: Maybe<Scalars["DateTime"]["output"]>;
+    id: Scalars["ID"]["output"];
+    /** When the key was last used to authenticate, if ever. */
+    lastUsedAt?: Maybe<Scalars["DateTime"]["output"]>;
+    /** The human-readable name of the key. */
+    name: Scalars["String"]["output"];
+    /** A redacted form of the secret, safe to display. The secret itself is only ever returned when the key is created. */
+    obfuscatedValue: Scalars["String"]["output"];
+    owner: UserApiKeyOwner;
+    /** The permission slugs the key carries. */
+    permissions: Array<Scalars["String"]["output"]>;
+    updatedAt: Scalars["DateTime"]["output"];
+};
+/** The user-scoped API key was created. */
+type UserApiKeyCreated = {
+    __typename?: "UserApiKeyCreated";
+    apiKey: UserApiKey;
+    /** The plaintext secret, returned exactly once at creation. It is never retrievable again — no query or other mutation returns it. */
+    value: Scalars["String"]["output"];
+};
+/** The expiration of the user-scoped API key was updated. The key is retained. */
+type UserApiKeyExpired = {
+    __typename?: "UserApiKeyExpired";
+    apiKey: UserApiKey;
+};
+type UserApiKeyList = {
+    __typename?: "UserApiKeyList";
+    data: Array<UserApiKey>;
+    listMetadata: ListMetadata;
+};
+/** The userland user a user-scoped API key belongs to. */
+type UserApiKeyOwner = {
+    __typename?: "UserApiKeyOwner";
+    /** The owner's display name, falling back to their email when they have no name. */
+    displayName: Scalars["String"]["output"];
+    email: Scalars["String"]["output"];
+    firstName?: Maybe<Scalars["String"]["output"]>;
+    id: Scalars["ID"]["output"];
+    lastName?: Maybe<Scalars["String"]["output"]>;
+};
 /** The invitation was created and the email sent. */
 type UserInvited = {
     __typename?: "UserInvited";
@@ -1655,6 +2171,19 @@ type VerifyTotpInput = {
     elevatedAccessToken: Scalars["String"]["input"];
 };
 type VerifyTotpResult = ElevatedAccessTokenExpired | ElevatedAccessTokenInvalid | TotpVerificationFailed | TotpVerified;
+/** An X.509 certificate registered on a SAML connection. Mirrors the certificate exposed by the Widgets SSO connections API. */
+type X509Certificate = {
+    __typename?: "X509Certificate";
+    id: Scalars["ID"]["output"];
+    /** When an expiry notification was last sent for this certificate. */
+    lastExpiryEventSentAt?: Maybe<Scalars["DateTime"]["output"]>;
+    /** The end of the certificate validity period. */
+    notAfter?: Maybe<Scalars["DateTime"]["output"]>;
+    /** The start of the certificate validity period. */
+    notBefore?: Maybe<Scalars["DateTime"]["output"]>;
+    /** The PEM-encoded certificate. */
+    value: Scalars["String"]["output"];
+};
 type ClientApiStatusQueryVariables = Exact<{
     [key: string]: never;
 }>;
@@ -1662,11 +2191,2464 @@ type ClientApiStatusQuery = {
     __typename?: "Query";
     clientApiStatus: string;
 };
+type OrganizationDomainFieldsFragment = {
+    __typename?: "OrganizationDomain";
+    id: string;
+    organizationId: string;
+    domain: string;
+    subdomain?: string | null;
+    state: OrganizationDomainState;
+    verificationPrefix?: string | null;
+    verificationToken?: string | null;
+    nameServer: DomainVerificationNameServer;
+    createdAt: string;
+};
+type ListOrganizationDomainsQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+}>;
+type ListOrganizationDomainsQuery = {
+    __typename?: "Query";
+    organizationDomains: {
+        __typename?: "OrganizationDomainList";
+        data: Array<{
+            __typename?: "OrganizationDomain";
+            id: string;
+            organizationId: string;
+            domain: string;
+            subdomain?: string | null;
+            state: OrganizationDomainState;
+            verificationPrefix?: string | null;
+            verificationToken?: string | null;
+            nameServer: DomainVerificationNameServer;
+            createdAt: string;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type CreateOrganizationDomainMutationVariables = Exact<{
+    domain: Scalars["String"]["input"];
+}>;
+type CreateOrganizationDomainMutation = {
+    __typename?: "Mutation";
+    createOrganizationDomain: {
+        __typename?: "OrganizationDomain";
+        id: string;
+        organizationId: string;
+        domain: string;
+        subdomain?: string | null;
+        state: OrganizationDomainState;
+        verificationPrefix?: string | null;
+        verificationToken?: string | null;
+        nameServer: DomainVerificationNameServer;
+        createdAt: string;
+    };
+};
+type DeleteOrganizationDomainMutationVariables = Exact<{
+    id: Scalars["ID"]["input"];
+}>;
+type DeleteOrganizationDomainMutation = {
+    __typename?: "Mutation";
+    deleteOrganizationDomain: {
+        __typename?: "OrganizationDomain";
+        id: string;
+        organizationId: string;
+        domain: string;
+        subdomain?: string | null;
+        state: OrganizationDomainState;
+        verificationPrefix?: string | null;
+        verificationToken?: string | null;
+        nameServer: DomainVerificationNameServer;
+        createdAt: string;
+    };
+};
+type ReverifyOrganizationDomainMutationVariables = Exact<{
+    id: Scalars["ID"]["input"];
+}>;
+type ReverifyOrganizationDomainMutation = {
+    __typename?: "Mutation";
+    reverifyOrganizationDomain: {
+        __typename?: "OrganizationDomain";
+        id: string;
+        organizationId: string;
+        domain: string;
+        subdomain?: string | null;
+        state: OrganizationDomainState;
+        verificationPrefix?: string | null;
+        verificationToken?: string | null;
+        nameServer: DomainVerificationNameServer;
+        createdAt: string;
+    };
+};
+type UserFieldsFragment = {
+    __typename?: "User";
+    id: string;
+    email: string;
+    emailVerified: boolean;
+    firstName?: string | null;
+    lastName?: string | null;
+    profilePictureUrl?: string | null;
+    mfaEnabled: boolean;
+    mfaLastUsedAt?: string | null;
+    passwordSet: boolean;
+    passwordLastUsedAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+type ConnectedAccountFieldsFragment = {
+    __typename?: "ConnectedAccount";
+    id: string;
+    provider: OAuthProvider;
+    email?: string | null;
+    firstName?: string | null;
+    lastName?: string | null;
+    profilePictureUrl?: string | null;
+    lastLoginAt?: string | null;
+};
+type PasswordViolationFieldsFragment = {
+    __typename?: "PasswordViolation";
+    code: string;
+    message: string;
+    characterType?: PasswordCharacterType | null;
+    minimumLength?: number | null;
+    maximumLength?: number | null;
+    allowedSymbols?: string | null;
+    breachOccurrences?: number | null;
+    strengthWarning?: string | null;
+    strengthSuggestions: Array<string>;
+};
+type MeQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type MeQuery = {
+    __typename?: "Query";
+    me: {
+        __typename?: "User";
+        id: string;
+        email: string;
+        emailVerified: boolean;
+        firstName?: string | null;
+        lastName?: string | null;
+        profilePictureUrl?: string | null;
+        mfaEnabled: boolean;
+        mfaLastUsedAt?: string | null;
+        passwordSet: boolean;
+        passwordLastUsedAt?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        connectedAccounts: Array<{
+            __typename?: "ConnectedAccount";
+            id: string;
+            provider: OAuthProvider;
+            email?: string | null;
+            firstName?: string | null;
+            lastName?: string | null;
+            profilePictureUrl?: string | null;
+            lastLoginAt?: string | null;
+        }>;
+    };
+};
+type AuthenticationSettingsQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type AuthenticationSettingsQuery = {
+    __typename?: "Query";
+    authenticationSettings: {
+        __typename?: "AuthenticationSettings";
+        mfaEnabled: boolean;
+        mfaRequired: boolean;
+        passkeyAuthEnabled: boolean;
+        passwordAuthEnabled: boolean;
+        passwordPolicy: {
+            __typename?: "PasswordPolicy";
+            minimumLength: number;
+            minimumStrength: number;
+            rejectsBreachedPasswords: boolean;
+            requiresLowercase: boolean;
+            requiresNumber: boolean;
+            requiresSymbol: boolean;
+            requiresUppercase: boolean;
+        };
+    };
+};
+type PasskeysQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type PasskeysQuery = {
+    __typename?: "Query";
+    passkeys: Array<{
+        __typename?: "Passkey";
+        id: string;
+        createdAt: string;
+        updatedAt: string;
+        lastVerifiedAt?: string | null;
+    }>;
+};
+type UpdateProfileMutationVariables = Exact<{
+    input: UpdateProfileInput;
+}>;
+type UpdateProfileMutation = {
+    __typename?: "Mutation";
+    updateProfile: {
+        __typename: "InvalidLocale";
+    } | {
+        __typename: "ProfileUpdated";
+        user: {
+            __typename?: "User";
+            id: string;
+            email: string;
+            emailVerified: boolean;
+            firstName?: string | null;
+            lastName?: string | null;
+            profilePictureUrl?: string | null;
+            mfaEnabled: boolean;
+            mfaLastUsedAt?: string | null;
+            passwordSet: boolean;
+            passwordLastUsedAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+        };
+    };
+};
+type SendVerificationCodeMutationVariables = Exact<{
+    [key: string]: never;
+}>;
+type SendVerificationCodeMutation = {
+    __typename?: "Mutation";
+    sendVerificationCode: {
+        __typename: "DailyEmailQuotaExceeded";
+    } | {
+        __typename: "VerificationCodeSent";
+        authenticationChallengeId: string;
+        expiresAt: string;
+    };
+};
+type VerifyCurrentEmailMutationVariables = Exact<{
+    input: VerifyCurrentEmailInput;
+}>;
+type VerifyCurrentEmailMutation = {
+    __typename?: "Mutation";
+    verifyCurrentEmail: {
+        __typename: "CurrentEmailVerified";
+        elevatedAccessToken: string;
+        expiresAt: string;
+    } | {
+        __typename: "VerificationCodeExpired";
+    } | {
+        __typename: "VerificationCodeIncorrect";
+    } | {
+        __typename: "VerificationCodePreviouslyUsed";
+    } | {
+        __typename: "VerificationTooManyAttempts";
+    };
+};
+type SendEmailChangeMutationVariables = Exact<{
+    input: SendEmailChangeInput;
+}>;
+type SendEmailChangeMutation = {
+    __typename?: "Mutation";
+    sendEmailChange: {
+        __typename: "DailyEmailQuotaExceeded";
+    } | {
+        __typename: "EmailChangeNotAvailable";
+    } | {
+        __typename: "EmailChangeSent";
+        expiresAt: string;
+    } | {
+        __typename: "EmailManagedByProvider";
+    } | {
+        __typename: "EmailNotAvailable";
+    } | {
+        __typename: "IdentityVerificationExpired";
+    } | {
+        __typename: "IdentityVerificationInvalid";
+    } | {
+        __typename: "InvalidEmail";
+    };
+};
+type ConfirmEmailChangeMutationVariables = Exact<{
+    input: ConfirmEmailChangeInput;
+}>;
+type ConfirmEmailChangeMutation = {
+    __typename?: "Mutation";
+    confirmEmailChange: {
+        __typename: "EmailChangeCodeExpired";
+    } | {
+        __typename: "EmailChangeCodeIncorrect";
+    } | {
+        __typename: "EmailChangeCodePreviouslyUsed";
+    } | {
+        __typename: "EmailChangeConfirmed";
+        elevatedAccessToken: string;
+        expiresAt: string;
+        user: {
+            __typename?: "User";
+            id: string;
+            email: string;
+            emailVerified: boolean;
+            firstName?: string | null;
+            lastName?: string | null;
+            profilePictureUrl?: string | null;
+            mfaEnabled: boolean;
+            mfaLastUsedAt?: string | null;
+            passwordSet: boolean;
+            passwordLastUsedAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+        };
+    } | {
+        __typename: "EmailChangeTooManyAttempts";
+    } | {
+        __typename: "EmailManagedByProvider";
+    } | {
+        __typename: "EmailNotAvailable";
+    } | {
+        __typename: "IdentityVerificationExpired";
+    } | {
+        __typename: "IdentityVerificationInvalid";
+    } | {
+        __typename: "InvalidEmail";
+    } | {
+        __typename: "NoPendingEmailChange";
+    };
+};
+type CreatePasswordMutationVariables = Exact<{
+    input: CreatePasswordInput;
+}>;
+type CreatePasswordMutation = {
+    __typename?: "Mutation";
+    createPassword: {
+        __typename: "ElevatedAccessTokenExpired";
+    } | {
+        __typename: "ElevatedAccessTokenInvalid";
+    } | {
+        __typename: "PasswordCreated";
+        success: boolean;
+    } | {
+        __typename: "PasswordPolicyViolation";
+        code: string;
+        message: string;
+        violations: Array<{
+            __typename?: "PasswordViolation";
+            code: string;
+            message: string;
+            characterType?: PasswordCharacterType | null;
+            minimumLength?: number | null;
+            maximumLength?: number | null;
+            allowedSymbols?: string | null;
+            breachOccurrences?: number | null;
+            strengthWarning?: string | null;
+            strengthSuggestions: Array<string>;
+        }>;
+    } | {
+        __typename: "UserAlreadyHasPassword";
+    };
+};
+type UpdatePasswordMutationVariables = Exact<{
+    input: UpdatePasswordInput;
+}>;
+type UpdatePasswordMutation = {
+    __typename?: "Mutation";
+    updatePassword: {
+        __typename: "IncorrectPassword";
+    } | {
+        __typename: "PasswordPolicyViolation";
+        code: string;
+        message: string;
+        violations: Array<{
+            __typename?: "PasswordViolation";
+            code: string;
+            message: string;
+            characterType?: PasswordCharacterType | null;
+            minimumLength?: number | null;
+            maximumLength?: number | null;
+            allowedSymbols?: string | null;
+            breachOccurrences?: number | null;
+            strengthWarning?: string | null;
+            strengthSuggestions: Array<string>;
+        }>;
+    } | {
+        __typename: "PasswordUpdated";
+        success: boolean;
+    };
+};
+type EnrollTotpMutationVariables = Exact<{
+    input: EnrollTotpInput;
+}>;
+type EnrollTotpMutation = {
+    __typename?: "Mutation";
+    enrollTotp: {
+        __typename: "ElevatedAccessTokenExpired";
+    } | {
+        __typename: "ElevatedAccessTokenInvalid";
+    } | {
+        __typename: "TotpAlreadyEnrolled";
+    } | {
+        __typename: "TotpFactor";
+        authenticationChallengeId: string;
+        authenticationFactorId: string;
+        secret: string;
+        uri: string;
+        qrCode: string;
+    };
+};
+type VerifyTotpMutationVariables = Exact<{
+    input: VerifyTotpInput;
+}>;
+type VerifyTotpMutation = {
+    __typename?: "Mutation";
+    verifyTotp: {
+        __typename: "ElevatedAccessTokenExpired";
+    } | {
+        __typename: "ElevatedAccessTokenInvalid";
+    } | {
+        __typename: "TotpVerificationFailed";
+    } | {
+        __typename: "TotpVerified";
+        success: boolean;
+    };
+};
+type RemoveMfaFactorMutationVariables = Exact<{
+    input: RemoveMfaFactorInput;
+}>;
+type RemoveMfaFactorMutation = {
+    __typename?: "Mutation";
+    removeMfaFactor: {
+        __typename: "ElevatedAccessTokenExpired";
+    } | {
+        __typename: "ElevatedAccessTokenInvalid";
+    } | {
+        __typename: "MfaFactorRemoved";
+        success: boolean;
+    } | {
+        __typename: "NoMfaFactorsEnrolled";
+    };
+};
+type SessionFieldsFragment = {
+    __typename?: "Session";
+    id: string;
+    isCurrent: boolean;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+    organizationId?: string | null;
+    lastActivityAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    state: {
+        __typename?: "SessionState";
+        tag: string;
+        expiresAt?: string | null;
+    };
+    currentLocation?: {
+        __typename?: "SessionLocation";
+        cityName: string;
+        countryISOCode: string;
+    } | null;
+};
+type SessionsQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type SessionsQuery = {
+    __typename?: "Query";
+    sessions: Array<{
+        __typename?: "Session";
+        id: string;
+        isCurrent: boolean;
+        ipAddress?: string | null;
+        userAgent?: string | null;
+        organizationId?: string | null;
+        lastActivityAt?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        state: {
+            __typename?: "SessionState";
+            tag: string;
+            expiresAt?: string | null;
+        };
+        currentLocation?: {
+            __typename?: "SessionLocation";
+            cityName: string;
+            countryISOCode: string;
+        } | null;
+    }>;
+};
+type RevokeSessionMutationVariables = Exact<{
+    input: RevokeSessionInput;
+}>;
+type RevokeSessionMutation = {
+    __typename?: "Mutation";
+    revokeSession: {
+        __typename: "SessionNotFound";
+    } | {
+        __typename: "SessionRevoked";
+        session: {
+            __typename?: "Session";
+            id: string;
+            isCurrent: boolean;
+            ipAddress?: string | null;
+            userAgent?: string | null;
+            organizationId?: string | null;
+            lastActivityAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            state: {
+                __typename?: "SessionState";
+                tag: string;
+                expiresAt?: string | null;
+            };
+            currentLocation?: {
+                __typename?: "SessionLocation";
+                cityName: string;
+                countryISOCode: string;
+            } | null;
+        };
+    };
+};
+type RevokeAllSessionsMutationVariables = Exact<{
+    input?: InputMaybe<RevokeAllSessionsInput>;
+}>;
+type RevokeAllSessionsMutation = {
+    __typename?: "Mutation";
+    revokeAllSessions: {
+        __typename: "AllSessionsRevoked";
+        success: boolean;
+    };
+};
+type OrganizationMemberFieldsFragment = {
+    __typename?: "OrganizationMember";
+    id: string;
+    email: string;
+    emailVerified: boolean;
+    firstName?: string | null;
+    lastName?: string | null;
+    profilePictureUrl?: string | null;
+    status: OrganizationMemberStatus;
+    lastActivityAt?: string | null;
+    createdAt: string;
+    actions: Array<OrganizationMemberAction>;
+    isCurrentUser: boolean;
+    isDirectoryManaged: boolean;
+    roles: Array<{
+        __typename?: "OrganizationMemberRole";
+        slug: string;
+        name: string;
+    }>;
+};
+type OrganizationInvitationFieldsFragment = {
+    __typename?: "OrganizationInvitation";
+    id: string;
+    email: string;
+    status: OrganizationInvitationStatus;
+    roleSlug?: string | null;
+    expiresAt: string;
+    createdAt: string;
+};
+type RoleFieldsFragment = {
+    __typename?: "Role";
+    id: string;
+    slug: string;
+    name: string;
+    description?: string | null;
+    isDefault: boolean;
+    createdAt: string;
+    updatedAt: string;
+};
+type ListOrganizationMembershipsQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    roleSlug?: InputMaybe<Scalars["String"]["input"]>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+}>;
+type ListOrganizationMembershipsQuery = {
+    __typename?: "Query";
+    organizationMemberships: {
+        __typename?: "OrganizationMemberList";
+        data: Array<{
+            __typename?: "OrganizationMember";
+            id: string;
+            email: string;
+            emailVerified: boolean;
+            firstName?: string | null;
+            lastName?: string | null;
+            profilePictureUrl?: string | null;
+            status: OrganizationMemberStatus;
+            lastActivityAt?: string | null;
+            createdAt: string;
+            actions: Array<OrganizationMemberAction>;
+            isCurrentUser: boolean;
+            isDirectoryManaged: boolean;
+            roles: Array<{
+                __typename?: "OrganizationMemberRole";
+                slug: string;
+                name: string;
+            }>;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type ListRolesQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type ListRolesQuery = {
+    __typename?: "Query";
+    roles: {
+        __typename?: "RolesResult";
+        multipleRolesEnabled: boolean;
+        roles: Array<{
+            __typename?: "Role";
+            id: string;
+            slug: string;
+            name: string;
+            description?: string | null;
+            isDefault: boolean;
+            createdAt: string;
+            updatedAt: string;
+        }>;
+    };
+};
+type InviteUserMutationVariables = Exact<{
+    input: InviteUserInput;
+}>;
+type InviteUserMutation = {
+    __typename?: "Mutation";
+    inviteUser: {
+        __typename: "InvalidInvitationExpiry";
+    } | {
+        __typename: "InvalidInviteeEmail";
+    } | {
+        __typename: "InvalidInviteeRole";
+    } | {
+        __typename: "InviteeAlreadyInvited";
+    } | {
+        __typename: "InviteeAlreadyMember";
+    } | {
+        __typename: "InviteeEmailNotDeliverable";
+    } | {
+        __typename: "OrganizationBlockedFromSendingInvites";
+    } | {
+        __typename: "UserInvited";
+        invitation: {
+            __typename?: "OrganizationInvitation";
+            id: string;
+            email: string;
+            status: OrganizationInvitationStatus;
+            roleSlug?: string | null;
+            expiresAt: string;
+            createdAt: string;
+        };
+    };
+};
+type UpdateMemberRoleMutationVariables = Exact<{
+    input: UpdateMemberRoleInput;
+}>;
+type UpdateMemberRoleMutation = {
+    __typename?: "Mutation";
+    updateMemberRole: {
+        __typename: "MemberNotFound";
+    } | {
+        __typename: "MemberRoleUpdated";
+        member: {
+            __typename?: "OrganizationMember";
+            id: string;
+            email: string;
+            emailVerified: boolean;
+            firstName?: string | null;
+            lastName?: string | null;
+            profilePictureUrl?: string | null;
+            status: OrganizationMemberStatus;
+            lastActivityAt?: string | null;
+            createdAt: string;
+            actions: Array<OrganizationMemberAction>;
+            isCurrentUser: boolean;
+            isDirectoryManaged: boolean;
+            roles: Array<{
+                __typename?: "OrganizationMemberRole";
+                slug: string;
+                name: string;
+            }>;
+        };
+    } | {
+        __typename: "RoleNotFound";
+        roleSlugs: Array<string>;
+    };
+};
+type RemoveMemberMutationVariables = Exact<{
+    input: RemoveMemberInput;
+}>;
+type RemoveMemberMutation = {
+    __typename?: "Mutation";
+    removeMember: {
+        __typename: "MemberIsManagedByDirectory";
+    } | {
+        __typename: "MemberNotFound";
+    } | {
+        __typename: "MemberRemoved";
+        userId: string;
+    };
+};
+type ResendInvitationMutationVariables = Exact<{
+    input: ResendInvitationInput;
+}>;
+type ResendInvitationMutation = {
+    __typename?: "Mutation";
+    resendInvitation: {
+        __typename: "InvitationResent";
+        invitation: {
+            __typename?: "OrganizationInvitation";
+            id: string;
+            email: string;
+            status: OrganizationInvitationStatus;
+            roleSlug?: string | null;
+            expiresAt: string;
+            createdAt: string;
+        };
+    } | {
+        __typename: "InviteeAlreadyAccepted";
+    } | {
+        __typename: "InviteeEmailNotDeliverable";
+    } | {
+        __typename: "ResendInvitationNotFound";
+    };
+};
+type RevokeInvitationMutationVariables = Exact<{
+    input: RevokeInvitationInput;
+}>;
+type RevokeInvitationMutation = {
+    __typename?: "Mutation";
+    revokeInvitation: {
+        __typename: "InvitationNotFound";
+    } | {
+        __typename: "InvitationNotPending";
+    } | {
+        __typename: "InvitationRevoked";
+        invitation: {
+            __typename?: "OrganizationInvitation";
+            id: string;
+            email: string;
+            status: OrganizationInvitationStatus;
+            roleSlug?: string | null;
+            expiresAt: string;
+            createdAt: string;
+        };
+    };
+};
+type ListUserOrganizationsQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type ListUserOrganizationsQuery = {
+    __typename?: "Query";
+    organizations: Array<{
+        __typename?: "UserOrganization";
+        id: string;
+        name: string;
+        isCurrent: boolean;
+    }>;
+};
+type DirectoryFieldsFragment = {
+    __typename?: "Directory";
+    id: string;
+    name: string;
+    organizationId: string;
+    externalKey: string;
+    state: string;
+    type: string;
+    lastSyncRunAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metadata: {
+        __typename?: "DirectoryMetadata";
+        groups: number;
+        users: {
+            __typename?: "DirectoryUsersMetadata";
+            active: number;
+        };
+    };
+};
+type ListDirectoryConnectionsQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+}>;
+type ListDirectoryConnectionsQuery = {
+    __typename?: "Query";
+    directoryConnections: {
+        __typename?: "DirectoryList";
+        data: Array<{
+            __typename?: "Directory";
+            id: string;
+            name: string;
+            organizationId: string;
+            externalKey: string;
+            state: string;
+            type: string;
+            lastSyncRunAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            metadata: {
+                __typename?: "DirectoryMetadata";
+                groups: number;
+                users: {
+                    __typename?: "DirectoryUsersMetadata";
+                    active: number;
+                };
+            };
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type GetDirectoryConnectionQueryVariables = Exact<{
+    id: Scalars["ID"]["input"];
+}>;
+type GetDirectoryConnectionQuery = {
+    __typename?: "Query";
+    directoryConnection: {
+        __typename?: "Directory";
+        id: string;
+        name: string;
+        organizationId: string;
+        externalKey: string;
+        state: string;
+        type: string;
+        lastSyncRunAt?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        metadata: {
+            __typename?: "DirectoryMetadata";
+            groups: number;
+            users: {
+                __typename?: "DirectoryUsersMetadata";
+                active: number;
+            };
+        };
+    };
+};
+type ConnectionFieldsFragment = {
+    __typename?: "Connection";
+    id: string;
+    name: string;
+    organizationId?: string | null;
+    type: ConnectionType;
+    providerTag: SsoProviderTag;
+    state: ConnectionState;
+    setupComplete: boolean;
+    createdAt: string;
+    updatedAt: string;
+    lastSession?: {
+        __typename?: "SsoConnectionSession";
+        id: string;
+        createdAt: string;
+        state: SsoSessionState;
+    } | null;
+    latestExpiringCertificate?: {
+        __typename?: "X509Certificate";
+        id: string;
+        notAfter?: string | null;
+    } | null;
+    latestExpiredCertificate?: {
+        __typename?: "X509Certificate";
+        id: string;
+        notAfter?: string | null;
+    } | null;
+};
+type ListSsoConnectionsQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type ListSsoConnectionsQuery = {
+    __typename?: "Query";
+    ssoConnections: Array<{
+        __typename?: "Connection";
+        id: string;
+        name: string;
+        organizationId?: string | null;
+        type: ConnectionType;
+        providerTag: SsoProviderTag;
+        state: ConnectionState;
+        setupComplete: boolean;
+        createdAt: string;
+        updatedAt: string;
+        lastSession?: {
+            __typename?: "SsoConnectionSession";
+            id: string;
+            createdAt: string;
+            state: SsoSessionState;
+        } | null;
+        latestExpiringCertificate?: {
+            __typename?: "X509Certificate";
+            id: string;
+            notAfter?: string | null;
+        } | null;
+        latestExpiredCertificate?: {
+            __typename?: "X509Certificate";
+            id: string;
+            notAfter?: string | null;
+        } | null;
+    }>;
+};
+type GetSsoConnectionQueryVariables = Exact<{
+    id: Scalars["ID"]["input"];
+}>;
+type GetSsoConnectionQuery = {
+    __typename?: "Query";
+    ssoConnection: {
+        __typename?: "Connection";
+        id: string;
+        name: string;
+        organizationId?: string | null;
+        type: ConnectionType;
+        providerTag: SsoProviderTag;
+        state: ConnectionState;
+        setupComplete: boolean;
+        createdAt: string;
+        updatedAt: string;
+        lastSession?: {
+            __typename?: "SsoConnectionSession";
+            id: string;
+            createdAt: string;
+            state: SsoSessionState;
+        } | null;
+        latestExpiringCertificate?: {
+            __typename?: "X509Certificate";
+            id: string;
+            notAfter?: string | null;
+        } | null;
+        latestExpiredCertificate?: {
+            __typename?: "X509Certificate";
+            id: string;
+            notAfter?: string | null;
+        } | null;
+    };
+};
+type DataProviderConfigFieldFieldsFragment = {
+    __typename?: "DataProviderConfigField";
+    key: string;
+    label: string;
+    required: boolean;
+    scope: string;
+    description?: string | null;
+    example?: string | null;
+    pattern?: string | null;
+    patternFlags?: string | null;
+    order?: number | null;
+    secret?: boolean | null;
+    default?: string | null;
+};
+type DataProviderFieldsFragment = {
+    __typename?: "DataProvider";
+    id: string;
+    slug: string;
+    name: string;
+    description?: string | null;
+    integrationType: string;
+    authMethods: Array<string>;
+    credentialsType: string;
+    scopes?: Array<string> | null;
+    state: string;
+    enabled: boolean;
+    iconSlug?: string | null;
+    iconUrl?: string | null;
+    iconDarkUrl?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    configFields: Array<{
+        __typename?: "DataProviderConfigField";
+        key: string;
+        label: string;
+        required: boolean;
+        scope: string;
+        description?: string | null;
+        example?: string | null;
+        pattern?: string | null;
+        patternFlags?: string | null;
+        order?: number | null;
+        secret?: boolean | null;
+        default?: string | null;
+    }>;
+    config: Array<{
+        __typename?: "DataProviderConfigEntry";
+        name: string;
+        value: string;
+    }>;
+};
+type DataProviderConnectionFieldsFragment = {
+    __typename?: "DataProviderConnection";
+    id: string;
+    dataProviderId: string;
+    dataProviderSlug: string;
+    connectionRole: DataInstallationConnectionRole;
+    accountIdentifier?: string | null;
+    accountDisplayName?: string | null;
+    authMethod: string;
+    scopes: Array<string>;
+    state: string;
+    availability: string;
+    apiKeyLast4?: string | null;
+    clientId?: string | null;
+    clientSecretLast4?: string | null;
+    userId?: string | null;
+    organizationId?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    config: Array<{
+        __typename?: "DataProviderConfigEntry";
+        name: string;
+        value: string;
+    }>;
+};
+type ListDataProvidersQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+}>;
+type ListDataProvidersQuery = {
+    __typename?: "Query";
+    dataProviders: {
+        __typename?: "DataProviderList";
+        data: Array<{
+            __typename?: "DataProvider";
+            id: string;
+            slug: string;
+            name: string;
+            description?: string | null;
+            integrationType: string;
+            authMethods: Array<string>;
+            credentialsType: string;
+            scopes?: Array<string> | null;
+            state: string;
+            enabled: boolean;
+            iconSlug?: string | null;
+            iconUrl?: string | null;
+            iconDarkUrl?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            configFields: Array<{
+                __typename?: "DataProviderConfigField";
+                key: string;
+                label: string;
+                required: boolean;
+                scope: string;
+                description?: string | null;
+                example?: string | null;
+                pattern?: string | null;
+                patternFlags?: string | null;
+                order?: number | null;
+                secret?: boolean | null;
+                default?: string | null;
+            }>;
+            config: Array<{
+                __typename?: "DataProviderConfigEntry";
+                name: string;
+                value: string;
+            }>;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type ListDataProviderConnectionsQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+}>;
+type ListDataProviderConnectionsQuery = {
+    __typename?: "Query";
+    dataProviderConnections: {
+        __typename?: "DataProviderConnectionList";
+        data: Array<{
+            __typename?: "DataProviderConnection";
+            id: string;
+            dataProviderId: string;
+            dataProviderSlug: string;
+            connectionRole: DataInstallationConnectionRole;
+            accountIdentifier?: string | null;
+            accountDisplayName?: string | null;
+            authMethod: string;
+            scopes: Array<string>;
+            state: string;
+            availability: string;
+            apiKeyLast4?: string | null;
+            clientId?: string | null;
+            clientSecretLast4?: string | null;
+            userId?: string | null;
+            organizationId?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            config: Array<{
+                __typename?: "DataProviderConfigEntry";
+                name: string;
+                value: string;
+            }>;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type CreateDataProviderConnectionMutationVariables = Exact<{
+    input: CreateDataProviderConnectionInput;
+}>;
+type CreateDataProviderConnectionMutation = {
+    __typename?: "Mutation";
+    createDataProviderConnection: {
+        __typename?: "DataProviderConnection";
+        id: string;
+        dataProviderId: string;
+        dataProviderSlug: string;
+        connectionRole: DataInstallationConnectionRole;
+        accountIdentifier?: string | null;
+        accountDisplayName?: string | null;
+        authMethod: string;
+        scopes: Array<string>;
+        state: string;
+        availability: string;
+        apiKeyLast4?: string | null;
+        clientId?: string | null;
+        clientSecretLast4?: string | null;
+        userId?: string | null;
+        organizationId?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        config: Array<{
+            __typename?: "DataProviderConfigEntry";
+            name: string;
+            value: string;
+        }>;
+    };
+};
+type DeleteDataProviderConnectionMutationVariables = Exact<{
+    id: Scalars["ID"]["input"];
+}>;
+type DeleteDataProviderConnectionMutation = {
+    __typename?: "Mutation";
+    deleteDataProviderConnection: string;
+};
+type SetDataProviderEnabledMutationVariables = Exact<{
+    input: SetDataProviderEnabledInput;
+}>;
+type SetDataProviderEnabledMutation = {
+    __typename?: "Mutation";
+    setDataProviderEnabled: {
+        __typename?: "DataProvider";
+        id: string;
+        slug: string;
+        name: string;
+        description?: string | null;
+        integrationType: string;
+        authMethods: Array<string>;
+        credentialsType: string;
+        scopes?: Array<string> | null;
+        state: string;
+        enabled: boolean;
+        iconSlug?: string | null;
+        iconUrl?: string | null;
+        iconDarkUrl?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        configFields: Array<{
+            __typename?: "DataProviderConfigField";
+            key: string;
+            label: string;
+            required: boolean;
+            scope: string;
+            description?: string | null;
+            example?: string | null;
+            pattern?: string | null;
+            patternFlags?: string | null;
+            order?: number | null;
+            secret?: boolean | null;
+            default?: string | null;
+        }>;
+        config: Array<{
+            __typename?: "DataProviderConfigEntry";
+            name: string;
+            value: string;
+        }>;
+    };
+};
+type DataProviderAuthorizationResultFields_DataProviderAuthorization_Fragment = {
+    __typename: "DataProviderAuthorization";
+    url: string;
+    state: string;
+    redirectToken: string;
+    handoffToken?: string | null;
+};
+type DataProviderAuthorizationResultFields_DataProviderAuthorizationUnavailable_Fragment = {
+    __typename: "DataProviderAuthorizationUnavailable";
+    message: string;
+};
+type DataProviderAuthorizationResultFields_DataProviderConfigInvalid_Fragment = {
+    __typename: "DataProviderConfigInvalid";
+    message: string;
+};
+type DataProviderAuthorizationResultFieldsFragment = DataProviderAuthorizationResultFields_DataProviderAuthorization_Fragment | DataProviderAuthorizationResultFields_DataProviderAuthorizationUnavailable_Fragment | DataProviderAuthorizationResultFields_DataProviderConfigInvalid_Fragment;
+type CreateDataProviderAuthorizationMutationVariables = Exact<{
+    input: CreateDataProviderAuthorizationInput;
+}>;
+type CreateDataProviderAuthorizationMutation = {
+    __typename?: "Mutation";
+    createDataProviderAuthorization: {
+        __typename: "DataProviderAuthorization";
+        url: string;
+        state: string;
+        redirectToken: string;
+        handoffToken?: string | null;
+    } | {
+        __typename: "DataProviderAuthorizationUnavailable";
+        message: string;
+    } | {
+        __typename: "DataProviderConfigInvalid";
+        message: string;
+    };
+};
+type CreateOrganizationDataProviderAuthorizationMutationVariables = Exact<{
+    input: CreateOrganizationDataProviderAuthorizationInput;
+}>;
+type CreateOrganizationDataProviderAuthorizationMutation = {
+    __typename?: "Mutation";
+    createOrganizationDataProviderAuthorization: {
+        __typename: "DataProviderAuthorization";
+        url: string;
+        state: string;
+        redirectToken: string;
+        handoffToken?: string | null;
+    } | {
+        __typename: "DataProviderAuthorizationUnavailable";
+        message: string;
+    } | {
+        __typename: "DataProviderConfigInvalid";
+        message: string;
+    };
+};
+type DataProviderAuthorizationStatusQueryVariables = Exact<{
+    dataProviderId: Scalars["ID"]["input"];
+    state: Scalars["String"]["input"];
+}>;
+type DataProviderAuthorizationStatusQuery = {
+    __typename?: "Query";
+    dataProviderAuthorizationStatus: {
+        __typename?: "DataProviderAuthorizationStatus";
+        state: string;
+        connecting: boolean;
+    };
+};
+type ConnectDataProviderWithClientCredentialsMutationVariables = Exact<{
+    input: ConnectDataProviderWithClientCredentialsInput;
+}>;
+type ConnectDataProviderWithClientCredentialsMutation = {
+    __typename?: "Mutation";
+    connectDataProviderWithClientCredentials: {
+        __typename: "DataProviderAuthMethodUnsupported";
+        authMethod: string;
+        supportedAuthMethods: Array<string>;
+    } | {
+        __typename: "DataProviderConfigInvalid";
+        message: string;
+    } | {
+        __typename: "DataProviderConnected";
+        connection: {
+            __typename?: "DataProviderConnection";
+            id: string;
+            dataProviderId: string;
+            dataProviderSlug: string;
+            connectionRole: DataInstallationConnectionRole;
+            accountIdentifier?: string | null;
+            accountDisplayName?: string | null;
+            authMethod: string;
+            scopes: Array<string>;
+            state: string;
+            availability: string;
+            apiKeyLast4?: string | null;
+            clientId?: string | null;
+            clientSecretLast4?: string | null;
+            userId?: string | null;
+            organizationId?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            config: Array<{
+                __typename?: "DataProviderConfigEntry";
+                name: string;
+                value: string;
+            }>;
+        };
+    } | {
+        __typename: "DataProviderConnectionAuthMethodConflict";
+        existingAuthMethod: string;
+    };
+};
+type DataProviderConfigurationFieldsFragment = {
+    __typename?: "DataProviderConfiguration";
+    dataProviderId: string;
+    dataProviderSlug: string;
+    organizationId: string;
+    enabled: boolean;
+    hasCredentials: boolean;
+    scopes?: Array<string> | null;
+    availableScopes: Array<string>;
+    updatedAt: string;
+    config: Array<{
+        __typename?: "DataProviderConfigEntry";
+        name: string;
+        value: string;
+    }>;
+};
+type SetDataProviderConfigurationMutationVariables = Exact<{
+    input: SetDataProviderConfigurationInput;
+}>;
+type SetDataProviderConfigurationMutation = {
+    __typename?: "Mutation";
+    setDataProviderConfiguration: {
+        __typename: "DataProviderConfigInvalid";
+        message: string;
+    } | {
+        __typename: "DataProviderConfiguration";
+        dataProviderId: string;
+        dataProviderSlug: string;
+        organizationId: string;
+        enabled: boolean;
+        hasCredentials: boolean;
+        scopes?: Array<string> | null;
+        availableScopes: Array<string>;
+        updatedAt: string;
+        config: Array<{
+            __typename?: "DataProviderConfigEntry";
+            name: string;
+            value: string;
+        }>;
+    };
+};
+type ListOrganizationDataProvidersQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+}>;
+type ListOrganizationDataProvidersQuery = {
+    __typename?: "Query";
+    organizationDataProviders: {
+        __typename?: "OrganizationDataProviderList";
+        data: Array<{
+            __typename?: "OrganizationDataProvider";
+            id: string;
+            slug: string;
+            name: string;
+            description?: string | null;
+            integrationType: string;
+            authMethods: Array<string>;
+            credentialsType: string;
+            scopes?: Array<string> | null;
+            defaultScopes: Array<string>;
+            availableScopes: Array<string>;
+            state: string;
+            enabled: boolean;
+            disabledSource?: string | null;
+            configured: boolean;
+            hasCredentials: boolean;
+            iconSlug?: string | null;
+            iconUrl?: string | null;
+            iconDarkUrl?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            credentials: {
+                __typename?: "DataProviderCredentials";
+                clientId?: string | null;
+                credentialsType: string;
+                hasCredentials: boolean;
+                redactedClientSecret?: string | null;
+                redirectUri: string;
+            };
+            capabilities: {
+                __typename?: "OrganizationDataProviderCapabilities";
+                canConfigure: boolean;
+                canConnect: boolean;
+                canDisconnect: boolean;
+                canReauthorize: boolean;
+                canUpdateCredentials: boolean;
+            };
+            configFields: Array<{
+                __typename?: "DataProviderConfigField";
+                key: string;
+                label: string;
+                required: boolean;
+                scope: string;
+                description?: string | null;
+                example?: string | null;
+                pattern?: string | null;
+                patternFlags?: string | null;
+                order?: number | null;
+                secret?: boolean | null;
+                default?: string | null;
+            }>;
+            config: Array<{
+                __typename?: "DataProviderConfigEntry";
+                name: string;
+                value: string;
+            }>;
+            connection?: {
+                __typename?: "DataProviderConnection";
+                id: string;
+                dataProviderId: string;
+                dataProviderSlug: string;
+                connectionRole: DataInstallationConnectionRole;
+                accountIdentifier?: string | null;
+                accountDisplayName?: string | null;
+                authMethod: string;
+                scopes: Array<string>;
+                state: string;
+                availability: string;
+                apiKeyLast4?: string | null;
+                clientId?: string | null;
+                clientSecretLast4?: string | null;
+                userId?: string | null;
+                organizationId?: string | null;
+                createdAt: string;
+                updatedAt: string;
+                config: Array<{
+                    __typename?: "DataProviderConfigEntry";
+                    name: string;
+                    value: string;
+                }>;
+            } | null;
+            connectedAccounts: Array<{
+                __typename?: "DataProviderConnection";
+                id: string;
+                dataProviderId: string;
+                dataProviderSlug: string;
+                connectionRole: DataInstallationConnectionRole;
+                accountIdentifier?: string | null;
+                accountDisplayName?: string | null;
+                authMethod: string;
+                scopes: Array<string>;
+                state: string;
+                availability: string;
+                apiKeyLast4?: string | null;
+                clientId?: string | null;
+                clientSecretLast4?: string | null;
+                userId?: string | null;
+                organizationId?: string | null;
+                createdAt: string;
+                updatedAt: string;
+                config: Array<{
+                    __typename?: "DataProviderConfigEntry";
+                    name: string;
+                    value: string;
+                }>;
+            }>;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type OrganizationDataProviderFieldsFragment = {
+    __typename?: "OrganizationDataProvider";
+    id: string;
+    slug: string;
+    name: string;
+    description?: string | null;
+    integrationType: string;
+    authMethods: Array<string>;
+    credentialsType: string;
+    scopes?: Array<string> | null;
+    defaultScopes: Array<string>;
+    availableScopes: Array<string>;
+    state: string;
+    enabled: boolean;
+    disabledSource?: string | null;
+    configured: boolean;
+    hasCredentials: boolean;
+    iconSlug?: string | null;
+    iconUrl?: string | null;
+    iconDarkUrl?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    credentials: {
+        __typename?: "DataProviderCredentials";
+        clientId?: string | null;
+        credentialsType: string;
+        hasCredentials: boolean;
+        redactedClientSecret?: string | null;
+        redirectUri: string;
+    };
+    capabilities: {
+        __typename?: "OrganizationDataProviderCapabilities";
+        canConfigure: boolean;
+        canConnect: boolean;
+        canDisconnect: boolean;
+        canReauthorize: boolean;
+        canUpdateCredentials: boolean;
+    };
+    configFields: Array<{
+        __typename?: "DataProviderConfigField";
+        key: string;
+        label: string;
+        required: boolean;
+        scope: string;
+        description?: string | null;
+        example?: string | null;
+        pattern?: string | null;
+        patternFlags?: string | null;
+        order?: number | null;
+        secret?: boolean | null;
+        default?: string | null;
+    }>;
+    config: Array<{
+        __typename?: "DataProviderConfigEntry";
+        name: string;
+        value: string;
+    }>;
+    connection?: {
+        __typename?: "DataProviderConnection";
+        id: string;
+        dataProviderId: string;
+        dataProviderSlug: string;
+        connectionRole: DataInstallationConnectionRole;
+        accountIdentifier?: string | null;
+        accountDisplayName?: string | null;
+        authMethod: string;
+        scopes: Array<string>;
+        state: string;
+        availability: string;
+        apiKeyLast4?: string | null;
+        clientId?: string | null;
+        clientSecretLast4?: string | null;
+        userId?: string | null;
+        organizationId?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        config: Array<{
+            __typename?: "DataProviderConfigEntry";
+            name: string;
+            value: string;
+        }>;
+    } | null;
+    connectedAccounts: Array<{
+        __typename?: "DataProviderConnection";
+        id: string;
+        dataProviderId: string;
+        dataProviderSlug: string;
+        connectionRole: DataInstallationConnectionRole;
+        accountIdentifier?: string | null;
+        accountDisplayName?: string | null;
+        authMethod: string;
+        scopes: Array<string>;
+        state: string;
+        availability: string;
+        apiKeyLast4?: string | null;
+        clientId?: string | null;
+        clientSecretLast4?: string | null;
+        userId?: string | null;
+        organizationId?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        config: Array<{
+            __typename?: "DataProviderConfigEntry";
+            name: string;
+            value: string;
+        }>;
+    }>;
+};
+type SetOrganizationDataProviderConfigurationMutationVariables = Exact<{
+    input: SetOrganizationDataProviderConfigurationInput;
+}>;
+type SetOrganizationDataProviderConfigurationMutation = {
+    __typename?: "Mutation";
+    setOrganizationDataProviderConfiguration: {
+        __typename: "DataProviderConfigInvalid";
+        message: string;
+    } | {
+        __typename: "DataProviderConfiguration";
+        dataProviderId: string;
+        dataProviderSlug: string;
+        organizationId: string;
+        enabled: boolean;
+        hasCredentials: boolean;
+        scopes?: Array<string> | null;
+        availableScopes: Array<string>;
+        updatedAt: string;
+        config: Array<{
+            __typename?: "DataProviderConfigEntry";
+            name: string;
+            value: string;
+        }>;
+    };
+};
+type CreateOrganizationDataProviderConnectionMutationVariables = Exact<{
+    input: CreateOrganizationDataProviderConnectionInput;
+}>;
+type CreateOrganizationDataProviderConnectionMutation = {
+    __typename?: "Mutation";
+    createOrganizationDataProviderConnection: {
+        __typename?: "DataProviderConnection";
+        id: string;
+        dataProviderId: string;
+        dataProviderSlug: string;
+        connectionRole: DataInstallationConnectionRole;
+        accountIdentifier?: string | null;
+        accountDisplayName?: string | null;
+        authMethod: string;
+        scopes: Array<string>;
+        state: string;
+        availability: string;
+        apiKeyLast4?: string | null;
+        clientId?: string | null;
+        clientSecretLast4?: string | null;
+        userId?: string | null;
+        organizationId?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        config: Array<{
+            __typename?: "DataProviderConfigEntry";
+            name: string;
+            value: string;
+        }>;
+    };
+};
+type ConnectOrganizationDataProviderWithClientCredentialsMutationVariables = Exact<{
+    input: ConnectOrganizationDataProviderWithClientCredentialsInput;
+}>;
+type ConnectOrganizationDataProviderWithClientCredentialsMutation = {
+    __typename?: "Mutation";
+    connectOrganizationDataProviderWithClientCredentials: {
+        __typename: "DataProviderAuthMethodUnsupported";
+        authMethod: string;
+        supportedAuthMethods: Array<string>;
+    } | {
+        __typename: "DataProviderConfigInvalid";
+        message: string;
+    } | {
+        __typename: "DataProviderConnected";
+        connection: {
+            __typename?: "DataProviderConnection";
+            id: string;
+            dataProviderId: string;
+            dataProviderSlug: string;
+            connectionRole: DataInstallationConnectionRole;
+            accountIdentifier?: string | null;
+            accountDisplayName?: string | null;
+            authMethod: string;
+            scopes: Array<string>;
+            state: string;
+            availability: string;
+            apiKeyLast4?: string | null;
+            clientId?: string | null;
+            clientSecretLast4?: string | null;
+            userId?: string | null;
+            organizationId?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            config: Array<{
+                __typename?: "DataProviderConfigEntry";
+                name: string;
+                value: string;
+            }>;
+        };
+    } | {
+        __typename: "DataProviderConnectionAuthMethodConflict";
+        existingAuthMethod: string;
+    };
+};
+type DeleteOrganizationDataProviderConnectionMutationVariables = Exact<{
+    id: Scalars["ID"]["input"];
+}>;
+type DeleteOrganizationDataProviderConnectionMutation = {
+    __typename?: "Mutation";
+    deleteOrganizationDataProviderConnection: string;
+};
+type RegisterPasskeyMutationVariables = Exact<{
+    input: RegisterPasskeyInput;
+}>;
+type RegisterPasskeyMutation = {
+    __typename?: "Mutation";
+    registerPasskey: {
+        __typename: "ElevatedAccessTokenExpired";
+        message: string;
+    } | {
+        __typename: "ElevatedAccessTokenInvalid";
+        message: string;
+    } | {
+        __typename: "PasskeyRegistrationOptions";
+        challengeId: string;
+        options: any;
+    };
+};
+type VerifyPasskeyMutationVariables = Exact<{
+    input: VerifyPasskeyInput;
+}>;
+type VerifyPasskeyMutation = {
+    __typename?: "Mutation";
+    verifyPasskey: {
+        __typename: "ElevatedAccessTokenExpired";
+        message: string;
+    } | {
+        __typename: "ElevatedAccessTokenInvalid";
+        message: string;
+    } | {
+        __typename: "PasskeyChallengeNotFound";
+        _placeholder: boolean;
+    } | {
+        __typename: "PasskeyVerificationFailed";
+        _placeholder: boolean;
+    } | {
+        __typename: "PasskeyVerified";
+        success: boolean;
+    };
+};
+type DeletePasskeyMutationVariables = Exact<{
+    input: DeletePasskeyInput;
+}>;
+type DeletePasskeyMutation = {
+    __typename?: "Mutation";
+    deletePasskey: {
+        __typename: "ElevatedAccessTokenExpired";
+        message: string;
+    } | {
+        __typename: "ElevatedAccessTokenInvalid";
+        message: string;
+    } | {
+        __typename: "PasskeyDeleted";
+        success: boolean;
+    } | {
+        __typename: "PasskeyNotFound";
+        _placeholder: boolean;
+    };
+};
+type CreateAdminPortalLinkMutationVariables = Exact<{
+    intent: AdminPortalLinkIntent;
+}>;
+type CreateAdminPortalLinkMutation = {
+    __typename?: "Mutation";
+    createAdminPortalLink: {
+        __typename?: "AdminPortalLink";
+        link: string;
+        intent: AdminPortalLinkIntent;
+        expiresAt: string;
+    };
+};
+type AuditLogStreamQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type AuditLogStreamQuery = {
+    __typename?: "Query";
+    auditLogStream?: {
+        __typename?: "AuditLogStream";
+        id: string;
+        auditLogTrailId: string;
+        type: AuditLogStreamType;
+        state: AuditLogStreamState;
+        errorMessage?: string | null;
+        lastSyncedEventId?: string | null;
+    } | null;
+};
+type BrandingQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type BrandingQuery = {
+    __typename?: "Query";
+    branding: {
+        __typename?: "Branding";
+        displayName: string;
+        logoLightPath?: string | null;
+        logoDarkPath?: string | null;
+        logoLightIconPath?: string | null;
+        logoDarkIconPath?: string | null;
+    };
+};
+type AuthKitSettingsQueryVariables = Exact<{
+    [key: string]: never;
+}>;
+type AuthKitSettingsQuery = {
+    __typename?: "Query";
+    authkitSettings: {
+        __typename?: "AuthKitSettings";
+        origin: string;
+    };
+};
+type ListPermissionsQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+}>;
+type ListPermissionsQuery = {
+    __typename?: "Query";
+    permissions: {
+        __typename?: "PermissionList";
+        data: Array<{
+            __typename?: "Permission";
+            id: string;
+            slug: string;
+            name: string;
+            description?: string | null;
+            system: boolean;
+            createdAt: string;
+            updatedAt: string;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type GetOrganizationDomainQueryVariables = Exact<{
+    id: Scalars["ID"]["input"];
+}>;
+type GetOrganizationDomainQuery = {
+    __typename?: "Query";
+    organizationDomain: {
+        __typename?: "OrganizationDomain";
+        id: string;
+        organizationId: string;
+        domain: string;
+        subdomain?: string | null;
+        state: OrganizationDomainState;
+        verificationPrefix?: string | null;
+        verificationToken?: string | null;
+        nameServer: DomainVerificationNameServer;
+        createdAt: string;
+    };
+};
+type SharedDataProviderFieldsFragment = {
+    __typename?: "SharedDataProvider";
+    id: string;
+    slug: string;
+    name: string;
+    description?: string | null;
+    integrationType: string;
+    iconSlug?: string | null;
+    iconUrl?: string | null;
+    iconDarkUrl?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    connectedAccounts: Array<{
+        __typename?: "SharedDataProviderConnection";
+        id: string;
+        dataProviderId: string;
+        dataProviderSlug: string;
+        authMethod: string;
+        connectionRole: DataInstallationConnectionRole;
+        state: string;
+        availability: string;
+        createdAt: string;
+        updatedAt: string;
+    }>;
+};
+type ListSharedDataProvidersQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    supportsMultipleConnections?: InputMaybe<Scalars["Boolean"]["input"]>;
+}>;
+type ListSharedDataProvidersQuery = {
+    __typename?: "Query";
+    sharedDataProviders: {
+        __typename?: "SharedDataProviderList";
+        data: Array<{
+            __typename?: "SharedDataProvider";
+            id: string;
+            slug: string;
+            name: string;
+            description?: string | null;
+            integrationType: string;
+            iconSlug?: string | null;
+            iconUrl?: string | null;
+            iconDarkUrl?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            connectedAccounts: Array<{
+                __typename?: "SharedDataProviderConnection";
+                id: string;
+                dataProviderId: string;
+                dataProviderSlug: string;
+                authMethod: string;
+                connectionRole: DataInstallationConnectionRole;
+                state: string;
+                availability: string;
+                createdAt: string;
+                updatedAt: string;
+            }>;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type ConfigurableDataProviderFieldsFragment = {
+    __typename?: "ConfigurableDataProvider";
+    id: string;
+    slug: string;
+    name: string;
+    description?: string | null;
+    integrationType: string;
+    authMethods: Array<string>;
+    credentialsType: string;
+    scopes?: Array<string> | null;
+    defaultScopes: Array<string>;
+    availableScopes: Array<string>;
+    state: string;
+    enabled: boolean;
+    iconSlug?: string | null;
+    iconUrl?: string | null;
+    iconDarkUrl?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    credentials: {
+        __typename?: "DataProviderCredentials";
+        clientId?: string | null;
+        credentialsType: string;
+        hasCredentials: boolean;
+        redactedClientSecret?: string | null;
+        redirectUri: string;
+    };
+    configFields: Array<{
+        __typename?: "DataProviderConfigField";
+        key: string;
+        label: string;
+        required: boolean;
+        scope: string;
+        description?: string | null;
+        example?: string | null;
+        pattern?: string | null;
+        patternFlags?: string | null;
+        order?: number | null;
+        secret?: boolean | null;
+        default?: string | null;
+    }>;
+    config: Array<{
+        __typename?: "DataProviderConfigEntry";
+        name: string;
+        value: string;
+    }>;
+};
+type ListConfigurableDataProvidersQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+}>;
+type ListConfigurableDataProvidersQuery = {
+    __typename?: "Query";
+    configurableDataProviders: {
+        __typename?: "ConfigurableDataProviderList";
+        data: Array<{
+            __typename?: "ConfigurableDataProvider";
+            id: string;
+            slug: string;
+            name: string;
+            description?: string | null;
+            integrationType: string;
+            authMethods: Array<string>;
+            credentialsType: string;
+            scopes?: Array<string> | null;
+            defaultScopes: Array<string>;
+            availableScopes: Array<string>;
+            state: string;
+            enabled: boolean;
+            iconSlug?: string | null;
+            iconUrl?: string | null;
+            iconDarkUrl?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            credentials: {
+                __typename?: "DataProviderCredentials";
+                clientId?: string | null;
+                credentialsType: string;
+                hasCredentials: boolean;
+                redactedClientSecret?: string | null;
+                redirectUri: string;
+            };
+            configFields: Array<{
+                __typename?: "DataProviderConfigField";
+                key: string;
+                label: string;
+                required: boolean;
+                scope: string;
+                description?: string | null;
+                example?: string | null;
+                pattern?: string | null;
+                patternFlags?: string | null;
+                order?: number | null;
+                secret?: boolean | null;
+                default?: string | null;
+            }>;
+            config: Array<{
+                __typename?: "DataProviderConfigEntry";
+                name: string;
+                value: string;
+            }>;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type OrganizationApiKeyFieldsFragment = {
+    __typename?: "OrganizationApiKey";
+    id: string;
+    name: string;
+    obfuscatedValue: string;
+    permissions: Array<string>;
+    lastUsedAt?: string | null;
+    expiresAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+type UserApiKeyFieldsFragment = {
+    __typename?: "UserApiKey";
+    id: string;
+    name: string;
+    obfuscatedValue: string;
+    permissions: Array<string>;
+    lastUsedAt?: string | null;
+    expiresAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    owner: {
+        __typename?: "UserApiKeyOwner";
+        id: string;
+        email: string;
+        firstName?: string | null;
+        lastName?: string | null;
+        displayName: string;
+    };
+};
+type ListOrganizationApiKeysQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+}>;
+type ListOrganizationApiKeysQuery = {
+    __typename?: "Query";
+    organizationApiKeys: {
+        __typename?: "OrganizationApiKeyList";
+        data: Array<{
+            __typename?: "OrganizationApiKey";
+            id: string;
+            name: string;
+            obfuscatedValue: string;
+            permissions: Array<string>;
+            lastUsedAt?: string | null;
+            expiresAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type ListUserApiKeysQueryVariables = Exact<{
+    after?: InputMaybe<Scalars["String"]["input"]>;
+    before?: InputMaybe<Scalars["String"]["input"]>;
+    limit?: InputMaybe<Scalars["Int"]["input"]>;
+    order?: InputMaybe<PaginationOrder>;
+    search?: InputMaybe<Scalars["String"]["input"]>;
+}>;
+type ListUserApiKeysQuery = {
+    __typename?: "Query";
+    userApiKeys: {
+        __typename?: "UserApiKeyList";
+        data: Array<{
+            __typename?: "UserApiKey";
+            id: string;
+            name: string;
+            obfuscatedValue: string;
+            permissions: Array<string>;
+            lastUsedAt?: string | null;
+            expiresAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            owner: {
+                __typename?: "UserApiKeyOwner";
+                id: string;
+                email: string;
+                firstName?: string | null;
+                lastName?: string | null;
+                displayName: string;
+            };
+        }>;
+        listMetadata: {
+            __typename?: "ListMetadata";
+            after?: string | null;
+            before?: string | null;
+        };
+    };
+};
+type CreateOrganizationApiKeyMutationVariables = Exact<{
+    input: CreateApiKeyInput;
+}>;
+type CreateOrganizationApiKeyMutation = {
+    __typename?: "Mutation";
+    createOrganizationApiKey: {
+        __typename: "ApiKeyPermissionsNotHeld";
+        message: string;
+        unheldPermissions: Array<string>;
+    } | {
+        __typename: "ApiKeyPermissionsUnsupportedForToken";
+        message: string;
+        requestedPermissions: Array<string>;
+    } | {
+        __typename: "InvalidApiKeyExpiration";
+        message: string;
+    } | {
+        __typename: "InvalidApiKeyName";
+        message: string;
+    } | {
+        __typename: "InvalidApiKeyPermissions";
+        message: string;
+        invalidPermissions: Array<string>;
+    } | {
+        __typename: "OrganizationApiKeyCreated";
+        value: string;
+        apiKey: {
+            __typename?: "OrganizationApiKey";
+            id: string;
+            name: string;
+            obfuscatedValue: string;
+            permissions: Array<string>;
+            lastUsedAt?: string | null;
+            expiresAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+        };
+    };
+};
+type CreateUserApiKeyMutationVariables = Exact<{
+    input: CreateApiKeyInput;
+}>;
+type CreateUserApiKeyMutation = {
+    __typename?: "Mutation";
+    createUserApiKey: {
+        __typename: "ApiKeyPermissionsNotHeld";
+        message: string;
+        unheldPermissions: Array<string>;
+    } | {
+        __typename: "ApiKeyPermissionsUnsupportedForToken";
+        message: string;
+        requestedPermissions: Array<string>;
+    } | {
+        __typename: "InvalidApiKeyExpiration";
+        message: string;
+    } | {
+        __typename: "InvalidApiKeyName";
+        message: string;
+    } | {
+        __typename: "InvalidApiKeyPermissions";
+        message: string;
+        invalidPermissions: Array<string>;
+    } | {
+        __typename: "UserApiKeyCreated";
+        value: string;
+        apiKey: {
+            __typename?: "UserApiKey";
+            id: string;
+            name: string;
+            obfuscatedValue: string;
+            permissions: Array<string>;
+            lastUsedAt?: string | null;
+            expiresAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            owner: {
+                __typename?: "UserApiKeyOwner";
+                id: string;
+                email: string;
+                firstName?: string | null;
+                lastName?: string | null;
+                displayName: string;
+            };
+        };
+    };
+};
+type ExpireOrganizationApiKeyMutationVariables = Exact<{
+    input: ExpireApiKeyInput;
+}>;
+type ExpireOrganizationApiKeyMutation = {
+    __typename?: "Mutation";
+    expireOrganizationApiKey: {
+        __typename: "ApiKeyAlreadyExpired";
+        apiKeyId: string;
+    } | {
+        __typename: "OrganizationApiKeyExpired";
+        apiKey: {
+            __typename?: "OrganizationApiKey";
+            id: string;
+            name: string;
+            obfuscatedValue: string;
+            permissions: Array<string>;
+            lastUsedAt?: string | null;
+            expiresAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+        };
+    };
+};
+type ExpireUserApiKeyMutationVariables = Exact<{
+    input: ExpireApiKeyInput;
+}>;
+type ExpireUserApiKeyMutation = {
+    __typename?: "Mutation";
+    expireUserApiKey: {
+        __typename: "ApiKeyAlreadyExpired";
+        apiKeyId: string;
+    } | {
+        __typename: "UserApiKeyExpired";
+        apiKey: {
+            __typename?: "UserApiKey";
+            id: string;
+            name: string;
+            obfuscatedValue: string;
+            permissions: Array<string>;
+            lastUsedAt?: string | null;
+            expiresAt?: string | null;
+            createdAt: string;
+            updatedAt: string;
+            owner: {
+                __typename?: "UserApiKeyOwner";
+                id: string;
+                email: string;
+                firstName?: string | null;
+                lastName?: string | null;
+                displayName: string;
+            };
+        };
+    };
+};
+type DeleteOrganizationApiKeyMutationVariables = Exact<{
+    apiKeyId: Scalars["ID"]["input"];
+}>;
+type DeleteOrganizationApiKeyMutation = {
+    __typename?: "Mutation";
+    deleteOrganizationApiKey: {
+        __typename?: "OrganizationApiKey";
+        id: string;
+        name: string;
+        obfuscatedValue: string;
+        permissions: Array<string>;
+        lastUsedAt?: string | null;
+        expiresAt?: string | null;
+        createdAt: string;
+        updatedAt: string;
+    };
+};
+type DeleteUserApiKeyMutationVariables = Exact<{
+    apiKeyId: Scalars["ID"]["input"];
+}>;
+type DeleteUserApiKeyMutation = {
+    __typename?: "Mutation";
+    deleteUserApiKey: {
+        __typename?: "UserApiKey";
+        id: string;
+        name: string;
+        obfuscatedValue: string;
+        permissions: Array<string>;
+        lastUsedAt?: string | null;
+        expiresAt?: string | null;
+        createdAt: string;
+        updatedAt: string;
+        owner: {
+            __typename?: "UserApiKeyOwner";
+            id: string;
+            email: string;
+            firstName?: string | null;
+            lastName?: string | null;
+            displayName: string;
+        };
+    };
+};
+declare const OrganizationDomainFieldsFragmentDoc = "\n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    ";
+declare const UserFieldsFragmentDoc = "\n    fragment UserFields on User {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  mfaEnabled\n  mfaLastUsedAt\n  passwordSet\n  passwordLastUsedAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const ConnectedAccountFieldsFragmentDoc = "\n    fragment ConnectedAccountFields on ConnectedAccount {\n  id\n  provider\n  email\n  firstName\n  lastName\n  profilePictureUrl\n  lastLoginAt\n}\n    ";
+declare const PasswordViolationFieldsFragmentDoc = "\n    fragment PasswordViolationFields on PasswordViolation {\n  code\n  message\n  characterType\n  minimumLength\n  maximumLength\n  allowedSymbols\n  breachOccurrences\n  strengthWarning\n  strengthSuggestions\n}\n    ";
+declare const SessionFieldsFragmentDoc = "\n    fragment SessionFields on Session {\n  id\n  isCurrent\n  ipAddress\n  userAgent\n  organizationId\n  lastActivityAt\n  createdAt\n  updatedAt\n  state {\n    tag\n    expiresAt\n  }\n  currentLocation {\n    cityName\n    countryISOCode\n  }\n}\n    ";
+declare const OrganizationMemberFieldsFragmentDoc = "\n    fragment OrganizationMemberFields on OrganizationMember {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  status\n  lastActivityAt\n  createdAt\n  actions\n  isCurrentUser\n  isDirectoryManaged\n  roles {\n    slug\n    name\n  }\n}\n    ";
+declare const OrganizationInvitationFieldsFragmentDoc = "\n    fragment OrganizationInvitationFields on OrganizationInvitation {\n  id\n  email\n  status\n  roleSlug\n  expiresAt\n  createdAt\n}\n    ";
+declare const RoleFieldsFragmentDoc = "\n    fragment RoleFields on Role {\n  id\n  slug\n  name\n  description\n  isDefault\n  createdAt\n  updatedAt\n}\n    ";
+declare const DirectoryFieldsFragmentDoc = "\n    fragment DirectoryFields on Directory {\n  id\n  name\n  organizationId\n  externalKey\n  state\n  type\n  lastSyncRunAt\n  metadata {\n    groups\n    users {\n      active\n    }\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const ConnectionFieldsFragmentDoc = "\n    fragment ConnectionFields on Connection {\n  id\n  name\n  organizationId\n  type\n  providerTag\n  state\n  setupComplete\n  lastSession {\n    id\n    createdAt\n    state\n  }\n  latestExpiringCertificate {\n    id\n    notAfter\n  }\n  latestExpiredCertificate {\n    id\n    notAfter\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const DataProviderConfigFieldFieldsFragmentDoc = "\n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    ";
+declare const DataProviderFieldsFragmentDoc = "\n    fragment DataProviderFields on DataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    \n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    ";
+declare const DataProviderAuthorizationResultFieldsFragmentDoc = "\n    fragment DataProviderAuthorizationResultFields on CreateDataProviderAuthorizationResult {\n  __typename\n  ... on DataProviderAuthorization {\n    url\n    state\n    redirectToken\n    handoffToken\n  }\n  ... on DataProviderAuthorizationUnavailable {\n    message\n  }\n  ... on DataProviderConfigInvalid {\n    message\n  }\n}\n    ";
+declare const DataProviderConfigurationFieldsFragmentDoc = "\n    fragment DataProviderConfigurationFields on DataProviderConfiguration {\n  dataProviderId\n  dataProviderSlug\n  organizationId\n  enabled\n  hasCredentials\n  scopes\n  availableScopes\n  config {\n    name\n    value\n  }\n  updatedAt\n}\n    ";
+declare const DataProviderConnectionFieldsFragmentDoc = "\n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const OrganizationDataProviderFieldsFragmentDoc = "\n    fragment OrganizationDataProviderFields on OrganizationDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  disabledSource\n  configured\n  hasCredentials\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  capabilities {\n    canConfigure\n    canConnect\n    canDisconnect\n    canReauthorize\n    canUpdateCredentials\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  connection {\n    ...DataProviderConnectionFields\n  }\n  connectedAccounts {\n    ...DataProviderConnectionFields\n  }\n  createdAt\n  updatedAt\n}\n    \n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    \n\n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const SharedDataProviderFieldsFragmentDoc = "\n    fragment SharedDataProviderFields on SharedDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  connectedAccounts {\n    id\n    dataProviderId\n    dataProviderSlug\n    authMethod\n    connectionRole\n    state\n    availability\n    createdAt\n    updatedAt\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const ConfigurableDataProviderFieldsFragmentDoc = "\n    fragment ConfigurableDataProviderFields on ConfigurableDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    \n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    ";
+declare const OrganizationApiKeyFieldsFragmentDoc = "\n    fragment OrganizationApiKeyFields on OrganizationApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const UserApiKeyFieldsFragmentDoc = "\n    fragment UserApiKeyFields on UserApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n  owner {\n    id\n    email\n    firstName\n    lastName\n    displayName\n  }\n}\n    ";
 declare const ClientApiStatusDocument = "\n    query ClientApiStatus {\n  clientApiStatus\n}\n    ";
+declare const ListOrganizationDomainsDocument = "\n    query ListOrganizationDomains($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  organizationDomains(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...OrganizationDomainFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    ";
+declare const CreateOrganizationDomainDocument = "\n    mutation CreateOrganizationDomain($domain: String!) {\n  createOrganizationDomain(domain: $domain) {\n    ...OrganizationDomainFields\n  }\n}\n    \n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    ";
+declare const DeleteOrganizationDomainDocument = "\n    mutation DeleteOrganizationDomain($id: ID!) {\n  deleteOrganizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    \n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    ";
+declare const ReverifyOrganizationDomainDocument = "\n    mutation ReverifyOrganizationDomain($id: ID!) {\n  reverifyOrganizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    \n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    ";
+declare const MeDocument = "\n    query Me {\n  me {\n    ...UserFields\n    connectedAccounts {\n      ...ConnectedAccountFields\n    }\n  }\n}\n    \n    fragment UserFields on User {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  mfaEnabled\n  mfaLastUsedAt\n  passwordSet\n  passwordLastUsedAt\n  createdAt\n  updatedAt\n}\n    \n\n    fragment ConnectedAccountFields on ConnectedAccount {\n  id\n  provider\n  email\n  firstName\n  lastName\n  profilePictureUrl\n  lastLoginAt\n}\n    ";
+declare const AuthenticationSettingsDocument = "\n    query AuthenticationSettings {\n  authenticationSettings {\n    mfaEnabled\n    mfaRequired\n    passkeyAuthEnabled\n    passwordAuthEnabled\n    passwordPolicy {\n      minimumLength\n      minimumStrength\n      rejectsBreachedPasswords\n      requiresLowercase\n      requiresNumber\n      requiresSymbol\n      requiresUppercase\n    }\n  }\n}\n    ";
+declare const PasskeysDocument = "\n    query Passkeys {\n  passkeys {\n    id\n    createdAt\n    updatedAt\n    lastVerifiedAt\n  }\n}\n    ";
+declare const UpdateProfileDocument = "\n    mutation UpdateProfile($input: UpdateProfileInput!) {\n  updateProfile(input: $input) {\n    __typename\n    ... on ProfileUpdated {\n      user {\n        ...UserFields\n      }\n    }\n  }\n}\n    \n    fragment UserFields on User {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  mfaEnabled\n  mfaLastUsedAt\n  passwordSet\n  passwordLastUsedAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const SendVerificationCodeDocument = "\n    mutation SendVerificationCode {\n  sendVerificationCode {\n    __typename\n    ... on VerificationCodeSent {\n      authenticationChallengeId\n      expiresAt\n    }\n  }\n}\n    ";
+declare const VerifyCurrentEmailDocument = "\n    mutation VerifyCurrentEmail($input: VerifyCurrentEmailInput!) {\n  verifyCurrentEmail(input: $input) {\n    __typename\n    ... on CurrentEmailVerified {\n      elevatedAccessToken\n      expiresAt\n    }\n  }\n}\n    ";
+declare const SendEmailChangeDocument = "\n    mutation SendEmailChange($input: SendEmailChangeInput!) {\n  sendEmailChange(input: $input) {\n    __typename\n    ... on EmailChangeSent {\n      expiresAt\n    }\n  }\n}\n    ";
+declare const ConfirmEmailChangeDocument = "\n    mutation ConfirmEmailChange($input: ConfirmEmailChangeInput!) {\n  confirmEmailChange(input: $input) {\n    __typename\n    ... on EmailChangeConfirmed {\n      elevatedAccessToken\n      expiresAt\n      user {\n        ...UserFields\n      }\n    }\n  }\n}\n    \n    fragment UserFields on User {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  mfaEnabled\n  mfaLastUsedAt\n  passwordSet\n  passwordLastUsedAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const CreatePasswordDocument = "\n    mutation CreatePassword($input: CreatePasswordInput!) {\n  createPassword(input: $input) {\n    __typename\n    ... on PasswordCreated {\n      success\n    }\n    ... on PasswordPolicyViolation {\n      code\n      message\n      violations {\n        ...PasswordViolationFields\n      }\n    }\n  }\n}\n    \n    fragment PasswordViolationFields on PasswordViolation {\n  code\n  message\n  characterType\n  minimumLength\n  maximumLength\n  allowedSymbols\n  breachOccurrences\n  strengthWarning\n  strengthSuggestions\n}\n    ";
+declare const UpdatePasswordDocument = "\n    mutation UpdatePassword($input: UpdatePasswordInput!) {\n  updatePassword(input: $input) {\n    __typename\n    ... on PasswordUpdated {\n      success\n    }\n    ... on PasswordPolicyViolation {\n      code\n      message\n      violations {\n        ...PasswordViolationFields\n      }\n    }\n  }\n}\n    \n    fragment PasswordViolationFields on PasswordViolation {\n  code\n  message\n  characterType\n  minimumLength\n  maximumLength\n  allowedSymbols\n  breachOccurrences\n  strengthWarning\n  strengthSuggestions\n}\n    ";
+declare const EnrollTotpDocument = "\n    mutation EnrollTotp($input: EnrollTotpInput!) {\n  enrollTotp(input: $input) {\n    __typename\n    ... on TotpFactor {\n      authenticationChallengeId\n      authenticationFactorId\n      secret\n      uri\n      qrCode\n    }\n  }\n}\n    ";
+declare const VerifyTotpDocument = "\n    mutation VerifyTotp($input: VerifyTotpInput!) {\n  verifyTotp(input: $input) {\n    __typename\n    ... on TotpVerified {\n      success\n    }\n  }\n}\n    ";
+declare const RemoveMfaFactorDocument = "\n    mutation RemoveMfaFactor($input: RemoveMfaFactorInput!) {\n  removeMfaFactor(input: $input) {\n    __typename\n    ... on MfaFactorRemoved {\n      success\n    }\n  }\n}\n    ";
+declare const SessionsDocument = "\n    query Sessions {\n  sessions {\n    ...SessionFields\n  }\n}\n    \n    fragment SessionFields on Session {\n  id\n  isCurrent\n  ipAddress\n  userAgent\n  organizationId\n  lastActivityAt\n  createdAt\n  updatedAt\n  state {\n    tag\n    expiresAt\n  }\n  currentLocation {\n    cityName\n    countryISOCode\n  }\n}\n    ";
+declare const RevokeSessionDocument = "\n    mutation RevokeSession($input: RevokeSessionInput!) {\n  revokeSession(input: $input) {\n    __typename\n    ... on SessionRevoked {\n      session {\n        ...SessionFields\n      }\n    }\n  }\n}\n    \n    fragment SessionFields on Session {\n  id\n  isCurrent\n  ipAddress\n  userAgent\n  organizationId\n  lastActivityAt\n  createdAt\n  updatedAt\n  state {\n    tag\n    expiresAt\n  }\n  currentLocation {\n    cityName\n    countryISOCode\n  }\n}\n    ";
+declare const RevokeAllSessionsDocument = "\n    mutation RevokeAllSessions($input: RevokeAllSessionsInput) {\n  revokeAllSessions(input: $input) {\n    __typename\n    ... on AllSessionsRevoked {\n      success\n    }\n  }\n}\n    ";
+declare const ListOrganizationMembershipsDocument = "\n    query ListOrganizationMemberships($after: String, $before: String, $limit: Int, $order: PaginationOrder, $roleSlug: String, $search: String) {\n  organizationMemberships(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    roleSlug: $roleSlug\n    search: $search\n  ) {\n    data {\n      ...OrganizationMemberFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment OrganizationMemberFields on OrganizationMember {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  status\n  lastActivityAt\n  createdAt\n  actions\n  isCurrentUser\n  isDirectoryManaged\n  roles {\n    slug\n    name\n  }\n}\n    ";
+declare const ListRolesDocument = "\n    query ListRoles {\n  roles {\n    multipleRolesEnabled\n    roles {\n      ...RoleFields\n    }\n  }\n}\n    \n    fragment RoleFields on Role {\n  id\n  slug\n  name\n  description\n  isDefault\n  createdAt\n  updatedAt\n}\n    ";
+declare const InviteUserDocument = "\n    mutation InviteUser($input: InviteUserInput!) {\n  inviteUser(input: $input) {\n    __typename\n    ... on UserInvited {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    \n    fragment OrganizationInvitationFields on OrganizationInvitation {\n  id\n  email\n  status\n  roleSlug\n  expiresAt\n  createdAt\n}\n    ";
+declare const UpdateMemberRoleDocument = "\n    mutation UpdateMemberRole($input: UpdateMemberRoleInput!) {\n  updateMemberRole(input: $input) {\n    __typename\n    ... on MemberRoleUpdated {\n      member {\n        ...OrganizationMemberFields\n      }\n    }\n    ... on RoleNotFound {\n      roleSlugs\n    }\n  }\n}\n    \n    fragment OrganizationMemberFields on OrganizationMember {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  status\n  lastActivityAt\n  createdAt\n  actions\n  isCurrentUser\n  isDirectoryManaged\n  roles {\n    slug\n    name\n  }\n}\n    ";
+declare const RemoveMemberDocument = "\n    mutation RemoveMember($input: RemoveMemberInput!) {\n  removeMember(input: $input) {\n    __typename\n    ... on MemberRemoved {\n      userId\n    }\n  }\n}\n    ";
+declare const ResendInvitationDocument = "\n    mutation ResendInvitation($input: ResendInvitationInput!) {\n  resendInvitation(input: $input) {\n    __typename\n    ... on InvitationResent {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    \n    fragment OrganizationInvitationFields on OrganizationInvitation {\n  id\n  email\n  status\n  roleSlug\n  expiresAt\n  createdAt\n}\n    ";
+declare const RevokeInvitationDocument = "\n    mutation RevokeInvitation($input: RevokeInvitationInput!) {\n  revokeInvitation(input: $input) {\n    __typename\n    ... on InvitationRevoked {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    \n    fragment OrganizationInvitationFields on OrganizationInvitation {\n  id\n  email\n  status\n  roleSlug\n  expiresAt\n  createdAt\n}\n    ";
+declare const ListUserOrganizationsDocument = "\n    query ListUserOrganizations {\n  organizations {\n    id\n    name\n    isCurrent\n  }\n}\n    ";
+declare const ListDirectoryConnectionsDocument = "\n    query ListDirectoryConnections($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  directoryConnections(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...DirectoryFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment DirectoryFields on Directory {\n  id\n  name\n  organizationId\n  externalKey\n  state\n  type\n  lastSyncRunAt\n  metadata {\n    groups\n    users {\n      active\n    }\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const GetDirectoryConnectionDocument = "\n    query GetDirectoryConnection($id: ID!) {\n  directoryConnection(id: $id) {\n    ...DirectoryFields\n  }\n}\n    \n    fragment DirectoryFields on Directory {\n  id\n  name\n  organizationId\n  externalKey\n  state\n  type\n  lastSyncRunAt\n  metadata {\n    groups\n    users {\n      active\n    }\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const ListSsoConnectionsDocument = "\n    query ListSsoConnections {\n  ssoConnections {\n    ...ConnectionFields\n  }\n}\n    \n    fragment ConnectionFields on Connection {\n  id\n  name\n  organizationId\n  type\n  providerTag\n  state\n  setupComplete\n  lastSession {\n    id\n    createdAt\n    state\n  }\n  latestExpiringCertificate {\n    id\n    notAfter\n  }\n  latestExpiredCertificate {\n    id\n    notAfter\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const GetSsoConnectionDocument = "\n    query GetSsoConnection($id: ID!) {\n  ssoConnection(id: $id) {\n    ...ConnectionFields\n  }\n}\n    \n    fragment ConnectionFields on Connection {\n  id\n  name\n  organizationId\n  type\n  providerTag\n  state\n  setupComplete\n  lastSession {\n    id\n    createdAt\n    state\n  }\n  latestExpiringCertificate {\n    id\n    notAfter\n  }\n  latestExpiredCertificate {\n    id\n    notAfter\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const ListDataProvidersDocument = "\n    query ListDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  dataProviders(after: $after, before: $before, limit: $limit, order: $order) {\n    data {\n      ...DataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment DataProviderFields on DataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    \n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    ";
+declare const ListDataProviderConnectionsDocument = "\n    query ListDataProviderConnections($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  dataProviderConnections(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...DataProviderConnectionFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const CreateDataProviderConnectionDocument = "\n    mutation CreateDataProviderConnection($input: CreateDataProviderConnectionInput!) {\n  createDataProviderConnection(input: $input) {\n    ...DataProviderConnectionFields\n  }\n}\n    \n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const DeleteDataProviderConnectionDocument = "\n    mutation DeleteDataProviderConnection($id: ID!) {\n  deleteDataProviderConnection(id: $id)\n}\n    ";
+declare const SetDataProviderEnabledDocument = "\n    mutation SetDataProviderEnabled($input: SetDataProviderEnabledInput!) {\n  setDataProviderEnabled(input: $input) {\n    ...DataProviderFields\n  }\n}\n    \n    fragment DataProviderFields on DataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    \n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    ";
+declare const CreateDataProviderAuthorizationDocument = "\n    mutation CreateDataProviderAuthorization($input: CreateDataProviderAuthorizationInput!) {\n  createDataProviderAuthorization(input: $input) {\n    ...DataProviderAuthorizationResultFields\n  }\n}\n    \n    fragment DataProviderAuthorizationResultFields on CreateDataProviderAuthorizationResult {\n  __typename\n  ... on DataProviderAuthorization {\n    url\n    state\n    redirectToken\n    handoffToken\n  }\n  ... on DataProviderAuthorizationUnavailable {\n    message\n  }\n  ... on DataProviderConfigInvalid {\n    message\n  }\n}\n    ";
+declare const CreateOrganizationDataProviderAuthorizationDocument = "\n    mutation CreateOrganizationDataProviderAuthorization($input: CreateOrganizationDataProviderAuthorizationInput!) {\n  createOrganizationDataProviderAuthorization(input: $input) {\n    ...DataProviderAuthorizationResultFields\n  }\n}\n    \n    fragment DataProviderAuthorizationResultFields on CreateDataProviderAuthorizationResult {\n  __typename\n  ... on DataProviderAuthorization {\n    url\n    state\n    redirectToken\n    handoffToken\n  }\n  ... on DataProviderAuthorizationUnavailable {\n    message\n  }\n  ... on DataProviderConfigInvalid {\n    message\n  }\n}\n    ";
+declare const DataProviderAuthorizationStatusDocument = "\n    query DataProviderAuthorizationStatus($dataProviderId: ID!, $state: String!) {\n  dataProviderAuthorizationStatus(dataProviderId: $dataProviderId, state: $state) {\n    state\n    connecting\n  }\n}\n    ";
+declare const ConnectDataProviderWithClientCredentialsDocument = "\n    mutation ConnectDataProviderWithClientCredentials($input: ConnectDataProviderWithClientCredentialsInput!) {\n  connectDataProviderWithClientCredentials(input: $input) {\n    __typename\n    ... on DataProviderConnected {\n      connection {\n        ...DataProviderConnectionFields\n      }\n    }\n    ... on DataProviderAuthMethodUnsupported {\n      authMethod\n      supportedAuthMethods\n    }\n    ... on DataProviderConnectionAuthMethodConflict {\n      existingAuthMethod\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    \n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const SetDataProviderConfigurationDocument = "\n    mutation SetDataProviderConfiguration($input: SetDataProviderConfigurationInput!) {\n  setDataProviderConfiguration(input: $input) {\n    __typename\n    ... on DataProviderConfiguration {\n      ...DataProviderConfigurationFields\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    \n    fragment DataProviderConfigurationFields on DataProviderConfiguration {\n  dataProviderId\n  dataProviderSlug\n  organizationId\n  enabled\n  hasCredentials\n  scopes\n  availableScopes\n  config {\n    name\n    value\n  }\n  updatedAt\n}\n    ";
+declare const ListOrganizationDataProvidersDocument = "\n    query ListOrganizationDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  organizationDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...OrganizationDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment OrganizationDataProviderFields on OrganizationDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  disabledSource\n  configured\n  hasCredentials\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  capabilities {\n    canConfigure\n    canConnect\n    canDisconnect\n    canReauthorize\n    canUpdateCredentials\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  connection {\n    ...DataProviderConnectionFields\n  }\n  connectedAccounts {\n    ...DataProviderConnectionFields\n  }\n  createdAt\n  updatedAt\n}\n    \n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    \n\n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const SetOrganizationDataProviderConfigurationDocument = "\n    mutation SetOrganizationDataProviderConfiguration($input: SetOrganizationDataProviderConfigurationInput!) {\n  setOrganizationDataProviderConfiguration(input: $input) {\n    __typename\n    ... on DataProviderConfiguration {\n      ...DataProviderConfigurationFields\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    \n    fragment DataProviderConfigurationFields on DataProviderConfiguration {\n  dataProviderId\n  dataProviderSlug\n  organizationId\n  enabled\n  hasCredentials\n  scopes\n  availableScopes\n  config {\n    name\n    value\n  }\n  updatedAt\n}\n    ";
+declare const CreateOrganizationDataProviderConnectionDocument = "\n    mutation CreateOrganizationDataProviderConnection($input: CreateOrganizationDataProviderConnectionInput!) {\n  createOrganizationDataProviderConnection(input: $input) {\n    ...DataProviderConnectionFields\n  }\n}\n    \n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const ConnectOrganizationDataProviderWithClientCredentialsDocument = "\n    mutation ConnectOrganizationDataProviderWithClientCredentials($input: ConnectOrganizationDataProviderWithClientCredentialsInput!) {\n  connectOrganizationDataProviderWithClientCredentials(input: $input) {\n    __typename\n    ... on DataProviderConnected {\n      connection {\n        ...DataProviderConnectionFields\n      }\n    }\n    ... on DataProviderAuthMethodUnsupported {\n      authMethod\n      supportedAuthMethods\n    }\n    ... on DataProviderConnectionAuthMethodConflict {\n      existingAuthMethod\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    \n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    ";
+declare const DeleteOrganizationDataProviderConnectionDocument = "\n    mutation DeleteOrganizationDataProviderConnection($id: ID!) {\n  deleteOrganizationDataProviderConnection(id: $id)\n}\n    ";
+declare const RegisterPasskeyDocument = "\n    mutation RegisterPasskey($input: RegisterPasskeyInput!) {\n  registerPasskey(input: $input) {\n    __typename\n    ... on PasskeyRegistrationOptions {\n      challengeId\n      options\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    ";
+declare const VerifyPasskeyDocument = "\n    mutation VerifyPasskey($input: VerifyPasskeyInput!) {\n  verifyPasskey(input: $input) {\n    __typename\n    ... on PasskeyVerified {\n      success\n    }\n    ... on PasskeyChallengeNotFound {\n      _placeholder\n    }\n    ... on PasskeyVerificationFailed {\n      _placeholder\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    ";
+declare const DeletePasskeyDocument = "\n    mutation DeletePasskey($input: DeletePasskeyInput!) {\n  deletePasskey(input: $input) {\n    __typename\n    ... on PasskeyDeleted {\n      success\n    }\n    ... on PasskeyNotFound {\n      _placeholder\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    ";
+declare const CreateAdminPortalLinkDocument = "\n    mutation CreateAdminPortalLink($intent: AdminPortalLinkIntent!) {\n  createAdminPortalLink(intent: $intent) {\n    link\n    intent\n    expiresAt\n  }\n}\n    ";
+declare const AuditLogStreamDocument = "\n    query AuditLogStream {\n  auditLogStream {\n    id\n    auditLogTrailId\n    type\n    state\n    errorMessage\n    lastSyncedEventId\n  }\n}\n    ";
+declare const BrandingDocument = "\n    query Branding {\n  branding {\n    displayName\n    logoLightPath\n    logoDarkPath\n    logoLightIconPath\n    logoDarkIconPath\n  }\n}\n    ";
+declare const AuthKitSettingsDocument = "\n    query AuthKitSettings {\n  authkitSettings {\n    origin\n  }\n}\n    ";
+declare const ListPermissionsDocument = "\n    query ListPermissions($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  permissions(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      id\n      slug\n      name\n      description\n      system\n      createdAt\n      updatedAt\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ";
+declare const GetOrganizationDomainDocument = "\n    query GetOrganizationDomain($id: ID!) {\n  organizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    \n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    ";
+declare const ListSharedDataProvidersDocument = "\n    query ListSharedDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder, $supportsMultipleConnections: Boolean) {\n  sharedDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    supportsMultipleConnections: $supportsMultipleConnections\n  ) {\n    data {\n      ...SharedDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment SharedDataProviderFields on SharedDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  connectedAccounts {\n    id\n    dataProviderId\n    dataProviderSlug\n    authMethod\n    connectionRole\n    state\n    availability\n    createdAt\n    updatedAt\n  }\n  createdAt\n  updatedAt\n}\n    ";
+declare const ListConfigurableDataProvidersDocument = "\n    query ListConfigurableDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  configurableDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...ConfigurableDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment ConfigurableDataProviderFields on ConfigurableDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    \n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    ";
+declare const ListOrganizationApiKeysDocument = "\n    query ListOrganizationApiKeys($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  organizationApiKeys(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...OrganizationApiKeyFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment OrganizationApiKeyFields on OrganizationApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const ListUserApiKeysDocument = "\n    query ListUserApiKeys($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  userApiKeys(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...UserApiKeyFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    \n    fragment UserApiKeyFields on UserApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n  owner {\n    id\n    email\n    firstName\n    lastName\n    displayName\n  }\n}\n    ";
+declare const CreateOrganizationApiKeyDocument = "\n    mutation CreateOrganizationApiKey($input: CreateApiKeyInput!) {\n  createOrganizationApiKey(input: $input) {\n    __typename\n    ... on OrganizationApiKeyCreated {\n      value\n      apiKey {\n        ...OrganizationApiKeyFields\n      }\n    }\n    ... on ApiKeyPermissionsNotHeld {\n      message\n      unheldPermissions\n    }\n    ... on ApiKeyPermissionsUnsupportedForToken {\n      message\n      requestedPermissions\n    }\n    ... on InvalidApiKeyExpiration {\n      message\n    }\n    ... on InvalidApiKeyName {\n      message\n    }\n    ... on InvalidApiKeyPermissions {\n      message\n      invalidPermissions\n    }\n  }\n}\n    \n    fragment OrganizationApiKeyFields on OrganizationApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const CreateUserApiKeyDocument = "\n    mutation CreateUserApiKey($input: CreateApiKeyInput!) {\n  createUserApiKey(input: $input) {\n    __typename\n    ... on UserApiKeyCreated {\n      value\n      apiKey {\n        ...UserApiKeyFields\n      }\n    }\n    ... on ApiKeyPermissionsNotHeld {\n      message\n      unheldPermissions\n    }\n    ... on ApiKeyPermissionsUnsupportedForToken {\n      message\n      requestedPermissions\n    }\n    ... on InvalidApiKeyExpiration {\n      message\n    }\n    ... on InvalidApiKeyName {\n      message\n    }\n    ... on InvalidApiKeyPermissions {\n      message\n      invalidPermissions\n    }\n  }\n}\n    \n    fragment UserApiKeyFields on UserApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n  owner {\n    id\n    email\n    firstName\n    lastName\n    displayName\n  }\n}\n    ";
+declare const ExpireOrganizationApiKeyDocument = "\n    mutation ExpireOrganizationApiKey($input: ExpireApiKeyInput!) {\n  expireOrganizationApiKey(input: $input) {\n    __typename\n    ... on OrganizationApiKeyExpired {\n      apiKey {\n        ...OrganizationApiKeyFields\n      }\n    }\n    ... on ApiKeyAlreadyExpired {\n      apiKeyId\n    }\n  }\n}\n    \n    fragment OrganizationApiKeyFields on OrganizationApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const ExpireUserApiKeyDocument = "\n    mutation ExpireUserApiKey($input: ExpireApiKeyInput!) {\n  expireUserApiKey(input: $input) {\n    __typename\n    ... on UserApiKeyExpired {\n      apiKey {\n        ...UserApiKeyFields\n      }\n    }\n    ... on ApiKeyAlreadyExpired {\n      apiKeyId\n    }\n  }\n}\n    \n    fragment UserApiKeyFields on UserApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n  owner {\n    id\n    email\n    firstName\n    lastName\n    displayName\n  }\n}\n    ";
+declare const DeleteOrganizationApiKeyDocument = "\n    mutation DeleteOrganizationApiKey($apiKeyId: ID!) {\n  deleteOrganizationApiKey(apiKeyId: $apiKeyId) {\n    ...OrganizationApiKeyFields\n  }\n}\n    \n    fragment OrganizationApiKeyFields on OrganizationApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n}\n    ";
+declare const DeleteUserApiKeyDocument = "\n    mutation DeleteUserApiKey($apiKeyId: ID!) {\n  deleteUserApiKey(apiKeyId: $apiKeyId) {\n    ...UserApiKeyFields\n  }\n}\n    \n    fragment UserApiKeyFields on UserApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n  owner {\n    id\n    email\n    firstName\n    lastName\n    displayName\n  }\n}\n    ";
 type SdkFunctionWrapper = <T>(action: (requestHeaders?: Record<string, string>) => Promise<T>, operationName: string, operationType?: string, variables?: any) => Promise<T>;
 declare function getSdk(client: GraphQLClient, withWrapper?: SdkFunctionWrapper): {
     ClientApiStatus(variables?: ClientApiStatusQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ClientApiStatusQuery>;
+    ListOrganizationDomains(variables?: ListOrganizationDomainsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListOrganizationDomainsQuery>;
+    CreateOrganizationDomain(variables: CreateOrganizationDomainMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateOrganizationDomainMutation>;
+    DeleteOrganizationDomain(variables: DeleteOrganizationDomainMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<DeleteOrganizationDomainMutation>;
+    ReverifyOrganizationDomain(variables: ReverifyOrganizationDomainMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ReverifyOrganizationDomainMutation>;
+    Me(variables?: MeQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<MeQuery>;
+    AuthenticationSettings(variables?: AuthenticationSettingsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<AuthenticationSettingsQuery>;
+    Passkeys(variables?: PasskeysQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<PasskeysQuery>;
+    UpdateProfile(variables: UpdateProfileMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<UpdateProfileMutation>;
+    SendVerificationCode(variables?: SendVerificationCodeMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<SendVerificationCodeMutation>;
+    VerifyCurrentEmail(variables: VerifyCurrentEmailMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<VerifyCurrentEmailMutation>;
+    SendEmailChange(variables: SendEmailChangeMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<SendEmailChangeMutation>;
+    ConfirmEmailChange(variables: ConfirmEmailChangeMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ConfirmEmailChangeMutation>;
+    CreatePassword(variables: CreatePasswordMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreatePasswordMutation>;
+    UpdatePassword(variables: UpdatePasswordMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<UpdatePasswordMutation>;
+    EnrollTotp(variables: EnrollTotpMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<EnrollTotpMutation>;
+    VerifyTotp(variables: VerifyTotpMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<VerifyTotpMutation>;
+    RemoveMfaFactor(variables: RemoveMfaFactorMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<RemoveMfaFactorMutation>;
+    Sessions(variables?: SessionsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<SessionsQuery>;
+    RevokeSession(variables: RevokeSessionMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<RevokeSessionMutation>;
+    RevokeAllSessions(variables?: RevokeAllSessionsMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<RevokeAllSessionsMutation>;
+    ListOrganizationMemberships(variables?: ListOrganizationMembershipsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListOrganizationMembershipsQuery>;
+    ListRoles(variables?: ListRolesQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListRolesQuery>;
+    InviteUser(variables: InviteUserMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<InviteUserMutation>;
+    UpdateMemberRole(variables: UpdateMemberRoleMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<UpdateMemberRoleMutation>;
+    RemoveMember(variables: RemoveMemberMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<RemoveMemberMutation>;
+    ResendInvitation(variables: ResendInvitationMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ResendInvitationMutation>;
+    RevokeInvitation(variables: RevokeInvitationMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<RevokeInvitationMutation>;
+    ListUserOrganizations(variables?: ListUserOrganizationsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListUserOrganizationsQuery>;
+    ListDirectoryConnections(variables?: ListDirectoryConnectionsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListDirectoryConnectionsQuery>;
+    GetDirectoryConnection(variables: GetDirectoryConnectionQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<GetDirectoryConnectionQuery>;
+    ListSsoConnections(variables?: ListSsoConnectionsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListSsoConnectionsQuery>;
+    GetSsoConnection(variables: GetSsoConnectionQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<GetSsoConnectionQuery>;
+    ListDataProviders(variables?: ListDataProvidersQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListDataProvidersQuery>;
+    ListDataProviderConnections(variables?: ListDataProviderConnectionsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListDataProviderConnectionsQuery>;
+    CreateDataProviderConnection(variables: CreateDataProviderConnectionMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateDataProviderConnectionMutation>;
+    DeleteDataProviderConnection(variables: DeleteDataProviderConnectionMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<DeleteDataProviderConnectionMutation>;
+    SetDataProviderEnabled(variables: SetDataProviderEnabledMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<SetDataProviderEnabledMutation>;
+    CreateDataProviderAuthorization(variables: CreateDataProviderAuthorizationMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateDataProviderAuthorizationMutation>;
+    CreateOrganizationDataProviderAuthorization(variables: CreateOrganizationDataProviderAuthorizationMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateOrganizationDataProviderAuthorizationMutation>;
+    DataProviderAuthorizationStatus(variables: DataProviderAuthorizationStatusQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<DataProviderAuthorizationStatusQuery>;
+    ConnectDataProviderWithClientCredentials(variables: ConnectDataProviderWithClientCredentialsMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ConnectDataProviderWithClientCredentialsMutation>;
+    SetDataProviderConfiguration(variables: SetDataProviderConfigurationMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<SetDataProviderConfigurationMutation>;
+    ListOrganizationDataProviders(variables?: ListOrganizationDataProvidersQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListOrganizationDataProvidersQuery>;
+    SetOrganizationDataProviderConfiguration(variables: SetOrganizationDataProviderConfigurationMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<SetOrganizationDataProviderConfigurationMutation>;
+    CreateOrganizationDataProviderConnection(variables: CreateOrganizationDataProviderConnectionMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateOrganizationDataProviderConnectionMutation>;
+    ConnectOrganizationDataProviderWithClientCredentials(variables: ConnectOrganizationDataProviderWithClientCredentialsMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ConnectOrganizationDataProviderWithClientCredentialsMutation>;
+    DeleteOrganizationDataProviderConnection(variables: DeleteOrganizationDataProviderConnectionMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<DeleteOrganizationDataProviderConnectionMutation>;
+    RegisterPasskey(variables: RegisterPasskeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<RegisterPasskeyMutation>;
+    VerifyPasskey(variables: VerifyPasskeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<VerifyPasskeyMutation>;
+    DeletePasskey(variables: DeletePasskeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<DeletePasskeyMutation>;
+    CreateAdminPortalLink(variables: CreateAdminPortalLinkMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateAdminPortalLinkMutation>;
+    AuditLogStream(variables?: AuditLogStreamQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<AuditLogStreamQuery>;
+    Branding(variables?: BrandingQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<BrandingQuery>;
+    AuthKitSettings(variables?: AuthKitSettingsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<AuthKitSettingsQuery>;
+    ListPermissions(variables?: ListPermissionsQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListPermissionsQuery>;
+    GetOrganizationDomain(variables: GetOrganizationDomainQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<GetOrganizationDomainQuery>;
+    ListSharedDataProviders(variables?: ListSharedDataProvidersQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListSharedDataProvidersQuery>;
+    ListConfigurableDataProviders(variables?: ListConfigurableDataProvidersQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListConfigurableDataProvidersQuery>;
+    ListOrganizationApiKeys(variables?: ListOrganizationApiKeysQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListOrganizationApiKeysQuery>;
+    ListUserApiKeys(variables?: ListUserApiKeysQueryVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ListUserApiKeysQuery>;
+    CreateOrganizationApiKey(variables: CreateOrganizationApiKeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateOrganizationApiKeyMutation>;
+    CreateUserApiKey(variables: CreateUserApiKeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<CreateUserApiKeyMutation>;
+    ExpireOrganizationApiKey(variables: ExpireOrganizationApiKeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ExpireOrganizationApiKeyMutation>;
+    ExpireUserApiKey(variables: ExpireUserApiKeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<ExpireUserApiKeyMutation>;
+    DeleteOrganizationApiKey(variables: DeleteOrganizationApiKeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<DeleteOrganizationApiKeyMutation>;
+    DeleteUserApiKey(variables: DeleteUserApiKeyMutationVariables, requestHeaders?: GraphQLClientRequestHeaders, signal?: RequestInit["signal"]): Promise<DeleteUserApiKeyMutation>;
 };
 type Sdk = ReturnType<typeof getSdk>;
 
-export { type AdminPortalLink, type AdminPortalLinkIntent, type AllSessionsRevoked, type AssignPermissionToRoleInput, type AuditEvent, type AuditEventActor, type AuditEventFilterInput, type AuditEventList, type AuditLogExport, type AuditLogExportState, type AuditLogStream, type AuditLogStreamState, type AuditLogStreamType, type AuthKitSettings, type AuthenticationSettings, type Branding, ClientApiStatusDocument, type ClientApiStatusQuery, type ClientApiStatusQueryVariables, type ConfirmEmailChangeInput, type ConfirmEmailChangeResult, type ConnectDataProviderResult, type ConnectDataProviderWithClientCredentialsInput, type ConnectedAccount, type Connection, type ConnectionState, type ConnectionType, type CreateAuditLogExportInput, type CreateAuditLogExportResult, type CreateDataProviderAuthorizationInput, type CreateDataProviderAuthorizationResult, type CreateDataProviderConnectionInput, type CreateOrganizationDataProviderAuthorizationInput, type CreatePasswordInput, type CreatePasswordResult, type CreateRoleInput, type CreateSsoConnectionInput, type CurrentEmailVerified, type DailyEmailQuotaExceeded, type DataProvider, type DataProviderAuthMethodUnsupported, type DataProviderAuthorization, type DataProviderAuthorizationStatus, type DataProviderAuthorizationUnavailable, type DataProviderConfigEntry, type DataProviderConfigEntryInput, type DataProviderConfigInvalid, type DataProviderConfiguration, type DataProviderConnected, type DataProviderConnection, type DataProviderConnectionAuthMethodConflict, type DataProviderConnectionList, type DataProviderList, type DeletePasskeyInput, type DeletePasskeyResult, type DeleteRoleInput, type Directory, type DirectoryGroup, type DirectoryGroupList, type DirectoryList, type DirectoryUser, type DirectoryUserList, type DomainVerificationNameServer, type ElevatedAccessTokenExpired, type ElevatedAccessTokenInvalid, type EmailChangeCodeExpired, type EmailChangeCodeIncorrect, type EmailChangeCodePreviouslyUsed, type EmailChangeConfirmed, type EmailChangeNotAvailable, type EmailChangeSent, type EmailChangeTooManyAttempts, type EmailManagedByProvider, type EmailNotAvailable, type EnrollTotpInput, type EnrollTotpResult, type Exact, type Flag, type FlagList, type IdentityVerificationExpired, type IdentityVerificationInvalid, type IncorrectPassword, type Incremental, type InputMaybe, type InvalidAuditLogExportDateRange, type InvalidEmail, type InvalidInvitationExpiry, type InvalidInviteeEmail, type InvalidInviteeRole, type InvalidLocale, type InvitationNotFound, type InvitationNotPending, type InvitationResent, type InvitationRevoked, type InviteUserInput, type InviteUserResult, type InviteeAlreadyAccepted, type InviteeAlreadyInvited, type InviteeAlreadyMember, type InviteeEmailNotDeliverable, type ListMetadata, type MakeEmpty, type MakeMaybe, type MakeOptional, type Maybe, type MemberIsManagedByDirectory, type MemberNotFound, type MemberRemoved, type MemberRoleUpdated, type MfaFactorRemoved, type Mutation, type MutationAssignPermissionToRoleArgs, type MutationConfirmEmailChangeArgs, type MutationConnectDataProviderWithClientCredentialsArgs, type MutationCreateAdminPortalLinkArgs, type MutationCreateAuditLogExportArgs, type MutationCreateDataProviderAuthorizationArgs, type MutationCreateDataProviderConnectionArgs, type MutationCreateOrganizationDataProviderAuthorizationArgs, type MutationCreateOrganizationDomainArgs, type MutationCreatePasswordArgs, type MutationCreateRoleArgs, type MutationCreateSsoConnectionArgs, type MutationDeleteDataProviderConnectionArgs, type MutationDeleteOrganizationDomainArgs, type MutationDeletePasskeyArgs, type MutationDeleteRoleArgs, type MutationDeleteSsoConnectionArgs, type MutationEnrollTotpArgs, type MutationInviteUserArgs, type MutationRegisterPasskeyArgs, type MutationRemoveMemberArgs, type MutationRemoveMfaFactorArgs, type MutationResendInvitationArgs, type MutationReverifyOrganizationDomainArgs, type MutationRevokeInvitationArgs, type MutationRevokeSessionArgs, type MutationSendEmailChangeArgs, type MutationSetDataProviderConfigurationArgs, type MutationSetDataProviderEnabledArgs, type MutationUpdateMemberRoleArgs, type MutationUpdatePasswordArgs, type MutationUpdateProfileArgs, type MutationUpdateRoleArgs, type MutationUpdateSsoConnectionArgs, type MutationVerifyCurrentEmailArgs, type MutationVerifyPasskeyArgs, type MutationVerifyTotpArgs, type NoAuditEventsFound, type NoMfaFactorsEnrolled, type NoPendingEmailChange, type OAuthProvider, type Organization, type OrganizationBlockedFromSendingInvites, type OrganizationDataProvider, type OrganizationDataProviderList, type OrganizationDomain, type OrganizationDomainList, type OrganizationDomainState, type OrganizationInvitation, type OrganizationInvitationStatus, type OrganizationMember, type OrganizationMemberList, type OrganizationMemberRole, type OrganizationMemberStatus, type PaginationOrder, type Passkey, type PasskeyChallengeNotFound, type PasskeyDeleted, type PasskeyNotFound, type PasskeyRegistrationOptions, type PasskeyVerificationFailed, type PasskeyVerified, type PasswordCharacterType, type PasswordCreated, type PasswordPolicy, type PasswordPolicyViolation, type PasswordUpdated, type PasswordViolation, type Permission, type PermissionList, type ProfileUpdated, type Query, type QueryAuditEventArgs, type QueryAuditEventsArgs, type QueryAuditLogExportArgs, type QueryDataProviderArgs, type QueryDataProviderAuthorizationStatusArgs, type QueryDataProviderConnectionArgs, type QueryDataProviderConnectionsArgs, type QueryDataProvidersArgs, type QueryDirectoryConnectionArgs, type QueryDirectoryConnectionsArgs, type QueryDirectoryGroupsArgs, type QueryDirectoryUsersArgs, type QueryEffectivePermissionsArgs, type QueryEvaluatedFlagsArgs, type QueryFlagArgs, type QueryFlagBySlugArgs, type QueryFlagsArgs, type QueryOrganizationArgs, type QueryOrganizationDataProvidersArgs, type QueryOrganizationDomainArgs, type QueryOrganizationDomainsArgs, type QueryOrganizationMembershipsArgs, type QueryPermissionsArgs, type QueryRoleArgs, type QuerySsoConnectionArgs, type QueryUserArgs, type RegisterPasskeyInput, type RegisterPasskeyResult, type RemoveMemberInput, type RemoveMemberResult, type RemoveMfaFactorInput, type RemoveMfaFactorResult, type ResendInvitationInput, type ResendInvitationNotFound, type ResendInvitationResult, type RevokeAllSessionsResult, type RevokeInvitationInput, type RevokeInvitationResult, type RevokeSessionInput, type RevokeSessionResult, type Role, type RoleDeleted, type RoleNotFound, type RolesResult, type Scalars, type Sdk, type SdkFunctionWrapper, type SendEmailChangeInput, type SendEmailChangeResult, type SendVerificationCodeResult, type Session, type SessionLocation, type SessionNotFound, type SessionRevoked, type SessionState, type SetDataProviderConfigurationInput, type SetDataProviderConfigurationResult, type SetDataProviderEnabledInput, type TotpAlreadyEnrolled, type TotpFactor, type TotpVerificationFailed, type TotpVerified, type UpdateMemberRoleInput, type UpdateMemberRoleResult, type UpdatePasswordInput, type UpdatePasswordResult, type UpdateProfileInput, type UpdateProfileResult, type UpdateRoleInput, type UpdateSsoConnectionInput, type User, type UserAlreadyHasPassword, type UserInvited, type UserOrganization, type VerificationCodeExpired, type VerificationCodeIncorrect, type VerificationCodePreviouslyUsed, type VerificationCodeSent, type VerificationTooManyAttempts, type VerifyCurrentEmailInput, type VerifyCurrentEmailResult, type VerifyPasskeyInput, type VerifyPasskeyResult, type VerifyTotpInput, type VerifyTotpResult, getSdk };
+export { type AdminPortalLink, type AdminPortalLinkIntent, type AllSessionsRevoked, type ApiKeyAlreadyExpired, type ApiKeyPermissionsNotHeld, type ApiKeyPermissionsUnsupportedForToken, type AssignPermissionToRoleInput, type AuditEvent, type AuditEventActor, type AuditEventFilterInput, type AuditEventList, type AuditLogExport, type AuditLogExportState, type AuditLogStream, AuditLogStreamDocument, type AuditLogStreamQuery, type AuditLogStreamQueryVariables, type AuditLogStreamState, type AuditLogStreamType, type AuthKitSettings, AuthKitSettingsDocument, type AuthKitSettingsQuery, type AuthKitSettingsQueryVariables, type AuthenticationSettings, AuthenticationSettingsDocument, type AuthenticationSettingsQuery, type AuthenticationSettingsQueryVariables, type Branding, BrandingDocument, type BrandingQuery, type BrandingQueryVariables, ClientApiStatusDocument, type ClientApiStatusQuery, type ClientApiStatusQueryVariables, type ConfigurableDataProvider, type ConfigurableDataProviderFieldsFragment, ConfigurableDataProviderFieldsFragmentDoc, type ConfigurableDataProviderList, ConfirmEmailChangeDocument, type ConfirmEmailChangeInput, type ConfirmEmailChangeMutation, type ConfirmEmailChangeMutationVariables, type ConfirmEmailChangeResult, type ConnectDataProviderResult, ConnectDataProviderWithClientCredentialsDocument, type ConnectDataProviderWithClientCredentialsInput, type ConnectDataProviderWithClientCredentialsMutation, type ConnectDataProviderWithClientCredentialsMutationVariables, ConnectOrganizationDataProviderWithClientCredentialsDocument, type ConnectOrganizationDataProviderWithClientCredentialsInput, type ConnectOrganizationDataProviderWithClientCredentialsMutation, type ConnectOrganizationDataProviderWithClientCredentialsMutationVariables, type ConnectedAccount, type ConnectedAccountFieldsFragment, ConnectedAccountFieldsFragmentDoc, type Connection, type ConnectionFieldsFragment, ConnectionFieldsFragmentDoc, type ConnectionIntent, type ConnectionState, type ConnectionType, CreateAdminPortalLinkDocument, type CreateAdminPortalLinkMutation, type CreateAdminPortalLinkMutationVariables, type CreateApiKeyInput, type CreateAuditLogExportInput, type CreateAuditLogExportResult, CreateDataProviderAuthorizationDocument, type CreateDataProviderAuthorizationInput, type CreateDataProviderAuthorizationMutation, type CreateDataProviderAuthorizationMutationVariables, type CreateDataProviderAuthorizationResult, CreateDataProviderConnectionDocument, type CreateDataProviderConnectionInput, type CreateDataProviderConnectionMutation, type CreateDataProviderConnectionMutationVariables, CreateOrganizationApiKeyDocument, type CreateOrganizationApiKeyMutation, type CreateOrganizationApiKeyMutationVariables, type CreateOrganizationApiKeyResult, CreateOrganizationDataProviderAuthorizationDocument, type CreateOrganizationDataProviderAuthorizationInput, type CreateOrganizationDataProviderAuthorizationMutation, type CreateOrganizationDataProviderAuthorizationMutationVariables, CreateOrganizationDataProviderConnectionDocument, type CreateOrganizationDataProviderConnectionInput, type CreateOrganizationDataProviderConnectionMutation, type CreateOrganizationDataProviderConnectionMutationVariables, CreateOrganizationDomainDocument, type CreateOrganizationDomainMutation, type CreateOrganizationDomainMutationVariables, CreatePasswordDocument, type CreatePasswordInput, type CreatePasswordMutation, type CreatePasswordMutationVariables, type CreatePasswordResult, type CreateRoleInput, type CreateSsoConnectionInput, CreateUserApiKeyDocument, type CreateUserApiKeyMutation, type CreateUserApiKeyMutationVariables, type CreateUserApiKeyResult, type CurrentEmailVerified, type DailyEmailQuotaExceeded, type DataInstallationConnectionRole, type DataProvider, type DataProviderAuthMethodUnsupported, type DataProviderAuthorization, type DataProviderAuthorizationResultFieldsFragment, DataProviderAuthorizationResultFieldsFragmentDoc, type DataProviderAuthorizationStatus, DataProviderAuthorizationStatusDocument, type DataProviderAuthorizationStatusQuery, type DataProviderAuthorizationStatusQueryVariables, type DataProviderAuthorizationUnavailable, type DataProviderConfigEntry, type DataProviderConfigEntryInput, type DataProviderConfigField, type DataProviderConfigFieldFieldsFragment, DataProviderConfigFieldFieldsFragmentDoc, type DataProviderConfigInvalid, type DataProviderConfiguration, type DataProviderConfigurationFieldsFragment, DataProviderConfigurationFieldsFragmentDoc, type DataProviderConnected, type DataProviderConnection, type DataProviderConnectionAuthMethodConflict, type DataProviderConnectionFieldsFragment, DataProviderConnectionFieldsFragmentDoc, type DataProviderConnectionList, type DataProviderCredentials, type DataProviderFieldsFragment, DataProviderFieldsFragmentDoc, type DataProviderList, DeleteDataProviderConnectionDocument, type DeleteDataProviderConnectionMutation, type DeleteDataProviderConnectionMutationVariables, DeleteOrganizationApiKeyDocument, type DeleteOrganizationApiKeyMutation, type DeleteOrganizationApiKeyMutationVariables, DeleteOrganizationDataProviderConnectionDocument, type DeleteOrganizationDataProviderConnectionMutation, type DeleteOrganizationDataProviderConnectionMutationVariables, DeleteOrganizationDomainDocument, type DeleteOrganizationDomainMutation, type DeleteOrganizationDomainMutationVariables, DeletePasskeyDocument, type DeletePasskeyInput, type DeletePasskeyMutation, type DeletePasskeyMutationVariables, type DeletePasskeyResult, type DeleteRoleInput, DeleteUserApiKeyDocument, type DeleteUserApiKeyMutation, type DeleteUserApiKeyMutationVariables, type Directory, type DirectoryFieldsFragment, DirectoryFieldsFragmentDoc, type DirectoryGroup, type DirectoryGroupList, type DirectoryList, type DirectoryMetadata, type DirectoryUser, type DirectoryUserList, type DirectoryUsersMetadata, type DomainVerificationNameServer, type ElevatedAccessTokenExpired, type ElevatedAccessTokenInvalid, type EmailChangeCodeExpired, type EmailChangeCodeIncorrect, type EmailChangeCodePreviouslyUsed, type EmailChangeConfirmed, type EmailChangeNotAvailable, type EmailChangeSent, type EmailChangeTooManyAttempts, type EmailManagedByProvider, type EmailNotAvailable, EnrollTotpDocument, type EnrollTotpInput, type EnrollTotpMutation, type EnrollTotpMutationVariables, type EnrollTotpResult, type Exact, type ExpireApiKeyInput, ExpireOrganizationApiKeyDocument, type ExpireOrganizationApiKeyMutation, type ExpireOrganizationApiKeyMutationVariables, type ExpireOrganizationApiKeyResult, ExpireUserApiKeyDocument, type ExpireUserApiKeyMutation, type ExpireUserApiKeyMutationVariables, type ExpireUserApiKeyResult, type Flag, type FlagList, GetDirectoryConnectionDocument, type GetDirectoryConnectionQuery, type GetDirectoryConnectionQueryVariables, GetOrganizationDomainDocument, type GetOrganizationDomainQuery, type GetOrganizationDomainQueryVariables, GetSsoConnectionDocument, type GetSsoConnectionQuery, type GetSsoConnectionQueryVariables, type IdentityVerificationExpired, type IdentityVerificationInvalid, type IncorrectPassword, type Incremental, type InputMaybe, type InvalidApiKeyExpiration, type InvalidApiKeyName, type InvalidApiKeyPermissions, type InvalidAuditLogExportDateRange, type InvalidEmail, type InvalidInvitationExpiry, type InvalidInviteeEmail, type InvalidInviteeRole, type InvalidLocale, type InvitationNotFound, type InvitationNotPending, type InvitationResent, type InvitationRevoked, InviteUserDocument, type InviteUserInput, type InviteUserMutation, type InviteUserMutationVariables, type InviteUserResult, type InviteeAlreadyAccepted, type InviteeAlreadyInvited, type InviteeAlreadyMember, type InviteeEmailNotDeliverable, ListConfigurableDataProvidersDocument, type ListConfigurableDataProvidersQuery, type ListConfigurableDataProvidersQueryVariables, ListDataProviderConnectionsDocument, type ListDataProviderConnectionsQuery, type ListDataProviderConnectionsQueryVariables, ListDataProvidersDocument, type ListDataProvidersQuery, type ListDataProvidersQueryVariables, ListDirectoryConnectionsDocument, type ListDirectoryConnectionsQuery, type ListDirectoryConnectionsQueryVariables, type ListMetadata, ListOrganizationApiKeysDocument, type ListOrganizationApiKeysQuery, type ListOrganizationApiKeysQueryVariables, ListOrganizationDataProvidersDocument, type ListOrganizationDataProvidersQuery, type ListOrganizationDataProvidersQueryVariables, ListOrganizationDomainsDocument, type ListOrganizationDomainsQuery, type ListOrganizationDomainsQueryVariables, ListOrganizationMembershipsDocument, type ListOrganizationMembershipsQuery, type ListOrganizationMembershipsQueryVariables, ListPermissionsDocument, type ListPermissionsQuery, type ListPermissionsQueryVariables, ListRolesDocument, type ListRolesQuery, type ListRolesQueryVariables, ListSharedDataProvidersDocument, type ListSharedDataProvidersQuery, type ListSharedDataProvidersQueryVariables, ListSsoConnectionsDocument, type ListSsoConnectionsQuery, type ListSsoConnectionsQueryVariables, ListUserApiKeysDocument, type ListUserApiKeysQuery, type ListUserApiKeysQueryVariables, ListUserOrganizationsDocument, type ListUserOrganizationsQuery, type ListUserOrganizationsQueryVariables, type MakeEmpty, type MakeMaybe, type MakeOptional, type Maybe, MeDocument, type MeQuery, type MeQueryVariables, type MemberIsManagedByDirectory, type MemberNotFound, type MemberRemoved, type MemberRoleUpdated, type MfaFactorRemoved, type Mutation, type MutationAssignPermissionToRoleArgs, type MutationConfirmEmailChangeArgs, type MutationConnectDataProviderWithClientCredentialsArgs, type MutationConnectOrganizationDataProviderWithClientCredentialsArgs, type MutationCreateAdminPortalLinkArgs, type MutationCreateAuditLogExportArgs, type MutationCreateDataProviderAuthorizationArgs, type MutationCreateDataProviderConnectionArgs, type MutationCreateOrganizationApiKeyArgs, type MutationCreateOrganizationDataProviderAuthorizationArgs, type MutationCreateOrganizationDataProviderConnectionArgs, type MutationCreateOrganizationDomainArgs, type MutationCreatePasswordArgs, type MutationCreateRoleArgs, type MutationCreateSsoConnectionArgs, type MutationCreateUserApiKeyArgs, type MutationDeleteDataProviderConnectionArgs, type MutationDeleteOrganizationApiKeyArgs, type MutationDeleteOrganizationDataProviderConnectionArgs, type MutationDeleteOrganizationDomainArgs, type MutationDeletePasskeyArgs, type MutationDeleteRoleArgs, type MutationDeleteSsoConnectionArgs, type MutationDeleteUserApiKeyArgs, type MutationEnrollTotpArgs, type MutationExpireOrganizationApiKeyArgs, type MutationExpireUserApiKeyArgs, type MutationInviteUserArgs, type MutationRegisterPasskeyArgs, type MutationRemoveMemberArgs, type MutationRemoveMfaFactorArgs, type MutationResendInvitationArgs, type MutationReverifyOrganizationDomainArgs, type MutationRevokeAllSessionsArgs, type MutationRevokeInvitationArgs, type MutationRevokeSessionArgs, type MutationSendEmailChangeArgs, type MutationSetDataProviderConfigurationArgs, type MutationSetDataProviderEnabledArgs, type MutationSetOrganizationDataProviderConfigurationArgs, type MutationUpdateMemberRoleArgs, type MutationUpdatePasswordArgs, type MutationUpdateProfileArgs, type MutationUpdateRoleArgs, type MutationUpdateSsoConnectionArgs, type MutationVerifyCurrentEmailArgs, type MutationVerifyPasskeyArgs, type MutationVerifyTotpArgs, type NoAuditEventsFound, type NoMfaFactorsEnrolled, type NoPendingEmailChange, type OAuthProvider, type Organization, type OrganizationApiKey, type OrganizationApiKeyCreated, type OrganizationApiKeyExpired, type OrganizationApiKeyFieldsFragment, OrganizationApiKeyFieldsFragmentDoc, type OrganizationApiKeyList, type OrganizationBlockedFromSendingInvites, type OrganizationDataProvider, type OrganizationDataProviderCapabilities, type OrganizationDataProviderFieldsFragment, OrganizationDataProviderFieldsFragmentDoc, type OrganizationDataProviderList, type OrganizationDomain, type OrganizationDomainFieldsFragment, OrganizationDomainFieldsFragmentDoc, type OrganizationDomainList, type OrganizationDomainState, type OrganizationInvitation, type OrganizationInvitationFieldsFragment, OrganizationInvitationFieldsFragmentDoc, type OrganizationInvitationStatus, type OrganizationMember, type OrganizationMemberAction, type OrganizationMemberFieldsFragment, OrganizationMemberFieldsFragmentDoc, type OrganizationMemberList, type OrganizationMemberRole, type OrganizationMemberStatus, type PaginationOrder, type Passkey, type PasskeyChallengeNotFound, type PasskeyDeleted, type PasskeyNotFound, type PasskeyRegistrationOptions, type PasskeyVerificationFailed, type PasskeyVerified, PasskeysDocument, type PasskeysQuery, type PasskeysQueryVariables, type PasswordCharacterType, type PasswordCreated, type PasswordPolicy, type PasswordPolicyViolation, type PasswordUpdated, type PasswordViolation, type PasswordViolationFieldsFragment, PasswordViolationFieldsFragmentDoc, type Permission, type PermissionList, type ProfileUpdated, type Query, type QueryAuditEventArgs, type QueryAuditEventsArgs, type QueryAuditLogExportArgs, type QueryConfigurableDataProvidersArgs, type QueryDataProviderArgs, type QueryDataProviderAuthorizationStatusArgs, type QueryDataProviderConnectionArgs, type QueryDataProviderConnectionsArgs, type QueryDataProvidersArgs, type QueryDirectoryConnectionArgs, type QueryDirectoryConnectionsArgs, type QueryDirectoryGroupsArgs, type QueryDirectoryUsersArgs, type QueryEffectivePermissionsArgs, type QueryEvaluatedFlagsArgs, type QueryFlagArgs, type QueryFlagBySlugArgs, type QueryFlagsArgs, type QueryOrganizationApiKeysArgs, type QueryOrganizationArgs, type QueryOrganizationDataProvidersArgs, type QueryOrganizationDomainArgs, type QueryOrganizationDomainsArgs, type QueryOrganizationMembershipsArgs, type QueryPermissionsArgs, type QueryRoleArgs, type QuerySharedDataProvidersArgs, type QuerySsoConnectionArgs, type QueryUserApiKeysArgs, type QueryUserArgs, RegisterPasskeyDocument, type RegisterPasskeyInput, type RegisterPasskeyMutation, type RegisterPasskeyMutationVariables, type RegisterPasskeyResult, RemoveMemberDocument, type RemoveMemberInput, type RemoveMemberMutation, type RemoveMemberMutationVariables, type RemoveMemberResult, RemoveMfaFactorDocument, type RemoveMfaFactorInput, type RemoveMfaFactorMutation, type RemoveMfaFactorMutationVariables, type RemoveMfaFactorResult, ResendInvitationDocument, type ResendInvitationInput, type ResendInvitationMutation, type ResendInvitationMutationVariables, type ResendInvitationNotFound, type ResendInvitationResult, ReverifyOrganizationDomainDocument, type ReverifyOrganizationDomainMutation, type ReverifyOrganizationDomainMutationVariables, RevokeAllSessionsDocument, type RevokeAllSessionsInput, type RevokeAllSessionsMutation, type RevokeAllSessionsMutationVariables, type RevokeAllSessionsResult, RevokeInvitationDocument, type RevokeInvitationInput, type RevokeInvitationMutation, type RevokeInvitationMutationVariables, type RevokeInvitationResult, RevokeSessionDocument, type RevokeSessionInput, type RevokeSessionMutation, type RevokeSessionMutationVariables, type RevokeSessionResult, type Role, type RoleDeleted, type RoleFieldsFragment, RoleFieldsFragmentDoc, type RoleNotFound, type RolesResult, type Scalars, type Sdk, type SdkFunctionWrapper, SendEmailChangeDocument, type SendEmailChangeInput, type SendEmailChangeMutation, type SendEmailChangeMutationVariables, type SendEmailChangeResult, SendVerificationCodeDocument, type SendVerificationCodeMutation, type SendVerificationCodeMutationVariables, type SendVerificationCodeResult, type Session, type SessionFieldsFragment, SessionFieldsFragmentDoc, type SessionLocation, type SessionNotFound, type SessionRevoked, type SessionState, SessionsDocument, type SessionsQuery, type SessionsQueryVariables, SetDataProviderConfigurationDocument, type SetDataProviderConfigurationInput, type SetDataProviderConfigurationMutation, type SetDataProviderConfigurationMutationVariables, type SetDataProviderConfigurationResult, SetDataProviderEnabledDocument, type SetDataProviderEnabledInput, type SetDataProviderEnabledMutation, type SetDataProviderEnabledMutationVariables, SetOrganizationDataProviderConfigurationDocument, type SetOrganizationDataProviderConfigurationInput, type SetOrganizationDataProviderConfigurationMutation, type SetOrganizationDataProviderConfigurationMutationVariables, type SharedDataProvider, type SharedDataProviderConnection, type SharedDataProviderFieldsFragment, SharedDataProviderFieldsFragmentDoc, type SharedDataProviderList, type SsoConnectionSession, type SsoProviderTag, type SsoSessionState, type TotpAlreadyEnrolled, type TotpFactor, type TotpVerificationFailed, type TotpVerified, UpdateMemberRoleDocument, type UpdateMemberRoleInput, type UpdateMemberRoleMutation, type UpdateMemberRoleMutationVariables, type UpdateMemberRoleResult, UpdatePasswordDocument, type UpdatePasswordInput, type UpdatePasswordMutation, type UpdatePasswordMutationVariables, type UpdatePasswordResult, UpdateProfileDocument, type UpdateProfileInput, type UpdateProfileMutation, type UpdateProfileMutationVariables, type UpdateProfileResult, type UpdateRoleInput, type UpdateSsoConnectionInput, type User, type UserAlreadyHasPassword, type UserApiKey, type UserApiKeyCreated, type UserApiKeyExpired, type UserApiKeyFieldsFragment, UserApiKeyFieldsFragmentDoc, type UserApiKeyList, type UserApiKeyOwner, type UserFieldsFragment, UserFieldsFragmentDoc, type UserInvited, type UserOrganization, type VerificationCodeExpired, type VerificationCodeIncorrect, type VerificationCodePreviouslyUsed, type VerificationCodeSent, type VerificationTooManyAttempts, VerifyCurrentEmailDocument, type VerifyCurrentEmailInput, type VerifyCurrentEmailMutation, type VerifyCurrentEmailMutationVariables, type VerifyCurrentEmailResult, VerifyPasskeyDocument, type VerifyPasskeyInput, type VerifyPasskeyMutation, type VerifyPasskeyMutationVariables, type VerifyPasskeyResult, VerifyTotpDocument, type VerifyTotpInput, type VerifyTotpMutation, type VerifyTotpMutationVariables, type VerifyTotpResult, type X509Certificate, getSdk };