@axium/core 0.16.0 → 0.17.0

package/dist/api.d.ts

@@ -1,138 +1,619 @@
-import type { PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON } from '@simplewebauthn/types';
-import type { Omit } from 'utilium';
-import type z from 'zod';
-import type { AccessControl, AccessMap } from './access.js';
-import type { App } from './apps.js';
-import type { AuditEvent, AuditFilter, Severity } from './audit.js';
-import type { NewSessionResponse, Session, Verification } from './auth.js';
-import type { PackageVersionInfo } from './packages.js';
-import type { Passkey, PasskeyAuthenticationResponse, PasskeyChangeable, PasskeyRegistration } from './passkeys.js';
-import type { PluginInternal } from './plugins.js';
+import * as z from 'zod';
+import { Severity } from './audit.js';
 import type { RequestMethod } from './requests.js';
-import type { LogoutSessions, User, UserAuthOptions, UserChangeable, UserInternal, UserPublic, UserRegistration } from './user.js';
-export interface AdminSummary {
-    users: number;
-    passkeys: number;
-    sessions: number;
-    auditEvents: Record<keyof typeof Severity, number>;
-    configFiles: number;
-    plugins: number;
-    versions: Record<'core' | 'server' | 'client', PackageVersionInfo>;
-}
+export declare const AdminSummary: z.ZodObject<{
+    users: z.ZodNumber;
+    passkeys: z.ZodNumber;
+    sessions: z.ZodNumber;
+    auditEvents: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+    configFiles: z.ZodNumber;
+    plugins: z.ZodNumber;
+    versions: z.ZodRecord<z.ZodLiteral<"client" | "server" | "core">, z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        latest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 /**
- * Types for all API endpoints
+ * Schemas for all API endpoints
  * @internal
  */
-export interface $API {
-    metadata: {
-        GET: {
-            versions: PackageVersionInfo[];
-            routes: Record<string, {
-                params: Record<string, string | null>;
-                methods: string[];
-            }>;
-        };
-    };
-    apps: {
-        GET: App[];
-    };
-    session: {
-        GET: Session & {
-            user: User;
-        };
-        DELETE: Session;
-    };
-    register: {
-        OPTIONS: {
-            userId: string;
-            options: PublicKeyCredentialCreationOptionsJSON;
-        };
-        POST: [z.input<typeof UserRegistration>, NewSessionResponse];
-    };
-    'users/:id': {
-        GET: UserPublic & Partial<User>;
-        PATCH: [z.input<typeof UserChangeable>, User];
-        DELETE: User;
-    };
-    'users/:id/full': {
-        GET: User & {
-            sessions: Session[];
-        };
-    };
-    'users/:id/auth': {
-        OPTIONS: [z.input<typeof UserAuthOptions>, PublicKeyCredentialRequestOptionsJSON];
-        POST: [z.input<typeof PasskeyAuthenticationResponse>, NewSessionResponse];
-    };
-    'users/:id/sessions': {
-        GET: Session[];
-        DELETE: [z.input<typeof LogoutSessions>, Session[]];
-    };
-    'users/:id/passkeys': {
-        OPTIONS: PublicKeyCredentialCreationOptionsJSON;
-        GET: Passkey[];
-        PUT: [z.input<typeof PasskeyRegistration>, Passkey];
-    };
-    'users/:id/verify_email': {
-        OPTIONS: {
-            enabled: boolean;
-        };
-        GET: Verification;
-        POST: [{
-            token: string;
-        }, {}];
-    };
-    'passkeys/:id': {
-        GET: Passkey;
-        PATCH: [z.input<typeof PasskeyChangeable>, Passkey];
-        DELETE: Passkey;
-    };
-    user_id: {
-        POST: [{
-            using: 'email' | 'handle';
-            value: string;
-        }, {
-            id: string;
-        }];
-    };
-    'acl/:itemType/:itemId': {
-        GET: AccessControl[];
-        POST: [AccessMap, AccessControl[]];
-    };
-    'admin/summary': {
-        GET: AdminSummary;
-    };
-    'admin/users/all': {
-        GET: UserInternal[];
-    };
-    'admin/users/:userId': {
-        GET: UserInternal & {
-            sessions: Session[];
-        };
-    };
-    'admin/config': {
-        GET: {
-            files: Record<string, object>;
-            config: Record<string, unknown>;
-        };
-    };
-    'admin/plugins': {
-        GET: (Omit<PluginInternal, '_hooks' | '_client'> & PackageVersionInfo)[];
-    };
-    'admin/audit/events': {
-        OPTIONS: {
-            name: string[];
-            source: string[];
-            tags: string[];
-        } | false;
-        GET: [filter: z.input<typeof AuditFilter>, result: AuditEvent[]];
-    };
-    'admin/audit/:eventId': {
-        GET: AuditEvent;
+declare const _API: {
+    readonly metadata: {
+        readonly GET: z.ZodObject<{
+            versions: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                version: z.ZodString;
+                latest: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>>;
+            routes: z.ZodRecord<z.ZodString, z.ZodObject<{
+                params: z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>;
+                methods: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+    };
+    readonly apps: {
+        readonly GET: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            image: z.ZodOptional<z.ZodString>;
+            icon: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    };
+    readonly session: {
+        readonly GET: z.ZodObject<{
+            user: z.ZodObject<{
+                id: z.ZodUUID;
+                name: z.ZodString;
+                email: z.ZodEmail;
+                emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+                image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+                preferences: z.ZodLazy<z.ZodObject<{
+                    debug: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                roles: z.ZodArray<z.ZodString>;
+                tags: z.ZodArray<z.ZodString>;
+                registeredAt: z.ZodCoercedDate<unknown>;
+                isAdmin: z.ZodBoolean;
+                isSuspended: z.ZodBoolean;
+            }, z.core.$strip>;
+            id: z.ZodUUID;
+            userId: z.ZodUUID;
+            expires: z.ZodCoercedDate<unknown>;
+            created: z.ZodCoercedDate<unknown>;
+            elevated: z.ZodBoolean;
+        }, z.core.$strip>;
+        readonly DELETE: z.ZodObject<{
+            id: z.ZodUUID;
+            userId: z.ZodUUID;
+            expires: z.ZodCoercedDate<unknown>;
+            created: z.ZodCoercedDate<unknown>;
+            elevated: z.ZodBoolean;
+        }, z.core.$strip>;
+    };
+    readonly register: {
+        readonly OPTIONS: [z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            email: z.ZodOptional<z.ZodEmail>;
+        }, z.core.$strip>, z.ZodObject<{
+            userId: z.ZodUUID;
+            options: z.ZodObject<{
+                rp: z.ZodObject<{
+                    id: z.ZodOptional<z.ZodString>;
+                    name: z.ZodString;
+                }, z.core.$strip>;
+                user: z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    displayName: z.ZodString;
+                }, z.core.$strip>;
+                challenge: z.ZodBase64URL;
+                pubKeyCredParams: z.ZodArray<z.ZodObject<{
+                    alg: z.ZodNumber;
+                    type: z.ZodLiteral<"public-key">;
+                }, z.core.$strip>>;
+                timeout: z.ZodOptional<z.ZodNumber>;
+                excludeCredentials: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodBase64URL;
+                    type: z.ZodLiteral<"public-key">;
+                    transports: z.ZodOptional<z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>>;
+                }, z.core.$strip>>>;
+                authenticatorSelection: z.ZodOptional<z.ZodObject<{
+                    authenticatorAttachment: z.ZodOptional<z.ZodOptional<z.ZodLiteral<"cross-platform" | "platform">>>;
+                    requireResidentKey: z.ZodOptional<z.ZodBoolean>;
+                    residentKey: z.ZodOptional<z.ZodLiteral<"required" | "preferred" | "discouraged">>;
+                    userVerification: z.ZodOptional<z.ZodLiteral<"required" | "preferred" | "discouraged">>;
+                }, z.core.$strip>>;
+                attestation: z.ZodOptional<z.ZodLiteral<"none" | "indirect" | "direct" | "enterprise">>;
+            }, z.core.$strip>;
+        }, z.core.$strip>];
+        readonly POST: [z.ZodObject<{
+            name: z.ZodString;
+            email: z.ZodEmail;
+            userId: z.ZodUUID;
+            response: z.ZodObject<{
+                id: z.ZodString;
+                rawId: z.ZodString;
+                response: z.ZodObject<{
+                    clientDataJSON: z.ZodString;
+                    attestationObject: z.ZodString;
+                    authenticatorData: z.ZodOptional<z.ZodString>;
+                    transports: z.ZodOptional<z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>>;
+                    publicKeyAlgorithm: z.ZodOptional<z.ZodNumber>;
+                    publicKey: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                authenticatorAttachment: z.ZodOptional<z.ZodLiteral<"cross-platform" | "platform">>;
+                clientExtensionResults: z.ZodRecord<z.ZodAny, z.ZodAny>;
+                type: z.ZodLiteral<"public-key">;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            userId: z.ZodUUID;
+            token: z.ZodString;
+        }, z.core.$strip>];
+    };
+    readonly 'users/:id': {
+        readonly GET: z.ZodObject<{
+            id: z.ZodUUID;
+            name: z.ZodString;
+            email: z.ZodOptional<z.ZodEmail>;
+            emailVerified: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>>;
+            image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+            preferences: z.ZodOptional<z.ZodLazy<z.ZodObject<{
+                debug: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            roles: z.ZodArray<z.ZodString>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            registeredAt: z.ZodCoercedDate<unknown>;
+            isAdmin: z.ZodOptional<z.ZodBoolean>;
+            isSuspended: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>;
+        readonly PATCH: [z.ZodObject<{
+            preferences: z.ZodOptional<z.ZodLazy<z.ZodObject<{
+                debug: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            email: z.ZodOptional<z.ZodEmail>;
+            name: z.ZodOptional<z.ZodString>;
+            image: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodURL>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            name: z.ZodString;
+            email: z.ZodEmail;
+            emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+            image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+            preferences: z.ZodLazy<z.ZodObject<{
+                debug: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            roles: z.ZodArray<z.ZodString>;
+            tags: z.ZodArray<z.ZodString>;
+            registeredAt: z.ZodCoercedDate<unknown>;
+            isAdmin: z.ZodBoolean;
+            isSuspended: z.ZodBoolean;
+        }, z.core.$strip>];
+        readonly DELETE: z.ZodObject<{
+            id: z.ZodUUID;
+            name: z.ZodString;
+            email: z.ZodEmail;
+            emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+            image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+            preferences: z.ZodLazy<z.ZodObject<{
+                debug: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            roles: z.ZodArray<z.ZodString>;
+            tags: z.ZodArray<z.ZodString>;
+            registeredAt: z.ZodCoercedDate<unknown>;
+            isAdmin: z.ZodBoolean;
+            isSuspended: z.ZodBoolean;
+        }, z.core.$strip>;
+    };
+    readonly 'users/:id/full': {
+        readonly GET: z.ZodObject<{
+            sessions: z.ZodArray<z.ZodObject<{
+                id: z.ZodUUID;
+                userId: z.ZodUUID;
+                expires: z.ZodCoercedDate<unknown>;
+                created: z.ZodCoercedDate<unknown>;
+                elevated: z.ZodBoolean;
+            }, z.core.$strip>>;
+            id: z.ZodUUID;
+            name: z.ZodString;
+            email: z.ZodEmail;
+            emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+            image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+            preferences: z.ZodLazy<z.ZodObject<{
+                debug: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            roles: z.ZodArray<z.ZodString>;
+            tags: z.ZodArray<z.ZodString>;
+            registeredAt: z.ZodCoercedDate<unknown>;
+            isAdmin: z.ZodBoolean;
+            isSuspended: z.ZodBoolean;
+        }, z.core.$strip>;
+    };
+    readonly 'users/:id/auth': {
+        readonly OPTIONS: [z.ZodObject<{
+            type: z.ZodLiteral<"login" | "action" | "client_login">;
+        }, z.core.$strip>, z.ZodObject<{
+            challenge: z.ZodBase64URL;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            rpId: z.ZodOptional<z.ZodString>;
+            allowCredentials: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodBase64URL;
+                type: z.ZodLiteral<"public-key">;
+                transports: z.ZodOptional<z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>>;
+            }, z.core.$strip>>>;
+            userVerification: z.ZodOptional<z.ZodLiteral<"required" | "preferred" | "discouraged">>;
+            extensions: z.ZodOptional<z.ZodObject<{
+                appid: z.ZodOptional<z.ZodString>;
+                credProps: z.ZodOptional<z.ZodBoolean>;
+                hmacCreateSecret: z.ZodOptional<z.ZodBoolean>;
+                minPinLength: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>];
+        readonly POST: [z.ZodObject<{
+            id: z.ZodString;
+            rawId: z.ZodString;
+            response: z.ZodObject<{
+                clientDataJSON: z.ZodString;
+                authenticatorData: z.ZodString;
+                signature: z.ZodString;
+                userHandle: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            authenticatorAttachment: z.ZodOptional<z.ZodLiteral<"cross-platform" | "platform">>;
+            clientExtensionResults: z.ZodRecord<z.ZodAny, z.ZodAny>;
+            type: z.ZodLiteral<"public-key">;
+        }, z.core.$strip>, z.ZodObject<{
+            userId: z.ZodUUID;
+            token: z.ZodString;
+        }, z.core.$strip>];
+    };
+    readonly 'users/:id/sessions': {
+        readonly GET: z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            userId: z.ZodUUID;
+            expires: z.ZodCoercedDate<unknown>;
+            created: z.ZodCoercedDate<unknown>;
+            elevated: z.ZodBoolean;
+        }, z.core.$strip>>;
+        readonly DELETE: [z.ZodObject<{
+            id: z.ZodOptional<z.ZodArray<z.ZodUUID>>;
+            confirm_all: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            userId: z.ZodUUID;
+            expires: z.ZodCoercedDate<unknown>;
+            created: z.ZodCoercedDate<unknown>;
+            elevated: z.ZodBoolean;
+        }, z.core.$strip>>];
+    };
+    readonly 'users/:id/passkeys': {
+        readonly OPTIONS: z.ZodObject<{
+            rp: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodString;
+            }, z.core.$strip>;
+            user: z.ZodObject<{
+                id: z.ZodString;
+                name: z.ZodString;
+                displayName: z.ZodString;
+            }, z.core.$strip>;
+            challenge: z.ZodBase64URL;
+            pubKeyCredParams: z.ZodArray<z.ZodObject<{
+                alg: z.ZodNumber;
+                type: z.ZodLiteral<"public-key">;
+            }, z.core.$strip>>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            excludeCredentials: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodBase64URL;
+                type: z.ZodLiteral<"public-key">;
+                transports: z.ZodOptional<z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>>;
+            }, z.core.$strip>>>;
+            authenticatorSelection: z.ZodOptional<z.ZodObject<{
+                authenticatorAttachment: z.ZodOptional<z.ZodOptional<z.ZodLiteral<"cross-platform" | "platform">>>;
+                requireResidentKey: z.ZodOptional<z.ZodBoolean>;
+                residentKey: z.ZodOptional<z.ZodLiteral<"required" | "preferred" | "discouraged">>;
+                userVerification: z.ZodOptional<z.ZodLiteral<"required" | "preferred" | "discouraged">>;
+            }, z.core.$strip>>;
+            attestation: z.ZodOptional<z.ZodLiteral<"none" | "indirect" | "direct" | "enterprise">>;
+        }, z.core.$strip>;
+        readonly GET: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+            userId: z.ZodUUID;
+            deviceType: z.ZodLiteral<"singleDevice" | "multiDevice">;
+            backedUp: z.ZodBoolean;
+            transports: z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>;
+        }, z.core.$strip>>;
+        readonly PUT: [z.ZodObject<{
+            id: z.ZodString;
+            rawId: z.ZodString;
+            response: z.ZodObject<{
+                clientDataJSON: z.ZodString;
+                attestationObject: z.ZodString;
+                authenticatorData: z.ZodOptional<z.ZodString>;
+                transports: z.ZodOptional<z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>>;
+                publicKeyAlgorithm: z.ZodOptional<z.ZodNumber>;
+                publicKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            authenticatorAttachment: z.ZodOptional<z.ZodLiteral<"cross-platform" | "platform">>;
+            clientExtensionResults: z.ZodRecord<z.ZodAny, z.ZodAny>;
+            type: z.ZodLiteral<"public-key">;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+            userId: z.ZodUUID;
+            deviceType: z.ZodLiteral<"singleDevice" | "multiDevice">;
+            backedUp: z.ZodBoolean;
+            transports: z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>;
+        }, z.core.$strip>];
+    };
+    readonly 'users/:id/verify/email': {
+        readonly OPTIONS: z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strip>;
+        readonly GET: z.ZodObject<{
+            userId: z.ZodUUID;
+            expires: z.ZodCoercedDate<unknown>;
+        }, z.core.$strip>;
+        readonly POST: [z.ZodObject<{
+            token: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{}, z.core.$strip>];
+    };
+    readonly 'users/:id/verify/login': {
+        readonly POST: [z.ZodObject<{
+            token: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            userId: z.ZodUUID;
+            token: z.ZodString;
+        }, z.core.$strip>];
     };
+    readonly 'passkeys/:id': {
+        readonly GET: z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+            userId: z.ZodUUID;
+            deviceType: z.ZodLiteral<"singleDevice" | "multiDevice">;
+            backedUp: z.ZodBoolean;
+            transports: z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>;
+        }, z.core.$strip>;
+        readonly PATCH: [z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+            userId: z.ZodUUID;
+            deviceType: z.ZodLiteral<"singleDevice" | "multiDevice">;
+            backedUp: z.ZodBoolean;
+            transports: z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>;
+        }, z.core.$strip>];
+        readonly DELETE: z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+            userId: z.ZodUUID;
+            deviceType: z.ZodLiteral<"singleDevice" | "multiDevice">;
+            backedUp: z.ZodBoolean;
+            transports: z.ZodArray<z.ZodLiteral<"ble" | "cable" | "hybrid" | "internal" | "nfc" | "smart-card" | "usb">>;
+        }, z.core.$strip>;
+    };
+    readonly user_id: {
+        readonly POST: [z.ZodObject<{
+            using: z.ZodLiteral<"email" | "handle">;
+            value: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+        }, z.core.$strip>];
+    };
+    readonly 'acl/:itemType/:itemId': {
+        readonly GET: z.ZodArray<z.ZodObject<{
+            itemId: z.ZodUUID;
+            userId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+            role: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            user: z.ZodOptional<z.ZodObject<{
+                id: z.ZodUUID;
+                name: z.ZodString;
+                email: z.ZodEmail;
+                emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+                image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+                preferences: z.ZodLazy<z.ZodObject<{
+                    debug: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                roles: z.ZodArray<z.ZodString>;
+                tags: z.ZodArray<z.ZodString>;
+                registeredAt: z.ZodCoercedDate<unknown>;
+                isAdmin: z.ZodBoolean;
+                isSuspended: z.ZodBoolean;
+            }, z.core.$strip>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+        }, z.core.$strip>>;
+        readonly POST: [z.ZodRecord<z.ZodUnion<readonly [z.ZodUUID, z.ZodTemplateLiteral<`@${string}`>, z.ZodTemplateLiteral<`#${string}`>, z.ZodLiteral<"public">]>, z.ZodAny>, z.ZodArray<z.ZodObject<{
+            itemId: z.ZodUUID;
+            userId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+            role: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            user: z.ZodOptional<z.ZodObject<{
+                id: z.ZodUUID;
+                name: z.ZodString;
+                email: z.ZodEmail;
+                emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+                image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+                preferences: z.ZodLazy<z.ZodObject<{
+                    debug: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                roles: z.ZodArray<z.ZodString>;
+                tags: z.ZodArray<z.ZodString>;
+                registeredAt: z.ZodCoercedDate<unknown>;
+                isAdmin: z.ZodBoolean;
+                isSuspended: z.ZodBoolean;
+            }, z.core.$strip>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+        }, z.core.$strip>>];
+    };
+    readonly 'admin/summary': {
+        readonly GET: z.ZodObject<{
+            users: z.ZodNumber;
+            passkeys: z.ZodNumber;
+            sessions: z.ZodNumber;
+            auditEvents: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+            configFiles: z.ZodNumber;
+            plugins: z.ZodNumber;
+            versions: z.ZodRecord<z.ZodLiteral<"client" | "server" | "core">, z.ZodObject<{
+                name: z.ZodString;
+                version: z.ZodString;
+                latest: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+    };
+    readonly 'admin/users': {
+        readonly GET: z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            name: z.ZodString;
+            email: z.ZodEmail;
+            emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+            image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+            preferences: z.ZodLazy<z.ZodObject<{
+                debug: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            roles: z.ZodArray<z.ZodString>;
+            tags: z.ZodArray<z.ZodString>;
+            registeredAt: z.ZodCoercedDate<unknown>;
+            isAdmin: z.ZodBoolean;
+            isSuspended: z.ZodBoolean;
+        }, z.core.$strip>>;
+        readonly PUT: [z.ZodObject<{
+            name: z.ZodString;
+            email: z.ZodEmail;
+        }, z.core.$strip>, z.ZodObject<{
+            user: z.ZodObject<{
+                id: z.ZodUUID;
+                name: z.ZodString;
+                email: z.ZodEmail;
+                emailVerified: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+                image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+                preferences: z.ZodLazy<z.ZodObject<{
+                    debug: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                roles: z.ZodArray<z.ZodString>;
+                tags: z.ZodArray<z.ZodString>;
+                registeredAt: z.ZodCoercedDate<unknown>;
+                isAdmin: z.ZodBoolean;
+                isSuspended: z.ZodBoolean;
+            }, z.core.$strip>;
+            verification: z.ZodObject<{
+                userId: z.ZodUUID;
+                expires: z.ZodCoercedDate<unknown>;
+                token: z.ZodString;
+                role: z.ZodLiteral<"email" | "login">;
+            }, z.core.$strip>;
+        }, z.core.$strip>];
+    };
+    readonly 'admin/config': {
+        readonly GET: z.ZodObject<{
+            files: z.ZodRecord<z.ZodString, z.ZodAny>;
+            config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>;
+    };
+    readonly 'admin/plugins': {
+        readonly GET: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            version: z.ZodString;
+            latest: z.ZodNullable<z.ZodString>;
+            cli: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            apps: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                image: z.ZodOptional<z.ZodString>;
+                icon: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+            client: z.ZodOptional<z.ZodObject<{
+                cli: z.ZodOptional<z.ZodString>;
+                hooks: z.ZodOptional<z.ZodString>;
+                integrations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>>;
+            server: z.ZodOptional<z.ZodObject<{
+                cli: z.ZodOptional<z.ZodString>;
+                hooks: z.ZodOptional<z.ZodString>;
+                integrations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                http_handler: z.ZodOptional<z.ZodString>;
+                routes: z.ZodOptional<z.ZodString>;
+                db: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            update_checks: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+            path: z.ZodString;
+            dirname: z.ZodString;
+            specifier: z.ZodString;
+            loadedBy: z.ZodString;
+            isServer: z.ZodBoolean;
+            _db: z.ZodOptional<z.ZodAny>;
+        }, z.core.$strip>>;
+    };
+    readonly 'admin/audit/events': {
+        readonly OPTIONS: z.ZodUnion<[z.ZodObject<{
+            name: z.ZodArray<z.ZodString>;
+            source: z.ZodArray<z.ZodString>;
+            tags: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodLiteral<false>]>;
+        readonly GET: [z.ZodObject<{
+            since: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+            until: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+            user: z.ZodOptional<z.ZodNullable<z.ZodUnion<readonly [z.ZodUUID, z.ZodPipe<z.ZodLiteral<"null">, z.ZodTransform<null, "null">>]>>>;
+            severity: z.ZodOptional<z.ZodPipe<z.ZodLiteral<"debug" | "error" | "emergency" | "alert" | "critical" | "warning" | "notice" | "info">, z.ZodTransform<Severity, "debug" | "error" | "emergency" | "alert" | "critical" | "warning" | "notice" | "info">>>;
+            source: z.ZodOptional<z.ZodString>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            event: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            userId: z.ZodNullable<z.ZodUUID>;
+            user: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                id: z.ZodNonOptional<z.ZodOptional<z.ZodUUID>>;
+                name: z.ZodNonOptional<z.ZodOptional<z.ZodString>>;
+                email: z.ZodOptional<z.ZodEmail>;
+                emailVerified: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>>;
+                image: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodURL>>>;
+                preferences: z.ZodOptional<z.ZodLazy<z.ZodObject<{
+                    debug: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strip>>>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                registeredAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+                isAdmin: z.ZodOptional<z.ZodBoolean>;
+                isSuspended: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            timestamp: z.ZodCoercedDate<unknown>;
+            severity: z.ZodEnum<typeof Severity>;
+            name: z.ZodString;
+            source: z.ZodString;
+            tags: z.ZodArray<z.ZodString>;
+            extra: z.ZodRecord<z.ZodAny, z.ZodUnknown>;
+        }, z.core.$strip>>];
+    };
+    readonly 'admin/audit/:eventId': {
+        readonly GET: z.ZodObject<{
+            id: z.ZodUUID;
+            userId: z.ZodNullable<z.ZodUUID>;
+            user: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                id: z.ZodNonOptional<z.ZodOptional<z.ZodUUID>>;
+                name: z.ZodNonOptional<z.ZodOptional<z.ZodString>>;
+                email: z.ZodOptional<z.ZodEmail>;
+                emailVerified: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>>;
+                image: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodURL>>>;
+                preferences: z.ZodOptional<z.ZodLazy<z.ZodObject<{
+                    debug: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strip>>>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                registeredAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+                isAdmin: z.ZodOptional<z.ZodBoolean>;
+                isSuspended: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            timestamp: z.ZodCoercedDate<unknown>;
+            severity: z.ZodEnum<typeof Severity>;
+            name: z.ZodString;
+            source: z.ZodString;
+            tags: z.ZodArray<z.ZodString>;
+            extra: z.ZodRecord<z.ZodAny, z.ZodUnknown>;
+        }, z.core.$strip>;
+    };
+};
+type _API = typeof _API;
+export interface $API extends _API {
 }
+export declare const $API: $API;
+export type APIValues = {
+    [Endpoint in keyof $API]: {
+        [Method in keyof $API[Endpoint]]: $API[Endpoint][Method] extends readonly [
+            infer Body extends z.ZodType,
+            infer Result extends z.ZodType
+        ] ? [z.input<Body>, z.infer<Result>] : $API[Endpoint][Method] extends z.ZodType ? z.infer<$API[Endpoint][Method]> : never;
+    };
+};
 export type Endpoint = keyof $API;
-export type APIFunction<Method extends RequestMethod, E extends Endpoint> = Method extends keyof $API[E] ? $API[E][Method] extends [infer Body, infer Result] ? (body: Body) => Promise<Result> : () => $API[E][Method] : unknown;
-export type RequestBody<Method extends RequestMethod, E extends Endpoint> = Method extends keyof $API[E] ? $API[E][Method] extends [infer Body, unknown] ? Body : any : unknown;
-export type Result<Method extends RequestMethod & keyof $API[E], E extends Endpoint> = $API[E][Method] extends [unknown, infer R] ? R : $API[E][Method];
-export type AsyncResult<Method extends RequestMethod & keyof $API[E], E extends Endpoint> = Promise<Result<Method, E>>;
+export type APIFunction<Method extends RequestMethod & keyof $API[E], E extends Endpoint> = Method extends keyof APIValues[E] ? APIValues[E][Method] extends [infer Body, infer Result] ? (body: Body) => Promise<Result> : () => APIValues[E][Method] : unknown;
+export type RequestBody<Method extends RequestMethod & keyof $API[E], E extends Endpoint> = Method extends keyof APIValues[E] ? APIValues[E][Method] extends [infer Body, unknown] ? Body : any : unknown;
+export type Result<Method extends RequestMethod & keyof APIValues[E], E extends Endpoint> = APIValues[E][Method] extends [unknown, infer R] ? R : APIValues[E][Method];
+export type AsyncResult<Method extends RequestMethod & keyof APIValues[E], E extends Endpoint> = Promise<Result<Method, E>>;
 export type APIParameters<S extends string> = S extends `${string}/:${infer Right}` ? [string, ...APIParameters<Right>] : [];
+export {};