spaps-sdk 1.11.0 → 1.13.0

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import * as spaps_types from 'spaps-types';
-import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, ListProjectGrantsResponse, ProjectAccessCheckResponse, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, IssueReportAttachmentOut, ListIssueReportAttachmentsResponse, IssueReportAttachmentAccessResponse, IssueReportingVoiceTokenResult, UpdateIssueReportRequest, ReplyIssueReportRequest, ListIssueReportMessagesResponse, CreateReporterMessageRequest, IssueReportMessage, CreateOperatorMessageRequest, RetractOperatorMessageRequest, CreateAppLinkRequest, AppLink, UpdateAppLinkRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, X402ResourceStatusResponse, X402ActionResponse, X402ReceiptResponse, X402ReceiptListResponse, X402HandoffVerification, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayrateX402BookingRequest, DayrateX402BookingResponse, DayrateCheckoutStatusResponse, UsageControlFeaturesResponse, UsageControlStatusRequest, UsageControlStatusResponse, UsageControlAuthorizeRequest, UsageControlAuthorizeResponse, UsageControlRecordRequest, UsageControlRecordResponse, UsageControlHistoryRequest, UsageControlHistoryResponse, Subscription, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
-export { AdminPermission, AdminRole, AdminUser, ApiResponse, AppLink, AuthResponse, CheckoutSession, CreateAppLinkRequest, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreateOperatorMessageRequest, CreatePriceRequest, CreateProductRequest, CreateReporterMessageRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateCheckoutStatus, DayrateCheckoutStatusBooking, DayrateCheckoutStatusResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, DayrateX402BookingRequest, DayrateX402BookingResponse, Entitlement, IssueReport, IssueReportAttachmentAccessResponse, IssueReportAttachmentOut, IssueReportListResult, IssueReportMessage, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, ListIssueReportAttachmentsResponse, ListIssueReportMessagesResponse, ListProjectGrantsResponse, Price, Product, ProductSyncResult, ProjectAccessCheckResponse, ProjectGrant, ProjectGrantStatus, ReplyIssueReportRequest, ResourceType, RetractOperatorMessageRequest, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateAppLinkRequest, UpdateIssueReportRequest, UpdateProductRequest, UsageControlAuthorizeRequest, UsageControlAuthorizeResponse, UsageControlDecision, UsageControlDimensions, UsageControlError, UsageControlErrorCode, UsageControlFeaturesResponse, UsageControlHistoryRequest, UsageControlHistoryResponse, UsageControlLedgerEvent, UsageControlRecordRequest, UsageControlRecordResponse, UsageControlRecordStatus, UsageControlStatusRequest, UsageControlStatusResponse, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, X402ActionFreeResponse, X402ActionOutcome, X402ActionPendingResponse, X402ActionReplayedResponse, X402ActionResponse, X402ActionSettledResponse, X402ExecuteActionRequest, X402HandoffAuthorization, X402HandoffVerification, X402HandoffVerifyRequest, X402PaymentAccept, X402PaymentRequirement, X402ProjectionStatus, X402Receipt, X402ReceiptListResponse, X402ReceiptResponse, X402ReceiptStatus, X402Resource, X402ResourceStatus, X402ResourceStatusResponse, atomicToMoneyUnits, createSecureMessageRequestSchema, isX402PaymentRequired, isX402ResourceStatus, moneyUnitsToAtomic, roundHalfToPositiveInfinity, secureMessageMetadataSchema, secureMessageSchema, validatePositiveAmountAtomic } from 'spaps-types';
+import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CryptoReconcileResult, CreateSecureMessageRequest, SecureMessage, ListProjectGrantsResponse, ProjectAccessCheckResponse, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, IssueReportAttachmentOut, ListIssueReportAttachmentsResponse, IssueReportAttachmentAccessResponse, IssueReportingVoiceTokenResult, UpdateIssueReportRequest, ReplyIssueReportRequest, ListIssueReportMessagesResponse, CreateReporterMessageRequest, IssueReportMessage, CreateOperatorMessageRequest, RetractOperatorMessageRequest, CreateAppLinkRequest, AppLink, UpdateAppLinkRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, X402ResourceStatusResponse, X402ActionResponse, X402ReceiptResponse, X402ReceiptListResponse, X402HandoffVerification, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayrateX402BookingRequest, DayrateX402BookingResponse, DayrateCheckoutStatusResponse, UsageControlFeaturesResponse, UsageControlStatusRequest, UsageControlStatusResponse, UsageControlAuthorizeRequest, UsageControlAuthorizeResponse, UsageControlRecordRequest, UsageControlRecordResponse, UsageControlHistoryRequest, UsageControlHistoryResponse, Subscription, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+export { AdminPermission, AdminRole, AdminUser, ApiResponse, AppLink, AuthResponse, CheckoutSession, CreateAppLinkRequest, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreateOperatorMessageRequest, CreatePriceRequest, CreateProductRequest, CreateReporterMessageRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, CryptoReconcileResult, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateCheckoutStatus, DayrateCheckoutStatusBooking, DayrateCheckoutStatusResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, DayrateX402BookingRequest, DayrateX402BookingResponse, Entitlement, IssueReport, IssueReportAttachmentAccessResponse, IssueReportAttachmentOut, IssueReportListResult, IssueReportMessage, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, ListIssueReportAttachmentsResponse, ListIssueReportMessagesResponse, ListProjectGrantsResponse, Price, Product, ProductSyncResult, ProjectAccessCheckResponse, ProjectGrant, ProjectGrantStatus, ReplyIssueReportRequest, ResourceType, RetractOperatorMessageRequest, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateAppLinkRequest, UpdateIssueReportRequest, UpdateProductRequest, UsageControlAuthorizeRequest, UsageControlAuthorizeResponse, UsageControlDecision, UsageControlDimensions, UsageControlError, UsageControlErrorCode, UsageControlFeaturesResponse, UsageControlHistoryRequest, UsageControlHistoryResponse, UsageControlLedgerEvent, UsageControlRecordRequest, UsageControlRecordResponse, UsageControlRecordStatus, UsageControlStatusRequest, UsageControlStatusResponse, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, X402ActionFreeResponse, X402ActionOutcome, X402ActionPendingResponse, X402ActionReplayedResponse, X402ActionResponse, X402ActionSettledResponse, X402ExecuteActionRequest, X402HandoffAuthorization, X402HandoffVerification, X402HandoffVerifyRequest, X402PaymentAccept, X402PaymentRequirement, X402ProjectionStatus, X402Receipt, X402ReceiptListResponse, X402ReceiptResponse, X402ReceiptStatus, X402Resource, X402ResourceStatus, X402ResourceStatusResponse, atomicToMoneyUnits, createSecureMessageRequestSchema, isX402PaymentRequired, isX402ResourceStatus, moneyUnitsToAtomic, roundHalfToPositiveInfinity, secureMessageMetadataSchema, secureMessageSchema, validatePositiveAmountAtomic } from 'spaps-types';
 
 /**
  * Permission checking utilities for SPAPS SDK
@@ -403,6 +403,100 @@ interface MarketingExperimentResultsResponse {
     variants: MarketingExperimentVariantResult[];
     decision: MarketingExperimentDecision;
 }
+interface MfaRequiredAuthResponse {
+    mfa_required: true;
+    challenge_id: string;
+    challenge: string;
+    expires_at: string;
+    methods: string[];
+}
+type AuthMethodResponse = AuthResponse | MfaRequiredAuthResponse;
+type AuthDiscoveryMethod = 'password' | 'magic_link' | 'wallet:solana' | 'wallet:ethereum' | 'wallet:base' | 'wallet:bitcoin' | 'oidc:google' | 'oidc:apple' | 'oidc:github' | 'webauthn' | 'sms';
+interface AuthMethodDescriptor {
+    method: AuthDiscoveryMethod;
+    enabled: boolean;
+    config: Record<string, unknown>;
+}
+interface AuthMethodsResponse {
+    methods: AuthMethodDescriptor[];
+}
+interface OidcNonceResponse {
+    challenge_id: string;
+    nonce: string;
+    expires_at: string;
+}
+interface OidcSignInRequest {
+    provider: string;
+    id_token: string;
+    challenge_id: string;
+    username?: string;
+}
+interface WebAuthnOptionsResponse {
+    challenge_id: string;
+    expires_at: string;
+    options: Record<string, unknown>;
+}
+interface WebAuthnRegisterVerifyRequest {
+    challenge_id: string;
+    credential: Record<string, unknown>;
+}
+interface WebAuthnRegisterVerifyResponse {
+    credential_id: string;
+    relying_party_id: string;
+    sign_count: number;
+    created_at: string;
+}
+interface WebAuthnAssertionOptionsRequest {
+    email?: string;
+}
+interface WebAuthnAssertionVerifyRequest {
+    challenge_id: string;
+    credential: Record<string, unknown>;
+}
+interface MfaTotpEnrollResponse {
+    secret: string;
+    provisioning_uri: string;
+    issuer: string;
+    account_name: string;
+}
+interface MfaTotpActivateRequest {
+    code: string;
+}
+interface MfaTotpActivateResponse {
+    recovery_codes: string[];
+    activated_at: string;
+}
+interface MfaVerifyRequest {
+    challenge_id: string;
+    challenge: string;
+    code?: string;
+    recovery_code?: string;
+}
+interface MfaVerifyResponse extends AuthResponse {
+    mfa_method: string;
+    recovery_codes_remaining?: number | null;
+}
+interface MfaTotpDisableRequest {
+    code: string;
+}
+interface MfaTotpDisableResponse {
+    message: string;
+}
+interface SmsOtpRequest {
+    phone_number: string;
+}
+interface SmsOtpRequestResponse {
+    challenge_id: string;
+    expires_at: string;
+    message: string;
+    delivery_status: 'sent' | 'failed' | string;
+    delivery_error_code?: string | null;
+}
+interface SmsOtpVerifyRequest {
+    phone_number: string;
+    code: string;
+    challenge_id: string;
+}
 interface EntitlementListParams {
     /** Filter by entitlement key */
     key?: string;
@@ -433,6 +527,254 @@ interface CurrentUserProjectAccessParams {
     /** Project entitlement key to check, such as "pds.project.viewer" */
     entitlementKey: string;
 }
+interface SessionContext {
+    user: User$1;
+    entitlements: Entitlement[];
+    entitlements_count: number;
+    wallets: Array<Record<string, unknown>>;
+    tier?: string | null;
+    mfa_enrolled: boolean;
+    methods_hint?: string | null;
+}
+interface WhitelistEntry {
+    id?: string;
+    application_id?: string;
+    email: string;
+    tier?: string;
+    bypass_payment?: boolean;
+    metadata?: Record<string, unknown> | null;
+    created_by?: string | null;
+    created_at?: string;
+    updated_at?: string;
+}
+interface WhitelistCheckResponse {
+    entry?: WhitelistEntry | null;
+    message: string;
+}
+interface WhitelistMutationResponse {
+    entry: WhitelistEntry;
+    message: string;
+}
+interface WhitelistBulkEntry {
+    email: string;
+    tier?: string;
+    metadata?: Record<string, unknown> | null;
+}
+interface WhitelistBulkAddRequest {
+    emails: WhitelistBulkEntry[];
+}
+interface WhitelistBulkFailedEntry {
+    email: string;
+    error: string;
+}
+interface WhitelistBulkAddResponse {
+    message: string;
+    successful: WhitelistEntry[];
+    failed: WhitelistBulkFailedEntry[];
+    total: number;
+}
+interface WhitelistListParams {
+    limit?: number;
+    offset?: number;
+    tier?: string;
+}
+interface WhitelistListResponse {
+    entries: WhitelistEntry[];
+    total: number;
+}
+interface WhitelistStatsResponse {
+    stats: {
+        enabled: boolean;
+        total: number;
+        tierBreakdown: Array<{
+            tier: string;
+            count: number;
+        }>;
+    };
+}
+interface WhitelistAddRequest {
+    email: string;
+    tier?: string;
+    bypass_payment?: boolean;
+    metadata?: Record<string, unknown> | null;
+}
+interface WhitelistUpdateRequest {
+    tier?: string;
+    bypass_payment?: boolean;
+    metadata?: Record<string, unknown> | null;
+}
+interface BatchEmailsResponse {
+    emails: Record<string, string | null>;
+    total: number;
+    with_email: number;
+}
+interface UserBatchInfo {
+    email?: string | null;
+    active_entitlements?: Array<Record<string, unknown>> | null;
+    upcoming_bookings?: Array<Record<string, unknown>> | null;
+}
+interface BatchUsersResponse {
+    users: Record<string, UserBatchInfo>;
+}
+type MembershipStatus = 'active' | 'pending' | 'removed';
+interface Membership {
+    id: string;
+    user_id: string;
+    email?: string | null;
+    application_id: string;
+    status: MembershipStatus;
+    permissions?: Record<string, unknown> | null;
+    capabilities: Record<string, unknown>;
+    metadata?: Record<string, unknown> | null;
+    created_at?: string | null;
+    updated_at?: string | null;
+    removed_at?: string | null;
+}
+interface MembershipInvitation {
+    id: string;
+    email: string;
+    application_id: string;
+    status: 'pending';
+    permissions?: Record<string, unknown> | null;
+    capabilities: Record<string, unknown>;
+    metadata?: Record<string, unknown> | null;
+    created_at?: string | null;
+    updated_at?: string | null;
+}
+interface ListMembershipsResponse {
+    memberships: Membership[];
+    invitations: MembershipInvitation[];
+}
+interface MembershipMutationRequest {
+    user_id?: string;
+    email?: string;
+    permissions?: Record<string, unknown> | null;
+    capabilities?: Record<string, unknown>;
+    metadata?: Record<string, unknown> | null;
+}
+interface MembershipMutationResponse {
+    result: 'created' | 'reactivated' | 'updated' | 'noop' | 'invited';
+    membership?: Membership | null;
+    invitation?: MembershipInvitation | null;
+}
+interface MembershipRemoveResponse {
+    user_id: string;
+    application_id: string;
+    status: 'removed';
+    removed_at?: string | null;
+}
+interface AccountDeletionResponse {
+    user_id: string;
+    deleted_at: string;
+    already_deleted: boolean;
+    revoked_refresh_tokens: number;
+    scrubbed_linked_identities: number;
+    removed_memberships: number;
+}
+interface ListMembershipsParams {
+    status?: string;
+    limit?: number;
+    offset?: number;
+    cursor?: string;
+}
+interface SupportActor {
+    type: string;
+    id?: string | null;
+}
+interface SupportCaseSummary {
+    id: string;
+    application_id: string;
+    external_case_ref?: string | null;
+    title?: string | null;
+    status: string;
+    priority: string;
+    highest_severity: string;
+    assigned_to_user_id?: string | null;
+    first_event_at: string;
+    last_event_at: string;
+    resolved_at?: string | null;
+    created_at: string;
+    updated_at: string;
+}
+interface SupportCaseEvent {
+    id: string;
+    case_id: string;
+    event_key: string;
+    source_channel: string;
+    event_type: string;
+    severity: string;
+    actor: SupportActor;
+    correlation_id?: string | null;
+    occurred_at: string;
+    received_at: string;
+    payload: Record<string, unknown>;
+}
+interface SupportTelemetryIngestRequest {
+    event_key: string;
+    occurred_at: string;
+    source_channel: string;
+    event_type: string;
+    severity: string;
+    actor: SupportActor;
+    payload: Record<string, unknown>;
+    application_id?: string | null;
+    correlation_id?: string | null;
+    external_case_ref?: string | null;
+    title?: string | null;
+}
+interface SupportTelemetryIngestResponse {
+    event_id: string;
+    case_id: string;
+    created_case: boolean;
+    deduplicated: boolean;
+    case_status: string;
+}
+interface SupportTelemetryListCasesParams {
+    application_id?: string;
+    status?: string;
+    priority?: string;
+    severity_gte?: string;
+    assigned_to_user_id?: string;
+    limit?: number;
+    offset?: number;
+}
+interface SupportTelemetryListCasesResponse {
+    items: SupportCaseSummary[];
+    total: number;
+}
+interface SupportTelemetryCaseDetailResponse {
+    case: SupportCaseSummary;
+    events: SupportCaseEvent[];
+    event_total: number;
+}
+interface SupportTelemetryPatchCaseRequest {
+    status?: string;
+    priority?: string;
+    assigned_to_user_id?: string | null;
+    resolution_note?: string | null;
+}
+interface SupportTelemetryPatchCaseResponse {
+    case: {
+        id: string;
+        status: string;
+        priority: string;
+        assigned_to_user_id?: string | null;
+        resolved_at?: string | null;
+        updated_at: string;
+    };
+}
+interface SupportTelemetryCaseByExternalResponse {
+    case: {
+        id: string;
+        application_id: string;
+        external_case_ref?: string | null;
+        status: string;
+        priority: string;
+        assigned_to_user_id?: string | null;
+        resolved_at?: string | null;
+        updated_at: string;
+    };
+}
 type SupportedIssueReportScope = Extract<IssueReportScope, 'mine'>;
 interface IssueReportListParams {
     status?: IssueReportStatus;
@@ -444,13 +786,59 @@ interface IssueReportStatusParams {
     scope?: SupportedIssueReportScope;
 }
 interface IssueReportAttachmentUploadOptions {
+    /**
+     * Optional filename to send in the multipart `file` part. File objects keep
+     * their own name when this is omitted.
+     */
     filename?: string;
 }
+declare const ISSUE_REPORT_ATTACHMENT_ALLOWED_MIME_TYPES: readonly ["image/png", "image/jpeg", "image/webp"];
+type IssueReportAttachmentMimeType = typeof ISSUE_REPORT_ATTACHMENT_ALLOWED_MIME_TYPES[number];
+declare const ISSUE_REPORT_ATTACHMENT_MAX_BYTES: number;
+declare const ISSUE_REPORT_ATTACHMENT_MAX_RETAINED = 5;
 declare class X402PaymentRequiredSDKError extends Error {
     readonly paymentRequiredHeader: string;
     readonly response: unknown;
     constructor(paymentRequiredHeader: string, response: unknown);
 }
+interface SPAPSSDKErrorOptions {
+    message: string;
+    code?: string;
+    status?: number;
+    details?: unknown;
+    requestId?: string;
+    diagnostics?: SPAPSErrorDiagnostic[];
+    remediations?: SPAPSErrorRemediation[];
+}
+interface SPAPSErrorDiagnostic {
+    code: string;
+    message: string;
+    status?: number | null;
+    details?: unknown;
+}
+interface SPAPSErrorRemediation {
+    kind: string;
+    label?: string | null;
+    method?: string | null;
+    path?: string | null;
+    cli?: string | null;
+    requires?: string[];
+    details?: unknown;
+    command_template?: string | null;
+    safe_to_execute?: boolean | null;
+    operator_gate_required?: boolean | null;
+}
+declare class SPAPSSDKError extends Error {
+    readonly code?: string;
+    readonly status?: number;
+    readonly statusCode?: number;
+    readonly details?: unknown;
+    readonly requestId?: string;
+    readonly request_id?: string;
+    readonly diagnostics: SPAPSErrorDiagnostic[];
+    readonly remediations: SPAPSErrorRemediation[];
+    constructor(options: SPAPSSDKErrorOptions);
+}
 interface X402ExecuteActionOptions {
     paymentSignature?: string;
     target: string;
@@ -466,6 +854,284 @@ interface X402VerifyHandoffOptions {
     resourceKey: string;
     actionKey: string;
 }
+type CapabilityDecisionOutcome = 'allowed' | 'needs_login' | 'needs_entitlement' | 'needs_payment' | 'needs_approval' | 'usage_limited' | 'policy_denied' | 'unknown_resource' | 'blocked';
+type PreparedCapabilityActionStatus = CapabilityDecisionOutcome | 'ready';
+type CapabilityGraphRowStatus = 'active' | 'stale' | 'tombstoned';
+type PreparedCapabilitySideEffect = 'none' | 'read' | 'mutation' | 'unknown';
+type CapabilityActionEnvironment = 'local' | 'development' | 'staging' | 'production';
+interface CapabilityDecisionActor {
+    actor_type?: string;
+    actor_ref?: string;
+    user_id?: string;
+    email?: string;
+    agent_id?: string;
+    wallet_addresses?: string[];
+    authenticated?: boolean;
+    metadata?: Record<string, unknown>;
+}
+interface CapabilityDecisionResource {
+    resource_type: string;
+    resource_ref: string;
+    resource_id?: string;
+    resource_key?: string;
+    metadata?: Record<string, unknown>;
+}
+interface CapabilityControlHints {
+    entitlement_key?: string;
+    entitlement_resource_type?: string;
+    entitlement_resource_id?: string;
+    policy_name?: string;
+    policy_context?: Record<string, unknown>;
+    usage_feature_key?: string;
+    usage_dimensions?: Record<string, number>;
+    x402_resource_key?: string;
+    approval_id?: string;
+    approval_required?: boolean;
+    authority_scope?: string;
+}
+interface AccessDecisionRequest {
+    actor: CapabilityDecisionActor;
+    action: string;
+    resource: CapabilityDecisionResource;
+    controls?: CapabilityControlHints;
+    idempotency_key?: string;
+    correlation_id?: string;
+    context?: Record<string, unknown>;
+    expires_at?: string;
+}
+interface CapabilityDecisionReason {
+    code: string;
+    message: string;
+    details?: Record<string, unknown>;
+}
+interface CapabilityDecisionFact {
+    node_key?: string | null;
+    node_type?: string | null;
+    label?: string | null;
+    source_domain: string;
+    source_ref?: string | null;
+    details?: Record<string, unknown>;
+}
+interface CapabilityDecisionNextAction {
+    kind: string;
+    label?: string | null;
+    method?: string | null;
+    path?: string | null;
+    cli?: string | null;
+    requires?: string[];
+    details?: Record<string, unknown>;
+}
+interface CapabilityDecisionSource {
+    kind: string;
+    ref: string;
+    url?: string | null;
+}
+interface AccessDecisionResponse {
+    allowed: boolean;
+    outcome: CapabilityDecisionOutcome;
+    decision_trace_id: string;
+    decision_key: string;
+    reasons: CapabilityDecisionReason[];
+    facts: CapabilityDecisionFact[];
+    next_actions: CapabilityDecisionNextAction[];
+    sources: CapabilityDecisionSource[];
+}
+interface ActionPreparationRequest {
+    access: AccessDecisionRequest;
+    include_command_templates?: boolean;
+    operator_labels?: string[];
+    environment?: CapabilityActionEnvironment;
+}
+interface PreparedCapabilityNextAction extends CapabilityDecisionNextAction {
+    side_effect: PreparedCapabilitySideEffect;
+    safe_to_execute: boolean;
+    operator_gate_required: boolean;
+    command_template?: string | null;
+}
+interface PreparedCapabilityExecution {
+    ready: boolean;
+    side_effect: PreparedCapabilitySideEffect;
+    safe_to_execute: boolean;
+    operator_gate_required: boolean;
+    required_authorizations: string[];
+    warnings: string[];
+}
+interface ActionPreparationResponse {
+    status: PreparedCapabilityActionStatus;
+    allowed: boolean;
+    decision_trace_id: string;
+    decision_key: string;
+    action: string;
+    resource_type: string;
+    resource_ref: string;
+    execution: PreparedCapabilityExecution;
+    reasons: CapabilityDecisionReason[];
+    facts: CapabilityDecisionFact[];
+    next_actions: PreparedCapabilityNextAction[];
+    sources: CapabilityDecisionSource[];
+}
+interface PersistedDecisionTraceStep {
+    id: string;
+    step_order: number;
+    step_name: string;
+    status: string;
+    source_domain: string;
+    source_ref?: string | null;
+    graph_node_keys: string[];
+    graph_edge_keys: string[];
+    elapsed_ms: number;
+    inputs: Record<string, unknown>;
+    outputs: Record<string, unknown>;
+    created_at: string;
+}
+interface PersistedDecisionTrace {
+    id: string;
+    application_id: string;
+    decision_key: string;
+    idempotency_key?: string | null;
+    actor_type: string;
+    actor_ref: string;
+    action: string;
+    resource_type: string;
+    resource_ref: string;
+    allowed: boolean;
+    outcome: CapabilityDecisionOutcome;
+    authority_scope: string;
+    correlation_id?: string | null;
+    request_hash: string;
+    reasons: Record<string, unknown>[];
+    facts: Record<string, unknown>[];
+    next_actions: Record<string, unknown>[];
+    sources: Record<string, unknown>[];
+    redaction_profile: string;
+    expires_at?: string | null;
+    created_at: string;
+    steps: PersistedDecisionTraceStep[];
+}
+interface GraphExplainResponse {
+    decision: PersistedDecisionTrace;
+    graph_node_keys: string[];
+    graph_edge_keys: string[];
+}
+interface CapabilityGraphNode {
+    id: string;
+    node_key: string;
+    node_type: string;
+    label: string;
+    source_domain: string;
+    source_ref: string;
+    status: CapabilityGraphRowStatus;
+    metadata: Record<string, unknown>;
+    observed_at: string;
+    source_updated_at?: string | null;
+    stale_after?: string | null;
+    projection_run_id?: string | null;
+    created_at: string;
+    updated_at: string;
+}
+interface CapabilityGraphProjectionStatus {
+    projection_run_id?: string | null;
+    projection_status: string;
+    observed_at?: string | null;
+    graph_hash?: string | null;
+    node_count: number;
+    edge_count: number;
+    stale_node_count: number;
+    stale_edge_count: number;
+    degraded: boolean;
+    reason?: string | null;
+}
+interface CapabilityGraphNodesQuery {
+    node_type?: string;
+    status?: CapabilityGraphRowStatus | string;
+    q?: string;
+    cursor?: string;
+    limit?: number;
+    application_id?: string;
+}
+interface CapabilityGraphNodesResponse {
+    nodes: CapabilityGraphNode[];
+    count: number;
+    next_cursor?: string | null;
+    projection?: CapabilityGraphProjectionStatus | null;
+}
+interface CapabilityGraphPathsQuery {
+    from_node_key: string;
+    to_node_key: string;
+    max_depth?: number;
+    limit?: number;
+    include_stale?: boolean;
+    application_id?: string;
+}
+interface CapabilityGraphPath {
+    node_keys: string[];
+    edge_keys: string[];
+}
+interface CapabilityGraphPathsResponse {
+    paths: CapabilityGraphPath[];
+    count: number;
+    projection?: CapabilityGraphProjectionStatus | null;
+}
+interface CapabilityGraphImpactQuery {
+    node_key: string;
+    max_depth?: number;
+    limit?: number;
+    include_stale?: boolean;
+    application_id?: string;
+}
+interface CapabilityGraphImpactResponse {
+    start_node_key: string;
+    impacted_node_keys: string[];
+    impacted_edge_keys: string[];
+    counts_by_node_type: Record<string, number>;
+    risk_flags: string[];
+    projection?: CapabilityGraphProjectionStatus | null;
+}
+interface CapabilityGraphRefreshSourceTiming {
+    source: string;
+    row_count: number;
+    node_count: number;
+    edge_count: number;
+    elapsed_ms: number;
+}
+interface CapabilityGraphRefreshPhase2Gate {
+    scale_factor: number;
+    projected_total_elapsed_ms: number;
+    total_threshold_ms: number;
+    projected_slowest_source_elapsed_ms: number;
+    source_threshold_ms: number;
+    recommendation: 'full_refresh_ok' | 'investigate_incremental';
+}
+interface CapabilityGraphRefreshDiagnostics {
+    total_elapsed_ms: number;
+    source_timings: CapabilityGraphRefreshSourceTiming[];
+    phase2_gate?: CapabilityGraphRefreshPhase2Gate | null;
+}
+interface CapabilityGraphRefreshResponse {
+    projection_run_id: string;
+    status: string;
+    node_count: number;
+    edge_count: number;
+    observation_count: number;
+    stale_node_count: number;
+    stale_edge_count: number;
+    diagnostics: CapabilityGraphRefreshDiagnostics;
+}
+interface CapabilityGraphContractResponse {
+    version: string;
+    endpoints: Array<Record<string, unknown>>;
+    decision_outcomes: CapabilityDecisionOutcome[];
+    prepared_action_statuses: PreparedCapabilityActionStatus[];
+    graph_row_statuses: CapabilityGraphRowStatus[];
+    graph_node_types?: string[];
+    graph_edge_types?: string[];
+    graph_source_domains?: string[];
+    source_domain_notes?: Record<string, string>;
+    error_codes?: Array<Record<string, unknown>>;
+    cli?: Record<string, unknown>;
+    sdk_helpers?: Record<string, string[]>;
+    docs?: Array<Record<string, unknown>>;
+}
 type SkillEvalDisclosurePolicy = 'blind_then_controlled_reveal';
 type SkillEvalEligibilitySource = 'admin_assigned' | 'entitlement' | 'policy_import' | 'manual_override';
 type SkillEvalConfidence = 'low' | 'medium' | 'high';
@@ -715,9 +1381,15 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
     private unwrapApiResponse;
     private skillEvalMutationConfig;
     private requireCurrentUserIdFromAccessToken;
+    private requireAccessToken;
+    private authConfig;
     private isAxiosResponse;
     private isResponseLikeWithData;
     private isApiResponse;
+    private static isMfaRequiredAuthResponse;
+    private normalizeAuthPayload;
+    private storeAuthTokens;
+    private unwrapAuthMethodResponse;
     private static isSdkManagedHeader;
     private static hasHeader;
     private static setHeader;
@@ -730,13 +1402,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         updateProduct: (productId: string, updates: UpdateProductRequest) => Promise<{
             data: Product;
         }>;
-        deleteProduct: (productId: string) => Promise<{
-            data: {
-                id: string;
-                active: boolean;
-                archived: boolean;
-            };
-        }>;
+        deleteProduct: (productId: string) => Promise<void>;
         createPrice: (priceData: CreatePriceRequest) => Promise<{
             data: Price;
         }>;
@@ -750,11 +1416,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
                 adminMetadata?: any;
             };
         }>;
-        triggerCryptoReconcile: (opts?: CryptoReconcileRequest) => Promise<{
-            job_id: string;
-            scheduled_at: string;
-            cursor?: Record<string, unknown>;
-        }>;
+        triggerCryptoReconcile: (opts?: CryptoReconcileRequest) => Promise<CryptoReconcileResult>;
     };
     secureMessages: {
         create: (payload: CreateSecureMessageRequest<SecureMessageMetadata>) => Promise<SecureMessage<SecureMessageMetadata>>;
@@ -925,6 +1587,55 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
             track?: boolean;
         }) => Promise<AppLink>;
     };
+    /**
+     * Application email whitelist helpers.
+     *
+     * `check` is API-key scoped. Mutations and admin reads require an
+     * authenticated admin JWT plus the configured API key.
+     */
+    whitelist: {
+        check: (email: string) => Promise<WhitelistCheckResponse>;
+        add: (payload: WhitelistAddRequest) => Promise<WhitelistMutationResponse>;
+        bulkAdd: (payload: WhitelistBulkAddRequest) => Promise<WhitelistBulkAddResponse>;
+        list: (params?: WhitelistListParams) => Promise<WhitelistListResponse>;
+        update: (email: string, payload: WhitelistUpdateRequest) => Promise<WhitelistMutationResponse>;
+        stats: () => Promise<WhitelistStatsResponse>;
+        clear: () => Promise<void>;
+        remove: (email: string) => Promise<void>;
+    };
+    /**
+     * User lookup and app membership administration helpers.
+     */
+    users: {
+        getEmailsBatch: (userIds: string[]) => Promise<BatchEmailsResponse>;
+        getUsersBatch: (userIds: string[]) => Promise<BatchUsersResponse>;
+        memberships: {
+            list: (params?: ListMembershipsParams) => Promise<ListMembershipsResponse>;
+            add: (payload: MembershipMutationRequest) => Promise<MembershipMutationResponse>;
+            remove: (userId: string) => Promise<MembershipRemoveResponse>;
+            deleteAccount: (userId: string, params?: {
+                confirm_forfeit_active_access?: boolean;
+            }) => Promise<AccountDeletionResponse>;
+        };
+    };
+    /**
+     * Trusted-service support telemetry helpers.
+     *
+     * These endpoints require a secret API key. Case lifecycle patching also
+     * requires a super-admin JWT.
+     */
+    supportTelemetry: {
+        ingestEvent: (payload: SupportTelemetryIngestRequest) => Promise<SupportTelemetryIngestResponse>;
+        listCases: (params?: SupportTelemetryListCasesParams) => Promise<SupportTelemetryListCasesResponse>;
+        getCase: (caseId: string, params?: {
+            event_limit?: number;
+            event_offset?: number;
+        }) => Promise<SupportTelemetryCaseDetailResponse>;
+        patchCase: (caseId: string, payload: SupportTelemetryPatchCaseRequest) => Promise<SupportTelemetryPatchCaseResponse>;
+        getCaseByExternalRef: (externalCaseRef: string, params?: {
+            application_id?: string;
+        }) => Promise<SupportTelemetryCaseByExternalResponse>;
+    };
     /**
      * Marketing events and experiment results.
      *
@@ -979,7 +1690,10 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
     getUser(): Promise<{
         data: User$1;
     }>;
+    getSessionContext(): Promise<SessionContext>;
     auth: {
+        getMethods: () => Promise<AuthMethodsResponse>;
+        getSessionContext: () => Promise<SessionContext>;
         /**
          * Verify magic link token without mutating token state.
          * Returns a simple success object from the API.
@@ -991,12 +1705,16 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
             message: string;
             chain_type?: "solana" | "ethereum" | "bitcoin" | "base";
             username?: string;
-        }) => Promise<any>;
-        authenticateWallet: (walletAddress: string, signFn: (message: string) => Promise<string> | string, chainType?: "solana" | "ethereum" | "bitcoin" | "base", username?: string) => Promise<any>;
+        }) => Promise<AuthMethodResponse>;
+        authenticateWallet: (walletAddress: string, signFn: (message: string) => Promise<string> | string, chainType?: "solana" | "ethereum" | "bitcoin" | "base", username?: string) => Promise<AuthMethodResponse>;
         signInWithPassword: (payload: {
             email: string;
             password: string;
-        }) => Promise<any>;
+        }) => Promise<AuthMethodResponse>;
+        login: (payload: {
+            email: string;
+            password: string;
+        }) => Promise<AuthMethodResponse>;
         requestMagicLink: (payload: {
             email: string;
             redirect_url?: string;
@@ -1020,6 +1738,10 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         }) => Promise<{
             message: string;
         }>;
+        deleteCurrentAccount: (payload: {
+            password: string;
+            confirm_forfeit_active_access?: boolean;
+        }) => Promise<AccountDeletionResponse>;
         register: (payload: {
             email: string;
             password: string;
@@ -1031,7 +1753,30 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         verifyMagicLink: (payload: {
             token: string;
             type?: string;
-        }) => Promise<AuthResponse>;
+            state?: string;
+        }) => Promise<AuthMethodResponse>;
+        oidc: {
+            getNonce: () => Promise<OidcNonceResponse>;
+            signIn: (payload: OidcSignInRequest) => Promise<AuthMethodResponse>;
+        };
+        webauthn: {
+            registerOptions: () => Promise<WebAuthnOptionsResponse>;
+            registerVerify: (payload: WebAuthnRegisterVerifyRequest) => Promise<WebAuthnRegisterVerifyResponse>;
+            assertionOptions: (payload?: WebAuthnAssertionOptionsRequest) => Promise<WebAuthnOptionsResponse>;
+            assertionVerify: (payload: WebAuthnAssertionVerifyRequest) => Promise<AuthMethodResponse>;
+        };
+        mfa: {
+            totp: {
+                enroll: () => Promise<MfaTotpEnrollResponse>;
+                activate: (payload: MfaTotpActivateRequest) => Promise<MfaTotpActivateResponse>;
+                disable: (payload: MfaTotpDisableRequest) => Promise<MfaTotpDisableResponse>;
+            };
+            verify: (payload: MfaVerifyRequest) => Promise<MfaVerifyResponse>;
+        };
+        sms: {
+            request: (payload: SmsOtpRequest) => Promise<SmsOtpRequestResponse>;
+            verify: (payload: SmsOtpVerifyRequest) => Promise<AuthMethodResponse>;
+        };
         solana: {
             linkWallet: (payload: {
                 wallet_address: string;
@@ -1084,11 +1829,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
             createInvoice: (payload: CreateCryptoInvoiceRequest) => Promise<spaps_types.CryptoInvoice>;
             getInvoice: (invoiceId: string) => Promise<spaps_types.CryptoInvoice>;
             getInvoiceStatus: (invoiceId: string) => Promise<CryptoInvoiceStatusSnapshot>;
-            reconcile: (options?: CryptoReconcileRequest) => Promise<{
-                job_id: string;
-                scheduled_at: string;
-                cursor?: Record<string, unknown>;
-            }>;
+            reconcile: (options?: CryptoReconcileRequest) => Promise<CryptoReconcileResult>;
         };
         createCheckoutSession: (payload: CreateCheckoutSessionPayload) => Promise<CheckoutSession>;
         createPaymentCheckout: (params: {
@@ -1152,7 +1893,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         }) => Promise<any>;
         listAllProductsSuperAdmin: () => Promise<any>;
         updateProductSuperAdmin: (productId: string, updates: any) => Promise<any>;
-        deleteProductSuperAdmin: (productId: string) => Promise<any>;
+        deleteProductSuperAdmin: (productId: string) => Promise<void>;
         createProductWithPrice: (payload: any) => Promise<any>;
         createProductWithPriceSuperAdmin: (applicationId: string, payload: any) => Promise<any>;
         setDefaultPrice: (productId: string, payload: {
@@ -1164,7 +1905,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         createDefaultNewPrice: (productId: string, payload: any) => Promise<any>;
         superAdminListAllProducts: () => Promise<any>;
         superAdminUpdateProduct: (productId: string, updates: any) => Promise<any>;
-        superAdminArchiveProduct: (productId: string) => Promise<any>;
+        superAdminArchiveProduct: (productId: string) => Promise<void>;
         superAdminCreateProductWithPrice: (applicationId: string, payload: any) => Promise<any>;
         superAdminCreatePriceAndSetDefault: (productId: string, payload: any) => Promise<any>;
         superAdminSetDefaultPrice: (productId: string, payload: {
@@ -1178,8 +1919,8 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
             starting_after?: string;
         }) => Promise<any>;
         validate: () => Promise<any>;
-        revoke: (sessionId: string) => Promise<any>;
-        revokeAll: () => Promise<any>;
+        revoke: (sessionId: string) => Promise<void>;
+        revokeAll: () => Promise<void>;
         touch: () => Promise<any>;
     };
     /**
@@ -1311,6 +2052,35 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
          */
         listHistory: (query?: UsageControlHistoryRequest) => Promise<UsageControlHistoryResponse>;
     };
+    /**
+     * Agent-oriented access decisions and action preparation.
+     *
+     * `check` intentionally resolves for denied decisions; inspect
+     * `allowed`, `outcome`, and `next_actions` to decide what to do next.
+     */
+    access: {
+        check: (payload: AccessDecisionRequest) => Promise<AccessDecisionResponse>;
+        decide: (payload: AccessDecisionRequest) => Promise<AccessDecisionResponse>;
+        prepareAction: (payload: ActionPreparationRequest) => Promise<ActionPreparationResponse>;
+        getDecision: (decisionTraceId: string) => Promise<PersistedDecisionTrace>;
+        explain: (decisionTraceId: string) => Promise<GraphExplainResponse>;
+    };
+    /**
+     * Capability graph inspection helpers. These require a secret key.
+     */
+    graph: {
+        listNodes: (query?: CapabilityGraphNodesQuery) => Promise<CapabilityGraphNodesResponse>;
+        getPaths: (query: CapabilityGraphPathsQuery) => Promise<CapabilityGraphPathsResponse>;
+        getImpact: (query: CapabilityGraphImpactQuery) => Promise<CapabilityGraphImpactResponse>;
+        explain: (decisionTraceId: string) => Promise<GraphExplainResponse>;
+        refresh: (correlationId?: string, applicationId?: string) => Promise<CapabilityGraphRefreshResponse>;
+    };
+    /**
+     * Machine-readable capability graph contract for agents and SDK adapters.
+     */
+    contract: {
+        get: () => Promise<CapabilityGraphContractResponse>;
+    };
     createCheckoutSession(priceId: string, successUrl: string, cancelUrl?: string): Promise<{
         data: CheckoutSession;
     }>;
@@ -1361,13 +2131,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
     /**
      * Archive (soft delete) a Stripe product (Admin required)
      */
-    deleteProduct(productId: string): Promise<{
-        data: {
-            id: string;
-            active: boolean;
-            archived: boolean;
-        };
-    }>;
+    deleteProduct(productId: string): Promise<void>;
     /**
      * Create a new price for a product (Admin required)
      */
@@ -1459,6 +2223,15 @@ interface SPAPSEnvelope<T = unknown> {
         message: string;
         details?: unknown;
     };
+    request_id?: string;
+    timestamp?: string;
+    metadata?: {
+        request_id?: string;
+        timestamp?: string;
+        [key: string]: unknown;
+    };
+    diagnostics?: SPAPSErrorDiagnostic[];
+    remediations?: SPAPSErrorRemediation[];
 }
 declare function isEnvelope(value: unknown): value is SPAPSEnvelope;
 declare function isSuccessEnvelope<T = unknown>(value: unknown): value is SPAPSEnvelope<T> & {
@@ -1509,4 +2282,4 @@ declare function createServerClient(secretKey: string, options?: Omit<SPAPSConfi
  */
 declare function detectKeyType(key: string): ApiKeyType | null;
 
-export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, type CreateSkillEvalCaseRequest, type CreateSkillEvalGovernanceSnapshotRequest, type CurrentUserProjectAccessParams, type CurrentUserProjectGrantListParams, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type HeaderProvider, type ImportSkillEvalGovernanceOutcomeRequest, type IssueReportAttachmentUploadOptions, type IssueReportListParams, type IssueReportStatusParams, type MarketingEventIngestRequest, type MarketingEventIngestResponse, type MarketingEventType, type MarketingExperimentDecision, type MarketingExperimentEffectDecision, type MarketingExperimentMinSampleDecision, type MarketingExperimentRecommendation, type MarketingExperimentResultsResponse, type MarketingExperimentSrmDecision, type MarketingExperimentSrmStatus, type MarketingExperimentVariantResult, type PermissionCheckResult, PermissionChecker, type RespondToSkillEvalReviewRequest, type RevealSkillEvalEvidenceRequest, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type SPAPSEnvelope, type SkillEvalAccessMode, type SkillEvalActorAccess, type SkillEvalCandidateInput, type SkillEvalCandidateResponse, type SkillEvalCasePolicy, type SkillEvalCaseResponse, type SkillEvalConfidence, type SkillEvalCreateOptions, type SkillEvalDisclosurePolicy, type SkillEvalEligibilitySource, type SkillEvalGovernanceOutcomeResult, type SkillEvalGovernancePurpose, type SkillEvalGovernanceSnapshotResult, type SkillEvalInsight, type SkillEvalInsightsResponse, type SkillEvalModelEffort, type SkillEvalMutationOptions, type SkillEvalPosterResponse, type SkillEvalPosterResponseResult, type SkillEvalRevealField, type SkillEvalRevealResult, type SkillEvalReviewMarkInput, type SkillEvalReviewMarkKind, type SkillEvalReviewResponse, type SkillEvalReviewRoom, type SkillEvalReviewerEligibilityInput, type SkillEvalRewardEvent, type SubmitSkillEvalReviewRequest, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, type X402ExecuteActionOptions, X402PaymentRequiredSDKError, type X402ReceiptListParams, type X402VerifyHandoffOptions, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, isEnvelope, isErrorEnvelope, isSuccessEnvelope, unwrapEnvelope, unwrapNestedData, verifyCryptoWebhookSignature };
+export { type AccessDecisionRequest, type AccessDecisionResponse, type AccountDeletionResponse, type ActionPreparationRequest, type ActionPreparationResponse, type AdminConfig, type ApiKeyType, type AuthDiscoveryMethod, type AuthMethodDescriptor, type AuthMethodResponse, type AuthMethodsResponse, type BatchEmailsResponse, type BatchUsersResponse, type CapabilityActionEnvironment, type CapabilityControlHints, type CapabilityDecisionActor, type CapabilityDecisionFact, type CapabilityDecisionNextAction, type CapabilityDecisionOutcome, type CapabilityDecisionReason, type CapabilityDecisionResource, type CapabilityDecisionSource, type CapabilityGraphContractResponse, type CapabilityGraphImpactQuery, type CapabilityGraphImpactResponse, type CapabilityGraphNode, type CapabilityGraphNodesQuery, type CapabilityGraphNodesResponse, type CapabilityGraphPath, type CapabilityGraphPathsQuery, type CapabilityGraphPathsResponse, type CapabilityGraphProjectionStatus, type CapabilityGraphRefreshDiagnostics, type CapabilityGraphRefreshPhase2Gate, type CapabilityGraphRefreshResponse, type CapabilityGraphRefreshSourceTiming, type CapabilityGraphRowStatus, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, type CreateSkillEvalCaseRequest, type CreateSkillEvalGovernanceSnapshotRequest, type CurrentUserProjectAccessParams, type CurrentUserProjectGrantListParams, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type GraphExplainResponse, type HeaderProvider, ISSUE_REPORT_ATTACHMENT_ALLOWED_MIME_TYPES, ISSUE_REPORT_ATTACHMENT_MAX_BYTES, ISSUE_REPORT_ATTACHMENT_MAX_RETAINED, type ImportSkillEvalGovernanceOutcomeRequest, type IssueReportAttachmentMimeType, type IssueReportAttachmentUploadOptions, type IssueReportListParams, type IssueReportStatusParams, type ListMembershipsParams, type ListMembershipsResponse, type MarketingEventIngestRequest, type MarketingEventIngestResponse, type MarketingEventType, type MarketingExperimentDecision, type MarketingExperimentEffectDecision, type MarketingExperimentMinSampleDecision, type MarketingExperimentRecommendation, type MarketingExperimentResultsResponse, type MarketingExperimentSrmDecision, type MarketingExperimentSrmStatus, type MarketingExperimentVariantResult, type Membership, type MembershipInvitation, type MembershipMutationRequest, type MembershipMutationResponse, type MembershipRemoveResponse, type MembershipStatus, type MfaRequiredAuthResponse, type MfaTotpActivateRequest, type MfaTotpActivateResponse, type MfaTotpDisableRequest, type MfaTotpDisableResponse, type MfaTotpEnrollResponse, type MfaVerifyRequest, type MfaVerifyResponse, type OidcNonceResponse, type OidcSignInRequest, type PermissionCheckResult, PermissionChecker, type PersistedDecisionTrace, type PersistedDecisionTraceStep, type PreparedCapabilityActionStatus, type PreparedCapabilityExecution, type PreparedCapabilityNextAction, type PreparedCapabilitySideEffect, type RespondToSkillEvalReviewRequest, type RevealSkillEvalEvidenceRequest, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type SPAPSEnvelope, type SPAPSErrorDiagnostic, type SPAPSErrorRemediation, SPAPSSDKError, type SPAPSSDKErrorOptions, type SessionContext, type SkillEvalAccessMode, type SkillEvalActorAccess, type SkillEvalCandidateInput, type SkillEvalCandidateResponse, type SkillEvalCasePolicy, type SkillEvalCaseResponse, type SkillEvalConfidence, type SkillEvalCreateOptions, type SkillEvalDisclosurePolicy, type SkillEvalEligibilitySource, type SkillEvalGovernanceOutcomeResult, type SkillEvalGovernancePurpose, type SkillEvalGovernanceSnapshotResult, type SkillEvalInsight, type SkillEvalInsightsResponse, type SkillEvalModelEffort, type SkillEvalMutationOptions, type SkillEvalPosterResponse, type SkillEvalPosterResponseResult, type SkillEvalRevealField, type SkillEvalRevealResult, type SkillEvalReviewMarkInput, type SkillEvalReviewMarkKind, type SkillEvalReviewResponse, type SkillEvalReviewRoom, type SkillEvalReviewerEligibilityInput, type SkillEvalRewardEvent, type SmsOtpRequest, type SmsOtpRequestResponse, type SmsOtpVerifyRequest, type SubmitSkillEvalReviewRequest, type SupportActor, type SupportCaseEvent, type SupportCaseSummary, type SupportTelemetryCaseByExternalResponse, type SupportTelemetryCaseDetailResponse, type SupportTelemetryIngestRequest, type SupportTelemetryIngestResponse, type SupportTelemetryListCasesParams, type SupportTelemetryListCasesResponse, type SupportTelemetryPatchCaseRequest, type SupportTelemetryPatchCaseResponse, type TemplateVariable, TokenManager, type UserBatchInfo, WalletUtils, type WebAuthnAssertionOptionsRequest, type WebAuthnAssertionVerifyRequest, type WebAuthnOptionsResponse, type WebAuthnRegisterVerifyRequest, type WebAuthnRegisterVerifyResponse, WebSocketAuthHelper, type WebSocketAuthHelperConfig, type WhitelistAddRequest, type WhitelistBulkAddRequest, type WhitelistBulkAddResponse, type WhitelistBulkEntry, type WhitelistBulkFailedEntry, type WhitelistCheckResponse, type WhitelistEntry, type WhitelistListParams, type WhitelistListResponse, type WhitelistMutationResponse, type WhitelistStatsResponse, type WhitelistUpdateRequest, type X402ExecuteActionOptions, X402PaymentRequiredSDKError, type X402ReceiptListParams, type X402VerifyHandoffOptions, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, isEnvelope, isErrorEnvelope, isSuccessEnvelope, unwrapEnvelope, unwrapNestedData, verifyCryptoWebhookSignature };