@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.13

package/dist/HttpApi/Schemas.js

@@ -0,0 +1,862 @@
+import { Schema } from "effect";
+import { AuthFlowIdSchema, ChallengeIdSchema, CredentialIdSchema, OAuthAccountIdSchema, EmailSchema, OAuthProviderIdSchema, SessionIdSchema, UnixMillisSchema, UserIdSchema, } from "../Identifiers.js";
+export const PasswordSignInBody = Schema.Struct({
+    email: EmailSchema,
+    password: Schema.String,
+});
+export const PasswordSignUpBody = Schema.Struct({
+    email: EmailSchema,
+    password: Schema.String,
+    emailVerified: Schema.optional(Schema.Boolean),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasswordResetStartBody = Schema.Struct({
+    email: EmailSchema,
+    secret: Schema.optional(Schema.String),
+    locale: Schema.optional(Schema.String),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasswordResetVerifyBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    secret: Schema.String,
+    password: Schema.String,
+});
+export const PasswordSetBody = Schema.Struct({
+    password: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasswordChangeBody = Schema.Struct({
+    currentPassword: Schema.String,
+    newPassword: Schema.String,
+});
+export const EmailVerificationStartBody = Schema.Struct({
+    userId: UserIdSchema,
+    email: EmailSchema,
+    secret: Schema.optional(Schema.String),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const EmailVerificationVerifyBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    secret: Schema.optional(Schema.String),
+});
+export const EmailOtpStartBody = Schema.Struct({
+    email: EmailSchema,
+    secret: Schema.optional(Schema.String),
+    locale: Schema.optional(Schema.String),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const EmailOtpStartedBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    email: EmailSchema,
+    expiresAt: UnixMillisSchema,
+});
+export const EmailOtpVerifyBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    secret: Schema.String,
+});
+export const MagicLinkStartBody = Schema.Struct({
+    email: EmailSchema,
+    secret: Schema.optional(Schema.String),
+    locale: Schema.optional(Schema.String),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const MagicLinkStartedBody = Schema.Struct({
+    email: EmailSchema,
+    expiresAt: UnixMillisSchema,
+});
+export const MagicLinkVerifyBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    secret: Schema.String,
+});
+export const OAuthAuthorizationStartBody = Schema.Struct({
+    providerId: OAuthProviderIdSchema,
+    redirectUri: Schema.optional(Schema.String),
+    scopes: Schema.optional(Schema.Array(Schema.String)),
+    authorizationParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),
+    codeVerifier: Schema.optional(Schema.String),
+    includeNonce: Schema.optional(Schema.Boolean),
+    nonce: Schema.optional(Schema.String),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const OAuthAuthorizationStartedBody = Schema.Struct({
+    providerId: OAuthProviderIdSchema,
+    authorizationUrl: Schema.String,
+    state: Schema.String,
+    challengeId: ChallengeIdSchema,
+    expiresAt: UnixMillisSchema,
+    codeChallenge: Schema.String,
+    codeChallengeMethod: Schema.Literal("S256"),
+    nonce: Schema.optional(Schema.String),
+    redirectUri: Schema.String,
+    scopes: Schema.Array(Schema.String),
+});
+export const OAuthAuthorizationCallbackBody = Schema.Struct({
+    providerId: OAuthProviderIdSchema,
+    state: Schema.String,
+    code: Schema.optional(Schema.String),
+    error: Schema.optional(Schema.String),
+    errorDescription: Schema.optional(Schema.String),
+    errorUri: Schema.optional(Schema.String),
+    authorizationUser: Schema.optional(Schema.Unknown),
+});
+export const OAuthProviderAuthorizationQuery = Schema.Struct({
+    response_type: Schema.String,
+    client_id: Schema.optional(Schema.String),
+    redirect_uri: Schema.optional(Schema.String),
+    scope: Schema.optional(Schema.String),
+    state: Schema.optional(Schema.String),
+    code_challenge: Schema.optional(Schema.String),
+    code_challenge_method: Schema.optional(Schema.String),
+});
+export const OAuthTokenRequestBody = Schema.Struct({
+    grant_type: Schema.String,
+    code: Schema.optional(Schema.String),
+    refresh_token: Schema.optional(Schema.String),
+    redirect_uri: Schema.optional(Schema.String),
+    client_id: Schema.optional(Schema.String),
+    client_secret: Schema.optional(Schema.String),
+    code_verifier: Schema.optional(Schema.String),
+    scope: Schema.optional(Schema.String),
+});
+export const OAuthTokenRevocationRequestBody = Schema.Struct({
+    token: Schema.String,
+    token_type_hint: Schema.optional(Schema.String),
+    client_id: Schema.optional(Schema.String),
+    client_secret: Schema.optional(Schema.String),
+});
+export const OAuthTokenIntrospectionRequestBody = Schema.Struct({
+    token: Schema.String,
+    token_type_hint: Schema.optional(Schema.String),
+    client_id: Schema.optional(Schema.String),
+    client_secret: Schema.optional(Schema.String),
+});
+export const OAuthTokenResponseBody = Schema.Struct({
+    access_token: Schema.String,
+    token_type: Schema.String,
+    expires_in: Schema.optional(Schema.Number),
+    refresh_token: Schema.optional(Schema.String),
+    id_token: Schema.optional(Schema.String),
+    scope: Schema.optional(Schema.String),
+    extra: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const OAuthTokenIntrospectionResponseBody = Schema.Struct({
+    active: Schema.Boolean,
+    scope: Schema.optional(Schema.String),
+    client_id: Schema.optional(Schema.String),
+    username: Schema.optional(Schema.String),
+    token_type: Schema.optional(Schema.String),
+    exp: Schema.optional(Schema.Number),
+    iat: Schema.optional(Schema.Number),
+    nbf: Schema.optional(Schema.Number),
+    sub: Schema.optional(Schema.String),
+    aud: Schema.optional(Schema.Union([Schema.String, Schema.Array(Schema.String)])),
+    iss: Schema.optional(Schema.String),
+    jti: Schema.optional(Schema.String),
+    extra: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const OAuthVerifiedIdentityHttpBody = Schema.Struct({
+    providerId: OAuthProviderIdSchema,
+    providerAccountId: Schema.String,
+    email: Schema.optional(EmailSchema),
+    emailVerified: Schema.optional(Schema.Boolean),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const OAuthPublicVerifiedIdentityHttpBody = Schema.Struct({
+    providerId: OAuthProviderIdSchema,
+    providerAccountId: Schema.String,
+    email: Schema.optional(EmailSchema),
+    emailVerified: Schema.optional(Schema.Boolean),
+});
+export const OAuthLinkConfirmationStartBody = Schema.Struct({
+    userId: Schema.optional(UserIdSchema),
+    identity: Schema.optional(OAuthVerifiedIdentityHttpBody),
+    reason: Schema.optional(Schema.String),
+    secret: Schema.optional(Schema.String),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const OAuthLinkConfirmationStartedBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    userId: UserIdSchema,
+    identity: OAuthPublicVerifiedIdentityHttpBody,
+    reason: Schema.String,
+    expiresAt: UnixMillisSchema,
+});
+export const OAuthLinkConfirmationInspectBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    secret: Schema.optional(Schema.String),
+});
+export const OAuthLinkConfirmationPendingBody = OAuthLinkConfirmationStartedBody;
+export const OAuthLinkConfirmationConfirmBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    secret: Schema.optional(Schema.String),
+    expectedProviderId: Schema.optional(OAuthProviderIdSchema),
+    expectedProviderAccountId: Schema.optional(Schema.String),
+});
+export const OAuthAccountUnlinkBody = Schema.Struct({
+    providerId: OAuthProviderIdSchema,
+    providerAccountId: Schema.String,
+    reason: Schema.optional(Schema.String),
+});
+export const OAuthLinkedAccountHttpBody = Schema.Struct({
+    accountId: OAuthAccountIdSchema,
+    providerId: OAuthProviderIdSchema,
+    providerAccountId: Schema.String,
+});
+export const OAuthAccountUnlinkAllowedBody = Schema.Struct({
+    type: Schema.Literal("allow"),
+    reason: Schema.Literal("owned-account"),
+    account: OAuthLinkedAccountHttpBody,
+    remainingAccounts: Schema.Array(OAuthLinkedAccountHttpBody),
+    unlinked: Schema.Boolean,
+});
+export const OAuthAccountUnlinkRequiresStepUpBody = Schema.Struct({
+    type: Schema.Literal("requires-step-up"),
+    reason: Schema.Literal("step-up-required"),
+    account: OAuthLinkedAccountHttpBody,
+    remainingAccounts: Schema.Array(OAuthLinkedAccountHttpBody),
+});
+export const OAuthAccountUnlinkDenyNotFoundBody = Schema.Struct({
+    type: Schema.Literal("deny-not-found"),
+    reason: Schema.Literal("provider-account-not-found"),
+    providerId: OAuthProviderIdSchema,
+    providerAccountId: Schema.String,
+});
+export const OAuthAccountUnlinkDenyNotOwnerBody = Schema.Struct({
+    type: Schema.Literal("deny-not-owner"),
+    reason: Schema.Literal("provider-account-linked-to-different-user"),
+    providerId: OAuthProviderIdSchema,
+    providerAccountId: Schema.String,
+});
+export const OAuthAccountUnlinkDenyLastAccountBody = Schema.Struct({
+    type: Schema.Literal("deny-last-account"),
+    reason: Schema.Literal("last-linked-account"),
+    account: OAuthLinkedAccountHttpBody,
+});
+export const OAuthAccountUnlinkResolutionBody = Schema.Union([
+    OAuthAccountUnlinkAllowedBody,
+    OAuthAccountUnlinkRequiresStepUpBody,
+    OAuthAccountUnlinkDenyNotFoundBody,
+    OAuthAccountUnlinkDenyNotOwnerBody,
+    OAuthAccountUnlinkDenyLastAccountBody,
+]);
+export const OAuthLinkConfirmationConfirmedBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    userId: UserIdSchema,
+    identity: OAuthPublicVerifiedIdentityHttpBody,
+    reason: Schema.String,
+    existingAccount: Schema.optional(OAuthLinkedAccountHttpBody),
+    linked: Schema.Boolean,
+});
+export const PasskeyClientCredentialBody = Schema.Struct({
+    id: Schema.String,
+    rawId: Schema.optional(Schema.String),
+    type: Schema.Literal("public-key"),
+    response: Schema.Record(Schema.String, Schema.Unknown),
+    authenticatorAttachment: Schema.optional(Schema.String),
+    clientExtensionResults: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyRegistrationStartBody = Schema.Struct({
+    userId: UserIdSchema,
+    userName: Schema.String,
+    userDisplayName: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyRegistrationFinishBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    userId: UserIdSchema,
+    credential: PasskeyClientCredentialBody,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyAuthenticationStartBody = Schema.Struct({
+    userId: Schema.optional(UserIdSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyAuthenticationFinishBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    credential: PasskeyClientCredentialBody,
+    userId: Schema.optional(UserIdSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyMfaStartBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyMfaVerifyBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    challengeId: ChallengeIdSchema,
+    credential: PasskeyClientCredentialBody,
+    userId: Schema.optional(UserIdSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyCredentialDescriptorHttpBody = Schema.Struct({
+    type: Schema.Literal("public-key"),
+    id: Schema.String,
+    transports: Schema.optional(Schema.Array(Schema.String)),
+});
+export const PasskeyPublicKeyCredentialParametersHttpBody = Schema.Struct({
+    type: Schema.Literal("public-key"),
+    alg: Schema.Number,
+});
+export const PasskeyAuthenticatorSelectionHttpBody = Schema.Struct({
+    authenticatorAttachment: Schema.optional(Schema.Literals(["platform", "cross-platform"])),
+    residentKey: Schema.optional(Schema.Literals(["discouraged", "preferred", "required"])),
+    requireResidentKey: Schema.optional(Schema.Boolean),
+    userVerification: Schema.optional(Schema.Literals(["required", "preferred", "discouraged"])),
+});
+export const PasskeyRegistrationPublicKeyOptionsHttpBody = Schema.Struct({
+    challenge: Schema.String,
+    rp: Schema.Struct({ id: Schema.String, name: Schema.String }),
+    user: Schema.Struct({
+        id: Schema.String,
+        name: Schema.String,
+        displayName: Schema.String,
+    }),
+    pubKeyCredParams: Schema.Array(PasskeyPublicKeyCredentialParametersHttpBody),
+    timeout: Schema.optional(Schema.Number),
+    excludeCredentials: Schema.optional(Schema.Array(PasskeyCredentialDescriptorHttpBody)),
+    authenticatorSelection: Schema.optional(PasskeyAuthenticatorSelectionHttpBody),
+    attestation: Schema.optional(Schema.Literals(["none", "indirect", "direct", "enterprise"])),
+});
+export const PasskeyAuthenticationPublicKeyOptionsHttpBody = Schema.Struct({
+    challenge: Schema.String,
+    rpId: Schema.String,
+    timeout: Schema.optional(Schema.Number),
+    allowCredentials: Schema.optional(Schema.Array(PasskeyCredentialDescriptorHttpBody)),
+    userVerification: Schema.optional(Schema.Literals(["required", "preferred", "discouraged"])),
+});
+export const PasskeyRegistrationStartedBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    expiresAt: UnixMillisSchema,
+    publicKey: PasskeyRegistrationPublicKeyOptionsHttpBody,
+});
+export const PasskeyAuthenticationStartedBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    expiresAt: UnixMillisSchema,
+    publicKey: PasskeyAuthenticationPublicKeyOptionsHttpBody,
+});
+export const PasskeyRegisteredBody = Schema.Struct({
+    credentialId: Schema.String,
+});
+export const PasskeyCredentialHttpBody = Schema.Struct({
+    credentialId: Schema.String,
+    transports: Schema.optional(Schema.Array(Schema.String)),
+    backedUp: Schema.optional(Schema.Boolean),
+    createdAt: UnixMillisSchema,
+    lastUsedAt: Schema.optional(UnixMillisSchema),
+    revokedAt: Schema.optional(UnixMillisSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const PasskeyCredentialsBody = Schema.Struct({
+    credentials: Schema.Array(PasskeyCredentialHttpBody),
+});
+export const PasskeyCredentialRevokeBody = Schema.Struct({
+    credentialId: Schema.String,
+    reason: Schema.optional(Schema.String),
+});
+export const TotpAlgorithmHttpBody = Schema.Literals([
+    "SHA1",
+    "SHA256",
+    "SHA512",
+]);
+export const TotpEnrollmentStartBody = Schema.Struct({
+    accountName: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const TotpEnrollmentConfirmBody = Schema.Struct({
+    factorId: CredentialIdSchema,
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const TotpVerifyBody = Schema.Struct({
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const TotpFactorRevokeBody = Schema.Struct({
+    factorId: CredentialIdSchema,
+    reason: Schema.optional(Schema.String),
+});
+export const TotpFactorHttpBody = Schema.Struct({
+    factorId: CredentialIdSchema,
+    algorithm: TotpAlgorithmHttpBody,
+    digits: Schema.Number,
+    period: Schema.Number,
+    createdAt: UnixMillisSchema,
+    confirmedAt: Schema.optional(UnixMillisSchema),
+    lastUsedAt: Schema.optional(UnixMillisSchema),
+    revokedAt: Schema.optional(UnixMillisSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const TotpEnrollmentStartedBody = Schema.Struct({
+    factor: TotpFactorHttpBody,
+    secret: Schema.String,
+    uri: Schema.String,
+});
+export const TotpVerifyResultBody = Schema.Struct({
+    valid: Schema.Boolean,
+    factor: Schema.optional(TotpFactorHttpBody),
+    delta: Schema.optional(Schema.Number),
+});
+export const TotpFactorsBody = Schema.Struct({
+    factors: Schema.Array(TotpFactorHttpBody),
+});
+export const RecoveryCodeGenerateBody = Schema.Struct({
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const RecoveryCodeVerifyBody = Schema.Struct({
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const RecoveryCodeRevokeBody = Schema.Struct({
+    codeId: CredentialIdSchema,
+    reason: Schema.optional(Schema.String),
+});
+export const RecoveryCodeHttpBody = Schema.Struct({
+    codeId: CredentialIdSchema,
+    createdAt: UnixMillisSchema,
+    usedAt: Schema.optional(UnixMillisSchema),
+    revokedAt: Schema.optional(UnixMillisSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const RecoveryCodesGeneratedBody = Schema.Struct({
+    codes: Schema.Array(Schema.String),
+    records: Schema.Array(RecoveryCodeHttpBody),
+});
+export const RecoveryCodeVerifyResultBody = Schema.Struct({
+    valid: Schema.Boolean,
+    code: Schema.optional(RecoveryCodeHttpBody),
+});
+export const RecoveryCodesBody = Schema.Struct({
+    codes: Schema.Array(RecoveryCodeHttpBody),
+});
+export const ApiKeyCreateBody = Schema.Struct({
+    scopes: Schema.optional(Schema.Array(Schema.String)),
+    expiresAt: Schema.optional(UnixMillisSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const ApiKeyRevokeBody = Schema.Struct({
+    keyId: Schema.String,
+    reason: Schema.optional(Schema.String),
+});
+export const ApiKeyHttpBody = Schema.Struct({
+    keyId: Schema.String,
+    prefix: Schema.String,
+    scopes: Schema.Array(Schema.String),
+    createdAt: UnixMillisSchema,
+    expiresAt: Schema.optional(UnixMillisSchema),
+    lastUsedAt: Schema.optional(UnixMillisSchema),
+    revokedAt: Schema.optional(UnixMillisSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const ApiKeyCreatedBody = Schema.Struct({
+    secret: Schema.String,
+    key: ApiKeyHttpBody,
+});
+export const ApiKeysBody = Schema.Struct({
+    keys: Schema.Array(ApiKeyHttpBody),
+});
+export const RefreshTokenRefreshBody = Schema.Struct({
+    refreshToken: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const RefreshTokenHttpBody = Schema.Struct({
+    tokenId: Schema.String,
+    familyId: Schema.String,
+    createdAt: UnixMillisSchema,
+    expiresAt: UnixMillisSchema,
+    lastUsedAt: Schema.optional(UnixMillisSchema),
+    rotatedAt: Schema.optional(UnixMillisSchema),
+    replacedById: Schema.optional(Schema.String),
+    revokedAt: Schema.optional(UnixMillisSchema),
+    reuseDetectedAt: Schema.optional(UnixMillisSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const RefreshTokenRefreshedBody = Schema.Struct({
+    accessToken: Schema.String,
+    accessTokenExpiresAt: Schema.optional(UnixMillisSchema),
+    refreshToken: Schema.String,
+    refreshTokenRecord: RefreshTokenHttpBody,
+});
+export const JwtIntrospectBody = Schema.Struct({
+    token: Schema.String,
+});
+export const JwtRevokeBody = Schema.Struct({
+    jwtId: Schema.String,
+    expiresAt: Schema.optional(UnixMillisSchema),
+    reason: Schema.optional(Schema.String),
+});
+export const JwtPublicJwkBody = Schema.Record(Schema.String, Schema.Unknown);
+export const JwtJwksBody = Schema.Struct({
+    keys: Schema.Array(JwtPublicJwkBody),
+});
+export const OidcDiscoveryMetadataBody = Schema.Struct({
+    issuer: Schema.String,
+    authorization_endpoint: Schema.String,
+    token_endpoint: Schema.String,
+    jwks_uri: Schema.String,
+    response_types_supported: Schema.Array(Schema.String),
+    subject_types_supported: Schema.Array(Schema.String),
+    id_token_signing_alg_values_supported: Schema.Array(Schema.String),
+    scopes_supported: Schema.optional(Schema.Array(Schema.String)),
+    claims_supported: Schema.optional(Schema.Array(Schema.String)),
+    grant_types_supported: Schema.optional(Schema.Array(Schema.String)),
+    token_endpoint_auth_methods_supported: Schema.optional(Schema.Array(Schema.String)),
+    introspection_endpoint_auth_methods_supported: Schema.optional(Schema.Array(Schema.String)),
+    code_challenge_methods_supported: Schema.optional(Schema.Array(Schema.String)),
+    userinfo_endpoint: Schema.optional(Schema.String),
+    end_session_endpoint: Schema.optional(Schema.String),
+    introspection_endpoint: Schema.optional(Schema.String),
+    revocation_endpoint: Schema.optional(Schema.String),
+    revocation_endpoint_auth_methods_supported: Schema.optional(Schema.Array(Schema.String)),
+});
+export const JwtHeaderHttpBody = Schema.Struct({
+    typ: Schema.Literal("JWT"),
+    alg: Schema.Literals(["HS256", "RS256", "ES256", "EdDSA"]),
+    kid: Schema.String,
+});
+export const JwtKeyHttpBody = Schema.Struct({
+    keyId: Schema.String,
+    alg: Schema.Literals(["HS256", "RS256", "ES256", "EdDSA"]),
+    status: Schema.Literals(["active", "retired", "disabled"]),
+    createdAt: Schema.optional(UnixMillisSchema),
+    expiresAt: Schema.optional(UnixMillisSchema),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const JwtIntrospectionInactiveReasonBody = Schema.Literals([
+    "malformed",
+    "unsupported_alg",
+    "unknown_key",
+    "invalid_signature",
+    "expired",
+    "not_yet_valid",
+    "issuer_mismatch",
+    "audience_mismatch",
+    "revoked",
+]);
+export const JwtIntrospectionActiveBody = Schema.Struct({
+    active: Schema.Literal(true),
+    header: JwtHeaderHttpBody,
+    claims: Schema.Record(Schema.String, Schema.Unknown),
+    key: JwtKeyHttpBody,
+    jwtId: Schema.optional(Schema.String),
+    expiresAt: Schema.optional(UnixMillisSchema),
+    revoked: Schema.Literal(false),
+});
+export const JwtIntrospectionInactiveBody = Schema.Struct({
+    active: Schema.Literal(false),
+    reason: JwtIntrospectionInactiveReasonBody,
+    jwtId: Schema.optional(Schema.String),
+    expiresAt: Schema.optional(UnixMillisSchema),
+    revokedAt: Schema.optional(UnixMillisSchema),
+    revokedReason: Schema.optional(Schema.String),
+});
+export const JwtIntrospectionBody = Schema.Union([
+    JwtIntrospectionActiveBody,
+    JwtIntrospectionInactiveBody
+]);
+export const MfaOptionsBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+});
+export const MfaFactorOptionBody = Schema.Struct({
+    type: Schema.Literals(["totp", "backup-code", "passkey"]),
+});
+export const MfaOptionsResultBody = Schema.Struct({
+    factors: Schema.Array(MfaFactorOptionBody),
+});
+export const StepUpFactorOptionBody = Schema.Struct({
+    type: Schema.Literals(["totp", "backup-code", "passkey"]),
+});
+export const StepUpOptionsResultBody = Schema.Struct({
+    factors: Schema.Array(StepUpFactorOptionBody),
+});
+export const StepUpTotpVerifyBody = Schema.Struct({
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const StepUpRecoveryCodeVerifyBody = Schema.Struct({
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const StepUpPasskeyStartBody = Schema.Struct({
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const StepUpPasskeyVerifyBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    credential: PasskeyClientCredentialBody,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const TotpMfaVerifyBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    userId: UserIdSchema,
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const TotpMfaVerifyForFlowBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const RecoveryCodeMfaVerifyBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    userId: UserIdSchema,
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const RecoveryCodeMfaVerifyForFlowBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    code: Schema.String,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const LoginApprovalApproveBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    approvalChallengeId: ChallengeIdSchema,
+    secret: Schema.optional(Schema.String),
+    rememberDevice: Schema.optional(Schema.Boolean),
+});
+export const LoginApprovalReviewStatusBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    approvalChallengeId: ChallengeIdSchema,
+});
+export const LoginApprovalFinalizeBody = Schema.Struct({
+    flowId: AuthFlowIdSchema,
+    approvalChallengeId: ChallengeIdSchema,
+    rememberDevice: Schema.optional(Schema.Boolean),
+});
+export const SessionClaimsHttpBody = Schema.Struct({
+    emailVerified: Schema.optional(Schema.Boolean),
+    requirements: Schema.optional(Schema.Array(Schema.String)),
+});
+export const AuthenticatedHttpBody = Schema.Struct({
+    type: Schema.Literal("authenticated"),
+    expiresAt: Schema.Number,
+    aal: Schema.Literals(["aal1", "aal2", "aal3"]),
+    amr: Schema.Array(Schema.String),
+    mfaVerifiedAt: Schema.optional(UnixMillisSchema),
+    claims: Schema.optional(SessionClaimsHttpBody),
+});
+export const CurrentSessionHttpBody = Schema.Struct({
+    type: Schema.Literal("authenticated"),
+    userId: Schema.String,
+    sessionId: Schema.String,
+    authTime: Schema.Number,
+    expiresAt: Schema.Number,
+    aal: Schema.Literals(["aal1", "aal2", "aal3"]),
+    amr: Schema.Array(Schema.String),
+    mfaVerifiedAt: Schema.optional(UnixMillisSchema),
+    claims: Schema.optional(SessionClaimsHttpBody),
+});
+export const ActiveSessionHttpBody = Schema.Struct({
+    sessionId: SessionIdSchema,
+    userId: UserIdSchema,
+    createdAt: UnixMillisSchema,
+    authTime: UnixMillisSchema,
+    lastSeenAt: Schema.optional(UnixMillisSchema),
+    expiresAt: UnixMillisSchema,
+    aal: Schema.Literals(["aal1", "aal2", "aal3"]),
+    amr: Schema.Array(Schema.String),
+    mfaVerifiedAt: Schema.optional(UnixMillisSchema),
+    current: Schema.Boolean,
+    claims: Schema.optional(SessionClaimsHttpBody),
+    ip: Schema.optional(Schema.String),
+    userAgent: Schema.optional(Schema.String),
+    country: Schema.optional(Schema.String),
+    region: Schema.optional(Schema.String),
+    city: Schema.optional(Schema.String),
+    latitude: Schema.optional(Schema.Number),
+    longitude: Schema.optional(Schema.Number),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const ActiveSessionsHttpBody = Schema.Struct({
+    sessions: Schema.Array(ActiveSessionHttpBody),
+});
+export const SessionRevokeBody = Schema.Struct({
+    sessionId: SessionIdSchema,
+});
+export const AdminSessionHttpBody = Schema.Struct({
+    sessionId: SessionIdSchema,
+    userId: UserIdSchema,
+    createdAt: UnixMillisSchema,
+    authTime: UnixMillisSchema,
+    lastSeenAt: Schema.optional(UnixMillisSchema),
+    expiresAt: UnixMillisSchema,
+    aal: Schema.Literals(["aal1", "aal2", "aal3"]),
+    amr: Schema.Array(Schema.String),
+    mfaVerifiedAt: Schema.optional(UnixMillisSchema),
+    ip: Schema.optional(Schema.String),
+    userAgent: Schema.optional(Schema.String),
+    country: Schema.optional(Schema.String),
+    region: Schema.optional(Schema.String),
+    city: Schema.optional(Schema.String),
+    latitude: Schema.optional(Schema.Number),
+    longitude: Schema.optional(Schema.Number),
+});
+export const AdminSessionsHttpBody = Schema.Struct({
+    sessions: Schema.Array(AdminSessionHttpBody),
+});
+export const AdminSessionListQuery = Schema.Struct({
+    userId: UserIdSchema,
+});
+export const AdminSessionRevokeBody = Schema.Struct({
+    userId: UserIdSchema,
+    sessionId: SessionIdSchema,
+});
+export const AdminSessionRevokeAllBody = Schema.Struct({
+    userId: UserIdSchema,
+});
+export const LoginNotificationReportBody = Schema.Struct({
+    challengeId: ChallengeIdSchema,
+    secret: Schema.String,
+});
+export const SecurityTimelineEventTypeBody = Schema.Literals([
+    "auth.login.succeeded",
+    "auth.login.failed",
+    "auth.session.revoked",
+    "auth.risk.assessed",
+    "auth.policy.denied",
+    "auth.oauth.account.linked",
+    "auth.oauth.account.unlinked",
+    "auth.oauth.link_confirmation.started",
+    "auth.oauth.link_confirmation.confirmed",
+    "auth.oauth.provider_token.refreshed",
+    "auth.oauth.provider_token.revoked",
+    "auth.passkey.credential.revoked",
+    "auth.totp.enrollment.started",
+    "auth.totp.factor.confirmed",
+    "auth.totp.factor.verified",
+    "auth.totp.factor.revoked",
+    "auth.recovery_code.generated",
+    "auth.recovery_code.verified",
+    "auth.recovery_code.revoked",
+    "auth.api_key.created",
+    "auth.api_key.verified",
+    "auth.api_key.revoked",
+    "auth.api_key.verification_failed",
+    "auth.refresh_token.issued",
+    "auth.refresh_token.rotated",
+    "auth.refresh_token.reuse_detected",
+    "auth.refresh_token.revoked",
+    "auth.incident_action.executed",
+    "auth.jwt.introspected",
+    "auth.jwt.revoked",
+]);
+export const SecurityTimelineEventCategoryBody = Schema.Literals([
+    "api_key",
+    "auth",
+    "incident",
+    "jwt",
+    "mfa",
+    "oauth",
+    "policy",
+    "refresh_token",
+    "risk",
+    "session",
+]);
+export const SecurityTimelineEventSeverityBody = Schema.Literals([
+    "info",
+    "warning",
+    "critical",
+]);
+export const SecurityTimelineActorBody = Schema.Union([
+    Schema.Struct({
+        type: Schema.Literal("anonymous"),
+    }),
+    Schema.Struct({
+        type: Schema.Literal("user"),
+        sessionId: Schema.optional(SessionIdSchema),
+    }),
+]);
+export const SecurityTimelineRequestBody = Schema.Struct({
+    ipHash: Schema.optional(Schema.String),
+    userAgentHash: Schema.optional(Schema.String),
+});
+export const SecurityTimelineEventBody = Schema.Struct({
+    eventId: Schema.String,
+    type: SecurityTimelineEventTypeBody,
+    category: SecurityTimelineEventCategoryBody,
+    severity: SecurityTimelineEventSeverityBody,
+    occurredAt: UnixMillisSchema,
+    summary: Schema.String,
+    actor: Schema.optional(SecurityTimelineActorBody),
+    request: Schema.optional(SecurityTimelineRequestBody),
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const SecurityTimelineEventsBody = Schema.Struct({
+    events: Schema.Array(SecurityTimelineEventBody),
+});
+export const SecurityTimelineListQuery = Schema.Struct({
+    limit: Schema.optional(Schema.Number),
+    beforeOccurredAt: Schema.optional(UnixMillisSchema),
+    types: Schema.optional(Schema.Array(SecurityTimelineEventTypeBody)),
+    categories: Schema.optional(Schema.Array(SecurityTimelineEventCategoryBody)),
+});
+export const AdminSecurityTimelineListQuery = Schema.Struct({
+    userId: UserIdSchema,
+    limit: Schema.optional(Schema.Number),
+    beforeOccurredAt: Schema.optional(UnixMillisSchema),
+    types: Schema.optional(Schema.Array(SecurityTimelineEventTypeBody)),
+    categories: Schema.optional(Schema.Array(SecurityTimelineEventCategoryBody)),
+});
+export const TrustedDeviceHttpBody = Schema.Struct({
+    deviceId: Schema.String,
+    createdAt: UnixMillisSchema,
+    lastSeenAt: UnixMillisSchema,
+    expiresAt: UnixMillisSchema,
+    metadata: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+});
+export const TrustedDevicesBody = Schema.Struct({
+    devices: Schema.Array(TrustedDeviceHttpBody),
+});
+export const TrustedDeviceRevokeBody = Schema.Struct({
+    deviceId: Schema.String,
+});
+export const AdminTrustedDeviceListQuery = Schema.Struct({
+    userId: UserIdSchema,
+});
+export const AdminTrustedDeviceRevokeBody = Schema.Struct({
+    userId: UserIdSchema,
+    deviceId: Schema.String,
+});
+export const RequiresMfaHttpBody = Schema.Struct({
+    type: Schema.Literal("requires_mfa"),
+    flowId: Schema.String,
+    factors: Schema.Array(Schema.Struct({ type: Schema.String })),
+});
+export const RequiresEmailVerificationHttpBody = Schema.Struct({
+    type: Schema.Literal("requires_email_verification"),
+    flowId: Schema.String,
+});
+export const RequiresLoginApprovalHttpBody = Schema.Struct({
+    type: Schema.Literal("requires_login_approval"),
+    flowId: Schema.String,
+    approvalChallengeId: Schema.String,
+    channel: Schema.String,
+    sessionBinding: Schema.Literals([
+        "originating-device",
+        "approval-device",
+        "none",
+    ]),
+    sameDeviceRequired: Schema.Boolean,
+    reason: Schema.String,
+});
+export const LoginApprovalReviewStatusHttpBody = Schema.Struct({
+    status: Schema.Literals([
+        "pending",
+        "approved",
+        "denied",
+        "expired",
+    ]),
+    expiresAt: UnixMillisSchema,
+});
+export const RequiresPasskeyEnrollmentHttpBody = Schema.Struct({
+    type: Schema.Literal("requires_passkey_enrollment"),
+    flowId: Schema.String,
+});
+export const PasswordAuthSuccess = Schema.Union([
+    AuthenticatedHttpBody,
+    RequiresMfaHttpBody,
+    RequiresEmailVerificationHttpBody,
+    RequiresLoginApprovalHttpBody,
+    RequiresPasskeyEnrollmentHttpBody,
+]);
+export const EmailOtpAuthSuccess = PasswordAuthSuccess;
+export const MagicLinkAuthSuccess = PasswordAuthSuccess;
+//# sourceMappingURL=Schemas.js.map