@workos-inc/widgets 1.20.1 → 1.20.2-next.1792081179653

package/dist/cjs/api/client-graphql/generated.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"generated.cjs","names":[],"sources":["../../../../src/api/client-graphql/generated.ts"],"sourcesContent":["import type { GraphQLClient, RequestOptions } from \"graphql-request\";\nexport type Maybe<T> = T | null;\nexport type InputMaybe<T> = Maybe<T>;\nexport type Exact<T extends { [key: string]: unknown }> = {\n  [K in keyof T]: T[K];\n};\nexport type MakeOptional<T, K extends keyof T> = Omit<T, K> & {\n  [SubKey in K]?: Maybe<T[SubKey]>;\n};\nexport type MakeMaybe<T, K extends keyof T> = Omit<T, K> & {\n  [SubKey in K]: Maybe<T[SubKey]>;\n};\nexport type MakeEmpty<\n  T extends { [key: string]: unknown },\n  K extends keyof T,\n> = { [_ in K]?: never };\nexport type Incremental<T> =\n  | T\n  | {\n      [P in keyof T]?: P extends \" $fragmentName\" | \"__typename\" ? T[P] : never;\n    };\ntype GraphQLClientRequestHeaders = RequestOptions[\"requestHeaders\"];\n/** All built-in and custom scalars, mapped to their actual values */\nexport type Scalars = {\n  ID: { input: string; output: string };\n  String: { input: string; output: string };\n  Boolean: { input: boolean; output: boolean };\n  Int: { input: number; output: number };\n  Float: { input: number; output: number };\n  /** A date-time string at UTC, such as 2019-12-03T09:54:33Z, compliant with the date-time format. */\n  DateTime: { input: string; output: string };\n  /** The `JSON` scalar type represents JSON values as specified by [ECMA-404](http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-404.pdf). */\n  JSON: { input: any; output: any };\n};\n\n/** A short-lived link that starts an Admin Portal session for the token’s organization, scoped to a single setup flow. */\nexport type AdminPortalLink = {\n  __typename?: \"AdminPortalLink\";\n  /** When the link stops being redeemable. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n  /** The setup flow the link is scoped to. */\n  intent: AdminPortalLinkIntent;\n  /** The Admin Portal URL to send the user to. It carries a bearer capability, so treat it as a secret and redirect immediately. */\n  link: Scalars[\"String\"][\"output\"];\n};\n\n/** The Admin Portal setup flow a link is scoped to. */\nexport type AdminPortalLinkIntent =\n  | \"DomainVerification\"\n  | \"Dsync\"\n  | \"LogStreams\"\n  | \"Sso\";\n\n/** All other sessions were revoked successfully. */\nexport type AllSessionsRevoked = {\n  __typename?: \"AllSessionsRevoked\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The key is already expired, so its expiration cannot change. */\nexport type ApiKeyAlreadyExpired = {\n  __typename?: \"ApiKeyAlreadyExpired\";\n  apiKeyId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The kind of API key a permission may be granted to. */\nexport type ApiKeyOwnerType =\n  /** Organization API keys, created with `createOrganizationApiKey`. */\n  | \"Organization\"\n  /** User API keys, created with `createUserApiKey`. */\n  | \"User\";\n\n/** One or more requested permission slugs are not held by the caller. A key never carries more than the caller minting it holds, so the caller must be granted a permission before it can grant it to a key. */\nexport type ApiKeyPermissionsNotHeld = {\n  __typename?: \"ApiKeyPermissionsNotHeld\";\n  message: Scalars[\"String\"][\"output\"];\n  /** The requested permission slugs the caller does not hold. */\n  unheldPermissions: Array<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The token cannot grant permissions to a key. The caller is not acting as a member of the organization, so there is no set of held permissions to bound the key to; such a token can only create a key with no permissions. */\nexport type ApiKeyPermissionsUnsupportedForToken = {\n  __typename?: \"ApiKeyPermissionsUnsupportedForToken\";\n  message: Scalars[\"String\"][\"output\"];\n  /** The permission slugs that were requested for the key. */\n  requestedPermissions: Array<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type AssignPermissionToRoleInput = {\n  /** The slug of the permission to assign. */\n  permissionSlug: Scalars[\"String\"][\"input\"];\n  /** The ID of the role to assign the permission to. */\n  roleId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type AuditEvent = {\n  __typename?: \"AuditEvent\";\n  action: Scalars[\"String\"][\"output\"];\n  actor: AuditEventActor;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  data: Scalars[\"JSON\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  occurredAt: Scalars[\"DateTime\"][\"output\"];\n  targets: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type AuditEventActor = {\n  __typename?: \"AuditEventActor\";\n  id: Scalars[\"String\"][\"output\"];\n  name?: Maybe<Scalars[\"String\"][\"output\"]>;\n  type: Scalars[\"String\"][\"output\"];\n};\n\nexport type AuditEventFilterInput = {\n  actions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorNames?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  rangeEnd: Scalars[\"DateTime\"][\"input\"];\n  rangeStart: Scalars[\"DateTime\"][\"input\"];\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  targetIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  targetTypes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type AuditEventList = {\n  __typename?: \"AuditEventList\";\n  data: Array<AuditEvent>;\n  listMetadata: ListMetadata;\n};\n\nexport type AuditLogExport = {\n  __typename?: \"AuditLogExport\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  state: AuditLogExportState;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  /** A signed URL to the CSV file. Only defined once the export is ready. */\n  url?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type AuditLogExportState = \"Error\" | \"Expired\" | \"Pending\" | \"Ready\";\n\n/** The audit log stream destination configured for the token's organization. Exposes status metadata only; destination settings and credentials are never included. */\nexport type AuditLogStream = {\n  __typename?: \"AuditLogStream\";\n  auditLogTrailId: Scalars[\"ID\"][\"output\"];\n  /** The most recent delivery error message, if any. */\n  errorMessage?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The ID of the last audit log event delivered to the stream. */\n  lastSyncedEventId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  state: AuditLogStreamState;\n  type: AuditLogStreamType;\n};\n\n/** The delivery state of an audit log stream. */\nexport type AuditLogStreamState = \"Active\" | \"Error\" | \"Inactive\" | \"Invalid\";\n\n/** The destination provider audit log events are streamed to. */\nexport type AuditLogStreamType =\n  | \"AzureSentinel\"\n  | \"Datadog\"\n  | \"GenericHttps\"\n  | \"GoogleCloudStorage\"\n  | \"S3\"\n  | \"Snowflake\"\n  | \"Splunk\";\n\n/** AuthKit settings for the token's environment. */\nexport type AuthKitSettings = {\n  __typename?: \"AuthKitSettings\";\n  /** The HTTPS origin of the preferred AuthKit domain. */\n  origin: Scalars[\"String\"][\"output\"];\n};\n\n/** The authentication methods the environment allows, and the password policy it enforces. Distinct from what the authenticated user has set up, which lives on `me`. */\nexport type AuthenticationSettings = {\n  __typename?: \"AuthenticationSettings\";\n  /** Whether multi-factor authentication is available in this environment. When `false`, TOTP enrollment should not be offered. */\n  mfaEnabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether multi-factor authentication is mandatory for every user in this environment. */\n  mfaRequired: Scalars[\"Boolean\"][\"output\"];\n  /** Whether users may authenticate with a passkey. */\n  passkeyAuthEnabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether users may authenticate with a password. When `false`, `createPassword` and `updatePassword` should not be offered. */\n  passwordAuthEnabled: Scalars[\"Boolean\"][\"output\"];\n  passwordPolicy: PasswordPolicy;\n};\n\n/** The branding the token renders: its application's own once that application has been customized, otherwise its environment's. */\nexport type Branding = {\n  __typename?: \"Branding\";\n  /** The product name shown to users. */\n  displayName: Scalars[\"String\"][\"output\"];\n  /** The fully resolved dark-mode icon URL, or null when it is not configured. */\n  logoDarkIconPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The fully resolved dark-mode logo URL, or null when it is not configured. */\n  logoDarkPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The fully resolved light-mode icon URL, or null when it is not configured. */\n  logoLightIconPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The fully resolved light-mode logo URL, or null when it is not configured. */\n  logoLightPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** A data provider members connect individually, with the token's organization's configuration of it. */\nexport type ConfigurableDataProvider = {\n  __typename?: \"ConfigurableDataProvider\";\n  /** How accounts authenticate with this data provider. */\n  authMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */\n  availableScopes: Array<Scalars[\"String\"][\"output\"]>;\n  /** The non-secret configuration values pinned for the token's organization. */\n  config: Array<DataProviderConfigEntry>;\n  /** The configuration fields the provider declares. */\n  configFields: Array<DataProviderConfigField>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The redacted OAuth application credentials configured for the token's organization. */\n  credentials: DataProviderCredentials;\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  /** The scopes the developer configured, before any organization override. */\n  defaultScopes: Array<Scalars[\"String\"][\"output\"]>;\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether members may connect this provider: the organization's override when one exists, otherwise the developer default. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** The URL of the provider logo for dark backgrounds, when one is served. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider logo for light backgrounds, when one is served. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  integrationType: Scalars[\"String\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  /** The organization's override when set, otherwise the developer default. */\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  slug: Scalars[\"String\"][\"output\"];\n  /** The configuration state of the data provider: `valid`, `invalid`, or `requested`. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type ConfigurableDataProviderList = {\n  __typename?: \"ConfigurableDataProviderList\";\n  data: Array<ConfigurableDataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** Input for confirming an email change with the verification code. */\nexport type ConfirmEmailChangeInput = {\n  /** The verification code sent to the new email address. */\n  code: Scalars[\"String\"][\"input\"];\n  /** The elevated access token from a successful `verifyCurrentEmail` call. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type ConfirmEmailChangeResult =\n  | EmailChangeCodeExpired\n  | EmailChangeCodeIncorrect\n  | EmailChangeCodePreviouslyUsed\n  | EmailChangeConfirmed\n  | EmailChangeTooManyAttempts\n  | EmailManagedByProvider\n  | EmailNotAvailable\n  | IdentityVerificationExpired\n  | IdentityVerificationInvalid\n  | InvalidEmail\n  | NoPendingEmailChange;\n\nexport type ConnectDataProviderResult =\n  | DataProviderAuthMethodUnsupported\n  | DataProviderConfigInvalid\n  | DataProviderConnected\n  | DataProviderConnectionAuthMethodConflict;\n\nexport type ConnectDataProviderWithClientCredentialsInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The OAuth client ID issued by the data provider. Only data providers whose `authMethods` include `client_credentials` can be connected this way. */\n  clientId: Scalars[\"String\"][\"input\"];\n  /** The OAuth client secret issued by the data provider. Write-only: it is stored encrypted and never returned. */\n  clientSecret: Scalars[\"String\"][\"input\"];\n  /** Values for the provider’s connection configuration fields. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The data provider to connect the authenticated user to. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type ConnectOrganizationDataProviderWithClientCredentialsInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The OAuth client ID issued by the data provider. Only data providers whose `authMethods` include `client_credentials` can be connected this way. */\n  clientId: Scalars[\"String\"][\"input\"];\n  /** The OAuth client secret issued by the data provider, shared by every member of the organization. Write-only: it is stored encrypted and never returned. */\n  clientSecret: Scalars[\"String\"][\"input\"];\n  /** Values for the provider’s connection configuration fields. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The organization-owned data provider to connect (`organizationDataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization member the credentials are attributed to. With a user session token, omit it to use the session user, or pass that same user; any other user is rejected. With an application credential token, it is required and must name an active member of the token organization. */\n  userId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n};\n\n/** An OAuth profile linked to the authenticated user. */\nexport type ConnectedAccount = {\n  __typename?: \"ConnectedAccount\";\n  email?: Maybe<Scalars[\"String\"][\"output\"]>;\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  lastLoginAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  profilePictureUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  provider: OAuthProvider;\n};\n\n/** An SSO connection belonging to the organization. Mirrors the SSO Connection exposed by the REST connections API. */\nexport type Connection = {\n  __typename?: \"Connection\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The most recent sign-in session through this connection, if any. */\n  lastSession?: Maybe<SsoConnectionSession>;\n  /** The most recently expired SAML certificate when the connection has no valid certificate left, if any. Always null for OpenID Connect connections. */\n  latestExpiredCertificate?: Maybe<X509Certificate>;\n  /** The connection's longest-lived unexpired SAML certificate when it expires within the next three months, if any. Null when a certificate valid beyond that window exists. Always null for OpenID Connect connections. */\n  latestExpiringCertificate?: Maybe<X509Certificate>;\n  /** A human-readable name for the connection. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The organization the connection belongs to. */\n  organizationId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  /** Whether the connection speaks SAML or OpenID Connect. */\n  providerTag: SsoProviderTag;\n  /** Whether the connection has completed its IdP setup and can authenticate users (equivalent to an `Active` state). */\n  setupComplete: Scalars[\"Boolean\"][\"output\"];\n  /** The connection's IdP setup status. `Active` indicates setup is complete; other states indicate where the connection is in its setup flow. */\n  state: ConnectionState;\n  /** The identity provider type of the connection. */\n  type: ConnectionType;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** An explicit request to add another connection or reauthorize one exact connection. Omit it for permanent compatibility behavior. */\nexport type ConnectionIntent = \"Add\" | \"Reauthorize\";\n\n/** Enum represents the state of the connection. */\nexport type ConnectionState = \"Active\" | \"Deleting\" | \"Inactive\" | \"Validating\";\n\n/** Enum represents the type of connection. */\nexport type ConnectionType =\n  | \"ADFSSAML\"\n  | \"AdpOidc\"\n  | \"AppleOAuth\"\n  | \"Auth0Migration\"\n  | \"Auth0SAML\"\n  | \"AzureSAML\"\n  | \"BitbucketOAuth\"\n  | \"CasSAML\"\n  | \"ClassLinkSAML\"\n  | \"CleverOIDC\"\n  | \"CloudflareSAML\"\n  | \"CyberArkSAML\"\n  | \"DiscordOAuth\"\n  | \"DuoSAML\"\n  | \"EntraIdOIDC\"\n  | \"GenericOIDC\"\n  | \"GenericSAML\"\n  | \"GitLabOAuth\"\n  | \"GithubOAuth\"\n  | \"GoogleOAuth\"\n  | \"GoogleOIDC\"\n  | \"GoogleSAML\"\n  | \"GrokOAuth\"\n  | \"IntuitOAuth\"\n  | \"JumpCloudSAML\"\n  | \"KeycloakSAML\"\n  | \"LastPassSAML\"\n  | \"LinkedInOAuth\"\n  | \"LoginGovOidc\"\n  | \"MagicLink\"\n  | \"MicrosoftOAuth\"\n  | \"MiniOrangeSAML\"\n  | \"NetIqSAML\"\n  | \"OktaOIDC\"\n  | \"OktaSAML\"\n  | \"OneLoginSAML\"\n  | \"OracleSAML\"\n  | \"PingFederateSAML\"\n  | \"PingOneSAML\"\n  | \"RipplingSAML\"\n  | \"SalesforceOAuth\"\n  | \"SalesforceSAML\"\n  | \"ShibbolethGenericSAML\"\n  | \"ShibbolethSAML\"\n  | \"SimpleSamlPhpSAML\"\n  | \"SlackOAuth\"\n  | \"TestIdp\"\n  | \"VMwareSAML\"\n  | \"VercelMarketplaceOAuth\"\n  | \"VercelOAuth\"\n  | \"XOAuth\"\n  | \"XeroOAuth\";\n\n/** Input for creating an API key. The organization is taken from the token, never from an argument. */\nexport type CreateApiKeyInput = {\n  /** When the key should expire. Must be in the future. Omit for a key that never expires. */\n  expiresAt?: InputMaybe<Scalars[\"DateTime\"][\"input\"]>;\n  /** The human-readable name of the key. */\n  name: Scalars[\"String\"][\"input\"];\n  /** The permission slugs to grant the key. Each slug must be enabled for API keys in the environment, and must be a permission the caller itself holds. Defaults to no permissions. */\n  permissions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type CreateAuditLogExportInput = {\n  actions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorNames?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  rangeEnd: Scalars[\"DateTime\"][\"input\"];\n  rangeStart: Scalars[\"DateTime\"][\"input\"];\n  targetIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  targetTypes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type CreateAuditLogExportResult =\n  | AuditLogExport\n  | InvalidAuditLogExportDateRange\n  | NoAuditEventsFound;\n\nexport type CreateDataProviderAuthorizationInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Values for the provider’s connect-time configuration fields. Omit when the provider declares none. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Add another connection or reauthorize one exact connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise returns DataProviderAuthorizationUnavailable. Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The data provider to authorize for the authenticated user. It must be one the user can connect (`dataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Request a confirmation step at the end of the flow, returning a `handoffToken` the client must complete. Defaults to false. */\n  requireHandoff?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n};\n\nexport type CreateDataProviderAuthorizationResult =\n  | DataProviderAuthorization\n  | DataProviderAuthorizationUnavailable\n  | DataProviderConfigInvalid;\n\nexport type CreateDataProviderConnectionInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The API key issued by the data provider. Only data providers whose `authMethods` include `api_key` can be connected this way; OAuth providers are connected through the widget's authorization flow. */\n  apiKey: Scalars[\"String\"][\"input\"];\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The data provider to connect the authenticated user to. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type CreateOrganizationApiKeyResult =\n  | ApiKeyPermissionsNotHeld\n  | ApiKeyPermissionsUnsupportedForToken\n  | InvalidApiKeyExpiration\n  | InvalidApiKeyName\n  | InvalidApiKeyPermissions\n  | OrganizationApiKeyCreated;\n\nexport type CreateOrganizationDataProviderAuthorizationInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Values for the provider’s connect-time configuration fields. Omit when the provider declares none. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Add another connection or reauthorize one exact connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise returns DataProviderAuthorizationUnavailable. Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The organization-owned data provider to authorize (`organizationDataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type CreateOrganizationDataProviderConnectionInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The API key issued by the data provider, shared by every member of the organization. Only data providers whose `authMethods` include `api_key` can be connected this way. Write-only: it is stored encrypted and never returned. */\n  apiKey: Scalars[\"String\"][\"input\"];\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The organization-owned data provider to connect (`organizationDataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization member the credentials are attributed to. With a user session token, omit it to use the session user, or pass that same user; any other user is rejected. With an application credential token, it is required and must name an active member of the token organization. */\n  userId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n};\n\n/** Input for setting a password on an account that does not yet have one (e.g. signed up via OAuth). */\nexport type CreatePasswordInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The password to set. Must satisfy the environment password policy. */\n  password: Scalars[\"String\"][\"input\"];\n};\n\nexport type CreatePasswordResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasswordCreated\n  | PasswordPolicyViolation\n  | UserAlreadyHasPassword;\n\nexport type CreateRoleInput = {\n  /** Optional human-readable description of the role. */\n  description?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Human-readable name for the role. */\n  name: Scalars[\"String\"][\"input\"];\n  /** Slugs of the permissions granted to the role. */\n  permissions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  /** Unique slug identifying the role. Generated from the name when omitted. */\n  slug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type CreateSsoConnectionInput = {\n  /** A human-readable name for the connection. Defaults to the organization's name. */\n  name?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The identity provider type of the connection to create. */\n  type: ConnectionType;\n};\n\nexport type CreateUserApiKeyResult =\n  | ApiKeyPermissionsNotHeld\n  | ApiKeyPermissionsUnsupportedForToken\n  | InvalidApiKeyExpiration\n  | InvalidApiKeyName\n  | InvalidApiKeyPermissions\n  | UserApiKeyCreated;\n\n/** The current email was verified successfully. */\nexport type CurrentEmailVerified = {\n  __typename?: \"CurrentEmailVerified\";\n  /** The elevated access token to pass to `sendEmailChange` and `confirmEmailChange`. */\n  elevatedAccessToken: Scalars[\"String\"][\"output\"];\n  /** When the elevated access token expires (ISO 8601). */\n  expiresAt: Scalars[\"String\"][\"output\"];\n};\n\n/** Daily verification email quota exceeded. */\nexport type DailyEmailQuotaExceeded = {\n  __typename?: \"DailyEmailQuotaExceeded\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Whether a data installation is the compatibility connection or a standard connection. */\nexport type DataInstallationConnectionRole = \"Compatibility\" | \"Standard\";\n\n/** A third-party data provider configured for the current environment. */\nexport type DataProvider = {\n  __typename?: \"DataProvider\";\n  /** How accounts authenticate with this data provider. */\n  authMethods: Array<Scalars[\"String\"][\"output\"]>;\n  capabilities: DataProviderCapabilities;\n  /** The non-secret configuration values pinned for the token's organization (or by the developer, for a provider whose credentials the developer manages). */\n  config: Array<DataProviderConfigEntry>;\n  /** The configuration fields the provider declares. */\n  configFields: Array<DataProviderConfigField>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether the data provider is enabled for the token's organization: it must be enabled in the environment and not disabled by the organization's override. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** The URL of the provider logo for dark backgrounds, when one is served. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider logo for light backgrounds, when one is served. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The provider type this data provider was created from. */\n  integrationType: Scalars[\"String\"][\"output\"];\n  /** The display name of the data provider. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The OAuth scopes configured for the data provider. `null` when the provider's default scopes are used. */\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  /** The slug of the data provider. */\n  slug: Scalars[\"String\"][\"output\"];\n  /** The configuration state of the data provider: `valid`, `invalid`, or `requested`. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The data provider cannot be connected the requested way — for example client credentials for a provider that only supports OAuth. */\nexport type DataProviderAuthMethodUnsupported = {\n  __typename?: \"DataProviderAuthMethodUnsupported\";\n  /** The unsupported auth method that was requested. */\n  authMethod: Scalars[\"String\"][\"output\"];\n  /** The auth methods the data provider does support. */\n  supportedAuthMethods: Array<Scalars[\"String\"][\"output\"]>;\n};\n\n/** A started authorization: the URL to open and the state to poll while the user completes it. */\nexport type DataProviderAuthorization = {\n  __typename?: \"DataProviderAuthorization\";\n  /** Present when the flow ends on a confirmation step the client must complete instead of finishing silently. Always present for organization-scoped authorization. */\n  handoffToken?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** One-time token the interstitial URL is keyed by. Retained so a client can correlate the popup it opened. */\n  redirectToken: Scalars[\"String\"][\"output\"];\n  /** The OAuth `state` for this attempt. Poll `dataProviderAuthorizationStatus` with it to observe completion. */\n  state: Scalars[\"String\"][\"output\"];\n  /** The WorkOS interstitial URL to open in the popup. It redirects to the provider once, then expires. */\n  url: Scalars[\"String\"][\"output\"];\n};\n\n/** Whether an authorization attempt is still in progress. */\nexport type DataProviderAuthorizationStatus = {\n  __typename?: \"DataProviderAuthorizationStatus\";\n  /** True while the attempt is outstanding. It becomes false once the provider callback has been handled or the attempt expired, so a client that sees false reloads the connection to learn the outcome. */\n  connecting: Scalars[\"Boolean\"][\"output\"];\n  /** The `state` that was polled. */\n  state: Scalars[\"String\"][\"output\"];\n};\n\n/** The data provider cannot start an authorization right now — most often because the organization has not supplied its own OAuth credentials yet. */\nexport type DataProviderAuthorizationUnavailable = {\n  __typename?: \"DataProviderAuthorizationUnavailable\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Advisory explicit-add availability for the token-scoped owner. Writes still check authorization and creation policy. */\nexport type DataProviderCapabilities = {\n  __typename?: \"DataProviderCapabilities\";\n  /** The auth methods currently available to this token for explicit Add: oauth, api_key, or client_credentials. Interactive OAuth requires a member session. Empty exactly when canAddConnection is false. */\n  addConnectionMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Whether an explicit Add is available for this provider and owner. Counts all connections, not a page of results. The server rechecks before creating. */\n  canAddConnection: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** A non-secret configuration value set on a data provider. */\nexport type DataProviderConfigEntry = {\n  __typename?: \"DataProviderConfigEntry\";\n  /** The configuration field declared by the provider. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The value set for the field. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\nexport type DataProviderConfigEntryInput = {\n  /** The configuration field declared by the provider. */\n  name: Scalars[\"String\"][\"input\"];\n  /** The value to set for the field. */\n  value: Scalars[\"String\"][\"input\"];\n};\n\n/** A configuration field a data provider declares, describing a value collected when the provider is configured or connected. */\nexport type DataProviderConfigField = {\n  __typename?: \"DataProviderConfigField\";\n  /** The value used when the field is left unset. */\n  default?: Maybe<Scalars[\"String\"][\"output\"]>;\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** An example value, for display only. */\n  example?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The name of the field. Matches `name` on the corresponding config entry. */\n  key: Scalars[\"String\"][\"output\"];\n  /** The label to show for the field. */\n  label: Scalars[\"String\"][\"output\"];\n  /** The position of the field relative to its siblings. */\n  order?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** A regular expression the value must match. */\n  pattern?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The flags to apply `pattern` with (`i` and/or `u`). */\n  patternFlags?: Maybe<Scalars[\"String\"][\"output\"]>;\n  required: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the value is set once for the data provider (`integration`) or collected from each account that connects (`installation`). */\n  scope: Scalars[\"String\"][\"output\"];\n  /** Whether the value is sensitive, so it is masked on input. Secret `installation`-scope values are never read back on a connection. */\n  secret?: Maybe<Scalars[\"Boolean\"][\"output\"]>;\n};\n\n/** The supplied configuration does not satisfy the provider’s declared fields. */\nexport type DataProviderConfigInvalid = {\n  __typename?: \"DataProviderConfigInvalid\";\n  /** Which field is missing, unknown, or malformed. Names the field so a client can highlight it. */\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** A data provider's configuration for the token's organization, excluding secret values. */\nexport type DataProviderConfiguration = {\n  __typename?: \"DataProviderConfiguration\";\n  /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */\n  availableScopes: Array<Scalars[\"String\"][\"output\"]>;\n  config: Array<DataProviderConfigEntry>;\n  /** The data provider being configured. */\n  dataProviderId: Scalars[\"ID\"][\"output\"];\n  dataProviderSlug: Scalars[\"String\"][\"output\"];\n  /** Whether the organization's users can see and connect the data provider. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization has supplied its own OAuth client credentials. Always false for a provider whose credentials the developer manages. The values themselves are never returned. */\n  hasCredentials: Scalars[\"Boolean\"][\"output\"];\n  /** The organization the configuration applies to. */\n  organizationId: Scalars[\"ID\"][\"output\"];\n  /** The scopes the organization requests, or null to use the provider defaults. */\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The connection was created or its credentials were replaced. */\nexport type DataProviderConnected = {\n  __typename?: \"DataProviderConnected\";\n  connection: DataProviderConnection;\n};\n\n/** A connection between a data provider and a user or organization. */\nexport type DataProviderConnection = {\n  __typename?: \"DataProviderConnection\";\n  /** A mutable, non-unique display name for this connection. */\n  accountDisplayName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** A best-effort provider account identifier used for correlation, not connection selection. */\n  accountIdentifier?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The last four characters of the API key of an `api_key` connection, to recognise it by. The key itself is never returned. */\n  apiKeyLast4?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** How the connection authenticates: `oauth`, `api_key`, or `client_credentials`. */\n  authMethod: Scalars[\"String\"][\"output\"];\n  /** Whether the connection can be used right now: `available`, or `needs_admin_attention` when it must be re-authorized first. */\n  availability: Scalars[\"String\"][\"output\"];\n  /** Actions available on this exact organization-owned connection. Null for user-owned connections; member row-action behavior is unchanged. */\n  capabilities?: Maybe<DataProviderConnectionCapabilities>;\n  /** The OAuth client ID of a `client_credentials` connection. Null for other auth methods. */\n  clientId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The last four characters of the OAuth client secret of a `client_credentials` connection, to recognise it by. The secret itself is never returned. */\n  clientSecretLast4?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The stored, provider-declared connection-scope configuration values for any authentication method, excluding secret fields. Empty when no stored values can be disclosed. */\n  config: Array<DataProviderConfigEntry>;\n  /** Whether this is the compatibility connection or a standard connection. */\n  connectionRole: DataInstallationConnectionRole;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The data provider this connection was created for. */\n  dataProviderId: Scalars[\"ID\"][\"output\"];\n  /** The slug of the connected data provider. */\n  dataProviderSlug: Scalars[\"String\"][\"output\"];\n  /** The user whose authorization established the connection. Null when the connection is developer-managed or its establisher is unknown, and after the establishing member left the organization (see `stateReason`). */\n  establishedByUserId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  organizationId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  /** The OAuth scopes granted for this connection. */\n  scopes: Array<Scalars[\"String\"][\"output\"]>;\n  /** The status of the connection: `connected` or `needs_reauthorization`. */\n  state: Scalars[\"String\"][\"output\"];\n  /** Why WorkOS put the connection in its current `state`, e.g. `establishing_member_membership_ended` when the member who established an organization-owned connection left the organization. Null when there is no WorkOS-recorded reason. Additional values may be added. */\n  stateReason?: Maybe<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  userId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  /** Non-blocking warnings about the saved label from a credential write that supplied accountDisplayName. Empty when no duplicate exists; null on reads or when the label was omitted. */\n  warnings?: Maybe<Array<DataProviderConnectionLabelWarning>>;\n};\n\n/** The connection owner already has a connection to this data provider that authenticates differently, so it must be disconnected first. */\nexport type DataProviderConnectionAuthMethodConflict = {\n  __typename?: \"DataProviderConnectionAuthMethodConflict\";\n  /** How the existing connection authenticates. */\n  existingAuthMethod: Scalars[\"String\"][\"output\"];\n};\n\n/** Advisory repair actions for this exact organization-owned connection, independent of sibling connections and the additional-creation cap or gate. */\nexport type DataProviderConnectionCapabilities = {\n  __typename?: \"DataProviderConnectionCapabilities\";\n  /** Whether this OAuth connection needs reauthorization, its provider is enabled and configured for OAuth, and the token represents a member session. */\n  canReauthorize: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the enabled provider supports replacing this connection's API key or client credentials. */\n  canUpdateCredentials: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type DataProviderConnectionLabelWarning = {\n  __typename?: \"DataProviderConnectionLabelWarning\";\n  /** The advisory warning code: duplicate_account_display_name. */\n  code: Scalars[\"String\"][\"output\"];\n  /** An explanation of the warning. A duplicate label never blocks the update. */\n  message: Scalars[\"String\"][\"output\"];\n};\n\nexport type DataProviderConnectionList = {\n  __typename?: \"DataProviderConnectionList\";\n  data: Array<DataProviderConnection>;\n  listMetadata: ListMetadata;\n};\n\n/** The OAuth application credentials configured for a data provider in the token's organization, redacted to what an admin needs to recognise them. */\nexport type DataProviderCredentials = {\n  __typename?: \"DataProviderCredentials\";\n  /** The OAuth client ID the organization supplied. Null unless the organization brings its own credentials. */\n  clientId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  /** Whether the organization has supplied its own OAuth client credentials. Always false for a provider whose credentials the developer manages. */\n  hasCredentials: Scalars[\"Boolean\"][\"output\"];\n  /** The last four characters of the OAuth client secret the organization supplied, to recognise it by. The secret itself is never returned. */\n  redactedClientSecret?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The redirect URI to register with the provider when creating an OAuth application. */\n  redirectUri: Scalars[\"String\"][\"output\"];\n};\n\nexport type DataProviderList = {\n  __typename?: \"DataProviderList\";\n  data: Array<DataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** Input for deleting a passkey. */\nexport type DeletePasskeyInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The ID of the passkey to delete. */\n  passkeyId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type DeletePasskeyResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasskeyDeleted\n  | PasskeyNotFound;\n\nexport type DeleteRoleInput = {\n  /** The ID of the role to delete. */\n  id: Scalars[\"ID\"][\"input\"];\n};\n\n/** A Directory Sync connection within the current environment. */\nexport type Directory = {\n  __typename?: \"Directory\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  externalKey: Scalars[\"String\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** When the most recent sync run for the directory was last updated, or null if no sync run has started. */\n  lastSyncRunAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** Counts of the users and groups provisioned through the directory. */\n  metadata: DirectoryMetadata;\n  name: Scalars[\"String\"][\"output\"];\n  organizationId: Scalars[\"ID\"][\"output\"];\n  /** The linking state of the directory. */\n  state: Scalars[\"String\"][\"output\"];\n  /** The provider type of the directory. */\n  type: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** A group provisioned through a Directory Sync connection. */\nexport type DirectoryGroup = {\n  __typename?: \"DirectoryGroup\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  directoryId: Scalars[\"ID\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The identifier of the group in the identity provider. */\n  idpId: Scalars[\"String\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  organizationId: Scalars[\"ID\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type DirectoryGroupList = {\n  __typename?: \"DirectoryGroupList\";\n  data: Array<DirectoryGroup>;\n  listMetadata: ListMetadata;\n};\n\nexport type DirectoryList = {\n  __typename?: \"DirectoryList\";\n  data: Array<Directory>;\n  listMetadata: ListMetadata;\n};\n\n/** Counts of the users and groups provisioned through a directory. */\nexport type DirectoryMetadata = {\n  __typename?: \"DirectoryMetadata\";\n  groups: Scalars[\"Int\"][\"output\"];\n  users: DirectoryUsersMetadata;\n};\n\n/** A user provisioned through a Directory Sync connection. */\nexport type DirectoryUser = {\n  __typename?: \"DirectoryUser\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  directoryId: Scalars[\"ID\"][\"output\"];\n  email?: Maybe<Scalars[\"String\"][\"output\"]>;\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The identifier of the user in the identity provider. */\n  idpId: Scalars[\"String\"][\"output\"];\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  organizationId: Scalars[\"ID\"][\"output\"];\n  /** The provisioning state of the directory user. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  username?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type DirectoryUserList = {\n  __typename?: \"DirectoryUserList\";\n  data: Array<DirectoryUser>;\n  listMetadata: ListMetadata;\n};\n\n/** Counts of the users provisioned through a directory, by state. */\nexport type DirectoryUsersMetadata = {\n  __typename?: \"DirectoryUsersMetadata\";\n  active: Scalars[\"Int\"][\"output\"];\n  inactive: Scalars[\"Int\"][\"output\"];\n};\n\n/** The DNS name server provider detected for a domain. */\nexport type DomainVerificationNameServer =\n  | \"AwsRoute53\"\n  | \"CloudFlare\"\n  | \"GoDaddy\"\n  | \"GoogleDomains\"\n  | \"Other\";\n\n/** The elevated access token has expired. The user must re-verify their identity. */\nexport type ElevatedAccessTokenExpired = {\n  __typename?: \"ElevatedAccessTokenExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The elevated access token is invalid. */\nexport type ElevatedAccessTokenInvalid = {\n  __typename?: \"ElevatedAccessTokenInvalid\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has expired. */\nexport type EmailChangeCodeExpired = {\n  __typename?: \"EmailChangeCodeExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code is incorrect. */\nexport type EmailChangeCodeIncorrect = {\n  __typename?: \"EmailChangeCodeIncorrect\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has already been used. */\nexport type EmailChangeCodePreviouslyUsed = {\n  __typename?: \"EmailChangeCodePreviouslyUsed\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The email was changed successfully. */\nexport type EmailChangeConfirmed = {\n  __typename?: \"EmailChangeConfirmed\";\n  /** A fresh elevated access token for subsequent elevated operations. */\n  elevatedAccessToken: Scalars[\"String\"][\"output\"];\n  /** When the elevated access token expires (ISO 8601). */\n  expiresAt: Scalars[\"String\"][\"output\"];\n  user: User;\n};\n\n/** Email change is not available for this account. */\nexport type EmailChangeNotAvailable = {\n  __typename?: \"EmailChangeNotAvailable\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** A verification code was sent to the new email address. */\nexport type EmailChangeSent = {\n  __typename?: \"EmailChangeSent\";\n  /** When the verification code expires. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** Too many verification attempts. */\nexport type EmailChangeTooManyAttempts = {\n  __typename?: \"EmailChangeTooManyAttempts\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The email is managed by an identity provider and cannot be changed. */\nexport type EmailManagedByProvider = {\n  __typename?: \"EmailManagedByProvider\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The email address is not available. */\nexport type EmailNotAvailable = {\n  __typename?: \"EmailNotAvailable\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Input for enrolling a new TOTP factor. */\nexport type EnrollTotpInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type EnrollTotpResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | TotpAlreadyEnrolled\n  | TotpFactor;\n\n/** Input for expiring an API key. Expiring revokes the key while retaining it and its audit trail; use the delete mutations to remove it. */\nexport type ExpireApiKeyInput = {\n  /** The ID of the key to expire. */\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n  /** When the key should expire. A future date schedules expiration; `null` clears any scheduled expiration; omitting the field, or passing a date in the past, revokes the key immediately. */\n  expiresAt?: InputMaybe<Scalars[\"DateTime\"][\"input\"]>;\n};\n\nexport type ExpireOrganizationApiKeyResult =\n  | ApiKeyAlreadyExpired\n  | OrganizationApiKeyExpired;\n\nexport type ExpireUserApiKeyResult = ApiKeyAlreadyExpired | UserApiKeyExpired;\n\n/** A feature flag defined in the project that owns the environment the token was issued for. Mirrors the Feature Flag exposed by the REST feature flags API. */\nexport type Flag = {\n  __typename?: \"Flag\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The value returned for users and organizations that do not match any targeting rule in the environment the token was issued for. */\n  defaultValue: Scalars[\"Boolean\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether the feature flag is active in the environment the token was issued for. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** A descriptive name for the feature flag. */\n  name: Scalars[\"String\"][\"output\"];\n  /** A unique key used to reference the feature flag. */\n  slug: Scalars[\"String\"][\"output\"];\n  /** Labels assigned to the feature flag. */\n  tags: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type FlagList = {\n  __typename?: \"FlagList\";\n  data: Array<Flag>;\n  listMetadata: ListMetadata;\n};\n\n/** The identity verification has expired. Please verify your current email again. */\nexport type IdentityVerificationExpired = {\n  __typename?: \"IdentityVerificationExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The identity verification is no longer valid. */\nexport type IdentityVerificationInvalid = {\n  __typename?: \"IdentityVerificationInvalid\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The provided current password does not match the existing password. */\nexport type IncorrectPassword = {\n  __typename?: \"IncorrectPassword\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The requested expiration is not valid. */\nexport type InvalidApiKeyExpiration = {\n  __typename?: \"InvalidApiKeyExpiration\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The provided name is not a valid API key name. */\nexport type InvalidApiKeyName = {\n  __typename?: \"InvalidApiKeyName\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** One or more requested permission slugs are not enabled for API keys of this kind in the environment. */\nexport type InvalidApiKeyPermissions = {\n  __typename?: \"InvalidApiKeyPermissions\";\n  /** The permission slugs that were rejected. */\n  invalidPermissions: Array<Scalars[\"String\"][\"output\"]>;\n  message: Scalars[\"String\"][\"output\"];\n};\n\nexport type InvalidAuditLogExportDateRange = {\n  __typename?: \"InvalidAuditLogExportDateRange\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The provided email address is invalid. */\nexport type InvalidEmail = {\n  __typename?: \"InvalidEmail\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The requested invitation expiry is outside the allowed range (1–30 days). */\nexport type InvalidInvitationExpiry = {\n  __typename?: \"InvalidInvitationExpiry\";\n  /** Placeholder field to allow an empty @ObjectType. */\n  _placeholder?: Maybe<Scalars[\"Boolean\"][\"output\"]>;\n};\n\n/** The provided email address is not valid. */\nexport type InvalidInviteeEmail = {\n  __typename?: \"InvalidInviteeEmail\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\n/** The requested role is not valid for this organization. */\nexport type InvalidInviteeRole = {\n  __typename?: \"InvalidInviteeRole\";\n  roleSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The provided locale is not a valid BCP 47 tag. */\nexport type InvalidLocale = {\n  __typename?: \"InvalidLocale\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** No pending invitation exists for this user in this organization. */\nexport type InvitationNotFound = {\n  __typename?: \"InvitationNotFound\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The invitation is not pending (already accepted, expired, or revoked) and cannot be revoked. */\nexport type InvitationNotPending = {\n  __typename?: \"InvitationNotPending\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The invitation was resent successfully. */\nexport type InvitationResent = {\n  __typename?: \"InvitationResent\";\n  invitation: OrganizationInvitation;\n};\n\n/** The invitation was revoked. */\nexport type InvitationRevoked = {\n  __typename?: \"InvitationRevoked\";\n  invitation: OrganizationInvitation;\n};\n\nexport type InviteUserInput = {\n  /** The email address to invite. */\n  email: Scalars[\"String\"][\"input\"];\n  /** Number of days until the invitation expires. Defaults to the environment setting when omitted. */\n  expiresInDays?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  /** Slug of the role to grant on acceptance. Defaults to the organization default role when omitted. */\n  roleSlug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type InviteUserResult =\n  | InvalidInvitationExpiry\n  | InvalidInviteeEmail\n  | InvalidInviteeRole\n  | InviteeAlreadyInvited\n  | InviteeAlreadyMember\n  | InviteeEmailNotDeliverable\n  | OrganizationBlockedFromSendingInvites\n  | UserInvited;\n\n/** The user has already accepted their invitation and is an active member. */\nexport type InviteeAlreadyAccepted = {\n  __typename?: \"InviteeAlreadyAccepted\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** This email already has a pending invitation. */\nexport type InviteeAlreadyInvited = {\n  __typename?: \"InviteeAlreadyInvited\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\n/** A user with this email is already a member of the organization. */\nexport type InviteeAlreadyMember = {\n  __typename?: \"InviteeAlreadyMember\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\n/** The invitee's email domain has no mail servers, so the invitation email cannot be delivered. */\nexport type InviteeEmailNotDeliverable = {\n  __typename?: \"InviteeEmailNotDeliverable\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\nexport type ListMetadata = {\n  __typename?: \"ListMetadata\";\n  after?: Maybe<Scalars[\"String\"][\"output\"]>;\n  before?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The member is provisioned by a directory and cannot be removed. */\nexport type MemberIsManagedByDirectory = {\n  __typename?: \"MemberIsManagedByDirectory\";\n  /** The user ID of the directory-managed member. */\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** No active member was found for the given user in the organization. */\nexport type MemberNotFound = {\n  __typename?: \"MemberNotFound\";\n  /** The user ID that did not resolve to a member. */\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The member was removed from the organization. */\nexport type MemberRemoved = {\n  __typename?: \"MemberRemoved\";\n  /** The user ID of the removed member. */\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The member's role was updated. */\nexport type MemberRoleUpdated = {\n  __typename?: \"MemberRoleUpdated\";\n  member: OrganizationMember;\n};\n\n/** All TOTP factors were removed successfully. */\nexport type MfaFactorRemoved = {\n  __typename?: \"MfaFactorRemoved\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type Mutation = {\n  __typename?: \"Mutation\";\n  /** Grant a permission to a role belonging to the organization the token was issued for. */\n  assignPermissionToRole: Role;\n  /** Confirms an email change using the verification code sent to the new email address. Requires an elevated access token from `verifyCurrentEmail`. */\n  confirmEmailChange: ConfirmEmailChangeResult;\n  /** Connect the authenticated user to a data provider with OAuth client credentials the user supplies. Replaces the credentials when the user already has a client-credentials connection to the data provider, so this is both the connect and the reconnect path. The credentials are stored encrypted and never returned. */\n  connectDataProviderWithClientCredentials: ConnectDataProviderResult;\n  /** Connect the token's organization to an organization-owned data provider with OAuth client credentials, producing one connection shared by every member. Replaces the credentials when the organization already has a client-credentials connection to the data provider, so this is both the connect and the reconnect path. The credentials are stored encrypted and never returned. */\n  connectOrganizationDataProviderWithClientCredentials: ConnectDataProviderResult;\n  /** Mint a short-lived link that starts an Admin Portal session for the token's organization, scoped to a single setup flow. */\n  createAdminPortalLink: AdminPortalLink;\n  createAuditLogExport: CreateAuditLogExportResult;\n  /** Start an OAuth authorization connecting the authenticated user to a data provider. Returns the URL to open in a popup and the `state` to poll with `dataProviderAuthorizationStatus`. Re-authorizing a provider the user is already connected to replaces that connection's credentials once the flow completes, so this is also the reconnect path. */\n  createDataProviderAuthorization: CreateDataProviderAuthorizationResult;\n  /** Connect the authenticated user to a data provider with an API key the user supplies. Replaces the API key when the user already has an API-key connection to the data provider. */\n  createDataProviderConnection: DataProviderConnection;\n  /** Create an API key owned by the token's organization. The plaintext secret is returned exactly once, in this response. */\n  createOrganizationApiKey: CreateOrganizationApiKeyResult;\n  /** Start an OAuth authorization connecting the token's organization to an organization-owned data provider, producing one connection shared by every member. A handoff is always required: the member completing the flow must confirm it explicitly because the resulting connection is not their own. */\n  createOrganizationDataProviderAuthorization: CreateDataProviderAuthorizationResult;\n  /** Connect the token's organization to an organization-owned data provider with an API key, producing one connection shared by every member. Replaces the API key when the organization already has an API-key connection to the data provider. */\n  createOrganizationDataProviderConnection: DataProviderConnection;\n  /** Add a domain to the token's organization and begin DNS verification. */\n  createOrganizationDomain: OrganizationDomain;\n  /** Set a password for the authenticated user who does not yet have one (e.g. signed up via OAuth). Validates against the environment password policy. */\n  createPassword: CreatePasswordResult;\n  /** Create a role for the organization the token was issued for. */\n  createRole: Role;\n  /** Create an SSO connection for the token’s organization. */\n  createSsoConnection: Connection;\n  /** Create an API key owned by the token user within the organization the token was issued for. The plaintext secret is returned exactly once, in this response. */\n  createUserApiKey: CreateUserApiKeyResult;\n  /** Disconnect one of the authenticated user's data provider connections, revoking the stored credentials. */\n  deleteDataProviderConnection: Scalars[\"ID\"][\"output\"];\n  /** Delete an API key owned by the token's organization and return the deleted key. Unlike expiring, this removes the key entirely. */\n  deleteOrganizationApiKey: OrganizationApiKey;\n  /** Disconnect one of the token organization's shared data provider connections, revoking the stored credentials for every member. */\n  deleteOrganizationDataProviderConnection: Scalars[\"ID\"][\"output\"];\n  /** Delete a domain belonging to the token's organization and return it. */\n  deleteOrganizationDomain: OrganizationDomain;\n  /** Remove the specified passkey from the authenticated user's account. */\n  deletePasskey: DeletePasskeyResult;\n  /** Delete a role belonging to the organization the token was issued for. */\n  deleteRole: RoleDeleted;\n  /** Delete an SSO connection belonging to the token’s organization. */\n  deleteSsoConnection: Scalars[\"ID\"][\"output\"];\n  /** Delete a user-scoped API key and return the deleted key. Unlike expiring, this removes the key entirely. */\n  deleteUserApiKey: UserApiKey;\n  /** Create a TOTP factor and return the secret and QR URI for the user to scan. This is step 1 of TOTP enrollment. */\n  enrollTotp: EnrollTotpResult;\n  /** Revoke an API key owned by the token's organization by setting its expiration. The key and its audit trail are retained; use `deleteOrganizationApiKey` to remove it. */\n  expireOrganizationApiKey: ExpireOrganizationApiKeyResult;\n  /** Revoke a user-scoped API key by setting its expiration. The key and its audit trail are retained; use `deleteUserApiKey` to remove it. */\n  expireUserApiKey: ExpireUserApiKeyResult;\n  /** Invite a user to the organization the token was issued for, assigning a role and sending the invitation email. */\n  inviteUser: InviteUserResult;\n  /** Begin passkey (WebAuthn) registration for the authenticated user by returning the credential creation options. This is step 1 of the registration ceremony; complete it with `verifyPasskey`. */\n  registerPasskey: RegisterPasskeyResult;\n  /** Remove a member from the organization the token was issued for. */\n  removeMember: RemoveMemberResult;\n  /** Delete all TOTP factors for the authenticated user, effectively resetting MFA. */\n  removeMfaFactor: RemoveMfaFactorResult;\n  /** Resend a pending, expired, or revoked invitation for the organization the token was issued for. If the original invitation has expired or been revoked, a new invitation is created with the same role. */\n  resendInvitation: ResendInvitationResult;\n  /** Restart verification for a domain belonging to the token's organization. */\n  reverifyOrganizationDomain: OrganizationDomain;\n  /** Revokes all active sessions for the authenticated user except the current one and, if provided, `input.currentSessionId`. */\n  revokeAllSessions: RevokeAllSessionsResult;\n  /** Revoke a pending invitation for the organization the token was issued for. */\n  revokeInvitation: RevokeInvitationResult;\n  /** Revokes a specific session by ID. */\n  revokeSession: RevokeSessionResult;\n  /** Sends a verification code to the new email address. Requires an elevated access token from `verifyCurrentEmail`. The user must confirm with the code via `confirmEmailChange`. */\n  sendEmailChange: SendEmailChangeResult;\n  /** Sends a verification code to the user's current email address to prove ownership before changing email. */\n  sendVerificationCode: SendVerificationCodeResult;\n  /** Write a data provider's configuration for the token's organization: whether the organization's members can connect it, the scopes it requests, the organization's own OAuth client credentials, and any non-secret configuration values the provider declares. Fields left out are unchanged. Supersedes `setDataProviderEnabled` for anything beyond toggling `enabled`. */\n  setDataProviderConfiguration: SetDataProviderConfigurationResult;\n  /** Enable or disable a data provider for the token's organization. Disabling it hides the data provider from the organization's users and stops new connections; existing connections stay readable so they can be disconnected. */\n  setDataProviderEnabled: DataProvider;\n  /** Write an organization-owned data provider's configuration for the token's organization: whether the organization's shared connection is enabled, the scopes it requests, the organization's own OAuth client credentials, and any non-secret configuration values the provider declares. Fields left out are unchanged. */\n  setOrganizationDataProviderConfiguration: SetDataProviderConfigurationResult;\n  /** Update the label of one of the authenticated user's exact connections in the token's organization scope, without changing credentials or identity. Duplicate labels produce advisory warnings, not errors. */\n  updateDataProviderConnectionLabel: UpdateDataProviderConnectionLabelResult;\n  /** Update an organization member's roles within the organization the token was issued for. When multiple roles are enabled, all provided role slugs are assigned; otherwise only the first is used. */\n  updateMemberRole: UpdateMemberRoleResult;\n  /** Update the label of one of the token organization's exact shared connections without changing credentials or identity. Requires organization connection write permission; session users must be active members. Duplicate labels produce advisory warnings, not errors. */\n  updateOrganizationDataProviderConnectionLabel: UpdateDataProviderConnectionLabelResult;\n  /** Change the password for the authenticated user. Requires the current password for verification and validates the new password against the environment password policy. */\n  updatePassword: UpdatePasswordResult;\n  /** Updates the authenticated user's profile (first name, last name, locale). */\n  updateProfile: UpdateProfileResult;\n  /** Update a role belonging to the organization the token was issued for. */\n  updateRole: Role;\n  /** Update an SSO connection belonging to the token’s organization. */\n  updateSsoConnection: Connection;\n  /** Verifies the code sent to the current email address. Returns an elevated access token required for `sendEmailChange` and `confirmEmailChange`. */\n  verifyCurrentEmail: VerifyCurrentEmailResult;\n  /** Complete passkey (WebAuthn) registration by verifying the credential created by the authenticator. This is step 2 of the registration ceremony started by `registerPasskey`. */\n  verifyPasskey: VerifyPasskeyResult;\n  /** Confirm TOTP enrollment by verifying a code from the authenticator app. Marks the factor as verified. */\n  verifyTotp: VerifyTotpResult;\n};\n\nexport type MutationAssignPermissionToRoleArgs = {\n  input: AssignPermissionToRoleInput;\n};\n\nexport type MutationConfirmEmailChangeArgs = {\n  input: ConfirmEmailChangeInput;\n};\n\nexport type MutationConnectDataProviderWithClientCredentialsArgs = {\n  input: ConnectDataProviderWithClientCredentialsInput;\n};\n\nexport type MutationConnectOrganizationDataProviderWithClientCredentialsArgs = {\n  input: ConnectOrganizationDataProviderWithClientCredentialsInput;\n};\n\nexport type MutationCreateAdminPortalLinkArgs = {\n  intent: AdminPortalLinkIntent;\n};\n\nexport type MutationCreateAuditLogExportArgs = {\n  input: CreateAuditLogExportInput;\n};\n\nexport type MutationCreateDataProviderAuthorizationArgs = {\n  input: CreateDataProviderAuthorizationInput;\n};\n\nexport type MutationCreateDataProviderConnectionArgs = {\n  input: CreateDataProviderConnectionInput;\n};\n\nexport type MutationCreateOrganizationApiKeyArgs = {\n  input: CreateApiKeyInput;\n};\n\nexport type MutationCreateOrganizationDataProviderAuthorizationArgs = {\n  input: CreateOrganizationDataProviderAuthorizationInput;\n};\n\nexport type MutationCreateOrganizationDataProviderConnectionArgs = {\n  input: CreateOrganizationDataProviderConnectionInput;\n};\n\nexport type MutationCreateOrganizationDomainArgs = {\n  domain: Scalars[\"String\"][\"input\"];\n};\n\nexport type MutationCreatePasswordArgs = {\n  input: CreatePasswordInput;\n};\n\nexport type MutationCreateRoleArgs = {\n  input: CreateRoleInput;\n};\n\nexport type MutationCreateSsoConnectionArgs = {\n  input: CreateSsoConnectionInput;\n};\n\nexport type MutationCreateUserApiKeyArgs = {\n  input: CreateApiKeyInput;\n};\n\nexport type MutationDeleteDataProviderConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteOrganizationApiKeyArgs = {\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteOrganizationDataProviderConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteOrganizationDomainArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeletePasskeyArgs = {\n  input: DeletePasskeyInput;\n};\n\nexport type MutationDeleteRoleArgs = {\n  input: DeleteRoleInput;\n};\n\nexport type MutationDeleteSsoConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteUserApiKeyArgs = {\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationEnrollTotpArgs = {\n  input: EnrollTotpInput;\n};\n\nexport type MutationExpireOrganizationApiKeyArgs = {\n  input: ExpireApiKeyInput;\n};\n\nexport type MutationExpireUserApiKeyArgs = {\n  input: ExpireApiKeyInput;\n};\n\nexport type MutationInviteUserArgs = {\n  input: InviteUserInput;\n};\n\nexport type MutationRegisterPasskeyArgs = {\n  input: RegisterPasskeyInput;\n};\n\nexport type MutationRemoveMemberArgs = {\n  input: RemoveMemberInput;\n};\n\nexport type MutationRemoveMfaFactorArgs = {\n  input: RemoveMfaFactorInput;\n};\n\nexport type MutationResendInvitationArgs = {\n  input: ResendInvitationInput;\n};\n\nexport type MutationReverifyOrganizationDomainArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationRevokeAllSessionsArgs = {\n  input?: InputMaybe<RevokeAllSessionsInput>;\n};\n\nexport type MutationRevokeInvitationArgs = {\n  input: RevokeInvitationInput;\n};\n\nexport type MutationRevokeSessionArgs = {\n  input: RevokeSessionInput;\n};\n\nexport type MutationSendEmailChangeArgs = {\n  input: SendEmailChangeInput;\n};\n\nexport type MutationSetDataProviderConfigurationArgs = {\n  input: SetDataProviderConfigurationInput;\n};\n\nexport type MutationSetDataProviderEnabledArgs = {\n  input: SetDataProviderEnabledInput;\n};\n\nexport type MutationSetOrganizationDataProviderConfigurationArgs = {\n  input: SetOrganizationDataProviderConfigurationInput;\n};\n\nexport type MutationUpdateDataProviderConnectionLabelArgs = {\n  input: UpdateDataProviderConnectionLabelInput;\n};\n\nexport type MutationUpdateMemberRoleArgs = {\n  input: UpdateMemberRoleInput;\n};\n\nexport type MutationUpdateOrganizationDataProviderConnectionLabelArgs = {\n  input: UpdateDataProviderConnectionLabelInput;\n};\n\nexport type MutationUpdatePasswordArgs = {\n  input: UpdatePasswordInput;\n};\n\nexport type MutationUpdateProfileArgs = {\n  input: UpdateProfileInput;\n};\n\nexport type MutationUpdateRoleArgs = {\n  input: UpdateRoleInput;\n};\n\nexport type MutationUpdateSsoConnectionArgs = {\n  input: UpdateSsoConnectionInput;\n};\n\nexport type MutationVerifyCurrentEmailArgs = {\n  input: VerifyCurrentEmailInput;\n};\n\nexport type MutationVerifyPasskeyArgs = {\n  input: VerifyPasskeyInput;\n};\n\nexport type MutationVerifyTotpArgs = {\n  input: VerifyTotpInput;\n};\n\nexport type NoAuditEventsFound = {\n  __typename?: \"NoAuditEventsFound\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The user has no TOTP factors to remove. */\nexport type NoMfaFactorsEnrolled = {\n  __typename?: \"NoMfaFactorsEnrolled\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** There is no pending email change to confirm. */\nexport type NoPendingEmailChange = {\n  __typename?: \"NoPendingEmailChange\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** OAuth provider for a connected account. */\nexport type OAuthProvider =\n  | \"AppleOAuth\"\n  | \"BitbucketOAuth\"\n  | \"DiscordOAuth\"\n  | \"GitLabOAuth\"\n  | \"GithubOAuth\"\n  | \"GoogleOAuth\"\n  | \"GrokOAuth\"\n  | \"IntuitOAuth\"\n  | \"LinkedInOAuth\"\n  | \"MicrosoftOAuth\"\n  | \"SalesforceOAuth\"\n  | \"SlackOAuth\"\n  | \"VercelMarketplaceOAuth\"\n  | \"VercelOAuth\"\n  | \"XOAuth\"\n  | \"XeroOAuth\";\n\n/** An organization in the current environment. */\nexport type Organization = {\n  __typename?: \"Organization\";\n  /** Whether the organization allows profiles outside the organization domains. */\n  allowProfilesOutsideOrganization: Scalars[\"Boolean\"][\"output\"];\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** An API key owned by the organization the token was issued for. A tenant-level credential: it is not tied to any user. */\nexport type OrganizationApiKey = {\n  __typename?: \"OrganizationApiKey\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** When the key expires. A key with an expiration in the past is revoked and can no longer authenticate. */\n  expiresAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** When the key was last used to authenticate, if ever. */\n  lastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The human-readable name of the key. */\n  name: Scalars[\"String\"][\"output\"];\n  /** A redacted form of the secret, safe to display. The secret itself is only ever returned when the key is created. */\n  obfuscatedValue: Scalars[\"String\"][\"output\"];\n  /** The permission slugs the key carries. */\n  permissions: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The organization API key was created. */\nexport type OrganizationApiKeyCreated = {\n  __typename?: \"OrganizationApiKeyCreated\";\n  apiKey: OrganizationApiKey;\n  /** The plaintext secret, returned exactly once at creation. It is never retrievable again — no query or other mutation returns it. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\n/** The expiration of the organization API key was updated. The key is retained. */\nexport type OrganizationApiKeyExpired = {\n  __typename?: \"OrganizationApiKeyExpired\";\n  apiKey: OrganizationApiKey;\n};\n\nexport type OrganizationApiKeyList = {\n  __typename?: \"OrganizationApiKeyList\";\n  data: Array<OrganizationApiKey>;\n  listMetadata: ListMetadata;\n};\n\n/** This organization is not allowed to send invites. */\nexport type OrganizationBlockedFromSendingInvites = {\n  __typename?: \"OrganizationBlockedFromSendingInvites\";\n  /** Placeholder field to allow an empty @ObjectType. */\n  _placeholder?: Maybe<Scalars[\"Boolean\"][\"output\"]>;\n};\n\n/** A data provider the token's organization connects on behalf of all its members. */\nexport type OrganizationDataProvider = {\n  __typename?: \"OrganizationDataProvider\";\n  authMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */\n  availableScopes: Array<Scalars[\"String\"][\"output\"]>;\n  /** The actions the organization may take on this data provider right now. */\n  capabilities: OrganizationDataProviderCapabilities;\n  /** The non-secret configuration values pinned for the token's organization (or by the developer, for a provider whose credentials the developer manages). */\n  config: Array<DataProviderConfigEntry>;\n  /** The configuration fields the provider declares. */\n  configFields: Array<DataProviderConfigField>;\n  /** Whether the provider can be connected: always true when the developer manages the OAuth application, otherwise true once the organization has supplied a full credential pair. */\n  configured: Scalars[\"Boolean\"][\"output\"];\n  /** Every shared connection the organization holds to this data provider, in creation order. */\n  connectedAccounts: Array<DataProviderConnection>;\n  /** The organization's sole shared connection, when it has exactly one. Use `connectedAccounts` when several may exist. */\n  connection?: Maybe<DataProviderConnection>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The redacted OAuth application credentials configured for the token's organization, seeding the credentials dialog. */\n  credentials: DataProviderCredentials;\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  /** The scopes the developer configured, before any organization override. */\n  defaultScopes: Array<Scalars[\"String\"][\"output\"]>;\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Who disabled the provider when `enabled` is false: `developer` (the environment) or `organization` (the organization override). Null while enabled. */\n  disabledSource?: Maybe<Scalars[\"String\"][\"output\"]>;\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization has supplied its own OAuth client credentials for this data provider. Always false for a provider whose credentials the developer manages. */\n  hasCredentials: Scalars[\"Boolean\"][\"output\"];\n  /** The URL of the provider logo for dark backgrounds, when one is served. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider logo for light backgrounds, when one is served. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  integrationType: Scalars[\"String\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  slug: Scalars[\"String\"][\"output\"];\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The actions the token's organization may take on a data provider right now. */\nexport type OrganizationDataProviderCapabilities = {\n  __typename?: \"OrganizationDataProviderCapabilities\";\n  /** The auth methods currently available to this token for explicit Add: oauth, api_key, or client_credentials. Interactive OAuth requires a member session. Empty exactly when canAddConnection is false. */\n  addConnectionMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Whether an explicit Add is available for this provider and owner. Counts all connections, not a page of results. The server rechecks before creating. */\n  canAddConnection: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization may change the configuration of the data provider. */\n  canConfigure: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization may fill the compatibility slot. This can remain true at the additional-connection cap; use canAddConnection for explicit Add. */\n  canConnect: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization may disconnect a shared connection. */\n  canDisconnect: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the compatibility connection needs and supports reauthorization. Use each connectedAccounts row's capabilities for exact-target actions. */\n  canReauthorize: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the compatibility connection's API key or client credentials may be replaced. Use each connectedAccounts row's capabilities for exact-target actions. */\n  canUpdateCredentials: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type OrganizationDataProviderList = {\n  __typename?: \"OrganizationDataProviderList\";\n  data: Array<OrganizationDataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** A domain belonging to the organization the token was issued for. */\nexport type OrganizationDomain = {\n  __typename?: \"OrganizationDomain\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The fully qualified domain name. */\n  domain: Scalars[\"String\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The DNS name server provider detected for the domain. */\n  nameServer: DomainVerificationNameServer;\n  organizationId: Scalars[\"ID\"][\"output\"];\n  state: OrganizationDomainState;\n  /** The subdomain portion of the domain, if any. */\n  subdomain?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The DNS record prefix the customer must add to verify the domain. */\n  verificationPrefix?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The DNS record value the customer must add to verify the domain. */\n  verificationToken?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type OrganizationDomainList = {\n  __typename?: \"OrganizationDomainList\";\n  data: Array<OrganizationDomain>;\n  listMetadata: ListMetadata;\n};\n\n/** The verification state of an organization domain. */\nexport type OrganizationDomainState =\n  | \"Failed\"\n  | \"LegacyVerified\"\n  | \"Pending\"\n  | \"Verified\";\n\n/** An invitation to join the organization the token was issued for. */\nexport type OrganizationInvitation = {\n  __typename?: \"OrganizationInvitation\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The email address the invitation was sent to. */\n  email: Scalars[\"String\"][\"output\"];\n  /** When the invitation expires. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n  /** The ID of the invitation. */\n  id: Scalars[\"ID\"][\"output\"];\n  /** Slug of the role the invitee will be granted on acceptance, if any. */\n  roleSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  status: OrganizationInvitationStatus;\n};\n\nexport type OrganizationInvitationStatus =\n  | \"Accepted\"\n  | \"Expired\"\n  | \"Pending\"\n  | \"Revoked\";\n\n/** An organization member — a user with their membership status and assigned roles. */\nexport type OrganizationMember = {\n  __typename?: \"OrganizationMember\";\n  /** The actions the calling user may take on this member. Computed relative to the caller: empty for the caller themselves and for members whose permissions exceed the caller’s. */\n  actions: Array<OrganizationMemberAction>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  email: Scalars[\"String\"][\"output\"];\n  emailVerified: Scalars[\"Boolean\"][\"output\"];\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The user ID of the member. */\n  id: Scalars[\"ID\"][\"output\"];\n  /** Whether this member is the calling user. */\n  isCurrentUser: Scalars[\"Boolean\"][\"output\"];\n  /** Whether this member is provisioned by a directory. Directory-managed memberships cannot be revoked. */\n  isDirectoryManaged: Scalars[\"Boolean\"][\"output\"];\n  /** Timestamp of the member's most recent session activity. */\n  lastActivityAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  profilePictureUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  roles: Array<OrganizationMemberRole>;\n  status: OrganizationMemberStatus;\n};\n\n/** An action the calling user is allowed to take on an organization member. */\nexport type OrganizationMemberAction =\n  | \"EditRole\"\n  | \"ResendInvite\"\n  | \"RevokeInvite\"\n  | \"RevokeMembership\";\n\n/** A paginated list of organization members. */\nexport type OrganizationMemberList = {\n  __typename?: \"OrganizationMemberList\";\n  data: Array<OrganizationMember>;\n  listMetadata: ListMetadata;\n};\n\n/** A role assigned to an organization member. */\nexport type OrganizationMemberRole = {\n  __typename?: \"OrganizationMemberRole\";\n  name: Scalars[\"String\"][\"output\"];\n  slug: Scalars[\"String\"][\"output\"];\n};\n\nexport type OrganizationMemberStatus =\n  | \"Active\"\n  | \"InviteExpired\"\n  | \"InviteRevoked\"\n  | \"Invited\"\n  | \"NoInvite\";\n\n/** Enum represents the pagination order. */\nexport type PaginationOrder = \"Asc\" | \"Desc\" | \"Normal\";\n\n/** A registered passkey (WebAuthn credential) for the authenticated user. */\nexport type Passkey = {\n  __typename?: \"Passkey\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** When this passkey was last used to authenticate. */\n  lastVerifiedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The registration challenge was not found. Challenges are single-use and expire after a few minutes; restart registration. */\nexport type PasskeyChallengeNotFound = {\n  __typename?: \"PasskeyChallengeNotFound\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The passkey was deleted successfully. */\nexport type PasskeyDeleted = {\n  __typename?: \"PasskeyDeleted\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** No passkey with the given ID belongs to the authenticated user. */\nexport type PasskeyNotFound = {\n  __typename?: \"PasskeyNotFound\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The WebAuthn credential creation options to pass to the browser, plus the challenge ID to send back with the attestation in `verifyPasskey`. */\nexport type PasskeyRegistrationOptions = {\n  __typename?: \"PasskeyRegistrationOptions\";\n  /** The server-side challenge ID. Pass it to `verifyPasskey` together with the attestation response. */\n  challengeId: Scalars[\"String\"][\"output\"];\n  /** The WebAuthn PublicKeyCredentialCreationOptionsJSON to pass to navigator.credentials.create(). */\n  options: Scalars[\"JSON\"][\"output\"];\n};\n\n/** The WebAuthn attestation response failed verification. */\nexport type PasskeyVerificationFailed = {\n  __typename?: \"PasskeyVerificationFailed\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The passkey was verified and registered successfully. */\nexport type PasskeyVerified = {\n  __typename?: \"PasskeyVerified\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The types of characters in a password. */\nexport type PasswordCharacterType =\n  | \"Lowercase\"\n  | \"Number\"\n  | \"Symbol\"\n  | \"Uppercase\";\n\n/** The password was created successfully. */\nexport type PasswordCreated = {\n  __typename?: \"PasswordCreated\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The password requirements configured for the environment. Use these to describe the requirements before a password is submitted; `createPassword` and `updatePassword` enforce them. */\nexport type PasswordPolicy = {\n  __typename?: \"PasswordPolicy\";\n  /** The minimum number of characters. */\n  minimumLength: Scalars[\"Int\"][\"output\"];\n  /** The minimum zxcvbn strength score (0–4) a password must reach. */\n  minimumStrength: Scalars[\"Int\"][\"output\"];\n  /** Whether passwords found in known data breaches are rejected. */\n  rejectsBreachedPasswords: Scalars[\"Boolean\"][\"output\"];\n  /** Whether a lowercase letter is required. */\n  requiresLowercase: Scalars[\"Boolean\"][\"output\"];\n  /** Whether a number is required. */\n  requiresNumber: Scalars[\"Boolean\"][\"output\"];\n  /** Whether a special character is required. */\n  requiresSymbol: Scalars[\"Boolean\"][\"output\"];\n  /** Whether an uppercase letter is required. */\n  requiresUppercase: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The provided password does not meet the environment password policy requirements. */\nexport type PasswordPolicyViolation = {\n  __typename?: \"PasswordPolicyViolation\";\n  /** A machine-readable error code. Matches the `code` of the first entry in `violations`. */\n  code: Scalars[\"String\"][\"output\"];\n  /** A human-readable description of the policy violation. Describes the first entry in `violations`. */\n  message: Scalars[\"String\"][\"output\"];\n  /** Every way in which the password failed the policy, so all of them can be surfaced at once. */\n  violations: Array<PasswordViolation>;\n};\n\n/** The password was updated successfully. */\nexport type PasswordUpdated = {\n  __typename?: \"PasswordUpdated\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** A single way in which a password failed the environment password policy. Fields other than `code` and `message` are only populated for the codes that carry them. */\nexport type PasswordViolation = {\n  __typename?: \"PasswordViolation\";\n  /** For a missing `Symbol` character type, the symbols that satisfy the requirement. */\n  allowedSymbols?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** For `password_pwned`, how many times the password appears in known data breaches. */\n  breachOccurrences?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** For `password_missing_character_type`, the class of character that is missing. */\n  characterType?: Maybe<PasswordCharacterType>;\n  /** A machine-readable error code, e.g. `password_too_short`, `password_missing_character_type`, `password_pwned`, `password_reused`, `password_too_weak`, `password_contains_email`, `password_too_long`. */\n  code: Scalars[\"String\"][\"output\"];\n  /** For `password_too_long`, the allowed maximum length. */\n  maximumLength?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** A human-readable description of this violation. */\n  message: Scalars[\"String\"][\"output\"];\n  /** For `password_too_short`, the required minimum length. */\n  minimumLength?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** For `password_too_weak`, suggestions for choosing a stronger password. Empty for other codes. */\n  strengthSuggestions: Array<Scalars[\"String\"][\"output\"]>;\n  /** For `password_too_weak`, a summary of why it is weak. */\n  strengthWarning?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** A permission that can be granted to a role within the environment. */\nexport type Permission = {\n  __typename?: \"Permission\";\n  /** The kinds of API key this permission may be granted to, in enum order. Empty when it cannot be granted to any API key. */\n  apiKeyOwnerTypes: Array<ApiKeyOwnerType>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  slug: Scalars[\"String\"][\"output\"];\n  /** Whether this is a WorkOS-managed system permission that cannot be modified. */\n  system: Scalars[\"Boolean\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type PermissionFilterInput = {\n  /** Only return permissions that may be granted to this type of API key. */\n  apiKeyOwnerType?: InputMaybe<ApiKeyOwnerType>;\n  /** When true, only return permissions the calling user effectively holds in the token's organization. This is the same set the API key create mutations validate against, so combining it with `apiKeyOwnerType` yields exactly the permissions the caller may grant to a new key. Tokens that do not act as an organization member (credential tokens, standalone widget sessions) receive an empty list. */\n  heldByCaller?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n};\n\nexport type PermissionList = {\n  __typename?: \"PermissionList\";\n  data: Array<Permission>;\n  listMetadata: ListMetadata;\n};\n\n/** The profile was updated successfully. */\nexport type ProfileUpdated = {\n  __typename?: \"ProfileUpdated\";\n  user: User;\n};\n\nexport type Query = {\n  __typename?: \"Query\";\n  auditEvent: AuditEvent;\n  auditEvents: AuditEventList;\n  auditLogExport: AuditLogExport;\n  /** The audit log stream destination configured for the token's organization, or null when no stream is configured. */\n  auditLogStream?: Maybe<AuditLogStream>;\n  /** The authentication methods the environment allows and the password policy it enforces. Requires a session token. */\n  authenticationSettings: AuthenticationSettings;\n  /** The AuthKit settings for the token's environment. */\n  authkitSettings: AuthKitSettings;\n  /** The branding the token renders: its application's own once that application has been customized, otherwise its environment's. */\n  branding: Branding;\n  /** Placeholder query for the Client GraphQL API scaffold. Returns a static value and is replaced by real resolvers. */\n  clientApiStatus: Scalars[\"String\"][\"output\"];\n  /** List the data providers the token's organization can configure for its members, with the organization's current configuration of each. */\n  configurableDataProviders: ConfigurableDataProviderList;\n  /** Return a data provider by ID within the token's environment. */\n  dataProvider: DataProvider;\n  /** Report whether an authorization attempt is still outstanding. Poll this with the `state` returned when the authorization was created while the popup is open; it flips to `connecting: false` once the provider callback has been handled or the attempt expired. */\n  dataProviderAuthorizationStatus: DataProviderAuthorizationStatus;\n  /** Return one of the authenticated user's data provider connections by ID. */\n  dataProviderConnection: DataProviderConnection;\n  /** List the authenticated user's data provider connections, including their status. */\n  dataProviderConnections: DataProviderConnectionList;\n  /** List the data providers configured in the token's environment. */\n  dataProviders: DataProviderList;\n  /** Return a Directory Sync connection by ID within the token's organization. */\n  directoryConnection: Directory;\n  /** List the Directory Sync connections for the token's organization. */\n  directoryConnections: DirectoryList;\n  /** List the groups of a Directory Sync connection. */\n  directoryGroups: DirectoryGroupList;\n  /** List the users of a Directory Sync connection. */\n  directoryUsers: DirectoryUserList;\n  /** The permissions a user effectively has in the organization the token was issued for, including permissions inherited through the user's roles. Callers may read their own effective permissions; reading another member's requires the elevated user:read grant. */\n  effectivePermissions: Array<Permission>;\n  /** The feature flags that evaluate to enabled for a user in the environment the token was issued for, including flags targeted at the token's organization. Flags absent from the list evaluate to false. Callers may evaluate their own flags; evaluating another member of the token's organization requires the elevated user:read grant. */\n  evaluatedFlags: FlagList;\n  /** Fetch a feature flag by ID from the project that owns the token's environment. */\n  flag: Flag;\n  /** Fetch a feature flag by slug from the project that owns the token's environment. */\n  flagBySlug: Flag;\n  /** List the feature flags of the project that owns the token's environment, with their state in that environment. */\n  flags: FlagList;\n  /** Returns the currently authenticated user (the subject of the token). */\n  me: User;\n  /** Returns an organization by ID within the token's environment. */\n  organization: Organization;\n  /** List the active API keys owned by the token's organization. Secrets are never included. */\n  organizationApiKeys: OrganizationApiKeyList;\n  /** List the data providers the token's organization connects on behalf of all its members, with the organization's shared connection when it has one. */\n  organizationDataProviders: OrganizationDataProviderList;\n  /** Return a domain by ID within the token's organization, including its verification status. */\n  organizationDomain: OrganizationDomain;\n  /** List the domains belonging to the organization the token was issued for. */\n  organizationDomains: OrganizationDomainList;\n  /** List members of the organization the token was issued for, with their roles. */\n  organizationMemberships: OrganizationMemberList;\n  /** List organizations the authenticated user belongs to. */\n  organizations: Array<UserOrganization>;\n  /** List registered passkeys for the authenticated user. Requires a session token. */\n  passkeys: Array<Passkey>;\n  /** List the permissions defined in the environment the token was issued for. */\n  permissions: PermissionList;\n  /** Fetch a single role available to the organization the token was issued for. */\n  role?: Maybe<Role>;\n  /** List roles available to the organization the token was issued for, with role assignment configuration. */\n  roles: RolesResult;\n  /** List active sessions for the authenticated user. Requires a session token. */\n  sessions: Array<Session>;\n  /** List the data providers the token's organization has connected for all its members, with the shared connections the caller may use. Available to any active member of the organization. */\n  sharedDataProviders: SharedDataProviderList;\n  /** Returns an SSO connection by ID, including its IdP setup status, provided it belongs to the token's organization. */\n  ssoConnection: Connection;\n  /** List the SSO connections belonging to the organization the token was issued for. */\n  ssoConnections: Array<Connection>;\n  /** Returns a user by ID, provided they are a member of the token's organization. */\n  user: User;\n  /** List the active user-scoped API keys in the token's organization. Returns only the token user's own keys unless the token holds the organization-wide user API key grant. Secrets are never included. */\n  userApiKeys: UserApiKeyList;\n};\n\nexport type QueryAuditEventArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryAuditEventsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  filter: AuditEventFilterInput;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryAuditLogExportArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryConfigurableDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDataProviderArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryDataProviderAuthorizationStatusArgs = {\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  state: Scalars[\"String\"][\"input\"];\n};\n\nexport type QueryDataProviderConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryDataProviderConnectionsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDirectoryConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryDirectoryConnectionsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryDirectoryGroupsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  directoryId: Scalars[\"ID\"][\"input\"];\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDirectoryUsersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  directoryId: Scalars[\"ID\"][\"input\"];\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryEffectivePermissionsArgs = {\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryEvaluatedFlagsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryFlagArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryFlagBySlugArgs = {\n  slug: Scalars[\"String\"][\"input\"];\n};\n\nexport type QueryFlagsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  enabled?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryOrganizationArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryOrganizationApiKeysArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryOrganizationDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryOrganizationDomainArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryOrganizationDomainsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryOrganizationMembershipsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  roleSlug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryPermissionsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  filter?: InputMaybe<PermissionFilterInput>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryRoleArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QuerySharedDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  supportsMultipleConnections?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n};\n\nexport type QuerySsoConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryUserArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryUserApiKeysArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\n/** Input for beginning passkey (WebAuthn) registration. */\nexport type RegisterPasskeyInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type RegisterPasskeyResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasskeyRegistrationOptions;\n\nexport type RemoveMemberInput = {\n  /** The user ID of the member to remove. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type RemoveMemberResult =\n  | MemberIsManagedByDirectory\n  | MemberNotFound\n  | MemberRemoved;\n\n/** Input for removing all TOTP factors. */\nexport type RemoveMfaFactorInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type RemoveMfaFactorResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | MfaFactorRemoved\n  | NoMfaFactorsEnrolled;\n\nexport type ResendInvitationInput = {\n  /** The ID of the user whose invitation should be resent. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\n/** No invitation exists for this user in this organization. */\nexport type ResendInvitationNotFound = {\n  __typename?: \"ResendInvitationNotFound\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\nexport type ResendInvitationResult =\n  | InvitationResent\n  | InviteeAlreadyAccepted\n  | InviteeEmailNotDeliverable\n  | ResendInvitationNotFound;\n\n/** Input for revoking all sessions. */\nexport type RevokeAllSessionsInput = {\n  /** The ID of the session to keep active in addition to the session the request was authenticated with. Use this when the token is not itself a user session. Ignored unless it is one of the authenticated user’s own active sessions. */\n  currentSessionId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n};\n\nexport type RevokeAllSessionsResult = AllSessionsRevoked;\n\nexport type RevokeInvitationInput = {\n  /** The ID of the user whose pending invitation should be revoked. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type RevokeInvitationResult =\n  | InvitationNotFound\n  | InvitationNotPending\n  | InvitationRevoked;\n\n/** Input for revoking a specific session. */\nexport type RevokeSessionInput = {\n  /** The ID of the session to revoke. */\n  sessionId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type RevokeSessionResult = SessionNotFound | SessionRevoked;\n\n/** A role available within the organization. */\nexport type Role = {\n  __typename?: \"Role\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** Whether this is the default role assigned to new members. */\n  isDefault: Scalars[\"Boolean\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  slug: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** Confirms that a role has been scheduled for deletion. */\nexport type RoleDeleted = {\n  __typename?: \"RoleDeleted\";\n  /** The ID of the deleted role. */\n  id: Scalars[\"ID\"][\"output\"];\n};\n\n/** No active roles with the given slugs exist in the environment. */\nexport type RoleNotFound = {\n  __typename?: \"RoleNotFound\";\n  /** The role slugs that did not resolve to active roles. */\n  roleSlugs: Array<Scalars[\"String\"][\"output\"]>;\n};\n\n/** Roles available in the organization along with role assignment configuration. */\nexport type RolesResult = {\n  __typename?: \"RolesResult\";\n  /** Whether members can be assigned multiple roles simultaneously. */\n  multipleRolesEnabled: Scalars[\"Boolean\"][\"output\"];\n  roles: Array<Role>;\n};\n\n/** Input for requesting an email change verification code. */\nexport type SendEmailChangeInput = {\n  /** The elevated access token from a successful `verifyCurrentEmail` call. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The new email address to change to. */\n  newEmail: Scalars[\"String\"][\"input\"];\n};\n\nexport type SendEmailChangeResult =\n  | DailyEmailQuotaExceeded\n  | EmailChangeNotAvailable\n  | EmailChangeSent\n  | EmailManagedByProvider\n  | EmailNotAvailable\n  | IdentityVerificationExpired\n  | IdentityVerificationInvalid\n  | InvalidEmail;\n\nexport type SendVerificationCodeResult =\n  | DailyEmailQuotaExceeded\n  | VerificationCodeSent;\n\n/** An active user session. */\nexport type Session = {\n  __typename?: \"Session\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  currentLocation?: Maybe<SessionLocation>;\n  id: Scalars[\"ID\"][\"output\"];\n  ipAddress?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether this session is the one making the request. */\n  isCurrent: Scalars[\"Boolean\"][\"output\"];\n  lastActivityAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  organizationId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  state: SessionState;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  userAgent?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** Approximate geographic location derived from the session IP. */\nexport type SessionLocation = {\n  __typename?: \"SessionLocation\";\n  cityName: Scalars[\"String\"][\"output\"];\n  countryISOCode: Scalars[\"String\"][\"output\"];\n};\n\n/** No session was found with the given ID. */\nexport type SessionNotFound = {\n  __typename?: \"SessionNotFound\";\n  /** The session ID that did not resolve to a session. */\n  sessionId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The session was revoked successfully. */\nexport type SessionRevoked = {\n  __typename?: \"SessionRevoked\";\n  session: Session;\n};\n\n/** The lifecycle state of a session. */\nexport type SessionState = {\n  __typename?: \"SessionState\";\n  expiresAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** Session state: Issued, Revoked, etc. */\n  tag: Scalars[\"String\"][\"output\"];\n};\n\nexport type SetDataProviderConfigurationInput = {\n  /** The organization's own OAuth client ID. Must be supplied together with `clientSecret`. */\n  clientId?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization's own OAuth client secret. Write-only: it is stored encrypted and never returned; clients read `hasCredentials` instead. */\n  clientSecret?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Non-secret configuration values declared by the provider. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The data provider to configure for the token's organization. Configuration always applies to the token's organization; it cannot be set for another one. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Whether the organization's users can see and connect the data provider. */\n  enabled?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n  /** The scopes the organization requests. Only providers where the organization brings its own OAuth credentials may widen beyond the defaults. */\n  scopes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type SetDataProviderConfigurationResult =\n  | DataProviderConfigInvalid\n  | DataProviderConfiguration;\n\nexport type SetDataProviderEnabledInput = {\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Whether the data provider is available to the organization the token was issued for. */\n  enabled: Scalars[\"Boolean\"][\"input\"];\n};\n\nexport type SetOrganizationDataProviderConfigurationInput = {\n  /** The organization's own OAuth client ID. Must be supplied together with `clientSecret`. */\n  clientId?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization's own OAuth client secret. Write-only: it is stored encrypted and never returned; clients read `hasCredentials` instead. */\n  clientSecret?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Non-secret configuration values declared by the provider. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The organization-owned data provider to configure (`organizationDataProviders`). Configuration always applies to the token's organization; it cannot be set for another one. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Whether the organization's shared connection to the data provider is enabled. */\n  enabled?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n  /** The scopes the organization requests. Only providers where the organization brings its own OAuth credentials may widen beyond the defaults. */\n  scopes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\n/** A data provider the token's organization has connected on behalf of all its members, with the shared connections a member may use. */\nexport type SharedDataProvider = {\n  __typename?: \"SharedDataProvider\";\n  /** The organization's shared connections to the provider that the caller may use. Never empty: providers without a usable shared connection are not listed. */\n  connectedAccounts: Array<SharedDataProviderConnection>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider's icon for dark backgrounds. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the icon the widget displays for the provider. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider's icon. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The provider type this data provider was created from. */\n  integrationType: Scalars[\"String\"][\"output\"];\n  /** The display name of the provider. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The stable identifier for the provider. */\n  slug: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** One of the organization's shared connections to a data provider, as visible to any active member. */\nexport type SharedDataProviderConnection = {\n  __typename?: \"SharedDataProviderConnection\";\n  /** How the connection authenticates: `oauth`, `api_key`, or `client_credentials`. */\n  authMethod: Scalars[\"String\"][\"output\"];\n  /** Whether the connection can be used right now: `available`, or `needs_admin_attention` when an admin must re-authorize it first. */\n  availability: Scalars[\"String\"][\"output\"];\n  /** Whether this is the compatibility connection or a standard connection. */\n  connectionRole: DataInstallationConnectionRole;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The data provider this connection was created for. */\n  dataProviderId: Scalars[\"ID\"][\"output\"];\n  /** The slug of the connected data provider. */\n  dataProviderSlug: Scalars[\"String\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The status of the connection: `connected` or `needs_reauthorization`. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type SharedDataProviderList = {\n  __typename?: \"SharedDataProviderList\";\n  data: Array<SharedDataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** A sign-in session initiated through an SSO connection. Mirrors the session exposed by the Widgets SSO connections API. */\nexport type SsoConnectionSession = {\n  __typename?: \"SsoConnectionSession\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The state the session reached. */\n  state: SsoSessionState;\n};\n\n/** The protocol family (SAML or OpenID Connect) of an SSO connection. */\nexport type SsoProviderTag = \"OpenIdConnect\" | \"Saml\";\n\n/** The state an SSO sign-in session reached. */\nexport type SsoSessionState =\n  | \"Authorized\"\n  | \"Failed\"\n  | \"Started\"\n  | \"Successful\"\n  | \"Terminated\"\n  | \"Timedout\";\n\n/** The user already has a verified TOTP factor enrolled. */\nexport type TotpAlreadyEnrolled = {\n  __typename?: \"TotpAlreadyEnrolled\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** TOTP factor details returned after enrollment. */\nexport type TotpFactor = {\n  __typename?: \"TotpFactor\";\n  /** The authentication challenge ID. */\n  authenticationChallengeId: Scalars[\"String\"][\"output\"];\n  /** The authentication factor ID. */\n  authenticationFactorId: Scalars[\"String\"][\"output\"];\n  /** A data-URI PNG of the QR code. */\n  qrCode: Scalars[\"String\"][\"output\"];\n  /** The TOTP secret for manual entry. */\n  secret: Scalars[\"String\"][\"output\"];\n  /** The TOTP URI for provisioning (otpauth://…). */\n  uri: Scalars[\"String\"][\"output\"];\n};\n\n/** The TOTP verification code was invalid. */\nexport type TotpVerificationFailed = {\n  __typename?: \"TotpVerificationFailed\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The TOTP verification succeeded and the factor is active. */\nexport type TotpVerified = {\n  __typename?: \"TotpVerified\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type UpdateDataProviderConnectionLabelInput = {\n  /** A non-unique label of at most 255 Unicode code points, preserved exactly. Omit to preserve the current label; null clears it. Does not change the account identifier. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The exact connection to rename. No other connection is selected if this ID is missing or out of scope. */\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type UpdateDataProviderConnectionLabelResult = {\n  __typename?: \"UpdateDataProviderConnectionLabelResult\";\n  /** The updated connection. Credentials, identity, connection role, and state are unchanged. */\n  connection: DataProviderConnection;\n  /** Advisory warnings for the supplied label. Empty when no label was supplied or no exact duplicate exists for this provider and owner. */\n  warnings: Array<DataProviderConnectionLabelWarning>;\n};\n\nexport type UpdateMemberRoleInput = {\n  /** Slugs of the roles to assign. When multiple roles are enabled for the environment, all provided roles are assigned; otherwise only the first slug is used. */\n  roleSlugs: Array<Scalars[\"String\"][\"input\"]>;\n  /** The user ID of the member to update. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type UpdateMemberRoleResult =\n  | MemberNotFound\n  | MemberRoleUpdated\n  | RoleNotFound;\n\n/** Input for changing an existing password. Requires the current password for verification. */\nexport type UpdatePasswordInput = {\n  /** The current password for verification. */\n  currentPassword: Scalars[\"String\"][\"input\"];\n  /** The new password. Must satisfy the environment password policy. */\n  newPassword: Scalars[\"String\"][\"input\"];\n};\n\nexport type UpdatePasswordResult =\n  | IncorrectPassword\n  | PasswordPolicyViolation\n  | PasswordUpdated;\n\n/** Input for updating the authenticated user's profile. */\nexport type UpdateProfileInput = {\n  /** The user's first name. Pass an empty string to clear. */\n  firstName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The user's last name. Pass an empty string to clear. */\n  lastName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The user's locale as a BCP 47 language tag (e.g. 'en-US'). Pass an empty string to clear. */\n  locale?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type UpdateProfileResult = InvalidLocale | ProfileUpdated;\n\nexport type UpdateRoleInput = {\n  /** Human-readable description of the role. This is a full replace of the role, so an omitted or null description clears it — resupply the current value to preserve it. */\n  description?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The ID of the role to update. */\n  id: Scalars[\"ID\"][\"input\"];\n  /** Human-readable name for the role. */\n  name: Scalars[\"String\"][\"input\"];\n  /** Slugs of the permissions granted to the role. Replaces the existing set when provided. */\n  permissions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type UpdateSsoConnectionInput = {\n  id: Scalars[\"ID\"][\"input\"];\n  /** A new human-readable name for the connection. */\n  name?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\n/** A user in the current environment. */\nexport type User = {\n  __typename?: \"User\";\n  connectedAccounts: Array<ConnectedAccount>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  email: Scalars[\"String\"][\"output\"];\n  emailVerified: Scalars[\"Boolean\"][\"output\"];\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether multi-factor authentication (TOTP) is set up for this user. Always `false` when the environment has MFA turned off — use `authenticationSettings.mfaEnabled` to tell the two apart. Only populated on `me`. */\n  mfaEnabled: Scalars[\"Boolean\"][\"output\"];\n  /** When MFA was last used to authenticate. Only populated on `me`. */\n  mfaLastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** When a password was last used to authenticate. Only populated on `me`. */\n  passwordLastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** Whether this user has a password set. Reflects the user regardless of whether the environment allows password authentication; use `authenticationSettings.passwordAuthEnabled` for that. Only populated on `me`. */\n  passwordSet: Scalars[\"Boolean\"][\"output\"];\n  profilePictureUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The user already has a password set. */\nexport type UserAlreadyHasPassword = {\n  __typename?: \"UserAlreadyHasPassword\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** An API key owned by a member of the token's organization. A user-scoped key acts as that user, so it is never interchangeable with an organization API key. */\nexport type UserApiKey = {\n  __typename?: \"UserApiKey\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** When the key expires. A key with an expiration in the past is revoked and can no longer authenticate. */\n  expiresAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** When the key was last used to authenticate, if ever. */\n  lastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The human-readable name of the key. */\n  name: Scalars[\"String\"][\"output\"];\n  /** A redacted form of the secret, safe to display. The secret itself is only ever returned when the key is created. */\n  obfuscatedValue: Scalars[\"String\"][\"output\"];\n  owner: UserApiKeyOwner;\n  /** The permission slugs the key carries. */\n  permissions: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The user-scoped API key was created. */\nexport type UserApiKeyCreated = {\n  __typename?: \"UserApiKeyCreated\";\n  apiKey: UserApiKey;\n  /** The plaintext secret, returned exactly once at creation. It is never retrievable again — no query or other mutation returns it. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\n/** The expiration of the user-scoped API key was updated. The key is retained. */\nexport type UserApiKeyExpired = {\n  __typename?: \"UserApiKeyExpired\";\n  apiKey: UserApiKey;\n};\n\nexport type UserApiKeyList = {\n  __typename?: \"UserApiKeyList\";\n  data: Array<UserApiKey>;\n  listMetadata: ListMetadata;\n};\n\n/** The userland user a user-scoped API key belongs to. */\nexport type UserApiKeyOwner = {\n  __typename?: \"UserApiKeyOwner\";\n  /** The owner's display name, falling back to their email when they have no name. */\n  displayName: Scalars[\"String\"][\"output\"];\n  email: Scalars[\"String\"][\"output\"];\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The invitation was created and the email sent. */\nexport type UserInvited = {\n  __typename?: \"UserInvited\";\n  invitation: OrganizationInvitation;\n};\n\n/** An organization the authenticated user belongs to, with a flag indicating whether it is the token's current organization. */\nexport type UserOrganization = {\n  __typename?: \"UserOrganization\";\n  id: Scalars[\"ID\"][\"output\"];\n  /** Whether this is the organization the token is currently scoped to. */\n  isCurrent: Scalars[\"Boolean\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has expired. */\nexport type VerificationCodeExpired = {\n  __typename?: \"VerificationCodeExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code is incorrect. */\nexport type VerificationCodeIncorrect = {\n  __typename?: \"VerificationCodeIncorrect\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has already been used. */\nexport type VerificationCodePreviouslyUsed = {\n  __typename?: \"VerificationCodePreviouslyUsed\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** A verification code was sent to the current email address for identity verification. */\nexport type VerificationCodeSent = {\n  __typename?: \"VerificationCodeSent\";\n  /** The authentication challenge ID to use in subsequent steps. */\n  authenticationChallengeId: Scalars[\"ID\"][\"output\"];\n  /** When the verification code expires. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** Too many verification code attempts. */\nexport type VerificationTooManyAttempts = {\n  __typename?: \"VerificationTooManyAttempts\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Input for verifying the current email address. */\nexport type VerifyCurrentEmailInput = {\n  /** The authentication challenge ID returned from `sendVerificationCode`. */\n  authenticationChallengeId: Scalars[\"ID\"][\"input\"];\n  /** The verification code sent to the current email address. */\n  code: Scalars[\"String\"][\"input\"];\n};\n\nexport type VerifyCurrentEmailResult =\n  | CurrentEmailVerified\n  | VerificationCodeExpired\n  | VerificationCodeIncorrect\n  | VerificationCodePreviouslyUsed\n  | VerificationTooManyAttempts;\n\n/** Input for completing passkey (WebAuthn) registration by verifying the attestation created by the authenticator. */\nexport type VerifyPasskeyInput = {\n  /** The challenge ID returned by `registerPasskey`. */\n  challengeId: Scalars[\"String\"][\"input\"];\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The WebAuthn RegistrationResponseJSON returned by navigator.credentials.create(). */\n  response: Scalars[\"JSON\"][\"input\"];\n};\n\nexport type VerifyPasskeyResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasskeyChallengeNotFound\n  | PasskeyVerificationFailed\n  | PasskeyVerified;\n\n/** Input for verifying a TOTP enrollment. */\nexport type VerifyTotpInput = {\n  /** The authentication challenge ID from enrollTotp. */\n  authenticationChallengeId: Scalars[\"String\"][\"input\"];\n  /** The TOTP code from the authenticator app. */\n  code: Scalars[\"String\"][\"input\"];\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type VerifyTotpResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | TotpVerificationFailed\n  | TotpVerified;\n\n/** An X.509 certificate registered on a SAML connection. Mirrors the certificate exposed by the Widgets SSO connections API. */\nexport type X509Certificate = {\n  __typename?: \"X509Certificate\";\n  id: Scalars[\"ID\"][\"output\"];\n  /** When an expiry notification was last sent for this certificate. */\n  lastExpiryEventSentAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The end of the certificate validity period. */\n  notAfter?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The start of the certificate validity period. */\n  notBefore?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The PEM-encoded certificate. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\nexport type ClientApiStatusQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type ClientApiStatusQuery = {\n  __typename?: \"Query\";\n  clientApiStatus: string;\n};\n\nexport type OrganizationDomainFieldsFragment = {\n  __typename?: \"OrganizationDomain\";\n  id: string;\n  organizationId: string;\n  domain: string;\n  subdomain?: string | null;\n  state: OrganizationDomainState;\n  verificationPrefix?: string | null;\n  verificationToken?: string | null;\n  nameServer: DomainVerificationNameServer;\n  createdAt: string;\n};\n\nexport type ListOrganizationDomainsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListOrganizationDomainsQuery = {\n  __typename?: \"Query\";\n  organizationDomains: {\n    __typename?: \"OrganizationDomainList\";\n    data: Array<{\n      __typename?: \"OrganizationDomain\";\n      id: string;\n      organizationId: string;\n      domain: string;\n      subdomain?: string | null;\n      state: OrganizationDomainState;\n      verificationPrefix?: string | null;\n      verificationToken?: string | null;\n      nameServer: DomainVerificationNameServer;\n      createdAt: string;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type CreateOrganizationDomainMutationVariables = Exact<{\n  domain: Scalars[\"String\"][\"input\"];\n}>;\n\nexport type CreateOrganizationDomainMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type DeleteOrganizationDomainMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteOrganizationDomainMutation = {\n  __typename?: \"Mutation\";\n  deleteOrganizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type ReverifyOrganizationDomainMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type ReverifyOrganizationDomainMutation = {\n  __typename?: \"Mutation\";\n  reverifyOrganizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type UserFieldsFragment = {\n  __typename?: \"User\";\n  id: string;\n  email: string;\n  emailVerified: boolean;\n  firstName?: string | null;\n  lastName?: string | null;\n  profilePictureUrl?: string | null;\n  mfaEnabled: boolean;\n  mfaLastUsedAt?: string | null;\n  passwordSet: boolean;\n  passwordLastUsedAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type ConnectedAccountFieldsFragment = {\n  __typename?: \"ConnectedAccount\";\n  id: string;\n  provider: OAuthProvider;\n  email?: string | null;\n  firstName?: string | null;\n  lastName?: string | null;\n  profilePictureUrl?: string | null;\n  lastLoginAt?: string | null;\n};\n\nexport type PasswordViolationFieldsFragment = {\n  __typename?: \"PasswordViolation\";\n  code: string;\n  message: string;\n  characterType?: PasswordCharacterType | null;\n  minimumLength?: number | null;\n  maximumLength?: number | null;\n  allowedSymbols?: string | null;\n  breachOccurrences?: number | null;\n  strengthWarning?: string | null;\n  strengthSuggestions: Array<string>;\n};\n\nexport type MeQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type MeQuery = {\n  __typename?: \"Query\";\n  me: {\n    __typename?: \"User\";\n    id: string;\n    email: string;\n    emailVerified: boolean;\n    firstName?: string | null;\n    lastName?: string | null;\n    profilePictureUrl?: string | null;\n    mfaEnabled: boolean;\n    mfaLastUsedAt?: string | null;\n    passwordSet: boolean;\n    passwordLastUsedAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    connectedAccounts: Array<{\n      __typename?: \"ConnectedAccount\";\n      id: string;\n      provider: OAuthProvider;\n      email?: string | null;\n      firstName?: string | null;\n      lastName?: string | null;\n      profilePictureUrl?: string | null;\n      lastLoginAt?: string | null;\n    }>;\n  };\n};\n\nexport type AuthenticationSettingsQueryVariables = Exact<{\n  [key: string]: never;\n}>;\n\nexport type AuthenticationSettingsQuery = {\n  __typename?: \"Query\";\n  authenticationSettings: {\n    __typename?: \"AuthenticationSettings\";\n    mfaEnabled: boolean;\n    mfaRequired: boolean;\n    passkeyAuthEnabled: boolean;\n    passwordAuthEnabled: boolean;\n    passwordPolicy: {\n      __typename?: \"PasswordPolicy\";\n      minimumLength: number;\n      minimumStrength: number;\n      rejectsBreachedPasswords: boolean;\n      requiresLowercase: boolean;\n      requiresNumber: boolean;\n      requiresSymbol: boolean;\n      requiresUppercase: boolean;\n    };\n  };\n};\n\nexport type PasskeysQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type PasskeysQuery = {\n  __typename?: \"Query\";\n  passkeys: Array<{\n    __typename?: \"Passkey\";\n    id: string;\n    createdAt: string;\n    updatedAt: string;\n    lastVerifiedAt?: string | null;\n  }>;\n};\n\nexport type UpdateProfileMutationVariables = Exact<{\n  input: UpdateProfileInput;\n}>;\n\nexport type UpdateProfileMutation = {\n  __typename?: \"Mutation\";\n  updateProfile:\n    | { __typename: \"InvalidLocale\" }\n    | {\n        __typename: \"ProfileUpdated\";\n        user: {\n          __typename?: \"User\";\n          id: string;\n          email: string;\n          emailVerified: boolean;\n          firstName?: string | null;\n          lastName?: string | null;\n          profilePictureUrl?: string | null;\n          mfaEnabled: boolean;\n          mfaLastUsedAt?: string | null;\n          passwordSet: boolean;\n          passwordLastUsedAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      };\n};\n\nexport type SendVerificationCodeMutationVariables = Exact<{\n  [key: string]: never;\n}>;\n\nexport type SendVerificationCodeMutation = {\n  __typename?: \"Mutation\";\n  sendVerificationCode:\n    | { __typename: \"DailyEmailQuotaExceeded\" }\n    | {\n        __typename: \"VerificationCodeSent\";\n        authenticationChallengeId: string;\n        expiresAt: string;\n      };\n};\n\nexport type VerifyCurrentEmailMutationVariables = Exact<{\n  input: VerifyCurrentEmailInput;\n}>;\n\nexport type VerifyCurrentEmailMutation = {\n  __typename?: \"Mutation\";\n  verifyCurrentEmail:\n    | {\n        __typename: \"CurrentEmailVerified\";\n        elevatedAccessToken: string;\n        expiresAt: string;\n      }\n    | { __typename: \"VerificationCodeExpired\" }\n    | { __typename: \"VerificationCodeIncorrect\" }\n    | { __typename: \"VerificationCodePreviouslyUsed\" }\n    | { __typename: \"VerificationTooManyAttempts\" };\n};\n\nexport type SendEmailChangeMutationVariables = Exact<{\n  input: SendEmailChangeInput;\n}>;\n\nexport type SendEmailChangeMutation = {\n  __typename?: \"Mutation\";\n  sendEmailChange:\n    | { __typename: \"DailyEmailQuotaExceeded\" }\n    | { __typename: \"EmailChangeNotAvailable\" }\n    | { __typename: \"EmailChangeSent\"; expiresAt: string }\n    | { __typename: \"EmailManagedByProvider\" }\n    | { __typename: \"EmailNotAvailable\" }\n    | { __typename: \"IdentityVerificationExpired\" }\n    | { __typename: \"IdentityVerificationInvalid\" }\n    | { __typename: \"InvalidEmail\" };\n};\n\nexport type ConfirmEmailChangeMutationVariables = Exact<{\n  input: ConfirmEmailChangeInput;\n}>;\n\nexport type ConfirmEmailChangeMutation = {\n  __typename?: \"Mutation\";\n  confirmEmailChange:\n    | { __typename: \"EmailChangeCodeExpired\" }\n    | { __typename: \"EmailChangeCodeIncorrect\" }\n    | { __typename: \"EmailChangeCodePreviouslyUsed\" }\n    | {\n        __typename: \"EmailChangeConfirmed\";\n        elevatedAccessToken: string;\n        expiresAt: string;\n        user: {\n          __typename?: \"User\";\n          id: string;\n          email: string;\n          emailVerified: boolean;\n          firstName?: string | null;\n          lastName?: string | null;\n          profilePictureUrl?: string | null;\n          mfaEnabled: boolean;\n          mfaLastUsedAt?: string | null;\n          passwordSet: boolean;\n          passwordLastUsedAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      }\n    | { __typename: \"EmailChangeTooManyAttempts\" }\n    | { __typename: \"EmailManagedByProvider\" }\n    | { __typename: \"EmailNotAvailable\" }\n    | { __typename: \"IdentityVerificationExpired\" }\n    | { __typename: \"IdentityVerificationInvalid\" }\n    | { __typename: \"InvalidEmail\" }\n    | { __typename: \"NoPendingEmailChange\" };\n};\n\nexport type CreatePasswordMutationVariables = Exact<{\n  input: CreatePasswordInput;\n}>;\n\nexport type CreatePasswordMutation = {\n  __typename?: \"Mutation\";\n  createPassword:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"PasswordCreated\"; success: boolean }\n    | {\n        __typename: \"PasswordPolicyViolation\";\n        code: string;\n        message: string;\n        violations: Array<{\n          __typename?: \"PasswordViolation\";\n          code: string;\n          message: string;\n          characterType?: PasswordCharacterType | null;\n          minimumLength?: number | null;\n          maximumLength?: number | null;\n          allowedSymbols?: string | null;\n          breachOccurrences?: number | null;\n          strengthWarning?: string | null;\n          strengthSuggestions: Array<string>;\n        }>;\n      }\n    | { __typename: \"UserAlreadyHasPassword\" };\n};\n\nexport type UpdatePasswordMutationVariables = Exact<{\n  input: UpdatePasswordInput;\n}>;\n\nexport type UpdatePasswordMutation = {\n  __typename?: \"Mutation\";\n  updatePassword:\n    | { __typename: \"IncorrectPassword\" }\n    | {\n        __typename: \"PasswordPolicyViolation\";\n        code: string;\n        message: string;\n        violations: Array<{\n          __typename?: \"PasswordViolation\";\n          code: string;\n          message: string;\n          characterType?: PasswordCharacterType | null;\n          minimumLength?: number | null;\n          maximumLength?: number | null;\n          allowedSymbols?: string | null;\n          breachOccurrences?: number | null;\n          strengthWarning?: string | null;\n          strengthSuggestions: Array<string>;\n        }>;\n      }\n    | { __typename: \"PasswordUpdated\"; success: boolean };\n};\n\nexport type EnrollTotpMutationVariables = Exact<{\n  input: EnrollTotpInput;\n}>;\n\nexport type EnrollTotpMutation = {\n  __typename?: \"Mutation\";\n  enrollTotp:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"TotpAlreadyEnrolled\" }\n    | {\n        __typename: \"TotpFactor\";\n        authenticationChallengeId: string;\n        authenticationFactorId: string;\n        secret: string;\n        uri: string;\n        qrCode: string;\n      };\n};\n\nexport type VerifyTotpMutationVariables = Exact<{\n  input: VerifyTotpInput;\n}>;\n\nexport type VerifyTotpMutation = {\n  __typename?: \"Mutation\";\n  verifyTotp:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"TotpVerificationFailed\" }\n    | { __typename: \"TotpVerified\"; success: boolean };\n};\n\nexport type RemoveMfaFactorMutationVariables = Exact<{\n  input: RemoveMfaFactorInput;\n}>;\n\nexport type RemoveMfaFactorMutation = {\n  __typename?: \"Mutation\";\n  removeMfaFactor:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"MfaFactorRemoved\"; success: boolean }\n    | { __typename: \"NoMfaFactorsEnrolled\" };\n};\n\nexport type SessionFieldsFragment = {\n  __typename?: \"Session\";\n  id: string;\n  isCurrent: boolean;\n  ipAddress?: string | null;\n  userAgent?: string | null;\n  organizationId?: string | null;\n  lastActivityAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  state: {\n    __typename?: \"SessionState\";\n    tag: string;\n    expiresAt?: string | null;\n  };\n  currentLocation?: {\n    __typename?: \"SessionLocation\";\n    cityName: string;\n    countryISOCode: string;\n  } | null;\n};\n\nexport type SessionsQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type SessionsQuery = {\n  __typename?: \"Query\";\n  sessions: Array<{\n    __typename?: \"Session\";\n    id: string;\n    isCurrent: boolean;\n    ipAddress?: string | null;\n    userAgent?: string | null;\n    organizationId?: string | null;\n    lastActivityAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    state: {\n      __typename?: \"SessionState\";\n      tag: string;\n      expiresAt?: string | null;\n    };\n    currentLocation?: {\n      __typename?: \"SessionLocation\";\n      cityName: string;\n      countryISOCode: string;\n    } | null;\n  }>;\n};\n\nexport type RevokeSessionMutationVariables = Exact<{\n  input: RevokeSessionInput;\n}>;\n\nexport type RevokeSessionMutation = {\n  __typename?: \"Mutation\";\n  revokeSession:\n    | { __typename: \"SessionNotFound\" }\n    | {\n        __typename: \"SessionRevoked\";\n        session: {\n          __typename?: \"Session\";\n          id: string;\n          isCurrent: boolean;\n          ipAddress?: string | null;\n          userAgent?: string | null;\n          organizationId?: string | null;\n          lastActivityAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          state: {\n            __typename?: \"SessionState\";\n            tag: string;\n            expiresAt?: string | null;\n          };\n          currentLocation?: {\n            __typename?: \"SessionLocation\";\n            cityName: string;\n            countryISOCode: string;\n          } | null;\n        };\n      };\n};\n\nexport type RevokeAllSessionsMutationVariables = Exact<{\n  input?: InputMaybe<RevokeAllSessionsInput>;\n}>;\n\nexport type RevokeAllSessionsMutation = {\n  __typename?: \"Mutation\";\n  revokeAllSessions: { __typename: \"AllSessionsRevoked\"; success: boolean };\n};\n\nexport type OrganizationMemberFieldsFragment = {\n  __typename?: \"OrganizationMember\";\n  id: string;\n  email: string;\n  emailVerified: boolean;\n  firstName?: string | null;\n  lastName?: string | null;\n  profilePictureUrl?: string | null;\n  status: OrganizationMemberStatus;\n  lastActivityAt?: string | null;\n  createdAt: string;\n  actions: Array<OrganizationMemberAction>;\n  isCurrentUser: boolean;\n  isDirectoryManaged: boolean;\n  roles: Array<{\n    __typename?: \"OrganizationMemberRole\";\n    slug: string;\n    name: string;\n  }>;\n};\n\nexport type OrganizationInvitationFieldsFragment = {\n  __typename?: \"OrganizationInvitation\";\n  id: string;\n  email: string;\n  status: OrganizationInvitationStatus;\n  roleSlug?: string | null;\n  expiresAt: string;\n  createdAt: string;\n};\n\nexport type RoleFieldsFragment = {\n  __typename?: \"Role\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  isDefault: boolean;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type ListOrganizationMembershipsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  roleSlug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListOrganizationMembershipsQuery = {\n  __typename?: \"Query\";\n  organizationMemberships: {\n    __typename?: \"OrganizationMemberList\";\n    data: Array<{\n      __typename?: \"OrganizationMember\";\n      id: string;\n      email: string;\n      emailVerified: boolean;\n      firstName?: string | null;\n      lastName?: string | null;\n      profilePictureUrl?: string | null;\n      status: OrganizationMemberStatus;\n      lastActivityAt?: string | null;\n      createdAt: string;\n      actions: Array<OrganizationMemberAction>;\n      isCurrentUser: boolean;\n      isDirectoryManaged: boolean;\n      roles: Array<{\n        __typename?: \"OrganizationMemberRole\";\n        slug: string;\n        name: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListRolesQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type ListRolesQuery = {\n  __typename?: \"Query\";\n  roles: {\n    __typename?: \"RolesResult\";\n    multipleRolesEnabled: boolean;\n    roles: Array<{\n      __typename?: \"Role\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      isDefault: boolean;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n  };\n};\n\nexport type InviteUserMutationVariables = Exact<{\n  input: InviteUserInput;\n}>;\n\nexport type InviteUserMutation = {\n  __typename?: \"Mutation\";\n  inviteUser:\n    | { __typename: \"InvalidInvitationExpiry\" }\n    | { __typename: \"InvalidInviteeEmail\" }\n    | { __typename: \"InvalidInviteeRole\" }\n    | { __typename: \"InviteeAlreadyInvited\" }\n    | { __typename: \"InviteeAlreadyMember\" }\n    | { __typename: \"InviteeEmailNotDeliverable\" }\n    | { __typename: \"OrganizationBlockedFromSendingInvites\" }\n    | {\n        __typename: \"UserInvited\";\n        invitation: {\n          __typename?: \"OrganizationInvitation\";\n          id: string;\n          email: string;\n          status: OrganizationInvitationStatus;\n          roleSlug?: string | null;\n          expiresAt: string;\n          createdAt: string;\n        };\n      };\n};\n\nexport type UpdateMemberRoleMutationVariables = Exact<{\n  input: UpdateMemberRoleInput;\n}>;\n\nexport type UpdateMemberRoleMutation = {\n  __typename?: \"Mutation\";\n  updateMemberRole:\n    | { __typename: \"MemberNotFound\" }\n    | {\n        __typename: \"MemberRoleUpdated\";\n        member: {\n          __typename?: \"OrganizationMember\";\n          id: string;\n          email: string;\n          emailVerified: boolean;\n          firstName?: string | null;\n          lastName?: string | null;\n          profilePictureUrl?: string | null;\n          status: OrganizationMemberStatus;\n          lastActivityAt?: string | null;\n          createdAt: string;\n          actions: Array<OrganizationMemberAction>;\n          isCurrentUser: boolean;\n          isDirectoryManaged: boolean;\n          roles: Array<{\n            __typename?: \"OrganizationMemberRole\";\n            slug: string;\n            name: string;\n          }>;\n        };\n      }\n    | { __typename: \"RoleNotFound\"; roleSlugs: Array<string> };\n};\n\nexport type RemoveMemberMutationVariables = Exact<{\n  input: RemoveMemberInput;\n}>;\n\nexport type RemoveMemberMutation = {\n  __typename?: \"Mutation\";\n  removeMember:\n    | { __typename: \"MemberIsManagedByDirectory\" }\n    | { __typename: \"MemberNotFound\" }\n    | { __typename: \"MemberRemoved\"; userId: string };\n};\n\nexport type ResendInvitationMutationVariables = Exact<{\n  input: ResendInvitationInput;\n}>;\n\nexport type ResendInvitationMutation = {\n  __typename?: \"Mutation\";\n  resendInvitation:\n    | {\n        __typename: \"InvitationResent\";\n        invitation: {\n          __typename?: \"OrganizationInvitation\";\n          id: string;\n          email: string;\n          status: OrganizationInvitationStatus;\n          roleSlug?: string | null;\n          expiresAt: string;\n          createdAt: string;\n        };\n      }\n    | { __typename: \"InviteeAlreadyAccepted\" }\n    | { __typename: \"InviteeEmailNotDeliverable\" }\n    | { __typename: \"ResendInvitationNotFound\" };\n};\n\nexport type RevokeInvitationMutationVariables = Exact<{\n  input: RevokeInvitationInput;\n}>;\n\nexport type RevokeInvitationMutation = {\n  __typename?: \"Mutation\";\n  revokeInvitation:\n    | { __typename: \"InvitationNotFound\" }\n    | { __typename: \"InvitationNotPending\" }\n    | {\n        __typename: \"InvitationRevoked\";\n        invitation: {\n          __typename?: \"OrganizationInvitation\";\n          id: string;\n          email: string;\n          status: OrganizationInvitationStatus;\n          roleSlug?: string | null;\n          expiresAt: string;\n          createdAt: string;\n        };\n      };\n};\n\nexport type ListUserOrganizationsQueryVariables = Exact<{\n  [key: string]: never;\n}>;\n\nexport type ListUserOrganizationsQuery = {\n  __typename?: \"Query\";\n  organizations: Array<{\n    __typename?: \"UserOrganization\";\n    id: string;\n    name: string;\n    isCurrent: boolean;\n  }>;\n};\n\nexport type DirectoryFieldsFragment = {\n  __typename?: \"Directory\";\n  id: string;\n  name: string;\n  organizationId: string;\n  externalKey: string;\n  state: string;\n  type: string;\n  lastSyncRunAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  metadata: {\n    __typename?: \"DirectoryMetadata\";\n    groups: number;\n    users: { __typename?: \"DirectoryUsersMetadata\"; active: number };\n  };\n};\n\nexport type ListDirectoryConnectionsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListDirectoryConnectionsQuery = {\n  __typename?: \"Query\";\n  directoryConnections: {\n    __typename?: \"DirectoryList\";\n    data: Array<{\n      __typename?: \"Directory\";\n      id: string;\n      name: string;\n      organizationId: string;\n      externalKey: string;\n      state: string;\n      type: string;\n      lastSyncRunAt?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      metadata: {\n        __typename?: \"DirectoryMetadata\";\n        groups: number;\n        users: { __typename?: \"DirectoryUsersMetadata\"; active: number };\n      };\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type GetDirectoryConnectionQueryVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type GetDirectoryConnectionQuery = {\n  __typename?: \"Query\";\n  directoryConnection: {\n    __typename?: \"Directory\";\n    id: string;\n    name: string;\n    organizationId: string;\n    externalKey: string;\n    state: string;\n    type: string;\n    lastSyncRunAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    metadata: {\n      __typename?: \"DirectoryMetadata\";\n      groups: number;\n      users: { __typename?: \"DirectoryUsersMetadata\"; active: number };\n    };\n  };\n};\n\nexport type ConnectionFieldsFragment = {\n  __typename?: \"Connection\";\n  id: string;\n  name: string;\n  organizationId?: string | null;\n  type: ConnectionType;\n  providerTag: SsoProviderTag;\n  state: ConnectionState;\n  setupComplete: boolean;\n  createdAt: string;\n  updatedAt: string;\n  lastSession?: {\n    __typename?: \"SsoConnectionSession\";\n    id: string;\n    createdAt: string;\n    state: SsoSessionState;\n  } | null;\n  latestExpiringCertificate?: {\n    __typename?: \"X509Certificate\";\n    id: string;\n    notAfter?: string | null;\n  } | null;\n  latestExpiredCertificate?: {\n    __typename?: \"X509Certificate\";\n    id: string;\n    notAfter?: string | null;\n  } | null;\n};\n\nexport type ListSsoConnectionsQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type ListSsoConnectionsQuery = {\n  __typename?: \"Query\";\n  ssoConnections: Array<{\n    __typename?: \"Connection\";\n    id: string;\n    name: string;\n    organizationId?: string | null;\n    type: ConnectionType;\n    providerTag: SsoProviderTag;\n    state: ConnectionState;\n    setupComplete: boolean;\n    createdAt: string;\n    updatedAt: string;\n    lastSession?: {\n      __typename?: \"SsoConnectionSession\";\n      id: string;\n      createdAt: string;\n      state: SsoSessionState;\n    } | null;\n    latestExpiringCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n    latestExpiredCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n  }>;\n};\n\nexport type GetSsoConnectionQueryVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type GetSsoConnectionQuery = {\n  __typename?: \"Query\";\n  ssoConnection: {\n    __typename?: \"Connection\";\n    id: string;\n    name: string;\n    organizationId?: string | null;\n    type: ConnectionType;\n    providerTag: SsoProviderTag;\n    state: ConnectionState;\n    setupComplete: boolean;\n    createdAt: string;\n    updatedAt: string;\n    lastSession?: {\n      __typename?: \"SsoConnectionSession\";\n      id: string;\n      createdAt: string;\n      state: SsoSessionState;\n    } | null;\n    latestExpiringCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n    latestExpiredCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n  };\n};\n\nexport type DataProviderConfigFieldFieldsFragment = {\n  __typename?: \"DataProviderConfigField\";\n  key: string;\n  label: string;\n  required: boolean;\n  scope: string;\n  description?: string | null;\n  example?: string | null;\n  pattern?: string | null;\n  patternFlags?: string | null;\n  order?: number | null;\n  secret?: boolean | null;\n  default?: string | null;\n};\n\nexport type DataProviderFieldsFragment = {\n  __typename?: \"DataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  authMethods: Array<string>;\n  credentialsType: string;\n  scopes?: Array<string> | null;\n  state: string;\n  enabled: boolean;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  capabilities: {\n    __typename?: \"DataProviderCapabilities\";\n    canAddConnection: boolean;\n    addConnectionMethods: Array<string>;\n  };\n  configFields: Array<{\n    __typename?: \"DataProviderConfigField\";\n    key: string;\n    label: string;\n    required: boolean;\n    scope: string;\n    description?: string | null;\n    example?: string | null;\n    pattern?: string | null;\n    patternFlags?: string | null;\n    order?: number | null;\n    secret?: boolean | null;\n    default?: string | null;\n  }>;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type DataProviderConnectionFieldsFragment = {\n  __typename?: \"DataProviderConnection\";\n  id: string;\n  dataProviderId: string;\n  dataProviderSlug: string;\n  connectionRole: DataInstallationConnectionRole;\n  accountIdentifier?: string | null;\n  accountDisplayName?: string | null;\n  authMethod: string;\n  scopes: Array<string>;\n  state: string;\n  availability: string;\n  apiKeyLast4?: string | null;\n  clientId?: string | null;\n  clientSecretLast4?: string | null;\n  userId?: string | null;\n  organizationId?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  capabilities?: {\n    __typename?: \"DataProviderConnectionCapabilities\";\n    canReauthorize: boolean;\n    canUpdateCredentials: boolean;\n  } | null;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type ListDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListDataProvidersQuery = {\n  __typename?: \"Query\";\n  dataProviders: {\n    __typename?: \"DataProviderList\";\n    data: Array<{\n      __typename?: \"DataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      authMethods: Array<string>;\n      credentialsType: string;\n      scopes?: Array<string> | null;\n      state: string;\n      enabled: boolean;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities: {\n        __typename?: \"DataProviderCapabilities\";\n        canAddConnection: boolean;\n        addConnectionMethods: Array<string>;\n      };\n      configFields: Array<{\n        __typename?: \"DataProviderConfigField\";\n        key: string;\n        label: string;\n        required: boolean;\n        scope: string;\n        description?: string | null;\n        example?: string | null;\n        pattern?: string | null;\n        patternFlags?: string | null;\n        order?: number | null;\n        secret?: boolean | null;\n        default?: string | null;\n      }>;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListDataProviderConnectionsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListDataProviderConnectionsQuery = {\n  __typename?: \"Query\";\n  dataProviderConnections: {\n    __typename?: \"DataProviderConnectionList\";\n    data: Array<{\n      __typename?: \"DataProviderConnection\";\n      id: string;\n      dataProviderId: string;\n      dataProviderSlug: string;\n      connectionRole: DataInstallationConnectionRole;\n      accountIdentifier?: string | null;\n      accountDisplayName?: string | null;\n      authMethod: string;\n      scopes: Array<string>;\n      state: string;\n      availability: string;\n      apiKeyLast4?: string | null;\n      clientId?: string | null;\n      clientSecretLast4?: string | null;\n      userId?: string | null;\n      organizationId?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities?: {\n        __typename?: \"DataProviderConnectionCapabilities\";\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n      } | null;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type CreateDataProviderConnectionMutationVariables = Exact<{\n  input: CreateDataProviderConnectionInput;\n}>;\n\nexport type CreateDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  createDataProviderConnection: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n};\n\nexport type DeleteDataProviderConnectionMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  deleteDataProviderConnection: string;\n};\n\nexport type SetDataProviderEnabledMutationVariables = Exact<{\n  input: SetDataProviderEnabledInput;\n}>;\n\nexport type SetDataProviderEnabledMutation = {\n  __typename?: \"Mutation\";\n  setDataProviderEnabled: {\n    __typename?: \"DataProvider\";\n    id: string;\n    slug: string;\n    name: string;\n    description?: string | null;\n    integrationType: string;\n    authMethods: Array<string>;\n    credentialsType: string;\n    scopes?: Array<string> | null;\n    state: string;\n    enabled: boolean;\n    iconSlug?: string | null;\n    iconUrl?: string | null;\n    iconDarkUrl?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities: {\n      __typename?: \"DataProviderCapabilities\";\n      canAddConnection: boolean;\n      addConnectionMethods: Array<string>;\n    };\n    configFields: Array<{\n      __typename?: \"DataProviderConfigField\";\n      key: string;\n      label: string;\n      required: boolean;\n      scope: string;\n      description?: string | null;\n      example?: string | null;\n      pattern?: string | null;\n      patternFlags?: string | null;\n      order?: number | null;\n      secret?: boolean | null;\n      default?: string | null;\n    }>;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n};\n\ntype DataProviderAuthorizationResultFields_DataProviderAuthorization_Fragment =\n  {\n    __typename: \"DataProviderAuthorization\";\n    url: string;\n    state: string;\n    redirectToken: string;\n    handoffToken?: string | null;\n  };\n\ntype DataProviderAuthorizationResultFields_DataProviderAuthorizationUnavailable_Fragment =\n  { __typename: \"DataProviderAuthorizationUnavailable\"; message: string };\n\ntype DataProviderAuthorizationResultFields_DataProviderConfigInvalid_Fragment =\n  { __typename: \"DataProviderConfigInvalid\"; message: string };\n\nexport type DataProviderAuthorizationResultFieldsFragment =\n  | DataProviderAuthorizationResultFields_DataProviderAuthorization_Fragment\n  | DataProviderAuthorizationResultFields_DataProviderAuthorizationUnavailable_Fragment\n  | DataProviderAuthorizationResultFields_DataProviderConfigInvalid_Fragment;\n\nexport type CreateDataProviderAuthorizationMutationVariables = Exact<{\n  input: CreateDataProviderAuthorizationInput;\n}>;\n\nexport type CreateDataProviderAuthorizationMutation = {\n  __typename?: \"Mutation\";\n  createDataProviderAuthorization:\n    | {\n        __typename: \"DataProviderAuthorization\";\n        url: string;\n        state: string;\n        redirectToken: string;\n        handoffToken?: string | null;\n      }\n    | { __typename: \"DataProviderAuthorizationUnavailable\"; message: string }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string };\n};\n\nexport type CreateOrganizationDataProviderAuthorizationMutationVariables =\n  Exact<{\n    input: CreateOrganizationDataProviderAuthorizationInput;\n  }>;\n\nexport type CreateOrganizationDataProviderAuthorizationMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationDataProviderAuthorization:\n    | {\n        __typename: \"DataProviderAuthorization\";\n        url: string;\n        state: string;\n        redirectToken: string;\n        handoffToken?: string | null;\n      }\n    | { __typename: \"DataProviderAuthorizationUnavailable\"; message: string }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string };\n};\n\nexport type DataProviderAuthorizationStatusQueryVariables = Exact<{\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  state: Scalars[\"String\"][\"input\"];\n}>;\n\nexport type DataProviderAuthorizationStatusQuery = {\n  __typename?: \"Query\";\n  dataProviderAuthorizationStatus: {\n    __typename?: \"DataProviderAuthorizationStatus\";\n    state: string;\n    connecting: boolean;\n  };\n};\n\nexport type ConnectDataProviderWithClientCredentialsMutationVariables = Exact<{\n  input: ConnectDataProviderWithClientCredentialsInput;\n}>;\n\nexport type ConnectDataProviderWithClientCredentialsMutation = {\n  __typename?: \"Mutation\";\n  connectDataProviderWithClientCredentials:\n    | {\n        __typename: \"DataProviderAuthMethodUnsupported\";\n        authMethod: string;\n        supportedAuthMethods: Array<string>;\n      }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConnected\";\n        connection: {\n          __typename?: \"DataProviderConnection\";\n          id: string;\n          dataProviderId: string;\n          dataProviderSlug: string;\n          connectionRole: DataInstallationConnectionRole;\n          accountIdentifier?: string | null;\n          accountDisplayName?: string | null;\n          authMethod: string;\n          scopes: Array<string>;\n          state: string;\n          availability: string;\n          apiKeyLast4?: string | null;\n          clientId?: string | null;\n          clientSecretLast4?: string | null;\n          userId?: string | null;\n          organizationId?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          capabilities?: {\n            __typename?: \"DataProviderConnectionCapabilities\";\n            canReauthorize: boolean;\n            canUpdateCredentials: boolean;\n          } | null;\n          config: Array<{\n            __typename?: \"DataProviderConfigEntry\";\n            name: string;\n            value: string;\n          }>;\n        };\n      }\n    | {\n        __typename: \"DataProviderConnectionAuthMethodConflict\";\n        existingAuthMethod: string;\n      };\n};\n\nexport type DataProviderConfigurationFieldsFragment = {\n  __typename?: \"DataProviderConfiguration\";\n  dataProviderId: string;\n  dataProviderSlug: string;\n  organizationId: string;\n  enabled: boolean;\n  hasCredentials: boolean;\n  scopes?: Array<string> | null;\n  availableScopes: Array<string>;\n  updatedAt: string;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type SetDataProviderConfigurationMutationVariables = Exact<{\n  input: SetDataProviderConfigurationInput;\n}>;\n\nexport type SetDataProviderConfigurationMutation = {\n  __typename?: \"Mutation\";\n  setDataProviderConfiguration:\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConfiguration\";\n        dataProviderId: string;\n        dataProviderSlug: string;\n        organizationId: string;\n        enabled: boolean;\n        hasCredentials: boolean;\n        scopes?: Array<string> | null;\n        availableScopes: Array<string>;\n        updatedAt: string;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      };\n};\n\nexport type ListOrganizationDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListOrganizationDataProvidersQuery = {\n  __typename?: \"Query\";\n  organizationDataProviders: {\n    __typename?: \"OrganizationDataProviderList\";\n    data: Array<{\n      __typename?: \"OrganizationDataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      authMethods: Array<string>;\n      credentialsType: string;\n      scopes?: Array<string> | null;\n      defaultScopes: Array<string>;\n      availableScopes: Array<string>;\n      state: string;\n      enabled: boolean;\n      disabledSource?: string | null;\n      configured: boolean;\n      hasCredentials: boolean;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      credentials: {\n        __typename?: \"DataProviderCredentials\";\n        clientId?: string | null;\n        credentialsType: string;\n        hasCredentials: boolean;\n        redactedClientSecret?: string | null;\n        redirectUri: string;\n      };\n      capabilities: {\n        __typename?: \"OrganizationDataProviderCapabilities\";\n        canConfigure: boolean;\n        canConnect: boolean;\n        canDisconnect: boolean;\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n        canAddConnection: boolean;\n        addConnectionMethods: Array<string>;\n      };\n      configFields: Array<{\n        __typename?: \"DataProviderConfigField\";\n        key: string;\n        label: string;\n        required: boolean;\n        scope: string;\n        description?: string | null;\n        example?: string | null;\n        pattern?: string | null;\n        patternFlags?: string | null;\n        order?: number | null;\n        secret?: boolean | null;\n        default?: string | null;\n      }>;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n      connection?: {\n        __typename?: \"DataProviderConnection\";\n        id: string;\n        dataProviderId: string;\n        dataProviderSlug: string;\n        connectionRole: DataInstallationConnectionRole;\n        accountIdentifier?: string | null;\n        accountDisplayName?: string | null;\n        authMethod: string;\n        scopes: Array<string>;\n        state: string;\n        availability: string;\n        apiKeyLast4?: string | null;\n        clientId?: string | null;\n        clientSecretLast4?: string | null;\n        userId?: string | null;\n        organizationId?: string | null;\n        createdAt: string;\n        updatedAt: string;\n        capabilities?: {\n          __typename?: \"DataProviderConnectionCapabilities\";\n          canReauthorize: boolean;\n          canUpdateCredentials: boolean;\n        } | null;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      } | null;\n      connectedAccounts: Array<{\n        __typename?: \"DataProviderConnection\";\n        id: string;\n        dataProviderId: string;\n        dataProviderSlug: string;\n        connectionRole: DataInstallationConnectionRole;\n        accountIdentifier?: string | null;\n        accountDisplayName?: string | null;\n        authMethod: string;\n        scopes: Array<string>;\n        state: string;\n        availability: string;\n        apiKeyLast4?: string | null;\n        clientId?: string | null;\n        clientSecretLast4?: string | null;\n        userId?: string | null;\n        organizationId?: string | null;\n        createdAt: string;\n        updatedAt: string;\n        capabilities?: {\n          __typename?: \"DataProviderConnectionCapabilities\";\n          canReauthorize: boolean;\n          canUpdateCredentials: boolean;\n        } | null;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type OrganizationDataProviderFieldsFragment = {\n  __typename?: \"OrganizationDataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  authMethods: Array<string>;\n  credentialsType: string;\n  scopes?: Array<string> | null;\n  defaultScopes: Array<string>;\n  availableScopes: Array<string>;\n  state: string;\n  enabled: boolean;\n  disabledSource?: string | null;\n  configured: boolean;\n  hasCredentials: boolean;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  credentials: {\n    __typename?: \"DataProviderCredentials\";\n    clientId?: string | null;\n    credentialsType: string;\n    hasCredentials: boolean;\n    redactedClientSecret?: string | null;\n    redirectUri: string;\n  };\n  capabilities: {\n    __typename?: \"OrganizationDataProviderCapabilities\";\n    canConfigure: boolean;\n    canConnect: boolean;\n    canDisconnect: boolean;\n    canReauthorize: boolean;\n    canUpdateCredentials: boolean;\n    canAddConnection: boolean;\n    addConnectionMethods: Array<string>;\n  };\n  configFields: Array<{\n    __typename?: \"DataProviderConfigField\";\n    key: string;\n    label: string;\n    required: boolean;\n    scope: string;\n    description?: string | null;\n    example?: string | null;\n    pattern?: string | null;\n    patternFlags?: string | null;\n    order?: number | null;\n    secret?: boolean | null;\n    default?: string | null;\n  }>;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n  connection?: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  } | null;\n  connectedAccounts: Array<{\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  }>;\n};\n\nexport type SetOrganizationDataProviderConfigurationMutationVariables = Exact<{\n  input: SetOrganizationDataProviderConfigurationInput;\n}>;\n\nexport type SetOrganizationDataProviderConfigurationMutation = {\n  __typename?: \"Mutation\";\n  setOrganizationDataProviderConfiguration:\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConfiguration\";\n        dataProviderId: string;\n        dataProviderSlug: string;\n        organizationId: string;\n        enabled: boolean;\n        hasCredentials: boolean;\n        scopes?: Array<string> | null;\n        availableScopes: Array<string>;\n        updatedAt: string;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      };\n};\n\nexport type CreateOrganizationDataProviderConnectionMutationVariables = Exact<{\n  input: CreateOrganizationDataProviderConnectionInput;\n}>;\n\nexport type CreateOrganizationDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationDataProviderConnection: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n};\n\nexport type ConnectOrganizationDataProviderWithClientCredentialsMutationVariables =\n  Exact<{\n    input: ConnectOrganizationDataProviderWithClientCredentialsInput;\n  }>;\n\nexport type ConnectOrganizationDataProviderWithClientCredentialsMutation = {\n  __typename?: \"Mutation\";\n  connectOrganizationDataProviderWithClientCredentials:\n    | {\n        __typename: \"DataProviderAuthMethodUnsupported\";\n        authMethod: string;\n        supportedAuthMethods: Array<string>;\n      }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConnected\";\n        connection: {\n          __typename?: \"DataProviderConnection\";\n          id: string;\n          dataProviderId: string;\n          dataProviderSlug: string;\n          connectionRole: DataInstallationConnectionRole;\n          accountIdentifier?: string | null;\n          accountDisplayName?: string | null;\n          authMethod: string;\n          scopes: Array<string>;\n          state: string;\n          availability: string;\n          apiKeyLast4?: string | null;\n          clientId?: string | null;\n          clientSecretLast4?: string | null;\n          userId?: string | null;\n          organizationId?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          capabilities?: {\n            __typename?: \"DataProviderConnectionCapabilities\";\n            canReauthorize: boolean;\n            canUpdateCredentials: boolean;\n          } | null;\n          config: Array<{\n            __typename?: \"DataProviderConfigEntry\";\n            name: string;\n            value: string;\n          }>;\n        };\n      }\n    | {\n        __typename: \"DataProviderConnectionAuthMethodConflict\";\n        existingAuthMethod: string;\n      };\n};\n\nexport type DeleteOrganizationDataProviderConnectionMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteOrganizationDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  deleteOrganizationDataProviderConnection: string;\n};\n\nexport type DataProviderConnectionLabelResultFieldsFragment = {\n  __typename?: \"UpdateDataProviderConnectionLabelResult\";\n  connection: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n  warnings: Array<{\n    __typename?: \"DataProviderConnectionLabelWarning\";\n    code: string;\n    message: string;\n  }>;\n};\n\nexport type UpdateDataProviderConnectionLabelMutationVariables = Exact<{\n  input: UpdateDataProviderConnectionLabelInput;\n}>;\n\nexport type UpdateDataProviderConnectionLabelMutation = {\n  __typename?: \"Mutation\";\n  updateDataProviderConnectionLabel: {\n    __typename?: \"UpdateDataProviderConnectionLabelResult\";\n    connection: {\n      __typename?: \"DataProviderConnection\";\n      id: string;\n      dataProviderId: string;\n      dataProviderSlug: string;\n      connectionRole: DataInstallationConnectionRole;\n      accountIdentifier?: string | null;\n      accountDisplayName?: string | null;\n      authMethod: string;\n      scopes: Array<string>;\n      state: string;\n      availability: string;\n      apiKeyLast4?: string | null;\n      clientId?: string | null;\n      clientSecretLast4?: string | null;\n      userId?: string | null;\n      organizationId?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities?: {\n        __typename?: \"DataProviderConnectionCapabilities\";\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n      } | null;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    };\n    warnings: Array<{\n      __typename?: \"DataProviderConnectionLabelWarning\";\n      code: string;\n      message: string;\n    }>;\n  };\n};\n\nexport type UpdateOrganizationDataProviderConnectionLabelMutationVariables =\n  Exact<{\n    input: UpdateDataProviderConnectionLabelInput;\n  }>;\n\nexport type UpdateOrganizationDataProviderConnectionLabelMutation = {\n  __typename?: \"Mutation\";\n  updateOrganizationDataProviderConnectionLabel: {\n    __typename?: \"UpdateDataProviderConnectionLabelResult\";\n    connection: {\n      __typename?: \"DataProviderConnection\";\n      id: string;\n      dataProviderId: string;\n      dataProviderSlug: string;\n      connectionRole: DataInstallationConnectionRole;\n      accountIdentifier?: string | null;\n      accountDisplayName?: string | null;\n      authMethod: string;\n      scopes: Array<string>;\n      state: string;\n      availability: string;\n      apiKeyLast4?: string | null;\n      clientId?: string | null;\n      clientSecretLast4?: string | null;\n      userId?: string | null;\n      organizationId?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities?: {\n        __typename?: \"DataProviderConnectionCapabilities\";\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n      } | null;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    };\n    warnings: Array<{\n      __typename?: \"DataProviderConnectionLabelWarning\";\n      code: string;\n      message: string;\n    }>;\n  };\n};\n\nexport type RegisterPasskeyMutationVariables = Exact<{\n  input: RegisterPasskeyInput;\n}>;\n\nexport type RegisterPasskeyMutation = {\n  __typename?: \"Mutation\";\n  registerPasskey:\n    | { __typename: \"ElevatedAccessTokenExpired\"; message: string }\n    | { __typename: \"ElevatedAccessTokenInvalid\"; message: string }\n    | {\n        __typename: \"PasskeyRegistrationOptions\";\n        challengeId: string;\n        options: any;\n      };\n};\n\nexport type VerifyPasskeyMutationVariables = Exact<{\n  input: VerifyPasskeyInput;\n}>;\n\nexport type VerifyPasskeyMutation = {\n  __typename?: \"Mutation\";\n  verifyPasskey:\n    | { __typename: \"ElevatedAccessTokenExpired\"; message: string }\n    | { __typename: \"ElevatedAccessTokenInvalid\"; message: string }\n    | { __typename: \"PasskeyChallengeNotFound\"; _placeholder: boolean }\n    | { __typename: \"PasskeyVerificationFailed\"; _placeholder: boolean }\n    | { __typename: \"PasskeyVerified\"; success: boolean };\n};\n\nexport type DeletePasskeyMutationVariables = Exact<{\n  input: DeletePasskeyInput;\n}>;\n\nexport type DeletePasskeyMutation = {\n  __typename?: \"Mutation\";\n  deletePasskey:\n    | { __typename: \"ElevatedAccessTokenExpired\"; message: string }\n    | { __typename: \"ElevatedAccessTokenInvalid\"; message: string }\n    | { __typename: \"PasskeyDeleted\"; success: boolean }\n    | { __typename: \"PasskeyNotFound\"; _placeholder: boolean };\n};\n\nexport type CreateAdminPortalLinkMutationVariables = Exact<{\n  intent: AdminPortalLinkIntent;\n}>;\n\nexport type CreateAdminPortalLinkMutation = {\n  __typename?: \"Mutation\";\n  createAdminPortalLink: {\n    __typename?: \"AdminPortalLink\";\n    link: string;\n    intent: AdminPortalLinkIntent;\n    expiresAt: string;\n  };\n};\n\nexport type AuditLogStreamQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type AuditLogStreamQuery = {\n  __typename?: \"Query\";\n  auditLogStream?: {\n    __typename?: \"AuditLogStream\";\n    id: string;\n    auditLogTrailId: string;\n    type: AuditLogStreamType;\n    state: AuditLogStreamState;\n    errorMessage?: string | null;\n    lastSyncedEventId?: string | null;\n  } | null;\n};\n\nexport type BrandingQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type BrandingQuery = {\n  __typename?: \"Query\";\n  branding: {\n    __typename?: \"Branding\";\n    displayName: string;\n    logoLightPath?: string | null;\n    logoDarkPath?: string | null;\n    logoLightIconPath?: string | null;\n    logoDarkIconPath?: string | null;\n  };\n};\n\nexport type AuthKitSettingsQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type AuthKitSettingsQuery = {\n  __typename?: \"Query\";\n  authkitSettings: { __typename?: \"AuthKitSettings\"; origin: string };\n};\n\nexport type ListPermissionsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListPermissionsQuery = {\n  __typename?: \"Query\";\n  permissions: {\n    __typename?: \"PermissionList\";\n    data: Array<{\n      __typename?: \"Permission\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      system: boolean;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListApiKeyPermissionsQueryVariables = Exact<{\n  apiKeyOwnerType: ApiKeyOwnerType;\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListApiKeyPermissionsQuery = {\n  __typename?: \"Query\";\n  permissions: {\n    __typename?: \"PermissionList\";\n    data: Array<{\n      __typename?: \"Permission\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type GetOrganizationDomainQueryVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type GetOrganizationDomainQuery = {\n  __typename?: \"Query\";\n  organizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type SharedDataProviderFieldsFragment = {\n  __typename?: \"SharedDataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  connectedAccounts: Array<{\n    __typename?: \"SharedDataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    authMethod: string;\n    connectionRole: DataInstallationConnectionRole;\n    state: string;\n    availability: string;\n    createdAt: string;\n    updatedAt: string;\n  }>;\n};\n\nexport type ListSharedDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  supportsMultipleConnections?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n}>;\n\nexport type ListSharedDataProvidersQuery = {\n  __typename?: \"Query\";\n  sharedDataProviders: {\n    __typename?: \"SharedDataProviderList\";\n    data: Array<{\n      __typename?: \"SharedDataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      connectedAccounts: Array<{\n        __typename?: \"SharedDataProviderConnection\";\n        id: string;\n        dataProviderId: string;\n        dataProviderSlug: string;\n        authMethod: string;\n        connectionRole: DataInstallationConnectionRole;\n        state: string;\n        availability: string;\n        createdAt: string;\n        updatedAt: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ConfigurableDataProviderFieldsFragment = {\n  __typename?: \"ConfigurableDataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  authMethods: Array<string>;\n  credentialsType: string;\n  scopes?: Array<string> | null;\n  defaultScopes: Array<string>;\n  availableScopes: Array<string>;\n  state: string;\n  enabled: boolean;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  credentials: {\n    __typename?: \"DataProviderCredentials\";\n    clientId?: string | null;\n    credentialsType: string;\n    hasCredentials: boolean;\n    redactedClientSecret?: string | null;\n    redirectUri: string;\n  };\n  configFields: Array<{\n    __typename?: \"DataProviderConfigField\";\n    key: string;\n    label: string;\n    required: boolean;\n    scope: string;\n    description?: string | null;\n    example?: string | null;\n    pattern?: string | null;\n    patternFlags?: string | null;\n    order?: number | null;\n    secret?: boolean | null;\n    default?: string | null;\n  }>;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type ListConfigurableDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListConfigurableDataProvidersQuery = {\n  __typename?: \"Query\";\n  configurableDataProviders: {\n    __typename?: \"ConfigurableDataProviderList\";\n    data: Array<{\n      __typename?: \"ConfigurableDataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      authMethods: Array<string>;\n      credentialsType: string;\n      scopes?: Array<string> | null;\n      defaultScopes: Array<string>;\n      availableScopes: Array<string>;\n      state: string;\n      enabled: boolean;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      credentials: {\n        __typename?: \"DataProviderCredentials\";\n        clientId?: string | null;\n        credentialsType: string;\n        hasCredentials: boolean;\n        redactedClientSecret?: string | null;\n        redirectUri: string;\n      };\n      configFields: Array<{\n        __typename?: \"DataProviderConfigField\";\n        key: string;\n        label: string;\n        required: boolean;\n        scope: string;\n        description?: string | null;\n        example?: string | null;\n        pattern?: string | null;\n        patternFlags?: string | null;\n        order?: number | null;\n        secret?: boolean | null;\n        default?: string | null;\n      }>;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type OrganizationApiKeyFieldsFragment = {\n  __typename?: \"OrganizationApiKey\";\n  id: string;\n  name: string;\n  obfuscatedValue: string;\n  permissions: Array<string>;\n  lastUsedAt?: string | null;\n  expiresAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type UserApiKeyFieldsFragment = {\n  __typename?: \"UserApiKey\";\n  id: string;\n  name: string;\n  obfuscatedValue: string;\n  permissions: Array<string>;\n  lastUsedAt?: string | null;\n  expiresAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  owner: {\n    __typename?: \"UserApiKeyOwner\";\n    id: string;\n    email: string;\n    firstName?: string | null;\n    lastName?: string | null;\n    displayName: string;\n  };\n};\n\nexport type ListOrganizationApiKeysQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListOrganizationApiKeysQuery = {\n  __typename?: \"Query\";\n  organizationApiKeys: {\n    __typename?: \"OrganizationApiKeyList\";\n    data: Array<{\n      __typename?: \"OrganizationApiKey\";\n      id: string;\n      name: string;\n      obfuscatedValue: string;\n      permissions: Array<string>;\n      lastUsedAt?: string | null;\n      expiresAt?: string | null;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListUserApiKeysQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListUserApiKeysQuery = {\n  __typename?: \"Query\";\n  userApiKeys: {\n    __typename?: \"UserApiKeyList\";\n    data: Array<{\n      __typename?: \"UserApiKey\";\n      id: string;\n      name: string;\n      obfuscatedValue: string;\n      permissions: Array<string>;\n      lastUsedAt?: string | null;\n      expiresAt?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      owner: {\n        __typename?: \"UserApiKeyOwner\";\n        id: string;\n        email: string;\n        firstName?: string | null;\n        lastName?: string | null;\n        displayName: string;\n      };\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type CreateOrganizationApiKeyMutationVariables = Exact<{\n  input: CreateApiKeyInput;\n}>;\n\nexport type CreateOrganizationApiKeyMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationApiKey:\n    | {\n        __typename: \"ApiKeyPermissionsNotHeld\";\n        message: string;\n        unheldPermissions: Array<string>;\n      }\n    | {\n        __typename: \"ApiKeyPermissionsUnsupportedForToken\";\n        message: string;\n        requestedPermissions: Array<string>;\n      }\n    | { __typename: \"InvalidApiKeyExpiration\"; message: string }\n    | { __typename: \"InvalidApiKeyName\"; message: string }\n    | {\n        __typename: \"InvalidApiKeyPermissions\";\n        message: string;\n        invalidPermissions: Array<string>;\n      }\n    | {\n        __typename: \"OrganizationApiKeyCreated\";\n        value: string;\n        apiKey: {\n          __typename?: \"OrganizationApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      };\n};\n\nexport type CreateUserApiKeyMutationVariables = Exact<{\n  input: CreateApiKeyInput;\n}>;\n\nexport type CreateUserApiKeyMutation = {\n  __typename?: \"Mutation\";\n  createUserApiKey:\n    | {\n        __typename: \"ApiKeyPermissionsNotHeld\";\n        message: string;\n        unheldPermissions: Array<string>;\n      }\n    | {\n        __typename: \"ApiKeyPermissionsUnsupportedForToken\";\n        message: string;\n        requestedPermissions: Array<string>;\n      }\n    | { __typename: \"InvalidApiKeyExpiration\"; message: string }\n    | { __typename: \"InvalidApiKeyName\"; message: string }\n    | {\n        __typename: \"InvalidApiKeyPermissions\";\n        message: string;\n        invalidPermissions: Array<string>;\n      }\n    | {\n        __typename: \"UserApiKeyCreated\";\n        value: string;\n        apiKey: {\n          __typename?: \"UserApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          owner: {\n            __typename?: \"UserApiKeyOwner\";\n            id: string;\n            email: string;\n            firstName?: string | null;\n            lastName?: string | null;\n            displayName: string;\n          };\n        };\n      };\n};\n\nexport type ExpireOrganizationApiKeyMutationVariables = Exact<{\n  input: ExpireApiKeyInput;\n}>;\n\nexport type ExpireOrganizationApiKeyMutation = {\n  __typename?: \"Mutation\";\n  expireOrganizationApiKey:\n    | { __typename: \"ApiKeyAlreadyExpired\"; apiKeyId: string }\n    | {\n        __typename: \"OrganizationApiKeyExpired\";\n        apiKey: {\n          __typename?: \"OrganizationApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      };\n};\n\nexport type ExpireUserApiKeyMutationVariables = Exact<{\n  input: ExpireApiKeyInput;\n}>;\n\nexport type ExpireUserApiKeyMutation = {\n  __typename?: \"Mutation\";\n  expireUserApiKey:\n    | { __typename: \"ApiKeyAlreadyExpired\"; apiKeyId: string }\n    | {\n        __typename: \"UserApiKeyExpired\";\n        apiKey: {\n          __typename?: \"UserApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          owner: {\n            __typename?: \"UserApiKeyOwner\";\n            id: string;\n            email: string;\n            firstName?: string | null;\n            lastName?: string | null;\n            displayName: string;\n          };\n        };\n      };\n};\n\nexport type DeleteOrganizationApiKeyMutationVariables = Exact<{\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteOrganizationApiKeyMutation = {\n  __typename?: \"Mutation\";\n  deleteOrganizationApiKey: {\n    __typename?: \"OrganizationApiKey\";\n    id: string;\n    name: string;\n    obfuscatedValue: string;\n    permissions: Array<string>;\n    lastUsedAt?: string | null;\n    expiresAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n  };\n};\n\nexport type DeleteUserApiKeyMutationVariables = Exact<{\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteUserApiKeyMutation = {\n  __typename?: \"Mutation\";\n  deleteUserApiKey: {\n    __typename?: \"UserApiKey\";\n    id: string;\n    name: string;\n    obfuscatedValue: string;\n    permissions: Array<string>;\n    lastUsedAt?: string | null;\n    expiresAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    owner: {\n      __typename?: \"UserApiKeyOwner\";\n      id: string;\n      email: string;\n      firstName?: string | null;\n      lastName?: string | null;\n      displayName: string;\n    };\n  };\n};\n\nexport const OrganizationDomainFieldsFragmentDoc = `\n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    `;\nexport const UserFieldsFragmentDoc = `\n    fragment UserFields on User {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  mfaEnabled\n  mfaLastUsedAt\n  passwordSet\n  passwordLastUsedAt\n  createdAt\n  updatedAt\n}\n    `;\nexport const ConnectedAccountFieldsFragmentDoc = `\n    fragment ConnectedAccountFields on ConnectedAccount {\n  id\n  provider\n  email\n  firstName\n  lastName\n  profilePictureUrl\n  lastLoginAt\n}\n    `;\nexport const PasswordViolationFieldsFragmentDoc = `\n    fragment PasswordViolationFields on PasswordViolation {\n  code\n  message\n  characterType\n  minimumLength\n  maximumLength\n  allowedSymbols\n  breachOccurrences\n  strengthWarning\n  strengthSuggestions\n}\n    `;\nexport const SessionFieldsFragmentDoc = `\n    fragment SessionFields on Session {\n  id\n  isCurrent\n  ipAddress\n  userAgent\n  organizationId\n  lastActivityAt\n  createdAt\n  updatedAt\n  state {\n    tag\n    expiresAt\n  }\n  currentLocation {\n    cityName\n    countryISOCode\n  }\n}\n    `;\nexport const OrganizationMemberFieldsFragmentDoc = `\n    fragment OrganizationMemberFields on OrganizationMember {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  status\n  lastActivityAt\n  createdAt\n  actions\n  isCurrentUser\n  isDirectoryManaged\n  roles {\n    slug\n    name\n  }\n}\n    `;\nexport const OrganizationInvitationFieldsFragmentDoc = `\n    fragment OrganizationInvitationFields on OrganizationInvitation {\n  id\n  email\n  status\n  roleSlug\n  expiresAt\n  createdAt\n}\n    `;\nexport const RoleFieldsFragmentDoc = `\n    fragment RoleFields on Role {\n  id\n  slug\n  name\n  description\n  isDefault\n  createdAt\n  updatedAt\n}\n    `;\nexport const DirectoryFieldsFragmentDoc = `\n    fragment DirectoryFields on Directory {\n  id\n  name\n  organizationId\n  externalKey\n  state\n  type\n  lastSyncRunAt\n  metadata {\n    groups\n    users {\n      active\n    }\n  }\n  createdAt\n  updatedAt\n}\n    `;\nexport const ConnectionFieldsFragmentDoc = `\n    fragment ConnectionFields on Connection {\n  id\n  name\n  organizationId\n  type\n  providerTag\n  state\n  setupComplete\n  lastSession {\n    id\n    createdAt\n    state\n  }\n  latestExpiringCertificate {\n    id\n    notAfter\n  }\n  latestExpiredCertificate {\n    id\n    notAfter\n  }\n  createdAt\n  updatedAt\n}\n    `;\nexport const DataProviderConfigFieldFieldsFragmentDoc = `\n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    `;\nexport const DataProviderFieldsFragmentDoc = `\n    fragment DataProviderFields on DataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  capabilities {\n    canAddConnection\n    addConnectionMethods\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    ${DataProviderConfigFieldFieldsFragmentDoc}`;\nexport const DataProviderAuthorizationResultFieldsFragmentDoc = `\n    fragment DataProviderAuthorizationResultFields on CreateDataProviderAuthorizationResult {\n  __typename\n  ... on DataProviderAuthorization {\n    url\n    state\n    redirectToken\n    handoffToken\n  }\n  ... on DataProviderAuthorizationUnavailable {\n    message\n  }\n  ... on DataProviderConfigInvalid {\n    message\n  }\n}\n    `;\nexport const DataProviderConfigurationFieldsFragmentDoc = `\n    fragment DataProviderConfigurationFields on DataProviderConfiguration {\n  dataProviderId\n  dataProviderSlug\n  organizationId\n  enabled\n  hasCredentials\n  scopes\n  availableScopes\n  config {\n    name\n    value\n  }\n  updatedAt\n}\n    `;\nexport const DataProviderConnectionFieldsFragmentDoc = `\n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  capabilities {\n    canReauthorize\n    canUpdateCredentials\n  }\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    `;\nexport const OrganizationDataProviderFieldsFragmentDoc = `\n    fragment OrganizationDataProviderFields on OrganizationDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  disabledSource\n  configured\n  hasCredentials\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  capabilities {\n    canConfigure\n    canConnect\n    canDisconnect\n    canReauthorize\n    canUpdateCredentials\n    canAddConnection\n    addConnectionMethods\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  connection {\n    ...DataProviderConnectionFields\n  }\n  connectedAccounts {\n    ...DataProviderConnectionFields\n  }\n  createdAt\n  updatedAt\n}\n    ${DataProviderConfigFieldFieldsFragmentDoc}\n${DataProviderConnectionFieldsFragmentDoc}`;\nexport const DataProviderConnectionLabelResultFieldsFragmentDoc = `\n    fragment DataProviderConnectionLabelResultFields on UpdateDataProviderConnectionLabelResult {\n  connection {\n    ...DataProviderConnectionFields\n  }\n  warnings {\n    code\n    message\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const SharedDataProviderFieldsFragmentDoc = `\n    fragment SharedDataProviderFields on SharedDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  connectedAccounts {\n    id\n    dataProviderId\n    dataProviderSlug\n    authMethod\n    connectionRole\n    state\n    availability\n    createdAt\n    updatedAt\n  }\n  createdAt\n  updatedAt\n}\n    `;\nexport const ConfigurableDataProviderFieldsFragmentDoc = `\n    fragment ConfigurableDataProviderFields on ConfigurableDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    ${DataProviderConfigFieldFieldsFragmentDoc}`;\nexport const OrganizationApiKeyFieldsFragmentDoc = `\n    fragment OrganizationApiKeyFields on OrganizationApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n}\n    `;\nexport const UserApiKeyFieldsFragmentDoc = `\n    fragment UserApiKeyFields on UserApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n  owner {\n    id\n    email\n    firstName\n    lastName\n    displayName\n  }\n}\n    `;\nexport const ClientApiStatusDocument = `\n    query ClientApiStatus {\n  clientApiStatus\n}\n    `;\nexport const ListOrganizationDomainsDocument = `\n    query ListOrganizationDomains($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  organizationDomains(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...OrganizationDomainFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const CreateOrganizationDomainDocument = `\n    mutation CreateOrganizationDomain($domain: String!) {\n  createOrganizationDomain(domain: $domain) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const DeleteOrganizationDomainDocument = `\n    mutation DeleteOrganizationDomain($id: ID!) {\n  deleteOrganizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const ReverifyOrganizationDomainDocument = `\n    mutation ReverifyOrganizationDomain($id: ID!) {\n  reverifyOrganizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const MeDocument = `\n    query Me {\n  me {\n    ...UserFields\n    connectedAccounts {\n      ...ConnectedAccountFields\n    }\n  }\n}\n    ${UserFieldsFragmentDoc}\n${ConnectedAccountFieldsFragmentDoc}`;\nexport const AuthenticationSettingsDocument = `\n    query AuthenticationSettings {\n  authenticationSettings {\n    mfaEnabled\n    mfaRequired\n    passkeyAuthEnabled\n    passwordAuthEnabled\n    passwordPolicy {\n      minimumLength\n      minimumStrength\n      rejectsBreachedPasswords\n      requiresLowercase\n      requiresNumber\n      requiresSymbol\n      requiresUppercase\n    }\n  }\n}\n    `;\nexport const PasskeysDocument = `\n    query Passkeys {\n  passkeys {\n    id\n    createdAt\n    updatedAt\n    lastVerifiedAt\n  }\n}\n    `;\nexport const UpdateProfileDocument = `\n    mutation UpdateProfile($input: UpdateProfileInput!) {\n  updateProfile(input: $input) {\n    __typename\n    ... on ProfileUpdated {\n      user {\n        ...UserFields\n      }\n    }\n  }\n}\n    ${UserFieldsFragmentDoc}`;\nexport const SendVerificationCodeDocument = `\n    mutation SendVerificationCode {\n  sendVerificationCode {\n    __typename\n    ... on VerificationCodeSent {\n      authenticationChallengeId\n      expiresAt\n    }\n  }\n}\n    `;\nexport const VerifyCurrentEmailDocument = `\n    mutation VerifyCurrentEmail($input: VerifyCurrentEmailInput!) {\n  verifyCurrentEmail(input: $input) {\n    __typename\n    ... on CurrentEmailVerified {\n      elevatedAccessToken\n      expiresAt\n    }\n  }\n}\n    `;\nexport const SendEmailChangeDocument = `\n    mutation SendEmailChange($input: SendEmailChangeInput!) {\n  sendEmailChange(input: $input) {\n    __typename\n    ... on EmailChangeSent {\n      expiresAt\n    }\n  }\n}\n    `;\nexport const ConfirmEmailChangeDocument = `\n    mutation ConfirmEmailChange($input: ConfirmEmailChangeInput!) {\n  confirmEmailChange(input: $input) {\n    __typename\n    ... on EmailChangeConfirmed {\n      elevatedAccessToken\n      expiresAt\n      user {\n        ...UserFields\n      }\n    }\n  }\n}\n    ${UserFieldsFragmentDoc}`;\nexport const CreatePasswordDocument = `\n    mutation CreatePassword($input: CreatePasswordInput!) {\n  createPassword(input: $input) {\n    __typename\n    ... on PasswordCreated {\n      success\n    }\n    ... on PasswordPolicyViolation {\n      code\n      message\n      violations {\n        ...PasswordViolationFields\n      }\n    }\n  }\n}\n    ${PasswordViolationFieldsFragmentDoc}`;\nexport const UpdatePasswordDocument = `\n    mutation UpdatePassword($input: UpdatePasswordInput!) {\n  updatePassword(input: $input) {\n    __typename\n    ... on PasswordUpdated {\n      success\n    }\n    ... on PasswordPolicyViolation {\n      code\n      message\n      violations {\n        ...PasswordViolationFields\n      }\n    }\n  }\n}\n    ${PasswordViolationFieldsFragmentDoc}`;\nexport const EnrollTotpDocument = `\n    mutation EnrollTotp($input: EnrollTotpInput!) {\n  enrollTotp(input: $input) {\n    __typename\n    ... on TotpFactor {\n      authenticationChallengeId\n      authenticationFactorId\n      secret\n      uri\n      qrCode\n    }\n  }\n}\n    `;\nexport const VerifyTotpDocument = `\n    mutation VerifyTotp($input: VerifyTotpInput!) {\n  verifyTotp(input: $input) {\n    __typename\n    ... on TotpVerified {\n      success\n    }\n  }\n}\n    `;\nexport const RemoveMfaFactorDocument = `\n    mutation RemoveMfaFactor($input: RemoveMfaFactorInput!) {\n  removeMfaFactor(input: $input) {\n    __typename\n    ... on MfaFactorRemoved {\n      success\n    }\n  }\n}\n    `;\nexport const SessionsDocument = `\n    query Sessions {\n  sessions {\n    ...SessionFields\n  }\n}\n    ${SessionFieldsFragmentDoc}`;\nexport const RevokeSessionDocument = `\n    mutation RevokeSession($input: RevokeSessionInput!) {\n  revokeSession(input: $input) {\n    __typename\n    ... on SessionRevoked {\n      session {\n        ...SessionFields\n      }\n    }\n  }\n}\n    ${SessionFieldsFragmentDoc}`;\nexport const RevokeAllSessionsDocument = `\n    mutation RevokeAllSessions($input: RevokeAllSessionsInput) {\n  revokeAllSessions(input: $input) {\n    __typename\n    ... on AllSessionsRevoked {\n      success\n    }\n  }\n}\n    `;\nexport const ListOrganizationMembershipsDocument = `\n    query ListOrganizationMemberships($after: String, $before: String, $limit: Int, $order: PaginationOrder, $roleSlug: String, $search: String) {\n  organizationMemberships(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    roleSlug: $roleSlug\n    search: $search\n  ) {\n    data {\n      ...OrganizationMemberFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationMemberFieldsFragmentDoc}`;\nexport const ListRolesDocument = `\n    query ListRoles {\n  roles {\n    multipleRolesEnabled\n    roles {\n      ...RoleFields\n    }\n  }\n}\n    ${RoleFieldsFragmentDoc}`;\nexport const InviteUserDocument = `\n    mutation InviteUser($input: InviteUserInput!) {\n  inviteUser(input: $input) {\n    __typename\n    ... on UserInvited {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    ${OrganizationInvitationFieldsFragmentDoc}`;\nexport const UpdateMemberRoleDocument = `\n    mutation UpdateMemberRole($input: UpdateMemberRoleInput!) {\n  updateMemberRole(input: $input) {\n    __typename\n    ... on MemberRoleUpdated {\n      member {\n        ...OrganizationMemberFields\n      }\n    }\n    ... on RoleNotFound {\n      roleSlugs\n    }\n  }\n}\n    ${OrganizationMemberFieldsFragmentDoc}`;\nexport const RemoveMemberDocument = `\n    mutation RemoveMember($input: RemoveMemberInput!) {\n  removeMember(input: $input) {\n    __typename\n    ... on MemberRemoved {\n      userId\n    }\n  }\n}\n    `;\nexport const ResendInvitationDocument = `\n    mutation ResendInvitation($input: ResendInvitationInput!) {\n  resendInvitation(input: $input) {\n    __typename\n    ... on InvitationResent {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    ${OrganizationInvitationFieldsFragmentDoc}`;\nexport const RevokeInvitationDocument = `\n    mutation RevokeInvitation($input: RevokeInvitationInput!) {\n  revokeInvitation(input: $input) {\n    __typename\n    ... on InvitationRevoked {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    ${OrganizationInvitationFieldsFragmentDoc}`;\nexport const ListUserOrganizationsDocument = `\n    query ListUserOrganizations {\n  organizations {\n    id\n    name\n    isCurrent\n  }\n}\n    `;\nexport const ListDirectoryConnectionsDocument = `\n    query ListDirectoryConnections($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  directoryConnections(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...DirectoryFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${DirectoryFieldsFragmentDoc}`;\nexport const GetDirectoryConnectionDocument = `\n    query GetDirectoryConnection($id: ID!) {\n  directoryConnection(id: $id) {\n    ...DirectoryFields\n  }\n}\n    ${DirectoryFieldsFragmentDoc}`;\nexport const ListSsoConnectionsDocument = `\n    query ListSsoConnections {\n  ssoConnections {\n    ...ConnectionFields\n  }\n}\n    ${ConnectionFieldsFragmentDoc}`;\nexport const GetSsoConnectionDocument = `\n    query GetSsoConnection($id: ID!) {\n  ssoConnection(id: $id) {\n    ...ConnectionFields\n  }\n}\n    ${ConnectionFieldsFragmentDoc}`;\nexport const ListDataProvidersDocument = `\n    query ListDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  dataProviders(after: $after, before: $before, limit: $limit, order: $order) {\n    data {\n      ...DataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${DataProviderFieldsFragmentDoc}`;\nexport const ListDataProviderConnectionsDocument = `\n    query ListDataProviderConnections($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  dataProviderConnections(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...DataProviderConnectionFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const CreateDataProviderConnectionDocument = `\n    mutation CreateDataProviderConnection($input: CreateDataProviderConnectionInput!) {\n  createDataProviderConnection(input: $input) {\n    ...DataProviderConnectionFields\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const DeleteDataProviderConnectionDocument = `\n    mutation DeleteDataProviderConnection($id: ID!) {\n  deleteDataProviderConnection(id: $id)\n}\n    `;\nexport const SetDataProviderEnabledDocument = `\n    mutation SetDataProviderEnabled($input: SetDataProviderEnabledInput!) {\n  setDataProviderEnabled(input: $input) {\n    ...DataProviderFields\n  }\n}\n    ${DataProviderFieldsFragmentDoc}`;\nexport const CreateDataProviderAuthorizationDocument = `\n    mutation CreateDataProviderAuthorization($input: CreateDataProviderAuthorizationInput!) {\n  createDataProviderAuthorization(input: $input) {\n    ...DataProviderAuthorizationResultFields\n  }\n}\n    ${DataProviderAuthorizationResultFieldsFragmentDoc}`;\nexport const CreateOrganizationDataProviderAuthorizationDocument = `\n    mutation CreateOrganizationDataProviderAuthorization($input: CreateOrganizationDataProviderAuthorizationInput!) {\n  createOrganizationDataProviderAuthorization(input: $input) {\n    ...DataProviderAuthorizationResultFields\n  }\n}\n    ${DataProviderAuthorizationResultFieldsFragmentDoc}`;\nexport const DataProviderAuthorizationStatusDocument = `\n    query DataProviderAuthorizationStatus($dataProviderId: ID!, $state: String!) {\n  dataProviderAuthorizationStatus(dataProviderId: $dataProviderId, state: $state) {\n    state\n    connecting\n  }\n}\n    `;\nexport const ConnectDataProviderWithClientCredentialsDocument = `\n    mutation ConnectDataProviderWithClientCredentials($input: ConnectDataProviderWithClientCredentialsInput!) {\n  connectDataProviderWithClientCredentials(input: $input) {\n    __typename\n    ... on DataProviderConnected {\n      connection {\n        ...DataProviderConnectionFields\n      }\n    }\n    ... on DataProviderAuthMethodUnsupported {\n      authMethod\n      supportedAuthMethods\n    }\n    ... on DataProviderConnectionAuthMethodConflict {\n      existingAuthMethod\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const SetDataProviderConfigurationDocument = `\n    mutation SetDataProviderConfiguration($input: SetDataProviderConfigurationInput!) {\n  setDataProviderConfiguration(input: $input) {\n    __typename\n    ... on DataProviderConfiguration {\n      ...DataProviderConfigurationFields\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConfigurationFieldsFragmentDoc}`;\nexport const ListOrganizationDataProvidersDocument = `\n    query ListOrganizationDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  organizationDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...OrganizationDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationDataProviderFieldsFragmentDoc}`;\nexport const SetOrganizationDataProviderConfigurationDocument = `\n    mutation SetOrganizationDataProviderConfiguration($input: SetOrganizationDataProviderConfigurationInput!) {\n  setOrganizationDataProviderConfiguration(input: $input) {\n    __typename\n    ... on DataProviderConfiguration {\n      ...DataProviderConfigurationFields\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConfigurationFieldsFragmentDoc}`;\nexport const CreateOrganizationDataProviderConnectionDocument = `\n    mutation CreateOrganizationDataProviderConnection($input: CreateOrganizationDataProviderConnectionInput!) {\n  createOrganizationDataProviderConnection(input: $input) {\n    ...DataProviderConnectionFields\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const ConnectOrganizationDataProviderWithClientCredentialsDocument = `\n    mutation ConnectOrganizationDataProviderWithClientCredentials($input: ConnectOrganizationDataProviderWithClientCredentialsInput!) {\n  connectOrganizationDataProviderWithClientCredentials(input: $input) {\n    __typename\n    ... on DataProviderConnected {\n      connection {\n        ...DataProviderConnectionFields\n      }\n    }\n    ... on DataProviderAuthMethodUnsupported {\n      authMethod\n      supportedAuthMethods\n    }\n    ... on DataProviderConnectionAuthMethodConflict {\n      existingAuthMethod\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const DeleteOrganizationDataProviderConnectionDocument = `\n    mutation DeleteOrganizationDataProviderConnection($id: ID!) {\n  deleteOrganizationDataProviderConnection(id: $id)\n}\n    `;\nexport const UpdateDataProviderConnectionLabelDocument = `\n    mutation UpdateDataProviderConnectionLabel($input: UpdateDataProviderConnectionLabelInput!) {\n  updateDataProviderConnectionLabel(input: $input) {\n    ...DataProviderConnectionLabelResultFields\n  }\n}\n    ${DataProviderConnectionLabelResultFieldsFragmentDoc}`;\nexport const UpdateOrganizationDataProviderConnectionLabelDocument = `\n    mutation UpdateOrganizationDataProviderConnectionLabel($input: UpdateDataProviderConnectionLabelInput!) {\n  updateOrganizationDataProviderConnectionLabel(input: $input) {\n    ...DataProviderConnectionLabelResultFields\n  }\n}\n    ${DataProviderConnectionLabelResultFieldsFragmentDoc}`;\nexport const RegisterPasskeyDocument = `\n    mutation RegisterPasskey($input: RegisterPasskeyInput!) {\n  registerPasskey(input: $input) {\n    __typename\n    ... on PasskeyRegistrationOptions {\n      challengeId\n      options\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    `;\nexport const VerifyPasskeyDocument = `\n    mutation VerifyPasskey($input: VerifyPasskeyInput!) {\n  verifyPasskey(input: $input) {\n    __typename\n    ... on PasskeyVerified {\n      success\n    }\n    ... on PasskeyChallengeNotFound {\n      _placeholder\n    }\n    ... on PasskeyVerificationFailed {\n      _placeholder\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    `;\nexport const DeletePasskeyDocument = `\n    mutation DeletePasskey($input: DeletePasskeyInput!) {\n  deletePasskey(input: $input) {\n    __typename\n    ... on PasskeyDeleted {\n      success\n    }\n    ... on PasskeyNotFound {\n      _placeholder\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    `;\nexport const CreateAdminPortalLinkDocument = `\n    mutation CreateAdminPortalLink($intent: AdminPortalLinkIntent!) {\n  createAdminPortalLink(intent: $intent) {\n    link\n    intent\n    expiresAt\n  }\n}\n    `;\nexport const AuditLogStreamDocument = `\n    query AuditLogStream {\n  auditLogStream {\n    id\n    auditLogTrailId\n    type\n    state\n    errorMessage\n    lastSyncedEventId\n  }\n}\n    `;\nexport const BrandingDocument = `\n    query Branding {\n  branding {\n    displayName\n    logoLightPath\n    logoDarkPath\n    logoLightIconPath\n    logoDarkIconPath\n  }\n}\n    `;\nexport const AuthKitSettingsDocument = `\n    query AuthKitSettings {\n  authkitSettings {\n    origin\n  }\n}\n    `;\nexport const ListPermissionsDocument = `\n    query ListPermissions($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  permissions(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      id\n      slug\n      name\n      description\n      system\n      createdAt\n      updatedAt\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    `;\nexport const ListApiKeyPermissionsDocument = `\n    query ListApiKeyPermissions($apiKeyOwnerType: ApiKeyOwnerType!, $after: String, $before: String, $limit: Int, $search: String) {\n  permissions(\n    filter: {apiKeyOwnerType: $apiKeyOwnerType, heldByCaller: true}\n    after: $after\n    before: $before\n    limit: $limit\n    search: $search\n  ) {\n    data {\n      id\n      slug\n      name\n      description\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    `;\nexport const GetOrganizationDomainDocument = `\n    query GetOrganizationDomain($id: ID!) {\n  organizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const ListSharedDataProvidersDocument = `\n    query ListSharedDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder, $supportsMultipleConnections: Boolean) {\n  sharedDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    supportsMultipleConnections: $supportsMultipleConnections\n  ) {\n    data {\n      ...SharedDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${SharedDataProviderFieldsFragmentDoc}`;\nexport const ListConfigurableDataProvidersDocument = `\n    query ListConfigurableDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  configurableDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...ConfigurableDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${ConfigurableDataProviderFieldsFragmentDoc}`;\nexport const ListOrganizationApiKeysDocument = `\n    query ListOrganizationApiKeys($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  organizationApiKeys(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...OrganizationApiKeyFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const ListUserApiKeysDocument = `\n    query ListUserApiKeys($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  userApiKeys(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...UserApiKeyFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\nexport const CreateOrganizationApiKeyDocument = `\n    mutation CreateOrganizationApiKey($input: CreateApiKeyInput!) {\n  createOrganizationApiKey(input: $input) {\n    __typename\n    ... on OrganizationApiKeyCreated {\n      value\n      apiKey {\n        ...OrganizationApiKeyFields\n      }\n    }\n    ... on ApiKeyPermissionsNotHeld {\n      message\n      unheldPermissions\n    }\n    ... on ApiKeyPermissionsUnsupportedForToken {\n      message\n      requestedPermissions\n    }\n    ... on InvalidApiKeyExpiration {\n      message\n    }\n    ... on InvalidApiKeyName {\n      message\n    }\n    ... on InvalidApiKeyPermissions {\n      message\n      invalidPermissions\n    }\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const CreateUserApiKeyDocument = `\n    mutation CreateUserApiKey($input: CreateApiKeyInput!) {\n  createUserApiKey(input: $input) {\n    __typename\n    ... on UserApiKeyCreated {\n      value\n      apiKey {\n        ...UserApiKeyFields\n      }\n    }\n    ... on ApiKeyPermissionsNotHeld {\n      message\n      unheldPermissions\n    }\n    ... on ApiKeyPermissionsUnsupportedForToken {\n      message\n      requestedPermissions\n    }\n    ... on InvalidApiKeyExpiration {\n      message\n    }\n    ... on InvalidApiKeyName {\n      message\n    }\n    ... on InvalidApiKeyPermissions {\n      message\n      invalidPermissions\n    }\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\nexport const ExpireOrganizationApiKeyDocument = `\n    mutation ExpireOrganizationApiKey($input: ExpireApiKeyInput!) {\n  expireOrganizationApiKey(input: $input) {\n    __typename\n    ... on OrganizationApiKeyExpired {\n      apiKey {\n        ...OrganizationApiKeyFields\n      }\n    }\n    ... on ApiKeyAlreadyExpired {\n      apiKeyId\n    }\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const ExpireUserApiKeyDocument = `\n    mutation ExpireUserApiKey($input: ExpireApiKeyInput!) {\n  expireUserApiKey(input: $input) {\n    __typename\n    ... on UserApiKeyExpired {\n      apiKey {\n        ...UserApiKeyFields\n      }\n    }\n    ... on ApiKeyAlreadyExpired {\n      apiKeyId\n    }\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\nexport const DeleteOrganizationApiKeyDocument = `\n    mutation DeleteOrganizationApiKey($apiKeyId: ID!) {\n  deleteOrganizationApiKey(apiKeyId: $apiKeyId) {\n    ...OrganizationApiKeyFields\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const DeleteUserApiKeyDocument = `\n    mutation DeleteUserApiKey($apiKeyId: ID!) {\n  deleteUserApiKey(apiKeyId: $apiKeyId) {\n    ...UserApiKeyFields\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\n\nexport type SdkFunctionWrapper = <T>(\n  action: (requestHeaders?: Record<string, string>) => Promise<T>,\n  operationName: string,\n  operationType?: string,\n  variables?: any,\n) => Promise<T>;\n\nconst defaultWrapper: SdkFunctionWrapper = (\n  action,\n  _operationName,\n  _operationType,\n  _variables,\n) => action();\n\nexport function getSdk(\n  client: GraphQLClient,\n  withWrapper: SdkFunctionWrapper = defaultWrapper,\n) {\n  return {\n    ClientApiStatus(\n      variables?: ClientApiStatusQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ClientApiStatusQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ClientApiStatusQuery>({\n            document: ClientApiStatusDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ClientApiStatus\",\n        \"query\",\n        variables,\n      );\n    },\n    ListOrganizationDomains(\n      variables?: ListOrganizationDomainsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationDomainsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationDomainsQuery>({\n            document: ListOrganizationDomainsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationDomains\",\n        \"query\",\n        variables,\n      );\n    },\n    CreateOrganizationDomain(\n      variables: CreateOrganizationDomainMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationDomainMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationDomainMutation>({\n            document: CreateOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationDomain\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteOrganizationDomain(\n      variables: DeleteOrganizationDomainMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteOrganizationDomainMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteOrganizationDomainMutation>({\n            document: DeleteOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteOrganizationDomain\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ReverifyOrganizationDomain(\n      variables: ReverifyOrganizationDomainMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ReverifyOrganizationDomainMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ReverifyOrganizationDomainMutation>({\n            document: ReverifyOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ReverifyOrganizationDomain\",\n        \"mutation\",\n        variables,\n      );\n    },\n    Me(\n      variables?: MeQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<MeQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<MeQuery>({\n            document: MeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Me\",\n        \"query\",\n        variables,\n      );\n    },\n    AuthenticationSettings(\n      variables?: AuthenticationSettingsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<AuthenticationSettingsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<AuthenticationSettingsQuery>({\n            document: AuthenticationSettingsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"AuthenticationSettings\",\n        \"query\",\n        variables,\n      );\n    },\n    Passkeys(\n      variables?: PasskeysQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<PasskeysQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<PasskeysQuery>({\n            document: PasskeysDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Passkeys\",\n        \"query\",\n        variables,\n      );\n    },\n    UpdateProfile(\n      variables: UpdateProfileMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateProfileMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateProfileMutation>({\n            document: UpdateProfileDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdateProfile\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SendVerificationCode(\n      variables?: SendVerificationCodeMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SendVerificationCodeMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SendVerificationCodeMutation>({\n            document: SendVerificationCodeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SendVerificationCode\",\n        \"mutation\",\n        variables,\n      );\n    },\n    VerifyCurrentEmail(\n      variables: VerifyCurrentEmailMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<VerifyCurrentEmailMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<VerifyCurrentEmailMutation>({\n            document: VerifyCurrentEmailDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"VerifyCurrentEmail\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SendEmailChange(\n      variables: SendEmailChangeMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SendEmailChangeMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SendEmailChangeMutation>({\n            document: SendEmailChangeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SendEmailChange\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ConfirmEmailChange(\n      variables: ConfirmEmailChangeMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ConfirmEmailChangeMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ConfirmEmailChangeMutation>({\n            document: ConfirmEmailChangeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ConfirmEmailChange\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreatePassword(\n      variables: CreatePasswordMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreatePasswordMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreatePasswordMutation>({\n            document: CreatePasswordDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreatePassword\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdatePassword(\n      variables: UpdatePasswordMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdatePasswordMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdatePasswordMutation>({\n            document: UpdatePasswordDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdatePassword\",\n        \"mutation\",\n        variables,\n      );\n    },\n    EnrollTotp(\n      variables: EnrollTotpMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<EnrollTotpMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<EnrollTotpMutation>({\n            document: EnrollTotpDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"EnrollTotp\",\n        \"mutation\",\n        variables,\n      );\n    },\n    VerifyTotp(\n      variables: VerifyTotpMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<VerifyTotpMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<VerifyTotpMutation>({\n            document: VerifyTotpDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"VerifyTotp\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RemoveMfaFactor(\n      variables: RemoveMfaFactorMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RemoveMfaFactorMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RemoveMfaFactorMutation>({\n            document: RemoveMfaFactorDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RemoveMfaFactor\",\n        \"mutation\",\n        variables,\n      );\n    },\n    Sessions(\n      variables?: SessionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SessionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SessionsQuery>({\n            document: SessionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Sessions\",\n        \"query\",\n        variables,\n      );\n    },\n    RevokeSession(\n      variables: RevokeSessionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RevokeSessionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RevokeSessionMutation>({\n            document: RevokeSessionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RevokeSession\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RevokeAllSessions(\n      variables?: RevokeAllSessionsMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RevokeAllSessionsMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RevokeAllSessionsMutation>({\n            document: RevokeAllSessionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RevokeAllSessions\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ListOrganizationMemberships(\n      variables?: ListOrganizationMembershipsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationMembershipsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationMembershipsQuery>({\n            document: ListOrganizationMembershipsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationMemberships\",\n        \"query\",\n        variables,\n      );\n    },\n    ListRoles(\n      variables?: ListRolesQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListRolesQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListRolesQuery>({\n            document: ListRolesDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListRoles\",\n        \"query\",\n        variables,\n      );\n    },\n    InviteUser(\n      variables: InviteUserMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<InviteUserMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<InviteUserMutation>({\n            document: InviteUserDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"InviteUser\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdateMemberRole(\n      variables: UpdateMemberRoleMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateMemberRoleMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateMemberRoleMutation>({\n            document: UpdateMemberRoleDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdateMemberRole\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RemoveMember(\n      variables: RemoveMemberMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RemoveMemberMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RemoveMemberMutation>({\n            document: RemoveMemberDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RemoveMember\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ResendInvitation(\n      variables: ResendInvitationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ResendInvitationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ResendInvitationMutation>({\n            document: ResendInvitationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ResendInvitation\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RevokeInvitation(\n      variables: RevokeInvitationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RevokeInvitationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RevokeInvitationMutation>({\n            document: RevokeInvitationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RevokeInvitation\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ListUserOrganizations(\n      variables?: ListUserOrganizationsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListUserOrganizationsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListUserOrganizationsQuery>({\n            document: ListUserOrganizationsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListUserOrganizations\",\n        \"query\",\n        variables,\n      );\n    },\n    ListDirectoryConnections(\n      variables?: ListDirectoryConnectionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListDirectoryConnectionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListDirectoryConnectionsQuery>({\n            document: ListDirectoryConnectionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListDirectoryConnections\",\n        \"query\",\n        variables,\n      );\n    },\n    GetDirectoryConnection(\n      variables: GetDirectoryConnectionQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<GetDirectoryConnectionQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<GetDirectoryConnectionQuery>({\n            document: GetDirectoryConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"GetDirectoryConnection\",\n        \"query\",\n        variables,\n      );\n    },\n    ListSsoConnections(\n      variables?: ListSsoConnectionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListSsoConnectionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListSsoConnectionsQuery>({\n            document: ListSsoConnectionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListSsoConnections\",\n        \"query\",\n        variables,\n      );\n    },\n    GetSsoConnection(\n      variables: GetSsoConnectionQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<GetSsoConnectionQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<GetSsoConnectionQuery>({\n            document: GetSsoConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"GetSsoConnection\",\n        \"query\",\n        variables,\n      );\n    },\n    ListDataProviders(\n      variables?: ListDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListDataProvidersQuery>({\n            document: ListDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    ListDataProviderConnections(\n      variables?: ListDataProviderConnectionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListDataProviderConnectionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListDataProviderConnectionsQuery>({\n            document: ListDataProviderConnectionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListDataProviderConnections\",\n        \"query\",\n        variables,\n      );\n    },\n    CreateDataProviderConnection(\n      variables: CreateDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateDataProviderConnectionMutation>({\n            document: CreateDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteDataProviderConnection(\n      variables: DeleteDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteDataProviderConnectionMutation>({\n            document: DeleteDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SetDataProviderEnabled(\n      variables: SetDataProviderEnabledMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SetDataProviderEnabledMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SetDataProviderEnabledMutation>({\n            document: SetDataProviderEnabledDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SetDataProviderEnabled\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateDataProviderAuthorization(\n      variables: CreateDataProviderAuthorizationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateDataProviderAuthorizationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateDataProviderAuthorizationMutation>({\n            document: CreateDataProviderAuthorizationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateDataProviderAuthorization\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateOrganizationDataProviderAuthorization(\n      variables: CreateOrganizationDataProviderAuthorizationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationDataProviderAuthorizationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationDataProviderAuthorizationMutation>({\n            document: CreateOrganizationDataProviderAuthorizationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationDataProviderAuthorization\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DataProviderAuthorizationStatus(\n      variables: DataProviderAuthorizationStatusQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DataProviderAuthorizationStatusQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DataProviderAuthorizationStatusQuery>({\n            document: DataProviderAuthorizationStatusDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DataProviderAuthorizationStatus\",\n        \"query\",\n        variables,\n      );\n    },\n    ConnectDataProviderWithClientCredentials(\n      variables: ConnectDataProviderWithClientCredentialsMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ConnectDataProviderWithClientCredentialsMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ConnectDataProviderWithClientCredentialsMutation>({\n            document: ConnectDataProviderWithClientCredentialsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ConnectDataProviderWithClientCredentials\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SetDataProviderConfiguration(\n      variables: SetDataProviderConfigurationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SetDataProviderConfigurationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SetDataProviderConfigurationMutation>({\n            document: SetDataProviderConfigurationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SetDataProviderConfiguration\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ListOrganizationDataProviders(\n      variables?: ListOrganizationDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationDataProvidersQuery>({\n            document: ListOrganizationDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    SetOrganizationDataProviderConfiguration(\n      variables: SetOrganizationDataProviderConfigurationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SetOrganizationDataProviderConfigurationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SetOrganizationDataProviderConfigurationMutation>({\n            document: SetOrganizationDataProviderConfigurationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SetOrganizationDataProviderConfiguration\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateOrganizationDataProviderConnection(\n      variables: CreateOrganizationDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationDataProviderConnectionMutation>({\n            document: CreateOrganizationDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ConnectOrganizationDataProviderWithClientCredentials(\n      variables: ConnectOrganizationDataProviderWithClientCredentialsMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ConnectOrganizationDataProviderWithClientCredentialsMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ConnectOrganizationDataProviderWithClientCredentialsMutation>(\n            {\n              document:\n                ConnectOrganizationDataProviderWithClientCredentialsDocument,\n              variables,\n              requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n              signal,\n            },\n          ),\n        \"ConnectOrganizationDataProviderWithClientCredentials\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteOrganizationDataProviderConnection(\n      variables: DeleteOrganizationDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteOrganizationDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteOrganizationDataProviderConnectionMutation>({\n            document: DeleteOrganizationDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteOrganizationDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdateDataProviderConnectionLabel(\n      variables: UpdateDataProviderConnectionLabelMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateDataProviderConnectionLabelMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateDataProviderConnectionLabelMutation>({\n            document: UpdateDataProviderConnectionLabelDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdateDataProviderConnectionLabel\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdateOrganizationDataProviderConnectionLabel(\n      variables: UpdateOrganizationDataProviderConnectionLabelMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateOrganizationDataProviderConnectionLabelMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateOrganizationDataProviderConnectionLabelMutation>(\n            {\n              document: UpdateOrganizationDataProviderConnectionLabelDocument,\n              variables,\n              requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n              signal,\n            },\n          ),\n        \"UpdateOrganizationDataProviderConnectionLabel\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RegisterPasskey(\n      variables: RegisterPasskeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RegisterPasskeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RegisterPasskeyMutation>({\n            document: RegisterPasskeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RegisterPasskey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    VerifyPasskey(\n      variables: VerifyPasskeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<VerifyPasskeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<VerifyPasskeyMutation>({\n            document: VerifyPasskeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"VerifyPasskey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeletePasskey(\n      variables: DeletePasskeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeletePasskeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeletePasskeyMutation>({\n            document: DeletePasskeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeletePasskey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateAdminPortalLink(\n      variables: CreateAdminPortalLinkMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateAdminPortalLinkMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateAdminPortalLinkMutation>({\n            document: CreateAdminPortalLinkDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateAdminPortalLink\",\n        \"mutation\",\n        variables,\n      );\n    },\n    AuditLogStream(\n      variables?: AuditLogStreamQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<AuditLogStreamQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<AuditLogStreamQuery>({\n            document: AuditLogStreamDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"AuditLogStream\",\n        \"query\",\n        variables,\n      );\n    },\n    Branding(\n      variables?: BrandingQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<BrandingQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<BrandingQuery>({\n            document: BrandingDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Branding\",\n        \"query\",\n        variables,\n      );\n    },\n    AuthKitSettings(\n      variables?: AuthKitSettingsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<AuthKitSettingsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<AuthKitSettingsQuery>({\n            document: AuthKitSettingsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"AuthKitSettings\",\n        \"query\",\n        variables,\n      );\n    },\n    ListPermissions(\n      variables?: ListPermissionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListPermissionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListPermissionsQuery>({\n            document: ListPermissionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListPermissions\",\n        \"query\",\n        variables,\n      );\n    },\n    ListApiKeyPermissions(\n      variables: ListApiKeyPermissionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListApiKeyPermissionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListApiKeyPermissionsQuery>({\n            document: ListApiKeyPermissionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListApiKeyPermissions\",\n        \"query\",\n        variables,\n      );\n    },\n    GetOrganizationDomain(\n      variables: GetOrganizationDomainQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<GetOrganizationDomainQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<GetOrganizationDomainQuery>({\n            document: GetOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"GetOrganizationDomain\",\n        \"query\",\n        variables,\n      );\n    },\n    ListSharedDataProviders(\n      variables?: ListSharedDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListSharedDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListSharedDataProvidersQuery>({\n            document: ListSharedDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListSharedDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    ListConfigurableDataProviders(\n      variables?: ListConfigurableDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListConfigurableDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListConfigurableDataProvidersQuery>({\n            document: ListConfigurableDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListConfigurableDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    ListOrganizationApiKeys(\n      variables?: ListOrganizationApiKeysQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationApiKeysQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationApiKeysQuery>({\n            document: ListOrganizationApiKeysDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationApiKeys\",\n        \"query\",\n        variables,\n      );\n    },\n    ListUserApiKeys(\n      variables?: ListUserApiKeysQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListUserApiKeysQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListUserApiKeysQuery>({\n            document: ListUserApiKeysDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListUserApiKeys\",\n        \"query\",\n        variables,\n      );\n    },\n    CreateOrganizationApiKey(\n      variables: CreateOrganizationApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationApiKeyMutation>({\n            document: CreateOrganizationApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateUserApiKey(\n      variables: CreateUserApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateUserApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateUserApiKeyMutation>({\n            document: CreateUserApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateUserApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ExpireOrganizationApiKey(\n      variables: ExpireOrganizationApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ExpireOrganizationApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ExpireOrganizationApiKeyMutation>({\n            document: ExpireOrganizationApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ExpireOrganizationApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ExpireUserApiKey(\n      variables: ExpireUserApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ExpireUserApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ExpireUserApiKeyMutation>({\n            document: ExpireUserApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ExpireUserApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteOrganizationApiKey(\n      variables: DeleteOrganizationApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteOrganizationApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteOrganizationApiKeyMutation>({\n            document: DeleteOrganizationApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteOrganizationApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteUserApiKey(\n      variables: DeleteUserApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteUserApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteUserApiKeyMutation>({\n            document: DeleteUserApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteUserApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n  };\n}\nexport type Sdk = ReturnType<typeof getSdk>;\n"],"mappings":";;AA0wKA,MAAa,sCAAsC;;;;;;;;;;;;;AAanD,MAAa,wBAAwB;;;;;;;;;;;;;;;;AAgBrC,MAAa,oCAAoC;;;;;;;;;;;AAWjD,MAAa,qCAAqC;;;;;;;;;;;;;AAalD,MAAa,2BAA2B;;;;;;;;;;;;;;;;;;;;AAoBxC,MAAa,sCAAsC;;;;;;;;;;;;;;;;;;;;AAoBnD,MAAa,0CAA0C;;;;;;;;;;AAUvD,MAAa,wBAAwB;;;;;;;;;;;AAWrC,MAAa,6BAA6B;;;;;;;;;;;;;;;;;;;AAmB1C,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;AA0B3C,MAAa,2CAA2C;;;;;;;;;;;;;;;AAexD,MAAa,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6BvC;AACN,MAAa,mDAAmD;;;;;;;;;;;;;;;;;AAiBhE,MAAa,6CAA6C;;;;;;;;;;;;;;;;AAgB1D,MAAa,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BvD,MAAa,4CAA4C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAoDnD,yCAAyC;EAC7C;AACF,MAAa,qDAAqD;;;;;;;;;;MAU5D;AACN,MAAa,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;AAyBnD,MAAa,4CAA4C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAkCnD;AACN,MAAa,sCAAsC;;;;;;;;;;;;AAYnD,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;AAmB3C,MAAa,0BAA0B;;;;;AAKvC,MAAa,kCAAkC;;;;;;;;;;;;;;;;;MAiBzC;AACN,MAAa,mCAAmC;;;;;;MAM1C;AACN,MAAa,mCAAmC;;;;;;MAM1C;AACN,MAAa,qCAAqC;;;;;;MAM5C;AACN,MAAa,aAAa;;;;;;;;;MASpB,sBAAsB;EAC1B;AACF,MAAa,iCAAiC;;;;;;;;;;;;;;;;;;;AAmB9C,MAAa,mBAAmB;;;;;;;;;;AAUhC,MAAa,wBAAwB;;;;;;;;;;;MAW/B;AACN,MAAa,+BAA+B;;;;;;;;;;;AAW5C,MAAa,6BAA6B;;;;;;;;;;;AAW1C,MAAa,0BAA0B;;;;;;;;;;AAUvC,MAAa,6BAA6B;;;;;;;;;;;;;MAapC;AACN,MAAa,yBAAyB;;;;;;;;;;;;;;;;MAgBhC;AACN,MAAa,yBAAyB;;;;;;;;;;;;;;;;MAgBhC;AACN,MAAa,qBAAqB;;;;;;;;;;;;;;AAclC,MAAa,qBAAqB;;;;;;;;;;AAUlC,MAAa,0BAA0B;;;;;;;;;;AAUvC,MAAa,mBAAmB;;;;;;MAM1B;AACN,MAAa,wBAAwB;;;;;;;;;;;MAW/B;AACN,MAAa,4BAA4B;;;;;;;;;;AAUzC,MAAa,sCAAsC;;;;;;;;;;;;;;;;;;;MAmB7C;AACN,MAAa,oBAAoB;;;;;;;;;MAS3B;AACN,MAAa,qBAAqB;;;;;;;;;;;MAW5B;AACN,MAAa,2BAA2B;;;;;;;;;;;;;;MAclC;AACN,MAAa,uBAAuB;;;;;;;;;;AAUpC,MAAa,2BAA2B;;;;;;;;;;;MAWlC;AACN,MAAa,2BAA2B;;;;;;;;;;;MAWlC;AACN,MAAa,gCAAgC;;;;;;;;;AAS7C,MAAa,mCAAmC;;;;;;;;;;;;;;;;;;MAkB1C;AACN,MAAa,iCAAiC;;;;;;MAMxC;AACN,MAAa,6BAA6B;;;;;;MAMpC;AACN,MAAa,2BAA2B;;;;;;MAMlC;AACN,MAAa,4BAA4B;;;;;;;;;;;;MAYnC;AACN,MAAa,sCAAsC;;;;;;;;;;;;;;;;;MAiB7C;AACN,MAAa,uCAAuC;;;;;;MAM9C;AACN,MAAa,uCAAuC;;;;;AAKpD,MAAa,iCAAiC;;;;;;MAMxC;AACN,MAAa,0CAA0C;;;;;;MAMjD;AACN,MAAa,sDAAsD;;;;;;MAM7D;AACN,MAAa,0CAA0C;;;;;;;;AAQvD,MAAa,mDAAmD;;;;;;;;;;;;;;;;;;;;;MAqB1D;AACN,MAAa,uCAAuC;;;;;;;;;;;;MAY9C;AACN,MAAa,wCAAwC;;;;;;;;;;;;;;;;;MAiB/C;AACN,MAAa,mDAAmD;;;;;;;;;;;;MAY1D;AACN,MAAa,mDAAmD;;;;;;MAM1D;AACN,MAAa,+DAA+D;;;;;;;;;;;;;;;;;;;;;MAqBtE;AACN,MAAa,mDAAmD;;;;;AAKhE,MAAa,4CAA4C;;;;;;MAMnD;AACN,MAAa,wDAAwD;;;;;;MAM/D;AACN,MAAa,0BAA0B;;;;;;;;;;;;;;;;;AAiBvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;AAsBrC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;AAmBrC,MAAa,gCAAgC;;;;;;;;;AAS7C,MAAa,yBAAyB;;;;;;;;;;;;AAYtC,MAAa,mBAAmB;;;;;;;;;;;AAWhC,MAAa,0BAA0B;;;;;;;AAOvC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;AAyBvC,MAAa,gCAAgC;;;;;;;;;;;;;;;;;;;;;;AAsB7C,MAAa,gCAAgC;;;;;;MAMvC;AACN,MAAa,kCAAkC;;;;;;;;;;;;;;;;;;MAkBzC;AACN,MAAa,wCAAwC;;;;;;;;;;;;;;;;;MAiB/C;AACN,MAAa,kCAAkC;;;;;;;;;;;;;;;;;;MAkBzC;AACN,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;MAkBjC;AACN,MAAa,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA8B1C;AACN,MAAa,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA8BlC;AACN,MAAa,mCAAmC;;;;;;;;;;;;;;MAc1C;AACN,MAAa,2BAA2B;;;;;;;;;;;;;;MAclC;AACN,MAAa,mCAAmC;;;;;;MAM1C;AACN,MAAa,2BAA2B;;;;;;MAMlC;AASN,MAAM,kBACJ,QACA,gBACA,gBACA,eACG,OAAO;AAEZ,SAAgB,OACd,QACA,cAAkC,gBAClC;CACA,OAAO;EACL,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,wBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,2BACA,SACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,2BACE,WACA,gBACA,QAC6C;GAC7C,OAAO,aACJ,0BACC,OAAO,QAA4C;IACjD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,8BACA,YACA,SACF;EACF;EACA,GACE,WACA,gBACA,QACkB;GAClB,OAAO,aACJ,0BACC,OAAO,QAAiB;IACtB,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,MACA,SACA,SACF;EACF;EACA,uBACE,WACA,gBACA,QACsC;GACtC,OAAO,aACJ,0BACC,OAAO,QAAqC;IAC1C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,0BACA,SACA,SACF;EACF;EACA,SACE,WACA,gBACA,QACwB;GACxB,OAAO,aACJ,0BACC,OAAO,QAAuB;IAC5B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,YACA,SACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,qBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,wBACA,YACA,SACF;EACF;EACA,mBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,sBACA,YACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,YACA,SACF;EACF;EACA,mBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,sBACA,YACA,SACF;EACF;EACA,eACE,WACA,gBACA,QACiC;GACjC,OAAO,aACJ,0BACC,OAAO,QAAgC;IACrC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,kBACA,YACA,SACF;EACF;EACA,eACE,WACA,gBACA,QACiC;GACjC,OAAO,aACJ,0BACC,OAAO,QAAgC;IACrC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,kBACA,YACA,SACF;EACF;EACA,WACE,WACA,gBACA,QAC6B;GAC7B,OAAO,aACJ,0BACC,OAAO,QAA4B;IACjC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,cACA,YACA,SACF;EACF;EACA,WACE,WACA,gBACA,QAC6B;GAC7B,OAAO,aACJ,0BACC,OAAO,QAA4B;IACjC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,cACA,YACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,YACA,SACF;EACF;EACA,SACE,WACA,gBACA,QACwB;GACxB,OAAO,aACJ,0BACC,OAAO,QAAuB;IAC5B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,YACA,SACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,kBACE,WACA,gBACA,QACoC;GACpC,OAAO,aACJ,0BACC,OAAO,QAAmC;IACxC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,qBACA,YACA,SACF;EACF;EACA,4BACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,+BACA,SACA,SACF;EACF;EACA,UACE,WACA,gBACA,QACyB;GACzB,OAAO,aACJ,0BACC,OAAO,QAAwB;IAC7B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,aACA,SACA,SACF;EACF;EACA,WACE,WACA,gBACA,QAC6B;GAC7B,OAAO,aACJ,0BACC,OAAO,QAA4B;IACjC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,cACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,aACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gBACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,SACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QACwC;GACxC,OAAO,aACJ,0BACC,OAAO,QAAuC;IAC5C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,SACA,SACF;EACF;EACA,uBACE,WACA,gBACA,QACsC;GACtC,OAAO,aACJ,0BACC,OAAO,QAAqC;IAC1C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,0BACA,SACA,SACF;EACF;EACA,mBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,sBACA,SACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,SACA,SACF;EACF;EACA,kBACE,WACA,gBACA,QACiC;GACjC,OAAO,aACJ,0BACC,OAAO,QAAgC;IACrC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,qBACA,SACA,SACF;EACF;EACA,4BACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,+BACA,SACA,SACF;EACF;EACA,6BACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gCACA,YACA,SACF;EACF;EACA,6BACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gCACA,YACA,SACF;EACF;EACA,uBACE,WACA,gBACA,QACyC;GACzC,OAAO,aACJ,0BACC,OAAO,QAAwC;IAC7C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,0BACA,YACA,SACF;EACF;EACA,gCACE,WACA,gBACA,QACkD;GAClD,OAAO,aACJ,0BACC,OAAO,QAAiD;IACtD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mCACA,YACA,SACF;EACF;EACA,4CACE,WACA,gBACA,QAC8D;GAC9D,OAAO,aACJ,0BACC,OAAO,QAA6D;IAClE,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,+CACA,YACA,SACF;EACF;EACA,gCACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mCACA,SACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,6BACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gCACA,YACA,SACF;EACF;EACA,8BACE,WACA,gBACA,QAC6C;GAC7C,OAAO,aACJ,0BACC,OAAO,QAA4C;IACjD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iCACA,SACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,qDACE,WACA,gBACA,QACuE;GACvE,OAAO,aACJ,0BACC,OAAO,QACL;IACE,UACE;IACF;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CACF,GACF,wDACA,YACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,kCACE,WACA,gBACA,QACoD;GACpD,OAAO,aACJ,0BACC,OAAO,QAAmD;IACxD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,qCACA,YACA,SACF;EACF;EACA,8CACE,WACA,gBACA,QACgE;GAChE,OAAO,aACJ,0BACC,OAAO,QACL;IACE,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CACF,GACF,iDACA,YACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,YACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACwC;GACxC,OAAO,aACJ,0BACC,OAAO,QAAuC;IAC5C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,YACA,SACF;EACF;EACA,eACE,WACA,gBACA,QAC8B;GAC9B,OAAO,aACJ,0BACC,OAAO,QAA6B;IAClC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,kBACA,SACA,SACF;EACF;EACA,SACE,WACA,gBACA,QACwB;GACxB,OAAO,aACJ,0BACC,OAAO,QAAuB;IAC5B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,YACA,SACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,SACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,SACA,SACF;EACF;EACA,wBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,2BACA,SACA,SACF;EACF;EACA,8BACE,WACA,gBACA,QAC6C;GAC7C,OAAO,aACJ,0BACC,OAAO,QAA4C;IACjD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iCACA,SACA,SACF;EACF;EACA,wBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,2BACA,SACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;CACF;AACF"}
+{"version":3,"file":"generated.cjs","names":[],"sources":["../../../../src/api/client-graphql/generated.ts"],"sourcesContent":["import type { GraphQLClient, RequestOptions } from \"graphql-request\";\nexport type Maybe<T> = T | null;\nexport type InputMaybe<T> = Maybe<T>;\nexport type Exact<T extends { [key: string]: unknown }> = {\n  [K in keyof T]: T[K];\n};\nexport type MakeOptional<T, K extends keyof T> = Omit<T, K> & {\n  [SubKey in K]?: Maybe<T[SubKey]>;\n};\nexport type MakeMaybe<T, K extends keyof T> = Omit<T, K> & {\n  [SubKey in K]: Maybe<T[SubKey]>;\n};\nexport type MakeEmpty<\n  T extends { [key: string]: unknown },\n  K extends keyof T,\n> = { [_ in K]?: never };\nexport type Incremental<T> =\n  | T\n  | {\n      [P in keyof T]?: P extends \" $fragmentName\" | \"__typename\" ? T[P] : never;\n    };\ntype GraphQLClientRequestHeaders = RequestOptions[\"requestHeaders\"];\n/** All built-in and custom scalars, mapped to their actual values */\nexport type Scalars = {\n  ID: { input: string; output: string };\n  String: { input: string; output: string };\n  Boolean: { input: boolean; output: boolean };\n  Int: { input: number; output: number };\n  Float: { input: number; output: number };\n  /** A date-time string at UTC, such as 2019-12-03T09:54:33Z, compliant with the date-time format. */\n  DateTime: { input: string; output: string };\n  /** The `JSON` scalar type represents JSON values as specified by [ECMA-404](http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-404.pdf). */\n  JSON: { input: any; output: any };\n};\n\n/** A short-lived link that starts an Admin Portal session for the token’s organization, scoped to a single setup flow. */\nexport type AdminPortalLink = {\n  __typename?: \"AdminPortalLink\";\n  /** When the link stops being redeemable. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n  /** The setup flow the link is scoped to. */\n  intent: AdminPortalLinkIntent;\n  /** The Admin Portal URL to send the user to. It carries a bearer capability, so treat it as a secret and redirect immediately. */\n  link: Scalars[\"String\"][\"output\"];\n};\n\n/** The Admin Portal setup flow a link is scoped to. */\nexport type AdminPortalLinkIntent =\n  | \"DomainVerification\"\n  | \"Dsync\"\n  | \"LogStreams\"\n  | \"Sso\";\n\n/** All other sessions were revoked successfully. */\nexport type AllSessionsRevoked = {\n  __typename?: \"AllSessionsRevoked\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The key is already expired, so its expiration cannot change. */\nexport type ApiKeyAlreadyExpired = {\n  __typename?: \"ApiKeyAlreadyExpired\";\n  apiKeyId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The kind of API key a permission may be granted to. */\nexport type ApiKeyOwnerType =\n  /** Organization API keys, created with `createOrganizationApiKey`. */\n  | \"Organization\"\n  /** User API keys, created with `createUserApiKey`. */\n  | \"User\";\n\n/** One or more requested permission slugs are not held by the caller. A key never carries more than the caller minting it holds, so the caller must be granted a permission before it can grant it to a key. */\nexport type ApiKeyPermissionsNotHeld = {\n  __typename?: \"ApiKeyPermissionsNotHeld\";\n  message: Scalars[\"String\"][\"output\"];\n  /** The requested permission slugs the caller does not hold. */\n  unheldPermissions: Array<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The token cannot grant permissions to a key. The caller is not acting as a member of the organization, so there is no set of held permissions to bound the key to; such a token can only create a key with no permissions. */\nexport type ApiKeyPermissionsUnsupportedForToken = {\n  __typename?: \"ApiKeyPermissionsUnsupportedForToken\";\n  message: Scalars[\"String\"][\"output\"];\n  /** The permission slugs that were requested for the key. */\n  requestedPermissions: Array<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type AssignPermissionToRoleInput = {\n  /** The slug of the permission to assign. */\n  permissionSlug: Scalars[\"String\"][\"input\"];\n  /** The ID of the role to assign the permission to. */\n  roleId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type AuditEvent = {\n  __typename?: \"AuditEvent\";\n  action: Scalars[\"String\"][\"output\"];\n  actor: AuditEventActor;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  data: Scalars[\"JSON\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  occurredAt: Scalars[\"DateTime\"][\"output\"];\n  targets: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type AuditEventActor = {\n  __typename?: \"AuditEventActor\";\n  id: Scalars[\"String\"][\"output\"];\n  name?: Maybe<Scalars[\"String\"][\"output\"]>;\n  type: Scalars[\"String\"][\"output\"];\n};\n\nexport type AuditEventFilterInput = {\n  actions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorNames?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  rangeEnd: Scalars[\"DateTime\"][\"input\"];\n  rangeStart: Scalars[\"DateTime\"][\"input\"];\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  targetIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  targetTypes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type AuditEventList = {\n  __typename?: \"AuditEventList\";\n  data: Array<AuditEvent>;\n  listMetadata: ListMetadata;\n};\n\nexport type AuditLogExport = {\n  __typename?: \"AuditLogExport\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  state: AuditLogExportState;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  /** A signed URL to the CSV file. Only defined once the export is ready. */\n  url?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type AuditLogExportState = \"Error\" | \"Expired\" | \"Pending\" | \"Ready\";\n\n/** The audit log stream destination configured for the token's organization. Exposes status metadata only; destination settings and credentials are never included. */\nexport type AuditLogStream = {\n  __typename?: \"AuditLogStream\";\n  auditLogTrailId: Scalars[\"ID\"][\"output\"];\n  /** The most recent delivery error message, if any. */\n  errorMessage?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The ID of the last audit log event delivered to the stream. */\n  lastSyncedEventId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  state: AuditLogStreamState;\n  type: AuditLogStreamType;\n};\n\n/** The delivery state of an audit log stream. */\nexport type AuditLogStreamState = \"Active\" | \"Error\" | \"Inactive\" | \"Invalid\";\n\n/** The destination provider audit log events are streamed to. */\nexport type AuditLogStreamType =\n  | \"AzureSentinel\"\n  | \"Datadog\"\n  | \"GenericHttps\"\n  | \"GoogleCloudStorage\"\n  | \"S3\"\n  | \"Snowflake\"\n  | \"Splunk\";\n\n/** AuthKit settings for the token's environment. */\nexport type AuthKitSettings = {\n  __typename?: \"AuthKitSettings\";\n  /** The HTTPS origin of the preferred AuthKit domain. */\n  origin: Scalars[\"String\"][\"output\"];\n};\n\n/** The authentication methods the environment allows, and the password policy it enforces. Distinct from what the authenticated user has set up, which lives on `me`. */\nexport type AuthenticationSettings = {\n  __typename?: \"AuthenticationSettings\";\n  /** Whether multi-factor authentication is available in this environment. When `false`, TOTP enrollment should not be offered. */\n  mfaEnabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether multi-factor authentication is mandatory for every user in this environment. */\n  mfaRequired: Scalars[\"Boolean\"][\"output\"];\n  /** Whether users may authenticate with a passkey. */\n  passkeyAuthEnabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether users may authenticate with a password. When `false`, `createPassword` and `updatePassword` should not be offered. */\n  passwordAuthEnabled: Scalars[\"Boolean\"][\"output\"];\n  passwordPolicy: PasswordPolicy;\n};\n\n/** The branding the token renders: its application's own once that application has been customized, otherwise its environment's. */\nexport type Branding = {\n  __typename?: \"Branding\";\n  /** The product name shown to users. */\n  displayName: Scalars[\"String\"][\"output\"];\n  /** The fully resolved dark-mode icon URL, or null when it is not configured. */\n  logoDarkIconPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The fully resolved dark-mode logo URL, or null when it is not configured. */\n  logoDarkPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The fully resolved light-mode icon URL, or null when it is not configured. */\n  logoLightIconPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The fully resolved light-mode logo URL, or null when it is not configured. */\n  logoLightPath?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** A data provider members connect individually, with the token's organization's configuration of it. */\nexport type ConfigurableDataProvider = {\n  __typename?: \"ConfigurableDataProvider\";\n  /** How accounts authenticate with this data provider. */\n  authMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */\n  availableScopes: Array<Scalars[\"String\"][\"output\"]>;\n  /** The non-secret configuration values pinned for the token's organization. */\n  config: Array<DataProviderConfigEntry>;\n  /** The configuration fields the provider declares. */\n  configFields: Array<DataProviderConfigField>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The redacted OAuth application credentials configured for the token's organization. */\n  credentials: DataProviderCredentials;\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  /** The scopes the developer configured, before any organization override. */\n  defaultScopes: Array<Scalars[\"String\"][\"output\"]>;\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether members may connect this provider: the organization's override when one exists, otherwise the developer default. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** The URL of the provider logo for dark backgrounds, when one is served. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider logo for light backgrounds, when one is served. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  integrationType: Scalars[\"String\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  /** The organization's override when set, otherwise the developer default. */\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  slug: Scalars[\"String\"][\"output\"];\n  /** The configuration state of the data provider: `valid`, `invalid`, or `requested`. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type ConfigurableDataProviderList = {\n  __typename?: \"ConfigurableDataProviderList\";\n  data: Array<ConfigurableDataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** Input for confirming an email change with the verification code. */\nexport type ConfirmEmailChangeInput = {\n  /** The verification code sent to the new email address. */\n  code: Scalars[\"String\"][\"input\"];\n  /** The elevated access token from a successful `verifyCurrentEmail` call. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type ConfirmEmailChangeResult =\n  | EmailChangeCodeExpired\n  | EmailChangeCodeIncorrect\n  | EmailChangeCodePreviouslyUsed\n  | EmailChangeConfirmed\n  | EmailChangeTooManyAttempts\n  | EmailManagedByProvider\n  | EmailNotAvailable\n  | IdentityVerificationExpired\n  | IdentityVerificationInvalid\n  | InvalidEmail\n  | NoPendingEmailChange;\n\nexport type ConnectDataProviderResult =\n  | DataProviderAuthMethodUnsupported\n  | DataProviderConfigInvalid\n  | DataProviderConnected\n  | DataProviderConnectionAuthMethodConflict;\n\nexport type ConnectDataProviderWithClientCredentialsInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The OAuth client ID issued by the data provider. Only data providers whose `authMethods` include `client_credentials` can be connected this way. */\n  clientId: Scalars[\"String\"][\"input\"];\n  /** The OAuth client secret issued by the data provider. Write-only: it is stored encrypted and never returned. */\n  clientSecret: Scalars[\"String\"][\"input\"];\n  /** Values for the provider’s connection configuration fields. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The data provider to connect the authenticated user to. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type ConnectOrganizationDataProviderWithClientCredentialsInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The OAuth client ID issued by the data provider. Only data providers whose `authMethods` include `client_credentials` can be connected this way. */\n  clientId: Scalars[\"String\"][\"input\"];\n  /** The OAuth client secret issued by the data provider, shared by every member of the organization. Write-only: it is stored encrypted and never returned. */\n  clientSecret: Scalars[\"String\"][\"input\"];\n  /** Values for the provider’s connection configuration fields. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The organization-owned data provider to connect (`organizationDataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization member the credentials are attributed to. With a user session token, omit it to use the session user, or pass that same user; any other user is rejected. With an application credential token, it is required and must name an active member of the token organization. */\n  userId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n};\n\n/** An OAuth profile linked to the authenticated user. */\nexport type ConnectedAccount = {\n  __typename?: \"ConnectedAccount\";\n  email?: Maybe<Scalars[\"String\"][\"output\"]>;\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  lastLoginAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  profilePictureUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  provider: OAuthProvider;\n};\n\n/** An SSO connection belonging to the organization. Mirrors the SSO Connection exposed by the REST connections API. */\nexport type Connection = {\n  __typename?: \"Connection\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The most recent sign-in session through this connection, if any. */\n  lastSession?: Maybe<SsoConnectionSession>;\n  /** The most recently expired SAML certificate when the connection has no valid certificate left, if any. Always null for OpenID Connect connections. */\n  latestExpiredCertificate?: Maybe<X509Certificate>;\n  /** The connection's longest-lived unexpired SAML certificate when it expires within the next three months, if any. Null when a certificate valid beyond that window exists. Always null for OpenID Connect connections. */\n  latestExpiringCertificate?: Maybe<X509Certificate>;\n  /** A human-readable name for the connection. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The organization the connection belongs to. */\n  organizationId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  /** Whether the connection speaks SAML or OpenID Connect. */\n  providerTag: SsoProviderTag;\n  /** Whether the connection has completed its IdP setup and can authenticate users (equivalent to an `Active` state). */\n  setupComplete: Scalars[\"Boolean\"][\"output\"];\n  /** The connection's IdP setup status. `Active` indicates setup is complete; other states indicate where the connection is in its setup flow. */\n  state: ConnectionState;\n  /** The identity provider type of the connection. */\n  type: ConnectionType;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** An explicit request to add another connection or reauthorize one exact connection. Omit it for permanent compatibility behavior. */\nexport type ConnectionIntent = \"Add\" | \"Reauthorize\";\n\n/** Enum represents the state of the connection. */\nexport type ConnectionState = \"Active\" | \"Deleting\" | \"Inactive\" | \"Validating\";\n\n/** Enum represents the type of connection. */\nexport type ConnectionType =\n  | \"ADFSSAML\"\n  | \"AdpOidc\"\n  | \"AppleOAuth\"\n  | \"Auth0Migration\"\n  | \"Auth0SAML\"\n  | \"AzureSAML\"\n  | \"BitbucketOAuth\"\n  | \"CasSAML\"\n  | \"ClassLinkSAML\"\n  | \"CleverOIDC\"\n  | \"CloudflareSAML\"\n  | \"CyberArkSAML\"\n  | \"DiscordOAuth\"\n  | \"DuoSAML\"\n  | \"EntraIdOIDC\"\n  | \"GenericOIDC\"\n  | \"GenericSAML\"\n  | \"GitLabOAuth\"\n  | \"GithubOAuth\"\n  | \"GoogleOAuth\"\n  | \"GoogleOIDC\"\n  | \"GoogleSAML\"\n  | \"GrokOAuth\"\n  | \"IntuitOAuth\"\n  | \"JumpCloudSAML\"\n  | \"KeycloakSAML\"\n  | \"LastPassSAML\"\n  | \"LinkedInOAuth\"\n  | \"LoginGovOidc\"\n  | \"MagicLink\"\n  | \"MicrosoftOAuth\"\n  | \"MiniOrangeSAML\"\n  | \"NetIqSAML\"\n  | \"OktaOIDC\"\n  | \"OktaSAML\"\n  | \"OneLoginSAML\"\n  | \"OracleSAML\"\n  | \"PingFederateSAML\"\n  | \"PingOneSAML\"\n  | \"RipplingSAML\"\n  | \"SalesforceOAuth\"\n  | \"SalesforceSAML\"\n  | \"ShibbolethGenericSAML\"\n  | \"ShibbolethSAML\"\n  | \"SimpleSamlPhpSAML\"\n  | \"SlackOAuth\"\n  | \"TestIdp\"\n  | \"VMwareSAML\"\n  | \"VercelMarketplaceOAuth\"\n  | \"VercelOAuth\"\n  | \"XOAuth\"\n  | \"XeroOAuth\";\n\n/** Input for creating an API key. The organization is taken from the token, never from an argument. */\nexport type CreateApiKeyInput = {\n  /** When the key should expire. Must be in the future. Omit for a key that never expires. */\n  expiresAt?: InputMaybe<Scalars[\"DateTime\"][\"input\"]>;\n  /** The human-readable name of the key. */\n  name: Scalars[\"String\"][\"input\"];\n  /** The permission slugs to grant the key. Each slug must be enabled for API keys in the environment, and must be a permission the caller itself holds. Defaults to no permissions. */\n  permissions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type CreateAuditLogExportInput = {\n  actions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  actorNames?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  rangeEnd: Scalars[\"DateTime\"][\"input\"];\n  rangeStart: Scalars[\"DateTime\"][\"input\"];\n  targetIds?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  targetTypes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type CreateAuditLogExportResult =\n  | AuditLogExport\n  | InvalidAuditLogExportDateRange\n  | NoAuditEventsFound;\n\nexport type CreateDataProviderAuthorizationInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Values for the provider’s connect-time configuration fields. Omit when the provider declares none. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Add another connection or reauthorize one exact connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise returns DataProviderAuthorizationUnavailable. Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The data provider to authorize for the authenticated user. It must be one the user can connect (`dataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Request a confirmation step at the end of the flow, returning a `handoffToken` the client must complete. Defaults to false. */\n  requireHandoff?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n};\n\nexport type CreateDataProviderAuthorizationResult =\n  | DataProviderAuthorization\n  | DataProviderAuthorizationUnavailable\n  | DataProviderConfigInvalid;\n\nexport type CreateDataProviderConnectionInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The API key issued by the data provider. Only data providers whose `authMethods` include `api_key` can be connected this way; OAuth providers are connected through the widget's authorization flow. */\n  apiKey: Scalars[\"String\"][\"input\"];\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The data provider to connect the authenticated user to. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type CreateOrganizationApiKeyResult =\n  | ApiKeyPermissionsNotHeld\n  | ApiKeyPermissionsUnsupportedForToken\n  | InvalidApiKeyExpiration\n  | InvalidApiKeyName\n  | InvalidApiKeyPermissions\n  | OrganizationApiKeyCreated;\n\nexport type CreateOrganizationDataProviderAuthorizationInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Values for the provider’s connect-time configuration fields. Omit when the provider declares none. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Add another connection or reauthorize one exact connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise returns DataProviderAuthorizationUnavailable. Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The organization-owned data provider to authorize (`organizationDataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type CreateOrganizationDataProviderConnectionInput = {\n  /** A display name for the connection. Omit to preserve the existing label; null clears it. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The API key issued by the data provider, shared by every member of the organization. Only data providers whose `authMethods` include `api_key` can be connected this way. Write-only: it is stored encrypted and never returned. */\n  apiKey: Scalars[\"String\"][\"input\"];\n  /** The exact connection to reauthorize. Required with Reauthorize and forbidden otherwise. */\n  connectedAccountId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n  /** Set to Add to create another connection. Omit for permanent compatibility behavior. When additional connections are unavailable for the environment, Add succeeds only when the owner has no connection for this data provider and otherwise fails with the error \"Multiple connections are not available.\" Use canAddConnection and addConnectionMethods for current availability; writes recheck the provider, actor, gate, and connection cap. */\n  connectionIntent?: InputMaybe<ConnectionIntent>;\n  /** The organization-owned data provider to connect (`organizationDataProviders`). */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Makes retries of an Add return the connection the first attempt created instead of creating another. Reuse the same key for every retry of one user action. A matching retry within 24 hours returns the existing connection; reusing the key for a different owner, data provider, or authentication method, or after 24 hours while that connection exists, fails with idempotency_key_conflict. Ignored unless connectionIntent is Add. */\n  idempotencyKey?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization member the credentials are attributed to. With a user session token, omit it to use the session user, or pass that same user; any other user is rejected. With an application credential token, it is required and must name an active member of the token organization. */\n  userId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n};\n\n/** Input for setting a password on an account that does not yet have one (e.g. signed up via OAuth). */\nexport type CreatePasswordInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The password to set. Must satisfy the environment password policy. */\n  password: Scalars[\"String\"][\"input\"];\n};\n\nexport type CreatePasswordResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasswordCreated\n  | PasswordPolicyViolation\n  | UserAlreadyHasPassword;\n\nexport type CreateRoleInput = {\n  /** Optional human-readable description of the role. */\n  description?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Human-readable name for the role. */\n  name: Scalars[\"String\"][\"input\"];\n  /** Slugs of the permissions granted to the role. */\n  permissions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n  /** Unique slug identifying the role. Generated from the name when omitted. */\n  slug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type CreateSsoConnectionInput = {\n  /** A human-readable name for the connection. Defaults to the organization's name. */\n  name?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The identity provider type of the connection to create. */\n  type: ConnectionType;\n};\n\nexport type CreateUserApiKeyResult =\n  | ApiKeyPermissionsNotHeld\n  | ApiKeyPermissionsUnsupportedForToken\n  | InvalidApiKeyExpiration\n  | InvalidApiKeyName\n  | InvalidApiKeyPermissions\n  | UserApiKeyCreated;\n\n/** The current email was verified successfully. */\nexport type CurrentEmailVerified = {\n  __typename?: \"CurrentEmailVerified\";\n  /** The elevated access token to pass to `sendEmailChange` and `confirmEmailChange`. */\n  elevatedAccessToken: Scalars[\"String\"][\"output\"];\n  /** When the elevated access token expires (ISO 8601). */\n  expiresAt: Scalars[\"String\"][\"output\"];\n};\n\n/** Daily verification email quota exceeded. */\nexport type DailyEmailQuotaExceeded = {\n  __typename?: \"DailyEmailQuotaExceeded\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Whether a data installation is the compatibility connection or a standard connection. */\nexport type DataInstallationConnectionRole = \"Compatibility\" | \"Standard\";\n\n/** A third-party data provider configured for the current environment. */\nexport type DataProvider = {\n  __typename?: \"DataProvider\";\n  /** How accounts authenticate with this data provider. */\n  authMethods: Array<Scalars[\"String\"][\"output\"]>;\n  capabilities: DataProviderCapabilities;\n  /** The non-secret configuration values pinned for the token's organization (or by the developer, for a provider whose credentials the developer manages). */\n  config: Array<DataProviderConfigEntry>;\n  /** The configuration fields the provider declares. */\n  configFields: Array<DataProviderConfigField>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether the data provider is enabled for the token's organization: it must be enabled in the environment and not disabled by the organization's override. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** The URL of the provider logo for dark backgrounds, when one is served. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider logo for light backgrounds, when one is served. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The provider type this data provider was created from. */\n  integrationType: Scalars[\"String\"][\"output\"];\n  /** The display name of the data provider. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The OAuth scopes configured for the data provider. `null` when the provider's default scopes are used. */\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  /** The slug of the data provider. */\n  slug: Scalars[\"String\"][\"output\"];\n  /** The configuration state of the data provider: `valid`, `invalid`, or `requested`. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The data provider cannot be connected the requested way — for example client credentials for a provider that only supports OAuth. */\nexport type DataProviderAuthMethodUnsupported = {\n  __typename?: \"DataProviderAuthMethodUnsupported\";\n  /** The unsupported auth method that was requested. */\n  authMethod: Scalars[\"String\"][\"output\"];\n  /** The auth methods the data provider does support. */\n  supportedAuthMethods: Array<Scalars[\"String\"][\"output\"]>;\n};\n\n/** A started authorization: the URL to open and the state to poll while the user completes it. */\nexport type DataProviderAuthorization = {\n  __typename?: \"DataProviderAuthorization\";\n  /** Present when the flow ends on a confirmation step the client must complete instead of finishing silently. Always present for organization-scoped authorization. */\n  handoffToken?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** One-time token the interstitial URL is keyed by. Retained so a client can correlate the popup it opened. */\n  redirectToken: Scalars[\"String\"][\"output\"];\n  /** The OAuth `state` for this attempt. Poll `dataProviderAuthorizationStatus` with it to observe completion. */\n  state: Scalars[\"String\"][\"output\"];\n  /** The WorkOS interstitial URL to open in the popup. It redirects to the provider once, then expires. */\n  url: Scalars[\"String\"][\"output\"];\n};\n\n/** Whether an authorization attempt is still in progress. */\nexport type DataProviderAuthorizationStatus = {\n  __typename?: \"DataProviderAuthorizationStatus\";\n  /** True while the attempt is outstanding. It becomes false once the provider callback has been handled or the attempt expired, so a client that sees false reloads the connection to learn the outcome. */\n  connecting: Scalars[\"Boolean\"][\"output\"];\n  /** The `state` that was polled. */\n  state: Scalars[\"String\"][\"output\"];\n};\n\n/** The data provider cannot start an authorization right now — most often because the organization has not supplied its own OAuth credentials yet. */\nexport type DataProviderAuthorizationUnavailable = {\n  __typename?: \"DataProviderAuthorizationUnavailable\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Advisory explicit-add availability for the token-scoped owner. Writes still check authorization and creation policy. */\nexport type DataProviderCapabilities = {\n  __typename?: \"DataProviderCapabilities\";\n  /** The auth methods currently available to this token for explicit Add: oauth, api_key, or client_credentials. Interactive OAuth requires a member session. Empty exactly when canAddConnection is false. */\n  addConnectionMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Whether an explicit Add is available for this provider and owner. Counts all connections, not a page of results. The server rechecks before creating. */\n  canAddConnection: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** A non-secret configuration value set on a data provider. */\nexport type DataProviderConfigEntry = {\n  __typename?: \"DataProviderConfigEntry\";\n  /** The configuration field declared by the provider. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The value set for the field. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\nexport type DataProviderConfigEntryInput = {\n  /** The configuration field declared by the provider. */\n  name: Scalars[\"String\"][\"input\"];\n  /** The value to set for the field. */\n  value: Scalars[\"String\"][\"input\"];\n};\n\n/** A configuration field a data provider declares, describing a value collected when the provider is configured or connected. */\nexport type DataProviderConfigField = {\n  __typename?: \"DataProviderConfigField\";\n  /** The value used when the field is left unset. */\n  default?: Maybe<Scalars[\"String\"][\"output\"]>;\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** An example value, for display only. */\n  example?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The name of the field. Matches `name` on the corresponding config entry. */\n  key: Scalars[\"String\"][\"output\"];\n  /** The label to show for the field. */\n  label: Scalars[\"String\"][\"output\"];\n  /** The position of the field relative to its siblings. */\n  order?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** A regular expression the value must match. */\n  pattern?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The flags to apply `pattern` with (`i` and/or `u`). */\n  patternFlags?: Maybe<Scalars[\"String\"][\"output\"]>;\n  required: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the value is set once for the data provider (`integration`) or collected from each account that connects (`installation`). */\n  scope: Scalars[\"String\"][\"output\"];\n  /** Whether the value is sensitive, so it is masked on input. Secret `installation`-scope values are never read back on a connection. */\n  secret?: Maybe<Scalars[\"Boolean\"][\"output\"]>;\n};\n\n/** The supplied configuration does not satisfy the provider’s declared fields. */\nexport type DataProviderConfigInvalid = {\n  __typename?: \"DataProviderConfigInvalid\";\n  /** Which field is missing, unknown, or malformed. Names the field so a client can highlight it. */\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** A data provider's configuration for the token's organization, excluding secret values. */\nexport type DataProviderConfiguration = {\n  __typename?: \"DataProviderConfiguration\";\n  /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */\n  availableScopes: Array<Scalars[\"String\"][\"output\"]>;\n  config: Array<DataProviderConfigEntry>;\n  /** The data provider being configured. */\n  dataProviderId: Scalars[\"ID\"][\"output\"];\n  dataProviderSlug: Scalars[\"String\"][\"output\"];\n  /** Whether the organization's users can see and connect the data provider. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization has supplied its own OAuth client credentials. Always false for a provider whose credentials the developer manages. The values themselves are never returned. */\n  hasCredentials: Scalars[\"Boolean\"][\"output\"];\n  /** The organization the configuration applies to. */\n  organizationId: Scalars[\"ID\"][\"output\"];\n  /** The scopes the organization requests, or null to use the provider defaults. */\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The connection was created or its credentials were replaced. */\nexport type DataProviderConnected = {\n  __typename?: \"DataProviderConnected\";\n  connection: DataProviderConnection;\n};\n\n/** A connection between a data provider and a user or organization. */\nexport type DataProviderConnection = {\n  __typename?: \"DataProviderConnection\";\n  /** A mutable, non-unique display name for this connection. */\n  accountDisplayName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** A best-effort provider account identifier used for correlation, not connection selection. */\n  accountIdentifier?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The last four characters of the API key of an `api_key` connection, to recognize it by. The key itself is never returned. */\n  apiKeyLast4?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** How the connection authenticates: `oauth`, `api_key`, or `client_credentials`. */\n  authMethod: Scalars[\"String\"][\"output\"];\n  /** Whether the connection can be used right now: `available`, or `needs_admin_attention` when it must be re-authorized first. */\n  availability: Scalars[\"String\"][\"output\"];\n  /** Actions available on this exact organization-owned connection. Null for user-owned connections; member row-action behavior is unchanged. */\n  capabilities?: Maybe<DataProviderConnectionCapabilities>;\n  /** The OAuth client ID of a `client_credentials` connection. Null for other auth methods. */\n  clientId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The last four characters of the OAuth client secret of a `client_credentials` connection, to recognize it by. The secret itself is never returned. */\n  clientSecretLast4?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The stored, provider-declared connection-scope configuration values for any authentication method, excluding secret fields. Empty when no stored values can be disclosed. */\n  config: Array<DataProviderConfigEntry>;\n  /** Whether this is the compatibility connection or a standard connection. */\n  connectionRole: DataInstallationConnectionRole;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The data provider this connection was created for. */\n  dataProviderId: Scalars[\"ID\"][\"output\"];\n  /** The slug of the connected data provider. */\n  dataProviderSlug: Scalars[\"String\"][\"output\"];\n  /** The user whose authorization established the connection. Null when the connection is developer-managed or its establisher is unknown, and after the establishing member left the organization (see `stateReason`). */\n  establishedByUserId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  organizationId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  /** The OAuth scopes granted for this connection. */\n  scopes: Array<Scalars[\"String\"][\"output\"]>;\n  /** The status of the connection: `connected` or `needs_reauthorization`. */\n  state: Scalars[\"String\"][\"output\"];\n  /** Why WorkOS put the connection in its current `state`, e.g. `establishing_member_membership_ended` when the member who established an organization-owned connection left the organization. Null when there is no WorkOS-recorded reason. Additional values may be added. */\n  stateReason?: Maybe<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  userId?: Maybe<Scalars[\"ID\"][\"output\"]>;\n  /** Non-blocking warnings about the saved label from a credential write that supplied accountDisplayName. Empty when no duplicate exists; null on reads or when the label was omitted. */\n  warnings?: Maybe<Array<DataProviderConnectionLabelWarning>>;\n};\n\n/** The connection owner already has a connection to this data provider that authenticates differently, so it must be disconnected first. */\nexport type DataProviderConnectionAuthMethodConflict = {\n  __typename?: \"DataProviderConnectionAuthMethodConflict\";\n  /** How the existing connection authenticates. */\n  existingAuthMethod: Scalars[\"String\"][\"output\"];\n};\n\n/** Advisory repair actions for this exact organization-owned connection, independent of sibling connections and the additional-creation cap or gate. */\nexport type DataProviderConnectionCapabilities = {\n  __typename?: \"DataProviderConnectionCapabilities\";\n  /** Whether this OAuth connection needs reauthorization, its provider is enabled and configured for OAuth, and the token represents a member session. */\n  canReauthorize: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the enabled provider supports replacing this connection's API key or client credentials. */\n  canUpdateCredentials: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type DataProviderConnectionLabelWarning = {\n  __typename?: \"DataProviderConnectionLabelWarning\";\n  /** The advisory warning code: duplicate_account_display_name. */\n  code: Scalars[\"String\"][\"output\"];\n  /** An explanation of the warning. A duplicate label never blocks the update. */\n  message: Scalars[\"String\"][\"output\"];\n};\n\nexport type DataProviderConnectionList = {\n  __typename?: \"DataProviderConnectionList\";\n  data: Array<DataProviderConnection>;\n  listMetadata: ListMetadata;\n};\n\n/** The OAuth application credentials configured for a data provider in the token's organization, redacted to what an admin needs to recognize them. */\nexport type DataProviderCredentials = {\n  __typename?: \"DataProviderCredentials\";\n  /** The OAuth client ID the organization supplied. Null unless the organization brings its own credentials. */\n  clientId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  /** Whether the organization has supplied its own OAuth client credentials. Always false for a provider whose credentials the developer manages. */\n  hasCredentials: Scalars[\"Boolean\"][\"output\"];\n  /** The last four characters of the OAuth client secret the organization supplied, to recognize it by. The secret itself is never returned. */\n  redactedClientSecret?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The redirect URI to register with the provider when creating an OAuth application. */\n  redirectUri: Scalars[\"String\"][\"output\"];\n};\n\nexport type DataProviderList = {\n  __typename?: \"DataProviderList\";\n  data: Array<DataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** Input for deleting a passkey. */\nexport type DeletePasskeyInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The ID of the passkey to delete. */\n  passkeyId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type DeletePasskeyResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasskeyDeleted\n  | PasskeyNotFound;\n\nexport type DeleteRoleInput = {\n  /** The ID of the role to delete. */\n  id: Scalars[\"ID\"][\"input\"];\n};\n\n/** A Directory Sync connection within the current environment. */\nexport type Directory = {\n  __typename?: \"Directory\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  externalKey: Scalars[\"String\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** When the most recent sync run for the directory was last updated, or null if no sync run has started. */\n  lastSyncRunAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** Counts of the users and groups provisioned through the directory. */\n  metadata: DirectoryMetadata;\n  name: Scalars[\"String\"][\"output\"];\n  organizationId: Scalars[\"ID\"][\"output\"];\n  /** The linking state of the directory. */\n  state: Scalars[\"String\"][\"output\"];\n  /** The provider type of the directory. */\n  type: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** A group provisioned through a Directory Sync connection. */\nexport type DirectoryGroup = {\n  __typename?: \"DirectoryGroup\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  directoryId: Scalars[\"ID\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The identifier of the group in the identity provider. */\n  idpId: Scalars[\"String\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  organizationId: Scalars[\"ID\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type DirectoryGroupList = {\n  __typename?: \"DirectoryGroupList\";\n  data: Array<DirectoryGroup>;\n  listMetadata: ListMetadata;\n};\n\nexport type DirectoryList = {\n  __typename?: \"DirectoryList\";\n  data: Array<Directory>;\n  listMetadata: ListMetadata;\n};\n\n/** Counts of the users and groups provisioned through a directory. */\nexport type DirectoryMetadata = {\n  __typename?: \"DirectoryMetadata\";\n  groups: Scalars[\"Int\"][\"output\"];\n  users: DirectoryUsersMetadata;\n};\n\n/** A user provisioned through a Directory Sync connection. */\nexport type DirectoryUser = {\n  __typename?: \"DirectoryUser\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  directoryId: Scalars[\"ID\"][\"output\"];\n  email?: Maybe<Scalars[\"String\"][\"output\"]>;\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The identifier of the user in the identity provider. */\n  idpId: Scalars[\"String\"][\"output\"];\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  organizationId: Scalars[\"ID\"][\"output\"];\n  /** The provisioning state of the directory user. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  username?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type DirectoryUserList = {\n  __typename?: \"DirectoryUserList\";\n  data: Array<DirectoryUser>;\n  listMetadata: ListMetadata;\n};\n\n/** Counts of the users provisioned through a directory, by state. */\nexport type DirectoryUsersMetadata = {\n  __typename?: \"DirectoryUsersMetadata\";\n  active: Scalars[\"Int\"][\"output\"];\n  inactive: Scalars[\"Int\"][\"output\"];\n};\n\n/** The DNS name server provider detected for a domain. */\nexport type DomainVerificationNameServer =\n  | \"AwsRoute53\"\n  | \"CloudFlare\"\n  | \"GoDaddy\"\n  | \"GoogleDomains\"\n  | \"Other\";\n\n/** The elevated access token has expired. The user must re-verify their identity. */\nexport type ElevatedAccessTokenExpired = {\n  __typename?: \"ElevatedAccessTokenExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The elevated access token is invalid. */\nexport type ElevatedAccessTokenInvalid = {\n  __typename?: \"ElevatedAccessTokenInvalid\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has expired. */\nexport type EmailChangeCodeExpired = {\n  __typename?: \"EmailChangeCodeExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code is incorrect. */\nexport type EmailChangeCodeIncorrect = {\n  __typename?: \"EmailChangeCodeIncorrect\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has already been used. */\nexport type EmailChangeCodePreviouslyUsed = {\n  __typename?: \"EmailChangeCodePreviouslyUsed\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The email was changed successfully. */\nexport type EmailChangeConfirmed = {\n  __typename?: \"EmailChangeConfirmed\";\n  /** A fresh elevated access token for subsequent elevated operations. */\n  elevatedAccessToken: Scalars[\"String\"][\"output\"];\n  /** When the elevated access token expires (ISO 8601). */\n  expiresAt: Scalars[\"String\"][\"output\"];\n  user: User;\n};\n\n/** Email change is not available for this account. */\nexport type EmailChangeNotAvailable = {\n  __typename?: \"EmailChangeNotAvailable\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** A verification code was sent to the new email address. */\nexport type EmailChangeSent = {\n  __typename?: \"EmailChangeSent\";\n  /** When the verification code expires. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** Too many verification attempts. */\nexport type EmailChangeTooManyAttempts = {\n  __typename?: \"EmailChangeTooManyAttempts\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The email is managed by an identity provider and cannot be changed. */\nexport type EmailManagedByProvider = {\n  __typename?: \"EmailManagedByProvider\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The email address is not available. */\nexport type EmailNotAvailable = {\n  __typename?: \"EmailNotAvailable\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Input for enrolling a new TOTP factor. */\nexport type EnrollTotpInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type EnrollTotpResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | TotpAlreadyEnrolled\n  | TotpFactor;\n\n/** Input for expiring an API key. Expiring revokes the key while retaining it and its audit trail; use the delete mutations to remove it. */\nexport type ExpireApiKeyInput = {\n  /** The ID of the key to expire. */\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n  /** When the key should expire. A future date schedules expiration; `null` clears any scheduled expiration; omitting the field, or passing a date in the past, revokes the key immediately. */\n  expiresAt?: InputMaybe<Scalars[\"DateTime\"][\"input\"]>;\n};\n\nexport type ExpireOrganizationApiKeyResult =\n  | ApiKeyAlreadyExpired\n  | OrganizationApiKeyExpired;\n\nexport type ExpireUserApiKeyResult = ApiKeyAlreadyExpired | UserApiKeyExpired;\n\n/** A feature flag defined in the project that owns the environment the token was issued for. Mirrors the Feature Flag exposed by the REST feature flags API. */\nexport type Flag = {\n  __typename?: \"Flag\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The value returned for users and organizations that do not match any targeting rule in the environment the token was issued for. */\n  defaultValue: Scalars[\"Boolean\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether the feature flag is active in the environment the token was issued for. */\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** A descriptive name for the feature flag. */\n  name: Scalars[\"String\"][\"output\"];\n  /** A unique key used to reference the feature flag. */\n  slug: Scalars[\"String\"][\"output\"];\n  /** Labels assigned to the feature flag. */\n  tags: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type FlagList = {\n  __typename?: \"FlagList\";\n  data: Array<Flag>;\n  listMetadata: ListMetadata;\n};\n\n/** The identity verification has expired. Please verify your current email again. */\nexport type IdentityVerificationExpired = {\n  __typename?: \"IdentityVerificationExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The identity verification is no longer valid. */\nexport type IdentityVerificationInvalid = {\n  __typename?: \"IdentityVerificationInvalid\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The provided current password does not match the existing password. */\nexport type IncorrectPassword = {\n  __typename?: \"IncorrectPassword\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The requested expiration is not valid. */\nexport type InvalidApiKeyExpiration = {\n  __typename?: \"InvalidApiKeyExpiration\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The provided name is not a valid API key name. */\nexport type InvalidApiKeyName = {\n  __typename?: \"InvalidApiKeyName\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** One or more requested permission slugs are not enabled for API keys of this kind in the environment. */\nexport type InvalidApiKeyPermissions = {\n  __typename?: \"InvalidApiKeyPermissions\";\n  /** The permission slugs that were rejected. */\n  invalidPermissions: Array<Scalars[\"String\"][\"output\"]>;\n  message: Scalars[\"String\"][\"output\"];\n};\n\nexport type InvalidAuditLogExportDateRange = {\n  __typename?: \"InvalidAuditLogExportDateRange\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The provided email address is invalid. */\nexport type InvalidEmail = {\n  __typename?: \"InvalidEmail\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The requested invitation expiry is outside the allowed range (1–30 days). */\nexport type InvalidInvitationExpiry = {\n  __typename?: \"InvalidInvitationExpiry\";\n  /** Placeholder field to allow an empty @ObjectType. */\n  _placeholder?: Maybe<Scalars[\"Boolean\"][\"output\"]>;\n};\n\n/** The provided email address is not valid. */\nexport type InvalidInviteeEmail = {\n  __typename?: \"InvalidInviteeEmail\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\n/** The requested role is not valid for this organization. */\nexport type InvalidInviteeRole = {\n  __typename?: \"InvalidInviteeRole\";\n  roleSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The provided locale is not a valid BCP 47 tag. */\nexport type InvalidLocale = {\n  __typename?: \"InvalidLocale\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** No pending invitation exists for this user in this organization. */\nexport type InvitationNotFound = {\n  __typename?: \"InvitationNotFound\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The invitation is not pending (already accepted, expired, or revoked) and cannot be revoked. */\nexport type InvitationNotPending = {\n  __typename?: \"InvitationNotPending\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The invitation was resent successfully. */\nexport type InvitationResent = {\n  __typename?: \"InvitationResent\";\n  invitation: OrganizationInvitation;\n};\n\n/** The invitation was revoked. */\nexport type InvitationRevoked = {\n  __typename?: \"InvitationRevoked\";\n  invitation: OrganizationInvitation;\n};\n\nexport type InviteUserInput = {\n  /** The email address to invite. */\n  email: Scalars[\"String\"][\"input\"];\n  /** Number of days until the invitation expires. Defaults to the environment setting when omitted. */\n  expiresInDays?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  /** Slug of the role to grant on acceptance. Defaults to the organization default role when omitted. */\n  roleSlug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type InviteUserResult =\n  | InvalidInvitationExpiry\n  | InvalidInviteeEmail\n  | InvalidInviteeRole\n  | InviteeAlreadyInvited\n  | InviteeAlreadyMember\n  | InviteeEmailNotDeliverable\n  | OrganizationBlockedFromSendingInvites\n  | UserInvited;\n\n/** The user has already accepted their invitation and is an active member. */\nexport type InviteeAlreadyAccepted = {\n  __typename?: \"InviteeAlreadyAccepted\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** This email already has a pending invitation. */\nexport type InviteeAlreadyInvited = {\n  __typename?: \"InviteeAlreadyInvited\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\n/** A user with this email is already a member of the organization. */\nexport type InviteeAlreadyMember = {\n  __typename?: \"InviteeAlreadyMember\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\n/** The invitee's email domain has no mail servers, so the invitation email cannot be delivered. */\nexport type InviteeEmailNotDeliverable = {\n  __typename?: \"InviteeEmailNotDeliverable\";\n  email: Scalars[\"String\"][\"output\"];\n};\n\nexport type ListMetadata = {\n  __typename?: \"ListMetadata\";\n  after?: Maybe<Scalars[\"String\"][\"output\"]>;\n  before?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The member is provisioned by a directory and cannot be removed. */\nexport type MemberIsManagedByDirectory = {\n  __typename?: \"MemberIsManagedByDirectory\";\n  /** The user ID of the directory-managed member. */\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** No active member was found for the given user in the organization. */\nexport type MemberNotFound = {\n  __typename?: \"MemberNotFound\";\n  /** The user ID that did not resolve to a member. */\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The member was removed from the organization. */\nexport type MemberRemoved = {\n  __typename?: \"MemberRemoved\";\n  /** The user ID of the removed member. */\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The member's role was updated. */\nexport type MemberRoleUpdated = {\n  __typename?: \"MemberRoleUpdated\";\n  member: OrganizationMember;\n};\n\n/** All TOTP factors were removed successfully. */\nexport type MfaFactorRemoved = {\n  __typename?: \"MfaFactorRemoved\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type Mutation = {\n  __typename?: \"Mutation\";\n  /** Grant a permission to a role belonging to the organization the token was issued for. */\n  assignPermissionToRole: Role;\n  /** Confirms an email change using the verification code sent to the new email address. Requires an elevated access token from `verifyCurrentEmail`. */\n  confirmEmailChange: ConfirmEmailChangeResult;\n  /** Connect the authenticated user to a data provider with OAuth client credentials the user supplies. Replaces the credentials when the user already has a client-credentials connection to the data provider, so this is both the connect and the reconnect path. The credentials are stored encrypted and never returned. */\n  connectDataProviderWithClientCredentials: ConnectDataProviderResult;\n  /** Connect the token's organization to an organization-owned data provider with OAuth client credentials, producing one connection shared by every member. Replaces the credentials when the organization already has a client-credentials connection to the data provider, so this is both the connect and the reconnect path. The credentials are stored encrypted and never returned. */\n  connectOrganizationDataProviderWithClientCredentials: ConnectDataProviderResult;\n  /** Mint a short-lived link that starts an Admin Portal session for the token's organization, scoped to a single setup flow. */\n  createAdminPortalLink: AdminPortalLink;\n  createAuditLogExport: CreateAuditLogExportResult;\n  /** Start an OAuth authorization connecting the authenticated user to a data provider. Returns the URL to open in a popup and the `state` to poll with `dataProviderAuthorizationStatus`. Re-authorizing a provider the user is already connected to replaces that connection's credentials once the flow completes, so this is also the reconnect path. */\n  createDataProviderAuthorization: CreateDataProviderAuthorizationResult;\n  /** Connect the authenticated user to a data provider with an API key the user supplies. Replaces the API key when the user already has an API-key connection to the data provider. */\n  createDataProviderConnection: DataProviderConnection;\n  /** Create an API key owned by the token's organization. The plaintext secret is returned exactly once, in this response. */\n  createOrganizationApiKey: CreateOrganizationApiKeyResult;\n  /** Start an OAuth authorization connecting the token's organization to an organization-owned data provider, producing one connection shared by every member. A handoff is always required: the member completing the flow must confirm it explicitly because the resulting connection is not their own. */\n  createOrganizationDataProviderAuthorization: CreateDataProviderAuthorizationResult;\n  /** Connect the token's organization to an organization-owned data provider with an API key, producing one connection shared by every member. Replaces the API key when the organization already has an API-key connection to the data provider. */\n  createOrganizationDataProviderConnection: DataProviderConnection;\n  /** Add a domain to the token's organization and begin DNS verification. */\n  createOrganizationDomain: OrganizationDomain;\n  /** Set a password for the authenticated user who does not yet have one (e.g. signed up via OAuth). Validates against the environment password policy. */\n  createPassword: CreatePasswordResult;\n  /** Create a role for the organization the token was issued for. */\n  createRole: Role;\n  /** Create an SSO connection for the token’s organization. */\n  createSsoConnection: Connection;\n  /** Create an API key owned by the token user within the organization the token was issued for. The plaintext secret is returned exactly once, in this response. */\n  createUserApiKey: CreateUserApiKeyResult;\n  /** Disconnect one of the authenticated user's data provider connections, revoking the stored credentials. */\n  deleteDataProviderConnection: Scalars[\"ID\"][\"output\"];\n  /** Delete an API key owned by the token's organization and return the deleted key. Unlike expiring, this removes the key entirely. */\n  deleteOrganizationApiKey: OrganizationApiKey;\n  /** Disconnect one of the token organization's shared data provider connections, revoking the stored credentials for every member. */\n  deleteOrganizationDataProviderConnection: Scalars[\"ID\"][\"output\"];\n  /** Delete a domain belonging to the token's organization and return it. */\n  deleteOrganizationDomain: OrganizationDomain;\n  /** Remove the specified passkey from the authenticated user's account. */\n  deletePasskey: DeletePasskeyResult;\n  /** Delete a role belonging to the organization the token was issued for. */\n  deleteRole: RoleDeleted;\n  /** Delete an SSO connection belonging to the token’s organization. */\n  deleteSsoConnection: Scalars[\"ID\"][\"output\"];\n  /** Delete a user-scoped API key and return the deleted key. Unlike expiring, this removes the key entirely. */\n  deleteUserApiKey: UserApiKey;\n  /** Create a TOTP factor and return the secret and QR URI for the user to scan. This is step 1 of TOTP enrollment. */\n  enrollTotp: EnrollTotpResult;\n  /** Revoke an API key owned by the token's organization by setting its expiration. The key and its audit trail are retained; use `deleteOrganizationApiKey` to remove it. */\n  expireOrganizationApiKey: ExpireOrganizationApiKeyResult;\n  /** Revoke a user-scoped API key by setting its expiration. The key and its audit trail are retained; use `deleteUserApiKey` to remove it. */\n  expireUserApiKey: ExpireUserApiKeyResult;\n  /** Invite a user to the organization the token was issued for, assigning a role and sending the invitation email. */\n  inviteUser: InviteUserResult;\n  /** Begin passkey (WebAuthn) registration for the authenticated user by returning the credential creation options. This is step 1 of the registration ceremony; complete it with `verifyPasskey`. */\n  registerPasskey: RegisterPasskeyResult;\n  /** Remove a member from the organization the token was issued for. */\n  removeMember: RemoveMemberResult;\n  /** Delete all TOTP factors for the authenticated user, effectively resetting MFA. */\n  removeMfaFactor: RemoveMfaFactorResult;\n  /** Resend a pending, expired, or revoked invitation for the organization the token was issued for. If the original invitation has expired or been revoked, a new invitation is created with the same role. */\n  resendInvitation: ResendInvitationResult;\n  /** Restart verification for a domain belonging to the token's organization. */\n  reverifyOrganizationDomain: OrganizationDomain;\n  /** Revokes all active sessions for the authenticated user except the current one and, if provided, `input.currentSessionId`. */\n  revokeAllSessions: RevokeAllSessionsResult;\n  /** Revoke a pending invitation for the organization the token was issued for. */\n  revokeInvitation: RevokeInvitationResult;\n  /** Revokes a specific session by ID. */\n  revokeSession: RevokeSessionResult;\n  /** Sends a verification code to the new email address. Requires an elevated access token from `verifyCurrentEmail`. The user must confirm with the code via `confirmEmailChange`. */\n  sendEmailChange: SendEmailChangeResult;\n  /** Sends a verification code to the user's current email address to prove ownership before changing email. */\n  sendVerificationCode: SendVerificationCodeResult;\n  /** Write a data provider's configuration for the token's organization: whether the organization's members can connect it, the scopes it requests, the organization's own OAuth client credentials, and any non-secret configuration values the provider declares. Fields left out are unchanged. Supersedes `setDataProviderEnabled` for anything beyond toggling `enabled`. */\n  setDataProviderConfiguration: SetDataProviderConfigurationResult;\n  /** Enable or disable a data provider for the token's organization. Disabling it hides the data provider from the organization's users and stops new connections; existing connections stay readable so they can be disconnected. */\n  setDataProviderEnabled: DataProvider;\n  /** Write an organization-owned data provider's configuration for the token's organization: whether the organization's shared connection is enabled, the scopes it requests, the organization's own OAuth client credentials, and any non-secret configuration values the provider declares. Fields left out are unchanged. */\n  setOrganizationDataProviderConfiguration: SetDataProviderConfigurationResult;\n  /** Update the label of one of the authenticated user's exact connections in the token's organization scope, without changing credentials or identity. Duplicate labels produce advisory warnings, not errors. */\n  updateDataProviderConnectionLabel: UpdateDataProviderConnectionLabelResult;\n  /** Update an organization member's roles within the organization the token was issued for. When multiple roles are enabled, all provided role slugs are assigned; otherwise only the first is used. */\n  updateMemberRole: UpdateMemberRoleResult;\n  /** Update the label of one of the token organization's exact shared connections without changing credentials or identity. Requires organization connection write permission; session users must be active members. Duplicate labels produce advisory warnings, not errors. */\n  updateOrganizationDataProviderConnectionLabel: UpdateDataProviderConnectionLabelResult;\n  /** Change the password for the authenticated user. Requires the current password for verification and validates the new password against the environment password policy. */\n  updatePassword: UpdatePasswordResult;\n  /** Updates the authenticated user's profile (first name, last name, locale). */\n  updateProfile: UpdateProfileResult;\n  /** Update a role belonging to the organization the token was issued for. */\n  updateRole: Role;\n  /** Update an SSO connection belonging to the token’s organization. */\n  updateSsoConnection: Connection;\n  /** Verifies the code sent to the current email address. Returns an elevated access token required for `sendEmailChange` and `confirmEmailChange`. */\n  verifyCurrentEmail: VerifyCurrentEmailResult;\n  /** Complete passkey (WebAuthn) registration by verifying the credential created by the authenticator. This is step 2 of the registration ceremony started by `registerPasskey`. */\n  verifyPasskey: VerifyPasskeyResult;\n  /** Confirm TOTP enrollment by verifying a code from the authenticator app. Marks the factor as verified. */\n  verifyTotp: VerifyTotpResult;\n};\n\nexport type MutationAssignPermissionToRoleArgs = {\n  input: AssignPermissionToRoleInput;\n};\n\nexport type MutationConfirmEmailChangeArgs = {\n  input: ConfirmEmailChangeInput;\n};\n\nexport type MutationConnectDataProviderWithClientCredentialsArgs = {\n  input: ConnectDataProviderWithClientCredentialsInput;\n};\n\nexport type MutationConnectOrganizationDataProviderWithClientCredentialsArgs = {\n  input: ConnectOrganizationDataProviderWithClientCredentialsInput;\n};\n\nexport type MutationCreateAdminPortalLinkArgs = {\n  intent: AdminPortalLinkIntent;\n};\n\nexport type MutationCreateAuditLogExportArgs = {\n  input: CreateAuditLogExportInput;\n};\n\nexport type MutationCreateDataProviderAuthorizationArgs = {\n  input: CreateDataProviderAuthorizationInput;\n};\n\nexport type MutationCreateDataProviderConnectionArgs = {\n  input: CreateDataProviderConnectionInput;\n};\n\nexport type MutationCreateOrganizationApiKeyArgs = {\n  input: CreateApiKeyInput;\n};\n\nexport type MutationCreateOrganizationDataProviderAuthorizationArgs = {\n  input: CreateOrganizationDataProviderAuthorizationInput;\n};\n\nexport type MutationCreateOrganizationDataProviderConnectionArgs = {\n  input: CreateOrganizationDataProviderConnectionInput;\n};\n\nexport type MutationCreateOrganizationDomainArgs = {\n  domain: Scalars[\"String\"][\"input\"];\n};\n\nexport type MutationCreatePasswordArgs = {\n  input: CreatePasswordInput;\n};\n\nexport type MutationCreateRoleArgs = {\n  input: CreateRoleInput;\n};\n\nexport type MutationCreateSsoConnectionArgs = {\n  input: CreateSsoConnectionInput;\n};\n\nexport type MutationCreateUserApiKeyArgs = {\n  input: CreateApiKeyInput;\n};\n\nexport type MutationDeleteDataProviderConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteOrganizationApiKeyArgs = {\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteOrganizationDataProviderConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteOrganizationDomainArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeletePasskeyArgs = {\n  input: DeletePasskeyInput;\n};\n\nexport type MutationDeleteRoleArgs = {\n  input: DeleteRoleInput;\n};\n\nexport type MutationDeleteSsoConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationDeleteUserApiKeyArgs = {\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationEnrollTotpArgs = {\n  input: EnrollTotpInput;\n};\n\nexport type MutationExpireOrganizationApiKeyArgs = {\n  input: ExpireApiKeyInput;\n};\n\nexport type MutationExpireUserApiKeyArgs = {\n  input: ExpireApiKeyInput;\n};\n\nexport type MutationInviteUserArgs = {\n  input: InviteUserInput;\n};\n\nexport type MutationRegisterPasskeyArgs = {\n  input: RegisterPasskeyInput;\n};\n\nexport type MutationRemoveMemberArgs = {\n  input: RemoveMemberInput;\n};\n\nexport type MutationRemoveMfaFactorArgs = {\n  input: RemoveMfaFactorInput;\n};\n\nexport type MutationResendInvitationArgs = {\n  input: ResendInvitationInput;\n};\n\nexport type MutationReverifyOrganizationDomainArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type MutationRevokeAllSessionsArgs = {\n  input?: InputMaybe<RevokeAllSessionsInput>;\n};\n\nexport type MutationRevokeInvitationArgs = {\n  input: RevokeInvitationInput;\n};\n\nexport type MutationRevokeSessionArgs = {\n  input: RevokeSessionInput;\n};\n\nexport type MutationSendEmailChangeArgs = {\n  input: SendEmailChangeInput;\n};\n\nexport type MutationSetDataProviderConfigurationArgs = {\n  input: SetDataProviderConfigurationInput;\n};\n\nexport type MutationSetDataProviderEnabledArgs = {\n  input: SetDataProviderEnabledInput;\n};\n\nexport type MutationSetOrganizationDataProviderConfigurationArgs = {\n  input: SetOrganizationDataProviderConfigurationInput;\n};\n\nexport type MutationUpdateDataProviderConnectionLabelArgs = {\n  input: UpdateDataProviderConnectionLabelInput;\n};\n\nexport type MutationUpdateMemberRoleArgs = {\n  input: UpdateMemberRoleInput;\n};\n\nexport type MutationUpdateOrganizationDataProviderConnectionLabelArgs = {\n  input: UpdateDataProviderConnectionLabelInput;\n};\n\nexport type MutationUpdatePasswordArgs = {\n  input: UpdatePasswordInput;\n};\n\nexport type MutationUpdateProfileArgs = {\n  input: UpdateProfileInput;\n};\n\nexport type MutationUpdateRoleArgs = {\n  input: UpdateRoleInput;\n};\n\nexport type MutationUpdateSsoConnectionArgs = {\n  input: UpdateSsoConnectionInput;\n};\n\nexport type MutationVerifyCurrentEmailArgs = {\n  input: VerifyCurrentEmailInput;\n};\n\nexport type MutationVerifyPasskeyArgs = {\n  input: VerifyPasskeyInput;\n};\n\nexport type MutationVerifyTotpArgs = {\n  input: VerifyTotpInput;\n};\n\nexport type NoAuditEventsFound = {\n  __typename?: \"NoAuditEventsFound\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The user has no TOTP factors to remove. */\nexport type NoMfaFactorsEnrolled = {\n  __typename?: \"NoMfaFactorsEnrolled\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** There is no pending email change to confirm. */\nexport type NoPendingEmailChange = {\n  __typename?: \"NoPendingEmailChange\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** OAuth provider for a connected account. */\nexport type OAuthProvider =\n  | \"AppleOAuth\"\n  | \"BitbucketOAuth\"\n  | \"DiscordOAuth\"\n  | \"GitLabOAuth\"\n  | \"GithubOAuth\"\n  | \"GoogleOAuth\"\n  | \"GrokOAuth\"\n  | \"IntuitOAuth\"\n  | \"LinkedInOAuth\"\n  | \"MicrosoftOAuth\"\n  | \"SalesforceOAuth\"\n  | \"SlackOAuth\"\n  | \"VercelMarketplaceOAuth\"\n  | \"VercelOAuth\"\n  | \"XOAuth\"\n  | \"XeroOAuth\";\n\n/** An organization in the current environment. */\nexport type Organization = {\n  __typename?: \"Organization\";\n  /** Whether the organization allows profiles outside the organization domains. */\n  allowProfilesOutsideOrganization: Scalars[\"Boolean\"][\"output\"];\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** An API key owned by the organization the token was issued for. A tenant-level credential: it is not tied to any user. */\nexport type OrganizationApiKey = {\n  __typename?: \"OrganizationApiKey\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** When the key expires. A key with an expiration in the past is revoked and can no longer authenticate. */\n  expiresAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** When the key was last used to authenticate, if ever. */\n  lastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The human-readable name of the key. */\n  name: Scalars[\"String\"][\"output\"];\n  /** A redacted form of the secret, safe to display. The secret itself is only ever returned when the key is created. */\n  obfuscatedValue: Scalars[\"String\"][\"output\"];\n  /** The permission slugs the key carries. */\n  permissions: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The organization API key was created. */\nexport type OrganizationApiKeyCreated = {\n  __typename?: \"OrganizationApiKeyCreated\";\n  apiKey: OrganizationApiKey;\n  /** The plaintext secret, returned exactly once at creation. It is never retrievable again — no query or other mutation returns it. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\n/** The expiration of the organization API key was updated. The key is retained. */\nexport type OrganizationApiKeyExpired = {\n  __typename?: \"OrganizationApiKeyExpired\";\n  apiKey: OrganizationApiKey;\n};\n\nexport type OrganizationApiKeyList = {\n  __typename?: \"OrganizationApiKeyList\";\n  data: Array<OrganizationApiKey>;\n  listMetadata: ListMetadata;\n};\n\n/** This organization is not allowed to send invites. */\nexport type OrganizationBlockedFromSendingInvites = {\n  __typename?: \"OrganizationBlockedFromSendingInvites\";\n  /** Placeholder field to allow an empty @ObjectType. */\n  _placeholder?: Maybe<Scalars[\"Boolean\"][\"output\"]>;\n};\n\n/** A data provider the token's organization connects on behalf of all its members. */\nexport type OrganizationDataProvider = {\n  __typename?: \"OrganizationDataProvider\";\n  authMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Every scope the organization may request. Only populated for providers where the organization brings its own OAuth credentials; empty otherwise. */\n  availableScopes: Array<Scalars[\"String\"][\"output\"]>;\n  /** The actions the organization may take on this data provider right now. */\n  capabilities: OrganizationDataProviderCapabilities;\n  /** The non-secret configuration values pinned for the token's organization (or by the developer, for a provider whose credentials the developer manages). */\n  config: Array<DataProviderConfigEntry>;\n  /** The configuration fields the provider declares. */\n  configFields: Array<DataProviderConfigField>;\n  /** Whether the provider can be connected: always true when the developer manages the OAuth application, otherwise true once the organization has supplied a full credential pair. */\n  configured: Scalars[\"Boolean\"][\"output\"];\n  /** Every shared connection the organization holds to this data provider, in creation order. */\n  connectedAccounts: Array<DataProviderConnection>;\n  /** The organization's sole shared connection, when it has exactly one. Use `connectedAccounts` when several may exist. */\n  connection?: Maybe<DataProviderConnection>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The redacted OAuth application credentials configured for the token's organization, seeding the credentials dialog. */\n  credentials: DataProviderCredentials;\n  /** Who supplies the OAuth application: `shared` (WorkOS), `custom` (the developer), or `organization` (the organization itself). */\n  credentialsType: Scalars[\"String\"][\"output\"];\n  /** The scopes the developer configured, before any organization override. */\n  defaultScopes: Array<Scalars[\"String\"][\"output\"]>;\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Who disabled the provider when `enabled` is false: `developer` (the environment) or `organization` (the organization override). Null while enabled. */\n  disabledSource?: Maybe<Scalars[\"String\"][\"output\"]>;\n  enabled: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization has supplied its own OAuth client credentials for this data provider. Always false for a provider whose credentials the developer manages. */\n  hasCredentials: Scalars[\"Boolean\"][\"output\"];\n  /** The URL of the provider logo for dark backgrounds, when one is served. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the provider's icon in the widget icon set. Falls back to the provider type. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider logo for light backgrounds, when one is served. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  integrationType: Scalars[\"String\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  scopes?: Maybe<Array<Scalars[\"String\"][\"output\"]>>;\n  slug: Scalars[\"String\"][\"output\"];\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The actions the token's organization may take on a data provider right now. */\nexport type OrganizationDataProviderCapabilities = {\n  __typename?: \"OrganizationDataProviderCapabilities\";\n  /** The auth methods currently available to this token for explicit Add: oauth, api_key, or client_credentials. Interactive OAuth requires a member session. Empty exactly when canAddConnection is false. */\n  addConnectionMethods: Array<Scalars[\"String\"][\"output\"]>;\n  /** Whether an explicit Add is available for this provider and owner. Counts all connections, not a page of results. The server rechecks before creating. */\n  canAddConnection: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization may change the configuration of the data provider. */\n  canConfigure: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization may fill the compatibility slot. This can remain true at the additional-connection cap; use canAddConnection for explicit Add. */\n  canConnect: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the organization may disconnect a shared connection. */\n  canDisconnect: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the compatibility connection needs and supports reauthorization. Use each connectedAccounts row's capabilities for exact-target actions. */\n  canReauthorize: Scalars[\"Boolean\"][\"output\"];\n  /** Whether the compatibility connection's API key or client credentials may be replaced. Use each connectedAccounts row's capabilities for exact-target actions. */\n  canUpdateCredentials: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type OrganizationDataProviderList = {\n  __typename?: \"OrganizationDataProviderList\";\n  data: Array<OrganizationDataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** A domain belonging to the organization the token was issued for. */\nexport type OrganizationDomain = {\n  __typename?: \"OrganizationDomain\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The fully qualified domain name. */\n  domain: Scalars[\"String\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The DNS name server provider detected for the domain. */\n  nameServer: DomainVerificationNameServer;\n  organizationId: Scalars[\"ID\"][\"output\"];\n  state: OrganizationDomainState;\n  /** The subdomain portion of the domain, if any. */\n  subdomain?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The DNS record prefix the customer must add to verify the domain. */\n  verificationPrefix?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The DNS record value the customer must add to verify the domain. */\n  verificationToken?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\nexport type OrganizationDomainList = {\n  __typename?: \"OrganizationDomainList\";\n  data: Array<OrganizationDomain>;\n  listMetadata: ListMetadata;\n};\n\n/** The verification state of an organization domain. */\nexport type OrganizationDomainState =\n  | \"Failed\"\n  | \"LegacyVerified\"\n  | \"Pending\"\n  | \"Verified\";\n\n/** An invitation to join the organization the token was issued for. */\nexport type OrganizationInvitation = {\n  __typename?: \"OrganizationInvitation\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The email address the invitation was sent to. */\n  email: Scalars[\"String\"][\"output\"];\n  /** When the invitation expires. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n  /** The ID of the invitation. */\n  id: Scalars[\"ID\"][\"output\"];\n  /** Slug of the role the invitee will be granted on acceptance, if any. */\n  roleSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  status: OrganizationInvitationStatus;\n};\n\nexport type OrganizationInvitationStatus =\n  | \"Accepted\"\n  | \"Expired\"\n  | \"Pending\"\n  | \"Revoked\";\n\n/** An organization member — a user with their membership status and assigned roles. */\nexport type OrganizationMember = {\n  __typename?: \"OrganizationMember\";\n  /** The actions the calling user may take on this member. Computed relative to the caller: empty for the caller themselves and for members whose permissions exceed the caller’s. */\n  actions: Array<OrganizationMemberAction>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  email: Scalars[\"String\"][\"output\"];\n  emailVerified: Scalars[\"Boolean\"][\"output\"];\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The user ID of the member. */\n  id: Scalars[\"ID\"][\"output\"];\n  /** Whether this member is the calling user. */\n  isCurrentUser: Scalars[\"Boolean\"][\"output\"];\n  /** Whether this member is provisioned by a directory. Directory-managed memberships cannot be revoked. */\n  isDirectoryManaged: Scalars[\"Boolean\"][\"output\"];\n  /** Timestamp of the member's most recent session activity. */\n  lastActivityAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  profilePictureUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  roles: Array<OrganizationMemberRole>;\n  status: OrganizationMemberStatus;\n};\n\n/** An action the calling user is allowed to take on an organization member. */\nexport type OrganizationMemberAction =\n  | \"EditRole\"\n  | \"ResendInvite\"\n  | \"RevokeInvite\"\n  | \"RevokeMembership\";\n\n/** A paginated list of organization members. */\nexport type OrganizationMemberList = {\n  __typename?: \"OrganizationMemberList\";\n  data: Array<OrganizationMember>;\n  listMetadata: ListMetadata;\n};\n\n/** A role assigned to an organization member. */\nexport type OrganizationMemberRole = {\n  __typename?: \"OrganizationMemberRole\";\n  name: Scalars[\"String\"][\"output\"];\n  slug: Scalars[\"String\"][\"output\"];\n};\n\nexport type OrganizationMemberStatus =\n  | \"Active\"\n  | \"InviteExpired\"\n  | \"InviteRevoked\"\n  | \"Invited\"\n  | \"NoInvite\";\n\n/** Enum represents the pagination order. */\nexport type PaginationOrder = \"Asc\" | \"Desc\" | \"Normal\";\n\n/** A registered passkey (WebAuthn credential) for the authenticated user. */\nexport type Passkey = {\n  __typename?: \"Passkey\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** When this passkey was last used to authenticate. */\n  lastVerifiedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The registration challenge was not found. Challenges are single-use and expire after a few minutes; restart registration. */\nexport type PasskeyChallengeNotFound = {\n  __typename?: \"PasskeyChallengeNotFound\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The passkey was deleted successfully. */\nexport type PasskeyDeleted = {\n  __typename?: \"PasskeyDeleted\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** No passkey with the given ID belongs to the authenticated user. */\nexport type PasskeyNotFound = {\n  __typename?: \"PasskeyNotFound\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The WebAuthn credential creation options to pass to the browser, plus the challenge ID to send back with the attestation in `verifyPasskey`. */\nexport type PasskeyRegistrationOptions = {\n  __typename?: \"PasskeyRegistrationOptions\";\n  /** The server-side challenge ID. Pass it to `verifyPasskey` together with the attestation response. */\n  challengeId: Scalars[\"String\"][\"output\"];\n  /** The WebAuthn PublicKeyCredentialCreationOptionsJSON to pass to navigator.credentials.create(). */\n  options: Scalars[\"JSON\"][\"output\"];\n};\n\n/** The WebAuthn attestation response failed verification. */\nexport type PasskeyVerificationFailed = {\n  __typename?: \"PasskeyVerificationFailed\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The passkey was verified and registered successfully. */\nexport type PasskeyVerified = {\n  __typename?: \"PasskeyVerified\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The types of characters in a password. */\nexport type PasswordCharacterType =\n  | \"Lowercase\"\n  | \"Number\"\n  | \"Symbol\"\n  | \"Uppercase\";\n\n/** The password was created successfully. */\nexport type PasswordCreated = {\n  __typename?: \"PasswordCreated\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The password requirements configured for the environment. Use these to describe the requirements before a password is submitted; `createPassword` and `updatePassword` enforce them. */\nexport type PasswordPolicy = {\n  __typename?: \"PasswordPolicy\";\n  /** The minimum number of characters. */\n  minimumLength: Scalars[\"Int\"][\"output\"];\n  /** The minimum zxcvbn strength score (0–4) a password must reach. */\n  minimumStrength: Scalars[\"Int\"][\"output\"];\n  /** Whether passwords found in known data breaches are rejected. */\n  rejectsBreachedPasswords: Scalars[\"Boolean\"][\"output\"];\n  /** Whether a lowercase letter is required. */\n  requiresLowercase: Scalars[\"Boolean\"][\"output\"];\n  /** Whether a number is required. */\n  requiresNumber: Scalars[\"Boolean\"][\"output\"];\n  /** Whether a special character is required. */\n  requiresSymbol: Scalars[\"Boolean\"][\"output\"];\n  /** Whether an uppercase letter is required. */\n  requiresUppercase: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The provided password does not meet the environment password policy requirements. */\nexport type PasswordPolicyViolation = {\n  __typename?: \"PasswordPolicyViolation\";\n  /** A machine-readable error code. Matches the `code` of the first entry in `violations`. */\n  code: Scalars[\"String\"][\"output\"];\n  /** A human-readable description of the policy violation. Describes the first entry in `violations`. */\n  message: Scalars[\"String\"][\"output\"];\n  /** Every way in which the password failed the policy, so all of them can be surfaced at once. */\n  violations: Array<PasswordViolation>;\n};\n\n/** The password was updated successfully. */\nexport type PasswordUpdated = {\n  __typename?: \"PasswordUpdated\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** A single way in which a password failed the environment password policy. Fields other than `code` and `message` are only populated for the codes that carry them. */\nexport type PasswordViolation = {\n  __typename?: \"PasswordViolation\";\n  /** For a missing `Symbol` character type, the symbols that satisfy the requirement. */\n  allowedSymbols?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** For `password_pwned`, how many times the password appears in known data breaches. */\n  breachOccurrences?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** For `password_missing_character_type`, the class of character that is missing. */\n  characterType?: Maybe<PasswordCharacterType>;\n  /** A machine-readable error code, e.g. `password_too_short`, `password_missing_character_type`, `password_pwned`, `password_reused`, `password_too_weak`, `password_contains_email`, `password_too_long`. */\n  code: Scalars[\"String\"][\"output\"];\n  /** For `password_too_long`, the allowed maximum length. */\n  maximumLength?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** A human-readable description of this violation. */\n  message: Scalars[\"String\"][\"output\"];\n  /** For `password_too_short`, the required minimum length. */\n  minimumLength?: Maybe<Scalars[\"Int\"][\"output\"]>;\n  /** For `password_too_weak`, suggestions for choosing a stronger password. Empty for other codes. */\n  strengthSuggestions: Array<Scalars[\"String\"][\"output\"]>;\n  /** For `password_too_weak`, a summary of why it is weak. */\n  strengthWarning?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** A permission that can be granted to a role within the environment. */\nexport type Permission = {\n  __typename?: \"Permission\";\n  /** The kinds of API key this permission may be granted to, in enum order. Empty when it cannot be granted to any API key. */\n  apiKeyOwnerTypes: Array<ApiKeyOwnerType>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  slug: Scalars[\"String\"][\"output\"];\n  /** Whether this is a WorkOS-managed system permission that cannot be modified. */\n  system: Scalars[\"Boolean\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type PermissionFilterInput = {\n  /** Only return permissions that may be granted to this type of API key. */\n  apiKeyOwnerType?: InputMaybe<ApiKeyOwnerType>;\n  /** When true, only return permissions the calling user effectively holds in the token's organization. This is the same set the API key create mutations validate against, so combining it with `apiKeyOwnerType` yields exactly the permissions the caller may grant to a new key. Tokens that do not act as an organization member (credential tokens, standalone widget sessions) receive an empty list. */\n  heldByCaller?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n};\n\nexport type PermissionList = {\n  __typename?: \"PermissionList\";\n  data: Array<Permission>;\n  listMetadata: ListMetadata;\n};\n\n/** The profile was updated successfully. */\nexport type ProfileUpdated = {\n  __typename?: \"ProfileUpdated\";\n  user: User;\n};\n\nexport type Query = {\n  __typename?: \"Query\";\n  auditEvent: AuditEvent;\n  auditEvents: AuditEventList;\n  auditLogExport: AuditLogExport;\n  /** The audit log stream destination configured for the token's organization, or null when no stream is configured. */\n  auditLogStream?: Maybe<AuditLogStream>;\n  /** The authentication methods the environment allows and the password policy it enforces. Requires a session token. */\n  authenticationSettings: AuthenticationSettings;\n  /** The AuthKit settings for the token's environment. */\n  authkitSettings: AuthKitSettings;\n  /** The branding the token renders: its application's own once that application has been customized, otherwise its environment's. */\n  branding: Branding;\n  /** Placeholder query for the Client GraphQL API scaffold. Returns a static value and is replaced by real resolvers. */\n  clientApiStatus: Scalars[\"String\"][\"output\"];\n  /** List the data providers the token's organization can configure for its members, with the organization's current configuration of each. */\n  configurableDataProviders: ConfigurableDataProviderList;\n  /** Return a data provider by ID within the token's environment. */\n  dataProvider: DataProvider;\n  /** Report whether an authorization attempt is still outstanding. Poll this with the `state` returned when the authorization was created while the popup is open; it flips to `connecting: false` once the provider callback has been handled or the attempt expired. */\n  dataProviderAuthorizationStatus: DataProviderAuthorizationStatus;\n  /** Return one of the authenticated user's data provider connections by ID. */\n  dataProviderConnection: DataProviderConnection;\n  /** List the authenticated user's data provider connections, including their status. */\n  dataProviderConnections: DataProviderConnectionList;\n  /** List the data providers configured in the token's environment. */\n  dataProviders: DataProviderList;\n  /** Return a Directory Sync connection by ID within the token's organization. */\n  directoryConnection: Directory;\n  /** List the Directory Sync connections for the token's organization. */\n  directoryConnections: DirectoryList;\n  /** List the groups of a Directory Sync connection. */\n  directoryGroups: DirectoryGroupList;\n  /** List the users of a Directory Sync connection. */\n  directoryUsers: DirectoryUserList;\n  /** The permissions a user effectively has in the organization the token was issued for, including permissions inherited through the user's roles. Callers may read their own effective permissions; reading another member's requires the elevated user:read grant. */\n  effectivePermissions: Array<Permission>;\n  /** The feature flags that evaluate to enabled for a user in the environment the token was issued for, including flags targeted at the token's organization. Flags absent from the list evaluate to false. Callers may evaluate their own flags; evaluating another member of the token's organization requires the elevated user:read grant. */\n  evaluatedFlags: FlagList;\n  /** Fetch a feature flag by ID from the project that owns the token's environment. */\n  flag: Flag;\n  /** Fetch a feature flag by slug from the project that owns the token's environment. */\n  flagBySlug: Flag;\n  /** List the feature flags of the project that owns the token's environment, with their state in that environment. */\n  flags: FlagList;\n  /** Returns the currently authenticated user (the subject of the token). */\n  me: User;\n  /** Returns an organization by ID within the token's environment. */\n  organization: Organization;\n  /** List the active API keys owned by the token's organization. Secrets are never included. */\n  organizationApiKeys: OrganizationApiKeyList;\n  /** List the data providers the token's organization connects on behalf of all its members, with the organization's shared connection when it has one. */\n  organizationDataProviders: OrganizationDataProviderList;\n  /** Return a domain by ID within the token's organization, including its verification status. */\n  organizationDomain: OrganizationDomain;\n  /** List the domains belonging to the organization the token was issued for. */\n  organizationDomains: OrganizationDomainList;\n  /** List members of the organization the token was issued for, with their roles. */\n  organizationMemberships: OrganizationMemberList;\n  /** List organizations the authenticated user belongs to. */\n  organizations: Array<UserOrganization>;\n  /** List registered passkeys for the authenticated user. Requires a session token. */\n  passkeys: Array<Passkey>;\n  /** List the permissions defined in the environment the token was issued for. */\n  permissions: PermissionList;\n  /** Fetch a single role available to the organization the token was issued for. */\n  role?: Maybe<Role>;\n  /** List roles available to the organization the token was issued for, with role assignment configuration. */\n  roles: RolesResult;\n  /** List active sessions for the authenticated user. Requires a session token. */\n  sessions: Array<Session>;\n  /** List the data providers the token's organization has connected for all its members, with the shared connections the caller may use. Available to any active member of the organization. */\n  sharedDataProviders: SharedDataProviderList;\n  /** Returns an SSO connection by ID, including its IdP setup status, provided it belongs to the token's organization. */\n  ssoConnection: Connection;\n  /** List the SSO connections belonging to the organization the token was issued for. */\n  ssoConnections: Array<Connection>;\n  /** Returns a user by ID, provided they are a member of the token's organization. */\n  user: User;\n  /** List the active user-scoped API keys in the token's organization. Returns only the token user's own keys unless the token holds the organization-wide user API key grant. Secrets are never included. */\n  userApiKeys: UserApiKeyList;\n};\n\nexport type QueryAuditEventArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryAuditEventsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  filter: AuditEventFilterInput;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryAuditLogExportArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryConfigurableDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDataProviderArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryDataProviderAuthorizationStatusArgs = {\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  state: Scalars[\"String\"][\"input\"];\n};\n\nexport type QueryDataProviderConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryDataProviderConnectionsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDirectoryConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryDirectoryConnectionsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryDirectoryGroupsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  directoryId: Scalars[\"ID\"][\"input\"];\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryDirectoryUsersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  directoryId: Scalars[\"ID\"][\"input\"];\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryEffectivePermissionsArgs = {\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryEvaluatedFlagsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryFlagArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryFlagBySlugArgs = {\n  slug: Scalars[\"String\"][\"input\"];\n};\n\nexport type QueryFlagsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  enabled?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryOrganizationArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryOrganizationApiKeysArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryOrganizationDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryOrganizationDomainArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryOrganizationDomainsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n};\n\nexport type QueryOrganizationMembershipsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  roleSlug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryPermissionsArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  filter?: InputMaybe<PermissionFilterInput>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type QueryRoleArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QuerySharedDataProvidersArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  supportsMultipleConnections?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n};\n\nexport type QuerySsoConnectionArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryUserArgs = {\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type QueryUserApiKeysArgs = {\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\n/** Input for beginning passkey (WebAuthn) registration. */\nexport type RegisterPasskeyInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type RegisterPasskeyResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasskeyRegistrationOptions;\n\nexport type RemoveMemberInput = {\n  /** The user ID of the member to remove. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type RemoveMemberResult =\n  | MemberIsManagedByDirectory\n  | MemberNotFound\n  | MemberRemoved;\n\n/** Input for removing all TOTP factors. */\nexport type RemoveMfaFactorInput = {\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type RemoveMfaFactorResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | MfaFactorRemoved\n  | NoMfaFactorsEnrolled;\n\nexport type ResendInvitationInput = {\n  /** The ID of the user whose invitation should be resent. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\n/** No invitation exists for this user in this organization. */\nexport type ResendInvitationNotFound = {\n  __typename?: \"ResendInvitationNotFound\";\n  userId: Scalars[\"ID\"][\"output\"];\n};\n\nexport type ResendInvitationResult =\n  | InvitationResent\n  | InviteeAlreadyAccepted\n  | InviteeEmailNotDeliverable\n  | ResendInvitationNotFound;\n\n/** Input for revoking all sessions. */\nexport type RevokeAllSessionsInput = {\n  /** The ID of the session to keep active in addition to the session the request was authenticated with. Use this when the token is not itself a user session. Ignored unless it is one of the authenticated user’s own active sessions. */\n  currentSessionId?: InputMaybe<Scalars[\"ID\"][\"input\"]>;\n};\n\nexport type RevokeAllSessionsResult = AllSessionsRevoked;\n\nexport type RevokeInvitationInput = {\n  /** The ID of the user whose pending invitation should be revoked. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type RevokeInvitationResult =\n  | InvitationNotFound\n  | InvitationNotPending\n  | InvitationRevoked;\n\n/** Input for revoking a specific session. */\nexport type RevokeSessionInput = {\n  /** The ID of the session to revoke. */\n  sessionId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type RevokeSessionResult = SessionNotFound | SessionRevoked;\n\n/** A role available within the organization. */\nexport type Role = {\n  __typename?: \"Role\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** Whether this is the default role assigned to new members. */\n  isDefault: Scalars[\"Boolean\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n  slug: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** Confirms that a role has been scheduled for deletion. */\nexport type RoleDeleted = {\n  __typename?: \"RoleDeleted\";\n  /** The ID of the deleted role. */\n  id: Scalars[\"ID\"][\"output\"];\n};\n\n/** No active roles with the given slugs exist in the environment. */\nexport type RoleNotFound = {\n  __typename?: \"RoleNotFound\";\n  /** The role slugs that did not resolve to active roles. */\n  roleSlugs: Array<Scalars[\"String\"][\"output\"]>;\n};\n\n/** Roles available in the organization along with role assignment configuration. */\nexport type RolesResult = {\n  __typename?: \"RolesResult\";\n  /** Whether members can be assigned multiple roles simultaneously. */\n  multipleRolesEnabled: Scalars[\"Boolean\"][\"output\"];\n  roles: Array<Role>;\n};\n\n/** Input for requesting an email change verification code. */\nexport type SendEmailChangeInput = {\n  /** The elevated access token from a successful `verifyCurrentEmail` call. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The new email address to change to. */\n  newEmail: Scalars[\"String\"][\"input\"];\n};\n\nexport type SendEmailChangeResult =\n  | DailyEmailQuotaExceeded\n  | EmailChangeNotAvailable\n  | EmailChangeSent\n  | EmailManagedByProvider\n  | EmailNotAvailable\n  | IdentityVerificationExpired\n  | IdentityVerificationInvalid\n  | InvalidEmail;\n\nexport type SendVerificationCodeResult =\n  | DailyEmailQuotaExceeded\n  | VerificationCodeSent;\n\n/** An active user session. */\nexport type Session = {\n  __typename?: \"Session\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  currentLocation?: Maybe<SessionLocation>;\n  id: Scalars[\"ID\"][\"output\"];\n  ipAddress?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether this session is the one making the request. */\n  isCurrent: Scalars[\"Boolean\"][\"output\"];\n  lastActivityAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  organizationId?: Maybe<Scalars[\"String\"][\"output\"]>;\n  state: SessionState;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n  userAgent?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** Approximate geographic location derived from the session IP. */\nexport type SessionLocation = {\n  __typename?: \"SessionLocation\";\n  cityName: Scalars[\"String\"][\"output\"];\n  countryISOCode: Scalars[\"String\"][\"output\"];\n};\n\n/** No session was found with the given ID. */\nexport type SessionNotFound = {\n  __typename?: \"SessionNotFound\";\n  /** The session ID that did not resolve to a session. */\n  sessionId: Scalars[\"ID\"][\"output\"];\n};\n\n/** The session was revoked successfully. */\nexport type SessionRevoked = {\n  __typename?: \"SessionRevoked\";\n  session: Session;\n};\n\n/** The lifecycle state of a session. */\nexport type SessionState = {\n  __typename?: \"SessionState\";\n  expiresAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** Session state: Issued, Revoked, etc. */\n  tag: Scalars[\"String\"][\"output\"];\n};\n\nexport type SetDataProviderConfigurationInput = {\n  /** The organization's own OAuth client ID. Must be supplied together with `clientSecret`. */\n  clientId?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization's own OAuth client secret. Write-only: it is stored encrypted and never returned; clients read `hasCredentials` instead. */\n  clientSecret?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Non-secret configuration values declared by the provider. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The data provider to configure for the token's organization. Configuration always applies to the token's organization; it cannot be set for another one. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Whether the organization's users can see and connect the data provider. */\n  enabled?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n  /** The scopes the organization requests. Only providers where the organization brings its own OAuth credentials may widen beyond the defaults. */\n  scopes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type SetDataProviderConfigurationResult =\n  | DataProviderConfigInvalid\n  | DataProviderConfiguration;\n\nexport type SetDataProviderEnabledInput = {\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Whether the data provider is available to the organization the token was issued for. */\n  enabled: Scalars[\"Boolean\"][\"input\"];\n};\n\nexport type SetOrganizationDataProviderConfigurationInput = {\n  /** The organization's own OAuth client ID. Must be supplied together with `clientSecret`. */\n  clientId?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The organization's own OAuth client secret. Write-only: it is stored encrypted and never returned; clients read `hasCredentials` instead. */\n  clientSecret?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** Non-secret configuration values declared by the provider. */\n  config?: InputMaybe<Array<DataProviderConfigEntryInput>>;\n  /** The organization-owned data provider to configure (`organizationDataProviders`). Configuration always applies to the token's organization; it cannot be set for another one. */\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  /** Whether the organization's shared connection to the data provider is enabled. */\n  enabled?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n  /** The scopes the organization requests. Only providers where the organization brings its own OAuth credentials may widen beyond the defaults. */\n  scopes?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\n/** A data provider the token's organization has connected on behalf of all its members, with the shared connections a member may use. */\nexport type SharedDataProvider = {\n  __typename?: \"SharedDataProvider\";\n  /** The organization's shared connections to the provider that the caller may use. Never empty: providers without a usable shared connection are not listed. */\n  connectedAccounts: Array<SharedDataProviderConnection>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  description?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider's icon for dark backgrounds. */\n  iconDarkUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The slug of the icon the widget displays for the provider. */\n  iconSlug?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** The URL of the provider's icon. */\n  iconUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** The provider type this data provider was created from. */\n  integrationType: Scalars[\"String\"][\"output\"];\n  /** The display name of the provider. */\n  name: Scalars[\"String\"][\"output\"];\n  /** The stable identifier for the provider. */\n  slug: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** One of the organization's shared connections to a data provider, as visible to any active member. */\nexport type SharedDataProviderConnection = {\n  __typename?: \"SharedDataProviderConnection\";\n  /** How the connection authenticates: `oauth`, `api_key`, or `client_credentials`. */\n  authMethod: Scalars[\"String\"][\"output\"];\n  /** Whether the connection can be used right now: `available`, or `needs_admin_attention` when an admin must re-authorize it first. */\n  availability: Scalars[\"String\"][\"output\"];\n  /** Whether this is the compatibility connection or a standard connection. */\n  connectionRole: DataInstallationConnectionRole;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** The data provider this connection was created for. */\n  dataProviderId: Scalars[\"ID\"][\"output\"];\n  /** The slug of the connected data provider. */\n  dataProviderSlug: Scalars[\"String\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The status of the connection: `connected` or `needs_reauthorization`. */\n  state: Scalars[\"String\"][\"output\"];\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\nexport type SharedDataProviderList = {\n  __typename?: \"SharedDataProviderList\";\n  data: Array<SharedDataProvider>;\n  listMetadata: ListMetadata;\n};\n\n/** A sign-in session initiated through an SSO connection. Mirrors the session exposed by the Widgets SSO connections API. */\nexport type SsoConnectionSession = {\n  __typename?: \"SsoConnectionSession\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  id: Scalars[\"ID\"][\"output\"];\n  /** The state the session reached. */\n  state: SsoSessionState;\n};\n\n/** The protocol family (SAML or OpenID Connect) of an SSO connection. */\nexport type SsoProviderTag = \"OpenIdConnect\" | \"Saml\";\n\n/** The state an SSO sign-in session reached. */\nexport type SsoSessionState =\n  | \"Authorized\"\n  | \"Failed\"\n  | \"Started\"\n  | \"Successful\"\n  | \"Terminated\"\n  | \"Timedout\";\n\n/** The user already has a verified TOTP factor enrolled. */\nexport type TotpAlreadyEnrolled = {\n  __typename?: \"TotpAlreadyEnrolled\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** TOTP factor details returned after enrollment. */\nexport type TotpFactor = {\n  __typename?: \"TotpFactor\";\n  /** The authentication challenge ID. */\n  authenticationChallengeId: Scalars[\"String\"][\"output\"];\n  /** The authentication factor ID. */\n  authenticationFactorId: Scalars[\"String\"][\"output\"];\n  /** A data-URI PNG of the QR code. */\n  qrCode: Scalars[\"String\"][\"output\"];\n  /** The TOTP secret for manual entry. */\n  secret: Scalars[\"String\"][\"output\"];\n  /** The TOTP URI for provisioning (otpauth://…). */\n  uri: Scalars[\"String\"][\"output\"];\n};\n\n/** The TOTP verification code was invalid. */\nexport type TotpVerificationFailed = {\n  __typename?: \"TotpVerificationFailed\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** The TOTP verification succeeded and the factor is active. */\nexport type TotpVerified = {\n  __typename?: \"TotpVerified\";\n  success: Scalars[\"Boolean\"][\"output\"];\n};\n\nexport type UpdateDataProviderConnectionLabelInput = {\n  /** A non-unique label of at most 255 Unicode code points, preserved exactly. Omit to preserve the current label; null clears it. Does not change the account identifier. */\n  accountDisplayName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The exact connection to rename. No other connection is selected if this ID is missing or out of scope. */\n  id: Scalars[\"ID\"][\"input\"];\n};\n\nexport type UpdateDataProviderConnectionLabelResult = {\n  __typename?: \"UpdateDataProviderConnectionLabelResult\";\n  /** The updated connection. Credentials, identity, connection role, and state are unchanged. */\n  connection: DataProviderConnection;\n  /** Advisory warnings for the supplied label. Empty when no label was supplied or no exact duplicate exists for this provider and owner. */\n  warnings: Array<DataProviderConnectionLabelWarning>;\n};\n\nexport type UpdateMemberRoleInput = {\n  /** Slugs of the roles to assign. When multiple roles are enabled for the environment, all provided roles are assigned; otherwise only the first slug is used. */\n  roleSlugs: Array<Scalars[\"String\"][\"input\"]>;\n  /** The user ID of the member to update. */\n  userId: Scalars[\"ID\"][\"input\"];\n};\n\nexport type UpdateMemberRoleResult =\n  | MemberNotFound\n  | MemberRoleUpdated\n  | RoleNotFound;\n\n/** Input for changing an existing password. Requires the current password for verification. */\nexport type UpdatePasswordInput = {\n  /** The current password for verification. */\n  currentPassword: Scalars[\"String\"][\"input\"];\n  /** The new password. Must satisfy the environment password policy. */\n  newPassword: Scalars[\"String\"][\"input\"];\n};\n\nexport type UpdatePasswordResult =\n  | IncorrectPassword\n  | PasswordPolicyViolation\n  | PasswordUpdated;\n\n/** Input for updating the authenticated user's profile. */\nexport type UpdateProfileInput = {\n  /** The user's first name. Pass an empty string to clear. */\n  firstName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The user's last name. Pass an empty string to clear. */\n  lastName?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The user's locale as a BCP 47 language tag (e.g. 'en-US'). Pass an empty string to clear. */\n  locale?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\nexport type UpdateProfileResult = InvalidLocale | ProfileUpdated;\n\nexport type UpdateRoleInput = {\n  /** Human-readable description of the role. This is a full replace of the role, so an omitted or null description clears it — resupply the current value to preserve it. */\n  description?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  /** The ID of the role to update. */\n  id: Scalars[\"ID\"][\"input\"];\n  /** Human-readable name for the role. */\n  name: Scalars[\"String\"][\"input\"];\n  /** Slugs of the permissions granted to the role. Replaces the existing set when provided. */\n  permissions?: InputMaybe<Array<Scalars[\"String\"][\"input\"]>>;\n};\n\nexport type UpdateSsoConnectionInput = {\n  id: Scalars[\"ID\"][\"input\"];\n  /** A new human-readable name for the connection. */\n  name?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n};\n\n/** A user in the current environment. */\nexport type User = {\n  __typename?: \"User\";\n  connectedAccounts: Array<ConnectedAccount>;\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  email: Scalars[\"String\"][\"output\"];\n  emailVerified: Scalars[\"Boolean\"][\"output\"];\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  /** Whether multi-factor authentication (TOTP) is set up for this user. Always `false` when the environment has MFA turned off — use `authenticationSettings.mfaEnabled` to tell the two apart. Only populated on `me`. */\n  mfaEnabled: Scalars[\"Boolean\"][\"output\"];\n  /** When MFA was last used to authenticate. Only populated on `me`. */\n  mfaLastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** When a password was last used to authenticate. Only populated on `me`. */\n  passwordLastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** Whether this user has a password set. Reflects the user regardless of whether the environment allows password authentication; use `authenticationSettings.passwordAuthEnabled` for that. Only populated on `me`. */\n  passwordSet: Scalars[\"Boolean\"][\"output\"];\n  profilePictureUrl?: Maybe<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The user already has a password set. */\nexport type UserAlreadyHasPassword = {\n  __typename?: \"UserAlreadyHasPassword\";\n  _placeholder: Scalars[\"Boolean\"][\"output\"];\n};\n\n/** An API key owned by a member of the token's organization. A user-scoped key acts as that user, so it is never interchangeable with an organization API key. */\nexport type UserApiKey = {\n  __typename?: \"UserApiKey\";\n  createdAt: Scalars[\"DateTime\"][\"output\"];\n  /** When the key expires. A key with an expiration in the past is revoked and can no longer authenticate. */\n  expiresAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  /** When the key was last used to authenticate, if ever. */\n  lastUsedAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The human-readable name of the key. */\n  name: Scalars[\"String\"][\"output\"];\n  /** A redacted form of the secret, safe to display. The secret itself is only ever returned when the key is created. */\n  obfuscatedValue: Scalars[\"String\"][\"output\"];\n  owner: UserApiKeyOwner;\n  /** The permission slugs the key carries. */\n  permissions: Array<Scalars[\"String\"][\"output\"]>;\n  updatedAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** The user-scoped API key was created. */\nexport type UserApiKeyCreated = {\n  __typename?: \"UserApiKeyCreated\";\n  apiKey: UserApiKey;\n  /** The plaintext secret, returned exactly once at creation. It is never retrievable again — no query or other mutation returns it. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\n/** The expiration of the user-scoped API key was updated. The key is retained. */\nexport type UserApiKeyExpired = {\n  __typename?: \"UserApiKeyExpired\";\n  apiKey: UserApiKey;\n};\n\nexport type UserApiKeyList = {\n  __typename?: \"UserApiKeyList\";\n  data: Array<UserApiKey>;\n  listMetadata: ListMetadata;\n};\n\n/** The userland user a user-scoped API key belongs to. */\nexport type UserApiKeyOwner = {\n  __typename?: \"UserApiKeyOwner\";\n  /** The owner's display name, falling back to their email when they have no name. */\n  displayName: Scalars[\"String\"][\"output\"];\n  email: Scalars[\"String\"][\"output\"];\n  firstName?: Maybe<Scalars[\"String\"][\"output\"]>;\n  id: Scalars[\"ID\"][\"output\"];\n  lastName?: Maybe<Scalars[\"String\"][\"output\"]>;\n};\n\n/** The invitation was created and the email sent. */\nexport type UserInvited = {\n  __typename?: \"UserInvited\";\n  invitation: OrganizationInvitation;\n};\n\n/** An organization the authenticated user belongs to, with a flag indicating whether it is the token's current organization. */\nexport type UserOrganization = {\n  __typename?: \"UserOrganization\";\n  id: Scalars[\"ID\"][\"output\"];\n  /** Whether this is the organization the token is currently scoped to. */\n  isCurrent: Scalars[\"Boolean\"][\"output\"];\n  name: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has expired. */\nexport type VerificationCodeExpired = {\n  __typename?: \"VerificationCodeExpired\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code is incorrect. */\nexport type VerificationCodeIncorrect = {\n  __typename?: \"VerificationCodeIncorrect\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** The verification code has already been used. */\nexport type VerificationCodePreviouslyUsed = {\n  __typename?: \"VerificationCodePreviouslyUsed\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** A verification code was sent to the current email address for identity verification. */\nexport type VerificationCodeSent = {\n  __typename?: \"VerificationCodeSent\";\n  /** The authentication challenge ID to use in subsequent steps. */\n  authenticationChallengeId: Scalars[\"ID\"][\"output\"];\n  /** When the verification code expires. */\n  expiresAt: Scalars[\"DateTime\"][\"output\"];\n};\n\n/** Too many verification code attempts. */\nexport type VerificationTooManyAttempts = {\n  __typename?: \"VerificationTooManyAttempts\";\n  message: Scalars[\"String\"][\"output\"];\n};\n\n/** Input for verifying the current email address. */\nexport type VerifyCurrentEmailInput = {\n  /** The authentication challenge ID returned from `sendVerificationCode`. */\n  authenticationChallengeId: Scalars[\"ID\"][\"input\"];\n  /** The verification code sent to the current email address. */\n  code: Scalars[\"String\"][\"input\"];\n};\n\nexport type VerifyCurrentEmailResult =\n  | CurrentEmailVerified\n  | VerificationCodeExpired\n  | VerificationCodeIncorrect\n  | VerificationCodePreviouslyUsed\n  | VerificationTooManyAttempts;\n\n/** Input for completing passkey (WebAuthn) registration by verifying the attestation created by the authenticator. */\nexport type VerifyPasskeyInput = {\n  /** The challenge ID returned by `registerPasskey`. */\n  challengeId: Scalars[\"String\"][\"input\"];\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n  /** The WebAuthn RegistrationResponseJSON returned by navigator.credentials.create(). */\n  response: Scalars[\"JSON\"][\"input\"];\n};\n\nexport type VerifyPasskeyResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | PasskeyChallengeNotFound\n  | PasskeyVerificationFailed\n  | PasskeyVerified;\n\n/** Input for verifying a TOTP enrollment. */\nexport type VerifyTotpInput = {\n  /** The authentication challenge ID from enrollTotp. */\n  authenticationChallengeId: Scalars[\"String\"][\"input\"];\n  /** The TOTP code from the authenticator app. */\n  code: Scalars[\"String\"][\"input\"];\n  /** An elevated access token obtained by verifying the current email address. Required to prove recent re-authentication. */\n  elevatedAccessToken: Scalars[\"String\"][\"input\"];\n};\n\nexport type VerifyTotpResult =\n  | ElevatedAccessTokenExpired\n  | ElevatedAccessTokenInvalid\n  | TotpVerificationFailed\n  | TotpVerified;\n\n/** An X.509 certificate registered on a SAML connection. Mirrors the certificate exposed by the Widgets SSO connections API. */\nexport type X509Certificate = {\n  __typename?: \"X509Certificate\";\n  id: Scalars[\"ID\"][\"output\"];\n  /** When an expiry notification was last sent for this certificate. */\n  lastExpiryEventSentAt?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The end of the certificate validity period. */\n  notAfter?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The start of the certificate validity period. */\n  notBefore?: Maybe<Scalars[\"DateTime\"][\"output\"]>;\n  /** The PEM-encoded certificate. */\n  value: Scalars[\"String\"][\"output\"];\n};\n\nexport type ClientApiStatusQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type ClientApiStatusQuery = {\n  __typename?: \"Query\";\n  clientApiStatus: string;\n};\n\nexport type OrganizationDomainFieldsFragment = {\n  __typename?: \"OrganizationDomain\";\n  id: string;\n  organizationId: string;\n  domain: string;\n  subdomain?: string | null;\n  state: OrganizationDomainState;\n  verificationPrefix?: string | null;\n  verificationToken?: string | null;\n  nameServer: DomainVerificationNameServer;\n  createdAt: string;\n};\n\nexport type ListOrganizationDomainsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListOrganizationDomainsQuery = {\n  __typename?: \"Query\";\n  organizationDomains: {\n    __typename?: \"OrganizationDomainList\";\n    data: Array<{\n      __typename?: \"OrganizationDomain\";\n      id: string;\n      organizationId: string;\n      domain: string;\n      subdomain?: string | null;\n      state: OrganizationDomainState;\n      verificationPrefix?: string | null;\n      verificationToken?: string | null;\n      nameServer: DomainVerificationNameServer;\n      createdAt: string;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type CreateOrganizationDomainMutationVariables = Exact<{\n  domain: Scalars[\"String\"][\"input\"];\n}>;\n\nexport type CreateOrganizationDomainMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type DeleteOrganizationDomainMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteOrganizationDomainMutation = {\n  __typename?: \"Mutation\";\n  deleteOrganizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type ReverifyOrganizationDomainMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type ReverifyOrganizationDomainMutation = {\n  __typename?: \"Mutation\";\n  reverifyOrganizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type UserFieldsFragment = {\n  __typename?: \"User\";\n  id: string;\n  email: string;\n  emailVerified: boolean;\n  firstName?: string | null;\n  lastName?: string | null;\n  profilePictureUrl?: string | null;\n  mfaEnabled: boolean;\n  mfaLastUsedAt?: string | null;\n  passwordSet: boolean;\n  passwordLastUsedAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type ConnectedAccountFieldsFragment = {\n  __typename?: \"ConnectedAccount\";\n  id: string;\n  provider: OAuthProvider;\n  email?: string | null;\n  firstName?: string | null;\n  lastName?: string | null;\n  profilePictureUrl?: string | null;\n  lastLoginAt?: string | null;\n};\n\nexport type PasswordViolationFieldsFragment = {\n  __typename?: \"PasswordViolation\";\n  code: string;\n  message: string;\n  characterType?: PasswordCharacterType | null;\n  minimumLength?: number | null;\n  maximumLength?: number | null;\n  allowedSymbols?: string | null;\n  breachOccurrences?: number | null;\n  strengthWarning?: string | null;\n  strengthSuggestions: Array<string>;\n};\n\nexport type MeQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type MeQuery = {\n  __typename?: \"Query\";\n  me: {\n    __typename?: \"User\";\n    id: string;\n    email: string;\n    emailVerified: boolean;\n    firstName?: string | null;\n    lastName?: string | null;\n    profilePictureUrl?: string | null;\n    mfaEnabled: boolean;\n    mfaLastUsedAt?: string | null;\n    passwordSet: boolean;\n    passwordLastUsedAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    connectedAccounts: Array<{\n      __typename?: \"ConnectedAccount\";\n      id: string;\n      provider: OAuthProvider;\n      email?: string | null;\n      firstName?: string | null;\n      lastName?: string | null;\n      profilePictureUrl?: string | null;\n      lastLoginAt?: string | null;\n    }>;\n  };\n};\n\nexport type AuthenticationSettingsQueryVariables = Exact<{\n  [key: string]: never;\n}>;\n\nexport type AuthenticationSettingsQuery = {\n  __typename?: \"Query\";\n  authenticationSettings: {\n    __typename?: \"AuthenticationSettings\";\n    mfaEnabled: boolean;\n    mfaRequired: boolean;\n    passkeyAuthEnabled: boolean;\n    passwordAuthEnabled: boolean;\n    passwordPolicy: {\n      __typename?: \"PasswordPolicy\";\n      minimumLength: number;\n      minimumStrength: number;\n      rejectsBreachedPasswords: boolean;\n      requiresLowercase: boolean;\n      requiresNumber: boolean;\n      requiresSymbol: boolean;\n      requiresUppercase: boolean;\n    };\n  };\n};\n\nexport type PasskeysQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type PasskeysQuery = {\n  __typename?: \"Query\";\n  passkeys: Array<{\n    __typename?: \"Passkey\";\n    id: string;\n    createdAt: string;\n    updatedAt: string;\n    lastVerifiedAt?: string | null;\n  }>;\n};\n\nexport type UpdateProfileMutationVariables = Exact<{\n  input: UpdateProfileInput;\n}>;\n\nexport type UpdateProfileMutation = {\n  __typename?: \"Mutation\";\n  updateProfile:\n    | { __typename: \"InvalidLocale\" }\n    | {\n        __typename: \"ProfileUpdated\";\n        user: {\n          __typename?: \"User\";\n          id: string;\n          email: string;\n          emailVerified: boolean;\n          firstName?: string | null;\n          lastName?: string | null;\n          profilePictureUrl?: string | null;\n          mfaEnabled: boolean;\n          mfaLastUsedAt?: string | null;\n          passwordSet: boolean;\n          passwordLastUsedAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      };\n};\n\nexport type SendVerificationCodeMutationVariables = Exact<{\n  [key: string]: never;\n}>;\n\nexport type SendVerificationCodeMutation = {\n  __typename?: \"Mutation\";\n  sendVerificationCode:\n    | { __typename: \"DailyEmailQuotaExceeded\" }\n    | {\n        __typename: \"VerificationCodeSent\";\n        authenticationChallengeId: string;\n        expiresAt: string;\n      };\n};\n\nexport type VerifyCurrentEmailMutationVariables = Exact<{\n  input: VerifyCurrentEmailInput;\n}>;\n\nexport type VerifyCurrentEmailMutation = {\n  __typename?: \"Mutation\";\n  verifyCurrentEmail:\n    | {\n        __typename: \"CurrentEmailVerified\";\n        elevatedAccessToken: string;\n        expiresAt: string;\n      }\n    | { __typename: \"VerificationCodeExpired\" }\n    | { __typename: \"VerificationCodeIncorrect\" }\n    | { __typename: \"VerificationCodePreviouslyUsed\" }\n    | { __typename: \"VerificationTooManyAttempts\" };\n};\n\nexport type SendEmailChangeMutationVariables = Exact<{\n  input: SendEmailChangeInput;\n}>;\n\nexport type SendEmailChangeMutation = {\n  __typename?: \"Mutation\";\n  sendEmailChange:\n    | { __typename: \"DailyEmailQuotaExceeded\" }\n    | { __typename: \"EmailChangeNotAvailable\" }\n    | { __typename: \"EmailChangeSent\"; expiresAt: string }\n    | { __typename: \"EmailManagedByProvider\" }\n    | { __typename: \"EmailNotAvailable\" }\n    | { __typename: \"IdentityVerificationExpired\" }\n    | { __typename: \"IdentityVerificationInvalid\" }\n    | { __typename: \"InvalidEmail\" };\n};\n\nexport type ConfirmEmailChangeMutationVariables = Exact<{\n  input: ConfirmEmailChangeInput;\n}>;\n\nexport type ConfirmEmailChangeMutation = {\n  __typename?: \"Mutation\";\n  confirmEmailChange:\n    | { __typename: \"EmailChangeCodeExpired\" }\n    | { __typename: \"EmailChangeCodeIncorrect\" }\n    | { __typename: \"EmailChangeCodePreviouslyUsed\" }\n    | {\n        __typename: \"EmailChangeConfirmed\";\n        elevatedAccessToken: string;\n        expiresAt: string;\n        user: {\n          __typename?: \"User\";\n          id: string;\n          email: string;\n          emailVerified: boolean;\n          firstName?: string | null;\n          lastName?: string | null;\n          profilePictureUrl?: string | null;\n          mfaEnabled: boolean;\n          mfaLastUsedAt?: string | null;\n          passwordSet: boolean;\n          passwordLastUsedAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      }\n    | { __typename: \"EmailChangeTooManyAttempts\" }\n    | { __typename: \"EmailManagedByProvider\" }\n    | { __typename: \"EmailNotAvailable\" }\n    | { __typename: \"IdentityVerificationExpired\" }\n    | { __typename: \"IdentityVerificationInvalid\" }\n    | { __typename: \"InvalidEmail\" }\n    | { __typename: \"NoPendingEmailChange\" };\n};\n\nexport type CreatePasswordMutationVariables = Exact<{\n  input: CreatePasswordInput;\n}>;\n\nexport type CreatePasswordMutation = {\n  __typename?: \"Mutation\";\n  createPassword:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"PasswordCreated\"; success: boolean }\n    | {\n        __typename: \"PasswordPolicyViolation\";\n        code: string;\n        message: string;\n        violations: Array<{\n          __typename?: \"PasswordViolation\";\n          code: string;\n          message: string;\n          characterType?: PasswordCharacterType | null;\n          minimumLength?: number | null;\n          maximumLength?: number | null;\n          allowedSymbols?: string | null;\n          breachOccurrences?: number | null;\n          strengthWarning?: string | null;\n          strengthSuggestions: Array<string>;\n        }>;\n      }\n    | { __typename: \"UserAlreadyHasPassword\" };\n};\n\nexport type UpdatePasswordMutationVariables = Exact<{\n  input: UpdatePasswordInput;\n}>;\n\nexport type UpdatePasswordMutation = {\n  __typename?: \"Mutation\";\n  updatePassword:\n    | { __typename: \"IncorrectPassword\" }\n    | {\n        __typename: \"PasswordPolicyViolation\";\n        code: string;\n        message: string;\n        violations: Array<{\n          __typename?: \"PasswordViolation\";\n          code: string;\n          message: string;\n          characterType?: PasswordCharacterType | null;\n          minimumLength?: number | null;\n          maximumLength?: number | null;\n          allowedSymbols?: string | null;\n          breachOccurrences?: number | null;\n          strengthWarning?: string | null;\n          strengthSuggestions: Array<string>;\n        }>;\n      }\n    | { __typename: \"PasswordUpdated\"; success: boolean };\n};\n\nexport type EnrollTotpMutationVariables = Exact<{\n  input: EnrollTotpInput;\n}>;\n\nexport type EnrollTotpMutation = {\n  __typename?: \"Mutation\";\n  enrollTotp:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"TotpAlreadyEnrolled\" }\n    | {\n        __typename: \"TotpFactor\";\n        authenticationChallengeId: string;\n        authenticationFactorId: string;\n        secret: string;\n        uri: string;\n        qrCode: string;\n      };\n};\n\nexport type VerifyTotpMutationVariables = Exact<{\n  input: VerifyTotpInput;\n}>;\n\nexport type VerifyTotpMutation = {\n  __typename?: \"Mutation\";\n  verifyTotp:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"TotpVerificationFailed\" }\n    | { __typename: \"TotpVerified\"; success: boolean };\n};\n\nexport type RemoveMfaFactorMutationVariables = Exact<{\n  input: RemoveMfaFactorInput;\n}>;\n\nexport type RemoveMfaFactorMutation = {\n  __typename?: \"Mutation\";\n  removeMfaFactor:\n    | { __typename: \"ElevatedAccessTokenExpired\" }\n    | { __typename: \"ElevatedAccessTokenInvalid\" }\n    | { __typename: \"MfaFactorRemoved\"; success: boolean }\n    | { __typename: \"NoMfaFactorsEnrolled\" };\n};\n\nexport type SessionFieldsFragment = {\n  __typename?: \"Session\";\n  id: string;\n  isCurrent: boolean;\n  ipAddress?: string | null;\n  userAgent?: string | null;\n  organizationId?: string | null;\n  lastActivityAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  state: {\n    __typename?: \"SessionState\";\n    tag: string;\n    expiresAt?: string | null;\n  };\n  currentLocation?: {\n    __typename?: \"SessionLocation\";\n    cityName: string;\n    countryISOCode: string;\n  } | null;\n};\n\nexport type SessionsQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type SessionsQuery = {\n  __typename?: \"Query\";\n  sessions: Array<{\n    __typename?: \"Session\";\n    id: string;\n    isCurrent: boolean;\n    ipAddress?: string | null;\n    userAgent?: string | null;\n    organizationId?: string | null;\n    lastActivityAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    state: {\n      __typename?: \"SessionState\";\n      tag: string;\n      expiresAt?: string | null;\n    };\n    currentLocation?: {\n      __typename?: \"SessionLocation\";\n      cityName: string;\n      countryISOCode: string;\n    } | null;\n  }>;\n};\n\nexport type RevokeSessionMutationVariables = Exact<{\n  input: RevokeSessionInput;\n}>;\n\nexport type RevokeSessionMutation = {\n  __typename?: \"Mutation\";\n  revokeSession:\n    | { __typename: \"SessionNotFound\" }\n    | {\n        __typename: \"SessionRevoked\";\n        session: {\n          __typename?: \"Session\";\n          id: string;\n          isCurrent: boolean;\n          ipAddress?: string | null;\n          userAgent?: string | null;\n          organizationId?: string | null;\n          lastActivityAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          state: {\n            __typename?: \"SessionState\";\n            tag: string;\n            expiresAt?: string | null;\n          };\n          currentLocation?: {\n            __typename?: \"SessionLocation\";\n            cityName: string;\n            countryISOCode: string;\n          } | null;\n        };\n      };\n};\n\nexport type RevokeAllSessionsMutationVariables = Exact<{\n  input?: InputMaybe<RevokeAllSessionsInput>;\n}>;\n\nexport type RevokeAllSessionsMutation = {\n  __typename?: \"Mutation\";\n  revokeAllSessions: { __typename: \"AllSessionsRevoked\"; success: boolean };\n};\n\nexport type OrganizationMemberFieldsFragment = {\n  __typename?: \"OrganizationMember\";\n  id: string;\n  email: string;\n  emailVerified: boolean;\n  firstName?: string | null;\n  lastName?: string | null;\n  profilePictureUrl?: string | null;\n  status: OrganizationMemberStatus;\n  lastActivityAt?: string | null;\n  createdAt: string;\n  actions: Array<OrganizationMemberAction>;\n  isCurrentUser: boolean;\n  isDirectoryManaged: boolean;\n  roles: Array<{\n    __typename?: \"OrganizationMemberRole\";\n    slug: string;\n    name: string;\n  }>;\n};\n\nexport type OrganizationInvitationFieldsFragment = {\n  __typename?: \"OrganizationInvitation\";\n  id: string;\n  email: string;\n  status: OrganizationInvitationStatus;\n  roleSlug?: string | null;\n  expiresAt: string;\n  createdAt: string;\n};\n\nexport type RoleFieldsFragment = {\n  __typename?: \"Role\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  isDefault: boolean;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type ListOrganizationMembershipsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  roleSlug?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListOrganizationMembershipsQuery = {\n  __typename?: \"Query\";\n  organizationMemberships: {\n    __typename?: \"OrganizationMemberList\";\n    data: Array<{\n      __typename?: \"OrganizationMember\";\n      id: string;\n      email: string;\n      emailVerified: boolean;\n      firstName?: string | null;\n      lastName?: string | null;\n      profilePictureUrl?: string | null;\n      status: OrganizationMemberStatus;\n      lastActivityAt?: string | null;\n      createdAt: string;\n      actions: Array<OrganizationMemberAction>;\n      isCurrentUser: boolean;\n      isDirectoryManaged: boolean;\n      roles: Array<{\n        __typename?: \"OrganizationMemberRole\";\n        slug: string;\n        name: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListRolesQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type ListRolesQuery = {\n  __typename?: \"Query\";\n  roles: {\n    __typename?: \"RolesResult\";\n    multipleRolesEnabled: boolean;\n    roles: Array<{\n      __typename?: \"Role\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      isDefault: boolean;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n  };\n};\n\nexport type InviteUserMutationVariables = Exact<{\n  input: InviteUserInput;\n}>;\n\nexport type InviteUserMutation = {\n  __typename?: \"Mutation\";\n  inviteUser:\n    | { __typename: \"InvalidInvitationExpiry\" }\n    | { __typename: \"InvalidInviteeEmail\" }\n    | { __typename: \"InvalidInviteeRole\" }\n    | { __typename: \"InviteeAlreadyInvited\" }\n    | { __typename: \"InviteeAlreadyMember\" }\n    | { __typename: \"InviteeEmailNotDeliverable\" }\n    | { __typename: \"OrganizationBlockedFromSendingInvites\" }\n    | {\n        __typename: \"UserInvited\";\n        invitation: {\n          __typename?: \"OrganizationInvitation\";\n          id: string;\n          email: string;\n          status: OrganizationInvitationStatus;\n          roleSlug?: string | null;\n          expiresAt: string;\n          createdAt: string;\n        };\n      };\n};\n\nexport type UpdateMemberRoleMutationVariables = Exact<{\n  input: UpdateMemberRoleInput;\n}>;\n\nexport type UpdateMemberRoleMutation = {\n  __typename?: \"Mutation\";\n  updateMemberRole:\n    | { __typename: \"MemberNotFound\" }\n    | {\n        __typename: \"MemberRoleUpdated\";\n        member: {\n          __typename?: \"OrganizationMember\";\n          id: string;\n          email: string;\n          emailVerified: boolean;\n          firstName?: string | null;\n          lastName?: string | null;\n          profilePictureUrl?: string | null;\n          status: OrganizationMemberStatus;\n          lastActivityAt?: string | null;\n          createdAt: string;\n          actions: Array<OrganizationMemberAction>;\n          isCurrentUser: boolean;\n          isDirectoryManaged: boolean;\n          roles: Array<{\n            __typename?: \"OrganizationMemberRole\";\n            slug: string;\n            name: string;\n          }>;\n        };\n      }\n    | { __typename: \"RoleNotFound\"; roleSlugs: Array<string> };\n};\n\nexport type RemoveMemberMutationVariables = Exact<{\n  input: RemoveMemberInput;\n}>;\n\nexport type RemoveMemberMutation = {\n  __typename?: \"Mutation\";\n  removeMember:\n    | { __typename: \"MemberIsManagedByDirectory\" }\n    | { __typename: \"MemberNotFound\" }\n    | { __typename: \"MemberRemoved\"; userId: string };\n};\n\nexport type ResendInvitationMutationVariables = Exact<{\n  input: ResendInvitationInput;\n}>;\n\nexport type ResendInvitationMutation = {\n  __typename?: \"Mutation\";\n  resendInvitation:\n    | {\n        __typename: \"InvitationResent\";\n        invitation: {\n          __typename?: \"OrganizationInvitation\";\n          id: string;\n          email: string;\n          status: OrganizationInvitationStatus;\n          roleSlug?: string | null;\n          expiresAt: string;\n          createdAt: string;\n        };\n      }\n    | { __typename: \"InviteeAlreadyAccepted\" }\n    | { __typename: \"InviteeEmailNotDeliverable\" }\n    | { __typename: \"ResendInvitationNotFound\" };\n};\n\nexport type RevokeInvitationMutationVariables = Exact<{\n  input: RevokeInvitationInput;\n}>;\n\nexport type RevokeInvitationMutation = {\n  __typename?: \"Mutation\";\n  revokeInvitation:\n    | { __typename: \"InvitationNotFound\" }\n    | { __typename: \"InvitationNotPending\" }\n    | {\n        __typename: \"InvitationRevoked\";\n        invitation: {\n          __typename?: \"OrganizationInvitation\";\n          id: string;\n          email: string;\n          status: OrganizationInvitationStatus;\n          roleSlug?: string | null;\n          expiresAt: string;\n          createdAt: string;\n        };\n      };\n};\n\nexport type ListUserOrganizationsQueryVariables = Exact<{\n  [key: string]: never;\n}>;\n\nexport type ListUserOrganizationsQuery = {\n  __typename?: \"Query\";\n  organizations: Array<{\n    __typename?: \"UserOrganization\";\n    id: string;\n    name: string;\n    isCurrent: boolean;\n  }>;\n};\n\nexport type DirectoryFieldsFragment = {\n  __typename?: \"Directory\";\n  id: string;\n  name: string;\n  organizationId: string;\n  externalKey: string;\n  state: string;\n  type: string;\n  lastSyncRunAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  metadata: {\n    __typename?: \"DirectoryMetadata\";\n    groups: number;\n    users: { __typename?: \"DirectoryUsersMetadata\"; active: number };\n  };\n};\n\nexport type ListDirectoryConnectionsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListDirectoryConnectionsQuery = {\n  __typename?: \"Query\";\n  directoryConnections: {\n    __typename?: \"DirectoryList\";\n    data: Array<{\n      __typename?: \"Directory\";\n      id: string;\n      name: string;\n      organizationId: string;\n      externalKey: string;\n      state: string;\n      type: string;\n      lastSyncRunAt?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      metadata: {\n        __typename?: \"DirectoryMetadata\";\n        groups: number;\n        users: { __typename?: \"DirectoryUsersMetadata\"; active: number };\n      };\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type GetDirectoryConnectionQueryVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type GetDirectoryConnectionQuery = {\n  __typename?: \"Query\";\n  directoryConnection: {\n    __typename?: \"Directory\";\n    id: string;\n    name: string;\n    organizationId: string;\n    externalKey: string;\n    state: string;\n    type: string;\n    lastSyncRunAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    metadata: {\n      __typename?: \"DirectoryMetadata\";\n      groups: number;\n      users: { __typename?: \"DirectoryUsersMetadata\"; active: number };\n    };\n  };\n};\n\nexport type ConnectionFieldsFragment = {\n  __typename?: \"Connection\";\n  id: string;\n  name: string;\n  organizationId?: string | null;\n  type: ConnectionType;\n  providerTag: SsoProviderTag;\n  state: ConnectionState;\n  setupComplete: boolean;\n  createdAt: string;\n  updatedAt: string;\n  lastSession?: {\n    __typename?: \"SsoConnectionSession\";\n    id: string;\n    createdAt: string;\n    state: SsoSessionState;\n  } | null;\n  latestExpiringCertificate?: {\n    __typename?: \"X509Certificate\";\n    id: string;\n    notAfter?: string | null;\n  } | null;\n  latestExpiredCertificate?: {\n    __typename?: \"X509Certificate\";\n    id: string;\n    notAfter?: string | null;\n  } | null;\n};\n\nexport type ListSsoConnectionsQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type ListSsoConnectionsQuery = {\n  __typename?: \"Query\";\n  ssoConnections: Array<{\n    __typename?: \"Connection\";\n    id: string;\n    name: string;\n    organizationId?: string | null;\n    type: ConnectionType;\n    providerTag: SsoProviderTag;\n    state: ConnectionState;\n    setupComplete: boolean;\n    createdAt: string;\n    updatedAt: string;\n    lastSession?: {\n      __typename?: \"SsoConnectionSession\";\n      id: string;\n      createdAt: string;\n      state: SsoSessionState;\n    } | null;\n    latestExpiringCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n    latestExpiredCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n  }>;\n};\n\nexport type GetSsoConnectionQueryVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type GetSsoConnectionQuery = {\n  __typename?: \"Query\";\n  ssoConnection: {\n    __typename?: \"Connection\";\n    id: string;\n    name: string;\n    organizationId?: string | null;\n    type: ConnectionType;\n    providerTag: SsoProviderTag;\n    state: ConnectionState;\n    setupComplete: boolean;\n    createdAt: string;\n    updatedAt: string;\n    lastSession?: {\n      __typename?: \"SsoConnectionSession\";\n      id: string;\n      createdAt: string;\n      state: SsoSessionState;\n    } | null;\n    latestExpiringCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n    latestExpiredCertificate?: {\n      __typename?: \"X509Certificate\";\n      id: string;\n      notAfter?: string | null;\n    } | null;\n  };\n};\n\nexport type DataProviderConfigFieldFieldsFragment = {\n  __typename?: \"DataProviderConfigField\";\n  key: string;\n  label: string;\n  required: boolean;\n  scope: string;\n  description?: string | null;\n  example?: string | null;\n  pattern?: string | null;\n  patternFlags?: string | null;\n  order?: number | null;\n  secret?: boolean | null;\n  default?: string | null;\n};\n\nexport type DataProviderFieldsFragment = {\n  __typename?: \"DataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  authMethods: Array<string>;\n  credentialsType: string;\n  scopes?: Array<string> | null;\n  state: string;\n  enabled: boolean;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  capabilities: {\n    __typename?: \"DataProviderCapabilities\";\n    canAddConnection: boolean;\n    addConnectionMethods: Array<string>;\n  };\n  configFields: Array<{\n    __typename?: \"DataProviderConfigField\";\n    key: string;\n    label: string;\n    required: boolean;\n    scope: string;\n    description?: string | null;\n    example?: string | null;\n    pattern?: string | null;\n    patternFlags?: string | null;\n    order?: number | null;\n    secret?: boolean | null;\n    default?: string | null;\n  }>;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type DataProviderConnectionFieldsFragment = {\n  __typename?: \"DataProviderConnection\";\n  id: string;\n  dataProviderId: string;\n  dataProviderSlug: string;\n  connectionRole: DataInstallationConnectionRole;\n  accountIdentifier?: string | null;\n  accountDisplayName?: string | null;\n  authMethod: string;\n  scopes: Array<string>;\n  state: string;\n  availability: string;\n  apiKeyLast4?: string | null;\n  clientId?: string | null;\n  clientSecretLast4?: string | null;\n  userId?: string | null;\n  organizationId?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  capabilities?: {\n    __typename?: \"DataProviderConnectionCapabilities\";\n    canReauthorize: boolean;\n    canUpdateCredentials: boolean;\n  } | null;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type ListDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListDataProvidersQuery = {\n  __typename?: \"Query\";\n  dataProviders: {\n    __typename?: \"DataProviderList\";\n    data: Array<{\n      __typename?: \"DataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      authMethods: Array<string>;\n      credentialsType: string;\n      scopes?: Array<string> | null;\n      state: string;\n      enabled: boolean;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities: {\n        __typename?: \"DataProviderCapabilities\";\n        canAddConnection: boolean;\n        addConnectionMethods: Array<string>;\n      };\n      configFields: Array<{\n        __typename?: \"DataProviderConfigField\";\n        key: string;\n        label: string;\n        required: boolean;\n        scope: string;\n        description?: string | null;\n        example?: string | null;\n        pattern?: string | null;\n        patternFlags?: string | null;\n        order?: number | null;\n        secret?: boolean | null;\n        default?: string | null;\n      }>;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListDataProviderConnectionsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListDataProviderConnectionsQuery = {\n  __typename?: \"Query\";\n  dataProviderConnections: {\n    __typename?: \"DataProviderConnectionList\";\n    data: Array<{\n      __typename?: \"DataProviderConnection\";\n      id: string;\n      dataProviderId: string;\n      dataProviderSlug: string;\n      connectionRole: DataInstallationConnectionRole;\n      accountIdentifier?: string | null;\n      accountDisplayName?: string | null;\n      authMethod: string;\n      scopes: Array<string>;\n      state: string;\n      availability: string;\n      apiKeyLast4?: string | null;\n      clientId?: string | null;\n      clientSecretLast4?: string | null;\n      userId?: string | null;\n      organizationId?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities?: {\n        __typename?: \"DataProviderConnectionCapabilities\";\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n      } | null;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type CreateDataProviderConnectionMutationVariables = Exact<{\n  input: CreateDataProviderConnectionInput;\n}>;\n\nexport type CreateDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  createDataProviderConnection: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n};\n\nexport type DeleteDataProviderConnectionMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  deleteDataProviderConnection: string;\n};\n\nexport type SetDataProviderEnabledMutationVariables = Exact<{\n  input: SetDataProviderEnabledInput;\n}>;\n\nexport type SetDataProviderEnabledMutation = {\n  __typename?: \"Mutation\";\n  setDataProviderEnabled: {\n    __typename?: \"DataProvider\";\n    id: string;\n    slug: string;\n    name: string;\n    description?: string | null;\n    integrationType: string;\n    authMethods: Array<string>;\n    credentialsType: string;\n    scopes?: Array<string> | null;\n    state: string;\n    enabled: boolean;\n    iconSlug?: string | null;\n    iconUrl?: string | null;\n    iconDarkUrl?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities: {\n      __typename?: \"DataProviderCapabilities\";\n      canAddConnection: boolean;\n      addConnectionMethods: Array<string>;\n    };\n    configFields: Array<{\n      __typename?: \"DataProviderConfigField\";\n      key: string;\n      label: string;\n      required: boolean;\n      scope: string;\n      description?: string | null;\n      example?: string | null;\n      pattern?: string | null;\n      patternFlags?: string | null;\n      order?: number | null;\n      secret?: boolean | null;\n      default?: string | null;\n    }>;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n};\n\ntype DataProviderAuthorizationResultFields_DataProviderAuthorization_Fragment =\n  {\n    __typename: \"DataProviderAuthorization\";\n    url: string;\n    state: string;\n    redirectToken: string;\n    handoffToken?: string | null;\n  };\n\ntype DataProviderAuthorizationResultFields_DataProviderAuthorizationUnavailable_Fragment =\n  { __typename: \"DataProviderAuthorizationUnavailable\"; message: string };\n\ntype DataProviderAuthorizationResultFields_DataProviderConfigInvalid_Fragment =\n  { __typename: \"DataProviderConfigInvalid\"; message: string };\n\nexport type DataProviderAuthorizationResultFieldsFragment =\n  | DataProviderAuthorizationResultFields_DataProviderAuthorization_Fragment\n  | DataProviderAuthorizationResultFields_DataProviderAuthorizationUnavailable_Fragment\n  | DataProviderAuthorizationResultFields_DataProviderConfigInvalid_Fragment;\n\nexport type CreateDataProviderAuthorizationMutationVariables = Exact<{\n  input: CreateDataProviderAuthorizationInput;\n}>;\n\nexport type CreateDataProviderAuthorizationMutation = {\n  __typename?: \"Mutation\";\n  createDataProviderAuthorization:\n    | {\n        __typename: \"DataProviderAuthorization\";\n        url: string;\n        state: string;\n        redirectToken: string;\n        handoffToken?: string | null;\n      }\n    | { __typename: \"DataProviderAuthorizationUnavailable\"; message: string }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string };\n};\n\nexport type CreateOrganizationDataProviderAuthorizationMutationVariables =\n  Exact<{\n    input: CreateOrganizationDataProviderAuthorizationInput;\n  }>;\n\nexport type CreateOrganizationDataProviderAuthorizationMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationDataProviderAuthorization:\n    | {\n        __typename: \"DataProviderAuthorization\";\n        url: string;\n        state: string;\n        redirectToken: string;\n        handoffToken?: string | null;\n      }\n    | { __typename: \"DataProviderAuthorizationUnavailable\"; message: string }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string };\n};\n\nexport type DataProviderAuthorizationStatusQueryVariables = Exact<{\n  dataProviderId: Scalars[\"ID\"][\"input\"];\n  state: Scalars[\"String\"][\"input\"];\n}>;\n\nexport type DataProviderAuthorizationStatusQuery = {\n  __typename?: \"Query\";\n  dataProviderAuthorizationStatus: {\n    __typename?: \"DataProviderAuthorizationStatus\";\n    state: string;\n    connecting: boolean;\n  };\n};\n\nexport type ConnectDataProviderWithClientCredentialsMutationVariables = Exact<{\n  input: ConnectDataProviderWithClientCredentialsInput;\n}>;\n\nexport type ConnectDataProviderWithClientCredentialsMutation = {\n  __typename?: \"Mutation\";\n  connectDataProviderWithClientCredentials:\n    | {\n        __typename: \"DataProviderAuthMethodUnsupported\";\n        authMethod: string;\n        supportedAuthMethods: Array<string>;\n      }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConnected\";\n        connection: {\n          __typename?: \"DataProviderConnection\";\n          id: string;\n          dataProviderId: string;\n          dataProviderSlug: string;\n          connectionRole: DataInstallationConnectionRole;\n          accountIdentifier?: string | null;\n          accountDisplayName?: string | null;\n          authMethod: string;\n          scopes: Array<string>;\n          state: string;\n          availability: string;\n          apiKeyLast4?: string | null;\n          clientId?: string | null;\n          clientSecretLast4?: string | null;\n          userId?: string | null;\n          organizationId?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          capabilities?: {\n            __typename?: \"DataProviderConnectionCapabilities\";\n            canReauthorize: boolean;\n            canUpdateCredentials: boolean;\n          } | null;\n          config: Array<{\n            __typename?: \"DataProviderConfigEntry\";\n            name: string;\n            value: string;\n          }>;\n        };\n      }\n    | {\n        __typename: \"DataProviderConnectionAuthMethodConflict\";\n        existingAuthMethod: string;\n      };\n};\n\nexport type DataProviderConfigurationFieldsFragment = {\n  __typename?: \"DataProviderConfiguration\";\n  dataProviderId: string;\n  dataProviderSlug: string;\n  organizationId: string;\n  enabled: boolean;\n  hasCredentials: boolean;\n  scopes?: Array<string> | null;\n  availableScopes: Array<string>;\n  updatedAt: string;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type SetDataProviderConfigurationMutationVariables = Exact<{\n  input: SetDataProviderConfigurationInput;\n}>;\n\nexport type SetDataProviderConfigurationMutation = {\n  __typename?: \"Mutation\";\n  setDataProviderConfiguration:\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConfiguration\";\n        dataProviderId: string;\n        dataProviderSlug: string;\n        organizationId: string;\n        enabled: boolean;\n        hasCredentials: boolean;\n        scopes?: Array<string> | null;\n        availableScopes: Array<string>;\n        updatedAt: string;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      };\n};\n\nexport type ListOrganizationDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListOrganizationDataProvidersQuery = {\n  __typename?: \"Query\";\n  organizationDataProviders: {\n    __typename?: \"OrganizationDataProviderList\";\n    data: Array<{\n      __typename?: \"OrganizationDataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      authMethods: Array<string>;\n      credentialsType: string;\n      scopes?: Array<string> | null;\n      defaultScopes: Array<string>;\n      availableScopes: Array<string>;\n      state: string;\n      enabled: boolean;\n      disabledSource?: string | null;\n      configured: boolean;\n      hasCredentials: boolean;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      credentials: {\n        __typename?: \"DataProviderCredentials\";\n        clientId?: string | null;\n        credentialsType: string;\n        hasCredentials: boolean;\n        redactedClientSecret?: string | null;\n        redirectUri: string;\n      };\n      capabilities: {\n        __typename?: \"OrganizationDataProviderCapabilities\";\n        canConfigure: boolean;\n        canConnect: boolean;\n        canDisconnect: boolean;\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n        canAddConnection: boolean;\n        addConnectionMethods: Array<string>;\n      };\n      configFields: Array<{\n        __typename?: \"DataProviderConfigField\";\n        key: string;\n        label: string;\n        required: boolean;\n        scope: string;\n        description?: string | null;\n        example?: string | null;\n        pattern?: string | null;\n        patternFlags?: string | null;\n        order?: number | null;\n        secret?: boolean | null;\n        default?: string | null;\n      }>;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n      connection?: {\n        __typename?: \"DataProviderConnection\";\n        id: string;\n        dataProviderId: string;\n        dataProviderSlug: string;\n        connectionRole: DataInstallationConnectionRole;\n        accountIdentifier?: string | null;\n        accountDisplayName?: string | null;\n        authMethod: string;\n        scopes: Array<string>;\n        state: string;\n        availability: string;\n        apiKeyLast4?: string | null;\n        clientId?: string | null;\n        clientSecretLast4?: string | null;\n        userId?: string | null;\n        organizationId?: string | null;\n        createdAt: string;\n        updatedAt: string;\n        capabilities?: {\n          __typename?: \"DataProviderConnectionCapabilities\";\n          canReauthorize: boolean;\n          canUpdateCredentials: boolean;\n        } | null;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      } | null;\n      connectedAccounts: Array<{\n        __typename?: \"DataProviderConnection\";\n        id: string;\n        dataProviderId: string;\n        dataProviderSlug: string;\n        connectionRole: DataInstallationConnectionRole;\n        accountIdentifier?: string | null;\n        accountDisplayName?: string | null;\n        authMethod: string;\n        scopes: Array<string>;\n        state: string;\n        availability: string;\n        apiKeyLast4?: string | null;\n        clientId?: string | null;\n        clientSecretLast4?: string | null;\n        userId?: string | null;\n        organizationId?: string | null;\n        createdAt: string;\n        updatedAt: string;\n        capabilities?: {\n          __typename?: \"DataProviderConnectionCapabilities\";\n          canReauthorize: boolean;\n          canUpdateCredentials: boolean;\n        } | null;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type OrganizationDataProviderFieldsFragment = {\n  __typename?: \"OrganizationDataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  authMethods: Array<string>;\n  credentialsType: string;\n  scopes?: Array<string> | null;\n  defaultScopes: Array<string>;\n  availableScopes: Array<string>;\n  state: string;\n  enabled: boolean;\n  disabledSource?: string | null;\n  configured: boolean;\n  hasCredentials: boolean;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  credentials: {\n    __typename?: \"DataProviderCredentials\";\n    clientId?: string | null;\n    credentialsType: string;\n    hasCredentials: boolean;\n    redactedClientSecret?: string | null;\n    redirectUri: string;\n  };\n  capabilities: {\n    __typename?: \"OrganizationDataProviderCapabilities\";\n    canConfigure: boolean;\n    canConnect: boolean;\n    canDisconnect: boolean;\n    canReauthorize: boolean;\n    canUpdateCredentials: boolean;\n    canAddConnection: boolean;\n    addConnectionMethods: Array<string>;\n  };\n  configFields: Array<{\n    __typename?: \"DataProviderConfigField\";\n    key: string;\n    label: string;\n    required: boolean;\n    scope: string;\n    description?: string | null;\n    example?: string | null;\n    pattern?: string | null;\n    patternFlags?: string | null;\n    order?: number | null;\n    secret?: boolean | null;\n    default?: string | null;\n  }>;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n  connection?: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  } | null;\n  connectedAccounts: Array<{\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  }>;\n};\n\nexport type SetOrganizationDataProviderConfigurationMutationVariables = Exact<{\n  input: SetOrganizationDataProviderConfigurationInput;\n}>;\n\nexport type SetOrganizationDataProviderConfigurationMutation = {\n  __typename?: \"Mutation\";\n  setOrganizationDataProviderConfiguration:\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConfiguration\";\n        dataProviderId: string;\n        dataProviderSlug: string;\n        organizationId: string;\n        enabled: boolean;\n        hasCredentials: boolean;\n        scopes?: Array<string> | null;\n        availableScopes: Array<string>;\n        updatedAt: string;\n        config: Array<{\n          __typename?: \"DataProviderConfigEntry\";\n          name: string;\n          value: string;\n        }>;\n      };\n};\n\nexport type CreateOrganizationDataProviderConnectionMutationVariables = Exact<{\n  input: CreateOrganizationDataProviderConnectionInput;\n}>;\n\nexport type CreateOrganizationDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationDataProviderConnection: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n};\n\nexport type ConnectOrganizationDataProviderWithClientCredentialsMutationVariables =\n  Exact<{\n    input: ConnectOrganizationDataProviderWithClientCredentialsInput;\n  }>;\n\nexport type ConnectOrganizationDataProviderWithClientCredentialsMutation = {\n  __typename?: \"Mutation\";\n  connectOrganizationDataProviderWithClientCredentials:\n    | {\n        __typename: \"DataProviderAuthMethodUnsupported\";\n        authMethod: string;\n        supportedAuthMethods: Array<string>;\n      }\n    | { __typename: \"DataProviderConfigInvalid\"; message: string }\n    | {\n        __typename: \"DataProviderConnected\";\n        connection: {\n          __typename?: \"DataProviderConnection\";\n          id: string;\n          dataProviderId: string;\n          dataProviderSlug: string;\n          connectionRole: DataInstallationConnectionRole;\n          accountIdentifier?: string | null;\n          accountDisplayName?: string | null;\n          authMethod: string;\n          scopes: Array<string>;\n          state: string;\n          availability: string;\n          apiKeyLast4?: string | null;\n          clientId?: string | null;\n          clientSecretLast4?: string | null;\n          userId?: string | null;\n          organizationId?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          capabilities?: {\n            __typename?: \"DataProviderConnectionCapabilities\";\n            canReauthorize: boolean;\n            canUpdateCredentials: boolean;\n          } | null;\n          config: Array<{\n            __typename?: \"DataProviderConfigEntry\";\n            name: string;\n            value: string;\n          }>;\n        };\n      }\n    | {\n        __typename: \"DataProviderConnectionAuthMethodConflict\";\n        existingAuthMethod: string;\n      };\n};\n\nexport type DeleteOrganizationDataProviderConnectionMutationVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteOrganizationDataProviderConnectionMutation = {\n  __typename?: \"Mutation\";\n  deleteOrganizationDataProviderConnection: string;\n};\n\nexport type DataProviderConnectionLabelResultFieldsFragment = {\n  __typename?: \"UpdateDataProviderConnectionLabelResult\";\n  connection: {\n    __typename?: \"DataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    connectionRole: DataInstallationConnectionRole;\n    accountIdentifier?: string | null;\n    accountDisplayName?: string | null;\n    authMethod: string;\n    scopes: Array<string>;\n    state: string;\n    availability: string;\n    apiKeyLast4?: string | null;\n    clientId?: string | null;\n    clientSecretLast4?: string | null;\n    userId?: string | null;\n    organizationId?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    capabilities?: {\n      __typename?: \"DataProviderConnectionCapabilities\";\n      canReauthorize: boolean;\n      canUpdateCredentials: boolean;\n    } | null;\n    config: Array<{\n      __typename?: \"DataProviderConfigEntry\";\n      name: string;\n      value: string;\n    }>;\n  };\n  warnings: Array<{\n    __typename?: \"DataProviderConnectionLabelWarning\";\n    code: string;\n    message: string;\n  }>;\n};\n\nexport type UpdateDataProviderConnectionLabelMutationVariables = Exact<{\n  input: UpdateDataProviderConnectionLabelInput;\n}>;\n\nexport type UpdateDataProviderConnectionLabelMutation = {\n  __typename?: \"Mutation\";\n  updateDataProviderConnectionLabel: {\n    __typename?: \"UpdateDataProviderConnectionLabelResult\";\n    connection: {\n      __typename?: \"DataProviderConnection\";\n      id: string;\n      dataProviderId: string;\n      dataProviderSlug: string;\n      connectionRole: DataInstallationConnectionRole;\n      accountIdentifier?: string | null;\n      accountDisplayName?: string | null;\n      authMethod: string;\n      scopes: Array<string>;\n      state: string;\n      availability: string;\n      apiKeyLast4?: string | null;\n      clientId?: string | null;\n      clientSecretLast4?: string | null;\n      userId?: string | null;\n      organizationId?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities?: {\n        __typename?: \"DataProviderConnectionCapabilities\";\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n      } | null;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    };\n    warnings: Array<{\n      __typename?: \"DataProviderConnectionLabelWarning\";\n      code: string;\n      message: string;\n    }>;\n  };\n};\n\nexport type UpdateOrganizationDataProviderConnectionLabelMutationVariables =\n  Exact<{\n    input: UpdateDataProviderConnectionLabelInput;\n  }>;\n\nexport type UpdateOrganizationDataProviderConnectionLabelMutation = {\n  __typename?: \"Mutation\";\n  updateOrganizationDataProviderConnectionLabel: {\n    __typename?: \"UpdateDataProviderConnectionLabelResult\";\n    connection: {\n      __typename?: \"DataProviderConnection\";\n      id: string;\n      dataProviderId: string;\n      dataProviderSlug: string;\n      connectionRole: DataInstallationConnectionRole;\n      accountIdentifier?: string | null;\n      accountDisplayName?: string | null;\n      authMethod: string;\n      scopes: Array<string>;\n      state: string;\n      availability: string;\n      apiKeyLast4?: string | null;\n      clientId?: string | null;\n      clientSecretLast4?: string | null;\n      userId?: string | null;\n      organizationId?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      capabilities?: {\n        __typename?: \"DataProviderConnectionCapabilities\";\n        canReauthorize: boolean;\n        canUpdateCredentials: boolean;\n      } | null;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    };\n    warnings: Array<{\n      __typename?: \"DataProviderConnectionLabelWarning\";\n      code: string;\n      message: string;\n    }>;\n  };\n};\n\nexport type RegisterPasskeyMutationVariables = Exact<{\n  input: RegisterPasskeyInput;\n}>;\n\nexport type RegisterPasskeyMutation = {\n  __typename?: \"Mutation\";\n  registerPasskey:\n    | { __typename: \"ElevatedAccessTokenExpired\"; message: string }\n    | { __typename: \"ElevatedAccessTokenInvalid\"; message: string }\n    | {\n        __typename: \"PasskeyRegistrationOptions\";\n        challengeId: string;\n        options: any;\n      };\n};\n\nexport type VerifyPasskeyMutationVariables = Exact<{\n  input: VerifyPasskeyInput;\n}>;\n\nexport type VerifyPasskeyMutation = {\n  __typename?: \"Mutation\";\n  verifyPasskey:\n    | { __typename: \"ElevatedAccessTokenExpired\"; message: string }\n    | { __typename: \"ElevatedAccessTokenInvalid\"; message: string }\n    | { __typename: \"PasskeyChallengeNotFound\"; _placeholder: boolean }\n    | { __typename: \"PasskeyVerificationFailed\"; _placeholder: boolean }\n    | { __typename: \"PasskeyVerified\"; success: boolean };\n};\n\nexport type DeletePasskeyMutationVariables = Exact<{\n  input: DeletePasskeyInput;\n}>;\n\nexport type DeletePasskeyMutation = {\n  __typename?: \"Mutation\";\n  deletePasskey:\n    | { __typename: \"ElevatedAccessTokenExpired\"; message: string }\n    | { __typename: \"ElevatedAccessTokenInvalid\"; message: string }\n    | { __typename: \"PasskeyDeleted\"; success: boolean }\n    | { __typename: \"PasskeyNotFound\"; _placeholder: boolean };\n};\n\nexport type CreateAdminPortalLinkMutationVariables = Exact<{\n  intent: AdminPortalLinkIntent;\n}>;\n\nexport type CreateAdminPortalLinkMutation = {\n  __typename?: \"Mutation\";\n  createAdminPortalLink: {\n    __typename?: \"AdminPortalLink\";\n    link: string;\n    intent: AdminPortalLinkIntent;\n    expiresAt: string;\n  };\n};\n\nexport type AuditLogStreamQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type AuditLogStreamQuery = {\n  __typename?: \"Query\";\n  auditLogStream?: {\n    __typename?: \"AuditLogStream\";\n    id: string;\n    auditLogTrailId: string;\n    type: AuditLogStreamType;\n    state: AuditLogStreamState;\n    errorMessage?: string | null;\n    lastSyncedEventId?: string | null;\n  } | null;\n};\n\nexport type BrandingQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type BrandingQuery = {\n  __typename?: \"Query\";\n  branding: {\n    __typename?: \"Branding\";\n    displayName: string;\n    logoLightPath?: string | null;\n    logoDarkPath?: string | null;\n    logoLightIconPath?: string | null;\n    logoDarkIconPath?: string | null;\n  };\n};\n\nexport type AuthKitSettingsQueryVariables = Exact<{ [key: string]: never }>;\n\nexport type AuthKitSettingsQuery = {\n  __typename?: \"Query\";\n  authkitSettings: { __typename?: \"AuthKitSettings\"; origin: string };\n};\n\nexport type ListPermissionsQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListPermissionsQuery = {\n  __typename?: \"Query\";\n  permissions: {\n    __typename?: \"PermissionList\";\n    data: Array<{\n      __typename?: \"Permission\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      system: boolean;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListApiKeyPermissionsQueryVariables = Exact<{\n  apiKeyOwnerType: ApiKeyOwnerType;\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListApiKeyPermissionsQuery = {\n  __typename?: \"Query\";\n  permissions: {\n    __typename?: \"PermissionList\";\n    data: Array<{\n      __typename?: \"Permission\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type GetOrganizationDomainQueryVariables = Exact<{\n  id: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type GetOrganizationDomainQuery = {\n  __typename?: \"Query\";\n  organizationDomain: {\n    __typename?: \"OrganizationDomain\";\n    id: string;\n    organizationId: string;\n    domain: string;\n    subdomain?: string | null;\n    state: OrganizationDomainState;\n    verificationPrefix?: string | null;\n    verificationToken?: string | null;\n    nameServer: DomainVerificationNameServer;\n    createdAt: string;\n  };\n};\n\nexport type SharedDataProviderFieldsFragment = {\n  __typename?: \"SharedDataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  connectedAccounts: Array<{\n    __typename?: \"SharedDataProviderConnection\";\n    id: string;\n    dataProviderId: string;\n    dataProviderSlug: string;\n    authMethod: string;\n    connectionRole: DataInstallationConnectionRole;\n    state: string;\n    availability: string;\n    createdAt: string;\n    updatedAt: string;\n  }>;\n};\n\nexport type ListSharedDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  supportsMultipleConnections?: InputMaybe<Scalars[\"Boolean\"][\"input\"]>;\n}>;\n\nexport type ListSharedDataProvidersQuery = {\n  __typename?: \"Query\";\n  sharedDataProviders: {\n    __typename?: \"SharedDataProviderList\";\n    data: Array<{\n      __typename?: \"SharedDataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      connectedAccounts: Array<{\n        __typename?: \"SharedDataProviderConnection\";\n        id: string;\n        dataProviderId: string;\n        dataProviderSlug: string;\n        authMethod: string;\n        connectionRole: DataInstallationConnectionRole;\n        state: string;\n        availability: string;\n        createdAt: string;\n        updatedAt: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ConfigurableDataProviderFieldsFragment = {\n  __typename?: \"ConfigurableDataProvider\";\n  id: string;\n  slug: string;\n  name: string;\n  description?: string | null;\n  integrationType: string;\n  authMethods: Array<string>;\n  credentialsType: string;\n  scopes?: Array<string> | null;\n  defaultScopes: Array<string>;\n  availableScopes: Array<string>;\n  state: string;\n  enabled: boolean;\n  iconSlug?: string | null;\n  iconUrl?: string | null;\n  iconDarkUrl?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  credentials: {\n    __typename?: \"DataProviderCredentials\";\n    clientId?: string | null;\n    credentialsType: string;\n    hasCredentials: boolean;\n    redactedClientSecret?: string | null;\n    redirectUri: string;\n  };\n  configFields: Array<{\n    __typename?: \"DataProviderConfigField\";\n    key: string;\n    label: string;\n    required: boolean;\n    scope: string;\n    description?: string | null;\n    example?: string | null;\n    pattern?: string | null;\n    patternFlags?: string | null;\n    order?: number | null;\n    secret?: boolean | null;\n    default?: string | null;\n  }>;\n  config: Array<{\n    __typename?: \"DataProviderConfigEntry\";\n    name: string;\n    value: string;\n  }>;\n};\n\nexport type ListConfigurableDataProvidersQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n}>;\n\nexport type ListConfigurableDataProvidersQuery = {\n  __typename?: \"Query\";\n  configurableDataProviders: {\n    __typename?: \"ConfigurableDataProviderList\";\n    data: Array<{\n      __typename?: \"ConfigurableDataProvider\";\n      id: string;\n      slug: string;\n      name: string;\n      description?: string | null;\n      integrationType: string;\n      authMethods: Array<string>;\n      credentialsType: string;\n      scopes?: Array<string> | null;\n      defaultScopes: Array<string>;\n      availableScopes: Array<string>;\n      state: string;\n      enabled: boolean;\n      iconSlug?: string | null;\n      iconUrl?: string | null;\n      iconDarkUrl?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      credentials: {\n        __typename?: \"DataProviderCredentials\";\n        clientId?: string | null;\n        credentialsType: string;\n        hasCredentials: boolean;\n        redactedClientSecret?: string | null;\n        redirectUri: string;\n      };\n      configFields: Array<{\n        __typename?: \"DataProviderConfigField\";\n        key: string;\n        label: string;\n        required: boolean;\n        scope: string;\n        description?: string | null;\n        example?: string | null;\n        pattern?: string | null;\n        patternFlags?: string | null;\n        order?: number | null;\n        secret?: boolean | null;\n        default?: string | null;\n      }>;\n      config: Array<{\n        __typename?: \"DataProviderConfigEntry\";\n        name: string;\n        value: string;\n      }>;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type OrganizationApiKeyFieldsFragment = {\n  __typename?: \"OrganizationApiKey\";\n  id: string;\n  name: string;\n  obfuscatedValue: string;\n  permissions: Array<string>;\n  lastUsedAt?: string | null;\n  expiresAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type UserApiKeyFieldsFragment = {\n  __typename?: \"UserApiKey\";\n  id: string;\n  name: string;\n  obfuscatedValue: string;\n  permissions: Array<string>;\n  lastUsedAt?: string | null;\n  expiresAt?: string | null;\n  createdAt: string;\n  updatedAt: string;\n  owner: {\n    __typename?: \"UserApiKeyOwner\";\n    id: string;\n    email: string;\n    firstName?: string | null;\n    lastName?: string | null;\n    displayName: string;\n  };\n};\n\nexport type ListOrganizationApiKeysQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListOrganizationApiKeysQuery = {\n  __typename?: \"Query\";\n  organizationApiKeys: {\n    __typename?: \"OrganizationApiKeyList\";\n    data: Array<{\n      __typename?: \"OrganizationApiKey\";\n      id: string;\n      name: string;\n      obfuscatedValue: string;\n      permissions: Array<string>;\n      lastUsedAt?: string | null;\n      expiresAt?: string | null;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type ListUserApiKeysQueryVariables = Exact<{\n  after?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  before?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n  limit?: InputMaybe<Scalars[\"Int\"][\"input\"]>;\n  order?: InputMaybe<PaginationOrder>;\n  search?: InputMaybe<Scalars[\"String\"][\"input\"]>;\n}>;\n\nexport type ListUserApiKeysQuery = {\n  __typename?: \"Query\";\n  userApiKeys: {\n    __typename?: \"UserApiKeyList\";\n    data: Array<{\n      __typename?: \"UserApiKey\";\n      id: string;\n      name: string;\n      obfuscatedValue: string;\n      permissions: Array<string>;\n      lastUsedAt?: string | null;\n      expiresAt?: string | null;\n      createdAt: string;\n      updatedAt: string;\n      owner: {\n        __typename?: \"UserApiKeyOwner\";\n        id: string;\n        email: string;\n        firstName?: string | null;\n        lastName?: string | null;\n        displayName: string;\n      };\n    }>;\n    listMetadata: {\n      __typename?: \"ListMetadata\";\n      after?: string | null;\n      before?: string | null;\n    };\n  };\n};\n\nexport type CreateOrganizationApiKeyMutationVariables = Exact<{\n  input: CreateApiKeyInput;\n}>;\n\nexport type CreateOrganizationApiKeyMutation = {\n  __typename?: \"Mutation\";\n  createOrganizationApiKey:\n    | {\n        __typename: \"ApiKeyPermissionsNotHeld\";\n        message: string;\n        unheldPermissions: Array<string>;\n      }\n    | {\n        __typename: \"ApiKeyPermissionsUnsupportedForToken\";\n        message: string;\n        requestedPermissions: Array<string>;\n      }\n    | { __typename: \"InvalidApiKeyExpiration\"; message: string }\n    | { __typename: \"InvalidApiKeyName\"; message: string }\n    | {\n        __typename: \"InvalidApiKeyPermissions\";\n        message: string;\n        invalidPermissions: Array<string>;\n      }\n    | {\n        __typename: \"OrganizationApiKeyCreated\";\n        value: string;\n        apiKey: {\n          __typename?: \"OrganizationApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      };\n};\n\nexport type CreateUserApiKeyMutationVariables = Exact<{\n  input: CreateApiKeyInput;\n}>;\n\nexport type CreateUserApiKeyMutation = {\n  __typename?: \"Mutation\";\n  createUserApiKey:\n    | {\n        __typename: \"ApiKeyPermissionsNotHeld\";\n        message: string;\n        unheldPermissions: Array<string>;\n      }\n    | {\n        __typename: \"ApiKeyPermissionsUnsupportedForToken\";\n        message: string;\n        requestedPermissions: Array<string>;\n      }\n    | { __typename: \"InvalidApiKeyExpiration\"; message: string }\n    | { __typename: \"InvalidApiKeyName\"; message: string }\n    | {\n        __typename: \"InvalidApiKeyPermissions\";\n        message: string;\n        invalidPermissions: Array<string>;\n      }\n    | {\n        __typename: \"UserApiKeyCreated\";\n        value: string;\n        apiKey: {\n          __typename?: \"UserApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          owner: {\n            __typename?: \"UserApiKeyOwner\";\n            id: string;\n            email: string;\n            firstName?: string | null;\n            lastName?: string | null;\n            displayName: string;\n          };\n        };\n      };\n};\n\nexport type ExpireOrganizationApiKeyMutationVariables = Exact<{\n  input: ExpireApiKeyInput;\n}>;\n\nexport type ExpireOrganizationApiKeyMutation = {\n  __typename?: \"Mutation\";\n  expireOrganizationApiKey:\n    | { __typename: \"ApiKeyAlreadyExpired\"; apiKeyId: string }\n    | {\n        __typename: \"OrganizationApiKeyExpired\";\n        apiKey: {\n          __typename?: \"OrganizationApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n        };\n      };\n};\n\nexport type ExpireUserApiKeyMutationVariables = Exact<{\n  input: ExpireApiKeyInput;\n}>;\n\nexport type ExpireUserApiKeyMutation = {\n  __typename?: \"Mutation\";\n  expireUserApiKey:\n    | { __typename: \"ApiKeyAlreadyExpired\"; apiKeyId: string }\n    | {\n        __typename: \"UserApiKeyExpired\";\n        apiKey: {\n          __typename?: \"UserApiKey\";\n          id: string;\n          name: string;\n          obfuscatedValue: string;\n          permissions: Array<string>;\n          lastUsedAt?: string | null;\n          expiresAt?: string | null;\n          createdAt: string;\n          updatedAt: string;\n          owner: {\n            __typename?: \"UserApiKeyOwner\";\n            id: string;\n            email: string;\n            firstName?: string | null;\n            lastName?: string | null;\n            displayName: string;\n          };\n        };\n      };\n};\n\nexport type DeleteOrganizationApiKeyMutationVariables = Exact<{\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteOrganizationApiKeyMutation = {\n  __typename?: \"Mutation\";\n  deleteOrganizationApiKey: {\n    __typename?: \"OrganizationApiKey\";\n    id: string;\n    name: string;\n    obfuscatedValue: string;\n    permissions: Array<string>;\n    lastUsedAt?: string | null;\n    expiresAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n  };\n};\n\nexport type DeleteUserApiKeyMutationVariables = Exact<{\n  apiKeyId: Scalars[\"ID\"][\"input\"];\n}>;\n\nexport type DeleteUserApiKeyMutation = {\n  __typename?: \"Mutation\";\n  deleteUserApiKey: {\n    __typename?: \"UserApiKey\";\n    id: string;\n    name: string;\n    obfuscatedValue: string;\n    permissions: Array<string>;\n    lastUsedAt?: string | null;\n    expiresAt?: string | null;\n    createdAt: string;\n    updatedAt: string;\n    owner: {\n      __typename?: \"UserApiKeyOwner\";\n      id: string;\n      email: string;\n      firstName?: string | null;\n      lastName?: string | null;\n      displayName: string;\n    };\n  };\n};\n\nexport const OrganizationDomainFieldsFragmentDoc = `\n    fragment OrganizationDomainFields on OrganizationDomain {\n  id\n  organizationId\n  domain\n  subdomain\n  state\n  verificationPrefix\n  verificationToken\n  nameServer\n  createdAt\n}\n    `;\nexport const UserFieldsFragmentDoc = `\n    fragment UserFields on User {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  mfaEnabled\n  mfaLastUsedAt\n  passwordSet\n  passwordLastUsedAt\n  createdAt\n  updatedAt\n}\n    `;\nexport const ConnectedAccountFieldsFragmentDoc = `\n    fragment ConnectedAccountFields on ConnectedAccount {\n  id\n  provider\n  email\n  firstName\n  lastName\n  profilePictureUrl\n  lastLoginAt\n}\n    `;\nexport const PasswordViolationFieldsFragmentDoc = `\n    fragment PasswordViolationFields on PasswordViolation {\n  code\n  message\n  characterType\n  minimumLength\n  maximumLength\n  allowedSymbols\n  breachOccurrences\n  strengthWarning\n  strengthSuggestions\n}\n    `;\nexport const SessionFieldsFragmentDoc = `\n    fragment SessionFields on Session {\n  id\n  isCurrent\n  ipAddress\n  userAgent\n  organizationId\n  lastActivityAt\n  createdAt\n  updatedAt\n  state {\n    tag\n    expiresAt\n  }\n  currentLocation {\n    cityName\n    countryISOCode\n  }\n}\n    `;\nexport const OrganizationMemberFieldsFragmentDoc = `\n    fragment OrganizationMemberFields on OrganizationMember {\n  id\n  email\n  emailVerified\n  firstName\n  lastName\n  profilePictureUrl\n  status\n  lastActivityAt\n  createdAt\n  actions\n  isCurrentUser\n  isDirectoryManaged\n  roles {\n    slug\n    name\n  }\n}\n    `;\nexport const OrganizationInvitationFieldsFragmentDoc = `\n    fragment OrganizationInvitationFields on OrganizationInvitation {\n  id\n  email\n  status\n  roleSlug\n  expiresAt\n  createdAt\n}\n    `;\nexport const RoleFieldsFragmentDoc = `\n    fragment RoleFields on Role {\n  id\n  slug\n  name\n  description\n  isDefault\n  createdAt\n  updatedAt\n}\n    `;\nexport const DirectoryFieldsFragmentDoc = `\n    fragment DirectoryFields on Directory {\n  id\n  name\n  organizationId\n  externalKey\n  state\n  type\n  lastSyncRunAt\n  metadata {\n    groups\n    users {\n      active\n    }\n  }\n  createdAt\n  updatedAt\n}\n    `;\nexport const ConnectionFieldsFragmentDoc = `\n    fragment ConnectionFields on Connection {\n  id\n  name\n  organizationId\n  type\n  providerTag\n  state\n  setupComplete\n  lastSession {\n    id\n    createdAt\n    state\n  }\n  latestExpiringCertificate {\n    id\n    notAfter\n  }\n  latestExpiredCertificate {\n    id\n    notAfter\n  }\n  createdAt\n  updatedAt\n}\n    `;\nexport const DataProviderConfigFieldFieldsFragmentDoc = `\n    fragment DataProviderConfigFieldFields on DataProviderConfigField {\n  key\n  label\n  required\n  scope\n  description\n  example\n  pattern\n  patternFlags\n  order\n  secret\n  default\n}\n    `;\nexport const DataProviderFieldsFragmentDoc = `\n    fragment DataProviderFields on DataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  capabilities {\n    canAddConnection\n    addConnectionMethods\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    ${DataProviderConfigFieldFieldsFragmentDoc}`;\nexport const DataProviderAuthorizationResultFieldsFragmentDoc = `\n    fragment DataProviderAuthorizationResultFields on CreateDataProviderAuthorizationResult {\n  __typename\n  ... on DataProviderAuthorization {\n    url\n    state\n    redirectToken\n    handoffToken\n  }\n  ... on DataProviderAuthorizationUnavailable {\n    message\n  }\n  ... on DataProviderConfigInvalid {\n    message\n  }\n}\n    `;\nexport const DataProviderConfigurationFieldsFragmentDoc = `\n    fragment DataProviderConfigurationFields on DataProviderConfiguration {\n  dataProviderId\n  dataProviderSlug\n  organizationId\n  enabled\n  hasCredentials\n  scopes\n  availableScopes\n  config {\n    name\n    value\n  }\n  updatedAt\n}\n    `;\nexport const DataProviderConnectionFieldsFragmentDoc = `\n    fragment DataProviderConnectionFields on DataProviderConnection {\n  id\n  dataProviderId\n  dataProviderSlug\n  connectionRole\n  accountIdentifier\n  accountDisplayName\n  authMethod\n  scopes\n  state\n  availability\n  capabilities {\n    canReauthorize\n    canUpdateCredentials\n  }\n  apiKeyLast4\n  clientId\n  clientSecretLast4\n  config {\n    name\n    value\n  }\n  userId\n  organizationId\n  createdAt\n  updatedAt\n}\n    `;\nexport const OrganizationDataProviderFieldsFragmentDoc = `\n    fragment OrganizationDataProviderFields on OrganizationDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  disabledSource\n  configured\n  hasCredentials\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  capabilities {\n    canConfigure\n    canConnect\n    canDisconnect\n    canReauthorize\n    canUpdateCredentials\n    canAddConnection\n    addConnectionMethods\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  connection {\n    ...DataProviderConnectionFields\n  }\n  connectedAccounts {\n    ...DataProviderConnectionFields\n  }\n  createdAt\n  updatedAt\n}\n    ${DataProviderConfigFieldFieldsFragmentDoc}\n${DataProviderConnectionFieldsFragmentDoc}`;\nexport const DataProviderConnectionLabelResultFieldsFragmentDoc = `\n    fragment DataProviderConnectionLabelResultFields on UpdateDataProviderConnectionLabelResult {\n  connection {\n    ...DataProviderConnectionFields\n  }\n  warnings {\n    code\n    message\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const SharedDataProviderFieldsFragmentDoc = `\n    fragment SharedDataProviderFields on SharedDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  connectedAccounts {\n    id\n    dataProviderId\n    dataProviderSlug\n    authMethod\n    connectionRole\n    state\n    availability\n    createdAt\n    updatedAt\n  }\n  createdAt\n  updatedAt\n}\n    `;\nexport const ConfigurableDataProviderFieldsFragmentDoc = `\n    fragment ConfigurableDataProviderFields on ConfigurableDataProvider {\n  id\n  slug\n  name\n  description\n  integrationType\n  authMethods\n  credentialsType\n  scopes\n  defaultScopes\n  availableScopes\n  state\n  enabled\n  iconSlug\n  iconUrl\n  iconDarkUrl\n  credentials {\n    clientId\n    credentialsType\n    hasCredentials\n    redactedClientSecret\n    redirectUri\n  }\n  configFields {\n    ...DataProviderConfigFieldFields\n  }\n  config {\n    name\n    value\n  }\n  createdAt\n  updatedAt\n}\n    ${DataProviderConfigFieldFieldsFragmentDoc}`;\nexport const OrganizationApiKeyFieldsFragmentDoc = `\n    fragment OrganizationApiKeyFields on OrganizationApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n}\n    `;\nexport const UserApiKeyFieldsFragmentDoc = `\n    fragment UserApiKeyFields on UserApiKey {\n  id\n  name\n  obfuscatedValue\n  permissions\n  lastUsedAt\n  expiresAt\n  createdAt\n  updatedAt\n  owner {\n    id\n    email\n    firstName\n    lastName\n    displayName\n  }\n}\n    `;\nexport const ClientApiStatusDocument = `\n    query ClientApiStatus {\n  clientApiStatus\n}\n    `;\nexport const ListOrganizationDomainsDocument = `\n    query ListOrganizationDomains($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  organizationDomains(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...OrganizationDomainFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const CreateOrganizationDomainDocument = `\n    mutation CreateOrganizationDomain($domain: String!) {\n  createOrganizationDomain(domain: $domain) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const DeleteOrganizationDomainDocument = `\n    mutation DeleteOrganizationDomain($id: ID!) {\n  deleteOrganizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const ReverifyOrganizationDomainDocument = `\n    mutation ReverifyOrganizationDomain($id: ID!) {\n  reverifyOrganizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const MeDocument = `\n    query Me {\n  me {\n    ...UserFields\n    connectedAccounts {\n      ...ConnectedAccountFields\n    }\n  }\n}\n    ${UserFieldsFragmentDoc}\n${ConnectedAccountFieldsFragmentDoc}`;\nexport const AuthenticationSettingsDocument = `\n    query AuthenticationSettings {\n  authenticationSettings {\n    mfaEnabled\n    mfaRequired\n    passkeyAuthEnabled\n    passwordAuthEnabled\n    passwordPolicy {\n      minimumLength\n      minimumStrength\n      rejectsBreachedPasswords\n      requiresLowercase\n      requiresNumber\n      requiresSymbol\n      requiresUppercase\n    }\n  }\n}\n    `;\nexport const PasskeysDocument = `\n    query Passkeys {\n  passkeys {\n    id\n    createdAt\n    updatedAt\n    lastVerifiedAt\n  }\n}\n    `;\nexport const UpdateProfileDocument = `\n    mutation UpdateProfile($input: UpdateProfileInput!) {\n  updateProfile(input: $input) {\n    __typename\n    ... on ProfileUpdated {\n      user {\n        ...UserFields\n      }\n    }\n  }\n}\n    ${UserFieldsFragmentDoc}`;\nexport const SendVerificationCodeDocument = `\n    mutation SendVerificationCode {\n  sendVerificationCode {\n    __typename\n    ... on VerificationCodeSent {\n      authenticationChallengeId\n      expiresAt\n    }\n  }\n}\n    `;\nexport const VerifyCurrentEmailDocument = `\n    mutation VerifyCurrentEmail($input: VerifyCurrentEmailInput!) {\n  verifyCurrentEmail(input: $input) {\n    __typename\n    ... on CurrentEmailVerified {\n      elevatedAccessToken\n      expiresAt\n    }\n  }\n}\n    `;\nexport const SendEmailChangeDocument = `\n    mutation SendEmailChange($input: SendEmailChangeInput!) {\n  sendEmailChange(input: $input) {\n    __typename\n    ... on EmailChangeSent {\n      expiresAt\n    }\n  }\n}\n    `;\nexport const ConfirmEmailChangeDocument = `\n    mutation ConfirmEmailChange($input: ConfirmEmailChangeInput!) {\n  confirmEmailChange(input: $input) {\n    __typename\n    ... on EmailChangeConfirmed {\n      elevatedAccessToken\n      expiresAt\n      user {\n        ...UserFields\n      }\n    }\n  }\n}\n    ${UserFieldsFragmentDoc}`;\nexport const CreatePasswordDocument = `\n    mutation CreatePassword($input: CreatePasswordInput!) {\n  createPassword(input: $input) {\n    __typename\n    ... on PasswordCreated {\n      success\n    }\n    ... on PasswordPolicyViolation {\n      code\n      message\n      violations {\n        ...PasswordViolationFields\n      }\n    }\n  }\n}\n    ${PasswordViolationFieldsFragmentDoc}`;\nexport const UpdatePasswordDocument = `\n    mutation UpdatePassword($input: UpdatePasswordInput!) {\n  updatePassword(input: $input) {\n    __typename\n    ... on PasswordUpdated {\n      success\n    }\n    ... on PasswordPolicyViolation {\n      code\n      message\n      violations {\n        ...PasswordViolationFields\n      }\n    }\n  }\n}\n    ${PasswordViolationFieldsFragmentDoc}`;\nexport const EnrollTotpDocument = `\n    mutation EnrollTotp($input: EnrollTotpInput!) {\n  enrollTotp(input: $input) {\n    __typename\n    ... on TotpFactor {\n      authenticationChallengeId\n      authenticationFactorId\n      secret\n      uri\n      qrCode\n    }\n  }\n}\n    `;\nexport const VerifyTotpDocument = `\n    mutation VerifyTotp($input: VerifyTotpInput!) {\n  verifyTotp(input: $input) {\n    __typename\n    ... on TotpVerified {\n      success\n    }\n  }\n}\n    `;\nexport const RemoveMfaFactorDocument = `\n    mutation RemoveMfaFactor($input: RemoveMfaFactorInput!) {\n  removeMfaFactor(input: $input) {\n    __typename\n    ... on MfaFactorRemoved {\n      success\n    }\n  }\n}\n    `;\nexport const SessionsDocument = `\n    query Sessions {\n  sessions {\n    ...SessionFields\n  }\n}\n    ${SessionFieldsFragmentDoc}`;\nexport const RevokeSessionDocument = `\n    mutation RevokeSession($input: RevokeSessionInput!) {\n  revokeSession(input: $input) {\n    __typename\n    ... on SessionRevoked {\n      session {\n        ...SessionFields\n      }\n    }\n  }\n}\n    ${SessionFieldsFragmentDoc}`;\nexport const RevokeAllSessionsDocument = `\n    mutation RevokeAllSessions($input: RevokeAllSessionsInput) {\n  revokeAllSessions(input: $input) {\n    __typename\n    ... on AllSessionsRevoked {\n      success\n    }\n  }\n}\n    `;\nexport const ListOrganizationMembershipsDocument = `\n    query ListOrganizationMemberships($after: String, $before: String, $limit: Int, $order: PaginationOrder, $roleSlug: String, $search: String) {\n  organizationMemberships(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    roleSlug: $roleSlug\n    search: $search\n  ) {\n    data {\n      ...OrganizationMemberFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationMemberFieldsFragmentDoc}`;\nexport const ListRolesDocument = `\n    query ListRoles {\n  roles {\n    multipleRolesEnabled\n    roles {\n      ...RoleFields\n    }\n  }\n}\n    ${RoleFieldsFragmentDoc}`;\nexport const InviteUserDocument = `\n    mutation InviteUser($input: InviteUserInput!) {\n  inviteUser(input: $input) {\n    __typename\n    ... on UserInvited {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    ${OrganizationInvitationFieldsFragmentDoc}`;\nexport const UpdateMemberRoleDocument = `\n    mutation UpdateMemberRole($input: UpdateMemberRoleInput!) {\n  updateMemberRole(input: $input) {\n    __typename\n    ... on MemberRoleUpdated {\n      member {\n        ...OrganizationMemberFields\n      }\n    }\n    ... on RoleNotFound {\n      roleSlugs\n    }\n  }\n}\n    ${OrganizationMemberFieldsFragmentDoc}`;\nexport const RemoveMemberDocument = `\n    mutation RemoveMember($input: RemoveMemberInput!) {\n  removeMember(input: $input) {\n    __typename\n    ... on MemberRemoved {\n      userId\n    }\n  }\n}\n    `;\nexport const ResendInvitationDocument = `\n    mutation ResendInvitation($input: ResendInvitationInput!) {\n  resendInvitation(input: $input) {\n    __typename\n    ... on InvitationResent {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    ${OrganizationInvitationFieldsFragmentDoc}`;\nexport const RevokeInvitationDocument = `\n    mutation RevokeInvitation($input: RevokeInvitationInput!) {\n  revokeInvitation(input: $input) {\n    __typename\n    ... on InvitationRevoked {\n      invitation {\n        ...OrganizationInvitationFields\n      }\n    }\n  }\n}\n    ${OrganizationInvitationFieldsFragmentDoc}`;\nexport const ListUserOrganizationsDocument = `\n    query ListUserOrganizations {\n  organizations {\n    id\n    name\n    isCurrent\n  }\n}\n    `;\nexport const ListDirectoryConnectionsDocument = `\n    query ListDirectoryConnections($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  directoryConnections(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...DirectoryFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${DirectoryFieldsFragmentDoc}`;\nexport const GetDirectoryConnectionDocument = `\n    query GetDirectoryConnection($id: ID!) {\n  directoryConnection(id: $id) {\n    ...DirectoryFields\n  }\n}\n    ${DirectoryFieldsFragmentDoc}`;\nexport const ListSsoConnectionsDocument = `\n    query ListSsoConnections {\n  ssoConnections {\n    ...ConnectionFields\n  }\n}\n    ${ConnectionFieldsFragmentDoc}`;\nexport const GetSsoConnectionDocument = `\n    query GetSsoConnection($id: ID!) {\n  ssoConnection(id: $id) {\n    ...ConnectionFields\n  }\n}\n    ${ConnectionFieldsFragmentDoc}`;\nexport const ListDataProvidersDocument = `\n    query ListDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  dataProviders(after: $after, before: $before, limit: $limit, order: $order) {\n    data {\n      ...DataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${DataProviderFieldsFragmentDoc}`;\nexport const ListDataProviderConnectionsDocument = `\n    query ListDataProviderConnections($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  dataProviderConnections(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...DataProviderConnectionFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const CreateDataProviderConnectionDocument = `\n    mutation CreateDataProviderConnection($input: CreateDataProviderConnectionInput!) {\n  createDataProviderConnection(input: $input) {\n    ...DataProviderConnectionFields\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const DeleteDataProviderConnectionDocument = `\n    mutation DeleteDataProviderConnection($id: ID!) {\n  deleteDataProviderConnection(id: $id)\n}\n    `;\nexport const SetDataProviderEnabledDocument = `\n    mutation SetDataProviderEnabled($input: SetDataProviderEnabledInput!) {\n  setDataProviderEnabled(input: $input) {\n    ...DataProviderFields\n  }\n}\n    ${DataProviderFieldsFragmentDoc}`;\nexport const CreateDataProviderAuthorizationDocument = `\n    mutation CreateDataProviderAuthorization($input: CreateDataProviderAuthorizationInput!) {\n  createDataProviderAuthorization(input: $input) {\n    ...DataProviderAuthorizationResultFields\n  }\n}\n    ${DataProviderAuthorizationResultFieldsFragmentDoc}`;\nexport const CreateOrganizationDataProviderAuthorizationDocument = `\n    mutation CreateOrganizationDataProviderAuthorization($input: CreateOrganizationDataProviderAuthorizationInput!) {\n  createOrganizationDataProviderAuthorization(input: $input) {\n    ...DataProviderAuthorizationResultFields\n  }\n}\n    ${DataProviderAuthorizationResultFieldsFragmentDoc}`;\nexport const DataProviderAuthorizationStatusDocument = `\n    query DataProviderAuthorizationStatus($dataProviderId: ID!, $state: String!) {\n  dataProviderAuthorizationStatus(dataProviderId: $dataProviderId, state: $state) {\n    state\n    connecting\n  }\n}\n    `;\nexport const ConnectDataProviderWithClientCredentialsDocument = `\n    mutation ConnectDataProviderWithClientCredentials($input: ConnectDataProviderWithClientCredentialsInput!) {\n  connectDataProviderWithClientCredentials(input: $input) {\n    __typename\n    ... on DataProviderConnected {\n      connection {\n        ...DataProviderConnectionFields\n      }\n    }\n    ... on DataProviderAuthMethodUnsupported {\n      authMethod\n      supportedAuthMethods\n    }\n    ... on DataProviderConnectionAuthMethodConflict {\n      existingAuthMethod\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const SetDataProviderConfigurationDocument = `\n    mutation SetDataProviderConfiguration($input: SetDataProviderConfigurationInput!) {\n  setDataProviderConfiguration(input: $input) {\n    __typename\n    ... on DataProviderConfiguration {\n      ...DataProviderConfigurationFields\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConfigurationFieldsFragmentDoc}`;\nexport const ListOrganizationDataProvidersDocument = `\n    query ListOrganizationDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  organizationDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...OrganizationDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationDataProviderFieldsFragmentDoc}`;\nexport const SetOrganizationDataProviderConfigurationDocument = `\n    mutation SetOrganizationDataProviderConfiguration($input: SetOrganizationDataProviderConfigurationInput!) {\n  setOrganizationDataProviderConfiguration(input: $input) {\n    __typename\n    ... on DataProviderConfiguration {\n      ...DataProviderConfigurationFields\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConfigurationFieldsFragmentDoc}`;\nexport const CreateOrganizationDataProviderConnectionDocument = `\n    mutation CreateOrganizationDataProviderConnection($input: CreateOrganizationDataProviderConnectionInput!) {\n  createOrganizationDataProviderConnection(input: $input) {\n    ...DataProviderConnectionFields\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const ConnectOrganizationDataProviderWithClientCredentialsDocument = `\n    mutation ConnectOrganizationDataProviderWithClientCredentials($input: ConnectOrganizationDataProviderWithClientCredentialsInput!) {\n  connectOrganizationDataProviderWithClientCredentials(input: $input) {\n    __typename\n    ... on DataProviderConnected {\n      connection {\n        ...DataProviderConnectionFields\n      }\n    }\n    ... on DataProviderAuthMethodUnsupported {\n      authMethod\n      supportedAuthMethods\n    }\n    ... on DataProviderConnectionAuthMethodConflict {\n      existingAuthMethod\n    }\n    ... on DataProviderConfigInvalid {\n      message\n    }\n  }\n}\n    ${DataProviderConnectionFieldsFragmentDoc}`;\nexport const DeleteOrganizationDataProviderConnectionDocument = `\n    mutation DeleteOrganizationDataProviderConnection($id: ID!) {\n  deleteOrganizationDataProviderConnection(id: $id)\n}\n    `;\nexport const UpdateDataProviderConnectionLabelDocument = `\n    mutation UpdateDataProviderConnectionLabel($input: UpdateDataProviderConnectionLabelInput!) {\n  updateDataProviderConnectionLabel(input: $input) {\n    ...DataProviderConnectionLabelResultFields\n  }\n}\n    ${DataProviderConnectionLabelResultFieldsFragmentDoc}`;\nexport const UpdateOrganizationDataProviderConnectionLabelDocument = `\n    mutation UpdateOrganizationDataProviderConnectionLabel($input: UpdateDataProviderConnectionLabelInput!) {\n  updateOrganizationDataProviderConnectionLabel(input: $input) {\n    ...DataProviderConnectionLabelResultFields\n  }\n}\n    ${DataProviderConnectionLabelResultFieldsFragmentDoc}`;\nexport const RegisterPasskeyDocument = `\n    mutation RegisterPasskey($input: RegisterPasskeyInput!) {\n  registerPasskey(input: $input) {\n    __typename\n    ... on PasskeyRegistrationOptions {\n      challengeId\n      options\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    `;\nexport const VerifyPasskeyDocument = `\n    mutation VerifyPasskey($input: VerifyPasskeyInput!) {\n  verifyPasskey(input: $input) {\n    __typename\n    ... on PasskeyVerified {\n      success\n    }\n    ... on PasskeyChallengeNotFound {\n      _placeholder\n    }\n    ... on PasskeyVerificationFailed {\n      _placeholder\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    `;\nexport const DeletePasskeyDocument = `\n    mutation DeletePasskey($input: DeletePasskeyInput!) {\n  deletePasskey(input: $input) {\n    __typename\n    ... on PasskeyDeleted {\n      success\n    }\n    ... on PasskeyNotFound {\n      _placeholder\n    }\n    ... on ElevatedAccessTokenExpired {\n      message\n    }\n    ... on ElevatedAccessTokenInvalid {\n      message\n    }\n  }\n}\n    `;\nexport const CreateAdminPortalLinkDocument = `\n    mutation CreateAdminPortalLink($intent: AdminPortalLinkIntent!) {\n  createAdminPortalLink(intent: $intent) {\n    link\n    intent\n    expiresAt\n  }\n}\n    `;\nexport const AuditLogStreamDocument = `\n    query AuditLogStream {\n  auditLogStream {\n    id\n    auditLogTrailId\n    type\n    state\n    errorMessage\n    lastSyncedEventId\n  }\n}\n    `;\nexport const BrandingDocument = `\n    query Branding {\n  branding {\n    displayName\n    logoLightPath\n    logoDarkPath\n    logoLightIconPath\n    logoDarkIconPath\n  }\n}\n    `;\nexport const AuthKitSettingsDocument = `\n    query AuthKitSettings {\n  authkitSettings {\n    origin\n  }\n}\n    `;\nexport const ListPermissionsDocument = `\n    query ListPermissions($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  permissions(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      id\n      slug\n      name\n      description\n      system\n      createdAt\n      updatedAt\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    `;\nexport const ListApiKeyPermissionsDocument = `\n    query ListApiKeyPermissions($apiKeyOwnerType: ApiKeyOwnerType!, $after: String, $before: String, $limit: Int, $search: String) {\n  permissions(\n    filter: {apiKeyOwnerType: $apiKeyOwnerType, heldByCaller: true}\n    after: $after\n    before: $before\n    limit: $limit\n    search: $search\n  ) {\n    data {\n      id\n      slug\n      name\n      description\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    `;\nexport const GetOrganizationDomainDocument = `\n    query GetOrganizationDomain($id: ID!) {\n  organizationDomain(id: $id) {\n    ...OrganizationDomainFields\n  }\n}\n    ${OrganizationDomainFieldsFragmentDoc}`;\nexport const ListSharedDataProvidersDocument = `\n    query ListSharedDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder, $supportsMultipleConnections: Boolean) {\n  sharedDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    supportsMultipleConnections: $supportsMultipleConnections\n  ) {\n    data {\n      ...SharedDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${SharedDataProviderFieldsFragmentDoc}`;\nexport const ListConfigurableDataProvidersDocument = `\n    query ListConfigurableDataProviders($after: String, $before: String, $limit: Int, $order: PaginationOrder) {\n  configurableDataProviders(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n  ) {\n    data {\n      ...ConfigurableDataProviderFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${ConfigurableDataProviderFieldsFragmentDoc}`;\nexport const ListOrganizationApiKeysDocument = `\n    query ListOrganizationApiKeys($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  organizationApiKeys(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...OrganizationApiKeyFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const ListUserApiKeysDocument = `\n    query ListUserApiKeys($after: String, $before: String, $limit: Int, $order: PaginationOrder, $search: String) {\n  userApiKeys(\n    after: $after\n    before: $before\n    limit: $limit\n    order: $order\n    search: $search\n  ) {\n    data {\n      ...UserApiKeyFields\n    }\n    listMetadata {\n      after\n      before\n    }\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\nexport const CreateOrganizationApiKeyDocument = `\n    mutation CreateOrganizationApiKey($input: CreateApiKeyInput!) {\n  createOrganizationApiKey(input: $input) {\n    __typename\n    ... on OrganizationApiKeyCreated {\n      value\n      apiKey {\n        ...OrganizationApiKeyFields\n      }\n    }\n    ... on ApiKeyPermissionsNotHeld {\n      message\n      unheldPermissions\n    }\n    ... on ApiKeyPermissionsUnsupportedForToken {\n      message\n      requestedPermissions\n    }\n    ... on InvalidApiKeyExpiration {\n      message\n    }\n    ... on InvalidApiKeyName {\n      message\n    }\n    ... on InvalidApiKeyPermissions {\n      message\n      invalidPermissions\n    }\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const CreateUserApiKeyDocument = `\n    mutation CreateUserApiKey($input: CreateApiKeyInput!) {\n  createUserApiKey(input: $input) {\n    __typename\n    ... on UserApiKeyCreated {\n      value\n      apiKey {\n        ...UserApiKeyFields\n      }\n    }\n    ... on ApiKeyPermissionsNotHeld {\n      message\n      unheldPermissions\n    }\n    ... on ApiKeyPermissionsUnsupportedForToken {\n      message\n      requestedPermissions\n    }\n    ... on InvalidApiKeyExpiration {\n      message\n    }\n    ... on InvalidApiKeyName {\n      message\n    }\n    ... on InvalidApiKeyPermissions {\n      message\n      invalidPermissions\n    }\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\nexport const ExpireOrganizationApiKeyDocument = `\n    mutation ExpireOrganizationApiKey($input: ExpireApiKeyInput!) {\n  expireOrganizationApiKey(input: $input) {\n    __typename\n    ... on OrganizationApiKeyExpired {\n      apiKey {\n        ...OrganizationApiKeyFields\n      }\n    }\n    ... on ApiKeyAlreadyExpired {\n      apiKeyId\n    }\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const ExpireUserApiKeyDocument = `\n    mutation ExpireUserApiKey($input: ExpireApiKeyInput!) {\n  expireUserApiKey(input: $input) {\n    __typename\n    ... on UserApiKeyExpired {\n      apiKey {\n        ...UserApiKeyFields\n      }\n    }\n    ... on ApiKeyAlreadyExpired {\n      apiKeyId\n    }\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\nexport const DeleteOrganizationApiKeyDocument = `\n    mutation DeleteOrganizationApiKey($apiKeyId: ID!) {\n  deleteOrganizationApiKey(apiKeyId: $apiKeyId) {\n    ...OrganizationApiKeyFields\n  }\n}\n    ${OrganizationApiKeyFieldsFragmentDoc}`;\nexport const DeleteUserApiKeyDocument = `\n    mutation DeleteUserApiKey($apiKeyId: ID!) {\n  deleteUserApiKey(apiKeyId: $apiKeyId) {\n    ...UserApiKeyFields\n  }\n}\n    ${UserApiKeyFieldsFragmentDoc}`;\n\nexport type SdkFunctionWrapper = <T>(\n  action: (requestHeaders?: Record<string, string>) => Promise<T>,\n  operationName: string,\n  operationType?: string,\n  variables?: any,\n) => Promise<T>;\n\nconst defaultWrapper: SdkFunctionWrapper = (\n  action,\n  _operationName,\n  _operationType,\n  _variables,\n) => action();\n\nexport function getSdk(\n  client: GraphQLClient,\n  withWrapper: SdkFunctionWrapper = defaultWrapper,\n) {\n  return {\n    ClientApiStatus(\n      variables?: ClientApiStatusQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ClientApiStatusQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ClientApiStatusQuery>({\n            document: ClientApiStatusDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ClientApiStatus\",\n        \"query\",\n        variables,\n      );\n    },\n    ListOrganizationDomains(\n      variables?: ListOrganizationDomainsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationDomainsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationDomainsQuery>({\n            document: ListOrganizationDomainsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationDomains\",\n        \"query\",\n        variables,\n      );\n    },\n    CreateOrganizationDomain(\n      variables: CreateOrganizationDomainMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationDomainMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationDomainMutation>({\n            document: CreateOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationDomain\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteOrganizationDomain(\n      variables: DeleteOrganizationDomainMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteOrganizationDomainMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteOrganizationDomainMutation>({\n            document: DeleteOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteOrganizationDomain\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ReverifyOrganizationDomain(\n      variables: ReverifyOrganizationDomainMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ReverifyOrganizationDomainMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ReverifyOrganizationDomainMutation>({\n            document: ReverifyOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ReverifyOrganizationDomain\",\n        \"mutation\",\n        variables,\n      );\n    },\n    Me(\n      variables?: MeQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<MeQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<MeQuery>({\n            document: MeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Me\",\n        \"query\",\n        variables,\n      );\n    },\n    AuthenticationSettings(\n      variables?: AuthenticationSettingsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<AuthenticationSettingsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<AuthenticationSettingsQuery>({\n            document: AuthenticationSettingsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"AuthenticationSettings\",\n        \"query\",\n        variables,\n      );\n    },\n    Passkeys(\n      variables?: PasskeysQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<PasskeysQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<PasskeysQuery>({\n            document: PasskeysDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Passkeys\",\n        \"query\",\n        variables,\n      );\n    },\n    UpdateProfile(\n      variables: UpdateProfileMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateProfileMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateProfileMutation>({\n            document: UpdateProfileDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdateProfile\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SendVerificationCode(\n      variables?: SendVerificationCodeMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SendVerificationCodeMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SendVerificationCodeMutation>({\n            document: SendVerificationCodeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SendVerificationCode\",\n        \"mutation\",\n        variables,\n      );\n    },\n    VerifyCurrentEmail(\n      variables: VerifyCurrentEmailMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<VerifyCurrentEmailMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<VerifyCurrentEmailMutation>({\n            document: VerifyCurrentEmailDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"VerifyCurrentEmail\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SendEmailChange(\n      variables: SendEmailChangeMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SendEmailChangeMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SendEmailChangeMutation>({\n            document: SendEmailChangeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SendEmailChange\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ConfirmEmailChange(\n      variables: ConfirmEmailChangeMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ConfirmEmailChangeMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ConfirmEmailChangeMutation>({\n            document: ConfirmEmailChangeDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ConfirmEmailChange\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreatePassword(\n      variables: CreatePasswordMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreatePasswordMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreatePasswordMutation>({\n            document: CreatePasswordDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreatePassword\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdatePassword(\n      variables: UpdatePasswordMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdatePasswordMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdatePasswordMutation>({\n            document: UpdatePasswordDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdatePassword\",\n        \"mutation\",\n        variables,\n      );\n    },\n    EnrollTotp(\n      variables: EnrollTotpMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<EnrollTotpMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<EnrollTotpMutation>({\n            document: EnrollTotpDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"EnrollTotp\",\n        \"mutation\",\n        variables,\n      );\n    },\n    VerifyTotp(\n      variables: VerifyTotpMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<VerifyTotpMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<VerifyTotpMutation>({\n            document: VerifyTotpDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"VerifyTotp\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RemoveMfaFactor(\n      variables: RemoveMfaFactorMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RemoveMfaFactorMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RemoveMfaFactorMutation>({\n            document: RemoveMfaFactorDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RemoveMfaFactor\",\n        \"mutation\",\n        variables,\n      );\n    },\n    Sessions(\n      variables?: SessionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SessionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SessionsQuery>({\n            document: SessionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Sessions\",\n        \"query\",\n        variables,\n      );\n    },\n    RevokeSession(\n      variables: RevokeSessionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RevokeSessionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RevokeSessionMutation>({\n            document: RevokeSessionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RevokeSession\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RevokeAllSessions(\n      variables?: RevokeAllSessionsMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RevokeAllSessionsMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RevokeAllSessionsMutation>({\n            document: RevokeAllSessionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RevokeAllSessions\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ListOrganizationMemberships(\n      variables?: ListOrganizationMembershipsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationMembershipsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationMembershipsQuery>({\n            document: ListOrganizationMembershipsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationMemberships\",\n        \"query\",\n        variables,\n      );\n    },\n    ListRoles(\n      variables?: ListRolesQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListRolesQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListRolesQuery>({\n            document: ListRolesDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListRoles\",\n        \"query\",\n        variables,\n      );\n    },\n    InviteUser(\n      variables: InviteUserMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<InviteUserMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<InviteUserMutation>({\n            document: InviteUserDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"InviteUser\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdateMemberRole(\n      variables: UpdateMemberRoleMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateMemberRoleMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateMemberRoleMutation>({\n            document: UpdateMemberRoleDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdateMemberRole\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RemoveMember(\n      variables: RemoveMemberMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RemoveMemberMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RemoveMemberMutation>({\n            document: RemoveMemberDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RemoveMember\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ResendInvitation(\n      variables: ResendInvitationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ResendInvitationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ResendInvitationMutation>({\n            document: ResendInvitationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ResendInvitation\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RevokeInvitation(\n      variables: RevokeInvitationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RevokeInvitationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RevokeInvitationMutation>({\n            document: RevokeInvitationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RevokeInvitation\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ListUserOrganizations(\n      variables?: ListUserOrganizationsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListUserOrganizationsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListUserOrganizationsQuery>({\n            document: ListUserOrganizationsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListUserOrganizations\",\n        \"query\",\n        variables,\n      );\n    },\n    ListDirectoryConnections(\n      variables?: ListDirectoryConnectionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListDirectoryConnectionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListDirectoryConnectionsQuery>({\n            document: ListDirectoryConnectionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListDirectoryConnections\",\n        \"query\",\n        variables,\n      );\n    },\n    GetDirectoryConnection(\n      variables: GetDirectoryConnectionQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<GetDirectoryConnectionQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<GetDirectoryConnectionQuery>({\n            document: GetDirectoryConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"GetDirectoryConnection\",\n        \"query\",\n        variables,\n      );\n    },\n    ListSsoConnections(\n      variables?: ListSsoConnectionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListSsoConnectionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListSsoConnectionsQuery>({\n            document: ListSsoConnectionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListSsoConnections\",\n        \"query\",\n        variables,\n      );\n    },\n    GetSsoConnection(\n      variables: GetSsoConnectionQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<GetSsoConnectionQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<GetSsoConnectionQuery>({\n            document: GetSsoConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"GetSsoConnection\",\n        \"query\",\n        variables,\n      );\n    },\n    ListDataProviders(\n      variables?: ListDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListDataProvidersQuery>({\n            document: ListDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    ListDataProviderConnections(\n      variables?: ListDataProviderConnectionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListDataProviderConnectionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListDataProviderConnectionsQuery>({\n            document: ListDataProviderConnectionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListDataProviderConnections\",\n        \"query\",\n        variables,\n      );\n    },\n    CreateDataProviderConnection(\n      variables: CreateDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateDataProviderConnectionMutation>({\n            document: CreateDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteDataProviderConnection(\n      variables: DeleteDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteDataProviderConnectionMutation>({\n            document: DeleteDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SetDataProviderEnabled(\n      variables: SetDataProviderEnabledMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SetDataProviderEnabledMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SetDataProviderEnabledMutation>({\n            document: SetDataProviderEnabledDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SetDataProviderEnabled\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateDataProviderAuthorization(\n      variables: CreateDataProviderAuthorizationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateDataProviderAuthorizationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateDataProviderAuthorizationMutation>({\n            document: CreateDataProviderAuthorizationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateDataProviderAuthorization\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateOrganizationDataProviderAuthorization(\n      variables: CreateOrganizationDataProviderAuthorizationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationDataProviderAuthorizationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationDataProviderAuthorizationMutation>({\n            document: CreateOrganizationDataProviderAuthorizationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationDataProviderAuthorization\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DataProviderAuthorizationStatus(\n      variables: DataProviderAuthorizationStatusQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DataProviderAuthorizationStatusQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DataProviderAuthorizationStatusQuery>({\n            document: DataProviderAuthorizationStatusDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DataProviderAuthorizationStatus\",\n        \"query\",\n        variables,\n      );\n    },\n    ConnectDataProviderWithClientCredentials(\n      variables: ConnectDataProviderWithClientCredentialsMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ConnectDataProviderWithClientCredentialsMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ConnectDataProviderWithClientCredentialsMutation>({\n            document: ConnectDataProviderWithClientCredentialsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ConnectDataProviderWithClientCredentials\",\n        \"mutation\",\n        variables,\n      );\n    },\n    SetDataProviderConfiguration(\n      variables: SetDataProviderConfigurationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SetDataProviderConfigurationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SetDataProviderConfigurationMutation>({\n            document: SetDataProviderConfigurationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SetDataProviderConfiguration\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ListOrganizationDataProviders(\n      variables?: ListOrganizationDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationDataProvidersQuery>({\n            document: ListOrganizationDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    SetOrganizationDataProviderConfiguration(\n      variables: SetOrganizationDataProviderConfigurationMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<SetOrganizationDataProviderConfigurationMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<SetOrganizationDataProviderConfigurationMutation>({\n            document: SetOrganizationDataProviderConfigurationDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"SetOrganizationDataProviderConfiguration\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateOrganizationDataProviderConnection(\n      variables: CreateOrganizationDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationDataProviderConnectionMutation>({\n            document: CreateOrganizationDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ConnectOrganizationDataProviderWithClientCredentials(\n      variables: ConnectOrganizationDataProviderWithClientCredentialsMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ConnectOrganizationDataProviderWithClientCredentialsMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ConnectOrganizationDataProviderWithClientCredentialsMutation>(\n            {\n              document:\n                ConnectOrganizationDataProviderWithClientCredentialsDocument,\n              variables,\n              requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n              signal,\n            },\n          ),\n        \"ConnectOrganizationDataProviderWithClientCredentials\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteOrganizationDataProviderConnection(\n      variables: DeleteOrganizationDataProviderConnectionMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteOrganizationDataProviderConnectionMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteOrganizationDataProviderConnectionMutation>({\n            document: DeleteOrganizationDataProviderConnectionDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteOrganizationDataProviderConnection\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdateDataProviderConnectionLabel(\n      variables: UpdateDataProviderConnectionLabelMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateDataProviderConnectionLabelMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateDataProviderConnectionLabelMutation>({\n            document: UpdateDataProviderConnectionLabelDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"UpdateDataProviderConnectionLabel\",\n        \"mutation\",\n        variables,\n      );\n    },\n    UpdateOrganizationDataProviderConnectionLabel(\n      variables: UpdateOrganizationDataProviderConnectionLabelMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<UpdateOrganizationDataProviderConnectionLabelMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<UpdateOrganizationDataProviderConnectionLabelMutation>(\n            {\n              document: UpdateOrganizationDataProviderConnectionLabelDocument,\n              variables,\n              requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n              signal,\n            },\n          ),\n        \"UpdateOrganizationDataProviderConnectionLabel\",\n        \"mutation\",\n        variables,\n      );\n    },\n    RegisterPasskey(\n      variables: RegisterPasskeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<RegisterPasskeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<RegisterPasskeyMutation>({\n            document: RegisterPasskeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"RegisterPasskey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    VerifyPasskey(\n      variables: VerifyPasskeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<VerifyPasskeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<VerifyPasskeyMutation>({\n            document: VerifyPasskeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"VerifyPasskey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeletePasskey(\n      variables: DeletePasskeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeletePasskeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeletePasskeyMutation>({\n            document: DeletePasskeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeletePasskey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateAdminPortalLink(\n      variables: CreateAdminPortalLinkMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateAdminPortalLinkMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateAdminPortalLinkMutation>({\n            document: CreateAdminPortalLinkDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateAdminPortalLink\",\n        \"mutation\",\n        variables,\n      );\n    },\n    AuditLogStream(\n      variables?: AuditLogStreamQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<AuditLogStreamQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<AuditLogStreamQuery>({\n            document: AuditLogStreamDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"AuditLogStream\",\n        \"query\",\n        variables,\n      );\n    },\n    Branding(\n      variables?: BrandingQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<BrandingQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<BrandingQuery>({\n            document: BrandingDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"Branding\",\n        \"query\",\n        variables,\n      );\n    },\n    AuthKitSettings(\n      variables?: AuthKitSettingsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<AuthKitSettingsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<AuthKitSettingsQuery>({\n            document: AuthKitSettingsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"AuthKitSettings\",\n        \"query\",\n        variables,\n      );\n    },\n    ListPermissions(\n      variables?: ListPermissionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListPermissionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListPermissionsQuery>({\n            document: ListPermissionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListPermissions\",\n        \"query\",\n        variables,\n      );\n    },\n    ListApiKeyPermissions(\n      variables: ListApiKeyPermissionsQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListApiKeyPermissionsQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListApiKeyPermissionsQuery>({\n            document: ListApiKeyPermissionsDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListApiKeyPermissions\",\n        \"query\",\n        variables,\n      );\n    },\n    GetOrganizationDomain(\n      variables: GetOrganizationDomainQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<GetOrganizationDomainQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<GetOrganizationDomainQuery>({\n            document: GetOrganizationDomainDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"GetOrganizationDomain\",\n        \"query\",\n        variables,\n      );\n    },\n    ListSharedDataProviders(\n      variables?: ListSharedDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListSharedDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListSharedDataProvidersQuery>({\n            document: ListSharedDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListSharedDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    ListConfigurableDataProviders(\n      variables?: ListConfigurableDataProvidersQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListConfigurableDataProvidersQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListConfigurableDataProvidersQuery>({\n            document: ListConfigurableDataProvidersDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListConfigurableDataProviders\",\n        \"query\",\n        variables,\n      );\n    },\n    ListOrganizationApiKeys(\n      variables?: ListOrganizationApiKeysQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListOrganizationApiKeysQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListOrganizationApiKeysQuery>({\n            document: ListOrganizationApiKeysDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListOrganizationApiKeys\",\n        \"query\",\n        variables,\n      );\n    },\n    ListUserApiKeys(\n      variables?: ListUserApiKeysQueryVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ListUserApiKeysQuery> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ListUserApiKeysQuery>({\n            document: ListUserApiKeysDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ListUserApiKeys\",\n        \"query\",\n        variables,\n      );\n    },\n    CreateOrganizationApiKey(\n      variables: CreateOrganizationApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateOrganizationApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateOrganizationApiKeyMutation>({\n            document: CreateOrganizationApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateOrganizationApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    CreateUserApiKey(\n      variables: CreateUserApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<CreateUserApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<CreateUserApiKeyMutation>({\n            document: CreateUserApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"CreateUserApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ExpireOrganizationApiKey(\n      variables: ExpireOrganizationApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ExpireOrganizationApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ExpireOrganizationApiKeyMutation>({\n            document: ExpireOrganizationApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ExpireOrganizationApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    ExpireUserApiKey(\n      variables: ExpireUserApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<ExpireUserApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<ExpireUserApiKeyMutation>({\n            document: ExpireUserApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"ExpireUserApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteOrganizationApiKey(\n      variables: DeleteOrganizationApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteOrganizationApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteOrganizationApiKeyMutation>({\n            document: DeleteOrganizationApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteOrganizationApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n    DeleteUserApiKey(\n      variables: DeleteUserApiKeyMutationVariables,\n      requestHeaders?: GraphQLClientRequestHeaders,\n      signal?: RequestInit[\"signal\"],\n    ): Promise<DeleteUserApiKeyMutation> {\n      return withWrapper(\n        (wrappedRequestHeaders) =>\n          client.request<DeleteUserApiKeyMutation>({\n            document: DeleteUserApiKeyDocument,\n            variables,\n            requestHeaders: { ...requestHeaders, ...wrappedRequestHeaders },\n            signal,\n          }),\n        \"DeleteUserApiKey\",\n        \"mutation\",\n        variables,\n      );\n    },\n  };\n}\nexport type Sdk = ReturnType<typeof getSdk>;\n"],"mappings":";;AA0wKA,MAAa,sCAAsC;;;;;;;;;;;;;AAanD,MAAa,wBAAwB;;;;;;;;;;;;;;;;AAgBrC,MAAa,oCAAoC;;;;;;;;;;;AAWjD,MAAa,qCAAqC;;;;;;;;;;;;;AAalD,MAAa,2BAA2B;;;;;;;;;;;;;;;;;;;;AAoBxC,MAAa,sCAAsC;;;;;;;;;;;;;;;;;;;;AAoBnD,MAAa,0CAA0C;;;;;;;;;;AAUvD,MAAa,wBAAwB;;;;;;;;;;;AAWrC,MAAa,6BAA6B;;;;;;;;;;;;;;;;;;;AAmB1C,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;AA0B3C,MAAa,2CAA2C;;;;;;;;;;;;;;;AAexD,MAAa,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6BvC;AACN,MAAa,mDAAmD;;;;;;;;;;;;;;;;;AAiBhE,MAAa,6CAA6C;;;;;;;;;;;;;;;;AAgB1D,MAAa,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BvD,MAAa,4CAA4C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAoDnD,yCAAyC;EAC7C;AACF,MAAa,qDAAqD;;;;;;;;;;MAU5D;AACN,MAAa,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;AAyBnD,MAAa,4CAA4C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAkCnD;AACN,MAAa,sCAAsC;;;;;;;;;;;;AAYnD,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;AAmB3C,MAAa,0BAA0B;;;;;AAKvC,MAAa,kCAAkC;;;;;;;;;;;;;;;;;MAiBzC;AACN,MAAa,mCAAmC;;;;;;MAM1C;AACN,MAAa,mCAAmC;;;;;;MAM1C;AACN,MAAa,qCAAqC;;;;;;MAM5C;AACN,MAAa,aAAa;;;;;;;;;MASpB,sBAAsB;EAC1B;AACF,MAAa,iCAAiC;;;;;;;;;;;;;;;;;;;AAmB9C,MAAa,mBAAmB;;;;;;;;;;AAUhC,MAAa,wBAAwB;;;;;;;;;;;MAW/B;AACN,MAAa,+BAA+B;;;;;;;;;;;AAW5C,MAAa,6BAA6B;;;;;;;;;;;AAW1C,MAAa,0BAA0B;;;;;;;;;;AAUvC,MAAa,6BAA6B;;;;;;;;;;;;;MAapC;AACN,MAAa,yBAAyB;;;;;;;;;;;;;;;;MAgBhC;AACN,MAAa,yBAAyB;;;;;;;;;;;;;;;;MAgBhC;AACN,MAAa,qBAAqB;;;;;;;;;;;;;;AAclC,MAAa,qBAAqB;;;;;;;;;;AAUlC,MAAa,0BAA0B;;;;;;;;;;AAUvC,MAAa,mBAAmB;;;;;;MAM1B;AACN,MAAa,wBAAwB;;;;;;;;;;;MAW/B;AACN,MAAa,4BAA4B;;;;;;;;;;AAUzC,MAAa,sCAAsC;;;;;;;;;;;;;;;;;;;MAmB7C;AACN,MAAa,oBAAoB;;;;;;;;;MAS3B;AACN,MAAa,qBAAqB;;;;;;;;;;;MAW5B;AACN,MAAa,2BAA2B;;;;;;;;;;;;;;MAclC;AACN,MAAa,uBAAuB;;;;;;;;;;AAUpC,MAAa,2BAA2B;;;;;;;;;;;MAWlC;AACN,MAAa,2BAA2B;;;;;;;;;;;MAWlC;AACN,MAAa,gCAAgC;;;;;;;;;AAS7C,MAAa,mCAAmC;;;;;;;;;;;;;;;;;;MAkB1C;AACN,MAAa,iCAAiC;;;;;;MAMxC;AACN,MAAa,6BAA6B;;;;;;MAMpC;AACN,MAAa,2BAA2B;;;;;;MAMlC;AACN,MAAa,4BAA4B;;;;;;;;;;;;MAYnC;AACN,MAAa,sCAAsC;;;;;;;;;;;;;;;;;MAiB7C;AACN,MAAa,uCAAuC;;;;;;MAM9C;AACN,MAAa,uCAAuC;;;;;AAKpD,MAAa,iCAAiC;;;;;;MAMxC;AACN,MAAa,0CAA0C;;;;;;MAMjD;AACN,MAAa,sDAAsD;;;;;;MAM7D;AACN,MAAa,0CAA0C;;;;;;;;AAQvD,MAAa,mDAAmD;;;;;;;;;;;;;;;;;;;;;MAqB1D;AACN,MAAa,uCAAuC;;;;;;;;;;;;MAY9C;AACN,MAAa,wCAAwC;;;;;;;;;;;;;;;;;MAiB/C;AACN,MAAa,mDAAmD;;;;;;;;;;;;MAY1D;AACN,MAAa,mDAAmD;;;;;;MAM1D;AACN,MAAa,+DAA+D;;;;;;;;;;;;;;;;;;;;;MAqBtE;AACN,MAAa,mDAAmD;;;;;AAKhE,MAAa,4CAA4C;;;;;;MAMnD;AACN,MAAa,wDAAwD;;;;;;MAM/D;AACN,MAAa,0BAA0B;;;;;;;;;;;;;;;;;AAiBvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;AAsBrC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;AAmBrC,MAAa,gCAAgC;;;;;;;;;AAS7C,MAAa,yBAAyB;;;;;;;;;;;;AAYtC,MAAa,mBAAmB;;;;;;;;;;;AAWhC,MAAa,0BAA0B;;;;;;;AAOvC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;AAyBvC,MAAa,gCAAgC;;;;;;;;;;;;;;;;;;;;;;AAsB7C,MAAa,gCAAgC;;;;;;MAMvC;AACN,MAAa,kCAAkC;;;;;;;;;;;;;;;;;;MAkBzC;AACN,MAAa,wCAAwC;;;;;;;;;;;;;;;;;MAiB/C;AACN,MAAa,kCAAkC;;;;;;;;;;;;;;;;;;MAkBzC;AACN,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;MAkBjC;AACN,MAAa,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA8B1C;AACN,MAAa,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA8BlC;AACN,MAAa,mCAAmC;;;;;;;;;;;;;;MAc1C;AACN,MAAa,2BAA2B;;;;;;;;;;;;;;MAclC;AACN,MAAa,mCAAmC;;;;;;MAM1C;AACN,MAAa,2BAA2B;;;;;;MAMlC;AASN,MAAM,kBACJ,QACA,gBACA,gBACA,eACG,OAAO;AAEZ,SAAgB,OACd,QACA,cAAkC,gBAClC;CACA,OAAO;EACL,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,wBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,2BACA,SACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,2BACE,WACA,gBACA,QAC6C;GAC7C,OAAO,aACJ,0BACC,OAAO,QAA4C;IACjD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,8BACA,YACA,SACF;EACF;EACA,GACE,WACA,gBACA,QACkB;GAClB,OAAO,aACJ,0BACC,OAAO,QAAiB;IACtB,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,MACA,SACA,SACF;EACF;EACA,uBACE,WACA,gBACA,QACsC;GACtC,OAAO,aACJ,0BACC,OAAO,QAAqC;IAC1C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,0BACA,SACA,SACF;EACF;EACA,SACE,WACA,gBACA,QACwB;GACxB,OAAO,aACJ,0BACC,OAAO,QAAuB;IAC5B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,YACA,SACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,qBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,wBACA,YACA,SACF;EACF;EACA,mBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,sBACA,YACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,YACA,SACF;EACF;EACA,mBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,sBACA,YACA,SACF;EACF;EACA,eACE,WACA,gBACA,QACiC;GACjC,OAAO,aACJ,0BACC,OAAO,QAAgC;IACrC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,kBACA,YACA,SACF;EACF;EACA,eACE,WACA,gBACA,QACiC;GACjC,OAAO,aACJ,0BACC,OAAO,QAAgC;IACrC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,kBACA,YACA,SACF;EACF;EACA,WACE,WACA,gBACA,QAC6B;GAC7B,OAAO,aACJ,0BACC,OAAO,QAA4B;IACjC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,cACA,YACA,SACF;EACF;EACA,WACE,WACA,gBACA,QAC6B;GAC7B,OAAO,aACJ,0BACC,OAAO,QAA4B;IACjC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,cACA,YACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,YACA,SACF;EACF;EACA,SACE,WACA,gBACA,QACwB;GACxB,OAAO,aACJ,0BACC,OAAO,QAAuB;IAC5B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,YACA,SACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,kBACE,WACA,gBACA,QACoC;GACpC,OAAO,aACJ,0BACC,OAAO,QAAmC;IACxC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,qBACA,YACA,SACF;EACF;EACA,4BACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,+BACA,SACA,SACF;EACF;EACA,UACE,WACA,gBACA,QACyB;GACzB,OAAO,aACJ,0BACC,OAAO,QAAwB;IAC7B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,aACA,SACA,SACF;EACF;EACA,WACE,WACA,gBACA,QAC6B;GAC7B,OAAO,aACJ,0BACC,OAAO,QAA4B;IACjC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,cACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,aACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gBACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,SACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QACwC;GACxC,OAAO,aACJ,0BACC,OAAO,QAAuC;IAC5C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,SACA,SACF;EACF;EACA,uBACE,WACA,gBACA,QACsC;GACtC,OAAO,aACJ,0BACC,OAAO,QAAqC;IAC1C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,0BACA,SACA,SACF;EACF;EACA,mBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,sBACA,SACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,SACA,SACF;EACF;EACA,kBACE,WACA,gBACA,QACiC;GACjC,OAAO,aACJ,0BACC,OAAO,QAAgC;IACrC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,qBACA,SACA,SACF;EACF;EACA,4BACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,+BACA,SACA,SACF;EACF;EACA,6BACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gCACA,YACA,SACF;EACF;EACA,6BACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gCACA,YACA,SACF;EACF;EACA,uBACE,WACA,gBACA,QACyC;GACzC,OAAO,aACJ,0BACC,OAAO,QAAwC;IAC7C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,0BACA,YACA,SACF;EACF;EACA,gCACE,WACA,gBACA,QACkD;GAClD,OAAO,aACJ,0BACC,OAAO,QAAiD;IACtD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mCACA,YACA,SACF;EACF;EACA,4CACE,WACA,gBACA,QAC8D;GAC9D,OAAO,aACJ,0BACC,OAAO,QAA6D;IAClE,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,+CACA,YACA,SACF;EACF;EACA,gCACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mCACA,SACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,6BACE,WACA,gBACA,QAC+C;GAC/C,OAAO,aACJ,0BACC,OAAO,QAA8C;IACnD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,gCACA,YACA,SACF;EACF;EACA,8BACE,WACA,gBACA,QAC6C;GAC7C,OAAO,aACJ,0BACC,OAAO,QAA4C;IACjD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iCACA,SACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,qDACE,WACA,gBACA,QACuE;GACvE,OAAO,aACJ,0BACC,OAAO,QACL;IACE,UACE;IACF;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CACF,GACF,wDACA,YACA,SACF;EACF;EACA,yCACE,WACA,gBACA,QAC2D;GAC3D,OAAO,aACJ,0BACC,OAAO,QAA0D;IAC/D,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4CACA,YACA,SACF;EACF;EACA,kCACE,WACA,gBACA,QACoD;GACpD,OAAO,aACJ,0BACC,OAAO,QAAmD;IACxD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,qCACA,YACA,SACF;EACF;EACA,8CACE,WACA,gBACA,QACgE;GAChE,OAAO,aACJ,0BACC,OAAO,QACL;IACE,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CACF,GACF,iDACA,YACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QACkC;GAClC,OAAO,aACJ,0BACC,OAAO,QAAiC;IACtC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,YACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,cACE,WACA,gBACA,QACgC;GAChC,OAAO,aACJ,0BACC,OAAO,QAA+B;IACpC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iBACA,YACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACwC;GACxC,OAAO,aACJ,0BACC,OAAO,QAAuC;IAC5C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,YACA,SACF;EACF;EACA,eACE,WACA,gBACA,QAC8B;GAC9B,OAAO,aACJ,0BACC,OAAO,QAA6B;IAClC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,kBACA,SACA,SACF;EACF;EACA,SACE,WACA,gBACA,QACwB;GACxB,OAAO,aACJ,0BACC,OAAO,QAAuB;IAC5B,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,YACA,SACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,SACA,SACF;EACF;EACA,sBACE,WACA,gBACA,QACqC;GACrC,OAAO,aACJ,0BACC,OAAO,QAAoC;IACzC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,yBACA,SACA,SACF;EACF;EACA,wBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,2BACA,SACA,SACF;EACF;EACA,8BACE,WACA,gBACA,QAC6C;GAC7C,OAAO,aACJ,0BACC,OAAO,QAA4C;IACjD,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,iCACA,SACA,SACF;EACF;EACA,wBACE,WACA,gBACA,QACuC;GACvC,OAAO,aACJ,0BACC,OAAO,QAAsC;IAC3C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,2BACA,SACA,SACF;EACF;EACA,gBACE,WACA,gBACA,QAC+B;GAC/B,OAAO,aACJ,0BACC,OAAO,QAA8B;IACnC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,mBACA,SACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;EACA,yBACE,WACA,gBACA,QAC2C;GAC3C,OAAO,aACJ,0BACC,OAAO,QAA0C;IAC/C,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,4BACA,YACA,SACF;EACF;EACA,iBACE,WACA,gBACA,QACmC;GACnC,OAAO,aACJ,0BACC,OAAO,QAAkC;IACvC,UAAU;IACV;IACA,gBAAgB;KAAE,GAAG;KAAgB,GAAG;IAAsB;IAC9D;GACF,CAAC,GACH,oBACA,YACA,SACF;EACF;CACF;AACF"}