feat(server): refactor for byok (#14911)

packages/common/graphql/src/graphql/copilot-apply-doc-updates.gql

@@ -1,13 +0,0 @@
-mutation applyDocUpdates(
-  $workspaceId: String!
-  $docId: String!
-  $op: String!
-  $updates: String!
-) {
-  applyDocUpdates(
-    workspaceId: $workspaceId
-    docId: $docId
-    op: $op
-    updates: $updates
-  )
-}

packages/common/graphql/src/graphql/index.ts

@@ -1033,19 +1033,6 @@ export const uploadCommentAttachmentMutation = {
   file: true,
 };
 
-export const applyDocUpdatesMutation = {
-  id: 'applyDocUpdatesMutation' as const,
-  op: 'applyDocUpdates',
-  query: `mutation applyDocUpdates($workspaceId: String!, $docId: String!, $op: String!, $updates: String!) {
-  applyDocUpdates(
-    workspaceId: $workspaceId
-    docId: $docId
-    op: $op
-    updates: $updates
-  )
-}`,
-};
-
 export const addContextBlobMutation = {
   id: 'addContextBlobMutation' as const,
   op: 'addContextBlob',
@@ -2997,6 +2984,117 @@ export const workspaceBlobQuotaQuery = {
 }`,
 };
 
+export const clearWorkspaceByokConfigsMutation = {
+  id: 'clearWorkspaceByokConfigsMutation' as const,
+  op: 'clearWorkspaceByokConfigs',
+  query: `mutation clearWorkspaceByokConfigs($workspaceId: String!) {
+  clearWorkspaceByokConfigs(workspaceId: $workspaceId)
+}`,
+};
+
+export const deleteWorkspaceByokConfigMutation = {
+  id: 'deleteWorkspaceByokConfigMutation' as const,
+  op: 'deleteWorkspaceByokConfig',
+  query: `mutation deleteWorkspaceByokConfig($workspaceId: String!, $id: ID!) {
+  deleteWorkspaceByokConfig(workspaceId: $workspaceId, id: $id)
+}`,
+};
+
+export const reorderWorkspaceByokConfigsMutation = {
+  id: 'reorderWorkspaceByokConfigsMutation' as const,
+  op: 'reorderWorkspaceByokConfigs',
+  query: `mutation reorderWorkspaceByokConfigs($input: ReorderWorkspaceByokConfigsInput!) {
+  reorderWorkspaceByokConfigs(input: $input) {
+    id
+    sortOrder
+  }
+}`,
+};
+
+export const testWorkspaceByokConfigMutation = {
+  id: 'testWorkspaceByokConfigMutation' as const,
+  op: 'testWorkspaceByokConfig',
+  query: `mutation testWorkspaceByokConfig($input: TestWorkspaceByokConfigInput!) {
+  testWorkspaceByokConfig(input: $input) {
+    ok
+    status
+    message
+  }
+}`,
+};
+
+export const upsertWorkspaceByokConfigMutation = {
+  id: 'upsertWorkspaceByokConfigMutation' as const,
+  op: 'upsertWorkspaceByokConfig',
+  query: `mutation upsertWorkspaceByokConfig($input: UpsertWorkspaceByokConfigInput!) {
+  upsertWorkspaceByokConfig(input: $input) {
+    id
+  }
+}`,
+};
+
+export const createWorkspaceByokLocalLeaseMutation = {
+  id: 'createWorkspaceByokLocalLeaseMutation' as const,
+  op: 'createWorkspaceByokLocalLease',
+  query: `mutation createWorkspaceByokLocalLease($input: CreateWorkspaceByokLocalLeaseInput!) {
+  createWorkspaceByokLocalLease(input: $input) {
+    leaseId
+    expiresAt
+  }
+}`,
+};
+
+export const workspaceByokSettingsQuery = {
+  id: 'workspaceByokSettingsQuery' as const,
+  op: 'workspaceByokSettings',
+  query: `query workspaceByokSettings($id: String!, $from: DateTime!, $to: DateTime!) {
+  workspace(id: $id) {
+    id
+    byokSettings {
+      workspaceId
+      entitled
+      serverEntitled
+      localEntitled
+      entitlementRequired
+      allowedProviders
+      localStorageSupported
+      customEndpointSupported
+      hasAiPlan
+      keys {
+        id
+        provider
+        name
+        description
+        storage
+        configured
+        enabled
+        endpoint
+        endpointEditable
+        sortOrder
+        capabilities
+        testStatus
+        disabledReason
+        lastTestedAt
+        lastTestError
+        lastUsedAt
+        lastErrorAt
+        lastError
+      }
+      warnings {
+        featureKind
+        reason
+        requiredProviders
+      }
+    }
+    byokUsage(from: $from, to: $to) {
+      date
+      featureKind
+      totalTokens
+    }
+  }
+}`,
+};
+
 export const getWorkspaceConfigQuery = {
   id: 'getWorkspaceConfigQuery' as const,
   op: 'getWorkspaceConfig',

packages/common/graphql/src/graphql/workspace-byok-config-clear.gql

@@ -0,0 +1,3 @@
+mutation clearWorkspaceByokConfigs($workspaceId: String!) {
+  clearWorkspaceByokConfigs(workspaceId: $workspaceId)
+}

packages/common/graphql/src/graphql/workspace-byok-config-delete.gql

@@ -0,0 +1,3 @@
+mutation deleteWorkspaceByokConfig($workspaceId: String!, $id: ID!) {
+  deleteWorkspaceByokConfig(workspaceId: $workspaceId, id: $id)
+}

packages/common/graphql/src/graphql/workspace-byok-config-reorder.gql

@@ -0,0 +1,8 @@
+mutation reorderWorkspaceByokConfigs(
+  $input: ReorderWorkspaceByokConfigsInput!
+) {
+  reorderWorkspaceByokConfigs(input: $input) {
+    id
+    sortOrder
+  }
+}

packages/common/graphql/src/graphql/workspace-byok-config-test.gql

@@ -0,0 +1,7 @@
+mutation testWorkspaceByokConfig($input: TestWorkspaceByokConfigInput!) {
+  testWorkspaceByokConfig(input: $input) {
+    ok
+    status
+    message
+  }
+}

packages/common/graphql/src/graphql/workspace-byok-config-upsert.gql

@@ -0,0 +1,5 @@
+mutation upsertWorkspaceByokConfig($input: UpsertWorkspaceByokConfigInput!) {
+  upsertWorkspaceByokConfig(input: $input) {
+    id
+  }
+}

packages/common/graphql/src/graphql/workspace-byok-local-lease-create.gql

@@ -0,0 +1,8 @@
+mutation createWorkspaceByokLocalLease(
+  $input: CreateWorkspaceByokLocalLeaseInput!
+) {
+  createWorkspaceByokLocalLease(input: $input) {
+    leaseId
+    expiresAt
+  }
+}

packages/common/graphql/src/graphql/workspace-byok-settings.gql

@@ -0,0 +1,46 @@
+query workspaceByokSettings($id: String!, $from: DateTime!, $to: DateTime!) {
+  workspace(id: $id) {
+    id
+    byokSettings {
+      workspaceId
+      entitled
+      serverEntitled
+      localEntitled
+      entitlementRequired
+      allowedProviders
+      localStorageSupported
+      customEndpointSupported
+      hasAiPlan
+      keys {
+        id
+        provider
+        name
+        description
+        storage
+        configured
+        enabled
+        endpoint
+        endpointEditable
+        sortOrder
+        capabilities
+        testStatus
+        disabledReason
+        lastTestedAt
+        lastTestError
+        lastUsedAt
+        lastErrorAt
+        lastError
+      }
+      warnings {
+        featureKind
+        reason
+        requiredProviders
+      }
+    }
+    byokUsage(from: $from, to: $to) {
+      date
+      featureKind
+      totalTokens
+    }
+  }
+}

packages/common/graphql/src/schema.ts

@@ -347,6 +347,24 @@ export interface BlobUploadedPart {
   partNumber: Scalars['Int']['output'];
 }
 
+export enum ByokKeyStorage {
+  local = 'local',
+  server = 'server',
+}
+
+export enum ByokKeyTestStatus {
+  failed = 'failed',
+  passed = 'passed',
+  untested = 'untested',
+}
+
+export enum ByokProvider {
+  anthropic = 'anthropic',
+  fal = 'fal',
+  gemini = 'gemini',
+  openai = 'openai',
+}
+
 export interface CalendarAccountObjectType {
   __typename?: 'CalendarAccountObjectType';
   calendars: Array<CalendarSubscriptionObjectType>;
@@ -868,6 +886,27 @@ export interface CreateUserInput {
   password?: InputMaybe<Scalars['String']['input']>;
 }
 
+export interface CreateWorkspaceByokLocalLeaseInput {
+  providers: Array<CreateWorkspaceByokLocalLeaseProviderInput>;
+  workspaceId: Scalars['String']['input'];
+}
+
+export interface CreateWorkspaceByokLocalLeaseProviderInput {
+  apiKey: Scalars['String']['input'];
+  description?: InputMaybe<Scalars['String']['input']>;
+  enabled?: InputMaybe<Scalars['Boolean']['input']>;
+  endpoint?: InputMaybe<Scalars['String']['input']>;
+  name: Scalars['String']['input'];
+  provider: ByokProvider;
+  sortOrder?: InputMaybe<Scalars['SafeInt']['input']>;
+}
+
+export interface CreateWorkspaceByokLocalLeaseResultType {
+  __typename?: 'CreateWorkspaceByokLocalLeaseResultType';
+  expiresAt: Scalars['DateTime']['output'];
+  leaseId: Scalars['String']['output'];
+}
+
 export interface CredentialsRequirementType {
   __typename?: 'CredentialsRequirementType';
   password: PasswordLimitsType;
@@ -1727,8 +1766,6 @@ export interface Mutation {
   addWorkspaceFeature: Scalars['Boolean']['output'];
   /** Update workspace flags and features for admin */
   adminUpdateWorkspace: Maybe<AdminWorkspace>;
-  /** Apply updates to a doc using LLM and return the merged markdown. */
-  applyDocUpdates: Scalars['String']['output'];
   approveMember: Scalars['Boolean']['output'];
   /** Ban an user */
   banUser: UserType;
@@ -1737,6 +1774,7 @@ export interface Mutation {
   changePassword: Scalars['Boolean']['output'];
   /** Cleanup sessions */
   cleanupCopilotSession: Array<Scalars['String']['output']>;
+  clearWorkspaceByokConfigs: Scalars['Boolean']['output'];
   completeBlobUpload: Scalars['String']['output'];
   createBlobUpload: BlobUploadInit;
   /** Create change password url */
@@ -1764,6 +1802,7 @@ export interface Mutation {
   createUser: UserType;
   /** Create a new workspace */
   createWorkspace: WorkspaceType;
+  createWorkspaceByokLocalLease: CreateWorkspaceByokLocalLeaseResultType;
   deactivateLicense: Scalars['Boolean']['output'];
   deleteAccount: DeleteAccount;
   deleteBlob: Scalars['Boolean']['output'];
@@ -1774,6 +1813,7 @@ export interface Mutation {
   /** Delete a user account */
   deleteUser: DeleteAccount;
   deleteWorkspace: Scalars['Boolean']['output'];
+  deleteWorkspaceByokConfig: Scalars['Boolean']['output'];
   /** Reenable an banned user */
   enableUser: UserType;
   /** Create a chat session */
@@ -1815,6 +1855,7 @@ export interface Mutation {
   /** Remove workspace embedding files */
   removeWorkspaceEmbeddingFiles: Scalars['Boolean']['output'];
   removeWorkspaceFeature: Scalars['Boolean']['output'];
+  reorderWorkspaceByokConfigs: Array<WorkspaceByokKeyConfigType>;
   /** Request to apply the subscription in advance */
   requestApplySubscription: Array<SubscriptionType>;
   /** Resolve a comment or not */
@@ -1835,6 +1876,7 @@ export interface Mutation {
   setBlob: Scalars['String']['output'];
   settleTranscriptTask: Maybe<TranscriptionResultType>;
   submitTranscriptTask: Maybe<TranscriptionResultType>;
+  testWorkspaceByokConfig: TestWorkspaceByokConfigResultType;
   unlinkCalendarAccount: Scalars['Boolean']['output'];
   /** update app configuration */
   updateAppConfig: Scalars['JSONObject']['output'];
@@ -1864,6 +1906,7 @@ export interface Mutation {
   uploadAvatar: UserType;
   /** Upload a comment attachment and return the access url */
   uploadCommentAttachment: Scalars['String']['output'];
+  upsertWorkspaceByokConfig: WorkspaceByokKeyConfigType;
   verifyEmail: Scalars['Boolean']['output'];
 }
 
@@ -1915,13 +1958,6 @@ export interface MutationAdminUpdateWorkspaceArgs {
   input: AdminUpdateWorkspaceInput;
 }
 
-export interface MutationApplyDocUpdatesArgs {
-  docId: Scalars['String']['input'];
-  op: Scalars['String']['input'];
-  updates: Scalars['String']['input'];
-  workspaceId: Scalars['String']['input'];
-}
-
 export interface MutationApproveMemberArgs {
   userId: Scalars['String']['input'];
   workspaceId: Scalars['String']['input'];
@@ -1952,6 +1988,11 @@ export interface MutationCleanupCopilotSessionArgs {
   options: DeleteSessionInput;
 }
 
+export interface MutationClearWorkspaceByokConfigsArgs {
+  provider?: InputMaybe<ByokProvider>;
+  workspaceId: Scalars['String']['input'];
+}
+
 export interface MutationCompleteBlobUploadArgs {
   key: Scalars['String']['input'];
   parts?: InputMaybe<Array<BlobUploadPartInput>>;
@@ -2017,6 +2058,10 @@ export interface MutationCreateWorkspaceArgs {
   init?: InputMaybe<Scalars['Upload']['input']>;
 }
 
+export interface MutationCreateWorkspaceByokLocalLeaseArgs {
+  input: CreateWorkspaceByokLocalLeaseInput;
+}
+
 export interface MutationDeactivateLicenseArgs {
   workspaceId: Scalars['String']['input'];
 }
@@ -2044,6 +2089,11 @@ export interface MutationDeleteWorkspaceArgs {
   id: Scalars['String']['input'];
 }
 
+export interface MutationDeleteWorkspaceByokConfigArgs {
+  id: Scalars['ID']['input'];
+  workspaceId: Scalars['String']['input'];
+}
+
 export interface MutationEnableUserArgs {
   id: Scalars['String']['input'];
 }
@@ -2153,6 +2203,10 @@ export interface MutationRemoveWorkspaceFeatureArgs {
   workspaceId: Scalars['String']['input'];
 }
 
+export interface MutationReorderWorkspaceByokConfigsArgs {
+  input: ReorderWorkspaceByokConfigsInput;
+}
+
 export interface MutationRequestApplySubscriptionArgs {
   transactionId: Scalars['String']['input'];
 }
@@ -2241,6 +2295,10 @@ export interface MutationSubmitTranscriptTaskArgs {
   workspaceId: Scalars['String']['input'];
 }
 
+export interface MutationTestWorkspaceByokConfigArgs {
+  input: TestWorkspaceByokConfigInput;
+}
+
 export interface MutationUnlinkCalendarAccountArgs {
   accountId: Scalars['String']['input'];
 }
@@ -2323,6 +2381,10 @@ export interface MutationUploadCommentAttachmentArgs {
   workspaceId: Scalars['String']['input'];
 }
 
+export interface MutationUpsertWorkspaceByokConfigArgs {
+  input: UpsertWorkspaceByokConfigInput;
+}
+
 export interface MutationVerifyEmailArgs {
   token: Scalars['String']['input'];
 }
@@ -2545,11 +2607,6 @@ export interface Query {
   adminWorkspacesCount: Scalars['Int']['output'];
   /** get the whole app configuration */
   appConfig: Scalars['JSONObject']['output'];
-  /**
-   * Apply updates to a doc using LLM and return the merged markdown.
-   * @deprecated use Mutation.applyDocUpdates
-   */
-  applyDocUpdates: Scalars['String']['output'];
   /** Get current user */
   currentUser: Maybe<UserType>;
   error: ErrorDataUnion;
@@ -2608,13 +2665,6 @@ export interface QueryAdminWorkspacesCountArgs {
   filter: ListWorkspaceInput;
 }
 
-export interface QueryApplyDocUpdatesArgs {
-  docId: Scalars['String']['input'];
-  op: Scalars['String']['input'];
-  updates: Scalars['String']['input'];
-  workspaceId: Scalars['String']['input'];
-}
-
 export interface QueryErrorArgs {
   name: ErrorNames;
 }
@@ -2723,6 +2773,12 @@ export interface RemoveContextFileInput {
   fileId: Scalars['String']['input'];
 }
 
+export interface ReorderWorkspaceByokConfigsInput {
+  ids: Array<Scalars['ID']['input']>;
+  storage: ByokKeyStorage;
+  workspaceId: Scalars['String']['input'];
+}
+
 export interface ReplyCreateInput {
   commentId: Scalars['ID']['input'];
   content: Scalars['JSONObject']['input'];
@@ -3046,6 +3102,22 @@ export enum SubscriptionVariant {
   Onetime = 'Onetime',
 }
 
+export interface TestWorkspaceByokConfigInput {
+  apiKey?: InputMaybe<Scalars['String']['input']>;
+  configId?: InputMaybe<Scalars['ID']['input']>;
+  endpoint?: InputMaybe<Scalars['String']['input']>;
+  provider: ByokProvider;
+  storage: ByokKeyStorage;
+  workspaceId: Scalars['String']['input'];
+}
+
+export interface TestWorkspaceByokConfigResultType {
+  __typename?: 'TestWorkspaceByokConfigResultType';
+  message: Maybe<Scalars['String']['output']>;
+  ok: Scalars['Boolean']['output'];
+  status: ByokKeyTestStatus;
+}
+
 export enum TimeBucket {
   Day = 'Day',
   Minute = 'Minute',
@@ -3208,6 +3280,19 @@ export interface UpdateWorkspaceInput {
   public?: InputMaybe<Scalars['Boolean']['input']>;
 }
 
+export interface UpsertWorkspaceByokConfigInput {
+  apiKey?: InputMaybe<Scalars['String']['input']>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  enabled?: InputMaybe<Scalars['Boolean']['input']>;
+  endpoint?: InputMaybe<Scalars['String']['input']>;
+  id?: InputMaybe<Scalars['ID']['input']>;
+  name: Scalars['String']['input'];
+  provider: ByokProvider;
+  sortOrder?: InputMaybe<Scalars['SafeInt']['input']>;
+  storage: ByokKeyStorage;
+  workspaceId: Scalars['String']['input'];
+}
+
 export interface UserImportFailedType {
   __typename?: 'UserImportFailedType';
   email: Scalars['String']['output'];
@@ -3323,6 +3408,57 @@ export interface VersionRejectedDataType {
   version: Scalars['String']['output'];
 }
 
+export interface WorkspaceByokCapabilityWarningType {
+  __typename?: 'WorkspaceByokCapabilityWarningType';
+  featureKind: Scalars['String']['output'];
+  reason: Scalars['String']['output'];
+  requiredProviders: Array<ByokProvider>;
+}
+
+export interface WorkspaceByokKeyConfigType {
+  __typename?: 'WorkspaceByokKeyConfigType';
+  capabilities: Array<Scalars['String']['output']>;
+  configured: Scalars['Boolean']['output'];
+  description: Maybe<Scalars['String']['output']>;
+  disabledReason: Maybe<Scalars['String']['output']>;
+  enabled: Scalars['Boolean']['output'];
+  endpoint: Maybe<Scalars['String']['output']>;
+  endpointEditable: Scalars['Boolean']['output'];
+  id: Scalars['ID']['output'];
+  lastError: Maybe<Scalars['String']['output']>;
+  lastErrorAt: Maybe<Scalars['DateTime']['output']>;
+  lastTestError: Maybe<Scalars['String']['output']>;
+  lastTestedAt: Maybe<Scalars['DateTime']['output']>;
+  lastUsedAt: Maybe<Scalars['DateTime']['output']>;
+  name: Scalars['String']['output'];
+  provider: ByokProvider;
+  sortOrder: Scalars['SafeInt']['output'];
+  storage: ByokKeyStorage;
+  testStatus: ByokKeyTestStatus;
+}
+
+export interface WorkspaceByokSettingsType {
+  __typename?: 'WorkspaceByokSettingsType';
+  allowedProviders: Array<ByokProvider>;
+  customEndpointSupported: Scalars['Boolean']['output'];
+  entitled: Scalars['Boolean']['output'];
+  entitlementRequired: Array<Scalars['String']['output']>;
+  hasAiPlan: Scalars['Boolean']['output'];
+  keys: Array<WorkspaceByokKeyConfigType>;
+  localEntitled: Scalars['Boolean']['output'];
+  localStorageSupported: Scalars['Boolean']['output'];
+  serverEntitled: Scalars['Boolean']['output'];
+  warnings: Array<WorkspaceByokCapabilityWarningType>;
+  workspaceId: Scalars['String']['output'];
+}
+
+export interface WorkspaceByokUsagePointType {
+  __typename?: 'WorkspaceByokUsagePointType';
+  date: Scalars['DateTime']['output'];
+  featureKind: Scalars['String']['output'];
+  totalTokens: Scalars['SafeInt']['output'];
+}
+
 export interface WorkspaceCalendarItemInput {
   colorOverride?: InputMaybe<Scalars['String']['input']>;
   sortOrder?: InputMaybe<Scalars['Int']['input']>;
@@ -3453,6 +3589,8 @@ export interface WorkspaceType {
   blobs: Array<ListedBlob>;
   /** Blobs size of workspace */
   blobsSize: Scalars['Int']['output'];
+  byokSettings: WorkspaceByokSettingsType;
+  byokUsage: Array<WorkspaceByokUsagePointType>;
   calendars: Array<WorkspaceCalendarObjectType>;
   /** Get comment changes of a doc */
   commentChanges: PaginatedCommentChangeObjectType;
@@ -3526,6 +3664,11 @@ export interface WorkspaceTypeBlobUploadPartUrlArgs {
   uploadId: Scalars['String']['input'];
 }
 
+export interface WorkspaceTypeByokUsageArgs {
+  from: Scalars['DateTime']['input'];
+  to: Scalars['DateTime']['input'];
+}
+
 export interface WorkspaceTypeCommentChangesArgs {
   docId: Scalars['String']['input'];
   pagination: PaginationInput;
@@ -4642,18 +4785,6 @@ export type UploadCommentAttachmentMutation = {
   uploadCommentAttachment: string;
 };
 
-export type ApplyDocUpdatesMutationVariables = Exact<{
-  workspaceId: Scalars['String']['input'];
-  docId: Scalars['String']['input'];
-  op: Scalars['String']['input'];
-  updates: Scalars['String']['input'];
-}>;
-
-export type ApplyDocUpdatesMutation = {
-  __typename?: 'Mutation';
-  applyDocUpdates: string;
-};
-
 export type AddContextBlobMutationVariables = Exact<{
   options: AddContextBlobInput;
 }>;
@@ -7478,6 +7609,136 @@ export type WorkspaceBlobQuotaQuery = {
   };
 };
 
+export type ClearWorkspaceByokConfigsMutationVariables = Exact<{
+  workspaceId: Scalars['String']['input'];
+}>;
+
+export type ClearWorkspaceByokConfigsMutation = {
+  __typename?: 'Mutation';
+  clearWorkspaceByokConfigs: boolean;
+};
+
+export type DeleteWorkspaceByokConfigMutationVariables = Exact<{
+  workspaceId: Scalars['String']['input'];
+  id: Scalars['ID']['input'];
+}>;
+
+export type DeleteWorkspaceByokConfigMutation = {
+  __typename?: 'Mutation';
+  deleteWorkspaceByokConfig: boolean;
+};
+
+export type ReorderWorkspaceByokConfigsMutationVariables = Exact<{
+  input: ReorderWorkspaceByokConfigsInput;
+}>;
+
+export type ReorderWorkspaceByokConfigsMutation = {
+  __typename?: 'Mutation';
+  reorderWorkspaceByokConfigs: Array<{
+    __typename?: 'WorkspaceByokKeyConfigType';
+    id: string;
+    sortOrder: number;
+  }>;
+};
+
+export type TestWorkspaceByokConfigMutationVariables = Exact<{
+  input: TestWorkspaceByokConfigInput;
+}>;
+
+export type TestWorkspaceByokConfigMutation = {
+  __typename?: 'Mutation';
+  testWorkspaceByokConfig: {
+    __typename?: 'TestWorkspaceByokConfigResultType';
+    ok: boolean;
+    status: ByokKeyTestStatus;
+    message: string | null;
+  };
+};
+
+export type UpsertWorkspaceByokConfigMutationVariables = Exact<{
+  input: UpsertWorkspaceByokConfigInput;
+}>;
+
+export type UpsertWorkspaceByokConfigMutation = {
+  __typename?: 'Mutation';
+  upsertWorkspaceByokConfig: {
+    __typename?: 'WorkspaceByokKeyConfigType';
+    id: string;
+  };
+};
+
+export type CreateWorkspaceByokLocalLeaseMutationVariables = Exact<{
+  input: CreateWorkspaceByokLocalLeaseInput;
+}>;
+
+export type CreateWorkspaceByokLocalLeaseMutation = {
+  __typename?: 'Mutation';
+  createWorkspaceByokLocalLease: {
+    __typename?: 'CreateWorkspaceByokLocalLeaseResultType';
+    leaseId: string;
+    expiresAt: string;
+  };
+};
+
+export type WorkspaceByokSettingsQueryVariables = Exact<{
+  id: Scalars['String']['input'];
+  from: Scalars['DateTime']['input'];
+  to: Scalars['DateTime']['input'];
+}>;
+
+export type WorkspaceByokSettingsQuery = {
+  __typename?: 'Query';
+  workspace: {
+    __typename?: 'WorkspaceType';
+    id: string;
+    byokSettings: {
+      __typename?: 'WorkspaceByokSettingsType';
+      workspaceId: string;
+      entitled: boolean;
+      serverEntitled: boolean;
+      localEntitled: boolean;
+      entitlementRequired: Array<string>;
+      allowedProviders: Array<ByokProvider>;
+      localStorageSupported: boolean;
+      customEndpointSupported: boolean;
+      hasAiPlan: boolean;
+      keys: Array<{
+        __typename?: 'WorkspaceByokKeyConfigType';
+        id: string;
+        provider: ByokProvider;
+        name: string;
+        description: string | null;
+        storage: ByokKeyStorage;
+        configured: boolean;
+        enabled: boolean;
+        endpoint: string | null;
+        endpointEditable: boolean;
+        sortOrder: number;
+        capabilities: Array<string>;
+        testStatus: ByokKeyTestStatus;
+        disabledReason: string | null;
+        lastTestedAt: string | null;
+        lastTestError: string | null;
+        lastUsedAt: string | null;
+        lastErrorAt: string | null;
+        lastError: string | null;
+      }>;
+      warnings: Array<{
+        __typename?: 'WorkspaceByokCapabilityWarningType';
+        featureKind: string;
+        reason: string;
+        requiredProviders: Array<ByokProvider>;
+      }>;
+    };
+    byokUsage: Array<{
+      __typename?: 'WorkspaceByokUsagePointType';
+      date: string;
+      featureKind: string;
+      totalTokens: number;
+    }>;
+  };
+};
+
 export type GetWorkspaceConfigQueryVariables = Exact<{
   id: Scalars['String']['input'];
 }>;
@@ -8104,6 +8365,11 @@ export type Queries =
       variables: WorkspaceBlobQuotaQueryVariables;
       response: WorkspaceBlobQuotaQuery;
     }
+  | {
+      name: 'workspaceByokSettingsQuery';
+      variables: WorkspaceByokSettingsQueryVariables;
+      response: WorkspaceByokSettingsQuery;
+    }
   | {
       name: 'getWorkspaceConfigQuery';
       variables: GetWorkspaceConfigQueryVariables;
@@ -8301,11 +8567,6 @@ export type Mutations =
       variables: UploadCommentAttachmentMutationVariables;
       response: UploadCommentAttachmentMutation;
     }
-  | {
-      name: 'applyDocUpdatesMutation';
-      variables: ApplyDocUpdatesMutationVariables;
-      response: ApplyDocUpdatesMutation;
-    }
   | {
       name: 'addContextBlobMutation';
       variables: AddContextBlobMutationVariables;
@@ -8606,6 +8867,36 @@ export type Mutations =
       variables: VerifyEmailMutationVariables;
       response: VerifyEmailMutation;
     }
+  | {
+      name: 'clearWorkspaceByokConfigsMutation';
+      variables: ClearWorkspaceByokConfigsMutationVariables;
+      response: ClearWorkspaceByokConfigsMutation;
+    }
+  | {
+      name: 'deleteWorkspaceByokConfigMutation';
+      variables: DeleteWorkspaceByokConfigMutationVariables;
+      response: DeleteWorkspaceByokConfigMutation;
+    }
+  | {
+      name: 'reorderWorkspaceByokConfigsMutation';
+      variables: ReorderWorkspaceByokConfigsMutationVariables;
+      response: ReorderWorkspaceByokConfigsMutation;
+    }
+  | {
+      name: 'testWorkspaceByokConfigMutation';
+      variables: TestWorkspaceByokConfigMutationVariables;
+      response: TestWorkspaceByokConfigMutation;
+    }
+  | {
+      name: 'upsertWorkspaceByokConfigMutation';
+      variables: UpsertWorkspaceByokConfigMutationVariables;
+      response: UpsertWorkspaceByokConfigMutation;
+    }
+  | {
+      name: 'createWorkspaceByokLocalLeaseMutation';
+      variables: CreateWorkspaceByokLocalLeaseMutationVariables;
+      response: CreateWorkspaceByokLocalLeaseMutation;
+    }
   | {
       name: 'setEnableAiMutation';
       variables: SetEnableAiMutationVariables;