mudbase-sdk 1.3.13 → 2.3.13

package/apis/organizations-api.ts

@@ -0,0 +1,3104 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * MUDBASESDK
+ * MUDBASE is a scalable, real-time, and secure Backend-as-a-Service (BaaS) platform  designed for modern applications. Built with custom logic, it offers fine-grained  control, extensibility, and enterprise-grade security.  ## Features - 🔐 Multi-provider authentication (30+ OAuth providers) - 📊 Real-time database with collections - 📁 File storage and management - 🔑 API key management with permissions - 🔗 Webhook system with retry logic - ⚡ Serverless functions - 💬 Multi-channel messaging (Push, Email, SMS) - 📈 Usage analytics and monitoring - 🌐 Real-time WebSocket events - 🔍 Full-text search capabilities - 💳 Billing: fiat only for project subscriptions and org BaaS checkout (platform fee split). On-chain billing is not exposed on these APIs (optional `crypto-payment-module/` in repo, not mounted by default). - 🏢 Enterprise / Phase 4: custom domains on Growth, Scale, and Enterprise (TXT DNS at `_mudbase-verify.<hostname>`); `settings.customDomainAddon` is optional (billing/legacy); dedicated DB migration script, periodic DNS recheck job, optional `infrastructureEnvironments[]` and edge/metering fields on `dedicated`. 
+ *
+ * The version of the OpenAPI document: 1.3.13
+ * Contact: support@mudbase.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import type { Configuration } from '../configuration';
+import type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';
+import globalAxios from 'axios';
+// Some imports not used depending on template conditions
+// @ts-ignore
+import { DUMMY_BASE_URL, assertParamExists, setApiKeyToObject, setBasicAuthToObject, setBearerAuthToObject, setOAuthToObject, setSearchParams, serializeDataIfNeeded, toPathString, createRequestFunction, replaceWithSerializableTypeIfNeeded } from '../common';
+// @ts-ignore
+import { BASE_PATH, COLLECTION_FORMATS, type RequestArgs, BaseAPI, RequiredError, operationServerMap } from '../base';
+// @ts-ignore
+import type { AddOrgDomainRequest } from '../models';
+// @ts-ignore
+import type { CreateOrganization403Response } from '../models';
+// @ts-ignore
+import type { CreateOrganizationRequest } from '../models';
+// @ts-ignore
+import type { DeleteOrganization200Response } from '../models';
+// @ts-ignore
+import type { DeleteSubOrganization200Response } from '../models';
+// @ts-ignore
+import type { GetOrganizationMembers200Response } from '../models';
+// @ts-ignore
+import type { GetOrganizationUsage200Response } from '../models';
+// @ts-ignore
+import type { GetOrganizationUsers200Response } from '../models';
+// @ts-ignore
+import type { GetProjectUsers200Response } from '../models';
+// @ts-ignore
+import type { GetSubOrganizations200Response } from '../models';
+// @ts-ignore
+import type { GetUserOverview200Response } from '../models';
+// @ts-ignore
+import type { InternalCustomDomainAddonRequest } from '../models';
+// @ts-ignore
+import type { InternalDomainDnsRecheckBatchRequest } from '../models';
+// @ts-ignore
+import type { InviteMemberRequest } from '../models';
+// @ts-ignore
+import type { InviteSubOrganizationMember200Response } from '../models';
+// @ts-ignore
+import type { InviteTeamMember200Response } from '../models';
+// @ts-ignore
+import type { ListOrganizations200Response } from '../models';
+// @ts-ignore
+import type { OrgAddDomainResponse } from '../models';
+// @ts-ignore
+import type { OrgCustomDomainPlatformReadyRequest } from '../models';
+// @ts-ignore
+import type { OrgDnsInstructionsResponse } from '../models';
+// @ts-ignore
+import type { OrgDomainsListResponse } from '../models';
+// @ts-ignore
+import type { OrgPatchDomainResponse } from '../models';
+// @ts-ignore
+import type { OrgVerifyCustomDomainDnsFailureResponse } from '../models';
+// @ts-ignore
+import type { OrgVerifyCustomDomainDnsSuccessResponse } from '../models';
+// @ts-ignore
+import type { Organization } from '../models';
+// @ts-ignore
+import type { PatchOrgDomainRequest } from '../models';
+// @ts-ignore
+import type { ProvisionEnterpriseRequest } from '../models';
+// @ts-ignore
+import type { RemoveTeamMember200Response } from '../models';
+// @ts-ignore
+import type { SetOrgPrimaryDomainRequest } from '../models';
+// @ts-ignore
+import type { UpdateMemberRole200Response } from '../models';
+// @ts-ignore
+import type { UpdateMemberRoleRequest } from '../models';
+// @ts-ignore
+import type { UpdateOrganization200Response } from '../models';
+// @ts-ignore
+import type { UpdateOrganizationPlan200Response } from '../models';
+// @ts-ignore
+import type { UpdateOrganizationPlanRequest } from '../models';
+// @ts-ignore
+import type { UpdateOrganizationRequest } from '../models';
+// @ts-ignore
+import type { UpdateSubOrganization200Response } from '../models';
+// @ts-ignore
+import type { UpdateUserAccountStatus200Response } from '../models';
+// @ts-ignore
+import type { UpdateUserAccountStatusRequest } from '../models';
+/**
+ * OrganizationsApi - axios parameter creator
+ */
+export const OrganizationsApiAxiosParamCreator = function (configuration?: Configuration) {
+    return {
+        /**
+         * Creates a pending domain row; the response **`domain`** uses the compact **`OrgDomainEntryOrgConsole`** shape (**`dnsRecords`** includes the Mudbase ownership TXT). **`dnsRecords`** may include the Mudbase TXT and routing CNAME only until the Mudbase TXT succeeds and the managed certificate is provisioned. **`flyCertificateStatus`** is typically omitted until certificate provisioning runs after the first successful **`verify-dns`**. 
+         * @summary Add a custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {AddOrgDomainRequest} addOrgDomainRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        addOrgCustomDomain: async (orgId: string, projectId: string, addOrgDomainRequest: AddOrgDomainRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('addOrgCustomDomain', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('addOrgCustomDomain', 'projectId', projectId)
+            // verify required parameter 'addOrgDomainRequest' is not null or undefined
+            assertParamExists('addOrgCustomDomain', 'addOrgDomainRequest', addOrgDomainRequest)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(addOrgDomainRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * ~~Create a new organization.~~ This endpoint is disabled and kept only for backward compatibility in documentation. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary ~~Create new organization~~ (disabled)
+         * @param {CreateOrganizationRequest} createOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        createOrganization: async (createOrganizationRequest: CreateOrganizationRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'createOrganizationRequest' is not null or undefined
+            assertParamExists('createOrganization', 'createOrganizationRequest', createOrganizationRequest)
+            const localVarPath = `/api/orgs`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(createOrganizationRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Remove a custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        deleteOrgCustomDomain: async (orgId: string, projectId: string, hostname: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('deleteOrgCustomDomain', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('deleteOrgCustomDomain', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('deleteOrgCustomDomain', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Delete an organization permanently. This is a destructive operation. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Delete organization
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        deleteOrganization: async (orgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('deleteOrganization', 'orgId', orgId)
+            const localVarPath = `/api/orgs/{orgId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary ~~Delete sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        deleteSubOrganization: async (orgId: string, suborgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('deleteSubOrganization', 'orgId', orgId)
+            // verify required parameter 'suborgId' is not null or undefined
+            assertParamExists('deleteSubOrganization', 'suborgId', suborgId)
+            const localVarPath = `/api/orgs/{orgId}/suborgs/{suborgId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"suborgId"}}`, encodeURIComponent(String(suborgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Returns the same shape as list/add for one hostname (URL-encode `hostname` in the path), including **`dnsRecords`** and **`flyCertificateStatus`** when applicable. See **`listOrgCustomDomains`** for how managed certificate provisioning affects those fields. 
+         * @summary Get DNS TXT record instructions for one hostname
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrgCustomDomainDnsInstructions: async (orgId: string, projectId: string, hostname: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getOrgCustomDomainDnsInstructions', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('getOrgCustomDomainDnsInstructions', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('getOrgCustomDomainDnsInstructions', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}/dns-instructions`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get organization details by ID. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get organization details by ID
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganization: async (orgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getOrganization', 'orgId', orgId)
+            const localVarPath = `/api/orgs/{orgId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get all members of an organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Get organization members
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganizationMembers: async (orgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getOrganizationMembers', 'orgId', orgId)
+            const localVarPath = `/api/orgs/{orgId}/members`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get usage statistics and billing information for an organization. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get organization usage and billing
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganizationUsage: async (orgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getOrganizationUsage', 'orgId', orgId)
+            const localVarPath = `/api/orgs/{orgId}/usage`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get all users in the organization with metadata (email, full name, role, accountStatus, phone, lastLogin, etc.). Optional query `status` filters by accountStatus (pending, active, suspended). Requires organization access and owner or admin role. 
+         * @summary List organization users with metadata
+         * @param {string} orgId 
+         * @param {GetOrganizationUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganizationUsers: async (orgId: string, status?: GetOrganizationUsersStatusEnum, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getOrganizationUsers', 'orgId', orgId)
+            const localVarPath = `/api/orgs/{orgId}/users`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            if (status !== undefined) {
+                localVarQueryParameter['status'] = status;
+            }
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get all users in a project with metadata (email, full name, role, accountStatus, etc.). Optional query `status` filters by accountStatus. Project must belong to the organization. Requires owner or admin role. 
+         * @summary List project users with metadata
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {GetProjectUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getProjectUsers: async (orgId: string, projectId: string, status?: GetProjectUsersStatusEnum, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getProjectUsers', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('getProjectUsers', 'projectId', projectId)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/users`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            if (status !== undefined) {
+                localVarQueryParameter['status'] = status;
+            }
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get all sub-organizations under a parent organization. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary ~~Get sub-organizations~~ (deprecated)
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        getSubOrganizations: async (orgId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getSubOrganizations', 'orgId', orgId)
+            const localVarPath = `/api/orgs/{orgId}/suborgs`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get a user\'s profile plus footprint (files count/size, sessions, API keys, collections in project). Use for dashboard to see everything tied to the user. Requires owner or admin role. 
+         * @summary Get user overview and data footprint
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getUserOverview: async (orgId: string, userId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('getUserOverview', 'orgId', orgId)
+            // verify required parameter 'userId' is not null or undefined
+            assertParamExists('getUserOverview', 'userId', userId)
+            const localVarPath = `/api/orgs/{orgId}/users/{userId}/overview`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"userId"}}`, encodeURIComponent(String(userId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Enable/disable Growth/Scale custom domain add-on (internal)
+         * @param {InternalCustomDomainAddonRequest} internalCustomDomainAddonRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalCustomDomainAddon: async (internalCustomDomainAddonRequest: InternalCustomDomainAddonRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'internalCustomDomainAddonRequest' is not null or undefined
+            assertParamExists('internalCustomDomainAddon', 'internalCustomDomainAddonRequest', internalCustomDomainAddonRequest)
+            const localVarPath = `/internal/org/custom-domain-addon`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication InternalApiKey required
+            await setApiKeyToObject(localVarHeaderParameter, "X-Internal-Api-Key", configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(internalCustomDomainAddonRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Returns the last automated custom-domain sweep (TXT recheck + certificate provisioning retry), job env flags, and deploy troubleshooting hints when the proxy reports the app is not listening on 0.0.0.0:PORT. Requires header `X-Internal-Api-Key` (same as other /internal routes).
+         * @summary Custom domain background sweep status (internal)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalCustomDomainSweepStatus: async (options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/internal/custom-domain/sweep-status`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication InternalApiKey required
+            await setApiKeyToObject(localVarHeaderParameter, "X-Internal-Api-Key", configuration)
+
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Batch DNS re-verification for drift (internal)
+         * @param {InternalDomainDnsRecheckBatchRequest} [internalDomainDnsRecheckBatchRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalDomainDnsRecheckBatch: async (internalDomainDnsRecheckBatchRequest?: InternalDomainDnsRecheckBatchRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/internal/domain-dns/recheck-batch`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication InternalApiKey required
+            await setApiKeyToObject(localVarHeaderParameter, "X-Internal-Api-Key", configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(internalDomainDnsRecheckBatchRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Provision enterprise dedicated API/DB (internal)
+         * @param {ProvisionEnterpriseRequest} provisionEnterpriseRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalProvisionEnterprise: async (provisionEnterpriseRequest: ProvisionEnterpriseRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'provisionEnterpriseRequest' is not null or undefined
+            assertParamExists('internalProvisionEnterprise', 'provisionEnterpriseRequest', provisionEnterpriseRequest)
+            const localVarPath = `/internal/provision-enterprise`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication InternalApiKey required
+            await setApiKeyToObject(localVarHeaderParameter, "X-Internal-Api-Key", configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(provisionEnterpriseRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary ~~Invite member to sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {InviteMemberRequest} inviteMemberRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        inviteSubOrganizationMember: async (orgId: string, suborgId: string, inviteMemberRequest: InviteMemberRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('inviteSubOrganizationMember', 'orgId', orgId)
+            // verify required parameter 'suborgId' is not null or undefined
+            assertParamExists('inviteSubOrganizationMember', 'suborgId', suborgId)
+            // verify required parameter 'inviteMemberRequest' is not null or undefined
+            assertParamExists('inviteSubOrganizationMember', 'inviteMemberRequest', inviteMemberRequest)
+            const localVarPath = `/api/orgs/{orgId}/suborgs/{suborgId}/invite`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"suborgId"}}`, encodeURIComponent(String(suborgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(inviteMemberRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Send an invitation to a user to join the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Invite team member to organization
+         * @param {string} orgId 
+         * @param {InviteMemberRequest} inviteMemberRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        inviteTeamMember: async (orgId: string, inviteMemberRequest: InviteMemberRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('inviteTeamMember', 'orgId', orgId)
+            // verify required parameter 'inviteMemberRequest' is not null or undefined
+            assertParamExists('inviteTeamMember', 'inviteMemberRequest', inviteMemberRequest)
+            const localVarPath = `/api/orgs/{orgId}/invite`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(inviteMemberRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Returns allowed hostnames for **this project**, primary hostname (per project), API base URL, and per-domain DNS guidance.  Each row uses **`dnsRecords`** for the Mudbase ownership TXT (purpose **`mudbase_ownership`**) and the routing **CNAME** target that Mudbase provisions for the hostname (else the platform default target). Once the ownership TXT has passed at least once, Mudbase provisions and manages the TLS certificate for the hostname automatically and may add further checklist rows (for example `acme_challenge`) needed to complete certificate issuance. The certificate status field mirrors the managed certificate’s state during issuance (e.g. `pending_validation`, `active`).  Managed edge TLS details are present only on deployments that serve managed edge certificates.  Requires Growth, Scale, or Enterprise plan (custom domains included in plan features). 
+         * @summary List custom domains and DNS verification hints
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOrgCustomDomains: async (orgId: string, projectId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('listOrgCustomDomains', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('listOrgCustomDomains', 'projectId', projectId)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Get all organizations the authenticated user belongs to. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get all organizations for user
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOrganizations: async (options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/api/orgs`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Legacy optional ping: ops are emailed automatically on first successful Mudbase TXT verify. Use this only for an extra nudge. Sends an email to ops while the domain is in platform setup (after Mudbase TXT verification through later pipeline states). Recipients default to `admin@mudhaxkservices.com` and `admin@mudbase.dev` when `CUSTOM_DOMAIN_OPS_NOTIFY_EMAILS` is unset; override with that env (comma/space-separated). Returns **503** `email_provider_not_configured` if the platform email provider is not configured. 
+         * @summary Notify platform ops that hosting or edge work is ready (email)
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {OrgCustomDomainPlatformReadyRequest} [orgCustomDomainPlatformReadyRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        orgCustomDomainPlatformReady: async (orgId: string, projectId: string, hostname: string, orgCustomDomainPlatformReadyRequest?: OrgCustomDomainPlatformReadyRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('orgCustomDomainPlatformReady', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('orgCustomDomainPlatformReady', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('orgCustomDomainPlatformReady', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}/platform-ready`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(orgCustomDomainPlatformReadyRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Usually unnecessary. With automated certificate provisioning, the Mudbase TXT verify may already set `cname_approved`. Legacy pipelines may queue `cname_pending_staff` until staff **`approve-cname`**. Use **`routingCnameTarget`** from **`GET .../projects/{projectId}/domains`** (the managed routing CNAME target when provisioned, else the platform default target). 
+         * @summary Custom domain step 2 (optional): org confirms routing CNAME was added
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        orgCustomDomainSubmitCname: async (orgId: string, projectId: string, hostname: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('orgCustomDomainSubmitCname', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('orgCustomDomainSubmitCname', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('orgCustomDomainSubmitCname', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}/submit-cname`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Deprecated alias of **`orgCustomDomainVerifyPlatformDns`** (same behavior: manual TXT and/or automated certificate provisioning per deployment).
+         * @summary Deprecated — use POST .../verify-platform-dns
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        orgCustomDomainSubmitPlatformDnsVerificationDeprecated: async (orgId: string, projectId: string, hostname: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('orgCustomDomainSubmitPlatformDnsVerificationDeprecated', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('orgCustomDomainSubmitPlatformDnsVerificationDeprecated', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('orgCustomDomainSubmitPlatformDnsVerificationDeprecated', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}/submit-platform-dns-verification`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * **Manual path:** After staff **`PATCH .../platform-dns-verification`**, the org adds the published TXT and calls this endpoint. The API resolves public TXT at **`platformDnsVerification.recordName`** and matches **`recordValue`**. On success, `status` → **`platform_dns_pending_review`** until staff **`POST .../activate`**.  **Automated path (default):** When automated certificate provisioning is in effect, the org calls this after the Mudbase TXT and the certificate DNS rows are in place (status typically **`cname_approved`** from automated verify-dns). The API checks the managed certificate with bounded retries. On success, `status` → **`active`** and the org may receive the activation email, with no staff **`approve-cname`** or **`activate`** required.  **Legacy path:** In the legacy staff pipeline, staff **`approve-cname`** may be required first; after the managed certificate is ready, **`status`** becomes **`active`** on auto-activation, else **`platform_dns_pending_review`** until staff **`activate`**.  **`platform_dns_verification_failed`** may include **`details.flyStatus`** / **`details.flyError`** with provisioning error context. 
+         * @summary Custom domain step 3: verify platform DNS (manual TXT or managed certificate readiness)
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        orgCustomDomainVerifyPlatformDns: async (orgId: string, projectId: string, hostname: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('orgCustomDomainVerifyPlatformDns', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('orgCustomDomainVerifyPlatformDns', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('orgCustomDomainVerifyPlatformDns', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}/verify-platform-dns`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Update domain status or regenerate verification token
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {PatchOrgDomainRequest} [patchOrgDomainRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        patchOrgCustomDomain: async (orgId: string, projectId: string, hostname: string, patchOrgDomainRequest?: PatchOrgDomainRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('patchOrgCustomDomain', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('patchOrgCustomDomain', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('patchOrgCustomDomain', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(patchOrgDomainRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary ~~Remove member from sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        removeSubOrganizationMember: async (orgId: string, suborgId: string, userId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('removeSubOrganizationMember', 'orgId', orgId)
+            // verify required parameter 'suborgId' is not null or undefined
+            assertParamExists('removeSubOrganizationMember', 'suborgId', suborgId)
+            // verify required parameter 'userId' is not null or undefined
+            assertParamExists('removeSubOrganizationMember', 'userId', userId)
+            const localVarPath = `/api/orgs/{orgId}/suborgs/{suborgId}/members/{userId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"suborgId"}}`, encodeURIComponent(String(suborgId)))
+                .replace(`{${"userId"}}`, encodeURIComponent(String(userId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Remove a user from the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Remove team member from organization
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        removeTeamMember: async (orgId: string, userId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('removeTeamMember', 'orgId', orgId)
+            // verify required parameter 'userId' is not null or undefined
+            assertParamExists('removeTeamMember', 'userId', userId)
+            const localVarPath = `/api/orgs/{orgId}/members/{userId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"userId"}}`, encodeURIComponent(String(userId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Set primary custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {SetOrgPrimaryDomainRequest} setOrgPrimaryDomainRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        setOrgPrimaryDomain: async (orgId: string, projectId: string, setOrgPrimaryDomainRequest: SetOrgPrimaryDomainRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('setOrgPrimaryDomain', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('setOrgPrimaryDomain', 'projectId', projectId)
+            // verify required parameter 'setOrgPrimaryDomainRequest' is not null or undefined
+            assertParamExists('setOrgPrimaryDomain', 'setOrgPrimaryDomainRequest', setOrgPrimaryDomainRequest)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/primary`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(setOrgPrimaryDomainRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Update a member\'s role in the organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Update member role
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateMemberRole: async (orgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('updateMemberRole', 'orgId', orgId)
+            // verify required parameter 'userId' is not null or undefined
+            assertParamExists('updateMemberRole', 'userId', userId)
+            // verify required parameter 'updateMemberRoleRequest' is not null or undefined
+            assertParamExists('updateMemberRole', 'updateMemberRoleRequest', updateMemberRoleRequest)
+            const localVarPath = `/api/orgs/{orgId}/members/{userId}/role`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"userId"}}`, encodeURIComponent(String(userId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(updateMemberRoleRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Update organization details. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Update organization
+         * @param {string} orgId 
+         * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateOrganization: async (orgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('updateOrganization', 'orgId', orgId)
+            // verify required parameter 'updateOrganizationRequest' is not null or undefined
+            assertParamExists('updateOrganization', 'updateOrganizationRequest', updateOrganizationRequest)
+            const localVarPath = `/api/orgs/{orgId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(updateOrganizationRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Update organization plan
+         * @param {string} orgId 
+         * @param {UpdateOrganizationPlanRequest} updateOrganizationPlanRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateOrganizationPlan: async (orgId: string, updateOrganizationPlanRequest: UpdateOrganizationPlanRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('updateOrganizationPlan', 'orgId', orgId)
+            // verify required parameter 'updateOrganizationPlanRequest' is not null or undefined
+            assertParamExists('updateOrganizationPlan', 'updateOrganizationPlanRequest', updateOrganizationPlanRequest)
+            const localVarPath = `/api/orgs/plan/{orgId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(updateOrganizationPlanRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Update a sub-organization\'s configuration. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary ~~Update sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        updateSubOrganization: async (orgId: string, suborgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('updateSubOrganization', 'orgId', orgId)
+            // verify required parameter 'suborgId' is not null or undefined
+            assertParamExists('updateSubOrganization', 'suborgId', suborgId)
+            // verify required parameter 'updateOrganizationRequest' is not null or undefined
+            assertParamExists('updateSubOrganization', 'updateOrganizationRequest', updateOrganizationRequest)
+            const localVarPath = `/api/orgs/{orgId}/suborgs/{suborgId}`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"suborgId"}}`, encodeURIComponent(String(suborgId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(updateOrganizationRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary ~~Update sub-organization member role~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {string} userId 
+         * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        updateSubOrganizationMemberRole: async (orgId: string, suborgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('updateSubOrganizationMemberRole', 'orgId', orgId)
+            // verify required parameter 'suborgId' is not null or undefined
+            assertParamExists('updateSubOrganizationMemberRole', 'suborgId', suborgId)
+            // verify required parameter 'userId' is not null or undefined
+            assertParamExists('updateSubOrganizationMemberRole', 'userId', userId)
+            // verify required parameter 'updateMemberRoleRequest' is not null or undefined
+            assertParamExists('updateSubOrganizationMemberRole', 'updateMemberRoleRequest', updateMemberRoleRequest)
+            const localVarPath = `/api/orgs/{orgId}/suborgs/{suborgId}/members/{userId}/role`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"suborgId"}}`, encodeURIComponent(String(suborgId)))
+                .replace(`{${"userId"}}`, encodeURIComponent(String(userId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication ProjectBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(updateMemberRoleRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Set a user\'s account status to active or suspended. Used to approve pending users or suspend/activate accounts. Cannot change status of an organization owner. Requires owner or admin role. 
+         * @summary Update user account status (activate or suspend)
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {UpdateUserAccountStatusRequest} updateUserAccountStatusRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateUserAccountStatus: async (orgId: string, userId: string, updateUserAccountStatusRequest: UpdateUserAccountStatusRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('updateUserAccountStatus', 'orgId', orgId)
+            // verify required parameter 'userId' is not null or undefined
+            assertParamExists('updateUserAccountStatus', 'userId', userId)
+            // verify required parameter 'updateUserAccountStatusRequest' is not null or undefined
+            assertParamExists('updateUserAccountStatus', 'updateUserAccountStatusRequest', updateUserAccountStatusRequest)
+            const localVarPath = `/api/orgs/{orgId}/users/{userId}/status`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"userId"}}`, encodeURIComponent(String(userId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(updateUserAccountStatusRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Looks up TXT at `_mudbase-verify.<hostname>` for value `mudbase-domain-verification=<token>`.  On a successful verify, Mudbase begins provisioning and managing the TLS certificate for the hostname automatically. Depending on the deployment, the response may include managed edge TLS details with domain-control validation (DCV) hints for the certificate.  When automated certificate provisioning is in effect, a successful verify records the certificate’s DNS requirements and status may advance to **`cname_approved`** in the same response (no staff **`approve-cname`** step). Otherwise, first success from `pending`/`failed` may move to **`cname_pending_staff`** and queue platform review as before.  The **200** response may include **`dnsRecords`**, certificate status, and **`routingCnameTarget`** for the managed certificate once its requirements are provisioned. 
+         * @summary Verify domain ownership via DNS TXT
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifyOrgCustomDomainDns: async (orgId: string, projectId: string, hostname: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'orgId' is not null or undefined
+            assertParamExists('verifyOrgCustomDomainDns', 'orgId', orgId)
+            // verify required parameter 'projectId' is not null or undefined
+            assertParamExists('verifyOrgCustomDomainDns', 'projectId', projectId)
+            // verify required parameter 'hostname' is not null or undefined
+            assertParamExists('verifyOrgCustomDomainDns', 'hostname', hostname)
+            const localVarPath = `/api/orgs/{orgId}/projects/{projectId}/domains/{hostname}/verify-dns`
+                .replace(`{${"orgId"}}`, encodeURIComponent(String(orgId)))
+                .replace(`{${"projectId"}}`, encodeURIComponent(String(projectId)))
+                .replace(`{${"hostname"}}`, encodeURIComponent(String(hostname)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication OrgBearerAuth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+    }
+};
+
+/**
+ * OrganizationsApi - functional programming interface
+ */
+export const OrganizationsApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = OrganizationsApiAxiosParamCreator(configuration)
+    return {
+        /**
+         * Creates a pending domain row; the response **`domain`** uses the compact **`OrgDomainEntryOrgConsole`** shape (**`dnsRecords`** includes the Mudbase ownership TXT). **`dnsRecords`** may include the Mudbase TXT and routing CNAME only until the Mudbase TXT succeeds and the managed certificate is provisioned. **`flyCertificateStatus`** is typically omitted until certificate provisioning runs after the first successful **`verify-dns`**. 
+         * @summary Add a custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {AddOrgDomainRequest} addOrgDomainRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async addOrgCustomDomain(orgId: string, projectId: string, addOrgDomainRequest: AddOrgDomainRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgAddDomainResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.addOrgCustomDomain(orgId, projectId, addOrgDomainRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.addOrgCustomDomain']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * ~~Create a new organization.~~ This endpoint is disabled and kept only for backward compatibility in documentation. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary ~~Create new organization~~ (disabled)
+         * @param {CreateOrganizationRequest} createOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async createOrganization(createOrganizationRequest: CreateOrganizationRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.createOrganization(createOrganizationRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.createOrganization']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Remove a custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async deleteOrgCustomDomain(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.deleteOrgCustomDomain(orgId, projectId, hostname, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.deleteOrgCustomDomain']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Delete an organization permanently. This is a destructive operation. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Delete organization
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async deleteOrganization(orgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DeleteOrganization200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.deleteOrganization(orgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.deleteOrganization']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary ~~Delete sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async deleteSubOrganization(orgId: string, suborgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DeleteSubOrganization200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.deleteSubOrganization(orgId, suborgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.deleteSubOrganization']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Returns the same shape as list/add for one hostname (URL-encode `hostname` in the path), including **`dnsRecords`** and **`flyCertificateStatus`** when applicable. See **`listOrgCustomDomains`** for how managed certificate provisioning affects those fields. 
+         * @summary Get DNS TXT record instructions for one hostname
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getOrgCustomDomainDnsInstructions(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgDnsInstructionsResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getOrgCustomDomainDnsInstructions(orgId, projectId, hostname, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getOrgCustomDomainDnsInstructions']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get organization details by ID. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get organization details by ID
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getOrganization(orgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Organization>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getOrganization(orgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getOrganization']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get all members of an organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Get organization members
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getOrganizationMembers(orgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetOrganizationMembers200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getOrganizationMembers(orgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getOrganizationMembers']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get usage statistics and billing information for an organization. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get organization usage and billing
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getOrganizationUsage(orgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetOrganizationUsage200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getOrganizationUsage(orgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getOrganizationUsage']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get all users in the organization with metadata (email, full name, role, accountStatus, phone, lastLogin, etc.). Optional query `status` filters by accountStatus (pending, active, suspended). Requires organization access and owner or admin role. 
+         * @summary List organization users with metadata
+         * @param {string} orgId 
+         * @param {GetOrganizationUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getOrganizationUsers(orgId: string, status?: GetOrganizationUsersStatusEnum, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetOrganizationUsers200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getOrganizationUsers(orgId, status, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getOrganizationUsers']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get all users in a project with metadata (email, full name, role, accountStatus, etc.). Optional query `status` filters by accountStatus. Project must belong to the organization. Requires owner or admin role. 
+         * @summary List project users with metadata
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {GetProjectUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getProjectUsers(orgId: string, projectId: string, status?: GetProjectUsersStatusEnum, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetProjectUsers200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getProjectUsers(orgId, projectId, status, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getProjectUsers']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get all sub-organizations under a parent organization. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary ~~Get sub-organizations~~ (deprecated)
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async getSubOrganizations(orgId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetSubOrganizations200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getSubOrganizations(orgId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getSubOrganizations']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get a user\'s profile plus footprint (files count/size, sessions, API keys, collections in project). Use for dashboard to see everything tied to the user. Requires owner or admin role. 
+         * @summary Get user overview and data footprint
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getUserOverview(orgId: string, userId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<GetUserOverview200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getUserOverview(orgId, userId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.getUserOverview']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Enable/disable Growth/Scale custom domain add-on (internal)
+         * @param {InternalCustomDomainAddonRequest} internalCustomDomainAddonRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async internalCustomDomainAddon(internalCustomDomainAddonRequest: InternalCustomDomainAddonRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.internalCustomDomainAddon(internalCustomDomainAddonRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.internalCustomDomainAddon']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Returns the last automated custom-domain sweep (TXT recheck + certificate provisioning retry), job env flags, and deploy troubleshooting hints when the proxy reports the app is not listening on 0.0.0.0:PORT. Requires header `X-Internal-Api-Key` (same as other /internal routes).
+         * @summary Custom domain background sweep status (internal)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async internalCustomDomainSweepStatus(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.internalCustomDomainSweepStatus(options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.internalCustomDomainSweepStatus']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Batch DNS re-verification for drift (internal)
+         * @param {InternalDomainDnsRecheckBatchRequest} [internalDomainDnsRecheckBatchRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async internalDomainDnsRecheckBatch(internalDomainDnsRecheckBatchRequest?: InternalDomainDnsRecheckBatchRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.internalDomainDnsRecheckBatch(internalDomainDnsRecheckBatchRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.internalDomainDnsRecheckBatch']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Provision enterprise dedicated API/DB (internal)
+         * @param {ProvisionEnterpriseRequest} provisionEnterpriseRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async internalProvisionEnterprise(provisionEnterpriseRequest: ProvisionEnterpriseRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.internalProvisionEnterprise(provisionEnterpriseRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.internalProvisionEnterprise']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary ~~Invite member to sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {InviteMemberRequest} inviteMemberRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async inviteSubOrganizationMember(orgId: string, suborgId: string, inviteMemberRequest: InviteMemberRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<InviteSubOrganizationMember200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.inviteSubOrganizationMember(orgId, suborgId, inviteMemberRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.inviteSubOrganizationMember']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Send an invitation to a user to join the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Invite team member to organization
+         * @param {string} orgId 
+         * @param {InviteMemberRequest} inviteMemberRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async inviteTeamMember(orgId: string, inviteMemberRequest: InviteMemberRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<InviteTeamMember200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.inviteTeamMember(orgId, inviteMemberRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.inviteTeamMember']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Returns allowed hostnames for **this project**, primary hostname (per project), API base URL, and per-domain DNS guidance.  Each row uses **`dnsRecords`** for the Mudbase ownership TXT (purpose **`mudbase_ownership`**) and the routing **CNAME** target that Mudbase provisions for the hostname (else the platform default target). Once the ownership TXT has passed at least once, Mudbase provisions and manages the TLS certificate for the hostname automatically and may add further checklist rows (for example `acme_challenge`) needed to complete certificate issuance. The certificate status field mirrors the managed certificate’s state during issuance (e.g. `pending_validation`, `active`).  Managed edge TLS details are present only on deployments that serve managed edge certificates.  Requires Growth, Scale, or Enterprise plan (custom domains included in plan features). 
+         * @summary List custom domains and DNS verification hints
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listOrgCustomDomains(orgId: string, projectId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgDomainsListResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listOrgCustomDomains(orgId, projectId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.listOrgCustomDomains']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Get all organizations the authenticated user belongs to. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get all organizations for user
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listOrganizations(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListOrganizations200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listOrganizations(options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.listOrganizations']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Legacy optional ping: ops are emailed automatically on first successful Mudbase TXT verify. Use this only for an extra nudge. Sends an email to ops while the domain is in platform setup (after Mudbase TXT verification through later pipeline states). Recipients default to `admin@mudhaxkservices.com` and `admin@mudbase.dev` when `CUSTOM_DOMAIN_OPS_NOTIFY_EMAILS` is unset; override with that env (comma/space-separated). Returns **503** `email_provider_not_configured` if the platform email provider is not configured. 
+         * @summary Notify platform ops that hosting or edge work is ready (email)
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {OrgCustomDomainPlatformReadyRequest} [orgCustomDomainPlatformReadyRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async orgCustomDomainPlatformReady(orgId: string, projectId: string, hostname: string, orgCustomDomainPlatformReadyRequest?: OrgCustomDomainPlatformReadyRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.orgCustomDomainPlatformReady(orgId, projectId, hostname, orgCustomDomainPlatformReadyRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.orgCustomDomainPlatformReady']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Usually unnecessary. With automated certificate provisioning, the Mudbase TXT verify may already set `cname_approved`. Legacy pipelines may queue `cname_pending_staff` until staff **`approve-cname`**. Use **`routingCnameTarget`** from **`GET .../projects/{projectId}/domains`** (the managed routing CNAME target when provisioned, else the platform default target). 
+         * @summary Custom domain step 2 (optional): org confirms routing CNAME was added
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async orgCustomDomainSubmitCname(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgPatchDomainResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.orgCustomDomainSubmitCname(orgId, projectId, hostname, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.orgCustomDomainSubmitCname']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Deprecated alias of **`orgCustomDomainVerifyPlatformDns`** (same behavior: manual TXT and/or automated certificate provisioning per deployment).
+         * @summary Deprecated — use POST .../verify-platform-dns
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async orgCustomDomainSubmitPlatformDnsVerificationDeprecated(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgPatchDomainResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.orgCustomDomainSubmitPlatformDnsVerificationDeprecated(orgId, projectId, hostname, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.orgCustomDomainSubmitPlatformDnsVerificationDeprecated']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * **Manual path:** After staff **`PATCH .../platform-dns-verification`**, the org adds the published TXT and calls this endpoint. The API resolves public TXT at **`platformDnsVerification.recordName`** and matches **`recordValue`**. On success, `status` → **`platform_dns_pending_review`** until staff **`POST .../activate`**.  **Automated path (default):** When automated certificate provisioning is in effect, the org calls this after the Mudbase TXT and the certificate DNS rows are in place (status typically **`cname_approved`** from automated verify-dns). The API checks the managed certificate with bounded retries. On success, `status` → **`active`** and the org may receive the activation email, with no staff **`approve-cname`** or **`activate`** required.  **Legacy path:** In the legacy staff pipeline, staff **`approve-cname`** may be required first; after the managed certificate is ready, **`status`** becomes **`active`** on auto-activation, else **`platform_dns_pending_review`** until staff **`activate`**.  **`platform_dns_verification_failed`** may include **`details.flyStatus`** / **`details.flyError`** with provisioning error context. 
+         * @summary Custom domain step 3: verify platform DNS (manual TXT or managed certificate readiness)
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async orgCustomDomainVerifyPlatformDns(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgPatchDomainResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.orgCustomDomainVerifyPlatformDns(orgId, projectId, hostname, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.orgCustomDomainVerifyPlatformDns']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Update domain status or regenerate verification token
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {PatchOrgDomainRequest} [patchOrgDomainRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async patchOrgCustomDomain(orgId: string, projectId: string, hostname: string, patchOrgDomainRequest?: PatchOrgDomainRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgPatchDomainResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.patchOrgCustomDomain(orgId, projectId, hostname, patchOrgDomainRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.patchOrgCustomDomain']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary ~~Remove member from sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async removeSubOrganizationMember(orgId: string, suborgId: string, userId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RemoveTeamMember200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.removeSubOrganizationMember(orgId, suborgId, userId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.removeSubOrganizationMember']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Remove a user from the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Remove team member from organization
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async removeTeamMember(orgId: string, userId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RemoveTeamMember200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.removeTeamMember(orgId, userId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.removeTeamMember']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Set primary custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {SetOrgPrimaryDomainRequest} setOrgPrimaryDomainRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async setOrgPrimaryDomain(orgId: string, projectId: string, setOrgPrimaryDomainRequest: SetOrgPrimaryDomainRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.setOrgPrimaryDomain(orgId, projectId, setOrgPrimaryDomainRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.setOrgPrimaryDomain']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Update a member\'s role in the organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Update member role
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async updateMemberRole(orgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UpdateMemberRole200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.updateMemberRole(orgId, userId, updateMemberRoleRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.updateMemberRole']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Update organization details. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Update organization
+         * @param {string} orgId 
+         * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async updateOrganization(orgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UpdateOrganization200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.updateOrganization(orgId, updateOrganizationRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.updateOrganization']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Update organization plan
+         * @param {string} orgId 
+         * @param {UpdateOrganizationPlanRequest} updateOrganizationPlanRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async updateOrganizationPlan(orgId: string, updateOrganizationPlanRequest: UpdateOrganizationPlanRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UpdateOrganizationPlan200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.updateOrganizationPlan(orgId, updateOrganizationPlanRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.updateOrganizationPlan']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Update a sub-organization\'s configuration. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary ~~Update sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async updateSubOrganization(orgId: string, suborgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UpdateSubOrganization200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.updateSubOrganization(orgId, suborgId, updateOrganizationRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.updateSubOrganization']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary ~~Update sub-organization member role~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {string} userId 
+         * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        async updateSubOrganizationMemberRole(orgId: string, suborgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UpdateMemberRole200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.updateSubOrganizationMemberRole(orgId, suborgId, userId, updateMemberRoleRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.updateSubOrganizationMemberRole']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Set a user\'s account status to active or suspended. Used to approve pending users or suspend/activate accounts. Cannot change status of an organization owner. Requires owner or admin role. 
+         * @summary Update user account status (activate or suspend)
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {UpdateUserAccountStatusRequest} updateUserAccountStatusRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async updateUserAccountStatus(orgId: string, userId: string, updateUserAccountStatusRequest: UpdateUserAccountStatusRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UpdateUserAccountStatus200Response>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.updateUserAccountStatus(orgId, userId, updateUserAccountStatusRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.updateUserAccountStatus']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Looks up TXT at `_mudbase-verify.<hostname>` for value `mudbase-domain-verification=<token>`.  On a successful verify, Mudbase begins provisioning and managing the TLS certificate for the hostname automatically. Depending on the deployment, the response may include managed edge TLS details with domain-control validation (DCV) hints for the certificate.  When automated certificate provisioning is in effect, a successful verify records the certificate’s DNS requirements and status may advance to **`cname_approved`** in the same response (no staff **`approve-cname`** step). Otherwise, first success from `pending`/`failed` may move to **`cname_pending_staff`** and queue platform review as before.  The **200** response may include **`dnsRecords`**, certificate status, and **`routingCnameTarget`** for the managed certificate once its requirements are provisioned. 
+         * @summary Verify domain ownership via DNS TXT
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async verifyOrgCustomDomainDns(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<OrgVerifyCustomDomainDnsSuccessResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.verifyOrgCustomDomainDns(orgId, projectId, hostname, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['OrganizationsApi.verifyOrgCustomDomainDns']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+    }
+};
+
+/**
+ * OrganizationsApi - factory interface
+ */
+export const OrganizationsApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = OrganizationsApiFp(configuration)
+    return {
+        /**
+         * Creates a pending domain row; the response **`domain`** uses the compact **`OrgDomainEntryOrgConsole`** shape (**`dnsRecords`** includes the Mudbase ownership TXT). **`dnsRecords`** may include the Mudbase TXT and routing CNAME only until the Mudbase TXT succeeds and the managed certificate is provisioned. **`flyCertificateStatus`** is typically omitted until certificate provisioning runs after the first successful **`verify-dns`**. 
+         * @summary Add a custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {AddOrgDomainRequest} addOrgDomainRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        addOrgCustomDomain(orgId: string, projectId: string, addOrgDomainRequest: AddOrgDomainRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgAddDomainResponse> {
+            return localVarFp.addOrgCustomDomain(orgId, projectId, addOrgDomainRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * ~~Create a new organization.~~ This endpoint is disabled and kept only for backward compatibility in documentation. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary ~~Create new organization~~ (disabled)
+         * @param {CreateOrganizationRequest} createOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        createOrganization(createOrganizationRequest: CreateOrganizationRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.createOrganization(createOrganizationRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Remove a custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        deleteOrgCustomDomain(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.deleteOrgCustomDomain(orgId, projectId, hostname, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Delete an organization permanently. This is a destructive operation. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Delete organization
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        deleteOrganization(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<DeleteOrganization200Response> {
+            return localVarFp.deleteOrganization(orgId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary ~~Delete sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        deleteSubOrganization(orgId: string, suborgId: string, options?: RawAxiosRequestConfig): AxiosPromise<DeleteSubOrganization200Response> {
+            return localVarFp.deleteSubOrganization(orgId, suborgId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Returns the same shape as list/add for one hostname (URL-encode `hostname` in the path), including **`dnsRecords`** and **`flyCertificateStatus`** when applicable. See **`listOrgCustomDomains`** for how managed certificate provisioning affects those fields. 
+         * @summary Get DNS TXT record instructions for one hostname
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrgCustomDomainDnsInstructions(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): AxiosPromise<OrgDnsInstructionsResponse> {
+            return localVarFp.getOrgCustomDomainDnsInstructions(orgId, projectId, hostname, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get organization details by ID. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get organization details by ID
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganization(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<Organization> {
+            return localVarFp.getOrganization(orgId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get all members of an organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Get organization members
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganizationMembers(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetOrganizationMembers200Response> {
+            return localVarFp.getOrganizationMembers(orgId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get usage statistics and billing information for an organization. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get organization usage and billing
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganizationUsage(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetOrganizationUsage200Response> {
+            return localVarFp.getOrganizationUsage(orgId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get all users in the organization with metadata (email, full name, role, accountStatus, phone, lastLogin, etc.). Optional query `status` filters by accountStatus (pending, active, suspended). Requires organization access and owner or admin role. 
+         * @summary List organization users with metadata
+         * @param {string} orgId 
+         * @param {GetOrganizationUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getOrganizationUsers(orgId: string, status?: GetOrganizationUsersStatusEnum, options?: RawAxiosRequestConfig): AxiosPromise<GetOrganizationUsers200Response> {
+            return localVarFp.getOrganizationUsers(orgId, status, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get all users in a project with metadata (email, full name, role, accountStatus, etc.). Optional query `status` filters by accountStatus. Project must belong to the organization. Requires owner or admin role. 
+         * @summary List project users with metadata
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {GetProjectUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getProjectUsers(orgId: string, projectId: string, status?: GetProjectUsersStatusEnum, options?: RawAxiosRequestConfig): AxiosPromise<GetProjectUsers200Response> {
+            return localVarFp.getProjectUsers(orgId, projectId, status, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get all sub-organizations under a parent organization. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary ~~Get sub-organizations~~ (deprecated)
+         * @param {string} orgId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        getSubOrganizations(orgId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetSubOrganizations200Response> {
+            return localVarFp.getSubOrganizations(orgId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get a user\'s profile plus footprint (files count/size, sessions, API keys, collections in project). Use for dashboard to see everything tied to the user. Requires owner or admin role. 
+         * @summary Get user overview and data footprint
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getUserOverview(orgId: string, userId: string, options?: RawAxiosRequestConfig): AxiosPromise<GetUserOverview200Response> {
+            return localVarFp.getUserOverview(orgId, userId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Enable/disable Growth/Scale custom domain add-on (internal)
+         * @param {InternalCustomDomainAddonRequest} internalCustomDomainAddonRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalCustomDomainAddon(internalCustomDomainAddonRequest: InternalCustomDomainAddonRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.internalCustomDomainAddon(internalCustomDomainAddonRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Returns the last automated custom-domain sweep (TXT recheck + certificate provisioning retry), job env flags, and deploy troubleshooting hints when the proxy reports the app is not listening on 0.0.0.0:PORT. Requires header `X-Internal-Api-Key` (same as other /internal routes).
+         * @summary Custom domain background sweep status (internal)
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalCustomDomainSweepStatus(options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.internalCustomDomainSweepStatus(options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Batch DNS re-verification for drift (internal)
+         * @param {InternalDomainDnsRecheckBatchRequest} [internalDomainDnsRecheckBatchRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalDomainDnsRecheckBatch(internalDomainDnsRecheckBatchRequest?: InternalDomainDnsRecheckBatchRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.internalDomainDnsRecheckBatch(internalDomainDnsRecheckBatchRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Provision enterprise dedicated API/DB (internal)
+         * @param {ProvisionEnterpriseRequest} provisionEnterpriseRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        internalProvisionEnterprise(provisionEnterpriseRequest: ProvisionEnterpriseRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.internalProvisionEnterprise(provisionEnterpriseRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary ~~Invite member to sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {InviteMemberRequest} inviteMemberRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        inviteSubOrganizationMember(orgId: string, suborgId: string, inviteMemberRequest: InviteMemberRequest, options?: RawAxiosRequestConfig): AxiosPromise<InviteSubOrganizationMember200Response> {
+            return localVarFp.inviteSubOrganizationMember(orgId, suborgId, inviteMemberRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Send an invitation to a user to join the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Invite team member to organization
+         * @param {string} orgId 
+         * @param {InviteMemberRequest} inviteMemberRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        inviteTeamMember(orgId: string, inviteMemberRequest: InviteMemberRequest, options?: RawAxiosRequestConfig): AxiosPromise<InviteTeamMember200Response> {
+            return localVarFp.inviteTeamMember(orgId, inviteMemberRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Returns allowed hostnames for **this project**, primary hostname (per project), API base URL, and per-domain DNS guidance.  Each row uses **`dnsRecords`** for the Mudbase ownership TXT (purpose **`mudbase_ownership`**) and the routing **CNAME** target that Mudbase provisions for the hostname (else the platform default target). Once the ownership TXT has passed at least once, Mudbase provisions and manages the TLS certificate for the hostname automatically and may add further checklist rows (for example `acme_challenge`) needed to complete certificate issuance. The certificate status field mirrors the managed certificate’s state during issuance (e.g. `pending_validation`, `active`).  Managed edge TLS details are present only on deployments that serve managed edge certificates.  Requires Growth, Scale, or Enterprise plan (custom domains included in plan features). 
+         * @summary List custom domains and DNS verification hints
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOrgCustomDomains(orgId: string, projectId: string, options?: RawAxiosRequestConfig): AxiosPromise<OrgDomainsListResponse> {
+            return localVarFp.listOrgCustomDomains(orgId, projectId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Get all organizations the authenticated user belongs to. Requires: OrgBearerAuth (organization-level authentication only). 
+         * @summary Get all organizations for user
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOrganizations(options?: RawAxiosRequestConfig): AxiosPromise<ListOrganizations200Response> {
+            return localVarFp.listOrganizations(options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Legacy optional ping: ops are emailed automatically on first successful Mudbase TXT verify. Use this only for an extra nudge. Sends an email to ops while the domain is in platform setup (after Mudbase TXT verification through later pipeline states). Recipients default to `admin@mudhaxkservices.com` and `admin@mudbase.dev` when `CUSTOM_DOMAIN_OPS_NOTIFY_EMAILS` is unset; override with that env (comma/space-separated). Returns **503** `email_provider_not_configured` if the platform email provider is not configured. 
+         * @summary Notify platform ops that hosting or edge work is ready (email)
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {OrgCustomDomainPlatformReadyRequest} [orgCustomDomainPlatformReadyRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        orgCustomDomainPlatformReady(orgId: string, projectId: string, hostname: string, orgCustomDomainPlatformReadyRequest?: OrgCustomDomainPlatformReadyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.orgCustomDomainPlatformReady(orgId, projectId, hostname, orgCustomDomainPlatformReadyRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Usually unnecessary. With automated certificate provisioning, the Mudbase TXT verify may already set `cname_approved`. Legacy pipelines may queue `cname_pending_staff` until staff **`approve-cname`**. Use **`routingCnameTarget`** from **`GET .../projects/{projectId}/domains`** (the managed routing CNAME target when provisioned, else the platform default target). 
+         * @summary Custom domain step 2 (optional): org confirms routing CNAME was added
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        orgCustomDomainSubmitCname(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): AxiosPromise<OrgPatchDomainResponse> {
+            return localVarFp.orgCustomDomainSubmitCname(orgId, projectId, hostname, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Deprecated alias of **`orgCustomDomainVerifyPlatformDns`** (same behavior: manual TXT and/or automated certificate provisioning per deployment).
+         * @summary Deprecated — use POST .../verify-platform-dns
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        orgCustomDomainSubmitPlatformDnsVerificationDeprecated(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): AxiosPromise<OrgPatchDomainResponse> {
+            return localVarFp.orgCustomDomainSubmitPlatformDnsVerificationDeprecated(orgId, projectId, hostname, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * **Manual path:** After staff **`PATCH .../platform-dns-verification`**, the org adds the published TXT and calls this endpoint. The API resolves public TXT at **`platformDnsVerification.recordName`** and matches **`recordValue`**. On success, `status` → **`platform_dns_pending_review`** until staff **`POST .../activate`**.  **Automated path (default):** When automated certificate provisioning is in effect, the org calls this after the Mudbase TXT and the certificate DNS rows are in place (status typically **`cname_approved`** from automated verify-dns). The API checks the managed certificate with bounded retries. On success, `status` → **`active`** and the org may receive the activation email, with no staff **`approve-cname`** or **`activate`** required.  **Legacy path:** In the legacy staff pipeline, staff **`approve-cname`** may be required first; after the managed certificate is ready, **`status`** becomes **`active`** on auto-activation, else **`platform_dns_pending_review`** until staff **`activate`**.  **`platform_dns_verification_failed`** may include **`details.flyStatus`** / **`details.flyError`** with provisioning error context. 
+         * @summary Custom domain step 3: verify platform DNS (manual TXT or managed certificate readiness)
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        orgCustomDomainVerifyPlatformDns(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): AxiosPromise<OrgPatchDomainResponse> {
+            return localVarFp.orgCustomDomainVerifyPlatformDns(orgId, projectId, hostname, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Update domain status or regenerate verification token
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {PatchOrgDomainRequest} [patchOrgDomainRequest] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        patchOrgCustomDomain(orgId: string, projectId: string, hostname: string, patchOrgDomainRequest?: PatchOrgDomainRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgPatchDomainResponse> {
+            return localVarFp.patchOrgCustomDomain(orgId, projectId, hostname, patchOrgDomainRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary ~~Remove member from sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        removeSubOrganizationMember(orgId: string, suborgId: string, userId: string, options?: RawAxiosRequestConfig): AxiosPromise<RemoveTeamMember200Response> {
+            return localVarFp.removeSubOrganizationMember(orgId, suborgId, userId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Remove a user from the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary Remove team member from organization
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        removeTeamMember(orgId: string, userId: string, options?: RawAxiosRequestConfig): AxiosPromise<RemoveTeamMember200Response> {
+            return localVarFp.removeTeamMember(orgId, userId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Set primary custom domain
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {SetOrgPrimaryDomainRequest} setOrgPrimaryDomainRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        setOrgPrimaryDomain(orgId: string, projectId: string, setOrgPrimaryDomainRequest: SetOrgPrimaryDomainRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.setOrgPrimaryDomain(orgId, projectId, setOrgPrimaryDomainRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Update a member\'s role in the organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Update member role
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateMemberRole(orgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<UpdateMemberRole200Response> {
+            return localVarFp.updateMemberRole(orgId, userId, updateMemberRoleRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Update organization details. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+         * @summary Update organization
+         * @param {string} orgId 
+         * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateOrganization(orgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options?: RawAxiosRequestConfig): AxiosPromise<UpdateOrganization200Response> {
+            return localVarFp.updateOrganization(orgId, updateOrganizationRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Update organization plan
+         * @param {string} orgId 
+         * @param {UpdateOrganizationPlanRequest} updateOrganizationPlanRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateOrganizationPlan(orgId: string, updateOrganizationPlanRequest: UpdateOrganizationPlanRequest, options?: RawAxiosRequestConfig): AxiosPromise<UpdateOrganizationPlan200Response> {
+            return localVarFp.updateOrganizationPlan(orgId, updateOrganizationPlanRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Update a sub-organization\'s configuration. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+         * @summary ~~Update sub-organization~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        updateSubOrganization(orgId: string, suborgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options?: RawAxiosRequestConfig): AxiosPromise<UpdateSubOrganization200Response> {
+            return localVarFp.updateSubOrganization(orgId, suborgId, updateOrganizationRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary ~~Update sub-organization member role~~ (deprecated)
+         * @param {string} orgId 
+         * @param {string} suborgId 
+         * @param {string} userId 
+         * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+         * @param {*} [options] Override http request option.
+         * @deprecated
+         * @throws {RequiredError}
+         */
+        updateSubOrganizationMemberRole(orgId: string, suborgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options?: RawAxiosRequestConfig): AxiosPromise<UpdateMemberRole200Response> {
+            return localVarFp.updateSubOrganizationMemberRole(orgId, suborgId, userId, updateMemberRoleRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Set a user\'s account status to active or suspended. Used to approve pending users or suspend/activate accounts. Cannot change status of an organization owner. Requires owner or admin role. 
+         * @summary Update user account status (activate or suspend)
+         * @param {string} orgId 
+         * @param {string} userId 
+         * @param {UpdateUserAccountStatusRequest} updateUserAccountStatusRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        updateUserAccountStatus(orgId: string, userId: string, updateUserAccountStatusRequest: UpdateUserAccountStatusRequest, options?: RawAxiosRequestConfig): AxiosPromise<UpdateUserAccountStatus200Response> {
+            return localVarFp.updateUserAccountStatus(orgId, userId, updateUserAccountStatusRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Looks up TXT at `_mudbase-verify.<hostname>` for value `mudbase-domain-verification=<token>`.  On a successful verify, Mudbase begins provisioning and managing the TLS certificate for the hostname automatically. Depending on the deployment, the response may include managed edge TLS details with domain-control validation (DCV) hints for the certificate.  When automated certificate provisioning is in effect, a successful verify records the certificate’s DNS requirements and status may advance to **`cname_approved`** in the same response (no staff **`approve-cname`** step). Otherwise, first success from `pending`/`failed` may move to **`cname_pending_staff`** and queue platform review as before.  The **200** response may include **`dnsRecords`**, certificate status, and **`routingCnameTarget`** for the managed certificate once its requirements are provisioned. 
+         * @summary Verify domain ownership via DNS TXT
+         * @param {string} orgId 
+         * @param {string} projectId 
+         * @param {string} hostname 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifyOrgCustomDomainDns(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig): AxiosPromise<OrgVerifyCustomDomainDnsSuccessResponse> {
+            return localVarFp.verifyOrgCustomDomainDns(orgId, projectId, hostname, options).then((request) => request(axios, basePath));
+        },
+    };
+};
+
+/**
+ * OrganizationsApi - object-oriented interface
+ */
+export class OrganizationsApi extends BaseAPI {
+    /**
+     * Creates a pending domain row; the response **`domain`** uses the compact **`OrgDomainEntryOrgConsole`** shape (**`dnsRecords`** includes the Mudbase ownership TXT). **`dnsRecords`** may include the Mudbase TXT and routing CNAME only until the Mudbase TXT succeeds and the managed certificate is provisioned. **`flyCertificateStatus`** is typically omitted until certificate provisioning runs after the first successful **`verify-dns`**. 
+     * @summary Add a custom domain
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {AddOrgDomainRequest} addOrgDomainRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public addOrgCustomDomain(orgId: string, projectId: string, addOrgDomainRequest: AddOrgDomainRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).addOrgCustomDomain(orgId, projectId, addOrgDomainRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * ~~Create a new organization.~~ This endpoint is disabled and kept only for backward compatibility in documentation. Requires: OrgBearerAuth (organization-level authentication only). 
+     * @summary ~~Create new organization~~ (disabled)
+     * @param {CreateOrganizationRequest} createOrganizationRequest 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public createOrganization(createOrganizationRequest: CreateOrganizationRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).createOrganization(createOrganizationRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Remove a custom domain
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public deleteOrgCustomDomain(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).deleteOrgCustomDomain(orgId, projectId, hostname, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Delete an organization permanently. This is a destructive operation. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+     * @summary Delete organization
+     * @param {string} orgId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public deleteOrganization(orgId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).deleteOrganization(orgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary ~~Delete sub-organization~~ (deprecated)
+     * @param {string} orgId 
+     * @param {string} suborgId 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public deleteSubOrganization(orgId: string, suborgId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).deleteSubOrganization(orgId, suborgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Returns the same shape as list/add for one hostname (URL-encode `hostname` in the path), including **`dnsRecords`** and **`flyCertificateStatus`** when applicable. See **`listOrgCustomDomains`** for how managed certificate provisioning affects those fields. 
+     * @summary Get DNS TXT record instructions for one hostname
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public getOrgCustomDomainDnsInstructions(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getOrgCustomDomainDnsInstructions(orgId, projectId, hostname, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get organization details by ID. Requires: OrgBearerAuth (organization-level authentication only). 
+     * @summary Get organization details by ID
+     * @param {string} orgId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public getOrganization(orgId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getOrganization(orgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get all members of an organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+     * @summary Get organization members
+     * @param {string} orgId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public getOrganizationMembers(orgId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getOrganizationMembers(orgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get usage statistics and billing information for an organization. Requires: OrgBearerAuth (organization-level authentication only). 
+     * @summary Get organization usage and billing
+     * @param {string} orgId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public getOrganizationUsage(orgId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getOrganizationUsage(orgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get all users in the organization with metadata (email, full name, role, accountStatus, phone, lastLogin, etc.). Optional query `status` filters by accountStatus (pending, active, suspended). Requires organization access and owner or admin role. 
+     * @summary List organization users with metadata
+     * @param {string} orgId 
+     * @param {GetOrganizationUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public getOrganizationUsers(orgId: string, status?: GetOrganizationUsersStatusEnum, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getOrganizationUsers(orgId, status, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get all users in a project with metadata (email, full name, role, accountStatus, etc.). Optional query `status` filters by accountStatus. Project must belong to the organization. Requires owner or admin role. 
+     * @summary List project users with metadata
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {GetProjectUsersStatusEnum} [status] Filter by account status (pending, active, suspended)
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public getProjectUsers(orgId: string, projectId: string, status?: GetProjectUsersStatusEnum, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getProjectUsers(orgId, projectId, status, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get all sub-organizations under a parent organization. Requires: OrgBearerAuth (organization-level authentication only). 
+     * @summary ~~Get sub-organizations~~ (deprecated)
+     * @param {string} orgId 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public getSubOrganizations(orgId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getSubOrganizations(orgId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get a user\'s profile plus footprint (files count/size, sessions, API keys, collections in project). Use for dashboard to see everything tied to the user. Requires owner or admin role. 
+     * @summary Get user overview and data footprint
+     * @param {string} orgId 
+     * @param {string} userId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public getUserOverview(orgId: string, userId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).getUserOverview(orgId, userId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Enable/disable Growth/Scale custom domain add-on (internal)
+     * @param {InternalCustomDomainAddonRequest} internalCustomDomainAddonRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public internalCustomDomainAddon(internalCustomDomainAddonRequest: InternalCustomDomainAddonRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).internalCustomDomainAddon(internalCustomDomainAddonRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Returns the last automated custom-domain sweep (TXT recheck + certificate provisioning retry), job env flags, and deploy troubleshooting hints when the proxy reports the app is not listening on 0.0.0.0:PORT. Requires header `X-Internal-Api-Key` (same as other /internal routes).
+     * @summary Custom domain background sweep status (internal)
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public internalCustomDomainSweepStatus(options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).internalCustomDomainSweepStatus(options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Batch DNS re-verification for drift (internal)
+     * @param {InternalDomainDnsRecheckBatchRequest} [internalDomainDnsRecheckBatchRequest] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public internalDomainDnsRecheckBatch(internalDomainDnsRecheckBatchRequest?: InternalDomainDnsRecheckBatchRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).internalDomainDnsRecheckBatch(internalDomainDnsRecheckBatchRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Provision enterprise dedicated API/DB (internal)
+     * @param {ProvisionEnterpriseRequest} provisionEnterpriseRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public internalProvisionEnterprise(provisionEnterpriseRequest: ProvisionEnterpriseRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).internalProvisionEnterprise(provisionEnterpriseRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary ~~Invite member to sub-organization~~ (deprecated)
+     * @param {string} orgId 
+     * @param {string} suborgId 
+     * @param {InviteMemberRequest} inviteMemberRequest 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public inviteSubOrganizationMember(orgId: string, suborgId: string, inviteMemberRequest: InviteMemberRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).inviteSubOrganizationMember(orgId, suborgId, inviteMemberRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Send an invitation to a user to join the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+     * @summary Invite team member to organization
+     * @param {string} orgId 
+     * @param {InviteMemberRequest} inviteMemberRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public inviteTeamMember(orgId: string, inviteMemberRequest: InviteMemberRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).inviteTeamMember(orgId, inviteMemberRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Returns allowed hostnames for **this project**, primary hostname (per project), API base URL, and per-domain DNS guidance.  Each row uses **`dnsRecords`** for the Mudbase ownership TXT (purpose **`mudbase_ownership`**) and the routing **CNAME** target that Mudbase provisions for the hostname (else the platform default target). Once the ownership TXT has passed at least once, Mudbase provisions and manages the TLS certificate for the hostname automatically and may add further checklist rows (for example `acme_challenge`) needed to complete certificate issuance. The certificate status field mirrors the managed certificate’s state during issuance (e.g. `pending_validation`, `active`).  Managed edge TLS details are present only on deployments that serve managed edge certificates.  Requires Growth, Scale, or Enterprise plan (custom domains included in plan features). 
+     * @summary List custom domains and DNS verification hints
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public listOrgCustomDomains(orgId: string, projectId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).listOrgCustomDomains(orgId, projectId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Get all organizations the authenticated user belongs to. Requires: OrgBearerAuth (organization-level authentication only). 
+     * @summary Get all organizations for user
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public listOrganizations(options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).listOrganizations(options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Legacy optional ping: ops are emailed automatically on first successful Mudbase TXT verify. Use this only for an extra nudge. Sends an email to ops while the domain is in platform setup (after Mudbase TXT verification through later pipeline states). Recipients default to `admin@mudhaxkservices.com` and `admin@mudbase.dev` when `CUSTOM_DOMAIN_OPS_NOTIFY_EMAILS` is unset; override with that env (comma/space-separated). Returns **503** `email_provider_not_configured` if the platform email provider is not configured. 
+     * @summary Notify platform ops that hosting or edge work is ready (email)
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {OrgCustomDomainPlatformReadyRequest} [orgCustomDomainPlatformReadyRequest] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public orgCustomDomainPlatformReady(orgId: string, projectId: string, hostname: string, orgCustomDomainPlatformReadyRequest?: OrgCustomDomainPlatformReadyRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).orgCustomDomainPlatformReady(orgId, projectId, hostname, orgCustomDomainPlatformReadyRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Usually unnecessary. With automated certificate provisioning, the Mudbase TXT verify may already set `cname_approved`. Legacy pipelines may queue `cname_pending_staff` until staff **`approve-cname`**. Use **`routingCnameTarget`** from **`GET .../projects/{projectId}/domains`** (the managed routing CNAME target when provisioned, else the platform default target). 
+     * @summary Custom domain step 2 (optional): org confirms routing CNAME was added
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public orgCustomDomainSubmitCname(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).orgCustomDomainSubmitCname(orgId, projectId, hostname, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Deprecated alias of **`orgCustomDomainVerifyPlatformDns`** (same behavior: manual TXT and/or automated certificate provisioning per deployment).
+     * @summary Deprecated — use POST .../verify-platform-dns
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public orgCustomDomainSubmitPlatformDnsVerificationDeprecated(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).orgCustomDomainSubmitPlatformDnsVerificationDeprecated(orgId, projectId, hostname, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * **Manual path:** After staff **`PATCH .../platform-dns-verification`**, the org adds the published TXT and calls this endpoint. The API resolves public TXT at **`platformDnsVerification.recordName`** and matches **`recordValue`**. On success, `status` → **`platform_dns_pending_review`** until staff **`POST .../activate`**.  **Automated path (default):** When automated certificate provisioning is in effect, the org calls this after the Mudbase TXT and the certificate DNS rows are in place (status typically **`cname_approved`** from automated verify-dns). The API checks the managed certificate with bounded retries. On success, `status` → **`active`** and the org may receive the activation email, with no staff **`approve-cname`** or **`activate`** required.  **Legacy path:** In the legacy staff pipeline, staff **`approve-cname`** may be required first; after the managed certificate is ready, **`status`** becomes **`active`** on auto-activation, else **`platform_dns_pending_review`** until staff **`activate`**.  **`platform_dns_verification_failed`** may include **`details.flyStatus`** / **`details.flyError`** with provisioning error context. 
+     * @summary Custom domain step 3: verify platform DNS (manual TXT or managed certificate readiness)
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public orgCustomDomainVerifyPlatformDns(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).orgCustomDomainVerifyPlatformDns(orgId, projectId, hostname, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Update domain status or regenerate verification token
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {PatchOrgDomainRequest} [patchOrgDomainRequest] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public patchOrgCustomDomain(orgId: string, projectId: string, hostname: string, patchOrgDomainRequest?: PatchOrgDomainRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).patchOrgCustomDomain(orgId, projectId, hostname, patchOrgDomainRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary ~~Remove member from sub-organization~~ (deprecated)
+     * @param {string} orgId 
+     * @param {string} suborgId 
+     * @param {string} userId 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public removeSubOrganizationMember(orgId: string, suborgId: string, userId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).removeSubOrganizationMember(orgId, suborgId, userId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Remove a user from the organization. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+     * @summary Remove team member from organization
+     * @param {string} orgId 
+     * @param {string} userId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public removeTeamMember(orgId: string, userId: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).removeTeamMember(orgId, userId, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Set primary custom domain
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {SetOrgPrimaryDomainRequest} setOrgPrimaryDomainRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public setOrgPrimaryDomain(orgId: string, projectId: string, setOrgPrimaryDomainRequest: SetOrgPrimaryDomainRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).setOrgPrimaryDomain(orgId, projectId, setOrgPrimaryDomainRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Update a member\'s role in the organization. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+     * @summary Update member role
+     * @param {string} orgId 
+     * @param {string} userId 
+     * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public updateMemberRole(orgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).updateMemberRole(orgId, userId, updateMemberRoleRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Update organization details. Requires organization-level authentication (JWT Bearer token). API keys are not supported for this endpoint. 
+     * @summary Update organization
+     * @param {string} orgId 
+     * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public updateOrganization(orgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).updateOrganization(orgId, updateOrganizationRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Update organization plan
+     * @param {string} orgId 
+     * @param {UpdateOrganizationPlanRequest} updateOrganizationPlanRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public updateOrganizationPlan(orgId: string, updateOrganizationPlanRequest: UpdateOrganizationPlanRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).updateOrganizationPlan(orgId, updateOrganizationPlanRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Update a sub-organization\'s configuration. Requires JWT Bearer token authentication. Both OrgBearerAuth and ProjectBearerAuth are supported (they use the same JWT token format). These are organization-level operations. 
+     * @summary ~~Update sub-organization~~ (deprecated)
+     * @param {string} orgId 
+     * @param {string} suborgId 
+     * @param {UpdateOrganizationRequest} updateOrganizationRequest 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public updateSubOrganization(orgId: string, suborgId: string, updateOrganizationRequest: UpdateOrganizationRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).updateSubOrganization(orgId, suborgId, updateOrganizationRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary ~~Update sub-organization member role~~ (deprecated)
+     * @param {string} orgId 
+     * @param {string} suborgId 
+     * @param {string} userId 
+     * @param {UpdateMemberRoleRequest} updateMemberRoleRequest 
+     * @param {*} [options] Override http request option.
+     * @deprecated
+     * @throws {RequiredError}
+     */
+    public updateSubOrganizationMemberRole(orgId: string, suborgId: string, userId: string, updateMemberRoleRequest: UpdateMemberRoleRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).updateSubOrganizationMemberRole(orgId, suborgId, userId, updateMemberRoleRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Set a user\'s account status to active or suspended. Used to approve pending users or suspend/activate accounts. Cannot change status of an organization owner. Requires owner or admin role. 
+     * @summary Update user account status (activate or suspend)
+     * @param {string} orgId 
+     * @param {string} userId 
+     * @param {UpdateUserAccountStatusRequest} updateUserAccountStatusRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public updateUserAccountStatus(orgId: string, userId: string, updateUserAccountStatusRequest: UpdateUserAccountStatusRequest, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).updateUserAccountStatus(orgId, userId, updateUserAccountStatusRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Looks up TXT at `_mudbase-verify.<hostname>` for value `mudbase-domain-verification=<token>`.  On a successful verify, Mudbase begins provisioning and managing the TLS certificate for the hostname automatically. Depending on the deployment, the response may include managed edge TLS details with domain-control validation (DCV) hints for the certificate.  When automated certificate provisioning is in effect, a successful verify records the certificate’s DNS requirements and status may advance to **`cname_approved`** in the same response (no staff **`approve-cname`** step). Otherwise, first success from `pending`/`failed` may move to **`cname_pending_staff`** and queue platform review as before.  The **200** response may include **`dnsRecords`**, certificate status, and **`routingCnameTarget`** for the managed certificate once its requirements are provisioned. 
+     * @summary Verify domain ownership via DNS TXT
+     * @param {string} orgId 
+     * @param {string} projectId 
+     * @param {string} hostname 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public verifyOrgCustomDomainDns(orgId: string, projectId: string, hostname: string, options?: RawAxiosRequestConfig) {
+        return OrganizationsApiFp(this.configuration).verifyOrgCustomDomainDns(orgId, projectId, hostname, options).then((request) => request(this.axios, this.basePath));
+    }
+}
+
+export const GetOrganizationUsersStatusEnum = {
+    Pending: 'pending',
+    Active: 'active',
+    Suspended: 'suspended'
+} as const;
+export type GetOrganizationUsersStatusEnum = typeof GetOrganizationUsersStatusEnum[keyof typeof GetOrganizationUsersStatusEnum];
+export const GetProjectUsersStatusEnum = {
+    Pending: 'pending',
+    Active: 'active',
+    Suspended: 'suspended'
+} as const;
+export type GetProjectUsersStatusEnum = typeof GetProjectUsersStatusEnum[keyof typeof GetProjectUsersStatusEnum];