@mudrichenkoevgeny/shared-foundation 0.0.46

package/index.mjs

@@ -0,0 +1,865 @@
+        import { z } from 'zod';
+
+        export function toPermissionCodeOrNull(value) {
+  if (!value || typeof value !== 'string' || value.trim() === '') {
+    return null;
+  }
+  return value;
+}
+
+export function toPermissionCodeOrThrow(value) {
+  const result = toPermissionCodeOrNull(value);
+  if (!result) {
+    throw new Error('PermissionCode value must not be blank.');
+  }
+  return result;
+}
+
+export const permissionCodeSchema = z.string().transform((val, ctx) => {
+  const result = toPermissionCodeOrNull(val);
+  if (!result) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: 'Invalid PermissionCode' });
+    return z.NEVER;
+  }
+  return result;
+});
+
+export function toUserIdOrNull(value) {
+  if (!value || typeof value !== 'string' || value.trim() === '') {
+    return null;
+  }
+  return value;
+}
+
+export function toUserIdOrThrow(value) {
+  const result = toUserIdOrNull(value);
+  if (!result) {
+    throw new Error('UserId value must not be blank.');
+  }
+  return result;
+}
+
+export const userIdSchema = z.string().transform((val, ctx) => {
+  const result = toUserIdOrNull(val);
+  if (!result) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: 'Invalid UserId' });
+    return z.NEVER;
+  }
+  return result;
+});
+
+export function toUserIdentifierIdOrNull(value) {
+  if (!value || typeof value !== 'string' || value.trim() === '') {
+    return null;
+  }
+  return value;
+}
+
+export function toUserIdentifierIdOrThrow(value) {
+  const result = toUserIdentifierIdOrNull(value);
+  if (!result) {
+    throw new Error('UserIdentifierId value must not be blank.');
+  }
+  return result;
+}
+
+export const userIdentifierIdSchema = z.string().transform((val, ctx) => {
+  const result = toUserIdentifierIdOrNull(val);
+  if (!result) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: 'Invalid UserIdentifierId' });
+    return z.NEVER;
+  }
+  return result;
+});
+
+export function toUserSessionIdOrNull(value) {
+  if (!value || typeof value !== 'string' || value.trim() === '') {
+    return null;
+  }
+  return value;
+}
+
+export function toUserSessionIdOrThrow(value) {
+  const result = toUserSessionIdOrNull(value);
+  if (!result) {
+    throw new Error('UserSessionId value must not be blank.');
+  }
+  return result;
+}
+
+export const userSessionIdSchema = z.string().transform((val, ctx) => {
+  const result = toUserSessionIdOrNull(val);
+  if (!result) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: 'Invalid UserSessionId' });
+    return z.NEVER;
+  }
+  return result;
+});
+
+export function toAuditEventIdOrNull(value) {
+  if (!value || typeof value !== 'string' || value.trim() === '') {
+    return null;
+  }
+  return value;
+}
+
+export function toAuditEventIdOrThrow(value) {
+  const result = toAuditEventIdOrNull(value);
+  if (!result) {
+    throw new Error('AuditEventId value must not be blank.');
+  }
+  return result;
+}
+
+export const auditEventIdSchema = z.string().transform((val, ctx) => {
+  const result = toAuditEventIdOrNull(val);
+  if (!result) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: 'Invalid AuditEventId' });
+    return z.NEVER;
+  }
+  return result;
+});
+
+export function toClientDeviceIdOrNull(value) {
+  if (!value || typeof value !== 'string' || value.trim() === '') {
+    return null;
+  }
+  return value;
+}
+
+export function toClientDeviceIdOrThrow(value) {
+  const result = toClientDeviceIdOrNull(value);
+  if (!result) {
+    throw new Error('ClientDeviceId value must not be blank.');
+  }
+  return result;
+}
+
+export const clientDeviceIdSchema = z.string().transform((val, ctx) => {
+  const result = toClientDeviceIdOrNull(val);
+  if (!result) {
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: 'Invalid ClientDeviceId' });
+    return z.NEVER;
+  }
+  return result;
+});
+
+        export const ManagementRoutes = {
+  BASE_MANAGEMENT_ROUTE: "/management"
+};
+
+      export const ManagementAuditRoutes = {
+        BASE_MANAGEMENT_AUDIT_EVENTS_ROUTE: "/management/audit/events",
+GET_AUDIT_EVENTS: "/management/audit/events",
+GET_AUDIT_EVENT: "/management/audit/events/{event_id}"
+      };
+
+      export const ManagementSecuritySettingsRoutes = {
+        BASE_MANAGEMENT_SECURITY_SETTINGS_ROUTE: "/management/security/settings",
+GET_MANAGEMENT_SECURITY_SETTINGS: "/management/security/settings",
+UPDATE_MANAGEMENT_SECURITY_SETTINGS: "/management/security/settings",
+RESET_MANAGEMENT_SECURITY_SETTINGS: "/management/security/settings/reset"
+      };
+
+export const OpenSecuritySettingsRoutes = {
+  GET_OPEN_SECURITY_SETTINGS: "/security/settings"
+};
+
+      export const ManagementGlobalSettingsRoutes = {
+        BASE_MANAGEMENT_GLOBAL_SETTINGS_ROUTE: "/management/global-settings",
+GET_MANAGEMENT_GLOBAL_SETTINGS: "/management/global-settings",
+UPDATE_MANAGEMENT_GLOBAL_SETTINGS: "/management/global-settings",
+RESET_MANAGEMENT_GLOBAL_SETTINGS: "/management/global-settings/reset"
+      };
+
+export const OpenGlobalSettingsRoutes = {
+  GET_OPEN_GLOBAL_SETTINGS: "/global-settings"
+};
+
+      export const OpenLoginRoutes = {
+        BASE_LOGIN_ROUTE: "/auth/login",
+BASE_LOGIN_PHONE_ROUTE: "/auth/login/phone",
+LOGIN_BY_EMAIL: "/auth/login/email",
+LOGIN_BY_PHONE: "/auth/login/phone",
+LOGIN_BY_EXTERNAL_AUTH_PROVIDER: "/auth/login/external-auth-provider",
+LOGIN_BY_TOTP: "/auth/login/totp",
+LOGIN_BY_TOTP_RECOVERY_CODE: "/auth/login/totp-recovery-code",
+SEND_LOGIN_CONFIRMATION_TO_PHONE: "/auth/login/phone/confirmation/send-to-phone"
+      };
+
+      export const SelfManagementLoginRoutes = {
+        BASE_MANAGEMENT_LOGIN_ROUTE: "/management/auth/login",
+LOGIN_BY_EMAIL: "/management/auth/login/email",
+LOGIN_BY_TOTP: "/management/auth/login/totp",
+LOGIN_BY_TOTP_RECOVERY_CODE: "/management/auth/login/totp-recovery-code"
+      };
+
+      export const OpenRegisterRoutes = {
+        REGISTER_BY_EMAIL_ROUTE: "/auth/register/email",
+REGISTER_BY_EMAIL: "/auth/register/email",
+SEND_REGISTER_CONFIRMATION_TO_EMAIL: "/auth/register/email/confirmation/send-to-email"
+      };
+
+      export const OpenResetPasswordRoutes = {
+        BASE_RESET_PASSWORD_ROUTE: "/auth/reset-password",
+RESET_EMAIL_PASSWORD: "/auth/reset-password",
+SEND_RESET_EMAIL_PASSWORD_CONFIRMATION: "/auth/reset-password/send-confirmation"
+      };
+
+      export const SelfManagementResetPasswordRoutes = {
+        BASE_MANAGEMENT_RESET_PASSWORD_ROUTE: "/management/auth/reset-password",
+RESET_PASSWORD: "/management/auth/reset-password",
+SEND_RESET_PASSWORD_CONFIRMATION: "/management/auth/reset-password/send-confirmation"
+      };
+
+      export const OpenUnlockRoutes = {
+        BASE_OPEN_UNLOCK_ROUTE: "/auth/unlock",
+UNLOCK_BY_EMAIL_ROUTE: "/auth/unlock/email",
+UNLOCK_BY_PHONE_ROUTE: "/auth/unlock/phone",
+SEND_UNLOCK_EMAIL_CONFIRMATION: "/auth/unlock/email/send-confirmation",
+UNLOCK_BY_EMAIL: "/auth/unlock/email",
+SEND_UNLOCK_PHONE_CONFIRMATION: "/auth/unlock/phone/send-confirmation",
+UNLOCK_BY_PHONE: "/auth/unlock/phone",
+UNLOCK_BY_EXTERNAL_PROVIDER: "/auth/unlock/external-provider"
+      };
+
+      export const SelfManagementUnlockRoutes = {
+        BASE_SELF_MANAGEMENT_UNLOCK_ROUTE: "/management/auth/unlock",
+UNLOCK_BY_EMAIL_ROUTE: "/management/auth/unlock/email",
+UNLOCK_BY_PHONE_ROUTE: "/management/auth/unlock/phone",
+SEND_UNLOCK_EMAIL_CONFIRMATION: "/management/auth/unlock/email/send-confirmation",
+UNLOCK_BY_EMAIL: "/management/auth/unlock/email",
+SEND_UNLOCK_PHONE_CONFIRMATION: "/management/auth/unlock/phone/send-confirmation",
+UNLOCK_BY_PHONE: "/management/auth/unlock/phone",
+UNLOCK_BY_EXTERNAL_PROVIDER: "/management/auth/unlock/external-provider"
+      };
+
+      export const OpenUserSecurityRoutes = {
+        BASE_TOTP_ROUTE: "/user/security/totp",
+BASE_RECOVERY_CODES_ROUTE: "/user/security/totp/recovery-codes",
+SETUP_TOTP: "/user/security/totp/setup",
+ENABLE_TOTP: "/user/security/totp/enable",
+DISABLE_TOTP: "/user/security/totp/disable",
+GET_RECOVERY_CODES: "/user/security/totp/recovery-codes",
+REGENERATE_RECOVERY_CODES: "/user/security/totp/recovery-codes/regenerate"
+      };
+
+      export const SelfManagementUserSecurityRoutes = {
+        BASE_SELF_TOTP_ROUTE: "/management/self/user/security/totp",
+BASE_SELF_RECOVERY_CODES_ROUTE: "/management/self/user/security/totp/recovery-codes",
+SETUP_TOTP: "/management/self/user/security/totp/setup",
+ENABLE_TOTP: "/management/self/user/security/totp/enable",
+DISABLE_TOTP: "/management/self/user/security/totp/disable",
+GET_RECOVERY_CODES: "/management/self/user/security/totp/recovery-codes",
+REGENERATE_RECOVERY_CODES: "/management/self/user/security/totp/recovery-codes/regenerate"
+      };
+
+export const ManagementUserSecurityRoutes = {
+  DISABLE_TOTP: "/management/users/{user_id}/security/totp/disable"
+};
+
+      export const OpenIdentifierRoutes = {
+        BASE_IDENTIFIER_ROUTE: "/identifier",
+ADD_EMAIL_IDENTIFIER_ROUTE: "/identifier/email",
+BASE_IDENTIFIER_CONFIRMATION_ROUTE: "/identifier/confirmation",
+GET_IDENTIFIER: "/identifier/{user_identifier_id}",
+GET_IDENTIFIERS: "/identifier",
+DELETE_IDENTIFIER: "/identifier/{user_identifier_id}",
+ADD_IDENTIFIER_EMAIL: "/identifier/email",
+ADD_IDENTIFIER_PHONE: "/identifier/phone",
+ADD_IDENTIFIER_EXTERNAL_AUTH_PROVIDER: "/identifier/external-auth-provider",
+SEND_ADD_EMAIL_IDENTIFIER_CONFIRMATION: "/identifier/confirmation/send-to-email",
+SEND_ADD_PHONE_IDENTIFIER_CONFIRMATION: "/identifier/confirmation/send-to-phone",
+IDENTIFIER_EMAIL_CHANGE_PASSWORD: "/identifier/email/password"
+      };
+
+      export const SelfManagementIdentifierRoutes = {
+        BASE_SELF_IDENTIFIER_ROUTE: "/management/self/identifier",
+GET_IDENTIFIER: "/management/self/identifier/{user_identifier_id}",
+GET_IDENTIFIERS: "/management/self/identifier",
+IDENTIFIER_EMAIL_CHANGE_PASSWORD: "/management/self/identifier/email/password"
+      };
+
+      export const ManagementIdentifierRoutes = {
+        BASE_MANAGEMENT_IDENTIFIERS_ROUTE: "/management/users/identifiers",
+GET_IDENTIFIERS: "/management/users/identifiers",
+GET_IDENTIFIER: "/management/users/identifiers/{user_identifier_id}",
+DELETE_IDENTIFIER: "/management/users/identifiers/{user_identifier_id}",
+DELETE_IDENTIFIER_PASSWORD: "/management/users/identifiers/{user_identifier_id}/password"
+      };
+
+      export const OpenSessionRoutes = {
+        BASE_SESSION_ROUTE: "/session",
+LOGOUT: "/session/logout",
+GET_SESSIONS: "/session",
+GET_SESSION: "/session/{session_id}",
+DELETE_SESSION: "/session/{session_id}",
+DELETE_ALL_OTHER_SESSIONS: "/session/delete-others",
+REAUTHENTICATE_SESSION: "/session/reauthenticate"
+      };
+
+      export const SelfManagementSessionRoutes = {
+        BASE_SELF_SESSION_ROUTE: "/management/self/session",
+LOGOUT: "/management/self/session/logout",
+GET_SESSIONS: "/management/self/session",
+GET_SESSION: "/management/self/session/{session_id}",
+DELETE_SESSION: "/management/self/session/{session_id}",
+DELETE_ALL_OTHER_SESSIONS: "/management/self/session/delete-others",
+REAUTHENTICATE_SESSION: "/management/self/session/reauthenticate"
+      };
+
+      export const ManagementSessionRoutes = {
+        BASE_MANAGEMENT_SESSIONS_ROUTE: "/management/users/sessions",
+GET_SESSIONS: "/management/users/sessions",
+GET_SESSION: "/management/users/sessions/{session_id}",
+DELETE_SESSION: "/management/users/sessions/{session_id}",
+DELETE_ALL_USER_SESSIONS: "/management/users/sessions/delete-all-for-user/{user_id}"
+      };
+
+      export const OpenUserRoutes = {
+        BASE_USER_ROUTE: "/user",
+GET_USER: "/user",
+SCHEDULE_DELETION: "/user/schedule-deletion",
+RESTORE_USER: "/user/restore"
+      };
+
+export const SelfManagementUserRoutes = {
+  GET_USER: "/management/self/user"
+};
+
+      export const ManagementUserRoutes = {
+        CREATE_USER: "/management/users",
+GET_USERS: "/management/users",
+GET_USER: "/management/users/{user_id}",
+UPDATE_USER: "/management/users/{user_id}",
+DELETE_USER: "/management/users/{user_id}"
+      };
+
+      export const ManagementAuthSettingsRoutes = {
+        BASE_MANAGEMENT_AUTH_SETTINGS_ROUTE: "/management/auth/settings",
+GET_MANAGEMENT_AUTH_SETTINGS: "/management/auth/settings",
+UPDATE_MANAGEMENT_AUTH_SETTINGS: "/management/auth/settings",
+RESET_MANAGEMENT_AUTH_SETTINGS: "/management/auth/settings/reset"
+      };
+
+              export const CommonErrorCodes = {
+        UNKNOWN: "UNKNOWN",
+INTERNAL: "INTERNAL",
+NOT_FOUND: "NOT_FOUND",
+SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE",
+TOO_MANY_REQUESTS: "TOO_MANY_REQUESTS",
+MISSING_REQUIRED_PARAMETER: "MISSING_REQUIRED_PARAMETER",
+INVALID_PARAMETER_VALUE: "INVALID_PARAMETER_VALUE",
+MISSING_REQUIRED_FIELD: "MISSING_REQUIRED_FIELD",
+BLANK_STRING_FIELD: "BLANK_STRING_FIELD",
+EMPTY_COLLECTION_FIELD: "EMPTY_COLLECTION_FIELD",
+INVALID_FIELD_VALUE: "INVALID_FIELD_VALUE",
+BAD_REQUEST: "BAD_REQUEST",
+INVALID_JSON_BODY: "INVALID_JSON_BODY"
+      };
+
+      export const CommonErrorArgs = {
+        MESSAGE: "message",
+PARAMETER_NAME: "parameterName",
+FIELD_NAME: "fieldName",
+RETRY_AFTER_SECONDS: "retryAfterSeconds",
+RATE_LIMIT_ACTION_CODE: "rateLimitActionCode",
+LIMIT: "limit",
+IDENTIFIER: "identifier",
+RESOURCE: "resource"
+      };
+
+      export const SecurityErrorCodes = {
+        PASSWORD_TOO_WEAK: "PASSWORD_TOO_WEAK",
+OTP_RETRY_TOO_SOON: "OTP_RETRY_TOO_SOON",
+TOTP_ALREADY_ENABLED: "TOTP_ALREADY_ENABLED",
+TOTP_NOT_ENABLED: "TOTP_NOT_ENABLED",
+MFA_CONFIRMATION_REQUIRED: "MFA_CONFIRMATION_REQUIRED",
+MFA_TOKEN_EXPIRED: "MFA_TOKEN_EXPIRED",
+RECOVERY_CODE_ALREADY_USED: "RECOVERY_CODE_ALREADY_USED",
+INVALID_TOTP_CODE: "INVALID_TOTP_CODE",
+INVALID_MFA_TOKEN: "INVALID_MFA_TOKEN",
+IP_NOT_ALLOWED: "IP_NOT_ALLOWED"
+      };
+
+      export const SecurityErrorArgs = {
+        PASSWORD_MIN_LENGTH: "passwordMinLength",
+PASSWORD_FAIL_TOO_SHORT: "passwordTooShort",
+PASSWORD_FAIL_NO_LETTER: "passwordNoLetter",
+PASSWORD_FAIL_NO_UPPERCASE: "passwordNoUpperCase",
+PASSWORD_FAIL_NO_LOWERCASE: "passwordNoLowerCase",
+PASSWORD_FAIL_NO_DIGIT: "passwordNoDigit",
+PASSWORD_FAIL_NO_SPECIAL_CHAR: "passwordNoSpecialChar",
+PASSWORD_FAIL_TOO_COMMON: "passwordTooCommon",
+MFA_TOKEN: "mfaToken"
+      };
+
+      export const UserErrorCodes = {
+        INVALID_ACCESS_TOKEN: "INVALID_ACCESS_TOKEN",
+ACCESS_TOKEN_EXPIRED: "ACCESS_TOKEN_EXPIRED",
+INVALID_REFRESH_TOKEN: "INVALID_REFRESH_TOKEN",
+INVALID_SESSION: "INVALID_SESSION",
+USER_ROLE_NOT_ALLOWED: "USER_ROLE_NOT_ALLOWED",
+USER_MISSING_PERMISSIONS: "USER_MISSING_PERMISSIONS",
+USER_INSUFFICIENT_AUTHORITY_LEVEL: "USER_INSUFFICIENT_AUTHORITY_LEVEL",
+USER_ILLEGAL_ACCOUNT_STATUS: "USER_ILLEGAL_ACCOUNT_STATUS",
+USER_BANNED: "USER_BANNED",
+USER_LOCKED: "USER_LOCKED",
+USER_READ_ONLY: "USER_READ_ONLY",
+USER_SECURITY_HOLD: "USER_SECURITY_HOLD",
+USER_PENDING_DELETION: "USER_PENDING_DELETION",
+USER_FORBIDDEN: "USER_FORBIDDEN",
+USER_NOT_FOUND: "USER_NOT_FOUND",
+INVALID_CREDENTIALS: "INVALID_CREDENTIALS",
+CAN_NOT_DELETE_USER_IDENTIFIER: "CAN_NOT_DELETE_USER_IDENTIFIER",
+CAN_NOT_CREATE_USER_IDENTIFIER: "CAN_NOT_CREATE_USER_IDENTIFIER",
+USER_IDENTIFIER_LIMIT_REACHED: "USER_IDENTIFIER_LIMIT_REACHED",
+TOTAL_USER_IDENTIFIERS_LIMIT_REACHED: "TOTAL_USER_IDENTIFIERS_LIMIT_REACHED",
+WRONG_PASSWORD: "WRONG_PASSWORD",
+WRONG_CONFIRMATION_CODE: "WRONG_CONFIRMATION_CODE",
+EXTERNAL_IDENTIFIER_LINKAGE_FAILED: "EXTERNAL_IDENTIFIER_LINKAGE_FAILED",
+REGISTRATION_DISABLED: "REGISTRATION_DISABLED",
+SELF_SERVICE_UNLOCK_DISABLED: "SELF_SERVICE_UNLOCK_DISABLED",
+EMAIL_NOT_ALLOWED: "EMAIL_NOT_ALLOWED",
+PASSWORD_SETUP_REQUIRED: "PASSWORD_SETUP_REQUIRED",
+USER_IDENTIFIER_PASSWORD_NOT_SUPPORTED: "USER_IDENTIFIER_PASSWORD_NOT_SUPPORTED",
+USER_IDENTIFIER_PASSWORD_NOT_SET: "USER_IDENTIFIER_PASSWORD_NOT_SET"
+      };
+
+      export const UserErrorArgs = {
+        USER_ID: "userId",
+MAX_NUMBER_OF_IDENTIFIERS: "maxNumberOfIdentifiers",
+USER_AUTH_PROVIDER: "userAuthProvider",
+ACCOUNT_LOCKOUT_TYPE: "accountLockoutType",
+TEMPORARY_LOCKOUT_UNTIL: "temporaryLockoutUntil"
+      };
+
+        export const AuditPermissionCode = {
+
+};
+
+export const SecurityPermissionCode = {
+
+};
+
+export const SettingsPermissionCode = {
+
+};
+
+export const AuthSettingsPermissionCode = {
+
+};
+
+export const IdentifierPermissionCode = {
+
+};
+
+export const SessionPermissionCode = {
+
+};
+
+export const UserPermissionCode = {
+
+};
+
+        export const clientTypeSchema = z.enum(["web", "android", "ios", "desktop"]);
+
+export const sortOrderSchema = z.enum(["asc", "desc"]);
+
+export const accountLockoutTypeSchema = z.enum(["none", "indefinite", "temporary"]);
+
+export const passwordPolicyFailReasonSchema = z.enum(["too_short", "no_letter", "no_uppercase", "no_lowercase", "no_digit", "no_special_char", "too_common"]);
+
+export const auditActorTypeSchema = z.enum(["user", "system", "service"]);
+
+export const auditValueSensitivitySchema = z.enum(["non_sensitive", "email", "phone_number", "ip_address", "partial_value_mask", "full_value_mask"]);
+
+export const auditStatusSchema = z.enum(["success", "failed", "denied"]);
+
+export const commonAuditResourceTypeSchema = z.enum(["audit_event", "audit_events"]);
+
+export const securityAuditResourceTypeSchema = z.enum(["security_settings"]);
+
+export const settingsAuditResourceTypeSchema = z.enum(["global_settings"]);
+
+export const userAuditResourceTypeSchema = z.enum(["auth_settings", "user", "email_address", "phone_number", "identifier", "session"]);
+
+export const securityAuditActionTypeSchema = z.enum(["management_update_security_settings", "management_reset_security_settings"]);
+
+export const settingsAuditActionTypeSchema = z.enum(["management_update_global_settings", "management_reset_global_settings"]);
+
+export const userAuditActionTypeSchema = z.enum(["management_update_auth_settings", "management_reset_auth_settings", "management_delete_identifier", "management_delete_identifier_password", "management_delete_session", "management_delete_all_user_sessions", "management_update_user", "management_delete_user", "management_create_user", "management_disable_user_totp", "login_by_email", "login_by_phone", "login_by_external_auth_provider", "login_by_totp", "login_by_totp_recovery_code", "new_device_detected", "register_by_email", "reset_password", "self_unlock_account", "logout", "self_delete_session", "self_delete_other_sessions", "reauthenticate_session", "self_delete_identifier", "add_identifier_email", "add_identifier_phone", "add_identifier_external_auth_provider", "change_password", "self_schedule_user_deletion", "self_restore_user", "self_setup_totp_initiated", "self_enable_totp", "self_disable_totp", "self_get_recovery_codes", "self_regenerate_recovery_codes", "refresh_token_reuse_detected"]);
+
+export const userAccountStatusSchema = z.enum(["active", "read_only", "banned", "security_hold", "pending_deletion"]);
+
+export const userRoleSchema = z.enum(["user", "staff", "admin"]);
+
+export const userAuthProviderSchema = z.enum(["email", "phone", "google", "apple"]);
+
+export const externalAuthProviderSchema = z.enum(["google", "apple"]);
+
+        export function pagedResultSchema(itemSchema) {
+  return z.object({
+    items: z.array(itemSchema),
+    totalCount: z.number(),
+    pageNumber: z.number(),
+    pageSize: z.number(),
+    totalPages: z.number()
+  });
+}
+
+export const apiErrorResponseSchema = z.object({
+    id: userIdSchema,
+code: z.string(),
+message: z.string(),
+args: z.record(z.string(), z.string())
+});
+
+export const clientInfoPayloadSchema = z.object({
+    client_device_info: clientDeviceInfoPayloadSchema,
+user_agent: z.string().nullable(),
+ip_address: z.string().nullable(),
+api_version: z.string().nullable()
+});
+
+export const clientDeviceInfoPayloadSchema = z.object({
+    client_type: clientTypeSchema.nullable(),
+language: z.string().nullable(),
+device_id: clientDeviceIdSchema.nullable(),
+device_name: z.string().nullable(),
+app_version: z.string().nullable(),
+operation_system_version: z.string().nullable()
+});
+
+export const accountLockoutPolicyPayloadSchema = z.object({
+    max_failed_password_attempts: z.number(),
+max_failed_otp_attempts: z.number(),
+max_failed_totp_attempts: z.number(),
+failed_attempts_window_seconds: z.number(),
+lockout_duration_seconds: z.number(),
+indefinite_lockout_threshold: z.number(),
+is_self_service_unlock_enabled: z.boolean()
+});
+
+export const ipRestrictionPolicyPayloadSchema = z.object({
+    is_blacklist_enabled: z.boolean(),
+blacklist: z.array(z.string()),
+is_whitelist_enabled: z.boolean(),
+whitelist: z.array(z.string())
+});
+
+export const otpConfirmationPayloadSchema = z.object({
+    retry_after_seconds: z.number(),
+number_of_symbols: z.number(),
+expiration_seconds: z.number()
+});
+
+export const managementPasswordPolicyPayloadSchema = z.object({
+    min_length: z.number(),
+require_letter: z.boolean(),
+require_upper_case: z.boolean(),
+require_lower_case: z.boolean(),
+require_digit: z.boolean(),
+require_special_char: z.boolean(),
+common_passwords: z.array(z.string())
+});
+
+export const openPasswordPolicyPayloadSchema = z.object({
+    min_length: z.number(),
+require_letter: z.boolean(),
+require_upper_case: z.boolean(),
+require_lower_case: z.boolean(),
+require_digit: z.boolean(),
+require_special_char: z.boolean()
+});
+
+export const managementSecuritySettingsPayloadSchema = z.object({
+    recent_authentication_validity_seconds_for_open_user: z.number(),
+recent_authentication_validity_seconds_for_management_user: z.number(),
+management_password_policy: managementPasswordPolicyPayloadSchema,
+otp_confirmation: otpConfirmationPayloadSchema,
+account_lockout_policy: accountLockoutPolicyPayloadSchema,
+account_lockout_check_interval_seconds: z.number(),
+open_ip_restriction_policy: ipRestrictionPolicyPayloadSchema,
+management_ip_restriction_policy: ipRestrictionPolicyPayloadSchema,
+expiration_seconds: z.number(),
+max_requests_per_period: z.number(),
+rate_limit_period_seconds: z.number(),
+refresh_token_rotation_grace_period_seconds: z.number()
+});
+
+export const openSecuritySettingsPayloadSchema = z.object({
+    open_password_policy: openPasswordPolicyPayloadSchema,
+otp_confirmation: otpConfirmationPayloadSchema
+});
+
+export const totpRecoveryCodesPayloadSchema = z.object({
+    totp_recovery_codes: z.array(z.string())
+});
+
+export const totpSetupPayloadSchema = z.object({
+    totp_secret_key: z.string(),
+totp_otp_auth_url: z.string(),
+mfa_token: z.string()
+});
+
+export const verifyTotpPayloadSchema = z.object({
+    mfa_token: z.string(),
+totp_code: z.string()
+});
+
+export const managementGlobalSettingsPayloadSchema = z.object({
+    privacy_policy_url: z.string().nullable(),
+terms_of_service_url: z.string().nullable(),
+contact_support_email: z.string().nullable(),
+min_supported_app_versions: z.record(z.string(), z.string()),
+is_tracing_enabled: z.boolean(),
+is_metrics_enabled: z.boolean(),
+is_verbose_logging_enabled: z.boolean()
+});
+
+export const openGlobalSettingsPayloadSchema = z.object({
+    privacy_policy_url: z.string().nullable(),
+terms_of_service_url: z.string().nullable(),
+contact_support_email: z.string().nullable(),
+min_supported_app_versions: z.record(z.string(), z.string())
+});
+
+export const auditEventPayloadSchema = z.object({
+    id: auditEventIdSchema,
+actor_id: userIdSchema.nullable(),
+actor_type: auditActorTypeSchema,
+actor_user_role: userRoleSchema.nullable(),
+action: z.string(),
+resource: z.string(),
+resource_id: z.string().nullable(),
+status: auditStatusSchema,
+metadata: z.array(auditEventMetadataPayloadSchema),
+message: z.string().nullable(),
+created_at: z.number()
+});
+
+export const auditEventMetadataPayloadSchema = z.object({
+    key: z.string(),
+value: z.string(),
+value_sensitivity: z.string()
+});
+
+export const authDataPayloadSchema = z.object({
+    user: userDetailsPayloadSchema,
+session_token: sessionTokenPayloadSchema
+});
+
+export const availableAuthProvidersPayloadSchema = z.object({
+    primary: z.array(z.string()),
+secondary: z.array(z.string())
+});
+
+export const managementAuthSettingsPayloadSchema = z.object({
+    available_auth_providers: availableAuthProvidersPayloadSchema,
+max_total_identifiers: z.number(),
+max_email_identifiers: z.number(),
+max_phone_identifiers: z.number(),
+max_identifiers_per_external_provider: z.number(),
+max_active_sessions_for_open_user: z.number(),
+max_active_sessions_for_management_user: z.number(),
+access_token_validity_seconds: z.number(),
+refresh_token_validity_seconds: z.number(),
+account_deletion_grace_period_seconds: z.number(),
+account_deletion_check_interval_seconds: z.number(),
+is_registration_enabled: z.boolean(),
+open_email_restriction_policy: emailRestrictionPolicyPayloadSchema,
+management_email_restriction_policy: emailRestrictionPolicyPayloadSchema
+});
+
+export const openAuthSettingsPayloadSchema = z.object({
+    available_auth_providers: availableAuthProvidersPayloadSchema,
+max_total_identifiers: z.number(),
+max_email_identifiers: z.number(),
+max_phone_identifiers: z.number(),
+max_identifiers_per_external_provider: z.number(),
+is_registration_enabled: z.boolean()
+});
+
+export const managementUserConfigurationPayloadSchema = z.object({
+    management_global_settings: managementGlobalSettingsPayloadSchema,
+management_security_settings: managementSecuritySettingsPayloadSchema,
+management_auth_settings: managementAuthSettingsPayloadSchema
+});
+
+export const openUserConfigurationPayloadSchema = z.object({
+    open_global_settings: openGlobalSettingsPayloadSchema,
+open_security_settings: openSecuritySettingsPayloadSchema,
+open_auth_settings: openAuthSettingsPayloadSchema
+});
+
+export const emailRestrictionPolicyPayloadSchema = z.object({
+    is_blacklist_enabled: z.boolean(),
+blacklist: z.array(z.string()),
+is_whitelist_enabled: z.boolean(),
+whitelist: z.array(z.string())
+});
+
+export const userIdentifierPayloadSchema = z.object({
+    id: userIdentifierIdSchema,
+user_id: userIdSchema,
+user_auth_provider: userAuthProviderSchema,
+identifier: z.string(),
+display_name: z.string(),
+external_provider_email: z.string().nullable(),
+is_sensitive_values_masked: z.boolean(),
+created_at: z.number(),
+updated_at: z.number().nullable()
+});
+
+export const deletedSessionsPayloadSchema = z.object({
+    deleted_session_ids: z.array(z.string())
+});
+
+export const userSessionPayloadSchema = z.object({
+    id: userSessionIdSchema,
+user_id: userIdSchema,
+user_role: userRoleSchema,
+identifier: z.string(),
+identifier_id: userIdentifierIdSchema,
+identifier_display_name: z.string(),
+identifier_auth_provider: userAuthProviderSchema,
+client_device_info: clientDeviceInfoPayloadSchema,
+user_agent: z.string().nullable(),
+ip_address: z.string().nullable(),
+expires_at: z.number(),
+last_accessed_at: z.number(),
+last_reauthenticated_at: z.number(),
+is_sensitive_values_masked: z.boolean(),
+created_at: z.number(),
+updated_at: z.number().nullable()
+});
+
+export const refreshTokenPayloadSchema = z.object({
+    refresh_token: z.string()
+});
+
+export const sessionTokenPayloadSchema = z.object({
+    access_token: z.string(),
+refresh_token: z.string(),
+expires_at: z.number(),
+token_type: z.string(),
+session_id: userSessionIdSchema,
+identifier_id: userIdentifierIdSchema
+});
+
+export const userDetailsPayloadSchema = z.object({
+    id: userIdSchema,
+role: userRoleSchema,
+account_status: userAccountStatusSchema,
+account_status_on_restore: userAccountStatusSchema.nullable(),
+authority_level: z.number(),
+permission_codes: z.array(permissionCodeSchema),
+is_totp_enabled: z.boolean(),
+last_login_at: z.number().nullable(),
+last_active_at: z.number().nullable(),
+created_at: z.number(),
+updated_at: z.number().nullable(),
+scheduled_permanent_deletion_at: z.number().nullable(),
+account_lockout_type: accountLockoutTypeSchema,
+temporary_lockout_until: z.number().nullable()
+});
+
+export const userPublicPayloadSchema = z.object({
+    id: userIdSchema,
+role: userRoleSchema,
+account_status: userAccountStatusSchema
+});
+
+export const createByEmailRequestSchema = z.object({
+    email: z.string(),
+password: z.string().nullable(),
+role: userRoleSchema,
+account_status: z.string(),
+authority_level: z.number(),
+permission_codes: z.array(permissionCodeSchema)
+});
+
+export const loginByEmailRequestSchema = z.object({
+    email: z.string(),
+password: z.string()
+});
+
+export const loginByExternalAuthProviderRequestSchema = z.object({
+    auth_provider: z.string(),
+external_provider_token: z.string()
+});
+
+export const loginByPhoneRequestSchema = z.object({
+    phone_number: z.string(),
+confirmation_code: z.string()
+});
+
+export const resetPasswordRequestSchema = z.object({
+    email: z.string(),
+confirmation_code: z.string(),
+new_password: z.string()
+});
+
+export const sendResetPasswordConfirmationRequestSchema = z.object({
+    email: z.string()
+});
+
+export const registerByEmailRequestSchema = z.object({
+    email: z.string(),
+password: z.string(),
+confirmation_code: z.string()
+});
+
+export const unlockByEmailConfirmationRequestSchema = z.object({
+    email: z.string(),
+confirmation_code: z.string()
+});
+
+export const unlockByExternalAuthProviderRequestSchema = z.object({
+    auth_provider: z.string(),
+external_provider_token: z.string()
+});
+
+export const unlockByPhoneConfirmationRequestSchema = z.object({
+    phone_number: z.string(),
+confirmation_code: z.string()
+});
+
+export const sendConfirmationToEmailRequestSchema = z.object({
+    email: z.string()
+});
+
+export const sendConfirmationToPhoneRequestSchema = z.object({
+    phone_number: z.string()
+});
+
+export const emailPasswordChangeRequestSchema = z.object({
+    email: z.string(),
+old_password: z.string(),
+new_password: z.string()
+});
+
+export const addUserIdentifierEmailRequestSchema = z.object({
+    email: z.string(),
+password: z.string(),
+confirmation_code: z.string()
+});
+
+export const addUserIdentifierExternalAuthProviderRequestSchema = z.object({
+    auth_provider: z.string(),
+external_provider_token: z.string()
+});
+
+export const addUserIdentifierPhoneRequestSchema = z.object({
+    phone_number: z.string(),
+confirmation_code: z.string()
+});
+
+export const updateUserRequestSchema = z.object({
+    account_status: userAccountStatusSchema.nullable(),
+authority_level: z.number().nullable(),
+permission_codes: z.array(permissionCodeSchema).nullable(),
+account_lockout_type: accountLockoutTypeSchema.nullable(),
+temporary_lockout_until: z.number().nullable()
+});