@noresponse/node 1.0.1 → 2.0.1

package/dist/esm/models/assessment.d.ts

@@ -0,0 +1,85 @@
+import * as z from "zod/v4-mini";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { AssessmentTiming } from "./assessment-timing.js";
+import { Confidence } from "./confidence.js";
+import { SDKValidationError } from "./errors/sdk-validation-error.js";
+import { IncompleteSource } from "./incomplete-source.js";
+import { Recommendation } from "./recommendation.js";
+import { Risk } from "./risk.js";
+import { Signal } from "./signal.js";
+import { Status } from "./status.js";
+/**
+ * One assessment of one account, as POST /v1/assessments, GET /v1/assessments/{assessment_id} and the assessment.updated webhook return it. status says whether it is final (complete), usable with a source still running (partial) or not yet usable (pending). risk and recommendation are present for complete and partial; assessment_url is present for pending. Keep the highest assessment_version.
+ */
+export type Assessment = {
+    /**
+     * Version of the body shape.
+     */
+    schemaVersion: "1";
+    /**
+     * Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the tenant; another tenant's assessment id answers 404.
+     */
+    assessmentId: string;
+    /**
+     * Your own opaque identifier for the account being checked, scoped to your tenant. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused, as is a JWT; a hex digest such as a SHA-256 is allowed. It travels only in request bodies.
+     */
+    accountId: string;
+    /**
+     * An optional provider correlation id, echoed back. It is not an idempotency key. Refuses an exact-shape JWT or a bare 40, 64 or 128 character hex digest; a UUID is accepted.
+     */
+    requestId?: string | undefined;
+    /**
+     * complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook.
+     */
+    status: Status;
+    /**
+     * The recommended action: allow, step_up or review. Your application applies it.
+     */
+    recommendation?: Recommendation | undefined;
+    /**
+     * Ordinal confidence in the recommendation under the current policy: low, medium, high or unavailable.
+     */
+    confidence: Confidence;
+    /**
+     * The one risk decision for this event. score is 0 (safe) to 100 (risky): the sum of the weights of the reasons that fired, clamped to 0 to 100, from hand-set versioned weights. Every answer with a recommendation carries it, and the top-level recommendation equals risk.recommendation. It names no source or provider.
+     */
+    risk?: Risk | undefined;
+    /**
+     * Detailed view only (response_mode=detailed, which needs the detailed scope): a standard answer omits signals[], and a detailed one always carries it, possibly empty. The body does not name its mode, so that rule is the serving gate's; the schema states the half it can: an answer with risk.details is a detailed view and carries signals[]. At most one signal per (type, source_id, identifier).
+     */
+    signals?: Array<Signal> | undefined;
+    /**
+     * The lanes that did not settle, each listed once with a reason; lanes, not sources. In a detailed view a lane is listed exactly when one of its signals did not settle; a standard view carries no signals to match.
+     */
+    incompleteSources: Array<IncompleteSource>;
+    /**
+     * Version of the hand-authored heuristic weights that produced the recommendation, for example 'risk-2026-10.7'. A tenant threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'.
+     */
+    policyVersion: string;
+    /**
+     * Labels the v0 policy as hand-authored and not statistically validated.
+     */
+    policyBasis: "heuristic_unvalidated";
+    /**
+     * Monotonic revision of this assessment. 1 on the synchronous answer; each material change while the assessment is served (an async continuation settling a source, a change of recommendation, confidence or status) increments it. Expiry does not increment it: an expired assessment is gone, not revised, and the expiry webhook carries the last served version.
+     */
+    assessmentVersion: number;
+    /**
+     * When the assessment was created. Fixed for the life of the assessment: every revision carries the same created_at.
+     */
+    createdAt: string;
+    updatedAt: string;
+    /**
+     * After this instant the assessment is no longer served: GET /v1/assessments/{assessment_id} answers 404 and it leaves the account history. It is created_at plus your retention period at creation (default and maximum 365 days) and is fixed per record: a later revision keeps it, and a new assessment for the same account starts its own clock. If you later shorten retention, the effective expiry becomes created_at plus the shorter of the two periods.
+     */
+    expiresAt: string;
+    /**
+     * Server-relative path of the authoritative assessment, GET /v1/assessments/{assessment_id}.
+     */
+    assessmentUrl?: string | undefined;
+    timing: AssessmentTiming;
+};
+/** @internal */
+export declare const Assessment$inboundSchema: z.ZodMiniType<Assessment, unknown>;
+export declare function assessmentFromJSON(jsonString: string): SafeParseResult<Assessment, SDKValidationError>;
+//# sourceMappingURL=assessment.d.ts.map

package/dist/esm/models/assessment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessment.d.ts","sourceRoot":"","sources":["../../../src/models/assessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EACL,gBAAgB,EAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAA4B,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,gBAAgB,EAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,EAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,MAAM,EAAwB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAwB,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,aAAa,EAAE,GAAG,CAAC;IACnB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C;;OAEG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;OAEG;IACH,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxB;;OAEG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC3C;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,WAAW,EAAE,uBAAuB,CAAC;IACrC;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,MAAM,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAsCrE,CAAC;AAEJ,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAMjD"}

package/dist/esm/models/assessment.js

@@ -0,0 +1,52 @@
+import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import * as types from "../types/primitives.js";
+import { AssessmentTiming$inboundSchema, } from "./assessment-timing.js";
+import { Confidence$inboundSchema } from "./confidence.js";
+import { IncompleteSource$inboundSchema, } from "./incomplete-source.js";
+import { Recommendation$inboundSchema, } from "./recommendation.js";
+import { Risk$inboundSchema } from "./risk.js";
+import { Signal$inboundSchema } from "./signal.js";
+import { Status$inboundSchema } from "./status.js";
+/** @internal */
+export const Assessment$inboundSchema = z
+    .pipe(z.object({
+    schema_version: types.literal("1"),
+    assessment_id: types.string(),
+    account_id: types.string(),
+    request_id: types.optional(types.string()),
+    status: Status$inboundSchema,
+    recommendation: types.optional(Recommendation$inboundSchema),
+    confidence: Confidence$inboundSchema,
+    risk: types.optional(Risk$inboundSchema),
+    signals: types.optional(z.array(Signal$inboundSchema)),
+    incomplete_sources: z.array(IncompleteSource$inboundSchema),
+    policy_version: types.string(),
+    policy_basis: types.literal("heuristic_unvalidated"),
+    assessment_version: types.number(),
+    created_at: types.string(),
+    updated_at: types.string(),
+    expires_at: types.string(),
+    assessment_url: types.optional(types.string()),
+    timing: AssessmentTiming$inboundSchema,
+}), z.transform((v) => {
+    return remap$(v, {
+        "schema_version": "schemaVersion",
+        "assessment_id": "assessmentId",
+        "account_id": "accountId",
+        "request_id": "requestId",
+        "incomplete_sources": "incompleteSources",
+        "policy_version": "policyVersion",
+        "policy_basis": "policyBasis",
+        "assessment_version": "assessmentVersion",
+        "created_at": "createdAt",
+        "updated_at": "updatedAt",
+        "expires_at": "expiresAt",
+        "assessment_url": "assessmentUrl",
+    });
+}));
+export function assessmentFromJSON(jsonString) {
+    return safeParse(jsonString, (x) => Assessment$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'Assessment' from JSON`);
+}
+//# sourceMappingURL=assessment.js.map

package/dist/esm/models/assessment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessment.js","sourceRoot":"","sources":["../../../src/models/assessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAEL,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAc,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EAEL,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAQ,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAU,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAU,oBAAoB,EAAE,MAAM,aAAa,CAAC;AA0E3D,gBAAgB;AAChB,MAAM,CAAC,MAAM,wBAAwB,GAAuC,CAAC;KAC1E,IAAI,CACH,CAAC,CAAC,MAAM,CAAC;IACP,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;IAClC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE;IAC7B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1C,MAAM,EAAE,oBAAoB;IAC5B,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC5D,UAAU,EAAE,wBAAwB;IACpC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACxC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;IAC3D,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACpD,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE;IAClC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9C,MAAM,EAAE,8BAA8B;CACvC,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,gBAAgB,EAAE,eAAe;QACjC,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,WAAW;QACzB,oBAAoB,EAAE,mBAAmB;QACzC,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;QAC7B,oBAAoB,EAAE,mBAAmB;QACzC,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,WAAW;QACzB,gBAAgB,EAAE,eAAe;KAClC,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEJ,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAC+B;IACjD,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACpD,wCAAwC,CACzC,CAAC;AAAA,CACH"}

package/dist/esm/models/assurance-level.d.ts

@@ -0,0 +1,18 @@
+import * as z from "zod/v4-mini";
+import { ClosedEnum } from "../types/enums.js";
+/**
+ * Provider or OIDC assurance level, when the customer has mapped one.
+ */
+export declare const AssuranceLevel: {
+    readonly Unknown: "unknown";
+    readonly Low: "low";
+    readonly Medium: "medium";
+    readonly High: "high";
+};
+/**
+ * Provider or OIDC assurance level, when the customer has mapped one.
+ */
+export type AssuranceLevel = ClosedEnum<typeof AssuranceLevel>;
+/** @internal */
+export declare const AssuranceLevel$outboundSchema: z.ZodMiniEnum<typeof AssuranceLevel>;
+//# sourceMappingURL=assurance-level.d.ts.map

package/dist/esm/models/assurance-level.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assurance-level.d.ts","sourceRoot":"","sources":["../../../src/models/assurance-level.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AAE/D,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,WAAW,CACvD,OAAO,cAAc,CACG,CAAC"}

package/dist/esm/models/assurance-level.js

@@ -0,0 +1,13 @@
+import * as z from "zod/v4-mini";
+/**
+ * Provider or OIDC assurance level, when the customer has mapped one.
+ */
+export const AssuranceLevel = {
+    Unknown: "unknown",
+    Low: "low",
+    Medium: "medium",
+    High: "high",
+};
+/** @internal */
+export const AssuranceLevel$outboundSchema = z.enum(AssuranceLevel);
+//# sourceMappingURL=assurance-level.js.map

package/dist/esm/models/assurance-level.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assurance-level.js","sourceRoot":"","sources":["../../../src/models/assurance-level.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;CACJ,CAAC;AAMX,gBAAgB;AAChB,MAAM,CAAC,MAAM,6BAA6B,GAEtC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC"}

package/dist/esm/models/auth-context-mfa.d.ts

@@ -0,0 +1,19 @@
+import * as z from "zod/v4-mini";
+/**
+ * Normalized multi-factor evidence from a verified provider session.
+ */
+export type AuthContextMfa = {
+    present?: boolean | undefined;
+    methods?: Array<string> | undefined;
+    ageSeconds?: number | undefined;
+};
+/** @internal */
+export type AuthContextMfa$Outbound = {
+    present?: boolean | undefined;
+    methods?: Array<string> | undefined;
+    age_seconds?: number | undefined;
+};
+/** @internal */
+export declare const AuthContextMfa$outboundSchema: z.ZodMiniType<AuthContextMfa$Outbound, AuthContextMfa>;
+export declare function authContextMfaToJSON(authContextMfa: AuthContextMfa): string;
+//# sourceMappingURL=auth-context-mfa.d.ts.map

package/dist/esm/models/auth-context-mfa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context-mfa.d.ts","sourceRoot":"","sources":["../../../src/models/auth-context-mfa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,WAAW,CACvD,uBAAuB,EACvB,cAAc,CAYf,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,cAAc,GAAG,MAAM,CAE3E"}

package/dist/esm/models/auth-context-mfa.js

@@ -0,0 +1,16 @@
+import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
+/** @internal */
+export const AuthContextMfa$outboundSchema = z.pipe(z.object({
+    present: z.optional(z.boolean()),
+    methods: z.optional(z.array(z.string())),
+    ageSeconds: z.optional(z.int()),
+}), z.transform((v) => {
+    return remap$(v, {
+        ageSeconds: "age_seconds",
+    });
+}));
+export function authContextMfaToJSON(authContextMfa) {
+    return JSON.stringify(AuthContextMfa$outboundSchema.parse(authContextMfa));
+}
+//# sourceMappingURL=auth-context-mfa.js.map

package/dist/esm/models/auth-context-mfa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context-mfa.js","sourceRoot":"","sources":["../../../src/models/auth-context-mfa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAkBvD,gBAAgB;AAChB,MAAM,CAAC,MAAM,6BAA6B,GAGtC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;CAChC,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,UAAU,EAAE,aAAa;KAC1B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,cAA8B,EAAU;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AAAA,CAC5E"}

package/dist/esm/models/auth-context.d.ts

@@ -0,0 +1,131 @@
+import * as z from "zod/v4-mini";
+import { AssuranceLevel } from "./assurance-level.js";
+import { AuthContextMfa, AuthContextMfa$Outbound } from "./auth-context-mfa.js";
+import { Transport } from "./transport.js";
+/**
+ * Normalised claims from a session your backend has already verified with WorkOS, Clerk, Auth0 or any OIDC provider. Pass the output of the SDK's auth adapters, not a raw token.
+ */
+export type AuthContext = {
+    /**
+     * Lowercase provider slug. WorkOS, Clerk and Auth0 have first-class adapters; every other provider uses a customer-specific OIDC slug. Provider brand is metadata; it does not change risk by itself.
+     */
+    provider: string;
+    /**
+     * The verified token issuer, normally the provider's HTTPS issuer URL.
+     */
+    issuer: string;
+    /**
+     * The verified audience/resource identifier used by the customer's API. Use audiences when the provider emits multiple values.
+     */
+    audience?: string | undefined;
+    /**
+     * All verified audience/resource identifiers from an OAuth or OIDC token. The first value may also be copied to audience for simple integrations.
+     */
+    audiences?: Array<string> | undefined;
+    /**
+     * The verified stable subject identifier (`sub`), opaque to NoResponse.
+     */
+    subject: string;
+    /**
+     * The verified session identifier (`sid` or provider equivalent).
+     */
+    sessionId?: string | undefined;
+    /**
+     * The active organization or workspace identifier, when the provider issued one.
+     */
+    organizationId?: string | undefined;
+    /**
+     * The provider tenant identifier, when distinct from organization_id.
+     */
+    tenantId?: string | undefined;
+    /**
+     * The verified token identifier (`jti`), used for replay and rotation correlation.
+     */
+    tokenId?: string | undefined;
+    /**
+     * Verified token issue time (`iat`).
+     */
+    issuedAt?: string | undefined;
+    /**
+     * Verified token expiry (`exp`).
+     */
+    expiresAt?: string | undefined;
+    /**
+     * Creation time of the provider session from the verified backend session record (for example Clerk Session.createdAt or WorkOS Session.created_at). This is separate from token issuance and auth_time.
+     */
+    sessionCreatedAt?: string | undefined;
+    /**
+     * Verified end-user authentication time (`auth_time`), when present.
+     */
+    authTime?: string | undefined;
+    /**
+     * Account creation time from the customer's verified provider record, when available.
+     */
+    accountCreatedAt?: string | undefined;
+    /**
+     * Whether the customer's provider asserts that the email identifier was verified.
+     */
+    emailVerified?: boolean | undefined;
+    /**
+     * Whether the customer's provider asserts that the phone identifier was verified.
+     */
+    phoneVerified?: boolean | undefined;
+    /**
+     * Provider or OIDC assurance level, when the customer has mapped one.
+     */
+    assuranceLevel?: AssuranceLevel | undefined;
+    /**
+     * Whether the verified session is acting on behalf of another subject.
+     */
+    impersonated?: boolean | undefined;
+    /**
+     * Where the customer derived this context. Backend is the trusted integration path; browser values are treated as weak hints.
+     */
+    transport?: Transport | undefined;
+    /**
+     * Whether the customer completed signature, issuer, audience and expiry validation before calling NoResponse. False contexts are accepted only as weak hints.
+     */
+    verified: boolean;
+    /**
+     * Normalized multi-factor evidence from a verified provider session.
+     */
+    mfa?: AuthContextMfa | undefined;
+    /**
+     * Bounded role slugs from the verified provider; roles do not change risk by themselves.
+     */
+    roles?: Array<string> | undefined;
+    /**
+     * Bounded scopes from the verified access token; scopes do not change risk by themselves.
+     */
+    scopes?: Array<string> | undefined;
+};
+/** @internal */
+export type AuthContext$Outbound = {
+    provider: string;
+    issuer: string;
+    audience?: string | undefined;
+    audiences?: Array<string> | undefined;
+    subject: string;
+    session_id?: string | undefined;
+    organization_id?: string | undefined;
+    tenant_id?: string | undefined;
+    token_id?: string | undefined;
+    issued_at?: string | undefined;
+    expires_at?: string | undefined;
+    session_created_at?: string | undefined;
+    auth_time?: string | undefined;
+    account_created_at?: string | undefined;
+    email_verified?: boolean | undefined;
+    phone_verified?: boolean | undefined;
+    assurance_level?: string | undefined;
+    impersonated?: boolean | undefined;
+    transport?: string | undefined;
+    verified: boolean;
+    mfa?: AuthContextMfa$Outbound | undefined;
+    roles?: Array<string> | undefined;
+    scopes?: Array<string> | undefined;
+};
+/** @internal */
+export declare const AuthContext$outboundSchema: z.ZodMiniType<AuthContext$Outbound, AuthContext>;
+export declare function authContextToJSON(authContext: AuthContext): string;
+//# sourceMappingURL=auth-context.d.ts.map

package/dist/esm/models/auth-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.d.ts","sourceRoot":"","sources":["../../../src/models/auth-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,uBAAuB,EAExB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAA4B,MAAM,gBAAgB,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;OAEG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC;;OAEG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,GAAG,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACjC;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,WAAW,CACpD,oBAAoB,EACpB,WAAW,CA2CZ,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAElE"}

package/dist/esm/models/auth-context.js

@@ -0,0 +1,50 @@
+import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
+import { AssuranceLevel$outboundSchema, } from "./assurance-level.js";
+import { AuthContextMfa$outboundSchema, } from "./auth-context-mfa.js";
+import { Transport$outboundSchema } from "./transport.js";
+/** @internal */
+export const AuthContext$outboundSchema = z.pipe(z.object({
+    provider: z.string(),
+    issuer: z.string(),
+    audience: z.optional(z.string()),
+    audiences: z.optional(z.array(z.string())),
+    subject: z.string(),
+    sessionId: z.optional(z.string()),
+    organizationId: z.optional(z.string()),
+    tenantId: z.optional(z.string()),
+    tokenId: z.optional(z.string()),
+    issuedAt: z.optional(z.string()),
+    expiresAt: z.optional(z.string()),
+    sessionCreatedAt: z.optional(z.string()),
+    authTime: z.optional(z.string()),
+    accountCreatedAt: z.optional(z.string()),
+    emailVerified: z.optional(z.boolean()),
+    phoneVerified: z.optional(z.boolean()),
+    assuranceLevel: z.optional(AssuranceLevel$outboundSchema),
+    impersonated: z.optional(z.boolean()),
+    transport: z.optional(Transport$outboundSchema),
+    verified: z.boolean(),
+    mfa: z.optional(AuthContextMfa$outboundSchema),
+    roles: z.optional(z.array(z.string())),
+    scopes: z.optional(z.array(z.string())),
+}), z.transform((v) => {
+    return remap$(v, {
+        sessionId: "session_id",
+        organizationId: "organization_id",
+        tenantId: "tenant_id",
+        tokenId: "token_id",
+        issuedAt: "issued_at",
+        expiresAt: "expires_at",
+        sessionCreatedAt: "session_created_at",
+        authTime: "auth_time",
+        accountCreatedAt: "account_created_at",
+        emailVerified: "email_verified",
+        phoneVerified: "phone_verified",
+        assuranceLevel: "assurance_level",
+    });
+}));
+export function authContextToJSON(authContext) {
+    return JSON.stringify(AuthContext$outboundSchema.parse(authContext));
+}
+//# sourceMappingURL=auth-context.js.map

package/dist/esm/models/auth-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.js","sourceRoot":"","sources":["../../../src/models/auth-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAa,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AA+HrE,gBAAgB;AAChB,MAAM,CAAC,MAAM,0BAA0B,GAGnC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACtC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACtC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACzD,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CACxC,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,cAAc,EAAE,iBAAiB;QACjC,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,oBAAoB;QACtC,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,oBAAoB;QACtC,aAAa,EAAE,gBAAgB;QAC/B,aAAa,EAAE,gBAAgB;QAC/B,cAAc,EAAE,iBAAiB;KAClC,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,WAAwB,EAAU;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;AAAA,CACtE"}

package/dist/esm/models/authentication-error-code.d.ts

@@ -0,0 +1,15 @@
+import * as z from "zod/v4-mini";
+import { OpenEnum } from "../types/enums.js";
+/**
+ * Machine codes an HTTP 401 answer can carry.
+ */
+export declare const AuthenticationErrorCode: {
+    readonly Unauthorized: "unauthorized";
+};
+/**
+ * Machine codes an HTTP 401 answer can carry.
+ */
+export type AuthenticationErrorCode = OpenEnum<typeof AuthenticationErrorCode>;
+/** @internal */
+export declare const AuthenticationErrorCode$inboundSchema: z.ZodMiniType<AuthenticationErrorCode, unknown>;
+//# sourceMappingURL=authentication-error-code.d.ts.map

package/dist/esm/models/authentication-error-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-error-code.d.ts","sourceRoot":"","sources":["../../../src/models/authentication-error-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,uBAAuB;;CAE1B,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE/E,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,WAAW,CAC/D,uBAAuB,EACvB,OAAO,CAC2C,CAAC"}

package/dist/esm/models/authentication-error-code.js

@@ -0,0 +1,10 @@
+import * as openEnums from "../types/enums.js";
+/**
+ * Machine codes an HTTP 401 answer can carry.
+ */
+export const AuthenticationErrorCode = {
+    Unauthorized: "unauthorized",
+};
+/** @internal */
+export const AuthenticationErrorCode$inboundSchema = openEnums.inboundSchema(AuthenticationErrorCode);
+//# sourceMappingURL=authentication-error-code.js.map

package/dist/esm/models/authentication-error-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-error-code.js","sourceRoot":"","sources":["../../../src/models/authentication-error-code.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,YAAY,EAAE,cAAc;CACpB,CAAC;AAMX,gBAAgB;AAChB,MAAM,CAAC,MAAM,qCAAqC,GAG9C,SAAS,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC"}

package/dist/esm/models/bad-request-error-code.d.ts

@@ -0,0 +1,17 @@
+import * as z from "zod/v4-mini";
+import { OpenEnum } from "../types/enums.js";
+/**
+ * Machine codes an HTTP 400 answer can carry.
+ */
+export declare const BadRequestErrorCode: {
+    readonly InvalidRequest: "invalid_request";
+    readonly InvalidIdempotencyKey: "invalid_idempotency_key";
+    readonly InvalidCursor: "invalid_cursor";
+};
+/**
+ * Machine codes an HTTP 400 answer can carry.
+ */
+export type BadRequestErrorCode = OpenEnum<typeof BadRequestErrorCode>;
+/** @internal */
+export declare const BadRequestErrorCode$inboundSchema: z.ZodMiniType<BadRequestErrorCode, unknown>;
+//# sourceMappingURL=bad-request-error-code.d.ts.map

package/dist/esm/models/bad-request-error-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bad-request-error-code.d.ts","sourceRoot":"","sources":["../../../src/models/bad-request-error-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE,gBAAgB;AAChB,eAAO,MAAM,iCAAiC,EAAE,CAAC,CAAC,WAAW,CAC3D,mBAAmB,EACnB,OAAO,CACuC,CAAC"}

package/dist/esm/models/bad-request-error-code.js

@@ -0,0 +1,12 @@
+import * as openEnums from "../types/enums.js";
+/**
+ * Machine codes an HTTP 400 answer can carry.
+ */
+export const BadRequestErrorCode = {
+    InvalidRequest: "invalid_request",
+    InvalidIdempotencyKey: "invalid_idempotency_key",
+    InvalidCursor: "invalid_cursor",
+};
+/** @internal */
+export const BadRequestErrorCode$inboundSchema = openEnums.inboundSchema(BadRequestErrorCode);
+//# sourceMappingURL=bad-request-error-code.js.map

package/dist/esm/models/bad-request-error-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bad-request-error-code.js","sourceRoot":"","sources":["../../../src/models/bad-request-error-code.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc,EAAE,iBAAiB;IACjC,qBAAqB,EAAE,yBAAyB;IAChD,aAAa,EAAE,gBAAgB;CACvB,CAAC;AAMX,gBAAgB;AAChB,MAAM,CAAC,MAAM,iCAAiC,GAG1C,SAAS,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/esm/models/band.d.ts

@@ -0,0 +1,18 @@
+import * as z from "zod/v4-mini";
+import { OpenEnum } from "../types/enums.js";
+/**
+ * low 0-29, medium 30-59, high 60-84, critical 85-100.
+ */
+export declare const Band: {
+    readonly Low: "low";
+    readonly Medium: "medium";
+    readonly High: "high";
+    readonly Critical: "critical";
+};
+/**
+ * low 0-29, medium 30-59, high 60-84, critical 85-100.
+ */
+export type Band = OpenEnum<typeof Band>;
+/** @internal */
+export declare const Band$inboundSchema: z.ZodMiniType<Band, unknown>;
+//# sourceMappingURL=band.d.ts.map

package/dist/esm/models/band.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"band.d.ts","sourceRoot":"","sources":["../../../src/models/band.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,IAAI;;;;;CAKP,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;AAEzC,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CACtC,CAAC"}

package/dist/esm/models/band.js

@@ -0,0 +1,14 @@
+import * as openEnums from "../types/enums.js";
+/**
+ * low 0-29, medium 30-59, high 60-84, critical 85-100.
+ */
+export const Band = {
+    Low: "low",
+    Medium: "medium",
+    High: "high",
+    Critical: "critical",
+};
+/** @internal */
+export const Band$inboundSchema = openEnums
+    .inboundSchema(Band);
+//# sourceMappingURL=band.js.map

package/dist/esm/models/band.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"band.js","sourceRoot":"","sources":["../../../src/models/band.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAC;AAMX,gBAAgB;AAChB,MAAM,CAAC,MAAM,kBAAkB,GAAiC,SAAS;KACtE,aAAa,CAAC,IAAI,CAAC,CAAC"}

package/dist/esm/models/breach-exposed.d.ts

@@ -0,0 +1,25 @@
+import * as z from "zod/v4-mini";
+import { OpenEnum } from "../types/enums.js";
+/**
+ * The kind of data a breach table held beside the identifier. password means a plaintext password was present and password_hash means a hash, salt or token was present. The value itself is not stored or returned; the schema has no member for one.
+ */
+export declare const BreachExposed: {
+    readonly Email: "email";
+    readonly Username: "username";
+    readonly Name: "name";
+    readonly Password: "password";
+    readonly PasswordHash: "password_hash";
+    readonly Phone: "phone";
+    readonly Address: "address";
+    readonly Dob: "dob";
+    readonly Ip: "ip";
+    readonly Payment: "payment";
+    readonly SecurityQa: "security_qa";
+};
+/**
+ * The kind of data a breach table held beside the identifier. password means a plaintext password was present and password_hash means a hash, salt or token was present. The value itself is not stored or returned; the schema has no member for one.
+ */
+export type BreachExposed = OpenEnum<typeof BreachExposed>;
+/** @internal */
+export declare const BreachExposed$inboundSchema: z.ZodMiniType<BreachExposed, unknown>;
+//# sourceMappingURL=breach-exposed.d.ts.map

package/dist/esm/models/breach-exposed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"breach-exposed.d.ts","sourceRoot":"","sources":["../../../src/models/breach-exposed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;CAYhB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,WAAW,CACrD,aAAa,EACb,OAAO,CACiC,CAAC"}

package/dist/esm/models/breach-exposed.js

@@ -0,0 +1,20 @@
+import * as openEnums from "../types/enums.js";
+/**
+ * The kind of data a breach table held beside the identifier. password means a plaintext password was present and password_hash means a hash, salt or token was present. The value itself is not stored or returned; the schema has no member for one.
+ */
+export const BreachExposed = {
+    Email: "email",
+    Username: "username",
+    Name: "name",
+    Password: "password",
+    PasswordHash: "password_hash",
+    Phone: "phone",
+    Address: "address",
+    Dob: "dob",
+    Ip: "ip",
+    Payment: "payment",
+    SecurityQa: "security_qa",
+};
+/** @internal */
+export const BreachExposed$inboundSchema = openEnums.inboundSchema(BreachExposed);
+//# sourceMappingURL=breach-exposed.js.map

package/dist/esm/models/breach-exposed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"breach-exposed.js","sourceRoot":"","sources":["../../../src/models/breach-exposed.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,YAAY,EAAE,eAAe;IAC7B,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,aAAa;CACjB,CAAC;AAMX,gBAAgB;AAChB,MAAM,CAAC,MAAM,2BAA2B,GAGpC,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC"}

package/dist/esm/models/breach-kind.d.ts

@@ -0,0 +1,21 @@
+import * as z from "zod/v4-mini";
+import { OpenEnum } from "../types/enums.js";
+/**
+ * Who is in the table: site_breach, a site's own users; credential_list, a combolist or compilation; stealer_log, malware or botnet victims; scrape; hacking_forum, a criminal hacking, cracking or carding community; abuse_service, the customers of DDoS-for-hire, account generators, dump or card shops, darknet markets, stalkerware or breach-lookup services; darkweb_site, an onion site of unknown purpose.
+ */
+export declare const BreachKind: {
+    readonly SiteBreach: "site_breach";
+    readonly CredentialList: "credential_list";
+    readonly StealerLog: "stealer_log";
+    readonly Scrape: "scrape";
+    readonly HackingForum: "hacking_forum";
+    readonly AbuseService: "abuse_service";
+    readonly DarkwebSite: "darkweb_site";
+};
+/**
+ * Who is in the table: site_breach, a site's own users; credential_list, a combolist or compilation; stealer_log, malware or botnet victims; scrape; hacking_forum, a criminal hacking, cracking or carding community; abuse_service, the customers of DDoS-for-hire, account generators, dump or card shops, darknet markets, stalkerware or breach-lookup services; darkweb_site, an onion site of unknown purpose.
+ */
+export type BreachKind = OpenEnum<typeof BreachKind>;
+/** @internal */
+export declare const BreachKind$inboundSchema: z.ZodMiniType<BreachKind, unknown>;
+//# sourceMappingURL=breach-kind.d.ts.map