@rixl/sdk 0.4.1 → 0.5.0

package/dist/index.js

@@ -1,4 +1,10 @@
-//#region src/core/bodySerializer.gen.ts
+import { _ as HTTP_STATUS, a as telegramConfig, b as __exportAll, c as appleConfig, d as microsoftConfig, f as updateMicrosoftAuthUrl, g as GLOBAL_PREFIX, h as updateGoogleAuthUrl, i as telegramAuthUrl, l as updateAppleAuthUrl, m as googleConfig, n as detectProvider, o as updateTelegramAuthUrl, p as googleAuthUrl, r as getProviderToken, s as appleAuthUrl, u as microsoftAuthUrl, v as SOCIAL_CONNECT_KEY_PREFIX, y as AuthProvider } from "./providers-Cu3u1p1O.js";
+import { atom } from "nanostores";
+import { decodeJwt } from "jose";
+import * as v from "valibot";
+import "ky";
+
+//#region src/generated/core/bodySerializer.gen.ts
 const serializeFormDataPair = (data, key, value) => {
 	if (typeof value === "string" || value instanceof Blob) data.append(key, value);
 	else if (value instanceof Date) data.append(key, value.toISOString());
@@ -16,7 +22,7 @@ const formDataBodySerializer = { bodySerializer: (body) => {
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
 
 //#endregion
-//#region src/core/params.gen.ts
+//#region src/generated/core/params.gen.ts
 const extraPrefixes = Object.entries({
 	$body_: "body",
 	$headers_: "headers",
@@ -25,7 +31,7 @@ const extraPrefixes = Object.entries({
 });
 
 //#endregion
-//#region src/core/serverSentEvents.gen.ts
+//#region src/generated/core/serverSentEvents.gen.ts
 function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
 	let lastEventId;
 	const sleep = sseSleepFn ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
@@ -110,7 +116,8 @@ function createSseClient({ onRequest, onSseError, onSseEvent, responseTransforme
 			} catch (error) {
 				onSseError?.(error);
 				if (sseMaxRetryAttempts !== void 0 && attempt >= sseMaxRetryAttempts) break;
-				await sleep(Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4));
+				const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4);
+				await sleep(backoff);
 			}
 		}
 	};
@@ -118,7 +125,7 @@ function createSseClient({ onRequest, onSseError, onSseEvent, responseTransforme
 }
 
 //#endregion
-//#region src/core/pathSerializer.gen.ts
+//#region src/generated/core/pathSerializer.gen.ts
 const separatorArrayExplode = (style) => {
 	switch (style) {
 		case "label": return ".";
@@ -198,7 +205,7 @@ const serializeObjectParam = ({ allowReserved, explode, name, style, value, valu
 };
 
 //#endregion
-//#region src/core/utils.gen.ts
+//#region src/generated/core/utils.gen.ts
 const PATH_PARAM_RE = /\{[^{}]+\}/g;
 const defaultPathSerializer = ({ path, url: _url }) => {
 	let url = _url;
@@ -273,7 +280,7 @@ function getValidRequestBody(options) {
 }
 
 //#endregion
-//#region src/core/auth.gen.ts
+//#region src/generated/core/auth.gen.ts
 const getAuthToken = async (auth, callback) => {
 	const token = typeof callback === "function" ? await callback(auth) : callback;
 	if (!token) return;
@@ -283,7 +290,7 @@ const getAuthToken = async (auth, callback) => {
 };
 
 //#endregion
-//#region src/client/utils.gen.ts
+//#region src/generated/client/utils.gen.ts
 const createQuerySerializer = ({ parameters = {}, ...args } = {}) => {
 	const querySerializer = (queryParams) => {
 		const search = [];
@@ -456,7 +463,7 @@ const createConfig = (override = {}) => ({
 });
 
 //#endregion
-//#region src/client/client.gen.ts
+//#region src/generated/client/client.gen.ts
 const createClient = (config = {}) => {
 	let _config = mergeConfigs(createConfig(), config);
 	const getConfig = () => ({ ..._config });
@@ -630,236 +637,399 @@ const createClient = (config = {}) => {
 };
 
 //#endregion
-//#region src/client.gen.ts
-const client = createClient(createConfig({ baseUrl: "https://api.rixl.com/" }));
+//#region src/generated/client.gen.ts
+const client = createClient(createConfig());
 
 //#endregion
-//#region src/sdk.gen.ts
+//#region src/generated/sdk.gen.ts
 /**
-* List posts in a feed
+* Dashboard analytics
 *
-* Retrieve posts in a feed, with pagination.
+* Returns time-bucketed dashboard statistics
 */
-const getFeedsByFeedId = (options) => (options.client ?? client).get({
-	url: "/feeds/{feedId}",
+const getAnalyticsV1Dashboard = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/analytics/v1/dashboard",
 	...options
 });
 /**
-* Get a post
+* Track analytics events
+*
+* Ingest a batch of analytics events for the authenticated organization
+*/
+const postAnalyticsV1Events = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/analytics/v1/events",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Get feed statistics
 *
-* Retrieve a post from feed by its ID
+* Returns aggregated statistics for a feed over a date range
 */
-const getFeedsByFeedIdByPostId = (options) => (options.client ?? client).get({
-	url: "/feeds/{feedId}/{postId}",
+const getAnalyticsV1FeedsByFeedIdStats = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/analytics/v1/feeds/{feedId}/stats",
 	...options
 });
 /**
-* List posts by creator
+* Funnel analytics
+*
+* Calculate funnel conversion across a sequence of steps
+*/
+const postAnalyticsV1Funnels = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/analytics/v1/funnels",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Get post statistics
 *
-* Retrieve posts in a feed by a specific creator, with pagination.
+* Returns aggregated statistics for a post
 */
-const getFeedsByFeedIdCreatorsByCreatorId = (options) => (options.client ?? client).get({
-	url: "/feeds/{feedId}/creators/{creatorId}",
+const getAnalyticsV1PostsByPostIdStats = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/analytics/v1/posts/{postId}/stats",
 	...options
 });
 /**
-* List images for a project
+* Realtime analytics
 *
-* Retrieve all images for a specific project, with pagination and sorting.
+* Returns real-time analytics snapshot
 */
-const getImages = (options) => (options?.client ?? client).get({
+const getAnalyticsV1Realtime = (options) => (options?.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/images",
+	url: "/analytics/v1/realtime",
 	...options
 });
 /**
-* Delete image
+* Retention analytics
 *
-* delete an image by marking it as deleted
+* Returns retention cohorts over a date range
 */
-const deleteImagesByImageId = (options) => (options.client ?? client).delete({
+const getAnalyticsV1Retention = (options) => (options?.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/images/{imageId}",
+	url: "/analytics/v1/retention",
 	...options
 });
 /**
-* Get image
+* Get top feeds
 *
-* Retrieve an image by its ID for a specific project.
+* Returns the top feeds over a date range
 */
-const getImagesByImageId = (options) => (options.client ?? client).get({
+const getAnalyticsV1TopFeeds = (options) => (options?.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/images/{imageId}",
+	url: "/analytics/v1/top/feeds",
 	...options
 });
 /**
-* Upload: Mark as complete
+* Get top posts
 *
-* Complete the upload process and create the image record using API key authentication
+* Returns the top posts over a date range
 */
-const postImagesUploadComplete = (options) => (options.client ?? client).post({
+const getAnalyticsV1TopPosts = (options) => (options?.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/images/upload/complete",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
+	url: "/analytics/v1/top/posts",
+	...options
 });
 /**
-* Upload: Init
+* Get top videos
 *
-* Initialize a presigned URL upload for an image file using API key authentication
+* Returns the top videos over a date range
 */
-const postImagesUploadInit = (options) => (options.client ?? client).post({
+const getAnalyticsV1TopVideos = (options) => (options?.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/images/upload/init",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
+	url: "/analytics/v1/top/videos",
+	...options
 });
 /**
-* List videos for a project
+* Get video heatmap
 *
-* Retrieve all videos for a specific project, with pagination and sorting.
+* Returns the engagement heatmap for a video
 */
-const getVideos = (options) => (options?.client ?? client).get({
+const getAnalyticsV1VideosByVideoIdHeatmap = (options) => (options.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos",
+	url: "/analytics/v1/videos/{videoId}/heatmap",
 	...options
 });
 /**
-* Get a video
+* Get hot segments
 *
-* Retrieve a video by its ID for a specific project.
+* Returns the most engaging segments of a video
 */
-const getVideosByVideoId = (options) => (options.client ?? client).get({
+const getAnalyticsV1VideosByVideoIdHotSegments = (options) => (options.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}",
+	url: "/analytics/v1/videos/{videoId}/hot-segments",
 	...options
 });
 /**
-* Delete all audio tracks
+* Get video statistics
 *
-* Remove all additional audio tracks from a video using API key authentication
+* Returns aggregated statistics for a video over a date range
 */
-const deleteVideosByVideoIdAudioTracks = (options) => (options.client ?? client).delete({
+const getAnalyticsV1VideosByVideoIdStats = (options) => (options.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/audio-tracks",
+	url: "/analytics/v1/videos/{videoId}/stats",
 	...options
 });
 /**
-* Bulk upsert video audio tracks
+* Subscribe to the blog
 *
-* Replace all audio tracks with the provided ones using API key authentication
+* Subscribes the authenticated user to the blog newsletter.
 */
-const postVideosByVideoIdAudioTracks = (options) => (options.client ?? client).post({
-	...formDataBodySerializer,
+const postAuthV1BlogSubscribe = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/blog/subscribe",
+	...options
+});
+/**
+* Get blog subscription status
+*
+* Returns whether the authenticated user is subscribed to the blog newsletter.
+*/
+const getAuthV1BlogSubscription = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/blog/subscription",
+	...options
+});
+/**
+* Unsubscribe from the blog
+*
+* Unsubscribes the authenticated user from the blog newsletter.
+*/
+const postAuthV1BlogUnsubscribe = (options) => (options?.client ?? client).post({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/audio-tracks",
+	url: "/auth/v1/blog/unsubscribe",
+	...options
+});
+/**
+* Unsubscribe from the blog by email
+*
+* Unsubscribes a recipient using the user id and email from an email-footer link. No authentication required.
+*/
+const postAuthV1BlogUnsubscribeEmail = (options) => (options.client ?? client).post({
+	url: "/auth/v1/blog/unsubscribe/email",
 	...options,
 	headers: {
-		"Content-Type": null,
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Verify email with a code
+*
+* Verifies a user's email address using a verification id and the code sent to them.
+*/
+const postAuthV1EmailVerify = (options) => (options.client ?? client).post({
+	url: "/auth/v1/email/verify",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Resend email verification
+*
+* Resends the email verification message to the given email address.
+*/
+const postAuthV1EmailVerifyResend = (options) => (options.client ?? client).post({
+	url: "/auth/v1/email/verify/resend",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Accept an organization invitation
+*
+* Accepts the organization invitation identified by the provided token.
+*/
+const postAuthV1InvitationsByTokenAccept = (options) => (options.client ?? client).post({
+	url: "/auth/v1/invitations/{token}/accept",
+	...options
+});
+/**
+* Decline an organization invitation
+*
+* Declines the organization invitation identified by the provided token.
+*/
+const postAuthV1InvitationsByTokenDecline = (options) => (options.client ?? client).post({
+	url: "/auth/v1/invitations/{token}/decline",
+	...options
+});
+/**
+* Log in with email and password
+*
+* Authenticates a user by email and password and issues access and refresh tokens.
+*/
+const postAuthV1Login = (options) => (options.client ?? client).post({
+	url: "/auth/v1/login",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
 		...options.headers
 	}
 });
 /**
-* Delete audio track
+* Log out (revoke the current access token)
+*
+* Revokes the current access token so it can no longer be used.
+*/
+const postAuthV1Logout = (options) => (options?.client ?? client).post({
+	url: "/auth/v1/logout",
+	...options
+});
+/**
+* Set the active membership
 *
-* Remove an additional audio track from a video using API key authentication
+* Sets the specified membership as the authenticated user's currently active organization.
 */
-const deleteVideosByVideoIdAudioTracksByTrackId = (options) => (options.client ?? client).delete({
+const putAuthV1MembershipsByOrgIdActive = (options) => (options.client ?? client).put({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/audio-tracks/{trackId}",
+	url: "/auth/v1/memberships/{orgId}/active",
 	...options
 });
 /**
-* Delete audio track by language
+* Check the current user's membership in an organization
 *
-* Remove an audio track for a specific language using API key authentication
+* Checks whether the authenticated user is a member of the specified organization and returns their membership status.
 */
-const deleteVideosByVideoIdAudioTracksLanguageByLangCode = (options) => (options.client ?? client).delete({
+const getAuthV1MembershipsByOrgIdCheck = (options) => (options.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/audio-tracks/language/{lang_code}",
+	url: "/auth/v1/memberships/{orgId}/check",
 	...options
 });
 /**
-* Upsert video audio track
+* Remove a custom domain
 *
-* Add or replace an audio track for a specific language using API key authentication
+* Removes the custom domain from the organization and clears its verification.
 */
-const putVideosByVideoIdAudioTracksLanguageByLangCode = (options) => (options.client ?? client).put({
-	...formDataBodySerializer,
+const deleteAuthV1MembershipsByOrgIdDomain = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/domain",
+	...options
+});
+/**
+* Get custom domain status
+*
+* Returns the current custom domain and its verification status for the organization.
+*/
+const getAuthV1MembershipsByOrgIdDomain = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/domain",
+	...options
+});
+/**
+* Create a custom domain verification
+*
+* Registers a custom domain for the organization and issues verification details to prove ownership.
+*/
+const postAuthV1MembershipsByOrgIdDomain = (options) => (options.client ?? client).post({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/audio-tracks/language/{lang_code}",
+	url: "/auth/v1/memberships/{orgId}/domain",
 	...options,
 	headers: {
-		"Content-Type": null,
+		"Content-Type": "application/json",
 		...options.headers
 	}
 });
 /**
-* Delete video chapters
+* Get domain auto-join setting
 *
-* Remove all chapters from a video using API key authentication
+* Returns whether users with a matching verified domain email are automatically added to the organization.
 */
-const deleteVideosByVideoIdChapters = (options) => (options.client ?? client).delete({
+const getAuthV1MembershipsByOrgIdDomainAutoJoin = (options) => (options.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/chapters",
+	url: "/auth/v1/memberships/{orgId}/domain/auto-join",
 	...options
 });
 /**
-* Update video chapters
+* Set domain auto-join setting
 *
-* Replace all chapters for a video (atomic PUT operation) using API key authentication
+* Enables or disables automatically adding users with a matching verified domain email to the organization.
 */
-const putVideosByVideoIdChapters = (options) => (options.client ?? client).put({
+const putAuthV1MembershipsByOrgIdDomainAutoJoin = (options) => (options.client ?? client).put({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/chapters",
+	url: "/auth/v1/memberships/{orgId}/domain/auto-join",
 	...options,
 	headers: {
 		"Content-Type": "application/json",
@@ -867,131 +1037,235 @@ const putVideosByVideoIdChapters = (options) => (options.client ?? client).put({
 	}
 });
 /**
-* Delete video
+* Check a custom domain verification
 *
-* Delete a video by its ID within a project
+* Verifies the organization's pending custom domain and returns its updated verification status.
 */
-const deleteVideosByVideoIdDelete = (options) => (options.client ?? client).delete({
+const postAuthV1MembershipsByOrgIdDomainVerification = (options) => (options.client ?? client).post({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/delete",
+	url: "/auth/v1/memberships/{orgId}/domain/verification",
 	...options
 });
 /**
-* Delete all subtitles
+* Get the caller's membership info in an organization
 *
-* Remove all subtitles from a video using API key authentication
+* Returns the authenticated user's membership info (email) for an organization, with permission-denied when not a member.
 */
-const deleteVideosByVideoIdSubtitles = (options) => (options.client ?? client).delete({
+const getAuthV1MembershipsByOrgIdInfo = (options) => (options.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/subtitles",
+	url: "/auth/v1/memberships/{orgId}/info",
 	...options
 });
 /**
-* Bulk upsert video subtitles
+* Leave an organization
 *
-* Replace all subtitles with the provided ones using API key authentication
+* Removes the authenticated user's own membership from the organization.
 */
-const postVideosByVideoIdSubtitles = (options) => (options.client ?? client).post({
-	...formDataBodySerializer,
+const deleteAuthV1MembershipsByOrgIdLeave = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/leave",
+	...options
+});
+/**
+* List members of an organization
+*
+* Returns a paginated list of the members belonging to the specified organization.
+*/
+const getAuthV1MembershipsByOrgIdMembers = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/members",
+	...options
+});
+/**
+* Remove a member from an organization
+*
+* Removes the specified member from the organization.
+*/
+const deleteAuthV1MembershipsByOrgIdMembersByUserId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/members/{userId}",
+	...options
+});
+/**
+* List a member's policies
+*
+* Returns all authorization policies attached to the specified organization member.
+*/
+const getAuthV1MembershipsByOrgIdMembersByUserIdPolicies = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/members/{userId}/policies",
+	...options
+});
+/**
+* Update a member's role
+*
+* Updates the specified member's role within the organization.
+*/
+const putAuthV1MembershipsByOrgIdMembersByUserIdRole = (options) => (options.client ?? client).put({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/subtitles",
+	url: "/auth/v1/memberships/{orgId}/members/{userId}/role",
 	...options,
 	headers: {
-		"Content-Type": null,
+		"Content-Type": "application/json",
 		...options.headers
 	}
 });
 /**
-* Delete subtitle
+* Invite a member to an organization
 *
-* Remove a subtitle from a video using API key authentication
+* Invites the user with the given username to the organization with the specified role.
 */
-const deleteVideosByVideoIdSubtitlesBySubtitleId = (options) => (options.client ?? client).delete({
+const postAuthV1MembershipsByOrgIdMembersInvite = (options) => (options.client ?? client).post({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/subtitles/{subtitleId}",
-	...options
+	url: "/auth/v1/memberships/{orgId}/members/invite",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
 });
 /**
-* Delete subtitle by language
+* Resend an invitation
 *
-* Remove a subtitle for a specific language using API key authentication
+* Resends the pending organization invitation to the specified member.
 */
-const deleteVideosByVideoIdSubtitlesLanguageByLangCode = (options) => (options.client ?? client).delete({
+const postAuthV1MembershipsByOrgIdMembersInviteResend = (options) => (options.client ?? client).post({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/subtitles/language/{lang_code}",
-	...options
+	url: "/auth/v1/memberships/{orgId}/members/invite/resend",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
 });
 /**
-* Upsert video subtitle
+* Accept or decline a pending membership
 *
-* Add or replace a subtitle for a specific language using API key authentication
+* Accepts or declines the authenticated user's pending invitation to the organization. Used from inside the dashboard; the public token flow is /auth/v1/invitations/{token}/accept|decline.
 */
-const putVideosByVideoIdSubtitlesLanguageByLangCode = (options) => (options.client ?? client).put({
-	...formDataBodySerializer,
+const putAuthV1MembershipsByOrgIdMembershipState = (options) => (options.client ?? client).put({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/subtitles/language/{lang_code}",
+	url: "/auth/v1/memberships/{orgId}/membership/state",
 	...options,
 	headers: {
-		"Content-Type": null,
+		"Content-Type": "application/json",
 		...options.headers
 	}
 });
 /**
-* Update video thumbnail
+* Update an organization's name
 *
-* Update the thumbnail image for an existing video using API key authentication
+* Updates the display name of the specified organization.
 */
-const putVideosByVideoIdThumbnail = (options) => (options.client ?? client).put({
-	...formDataBodySerializer,
+const putAuthV1MembershipsByOrgIdName = (options) => (options.client ?? client).put({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/{videoId}/thumbnail",
+	url: "/auth/v1/memberships/{orgId}/name",
 	...options,
 	headers: {
-		"Content-Type": null,
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List policies
+*
+* Returns all authorization policies defined in the organization.
+*/
+const getAuthV1MembershipsByOrgIdPolicies = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/policies",
+	...options
+});
+/**
+* Create a policy
+*
+* Creates a new authorization policy in the organization with the given name, description, and permissions.
+*/
+const postAuthV1MembershipsByOrgIdPolicies = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/policies",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
 		...options.headers
 	}
 });
 /**
-* List available subtitle languages
+* Delete a policy
+*
+* Deletes an authorization policy from the organization by its ID.
+*/
+const deleteAuthV1MembershipsByOrgIdPoliciesByPolicyId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/policies/{policyId}",
+	...options
+});
+/**
+* Get a policy
 *
-* Get list of supported languages for subtitles
+* Returns the details of a single authorization policy in the organization by its ID.
 */
-const getVideosLanguages = (options) => (options?.client ?? client).get({
-	url: "/videos/languages",
+const getAuthV1MembershipsByOrgIdPoliciesByPolicyId = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/policies/{policyId}",
 	...options
 });
 /**
-* Upload: Mark as complete
+* Update a policy
 *
-* Mark a video upload as complete after successful upload to storage using API key authentication
+* Updates an existing authorization policy's name, description, and permissions.
 */
-const postVideosUploadComplete = (options) => (options.client ?? client).post({
+const putAuthV1MembershipsByOrgIdPoliciesByPolicyId = (options) => (options.client ?? client).put({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/upload/complete",
+	url: "/auth/v1/memberships/{orgId}/policies/{policyId}",
 	...options,
 	headers: {
 		"Content-Type": "application/json",
@@ -999,23 +1273,3321 @@ const postVideosUploadComplete = (options) => (options.client ?? client).post({
 	}
 });
 /**
-* Upload: Init
+* List policy attachments
 *
-* Initialize a video upload and get presigned URLs for video and poster using API key authentication
+* Returns all identities that the given policy is attached to within the organization.
 */
-const postVideosUploadInit = (options) => (options.client ?? client).post({
+const getAuthV1MembershipsByOrgIdPoliciesByPolicyIdAttachments = (options) => (options.client ?? client).get({
 	security: [{
 		name: "X-API-Key",
 		type: "apiKey"
 	}],
-	url: "/videos/upload/init",
+	url: "/auth/v1/memberships/{orgId}/policies/{policyId}/attachments",
+	...options
+});
+/**
+* Attach a policy to an identity
+*
+* Attaches the given policy to an identity so the policy's permissions apply to that identity.
+*/
+const postAuthV1MembershipsByOrgIdPoliciesByPolicyIdAttachments = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/policies/{policyId}/attachments",
 	...options,
 	headers: {
 		"Content-Type": "application/json",
 		...options.headers
 	}
 });
+/**
+* Detach a policy
+*
+* Detaches a policy from an identity by removing the specified attachment.
+*/
+const deleteAuthV1MembershipsByOrgIdPoliciesByPolicyIdAttachmentsByAttachmentId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/policies/{policyId}/attachments/{attachmentId}",
+	...options
+});
+/**
+* Update an organization's username
+*
+* Updates the unique username handle of the specified organization.
+*/
+const putAuthV1MembershipsByOrgIdUsername = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/{orgId}/username",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List the current user's active memberships
+*
+* Returns a paginated list of the organizations in which the authenticated user holds an active membership.
+*/
+const getAuthV1MembershipsActive = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/active",
+	...options
+});
+/**
+* List the current user's pending memberships
+*
+* Returns a paginated list of the authenticated user's pending organization membership invitations that have not yet been accepted.
+*/
+const getAuthV1MembershipsPending = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/memberships/pending",
+	...options
+});
+/**
+* Begin passkey login
+*
+* Begins a passkey login by returning a session_id and WebAuthn challenge options for the client to sign.
+*/
+const postAuthV1PasskeyLoginBegin = (options) => (options?.client ?? client).post({
+	url: "/auth/v1/passkey/login/begin",
+	...options
+});
+/**
+* Finish passkey login
+*
+* Completes a passkey login by verifying the signed WebAuthn credential against the session and returning authentication tokens.
+*/
+const postAuthV1PasskeyLoginFinish = (options) => (options.client ?? client).post({
+	url: "/auth/v1/passkey/login/finish",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Send a password reset email
+*
+* Sends a password reset email containing a reset token to the given email address.
+*/
+const postAuthV1PasswordReset = (options) => (options.client ?? client).post({
+	url: "/auth/v1/password/reset",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Reset password with a token
+*
+* Resets the user's password using a valid reset token and the supplied new password.
+*/
+const postAuthV1PasswordResetConfirm = (options) => (options.client ?? client).post({
+	url: "/auth/v1/password/reset/confirm",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List the permission registry
+*
+* Returns the registered permission names and their bit offsets.
+*/
+const getAuthV1PoliciesPermissions = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/policies/permissions",
+	...options
+});
+/**
+* List connected social providers
+*
+* Returns the list of social providers connected to the authenticated user's account.
+*/
+const getAuthV1Providers = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/providers",
+	...options
+});
+/**
+* Disconnect a social provider
+*
+* Disconnects the named social provider from the authenticated user's account.
+*/
+const deleteAuthV1ProvidersByProvider = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/providers/{provider}",
+	...options
+});
+/**
+* Connect a social provider
+*
+* Connects a social provider to the authenticated user's account using the supplied provider token.
+*/
+const postAuthV1ProvidersConnect = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/providers/connect",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Register with email and password
+*
+* Registers a new user account from an email and password and starts email verification.
+*/
+const postAuthV1Register = (options) => (options.client ?? client).post({
+	url: "/auth/v1/register",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Refresh access token
+*
+* Exchanges a valid refresh token for a new access token.
+*/
+const postAuthV1Token = (options) => (options.client ?? client).post({
+	url: "/auth/v1/token",
+	...options
+});
+/**
+* Get current user info
+*
+* Returns the profile information of the authenticated user.
+*/
+const getAuthV1Userinfo = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/userinfo",
+	...options
+});
+/**
+* Get current user info
+*
+* Returns the profile information of the authenticated user.
+*/
+const getAuthV1UsersCurrent = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current",
+	...options
+});
+/**
+* Add an email address
+*
+* Adds an email address to the authenticated account and sends a verification
+* code to it. The address becomes active only once it has been verified via
+* `POST /auth/v1/email/verify`. Subject to rate limiting per account.
+*/
+const postAuthV1UsersCurrentEmails = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/emails",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Change the account email
+*
+* Starts changing the authenticated account's email address. A verification
+* code is sent to the new address; the change is applied only after the code
+* is confirmed via `POST /auth/v1/email/verify`. Subject to rate limiting per account.
+*/
+const putAuthV1UsersCurrentEmailsChange = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/emails/change",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Get email status
+*
+* Returns the authenticated account's current email address together with
+* whether an email is set and whether it has been verified.
+*/
+const getAuthV1UsersCurrentEmailsStatus = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/emails/status",
+	...options
+});
+/**
+* Update the current user's name
+*
+* Updates the authenticated user's full name to the provided value.
+*/
+const patchAuthV1UsersCurrentName = (options) => (options.client ?? client).patch({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/name",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List the current user's passkeys
+*
+* Returns all passkeys registered to the authenticated user.
+*/
+const getAuthV1UsersCurrentPasskeys = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/passkeys",
+	...options
+});
+/**
+* Delete a passkey
+*
+* Deletes the authenticated user's passkey identified by the path ID.
+*/
+const deleteAuthV1UsersCurrentPasskeysById = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/passkeys/{id}",
+	...options
+});
+/**
+* Rename a passkey
+*
+* Renames the authenticated user's passkey identified by the path ID to the supplied name.
+*/
+const patchAuthV1UsersCurrentPasskeysById = (options) => (options.client ?? client).patch({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/passkeys/{id}",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Begin passkey registration
+*
+* Begins registering a new passkey for the authenticated user by returning a session_id and WebAuthn creation options.
+*/
+const postAuthV1UsersCurrentPasskeysRegisterBegin = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/passkeys/register/begin",
+	...options
+});
+/**
+* Finish passkey registration
+*
+* Completes passkey registration by verifying the signed WebAuthn credential and storing it under the given name for the authenticated user.
+*/
+const postAuthV1UsersCurrentPasskeysRegisterFinish = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/passkeys/register/finish",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Disable TOTP
+*
+* Disables TOTP two-factor authentication for the authenticated user and removes their stored TOTP secret.
+*/
+const deleteAuthV1UsersCurrentTotpDelete = (options) => (options?.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/totp/delete",
+	...options
+});
+/**
+* Begin TOTP setup
+*
+* Begins TOTP setup for the authenticated user by generating and returning a provisioning secret and QR code that have not yet been enabled.
+*/
+const postAuthV1UsersCurrentTotpSetup = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/totp/setup",
+	...options
+});
+/**
+* Get TOTP status
+*
+* Returns whether the authenticated user currently has TOTP two-factor authentication enabled.
+*/
+const getAuthV1UsersCurrentTotpStatus = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/totp/status",
+	...options
+});
+/**
+* Verify and enable TOTP
+*
+* Verifies the submitted TOTP code against the user's pending setup secret and, if valid, enables TOTP two-factor authentication and returns refreshed tokens.
+*/
+const postAuthV1UsersCurrentTotpVerify = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/totp/verify",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Update the current user's username
+*
+* Updates the authenticated user's username to the provided value.
+*/
+const patchAuthV1UsersCurrentUsername = (options) => (options.client ?? client).patch({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/auth/v1/users/current/username",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Verify passkey as 2FA after password login
+*
+* Completes the passkey step of a password login's 2FA challenge. Verifies the signed WebAuthn assertion against the challenge stored in the login session (from POST /auth/v1/login with status "2fa_required") and returns authentication tokens.
+*/
+const postAuthV1VerifyPasskey = (options) => (options.client ?? client).post({
+	url: "/auth/v1/verify-passkey",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Verify TOTP during login
+*
+* Verifies the submitted TOTP code for a pending login session and, if valid, completes authentication and returns access tokens.
+*/
+const postAuthV1VerifyTotp = (options) => (options.client ?? client).post({
+	url: "/auth/v1/verify-totp",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Get billing address
+*
+* Returns the organization's billing address
+*/
+const getBillingV1Address = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/address",
+	...options
+});
+/**
+* Set billing address
+*
+* Create or update the organization's billing address
+*/
+const postBillingV1Address = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/address",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Get bandwidth usage
+*
+* Returns the organization's bandwidth usage.
+*/
+const getBillingV1BandwidthUsage = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/bandwidth-usage",
+	...options
+});
+/**
+* Bandwidth usage history
+*
+* Returns the organization's bandwidth usage history
+*/
+const getBillingV1BandwidthUsageHistory = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/bandwidth-usage/history",
+	...options
+});
+/**
+* Refresh bandwidth usage
+*
+* Recalculate and persist the organization's bandwidth usage
+*/
+const postBillingV1BandwidthUsageRefresh = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/bandwidth-usage/refresh",
+	...options
+});
+/**
+* Create checkout session
+*
+* Create a Stripe hosted checkout session
+*/
+const postBillingV1Checkout = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/checkout",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Contact sales
+*
+* Submits a sales contact request for the organization.
+*/
+const postBillingV1ContactSales = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/contact-sales",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List invoices
+*
+* Returns the organization's invoices.
+*/
+const getBillingV1Invoices = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/invoices",
+	...options
+});
+/**
+* Update invoice status
+*
+* Updates the status of an invoice (admin).
+*/
+const putBillingV1InvoicesByInvoiceIdStatus = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/invoices/{invoiceId}/status",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Cleanup old bandwidth snapshots
+*
+* Trigger the cleanup of old bandwidth usage records
+*/
+const postBillingV1JobsCleanupBandwidthSnapshots = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/jobs/cleanup-bandwidth-snapshots",
+	...options
+});
+/**
+* Run daily bandwidth calculation
+*
+* Trigger the daily bandwidth usage calculation job for all organizations
+*/
+const postBillingV1JobsDailyBandwidthCalculation = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/jobs/daily-bandwidth-calculation",
+	...options
+});
+/**
+* Run monthly bandwidth calculation
+*
+* Trigger the monthly bandwidth usage calculation job for all organizations
+*/
+const postBillingV1JobsMonthlyBandwidthCalculation = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/jobs/monthly-bandwidth-calculation",
+	...options
+});
+/**
+* List payment methods
+*
+* Returns the organization's payment methods.
+*/
+const getBillingV1PaymentMethods = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/payment-methods",
+	...options
+});
+/**
+* Add or update payment method
+*
+* Attach a payment method to the organization
+*/
+const postBillingV1PaymentMethods = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/payment-methods",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete payment method
+*
+* Remove a payment method from the organization
+*/
+const deleteBillingV1PaymentMethodsByPaymentMethodId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/payment-methods/{paymentMethodId}",
+	...options
+});
+/**
+* Resolve payment method from payment intent
+*
+* Returns the payment method ID associated with a payment intent
+*/
+const getBillingV1PaymentMethodsFromPaymentIntent = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/payment-methods/from-payment-intent",
+	...options
+});
+/**
+* Resolve payment method from setup intent
+*
+* Returns the payment method ID associated with a setup intent
+*/
+const getBillingV1PaymentMethodsFromSetupIntent = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/payment-methods/from-setup-intent",
+	...options
+});
+/**
+* List billing plans
+*
+* Returns the available billing plans.
+*/
+const getBillingV1Plans = (options) => (options?.client ?? client).get({
+	url: "/billing/v1/plans",
+	...options
+});
+/**
+* Get a billing plan
+*
+* Returns a single billing plan by ID.
+*/
+const getBillingV1PlansByPlanId = (options) => (options.client ?? client).get({
+	url: "/billing/v1/plans/{planId}",
+	...options
+});
+/**
+* Create setup intent
+*
+* Create a Stripe setup intent for adding a payment method
+*/
+const postBillingV1SetupIntent = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/setup-intent",
+	...options
+});
+/**
+* Get storage usage
+*
+* Returns the organization's storage usage.
+*/
+const getBillingV1StorageUsage = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/storage-usage",
+	...options
+});
+/**
+* Storage usage history
+*
+* Returns the organization's storage usage history
+*/
+const getBillingV1StorageUsageHistory = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/storage-usage/history",
+	...options
+});
+/**
+* Refresh storage usage
+*
+* Recalculate and persist the organization's storage usage
+*/
+const postBillingV1StorageUsageRefresh = (options) => (options?.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/storage-usage/refresh",
+	...options
+});
+/**
+* Get current subscription
+*
+* Returns the current organization subscription.
+*/
+const getBillingV1Subscription = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/subscription",
+	...options
+});
+/**
+* Create subscription
+*
+* Create a subscription for the authenticated organization
+*/
+const postBillingV1Subscription = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/subscription",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Cancel subscription
+*
+* Cancel the organization's subscription at the end of the current period
+*/
+const putBillingV1SubscriptionCancel = (options) => (options?.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/subscription/cancel",
+	...options
+});
+/**
+* Get subscription history
+*
+* Returns the organization's subscription history.
+*/
+const getBillingV1SubscriptionHistory = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/subscription/history",
+	...options
+});
+/**
+* Reactivate subscription
+*
+* Reactivate a subscription scheduled for cancellation
+*/
+const putBillingV1SubscriptionReactivate = (options) => (options?.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/subscription/reactivate",
+	...options
+});
+/**
+* Upgrade subscription
+*
+* Upgrade the organization's subscription to a new plan
+*/
+const postBillingV1SubscriptionUpgrade = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/subscription/upgrade",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Calculate tax
+*
+* Calculate tax for a plan purchase
+*/
+const postBillingV1TaxCalculate = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/billing/v1/tax/calculate",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Stripe webhook
+*
+* Receives Stripe webhook events. The raw payload and signature are forwarded to the billing service for verification and processing.
+*/
+const postBillingWebhooksStripe = (options) => (options?.client ?? client).post({
+	url: "/billing/webhooks/stripe",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options?.headers
+	}
+});
+/**
+* Get an image
+*
+* Returns a single image by ID.
+*/
+const getMediaV1ImagesByImageId = (options) => (options.client ?? client).get({
+	url: "/media/v1/images/{imageId}",
+	...options
+});
+/**
+* List supported languages
+*
+* Returns the language codes supported for audio tracks and subtitles.
+*/
+const getMediaV1Languages = (options) => (options?.client ?? client).get({
+	url: "/media/v1/languages",
+	...options
+});
+/**
+* List images
+*
+* Returns the images in a project.
+*/
+const getMediaV1ProjectsByProjectIdImages = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/images",
+	...options
+});
+/**
+* Delete an image
+*
+* Deletes an image from a project.
+*/
+const deleteMediaV1ProjectsByProjectIdImagesByImageId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/images/{imageId}",
+	...options
+});
+/**
+* Get an image (project-scoped)
+*
+* Returns a single image within a project, including private media. Requires project access.
+*/
+const getMediaV1ProjectsByProjectIdImagesByImageId = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/images/{imageId}",
+	...options
+});
+/**
+* Complete an image upload
+*
+* Finalizes a previously initiated image upload.
+*/
+const postMediaV1ProjectsByProjectIdImagesByImageIdUploadComplete = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/images/{imageId}/upload/complete",
+	...options
+});
+/**
+* Set an image's visibility
+*
+* Updates an image's visibility (public, unlisted, or private). Requires project access.
+*/
+const putMediaV1ProjectsByProjectIdImagesByImageIdVisibility = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/images/{imageId}/visibility",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Create an image upload
+*
+* Initiates an image upload and returns upload details.
+*/
+const postMediaV1ProjectsByProjectIdImagesUpload = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/images/upload",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List videos in a project
+*
+* Returns the videos belonging to a project.
+*/
+const getMediaV1ProjectsByProjectIdVideos = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos",
+	...options
+});
+/**
+* Delete a video
+*
+* Deletes a video from a project.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}",
+	...options
+});
+/**
+* Get a video (project-scoped)
+*
+* Returns a single video within a project, including private media. Requires project access.
+*/
+const getMediaV1ProjectsByProjectIdVideosByVideoId = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}",
+	...options
+});
+/**
+* Delete all audio tracks
+*
+* Deletes all audio tracks for a video.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracks = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/audio-tracks",
+	...options
+});
+/**
+* List audio tracks (project-scoped)
+*
+* Returns a video's audio tracks within a project, including for private media. Requires project access.
+*/
+const getMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracks = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/audio-tracks",
+	...options
+});
+/**
+* Delete an audio track
+*
+* Deletes a single audio track from a video.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksByTrackId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/audio-tracks/{trackId}",
+	...options
+});
+/**
+* Delete audio tracks by language
+*
+* Deletes all audio tracks for a video in a given language.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksLanguageByLang = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/audio-tracks/language/{lang}",
+	...options
+});
+/**
+* Initiate audio track uploads
+*
+* Initiates one or more audio track uploads for a video.
+*/
+const postMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksUpload = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/audio-tracks/upload",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Complete audio track uploads
+*
+* Finalizes previously initiated audio track uploads.
+*/
+const postMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksUploadComplete = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/audio-tracks/upload/complete",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete all video chapters
+*
+* Removes every chapter from a video.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdChapters = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/chapters",
+	...options
+});
+/**
+* Get video chapters
+*
+* Returns the chapters of a video.
+*/
+const getMediaV1ProjectsByProjectIdVideosByVideoIdChapters = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/chapters",
+	...options
+});
+/**
+* Update video chapters
+*
+* Replaces the chapters of a video.
+*/
+const putMediaV1ProjectsByProjectIdVideosByVideoIdChapters = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/chapters",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete a single video chapter
+*
+* Removes one chapter identified by its start time (seconds).
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdChaptersByStartTimeSec = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/chapters/{startTimeSec}",
+	...options
+});
+/**
+* Delete all subtitles
+*
+* Deletes all subtitles for a video.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdSubtitles = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/subtitles",
+	...options
+});
+/**
+* List subtitles (project-scoped)
+*
+* Returns a video's subtitles within a project, including for private media. Requires project access.
+*/
+const getMediaV1ProjectsByProjectIdVideosByVideoIdSubtitles = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/subtitles",
+	...options
+});
+/**
+* Delete a subtitle
+*
+* Deletes a single subtitle from a video.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesBySubtitleId = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/subtitles/{subtitleId}",
+	...options
+});
+/**
+* Delete subtitles by language
+*
+* Deletes all subtitles for a video in a given language.
+*/
+const deleteMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesLanguageByLang = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/subtitles/language/{lang}",
+	...options
+});
+/**
+* Initiate subtitle uploads
+*
+* Initiates one or more subtitle uploads for a video.
+*/
+const postMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesUpload = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/subtitles/upload",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Complete subtitle uploads
+*
+* Finalizes previously initiated subtitle uploads.
+*/
+const postMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesUploadComplete = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/subtitles/upload/complete",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Update video thumbnail
+*
+* Replaces the thumbnail image for an existing video.
+*/
+const putMediaV1ProjectsByProjectIdVideosByVideoIdThumbnail = (options) => (options.client ?? client).put({
+	...formDataBodySerializer,
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/thumbnail",
+	...options,
+	headers: {
+		"Content-Type": null,
+		...options.headers
+	}
+});
+/**
+* Complete a video upload
+*
+* Finalizes a previously initiated video upload.
+*/
+const postMediaV1ProjectsByProjectIdVideosByVideoIdUploadComplete = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/upload/complete",
+	...options
+});
+/**
+* Set a video's visibility
+*
+* Updates a video's visibility (public, unlisted, or private). Requires project access.
+*/
+const putMediaV1ProjectsByProjectIdVideosByVideoIdVisibility = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/{videoId}/visibility",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Create a video upload
+*
+* Initiates a video upload and returns upload details.
+*/
+const postMediaV1ProjectsByProjectIdVideosUpload = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/media/v1/projects/{projectId}/videos/upload",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Get a video
+*
+* Returns a single video by ID.
+*/
+const getMediaV1VideosByVideoId = (options) => (options.client ?? client).get({
+	url: "/media/v1/videos/{videoId}",
+	...options
+});
+/**
+* List audio tracks for a video
+*
+* Returns the audio tracks associated with a video.
+*/
+const getMediaV1VideosByVideoIdAudioTracks = (options) => (options.client ?? client).get({
+	url: "/media/v1/videos/{videoId}/audio-tracks",
+	...options
+});
+/**
+* List subtitles for a video
+*
+* Returns the subtitles associated with a video.
+*/
+const getMediaV1VideosByVideoIdSubtitles = (options) => (options.client ?? client).get({
+	url: "/media/v1/videos/{videoId}/subtitles",
+	...options
+});
+/**
+* List organization projects
+*
+* Get all projects for a specific organization
+*/
+const listProjectsByOrgid = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects",
+	...options
+});
+/**
+* Create project
+*
+* Create a new project under the given organization with specified video quality
+*/
+const createProjectsByOrgid = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete project (soft)
+*
+* Soft delete a project (marks it as deleted)
+*/
+const deleteProjects = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects/{projectId}",
+	...options
+});
+/**
+* Get project
+*
+* Retrieve a specific project under an organization
+*/
+const getProjects = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects/{projectId}",
+	...options
+});
+/**
+* Remove custom domain
+*
+* Remove the custom domain from a specific project
+*/
+const deleteCustomDomainByProjectid = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects/{projectId}/custom-domain",
+	...options
+});
+/**
+* Set or update custom domain
+*
+* Set or update a custom domain for a specific project
+*/
+const updateCustomDomainByProjectid = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects/{projectId}/custom-domain",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Move project to another organization
+*
+* Move a project from one organization to another (if user has access to both)
+*/
+const createMoveByProjectid = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects/{projectId}/move",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Update project name
+*
+* Update the name of a specific project
+*/
+const patchNameByProjectid = (options) => (options.client ?? client).patch({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects/{projectId}/name",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Update project video quality
+*
+* Update the default video quality setting for a project
+*/
+const patchVideoQualityByProjectid = (options) => (options.client ?? client).patch({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/organization/{orgId}/projects/{projectId}/video-quality",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List organization API keys
+*
+* Get all API keys for a specific organization
+*/
+const listApiKeysByOrgid = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/platform/api-keys",
+	...options
+});
+/**
+* Create API key
+*
+* Create a new API key for a project in the authenticated organization
+*/
+const createApiKeyByOrgid = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/platform/api-keys",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete API key
+*
+* Delete an API key owned by the authenticated organization
+*/
+const deleteApiKeyByKeyid = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/platform/api-keys/{keyId}",
+	...options
+});
+/**
+* Rotate API key
+*
+* Rotate an API key, returning a new secret
+*/
+const rotateApiKeyByKeyid = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/platform/api-keys/{keyId}/rotate",
+	...options
+});
+/**
+* Refresh a platform access token
+*
+* Trades a refresh token for a fresh access/refresh pair.
+*/
+const postPlatformAuthRefresh = (options) => (options.client ?? client).post({
+	url: "/platform/auth/refresh",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Exchange an API key for a platform access token
+*
+* Trades an API key (`<keyId>_<secret>`) for a short-lived platform access token plus a refresh token.
+*/
+const postPlatformAuthToken = (options) => (options.client ?? client).post({
+	url: "/platform/auth/token",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List client credentials
+*
+* List client credentials for the specified organization
+*/
+const listCredentialsByOrgid = (options) => (options?.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/platform/clientauth/credentials",
+	...options
+});
+/**
+* Create client credential
+*
+* Create a new client credential for the authenticated organization
+*/
+const createCredentialByOrgid = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/platform/clientauth/credentials",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Revoke client credential
+*
+* Revoke a client credential owned by the authenticated organization
+*/
+const revokeCredentialByCredentialid = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/platform/clientauth/credentials/{credentialId}/revoke",
+	...options
+});
+/**
+* Mint client access token
+*
+* Exchange client_id/client_secret for a short-lived access token. The request subject is an opaque client-defined label and is not treated as authoritative user identity for authorization.
+*/
+const createToken = (options) => (options.client ?? client).post({
+	url: "/platform/clientauth/token",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List posts in a feed
+*
+* Public, unauthenticated listing of posts in a feed, with pagination.
+*/
+const listPublicPosts = (options) => (options.client ?? client).get({
+	url: "/posts/v1/feeds/{feedId}",
+	...options
+});
+/**
+* Get a post
+*
+* Public, unauthenticated retrieval of a single post by ID.
+*/
+const getPublicPost = (options) => (options.client ?? client).get({
+	url: "/posts/v1/feeds/{feedId}/{postId}",
+	...options
+});
+/**
+* List posts by creator
+*
+* Public, unauthenticated listing of posts in a feed by a specific creator, with pagination.
+*/
+const listPublicPostsByCreator = (options) => (options.client ?? client).get({
+	url: "/posts/v1/feeds/{feedId}/creators/{creatorId}",
+	...options
+});
+/**
+* List posts
+*
+* List posts in a feed
+*/
+const listPosts = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/posts/v1/projects/{projectId}/feeds/{feedId}/posts",
+	...options
+});
+/**
+* Create a post
+*
+* Create a new post in a feed
+*/
+const createPost = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/posts/v1/projects/{projectId}/feeds/{feedId}/posts",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete a post
+*
+* Delete a post by ID
+*/
+const deletePost = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/posts/v1/projects/{projectId}/feeds/{feedId}/posts/{postId}",
+	...options
+});
+/**
+* Get a post
+*
+* Get a single post by ID
+*/
+const getPost = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/posts/v1/projects/{projectId}/feeds/{feedId}/posts/{postId}",
+	...options
+});
+/**
+* List posts by creator
+*
+* List posts in a feed authored by a specific creator
+*/
+const listPostsByCreator = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/posts/v1/projects/{projectId}/feeds/{feedId}/posts/creators/{creatorId}",
+	...options
+});
+/**
+* Complete a post upload
+*
+* Finalize a media upload and publish the post
+*/
+const completePostUpload = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/posts/v1/projects/{projectId}/feeds/{feedId}/posts/upload/complete",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Initialize a post upload
+*
+* Begin a media upload and create a draft post
+*/
+const initPostUpload = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/posts/v1/projects/{projectId}/feeds/{feedId}/posts/upload/init",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* List feeds
+*
+* Lists all feeds for the active project with pagination.
+*/
+const listFeeds = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/projects/{projectId}/feeds",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Create a feed
+*
+* Creates a new feed under the active project.
+*/
+const createFeed = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/projects/{projectId}/feeds",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete a feed
+*
+* Deletes a feed in the active project.
+*/
+const deleteFeed = (options) => (options.client ?? client).delete({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/projects/{projectId}/feeds/{feedId}",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Get a feed
+*
+* Retrieves a feed by ID under the active project.
+*/
+const getFeed = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/projects/{projectId}/feeds/{feedId}",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Update a feed
+*
+* Updates an existing feed in the active project.
+*/
+const updateFeed = (options) => (options.client ?? client).put({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/projects/{projectId}/feeds/{feedId}",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+
+//#endregion
+//#region src/connect.ts
+const connect = async (config) => {
+	client.setConfig({ baseUrl: config.baseUrl });
+	if (config.apiKey) client.interceptors.request.use(async (request) => {
+		request.headers.set("X-API-Key", config.apiKey);
+		return request;
+	});
+	if (config.auth) {
+		const { initClient } = await Promise.resolve().then(() => init_exports);
+		return initClient({
+			apiUrl: config.baseUrl,
+			loginRedirectUrl: config.auth.loginRedirectUrl,
+			googleProvider: config.auth.google,
+			appleProvider: config.auth.apple,
+			microsoftProvider: config.auth.microsoft,
+			telegramProvider: config.auth.telegram
+		});
+	}
+};
+
+//#endregion
+//#region src/auth/api/refresh-tokens.ts
+const refreshTokens = async (provider, token) => {
+	const { data } = await postAuthV1Token({
+		headers: { Authorization: `${provider} ${token}` },
+		throwOnError: true
+	});
+	return data;
+};
+
+//#endregion
+//#region src/auth/initialization.ts
+/**
+* Creates a deferred promise that can be resolved or rejected externally
+* @returns A deferred promise object
+*/
+function createDeferred() {
+	let resolve;
+	let reject;
+	return {
+		promise: new Promise((res, rej) => {
+			resolve = res;
+			reject = rej;
+		}),
+		resolve,
+		reject
+	};
+}
+/**
+* Global deferred promise that tracks the initialization status of the auth library
+* This is resolved when initClient is called
+*/
+const initDeferred = createDeferred();
+
+//#endregion
+//#region src/auth/cookie/util.ts
+const getAllCookiesStartWith = (startWithKey) => {
+	if (typeof document === "undefined") return {};
+	return document.cookie.split(";").map((cv) => cv.split("=").map((v) => v.trim())).filter(([key]) => key && key !== startWithKey && key.startsWith(startWithKey)).reduce((ac, [key, value]) => Object.assign(ac, { [key.slice(startWithKey.length + 1)]: value }), {});
+};
+function setCookie(name, value, options) {
+	if (typeof document === "undefined") return;
+	let cookieString = `${encodeName(name)}=${encodeValue(value)}`;
+	if (options) {
+		if (options.expires) if (typeof options.expires === "number") {
+			const date = /* @__PURE__ */ new Date();
+			date.setTime(date.getTime() + options.expires * 24 * 60 * 60 * 1e3);
+			cookieString += `; expires=${date.toUTCString()}`;
+		} else cookieString += `; expires=${options.expires.toUTCString()}`;
+		if (options.path) cookieString += `; path=${options.path}`;
+		if (options.domain) cookieString += `; domain=${options.domain}`;
+		if (options.secure) cookieString += `; secure`;
+		if (options.sameSite) cookieString += `; samesite=${options.sameSite}`;
+	}
+	document.cookie = cookieString;
+}
+function deleteCookie(name) {
+	if (typeof document === "undefined") return;
+	document.cookie = name + "=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;";
+}
+const encodeName = (name) => encodeURIComponent(name).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent);
+const encodeValue = (value) => encodeURIComponent(value).replace(/%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g, decodeURIComponent);
+
+//#endregion
+//#region src/auth/cookie/index.ts
+const initVals = getAllCookiesStartWith(GLOBAL_PREFIX);
+const setStoreCookie = (key, value) => {
+	const expires = /* @__PURE__ */ new Date();
+	expires.setTime(expires.getTime() + 30 * 24 * 60 * 60 * 1e3);
+	const cookieKey = `${GLOBAL_PREFIX}_${key}`;
+	if (!value || value === "") {
+		deleteCookie(cookieKey);
+		return;
+	}
+	const stringValue = typeof value === "string" ? value : JSON.stringify(value);
+	setCookie(`${GLOBAL_PREFIX}_${key}`, stringValue, {
+		expires,
+		path: "/",
+		sameSite: "Lax"
+	});
+};
+
+//#endregion
+//#region src/auth/userStore.ts
+const userPath = GLOBAL_PREFIX + "_user";
+const parseUser = () => {
+	if (typeof localStorage === "undefined" || !localStorage || typeof localStorage.getItem !== "function") return;
+	const value = localStorage.getItem(userPath);
+	if (value && value != "undefined") try {
+		return JSON.parse(value);
+	} catch (err) {
+		console.warn("Can't parse user data, error: ", err);
+		return;
+	}
+};
+const user = atom(parseUser());
+user.subscribe((value) => {
+	if (typeof localStorage === "undefined" || !localStorage || typeof localStorage.setItem !== "function") return;
+	if (value) localStorage.setItem(userPath, JSON.stringify(value));
+	else localStorage.removeItem(userPath);
+});
+
+//#endregion
+//#region src/auth/utils/jwt.ts
+/**
+* Decodes a JWT token and extracts user information
+* Uses jose library for modern, secure JWT handling
+* @param token The JWT token to decode
+* @returns The decoded user data or undefined if decoding fails
+*/
+const decodeToken = (token) => {
+	try {
+		const decodedUser = decodeJwt(token);
+		return {
+			id: decodedUser.id,
+			email: decodedUser.email,
+			first_name: decodedUser.first_name,
+			last_name: decodedUser.last_name,
+			username: decodedUser.username,
+			image_url: decodedUser.image_url,
+			language_code: decodedUser.language_code,
+			org_id: decodedUser.org_id
+		};
+	} catch (error) {
+		console.warn("Failed to decode JWT token. Error: ", error);
+		return;
+	}
+};
+/**
+* Decodes a JWT token and sets the user in the store
+* @param token The JWT token to decode
+* @returns True if user was successfully decoded and set, false otherwise
+*/
+const decodeAndSetUser = (token) => {
+	const userData = decodeToken(token);
+	if (userData) {
+		user.set(userData);
+		return true;
+	}
+	return false;
+};
+/**
+* Checks if a token is expired based on the expiration timestamp
+* @param expireAt The expiration timestamp in milliseconds
+* @returns True if the token is expired, false otherwise
+*/
+const isTokenExpired = (expireAt) => {
+	if (!expireAt) return true;
+	return Date.now() >= expireAt;
+};
+
+//#endregion
+//#region src/auth/authStore.ts
+const isLogged = atom(initVals["isLogged"] === "true" || detectProvider() !== void 0);
+const accessToken = atom(initVals["accessToken"]);
+const refreshToken = atom(initVals["refreshToken"]);
+const expireAt = atom(Number(initVals["expireAt"]));
+const authError = atom(null);
+const requiresAction = atom(initVals["requiresAction"] || null);
+const limitedAccessToken = atom(initVals["limitedAccessToken"] || null);
+let currentTokenPromise = null;
+const PROVIDER_URL_MAP = {
+	google: googleAuthUrl,
+	apple: appleAuthUrl,
+	microsoft: microsoftAuthUrl,
+	telegram: telegramAuthUrl
+};
+const login = async (provider) => {
+	await initDeferred.promise;
+	const authUrlAtom = PROVIDER_URL_MAP[provider];
+	if (!authUrlAtom) throw new Error(`Unsupported provider: ${provider}`);
+	const authUrl = authUrlAtom.get();
+	if (authUrl) window.location.href = authUrl;
+	else throw new Error(`${provider} provider is not configured. Please check your initClient configuration.`);
+};
+const refreshAccessToken = async (refresh) => {
+	const result = await refreshTokens("Bearer", refresh);
+	if (!("requires_action" in result)) setTokens(result.access_token, result.refresh_token, result.expires_in);
+};
+const ensureValidAccessToken = async (refresh) => {
+	if (accessToken.get() && !isTokenExpired(expireAt.get())) return;
+	try {
+		await refreshAccessToken(refresh);
+	} catch (refreshError) {
+		console.error("Token refresh failed in getToken:", refreshError);
+		removeTokens();
+		throw refreshError;
+	}
+};
+const getToken = async () => {
+	if (currentTokenPromise) return currentTokenPromise;
+	currentTokenPromise = (async () => {
+		try {
+			await initDeferred.promise;
+			if (requiresAction.get()) return void 0;
+			const currentRefreshToken = refreshToken.get();
+			if (!currentRefreshToken) return void 0;
+			await ensureValidAccessToken(currentRefreshToken);
+			const token = accessToken.get();
+			if (token) decodeAndSetUser(token);
+			return token;
+		} catch (error) {
+			console.warn("Failed to getToken(). Error: ", error);
+			throw error;
+		} finally {
+			currentTokenPromise = null;
+		}
+	})();
+	return currentTokenPromise;
+};
+/**
+* Sets authentication tokens in the store
+* @param access The access token
+* @param refresh The refresh token
+* @param expiresIn The token expiration time in seconds
+*/
+const setTokens = (access, refresh, expiresIn) => {
+	accessToken.set(access);
+	refreshToken.set(refresh);
+	expireAt.set(Date.now() + expiresIn * 1e3);
+	isLogged.set(true);
+	limitedAccessToken.set(null);
+	requiresAction.set(null);
+	authError.set(null);
+	decodeAndSetUser(access);
+};
+/**
+* Removes authentication tokens from the store
+*/
+const removeTokens = () => {
+	accessToken.set("");
+	refreshToken.set("");
+	expireAt.set(0);
+	isLogged.set(false);
+	user.set(void 0);
+	limitedAccessToken.set(null);
+	requiresAction.set(null);
+	authError.set(null);
+};
+/**
+* Clears the auth error from the store
+*/
+const clearAuthError = () => {
+	authError.set(null);
+};
+/**
+* Sets limited access state for users requiring additional action (e.g., Telegram users without email)
+* @param token The limited scope access token
+* @param action The required action (e.g., "add_email")
+*/
+const setLimitedAccessState = (token, action) => {
+	limitedAccessToken.set(token);
+	requiresAction.set(action);
+	authError.set(null);
+	isLogged.set(true);
+};
+/**
+* Clears the limited access state (after email verification completes or user logs out)
+*/
+const clearLimitedAccessState = () => {
+	limitedAccessToken.set(null);
+	requiresAction.set(null);
+	if (!(!!accessToken.get() && !!refreshToken.get())) isLogged.set(false);
+};
+isLogged.subscribe((value) => setStoreCookie("isLogged", value));
+accessToken.subscribe((value) => setStoreCookie("accessToken", value));
+refreshToken.subscribe((value) => setStoreCookie("refreshToken", value));
+expireAt.subscribe((value) => setStoreCookie("expireAt", value));
+requiresAction.subscribe((value) => setStoreCookie("requiresAction", value));
+limitedAccessToken.subscribe((value) => setStoreCookie("limitedAccessToken", value));
+
+//#endregion
+//#region src/auth/auth/logout.ts
+const logout = async () => {
+	try {
+		await postAuthV1Logout({ throwOnError: true });
+	} catch {} finally {
+		removeTokens();
+	}
+};
+
+//#endregion
+//#region src/auth/api/types.ts
+/**
+* Generic API error class - wraps ky's HTTPError for consistency
+*/
+var ApiError = class extends Error {
+	status;
+	endpoint;
+	data;
+	constructor(message, ...rest) {
+		super(message);
+		this.name = "ApiError";
+		const firstArg = rest[0];
+		if (typeof firstArg === "number") {
+			this.status = firstArg;
+			this.endpoint = rest[1] ?? "";
+			this.data = rest[2];
+			return;
+		}
+		this.status = firstArg.status;
+		this.endpoint = firstArg.endpoint;
+		this.data = firstArg.data;
+	}
+};
+
+//#endregion
+//#region src/auth/api-url.ts
+/**
+* Global API base URL store
+*/
+const apiURL = atom("");
+
+//#endregion
+//#region src/auth/api/sdk-client.ts
+let configured = false;
+function configureSdkClient() {
+	if (configured) return;
+	configured = true;
+	client.setConfig({ baseUrl: apiURL.get() });
+	apiURL.subscribe((url) => {
+		client.setConfig({ baseUrl: url });
+	});
+	client.interceptors.request.use(async (request) => {
+		if (request.headers.has("Authorization")) return request;
+		const token = await getToken();
+		if (token) request.headers.set("Authorization", `Bearer ${token}`);
+		return request;
+	});
+}
+
+//#endregion
+//#region src/auth/social/socialState.ts
+const socialStoragePath = (provider) => SOCIAL_CONNECT_KEY_PREFIX + provider;
+/**
+* Sets a flag indicating that a social provider connection is being attempted
+* @param provider The provider identifier
+*/
+function setSocialConnectAttempt(provider) {
+	sessionStorage.setItem(socialStoragePath(provider), "true");
+}
+/**
+* Checks if there's a pending social provider connection attempt
+* @param provider The provider identifier
+* @returns True if there's a pending connection attempt, false otherwise
+*/
+function hasSocialConnectAttempt(provider) {
+	return sessionStorage.getItem(socialStoragePath(provider)) === "true";
+}
+/**
+* Clears the social provider connection attempt flag
+* @param provider The provider identifier
+*/
+function clearSocialConnectAttempt(provider) {
+	sessionStorage.removeItem(socialStoragePath(provider));
+}
+
+//#endregion
+//#region src/auth/api/error-handlers.ts
+/**
+* Helper to create error functions - reduces bundle size by reusing error creation logic
+*/
+const err = (message) => () => new Error(message);
+/** Reusable error handlers for common cases - reduces repetitive error messages */
+const commonErrors = {
+	unauthorized: err("User is not authorized"),
+	badRequest: err("Bad request"),
+	notFound: err("Not found"),
+	conflict: err("Resource already exists"),
+	forbidden: err("Forbidden"),
+	tooManyRequests: err("Too many requests")
+};
+/**
+* Standard error handler for API errors with custom status code handling
+*/
+const handleApiError = (error, statusHandlers) => {
+	if (error instanceof ApiError) {
+		const handler = statusHandlers[error.status];
+		if (handler) throw new ApiError(handler().message, error.status, error.endpoint, error.data);
+		throw error;
+	}
+	throw error;
+};
+
+//#endregion
+//#region src/auth/api/utils.ts
+/**
+* Generic helper for API calls to handle initialization and error handling
+* @param fn The async function to execute
+* @param errorMap A map of status codes to error functions
+* @returns The result of the function execution
+*/
+const apiCall = async (fn, errorMap = {}) => {
+	await initDeferred.promise;
+	try {
+		return await fn();
+	} catch (error) {
+		return handleApiError(error, errorMap);
+	}
+};
+
+//#endregion
+//#region src/auth/validation/base.ts
+/**
+* 🛡️ INPUT VALIDATION UTILITY
+* Validates data before API calls and throws user-friendly errors
+*/
+const validateInput = (schema, data) => {
+	try {
+		return v.parse(schema, data);
+	} catch (error) {
+		if (error instanceof v.ValiError) {
+			const firstError = error.issues[0];
+			throw new Error(firstError.message);
+		}
+		throw error;
+	}
+};
+const EmailSchema = v.pipe(v.string("Email must be text"), v.email("Please enter a valid email address"), v.minLength(1, "Email is required"));
+const PasswordSchema = v.pipe(v.string("Password must be text"), v.minLength(8, "Password must be at least 8 characters long"), v.regex(/[A-Z]/, "Password must contain at least one uppercase letter"), v.regex(/[a-z]/, "Password must contain at least one lowercase letter"), v.regex(/[0-9]/, "Password must contain at least one number"));
+/**
+* Username validation schema
+* - Must be 4-24 characters
+* - Only letters, numbers, underscores, and periods
+*/
+const UsernameSchema = v.pipe(v.string("Username must be text"), v.minLength(4, "Username must be 4-24 characters long"), v.maxLength(24, "Username must be 4-24 characters long"), v.regex(/^[a-z0-9_.]+$/, "Username can only contain lowercase letters, numbers, dots and underscores"));
+/**
+* Name validation schema
+* - Must be 1-30 characters
+*/
+const NameSchema = v.pipe(v.string("Name must be text"), v.minLength(1, "Name must be 1-30 characters long"), v.maxLength(30, "Name must be 1-30 characters long"));
+/**
+* Domain validation schema
+* - Must be lowercase
+* - Must contain at least one dot
+* - Only alphanumeric characters, hyphens, and dots
+* - Cannot start or end with hyphen in any part
+*/
+const DomainSchema = v.pipe(v.string("Domain must be text"), v.trim(), v.toLowerCase(), v.minLength(1, "Domain is required"), v.regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/, "Invalid domain format. Please enter a valid domain like company.com"));
+
+//#endregion
+//#region src/auth/validation/auth.ts
+const EmailAuthRequestSchema = v.object({
+	email: EmailSchema,
+	password: PasswordSchema,
+	subscribe_to_blog: v.optional(v.boolean())
+});
+const ResetPasswordRequestSchema = v.object({
+	token: v.string(),
+	new_password: PasswordSchema
+});
+const LoginOTPVerifyRequestSchema = v.object({
+	code: v.pipe(v.string("OTP code must be text"), v.maxLength(8, "OTP code must be at most 6 characters"), v.regex(/^\d+$/, "OTP code must contain only numbers")),
+	session_id: v.pipe(v.string("Session ID must be text"), v.minLength(1, "Session ID is required"))
+});
+const ResendEmailRequestSchema = v.object({ email: EmailSchema });
+const ChangeEmailRequestSchema = v.object({ new_email: EmailSchema });
+const verifyEmailChangeRequestSchema = v.object({
+	code: v.pipe(v.string("OTP code must be text"), v.minLength(6, "OTP code must be at least 6 characters"), v.maxLength(8, "OTP code must be at most 8 characters"), v.regex(/^\d+$/, "OTP code must contain only numbers")),
+	new_email: v.optional(EmailSchema),
+	type: v.union([v.literal("verification"), v.literal("email_change")]),
+	verification_id: v.string("Verification ID is required")
+});
+/**
+* Social provider schemas
+*/
+const ConnectProviderSchema = v.object({
+	provider: v.pipe(v.string("Provider must be text"), v.minLength(1, "Provider is required")),
+	token: v.pipe(v.string("Token must be text"), v.minLength(1, "Token is required"))
+});
+/**
+* OTP verification schema (for user OTP operations)
+*/
+const VerifyOTPCodeSchema = v.object({ code: v.pipe(v.string("OTP code must be text"), v.minLength(6, "OTP code must be at least 6 characters"), v.regex(/^\d+$/, "OTP code must contain only numbers")) });
+
+//#endregion
+//#region src/auth/social/socialConnections.ts
+const listSocials = async () => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1Providers({ throwOnError: true });
+		return data.providers ?? [];
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to list providers!") });
+};
+const connectSocialInternal = async (provider, token) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1ProvidersConnect({
+			body: validateInput(ConnectProviderSchema, {
+				provider,
+				token
+			}),
+			throwOnError: true
+		});
+		if (data.access_token && data.refresh_token && data.expires_in) setTokens(data.access_token, data.refresh_token, data.expires_in);
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to connect provider!") });
+};
+const disconnectSocial = async (providerId) => {
+	return apiCall(async () => {
+		await deleteAuthV1ProvidersByProvider({
+			path: { provider: providerId },
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to disconnect provider!"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Provider not found!"),
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Cannot disconnect the last social provider!")
+	});
+};
+const connectSocial = (provider) => {
+	setSocialConnectAttempt(provider);
+	login(provider);
+};
+
+//#endregion
+//#region src/auth/api/client-core.ts
+let tokenRefreshFunction = null;
+/**
+* Sets the token refresh function used by the API client
+* This should be called during initialization
+*/
+const setTokenRefreshFunction = (fn) => {
+	tokenRefreshFunction = fn ?? null;
+};
+
+//#endregion
+//#region src/auth/authConfig.ts
+let loginRedirectUrl;
+const setLoginRedirectUrl = (url) => {
+	loginRedirectUrl = url;
+};
+
+//#endregion
+//#region src/auth/init.ts
+var init_exports = /* @__PURE__ */ __exportAll({ initClient: () => initClient });
+/**
+* Initializes the authentication client with the provided configuration
+* @param config The authentication client configuration
+* @returns A promise that resolves to the current access token (if available)
+*/
+const initClient = async (config) => {
+	await initConfig(config);
+	await initPage();
+	initDeferred.resolve();
+	await initSocials();
+	return getToken();
+};
+const initConfig = async (config) => {
+	apiURL.set(config.apiUrl);
+	configureSdkClient();
+	setLoginRedirectUrl(config.loginRedirectUrl);
+	setTokenRefreshFunction(async () => {
+		const currentRefreshToken = refreshToken.get();
+		if (currentRefreshToken) {
+			const { AuthProvider } = await import("./providers-Cu3u1p1O.js").then((n) => n.t);
+			const result = await refreshTokens(AuthProvider.BEARER, currentRefreshToken);
+			if (result && !("requires_action" in result)) setTokens(result.access_token, result.refresh_token, result.expires_in);
+			return getToken();
+		}
+	});
+	if (config.googleProvider) {
+		googleConfig.set(config.googleProvider);
+		updateGoogleAuthUrl();
+	}
+	if (config.appleProvider) {
+		appleConfig.set(config.appleProvider);
+		updateAppleAuthUrl();
+	}
+	if (config.microsoftProvider) {
+		microsoftConfig.set(config.microsoftProvider);
+		updateMicrosoftAuthUrl();
+	}
+	if (config.telegramProvider) {
+		telegramConfig.set(config.telegramProvider);
+		updateTelegramAuthUrl();
+	}
+};
+const isLimitedScopeTokenResponse = (result) => {
+	return "requires_action" in result;
+};
+const applyTokenExchangeResult = (result) => {
+	if (isLimitedScopeTokenResponse(result)) {
+		setLimitedAccessState(result.access_token, result.requires_action);
+		return;
+	}
+	const fullResult = result;
+	setTokens(fullResult.access_token, fullResult.refresh_token, fullResult.expires_in);
+};
+const setAuthErrorAndClear = (error_code, message, email) => {
+	clearLimitedAccessState();
+	authError.set({
+		error_code,
+		message,
+		email
+	});
+	return true;
+};
+const extractAuthErrorInfo = (error) => {
+	const data = error.data;
+	return {
+		error: data?.error ?? "",
+		description: data?.error_description ?? error.message ?? "",
+		email: data?.email ?? ""
+	};
+};
+const handleInitPageApiError = (error) => {
+	const info = extractAuthErrorInfo(error);
+	if (error.status === HTTP_STATUS.BAD_REQUEST && info.error === "invalid_grant") return setAuthErrorAndClear("email_not_verified", info.description, info.email);
+	if (error.status === HTTP_STATUS.CONFLICT) return setAuthErrorAndClear("provider_conflict", info.description, info.email);
+	return false;
+};
+const exchangeProviderToken = async (provider, token) => {
+	const result = await refreshTokens(provider, token);
+	applyTokenExchangeResult(result);
+};
+const initPage = async () => {
+	const provider = detectProvider();
+	if (!provider) return void 0;
+	const token = getProviderToken(provider);
+	if (!token) return void 0;
+	if (refreshToken.get()) return void 0;
+	try {
+		await exchangeProviderToken(provider, token);
+	} catch (error) {
+		if (error instanceof ApiError && handleInitPageApiError(error)) return;
+		throw error;
+	}
+};
+const initSocials = async () => {
+	const provider = detectProvider();
+	if (!provider) return void 0;
+	const token = getProviderToken(provider);
+	if (!token) return void 0;
+	try {
+		if (hasSocialConnectAttempt(provider)) await connectSocialInternal(provider, token);
+	} finally {
+		clearSocialConnectAttempt(provider);
+	}
+};
+
+//#endregion
+//#region src/auth/membership/types.ts
+let MembershipRole = /* @__PURE__ */ function(MembershipRole) {
+	MembershipRole["OWNER"] = "owner";
+	MembershipRole["ADMIN"] = "admin";
+	MembershipRole["MEMBER"] = "member";
+	return MembershipRole;
+}({});
+let MembershipState = /* @__PURE__ */ function(MembershipState) {
+	MembershipState["ACCEPTED"] = "accepted";
+	MembershipState["PENDING"] = "pending";
+	MembershipState["DECLINED"] = "declined";
+	MembershipState["ACCEPT"] = "accept";
+	MembershipState["DECLINE"] = "decline";
+	return MembershipState;
+}({});
+
+//#endregion
+//#region src/auth/membership/list.ts
+const listActiveMemberships = async (paginationParams) => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1MembershipsActive({
+			query: paginationParams,
+			throwOnError: true
+		});
+		return data.memberships || [];
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to list memberships!") });
+};
+const listPendingMemberships = async (paginationParams) => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1MembershipsPending({
+			query: paginationParams,
+			throwOnError: true
+		});
+		return data.memberships || [];
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to list memberships!") });
+};
+const listOrganizationMembers = async (orgId, paginationParams) => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1MembershipsByOrgIdMembers({
+			path: { orgId },
+			query: paginationParams,
+			throwOnError: true
+		});
+		return data.members || [];
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to list organization members!") });
+};
+
+//#endregion
+//#region src/auth/validation/membership.ts
+/**
+* Membership state schemas
+*/
+const AcceptDeclineMembershipSchema = v.object({ state: v.union([v.literal("accepted"), v.literal("declined")]) });
+const PublicInviteResponseSchema = v.object({ state: v.union([v.literal("accept"), v.literal("decline")]) });
+/**
+* Membership management schemas
+*/
+const InviteMemberSchema = v.object({
+	username: UsernameSchema,
+	role: v.union([v.literal("admin"), v.literal("member")])
+});
+const UpdateMemberRoleSchema = v.object({ role: v.union([v.literal("admin"), v.literal("member")]) });
+const ResendInviteSchema = v.object({ user_id: v.pipe(v.string("User ID must be text"), v.minLength(1, "User ID is required")) });
+
+//#endregion
+//#region src/auth/membership/invite.ts
+const inviteMember = async (orgId, username, role) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(InviteMemberSchema, {
+			username,
+			role
+		});
+		await postAuthV1MembershipsByOrgIdMembersInvite({
+			path: { orgId },
+			body: requestBody,
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to invite members!"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error(`User with username ${username} not found!`),
+		[HTTP_STATUS.CONFLICT]: () => /* @__PURE__ */ new Error(`User with username ${username} already exists!`)
+	});
+};
+const resendMemberInvite = async (orgId, userId) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(ResendInviteSchema, { user_id: userId });
+		await postAuthV1MembershipsByOrgIdMembersInviteResend({
+			path: { orgId },
+			body: requestBody,
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to invite members!"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error(`User with ID ${userId} not found!`),
+		[HTTP_STATUS.CONFLICT]: () => /* @__PURE__ */ new Error(`User with ID ${userId} already exists!`)
+	});
+};
+const respondToInvitation = async (orgId, state) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(AcceptDeclineMembershipSchema, { state });
+		await putAuthV1MembershipsByOrgIdMembershipState({
+			path: { orgId },
+			body: requestBody,
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to accept/decline an Invite!"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Invite not found!")
+	});
+};
+const publicRespondToInvitation = async (token, state) => {
+	return apiCall(async () => {
+		validateInput(PublicInviteResponseSchema, { state });
+		if (state === "accept") await postAuthV1InvitationsByTokenAccept({
+			path: { token },
+			throwOnError: true
+		});
+		else await postAuthV1InvitationsByTokenDecline({
+			path: { token },
+			throwOnError: true
+		});
+	}, { [HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid invitation token!") });
+};
+
+//#endregion
+//#region src/auth/membership/manage.ts
+const updateActiveMembership = async (orgId) => {
+	return apiCall(async () => {
+		await putAuthV1MembershipsByOrgIdActive({
+			path: { orgId },
+			throwOnError: true
+		});
+		accessToken.set(void 0);
+		expireAt.set(0);
+		await getToken();
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to update active membership!") });
+};
+const updateMemberRole = async (orgId, userId, role) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(UpdateMemberRoleSchema, { role });
+		await putAuthV1MembershipsByOrgIdMembersByUserIdRole({
+			path: {
+				orgId,
+				userId
+			},
+			body: requestBody,
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to update member roles!"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Member not found!"),
+		[HTTP_STATUS.FORBIDDEN]: () => /* @__PURE__ */ new Error("Cannot change role of organization owner!")
+	});
+};
+const deleteMember = async (orgId, userId) => {
+	return apiCall(async () => {
+		await deleteAuthV1MembershipsByOrgIdMembersByUserId({
+			path: {
+				orgId,
+				userId
+			},
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to delete members!"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Member not found!"),
+		[HTTP_STATUS.FORBIDDEN]: () => /* @__PURE__ */ new Error("Cannot remove organization owner!")
+	});
+};
+const leaveOrganization = async (orgId) => {
+	return apiCall(async () => {
+		await deleteAuthV1MembershipsByOrgIdLeave({
+			path: { orgId },
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to leave an organization!"),
+		[HTTP_STATUS.FORBIDDEN]: () => /* @__PURE__ */ new Error("Cannot leave organization as you are the last member!"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Organization not found!")
+	});
+};
+
+//#endregion
+//#region src/auth/validation/user.ts
+/**
+* Update username request schema
+*/
+const UpdateUsernameSchema = v.object({ username: UsernameSchema });
+/**
+* Update name request schema
+*/
+const UpdateNameSchema = v.object({ full_name: NameSchema });
+
+//#endregion
+//#region src/auth/user.ts
+const updateFullName = async (fullName) => {
+	return apiCall(async () => {
+		await patchAuthV1UsersCurrentName({
+			body: validateInput(UpdateNameSchema, { full_name: fullName }),
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid name format"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to update name"),
+		[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Name can only be changed once every 7 days.")
+	});
+};
+const updateUsername = async (username) => {
+	return apiCall(async () => {
+		await patchAuthV1UsersCurrentUsername({
+			body: validateInput(UpdateUsernameSchema, { username }),
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid username format"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to update username"),
+		[HTTP_STATUS.CONFLICT]: () => /* @__PURE__ */ new Error("Username is not unique. Choose another one!"),
+		[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Username can only be changed once every 30 days.")
+	});
+};
+const getOTPStatus = async () => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1UsersCurrentTotpStatus({ throwOnError: true });
+		return {
+			is_setup: data.is_setup ?? false,
+			created_at: data.created_at,
+			message: data.message
+		};
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Token is missing or invalid; user is not authenticated.") });
+};
+const setupUserOTP = async () => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1UsersCurrentTotpSetup({ throwOnError: true });
+		return {
+			qrCodeUrl: data.qr_code_url || "",
+			secret: data.secret || ""
+		};
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Token is missing or invalid; user is not authenticated.") });
+};
+const verifyUserOTP = async (code) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1UsersCurrentTotpVerify({
+			body: validateInput(VerifyOTPCodeSchema, { code }),
+			throwOnError: true
+		});
+		if (data.access_token && data.refresh_token && data.expires_in) setTokens(data.access_token, data.refresh_token, data.expires_in);
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid request format"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Token is missing or invalid; user is not authenticated.")
+	});
+};
+const deleteUserOTP = async () => {
+	return apiCall(async () => {
+		await deleteAuthV1UsersCurrentTotpDelete({ throwOnError: true });
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Token is missing or invalid; user is not authenticated.") });
+};
+
+//#endregion
+//#region src/auth/organization.ts
+const updateOrgName = async (fullName, orgId) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(UpdateNameSchema, { full_name: fullName });
+		await putAuthV1MembershipsByOrgIdName({
+			path: { orgId },
+			body: requestBody,
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.FORBIDDEN]: () => /* @__PURE__ */ new Error("Only owners and admins can update name"),
+		[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Name can only be changed once every 7 days.")
+	});
+};
+const updateOrgUsername = async (username, orgId) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(UpdateUsernameSchema, { username });
+		await putAuthV1MembershipsByOrgIdUsername({
+			path: { orgId },
+			body: requestBody,
+			throwOnError: true
+		});
+	}, {
+		[HTTP_STATUS.FORBIDDEN]: () => /* @__PURE__ */ new Error("Only owners and admins can update username"),
+		[HTTP_STATUS.CONFLICT]: () => /* @__PURE__ */ new Error("Username is not unique. Choose another one!"),
+		[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Username can only be changed once every 30 days.")
+	});
+};
+
+//#endregion
+//#region src/auth/auth/login.ts
+const loginWithEmail = async (email, password) => {
+	return apiCall(async () => {
+		const validatedInput = validateInput(EmailAuthRequestSchema, {
+			email,
+			password
+		});
+		try {
+			const { data } = await postAuthV1Login({
+				body: validatedInput,
+				throwOnError: true
+			});
+			return handleLoginResponse(data, email);
+		} catch (error) {
+			return handleLoginError(error, email);
+		}
+	}, {
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Incorrect email or password"),
+		[HTTP_STATUS.FORBIDDEN]: () => /* @__PURE__ */ new Error("Account access is restricted")
+	});
+};
+const verifyTOTPForLogin = async (code, session_id) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1VerifyTotp({
+			body: validateInput(LoginOTPVerifyRequestSchema, {
+				code,
+				session_id
+			}),
+			throwOnError: true
+		});
+		if (data.access_token && data.refresh_token && data.expires_in) setTokens(data.access_token, data.refresh_token, data.expires_in);
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Invalid or expired TOTP code") });
+};
+function handleLoginResponse(data, email) {
+	switch (data.status) {
+		case "ok":
+			if (data.access_token && data.refresh_token && data.expires_in) setTokens(data.access_token, data.refresh_token, data.expires_in);
+			return;
+		case "2fa_required": {
+			const response = data;
+			return {
+				session_id: response.session_id,
+				email,
+				authentication: response.authentication,
+				passkey_options: response.passkey_options
+			};
+		}
+		case "otp_required": return {
+			session_id: data.session_id,
+			email,
+			authentication: ["totp"]
+		};
+		case "email_not_verified": return {
+			error_code: "email_not_verified",
+			message: "Email not verified",
+			email: data.email || email
+		};
+		default: return;
+	}
+}
+function handleLoginError(error, email) {
+	if (isApiErrorBody(error)) {
+		if (error.error === "email_not_verified") return {
+			error_code: "email_not_verified",
+			message: error.details || "Email not verified",
+			email
+		};
+		if (error.error === "provider_conflict") return {
+			error_code: "provider_conflict",
+			message: error.details || "Email registered with different provider",
+			email
+		};
+		throw new ApiError(error.error || "Login failed", error.code || 500, "/auth/v1/login", error);
+	}
+	throw error;
+}
+function isApiErrorBody(error) {
+	return typeof error === "object" && error !== null && "error" in error;
+}
+
+//#endregion
+//#region src/auth/auth/register.ts
+const registerWithEmail = async (email, password, subscribeToBlog) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1Register({
+			body: validateInput(EmailAuthRequestSchema, {
+				email,
+				password,
+				subscribe_to_blog: subscribeToBlog
+			}),
+			throwOnError: true
+		});
+		if (data.verification_id) return {
+			message: data.message || "Registration successful",
+			verification_id: data.verification_id,
+			email_verification_sent: data.email_verification_sent,
+			user_id: data.user_id
+		};
+	}, { [HTTP_STATUS.CONFLICT]: () => /* @__PURE__ */ new Error("Email address is already registered") });
+};
+const resendEmailVerificationCode = async (email) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1EmailVerifyResend({
+			body: validateInput(ResendEmailRequestSchema, { email }),
+			throwOnError: true
+		});
+		if (data.verification_id) return {
+			message: data.message || "Verification code resent",
+			verification_id: data.verification_id,
+			code_sent: data.code_sent
+		};
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid email or validation error"),
+		[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Too many requests - rate limit exceeded")
+	});
+};
+
+//#endregion
+//#region src/auth/auth/password.ts
+const sendPasswordResetEmail = async (email) => {
+	return apiCall(async () => {
+		await postAuthV1PasswordReset({
+			body: validateInput(ResendEmailRequestSchema, { email }),
+			throwOnError: true
+		});
+	}, { [HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Bad request - invalid email or validation error") });
+};
+const confirmPasswordReset = async (token, password) => {
+	return apiCall(async () => {
+		await postAuthV1PasswordResetConfirm({
+			body: validateInput(ResetPasswordRequestSchema, {
+				token,
+				new_password: password
+			}),
+			throwOnError: true
+		});
+	}, { [HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Bad request - invalid token or password") });
+};
+
+//#endregion
+//#region src/auth/auth/email.ts
+const initiateEmailChange = async (email) => {
+	return apiCall(async () => {
+		const { data } = await putAuthV1UsersCurrentEmailsChange({
+			body: validateInput(ChangeEmailRequestSchema, { new_email: email }),
+			throwOnError: true
+		});
+		if (data.verification_id) return {
+			message: data.message || "Verification code sent",
+			verification_id: data.verification_id,
+			can_resend_at: data.can_resend_at,
+			code_sent: data.code_sent
+		};
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid email or email already in use"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Unauthorized - invalid or missing token"),
+		[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Too many requests - please try again later")
+	});
+};
+const addEmail = async (email) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1UsersCurrentEmails({
+			body: validateInput(ResendEmailRequestSchema, { email }),
+			throwOnError: true
+		});
+		if (data.verification_id) return {
+			message: data.message || "Verification code sent",
+			verification_id: data.verification_id,
+			can_resend_at: data.can_resend_at,
+			code_sent: data.code_sent
+		};
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid email address"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Session expired - please login again"),
+		[HTTP_STATUS.CONFLICT]: () => /* @__PURE__ */ new Error("Email address is already in use"),
+		[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Too many requests - please try again later")
+	});
+};
+const normalizeVerifyEmailArgs = (args) => {
+	if (isLegacyVerifyEmailArgs(args)) {
+		const [code, type, verification_id, new_email] = args;
+		return {
+			code,
+			type,
+			verification_id,
+			new_email
+		};
+	}
+	return args[0];
+};
+const isLegacyVerifyEmailArgs = (args) => typeof args[0] === "string";
+const verifyEmailWithCode = async (...args) => {
+	return apiCall(async () => {
+		const payload = normalizeVerifyEmailArgs(args);
+		validateInput(verifyEmailChangeRequestSchema, payload);
+		const { data } = await postAuthV1EmailVerify({
+			body: {
+				code: payload.code,
+				verification_id: payload.verification_id
+			},
+			throwOnError: true
+		});
+		if (data.tokens?.access_token && data.tokens?.refresh_token && data.tokens?.expires_in) setTokens(data.tokens.access_token, data.tokens.refresh_token, data.tokens.expires_in);
+		return {
+			email: data.email || "",
+			message: data.message || "Email verified",
+			verified: data.verified || false,
+			tokens: data.tokens ? {
+				access_token: data.tokens.access_token,
+				refresh_token: data.tokens.refresh_token,
+				expires_in: data.tokens.expires_in
+			} : void 0
+		};
+	}, { [HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid code or verification ID") });
+};
+const getEmailVerificationStatus = async () => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1UsersCurrentEmailsStatus({ throwOnError: true });
+		return {
+			email: data.email || "",
+			has_email: data.has_email ?? false,
+			verified: data.verified || false
+		};
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Unauthorized - invalid or missing token") });
+};
+
+//#endregion
+//#region src/auth/validation/domain.ts
+/**
+* Add domain request schema
+*/
+const AddDomainSchema = v.object({ domain: DomainSchema });
+/**
+* Update auto-join setting schema
+*/
+const UpdateAutoJoinSchema = v.object({ enabled: v.boolean("Auto-join setting must be a boolean") });
+
+//#endregion
+//#region src/auth/domain/types.ts
+let DomainStatus = /* @__PURE__ */ function(DomainStatus) {
+	DomainStatus["PENDING"] = "pending";
+	DomainStatus["VERIFIED"] = "verified";
+	DomainStatus["EXPIRED"] = "expired";
+	return DomainStatus;
+}({});
+
+//#endregion
+//#region src/auth/domain/index.ts
+const getDomainStatus = async (orgId) => {
+	return apiCall(async () => {
+		try {
+			const { data } = await getAuthV1MembershipsByOrgIdDomain({
+				path: { orgId },
+				throwOnError: true
+			});
+			return data;
+		} catch (error) {
+			if (error?.code === HTTP_STATUS.NOT_FOUND) return null;
+			throw error;
+		}
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Not authorized to view domain settings") });
+};
+const initiateDomainVerification = async (orgId, domain) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(AddDomainSchema, { domain });
+		const { data } = await postAuthV1MembershipsByOrgIdDomain({
+			path: { orgId },
+			body: requestBody,
+			throwOnError: true
+		});
+		return data;
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid domain format or public domains like gmail.com are not allowed"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Not authorized to configure domain settings")
+	});
+};
+const checkDomainVerification = async (orgId) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1MembershipsByOrgIdDomainVerification({
+			path: { orgId },
+			throwOnError: true
+		});
+		return data;
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Not authorized to check domain verification") });
+};
+const updateAutoJoin = async (orgId, enabled) => {
+	return apiCall(async () => {
+		const requestBody = validateInput(UpdateAutoJoinSchema, { enabled });
+		const { data } = await putAuthV1MembershipsByOrgIdDomainAutoJoin({
+			path: { orgId },
+			body: requestBody,
+			throwOnError: true
+		});
+		return data;
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Not authorized to update auto-join settings") });
+};
+const removeDomain = async (orgId) => {
+	return apiCall(async () => {
+		await deleteAuthV1MembershipsByOrgIdDomain({
+			path: { orgId },
+			throwOnError: true
+		});
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Not authorized to remove domain") });
+};
+
+//#endregion
+//#region src/auth/blog/index.ts
+const BLOG_SUBSCRIPTION_ERRORS = {
+	[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("User is not authorized to manage blog subscription"),
+	[HTTP_STATUS.FORBIDDEN]: () => /* @__PURE__ */ new Error("Account is inactive"),
+	[HTTP_STATUS.TOO_MANY_REQUESTS]: () => /* @__PURE__ */ new Error("Too many requests - please try again later")
+};
+const getBlogSubscriptionStatus = async () => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1BlogSubscription({ throwOnError: true });
+		return data;
+	}, BLOG_SUBSCRIPTION_ERRORS);
+};
+const subscribeToBlog = async () => {
+	return apiCall(async () => {
+		await postAuthV1BlogSubscribe({ throwOnError: true });
+	}, {
+		...BLOG_SUBSCRIPTION_ERRORS,
+		[HTTP_STATUS.INTERNAL_SERVER_ERROR]: () => /* @__PURE__ */ new Error("Failed to subscribe to blog updates")
+	});
+};
+const unsubscribeFromBlog = async () => {
+	return apiCall(async () => {
+		await postAuthV1BlogUnsubscribe({ throwOnError: true });
+	}, {
+		...BLOG_SUBSCRIPTION_ERRORS,
+		[HTTP_STATUS.INTERNAL_SERVER_ERROR]: () => /* @__PURE__ */ new Error("Failed to unsubscribe from blog updates")
+	});
+};
+
+//#endregion
+//#region src/auth/passkey.ts
+function base64urlToBuffer(base64url) {
+	const base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
+	const padded = base64.padEnd(base64.length + (4 - base64.length % 4) % 4, "=");
+	const binary = atob(padded);
+	const bytes = new Uint8Array(binary.length);
+	for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+	return bytes.buffer;
+}
+function bufferToBase64url(buffer) {
+	const bytes = new Uint8Array(buffer);
+	let binary = "";
+	for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function decodeCreationOptions(raw) {
+	const pk = raw.publicKey ?? raw;
+	return {
+		...pk,
+		challenge: base64urlToBuffer(pk.challenge),
+		user: {
+			...pk.user,
+			id: base64urlToBuffer(pk.user.id)
+		},
+		excludeCredentials: (pk.excludeCredentials ?? []).map((c) => ({
+			...c,
+			id: base64urlToBuffer(c.id)
+		}))
+	};
+}
+function decodeRequestOptions(raw) {
+	const pk = raw.publicKey ?? raw;
+	return {
+		...pk,
+		challenge: base64urlToBuffer(pk.challenge),
+		allowCredentials: (pk.allowCredentials ?? []).map((c) => ({
+			...c,
+			id: base64urlToBuffer(c.id)
+		}))
+	};
+}
+function serializeLoginCredential(cred) {
+	const response = cred.response;
+	return {
+		id: cred.id,
+		rawId: bufferToBase64url(cred.rawId),
+		type: cred.type,
+		response: {
+			authenticatorData: bufferToBase64url(response.authenticatorData),
+			clientDataJSON: bufferToBase64url(response.clientDataJSON),
+			signature: bufferToBase64url(response.signature),
+			userHandle: response.userHandle ? bufferToBase64url(response.userHandle) : null
+		}
+	};
+}
+function serializeRegistrationCredential(cred) {
+	const response = cred.response;
+	return {
+		id: cred.id,
+		rawId: bufferToBase64url(cred.rawId),
+		type: cred.type,
+		response: {
+			attestationObject: bufferToBase64url(response.attestationObject),
+			clientDataJSON: bufferToBase64url(response.clientDataJSON)
+		}
+	};
+}
+const finishPasskeyLogin = async (session_id, credential) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1PasskeyLoginFinish({
+			body: {
+				session_id,
+				credential: serializeLoginCredential(credential)
+			},
+			throwOnError: true
+		});
+		if (data.access_token && data.refresh_token && data.expires_in) setTokens(data.access_token, data.refresh_token, data.expires_in);
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid passkey credential"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Passkey authentication failed")
+	});
+};
+const beginPasskeyLogin = async () => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1PasskeyLoginBegin({ throwOnError: true });
+		if (!data.session_id || !data.options) throw new Error("No passkeys available for this account");
+		const options = decodeRequestOptions(data.options);
+		return {
+			session_id: data.session_id,
+			options
+		};
+	}, {});
+};
+const beginPasskeyRegistration = async () => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1UsersCurrentPasskeysRegisterBegin({ throwOnError: true });
+		if (!data.session_id || !data.options) throw new Error("Invalid response from server");
+		const options = decodeCreationOptions(data.options);
+		return {
+			session_id: data.session_id,
+			options
+		};
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Token is missing or invalid; user is not authenticated.") });
+};
+const finishPasskeyRegistration = async (session_id, name, credential) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1UsersCurrentPasskeysRegisterFinish({
+			body: {
+				session_id,
+				name,
+				credential: serializeRegistrationCredential(credential)
+			},
+			throwOnError: true
+		});
+		return {
+			passkey_id: data.passkey_id ?? "",
+			name: data.name ?? ""
+		};
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid passkey credential"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Token is missing or invalid; user is not authenticated.")
+	});
+};
+const renamePasskey = async (id, name) => {
+	return apiCall(async () => {
+		await patchAuthV1UsersCurrentPasskeysById({
+			path: { id },
+			body: { name },
+			throwOnError: true
+		});
+	}, { [HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Passkey not found") });
+};
+const deletePasskey = async (id) => {
+	return apiCall(async () => {
+		await deleteAuthV1UsersCurrentPasskeysById({
+			path: { id },
+			throwOnError: true
+		});
+	}, { [HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Passkey not found") });
+};
+const listPasskeys = async () => {
+	return apiCall(async () => {
+		const { data } = await getAuthV1UsersCurrentPasskeys({ throwOnError: true });
+		return (data.passkeys ?? []).map((p) => ({
+			id: p.id ?? "",
+			name: p.name ?? "",
+			credential_id: p.credential_id ?? "",
+			aaguid: p.aaguid ?? "",
+			backup_state: p.backup_state ?? false,
+			created_at: p.created_at ?? "",
+			last_used_at: p.last_used_at ?? "",
+			transports: p.transports ?? []
+		}));
+	}, { [HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Token is missing or invalid; user is not authenticated.") });
+};
+const verifyPasskeyForLogin = async (session_id, credential) => {
+	return apiCall(async () => {
+		const { data } = await postAuthV1VerifyPasskey({
+			body: {
+				session_id,
+				credential: serializeLoginCredential(credential)
+			},
+			throwOnError: true
+		});
+		if (data.access_token && data.refresh_token && data.expires_in) setTokens(data.access_token, data.refresh_token, data.expires_in);
+	}, {
+		[HTTP_STATUS.BAD_REQUEST]: () => /* @__PURE__ */ new Error("Invalid passkey credential"),
+		[HTTP_STATUS.UNAUTHORIZED]: () => /* @__PURE__ */ new Error("Passkey verification failed"),
+		[HTTP_STATUS.NOT_FOUND]: () => /* @__PURE__ */ new Error("Session not found")
+	});
+};
 
 //#endregion
-export { createClient, deleteImagesByImageId, deleteVideosByVideoIdAudioTracks, deleteVideosByVideoIdAudioTracksByTrackId, deleteVideosByVideoIdAudioTracksLanguageByLangCode, deleteVideosByVideoIdChapters, deleteVideosByVideoIdDelete, deleteVideosByVideoIdSubtitles, deleteVideosByVideoIdSubtitlesBySubtitleId, deleteVideosByVideoIdSubtitlesLanguageByLangCode, getFeedsByFeedId, getFeedsByFeedIdByPostId, getFeedsByFeedIdCreatorsByCreatorId, getImages, getImagesByImageId, getVideos, getVideosByVideoId, getVideosLanguages, postImagesUploadComplete, postImagesUploadInit, postVideosByVideoIdAudioTracks, postVideosByVideoIdSubtitles, postVideosUploadComplete, postVideosUploadInit, putVideosByVideoIdAudioTracksLanguageByLangCode, putVideosByVideoIdChapters, putVideosByVideoIdSubtitlesLanguageByLangCode, putVideosByVideoIdThumbnail };
+export { DomainStatus, MembershipRole, MembershipState, addEmail, authError, beginPasskeyLogin, beginPasskeyRegistration, checkDomainVerification, clearAuthError, clearLimitedAccessState, client, completePostUpload, confirmPasswordReset, connect, connectSocial, createApiKeyByOrgid, createClient, createCredentialByOrgid, createFeed, createMoveByProjectid, createPost, createProjectsByOrgid, createToken, decodeRequestOptions, deleteApiKeyByKeyid, deleteAuthV1MembershipsByOrgIdDomain, deleteAuthV1MembershipsByOrgIdLeave, deleteAuthV1MembershipsByOrgIdMembersByUserId, deleteAuthV1MembershipsByOrgIdPoliciesByPolicyId, deleteAuthV1MembershipsByOrgIdPoliciesByPolicyIdAttachmentsByAttachmentId, deleteAuthV1ProvidersByProvider, deleteAuthV1UsersCurrentPasskeysById, deleteAuthV1UsersCurrentTotpDelete, deleteBillingV1PaymentMethodsByPaymentMethodId, deleteCustomDomainByProjectid, deleteFeed, deleteMediaV1ProjectsByProjectIdImagesByImageId, deleteMediaV1ProjectsByProjectIdVideosByVideoId, deleteMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracks, deleteMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksByTrackId, deleteMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksLanguageByLang, deleteMediaV1ProjectsByProjectIdVideosByVideoIdChapters, deleteMediaV1ProjectsByProjectIdVideosByVideoIdChaptersByStartTimeSec, deleteMediaV1ProjectsByProjectIdVideosByVideoIdSubtitles, deleteMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesBySubtitleId, deleteMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesLanguageByLang, deleteMember, deletePasskey, deletePost, deleteProjects, deleteUserOTP, disconnectSocial, finishPasskeyLogin, finishPasskeyRegistration, getAnalyticsV1Dashboard, getAnalyticsV1FeedsByFeedIdStats, getAnalyticsV1PostsByPostIdStats, getAnalyticsV1Realtime, getAnalyticsV1Retention, getAnalyticsV1TopFeeds, getAnalyticsV1TopPosts, getAnalyticsV1TopVideos, getAnalyticsV1VideosByVideoIdHeatmap, getAnalyticsV1VideosByVideoIdHotSegments, getAnalyticsV1VideosByVideoIdStats, getAuthV1BlogSubscription, getAuthV1MembershipsActive, getAuthV1MembershipsByOrgIdCheck, getAuthV1MembershipsByOrgIdDomain, getAuthV1MembershipsByOrgIdDomainAutoJoin, getAuthV1MembershipsByOrgIdInfo, getAuthV1MembershipsByOrgIdMembers, getAuthV1MembershipsByOrgIdMembersByUserIdPolicies, getAuthV1MembershipsByOrgIdPolicies, getAuthV1MembershipsByOrgIdPoliciesByPolicyId, getAuthV1MembershipsByOrgIdPoliciesByPolicyIdAttachments, getAuthV1MembershipsPending, getAuthV1PoliciesPermissions, getAuthV1Providers, getAuthV1Userinfo, getAuthV1UsersCurrent, getAuthV1UsersCurrentEmailsStatus, getAuthV1UsersCurrentPasskeys, getAuthV1UsersCurrentTotpStatus, getBillingV1Address, getBillingV1BandwidthUsage, getBillingV1BandwidthUsageHistory, getBillingV1Invoices, getBillingV1PaymentMethods, getBillingV1PaymentMethodsFromPaymentIntent, getBillingV1PaymentMethodsFromSetupIntent, getBillingV1Plans, getBillingV1PlansByPlanId, getBillingV1StorageUsage, getBillingV1StorageUsageHistory, getBillingV1Subscription, getBillingV1SubscriptionHistory, getBlogSubscriptionStatus, getDomainStatus, getEmailVerificationStatus, getFeed, getMediaV1ImagesByImageId, getMediaV1Languages, getMediaV1ProjectsByProjectIdImages, getMediaV1ProjectsByProjectIdImagesByImageId, getMediaV1ProjectsByProjectIdVideos, getMediaV1ProjectsByProjectIdVideosByVideoId, getMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracks, getMediaV1ProjectsByProjectIdVideosByVideoIdChapters, getMediaV1ProjectsByProjectIdVideosByVideoIdSubtitles, getMediaV1VideosByVideoId, getMediaV1VideosByVideoIdAudioTracks, getMediaV1VideosByVideoIdSubtitles, getOTPStatus, getPost, getProjects, getPublicPost, getToken, initClient, initPostUpload, initiateDomainVerification, initiateEmailChange, inviteMember, isLogged, leaveOrganization, limitedAccessToken, listActiveMemberships, listApiKeysByOrgid, listCredentialsByOrgid, listFeeds, listOrganizationMembers, listPasskeys, listPendingMemberships, listPosts, listPostsByCreator, listProjectsByOrgid, listPublicPosts, listPublicPostsByCreator, listSocials, login, loginWithEmail, logout, patchAuthV1UsersCurrentName, patchAuthV1UsersCurrentPasskeysById, patchAuthV1UsersCurrentUsername, patchNameByProjectid, patchVideoQualityByProjectid, postAnalyticsV1Events, postAnalyticsV1Funnels, postAuthV1BlogSubscribe, postAuthV1BlogUnsubscribe, postAuthV1BlogUnsubscribeEmail, postAuthV1EmailVerify, postAuthV1EmailVerifyResend, postAuthV1InvitationsByTokenAccept, postAuthV1InvitationsByTokenDecline, postAuthV1Login, postAuthV1Logout, postAuthV1MembershipsByOrgIdDomain, postAuthV1MembershipsByOrgIdDomainVerification, postAuthV1MembershipsByOrgIdMembersInvite, postAuthV1MembershipsByOrgIdMembersInviteResend, postAuthV1MembershipsByOrgIdPolicies, postAuthV1MembershipsByOrgIdPoliciesByPolicyIdAttachments, postAuthV1PasskeyLoginBegin, postAuthV1PasskeyLoginFinish, postAuthV1PasswordReset, postAuthV1PasswordResetConfirm, postAuthV1ProvidersConnect, postAuthV1Register, postAuthV1Token, postAuthV1UsersCurrentEmails, postAuthV1UsersCurrentPasskeysRegisterBegin, postAuthV1UsersCurrentPasskeysRegisterFinish, postAuthV1UsersCurrentTotpSetup, postAuthV1UsersCurrentTotpVerify, postAuthV1VerifyPasskey, postAuthV1VerifyTotp, postBillingV1Address, postBillingV1BandwidthUsageRefresh, postBillingV1Checkout, postBillingV1ContactSales, postBillingV1JobsCleanupBandwidthSnapshots, postBillingV1JobsDailyBandwidthCalculation, postBillingV1JobsMonthlyBandwidthCalculation, postBillingV1PaymentMethods, postBillingV1SetupIntent, postBillingV1StorageUsageRefresh, postBillingV1Subscription, postBillingV1SubscriptionUpgrade, postBillingV1TaxCalculate, postBillingWebhooksStripe, postMediaV1ProjectsByProjectIdImagesByImageIdUploadComplete, postMediaV1ProjectsByProjectIdImagesUpload, postMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksUpload, postMediaV1ProjectsByProjectIdVideosByVideoIdAudioTracksUploadComplete, postMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesUpload, postMediaV1ProjectsByProjectIdVideosByVideoIdSubtitlesUploadComplete, postMediaV1ProjectsByProjectIdVideosByVideoIdUploadComplete, postMediaV1ProjectsByProjectIdVideosUpload, postPlatformAuthRefresh, postPlatformAuthToken, publicRespondToInvitation, putAuthV1MembershipsByOrgIdActive, putAuthV1MembershipsByOrgIdDomainAutoJoin, putAuthV1MembershipsByOrgIdMembersByUserIdRole, putAuthV1MembershipsByOrgIdMembershipState, putAuthV1MembershipsByOrgIdName, putAuthV1MembershipsByOrgIdPoliciesByPolicyId, putAuthV1MembershipsByOrgIdUsername, putAuthV1UsersCurrentEmailsChange, putBillingV1InvoicesByInvoiceIdStatus, putBillingV1SubscriptionCancel, putBillingV1SubscriptionReactivate, putMediaV1ProjectsByProjectIdImagesByImageIdVisibility, putMediaV1ProjectsByProjectIdVideosByVideoIdChapters, putMediaV1ProjectsByProjectIdVideosByVideoIdThumbnail, putMediaV1ProjectsByProjectIdVideosByVideoIdVisibility, registerWithEmail, removeDomain, renamePasskey, requiresAction, resendEmailVerificationCode, resendMemberInvite, respondToInvitation, revokeCredentialByCredentialid, rotateApiKeyByKeyid, sendPasswordResetEmail, setLimitedAccessState, setupUserOTP, subscribeToBlog, unsubscribeFromBlog, updateActiveMembership, updateAutoJoin, updateCustomDomainByProjectid, updateFeed, updateFullName, updateMemberRole, updateOrgName, updateOrgUsername, updateUsername, user, verifyEmailWithCode, verifyPasskeyForLogin, verifyTOTPForLogin, verifyUserOTP };
 //# sourceMappingURL=index.js.map