@absolutejs/auth 0.69.4 → 0.69.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (110) hide show
  1. package/dist/abuse/captcha.d.ts +11 -0
  2. package/dist/abuse/config.d.ts +29 -0
  3. package/dist/adaptive/config.d.ts +34 -0
  4. package/dist/adaptive/fingerprint.d.ts +2 -0
  5. package/dist/adaptive/inMemoryStores.d.ts +3 -0
  6. package/dist/adaptive/postgresStores.d.ts +245 -0
  7. package/dist/adaptive/types.d.ts +62 -0
  8. package/dist/agents/idJag.d.ts +49 -0
  9. package/dist/agents/inMemoryStores.d.ts +4 -0
  10. package/dist/agents/index.d.ts +13 -0
  11. package/dist/agents/oidcAdapter.d.ts +20 -0
  12. package/dist/agents/postgresStores.d.ts +1176 -0
  13. package/dist/agents/registrationClient.d.ts +50 -0
  14. package/dist/apikeys/inMemoryStores.d.ts +4 -0
  15. package/dist/apikeys/postgresStores.d.ts +359 -0
  16. package/dist/audit/export.d.ts +2 -0
  17. package/dist/audit/inMemoryAuditStore.d.ts +2 -0
  18. package/dist/audit/integrity.d.ts +19 -0
  19. package/dist/audit/postgresAuditStore.d.ts +116 -0
  20. package/dist/audit/siem.d.ts +11 -0
  21. package/dist/cli/import/auth0.d.ts +2 -0
  22. package/dist/cli/import/clerk.d.ts +2 -0
  23. package/dist/cli/import/index.d.ts +10 -0
  24. package/dist/cli/import/lucia.d.ts +2 -0
  25. package/dist/cli/import/nextauth.d.ts +2 -0
  26. package/dist/cli/import/supabase.d.ts +2 -0
  27. package/dist/cli/import/types.d.ts +27 -0
  28. package/dist/cli/migrate.d.ts +2 -0
  29. package/dist/client/components/react/SignIn.d.ts +32 -0
  30. package/dist/client/components/react/SignUp.d.ts +29 -0
  31. package/dist/client/components/react/UserButton.d.ts +36 -0
  32. package/dist/client/createAuthClient.d.ts +311 -0
  33. package/dist/client/index.d.ts +6 -0
  34. package/dist/client/mobile.d.ts +87 -0
  35. package/dist/client/passkeyHelpers.d.ts +19 -0
  36. package/dist/client/react.d.ts +87 -0
  37. package/dist/client/runtimeTransport.d.ts +3 -0
  38. package/dist/client/sessionExpiry.d.ts +37 -0
  39. package/dist/client/solid.d.ts +86 -0
  40. package/dist/client/svelte.d.ts +86 -0
  41. package/dist/client/vue.d.ts +88 -0
  42. package/dist/compliance/redaction.d.ts +8 -0
  43. package/dist/fga/config.d.ts +53 -0
  44. package/dist/fga/inMemoryStores.d.ts +3 -0
  45. package/dist/fga/postgresStores.d.ts +116 -0
  46. package/dist/fga/redisCheckCache.d.ts +11 -0
  47. package/dist/fga/schema.d.ts +2 -0
  48. package/dist/fga/types.d.ts +28 -0
  49. package/dist/fingerprint-client/index.d.ts +26 -0
  50. package/dist/htmx/index.d.ts +2 -0
  51. package/dist/index.d.ts +4042 -0
  52. package/dist/linkedProviders/index.d.ts +3 -0
  53. package/dist/lockout/inMemoryLockoutStore.d.ts +2 -0
  54. package/dist/lockout/postgresLockoutStore.d.ts +71 -0
  55. package/dist/lockout/redisLockoutStore.d.ts +3 -0
  56. package/dist/manifest.d.ts +19 -0
  57. package/dist/manifest.json +386 -0
  58. package/dist/mfa/postgresMfaStore.d.ts +266 -0
  59. package/dist/migrations/generate.d.ts +2 -0
  60. package/dist/migrations/index.d.ts +6 -0
  61. package/dist/migrations/runner.d.ts +22 -0
  62. package/dist/migrations/types.d.ts +14 -0
  63. package/dist/oidc/clientIdMetadata.d.ts +28 -0
  64. package/dist/oidc/inMemoryStores.d.ts +12 -0
  65. package/dist/oidc/inMemoryVciStores.d.ts +3 -0
  66. package/dist/oidc/index.d.ts +14 -0
  67. package/dist/oidc/operator.d.ts +14 -0
  68. package/dist/oidc/postgresStores.d.ts +1361 -0
  69. package/dist/oidc/vciRoutes.d.ts +56 -0
  70. package/dist/organizations/inMemoryOrganizationStore.d.ts +2 -0
  71. package/dist/organizations/postgresOrganizationStore.d.ts +340 -0
  72. package/dist/passwordless/inMemoryPasswordlessTokenStore.d.ts +2 -0
  73. package/dist/passwordless/postgresPasswordlessTokenStore.d.ts +56 -0
  74. package/dist/plugins/denyDisposableEmail.d.ts +7 -0
  75. package/dist/plugins/discordAlert.d.ts +7 -0
  76. package/dist/plugins/geoBlock.d.ts +8 -0
  77. package/dist/plugins/index.d.ts +12 -0
  78. package/dist/plugins/pagerdutyAlert.d.ts +9 -0
  79. package/dist/plugins/posthogIdentify.d.ts +7 -0
  80. package/dist/plugins/slackAlert.d.ts +7 -0
  81. package/dist/portal/inMemorySetupSessionStore.d.ts +2 -0
  82. package/dist/portal/postgresSetupSessionStore.d.ts +116 -0
  83. package/dist/providers/index.d.ts +2 -0
  84. package/dist/roles/inMemoryRoleStore.d.ts +2 -0
  85. package/dist/roles/postgresRoleStore.d.ts +86 -0
  86. package/dist/roles/resolver.d.ts +17 -0
  87. package/dist/saml.d.ts +1 -0
  88. package/dist/scim/inMemoryScimTokenStore.d.ts +2 -0
  89. package/dist/scim/postgresScimTokenStore.d.ts +86 -0
  90. package/dist/server.d.ts +34 -0
  91. package/dist/sso/inMemorySamlServiceProviderStore.d.ts +2 -0
  92. package/dist/sso/inMemorySsoConnectionStore.d.ts +2 -0
  93. package/dist/sso/nodeSamlAdapter.d.ts +8 -0
  94. package/dist/sso/postgresSamlServiceProviderStore.d.ts +101 -0
  95. package/dist/sso/postgresSsoConnectionStore.d.ts +117 -0
  96. package/dist/sso/samlIdpRoutes.d.ts +268 -0
  97. package/dist/vault/index.d.ts +5 -0
  98. package/dist/vc/inMemoryVpStores.d.ts +2 -0
  99. package/dist/vc/openid4vp.d.ts +82 -0
  100. package/dist/vc/postgresVcStores.d.ts +300 -0
  101. package/dist/vc/statusList.d.ts +29 -0
  102. package/dist/vc/statusListRoutes.d.ts +169 -0
  103. package/dist/vc/vpRoutes.d.ts +224 -0
  104. package/dist/webauthn/inMemoryWebAuthnCredentialStore.d.ts +2 -0
  105. package/dist/webauthn/postgresWebAuthnCredentialStore.d.ts +146 -0
  106. package/dist/webauthn/simpleWebAuthnAdapter.d.ts +3 -0
  107. package/dist/webauthn.d.ts +1 -0
  108. package/dist/webhooks/inMemoryStore.d.ts +2 -0
  109. package/dist/webhooks/postgresStore.d.ts +116 -0
  110. package/package.json +3 -3
@@ -0,0 +1,4042 @@
1
+ import { Elysia } from 'elysia';
2
+ import type { AuthConfig } from './types';
3
+ export declare const auth: <UserType>(configuration: AuthConfig<UserType>) => Promise<Elysia<"", "local", {
4
+ decorator: {};
5
+ store: {
6
+ session: import("./types").SessionRecord<UserType>;
7
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
8
+ };
9
+ derive: ({
10
+ readonly authPrincipal: import("./principal").AuthPrincipal<UserType> | undefined;
11
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
12
+ readonly code: "Bad Request";
13
+ readonly message: "Cookies are missing";
14
+ } | {
15
+ readonly code: "Unauthorized";
16
+ readonly message: "User is not authenticated";
17
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
18
+ } & {
19
+ readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
20
+ readonly code: "Unauthorized";
21
+ readonly message: "Recent authentication required";
22
+ }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
23
+ } & {
24
+ readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
25
+ code: "Forbidden" | "Unauthorized";
26
+ message: "Agent is not authenticated" | "Insufficient agent scopes";
27
+ }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
28
+ }) | ({
29
+ readonly authPrincipal: import("./principal").AuthPrincipal<UserType> | undefined;
30
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
31
+ readonly code: "Bad Request";
32
+ readonly message: "Cookies are missing";
33
+ } | {
34
+ readonly code: "Unauthorized";
35
+ readonly message: "User is not authenticated";
36
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
37
+ } & {
38
+ readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
39
+ readonly code: "Unauthorized";
40
+ readonly message: "Recent authentication required";
41
+ }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
42
+ } & {
43
+ readonly protectPermission: <AuthReturn, AuthFailReturn_3>(check: import(".").PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
44
+ readonly code: "Bad Request";
45
+ readonly message: "Cookies are missing";
46
+ } | {
47
+ readonly code: "Forbidden";
48
+ readonly message: "Insufficient permissions";
49
+ } | {
50
+ readonly code: "Unauthorized";
51
+ readonly message: "User is not authenticated";
52
+ }) => AuthFailReturn_3) | undefined) => Promise<import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaStatus<"Forbidden", "Insufficient permissions", 403> | AuthReturn | NonNullable<AuthFailReturn_3>>;
53
+ } & {
54
+ readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
55
+ code: "Forbidden" | "Unauthorized";
56
+ message: "Agent is not authenticated" | "Insufficient agent scopes";
57
+ }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
58
+ });
59
+ }, {
60
+ typebox: {};
61
+ error: [];
62
+ }, import("elysia/types").DefaultMetadata & ((import("elysia/types").DefaultMetadata & ({
63
+ schema: {};
64
+ schemas: import("elysia").UnwrapRoute<{
65
+ cookie: import("elysia").TCookieObject<{
66
+ user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
67
+ }>;
68
+ schema: "merge";
69
+ }, {}, "">;
70
+ macro: {};
71
+ macroFn: {};
72
+ parser: {};
73
+ response: import("elysia/types").ExtractErrorFromHandle<{
74
+ readonly authPrincipal: import("./principal").AuthPrincipal<UserType> | undefined;
75
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
76
+ readonly code: "Bad Request";
77
+ readonly message: "Cookies are missing";
78
+ } | {
79
+ readonly code: "Unauthorized";
80
+ readonly message: "User is not authenticated";
81
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
82
+ }>;
83
+ } & ({
84
+ schema: {};
85
+ schemas: import("elysia").UnwrapRoute<{
86
+ cookie: import("elysia").TCookieObject<{
87
+ user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
88
+ }>;
89
+ schema: "merge";
90
+ }, {}, "">;
91
+ macro: {};
92
+ macroFn: {};
93
+ parser: {};
94
+ response: import("elysia/types").ExtractErrorFromHandle<{
95
+ readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
96
+ readonly code: "Unauthorized";
97
+ readonly message: "Recent authentication required";
98
+ }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
99
+ }>;
100
+ } & (import("elysia/types").DefaultMetadata | {
101
+ schema: {};
102
+ schemas: import("elysia").UnwrapRoute<{
103
+ cookie: import("elysia").TCookieObject<{
104
+ user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
105
+ }>;
106
+ schema: "merge";
107
+ }, {}, "">;
108
+ macro: {};
109
+ macroFn: {};
110
+ parser: {};
111
+ response: import("elysia/types").ExtractErrorFromHandle<{
112
+ readonly protectPermission: <AuthReturn, AuthFailReturn_3>(check: import(".").PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
113
+ readonly code: "Bad Request";
114
+ readonly message: "Cookies are missing";
115
+ } | {
116
+ readonly code: "Forbidden";
117
+ readonly message: "Insufficient permissions";
118
+ } | {
119
+ readonly code: "Unauthorized";
120
+ readonly message: "User is not authenticated";
121
+ }) => AuthFailReturn_3) | undefined) => Promise<import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaStatus<"Forbidden", "Insufficient permissions", 403> | AuthReturn | NonNullable<AuthFailReturn_3>>;
122
+ }>;
123
+ })))) & {
124
+ schema: {};
125
+ schemas: {};
126
+ macro: {};
127
+ macroFn: {};
128
+ parser: {};
129
+ response: import("elysia/types").ExtractErrorFromHandle<{
130
+ readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
131
+ code: "Forbidden" | "Unauthorized";
132
+ message: "Agent is not authenticated" | "Insufficient agent scopes";
133
+ }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
134
+ }>;
135
+ }), {}, import("elysia/types").DefaultEphemeral, {
136
+ derive: {};
137
+ schema: {};
138
+ schemas: {};
139
+ response: {};
140
+ error: [];
141
+ }>>;
142
+ export declare const createAuthApplications: <UserType>(configuration: AuthConfig<UserType>) => Promise<{
143
+ authContext: Elysia<"", "local", {
144
+ decorator: {};
145
+ store: {
146
+ session: import("./types").SessionRecord<UserType>;
147
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
148
+ };
149
+ derive: ({
150
+ readonly authPrincipal: import("./principal").AuthPrincipal<UserType> | undefined;
151
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
152
+ readonly code: "Bad Request";
153
+ readonly message: "Cookies are missing";
154
+ } | {
155
+ readonly code: "Unauthorized";
156
+ readonly message: "User is not authenticated";
157
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
158
+ } & {
159
+ readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
160
+ readonly code: "Unauthorized";
161
+ readonly message: "Recent authentication required";
162
+ }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
163
+ } & {
164
+ readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
165
+ code: "Forbidden" | "Unauthorized";
166
+ message: "Agent is not authenticated" | "Insufficient agent scopes";
167
+ }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
168
+ }) | ({
169
+ readonly authPrincipal: import("./principal").AuthPrincipal<UserType> | undefined;
170
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
171
+ readonly code: "Bad Request";
172
+ readonly message: "Cookies are missing";
173
+ } | {
174
+ readonly code: "Unauthorized";
175
+ readonly message: "User is not authenticated";
176
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
177
+ } & {
178
+ readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
179
+ readonly code: "Unauthorized";
180
+ readonly message: "Recent authentication required";
181
+ }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
182
+ } & {
183
+ readonly protectPermission: <AuthReturn, AuthFailReturn_3>(check: import(".").PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
184
+ readonly code: "Bad Request";
185
+ readonly message: "Cookies are missing";
186
+ } | {
187
+ readonly code: "Forbidden";
188
+ readonly message: "Insufficient permissions";
189
+ } | {
190
+ readonly code: "Unauthorized";
191
+ readonly message: "User is not authenticated";
192
+ }) => AuthFailReturn_3) | undefined) => Promise<import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaStatus<"Forbidden", "Insufficient permissions", 403> | AuthReturn | NonNullable<AuthFailReturn_3>>;
193
+ } & {
194
+ readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
195
+ code: "Forbidden" | "Unauthorized";
196
+ message: "Agent is not authenticated" | "Insufficient agent scopes";
197
+ }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
198
+ });
199
+ }, {
200
+ typebox: {};
201
+ error: [];
202
+ }, (import("elysia/types").DefaultMetadata & ({
203
+ schema: {};
204
+ schemas: import("elysia").UnwrapRoute<{
205
+ cookie: import("elysia").TCookieObject<{
206
+ user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
207
+ }>;
208
+ schema: "merge";
209
+ }, {}, "">;
210
+ macro: {};
211
+ macroFn: {};
212
+ parser: {};
213
+ response: import("elysia/types").ExtractErrorFromHandle<{
214
+ readonly authPrincipal: import("./principal").AuthPrincipal<UserType> | undefined;
215
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
216
+ readonly code: "Bad Request";
217
+ readonly message: "Cookies are missing";
218
+ } | {
219
+ readonly code: "Unauthorized";
220
+ readonly message: "User is not authenticated";
221
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
222
+ }>;
223
+ } & ({
224
+ schema: {};
225
+ schemas: import("elysia").UnwrapRoute<{
226
+ cookie: import("elysia").TCookieObject<{
227
+ user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
228
+ }>;
229
+ schema: "merge";
230
+ }, {}, "">;
231
+ macro: {};
232
+ macroFn: {};
233
+ parser: {};
234
+ response: import("elysia/types").ExtractErrorFromHandle<{
235
+ readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
236
+ readonly code: "Unauthorized";
237
+ readonly message: "Recent authentication required";
238
+ }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
239
+ }>;
240
+ } & (import("elysia/types").DefaultMetadata | {
241
+ schema: {};
242
+ schemas: import("elysia").UnwrapRoute<{
243
+ cookie: import("elysia").TCookieObject<{
244
+ user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
245
+ }>;
246
+ schema: "merge";
247
+ }, {}, "">;
248
+ macro: {};
249
+ macroFn: {};
250
+ parser: {};
251
+ response: import("elysia/types").ExtractErrorFromHandle<{
252
+ readonly protectPermission: <AuthReturn, AuthFailReturn_3>(check: import(".").PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
253
+ readonly code: "Bad Request";
254
+ readonly message: "Cookies are missing";
255
+ } | {
256
+ readonly code: "Forbidden";
257
+ readonly message: "Insufficient permissions";
258
+ } | {
259
+ readonly code: "Unauthorized";
260
+ readonly message: "User is not authenticated";
261
+ }) => AuthFailReturn_3) | undefined) => Promise<import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaStatus<"Forbidden", "Insufficient permissions", 403> | AuthReturn | NonNullable<AuthFailReturn_3>>;
262
+ }>;
263
+ })))) & {
264
+ schema: {};
265
+ schemas: {};
266
+ macro: {};
267
+ macroFn: {};
268
+ parser: {};
269
+ response: import("elysia/types").ExtractErrorFromHandle<{
270
+ readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
271
+ code: "Forbidden" | "Unauthorized";
272
+ message: "Agent is not authenticated" | "Insufficient agent scopes";
273
+ }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
274
+ }>;
275
+ }, {}, import("elysia/types").DefaultEphemeral, {
276
+ derive: {};
277
+ schema: {};
278
+ schemas: {};
279
+ response: {};
280
+ error: [];
281
+ }>;
282
+ coreRoutes: Elysia<"", "local", {
283
+ decorator: {};
284
+ store: {
285
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<NoInfer<UserType>>;
286
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
287
+ };
288
+ derive: {
289
+ readonly cleanupSessions: () => Promise<void>;
290
+ };
291
+ }, {
292
+ typebox: {};
293
+ error: [];
294
+ }, import("elysia/types").DefaultMetadata & {
295
+ schema: {};
296
+ schemas: {};
297
+ macro: {};
298
+ macroFn: {};
299
+ parser: {};
300
+ response: import("elysia/types").ExtractErrorFromHandle<{
301
+ readonly cleanupSessions: () => Promise<void>;
302
+ }>;
303
+ }, (({
304
+ [x: string]: {
305
+ delete: {
306
+ body: unknown;
307
+ params: {};
308
+ query: unknown;
309
+ headers: unknown;
310
+ response: {
311
+ 400: "Cookies are missing";
312
+ 401: "No user session id found";
313
+ 200: Response;
314
+ 422: {
315
+ type: "validation";
316
+ title: "Validation Error";
317
+ status: 422;
318
+ detail?: string;
319
+ on: string;
320
+ found?: unknown;
321
+ property?: string;
322
+ expected?: string;
323
+ };
324
+ 500: "Sign out operation failed";
325
+ };
326
+ error: never;
327
+ };
328
+ };
329
+ } & {
330
+ [x: string]: {
331
+ post: {
332
+ body: unknown;
333
+ params: {};
334
+ query: unknown;
335
+ headers: unknown;
336
+ response: {
337
+ 400: "Cookies are missing" | "Session has no access token to revoke";
338
+ 401: "Provider is required" | "Client provider not found" | "Client variant is required" | "Client variant not found" | "No auth provider found" | "No user session found";
339
+ 501: "Provider does not support revocation";
340
+ 200: Response;
341
+ 422: {
342
+ type: "validation";
343
+ title: "Validation Error";
344
+ status: 422;
345
+ detail?: string;
346
+ on: string;
347
+ found?: unknown;
348
+ property?: string;
349
+ expected?: string;
350
+ };
351
+ 500: "Failed to revoke token";
352
+ };
353
+ error: never;
354
+ };
355
+ };
356
+ } & ({
357
+ [x: string]: {
358
+ get: {
359
+ body: unknown;
360
+ params: {};
361
+ query: unknown;
362
+ headers: unknown;
363
+ response: {
364
+ 400: "Cookies are missing";
365
+ 200: {
366
+ impersonator: import("./types").Impersonator | undefined;
367
+ user: NonNullable<UserType> | null;
368
+ };
369
+ 422: {
370
+ type: "validation";
371
+ title: "Validation Error";
372
+ status: 422;
373
+ detail?: string;
374
+ on: string;
375
+ found?: unknown;
376
+ property?: string;
377
+ expected?: string;
378
+ };
379
+ 500: `Error: ${string} - ${string}` | `Unknown Error: ${string}`;
380
+ };
381
+ error: never;
382
+ };
383
+ };
384
+ } & ({
385
+ [x: string]: {
386
+ post: {
387
+ body: unknown;
388
+ params: {};
389
+ query: unknown;
390
+ headers: unknown;
391
+ response: {
392
+ 400: "Cookies are missing" | "No refresh token found";
393
+ 401: "Provider is required" | "Client provider not found" | "Client variant is required" | "Client variant not found" | "No auth provider found" | "No user session found";
394
+ 501: "Provider is not refreshable";
395
+ 200: Response;
396
+ 422: {
397
+ type: "validation";
398
+ title: "Validation Error";
399
+ status: 422;
400
+ detail?: string;
401
+ on: string;
402
+ found?: unknown;
403
+ property?: string;
404
+ expected?: string;
405
+ };
406
+ 500: "Failed to refresh token";
407
+ };
408
+ error: never;
409
+ };
410
+ };
411
+ } & ({
412
+ [x: string]: {
413
+ ":provider": {
414
+ get: {
415
+ body: unknown;
416
+ params: {
417
+ provider: string;
418
+ };
419
+ query: {
420
+ client?: string | undefined;
421
+ intent?: "login" | "link_identity" | "link_connector" | undefined;
422
+ };
423
+ headers: unknown;
424
+ response: {
425
+ 400: "Cookies are missing" | "Provider is required";
426
+ 401: "Provider is required" | "Client provider not found" | "Client variant is required" | "Client variant not found";
427
+ 200: Response;
428
+ 422: {
429
+ type: "validation";
430
+ title: "Validation Error";
431
+ status: 422;
432
+ detail?: string;
433
+ on: string;
434
+ found?: unknown;
435
+ property?: string;
436
+ expected?: string;
437
+ };
438
+ 500: "Failed to create authorization URL";
439
+ };
440
+ error: never;
441
+ };
442
+ };
443
+ };
444
+ } | {
445
+ [x: string]: {
446
+ ":provider": {
447
+ [x: string]: {
448
+ get: {
449
+ body: unknown;
450
+ params: {
451
+ provider: string;
452
+ };
453
+ query: {
454
+ client?: string | undefined;
455
+ intent?: "login" | "link_identity" | "link_connector" | undefined;
456
+ };
457
+ headers: unknown;
458
+ response: {
459
+ 400: "Cookies are missing" | "Provider is required";
460
+ 401: "Provider is required" | "Client provider not found" | "Client variant is required" | "Client variant not found";
461
+ 200: Response;
462
+ 422: {
463
+ type: "validation";
464
+ title: "Validation Error";
465
+ status: 422;
466
+ detail?: string;
467
+ on: string;
468
+ found?: unknown;
469
+ property?: string;
470
+ expected?: string;
471
+ };
472
+ 500: "Failed to create authorization URL";
473
+ };
474
+ error: never;
475
+ };
476
+ };
477
+ };
478
+ };
479
+ })))) & {
480
+ [x: string]: {
481
+ get: {
482
+ body: unknown;
483
+ params: {};
484
+ query: unknown;
485
+ headers: unknown;
486
+ response: {
487
+ 200: Response | import("./types").StatusReturn;
488
+ 422: {
489
+ type: "validation";
490
+ title: "Validation Error";
491
+ status: 422;
492
+ detail?: string;
493
+ on: string;
494
+ found?: unknown;
495
+ property?: string;
496
+ expected?: string;
497
+ };
498
+ };
499
+ error: never;
500
+ };
501
+ };
502
+ }) & {
503
+ [x: string]: {
504
+ get: {
505
+ body: unknown;
506
+ params: {};
507
+ query: unknown;
508
+ headers: unknown;
509
+ response: {
510
+ 400: "Cookies are missing" | "Session has no access token to fetch a profile";
511
+ 401: "Provider is required" | "Client provider not found" | "Client variant is required" | "Client variant not found" | "No auth provider found" | "No user session found";
512
+ 501: "Provider does not expose a profile endpoint";
513
+ 200: Response;
514
+ 422: {
515
+ type: "validation";
516
+ title: "Validation Error";
517
+ status: 422;
518
+ detail?: string;
519
+ on: string;
520
+ found?: unknown;
521
+ property?: string;
522
+ expected?: string;
523
+ };
524
+ 500: `${string} - ${string}` | `Failed to validate authorization code: Unknown status: ${string}`;
525
+ };
526
+ error: never;
527
+ };
528
+ };
529
+ }, import("elysia/types").DefaultEphemeral, {
530
+ derive: {};
531
+ schema: {};
532
+ schemas: {};
533
+ response: {};
534
+ error: [];
535
+ }>;
536
+ featureRoutes: Elysia<"", "local", {
537
+ decorator: {};
538
+ store: {} | {
539
+ session: import("./types").SessionRecord<import(".").AuthHtmxUser>;
540
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
541
+ } | {
542
+ session: import("./types").SessionRecord<UserType>;
543
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
544
+ } | {
545
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
546
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
547
+ } | {
548
+ session: import("./types").SessionRecord<UserType>;
549
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
550
+ } | {
551
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
552
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
553
+ } | {
554
+ session: import("./types").SessionRecord<UserType>;
555
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
556
+ } | {
557
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
558
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
559
+ } | {
560
+ session: import("./types").SessionRecord<UserType>;
561
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
562
+ } | {
563
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
564
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
565
+ } | {
566
+ session: import("./types").SessionRecord<UserType>;
567
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
568
+ } | {
569
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
570
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
571
+ } | {
572
+ session: import("./types").SessionRecord<UserType>;
573
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
574
+ } | {
575
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
576
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
577
+ } | {
578
+ session: import("./types").SessionRecord<UserType>;
579
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
580
+ } | {
581
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
582
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
583
+ } | {
584
+ session: import("./types").SessionRecord<UserType>;
585
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
586
+ } | {
587
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
588
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
589
+ } | {
590
+ session: import("./types").SessionRecord<UserType>;
591
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
592
+ } | {
593
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
594
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
595
+ } | {
596
+ session: import("./types").SessionRecord<UserType>;
597
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
598
+ } | {
599
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
600
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
601
+ } | {
602
+ session: import("./types").SessionRecord<UserType>;
603
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
604
+ } | {
605
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
606
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
607
+ } | {
608
+ session: import("./types").SessionRecord<UserType>;
609
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
610
+ } | {
611
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
612
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
613
+ } | {
614
+ session: import("./types").SessionRecord<UserType>;
615
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
616
+ } | {
617
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
618
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
619
+ } | {
620
+ session: import("./types").SessionRecord<UserType>;
621
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
622
+ } | {
623
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
624
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
625
+ } | {
626
+ session: import("./types").SessionRecord<UserType>;
627
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
628
+ } | {
629
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
630
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
631
+ } | {
632
+ session: import("./types").SessionRecord<UserType>;
633
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
634
+ } | {
635
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
636
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
637
+ } | {
638
+ session: import("./types").SessionRecord<UserType>;
639
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
640
+ } | {
641
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
642
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
643
+ } | {
644
+ session: import("./types").SessionRecord<UserType>;
645
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
646
+ } | {
647
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
648
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
649
+ } | {
650
+ session: import("./types").SessionRecord<UserType>;
651
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
652
+ } | {
653
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
654
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
655
+ } | {
656
+ session: import("./types").SessionRecord<UserType>;
657
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
658
+ } | {
659
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
660
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
661
+ } | {
662
+ session: import("./types").SessionRecord<UserType>;
663
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
664
+ } | {
665
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
666
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
667
+ } | {
668
+ session: import("./types").SessionRecord<UserType>;
669
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
670
+ } | {
671
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
672
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
673
+ } | {
674
+ session: import("./types").SessionRecord<UserType>;
675
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
676
+ } | {
677
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
678
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
679
+ } | {
680
+ session: import("./types").SessionRecord<UserType>;
681
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
682
+ } | {
683
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
684
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
685
+ } | {
686
+ session: import("./types").SessionRecord<UserType>;
687
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
688
+ } | {
689
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
690
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
691
+ } | {
692
+ session: import("./types").SessionRecord<UserType>;
693
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
694
+ } | {
695
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
696
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
697
+ } | {
698
+ session: import("./types").SessionRecord<UserType>;
699
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
700
+ } | {
701
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
702
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
703
+ } | {
704
+ session: import("./types").SessionRecord<UserType>;
705
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
706
+ } | {
707
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
708
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
709
+ } | {
710
+ session: import("./types").SessionRecord<UserType>;
711
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
712
+ } | {
713
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
714
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
715
+ } | {
716
+ session: import("./types").SessionRecord<UserType>;
717
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
718
+ } | {
719
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
720
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
721
+ } | {
722
+ session: import("./types").SessionRecord<UserType>;
723
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
724
+ } | {
725
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
726
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
727
+ } | {
728
+ session: import("./types").SessionRecord<UserType>;
729
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
730
+ } | {
731
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
732
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
733
+ } | {
734
+ session: import("./types").SessionRecord<UserType>;
735
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
736
+ } | {
737
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
738
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
739
+ } | {
740
+ session: import("./types").SessionRecord<UserType>;
741
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
742
+ } | {
743
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
744
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
745
+ } | {
746
+ session: import("./types").SessionRecord<UserType>;
747
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
748
+ } | {
749
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
750
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
751
+ } | {
752
+ session: import("./types").SessionRecord<UserType>;
753
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
754
+ } | {
755
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
756
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
757
+ } | {
758
+ session: import("./types").SessionRecord<UserType>;
759
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
760
+ } | {
761
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
762
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
763
+ } | {
764
+ session: import("./types").SessionRecord<UserType>;
765
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
766
+ } | {
767
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
768
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
769
+ } | {
770
+ session: import("./types").SessionRecord<UserType>;
771
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
772
+ } | {
773
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
774
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
775
+ } | {
776
+ session: import("./types").SessionRecord<UserType>;
777
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
778
+ } | {
779
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
780
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
781
+ } | {
782
+ session: import("./types").SessionRecord<UserType>;
783
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
784
+ } | {
785
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
786
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
787
+ } | {
788
+ session: import("./types").SessionRecord<UserType>;
789
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
790
+ } | {
791
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
792
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
793
+ } | {
794
+ session: import("./types").SessionRecord<UserType>;
795
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
796
+ } | {
797
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
798
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
799
+ } | {
800
+ session: import("./types").SessionRecord<UserType>;
801
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
802
+ } | {
803
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
804
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
805
+ } | {
806
+ session: import("./types").SessionRecord<UserType>;
807
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
808
+ } | {
809
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
810
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
811
+ } | {
812
+ session: import("./types").SessionRecord<UserType>;
813
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
814
+ } | {
815
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
816
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
817
+ } | {
818
+ session: import("./types").SessionRecord<UserType>;
819
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
820
+ } | {
821
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
822
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
823
+ } | {
824
+ session: import("./types").SessionRecord<UserType>;
825
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
826
+ } | {
827
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
828
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
829
+ } | {
830
+ session: import("./types").SessionRecord<UserType>;
831
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
832
+ } | {
833
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
834
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
835
+ } | {
836
+ session: import("./types").SessionRecord<UserType>;
837
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
838
+ } | {
839
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
840
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
841
+ } | {
842
+ session: import("./types").SessionRecord<UserType>;
843
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
844
+ } | {
845
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
846
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
847
+ } | {
848
+ session: import("./types").SessionRecord<UserType>;
849
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
850
+ } | {
851
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
852
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
853
+ } | {
854
+ session: import("./types").SessionRecord<UserType>;
855
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
856
+ } | {
857
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
858
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
859
+ } | {
860
+ session: import("./types").SessionRecord<UserType>;
861
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
862
+ } | {
863
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
864
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
865
+ } | {
866
+ session: import("./types").SessionRecord<UserType>;
867
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
868
+ } | {
869
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
870
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
871
+ } | {
872
+ session: import("./types").SessionRecord<UserType>;
873
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
874
+ } | {
875
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
876
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
877
+ } | {
878
+ session: import("./types").SessionRecord<UserType>;
879
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
880
+ } | {
881
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
882
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
883
+ } | {
884
+ session: import("./types").SessionRecord<UserType>;
885
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
886
+ } | {
887
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
888
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
889
+ } | {
890
+ session: import("./types").SessionRecord<UserType>;
891
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
892
+ } | {
893
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
894
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
895
+ } | {
896
+ session: import("./types").SessionRecord<UserType>;
897
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
898
+ } | {
899
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
900
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
901
+ } | {
902
+ session: import("./types").SessionRecord<UserType>;
903
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
904
+ } | {
905
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
906
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
907
+ } | {
908
+ session: import("./types").SessionRecord<UserType>;
909
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
910
+ } | {
911
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
912
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
913
+ } | {
914
+ session: import("./types").SessionRecord<UserType>;
915
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
916
+ } | {
917
+ session: import("./types").SessionRecord<UserType> & import("./types").SessionRecord<import(".").AuthHtmxUser>;
918
+ unregisteredSession: import("./types").UnregisteredSessionRecord;
919
+ };
920
+ derive: {} | {
921
+ readonly authPrincipal: import("./principal").AuthPrincipal<import(".").AuthHtmxUser> | undefined;
922
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: import(".").AuthHtmxUser) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
923
+ readonly code: "Bad Request";
924
+ readonly message: "Cookies are missing";
925
+ } | {
926
+ readonly code: "Unauthorized";
927
+ readonly message: "User is not authenticated";
928
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
929
+ };
930
+ }, {
931
+ typebox: {};
932
+ error: [];
933
+ }, (import("elysia/types").DefaultMetadata & {
934
+ schema: {};
935
+ schemas: {};
936
+ macro: {};
937
+ macroFn: {};
938
+ parser: {};
939
+ response: {};
940
+ }) | (import("elysia/types").DefaultMetadata & {
941
+ schema: {};
942
+ schemas: import("elysia").UnwrapRoute<{
943
+ cookie: import("elysia").TCookieObject<{
944
+ user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
945
+ }>;
946
+ schema: "merge";
947
+ }, {}, "">;
948
+ macro: {};
949
+ macroFn: {};
950
+ parser: {};
951
+ response: import("elysia/types").ExtractErrorFromHandle<{
952
+ readonly authPrincipal: import("./principal").AuthPrincipal<import(".").AuthHtmxUser> | undefined;
953
+ readonly protectRoute: <AuthReturn, AuthFailReturn = never>(handleAuth: (user: import(".").AuthHtmxUser) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
954
+ readonly code: "Bad Request";
955
+ readonly message: "Cookies are missing";
956
+ } | {
957
+ readonly code: "Unauthorized";
958
+ readonly message: "User is not authenticated";
959
+ }) => AuthFailReturn) | undefined) => import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | AuthReturn | Promise<AuthReturn> | NonNullable<AuthFailReturn>;
960
+ }>;
961
+ } & {
962
+ schema: {};
963
+ schemas: {};
964
+ macro: {};
965
+ macroFn: {};
966
+ parser: {};
967
+ response: {};
968
+ }), (({} & (((((({} | ({
969
+ [x: string]: {
970
+ post: {
971
+ body: {
972
+ email: string;
973
+ password: string;
974
+ };
975
+ params: {};
976
+ query: unknown;
977
+ headers: unknown;
978
+ response: {
979
+ 200: Response | import("./types").StatusReturn;
980
+ 422: {
981
+ type: "validation";
982
+ title: "Validation Error";
983
+ status: 422;
984
+ detail?: string;
985
+ on: string;
986
+ found?: unknown;
987
+ property?: string;
988
+ expected?: string;
989
+ };
990
+ };
991
+ error: never;
992
+ };
993
+ };
994
+ } & {
995
+ [x: string]: {
996
+ post: {
997
+ body: {
998
+ token: string;
999
+ };
1000
+ params: {};
1001
+ query: unknown;
1002
+ headers: unknown;
1003
+ response: {
1004
+ 200: Response | import("./types").StatusReturn;
1005
+ 422: {
1006
+ type: "validation";
1007
+ title: "Validation Error";
1008
+ status: 422;
1009
+ detail?: string;
1010
+ on: string;
1011
+ found?: unknown;
1012
+ property?: string;
1013
+ expected?: string;
1014
+ };
1015
+ };
1016
+ error: never;
1017
+ };
1018
+ };
1019
+ } & {
1020
+ [x: string]: {
1021
+ request: {
1022
+ post: {
1023
+ body: {
1024
+ email: string;
1025
+ };
1026
+ params: {};
1027
+ query: unknown;
1028
+ headers: unknown;
1029
+ response: {
1030
+ 200: {
1031
+ readonly status: "verification_requested";
1032
+ };
1033
+ 422: {
1034
+ type: "validation";
1035
+ title: "Validation Error";
1036
+ status: 422;
1037
+ detail?: string;
1038
+ on: string;
1039
+ found?: unknown;
1040
+ property?: string;
1041
+ expected?: string;
1042
+ };
1043
+ };
1044
+ error: never;
1045
+ };
1046
+ };
1047
+ };
1048
+ } & {
1049
+ [x: string]: {
1050
+ post: {
1051
+ body: {
1052
+ email: string;
1053
+ password: string;
1054
+ };
1055
+ params: {};
1056
+ query: unknown;
1057
+ headers: unknown;
1058
+ response: {
1059
+ 401: "Invalid email or password";
1060
+ 403: "Request origin is not allowed" | {
1061
+ readonly status: "email_not_verified";
1062
+ };
1063
+ 200: {
1064
+ readonly status: "mfa_required";
1065
+ } | {
1066
+ readonly passwordCompromised: boolean;
1067
+ readonly status: "authenticated";
1068
+ };
1069
+ 422: {
1070
+ type: "validation";
1071
+ title: "Validation Error";
1072
+ status: 422;
1073
+ detail?: string;
1074
+ on: string;
1075
+ found?: unknown;
1076
+ property?: string;
1077
+ expected?: string;
1078
+ };
1079
+ 429: {
1080
+ readonly retryAfterMs: number | undefined;
1081
+ readonly status: "account_locked";
1082
+ };
1083
+ };
1084
+ error: never;
1085
+ };
1086
+ };
1087
+ } & {
1088
+ [x: string]: {
1089
+ request: {
1090
+ post: {
1091
+ body: {
1092
+ email: string;
1093
+ };
1094
+ params: {};
1095
+ query: unknown;
1096
+ headers: unknown;
1097
+ response: {
1098
+ 200: {
1099
+ readonly status: "reset_requested";
1100
+ };
1101
+ 422: {
1102
+ type: "validation";
1103
+ title: "Validation Error";
1104
+ status: 422;
1105
+ detail?: string;
1106
+ on: string;
1107
+ found?: unknown;
1108
+ property?: string;
1109
+ expected?: string;
1110
+ };
1111
+ };
1112
+ error: never;
1113
+ };
1114
+ };
1115
+ };
1116
+ } & {
1117
+ [x: string]: {
1118
+ post: {
1119
+ body: {
1120
+ token: string;
1121
+ password: string;
1122
+ };
1123
+ params: {};
1124
+ query: unknown;
1125
+ headers: unknown;
1126
+ response: {
1127
+ 400: "Invalid or expired reset token" | {
1128
+ readonly message: "Password does not meet the policy";
1129
+ readonly violations: import(".").PasswordPolicyViolation[];
1130
+ };
1131
+ 200: {
1132
+ readonly status: "password_reset";
1133
+ };
1134
+ 422: {
1135
+ type: "validation";
1136
+ title: "Validation Error";
1137
+ status: 422;
1138
+ detail?: string;
1139
+ on: string;
1140
+ found?: unknown;
1141
+ property?: string;
1142
+ expected?: string;
1143
+ };
1144
+ };
1145
+ error: never;
1146
+ };
1147
+ };
1148
+ })) & ({} | ({
1149
+ [x: string]: {
1150
+ get: {
1151
+ body: unknown;
1152
+ params: {};
1153
+ query: unknown;
1154
+ headers: unknown;
1155
+ response: {
1156
+ 401: "Authentication required";
1157
+ 200: {
1158
+ backupCodesRemaining: number;
1159
+ enabled: boolean;
1160
+ smsBackup: {
1161
+ enabled: boolean;
1162
+ phone: string | null;
1163
+ };
1164
+ totp: {
1165
+ enabled: boolean;
1166
+ };
1167
+ };
1168
+ 422: {
1169
+ type: "validation";
1170
+ title: "Validation Error";
1171
+ status: 422;
1172
+ detail?: string;
1173
+ on: string;
1174
+ found?: unknown;
1175
+ property?: string;
1176
+ expected?: string;
1177
+ };
1178
+ };
1179
+ error: never;
1180
+ };
1181
+ };
1182
+ } & {
1183
+ [x: string]: {
1184
+ delete: {
1185
+ body: unknown;
1186
+ params: {};
1187
+ query: unknown;
1188
+ headers: unknown;
1189
+ response: {
1190
+ 401: "Recent authentication required" | "Authentication required";
1191
+ 200: {
1192
+ readonly status: "disabled";
1193
+ };
1194
+ 422: {
1195
+ type: "validation";
1196
+ title: "Validation Error";
1197
+ status: 422;
1198
+ detail?: string;
1199
+ on: string;
1200
+ found?: unknown;
1201
+ property?: string;
1202
+ expected?: string;
1203
+ };
1204
+ };
1205
+ error: never;
1206
+ };
1207
+ };
1208
+ } & {
1209
+ [x: string]: {
1210
+ post: {
1211
+ body: unknown;
1212
+ params: {};
1213
+ query: unknown;
1214
+ headers: unknown;
1215
+ response: {
1216
+ 401: "Recent authentication required" | "Authentication required";
1217
+ 200: {
1218
+ readonly secret: string;
1219
+ readonly uri: string;
1220
+ };
1221
+ 422: {
1222
+ type: "validation";
1223
+ title: "Validation Error";
1224
+ status: 422;
1225
+ detail?: string;
1226
+ on: string;
1227
+ found?: unknown;
1228
+ property?: string;
1229
+ expected?: string;
1230
+ };
1231
+ };
1232
+ error: never;
1233
+ };
1234
+ };
1235
+ } & {
1236
+ [x: string]: {
1237
+ post: {
1238
+ body: {
1239
+ code: string;
1240
+ };
1241
+ params: {};
1242
+ query: unknown;
1243
+ headers: unknown;
1244
+ response: {
1245
+ 400: "No TOTP enrollment in progress" | "Invalid TOTP code";
1246
+ 401: "Recent authentication required" | "Authentication required";
1247
+ 200: {
1248
+ readonly backupCodes: string[];
1249
+ };
1250
+ 422: {
1251
+ type: "validation";
1252
+ title: "Validation Error";
1253
+ status: 422;
1254
+ detail?: string;
1255
+ on: string;
1256
+ found?: unknown;
1257
+ property?: string;
1258
+ expected?: string;
1259
+ };
1260
+ };
1261
+ error: never;
1262
+ };
1263
+ };
1264
+ } & {
1265
+ [x: string]: {
1266
+ post: {
1267
+ body: {
1268
+ phone: string;
1269
+ };
1270
+ params: {};
1271
+ query: unknown;
1272
+ headers: unknown;
1273
+ response: {
1274
+ 400: string;
1275
+ 401: "Recent authentication required" | "Authentication required";
1276
+ 501: "SMS MFA is not configured";
1277
+ 200: {
1278
+ readonly phone: string;
1279
+ };
1280
+ 422: {
1281
+ type: "validation";
1282
+ title: "Validation Error";
1283
+ status: 422;
1284
+ detail?: string;
1285
+ on: string;
1286
+ found?: unknown;
1287
+ property?: string;
1288
+ expected?: string;
1289
+ };
1290
+ 429: string;
1291
+ 503: string;
1292
+ };
1293
+ error: never;
1294
+ };
1295
+ };
1296
+ } & {
1297
+ [x: string]: {
1298
+ post: {
1299
+ body: {
1300
+ code: string;
1301
+ };
1302
+ params: {};
1303
+ query: unknown;
1304
+ headers: unknown;
1305
+ response: {
1306
+ 400: string;
1307
+ 401: "Recent authentication required" | "Authentication required";
1308
+ 200: {
1309
+ readonly status: "enrolled";
1310
+ };
1311
+ 422: {
1312
+ type: "validation";
1313
+ title: "Validation Error";
1314
+ status: 422;
1315
+ detail?: string;
1316
+ on: string;
1317
+ found?: unknown;
1318
+ property?: string;
1319
+ expected?: string;
1320
+ };
1321
+ 429: string;
1322
+ 503: string;
1323
+ };
1324
+ error: never;
1325
+ };
1326
+ };
1327
+ } & {
1328
+ [x: string]: {
1329
+ post: {
1330
+ body: {
1331
+ code?: string | undefined;
1332
+ action?: "verify" | "send" | undefined;
1333
+ factor?: "sms" | undefined;
1334
+ };
1335
+ params: {};
1336
+ query: unknown;
1337
+ headers: unknown;
1338
+ response: {
1339
+ 400: string;
1340
+ 401: "SMS code expired" | "Too many attempts" | "SMS challenge is no longer active" | "No MFA challenge in progress" | "Invalid MFA code";
1341
+ 200: {
1342
+ readonly status: "sent";
1343
+ } | {
1344
+ readonly status: "authenticated";
1345
+ };
1346
+ 422: {
1347
+ type: "validation";
1348
+ title: "Validation Error";
1349
+ status: 422;
1350
+ detail?: string;
1351
+ on: string;
1352
+ found?: unknown;
1353
+ property?: string;
1354
+ expected?: string;
1355
+ };
1356
+ 429: string;
1357
+ 503: string;
1358
+ };
1359
+ error: never;
1360
+ };
1361
+ };
1362
+ }))) & {}) & ({} | ({
1363
+ [x: string]: {
1364
+ get: {
1365
+ body: unknown;
1366
+ params: {};
1367
+ query: unknown;
1368
+ headers: unknown;
1369
+ response: {
1370
+ 401: "Authentication required";
1371
+ 501: "Session management requires an authSessionStore";
1372
+ 200: {
1373
+ readonly sessions: {
1374
+ authenticatedAt?: number;
1375
+ current: boolean;
1376
+ expiresAt: number;
1377
+ id: import("./types").UserSessionId;
1378
+ }[];
1379
+ };
1380
+ 422: {
1381
+ type: "validation";
1382
+ title: "Validation Error";
1383
+ status: 422;
1384
+ detail?: string;
1385
+ on: string;
1386
+ found?: unknown;
1387
+ property?: string;
1388
+ expected?: string;
1389
+ };
1390
+ };
1391
+ error: never;
1392
+ };
1393
+ };
1394
+ } & {
1395
+ [x: string]: {
1396
+ ":id": {
1397
+ delete: {
1398
+ body: unknown;
1399
+ params: {
1400
+ id: string;
1401
+ };
1402
+ query: unknown;
1403
+ headers: unknown;
1404
+ response: {
1405
+ 400: "Invalid session id";
1406
+ 401: "Authentication required";
1407
+ 501: "Session management requires an authSessionStore";
1408
+ 404: "Session not found";
1409
+ 200: {
1410
+ readonly revoked: `${string}-${string}-${string}-${string}-${string}`;
1411
+ };
1412
+ 422: {
1413
+ type: "validation";
1414
+ title: "Validation Error";
1415
+ status: 422;
1416
+ detail?: string;
1417
+ on: string;
1418
+ found?: unknown;
1419
+ property?: string;
1420
+ expected?: string;
1421
+ };
1422
+ };
1423
+ error: never;
1424
+ };
1425
+ };
1426
+ };
1427
+ }))) & ({} | ({
1428
+ [x: string]: {
1429
+ get: {
1430
+ body: unknown;
1431
+ params: {
1432
+ organizationId: string;
1433
+ };
1434
+ query: unknown;
1435
+ headers: unknown;
1436
+ response: {
1437
+ 404: "No OIDC connection is configured for this organization";
1438
+ 200: Response;
1439
+ 422: {
1440
+ type: "validation";
1441
+ title: "Validation Error";
1442
+ status: 422;
1443
+ detail?: string;
1444
+ on: string;
1445
+ found?: unknown;
1446
+ property?: string;
1447
+ expected?: string;
1448
+ };
1449
+ };
1450
+ error: never;
1451
+ };
1452
+ };
1453
+ } & {
1454
+ [x: string]: {
1455
+ get: {
1456
+ body: unknown;
1457
+ params: {
1458
+ organizationId: string;
1459
+ };
1460
+ query: {
1461
+ code?: string | undefined;
1462
+ state?: string | undefined;
1463
+ };
1464
+ headers: unknown;
1465
+ response: {
1466
+ 400: "SSO session cookies are missing" | "Invalid SSO callback request" | "SSO organization mismatch" | "OIDC token response is missing an id_token";
1467
+ 404: "No OIDC connection is configured for this organization";
1468
+ 200: Response;
1469
+ 422: {
1470
+ type: "validation";
1471
+ title: "Validation Error";
1472
+ status: 422;
1473
+ detail?: string;
1474
+ on: string;
1475
+ found?: unknown;
1476
+ property?: string;
1477
+ expected?: string;
1478
+ };
1479
+ 500: "OIDC sign-in failed";
1480
+ };
1481
+ error: never;
1482
+ };
1483
+ };
1484
+ }))) & ({} | ({
1485
+ [x: string]: {
1486
+ get: {
1487
+ body: unknown;
1488
+ params: {
1489
+ organizationId: string;
1490
+ };
1491
+ query: unknown;
1492
+ headers: unknown;
1493
+ response: {
1494
+ 404: "No SAML connection is configured for this organization";
1495
+ 200: Response;
1496
+ 422: {
1497
+ type: "validation";
1498
+ title: "Validation Error";
1499
+ status: 422;
1500
+ detail?: string;
1501
+ on: string;
1502
+ found?: unknown;
1503
+ property?: string;
1504
+ expected?: string;
1505
+ };
1506
+ };
1507
+ error: never;
1508
+ };
1509
+ };
1510
+ } & {
1511
+ [x: string]: {
1512
+ post: {
1513
+ body: {
1514
+ RelayState?: string | undefined;
1515
+ SAMLResponse: string;
1516
+ };
1517
+ params: {
1518
+ organizationId: string;
1519
+ };
1520
+ query: unknown;
1521
+ headers: unknown;
1522
+ response: {
1523
+ 404: "No SAML connection is configured for this organization";
1524
+ 200: Response;
1525
+ 422: {
1526
+ type: "validation";
1527
+ title: "Validation Error";
1528
+ status: 422;
1529
+ detail?: string;
1530
+ on: string;
1531
+ found?: unknown;
1532
+ property?: string;
1533
+ expected?: string;
1534
+ };
1535
+ 500: "SAML sign-in failed";
1536
+ };
1537
+ error: never;
1538
+ };
1539
+ };
1540
+ } & {
1541
+ [x: string]: {
1542
+ get: {
1543
+ body: unknown;
1544
+ params: {
1545
+ organizationId: string;
1546
+ };
1547
+ query: unknown;
1548
+ headers: unknown;
1549
+ response: {
1550
+ 404: "No SAML connection is configured for this organization";
1551
+ 200: Response;
1552
+ 422: {
1553
+ type: "validation";
1554
+ title: "Validation Error";
1555
+ status: 422;
1556
+ detail?: string;
1557
+ on: string;
1558
+ found?: unknown;
1559
+ property?: string;
1560
+ expected?: string;
1561
+ };
1562
+ };
1563
+ error: never;
1564
+ };
1565
+ };
1566
+ } & {
1567
+ [x: string]: {
1568
+ get: {
1569
+ body: unknown;
1570
+ params: {
1571
+ organizationId: string;
1572
+ };
1573
+ query: unknown;
1574
+ headers: unknown;
1575
+ response: {
1576
+ 200: Response;
1577
+ 422: {
1578
+ type: "validation";
1579
+ title: "Validation Error";
1580
+ status: 422;
1581
+ detail?: string;
1582
+ on: string;
1583
+ found?: unknown;
1584
+ property?: string;
1585
+ expected?: string;
1586
+ };
1587
+ };
1588
+ error: never;
1589
+ };
1590
+ };
1591
+ } & {
1592
+ [x: string]: {
1593
+ get: {
1594
+ body: unknown;
1595
+ params: {
1596
+ organizationId: string;
1597
+ };
1598
+ query: {
1599
+ RelayState?: string | undefined;
1600
+ SAMLResponse?: string | undefined;
1601
+ SAMLRequest?: string | undefined;
1602
+ SigAlg?: string | undefined;
1603
+ Signature?: string | undefined;
1604
+ };
1605
+ headers: unknown;
1606
+ response: {
1607
+ 400: "Missing SAMLRequest or SAMLResponse" | "Invalid SAML LogoutRequest";
1608
+ 501: "SAML Single Logout is not configured";
1609
+ 404: "No SAML connection is configured for this organization";
1610
+ 200: Response;
1611
+ 422: {
1612
+ type: "validation";
1613
+ title: "Validation Error";
1614
+ status: 422;
1615
+ detail?: string;
1616
+ on: string;
1617
+ found?: unknown;
1618
+ property?: string;
1619
+ expected?: string;
1620
+ };
1621
+ 500: "SAML logout failed";
1622
+ };
1623
+ error: never;
1624
+ };
1625
+ };
1626
+ })))) & (((((({} | {
1627
+ [x: string]: {
1628
+ get: {
1629
+ body: unknown;
1630
+ params: {};
1631
+ query: {
1632
+ email?: string | undefined;
1633
+ };
1634
+ headers: unknown;
1635
+ response: {
1636
+ 400: "An \"email\" query parameter is required" | "A valid email address is required";
1637
+ 404: "No SSO organization is configured for this email domain" | "No SSO connection is configured for this organization";
1638
+ 200: Response;
1639
+ 422: {
1640
+ type: "validation";
1641
+ title: "Validation Error";
1642
+ status: 422;
1643
+ detail?: string;
1644
+ on: string;
1645
+ found?: unknown;
1646
+ property?: string;
1647
+ expected?: string;
1648
+ };
1649
+ };
1650
+ error: never;
1651
+ };
1652
+ };
1653
+ }) & ({} | ({
1654
+ [x: string]: {
1655
+ get: {
1656
+ body: unknown;
1657
+ params: {};
1658
+ query: unknown;
1659
+ headers: unknown;
1660
+ response: {
1661
+ 200: Response;
1662
+ };
1663
+ error: never;
1664
+ };
1665
+ };
1666
+ } & {
1667
+ [x: string]: {
1668
+ post: {
1669
+ body: unknown;
1670
+ params: {};
1671
+ query: unknown;
1672
+ headers: unknown;
1673
+ response: {
1674
+ 200: Response;
1675
+ };
1676
+ error: never;
1677
+ };
1678
+ };
1679
+ } & {
1680
+ [x: string]: {
1681
+ get: {
1682
+ body: unknown;
1683
+ params: {};
1684
+ query: {
1685
+ filter?: string | undefined;
1686
+ };
1687
+ headers: unknown;
1688
+ response: {
1689
+ 200: Response;
1690
+ 422: {
1691
+ type: "validation";
1692
+ title: "Validation Error";
1693
+ status: 422;
1694
+ detail?: string;
1695
+ on: string;
1696
+ found?: unknown;
1697
+ property?: string;
1698
+ expected?: string;
1699
+ };
1700
+ };
1701
+ error: never;
1702
+ };
1703
+ };
1704
+ } & {
1705
+ [x: string]: {
1706
+ get: {
1707
+ body: unknown;
1708
+ params: {
1709
+ id: string;
1710
+ };
1711
+ query: unknown;
1712
+ headers: unknown;
1713
+ response: {
1714
+ 200: Response;
1715
+ 422: {
1716
+ type: "validation";
1717
+ title: "Validation Error";
1718
+ status: 422;
1719
+ detail?: string;
1720
+ on: string;
1721
+ found?: unknown;
1722
+ property?: string;
1723
+ expected?: string;
1724
+ };
1725
+ };
1726
+ error: never;
1727
+ };
1728
+ };
1729
+ } & {
1730
+ [x: string]: {
1731
+ put: {
1732
+ body: unknown;
1733
+ params: {
1734
+ id: string;
1735
+ };
1736
+ query: unknown;
1737
+ headers: unknown;
1738
+ response: {
1739
+ 200: Response;
1740
+ 422: {
1741
+ type: "validation";
1742
+ title: "Validation Error";
1743
+ status: 422;
1744
+ detail?: string;
1745
+ on: string;
1746
+ found?: unknown;
1747
+ property?: string;
1748
+ expected?: string;
1749
+ };
1750
+ };
1751
+ error: never;
1752
+ };
1753
+ };
1754
+ } & {
1755
+ [x: string]: {
1756
+ patch: {
1757
+ body: unknown;
1758
+ params: {
1759
+ id: string;
1760
+ };
1761
+ query: unknown;
1762
+ headers: unknown;
1763
+ response: {
1764
+ 200: Response;
1765
+ 422: {
1766
+ type: "validation";
1767
+ title: "Validation Error";
1768
+ status: 422;
1769
+ detail?: string;
1770
+ on: string;
1771
+ found?: unknown;
1772
+ property?: string;
1773
+ expected?: string;
1774
+ };
1775
+ };
1776
+ error: never;
1777
+ };
1778
+ };
1779
+ } & {
1780
+ [x: string]: {
1781
+ delete: {
1782
+ body: unknown;
1783
+ params: {
1784
+ id: string;
1785
+ };
1786
+ query: unknown;
1787
+ headers: unknown;
1788
+ response: {
1789
+ 200: Response;
1790
+ 422: {
1791
+ type: "validation";
1792
+ title: "Validation Error";
1793
+ status: 422;
1794
+ detail?: string;
1795
+ on: string;
1796
+ found?: unknown;
1797
+ property?: string;
1798
+ expected?: string;
1799
+ };
1800
+ };
1801
+ error: never;
1802
+ };
1803
+ };
1804
+ } & {
1805
+ [x: string]: {
1806
+ post: {
1807
+ body: unknown;
1808
+ params: {};
1809
+ query: unknown;
1810
+ headers: unknown;
1811
+ response: {
1812
+ 200: Response;
1813
+ };
1814
+ error: never;
1815
+ };
1816
+ };
1817
+ } & {
1818
+ [x: string]: {
1819
+ get: {
1820
+ body: unknown;
1821
+ params: {};
1822
+ query: {
1823
+ filter?: string | undefined;
1824
+ };
1825
+ headers: unknown;
1826
+ response: {
1827
+ 200: Response;
1828
+ 422: {
1829
+ type: "validation";
1830
+ title: "Validation Error";
1831
+ status: 422;
1832
+ detail?: string;
1833
+ on: string;
1834
+ found?: unknown;
1835
+ property?: string;
1836
+ expected?: string;
1837
+ };
1838
+ };
1839
+ error: never;
1840
+ };
1841
+ };
1842
+ } & {
1843
+ [x: string]: {
1844
+ get: {
1845
+ body: unknown;
1846
+ params: {
1847
+ id: string;
1848
+ };
1849
+ query: unknown;
1850
+ headers: unknown;
1851
+ response: {
1852
+ 200: Response;
1853
+ 422: {
1854
+ type: "validation";
1855
+ title: "Validation Error";
1856
+ status: 422;
1857
+ detail?: string;
1858
+ on: string;
1859
+ found?: unknown;
1860
+ property?: string;
1861
+ expected?: string;
1862
+ };
1863
+ };
1864
+ error: never;
1865
+ };
1866
+ };
1867
+ } & {
1868
+ [x: string]: {
1869
+ put: {
1870
+ body: unknown;
1871
+ params: {
1872
+ id: string;
1873
+ };
1874
+ query: unknown;
1875
+ headers: unknown;
1876
+ response: {
1877
+ 200: Response;
1878
+ 422: {
1879
+ type: "validation";
1880
+ title: "Validation Error";
1881
+ status: 422;
1882
+ detail?: string;
1883
+ on: string;
1884
+ found?: unknown;
1885
+ property?: string;
1886
+ expected?: string;
1887
+ };
1888
+ };
1889
+ error: never;
1890
+ };
1891
+ };
1892
+ } & {
1893
+ [x: string]: {
1894
+ patch: {
1895
+ body: unknown;
1896
+ params: {
1897
+ id: string;
1898
+ };
1899
+ query: unknown;
1900
+ headers: unknown;
1901
+ response: {
1902
+ 200: Response;
1903
+ 422: {
1904
+ type: "validation";
1905
+ title: "Validation Error";
1906
+ status: 422;
1907
+ detail?: string;
1908
+ on: string;
1909
+ found?: unknown;
1910
+ property?: string;
1911
+ expected?: string;
1912
+ };
1913
+ };
1914
+ error: never;
1915
+ };
1916
+ };
1917
+ } & {
1918
+ [x: string]: {
1919
+ delete: {
1920
+ body: unknown;
1921
+ params: {
1922
+ id: string;
1923
+ };
1924
+ query: unknown;
1925
+ headers: unknown;
1926
+ response: {
1927
+ 200: Response;
1928
+ 422: {
1929
+ type: "validation";
1930
+ title: "Validation Error";
1931
+ status: 422;
1932
+ detail?: string;
1933
+ on: string;
1934
+ found?: unknown;
1935
+ property?: string;
1936
+ expected?: string;
1937
+ };
1938
+ };
1939
+ error: never;
1940
+ };
1941
+ };
1942
+ } & {
1943
+ [x: string]: {
1944
+ get: {
1945
+ body: unknown;
1946
+ params: {};
1947
+ query: unknown;
1948
+ headers: unknown;
1949
+ response: {
1950
+ 200: Response;
1951
+ };
1952
+ error: never;
1953
+ };
1954
+ };
1955
+ } & {
1956
+ [x: string]: {
1957
+ get: {
1958
+ body: unknown;
1959
+ params: {
1960
+ id: string;
1961
+ };
1962
+ query: unknown;
1963
+ headers: unknown;
1964
+ response: {
1965
+ 200: Response;
1966
+ 422: {
1967
+ type: "validation";
1968
+ title: "Validation Error";
1969
+ status: 422;
1970
+ detail?: string;
1971
+ on: string;
1972
+ found?: unknown;
1973
+ property?: string;
1974
+ expected?: string;
1975
+ };
1976
+ };
1977
+ error: never;
1978
+ };
1979
+ };
1980
+ } & {
1981
+ [x: string]: {
1982
+ get: {
1983
+ body: unknown;
1984
+ params: {};
1985
+ query: unknown;
1986
+ headers: unknown;
1987
+ response: {
1988
+ 200: Response;
1989
+ };
1990
+ error: never;
1991
+ };
1992
+ };
1993
+ } & {
1994
+ [x: string]: {
1995
+ get: {
1996
+ body: unknown;
1997
+ params: {
1998
+ id: string;
1999
+ };
2000
+ query: unknown;
2001
+ headers: unknown;
2002
+ response: {
2003
+ 200: Response;
2004
+ 422: {
2005
+ type: "validation";
2006
+ title: "Validation Error";
2007
+ status: 422;
2008
+ detail?: string;
2009
+ on: string;
2010
+ found?: unknown;
2011
+ property?: string;
2012
+ expected?: string;
2013
+ };
2014
+ };
2015
+ error: never;
2016
+ };
2017
+ };
2018
+ }))) & ({} | {
2019
+ [x: string]: {
2020
+ post: {
2021
+ body: {
2022
+ client_id?: string | undefined;
2023
+ scope?: string | undefined;
2024
+ grant_type?: string | undefined;
2025
+ client_secret?: string | undefined;
2026
+ };
2027
+ params: {};
2028
+ query: unknown;
2029
+ headers: unknown;
2030
+ response: {
2031
+ 200: Response;
2032
+ 422: {
2033
+ type: "validation";
2034
+ title: "Validation Error";
2035
+ status: 422;
2036
+ detail?: string;
2037
+ on: string;
2038
+ found?: unknown;
2039
+ property?: string;
2040
+ expected?: string;
2041
+ };
2042
+ };
2043
+ error: never;
2044
+ };
2045
+ };
2046
+ })) & ({} | ({
2047
+ [x: string]: {
2048
+ get: {
2049
+ body: unknown;
2050
+ params: {};
2051
+ query: {
2052
+ client_id?: string | undefined;
2053
+ scope?: string | undefined;
2054
+ nonce?: string | undefined;
2055
+ claims?: string | undefined;
2056
+ resource?: string | undefined;
2057
+ request?: string | undefined;
2058
+ redirect_uri?: string | undefined;
2059
+ acr_values?: string | undefined;
2060
+ code_challenge?: string | undefined;
2061
+ code_challenge_method?: string | undefined;
2062
+ id_token_hint?: string | undefined;
2063
+ max_age?: string | undefined;
2064
+ prompt?: string | undefined;
2065
+ request_uri?: string | undefined;
2066
+ response_mode?: string | undefined;
2067
+ response_type?: string | undefined;
2068
+ state?: string | undefined;
2069
+ };
2070
+ headers: unknown;
2071
+ response: {
2072
+ 200: Response;
2073
+ 422: {
2074
+ type: "validation";
2075
+ title: "Validation Error";
2076
+ status: 422;
2077
+ detail?: string;
2078
+ on: string;
2079
+ found?: unknown;
2080
+ property?: string;
2081
+ expected?: string;
2082
+ };
2083
+ };
2084
+ error: never;
2085
+ };
2086
+ };
2087
+ } & {
2088
+ [x: string]: {
2089
+ post: {
2090
+ body: {
2091
+ code?: string | undefined;
2092
+ client_id?: string | undefined;
2093
+ scope?: string | undefined;
2094
+ audience?: string | undefined;
2095
+ resource?: string | undefined;
2096
+ refresh_token?: string | undefined;
2097
+ device_code?: string | undefined;
2098
+ auth_req_id?: string | undefined;
2099
+ grant_type?: string | undefined;
2100
+ claim_token?: string | undefined;
2101
+ assertion?: string | undefined;
2102
+ client_secret?: string | undefined;
2103
+ redirect_uri?: string | undefined;
2104
+ client_assertion?: string | undefined;
2105
+ client_assertion_type?: string | undefined;
2106
+ code_verifier?: string | undefined;
2107
+ 'pre-authorized_code'?: string | undefined;
2108
+ subject_token?: string | undefined;
2109
+ subject_token_type?: string | undefined;
2110
+ };
2111
+ params: {};
2112
+ query: unknown;
2113
+ headers: unknown;
2114
+ response: {
2115
+ 200: Response;
2116
+ 422: {
2117
+ type: "validation";
2118
+ title: "Validation Error";
2119
+ status: 422;
2120
+ detail?: string;
2121
+ on: string;
2122
+ found?: unknown;
2123
+ property?: string;
2124
+ expected?: string;
2125
+ };
2126
+ };
2127
+ error: never;
2128
+ };
2129
+ };
2130
+ } & {
2131
+ [x: string]: {
2132
+ post: {
2133
+ body: {
2134
+ client_id?: string | undefined;
2135
+ scope?: string | undefined;
2136
+ nonce?: string | undefined;
2137
+ audience?: string | undefined;
2138
+ claims?: string | undefined;
2139
+ resource?: string | undefined;
2140
+ client_secret?: string | undefined;
2141
+ redirect_uri?: string | undefined;
2142
+ acr_values?: string | undefined;
2143
+ code_challenge?: string | undefined;
2144
+ code_challenge_method?: string | undefined;
2145
+ response_type?: string | undefined;
2146
+ state?: string | undefined;
2147
+ client_assertion?: string | undefined;
2148
+ client_assertion_type?: string | undefined;
2149
+ };
2150
+ params: {};
2151
+ query: unknown;
2152
+ headers: {
2153
+ authorization?: string | undefined;
2154
+ };
2155
+ response: {
2156
+ 200: Response;
2157
+ 422: {
2158
+ type: "validation";
2159
+ title: "Validation Error";
2160
+ status: 422;
2161
+ detail?: string;
2162
+ on: string;
2163
+ found?: unknown;
2164
+ property?: string;
2165
+ expected?: string;
2166
+ };
2167
+ };
2168
+ error: never;
2169
+ };
2170
+ };
2171
+ } & {
2172
+ [x: string]: {
2173
+ post: {
2174
+ body: {
2175
+ client_id?: string | undefined;
2176
+ client_secret?: string | undefined;
2177
+ token_type_hint?: string | undefined;
2178
+ token: string;
2179
+ };
2180
+ params: {};
2181
+ query: unknown;
2182
+ headers: {
2183
+ authorization?: string | undefined;
2184
+ };
2185
+ response: {
2186
+ 200: Response;
2187
+ 422: {
2188
+ type: "validation";
2189
+ title: "Validation Error";
2190
+ status: 422;
2191
+ detail?: string;
2192
+ on: string;
2193
+ found?: unknown;
2194
+ property?: string;
2195
+ expected?: string;
2196
+ };
2197
+ };
2198
+ error: never;
2199
+ };
2200
+ };
2201
+ } & {
2202
+ [x: string]: {
2203
+ post: {
2204
+ body: {
2205
+ client_id?: string | undefined;
2206
+ client_secret?: string | undefined;
2207
+ token_type_hint?: string | undefined;
2208
+ token: string;
2209
+ };
2210
+ params: {};
2211
+ query: unknown;
2212
+ headers: {
2213
+ authorization?: string | undefined;
2214
+ };
2215
+ response: {
2216
+ 200: Response;
2217
+ 422: {
2218
+ type: "validation";
2219
+ title: "Validation Error";
2220
+ status: 422;
2221
+ detail?: string;
2222
+ on: string;
2223
+ found?: unknown;
2224
+ property?: string;
2225
+ expected?: string;
2226
+ };
2227
+ };
2228
+ error: never;
2229
+ };
2230
+ };
2231
+ } & {
2232
+ [x: string]: {
2233
+ post: {
2234
+ body: {
2235
+ client_id?: string | undefined;
2236
+ scope?: string | undefined;
2237
+ client_secret?: string | undefined;
2238
+ login_hint?: string | undefined;
2239
+ binding_message?: string | undefined;
2240
+ };
2241
+ params: {};
2242
+ query: unknown;
2243
+ headers: {
2244
+ authorization?: string | undefined;
2245
+ };
2246
+ response: {
2247
+ 200: Response;
2248
+ 422: {
2249
+ type: "validation";
2250
+ title: "Validation Error";
2251
+ status: 422;
2252
+ detail?: string;
2253
+ on: string;
2254
+ found?: unknown;
2255
+ property?: string;
2256
+ expected?: string;
2257
+ };
2258
+ };
2259
+ error: never;
2260
+ };
2261
+ };
2262
+ } & {
2263
+ [x: string]: {
2264
+ post: {
2265
+ body: {
2266
+ client_id?: string | undefined;
2267
+ scope?: string | undefined;
2268
+ client_secret?: string | undefined;
2269
+ };
2270
+ params: {};
2271
+ query: unknown;
2272
+ headers: {
2273
+ authorization?: string | undefined;
2274
+ };
2275
+ response: {
2276
+ 200: Response;
2277
+ 422: {
2278
+ type: "validation";
2279
+ title: "Validation Error";
2280
+ status: 422;
2281
+ detail?: string;
2282
+ on: string;
2283
+ found?: unknown;
2284
+ property?: string;
2285
+ expected?: string;
2286
+ };
2287
+ };
2288
+ error: never;
2289
+ };
2290
+ };
2291
+ } & {
2292
+ [x: string]: {
2293
+ post: {
2294
+ body: {
2295
+ action?: "deny" | "approve" | undefined;
2296
+ user_code: string;
2297
+ };
2298
+ params: {};
2299
+ query: unknown;
2300
+ headers: unknown;
2301
+ response: {
2302
+ 200: Response;
2303
+ 422: {
2304
+ type: "validation";
2305
+ title: "Validation Error";
2306
+ status: 422;
2307
+ detail?: string;
2308
+ on: string;
2309
+ found?: unknown;
2310
+ property?: string;
2311
+ expected?: string;
2312
+ };
2313
+ };
2314
+ error: never;
2315
+ };
2316
+ };
2317
+ } & {
2318
+ [x: string]: {
2319
+ get: {
2320
+ body: unknown;
2321
+ params: {};
2322
+ query: {
2323
+ client_id?: string | undefined;
2324
+ id_token_hint?: string | undefined;
2325
+ state?: string | undefined;
2326
+ post_logout_redirect_uri?: string | undefined;
2327
+ };
2328
+ headers: unknown;
2329
+ response: {
2330
+ 200: Response;
2331
+ 422: {
2332
+ type: "validation";
2333
+ title: "Validation Error";
2334
+ status: 422;
2335
+ detail?: string;
2336
+ on: string;
2337
+ found?: unknown;
2338
+ property?: string;
2339
+ expected?: string;
2340
+ };
2341
+ };
2342
+ error: never;
2343
+ };
2344
+ };
2345
+ } & {
2346
+ [x: string]: {
2347
+ post: {
2348
+ body: {
2349
+ client_id?: string | undefined;
2350
+ id_token_hint?: string | undefined;
2351
+ state?: string | undefined;
2352
+ post_logout_redirect_uri?: string | undefined;
2353
+ };
2354
+ params: {};
2355
+ query: unknown;
2356
+ headers: unknown;
2357
+ response: {
2358
+ 200: Response;
2359
+ 422: {
2360
+ type: "validation";
2361
+ title: "Validation Error";
2362
+ status: 422;
2363
+ detail?: string;
2364
+ on: string;
2365
+ found?: unknown;
2366
+ property?: string;
2367
+ expected?: string;
2368
+ };
2369
+ };
2370
+ error: never;
2371
+ };
2372
+ };
2373
+ } & {
2374
+ [x: string]: {
2375
+ post: {
2376
+ body: {
2377
+ jwks?: any;
2378
+ scope?: string | undefined;
2379
+ backchannel_logout_uri?: string | undefined;
2380
+ client_name?: string | undefined;
2381
+ grant_types?: string[] | undefined;
2382
+ jwks_uri?: string | undefined;
2383
+ post_logout_redirect_uris?: string[] | undefined;
2384
+ redirect_uris?: string[] | undefined;
2385
+ };
2386
+ params: {};
2387
+ query: unknown;
2388
+ headers: {
2389
+ authorization?: string | undefined;
2390
+ };
2391
+ response: {
2392
+ 200: Response;
2393
+ 422: {
2394
+ type: "validation";
2395
+ title: "Validation Error";
2396
+ status: 422;
2397
+ detail?: string;
2398
+ on: string;
2399
+ found?: unknown;
2400
+ property?: string;
2401
+ expected?: string;
2402
+ };
2403
+ };
2404
+ error: never;
2405
+ };
2406
+ };
2407
+ } & {
2408
+ [x: string]: {
2409
+ ":clientId": {
2410
+ get: {
2411
+ body: unknown;
2412
+ params: {
2413
+ clientId: string;
2414
+ };
2415
+ query: unknown;
2416
+ headers: {
2417
+ authorization?: string | undefined;
2418
+ };
2419
+ response: {
2420
+ 200: Response;
2421
+ 422: {
2422
+ type: "validation";
2423
+ title: "Validation Error";
2424
+ status: 422;
2425
+ detail?: string;
2426
+ on: string;
2427
+ found?: unknown;
2428
+ property?: string;
2429
+ expected?: string;
2430
+ };
2431
+ };
2432
+ error: never;
2433
+ };
2434
+ };
2435
+ };
2436
+ } & {
2437
+ [x: string]: {
2438
+ ":clientId": {
2439
+ put: {
2440
+ body: {
2441
+ jwks?: any;
2442
+ scope?: string | undefined;
2443
+ backchannel_logout_uri?: string | undefined;
2444
+ client_name?: string | undefined;
2445
+ grant_types?: string[] | undefined;
2446
+ jwks_uri?: string | undefined;
2447
+ post_logout_redirect_uris?: string[] | undefined;
2448
+ redirect_uris?: string[] | undefined;
2449
+ };
2450
+ params: {
2451
+ clientId: string;
2452
+ };
2453
+ query: unknown;
2454
+ headers: {
2455
+ authorization?: string | undefined;
2456
+ };
2457
+ response: {
2458
+ 200: Response;
2459
+ 422: {
2460
+ type: "validation";
2461
+ title: "Validation Error";
2462
+ status: 422;
2463
+ detail?: string;
2464
+ on: string;
2465
+ found?: unknown;
2466
+ property?: string;
2467
+ expected?: string;
2468
+ };
2469
+ };
2470
+ error: never;
2471
+ };
2472
+ };
2473
+ };
2474
+ } & {
2475
+ [x: string]: {
2476
+ ":clientId": {
2477
+ delete: {
2478
+ body: unknown;
2479
+ params: {
2480
+ clientId: string;
2481
+ };
2482
+ query: unknown;
2483
+ headers: {
2484
+ authorization?: string | undefined;
2485
+ };
2486
+ response: {
2487
+ 200: Response;
2488
+ 422: {
2489
+ type: "validation";
2490
+ title: "Validation Error";
2491
+ status: 422;
2492
+ detail?: string;
2493
+ on: string;
2494
+ found?: unknown;
2495
+ property?: string;
2496
+ expected?: string;
2497
+ };
2498
+ };
2499
+ error: never;
2500
+ };
2501
+ };
2502
+ };
2503
+ } & {
2504
+ [x: string]: {
2505
+ get: {
2506
+ body: unknown;
2507
+ params: {};
2508
+ query: unknown;
2509
+ headers: {
2510
+ authorization?: string | undefined;
2511
+ };
2512
+ response: {
2513
+ 200: Response;
2514
+ 422: {
2515
+ type: "validation";
2516
+ title: "Validation Error";
2517
+ status: 422;
2518
+ detail?: string;
2519
+ on: string;
2520
+ found?: unknown;
2521
+ property?: string;
2522
+ expected?: string;
2523
+ };
2524
+ };
2525
+ error: never;
2526
+ };
2527
+ };
2528
+ } & {
2529
+ [x: string]: {
2530
+ post: {
2531
+ body: {
2532
+ access_token?: string | undefined;
2533
+ };
2534
+ params: {};
2535
+ query: unknown;
2536
+ headers: {
2537
+ authorization?: string | undefined;
2538
+ };
2539
+ response: {
2540
+ 200: Response;
2541
+ 422: {
2542
+ type: "validation";
2543
+ title: "Validation Error";
2544
+ status: 422;
2545
+ detail?: string;
2546
+ on: string;
2547
+ found?: unknown;
2548
+ property?: string;
2549
+ expected?: string;
2550
+ };
2551
+ };
2552
+ error: never;
2553
+ };
2554
+ };
2555
+ } & {
2556
+ [x: string]: {
2557
+ get: {
2558
+ body: unknown;
2559
+ params: {};
2560
+ query: unknown;
2561
+ headers: unknown;
2562
+ response: {
2563
+ 200: {
2564
+ keys: {
2565
+ alg: string;
2566
+ crv: string | undefined;
2567
+ kid: string;
2568
+ kty: string | undefined;
2569
+ use: string;
2570
+ x: string | undefined;
2571
+ y: string | undefined;
2572
+ }[];
2573
+ };
2574
+ };
2575
+ error: never;
2576
+ };
2577
+ };
2578
+ } & {
2579
+ ".well-known": {
2580
+ "openid-configuration": {
2581
+ get: {
2582
+ body: unknown;
2583
+ params: {};
2584
+ query: unknown;
2585
+ headers: unknown;
2586
+ response: {
2587
+ 200: Record<string, unknown>;
2588
+ };
2589
+ error: never;
2590
+ };
2591
+ };
2592
+ };
2593
+ } & {
2594
+ ".well-known": {
2595
+ "oauth-authorization-server": {
2596
+ get: {
2597
+ body: unknown;
2598
+ params: {};
2599
+ query: unknown;
2600
+ headers: unknown;
2601
+ response: {
2602
+ 200: Record<string, unknown>;
2603
+ };
2604
+ error: never;
2605
+ };
2606
+ };
2607
+ };
2608
+ }))) & ({} | ({
2609
+ [x: string]: {
2610
+ get: {
2611
+ body: unknown;
2612
+ params: {};
2613
+ query: unknown;
2614
+ headers: unknown;
2615
+ response: {
2616
+ 401: "Authentication required";
2617
+ 200: {
2618
+ readonly organizations: {
2619
+ membership: import(".").OrganizationMembership;
2620
+ organization: import(".").Organization | undefined;
2621
+ }[];
2622
+ };
2623
+ 422: {
2624
+ type: "validation";
2625
+ title: "Validation Error";
2626
+ status: 422;
2627
+ detail?: string;
2628
+ on: string;
2629
+ found?: unknown;
2630
+ property?: string;
2631
+ expected?: string;
2632
+ };
2633
+ };
2634
+ error: never;
2635
+ };
2636
+ };
2637
+ } & {
2638
+ [x: string]: {
2639
+ post: {
2640
+ body: {
2641
+ metadata?: Record<string, unknown> | undefined;
2642
+ name: string;
2643
+ };
2644
+ params: {};
2645
+ query: unknown;
2646
+ headers: unknown;
2647
+ response: {
2648
+ 401: "Authentication required";
2649
+ 403: "Cannot create organizations";
2650
+ 200: {
2651
+ readonly organization: import(".").Organization;
2652
+ };
2653
+ 422: {
2654
+ type: "validation";
2655
+ title: "Validation Error";
2656
+ status: 422;
2657
+ detail?: string;
2658
+ on: string;
2659
+ found?: unknown;
2660
+ property?: string;
2661
+ expected?: string;
2662
+ };
2663
+ };
2664
+ error: never;
2665
+ };
2666
+ };
2667
+ } & {
2668
+ [x: string]: {
2669
+ ":organizationId": {
2670
+ invitations: {
2671
+ post: {
2672
+ body: {
2673
+ roles?: string[] | undefined;
2674
+ email: string;
2675
+ };
2676
+ params: {
2677
+ organizationId: string;
2678
+ };
2679
+ query: unknown;
2680
+ headers: unknown;
2681
+ response: {
2682
+ 401: "Authentication required";
2683
+ 403: "Cannot manage members";
2684
+ 200: {
2685
+ readonly invitationId: string;
2686
+ readonly token: string;
2687
+ };
2688
+ 422: {
2689
+ type: "validation";
2690
+ title: "Validation Error";
2691
+ status: 422;
2692
+ detail?: string;
2693
+ on: string;
2694
+ found?: unknown;
2695
+ property?: string;
2696
+ expected?: string;
2697
+ };
2698
+ };
2699
+ error: never;
2700
+ };
2701
+ };
2702
+ };
2703
+ };
2704
+ } & {
2705
+ [x: string]: {
2706
+ ":organizationId": {
2707
+ invitations: {
2708
+ get: {
2709
+ body: unknown;
2710
+ params: {
2711
+ organizationId: string;
2712
+ };
2713
+ query: unknown;
2714
+ headers: unknown;
2715
+ response: {
2716
+ 401: "Authentication required";
2717
+ 403: "Cannot manage members";
2718
+ 200: {
2719
+ readonly invitations: {
2720
+ email: string;
2721
+ expiresAt: number;
2722
+ invitationId: string;
2723
+ roles: string[];
2724
+ state: import(".").InvitationState;
2725
+ }[];
2726
+ };
2727
+ 422: {
2728
+ type: "validation";
2729
+ title: "Validation Error";
2730
+ status: 422;
2731
+ detail?: string;
2732
+ on: string;
2733
+ found?: unknown;
2734
+ property?: string;
2735
+ expected?: string;
2736
+ };
2737
+ };
2738
+ error: never;
2739
+ };
2740
+ };
2741
+ };
2742
+ };
2743
+ } & {
2744
+ [x: string]: {
2745
+ ":organizationId": {
2746
+ invitations: {
2747
+ ":invitationId": {
2748
+ delete: {
2749
+ body: unknown;
2750
+ params: {
2751
+ organizationId: string;
2752
+ invitationId: string;
2753
+ };
2754
+ query: unknown;
2755
+ headers: unknown;
2756
+ response: {
2757
+ 401: "Authentication required";
2758
+ 403: "Cannot manage members";
2759
+ 404: "Invitation not found";
2760
+ 200: {
2761
+ readonly revoked: string;
2762
+ };
2763
+ 422: {
2764
+ type: "validation";
2765
+ title: "Validation Error";
2766
+ status: 422;
2767
+ detail?: string;
2768
+ on: string;
2769
+ found?: unknown;
2770
+ property?: string;
2771
+ expected?: string;
2772
+ };
2773
+ };
2774
+ error: never;
2775
+ };
2776
+ };
2777
+ };
2778
+ };
2779
+ };
2780
+ } & {
2781
+ [x: string]: {
2782
+ invitations: {
2783
+ accept: {
2784
+ post: {
2785
+ body: {
2786
+ token: string;
2787
+ };
2788
+ params: {};
2789
+ query: unknown;
2790
+ headers: unknown;
2791
+ response: {
2792
+ 400: "Invalid or expired invitation";
2793
+ 401: "Authentication required";
2794
+ 200: {
2795
+ readonly organizationId: string;
2796
+ readonly roles: string[];
2797
+ };
2798
+ 422: {
2799
+ type: "validation";
2800
+ title: "Validation Error";
2801
+ status: 422;
2802
+ detail?: string;
2803
+ on: string;
2804
+ found?: unknown;
2805
+ property?: string;
2806
+ expected?: string;
2807
+ };
2808
+ };
2809
+ error: never;
2810
+ };
2811
+ };
2812
+ };
2813
+ };
2814
+ } & {
2815
+ [x: string]: {
2816
+ ":organizationId": {
2817
+ members: {
2818
+ get: {
2819
+ body: unknown;
2820
+ params: {
2821
+ organizationId: string;
2822
+ };
2823
+ query: unknown;
2824
+ headers: unknown;
2825
+ response: {
2826
+ 401: "Authentication required";
2827
+ 403: "Not a member";
2828
+ 200: {
2829
+ readonly members: import(".").OrganizationMembership[];
2830
+ };
2831
+ 422: {
2832
+ type: "validation";
2833
+ title: "Validation Error";
2834
+ status: 422;
2835
+ detail?: string;
2836
+ on: string;
2837
+ found?: unknown;
2838
+ property?: string;
2839
+ expected?: string;
2840
+ };
2841
+ };
2842
+ error: never;
2843
+ };
2844
+ };
2845
+ };
2846
+ };
2847
+ } & {
2848
+ [x: string]: {
2849
+ ":organizationId": {
2850
+ members: {
2851
+ ":userId": {
2852
+ delete: {
2853
+ body: unknown;
2854
+ params: {
2855
+ userId: string;
2856
+ organizationId: string;
2857
+ };
2858
+ query: unknown;
2859
+ headers: unknown;
2860
+ response: {
2861
+ 401: "Authentication required";
2862
+ 403: "Cannot manage members";
2863
+ 200: {
2864
+ readonly removed: string;
2865
+ };
2866
+ 422: {
2867
+ type: "validation";
2868
+ title: "Validation Error";
2869
+ status: 422;
2870
+ detail?: string;
2871
+ on: string;
2872
+ found?: unknown;
2873
+ property?: string;
2874
+ expected?: string;
2875
+ };
2876
+ };
2877
+ error: never;
2878
+ };
2879
+ };
2880
+ };
2881
+ };
2882
+ };
2883
+ }))) & ({} | ({
2884
+ [x: string]: {
2885
+ ":organizationId": {
2886
+ get: {
2887
+ body: unknown;
2888
+ params: {
2889
+ organizationId: string;
2890
+ };
2891
+ query: unknown;
2892
+ headers: unknown;
2893
+ response: {
2894
+ 401: "Authentication required";
2895
+ 403: "Cannot manage roles";
2896
+ 200: {
2897
+ readonly roles: readonly import(".").Role[];
2898
+ };
2899
+ 422: {
2900
+ type: "validation";
2901
+ title: "Validation Error";
2902
+ status: 422;
2903
+ detail?: string;
2904
+ on: string;
2905
+ found?: unknown;
2906
+ property?: string;
2907
+ expected?: string;
2908
+ };
2909
+ };
2910
+ error: never;
2911
+ };
2912
+ };
2913
+ };
2914
+ } & {
2915
+ [x: string]: {
2916
+ ":organizationId": {
2917
+ members: {
2918
+ ":userId": {
2919
+ put: {
2920
+ body: {
2921
+ roles: string[];
2922
+ };
2923
+ params: {
2924
+ userId: string;
2925
+ organizationId: string;
2926
+ };
2927
+ query: unknown;
2928
+ headers: unknown;
2929
+ response: {
2930
+ 401: "Authentication required";
2931
+ 403: "Cannot manage roles";
2932
+ 404: "Membership not found";
2933
+ 200: {
2934
+ readonly roles: string[];
2935
+ };
2936
+ 422: {
2937
+ type: "validation";
2938
+ title: "Validation Error";
2939
+ status: 422;
2940
+ detail?: string;
2941
+ on: string;
2942
+ found?: unknown;
2943
+ property?: string;
2944
+ expected?: string;
2945
+ };
2946
+ };
2947
+ error: never;
2948
+ };
2949
+ };
2950
+ };
2951
+ };
2952
+ };
2953
+ })))) & ((((({} | ({
2954
+ [x: string]: {
2955
+ session: {
2956
+ get: {
2957
+ body: unknown;
2958
+ params: {};
2959
+ query: unknown;
2960
+ headers: unknown;
2961
+ response: {
2962
+ 401: "Invalid or expired setup link";
2963
+ 200: {
2964
+ readonly capabilities: import(".").SetupCapability[];
2965
+ readonly configured: {
2966
+ readonly oidc: boolean;
2967
+ readonly saml: boolean;
2968
+ };
2969
+ readonly expiresAt: number;
2970
+ readonly oidc: {
2971
+ redirectUri: string;
2972
+ } | undefined;
2973
+ readonly organizationId: string;
2974
+ readonly saml: {
2975
+ acsUrl: string;
2976
+ entityId: string;
2977
+ metadataUrl: string;
2978
+ } | undefined;
2979
+ readonly scim: {
2980
+ baseUrl: string;
2981
+ } | undefined;
2982
+ };
2983
+ };
2984
+ error: never;
2985
+ };
2986
+ };
2987
+ };
2988
+ } & {
2989
+ [x: string]: {
2990
+ connection: {
2991
+ saml: {
2992
+ put: {
2993
+ body: {
2994
+ idpSloUrl?: string | undefined;
2995
+ idpEntityId: string;
2996
+ idpSsoUrl: string;
2997
+ idpX509Cert: string;
2998
+ };
2999
+ params: {};
3000
+ query: unknown;
3001
+ headers: unknown;
3002
+ response: {
3003
+ 401: "Invalid or expired setup link";
3004
+ 403: "This setup link cannot configure SAML";
3005
+ 501: "SSO is not configured";
3006
+ 200: {
3007
+ readonly configured: true;
3008
+ readonly type: "saml";
3009
+ };
3010
+ 422: {
3011
+ type: "validation";
3012
+ title: "Validation Error";
3013
+ status: 422;
3014
+ detail?: string;
3015
+ on: string;
3016
+ found?: unknown;
3017
+ property?: string;
3018
+ expected?: string;
3019
+ };
3020
+ };
3021
+ error: never;
3022
+ };
3023
+ };
3024
+ };
3025
+ };
3026
+ } & {
3027
+ [x: string]: {
3028
+ connection: {
3029
+ oidc: {
3030
+ put: {
3031
+ body: {
3032
+ scopes?: string[] | undefined;
3033
+ redirectUri?: string | undefined;
3034
+ issuer: string;
3035
+ clientId: string;
3036
+ clientSecret: string;
3037
+ };
3038
+ params: {};
3039
+ query: unknown;
3040
+ headers: unknown;
3041
+ response: {
3042
+ 401: "Invalid or expired setup link";
3043
+ 403: "This setup link cannot configure OIDC";
3044
+ 501: "SSO is not configured";
3045
+ 200: {
3046
+ readonly configured: true;
3047
+ readonly type: "oidc";
3048
+ };
3049
+ 422: {
3050
+ type: "validation";
3051
+ title: "Validation Error";
3052
+ status: 422;
3053
+ detail?: string;
3054
+ on: string;
3055
+ found?: unknown;
3056
+ property?: string;
3057
+ expected?: string;
3058
+ };
3059
+ };
3060
+ error: never;
3061
+ };
3062
+ };
3063
+ };
3064
+ };
3065
+ } & {
3066
+ [x: string]: {
3067
+ scim: {
3068
+ token: {
3069
+ post: {
3070
+ body: unknown;
3071
+ params: {};
3072
+ query: unknown;
3073
+ headers: unknown;
3074
+ response: {
3075
+ 401: "Invalid or expired setup link";
3076
+ 403: "This setup link cannot configure SCIM";
3077
+ 501: "SCIM is not configured";
3078
+ 200: {
3079
+ readonly baseUrl: `${string}/${string}`;
3080
+ readonly token: string;
3081
+ readonly tokenId: string;
3082
+ };
3083
+ };
3084
+ error: never;
3085
+ };
3086
+ };
3087
+ };
3088
+ };
3089
+ })) & ({} | ({
3090
+ [x: string]: {
3091
+ register: {
3092
+ options: {
3093
+ post: {
3094
+ body: unknown;
3095
+ params: {};
3096
+ query: unknown;
3097
+ headers: unknown;
3098
+ response: {
3099
+ 401: "Authentication required";
3100
+ 200: {
3101
+ [x: string]: unknown;
3102
+ };
3103
+ 422: {
3104
+ type: "validation";
3105
+ title: "Validation Error";
3106
+ status: 422;
3107
+ detail?: string;
3108
+ on: string;
3109
+ found?: unknown;
3110
+ property?: string;
3111
+ expected?: string;
3112
+ };
3113
+ };
3114
+ error: never;
3115
+ };
3116
+ };
3117
+ };
3118
+ };
3119
+ } & {
3120
+ [x: string]: {
3121
+ register: {
3122
+ verify: {
3123
+ post: {
3124
+ body: object;
3125
+ params: {};
3126
+ query: unknown;
3127
+ headers: unknown;
3128
+ response: {
3129
+ 400: "No registration challenge in progress" | "WebAuthn registration failed";
3130
+ 401: "Authentication required";
3131
+ 200: {
3132
+ readonly credentialId: string;
3133
+ readonly verified: true;
3134
+ };
3135
+ 422: {
3136
+ type: "validation";
3137
+ title: "Validation Error";
3138
+ status: 422;
3139
+ detail?: string;
3140
+ on: string;
3141
+ found?: unknown;
3142
+ property?: string;
3143
+ expected?: string;
3144
+ };
3145
+ };
3146
+ error: never;
3147
+ };
3148
+ };
3149
+ };
3150
+ };
3151
+ } & {
3152
+ [x: string]: {
3153
+ authenticate: {
3154
+ options: {
3155
+ post: {
3156
+ body: unknown;
3157
+ params: {};
3158
+ query: unknown;
3159
+ headers: unknown;
3160
+ response: {
3161
+ 200: {
3162
+ [x: string]: unknown;
3163
+ };
3164
+ 422: {
3165
+ type: "validation";
3166
+ title: "Validation Error";
3167
+ status: 422;
3168
+ detail?: string;
3169
+ on: string;
3170
+ found?: unknown;
3171
+ property?: string;
3172
+ expected?: string;
3173
+ };
3174
+ };
3175
+ error: never;
3176
+ };
3177
+ };
3178
+ };
3179
+ };
3180
+ } & {
3181
+ [x: string]: {
3182
+ authenticate: {
3183
+ verify: {
3184
+ post: {
3185
+ body: {
3186
+ id: string;
3187
+ };
3188
+ params: {};
3189
+ query: unknown;
3190
+ headers: unknown;
3191
+ response: {
3192
+ 400: "No authentication challenge in progress";
3193
+ 401: "Unknown credential" | "WebAuthn authentication failed";
3194
+ 200: {
3195
+ readonly status: "authenticated";
3196
+ };
3197
+ 422: {
3198
+ type: "validation";
3199
+ title: "Validation Error";
3200
+ status: 422;
3201
+ detail?: string;
3202
+ on: string;
3203
+ found?: unknown;
3204
+ property?: string;
3205
+ expected?: string;
3206
+ };
3207
+ };
3208
+ error: never;
3209
+ };
3210
+ };
3211
+ };
3212
+ };
3213
+ }))) & ({} | ({
3214
+ [x: string]: {
3215
+ export: {
3216
+ get: {
3217
+ body: unknown;
3218
+ params: {};
3219
+ query: unknown;
3220
+ headers: unknown;
3221
+ response: {
3222
+ 401: "Authentication required";
3223
+ 200: {
3224
+ [x: string]: unknown;
3225
+ };
3226
+ 422: {
3227
+ type: "validation";
3228
+ title: "Validation Error";
3229
+ status: 422;
3230
+ detail?: string;
3231
+ on: string;
3232
+ found?: unknown;
3233
+ property?: string;
3234
+ expected?: string;
3235
+ };
3236
+ };
3237
+ error: never;
3238
+ };
3239
+ };
3240
+ };
3241
+ } & {
3242
+ [x: string]: {
3243
+ delete: {
3244
+ body: unknown;
3245
+ params: {};
3246
+ query: unknown;
3247
+ headers: unknown;
3248
+ response: {
3249
+ 401: "Authentication required";
3250
+ 200: {
3251
+ readonly deleted: true;
3252
+ };
3253
+ 422: {
3254
+ type: "validation";
3255
+ title: "Validation Error";
3256
+ status: 422;
3257
+ detail?: string;
3258
+ on: string;
3259
+ found?: unknown;
3260
+ property?: string;
3261
+ expected?: string;
3262
+ };
3263
+ };
3264
+ error: never;
3265
+ };
3266
+ };
3267
+ }))) & ({} | ({
3268
+ htmx: {
3269
+ login: {
3270
+ get: {
3271
+ body: unknown;
3272
+ params: {};
3273
+ query: unknown;
3274
+ headers: unknown;
3275
+ response: {
3276
+ 200: Response;
3277
+ 422: {
3278
+ type: "validation";
3279
+ title: "Validation Error";
3280
+ status: 422;
3281
+ detail?: string;
3282
+ on: string;
3283
+ found?: unknown;
3284
+ property?: string;
3285
+ expected?: string;
3286
+ };
3287
+ };
3288
+ error: never;
3289
+ };
3290
+ };
3291
+ };
3292
+ } & {
3293
+ htmx: {
3294
+ link: {
3295
+ get: {
3296
+ body: unknown;
3297
+ params: {};
3298
+ query: unknown;
3299
+ headers: unknown;
3300
+ response: {
3301
+ 200: Response;
3302
+ 422: {
3303
+ type: "validation";
3304
+ title: "Validation Error";
3305
+ status: 422;
3306
+ detail?: string;
3307
+ on: string;
3308
+ found?: unknown;
3309
+ property?: string;
3310
+ expected?: string;
3311
+ };
3312
+ };
3313
+ error: never;
3314
+ };
3315
+ };
3316
+ };
3317
+ } & {
3318
+ htmx: {
3319
+ "connector-links": {
3320
+ get: {
3321
+ body: unknown;
3322
+ params: {};
3323
+ query: unknown;
3324
+ headers: unknown;
3325
+ response: {
3326
+ 200: Response;
3327
+ 422: {
3328
+ type: "validation";
3329
+ title: "Validation Error";
3330
+ status: 422;
3331
+ detail?: string;
3332
+ on: string;
3333
+ found?: unknown;
3334
+ property?: string;
3335
+ expected?: string;
3336
+ };
3337
+ };
3338
+ error: never;
3339
+ };
3340
+ };
3341
+ };
3342
+ } & {
3343
+ htmx: {
3344
+ "auth-menu": {
3345
+ get: {
3346
+ body: unknown;
3347
+ params: {};
3348
+ query: unknown;
3349
+ headers: unknown;
3350
+ response: {
3351
+ 400: "Cookies are missing";
3352
+ 401: "User is not authenticated";
3353
+ 200: Response;
3354
+ 422: {
3355
+ type: "validation";
3356
+ title: "Validation Error";
3357
+ status: 422;
3358
+ detail?: string;
3359
+ on: string;
3360
+ found?: unknown;
3361
+ property?: string;
3362
+ expected?: string;
3363
+ };
3364
+ };
3365
+ error: never;
3366
+ };
3367
+ };
3368
+ };
3369
+ } & {
3370
+ htmx: {
3371
+ me: {
3372
+ get: {
3373
+ body: unknown;
3374
+ params: {};
3375
+ query: unknown;
3376
+ headers: unknown;
3377
+ response: {
3378
+ 400: "Cookies are missing";
3379
+ 401: "User is not authenticated";
3380
+ 200: Response;
3381
+ 422: {
3382
+ type: "validation";
3383
+ title: "Validation Error";
3384
+ status: 422;
3385
+ detail?: string;
3386
+ on: string;
3387
+ found?: unknown;
3388
+ property?: string;
3389
+ expected?: string;
3390
+ };
3391
+ };
3392
+ error: never;
3393
+ };
3394
+ };
3395
+ };
3396
+ } & {
3397
+ htmx: {
3398
+ account: {
3399
+ get: {
3400
+ body: unknown;
3401
+ params: {};
3402
+ query: unknown;
3403
+ headers: unknown;
3404
+ response: {
3405
+ 400: "Cookies are missing";
3406
+ 401: "User is not authenticated";
3407
+ 200: Response;
3408
+ 422: {
3409
+ type: "validation";
3410
+ title: "Validation Error";
3411
+ status: 422;
3412
+ detail?: string;
3413
+ on: string;
3414
+ found?: unknown;
3415
+ property?: string;
3416
+ expected?: string;
3417
+ };
3418
+ };
3419
+ error: never;
3420
+ };
3421
+ };
3422
+ };
3423
+ } & {
3424
+ htmx: {
3425
+ identities: {
3426
+ get: {
3427
+ body: unknown;
3428
+ params: {};
3429
+ query: unknown;
3430
+ headers: unknown;
3431
+ response: {
3432
+ 200: {};
3433
+ 422: {
3434
+ type: "validation";
3435
+ title: "Validation Error";
3436
+ status: 422;
3437
+ detail?: string;
3438
+ on: string;
3439
+ found?: unknown;
3440
+ property?: string;
3441
+ expected?: string;
3442
+ };
3443
+ };
3444
+ error: never;
3445
+ };
3446
+ };
3447
+ };
3448
+ } & {
3449
+ htmx: {
3450
+ identities: {
3451
+ ":id": {
3452
+ primary: {
3453
+ post: {
3454
+ body: unknown;
3455
+ params: {
3456
+ id: string;
3457
+ } & {};
3458
+ query: unknown;
3459
+ headers: unknown;
3460
+ response: {
3461
+ 200: {};
3462
+ 422: {
3463
+ type: "validation";
3464
+ title: "Validation Error";
3465
+ status: 422;
3466
+ detail?: string;
3467
+ on: string;
3468
+ found?: unknown;
3469
+ property?: string;
3470
+ expected?: string;
3471
+ };
3472
+ };
3473
+ error: never;
3474
+ };
3475
+ };
3476
+ };
3477
+ };
3478
+ };
3479
+ } & {
3480
+ htmx: {
3481
+ identities: {
3482
+ ":id": {
3483
+ delete: {
3484
+ body: unknown;
3485
+ params: {
3486
+ id: string;
3487
+ } & {};
3488
+ query: unknown;
3489
+ headers: unknown;
3490
+ response: {
3491
+ 200: {};
3492
+ 422: {
3493
+ type: "validation";
3494
+ title: "Validation Error";
3495
+ status: 422;
3496
+ detail?: string;
3497
+ on: string;
3498
+ found?: unknown;
3499
+ property?: string;
3500
+ expected?: string;
3501
+ };
3502
+ };
3503
+ error: never;
3504
+ };
3505
+ };
3506
+ };
3507
+ };
3508
+ } & {
3509
+ htmx: {
3510
+ merge: {
3511
+ ":id": {
3512
+ post: {
3513
+ body: unknown;
3514
+ params: {
3515
+ id: string;
3516
+ } & {};
3517
+ query: unknown;
3518
+ headers: unknown;
3519
+ response: {
3520
+ 200: {};
3521
+ 422: {
3522
+ type: "validation";
3523
+ title: "Validation Error";
3524
+ status: 422;
3525
+ detail?: string;
3526
+ on: string;
3527
+ found?: unknown;
3528
+ property?: string;
3529
+ expected?: string;
3530
+ };
3531
+ };
3532
+ error: never;
3533
+ };
3534
+ };
3535
+ };
3536
+ };
3537
+ } & {
3538
+ htmx: {
3539
+ merge: {
3540
+ ":id": {
3541
+ delete: {
3542
+ body: unknown;
3543
+ params: {
3544
+ id: string;
3545
+ } & {};
3546
+ query: unknown;
3547
+ headers: unknown;
3548
+ response: {
3549
+ 200: {};
3550
+ 422: {
3551
+ type: "validation";
3552
+ title: "Validation Error";
3553
+ status: 422;
3554
+ detail?: string;
3555
+ on: string;
3556
+ found?: unknown;
3557
+ property?: string;
3558
+ expected?: string;
3559
+ };
3560
+ };
3561
+ error: never;
3562
+ };
3563
+ };
3564
+ };
3565
+ };
3566
+ } & {
3567
+ htmx: {
3568
+ "connector-list": {
3569
+ get: {
3570
+ body: unknown;
3571
+ params: {};
3572
+ query: unknown;
3573
+ headers: unknown;
3574
+ response: {
3575
+ 400: "Cookies are missing";
3576
+ 401: "User is not authenticated";
3577
+ 200: Response;
3578
+ 422: {
3579
+ type: "validation";
3580
+ title: "Validation Error";
3581
+ status: 422;
3582
+ detail?: string;
3583
+ on: string;
3584
+ found?: unknown;
3585
+ property?: string;
3586
+ expected?: string;
3587
+ };
3588
+ };
3589
+ error: never;
3590
+ };
3591
+ };
3592
+ };
3593
+ } & {
3594
+ htmx: {
3595
+ connectors: {
3596
+ grants: {
3597
+ ":id": {
3598
+ delete: {
3599
+ body: unknown;
3600
+ params: {
3601
+ id: string;
3602
+ } & {};
3603
+ query: unknown;
3604
+ headers: unknown;
3605
+ response: {
3606
+ 200: {};
3607
+ 422: {
3608
+ type: "validation";
3609
+ title: "Validation Error";
3610
+ status: 422;
3611
+ detail?: string;
3612
+ on: string;
3613
+ found?: unknown;
3614
+ property?: string;
3615
+ expected?: string;
3616
+ };
3617
+ };
3618
+ error: never;
3619
+ };
3620
+ };
3621
+ };
3622
+ };
3623
+ };
3624
+ } & {
3625
+ htmx: {
3626
+ connectors: {
3627
+ bindings: {
3628
+ ":id": {
3629
+ delete: {
3630
+ body: unknown;
3631
+ params: {
3632
+ id: string;
3633
+ } & {};
3634
+ query: unknown;
3635
+ headers: unknown;
3636
+ response: {
3637
+ 200: {};
3638
+ 422: {
3639
+ type: "validation";
3640
+ title: "Validation Error";
3641
+ status: 422;
3642
+ detail?: string;
3643
+ on: string;
3644
+ found?: unknown;
3645
+ property?: string;
3646
+ expected?: string;
3647
+ };
3648
+ };
3649
+ error: never;
3650
+ };
3651
+ };
3652
+ };
3653
+ };
3654
+ };
3655
+ } & {
3656
+ htmx: {
3657
+ "login-redirect": {
3658
+ get: {
3659
+ body: unknown;
3660
+ params: {};
3661
+ query: unknown;
3662
+ headers: unknown;
3663
+ response: {
3664
+ 200: Response;
3665
+ 422: {
3666
+ type: "validation";
3667
+ title: "Validation Error";
3668
+ status: 422;
3669
+ detail?: string;
3670
+ on: string;
3671
+ found?: unknown;
3672
+ property?: string;
3673
+ expected?: string;
3674
+ };
3675
+ };
3676
+ error: never;
3677
+ };
3678
+ };
3679
+ };
3680
+ } & {
3681
+ htmx: {
3682
+ "delete-account": {
3683
+ post: {
3684
+ body: unknown;
3685
+ params: {};
3686
+ query: unknown;
3687
+ headers: unknown;
3688
+ response: {
3689
+ 200: {};
3690
+ 422: {
3691
+ type: "validation";
3692
+ title: "Validation Error";
3693
+ status: 422;
3694
+ detail?: string;
3695
+ on: string;
3696
+ found?: unknown;
3697
+ property?: string;
3698
+ expected?: string;
3699
+ };
3700
+ };
3701
+ error: never;
3702
+ };
3703
+ };
3704
+ };
3705
+ } & {
3706
+ htmx: {
3707
+ signout: {
3708
+ get: {
3709
+ body: unknown;
3710
+ params: {};
3711
+ query: unknown;
3712
+ headers: unknown;
3713
+ response: {
3714
+ 200: Response;
3715
+ 422: {
3716
+ type: "validation";
3717
+ title: "Validation Error";
3718
+ status: 422;
3719
+ detail?: string;
3720
+ on: string;
3721
+ found?: unknown;
3722
+ property?: string;
3723
+ expected?: string;
3724
+ };
3725
+ };
3726
+ error: never;
3727
+ };
3728
+ };
3729
+ };
3730
+ }))) & ({} | ({
3731
+ [x: string]: {
3732
+ get: {
3733
+ body: unknown;
3734
+ params: {};
3735
+ query: unknown;
3736
+ headers: unknown;
3737
+ response: {
3738
+ 200: {
3739
+ resource: string;
3740
+ scopes_supported: string[];
3741
+ resource_name?: string | undefined;
3742
+ resource_logo_uri?: string | undefined;
3743
+ authorization_servers: string[];
3744
+ bearer_methods_supported: string[];
3745
+ };
3746
+ };
3747
+ error: never;
3748
+ };
3749
+ };
3750
+ } & {
3751
+ [x: string]: {
3752
+ get: {
3753
+ body: unknown;
3754
+ params: {};
3755
+ query: unknown;
3756
+ headers: unknown;
3757
+ response: {
3758
+ 200: Response;
3759
+ };
3760
+ error: never;
3761
+ };
3762
+ };
3763
+ } & {
3764
+ [x: string]: {
3765
+ get: {
3766
+ body: unknown;
3767
+ params: {};
3768
+ query: unknown;
3769
+ headers: unknown;
3770
+ response: {
3771
+ 200: Response;
3772
+ };
3773
+ error: never;
3774
+ };
3775
+ };
3776
+ } & {
3777
+ [x: string]: {
3778
+ post: {
3779
+ body: unknown;
3780
+ params: {};
3781
+ query: unknown;
3782
+ headers: unknown;
3783
+ response: {
3784
+ 200: Response;
3785
+ };
3786
+ error: never;
3787
+ };
3788
+ };
3789
+ } & {
3790
+ [x: string]: {
3791
+ post: {
3792
+ body: unknown;
3793
+ params: {};
3794
+ query: unknown;
3795
+ headers: unknown;
3796
+ response: {
3797
+ 200: Response;
3798
+ };
3799
+ error: never;
3800
+ };
3801
+ };
3802
+ } & {
3803
+ [x: string]: {
3804
+ post: {
3805
+ body: unknown;
3806
+ params: {};
3807
+ query: unknown;
3808
+ headers: unknown;
3809
+ response: {
3810
+ 200: Response;
3811
+ };
3812
+ error: never;
3813
+ };
3814
+ };
3815
+ }))), import("elysia/types").DefaultEphemeral, {
3816
+ derive: {};
3817
+ schema: {};
3818
+ schemas: {};
3819
+ response: {};
3820
+ error: [];
3821
+ }>;
3822
+ }>;
3823
+ export * from './actions';
3824
+ export { consumeSocketTicket, issueSocketTicket } from './oidc/socketTickets';
3825
+ export { ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV, parseAbsoluteNativeAuthClients, withAbsoluteNativeAuthClients, type AbsoluteNativeAuthClient } from './oidc/nativeClients';
3826
+ export type AuthApplications<UserType> = Awaited<ReturnType<typeof createAuthApplications<UserType>>>;
3827
+ export { createAuthContext } from './authContext';
3828
+ export type { AuthInstance } from './authContext';
3829
+ export * from './types';
3830
+ export * from './principal';
3831
+ export * from './typebox';
3832
+ export * from './vault/config';
3833
+ export * from './vault/types';
3834
+ export { createInMemoryVaultStore } from './vault/inMemoryVaultStore';
3835
+ export { createNeonVaultStore, createPostgresVaultStore, vaultEntriesTable } from './vault/postgresVaultStore';
3836
+ export { createFederatedTokenStore, getOrRefreshFederatedTokens } from './federation/tokenStore';
3837
+ export type { FederatedTokenRefresher, FederatedTokenSet, FederatedTokenStore } from './federation/tokenStore';
3838
+ export { decodeSessionUserRecord, type AuthSessionStore, type SessionUserDecoder } from './session/types';
3839
+ export { isAuthIntent, isUserSessionId, isValidUser } from './typeGuards';
3840
+ export { readSessionCookie } from './session/cookieReader';
3841
+ export { AuthIdentityConflictError } from './errors';
3842
+ export { sessionStore } from './session/state';
3843
+ export { createInMemoryAuthSessionStore } from './session/inMemoryStore';
3844
+ export { createNeonAuthSessionStore } from './session/neonStore';
3845
+ export { providersFromEnv, type ProviderSelection } from './providersFromEnv';
3846
+ export { createRedisAuthSessionStore, type RedisSessionClient } from './session/redisStore';
3847
+ export { createLinkedProviderCredentialResolver } from './linkedProviders/resolver';
3848
+ export { createOAuthLinkedProviderCredentialResolver } from './linkedProviders/oauthResolver';
3849
+ export { createOAuthAccountLinkedProviderCredentialResolver, type OAuthLinkedProviderAccount, type OAuthLinkedProviderAccountStore } from './linkedProviders/oauthAccountResolver';
3850
+ export { createNeonLinkedProviderStores, createNeonOAuthLinkedProviderCredentialResolver } from './linkedProviders/neonStores';
3851
+ export { createInMemoryLinkedProviderStores } from './linkedProviders/inMemoryStores';
3852
+ export { protectRoutePlugin } from './routes/protectRoute';
3853
+ export { requireAuthPlugin } from './routes/requireAuth';
3854
+ export { sessionRoutes } from './routes/sessions';
3855
+ export { stepUpPlugin } from './routes/stepUp';
3856
+ export * from './session/sessionsConfig';
3857
+ export { endImpersonation, isImpersonating, startImpersonation } from './session/impersonation';
3858
+ export { createAnonymousSession, isAnonymousSession } from './session/anonymous';
3859
+ export { addToSessionRing, listRingSessions, readSessionRing, removeFromSessionRing, switchActiveSession } from './session/multiSession';
3860
+ export { listUserSessions, refreshUserSessions, revokeUserSessions } from './session/userSessions';
3861
+ export type { UserSession } from './session/userSessions';
3862
+ export { sessionCleanup } from './session/cleanup';
3863
+ export { createAuthHtmxRoutes } from './htmx/routes';
3864
+ export { resolveAuthHtmxRenderers } from './htmx/renderers';
3865
+ export type { AuthHtmxConfig, AuthHtmxConnectorTarget, AuthHtmxProviderData, AuthHtmxProviderInfo, AuthHtmxRenderOverrides, AuthHtmxRenderersConfig, AuthHtmxUser, AuthIdentityPayload, LinkedProviderPayload } from './htmx/types';
3866
+ export * from './utils';
3867
+ export * from './redirect';
3868
+ export * from './csrf';
3869
+ export { buildClientProviders, resolveClientProviderEntry, resolveProviderClientConfiguration } from './providers/clients';
3870
+ export type { OAuth2TokenResponse, OAuth2Client, OAuth2ClientForConfig, CustomProviderCredentials, ProviderConfig, ProviderOption, PKCEProvider, OIDCProvider, RefreshableProvider, RevocableProvider, ScopeRequiredProvider, ProvidersMap, ProviderConfiguration, CredentialsFor } from 'citra';
3871
+ export { providers, providerOptions, createCustomOAuth2Client, defineProvider, refreshableProviderOptions, revocableProviderOptions, oidcProviderOptions, pkceProviderOptions, scopeRequiredProviderOptions, decodeJWT, extractPropFromIdentity, isValidProviderOption, isRefreshableOAuth2Client, isRefreshableProviderOption, isOIDCProviderOption, isPKCEProviderOption, isRevocableProviderOption, isRevocableOAuth2Client } from 'citra';
3872
+ export * from './crypto';
3873
+ export * from './tenancy';
3874
+ export * from './credentials/config';
3875
+ export * from './credentials/passwordPolicy';
3876
+ export * from './credentials/backgroundOps';
3877
+ export * from './credentials/emailValidation';
3878
+ export { importUser, importUsers, rehashCredentialPassword } from './credentials/import';
3879
+ export type { ImportUserResult, ImportUsersOptions, ImportableUser } from './credentials/import';
3880
+ export { isLegacyHash, verifyAuth0Pbkdf2, verifyCognitoSha256 } from './credentials/legacyHashers';
3881
+ export * from './credentials/types';
3882
+ export { credentialRoutes } from './credentials/routes';
3883
+ export { credentialsEmailVerification } from './credentials/emailVerification';
3884
+ export { credentialsLogin } from './credentials/login';
3885
+ export { credentialsPasswordReset } from './credentials/passwordReset';
3886
+ export { credentialsRegister } from './credentials/register';
3887
+ export { createInMemoryCredentialStore } from './credentials/inMemoryCredentialStore';
3888
+ export { createNeonCredentialStore, createPostgresCredentialStore, credentialResetTokensTable, credentialsTable, credentialVerificationTokensTable } from './credentials/postgresCredentialStore';
3889
+ export { createNeonDatabase } from './stores/postgres';
3890
+ export type { AnyPgDatabase } from './stores/postgres';
3891
+ export * from './mfa/config';
3892
+ export * from './mfa/types';
3893
+ export * from './verification/types';
3894
+ export { consumeBackupCode, generateBackupCodes } from './mfa/backupCodes';
3895
+ export { createMfaGate } from './mfa/gate';
3896
+ export { mfaChallenge } from './mfa/challenge';
3897
+ export { mfaRoutes } from './mfa/routes';
3898
+ export { mfaManagementRoutes, type MfaStatus } from './mfa/management';
3899
+ export { rotateMfaEncryptionKey } from './mfa/rotation';
3900
+ export type { MfaKeyRotationResult } from './mfa/rotation';
3901
+ export { mfaTotpRoutes } from './mfa/totp';
3902
+ export { isE164Phone, maskPhone, mfaSmsRoutes } from './mfa/sms';
3903
+ export { decryptTotpSecret, encryptTotpSecret } from './mfa/secret';
3904
+ export { createInMemoryMfaStore } from './mfa/inMemoryMfaStore';
3905
+ export { createNeonMfaStore, createPostgresMfaStore, mfaEnrollmentsTable } from './mfa/postgresMfaStore';
3906
+ export * from './audit/config';
3907
+ export * from './audit/types';
3908
+ export { createTamperEvidentSink, hashAuditEvent, verifyAuditChain } from './audit/integrity';
3909
+ export type { AuditChainResult, AuditIntegrity } from './audit/integrity';
3910
+ export { createSiemLogStream } from './audit/siem';
3911
+ export type { SiemEndpoint, SiemFormat } from './audit/siem';
3912
+ export * from './abuse/captcha';
3913
+ export * from './abuse/config';
3914
+ export * from './authorization/config';
3915
+ export { protectPermissionPlugin } from './authorization/protectPermission';
3916
+ export * from './compliance/config';
3917
+ export { complianceRoutes } from './compliance/routes';
3918
+ export { createAuditRedactor } from './compliance/redaction';
3919
+ export { createSecretCipher } from './compliance/cipher';
3920
+ export type { SecretCipher } from './compliance/cipher';
3921
+ export * from './lockout/config';
3922
+ export * from './lockout/types';
3923
+ export { createInMemoryLockoutStore } from './lockout/inMemoryLockoutStore';
3924
+ export { createNeonLockoutStore, createPostgresLockoutStore, lockoutsTable } from './lockout/postgresLockoutStore';
3925
+ export { createRedisLockoutStore } from './lockout/redisLockoutStore';
3926
+ export type { RedisLike } from './stores/redis';
3927
+ export { exportAuditCsv } from './audit/export';
3928
+ export { createInMemoryAuditSink } from './audit/inMemoryAuditStore';
3929
+ export { auditEventsTable, createNeonAuditSink, createPostgresAuditSink } from './audit/postgresAuditStore';
3930
+ export * from './sso/types';
3931
+ export * from './sso/config';
3932
+ export * from './scim/types';
3933
+ export * from './scim/config';
3934
+ export * from './scim/extensions';
3935
+ export { scimRoutes } from './scim/routes';
3936
+ export * from './vc/sdJwt';
3937
+ export { buildIssuerMetadata, createCredentialOffer, DEFAULT_VCI_ROUTE, exchangePreAuthorizedCode, issueCredential, PRE_AUTHORIZED_CODE_GRANT } from './oidc/vci';
3938
+ export type { CredentialConfiguration, CredentialIssueInput, CredentialIssueResult, CredentialNonceRecord, CredentialNonceStore, CredentialOffer, CredentialOfferStore, PreAuthExchangeResult, VciConfig } from './oidc/vci';
3939
+ export { createInMemoryCredentialNonceStore, createInMemoryCredentialOfferStore } from './oidc/inMemoryVciStores';
3940
+ export { vciRoutes } from './oidc/vciRoutes';
3941
+ export * from './vc/statusList';
3942
+ export { statusListRoutes, DEFAULT_STATUS_ROUTE } from './vc/statusListRoutes';
3943
+ export { buildHolderKeyBindingJwt, createPresentationRequest, parsePresentationToken, verifyPresentationResponse } from './vc/openid4vp';
3944
+ export type { CreatePresentationRequestInput, PresentationRequest, PresentationRequestStore, PresentationResponseInput, PresentationVerifyError, PresentationVerifyResult, VerifiedPresentation, Vp4Config } from './vc/openid4vp';
3945
+ export { createInMemoryPresentationRequestStore } from './vc/inMemoryVpStores';
3946
+ export { vpRoutes, DEFAULT_VP_ROUTE } from './vc/vpRoutes';
3947
+ export { createNeonCredentialNonceStore, createNeonCredentialOfferStore, createNeonPresentationRequestStore, createPostgresCredentialNonceStore, createPostgresCredentialOfferStore, createPostgresPresentationRequestStore, vcCredentialNoncesTable, vcCredentialOffersTable, vcPresentationRequestsTable } from './vc/postgresVcStores';
3948
+ export { createInMemoryScimTokenStore } from './scim/inMemoryScimTokenStore';
3949
+ export { createNeonScimTokenStore, createPostgresScimTokenStore, scimTokensTable } from './scim/postgresScimTokenStore';
3950
+ export * from './apikeys/config';
3951
+ export * from './apikeys/types';
3952
+ export { apiKeysRoutes } from './apikeys/routes';
3953
+ export * from './agents/config';
3954
+ export * from './agents/types';
3955
+ export * from './agents/registration';
3956
+ export * from './agents/registrationClient';
3957
+ export * from './agents/idJag';
3958
+ export * from './agents/oauthGuide';
3959
+ export { agentAuthPlugin, agentAuthChallenge } from './agents/routes';
3960
+ export { resolveAgentPrincipal, agentHasScopes } from './agents/principal';
3961
+ export { createOidcAgentCredentialVerifier } from './agents/oidcAdapter';
3962
+ export { createInMemoryAgentDelegationStore, createInMemoryAgentIdentityRegistrationStore, createInMemoryAgentRegistrationStore } from './agents/inMemoryStores';
3963
+ export { agentDelegationsTable, agentDelegationsBunSqlTable, agentIdentityRegistrationsTable, agentIdentityRegistrationsBunSqlTable, agentRegistrationsTable, agentRegistrationsBunSqlTable, createBunSqlDrizzleAgentDelegationStore, createBunSqlDrizzleAgentIdentityRegistrationStore, createBunSqlDrizzleAgentRegistrationStore, createNeonAgentDelegationStore, createNeonAgentIdentityRegistrationStore, createNeonAgentRegistrationStore, createDrizzleAgentDelegationStore, createPostgresAgentDelegationStore, createPostgresAgentIdentityRegistrationStore, createPostgresAgentRegistrationStore } from './agents/postgresStores';
3964
+ export { createInMemoryAccessTokenStore, createInMemoryApiClientStore, createInMemoryApiKeyStore } from './apikeys/inMemoryStores';
3965
+ export { accessTokensTable, apiClientsTable, apiKeysTable, createNeonAccessTokenStore, createNeonApiClientStore, createNeonApiKeyStore, createPostgresAccessTokenStore, createPostgresApiClientStore, createPostgresApiKeyStore } from './apikeys/postgresStores';
3966
+ export * from './oidc/config';
3967
+ export * from './oidc/clientIdMetadata';
3968
+ export * from './oidc/types';
3969
+ export { oidcProviderRoutes } from './oidc/routes';
3970
+ export { generateSigningKey, jwkThumbprint, signJwt, signingVerificationKeys, toPublicJwk, verifyJwt, verifyJwtWithKeys } from './oidc/keys';
3971
+ export type { SigningKey, SigningKeyIdentity } from './oidc/keys';
3972
+ export { extractDpopNonceClaim, mintDpopNonce, verifyDpopNonce, verifyDpopProof } from './oidc/dpop';
3973
+ export type { DpopResult } from './oidc/dpop';
3974
+ export { CLIENT_ASSERTION_TYPE, verifyClientAssertion, verifyJwtSignedByClient } from './oidc/clientAuth';
3975
+ export { parseSignedRequestObject } from './oidc/jar';
3976
+ export type { JarParseResult } from './oidc/jar';
3977
+ export { computeCertThumbprint, extractRfc9440ClientCert, resolveClientCert, verifyCertificateBoundToken } from './oidc/mtls';
3978
+ export { createInMemoryAuthorizationCodeStore, createInMemoryBackchannelAuthStore, createInMemoryClientAssertionJtiStore, createInMemoryClientRegistrationTokenStore, createInMemoryDeviceAuthorizationStore, createInMemoryInitialAccessTokenStore, createInMemoryLogoutDeliveryStore, createInMemoryOAuthClientStore, createInMemoryOidcRefreshTokenStore, createInMemoryPushedAuthorizationRequestStore, createInMemorySocketTicketStore } from './oidc/inMemoryStores';
3979
+ export { consumePushedRequest, pushAuthorizationRequest, DEFAULT_PAR_TTL_MS, REQUEST_URI_PREFIX } from './oidc/par';
3980
+ export { fetchUserInfo, readUserInfoBearer, userInfoChallengeHeader } from './oidc/userinfo';
3981
+ export type { UserInfoResult } from './oidc/userinfo';
3982
+ export { fanOutBackchannelLogout, mintLogoutToken, resolvePostLogoutRedirect, verifyIdTokenHint } from './oidc/logout';
3983
+ export { createNeonAuthorizationCodeStore, createNeonBackchannelAuthStore, createNeonClientAssertionJtiStore, createNeonClientRegistrationTokenStore, createNeonDeviceAuthorizationStore, createNeonInitialAccessTokenStore, createNeonLogoutDeliveryStore, createNeonOAuthClientStore, createNeonOidcRefreshTokenStore, createNeonPushedAuthorizationRequestStore, createNeonSocketTicketStore, createPostgresAuthorizationCodeStore, createPostgresBackchannelAuthStore, createPostgresClientAssertionJtiStore, createPostgresClientRegistrationTokenStore, createPostgresDeviceAuthorizationStore, createPostgresInitialAccessTokenStore, createPostgresLogoutDeliveryStore, createPostgresOAuthClientStore, createPostgresOidcRefreshTokenStore, createPostgresPushedAuthorizationRequestStore, createPostgresSocketTicketStore, oauthClientAssertionJtisTable, oauthClientRegistrationTokensTable, oauthClientsTable, oauthCodesTable, oauthBackchannelAuthRequestsTable, oauthDeviceAuthorizationsTable, oauthInitialAccessTokensTable, oauthLogoutDeliveriesTable, oauthPushedAuthorizationRequestsTable, oauthRefreshTokensTable, oauthSocketTicketsTable } from './oidc/postgresStores';
3984
+ export { deleteRegisteredClient, getRegisteredClient, registerClient, updateRegisteredClient, type ClientRegistrationDecision, type ClientRegistrationMetadata, type OnClientRegistration, type RegisterClientResult } from './oidc/registration';
3985
+ export * from './adaptive/config';
3986
+ export * from './adaptive/fingerprint';
3987
+ export * from './adaptive/types';
3988
+ export { createInMemoryKnownDeviceStore, createInMemoryLoginHistoryStore } from './adaptive/inMemoryStores';
3989
+ export { createNeonKnownDeviceStore, createNeonLoginHistoryStore, createPostgresKnownDeviceStore, createPostgresLoginHistoryStore, knownDevicesTable, loginHistoryTable } from './adaptive/postgresStores';
3990
+ export * from './fga/config';
3991
+ export * from './fga/schema';
3992
+ export * from './fga/types';
3993
+ export { createInMemoryWarrantStore, warrantKey } from './fga/inMemoryStores';
3994
+ export { createRedisFgaCache, type RedisFgaCacheClient } from './fga/redisCheckCache';
3995
+ export { initTracing, withSpan, type TracingConfig } from './telemetry/tracing';
3996
+ export { blockMigrations, runMigrations, type BlockMigrations, type BlockName, type Migration } from './migrations';
3997
+ export type { MigrationClient, MigrationQueryResult, MigrationRunResult, RunMigrationsOptions } from './migrations/runner';
3998
+ export { createNeonWarrantStore, createPostgresWarrantStore, warrantsTable } from './fga/postgresStores';
3999
+ export { ssoDiscoveryRoute } from './sso/discoveryRoute';
4000
+ export { oidcSsoRoutes } from './sso/oidcRoutes';
4001
+ export { samlIdpRoutes } from './sso/samlIdpRoutes';
4002
+ export { samlSsoRoutes } from './sso/samlRoutes';
4003
+ export { createInMemorySamlServiceProviderStore } from './sso/inMemorySamlServiceProviderStore';
4004
+ export { createInMemorySsoConnectionStore } from './sso/inMemorySsoConnectionStore';
4005
+ export { createNeonSamlServiceProviderStore, createPostgresSamlServiceProviderStore, samlServiceProvidersTable } from './sso/postgresSamlServiceProviderStore';
4006
+ export { createNeonSsoConnectionStore, createPostgresSsoConnectionStore, ssoConnectionsTable } from './sso/postgresSsoConnectionStore';
4007
+ export * from './webauthn/adapter';
4008
+ export * from './webauthn/config';
4009
+ export * from './webauthn/types';
4010
+ export { webauthnRoutes } from './webauthn/routes';
4011
+ export { createInMemoryWebAuthnCredentialStore } from './webauthn/inMemoryWebAuthnCredentialStore';
4012
+ export { createNeonWebAuthnCredentialStore, createPostgresWebAuthnCredentialStore, webauthnCredentialsTable } from './webauthn/postgresWebAuthnCredentialStore';
4013
+ export * from './organizations/config';
4014
+ export * from './organizations/types';
4015
+ export { acceptInvitation, createOrganization, inviteToOrganization, listUserOrganizations } from './organizations/operations';
4016
+ export { organizationRoutes } from './organizations/routes';
4017
+ export { createInMemoryOrganizationStore } from './organizations/inMemoryOrganizationStore';
4018
+ export { createNeonOrganizationStore, createPostgresOrganizationStore, organizationInvitationsTable, organizationMembershipsTable, organizationsTable } from './organizations/postgresOrganizationStore';
4019
+ export * from './roles/config';
4020
+ export * from './roles/types';
4021
+ export { createMembershipPermissionResolver, resolvePermissions } from './roles/resolver';
4022
+ export { setMemberRoles } from './roles/operations';
4023
+ export { roleRoutes } from './roles/routes';
4024
+ export { createInMemoryRoleStore } from './roles/inMemoryRoleStore';
4025
+ export { createNeonRoleStore, createPostgresRoleStore, rolesTable } from './roles/postgresRoleStore';
4026
+ export * from './passwordless/config';
4027
+ export * from './passwordless/types';
4028
+ export { passwordlessRoutes } from './passwordless/routes';
4029
+ export { createInMemoryPasswordlessTokenStore } from './passwordless/inMemoryPasswordlessTokenStore';
4030
+ export { createNeonPasswordlessTokenStore, createPostgresPasswordlessTokenStore, passwordlessTokensTable } from './passwordless/postgresPasswordlessTokenStore';
4031
+ export * from './webhooks/config';
4032
+ export * from './webhooks/types';
4033
+ export { createWebhookDispatcher } from './webhooks/dispatcher';
4034
+ export { createInMemoryWebhookDeliveryStore } from './webhooks/inMemoryStore';
4035
+ export { createNeonWebhookDeliveryStore, createPostgresWebhookDeliveryStore, webhookDeliveriesTable } from './webhooks/postgresStore';
4036
+ export { signWebhook, verifyWebhookSignature } from './webhooks/sign';
4037
+ export * from './portal/config';
4038
+ export * from './portal/types';
4039
+ export { createSetupSession, resolveSetupSession } from './portal/operations';
4040
+ export { portalRoutes } from './portal/routes';
4041
+ export { createInMemorySetupSessionStore } from './portal/inMemorySetupSessionStore';
4042
+ export { createNeonSetupSessionStore, createPostgresSetupSessionStore, setupSessionsTable } from './portal/postgresSetupSessionStore';