opal-security 4.1.0 → 5.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (32) hide show
  1. package/README.md +47 -68
  2. package/build/commands/iam-roles/start.d.ts +0 -2
  3. package/build/commands/iam-roles/start.js +5 -7
  4. package/build/commands/kube-roles/start.d.ts +0 -2
  5. package/build/commands/kube-roles/start.js +5 -7
  6. package/build/commands/login.js +8 -8
  7. package/build/commands/postgres-instances/start.d.ts +0 -2
  8. package/build/commands/postgres-instances/start.js +4 -6
  9. package/build/commands/ssh/copyFrom.d.ts +0 -1
  10. package/build/commands/ssh/copyFrom.js +4 -5
  11. package/build/commands/ssh/copyTo.d.ts +0 -1
  12. package/build/commands/ssh/copyTo.js +4 -5
  13. package/build/commands/ssh/start.d.ts +0 -2
  14. package/build/commands/ssh/start.js +5 -7
  15. package/build/graphql/gql.d.ts +10 -0
  16. package/build/graphql/gql.js +2 -0
  17. package/build/graphql/graphql.d.ts +377 -378
  18. package/build/graphql/graphql.js +109 -38
  19. package/build/labels.js +4 -0
  20. package/build/lib/apollo.d.ts +1 -1
  21. package/build/lib/apollo.js +1 -1
  22. package/build/lib/config.js +1 -0
  23. package/build/lib/flags.d.ts +0 -2
  24. package/build/lib/flags.js +0 -9
  25. package/build/lib/mfa.d.ts +2 -0
  26. package/build/lib/mfa.js +62 -0
  27. package/build/lib/oidc.d.ts +3 -0
  28. package/build/lib/oidc.js +64 -0
  29. package/build/lib/sessions.d.ts +3 -3
  30. package/build/lib/sessions.js +14 -133
  31. package/oclif.manifest.json +41 -117
  32. package/package.json +4 -2
package/build/graphql/graphql.d.ts CHANGED
@@ -491,12 +491,12 @@ export type AwsTagInput = {
491
491
  };
492
492
  export type Access = {
493
493
  __typename?: "Access";
494
- accessLevel?: Maybe<AccessLevel>;
494
+ accessLevel: AccessLevel;
495
495
  /**
496
496
  * Describes attributes of `principalId`'s direct access to `entityId`. If unset, this user does not have
497
497
  * direct access to the resource.
498
498
  */
499
- directAccessPoint?: Maybe<AccessPoint>;
499
+ directAccessPoint?: Maybe<DirectAccessPoint>;
500
500
  entityId: Scalars["EntityId"]["output"];
501
501
  entityType: EntityType;
502
502
  /**
@@ -573,11 +573,6 @@ export type AccessLevelInput = {
573
573
  accessLevelRemoteId: Scalars["AccessLevelRemoteId"]["input"];
574
574
  };
575
575
  export type AccessLevelMetadata = ImpersonationAccessLevelMetadata;
576
- export type AccessLevelNode = {
577
- __typename?: "AccessLevelNode";
578
- accessLevel: ResourceAccessLevel;
579
- resourceId: Scalars["ResourceId"]["output"];
580
- };
581
576
  export type AccessLevelsFiltersInput = {
582
577
  requestableForUserId?: InputMaybe<Scalars["UserId"]["input"]>;
583
578
  skipCustomAccessLevels?: Scalars["Boolean"]["input"];
@@ -592,20 +587,15 @@ export declare enum AccessOption {
592
587
  Unmanaged = "UNMANAGED"
593
588
  }
594
589
  export type AccessPoint = {
595
- __typename?: "AccessPoint";
596
590
  accessLevel?: Maybe<AccessLevel>;
597
- createdAt: Scalars["Time"]["output"];
598
591
  entityId: Scalars["EntityId"]["output"];
599
592
  entityItemType: Scalars["String"]["output"];
600
593
  entityName: Scalars["String"]["output"];
601
594
  entityType: EntityType;
602
- eventId: Scalars["EventId"]["output"];
603
595
  expiration?: Maybe<Scalars["Time"]["output"]>;
604
596
  principalId: Scalars["EntityId"]["output"];
605
597
  principalName: Scalars["String"]["output"];
606
598
  principalType: EntityType;
607
- supportTicket?: Maybe<SupportTicket>;
608
- supportTicketId?: Maybe<Scalars["SupportTicketId"]["output"]>;
609
599
  };
610
600
  export type AccessRequestEscalationPeriodInvalidError = Error & {
611
601
  __typename?: "AccessRequestEscalationPeriodInvalidError";
@@ -623,6 +613,7 @@ export type AccessReview = Node & RolePermissionTargetEntity & {
623
613
  groupResourceVisibilityPolicy: AccessReviewGroupResourceVisibilityPolicy;
624
614
  id: Scalars["UUID"]["output"];
625
615
  includeGroupBindings: Scalars["Boolean"]["output"];
616
+ instantlyActionReviews: Scalars["Boolean"]["output"];
626
617
  itemsToReviewStats?: Maybe<OngoingAccessReviewTabStats>;
627
618
  lastReminderAt?: Maybe<Scalars["Time"]["output"]>;
628
619
  name: Scalars["String"]["output"];
@@ -633,6 +624,7 @@ export type AccessReview = Node & RolePermissionTargetEntity & {
633
624
  reportId?: Maybe<Scalars["AuditReportId"]["output"]>;
634
625
  reviewerAssignmentPolicy: AccessReviewReviewerAssignmentPolicy;
635
626
  reviewers?: Maybe<Array<AccessReviewReviewer>>;
627
+ revokeUnactionedItems: Scalars["Boolean"]["output"];
636
628
  selfReviewAllowed: Scalars["Boolean"]["output"];
637
629
  sendReviewerAssignmentNotification: Scalars["Boolean"]["output"];
638
630
  startedByUser?: Maybe<User>;
@@ -659,6 +651,7 @@ export type AccessReviewUsersToReviewArgs = {
659
651
  };
660
652
  export declare enum AccessReviewAction {
661
653
  Accept = "ACCEPT",
654
+ AdminRevoke = "ADMIN_REVOKE",
662
655
  NoAction = "NO_ACTION",
663
656
  Revoke = "REVOKE",
664
657
  Update = "UPDATE"
@@ -838,8 +831,8 @@ export type AccessReviewGroupGroup = {
838
831
  containingGroupId: Scalars["GroupId"]["output"];
839
832
  createdAt: Scalars["Time"]["output"];
840
833
  expiration?: Maybe<Scalars["Time"]["output"]>;
841
- groupGroupAccess?: Maybe<GroupResourceAccess>;
842
- groupResourceAccess?: Maybe<GroupResourceAccess>;
834
+ groupGroupAccess?: Maybe<GroupGroupAccess>;
835
+ groupResourceAccess?: Maybe<Access>;
843
836
  id: Scalars["AccessReviewGroupGroupId"]["output"];
844
837
  isContainingGroupDeleted: Scalars["Boolean"]["output"];
845
838
  isMemberGroupDeleted: Scalars["Boolean"]["output"];
@@ -924,7 +917,7 @@ export type AccessReviewGroupResource = {
924
917
  createdAt: Scalars["Time"]["output"];
925
918
  expiration?: Maybe<Scalars["Time"]["output"]>;
926
919
  groupId: Scalars["GroupId"]["output"];
927
- groupResourceAccess?: Maybe<GroupResourceAccess>;
920
+ groupResourceAccess?: Maybe<Access>;
928
921
  id: Scalars["AccessReviewGroupResourceId"]["output"];
929
922
  isGroupDeleted: Scalars["Boolean"]["output"];
930
923
  isResourceDeleted: Scalars["Boolean"]["output"];
@@ -994,9 +987,6 @@ export type AccessReviewGroupUsersResult = {
994
987
  __typename?: "AccessReviewGroupUsersResult";
995
988
  accessReviewGroupUsers?: Maybe<Array<AccessReviewGroupUser>>;
996
989
  };
997
- export type AccessReviewGroupsInput = {
998
- id: Scalars["AccessReviewId"]["input"];
999
- };
1000
990
  export type AccessReviewGroupsOutput = AccessReviewGroupsResult | AccessReviewNotFoundError;
1001
991
  export type AccessReviewGroupsResult = {
1002
992
  __typename?: "AccessReviewGroupsResult";
@@ -1426,6 +1416,50 @@ export declare enum AccessReviewType {
1426
1416
  ResourceResource = "RESOURCE_RESOURCE",
1427
1417
  ResourceUser = "RESOURCE_USER"
1428
1418
  }
1419
+ export type AccessReviewUnifiedAssignment = Node & {
1420
+ __typename?: "AccessReviewUnifiedAssignment";
1421
+ accessLevelName?: Maybe<Scalars["String"]["output"]>;
1422
+ accessLevelRemoteID?: Maybe<Scalars["String"]["output"]>;
1423
+ entity: AccessEntity;
1424
+ entityID: Scalars["ID"]["output"];
1425
+ entityItemType?: Maybe<Scalars["String"]["output"]>;
1426
+ entityName: Scalars["String"]["output"];
1427
+ entityType: EntityType;
1428
+ id: Scalars["UUID"]["output"];
1429
+ itemType: EntityType;
1430
+ outcome?: Maybe<AccessReviewItemOutcome>;
1431
+ principal: Principal;
1432
+ principalID: Scalars["ID"]["output"];
1433
+ principalName: Scalars["String"]["output"];
1434
+ principalType: EntityType;
1435
+ reviewerUsers: Array<User>;
1436
+ status: AccessReviewItemStatus;
1437
+ };
1438
+ export type AccessReviewUnifiedAssignmentConnection = PageConnection & {
1439
+ __typename?: "AccessReviewUnifiedAssignmentConnection";
1440
+ edges: Array<AccessReviewUnifiedAssignmentEdge>;
1441
+ pageInfo: PageInfo;
1442
+ totalCompletedCount: Scalars["Int"]["output"];
1443
+ totalCount: Scalars["Int"]["output"];
1444
+ totalGroupItemAssignments: Scalars["Int"]["output"];
1445
+ totalResourcePrincipalAssignments: Scalars["Int"]["output"];
1446
+ totalUserAssignments: Scalars["Int"]["output"];
1447
+ };
1448
+ export type AccessReviewUnifiedAssignmentEdge = Edge & {
1449
+ __typename?: "AccessReviewUnifiedAssignmentEdge";
1450
+ cursor: Scalars["String"]["output"];
1451
+ node: AccessReviewUnifiedAssignment;
1452
+ };
1453
+ export type AccessReviewUnifiedAssignmentFilters = {
1454
+ accessReviewID: Scalars["ID"]["input"];
1455
+ adminOwnerID?: InputMaybe<Scalars["ID"]["input"]>;
1456
+ assignedStatus?: InputMaybe<AccessReviewAssignedStatus>;
1457
+ canAssignReviewers?: InputMaybe<Scalars["Boolean"]["input"]>;
1458
+ outcome?: InputMaybe<AccessReviewItemOutcome>;
1459
+ reviewerID?: InputMaybe<Scalars["ID"]["input"]>;
1460
+ searchQuery?: InputMaybe<Scalars["String"]["input"]>;
1461
+ status?: InputMaybe<AccessReviewItemStatus>;
1462
+ };
1429
1463
  export type AccessReviewUser = {
1430
1464
  __typename?: "AccessReviewUser";
1431
1465
  accessReview?: Maybe<AccessReview>;
@@ -1566,19 +1600,10 @@ export type AccessStats = {
1566
1600
  titleAccessCount?: Maybe<Scalars["Int"]["output"]>;
1567
1601
  totalAccessCount?: Maybe<Scalars["Int"]["output"]>;
1568
1602
  };
1569
- export declare enum AccessType {
1570
- Birthright = "BIRTHRIGHT",
1571
- Expiring = "EXPIRING",
1572
- Longstanding = "LONGSTANDING"
1573
- }
1574
- export type AccessTypeData = {
1575
- __typename?: "AccessTypeData";
1576
- expiration?: Maybe<Scalars["Time"]["output"]>;
1577
- type: AccessType;
1578
- };
1579
1603
  export type AccessibleItem = {
1580
1604
  accessStats?: Maybe<AccessStats>;
1581
1605
  createdAt: Scalars["Time"]["output"];
1606
+ handle?: Maybe<Scalars["String"]["output"]>;
1582
1607
  id: Scalars["UUID"]["output"];
1583
1608
  isManaged: Scalars["Boolean"]["output"];
1584
1609
  name: Scalars["String"]["output"];
@@ -1636,26 +1661,6 @@ export type AddConnectionUsersResult = {
1636
1661
  success: Scalars["Boolean"]["output"];
1637
1662
  taskId: Scalars["PushTaskId"]["output"];
1638
1663
  };
1639
- export type AddGroupGroupInput = {
1640
- accessLevel?: InputMaybe<GroupAccessLevelInput>;
1641
- containingGroupId: Scalars["GroupId"]["input"];
1642
- durationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
1643
- memberGroupId: Scalars["GroupId"]["input"];
1644
- };
1645
- export type AddGroupGroupsEntryOutput = AddGroupGroupsEntryResult;
1646
- export type AddGroupGroupsEntryResult = {
1647
- __typename?: "AddGroupGroupsEntryResult";
1648
- groupGroup: GroupGroup;
1649
- };
1650
- export type AddGroupGroupsInput = {
1651
- groupGroups: Array<AddGroupGroupInput>;
1652
- };
1653
- export type AddGroupGroupsOutput = AddGroupGroupsResult | CallToWebhookFailedError | GroupGroupAlreadyExists | GroupNestingNotAllowedError | GroupNotFoundError | UserFacingError;
1654
- export type AddGroupGroupsResult = {
1655
- __typename?: "AddGroupGroupsResult";
1656
- entries: Array<AddGroupGroupsEntryOutput>;
1657
- taskId: Scalars["PushTaskId"]["output"];
1658
- };
1659
1664
  export type AddGroupResourceInput = {
1660
1665
  accessLevel: ResourceAccessLevelInput;
1661
1666
  durationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
@@ -1770,7 +1775,7 @@ export type AddRoleAssignmentsEntryResult = {
1770
1775
  export type AddRoleAssignmentsInput = {
1771
1776
  roleAssignments: Array<AddRoleAssignmentInput>;
1772
1777
  };
1773
- export type AddRoleAssignmentsOutput = AddRoleAssignmentsResult | UserFacingError;
1778
+ export type AddRoleAssignmentsOutput = AddRoleAssignmentsResult | GroupNestingNotAllowedError | RoleAssignmentAlreadyExists | UserFacingError;
1774
1779
  export type AddRoleAssignmentsResult = {
1775
1780
  __typename?: "AddRoleAssignmentsResult";
1776
1781
  entries: Array<AddRoleAssignmentsEntryOutput>;
@@ -1797,6 +1802,13 @@ export type AdminApproveRequiresReasonError = Error & {
1797
1802
  __typename?: "AdminApproveRequiresReasonError";
1798
1803
  message: Scalars["String"]["output"];
1799
1804
  };
1805
+ export type AdminRevokeUnreviewedAssignmentsInput = {
1806
+ accessReviewId: Scalars["AccessReviewId"]["input"];
1807
+ };
1808
+ export type AdminRevokeUnreviewedAssignmentsOutput = {
1809
+ __typename?: "AdminRevokeUnreviewedAssignmentsOutput";
1810
+ revokedCount: Scalars["Int"]["output"];
1811
+ };
1800
1812
  export type AdminsFilterInput = {
1801
1813
  adminIDs: Array<Scalars["OwnerId"]["input"]>;
1802
1814
  };
@@ -1816,6 +1828,13 @@ export type AllowedToUseAldwinResult = {
1816
1828
  __typename?: "AllowedToUseAldwinResult";
1817
1829
  allowed: Scalars["Boolean"]["output"];
1818
1830
  };
1831
+ export type AnthropicConnectionCredentialsInput = {
1832
+ adminKey: Scalars["String"]["input"];
1833
+ };
1834
+ export type AnthropicConnectionMetadata = {
1835
+ __typename?: "AnthropicConnectionMetadata";
1836
+ placeholder?: Maybe<Scalars["Boolean"]["output"]>;
1837
+ };
1819
1838
  export declare enum ApiAccessLevel {
1820
1839
  FullAccess = "FULL_ACCESS",
1821
1840
  ReadOnly = "READ_ONLY"
@@ -1855,6 +1874,7 @@ export type AppItemTypesArgs = {
1855
1874
  ancestorResourceId?: InputMaybe<NullableResourceId>;
1856
1875
  excludeComputedGroups?: InputMaybe<Scalars["Boolean"]["input"]>;
1857
1876
  parentResourceId?: InputMaybe<NullableResourceId>;
1877
+ showHiddenFromCatalog?: InputMaybe<Scalars["Boolean"]["input"]>;
1858
1878
  };
1859
1879
  export type AppItemsArgs = {
1860
1880
  input: AppItemsInput;
@@ -1893,6 +1913,7 @@ export type AppEntity = {
1893
1913
  healthStatus?: Maybe<HealthStatus>;
1894
1914
  id: Scalars["UUID"]["output"];
1895
1915
  imageUrl?: Maybe<Scalars["String"]["output"]>;
1916
+ isHiddenFromCatalog: Scalars["Boolean"]["output"];
1896
1917
  maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
1897
1918
  totalGroupAccessCount: Scalars["Int"]["output"];
1898
1919
  totalNHIAccessCount: Scalars["Int"]["output"];
@@ -1963,6 +1984,7 @@ export type AppItemsInput = {
1963
1984
  requestableFor?: InputMaybe<Scalars["UserId"]["input"]>;
1964
1985
  resourceIds?: InputMaybe<Array<Scalars["ResourceId"]["input"]>>;
1965
1986
  searchQuery?: InputMaybe<Scalars["String"]["input"]>;
1987
+ showHiddenFromCatalog?: InputMaybe<Scalars["Boolean"]["input"]>;
1966
1988
  sortBy?: InputMaybe<AppItemsSortBy>;
1967
1989
  };
1968
1990
  export type AppItemsOutput = {
@@ -2006,12 +2028,7 @@ export type AppsFilters = {
2006
2028
  hideEmpty?: InputMaybe<Scalars["Boolean"]["input"]>;
2007
2029
  requestableFor?: InputMaybe<Scalars["UserId"]["input"]>;
2008
2030
  searchQuery?: InputMaybe<Scalars["String"]["input"]>;
2009
- };
2010
- export type AppsOutput = {
2011
- __typename?: "AppsOutput";
2012
- apps: Array<App>;
2013
- cursor?: Maybe<Scalars["String"]["output"]>;
2014
- totalNumApps: Scalars["Int"]["output"];
2031
+ showHiddenFromCatalog?: InputMaybe<Scalars["Boolean"]["input"]>;
2015
2032
  };
2016
2033
  export type AppsSortBy = {
2017
2034
  direction: SortDirection;
@@ -2131,36 +2148,6 @@ export type AuthSessionStatusResult = {
2131
2148
  user?: Maybe<AuthUser>;
2132
2149
  userImpersonator?: Maybe<User>;
2133
2150
  };
2134
- export declare enum AuthType {
2135
- ActiveDirectory = "ACTIVE_DIRECTORY",
2136
- Aws = "AWS",
2137
- AwsSso = "AWS_SSO",
2138
- AzureAd = "AZURE_AD",
2139
- Coupa = "COUPA",
2140
- Custom = "CUSTOM",
2141
- CustomConnector = "CUSTOM_CONNECTOR",
2142
- Databricks = "DATABRICKS",
2143
- DatastaxAstra = "DATASTAX_ASTRA",
2144
- Duo = "DUO",
2145
- Gcp = "GCP",
2146
- GitHub = "GIT_HUB",
2147
- GitLab = "GIT_LAB",
2148
- GoogleGroups = "GOOGLE_GROUPS",
2149
- GoogleWorkspace = "GOOGLE_WORKSPACE",
2150
- Ilevel = "ILEVEL",
2151
- Ldap = "LDAP",
2152
- Mongo = "MONGO",
2153
- MongoAtlas = "MONGO_ATLAS",
2154
- Mysqlmariadb = "MYSQLMARIADB",
2155
- OktaDirectory = "OKTA_DIRECTORY",
2156
- Pagerduty = "PAGERDUTY",
2157
- Postgres = "POSTGRES",
2158
- Salesforce = "SALESFORCE",
2159
- Snowflake = "SNOWFLAKE",
2160
- Tailscale = "TAILSCALE",
2161
- Teleport = "TELEPORT",
2162
- Workday = "WORKDAY"
2163
- }
2164
2151
  export type AuthUser = {
2165
2152
  __typename?: "AuthUser";
2166
2153
  isAdmin: Scalars["Boolean"]["output"];
@@ -2230,6 +2217,10 @@ export type AwsRoleMetadata = {
2230
2217
  __typename?: "AwsRoleMetadata";
2231
2218
  arn: Scalars["String"]["output"];
2232
2219
  };
2220
+ export declare enum AzureAdCloudType {
2221
+ Global = "GLOBAL",
2222
+ UsGovernment = "US_GOVERNMENT"
2223
+ }
2233
2224
  export type AzureAdConnectionCredentialsInput = {
2234
2225
  clientSecret: Scalars["String"]["input"];
2235
2226
  };
@@ -2237,6 +2228,7 @@ export type AzureAdConnectionMetadata = {
2237
2228
  __typename?: "AzureADConnectionMetadata";
2238
2229
  azureInfraEnabled: Scalars["Boolean"]["output"];
2239
2230
  clientId: Scalars["String"]["output"];
2231
+ cloudType: AzureAdCloudType;
2240
2232
  eventHub: Scalars["String"]["output"];
2241
2233
  eventHubNamespace: Scalars["String"]["output"];
2242
2234
  tenantId: Scalars["String"]["output"];
@@ -2244,6 +2236,7 @@ export type AzureAdConnectionMetadata = {
2244
2236
  export type AzureAdConnectionMetadataInput = {
2245
2237
  azureInfraEnabled: Scalars["Boolean"]["input"];
2246
2238
  clientId: Scalars["String"]["input"];
2239
+ cloudType: AzureAdCloudType;
2247
2240
  eventHub: Scalars["String"]["input"];
2248
2241
  eventHubNamespace: Scalars["String"]["input"];
2249
2242
  tenantId: Scalars["String"]["input"];
@@ -2266,6 +2259,18 @@ export type BarGraphData = {
2266
2259
  data: Array<LineGraphData>;
2267
2260
  label: Scalars["String"]["output"];
2268
2261
  };
2262
+ export type BaseAccessPoint = AccessPoint & {
2263
+ __typename?: "BaseAccessPoint";
2264
+ accessLevel?: Maybe<AccessLevel>;
2265
+ entityId: Scalars["EntityId"]["output"];
2266
+ entityItemType: Scalars["String"]["output"];
2267
+ entityName: Scalars["String"]["output"];
2268
+ entityType: EntityType;
2269
+ expiration?: Maybe<Scalars["Time"]["output"]>;
2270
+ principalId: Scalars["EntityId"]["output"];
2271
+ principalName: Scalars["String"]["output"];
2272
+ principalType: EntityType;
2273
+ };
2269
2274
  export type BaseEntity = {
2270
2275
  createdAt: Scalars["Time"]["output"];
2271
2276
  id: Scalars["UUID"]["output"];
@@ -2290,37 +2295,6 @@ export type BreakGlassUsersCountsResult = {
2290
2295
  __typename?: "BreakGlassUsersCountsResult";
2291
2296
  lineData: Array<LineGraphData>;
2292
2297
  };
2293
- export type BulkImportRemoteItemsInput = {
2294
- adminOwnerId?: InputMaybe<Scalars["OwnerId"]["input"]>;
2295
- breakGlassUsersIds?: InputMaybe<Array<Scalars["UserId"]["input"]>>;
2296
- configurationId?: InputMaybe<Scalars["ConfigurationId"]["input"]>;
2297
- customRequestNotification?: InputMaybe<NullableString>;
2298
- description?: InputMaybe<Scalars["String"]["input"]>;
2299
- maxDurationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
2300
- messageChannelIds?: InputMaybe<Array<Scalars["MessageChannelId"]["input"]>>;
2301
- onCallSchedules?: InputMaybe<Array<OnCallScheduleInput>>;
2302
- recommendedDurationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
2303
- remoteGroups?: InputMaybe<Array<ImportRemoteGroupInfo>>;
2304
- remoteResources?: InputMaybe<Array<ImportRemoteResourceInfo>>;
2305
- requestConfigs?: InputMaybe<Array<RequestConfigInput>>;
2306
- requestTemplateId?: InputMaybe<Scalars["RequestTemplateId"]["input"]>;
2307
- requireMfaToApprove?: InputMaybe<Scalars["Boolean"]["input"]>;
2308
- requireMfaToConnect?: InputMaybe<Scalars["Boolean"]["input"]>;
2309
- requireMfaToRequest?: InputMaybe<Scalars["Boolean"]["input"]>;
2310
- requireSupportTicket?: InputMaybe<Scalars["Boolean"]["input"]>;
2311
- reviewerStages?: InputMaybe<BulkReviewerStagesInput>;
2312
- tagIds?: InputMaybe<Array<Scalars["TagId"]["input"]>>;
2313
- ticketPropagation?: InputMaybe<TicketPropagationInput>;
2314
- visibility?: InputMaybe<Visibility>;
2315
- visibilityGroupsIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
2316
- };
2317
- export type BulkImportRemoteItemsOutput = BulkImportRemoteItemsResult | GroupMaxDurationTooLargeError | GroupNotFoundError | InvalidReviewerSettingsError | InvalidUpdateGroupVisibilityGroupError | InvalidUpdateResourceVisibilityGroupError | ResourceMaxDurationTooLargeError | TagNotFoundError;
2318
- export type BulkImportRemoteItemsResult = {
2319
- __typename?: "BulkImportRemoteItemsResult";
2320
- importedGroups?: Maybe<Array<Group>>;
2321
- importedResources?: Maybe<Array<Resource>>;
2322
- syncTasks: Array<SyncTask>;
2323
- };
2324
2298
  export type BulkRequestTooLargeError = Error & {
2325
2299
  __typename?: "BulkRequestTooLargeError";
2326
2300
  message: Scalars["String"]["output"];
@@ -2330,12 +2304,7 @@ export type BulkReviewerInputStage = {
2330
2304
  ownerIds: Array<Scalars["OwnerId"]["input"]>;
2331
2305
  requireAdminApproval: Scalars["Boolean"]["input"];
2332
2306
  requireManagerApproval: Scalars["Boolean"]["input"];
2333
- };
2334
- export type BulkReviewerStagesInput = {
2335
- autoApprove?: InputMaybe<Scalars["Boolean"]["input"]>;
2336
- isRequestable?: InputMaybe<Scalars["Boolean"]["input"]>;
2337
- reasonOptional?: InputMaybe<Scalars["Boolean"]["input"]>;
2338
- reviewerStages?: InputMaybe<Array<BulkReviewerInputStage>>;
2307
+ userIds?: InputMaybe<Array<Scalars["UserId"]["input"]>>;
2339
2308
  };
2340
2309
  export type BulkUpdateItemFilter = {
2341
2310
  connectionId: Scalars["ConnectionId"]["input"];
@@ -2363,13 +2332,13 @@ export type Bundle = BaseEntity & Node & RolePermissionTargetEntity & {
2363
2332
  adminOwner: Owner;
2364
2333
  adminOwnerId: Scalars["OwnerId"]["output"];
2365
2334
  allowedPermissions: Array<RolePermissionKey>;
2335
+ connectionTypes?: Maybe<Array<ConnectionType>>;
2366
2336
  createdAt: Scalars["Time"]["output"];
2367
2337
  description?: Maybe<Scalars["String"]["output"]>;
2368
2338
  id: Scalars["UUID"]["output"];
2369
2339
  items: BundleItemConnection;
2370
2340
  name: Scalars["String"]["output"];
2371
2341
  permissionSources: PermissionSourceConnection;
2372
- serviceTypes?: Maybe<Array<ServiceType>>;
2373
2342
  totalNumGroups: Scalars["Int"]["output"];
2374
2343
  totalNumItems: Scalars["Int"]["output"];
2375
2344
  totalNumResources: Scalars["Int"]["output"];
@@ -2599,6 +2568,9 @@ export type CannotUpdateConfigurationTemplateError = Error & {
2599
2568
  __typename?: "CannotUpdateConfigurationTemplateError";
2600
2569
  message: Scalars["String"]["output"];
2601
2570
  };
2571
+ export type CatalogEntity = {
2572
+ isHiddenFromCatalog: Scalars["Boolean"]["output"];
2573
+ };
2602
2574
  export type CatalogItemOutput = Connection | Group | Resource | UserFacingError;
2603
2575
  export type CertIsTooLargeError = Error & {
2604
2576
  __typename?: "CertIsTooLargeError";
@@ -2653,6 +2625,7 @@ export type ConfigTemplateTagsResult = {
2653
2625
  __typename?: "ConfigTemplateTagsResult";
2654
2626
  configTemplateTags: Array<ConfigTemplateTag>;
2655
2627
  };
2628
+ export type ConfigurableEntity = Group | Resource;
2656
2629
  export type ConfigurationInUseError = Error & {
2657
2630
  __typename?: "ConfigurationInUseError";
2658
2631
  message: Scalars["String"]["output"];
@@ -2719,7 +2692,7 @@ export type ConfirmEndSystemRevocationResult = {
2719
2692
  __typename?: "ConfirmEndSystemRevocationResult";
2720
2693
  accessReviewResourceUsers?: Maybe<Array<AccessReviewResourceUser>>;
2721
2694
  };
2722
- export type Connection = AccessEntity & AppEntity & BaseEntity & DisplayableEntity & Node & RolePermissionTargetEntity & {
2695
+ export type Connection = AccessEntity & AppEntity & BaseEntity & CatalogEntity & DisplayableEntity & Node & RolePermissionTargetEntity & {
2723
2696
  __typename?: "Connection";
2724
2697
  accessStats?: Maybe<AccessStats>;
2725
2698
  adminOwner?: Maybe<Owner>;
@@ -2746,6 +2719,7 @@ export type Connection = AccessEntity & AppEntity & BaseEntity & DisplayableEnti
2746
2719
  importVisibility: Visibility;
2747
2720
  importVisibilityGroups: Array<ConnectionVisibilityGroup>;
2748
2721
  isDeleted: Scalars["Boolean"]["output"];
2722
+ isHiddenFromCatalog: Scalars["Boolean"]["output"];
2749
2723
  maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
2750
2724
  metadata?: Maybe<ConnectionMetadataOutput>;
2751
2725
  name: Scalars["String"]["output"];
@@ -2818,11 +2792,12 @@ export type ConnectionCannotBeDeletedError = Error & {
2818
2792
  };
2819
2793
  export type ConnectionCredentialsInput = {
2820
2794
  ad?: InputMaybe<AdConnectionCredentialsInput>;
2821
- authType: AuthType;
2795
+ anthropic?: InputMaybe<AnthropicConnectionCredentialsInput>;
2822
2796
  aws?: InputMaybe<AwsConnectionCredentialsInput>;
2823
2797
  awsSso?: InputMaybe<AwsssoConnectionCredentialsInput>;
2824
2798
  azureAd?: InputMaybe<AzureAdConnectionCredentialsInput>;
2825
2799
  coupa?: InputMaybe<CoupaConnectionCredentialsInput>;
2800
+ cursor?: InputMaybe<CursorConnectionCredentialsInput>;
2826
2801
  customConnector?: InputMaybe<CustomConnectorCredentials>;
2827
2802
  databricks?: InputMaybe<DatabricksConnectionCredentialsInput>;
2828
2803
  datastaxAstra?: InputMaybe<DatastaxAstraConnectionCredentialsInput>;
@@ -2838,6 +2813,8 @@ export type ConnectionCredentialsInput = {
2838
2813
  mongoAtlas?: InputMaybe<MongoAtlasConnectionCredentialsInput>;
2839
2814
  mySqlMariadb?: InputMaybe<MySqlMariaDbConnectionCredentialsInput>;
2840
2815
  oktaDirectory?: InputMaybe<OktaDirectoryCredentialsInput>;
2816
+ openaiPlatform?: InputMaybe<OpenaiPlatformConnectionCredentialsInput>;
2817
+ oracleFusion?: InputMaybe<OracleFusionConnectionCredentialsInput>;
2841
2818
  pagerDuty?: InputMaybe<PagerDutyCredentialsInput>;
2842
2819
  postgres?: InputMaybe<PostgresConnectionCredentialsInput>;
2843
2820
  salesforce?: InputMaybe<SalesforceCredentialsInput>;
@@ -2846,11 +2823,6 @@ export type ConnectionCredentialsInput = {
2846
2823
  teleport?: InputMaybe<TeleportConnectionCredentialsInput>;
2847
2824
  workday?: InputMaybe<WorkdayCredentialsInput>;
2848
2825
  };
2849
- export type ConnectionEntity = {
2850
- connectionId: Scalars["ConnectionId"]["output"];
2851
- id: Scalars["UUID"]["output"];
2852
- serviceType: ServiceType;
2853
- };
2854
2826
  export type ConnectionExistsError = Error & {
2855
2827
  __typename?: "ConnectionExistsError";
2856
2828
  message: Scalars["String"]["output"];
@@ -2882,6 +2854,7 @@ export type ConnectionMetadataInput = {
2882
2854
  mongoAtlas?: InputMaybe<MongoAtlasConnectionMetadataInput>;
2883
2855
  mySqlMariadb?: InputMaybe<MySqlMariaDbConnectionMetadataInput>;
2884
2856
  oktaDirectory?: InputMaybe<OktaDirectoryConnectionMetadataInput>;
2857
+ oracleFusion?: InputMaybe<OracleFusionConnectionMetadataInput>;
2885
2858
  postgres?: InputMaybe<PostgresConnectionMetadataInput>;
2886
2859
  salesforce?: InputMaybe<SalesforceMetadataInput>;
2887
2860
  snowflake?: InputMaybe<SnowflakeConnectionMetadataInput>;
@@ -2889,7 +2862,7 @@ export type ConnectionMetadataInput = {
2889
2862
  teleport?: InputMaybe<TeleportConnectionMetadataInput>;
2890
2863
  workday?: InputMaybe<WorkdayConnectionMetadataInput>;
2891
2864
  };
2892
- export type ConnectionMetadataOutput = AdConnectionMetadata | AwsssoConnectionMetadata | AwsConnectionMetadata | AzureAdConnectionMetadata | CoupaConnectionMetadata | CustomConnectorConnectionMetadata | DatabricksConnectionMetadata | DatastaxAstraConnectionMetadata | DuoConnectionMetadata | GcpConnectionMetadata | GitHubConnectionMetadata | GitLabConnectionMetadata | GoogleGroupsConnectionMetadata | GoogleWorkspaceConnectionMetadata | ILevelConnectionMetadata | LdapConnectionMetadata | MongoAtlasConnectionMetadata | MongoConnectionMetadata | MySqlMariaDbConnectionMetadata | OktaDirectoryConnectionMetadata | PagerDutyConnectionMetadata | PostgresConnectionMetadata | PropagationTicketConnectionMetadata | SalesforceConnectionMetadata | SnowflakeConnectionMetadata | TailscaleConnectionMetadata | TeleportConnectionMetadata | WorkdayConnectionMetadata;
2865
+ export type ConnectionMetadataOutput = AdConnectionMetadata | AwsssoConnectionMetadata | AnthropicConnectionMetadata | AwsConnectionMetadata | AzureAdConnectionMetadata | CoupaConnectionMetadata | CursorConnectionMetadata | CustomConnectorConnectionMetadata | DatabricksConnectionMetadata | DatastaxAstraConnectionMetadata | DuoConnectionMetadata | GcpConnectionMetadata | GitHubConnectionMetadata | GitLabConnectionMetadata | GoogleGroupsConnectionMetadata | GoogleWorkspaceConnectionMetadata | ILevelConnectionMetadata | LdapConnectionMetadata | MongoAtlasConnectionMetadata | MongoConnectionMetadata | MySqlMariaDbConnectionMetadata | OktaDirectoryConnectionMetadata | OpenaiPlatformConnectionMetadata | OracleFusionConnectionMetadata | PagerDutyConnectionMetadata | PostgresConnectionMetadata | PropagationTicketConnectionMetadata | SalesforceConnectionMetadata | SnowflakeConnectionMetadata | TailscaleConnectionMetadata | TeleportConnectionMetadata | WorkdayConnectionMetadata;
2893
2866
  export type ConnectionNotFoundError = Error & {
2894
2867
  __typename?: "ConnectionNotFoundError";
2895
2868
  message: Scalars["String"]["output"];
@@ -2932,6 +2905,7 @@ export type ConnectionSmall = {
2932
2905
  };
2933
2906
  export declare enum ConnectionType {
2934
2907
  ActiveDirectory = "ACTIVE_DIRECTORY",
2908
+ Anthropic = "ANTHROPIC",
2935
2909
  /**
2936
2910
  * Deprecated. Legacy integration no longer offered - use AWS_SSO instead.
2937
2911
  * @deprecated Legacy integration no longer offered - use AWS_SSO instead.
@@ -2940,6 +2914,7 @@ export declare enum ConnectionType {
2940
2914
  AwsSso = "AWS_SSO",
2941
2915
  AzureAd = "AZURE_AD",
2942
2916
  Coupa = "COUPA",
2917
+ Cursor = "CURSOR",
2943
2918
  Custom = "CUSTOM",
2944
2919
  CustomConnector = "CUSTOM_CONNECTOR",
2945
2920
  Databricks = "DATABRICKS",
@@ -2958,6 +2933,8 @@ export declare enum ConnectionType {
2958
2933
  Mysql = "MYSQL",
2959
2934
  OktaDirectory = "OKTA_DIRECTORY",
2960
2935
  Opal = "OPAL",
2936
+ OpenaiPlatform = "OPENAI_PLATFORM",
2937
+ OracleFusion = "ORACLE_FUSION",
2961
2938
  Pagerduty = "PAGERDUTY",
2962
2939
  Postgres = "POSTGRES",
2963
2940
  Salesforce = "SALESFORCE",
@@ -3221,6 +3198,7 @@ export type CreateFirstPartyTokenInput = {
3221
3198
  accessLevel: ApiAccessLevel;
3222
3199
  expiresAt?: InputMaybe<Scalars["Time"]["input"]>;
3223
3200
  tokenLabel: Scalars["String"]["input"];
3201
+ userId?: InputMaybe<Scalars["UserId"]["input"]>;
3224
3202
  };
3225
3203
  export type CreateFirstPartyTokenOutput = CreateFirstPartyTokenResult;
3226
3204
  export type CreateFirstPartyTokenResult = {
@@ -3386,6 +3364,7 @@ export type CreateRequestInput = {
3386
3364
  reason: Scalars["String"]["input"];
3387
3365
  requestedGroups: Array<RequestedGroupInput>;
3388
3366
  requestedResources: Array<RequestedResourceInput>;
3367
+ source?: InputMaybe<RequestSource>;
3389
3368
  supportTicket?: InputMaybe<SupportTicketInput>;
3390
3369
  targetGroupId?: InputMaybe<Scalars["GroupId"]["input"]>;
3391
3370
  targetUserId?: InputMaybe<Scalars["UserId"]["input"]>;
@@ -3541,6 +3520,30 @@ export type CreateSamlConnectionResult = {
3541
3520
  __typename?: "CreateSamlConnectionResult";
3542
3521
  organizationSamlInfo: OrganizationSamlInfo;
3543
3522
  };
3523
+ export type CreateServiceUserAutomationConfigurationInput = {
3524
+ webhook?: InputMaybe<CreateServiceUserWebhookAutomationInput>;
3525
+ };
3526
+ export type CreateServiceUserAutomationCredentialsInput = {
3527
+ webhook?: InputMaybe<CreateServiceUserAutomationCredentialsWebhookInput>;
3528
+ };
3529
+ export type CreateServiceUserAutomationCredentialsWebhookInput = {
3530
+ hmacSecret: Scalars["String"]["input"];
3531
+ };
3532
+ export type CreateServiceUserAutomationInput = {
3533
+ configuration: CreateServiceUserAutomationConfigurationInput;
3534
+ credentials: CreateServiceUserAutomationCredentialsInput;
3535
+ strategy: ServiceUserAutomationStrategy;
3536
+ trigger: ServiceUserAutomationTrigger;
3537
+ };
3538
+ export type CreateServiceUserInput = {
3539
+ automations?: InputMaybe<Array<CreateServiceUserAutomationInput>>;
3540
+ name: Scalars["String"]["input"];
3541
+ ownerId: Scalars["OwnerId"]["input"];
3542
+ roleIds?: InputMaybe<Array<Scalars["ResourceId"]["input"]>>;
3543
+ };
3544
+ export type CreateServiceUserWebhookAutomationInput = {
3545
+ endpoint: Scalars["String"]["input"];
3546
+ };
3544
3547
  export type CreateSessionInput = {
3545
3548
  accessLevel?: InputMaybe<ResourceAccessLevelInput>;
3546
3549
  durationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
@@ -3551,6 +3554,7 @@ export type CreateSessionOutput = CreateSessionResult | EndSystemAuthorizationEr
3551
3554
  export type CreateSessionResult = {
3552
3555
  __typename?: "CreateSessionResult";
3553
3556
  session: Session;
3557
+ sessionMetadata: SessionMetadata;
3554
3558
  };
3555
3559
  export type CreateTagInput = {
3556
3560
  key: Scalars["String"]["input"];
@@ -3616,6 +3620,13 @@ export type CurrentUserStatsResult = {
3616
3620
  __typename?: "CurrentUserStatsResult";
3617
3621
  currentUserStats?: Maybe<CurrentUserStats>;
3618
3622
  };
3623
+ export type CursorConnectionCredentialsInput = {
3624
+ token: Scalars["String"]["input"];
3625
+ };
3626
+ export type CursorConnectionMetadata = {
3627
+ __typename?: "CursorConnectionMetadata";
3628
+ placeholder?: Maybe<Scalars["Boolean"]["output"]>;
3629
+ };
3619
3630
  export type CustomConnectorConnectionMetadata = {
3620
3631
  __typename?: "CustomConnectorConnectionMetadata";
3621
3632
  baseUrl: Scalars["String"]["output"];
@@ -3888,6 +3899,10 @@ export type DeleteSamlConnectionResult = {
3888
3899
  __typename?: "DeleteSamlConnectionResult";
3889
3900
  organizationSamlInfo: OrganizationSamlInfo;
3890
3901
  };
3902
+ export type DeleteServiceUserAutomationInput = {
3903
+ trigger: ServiceUserAutomationTrigger;
3904
+ userId: Scalars["UserId"]["input"];
3905
+ };
3891
3906
  export type DeleteTagsEntryResult = {
3892
3907
  __typename?: "DeleteTagsEntryResult";
3893
3908
  tag: Tag;
@@ -3912,7 +3927,7 @@ export type DeleteThirdPartyIntegrationResult = {
3912
3927
  export type DeleteUserInput = {
3913
3928
  id: Scalars["UserId"]["input"];
3914
3929
  };
3915
- export type DeleteUserOutput = DeleteUserResult | OpalAdminRoleMustHaveAtLeastOneDirectUser | SystemUserIsImmutableError | UserNotFoundError;
3930
+ export type DeleteUserOutput = DeleteUserResult | OpalAdminRoleMustHaveAtLeastOneDirectUser | SystemUserIsImmutableError | UserIsAssignedToReviewerStagesError | UserNotFoundError;
3916
3931
  export type DeleteUserResult = {
3917
3932
  __typename?: "DeleteUserResult";
3918
3933
  user: User;
@@ -3940,6 +3955,22 @@ export type DenyRequestResult = {
3940
3955
  __typename?: "DenyRequestResult";
3941
3956
  request: Request;
3942
3957
  };
3958
+ export type DirectAccessPoint = AccessPoint & {
3959
+ __typename?: "DirectAccessPoint";
3960
+ accessLevel?: Maybe<AccessLevel>;
3961
+ createdAt: Scalars["Time"]["output"];
3962
+ entityId: Scalars["EntityId"]["output"];
3963
+ entityItemType: Scalars["String"]["output"];
3964
+ entityName: Scalars["String"]["output"];
3965
+ entityType: EntityType;
3966
+ eventId: Scalars["EventId"]["output"];
3967
+ expiration?: Maybe<Scalars["Time"]["output"]>;
3968
+ principalId: Scalars["EntityId"]["output"];
3969
+ principalName: Scalars["String"]["output"];
3970
+ principalType: EntityType;
3971
+ supportTicket?: Maybe<SupportTicket>;
3972
+ supportTicketId?: Maybe<Scalars["SupportTicketId"]["output"]>;
3973
+ };
3943
3974
  export type DirectRoleAssignmentsInput = {
3944
3975
  after?: InputMaybe<Scalars["String"]["input"]>;
3945
3976
  first?: InputMaybe<Scalars["Int"]["input"]>;
@@ -3995,18 +4026,13 @@ export type DurationOption = {
3995
4026
  export type Edge = {
3996
4027
  cursor: Scalars["String"]["output"];
3997
4028
  };
3998
- export type EdgeMetadata = {
3999
- __typename?: "EdgeMetadata";
4000
- accessType?: Maybe<AccessTypeData>;
4001
- lastUsageTime?: Maybe<Scalars["Time"]["output"]>;
4002
- };
4003
- export type EnableDefaultNotificationsForAllError = Error & {
4004
- __typename?: "EnableDefaultNotificationsForAllError";
4029
+ export type EnableNotificationsForAllError = Error & {
4030
+ __typename?: "EnableNotificationsForAllError";
4005
4031
  message: Scalars["String"]["output"];
4006
4032
  };
4007
- export type EnableDefaultNotificationsForAllOutput = EnableDefaultNotificationsForAllError | EnableDefaultNotificationsForAllResult;
4008
- export type EnableDefaultNotificationsForAllResult = {
4009
- __typename?: "EnableDefaultNotificationsForAllResult";
4033
+ export type EnableNotificationsForAllOutput = EnableNotificationsForAllError | EnableNotificationsForAllResult;
4034
+ export type EnableNotificationsForAllResult = {
4035
+ __typename?: "EnableNotificationsForAllResult";
4010
4036
  success: Scalars["Boolean"]["output"];
4011
4037
  };
4012
4038
  export type EndDateFilter = {
@@ -4312,6 +4338,9 @@ export declare enum EventType {
4312
4338
  BundleGroupsRemoved = "BUNDLE_GROUPS_REMOVED",
4313
4339
  BundleResourcesAdded = "BUNDLE_RESOURCES_ADDED",
4314
4340
  BundleResourcesRemoved = "BUNDLE_RESOURCES_REMOVED",
4341
+ CatalogItemHidden = "CATALOG_ITEM_HIDDEN",
4342
+ CatalogItemUnhidden = "CATALOG_ITEM_UNHIDDEN",
4343
+ CatalogUpdated = "CATALOG_UPDATED",
4315
4344
  ConfigurationTemplateAdminOwnerUpdated = "CONFIGURATION_TEMPLATE_ADMIN_OWNER_UPDATED",
4316
4345
  ConfigurationTemplateAuditMessageChannelUpdated = "CONFIGURATION_TEMPLATE_AUDIT_MESSAGE_CHANNEL_UPDATED",
4317
4346
  ConfigurationTemplateBreakGlassUsersUpdated = "CONFIGURATION_TEMPLATE_BREAK_GLASS_USERS_UPDATED",
@@ -4747,6 +4776,8 @@ export type FirstPartyToken = {
4747
4776
  lastUsedAt?: Maybe<Scalars["Time"]["output"]>;
4748
4777
  tokenLabel: Scalars["String"]["output"];
4749
4778
  tokenPreview: Scalars["String"]["output"];
4779
+ user: User;
4780
+ userId: Scalars["UserId"]["output"];
4750
4781
  };
4751
4782
  export type FirstPartyTokensOutput = FirstPartyTokensResult;
4752
4783
  export type FirstPartyTokensResult = {
@@ -4772,6 +4803,9 @@ export type ForfeitResourceResult = {
4772
4803
  resource: Resource;
4773
4804
  taskId: Scalars["PushTaskId"]["output"];
4774
4805
  };
4806
+ export type FreshServiceMetadataInput = {
4807
+ hostname: Scalars["String"]["input"];
4808
+ };
4775
4809
  export type GcpConnectionMetadata = {
4776
4810
  __typename?: "GCPConnectionMetadata";
4777
4811
  pubSubProjectId: Scalars["String"]["output"];
@@ -4822,6 +4856,7 @@ export declare enum GeneralSettingType {
4822
4856
  DisableRequestDelegation = "DISABLE_REQUEST_DELEGATION",
4823
4857
  GlobalRequesterRole = "GLOBAL_REQUESTER_ROLE",
4824
4858
  NestedGroups = "NESTED_GROUPS",
4859
+ OnlyAllowDelegationToActiveUsers = "ONLY_ALLOW_DELEGATION_TO_ACTIVE_USERS",
4825
4860
  RequireManagerCc = "REQUIRE_MANAGER_CC",
4826
4861
  RequireOpalMfaForLogins = "REQUIRE_OPAL_MFA_FOR_LOGINS",
4827
4862
  RequireSupportTicket = "REQUIRE_SUPPORT_TICKET",
@@ -4907,7 +4942,7 @@ export type GoogleWorkspaceConnectionMetadataInput = {
4907
4942
  customerId: Scalars["String"]["input"];
4908
4943
  serviceAccount: GcpServiceAccountInput;
4909
4944
  };
4910
- export type Group = AccessEntity & AccessibleItem & BaseEntity & ConnectionEntity & ManagedEntity & Node & Principal & RoleAssignmentEntity & RolePermissionTargetEntity & {
4945
+ export type Group = AccessEntity & AccessibleItem & BaseEntity & CatalogEntity & ManagedEntity & Node & Principal & RoleAssignmentEntity & RolePermissionTargetEntity & {
4911
4946
  __typename?: "Group";
4912
4947
  accessLevels?: Maybe<Array<GroupAccessLevel>>;
4913
4948
  accessRuleCondition?: Maybe<AccessRuleCondition>;
@@ -4938,10 +4973,12 @@ export type Group = AccessEntity & AccessibleItem & BaseEntity & ConnectionEntit
4938
4973
  groupType: GroupType;
4939
4974
  /** @deprecated Use paginatedGroupUsers instead. */
4940
4975
  groupUsers: Array<GroupUser>;
4976
+ handle?: Maybe<Scalars["String"]["output"]>;
4941
4977
  iconUrl?: Maybe<Scalars["String"]["output"]>;
4942
4978
  id: Scalars["UUID"]["output"];
4943
4979
  insights?: Maybe<GroupUserInsights>;
4944
4980
  isDeleted: Scalars["Boolean"]["output"];
4981
+ isHiddenFromCatalog: Scalars["Boolean"]["output"];
4945
4982
  isManaged: Scalars["Boolean"]["output"];
4946
4983
  isOnCallSynced: Scalars["Boolean"]["output"];
4947
4984
  isRequestable: Scalars["Boolean"]["output"];
@@ -4966,6 +5003,7 @@ export type Group = AccessEntity & AccessibleItem & BaseEntity & ConnectionEntit
4966
5003
  riskScore?: Maybe<Scalars["Int"]["output"]>;
4967
5004
  riskSensitivity?: Maybe<RiskSensitivityDetails>;
4968
5005
  serviceType: ServiceType;
5006
+ sourceGroupOwners?: Maybe<Array<Owner>>;
4969
5007
  tags: Array<GroupTag>;
4970
5008
  totalContainingGroupCount: Scalars["Int"]["output"];
4971
5009
  totalGroupAccessCount: Scalars["Int"]["output"];
@@ -5163,7 +5201,6 @@ export type GroupGroup = {
5163
5201
  containingGroup?: Maybe<Group>;
5164
5202
  containingGroupId: Scalars["GroupId"]["output"];
5165
5203
  depth: Scalars["Int"]["output"];
5166
- id: Scalars["GroupGroupId"]["output"];
5167
5204
  memberGroup?: Maybe<Group>;
5168
5205
  memberGroupId: Scalars["GroupId"]["output"];
5169
5206
  propagationStatus?: Maybe<PropagationStatus>;
@@ -5188,7 +5225,8 @@ export type GroupGroupAccess = {
5188
5225
  memberGroupId: Scalars["GroupId"]["output"];
5189
5226
  };
5190
5227
  export type GroupGroupAccessInput = {
5191
- groupGroupId: Scalars["GroupGroupId"]["input"];
5228
+ containingGroupId: Scalars["GroupId"]["input"];
5229
+ memberGroupId: Scalars["GroupId"]["input"];
5192
5230
  };
5193
5231
  export type GroupGroupAccessOutput = GroupGroupAccessResult | GroupGroupNotFound;
5194
5232
  export type GroupGroupAccessPoint = {
@@ -5196,8 +5234,8 @@ export type GroupGroupAccessPoint = {
5196
5234
  accessLevel: GroupAccessLevel;
5197
5235
  containingGroupId: Scalars["GroupId"]["output"];
5198
5236
  containingGroupName: Scalars["String"]["output"];
5199
- createdAt: Scalars["Time"]["output"];
5200
- eventId: Scalars["EventId"]["output"];
5237
+ createdAt?: Maybe<Scalars["Time"]["output"]>;
5238
+ eventId?: Maybe<Scalars["EventId"]["output"]>;
5201
5239
  expiration?: Maybe<Scalars["Time"]["output"]>;
5202
5240
  memberGroupId: Scalars["GroupId"]["output"];
5203
5241
  memberGroupName: Scalars["String"]["output"];
@@ -5209,10 +5247,6 @@ export type GroupGroupAccessResult = {
5209
5247
  __typename?: "GroupGroupAccessResult";
5210
5248
  access: GroupGroupAccess;
5211
5249
  };
5212
- export type GroupGroupAlreadyExists = Error & {
5213
- __typename?: "GroupGroupAlreadyExists";
5214
- message: Scalars["String"]["output"];
5215
- };
5216
5250
  export type GroupGroupNotFound = Error & {
5217
5251
  __typename?: "GroupGroupNotFound";
5218
5252
  message: Scalars["String"]["output"];
@@ -5320,7 +5354,7 @@ export type GroupRequestStatusCountsResult = {
5320
5354
  };
5321
5355
  export type GroupResource = {
5322
5356
  __typename?: "GroupResource";
5323
- access: GroupResourceAccess;
5357
+ access: Access;
5324
5358
  accessLevel: ResourceAccessLevel;
5325
5359
  durationInMinutes?: Maybe<Scalars["Int"]["output"]>;
5326
5360
  group?: Maybe<Group>;
@@ -5332,57 +5366,10 @@ export type GroupResource = {
5332
5366
  source: GroupResourceSource;
5333
5367
  userUsage?: Maybe<Scalars["Int"]["output"]>;
5334
5368
  };
5335
- export type GroupResourceAccess = {
5336
- __typename?: "GroupResourceAccess";
5337
- accessLevel: ResourceAccessLevel;
5338
- /**
5339
- * Describes attributes of `groupId`'s direct access to `resourceId`. If unset, this group does not have
5340
- * direct access to the resource.
5341
- */
5342
- directAccessPoint?: Maybe<GroupResourceAccessPoint>;
5343
- groupId: Scalars["GroupId"]["output"];
5344
- /**
5345
- * Each item in this list describes one indirect path by which `groupId` has access to `resourceId`.
5346
- * If empty, this group does not have indirect access to the resource.
5347
- */
5348
- indirectAccessPointPaths: Array<IndirectGroupResourceAccessPointPath>;
5349
- /**
5350
- * Each item in this list describes one inherited path by which `groupId` has access to `resourceId`.
5351
- * If empty, this group does not have inherited access to the resource.
5352
- */
5353
- inheritedAccessPoints: Array<GroupResourceAccessPoint>;
5354
- /**
5355
- * Describes attributes of `resourceId`'s access to `groupId` for the path with the latest expiration.
5356
- * This access might be direct or indirect.
5357
- */
5358
- latestExpiringAccessPoint: GroupResourceAccessPoint;
5359
- resourceId: Scalars["ResourceId"]["output"];
5360
- };
5361
- export type GroupResourceAccessPoint = {
5362
- __typename?: "GroupResourceAccessPoint";
5363
- accessLevel: ResourceAccessLevel;
5364
- createdAt: Scalars["Time"]["output"];
5365
- eventId: Scalars["EventId"]["output"];
5366
- expiration?: Maybe<Scalars["Time"]["output"]>;
5367
- groupId: Scalars["GroupId"]["output"];
5368
- groupName: Scalars["String"]["output"];
5369
- resourceId: Scalars["ResourceId"]["output"];
5370
- resourceName: Scalars["String"]["output"];
5371
- resourceType: ResourceType;
5372
- supportTicket?: Maybe<SupportTicket>;
5373
- supportTicketId?: Maybe<Scalars["SupportTicketId"]["output"]>;
5374
- };
5375
5369
  export type GroupResourceAlreadyExists = Error & {
5376
5370
  __typename?: "GroupResourceAlreadyExists";
5377
5371
  message: Scalars["String"]["output"];
5378
5372
  };
5379
- export type GroupResourceEdge = {
5380
- __typename?: "GroupResourceEdge";
5381
- accessLevel: ResourceAccessLevel;
5382
- groupId: Scalars["GroupId"]["output"];
5383
- metadata?: Maybe<EdgeMetadata>;
5384
- resourceId: Scalars["ResourceId"]["output"];
5385
- };
5386
5373
  export declare enum GroupResourceSource {
5387
5374
  /** GroupResource that's inherited from another remote resource */
5388
5375
  Inherited = "INHERITED",
@@ -5466,7 +5453,6 @@ export type GroupUser = {
5466
5453
  groupId: Scalars["GroupId"]["output"];
5467
5454
  lastUsedAt?: Maybe<Scalars["Time"]["output"]>;
5468
5455
  propagationStatus?: Maybe<PropagationStatus>;
5469
- provisionSource: ProvisionSource;
5470
5456
  source: GroupUserSource;
5471
5457
  user?: Maybe<User>;
5472
5458
  userId: Scalars["UserId"]["output"];
@@ -5496,13 +5482,13 @@ export type GroupUserAccess = {
5496
5482
  export type GroupUserAccessPoint = {
5497
5483
  __typename?: "GroupUserAccessPoint";
5498
5484
  accessLevel: GroupAccessLevel;
5499
- createdAt: Scalars["Time"]["output"];
5500
- eventId: Scalars["EventId"]["output"];
5485
+ createdAt?: Maybe<Scalars["Time"]["output"]>;
5486
+ eventId?: Maybe<Scalars["EventId"]["output"]>;
5501
5487
  expiration?: Maybe<Scalars["Time"]["output"]>;
5502
5488
  groupId: Scalars["GroupId"]["output"];
5503
5489
  groupName: Scalars["String"]["output"];
5504
5490
  groupType: GroupType;
5505
- source: GroupUserSource;
5491
+ source?: Maybe<GroupUserSource>;
5506
5492
  supportTicket?: Maybe<SupportTicket>;
5507
5493
  supportTicketId?: Maybe<Scalars["SupportTicketId"]["output"]>;
5508
5494
  userId: Scalars["UserId"]["output"];
@@ -5562,7 +5548,6 @@ export type GroupsInput = {
5562
5548
  leaderOfGroupsOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
5563
5549
  maxNumEntries?: InputMaybe<Scalars["Int"]["input"]>;
5564
5550
  searchQuery?: InputMaybe<Scalars["String"]["input"]>;
5565
- serviceType?: InputMaybe<ServiceType>;
5566
5551
  tag?: InputMaybe<TagFilter>;
5567
5552
  unmanagedOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
5568
5553
  };
@@ -5766,23 +5751,6 @@ export type ImportCustomResourcesResult = {
5766
5751
  __typename?: "ImportCustomResourcesResult";
5767
5752
  success: Scalars["Boolean"]["output"];
5768
5753
  };
5769
- export type ImportRemoteGroupInfo = {
5770
- connectionId: Scalars["ConnectionId"]["input"];
5771
- groupType: GroupType;
5772
- metadata?: InputMaybe<Scalars["String"]["input"]>;
5773
- name: Scalars["String"]["input"];
5774
- remoteId: Scalars["RemoteGroupId"]["input"];
5775
- serviceType: ServiceType;
5776
- };
5777
- export type ImportRemoteResourceInfo = {
5778
- connectionId: Scalars["ConnectionId"]["input"];
5779
- metadata?: InputMaybe<Scalars["String"]["input"]>;
5780
- name: Scalars["String"]["input"];
5781
- parentResourceId?: InputMaybe<Scalars["ResourceId"]["input"]>;
5782
- remoteId: Scalars["RemoteResourceId"]["input"];
5783
- resourceType: ResourceType;
5784
- serviceType: ServiceType;
5785
- };
5786
5754
  export declare enum ImportSetting {
5787
5755
  All = "ALL",
5788
5756
  Manual = "MANUAL",
@@ -5800,12 +5768,10 @@ export type IncompleteAccessReviewer = {
5800
5768
  export type IndirectAccessPath = {
5801
5769
  __typename?: "IndirectAccessPath";
5802
5770
  accessPoints?: Maybe<Array<AccessPoint>>;
5803
- resolvedAccessPoint: AccessPoint;
5771
+ expiration?: Maybe<Scalars["Time"]["output"]>;
5804
5772
  };
5805
5773
  export type IndirectGroupAccessPoint = {
5806
5774
  __typename?: "IndirectGroupAccessPoint";
5807
- createdAt: Scalars["Time"]["output"];
5808
- eventId: Scalars["EventId"]["output"];
5809
5775
  groupId: Scalars["GroupId"]["output"];
5810
5776
  groupName: Scalars["String"]["output"];
5811
5777
  groupType: GroupType;
@@ -5830,25 +5796,6 @@ export type IndirectGroupGroupAccessPointPath = {
5830
5796
  */
5831
5797
  startGroupId: Scalars["GroupId"]["output"];
5832
5798
  };
5833
- export type IndirectGroupResourceAccessPointPath = {
5834
- __typename?: "IndirectGroupResourceAccessPointPath";
5835
- accessLevel: ResourceAccessLevel;
5836
- /** The final group in `indirectAccessPointPath`. This group has direct access to `resourceId`. */
5837
- endGroupId: Scalars["GroupId"]["output"];
5838
- /** The path of groups leading from `startGroupId` to `endGroupId`, inclusive. */
5839
- indirectAccessPointPath?: Maybe<Array<IndirectGroupAccessPoint>>;
5840
- /**
5841
- * Describes attributes of `startGroupId`'s indirect access to `endGroupId`. We call this "resolved"
5842
- * because these attributes are computed based on following the path from start to end.
5843
- */
5844
- resolvedAccessPoint?: Maybe<GroupResourceAccessPoint>;
5845
- resourceId: Scalars["ResourceId"]["output"];
5846
- /**
5847
- * The first group in `indirectAccessPointPath`. This is the first group in the chain that has
5848
- * access to `resourceId`.
5849
- */
5850
- startGroupId: Scalars["GroupId"]["output"];
5851
- };
5852
5799
  export type IndirectGroupUserAccessPointPath = {
5853
5800
  __typename?: "IndirectGroupUserAccessPointPath";
5854
5801
  /**
@@ -6232,15 +6179,6 @@ export type MultiChoiceValue = {
6232
6179
  export type MultiChoiceValueInput = {
6233
6180
  value: Scalars["String"]["input"];
6234
6181
  };
6235
- export type MultiGroupSelection = {
6236
- connectionId?: InputMaybe<Scalars["ConnectionId"]["input"]>;
6237
- groupType: GroupType;
6238
- };
6239
- export type MultiResourceSelection = {
6240
- connectionId?: InputMaybe<Scalars["ConnectionId"]["input"]>;
6241
- parentResourceId?: InputMaybe<ParentResourceInput>;
6242
- resourceType: ResourceType;
6243
- };
6244
6182
  export type MultipleGroupAccessLevelsInput = {
6245
6183
  groupIds: Array<Scalars["GroupId"]["input"]>;
6246
6184
  onlyRequestableTargetUser?: InputMaybe<Scalars["UserId"]["input"]>;
@@ -6265,7 +6203,6 @@ export type Mutation = {
6265
6203
  addBigData: AddBigDataOutput;
6266
6204
  addConnectionUsers: AddConnectionUsersOutput;
6267
6205
  addFavorite?: Maybe<Scalars["Boolean"]["output"]>;
6268
- addGroupGroups: AddGroupGroupsOutput;
6269
6206
  addGroupResources: AddGroupResourcesOutput;
6270
6207
  addGroupTags: AddGroupTagsOutput;
6271
6208
  addGroupUsers: AddGroupUsersOutput;
@@ -6274,11 +6211,10 @@ export type Mutation = {
6274
6211
  addResourceUsers: AddResourceUsersOutput;
6275
6212
  addRoleAssignments: AddRoleAssignmentsOutput;
6276
6213
  addUserTags: AddUserTagsOutput;
6214
+ adminRevokeUnreviewedAssignments: AdminRevokeUnreviewedAssignmentsOutput;
6277
6215
  approveRequest: ApproveRequestOutput;
6278
6216
  assumeImpersonation: AssumeImpersonationOutput;
6279
6217
  authCodeCallback: AuthCodeCallbackOutput;
6280
- /** @deprecated Use bulkUpdateItems with importUnmanagedItems set to true */
6281
- bulkImportRemoteItems: BulkImportRemoteItemsOutput;
6282
6218
  bulkUpdateItems: BulkUpdateItemsOutput;
6283
6219
  cancelRequest: CancelRequestOutput;
6284
6220
  clearPropagationStatus: ClearPropagationStatusOutput;
@@ -6320,6 +6256,8 @@ export type Mutation = {
6320
6256
  createResources: CreateResourcesOutput;
6321
6257
  createSamlConnection: CreateSamlConnectionOutput;
6322
6258
  createSamlConnectionProxy: CreateSamlConnectionProxyOutput;
6259
+ createServiceUser: User;
6260
+ createServiceUserAutomation: ServiceUserAutomation;
6323
6261
  createSession: CreateSessionOutput;
6324
6262
  createTag: CreateTagOutput;
6325
6263
  createThirdPartyIntegration: CreateThirdPartyIntegrationOutput;
@@ -6350,6 +6288,7 @@ export type Mutation = {
6350
6288
  deleteResources: DeleteResourcesOutput;
6351
6289
  deleteSamlConnection: DeleteSamlConnectionOutput;
6352
6290
  deleteSamlConnectionProxy: DeleteSamlConnectionProxyOutput;
6291
+ deleteServiceUserAutomations: Scalars["Boolean"]["output"];
6353
6292
  deleteTags: DeleteTagsOutput;
6354
6293
  deleteThirdPartyIntegration: DeleteThirdPartyIntegrationOutput;
6355
6294
  deleteUser: DeleteUserOutput;
@@ -6359,11 +6298,12 @@ export type Mutation = {
6359
6298
  dismissGroupBindingSuggestions: DismissGroupBindingSuggestionsOutput;
6360
6299
  dismissRecommendationsSubscores: DismissRecommendationsSubscoresOutput;
6361
6300
  dismissSyncErrors: DismissSyncErrorsOutput;
6362
- enableDefaultNotificationsForAll: EnableDefaultNotificationsForAllOutput;
6301
+ enableNotificationForAll: EnableNotificationsForAllOutput;
6363
6302
  escalateRequestToSkipManager: EscalateRequestToSkipManagerOutput;
6364
6303
  extendRoleAssignment: ExtendRoleAssignmentOutput;
6365
6304
  forfeitGroup: ForfeitGroupOutput;
6366
6305
  forfeitResource: ForfeitResourceOutput;
6306
+ hideFromCatalog?: Maybe<Scalars["Boolean"]["output"]>;
6367
6307
  /** @deprecated Use bulkUpdateItems with importUnmanagedItems set to true */
6368
6308
  importAll: ImportAllOutput;
6369
6309
  /** Import resources and their resource users for a custom connection */
@@ -6385,13 +6325,11 @@ export type Mutation = {
6385
6325
  recordResourceView: RecordResourceViewOutput;
6386
6326
  regenerateAccessReviewReport: RegenerateAccessReviewReportOutput;
6387
6327
  regenerateSigningSecret: RegenerateSigningSecretOutput;
6388
- remediateAddGroupGroups: RemediateAddGroupGroupsOutput;
6389
6328
  remediateAddGroupResources: RemediateAddGroupResourcesOutput;
6390
6329
  remediateAddGroupUsers: RemediateAddGroupUsersOutput;
6391
6330
  remediateAddResourceUsers: RemediateAddResourceUsersOutput;
6392
6331
  remediateAddRoleAssignments: RemediateAddRoleAssignmentsOutput;
6393
6332
  removeConnectionUsers: RemoveConnectionUsersOutput;
6394
- removeGroupGroups: RemoveGroupGroupsOutput;
6395
6333
  removeGroupResources: RemoveGroupResourcesOutput;
6396
6334
  removeGroupTags: RemoveGroupTagsOutput;
6397
6335
  removeGroupUsers: RemoveGroupUsersOutput;
@@ -6418,6 +6356,7 @@ export type Mutation = {
6418
6356
  startSync: StartSyncOutput;
6419
6357
  stopAccessReview: StopAccessReviewOutput;
6420
6358
  stopImpersonation: StopImpersonationOutput;
6359
+ unhideFromCatalog?: Maybe<Scalars["Boolean"]["output"]>;
6421
6360
  updateAccessReview: UpdateAccessReviewOutput;
6422
6361
  updateAccessReviewGroupReviewers: UpdateAccessReviewGroupReviewersOutput;
6423
6362
  updateAccessReviewResourceReviewers: UpdateAccessReviewResourceReviewersOutput;
@@ -6433,7 +6372,6 @@ export type Mutation = {
6433
6372
  /** @deprecated Use bulkUpdateItems instead. */
6434
6373
  updateGroup: UpdateGroupOutput;
6435
6374
  updateGroupBindings: UpdateGroupBindingsOutput;
6436
- updateGroupGroups: UpdateGroupGroupsOutput;
6437
6375
  updateGroupResourceReviewers: UpdateGroupResourceReviewersOutput;
6438
6376
  updateGroupResources: UpdateGroupResourcesOutput;
6439
6377
  updateGroupUserReviewers: UpdateGroupUserReviewersOutput;
@@ -6450,6 +6388,7 @@ export type Mutation = {
6450
6388
  updateResources: UpdateResourcesOutput;
6451
6389
  updateRoleAssignments: UpdateRoleAssignmentsOutput;
6452
6390
  updateSamlConnection: UpdateSamlConnectionOutput;
6391
+ updateServiceUserAutomation: ServiceUserAutomation;
6453
6392
  updateUser: UpdateUserOutput;
6454
6393
  updateUserManager: UpdateUserManagerOutput;
6455
6394
  updateUserSettings: UpdateUserSettingsOutput;
@@ -6470,9 +6409,6 @@ export type MutationAddConnectionUsersArgs = {
6470
6409
  export type MutationAddFavoriteArgs = {
6471
6410
  entityIdTuple?: InputMaybe<EntityIdTupleInput>;
6472
6411
  };
6473
- export type MutationAddGroupGroupsArgs = {
6474
- input: AddGroupGroupsInput;
6475
- };
6476
6412
  export type MutationAddGroupResourcesArgs = {
6477
6413
  input: AddGroupResourcesInput;
6478
6414
  };
@@ -6497,6 +6433,9 @@ export type MutationAddRoleAssignmentsArgs = {
6497
6433
  export type MutationAddUserTagsArgs = {
6498
6434
  input: AddUserTagsInput;
6499
6435
  };
6436
+ export type MutationAdminRevokeUnreviewedAssignmentsArgs = {
6437
+ input: AdminRevokeUnreviewedAssignmentsInput;
6438
+ };
6500
6439
  export type MutationApproveRequestArgs = {
6501
6440
  input: ApproveRequestInput;
6502
6441
  };
@@ -6506,9 +6445,6 @@ export type MutationAssumeImpersonationArgs = {
6506
6445
  export type MutationAuthCodeCallbackArgs = {
6507
6446
  input: AuthCodeCallbackInput;
6508
6447
  };
6509
- export type MutationBulkImportRemoteItemsArgs = {
6510
- input: BulkImportRemoteItemsInput;
6511
- };
6512
6448
  export type MutationBulkUpdateItemsArgs = {
6513
6449
  input: BulkUpdateItemsInput;
6514
6450
  };
@@ -6620,6 +6556,13 @@ export type MutationCreateSamlConnectionArgs = {
6620
6556
  export type MutationCreateSamlConnectionProxyArgs = {
6621
6557
  input: CreateSamlConnectionProxyInput;
6622
6558
  };
6559
+ export type MutationCreateServiceUserArgs = {
6560
+ input: CreateServiceUserInput;
6561
+ };
6562
+ export type MutationCreateServiceUserAutomationArgs = {
6563
+ input: CreateServiceUserAutomationInput;
6564
+ userId: Scalars["UserId"]["input"];
6565
+ };
6623
6566
  export type MutationCreateSessionArgs = {
6624
6567
  input: CreateSessionInput;
6625
6568
  };
@@ -6704,6 +6647,9 @@ export type MutationDeleteResourcesArgs = {
6704
6647
  export type MutationDeleteSamlConnectionProxyArgs = {
6705
6648
  input: DeleteSamlConnectionProxyInput;
6706
6649
  };
6650
+ export type MutationDeleteServiceUserAutomationsArgs = {
6651
+ inputs: Array<DeleteServiceUserAutomationInput>;
6652
+ };
6707
6653
  export type MutationDeleteTagsArgs = {
6708
6654
  input: DeleteTagsInput;
6709
6655
  };
@@ -6728,6 +6674,9 @@ export type MutationDismissRecommendationsSubscoresArgs = {
6728
6674
  export type MutationDismissSyncErrorsArgs = {
6729
6675
  input: DismissSyncErrorsInput;
6730
6676
  };
6677
+ export type MutationEnableNotificationForAllArgs = {
6678
+ type: NotificationType;
6679
+ };
6731
6680
  export type MutationEscalateRequestToSkipManagerArgs = {
6732
6681
  input: EscalateRequestToSkipManagerInput;
6733
6682
  };
@@ -6740,6 +6689,9 @@ export type MutationForfeitGroupArgs = {
6740
6689
  export type MutationForfeitResourceArgs = {
6741
6690
  input: ForfeitResourceInput;
6742
6691
  };
6692
+ export type MutationHideFromCatalogArgs = {
6693
+ itemID?: InputMaybe<Scalars["UUID"]["input"]>;
6694
+ };
6743
6695
  export type MutationImportAllArgs = {
6744
6696
  input: ImportAllInput;
6745
6697
  };
@@ -6788,9 +6740,6 @@ export type MutationRecordResourceViewArgs = {
6788
6740
  export type MutationRegenerateAccessReviewReportArgs = {
6789
6741
  input: RegenerateAccessReviewReportInput;
6790
6742
  };
6791
- export type MutationRemediateAddGroupGroupsArgs = {
6792
- input: AddGroupGroupsInput;
6793
- };
6794
6743
  export type MutationRemediateAddGroupResourcesArgs = {
6795
6744
  input: AddGroupResourcesInput;
6796
6745
  };
@@ -6806,9 +6755,6 @@ export type MutationRemediateAddRoleAssignmentsArgs = {
6806
6755
  export type MutationRemoveConnectionUsersArgs = {
6807
6756
  input: RemoveConnectionUsersInput;
6808
6757
  };
6809
- export type MutationRemoveGroupGroupsArgs = {
6810
- input: RemoveGroupGroupsInput;
6811
- };
6812
6758
  export type MutationRemoveGroupResourcesArgs = {
6813
6759
  input: RemoveGroupResourcesInput;
6814
6760
  };
@@ -6872,6 +6818,9 @@ export type MutationStartSyncArgs = {
6872
6818
  export type MutationStopAccessReviewArgs = {
6873
6819
  input: StopAccessReviewInput;
6874
6820
  };
6821
+ export type MutationUnhideFromCatalogArgs = {
6822
+ itemID?: InputMaybe<Scalars["UUID"]["input"]>;
6823
+ };
6875
6824
  export type MutationUpdateAccessReviewArgs = {
6876
6825
  input: UpdateAccessReviewInput;
6877
6826
  };
@@ -6914,9 +6863,6 @@ export type MutationUpdateGroupArgs = {
6914
6863
  export type MutationUpdateGroupBindingsArgs = {
6915
6864
  input: UpdateGroupBindingsInput;
6916
6865
  };
6917
- export type MutationUpdateGroupGroupsArgs = {
6918
- input: UpdateGroupGroupsInput;
6919
- };
6920
6866
  export type MutationUpdateGroupResourceReviewersArgs = {
6921
6867
  input: UpdateGroupResourceReviewersInput;
6922
6868
  };
@@ -6962,6 +6908,9 @@ export type MutationUpdateRoleAssignmentsArgs = {
6962
6908
  export type MutationUpdateSamlConnectionArgs = {
6963
6909
  input: UpdateSamlConnectionInput;
6964
6910
  };
6911
+ export type MutationUpdateServiceUserAutomationArgs = {
6912
+ input: UpdateServiceUserAutomationInput;
6913
+ };
6965
6914
  export type MutationUpdateUserArgs = {
6966
6915
  input: UpdateUserInput;
6967
6916
  };
@@ -7085,6 +7034,9 @@ export declare enum NotificationType {
7085
7034
  GoogleChat = "GOOGLE_CHAT",
7086
7035
  Slack = "SLACK"
7087
7036
  }
7037
+ export type NotionMetadataInput = {
7038
+ databaseId: Scalars["String"]["input"];
7039
+ };
7088
7040
  export type NullableConfigurationId = {
7089
7041
  configurationId?: InputMaybe<Scalars["ConfigurationId"]["input"]>;
7090
7042
  };
@@ -7264,6 +7216,24 @@ export type OpalResourceImmutableError = Error & {
7264
7216
  __typename?: "OpalResourceImmutableError";
7265
7217
  message: Scalars["String"]["output"];
7266
7218
  };
7219
+ export type OpenaiPlatformConnectionCredentialsInput = {
7220
+ token: Scalars["String"]["input"];
7221
+ };
7222
+ export type OpenaiPlatformConnectionMetadata = {
7223
+ __typename?: "OpenaiPlatformConnectionMetadata";
7224
+ placeholder?: Maybe<Scalars["Boolean"]["output"]>;
7225
+ };
7226
+ export type OracleFusionConnectionCredentialsInput = {
7227
+ password: Scalars["String"]["input"];
7228
+ username: Scalars["String"]["input"];
7229
+ };
7230
+ export type OracleFusionConnectionMetadata = {
7231
+ __typename?: "OracleFusionConnectionMetadata";
7232
+ baseUrl: Scalars["String"]["output"];
7233
+ };
7234
+ export type OracleFusionConnectionMetadataInput = {
7235
+ baseUrl: Scalars["String"]["input"];
7236
+ };
7267
7237
  export type OrgMaxGroupDurationInvalidError = Error & {
7268
7238
  __typename?: "OrgMaxGroupDurationInvalidError";
7269
7239
  message: Scalars["String"]["output"];
@@ -7304,6 +7274,7 @@ export type OrganizationSettings = {
7304
7274
  auditTicketProvider?: Maybe<TicketProvider>;
7305
7275
  authSessionExpirationInMinutes: Scalars["Int"]["output"];
7306
7276
  createdAt: Scalars["Time"]["output"];
7277
+ customBanner?: Maybe<Scalars["String"]["output"]>;
7307
7278
  customSearchLink?: Maybe<CustomSearchLink>;
7308
7279
  customerSupportExpiresAt: Scalars["Time"]["output"];
7309
7280
  customerSupportGatingAllowed: Scalars["Boolean"]["output"];
@@ -7317,6 +7288,7 @@ export type OrganizationSettings = {
7317
7288
  maxResourceDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
7318
7289
  maxUsersExceededMessage?: Maybe<Scalars["String"]["output"]>;
7319
7290
  reasonMinWordCount?: Maybe<Scalars["Int"]["output"]>;
7291
+ requestDelegationExcludedGroupIDs?: Maybe<Array<Scalars["GroupId"]["output"]>>;
7320
7292
  roleCreationReviewerOwner?: Maybe<Owner>;
7321
7293
  roleCreationReviewerOwnerId?: Maybe<Scalars["OwnerId"]["output"]>;
7322
7294
  syncErrorHandlerOwnerId?: Maybe<Scalars["OwnerId"]["output"]>;
@@ -7648,6 +7620,7 @@ export declare enum PropagationStatusCode {
7648
7620
  ErrRemoteProvisioningViaIdpFailed = "ERR_REMOTE_PROVISIONING_VIA_IDP_FAILED",
7649
7621
  ErrRemoteResourceNotFound = "ERR_REMOTE_RESOURCE_NOT_FOUND",
7650
7622
  ErrRemoteThrottle = "ERR_REMOTE_THROTTLE",
7623
+ ErrRemoteTicketNotFound = "ERR_REMOTE_TICKET_NOT_FOUND",
7651
7624
  ErrRemoteUnrecoverableError = "ERR_REMOTE_UNRECOVERABLE_ERROR",
7652
7625
  ErrRemoteUserNotFound = "ERR_REMOTE_USER_NOT_FOUND",
7653
7626
  ErrRemoteUserNotLinked = "ERR_REMOTE_USER_NOT_LINKED",
@@ -7836,6 +7809,7 @@ export type Query = {
7836
7809
  accessReviewStats: AccessReviewStatsOutput;
7837
7810
  accessReviewTemplate: AccessReviewTemplateOutput;
7838
7811
  accessReviewTemplates: AccessReviewTemplatesOutput;
7812
+ accessReviewUnifiedAssignments: AccessReviewUnifiedAssignmentConnection;
7839
7813
  accessReviewUser: AccessReviewUserOutput;
7840
7814
  accessReviewUserAssignments: AccessReviewUserAssignmentsResult;
7841
7815
  accessReviewUsers: AccessReviewUsersOutput;
@@ -7847,8 +7821,6 @@ export type Query = {
7847
7821
  allowedToUseAldwin: AllowedToUseAldwinOutput;
7848
7822
  app: AppOutput;
7849
7823
  appInfo: AppInfoOutput;
7850
- /** @deprecated use catalog instead */
7851
- apps: AppsOutput;
7852
7824
  appsV2: AppConnection;
7853
7825
  authProviderInfo: AuthProviderInfoOutput;
7854
7826
  authSessionStatus: AuthSessionStatusOutput;
@@ -7898,9 +7870,11 @@ export type Query = {
7898
7870
  groupRequestStatusCounts: GroupRequestStatusCountsOutput;
7899
7871
  groupTypesWithCounts: GroupTypesWithCountsOutput;
7900
7872
  groups: GroupsOutput;
7873
+ hasValidOidcToken: Scalars["Boolean"]["output"];
7901
7874
  idpConnection: IdpConnectionOutput;
7902
7875
  idpGroupMapping?: Maybe<IdpGroupMapping>;
7903
7876
  idpGroupMappings: Array<IdpGroupMapping>;
7877
+ lastMfaAt?: Maybe<Scalars["Time"]["output"]>;
7904
7878
  leftSidebarRoutes: LeftSidebarRoutes;
7905
7879
  listEventStreamMessages: ListEventStreamMessagesOutput;
7906
7880
  listEventStreams: ListEventStreamsOutput;
@@ -7949,7 +7923,6 @@ export type Query = {
7949
7923
  resourceUsage: ResourceUsageOutput;
7950
7924
  resources: ResourcesOutput;
7951
7925
  riskScoreGraphData: RiskScoreGraphDataResult;
7952
- roleAssignments: RoleAssignmentConnection;
7953
7926
  samlConnection: SamlConnectionOutput;
7954
7927
  search: SearchOutput;
7955
7928
  sessions: SessionsOutput;
@@ -7977,7 +7950,6 @@ export type Query = {
7977
7950
  userTags: Array<UserTag>;
7978
7951
  users: UsersOutput;
7979
7952
  vaultSessions: VaultSessionsOutput;
7980
- visualizationData: VisualizationOutput;
7981
7953
  webhookInfo: WebhookInfoOutput;
7982
7954
  };
7983
7955
  export type QueryAccessGrantedTimesArgs = {
@@ -8019,7 +7991,7 @@ export type QueryAccessReviewGroupUsersArgs = {
8019
7991
  input: AccessReviewInput;
8020
7992
  };
8021
7993
  export type QueryAccessReviewGroupsArgs = {
8022
- input: AccessReviewGroupsInput;
7994
+ id: Scalars["AccessReviewId"]["input"];
8023
7995
  };
8024
7996
  export type QueryAccessReviewItemsArgs = {
8025
7997
  input: AccessReviewItemsInput;
@@ -8056,6 +8028,14 @@ export type QueryAccessReviewTemplateArgs = {
8056
8028
  export type QueryAccessReviewTemplatesArgs = {
8057
8029
  filters?: InputMaybe<AccessReviewsTemplateFilters>;
8058
8030
  };
8031
+ export type QueryAccessReviewUnifiedAssignmentsArgs = {
8032
+ after?: InputMaybe<Scalars["String"]["input"]>;
8033
+ before?: InputMaybe<Scalars["String"]["input"]>;
8034
+ filters: AccessReviewUnifiedAssignmentFilters;
8035
+ first?: InputMaybe<Scalars["Int"]["input"]>;
8036
+ last?: InputMaybe<Scalars["Int"]["input"]>;
8037
+ sortBy?: InputMaybe<AssignmentsSortBy>;
8038
+ };
8059
8039
  export type QueryAccessReviewUserArgs = {
8060
8040
  input: AccessReviewUserInput;
8061
8041
  };
@@ -8090,14 +8070,6 @@ export type QueryAllDelegationsArgs = {
8090
8070
  export type QueryAppArgs = {
8091
8071
  id: Scalars["UUID"]["input"];
8092
8072
  };
8093
- export type QueryAppsArgs = {
8094
- access: AccessOption;
8095
- appCategory?: InputMaybe<AppCategory>;
8096
- cursor?: InputMaybe<Scalars["String"]["input"]>;
8097
- limit?: InputMaybe<Scalars["Int"]["input"]>;
8098
- searchQuery?: InputMaybe<Scalars["String"]["input"]>;
8099
- sortBy?: InputMaybe<AppsSortBy>;
8100
- };
8101
8073
  export type QueryAppsV2Args = {
8102
8074
  after?: InputMaybe<Scalars["String"]["input"]>;
8103
8075
  before?: InputMaybe<Scalars["String"]["input"]>;
@@ -8237,6 +8209,9 @@ export type QueryGroupTypesWithCountsArgs = {
8237
8209
  export type QueryGroupsArgs = {
8238
8210
  input: GroupsInput;
8239
8211
  };
8212
+ export type QueryHasValidOidcTokenArgs = {
8213
+ oidcProviderType: OidcProviderType;
8214
+ };
8240
8215
  export type QueryIdpGroupMappingArgs = {
8241
8216
  appResourceId: Scalars["ResourceId"]["input"];
8242
8217
  groupId: Scalars["GroupId"]["input"];
@@ -8357,9 +8332,6 @@ export type QueryResourceUsageArgs = {
8357
8332
  export type QueryResourcesArgs = {
8358
8333
  input: ResourcesInput;
8359
8334
  };
8360
- export type QueryRoleAssignmentsArgs = {
8361
- input?: InputMaybe<RoleAssignmentsInput>;
8362
- };
8363
8335
  export type QuerySearchArgs = {
8364
8336
  input: SearchInput;
8365
8337
  };
@@ -8421,6 +8393,9 @@ export type QueryTopBulkSuggestionsArgs = {
8421
8393
  export type QueryUserArgs = {
8422
8394
  input: UserInput;
8423
8395
  };
8396
+ export type QueryUserSettingsArgs = {
8397
+ id?: InputMaybe<Scalars["UUID"]["input"]>;
8398
+ };
8424
8399
  export type QueryUserTagsArgs = {
8425
8400
  input: UserTagsInput;
8426
8401
  };
@@ -8430,11 +8405,8 @@ export type QueryUsersArgs = {
8430
8405
  export type QueryVaultSessionsArgs = {
8431
8406
  input?: InputMaybe<VaultSessionsInput>;
8432
8407
  };
8433
- export type QueryVisualizationDataArgs = {
8434
- input: VisualizationFilter;
8435
- };
8436
8408
  export type ReadUiNotificationInput = {
8437
- trackingId: Scalars["UUID"]["input"];
8409
+ url: Scalars["String"]["input"];
8438
8410
  };
8439
8411
  export type ReadUiNotificationOutput = ReadUiNotificationResult;
8440
8412
  export type ReadUiNotificationResult = {
@@ -8599,11 +8571,10 @@ export type RegenerateSigningSecretResult = {
8599
8571
  __typename?: "RegenerateSigningSecretResult";
8600
8572
  webhookInfo: OrganizationWebhookInfo;
8601
8573
  };
8602
- export type RemediateAddGroupGroupsOutput = AddGroupGroupsResult | CallToWebhookFailedError | GroupGroupAlreadyExists | GroupNestingNotAllowedError | GroupNotFoundError | UserFacingError;
8603
8574
  export type RemediateAddGroupResourcesOutput = AddGroupResourcesResult | CallToWebhookFailedError | GroupNotFoundError | GroupResourceAlreadyExists | UserFacingError;
8604
8575
  export type RemediateAddGroupUsersOutput = AddGroupUsersResult | CallToWebhookFailedError | CannotAddSystemUserToGroupError | GroupNotFoundError | GroupUserAlreadyExists;
8605
8576
  export type RemediateAddResourceUsersOutput = AddResourceUsersResult | CallToWebhookFailedError | CannotAddSystemUserToResourceError | OpalAdminRoleMustHaveAtLeastOneDirectUser | OpalGlobalImpersonationResourceDirectAddNotAllowedError | ResourceNotFoundError | ResourceUserAlreadyExists;
8606
- export type RemediateAddRoleAssignmentsOutput = AddRoleAssignmentsResult | RoleAssignmentNotFoundError;
8577
+ export type RemediateAddRoleAssignmentsOutput = AddRoleAssignmentsResult | GroupNestingNotAllowedError | RoleAssignmentNotFoundError;
8607
8578
  export type RemoteAppItem = {
8608
8579
  __typename?: "RemoteAppItem";
8609
8580
  connectionId: Scalars["ConnectionId"]["output"];
@@ -8685,21 +8656,6 @@ export type RemoveConnectionUsersResult = {
8685
8656
  success: Scalars["Boolean"]["output"];
8686
8657
  taskId: Scalars["PushTaskId"]["output"];
8687
8658
  };
8688
- export type RemoveGroupGroupsEntryOutput = RemoveGroupGroupsEntryResult;
8689
- export type RemoveGroupGroupsEntryResult = {
8690
- __typename?: "RemoveGroupGroupsEntryResult";
8691
- groupGroup: GroupGroup;
8692
- };
8693
- export type RemoveGroupGroupsInput = {
8694
- groupGroupsIds: Array<Scalars["GroupGroupId"]["input"]>;
8695
- noPush?: InputMaybe<Scalars["Boolean"]["input"]>;
8696
- };
8697
- export type RemoveGroupGroupsOutput = CallToWebhookFailedError | GroupNotFoundError | RemoveGroupGroupsResult | UserFacingError;
8698
- export type RemoveGroupGroupsResult = {
8699
- __typename?: "RemoveGroupGroupsResult";
8700
- entries: Array<RemoveGroupGroupsEntryOutput>;
8701
- taskId: Scalars["PushTaskId"]["output"];
8702
- };
8703
8659
  export type RemoveGroupResourceInput = {
8704
8660
  accessLevel: ResourceAccessLevelInput;
8705
8661
  groupId: Scalars["GroupId"]["input"];
@@ -8807,7 +8763,7 @@ export type RemoveRoleAssignmentsInput = {
8807
8763
  noPush?: InputMaybe<Scalars["Boolean"]["input"]>;
8808
8764
  roleAssignments: Array<RemoveRoleAssignmentInput>;
8809
8765
  };
8810
- export type RemoveRoleAssignmentsOutput = RemoveRoleAssignmentsResult;
8766
+ export type RemoveRoleAssignmentsOutput = RemoveRoleAssignmentsResult | UserFacingError;
8811
8767
  export type RemoveRoleAssignmentsResult = {
8812
8768
  __typename?: "RemoveRoleAssignmentsResult";
8813
8769
  entries: Array<RemoveRoleAssignmentsEntryOutput>;
@@ -8856,6 +8812,7 @@ export type Request = BaseEntity & Node & {
8856
8812
  resourceProposal?: Maybe<ResourceProposal>;
8857
8813
  resourceProposalId?: Maybe<Scalars["ResourceProposalId"]["output"]>;
8858
8814
  reviewersError?: Maybe<Scalars["String"]["output"]>;
8815
+ source?: Maybe<RequestSource>;
8859
8816
  stages: Array<RequestItemStages>;
8860
8817
  status: RequestStatus;
8861
8818
  supportTicket?: Maybe<SupportTicket>;
@@ -8881,7 +8838,8 @@ export type RequestApprovalTimesResult = {
8881
8838
  export declare enum RequestApprovalType {
8882
8839
  Manager = "MANAGER",
8883
8840
  Owner = "OWNER",
8884
- SkipManager = "SKIP_MANAGER"
8841
+ SkipManager = "SKIP_MANAGER",
8842
+ User = "USER"
8885
8843
  }
8886
8844
  export type RequestComment = {
8887
8845
  __typename?: "RequestComment";
@@ -8911,6 +8869,7 @@ export type RequestConfigInput = {
8911
8869
  export type RequestConfiguration = {
8912
8870
  __typename?: "RequestConfiguration";
8913
8871
  autoApproval: Scalars["Boolean"]["output"];
8872
+ configuredEntities?: Maybe<Array<ConfigurableEntity>>;
8914
8873
  extensionsDurationInMinutes?: Maybe<Scalars["Int"]["output"]>;
8915
8874
  extensionsEnabled: Scalars["Boolean"]["output"];
8916
8875
  groupId?: Maybe<Scalars["GroupId"]["output"]>;
@@ -9119,6 +9078,7 @@ export type RequestReviewerDelegationEdge = Edge & {
9119
9078
  };
9120
9079
  export type RequestReviewerDelegationsFilter = {
9121
9080
  afterTime?: InputMaybe<Scalars["Time"]["input"]>;
9081
+ atTime?: InputMaybe<Scalars["Time"]["input"]>;
9122
9082
  beforeTime?: InputMaybe<Scalars["Time"]["input"]>;
9123
9083
  searchQuery?: InputMaybe<Scalars["String"]["input"]>;
9124
9084
  };
@@ -9131,6 +9091,12 @@ export declare enum RequestReviewerDelegationsSortByField {
9131
9091
  EndTime = "END_TIME",
9132
9092
  StartTime = "START_TIME"
9133
9093
  }
9094
+ export declare enum RequestSource {
9095
+ Api = "API",
9096
+ Cli = "CLI",
9097
+ Slack = "SLACK",
9098
+ Web = "WEB"
9099
+ }
9134
9100
  export type RequestStage = {
9135
9101
  __typename?: "RequestStage";
9136
9102
  operator: ReviewStageOperator;
@@ -9325,7 +9291,7 @@ export type ResetUserMfaResult = {
9325
9291
  __typename?: "ResetUserMFAResult";
9326
9292
  ok: Scalars["Boolean"]["output"];
9327
9293
  };
9328
- export type Resource = AccessEntity & AccessibleItem & AppEntity & BaseEntity & ConnectionEntity & DisplayableEntity & ManagedEntity & Node & Principal & RoleAssignmentEntity & RolePermissionTargetEntity & {
9294
+ export type Resource = AccessEntity & AccessibleItem & AppEntity & BaseEntity & CatalogEntity & DisplayableEntity & ManagedEntity & Node & Principal & RoleAssignmentEntity & RolePermissionTargetEntity & {
9329
9295
  __typename?: "Resource";
9330
9296
  accessLevels?: Maybe<Array<ResourceAccessLevel>>;
9331
9297
  accessStats?: Maybe<AccessStats>;
@@ -9348,12 +9314,14 @@ export type Resource = AccessEntity & AccessibleItem & AppEntity & BaseEntity &
9348
9314
  description: Scalars["String"]["output"];
9349
9315
  displayName: Scalars["String"]["output"];
9350
9316
  entityAssignmentsForPrincipal: Array<RoleAssignment>;
9317
+ handle?: Maybe<Scalars["String"]["output"]>;
9351
9318
  hasVisibleChildren: Scalars["Boolean"]["output"];
9352
9319
  healthStatus?: Maybe<HealthStatus>;
9353
9320
  iconUrl?: Maybe<Scalars["String"]["output"]>;
9354
9321
  id: Scalars["UUID"]["output"];
9355
9322
  imageUrl?: Maybe<Scalars["String"]["output"]>;
9356
9323
  isDeleted: Scalars["Boolean"]["output"];
9324
+ isHiddenFromCatalog: Scalars["Boolean"]["output"];
9357
9325
  isManaged: Scalars["Boolean"]["output"];
9358
9326
  isRequestable: Scalars["Boolean"]["output"];
9359
9327
  maxDirectUsersAllowed?: Maybe<Scalars["Int"]["output"]>;
@@ -9625,6 +9593,7 @@ export type ResourceTagsResult = {
9625
9593
  resourceTags: Array<ResourceTag>;
9626
9594
  };
9627
9595
  export declare enum ResourceType {
9596
+ AnthropicWorkspace = "ANTHROPIC_WORKSPACE",
9628
9597
  AwsAccount = "AWS_ACCOUNT",
9629
9598
  AwsEc2Instance = "AWS_EC2_INSTANCE",
9630
9599
  AwsEksCluster = "AWS_EKS_CLUSTER",
@@ -9649,6 +9618,7 @@ export declare enum ResourceType {
9649
9618
  AzureUserAssignedManagedIdentity = "AZURE_USER_ASSIGNED_MANAGED_Identity",
9650
9619
  AzureVirtualMachine = "AZURE_VIRTUAL_MACHINE",
9651
9620
  CoupaRole = "COUPA_ROLE",
9621
+ CursorOrganization = "CURSOR_ORGANIZATION",
9652
9622
  Custom = "CUSTOM",
9653
9623
  CustomConnector = "CUSTOM_CONNECTOR",
9654
9624
  DatabricksAccountServicePrincipal = "DATABRICKS_ACCOUNT_SERVICE_PRINCIPAL",
@@ -9664,6 +9634,7 @@ export declare enum ResourceType {
9664
9634
  GcpOrganization = "GCP_ORGANIZATION",
9665
9635
  GcpProject = "GCP_PROJECT",
9666
9636
  GcpServiceAccount = "GCP_SERVICE_ACCOUNT",
9637
+ GitHubOrg = "GIT_HUB_ORG",
9667
9638
  GitHubOrgRole = "GIT_HUB_ORG_ROLE",
9668
9639
  GitHubRepo = "GIT_HUB_REPO",
9669
9640
  GitLabProject = "GIT_LAB_PROJECT",
@@ -9677,6 +9648,9 @@ export declare enum ResourceType {
9677
9648
  OktaRole = "OKTA_ROLE",
9678
9649
  OpalRole = "OPAL_ROLE",
9679
9650
  OpalScopedRole = "OPAL_SCOPED_ROLE",
9651
+ OpenaiPlatformProject = "OPENAI_PLATFORM_PROJECT",
9652
+ OpenaiPlatformServiceAccount = "OPENAI_PLATFORM_SERVICE_ACCOUNT",
9653
+ OracleFusionRole = "ORACLE_FUSION_ROLE",
9680
9654
  PagerdutyRole = "PAGERDUTY_ROLE",
9681
9655
  PostgresInstance = "POSTGRES_INSTANCE",
9682
9656
  SalesforcePermissionSet = "SALESFORCE_PERMISSION_SET",
@@ -9735,7 +9709,6 @@ export type ResourceUser = {
9735
9709
  id: Scalars["UUID"]["output"];
9736
9710
  mostRecentSessionEnded?: Maybe<Scalars["Time"]["output"]>;
9737
9711
  propagationStatus?: Maybe<PropagationStatus>;
9738
- provisionSource: ProvisionSource;
9739
9712
  resource?: Maybe<Resource>;
9740
9713
  resourceId: Scalars["ResourceId"]["output"];
9741
9714
  source: ResourceUserSource;
@@ -9773,13 +9746,13 @@ export type ResourceUserAccess = {
9773
9746
  export type ResourceUserAccessPoint = {
9774
9747
  __typename?: "ResourceUserAccessPoint";
9775
9748
  accessLevel: ResourceAccessLevel;
9776
- createdAt: Scalars["Time"]["output"];
9777
- eventId: Scalars["EventId"]["output"];
9749
+ createdAt?: Maybe<Scalars["Time"]["output"]>;
9750
+ eventId?: Maybe<Scalars["EventId"]["output"]>;
9778
9751
  expiration?: Maybe<Scalars["Time"]["output"]>;
9779
9752
  resourceId: Scalars["ResourceId"]["output"];
9780
9753
  resourceName: Scalars["String"]["output"];
9781
9754
  resourceType: ResourceType;
9782
- source: ResourceUserSource;
9755
+ source?: Maybe<ResourceUserSource>;
9783
9756
  supportTicket?: Maybe<SupportTicket>;
9784
9757
  supportTicketId?: Maybe<Scalars["SupportTicketId"]["output"]>;
9785
9758
  userId: Scalars["UserId"]["output"];
@@ -9827,7 +9800,6 @@ export type ResourcesInput = {
9827
9800
  resourceIds?: InputMaybe<Array<Scalars["ResourceId"]["input"]>>;
9828
9801
  resourceTypes?: InputMaybe<Array<ResourceType>>;
9829
9802
  searchQuery?: InputMaybe<Scalars["String"]["input"]>;
9830
- serviceType?: InputMaybe<ServiceType>;
9831
9803
  tag?: InputMaybe<TagFilter>;
9832
9804
  unmanagedOnly?: InputMaybe<Scalars["Boolean"]["input"]>;
9833
9805
  };
@@ -9899,15 +9871,18 @@ export type ReviewerInputStage = {
9899
9871
  ownerIds: Array<Scalars["OwnerId"]["input"]>;
9900
9872
  requireAdminApproval: Scalars["Boolean"]["input"];
9901
9873
  requireManagerApproval: Scalars["Boolean"]["input"];
9874
+ userIds: Array<Scalars["UserId"]["input"]>;
9902
9875
  };
9903
9876
  export type ReviewerStage = {
9904
9877
  __typename?: "ReviewerStage";
9905
9878
  id: Scalars["ReviewerStageId"]["output"];
9906
9879
  operator: ReviewStageOperator;
9907
9880
  owners: Array<Owner>;
9881
+ requestConfiguration: RequestConfiguration;
9908
9882
  requireAdminApproval: Scalars["Boolean"]["output"];
9909
9883
  requireManagerApproval: Scalars["Boolean"]["output"];
9910
9884
  stage: Scalars["Int"]["output"];
9885
+ users: Array<User>;
9911
9886
  };
9912
9887
  export type ReviewerUser = {
9913
9888
  __typename?: "ReviewerUser";
@@ -9930,6 +9905,8 @@ export type ReviewerUserInput = {
9930
9905
  };
9931
9906
  export declare enum ReviewerUserStatus {
9932
9907
  Accepted = "ACCEPTED",
9908
+ AdminNeedsEndSystemRevocation = "ADMIN_NEEDS_END_SYSTEM_REVOCATION",
9909
+ AdminRevoked = "ADMIN_REVOKED",
9933
9910
  NeedsEndSystemRevocation = "NEEDS_END_SYSTEM_REVOCATION",
9934
9911
  NeedsUpdateRequestApproval = "NEEDS_UPDATE_REQUEST_APPROVAL",
9935
9912
  NotRequired = "NOT_REQUIRED",
@@ -9974,7 +9951,6 @@ export type RoleAssignment = {
9974
9951
  principalID: Scalars["EntityId"]["output"];
9975
9952
  principalType: EntityType;
9976
9953
  propagationStatus?: Maybe<PropagationStatus>;
9977
- provisionSource: ProvisionSource;
9978
9954
  suggestion?: Maybe<RoleAssignmentSuggestion>;
9979
9955
  };
9980
9956
  export type RoleAssignmentAction = InvestigateEventAction | ModifyAccessAction | RuleInsightAction | SubmitHiddenGrantFeedback;
@@ -10094,11 +10070,13 @@ export declare enum RolePermission {
10094
10070
  EditSettings = "EDIT_SETTINGS",
10095
10071
  EditSyncSettings = "EDIT_SYNC_SETTINGS",
10096
10072
  EditTags = "EDIT_TAGS",
10073
+ EditTokens = "EDIT_TOKENS",
10097
10074
  Export = "EXPORT",
10098
10075
  Import = "IMPORT",
10099
10076
  Read = "READ",
10100
10077
  ReadAssignments = "READ_ASSIGNMENTS",
10101
10078
  ReadSettings = "READ_SETTINGS",
10079
+ ReadTokens = "READ_TOKENS",
10102
10080
  RequestOnBehalf = "REQUEST_ON_BEHALF",
10103
10081
  ResetMfa = "RESET_MFA",
10104
10082
  SendReminders = "SEND_REMINDERS",
@@ -10129,8 +10107,8 @@ export declare enum RolePermissionTargetType {
10129
10107
  Connection = "CONNECTION",
10130
10108
  EventStream = "EVENT_STREAM",
10131
10109
  Group = "GROUP",
10110
+ Owner = "OWNER",
10132
10111
  PubsubPublishConnection = "PUBSUB_PUBLISH_CONNECTION",
10133
- PubsubPublishMessage = "PUBSUB_PUBLISH_MESSAGE",
10134
10112
  RequestTemplate = "REQUEST_TEMPLATE",
10135
10113
  Resource = "RESOURCE",
10136
10114
  User = "USER"
@@ -10198,12 +10176,15 @@ export type ScopedRolePermission = {
10198
10176
  targetType: RolePermissionTargetType;
10199
10177
  };
10200
10178
  export type SearchInput = {
10179
+ includeOnlyRequestable?: Scalars["Boolean"]["input"];
10180
+ maxResults?: InputMaybe<Scalars["Int"]["input"]>;
10201
10181
  query: Scalars["String"]["input"];
10202
10182
  };
10203
10183
  export type SearchOutput = SearchResult;
10204
10184
  export type SearchResult = {
10205
10185
  __typename?: "SearchResult";
10206
10186
  entries: Array<SearchResultEntry>;
10187
+ totalCount: Scalars["Int"]["output"];
10207
10188
  };
10208
10189
  export type SearchResultEntry = {
10209
10190
  __typename?: "SearchResultEntry";
@@ -10219,6 +10200,7 @@ export type SearchResultEntry = {
10219
10200
  resource?: Maybe<Resource>;
10220
10201
  resourceType: ResourceType;
10221
10202
  searchType: SearchType;
10203
+ similarityScore?: Maybe<Scalars["Float"]["output"]>;
10222
10204
  };
10223
10205
  export declare enum SearchType {
10224
10206
  Global = "GLOBAL",
@@ -10255,10 +10237,12 @@ export type ServiceNowMetadataInput = {
10255
10237
  };
10256
10238
  export declare enum ServiceType {
10257
10239
  ActiveDirectory = "ACTIVE_DIRECTORY",
10240
+ Anthropic = "ANTHROPIC",
10258
10241
  AwsIam = "AWS_IAM",
10259
10242
  AwsSso = "AWS_SSO",
10260
10243
  AzureAd = "AZURE_AD",
10261
10244
  Coupa = "COUPA",
10245
+ Cursor = "CURSOR",
10262
10246
  Custom = "CUSTOM",
10263
10247
  CustomConnector = "CUSTOM_CONNECTOR",
10264
10248
  Databricks = "DATABRICKS",
@@ -10279,6 +10263,8 @@ export declare enum ServiceType {
10279
10263
  Mysql = "MYSQL",
10280
10264
  OktaDirectory = "OKTA_DIRECTORY",
10281
10265
  Opal = "OPAL",
10266
+ OpenaiPlatform = "OPENAI_PLATFORM",
10267
+ OracleFusion = "ORACLE_FUSION",
10282
10268
  Pagerduty = "PAGERDUTY",
10283
10269
  Postgres = "POSTGRES",
10284
10270
  Salesforce = "SALESFORCE",
@@ -10289,6 +10275,31 @@ export declare enum ServiceType {
10289
10275
  Unknown = "UNKNOWN",
10290
10276
  Workday = "WORKDAY"
10291
10277
  }
10278
+ export type ServiceUserAutomation = {
10279
+ __typename?: "ServiceUserAutomation";
10280
+ configuration: ServiceUserAutomationConfiguration;
10281
+ strategy: ServiceUserAutomationStrategy;
10282
+ trigger: ServiceUserAutomationTrigger;
10283
+ userId: Scalars["UserId"]["output"];
10284
+ };
10285
+ export type ServiceUserAutomationConfiguration = ServiceUserWebhookAutomationConfiguration;
10286
+ export declare enum ServiceUserAutomationStrategy {
10287
+ Webhook = "WEBHOOK"
10288
+ }
10289
+ export declare enum ServiceUserAutomationTrigger {
10290
+ RequestCreatedForReviewer = "REQUEST_CREATED_FOR_REVIEWER"
10291
+ }
10292
+ export type ServiceUserConfiguration = {
10293
+ __typename?: "ServiceUserConfiguration";
10294
+ automations?: Maybe<Array<ServiceUserAutomation>>;
10295
+ id: Scalars["UserId"]["output"];
10296
+ owner: Owner;
10297
+ ownerId: Scalars["OwnerId"]["output"];
10298
+ };
10299
+ export type ServiceUserWebhookAutomationConfiguration = {
10300
+ __typename?: "ServiceUserWebhookAutomationConfiguration";
10301
+ endpoint: Scalars["String"]["output"];
10302
+ };
10292
10303
  export type Session = {
10293
10304
  __typename?: "Session";
10294
10305
  accessLevel?: Maybe<Scalars["AccessLevelName"]["output"]>;
@@ -10453,6 +10464,7 @@ export type StartAccessReviewInput = {
10453
10464
  filters?: InputMaybe<FiltersInput>;
10454
10465
  groupResourceVisibilityPolicy: AccessReviewGroupResourceVisibilityPolicy;
10455
10466
  includeGroupBindings: Scalars["Boolean"]["input"];
10467
+ instantlyActionReviews: Scalars["Boolean"]["input"];
10456
10468
  name: Scalars["String"]["input"];
10457
10469
  reminderIncludeManager: Scalars["Boolean"]["input"];
10458
10470
  reminderSchedule: Array<Scalars["Int"]["input"]>;
@@ -10502,11 +10514,13 @@ export type StartSyncResult = {
10502
10514
  };
10503
10515
  export type StopAccessReviewInput = {
10504
10516
  id: Scalars["AccessReviewId"]["input"];
10517
+ revokeUnreviewed?: InputMaybe<Scalars["Boolean"]["input"]>;
10505
10518
  };
10506
10519
  export type StopAccessReviewOutput = AccessReviewAlreadyStoppedError | AccessReviewNotFoundError | StopAccessReviewResult;
10507
10520
  export type StopAccessReviewResult = {
10508
10521
  __typename?: "StopAccessReviewResult";
10509
10522
  accessReview: AccessReview;
10523
+ revokedCount?: Maybe<Scalars["Int"]["output"]>;
10510
10524
  };
10511
10525
  export type StopImpersonationOutput = StopImpersonationResult;
10512
10526
  export type StopImpersonationResult = {
@@ -10933,8 +10947,10 @@ export type ThirdPartyIntegrationInput = {
10933
10947
  };
10934
10948
  export type ThirdPartyIntegrationMetadata = ThirdPartyIntegrationGitHubMetadata | ThirdPartyIntegrationSlackMetadata;
10935
10949
  export type ThirdPartyIntegrationMetadataInput = {
10950
+ freshservice?: InputMaybe<FreshServiceMetadataInput>;
10936
10951
  googlechat?: InputMaybe<GoogleChatMetadataInput>;
10937
10952
  jira?: InputMaybe<JiraMetadataInput>;
10953
+ notion?: InputMaybe<NotionMetadataInput>;
10938
10954
  servicenow?: InputMaybe<ServiceNowMetadataInput>;
10939
10955
  };
10940
10956
  export type ThirdPartyIntegrationNotFoundError = Error & {
@@ -10968,6 +10984,7 @@ export type ThirdPartyIntegrationsResult = {
10968
10984
  };
10969
10985
  export declare enum ThirdPartyProvider {
10970
10986
  Auth0 = "AUTH0",
10987
+ FreshService = "FRESH_SERVICE",
10971
10988
  GitHub = "GIT_HUB",
10972
10989
  GitHubConnection = "GIT_HUB_CONNECTION",
10973
10990
  GitHubRegistration = "GIT_HUB_REGISTRATION",
@@ -10976,6 +10993,7 @@ export declare enum ThirdPartyProvider {
10976
10993
  GoogleChat = "GOOGLE_CHAT",
10977
10994
  Jira = "JIRA",
10978
10995
  Linear = "LINEAR",
10996
+ Notion = "NOTION",
10979
10997
  Opsgenie = "OPSGENIE",
10980
10998
  PagerDuty = "PAGER_DUTY",
10981
10999
  ServiceNow = "SERVICE_NOW",
@@ -11284,20 +11302,6 @@ export type UpdateGroupBindingsResult = {
11284
11302
  __typename?: "UpdateGroupBindingsResult";
11285
11303
  groupBindings: Array<GroupBinding>;
11286
11304
  };
11287
- export type UpdateGroupGroupInput = {
11288
- durationInMinutes?: InputMaybe<NullableInt>;
11289
- groupGroupId: Scalars["GroupGroupId"]["input"];
11290
- };
11291
- export type UpdateGroupGroupsInput = {
11292
- groupGroups: Array<UpdateGroupGroupInput>;
11293
- source?: InputMaybe<UiSource>;
11294
- };
11295
- export type UpdateGroupGroupsOutput = GroupNestingNotAllowedError | GroupNotFoundError | UpdateGroupGroupsResult | UserFacingError;
11296
- export type UpdateGroupGroupsResult = {
11297
- __typename?: "UpdateGroupGroupsResult";
11298
- success: Scalars["Boolean"]["output"];
11299
- taskIds: Array<Scalars["PushTaskId"]["output"]>;
11300
- };
11301
11305
  export type UpdateGroupInput = {
11302
11306
  commonMetadata?: InputMaybe<CommonMetadataInput>;
11303
11307
  description?: InputMaybe<Scalars["String"]["input"]>;
@@ -11413,6 +11417,7 @@ export type UpdateOrganizationSettingsInput = {
11413
11417
  auditTicketProvider?: InputMaybe<NullableTicketProvider>;
11414
11418
  authSessionExpirationInMinutes?: InputMaybe<Scalars["Int"]["input"]>;
11415
11419
  createOrUpdateOidcProviderInput?: InputMaybe<CreateOrUpdateOidcProviderInput>;
11420
+ customBanner?: InputMaybe<Scalars["String"]["input"]>;
11416
11421
  customSearchLink?: InputMaybe<CustomSearchLinkInput>;
11417
11422
  customerSupportExpiresAt?: InputMaybe<Scalars["Time"]["input"]>;
11418
11423
  defaultNotifications?: InputMaybe<DefaultNotificationsInput>;
@@ -11423,6 +11428,7 @@ export type UpdateOrganizationSettingsInput = {
11423
11428
  maxResourceDurationInMinutes?: InputMaybe<NullableInt>;
11424
11429
  maxUsersExceededMessage?: InputMaybe<Scalars["String"]["input"]>;
11425
11430
  reasonMinWordCount?: InputMaybe<NullableInt>;
11431
+ requestDelegationExcludedGroupIDs?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
11426
11432
  roleCreationReviewerOwnerId?: InputMaybe<NullableOwnerId>;
11427
11433
  settings?: InputMaybe<Array<GeneralSettingType>>;
11428
11434
  syncErrorHandlerOwnerId?: InputMaybe<NullableOwnerId>;
@@ -11528,9 +11534,9 @@ export type UpdateRoleAssignmentResult = {
11528
11534
  };
11529
11535
  export type UpdateRoleAssignmentsInput = {
11530
11536
  roleAssignmentUpdates: Array<UpdateRoleAssignmentInput>;
11531
- source?: InputMaybe<UiSource>;
11537
+ source: UiSource;
11532
11538
  };
11533
- export type UpdateRoleAssignmentsOutput = UpdateRoleAssignmentsResult | UserFacingError;
11539
+ export type UpdateRoleAssignmentsOutput = GroupNestingNotAllowedError | UpdateRoleAssignmentsResult | UserFacingError;
11534
11540
  export type UpdateRoleAssignmentsResult = {
11535
11541
  __typename?: "UpdateRoleAssignmentsResult";
11536
11542
  entries: Array<UpdateRoleAssignmentResult>;
@@ -11548,6 +11554,13 @@ export type UpdateSamlConnectionResult = {
11548
11554
  __typename?: "UpdateSamlConnectionResult";
11549
11555
  organizationSamlInfo: OrganizationSamlInfo;
11550
11556
  };
11557
+ export type UpdateServiceUserAutomationInput = {
11558
+ configuration?: InputMaybe<CreateServiceUserAutomationConfigurationInput>;
11559
+ credentials?: InputMaybe<CreateServiceUserAutomationCredentialsInput>;
11560
+ strategy?: InputMaybe<ServiceUserAutomationStrategy>;
11561
+ trigger: ServiceUserAutomationTrigger;
11562
+ userId: Scalars["UserId"]["input"];
11563
+ };
11551
11564
  export type UpdateUserInput = {
11552
11565
  id: Scalars["UserId"]["input"];
11553
11566
  managerId?: InputMaybe<NullableUserId>;
@@ -11569,6 +11582,7 @@ export type UpdateUserResult = {
11569
11582
  };
11570
11583
  export type UpdateUserSettingsInput = {
11571
11584
  allNotifications: Array<NotificationType>;
11585
+ userID?: InputMaybe<Scalars["UUID"]["input"]>;
11572
11586
  };
11573
11587
  export type UpdateUserSettingsOutput = UpdateUserSettingsResult | UserSettingsInvalidError | UserSettingsNotFoundError;
11574
11588
  export type UpdateUserSettingsResult = {
@@ -11608,6 +11622,7 @@ export type User = BaseEntity & DisplayableEntity & Node & Principal & RolePermi
11608
11622
  displayName: Scalars["String"]["output"];
11609
11623
  email: Scalars["String"]["output"];
11610
11624
  firstName: Scalars["String"]["output"];
11625
+ firstPartyTokens?: Maybe<Array<FirstPartyToken>>;
11611
11626
  /** @deprecated Use displayName instead */
11612
11627
  fullName: Scalars["String"]["output"];
11613
11628
  hrIdpStatus?: Maybe<HrIdpStatus>;
@@ -11630,7 +11645,9 @@ export type User = BaseEntity & DisplayableEntity & Node & Principal & RolePermi
11630
11645
  position: Scalars["String"]["output"];
11631
11646
  requestReviewerDelegationsGiven: Array<RequestReviewerDelegation>;
11632
11647
  requestReviewerDelegationsReceived: Array<RequestReviewerDelegation>;
11648
+ reviewerStages?: Maybe<Array<ReviewerStage>>;
11633
11649
  secondaryEmails: Array<Scalars["String"]["output"]>;
11650
+ serviceUserConfiguration?: Maybe<ServiceUserConfiguration>;
11634
11651
  teamAttr?: Maybe<Scalars["String"]["output"]>;
11635
11652
  updatedAt: Scalars["Time"]["output"];
11636
11653
  /** @deprecated Use paginatedUserGroups instead */
@@ -11718,12 +11735,6 @@ export type UserGroupAccess = {
11718
11735
  groupUser?: Maybe<GroupUser>;
11719
11736
  userId: Scalars["UserId"]["output"];
11720
11737
  };
11721
- export type UserGroupEdge = {
11722
- __typename?: "UserGroupEdge";
11723
- groupId: Scalars["GroupId"]["output"];
11724
- metadata?: Maybe<EdgeMetadata>;
11725
- userId: Scalars["UserId"]["output"];
11726
- };
11727
11738
  export type UserIdentities = {
11728
11739
  __typename?: "UserIdentities";
11729
11740
  gitHubUsername?: Maybe<UserIdentity>;
@@ -11743,6 +11754,10 @@ export type UserInput = {
11743
11754
  id: Scalars["UserId"]["input"];
11744
11755
  includeDeleted?: InputMaybe<Scalars["Boolean"]["input"]>;
11745
11756
  };
11757
+ export type UserIsAssignedToReviewerStagesError = Error & {
11758
+ __typename?: "UserIsAssignedToReviewerStagesError";
11759
+ message: Scalars["String"]["output"];
11760
+ };
11746
11761
  export type UserNotFoundError = Error & {
11747
11762
  __typename?: "UserNotFoundError";
11748
11763
  email?: Maybe<Scalars["String"]["output"]>;
@@ -11760,13 +11775,6 @@ export type UserResourceAccess = {
11760
11775
  resourceUsers: Array<ResourceUser>;
11761
11776
  userId: Scalars["UserId"]["output"];
11762
11777
  };
11763
- export type UserResourceEdge = {
11764
- __typename?: "UserResourceEdge";
11765
- accessLevel: ResourceAccessLevel;
11766
- metadata?: Maybe<EdgeMetadata>;
11767
- resourceId: Scalars["ResourceId"]["output"];
11768
- userId: Scalars["UserId"]["output"];
11769
- };
11770
11778
  export type UserResult = {
11771
11779
  __typename?: "UserResult";
11772
11780
  user: User;
@@ -11834,7 +11842,10 @@ export type UsersFilterInput = {
11834
11842
  export type UsersInput = {
11835
11843
  cursor?: InputMaybe<Scalars["String"]["input"]>;
11836
11844
  idpStatusFilter?: InputMaybe<IdpStatusFilter>;
11845
+ includeDeleted?: InputMaybe<Scalars["Boolean"]["input"]>;
11837
11846
  includeOnlyManagers?: InputMaybe<Scalars["Boolean"]["input"]>;
11847
+ includeOnlyServiceUsers?: InputMaybe<Scalars["Boolean"]["input"]>;
11848
+ includeServiceUsers?: InputMaybe<Scalars["Boolean"]["input"]>;
11838
11849
  includeSystemUser?: InputMaybe<Scalars["Boolean"]["input"]>;
11839
11850
  managerFilter?: InputMaybe<ManagerFilter>;
11840
11851
  maxNumEntries?: InputMaybe<Scalars["Int"]["input"]>;
@@ -11967,34 +11978,6 @@ export declare enum Visibility {
11967
11978
  Global = "GLOBAL",
11968
11979
  Team = "TEAM"
11969
11980
  }
11970
- export type VisualizationFilter = {
11971
- hideGroups?: InputMaybe<Scalars["Boolean"]["input"]>;
11972
- includeUnmanagedItems?: InputMaybe<Scalars["Boolean"]["input"]>;
11973
- selection: VisualizationFilterSelection;
11974
- showUsage?: InputMaybe<Scalars["Boolean"]["input"]>;
11975
- };
11976
- export type VisualizationFilterSelection = {
11977
- groupIds?: InputMaybe<Array<Scalars["GroupId"]["input"]>>;
11978
- multiGroupSelections?: InputMaybe<Array<MultiGroupSelection>>;
11979
- multiResourceSelections?: InputMaybe<Array<MultiResourceSelection>>;
11980
- resourceIds?: InputMaybe<Array<Scalars["ResourceId"]["input"]>>;
11981
- userIds?: InputMaybe<Array<Scalars["UserId"]["input"]>>;
11982
- };
11983
- export type VisualizationOutput = UserFacingError | VisualizationResult | VisualizationTimeoutError;
11984
- export type VisualizationResult = {
11985
- __typename?: "VisualizationResult";
11986
- accessLevels: Array<AccessLevelNode>;
11987
- groupResourceEdges: Array<GroupResourceEdge>;
11988
- groups: Array<Group>;
11989
- resources: Array<Resource>;
11990
- userGroupEdges: Array<UserGroupEdge>;
11991
- userResourceEdges: Array<UserResourceEdge>;
11992
- users: Array<User>;
11993
- };
11994
- export type VisualizationTimeoutError = Error & {
11995
- __typename?: "VisualizationTimeoutError";
11996
- message: Scalars["String"]["output"];
11997
- };
11998
11981
  export type WebhookApiKeyPubsubPublishConnectionCredentialsInput = {
11999
11982
  credentials: Array<WebhookPubsubPublishConnectionApiKeyCredentialsInput>;
12000
11983
  };
@@ -12148,6 +12131,20 @@ export type CheckAuthSessionQueryQuery = {
12148
12131
  };
12149
12132
  };
12150
12133
  };
12134
+ export type GetLastMfaAtQueryVariables = Exact<{
12135
+ [key: string]: never;
12136
+ }>;
12137
+ export type GetLastMfaAtQuery = {
12138
+ __typename?: "Query";
12139
+ lastMfaAt?: string | null;
12140
+ };
12141
+ export type HasValidOidcIdTokenQueryVariables = Exact<{
12142
+ oidcProviderType: OidcProviderType;
12143
+ }>;
12144
+ export type HasValidOidcIdTokenQuery = {
12145
+ __typename?: "Query";
12146
+ hasValidOidcToken: boolean;
12147
+ };
12151
12148
  export type CreateRequestMutationVariables = Exact<{
12152
12149
  requestedResources: Array<RequestedResourceInput> | RequestedResourceInput;
12153
12150
  requestedGroups: Array<RequestedGroupInput> | RequestedGroupInput;
@@ -12591,6 +12588,8 @@ export declare const GroupFieldsFragmentDoc: DocumentNode<GroupFieldsFragment, u
12591
12588
  export declare const RequestFieldsFragmentDoc: DocumentNode<RequestFieldsFragment, unknown>;
12592
12589
  export declare const GetGroupDocument: DocumentNode<GetGroupQuery, GetGroupQueryVariables>;
12593
12590
  export declare const CheckAuthSessionQueryDocument: DocumentNode<CheckAuthSessionQueryQuery, CheckAuthSessionQueryQueryVariables>;
12591
+ export declare const GetLastMfaAtDocument: DocumentNode<GetLastMfaAtQuery, GetLastMfaAtQueryVariables>;
12592
+ export declare const HasValidOidcIdTokenDocument: DocumentNode<HasValidOidcIdTokenQuery, HasValidOidcIdTokenQueryVariables>;
12594
12593
  export declare const CreateRequestDocument: DocumentNode<CreateRequestMutation, CreateRequestMutationVariables>;
12595
12594
  export declare const GetRequestableAppsQueryDocument: DocumentNode<GetRequestableAppsQueryQuery, GetRequestableAppsQueryQueryVariables>;
12596
12595
  export declare const PaginatedEntityDropdownDocument: DocumentNode<PaginatedEntityDropdownQuery, PaginatedEntityDropdownQueryVariables>;