@rustrak/client 0.24.0 → 0.26.0

package/dist/generated/sdk.gen.cjs

@@ -25,8 +25,6 @@ var HeyApiRegistry = class {
 };
 var Sentry = class extends HeyApiClient {
 	/**
-	* GET /api/0/issues/{issue_id}/
-	*
 	* One issue with its releases and its 24h and 30d series (Sentry's
 	* `GroupDetailsEndpoint`). Also served under `/groups/` and the
 	* organization-scoped paths, as Sentry does.
@@ -48,8 +46,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/0/issues/{issue_id}/
-	*
 	* Sets an issue's status and returns the issue (Sentry's
 	* `GroupDetailsEndpoint.put`). The change goes through Rustrak's own
 	* issue update, so it is recorded and mirrored like any other.
@@ -75,8 +71,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/0/issues/{issue_id}/events/latest/
-	*
 	* The issue's most recent event (Sentry's `GroupEventDetailsEndpoint`,
 	* `issues/endpoints/group_event_details.py`).
 	*/
@@ -97,8 +91,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/0/organizations/
-	*
 	* The organizations the token belongs to (Sentry's
 	* `OrganizationIndexEndpoint`): always the one synthetic org.
 	*/
@@ -119,8 +111,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/0/organizations/{org_slug}/repos/
-	*
 	* The code repositories connected to the organization (Sentry's
 	* `OrganizationRepositoriesEndpoint`). Rustrak connects none through
 	* Sentry's integrations, so the list is always empty.
@@ -142,8 +132,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/0/projects/
-	*
 	* The projects the token can see, newest first (Sentry's
 	* `ProjectIndexEndpoint`, `core/endpoints/project_index.py`).
 	*/
@@ -164,8 +152,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/0/projects/{org_slug}/{project_slug}/issues/
-	*
 	* A project's issues, filtered by `query`, sorted by `sort` and paginated
 	* by `cursor` (Sentry's `ProjectGroupIndexEndpoint`,
 	* `issues/endpoints/project_group_index.py`).
@@ -187,8 +173,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/0/projects/{org_slug}/{project_slug}/user-feedback/
-	*
 	* Submit a user report about an error event (Sentry's
 	* `ProjectUserReportsEndpoint`, `feedback/endpoints/project_user_reports.py`).
 	* Accepts `Authorization: DSN <dsn>` as well as a token; the report becomes a
@@ -215,8 +199,6 @@ var Sentry = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /{org_slug}/{project_slug}/issues/{issue_id}/
-	*
 	* The issue page GitLab's "View in Sentry" opens: Sentry redirects this
 	* legacy path to the issue (`static/app/router/routes.tsx`), Rustrak to its
 	* dashboard. A visitor who is not signed in goes to the login page instead,
@@ -231,7 +213,7 @@ var Sentry = class extends HeyApiClient {
 			}).parseAsync(data),
 			security: [{
 				in: "cookie",
-				name: "session",
+				name: "rustrak_session",
 				type: "apiKey"
 			}, {
 				scheme: "bearer",
@@ -244,7 +226,6 @@ var Sentry = class extends HeyApiClient {
 };
 var SourceMaps = class extends HeyApiClient {
 	/**
-	* GET /api/0/organizations/{org_slug}/
 	* Always returns 200 with synthetic org data — sentry-cli validates this before uploading.
 	*/
 	orgDetails(options) {
@@ -260,7 +241,7 @@ var SourceMaps = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/0/organizations/{org_slug}/artifactbundle/assemble/
+	* Assembles uploaded chunks into an artifact bundle (sentry-cli `sourcemaps upload`).
 	*/
 	artifactBundleAssemble(options) {
 		return (options.client ?? this.client).post({
@@ -283,7 +264,7 @@ var SourceMaps = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/0/organizations/{org_slug}/chunk-upload/
+	* Describes how sentry-cli should upload chunks: size, concurrency and accepted kinds.
 	*/
 	chunkUploadCapability(options) {
 		return (options.client ?? this.client).get({
@@ -302,7 +283,7 @@ var SourceMaps = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/0/organizations/{org_slug}/chunk-upload/
+	* Receives chunks of a source map or debug file upload from sentry-cli.
 	*/
 	chunkUpload(options) {
 		return (options.client ?? this.client).post({
@@ -325,7 +306,7 @@ var SourceMaps = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/0/projects/{org_slug}/{project_slug}/files/source-maps/
+	* Lists a project's uploaded source map artifacts (sentry-cli).
 	*/
 	list(options) {
 		return (options.client ?? this.client).get({
@@ -403,8 +384,6 @@ var DebugFiles = class extends HeyApiClient {
 };
 var Releases = class extends HeyApiClient {
 	/**
-	* POST /api/0/projects/{org_slug}/{project_slug}/releases/
-	*
 	* Sentry-compatible release creation. Idempotent: repeating the same
 	* `(project, version)` returns 208 rather than erroring — sentry-cli and JS
 	* bundler plugins call this on every build. Triggers date-based regression
@@ -436,8 +415,6 @@ var Releases = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/0/projects/{org_slug}/{project_slug}/releases/{version}/
-	*
 	* Generic partial update (`ref`, `url`, `dateReleased`). Setting
 	* `dateReleased` IS "finalize" — there is no separate status flag.
 	*/
@@ -502,7 +479,7 @@ var Releases = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/releases/{release}/new-issues
+	* Lists the issues first seen in a release.
 	*/
 	newIssues(options) {
 		return (options.client ?? this.client).get({
@@ -521,9 +498,49 @@ var Releases = class extends HeyApiClient {
 		});
 	}
 };
+var Access = class extends HeyApiClient {
+	/**
+	* Lists every resource a permission can name, with its module, scope and actions.
+	*/
+	catalog(options) {
+		return (options?.client ?? this.client).get({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: zod.never().optional(),
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zAccessCatalogResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/access/catalog",
+			...options
+		});
+	}
+	/**
+	* Returns what the caller may do, on the instance and on each project.
+	*/
+	me(options) {
+		return (options?.client ?? this.client).get({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: zod.never().optional(),
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zAccessMeResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/access/me",
+			...options
+		});
+	}
+};
 var Github = class extends HeyApiClient {
 	/**
-	* DELETE /api/github
+	* Disconnects the GitHub App from this instance.
 	*/
 	disconnect(options) {
 		return (options?.client ?? this.client).delete({
@@ -542,7 +559,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/github
+	* Shows whether a GitHub App is connected, and how.
 	*/
 	status(options) {
 		return (options?.client ?? this.client).get({
@@ -561,7 +578,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/github/callback: GitHub sends the browser here after creating the
+	* GitHub sends the browser here after creating the
 	* app; the code trades for its credentials.
 	*/
 	callback(options) {
@@ -580,7 +597,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/github/installed: GitHub sends the browser here after the app is
+	* GitHub sends the browser here after the app is
 	* installed on an account.
 	*/
 	installed(options) {
@@ -599,7 +616,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/github/issue-template: the labels, title prefix and body footer
+	* The labels, title prefix and body footer
 	* every GitHub issue starts with, before a project's own.
 	*/
 	putIssueTemplate(options) {
@@ -623,7 +640,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/github/manifest: what the dashboard posts to GitHub so GitHub
+	* What the dashboard posts to GitHub so GitHub
 	* creates an app already configured for this server.
 	*/
 	manifest(options) {
@@ -647,7 +664,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/github/me: the GitHub username assignees sync through.
+	* The GitHub username assignees sync through.
 	*/
 	getMyLogin(options) {
 		return (options?.client ?? this.client).get({
@@ -666,7 +683,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/github/me
+	* Sets or clears the caller's GitHub username, which assignees sync through.
 	*/
 	putMyLogin(options) {
 		return (options.client ?? this.client).put({
@@ -689,7 +706,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/github/repositories?project_id=: the repositories a project can
+	* The repositories a project can
 	* point at, for whoever may change that project's settings.
 	*/
 	repositories(options) {
@@ -709,7 +726,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/github/webhook: public, and trusted only through the signature
+	* Public, and trusted only through the signature
 	* GitHub computes with the app's webhook secret.
 	*/
 	webhook(options) {
@@ -729,7 +746,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/projects/{project_id}/github
+	* Unlinks a project from its GitHub repository.
 	*/
 	deleteProjectRepository(options) {
 		return (options.client ?? this.client).delete({
@@ -748,7 +765,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/github
+	* Gets the GitHub repository a project is linked to.
 	*/
 	getProjectRepository(options) {
 		return (options.client ?? this.client).get({
@@ -767,7 +784,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/projects/{project_id}/github
+	* Links a project to a GitHub repository.
 	*/
 	putProjectRepository(options) {
 		return (options.client ?? this.client).put({
@@ -790,7 +807,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/projects/{project_id}/github/codeowners: copies the repository's
+	* Copies the repository's
 	* CODEOWNERS so ownership can be answered without asking GitHub each time.
 	*/
 	syncCodeowners(options) {
@@ -810,7 +827,7 @@ var Github = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}/github: the issue's links,
+	* The issue's links,
 	* the commits that may have caused it, and who owns its culprit file.
 	*/
 	issue(options) {
@@ -917,7 +934,12 @@ var Github = class extends HeyApiClient {
 };
 var AlertChannels = class extends HeyApiClient {
 	/**
-	* GET /api/alert-channels
+	* Lists the channels alerts can go through.
+	*
+	* `integrations:read` sees their credentials masked, `integrations:update` in
+	* full. Holding an alert-rules permission on any project is enough for the
+	* rest, without them: choosing where a rule notifies takes a channel's name,
+	* not its secrets.
 	*/
 	list(options) {
 		return (options?.client ?? this.client).get({
@@ -936,7 +958,7 @@ var AlertChannels = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/alert-channels
+	* Creates a notification integration (webhook, Slack, email…).
 	*/
 	create(options) {
 		return (options.client ?? this.client).post({
@@ -959,8 +981,6 @@ var AlertChannels = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/integrations/preview-template
-	*
 	* Renders a Custom Webhook template against a sample payload and hands back
 	* the body that would be sent. The dashboard cannot run the template engine,
 	* so it asks while the reader types; going through the dispatcher's own
@@ -987,7 +1007,7 @@ var AlertChannels = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/alert-channels/{id}
+	* Deletes a notification integration.
 	*/
 	delete(options) {
 		return (options.client ?? this.client).delete({
@@ -1006,7 +1026,7 @@ var AlertChannels = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/alert-channels/{id}
+	* Gets one notification integration.
 	*/
 	get(options) {
 		return (options.client ?? this.client).get({
@@ -1025,7 +1045,7 @@ var AlertChannels = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PATCH /api/alert-channels/{id}
+	* Updates a notification integration.
 	*/
 	update(options) {
 		return (options.client ?? this.client).patch({
@@ -1048,7 +1068,7 @@ var AlertChannels = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/integrations/{id}/test
+	* Sends a test notification through an integration.
 	*/
 	test(options) {
 		return (options.client ?? this.client).post({
@@ -1073,7 +1093,7 @@ var AlertChannels = class extends HeyApiClient {
 };
 var Invitations = class extends HeyApiClient {
 	/**
-	* GET /api/invitations — list invitations (admin only)
+	* List invitations (needs `invitations:read`)
 	*/
 	list(options) {
 		return (options?.client ?? this.client).get({
@@ -1092,7 +1112,11 @@ var Invitations = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/invitations — create an invitation (admin only)
+	* Create an invitation (needs `invitations:create`)
+	*
+	* With `send_email: true` the invite link is also emailed. A failed send
+	* still creates the invitation, with `email_sent_at: null`, so its link can
+	* be shared by hand or the email resent.
 	*/
 	create(options) {
 		return (options.client ?? this.client).post({
@@ -1115,7 +1139,26 @@ var Invitations = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/invitations/{token} — revoke a pending invitation (admin only)
+	* Whether invitation emails can be sent (needs `invitations:read`)
+	*/
+	emailStatus(options) {
+		return (options?.client ?? this.client).get({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: zod.never().optional(),
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zInvitationsEmailStatusResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/invitations/email-status",
+			...options
+		});
+	}
+	/**
+	* Revoke a pending invitation (needs `invitations:delete`)
 	*/
 	revoke(options) {
 		return (options.client ?? this.client).delete({
@@ -1129,7 +1172,26 @@ var Invitations = class extends HeyApiClient {
 				scheme: "bearer",
 				type: "http"
 			}],
-			url: "/api/invitations/{token}",
+			url: "/api/invitations/{id}",
+			...options
+		});
+	}
+	/**
+	* Email the invite link again (needs `invitations:create`)
+	*/
+	resend(options) {
+		return (options.client ?? this.client).post({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: require_zod_gen.zInvitationsResendPath,
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zInvitationsResendResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/invitations/{id}/resend",
 			...options
 		});
 	}
@@ -1202,9 +1264,9 @@ var Oauth = class extends HeyApiClient {
 };
 var Projects = class extends HeyApiClient {
 	/**
-	* GET /api/projects - List projects with pagination
+	* List projects with pagination.
 	*
-	* Admins see every project. Non-admins see only the projects they belong to.
+	* Only the projects the caller holds a permission on.
 	*/
 	list(options) {
 		return (options?.client ?? this.client).get({
@@ -1223,10 +1285,11 @@ var Projects = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/projects - Create a new project
+	* Create a new project
 	*
-	* Any authenticated user may create a project. A non-admin creator is
-	* automatically granted the project `admin` role so they can access it.
+	* Needs `projects:create` and a permission on at least one project, because
+	* the creator's own roles extend to the new one. A token limited to chosen
+	* projects can create one, but its list does not grow to reach it.
 	*/
 	create(options) {
 		return (options.client ?? this.client).post({
@@ -1249,7 +1312,7 @@ var Projects = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/projects/{id} - Delete a project
+	* Delete a project
 	*/
 	delete(options) {
 		return (options.client ?? this.client).delete({
@@ -1268,7 +1331,7 @@ var Projects = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{id} - Get a project by ID
+	* Get a project by ID
 	*/
 	get(options) {
 		return (options.client ?? this.client).get({
@@ -1287,7 +1350,7 @@ var Projects = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PATCH /api/projects/{id} - Update a project
+	* Update a project
 	*/
 	update(options) {
 		return (options.client ?? this.client).patch({
@@ -1310,7 +1373,7 @@ var Projects = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/rate-limits - What a project without limits of its own follows
+	* What a project without limits of its own follows
 	*/
 	getRateLimits(options) {
 		return (options?.client ?? this.client).get({
@@ -1331,7 +1394,6 @@ var Projects = class extends HeyApiClient {
 };
 var Agents = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/agents/conversations
 	* Lists conversations -- traces sharing a `gen_ai.conversation.id` -- the most recently active first.
 	*/
 	conversations(options) {
@@ -1351,7 +1413,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/conversations/{conversation_id}
 	* Returns every AI span of a conversation's turns, oldest first, with its input and output.
 	*/
 	conversation(options) {
@@ -1371,7 +1432,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/duration
 	* Time-bucketed avg/p95 duration for `agent`/`ai_client` spans.
 	*/
 	duration(options) {
@@ -1391,7 +1451,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/environments
 	* The options the environment filter offers, read from the data rather than
 	* hardcoded — an installation may name its environments anything.
 	*/
@@ -1412,7 +1471,7 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/models
+	* Lists the AI models a project's agents called, with requests, tokens and latency.
 	*/
 	modelsTable(options) {
 		return (options.client ?? this.client).get({
@@ -1431,7 +1490,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/models/calls
 	* Top models by LLM call count (`gen_ai.operation.type:ai_client`).
 	*/
 	modelsCalls(options) {
@@ -1451,7 +1509,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/models/tokens
 	* Top models by total tokens used (`gen_ai.operation.type:ai_client`).
 	*/
 	modelsTokens(options) {
@@ -1471,7 +1528,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/runs
 	* Time-bucketed count of agent-run spans (`gen_ai.operation.type:agent`).
 	*/
 	runs(options) {
@@ -1491,7 +1547,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/summary
 	* Agent runs, LLM calls, tool calls, errors, tokens and latency over the
 	* selected window — the numbers the six charts cannot state outright.
 	*/
@@ -1512,7 +1567,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/tools
 	* Top tools by call count (`gen_ai.operation.type:tool`).
 	*/
 	tools(options) {
@@ -1532,7 +1586,7 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/tools/stats
+	* Lists the tools a project's agents called, with calls, errors and latency.
 	*/
 	toolsTable(options) {
 		return (options.client ?? this.client).get({
@@ -1551,7 +1605,6 @@ var Agents = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/agents/traces
 	* Paginated per-trace_id aggregate (duration, tokens, tool usage) across
 	* all AI spans sharing that trace, regardless of origin.
 	*/
@@ -1574,7 +1627,7 @@ var Agents = class extends HeyApiClient {
 };
 var AlertRules = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/alert-history
+	* Lists the alerts a project sent, newest first.
 	*/
 	listHistory(options) {
 		return (options.client ?? this.client).get({
@@ -1612,7 +1665,7 @@ var AlertRules = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/alert-rules
+	* Lists a project's alert rules.
 	*/
 	list(options) {
 		return (options.client ?? this.client).get({
@@ -1631,7 +1684,7 @@ var AlertRules = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/projects/{project_id}/alert-rules
+	* Creates an alert rule in a project.
 	*/
 	create(options) {
 		return (options.client ?? this.client).post({
@@ -1654,7 +1707,7 @@ var AlertRules = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/projects/{project_id}/alert-rules/{rule_id}
+	* Deletes an alert rule.
 	*/
 	delete(options) {
 		return (options.client ?? this.client).delete({
@@ -1673,7 +1726,7 @@ var AlertRules = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/alert-rules/{rule_id}
+	* Gets one alert rule.
 	*/
 	get(options) {
 		return (options.client ?? this.client).get({
@@ -1692,7 +1745,7 @@ var AlertRules = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PATCH /api/projects/{project_id}/alert-rules/{rule_id}
+	* Updates an alert rule.
 	*/
 	update(options) {
 		return (options.client ?? this.client).patch({
@@ -1717,7 +1770,6 @@ var AlertRules = class extends HeyApiClient {
 };
 var Events = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/attachments/{attachment_id}
 	* Downloads an attachment. Only a real image is served inline; anything
 	* else, whatever type it claims, is a download that never runs.
 	*/
@@ -1757,7 +1809,6 @@ var Events = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}/events
 	* Lists events for an issue with cursor-based pagination
 	*/
 	list(options) {
@@ -1777,7 +1828,6 @@ var Events = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}/events/{event_id}
 	* Gets a single event with full data
 	*/
 	get(options) {
@@ -1797,7 +1847,6 @@ var Events = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}/events/{event_id}/attachments
 	* Lists the files sent with an event, such as a feedback's screenshot.
 	*/
 	listAttachments(options) {
@@ -1819,7 +1868,6 @@ var Events = class extends HeyApiClient {
 };
 var Environments = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/environments
 	* Lists the environments a project's issues have been seen in, by name.
 	*/
 	list(options) {
@@ -1841,7 +1889,7 @@ var Environments = class extends HeyApiClient {
 };
 var Stats = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/events/stats
+	* Counts a project's events over time, bucketed for a chart.
 	*/
 	getEventTimeseries(options) {
 		return (options.client ?? this.client).get({
@@ -1860,7 +1908,7 @@ var Stats = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/stats/summary
+	* Headline figures for a project's overview: events, new and open issues.
 	*/
 	getSummary(options) {
 		return (options.client ?? this.client).get({
@@ -1881,7 +1929,6 @@ var Stats = class extends HeyApiClient {
 };
 var Feedback = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/feedback
 	* Lists user feedback with what each user submitted. Every feedback is an
 	* issue of category `feedback`; spam is a muted one.
 	*/
@@ -1904,7 +1951,7 @@ var Feedback = class extends HeyApiClient {
 };
 var Issues = class extends HeyApiClient {
 	/**
-	* DELETE /api/projects/{project_id}/issues  (bulk delete by ids or filter)
+	* Deletes many issues at once, selected by id or by filter.
 	*/
 	bulkDelete(options) {
 		return (options.client ?? this.client).delete({
@@ -1927,7 +1974,6 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues
 	* Lists issues for a project with offset-based pagination
 	*/
 	list(options) {
@@ -1947,7 +1993,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/projects/{project_id}/issues  (bulk mutate)
+	* Sets the status or priority of many issues at once, by id.
 	*/
 	bulkUpdate(options) {
 		return (options.client ?? this.client).put({
@@ -1970,7 +2016,6 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/projects/{project_id}/issues/{issue_id}
 	* Hard-deletes an issue and all associated events
 	*/
 	delete(options) {
@@ -1990,7 +2035,6 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}
 	* Gets a single issue by ID
 	*/
 	get(options) {
@@ -2010,7 +2054,6 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PATCH /api/projects/{project_id}/issues/{issue_id}
 	* Updates issue state (resolve, mute, etc.)
 	*/
 	update(options) {
@@ -2034,7 +2077,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /{issue_id}/activity — chronological activity log (incl. comments).
+	* Chronological activity log (incl. comments).
 	*/
 	getActivity(options) {
 		return (options.client ?? this.client).get({
@@ -2053,7 +2096,6 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}/aggregates
 	* Returns the unique user count and top tags for the issue.
 	*/
 	getAggregates(options) {
@@ -2073,7 +2115,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /{issue_id}/bookmark — set/clear the per-user bookmark.
+	* Set/clear the per-user bookmark.
 	*/
 	setBookmark(options) {
 		return (options.client ?? this.client).put({
@@ -2096,7 +2138,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /{issue_id}/comments — add a note.
+	* Add a note.
 	*/
 	createComment(options) {
 		return (options.client ?? this.client).post({
@@ -2119,7 +2161,6 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}/hashes
 	* Lists the grouping hashes that map to an issue.
 	*/
 	getHashes(options) {
@@ -2139,7 +2180,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /{issue_id}/seen — mark the issue as seen by the current user.
+	* Mark the issue as seen by the current user.
 	*/
 	markSeen(options) {
 		return (options.client ?? this.client).post({
@@ -2158,7 +2199,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /{issue_id}/stats?window=24h|30d — zero-filled event-count timeseries.
+	* Zero-filled event-count timeseries.
 	*/
 	getStats(options) {
 		return (options.client ?? this.client).get({
@@ -2177,7 +2218,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /{issue_id}/subscription — set/clear the per-user subscription.
+	* Set/clear the per-user subscription.
 	*/
 	setSubscription(options) {
 		return (options.client ?? this.client).put({
@@ -2200,7 +2241,6 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/issues/{issue_id}/tags/{key}
 	* Lists the distinct values (with counts) for a tag key across the issue.
 	*/
 	getTagValues(options) {
@@ -2220,7 +2260,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /{issue_id}/user-reports — list user feedback for an issue.
+	* List user feedback for an issue.
 	*/
 	listUserReports(options) {
 		return (options.client ?? this.client).get({
@@ -2239,7 +2279,7 @@ var Issues = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /{issue_id}/user-reports — attach user feedback to an issue.
+	* Attach user feedback to an issue.
 	*/
 	createUserReport(options) {
 		return (options.client ?? this.client).post({
@@ -2264,7 +2304,6 @@ var Issues = class extends HeyApiClient {
 };
 var Logs = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/logs
 	* Lists logs for a project with offset-based pagination (newest first by
 	* log timestamp), optionally filtered by level, trace id, message and window.
 	*/
@@ -2285,7 +2324,6 @@ var Logs = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/logs/volume
 	* Counts a project's logs per level over time, with the list's filters.
 	*/
 	volume(options) {
@@ -2305,7 +2343,6 @@ var Logs = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/logs/{log_id}
 	* Returns one of a project's logs, wherever it falls in the list.
 	*/
 	get(options) {
@@ -2327,7 +2364,7 @@ var Logs = class extends HeyApiClient {
 };
 var Members = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/members
+	* Lists everyone holding a role on the project, with those roles; personal permissions are not roles.
 	*/
 	list(options) {
 		return (options.client ?? this.client).get({
@@ -2346,7 +2383,7 @@ var Members = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/projects/{project_id}/members
+	* Sets the roles a user holds on the project.
 	*/
 	upsert(options) {
 		return (options.client ?? this.client).put({
@@ -2369,7 +2406,26 @@ var Members = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/projects/{project_id}/members/{user_id}
+	* Lists the people and the roles the caller can give on the project, so it takes neither `users:read` nor `roles:read` to manage its members.
+	*/
+	candidates(options) {
+		return (options.client ?? this.client).get({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: require_zod_gen.zMembersCandidatesPath,
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zMembersCandidatesResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/projects/{project_id}/members/candidates",
+			...options
+		});
+	}
+	/**
+	* Removes the roles a user holds on this project; roles on all projects and personal permissions stay.
 	*/
 	remove(options) {
 		return (options.client ?? this.client).delete({
@@ -2390,7 +2446,6 @@ var Members = class extends HeyApiClient {
 };
 var Monitors = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/monitor-stats
 	* Counts the check-ins of a project's monitors by status over a window, bucket by bucket.
 	*/
 	stats(options) {
@@ -2410,7 +2465,7 @@ var Monitors = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/monitors
+	* Lists a project's cron monitors.
 	*/
 	list(options) {
 		return (options.client ?? this.client).get({
@@ -2429,7 +2484,7 @@ var Monitors = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/projects/{project_id}/monitors
+	* Creates a cron monitor in a project.
 	*/
 	create(options) {
 		return (options.client ?? this.client).post({
@@ -2452,7 +2507,7 @@ var Monitors = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/projects/{project_id}/monitors/{slug}
+	* Deletes a cron monitor and its check-ins.
 	*/
 	delete(options) {
 		return (options.client ?? this.client).delete({
@@ -2471,7 +2526,7 @@ var Monitors = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/monitors/{slug}
+	* Gets one cron monitor.
 	*/
 	get(options) {
 		return (options.client ?? this.client).get({
@@ -2490,7 +2545,7 @@ var Monitors = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/projects/{project_id}/monitors/{slug}
+	* Updates a cron monitor.
 	*/
 	update(options) {
 		return (options.client ?? this.client).put({
@@ -2513,7 +2568,7 @@ var Monitors = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/monitors/{slug}/checkins
+	* Lists a cron monitor's check-ins, newest first.
 	*/
 	listCheckins(options) {
 		return (options.client ?? this.client).get({
@@ -2534,7 +2589,7 @@ var Monitors = class extends HeyApiClient {
 };
 var Sessions = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/sessions/stats
+	* Session counts by release, for release health.
 	*/
 	getStats(options) {
 		return (options.client ?? this.client).get({
@@ -2553,7 +2608,7 @@ var Sessions = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/sessions/summary
+	* Totals and crash-free rates for a project's sessions.
 	*/
 	getSummary(options) {
 		return (options.client ?? this.client).get({
@@ -2572,7 +2627,7 @@ var Sessions = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/sessions/timeseries
+	* Session counts over time, bucketed for a chart.
 	*/
 	getTimeseries(options) {
 		return (options.client ?? this.client).get({
@@ -2593,7 +2648,6 @@ var Sessions = class extends HeyApiClient {
 };
 var Spans = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/spans
 	* Lists spans for a project with offset-based pagination (newest by
 	* start_timestamp first), optionally filtered by op/status/trace_id.
 	* Returns spans regardless of origin — standalone or extracted from a
@@ -2616,7 +2670,6 @@ var Spans = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/spans/{span_id}
 	* Returns one span together with its attributes and tags — the `gen_ai.*`
 	* payload (prompts, responses, tool arguments and results) that the list
 	* response deliberately omits, since `spans.data` is untrimmed and a whole
@@ -2641,7 +2694,6 @@ var Spans = class extends HeyApiClient {
 };
 var Transactions = class extends HeyApiClient {
 	/**
-	* GET /api/projects/{project_id}/transactions
 	* Lists transactions for a project with offset-based pagination (newest first).
 	*/
 	list(options) {
@@ -2661,7 +2713,6 @@ var Transactions = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/transactions/stats
 	* Returns paginated aggregate performance stats (count, time spent, p50/p95/p99
 	* latency, failure rate) grouped by transaction name + op, the most time spent
 	* first unless `sort` asks otherwise.
@@ -2683,7 +2734,6 @@ var Transactions = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/transactions/stats/group?name=&op=
 	* Returns the aggregate stats for a single transaction group — a direct lookup
 	* so the summary header works regardless of how many groups the project has.
 	*/
@@ -2726,7 +2776,6 @@ var Transactions = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/transactions/{transaction_id}
 	* Returns a single transaction with its full Sentry payload (spans, contexts,
 	* measurements, tags) for the performance detail view.
 	*/
@@ -2747,7 +2796,6 @@ var Transactions = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/projects/{project_id}/transactions/{transaction_id}/spans
 	* Returns the indexed spans extracted from a transaction, ordered for the
 	* waterfall view (by start_timestamp ascending).
 	*/
@@ -2768,10 +2816,97 @@ var Transactions = class extends HeyApiClient {
 		});
 	}
 };
-var Schedules = class extends HeyApiClient {
+var Roles = class extends HeyApiClient {
+	/**
+	* Lists every role with its permissions and how often it is assigned.
+	*/
+	list(options) {
+		return (options?.client ?? this.client).get({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: zod.never().optional(),
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zRolesListResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/roles",
+			...options
+		});
+	}
 	/**
-	* POST /api/schedules/preview
+	* Creates a role from permissions the caller holds themselves.
+	*/
+	create(options) {
+		return (options.client ?? this.client).post({
+			requestValidator: async (data) => await zod.object({
+				body: require_zod_gen.zRolesCreateBody,
+				path: zod.never().optional(),
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zRolesCreateResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/roles",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Deletes a role nobody holds.
+	*/
+	delete(options) {
+		return (options.client ?? this.client).delete({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: require_zod_gen.zRolesDeletePath,
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zRolesDeleteResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/roles/{id}",
+			...options
+		});
+	}
+	/**
+	* Replaces a role's name, description and permissions.
 	*
+	* The caller must hold both the permissions being added and those being
+	* removed, so nobody strips a role of something they could not give back.
+	*/
+	update(options) {
+		return (options.client ?? this.client).put({
+			requestValidator: async (data) => await zod.object({
+				body: require_zod_gen.zRolesUpdateBody,
+				path: require_zod_gen.zRolesUpdatePath,
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zRolesUpdateResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/roles/{id}",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
+var Schedules = class extends HeyApiClient {
+	/**
 	* Validates a schedule and lists its next five runs from now, so no client
 	* ever parses a crontab itself.
 	*/
@@ -2798,7 +2933,8 @@ var Schedules = class extends HeyApiClient {
 };
 var Settings = class extends HeyApiClient {
 	/**
-	* Whether the MCP endpoint at `/mcp` is on.
+	* Whether the MCP endpoint at `/mcp` is on. Open to every member: it is what
+	* they point their own assistant at.
 	*/
 	getMcp(options) {
 		return (options?.client ?? this.client).get({
@@ -2817,7 +2953,7 @@ var Settings = class extends HeyApiClient {
 		});
 	}
 	/**
-	* Turns the MCP endpoint at `/mcp` on or off. Instance admins only.
+	* Turns the MCP endpoint at `/mcp` on or off (needs `mcp:update`).
 	*/
 	updateMcp(options) {
 		return (options.client ?? this.client).put({
@@ -2842,7 +2978,7 @@ var Settings = class extends HeyApiClient {
 };
 var Storage = class extends HeyApiClient {
 	/**
-	* GET /api/storage/age — rows per age bucket, per project and kind.
+	* Rows per age bucket, per project and kind.
 	*/
 	getAge(options) {
 		return (options?.client ?? this.client).get({
@@ -2861,7 +2997,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/storage/cleanup — starts deleting old data and the issues it
+	* Starts deleting old data and the issues it
 	* empties. Returns at once: the purge runs detached, in batches, and
 	* `GET /api/storage/cleanup/status` reports its progress.
 	*/
@@ -2886,7 +3022,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/storage/cleanup/preview — dry-run count, mutates nothing.
+	* Dry-run count, mutates nothing.
 	*/
 	previewCleanup(options) {
 		return (options.client ?? this.client).post({
@@ -2909,7 +3045,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/storage/cleanup/status — progress of the running cleanup, or the
+	* Progress of the running cleanup, or the
 	* outcome of the last one.
 	*/
 	getCleanupStatus(options) {
@@ -2929,7 +3065,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/storage/compaction — whether the database file shrinks when data
+	* Whether the database file shrinks when data
 	* is deleted, and the disk a one-off compaction needs.
 	*/
 	getCompaction(options) {
@@ -2949,7 +3085,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/storage/compaction — rewrites a SQLite file created before
+	* Rewrites a SQLite file created before
 	* incremental mode, so it gives freed space back from then on. Writes wait
 	* while it runs; follow it with `GET /api/storage/cleanup/status`.
 	*/
@@ -2970,7 +3106,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/storage/projects — per-project counts and estimated weight.
+	* Per-project counts and estimated weight.
 	*/
 	getProjects(options) {
 		return (options?.client ?? this.client).get({
@@ -2989,7 +3125,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/storage/retention
+	* Gets the retention settings and the cleanup schedule.
 	*/
 	getRetention(options) {
 		return (options?.client ?? this.client).get({
@@ -3008,7 +3144,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PUT /api/storage/retention
+	* Updates the retention settings; the next cleanup is scheduled at once.
 	*/
 	updateRetention(options) {
 		return (options.client ?? this.client).put({
@@ -3031,7 +3167,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/storage/retention/preview — what saving these settings would
+	* What saving these settings would
 	* delete on the next cleanup, without saving or deleting anything.
 	*/
 	previewRetention(options) {
@@ -3055,7 +3191,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/storage/retention/run — enforces the saved retention now,
+	* Enforces the saved retention now,
 	* without waiting for the schedule. Follow it with the cleanup status.
 	*/
 	runRetention(options) {
@@ -3075,7 +3211,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/storage/source-maps/gc — delete orphaned source maps (DB + disk).
+	* Delete orphaned source maps (DB + disk).
 	*/
 	gcSourceMaps(options) {
 		return (options?.client ?? this.client).post({
@@ -3094,7 +3230,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/storage/source-maps/gc/preview — dry-run orphan count, deletes nothing.
+	* Dry-run orphan count, deletes nothing.
 	*/
 	previewSourceMapGc(options) {
 		return (options?.client ?? this.client).post({
@@ -3113,7 +3249,7 @@ var Storage = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/storage/summary — row counts, DB size, and source-map weight.
+	* Row counts, DB size, and source-map weight.
 	*/
 	getSummary(options) {
 		return (options?.client ?? this.client).get({
@@ -3134,7 +3270,7 @@ var Storage = class extends HeyApiClient {
 };
 var Team = class extends HeyApiClient {
 	/**
-	* GET /api/team — list all users (admin only)
+	* List all users (needs `users:read`)
 	*/
 	list(options) {
 		return (options?.client ?? this.client).get({
@@ -3153,7 +3289,7 @@ var Team = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/team/{user_id} — remove a user from the instance (admin only)
+	* Remove a user from the instance (needs `users:delete`)
 	*/
 	deleteUser(options) {
 		return (options.client ?? this.client).delete({
@@ -3172,7 +3308,7 @@ var Team = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PATCH /api/team/{user_id}/role — change a user's global role (admin only)
+	* Change a user's global role (needs `users:update`)
 	*/
 	updateRole(options) {
 		return (options.client ?? this.client).patch({
@@ -3197,7 +3333,7 @@ var Team = class extends HeyApiClient {
 };
 var Telemetry = class extends HeyApiClient {
 	/**
-	* GET /api/telemetry/preview
+	* Shows the exact anonymous telemetry report this instance would send.
 	*/
 	preview(options) {
 		return (options?.client ?? this.client).get({
@@ -3218,9 +3354,10 @@ var Telemetry = class extends HeyApiClient {
 };
 var Tokens = class extends HeyApiClient {
 	/**
-	* GET /api/tokens - List tokens (masked)
+	* List tokens (masked)
 	*
-	* Admins see all tokens; non-admins see only the tokens they own.
+	* Everyone sees their own tokens; `api-tokens:read` sees every token. A token
+	* limited to other permissions sees none: it must not reach its owner's others.
 	*/
 	list(options) {
 		return (options?.client ?? this.client).get({
@@ -3239,7 +3376,10 @@ var Tokens = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /api/tokens - Create a new token (scoped to the acting user)
+	* Create a new token (from a signed-in session only)
+	*
+	* A token cannot create tokens: a limited or expiring one could otherwise
+	* mint itself a way out of its limits.
 	*/
 	create(options) {
 		return (options.client ?? this.client).post({
@@ -3262,9 +3402,9 @@ var Tokens = class extends HeyApiClient {
 		});
 	}
 	/**
-	* DELETE /api/tokens/{id} - Revoke a token
+	* Revoke a token
 	*
-	* Admins may revoke any token; non-admins may only revoke their own.
+	* Everyone may revoke their own; `api-tokens:delete` revokes any.
 	*/
 	delete(options) {
 		return (options.client ?? this.client).delete({
@@ -3283,10 +3423,10 @@ var Tokens = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /api/tokens/{id} - Reveal full token value
+	* Token details, masked
 	*
-	* Returns the complete token string. Admins may view any token;
-	* non-admins may only view their own.
+	* Tokens are stored hashed, so the full value is only ever shown on
+	* creation. Everyone may view their own; `api-tokens:read` views any.
 	*/
 	get(options) {
 		return (options.client ?? this.client).get({
@@ -3305,9 +3445,55 @@ var Tokens = class extends HeyApiClient {
 		});
 	}
 };
+var Users = class extends HeyApiClient {
+	/**
+	* Lists the roles a user holds, on the instance and on each project.
+	*/
+	assignments(options) {
+		return (options.client ?? this.client).get({
+			requestValidator: async (data) => await zod.object({
+				body: zod.never().optional(),
+				path: require_zod_gen.zUsersAssignmentsPath,
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zUsersAssignmentsResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/users/{id}/assignments",
+			...options
+		});
+	}
+	/**
+	* Replaces every role and personal permission a user holds.
+	*
+	* The caller must hold every role being given or taken away, on the scope
+	* it applies to.
+	*/
+	setAssignments(options) {
+		return (options.client ?? this.client).put({
+			requestValidator: async (data) => await zod.object({
+				body: require_zod_gen.zUsersSetAssignmentsBody,
+				path: require_zod_gen.zUsersSetAssignmentsPath,
+				query: zod.never().optional()
+			}).parseAsync(data),
+			responseValidator: async (data) => await require_zod_gen.zUsersSetAssignmentsResponse.parseAsync(data),
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/users/{id}/assignments",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
 var Auth = class extends HeyApiClient {
 	/**
-	* POST /auth/accept-invitation
 	* Accept a pending invitation: creates the user (with the invite's email + role) and logs in.
 	*/
 	acceptInvitation(options) {
@@ -3327,7 +3513,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /auth/invitation/{token}
 	* Returns the invitation's details if it is still acceptable (for the accept page).
 	*/
 	getInvitation(options) {
@@ -3343,7 +3528,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /auth/login
 	* Authenticate user and create session
 	*/
 	login(options) {
@@ -3363,7 +3547,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /auth/logout
 	* Clear session
 	*/
 	logout(options) {
@@ -3376,7 +3559,7 @@ var Auth = class extends HeyApiClient {
 			responseValidator: async (data) => await require_zod_gen.zAuthLogoutResponse.parseAsync(data),
 			security: [{
 				in: "cookie",
-				name: "session",
+				name: "rustrak_session",
 				type: "apiKey"
 			}],
 			url: "/auth/logout",
@@ -3384,7 +3567,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /auth/me
 	* Get current authenticated user
 	*/
 	getCurrentUser(options) {
@@ -3397,7 +3579,7 @@ var Auth = class extends HeyApiClient {
 			responseValidator: async (data) => await require_zod_gen.zAuthGetCurrentUserResponse.parseAsync(data),
 			security: [{
 				in: "cookie",
-				name: "session",
+				name: "rustrak_session",
 				type: "apiKey"
 			}],
 			url: "/auth/me",
@@ -3405,7 +3587,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* PATCH /auth/me
 	* Update the current user's presentation preferences
 	*/
 	updateCurrentUser(options) {
@@ -3418,7 +3599,7 @@ var Auth = class extends HeyApiClient {
 			responseValidator: async (data) => await require_zod_gen.zAuthUpdateCurrentUserResponse.parseAsync(data),
 			security: [{
 				in: "cookie",
-				name: "session",
+				name: "rustrak_session",
 				type: "apiKey"
 			}],
 			url: "/auth/me",
@@ -3430,8 +3611,8 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /auth/me/password
-	* Change the current user's password
+	* Change the current user's password. Every other session of the user ends;
+	* this one continues under a new id.
 	*/
 	changePassword(options) {
 		return (options.client ?? this.client).post({
@@ -3443,7 +3624,7 @@ var Auth = class extends HeyApiClient {
 			responseValidator: async (data) => await require_zod_gen.zAuthChangePasswordResponse.parseAsync(data),
 			security: [{
 				in: "cookie",
-				name: "session",
+				name: "rustrak_session",
 				type: "apiKey"
 			}],
 			url: "/auth/me/password",
@@ -3455,26 +3636,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /auth/register
-	* Registration is invite-only — always rejected. Use `/auth/accept-invitation`.
-	*/
-	register(options) {
-		return (options.client ?? this.client).post({
-			requestValidator: async (data) => await zod.object({
-				body: require_zod_gen.zAuthRegisterBody,
-				path: zod.never().optional(),
-				query: zod.never().optional()
-			}).parseAsync(data),
-			url: "/auth/register",
-			...options,
-			headers: {
-				"Content-Type": "application/json",
-				...options.headers
-			}
-		});
-	}
-	/**
-	* GET /auth/sso/callback
 	* Validate the provider response, resolve or provision the local account, and
 	* establish the normal Rustrak session.
 	*/
@@ -3491,7 +3652,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /auth/sso/config
 	* Public, non-sensitive information used to render the login page.
 	*/
 	ssoConfig(options) {
@@ -3507,7 +3667,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* GET /auth/sso/link
 	* The account an SSO login matched, shown while its owner confirms.
 	*/
 	ssoLink(options) {
@@ -3523,7 +3682,6 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /auth/sso/link
 	* Link the pending SSO identity to its account once the account's password
 	* is given, and sign in. A wrong password keeps the link pending for a retry.
 	*/
@@ -3544,9 +3702,8 @@ var Auth = class extends HeyApiClient {
 		});
 	}
 	/**
-	* POST /auth/sso/start
 	* Create a one-time OIDC authorization request and retain its protections in
-	* the encrypted session cookie.
+	* the session.
 	*/
 	ssoStart(options) {
 		return (options?.client ?? this.client).post({
@@ -3616,7 +3773,7 @@ var Health = class extends HeyApiClient {
 				type: "http"
 			}, {
 				in: "cookie",
-				name: "session",
+				name: "rustrak_session",
 				type: "apiKey"
 			}],
 			url: "/health/version",
@@ -3646,6 +3803,10 @@ var Rustrak = class Rustrak extends HeyApiClient {
 	get releases() {
 		return this._releases ??= new Releases({ client: this.client });
 	}
+	_access;
+	get access() {
+		return this._access ??= new Access({ client: this.client });
+	}
 	_github;
 	get github() {
 		return this._github ??= new Github({ client: this.client });
@@ -3718,6 +3879,10 @@ var Rustrak = class Rustrak extends HeyApiClient {
 	get transactions() {
 		return this._transactions ??= new Transactions({ client: this.client });
 	}
+	_roles;
+	get roles() {
+		return this._roles ??= new Roles({ client: this.client });
+	}
 	_schedules;
 	get schedules() {
 		return this._schedules ??= new Schedules({ client: this.client });
@@ -3742,6 +3907,10 @@ var Rustrak = class Rustrak extends HeyApiClient {
 	get tokens() {
 		return this._tokens ??= new Tokens({ client: this.client });
 	}
+	_users;
+	get users() {
+		return this._users ??= new Users({ client: this.client });
+	}
 	_auth;
 	get auth() {
 		return this._auth ??= new Auth({ client: this.client });
@@ -3751,6 +3920,7 @@ var Rustrak = class Rustrak extends HeyApiClient {
 		return this._health ??= new Health({ client: this.client });
 	}
 };
+exports.Access = Access;
 exports.Agents = Agents;
 exports.AlertChannels = AlertChannels;
 exports.AlertRules = AlertRules;
@@ -3769,6 +3939,7 @@ exports.Monitors = Monitors;
 exports.Oauth = Oauth;
 exports.Projects = Projects;
 exports.Releases = Releases;
+exports.Roles = Roles;
 exports.Rustrak = Rustrak;
 exports.Schedules = Schedules;
 exports.Sentry = Sentry;
@@ -3782,5 +3953,6 @@ exports.Team = Team;
 exports.Telemetry = Telemetry;
 exports.Tokens = Tokens;
 exports.Transactions = Transactions;
+exports.Users = Users;
 
 //# sourceMappingURL=sdk.gen.cjs.map