@adaptive-ds/zitadel-cli 0.2.0 → 0.3.0

package/dist/v2/userServiceVerifyPasskeyRegistration.js.map

@@ -1 +1 @@
-{"version":3,"file":"userServiceVerifyPasskeyRegistration.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyPasskeyRegistration.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,sCAAsC,GAEvC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAgB9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,UAAuD,EAAE;IAEzD,MAAM,EAAE,GAAG,sCAAsC,CAAA;IACjD,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC;QACtE,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"userServiceVerifyPasskeyRegistration.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyPasskeyRegistration.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,sCAAsC,GAEvC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,YAAY,EAA4B,MAAM,4BAA4B,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAU9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,UAAuD,EAAE;IAEzD,MAAM,EAAE,GAAG,sCAAsC,CAAA;IACjD,OAAO,YAAY,CAAC;QAClB,GAAG,OAAO;QACV,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC;QACtE,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}

package/dist/v2/userServiceVerifyPhone.d.ts

@@ -1,17 +1,10 @@
 import type { MessageInitShape } from "@bufbuild/protobuf";
-import type { Transport } from "@connectrpc/connect";
 import type { PromiseResult } from "#result";
-import type { ZitadelConfig } from "../config/zitadelConfig.js";
 import { VerifyPhoneRequestSchema, type VerifyPhoneResponse } from "../generated/zitadel/user/v2/user_service_pb.js";
+import { type EndpointCallOptions } from "./internal/endpointCall.js";
 export type UserServiceVerifyPhoneRequest = MessageInitShape<typeof VerifyPhoneRequestSchema>;
-export type UserServiceVerifyPhoneOptions = {
-    readonly baseUrl?: string;
-    readonly config?: ZitadelConfig;
-    readonly env?: Readonly<Record<string, string | undefined>>;
-    readonly envFile?: string;
+export type UserServiceVerifyPhoneOptions = EndpointCallOptions & {
     readonly request?: UserServiceVerifyPhoneRequest;
-    readonly token?: string;
-    readonly transport?: Transport;
 };
 /**
  * Verifies a user's phone number with the generated verification code.

package/dist/v2/userServiceVerifyPhone.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userServiceVerifyPhone.d.ts","sourceRoot":"","sources":["../../src/v2/userServiceVerifyPhone.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,iDAAiD,CAAA;AAIpH,MAAM,MAAM,6BAA6B,GAAG,gBAAgB,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE7F,MAAM,MAAM,6BAA6B,GAAG;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAA;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAC/B,CAAA;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,aAAa,CAAC,mBAAmB,CAAC,CAcpC"}
+{"version":3,"file":"userServiceVerifyPhone.d.ts","sourceRoot":"","sources":["../../src/v2/userServiceVerifyPhone.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,iDAAiD,CAAA;AACpH,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAGnF,MAAM,MAAM,6BAA6B,GAAG,gBAAgB,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE7F,MAAM,MAAM,6BAA6B,GAAG,mBAAmB,GAAG;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAA;CACjD,CAAA;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,aAAa,CAAC,mBAAmB,CAAC,CAWpC"}

package/dist/v2/userServiceVerifyPhone.js

@@ -9,10 +9,7 @@ import { UserService } from "./userService.js";
 export async function userServiceVerifyPhone(options = {}) {
     const op = "userServiceVerifyPhone";
     return endpointCall({
-        baseUrl: options.baseUrl,
-        config: options.config,
-        env: options.env,
-        envFile: options.envFile,
+        ...options,
         invoke: (client, request) => client.verifyPhone(request),
         operation: op,
         request: options.request ?? {},

package/dist/v2/userServiceVerifyPhone.js.map

@@ -1 +1 @@
-{"version":3,"file":"userServiceVerifyPhone.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyPhone.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAA4B,MAAM,iDAAiD,CAAA;AACpH,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAc9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAyC,EAAE;IAE3C,MAAM,EAAE,GAAG,wBAAwB,CAAA;IACnC,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QACxD,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"userServiceVerifyPhone.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyPhone.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAA4B,MAAM,iDAAiD,CAAA;AACpH,OAAO,EAAE,YAAY,EAA4B,MAAM,4BAA4B,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAQ9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAyC,EAAE;IAE3C,MAAM,EAAE,GAAG,wBAAwB,CAAA;IACnC,OAAO,YAAY,CAAC;QAClB,GAAG,OAAO;QACV,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QACxD,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}

package/dist/v2/userServiceVerifyTOTPRegistration.d.ts

@@ -1,17 +1,10 @@
 import type { MessageInitShape } from "@bufbuild/protobuf";
-import type { Transport } from "@connectrpc/connect";
 import type { PromiseResult } from "#result";
-import type { ZitadelConfig } from "../config/zitadelConfig.js";
 import { VerifyTOTPRegistrationRequestSchema, type VerifyTOTPRegistrationResponse } from "../generated/zitadel/user/v2/user_service_pb.js";
+import { type EndpointCallOptions } from "./internal/endpointCall.js";
 export type UserServiceVerifyTOTPRegistrationRequest = MessageInitShape<typeof VerifyTOTPRegistrationRequestSchema>;
-export type UserServiceVerifyTOTPRegistrationOptions = {
-    readonly baseUrl?: string;
-    readonly config?: ZitadelConfig;
-    readonly env?: Readonly<Record<string, string | undefined>>;
-    readonly envFile?: string;
+export type UserServiceVerifyTOTPRegistrationOptions = EndpointCallOptions & {
     readonly request?: UserServiceVerifyTOTPRegistrationRequest;
-    readonly token?: string;
-    readonly transport?: Transport;
 };
 /**
  * Verifies a user's TOTP registration with the provided code.

package/dist/v2/userServiceVerifyTOTPRegistration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userServiceVerifyTOTPRegistration.d.ts","sourceRoot":"","sources":["../../src/v2/userServiceVerifyTOTPRegistration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EACL,mCAAmC,EACnC,KAAK,8BAA8B,EACpC,MAAM,iDAAiD,CAAA;AAIxD,MAAM,MAAM,wCAAwC,GAAG,gBAAgB,CAAC,OAAO,mCAAmC,CAAC,CAAA;AAEnH,MAAM,MAAM,wCAAwC,GAAG;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,wCAAwC,CAAA;IAC3D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAC/B,CAAA;AAED;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,GAAE,wCAA6C,GACrD,aAAa,CAAC,8BAA8B,CAAC,CAc/C"}
+{"version":3,"file":"userServiceVerifyTOTPRegistration.d.ts","sourceRoot":"","sources":["../../src/v2/userServiceVerifyTOTPRegistration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EACL,mCAAmC,EACnC,KAAK,8BAA8B,EACpC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAGnF,MAAM,MAAM,wCAAwC,GAAG,gBAAgB,CAAC,OAAO,mCAAmC,CAAC,CAAA;AAEnH,MAAM,MAAM,wCAAwC,GAAG,mBAAmB,GAAG;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,wCAAwC,CAAA;CAC5D,CAAA;AAED;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,GAAE,wCAA6C,GACrD,aAAa,CAAC,8BAA8B,CAAC,CAW/C"}

package/dist/v2/userServiceVerifyTOTPRegistration.js

@@ -9,10 +9,7 @@ import { UserService } from "./userService.js";
 export async function userServiceVerifyTOTPRegistration(options = {}) {
     const op = "userServiceVerifyTOTPRegistration";
     return endpointCall({
-        baseUrl: options.baseUrl,
-        config: options.config,
-        env: options.env,
-        envFile: options.envFile,
+        ...options,
         invoke: (client, request) => client.verifyTOTPRegistration(request),
         operation: op,
         request: options.request ?? {},

package/dist/v2/userServiceVerifyTOTPRegistration.js.map

@@ -1 +1 @@
-{"version":3,"file":"userServiceVerifyTOTPRegistration.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyTOTPRegistration.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,mCAAmC,GAEpC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAc9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,UAAoD,EAAE;IAEtD,MAAM,EAAE,GAAG,mCAAmC,CAAA;IAC9C,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC;QACnE,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"userServiceVerifyTOTPRegistration.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyTOTPRegistration.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mCAAmC,GAEpC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,YAAY,EAA4B,MAAM,4BAA4B,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAQ9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,UAAoD,EAAE;IAEtD,MAAM,EAAE,GAAG,mCAAmC,CAAA;IAC9C,OAAO,YAAY,CAAC;QAClB,GAAG,OAAO;QACV,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC;QACnE,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}

package/dist/v2/userServiceVerifyU2FRegistration.d.ts

@@ -1,17 +1,10 @@
 import type { MessageInitShape } from "@bufbuild/protobuf";
-import type { Transport } from "@connectrpc/connect";
 import type { PromiseResult } from "#result";
-import type { ZitadelConfig } from "../config/zitadelConfig.js";
 import { VerifyU2FRegistrationRequestSchema, type VerifyU2FRegistrationResponse } from "../generated/zitadel/user/v2/user_service_pb.js";
+import { type EndpointCallOptions } from "./internal/endpointCall.js";
 export type UserServiceVerifyU2FRegistrationRequest = MessageInitShape<typeof VerifyU2FRegistrationRequestSchema>;
-export type UserServiceVerifyU2FRegistrationOptions = {
-    readonly baseUrl?: string;
-    readonly config?: ZitadelConfig;
-    readonly env?: Readonly<Record<string, string | undefined>>;
-    readonly envFile?: string;
+export type UserServiceVerifyU2FRegistrationOptions = EndpointCallOptions & {
     readonly request?: UserServiceVerifyU2FRegistrationRequest;
-    readonly token?: string;
-    readonly transport?: Transport;
 };
 /**
  * Verifies a U2F registration for a user.

package/dist/v2/userServiceVerifyU2FRegistration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userServiceVerifyU2FRegistration.d.ts","sourceRoot":"","sources":["../../src/v2/userServiceVerifyU2FRegistration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EACL,kCAAkC,EAClC,KAAK,6BAA6B,EACnC,MAAM,iDAAiD,CAAA;AAIxD,MAAM,MAAM,uCAAuC,GAAG,gBAAgB,CAAC,OAAO,kCAAkC,CAAC,CAAA;AAEjH,MAAM,MAAM,uCAAuC,GAAG;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,uCAAuC,CAAA;IAC1D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAC/B,CAAA;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,GAAE,uCAA4C,GACpD,aAAa,CAAC,6BAA6B,CAAC,CAc9C"}
+{"version":3,"file":"userServiceVerifyU2FRegistration.d.ts","sourceRoot":"","sources":["../../src/v2/userServiceVerifyU2FRegistration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EACL,kCAAkC,EAClC,KAAK,6BAA6B,EACnC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAGnF,MAAM,MAAM,uCAAuC,GAAG,gBAAgB,CAAC,OAAO,kCAAkC,CAAC,CAAA;AAEjH,MAAM,MAAM,uCAAuC,GAAG,mBAAmB,GAAG;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,uCAAuC,CAAA;CAC3D,CAAA;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,GAAE,uCAA4C,GACpD,aAAa,CAAC,6BAA6B,CAAC,CAW9C"}

package/dist/v2/userServiceVerifyU2FRegistration.js

@@ -9,10 +9,7 @@ import { UserService } from "./userService.js";
 export async function userServiceVerifyU2FRegistration(options = {}) {
     const op = "userServiceVerifyU2FRegistration";
     return endpointCall({
-        baseUrl: options.baseUrl,
-        config: options.config,
-        env: options.env,
-        envFile: options.envFile,
+        ...options,
         invoke: (client, request) => client.verifyU2FRegistration(request),
         operation: op,
         request: options.request ?? {},

package/dist/v2/userServiceVerifyU2FRegistration.js.map

@@ -1 +1 @@
-{"version":3,"file":"userServiceVerifyU2FRegistration.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyU2FRegistration.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,kCAAkC,GAEnC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAc9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAAmD,EAAE;IAErD,MAAM,EAAE,GAAG,kCAAkC,CAAA;IAC7C,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC;QAClE,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"userServiceVerifyU2FRegistration.js","sourceRoot":"","sources":["../../src/v2/userServiceVerifyU2FRegistration.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kCAAkC,GAEnC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,YAAY,EAA4B,MAAM,4BAA4B,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAQ9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAAmD,EAAE;IAErD,MAAM,EAAE,GAAG,kCAAkC,CAAA;IAC7C,OAAO,YAAY,CAAC;QAClB,GAAG,OAAO;QACV,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC;QAClE,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC"}

package/docs/central-configuration-and-user-access.md

@@ -0,0 +1,249 @@
+# Central configuration and user access
+
+Central configuration lets one Linux user keep ZITADEL organizations, projects, bearer tokens, and shared test
+identities in one place. The CLI reads these files locally; credential lookup does not make a network request.
+
+## File layout
+
+The root is `$XDG_CONFIG_HOME/zitadel-cli`. If `XDG_CONFIG_HOME` is unset or empty, the root is
+`$HOME/.config/zitadel-cli` (using the operating-system home directory when `HOME` is also unavailable).
+
+```text
+$XDG_CONFIG_HOME/zitadel-cli/
+├── config.json
+├── credentials/
+│   └── contentoren.json
+└── projects/
+    └── application.json
+```
+
+The names `contentoren` and `application` are examples. Names used for profile and project files must be safe file
+names (`A-Z`, `a-z`, digits, `.`, `_`, and `-`; they must start with a letter or digit).
+
+`config.json` contains the default profile and the organization-level profile settings:
+
+```json
+{
+  "defaultProfile": "contentoren",
+  "profiles": {
+    "contentoren": {
+      "baseUrl": "https://instance.zitadel.cloud",
+      "organizationId": "123456789012345678"
+    }
+  }
+}
+```
+
+`credentials/{profile}.json` contains the bearer token and shared test users directly. It has no profile or
+ZITADEL wrapper:
+
+```json
+{
+  "token": "replace-with-a-bearer-token",
+  "testUsers": {
+    "admin": {
+      "userId": "234567890123456789",
+      "username": "admin@example.test",
+      "password": "replace-with-the-test-password"
+    }
+  }
+}
+```
+
+Credential files must be private: create them with mode `0600` and do not commit them. The loader rejects files with
+any group or other permission bits (for example, `0640` and `0644`). Errors for invalid or unreadable files do not
+include file contents, passwords, or bearer tokens. The token is used for API commands but is never printed by
+ordinary CLI diagnostics or by `credentials get`.
+
+`projects/{project-name}.json` is flat and contains the profile to use and the ZITADEL project ID:
+
+```json
+{
+  "profile": "contentoren",
+  "projectId": "345678901234567890"
+}
+```
+
+No project-local `.env` or extra project configuration file is required.
+
+## Selection and precedence
+
+API commands and `users grants` accept the following central configuration flags:
+
+```text
+--base-url URL
+--organization-id ID
+--project-id ID
+--token TOKEN
+--project NAME
+--profile NAME
+--env-file PATH
+```
+
+The corresponding process/environment-file variables are `ZITADEL_BASE_URL`, `ZITADEL_ORGANIZATION_ID`,
+`ZITADEL_PROJECT_ID`, `ZITADEL_TOKEN`, `ZITADEL_PROJECT`, and `ZITADEL_PROFILE`. `--env-file` is explicit; the CLI
+does not load `.env` implicitly. The same names are accepted by library options as `baseUrl`, `organizationId`,
+`projectId`, `token`, `project`, `profile`, `envFile`, and `env`.
+
+Values resolve in this order, from highest to lowest priority:
+
+1. Explicit CLI flags or library options.
+2. The process environment (`env` supplied to a library call, or `process.env` by default).
+3. Values from the explicitly supplied env file.
+4. The selected project file (`projects/{name}.json`).
+5. The selected profile in `config.json`.
+6. Defaults: `defaultProfile` selects the profile when no profile is otherwise selected; list commands use `limit=100`,
+   `offset=0`, and ascending order.
+
+`--project NAME` / `ZITADEL_PROJECT` select a project file. That file selects its profile unless an explicit
+`--profile NAME`, `profile` option, `ZITADEL_PROFILE`, or env-file `ZITADEL_PROFILE` wins. An explicit profile always
+overrides the selected project's profile. Project and profile selection are independent of explicit base URL,
+organization ID, project ID, and token overrides.
+
+For example, this uses the project ID from the project file but overrides its profile and token:
+
+```sh
+zitadel-cli users grants list \
+  --project application \
+  --profile contentoren \
+  --token "$ZITADEL_TOKEN" \
+  --user-id 234567890123456789
+```
+
+The existing explicit library configuration behavior is preserved. Passing `config: { baseUrl, token, ... }` to a
+library operation validates and uses that object directly; it does not read env files or central files. API commands
+without a complete explicit/central configuration return a diagnostic for the missing required base URL or token and
+do not contact the network.
+
+## Local credential lookup
+
+Use a test-user alias from the selected profile, project, or default profile:
+
+```sh
+zitadel-cli credentials get admin --field username
+zitadel-cli credentials get admin --field password --project application
+zitadel-cli credentials get admin --field userId --profile contentoren
+zitadel-cli credentials get admin --output json
+```
+
+`--field` accepts exactly `username`, `password`, or `userId` and writes only the raw value. `--output json` writes
+the selected user's complete `{ password, userId, username }` entry; it does not write the profile token. Use one
+of `--field` or `--output json`. Missing profiles, users, fields, invalid JSON, invalid credential shapes, and
+non-private files fail with a non-zero exit status and a diagnostic that does not disclose secret values.
+
+The equivalent public loaders return `PromiseResult` values and are exported from both the package root and
+`@adaptive-ds/zitadel-cli/config`:
+
+```ts
+import {
+  centralConfigRead,
+  credentialsConfigRead,
+  profileConfigRead,
+  projectConfigRead,
+  testUserIdResolve,
+  zitadelConfigCreate,
+  zitadelConfigResolve,
+} from "@adaptive-ds/zitadel-cli/config"
+
+const selection = { project: "application", envFile: ".env.test" }
+const resolved = await zitadelConfigResolve(selection)
+const apiConfig = await zitadelConfigCreate(selection)
+const credentials = await credentialsConfigRead(selection)
+const profile = await profileConfigRead({ profile: "contentoren" })
+const project = await projectConfigRead({ project: "application" })
+const central = await centralConfigRead()
+const userId = await testUserIdResolve({ ...selection, user: "admin" })
+```
+
+Each result must be checked for `success` before reading `data`. The public declarations also include the typed
+schemas and options (`CentralConfig`, `ProfileConfig`, `ProjectConfig`, `CredentialsConfig`, `TestUser`,
+`ZitadelConfig`, `ZitadelConfigResolution`, and their loader option types), `zitadelConfigPaths`,
+`zitadelConfigPath`, and `configJsonFileRead`.
+
+## Shared users and project grants
+
+Test users are shared human identities belonging to an organization. A test administrator is not an organization
+administrator. Project roles and user-project assignments belong to individual projects, so the same user alias can
+have different role assignments in different projects.
+
+The alias passed to `--user` is resolved locally to its `userId` from the selected credentials. Use `--user-id` to
+bypass credential lookup. They are mutually exclusive:
+
+```sh
+zitadel-cli users grants add \
+  --user admin \
+  --project application \
+  --role-key reader \
+  --role-key writer
+
+zitadel-cli users grants list --project application --user admin
+zitadel-cli users grants list --project-id 345678901234567890 --user-id 234567890123456789
+```
+
+`--role-key` and `--role-keys` may be repeated or supplied as comma-separated values. Structured commands use these
+forms:
+
+```text
+users grants add     --user ALIAS|--user-id ID --project NAME|--project-id ID --role-key ROLE [...]
+users grants list    [--user ALIAS|--user-id ID] [--project NAME|--project-id ID] [--limit N] [--offset N]
+users grants update  --grant-id ID --user ALIAS|--user-id ID --role-key ROLE [...]
+users grants remove  --grant-id ID --user ALIAS|--user-id ID
+```
+
+All four commands also accept `--base-url`, `--organization-id`, `--project-id`, `--token`, `--profile`,
+`--project`, `--env-file`, and `--output json|yaml` as applicable. Add, list, and update accept either
+`--request-json JSON` or `--request-file PATH` for a complete raw Management v1 request, never both. Raw add/update
+requests cannot be combined with role flags; raw list requests cannot be combined with user or project selection
+flags. This preserves explicit request compatibility for callers that need the exact protobuf JSON shape.
+
+Assignment semantics are deliberate:
+
+- `add` creates an assignment with the supplied `projectId` and role keys.
+- `update` replaces the complete assignment role-key set; it does not add one role. To remove one role, update with
+  the remaining role keys.
+- `list` sends a Management v1 search request. Structured filters use protobuf JSON entries such as
+  `queries: [{ "projectIdQuery": { "projectId": "..." } }, { "userIdQuery": { "userId": "..." } }]` and
+  `query: { "asc": true, "limit": 100, "offset": 0 }`.
+- `remove` deletes the entire assignment. It sends `DELETE /management/v1/users/{userId}/grants/{grantId}` with
+  path components URL-encoded; it does not remove only one role.
+
+The corresponding typed library APIs are exported from `@adaptive-ds/zitadel-cli/legacy_v1` (and the individual
+user-grant modules). Their exported option/request types are `UserGrantServiceAddUserGrantOptions`,
+`UserGrantServiceAddUserGrantRequest`, `UserGrantServiceListUserGrantsOptions`,
+`UserGrantServiceListUserGrantsRequest`, `UserGrantServiceListUserGrantsResponse`, `UserGrantSearchQuery`,
+`UserGrant`, `UserGrantState`, `UserGrantServiceUpdateUserGrantOptions`, and
+`UserGrantServiceUpdateUserGrantRequest` (plus `UserGrantServiceDeleteUserGrantOptions`):
+
+```ts
+import {
+  userGrantServiceAddUserGrant,
+  userGrantServiceDeleteUserGrant,
+  userGrantServiceListUserGrants,
+  userGrantServiceUpdateUserGrant,
+} from "@adaptive-ds/zitadel-cli/legacy_v1"
+
+const common = { baseUrl, token, organizationId, userId: "234567890123456789" }
+await userGrantServiceAddUserGrant({
+  ...common,
+  request: { projectId: "345678901234567890", roleKeys: ["reader"] },
+})
+await userGrantServiceListUserGrants({
+  baseUrl,
+  token,
+  organizationId,
+  request: {
+    queries: [{ projectIdQuery: { projectId: "345678901234567890" } }],
+    query: { asc: true, limit: 100, offset: 0 },
+  },
+})
+await userGrantServiceUpdateUserGrant({
+  ...common,
+  grantId: "grant-id",
+  request: { roleKeys: ["reader", "writer"] },
+})
+await userGrantServiceDeleteUserGrant({ ...common, grantId: "grant-id" })
+```
+
+These adapters use the stable available Management v1 endpoints; the inspected upstream checkout does not provide a
+stable v2 authorization service definition. They return `PromiseResult` values and do not create identities, reset
+passwords, open a browser, or enforce application authorization.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adaptive-ds/zitadel-cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Typed ZITADEL v4.17.1+ API client and CLI for stable APIs, OIDC/OAuth, and isolated legacy IDP operations.",
   "keywords": [
     "zitadel",