@meowpanel/api 0.2.0 → 0.4.0

package/script/src/resources/account.d.ts

@@ -1,32 +1,41 @@
 import type { HttpClient } from '../http.js';
 import { ReactiveResource } from '../reactive.js';
-import type { IncludeOptions, ISODate, NanoID } from '../types.js';
-/** Shared fields present on all account responses. @internal */
+import type { IncludeOptions, ISODate, NanoID, Paginated } from '../types.js';
+import type { UiTheme, UserPreferences, UserPreferencesData } from './users.js';
+import { type ActivityFeedOptions, type ActivityLog } from './servers/activity.js';
+import { type RequestLog, type RequestLogFeedOptions } from './request-logs.js';
+/**
+ * Shared issuer-envelope fields present on all account responses.
+ *
+ * `id` is the namespaced `"<type>:<id>"` form and `ref_id` holds the bare id.
+ * @internal
+ */
 interface AccountDataBase {
     id: string;
-    issuer_type: string;
+    type: string;
+    ref_id: string;
     permissions?: string[];
     created_at: ISODate;
     updated_at: ISODate;
 }
 /** Raw API shape for a user account. @internal */
 interface UserAccountData extends AccountDataBase {
-    issuer_type: 'user';
+    type: 'user';
     email: string;
+    email_verified_at: ISODate | null;
     nickname: string | null;
     avatar_uri: string | null;
-    display?: {
-        language: string | null;
-        theme: string | null;
-    } | null;
+    disabled_at: ISODate | null;
+    preferences?: UserPreferencesData | null;
 }
 /** Raw API shape for an API key account. @internal */
 interface ApiKeyAccountData extends AccountDataBase {
-    issuer_type: 'api_key';
+    type: 'api_key';
     name: string;
     description: string | null;
     owner_id: string;
     owner?: UserAccountData;
+    revoked_at: ISODate | null;
 }
 type AccountData = UserAccountData | ApiKeyAccountData;
 /**
@@ -52,16 +61,17 @@ export declare abstract class Account extends ReactiveResource {
 export declare class UserAccount extends Account {
     readonly issuerType: "user";
     email: string;
+    /** When this user verified their email, or `null` if unverified. */
+    emailVerifiedAt: Date | null;
     nickname: string | null;
     avatarUri: string | null;
+    /** When this account was disabled, or `null` if active. */
+    disabledAt: Date | null;
     /**
-     * Display preferences. Populated with `include=display`.
-     * Requires `member.display.read` permission or being the account owner.
+     * Display and locale preferences. Populated with `include=preferences`.
+     * Requires `user.preferences.read` permission or being the account owner.
      */
-    display: {
-        language: string | null;
-        theme: string | null;
-    } | undefined;
+    preferences: UserPreferences | undefined;
     /** @internal */
     constructor(data: UserAccountData, http: HttpClient);
     /** Update this user account in place. */
@@ -74,20 +84,77 @@ export declare class ApiKeyAccount extends Account {
     readonly issuerType: "api_key";
     name: string;
     description: string | null;
+    /** The owner's bare NanoID (parsed from the namespaced `owner_id`). */
     readonly ownerId: NanoID;
-    /** The owner user. */
+    /** The owner's issuer type, e.g. `'user'` or `'system'`. */
+    readonly ownerType: string;
+    /** The owner. Requires `?include=owner`. */
     owner: UserAccount | undefined;
+    /** When this key was revoked, or `null` if active. */
+    revokedAt: Date | null;
     /** @internal */
     constructor(data: ApiKeyAccountData, http: HttpClient);
 }
+/** Raw API shape for an account SSH key. @internal */
+export interface SshKeyData {
+    id: string;
+    name: string;
+    public_key: string;
+    created_at: ISODate;
+    updated_at: ISODate;
+}
+/**
+ * An SSH public key registered on the authenticated user account, used to
+ * authenticate against a server's SFTP endpoint.
+ *
+ * Retrieved via {@link AccountSshKeysManager.list} or {@link AccountSshKeysManager.create}.
+ */
+export declare class SshKey extends ReactiveResource {
+    /** The SSH key's unique NanoID. */
+    readonly id: NanoID;
+    /** Display name for the key. */
+    name: string;
+    /** The OpenSSH-format public key, e.g. `"ssh-ed25519 AAAA..."`. */
+    publicKey: string;
+    /** When this key was added. */
+    createdAt: Date;
+    /** When this key was last updated. */
+    updatedAt: Date;
+    /** @internal */
+    constructor(data: SshKeyData);
+}
+/** Payload for registering a new SSH key. */
+export interface CreateSshKeyPayload {
+    /** Display name for the key. */
+    name: string;
+    /** The OpenSSH-format public key. */
+    publicKey: string;
+}
+/**
+ * Manages SSH public keys on the authenticated user account.
+ *
+ * Access via `api.account.sshKeys`. Only user accounts can hold SSH keys; the
+ * API rejects these calls for non-user credentials.
+ */
+export declare class AccountSshKeysManager {
+    private readonly http;
+    /** @internal */
+    constructor(http: HttpClient);
+    /** List the SSH keys registered on the current user account. */
+    list(): Promise<SshKey[]>;
+    /** Register a new SSH public key on the current user account. */
+    create(payload: CreateSshKeyPayload): Promise<SshKey>;
+    /** Delete an SSH key from the current user account. */
+    delete(id: NanoID): Promise<void>;
+}
 /** Valid include keys for the account endpoint. */
-export type AccountInclude = 'display' | 'permissions';
+export type AccountInclude = 'preferences' | 'permissions';
 /** Fields that can be updated on a user account. */
 export interface UpdateAccountPayload {
     nickname?: string;
-    display?: {
+    preferences?: {
+        theme?: UiTheme;
         language?: string | null;
-        theme?: string | null;
     };
 }
 /**
@@ -120,6 +187,24 @@ export declare class AccountResource {
     fetchAvatar(): Promise<Blob>;
     /** Fetch the permission scopes available to the current account. */
     scopes(): Promise<string[]>;
+    /**
+     * Fetch the current account's activity feed (actions performed on this account).
+     *
+     * Only user accounts have an activity feed.
+     *
+     * @param opts Pagination and filter options.
+     */
+    activities(opts?: ActivityFeedOptions): Promise<Paginated<ActivityLog>>;
+    /**
+     * Fetch the current account's own HTTP request log.
+     *
+     * Scoped to the caller; no permission beyond being that account is required.
+     *
+     * @param opts Pagination, filters, and includes.
+     */
+    requestLogs(opts?: RequestLogFeedOptions): Promise<Paginated<RequestLog>>;
+    /** Manage SSH public keys on the current user account. */
+    get sshKeys(): AccountSshKeysManager;
 }
 export {};
 //# sourceMappingURL=account.d.ts.map

package/script/src/resources/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../src/src/resources/account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGnE,gEAAgE;AAChE,UAAU,eAAe;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,kDAAkD;AAClD,UAAU,eAAgB,SAAQ,eAAe;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE;QACT,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACrB,GAAG,IAAI,CAAC;CACT;AAED,sDAAsD;AACtD,UAAU,iBAAkB,SAAQ,eAAe;IAClD,WAAW,EAAE,SAAS,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,KAAK,WAAW,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAEvD;;;;GAIG;AACH,8BAAsB,OAAQ,SAAQ,gBAAgB;IAUpD,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU;IATpC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,kBAAyB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAEvB,gBAAgB;IAChB,SAAS,aACR,IAAI,EAAE,eAAe,EACF,IAAI,EAAE,UAAU;IAS7B,MAAM,IAAI,IAAI,IAAI,WAAW;IAI7B,QAAQ,IAAI,IAAI,IAAI,aAAa;IAIxC,gBAAgB;WACF,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa;CAUtF;AAED,4BAA4B;AAC5B,qBAAa,WAAY,SAAQ,OAAO;IACvC,SAAgB,UAAU,EAAG,MAAM,CAAU;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;;OAGG;IACI,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC;IAE9E,gBAAgB;gBACG,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU;IAQ1D,yCAAyC;IAC5B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAajE,wCAAwC;IAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAIzC;AAED,6BAA6B;AAC7B,qBAAa,aAAc,SAAQ,OAAO;IACzC,SAAgB,UAAU,EAAG,SAAS,CAAU;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,sBAAsB;IACf,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAEtC,gBAAgB;gBACG,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU;CAO5D;AAED,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,aAAa,CAAC;AAEvD,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,eAAe;IAER,OAAO,CAAC,QAAQ,CAAC,IAAI;IADxC,gBAAgB;gBACoB,IAAI,EAAE,UAAU;IAEpD,iDAAiD;IACpC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,cAAc,EAAE,GAAG,EAAE,EAC9D,IAAI,GAAE,cAAc,CAAC,cAAc,EAAE,CAAC,CAAM,GAC1C,OAAO,CAAC,WAAW,GAAG,aAAa,CAAC;IAQvC,qEAAqE;IACxD,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC;IAMxE,+DAA+D;IAClD,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,WAAW,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxF,8CAA8C;IACjC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzC,oEAAoE;IAC7D,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAGlC"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../src/src/resources/account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAkB,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAmB,KAAK,UAAU,EAAE,KAAK,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAEjG;;;;;GAKG;AACH,UAAU,eAAe;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,kDAAkD;AAClD,UAAU,eAAgB,SAAQ,eAAe;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACzC;AAED,sDAAsD;AACtD,UAAU,iBAAkB,SAAQ,eAAe;IAClD,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B;AAED,KAAK,WAAW,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAEvD;;;;GAIG;AACH,8BAAsB,OAAQ,SAAQ,gBAAgB;IAUpD,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU;IATpC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,kBAAyB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAEvB,gBAAgB;IAChB,SAAS,aACR,IAAI,EAAE,eAAe,EACF,IAAI,EAAE,UAAU;IAS7B,MAAM,IAAI,IAAI,IAAI,WAAW;IAI7B,QAAQ,IAAI,IAAI,IAAI,aAAa;IAIxC,gBAAgB;WACF,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa;CAUtF;AAED,4BAA4B;AAC5B,qBAAa,WAAY,SAAQ,OAAO;IACvC,SAAgB,UAAU,EAAG,MAAM,CAAU;IACtC,KAAK,EAAE,MAAM,CAAC;IACrB,oEAAoE;IAC7D,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,2DAA2D;IACpD,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IAC/B;;;OAGG;IACI,WAAW,EAAE,eAAe,GAAG,SAAS,CAAC;IAEhD,gBAAgB;gBACG,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU;IAU1D,yCAAyC;IAC5B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAejE,wCAAwC;IAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAIzC;AAED,6BAA6B;AAC7B,qBAAa,aAAc,SAAQ,OAAO;IACzC,SAAgB,UAAU,EAAG,SAAS,CAAU;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,uEAAuE;IACvE,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,4CAA4C;IACrC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,sDAAsD;IAC/C,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAE9B,gBAAgB;gBACG,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU;CAU5D;AAED,sDAAsD;AACtD,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED;;;;;GAKG;AACH,qBAAa,MAAO,SAAQ,gBAAgB;IAC3C,mCAAmC;IACnC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,gCAAgC;IACzB,IAAI,EAAE,MAAM,CAAC;IACpB,mEAAmE;IAC5D,SAAS,EAAE,MAAM,CAAC;IACzB,+BAA+B;IACxB,SAAS,EAAE,IAAI,CAAC;IACvB,sCAAsC;IAC/B,SAAS,EAAE,IAAI,CAAC;IAEvB,gBAAgB;gBACG,IAAI,EAAE,UAAU;CAQnC;AAED,6CAA6C;AAC7C,MAAM,WAAW,mBAAmB;IACnC,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,qBAAa,qBAAqB;IAEd,OAAO,CAAC,QAAQ,CAAC,IAAI;IADxC,gBAAgB;gBACoB,IAAI,EAAE,UAAU;IAEpD,gEAAgE;IACnD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKtC,iEAAiE;IACpD,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlE,uDAAuD;IAC1C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG9C;AAED,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,aAAa,CAAC;AAE3D,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,eAAe;IAER,OAAO,CAAC,QAAQ,CAAC,IAAI;IADxC,gBAAgB;gBACoB,IAAI,EAAE,UAAU;IAEpD,iDAAiD;IACpC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,cAAc,EAAE,GAAG,EAAE,EAC9D,IAAI,GAAE,cAAc,CAAC,cAAc,EAAE,CAAC,CAAM,GAC1C,OAAO,CAAC,WAAW,GAAG,aAAa,CAAC;IAQvC,qEAAqE;IACxD,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC;IAMxE,+DAA+D;IAClD,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,WAAW,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxF,8CAA8C;IACjC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzC,oEAAoE;IAC7D,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIlC;;;;;;OAMG;IACI,UAAU,CAAC,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAIlF;;;;;;OAMG;IACI,WAAW,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAIpF,0DAA0D;IAC1D,IAAW,OAAO,IAAI,qBAAqB,CAE1C;CACD"}

package/script/src/resources/account.js

@@ -1,8 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AccountResource = exports.ApiKeyAccount = exports.UserAccount = exports.Account = void 0;
+exports.AccountResource = exports.AccountSshKeysManager = exports.SshKey = exports.ApiKeyAccount = exports.UserAccount = exports.Account = void 0;
 const reactive_js_1 = require("../reactive.js");
 const types_js_1 = require("../types.js");
+const activity_js_1 = require("./servers/activity.js");
+const request_logs_js_1 = require("./request-logs.js");
 /**
  * Base class for the authenticated account.
  *
@@ -18,7 +20,7 @@ class Account extends reactive_js_1.ReactiveResource {
     constructor(data, http) {
         super();
         this.http = http;
-        this.id = (0, types_js_1.toNanoID)(data.id);
+        this.id = data.ref_id ? (0, types_js_1.toNanoID)(data.ref_id) : (0, types_js_1.parseIssuerRef)(data.id).id;
         this.permissions = data.permissions;
         this.createdAt = new Date(data.created_at);
         this.updatedAt = new Date(data.updated_at);
@@ -31,13 +33,13 @@ class Account extends reactive_js_1.ReactiveResource {
     }
     /** @internal */
     static create(data, http) {
-        switch (data.issuer_type) {
+        switch (data.type) {
             case 'user':
                 return new UserAccount(data, http);
             case 'api_key':
                 return new ApiKeyAccount(data, http);
             default:
-                throw new Error(`Unknown account issuer type: ${data.issuer_type}`);
+                throw new Error(`Unknown account issuer type: ${data.type}`);
         }
     }
 }
@@ -46,29 +48,37 @@ exports.Account = Account;
 class UserAccount extends Account {
     issuerType = 'user';
     email;
+    /** When this user verified their email, or `null` if unverified. */
+    emailVerifiedAt;
     nickname;
     avatarUri;
+    /** When this account was disabled, or `null` if active. */
+    disabledAt;
     /**
-     * Display preferences. Populated with `include=display`.
-     * Requires `member.display.read` permission or being the account owner.
+     * Display and locale preferences. Populated with `include=preferences`.
+     * Requires `user.preferences.read` permission or being the account owner.
      */
-    display;
+    preferences;
     /** @internal */
     constructor(data, http) {
         super(data, http);
         this.email = data.email;
+        this.emailVerifiedAt = data.email_verified_at ? new Date(data.email_verified_at) : null;
         this.nickname = data.nickname;
         this.avatarUri = data.avatar_uri;
-        this.display = data.display ?? undefined;
+        this.disabledAt = data.disabled_at ? new Date(data.disabled_at) : null;
+        this.preferences = data.preferences ?? undefined;
     }
     /** Update this user account in place. */
     async update(payload) {
         await this.http.patch('/account', payload);
-        const data = await this.http.get('/account');
+        const data = await this.http.get('/account', { params: { include: 'preferences,permissions' } });
         this.email = data.email;
+        this.emailVerifiedAt = data.email_verified_at ? new Date(data.email_verified_at) : null;
         this.nickname = data.nickname;
         this.avatarUri = data.avatar_uri;
-        this.display = data.display ?? undefined;
+        this.disabledAt = data.disabled_at ? new Date(data.disabled_at) : null;
+        this.preferences = data.preferences ?? undefined;
         this.permissions = data.permissions;
         this.createdAt = new Date(data.created_at);
         this.updatedAt = new Date(data.updated_at);
@@ -86,19 +96,86 @@ class ApiKeyAccount extends Account {
     issuerType = 'api_key';
     name;
     description;
+    /** The owner's bare NanoID (parsed from the namespaced `owner_id`). */
     ownerId;
-    /** The owner user. */
+    /** The owner's issuer type, e.g. `'user'` or `'system'`. */
+    ownerType;
+    /** The owner. Requires `?include=owner`. */
     owner;
+    /** When this key was revoked, or `null` if active. */
+    revokedAt;
     /** @internal */
     constructor(data, http) {
         super(data, http);
         this.name = data.name;
         this.description = data.description;
-        this.ownerId = (0, types_js_1.toNanoID)(data.owner_id);
+        const owner = (0, types_js_1.parseIssuerRef)(data.owner_id);
+        this.ownerId = owner.id;
+        this.ownerType = owner.type;
         this.owner = data.owner ? new UserAccount(data.owner, http) : undefined;
+        this.revokedAt = data.revoked_at ? new Date(data.revoked_at) : null;
     }
 }
 exports.ApiKeyAccount = ApiKeyAccount;
+/**
+ * An SSH public key registered on the authenticated user account, used to
+ * authenticate against a server's SFTP endpoint.
+ *
+ * Retrieved via {@link AccountSshKeysManager.list} or {@link AccountSshKeysManager.create}.
+ */
+class SshKey extends reactive_js_1.ReactiveResource {
+    /** The SSH key's unique NanoID. */
+    id;
+    /** Display name for the key. */
+    name;
+    /** The OpenSSH-format public key, e.g. `"ssh-ed25519 AAAA..."`. */
+    publicKey;
+    /** When this key was added. */
+    createdAt;
+    /** When this key was last updated. */
+    updatedAt;
+    /** @internal */
+    constructor(data) {
+        super();
+        this.id = (0, types_js_1.toNanoID)(data.id);
+        this.name = data.name;
+        this.publicKey = data.public_key;
+        this.createdAt = new Date(data.created_at);
+        this.updatedAt = new Date(data.updated_at);
+    }
+}
+exports.SshKey = SshKey;
+/**
+ * Manages SSH public keys on the authenticated user account.
+ *
+ * Access via `api.account.sshKeys`. Only user accounts can hold SSH keys; the
+ * API rejects these calls for non-user credentials.
+ */
+class AccountSshKeysManager {
+    http;
+    /** @internal */
+    constructor(http) {
+        this.http = http;
+    }
+    /** List the SSH keys registered on the current user account. */
+    async list() {
+        const data = await this.http.get('/account/ssh-keys');
+        return data.map((d) => new SshKey(d));
+    }
+    /** Register a new SSH public key on the current user account. */
+    async create(payload) {
+        const data = await this.http.post('/account/ssh-keys', {
+            name: payload.name,
+            public_key: payload.publicKey,
+        });
+        return new SshKey(data);
+    }
+    /** Delete an SSH key from the current user account. */
+    async delete(id) {
+        await this.http.delete(`/account/ssh-keys/${id}`);
+    }
+}
+exports.AccountSshKeysManager = AccountSshKeysManager;
 /**
  * Resource for the currently authenticated account.
  *
@@ -133,7 +210,7 @@ class AccountResource {
     /** Update the current user account. Only works for user accounts. */
     async update(payload) {
         await this.http.patch('/account', payload);
-        const data = await this.http.get('/account');
+        const data = await this.http.get('/account', { params: { include: 'preferences,permissions' } });
         return new UserAccount(data, this.http);
     }
     /** Upload a new avatar image. Only works for user accounts. */
@@ -154,5 +231,29 @@ class AccountResource {
     scopes() {
         return this.http.get('/account/scopes');
     }
+    /**
+     * Fetch the current account's activity feed (actions performed on this account).
+     *
+     * Only user accounts have an activity feed.
+     *
+     * @param opts Pagination and filter options.
+     */
+    activities(opts = {}) {
+        return (0, activity_js_1.listActivities)(this.http, '/account/activities', opts);
+    }
+    /**
+     * Fetch the current account's own HTTP request log.
+     *
+     * Scoped to the caller; no permission beyond being that account is required.
+     *
+     * @param opts Pagination, filters, and includes.
+     */
+    requestLogs(opts = {}) {
+        return (0, request_logs_js_1.listRequestLogs)(this.http, '/account/logs', opts);
+    }
+    /** Manage SSH public keys on the current user account. */
+    get sshKeys() {
+        return new AccountSshKeysManager(this.http);
+    }
 }
 exports.AccountResource = AccountResource;

package/script/src/resources/api-keys.d.ts

@@ -2,19 +2,17 @@ import type { HttpClient } from '../http.js';
 import { ResourceNamespace } from '../namespace.js';
 import { ReactiveResource } from '../reactive.js';
 import { type ISODate, type NanoID, type Paginated } from '../types.js';
-import type { MemberData } from './members.js';
-import { Member } from './members.js';
+import type { UserData } from './users.js';
+import { User } from './users.js';
 /** Raw API shape for an API key. @internal */
-interface ApiKeyData {
+export interface ApiKeyData {
     id: string;
-    issuer_type: string;
     name: string;
     description: string | null;
-    owner?: MemberData;
-    /** Only returned once, at creation time. */
-    token?: string;
+    owner_id: string;
+    owner?: UserData;
     permissions?: string[];
-    last_used_at?: ISODate | null;
+    revoked_at: ISODate | null;
     created_at: ISODate;
     updated_at: ISODate;
 }
@@ -23,31 +21,26 @@ interface ApiKeyData {
  *
  * Retrieved via {@link ApiKeysNamespace.list} or {@link ApiKeysNamespace.create}.
  *
- * > **Note:** The `token` field is only populated when the key is first created.
- * > It cannot be retrieved again after that. Store it securely.
+ * The bearer token is returned only once, by {@link ApiKeysNamespace.create}. It
+ * is never part of this resource. Store it securely when first received.
  */
 export declare class ApiKey extends ReactiveResource {
     /** The API key's unique NanoID. */
     readonly id: NanoID;
-    /** The issuer type, always `'api_key'`. */
-    readonly issuerType: string;
     /** Display name for this API key. */
     name: string;
     /** Description for this API key. */
     description: string | null;
-    /** The owner of this API key. Always present as full object. */
-    owner: Member | undefined;
-    /**
-     * The bearer token value.
-     *
-     * Only populated immediately after creation via {@link ApiKeysNamespace.create}.
-     * `undefined` on all subsequent fetches - store it securely when first received.
-     */
-    token: string | undefined;
+    /** The owner's bare NanoID (parsed from the namespaced `owner_id`). */
+    readonly ownerId: NanoID;
+    /** The owner's issuer type, e.g. `'user'` or `'system'`. */
+    readonly ownerType: string;
+    /** The owner of this API key. Requires `?include=owner`. */
+    owner: User | undefined;
     /** Permissions assigned to this API key. Requires `?include=permissions`. */
     permissions: string[] | undefined;
-    /** When this key was last used to authenticate a request, or `null` if never used. */
-    lastUsedAt: Date | null;
+    /** When this key was revoked, or `null` if active. */
+    revokedAt: Date | null;
     /** When this API key was created. */
     createdAt: Date;
     /** When this API key was last updated. */
@@ -123,5 +116,4 @@ export declare class ApiKeysNamespace extends ResourceNamespace<ApiKey, ApiKeyEv
      */
     create(payload: CreateApiKeyPayload): Promise<CreateApiKeyResult>;
 }
-export {};
 //# sourceMappingURL=api-keys.d.ts.map

package/script/src/resources/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/src/resources/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,SAAS,EAAY,MAAM,aAAa,CAAC;AAClF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,8CAA8C;AAC9C,UAAU,UAAU;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAQD;;;;;;;GAOG;AACH,qBAAa,MAAO,SAAQ,gBAAgB;IAC3C,mCAAmC;IACnC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,qCAAqC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACpB,oCAAoC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gEAAgE;IACzD,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;;OAKG;IACI,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,6EAA6E;IACtE,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACzC,sFAAsF;IAC/E,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IAC/B,qCAAqC;IAC9B,SAAS,EAAE,IAAI,CAAC;IACvB,0CAA0C;IACnC,SAAS,EAAE,IAAI,CAAC;IAEvB,gBAAgB;gBACG,IAAI,EAAE,UAAU;CAanC;AAED,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IACnC,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,WAAW,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IAClC,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC5B,iFAAiF;IACjF,OAAO,EAAE,kBAAkB,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC;IAC5E,gBAAgB;gBACG,IAAI,EAAE,UAAU;IAInC;;;;;;OAMG;IACU,IAAI,CAChB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC5C,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAO7B;;;;;;;OAOG;IACU,MAAM,CAClB,OAAO,EAAE,mBAAmB,GAC1B,OAAO,CAAC,kBAAkB,CAAC;CAuB9B"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/src/resources/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,SAAS,EAA4B,MAAM,aAAa,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAElC,8CAA8C;AAC9C,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAQD;;;;;;;GAOG;AACH,qBAAa,MAAO,SAAQ,gBAAgB;IAC3C,mCAAmC;IACnC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,qCAAqC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACpB,oCAAoC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,uEAAuE;IACvE,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,4DAA4D;IACrD,KAAK,EAAE,IAAI,GAAG,SAAS,CAAC;IAC/B,6EAA6E;IACtE,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACzC,sDAAsD;IAC/C,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,qCAAqC;IAC9B,SAAS,EAAE,IAAI,CAAC;IACvB,0CAA0C;IACnC,SAAS,EAAE,IAAI,CAAC;IAEvB,gBAAgB;gBACG,IAAI,EAAE,UAAU;CAcnC;AAED,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IACnC,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,WAAW,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IAClC,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC5B,iFAAiF;IACjF,OAAO,EAAE,kBAAkB,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC;IAC5E,gBAAgB;gBACG,IAAI,EAAE,UAAU;IAInC;;;;;;OAMG;IACU,IAAI,CAChB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC5C,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAO7B;;;;;;;OAOG;IACU,MAAM,CAClB,OAAO,EAAE,mBAAmB,GAC1B,OAAO,CAAC,kBAAkB,CAAC;CAuB9B"}

package/script/src/resources/api-keys.js

@@ -4,37 +4,32 @@ exports.ApiKeysNamespace = exports.ApiKey = void 0;
 const namespace_js_1 = require("../namespace.js");
 const reactive_js_1 = require("../reactive.js");
 const types_js_1 = require("../types.js");
-const members_js_1 = require("./members.js");
+const users_js_1 = require("./users.js");
 /**
  * An API key credential for authenticating programmatic access to the MeowPanel API.
  *
  * Retrieved via {@link ApiKeysNamespace.list} or {@link ApiKeysNamespace.create}.
  *
- * > **Note:** The `token` field is only populated when the key is first created.
- * > It cannot be retrieved again after that. Store it securely.
+ * The bearer token is returned only once, by {@link ApiKeysNamespace.create}. It
+ * is never part of this resource. Store it securely when first received.
  */
 class ApiKey extends reactive_js_1.ReactiveResource {
     /** The API key's unique NanoID. */
     id;
-    /** The issuer type, always `'api_key'`. */
-    issuerType;
     /** Display name for this API key. */
     name;
     /** Description for this API key. */
     description;
-    /** The owner of this API key. Always present as full object. */
+    /** The owner's bare NanoID (parsed from the namespaced `owner_id`). */
+    ownerId;
+    /** The owner's issuer type, e.g. `'user'` or `'system'`. */
+    ownerType;
+    /** The owner of this API key. Requires `?include=owner`. */
     owner;
-    /**
-     * The bearer token value.
-     *
-     * Only populated immediately after creation via {@link ApiKeysNamespace.create}.
-     * `undefined` on all subsequent fetches - store it securely when first received.
-     */
-    token;
     /** Permissions assigned to this API key. Requires `?include=permissions`. */
     permissions;
-    /** When this key was last used to authenticate a request, or `null` if never used. */
-    lastUsedAt;
+    /** When this key was revoked, or `null` if active. */
+    revokedAt;
     /** When this API key was created. */
     createdAt;
     /** When this API key was last updated. */
@@ -43,13 +38,14 @@ class ApiKey extends reactive_js_1.ReactiveResource {
     constructor(data) {
         super();
         this.id = (0, types_js_1.toNanoID)(data.id);
-        this.issuerType = data.issuer_type;
         this.name = data.name;
         this.description = data.description;
-        this.owner = data.owner ? new members_js_1.Member(data.owner) : undefined;
-        this.token = data.token;
+        const owner = (0, types_js_1.parseIssuerRef)(data.owner_id);
+        this.ownerId = owner.id;
+        this.ownerType = owner.type;
+        this.owner = data.owner ? new users_js_1.User(data.owner) : undefined;
         this.permissions = data.permissions;
-        this.lastUsedAt = data.last_used_at ? new Date(data.last_used_at) : null;
+        this.revokedAt = data.revoked_at ? new Date(data.revoked_at) : null;
         this.createdAt = new Date(data.created_at);
         this.updatedAt = new Date(data.updated_at);
     }

package/script/src/resources/auth.d.ts

@@ -1,28 +1,69 @@
 import type { HttpClient } from '../http.js';
+import { type ApiKeyAccount, type UserAccount } from './account.js';
 /**
  * A single authentication provider and its display configuration.
  */
 export interface AuthProvider {
+    /** Relative submission URL for this provider, e.g. `"/v1/auth/email"`. */
+    url: string;
     /** Provider-specific display fields, e.g. `{ display_name: 'WHMCS' }`. */
     fields: Record<string, string>;
 }
+/** Email-verification policy for the panel. `'off'` when email is unavailable. */
+export type EmailVerificationMode = 'off' | 'optional' | 'required';
 /**
  * Metadata about the panel's authentication configuration.
  */
 export interface AuthMeta {
     /** Available auth providers keyed by provider ID (e.g. `'email'`, `'whmcs'`). */
     providers: Record<string, AuthProvider>;
+    /** Email capability and verification policy. */
+    email: {
+        /** `true` when an email transport is configured. */
+        available: boolean;
+        /** The verification policy in effect. */
+        verification: EmailVerificationMode;
+    };
+}
+/** The opaque session token returned by a login or exchange. */
+export interface LoginResult {
+    /**
+     * The opaque session token. Usable only on `/auth/*` routes; call
+     * {@link AuthResource.refresh} with it set as the bearer token to obtain an access token.
+     */
+    token: string;
+}
+/** The result of redeeming an exchange code. */
+export interface ExchangeResult extends LoginResult {
+    /** The post-login redirect path, or `null`. */
+    redirect: string | null;
+}
+/** The access token (and optional account) from a refresh. */
+export interface RefreshResult {
+    /** Always `"Bearer"`. */
+    tokenType: string;
+    /** Lifetime of the access token, in seconds. */
+    expiresInSeconds: number;
+    /** The JWT access token to use on all non-auth routes. */
+    accessToken: string;
+    /** The authenticated account. Present only when requested with `includeAccount`. */
+    account?: UserAccount | ApiKeyAccount;
 }
 /**
- * Resource for authentication configuration.
+ * Resource for authentication configuration and login flows.
  *
  * Access via `api.auth`.
  *
+ * The flow: submit credentials ({@link login}) or redeem a code ({@link exchange}) to get an
+ * opaque session token, set it as the client token, then call {@link refresh} to obtain the
+ * short-lived access token used for all other requests.
+ *
  * @example
  * ```ts ignore
- * const { providers } = await api.auth.getMeta();
- * if (providers.email) console.log('Email login available');
- * if (providers.whmcs) console.log('WHMCS:', providers.whmcs.fields.display_name);
+ * const { token } = await api.auth.loginWithEmail('me@example.com', 'hunter2');
+ * api.setToken(token);
+ * const { accessToken } = await api.auth.refresh();
+ * api.setToken(accessToken);
  * ```
  */
 export declare class AuthResource {
@@ -35,5 +76,30 @@ export declare class AuthResource {
      * Returns the available login providers and their display fields.
      */
     getMeta(): Promise<AuthMeta>;
+    /**
+     * Submit credentials to a login provider.
+     *
+     * @param provider    The provider id, e.g. `"email"`.
+     * @param credentials The provider's fields (for `email`: `{ email, password }`).
+     */
+    login(provider: string, credentials: Record<string, unknown>): Promise<LoginResult>;
+    /** Log in with email and password. */
+    loginWithEmail(email: string, password: string): Promise<LoginResult>;
+    /**
+     * Redeem a single-use exchange code (e.g. from a WHMCS SSO redirect) for a session token.
+     *
+     * @param code The exchange code.
+     */
+    exchange(code: string): Promise<ExchangeResult>;
+    /**
+     * Exchange the current (opaque session) token for a short-lived access token.
+     *
+     * Call this with the session token set as the client's bearer token.
+     *
+     * @param opts `includeAccount` also returns the authenticated account.
+     */
+    refresh(opts?: {
+        includeAccount?: boolean;
+    }): Promise<RefreshResult>;
 }
 //# sourceMappingURL=auth.d.ts.map