chore: depend on @seamless-auth/types 0.34.0

.changeset/clients-pkce-nonce.md

@@ -2,4 +2,4 @@
 "seamless-cli": minor
 ---
 
-`seamless clients` shows whether an application requires PKCE and the nonce, and `create` and `update` accept `--pkce`/`--no-pkce` and `--nonce`/`--no-nonce`. Only a confidential client can turn PKCE off, and the nonce can be turned off only once PKCE is off. An application with both off relies only on `state` and client authentication against authorization code injection, so `list`, `get`, `create` and `update` warn about it. Pins `@seamless-auth/types` 0.34.0-next.4.
+`seamless clients` shows whether an application requires PKCE and the nonce, and `create` and `update` accept `--pkce`/`--no-pkce` and `--nonce`/`--no-nonce`. Only a confidential client can turn PKCE off, and the nonce can be turned off only once PKCE is off. An application with both off relies only on `state` and client authentication against authorization code injection, so `list`, `get`, `create` and `update` warn about it. Pins `@seamless-auth/types` 0.34.0.

.changeset/hosted-ui-branding.md

@@ -2,4 +2,4 @@
 "seamless-cli": minor
 ---
 
-Set hosted page branding from the CLI (#320). `seamless config hosted-ui get|set|reset` (alias `branding`) reads the instance's `hosted_ui` system config, merges the fields you pass (`--app-name`, `--logo`, `--font-family`, and the six color flags) into the current branding, validates the result with `HostedUiSchema` from `@seamless-auth/types`, and writes the whole object back, since the instance replaces it rather than merging. `reset` removes named fields or, after a confirmation (`--force` to skip), clears all branding. `hosted_ui` is also writable as a whole value with `config set hosted_ui '<json>'` or `config set hosted_ui null`. The logo must be an https URL where the image is hosted: the instance does not store uploaded files, so a local path is refused with that message. Needs auth server v0.21 or later; an older instance reports that it does not support branding. Bumps `@seamless-auth/types` to 0.34.0-next.2 and lists the four new OpenID Provider keys as not yet writable (#332).
+Set hosted page branding from the CLI (#320). `seamless config hosted-ui get|set|reset` (alias `branding`) reads the instance's `hosted_ui` system config, merges the fields you pass (`--app-name`, `--logo`, `--font-family`, and the six color flags) into the current branding, validates the result with `HostedUiSchema` from `@seamless-auth/types`, and writes the whole object back, since the instance replaces it rather than merging. `reset` removes named fields or, after a confirmation (`--force` to skip), clears all branding. `hosted_ui` is also writable as a whole value with `config set hosted_ui '<json>'` or `config set hosted_ui null`. The logo must be an https URL where the image is hosted: the instance does not store uploaded files, so a local path is refused with that message. Needs auth server v0.21 or later; an older instance reports that it does not support branding. Bumps `@seamless-auth/types` to 0.34.0 and lists the four new OpenID Provider keys as not yet writable (#332).

.changeset/oauth-provider-issuer.md

@@ -2,4 +2,4 @@
 "seamless-cli": minor
 ---
 
-Configure an OAuth provider from its issuer. `seamless config oauth-providers add` and `update` take `--issuer <url>`, and a provider with an issuer can leave out `authorizationUrl`, `tokenUrl`, `userInfoUrl`, and `jwksUri`: the instance reads the missing ones from the issuer's `/.well-known/openid-configuration`. Without an issuer, `add` refuses before sending anything and names the missing endpoints. The new `seamless config oauth-providers refresh <id>` (alias `discover`) asks the instance to read the discovery document again and drop its cached signing keys, then prints the endpoints sign-in will use (`--json` for the provider object); like other provider writes it steps up when the instance asks. `oauth-providers list` shows a provider's issuer. Needs auth server v0.21 or later. Bumps `@seamless-auth/types` to 0.34.0-next.3, which also adds the `oidc_account_notice_sent` and `oidc_account_notice_failed` auth event types.
+Configure an OAuth provider from its issuer. `seamless config oauth-providers add` and `update` take `--issuer <url>`, and a provider with an issuer can leave out `authorizationUrl`, `tokenUrl`, `userInfoUrl`, and `jwksUri`: the instance reads the missing ones from the issuer's `/.well-known/openid-configuration`. Without an issuer, `add` refuses before sending anything and names the missing endpoints. The new `seamless config oauth-providers refresh <id>` (alias `discover`) asks the instance to read the discovery document again and drop its cached signing keys, then prints the endpoints sign-in will use (`--json` for the provider object); like other provider writes it steps up when the instance asks. `oauth-providers list` shows a provider's issuer. Needs auth server v0.21 or later. Bumps `@seamless-auth/types` to 0.34.0, which also adds the `oidc_account_notice_sent` and `oidc_account_notice_failed` auth event types.

.changeset/oidc-provider-config-keys.md

@@ -2,4 +2,4 @@
 "seamless-cli": minor
 ---
 
-Write the OpenID Provider config keys (#332). `oidc_provider_enabled`, `oidc_issuer`, `allow_client_secrets`, and `third_party_clients_enabled` are now writable with `seamless config set` and `config apply`. `config set` checks their values before sending: the three switches take `true` or `false`, and `oidc_issuer` takes a URL, or `null` to clear it. `seamless config --help` documents them: the instance refuses to enable the provider until `oidc_issuer` is set, `allow_client_secrets` enables the weaker shared-secret client authentication (and `seamless clients` refuses shared-secret clients until it is on), and third-party clients need `third_party_clients_enabled`. Needs auth server v0.21.0 or later, whose strict patch schema is the first to accept these keys. Bumps `@seamless-auth/types` to 0.34.0-next.3.
+Write the OpenID Provider config keys (#332). `oidc_provider_enabled`, `oidc_issuer`, `allow_client_secrets`, and `third_party_clients_enabled` are now writable with `seamless config set` and `config apply`. `config set` checks their values before sending: the three switches take `true` or `false`, and `oidc_issuer` takes a URL, or `null` to clear it. `seamless config --help` documents them: the instance refuses to enable the provider until `oidc_issuer` is set, `allow_client_secrets` enables the weaker shared-secret client authentication (and `seamless clients` refuses shared-secret clients until it is on), and third-party clients need `third_party_clients_enabled`. Needs auth server v0.21.0 or later, whose strict patch schema is the first to accept these keys. Bumps `@seamless-auth/types` to 0.34.0.

.changeset/types-0-34-0.md

@@ -0,0 +1,5 @@
+---
+"seamless-cli": patch
+---
+
+Depend on `@seamless-auth/types` `^0.34.0`, the stable release, instead of the 0.34.0 prerelease.

package.json

@@ -54,7 +54,7 @@
   "dependencies": {
     "@clack/prompts": "^1.0.1",
     "@napi-rs/keyring": "^1.3.0",
-    "@seamless-auth/types": "0.34.0-next.4",
+    "@seamless-auth/types": "^0.34.0",
     "adm-zip": "^0.6.1",
     "kleur": "^4.1.5",
     "zod": "^4.6.5"