@authyon/server 0.2.0-beta.19 → 0.2.0-beta.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -370,6 +370,10 @@ await user.tenants.members.invite(tenantId, {
370
370
  await user.tenants.members.list(tenantId, { skip: 0, take: 25 });
371
371
  await user.tenants.members.remove(tenantId, userId);
372
372
 
373
+ // Pelo plano administrativo, a listagem vem no envelope paginado de sempre
374
+ // (`data`, `total`, `hasNext`), com `take` 50 por padrão e teto 100.
375
+ const { data: membros, total } = await authyon.environment.tenants.members.list(tenantId);
376
+
373
377
  // Administração por máquina: adicione uma conta existente por ID.
374
378
  await authyon.environment.tenants.members.add(tenantId, userId, ["reader"]);
375
379
  await authyon.environment.tenants.members.remove(tenantId, userId);
@@ -1,4 +1,4 @@
1
- import { L as JwksTokenVerifier, A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.cjs';
1
+ import { L as JwksTokenVerifier, A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.cjs';
2
2
 
3
3
  type AbilitySubject = string | Record<string, unknown>;
4
4
  type AbilityConditions = Record<string, unknown>;
@@ -1,4 +1,4 @@
1
- import { L as JwksTokenVerifier, A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.js';
1
+ import { L as JwksTokenVerifier, A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.js';
2
2
 
3
3
  type AbilitySubject = string | Record<string, unknown>;
4
4
  type AbilityConditions = Record<string, unknown>;
@@ -1009,12 +1009,14 @@ declare class AuthyonServerClient {
1009
1009
  * have, plus `tenantRoles` and `tenantPermissions` scoped to this
1010
1010
  * tenant.
1011
1011
  *
1012
- * Confirmed live: the response is a bare array, with no envelope and
1013
- * no total — but `skip`/`take` DO apply, and `take` defaults to 50.
1014
- * A tenant with more than 50 members gives you 50 and says nothing,
1015
- * so page it yourself until a short page comes back.
1012
+ * Paged like every other list: the `Paged<T>` envelope carries
1013
+ * `total` and `hasNext`, `take` defaults to 50 and is capped at 100.
1014
+ * Up to the Authyon API of 2026-10-21 this one route answered with a
1015
+ * bare array, so a caller had to page until a short page came back;
1016
+ * against such an API `data` is undefined and the array is the body
1017
+ * itself.
1016
1018
  */
1017
- list: (tenantId: string, params?: PaginationOptions) => Promise<EnvironmentUser[]>;
1019
+ list: (tenantId: string, params?: PaginationOptions) => Promise<Paged<EnvironmentUser>>;
1018
1020
  /** POST /env/tenants/{tenantId}/members — add a member to a tenant. */
1019
1021
  add: (tenantId: string, userId: string, roles?: string[]) => Promise<void>;
1020
1022
  /** DELETE /env/tenants/{tenantId}/members/{userId} — remove a member from a tenant. */
@@ -1185,13 +1187,12 @@ declare class TenantScopedClient {
1185
1187
  /**
1186
1188
  * GET /tenant/members — members of the token's tenant.
1187
1189
  *
1188
- * ⚠️ Inferred, not confirmed live (no tenant client credentials
1189
- * available to exchange for a scoped token) — assumed to share
1190
- * `/env/tenants/{id}/members`'s confirmed shape (bare array of full
1191
- * user records), since both are the "admin" member listing as opposed
1192
- * to `/auth/tenants/{id}/members`'s paginated, lightweight one.
1190
+ * Same handler as `/env/tenants/{id}/members` (the tenant comes from the
1191
+ * token instead of the path), so the same `Paged<T>` envelope of full
1192
+ * user records, `take` defaulting to 50 and capped at 100 — as opposed
1193
+ * to `/auth/tenants/{id}/members`'s lightweight member shape.
1193
1194
  */
1194
- list: (params?: PaginationOptions) => Promise<EnvironmentUser[]>;
1195
+ list: (params?: PaginationOptions) => Promise<Paged<EnvironmentUser>>;
1195
1196
  /** POST /tenant/members — add a member to the token's tenant. */
1196
1197
  add: (userId: string, roles?: string[]) => Promise<void>;
1197
1198
  /** DELETE /tenant/members/{userId} — remove a member from the token's tenant. */
@@ -1009,12 +1009,14 @@ declare class AuthyonServerClient {
1009
1009
  * have, plus `tenantRoles` and `tenantPermissions` scoped to this
1010
1010
  * tenant.
1011
1011
  *
1012
- * Confirmed live: the response is a bare array, with no envelope and
1013
- * no total — but `skip`/`take` DO apply, and `take` defaults to 50.
1014
- * A tenant with more than 50 members gives you 50 and says nothing,
1015
- * so page it yourself until a short page comes back.
1012
+ * Paged like every other list: the `Paged<T>` envelope carries
1013
+ * `total` and `hasNext`, `take` defaults to 50 and is capped at 100.
1014
+ * Up to the Authyon API of 2026-10-21 this one route answered with a
1015
+ * bare array, so a caller had to page until a short page came back;
1016
+ * against such an API `data` is undefined and the array is the body
1017
+ * itself.
1016
1018
  */
1017
- list: (tenantId: string, params?: PaginationOptions) => Promise<EnvironmentUser[]>;
1019
+ list: (tenantId: string, params?: PaginationOptions) => Promise<Paged<EnvironmentUser>>;
1018
1020
  /** POST /env/tenants/{tenantId}/members — add a member to a tenant. */
1019
1021
  add: (tenantId: string, userId: string, roles?: string[]) => Promise<void>;
1020
1022
  /** DELETE /env/tenants/{tenantId}/members/{userId} — remove a member from a tenant. */
@@ -1185,13 +1187,12 @@ declare class TenantScopedClient {
1185
1187
  /**
1186
1188
  * GET /tenant/members — members of the token's tenant.
1187
1189
  *
1188
- * ⚠️ Inferred, not confirmed live (no tenant client credentials
1189
- * available to exchange for a scoped token) — assumed to share
1190
- * `/env/tenants/{id}/members`'s confirmed shape (bare array of full
1191
- * user records), since both are the "admin" member listing as opposed
1192
- * to `/auth/tenants/{id}/members`'s paginated, lightweight one.
1190
+ * Same handler as `/env/tenants/{id}/members` (the tenant comes from the
1191
+ * token instead of the path), so the same `Paged<T>` envelope of full
1192
+ * user records, `take` defaulting to 50 and capped at 100 — as opposed
1193
+ * to `/auth/tenants/{id}/members`'s lightweight member shape.
1193
1194
  */
1194
- list: (params?: PaginationOptions) => Promise<EnvironmentUser[]>;
1195
+ list: (params?: PaginationOptions) => Promise<Paged<EnvironmentUser>>;
1195
1196
  /** POST /tenant/members — add a member to the token's tenant. */
1196
1197
  add: (userId: string, roles?: string[]) => Promise<void>;
1197
1198
  /** DELETE /tenant/members/{userId} — remove a member from the token's tenant. */
package/dist/bff.d.cts CHANGED
@@ -1,4 +1,4 @@
1
- import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.cjs';
1
+ import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.cjs';
2
2
  import 'jose';
3
3
 
4
4
  interface BffLoginInput {
package/dist/bff.d.ts CHANGED
@@ -1,4 +1,4 @@
1
- import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.js';
1
+ import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.js';
2
2
  import 'jose';
3
3
 
4
4
  interface BffLoginInput {
package/dist/index.cjs CHANGED
@@ -1053,10 +1053,12 @@ var AuthyonServerClient = class {
1053
1053
  * have, plus `tenantRoles` and `tenantPermissions` scoped to this
1054
1054
  * tenant.
1055
1055
  *
1056
- * Confirmed live: the response is a bare array, with no envelope and
1057
- * no total — but `skip`/`take` DO apply, and `take` defaults to 50.
1058
- * A tenant with more than 50 members gives you 50 and says nothing,
1059
- * so page it yourself until a short page comes back.
1056
+ * Paged like every other list: the `Paged<T>` envelope carries
1057
+ * `total` and `hasNext`, `take` defaults to 50 and is capped at 100.
1058
+ * Up to the Authyon API of 2026-10-21 this one route answered with a
1059
+ * bare array, so a caller had to page until a short page came back;
1060
+ * against such an API `data` is undefined and the array is the body
1061
+ * itself.
1060
1062
  */
1061
1063
  list: (tenantId, params = {}) => this.request(`/env/tenants/${encodeURIComponent(tenantId)}/members`, {
1062
1064
  envBearer: true,
@@ -1421,11 +1423,10 @@ var TenantScopedClient = class {
1421
1423
  /**
1422
1424
  * GET /tenant/members — members of the token's tenant.
1423
1425
  *
1424
- * ⚠️ Inferred, not confirmed live (no tenant client credentials
1425
- * available to exchange for a scoped token) — assumed to share
1426
- * `/env/tenants/{id}/members`'s confirmed shape (bare array of full
1427
- * user records), since both are the "admin" member listing as opposed
1428
- * to `/auth/tenants/{id}/members`'s paginated, lightweight one.
1426
+ * Same handler as `/env/tenants/{id}/members` (the tenant comes from the
1427
+ * token instead of the path), so the same `Paged<T>` envelope of full
1428
+ * user records, `take` defaulting to 50 and capped at 100 — as opposed
1429
+ * to `/auth/tenants/{id}/members`'s lightweight member shape.
1429
1430
  */
1430
1431
  list: (params = {}) => this.request("/tenant/members", { query: params }),
1431
1432
  /** POST /tenant/members — add a member to the token's tenant. */
package/dist/index.d.cts CHANGED
@@ -1,6 +1,6 @@
1
- import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.cjs';
2
- export { b as AcceptTenantInviteInput, c as AccessTokenSource, d as Approval, e as ApprovalAssurance, f as ApprovalPayload, g as ApprovalStatus, h as ApprovalWebAuthnOptions, i as AuditEvent, j as AuthyonJwksDiscoveryOptions, k as AuthyonJwtClaims, l as AuthyonServerClientOptions, C as ClientCredentials, m as ClientRequestContext, n as ConfirmApprovalInput, o as ConsumedApproval, p as CreateApprovalInput, q as CreateCredentialInput, r as CreateOrganizationInput, s as CreatePermissionInput, t as CreateTenantCredentialInput, u as CreateUserInput, v as CredentialCreator, w as CredentialDetail, x as CredentialListOptions, y as CredentialPermissionsInput, E as EnvironmentUser, F as FetchHttpAdapter, z as HttpAdapterRequest, B as HttpLogEvent, D as HttpLogger, I as IntrospectResult, G as InviteTenantMemberInput, J as IssuePasswordResetInput, K as JsonWebKeySet, L as JwksTokenVerifier, M as JwksTokenVerifierOptions, N as LoggingHttpAdapter, O as LoginActivity, P as OpenIdConfiguration, Q as Organization, R as OtpCheckResult, S as Paged, T as PaginationOptions, U as PasswordResetCompleted, V as PasswordResetIssued, W as PasswordResetPreview, X as Permission, Y as PermissionsByRole, Z as ReservedPermissions, _ as Role, $ as RoleGrant, a0 as RoleInput, a1 as RoleList, a2 as RolePermissions, a3 as SafeJwtAlgorithm, a4 as SecurityMethods, a5 as SubjectApprovals, a6 as SubjectSecurity, a7 as TenantClientValidationResult, a8 as TenantCredentialIssued, a9 as TenantCredentialSummary, aa as TenantInvite, ab as TenantInviteAccepted, ac as TenantInviteInput, ad as TenantInviteIssued, ae as TenantInvitePreview, af as TenantInviteStatus, ag as TenantMember, ah as TenantMemberPage, ai as TenantMembership, aj as TenantScopedClient, ak as TokenResult, al as TokenVerificationError, am as TokenVerificationErrorCode, an as UpdateOrganizationInput, ao as User, ap as UserScopedClient, aq as ValidateResult, ar as VerifiedAccessToken, as as createClient, at as normalizeClientIp } from './authyonServerClient-D1IeZFrS.cjs';
3
- export { b as AbilityConditions, c as AbilityEvent, d as AbilityListener, e as AbilityRequirement, f as AbilityRule, A as AbilitySubject, g as AuthorizationContext, a as AuthorizationError, h as AuthorizationOptions, i as AuthyonAbility, j as AuthyonAbilityBuilder, k as AuthyonAbilityOptions, l as AuthyonPermissionSource, E as ExpressAuthorizationMiddlewareOptions, m as ExpressNext, n as ExpressRequestLike, o as ExpressResponseLike, P as PermissionGroup, R as RequestAuthorizationOptions, p as authorizeRequest, q as authorizeToken, r as createAuthorizationErrorResponse, s as createAuthyonAbility, t as createAuthyonRules, u as createExpressAuthorizationMiddleware, v as hasPermission, w as hasPermissionGroup } from './authorization-EEV7lntD.cjs';
1
+ import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.cjs';
2
+ export { b as AcceptTenantInviteInput, c as AccessTokenSource, d as Approval, e as ApprovalAssurance, f as ApprovalPayload, g as ApprovalStatus, h as ApprovalWebAuthnOptions, i as AuditEvent, j as AuthyonJwksDiscoveryOptions, k as AuthyonJwtClaims, l as AuthyonServerClientOptions, C as ClientCredentials, m as ClientRequestContext, n as ConfirmApprovalInput, o as ConsumedApproval, p as CreateApprovalInput, q as CreateCredentialInput, r as CreateOrganizationInput, s as CreatePermissionInput, t as CreateTenantCredentialInput, u as CreateUserInput, v as CredentialCreator, w as CredentialDetail, x as CredentialListOptions, y as CredentialPermissionsInput, E as EnvironmentUser, F as FetchHttpAdapter, z as HttpAdapterRequest, B as HttpLogEvent, D as HttpLogger, I as IntrospectResult, G as InviteTenantMemberInput, J as IssuePasswordResetInput, K as JsonWebKeySet, L as JwksTokenVerifier, M as JwksTokenVerifierOptions, N as LoggingHttpAdapter, O as LoginActivity, P as OpenIdConfiguration, Q as Organization, R as OtpCheckResult, S as Paged, T as PaginationOptions, U as PasswordResetCompleted, V as PasswordResetIssued, W as PasswordResetPreview, X as Permission, Y as PermissionsByRole, Z as ReservedPermissions, _ as Role, $ as RoleGrant, a0 as RoleInput, a1 as RoleList, a2 as RolePermissions, a3 as SafeJwtAlgorithm, a4 as SecurityMethods, a5 as SubjectApprovals, a6 as SubjectSecurity, a7 as TenantClientValidationResult, a8 as TenantCredentialIssued, a9 as TenantCredentialSummary, aa as TenantInvite, ab as TenantInviteAccepted, ac as TenantInviteInput, ad as TenantInviteIssued, ae as TenantInvitePreview, af as TenantInviteStatus, ag as TenantMember, ah as TenantMemberPage, ai as TenantMembership, aj as TenantScopedClient, ak as TokenResult, al as TokenVerificationError, am as TokenVerificationErrorCode, an as UpdateOrganizationInput, ao as User, ap as UserScopedClient, aq as ValidateResult, ar as VerifiedAccessToken, as as createClient, at as normalizeClientIp } from './authyonServerClient-UA7HdjtD.cjs';
3
+ export { b as AbilityConditions, c as AbilityEvent, d as AbilityListener, e as AbilityRequirement, f as AbilityRule, A as AbilitySubject, g as AuthorizationContext, a as AuthorizationError, h as AuthorizationOptions, i as AuthyonAbility, j as AuthyonAbilityBuilder, k as AuthyonAbilityOptions, l as AuthyonPermissionSource, E as ExpressAuthorizationMiddlewareOptions, m as ExpressNext, n as ExpressRequestLike, o as ExpressResponseLike, P as PermissionGroup, R as RequestAuthorizationOptions, p as authorizeRequest, q as authorizeToken, r as createAuthorizationErrorResponse, s as createAuthyonAbility, t as createAuthyonRules, u as createExpressAuthorizationMiddleware, v as hasPermission, w as hasPermissionGroup } from './authorization-DcA5oKZT.cjs';
4
4
  import 'jose';
5
5
 
6
6
  declare const ErrorCodes: {
package/dist/index.d.ts CHANGED
@@ -1,6 +1,6 @@
1
- import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.js';
2
- export { b as AcceptTenantInviteInput, c as AccessTokenSource, d as Approval, e as ApprovalAssurance, f as ApprovalPayload, g as ApprovalStatus, h as ApprovalWebAuthnOptions, i as AuditEvent, j as AuthyonJwksDiscoveryOptions, k as AuthyonJwtClaims, l as AuthyonServerClientOptions, C as ClientCredentials, m as ClientRequestContext, n as ConfirmApprovalInput, o as ConsumedApproval, p as CreateApprovalInput, q as CreateCredentialInput, r as CreateOrganizationInput, s as CreatePermissionInput, t as CreateTenantCredentialInput, u as CreateUserInput, v as CredentialCreator, w as CredentialDetail, x as CredentialListOptions, y as CredentialPermissionsInput, E as EnvironmentUser, F as FetchHttpAdapter, z as HttpAdapterRequest, B as HttpLogEvent, D as HttpLogger, I as IntrospectResult, G as InviteTenantMemberInput, J as IssuePasswordResetInput, K as JsonWebKeySet, L as JwksTokenVerifier, M as JwksTokenVerifierOptions, N as LoggingHttpAdapter, O as LoginActivity, P as OpenIdConfiguration, Q as Organization, R as OtpCheckResult, S as Paged, T as PaginationOptions, U as PasswordResetCompleted, V as PasswordResetIssued, W as PasswordResetPreview, X as Permission, Y as PermissionsByRole, Z as ReservedPermissions, _ as Role, $ as RoleGrant, a0 as RoleInput, a1 as RoleList, a2 as RolePermissions, a3 as SafeJwtAlgorithm, a4 as SecurityMethods, a5 as SubjectApprovals, a6 as SubjectSecurity, a7 as TenantClientValidationResult, a8 as TenantCredentialIssued, a9 as TenantCredentialSummary, aa as TenantInvite, ab as TenantInviteAccepted, ac as TenantInviteInput, ad as TenantInviteIssued, ae as TenantInvitePreview, af as TenantInviteStatus, ag as TenantMember, ah as TenantMemberPage, ai as TenantMembership, aj as TenantScopedClient, ak as TokenResult, al as TokenVerificationError, am as TokenVerificationErrorCode, an as UpdateOrganizationInput, ao as User, ap as UserScopedClient, aq as ValidateResult, ar as VerifiedAccessToken, as as createClient, at as normalizeClientIp } from './authyonServerClient-D1IeZFrS.js';
3
- export { b as AbilityConditions, c as AbilityEvent, d as AbilityListener, e as AbilityRequirement, f as AbilityRule, A as AbilitySubject, g as AuthorizationContext, a as AuthorizationError, h as AuthorizationOptions, i as AuthyonAbility, j as AuthyonAbilityBuilder, k as AuthyonAbilityOptions, l as AuthyonPermissionSource, E as ExpressAuthorizationMiddlewareOptions, m as ExpressNext, n as ExpressRequestLike, o as ExpressResponseLike, P as PermissionGroup, R as RequestAuthorizationOptions, p as authorizeRequest, q as authorizeToken, r as createAuthorizationErrorResponse, s as createAuthyonAbility, t as createAuthyonRules, u as createExpressAuthorizationMiddleware, v as hasPermission, w as hasPermissionGroup } from './authorization-7g-KNTTk.js';
1
+ import { H as HttpAdapter, a as HttpLoggerOptions, A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.js';
2
+ export { b as AcceptTenantInviteInput, c as AccessTokenSource, d as Approval, e as ApprovalAssurance, f as ApprovalPayload, g as ApprovalStatus, h as ApprovalWebAuthnOptions, i as AuditEvent, j as AuthyonJwksDiscoveryOptions, k as AuthyonJwtClaims, l as AuthyonServerClientOptions, C as ClientCredentials, m as ClientRequestContext, n as ConfirmApprovalInput, o as ConsumedApproval, p as CreateApprovalInput, q as CreateCredentialInput, r as CreateOrganizationInput, s as CreatePermissionInput, t as CreateTenantCredentialInput, u as CreateUserInput, v as CredentialCreator, w as CredentialDetail, x as CredentialListOptions, y as CredentialPermissionsInput, E as EnvironmentUser, F as FetchHttpAdapter, z as HttpAdapterRequest, B as HttpLogEvent, D as HttpLogger, I as IntrospectResult, G as InviteTenantMemberInput, J as IssuePasswordResetInput, K as JsonWebKeySet, L as JwksTokenVerifier, M as JwksTokenVerifierOptions, N as LoggingHttpAdapter, O as LoginActivity, P as OpenIdConfiguration, Q as Organization, R as OtpCheckResult, S as Paged, T as PaginationOptions, U as PasswordResetCompleted, V as PasswordResetIssued, W as PasswordResetPreview, X as Permission, Y as PermissionsByRole, Z as ReservedPermissions, _ as Role, $ as RoleGrant, a0 as RoleInput, a1 as RoleList, a2 as RolePermissions, a3 as SafeJwtAlgorithm, a4 as SecurityMethods, a5 as SubjectApprovals, a6 as SubjectSecurity, a7 as TenantClientValidationResult, a8 as TenantCredentialIssued, a9 as TenantCredentialSummary, aa as TenantInvite, ab as TenantInviteAccepted, ac as TenantInviteInput, ad as TenantInviteIssued, ae as TenantInvitePreview, af as TenantInviteStatus, ag as TenantMember, ah as TenantMemberPage, ai as TenantMembership, aj as TenantScopedClient, ak as TokenResult, al as TokenVerificationError, am as TokenVerificationErrorCode, an as UpdateOrganizationInput, ao as User, ap as UserScopedClient, aq as ValidateResult, ar as VerifiedAccessToken, as as createClient, at as normalizeClientIp } from './authyonServerClient-UA7HdjtD.js';
3
+ export { b as AbilityConditions, c as AbilityEvent, d as AbilityListener, e as AbilityRequirement, f as AbilityRule, A as AbilitySubject, g as AuthorizationContext, a as AuthorizationError, h as AuthorizationOptions, i as AuthyonAbility, j as AuthyonAbilityBuilder, k as AuthyonAbilityOptions, l as AuthyonPermissionSource, E as ExpressAuthorizationMiddlewareOptions, m as ExpressNext, n as ExpressRequestLike, o as ExpressResponseLike, P as PermissionGroup, R as RequestAuthorizationOptions, p as authorizeRequest, q as authorizeToken, r as createAuthorizationErrorResponse, s as createAuthyonAbility, t as createAuthyonRules, u as createExpressAuthorizationMiddleware, v as hasPermission, w as hasPermissionGroup } from './authorization-DfFCoDQ6.js';
4
4
  import 'jose';
5
5
 
6
6
  declare const ErrorCodes: {
package/dist/index.js CHANGED
@@ -530,10 +530,12 @@ var AuthyonServerClient = class {
530
530
  * have, plus `tenantRoles` and `tenantPermissions` scoped to this
531
531
  * tenant.
532
532
  *
533
- * Confirmed live: the response is a bare array, with no envelope and
534
- * no total — but `skip`/`take` DO apply, and `take` defaults to 50.
535
- * A tenant with more than 50 members gives you 50 and says nothing,
536
- * so page it yourself until a short page comes back.
533
+ * Paged like every other list: the `Paged<T>` envelope carries
534
+ * `total` and `hasNext`, `take` defaults to 50 and is capped at 100.
535
+ * Up to the Authyon API of 2026-10-21 this one route answered with a
536
+ * bare array, so a caller had to page until a short page came back;
537
+ * against such an API `data` is undefined and the array is the body
538
+ * itself.
537
539
  */
538
540
  list: (tenantId, params = {}) => this.request(`/env/tenants/${encodeURIComponent(tenantId)}/members`, {
539
541
  envBearer: true,
@@ -898,11 +900,10 @@ var TenantScopedClient = class {
898
900
  /**
899
901
  * GET /tenant/members — members of the token's tenant.
900
902
  *
901
- * ⚠️ Inferred, not confirmed live (no tenant client credentials
902
- * available to exchange for a scoped token) — assumed to share
903
- * `/env/tenants/{id}/members`'s confirmed shape (bare array of full
904
- * user records), since both are the "admin" member listing as opposed
905
- * to `/auth/tenants/{id}/members`'s paginated, lightweight one.
903
+ * Same handler as `/env/tenants/{id}/members` (the tenant comes from the
904
+ * token instead of the path), so the same `Paged<T>` envelope of full
905
+ * user records, `take` defaulting to 50 and capped at 100 — as opposed
906
+ * to `/auth/tenants/{id}/members`'s lightweight member shape.
906
907
  */
907
908
  list: (params = {}) => this.request("/tenant/members", { query: params }),
908
909
  /** POST /tenant/members — add a member to the token's tenant. */
package/dist/next.d.cts CHANGED
@@ -1,6 +1,6 @@
1
1
  import { ReactNode } from 'react';
2
- import { R as RequestAuthorizationOptions, A as AbilitySubject, a as AuthorizationError } from './authorization-EEV7lntD.cjs';
3
- import { A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.cjs';
2
+ import { R as RequestAuthorizationOptions, A as AbilitySubject, a as AuthorizationError } from './authorization-DcA5oKZT.cjs';
3
+ import { A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.cjs';
4
4
  import 'jose';
5
5
 
6
6
  interface ServerPermissionGuardFallbackContext {
package/dist/next.d.ts CHANGED
@@ -1,6 +1,6 @@
1
1
  import { ReactNode } from 'react';
2
- import { R as RequestAuthorizationOptions, A as AbilitySubject, a as AuthorizationError } from './authorization-7g-KNTTk.js';
3
- import { A as AuthyonServerClient } from './authyonServerClient-D1IeZFrS.js';
2
+ import { R as RequestAuthorizationOptions, A as AbilitySubject, a as AuthorizationError } from './authorization-DfFCoDQ6.js';
3
+ import { A as AuthyonServerClient } from './authyonServerClient-UA7HdjtD.js';
4
4
  import 'jose';
5
5
 
6
6
  interface ServerPermissionGuardFallbackContext {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@authyon/server",
3
- "version": "0.2.0-beta.19",
3
+ "version": "0.2.0-beta.20",
4
4
  "description": "Authyon SDK for backends — server-to-server organization/member management and access-token verification.",
5
5
  "license": "MIT",
6
6
  "type": "module",