@blezgo/api-sdk 0.1.0

package/dist/admin/generated.d.ts

@@ -0,0 +1,956 @@
+/**
+ * This file was auto-generated by openapi-typescript.
+ * Do not make direct changes to the file.
+ */
+export interface paths {
+    "/v1/auth/server-clients/admin": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Server Clients
+         * @description **List all server clients.**
+         *
+         *     **Purpose**: View all server clients for monitoring and management.
+         *
+         *     **Query Parameters**:
+         *     - status: Filter by status (active, revoked)
+         *     - page: Page number (default: 1)
+         *     - limit: Items per page (default: 50, max: 100)
+         *
+         *     **Authentication**: Admin JWT (requires server_clients.read.all permission)
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 401: Unauthorized
+         *     - 403: Insufficient permissions
+         *     - 500: Server error
+         */
+        get: operations["listServerClients"];
+        put?: never;
+        /**
+         * Create Server Client
+         * @description **Create a new server client for backend-to-backend authentication.**
+         *
+         *     **Purpose**: Generate server client credentials (client_id + client_secret)
+         *     for a backend application to authenticate with this API.
+         *
+         *     **Flow**:
+         *     1. Validate role_id exists via blezgo_core internal endpoint
+         *     2. Generate client_id (human-readable, unique)
+         *     3. Generate client_secret (32 chars, cryptographically secure)
+         *     4. Hash client_secret with bcrypt (cost factor 12)
+         *     5. Store in server_clients_tbl (authdb)
+         *     6. Return client_id + client_secret (SHOWN ONCE)
+         *
+         *     **CRITICAL SECURITY NOTICE**:
+         *     - client_secret is shown ONLY ONCE
+         *     - Store it securely (AWS Secrets Manager, HashiCorp Vault, etc.)
+         *     - Cannot be retrieved later; if lost, revoke and create a new client
+         *
+         *     **Authentication**: Admin JWT (requires server_clients.create.all permission)
+         *     **Rate Limit**: 10 requests per hour per user
+         *
+         *     **Response Codes**:
+         *     - 201: Server client created successfully
+         *     - 400: Invalid request (validation errors)
+         *     - 401: Unauthorized
+         *     - 403: Insufficient permissions
+         *     - 500: Server error
+         */
+        post: operations["createServerClient"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/auth/server-clients/admin/{client_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Revoke Server Client
+         * @description **Revoke a server client (permanent soft delete).**
+         *
+         *     **Purpose**: Permanently disable a server client. Cannot be undone.
+         *
+         *     **Flow**:
+         *     1. Locate client by client_id
+         *     2. Mark as inactive (is_active = false)
+         *     3. Set revoked_at timestamp and store revocation reason
+         *     4. All existing tokens for this client become invalid immediately
+         *     5. Client cannot generate new tokens
+         *
+         *     **Authentication**: Admin JWT (requires server_clients.delete.all permission)
+         *
+         *     **Response Codes**:
+         *     - 200: Client revoked successfully
+         *     - 400: Missing or invalid reason
+         *     - 401: Unauthorized
+         *     - 403: Insufficient permissions
+         *     - 404: Client not found
+         *     - 500: Server error
+         */
+        delete: operations["revokeServerClient"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/auth/social/clients/admin": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Register Social Client
+         * @description Register OAuth client credentials for a social login provider (Admin Only).
+         *
+         *     **For**: System administrators
+         *     **Purpose**: Create or fully replace the OAuth config for a provider.
+         *     One config per provider — sending this again for the same provider
+         *     completely replaces the stored credentials (full replace, not partial).
+         *     All credential fields required on every call.
+         *
+         *     **Flow**:
+         *     1. Validate credentials format per provider (client_id format, required fields)
+         *     2. Upsert row in social_auth_configs_tbl (org_id + provider = unique key)
+         *     3. Return config_id
+         *
+         *     ---
+         *
+         *     **Google**
+         *     ```json
+         *     {
+         *         "provider": "google",
+         *         "client_id": "556692537239-abc123.apps.googleusercontent.com",
+         *         "client_secret": "GOCSPX-xxxxxxxxxxxxxxxxxxxx",
+         *         "redirect_uri": "https://yourdomain.com/auth/callback/google",
+         *         "allowed_domains": ["yourdomain.com"]
+         *     }
+         *     ```
+         *
+         *     **Facebook**
+         *     ```json
+         *     {
+         *         "provider": "facebook",
+         *         "client_id": "1234567890123456",
+         *         "client_secret": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4",
+         *         "redirect_uri": "https://yourdomain.com/auth/callback/facebook"
+         *     }
+         *     ```
+         *
+         *     **LinkedIn**
+         *     ```json
+         *     {
+         *         "provider": "linkedin",
+         *         "client_id": "86abcdefgh1234",
+         *         "client_secret": "xxxxxxxxxxxxxxxx",
+         *         "redirect_uri": "https://yourdomain.com/auth/callback/linkedin"
+         *     }
+         *     ```
+         *
+         *     **X (Twitter)**
+         *     ```json
+         *     {
+         *         "provider": "x",
+         *         "client_id": "xxxxxxxxxxxxxxxxxxxxxxxxxxx",
+         *         "client_secret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+         *         "redirect_uri": "https://yourdomain.com/auth/callback/x"
+         *     }
+         *     ```
+         *
+         *     **Apple**
+         *     ```json
+         *     {
+         *         "provider": "apple",
+         *         "client_id": "com.yourdomain.app",
+         *         "redirect_uri": "https://yourdomain.com/auth/callback/apple",
+         *         "apple_team_id": "ABCDE12345",
+         *         "apple_key_id": "FGHIJ67890",
+         *         "apple_private_key": "-----BEGIN PRIVATE KEY-----\nMIGTAgEAMB...\n-----END PRIVATE KEY-----"
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Admin JWT
+         *     **Rate Limit**: 5 requests per minute
+         *
+         *     **Response Codes**:
+         *     - 201: Config saved (created or updated)
+         *     - 400: Validation error (wrong format, missing required fields for provider)
+         *     - 401: Unauthorized
+         *     - 403: Insufficient permissions
+         */
+        put: operations["registerSocialClient"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/auth/sessions/admin": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get All Admin Sessions
+         * @description View all active sessions across the system (Admin Only).
+         *
+         *     **For**: System administrators
+         *     **Purpose**: System-wide session monitoring, analytics dashboards
+         *
+         *     **Query Parameters**:
+         *     - page (int, default: 1): Page number
+         *     - limit (int, default: 50, max: 100): Items per page
+         *     - user_id (int, optional): Filter by specific user
+         *     - device (string, optional): Filter by device/browser/OS
+         *     - ip (string, optional): Filter by IP address
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *       "sessions": [...],
+         *       "total_sessions": 1523,
+         *       "pagination": {
+         *         "page": 1,
+         *         "limit": 50,
+         *         "total_pages": 31
+         *       }
+         *     }
+         *     ```
+         *
+         *     **Authentication**: JWT token with api_access permission
+         *     **Headers**: Authorization: Bearer <admin_token>
+         *     **Rate Limit**: 50 requests per minute
+         *
+         *     **Use Cases**:
+         *     - "How many users are logged in right now?"
+         *     - "Show all Chrome sessions from New York"
+         *     - "Find all sessions from this suspicious IP"
+         *     - "Generate session analytics dashboard"
+         */
+        get: operations["getAllAdminSessions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/users/{user_id}/sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Admin User Sessions
+         * @description View all active sessions of a specific user (Admin Only).
+         *
+         *     **For**: System administrators
+         *     **Purpose**: Monitor user sessions, investigate suspicious activity
+         *
+         *     **Path Parameters**:
+         *     - user_id: The user ID to view sessions for
+         *
+         *     **Example Response**: Same format as user endpoint
+         *
+         *     **Authentication**: JWT token with api_access permission
+         *     **Headers**: Authorization: Bearer <admin_token>
+         *     **Rate Limit**: 50 requests per minute
+         *
+         *     **Use Cases**:
+         *     - "Check if John is logged in from 2 locations"
+         *     - "User reports unauthorized access, view their sessions"
+         *     - "Monitor active users for security audit"
+         */
+        get: operations["getAdminUserSessions"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete All Admin User Sessions
+         * @description Logout user from all devices (Admin Only).
+         *
+         *     **For**: System administrators
+         *     **Purpose**: Force logout compromised accounts, employee termination
+         *
+         *     **Path Parameters**:
+         *     - user_id: The user ID to logout everywhere
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *       "revoked_count": 5,
+         *       "revoked_at": "2025-01-27T15:30:00Z"
+         *     }
+         *     ```
+         *
+         *     **Authentication**: JWT token with api_access permission
+         *     **Headers**: Authorization: Bearer <admin_token>
+         *     **Rate Limit**: 10 requests per minute
+         *
+         *     **Use Cases**:
+         *     - "Account was hacked, lock everything immediately"
+         *     - "Employee quit, revoke all access now"
+         *     - "Security incident, logout this user from all devices"
+         */
+        delete: operations["deleteAllAdminUserSessions"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/users/{user_id}/sessions/{session_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete Admin User Session
+         * @description Terminate a specific session of any user (Admin Only).
+         *
+         *     **For**: System administrators
+         *     **Purpose**: Force logout suspicious sessions, security incident response
+         *
+         *     **Path Parameters**:
+         *     - user_id: The user ID
+         *     - session_id: The session ID to terminate
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *       "session_id": 12340,
+         *       "device_name": "Safari on macOS",
+         *       "revoked_at": "2025-01-27T15:30:00Z"
+         *     }
+         *     ```
+         *
+         *     **Note**: `session_id` is a temporary integer — will change to sess_xxx once
+         *     the session table gains an external_id column.
+         *
+         *     **Authentication**: JWT token with api_access permission
+         *     **Headers**: Authorization: Bearer <admin_token>
+         *     **Rate Limit**: 20 requests per minute
+         *
+         *     **Use Cases**:
+         *     - "User reports unauthorized iPhone login, terminate it"
+         *     - "Suspicious activity from Russia IP, force logout"
+         *     - "Employee left company, remove their phone session"
+         */
+        delete: operations["deleteAdminUserSession"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/auth/audit-logs/admin": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Audit Logs
+         * @description Paginated auth audit log query.
+         *
+         *     Returns all auth events for an org ordered by created_at DESC.
+         *     Protected by service token — not callable from end users.
+         */
+        get: operations["listAuthAuditLogs"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+}
+export type webhooks = Record<string, never>;
+export interface components {
+    schemas: {
+        Extensions: {
+            /** @example GENERIC_ERROR */
+            message_code?: string;
+            /** @example [] */
+            invalid_params?: components["schemas"]["InvalidParam"][];
+            extra_data?: Record<string, never> | null;
+            /** @example Detailed debug information */
+            debug?: string | null;
+        };
+        /** ValidationError */
+        ValidationError: {
+            /** Location */
+            loc: (string | number)[];
+            /** Message */
+            msg: string;
+            /** Error Type */
+            type: string;
+        };
+        /**
+         * ServerClientRevokeRequest
+         * @description Request schema for revoking a server client.
+         * @example {
+         *       "reason": "Security incident - potential key exposure"
+         *     }
+         */
+        ServerClientRevokeRequest: {
+            /**
+             * Reason
+             * @description Reason for revocation (required for audit)
+             * @example Security incident - potential key exposure
+             * @example Client no longer needed
+             */
+            reason: string;
+        };
+        /**
+         * @example {
+         *       "status": "success",
+         *       "message": "Operation successful",
+         *       "message_code": "api_suc_20001",
+         *       "data": {},
+         *       "metadata": {
+         *         "timestamp": "2026-03-26T10:00:00.000Z",
+         *         "requestId": "07e22004-cb60-4dfc-bc9c-b6f99664dca1",
+         *         "traceId": "a9f1204c-bb82-41de-b234-7c3a9e120000",
+         *         "version": "v1",
+         *         "executionTime": 42,
+         *         "language": "en-US"
+         *       }
+         *     }
+         */
+        StandardResponse: {
+            /** @example success */
+            status?: string;
+            data?: Record<string, never> | null;
+            /** @example Operation successful */
+            message?: string | null;
+            /** @example api_suc_20001 */
+            message_code?: string | null;
+            metadata?: Record<string, never> | null;
+            error?: components["schemas"]["ErrorResponse"];
+        };
+        InvalidParam: {
+            /** @example items[0].quantity */
+            field?: string;
+            /** @example Input should be greater than or equal to 1 */
+            error?: string;
+        };
+        ErrorResponse: {
+            /** @example about:blank */
+            type?: string;
+            /** @example GENERIC_ERROR */
+            code?: string;
+            /** @example Client Error */
+            title?: string;
+            /** @example 400 */
+            status?: number;
+            /** @example An error occurred */
+            detail?: string;
+            /** @example /v1/cart/items */
+            instance?: string;
+            extensions?: components["schemas"]["Extensions"];
+        };
+        /** HTTPValidationError */
+        HTTPValidationError: {
+            /** Detail */
+            detail?: components["schemas"]["ValidationError"][];
+        };
+        /**
+         * SocialClientRegisterRequest
+         * @description Request model for registering OAuth client credentials (admin only).
+         *
+         *     Fields vary by provider — see field descriptions and examples below.
+         *
+         *     Google / LinkedIn / X:
+         *         client_id, client_secret, redirect_uri, allowed_domains (optional)
+         *
+         *     Facebook:
+         *         client_id (numeric App ID), client_secret (32-char hex), redirect_uri
+         *
+         *     Apple:
+         *         client_id (Services ID, e.g. com.example.app),
+         *         redirect_uri,
+         *         apple_team_id  (10-char alphanumeric),
+         *         apple_key_id   (10-char alphanumeric),
+         *         apple_private_key (contents of the .p8 private key file)
+         */
+        SocialClientRegisterRequest: {
+            /**
+             * Provider
+             * @enum {string}
+             */
+            provider: "google" | "facebook" | "linkedin" | "x" | "apple";
+            /**
+             * Client Id
+             * @description Google/LinkedIn/X: OAuth2 client ID. Facebook: numeric App ID. Apple: Services ID (e.g. com.example.app).
+             */
+            client_id: string;
+            /**
+             * Client Secret
+             * @description OAuth2 client secret. Not required for Apple (uses private key instead).
+             */
+            client_secret?: string | null;
+            /**
+             * Redirect Uri
+             * @description Callback URL registered in the provider's developer console.
+             */
+            redirect_uri: string;
+            /**
+             * Allowed Domains
+             * @description Restrict logins to users with email addresses from these domains. Leave empty to allow all.
+             * @example [
+             *       "yourdomain.com",
+             *       "subsidiary.yourdomain.com"
+             *     ]
+             */
+            allowed_domains?: string[];
+            /**
+             * Apple Team Id
+             * @description Apple Developer Team ID (10 uppercase alphanumeric chars). Required for Apple.
+             */
+            apple_team_id?: string | null;
+            /**
+             * Apple Key Id
+             * @description Apple private key ID from developer console (10 uppercase alphanumeric chars). Required for Apple.
+             */
+            apple_key_id?: string | null;
+            /**
+             * Apple Private Key
+             * @description Contents of the Apple .p8 private key file (including BEGIN/END headers). Required for Apple.
+             */
+            apple_private_key?: string | null;
+        };
+        /**
+         * ServerClientCreateRequest
+         * @description Request schema for creating a server client.
+         *
+         *     Example:
+         *         {
+         *             "name": "SaaS Backend Production",
+         *             "description": "Production SaaS application backend",
+         *             "role_id": 123,
+         *             "rate_limit_per_minute": 1000,
+         *             "ip_whitelist": ["54.123.45.67/32", "54.123.45.68/32"]
+         *         }
+         * @example {
+         *       "description": "Production SaaS application backend",
+         *       "ip_whitelist": [
+         *         "54.123.45.67/32"
+         *       ],
+         *       "name": "SaaS Backend Production",
+         *       "rate_limit_per_minute": 1000,
+         *       "role_id": 123
+         *     }
+         */
+        ServerClientCreateRequest: {
+            /**
+             * Name
+             * @description Human-readable name for the server client
+             * @example SaaS Backend Production
+             * @example Mobile App Backend
+             */
+            name: string;
+            /**
+             * Description
+             * @description Optional description of client purpose
+             * @example Production SaaS application backend for tenant bootstrapping
+             */
+            description?: string | null;
+            /**
+             * Role Id
+             * @description Role ID from roles_tbl (RBAC). Determines permissions.
+             * @example 123
+             */
+            role_id: number;
+            /**
+             * Rate Limit Per Minute
+             * @description Token generation rate limit (requests per minute)
+             * @default 1000
+             * @example 1000
+             */
+            rate_limit_per_minute: number;
+            /**
+             * Ip Whitelist
+             * @description Optional IP whitelist in CIDR format
+             * @example [
+             *       "54.123.45.67/32",
+             *       "192.168.1.0/24"
+             *     ]
+             */
+            ip_whitelist?: string[] | null;
+        };
+    };
+    responses: never;
+    parameters: never;
+    requestBodies: never;
+    headers: never;
+    pathItems: never;
+}
+export type $defs = Record<string, never>;
+export interface operations {
+    listServerClients: {
+        parameters: {
+            query?: {
+                /** @description Filter by status: active, revoked */
+                status?: string | null;
+                /** @description Page number (1-based) */
+                page?: number;
+                /** @description Items per page (1–100, default 50) */
+                limit?: number;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    createServerClient: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ServerClientCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    revokeServerClient: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                /** @description Server client ID to revoke */
+                client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ServerClientRevokeRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    registerSocialClient: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SocialClientRegisterRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    getAllAdminSessions: {
+        parameters: {
+            query?: {
+                /** @description Filter by specific user ID */
+                user_id?: number | null;
+                /** @description Filter by device/browser/OS name */
+                device?: string | null;
+                /** @description Filter by IP address */
+                ip?: string | null;
+                /** @description Page number (1-based) */
+                page?: number;
+                /** @description Items per page (1–100, default 50) */
+                limit?: number;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    getAdminUserSessions: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                user_id: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    deleteAllAdminUserSessions: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                user_id: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    deleteAdminUserSession: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                user_id: number;
+                session_id: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    listAuthAuditLogs: {
+        parameters: {
+            query: {
+                /** @description Tenant org_id */
+                org_id: number;
+                /** @description Filter by event_type */
+                event_type?: string | null;
+                /** @description Filter by user_id */
+                user_id?: number | null;
+                /** @description ISO date filter start (inclusive) */
+                from_date?: string | null;
+                /** @description ISO date filter end (inclusive) */
+                to_date?: string | null;
+                limit?: number;
+                offset?: number;
+            };
+            header?: {
+                authorization?: string;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": unknown;
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+}
+//# sourceMappingURL=generated.d.ts.map