@omnibase/core-js 0.9.14 → 0.9.16

package/docs/V1TenantsApi.md

@@ -1,15 +1,14 @@
 # V1TenantsApi
 
-All URIs are relative to *http://api.omnibase.tech*
+All URIs are relative to *https://api.omnibase.tech*
 
 | Method | HTTP request | Description |
 |------------- | ------------- | -------------|
-| [**acceptInvite**](V1TenantsApi.md#acceptinvite) | **PUT** /api/v1/tenants/invites/accept | Accept tenant invite |
-| [**assignRole**](V1TenantsApi.md#assignrole) | **POST** /api/v1/tenants/roles/assign/{user_id} | Assign role to user |
+| [**acceptInvite**](V1TenantsApi.md#acceptinviteoperation) | **PUT** /api/v1/tenants/invites/accept | Accept tenant invite |
+| [**addSubscription**](V1TenantsApi.md#addsubscriptionoperation) | **POST** /api/v1/tenants/subscriptions | Add subscription |
 | [**createInvite**](V1TenantsApi.md#createinvite) | **POST** /api/v1/tenants/invites | Create tenant invite |
-| [**createRole**](V1TenantsApi.md#createrole) | **POST** /api/v1/tenants/roles | Create role |
-| [**createSubscription**](V1TenantsApi.md#createsubscription) | **POST** /api/v1/payments/subscription | Create subscription |
-| [**createTenant**](V1TenantsApi.md#createtenant) | **POST** /api/v1/tenants | Create tenant |
+| [**createRole**](V1TenantsApi.md#createroleoperation) | **POST** /api/v1/tenants/roles | Create role |
+| [**createTenant**](V1TenantsApi.md#createtenantoperation) | **POST** /api/v1/tenants | Create tenant |
 | [**deleteRole**](V1TenantsApi.md#deleterole) | **DELETE** /api/v1/tenants/roles/{role_id} | Delete role |
 | [**deleteTenant**](V1TenantsApi.md#deletetenant) | **DELETE** /api/v1/tenants | Delete tenant |
 | [**getRoleDefinitions**](V1TenantsApi.md#getroledefinitions) | **GET** /api/v1/tenants/roles/definitions | Get namespace definitions |
@@ -18,21 +17,21 @@ All URIs are relative to *http://api.omnibase.tech*
 | [**listRoles**](V1TenantsApi.md#listroles) | **GET** /api/v1/tenants/roles | List roles |
 | [**listTenantSubscriptions**](V1TenantsApi.md#listtenantsubscriptions) | **GET** /api/v1/tenants/subscriptions | Get tenant subscriptions |
 | [**listTenantUsers**](V1TenantsApi.md#listtenantusers) | **GET** /api/v1/tenants/users | Get tenant users |
-| [**removeSubscription**](V1TenantsApi.md#removesubscription) | **DELETE** /api/v1/payments/subscription | Remove subscription |
+| [**removeSubscription**](V1TenantsApi.md#removesubscriptionoperation) | **DELETE** /api/v1/tenants/subscriptions | Remove subscription |
 | [**removeTenantUser**](V1TenantsApi.md#removetenantuser) | **DELETE** /api/v1/tenants/users | Remove tenant user |
 | [**switchActiveTenant**](V1TenantsApi.md#switchactivetenant) | **PUT** /api/v1/tenants/switch-active | Switch active tenant |
-| [**updateRole**](V1TenantsApi.md#updaterole) | **PUT** /api/v1/tenants/roles/{role_id} | Update role |
-| [**updateTenantUserRole**](V1TenantsApi.md#updatetenantuserrole) | **PUT** /api/v1/tenants/users/role | Update user role |
+| [**updateRole**](V1TenantsApi.md#updateroleoperation) | **PUT** /api/v1/tenants/roles/{role_id} | Update role |
+| [**updateTenantUserRole**](V1TenantsApi.md#updatetenantuserroleoperation) | **PUT** /api/v1/tenants/users | Update user role |
 
 
 
 ## acceptInvite
 
-> AcceptInvite200Response acceptInvite(request)
+> AcceptInvite200Response acceptInvite(acceptInviteRequest, xUserId)
 
 Accept tenant invite
 
-Accepts a tenant invitation using the token from the invite email and adds the user to the organization.  ## Authentication Requires JWT token. User\'s email must match the invite email.  ## Process 1. Validates invite token and expiry 2. Verifies user\'s email matches invite email 3. Marks invite as used 4. Adds user to tenant 5. Assigns role with permissions 6. Sets as active tenant and returns JWT token
+Accepts a tenant invitation using the token from the invite email and adds the user to the organization.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session - User\'s email must match the invite email - **Service Key Auth**: Requires X-Service-Key + X-User-ID header  ## Process 1. Validates invite token and expiry 2. Verifies user\'s email matches invite email 3. Marks invite as used 4. Adds user to tenant 5. Assigns role with permissions 6. Sets as active tenant and returns JWT token 
 
 ### Example
 
@@ -41,20 +40,26 @@ import {
   Configuration,
   V1TenantsApi,
 } from '@omnibase/core-js';
-import type { AcceptInviteRequest } from '@omnibase/core-js';
+import type { AcceptInviteOperationRequest } from '@omnibase/core-js';
 
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsAcceptInviteRequest | Invite acceptance parameters
-    request: ...,
-  } satisfies AcceptInviteRequest;
+    // AcceptInviteRequest
+    acceptInviteRequest: ...,
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+  } satisfies AcceptInviteOperationRequest;
 
   try {
     const data = await api.acceptInvite(body);
@@ -73,7 +78,8 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsAcceptInviteRequest](TenantsAcceptInviteRequest.md) | Invite acceptance parameters | |
+| **acceptInviteRequest** | [AcceptInviteRequest](AcceptInviteRequest.md) |  | |
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -81,7 +87,7 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
@@ -101,13 +107,13 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## assignRole
+## addSubscription
 
-> AssignRole200Response assignRole(userId, request)
+> AddSubscription200Response addSubscription(addSubscriptionRequest)
 
-Assign role to user
+Add subscription
 
-Assigns a role to a user and creates all associated Keto relationships for the role\'s permissions.  ## Authentication Requires JWT token with tenant context and appropriate permissions.  ## Request Format Provide either `role_id` or `role_name` (not both).  ## Use Cases - Grant role to user - Assign permissions via role - User onboarding
+Adds a Stripe subscription for the authenticated tenant using the provided plan ID.  ## Authentication Requires JWT token with tenant context.  ## Request Parameters - **plan_id** (required): The configuration item ID (e.g., \"neon_compute_starter\") that maps to a Stripe price - **stripe_customer_id** (optional): Override tenant\'s Stripe customer ID if needed  ## Process Flow 1. Validates the plan_id and maps it to a Stripe price_id via the stripe_id_mappings table 2. Resolves the Stripe customer ID from the authenticated tenant (or uses provided stripe_customer_id) 3. Checks if subscription already exists for this plan to prevent duplicates 4. Creates the subscription in Stripe with the specified price 5. Returns the subscription ID and status  ## Notes - If a subscription for this plan already exists, returns a 400 error - The subscription is created immediately and begins billing  ## Use Cases - Subscribe tenant to metered pricing plans (compute, storage, workers) - Enable usage-based billing for resources - Add additional services to tenant\'s billing 
 
 ### Example
 
@@ -116,25 +122,27 @@ import {
   Configuration,
   V1TenantsApi,
 } from '@omnibase/core-js';
-import type { AssignRoleRequest } from '@omnibase/core-js';
+import type { AddSubscriptionOperationRequest } from '@omnibase/core-js';
 
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // string | User ID
-    userId: userId_example,
-    // TenantsAssignRoleRequest | Role assignment parameters
-    request: ...,
-  } satisfies AssignRoleRequest;
+    // AddSubscriptionRequest
+    addSubscriptionRequest: ...,
+  } satisfies AddSubscriptionOperationRequest;
 
   try {
-    const data = await api.assignRole(body);
+    const data = await api.addSubscription(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -150,42 +158,41 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **userId** | `string` | User ID | [Defaults to `undefined`] |
-| **request** | [TenantsAssignRoleRequest](TenantsAssignRoleRequest.md) | Role assignment parameters | |
+| **addSubscriptionRequest** | [AddSubscriptionRequest](AddSubscriptionRequest.md) |  | |
 
 ### Return type
 
-[**AssignRole200Response**](AssignRole200Response.md)
+[**AddSubscription200Response**](AddSubscription200Response.md)
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
-| **200** | Role assigned successfully |  -  |
-| **400** | Invalid request or missing tenant ID |  -  |
-| **401** | Invalid or missing JWT token |  -  |
-| **404** | Role not found |  -  |
-| **500** | Failed to assign role |  -  |
+| **200** | Subscription added successfully |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
+| **401** | User not authenticated |  -  |
+| **404** | Plan not found - no Stripe price mapping found for the provided plan_id |  -  |
+| **500** | Failed to create subscription or fetch tenant |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
 ## createInvite
 
-> CreateInvite200Response createInvite(request)
+> CreateInvite200Response createInvite(createTenantUserInviteRequest, xUserId, xTenantId)
 
 Create tenant invite
 
-Creates a tenant invitation with a 7-day expiry token and sends an email to the invited user.  ## Authentication Requires JWT token with `invite_user` permission.  ## Process 1. Verifies user has invite permission 2. Creates invite with unique token (7-day expiry) 3. Sends invitation email asynchronously  ## Use Cases - Add team members to organization - Invite collaborators with specific roles
+Creates a tenant invitation with a 7-day expiry token and sends an email to the invited user.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with `invite_user` permission - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers with `invite_user` permission  ## Process 1. Verifies user has invite permission 2. Creates invite with unique token (7-day expiry) 3. Sends invitation email asynchronously  ## Use Cases - Add team members to organization - Invite collaborators with specific roles 
 
 ### Example
 
@@ -199,14 +206,22 @@ import type { CreateInviteRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsCreateTenantUserInviteRequest | Invite creation parameters
-    request: ...,
+    // CreateTenantUserInviteRequest
+    createTenantUserInviteRequest: ...,
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
   } satisfies CreateInviteRequest;
 
   try {
@@ -226,7 +241,9 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsCreateTenantUserInviteRequest](TenantsCreateTenantUserInviteRequest.md) | Invite creation parameters | |
+| **createTenantUserInviteRequest** | [CreateTenantUserInviteRequest](CreateTenantUserInviteRequest.md) |  | |
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -234,19 +251,19 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Invite sent successfully |  -  |
-| **400** | Invalid request format |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | User not authenticated |  -  |
 | **403** | Insufficient permissions to invite users |  -  |
 | **404** | Tenant not found |  -  |
@@ -257,11 +274,11 @@ example().catch(console.error);
 
 ## createRole
 
-> CreateRole200Response createRole(request)
+> CreateRole200Response createRole(createRoleRequest, xUserId, xTenantId)
 
 Create role
 
-Creates a new custom role for the tenant with specified permissions.  ## Authentication Requires JWT token with tenant context and appropriate permissions.  ## Permission Format Permissions should be in the format: `namespace:resource#relation` - Tenant-wide: `tenant#relation` - Resource-specific: `project:uuid#relation`  ## Use Cases - Create custom roles for specific workflows - Define project-specific permissions - Build granular access control
+Creates a new custom role for the tenant with specified permissions.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with tenant context and appropriate permissions - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers with appropriate permissions  ## Permission Format Permissions should be in the format: `namespace:resource#relation` - Tenant-wide: `tenant#relation` - Resource-specific: `project:uuid#relation`  ## Use Cases - Create custom roles for specific workflows - Define project-specific permissions - Build granular access control 
 
 ### Example
 
@@ -270,20 +287,28 @@ import {
   Configuration,
   V1TenantsApi,
 } from '@omnibase/core-js';
-import type { CreateRoleRequest } from '@omnibase/core-js';
+import type { CreateRoleOperationRequest } from '@omnibase/core-js';
 
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsCreateRoleRequest | Role creation parameters
-    request: ...,
-  } satisfies CreateRoleRequest;
+    // CreateRoleRequest
+    createRoleRequest: ...,
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 550e8400-e29b-41d4-a716-446655440000,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 31c60057-bd7c-41b8-b96e-c4ceb845034f,
+  } satisfies CreateRoleOperationRequest;
 
   try {
     const data = await api.createRole(body);
@@ -302,7 +327,9 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsCreateRoleRequest](TenantsCreateRoleRequest.md) | Role creation parameters | |
+| **createRoleRequest** | [CreateRoleRequest](CreateRoleRequest.md) |  | |
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -310,106 +337,34 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Role created successfully |  -  |
-| **400** | Invalid request or missing tenant ID |  -  |
+| **400** | Bad Request - Invalid request parameters |  -  |
 | **401** | Invalid or missing JWT token |  -  |
+| **403** | Forbidden - Insufficient permissions |  -  |
+| **409** | Role with this name already exists for tenant |  -  |
 | **500** | Failed to create role |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
-## createSubscription
-
-> CreateSubscription200Response createSubscription(request)
-
-Create subscription
-
-Creates a Stripe subscription for the authenticated tenant using the provided plan ID.  ## Authentication Requires JWT token with tenant context.  ## Request Parameters - **plan_id** (required): The configuration item ID (e.g., \"neon_compute_starter\") that maps to a Stripe price - **stripe_customer_id** (optional): Override tenant\'s Stripe customer ID if needed  ## Process Flow 1. Validates the plan_id and maps it to a Stripe price_id via the stripe_id_mappings table 2. Resolves the Stripe customer ID from the authenticated tenant (or uses provided stripe_customer_id) 3. Creates the subscription in Stripe with the specified price 4. Returns the subscription ID and status  ## Use Cases - Subscribe tenant to metered pricing plans (compute, storage, workers) - Enable usage-based billing for resources - Add additional services to tenant\'s billing
-
-### Example
-
-```ts
-import {
-  Configuration,
-  V1TenantsApi,
-} from '@omnibase/core-js';
-import type { CreateSubscriptionRequest } from '@omnibase/core-js';
-
-async function example() {
-  console.log("🚀 Testing @omnibase/core-js SDK...");
-  const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
-    apiKey: "YOUR API KEY",
-  });
-  const api = new V1TenantsApi(config);
-
-  const body = {
-    // TenantsCreateSubscriptionRequest | Subscription creation parameters
-    request: ...,
-  } satisfies CreateSubscriptionRequest;
-
-  try {
-    const data = await api.createSubscription(body);
-    console.log(data);
-  } catch (error) {
-    console.error(error);
-  }
-}
-
-// Run the test
-example().catch(console.error);
-```
-
-### Parameters
-
-
-| Name | Type | Description  | Notes |
-|------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsCreateSubscriptionRequest](TenantsCreateSubscriptionRequest.md) | Subscription creation parameters | |
-
-### Return type
-
-[**CreateSubscription200Response**](CreateSubscription200Response.md)
-
-### Authorization
-
-[BearerAuth](../README.md#BearerAuth)
-
-### HTTP request headers
-
-- **Content-Type**: `application/json`
-- **Accept**: `application/json`
-
-
-### HTTP response details
-| Status code | Description | Response headers |
-|-------------|-------------|------------------|
-| **200** | Subscription created successfully |  -  |
-| **400** | Invalid request payload or tenant missing Stripe customer ID |  -  |
-| **401** | User not authenticated |  -  |
-| **500** | Failed to create subscription or map plan_id |  -  |
-
-[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
-
-
 ## createTenant
 
-> CreateTenant200Response createTenant(request)
+> CreateTenant200Response createTenant(createTenantRequest, xUserId)
 
 Create tenant
 
-Creates a new tenant organization with Stripe customer, sets up owner role, and makes it the active tenant for the creator.  ## Authentication Requires JWT token.  ## Process 1. Creates Stripe customer (if billing_email provided) 2. Creates tenant in database 3. Sets up default tenant settings 4. Adds creator as owner 5. Assigns owner role with all permissions 6. Sets as active tenant and returns JWT token
+Creates a new tenant organization with Stripe customer, sets up owner role, and makes it the active tenant for the creator.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session (user_id extracted from session) - **Service Key Auth**: Requires X-Service-Key + X-User-ID headers  ## Service Key Usage When using service key authentication, provide the user_id via the X-User-ID header. The user_id must be a valid UUID matching an existing Kratos identity.  ## Process 1. Creates Stripe customer (if billing_email provided) 2. Creates tenant in database 3. Sets up default tenant settings 4. Adds creator as owner 5. Assigns owner role with all permissions 6. Sets as active tenant and returns JWT token 
 
 ### Example
 
@@ -418,20 +373,26 @@ import {
   Configuration,
   V1TenantsApi,
 } from '@omnibase/core-js';
-import type { CreateTenantRequest } from '@omnibase/core-js';
+import type { CreateTenantOperationRequest } from '@omnibase/core-js';
 
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsCreateTenantRequest | Tenant creation parameters
-    request: ...,
-  } satisfies CreateTenantRequest;
+    // CreateTenantRequest
+    createTenantRequest: ...,
+    // string | User ID (UUID) - Required when using service key authentication (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+  } satisfies CreateTenantOperationRequest;
 
   try {
     const data = await api.createTenant(body);
@@ -450,7 +411,8 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsCreateTenantRequest](TenantsCreateTenantRequest.md) | Tenant creation parameters | |
+| **createTenantRequest** | [CreateTenantRequest](CreateTenantRequest.md) |  | |
+| **xUserId** | `string` | User ID (UUID) - Required when using service key authentication | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -458,19 +420,19 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Tenant created successfully |  -  |
-| **400** | Invalid request format |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | Invalid or missing JWT token |  -  |
 | **500** | Failed to create tenant |  -  |
 
@@ -479,11 +441,11 @@ example().catch(console.error);
 
 ## deleteRole
 
-> DeleteRole200Response deleteRole(roleId)
+> DeleteRole200Response deleteRole(roleId, xUserId, xTenantId)
 
 Delete role
 
-Deletes a role and removes all associated Keto relationships for users who had this role assigned.  ## Authentication Requires JWT token with tenant context and appropriate permissions.  ## Use Cases - Remove obsolete roles - Clean up role definitions - Revoke all permissions from role users
+Deletes a role and removes all associated Keto relationships for users who had this role assigned.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with tenant context and appropriate permissions - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers with appropriate permissions  ## Use Cases - Remove obsolete roles - Clean up role definitions - Revoke all permissions from role users 
 
 ### Example
 
@@ -497,7 +459,11 @@ import type { DeleteRoleRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
@@ -505,6 +471,10 @@ async function example() {
   const body = {
     // string | Role ID
     roleId: roleId_example,
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 550e8400-e29b-41d4-a716-446655440000,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 31c60057-bd7c-41b8-b96e-c4ceb845034f,
   } satisfies DeleteRoleRequest;
 
   try {
@@ -525,6 +495,8 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **roleId** | `string` | Role ID | [Defaults to `undefined`] |
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -532,19 +504,21 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: Not defined
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Role deleted successfully |  -  |
+| **400** | Bad Request - Invalid request parameters |  -  |
 | **401** | Invalid or missing JWT token |  -  |
+| **403** | Forbidden - Insufficient permissions |  -  |
 | **404** | Role not found |  -  |
 | **500** | Failed to delete role |  -  |
 
@@ -553,11 +527,11 @@ example().catch(console.error);
 
 ## deleteTenant
 
-> DeleteTenant200Response deleteTenant()
+> DeleteTenant200Response deleteTenant(xUserId, xTenantId)
 
 Delete tenant
 
-Deletes a tenant organization and performs cleanup of Stripe customer, Keto permissions, and user associations.  ## Authentication Requires JWT token with `delete_tenant` permission.  ## Process 1. Verifies user has delete permission 2. Archives Stripe customer 3. Deletes tenant (cascades to users, settings, invites) 4. Cleans up all affected users\' tenant state
+Deletes a tenant organization and performs cleanup of Stripe customer, Keto permissions, and user associations.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with `delete_tenant` permission - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers with `delete_tenant` permission  ## Process 1. Verifies user has delete permission 2. Archives Stripe customer 3. Deletes tenant (cascades to users, settings, invites) 4. Cleans up all affected users\' tenant state 
 
 ### Example
 
@@ -571,13 +545,24 @@ import type { DeleteTenantRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
+  const body = {
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+  } satisfies DeleteTenantRequest;
+
   try {
-    const data = await api.deleteTenant();
+    const data = await api.deleteTenant(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -590,7 +575,11 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -598,19 +587,19 @@ This endpoint does not need any parameter.
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: Not defined
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Tenant deleted successfully |  -  |
-| **400** | Missing tenant ID |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | User not authenticated |  -  |
 | **403** | Insufficient permissions to delete tenant |  -  |
 | **404** | Tenant not found |  -  |
@@ -625,7 +614,7 @@ This endpoint does not need any parameter.
 
 Get namespace definitions
 
-Returns all available permission namespaces and their relations from the database.  ## Authentication Requires JWT token with appropriate permissions.  ## Use Cases - Discover available permission namespaces - List relations for each namespace - Build dynamic permission UIs
+Returns all available permission namespaces and their relations from the database.  ## Authentication Requires JWT token with appropriate permissions.  ## Use Cases - Discover available permission namespaces - List relations for each namespace - Build dynamic permission UIs 
 
 ### Example
 
@@ -639,7 +628,11 @@ import type { GetRoleDefinitionsRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
@@ -666,7 +659,7 @@ This endpoint does not need any parameter.
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
@@ -690,7 +683,7 @@ This endpoint does not need any parameter.
 
 Get billing status
 
-Checks whether the tenant has billing information configured in Stripe and if it\'s active.  ## Authentication Requires JWT token with tenant context.  ## Use Cases - Check if billing setup is required - Conditional feature access - Payment method verification
+Checks whether the tenant has billing information configured in Stripe and if it\'s active.  ## Authentication Requires JWT token with tenant context.  ## Use Cases - Check if billing setup is required - Conditional feature access - Payment method verification 
 
 ### Example
 
@@ -704,7 +697,11 @@ import type { GetTenantBillingStatusRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
@@ -731,7 +728,7 @@ This endpoint does not need any parameter.
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
@@ -752,11 +749,11 @@ This endpoint does not need any parameter.
 
 ## getTenantJWT
 
-> GetTenantJWT200Response getTenantJWT()
+> GetTenantJWT200Response getTenantJWT(xUserId, xTenantId)
 
 Get PostgREST JWT token
 
-Generates a JWT token for direct PostgREST database access with the user\'s active tenant context.  ## Authentication Requires JWT token and active tenant.  ## Use Cases - Client-side database queries - Real-time subscriptions - Direct PostgREST API access
+Generates a JWT token for direct PostgREST database access with the user\'s active tenant context.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session and active tenant - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers  ## Use Cases - Client-side database queries - Real-time subscriptions - Direct PostgREST API access 
 
 ### Example
 
@@ -770,13 +767,24 @@ import type { GetTenantJWTRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
+  const body = {
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+  } satisfies GetTenantJWTRequest;
+
   try {
-    const data = await api.getTenantJWT();
+    const data = await api.getTenantJWT(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -789,7 +797,11 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -797,20 +809,21 @@ This endpoint does not need any parameter.
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: Not defined
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | JWT token generated successfully |  -  |
-| **400** | No active tenant found |  -  |
+| **400** | Bad Request - Invalid request parameters |  -  |
 | **401** | User not authenticated |  -  |
+| **403** | Forbidden - Insufficient permissions |  -  |
 | **500** | Failed to create JWT token |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -818,11 +831,11 @@ This endpoint does not need any parameter.
 
 ## listRoles
 
-> ListRoles200Response listRoles()
+> ListRoles200Response listRoles(xTenantId)
 
 List roles
 
-Returns all roles for the authenticated tenant, including both system roles and custom tenant-specific roles.  ## Authentication Requires JWT token with tenant context.  ## Use Cases - Display available roles to assign - Role management UI - Permission auditing
+Returns all roles for the authenticated tenant, including both system roles and custom tenant-specific roles.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with tenant context - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID header  ## Use Cases - Display available roles to assign - Role management UI - Permission auditing 
 
 ### Example
 
@@ -836,13 +849,22 @@ import type { ListRolesRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
+  const body = {
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+  } satisfies ListRolesRequest;
+
   try {
-    const data = await api.listRoles();
+    const data = await api.listRoles(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -855,7 +877,10 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -863,7 +888,7 @@ This endpoint does not need any parameter.
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
@@ -888,7 +913,7 @@ This endpoint does not need any parameter.
 
 Get tenant subscriptions
 
-Returns all active Stripe subscriptions associated with the tenant\'s Stripe customer.  ## Authentication Requires JWT token with tenant context.  ## Use Cases - Display current subscriptions - Billing overview - Subscription management UI
+Returns all active Stripe subscriptions associated with the tenant\'s Stripe customer.  ## Authentication Requires JWT token with tenant context.  ## Use Cases - Display current subscriptions - Billing overview - Subscription management UI 
 
 ### Example
 
@@ -902,7 +927,11 @@ import type { ListTenantSubscriptionsRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
@@ -929,7 +958,7 @@ This endpoint does not need any parameter.
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
@@ -950,11 +979,11 @@ This endpoint does not need any parameter.
 
 ## listTenantUsers
 
-> ListTenantUsers200Response listTenantUsers()
+> ListTenantUsers200Response listTenantUsers(xUserId, xTenantId)
 
 Get tenant users
 
-Returns all users who are members of the tenant with their profile information and roles.  ## Authentication Requires JWT token with `view_users` permission.  ## Use Cases - Display team members list - User management UI - Member directory
+Returns all users who are members of the tenant with their profile information and roles.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with `view_users` permission - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers with `view_users` permission  ## Use Cases - Display team members list - User management UI - Member directory 
 
 ### Example
 
@@ -968,13 +997,24 @@ import type { ListTenantUsersRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
+  const body = {
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+  } satisfies ListTenantUsersRequest;
+
   try {
-    const data = await api.listTenantUsers();
+    const data = await api.listTenantUsers(body);
     console.log(data);
   } catch (error) {
     console.error(error);
@@ -987,7 +1027,11 @@ example().catch(console.error);
 
 ### Parameters
 
-This endpoint does not need any parameter.
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -995,18 +1039,19 @@ This endpoint does not need any parameter.
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: Not defined
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Tenant users retrieved successfully |  -  |
+| **400** | Bad Request - Invalid request parameters |  -  |
 | **401** | User not authenticated |  -  |
 | **403** | Insufficient permissions - must have view_users permission |  -  |
 | **500** | Failed to fetch tenant users |  -  |
@@ -1016,11 +1061,11 @@ This endpoint does not need any parameter.
 
 ## removeSubscription
 
-> RemoveSubscription200Response removeSubscription(request)
+> RemoveSubscription200Response removeSubscription(removeSubscriptionRequest)
 
 Remove subscription
 
-Cancels a Stripe subscription immediately for the authenticated tenant based on the plan ID.  ## Authentication Requires JWT token with tenant context.  ## Request Parameters - **plan_id** (required): The configuration item ID (e.g., \"neon_compute_starter\") to identify which subscription to cancel - **stripe_customer_id** (optional): Override tenant\'s Stripe customer ID if needed  ## Process Flow 1. Validates the plan_id and maps it to a Stripe price_id via the stripe_id_mappings table 2. Resolves the Stripe customer ID from the authenticated tenant (or uses provided stripe_customer_id) 3. Finds the active subscription matching the price_id for the customer 4. Cancels the subscription immediately in Stripe 5. Returns the cancellation confirmation  ## Notes - The subscription is canceled immediately, not at the end of the billing period - If no matching subscription is found, returns a 404 error - Only active, trialing, or past_due subscriptions can be canceled  ## Use Cases - Remove specific service subscriptions from tenant - Downgrade by removing premium features - Stop billing for unused resources
+Cancels a Stripe subscription immediately for the authenticated tenant based on the plan ID.  ## Authentication Requires JWT token with tenant context.  ## Request Parameters - **plan_id** (required): The configuration item ID (e.g., \"neon_compute_starter\") to identify which subscription to cancel - **stripe_customer_id** (optional): Override tenant\'s Stripe customer ID if needed  ## Process Flow 1. Validates the plan_id and maps it to a Stripe price_id via the stripe_id_mappings table 2. Resolves the Stripe customer ID from the authenticated tenant (or uses provided stripe_customer_id) 3. Finds the active subscription matching the price_id for the customer 4. Cancels the subscription immediately in Stripe 5. Returns the cancellation confirmation  ## Notes - The subscription is canceled immediately, not at the end of the billing period - If no matching subscription is found, returns a 404 error - Only active, trialing, or past_due subscriptions can be canceled  ## Use Cases - Remove specific service subscriptions from tenant - Downgrade by removing premium features - Stop billing for unused resources 
 
 ### Example
 
@@ -1029,20 +1074,24 @@ import {
   Configuration,
   V1TenantsApi,
 } from '@omnibase/core-js';
-import type { RemoveSubscriptionRequest } from '@omnibase/core-js';
+import type { RemoveSubscriptionOperationRequest } from '@omnibase/core-js';
 
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsRemoveSubscriptionRequest | Subscription removal parameters
-    request: ...,
-  } satisfies RemoveSubscriptionRequest;
+    // RemoveSubscriptionRequest
+    removeSubscriptionRequest: ...,
+  } satisfies RemoveSubscriptionOperationRequest;
 
   try {
     const data = await api.removeSubscription(body);
@@ -1061,7 +1110,7 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsRemoveSubscriptionRequest](TenantsRemoveSubscriptionRequest.md) | Subscription removal parameters | |
+| **removeSubscriptionRequest** | [RemoveSubscriptionRequest](RemoveSubscriptionRequest.md) |  | |
 
 ### Return type
 
@@ -1069,19 +1118,19 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Subscription canceled successfully |  -  |
-| **400** | Invalid request payload or tenant missing Stripe customer ID |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | User not authenticated |  -  |
 | **404** | No matching subscription found for the plan |  -  |
 | **500** | Failed to cancel subscription or map plan_id |  -  |
@@ -1091,11 +1140,11 @@ example().catch(console.error);
 
 ## removeTenantUser
 
-> HandlersSuccessResponse removeTenantUser(request)
+> SuccessResponse removeTenantUser(deleteTenantUserRequest)
 
 Remove tenant user
 
-Removes a user from the tenant and cleans up all associated permissions and Keto relationships.  ## Authentication Requires JWT token with `remove_user` permission.  ## Restrictions - Cannot remove the last owner (must have at least one owner) - Removing an owner requires `remove_owner_role` permission  ## Process 1. Verifies permissions 2. Removes from role\'s user list 3. Deletes all Keto relationships 4. Removes from database 5. Cleans up user\'s tenant state
+Removes a user from the tenant and cleans up all associated permissions and Keto relationships.  ## Authentication Requires JWT token with `remove_user` permission.  ## Restrictions - Cannot remove the last owner (must have at least one owner) - Removing an owner requires `remove_owner_role` permission  ## Process 1. Verifies permissions 2. Removes from role\'s user list 3. Deletes all Keto relationships 4. Removes from database 5. Cleans up user\'s tenant state 
 
 ### Example
 
@@ -1109,14 +1158,18 @@ import type { RemoveTenantUserRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsDeleteTenantUserRequest | User removal parameters
-    request: ...,
+    // DeleteTenantUserRequest
+    deleteTenantUserRequest: ...,
   } satisfies RemoveTenantUserRequest;
 
   try {
@@ -1136,27 +1189,27 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsDeleteTenantUserRequest](TenantsDeleteTenantUserRequest.md) | User removal parameters | |
+| **deleteTenantUserRequest** | [DeleteTenantUserRequest](DeleteTenantUserRequest.md) |  | |
 
 ### Return type
 
-[**HandlersSuccessResponse**](HandlersSuccessResponse.md)
+[**SuccessResponse**](SuccessResponse.md)
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | User removed successfully |  -  |
-| **400** | Invalid request or cannot remove last owner |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | User not authenticated |  -  |
 | **403** | Insufficient permissions |  -  |
 | **404** | User not found in tenant |  -  |
@@ -1167,11 +1220,11 @@ example().catch(console.error);
 
 ## switchActiveTenant
 
-> SwitchActiveTenant200Response switchActiveTenant(request)
+> SwitchActiveTenant200Response switchActiveTenant(switchTenantRequest, xUserId)
 
 Switch active tenant
 
-Updates the user\'s active tenant in Kratos identity and returns a new JWT token with updated tenant context.  ## Authentication Requires JWT token.  ## Use Cases - Switch between organizations - Change context for multi-tenant users
+Updates the user\'s active tenant in Kratos identity and returns a new JWT token with updated tenant context.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session - **Service Key Auth**: Requires X-Service-Key + X-User-ID header  ## Use Cases - Switch between organizations - Change context for multi-tenant users 
 
 ### Example
 
@@ -1185,14 +1238,20 @@ import type { SwitchActiveTenantRequest } from '@omnibase/core-js';
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsSwitchTenantRequest | Tenant switch parameters
-    request: ...,
+    // SwitchTenantRequest
+    switchTenantRequest: ...,
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
   } satisfies SwitchActiveTenantRequest;
 
   try {
@@ -1212,7 +1271,8 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsSwitchTenantRequest](TenantsSwitchTenantRequest.md) | Tenant switch parameters | |
+| **switchTenantRequest** | [SwitchTenantRequest](SwitchTenantRequest.md) |  | |
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -1220,20 +1280,21 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Successfully switched tenants |  -  |
-| **400** | Invalid request format |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | User not authenticated |  -  |
+| **404** | Tenant not found or user doesn\'t have access to it |  -  |
 | **500** | Failed to switch tenant |  -  |
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
@@ -1241,11 +1302,11 @@ example().catch(console.error);
 
 ## updateRole
 
-> CreateRole200Response updateRole(roleId, request)
+> CreateRole200Response updateRole(roleId, updateRoleRequest, xUserId, xTenantId)
 
 Update role
 
-Updates the permissions for an existing role. This will update Keto relationships for all users assigned to this role.  ## Authentication Requires JWT token with tenant context and appropriate permissions.  ## Permission Format Permissions should be in the format: `namespace:resource#relation`  ## Use Cases - Modify role permissions - Grant or revoke access - Update role capabilities
+Updates the permissions for an existing role. This will update Keto relationships for all users assigned to this role.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with tenant context and appropriate permissions - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers with appropriate permissions  ## Permission Format Permissions should be in the format: `namespace:resource#relation`  ## Use Cases - Modify role permissions - Grant or revoke access - Update role capabilities 
 
 ### Example
 
@@ -1254,12 +1315,16 @@ import {
   Configuration,
   V1TenantsApi,
 } from '@omnibase/core-js';
-import type { UpdateRoleRequest } from '@omnibase/core-js';
+import type { UpdateRoleOperationRequest } from '@omnibase/core-js';
 
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
@@ -1267,9 +1332,13 @@ async function example() {
   const body = {
     // string | Role ID
     roleId: roleId_example,
-    // TenantsUpdateRoleRequest | Role update parameters
-    request: ...,
-  } satisfies UpdateRoleRequest;
+    // UpdateRoleRequest
+    updateRoleRequest: ...,
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 550e8400-e29b-41d4-a716-446655440000,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 31c60057-bd7c-41b8-b96e-c4ceb845034f,
+  } satisfies UpdateRoleOperationRequest;
 
   try {
     const data = await api.updateRole(body);
@@ -1289,7 +1358,9 @@ example().catch(console.error);
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
 | **roleId** | `string` | Role ID | [Defaults to `undefined`] |
-| **request** | [TenantsUpdateRoleRequest](TenantsUpdateRoleRequest.md) | Role update parameters | |
+| **updateRoleRequest** | [UpdateRoleRequest](UpdateRoleRequest.md) |  | |
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -1297,20 +1368,21 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | Role updated successfully |  -  |
-| **400** | Invalid request |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | Invalid or missing JWT token |  -  |
+| **403** | Forbidden - Insufficient permissions |  -  |
 | **404** | Role not found |  -  |
 | **500** | Failed to update role |  -  |
 
@@ -1319,11 +1391,11 @@ example().catch(console.error);
 
 ## updateTenantUserRole
 
-> UpdateTenantUserRole200Response updateTenantUserRole(request)
+> UpdateTenantUserRole200Response updateTenantUserRole(updateTenantUserRoleRequest, xUserId, xTenantId)
 
 Update user role
 
-Updates a user\'s role in the tenant and updates all associated Keto permissions.  ## Authentication Requires JWT token with `update_user_role` permission.  ## Restrictions - Promoting to owner requires `update_user_role_to_owner` permission - Demoting from owner requires `remove_owner_role` permission - Cannot demote the last owner (must have at least one owner)  ## Process 1. Verifies permissions 2. Removes old role permissions 3. Updates database 4. Assigns new role permissions
+Updates a user\'s role in the tenant and updates all associated Keto permissions.  ## Authentication - **Session Auth**: Requires JWT token / Cookie Session with `update_user_role` permission - **Service Key Auth**: Requires X-Service-Key + X-Tenant-ID + X-User-ID headers with `update_user_role` permission  ## Restrictions - Promoting to owner requires `update_user_role_to_owner` permission - Demoting from owner requires `remove_owner_role` permission - Cannot demote the last owner (must have at least one owner)  ## Process 1. Verifies permissions 2. Removes old role permissions 3. Updates database 4. Assigns new role permissions 
 
 ### Example
 
@@ -1332,20 +1404,28 @@ import {
   Configuration,
   V1TenantsApi,
 } from '@omnibase/core-js';
-import type { UpdateTenantUserRoleRequest } from '@omnibase/core-js';
+import type { UpdateTenantUserRoleOperationRequest } from '@omnibase/core-js';
 
 async function example() {
   console.log("🚀 Testing @omnibase/core-js SDK...");
   const config = new Configuration({ 
-    // To configure API key authorization: BearerAuth
+    // To configure API key authorization: ServiceKeyAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: CookieAuth
+    apiKey: "YOUR API KEY",
+    // To configure API key authorization: SessionTokenAuth
     apiKey: "YOUR API KEY",
   });
   const api = new V1TenantsApi(config);
 
   const body = {
-    // TenantsUpdateTenantUserRoleRequest | Role update parameters
-    request: ...,
-  } satisfies UpdateTenantUserRoleRequest;
+    // UpdateTenantUserRoleRequest
+    updateTenantUserRoleRequest: ...,
+    // string | User ID (UUID) - Required when using X-Service-Key header (optional)
+    xUserId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+    // string | Tenant ID (UUID) - Required when using X-Service-Key header (optional)
+    xTenantId: 38400000-8cf0-11bd-b23e-10b96e4ef00d,
+  } satisfies UpdateTenantUserRoleOperationRequest;
 
   try {
     const data = await api.updateTenantUserRole(body);
@@ -1364,7 +1444,9 @@ example().catch(console.error);
 
 | Name | Type | Description  | Notes |
 |------------- | ------------- | ------------- | -------------|
-| **request** | [TenantsUpdateTenantUserRoleRequest](TenantsUpdateTenantUserRoleRequest.md) | Role update parameters | |
+| **updateTenantUserRoleRequest** | [UpdateTenantUserRoleRequest](UpdateTenantUserRoleRequest.md) |  | |
+| **xUserId** | `string` | User ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
+| **xTenantId** | `string` | Tenant ID (UUID) - Required when using X-Service-Key header | [Optional] [Defaults to `undefined`] |
 
 ### Return type
 
@@ -1372,19 +1454,19 @@ example().catch(console.error);
 
 ### Authorization
 
-[BearerAuth](../README.md#BearerAuth)
+[ServiceKeyAuth](../README.md#ServiceKeyAuth), [CookieAuth](../README.md#CookieAuth), [SessionTokenAuth](../README.md#SessionTokenAuth)
 
 ### HTTP request headers
 
 - **Content-Type**: `application/json`
-- **Accept**: `application/json`
+- **Accept**: `application/json`, `text/plain`
 
 
 ### HTTP response details
 | Status code | Description | Response headers |
 |-------------|-------------|------------------|
 | **200** | User role updated successfully |  -  |
-| **400** | Invalid request or cannot demote last owner |  -  |
+| **400** | Bad request - Invalid or missing required headers/body |  -  |
 | **401** | User not authenticated |  -  |
 | **403** | Insufficient permissions |  -  |
 | **404** | User not found in tenant |  -  |