@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.19

package/dist/HttpApi/ClientApi.d.ts

@@ -0,0 +1,917 @@
+import { HttpApi, HttpApiGroup } from "effect/unstable/httpapi";
+import { AuthSchemaErrorMiddleware } from "./Errors.js";
+import { AuthOriginCheckMiddleware } from "./Middleware.js";
+import { PasswordHttpApiGroup } from "./PasswordContract.js";
+export { PasswordHttpApiGroup } from "./PasswordContract.js";
+declare const SessionHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"session", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"current", "GET", "/auth/session", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly userId: import("effect/Schema").String;
+    readonly sessionId: import("effect/Schema").String;
+    readonly authTime: import("effect/Schema").Number;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"list", "GET", "/auth/sessions", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly sessions: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sessionId: import("effect/Schema").brand<import("effect/Schema").String, "auth/SessionId">;
+        readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly authTime: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly lastSeenAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+        readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly current: import("effect/Schema").Boolean;
+        readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+            readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+            readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+            }>>;
+        }>>;
+        readonly ip: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly userAgent: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly country: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly region: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly city: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly latitude: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly longitude: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"logout", "POST", "/auth/logout", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"refresh", "POST", "/auth/session/refresh", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly userId: import("effect/Schema").String;
+    readonly sessionId: import("effect/Schema").String;
+    readonly authTime: import("effect/Schema").Number;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revoke", "POST", "/auth/sessions/revoke", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").brand<import("effect/Schema").String, "auth/SessionId">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeOthers", "POST", "/auth/sessions/revoke-others", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware, never>, false>;
+export declare class SessionHttpApiGroup extends SessionHttpApiGroup_base {
+}
+declare const EmailVerificationHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"emailVerification", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"start", "POST", "/auth/email-verification/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verify", "POST", "/auth/email-verification/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class EmailVerificationHttpApiGroup extends EmailVerificationHttpApiGroup_base {
+}
+declare const EmailOtpHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"emailOtp", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"start", "POST", "/auth/email-otp/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verify", "POST", "/auth/email-otp/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class EmailOtpHttpApiGroup extends EmailOtpHttpApiGroup_base {
+}
+declare const EmailAuthHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"emailAuth", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"start", "POST", "/auth/email/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly emailOtpSecret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly magicLinkSecret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly emailOtp: import("effect/Schema").Struct<{
+        readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+        readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    }>;
+    readonly magicLink: import("effect/Schema").Struct<{
+        readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    }>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class EmailAuthHttpApiGroup extends EmailAuthHttpApiGroup_base {
+}
+declare const MagicLinkHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"magicLink", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"start", "POST", "/auth/magic-link/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verify", "POST", "/auth/magic-link/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class MagicLinkHttpApiGroup extends MagicLinkHttpApiGroup_base {
+}
+declare const PasskeyHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"passkey", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"authenticateFinish", "POST", "/auth/passkey/authenticate/finish", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly userId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"authenticateStart", "POST", "/auth/passkey/authenticate/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rpId: import("effect/Schema").String;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly allowCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listCredentials", "GET", "/auth/passkey/credentials", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly credentials: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly credentialId: import("effect/Schema").String;
+        readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly backedUp: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"registerFinish", "POST", "/auth/passkey/register/finish", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly credentialId: import("effect/Schema").String;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"registerStart", "POST", "/auth/passkey/register/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rp: import("effect/Schema").Struct<{
+            readonly id: import("effect/Schema").String;
+            readonly name: import("effect/Schema").String;
+        }>;
+        readonly user: import("effect/Schema").Struct<{
+            readonly id: import("effect/Schema").String;
+            readonly name: import("effect/Schema").String;
+            readonly displayName: import("effect/Schema").String;
+        }>;
+        readonly pubKeyCredParams: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly alg: import("effect/Schema").Number;
+        }>>;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly excludeCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly authenticatorSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["platform", "cross-platform"]>>;
+            readonly residentKey: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["discouraged", "preferred", "required"]>>;
+            readonly requireResidentKey: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+            readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+        }>>;
+        readonly attestation: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["none", "indirect", "direct", "enterprise"]>>;
+    }>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeCredential", "POST", "/auth/passkey/credentials/revoke", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly credentialId: import("effect/Schema").String;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class PasskeyHttpApiGroup extends PasskeyHttpApiGroup_base {
+}
+declare const IdentityHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"identity", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"add", "POST", "/auth/identities/add", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"global">;
+    }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"tenant">;
+        readonly tenantId: import("effect/Schema").String;
+    }>]>;
+    readonly kind: import("effect/Schema").String;
+    readonly value: import("effect/Schema").String;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"global">;
+    }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"tenant">;
+        readonly tenantId: import("effect/Schema").String;
+    }>]>;
+    readonly kind: import("effect/Schema").String;
+    readonly value: import("effect/Schema").String;
+    readonly verified: import("effect/Schema").Boolean;
+    readonly loginEligible: import("effect/Schema").Boolean;
+    readonly isPrimaryLogin: import("effect/Schema").Boolean;
+    readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly updatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthIdentityAlreadyRegisteredError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"availability", "POST", "/auth/identities/availability", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"global">;
+    }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"tenant">;
+        readonly tenantId: import("effect/Schema").String;
+    }>]>;
+    readonly kind: import("effect/Schema").String;
+    readonly value: import("effect/Schema").String;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly available: import("effect/Schema").Boolean;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthIdentityAlreadyRegisteredError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"list", "GET", "/auth/identities/", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identities: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+        readonly verified: import("effect/Schema").Boolean;
+        readonly loginEligible: import("effect/Schema").Boolean;
+        readonly isPrimaryLogin: import("effect/Schema").Boolean;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly updatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthIdentityAlreadyRegisteredError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"primary", "POST", "/auth/identities/primary", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly expectedUpdatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"global">;
+    }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"tenant">;
+        readonly tenantId: import("effect/Schema").String;
+    }>]>;
+    readonly kind: import("effect/Schema").String;
+    readonly value: import("effect/Schema").String;
+    readonly verified: import("effect/Schema").Boolean;
+    readonly loginEligible: import("effect/Schema").Boolean;
+    readonly isPrimaryLogin: import("effect/Schema").Boolean;
+    readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly updatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthIdentityAlreadyRegisteredError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"replace", "POST", "/auth/identities/replace", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly expectedUpdatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"global">;
+    }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"tenant">;
+        readonly tenantId: import("effect/Schema").String;
+    }>]>;
+    readonly kind: import("effect/Schema").String;
+    readonly value: import("effect/Schema").String;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"global">;
+    }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"tenant">;
+        readonly tenantId: import("effect/Schema").String;
+    }>]>;
+    readonly kind: import("effect/Schema").String;
+    readonly value: import("effect/Schema").String;
+    readonly verified: import("effect/Schema").Boolean;
+    readonly loginEligible: import("effect/Schema").Boolean;
+    readonly isPrimaryLogin: import("effect/Schema").Boolean;
+    readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly updatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthIdentityAlreadyRegisteredError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revoke", "POST", "/auth/identities/revoke", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly expectedUpdatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+    readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"global">;
+    }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"tenant">;
+        readonly tenantId: import("effect/Schema").String;
+    }>]>;
+    readonly kind: import("effect/Schema").String;
+    readonly value: import("effect/Schema").String;
+    readonly verified: import("effect/Schema").Boolean;
+    readonly loginEligible: import("effect/Schema").Boolean;
+    readonly isPrimaryLogin: import("effect/Schema").Boolean;
+    readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly updatedAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthIdentityAlreadyRegisteredError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class IdentityHttpApiGroup extends IdentityHttpApiGroup_base {
+}
+declare const TotpHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"totp", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"confirmEnrollment", "POST", "/auth/totp/enroll/confirm", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+    readonly digits: import("effect/Schema").Number;
+    readonly period: import("effect/Schema").Number;
+    readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listFactors", "GET", "/auth/totp/factors", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: import("effect/Schema").Number;
+        readonly period: import("effect/Schema").Number;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeFactor", "POST", "/auth/totp/factors/revoke", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"startEnrollment", "POST", "/auth/totp/enroll/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly accountName: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly factor: import("effect/Schema").Struct<{
+        readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: import("effect/Schema").Number;
+        readonly period: import("effect/Schema").Number;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly secret: import("effect/Schema").String;
+    readonly uri: import("effect/Schema").String;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verify", "POST", "/auth/totp/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly valid: import("effect/Schema").Boolean;
+    readonly factor: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly factorId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly algorithm: import("effect/Schema").Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: import("effect/Schema").Number;
+        readonly period: import("effect/Schema").Number;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly confirmedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+    readonly delta: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly acceptedCounter: import("effect/Schema").optional<import("effect/Schema").Number>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class TotpHttpApiGroup extends TotpHttpApiGroup_base {
+}
+declare const RecoveryCodesHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"recoveryCodes", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"generateRecoveryCodes", "POST", "/auth/recovery-codes/generate", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly codes: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly records: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly usedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRecoveryCodes", "GET", "/auth/recovery-codes/codes", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly codes: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly usedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"regenerateRecoveryCodes", "POST", "/auth/recovery-codes/regenerate", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly revokeReason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly codes: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly records: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly usedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeRecoveryCode", "POST", "/auth/recovery-codes/codes/revoke", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+    readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyRecoveryCode", "POST", "/auth/recovery-codes/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly valid: import("effect/Schema").Boolean;
+    readonly code: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly codeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/CredentialId">;
+        readonly createdAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+        readonly usedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class RecoveryCodesHttpApiGroup extends RecoveryCodesHttpApiGroup_base {
+}
+declare const LoginApprovalHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"loginApproval", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"approve", "POST", "/auth/login-approval/approve", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly rememberDevice: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"finalize", "POST", "/auth/login-approval/finalize", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly rememberDevice: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"status", "POST", "/auth/login-approval/status", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly status: import("effect/Schema").Literals<readonly ["pending", "approved", "denied", "expired"]>;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class LoginApprovalHttpApiGroup extends LoginApprovalHttpApiGroup_base {
+}
+declare const MfaHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"mfa", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"options", "POST", "/auth/mfa/options", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"startPasskey", "POST", "/auth/mfa/passkey/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rpId: import("effect/Schema").String;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly allowCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyPasskey", "POST", "/auth/mfa/passkey/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly userId: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyRecoveryCode", "POST", "/auth/mfa/recovery-code/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyRecoveryCodeForFlow", "POST", "/auth/mfa/recovery-code/verify-flow", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyTotp", "POST", "/auth/mfa/totp/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly userId: import("effect/Schema").brand<import("effect/Schema").String, "auth/UserId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyTotpForFlow", "POST", "/auth/mfa/totp/verify-flow", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly flowId: import("effect/Schema").brand<import("effect/Schema").String, "auth/AuthFlowId">;
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class MfaHttpApiGroup extends MfaHttpApiGroup_base {
+}
+declare const StepUpHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"stepUp", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"options", "GET", "/auth/step-up/options", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["password", "totp", "backup-code", "passkey"]>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"startPasskey", "POST", "/auth/step-up/passkey/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly expiresAt: import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">;
+    readonly publicKey: import("effect/Schema").Struct<{
+        readonly challenge: import("effect/Schema").String;
+        readonly rpId: import("effect/Schema").String;
+        readonly timeout: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly allowCredentials: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"public-key">;
+            readonly id: import("effect/Schema").String;
+            readonly transports: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        }>>>;
+        readonly userVerification: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyPasskey", "POST", "/auth/step-up/passkey/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly rawId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"public-key">;
+        readonly response: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly clientExtensionResults: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    }>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyPassword", "POST", "/auth/step-up/password/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly password: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyRecoveryCode", "POST", "/auth/step-up/recovery-code/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"verifyTotp", "POST", "/auth/step-up/totp/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly code: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthUnauthenticatedError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthStepUpRequiredError | typeof import("./Errors.js").AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class StepUpHttpApiGroup extends StepUpHttpApiGroup_base {
+}
+declare const LoginNotificationHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"security", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"reportLogin", "POST", "/auth/security/login/report", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, import("effect/Schema").toCodecJson<typeof import("./Errors.js").AuthBadRequestError | typeof import("./Errors.js").AuthPolicyDeniedError | typeof import("./Errors.js").AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class LoginNotificationHttpApiGroup extends LoginNotificationHttpApiGroup_base {
+}
+declare const AuthClientProtocolApi_base: HttpApi.HttpApi<"AuthClientApi", typeof PasswordHttpApiGroup | typeof SessionHttpApiGroup | typeof EmailVerificationHttpApiGroup | typeof EmailOtpHttpApiGroup | typeof EmailAuthHttpApiGroup | typeof MagicLinkHttpApiGroup | typeof PasskeyHttpApiGroup | typeof IdentityHttpApiGroup | typeof TotpHttpApiGroup | typeof RecoveryCodesHttpApiGroup | typeof LoginApprovalHttpApiGroup | typeof MfaHttpApiGroup | typeof StepUpHttpApiGroup | typeof LoginNotificationHttpApiGroup>;
+export declare class AuthClientProtocolApi extends AuthClientProtocolApi_base {
+}
+//# sourceMappingURL=ClientApi.d.ts.map