@openora/core 0.4.1-canary.14 → 0.4.1-canary.141

package/dist/pam/identity/router/index.d.ts

@@ -1,16 +1,37 @@
 import { type OssContext, AdminGuard, type EventBus } from '@openora/core/server';
+import { PhoneLoginService } from '../service/phone-login.service.js';
+import { PhoneVerificationService } from '../service/phone-verification.service.js';
+import type { WithdrawalPinService } from '../service/withdrawal-pin.service.js';
 import { IdentityService } from '../service/identity.service.js';
 import { SessionService } from '../service/session.service.js';
-export declare function createIdentityRouter(identity: IdentityService, sessionSvc: SessionService, adminGuard: AdminGuard, eventBus: EventBus): {
+import { type AdminSecurityService } from '../service/admin-security.service.js';
+export declare function createIdentityRouter(identity: IdentityService, sessionSvc: SessionService, phoneLogin: PhoneLoginService, phoneVerification: PhoneVerificationService, adminGuard: AdminGuard, eventBus: EventBus, adminSecurity: AdminSecurityService, withdrawalPin: WithdrawalPinService): {
     register: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         email: import("zod").ZodEmail;
         password: import("zod").ZodString;
-        name: import("zod").ZodString;
+        username: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
+        acceptedTerms: import("zod").ZodLiteral<true>;
+        acceptedAge: import("zod").ZodLiteral<true>;
+        timezone: import("zod").ZodOptional<import("zod").ZodString>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
-        user: import("zod").ZodObject<{
+        status: import("zod").ZodLiteral<"check-email">;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    usernameAvailable: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        username: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        available: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    login: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        email: import("zod").ZodEmail;
+        password: import("zod").ZodString;
+        rememberMe: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        timezone: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        user: import("zod").ZodOptional<import("zod").ZodObject<{
             id: import("zod").ZodUUID;
             email: import("zod").ZodEmail;
             name: import("zod").ZodString;
+            username: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
             emailVerified: import("zod").ZodBoolean;
             image: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodURL>>;
             theme: import("zod").ZodEnum<{
@@ -19,19 +40,44 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
                 system: "system";
             }>;
             language: import("zod").ZodString;
+            phoneNumber: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            phoneVerified: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            twoFactorEnabled: import("zod").ZodBoolean;
             createdAt: import("zod").ZodISODateTime;
             updatedAt: import("zod").ZodISODateTime;
-        }, import("zod/v4/core").$strip>;
+        }, import("zod/v4/core").$strip>>;
+        session: import("zod").ZodOptional<import("zod").ZodObject<{
+            token: import("zod").ZodString;
+            expiresAt: import("zod").ZodISODateTime;
+        }, import("zod/v4/core").$strip>>;
+        twoFactorRedirect: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        twoFactorMethod: import("zod").ZodOptional<import("zod").ZodEnum<{
+            email: "email";
+            app: "app";
+            sms: "sms";
+        }>>;
+        security: import("zod").ZodOptional<import("zod").ZodObject<{
+            attemptsRemaining: import("zod").ZodNumber;
+            lockoutUntil: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
-    login: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
-        email: import("zod").ZodEmail;
-        password: import("zod").ZodString;
+    phoneLoginRequest: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        phone: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        expiresAt: import("zod").ZodISODateTime;
+        resendAfter: import("zod").ZodISODateTime;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    phoneLoginVerify: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        phone: import("zod").ZodString;
+        code: import("zod").ZodString;
         rememberMe: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        timezone: import("zod").ZodOptional<import("zod").ZodString>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
-        user: import("zod").ZodOptional<import("zod").ZodObject<{
+        user: import("zod").ZodObject<{
             id: import("zod").ZodUUID;
             email: import("zod").ZodEmail;
             name: import("zod").ZodString;
+            username: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
             emailVerified: import("zod").ZodBoolean;
             image: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodURL>>;
             theme: import("zod").ZodEnum<{
@@ -40,14 +86,20 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
                 system: "system";
             }>;
             language: import("zod").ZodString;
+            phoneNumber: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            phoneVerified: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            twoFactorEnabled: import("zod").ZodBoolean;
             createdAt: import("zod").ZodISODateTime;
             updatedAt: import("zod").ZodISODateTime;
-        }, import("zod/v4/core").$strip>>;
-        session: import("zod").ZodOptional<import("zod").ZodObject<{
+        }, import("zod/v4/core").$strip>;
+        session: import("zod").ZodObject<{
             token: import("zod").ZodString;
             expiresAt: import("zod").ZodISODateTime;
-        }, import("zod/v4/core").$strip>>;
-        twoFactorRedirect: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        }, import("zod/v4/core").$strip>;
+        security: import("zod").ZodObject<{
+            attemptsRemaining: import("zod").ZodNumber;
+            lockoutUntil: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+        }, import("zod/v4/core").$strip>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     logout: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
@@ -56,6 +108,7 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
         id: import("zod").ZodUUID;
         email: import("zod").ZodEmail;
         name: import("zod").ZodString;
+        username: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
         emailVerified: import("zod").ZodBoolean;
         image: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodURL>>;
         theme: import("zod").ZodEnum<{
@@ -64,37 +117,151 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
             system: "system";
         }>;
         language: import("zod").ZodString;
+        phoneNumber: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+        phoneVerified: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        twoFactorEnabled: import("zod").ZodBoolean;
         createdAt: import("zod").ZodISODateTime;
         updatedAt: import("zod").ZodISODateTime;
     }, import("zod/v4/core").$strip>>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    security: {
+        me: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
+            passwordMeetsPolicy: import("zod").ZodBoolean;
+            emailVerified: import("zod").ZodBoolean;
+            phoneNumber: import("zod").ZodNullable<import("zod").ZodString>;
+            phoneVerified: import("zod").ZodBoolean;
+            twoFactorEnabled: import("zod").ZodBoolean;
+            loginWithdrawalAlertsEnabled: import("zod").ZodBoolean;
+            withdrawalPinSet: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        loginWithdrawalAlerts: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            enabled: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            passwordMeetsPolicy: import("zod").ZodBoolean;
+            emailVerified: import("zod").ZodBoolean;
+            phoneNumber: import("zod").ZodNullable<import("zod").ZodString>;
+            phoneVerified: import("zod").ZodBoolean;
+            twoFactorEnabled: import("zod").ZodBoolean;
+            loginWithdrawalAlertsEnabled: import("zod").ZodBoolean;
+            withdrawalPinSet: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        setWithdrawalPin: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            pin: import("zod").ZodString;
+            confirmPin: import("zod").ZodString;
+            currentPassword: import("zod").ZodString;
+            totpCode: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            passwordMeetsPolicy: import("zod").ZodBoolean;
+            emailVerified: import("zod").ZodBoolean;
+            phoneNumber: import("zod").ZodNullable<import("zod").ZodString>;
+            phoneVerified: import("zod").ZodBoolean;
+            twoFactorEnabled: import("zod").ZodBoolean;
+            loginWithdrawalAlertsEnabled: import("zod").ZodBoolean;
+            withdrawalPinSet: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        removeWithdrawalPin: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
+            passwordMeetsPolicy: import("zod").ZodBoolean;
+            emailVerified: import("zod").ZodBoolean;
+            phoneNumber: import("zod").ZodNullable<import("zod").ZodString>;
+            phoneVerified: import("zod").ZodBoolean;
+            twoFactorEnabled: import("zod").ZodBoolean;
+            loginWithdrawalAlertsEnabled: import("zod").ZodBoolean;
+            withdrawalPinSet: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    };
+    phoneVerification: {
+        request: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            phone: import("zod").ZodString;
+            currentPassword: import("zod").ZodString;
+            totpCode: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            expiresAt: import("zod").ZodISODateTime;
+            resendAfter: import("zod").ZodISODateTime;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        confirm: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            passwordMeetsPolicy: import("zod").ZodBoolean;
+            emailVerified: import("zod").ZodBoolean;
+            phoneNumber: import("zod").ZodNullable<import("zod").ZodString>;
+            phoneVerified: import("zod").ZodBoolean;
+            twoFactorEnabled: import("zod").ZodBoolean;
+            loginWithdrawalAlertsEnabled: import("zod").ZodBoolean;
+            withdrawalPinSet: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    };
     streamSession: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("@orpc/server").Schema<AsyncIteratorObject<{
         type: "revoked";
+    } | {
+        type: "unlocked";
     }, unknown, void>, import("@orpc/server").AsyncIteratorClass<{
         type: "revoked";
+    } | {
+        type: "unlocked";
     }, unknown, void>>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     enable2fa: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         password: import("zod").ZodString;
+        method: import("zod").ZodDefault<import("zod").ZodEnum<{
+            email: "email";
+            app: "app";
+            sms: "sms";
+        }>>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
-        totpUri: import("zod").ZodString;
+        totpUri: import("zod").ZodOptional<import("zod").ZodString>;
         backupCodes: import("zod").ZodArray<import("zod").ZodString>;
+        maskedDestination: import("zod").ZodOptional<import("zod").ZodString>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     verify2fa: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         code: import("zod").ZodString;
+        method: import("zod").ZodDefault<import("zod").ZodEnum<{
+            totp: "totp";
+            backup_code: "backup_code";
+            otp: "otp";
+        }>>;
+        trustDevice: import("zod").ZodDefault<import("zod").ZodBoolean>;
+        timezone: import("zod").ZodOptional<import("zod").ZodString>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     disable2fa: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         password: import("zod").ZodString;
+        code: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    sendTwoFactorOtp: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
+        maskedDestination: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    twoFactorStatus: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
+        enabled: import("zod").ZodBoolean;
+        method: import("zod").ZodNullable<import("zod").ZodEnum<{
+            email: "email";
+            app: "app";
+            sms: "sms";
+        }>>;
+        maskedEmail: import("zod").ZodString;
+        maskedPhone: import("zod").ZodNullable<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    regenerateBackupCodes: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        password: import("zod").ZodString;
+        code: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        backupCodes: import("zod").ZodArray<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     requestPasswordReset: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         email: import("zod").ZodEmail;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    verifyPasswordResetOtp: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        email: import("zod").ZodEmail;
+        otp: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        success: import("zod").ZodLiteral<true>;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     resetPassword: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
-        token: import("zod").ZodString;
+        email: import("zod").ZodEmail;
+        otp: import("zod").ZodString;
+        token: import("zod").ZodOptional<import("zod").ZodString>;
         newPassword: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
@@ -105,13 +272,40 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
-    sendEmailVerification: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
+    sendEmailVerification: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        email: import("zod").ZodEmail;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     verifyEmail: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
-        token: import("zod").ZodString;
+        email: import("zod").ZodEmail;
+        otp: import("zod").ZodString;
+        timezone: import("zod").ZodOptional<import("zod").ZodString>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
-        success: import("zod").ZodLiteral<true>;
+        user: import("zod").ZodOptional<import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            email: import("zod").ZodEmail;
+            name: import("zod").ZodString;
+            username: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
+            emailVerified: import("zod").ZodBoolean;
+            image: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodURL>>;
+            theme: import("zod").ZodEnum<{
+                light: "light";
+                dark: "dark";
+                system: "system";
+            }>;
+            language: import("zod").ZodString;
+            phoneNumber: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            phoneVerified: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            twoFactorEnabled: import("zod").ZodBoolean;
+            createdAt: import("zod").ZodISODateTime;
+            updatedAt: import("zod").ZodISODateTime;
+        }, import("zod/v4/core").$strip>>;
+        session: import("zod").ZodOptional<import("zod").ZodObject<{
+            token: import("zod").ZodString;
+            expiresAt: import("zod").ZodISODateTime;
+        }, import("zod/v4/core").$strip>>;
+        twoFactorRedirect: import("zod").ZodOptional<import("zod").ZodBoolean>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     changeEmail: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         newEmail: import("zod").ZodEmail;
@@ -132,6 +326,7 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
             id: import("zod").ZodUUID;
             email: import("zod").ZodEmail;
             name: import("zod").ZodString;
+            username: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
             emailVerified: import("zod").ZodBoolean;
             image: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodURL>>;
             theme: import("zod").ZodEnum<{
@@ -140,6 +335,9 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
                 system: "system";
             }>;
             language: import("zod").ZodString;
+            phoneNumber: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            phoneVerified: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            twoFactorEnabled: import("zod").ZodBoolean;
             createdAt: import("zod").ZodISODateTime;
             updatedAt: import("zod").ZodISODateTime;
         }, import("zod/v4/core").$strip>;
@@ -149,18 +347,38 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         success: import("zod").ZodLiteral<true>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    adminRequestPasswordReset: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        userId: import("zod").ZodUUID;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        success: import("zod").ZodLiteral<true>;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     sessions: {
         list: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
             page: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
             limit: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
             userId: import("zod").ZodUUID;
+            sortBy: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
         }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
             items: import("zod").ZodArray<import("zod").ZodObject<{
                 id: import("zod").ZodUUID;
                 expiresAt: import("zod").ZodISODateTime;
                 createdAt: import("zod").ZodISODateTime;
+                updatedAt: import("zod").ZodISODateTime;
+                lastSeenAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
                 ipAddress: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 userAgent: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                deviceLabel: import("zod").ZodString;
+                browser: import("zod").ZodNullable<import("zod").ZodString>;
+                os: import("zod").ZodNullable<import("zod").ZodString>;
+                current: import("zod").ZodBoolean;
             }, import("zod/v4/core").$strip>>;
             total: import("zod").ZodNumber;
             page: import("zod").ZodNumber;
@@ -177,6 +395,119 @@ export declare function createIdentityRouter(identity: IdentityService, sessionS
         }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
             success: import("zod").ZodLiteral<true>;
         }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        listMine: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            page: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
+            limit: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
+            sortBy: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            items: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodUUID;
+                expiresAt: import("zod").ZodISODateTime;
+                createdAt: import("zod").ZodISODateTime;
+                updatedAt: import("zod").ZodISODateTime;
+                lastSeenAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+                ipAddress: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                userAgent: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                deviceLabel: import("zod").ZodString;
+                browser: import("zod").ZodNullable<import("zod").ZodString>;
+                os: import("zod").ZodNullable<import("zod").ZodString>;
+                current: import("zod").ZodBoolean;
+            }, import("zod/v4/core").$strip>>;
+            total: import("zod").ZodNumber;
+            page: import("zod").ZodNumber;
+            limit: import("zod").ZodNumber;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        revokeMine: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            success: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        listAll: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            page: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
+            limit: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
+            role: import("zod").ZodOptional<import("zod").ZodString>;
+            query: import("zod").ZodOptional<import("zod").ZodString>;
+            sortBy: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            items: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodUUID;
+                expiresAt: import("zod").ZodISODateTime;
+                createdAt: import("zod").ZodISODateTime;
+                updatedAt: import("zod").ZodISODateTime;
+                lastSeenAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+                ipAddress: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                userAgent: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                deviceLabel: import("zod").ZodString;
+                browser: import("zod").ZodNullable<import("zod").ZodString>;
+                os: import("zod").ZodNullable<import("zod").ZodString>;
+                current: import("zod").ZodBoolean;
+                userId: import("zod").ZodUUID;
+                email: import("zod").ZodEmail;
+                role: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            total: import("zod").ZodNumber;
+            page: import("zod").ZodNumber;
+            limit: import("zod").ZodNumber;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    };
+    adminSecurity: {
+        status: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
+            twoFactorEnabled: import("zod").ZodBoolean;
+            backupCodesRemaining: import("zod").ZodNullable<import("zod").ZodNumber>;
+            enrollmentRequired: import("zod").ZodBoolean;
+            trustedDeviceDays: import("zod").ZodNumber;
+            trustedDeviceUntil: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            lockedUntil: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        trustedDevices: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodArray<import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            label: import("zod").ZodString;
+            browser: import("zod").ZodNullable<import("zod").ZodString>;
+            os: import("zod").ZodNullable<import("zod").ZodString>;
+            ipAddress: import("zod").ZodNullable<import("zod").ZodString>;
+            lastUsedAt: import("zod").ZodISODateTime;
+            expiresAt: import("zod").ZodISODateTime;
+            isCurrent: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        trustCurrentDevice: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            code: import("zod").ZodString;
+            password: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            success: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        revokeTrustedDevice: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            success: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        resetUserTwoFactor: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            userId: import("zod").ZodUUID;
+            reason: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            success: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        revokeUserTrustedDevice: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+            userId: import("zod").ZodUUID;
+            id: import("zod").ZodUUID;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            success: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     };
 };
 //# sourceMappingURL=index.d.ts.map

package/dist/pam/identity/router/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,UAAU,EACf,UAAU,EAIV,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAqB,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,cAAc,EAAwB,MAAM,+BAA+B,CAAC;AAGrF,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,cAAc,EAC1B,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgHnB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,UAAU,EACf,UAAU,EAKV,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EACL,eAAe,EAGhB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,cAAc,EAGf,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,sCAAsC,CAAC;AAW9C,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,cAAc,EAC1B,UAAU,EAAE,iBAAiB,EAC7B,iBAAiB,EAAE,wBAAwB,EAC3C,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,oBAAoB,EACnC,aAAa,EAAE,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmUpC"}