@openora/core 0.4.1-canary.17 → 0.4.1-canary.171

package/dist/pam/identity/contract/index.d.ts

@@ -1,22 +1,93 @@
 import * as z from 'zod';
+export declare const SessionSchema: z.ZodObject<{
+    token: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strip>;
 export declare const SessionItemSchema: z.ZodObject<{
     id: z.ZodUUID;
     expiresAt: z.ZodISODateTime;
     createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
     ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    deviceLabel: z.ZodString;
+    browser: z.ZodNullable<z.ZodString>;
+    os: z.ZodNullable<z.ZodString>;
+    current: z.ZodBoolean;
 }, z.core.$strip>;
 export type SessionItem = z.infer<typeof SessionItemSchema>;
+export declare const ActiveSessionItemSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    expiresAt: z.ZodISODateTime;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
+    ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    deviceLabel: z.ZodString;
+    browser: z.ZodNullable<z.ZodString>;
+    os: z.ZodNullable<z.ZodString>;
+    current: z.ZodBoolean;
+    userId: z.ZodUUID;
+    email: z.ZodEmail;
+    role: z.ZodString;
+}, z.core.$strip>;
+export type ActiveSessionItem = z.infer<typeof ActiveSessionItemSchema>;
+export declare const TrustedDeviceItemSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    label: z.ZodString;
+    browser: z.ZodNullable<z.ZodString>;
+    os: z.ZodNullable<z.ZodString>;
+    ipAddress: z.ZodNullable<z.ZodString>;
+    lastUsedAt: z.ZodISODateTime;
+    expiresAt: z.ZodISODateTime;
+    isCurrent: z.ZodBoolean;
+}, z.core.$strip>;
+export type TrustedDeviceItem = z.infer<typeof TrustedDeviceItemSchema>;
+export declare const AdminSecurityStatusSchema: z.ZodObject<{
+    twoFactorEnabled: z.ZodBoolean;
+    backupCodesRemaining: z.ZodNullable<z.ZodNumber>;
+    enrollmentRequired: z.ZodBoolean;
+    trustedDeviceDays: z.ZodNumber;
+    trustedDeviceUntil: z.ZodNullable<z.ZodISODateTime>;
+    lockedUntil: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+export type AdminSecurityStatus = z.infer<typeof AdminSecurityStatusSchema>;
+export declare const SESSION_SORT_BY_VALUES: readonly ["createdAt", "expiresAt", "updatedAt"];
+export declare const SessionSortBySchema: z.ZodDefault<z.ZodEnum<{
+    createdAt: "createdAt";
+    updatedAt: "updatedAt";
+    expiresAt: "expiresAt";
+}>>;
+export type SessionSortBy = z.infer<typeof SessionSortBySchema>;
 export declare const identityContract: {
     register: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         email: z.ZodEmail;
         password: z.ZodString;
-        name: z.ZodString;
+        username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        acceptedTerms: z.ZodLiteral<true>;
+        acceptedAge: z.ZodLiteral<true>;
+        timezone: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
-        user: z.ZodObject<{
+        status: z.ZodLiteral<"check-email">;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    usernameAvailable: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    }, z.core.$strip>, z.ZodObject<{
+        available: z.ZodBoolean;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    login: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        email: z.ZodEmail;
+        password: z.ZodString;
+        rememberMe: z.ZodOptional<z.ZodBoolean>;
+        timezone: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        user: z.ZodOptional<z.ZodObject<{
             id: z.ZodUUID;
             email: z.ZodEmail;
             name: z.ZodString;
+            username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
             emailVerified: z.ZodBoolean;
             image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
             theme: z.ZodEnum<{
@@ -25,19 +96,45 @@ export declare const identityContract: {
                 system: "system";
             }>;
             language: z.ZodString;
+            phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            phoneVerified: z.ZodOptional<z.ZodBoolean>;
+            twoFactorEnabled: z.ZodBoolean;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-        }, z.core.$strip>;
+        }, z.core.$strip>>;
+        session: z.ZodOptional<z.ZodObject<{
+            token: z.ZodString;
+            expiresAt: z.ZodISODateTime;
+        }, z.core.$strip>>;
+        twoFactorRedirect: z.ZodOptional<z.ZodBoolean>;
+        twoFactorMethod: z.ZodOptional<z.ZodEnum<{
+            email: "email";
+            app: "app";
+            sms: "sms";
+        }>>;
+        security: z.ZodOptional<z.ZodObject<{
+            attemptsRemaining: z.ZodNumber;
+            lockoutUntil: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>>;
+        trustedDeviceDays: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
-    login: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-        email: z.ZodEmail;
-        password: z.ZodString;
+    phoneLoginRequest: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        phone: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        expiresAt: z.ZodISODateTime;
+        resendAfter: z.ZodISODateTime;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    phoneLoginVerify: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        phone: z.ZodString;
+        code: z.ZodString;
         rememberMe: z.ZodOptional<z.ZodBoolean>;
+        timezone: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
-        user: z.ZodOptional<z.ZodObject<{
+        user: z.ZodObject<{
             id: z.ZodUUID;
             email: z.ZodEmail;
             name: z.ZodString;
+            username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
             emailVerified: z.ZodBoolean;
             image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
             theme: z.ZodEnum<{
@@ -46,14 +143,20 @@ export declare const identityContract: {
                 system: "system";
             }>;
             language: z.ZodString;
+            phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            phoneVerified: z.ZodOptional<z.ZodBoolean>;
+            twoFactorEnabled: z.ZodBoolean;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-        }, z.core.$strip>>;
-        session: z.ZodOptional<z.ZodObject<{
+        }, z.core.$strip>;
+        session: z.ZodObject<{
             token: z.ZodString;
             expiresAt: z.ZodISODateTime;
-        }, z.core.$strip>>;
-        twoFactorRedirect: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>;
+        security: z.ZodObject<{
+            attemptsRemaining: z.ZodNumber;
+            lockoutUntil: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     logout: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
         success: z.ZodLiteral<true>;
@@ -62,6 +165,7 @@ export declare const identityContract: {
         id: z.ZodUUID;
         email: z.ZodEmail;
         name: z.ZodString;
+        username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         emailVerified: z.ZodBoolean;
         image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
         theme: z.ZodEnum<{
@@ -70,37 +174,271 @@ export declare const identityContract: {
             system: "system";
         }>;
         language: z.ZodString;
+        phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        phoneVerified: z.ZodOptional<z.ZodBoolean>;
+        twoFactorEnabled: z.ZodBoolean;
         createdAt: z.ZodISODateTime;
         updatedAt: z.ZodISODateTime;
     }, z.core.$strip>>, Record<never, never>, Record<never, never>>;
+    security: {
+        me: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        loginWithdrawalAlerts: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strip>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        autoLogout: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            duration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+        }, z.core.$strip>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        requireTwoFactorOnLogin: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strip>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        setWithdrawalPin: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            pin: z.ZodString;
+            confirmPin: z.ZodString;
+            currentPassword: z.ZodString;
+            totpCode: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        removeWithdrawalPin: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        setAntiPhishingCode: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            code: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    };
+    phoneVerification: {
+        request: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            phone: z.ZodString;
+            currentPassword: z.ZodString;
+            totpCode: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            expiresAt: z.ZodISODateTime;
+            resendAfter: z.ZodISODateTime;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        confirm: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            code: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            passwordMeetsPolicy: z.ZodBoolean;
+            emailVerified: z.ZodBoolean;
+            phoneNumber: z.ZodNullable<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            twoFactorEnabled: z.ZodBoolean;
+            loginWithdrawalAlertsEnabled: z.ZodBoolean;
+            withdrawalPinSet: z.ZodBoolean;
+            autoLogoutDuration: z.ZodEnum<{
+                "15m": "15m";
+                "1h": "1h";
+                "24h": "24h";
+                "7d": "7d";
+                "30d": "30d";
+            }>;
+            requireTwoFactorOnLogin: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            antiPhishingCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    };
     streamSession: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, import("@orpc/contract").Schema<AsyncIteratorObject<{
         type: "revoked";
+    } | {
+        type: "unlocked";
     }, unknown, void>, import("@orpc/contract").AsyncIteratorClass<{
         type: "revoked";
+    } | {
+        type: "unlocked";
     }, unknown, void>>, Record<never, never>, Record<never, never>>;
     enable2fa: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         password: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            email: "email";
+            app: "app";
+            sms: "sms";
+        }>>;
     }, z.core.$strip>, z.ZodObject<{
-        totpUri: z.ZodString;
+        totpUri: z.ZodOptional<z.ZodString>;
         backupCodes: z.ZodArray<z.ZodString>;
+        maskedDestination: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     verify2fa: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         code: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            totp: "totp";
+            backup_code: "backup_code";
+            otp: "otp";
+        }>>;
+        trustDevice: z.ZodDefault<z.ZodBoolean>;
+        timezone: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
+        trustGranted: z.ZodBoolean;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     disable2fa: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         password: z.ZodString;
+        code: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    sendTwoFactorOtp: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+        maskedDestination: z.ZodString;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    twoFactorStatus: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        method: z.ZodNullable<z.ZodEnum<{
+            email: "email";
+            app: "app";
+            sms: "sms";
+        }>>;
+        maskedEmail: z.ZodString;
+        maskedPhone: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    regenerateBackupCodes: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        password: z.ZodString;
+        code: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        backupCodes: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     requestPasswordReset: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         email: z.ZodEmail;
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    verifyPasswordResetOtp: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        email: z.ZodEmail;
+        otp: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        success: z.ZodLiteral<true>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     resetPassword: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-        token: z.ZodString;
+        email: z.ZodEmail;
+        otp: z.ZodString;
+        token: z.ZodOptional<z.ZodString>;
         newPassword: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
@@ -111,16 +449,51 @@ export declare const identityContract: {
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
-    sendEmailVerification: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+    sendEmailVerification: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        email: z.ZodEmail;
+    }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     verifyEmail: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-        token: z.ZodString;
+        email: z.ZodEmail;
+        otp: z.ZodString;
+        timezone: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        user: z.ZodOptional<z.ZodObject<{
+            id: z.ZodUUID;
+            email: z.ZodEmail;
+            name: z.ZodString;
+            username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            emailVerified: z.ZodBoolean;
+            image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
+            theme: z.ZodEnum<{
+                light: "light";
+                dark: "dark";
+                system: "system";
+            }>;
+            language: z.ZodString;
+            phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            phoneVerified: z.ZodOptional<z.ZodBoolean>;
+            twoFactorEnabled: z.ZodBoolean;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+        }, z.core.$strip>>;
+        session: z.ZodOptional<z.ZodObject<{
+            token: z.ZodString;
+            expiresAt: z.ZodISODateTime;
+        }, z.core.$strip>>;
+        twoFactorRedirect: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    requestEmailChange: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        newEmail: z.ZodEmail;
+        currentPassword: z.ZodString;
+        totpCode: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
-    changeEmail: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+    confirmEmailChange: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         newEmail: z.ZodEmail;
+        otp: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
@@ -138,6 +511,7 @@ export declare const identityContract: {
             id: z.ZodUUID;
             email: z.ZodEmail;
             name: z.ZodString;
+            username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
             emailVerified: z.ZodBoolean;
             image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
             theme: z.ZodEnum<{
@@ -146,6 +520,9 @@ export declare const identityContract: {
                 system: "system";
             }>;
             language: z.ZodString;
+            phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            phoneVerified: z.ZodOptional<z.ZodBoolean>;
+            twoFactorEnabled: z.ZodBoolean;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
         }, z.core.$strip>;
@@ -155,18 +532,38 @@ export declare const identityContract: {
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    adminRequestPasswordReset: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>, z.ZodObject<{
+        success: z.ZodLiteral<true>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     sessions: {
         list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
             limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
             userId: z.ZodUUID;
+            sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
         }, z.core.$strip>, z.ZodObject<{
             items: z.ZodArray<z.ZodObject<{
                 id: z.ZodUUID;
                 expiresAt: z.ZodISODateTime;
                 createdAt: z.ZodISODateTime;
+                updatedAt: z.ZodISODateTime;
+                lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
                 ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                deviceLabel: z.ZodString;
+                browser: z.ZodNullable<z.ZodString>;
+                os: z.ZodNullable<z.ZodString>;
+                current: z.ZodBoolean;
             }, z.core.$strip>>;
             total: z.ZodNumber;
             page: z.ZodNumber;
@@ -183,6 +580,119 @@ export declare const identityContract: {
         }, z.core.$strip>, z.ZodObject<{
             success: z.ZodLiteral<true>;
         }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        listMine: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            items: z.ZodArray<z.ZodObject<{
+                id: z.ZodUUID;
+                expiresAt: z.ZodISODateTime;
+                createdAt: z.ZodISODateTime;
+                updatedAt: z.ZodISODateTime;
+                lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
+                ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                deviceLabel: z.ZodString;
+                browser: z.ZodNullable<z.ZodString>;
+                os: z.ZodNullable<z.ZodString>;
+                current: z.ZodBoolean;
+            }, z.core.$strip>>;
+            total: z.ZodNumber;
+            page: z.ZodNumber;
+            limit: z.ZodNumber;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        revokeMine: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        listAll: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            role: z.ZodOptional<z.ZodString>;
+            query: z.ZodOptional<z.ZodString>;
+            sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            items: z.ZodArray<z.ZodObject<{
+                id: z.ZodUUID;
+                expiresAt: z.ZodISODateTime;
+                createdAt: z.ZodISODateTime;
+                updatedAt: z.ZodISODateTime;
+                lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
+                ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                deviceLabel: z.ZodString;
+                browser: z.ZodNullable<z.ZodString>;
+                os: z.ZodNullable<z.ZodString>;
+                current: z.ZodBoolean;
+                userId: z.ZodUUID;
+                email: z.ZodEmail;
+                role: z.ZodString;
+            }, z.core.$strip>>;
+            total: z.ZodNumber;
+            page: z.ZodNumber;
+            limit: z.ZodNumber;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    };
+    adminSecurity: {
+        status: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            twoFactorEnabled: z.ZodBoolean;
+            backupCodesRemaining: z.ZodNullable<z.ZodNumber>;
+            enrollmentRequired: z.ZodBoolean;
+            trustedDeviceDays: z.ZodNumber;
+            trustedDeviceUntil: z.ZodNullable<z.ZodISODateTime>;
+            lockedUntil: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        trustedDevices: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            label: z.ZodString;
+            browser: z.ZodNullable<z.ZodString>;
+            os: z.ZodNullable<z.ZodString>;
+            ipAddress: z.ZodNullable<z.ZodString>;
+            lastUsedAt: z.ZodISODateTime;
+            expiresAt: z.ZodISODateTime;
+            isCurrent: z.ZodBoolean;
+        }, z.core.$strip>>, Record<never, never>, Record<never, never>>;
+        trustCurrentDevice: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            code: z.ZodString;
+            password: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        revokeTrustedDevice: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        resetUserTwoFactor: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            userId: z.ZodUUID;
+            reason: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        revokeUserTrustedDevice: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            userId: z.ZodUUID;
+            id: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     };
 };
 //# sourceMappingURL=index.d.ts.map