@adonis-agora/authkit-react 0.12.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Davi de Carvalho
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,146 @@
+# @adonis-agora/authkit-react
+
+Ergonomia de frontend sobre o AuthKit para apps **AdonisJS + Inertia + React**:
+um `useAuth()` tipado, helpers de papéis e componentes de gating.
+
+Este pacote **não** faz autenticação — ele consome o estado de auth que o host
+AdonisJS já resolveu (via `@adonis-agora/authkit-client`) e compartilhou como
+uma shared-prop do Inertia.
+
+## Instalação
+
+```bash
+pnpm add @adonis-agora/authkit-react
+```
+
+`react`, `react-dom` e `@inertiajs/react` são **peer dependencies** (o app os fornece).
+
+## 1. No host AdonisJS: compartilhar a prop `authkit`
+
+A shared-prop tem o formato `AuthSharedProps`. Use `auth.getUser()` /
+`auth.identity` do `@adonis-agora/authkit-client` para preenchê-la — tipicamente
+num middleware ou no `config/inertia.ts` (`sharedData`):
+
+```ts
+// config/inertia.ts
+import { defineConfig } from '@adonisjs/inertia'
+
+export default defineConfig({
+  sharedData: {
+    authkit: async (ctx) => {
+      const auth = ctx.authkit // sua instância do Authenticator
+      const user = await auth.getUser() // mesmo shape de identityToUser/resolveUser
+      return {
+        user: user ?? null,
+        globalRoles: auth.identity?.globalRoles ?? [],
+        // appRoles opcional, se o host resolver papéis de app
+      }
+    },
+  },
+})
+```
+
+O objeto `user` deve corresponder ao tipo `AuthUser`:
+`{ id, email, name?, avatarUrl?, globalRoles, appRoles? }` — exatamente a saída de
+`identityToUser`/`resolveUser` do client.
+
+## 2. No frontend: `useAuth()`
+
+```tsx
+import { useAuth } from '@adonis-agora/authkit-react'
+
+function Header() {
+  const { user, isAuthenticated, hasGlobalRole } = useAuth()
+
+  if (!isAuthenticated) return <a href="/login">Entrar</a>
+
+  return (
+    <div>
+      Olá, {user!.name ?? user!.email}
+      {hasGlobalRole('ADMIN') && <a href="/admin">Admin</a>}
+    </div>
+  )
+}
+```
+
+`useAuth()` nunca lança quando a prop está ausente: retorna estado
+não-autenticado (`user: null`, listas vazias).
+
+## 3. Componentes de gating
+
+```tsx
+import { Authenticated, Guest, Can } from '@adonis-agora/authkit-react'
+
+<Authenticated fallback={<LoginButton />}>
+  <Dashboard />
+</Authenticated>
+
+<Guest>
+  <MarketingBanner />
+</Guest>
+
+{/* papel global único */}
+<Can role="ADMIN">
+  <AdminPanel />
+</Can>
+
+{/* exige todos os papéis */}
+<Can roles={['ADMIN', 'BILLING']} mode="all" fallback={<NoAccess />}>
+  <BillingSettings />
+</Can>
+
+{/* papel específico do app */}
+<Can role="EDITOR" appRole>
+  <EditButton />
+</Can>
+```
+
+## 4. `AuthProvider` (opcional)
+
+Fora do Inertia (testes, Storybook), injete o valor manualmente. O contexto tem
+precedência sobre as page props quando presente:
+
+```tsx
+import { AuthProvider } from '@adonis-agora/authkit-react'
+
+<AuthProvider value={{ user, globalRoles: user.globalRoles }}>
+  <App />
+</AuthProvider>
+```
+
+## 5. Config + componentes prontos
+
+Envolva a app com `<AuthkitProvider>` para configurar URLs/endpoints e use os
+hooks headless e componentes prontos:
+
+```tsx
+import '@adonis-agora/authkit-react/styles.css'
+import {
+  AuthkitProvider,
+  useSignIn, useSignOut, useUser, useProfile, useSessions, useAuthorizedApps,
+  SignInButton, SignOutButton, UserButton, UserProfile, AuthorizedApps,
+} from '@adonis-agora/authkit-react'
+
+<AuthkitProvider config={{ csrfToken: page.props.csrfToken }}>
+  <UserButton />
+  <UserProfile />
+  <AuthorizedApps />
+</AuthkitProvider>
+```
+
+Defaults dos endpoints apontam para as rotas reais do host-kit
+(`/auth/login`, `/account/logout`, `/account/security`, `/account/security/profile`,
+`/account/apps`, …). Numa topologia de *client app*, aponte-os para rotas locais que
+redirecionam para o IdP. Temável via CSS vars `--authkit-*`. Veja a
+[doc de React](https://...) para detalhes.
+
+## Helpers puros
+
+Para uso fora de componentes, as funções de papéis são exportadas e livres de React:
+
+```ts
+import { hasGlobalRole, hasAnyGlobalRole, hasAllGlobalRoles, hasAppRole } from '@adonis-agora/authkit-react'
+
+hasGlobalRole(user, 'ADMIN')
+hasAnyGlobalRole(user, ['ADMIN', 'TEACHER'])
+```

package/build/index.d.ts

@@ -0,0 +1,68 @@
+export { useAuth } from './src/use_auth.js';
+export { AuthProvider, AuthContext } from './src/provider.js';
+export type { AuthProviderProps } from './src/provider.js';
+export { AuthkitProvider } from './src/authkit_provider.js';
+export type { AuthkitProviderProps } from './src/authkit_provider.js';
+export { AuthkitConfigContext, useAuthkitConfig, resolveConfig, buildAuthUrl, DEFAULT_CONFIG, } from './src/config.js';
+export type { AuthkitConfig, ResolvedAuthkitConfig, AuthkitEndpoints, AuthkitIdpMode, } from './src/config.js';
+export { useSignIn } from './src/hooks/use_sign_in.js';
+export type { SignInOptions } from './src/hooks/use_sign_in.js';
+export { useSignOut } from './src/hooks/use_sign_out.js';
+export type { SignOutOptions } from './src/hooks/use_sign_out.js';
+export { useUser } from './src/hooks/use_user.js';
+export type { UseUserResult } from './src/hooks/use_user.js';
+export { useProfile } from './src/hooks/use_profile.js';
+export type { UseProfileResult, ProfileUpdate } from './src/hooks/use_profile.js';
+export { useSessions } from './src/hooks/use_sessions.js';
+export type { UseSessionsResult, AuthSession } from './src/hooks/use_sessions.js';
+export { useAuthorizedApps } from './src/hooks/use_authorized_apps.js';
+export type { UseAuthorizedAppsResult, AuthorizedApp } from './src/hooks/use_authorized_apps.js';
+export { useOrganizations } from './src/hooks/use_organizations.js';
+export type { UseOrganizationsResult, OrgEntry } from './src/hooks/use_organizations.js';
+export { useOrganization } from './src/hooks/use_organization.js';
+export type { UseOrganizationResult, ActiveOrgDetail, OrgMemberEntry } from './src/hooks/use_organization.js';
+export { useSwitchOrganization } from './src/hooks/use_switch_organization.js';
+export type { UseSwitchOrganizationResult } from './src/hooks/use_switch_organization.js';
+export { useOrgInvitations } from './src/hooks/use_org_invitations.js';
+export type { UseOrgInvitationsResult, OrgInvitationEntry } from './src/hooks/use_org_invitations.js';
+export { jsonRequest, useResource } from './src/hooks/use_resource.js';
+export type { ResourceState } from './src/hooks/use_resource.js';
+export { usePasskeyAutofill } from './src/hooks/use_passkey_autofill.js';
+export type { UsePasskeyAutofillOptions } from './src/hooks/use_passkey_autofill.js';
+export { usePasswordStrength, heuristicScorer, } from './src/hooks/use_password_strength.js';
+export type { PasswordStrengthScore, PasswordStrengthResult, PasswordScorer, UsePasswordStrengthOptions, } from './src/hooks/use_password_strength.js';
+export { deriveInitials, currentUrl } from './src/utils.js';
+export { Authenticated, Guest } from './src/components/authenticated.js';
+export type { AuthenticatedProps, GuestProps } from './src/components/authenticated.js';
+export { Can } from './src/components/can.js';
+export type { CanProps } from './src/components/can.js';
+export { SignInButton } from './src/components/sign_in_button.js';
+export type { SignInButtonProps } from './src/components/sign_in_button.js';
+export { SignOutButton } from './src/components/sign_out_button.js';
+export type { SignOutButtonProps } from './src/components/sign_out_button.js';
+export { Avatar } from './src/components/avatar.js';
+export type { AvatarProps } from './src/components/avatar.js';
+export { UserButton } from './src/components/user_button.js';
+export type { UserButtonProps } from './src/components/user_button.js';
+export { UserProfile } from './src/components/user_profile.js';
+export type { UserProfileProps } from './src/components/user_profile.js';
+export { AuthorizedApps } from './src/components/authorized_apps.js';
+export type { AuthorizedAppsProps } from './src/components/authorized_apps.js';
+export { PasswordStrengthMeter } from './src/components/password_strength_meter.js';
+export type { PasswordStrengthMeterProps } from './src/components/password_strength_meter.js';
+export { OrganizationSwitcher } from './src/components/organization_switcher.js';
+export type { OrganizationSwitcherProps } from './src/components/organization_switcher.js';
+export { OrganizationProfile } from './src/components/organization_profile.js';
+export type { OrganizationProfileProps } from './src/components/organization_profile.js';
+export { KeyRotation } from './src/components/key_rotation.js';
+export type { KeyRotationProps } from './src/components/key_rotation.js';
+export { hasGlobalRole, hasAnyGlobalRole, hasAllGlobalRoles, hasAppRole, hasAnyAppRole, hasAllAppRoles, } from './src/roles.js';
+export type { AuthUser, AuthSharedProps, AuthState } from './src/types.js';
+export { createAuthkitClient, AuthkitClientError } from './src/client/client.js';
+export type { AuthkitClient, AuthkitClientOptions } from './src/client/client.js';
+export type { AdminUser, AdminUserListResult, CreateUserInput, UpdateUserInput, UserSessionsResult, RevokeSessionsResult, AdminSessionEntry, AdminGrantEntry, AdminClient, AdminClientListResult, CreatedClientResult, RegenerateSecretResult, CreateClientInput, UpdateClientInput, RoleCatalogEntry, RoleListResult, CreateRoleInput, UpdateRoleInput, AdminOrgEntry, AdminOrgMember, AdminOrgInvitation, AdminOrgDetail, AdminOrgListResult, CreateOrgInput, UpdateOrgInput, AuditEventEntry, AuditListResult, AuditListParams, SettingEntry, SettingListResult, ImpersonationPanel, DailyPoint, AdminOverview, AccountCapabilities, AccountMe, AccountSecurityOverview, AccountSessionEntry, AccountSessionsResult, RevokeSessionResult, RevokeOthersResult, RevokeAllResult, AccountAppEntry, AccountAppsResult, RevokeAppResult, PasskeySummaryEntry, AccountMfaStatus, AccountPasskeysResult, RemovePasskeyResult, PatEntry, CreatedPatResult, AccountTokensResult, CreateTokenInput, RevokeTokenResult, UpdateProfileInput, UpdateProfileResult, ChangePasswordInput, RequestEmailChangeInput, OkResult, EmailChangeResult, AccountOrgEntry, AccountOrgsResult, AccountOrgDetail, AccountOrgInvitationsResult, ApiErrorBody, KeysStatus, ManagedKeyInfo, KeysRotateInput, KeysRotateResult, } from './src/client/types.js';
+export { AuthkitClientProvider, useAuthkitClient, createAuthkitQueryClient, } from './src/client/context.js';
+export type { AuthkitClientProviderProps } from './src/client/context.js';
+export { authkitKeys } from './src/queries/keys.js';
+export { useOverviewQueryOptions, useUsersQueryOptions, useUserQueryOptions, useUserSessionsQueryOptions, useCreateUserMutationOptions, useUpdateUserMutationOptions, useDisableUserMutationOptions, useEnableUserMutationOptions, useResetPasswordMutationOptions, useDeleteUserMutationOptions, useRevokeUserSessionsMutationOptions, useSessionsQueryOptions, useRevokeAllSessionsMutationOptions, useClientsQueryOptions, useClientQueryOptions, useCreateClientMutationOptions, useUpdateClientMutationOptions, useDeleteClientMutationOptions, useRegenerateClientSecretMutationOptions, useRolesQueryOptions, useCreateRoleMutationOptions, useUpdateRoleMutationOptions, useDeleteRoleMutationOptions, useOrgsQueryOptions, useOrgQueryOptions, useCreateOrgMutationOptions, useUpdateOrgMutationOptions, useDeleteOrgMutationOptions, useAddOrgMemberMutationOptions, useRemoveOrgMemberMutationOptions, useUpdateOrgMemberRoleMutationOptions, useCreateOrgInvitationMutationOptions, useRevokeOrgInvitationMutationOptions, useAuditQueryOptions, useSettingsQueryOptions, useSetSettingMutationOptions, useRemoveSettingMutationOptions, useImpersonationQueryOptions, useKeysQueryOptions, useRotateKeysMutationOptions, } from './src/queries/admin/index.js';
+export { useMeQueryOptions, useSecurityQueryOptions, useUpdateProfileMutationOptions, useChangePasswordMutationOptions, useEmailChangeMutationOptions, useCancelEmailChangeMutationOptions, useAccountSessionsQueryOptions, useRevokeSessionMutationOptions, useRevokeOtherSessionsMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAppsQueryOptions, useRevokeAppMutationOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRemovePasskeyMutationOptions, useTokensQueryOptions, useCreateTokenMutationOptions, useRevokeTokenMutationOptions, useAccountOrgsQueryOptions, useAccountOrgQueryOptions, useAccountOrgInvitationsQueryOptions, } from './src/queries/account/index.js';

package/build/index.js

@@ -0,0 +1,36 @@
+export { useAuth } from './src/use_auth.js';
+export { AuthProvider, AuthContext } from './src/provider.js';
+export { AuthkitProvider } from './src/authkit_provider.js';
+export { AuthkitConfigContext, useAuthkitConfig, resolveConfig, buildAuthUrl, DEFAULT_CONFIG, } from './src/config.js';
+export { useSignIn } from './src/hooks/use_sign_in.js';
+export { useSignOut } from './src/hooks/use_sign_out.js';
+export { useUser } from './src/hooks/use_user.js';
+export { useProfile } from './src/hooks/use_profile.js';
+export { useSessions } from './src/hooks/use_sessions.js';
+export { useAuthorizedApps } from './src/hooks/use_authorized_apps.js';
+export { useOrganizations } from './src/hooks/use_organizations.js';
+export { useOrganization } from './src/hooks/use_organization.js';
+export { useSwitchOrganization } from './src/hooks/use_switch_organization.js';
+export { useOrgInvitations } from './src/hooks/use_org_invitations.js';
+export { jsonRequest, useResource } from './src/hooks/use_resource.js';
+export { usePasskeyAutofill } from './src/hooks/use_passkey_autofill.js';
+export { usePasswordStrength, heuristicScorer, } from './src/hooks/use_password_strength.js';
+export { deriveInitials, currentUrl } from './src/utils.js';
+export { Authenticated, Guest } from './src/components/authenticated.js';
+export { Can } from './src/components/can.js';
+export { SignInButton } from './src/components/sign_in_button.js';
+export { SignOutButton } from './src/components/sign_out_button.js';
+export { Avatar } from './src/components/avatar.js';
+export { UserButton } from './src/components/user_button.js';
+export { UserProfile } from './src/components/user_profile.js';
+export { AuthorizedApps } from './src/components/authorized_apps.js';
+export { PasswordStrengthMeter } from './src/components/password_strength_meter.js';
+export { OrganizationSwitcher } from './src/components/organization_switcher.js';
+export { OrganizationProfile } from './src/components/organization_profile.js';
+export { KeyRotation } from './src/components/key_rotation.js';
+export { hasGlobalRole, hasAnyGlobalRole, hasAllGlobalRoles, hasAppRole, hasAnyAppRole, hasAllAppRoles, } from './src/roles.js';
+export { createAuthkitClient, AuthkitClientError } from './src/client/client.js';
+export { AuthkitClientProvider, useAuthkitClient, createAuthkitQueryClient, } from './src/client/context.js';
+export { authkitKeys } from './src/queries/keys.js';
+export { useOverviewQueryOptions, useUsersQueryOptions, useUserQueryOptions, useUserSessionsQueryOptions, useCreateUserMutationOptions, useUpdateUserMutationOptions, useDisableUserMutationOptions, useEnableUserMutationOptions, useResetPasswordMutationOptions, useDeleteUserMutationOptions, useRevokeUserSessionsMutationOptions, useSessionsQueryOptions, useRevokeAllSessionsMutationOptions, useClientsQueryOptions, useClientQueryOptions, useCreateClientMutationOptions, useUpdateClientMutationOptions, useDeleteClientMutationOptions, useRegenerateClientSecretMutationOptions, useRolesQueryOptions, useCreateRoleMutationOptions, useUpdateRoleMutationOptions, useDeleteRoleMutationOptions, useOrgsQueryOptions, useOrgQueryOptions, useCreateOrgMutationOptions, useUpdateOrgMutationOptions, useDeleteOrgMutationOptions, useAddOrgMemberMutationOptions, useRemoveOrgMemberMutationOptions, useUpdateOrgMemberRoleMutationOptions, useCreateOrgInvitationMutationOptions, useRevokeOrgInvitationMutationOptions, useAuditQueryOptions, useSettingsQueryOptions, useSetSettingMutationOptions, useRemoveSettingMutationOptions, useImpersonationQueryOptions, useKeysQueryOptions, useRotateKeysMutationOptions, } from './src/queries/admin/index.js';
+export { useMeQueryOptions, useSecurityQueryOptions, useUpdateProfileMutationOptions, useChangePasswordMutationOptions, useEmailChangeMutationOptions, useCancelEmailChangeMutationOptions, useAccountSessionsQueryOptions, useRevokeSessionMutationOptions, useRevokeOtherSessionsMutationOptions, useAccountRevokeAllSessionsMutationOptions, useAppsQueryOptions, useRevokeAppMutationOptions, useMfaQueryOptions, usePasskeysQueryOptions, useRemovePasskeyMutationOptions, useTokensQueryOptions, useCreateTokenMutationOptions, useRevokeTokenMutationOptions, useAccountOrgsQueryOptions, useAccountOrgQueryOptions, useAccountOrgInvitationsQueryOptions, } from './src/queries/account/index.js';

package/build/src/authkit_provider.d.ts

@@ -0,0 +1,13 @@
+import { type ReactNode } from 'react';
+import { type AuthkitConfig } from './config.js';
+import type { AuthSharedProps } from './types.js';
+export interface AuthkitProviderProps {
+    config?: AuthkitConfig;
+    value?: AuthSharedProps['authkit'];
+    children: ReactNode;
+}
+export declare function AuthkitProvider({ config, value, children }: AuthkitProviderProps): import("react").FunctionComponentElement<import("react").ProviderProps<{
+    user: import("./types.js").AuthUser | null;
+    globalRoles: string[];
+    appRoles?: string[];
+} | undefined>> | import("react").FunctionComponentElement<import("react").ProviderProps<import("./config.js").ResolvedAuthkitConfig>>;

package/build/src/authkit_provider.js

@@ -0,0 +1,11 @@
+import { createElement } from 'react';
+import { AuthContext } from './provider.js';
+import { AuthkitConfigContext, resolveConfig } from './config.js';
+export function AuthkitProvider({ config, value, children }) {
+    const resolved = resolveConfig(config);
+    const tree = createElement(AuthkitConfigContext.Provider, { value: resolved }, children);
+    if (value !== undefined) {
+        return createElement(AuthContext.Provider, { value }, tree);
+    }
+    return tree;
+}

package/build/src/client/client.d.ts

@@ -0,0 +1,172 @@
+import type { AdminOverview, AdminUser, AdminUserListResult, CreateUserInput, UpdateUserInput, UserSessionsResult, RevokeSessionsResult, AdminClientListResult, AdminClient, CreatedClientResult, RegenerateSecretResult, CreateClientInput, UpdateClientInput, RoleListResult, RoleCatalogEntry, CreateRoleInput, UpdateRoleInput, AdminOrgListResult, AdminOrgDetail, AdminOrgInvitation, AuditListResult, AuditListParams, SettingListResult, SettingEntry, ImpersonationPanel, KeysStatus, KeysRotateInput, KeysRotateResult, AccountMe, AccountSecurityOverview, UpdateProfileInput, UpdateProfileResult, ChangePasswordInput, RequestEmailChangeInput, OkResult, EmailChangeResult, AccountSessionsResult, RevokeSessionResult, RevokeOthersResult, RevokeAllResult, AccountAppsResult, RevokeAppResult, AccountMfaStatus, AccountPasskeysResult, RemovePasskeyResult, AccountTokensResult, CreatedPatResult, RevokeTokenResult, CreateTokenInput, AccountOrgsResult, AccountOrgDetail, AccountOrgInvitationsResult, AdminOrgEntry, CreateOrgInput, UpdateOrgInput } from './types.js';
+export declare class AuthkitClientError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    readonly body?: unknown | undefined;
+    constructor(status: number, message: string, code?: string | undefined, body?: unknown | undefined);
+    readonly isUnauthorized: boolean;
+}
+export interface AuthkitClientOptions {
+    baseUrl?: string;
+    accountBaseUrl?: string;
+    csrfToken?: string;
+    fetch?: typeof fetch;
+}
+declare class AuthkitClient {
+    private readonly _baseUrl;
+    private readonly _accountBaseUrl;
+    private readonly _csrfToken;
+    private readonly _fetch;
+    constructor(opts?: AuthkitClientOptions);
+    request<T>(method: string, url: string, body?: unknown, extraHeaders?: Record<string, string>): Promise<T>;
+    private get;
+    private post;
+    private patch;
+    private put;
+    private delete;
+    private b;
+    private a;
+    readonly admin: {
+        readonly overview: () => Promise<AdminOverview>;
+        readonly users: {
+            readonly list: (params?: {
+                search?: string;
+                page?: number;
+                limit?: number;
+            }) => Promise<AdminUserListResult>;
+            readonly get: (id: string) => Promise<AdminUser>;
+            readonly create: (data: CreateUserInput) => Promise<AdminUser & {
+                invited?: boolean;
+            }>;
+            readonly update: (id: string, data: UpdateUserInput) => Promise<AdminUser>;
+            readonly disable: (id: string) => Promise<{
+                id: string;
+                disabled: true;
+            }>;
+            readonly enable: (id: string) => Promise<{
+                id: string;
+                disabled: false;
+            }>;
+            readonly resetPassword: (id: string) => Promise<{
+                id: string;
+                sent: boolean;
+            }>;
+            readonly remove: (id: string) => Promise<{
+                id: string;
+                deleted: boolean;
+            }>;
+            readonly getSessions: (id: string) => Promise<UserSessionsResult>;
+            readonly revokeSessions: (id: string) => Promise<RevokeSessionsResult>;
+        };
+        readonly sessions: {
+            readonly list: (accountId?: string) => Promise<UserSessionsResult>;
+            readonly revokeAll: (accountId?: string) => Promise<RevokeSessionsResult>;
+        };
+        readonly clients: {
+            readonly list: () => Promise<AdminClientListResult>;
+            readonly get: (id: string) => Promise<AdminClient>;
+            readonly create: (data?: CreateClientInput) => Promise<CreatedClientResult>;
+            readonly update: (id: string, data?: UpdateClientInput) => Promise<AdminClient>;
+            readonly remove: (id: string) => Promise<{
+                clientId: string;
+                deleted: boolean;
+            }>;
+            readonly regenerateSecret: (id: string) => Promise<RegenerateSecretResult>;
+        };
+        readonly roles: {
+            readonly list: () => Promise<RoleListResult>;
+            readonly create: (data: CreateRoleInput) => Promise<RoleCatalogEntry>;
+            readonly update: (name: string, data: UpdateRoleInput) => Promise<RoleCatalogEntry>;
+            readonly remove: (name: string) => Promise<{
+                ok: boolean;
+                deleted: string;
+            }>;
+        };
+        readonly orgs: {
+            readonly list: () => Promise<AdminOrgListResult>;
+            readonly create: (data: CreateOrgInput) => Promise<AdminOrgEntry>;
+            readonly get: (id: string) => Promise<AdminOrgDetail>;
+            readonly update: (id: string, data: UpdateOrgInput) => Promise<AdminOrgEntry>;
+            readonly remove: (id: string) => Promise<{
+                id: string;
+                deleted: boolean;
+            }>;
+            readonly addMember: (orgId: string, data: {
+                accountId: string;
+                role: string;
+            }) => Promise<{
+                ok: boolean;
+            }>;
+            readonly removeMember: (orgId: string, accountId: string) => Promise<{
+                ok: boolean;
+            }>;
+            readonly updateMemberRole: (orgId: string, accountId: string, role: string) => Promise<{
+                ok: boolean;
+            }>;
+            readonly createInvitation: (orgId: string, data: {
+                email: string;
+                role: string;
+            }) => Promise<{
+                ok: boolean;
+                invitation: AdminOrgInvitation;
+            }>;
+            readonly revokeInvitation: (orgId: string, invitationId: string) => Promise<{
+                ok: boolean;
+            }>;
+        };
+        readonly audit: {
+            readonly list: (params?: AuditListParams) => Promise<AuditListResult>;
+        };
+        readonly settings: {
+            readonly list: (orgId?: string | null) => Promise<SettingListResult>;
+            readonly set: (key: string, value: unknown, orgId?: string | null) => Promise<SettingEntry>;
+            readonly remove: (key: string, orgId?: string | null) => Promise<{
+                key: string;
+                organizationId: string | null;
+                deleted: boolean;
+            }>;
+        };
+        readonly impersonation: {
+            readonly get: (userId: string) => Promise<ImpersonationPanel>;
+        };
+        readonly keys: {
+            readonly status: () => Promise<KeysStatus>;
+            readonly rotate: (input?: KeysRotateInput) => Promise<KeysRotateResult>;
+        };
+    };
+    readonly account: {
+        readonly me: () => Promise<AccountMe>;
+        readonly security: () => Promise<AccountSecurityOverview>;
+        readonly updateProfile: (data: UpdateProfileInput) => Promise<UpdateProfileResult>;
+        readonly changePassword: (data: ChangePasswordInput) => Promise<OkResult>;
+        readonly emailChange: (data: RequestEmailChangeInput) => Promise<EmailChangeResult>;
+        readonly cancelEmailChange: () => Promise<OkResult>;
+        readonly sessions: {
+            readonly list: () => Promise<AccountSessionsResult>;
+            readonly revoke: (id: string) => Promise<RevokeSessionResult>;
+            readonly revokeOthers: () => Promise<RevokeOthersResult>;
+            readonly revokeAll: () => Promise<RevokeAllResult>;
+        };
+        readonly apps: {
+            readonly list: () => Promise<AccountAppsResult>;
+            readonly revoke: (clientId: string) => Promise<RevokeAppResult>;
+        };
+        readonly mfa: () => Promise<AccountMfaStatus>;
+        readonly passkeys: {
+            readonly list: () => Promise<AccountPasskeysResult>;
+            readonly remove: (id: string) => Promise<RemovePasskeyResult>;
+        };
+        readonly tokens: {
+            readonly list: () => Promise<AccountTokensResult>;
+            readonly create: (data?: CreateTokenInput) => Promise<CreatedPatResult>;
+            readonly remove: (id: string) => Promise<RevokeTokenResult>;
+        };
+        readonly orgs: {
+            readonly list: () => Promise<AccountOrgsResult>;
+            readonly invitations: () => Promise<AccountOrgInvitationsResult>;
+            readonly get: (id: string) => Promise<AccountOrgDetail>;
+        };
+    };
+}
+export declare function createAuthkitClient(opts?: AuthkitClientOptions): AuthkitClient;
+export type { AuthkitClient };