@orvello/sdk 0.2.2 → 0.2.3

package/CONTRACT_SHA256

@@ -1 +1 @@
-efb28779fe6a21b5b16b0f6c1d055ec3796d5b0402c7fa34b6c873de32973237
+d19081d6e7c4efcf54245026a17458d7f8dff002d61ea69cdd8f41c7d0d033ad

package/dist/contract.cjs

@@ -3,15 +3,20 @@
 // src/generated/api/catalog.ts
 var apiMountPrefixes = {
   base: [
+    "/api-keys",
     "/api/amp-proxy",
     "/api/entitlements",
     "/app-info",
     "/app-logs",
+    "/auth",
+    "/docs",
     "/entitlements",
+    "/internal/users",
     "/oauth",
     "/permissions",
     "/role-assignments",
     "/roles",
+    "/security",
     "/settings",
     "/user-activity",
     "/users",
@@ -24,23 +29,35 @@ var apiMountPrefixes = {
     "/bookkeeping",
     "/currency-rates",
     "/customer-companies",
-    "/docs",
     "/documents",
     "/exports",
     "/invoices",
-    "/managing-companies"
+    "/managing-companies",
+    "/oauth"
   ]
 };
 var apiGroups = {
   base: [
     {
-      "key": "api",
-      "module": "./routes.api"
+      "key": "api_keys",
+      "module": "./routes.api_keys"
+    },
+    {
+      "key": "app_info",
+      "module": "./routes.app_info"
+    },
+    {
+      "key": "auth",
+      "module": "./routes.auth"
     },
     {
       "key": "entitlements",
       "module": "./routes.entitlements"
     },
+    {
+      "key": "internal",
+      "module": "./routes.internal"
+    },
     {
       "key": "permissions",
       "module": "./routes.permissions"
@@ -49,10 +66,18 @@ var apiGroups = {
       "key": "roles",
       "module": "./routes.roles"
     },
+    {
+      "key": "security",
+      "module": "./routes.security"
+    },
     {
       "key": "settings",
       "module": "./routes.settings"
     },
+    {
+      "key": "user_activity",
+      "module": "./routes.user_activity"
+    },
     {
       "key": "users",
       "module": "./routes.users"
@@ -71,6 +96,14 @@ var apiGroups = {
       "key": "bookkeeping",
       "module": "./routes.bookkeeping"
     },
+    {
+      "key": "currency_rates",
+      "module": "./routes.currency_rates"
+    },
+    {
+      "key": "customer_companies",
+      "module": "./routes.customer_companies"
+    },
     {
       "key": "documents",
       "module": "./routes.documents"
@@ -82,6 +115,10 @@ var apiGroups = {
     {
       "key": "invoices",
       "module": "./routes.invoices"
+    },
+    {
+      "key": "managing_companies",
+      "module": "./routes.managing_companies"
     }
   ],
   all: [
@@ -90,13 +127,17 @@ var apiGroups = {
       "module": "./features/routes.admin"
     },
     {
-      "key": "api",
-      "module": "./base/routes.api"
+      "key": "api_keys",
+      "module": "./base/routes.api_keys"
     },
     {
       "key": "app_info",
       "module": "./base/routes.app_info"
     },
+    {
+      "key": "auth",
+      "module": "./base/routes.auth"
+    },
     {
       "key": "bookkeeping",
       "module": "./features/routes.bookkeeping"
@@ -133,6 +174,10 @@ var apiGroups = {
       "key": "exports",
       "module": "./features/routes.exports"
     },
+    {
+      "key": "internal",
+      "module": "./base/routes.internal"
+    },
     {
       "key": "invoices",
       "module": "./features/routes.invoices"
@@ -143,7 +188,7 @@ var apiGroups = {
     },
     {
       "key": "logs",
-      "module": "./features/routes.logs"
+      "module": "./base/routes.logs"
     },
     {
       "key": "managing_companies",
@@ -159,11 +204,11 @@ var apiGroups = {
     },
     {
       "key": "oauth2",
-      "module": "./features/routes.oauth2"
+      "module": "./base/routes.oauth2"
     },
     {
       "key": "oauth2_external",
-      "module": "./features/routes.oauth2_external"
+      "module": "./base/routes.oauth2_external"
     },
     {
       "key": "permissions",
@@ -173,6 +218,10 @@ var apiGroups = {
       "key": "roles",
       "module": "./base/routes.roles"
     },
+    {
+      "key": "security",
+      "module": "./base/routes.security"
+    },
     {
       "key": "settings",
       "module": "./base/routes.settings"
@@ -259,41 +308,113 @@ var apiRoutes_admin = {
   }
 };
 
-// src/generated/api/base/routes.api.ts
-var apiRoutes_api = {
-  "GET__api_amp_proxy__discover": {
+// src/generated/api/base/routes.api_keys.ts
+var apiRoutes_api_keys = {
+  "api_keys_meta_capabilities": {
     method: "GET",
-    path: "/api/amp-proxy/_discover",
-    auth: { "type": "public" },
+    path: "/api-keys/meta/capabilities",
+    auth: { "type": "frontend_bearer_http" },
     meta: {
-      tags: ["api"]
+      tags: ["api-keys"],
+      summary: "API-Key Capabilities f\xFCr UI",
+      description: "Pre-flight Check: liefert canCreate / canList / canRevoke / canDelete plus strukturierte Gr\xFCnde (INSUFFICIENT_ROLE, PLAN_LIMIT_REACHED, ...) und das aktuelle Limit/Usage. Das Frontend rendert Buttons enabled/disabled inkl. Tooltip OHNE vorherigen 4xx-Round-Trip.",
+      validated: { "params": false, "query": true, "body": false }
     },
     types: null
   },
-  "GET__api_amp_proxy_key": {
+  "api_keys_meta_scopes": {
     method: "GET",
-    path: "/api/amp-proxy/:key",
-    auth: { "type": "public" },
+    path: "/api-keys/meta/scopes",
+    auth: { "type": "frontend_bearer_http" },
     meta: {
-      tags: ["api"]
+      tags: ["api-keys"],
+      summary: "Scope-Vokabular f\xFCr UI",
+      description: "Liefert die vollst\xE4ndige Scope-Liste samt Labels und UI-Gruppen sowie die verf\xFCgbaren Rollen + Environment-Werte. Damit das Frontend Picker rendern kann, ohne irgendetwas zu hardcoden. Auth: jeder eingeloggte User.",
+      validated: { "params": false, "query": true, "body": false }
     },
     types: null
   },
-  "POST__api_amp_proxy_key": {
+  "api_keys_create": {
     method: "POST",
-    path: "/api/amp-proxy/:key",
-    auth: { "type": "public" },
+    path: "/api-keys/create",
+    auth: { "type": "frontend_bearer_http" },
     meta: {
-      tags: ["api"]
+      tags: ["api-keys"],
+      summary: "API-Key erstellen",
+      description: "Erstellt einen neuen API-Key im aktiven Workspace. Der Klartext-Schl\xFCssel wird genau einmal in der Response zur\xFCckgegeben \u2014 danach niemals wieder. Capability: api_key.write (admin+). Die gew\xE4hlte Key-Rolle kann nicht h\xF6her sein als die Workspace-Rolle des Aufrufers.",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "api_keys_list": {
+    method: "GET",
+    path: "/api-keys/list",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["api-keys"],
+      summary: "API-Keys listen",
+      description: "Listet API-Keys des aktiven Workspace paginiert. Capability: api_key.read.",
+      validated: { "params": false, "query": true, "body": false }
     },
     types: null
   },
-  "DELETE__api_amp_proxy_key": {
+  "api_keys_by_id": {
+    method: "GET",
+    path: "/api-keys/byId/:apiKeyId",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["api-keys"],
+      summary: "API-Key nach ID",
+      description: "L\xE4dt einen API-Key (Metadata, ohne Klartext). Capability: api_key.read.",
+      validated: { "params": true, "query": false, "body": false }
+    },
+    types: null
+  },
+  "api_keys_update": {
+    method: "PUT",
+    path: "/api-keys/update/:apiKeyId",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["api-keys"],
+      summary: "API-Key aktualisieren",
+      description: "\xC4ndert Name/Rolle/Scopes/IP-Whitelist/Rate-Limit/G\xFCltigkeit. Der eigentliche Key-Wert kann nicht aktualisiert werden \u2014 daf\xFCr einen neuen Key erstellen. Capability: api_key.write.",
+      validated: { "params": true, "query": false, "body": true }
+    },
+    types: null
+  },
+  "api_keys_revoke": {
+    method: "POST",
+    path: "/api-keys/revoke/:apiKeyId",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["api-keys"],
+      summary: "API-Key sperren",
+      description: "Setzt isActive=false und revokedAt=now. Der Key bleibt f\xFCr Audit-Zwecke in der Tabelle, ist aber nicht mehr authentifizierbar. Capability: api_key.write.",
+      validated: { "params": true, "query": false, "body": true }
+    },
+    types: null
+  },
+  "api_keys_delete": {
     method: "DELETE",
-    path: "/api/amp-proxy/:key",
-    auth: { "type": "public" },
+    path: "/api-keys/delete/:apiKeyId",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["api-keys"],
+      summary: "API-Key l\xF6schen",
+      description: "L\xF6scht einen API-Key endg\xFCltig (GDPR Right-to-Erasure). Audit-Log-Eintr\xE4ge bleiben mit nullified api_key_id erhalten. Capability: api_key.write.",
+      validated: { "params": true, "query": false, "body": false }
+    },
+    types: null
+  },
+  "api_keys_audit": {
+    method: "GET",
+    path: "/api-keys/audit/:apiKeyId",
+    auth: { "type": "frontend_bearer_http" },
     meta: {
-      tags: ["api"]
+      tags: ["api-keys"],
+      summary: "Audit-Log eines Keys",
+      description: "Listet Authentifizierungs-Versuche dieses Keys (Erfolg + Fehler) paginiert. Capability: api_key.read.",
+      validated: { "params": true, "query": true, "body": false }
     },
     types: null
   }
@@ -308,6 +429,7 @@ var apiRoutes_app_info = {
     meta: {
       tags: ["app-info"],
       summary: "Health check",
+      description: "Kern-Pruefungen des Prozesses (Datenbank, Speicher, Event-Loop, Verschluesselung). 200 bei healthy/degraded, 503 bei unhealthy.",
       validated: { "params": false, "query": false, "body": false }
     },
     types: null
@@ -347,6 +469,116 @@ var apiRoutes_app_info = {
   }
 };
 
+// src/generated/api/base/routes.auth.ts
+var apiRoutes_auth = {
+  "auth_register": {
+    method: "POST",
+    path: "/auth/register",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Register a new direct-auth account",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "auth_login": {
+    method: "POST",
+    path: "/auth/login",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Log in with email + password",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "auth_refresh": {
+    method: "POST",
+    path: "/auth/refresh",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Rotate access + refresh tokens",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "auth_logout": {
+    method: "POST",
+    path: "/auth/logout",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Revoke the current refresh token",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "auth_me": {
+    method: "GET",
+    path: "/auth/me",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["auth"],
+      summary: "Get the current user incl. roles and isAdmin (Bearer access JWT)",
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  "auth_push_token_upsert": {
+    method: "POST",
+    path: "/auth/push-token",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["auth"],
+      summary: "Register a device push token for the current user",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "auth_verify_email_request": {
+    method: "POST",
+    path: "/auth/verify-email/request",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["auth"],
+      summary: "Send a fresh email-verification link to the current user",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "auth_verify_email_confirm": {
+    method: "POST",
+    path: "/auth/verify-email/confirm",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Confirm an email-verification token (programmatic / deep-link flow)",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "auth_verify_email_landing": {
+    method: "GET",
+    path: "/auth/verify-email",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Browser landing page that consumes the verification token",
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  }
+};
+
 // src/generated/api/features/routes.bookkeeping.ts
 var apiRoutes_bookkeeping = {
   "bookkeeping_revenues_search": {
@@ -2796,7 +3028,7 @@ var apiRoutes_entitlements = {
   "entitlements_list": {
     method: "GET",
     path: "/entitlements",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "List available entitlements",
@@ -2808,7 +3040,7 @@ var apiRoutes_entitlements = {
   "entitlements_assign": {
     method: "POST",
     path: "/entitlements",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:write"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Assign entitlement to user",
@@ -2821,7 +3053,7 @@ var apiRoutes_entitlements = {
   "entitlements_get_state": {
     method: "GET",
     path: "/entitlements/:userId/:type/:identifier",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Get current entitlement state",
@@ -2833,7 +3065,7 @@ var apiRoutes_entitlements = {
   "entitlements_update_state": {
     method: "PUT",
     path: "/entitlements/:userId/:type/:identifier",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read", "entitlements:write"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Update entitlement validity",
@@ -2846,7 +3078,7 @@ var apiRoutes_entitlements = {
   "entitlements_revoke": {
     method: "DELETE",
     path: "/entitlements/:userId/:type/:identifier",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:write"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Revoke entitlement from user",
@@ -2858,7 +3090,7 @@ var apiRoutes_entitlements = {
   "entitlements_getAll": {
     method: "GET",
     path: "/entitlements/getAll",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Alias for listing entitlements",
@@ -2870,7 +3102,7 @@ var apiRoutes_entitlements = {
   "entitlements_getAssigned": {
     method: "GET",
     path: "/entitlements/assigned",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Get role assignments (legacy)",
@@ -2882,7 +3114,7 @@ var apiRoutes_entitlements = {
   "entitlements_getUserEntitlements": {
     method: "GET",
     path: "/entitlements/user/:userId",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Get active user entitlements (legacy)",
@@ -2894,7 +3126,7 @@ var apiRoutes_entitlements = {
   "entitlements_context_get_by_shop_assignment": {
     method: "GET",
     path: "/entitlements/context/by-shop-assignment/:shopAssignmentId",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Get entitlement sync context by shop assignment id",
@@ -2906,7 +3138,7 @@ var apiRoutes_entitlements = {
   "entitlements_usage_overages_pull": {
     method: "GET",
     path: "/entitlements/usage-overages",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Pull usage overages",
@@ -2918,7 +3150,7 @@ var apiRoutes_entitlements = {
   "entitlements_getById": {
     method: "GET",
     path: "/entitlements/:id",
-    auth: { "type": "unified_bearer", "allowUserSession": false, "scopes": ["entitlements:read"] },
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": false, "allowApiKey": true },
     meta: {
       tags: ["entitlements"],
       summary: "Get entitlement by role id (legacy)",
@@ -2955,6 +3187,45 @@ var apiRoutes_exports = {
   }
 };
 
+// src/generated/api/base/routes.internal.ts
+var apiRoutes_internal = {
+  "internal_users_provision": {
+    method: "POST",
+    path: "/internal/users/provision",
+    auth: { "type": "x_api_key_https" },
+    meta: {
+      tags: ["internal", "users"],
+      summary: "Idempotente Provisionierung: User-Anlage (oder Link via E-Mail-Match), Startrolle und App-Extras.",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "internal_users_sync": {
+    method: "POST",
+    path: "/internal/users/sync",
+    auth: { "type": "x_api_key_https" },
+    meta: {
+      tags: ["internal", "users"],
+      summary: "Update der Profil-Felder (Email/Name/Verify). Out-of-order-gesch\xFCtzt via sourceUpdatedAt-Vergleich.",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  "internal_users_delete": {
+    method: "DELETE",
+    path: "/internal/users/:externalUserId",
+    auth: { "type": "x_api_key_https" },
+    meta: {
+      tags: ["internal", "users"],
+      summary: "DSGVO Art. 17 Hard-Delete. Cascade \xFCber vorhandene FK-Constraints. Idempotent (200 mit deleted:false bei not-found).",
+      validated: { "params": true, "query": false, "body": false }
+    },
+    types: null
+  }
+};
+
 // src/generated/api/features/routes.invoices.ts
 var apiRoutes_invoices = {
   "invoice_dunning_suggestions": {
@@ -3409,7 +3680,7 @@ var apiRoutes_invoices_external = {
   }
 };
 
-// src/generated/api/features/routes.logs.ts
+// src/generated/api/base/routes.logs.ts
 var apiRoutes_logs = {
   "logs_search": {
     method: "GET",
@@ -4204,7 +4475,7 @@ var apiRoutes_managing_company_logos = {
   }
 };
 
-// src/generated/api/features/routes.oauth2.ts
+// src/generated/api/base/routes.oauth2.ts
 var apiRoutes_oauth2 = {
   "oauth2_token": {
     method: "POST",
@@ -4288,7 +4559,7 @@ var apiRoutes_oauth2 = {
   }
 };
 
-// src/generated/api/features/routes.oauth2_external.ts
+// src/generated/api/base/routes.oauth2_external.ts
 var apiRoutes_oauth2_external = {
   "oauth2_external_clients_list": {
     method: "GET",
@@ -4559,6 +4830,19 @@ var apiRoutes_roles = {
   }
 };
 
+// src/generated/api/base/routes.security.ts
+var apiRoutes_security = {
+  "GET__security_public": {
+    method: "GET",
+    path: "/security/public",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["security"]
+    },
+    types: null
+  }
+};
+
 // src/generated/api/base/routes.settings.ts
 var apiRoutes_settings = {
   "settings_list": {
@@ -4721,13 +5005,13 @@ var apiRoutes_users = {
 
 // src/generated/api/base/routes.webhooks.ts
 var apiRoutes_webhooks = {
-  "webhooks_list": {
+  "webhooks_search": {
     method: "GET",
-    path: "/webhooks/getAll",
+    path: "/webhooks/search",
     auth: { "type": "frontend_permission_http", "permission": "webhook_view" },
     meta: {
       tags: ["webhooks"],
-      summary: "List webhooks",
+      summary: "Search webhooks (paginated)",
       validated: { "params": false, "query": true, "body": false }
     },
     types: null
@@ -4906,8 +5190,9 @@ var apiRoutes_work_tracking = {
 // src/generated/api/index.ts
 var apiRoutes = {
   ...apiRoutes_admin,
-  ...apiRoutes_api,
+  ...apiRoutes_api_keys,
   ...apiRoutes_app_info,
+  ...apiRoutes_auth,
   ...apiRoutes_bookkeeping,
   ...apiRoutes_currency_rates,
   ...apiRoutes_customer_companies,
@@ -4917,6 +5202,7 @@ var apiRoutes = {
   ...apiRoutes_enterprise,
   ...apiRoutes_entitlements,
   ...apiRoutes_exports,
+  ...apiRoutes_internal,
   ...apiRoutes_invoices,
   ...apiRoutes_invoices_external,
   ...apiRoutes_logs,
@@ -4927,6 +5213,7 @@ var apiRoutes = {
   ...apiRoutes_oauth2_external,
   ...apiRoutes_permissions,
   ...apiRoutes_roles,
+  ...apiRoutes_security,
   ...apiRoutes_settings,
   ...apiRoutes_user_activity,
   ...apiRoutes_users,
@@ -4938,8 +5225,9 @@ exports.apiGroups = apiGroups;
 exports.apiMountPrefixes = apiMountPrefixes;
 exports.apiRoutes = apiRoutes;
 exports.apiRoutes_admin = apiRoutes_admin;
-exports.apiRoutes_api = apiRoutes_api;
+exports.apiRoutes_api_keys = apiRoutes_api_keys;
 exports.apiRoutes_app_info = apiRoutes_app_info;
+exports.apiRoutes_auth = apiRoutes_auth;
 exports.apiRoutes_bookkeeping = apiRoutes_bookkeeping;
 exports.apiRoutes_currency_rates = apiRoutes_currency_rates;
 exports.apiRoutes_customer_companies = apiRoutes_customer_companies;
@@ -4949,6 +5237,7 @@ exports.apiRoutes_dunning_external = apiRoutes_dunning_external;
 exports.apiRoutes_enterprise = apiRoutes_enterprise;
 exports.apiRoutes_entitlements = apiRoutes_entitlements;
 exports.apiRoutes_exports = apiRoutes_exports;
+exports.apiRoutes_internal = apiRoutes_internal;
 exports.apiRoutes_invoices = apiRoutes_invoices;
 exports.apiRoutes_invoices_external = apiRoutes_invoices_external;
 exports.apiRoutes_logs = apiRoutes_logs;
@@ -4959,6 +5248,7 @@ exports.apiRoutes_oauth2 = apiRoutes_oauth2;
 exports.apiRoutes_oauth2_external = apiRoutes_oauth2_external;
 exports.apiRoutes_permissions = apiRoutes_permissions;
 exports.apiRoutes_roles = apiRoutes_roles;
+exports.apiRoutes_security = apiRoutes_security;
 exports.apiRoutes_settings = apiRoutes_settings;
 exports.apiRoutes_user_activity = apiRoutes_user_activity;
 exports.apiRoutes_users = apiRoutes_users;