@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.10

package/dist/HttpApi/Endpoints.d.ts

@@ -0,0 +1,945 @@
+import { HttpApiEndpoint, HttpApiSchema } from "effect/unstable/httpapi";
+import { AuthBadRequestError, AuthEmailAlreadyRegisteredError, AuthInternalError, AuthInvalidCredentialsError, AuthPolicyDeniedError, AuthRateLimitedError, AuthUnauthenticatedError } from "./Errors.js";
+export declare const passwordSignInEndpoint: HttpApiEndpoint.HttpApiEndpoint<"signIn", "POST", "/sign-in", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly password: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").String;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const passwordSignUpEndpoint: HttpApiEndpoint.HttpApiEndpoint<"signUp", "POST", "/sign-up", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly password: import("effect/Schema").String;
+    readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").String;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthRateLimitedError | typeof AuthEmailAlreadyRegisteredError | typeof AuthInternalError>, never, never>;
+export declare const passwordResetStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"resetStart", "POST", "/reset/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const passwordResetVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"resetVerify", "POST", "/reset/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+    readonly password: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const passwordSetEndpoint: HttpApiEndpoint.HttpApiEndpoint<"set", "POST", "/set", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly password: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const passwordChangeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"change", "POST", "/change", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly currentPassword: import("effect/Schema").String;
+    readonly newPassword: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const currentSessionEndpoint: HttpApiEndpoint.HttpApiEndpoint<"current", "GET", "/session", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly userId: import("effect/Schema").String;
+    readonly sessionId: import("effect/Schema").String;
+    readonly authTime: import("effect/Schema").Number;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const refreshSessionEndpoint: HttpApiEndpoint.HttpApiEndpoint<"refresh", "POST", "/session/refresh", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly userId: import("effect/Schema").String;
+    readonly sessionId: import("effect/Schema").String;
+    readonly authTime: import("effect/Schema").Number;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const logoutEndpoint: HttpApiEndpoint.HttpApiEndpoint<"logout", "POST", "/logout", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthInternalError>, never, never>;
+export declare const listSessionsEndpoint: HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/sessions", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly sessions: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sessionId: import("effect/Schema").brand<import("effect/Schema").String, "auth/SessionId">;
+        readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly authTime: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly lastSeenAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+        readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly current: import("effect/Schema").Boolean;
+        readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+            readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>;
+        readonly ip: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly userAgent: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly country: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly region: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly city: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly latitude: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly longitude: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const revokeSessionEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revoke", "POST", "/sessions/revoke", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").brand<import("effect/Schema").String, "auth/SessionId">;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const revokeOtherSessionsEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revokeOthers", "POST", "/sessions/revoke-others", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const loginNotificationReportEndpoint: HttpApiEndpoint.HttpApiEndpoint<"reportLogin", "POST", "/login/report", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const securityTimelineListEndpoint: HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/timeline", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<import("effect/Schema").Struct<{
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly beforeOccurredAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly types: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["auth.login.succeeded", "auth.login.failed", "auth.session.revoked", "auth.policy.denied", "auth.oauth.account.linked", "auth.oauth.account.unlinked", "auth.oauth.link_confirmation.started", "auth.oauth.link_confirmation.confirmed", "auth.oauth.provider_token.refreshed", "auth.oauth.provider_token.revoked", "auth.passkey.credential.revoked", "auth.totp.enrollment.started", "auth.totp.factor.confirmed", "auth.totp.factor.verified", "auth.totp.factor.revoked", "auth.recovery_code.generated", "auth.recovery_code.verified", "auth.recovery_code.revoked", "auth.api_key.created", "auth.api_key.verified", "auth.api_key.revoked", "auth.api_key.verification_failed", "auth.refresh_token.issued", "auth.refresh_token.rotated", "auth.refresh_token.reuse_detected", "auth.refresh_token.revoked", "auth.jwt.introspected", "auth.jwt.revoked"]>>>;
+    readonly categories: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["api_key", "auth", "jwt", "mfa", "oauth", "policy", "refresh_token", "session"]>>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly events: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly eventId: import("effect/Schema").String;
+        readonly type: import("effect/Schema").Literals<readonly ["auth.login.succeeded", "auth.login.failed", "auth.session.revoked", "auth.policy.denied", "auth.oauth.account.linked", "auth.oauth.account.unlinked", "auth.oauth.link_confirmation.started", "auth.oauth.link_confirmation.confirmed", "auth.oauth.provider_token.refreshed", "auth.oauth.provider_token.revoked", "auth.passkey.credential.revoked", "auth.totp.enrollment.started", "auth.totp.factor.confirmed", "auth.totp.factor.verified", "auth.totp.factor.revoked", "auth.recovery_code.generated", "auth.recovery_code.verified", "auth.recovery_code.revoked", "auth.api_key.created", "auth.api_key.verified", "auth.api_key.revoked", "auth.api_key.verification_failed", "auth.refresh_token.issued", "auth.refresh_token.rotated", "auth.refresh_token.reuse_detected", "auth.refresh_token.revoked", "auth.jwt.introspected", "auth.jwt.revoked"]>;
+        readonly category: import("effect/Schema").Literals<readonly ["api_key", "auth", "jwt", "mfa", "oauth", "policy", "refresh_token", "session"]>;
+        readonly severity: import("effect/Schema").Literals<readonly ["info", "warning", "critical"]>;
+        readonly occurredAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly summary: import("effect/Schema").String;
+        readonly actor: import("effect/Schema").optional<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"anonymous">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"user">;
+            readonly sessionId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/SessionId">>;
+        }>]>>;
+        readonly request: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly ipHash: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly userAgentHash: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const trustedDeviceListEndpoint: HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly devices: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly deviceId: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly lastSeenAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const trustedDeviceRevokeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revoke", "POST", "/revoke", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly deviceId: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const emailVerificationStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"start", "POST", "/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const emailVerificationVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verify", "POST", "/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const emailOtpStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"start", "POST", "/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const emailOtpVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verify", "POST", "/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").String;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const magicLinkStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"start", "POST", "/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly email: import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const magicLinkVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verify", "POST", "/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").String;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthRateLimitedError | typeof AuthInternalError>, never, never>;
+export declare const oauthAuthorizationStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"startAuthorization", "POST", "/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+    readonly redirectUri: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly scopes: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    readonly authorizationParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly codeVerifier: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly includeNonce: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly nonce: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+    readonly authorizationUrl: import("effect/Schema").String;
+    readonly state: import("effect/Schema").String;
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly codeChallenge: import("effect/Schema").String;
+    readonly codeChallengeMethod: import("effect/Schema").Literal<"S256">;
+    readonly nonce: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly redirectUri: import("effect/Schema").String;
+    readonly scopes: import("effect/Schema").$Array<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const oauthAccountUnlinkEndpoint: HttpApiEndpoint.HttpApiEndpoint<"unlinkAccount", "POST", "/unlink", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+    readonly providerAccountId: import("effect/Schema").String;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"allow">;
+    readonly reason: import("effect/Schema").Literal<"owned-account">;
+    readonly account: import("effect/Schema").Struct<{
+        readonly accountId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthAccountId">;
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+    }>;
+    readonly remainingAccounts: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly accountId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthAccountId">;
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+    }>>;
+    readonly unlinked: import("effect/Schema").Boolean;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires-step-up">;
+    readonly reason: import("effect/Schema").Literal<"step-up-required">;
+    readonly account: import("effect/Schema").Struct<{
+        readonly accountId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthAccountId">;
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+    }>;
+    readonly remainingAccounts: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly accountId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthAccountId">;
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"deny-not-found">;
+    readonly reason: import("effect/Schema").Literal<"provider-account-not-found">;
+    readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+    readonly providerAccountId: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"deny-not-owner">;
+    readonly reason: import("effect/Schema").Literal<"provider-account-linked-to-different-user">;
+    readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+    readonly providerAccountId: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"deny-last-account">;
+    readonly reason: import("effect/Schema").Literal<"last-linked-account">;
+    readonly account: import("effect/Schema").Struct<{
+        readonly accountId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthAccountId">;
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+    }>;
+}>]>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const oauthLinkConfirmationStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"startLinkConfirmation", "POST", "/link-confirmation/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">>;
+    readonly identity: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+        readonly email: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">>;
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly identity: import("effect/Schema").Struct<{
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+        readonly email: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">>;
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    }>;
+    readonly reason: import("effect/Schema").String;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const oauthLinkConfirmationInspectEndpoint: HttpApiEndpoint.HttpApiEndpoint<"inspectLinkConfirmation", "POST", "/link-confirmation/inspect", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly identity: import("effect/Schema").Struct<{
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+        readonly email: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">>;
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    }>;
+    readonly reason: import("effect/Schema").String;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const oauthLinkConfirmationConfirmEndpoint: HttpApiEndpoint.HttpApiEndpoint<"confirmLinkConfirmation", "POST", "/link-confirmation/confirm", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly expectedProviderId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">>;
+    readonly expectedProviderAccountId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly identity: import("effect/Schema").Struct<{
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+        readonly email: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/Email">>;
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    }>;
+    readonly reason: import("effect/Schema").String;
+    readonly existingAccount: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly accountId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthAccountId">;
+        readonly providerId: import("effect/Schema").brand<import("effect/Schema").String, "auth/OAuthProviderId">;
+        readonly providerAccountId: import("effect/Schema").String;
+    }>>;
+    readonly linked: import("effect/Schema").Boolean;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const passkeyRegistrationStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"registerStart", "POST", "/register/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly userName: import("effect/Schema").String;
+    readonly userDisplayName: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rp: import("effect/Schema").Struct<{
+            readonly id: import("effect/Schema").String;
+            readonly name: import("effect/Schema").String;
+        }>;
+        readonly user: import("effect/Schema").Struct<{
+            readonly id: import("effect/Schema").String;
+            readonly name: import("effect/Schema").String;
+            readonly displayName: import("effect/Schema").String;
+        }>;
+        readonly pubKeyCredParams: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly alg: import("effect/Schema").Number;
+        }>>;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly excludeCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly authenticatorSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["platform", "cross-platform"]>>;
+            readonly residentKey: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["discouraged", "preferred", "required"]>>;
+            readonly requireResidentKey: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+            readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+        }>>;
+        readonly attestation: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["none", "indirect", "direct", "enterprise"]>>;
+    }>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const passkeyRegistrationFinishEndpoint: HttpApiEndpoint.HttpApiEndpoint<"registerFinish", "POST", "/register/finish", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly credentialId: import("effect/Schema").String;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const passkeyAuthenticationStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"authenticateStart", "POST", "/authenticate/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rpId: import("effect/Schema").String;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly allowCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const passkeyAuthenticationFinishEndpoint: HttpApiEndpoint.HttpApiEndpoint<"authenticateFinish", "POST", "/authenticate/finish", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly userId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const passkeyCredentialListEndpoint: HttpApiEndpoint.HttpApiEndpoint<"listCredentials", "GET", "/credentials", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly credentials: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly credentialId: import("effect/Schema").String;
+        readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly backedUp: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const passkeyCredentialRevokeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revokeCredential", "POST", "/credentials/revoke", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly credentialId: import("effect/Schema").String;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const totpEnrollmentStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"startEnrollment", "POST", "/enroll/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly accountName: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly factor: import("effect/Schema").Struct<{
+        readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: import("effect/Schema").Number;
+        readonly period: import("effect/Schema").Number;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly secret: import("effect/Schema").String;
+    readonly uri: import("effect/Schema").String;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const totpEnrollmentConfirmEndpoint: HttpApiEndpoint.HttpApiEndpoint<"confirmEnrollment", "POST", "/enroll/confirm", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+    readonly digits: import("effect/Schema").Number;
+    readonly period: import("effect/Schema").Number;
+    readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const totpVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verify", "POST", "/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly valid: import("effect/Schema").Boolean;
+    readonly factor: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: import("effect/Schema").Number;
+        readonly period: import("effect/Schema").Number;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+    readonly delta: import("effect/Schema").optional<import("effect/Schema").Number>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const totpFactorListEndpoint: HttpApiEndpoint.HttpApiEndpoint<"listFactors", "GET", "/factors", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: import("effect/Schema").Number;
+        readonly period: import("effect/Schema").Number;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const totpFactorRevokeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revokeFactor", "POST", "/factors/revoke", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const recoveryCodeGenerateEndpoint: HttpApiEndpoint.HttpApiEndpoint<"generateRecoveryCodes", "POST", "/generate", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly codes: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly records: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly usedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const recoveryCodeVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyRecoveryCode", "POST", "/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly valid: import("effect/Schema").Boolean;
+    readonly code: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly usedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const recoveryCodeListEndpoint: HttpApiEndpoint.HttpApiEndpoint<"listRecoveryCodes", "GET", "/codes", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly codes: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly usedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const recoveryCodeRevokeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revokeRecoveryCode", "POST", "/codes/revoke", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const apiKeyCreateEndpoint: HttpApiEndpoint.HttpApiEndpoint<"createApiKey", "POST", "/", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly scopes: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly secret: import("effect/Schema").String;
+    readonly key: import("effect/Schema").Struct<{
+        readonly keyId: import("effect/Schema").String;
+        readonly prefix: import("effect/Schema").String;
+        readonly scopes: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const apiKeyListEndpoint: HttpApiEndpoint.HttpApiEndpoint<"listApiKeys", "GET", "/", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly keys: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly keyId: import("effect/Schema").String;
+        readonly prefix: import("effect/Schema").String;
+        readonly scopes: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const apiKeyRevokeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revokeApiKey", "POST", "/revoke", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly keyId: import("effect/Schema").String;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const refreshTokenRefreshEndpoint: HttpApiEndpoint.HttpApiEndpoint<"refresh", "POST", "/refresh", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly refreshToken: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly accessToken: import("effect/Schema").String;
+    readonly accessTokenExpiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly refreshToken: import("effect/Schema").String;
+    readonly refreshTokenRecord: import("effect/Schema").Struct<{
+        readonly tokenId: import("effect/Schema").String;
+        readonly familyId: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly rotatedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly replacedById: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly reuseDetectedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthInternalError>, never, never>;
+export declare const jwtIntrospectEndpoint: HttpApiEndpoint.HttpApiEndpoint<"introspect", "POST", "/introspect", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly token: import("effect/Schema").String;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly active: import("effect/Schema").Literal<true>;
+    readonly header: import("effect/Schema").Struct<{
+        readonly typ: import("effect/Schema").Literal<"JWT">;
+        readonly alg: import("effect/Schema").Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+        readonly kid: import("effect/Schema").String;
+    }>;
+    readonly claims: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+    readonly key: import("effect/Schema").Struct<{
+        readonly keyId: import("effect/Schema").String;
+        readonly alg: import("effect/Schema").Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "retired", "disabled"]>;
+        readonly createdAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly jwtId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly revoked: import("effect/Schema").Literal<false>;
+}>, import("effect/Schema").Struct<{
+    readonly active: import("effect/Schema").Literal<false>;
+    readonly reason: import("effect/Schema").Literals<readonly ["malformed", "unsupported_alg", "unknown_key", "invalid_signature", "expired", "not_yet_valid", "issuer_mismatch", "audience_mismatch", "revoked"]>;
+    readonly jwtId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly revokedReason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>]>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const jwtRevokeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"revoke", "POST", "/revoke", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly jwtId: import("effect/Schema").String;
+    readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<HttpApiSchema.NoContent>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const mfaOptionsEndpoint: HttpApiEndpoint.HttpApiEndpoint<"options", "POST", "/options", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const totpMfaVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyTotp", "POST", "/totp/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const totpMfaVerifyForFlowEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyTotpForFlow", "POST", "/totp/verify-flow", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const recoveryCodeMfaVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyRecoveryCode", "POST", "/recovery-code/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const recoveryCodeMfaVerifyForFlowEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyRecoveryCodeForFlow", "POST", "/recovery-code/verify-flow", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const passkeyMfaStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"startPasskey", "POST", "/passkey/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rpId: import("effect/Schema").String;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly allowCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthInternalError>, never, never>;
+export declare const passkeyMfaVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyPasskey", "POST", "/passkey/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly userId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const stepUpOptionsEndpoint: HttpApiEndpoint.HttpApiEndpoint<"options", "GET", "/options", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const stepUpTotpVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyTotp", "POST", "/totp/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInvalidCredentialsError | typeof AuthInternalError>, never, never>;
+export declare const stepUpRecoveryCodeVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyRecoveryCode", "POST", "/recovery-code/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthUnauthenticatedError | typeof AuthInvalidCredentialsError | typeof AuthInternalError>, never, never>;
+export declare const stepUpPasskeyStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"startPasskey", "POST", "/passkey/start", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rpId: import("effect/Schema").String;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly allowCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthInternalError>, never, never>;
+export declare const stepUpPasskeyVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"verifyPasskey", "POST", "/passkey/verify", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const loginApprovalApproveEndpoint: HttpApiEndpoint.HttpApiEndpoint<"approve", "POST", "/approve", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly rememberDevice: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const loginApprovalStatusEndpoint: HttpApiEndpoint.HttpApiEndpoint<"status", "POST", "/status", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly status: import("effect/Schema").Literals<readonly ["pending", "approved", "denied", "expired"]>;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+export declare const loginApprovalFinalizeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"finalize", "POST", "/finalize", HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly rememberDevice: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly emailVerified: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    }>>;
+}>>, HttpApiEndpoint.Json<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthInternalError>, never, never>;
+//# sourceMappingURL=Endpoints.d.ts.map