@authsome/ui-core 1.6.2 → 1.7.1

package/dist/index.d.ts

@@ -1,7 +1,13 @@
-interface ACSRequest {
-    Provider: string;
-    RelayState: string;
-    SAMLResponse: string;
+interface AcceptInvitationRequest {
+    token: string;
+}
+interface AddMemberRequest {
+    role?: string;
+    user_id: string;
+}
+interface AddPermissionRequest {
+    action: string;
+    resource: string;
 }
 interface AdminAppResponse {
     id: string;
@@ -11,6 +17,10 @@ interface AdminAppResponse {
     publishable_key?: string;
     slug: string;
 }
+interface AdminBanUserRequest {
+    expires_at?: string;
+    reason?: string;
+}
 interface AdminCatalogProvider {
     id: string;
     name: string;
@@ -18,6 +28,34 @@ interface AdminCatalogProvider {
 interface AdminCatalogResponse {
     providers: AdminCatalogProvider[];
 }
+interface AdminCopyUserRequest {
+    env_id?: string;
+    source_user_id: string;
+    target_app_id: string;
+}
+interface AdminCreateAppRequest {
+    logo?: string;
+    name: string;
+    slug: string;
+}
+interface AdminCreateConnectionRequest {
+    acs_url?: string;
+    app_id: string;
+    attribute_mappings?: Record<string, unknown>;
+    client_id?: string;
+    client_secret?: string;
+    domain: string;
+    entity_id?: string;
+    idp_certificate?: string;
+    idp_metadata_xml?: string;
+    idp_sso_url?: string;
+    issuer?: string;
+    metadata_url?: string;
+    org_id?: string;
+    protocol: string;
+    provider: string;
+    sign_requests?: boolean;
+}
 interface AdminCreateConnectionResponse {
     active: boolean;
     app_id: string;
@@ -26,8 +64,24 @@ interface AdminCreateConnectionResponse {
     protocol: string;
     provider: string;
 }
-interface AdminDeleteAppRequest {
-    AppID: string;
+interface AdminCreateServiceAccountAPIKeyRequest {
+    expires_at?: string;
+    name: string;
+    scopes?: string[];
+}
+interface AdminCreateServiceAccountRequest {
+    app_id?: string;
+    description?: string;
+    name: string;
+    scopes?: string[];
+}
+interface AdminCreateUserRequest {
+    app_id?: string;
+    email: string;
+    first_name?: string;
+    last_name?: string;
+    password: string;
+    username?: string;
 }
 interface AdminDeleteConnectionResponse {
     status: string;
@@ -35,14 +89,9 @@ interface AdminDeleteConnectionResponse {
 interface AdminDeleteProviderResponse {
     status: string;
 }
-interface AdminDeleteServiceAccountRequest {
-    ServiceAccountID: string;
-}
-interface AdminDeleteUserRequest {
-    UserID: string;
-}
-interface AdminImpersonateRequest {
-    UserID: string;
+interface AdminGrantPlatformOwnerRequest {
+    email?: string;
+    user_id?: string;
 }
 interface AdminListConnectionsResponse {
     connections: Connection[];
@@ -67,9 +116,6 @@ interface AdminProvider {
 interface AdminProviderResponse {
     provider: AdminProvider;
 }
-interface AdminRevokePlatformOwnerRequest {
-    UserID: string;
-}
 interface AdminServiceAccountAPIKeyResponse {
     created_at: string;
     expires_at?: string;
@@ -99,16 +145,96 @@ interface AdminServiceAccountResponse {
 interface AdminStatsResponse {
     total_users: number;
 }
-interface AdminStopImpersonationRequest {
+interface AdminUpdateConnectionRequest {
+    acs_url?: string;
+    active?: boolean;
+    attribute_mappings?: Record<string, unknown>;
+    client_id?: string;
+    client_secret?: string;
+    domain?: string;
+    entity_id?: string;
+    idp_certificate?: string;
+    idp_metadata_xml?: string;
+    idp_sso_url?: string;
+    issuer?: string;
+    metadata_url?: string;
+    provider?: string;
+    sign_requests?: boolean;
+}
+interface AdminUpdateUserRequest {
+    email_verified?: boolean;
+    first_name?: string;
+    last_name?: string;
+    username?: string;
 }
-interface AdminUnbanUserRequest {
-    UserID: string;
+interface AdminUpsertProviderRequest {
+    client_id: string;
+    client_secret: string;
+    enabled?: boolean;
+    redirect_url?: string;
+    scopes?: string[];
 }
 interface AdminUserListResponse {
     next_cursor?: string;
     total: number;
     users: User[];
 }
+interface ApiStatusResponse {
+    status: string;
+}
+interface ApiTokenResponse {
+    expires_at: string;
+    refresh_token: string;
+    session_token: string;
+}
+interface AppclientconfigConfig {
+    app_id: string;
+    app_name?: string;
+    created_at: string;
+    id: string;
+    logo_url?: string;
+    magic_link_enabled?: boolean;
+    mfa_enabled?: boolean;
+    mfa_methods?: string[];
+    mfa_required?: boolean;
+    passkey_enabled?: boolean;
+    password_enabled?: boolean;
+    require_email_verification?: boolean;
+    signup_enabled?: boolean;
+    social_enabled?: boolean;
+    social_providers?: string[];
+    sso_enabled?: boolean;
+    updated_at: string;
+    waitlist_enabled?: boolean;
+}
+interface AppsessionconfigConfig {
+    app_id: string;
+    bind_to_device?: boolean;
+    bind_to_ip?: boolean;
+    created_at: string;
+    id: string;
+    max_active_sessions?: number;
+    refresh_token_ttl_seconds?: number;
+    rotate_refresh_token?: boolean;
+    token_exchange_ttl_seconds?: number;
+    token_format?: string;
+    token_ttl_seconds?: number;
+    updated_at: string;
+}
+interface AssertionResponse {
+    authenticatorData: string;
+    clientDataJSON: string;
+    signature: string;
+    userHandle?: string;
+}
+interface AssignRoleRequest {
+    org_id?: string;
+    user_id: string;
+}
+interface AttestationResponse {
+    attestationObject: string;
+    clientDataJSON: string;
+}
 interface AuthMethod {
     label: string;
     linked_at?: string;
@@ -131,29 +257,15 @@ interface BulkImportResult {
     errors?: BulkError[];
     skipped: number;
 }
-interface BulkRevokeSessionsRequest {
-    UserID: string;
+interface BulkImportUsersRequest {
+    app_id?: string;
+    users: Record<string, unknown>[];
 }
 interface BulkRevokeSessionsResponse {
     revoked: number;
     user_id: string;
 }
-interface CallbackRequest {
-    Provider: string;
-    code: string;
-    error?: string;
-    state: string;
-}
-interface CallbackResponse {
-    expires_at: string;
-    is_new_user: boolean;
-    provider: string;
-    refresh_token: string;
-    session_token: string;
-    user: User;
-}
 interface CancelSubscriptionRequest {
-    SubID: string;
     immediately: boolean;
 }
 interface ChallengeRequest {
@@ -166,8 +278,11 @@ interface ChallengeResponse {
     session_token: string;
     user: unknown;
 }
+interface ChangePasswordRequest {
+    current_password: string;
+    new_password: string;
+}
 interface ChangePlanRequest {
-    SubID: string;
     new_plan_id: string;
 }
 interface ClientConfigBranding {
@@ -248,6 +363,14 @@ interface ClientConfigSocialProvider {
 interface ClientConfigToggle {
     enabled: boolean;
 }
+interface CloneEnvironmentRequest {
+    description?: string;
+    name: string;
+    settings?: Record<string, unknown>;
+    slug: string;
+    type: string;
+    webhook_url_override?: string;
+}
 interface CloneEnvironmentResponse {
     environment: unknown;
     permissions_cloned: number;
@@ -255,38 +378,27 @@ interface CloneEnvironmentResponse {
     roles_cloned: number;
     webhooks_cloned: number;
 }
-interface Config {
-    app_id: string;
-    app_name?: string;
-    created_at: string;
-    id: string;
-    logo_url?: string;
-    magic_link_enabled?: boolean;
-    mfa_enabled?: boolean;
-    mfa_methods?: string[];
-    mfa_required?: boolean;
-    passkey_enabled?: boolean;
-    password_enabled?: boolean;
-    require_email_verification?: boolean;
-    signup_enabled?: boolean;
-    social_enabled?: boolean;
-    social_providers?: string[];
-    sso_enabled?: boolean;
-    updated_at: string;
-    waitlist_enabled?: boolean;
-}
 interface Connection {
+    acs_url?: string;
     active: boolean;
     app_id: string;
+    attribute_mappings?: Record<string, unknown>;
     client_id?: string;
     created_at: string;
     domain: string;
+    entity_id?: string;
+    env_id?: string;
     id: string;
+    idp_certificate?: string;
+    idp_metadata_xml?: string;
+    idp_sso_url?: string;
     issuer?: string;
     metadata_url?: string;
     org_id?: string;
     protocol: string;
     provider: string;
+    sign_requests?: boolean;
+    sp_certificate?: string;
     updated_at: string;
 }
 interface Consent {
@@ -302,6 +414,13 @@ interface Consent {
     user_id: string;
     version: string;
 }
+interface ConsentListResponse {
+    consents: Consent[];
+    next_cursor?: string;
+}
+interface ConsentStatusResponse {
+    status: string;
+}
 interface CouponResponse {
     amount?: string;
     app_id: string;
@@ -316,6 +435,16 @@ interface CouponResponse {
     valid_from?: string;
     valid_until?: string;
 }
+interface CreateClientRequest {
+    app_id: string;
+    dpop_mode?: string;
+    grant_types?: string[];
+    name: string;
+    public?: boolean;
+    redirect_uris: string[];
+    resources?: string[];
+    scopes?: string[];
+}
 interface CreateClientResponse {
     client_id: string;
     client_secret?: string;
@@ -324,6 +453,7 @@ interface CreateClientResponse {
     name: string;
     public: boolean;
     redirect_uris: string[];
+    resources: string[];
     scopes: string[];
 }
 interface CreateCouponRequest {
@@ -338,11 +468,24 @@ interface CreateCouponRequest {
     valid_from?: string;
     valid_until?: string;
 }
+interface CreateEnvironmentRequest {
+    app_id?: string;
+    color?: string;
+    description?: string;
+    name: string;
+    settings?: Record<string, unknown>;
+    slug: string;
+    type: string;
+}
+interface CreateInvitationRequest {
+    email: string;
+    role?: string;
+}
 interface CreateKeyRequest {
     app_id: string;
     name: string;
     scopes?: string[];
-    user_id: string;
+    user_id?: string;
 }
 interface CreateKeyResponse {
     created_at: string;
@@ -355,6 +498,12 @@ interface CreateKeyResponse {
     public_key_prefix: string;
     scopes?: string[];
 }
+interface CreateOrgRequest {
+    app_id?: string;
+    logo?: string;
+    name: string;
+    slug: string;
+}
 interface CreatePlanRequest {
     app_id: string;
     base_amount: number;
@@ -368,11 +517,36 @@ interface CreatePlanRequest {
     slug: string;
     trial_days: number;
 }
+interface CreateRoleRequest {
+    app_id?: string;
+    description?: string;
+    name: string;
+    parent_id?: string;
+    slug: string;
+}
 interface CreateSubscriptionRequest {
     app_id: string;
     plan_id: string;
     tenant_id: string;
 }
+interface CreateTeamRequest {
+    name: string;
+    slug: string;
+}
+interface CreateWebhookRequest {
+    app_id?: string;
+    events: string[];
+    url: string;
+}
+interface CredentialInfo {
+    created_at: string;
+    display_name: string;
+    id: string;
+    transport: string[];
+}
+interface DeclineInvitationRequest {
+    token: string;
+}
 interface Definition {
     category: string;
     default: string;
@@ -391,44 +565,22 @@ interface DefinitionGroup {
     definitions: Definition[];
     namespace: string;
 }
-interface DeleteAccountRequest {
-}
-interface DeleteAppClientConfigRequest {
-    AppID: string;
-}
-interface DeleteAppSessionConfigRequest {
-    AppID: string;
-}
-interface DeleteClientRequest {
-    ClientID: string;
+interface DelegationListResponse {
+    delegations: DelegationResponse[];
 }
-interface DeleteCouponRequest {
-    CouponID: string;
-}
-interface DeleteDeviceRequest {
-    DeviceID: string;
-}
-interface DeleteOrgRequest {
-    OrgID: string;
-}
-interface DeleteRequest {
-    CredentialID: string;
+interface DelegationResponse {
+    actor: string;
+    created_at: string;
+    expires_at?: string;
+    grant_kind: string;
+    granted_by: string;
+    id: string;
+    scopes?: string[];
+    subject: string;
 }
 interface DeleteResponse {
     status: string;
 }
-interface DeleteSettingRequest {
-    Key: string;
-    Scope: string;
-    ScopeID: string;
-}
-interface DeleteTeamRequest {
-    OrgID: string;
-    TeamID: string;
-}
-interface DeleteWebhookRequest {
-    WebhookID: string;
-}
 interface Device {
     app_id: string;
     browser?: string;
@@ -446,10 +598,6 @@ interface Device {
     updated_at: string;
     user_id: string;
 }
-interface DeviceAuthRequest {
-    client_id: string;
-    scope?: string;
-}
 interface DeviceAuthResponse {
     device_code: string;
     expires_in: number;
@@ -458,10 +606,6 @@ interface DeviceAuthResponse {
     verification_uri: string;
     verification_uri_complete?: string;
 }
-interface DeviceCompleteRequest {
-    action: string;
-    user_code: string;
-}
 interface DeviceCompleteResponse {
     status: string;
 }
@@ -469,6 +613,7 @@ interface DeviceListResponse {
     devices: Device[];
 }
 interface DisableRequest {
+    code?: string;
 }
 interface DisableResponse {
     status: string;
@@ -477,10 +622,13 @@ interface DiscoveryResponse {
     authorization_endpoint: string;
     code_challenge_methods_supported: string[];
     device_authorization_endpoint: string;
+    dpop_signing_alg_values_supported?: string[];
     grant_types_supported: string[];
     id_token_signing_alg_values_supported: string[];
     issuer: string;
     jwks_uri: string;
+    registration_endpoint?: string;
+    resource_indicators_supported: boolean;
     response_types_supported: string[];
     revocation_endpoint: string;
     scopes_supported: string[];
@@ -494,6 +642,15 @@ interface Email {
     type?: string;
     value: string;
 }
+interface Empty {
+}
+interface EnforceSettingRequest {
+    app_id?: string;
+    org_id?: string;
+    scope: string;
+    scope_id?: string;
+    value: string;
+}
 interface EnrollRequest {
     method?: string;
     phone?: string;
@@ -536,6 +693,9 @@ interface EnvironmentSettingsResponse {
     settings?: Settings;
     type_defaults?: Settings;
 }
+interface ExchangeRequest {
+    code: string;
+}
 interface FeatureInput {
     key: string;
     limit: number;
@@ -544,9 +704,18 @@ interface FeatureInput {
     soft_limit: boolean;
     type: string;
 }
+interface ForgotPasswordRequest {
+    app_id?: string;
+    email: string;
+}
 interface ForgotPasswordResponse {
     status: string;
 }
+interface GrantConsentRequest {
+    app_id?: string;
+    purpose: string;
+    version?: string;
+}
 interface GroupRef {
     $ref?: string;
     display?: string;
@@ -564,9 +733,17 @@ interface HealthResponse {
     error?: string;
     status: string;
 }
+interface IntrospectConfirmation {
+    jkt: string;
+}
+interface IntrospectRequest {
+    token: string;
+}
 interface IntrospectResponse {
     active: boolean;
     app_id?: string;
+    aud?: string[];
+    cnf?: IntrospectConfirmation;
     env_id?: string;
     expires_at?: string;
     org_id?: string;
@@ -641,41 +818,68 @@ interface ListPlansResponse {
     plans: PlanResponse[];
     total: number;
 }
-interface ListResponse$1 {
-    consents: Consent[];
-    next_cursor?: string;
-}
 interface ListSubscriptionsResponse {
     subscriptions: Response[];
     total: number;
 }
-interface LoginBeginRequest {
-    email?: string;
-}
 interface LoginBeginResponse {
     options: Record<string, unknown>;
 }
-interface LoginFinishRequest {
+interface LoginByDomainRequest {
+    connection_id?: string;
+    email: string;
+    return_url?: string;
 }
 interface LoginFinishResponse {
+    refresh_token?: string;
+    session_token?: string;
     status: string;
     user_id: string;
 }
-interface LoginRequest {
-    Provider: string;
-}
 interface LoginResponse {
     login_url: string;
     state: string;
 }
+interface MagiclinkVerifyRequest {
+    app_id?: string;
+    token: string;
+}
+interface MagiclinkVerifyResponse {
+    expires_at: string;
+    refresh_token: string;
+    session_token: string;
+    user: User;
+}
 interface MarkInvoicePaidRequest {
-    InvoiceID: string;
     payment_ref: string;
 }
-interface Member {
-    created_at: string;
-    id: string;
-    org_id: string;
+interface MeResponse {
+    app_id: string;
+    ban_expires?: string;
+    ban_reason?: string;
+    banned: boolean;
+    created_at: string;
+    deleted_at?: string;
+    display_username?: string;
+    email: string;
+    email_verified: boolean;
+    env_id: string;
+    first_name: string;
+    id: string;
+    image?: string;
+    last_name: string;
+    metadata?: Record<string, unknown>;
+    password_changed_at?: string;
+    phone?: string;
+    phone_verified: boolean;
+    roles: string[];
+    updated_at: string;
+    username?: string;
+}
+interface Member {
+    created_at: string;
+    id: string;
+    org_id: string;
     role: string;
     updated_at: string;
     user_id: string;
@@ -694,6 +898,21 @@ interface Meta {
     location?: string;
     resourceType: string;
 }
+interface MintChildRequest {
+    name: string;
+    scopes?: string[];
+    ttl_seconds: number;
+}
+interface MintChildResponse {
+    created_at: string;
+    expires_at?: string;
+    id: string;
+    key: string;
+    key_prefix: string;
+    name: string;
+    parent_id: string;
+    scopes?: string[];
+}
 interface Name {
     familyName: string;
     formatted?: string;
@@ -702,16 +921,29 @@ interface Name {
 interface OAuth2Client {
     app_id: string;
     client_id: string;
+    client_secret_expires_at?: string;
     created_at: string;
+    dpop_mode?: string;
+    dynamically_registered: boolean;
     grant_types: string[];
     id: string;
+    metadata?: Record<string, unknown>;
     name: string;
+    principal_id?: string;
     public: boolean;
     redirect_uris: string[];
+    resources: string[];
     scopes: string[];
+    token_endpoint_auth_method?: string;
     updated_at: string;
 }
-interface Object$1 {
+interface Oauth2providerTokenResponse {
+    access_token: string;
+    expires_in: number;
+    issued_token_type?: string;
+    refresh_token?: string;
+    scope?: string;
+    token_type: string;
 }
 interface ObjectFieldDef {
     display_name: string;
@@ -738,6 +970,12 @@ interface Organization {
     slug: string;
     updated_at: string;
 }
+interface OrganizationStatusResponse {
+    status: string;
+}
+interface PasskeyListResponse {
+    credentials: CredentialInfo[];
+}
 interface Permission {
     action: string;
     id: string;
@@ -747,8 +985,21 @@ interface Permission {
 interface PermissionListResponse {
     permissions: Permission[];
 }
-interface PlanIDRequest {
-    PlanID: string;
+interface PhoneStartResponse {
+    expires_in: number;
+    status: string;
+}
+interface PhoneVerifyRequest {
+    app_id?: string;
+    code: string;
+    phone: string;
+}
+interface PhoneVerifyResponse {
+    expires_at: string;
+    new_user: boolean;
+    refresh_token: string;
+    session_token: string;
+    user?: User;
 }
 interface PlanResponse {
     app_id: string;
@@ -765,8 +1016,6 @@ interface PlanResponse {
     status: string;
     trial_days: number;
 }
-interface RecoveryRegenerateRequest {
-}
 interface RecoveryRegenerateResponse {
     codes: string[];
 }
@@ -777,22 +1026,63 @@ interface RecoveryVerifyResponse {
     challenge_passed: boolean;
     codes_remaining: number;
 }
+interface RefreshRequest {
+    refresh_token?: string;
+}
 interface RegisterBeginRequest {
     display_name?: string;
 }
 interface RegisterBeginResponse {
     options: Record<string, unknown>;
 }
-interface RegisterFinishRequest {
+interface RegisterClientRequest {
+    client_name?: string;
+    client_uri?: string;
+    contacts?: string[];
+    grant_types?: string[];
+    logo_uri?: string;
+    policy_uri?: string;
+    redirect_uris: string[];
+    response_types?: string[];
+    scope?: string;
+    software_id?: string;
+    software_version?: string;
+    token_endpoint_auth_method?: string;
+    tos_uri?: string;
+}
+interface RegisterClientResponse {
+    client_id: string;
+    client_id_issued_at: number;
+    client_name?: string;
+    client_secret?: string;
+    client_secret_expires_at: number;
+    client_uri?: string;
+    contacts?: string[];
+    grant_types: string[];
+    logo_uri?: string;
+    policy_uri?: string;
+    redirect_uris: string[];
+    registration_access_token?: string;
+    registration_client_uri?: string;
+    response_types: string[];
+    scope: string;
+    software_id?: string;
+    software_version?: string;
+    token_endpoint_auth_method: string;
+    tos_uri?: string;
 }
 interface RegisterFinishResponse {
     display_name: string;
     id: string;
     status: string;
 }
-interface RemoveMemberRequest {
-    MemberID: string;
-    OrgID: string;
+interface ResendVerificationRequest {
+    app_id?: string;
+    email: string;
+}
+interface ResetPasswordRequest {
+    new_password: string;
+    token: string;
 }
 interface ResolvedSetting {
     can_override: boolean;
@@ -807,6 +1097,8 @@ interface ResolvedSettingResponse {
 interface ResolvedSettingsResponse {
     settings: ResolvedSetting[];
 }
+interface ResourceTypeList {
+}
 interface Response {
     app_id: string;
     canceled_at?: string;
@@ -819,15 +1111,9 @@ interface Response {
     trial_end?: string;
     trial_start?: string;
 }
-interface RevokeKeyRequest {
-    KeyID: string;
-}
-interface RevokeRequest {
-    token: string;
-    token_type_hint?: string;
-}
-interface RevokeSessionRequest {
-    SessionID: string;
+interface RevokeConsentRequest {
+    app_id?: string;
+    purpose: string;
 }
 interface Role {
     app_id: string;
@@ -843,6 +1129,11 @@ interface Role {
 interface RoleListResponse {
     roles: Role[];
 }
+interface RotateClientSecretResponse {
+    client_id: string;
+    client_secret: string;
+    id: string;
+}
 interface SMSSendRequest {
     phone?: string;
 }
@@ -858,6 +1149,15 @@ interface SMSVerifyResponse {
     method: string;
     verified: boolean;
 }
+interface SchemaList {
+}
+interface ScimListResponse {
+    Resources: unknown[];
+    itemsPerPage: number;
+    schemas: string[];
+    startIndex: number;
+    totalResults: number;
+}
 interface ScopeValue {
     enforced: boolean;
     scope: string;
@@ -878,9 +1178,44 @@ interface SendRequest {
 interface SendResponse {
     status: string;
 }
+interface ServiceProviderConfig {
+}
 interface SessionListResponse {
     sessions: Record<string, unknown>[];
 }
+interface SetAppClientConfigRequest {
+    app_name?: string;
+    logo_url?: string;
+    magic_link_enabled?: boolean;
+    mfa_enabled?: boolean;
+    mfa_methods?: string[];
+    mfa_required?: boolean;
+    passkey_enabled?: boolean;
+    password_enabled?: boolean;
+    require_email_verification?: boolean;
+    signup_enabled?: boolean;
+    social_enabled?: boolean;
+    social_providers?: string[];
+    sso_enabled?: boolean;
+    waitlist_enabled?: boolean;
+}
+interface SetAppSessionConfigRequest {
+    bind_to_device?: boolean;
+    bind_to_ip?: boolean;
+    max_active_sessions?: number;
+    refresh_token_ttl_seconds?: number;
+    rotate_refresh_token?: boolean;
+    token_exchange_ttl_seconds?: number;
+    token_format?: string;
+    token_ttl_seconds?: number;
+}
+interface SetSettingRequest {
+    app_id?: string;
+    org_id?: string;
+    scope: string;
+    scope_id?: string;
+    value: string;
+}
 interface SettingValueResponse {
     key: string;
     scope: string;
@@ -901,27 +1236,57 @@ interface Settings {
     signin_rate_limit?: number;
     signup_rate_limit?: number;
     skip_email_verification?: boolean;
+    token_exchange_ttl_seconds?: number;
     token_ttl_seconds?: number;
     webhook_url_override?: string;
 }
-interface SignOutRequest {
+interface SignInRequest {
+    app_id?: string;
+    captcha_token?: string;
+    email?: string;
+    password: string;
+    username?: string;
+}
+interface SignUpRequest {
+    app_id?: string;
+    captcha_token?: string;
+    email: string;
+    first_name?: string;
+    last_name?: string;
+    metadata?: Record<string, unknown>;
+    password: string;
+    username?: string;
 }
 interface SlugAvailableResponse {
     available: boolean;
 }
+interface SocialCallbackResponse {
+    expires_at: string;
+    frontend_url?: string;
+    is_new_user: boolean;
+    provider: string;
+    redirect_url?: string;
+    refresh_token: string;
+    session_token: string;
+    user: User;
+}
+interface SocialStartResponse {
+    auth_url: string;
+}
+interface SsoCallbackResponse {
+    expires_at: string;
+    is_new_user: boolean;
+    provider: string;
+    refresh_token: string;
+    session_token: string;
+    user: User;
+}
 interface StartRequest {
     app_id?: string;
     phone: string;
 }
-interface StartResponse {
-    expires_in: number;
-    status: string;
-}
-interface StatusResponse {
-    status: string;
-}
-interface SubIDRequest {
-    SubID: string;
+interface SwitchOrgRequest {
+    org_id: string;
 }
 interface SwitchOrgResponse {
     org_id?: string;
@@ -938,25 +1303,19 @@ interface Team {
 interface TeamListResponse {
     teams: Team[];
 }
-interface TokenRequest {
-    client_id?: string;
-    client_secret?: string;
-    code?: string;
-    code_verifier?: string;
-    device_code?: string;
-    grant_type: string;
-    redirect_uri?: string;
+interface TokenExchangeRequest {
+    scopes?: string[];
+    subject: string;
 }
-interface TokenResponse {
+interface TokenExchangeResponse {
     access_token: string;
+    actor: string;
     expires_in: number;
-    refresh_token?: string;
-    scope?: string;
+    issued_token_type: string;
+    scopes?: string[];
+    subject: string;
     token_type: string;
 }
-interface TrustDeviceRequest {
-    DeviceID: string;
-}
 interface UIMetadata {
     condition?: VisibilityCondition;
     help_text?: string;
@@ -969,296 +1328,39 @@ interface UIMetadata {
     section?: string;
     validation?: Validation;
 }
-interface UnenforceSettingRequest {
-    Key: string;
-    Scope: string;
-    ScopeID: string;
-}
-interface UnlinkAuthMethodRequest {
-    Provider: string;
+interface UnassignRoleRequest {
+    user_id: string;
 }
 interface UnlinkAuthMethodResponse {
     status: string;
 }
-interface UsageItemResponse {
-    feature_key: string;
-    feature_name: string;
-    feature_type: string;
-    limit: number;
-    period: string;
-    remaining: number;
-    used: number;
-}
-interface UsageSummaryResponse {
-    usage: UsageItemResponse[];
-}
-interface User {
-    app_id: string;
-    ban_expires?: string;
-    ban_reason?: string;
-    banned: boolean;
-    created_at: string;
-    deleted_at?: string;
-    display_username?: string;
-    email: string;
-    email_verified: boolean;
-    env_id: string;
-    first_name: string;
-    id: string;
-    image?: string;
-    last_name: string;
-    metadata?: Record<string, unknown>;
-    password_changed_at?: string;
-    phone?: string;
-    phone_verified: boolean;
-    updated_at: string;
-    username?: string;
-}
-interface UserInfo {
-    email?: string;
-    email_verified?: boolean;
-    name?: string;
-    phone_number?: string;
-    sub: string;
-}
-interface UserResource {
-    active: boolean;
-    emails?: Email[];
-    externalId?: string;
-    groups?: GroupRef[];
-    id?: string;
-    meta?: Meta;
-    name: Name;
-    schemas: string[];
-    userName: string;
-}
-interface UserRoleListResponse {
-    roles: Role[];
-}
-interface Validation {
-    max?: number;
-    max_len?: number;
-    min?: number;
-    min_len?: number;
-    pattern?: string;
-    required?: boolean;
-}
-interface VerifyMFARequest {
-    code: string;
-}
-interface VerifyMFAResponse {
-    method: string;
-    recovery_codes?: string[];
-    verified: boolean;
-}
-interface VerifyRequest {
-    app_id?: string;
-    code: string;
-    phone: string;
-}
-interface VerifyResponse {
-    expires_at: string;
-    new_user: boolean;
-    refresh_token: string;
-    session_token: string;
-    user?: User;
-}
-interface VisibilityCondition {
-    key: string;
-    operator?: string;
-    value: string;
-}
-interface VoidInvoiceRequest {
-    InvoiceID: string;
-    reason: string;
-}
-interface Webhook {
-    active: boolean;
-    app_id: string;
-    created_at: string;
-    env_id: string;
-    events: string[];
-    id: string;
-    updated_at: string;
-    url: string;
-}
-interface WebhookListResponse {
-    webhooks: Webhook[];
-}
-interface scimGroupPathParam {
-    GroupID: string;
-}
-interface scimUserPathParam {
-    UserID: string;
-}
-type ScimCreateGroupRequest = Object$1;
-type ScimReplaceGroupRequest = scimGroupPathParam;
-type ScimPatchGroupRequest = scimGroupPathParam;
-type ScimDeleteGroupRequest = scimGroupPathParam;
-type ScimCreateUserRequest = Object$1;
-type ScimReplaceUserRequest = scimUserPathParam;
-type ScimPatchUserRequest = scimUserPathParam;
-type ScimDeleteUserRequest = scimUserPathParam;
-type AdminCreateAppRequest = {
-    logo?: string;
-    name: string;
-    slug: string;
-};
-type SetAppClientConfigRequest = {
-    app_name?: string;
-    logo_url?: string;
-    magic_link_enabled?: boolean;
-    mfa_enabled?: boolean;
-    mfa_methods?: string[];
-    mfa_required?: boolean;
-    passkey_enabled?: boolean;
-    password_enabled?: boolean;
-    require_email_verification?: boolean;
-    signup_enabled?: boolean;
-    social_enabled?: boolean;
-    social_providers?: string[];
-    sso_enabled?: boolean;
-    waitlist_enabled?: boolean;
-};
-type SetAppSessionConfigRequest = {
-    bind_to_device?: boolean;
-    bind_to_ip?: boolean;
-    max_active_sessions?: number;
-    refresh_token_ttl_seconds?: number;
-    rotate_refresh_token?: boolean;
-    token_format?: string;
-    token_ttl_seconds?: number;
-};
-type AdminBulkRevokeSessionsRequest = BulkRevokeSessionsRequest;
-type AdminBulkImportUsersRequest = {
+interface UpdateClientRequest {
     app_id?: string;
-    users: Record<string, unknown>[];
-};
-type CreateOAuth2ClientRequest = {
-    app_id: string;
+    client_id?: string;
     grant_types?: string[];
-    name: string;
+    name?: string;
     public?: boolean;
-    redirect_uris: string[];
+    redirect_uris?: string[];
+    resources?: string[];
     scopes?: string[];
-};
-type DeleteOAuth2ClientRequest = DeleteClientRequest;
-type AdminGrantPlatformOwnerRequest = {
-    email?: string;
-    user_id?: string;
-};
-type AdminCreateServiceAccountRequest = {
-    app_id?: string;
-    description?: string;
-    name: string;
-    scopes?: string[];
-};
-type AdminCreateServiceAccountAPIKeyRequest = {
-    expires_at?: string;
-    name: string;
-    scopes?: string[];
-};
-type EnforceSettingRequest = {
-    app_id?: string;
-    org_id?: string;
-    scope: string;
-    scope_id?: string;
-    value: string;
-};
-type SetSettingRequest = {
-    app_id?: string;
-    org_id?: string;
-    scope: string;
-    scope_id?: string;
-    value: string;
-};
-type SocialAdminUpsertProviderRequest = {
+    token_endpoint_auth_method?: string;
+}
+interface UpdateClientResponse {
     client_id: string;
-    client_secret: string;
-    enabled?: boolean;
-    redirect_url?: string;
-    scopes?: string[];
-};
-type SsoAdminCreateConnectionRequest = {
-    app_id: string;
-    client_id?: string;
-    client_secret?: string;
-    domain: string;
-    issuer?: string;
-    metadata_url?: string;
-    org_id?: string;
-    protocol: string;
-    provider: string;
-};
-type SsoAdminUpdateConnectionRequest = {
-    active?: boolean;
-    client_id?: string;
-    client_secret?: string;
-    domain?: string;
-    issuer?: string;
-    metadata_url?: string;
-    provider?: string;
-};
-type AdminCreateUserRequest = {
-    app_id?: string;
-    email: string;
-    first_name?: string;
-    last_name?: string;
-    password: string;
-    username?: string;
-};
-type AdminUpdateUserRequest = {
-    email_verified?: boolean;
-    first_name?: string;
-    last_name?: string;
-    username?: string;
-};
-type AdminBanUserRequest = {
-    expires_at?: string;
-    reason?: string;
-};
-type CreateBillingPlanRequest = CreatePlanRequest;
-type ActivateBillingPlanRequest = PlanIDRequest;
-type ArchiveBillingPlanRequest = PlanIDRequest;
-type ChangeSubscriptionPlanRequest = ChangePlanRequest;
-type PauseSubscriptionRequest = SubIDRequest;
-type ResumeSubscriptionRequest = SubIDRequest;
-type ChangePasswordRequest = {
-    current_password: string;
-    new_password: string;
-};
-type GrantConsentRequest = {
-    app_id?: string;
-    purpose: string;
-    version?: string;
-};
-type RevokeConsentRequest = {
-    app_id?: string;
-    purpose: string;
-};
-type CreateEnvironmentRequest = {
-    app_id?: string;
-    color?: string;
-    description?: string;
+    grant_types: string[];
+    id: string;
     name: string;
-    settings?: Record<string, unknown>;
-    slug: string;
-    type: string;
-};
-type UpdateEnvironmentRequest = {
+    public: boolean;
+    redirect_uris: string[];
+    resources: string[];
+    scopes: string[];
+}
+interface UpdateEnvironmentRequest {
     color?: string;
     description?: string;
     name?: string;
-};
-type CloneEnvironmentRequest = {
-    description?: string;
-    name: string;
-    settings?: Record<string, unknown>;
-    slug: string;
-    type: string;
-    webhook_url_override?: string;
-};
-type UpdateEnvironmentSettingsRequest = {
+}
+interface UpdateEnvironmentSettingsRequest {
     allow_test_credentials?: boolean;
     check_breached?: boolean;
     lockout_enabled?: boolean;
@@ -1271,152 +1373,230 @@ type UpdateEnvironmentSettingsRequest = {
     signin_rate_limit?: number;
     signup_rate_limit?: number;
     skip_email_verification?: boolean;
+    token_exchange_ttl_seconds?: number;
     token_ttl_seconds?: number;
     webhook_url_override?: string;
-};
-type ForgotPasswordRequest = {
-    app_id?: string;
-    email: string;
-};
-type IntrospectTokenRequest = {
-    token: string;
-};
-type CreateAPIKeyRequest = CreateKeyRequest;
-type RevokeAPIKeyRequest = RevokeKeyRequest;
-type SendMagicLinkRequest = SendRequest;
-type VerifyMagicLinkRequest = VerifyRequest;
-type UpdateMeRequest = {
+}
+interface UpdateMeRequest {
     first_name?: string;
     image?: string;
     last_name?: string;
     username?: string;
-};
-type DeleteMeRequest = DeleteAccountRequest;
-type SwitchOrgRequest = {
-    org_id: string;
-};
-type ChallengeMFARequest = ChallengeRequest;
-type EnrollMFARequest = EnrollRequest;
-type DisableMFARequest = DisableRequest;
-type RegenerateMFARecoveryCodesRequest = RecoveryRegenerateRequest;
-type VerifyRecoveryCodeRequest = RecoveryVerifyRequest;
-type SendSMSCodeRequest = SMSSendRequest;
-type VerifySMSCodeRequest = SMSVerifyRequest;
-type Oauth2DeviceAuthorizeRequest = DeviceAuthRequest;
-type Oauth2DeviceCompleteRequest = DeviceCompleteRequest;
-type Oauth2RevokeRequest = RevokeRequest;
-type Oauth2TokenRequest = TokenRequest;
-type CreateOrganizationRequest = {
-    app_id?: string;
-    logo?: string;
-    name: string;
-    slug: string;
-};
-type AcceptInvitationRequest = {
-    token: string;
-};
-type DeclineInvitationRequest = {
-    token: string;
-};
-type UpdateOrganizationRequest = {
-    logo?: string;
-    name?: string;
-};
-type DeleteOrganizationRequest = DeleteOrgRequest;
-type CreateInvitationRequest = {
-    email: string;
-    role?: string;
-};
-type AddMemberRequest = {
-    role?: string;
-    user_id: string;
-};
-type UpdateMemberRequest = {
+}
+interface UpdateMemberRequest {
     role: string;
-};
-type CreateTeamRequest = {
-    name: string;
-    slug: string;
-};
-type UpdateTeamRequest = {
+}
+interface UpdateOrgRequest {
+    logo?: string;
     name?: string;
-    slug?: string;
-};
-type PasskeyLoginBeginRequest = LoginBeginRequest;
-type PasskeyLoginFinishRequest = LoginFinishRequest;
-type PasskeyRegisterBeginRequest = RegisterBeginRequest;
-type PasskeyRegisterFinishRequest = RegisterFinishRequest;
-type DeletePasskeyRequest = DeleteRequest;
-type PhoneAuthStartRequest = StartRequest;
-type PhoneAuthVerifyRequest = VerifyRequest;
-type RefreshRequest = {
-    refresh_token: string;
-};
-type ResetPasswordRequest = {
-    new_password: string;
-    token: string;
-};
-type AuthsomeCreateRoleRequest = {
-    app_id?: string;
-    description?: string;
-    name: string;
-    parent_id?: string;
-    slug: string;
-};
-type AuthsomeUpdateRoleRequest = {
+}
+interface UpdateRegistrationRequest {
+    client_id?: string;
+    client_name?: string;
+    client_secret?: string;
+    client_uri?: string;
+    contacts?: string[];
+    grant_types?: string[];
+    logo_uri?: string;
+    policy_uri?: string;
+    redirect_uris: string[];
+    scope?: string;
+    software_id?: string;
+    software_version?: string;
+    token_endpoint_auth_method?: string;
+    tos_uri?: string;
+}
+interface UpdateRoleRequest {
     description?: string;
     name?: string;
     parent_id?: string;
-};
-type AuthsomeAssignRoleRequest = {
-    org_id?: string;
-    user_id: string;
-};
-type AuthsomeAddPermissionRequest = {
-    action: string;
-    resource: string;
-};
-type AuthsomeUnassignRoleRequest = {
-    user_id: string;
-};
-type SignInRequest = {
-    app_id?: string;
-    captcha_token?: string;
-    email?: string;
-    password: string;
-    username?: string;
-};
-type SignUpRequest = {
-    app_id?: string;
-    captcha_token?: string;
+}
+interface UpdateTeamRequest {
+    name?: string;
+    slug?: string;
+}
+interface UpdateWebhookRequest {
+    active?: boolean;
+    events?: string[];
+    url?: string;
+}
+interface UsageItemResponse {
+    feature_key: string;
+    feature_name: string;
+    feature_type: string;
+    limit: number;
+    period: string;
+    remaining: number;
+    used: number;
+}
+interface UsageSummaryResponse {
+    usage: UsageItemResponse[];
+}
+interface User {
+    app_id: string;
+    ban_expires?: string;
+    ban_reason?: string;
+    banned: boolean;
+    created_at: string;
+    deleted_at?: string;
+    display_username?: string;
     email: string;
-    first_name?: string;
-    last_name?: string;
+    email_verified: boolean;
+    env_id: string;
+    first_name: string;
+    id: string;
+    image?: string;
+    last_name: string;
     metadata?: Record<string, unknown>;
-    password: string;
+    password_changed_at?: string;
+    phone?: string;
+    phone_verified: boolean;
+    updated_at: string;
     username?: string;
+}
+interface UserInfo {
+    email?: string;
+    email_verified?: boolean;
+    name?: string;
+    phone_number?: string;
+    sub: string;
+}
+interface UserResource {
+    active: boolean;
+    emails?: Email[];
+    externalId?: string;
+    groups?: GroupRef[];
+    id?: string;
+    meta?: Meta;
+    name: Name;
+    schemas: string[];
+    userName: string;
+}
+interface UserRoleListResponse {
+    roles: Role[];
+}
+interface Validation {
+    max?: number;
+    max_len?: number;
+    min?: number;
+    min_len?: number;
+    pattern?: string;
+    required?: boolean;
+}
+interface VerifyEmailRequest {
+    app_id?: string;
+    code?: string;
+    email?: string;
+    token?: string;
+}
+interface VerifyMFARequest {
+    code: string;
+}
+interface VerifyMFAResponse {
+    method: string;
+    recovery_codes?: string[];
+    verified: boolean;
+}
+interface VisibilityCondition {
+    key: string;
+    operator?: string;
+    value: string;
+}
+interface VoidInvoiceRequest {
+    reason: string;
+}
+interface Webhook {
+    active: boolean;
+    app_id: string;
+    created_at: string;
+    env_id: string;
+    events: string[];
+    id: string;
+    updated_at: string;
+    url: string;
+}
+interface WebhookListResponse {
+    webhooks: Webhook[];
+}
+type AdminBulkImportUsersRequest = BulkImportUsersRequest;
+type CreateOAuth2ClientRequest = CreateClientRequest;
+type UpdateOAuth2ClientRequest = UpdateClientRequest;
+type SocialAdminUpsertProviderRequest = AdminUpsertProviderRequest;
+type SsoAdminCreateConnectionRequest = AdminCreateConnectionRequest;
+type SsoAdminUpdateConnectionRequest = AdminUpdateConnectionRequest;
+type CreateBillingPlanRequest = CreatePlanRequest;
+type ChangeSubscriptionPlanRequest = ChangePlanRequest;
+type IntrospectTokenRequest = IntrospectRequest;
+type CreateAPIKeyRequest = CreateKeyRequest;
+type SendMagicLinkRequest = SendRequest;
+type VerifyMagicLinkRequest = MagiclinkVerifyRequest;
+type ChallengeMFARequest = ChallengeRequest;
+type EnrollMFARequest = EnrollRequest;
+type DisableMFARequest = DisableRequest;
+type VerifyRecoveryCodeRequest = RecoveryVerifyRequest;
+type SendSMSCodeRequest = SMSSendRequest;
+type VerifySMSCodeRequest = SMSVerifyRequest;
+type Oauth2DeviceAuthorizeRequest = {
+    client_id: string;
+    resource?: string[];
+    scope?: string;
+};
+type Oauth2DeviceCompleteRequest = {
+    action: string;
+    user_code: string;
 };
-type StartOAuthRequest = StartRequest;
-type SsoACSRequest = ACSRequest;
-type SsoCallbackRequest = CallbackRequest;
-type StartSSOLoginRequest = LoginRequest;
-type VerifyEmailRequest = {
+type Oauth2RegisterClientRequest = RegisterClientRequest;
+type Oauth2UpdateRegistrationRequest = UpdateRegistrationRequest;
+type Oauth2RevokeRequest = {
+    client_id?: string;
+    client_secret?: string;
     token: string;
+    token_type_hint?: string;
 };
-type ResendEmailVerificationRequest = {
-    app_id?: string;
-    email: string;
+type Oauth2TokenRequest = {
+    actor_token?: string;
+    actor_token_type?: string;
+    audience?: string;
+    client_id?: string;
+    client_secret?: string;
+    code?: string;
+    code_verifier?: string;
+    device_code?: string;
+    grant_type: string;
+    redirect_uri?: string;
+    requested_token_type?: string;
+    resource?: string[];
+    scope?: string;
+    subject_token?: string;
+    subject_token_type?: string;
 };
-type CreateWebhookRequest = {
-    app_id?: string;
-    events: string[];
-    url: string;
+type CreateOrganizationRequest = CreateOrgRequest;
+type UpdateOrganizationRequest = UpdateOrgRequest;
+type PasskeyLoginFinishRequest = {
+    id: string;
+    rawId: string;
+    response: AssertionResponse;
+    type: string;
 };
-type UpdateWebhookRequest = {
-    active?: boolean;
-    events?: string[];
-    url?: string;
+type PasskeyRegisterBeginRequest = RegisterBeginRequest;
+type PasskeyRegisterFinishRequest = {
+    id: string;
+    rawId: string;
+    response: AttestationResponse;
+    type: string;
 };
+type PhoneAuthStartRequest = StartRequest;
+type PhoneAuthVerifyRequest = PhoneVerifyRequest;
+type MintChildPrincipalRequest = MintChildRequest;
+type AuthsomeCreateRoleRequest = CreateRoleRequest;
+type AuthsomeUpdateRoleRequest = UpdateRoleRequest;
+type AuthsomeAssignRoleRequest = AssignRoleRequest;
+type AuthsomeAddPermissionRequest = AddPermissionRequest;
+type AuthsomeUnassignRoleRequest = UnassignRoleRequest;
+type SsoExchangeRequest = ExchangeRequest;
+type StartSSOLoginByDomainRequest = LoginByDomainRequest;
+type ExchangeTokenRequest = TokenExchangeRequest;
+type ResendEmailVerificationRequest = ResendVerificationRequest;
 
 /** Core type definitions for AuthSome UI Kit. */
 
@@ -1672,17 +1852,17 @@ declare class AuthClient$1 {
      * OpenID Connect Discovery
      * GET /.well-known/openid-configuration
      */
-    oidcDiscovery(token: string): Promise<DiscoveryResponse>;
+    oidcDiscoveryPrefixed(token: string): Promise<DiscoveryResponse>;
     /**
      * List SCIM Groups
      * GET /scim/v2/Groups
      */
-    scimListGroups(token: string): Promise<ListResponse$1>;
+    scimListGroups(token: string): Promise<ScimListResponse>;
     /**
      * Create SCIM Group
      * POST /scim/v2/Groups
      */
-    scimCreateGroup(body: ScimCreateGroupRequest, token: string): Promise<GroupResource>;
+    scimCreateGroup(token: string): Promise<GroupResource>;
     /**
      * Get SCIM Group
      * GET /scim/v2/Groups/{groupId}
@@ -1692,42 +1872,42 @@ declare class AuthClient$1 {
      * Replace SCIM Group
      * PUT /scim/v2/Groups/{groupId}
      */
-    scimReplaceGroup(groupId: string, body: ScimReplaceGroupRequest, token: string): Promise<GroupResource>;
+    scimReplaceGroup(groupId: string, token: string): Promise<GroupResource>;
     /**
      * Patch SCIM Group
      * PATCH /scim/v2/Groups/{groupId}
      */
-    scimPatchGroup(groupId: string, body: ScimPatchGroupRequest, token: string): Promise<GroupResource>;
+    scimPatchGroup(groupId: string, token: string): Promise<GroupResource>;
     /**
      * Delete SCIM Group
      * DELETE /scim/v2/Groups/{groupId}
      */
-    scimDeleteGroup(groupId: string, body: ScimDeleteGroupRequest, token: string): Promise<Object$1>;
+    scimDeleteGroup(groupId: string, token: string): Promise<Empty>;
     /**
      * SCIM Resource Types
      * GET /scim/v2/ResourceTypes
      */
-    scimResourceTypes(token: string): Promise<Object$1>;
+    scimResourceTypes(token: string): Promise<ResourceTypeList>;
     /**
      * SCIM Schemas
      * GET /scim/v2/Schemas
      */
-    scimSchemas(token: string): Promise<Object$1>;
+    scimSchemas(token: string): Promise<SchemaList>;
     /**
      * SCIM Service Provider Configuration
      * GET /scim/v2/ServiceProviderConfig
      */
-    scimServiceProviderConfig(token: string): Promise<Object$1>;
+    scimServiceProviderConfig(token: string): Promise<ServiceProviderConfig>;
     /**
      * List SCIM Users
      * GET /scim/v2/Users
      */
-    scimListUsers(token: string): Promise<ListResponse$1>;
+    scimListUsers(token: string): Promise<ScimListResponse>;
     /**
      * Create SCIM User
      * POST /scim/v2/Users
      */
-    scimCreateUser(body: ScimCreateUserRequest, token: string): Promise<UserResource>;
+    scimCreateUser(token: string): Promise<UserResource>;
     /**
      * Get SCIM User
      * GET /scim/v2/Users/{userId}
@@ -1737,17 +1917,17 @@ declare class AuthClient$1 {
      * Replace SCIM User
      * PUT /scim/v2/Users/{userId}
      */
-    scimReplaceUser(userId: string, body: ScimReplaceUserRequest, token: string): Promise<UserResource>;
+    scimReplaceUser(userId: string, token: string): Promise<UserResource>;
     /**
      * Patch SCIM User
      * PATCH /scim/v2/Users/{userId}
      */
-    scimPatchUser(userId: string, body: ScimPatchUserRequest, token: string): Promise<UserResource>;
+    scimPatchUser(userId: string, token: string): Promise<UserResource>;
     /**
      * Delete SCIM User
      * DELETE /scim/v2/Users/{userId}
      */
-    scimDeleteUser(userId: string, body: ScimDeleteUserRequest, token: string): Promise<Object$1>;
+    scimDeleteUser(userId: string, token: string): Promise<Empty>;
     /**
      * Create application (admin)
      * POST /v1/admin/apps
@@ -1757,42 +1937,42 @@ declare class AuthClient$1 {
      * Delete application (admin)
      * DELETE /v1/admin/apps/{appId}
      */
-    adminDeleteApp(appId: string, body: AdminDeleteAppRequest, token: string): Promise<StatusResponse>;
+    adminDeleteApp(appId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Get per-app client config overrides
      * GET /v1/admin/apps/{appId}/client-config
      */
-    getAppClientConfig(appId: string, token: string): Promise<Config>;
+    getAppClientConfig(appId: string, token: string): Promise<AppclientconfigConfig>;
     /**
      * Set per-app client config overrides
      * PUT /v1/admin/apps/{appId}/client-config
      */
-    setAppClientConfig(appId: string, body: SetAppClientConfigRequest, token: string): Promise<Config>;
+    setAppClientConfig(appId: string, body: SetAppClientConfigRequest, token: string): Promise<AppclientconfigConfig>;
     /**
      * Delete per-app client config overrides
      * DELETE /v1/admin/apps/{appId}/client-config
      */
-    deleteAppClientConfig(appId: string, body: DeleteAppClientConfigRequest, token: string): Promise<StatusResponse>;
+    deleteAppClientConfig(appId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Get per-app session config
      * GET /v1/admin/apps/{appId}/session-config
      */
-    getAppSessionConfig(appId: string, token: string): Promise<Config>;
+    getAppSessionConfig(appId: string, token: string): Promise<AppsessionconfigConfig>;
     /**
      * Set per-app session config
      * PUT /v1/admin/apps/{appId}/session-config
      */
-    setAppSessionConfig(appId: string, body: SetAppSessionConfigRequest, token: string): Promise<Config>;
+    setAppSessionConfig(appId: string, body: SetAppSessionConfigRequest, token: string): Promise<AppsessionconfigConfig>;
     /**
      * Delete per-app session config
      * DELETE /v1/admin/apps/{appId}/session-config
      */
-    deleteAppSessionConfig(appId: string, body: DeleteAppSessionConfigRequest, token: string): Promise<StatusResponse>;
+    deleteAppSessionConfig(appId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Bulk revoke sessions (admin)
      * DELETE /v1/admin/bulk/sessions
      */
-    adminBulkRevokeSessions(body: AdminBulkRevokeSessionsRequest, token: string): Promise<BulkRevokeSessionsResponse>;
+    adminBulkRevokeSessions(user_id: string, token: string): Promise<BulkRevokeSessionsResponse>;
     /**
      * Bulk import users (admin)
      * POST /v1/admin/bulk/users/import
@@ -1802,32 +1982,42 @@ declare class AuthClient$1 {
      * Stop impersonation (admin)
      * POST /v1/admin/impersonate/stop
      */
-    adminStopImpersonation(body: AdminStopImpersonationRequest, token: string): Promise<StatusResponse>;
+    adminStopImpersonation(token: string): Promise<ApiStatusResponse>;
     /**
      * Impersonate user (admin)
      * POST /v1/admin/impersonate/{userId}
      */
-    adminImpersonate(userId: string, body: AdminImpersonateRequest, token: string): Promise<AuthResponse>;
+    adminImpersonate(userId: string, token: string): Promise<AuthResponse>;
     /**
      * List OAuth2 clients
      * GET /v1/admin/oauth/clients
      */
-    listOAuth2Clients(token: string): Promise<ListClientsResponse>;
+    listOAuth2Clients(app_id: string, token: string): Promise<ListClientsResponse>;
     /**
      * Create OAuth2 client
      * POST /v1/admin/oauth/clients
      */
     createOAuth2Client(body: CreateOAuth2ClientRequest, token: string): Promise<CreateClientResponse>;
+    /**
+     * Update OAuth2 client
+     * PATCH /v1/admin/oauth/clients/{clientId}
+     */
+    updateOAuth2Client(clientId: string, body: UpdateOAuth2ClientRequest, token: string): Promise<UpdateClientResponse>;
     /**
      * Delete OAuth2 client
      * DELETE /v1/admin/oauth/clients/{clientId}
      */
-    deleteOAuth2Client(clientId: string, body: DeleteOAuth2ClientRequest, token: string): Promise<void>;
+    deleteOAuth2Client(clientId: string, token: string): Promise<void>;
+    /**
+     * Rotate OAuth2 client secret
+     * POST /v1/admin/oauth/clients/{clientId}/secret
+     */
+    rotateOAuth2ClientSecret(clientId: string, token: string): Promise<RotateClientSecretResponse>;
     /**
      * List organizations (admin)
      * GET /v1/admin/orgs
      */
-    adminListOrgs(): Promise<OrgListResponse>;
+    adminListOrgs(app_id: string, token: string): Promise<OrgListResponse>;
     /**
      * Grant platform-owner role (admin)
      * POST /v1/admin/platform/owners
@@ -1837,12 +2027,12 @@ declare class AuthClient$1 {
      * Revoke platform-owner role (admin)
      * DELETE /v1/admin/platform/owners/{userID}
      */
-    adminRevokePlatformOwner(userID: string, body: AdminRevokePlatformOwnerRequest, token: string): Promise<AdminPlatformOwnerResponse>;
+    adminRevokePlatformOwner(userID: string, token: string): Promise<AdminPlatformOwnerResponse>;
     /**
      * List service accounts (admin)
      * GET /v1/admin/service-accounts
      */
-    adminListServiceAccounts(token: string): Promise<AdminServiceAccountListResponse>;
+    adminListServiceAccounts(app_id: string, token: string, limit?: number, cursor?: string): Promise<AdminServiceAccountListResponse>;
     /**
      * Create service account (admin)
      * POST /v1/admin/service-accounts
@@ -1857,7 +2047,7 @@ declare class AuthClient$1 {
      * Delete service account (admin)
      * DELETE /v1/admin/service-accounts/{serviceAccountId}
      */
-    adminDeleteServiceAccount(serviceAccountId: string, body: AdminDeleteServiceAccountRequest, token: string): Promise<StatusResponse>;
+    adminDeleteServiceAccount(serviceAccountId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Create service account API key (admin)
      * POST /v1/admin/service-accounts/{serviceAccountId}/api-keys
@@ -1867,7 +2057,7 @@ declare class AuthClient$1 {
      * List all setting definitions
      * GET /v1/admin/settings/definitions
      */
-    listSettingsDefinitions(token: string): Promise<ListDefinitionsResponse>;
+    listSettingsDefinitions(namespace: string, category: string, token: string): Promise<ListDefinitionsResponse>;
     /**
      * List definitions for a namespace
      * GET /v1/admin/settings/definitions/{namespace}
@@ -1882,17 +2072,17 @@ declare class AuthClient$1 {
      * Remove enforcement from a setting
      * DELETE /v1/admin/settings/enforce/{key}
      */
-    unenforceSetting(key: string, body: UnenforceSettingRequest, token: string): Promise<StatusResponse>;
+    unenforceSetting(key: string, scope: string, scope_id: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Resolve all settings at a scope
      * GET /v1/admin/settings/resolve
      */
-    resolveSettings(token: string): Promise<ResolvedSettingsResponse>;
+    resolveSettings(namespace: string, app_id: string, org_id: string, user_id: string, token: string): Promise<ResolvedSettingsResponse>;
     /**
      * Resolve one setting with cascade details
      * GET /v1/admin/settings/resolve/{key}
      */
-    resolveSetting(key: string, token: string): Promise<ResolvedSettingResponse>;
+    resolveSetting(key: string, app_id: string, org_id: string, user_id: string, token: string): Promise<ResolvedSettingResponse>;
     /**
      * Set a setting value at a scope
      * PUT /v1/admin/settings/values/{key}
@@ -1902,7 +2092,7 @@ declare class AuthClient$1 {
      * Delete a setting override at a scope
      * DELETE /v1/admin/settings/values/{key}
      */
-    deleteSetting(key: string, body: DeleteSettingRequest, token: string): Promise<StatusResponse>;
+    deleteSetting(key: string, scope: string, scope_id: string, token: string): Promise<ApiStatusResponse>;
     /**
      * List social providers (admin)
      * GET /v1/admin/social/providers
@@ -1952,12 +2142,17 @@ declare class AuthClient$1 {
      * Get stats (admin)
      * GET /v1/admin/stats
      */
-    adminGetStats(token: string): Promise<AdminStatsResponse>;
+    adminGetStats(app_id: string, token: string): Promise<AdminStatsResponse>;
     /**
      * List users (admin)
      * GET /v1/admin/users
      */
-    adminListUsers(token: string): Promise<AdminUserListResponse>;
+    adminListUsers(app_id: string, token: string, email?: string, cursor?: string, limit?: number): Promise<AdminUserListResponse>;
+    /**
+     * Copy user to another app (admin)
+     * POST /v1/admin/users/copy
+     */
+    adminCopyUser(body: AdminCopyUserRequest, token: string): Promise<User>;
     /**
      * Create user (admin)
      * POST /v1/admin/users/create
@@ -1977,22 +2172,22 @@ declare class AuthClient$1 {
      * Delete user (admin)
      * DELETE /v1/admin/users/{userId}
      */
-    adminDeleteUser(userId: string, body: AdminDeleteUserRequest, token: string): Promise<StatusResponse>;
+    adminDeleteUser(userId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Ban user (admin)
      * POST /v1/admin/users/{userId}/ban
      */
-    adminBanUser(userId: string, body: AdminBanUserRequest, token: string): Promise<StatusResponse>;
+    adminBanUser(userId: string, body: AdminBanUserRequest, token: string): Promise<ApiStatusResponse>;
     /**
      * Unban user (admin)
      * POST /v1/admin/users/{userId}/unban
      */
-    adminUnbanUser(userId: string, body: AdminUnbanUserRequest, token: string): Promise<StatusResponse>;
+    adminUnbanUser(userId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * List coupons
      * GET /v1/billing/coupons
      */
-    listCoupons(token: string): Promise<ListCouponsResponse>;
+    listCoupons(app_id: string, token: string): Promise<ListCouponsResponse>;
     /**
      * Create coupon
      * POST /v1/billing/coupons
@@ -2002,7 +2197,7 @@ declare class AuthClient$1 {
      * Delete coupon
      * DELETE /v1/billing/coupons/{couponId}
      */
-    deleteCoupon(couponId: string, body: DeleteCouponRequest, token: string): Promise<void>;
+    deleteCoupon(couponId: string, token: string): Promise<void>;
     /**
      * Check feature entitlement
      * GET /v1/billing/entitlements/{featureKey}
@@ -2012,7 +2207,7 @@ declare class AuthClient$1 {
      * List invoices
      * GET /v1/billing/invoices
      */
-    listInvoices(token: string): Promise<ListInvoicesResponse>;
+    listInvoices(app_id: string, tenant_id: string, token: string): Promise<ListInvoicesResponse>;
     /**
      * Get invoice
      * GET /v1/billing/invoices/{invoiceId}
@@ -2032,7 +2227,7 @@ declare class AuthClient$1 {
      * List billing plans
      * GET /v1/billing/plans
      */
-    listBillingPlans(token: string): Promise<ListPlansResponse>;
+    listBillingPlans(app_id: string, token: string): Promise<ListPlansResponse>;
     /**
      * Create billing plan
      * POST /v1/billing/plans
@@ -2047,17 +2242,17 @@ declare class AuthClient$1 {
      * Activate a billing plan
      * POST /v1/billing/plans/{planId}/activate
      */
-    activateBillingPlan(planId: string, body: ActivateBillingPlanRequest, token: string): Promise<void>;
+    activateBillingPlan(planId: string, token: string): Promise<void>;
     /**
      * Archive a billing plan
      * POST /v1/billing/plans/{planId}/archive
      */
-    archiveBillingPlan(planId: string, body: ArchiveBillingPlanRequest, token: string): Promise<void>;
+    archiveBillingPlan(planId: string, token: string): Promise<void>;
     /**
      * List subscriptions
      * GET /v1/billing/subscriptions
      */
-    listSubscriptions(token: string): Promise<ListSubscriptionsResponse>;
+    listSubscriptions(app_id: string, tenant_id: string, token: string, status?: string): Promise<ListSubscriptionsResponse>;
     /**
      * Create subscription
      * POST /v1/billing/subscriptions
@@ -2067,7 +2262,7 @@ declare class AuthClient$1 {
      * Get active subscription
      * GET /v1/billing/subscriptions/active
      */
-    getActiveSubscription(token: string): Promise<Response>;
+    getActiveSubscription(app_id: string, tenant_id: string, token: string): Promise<Response>;
     /**
      * Cancel subscription
      * POST /v1/billing/subscriptions/{subId}/cancel
@@ -2082,42 +2277,42 @@ declare class AuthClient$1 {
      * Pause subscription
      * POST /v1/billing/subscriptions/{subId}/pause
      */
-    pauseSubscription(subId: string, body: PauseSubscriptionRequest, token: string): Promise<void>;
+    pauseSubscription(subId: string, token: string): Promise<void>;
     /**
      * Resume subscription
      * POST /v1/billing/subscriptions/{subId}/resume
      */
-    resumeSubscription(subId: string, body: ResumeSubscriptionRequest, token: string): Promise<void>;
+    resumeSubscription(subId: string, token: string): Promise<void>;
     /**
      * Get usage summary
      * GET /v1/billing/usage
      */
-    getUsageSummary(token: string): Promise<UsageSummaryResponse>;
+    getUsageSummary(app_id: string, tenant_id: string, token: string): Promise<UsageSummaryResponse>;
     /**
      * Change password
      * POST /v1/change-password
      */
-    changePassword(body: ChangePasswordRequest, token: string): Promise<StatusResponse>;
+    changePassword(body: ChangePasswordRequest, token: string): Promise<ApiStatusResponse>;
     /**
      * Get client configuration
      * GET /v1/client-config
      */
-    getClientConfig(token: string): Promise<ClientConfigResponse>;
+    getClientConfig(token: string, key?: string): Promise<ClientConfigResponse>;
     /**
      * List consents
      * GET /v1/consent
      */
-    listConsents(): Promise<ListResponse$1>;
+    listConsents(purpose: string, cursor: string, limit: number, token: string): Promise<ConsentListResponse>;
     /**
      * Grant consent
      * POST /v1/consent/grant
      */
-    grantConsent(body: GrantConsentRequest): Promise<Consent>;
+    grantConsent(body: GrantConsentRequest, token: string): Promise<Consent>;
     /**
      * Revoke consent
      * POST /v1/consent/revoke
      */
-    revokeConsent(body: RevokeConsentRequest): Promise<StatusResponse>;
+    revokeConsent(body: RevokeConsentRequest, token: string): Promise<ConsentStatusResponse>;
     /**
      * List devices
      * GET /v1/devices
@@ -2132,17 +2327,17 @@ declare class AuthClient$1 {
      * Delete device
      * DELETE /v1/devices/{deviceId}
      */
-    deleteDevice(deviceId: string, body: DeleteDeviceRequest, token: string): Promise<StatusResponse>;
+    deleteDevice(deviceId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Trust device
      * PATCH /v1/devices/{deviceId}/trust
      */
-    trustDevice(deviceId: string, body: TrustDeviceRequest, token: string): Promise<Device>;
+    trustDevice(deviceId: string, token: string): Promise<Device>;
     /**
      * List environments
      * GET /v1/environments
      */
-    listEnvironments(token: string): Promise<EnvironmentListResponse>;
+    listEnvironments(app_id: string, token: string): Promise<EnvironmentListResponse>;
     /**
      * Create environment
      * POST /v1/environments
@@ -2162,7 +2357,7 @@ declare class AuthClient$1 {
      * Delete environment
      * DELETE /v1/environments/{envId}
      */
-    deleteEnvironment(envId: string, token: string): Promise<StatusResponse>;
+    deleteEnvironment(envId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Clone environment
      * POST /v1/environments/{envId}/clone
@@ -2172,7 +2367,7 @@ declare class AuthClient$1 {
      * Set default environment
      * POST /v1/environments/{envId}/set-default
      */
-    setDefaultEnvironment(envId: string, token: string): Promise<StatusResponse>;
+    setDefaultEnvironment(envId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Get environment settings
      * GET /v1/environments/{envId}/settings
@@ -2202,7 +2397,7 @@ declare class AuthClient$1 {
      * List API keys
      * GET /v1/keys
      */
-    listAPIKeys(token: string): Promise<ListKeysResponse>;
+    listAPIKeys(app_id: string, token: string, user_id?: string): Promise<ListKeysResponse>;
     /**
      * Create API key
      * POST /v1/keys
@@ -2212,7 +2407,7 @@ declare class AuthClient$1 {
      * Revoke API key
      * DELETE /v1/keys/{keyId}
      */
-    revokeAPIKey(keyId: string, body: RevokeAPIKeyRequest, token: string): Promise<void>;
+    revokeAPIKey(keyId: string, token: string): Promise<void>;
     /**
      * Send magic link
      * POST /v1/magic-link/send
@@ -2222,12 +2417,12 @@ declare class AuthClient$1 {
      * Verify magic link
      * POST /v1/magic-link/verify
      */
-    verifyMagicLink(body: VerifyMagicLinkRequest): Promise<VerifyResponse>;
+    verifyMagicLink(body: VerifyMagicLinkRequest): Promise<MagiclinkVerifyResponse>;
     /**
      * Get current user
      * GET /v1/me
      */
-    getMe(token: string): Promise<User>;
+    getMe(token: string): Promise<MeResponse>;
     /**
      * Update current user
      * PATCH /v1/me
@@ -2237,7 +2432,7 @@ declare class AuthClient$1 {
      * Delete account
      * DELETE /v1/me
      */
-    deleteMe(body: DeleteMeRequest, token: string): Promise<StatusResponse>;
+    deleteMe(token: string): Promise<ApiStatusResponse>;
     /**
      * List linked auth methods
      * GET /v1/me/auth-methods
@@ -2247,7 +2442,7 @@ declare class AuthClient$1 {
      * Unlink an auth method
      * DELETE /v1/me/auth-methods/{provider}
      */
-    unlinkAuthMethod(provider: string, body: UnlinkAuthMethodRequest, token: string): Promise<UnlinkAuthMethodResponse>;
+    unlinkAuthMethod(provider: string, token: string): Promise<UnlinkAuthMethodResponse>;
     /**
      * Export user data
      * GET /v1/me/export
@@ -2277,7 +2472,7 @@ declare class AuthClient$1 {
      * Regenerate MFA recovery codes
      * POST /v1/mfa/recovery/regenerate
      */
-    regenerateMFARecoveryCodes(body: RegenerateMFARecoveryCodesRequest, token: string): Promise<RecoveryRegenerateResponse>;
+    regenerateMFARecoveryCodes(token: string): Promise<RecoveryRegenerateResponse>;
     /**
      * Verify MFA recovery code
      * POST /v1/mfa/recovery/verify
@@ -2302,7 +2497,7 @@ declare class AuthClient$1 {
      * OAuth2 Authorization
      * GET /v1/oauth/authorize
      */
-    oauth2Authorize(): Promise<void>;
+    oauth2Authorize(response_type: string, client_id: string, redirect_uri?: string, scope?: string, state?: string, code_challenge?: string, code_challenge_method?: string, resource?: string[]): Promise<void>;
     /**
      * Device Authorization
      * POST /v1/oauth/device/authorize
@@ -2312,7 +2507,27 @@ declare class AuthClient$1 {
      * Complete device authorization
      * POST /v1/oauth/device/complete
      */
-    oauth2DeviceComplete(body: Oauth2DeviceCompleteRequest): Promise<DeviceCompleteResponse>;
+    oauth2DeviceComplete(body: Oauth2DeviceCompleteRequest, token: string): Promise<DeviceCompleteResponse>;
+    /**
+     * Register OAuth2 client
+     * POST /v1/oauth/register
+     */
+    oauth2RegisterClient(body: Oauth2RegisterClientRequest, token: string): Promise<RegisterClientResponse>;
+    /**
+     * Read OAuth2 client registration
+     * GET /v1/oauth/register/{clientId}
+     */
+    oauth2ReadRegistration(clientId: string, token: string): Promise<RegisterClientResponse>;
+    /**
+     * Update OAuth2 client registration
+     * PUT /v1/oauth/register/{clientId}
+     */
+    oauth2UpdateRegistration(clientId: string, body: Oauth2UpdateRegistrationRequest, token: string): Promise<RegisterClientResponse>;
+    /**
+     * Delete OAuth2 client registration
+     * DELETE /v1/oauth/register/{clientId}
+     */
+    oauth2DeleteRegistration(clientId: string, token: string): Promise<void>;
     /**
      * Revoke token
      * POST /v1/oauth/revoke
@@ -2322,7 +2537,7 @@ declare class AuthClient$1 {
      * OAuth2 Token
      * POST /v1/oauth/token
      */
-    oauth2Token(body: Oauth2TokenRequest): Promise<TokenResponse>;
+    oauth2Token(body: Oauth2TokenRequest): Promise<Oauth2providerTokenResponse>;
     /**
      * OIDC UserInfo
      * GET /v1/oauth/userinfo
@@ -2342,7 +2557,7 @@ declare class AuthClient$1 {
      * Check slug availability
      * GET /v1/orgs/check-slug
      */
-    checkOrgSlug(token: string): Promise<SlugAvailableResponse>;
+    checkOrgSlug(app_id: string, slug: string, token: string): Promise<SlugAvailableResponse>;
     /**
      * Accept invitation
      * POST /v1/orgs/invitations/accept
@@ -2352,7 +2567,7 @@ declare class AuthClient$1 {
      * Decline invitation
      * POST /v1/orgs/invitations/decline
      */
-    declineInvitation(body: DeclineInvitationRequest, token: string): Promise<StatusResponse>;
+    declineInvitation(body: DeclineInvitationRequest, token: string): Promise<OrganizationStatusResponse>;
     /**
      * Get organization
      * GET /v1/orgs/{orgId}
@@ -2367,7 +2582,7 @@ declare class AuthClient$1 {
      * Delete organization
      * DELETE /v1/orgs/{orgId}
      */
-    deleteOrganization(orgId: string, body: DeleteOrganizationRequest, token: string): Promise<StatusResponse>;
+    deleteOrganization(orgId: string, token: string): Promise<OrganizationStatusResponse>;
     /**
      * List invitations
      * GET /v1/orgs/{orgId}/invitations
@@ -2397,7 +2612,7 @@ declare class AuthClient$1 {
      * Remove member
      * DELETE /v1/orgs/{orgId}/members/{memberId}
      */
-    removeMember(orgId: string, memberId: string, body: RemoveMemberRequest, token: string): Promise<StatusResponse>;
+    removeMember(orgId: string, memberId: string, token: string): Promise<OrganizationStatusResponse>;
     /**
      * List teams
      * GET /v1/orgs/{orgId}/teams
@@ -2422,17 +2637,17 @@ declare class AuthClient$1 {
      * Delete team
      * DELETE /v1/orgs/{orgId}/teams/{teamId}
      */
-    deleteTeam(orgId: string, teamId: string, body: DeleteTeamRequest, token: string): Promise<StatusResponse>;
+    deleteTeam(orgId: string, teamId: string, token: string): Promise<OrganizationStatusResponse>;
     /**
      * List passkeys
      * GET /v1/passkeys
      */
-    listPasskeys(token: string): Promise<ListResponse$1>;
+    listPasskeys(token: string): Promise<PasskeyListResponse>;
     /**
      * Begin passkey login
      * POST /v1/passkeys/login/begin
      */
-    passkeyLoginBegin(body: PasskeyLoginBeginRequest): Promise<LoginBeginResponse>;
+    passkeyLoginBegin(): Promise<LoginBeginResponse>;
     /**
      * Complete passkey login
      * POST /v1/passkeys/login/finish
@@ -2452,32 +2667,42 @@ declare class AuthClient$1 {
      * Delete passkey
      * DELETE /v1/passkeys/{credentialId}
      */
-    deletePasskey(credentialId: string, body: DeletePasskeyRequest, token: string): Promise<DeleteResponse>;
+    deletePasskey(credentialId: string, token: string): Promise<DeleteResponse>;
     /**
      * Start phone authentication
      * POST /v1/phone/start
      */
-    phoneAuthStart(body: PhoneAuthStartRequest): Promise<StartResponse>;
+    phoneAuthStart(body: PhoneAuthStartRequest): Promise<PhoneStartResponse>;
     /**
      * Verify phone OTP
      * POST /v1/phone/verify
      */
-    phoneAuthVerify(body: PhoneAuthVerifyRequest): Promise<VerifyResponse>;
+    phoneAuthVerify(body: PhoneAuthVerifyRequest): Promise<PhoneVerifyResponse>;
+    /**
+     * List what may act on your behalf
+     * GET /v1/principals/me/delegations
+     */
+    listMyDelegations(token: string): Promise<DelegationListResponse>;
+    /**
+     * Mint an ephemeral child principal
+     * POST /v1/principals/{id}/children
+     */
+    mintChildPrincipal(id: string, body: MintChildPrincipalRequest, token: string): Promise<MintChildResponse>;
     /**
      * Refresh tokens
      * POST /v1/refresh
      */
-    refresh(body: RefreshRequest): Promise<TokenResponse>;
+    refresh(body: RefreshRequest): Promise<ApiTokenResponse>;
     /**
      * Reset password
      * POST /v1/reset-password
      */
-    resetPassword(body: ResetPasswordRequest): Promise<StatusResponse>;
+    resetPassword(body: ResetPasswordRequest): Promise<ApiStatusResponse>;
     /**
      * List roles
      * GET /v1/roles
      */
-    authsomeListRoles(token: string): Promise<RoleListResponse>;
+    authsomeListRoles(app_id: string, token: string): Promise<RoleListResponse>;
     /**
      * Create role
      * POST /v1/roles
@@ -2497,12 +2722,12 @@ declare class AuthClient$1 {
      * Delete role
      * DELETE /v1/roles/{roleId}
      */
-    authsomeDeleteRole(roleId: string, token: string): Promise<StatusResponse>;
+    authsomeDeleteRole(roleId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Assign role to user
      * POST /v1/roles/{roleId}/assign
      */
-    authsomeAssignRole(roleId: string, body: AuthsomeAssignRoleRequest, token: string): Promise<StatusResponse>;
+    authsomeAssignRole(roleId: string, body: AuthsomeAssignRoleRequest, token: string): Promise<ApiStatusResponse>;
     /**
      * List role permissions
      * GET /v1/roles/{roleId}/permissions
@@ -2517,12 +2742,12 @@ declare class AuthClient$1 {
      * Remove permission from role
      * DELETE /v1/roles/{roleId}/permissions/{permissionId}
      */
-    authsomeRemovePermission(roleId: string, permissionId: string, token: string): Promise<StatusResponse>;
+    authsomeRemovePermission(roleId: string, permissionId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Unassign role from user
      * POST /v1/roles/{roleId}/unassign
      */
-    authsomeUnassignRole(roleId: string, body: AuthsomeUnassignRoleRequest, token: string): Promise<StatusResponse>;
+    authsomeUnassignRole(roleId: string, body: AuthsomeUnassignRoleRequest, token: string): Promise<ApiStatusResponse>;
     /**
      * List sessions
      * GET /v1/sessions
@@ -2532,7 +2757,7 @@ declare class AuthClient$1 {
      * Revoke session
      * DELETE /v1/sessions/{sessionId}
      */
-    revokeSession(sessionId: string, body: RevokeSessionRequest, token: string): Promise<StatusResponse>;
+    revokeSession(sessionId: string, token: string): Promise<ApiStatusResponse>;
     /**
      * Sign in
      * POST /v1/signin
@@ -2542,7 +2767,7 @@ declare class AuthClient$1 {
      * Sign out
      * POST /v1/signout
      */
-    signOut(body: SignOutRequest, token: string): Promise<StatusResponse>;
+    signOut(token: string): Promise<ApiStatusResponse>;
     /**
      * Sign up
      * POST /v1/signup
@@ -2552,47 +2777,72 @@ declare class AuthClient$1 {
      * Start OAuth flow
      * POST /v1/social/{provider}
      */
-    startOAuth(provider: string, body: StartOAuthRequest): Promise<StartResponse>;
+    startOAuth(provider: string, frontend_url?: string, redirect_url?: string): Promise<SocialStartResponse>;
     /**
      * OAuth callback
      * GET /v1/social/{provider}/callback
      */
-    oauthCallback(provider: string): Promise<CallbackResponse>;
+    oauthCallback(provider: string, state?: string, code?: string, error?: string): Promise<SocialCallbackResponse>;
+    /**
+     * Exchange SSO one-time code for a session
+     * POST /v1/sso/exchange
+     */
+    ssoExchange(body: SsoExchangeRequest, token: string): Promise<SsoCallbackResponse>;
+    /**
+     * Start SSO login by email domain
+     * POST /v1/sso/login
+     */
+    startSSOLoginByDomain(body: StartSSOLoginByDomainRequest, token: string): Promise<LoginResponse>;
     /**
      * SSO SAML ACS endpoint
      * POST /v1/sso/{provider}/acs
      */
-    ssoACS(provider: string, body: SsoACSRequest): Promise<CallbackResponse>;
+    ssoACS(provider: string): Promise<void>;
+    /**
+     * SSO OIDC redirect landing
+     * GET /v1/sso/{provider}/callback
+     */
+    ssoOIDCRedirect(provider: string, token: string): Promise<void>;
     /**
      * SSO callback (OIDC)
      * POST /v1/sso/{provider}/callback
      */
-    ssoCallback(provider: string, body: SsoCallbackRequest): Promise<CallbackResponse>;
+    ssoCallback(provider: string, state?: string, code?: string, error?: string): Promise<SsoCallbackResponse>;
     /**
      * Start SSO login flow
      * POST /v1/sso/{provider}/login
      */
-    startSSOLogin(provider: string, body: StartSSOLoginRequest): Promise<LoginResponse>;
+    startSSOLogin(provider: string, return_url?: string): Promise<LoginResponse>;
+    /**
+     * SAML SP metadata
+     * GET /v1/sso/{provider}/metadata
+     */
+    ssoSPMetadata(provider: string, token: string): Promise<void>;
+    /**
+     * Exchange a credential for a delegated session
+     * POST /v1/token/exchange
+     */
+    exchangeToken(body: ExchangeTokenRequest, token: string): Promise<TokenExchangeResponse>;
     /**
      * List user roles
      * GET /v1/users/{userId}/roles
      */
-    authsomeListUserRoles(userId: string, token: string): Promise<UserRoleListResponse>;
+    authsomeListUserRoles(userId: string, token: string, app_id?: string): Promise<UserRoleListResponse>;
     /**
      * Verify email
      * POST /v1/verify-email
      */
-    verifyEmail(body: VerifyEmailRequest): Promise<StatusResponse>;
+    verifyEmail(body: VerifyEmailRequest): Promise<ApiStatusResponse>;
     /**
      * Resend email verification
      * POST /v1/verify-email/resend
      */
-    resendEmailVerification(body: ResendEmailVerificationRequest): Promise<StatusResponse>;
+    resendEmailVerification(body: ResendEmailVerificationRequest): Promise<ApiStatusResponse>;
     /**
      * List webhooks
      * GET /v1/webhooks
      */
-    listWebhooks(token: string): Promise<WebhookListResponse>;
+    listWebhooks(app_id: string, token: string): Promise<WebhookListResponse>;
     /**
      * Create webhook
      * POST /v1/webhooks
@@ -2612,7 +2862,7 @@ declare class AuthClient$1 {
      * Delete webhook
      * DELETE /v1/webhooks/{webhookId}
      */
-    deleteWebhook(webhookId: string, body: DeleteWebhookRequest, token: string): Promise<StatusResponse>;
+    deleteWebhook(webhookId: string, token: string): Promise<ApiStatusResponse>;
     private request;
 }
 declare class AuthClientError extends Error {
@@ -2656,16 +2906,16 @@ declare class AuthClient extends AuthClient$1 {
      * Accepts a raw refresh-token string (used by auth.ts) or the full
      * RefreshRequest body.
      */
-    refresh(body: {
-        refresh_token: string;
-    } | string): Promise<any>;
+    refresh(body: RefreshRequest | string): Promise<ApiTokenResponse>;
     /**
      * Sign out.
      *
-     * Accepts a raw token string (used by auth.ts) or the full
-     * (body, token) pair from the generated client.
+     * Accepts a raw token string (used by auth.ts). The generated client used
+     * to take a (body, token) pair; the endpoint no longer reads a body, so the
+     * two-argument form is still accepted and its first argument ignored rather
+     * than breaking callers outside this package.
      */
-    signOut(bodyOrToken: unknown, token?: string): Promise<any>;
+    signOut(bodyOrToken: unknown, token?: string): Promise<ApiStatusResponse>;
     /**
      * MFA challenge — bridge for auth.ts.
      *
@@ -2986,4 +3236,4 @@ declare function prepareRequestOptions(options: Record<string, unknown>): Public
  */
 declare function serializeCredential(credential: Credential): Record<string, unknown>;
 
-export { type APIError, type KeyListItem as APIKey, type AddMemberRequest, type AdminBanUserRequest, AuthClient, type AuthClientConfig, AuthClientError, type AuthConfig, AuthManager, type AuthResponse, type AuthState, type ChallengeMFARequest, type ChangePasswordRequest, type ClientConfig, type CreateAPIKeyRequest, type CreateInvitationRequest, type CreateOrganizationRequest as CreateOrgRequest, type CreateOrganizationRequest, type Device, type EnrollMFARequest, type EnrollResponse, type ForgotPasswordRequest, type Invitation, type KeyListItem, type ListOptions, type ListResponse, type EnrollResponse as MFAEnrollment, type SendMagicLinkRequest as MagicLinkSendRequest, type VerifyMagicLinkRequest as MagicLinkVerifyRequest, type Member, type ChallengeMFARequest as MfaChallengeRequest, type EnrollMFARequest as MfaEnrollRequest, type SendSMSCodeRequest as MfaSMSSendRequest, type VerifySMSCodeRequest as MfaSMSVerifyRequest, type VerifyMFARequest as MfaVerifyRequest, type Organization, type RefreshRequest, type ResetPasswordRequest, SESSION_STORAGE_KEY, type SSOConnectionConfig, type SafeRedirectOptions, type SendMagicLinkRequest, type SendSMSCodeRequest, type Session, type SignInRequest, type SignUpRequest, type SignupFieldConfig, type SignupFieldOption, type SignupFieldValidation, type SocialProviderConfig, type SsoACSRequest, type SsoCallbackRequest, type TokenResponse, type TokenStorage, type UpdateMeRequest, type UpdateOrganizationRequest as UpdateOrgRequest, type UpdateOrganizationRequest, type User, type VerifyEmailRequest, type VerifyMFARequest, type VerifyMagicLinkRequest, type VerifyRecoveryCodeRequest, type VerifySMSCodeRequest, base64urlToBuffer, bufferToBase64url, createLocalStorage, isSafeRedirect, prepareCreationOptions, prepareRequestOptions, safeRedirectTarget, serializeCredential };
+export { type APIError, type KeyListItem as APIKey, type AddMemberRequest, type AdminBanUserRequest, AuthClient, type AuthClientConfig, AuthClientError, type AuthConfig, AuthManager, type AuthResponse, type AuthState, type ChallengeMFARequest, type ChangePasswordRequest, type ClientConfig, type CreateAPIKeyRequest, type CreateInvitationRequest, type CreateOrganizationRequest as CreateOrgRequest, type CreateOrganizationRequest, type Device, type EnrollMFARequest, type EnrollResponse, type ForgotPasswordRequest, type Invitation, type KeyListItem, type ListOptions, type ListResponse, type EnrollResponse as MFAEnrollment, type SendMagicLinkRequest as MagicLinkSendRequest, type VerifyMagicLinkRequest as MagicLinkVerifyRequest, type Member, type ChallengeMFARequest as MfaChallengeRequest, type EnrollMFARequest as MfaEnrollRequest, type SendSMSCodeRequest as MfaSMSSendRequest, type VerifySMSCodeRequest as MfaSMSVerifyRequest, type VerifyMFARequest as MfaVerifyRequest, type Organization, type PasskeyLoginFinishRequest, type PasskeyRegisterFinishRequest, type RefreshRequest, type ResetPasswordRequest, SESSION_STORAGE_KEY, type SSOConnectionConfig, type SafeRedirectOptions, type SendMagicLinkRequest, type SendSMSCodeRequest, type Session, type SignInRequest, type SignUpRequest, type SignupFieldConfig, type SignupFieldOption, type SignupFieldValidation, type SocialProviderConfig, type ApiTokenResponse as TokenResponse, type TokenStorage, type UpdateMeRequest, type UpdateOrganizationRequest as UpdateOrgRequest, type UpdateOrganizationRequest, type User, type VerifyEmailRequest, type VerifyMFARequest, type VerifyMagicLinkRequest, type VerifyRecoveryCodeRequest, type VerifySMSCodeRequest, base64urlToBuffer, bufferToBase64url, createLocalStorage, isSafeRedirect, prepareCreationOptions, prepareRequestOptions, safeRedirectTarget, serializeCredential };