quantum-component-library 1.4.68 → 1.4.70

package/dist/generated/graphql.d.ts

@@ -60,6 +60,7 @@ export type Scalars = {
     };
 };
 export type AcceptInvitationInput = {
+    dateOfBirth?: InputMaybe<Scalars['Date']['input']>;
     firstName: Scalars['String']['input'];
     lastName: Scalars['String']['input'];
     password: Scalars['String']['input'];
@@ -68,9 +69,25 @@ export type AcceptInvitationInput = {
 };
 export type AcceptInvitationResult = {
     __typename?: 'AcceptInvitationResult';
-    session: AuthSession;
+    /**
+     * AC-5.2.9 — null for an admin invitation: acceptance carries no session, no
+     * cookie, no token, and nothing in the response that can call the API as the
+     * new account. The invitee is sent to sign in and proves the password reached
+     * the system as they typed it. Every other invitation type still gets one.
+     */
+    session?: Maybe<AuthSession>;
     user: CurrentUser;
 };
+/**
+ * The same three states, for any account rather than only a Quantum staff one.
+ * Declared separately from AdminLifecycle so the admin screen's contract is not
+ * widened by a change made for the clinic staff list.
+ */
+export declare enum AccountLifecycle {
+    Active = "ACTIVE",
+    Removed = "REMOVED",
+    Suspended = "SUSPENDED"
+}
 export type Action = {
     __typename?: 'Action';
     activityKind: ActionActivityKind;
@@ -123,6 +140,36 @@ export declare enum ActivityType {
     IsolatedAction = "IsolatedAction",
     IsolatedMovement = "IsolatedMovement"
 }
+export type AdminHolder = {
+    __typename?: 'AdminHolder';
+    createdAt: Scalars['String']['output'];
+    /** MOB-554 — when a suspension began, so the screen can say for how long. */
+    deletedAt?: Maybe<Scalars['String']['output']>;
+    email: Scalars['String']['output'];
+    firstName?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    lastName?: Maybe<Scalars['String']['output']>;
+    lifecycle: AdminLifecycle;
+    /**
+     * US-4.7 — the profile carrying this person's name, which is what
+     * updateUserProfile acts on. Nullable: an account can exist before a profile
+     * does, and the screen has to say so rather than send a null id to the server.
+     */
+    profileId?: Maybe<Scalars['ID']['output']>;
+    username: Scalars['String']['output'];
+};
+/**
+ * US-5.1 — one Quantum staff account and where it sits in its lifecycle.
+ *
+ * ACTIVE, SUSPENDED and REMOVED are distinguishable because they mean different
+ * things: a suspended person can come back, a removed one cannot, and the record
+ * of who held Quantum-level access is never lost either way.
+ */
+export declare enum AdminLifecycle {
+    Active = "ACTIVE",
+    Removed = "REMOVED",
+    Suspended = "SUSPENDED"
+}
 export type AnalysisAction = {
     __typename?: 'AnalysisAction';
     id: Scalars['ID']['output'];
@@ -194,6 +241,36 @@ export type AnalysisSubClassification = {
     id: Scalars['ID']['output'];
     name: Scalars['String']['output'];
 };
+export type AssignCatalog = {
+    __typename?: 'AssignCatalog';
+    activities: Array<AssignCatalogActivity>;
+    programs: Array<AssignCatalogProgram>;
+};
+export type AssignCatalogActivity = {
+    __typename?: 'AssignCatalogActivity';
+    id: Scalars['ID']['output'];
+    name: Scalars['String']['output'];
+};
+export type AssignCatalogProgram = {
+    __typename?: 'AssignCatalogProgram';
+    activityIds: Array<Scalars['ID']['output']>;
+    id: Scalars['ID']['output'];
+    name: Scalars['String']['output'];
+};
+/** How one activity in a client's plan got there (AC-14.2.4): picked individually, supplied by an assigned program, or both. */
+export type AssignedActionProvenance = {
+    __typename?: 'AssignedActionProvenance';
+    actionId: Scalars['ID']['output'];
+    /** The practitioner ticked this activity itself (a direct assignment). */
+    pickedIndividually: Scalars['Boolean']['output'];
+    /** The assigned programs that supply it. Empty when it is individually picked only. */
+    suppliedByModuleIds: Array<Scalars['ID']['output']>;
+};
+export type AssignedActionReport = {
+    __typename?: 'AssignedActionReport';
+    actionId: Scalars['ID']['output'];
+    reportId: Scalars['ID']['output'];
+};
 export type AssignedReport = {
     __typename?: 'AssignedReport';
     autoGenerate: Scalars['Boolean']['output'];
@@ -205,15 +282,93 @@ export type AssignedReport = {
     testReport?: Maybe<TestReportUnion>;
     testReportId?: Maybe<Scalars['ID']['output']>;
 };
+/**
+ * One staged change, as the practitioner made it. A change LIST rather than a
+ * desired full set, so a save touches only the items this practitioner staged
+ * and a colleague's concurrent change is never reverted (AC-4.4.24).
+ */
+export type AssignmentChangeInput = {
+    /** true = in the client's plan afterwards, false = not. */
+    assigned: Scalars['Boolean']['input'];
+    itemId: Scalars['ID']['input'];
+    kind: AssignmentItemKind;
+    /** ACTION + assigned:true only. null detaches; omitted leaves it untouched. */
+    reportId?: InputMaybe<Scalars['ID']['input']>;
+};
+/** Whether this item ended in the state that was chosen (AC-4.6.1). */
+export type AssignmentChangeResult = {
+    __typename?: 'AssignmentChangeResult';
+    applied: Scalars['Boolean']['output'];
+    itemId: Scalars['ID']['output'];
+    kind: AssignmentItemKind;
+    /** Machine-readable code when applied is false. Never a client-facing string. */
+    reason?: Maybe<Scalars['String']['output']>;
+};
+export declare enum AssignmentItemKind {
+    Action = "ACTION",
+    Module = "MODULE"
+}
+export type AttachTestFilesInput = {
+    dataUploadId?: InputMaybe<Scalars['ID']['input']>;
+    isHorizontalFlip?: InputMaybe<Scalars['Boolean']['input']>;
+    metaData?: InputMaybe<Scalars['String']['input']>;
+    requestPose?: InputMaybe<Scalars['Boolean']['input']>;
+    trimEndMs?: InputMaybe<Scalars['Int']['input']>;
+    trimStartMs?: InputMaybe<Scalars['Int']['input']>;
+    videoUploadId?: InputMaybe<Scalars['ID']['input']>;
+};
+export type AuditLogEntry = {
+    __typename?: 'AuditLogEntry';
+    action: Scalars['String']['output'];
+    actorEmail?: Maybe<Scalars['String']['output']>;
+    actorUserId?: Maybe<Scalars['ID']['output']>;
+    createdAt: Scalars['String']['output'];
+    groupId?: Maybe<Scalars['ID']['output']>;
+    id: Scalars['ID']['output'];
+    metadata?: Maybe<Scalars['String']['output']>;
+    profileId?: Maybe<Scalars['ID']['output']>;
+    targetUserId?: Maybe<Scalars['ID']['output']>;
+};
+export type AuditLogFilter = {
+    action?: InputMaybe<Scalars['String']['input']>;
+    actorUserId?: InputMaybe<Scalars['ID']['input']>;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    offset?: InputMaybe<Scalars['Int']['input']>;
+    profileId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type AuthSession = {
     __typename?: 'AuthSession';
     accessToken: Scalars['String']['output'];
+    /** Seconds until accessToken expires — refresh before it does, without decoding the JWT. */
+    expiresIn: Scalars['Int']['output'];
     refreshToken?: Maybe<Scalars['String']['output']>;
 };
 export type ChangePasswordInput = {
-    newPassword: Scalars['String']['input'];
+    /**
+     * Required when changing YOUR OWN password (AC-6.2.1). The mutation asked for
+     * no current password at all, so whoever held an open session could change it —
+     * holding a session is not by itself enough. Ignored when an authorised
+     * operator resets somebody else's, which is a different act governed by rows
+     * B.9 and C.7.
+     */
+    currentPassword?: InputMaybe<Scalars['String']['input']>;
+    /**
+     * Required on every path that SETS a password: changing your own, and an
+     * operator resetting a colleague inside their own organisation.
+     *
+     * Omitted on the path that sends a LINK — a client, or anybody outside the
+     * caller's organisation (AC-4.9.2, AC-4.9.5). Nullable for exactly that reason:
+     * the Console must not offer a field whose value is discarded (AC-4.9.9), and a
+     * required field forced it to send one. The server refuses an omission on a path
+     * that needs it rather than inventing a password.
+     */
+    newPassword?: InputMaybe<Scalars['String']['input']>;
     userId: Scalars['ID']['input'];
 };
+export type ChangePasswordResult = {
+    __typename?: 'ChangePasswordResult';
+    outcome: PasswordChangeOutcome;
+};
 export type ComparativeMetric = {
     __typename?: 'ComparativeMetric';
     labelA: Scalars['String']['output'];
@@ -247,6 +402,11 @@ export type CreateAccountInput = {
     groupId?: InputMaybe<Scalars['ID']['input']>;
     lastName: Scalars['String']['input'];
     password: Scalars['String']['input'];
+    /**
+     * Required. This path never called assignRole at all, so every account it
+     * created held no role (AC-1.3.2).
+     */
+    role: InvitationRole;
     username: Scalars['String']['input'];
 };
 export type CreateAccountResult = {
@@ -288,8 +448,20 @@ export type CreateInvitationInput = {
     email: Scalars['String']['input'];
     firstName?: InputMaybe<Scalars['String']['input']>;
     groupId: Scalars['ID']['input'];
+    /**
+     * Superseded by `role` and retained only so existing callers still parse. When
+     * `role` is given this is ignored; the pair disagreeing is refused.
+     */
     isAdmin?: InputMaybe<Scalars['Boolean']['input']>;
     lastName?: InputMaybe<Scalars['String']['input']>;
+    /** Required. The one role this invitation grants (AC-1.3.1). */
+    role: InvitationRole;
+    /**
+     * Required. It carried a server-side default of ADMIN_PORTAL, which minted the
+     * highest privilege in the system for any request that simply omitted it
+     * (AC-1.3.8).
+     */
+    type: InvitationType;
 };
 export type CreateKeypointGroupInput = {
     activity?: InputMaybe<Scalars['String']['input']>;
@@ -343,13 +515,21 @@ export type CreateTestInput = {
     actionId?: InputMaybe<Scalars['ID']['input']>;
     assignedReportIds?: InputMaybe<Array<Scalars['ID']['input']>>;
     comment?: InputMaybe<Scalars['String']['input']>;
+    dataUploadId?: InputMaybe<Scalars['ID']['input']>;
     endedAt?: InputMaybe<Scalars['Date']['input']>;
     info: CreateTestInfoInput;
+    isHorizontalFlip?: InputMaybe<Scalars['Boolean']['input']>;
     kind: Scalars['ID']['input'];
+    metaData?: InputMaybe<Scalars['String']['input']>;
     name: Scalars['String']['input'];
+    requestPose?: InputMaybe<Scalars['Boolean']['input']>;
+    routineId?: InputMaybe<Scalars['ID']['input']>;
     sessionId: Scalars['ID']['input'];
     startedAt: Scalars['Date']['input'];
     timezone?: InputMaybe<Scalars['String']['input']>;
+    trimEndMs?: InputMaybe<Scalars['Int']['input']>;
+    trimStartMs?: InputMaybe<Scalars['Int']['input']>;
+    videoUploadId?: InputMaybe<Scalars['ID']['input']>;
 };
 export type CreateTrialInput = {
     endFrame: Scalars['Int']['input'];
@@ -389,6 +569,25 @@ export type CurrentUser = {
     updatedAt: Scalars['String']['output'];
     username: Scalars['String']['output'];
 };
+/**
+ * Display-only labels for the session list. Never used in an authorization
+ * decision, so treat them as untrusted client input when rendering.
+ */
+export type DeviceInput = {
+    name?: InputMaybe<Scalars['String']['input']>;
+    platform?: InputMaybe<Scalars['String']['input']>;
+};
+/** One signed-in device. */
+export type DeviceSession = {
+    __typename?: 'DeviceSession';
+    createdAt: Scalars['String']['output'];
+    /** True for the session making this request. */
+    current: Scalars['Boolean']['output'];
+    deviceName?: Maybe<Scalars['String']['output']>;
+    devicePlatform?: Maybe<Scalars['String']['output']>;
+    id: Scalars['ID']['output'];
+    lastUsedAt?: Maybe<Scalars['String']['output']>;
+};
 export type DiscreteMetric = {
     __typename?: 'DiscreteMetric';
     unit: Scalars['Unit']['output'];
@@ -411,15 +610,37 @@ export type Group = {
     id: Scalars['ID']['output'];
     imageUrl?: Maybe<Scalars['String']['output']>;
     name: Scalars['String']['output'];
+    /**
+     * One page of the organisation's people, filtered by role and searchable by
+     * name, username or email. The split is decided ONCE, on the server.
+     */
+    people: PersonPage;
     profiles: Array<UserProfile>;
     updatedAt: Scalars['String']['output'];
+    /**
+     * Superseded by `people`. Unfiltered and unpaged; kept so existing callers
+     * still work while they move over.
+     */
     users: Array<User>;
 };
+export type GroupPeopleArgs = {
+    cursor?: InputMaybe<Scalars['String']['input']>;
+    includeArchived?: InputMaybe<Scalars['Boolean']['input']>;
+    kind: PersonKind;
+    limit?: InputMaybe<Scalars['Int']['input']>;
+    search?: InputMaybe<Scalars['String']['input']>;
+};
 export type GroupInfo = {
     __typename?: 'GroupInfo';
     id: Scalars['ID']['output'];
     name: Scalars['String']['output'];
 };
+export type IdentityVerificationResult = {
+    __typename?: 'IdentityVerificationResult';
+    errorMessage?: Maybe<Scalars['String']['output']>;
+    locked: Scalars['Boolean']['output'];
+    verified: Scalars['Boolean']['output'];
+};
 export type ImageMetric = {
     __typename?: 'ImageMetric';
     path: Scalars['String']['output'];
@@ -436,6 +657,9 @@ export type Invitation = {
     invitedBy?: Maybe<InvitationInviter>;
     isAdmin: Scalars['Boolean']['output'];
     lastName?: Maybe<Scalars['String']['output']>;
+    requiresIdentityVerification: Scalars['Boolean']['output'];
+    /** The role this invitation grants. Null only on rows predating US-1.3. */
+    role?: Maybe<InvitationRole>;
     status: InvitationStatus;
     type: InvitationType;
 };
@@ -445,6 +669,22 @@ export type InvitationInviter = {
     id: Scalars['ID']['output'];
     username: Scalars['String']['output'];
 };
+/**
+ * The role an invitation grants. Every invitation carries exactly one, chosen at
+ * creation: an account that comes into existence holding no role can sign in and
+ * do nothing, and nobody can diagnose that from the outside (US-1.3).
+ *
+ * `admin` and `mobile_client` are absent from the Console's selector but present
+ * here, because the server decides both — an admin invitation is US-5.1's, and a
+ * client invitation is the customer web app's.
+ */
+export declare enum InvitationRole {
+    AccountAdmin = "account_admin",
+    AccountManager = "account_manager",
+    AccountUser = "account_user",
+    Admin = "admin",
+    MobileClient = "mobile_client"
+}
 export declare enum InvitationStatus {
     Accepted = "ACCEPTED",
     Cancelled = "CANCELLED",
@@ -458,6 +698,12 @@ export declare enum InvitationType {
 }
 export type InvitationValidation = {
     __typename?: 'InvitationValidation';
+    /**
+     * MOB-552 — why the token is not valid: INVITATION_NOT_FOUND, INVITATION_EXPIRED,
+     * INVITATION_ALREADY_USED or INVITATION_CANCELLED. errorMessage is left as the
+     * text existing clients display.
+     */
+    errorCode?: Maybe<Scalars['String']['output']>;
     errorMessage?: Maybe<Scalars['String']['output']>;
     invitation?: Maybe<Invitation>;
     valid: Scalars['Boolean']['output'];
@@ -549,6 +795,12 @@ export type MetricInput = {
     poiMetrics?: InputMaybe<Array<PoiMetricInput>>;
     table?: InputMaybe<TableMetricInput>;
 };
+export declare enum MobileAccessStatus {
+    Accepted = "ACCEPTED",
+    Expired = "EXPIRED",
+    None = "NONE",
+    Pending = "PENDING"
+}
 export type ModuleAction = {
     __typename?: 'ModuleAction';
     action: Action;
@@ -589,10 +841,57 @@ export type Mutation = {
     addActionToModule: ActionModule;
     archiveUser: Scalars['Boolean']['output'];
     assignActionToProfile: Scalars['Boolean']['output'];
+    assignModuleToProfile: Scalars['Boolean']['output'];
     assignRoutineToProfile: Scalars['Boolean']['output'];
     assignTestToRoutine: Scalars['Boolean']['output'];
+    attachReportToAssignedAction: Scalars['Boolean']['output'];
+    attachTestFiles: TestFile;
+    /**
+     * AC-4.6.12 — stop a pending change of email address, from the single-use link
+     * sent to the address currently on the account. Public for the same reason
+     * confirmation is, and a stronger one: the person objecting may be objecting
+     * because somebody else holds a session on their account.
+     *
+     * It can only ever STOP a change. There is no address it can set.
+     */
+    cancelEmailChange: Scalars['Boolean']['output'];
     cancelInvitation: Scalars['Boolean']['output'];
-    changePassword: Scalars['Boolean']['output'];
+    /**
+     * AC-4.7.3 — cancel a pending change from the Console, which kills the
+     * verification link with it. Omit `userId` to cancel your own.
+     *
+     * The pair to the link in the warning email: the same discard, reached by
+     * somebody signed in with authority over the account rather than by somebody
+     * holding a token. Succeeds when nothing is pending — no pending change is the
+     * outcome the caller wanted.
+     */
+    cancelPendingEmailChange: Scalars['Boolean']['output'];
+    /**
+     * Change a password: your own (row D.3, and then `currentPassword` is required)
+     * or somebody else's (rows B.9 and C.7). The result says WHICH of the two
+     * outcomes happened rather than only that something did — see
+     * PasswordChangeOutcome.
+     */
+    changePassword: ChangePasswordResult;
+    /**
+     * US-4.4 — move a person between the three clinic roles.
+     *
+     * A role could only be assigned at invitation time; there was no way to change
+     * it afterwards from any interface, so a promotion meant deleting the person and
+     * inviting them again.
+     *
+     * Granting is always a REPLACEMENT, because an account holds exactly one role:
+     * there is no state in which it holds two, and none in which it holds none.
+     * `account_user` is the floor, so no clinic role change can produce a roleless
+     * account.
+     */
+    changeRole: User;
+    /**
+     * Confirm a change of email address. Public: the person opening the link is
+     * proving they hold the new mailbox, which is the whole point, and they may not
+     * be signed in when they do it.
+     */
+    confirmEmailChange: Scalars['Boolean']['output'];
     convertActionToQuantumOwned: Action;
     copyActions: Scalars['Boolean']['output'];
     copyModules: Scalars['Boolean']['output'];
@@ -630,18 +929,75 @@ export type Mutation = {
     deleteTrial: Scalars['Boolean']['output'];
     deleteTrialParameter: Scalars['Boolean']['output'];
     deleteUserProfile: Scalars['Boolean']['output'];
+    detachReportFromAssignedAction: Scalars['Boolean']['output'];
     duplicateAction: Scalars['Boolean']['output'];
     inviteMobileAppUser: Scalars['Boolean']['output'];
     inviteTeamMember: Invitation;
     login?: Maybe<LoginResult>;
+    /**
+     * Closes one session. Pass refreshToken to log out with an expired access
+     * token; otherwise the bearer token identifies the session. Always succeeds —
+     * a session that is already closed is the outcome the caller wanted.
+     */
+    logout: Scalars['Boolean']['output'];
+    /** Closes every session except the one making this request. */
+    logoutOtherDevices: Scalars['Boolean']['output'];
+    mobileInviteLink: Scalars['String']['output'];
     refresh: LoginResult;
+    removeAccountAdminRole: Scalars['Boolean']['output'];
     removeActionFromModule: ActionModule;
+    /**
+     * US-5.1 — REMOVE a Quantum staff account. NOT reversible: the same effects as
+     * suspending, and the role comes off so the person can never be restored.
+     * Bringing them back means a fresh invitation.
+     *
+     * Until now there was only suspend, used for both — so a departed employee
+     * still held an account with the highest privilege in the system, one click
+     * away from being live again, with nothing marking that they should not return.
+     */
+    removeAdmin: Scalars['Boolean']['output'];
     removeMobileAppAccess: Scalars['Boolean']['output'];
+    /**
+     * US-2.3 / row B.3 — REMOVE a staff member from a clinic. NOT reversible: the
+     * same effects as suspending (sessions end, the account is hidden), and the
+     * clinic role comes off so the person can never be restored.
+     *
+     * The pair to `archiveUser`, which suspends and is reversible. Removal is what
+     * a clinic needs when somebody has left rather than gone on leave — and until
+     * now only suspend existed, used for both.
+     *
+     * The row stays on the clinic's staff list, marked removed, with no action
+     * offered: with no audit-log viewer in this delivery, that row is the only
+     * thing that can answer who used to work here while the clinical records they
+     * created remain (AC-2.3.12).
+     */
+    removeStaff: Scalars['Boolean']['output'];
     replaceTrialParameters: Array<TrialParameter>;
+    /**
+     * US-4.6 — request a change of email address. Nothing on the account changes:
+     * a verification link goes to the NEW address, and the old one keeps working
+     * until it is confirmed. Omit `userId` to change your own (row D.4).
+     */
+    requestEmailChange: Scalars['Boolean']['output'];
     requestPoseProcessing: Scalars['Boolean']['output'];
     resendInvitation: Invitation;
+    resetMobileClientPassword: Scalars['Boolean']['output'];
+    resetPasswordWithToken: Scalars['Boolean']['output'];
+    /** Reverse a suspension. */
+    restoreAdmin: Scalars['Boolean']['output'];
+    /** Closes another of the caller's own devices. False if it was already gone. */
+    revokeSession: Scalars['Boolean']['output'];
+    revokeUserAccess: Scalars['Boolean']['output'];
+    setProfileAssignments: SetProfileAssignmentsResult;
+    /**
+     * US-5.1 — SUSPEND a Quantum staff account. Reversible: sessions end and the
+     * account is hidden, the role stays attached, and the person can come back.
+     * For somebody on leave, under investigation, or with a lost laptop.
+     */
+    suspendAdmin: Scalars['Boolean']['output'];
     unarchiveUserProfile: UserProfile;
     unassignActionFromProfile: Scalars['Boolean']['output'];
+    unassignModuleFromProfile: Scalars['Boolean']['output'];
     unassignRoutineFromProfile: Scalars['Boolean']['output'];
     updateAction: Action;
     updateGroup: Group;
@@ -653,8 +1009,10 @@ export type Mutation = {
     updateTrialData: Trial;
     updateUserProfile: UserProfile;
     updateVideoDataOffset: TestFile;
+    verifyInvitationIdentity: IdentityVerificationResult;
 };
 export type MutationAcceptInvitationArgs = {
+    device?: InputMaybe<DeviceInput>;
     input: AcceptInvitationInput;
 };
 export type MutationAddActionToModuleArgs = {
@@ -669,6 +1027,10 @@ export type MutationAssignActionToProfileArgs = {
     actionId: Scalars['ID']['input'];
     profileId: Scalars['ID']['input'];
 };
+export type MutationAssignModuleToProfileArgs = {
+    moduleId: Scalars['ID']['input'];
+    profileId: Scalars['ID']['input'];
+};
 export type MutationAssignRoutineToProfileArgs = {
     profileId: Scalars['ID']['input'];
     routineId: Scalars['ID']['input'];
@@ -677,12 +1039,34 @@ export type MutationAssignTestToRoutineArgs = {
     routineId?: InputMaybe<Scalars['ID']['input']>;
     testId: Scalars['ID']['input'];
 };
+export type MutationAttachReportToAssignedActionArgs = {
+    actionId: Scalars['ID']['input'];
+    profileId: Scalars['ID']['input'];
+    reportId: Scalars['ID']['input'];
+};
+export type MutationAttachTestFilesArgs = {
+    input: AttachTestFilesInput;
+    testId: Scalars['ID']['input'];
+};
+export type MutationCancelEmailChangeArgs = {
+    token: Scalars['String']['input'];
+};
 export type MutationCancelInvitationArgs = {
     invitationId: Scalars['ID']['input'];
 };
+export type MutationCancelPendingEmailChangeArgs = {
+    userId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type MutationChangePasswordArgs = {
     input: ChangePasswordInput;
 };
+export type MutationChangeRoleArgs = {
+    role: InvitationRole;
+    userId: Scalars['ID']['input'];
+};
+export type MutationConfirmEmailChangeArgs = {
+    token: Scalars['String']['input'];
+};
 export type MutationConvertActionToQuantumOwnedArgs = {
     id: Scalars['ID']['input'];
 };
@@ -807,6 +1191,10 @@ export type MutationDeleteTrialParameterArgs = {
 export type MutationDeleteUserProfileArgs = {
     id: Scalars['ID']['input'];
 };
+export type MutationDetachReportFromAssignedActionArgs = {
+    actionId: Scalars['ID']['input'];
+    profileId: Scalars['ID']['input'];
+};
 export type MutationDuplicateActionArgs = {
     id: Scalars['ID']['input'];
 };
@@ -818,28 +1206,70 @@ export type MutationInviteTeamMemberArgs = {
     input: CreateTeamInvitationInput;
 };
 export type MutationLoginArgs = {
+    device?: InputMaybe<DeviceInput>;
     input: LoginInput;
 };
+export type MutationLogoutArgs = {
+    refreshToken?: InputMaybe<Scalars['String']['input']>;
+};
+export type MutationMobileInviteLinkArgs = {
+    profileId: Scalars['ID']['input'];
+};
 export type MutationRefreshArgs = {
     refreshToken: Scalars['String']['input'];
 };
+export type MutationRemoveAccountAdminRoleArgs = {
+    userId: Scalars['ID']['input'];
+};
 export type MutationRemoveActionFromModuleArgs = {
     moduleActionId: Scalars['ID']['input'];
     moduleId: Scalars['ID']['input'];
 };
+export type MutationRemoveAdminArgs = {
+    userId: Scalars['ID']['input'];
+};
 export type MutationRemoveMobileAppAccessArgs = {
     profileId: Scalars['ID']['input'];
 };
+export type MutationRemoveStaffArgs = {
+    userId: Scalars['ID']['input'];
+};
 export type MutationReplaceTrialParametersArgs = {
     input: Array<ReplaceTrialParameterInput>;
     trialId: Scalars['ID']['input'];
 };
+export type MutationRequestEmailChangeArgs = {
+    newEmail: Scalars['String']['input'];
+    userId?: InputMaybe<Scalars['ID']['input']>;
+};
 export type MutationRequestPoseProcessingArgs = {
     testFileId: Scalars['ID']['input'];
 };
 export type MutationResendInvitationArgs = {
     invitationId: Scalars['ID']['input'];
 };
+export type MutationResetMobileClientPasswordArgs = {
+    profileId: Scalars['ID']['input'];
+};
+export type MutationResetPasswordWithTokenArgs = {
+    newPassword: Scalars['String']['input'];
+    token: Scalars['String']['input'];
+};
+export type MutationRestoreAdminArgs = {
+    userId: Scalars['ID']['input'];
+};
+export type MutationRevokeSessionArgs = {
+    sessionId: Scalars['ID']['input'];
+};
+export type MutationRevokeUserAccessArgs = {
+    userId: Scalars['ID']['input'];
+};
+export type MutationSetProfileAssignmentsArgs = {
+    input: SetProfileAssignmentsInput;
+};
+export type MutationSuspendAdminArgs = {
+    userId: Scalars['ID']['input'];
+};
 export type MutationUnarchiveUserProfileArgs = {
     id: Scalars['ID']['input'];
 };
@@ -847,6 +1277,10 @@ export type MutationUnassignActionFromProfileArgs = {
     actionId: Scalars['ID']['input'];
     profileId: Scalars['ID']['input'];
 };
+export type MutationUnassignModuleFromProfileArgs = {
+    moduleId: Scalars['ID']['input'];
+    profileId: Scalars['ID']['input'];
+};
 export type MutationUnassignRoutineFromProfileArgs = {
     profileId: Scalars['ID']['input'];
     routineId: Scalars['ID']['input'];
@@ -890,6 +1324,12 @@ export type MutationUpdateVideoDataOffsetArgs = {
     offset: Scalars['Int']['input'];
     testFileId: Scalars['ID']['input'];
 };
+export type MutationVerifyInvitationIdentityArgs = {
+    dateOfBirth: Scalars['Date']['input'];
+    firstName: Scalars['String']['input'];
+    lastName: Scalars['String']['input'];
+    token: Scalars['String']['input'];
+};
 export type Parameter = {
     __typename?: 'Parameter';
     id: Scalars['ID']['output'];
@@ -902,6 +1342,66 @@ export declare enum ParameterKind {
     Limit = "Limit",
     Target = "Target"
 }
+/**
+ * AC-4.9.9 — WHICH of the two things a reset did.
+ *
+ * The mutation returned `Boolean!`, and a reset has two outcomes: the password is
+ * set directly, or a single-use link is sent and the password the operator typed
+ * is discarded. One bit cannot carry that, so the Console reported "Password for X
+ * has been changed successfully" on a path where no password was changed and
+ * support read out a credential that never existed.
+ */
+export declare enum PasswordChangeOutcome {
+    /**
+     * A single-use, time-limited link was sent to the person instead, and no
+     * password was chosen on their behalf. Any password the caller supplied was
+     * discarded. This is the outcome for every client (AC-4.9.2) and for anybody
+     * outside the caller's own organisation (AC-4.9.5).
+     */
+    LinkSent = "LINK_SENT",
+    /**
+     * Nothing was written. The row the update aimed at was not there — AC-3.3.1's
+     * case, where reporting success from the absence of an error is the defect.
+     */
+    NotChanged = "NOT_CHANGED",
+    /** A password was set on the account. It is the one the caller supplied. */
+    PasswordSet = "PASSWORD_SET"
+}
+/**
+ * A change of email address that has been requested and not yet confirmed. It
+ * carries no token: this is what a screen may show, and a token is not.
+ */
+export type PendingEmailChange = {
+    __typename?: 'PendingEmailChange';
+    /** When the verification link stops working. */
+    expiresAt: Scalars['String']['output'];
+    /** The address the account will move to once the link is opened. */
+    newEmail: Scalars['String']['output'];
+};
+/**
+ * Which of an organisation's people to return. One account holds one role, so
+ * these two sets never overlap.
+ */
+export declare enum PersonKind {
+    Client = "CLIENT",
+    Staff = "STAFF"
+}
+/**
+ * US-4.2 — one page of an organisation's people.
+ *
+ * `Group.users` returns EVERY user in the organisation including archived ones,
+ * with no role filter, and the Console renders all of them in one pass. That does
+ * not survive an organisation with two thousand people, and it left the split
+ * between staff and clients to be decided in the client.
+ */
+export type PersonPage = {
+    __typename?: 'PersonPage';
+    /** Cursor for the next page, or null when this is the last one. */
+    nextCursor?: Maybe<Scalars['String']['output']>;
+    people: Array<User>;
+    /** Total matching the filter, before paging. */
+    totalCount: Scalars['Int']['output'];
+};
 export type PoiMetric = {
     __typename?: 'PoiMetric';
     frame: Scalars['Int']['output'];
@@ -932,8 +1432,17 @@ export type QuantumOwnedData = {
 export type Query = {
     __typename?: 'Query';
     actions: Array<Action>;
+    /**
+     * US-5.1 — every account holding admin, at every point in its lifecycle.
+     * There is no consolidated list of admin holders anywhere in the product
+     * today, and no way to grant the role or end it from any interface.
+     */
+    adminHolders: Array<AdminHolder>;
     analysisClassifications: Array<AnalysisClassification>;
+    appEnv: Scalars['String']['output'];
+    assignCatalog: AssignCatalog;
     assignedReport?: Maybe<AssignedReport>;
+    auditLogs: Array<AuditLogEntry>;
     currentGroup?: Maybe<Group>;
     generalActivityReport?: Maybe<GeneralActivityReport>;
     getActionById?: Maybe<Action>;
@@ -947,6 +1456,17 @@ export type Query = {
     group?: Maybe<Group>;
     groups: Array<Group>;
     historicalMetrics: Array<AnalysisMetric>;
+    /**
+     * US-5.3 / UF-3.1 — Quantum's own organisation, which is where a Quantum staff
+     * invitation must be written (AC-5.3.7) and the one organisation the customer
+     * list deliberately excludes (US-5.4). The Quantum Staff screen cannot ask for
+     * it through `groups`, which filters it out by design.
+     *
+     * Null when no organisation carries the flag — a real state where migration
+     * 000078 has run and nobody has set it yet. The screen says so rather than
+     * offering to invite somebody into nowhere.
+     */
+    internalOrganisation?: Maybe<Group>;
     invitations: Array<Invitation>;
     keypoints: Array<Keypoint>;
     me?: Maybe<CurrentUser>;
@@ -954,6 +1474,12 @@ export type Query = {
     moduleCategories: Array<ModuleCategory>;
     modules: Array<ActionModule>;
     movementCoordinationReport?: Maybe<MovementCoordinationReport>;
+    /**
+     * AC-6.4.3 — your own pending change of address, so the person whose account it
+     * is can see that one is in flight rather than only the operator who asked for
+     * it.
+     */
+    myPendingEmailChange?: Maybe<PendingEmailChange>;
     profileSessionForToday: Session;
     quantumOwnedActions: Array<Action>;
     quantumOwnedModules: Array<ActionModule>;
@@ -961,6 +1487,8 @@ export type Query = {
     rangeReport?: Maybe<RangeReport>;
     routine?: Maybe<Routine>;
     routines: Array<Routine>;
+    /** The caller's signed-in devices, newest first. */
+    sessions: Array<DeviceSession>;
     sessionsCreatedByProfile: Array<Session>;
     sessionsForProfile: Array<Session>;
     stabilityBalanceReport?: Maybe<StabilityBalanceReport>;
@@ -976,9 +1504,15 @@ export type Query = {
 export type QueryActionsArgs = {
     groupId?: InputMaybe<Scalars['ID']['input']>;
 };
+export type QueryAdminHoldersArgs = {
+    search?: InputMaybe<Scalars['String']['input']>;
+};
 export type QueryAssignedReportArgs = {
     id: Scalars['ID']['input'];
 };
+export type QueryAuditLogsArgs = {
+    filter?: InputMaybe<AuditLogFilter>;
+};
 export type QueryGeneralActivityReportArgs = {
     id: Scalars['ID']['input'];
 };
@@ -1166,6 +1700,23 @@ export declare enum SessionType {
     BiofeedbackTraining = "BiofeedbackTraining",
     RecordedTesting = "RecordedTesting"
 }
+export type SetProfileAssignmentsInput = {
+    changes: Array<AssignmentChangeInput>;
+    profileId: Scalars['ID']['input'];
+};
+/**
+ * Per-item outcomes plus the plan as the server now holds it, so the panel
+ * reconciles against the server in the same round trip (AC-4.4.32).
+ */
+export type SetProfileAssignmentsResult = {
+    __typename?: 'SetProfileAssignmentsResult';
+    /** The practitioner's individually-picked activities ONLY — not the client's full library. A program's activities are supplied by the program, not listed here; see UserProfile.assignedActions for the full union. */
+    assignedActionIds: Array<Scalars['ID']['output']>;
+    assignedActionReports: Array<AssignedActionReport>;
+    /** The programs assigned directly to this profile. Does not include a program's own activities, which are derived at read time from the module, not stored here. */
+    assignedModuleIds: Array<Scalars['ID']['output']>;
+    results: Array<AssignmentChangeResult>;
+};
 export type StabilityBalanceReport = {
     __typename?: 'StabilityBalanceReport';
     averageParameterScores: Array<TestAverageParameterScore>;
@@ -1537,6 +2088,28 @@ export type User = {
     deletedAt?: Maybe<Scalars['Date']['output']>;
     email: Scalars['String']['output'];
     id: Scalars['ID']['output'];
+    /**
+     * Where this account sits in its lifecycle. deletedAt says only that the account
+     * is inactive; it cannot tell a SUSPENDED person, who can be restored, from a
+     * REMOVED one, who never can.
+     *
+     * Reading the label from deletedAt alone made the Console offer Restore on a
+     * removed account — an action the server refuses and always will, because the
+     * person gave up their sign-in identity and somebody else may now hold it
+     * (AC-2.3.12: a removed person stays listed, marked removed, with no action
+     * offered on their row).
+     */
+    lifecycle: AccountLifecycle;
+    /**
+     * AC-4.7.2 — a change of email address awaiting confirmation, and the address
+     * it is going to. Null when none is in flight.
+     *
+     * The row has to be able to say this. Requesting a change alters nothing on the
+     * account, so without it the screen shows the old address and looks identical
+     * whether or not somebody asked for a change an hour ago — and an operator who
+     * cannot see a pending change cannot cancel one either.
+     */
+    pendingEmailChange?: Maybe<PendingEmailChange>;
     profile?: Maybe<UserProfile>;
     roles: Array<Scalars['String']['output']>;
     unitSystem: UnitSystem;
@@ -1546,11 +2119,17 @@ export type User = {
 export type UserProfile = {
     __typename?: 'UserProfile';
     age?: Maybe<Scalars['Int']['output']>;
+    /** AC-14.2.4: one entry per activity in the client's plan, saying how it got there. Deliberately NOT filtered by any practitioner's catalogue — items outside the reader's reach are reported too. Scoped like every other assignment read: a client reaches only their own profile. */
+    assignedActionProvenance: Array<AssignedActionProvenance>;
+    assignedActionReports: Array<AssignedActionReport>;
     assignedActions: Array<Action>;
+    assignedModules: Array<ActionModule>;
     assignedRoutines: Array<Routine>;
     createdAt: Scalars['Date']['output'];
     date_of_birth?: Maybe<Scalars['Date']['output']>;
     deletedAt?: Maybe<Scalars['Date']['output']>;
+    /** The practitioner's individually-picked activities ONLY — the same set SetProfileAssignmentsResult.assignedActionIds returns. assignedActions, by contrast, is the client's whole visible library: these direct picks plus every activity supplied by an assigned program. */
+    directAssignedActionIds: Array<Scalars['ID']['output']>;
     firstName: Scalars['String']['output'];
     gender?: Maybe<Scalars['String']['output']>;
     group?: Maybe<GroupInfo>;
@@ -1559,6 +2138,8 @@ export type UserProfile = {
     id: Scalars['ID']['output'];
     lastName: Scalars['String']['output'];
     mobileAccessEmail?: Maybe<Scalars['String']['output']>;
+    mobileAccessStatus: MobileAccessStatus;
+    mobileInvitation?: Maybe<Invitation>;
     updatedAt: Scalars['Date']['output'];
     weight?: Maybe<Scalars['Float']['output']>;
 };