@absolutejs/auth 0.74.0 → 0.75.1

package/dist/mfa/challenge.d.ts

@@ -43,7 +43,7 @@ export declare const mfaChallenge: <UserType>({ authSessionStore, challengeRoute
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/mfa/management.d.ts

@@ -79,7 +79,7 @@ export declare const mfaManagementRoutes: <UserType>({ authSessionStore, getUser
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/mfa/sms.d.ts

@@ -116,7 +116,7 @@ export declare const mfaSmsRoutes: <UserType>({ authSessionStore, getUserId, mfa
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/mfa/totp.d.ts

@@ -66,7 +66,7 @@ export declare const mfaTotpRoutes: <UserType>({ authSessionStore, backupCodeCou
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";

package/dist/nativePush.d.ts

@@ -1,41 +1,420 @@
 import type { AuthSessionSource } from './session/types';
 import { type AccessTokenPrincipalConfig, type AuthPrincipal } from './principal';
 export declare const DEFAULT_NATIVE_PUSH_ROUTE: "/auth/mobile/push";
-export type NativePushPlatform = 'apns' | 'fcm';
-export type NativePushRegistrationInput = {
+/** Canonical cross-platform push route. */
+export declare const DEFAULT_PUSH_ROUTE: "/auth/push";
+export type PushPlatform = 'apns' | 'fcm' | 'webpush';
+/** @deprecated Use PushPlatform. */
+export type NativePushPlatform = PushPlatform;
+export type WebPushRegistration = {
+    endpoint: string;
+    keys: {
+        auth: string;
+        p256dh: string;
+    };
+};
+type PushRegistrationCredential = {
+    platform: 'apns' | 'fcm';
+    token: string;
+} | {
+    platform: 'webpush';
+    subscription: WebPushRegistration;
+};
+export type PushRegistrationInput = PushRegistrationCredential & {
     /** Opaque server-issued installation identity, absent on first registration. */
     installationId?: string;
     locale?: string;
-    platform: NativePushPlatform;
     tenant: string;
-    token: string;
     topics: readonly string[];
     userId: string;
 };
-export type NativePushRemovalInput = {
+/** @deprecated Use PushRegistrationInput. */
+export type NativePushRegistrationInput = PushRegistrationInput;
+export type PushRemovalInput = {
     installationId: string;
     tenant: string;
     userId: string;
 };
-export type NativePushRegistrar = {
+/** @deprecated Use PushRemovalInput. */
+export type NativePushRemovalInput = PushRemovalInput;
+export type PushRegistrar = {
     /** Must verify ownership when installationId is present. */
-    registerInstallation(input: NativePushRegistrationInput): Promise<{
+    registerInstallation(input: PushRegistrationInput): Promise<{
         installationId: string;
     }>;
     /** Remove every provider token for this authenticated installation identity. */
-    removeInstallation(input: NativePushRemovalInput): Promise<void>;
+    removeInstallation(input: PushRemovalInput): Promise<void>;
 };
-export type NativePushConfig<UserType> = {
-    registrar: NativePushRegistrar;
+/** @deprecated Use PushRegistrar. */
+export type NativePushRegistrar = PushRegistrar;
+export type PushConfig<UserType> = {
+    registrar: PushRegistrar;
     /** Server-owned tenant identity. Clients cannot submit or override it. */
     tenant: string | ((principal: AuthPrincipal<UserType>) => Promise<string> | string);
     /** Server-owned topics. Clients cannot subscribe themselves to arbitrary topics. */
     topics?: (principal: AuthPrincipal<UserType>) => Promise<readonly string[]> | readonly string[];
 };
+/** @deprecated Use PushConfig. */
+export type NativePushConfig<UserType> = PushConfig<UserType>;
+export declare const pushRoutes: <UserType>({ accessTokens, authSessionStore, config }: {
+    accessTokens: AccessTokenPrincipalConfig<UserType>;
+    authSessionStore?: AuthSessionSource<UserType>;
+    config: PushConfig<UserType>;
+}) => import("elysia/types").AddRoute<"", "local", {
+    decorator: {};
+    store: {
+        session: import("./types").SessionRecord<UserType>;
+        unregisteredSession: import("./types").UnregisteredSessionRecord;
+    };
+    derive: {};
+}, {
+    typebox: {};
+    error: [];
+}, import("elysia/types").DefaultMetadata, {
+    auth: {
+        push: {
+            post: {
+                body: {
+                    installationId?: string | undefined;
+                    locale?: string | undefined;
+                    token: string;
+                    platform: "apns" | "fcm";
+                } | {
+                    installationId?: string | undefined;
+                    locale?: string | undefined;
+                    platform: "webpush";
+                    subscription: {
+                        keys: {
+                            auth: string;
+                            p256dh: string;
+                        };
+                        endpoint: string;
+                    };
+                };
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    401: "User is not authenticated";
+                    200: {
+                        installationId: string;
+                        registered: true;
+                    };
+                    409: {
+                        readonly code: "installation-ownership";
+                    };
+                    422: {
+                        type: "validation";
+                        title: "Validation Error";
+                        status: 422;
+                        detail?: string;
+                        on: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+                error: never;
+            };
+        };
+    };
+} & {
+    auth: {
+        mobile: {
+            push: {
+                post: {
+                    body: {
+                        installationId?: string | undefined;
+                        locale?: string | undefined;
+                        token: string;
+                        platform: "apns" | "fcm";
+                    } | {
+                        installationId?: string | undefined;
+                        locale?: string | undefined;
+                        platform: "webpush";
+                        subscription: {
+                            keys: {
+                                auth: string;
+                                p256dh: string;
+                            };
+                            endpoint: string;
+                        };
+                    };
+                    params: {};
+                    query: unknown;
+                    headers: unknown;
+                    response: {
+                        401: "User is not authenticated";
+                        200: {
+                            installationId: string;
+                            registered: true;
+                        };
+                        409: {
+                            readonly code: "installation-ownership";
+                        };
+                        422: {
+                            type: "validation";
+                            title: "Validation Error";
+                            status: 422;
+                            detail?: string;
+                            on: string;
+                            found?: unknown;
+                            property?: string;
+                            expected?: string;
+                        };
+                    };
+                    error: never;
+                };
+            };
+        };
+    };
+} & {
+    auth: {
+        push: {
+            delete: {
+                body: {
+                    installationId: string;
+                };
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    401: "User is not authenticated";
+                    200: {
+                        removed: true;
+                    };
+                    409: {
+                        readonly code: "installation-ownership";
+                    };
+                    422: {
+                        type: "validation";
+                        title: "Validation Error";
+                        status: 422;
+                        detail?: string;
+                        on: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+                error: never;
+            };
+        };
+    };
+}, import("elysia/types").DefaultEphemeral, {
+    derive: {
+        readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
+    };
+    schema: {};
+    schemas: import("elysia").UnwrapRoute<{
+        cookie: import("elysia").TCookieObject<{
+            user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
+        }>;
+        schema: "merge";
+    }, {}, "">;
+    response: import("elysia/types").ExtractErrorFromHandle<{
+        readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
+    }>;
+    error: [];
+}, "delete", "/auth/mobile/push", import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+    beforeHandle: ({ pushPrincipal, status }: {
+        pushPrincipal: AuthPrincipal<UserType> | undefined;
+        status: (code: "Unauthorized", body: string) => unknown;
+    }) => unknown;
+    body: import("typebox").TObject<{
+        installationId: import("typebox").TString;
+    }>;
+}, {}, "/auth/mobile/push">, import("elysia/types").MergeScopedSchemas<{}, {}, import("elysia").UnwrapRoute<{
+    cookie: import("elysia").TCookieObject<{
+        user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
+    }>;
+    schema: "merge";
+}, {}, "">>>, {}, ({ body, pushPrincipal, status }: {
+    body: {
+        installationId: string;
+    };
+    query: Record<string, string | undefined>;
+    params: {};
+    headers: Record<string, string | undefined>;
+    cookie: Record<string, import("elysia").Cookie<unknown>> & {
+        user_session_id: import("elysia").Cookie<`${string}-${string}-${string}-${string}-${string}` | undefined>;
+    };
+    server: import("elysia").Server | null;
+    redirect: import("elysia").redirect;
+    set: {
+        headers: import("elysia").HTTPHeaders;
+        status?: number | keyof import("elysia").StatusMap;
+        cookie?: Record<string, import("elysia").BaseCookie>;
+    };
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+        readonly 100: "Continue";
+        readonly 101: "Switching Protocols";
+        readonly 102: "Processing";
+        readonly 103: "Early Hints";
+        readonly 200: "OK";
+        readonly 201: "Created";
+        readonly 202: "Accepted";
+        readonly 203: "Non-Authoritative Information";
+        readonly 204: "No Content";
+        readonly 205: "Reset Content";
+        readonly 206: "Partial Content";
+        readonly 207: "Multi-Status";
+        readonly 208: "Already Reported";
+        readonly 300: "Multiple Choices";
+        readonly 301: "Moved Permanently";
+        readonly 302: "Found";
+        readonly 303: "See Other";
+        readonly 304: "Not Modified";
+        readonly 307: "Temporary Redirect";
+        readonly 308: "Permanent Redirect";
+        readonly 400: "Bad Request";
+        readonly 401: "Unauthorized";
+        readonly 402: "Payment Required";
+        readonly 403: "Forbidden";
+        readonly 404: "Not Found";
+        readonly 405: "Method Not Allowed";
+        readonly 406: "Not Acceptable";
+        readonly 407: "Proxy Authentication Required";
+        readonly 408: "Request Timeout";
+        readonly 409: "Conflict";
+        readonly 410: "Gone";
+        readonly 411: "Length Required";
+        readonly 412: "Precondition Failed";
+        readonly 413: "Payload Too Large";
+        readonly 414: "URI Too Long";
+        readonly 415: "Unsupported Media Type";
+        readonly 416: "Range Not Satisfiable";
+        readonly 417: "Expectation Failed";
+        readonly 418: "I'm a teapot";
+        readonly 420: "Enhance Your Calm";
+        readonly 421: "Misdirected Request";
+        readonly 422: "Unprocessable Content";
+        readonly 423: "Locked";
+        readonly 424: "Failed Dependency";
+        readonly 425: "Too Early";
+        readonly 426: "Upgrade Required";
+        readonly 428: "Precondition Required";
+        readonly 429: "Too Many Requests";
+        readonly 431: "Request Header Fields Too Large";
+        readonly 451: "Unavailable For Legal Reasons";
+        readonly 500: "Internal Server Error";
+        readonly 501: "Not Implemented";
+        readonly 502: "Bad Gateway";
+        readonly 503: "Service Unavailable";
+        readonly 504: "Gateway Timeout";
+        readonly 505: "HTTP Version Not Supported";
+        readonly 506: "Variant Also Negotiates";
+        readonly 507: "Insufficient Storage";
+        readonly 508: "Loop Detected";
+        readonly 510: "Not Extended";
+        readonly 511: "Network Authentication Required";
+    }[Code] : Code>(code: Code, response?: T) => import("elysia").ElysiaStatus<Code, T, Code extends "Continue" | "Switching Protocols" | "Processing" | "Early Hints" | "OK" | "Created" | "Accepted" | "Non-Authoritative Information" | "No Content" | "Reset Content" | "Partial Content" | "Multi-Status" | "Already Reported" | "Multiple Choices" | "Moved Permanently" | "Found" | "See Other" | "Not Modified" | "Temporary Redirect" | "Permanent Redirect" | "Bad Request" | "Unauthorized" | "Payment Required" | "Forbidden" | "Not Found" | "Method Not Allowed" | "Not Acceptable" | "Proxy Authentication Required" | "Request Timeout" | "Conflict" | "Gone" | "Length Required" | "Precondition Failed" | "Payload Too Large" | "URI Too Long" | "Unsupported Media Type" | "Range Not Satisfiable" | "Expectation Failed" | "I'm a teapot" | "Enhance Your Calm" | "Misdirected Request" | "Unprocessable Content" | "Locked" | "Failed Dependency" | "Too Early" | "Upgrade Required" | "Precondition Required" | "Too Many Requests" | "Request Header Fields Too Large" | "Unavailable For Legal Reasons" | "Internal Server Error" | "Not Implemented" | "Bad Gateway" | "Service Unavailable" | "Gateway Timeout" | "HTTP Version Not Supported" | "Variant Also Negotiates" | "Insufficient Storage" | "Loop Detected" | "Not Extended" | "Network Authentication Required" ? {
+        readonly Continue: 100;
+        readonly "Switching Protocols": 101;
+        readonly Processing: 102;
+        readonly "Early Hints": 103;
+        readonly OK: 200;
+        readonly Created: 201;
+        readonly Accepted: 202;
+        readonly "Non-Authoritative Information": 203;
+        readonly "No Content": 204;
+        readonly "Reset Content": 205;
+        readonly "Partial Content": 206;
+        readonly "Multi-Status": 207;
+        readonly "Already Reported": 208;
+        readonly "Multiple Choices": 300;
+        readonly "Moved Permanently": 301;
+        readonly Found: 302;
+        readonly "See Other": 303;
+        readonly "Not Modified": 304;
+        readonly "Temporary Redirect": 307;
+        readonly "Permanent Redirect": 308;
+        readonly "Bad Request": 400;
+        readonly Unauthorized: 401;
+        readonly "Payment Required": 402;
+        readonly Forbidden: 403;
+        readonly "Not Found": 404;
+        readonly "Method Not Allowed": 405;
+        readonly "Not Acceptable": 406;
+        readonly "Proxy Authentication Required": 407;
+        readonly "Request Timeout": 408;
+        readonly Conflict: 409;
+        readonly Gone: 410;
+        readonly "Length Required": 411;
+        readonly "Precondition Failed": 412;
+        readonly "Payload Too Large": 413;
+        readonly "URI Too Long": 414;
+        readonly "Unsupported Media Type": 415;
+        readonly "Range Not Satisfiable": 416;
+        readonly "Expectation Failed": 417;
+        readonly "I'm a teapot": 418;
+        readonly "Enhance Your Calm": 420;
+        readonly "Misdirected Request": 421;
+        readonly "Unprocessable Content": 422;
+        readonly Locked: 423;
+        readonly "Failed Dependency": 424;
+        readonly "Too Early": 425;
+        readonly "Upgrade Required": 426;
+        readonly "Precondition Required": 428;
+        readonly "Too Many Requests": 429;
+        readonly "Request Header Fields Too Large": 431;
+        readonly "Unavailable For Legal Reasons": 451;
+        readonly "Internal Server Error": 500;
+        readonly "Not Implemented": 501;
+        readonly "Bad Gateway": 502;
+        readonly "Service Unavailable": 503;
+        readonly "Gateway Timeout": 504;
+        readonly "HTTP Version Not Supported": 505;
+        readonly "Variant Also Negotiates": 506;
+        readonly "Insufficient Storage": 507;
+        readonly "Loop Detected": 508;
+        readonly "Not Extended": 510;
+        readonly "Network Authentication Required": 511;
+    }[Code] : Code>;
+    defer: (fn: import("elysia/types").AfterResponseHandler<NoInfer<import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+        beforeHandle: ({ pushPrincipal, status }: {
+            pushPrincipal: AuthPrincipal<UserType> | undefined;
+            status: (code: "Unauthorized", body: string) => unknown;
+        }) => unknown;
+        body: import("typebox").TObject<{
+            installationId: import("typebox").TString;
+        }>;
+    }, {}, "/auth/mobile/push">, import("elysia/types").MergeScopedSchemas<{}, {}, import("elysia").UnwrapRoute<{
+        cookie: import("elysia").TCookieObject<{
+            user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
+        }>;
+        schema: "merge";
+    }, {}, "">>>>, NoInfer<{
+        decorator: {};
+        store: {
+            session: import("./types").SessionRecord<UserType>;
+            unregisteredSession: import("./types").UnregisteredSessionRecord;
+        };
+        derive: {};
+    } & {
+        derive: {
+            readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
+        };
+    }>>) => import("elysia/types").MaybePromise<void>;
+    readonly path: string;
+    route?: string | undefined;
+    rid?: string | undefined;
+    request: Request;
+    store: {
+        session: import("./types").SessionRecord<UserType>;
+        unregisteredSession: import("./types").UnregisteredSessionRecord;
+    };
+    readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
+}) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaStatus<"Conflict", {
+    readonly code: "installation-ownership";
+}, 409> | {
+    removed: true;
+}>>;
+/** @deprecated Use pushRoutes. */
 export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionStore, config }: {
     accessTokens: AccessTokenPrincipalConfig<UserType>;
     authSessionStore?: AuthSessionSource<UserType>;
-    config: NativePushConfig<UserType>;
+    config: PushConfig<UserType>;
 }) => import("elysia/types").AddRoute<"", "local", {
     decorator: {};
     store: {
@@ -47,6 +426,54 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
     typebox: {};
     error: [];
 }, import("elysia/types").DefaultMetadata, {
+    auth: {
+        push: {
+            post: {
+                body: {
+                    installationId?: string | undefined;
+                    locale?: string | undefined;
+                    token: string;
+                    platform: "apns" | "fcm";
+                } | {
+                    installationId?: string | undefined;
+                    locale?: string | undefined;
+                    platform: "webpush";
+                    subscription: {
+                        keys: {
+                            auth: string;
+                            p256dh: string;
+                        };
+                        endpoint: string;
+                    };
+                };
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    401: "User is not authenticated";
+                    200: {
+                        installationId: string;
+                        registered: true;
+                    };
+                    409: {
+                        readonly code: "installation-ownership";
+                    };
+                    422: {
+                        type: "validation";
+                        title: "Validation Error";
+                        status: 422;
+                        detail?: string;
+                        on: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+                error: never;
+            };
+        };
+    };
+} & {
     auth: {
         mobile: {
             push: {
@@ -56,6 +483,17 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
                         locale?: string | undefined;
                         token: string;
                         platform: "apns" | "fcm";
+                    } | {
+                        installationId?: string | undefined;
+                        locale?: string | undefined;
+                        platform: "webpush";
+                        subscription: {
+                            keys: {
+                                auth: string;
+                                p256dh: string;
+                            };
+                            endpoint: string;
+                        };
                     };
                     params: {};
                     query: unknown;
@@ -85,9 +523,42 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
             };
         };
     };
+} & {
+    auth: {
+        push: {
+            delete: {
+                body: {
+                    installationId: string;
+                };
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    401: "User is not authenticated";
+                    200: {
+                        removed: true;
+                    };
+                    409: {
+                        readonly code: "installation-ownership";
+                    };
+                    422: {
+                        type: "validation";
+                        title: "Validation Error";
+                        status: 422;
+                        detail?: string;
+                        on: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+                error: never;
+            };
+        };
+    };
 }, import("elysia/types").DefaultEphemeral, {
     derive: {
-        readonly nativePushPrincipal: AuthPrincipal<UserType> | undefined;
+        readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
     };
     schema: {};
     schemas: import("elysia").UnwrapRoute<{
@@ -97,20 +568,23 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
         schema: "merge";
     }, {}, "">;
     response: import("elysia/types").ExtractErrorFromHandle<{
-        readonly nativePushPrincipal: AuthPrincipal<UserType> | undefined;
+        readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
     }>;
     error: [];
 }, "delete", "/auth/mobile/push", import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+    beforeHandle: ({ pushPrincipal, status }: {
+        pushPrincipal: AuthPrincipal<UserType> | undefined;
+        status: (code: "Unauthorized", body: string) => unknown;
+    }) => unknown;
     body: import("typebox").TObject<{
         installationId: import("typebox").TString;
     }>;
-    beforeHandle: unknown;
 }, {}, "/auth/mobile/push">, import("elysia/types").MergeScopedSchemas<{}, {}, import("elysia").UnwrapRoute<{
     cookie: import("elysia").TCookieObject<{
         user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
     }>;
     schema: "merge";
-}, {}, "">>>, {}, ({ body, nativePushPrincipal, status }: {
+}, {}, "">>>, {}, ({ body, pushPrincipal, status }: {
     body: {
         installationId: string;
     };
@@ -127,7 +601,7 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
         status?: number | keyof import("elysia").StatusMap;
         cookie?: Record<string, import("elysia").BaseCookie>;
     };
-    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
         readonly 100: "Continue";
         readonly 101: "Switching Protocols";
         readonly 102: "Processing";
@@ -253,10 +727,13 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
         readonly "Network Authentication Required": 511;
     }[Code] : Code>;
     defer: (fn: import("elysia/types").AfterResponseHandler<NoInfer<import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+        beforeHandle: ({ pushPrincipal, status }: {
+            pushPrincipal: AuthPrincipal<UserType> | undefined;
+            status: (code: "Unauthorized", body: string) => unknown;
+        }) => unknown;
         body: import("typebox").TObject<{
             installationId: import("typebox").TString;
         }>;
-        beforeHandle: unknown;
     }, {}, "/auth/mobile/push">, import("elysia/types").MergeScopedSchemas<{}, {}, import("elysia").UnwrapRoute<{
         cookie: import("elysia").TCookieObject<{
             user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
@@ -271,7 +748,7 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
         derive: {};
     } & {
         derive: {
-            readonly nativePushPrincipal: AuthPrincipal<UserType> | undefined;
+            readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
         };
     }>>) => import("elysia/types").MaybePromise<void>;
     readonly path: string;
@@ -282,7 +759,10 @@ export declare const nativePushRoutes: <UserType>({ accessTokens, authSessionSto
         session: import("./types").SessionRecord<UserType>;
         unregisteredSession: import("./types").UnregisteredSessionRecord;
     };
-    readonly nativePushPrincipal: AuthPrincipal<UserType> | undefined;
-}) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | {
+    readonly pushPrincipal: AuthPrincipal<UserType> | undefined;
+}) => Promise<import("elysia").ElysiaStatus<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaStatus<"Conflict", {
+    readonly code: "installation-ownership";
+}, 409> | {
     removed: true;
 }>>;
+export {};