@djangocfg/api 2.1.327 → 2.1.332

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/BackupCodesRegenerateResponse.ts

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/BackupCodesStatus.ts

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/ConfirmSetupRequest.ts

@@ -1,12 +1,12 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 
 export const ConfirmSetupRequestSchema = z.object({
-  device_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
   code: z.string().min(6).max(6),
+  device_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
 });
 
 export type ConfirmSetupRequest = z.infer<typeof ConfirmSetupRequestSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/ConfirmSetupResponse.ts

@@ -1,13 +1,13 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 
 export const ConfirmSetupResponseSchema = z.object({
-  message: z.string(),
   backup_codes: z.array(z.string()),
   backup_codes_warning: z.string(),
+  message: z.string(),
 });
 
 export type ConfirmSetupResponse = z.infer<typeof ConfirmSetupResponseSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/DeviceList.ts

@@ -1,18 +1,18 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 import { DeviceListStatusEnumSchema } from "./DeviceListStatusEnum";
 
 export const DeviceListSchema = z.object({
+  confirmed_at: z.string().datetime({ offset: true }).nullable(),
+  created_at: z.string().datetime({ offset: true }),
   id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
-  name: z.string(),
   is_primary: z.boolean(),
-  status: DeviceListStatusEnumSchema,
-  created_at: z.string().datetime({ offset: true }),
-  confirmed_at: z.string().datetime({ offset: true }).nullable(),
   last_used_at: z.string().datetime({ offset: true }).nullable(),
+  name: z.string(),
+  status: DeviceListStatusEnumSchema,
 });
 
 export type DeviceList = z.infer<typeof DeviceListSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/DeviceListResponse.ts

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 import { DeviceListSchema } from "./DeviceList";

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/DeviceListStatusEnum.ts

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/DisableRequest.ts

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 

package/src/_api/generated/_cfg_totp/schemas/SetupRequest.ts

@@ -0,0 +1,11 @@
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
+// Source: OpenAPI 3.1 components.schemas
+// DO NOT EDIT — re-run `make gen-clients`.
+
+import { z } from "zod";
+
+export const SetupRequestSchema = z.object({
+  device_name: z.string().min(1).max(100).default("Authenticator").optional(),
+});
+
+export type SetupRequest = z.infer<typeof SetupRequestSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/SetupResponse.ts

@@ -1,15 +1,15 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 
 export const SetupResponseSchema = z.object({
   device_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
-  secret: z.string(),
+  expires_in: z.number().int(),
   provisioning_uri: z.string(),
   qr_code_base64: z.string(),
-  expires_in: z.number().int(),
+  secret: z.string(),
 });
 
 export type SetupResponse = z.infer<typeof SetupResponseSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/TotpVerifyUser.ts

@@ -1,27 +1,27 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 
 export const TotpVerifyUserSchema = z.object({
-  id: z.number().int(),
+  avatar: z.string().nullable(),
+  company: z.string().max(100).optional(),
+  date_joined: z.string().datetime({ offset: true }),
+  display_username: z.string(),
   email: z.email(),
   first_name: z.string().max(50).optional(),
-  last_name: z.string().max(50).optional(),
   full_name: z.string(),
+  id: z.number().int(),
   initials: z.string(),
-  display_username: z.string(),
-  company: z.string().max(100).optional(),
-  phone: z.string().max(20).optional(),
-  position: z.string().max(100).optional(),
-  language: z.string().max(10).optional(),
-  avatar: z.string().nullable(),
   is_staff: z.boolean(),
   is_superuser: z.boolean(),
-  date_joined: z.string().datetime({ offset: true }),
+  language: z.string().max(10).optional(),
   last_login: z.string().datetime({ offset: true }).nullable(),
-  unanswered_messages_count: z.number().int(),
+  last_name: z.string().max(50).optional(),
+  phone: z.string().max(20).optional(),
+  position: z.string().max(100).optional(),
+  unanswered_messages_count: z.number().int().default(0),
 });
 
 export type TotpVerifyUser = z.infer<typeof TotpVerifyUserSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/VerifyBackupRequest.ts

@@ -1,12 +1,12 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 
 export const VerifyBackupRequestSchema = z.object({
-  session_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
   backup_code: z.string().min(8).max(8),
+  session_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
 });
 
 export type VerifyBackupRequest = z.infer<typeof VerifyBackupRequestSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/VerifyRequest.ts

@@ -1,12 +1,12 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 
 export const VerifyRequestSchema = z.object({
-  session_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
   code: z.string().min(6).max(6),
+  session_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i),
 });
 
 export type VerifyRequest = z.infer<typeof VerifyRequestSchema>;

package/src/_api/generated/{cfg_totp → _cfg_totp}/schemas/VerifyResponse.ts

@@ -1,16 +1,16 @@
-// AUTO-GENERATED by django-cfg / django_generator.ts_extras
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
 // Source: OpenAPI 3.1 components.schemas
-// DO NOT EDIT — re-run `make gen`.
+// DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
 import { TotpVerifyUserSchema } from "./TotpVerifyUser";
 
 export const VerifyResponseSchema = z.object({
-  message: z.string(),
   access_token: z.string(),
+  message: z.string(),
   refresh_token: z.string(),
-  user: TotpVerifyUserSchema,
   remaining_backup_codes: z.number().int().optional(),
+  user: TotpVerifyUserSchema,
   warning: z.string().optional(),
 });
 

package/src/_api/generated/_cfg_totp/sdk.gen.ts

@@ -0,0 +1,5 @@
+// AUTO-GENERATED by openapi_processor / ts.tool
+// Re-exports the top-level Hey API SDK so group-scoped imports work:
+//   import { Foo } from "@api/generated/_<group>/sdk.gen";
+// DO NOT EDIT — re-run `make gen`.
+export * from "../sdk.gen";

package/src/_api/generated/_cfg_totp/types.gen.ts

@@ -0,0 +1,5 @@
+// AUTO-GENERATED by openapi_processor / ts.tool
+// Re-exports the top-level Hey API types so group-scoped imports work:
+//   import type { Foo } from "@api/generated/_<group>/types.gen";
+// DO NOT EDIT — re-run `make gen`.
+export * from "../types.gen";

package/src/_api/generated/{cfg_centrifugo/client.gen.ts → client.gen.ts}

@@ -14,3 +14,6 @@ import type { ClientOptions as ClientOptions2 } from './types.gen';
 export type CreateClientConfig<T extends ClientOptions = ClientOptions2> = (override?: Config<ClientOptions & T>) => Config<Required<ClientOptions> & T>;
 
 export const client = createClient(createConfig<ClientOptions2>({ baseUrl: 'http://localhost:8000' }));
+
+// auto-init: load auth interceptor
+import './helpers/auth';

package/src/_api/generated/helpers/auth.ts

@@ -0,0 +1,223 @@
+// AUTO-GENERATED by django_generator / ts_extras.wrapper
+// Global auth store. ONE source of truth for token / API key / locale /
+// baseUrl. Installs the request interceptor as a side-effect on import.
+// DO NOT EDIT — re-run `make gen`.
+
+import { client } from '../client.gen';
+
+const ACCESS_KEY = 'cfg.access_token';
+const REFRESH_KEY = 'cfg.refresh_token';
+const API_KEY_KEY = 'cfg.api_key';
+
+const isBrowser = typeof window !== 'undefined';
+
+export type StorageMode = 'localStorage' | 'cookie';
+
+// ── Storage backends (browser-only; server-side reads return null) ─────────
+
+interface KVStore {
+  get(key: string): string | null;
+  set(key: string, value: string | null): void;
+}
+
+const localStorageBackend: KVStore = {
+  get(key) {
+    if (!isBrowser) return null;
+    try { return window.localStorage.getItem(key); } catch { return null; }
+  },
+  set(key, value) {
+    if (!isBrowser) return;
+    try {
+      if (value === null) window.localStorage.removeItem(key);
+      else window.localStorage.setItem(key, value);
+    } catch {}
+  },
+};
+
+/** 30 days, matches typical refresh-token lifetime. */
+const COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
+
+const cookieBackend: KVStore = {
+  get(key) {
+    if (!isBrowser) return null;
+    try {
+      const re = new RegExp(`(?:^|;\\s*)${encodeURIComponent(key)}=([^;]*)`);
+      const m = document.cookie.match(re);
+      return m ? decodeURIComponent(m[1]) : null;
+    } catch { return null; }
+  },
+  set(key, value) {
+    if (!isBrowser) return;
+    try {
+      const k = encodeURIComponent(key);
+      const secure = window.location.protocol === 'https:' ? '; Secure' : '';
+      if (value === null) {
+        document.cookie = `${k}=; Path=/; Max-Age=0; SameSite=Lax${secure}`;
+      } else {
+        const v = encodeURIComponent(value);
+        document.cookie = `${k}=${v}; Path=/; Max-Age=${COOKIE_MAX_AGE}; SameSite=Lax${secure}`;
+      }
+    } catch {}
+  },
+};
+
+let _storage: KVStore = localStorageBackend;
+let _storageMode: StorageMode = 'localStorage';
+
+/** Detect locale from `NEXT_LOCALE` cookie or `navigator.language`. */
+function detectLocale(): string | null {
+  try {
+    if (typeof document !== 'undefined') {
+      const m = document.cookie.match(/(?:^|;\s*)NEXT_LOCALE=([^;]*)/);
+      if (m) return decodeURIComponent(m[1]);
+    }
+    if (typeof navigator !== 'undefined' && navigator.language) {
+      return navigator.language;
+    }
+  } catch {}
+  return null;
+}
+
+/** Default baseUrl from `NEXT_PUBLIC_API_URL` (empty for static builds). */
+function defaultBaseUrl(): string {
+  try {
+    if (typeof process !== 'undefined' && process.env) {
+      if (process.env.NEXT_PUBLIC_STATIC_BUILD === 'true') return '';
+      return process.env.NEXT_PUBLIC_API_URL || '';
+    }
+  } catch {}
+  return '';
+}
+
+/** Default API key fallback from `NEXT_PUBLIC_API_KEY`. */
+function defaultApiKey(): string | null {
+  try {
+    if (typeof process !== 'undefined' && process.env?.NEXT_PUBLIC_API_KEY) {
+      return process.env.NEXT_PUBLIC_API_KEY;
+    }
+  } catch {}
+  return null;
+}
+
+// ── In-memory overrides (win over storage / env) ───────────────────────────
+let _localeOverride: string | null = null;
+let _apiKeyOverride: string | null = null;
+let _baseUrlOverride: string | null = null;
+let _withCredentials = true;
+let _onUnauthorized: ((response: Response) => void) | null = null;
+
+/**
+ * Global auth/config store. All getters read live state every call —
+ * the interceptor below uses these to attach headers per-request.
+ *
+ * Default storage backend is `localStorage`. Switch to cookies (e.g.
+ * for Next.js SSR cookie access) via `auth.setStorageMode('cookie')`
+ * early in the app bootstrap.
+ *
+ * @example
+ *   import { auth } from '@your/api';
+ *
+ *   // After login
+ *   auth.setToken(jwt);
+ *   auth.setRefreshToken(refresh);
+ *
+ *   // After logout
+ *   auth.clearTokens();
+ *
+ *   // Switch to cookie storage (call once during app init)
+ *   auth.setStorageMode('cookie');
+ */
+export const auth = {
+  // ── Storage mode ──────────────────────────────────────────────────
+  getStorageMode(): StorageMode { return _storageMode; },
+  /**
+   * Switch the storage backend. Existing values in the *previous*
+   * backend are NOT migrated — set fresh values after switching.
+   */
+  setStorageMode(mode: StorageMode): void {
+    _storageMode = mode;
+    _storage = mode === 'cookie' ? cookieBackend : localStorageBackend;
+  },
+
+  // ── Bearer token ──────────────────────────────────────────────────
+  getToken(): string | null { return _storage.get(ACCESS_KEY); },
+  setToken(token: string | null): void { _storage.set(ACCESS_KEY, token); },
+  getRefreshToken(): string | null { return _storage.get(REFRESH_KEY); },
+  setRefreshToken(token: string | null): void { _storage.set(REFRESH_KEY, token); },
+  clearTokens(): void { _storage.set(ACCESS_KEY, null); _storage.set(REFRESH_KEY, null); },
+  isAuthenticated(): boolean { return _storage.get(ACCESS_KEY) !== null; },
+
+  // ── API key ───────────────────────────────────────────────────────
+  /** In-memory API key. Falls back to storage, then NEXT_PUBLIC_API_KEY. */
+  getApiKey(): string | null {
+    return _apiKeyOverride ?? _storage.get(API_KEY_KEY) ?? defaultApiKey();
+  },
+  /** In-memory only (cleared on reload). */
+  setApiKey(key: string | null): void { _apiKeyOverride = key; },
+  /** Persist to active storage backend (localStorage or cookie). */
+  setApiKeyPersist(key: string | null): void {
+    _apiKeyOverride = key;
+    _storage.set(API_KEY_KEY, key);
+  },
+  clearApiKey(): void { _apiKeyOverride = null; _storage.set(API_KEY_KEY, null); },
+
+  // ── Locale ────────────────────────────────────────────────────────
+  /** Override locale → falls back to NEXT_LOCALE cookie / navigator.language. */
+  getLocale(): string | null { return _localeOverride ?? detectLocale(); },
+  setLocale(locale: string | null): void { _localeOverride = locale; },
+
+  // ── Base URL ──────────────────────────────────────────────────────
+  getBaseUrl(): string {
+    const url = (_baseUrlOverride ?? defaultBaseUrl());
+    return url.replace(/\/$/, '');
+  },
+  setBaseUrl(url: string | null): void {
+    _baseUrlOverride = url ? url.replace(/\/$/, '') : null;
+    client.setConfig({ baseUrl: this.getBaseUrl() });
+  },
+
+  // ── Credentials toggle (Django session/CSRF cross-origin) ─────────
+  getWithCredentials(): boolean { return _withCredentials; },
+  setWithCredentials(value: boolean): void {
+    _withCredentials = value;
+    client.setConfig({ credentials: value ? 'include' : 'same-origin' });
+  },
+
+  // ── 401 handler ───────────────────────────────────────────────────
+  /**
+   * Register a callback fired on every 401 response. Use this to wire
+   * a token-refresh flow or a forced logout. Setting `null` removes
+   * the handler.
+   */
+  onUnauthorized(cb: ((response: Response) => void) | null): void {
+    _onUnauthorized = cb;
+  },
+};
+
+// ── One-time client wiring (side-effect on first import) ───────────────────
+client.setConfig({
+  baseUrl: auth.getBaseUrl(),
+  credentials: _withCredentials ? 'include' : 'same-origin',
+});
+
+client.interceptors.request.use((request) => {
+  const token = auth.getToken();
+  if (token) request.headers.set('Authorization', `Bearer ${token}`);
+
+  const locale = auth.getLocale();
+  if (locale) request.headers.set('Accept-Language', locale);
+
+  const apiKey = auth.getApiKey();
+  if (apiKey) request.headers.set('X-API-Key', apiKey);
+
+  return request;
+});
+
+client.interceptors.response.use((response) => {
+  if (response.status === 401 && _onUnauthorized) {
+    try { _onUnauthorized(response); } catch {}
+  }
+  return response;
+});
+
+export type Auth = typeof auth;

package/src/_api/generated/{_shared → helpers}/index.ts

@@ -1,6 +1,7 @@
 // AUTO-GENERATED by django_generator / ts_extras.wrapper
 // Shared utilities barrel. DO NOT EDIT — re-run `make gen`.
 
+export { auth, type Auth } from './auth';
 export {
   type StorageAdapter,
   LocalStorageAdapter,

package/src/_api/generated/index.ts

@@ -1,30 +1,32 @@
 // AUTO-GENERATED by django_generator / ts_extras.wrapper
-// Top-level barrel — one singleton API per group, baseUrl from Next.js env.
+// Top-level barrel — global `auth` + per-group facades.
 // DO NOT EDIT — re-run `make gen`.
 
-import { API as CfgAccountsAPI, LocalStorageAdapter as CfgAccountsStorage } from './cfg_accounts';
-import { API as CfgCentrifugoAPI, LocalStorageAdapter as CfgCentrifugoStorage } from './cfg_centrifugo';
-import { API as CfgTotpAPI, LocalStorageAdapter as CfgTotpStorage } from './cfg_totp';
+// Side-effect: ensure auth interceptor is installed even if consumers
+// only ever import this barrel (it'll also load via client.gen.ts).
+import './helpers/auth';
 
-const isStaticBuild = process.env.NEXT_PUBLIC_STATIC_BUILD === 'true';
-const baseUrl = isStaticBuild ? '' : process.env.NEXT_PUBLIC_API_URL || '';
+// Global auth/config store — single source of truth.
+export { auth, type Auth } from './helpers/auth';
 
-export const cfgAccountsApi = new CfgAccountsAPI(baseUrl, { storage: new CfgAccountsStorage() });
-export const cfgCentrifugoApi = new CfgCentrifugoAPI(baseUrl, { storage: new CfgCentrifugoStorage() });
-export const cfgTotpApi = new CfgTotpAPI(baseUrl, { storage: new CfgTotpStorage() });
+import { API as CfgAccountsAPI } from './_cfg_accounts';
+import { API as CfgCentrifugoAPI } from './_cfg_centrifugo';
+import { API as CfgTotpAPI } from './_cfg_totp';
 
-// API wrapper classes — for users who need to construct their own
-// instance (e.g. with MemoryStorageAdapter in SSR/tests).
-export { API as CfgAccountsAPI } from './cfg_accounts';
-export { API as CfgCentrifugoAPI } from './cfg_centrifugo';
-export { API as CfgTotpAPI } from './cfg_totp';
+// Singletons for ergonomic access (`import { apiAccounts } from '@your/api'`).
+// All instances share the same global `auth` store.
+export const CfgAccountsApi = new CfgAccountsAPI();
+export const CfgCentrifugoApi = new CfgCentrifugoAPI();
+export const CfgTotpApi = new CfgTotpAPI();
+
+// Per-group wrapper classes (e.g. for tests / SSR isolation of options).
+export { API as CfgAccountsAPI } from './_cfg_accounts';
+export { API as CfgCentrifugoAPI } from './_cfg_centrifugo';
+export { API as CfgTotpAPI } from './_cfg_totp';
 
 // Hey API SDK classes — one per OpenAPI tag. Lets consumers call
-// `Centrifugo.cfgCentrifugoAuthTokenRetrieve({...})` directly without
-// going through the wrapper singleton.
-export { Accounts, OAuth, UserProfile, Auth } from './cfg_accounts';
-export { Centrifugo, CentrifugoAuth } from './cfg_centrifugo';
-export { Totp, BackupCodes, TotpManagement, TotpSetup, TotpVerification } from './cfg_totp';
+// `Centrifugo.cfgCentrifugoAuthTokenRetrieve({...})` directly.
+
 
 // Shared utilities (errors, storage adapters, logger).
-export * from './_shared';
+export * from './helpers';