@authsome/ui-core 1.6.2 → 1.7.0

package/dist/index.js

@@ -1,10 +1,33 @@
 // src/generated/api-client.ts
+function stripTrailingSlashes(url) {
+  let end = url.length;
+  while (end > 0 && url.charCodeAt(end - 1) === 47) {
+    end--;
+  }
+  return url.slice(0, end);
+}
+function encodeForm(body) {
+  const params = new URLSearchParams();
+  for (const [key, value] of Object.entries(body)) {
+    if (value === void 0 || value === null) {
+      continue;
+    }
+    if (Array.isArray(value)) {
+      for (const element of value) {
+        params.append(key, String(element));
+      }
+      continue;
+    }
+    params.set(key, String(value));
+  }
+  return params.toString();
+}
 var AuthClient = class {
   baseURL;
   publishableKey;
   fetchFn;
   constructor(config) {
-    this.baseURL = config.baseURL.replace(/\/+$/, "");
+    this.baseURL = stripTrailingSlashes(config.baseURL);
     this.publishableKey = config.publishableKey;
     this.fetchFn = config.fetch ?? globalThis.fetch.bind(globalThis);
   }
@@ -47,7 +70,7 @@ var AuthClient = class {
    * OpenID Connect Discovery
    * GET /.well-known/openid-configuration
    */
-  async oidcDiscovery(token) {
+  async oidcDiscoveryPrefixed(token) {
     const path = "/.well-known/openid-configuration";
     return this.request(
       "GET",
@@ -73,12 +96,12 @@ var AuthClient = class {
    * Create SCIM Group
    * POST /scim/v2/Groups
    */
-  async scimCreateGroup(body, token) {
+  async scimCreateGroup(token) {
     const path = "/scim/v2/Groups";
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -99,12 +122,12 @@ var AuthClient = class {
    * Replace SCIM Group
    * PUT /scim/v2/Groups/{groupId}
    */
-  async scimReplaceGroup(groupId, body, token) {
+  async scimReplaceGroup(groupId, token) {
     const path = `/scim/v2/Groups/${groupId}`;
     return this.request(
       "PUT",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -112,12 +135,12 @@ var AuthClient = class {
    * Patch SCIM Group
    * PATCH /scim/v2/Groups/{groupId}
    */
-  async scimPatchGroup(groupId, body, token) {
+  async scimPatchGroup(groupId, token) {
     const path = `/scim/v2/Groups/${groupId}`;
     return this.request(
       "PATCH",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -125,12 +148,12 @@ var AuthClient = class {
    * Delete SCIM Group
    * DELETE /scim/v2/Groups/{groupId}
    */
-  async scimDeleteGroup(groupId, body, token) {
+  async scimDeleteGroup(groupId, token) {
     const path = `/scim/v2/Groups/${groupId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -190,12 +213,12 @@ var AuthClient = class {
    * Create SCIM User
    * POST /scim/v2/Users
    */
-  async scimCreateUser(body, token) {
+  async scimCreateUser(token) {
     const path = "/scim/v2/Users";
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -216,12 +239,12 @@ var AuthClient = class {
    * Replace SCIM User
    * PUT /scim/v2/Users/{userId}
    */
-  async scimReplaceUser(userId, body, token) {
+  async scimReplaceUser(userId, token) {
     const path = `/scim/v2/Users/${userId}`;
     return this.request(
       "PUT",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -229,12 +252,12 @@ var AuthClient = class {
    * Patch SCIM User
    * PATCH /scim/v2/Users/{userId}
    */
-  async scimPatchUser(userId, body, token) {
+  async scimPatchUser(userId, token) {
     const path = `/scim/v2/Users/${userId}`;
     return this.request(
       "PATCH",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -242,12 +265,12 @@ var AuthClient = class {
    * Delete SCIM User
    * DELETE /scim/v2/Users/{userId}
    */
-  async scimDeleteUser(userId, body, token) {
+  async scimDeleteUser(userId, token) {
     const path = `/scim/v2/Users/${userId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -268,12 +291,12 @@ var AuthClient = class {
    * Delete application (admin)
    * DELETE /v1/admin/apps/{appId}
    */
-  async adminDeleteApp(appId, body, token) {
+  async adminDeleteApp(appId, token) {
     const path = `/v1/admin/apps/${appId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -307,12 +330,12 @@ var AuthClient = class {
    * Delete per-app client config overrides
    * DELETE /v1/admin/apps/{appId}/client-config
    */
-  async deleteAppClientConfig(appId, body, token) {
+  async deleteAppClientConfig(appId, token) {
     const path = `/v1/admin/apps/${appId}/client-config`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -346,12 +369,12 @@ var AuthClient = class {
    * Delete per-app session config
    * DELETE /v1/admin/apps/{appId}/session-config
    */
-  async deleteAppSessionConfig(appId, body, token) {
+  async deleteAppSessionConfig(appId, token) {
     const path = `/v1/admin/apps/${appId}/session-config`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -359,12 +382,15 @@ var AuthClient = class {
    * Bulk revoke sessions (admin)
    * DELETE /v1/admin/bulk/sessions
    */
-  async adminBulkRevokeSessions(body, token) {
-    const path = "/v1/admin/bulk/sessions";
+  async adminBulkRevokeSessions(user_id, token) {
+    const params = new URLSearchParams();
+    if (user_id !== void 0) params.set("user_id", String(user_id));
+    const qs = params.toString();
+    const path = "/v1/admin/bulk/sessions" + (qs ? `?${qs}` : "");
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -385,12 +411,12 @@ var AuthClient = class {
    * Stop impersonation (admin)
    * POST /v1/admin/impersonate/stop
    */
-  async adminStopImpersonation(body, token) {
+  async adminStopImpersonation(token) {
     const path = "/v1/admin/impersonate/stop";
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -398,12 +424,12 @@ var AuthClient = class {
    * Impersonate user (admin)
    * POST /v1/admin/impersonate/{userId}
    */
-  async adminImpersonate(userId, body, token) {
+  async adminImpersonate(userId, token) {
     const path = `/v1/admin/impersonate/${userId}`;
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -411,8 +437,11 @@ var AuthClient = class {
    * List OAuth2 clients
    * GET /v1/admin/oauth/clients
    */
-  async listOAuth2Clients(token) {
-    const path = "/v1/admin/oauth/clients";
+  async listOAuth2Clients(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/admin/oauth/clients" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -433,16 +462,42 @@ var AuthClient = class {
       token
     );
   }
+  /**
+   * Update OAuth2 client
+   * PATCH /v1/admin/oauth/clients/{clientId}
+   */
+  async updateOAuth2Client(clientId, body, token) {
+    const path = `/v1/admin/oauth/clients/${clientId}`;
+    return this.request(
+      "PATCH",
+      path,
+      body,
+      token
+    );
+  }
   /**
    * Delete OAuth2 client
    * DELETE /v1/admin/oauth/clients/{clientId}
    */
-  async deleteOAuth2Client(clientId, body, token) {
+  async deleteOAuth2Client(clientId, token) {
     const path = `/v1/admin/oauth/clients/${clientId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
+      token
+    );
+  }
+  /**
+   * Rotate OAuth2 client secret
+   * POST /v1/admin/oauth/clients/{clientId}/secret
+   */
+  async rotateOAuth2ClientSecret(clientId, token) {
+    const path = `/v1/admin/oauth/clients/${clientId}/secret`;
+    return this.request(
+      "POST",
+      path,
+      void 0,
       token
     );
   }
@@ -450,12 +505,16 @@ var AuthClient = class {
    * List organizations (admin)
    * GET /v1/admin/orgs
    */
-  async adminListOrgs() {
-    const path = "/v1/admin/orgs";
+  async adminListOrgs(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/admin/orgs" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
-      void 0
+      void 0,
+      token
     );
   }
   /**
@@ -475,12 +534,12 @@ var AuthClient = class {
    * Revoke platform-owner role (admin)
    * DELETE /v1/admin/platform/owners/{userID}
    */
-  async adminRevokePlatformOwner(userID, body, token) {
+  async adminRevokePlatformOwner(userID, token) {
     const path = `/v1/admin/platform/owners/${userID}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -488,8 +547,13 @@ var AuthClient = class {
    * List service accounts (admin)
    * GET /v1/admin/service-accounts
    */
-  async adminListServiceAccounts(token) {
-    const path = "/v1/admin/service-accounts";
+  async adminListServiceAccounts(app_id, token, limit, cursor) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (limit !== void 0) params.set("limit", String(limit));
+    if (cursor !== void 0) params.set("cursor", String(cursor));
+    const qs = params.toString();
+    const path = "/v1/admin/service-accounts" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -527,12 +591,12 @@ var AuthClient = class {
    * Delete service account (admin)
    * DELETE /v1/admin/service-accounts/{serviceAccountId}
    */
-  async adminDeleteServiceAccount(serviceAccountId, body, token) {
+  async adminDeleteServiceAccount(serviceAccountId, token) {
     const path = `/v1/admin/service-accounts/${serviceAccountId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -553,8 +617,12 @@ var AuthClient = class {
    * List all setting definitions
    * GET /v1/admin/settings/definitions
    */
-  async listSettingsDefinitions(token) {
-    const path = "/v1/admin/settings/definitions";
+  async listSettingsDefinitions(namespace, category, token) {
+    const params = new URLSearchParams();
+    if (namespace !== void 0) params.set("namespace", String(namespace));
+    if (category !== void 0) params.set("category", String(category));
+    const qs = params.toString();
+    const path = "/v1/admin/settings/definitions" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -592,12 +660,16 @@ var AuthClient = class {
    * Remove enforcement from a setting
    * DELETE /v1/admin/settings/enforce/{key}
    */
-  async unenforceSetting(key, body, token) {
-    const path = `/v1/admin/settings/enforce/${key}`;
+  async unenforceSetting(key, scope, scope_id, token) {
+    const params = new URLSearchParams();
+    if (scope !== void 0) params.set("scope", String(scope));
+    if (scope_id !== void 0) params.set("scope_id", String(scope_id));
+    const qs = params.toString();
+    const path = `/v1/admin/settings/enforce/${key}` + (qs ? `?${qs}` : "");
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -605,8 +677,14 @@ var AuthClient = class {
    * Resolve all settings at a scope
    * GET /v1/admin/settings/resolve
    */
-  async resolveSettings(token) {
-    const path = "/v1/admin/settings/resolve";
+  async resolveSettings(namespace, app_id, org_id, user_id, token) {
+    const params = new URLSearchParams();
+    if (namespace !== void 0) params.set("namespace", String(namespace));
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (org_id !== void 0) params.set("org_id", String(org_id));
+    if (user_id !== void 0) params.set("user_id", String(user_id));
+    const qs = params.toString();
+    const path = "/v1/admin/settings/resolve" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -618,8 +696,13 @@ var AuthClient = class {
    * Resolve one setting with cascade details
    * GET /v1/admin/settings/resolve/{key}
    */
-  async resolveSetting(key, token) {
-    const path = `/v1/admin/settings/resolve/${key}`;
+  async resolveSetting(key, app_id, org_id, user_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (org_id !== void 0) params.set("org_id", String(org_id));
+    if (user_id !== void 0) params.set("user_id", String(user_id));
+    const qs = params.toString();
+    const path = `/v1/admin/settings/resolve/${key}` + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -644,12 +727,16 @@ var AuthClient = class {
    * Delete a setting override at a scope
    * DELETE /v1/admin/settings/values/{key}
    */
-  async deleteSetting(key, body, token) {
-    const path = `/v1/admin/settings/values/${key}`;
+  async deleteSetting(key, scope, scope_id, token) {
+    const params = new URLSearchParams();
+    if (scope !== void 0) params.set("scope", String(scope));
+    if (scope_id !== void 0) params.set("scope_id", String(scope_id));
+    const qs = params.toString();
+    const path = `/v1/admin/settings/values/${key}` + (qs ? `?${qs}` : "");
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -786,8 +873,11 @@ var AuthClient = class {
    * Get stats (admin)
    * GET /v1/admin/stats
    */
-  async adminGetStats(token) {
-    const path = "/v1/admin/stats";
+  async adminGetStats(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/admin/stats" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -799,8 +889,14 @@ var AuthClient = class {
    * List users (admin)
    * GET /v1/admin/users
    */
-  async adminListUsers(token) {
-    const path = "/v1/admin/users";
+  async adminListUsers(app_id, token, email, cursor, limit) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (email !== void 0) params.set("email", String(email));
+    if (cursor !== void 0) params.set("cursor", String(cursor));
+    if (limit !== void 0) params.set("limit", String(limit));
+    const qs = params.toString();
+    const path = "/v1/admin/users" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -808,6 +904,19 @@ var AuthClient = class {
       token
     );
   }
+  /**
+   * Copy user to another app (admin)
+   * POST /v1/admin/users/copy
+   */
+  async adminCopyUser(body, token) {
+    const path = "/v1/admin/users/copy";
+    return this.request(
+      "POST",
+      path,
+      body,
+      token
+    );
+  }
   /**
    * Create user (admin)
    * POST /v1/admin/users/create
@@ -851,12 +960,12 @@ var AuthClient = class {
    * Delete user (admin)
    * DELETE /v1/admin/users/{userId}
    */
-  async adminDeleteUser(userId, body, token) {
+  async adminDeleteUser(userId, token) {
     const path = `/v1/admin/users/${userId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -877,12 +986,12 @@ var AuthClient = class {
    * Unban user (admin)
    * POST /v1/admin/users/{userId}/unban
    */
-  async adminUnbanUser(userId, body, token) {
+  async adminUnbanUser(userId, token) {
     const path = `/v1/admin/users/${userId}/unban`;
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -890,8 +999,11 @@ var AuthClient = class {
    * List coupons
    * GET /v1/billing/coupons
    */
-  async listCoupons(token) {
-    const path = "/v1/billing/coupons";
+  async listCoupons(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/billing/coupons" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -916,12 +1028,12 @@ var AuthClient = class {
    * Delete coupon
    * DELETE /v1/billing/coupons/{couponId}
    */
-  async deleteCoupon(couponId, body, token) {
+  async deleteCoupon(couponId, token) {
     const path = `/v1/billing/coupons/${couponId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -942,8 +1054,12 @@ var AuthClient = class {
    * List invoices
    * GET /v1/billing/invoices
    */
-  async listInvoices(token) {
-    const path = "/v1/billing/invoices";
+  async listInvoices(app_id, tenant_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (tenant_id !== void 0) params.set("tenant_id", String(tenant_id));
+    const qs = params.toString();
+    const path = "/v1/billing/invoices" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -994,8 +1110,11 @@ var AuthClient = class {
    * List billing plans
    * GET /v1/billing/plans
    */
-  async listBillingPlans(token) {
-    const path = "/v1/billing/plans";
+  async listBillingPlans(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/billing/plans" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1033,12 +1152,12 @@ var AuthClient = class {
    * Activate a billing plan
    * POST /v1/billing/plans/{planId}/activate
    */
-  async activateBillingPlan(planId, body, token) {
+  async activateBillingPlan(planId, token) {
     const path = `/v1/billing/plans/${planId}/activate`;
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1046,12 +1165,12 @@ var AuthClient = class {
    * Archive a billing plan
    * POST /v1/billing/plans/{planId}/archive
    */
-  async archiveBillingPlan(planId, body, token) {
+  async archiveBillingPlan(planId, token) {
     const path = `/v1/billing/plans/${planId}/archive`;
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1059,8 +1178,13 @@ var AuthClient = class {
    * List subscriptions
    * GET /v1/billing/subscriptions
    */
-  async listSubscriptions(token) {
-    const path = "/v1/billing/subscriptions";
+  async listSubscriptions(app_id, tenant_id, token, status) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (tenant_id !== void 0) params.set("tenant_id", String(tenant_id));
+    if (status !== void 0) params.set("status", String(status));
+    const qs = params.toString();
+    const path = "/v1/billing/subscriptions" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1085,8 +1209,12 @@ var AuthClient = class {
    * Get active subscription
    * GET /v1/billing/subscriptions/active
    */
-  async getActiveSubscription(token) {
-    const path = "/v1/billing/subscriptions/active";
+  async getActiveSubscription(app_id, tenant_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (tenant_id !== void 0) params.set("tenant_id", String(tenant_id));
+    const qs = params.toString();
+    const path = "/v1/billing/subscriptions/active" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1124,12 +1252,12 @@ var AuthClient = class {
    * Pause subscription
    * POST /v1/billing/subscriptions/{subId}/pause
    */
-  async pauseSubscription(subId, body, token) {
+  async pauseSubscription(subId, token) {
     const path = `/v1/billing/subscriptions/${subId}/pause`;
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1137,12 +1265,12 @@ var AuthClient = class {
    * Resume subscription
    * POST /v1/billing/subscriptions/{subId}/resume
    */
-  async resumeSubscription(subId, body, token) {
+  async resumeSubscription(subId, token) {
     const path = `/v1/billing/subscriptions/${subId}/resume`;
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1150,8 +1278,12 @@ var AuthClient = class {
    * Get usage summary
    * GET /v1/billing/usage
    */
-  async getUsageSummary(token) {
-    const path = "/v1/billing/usage";
+  async getUsageSummary(app_id, tenant_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (tenant_id !== void 0) params.set("tenant_id", String(tenant_id));
+    const qs = params.toString();
+    const path = "/v1/billing/usage" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1176,8 +1308,11 @@ var AuthClient = class {
    * Get client configuration
    * GET /v1/client-config
    */
-  async getClientConfig(token) {
-    const path = "/v1/client-config";
+  async getClientConfig(token, key) {
+    const params = new URLSearchParams();
+    if (key !== void 0) params.set("key", String(key));
+    const qs = params.toString();
+    const path = "/v1/client-config" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1189,36 +1324,44 @@ var AuthClient = class {
    * List consents
    * GET /v1/consent
    */
-  async listConsents() {
-    const path = "/v1/consent";
+  async listConsents(purpose, cursor, limit, token) {
+    const params = new URLSearchParams();
+    if (purpose !== void 0) params.set("purpose", String(purpose));
+    if (cursor !== void 0) params.set("cursor", String(cursor));
+    if (limit !== void 0) params.set("limit", String(limit));
+    const qs = params.toString();
+    const path = "/v1/consent" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
-      void 0
+      void 0,
+      token
     );
   }
   /**
    * Grant consent
    * POST /v1/consent/grant
    */
-  async grantConsent(body) {
+  async grantConsent(body, token) {
     const path = "/v1/consent/grant";
     return this.request(
       "POST",
       path,
-      body
+      body,
+      token
     );
   }
   /**
    * Revoke consent
    * POST /v1/consent/revoke
    */
-  async revokeConsent(body) {
+  async revokeConsent(body, token) {
     const path = "/v1/consent/revoke";
     return this.request(
       "POST",
       path,
-      body
+      body,
+      token
     );
   }
   /**
@@ -1251,12 +1394,12 @@ var AuthClient = class {
    * Delete device
    * DELETE /v1/devices/{deviceId}
    */
-  async deleteDevice(deviceId, body, token) {
+  async deleteDevice(deviceId, token) {
     const path = `/v1/devices/${deviceId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1264,12 +1407,12 @@ var AuthClient = class {
    * Trust device
    * PATCH /v1/devices/{deviceId}/trust
    */
-  async trustDevice(deviceId, body, token) {
+  async trustDevice(deviceId, token) {
     const path = `/v1/devices/${deviceId}/trust`;
     return this.request(
       "PATCH",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1277,8 +1420,11 @@ var AuthClient = class {
    * List environments
    * GET /v1/environments
    */
-  async listEnvironments(token) {
-    const path = "/v1/environments";
+  async listEnvironments(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/environments" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1430,8 +1576,12 @@ var AuthClient = class {
    * List API keys
    * GET /v1/keys
    */
-  async listAPIKeys(token) {
-    const path = "/v1/keys";
+  async listAPIKeys(app_id, token, user_id) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (user_id !== void 0) params.set("user_id", String(user_id));
+    const qs = params.toString();
+    const path = "/v1/keys" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1456,12 +1606,12 @@ var AuthClient = class {
    * Revoke API key
    * DELETE /v1/keys/{keyId}
    */
-  async revokeAPIKey(keyId, body, token) {
+  async revokeAPIKey(keyId, token) {
     const path = `/v1/keys/${keyId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1519,12 +1669,12 @@ var AuthClient = class {
    * Delete account
    * DELETE /v1/me
    */
-  async deleteMe(body, token) {
+  async deleteMe(token) {
     const path = "/v1/me";
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1545,12 +1695,12 @@ var AuthClient = class {
    * Unlink an auth method
    * DELETE /v1/me/auth-methods/{provider}
    */
-  async unlinkAuthMethod(provider, body, token) {
+  async unlinkAuthMethod(provider, token) {
     const path = `/v1/me/auth-methods/${provider}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1622,12 +1772,12 @@ var AuthClient = class {
    * Regenerate MFA recovery codes
    * POST /v1/mfa/recovery/regenerate
    */
-  async regenerateMFARecoveryCodes(body, token) {
+  async regenerateMFARecoveryCodes(token) {
     const path = "/v1/mfa/recovery/regenerate";
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1685,8 +1835,18 @@ var AuthClient = class {
    * OAuth2 Authorization
    * GET /v1/oauth/authorize
    */
-  async oauth2Authorize() {
-    const path = "/v1/oauth/authorize";
+  async oauth2Authorize(response_type, client_id, redirect_uri, scope, state, code_challenge, code_challenge_method, resource) {
+    const params = new URLSearchParams();
+    if (response_type !== void 0) params.set("response_type", String(response_type));
+    if (client_id !== void 0) params.set("client_id", String(client_id));
+    if (redirect_uri !== void 0) params.set("redirect_uri", String(redirect_uri));
+    if (scope !== void 0) params.set("scope", String(scope));
+    if (state !== void 0) params.set("state", String(state));
+    if (code_challenge !== void 0) params.set("code_challenge", String(code_challenge));
+    if (code_challenge_method !== void 0) params.set("code_challenge_method", String(code_challenge_method));
+    if (resource !== void 0) for (const element of resource) params.append("resource", String(element));
+    const qs = params.toString();
+    const path = "/v1/oauth/authorize" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1702,19 +1862,75 @@ var AuthClient = class {
     return this.request(
       "POST",
       path,
-      body
+      body,
+      void 0,
+      true
     );
   }
   /**
    * Complete device authorization
    * POST /v1/oauth/device/complete
    */
-  async oauth2DeviceComplete(body) {
+  async oauth2DeviceComplete(body, token) {
     const path = "/v1/oauth/device/complete";
     return this.request(
       "POST",
       path,
-      body
+      body,
+      token,
+      true
+    );
+  }
+  /**
+   * Register OAuth2 client
+   * POST /v1/oauth/register
+   */
+  async oauth2RegisterClient(body, token) {
+    const path = "/v1/oauth/register";
+    return this.request(
+      "POST",
+      path,
+      body,
+      token
+    );
+  }
+  /**
+   * Read OAuth2 client registration
+   * GET /v1/oauth/register/{clientId}
+   */
+  async oauth2ReadRegistration(clientId, token) {
+    const path = `/v1/oauth/register/${clientId}`;
+    return this.request(
+      "GET",
+      path,
+      void 0,
+      token
+    );
+  }
+  /**
+   * Update OAuth2 client registration
+   * PUT /v1/oauth/register/{clientId}
+   */
+  async oauth2UpdateRegistration(clientId, body, token) {
+    const path = `/v1/oauth/register/${clientId}`;
+    return this.request(
+      "PUT",
+      path,
+      body,
+      token
+    );
+  }
+  /**
+   * Delete OAuth2 client registration
+   * DELETE /v1/oauth/register/{clientId}
+   */
+  async oauth2DeleteRegistration(clientId, token) {
+    const path = `/v1/oauth/register/${clientId}`;
+    return this.request(
+      "DELETE",
+      path,
+      void 0,
+      token
     );
   }
   /**
@@ -1727,7 +1943,8 @@ var AuthClient = class {
       "POST",
       path,
       body,
-      token
+      token,
+      true
     );
   }
   /**
@@ -1739,7 +1956,9 @@ var AuthClient = class {
     return this.request(
       "POST",
       path,
-      body
+      body,
+      void 0,
+      true
     );
   }
   /**
@@ -1785,8 +2004,12 @@ var AuthClient = class {
    * Check slug availability
    * GET /v1/orgs/check-slug
    */
-  async checkOrgSlug(token) {
-    const path = "/v1/orgs/check-slug";
+  async checkOrgSlug(app_id, slug, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    if (slug !== void 0) params.set("slug", String(slug));
+    const qs = params.toString();
+    const path = "/v1/orgs/check-slug" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -1850,12 +2073,12 @@ var AuthClient = class {
    * Delete organization
    * DELETE /v1/orgs/{orgId}
    */
-  async deleteOrganization(orgId, body, token) {
+  async deleteOrganization(orgId, token) {
     const path = `/v1/orgs/${orgId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1928,12 +2151,12 @@ var AuthClient = class {
    * Remove member
    * DELETE /v1/orgs/{orgId}/members/{memberId}
    */
-  async removeMember(orgId, memberId, body, token) {
+  async removeMember(orgId, memberId, token) {
     const path = `/v1/orgs/${orgId}/members/${memberId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -1993,12 +2216,12 @@ var AuthClient = class {
    * Delete team
    * DELETE /v1/orgs/{orgId}/teams/{teamId}
    */
-  async deleteTeam(orgId, teamId, body, token) {
+  async deleteTeam(orgId, teamId, token) {
     const path = `/v1/orgs/${orgId}/teams/${teamId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -2019,12 +2242,12 @@ var AuthClient = class {
    * Begin passkey login
    * POST /v1/passkeys/login/begin
    */
-  async passkeyLoginBegin(body) {
+  async passkeyLoginBegin() {
     const path = "/v1/passkeys/login/begin";
     return this.request(
       "POST",
       path,
-      body
+      void 0
     );
   }
   /**
@@ -2069,12 +2292,12 @@ var AuthClient = class {
    * Delete passkey
    * DELETE /v1/passkeys/{credentialId}
    */
-  async deletePasskey(credentialId, body, token) {
+  async deletePasskey(credentialId, token) {
     const path = `/v1/passkeys/${credentialId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -2102,6 +2325,32 @@ var AuthClient = class {
       body
     );
   }
+  /**
+   * List what may act on your behalf
+   * GET /v1/principals/me/delegations
+   */
+  async listMyDelegations(token) {
+    const path = "/v1/principals/me/delegations";
+    return this.request(
+      "GET",
+      path,
+      void 0,
+      token
+    );
+  }
+  /**
+   * Mint an ephemeral child principal
+   * POST /v1/principals/{id}/children
+   */
+  async mintChildPrincipal(id, body, token) {
+    const path = `/v1/principals/${id}/children`;
+    return this.request(
+      "POST",
+      path,
+      body,
+      token
+    );
+  }
   /**
    * Refresh tokens
    * POST /v1/refresh
@@ -2130,8 +2379,11 @@ var AuthClient = class {
    * List roles
    * GET /v1/roles
    */
-  async authsomeListRoles(token) {
-    const path = "/v1/roles";
+  async authsomeListRoles(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/roles" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -2273,12 +2525,12 @@ var AuthClient = class {
    * Revoke session
    * DELETE /v1/sessions/{sessionId}
    */
-  async revokeSession(sessionId, body, token) {
+  async revokeSession(sessionId, token) {
     const path = `/v1/sessions/${sessionId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -2298,12 +2550,12 @@ var AuthClient = class {
    * Sign out
    * POST /v1/signout
    */
-  async signOut(body, token) {
+  async signOut(token) {
     const path = "/v1/signout";
     return this.request(
       "POST",
       path,
-      body,
+      void 0,
       token
     );
   }
@@ -2323,68 +2575,153 @@ var AuthClient = class {
    * Start OAuth flow
    * POST /v1/social/{provider}
    */
-  async startOAuth(provider, body) {
-    const path = `/v1/social/${provider}`;
+  async startOAuth(provider, frontend_url, redirect_url) {
+    const params = new URLSearchParams();
+    if (frontend_url !== void 0) params.set("frontend_url", String(frontend_url));
+    if (redirect_url !== void 0) params.set("redirect_url", String(redirect_url));
+    const qs = params.toString();
+    const path = `/v1/social/${provider}` + (qs ? `?${qs}` : "");
     return this.request(
       "POST",
       path,
-      body
+      void 0
     );
   }
   /**
    * OAuth callback
    * GET /v1/social/{provider}/callback
    */
-  async oauthCallback(provider) {
-    const path = `/v1/social/${provider}/callback`;
+  async oauthCallback(provider, state, code, error) {
+    const params = new URLSearchParams();
+    if (state !== void 0) params.set("state", String(state));
+    if (code !== void 0) params.set("code", String(code));
+    if (error !== void 0) params.set("error", String(error));
+    const qs = params.toString();
+    const path = `/v1/social/${provider}/callback` + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
       void 0
     );
   }
+  /**
+   * Exchange SSO one-time code for a session
+   * POST /v1/sso/exchange
+   */
+  async ssoExchange(body, token) {
+    const path = "/v1/sso/exchange";
+    return this.request(
+      "POST",
+      path,
+      body,
+      token
+    );
+  }
+  /**
+   * Start SSO login by email domain
+   * POST /v1/sso/login
+   */
+  async startSSOLoginByDomain(body, token) {
+    const path = "/v1/sso/login";
+    return this.request(
+      "POST",
+      path,
+      body,
+      token
+    );
+  }
   /**
    * SSO SAML ACS endpoint
    * POST /v1/sso/{provider}/acs
    */
-  async ssoACS(provider, body) {
+  async ssoACS(provider) {
     const path = `/v1/sso/${provider}/acs`;
     return this.request(
       "POST",
       path,
-      body
+      void 0
+    );
+  }
+  /**
+   * SSO OIDC redirect landing
+   * GET /v1/sso/{provider}/callback
+   */
+  async ssoOIDCRedirect(provider, token) {
+    const path = `/v1/sso/${provider}/callback`;
+    return this.request(
+      "GET",
+      path,
+      void 0,
+      token
     );
   }
   /**
    * SSO callback (OIDC)
    * POST /v1/sso/{provider}/callback
    */
-  async ssoCallback(provider, body) {
-    const path = `/v1/sso/${provider}/callback`;
+  async ssoCallback(provider, state, code, error) {
+    const params = new URLSearchParams();
+    if (state !== void 0) params.set("state", String(state));
+    if (code !== void 0) params.set("code", String(code));
+    if (error !== void 0) params.set("error", String(error));
+    const qs = params.toString();
+    const path = `/v1/sso/${provider}/callback` + (qs ? `?${qs}` : "");
     return this.request(
       "POST",
       path,
-      body
+      void 0
     );
   }
   /**
    * Start SSO login flow
    * POST /v1/sso/{provider}/login
    */
-  async startSSOLogin(provider, body) {
-    const path = `/v1/sso/${provider}/login`;
+  async startSSOLogin(provider, return_url) {
+    const params = new URLSearchParams();
+    if (return_url !== void 0) params.set("return_url", String(return_url));
+    const qs = params.toString();
+    const path = `/v1/sso/${provider}/login` + (qs ? `?${qs}` : "");
     return this.request(
       "POST",
       path,
-      body
+      void 0
+    );
+  }
+  /**
+   * SAML SP metadata
+   * GET /v1/sso/{provider}/metadata
+   */
+  async ssoSPMetadata(provider, token) {
+    const path = `/v1/sso/${provider}/metadata`;
+    return this.request(
+      "GET",
+      path,
+      void 0,
+      token
+    );
+  }
+  /**
+   * Exchange a credential for a delegated session
+   * POST /v1/token/exchange
+   */
+  async exchangeToken(body, token) {
+    const path = "/v1/token/exchange";
+    return this.request(
+      "POST",
+      path,
+      body,
+      token
     );
   }
   /**
    * List user roles
    * GET /v1/users/{userId}/roles
    */
-  async authsomeListUserRoles(userId, token) {
-    const path = `/v1/users/${userId}/roles`;
+  async authsomeListUserRoles(userId, token, app_id) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = `/v1/users/${userId}/roles` + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -2420,8 +2757,11 @@ var AuthClient = class {
    * List webhooks
    * GET /v1/webhooks
    */
-  async listWebhooks(token) {
-    const path = "/v1/webhooks";
+  async listWebhooks(app_id, token) {
+    const params = new URLSearchParams();
+    if (app_id !== void 0) params.set("app_id", String(app_id));
+    const qs = params.toString();
+    const path = "/v1/webhooks" + (qs ? `?${qs}` : "");
     return this.request(
       "GET",
       path,
@@ -2472,21 +2812,21 @@ var AuthClient = class {
    * Delete webhook
    * DELETE /v1/webhooks/{webhookId}
    */
-  async deleteWebhook(webhookId, body, token) {
+  async deleteWebhook(webhookId, token) {
     const path = `/v1/webhooks/${webhookId}`;
     return this.request(
       "DELETE",
       path,
-      body,
+      void 0,
       token
     );
   }
   // ──────────────────────────────────────────────────
   // Internal request helper
   // ──────────────────────────────────────────────────
-  async request(method, path, body, token) {
+  async request(method, path, body, token, form) {
     const headers = {
-      "Content-Type": "application/json",
+      "Content-Type": form ? "application/x-www-form-urlencoded" : "application/json",
       "Accept": "application/json"
     };
     if (token) {
@@ -2498,7 +2838,7 @@ var AuthClient = class {
     const response = await this.fetchFn(`${this.baseURL}${path}`, {
       method,
       headers,
-      body: body !== void 0 ? JSON.stringify(body) : void 0
+      body: body !== void 0 ? form ? encodeForm(body) : JSON.stringify(body) : void 0
     });
     if (!response.ok) {
       let apiError;
@@ -2557,14 +2897,16 @@ var AuthClient2 = class extends AuthClient {
   /**
    * Sign out.
    *
-   * Accepts a raw token string (used by auth.ts) or the full
-   * (body, token) pair from the generated client.
+   * Accepts a raw token string (used by auth.ts). The generated client used
+   * to take a (body, token) pair; the endpoint no longer reads a body, so the
+   * two-argument form is still accepted and its first argument ignored rather
+   * than breaking callers outside this package.
    */
   async signOut(bodyOrToken, token) {
     if (typeof bodyOrToken === "string") {
-      return super.signOut({}, bodyOrToken);
+      return super.signOut(bodyOrToken);
     }
-    return super.signOut(bodyOrToken, token);
+    return super.signOut(token);
   }
   /**
    * MFA challenge — bridge for auth.ts.