@effect-auth/core 0.1.0-alpha.3 → 0.1.0-alpha.5

package/dist/HttpApi/Schemas.d.ts

@@ -9,6 +9,25 @@ export declare const PasswordSignUpBody: Schema.Struct<{
     readonly emailVerified: Schema.optional<Schema.Boolean>;
     readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
 }>;
+export declare const PasswordResetStartBody: Schema.Struct<{
+    readonly email: Schema.brand<Schema.String, "auth/Email">;
+    readonly secret: Schema.optional<Schema.String>;
+    readonly locale: Schema.optional<Schema.String>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasswordResetVerifyBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly secret: Schema.String;
+    readonly password: Schema.String;
+}>;
+export declare const PasswordSetBody: Schema.Struct<{
+    readonly password: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasswordChangeBody: Schema.Struct<{
+    readonly currentPassword: Schema.String;
+    readonly newPassword: Schema.String;
+}>;
 export declare const EmailVerificationStartBody: Schema.Struct<{
     readonly userId: Schema.brand<Schema.String, "auth/UserId">;
     readonly email: Schema.brand<Schema.String, "auth/Email">;
@@ -19,6 +38,685 @@ export declare const EmailVerificationVerifyBody: Schema.Struct<{
     readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
     readonly secret: Schema.optional<Schema.String>;
 }>;
+export declare const EmailOtpStartBody: Schema.Struct<{
+    readonly email: Schema.brand<Schema.String, "auth/Email">;
+    readonly secret: Schema.optional<Schema.String>;
+    readonly locale: Schema.optional<Schema.String>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const EmailOtpStartedBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly email: Schema.brand<Schema.String, "auth/Email">;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+}>;
+export declare const EmailOtpVerifyBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly secret: Schema.String;
+}>;
+export declare const MagicLinkStartBody: Schema.Struct<{
+    readonly email: Schema.brand<Schema.String, "auth/Email">;
+    readonly secret: Schema.optional<Schema.String>;
+    readonly locale: Schema.optional<Schema.String>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const MagicLinkStartedBody: Schema.Struct<{
+    readonly email: Schema.brand<Schema.String, "auth/Email">;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+}>;
+export declare const MagicLinkVerifyBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly secret: Schema.String;
+}>;
+export declare const OAuthAuthorizationStartBody: Schema.Struct<{
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly redirectUri: Schema.optional<Schema.String>;
+    readonly scopes: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly authorizationParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    readonly codeVerifier: Schema.optional<Schema.String>;
+    readonly includeNonce: Schema.optional<Schema.Boolean>;
+    readonly nonce: Schema.optional<Schema.String>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const OAuthAuthorizationStartedBody: Schema.Struct<{
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly authorizationUrl: Schema.String;
+    readonly state: Schema.String;
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly codeChallenge: Schema.String;
+    readonly codeChallengeMethod: Schema.Literal<"S256">;
+    readonly nonce: Schema.optional<Schema.String>;
+    readonly redirectUri: Schema.String;
+    readonly scopes: Schema.$Array<Schema.String>;
+}>;
+export declare const OAuthAuthorizationCallbackBody: Schema.Struct<{
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly state: Schema.String;
+    readonly code: Schema.optional<Schema.String>;
+    readonly error: Schema.optional<Schema.String>;
+    readonly errorDescription: Schema.optional<Schema.String>;
+    readonly errorUri: Schema.optional<Schema.String>;
+    readonly authorizationUser: Schema.optional<Schema.Unknown>;
+}>;
+export declare const OAuthAccountUnlinkBody: Schema.Struct<{
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+    readonly reason: Schema.optional<Schema.String>;
+}>;
+export declare const OAuthLinkedAccountHttpBody: Schema.Struct<{
+    readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}>;
+export declare const OAuthAccountUnlinkAllowedBody: Schema.Struct<{
+    readonly type: Schema.Literal<"allow">;
+    readonly reason: Schema.Literal<"owned-account">;
+    readonly account: Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>;
+    readonly remainingAccounts: Schema.$Array<Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>>;
+    readonly unlinked: Schema.Boolean;
+}>;
+export declare const OAuthAccountUnlinkRequiresStepUpBody: Schema.Struct<{
+    readonly type: Schema.Literal<"requires-step-up">;
+    readonly reason: Schema.Literal<"step-up-required">;
+    readonly account: Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>;
+    readonly remainingAccounts: Schema.$Array<Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>>;
+}>;
+export declare const OAuthAccountUnlinkDenyNotFoundBody: Schema.Struct<{
+    readonly type: Schema.Literal<"deny-not-found">;
+    readonly reason: Schema.Literal<"provider-account-not-found">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}>;
+export declare const OAuthAccountUnlinkDenyNotOwnerBody: Schema.Struct<{
+    readonly type: Schema.Literal<"deny-not-owner">;
+    readonly reason: Schema.Literal<"provider-account-linked-to-different-user">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}>;
+export declare const OAuthAccountUnlinkDenyLastAccountBody: Schema.Struct<{
+    readonly type: Schema.Literal<"deny-last-account">;
+    readonly reason: Schema.Literal<"last-linked-account">;
+    readonly account: Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>;
+}>;
+export declare const OAuthAccountUnlinkResolutionBody: Schema.Union<readonly [Schema.Struct<{
+    readonly type: Schema.Literal<"allow">;
+    readonly reason: Schema.Literal<"owned-account">;
+    readonly account: Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>;
+    readonly remainingAccounts: Schema.$Array<Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>>;
+    readonly unlinked: Schema.Boolean;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires-step-up">;
+    readonly reason: Schema.Literal<"step-up-required">;
+    readonly account: Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>;
+    readonly remainingAccounts: Schema.$Array<Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>>;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"deny-not-found">;
+    readonly reason: Schema.Literal<"provider-account-not-found">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"deny-not-owner">;
+    readonly reason: Schema.Literal<"provider-account-linked-to-different-user">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"deny-last-account">;
+    readonly reason: Schema.Literal<"last-linked-account">;
+    readonly account: Schema.Struct<{
+        readonly accountId: Schema.brand<Schema.String, "auth/OAuthAccountId">;
+        readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+        readonly providerAccountId: Schema.String;
+    }>;
+}>]>;
+export declare const PasskeyClientCredentialBody: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly rawId: Schema.optional<Schema.String>;
+    readonly type: Schema.Literal<"public-key">;
+    readonly response: Schema.$Record<Schema.String, Schema.Unknown>;
+    readonly authenticatorAttachment: Schema.optional<Schema.String>;
+    readonly clientExtensionResults: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyRegistrationStartBody: Schema.Struct<{
+    readonly userId: Schema.brand<Schema.String, "auth/UserId">;
+    readonly userName: Schema.String;
+    readonly userDisplayName: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyRegistrationFinishBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly userId: Schema.brand<Schema.String, "auth/UserId">;
+    readonly credential: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly rawId: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"public-key">;
+        readonly response: Schema.$Record<Schema.String, Schema.Unknown>;
+        readonly authenticatorAttachment: Schema.optional<Schema.String>;
+        readonly clientExtensionResults: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyAuthenticationStartBody: Schema.Struct<{
+    readonly userId: Schema.optional<Schema.brand<Schema.String, "auth/UserId">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyAuthenticationFinishBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly credential: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly rawId: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"public-key">;
+        readonly response: Schema.$Record<Schema.String, Schema.Unknown>;
+        readonly authenticatorAttachment: Schema.optional<Schema.String>;
+        readonly clientExtensionResults: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+    readonly userId: Schema.optional<Schema.brand<Schema.String, "auth/UserId">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyMfaStartBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyMfaVerifyBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly credential: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly rawId: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"public-key">;
+        readonly response: Schema.$Record<Schema.String, Schema.Unknown>;
+        readonly authenticatorAttachment: Schema.optional<Schema.String>;
+        readonly clientExtensionResults: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+    readonly userId: Schema.optional<Schema.brand<Schema.String, "auth/UserId">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyCredentialDescriptorHttpBody: Schema.Struct<{
+    readonly type: Schema.Literal<"public-key">;
+    readonly id: Schema.String;
+    readonly transports: Schema.optional<Schema.$Array<Schema.String>>;
+}>;
+export declare const PasskeyPublicKeyCredentialParametersHttpBody: Schema.Struct<{
+    readonly type: Schema.Literal<"public-key">;
+    readonly alg: Schema.Number;
+}>;
+export declare const PasskeyAuthenticatorSelectionHttpBody: Schema.Struct<{
+    readonly authenticatorAttachment: Schema.optional<Schema.Literals<readonly ["platform", "cross-platform"]>>;
+    readonly residentKey: Schema.optional<Schema.Literals<readonly ["discouraged", "preferred", "required"]>>;
+    readonly requireResidentKey: Schema.optional<Schema.Boolean>;
+    readonly userVerification: Schema.optional<Schema.Literals<readonly ["required", "preferred", "discouraged"]>>;
+}>;
+export declare const PasskeyRegistrationPublicKeyOptionsHttpBody: Schema.Struct<{
+    readonly challenge: Schema.String;
+    readonly rp: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+    }>;
+    readonly user: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly displayName: Schema.String;
+    }>;
+    readonly pubKeyCredParams: Schema.$Array<Schema.Struct<{
+        readonly type: Schema.Literal<"public-key">;
+        readonly alg: Schema.Number;
+    }>>;
+    readonly timeout: Schema.optional<Schema.Number>;
+    readonly excludeCredentials: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly type: Schema.Literal<"public-key">;
+        readonly id: Schema.String;
+        readonly transports: Schema.optional<Schema.$Array<Schema.String>>;
+    }>>>;
+    readonly authenticatorSelection: Schema.optional<Schema.Struct<{
+        readonly authenticatorAttachment: Schema.optional<Schema.Literals<readonly ["platform", "cross-platform"]>>;
+        readonly residentKey: Schema.optional<Schema.Literals<readonly ["discouraged", "preferred", "required"]>>;
+        readonly requireResidentKey: Schema.optional<Schema.Boolean>;
+        readonly userVerification: Schema.optional<Schema.Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>>;
+    readonly attestation: Schema.optional<Schema.Literals<readonly ["none", "indirect", "direct", "enterprise"]>>;
+}>;
+export declare const PasskeyAuthenticationPublicKeyOptionsHttpBody: Schema.Struct<{
+    readonly challenge: Schema.String;
+    readonly rpId: Schema.String;
+    readonly timeout: Schema.optional<Schema.Number>;
+    readonly allowCredentials: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly type: Schema.Literal<"public-key">;
+        readonly id: Schema.String;
+        readonly transports: Schema.optional<Schema.$Array<Schema.String>>;
+    }>>>;
+    readonly userVerification: Schema.optional<Schema.Literals<readonly ["required", "preferred", "discouraged"]>>;
+}>;
+export declare const PasskeyRegistrationStartedBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly publicKey: Schema.Struct<{
+        readonly challenge: Schema.String;
+        readonly rp: Schema.Struct<{
+            readonly id: Schema.String;
+            readonly name: Schema.String;
+        }>;
+        readonly user: Schema.Struct<{
+            readonly id: Schema.String;
+            readonly name: Schema.String;
+            readonly displayName: Schema.String;
+        }>;
+        readonly pubKeyCredParams: Schema.$Array<Schema.Struct<{
+            readonly type: Schema.Literal<"public-key">;
+            readonly alg: Schema.Number;
+        }>>;
+        readonly timeout: Schema.optional<Schema.Number>;
+        readonly excludeCredentials: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly type: Schema.Literal<"public-key">;
+            readonly id: Schema.String;
+            readonly transports: Schema.optional<Schema.$Array<Schema.String>>;
+        }>>>;
+        readonly authenticatorSelection: Schema.optional<Schema.Struct<{
+            readonly authenticatorAttachment: Schema.optional<Schema.Literals<readonly ["platform", "cross-platform"]>>;
+            readonly residentKey: Schema.optional<Schema.Literals<readonly ["discouraged", "preferred", "required"]>>;
+            readonly requireResidentKey: Schema.optional<Schema.Boolean>;
+            readonly userVerification: Schema.optional<Schema.Literals<readonly ["required", "preferred", "discouraged"]>>;
+        }>>;
+        readonly attestation: Schema.optional<Schema.Literals<readonly ["none", "indirect", "direct", "enterprise"]>>;
+    }>;
+}>;
+export declare const PasskeyAuthenticationStartedBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly publicKey: Schema.Struct<{
+        readonly challenge: Schema.String;
+        readonly rpId: Schema.String;
+        readonly timeout: Schema.optional<Schema.Number>;
+        readonly allowCredentials: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly type: Schema.Literal<"public-key">;
+            readonly id: Schema.String;
+            readonly transports: Schema.optional<Schema.$Array<Schema.String>>;
+        }>>>;
+        readonly userVerification: Schema.optional<Schema.Literals<readonly ["required", "preferred", "discouraged"]>>;
+    }>;
+}>;
+export declare const PasskeyRegisteredBody: Schema.Struct<{
+    readonly credentialId: Schema.String;
+}>;
+export declare const PasskeyCredentialHttpBody: Schema.Struct<{
+    readonly credentialId: Schema.String;
+    readonly transports: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly backedUp: Schema.optional<Schema.Boolean>;
+    readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const PasskeyCredentialsBody: Schema.Struct<{
+    readonly credentials: Schema.$Array<Schema.Struct<{
+        readonly credentialId: Schema.String;
+        readonly transports: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly backedUp: Schema.optional<Schema.Boolean>;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+}>;
+export declare const PasskeyCredentialRevokeBody: Schema.Struct<{
+    readonly credentialId: Schema.String;
+    readonly reason: Schema.optional<Schema.String>;
+}>;
+export declare const TotpAlgorithmHttpBody: Schema.Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+export declare const TotpEnrollmentStartBody: Schema.Struct<{
+    readonly accountName: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const TotpEnrollmentConfirmBody: Schema.Struct<{
+    readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly code: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const TotpVerifyBody: Schema.Struct<{
+    readonly code: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const TotpFactorRevokeBody: Schema.Struct<{
+    readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly reason: Schema.optional<Schema.String>;
+}>;
+export declare const TotpFactorHttpBody: Schema.Struct<{
+    readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly algorithm: Schema.Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+    readonly digits: Schema.Number;
+    readonly period: Schema.Number;
+    readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly confirmedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const TotpEnrollmentStartedBody: Schema.Struct<{
+    readonly factor: Schema.Struct<{
+        readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+        readonly algorithm: Schema.Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: Schema.Number;
+        readonly period: Schema.Number;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly confirmedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+    readonly secret: Schema.String;
+    readonly uri: Schema.String;
+}>;
+export declare const TotpVerifyResultBody: Schema.Struct<{
+    readonly valid: Schema.Boolean;
+    readonly factor: Schema.optional<Schema.Struct<{
+        readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+        readonly algorithm: Schema.Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: Schema.Number;
+        readonly period: Schema.Number;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly confirmedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+    readonly delta: Schema.optional<Schema.Number>;
+}>;
+export declare const TotpFactorsBody: Schema.Struct<{
+    readonly factors: Schema.$Array<Schema.Struct<{
+        readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+        readonly algorithm: Schema.Literals<readonly ["SHA1", "SHA256", "SHA512"]>;
+        readonly digits: Schema.Number;
+        readonly period: Schema.Number;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly confirmedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+}>;
+export declare const RecoveryCodeGenerateBody: Schema.Struct<{
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const RecoveryCodeVerifyBody: Schema.Struct<{
+    readonly code: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const RecoveryCodeRevokeBody: Schema.Struct<{
+    readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly reason: Schema.optional<Schema.String>;
+}>;
+export declare const RecoveryCodeHttpBody: Schema.Struct<{
+    readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly usedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const RecoveryCodesGeneratedBody: Schema.Struct<{
+    readonly codes: Schema.$Array<Schema.String>;
+    readonly records: Schema.$Array<Schema.Struct<{
+        readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly usedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+}>;
+export declare const RecoveryCodeVerifyResultBody: Schema.Struct<{
+    readonly valid: Schema.Boolean;
+    readonly code: Schema.optional<Schema.Struct<{
+        readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly usedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+}>;
+export declare const RecoveryCodesBody: Schema.Struct<{
+    readonly codes: Schema.$Array<Schema.Struct<{
+        readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly usedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+}>;
+export declare const ApiKeyCreateBody: Schema.Struct<{
+    readonly scopes: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const ApiKeyRevokeBody: Schema.Struct<{
+    readonly keyId: Schema.String;
+    readonly reason: Schema.optional<Schema.String>;
+}>;
+export declare const ApiKeyHttpBody: Schema.Struct<{
+    readonly keyId: Schema.String;
+    readonly prefix: Schema.String;
+    readonly scopes: Schema.$Array<Schema.String>;
+    readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const ApiKeyCreatedBody: Schema.Struct<{
+    readonly secret: Schema.String;
+    readonly key: Schema.Struct<{
+        readonly keyId: Schema.String;
+        readonly prefix: Schema.String;
+        readonly scopes: Schema.$Array<Schema.String>;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+}>;
+export declare const ApiKeysBody: Schema.Struct<{
+    readonly keys: Schema.$Array<Schema.Struct<{
+        readonly keyId: Schema.String;
+        readonly prefix: Schema.String;
+        readonly scopes: Schema.$Array<Schema.String>;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+}>;
+export declare const RefreshTokenRefreshBody: Schema.Struct<{
+    readonly refreshToken: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const RefreshTokenHttpBody: Schema.Struct<{
+    readonly tokenId: Schema.String;
+    readonly familyId: Schema.String;
+    readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly rotatedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly replacedById: Schema.optional<Schema.String>;
+    readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly reuseDetectedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const RefreshTokenRefreshedBody: Schema.Struct<{
+    readonly accessToken: Schema.String;
+    readonly accessTokenExpiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly refreshToken: Schema.String;
+    readonly refreshTokenRecord: Schema.Struct<{
+        readonly tokenId: Schema.String;
+        readonly familyId: Schema.String;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly lastUsedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly rotatedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly replacedById: Schema.optional<Schema.String>;
+        readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly reuseDetectedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+}>;
+export declare const JwtIntrospectBody: Schema.Struct<{
+    readonly token: Schema.String;
+}>;
+export declare const JwtRevokeBody: Schema.Struct<{
+    readonly jwtId: Schema.String;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly reason: Schema.optional<Schema.String>;
+}>;
+export declare const JwtHeaderHttpBody: Schema.Struct<{
+    readonly typ: Schema.Literal<"JWT">;
+    readonly alg: Schema.Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+    readonly kid: Schema.String;
+}>;
+export declare const JwtKeyHttpBody: Schema.Struct<{
+    readonly keyId: Schema.String;
+    readonly alg: Schema.Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+    readonly status: Schema.Literals<readonly ["active", "retired", "disabled"]>;
+    readonly createdAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const JwtIntrospectionInactiveReasonBody: Schema.Literals<readonly ["malformed", "unsupported_alg", "unknown_key", "invalid_signature", "expired", "not_yet_valid", "issuer_mismatch", "audience_mismatch", "revoked"]>;
+export declare const JwtIntrospectionActiveBody: Schema.Struct<{
+    readonly active: Schema.Literal<true>;
+    readonly header: Schema.Struct<{
+        readonly typ: Schema.Literal<"JWT">;
+        readonly alg: Schema.Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+        readonly kid: Schema.String;
+    }>;
+    readonly claims: Schema.$Record<Schema.String, Schema.Unknown>;
+    readonly key: Schema.Struct<{
+        readonly keyId: Schema.String;
+        readonly alg: Schema.Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+        readonly status: Schema.Literals<readonly ["active", "retired", "disabled"]>;
+        readonly createdAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+    readonly jwtId: Schema.optional<Schema.String>;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revoked: Schema.Literal<false>;
+}>;
+export declare const JwtIntrospectionInactiveBody: Schema.Struct<{
+    readonly active: Schema.Literal<false>;
+    readonly reason: Schema.Literals<readonly ["malformed", "unsupported_alg", "unknown_key", "invalid_signature", "expired", "not_yet_valid", "issuer_mismatch", "audience_mismatch", "revoked"]>;
+    readonly jwtId: Schema.optional<Schema.String>;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedReason: Schema.optional<Schema.String>;
+}>;
+export declare const JwtIntrospectionBody: Schema.Union<readonly [Schema.Struct<{
+    readonly active: Schema.Literal<true>;
+    readonly header: Schema.Struct<{
+        readonly typ: Schema.Literal<"JWT">;
+        readonly alg: Schema.Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+        readonly kid: Schema.String;
+    }>;
+    readonly claims: Schema.$Record<Schema.String, Schema.Unknown>;
+    readonly key: Schema.Struct<{
+        readonly keyId: Schema.String;
+        readonly alg: Schema.Literals<readonly ["HS256", "RS256", "ES256", "EdDSA"]>;
+        readonly status: Schema.Literals<readonly ["active", "retired", "disabled"]>;
+        readonly createdAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+    readonly jwtId: Schema.optional<Schema.String>;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revoked: Schema.Literal<false>;
+}>, Schema.Struct<{
+    readonly active: Schema.Literal<false>;
+    readonly reason: Schema.Literals<readonly ["malformed", "unsupported_alg", "unknown_key", "invalid_signature", "expired", "not_yet_valid", "issuer_mismatch", "audience_mismatch", "revoked"]>;
+    readonly jwtId: Schema.optional<Schema.String>;
+    readonly expiresAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly revokedReason: Schema.optional<Schema.String>;
+}>]>;
+export declare const MfaOptionsBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+}>;
+export declare const MfaFactorOptionBody: Schema.Struct<{
+    readonly type: Schema.Literals<readonly ["totp", "backup-code", "passkey"]>;
+}>;
+export declare const MfaOptionsResultBody: Schema.Struct<{
+    readonly factors: Schema.$Array<Schema.Struct<{
+        readonly type: Schema.Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>;
+export declare const TotpMfaVerifyBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly userId: Schema.brand<Schema.String, "auth/UserId">;
+    readonly code: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const TotpMfaVerifyForFlowBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly code: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const RecoveryCodeMfaVerifyBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly userId: Schema.brand<Schema.String, "auth/UserId">;
+    readonly code: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const RecoveryCodeMfaVerifyForFlowBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly code: Schema.String;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const LoginApprovalApproveBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly secret: Schema.optional<Schema.String>;
+    readonly rememberDevice: Schema.optional<Schema.Boolean>;
+}>;
+export declare const LoginApprovalReviewStatusBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+}>;
+export declare const LoginApprovalFinalizeBody: Schema.Struct<{
+    readonly flowId: Schema.brand<Schema.String, "auth/AuthFlowId">;
+    readonly approvalChallengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly rememberDevice: Schema.optional<Schema.Boolean>;
+}>;
 export declare const SessionClaimsHttpBody: Schema.Struct<{
     readonly emailVerified: Schema.optional<Schema.Boolean>;
     readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
@@ -28,6 +726,7 @@ export declare const AuthenticatedHttpBody: Schema.Struct<{
     readonly expiresAt: Schema.Number;
     readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
     readonly amr: Schema.$Array<Schema.String>;
+    readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
     readonly claims: Schema.optional<Schema.Struct<{
         readonly emailVerified: Schema.optional<Schema.Boolean>;
         readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
@@ -41,11 +740,69 @@ export declare const CurrentSessionHttpBody: Schema.Struct<{
     readonly expiresAt: Schema.Number;
     readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
     readonly amr: Schema.$Array<Schema.String>;
+    readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
     readonly claims: Schema.optional<Schema.Struct<{
         readonly emailVerified: Schema.optional<Schema.Boolean>;
         readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
     }>>;
 }>;
+export declare const ActiveSessionHttpBody: Schema.Struct<{
+    readonly sessionId: Schema.brand<Schema.String, "auth/SessionId">;
+    readonly userId: Schema.brand<Schema.String, "auth/UserId">;
+    readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly authTime: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly lastSeenAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: Schema.$Array<Schema.String>;
+    readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly current: Schema.Boolean;
+    readonly claims: Schema.optional<Schema.Struct<{
+        readonly emailVerified: Schema.optional<Schema.Boolean>;
+        readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
+    }>>;
+    readonly ip: Schema.optional<Schema.String>;
+    readonly userAgent: Schema.optional<Schema.String>;
+    readonly country: Schema.optional<Schema.String>;
+    readonly region: Schema.optional<Schema.String>;
+    readonly city: Schema.optional<Schema.String>;
+    readonly latitude: Schema.optional<Schema.Number>;
+    readonly longitude: Schema.optional<Schema.Number>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+}>;
+export declare const ActiveSessionsHttpBody: Schema.Struct<{
+    readonly sessions: Schema.$Array<Schema.Struct<{
+        readonly sessionId: Schema.brand<Schema.String, "auth/SessionId">;
+        readonly userId: Schema.brand<Schema.String, "auth/UserId">;
+        readonly createdAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly authTime: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly lastSeenAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+        readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
+        readonly amr: Schema.$Array<Schema.String>;
+        readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly current: Schema.Boolean;
+        readonly claims: Schema.optional<Schema.Struct<{
+            readonly emailVerified: Schema.optional<Schema.Boolean>;
+            readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
+        }>>;
+        readonly ip: Schema.optional<Schema.String>;
+        readonly userAgent: Schema.optional<Schema.String>;
+        readonly country: Schema.optional<Schema.String>;
+        readonly region: Schema.optional<Schema.String>;
+        readonly city: Schema.optional<Schema.String>;
+        readonly latitude: Schema.optional<Schema.Number>;
+        readonly longitude: Schema.optional<Schema.Number>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>;
+}>;
+export declare const SessionRevokeBody: Schema.Struct<{
+    readonly sessionId: Schema.brand<Schema.String, "auth/SessionId">;
+}>;
+export declare const LoginNotificationReportBody: Schema.Struct<{
+    readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+    readonly secret: Schema.String;
+}>;
 export declare const RequiresMfaHttpBody: Schema.Struct<{
     readonly type: Schema.Literal<"requires_mfa">;
     readonly flowId: Schema.String;
@@ -57,6 +814,19 @@ export declare const RequiresEmailVerificationHttpBody: Schema.Struct<{
     readonly type: Schema.Literal<"requires_email_verification">;
     readonly flowId: Schema.String;
 }>;
+export declare const RequiresLoginApprovalHttpBody: Schema.Struct<{
+    readonly type: Schema.Literal<"requires_login_approval">;
+    readonly flowId: Schema.String;
+    readonly approvalChallengeId: Schema.String;
+    readonly channel: Schema.String;
+    readonly sessionBinding: Schema.Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: Schema.Boolean;
+    readonly reason: Schema.String;
+}>;
+export declare const LoginApprovalReviewStatusHttpBody: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["pending", "approved", "denied", "expired"]>;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+}>;
 export declare const RequiresPasskeyEnrollmentHttpBody: Schema.Struct<{
     readonly type: Schema.Literal<"requires_passkey_enrollment">;
     readonly flowId: Schema.String;
@@ -66,6 +836,38 @@ export declare const PasswordAuthSuccess: Schema.Union<readonly [Schema.Struct<{
     readonly expiresAt: Schema.Number;
     readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
     readonly amr: Schema.$Array<Schema.String>;
+    readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly claims: Schema.optional<Schema.Struct<{
+        readonly emailVerified: Schema.optional<Schema.Boolean>;
+        readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
+    }>>;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_mfa">;
+    readonly flowId: Schema.String;
+    readonly factors: Schema.$Array<Schema.Struct<{
+        readonly type: Schema.String;
+    }>>;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_email_verification">;
+    readonly flowId: Schema.String;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_login_approval">;
+    readonly flowId: Schema.String;
+    readonly approvalChallengeId: Schema.String;
+    readonly channel: Schema.String;
+    readonly sessionBinding: Schema.Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: Schema.Boolean;
+    readonly reason: Schema.String;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_passkey_enrollment">;
+    readonly flowId: Schema.String;
+}>]>;
+export declare const EmailOtpAuthSuccess: Schema.Union<readonly [Schema.Struct<{
+    readonly type: Schema.Literal<"authenticated">;
+    readonly expiresAt: Schema.Number;
+    readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: Schema.$Array<Schema.String>;
+    readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
     readonly claims: Schema.optional<Schema.Struct<{
         readonly emailVerified: Schema.optional<Schema.Boolean>;
         readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
@@ -79,6 +881,45 @@ export declare const PasswordAuthSuccess: Schema.Union<readonly [Schema.Struct<{
 }>, Schema.Struct<{
     readonly type: Schema.Literal<"requires_email_verification">;
     readonly flowId: Schema.String;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_login_approval">;
+    readonly flowId: Schema.String;
+    readonly approvalChallengeId: Schema.String;
+    readonly channel: Schema.String;
+    readonly sessionBinding: Schema.Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: Schema.Boolean;
+    readonly reason: Schema.String;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_passkey_enrollment">;
+    readonly flowId: Schema.String;
+}>]>;
+export declare const MagicLinkAuthSuccess: Schema.Union<readonly [Schema.Struct<{
+    readonly type: Schema.Literal<"authenticated">;
+    readonly expiresAt: Schema.Number;
+    readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: Schema.$Array<Schema.String>;
+    readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+    readonly claims: Schema.optional<Schema.Struct<{
+        readonly emailVerified: Schema.optional<Schema.Boolean>;
+        readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
+    }>>;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_mfa">;
+    readonly flowId: Schema.String;
+    readonly factors: Schema.$Array<Schema.Struct<{
+        readonly type: Schema.String;
+    }>>;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_email_verification">;
+    readonly flowId: Schema.String;
+}>, Schema.Struct<{
+    readonly type: Schema.Literal<"requires_login_approval">;
+    readonly flowId: Schema.String;
+    readonly approvalChallengeId: Schema.String;
+    readonly channel: Schema.String;
+    readonly sessionBinding: Schema.Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: Schema.Boolean;
+    readonly reason: Schema.String;
 }>, Schema.Struct<{
     readonly type: Schema.Literal<"requires_passkey_enrollment">;
     readonly flowId: Schema.String;