@authsome/ui-core 1.0.0 → 1.2.0

package/dist/index.d.ts

@@ -10,7 +10,6 @@ interface AdminImpersonateRequest {
     UserID: string;
 }
 interface AdminStatsResponse {
-    total_organizations: number;
     total_users: number;
 }
 interface AdminStopImpersonationRequest {
@@ -23,12 +22,35 @@ interface AdminUserListResponse {
     total: number;
     users: User[];
 }
+interface AuthMethod {
+    label: string;
+    linked_at?: string;
+    provider: string;
+    type: string;
+}
 interface AuthResponse {
     expires_at: string;
     refresh_token: string;
     session_token: string;
     user: User;
 }
+interface BulkError {
+    email?: string;
+    error: string;
+    index: number;
+}
+interface BulkImportResult {
+    created: number;
+    errors?: BulkError[];
+    skipped: number;
+}
+interface BulkRevokeSessionsRequest {
+    UserID: string;
+}
+interface BulkRevokeSessionsResponse {
+    revoked: number;
+    user_id: string;
+}
 interface CallbackRequest {
     Provider: string;
     code: string;
@@ -50,6 +72,92 @@ interface ChallengeResponse {
     challenge_passed: boolean;
     method: string;
 }
+interface ClientConfigBranding {
+    app_name?: string;
+    logo_url?: string;
+}
+interface ClientConfigFieldValidation {
+    max?: number;
+    max_len?: number;
+    min?: number;
+    min_len?: number;
+    pattern?: string;
+    required?: boolean;
+}
+interface ClientConfigMFA {
+    enabled: boolean;
+    methods: string[];
+}
+interface ClientConfigResponse {
+    app_id: string;
+    branding?: ClientConfigBranding;
+    magiclink?: ClientConfigToggle;
+    mfa?: ClientConfigMFA;
+    passkey?: ClientConfigToggle;
+    password?: ClientConfigToggle;
+    signup_fields?: ClientConfigSignupField[];
+    social?: ClientConfigSocial;
+    sso?: ClientConfigSSO;
+    supported_plugins: string[];
+    version: string;
+}
+interface ClientConfigSSO {
+    connections: ClientConfigSSOConnection[];
+    enabled: boolean;
+}
+interface ClientConfigSSOConnection {
+    id: string;
+    name: string;
+}
+interface ClientConfigSelectOption {
+    label: string;
+    value: string;
+}
+interface ClientConfigSignupField {
+    default?: string;
+    description?: string;
+    key: string;
+    label: string;
+    options?: ClientConfigSelectOption[];
+    order: number;
+    placeholder?: string;
+    type: string;
+    validation?: ClientConfigFieldValidation;
+}
+interface ClientConfigSocial {
+    enabled: boolean;
+    providers: ClientConfigSocialProvider[];
+}
+interface ClientConfigSocialProvider {
+    id: string;
+    name: string;
+}
+interface ClientConfigToggle {
+    enabled: boolean;
+}
+interface CloneEnvironmentResponse {
+    environment: unknown;
+    permissions_cloned: number;
+    role_id_map: Record<string, unknown>;
+    roles_cloned: number;
+    webhooks_cloned: number;
+}
+interface Config {
+    app_id: string;
+    app_name?: string;
+    created_at: string;
+    id: string;
+    logo_url?: string;
+    magic_link_enabled?: boolean;
+    mfa_enabled?: boolean;
+    mfa_methods?: string[];
+    passkey_enabled?: boolean;
+    password_enabled?: boolean;
+    social_enabled?: boolean;
+    social_providers?: string[];
+    sso_enabled?: boolean;
+    updated_at: string;
+}
 interface CreateKeyRequest {
     app_id: string;
     name: string;
@@ -63,6 +171,8 @@ interface CreateKeyResponse {
     key: string;
     key_prefix: string;
     name: string;
+    public_key: string;
+    public_key_prefix: string;
     scopes?: string[];
 }
 interface CredentialInfo {
@@ -71,8 +181,32 @@ interface CredentialInfo {
     id: string;
     transport: string[];
 }
+interface Definition {
+    category: string;
+    default: string;
+    description: string;
+    display_name: string;
+    enforceable: boolean;
+    key: string;
+    namespace: string;
+    scopes: string[];
+    sensitive: boolean;
+    type: string;
+    ui?: UIMetadata;
+}
+interface DefinitionGroup {
+    category: string;
+    definitions: Definition[];
+    namespace: string;
+}
 interface DeleteAccountRequest {
 }
+interface DeleteAppClientConfigRequest {
+    AppID: string;
+}
+interface DeleteAppSessionConfigRequest {
+    AppID: string;
+}
 interface DeleteDeviceRequest {
     DeviceID: string;
 }
@@ -85,8 +219,10 @@ interface DeleteRequest {
 interface DeleteResponse {
     status: string;
 }
-interface DeleteRoleRequest {
-    RoleID: string;
+interface DeleteSettingRequest {
+    Key: string;
+    Scope: string;
+    ScopeID: string;
 }
 interface DeleteTeamRequest {
     OrgID: string;
@@ -96,19 +232,21 @@ interface DeleteWebhookRequest {
     WebhookID: string;
 }
 interface Device {
-    app_id: ID;
+    app_id: string;
     browser?: string;
     created_at: string;
+    env_id: string;
     fingerprint?: string;
-    id: ID;
+    id: string;
     ip_address?: string;
     last_seen_at: string;
     name?: string;
     os?: string;
     trusted: boolean;
+    trusted_until?: string;
     type?: string;
     updated_at: string;
-    user_id: ID;
+    user_id: string;
 }
 interface DeviceListResponse {
     devices: Device[];
@@ -128,6 +266,30 @@ interface EnrollResponse {
     otpauth_url: string;
     secret: string;
 }
+interface Environment {
+    app_id: string;
+    cloned_from?: string;
+    color?: string;
+    created_at: string;
+    description?: string;
+    id: string;
+    is_default: boolean;
+    metadata?: Record<string, unknown>;
+    name: string;
+    settings?: Settings;
+    slug: string;
+    type: string;
+    updated_at: string;
+}
+interface EnvironmentListResponse {
+    environments: unknown;
+    total: number;
+}
+interface EnvironmentSettingsResponse {
+    overrides?: Settings;
+    settings?: Settings;
+    type_defaults?: Settings;
+}
 interface ForgotPasswordResponse {
     status: string;
 }
@@ -135,15 +297,13 @@ interface HealthResponse {
     error?: string;
     status: string;
 }
-interface ID {
-}
 interface Invitation {
     created_at: string;
     email: string;
     expires_at: string;
-    id: ID;
-    inviter_id: ID;
-    org_id: ID;
+    id: string;
+    inviter_id: string;
+    org_id: string;
     role: string;
     status: string;
 }
@@ -157,9 +317,17 @@ interface KeyListItem {
     key_prefix: string;
     last_used_at?: string;
     name: string;
+    public_key_prefix?: string;
     revoked: boolean;
     scopes?: string[];
 }
+interface ListAuthMethodsResponse {
+    methods: AuthMethod[];
+}
+interface ListDefinitionsResponse {
+    groups: DefinitionGroup[];
+    total: number;
+}
 interface ListKeysResponse {
     keys: KeyListItem[];
     total: number;
@@ -188,23 +356,34 @@ interface LoginResponse {
 }
 interface Member {
     created_at: string;
-    id: ID;
-    org_id: ID;
+    id: string;
+    org_id: string;
     role: string;
     updated_at: string;
-    user_id: ID;
+    user_id: string;
 }
 interface MemberListResponse {
     members: Member[];
 }
+interface ObjectFieldDef {
+    display_name: string;
+    help_text?: string;
+    input_type: string;
+    key: string;
+    options?: SelectOption[];
+    placeholder?: string;
+    required?: boolean;
+    sensitive?: boolean;
+}
 interface OrgListResponse {
     organizations: Organization[];
 }
 interface Organization {
-    app_id: ID;
+    app_id: string;
     created_at: string;
-    created_by: ID;
-    id: ID;
+    created_by: string;
+    env_id: string;
+    id: string;
     logo?: string;
     metadata?: Record<string, unknown>;
     name: string;
@@ -249,9 +428,18 @@ interface RemoveMemberRequest {
     MemberID: string;
     OrgID: string;
 }
-interface RemovePermissionRequest {
-    PermissionID: string;
-    RoleID: string;
+interface ResolvedSetting {
+    can_override: boolean;
+    definition?: Definition;
+    effective_value: string;
+    enforced_at?: string;
+    scope_values: ScopeValue[];
+}
+interface ResolvedSettingResponse {
+    setting?: ResolvedSetting;
+}
+interface ResolvedSettingsResponse {
+    settings: ResolvedSetting[];
 }
 interface RevokeKeyRequest {
     KeyID: string;
@@ -263,6 +451,7 @@ interface Role {
     app_id: string;
     created_at: string;
     description?: string;
+    env_id: string;
     id: string;
     name: string;
     parent_id?: string;
@@ -287,6 +476,19 @@ interface SMSVerifyResponse {
     method: string;
     verified: boolean;
 }
+interface ScopeValue {
+    enforced: boolean;
+    scope: string;
+    scope_id?: string;
+    updated_at?: string;
+    updated_by?: string;
+    value: string;
+    version?: number;
+}
+interface SelectOption {
+    label: string;
+    value: string;
+}
 interface SendRequest {
     app_id?: string;
     email: string;
@@ -297,6 +499,29 @@ interface SendResponse {
 interface SessionListResponse {
     sessions: Record<string, unknown>[];
 }
+interface SettingValueResponse {
+    key: string;
+    scope: string;
+    scope_id?: string;
+    status: string;
+    value: string;
+}
+interface Settings {
+    allow_test_credentials?: boolean;
+    check_breached?: boolean;
+    lockout_enabled?: boolean;
+    lockout_max_attempts?: number;
+    oauth_overrides?: Record<string, unknown>;
+    password_min_length?: number;
+    rate_limit_enabled?: boolean;
+    rate_limit_window_seconds?: number;
+    refresh_token_ttl_seconds?: number;
+    signin_rate_limit?: number;
+    signup_rate_limit?: number;
+    skip_email_verification?: boolean;
+    token_ttl_seconds?: number;
+    webhook_url_override?: string;
+}
 interface SignOutRequest {
 }
 interface SlugAvailableResponse {
@@ -313,9 +538,9 @@ interface StatusResponse {
 }
 interface Team {
     created_at: string;
-    id: ID;
+    id: string;
     name: string;
-    org_id: ID;
+    org_id: string;
     slug: string;
     updated_at: string;
 }
@@ -330,8 +555,31 @@ interface TokenResponse {
 interface TrustDeviceRequest {
     DeviceID: string;
 }
+interface UIMetadata {
+    condition?: VisibilityCondition;
+    help_text?: string;
+    input_type: string;
+    object_fields?: ObjectFieldDef[];
+    options?: SelectOption[];
+    order: number;
+    placeholder?: string;
+    read_only?: boolean;
+    section?: string;
+    validation?: Validation;
+}
+interface UnenforceSettingRequest {
+    Key: string;
+    Scope: string;
+    ScopeID: string;
+}
+interface UnlinkAuthMethodRequest {
+    Provider: string;
+}
+interface UnlinkAuthMethodResponse {
+    status: string;
+}
 interface User {
-    app_id: ID;
+    app_id: string;
     ban_expires?: string;
     ban_reason?: string;
     banned: boolean;
@@ -340,10 +588,13 @@ interface User {
     display_username?: string;
     email: string;
     email_verified: boolean;
-    id: ID;
+    env_id: string;
+    first_name: string;
+    id: string;
     image?: string;
+    last_name: string;
     metadata?: Record<string, unknown>;
-    name: string;
+    password_changed_at?: string;
     phone?: string;
     phone_verified: boolean;
     updated_at: string;
@@ -352,6 +603,14 @@ interface User {
 interface UserRoleListResponse {
     roles: Role[];
 }
+interface Validation {
+    max?: number;
+    max_len?: number;
+    min?: number;
+    min_len?: number;
+    pattern?: string;
+    required?: boolean;
+}
 interface VerifyMFARequest {
     code: string;
 }
@@ -370,18 +629,64 @@ interface VerifyResponse {
     session_token: string;
     user: User;
 }
+interface VisibilityCondition {
+    key: string;
+    operator?: string;
+    value: string;
+}
 interface Webhook {
     active: boolean;
-    app_id: ID;
+    app_id: string;
     created_at: string;
+    env_id: string;
     events: string[];
-    id: ID;
+    id: string;
     updated_at: string;
     url: string;
 }
 interface WebhookListResponse {
     webhooks: Webhook[];
 }
+type SetAppClientConfigRequest = {
+    app_name?: string;
+    logo_url?: string;
+    magic_link_enabled?: boolean;
+    mfa_enabled?: boolean;
+    mfa_methods?: string[];
+    passkey_enabled?: boolean;
+    password_enabled?: boolean;
+    social_enabled?: boolean;
+    social_providers?: string[];
+    sso_enabled?: boolean;
+};
+type SetAppSessionConfigRequest = {
+    bind_to_device?: boolean;
+    bind_to_ip?: boolean;
+    max_active_sessions?: number;
+    refresh_token_ttl_seconds?: number;
+    rotate_refresh_token?: boolean;
+    token_format?: string;
+    token_ttl_seconds?: number;
+};
+type AdminBulkRevokeSessionsRequest = BulkRevokeSessionsRequest;
+type AdminBulkImportUsersRequest = {
+    app_id?: string;
+    users: Record<string, unknown>[];
+};
+type EnforceSettingRequest = {
+    app_id?: string;
+    org_id?: string;
+    scope: string;
+    scope_id?: string;
+    value: string;
+};
+type SetSettingRequest = {
+    app_id?: string;
+    org_id?: string;
+    scope: string;
+    scope_id?: string;
+    value: string;
+};
 type AdminBanUserRequest = {
     expires_at?: string;
     reason?: string;
@@ -390,6 +695,44 @@ type ChangePasswordRequest = {
     current_password: string;
     new_password: string;
 };
+type CreateEnvironmentRequest = {
+    app_id?: string;
+    color?: string;
+    description?: string;
+    name: string;
+    settings?: Record<string, unknown>;
+    slug: string;
+    type: string;
+};
+type UpdateEnvironmentRequest = {
+    color?: string;
+    description?: string;
+    name?: string;
+};
+type CloneEnvironmentRequest = {
+    description?: string;
+    name: string;
+    settings?: Record<string, unknown>;
+    slug: string;
+    type: string;
+    webhook_url_override?: string;
+};
+type UpdateEnvironmentSettingsRequest = {
+    allow_test_credentials?: boolean;
+    check_breached?: boolean;
+    lockout_enabled?: boolean;
+    lockout_max_attempts?: number;
+    oauth_overrides?: Record<string, unknown>;
+    password_min_length?: number;
+    rate_limit_enabled?: boolean;
+    rate_limit_window_seconds?: number;
+    refresh_token_ttl_seconds?: number;
+    signin_rate_limit?: number;
+    signup_rate_limit?: number;
+    skip_email_verification?: boolean;
+    token_ttl_seconds?: number;
+    webhook_url_override?: string;
+};
 type ForgotPasswordRequest = {
     app_id?: string;
     email: string;
@@ -399,8 +742,9 @@ type RevokeAPIKeyRequest = RevokeKeyRequest;
 type SendMagicLinkRequest = SendRequest;
 type VerifyMagicLinkRequest = VerifyRequest;
 type UpdateMeRequest = {
+    first_name?: string;
     image?: string;
-    name?: string;
+    last_name?: string;
     username?: string;
 };
 type DeleteMeRequest = DeleteAccountRequest;
@@ -459,27 +803,27 @@ type ResetPasswordRequest = {
     new_password: string;
     token: string;
 };
-type CreateRoleRequest = {
+type AuthsomeCreateRoleRequest = {
     app_id?: string;
     description?: string;
     name: string;
     parent_id?: string;
     slug: string;
 };
-type UpdateRoleRequest = {
+type AuthsomeUpdateRoleRequest = {
     description?: string;
     name?: string;
     parent_id?: string;
 };
-type AssignRoleRequest = {
+type AuthsomeAssignRoleRequest = {
     org_id?: string;
     user_id: string;
 };
-type AddPermissionRequest = {
+type AuthsomeAddPermissionRequest = {
     action: string;
     resource: string;
 };
-type UnassignRoleRequest = {
+type AuthsomeUnassignRoleRequest = {
     user_id: string;
 };
 type SignInRequest = {
@@ -491,7 +835,9 @@ type SignInRequest = {
 type SignUpRequest = {
     app_id?: string;
     email: string;
-    name?: string;
+    first_name?: string;
+    last_name?: string;
+    metadata?: Record<string, unknown>;
     password: string;
     username?: string;
 };
@@ -570,6 +916,32 @@ interface SSOConnectionConfig {
     id: string;
     name: string;
 }
+/** A single option for select/radio/checkbox signup fields. */
+interface SignupFieldOption {
+    label: string;
+    value: string;
+}
+/** Validation rules for a signup field. */
+interface SignupFieldValidation {
+    required?: boolean;
+    min_len?: number;
+    max_len?: number;
+    pattern?: string;
+    min?: number;
+    max?: number;
+}
+/** A custom signup form field from the backend. */
+interface SignupFieldConfig {
+    key: string;
+    label: string;
+    type: string;
+    placeholder?: string;
+    description?: string;
+    options?: SignupFieldOption[];
+    default?: string;
+    validation?: SignupFieldValidation;
+    order: number;
+}
 /**
  * Client configuration returned by the backend.
  *
@@ -606,6 +978,8 @@ interface ClientConfig {
     };
     /** List of server-side plugin names that are installed and active. */
     supported_plugins?: string[];
+    /** Custom signup form fields configured for this app. */
+    signup_fields?: SignupFieldConfig[];
 }
 /** Interface for persisting tokens across sessions. */
 interface TokenStorage {
@@ -637,439 +1011,579 @@ declare class AuthClient$1 {
      * GET /.well-known/authsome/openapi
      */
     getOpenAPI(): Promise<Record<string, unknown>>;
+    /**
+     * Get per-app client config overrides
+     * GET /v1/admin/apps/{appId}/client-config
+     */
+    getAppClientConfig(appId: string, token: string): Promise<Config>;
+    /**
+     * Set per-app client config overrides
+     * PUT /v1/admin/apps/{appId}/client-config
+     */
+    setAppClientConfig(appId: string, body: SetAppClientConfigRequest, token: string): Promise<Config>;
+    /**
+     * Delete per-app client config overrides
+     * DELETE /v1/admin/apps/{appId}/client-config
+     */
+    deleteAppClientConfig(appId: string, body: DeleteAppClientConfigRequest, token: string): Promise<StatusResponse>;
+    /**
+     * Get per-app session config
+     * GET /v1/admin/apps/{appId}/session-config
+     */
+    getAppSessionConfig(appId: string, token: string): Promise<Config>;
+    /**
+     * Set per-app session config
+     * PUT /v1/admin/apps/{appId}/session-config
+     */
+    setAppSessionConfig(appId: string, body: SetAppSessionConfigRequest, token: string): Promise<Config>;
+    /**
+     * Delete per-app session config
+     * DELETE /v1/admin/apps/{appId}/session-config
+     */
+    deleteAppSessionConfig(appId: string, body: DeleteAppSessionConfigRequest, token: string): Promise<StatusResponse>;
+    /**
+     * Bulk revoke sessions (admin)
+     * DELETE /v1/admin/bulk/sessions
+     */
+    adminBulkRevokeSessions(body: AdminBulkRevokeSessionsRequest, token: string): Promise<BulkRevokeSessionsResponse>;
+    /**
+     * Bulk import users (admin)
+     * POST /v1/admin/bulk/users/import
+     */
+    adminBulkImportUsers(body: AdminBulkImportUsersRequest, token: string): Promise<BulkImportResult>;
     /**
      * Stop impersonation (admin)
-     * POST /v1/auth/admin/impersonate/stop
+     * POST /v1/admin/impersonate/stop
      */
     adminStopImpersonation(body: AdminStopImpersonationRequest, token: string): Promise<StatusResponse>;
     /**
      * Impersonate user (admin)
-     * POST /v1/auth/admin/impersonate/{userId}
+     * POST /v1/admin/impersonate/{userId}
      */
     adminImpersonate(userId: string, body: AdminImpersonateRequest, token: string): Promise<AuthResponse>;
     /**
      * List organizations (admin)
-     * GET /v1/auth/admin/orgs
+     * GET /v1/admin/orgs
      */
     adminListOrgs(token: string): Promise<OrgListResponse>;
+    /**
+     * List all setting definitions
+     * GET /v1/admin/settings/definitions
+     */
+    listSettingsDefinitions(token: string): Promise<ListDefinitionsResponse>;
+    /**
+     * List definitions for a namespace
+     * GET /v1/admin/settings/definitions/{namespace}
+     */
+    listNamespaceSettingsDefinitions(namespace: string, token: string): Promise<ListDefinitionsResponse>;
+    /**
+     * Enforce a setting value at a scope
+     * PUT /v1/admin/settings/enforce/{key}
+     */
+    enforceSetting(key: string, body: EnforceSettingRequest, token: string): Promise<SettingValueResponse>;
+    /**
+     * Remove enforcement from a setting
+     * DELETE /v1/admin/settings/enforce/{key}
+     */
+    unenforceSetting(key: string, body: UnenforceSettingRequest, token: string): Promise<StatusResponse>;
+    /**
+     * Resolve all settings at a scope
+     * GET /v1/admin/settings/resolve
+     */
+    resolveSettings(token: string): Promise<ResolvedSettingsResponse>;
+    /**
+     * Resolve one setting with cascade details
+     * GET /v1/admin/settings/resolve/{key}
+     */
+    resolveSetting(key: string, token: string): Promise<ResolvedSettingResponse>;
+    /**
+     * Set a setting value at a scope
+     * PUT /v1/admin/settings/values/{key}
+     */
+    setSetting(key: string, body: SetSettingRequest, token: string): Promise<SettingValueResponse>;
+    /**
+     * Delete a setting override at a scope
+     * DELETE /v1/admin/settings/values/{key}
+     */
+    deleteSetting(key: string, body: DeleteSettingRequest, token: string): Promise<StatusResponse>;
     /**
      * Get stats (admin)
-     * GET /v1/auth/admin/stats
+     * GET /v1/admin/stats
      */
     adminGetStats(token: string): Promise<AdminStatsResponse>;
     /**
      * List users (admin)
-     * GET /v1/auth/admin/users
+     * GET /v1/admin/users
      */
     adminListUsers(token: string): Promise<AdminUserListResponse>;
     /**
      * Get user (admin)
-     * GET /v1/auth/admin/users/{userId}
+     * GET /v1/admin/users/{userId}
      */
     adminGetUser(userId: string, token: string): Promise<User>;
     /**
      * Delete user (admin)
-     * DELETE /v1/auth/admin/users/{userId}
+     * DELETE /v1/admin/users/{userId}
      */
     adminDeleteUser(userId: string, body: AdminDeleteUserRequest, token: string): Promise<StatusResponse>;
     /**
      * Ban user (admin)
-     * POST /v1/auth/admin/users/{userId}/ban
+     * POST /v1/admin/users/{userId}/ban
      */
     adminBanUser(userId: string, body: AdminBanUserRequest, token: string): Promise<StatusResponse>;
     /**
      * Unban user (admin)
-     * POST /v1/auth/admin/users/{userId}/unban
+     * POST /v1/admin/users/{userId}/unban
      */
     adminUnbanUser(userId: string, body: AdminUnbanUserRequest, token: string): Promise<StatusResponse>;
     /**
      * Change password
-     * POST /v1/auth/change-password
+     * POST /v1/change-password
      */
     changePassword(body: ChangePasswordRequest, token: string): Promise<StatusResponse>;
+    /**
+     * Get client configuration
+     * GET /v1/client-config
+     */
+    getClientConfig(token: string): Promise<ClientConfigResponse>;
     /**
      * List devices
-     * GET /v1/auth/devices
+     * GET /v1/devices
      */
     listDevices(token: string): Promise<DeviceListResponse>;
     /**
      * Get device
-     * GET /v1/auth/devices/{deviceId}
+     * GET /v1/devices/{deviceId}
      */
     getDevice(deviceId: string, token: string): Promise<Device>;
     /**
      * Delete device
-     * DELETE /v1/auth/devices/{deviceId}
+     * DELETE /v1/devices/{deviceId}
      */
     deleteDevice(deviceId: string, body: DeleteDeviceRequest, token: string): Promise<StatusResponse>;
     /**
      * Trust device
-     * PATCH /v1/auth/devices/{deviceId}/trust
+     * PATCH /v1/devices/{deviceId}/trust
      */
     trustDevice(deviceId: string, body: TrustDeviceRequest, token: string): Promise<Device>;
+    /**
+     * List environments
+     * GET /v1/environments
+     */
+    listEnvironments(token: string): Promise<EnvironmentListResponse>;
+    /**
+     * Create environment
+     * POST /v1/environments
+     */
+    createEnvironment(body: CreateEnvironmentRequest, token: string): Promise<Environment>;
+    /**
+     * Get environment
+     * GET /v1/environments/{envId}
+     */
+    getEnvironment(envId: string, token: string): Promise<Environment>;
+    /**
+     * Update environment
+     * PATCH /v1/environments/{envId}
+     */
+    updateEnvironment(envId: string, body: UpdateEnvironmentRequest, token: string): Promise<Environment>;
+    /**
+     * Delete environment
+     * DELETE /v1/environments/{envId}
+     */
+    deleteEnvironment(envId: string, token: string): Promise<StatusResponse>;
+    /**
+     * Clone environment
+     * POST /v1/environments/{envId}/clone
+     */
+    cloneEnvironment(envId: string, body: CloneEnvironmentRequest, token: string): Promise<CloneEnvironmentResponse>;
+    /**
+     * Set default environment
+     * POST /v1/environments/{envId}/set-default
+     */
+    setDefaultEnvironment(envId: string, token: string): Promise<StatusResponse>;
+    /**
+     * Get environment settings
+     * GET /v1/environments/{envId}/settings
+     */
+    getEnvironmentSettings(envId: string, token: string): Promise<EnvironmentSettingsResponse>;
+    /**
+     * Update environment settings
+     * PATCH /v1/environments/{envId}/settings
+     */
+    updateEnvironmentSettings(envId: string, body: UpdateEnvironmentSettingsRequest, token: string): Promise<Environment>;
     /**
      * Forgot password
-     * POST /v1/auth/forgot-password
+     * POST /v1/forgot-password
      */
     forgotPassword(body: ForgotPasswordRequest): Promise<ForgotPasswordResponse>;
     /**
      * Health check
-     * GET /v1/auth/health
+     * GET /v1/health
      */
     getHealth(): Promise<HealthResponse>;
     /**
      * List API keys
-     * GET /v1/auth/keys
+     * GET /v1/keys
      */
     listAPIKeys(token: string): Promise<ListKeysResponse>;
     /**
      * Create API key
-     * POST /v1/auth/keys
+     * POST /v1/keys
      */
     createAPIKey(body: CreateAPIKeyRequest, token: string): Promise<CreateKeyResponse>;
     /**
      * Revoke API key
-     * DELETE /v1/auth/keys/{keyId}
+     * DELETE /v1/keys/{keyId}
      */
     revokeAPIKey(keyId: string, body: RevokeAPIKeyRequest, token: string): Promise<void>;
     /**
      * Send magic link
-     * POST /v1/auth/magic-link/send
+     * POST /v1/magic-link/send
      */
     sendMagicLink(body: SendMagicLinkRequest): Promise<SendResponse>;
     /**
      * Verify magic link
-     * POST /v1/auth/magic-link/verify
+     * POST /v1/magic-link/verify
      */
     verifyMagicLink(body: VerifyMagicLinkRequest): Promise<VerifyResponse>;
     /**
      * Get current user
-     * GET /v1/auth/me
+     * GET /v1/me
      */
     getMe(token: string): Promise<User>;
     /**
      * Update current user
-     * PATCH /v1/auth/me
+     * PATCH /v1/me
      */
     updateMe(body: UpdateMeRequest, token: string): Promise<User>;
     /**
      * Delete account
-     * DELETE /v1/auth/me
+     * DELETE /v1/me
      */
     deleteMe(body: DeleteMeRequest, token: string): Promise<StatusResponse>;
+    /**
+     * List linked auth methods
+     * GET /v1/me/auth-methods
+     */
+    listAuthMethods(token: string): Promise<ListAuthMethodsResponse>;
+    /**
+     * Unlink an auth method
+     * DELETE /v1/me/auth-methods/{provider}
+     */
+    unlinkAuthMethod(provider: string, body: UnlinkAuthMethodRequest, token: string): Promise<UnlinkAuthMethodResponse>;
     /**
      * Export user data
-     * GET /v1/auth/me/export
+     * GET /v1/me/export
      */
     exportMyData(token: string): Promise<Record<string, unknown>>;
     /**
      * MFA challenge
-     * POST /v1/auth/mfa/challenge
+     * POST /v1/mfa/challenge
      */
     challengeMFA(body: ChallengeMFARequest): Promise<ChallengeResponse>;
     /**
      * Enroll in MFA
-     * POST /v1/auth/mfa/enroll
+     * POST /v1/mfa/enroll
      */
     enrollMFA(body: EnrollMFARequest, token: string): Promise<EnrollResponse>;
     /**
      * Disable MFA
-     * DELETE /v1/auth/mfa/enrollment
+     * DELETE /v1/mfa/enrollment
      */
     disableMFA(body: DisableMFARequest, token: string): Promise<DisableResponse>;
     /**
      * Regenerate MFA recovery codes
-     * POST /v1/auth/mfa/recovery/regenerate
+     * POST /v1/mfa/recovery/regenerate
      */
     regenerateMFARecoveryCodes(body: RegenerateMFARecoveryCodesRequest, token: string): Promise<RecoveryRegenerateResponse>;
     /**
      * Verify MFA recovery code
-     * POST /v1/auth/mfa/recovery/verify
+     * POST /v1/mfa/recovery/verify
      */
     verifyRecoveryCode(body: VerifyRecoveryCodeRequest): Promise<RecoveryVerifyResponse>;
     /**
      * Send SMS verification code
-     * POST /v1/auth/mfa/sms/send
+     * POST /v1/mfa/sms/send
      */
     sendSMSCode(body: SendSMSCodeRequest, token: string): Promise<SMSSendResponse>;
     /**
      * Verify SMS code
-     * POST /v1/auth/mfa/sms/verify
+     * POST /v1/mfa/sms/verify
      */
     verifySMSCode(body: VerifySMSCodeRequest, token: string): Promise<SMSVerifyResponse>;
     /**
      * Verify MFA code
-     * POST /v1/auth/mfa/verify
+     * POST /v1/mfa/verify
      */
     verifyMFA(body: VerifyMFARequest): Promise<VerifyMFAResponse>;
     /**
      * List organizations
-     * GET /v1/auth/orgs
+     * GET /v1/orgs
      */
     listOrganizations(token: string): Promise<OrgListResponse>;
     /**
      * Create organization
-     * POST /v1/auth/orgs
+     * POST /v1/orgs
      */
     createOrganization(body: CreateOrganizationRequest, token: string): Promise<Organization>;
     /**
      * Check slug availability
-     * GET /v1/auth/orgs/check-slug
+     * GET /v1/orgs/check-slug
      */
     checkOrgSlug(token: string): Promise<SlugAvailableResponse>;
     /**
      * Accept invitation
-     * POST /v1/auth/orgs/invitations/accept
+     * POST /v1/orgs/invitations/accept
      */
     acceptInvitation(body: AcceptInvitationRequest, token: string): Promise<Member>;
     /**
      * Decline invitation
-     * POST /v1/auth/orgs/invitations/decline
+     * POST /v1/orgs/invitations/decline
      */
     declineInvitation(body: DeclineInvitationRequest, token: string): Promise<StatusResponse>;
     /**
      * Get organization
-     * GET /v1/auth/orgs/{orgId}
+     * GET /v1/orgs/{orgId}
      */
     getOrganization(orgId: string, token: string): Promise<Organization>;
     /**
      * Update organization
-     * PATCH /v1/auth/orgs/{orgId}
+     * PATCH /v1/orgs/{orgId}
      */
     updateOrganization(orgId: string, body: UpdateOrganizationRequest, token: string): Promise<Organization>;
     /**
      * Delete organization
-     * DELETE /v1/auth/orgs/{orgId}
+     * DELETE /v1/orgs/{orgId}
      */
     deleteOrganization(orgId: string, body: DeleteOrganizationRequest, token: string): Promise<StatusResponse>;
     /**
      * List invitations
-     * GET /v1/auth/orgs/{orgId}/invitations
+     * GET /v1/orgs/{orgId}/invitations
      */
     listInvitations(orgId: string, token: string): Promise<InvitationListResponse>;
     /**
      * Create invitation
-     * POST /v1/auth/orgs/{orgId}/invitations
+     * POST /v1/orgs/{orgId}/invitations
      */
     createInvitation(orgId: string, body: CreateInvitationRequest, token: string): Promise<Invitation>;
     /**
      * List members
-     * GET /v1/auth/orgs/{orgId}/members
+     * GET /v1/orgs/{orgId}/members
      */
     listMembers(orgId: string, token: string): Promise<MemberListResponse>;
     /**
      * Add member
-     * POST /v1/auth/orgs/{orgId}/members
+     * POST /v1/orgs/{orgId}/members
      */
     addMember(orgId: string, body: AddMemberRequest, token: string): Promise<Member>;
     /**
      * Update member role
-     * PATCH /v1/auth/orgs/{orgId}/members/{memberId}
+     * PATCH /v1/orgs/{orgId}/members/{memberId}
      */
     updateMember(orgId: string, memberId: string, body: UpdateMemberRequest, token: string): Promise<Member>;
     /**
      * Remove member
-     * DELETE /v1/auth/orgs/{orgId}/members/{memberId}
+     * DELETE /v1/orgs/{orgId}/members/{memberId}
      */
     removeMember(orgId: string, memberId: string, body: RemoveMemberRequest, token: string): Promise<StatusResponse>;
     /**
      * List teams
-     * GET /v1/auth/orgs/{orgId}/teams
+     * GET /v1/orgs/{orgId}/teams
      */
     listTeams(orgId: string, token: string): Promise<TeamListResponse>;
     /**
      * Create team
-     * POST /v1/auth/orgs/{orgId}/teams
+     * POST /v1/orgs/{orgId}/teams
      */
     createTeam(orgId: string, body: CreateTeamRequest, token: string): Promise<Team>;
     /**
      * Get team
-     * GET /v1/auth/orgs/{orgId}/teams/{teamId}
+     * GET /v1/orgs/{orgId}/teams/{teamId}
      */
     getTeam(orgId: string, teamId: string, token: string): Promise<Team>;
     /**
      * Update team
-     * PATCH /v1/auth/orgs/{orgId}/teams/{teamId}
+     * PATCH /v1/orgs/{orgId}/teams/{teamId}
      */
     updateTeam(orgId: string, teamId: string, body: UpdateTeamRequest, token: string): Promise<Team>;
     /**
      * Delete team
-     * DELETE /v1/auth/orgs/{orgId}/teams/{teamId}
+     * DELETE /v1/orgs/{orgId}/teams/{teamId}
      */
     deleteTeam(orgId: string, teamId: string, body: DeleteTeamRequest, token: string): Promise<StatusResponse>;
     /**
      * List passkeys
-     * GET /v1/auth/passkeys/
+     * GET /v1/passkeys/
      */
     listPasskeys(token: string): Promise<ListResponse$1>;
     /**
      * Begin passkey login
-     * POST /v1/auth/passkeys/login/begin
+     * POST /v1/passkeys/login/begin
      */
     passkeyLoginBegin(body: PasskeyLoginBeginRequest): Promise<LoginBeginResponse>;
     /**
      * Complete passkey login
-     * POST /v1/auth/passkeys/login/finish
+     * POST /v1/passkeys/login/finish
      */
     passkeyLoginFinish(body: PasskeyLoginFinishRequest): Promise<LoginFinishResponse>;
     /**
      * Begin passkey registration
-     * POST /v1/auth/passkeys/register/begin
+     * POST /v1/passkeys/register/begin
      */
     passkeyRegisterBegin(body: PasskeyRegisterBeginRequest, token: string): Promise<RegisterBeginResponse>;
     /**
      * Complete passkey registration
-     * POST /v1/auth/passkeys/register/finish
+     * POST /v1/passkeys/register/finish
      */
     passkeyRegisterFinish(body: PasskeyRegisterFinishRequest, token: string): Promise<RegisterFinishResponse>;
     /**
      * Delete passkey
-     * DELETE /v1/auth/passkeys/{credentialId}
+     * DELETE /v1/passkeys/{credentialId}
      */
     deletePasskey(credentialId: string, body: DeletePasskeyRequest, token: string): Promise<DeleteResponse>;
     /**
      * Refresh tokens
-     * POST /v1/auth/refresh
+     * POST /v1/refresh
      */
     refresh(body: RefreshRequest): Promise<TokenResponse>;
     /**
      * Reset password
-     * POST /v1/auth/reset-password
+     * POST /v1/reset-password
      */
     resetPassword(body: ResetPasswordRequest): Promise<StatusResponse>;
     /**
      * List roles
-     * GET /v1/auth/roles
+     * GET /v1/roles
      */
-    listRoles(token: string): Promise<RoleListResponse>;
+    authsomeListRoles(token: string): Promise<RoleListResponse>;
     /**
      * Create role
-     * POST /v1/auth/roles
+     * POST /v1/roles
      */
-    createRole(body: CreateRoleRequest, token: string): Promise<Role>;
+    authsomeCreateRole(body: AuthsomeCreateRoleRequest, token: string): Promise<Role>;
     /**
      * Get role
-     * GET /v1/auth/roles/{roleId}
+     * GET /v1/roles/{roleId}
      */
-    getRole(roleId: string, token: string): Promise<Role>;
+    authsomeGetRole(roleId: string, token: string): Promise<Role>;
     /**
      * Update role
-     * PATCH /v1/auth/roles/{roleId}
+     * PATCH /v1/roles/{roleId}
      */
-    updateRole(roleId: string, body: UpdateRoleRequest, token: string): Promise<Role>;
+    authsomeUpdateRole(roleId: string, body: AuthsomeUpdateRoleRequest, token: string): Promise<Role>;
     /**
      * Delete role
-     * DELETE /v1/auth/roles/{roleId}
+     * DELETE /v1/roles/{roleId}
      */
-    deleteRole(roleId: string, body: DeleteRoleRequest, token: string): Promise<StatusResponse>;
+    authsomeDeleteRole(roleId: string, token: string): Promise<StatusResponse>;
     /**
      * Assign role to user
-     * POST /v1/auth/roles/{roleId}/assign
+     * POST /v1/roles/{roleId}/assign
      */
-    assignRole(roleId: string, body: AssignRoleRequest, token: string): Promise<StatusResponse>;
+    authsomeAssignRole(roleId: string, body: AuthsomeAssignRoleRequest, token: string): Promise<StatusResponse>;
     /**
      * List role permissions
-     * GET /v1/auth/roles/{roleId}/permissions
+     * GET /v1/roles/{roleId}/permissions
      */
-    listRolePermissions(roleId: string, token: string): Promise<PermissionListResponse>;
+    authsomeListRolePermissions(roleId: string, token: string): Promise<PermissionListResponse>;
     /**
      * Add permission to role
-     * POST /v1/auth/roles/{roleId}/permissions
+     * POST /v1/roles/{roleId}/permissions
      */
-    addPermission(roleId: string, body: AddPermissionRequest, token: string): Promise<Permission>;
+    authsomeAddPermission(roleId: string, body: AuthsomeAddPermissionRequest, token: string): Promise<Permission>;
     /**
      * Remove permission from role
-     * DELETE /v1/auth/roles/{roleId}/permissions/{permissionId}
+     * DELETE /v1/roles/{roleId}/permissions/{permissionId}
      */
-    removePermission(roleId: string, permissionId: string, body: RemovePermissionRequest, token: string): Promise<StatusResponse>;
+    authsomeRemovePermission(roleId: string, permissionId: string, token: string): Promise<StatusResponse>;
     /**
      * Unassign role from user
-     * POST /v1/auth/roles/{roleId}/unassign
+     * POST /v1/roles/{roleId}/unassign
      */
-    unassignRole(roleId: string, body: UnassignRoleRequest, token: string): Promise<StatusResponse>;
+    authsomeUnassignRole(roleId: string, body: AuthsomeUnassignRoleRequest, token: string): Promise<StatusResponse>;
     /**
      * List sessions
-     * GET /v1/auth/sessions
+     * GET /v1/sessions
      */
     listSessions(token: string): Promise<SessionListResponse>;
     /**
      * Revoke session
-     * DELETE /v1/auth/sessions/{sessionId}
+     * DELETE /v1/sessions/{sessionId}
      */
     revokeSession(sessionId: string, body: RevokeSessionRequest, token: string): Promise<StatusResponse>;
     /**
      * Sign in
-     * POST /v1/auth/signin
+     * POST /v1/signin
      */
     signIn(body: SignInRequest): Promise<AuthResponse>;
     /**
      * Sign out
-     * POST /v1/auth/signout
+     * POST /v1/signout
      */
     signOut(body: SignOutRequest, token: string): Promise<StatusResponse>;
     /**
      * Sign up
-     * POST /v1/auth/signup
+     * POST /v1/signup
      */
     signUp(body: SignUpRequest): Promise<AuthResponse>;
     /**
      * Start OAuth flow
-     * POST /v1/auth/social/{provider}
+     * POST /v1/social/{provider}
      */
     startOAuth(provider: string, body: StartOAuthRequest): Promise<StartResponse>;
     /**
      * OAuth callback
-     * GET /v1/auth/social/{provider}/callback
+     * GET /v1/social/{provider}/callback
      */
     oauthCallback(provider: string): Promise<CallbackResponse>;
     /**
      * SSO SAML ACS endpoint
-     * POST /v1/auth/sso/{provider}/acs
+     * POST /v1/sso/{provider}/acs
      */
     ssoACS(provider: string, body: SsoACSRequest): Promise<CallbackResponse>;
     /**
      * SSO callback (OIDC)
-     * POST /v1/auth/sso/{provider}/callback
+     * POST /v1/sso/{provider}/callback
      */
     ssoCallback(provider: string, body: SsoCallbackRequest): Promise<CallbackResponse>;
     /**
      * Start SSO login flow
-     * POST /v1/auth/sso/{provider}/login
+     * POST /v1/sso/{provider}/login
      */
     startSSOLogin(provider: string, body: StartSSOLoginRequest): Promise<LoginResponse>;
     /**
      * List user roles
-     * GET /v1/auth/users/{userId}/roles
+     * GET /v1/users/{userId}/roles
      */
-    listUserRoles(userId: string, token: string): Promise<UserRoleListResponse>;
+    authsomeListUserRoles(userId: string, token: string): Promise<UserRoleListResponse>;
     /**
      * Verify email
-     * POST /v1/auth/verify-email
+     * POST /v1/verify-email
      */
     verifyEmail(body: VerifyEmailRequest): Promise<StatusResponse>;
     /**
      * List webhooks
-     * GET /v1/auth/webhooks
+     * GET /v1/webhooks
      */
     listWebhooks(token: string): Promise<WebhookListResponse>;
     /**
      * Create webhook
-     * POST /v1/auth/webhooks
+     * POST /v1/webhooks
      */
     createWebhook(body: CreateWebhookRequest, token: string): Promise<Webhook>;
     /**
      * Get webhook
-     * GET /v1/auth/webhooks/{webhookId}
+     * GET /v1/webhooks/{webhookId}
      */
     getWebhook(webhookId: string, token: string): Promise<Webhook>;
     /**
      * Update webhook
-     * PATCH /v1/auth/webhooks/{webhookId}
+     * PATCH /v1/webhooks/{webhookId}
      */
     updateWebhook(webhookId: string, body: UpdateWebhookRequest, token: string): Promise<Webhook>;
     /**
      * Delete webhook
-     * DELETE /v1/auth/webhooks/{webhookId}
+     * DELETE /v1/webhooks/{webhookId}
      */
     deleteWebhook(webhookId: string, body: DeleteWebhookRequest, token: string): Promise<StatusResponse>;
     private request;
@@ -1291,4 +1805,4 @@ declare function prepareRequestOptions(options: Record<string, unknown>): Public
  */
 declare function serializeCredential(credential: Credential): Record<string, unknown>;
 
-export { type APIError, type KeyListItem as APIKey, type AddMemberRequest, type AdminBanUserRequest, AuthClient, type AuthClientConfig, AuthClientError, type AuthConfig, AuthManager, type AuthResponse, type AuthState, type ChallengeMFARequest, type ChangePasswordRequest, type ClientConfig, type CreateAPIKeyRequest, type CreateInvitationRequest, type CreateOrganizationRequest as CreateOrgRequest, type CreateOrganizationRequest, type Device, type EnrollMFARequest, type EnrollResponse, type ForgotPasswordRequest, type Invitation, type KeyListItem, type ListOptions, type ListResponse, type EnrollResponse as MFAEnrollment, type SendMagicLinkRequest as MagicLinkSendRequest, type VerifyMagicLinkRequest as MagicLinkVerifyRequest, type Member, type ChallengeMFARequest as MfaChallengeRequest, type EnrollMFARequest as MfaEnrollRequest, type SendSMSCodeRequest as MfaSMSSendRequest, type VerifySMSCodeRequest as MfaSMSVerifyRequest, type VerifyMFARequest as MfaVerifyRequest, type Organization, type RefreshRequest, type ResetPasswordRequest, type SSOConnectionConfig, type SendMagicLinkRequest, type SendSMSCodeRequest, type Session, type SignInRequest, type SignUpRequest, type SocialProviderConfig, type SsoACSRequest, type SsoCallbackRequest, type TokenResponse, type TokenStorage, type UpdateMeRequest, type UpdateOrganizationRequest as UpdateOrgRequest, type UpdateOrganizationRequest, type User, type VerifyEmailRequest, type VerifyMFARequest, type VerifyMagicLinkRequest, type VerifyRecoveryCodeRequest, type VerifySMSCodeRequest, base64urlToBuffer, bufferToBase64url, prepareCreationOptions, prepareRequestOptions, serializeCredential };
+export { type APIError, type KeyListItem as APIKey, type AddMemberRequest, type AdminBanUserRequest, AuthClient, type AuthClientConfig, AuthClientError, type AuthConfig, AuthManager, type AuthResponse, type AuthState, type ChallengeMFARequest, type ChangePasswordRequest, type ClientConfig, type CreateAPIKeyRequest, type CreateInvitationRequest, type CreateOrganizationRequest as CreateOrgRequest, type CreateOrganizationRequest, type Device, type EnrollMFARequest, type EnrollResponse, type ForgotPasswordRequest, type Invitation, type KeyListItem, type ListOptions, type ListResponse, type EnrollResponse as MFAEnrollment, type SendMagicLinkRequest as MagicLinkSendRequest, type VerifyMagicLinkRequest as MagicLinkVerifyRequest, type Member, type ChallengeMFARequest as MfaChallengeRequest, type EnrollMFARequest as MfaEnrollRequest, type SendSMSCodeRequest as MfaSMSSendRequest, type VerifySMSCodeRequest as MfaSMSVerifyRequest, type VerifyMFARequest as MfaVerifyRequest, type Organization, type RefreshRequest, type ResetPasswordRequest, type SSOConnectionConfig, type SendMagicLinkRequest, type SendSMSCodeRequest, type Session, type SignInRequest, type SignUpRequest, type SignupFieldConfig, type SignupFieldOption, type SignupFieldValidation, type SocialProviderConfig, type SsoACSRequest, type SsoCallbackRequest, type TokenResponse, type TokenStorage, type UpdateMeRequest, type UpdateOrganizationRequest as UpdateOrgRequest, type UpdateOrganizationRequest, type User, type VerifyEmailRequest, type VerifyMFARequest, type VerifyMagicLinkRequest, type VerifyRecoveryCodeRequest, type VerifySMSCodeRequest, base64urlToBuffer, bufferToBase64url, prepareCreationOptions, prepareRequestOptions, serializeCredential };