@mudrichenkoevgeny/shared-foundation 0.0.48 → 0.0.50

package/index.d.ts

@@ -1,5 +1,7 @@
     import { z } from 'zod';
 
+    export type Instant = number;
+
     export type PermissionCode = string & { readonly __brand: 'PermissionCode' };
     export function toPermissionCodeOrNull(value: string | null | undefined): PermissionCode | null;
     export function toPermissionCodeOrThrow(value: string): PermissionCode;
@@ -30,6 +32,36 @@
     export function toClientDeviceIdOrThrow(value: string): ClientDeviceId;
     export const clientDeviceIdSchema: z.ZodType<ClientDeviceId>;
 
+    export type DecryptedString = string & { readonly __brand: 'DecryptedString' };
+    export function toDecryptedStringOrNull(value: string | null | undefined): DecryptedString | null;
+    export function toDecryptedStringOrThrow(value: string): DecryptedString;
+    export const decryptedStringSchema: z.ZodType<DecryptedString>;
+
+    export type EncryptedString = string & { readonly __brand: 'EncryptedString' };
+    export function toEncryptedStringOrNull(value: string | null | undefined): EncryptedString | null;
+    export function toEncryptedStringOrThrow(value: string): EncryptedString;
+    export const encryptedStringSchema: z.ZodType<EncryptedString>;
+
+    export type PasswordHash = string & { readonly __brand: 'PasswordHash' };
+    export function toPasswordHashOrNull(value: string | null | undefined): PasswordHash | null;
+    export function toPasswordHashOrThrow(value: string): PasswordHash;
+    export const passwordHashSchema: z.ZodType<PasswordHash>;
+
+    export type AccessToken = string & { readonly __brand: 'AccessToken' };
+    export function toAccessTokenOrNull(value: string | null | undefined): AccessToken | null;
+    export function toAccessTokenOrThrow(value: string): AccessToken;
+    export const accessTokenSchema: z.ZodType<AccessToken>;
+
+    export type RefreshToken = string & { readonly __brand: 'RefreshToken' };
+    export function toRefreshTokenOrNull(value: string | null | undefined): RefreshToken | null;
+    export function toRefreshTokenOrThrow(value: string): RefreshToken;
+    export const refreshTokenSchema: z.ZodType<RefreshToken>;
+
+    export type RefreshTokenHash = string & { readonly __brand: 'RefreshTokenHash' };
+    export function toRefreshTokenHashOrNull(value: string | null | undefined): RefreshTokenHash | null;
+    export function toRefreshTokenHashOrThrow(value: string): RefreshTokenHash;
+    export const refreshTokenHashSchema: z.ZodType<RefreshTokenHash>;
+
     export declare const ManagementRoutes: {
     readonly BASE_MANAGEMENT_ROUTE: "/management";
 };
@@ -80,6 +112,14 @@ readonly LOGIN_BY_TOTP: "/management/auth/login/totp";
 readonly LOGIN_BY_TOTP_RECOVERY_CODE: "/management/auth/login/totp-recovery-code";
     };
 
+export declare const OpenRefreshTokenRoutes: {
+    readonly REFRESH_TOKEN: "/auth/refresh";
+};
+
+export declare const SelfManagementRefreshTokenRoutes: {
+    readonly REFRESH_TOKEN: "/management/auth/refresh";
+};
+
     export declare const OpenRegisterRoutes: {
         readonly REGISTER_BY_EMAIL_ROUTE: "/auth/register/email";
 readonly REGISTER_BY_EMAIL: "/auth/register/email";
@@ -228,6 +268,18 @@ readonly UPDATE_MANAGEMENT_AUTH_SETTINGS: "/management/auth/settings";
 readonly RESET_MANAGEMENT_AUTH_SETTINGS: "/management/auth/settings/reset";
     };
 
+export declare const OpenAuthSettingsRoutes: {
+    readonly GET_OPEN_AUTH_SETTINGS: "/auth/settings";
+};
+
+export declare const OpenUserConfigurationRoutes: {
+    readonly GET_CONFIGURATION: "user-configuration";
+};
+
+export declare const ManagementUserConfigurationRoutes: {
+    readonly GET_CONFIGURATION: "/management/user-configuration";
+};
+
         export declare const CommonApiFields: {
         readonly ITEMS: "items";
 readonly TOTAL_COUNT: "total_count";
@@ -419,6 +471,72 @@ readonly MANAGEMENT_SECURITY_SETTINGS_UPDATED: "MANAGEMENT_SECURITY_SETTINGS_UPD
 readonly MANAGEMENT_GLOBAL_SETTINGS_UPDATED: "MANAGEMENT_GLOBAL_SETTINGS_UPDATED";
     };
 
+    export declare const UserWebSocketCloseReasons: {
+        readonly AUTH_FAILED: "Auth failed";
+readonly SESSION_EXPIRED: "Session expired";
+readonly SESSION_DELETED: "Session deleted";
+readonly USER_BANNED: "User banned";
+    };
+
+    export declare const UserWebSocketEventTypes: {
+        readonly UNAUTHORIZED: "UNAUTHORIZED";
+readonly OPEN_AUTH_SETTINGS_UPDATED: "OPEN_AUTH_SETTINGS_UPDATED";
+readonly MANAGEMENT_AUTH_SETTINGS_UPDATED: "MANAGEMENT_AUTH_SETTINGS_UPDATED";
+readonly USER_UPDATED: "USER_UPDATED";
+readonly SESSION_DELETED: "SESSION_DELETED";
+    };
+
+    export declare const UserApiPaths: {
+        readonly USER_ID: "user_id";
+readonly SESSION_ID: "session_id";
+readonly USER_IDENTIFIER_ID: "user_identifier_id";
+    };
+
+export declare const UserApiQueryParams: {
+    readonly ACCESS_TOKEN: "token";
+};
+
+export declare const UserAuthSpec: {
+    readonly TOKEN_TYPE_BEARER: "Bearer";
+};
+
+export declare const AuditApiPaths: {
+    readonly EVENT_ID: "event_id";
+};
+
+export declare const UserRoleDefaultAuthorityLevel: {
+
+};
+
+    export declare const SecurityAuditMetadataDeniedReasonValues: {
+        readonly RATE_LIMIT: "rate_limit";
+readonly PASSWORD_TOO_WEAK: "password_too_weak";
+readonly MFA_TOKEN_EXPIRED: "mfa_token_expired";
+readonly TOTP_ALREADY_ENABLED: "totp_already_enabled";
+readonly TOTP_NOT_ENABLED: "totp_not_enabled";
+readonly RECOVERY_CODE_ALREADY_USED: "recovery_code_already_used";
+readonly MFA_REQUIRED: "mfa_required";
+    };
+
+    export declare const UserAuditMetadataDeniedReasonValues: {
+        readonly USER_READ_ONLY: "user_read_only";
+readonly USER_BANNED: "user_banned";
+readonly USER_LOCKED: "user_locked";
+readonly USER_SECURITY_HOLD: "user_security_hold";
+readonly USER_PENDING_DELETION: "user_pending_deletion";
+readonly USER_NOT_FOUND: "user_not_found";
+readonly USER_ROLE_NOT_ALLOWED: "user_role_not_allowed";
+readonly USER_MISSING_PERMISSIONS: "user_missing_permissions";
+readonly USER_INSUFFICIENT_AUTHORITY_LEVEL: "user_insufficient_authority_level";
+readonly USER_ILLEGAL_ACCOUNT_STATUS: "user_illegal_account_status";
+readonly USER_FORBIDDEN: "user_forbidden";
+readonly USER_IDENTIFIER_LIMIT_REACHED: "user_identifier_limit_reached";
+readonly TOTAL_USER_IDENTIFIERS_LIMIT_REACHED: "total_user_identifier_limit_reached";
+readonly PASSWORD_SETUP_REQUIRED: "password_setup_required";
+readonly USER_IDENTIFIER_PASSWORD_NOT_SUPPORTED: "user_identifier_password_not_supported";
+readonly USER_IDENTIFIER_PASSWORD_NOT_SET: "user_identifier_password_not_set";
+    };
+
     export declare const ListingParamNames: {
   readonly PAGE_NUMBER: "page_number";
   readonly PAGE_SIZE: "page_size";
@@ -434,6 +552,52 @@ readonly MANAGEMENT_GLOBAL_SETTINGS_UPDATED: "MANAGEMENT_GLOBAL_SETTINGS_UPDATED
   };
 };
 
+export declare const AuditFilterValues: {
+  readonly AuditEventFilterValues: {
+    readonly ACTOR_ID: "actor_id";
+    readonly ACTOR_TYPE: "actor_type";
+    readonly ACTOR_USER_ROLE: "actor_user_role";
+    readonly ACTION: "action";
+    readonly RESOURCE: "resource";
+    readonly RESOURCE_ID: "resource_id";
+    readonly STATUS: "status";
+    readonly MESSAGE: "message";
+  };
+};
+
+export declare const UserFilterValues: {
+  readonly UserFilterValues: {
+    readonly ROLE: "role";
+    readonly ACCOUNT_STATUS: "account_status";
+    readonly ACCOUNT_STATUS_ON_RESTORE: "account_status_on_restore";
+    readonly ACCOUNT_LOCKOUT_TYPE: "account_lockout_type";
+    readonly AUTHORITY_LEVEL_FROM: "authority_level_from";
+    readonly AUTHORITY_LEVEL_TO: "authority_level_to";
+    readonly IS_TOTP_ENABLED: "is_totp_enabled";
+    readonly PERMISSION_CODES: "permission_codes";
+  };
+  readonly UserIdentifierFilterValues: {
+    readonly USER_ID: "user_id";
+    readonly USER_AUTH_PROVIDER: "user_auth_provider";
+    readonly IDENTIFIER: "identifier";
+  };
+  readonly UserSessionFilterValues: {
+    readonly USER_ID: "user_id";
+    readonly USER_ROLE: "user_role";
+    readonly IDENTIFIER_ID: "identifier_id";
+    readonly USER_AUTH_PROVIDER: "user_auth_provider";
+    readonly CLIENT_TYPE: "client_type";
+    readonly USER_AGENT: "user_agent";
+    readonly IP_ADDRESS: "ip_address";
+    readonly LANGUAGE: "language";
+    readonly DEVICE_ID: "device_id";
+    readonly DEVICE_NAME: "device_name";
+    readonly APP_VERSION: "app_version";
+    readonly OPERATION_SYSTEM_VERSION: "operation_system_version";
+    readonly IDENTIFIER: "identifier";
+  };
+};
+
         export declare const CommonErrorCodes: {
         readonly UNKNOWN: "UNKNOWN";
 readonly INTERNAL: "INTERNAL";
@@ -703,6 +867,40 @@ readonly REFRESH_TOKEN_REUSE_DETECTED: 'refresh_token_reuse_detected';
       };
       export const userAuditActionTypeSchema: z.ZodType<UserAuditActionType>;
 
+      export type CommonAuditMetadataKey = 'device_id' | 'device_name' | 'client_type' | 'language' | 'app_version' | 'os_version' | 'user_agent' | 'key_ip_address' | 'host' | 'origin' | 'api_version' | 'trace_id' | 'denied_reason' | 'error_id' | 'error_code';
+      export const CommonAuditMetadataKey: {
+        readonly DEVICE_ID: 'device_id';
+readonly DEVICE_NAME: 'device_name';
+readonly CLIENT_TYPE: 'client_type';
+readonly LANGUAGE: 'language';
+readonly APP_VERSION: 'app_version';
+readonly OS_VERSION: 'os_version';
+readonly USER_AGENT: 'user_agent';
+readonly IP_ADDRESS: 'key_ip_address';
+readonly HOST: 'host';
+readonly ORIGIN: 'origin';
+readonly API_VERSION: 'api_version';
+readonly TRACE_ID: 'trace_id';
+readonly DENIED_REASON: 'denied_reason';
+readonly ERROR_ID: 'error_id';
+readonly ERROR_CODE: 'error_code';
+      };
+      export const commonAuditMetadataKeySchema: z.ZodType<CommonAuditMetadataKey>;
+
+      export type UserAuditMetadataKey = 'user_id' | 'session_id' | 'identifier_id' | 'email_address' | 'phone_number' | 'user_auth_provider' | 'external_id' | 'account_lockout_type' | 'temporary_lockout_until';
+      export const UserAuditMetadataKey: {
+        readonly USER_ID: 'user_id';
+readonly SESSION_ID: 'session_id';
+readonly IDENTIFIER_ID: 'identifier_id';
+readonly EMAIL_ADDRESS: 'email_address';
+readonly PHONE_NUMBER: 'phone_number';
+readonly USER_AUTH_PROVIDER: 'user_auth_provider';
+readonly EXTERNAL_ID: 'external_id';
+readonly ACCOUNT_LOCKOUT_TYPE: 'account_lockout_type';
+readonly TEMPORARY_LOCKOUT_UNTIL: 'temporary_lockout_until';
+      };
+      export const userAuditMetadataKeySchema: z.ZodType<UserAuditMetadataKey>;
+
       export type UserAccountStatus = 'active' | 'read_only' | 'banned' | 'security_hold' | 'pending_deletion';
       export const UserAccountStatus: {
         readonly ACTIVE: 'active';
@@ -807,42 +1005,414 @@ readonly MANAGEMENT: 'MANAGEMENT';
       };
       export const appTypeSchema: z.ZodType<AppType>;
 
-    export interface ConfirmationKey {
-  readonly type: ConfirmationType;
-  readonly identifier: string;
+        export interface ConfirmationKey {
+      readonly type: ConfirmationType;
+      readonly identifier: string;
+    }
+    export const confirmationKeySchema: z.ZodType<ConfirmationKey>;
+
+          export interface ClientInfo {
+        readonly deviceInfo: ClientDeviceInfo;
+readonly userAgent: string | null;
+readonly ipAddress: string | null;
+readonly host: string | null;
+readonly origin: string | null;
+readonly apiVersion: string | null;
+      }
+      
+      export declare const toClientInfo: (payload: ClientInfoPayload) => ClientInfo;
+      export declare const toClientInfoPayload: (domain: ClientInfo) => ClientInfoPayload;
+
+      export interface ClientDeviceInfo {
+        readonly deviceId: ClientDeviceId | null;
+readonly deviceName: string | null;
+readonly clientType: ClientType | null;
+readonly language: string | null;
+readonly appVersion: string | null;
+readonly operationSystemVersion: string | null;
+      }
+      
+      export declare const toClientDeviceInfo: (payload: ClientDeviceInfoPayload) => ClientDeviceInfo;
+      export declare const toClientDeviceInfoPayload: (domain: ClientDeviceInfo) => ClientDeviceInfoPayload;
+
+      export interface AccountLockoutPolicy {
+        readonly maxFailedPasswordAttempts: number;
+readonly maxFailedOtpAttempts: number;
+readonly maxFailedTotpAttempts: number;
+readonly failedAttemptsWindowSeconds: number;
+readonly lockoutDurationSeconds: number;
+readonly indefiniteLockoutThreshold: number;
+readonly isSelfServiceUnlockEnabled: boolean;
+      }
+      
+      export declare const toAccountLockoutPolicy: (payload: AccountLockoutPolicyPayload) => AccountLockoutPolicy;
+      export declare const toAccountLockoutPolicyPayload: (domain: AccountLockoutPolicy) => AccountLockoutPolicyPayload;
+
+      export interface IpRestrictionPolicy {
+        readonly isBlacklistEnabled: boolean;
+readonly blacklist: string[];
+readonly isWhitelistEnabled: boolean;
+readonly whitelist: string[];
+      }
+      
+      export declare const toIpRestrictionPolicy: (payload: IpRestrictionPolicyPayload) => IpRestrictionPolicy;
+      export declare const toIpRestrictionPolicyPayload: (domain: IpRestrictionPolicy) => IpRestrictionPolicyPayload;
+
+      export interface OtpConfirmation {
+        readonly retryAfterSeconds: number;
+readonly numberOfSymbols: number;
+readonly expirationSeconds: number;
+      }
+      
+      export declare const toOtpConfirmation: (payload: OtpConfirmationPayload) => OtpConfirmation;
+      export declare const toOtpConfirmationPayload: (domain: OtpConfirmation) => OtpConfirmationPayload;
+
+      export interface ManagementPasswordPolicy {
+        readonly minLength: number;
+readonly requireLetter: boolean;
+readonly requireUpperCase: boolean;
+readonly requireLowerCase: boolean;
+readonly requireDigit: boolean;
+readonly requireSpecialChar: boolean;
+readonly commonPasswords: string[];
+      }
+      
+      export declare const toManagementPasswordPolicy: (payload: ManagementPasswordPolicyPayload) => ManagementPasswordPolicy;
+      export declare const toManagementPasswordPolicyPayload: (domain: ManagementPasswordPolicy) => ManagementPasswordPolicyPayload;
+
+      export interface OpenPasswordPolicy {
+        readonly minLength: number;
+readonly requireLetter: boolean;
+readonly requireUpperCase: boolean;
+readonly requireLowerCase: boolean;
+readonly requireDigit: boolean;
+readonly requireSpecialChar: boolean;
+      }
+      
+      export declare const toOpenPasswordPolicy: (payload: OpenPasswordPolicyPayload) => OpenPasswordPolicy;
+      export declare const toOpenPasswordPolicyPayload: (domain: OpenPasswordPolicy) => OpenPasswordPolicyPayload;
+
+      export interface ManagementSecuritySettings {
+        readonly recentAuthenticationValiditySecondsForOpenUser: number;
+readonly recentAuthenticationValiditySecondsForManagementUser: number;
+readonly passwordPolicy: ManagementPasswordPolicy;
+readonly otpConfirmation: OtpConfirmation;
+readonly accountLockoutPolicy: AccountLockoutPolicy;
+readonly accountLockoutCheckIntervalSeconds: number;
+readonly openIpRestrictionPolicy: IpRestrictionPolicy;
+readonly managementIpRestrictionPolicy: IpRestrictionPolicy;
+readonly mfaTokenExpirationSeconds: number;
+readonly maxRequestsPerPeriod: number;
+readonly rateLimitPeriodSeconds: number;
+readonly refreshTokenRotationGracePeriodSeconds: number;
+      }
+      
+      export declare const toManagementSecuritySettings: (payload: ManagementSecuritySettingsPayload) => ManagementSecuritySettings;
+      export declare const toManagementSecuritySettingsPayload: (domain: ManagementSecuritySettings) => ManagementSecuritySettingsPayload;
+
+      export interface OpenSecuritySettings {
+        readonly passwordPolicy: OpenPasswordPolicy;
+readonly otpConfirmation: OtpConfirmation;
+      }
+      
+      export declare const toOpenSecuritySettings: (payload: OpenSecuritySettingsPayload) => OpenSecuritySettings;
+      export declare const toOpenSecuritySettingsPayload: (domain: OpenSecuritySettings) => OpenSecuritySettingsPayload;
+
+export interface TotpRecoveryCodes {
+  readonly codes: string[];
 }
-export const confirmationKeySchema: z.ZodType<ConfirmationKey>;
-
-export type UserSortValues = 'created_at' | 'updated_at' | 'last_accessed_at' | 'last_reauthenticated_at' | 'expires_at';
-
-export namespace UserSortValues {
-  export type UserSortBy = 'last_login_at' | 'last_active_at' | 'scheduled_permanent_deletion_at' | 'account_lockout_type' | 'temporary_lockout_until' | 'created_at' | 'updated_at';
-  export const UserSortBy: {
-    readonly LAST_LOGIN_AT: 'last_login_at';
-    readonly LAST_ACTIVE_AT: 'last_active_at';
-    readonly SCHEDULED_PERMANENT_DELETION_AT: 'scheduled_permanent_deletion_at';
-    readonly ACCOUNT_LOCKOUT_TYPE: 'account_lockout_type';
-    readonly TEMPORARY_LOCKOUT_UNTIL: 'temporary_lockout_until';
-    readonly CREATED_AT: 'created_at';
-    readonly UPDATED_AT: 'updated_at';
-  };
 
-  export type UserIdentifierSortBy = 'created_at' | 'updated_at';
-  export const UserIdentifierSortBy: {
-    readonly CREATED_AT: 'created_at';
-    readonly UPDATED_AT: 'updated_at';
-  };
+export declare const toTotpRecoveryCodes: (payload: TotpRecoveryCodesPayload) => TotpRecoveryCodes;
+export declare const toTotpRecoveryCodesPayload: (domain: TotpRecoveryCodes) => TotpRecoveryCodesPayload;
+
+      export interface TotpSetup {
+        readonly secretKey: string;
+readonly otpAuthUrl: string;
+readonly mfaToken: string;
+      }
+      
+      export declare const toTotpSetup: (payload: TotpSetupPayload) => TotpSetup;
+      export declare const toTotpSetupPayload: (domain: TotpSetup) => TotpSetupPayload;
+
+      export interface VerifyTotp {
+        readonly mfaToken: string;
+readonly code: string;
+      }
+      
+      export declare const toVerifyTotp: (payload: VerifyTotpPayload) => VerifyTotp;
+      export declare const toVerifyTotpPayload: (domain: VerifyTotp) => VerifyTotpPayload;
+
+      export interface ManagementGlobalSettings {
+        readonly privacyPolicyUrl: string | null;
+readonly termsOfServiceUrl: string | null;
+readonly contactSupportEmail: string | null;
+readonly minSupportedAppVersions: Record<string, string>;
+readonly isTracingEnabled: boolean;
+readonly isMetricsEnabled: boolean;
+readonly isVerboseLoggingEnabled: boolean;
+      }
+      
+      export declare const toManagementGlobalSettings: (payload: ManagementGlobalSettingsPayload) => ManagementGlobalSettings;
+      export declare const toManagementGlobalSettingsPayload: (domain: ManagementGlobalSettings) => ManagementGlobalSettingsPayload;
+
+      export interface OpenGlobalSettings {
+        readonly privacyPolicyUrl: string | null;
+readonly termsOfServiceUrl: string | null;
+readonly contactSupportEmail: string | null;
+readonly minSupportedAppVersions: Record<string, string>;
+      }
+      
+      export declare const toOpenGlobalSettings: (payload: OpenGlobalSettingsPayload) => OpenGlobalSettings;
+      export declare const toOpenGlobalSettingsPayload: (domain: OpenGlobalSettings) => OpenGlobalSettingsPayload;
+
+      export interface AuditEvent {
+        readonly id: AuditEventId;
+readonly actorId: UserId | null;
+readonly actorType: AuditActorType;
+readonly actorUserRole: UserRole | null;
+readonly action: AuditActionType;
+readonly resource: AuditResourceType;
+readonly resourceId: string | null;
+readonly resourceValueSensitivity: AuditValueSensitivity;
+readonly status: AuditStatus;
+readonly metadata: AuditEventMetadata[];
+readonly message: string | null;
+readonly createdAt: Instant;
+      }
+      
+      export declare const toAuditEvent: (payload: AuditEventPayload) => AuditEvent;
+      export declare const toAuditEventPayload: (domain: AuditEvent) => AuditEventPayload;
+
+      export interface AuditEventMetadata {
+        readonly key: AuditMetadataKey;
+readonly value: string;
+      }
+      
+      export declare const toAuditEventMetadata: (payload: AuditEventMetadataPayload) => AuditEventMetadata;
+      export declare const toAuditEventMetadataPayload: (domain: AuditEventMetadata) => AuditEventMetadataPayload;
+
+      export interface AuthData {
+        readonly userDetails: UserDetails;
+readonly sessionToken: SessionToken;
+      }
+      
+      export declare const toAuthData: (payload: AuthDataPayload) => AuthData;
+      export declare const toAuthDataPayload: (domain: AuthData) => AuthDataPayload;
+
+      export interface AvailableAuthProviders {
+        readonly primary: UserAuthProvider[];
+readonly secondary: UserAuthProvider[];
+      }
+      
+      export declare const toAvailableAuthProviders: (payload: AvailableAuthProvidersPayload) => AvailableAuthProviders;
+      export declare const toAvailableAuthProvidersPayload: (domain: AvailableAuthProviders) => AvailableAuthProvidersPayload;
+
+      export interface ManagementAuthSettings {
+        readonly availableAuthProviders: AvailableAuthProviders;
+readonly maxTotalIdentifiers: number;
+readonly maxEmailIdentifiers: number;
+readonly maxPhoneIdentifiers: number;
+readonly maxIdentifiersPerExternalProvider: number;
+readonly maxActiveSessionsForOpenUser: number;
+readonly maxActiveSessionsForManagementUser: number;
+readonly accessTokenExpirationSeconds: number;
+readonly refreshTokenExpirationSeconds: number;
+readonly accountDeletionGracePeriodSeconds: number;
+readonly accountDeletionCheckIntervalSeconds: number;
+readonly isRegistrationEnabled: boolean;
+readonly openEmailRestrictionPolicy: EmailRestrictionPolicy;
+readonly managementEmailRestrictionPolicy: EmailRestrictionPolicy;
+      }
+      
+      export declare const toManagementAuthSettings: (payload: ManagementAuthSettingsPayload) => ManagementAuthSettings;
+      export declare const toManagementAuthSettingsPayload: (domain: ManagementAuthSettings) => ManagementAuthSettingsPayload;
+
+      export interface OpenAuthSettings {
+        readonly availableAuthProviders: AvailableAuthProviders;
+readonly maxTotalIdentifiers: number;
+readonly maxEmailIdentifiers: number;
+readonly maxPhoneIdentifiers: number;
+readonly maxIdentifiersPerExternalProvider: number;
+readonly isRegistrationEnabled: boolean;
+      }
+      
+      export declare const toOpenAuthSettings: (payload: OpenAuthSettingsPayload) => OpenAuthSettings;
+      export declare const toOpenAuthSettingsPayload: (domain: OpenAuthSettings) => OpenAuthSettingsPayload;
+
+      export interface ManagementUserConfiguration {
+        readonly managementGlobalSettings: ManagementGlobalSettings;
+readonly managementSecuritySettings: ManagementSecuritySettings;
+readonly managementAuthSettings: ManagementAuthSettings;
+      }
+      
+      export declare const toManagementUserConfiguration: (payload: ManagementUserConfigurationPayload) => ManagementUserConfiguration;
+      export declare const toManagementUserConfigurationPayload: (domain: ManagementUserConfiguration) => ManagementUserConfigurationPayload;
+
+      export interface OpenUserConfiguration {
+        readonly openGlobalSettings: OpenGlobalSettings;
+readonly openSecuritySettings: OpenSecuritySettings;
+readonly openAuthSettings: OpenAuthSettings;
+      }
+      
+      export declare const toOpenUserConfiguration: (payload: OpenUserConfigurationPayload) => OpenUserConfiguration;
+      export declare const toOpenUserConfigurationPayload: (domain: OpenUserConfiguration) => OpenUserConfigurationPayload;
+
+      export interface EmailRestrictionPolicy {
+        readonly isBlacklistEnabled: boolean;
+readonly blacklist: string[];
+readonly isWhitelistEnabled: boolean;
+readonly whitelist: string[];
+      }
+      
+      export declare const toEmailRestrictionPolicy: (payload: EmailRestrictionPolicyPayload) => EmailRestrictionPolicy;
+      export declare const toEmailRestrictionPolicyPayload: (domain: EmailRestrictionPolicy) => EmailRestrictionPolicyPayload;
+
+      export interface UserIdentifier {
+        readonly id: UserIdentifierId;
+readonly userId: UserId;
+readonly userAuthProvider: UserAuthProvider;
+readonly identifier: string;
+readonly displayName: string;
+readonly externalProviderEmail: string | null;
+readonly isSensitiveValuesMasked: boolean;
+readonly createdAt: Instant;
+readonly updatedAt: Instant | null;
+      }
+      
+      export declare const toUserIdentifier: (payload: UserIdentifierPayload) => UserIdentifier;
+      export declare const toUserIdentifierPayload: (domain: UserIdentifier) => UserIdentifierPayload;
+
+export interface DeletedSessions {
+  readonly deletedSessionIds: UserSessionId[];
+}
 
-  export type UserSessionSortBy = 'expires_at' | 'last_accessed_at' | 'last_reauthenticated_at' | 'created_at' | 'updated_at';
-  export const UserSessionSortBy: {
-    readonly EXPIRES_AT: 'expires_at';
-    readonly LAST_ACCESSED_AT: 'last_accessed_at';
-    readonly LAST_REAUTHENTICATED_AT: 'last_reauthenticated_at';
-    readonly CREATED_AT: 'created_at';
-    readonly UPDATED_AT: 'updated_at';
-  };
+export declare const toDeletedSessions: (payload: DeletedSessionsPayload) => DeletedSessions;
+export declare const toDeletedSessionsPayload: (domain: DeletedSessions) => DeletedSessionsPayload;
+
+      export interface UserSession {
+        readonly id: UserSessionId;
+readonly userId: UserId;
+readonly userRole: UserRole;
+readonly identifier: string;
+readonly identifierId: UserIdentifierId;
+readonly identifierDisplayName: string;
+readonly identifierAuthProvider: UserAuthProvider;
+readonly deviceInfo: ClientDeviceInfo;
+readonly userAgent: string | null;
+readonly ipAddress: string | null;
+readonly expiresAt: Instant;
+readonly lastAccessedAt: Instant;
+readonly lastReauthenticatedAt: Instant;
+readonly isSensitiveValuesMasked: boolean;
+readonly createdAt: Instant;
+readonly updatedAt: Instant | null;
+      }
+      
+      export declare const toUserSession: (payload: UserSessionPayload) => UserSession;
+      export declare const toUserSessionPayload: (domain: UserSession) => UserSessionPayload;
+
+      export interface SessionToken {
+        readonly accessToken: AccessToken;
+readonly refreshToken: RefreshToken;
+readonly expiresAt: Instant;
+readonly tokenType: string;
+readonly sessionId: UserSessionId;
+readonly identifierId: UserIdentifierId;
+      }
+      
+      export declare const toSessionToken: (payload: SessionTokenPayload) => SessionToken;
+      export declare const toSessionTokenPayload: (domain: SessionToken) => SessionTokenPayload;
+
+      export interface UserDetails {
+        readonly id: UserId;
+readonly role: UserRole;
+readonly accountStatus: UserAccountStatus;
+readonly accountStatusOnRestore: UserAccountStatus | null;
+readonly authorityLevel: number;
+readonly permissionCodes: PermissionCode[];
+readonly isTotpEnabled: boolean;
+readonly lastLoginAt: Instant | null;
+readonly lastActiveAt: Instant | null;
+readonly createdAt: Instant;
+readonly updatedAt: Instant | null;
+readonly scheduledPermanentDeletionAt: Instant | null;
+readonly lockoutType: AccountLockoutType;
+readonly temporaryLockoutUntil: Instant | null;
+      }
+      
+      export declare const toUserDetails: (payload: UserDetailsPayload) => UserDetails;
+      export declare const toUserDetailsPayload: (domain: UserDetails) => UserDetailsPayload;
+
+      export interface UserPublic {
+        readonly id: UserId;
+readonly role: UserRole;
+readonly accountStatus: UserAccountStatus;
+      }
+      
+      export declare const toUserPublic: (payload: UserPublicPayload) => UserPublic;
+      export declare const toUserPublicPayload: (domain: UserPublic) => UserPublicPayload;
+
+    export type AuditActionType = SecurityAuditActionType | SettingsAuditActionType | UserAuditActionType | string;
+export type AuditMetadataKey = CommonAuditMetadataKey | UserAuditMetadataKey | string;
+export type AuditResourceType = CommonAuditResourceType | SecurityAuditResourceType | SettingsAuditResourceType | UserAuditResourceType | string;
+
+export interface AuditActionTypeParser {
+  parseOrNull(value: string): AuditActionType | null;
+}
+
+export interface AuditMetadataKeyParser {
+  parseOrNull(value: string): AuditMetadataKey | null;
 }
 
+export interface AuditResourceTypeParser {
+  parseOrNull(value: string): AuditResourceType | null;
+}
+
+export declare class CompositeAuditActionTypeParser {
+  constructor(auditActionTypes: Array<((value: string) => AuditActionType | null) | AuditActionTypeParser>);
+  fromValueOrThrow(value: string): AuditActionType;
+}
+
+export declare class CompositeAuditMetadataKeyParser {
+  constructor(metadataKeys: Array<((value: string) => AuditMetadataKey | null) | AuditMetadataKeyParser>);
+  fromValueOrThrow(value: string): AuditMetadataKey;
+}
+
+export declare class CompositeAuditResourceTypeParser {
+  constructor(auditResourceTypes: Array<((value: string) => AuditResourceType | null) | AuditResourceTypeParser>);
+  fromValueOrThrow(value: string): AuditResourceType;
+}
+
+    export type UserSortValues = 'created_at' | 'updated_at' | 'last_accessed_at' | 'last_reauthenticated_at' | 'expires_at';
+
+    export namespace UserSortValues {
+      export type UserSortBy = 'last_login_at' | 'last_active_at' | 'scheduled_permanent_deletion_at' | 'account_lockout_type' | 'temporary_lockout_until' | 'created_at' | 'updated_at';
+      export const UserSortBy: {
+        readonly LAST_LOGIN_AT: 'last_login_at';
+        readonly LAST_ACTIVE_AT: 'last_active_at';
+        readonly SCHEDULED_PERMANENT_DELETION_AT: 'scheduled_permanent_deletion_at';
+        readonly ACCOUNT_LOCKOUT_TYPE: 'account_lockout_type';
+        readonly TEMPORARY_LOCKOUT_UNTIL: 'temporary_lockout_until';
+        readonly CREATED_AT: 'created_at';
+        readonly UPDATED_AT: 'updated_at';
+      };
+
+      export type UserIdentifierSortBy = 'created_at' | 'updated_at';
+      export const UserIdentifierSortBy: {
+        readonly CREATED_AT: 'created_at';
+        readonly UPDATED_AT: 'updated_at';
+      };
+
+      export type UserSessionSortBy = 'expires_at' | 'last_accessed_at' | 'last_reauthenticated_at' | 'created_at' | 'updated_at';
+      export const UserSessionSortBy: {
+        readonly EXPIRES_AT: 'expires_at';
+        readonly LAST_ACCESSED_AT: 'last_accessed_at';
+        readonly LAST_REAUTHENTICATED_AT: 'last_reauthenticated_at';
+        readonly CREATED_AT: 'created_at';
+        readonly UPDATED_AT: 'updated_at';
+      };
+    }
+
     export function pagedResultSchema<T extends z.ZodTypeAny>(itemSchema: T): z.ZodObject<{
       items: z.ZodArray<T>;
       totalCount: z.ZodNumber;
@@ -867,14 +1437,6 @@ args: Record<string, string>;
     }
     export const apiErrorResponseSchema: z.ZodType<ApiErrorResponse>;
 
-    export interface ClientInfoPayload {
-        client_device_info: ClientDeviceInfoPayload;
-user_agent: string | null;
-ip_address: string | null;
-api_version: string | null;
-    }
-    export const clientInfoPayloadSchema: z.ZodType<ClientInfoPayload>;
-
     export interface ClientDeviceInfoPayload {
         client_type: ClientType | null;
 language: string | null;
@@ -932,46 +1494,6 @@ require_special_char: boolean;
     }
     export const openPasswordPolicyPayloadSchema: z.ZodType<OpenPasswordPolicyPayload>;
 
-    export interface ManagementSecuritySettingsPayload {
-        recent_authentication_validity_seconds_for_open_user: number;
-recent_authentication_validity_seconds_for_management_user: number;
-management_password_policy: ManagementPasswordPolicyPayload;
-otp_confirmation: OtpConfirmationPayload;
-account_lockout_policy: AccountLockoutPolicyPayload;
-account_lockout_check_interval_seconds: number;
-open_ip_restriction_policy: IpRestrictionPolicyPayload;
-management_ip_restriction_policy: IpRestrictionPolicyPayload;
-expiration_seconds: number;
-max_requests_per_period: number;
-rate_limit_period_seconds: number;
-refresh_token_rotation_grace_period_seconds: number;
-    }
-    export const managementSecuritySettingsPayloadSchema: z.ZodType<ManagementSecuritySettingsPayload>;
-
-    export interface OpenSecuritySettingsPayload {
-        open_password_policy: OpenPasswordPolicyPayload;
-otp_confirmation: OtpConfirmationPayload;
-    }
-    export const openSecuritySettingsPayloadSchema: z.ZodType<OpenSecuritySettingsPayload>;
-
-export interface TotpRecoveryCodesPayload {
-    totp_recovery_codes: string[];
-}
-export const totpRecoveryCodesPayloadSchema: z.ZodType<TotpRecoveryCodesPayload>;
-
-    export interface TotpSetupPayload {
-        totp_secret_key: string;
-totp_otp_auth_url: string;
-mfa_token: string;
-    }
-    export const totpSetupPayloadSchema: z.ZodType<TotpSetupPayload>;
-
-    export interface VerifyTotpPayload {
-        mfa_token: string;
-totp_code: string;
-    }
-    export const verifyTotpPayloadSchema: z.ZodType<VerifyTotpPayload>;
-
     export interface ManagementGlobalSettingsPayload {
         privacy_policy_url: string | null;
 terms_of_service_url: string | null;
@@ -991,82 +1513,19 @@ min_supported_app_versions: Record<string, string>;
     }
     export const openGlobalSettingsPayloadSchema: z.ZodType<OpenGlobalSettingsPayload>;
 
-    export interface AuditEventPayload {
-        id: AuditEventId;
-actor_id: UserId | null;
-actor_type: AuditActorType;
-actor_user_role: UserRole | null;
-action: string;
-resource: string;
-resource_id: string | null;
-status: AuditStatus;
-metadata: AuditEventMetadataPayload[];
-message: string | null;
-created_at: number;
-    }
-    export const auditEventPayloadSchema: z.ZodType<AuditEventPayload>;
-
     export interface AuditEventMetadataPayload {
         key: string;
 value: string;
-value_sensitivity: string;
+value_sensitivity: AuditValueSensitivity;
     }
     export const auditEventMetadataPayloadSchema: z.ZodType<AuditEventMetadataPayload>;
 
-    export interface AuthDataPayload {
-        user: UserDetailsPayload;
-session_token: SessionTokenPayload;
-    }
-    export const authDataPayloadSchema: z.ZodType<AuthDataPayload>;
-
     export interface AvailableAuthProvidersPayload {
         primary: string[];
 secondary: string[];
     }
     export const availableAuthProvidersPayloadSchema: z.ZodType<AvailableAuthProvidersPayload>;
 
-    export interface ManagementAuthSettingsPayload {
-        available_auth_providers: AvailableAuthProvidersPayload;
-max_total_identifiers: number;
-max_email_identifiers: number;
-max_phone_identifiers: number;
-max_identifiers_per_external_provider: number;
-max_active_sessions_for_open_user: number;
-max_active_sessions_for_management_user: number;
-access_token_validity_seconds: number;
-refresh_token_validity_seconds: number;
-account_deletion_grace_period_seconds: number;
-account_deletion_check_interval_seconds: number;
-is_registration_enabled: boolean;
-open_email_restriction_policy: EmailRestrictionPolicyPayload;
-management_email_restriction_policy: EmailRestrictionPolicyPayload;
-    }
-    export const managementAuthSettingsPayloadSchema: z.ZodType<ManagementAuthSettingsPayload>;
-
-    export interface OpenAuthSettingsPayload {
-        available_auth_providers: AvailableAuthProvidersPayload;
-max_total_identifiers: number;
-max_email_identifiers: number;
-max_phone_identifiers: number;
-max_identifiers_per_external_provider: number;
-is_registration_enabled: boolean;
-    }
-    export const openAuthSettingsPayloadSchema: z.ZodType<OpenAuthSettingsPayload>;
-
-    export interface ManagementUserConfigurationPayload {
-        management_global_settings: ManagementGlobalSettingsPayload;
-management_security_settings: ManagementSecuritySettingsPayload;
-management_auth_settings: ManagementAuthSettingsPayload;
-    }
-    export const managementUserConfigurationPayloadSchema: z.ZodType<ManagementUserConfigurationPayload>;
-
-    export interface OpenUserConfigurationPayload {
-        open_global_settings: OpenGlobalSettingsPayload;
-open_security_settings: OpenSecuritySettingsPayload;
-open_auth_settings: OpenAuthSettingsPayload;
-    }
-    export const openUserConfigurationPayloadSchema: z.ZodType<OpenUserConfigurationPayload>;
-
     export interface EmailRestrictionPolicyPayload {
         is_blacklist_enabled: boolean;
 blacklist: string[];
@@ -1075,49 +1534,6 @@ whitelist: string[];
     }
     export const emailRestrictionPolicyPayloadSchema: z.ZodType<EmailRestrictionPolicyPayload>;
 
-    export interface UserIdentifierPayload {
-        id: UserIdentifierId;
-user_id: UserId;
-user_auth_provider: UserAuthProvider;
-identifier: string;
-display_name: string;
-external_provider_email: string | null;
-is_sensitive_values_masked: boolean;
-created_at: number;
-updated_at: number | null;
-    }
-    export const userIdentifierPayloadSchema: z.ZodType<UserIdentifierPayload>;
-
-export interface DeletedSessionsPayload {
-    deleted_session_ids: string[];
-}
-export const deletedSessionsPayloadSchema: z.ZodType<DeletedSessionsPayload>;
-
-    export interface UserSessionPayload {
-        id: UserSessionId;
-user_id: UserId;
-user_role: UserRole;
-identifier: string;
-identifier_id: UserIdentifierId;
-identifier_display_name: string;
-identifier_auth_provider: UserAuthProvider;
-client_device_info: ClientDeviceInfoPayload;
-user_agent: string | null;
-ip_address: string | null;
-expires_at: number;
-last_accessed_at: number;
-last_reauthenticated_at: number;
-is_sensitive_values_masked: boolean;
-created_at: number;
-updated_at: number | null;
-    }
-    export const userSessionPayloadSchema: z.ZodType<UserSessionPayload>;
-
-export interface RefreshTokenPayload {
-    refresh_token: string;
-}
-export const refreshTokenPayloadSchema: z.ZodType<RefreshTokenPayload>;
-
     export interface SessionTokenPayload {
         access_token: string;
 refresh_token: string;
@@ -1153,6 +1569,47 @@ account_status: UserAccountStatus;
     }
     export const userPublicPayloadSchema: z.ZodType<UserPublicPayload>;
 
+    export interface UserIdentifierPayload {
+        id: UserIdentifierId;
+user_id: UserId;
+user_auth_provider: UserAuthProvider;
+identifier: string;
+display_name: string;
+external_provider_email: string | null;
+is_sensitive_values_masked: boolean;
+created_at: number;
+updated_at: number | null;
+    }
+    export const userIdentifierPayloadSchema: z.ZodType<UserIdentifierPayload>;
+
+export interface DeletedSessionsPayload {
+    deleted_session_ids: string[];
+}
+export const deletedSessionsPayloadSchema: z.ZodType<DeletedSessionsPayload>;
+
+export interface RefreshTokenPayload {
+    refresh_token: string;
+}
+export const refreshTokenPayloadSchema: z.ZodType<RefreshTokenPayload>;
+
+export interface TotpRecoveryCodesPayload {
+    totp_recovery_codes: string[];
+}
+export const totpRecoveryCodesPayloadSchema: z.ZodType<TotpRecoveryCodesPayload>;
+
+    export interface TotpSetupPayload {
+        totp_secret_key: string;
+totp_otp_auth_url: string;
+mfa_token: string;
+    }
+    export const totpSetupPayloadSchema: z.ZodType<TotpSetupPayload>;
+
+    export interface VerifyTotpPayload {
+        mfa_token: string;
+totp_code: string;
+    }
+    export const verifyTotpPayloadSchema: z.ZodType<VerifyTotpPayload>;
+
     export interface SocketFrame {
         id: UserId;
 type: string;
@@ -1173,6 +1630,119 @@ api_version: string | null;
     }
     export const webSocketInitializePayloadSchema: z.ZodType<WebSocketInitializePayload>;
 
+    export interface ClientInfoPayload {
+        client_device_info: ClientDeviceInfoPayload;
+user_agent: string | null;
+ip_address: string | null;
+api_version: string | null;
+    }
+    export const clientInfoPayloadSchema: z.ZodType<ClientInfoPayload>;
+
+    export interface UserSessionPayload {
+        id: UserSessionId;
+user_id: UserId;
+user_role: UserRole;
+identifier: string;
+identifier_id: UserIdentifierId;
+identifier_display_name: string;
+identifier_auth_provider: UserAuthProvider;
+client_device_info: ClientDeviceInfoPayload;
+user_agent: string | null;
+ip_address: string | null;
+expires_at: number;
+last_accessed_at: number;
+last_reauthenticated_at: number;
+is_sensitive_values_masked: boolean;
+created_at: number;
+updated_at: number | null;
+    }
+    export const userSessionPayloadSchema: z.ZodType<UserSessionPayload>;
+
+    export interface AuditEventPayload {
+        id: AuditEventId;
+actor_id: UserId | null;
+actor_type: AuditActorType;
+actor_user_role: UserRole | null;
+action: string;
+resource: string;
+resource_id: string | null;
+status: AuditStatus;
+metadata: AuditEventMetadataPayload[];
+message: string | null;
+created_at: number;
+    }
+    export const auditEventPayloadSchema: z.ZodType<AuditEventPayload>;
+
+    export interface AuthDataPayload {
+        user: UserDetailsPayload;
+session_token: SessionTokenPayload;
+    }
+    export const authDataPayloadSchema: z.ZodType<AuthDataPayload>;
+
+    export interface ManagementAuthSettingsPayload {
+        available_auth_providers: AvailableAuthProvidersPayload;
+max_total_identifiers: number;
+max_email_identifiers: number;
+max_phone_identifiers: number;
+max_identifiers_per_external_provider: number;
+max_active_sessions_for_open_user: number;
+max_active_sessions_for_management_user: number;
+access_token_validity_seconds: number;
+refresh_token_validity_seconds: number;
+account_deletion_grace_period_seconds: number;
+account_deletion_check_interval_seconds: number;
+is_registration_enabled: boolean;
+open_email_restriction_policy: EmailRestrictionPolicyPayload;
+management_email_restriction_policy: EmailRestrictionPolicyPayload;
+    }
+    export const managementAuthSettingsPayloadSchema: z.ZodType<ManagementAuthSettingsPayload>;
+
+    export interface OpenAuthSettingsPayload {
+        available_auth_providers: AvailableAuthProvidersPayload;
+max_total_identifiers: number;
+max_email_identifiers: number;
+max_phone_identifiers: number;
+max_identifiers_per_external_provider: number;
+is_registration_enabled: boolean;
+    }
+    export const openAuthSettingsPayloadSchema: z.ZodType<OpenAuthSettingsPayload>;
+
+    export interface ManagementSecuritySettingsPayload {
+        recent_authentication_validity_seconds_for_open_user: number;
+recent_authentication_validity_seconds_for_management_user: number;
+management_password_policy: ManagementPasswordPolicyPayload;
+otp_confirmation: OtpConfirmationPayload;
+account_lockout_policy: AccountLockoutPolicyPayload;
+account_lockout_check_interval_seconds: number;
+open_ip_restriction_policy: IpRestrictionPolicyPayload;
+management_ip_restriction_policy: IpRestrictionPolicyPayload;
+expiration_seconds: number;
+max_requests_per_period: number;
+rate_limit_period_seconds: number;
+refresh_token_rotation_grace_period_seconds: number;
+    }
+    export const managementSecuritySettingsPayloadSchema: z.ZodType<ManagementSecuritySettingsPayload>;
+
+    export interface OpenSecuritySettingsPayload {
+        open_password_policy: OpenPasswordPolicyPayload;
+otp_confirmation: OtpConfirmationPayload;
+    }
+    export const openSecuritySettingsPayloadSchema: z.ZodType<OpenSecuritySettingsPayload>;
+
+    export interface ManagementUserConfigurationPayload {
+        management_global_settings: ManagementGlobalSettingsPayload;
+management_security_settings: ManagementSecuritySettingsPayload;
+management_auth_settings: ManagementAuthSettingsPayload;
+    }
+    export const managementUserConfigurationPayloadSchema: z.ZodType<ManagementUserConfigurationPayload>;
+
+    export interface OpenUserConfigurationPayload {
+        open_global_settings: OpenGlobalSettingsPayload;
+open_security_settings: OpenSecuritySettingsPayload;
+open_auth_settings: OpenAuthSettingsPayload;
+    }
+    export const openUserConfigurationPayloadSchema: z.ZodType<OpenUserConfigurationPayload>;
+
     export interface CreateByEmailRequest {
         email: string;
 password: string | null;