@djangocfg/api 2.1.426 → 2.1.428

package/src/_api/generated/sdk.gen.ts

@@ -1,6 +1,6 @@
 // This file is auto-generated by @hey-api/openapi-ts
 
-import { type Client, formDataBodySerializer, type Options as Options2, type TDataShape } from './client';
+import { type Client, formDataBodySerializer, type Options as Options2, type RequestResult, type TDataShape } from './client';
 import { client } from './client.gen';
 import type { CfgAccountsApiKeyRegenerateCreateData, CfgAccountsApiKeyRegenerateCreateErrors, CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRetrieveData, CfgAccountsApiKeyRetrieveErrors, CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyTestCreateData, CfgAccountsApiKeyTestCreateResponses, CfgAccountsOauthConnectionsListData, CfgAccountsOauthConnectionsListResponses, CfgAccountsOauthDisconnectCreateData, CfgAccountsOauthDisconnectCreateErrors, CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthGithubAuthorizeCreateData, CfgAccountsOauthGithubAuthorizeCreateErrors, CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubCallbackCreateData, CfgAccountsOauthGithubCallbackCreateErrors, CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthProvidersRetrieveData, CfgAccountsOauthProvidersRetrieveResponses, CfgAccountsOtpRequestCreateData, CfgAccountsOtpRequestCreateErrors, CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpVerifyCreateData, CfgAccountsOtpVerifyCreateErrors, CfgAccountsOtpVerifyCreateResponses, CfgAccountsProfileAvatarCreateData, CfgAccountsProfileAvatarCreateErrors, CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileDeleteCreateData, CfgAccountsProfileDeleteCreateErrors, CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfilePartialPartialUpdateData, CfgAccountsProfilePartialPartialUpdateErrors, CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialUpdateData, CfgAccountsProfilePartialUpdateErrors, CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfileRetrieveData, CfgAccountsProfileRetrieveErrors, CfgAccountsProfileRetrieveResponses, CfgAccountsProfileUpdatePartialUpdateData, CfgAccountsProfileUpdatePartialUpdateErrors, CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdateUpdateData, CfgAccountsProfileUpdateUpdateErrors, CfgAccountsProfileUpdateUpdateResponses, CfgAccountsTokenRefreshCreateData, CfgAccountsTokenRefreshCreateResponses, CfgCentrifugoAuthTokenRetrieveData, CfgCentrifugoAuthTokenRetrieveErrors, CfgCentrifugoAuthTokenRetrieveResponses, CfgTotpBackupCodesRegenerateCreateData, CfgTotpBackupCodesRegenerateCreateErrors, CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRetrieveData, CfgTotpBackupCodesRetrieveResponses, CfgTotpDevicesDestroyData, CfgTotpDevicesDestroyResponses, CfgTotpDevicesRetrieveData, CfgTotpDevicesRetrieveResponses, CfgTotpDisableCreateData, CfgTotpDisableCreateErrors, CfgTotpDisableCreateResponses, CfgTotpSetupConfirmCreateData, CfgTotpSetupConfirmCreateErrors, CfgTotpSetupConfirmCreateResponses, CfgTotpSetupCreateData, CfgTotpSetupCreateErrors, CfgTotpSetupCreateResponses, CfgTotpVerifyBackupCreateData, CfgTotpVerifyBackupCreateErrors, CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyCreateData, CfgTotpVerifyCreateErrors, CfgTotpVerifyCreateResponses } from './types.gen';
 
@@ -24,10 +24,14 @@ export class CfgAccountsApiKey {
      *
      * Retrieve the current user's API key (masked) and metadata.
      */
-    public static cfgAccountsApiKeyRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsApiKeyRetrieveData, ThrowOnError>) {
+    public static cfgAccountsApiKeyRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsApiKeyRetrieveData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRetrieveErrors, ThrowOnError> {
         return (options?.client ?? client).get<CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRetrieveErrors, ThrowOnError>({
             security: [
-                { scheme: 'bearer', type: 'http' },
+                {
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                },
                 {
                     in: 'cookie',
                     name: 'sessionid',
@@ -45,10 +49,14 @@ export class CfgAccountsApiKey {
      *
      * Generate a new API key. The full key is returned only once.
      */
-    public static cfgAccountsApiKeyRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRegenerateCreateData, ThrowOnError>) {
+    public static cfgAccountsApiKeyRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRegenerateCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError>({
             security: [
-                { scheme: 'bearer', type: 'http' },
+                {
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                },
                 {
                     in: 'cookie',
                     name: 'sessionid',
@@ -70,10 +78,14 @@ export class CfgAccountsApiKey {
      *
      * Test whether an API key is valid without consuming it.
      */
-    public static cfgAccountsApiKeyTestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyTestCreateData, ThrowOnError>) {
+    public static cfgAccountsApiKeyTestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyTestCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyTestCreateResponses, unknown, ThrowOnError> {
         return (options.client ?? client).post<CfgAccountsApiKeyTestCreateResponses, unknown, ThrowOnError>({
             security: [
-                { scheme: 'bearer', type: 'http' },
+                {
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                },
                 {
                     in: 'cookie',
                     name: 'sessionid',
@@ -97,9 +109,13 @@ export class CfgAccountsOauth {
      *
      * Get all OAuth connections for the current user.
      */
-    public static cfgAccountsOauthConnectionsList<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthConnectionsListData, ThrowOnError>) {
+    public static cfgAccountsOauthConnectionsList<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthConnectionsListData, ThrowOnError>): RequestResult<CfgAccountsOauthConnectionsListResponses, unknown, ThrowOnError> {
         return (options?.client ?? client).get<CfgAccountsOauthConnectionsListResponses, unknown, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/accounts/oauth/connections/',
             ...options
         });
@@ -110,9 +126,13 @@ export class CfgAccountsOauth {
      *
      * Remove OAuth connection for the specified provider.
      */
-    public static cfgAccountsOauthDisconnectCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthDisconnectCreateData, ThrowOnError>) {
+    public static cfgAccountsOauthDisconnectCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthDisconnectCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthDisconnectCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthDisconnectCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/accounts/oauth/disconnect/',
             ...options,
             headers: {
@@ -127,7 +147,7 @@ export class CfgAccountsOauth {
      *
      * Generate GitHub OAuth authorization URL. Redirect user to this URL to start authentication.
      */
-    public static cfgAccountsOauthGithubAuthorizeCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthGithubAuthorizeCreateData, ThrowOnError>) {
+    public static cfgAccountsOauthGithubAuthorizeCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthGithubAuthorizeCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubAuthorizeCreateErrors, ThrowOnError> {
         return (options?.client ?? client).post<CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubAuthorizeCreateErrors, ThrowOnError>({
             url: '/cfg/accounts/oauth/github/authorize/',
             ...options,
@@ -143,7 +163,7 @@ export class CfgAccountsOauth {
      *
      * Exchange authorization code for JWT tokens. Call this after GitHub redirects back with code.
      */
-    public static cfgAccountsOauthGithubCallbackCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthGithubCallbackCreateData, ThrowOnError>) {
+    public static cfgAccountsOauthGithubCallbackCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOauthGithubCallbackCreateData, ThrowOnError>): RequestResult<CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthGithubCallbackCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthGithubCallbackCreateErrors, ThrowOnError>({
             url: '/cfg/accounts/oauth/github/callback/',
             ...options,
@@ -159,7 +179,7 @@ export class CfgAccountsOauth {
      *
      * Get list of available OAuth providers for authentication.
      */
-    public static cfgAccountsOauthProvidersRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthProvidersRetrieveData, ThrowOnError>) {
+    public static cfgAccountsOauthProvidersRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthProvidersRetrieveData, ThrowOnError>): RequestResult<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError> {
         return (options?.client ?? client).get<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError>({ url: '/cfg/accounts/oauth/providers/', ...options });
     }
 }
@@ -168,9 +188,13 @@ export class CfgAccounts {
     /**
      * Request OTP code to email.
      */
-    public static cfgAccountsOtpRequestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpRequestCreateData, ThrowOnError>) {
+    public static cfgAccountsOtpRequestCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpRequestCreateData, ThrowOnError>): RequestResult<CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpRequestCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpRequestCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/accounts/otp/request/',
             ...options,
             headers: {
@@ -190,9 +214,13 @@ export class CfgAccounts {
      * If user has no 2FA:
      * - Returns JWT tokens and user data directly
      */
-    public static cfgAccountsOtpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpVerifyCreateData, ThrowOnError>) {
+    public static cfgAccountsOtpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsOtpVerifyCreateData, ThrowOnError>): RequestResult<CfgAccountsOtpVerifyCreateResponses, CfgAccountsOtpVerifyCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgAccountsOtpVerifyCreateResponses, CfgAccountsOtpVerifyCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/accounts/otp/verify/',
             ...options,
             headers: {
@@ -209,9 +237,13 @@ export class CfgAccountsProfile {
      *
      * Retrieve the current authenticated user's profile information.
      */
-    public static cfgAccountsProfileRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileRetrieveData, ThrowOnError>) {
+    public static cfgAccountsProfileRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileRetrieveData, ThrowOnError>): RequestResult<CfgAccountsProfileRetrieveResponses, CfgAccountsProfileRetrieveErrors, ThrowOnError> {
         return (options?.client ?? client).get<CfgAccountsProfileRetrieveResponses, CfgAccountsProfileRetrieveErrors, ThrowOnError>({
-            security: [{ scheme: 'bearer', type: 'http' }, {
+            security: [{
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                }, {
                     in: 'cookie',
                     name: 'sessionid',
                     type: 'apiKey'
@@ -226,10 +258,14 @@ export class CfgAccountsProfile {
      *
      * Upload avatar image for the current authenticated user. Accepts multipart/form-data with 'avatar' field.
      */
-    public static cfgAccountsProfileAvatarCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileAvatarCreateData, ThrowOnError>) {
+    public static cfgAccountsProfileAvatarCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileAvatarCreateData, ThrowOnError>): RequestResult<CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileAvatarCreateErrors, ThrowOnError> {
         return (options?.client ?? client).post<CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileAvatarCreateErrors, ThrowOnError>({
             ...formDataBodySerializer,
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/accounts/profile/avatar/',
             ...options,
             headers: {
@@ -254,9 +290,13 @@ export class CfgAccountsProfile {
      * The account can be restored by an administrator if needed.
      *
      */
-    public static cfgAccountsProfileDeleteCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileDeleteCreateData, ThrowOnError>) {
+    public static cfgAccountsProfileDeleteCreate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileDeleteCreateData, ThrowOnError>): RequestResult<CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfileDeleteCreateErrors, ThrowOnError> {
         return (options?.client ?? client).post<CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfileDeleteCreateErrors, ThrowOnError>({
-            security: [{ scheme: 'bearer', type: 'http' }, {
+            security: [{
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                }, {
                     in: 'cookie',
                     name: 'sessionid',
                     type: 'apiKey'
@@ -271,9 +311,13 @@ export class CfgAccountsProfile {
      *
      * Partially update the current authenticated user's profile information. Supports avatar upload.
      */
-    public static cfgAccountsProfilePartialPartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialPartialUpdateData, ThrowOnError>) {
+    public static cfgAccountsProfilePartialPartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialPartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialPartialUpdateErrors, ThrowOnError> {
         return (options?.client ?? client).patch<CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialPartialUpdateErrors, ThrowOnError>({
-            security: [{ scheme: 'bearer', type: 'http' }, {
+            security: [{
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                }, {
                     in: 'cookie',
                     name: 'sessionid',
                     type: 'apiKey'
@@ -292,9 +336,13 @@ export class CfgAccountsProfile {
      *
      * Partially update the current authenticated user's profile information. Supports avatar upload.
      */
-    public static cfgAccountsProfilePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialUpdateData, ThrowOnError>) {
+    public static cfgAccountsProfilePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfilePartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfilePartialUpdateErrors, ThrowOnError> {
         return (options?.client ?? client).put<CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfilePartialUpdateErrors, ThrowOnError>({
-            security: [{ scheme: 'bearer', type: 'http' }, {
+            security: [{
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                }, {
                     in: 'cookie',
                     name: 'sessionid',
                     type: 'apiKey'
@@ -313,9 +361,13 @@ export class CfgAccountsProfile {
      *
      * Update the current authenticated user's profile information.
      */
-    public static cfgAccountsProfileUpdatePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdatePartialUpdateData, ThrowOnError>) {
+    public static cfgAccountsProfileUpdatePartialUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdatePartialUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdatePartialUpdateErrors, ThrowOnError> {
         return (options?.client ?? client).patch<CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdatePartialUpdateErrors, ThrowOnError>({
-            security: [{ scheme: 'bearer', type: 'http' }, {
+            security: [{
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                }, {
                     in: 'cookie',
                     name: 'sessionid',
                     type: 'apiKey'
@@ -334,9 +386,13 @@ export class CfgAccountsProfile {
      *
      * Update the current authenticated user's profile information.
      */
-    public static cfgAccountsProfileUpdateUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdateUpdateData, ThrowOnError>) {
+    public static cfgAccountsProfileUpdateUpdate<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsProfileUpdateUpdateData, ThrowOnError>): RequestResult<CfgAccountsProfileUpdateUpdateResponses, CfgAccountsProfileUpdateUpdateErrors, ThrowOnError> {
         return (options?.client ?? client).put<CfgAccountsProfileUpdateUpdateResponses, CfgAccountsProfileUpdateUpdateErrors, ThrowOnError>({
-            security: [{ scheme: 'bearer', type: 'http' }, {
+            security: [{
+                    key: 'jwtAuth',
+                    scheme: 'bearer',
+                    type: 'http'
+                }, {
                     in: 'cookie',
                     name: 'sessionid',
                     type: 'apiKey'
@@ -355,7 +411,7 @@ export class CfgAccountsAuth {
     /**
      * Refresh JWT token.
      */
-    public static cfgAccountsTokenRefreshCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsTokenRefreshCreateData, ThrowOnError>) {
+    public static cfgAccountsTokenRefreshCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsTokenRefreshCreateData, ThrowOnError>): RequestResult<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError> {
         return (options.client ?? client).post<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError>({
             url: '/cfg/accounts/token/refresh/',
             ...options,
@@ -373,9 +429,13 @@ export class CfgCentrifugo {
      *
      * Generate JWT token for WebSocket connection to Centrifugo. Token includes user's allowed channels based on their permissions. Requires authentication.
      */
-    public static cfgCentrifugoAuthTokenRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgCentrifugoAuthTokenRetrieveData, ThrowOnError>) {
+    public static cfgCentrifugoAuthTokenRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgCentrifugoAuthTokenRetrieveData, ThrowOnError>): RequestResult<CfgCentrifugoAuthTokenRetrieveResponses, CfgCentrifugoAuthTokenRetrieveErrors, ThrowOnError> {
         return (options?.client ?? client).get<CfgCentrifugoAuthTokenRetrieveResponses, CfgCentrifugoAuthTokenRetrieveErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/centrifugo/auth/token/',
             ...options
         });
@@ -386,9 +446,13 @@ export class CfgTotpBackupCodes {
     /**
      * Get backup codes status for user.
      */
-    public static cfgTotpBackupCodesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpBackupCodesRetrieveData, ThrowOnError>) {
+    public static cfgTotpBackupCodesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpBackupCodesRetrieveData, ThrowOnError>): RequestResult<CfgTotpBackupCodesRetrieveResponses, unknown, ThrowOnError> {
         return (options?.client ?? client).get<CfgTotpBackupCodesRetrieveResponses, unknown, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/backup-codes/',
             ...options
         });
@@ -400,9 +464,13 @@ export class CfgTotpBackupCodes {
      * Requires TOTP code for verification.
      * Invalidates all existing codes.
      */
-    public static cfgTotpBackupCodesRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpBackupCodesRegenerateCreateData, ThrowOnError>) {
+    public static cfgTotpBackupCodesRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpBackupCodesRegenerateCreateData, ThrowOnError>): RequestResult<CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRegenerateCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRegenerateCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/backup-codes/regenerate/',
             ...options,
             headers: {
@@ -417,9 +485,13 @@ export class CfgTotp {
     /**
      * List all TOTP devices for user.
      */
-    public static cfgTotpDevicesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpDevicesRetrieveData, ThrowOnError>) {
+    public static cfgTotpDevicesRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgTotpDevicesRetrieveData, ThrowOnError>): RequestResult<CfgTotpDevicesRetrieveResponses, unknown, ThrowOnError> {
         return (options?.client ?? client).get<CfgTotpDevicesRetrieveResponses, unknown, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/devices/',
             ...options
         });
@@ -430,9 +502,13 @@ export class CfgTotp {
      *
      * Requires verification code if removing the last/primary device.
      */
-    public static cfgTotpDevicesDestroy<ThrowOnError extends boolean = false>(options: Options<CfgTotpDevicesDestroyData, ThrowOnError>) {
+    public static cfgTotpDevicesDestroy<ThrowOnError extends boolean = false>(options: Options<CfgTotpDevicesDestroyData, ThrowOnError>): RequestResult<CfgTotpDevicesDestroyResponses, unknown, ThrowOnError> {
         return (options.client ?? client).delete<CfgTotpDevicesDestroyResponses, unknown, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/devices/{id}/',
             ...options
         });
@@ -443,9 +519,13 @@ export class CfgTotp {
      *
      * Requires verification code.
      */
-    public static cfgTotpDisableCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpDisableCreateData, ThrowOnError>) {
+    public static cfgTotpDisableCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpDisableCreateData, ThrowOnError>): RequestResult<CfgTotpDisableCreateResponses, CfgTotpDisableCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgTotpDisableCreateResponses, CfgTotpDisableCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/disable/',
             ...options,
             headers: {
@@ -462,9 +542,13 @@ export class CfgTotpSetup {
      *
      * Creates a new TOTP device and returns QR code for scanning.
      */
-    public static cfgTotpSetupCreate<ThrowOnError extends boolean = false>(options?: Options<CfgTotpSetupCreateData, ThrowOnError>) {
+    public static cfgTotpSetupCreate<ThrowOnError extends boolean = false>(options?: Options<CfgTotpSetupCreateData, ThrowOnError>): RequestResult<CfgTotpSetupCreateResponses, CfgTotpSetupCreateErrors, ThrowOnError> {
         return (options?.client ?? client).post<CfgTotpSetupCreateResponses, CfgTotpSetupCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/setup/',
             ...options,
             headers: {
@@ -479,9 +563,13 @@ export class CfgTotpSetup {
      *
      * Activates the device and generates backup codes.
      */
-    public static cfgTotpSetupConfirmCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpSetupConfirmCreateData, ThrowOnError>) {
+    public static cfgTotpSetupConfirmCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpSetupConfirmCreateData, ThrowOnError>): RequestResult<CfgTotpSetupConfirmCreateResponses, CfgTotpSetupConfirmCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgTotpSetupConfirmCreateResponses, CfgTotpSetupConfirmCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/setup/confirm/',
             ...options,
             headers: {
@@ -498,9 +586,13 @@ export class CfgTotpVerify {
      *
      * Completes authentication and returns JWT tokens on success.
      */
-    public static cfgTotpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyCreateData, ThrowOnError>) {
+    public static cfgTotpVerifyCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyCreateData, ThrowOnError>): RequestResult<CfgTotpVerifyCreateResponses, CfgTotpVerifyCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgTotpVerifyCreateResponses, CfgTotpVerifyCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/verify/',
             ...options,
             headers: {
@@ -515,9 +607,13 @@ export class CfgTotpVerify {
      *
      * Alternative verification method when TOTP device unavailable.
      */
-    public static cfgTotpVerifyBackupCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyBackupCreateData, ThrowOnError>) {
+    public static cfgTotpVerifyBackupCreate<ThrowOnError extends boolean = false>(options: Options<CfgTotpVerifyBackupCreateData, ThrowOnError>): RequestResult<CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyBackupCreateErrors, ThrowOnError> {
         return (options.client ?? client).post<CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyBackupCreateErrors, ThrowOnError>({
-            security: [{ name: 'X-API-Key', type: 'apiKey' }, { scheme: 'bearer', type: 'http' }],
+            security: [{ name: 'X-API-Key', type: 'apiKey' }, {
+                    key: 'jwtAuthWithLastLogin',
+                    scheme: 'bearer',
+                    type: 'http'
+                }],
             url: '/cfg/totp/verify/backup/',
             ...options,
             headers: {

package/src/auth/context/AuthContext.tsx

@@ -11,6 +11,7 @@ import { SWRConfig } from 'swr';
 import { useCfgRouter, useLocalStorage, useQueryParams } from '../hooks';
 
 import { api as apiAccounts } from '../../';
+import { applyRoleLogPolicy } from '../../log-control';
 import { APIError } from '../../_api/generated/helpers';
 import { clearProfileCache, getCachedProfile } from '../hooks/useProfileCache';
 import { useAuthRedirectManager } from '../hooks/useAuthRedirect';
@@ -556,6 +557,13 @@ const AuthProviderInternal: React.FC<AuthProviderProps> = ({ children, config })
     return Boolean(user?.is_staff || user?.is_superuser);
   }, [user]);
 
+  // Role-aware console verbosity: admins (and dev) get debug logs, regular
+  // users in production get a clean console (errors only). Re-applied whenever
+  // the admin status changes (login / logout / profile load).
+  useEffect(() => {
+    applyRoleLogPolicy({ isAdmin: isAdminUser });
+  }, [isAdminUser]);
+
   // Profile management: Update profile data
   const updateProfile = useCallback(
     async (data: { first_name?: string; last_name?: string; username?: string }): Promise<UserProfile> => {

package/src/auth/utils/env.ts

@@ -1,3 +1,21 @@
 export const isDev = process.env.NODE_ENV === 'development';
 export const isProd = !isDev;
 export const isBrowser = typeof window !== 'undefined';
+
+/**
+ * Next.js static-export build (`output: 'export'`). Loggers treat it like dev
+ * for visibility; some auth/SSR features behave differently under it.
+ */
+export const isStaticBuild = process.env.NEXT_PUBLIC_STATIC_BUILD === 'true';
+
+/**
+ * DPoP (RFC 9449) sender-constrained tokens are enabled for this app.
+ *
+ * Set by `createBaseNextConfig({ dpop: true })` (inlines
+ * `NEXT_PUBLIC_DPOP_ENABLED='true'`). When true: tokens are bound to a
+ * non-extractable in-browser key, a copied Bearer token can't be replayed, and
+ * the API client signs a per-request DPoP proof. This flag lives in
+ * `@djangocfg/api` — the package that implements DPoP — so it is the single
+ * source of truth, importable by every higher-level package.
+ */
+export const dpopEnabled = process.env.NEXT_PUBLIC_DPOP_ENABLED === 'true';

package/src/auth/utils/logger.ts

@@ -11,15 +11,22 @@ import { createConsola } from 'consola';
  * - 3: log, info
  * - 4: debug
  * - 5: trace, verbose
+ *
+ * The level is driven by the GLOBAL runtime controller (log-control), so an
+ * admin can get verbose logs (even in prod) while regular users keep a clean
+ * console. `applyRoleLogPolicy(...)` at app bootstrap sets the policy.
  */
-import { isDev as isDevelopment } from './env';
-const isStaticBuild = process.env.NEXT_PUBLIC_STATIC_BUILD === 'true';
-const showLogs = isDevelopment || isStaticBuild;
+import { getLogLevel, onLogLevelChange } from '../../log-control';
 
 export const logger = createConsola({
-  level: showLogs ? 4 : 1,  // dev: debug, production: errors only
+  level: getLogLevel(),
 }).withTag('api');
 
+// Keep the live logger's level in sync with the global controller.
+onLogLevelChange((level) => {
+  logger.level = level;
+});
+
 /**
  * Auth-specific logger
  */

package/src/index.ts

@@ -34,3 +34,15 @@ export type { User } from './_api/generated/_cfg_accounts/types.gen';
 
 // Legacy alias for code that still imports `api` (= cfg_accounts singleton).
 export { CfgAccountsApi as api } from './_api/generated';
+
+// Global runtime log-level control (role-aware verbosity).
+export {
+  getLogLevel,
+  setLogLevel,
+  onLogLevelChange,
+  applyRoleLogPolicy,
+  type ConsolaLevel,
+} from './log-control';
+
+// Env flags — single source of truth (api is the lowest shared package).
+export { isDev, isProd, isBrowser, isStaticBuild, dpopEnabled } from './auth/utils/env';

package/src/log-control.ts

@@ -0,0 +1,81 @@
+/**
+ * Global runtime log-level control.
+ *
+ * One mutable level that every `@djangocfg/*` consola wrapper reads, so the
+ * whole app's console verbosity can be changed at runtime (e.g. raised for an
+ * admin, kept silent for a regular user in production) WITHOUT each package
+ * hardcoding `isDev ? 4 : 1`.
+ *
+ * Lives in `@djangocfg/api` because it's the lowest shared package — api,
+ * layouts, centrifugo, ui-core consumers can all import it without a cycle.
+ *
+ * consola levels: 0 silent · 1 error · 2 warn · 3 info · 4 debug · 5 trace.
+ *
+ * Default policy (before anyone calls setLogLevel):
+ *   - dev / static build → 4 (debug)
+ *   - production         → 1 (errors only)
+ * App bootstrap should call `applyRoleLogPolicy({ isAdmin, isDev })` once auth
+ * is known to raise verbosity for staff/superusers even in production.
+ */
+
+import { isDev, isStaticBuild } from './auth/utils/env';
+
+export type ConsolaLevel = 0 | 1 | 2 | 3 | 4 | 5;
+
+/** Dev or a static export → show verbose logs by default. */
+const verboseByDefault = isDev || isStaticBuild;
+
+const DEFAULT_LEVEL: ConsolaLevel = verboseByDefault ? 4 : 1;
+
+let _level: ConsolaLevel = DEFAULT_LEVEL;
+
+/** Subscribers (the wrapper loggers) notified when the level changes. */
+const _subscribers = new Set<(level: ConsolaLevel) => void>();
+
+/** Current global log level. Wrappers read this when constructing/refreshing. */
+export function getLogLevel(): ConsolaLevel {
+  return _level;
+}
+
+/** Set the global log level and notify all live loggers. */
+export function setLogLevel(level: ConsolaLevel): void {
+  _level = level;
+  for (const fn of _subscribers) {
+    try {
+      fn(level);
+    } catch {
+      /* a bad subscriber must not break logging */
+    }
+  }
+}
+
+/**
+ * Subscribe to level changes. Returns an unsubscribe fn. The callback fires
+ * immediately with the current level so a logger can sync on registration.
+ */
+export function onLogLevelChange(fn: (level: ConsolaLevel) => void): () => void {
+  _subscribers.add(fn);
+  try {
+    fn(_level);
+  } catch {
+    /* ignore */
+  }
+  return () => _subscribers.delete(fn);
+}
+
+/**
+ * Apply the role-aware policy. Call once at bootstrap and whenever auth changes.
+ *
+ *   - admin (is_staff / is_superuser): full verbosity (debug) everywhere, even
+ *     in production — so support/devs can diagnose live without a redeploy.
+ *   - dev (non-admin): debug.
+ *   - production regular user: errors only — a clean console, like big SaaS apps.
+ */
+export function applyRoleLogPolicy(opts: { isAdmin: boolean; isDev?: boolean }): void {
+  const devMode = opts.isDev ?? verboseByDefault;
+  if (opts.isAdmin || devMode) {
+    setLogLevel(4);
+  } else {
+    setLogLevel(1);
+  }
+}