@djangocfg/api 2.1.441 → 2.1.442

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djangocfg/api",
-  "version": "2.1.441",
+  "version": "2.1.442",
   "description": "Auto-generated TypeScript API client with React hooks, SWR integration, and Zod validation for Django REST Framework backends",
   "keywords": [
     "django",
@@ -84,7 +84,7 @@
   "devDependencies": {
     "@types/node": "^25.2.3",
     "@types/react": "^19.2.15",
-    "@djangocfg/typescript-config": "^2.1.441",
+    "@djangocfg/typescript-config": "^2.1.442",
     "next": "^16.2.2",
     "react": "^19.2.4",
     "tsup": "^8.5.0",

package/src/_api/generated/_cfg_accounts/hooks/index.ts

@@ -3,6 +3,7 @@
 
 export { useCfgAccountsApiKeyRegenerateCreate } from "./useCfgAccountsApiKeyRegenerateCreate";
 export { useCfgAccountsApiKeyRetrieve } from "./useCfgAccountsApiKeyRetrieve";
+export { useCfgAccountsApiKeyRevealCreate } from "./useCfgAccountsApiKeyRevealCreate";
 export { useCfgAccountsApiKeyTestCreate } from "./useCfgAccountsApiKeyTestCreate";
 export { useCfgAccountsOauthConnectionsList } from "./useCfgAccountsOauthConnectionsList";
 export { useCfgAccountsOauthDisconnectCreate } from "./useCfgAccountsOauthDisconnectCreate";

package/src/_api/generated/_cfg_accounts/hooks/useCfgAccountsApiKeyRevealCreate.ts

@@ -0,0 +1,64 @@
+'use client';
+
+// AUTO-GENERATED by openapi_processor / ts.hooks
+// Reveal API key
+// DO NOT EDIT — re-run `make gen`.
+
+import useSWRMutation from "swr/mutation";
+import type { SWRMutationConfiguration } from "swr/mutation";
+import { CfgAccountsApiKey } from "../../sdk.gen";
+import type { CfgAccountsApiKeyRevealCreateData, CfgAccountsApiKeyRevealCreateResponses } from "../../types.gen";
+import { APIKeyRevealSchema } from "../schemas/APIKeyReveal";
+
+type Args = Omit<CfgAccountsApiKeyRevealCreateData, "url">;
+type Result = CfgAccountsApiKeyRevealCreateResponses[keyof CfgAccountsApiKeyRevealCreateResponses];
+
+export function useCfgAccountsApiKeyRevealCreate(
+  config?: SWRMutationConfiguration<Result, Error, readonly ["cfg_accounts_api_key_reveal_create"], Args>,
+) {
+  return useSWRMutation<Result, Error, readonly ["cfg_accounts_api_key_reveal_create"], Args>(
+    ["cfg_accounts_api_key_reveal_create"] as const,
+    async (_key, { arg }: { arg: Args }) => {
+      const res = await CfgAccountsApiKey.cfgAccountsApiKeyRevealCreate({ ...arg, throwOnError: true } as never);
+      const data = res.data as Result;
+      const parsed = APIKeyRevealSchema.safeParse(data);
+      if (!parsed.success) {
+        // Log first so the failure is always visible, even if the
+        // event handler swallows it.
+        console.warn(
+          "[zod] response did not match schema",
+          {
+            operation: "cfg_accounts_api_key_reveal_create",
+            method: "POST",
+            path: "/cfg/accounts/api-key/reveal/",
+            issues: parsed.error.issues,
+            data,
+          },
+        );
+        if (typeof window !== "undefined") {
+          try {
+            window.dispatchEvent(
+              new CustomEvent("zod-validation-error", {
+                detail: {
+                  operation: "cfg_accounts_api_key_reveal_create",
+                  method: "POST",
+                  path: "/cfg/accounts/api-key/reveal/",
+                  issues: parsed.error.issues,
+                  data,
+                  timestamp: new Date(),
+                },
+                bubbles: true,
+                cancelable: false,
+              }),
+            );
+          } catch {
+            // Event dispatch is best-effort.
+          }
+        }
+        return data;
+      }
+      return parsed.data as unknown as Result;
+    },
+    config,
+  );
+}

package/src/_api/generated/_cfg_accounts/openapi.json

@@ -16,7 +16,7 @@
         ],
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -70,7 +70,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -113,6 +113,60 @@
         "x-async-capable": false
       }
     },
+    "/cfg/accounts/api-key/reveal/": {
+      "post": {
+        "operationId": "cfg_accounts_api_key_reveal_create",
+        "description": "Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.",
+        "summary": "Reveal API key",
+        "tags": [
+          "cfg_accounts_api_key"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/APIKeyRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {
+            "jwtAuthWithLastLogin": []
+          },
+          {
+            "cookieAuth": []
+          },
+          {
+            "apiKeyAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/APIKeyReveal"
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
     "/cfg/accounts/api-key/test/": {
       "post": {
         "operationId": "cfg_accounts_api_key_test_create",
@@ -133,7 +187,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -532,7 +586,7 @@
         ],
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -643,7 +697,7 @@
         ],
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -715,7 +769,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -785,7 +839,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -857,7 +911,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -927,7 +981,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -971,7 +1025,7 @@
     "/cfg/accounts/token/refresh/": {
       "post": {
         "operationId": "cfg_accounts_token_refresh_create",
-        "description": "Refresh JWT token.",
+        "description": "Refresh JWT token.\n\nDPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the\nrotated access/refresh in the response are re-stamped with the same `cnf`\n(stock SimpleJWT drops it from the derived access), and a matching DPoP\nproof is required on the refresh request — so a stolen refresh token can't\nbe used to mint fresh tokens.",
         "tags": [
           "cfg_accounts_auth"
         ],
@@ -1079,6 +1133,34 @@
           "reissued_at"
         ]
       },
+      "APIKeyReveal": {
+        "type": "object",
+        "description": "Serializer for revealing the current (unrotated) full API key.",
+        "properties": {
+          "key": {
+            "type": "string",
+            "description": "Full API key (current value, not rotated)"
+          },
+          "created_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the key was created"
+          },
+          "reissued_at": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "date-time",
+            "description": "When the key was last regenerated"
+          }
+        },
+        "required": [
+          "created_at",
+          "key",
+          "reissued_at"
+        ]
+      },
       "APIKeyTestRequest": {
         "type": "object",
         "description": "Serializer for testing an API key.",
@@ -1800,11 +1882,6 @@
         "in": "cookie",
         "name": "sessionid"
       },
-      "jwtAuth": {
-        "type": "http",
-        "scheme": "bearer",
-        "bearerFormat": "JWT"
-      },
       "jwtAuthWithLastLogin": {
         "type": "http",
         "scheme": "bearer",

package/src/_api/generated/_cfg_accounts/schemas/APIKeyReveal.ts

@@ -0,0 +1,13 @@
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
+// Source: OpenAPI 3.1 components.schemas
+// DO NOT EDIT — re-run `make gen-clients`.
+
+import { z } from "zod";
+
+export const APIKeyRevealSchema = z.object({
+  key: z.string(),
+  created_at: z.string().datetime({ offset: true }),
+  reissued_at: z.string().datetime({ offset: true }).nullable(),
+});
+
+export type APIKeyReveal = z.infer<typeof APIKeyRevealSchema>;

package/src/_api/generated/_cfg_accounts/schemas/index.ts

@@ -4,6 +4,7 @@
 export * from "./APIKey";
 export * from "./APIKeyRegenerate";
 export * from "./APIKeyRequest";
+export * from "./APIKeyReveal";
 export * from "./APIKeyTestRequest";
 export * from "./APIKeyTestResult";
 export * from "./AccountDeleteResponse";

package/src/_api/generated/_cfg_centrifugo/openapi.json

@@ -112,11 +112,6 @@
         "in": "cookie",
         "name": "sessionid"
       },
-      "jwtAuth": {
-        "type": "http",
-        "scheme": "bearer",
-        "bearerFormat": "JWT"
-      },
       "jwtAuthWithLastLogin": {
         "type": "http",
         "scheme": "bearer",

package/src/_api/generated/_cfg_totp/openapi.json

@@ -907,11 +907,6 @@
         "in": "cookie",
         "name": "sessionid"
       },
-      "jwtAuth": {
-        "type": "http",
-        "scheme": "bearer",
-        "bearerFormat": "JWT"
-      },
       "jwtAuthWithLastLogin": {
         "type": "http",
         "scheme": "bearer",

package/src/_api/generated/client/index.ts

@@ -10,6 +10,7 @@ export {
 export { buildClientParams } from '../core/params.gen';
 export { serializeQueryKeyValue } from '../core/queryKeySerializer.gen';
 export type { ServerSentEventsResult } from '../core/serverSentEvents.gen';
+export type { ClientMeta } from '../core/types.gen';
 export { createClient } from './client.gen';
 export type {
   Client,

package/src/_api/generated/core/params.gen.ts

@@ -88,16 +88,15 @@ function buildKeyMap(fields: FieldsConfig, map?: KeyMap): KeyMap {
 }
 
 interface Params {
-  body: unknown;
+  body?: unknown;
   headers: Record<string, unknown>;
   path: Record<string, unknown>;
   query: Record<string, unknown>;
 }
 
-type ParamsSlotMap = Record<Slot, unknown>;
-
-function stripEmptySlots(params: ParamsSlotMap): void {
+function stripEmptySlots(params: Params): void {
   for (const [slot, value] of Object.entries(params)) {
+    if (slot === 'body') continue;
     if (value && typeof value === 'object' && !Array.isArray(value) && !Object.keys(value).length) {
       delete params[slot as Slot];
     }
@@ -105,8 +104,7 @@ function stripEmptySlots(params: ParamsSlotMap): void {
 }
 
 export function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsConfig): Params {
-  const params: ParamsSlotMap = {
-    body: Object.create(null),
+  const params: Params = {
     headers: Object.create(null),
     path: Object.create(null),
     query: Object.create(null),
@@ -114,6 +112,15 @@ export function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsCo
 
   const map = buildKeyMap(fields);
 
+  function writeSlot(slot: Slot, key: string, value: unknown): void {
+    let record = params[slot] as Record<string, unknown> | undefined;
+    if (record === undefined) {
+      record = Object.create(null) as Record<string, unknown>;
+      params[slot] = record;
+    }
+    record[key] = value;
+  }
+
   let config: FieldsConfig[number] | undefined;
 
   for (const [index, arg] of args.entries()) {
@@ -130,7 +137,7 @@ export function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsCo
         const field = map.get(config.key)!;
         const name = field.map || config.key;
         if (field.in) {
-          (params[field.in] as Record<string, unknown>)[name] = arg;
+          writeSlot(field.in, name, arg);
         }
       } else {
         params.body = arg;
@@ -142,7 +149,7 @@ export function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsCo
         if (field) {
           if (field.in) {
             const name = field.map || key;
-            (params[field.in] as Record<string, unknown>)[name] = value;
+            writeSlot(field.in, name, value);
           } else {
             params[field.map] = value;
           }
@@ -151,11 +158,11 @@ export function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsCo
 
           if (extra) {
             const [prefix, slot] = extra;
-            (params[slot] as Record<string, unknown>)[key.slice(prefix.length)] = value;
+            writeSlot(slot, key.slice(prefix.length), value);
           } else if ('allowExtra' in config && config.allowExtra) {
             for (const [slot, allowed] of Object.entries(config.allowExtra)) {
               if (allowed) {
-                (params[slot as Slot] as Record<string, unknown>)[key] = value;
+                writeSlot(slot as Slot, key, value);
                 break;
               }
             }
@@ -167,5 +174,5 @@ export function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsCo
 
   stripEmptySlots(params);
 
-  return params as Params;
+  return params;
 }

package/src/_api/generated/core/types.gen.ts

@@ -91,6 +91,12 @@ export interface Config {
   responseValidator?: (data: unknown) => Promise<unknown>;
 }
 
+/**
+ * Arbitrary metadata passed through the `meta` request option.
+ */
+// eslint-disable-next-line @typescript-eslint/no-empty-object-type
+export interface ClientMeta {}
+
 type IsExactlyNeverOrNeverUndefined<T> = [T] extends [never]
   ? true
   : [T] extends [never | undefined]

package/src/_api/generated/openapi.json

@@ -16,7 +16,7 @@
         ],
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -70,7 +70,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -113,6 +113,60 @@
         "x-async-capable": false
       }
     },
+    "/cfg/accounts/api-key/reveal/": {
+      "post": {
+        "operationId": "cfg_accounts_api_key_reveal_create",
+        "description": "Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.",
+        "summary": "Reveal API key",
+        "tags": [
+          "cfg_accounts_api_key"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/APIKeyRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {
+            "jwtAuthWithLastLogin": []
+          },
+          {
+            "cookieAuth": []
+          },
+          {
+            "apiKeyAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/APIKeyReveal"
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
     "/cfg/accounts/api-key/test/": {
       "post": {
         "operationId": "cfg_accounts_api_key_test_create",
@@ -133,7 +187,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -524,7 +578,7 @@
         ],
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -635,7 +689,7 @@
         ],
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -707,7 +761,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -777,7 +831,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -849,7 +903,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -919,7 +973,7 @@
         },
         "security": [
           {
-            "jwtAuth": []
+            "jwtAuthWithLastLogin": []
           },
           {
             "cookieAuth": []
@@ -963,7 +1017,7 @@
     "/cfg/accounts/token/refresh/": {
       "post": {
         "operationId": "cfg_accounts_token_refresh_create",
-        "description": "Refresh JWT token.",
+        "description": "Refresh JWT token.\n\nDPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the\nrotated access/refresh in the response are re-stamped with the same `cnf`\n(stock SimpleJWT drops it from the derived access), and a matching DPoP\nproof is required on the refresh request — so a stolen refresh token can't\nbe used to mint fresh tokens.",
         "tags": [
           "cfg_accounts_auth"
         ],
@@ -1527,6 +1581,34 @@
           "reissued_at"
         ]
       },
+      "APIKeyReveal": {
+        "type": "object",
+        "description": "Serializer for revealing the current (unrotated) full API key.",
+        "properties": {
+          "key": {
+            "type": "string",
+            "description": "Full API key (current value, not rotated)"
+          },
+          "created_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the key was created"
+          },
+          "reissued_at": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "date-time",
+            "description": "When the key was last regenerated"
+          }
+        },
+        "required": [
+          "created_at",
+          "key",
+          "reissued_at"
+        ]
+      },
       "APIKeyTestRequest": {
         "type": "object",
         "description": "Serializer for testing an API key.",
@@ -2778,11 +2860,6 @@
         "in": "cookie",
         "name": "sessionid"
       },
-      "jwtAuth": {
-        "type": "http",
-        "scheme": "bearer",
-        "bearerFormat": "JWT"
-      },
       "jwtAuthWithLastLogin": {
         "type": "http",
         "scheme": "bearer",