@djangocfg/api 2.1.440 → 2.1.442

package/dist/clients.d.cts

@@ -170,6 +170,11 @@ interface Config$1 {
      */
     responseValidator?: (data: unknown) => Promise<unknown>;
 }
+/**
+ * Arbitrary metadata passed through the `meta` request option.
+ */
+interface ClientMeta {
+}
 
 type ServerSentEventsOptions<TData = unknown> = Omit<RequestInit, 'method'> & Pick<Config$1, 'method' | 'responseTransformer' | 'responseValidator'> & {
     /**
@@ -417,6 +422,23 @@ type ApiKeyRequest = {
      */
     created_at: string;
 };
+/**
+ * Serializer for revealing the current (unrotated) full API key.
+ */
+type ApiKeyReveal = {
+    /**
+     * Full API key (current value, not rotated)
+     */
+    key: string;
+    /**
+     * When the key was created
+     */
+    created_at: string;
+    /**
+     * When the key was last regenerated
+     */
+    reissued_at: string | null;
+};
 /**
  * Serializer for testing an API key.
  */
@@ -1136,6 +1158,21 @@ type CfgAccountsApiKeyRegenerateCreateErrors = {
 type CfgAccountsApiKeyRegenerateCreateResponses = {
     200: ApiKeyRegenerate;
 };
+type CfgAccountsApiKeyRevealCreateData = {
+    body: ApiKeyRequest;
+    path?: never;
+    query?: never;
+    url: '/cfg/accounts/api-key/reveal/';
+};
+type CfgAccountsApiKeyRevealCreateErrors = {
+    /**
+     * Authentication credentials were not provided.
+     */
+    401: unknown;
+};
+type CfgAccountsApiKeyRevealCreateResponses = {
+    200: ApiKeyReveal;
+};
 type CfgAccountsApiKeyTestCreateData = {
     body: ApiKeyTestRequest;
     path?: never;
@@ -1527,7 +1564,7 @@ type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean
      * You can pass arbitrary values through the `meta` object. This can be
      * used to access values that aren't defined as part of the SDK function.
      */
-    meta?: Record<string, unknown>;
+    meta?: keyof ClientMeta extends never ? Record<string, unknown> : ClientMeta;
 };
 declare class CfgAccountsApiKey {
     /**
@@ -1542,6 +1579,12 @@ declare class CfgAccountsApiKey {
      * Generate a new API key. The full key is returned only once.
      */
     static cfgAccountsApiKeyRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRegenerateCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError>;
+    /**
+     * Reveal API key
+     *
+     * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.
+     */
+    static cfgAccountsApiKeyRevealCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRevealCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyRevealCreateErrors, ThrowOnError>;
     /**
      * Test API key
      *
@@ -1655,6 +1698,12 @@ declare class CfgAccountsProfile {
 declare class CfgAccountsAuth {
     /**
      * Refresh JWT token.
+     *
+     * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the
+     * rotated access/refresh in the response are re-stamped with the same `cnf`
+     * (stock SimpleJWT drops it from the derived access), and a matching DPoP
+     * proof is required on the refresh request — so a stolen refresh token can't
+     * be used to mint fresh tokens.
      */
     static cfgAccountsTokenRefreshCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsTokenRefreshCreateData, ThrowOnError>): RequestResult<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError>;
 }

package/dist/clients.d.ts

@@ -170,6 +170,11 @@ interface Config$1 {
      */
     responseValidator?: (data: unknown) => Promise<unknown>;
 }
+/**
+ * Arbitrary metadata passed through the `meta` request option.
+ */
+interface ClientMeta {
+}
 
 type ServerSentEventsOptions<TData = unknown> = Omit<RequestInit, 'method'> & Pick<Config$1, 'method' | 'responseTransformer' | 'responseValidator'> & {
     /**
@@ -417,6 +422,23 @@ type ApiKeyRequest = {
      */
     created_at: string;
 };
+/**
+ * Serializer for revealing the current (unrotated) full API key.
+ */
+type ApiKeyReveal = {
+    /**
+     * Full API key (current value, not rotated)
+     */
+    key: string;
+    /**
+     * When the key was created
+     */
+    created_at: string;
+    /**
+     * When the key was last regenerated
+     */
+    reissued_at: string | null;
+};
 /**
  * Serializer for testing an API key.
  */
@@ -1136,6 +1158,21 @@ type CfgAccountsApiKeyRegenerateCreateErrors = {
 type CfgAccountsApiKeyRegenerateCreateResponses = {
     200: ApiKeyRegenerate;
 };
+type CfgAccountsApiKeyRevealCreateData = {
+    body: ApiKeyRequest;
+    path?: never;
+    query?: never;
+    url: '/cfg/accounts/api-key/reveal/';
+};
+type CfgAccountsApiKeyRevealCreateErrors = {
+    /**
+     * Authentication credentials were not provided.
+     */
+    401: unknown;
+};
+type CfgAccountsApiKeyRevealCreateResponses = {
+    200: ApiKeyReveal;
+};
 type CfgAccountsApiKeyTestCreateData = {
     body: ApiKeyTestRequest;
     path?: never;
@@ -1527,7 +1564,7 @@ type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean
      * You can pass arbitrary values through the `meta` object. This can be
      * used to access values that aren't defined as part of the SDK function.
      */
-    meta?: Record<string, unknown>;
+    meta?: keyof ClientMeta extends never ? Record<string, unknown> : ClientMeta;
 };
 declare class CfgAccountsApiKey {
     /**
@@ -1542,6 +1579,12 @@ declare class CfgAccountsApiKey {
      * Generate a new API key. The full key is returned only once.
      */
     static cfgAccountsApiKeyRegenerateCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRegenerateCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRegenerateCreateErrors, ThrowOnError>;
+    /**
+     * Reveal API key
+     *
+     * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.
+     */
+    static cfgAccountsApiKeyRevealCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsApiKeyRevealCreateData, ThrowOnError>): RequestResult<CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyRevealCreateErrors, ThrowOnError>;
     /**
      * Test API key
      *
@@ -1655,6 +1698,12 @@ declare class CfgAccountsProfile {
 declare class CfgAccountsAuth {
     /**
      * Refresh JWT token.
+     *
+     * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the
+     * rotated access/refresh in the response are re-stamped with the same `cnf`
+     * (stock SimpleJWT drops it from the derived access), and a matching DPoP
+     * proof is required on the refresh request — so a stolen refresh token can't
+     * be used to mint fresh tokens.
      */
     static cfgAccountsTokenRefreshCreate<ThrowOnError extends boolean = false>(options: Options<CfgAccountsTokenRefreshCreateData, ThrowOnError>): RequestResult<CfgAccountsTokenRefreshCreateResponses, unknown, ThrowOnError>;
 }

package/dist/clients.mjs

@@ -1397,11 +1397,7 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyRetrieve(options) {
     return (options?.client ?? client).get({
       security: [
-        {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
-        },
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1421,11 +1417,31 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyRegenerateCreate(options) {
     return (options.client ?? client).post({
       security: [
+        { scheme: "bearer", type: "http" },
         {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
+          in: "cookie",
+          name: "sessionid",
+          type: "apiKey"
         },
+        { name: "X-API-Key", type: "apiKey" }
+      ],
+      url: "/cfg/accounts/api-key/regenerate/",
+      ...options,
+      headers: {
+        "Content-Type": "application/json",
+        ...options.headers
+      }
+    });
+  }
+  /**
+   * Reveal API key
+   *
+   * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.
+   */
+  static cfgAccountsApiKeyRevealCreate(options) {
+    return (options.client ?? client).post({
+      security: [
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1433,7 +1449,7 @@ var CfgAccountsApiKey = class {
         },
         { name: "X-API-Key", type: "apiKey" }
       ],
-      url: "/cfg/accounts/api-key/regenerate/",
+      url: "/cfg/accounts/api-key/reveal/",
       ...options,
       headers: {
         "Content-Type": "application/json",
@@ -1449,11 +1465,7 @@ var CfgAccountsApiKey = class {
   static cfgAccountsApiKeyTestCreate(options) {
     return (options.client ?? client).post({
       security: [
-        {
-          key: "jwtAuth",
-          scheme: "bearer",
-          type: "http"
-        },
+        { scheme: "bearer", type: "http" },
         {
           in: "cookie",
           name: "sessionid",
@@ -1481,11 +1493,7 @@ var CfgAccountsOauth = class {
    */
   static cfgAccountsOauthConnectionsList(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/oauth/connections/",
       ...options
     });
@@ -1497,11 +1505,7 @@ var CfgAccountsOauth = class {
    */
   static cfgAccountsOauthDisconnectCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/oauth/disconnect/",
       ...options,
       headers: {
@@ -1558,11 +1562,7 @@ var CfgAccounts = class {
    */
   static cfgAccountsOtpRequestCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/otp/request/",
       ...options,
       headers: {
@@ -1583,11 +1583,7 @@ var CfgAccounts = class {
    */
   static cfgAccountsOtpVerifyCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/otp/verify/",
       ...options,
       headers: {
@@ -1608,11 +1604,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1629,11 +1621,7 @@ var CfgAccountsProfile = class {
   static cfgAccountsProfileAvatarCreate(options) {
     return (options?.client ?? client).post({
       ...formDataBodySerializer,
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/accounts/profile/avatar/",
       ...options,
       headers: {
@@ -1659,11 +1647,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileDeleteCreate(options) {
     return (options?.client ?? client).post({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1679,11 +1663,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfilePartialPartialUpdate(options) {
     return (options?.client ?? client).patch({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1703,11 +1683,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfilePartialUpdate(options) {
     return (options?.client ?? client).put({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1727,11 +1703,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileUpdatePartialUpdate(options) {
     return (options?.client ?? client).patch({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1751,11 +1723,7 @@ var CfgAccountsProfile = class {
    */
   static cfgAccountsProfileUpdateUpdate(options) {
     return (options?.client ?? client).put({
-      security: [{
-        key: "jwtAuth",
-        scheme: "bearer",
-        type: "http"
-      }, {
+      security: [{ scheme: "bearer", type: "http" }, {
         in: "cookie",
         name: "sessionid",
         type: "apiKey"
@@ -1775,6 +1743,12 @@ var CfgAccountsAuth = class {
   }
   /**
    * Refresh JWT token.
+   *
+   * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the
+   * rotated access/refresh in the response are re-stamped with the same `cnf`
+   * (stock SimpleJWT drops it from the derived access), and a matching DPoP
+   * proof is required on the refresh request — so a stolen refresh token can't
+   * be used to mint fresh tokens.
    */
   static cfgAccountsTokenRefreshCreate(options) {
     return (options.client ?? client).post({
@@ -1798,11 +1772,7 @@ var CfgCentrifugo = class {
    */
   static cfgCentrifugoAuthTokenRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/centrifugo/auth/token/",
       ...options
     });
@@ -1817,11 +1787,7 @@ var CfgTotpBackupCodes = class {
    */
   static cfgTotpBackupCodesRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/backup-codes/",
       ...options
     });
@@ -1834,11 +1800,7 @@ var CfgTotpBackupCodes = class {
    */
   static cfgTotpBackupCodesRegenerateCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/backup-codes/regenerate/",
       ...options,
       headers: {
@@ -1857,11 +1819,7 @@ var CfgTotp = class {
    */
   static cfgTotpDevicesRetrieve(options) {
     return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/devices/",
       ...options
     });
@@ -1873,11 +1831,7 @@ var CfgTotp = class {
    */
   static cfgTotpDevicesDestroy(options) {
     return (options.client ?? client).delete({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/devices/{id}/",
       ...options
     });
@@ -1889,11 +1843,7 @@ var CfgTotp = class {
    */
   static cfgTotpDisableCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/disable/",
       ...options,
       headers: {
@@ -1914,11 +1864,7 @@ var CfgTotpSetup = class {
    */
   static cfgTotpSetupCreate(options) {
     return (options?.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/setup/",
       ...options,
       headers: {
@@ -1934,11 +1880,7 @@ var CfgTotpSetup = class {
    */
   static cfgTotpSetupConfirmCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/setup/confirm/",
       ...options,
       headers: {
@@ -1959,11 +1901,7 @@ var CfgTotpVerify = class {
    */
   static cfgTotpVerifyCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/verify/",
       ...options,
       headers: {
@@ -1979,11 +1917,7 @@ var CfgTotpVerify = class {
    */
   static cfgTotpVerifyBackupCreate(options) {
     return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, {
-        key: "jwtAuthWithLastLogin",
-        scheme: "bearer",
-        type: "http"
-      }],
+      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
       url: "/cfg/totp/verify/backup/",
       ...options,
       headers: {