@sylphx/contract 0.2.0

package/dist/endpoints/saml.js

@@ -0,0 +1,106 @@
+/**
+ * SAML endpoints — Console-plane Enterprise SSO management. Mirrors
+ * `apps/api/src/server/platform/routes/saml.ts`.
+ *
+ * Production mount: `/saml/*`.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { CreateSAMLProviderInput, CreateSAMLProviderResult, DeleteSAMLProviderInput, DeleteSAMLProviderResult, GetSAMLLogsQuery, GetSAMLLogsResult, GetSAMLMetadataQuery, GetSAMLMetadataResult, GetSAMLProviderQuery, GetSAMLProviderResult, ListSAMLIdPTemplatesResult, ListSAMLNameIdFormatsResult, ListSAMLSignatureAlgorithmsResult, SetSAMLProviderStatusInput, SetSAMLProviderStatusResult, TestSAMLConfigInput, TestSAMLConfigResult, UpdateSAMLProviderInput, UpdateSAMLProviderResult, } from '../schemas/saml.js';
+export const samlEndpoints = {
+    getProvider: defineEndpoint({
+        method: 'GET',
+        path: '/saml',
+        query: GetSAMLProviderQuery,
+        response: GetSAMLProviderResult,
+        plane: 'management',
+        summary: 'Get the SAML provider configuration for an organization',
+        tags: ['saml'],
+    }),
+    createProvider: defineEndpoint({
+        method: 'POST',
+        path: '/saml',
+        body: CreateSAMLProviderInput,
+        response: CreateSAMLProviderResult,
+        plane: 'management',
+        summary: 'Configure a new SAML Identity Provider',
+        tags: ['saml'],
+    }),
+    updateProvider: defineEndpoint({
+        method: 'PATCH',
+        path: '/saml',
+        body: UpdateSAMLProviderInput,
+        response: UpdateSAMLProviderResult,
+        plane: 'management',
+        summary: 'Update an existing SAML provider configuration',
+        tags: ['saml'],
+    }),
+    setProviderStatus: defineEndpoint({
+        method: 'POST',
+        path: '/saml/status',
+        body: SetSAMLProviderStatusInput,
+        response: SetSAMLProviderStatusResult,
+        plane: 'management',
+        summary: 'Enable or disable a SAML provider',
+        tags: ['saml'],
+    }),
+    deleteProvider: defineEndpoint({
+        method: 'DELETE',
+        path: '/saml',
+        body: DeleteSAMLProviderInput,
+        response: DeleteSAMLProviderResult,
+        plane: 'management',
+        summary: 'Delete a SAML provider and all associated accounts',
+        tags: ['saml'],
+    }),
+    getMetadata: defineEndpoint({
+        method: 'GET',
+        path: '/saml/metadata',
+        query: GetSAMLMetadataQuery,
+        response: GetSAMLMetadataResult,
+        plane: 'management',
+        summary: 'Get Service Provider metadata XML for IdP configuration',
+        tags: ['saml'],
+    }),
+    getLogs: defineEndpoint({
+        method: 'GET',
+        path: '/saml/logs',
+        query: GetSAMLLogsQuery,
+        response: GetSAMLLogsResult,
+        plane: 'management',
+        summary: 'Get authentication logs for a SAML provider',
+        tags: ['saml'],
+    }),
+    testConfig: defineEndpoint({
+        method: 'POST',
+        path: '/saml/test',
+        body: TestSAMLConfigInput,
+        response: TestSAMLConfigResult,
+        plane: 'management',
+        summary: 'Validate certificate and check SSO URL accessibility',
+        tags: ['saml'],
+    }),
+    listTemplates: defineEndpoint({
+        method: 'GET',
+        path: '/saml/templates',
+        response: ListSAMLIdPTemplatesResult,
+        plane: 'management',
+        summary: 'Get available Identity Provider templates with setup instructions',
+        tags: ['saml'],
+    }),
+    listNameIdFormats: defineEndpoint({
+        method: 'GET',
+        path: '/saml/name-id-formats',
+        response: ListSAMLNameIdFormatsResult,
+        plane: 'management',
+        summary: 'Get available SAML Name ID format options',
+        tags: ['saml'],
+    }),
+    listSignatureAlgorithms: defineEndpoint({
+        method: 'GET',
+        path: '/saml/signature-algorithms',
+        response: ListSAMLSignatureAlgorithmsResult,
+        plane: 'management',
+        summary: 'Get available SAML signature algorithm options',
+        tags: ['saml'],
+    }),
+};

package/dist/endpoints/search.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Search endpoints — Console-plane admin analytics over the shared search index.
+ * Mirrors `apps/api/src/server/platform/routes/search.ts`.
+ *
+ * Production mount: `/search/*`.
+ */
+export declare const searchEndpoints: {
+    readonly getAnalytics: import("../endpoint.js").Endpoint<"GET", "/search/projects/:projectId/analytics", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        namespace: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        dateFrom: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        dateTo: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        totalQueries: typeof import("effect/Schema").Number;
+        avgLatencyMs: typeof import("effect/Schema").Number;
+        clickThroughRate: typeof import("effect/Schema").Number;
+        topQueries: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            query: typeof import("effect/Schema").String;
+            count: typeof import("effect/Schema").Number;
+        }>>;
+    }>>;
+    readonly getStats: import("../endpoint.js").Endpoint<"GET", "/search/projects/:projectId/stats", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        namespace: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        totalDocuments: typeof import("effect/Schema").Number;
+        documentsWithEmbedding: typeof import("effect/Schema").Number;
+        byNamespace: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            namespace: typeof import("effect/Schema").String;
+            count: typeof import("effect/Schema").Number;
+        }>>;
+    }>>;
+    readonly listDocuments: import("../endpoint.js").Endpoint<"GET", "/search/projects/:projectId/documents", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        namespace: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        offset: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        documents: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            namespace: typeof import("effect/Schema").String;
+            externalId: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            title: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            contentPreview: typeof import("effect/Schema").String;
+            url: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            category: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            type: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            tags: import("effect/Schema").NullOr<import("effect/Schema").Array$<typeof import("effect/Schema").String>>;
+            hasEmbedding: typeof import("effect/Schema").Boolean;
+            impressions: typeof import("effect/Schema").Number;
+            clicks: typeof import("effect/Schema").Number;
+            createdAt: typeof import("effect/Schema").String;
+            updatedAt: typeof import("effect/Schema").String;
+        }>>;
+        total: typeof import("effect/Schema").Number;
+        hasMore: typeof import("effect/Schema").Boolean;
+    }>>;
+};
+//# sourceMappingURL=search.d.ts.map

package/dist/endpoints/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/endpoints/search.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BlB,CAAA"}

package/dist/endpoints/search.js

@@ -0,0 +1,40 @@
+/**
+ * Search endpoints — Console-plane admin analytics over the shared search index.
+ * Mirrors `apps/api/src/server/platform/routes/search.ts`.
+ *
+ * Production mount: `/search/*`.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { SearchAnalyticsQuery, SearchAnalyticsResult, SearchListDocumentsQuery, SearchListDocumentsResult, SearchProjectIdParams, SearchStatsQuery, SearchStatsResult, } from '../schemas/search.js';
+export const searchEndpoints = {
+    getAnalytics: defineEndpoint({
+        method: 'GET',
+        path: '/search/projects/:projectId/analytics',
+        params: SearchProjectIdParams,
+        query: SearchAnalyticsQuery,
+        response: SearchAnalyticsResult,
+        plane: 'management',
+        summary: 'Get search analytics (total queries, latency, CTR, top queries)',
+        tags: ['search'],
+    }),
+    getStats: defineEndpoint({
+        method: 'GET',
+        path: '/search/projects/:projectId/stats',
+        params: SearchProjectIdParams,
+        query: SearchStatsQuery,
+        response: SearchStatsResult,
+        plane: 'management',
+        summary: 'Get search index statistics',
+        tags: ['search'],
+    }),
+    listDocuments: defineEndpoint({
+        method: 'GET',
+        path: '/search/projects/:projectId/documents',
+        params: SearchProjectIdParams,
+        query: SearchListDocumentsQuery,
+        response: SearchListDocumentsResult,
+        plane: 'management',
+        summary: 'List indexed documents with pagination',
+        tags: ['search'],
+    }),
+};

package/dist/endpoints/secrets.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Secrets endpoints — encrypted-at-rest vault with versioned rollback and
+ * opt-in plaintext reveal. Corresponds to `packages/management/src/secrets.ts`.
+ */
+import { Schema } from 'effect';
+export declare const secretsEndpoints: {
+    readonly list: import("../endpoint.js").Endpoint<"GET", "/secrets", Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        projectId: typeof Schema.String;
+        environmentId: Schema.optional<typeof Schema.String>;
+        includeInactive: Schema.optional<typeof Schema.String>;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        secrets: Schema.Array$<Schema.Struct<{
+            id: Schema.brand<Schema.filter<typeof Schema.String>, "SecretId">;
+            key: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+            description: Schema.NullOr<typeof Schema.String>;
+            environment: Schema.NullOr<Schema.Struct<{
+                id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+                name: typeof Schema.String;
+            }>>;
+            isActive: typeof Schema.Boolean;
+            version: typeof Schema.String;
+            createdAt: typeof Schema.String;
+            updatedAt: typeof Schema.String;
+        }>>;
+    }>>;
+    readonly get: import("../endpoint.js").Endpoint<"GET", "/secrets/detail", Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        id: typeof Schema.String;
+        reveal: Schema.optional<typeof Schema.String>;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "SecretId">;
+        key: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        value: Schema.NullOr<typeof Schema.String>;
+        maskedValue: typeof Schema.String;
+        description: Schema.NullOr<typeof Schema.String>;
+        environment: Schema.NullOr<Schema.Struct<{
+            id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+            name: typeof Schema.String;
+        }>>;
+        isActive: typeof Schema.Boolean;
+        version: typeof Schema.String;
+        versions: Schema.Array$<Schema.Struct<{
+            version: typeof Schema.String;
+            changeNote: Schema.NullOr<typeof Schema.String>;
+            createdAt: typeof Schema.String;
+        }>>;
+        createdAt: typeof Schema.String;
+        updatedAt: typeof Schema.String;
+    }>>;
+    readonly create: import("../endpoint.js").Endpoint<"POST", "/secrets", Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        projectId: typeof Schema.String;
+        key: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        value: Schema.filter<Schema.filter<typeof Schema.String>>;
+        description: Schema.optional<typeof Schema.String>;
+        environmentId: Schema.optional<Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">>;
+    }>, Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "SecretId">;
+        key: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        version: typeof Schema.String;
+    }>>;
+    readonly update: import("../endpoint.js").Endpoint<"PATCH", "/secrets", Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "SecretId">;
+        value: Schema.optional<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        description: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        isActive: Schema.optional<typeof Schema.Boolean>;
+        changeNote: Schema.optional<typeof Schema.String>;
+    }>, Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "SecretId">;
+        key: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        version: typeof Schema.String;
+    }>>;
+    readonly delete: import("../endpoint.js").Endpoint<"DELETE", "/secrets", Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        id: typeof Schema.String;
+    }>, Schema.Struct<{
+        success: typeof Schema.Boolean;
+    }>>;
+    readonly rollback: import("../endpoint.js").Endpoint<"POST", "/secrets/rollback", Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "SecretId">;
+        version: typeof Schema.String;
+    }>, Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "SecretId">;
+        key: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        version: typeof Schema.String;
+        rolledBackFrom: typeof Schema.String;
+        rolledBackTo: typeof Schema.String;
+    }>>;
+    readonly stats: import("../endpoint.js").Endpoint<"GET", "/secrets/stats", Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        projectId: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        stats: Schema.Array$<Schema.Struct<{
+            environmentId: Schema.NullOr<typeof Schema.String>;
+            count: typeof Schema.Number;
+        }>>;
+    }>>;
+};
+//# sourceMappingURL=secrets.d.ts.map

package/dist/endpoints/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/endpoints/secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AA4B/B,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEnB,CAAA"}

package/dist/endpoints/secrets.js

@@ -0,0 +1,81 @@
+/**
+ * Secrets endpoints — encrypted-at-rest vault with versioned rollback and
+ * opt-in plaintext reveal. Corresponds to `packages/management/src/secrets.ts`.
+ */
+import { Schema } from 'effect';
+import { defineEndpoint } from '../endpoint.js';
+import { CreateSecretInput, CreateSecretResult, RollbackSecretInput, RollbackSecretResult, SecretDetail, SecretListItem, UpdateSecretInput, UpdateSecretResult, } from '../schemas/secret.js';
+const ListQuery = Schema.Struct({
+    projectId: Schema.String,
+    environmentId: Schema.optional(Schema.String),
+    includeInactive: Schema.optional(Schema.String),
+});
+const DetailQuery = Schema.Struct({
+    id: Schema.String,
+    reveal: Schema.optional(Schema.String),
+});
+const StatsQuery = Schema.Struct({ projectId: Schema.String });
+const DeleteBody = Schema.Struct({ id: Schema.String });
+export const secretsEndpoints = {
+    list: defineEndpoint({
+        method: 'GET',
+        path: '/secrets',
+        query: ListQuery,
+        response: Schema.Struct({ secrets: Schema.Array(SecretListItem) }),
+        summary: 'List secrets for a project (optionally scoped to an environment)',
+        tags: ['secrets'],
+    }),
+    get: defineEndpoint({
+        method: 'GET',
+        path: '/secrets/detail',
+        query: DetailQuery,
+        response: SecretDetail,
+        summary: 'Get secret detail (pass reveal=true for plaintext)',
+        tags: ['secrets'],
+    }),
+    create: defineEndpoint({
+        method: 'POST',
+        path: '/secrets',
+        body: CreateSecretInput,
+        response: CreateSecretResult,
+        summary: 'Create a new encrypted secret',
+        tags: ['secrets'],
+    }),
+    update: defineEndpoint({
+        method: 'PATCH',
+        path: '/secrets',
+        body: UpdateSecretInput,
+        response: UpdateSecretResult,
+        summary: 'Update a secret (new value → new version)',
+        tags: ['secrets'],
+    }),
+    delete: defineEndpoint({
+        method: 'DELETE',
+        path: '/secrets',
+        body: DeleteBody,
+        response: Schema.Struct({ success: Schema.Boolean }),
+        summary: 'Delete a secret',
+        tags: ['secrets'],
+    }),
+    rollback: defineEndpoint({
+        method: 'POST',
+        path: '/secrets/rollback',
+        body: RollbackSecretInput,
+        response: RollbackSecretResult,
+        summary: 'Restore a secret to a previous version',
+        tags: ['secrets'],
+    }),
+    stats: defineEndpoint({
+        method: 'GET',
+        path: '/secrets/stats',
+        query: StatsQuery,
+        response: Schema.Struct({
+            stats: Schema.Array(Schema.Struct({
+                environmentId: Schema.NullOr(Schema.String),
+                count: Schema.Number,
+            })),
+        }),
+        summary: 'Per-environment secret counts',
+        tags: ['secrets'],
+    }),
+};

package/dist/endpoints/security.d.ts

@@ -0,0 +1,231 @@
+/**
+ * Security Console endpoints — user security settings UI.
+ * Mirrors `apps/api/src/server/platform/routes/security/*`.
+ *
+ * Production mount: `/security/*`.
+ *
+ * Organised into sub-groups (Wave 3F pattern) so the namespace stays
+ * browsable as it grows:
+ *   • twoFactor  — 2FA + backup codes (7 ops)
+ *   • email      — email change (2 ops)
+ *   • oauth      — OAuth providers (3 ops)
+ *   • password   — password status + set (2 ops)
+ *   • passkeys   — WebAuthn passkeys (5 ops)
+ *   • sessions   — active sessions (4 ops)
+ *   • score      — security score + quick status (2 ops)
+ *   • alerts     — security alerts (4 ops)
+ */
+export declare const securityEndpoints: {
+    readonly twoFactor: {
+        readonly setup: import("../endpoint.js").Endpoint<"POST", "/security/2fa/setup", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            secret: typeof import("effect/Schema").String;
+            uri: typeof import("effect/Schema").String;
+            qrCode: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        }>>;
+        readonly verify: import("../endpoint.js").Endpoint<"POST", "/security/2fa/verify", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            code: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+            backupCodes: import("effect/Schema").Array$<typeof import("effect/Schema").String>;
+        }>>;
+        readonly disable: import("../endpoint.js").Endpoint<"POST", "/security/2fa/disable", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+        readonly status: import("../endpoint.js").Endpoint<"GET", "/security/2fa/status", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            enabled: typeof import("effect/Schema").Boolean;
+            backupCodesRemaining: typeof import("effect/Schema").Number;
+        }>>;
+        readonly viewBackupCodes: import("../endpoint.js").Endpoint<"GET", "/security/backup-codes", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            codes: import("effect/Schema").Array$<typeof import("effect/Schema").String>;
+            remaining: typeof import("effect/Schema").Number;
+        }>>;
+        readonly regenerateBackupCodes: import("../endpoint.js").Endpoint<"POST", "/security/backup-codes/regenerate", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            codes: import("effect/Schema").Array$<typeof import("effect/Schema").String>;
+        }>>;
+    };
+    readonly email: {
+        readonly requestChange: import("../endpoint.js").Endpoint<"POST", "/security/email/change", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            newEmail: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+            message: typeof import("effect/Schema").String;
+            expiresAt: typeof import("effect/Schema").String;
+        }>>;
+        readonly confirmChange: import("../endpoint.js").Endpoint<"POST", "/security/email/confirm", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            token: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+            newEmail: typeof import("effect/Schema").String;
+        }>>;
+    };
+    readonly oauth: {
+        readonly getProviders: import("../endpoint.js").Endpoint<"GET", "/security/oauth/providers", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            providers: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                provider: typeof import("effect/Schema").String;
+                providerAccountId: typeof import("effect/Schema").String;
+                email: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+                connectedAt: typeof import("effect/Schema").String;
+            }>>;
+        }>>;
+        readonly connect: import("../endpoint.js").Endpoint<"POST", "/security/oauth/connect", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            provider: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            url: typeof import("effect/Schema").String;
+        }>>;
+        readonly disconnect: import("../endpoint.js").Endpoint<"POST", "/security/oauth/disconnect", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            provider: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+    };
+    readonly password: {
+        readonly status: import("../endpoint.js").Endpoint<"GET", "/security/password/status", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            hasPassword: typeof import("effect/Schema").Boolean;
+        }>>;
+        readonly set: import("../endpoint.js").Endpoint<"POST", "/security/password/set", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            password: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+    };
+    readonly passkeys: {
+        readonly list: import("../endpoint.js").Endpoint<"GET", "/security/passkeys", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            passkeys: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                id: typeof import("effect/Schema").String;
+                name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+                createdAt: typeof import("effect/Schema").String;
+                lastUsedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            }>>;
+        }>>;
+        readonly registerStart: import("../endpoint.js").Endpoint<"POST", "/security/passkeys/register/start", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            challenge: typeof import("effect/Schema").String;
+            rp: import("effect/Schema").Struct<{
+                name: typeof import("effect/Schema").String;
+                id: typeof import("effect/Schema").String;
+            }>;
+            user: import("effect/Schema").Struct<{
+                id: typeof import("effect/Schema").String;
+                name: typeof import("effect/Schema").String;
+                displayName: typeof import("effect/Schema").String;
+            }>;
+            pubKeyCredParams: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                type: import("effect/Schema").Literal<["public-key"]>;
+                alg: typeof import("effect/Schema").Number;
+            }>>;
+            timeout: import("effect/Schema").optional<typeof import("effect/Schema").Number>;
+            attestation: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            excludeCredentials: import("effect/Schema").optional<import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                type: import("effect/Schema").Literal<["public-key"]>;
+                id: typeof import("effect/Schema").String;
+                transports: import("effect/Schema").optional<import("effect/Schema").Array$<typeof import("effect/Schema").String>>;
+            }>>>;
+            authenticatorSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                authenticatorAttachment: import("effect/Schema").optional<import("effect/Schema").Literal<["platform", "cross-platform"]>>;
+                requireResidentKey: import("effect/Schema").optional<typeof import("effect/Schema").Boolean>;
+                residentKey: import("effect/Schema").optional<import("effect/Schema").Literal<["discouraged", "preferred", "required"]>>;
+                userVerification: import("effect/Schema").optional<import("effect/Schema").Literal<["discouraged", "preferred", "required"]>>;
+            }>>;
+        }>>;
+        readonly registerVerify: import("../endpoint.js").Endpoint<"POST", "/security/passkeys/register/verify", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            credential: import("effect/Schema").Record$<typeof import("effect/Schema").String, typeof import("effect/Schema").Unknown>;
+            deviceName: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        }>, import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+            lastUsedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        }>>;
+        readonly rename: import("../endpoint.js").Endpoint<"POST", "/security/passkeys/rename", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            passkeyId: typeof import("effect/Schema").String;
+            name: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+        readonly delete: import("../endpoint.js").Endpoint<"POST", "/security/passkeys/delete", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            passkeyId: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+    };
+    readonly sessions: {
+        readonly list: import("../endpoint.js").Endpoint<"GET", "/security/sessions", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            sessions: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                id: typeof import("effect/Schema").String;
+                name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+                ipAddress: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+                userAgent: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+                createdAt: typeof import("effect/Schema").String;
+                lastActiveAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+                isCurrent: typeof import("effect/Schema").Boolean;
+            }>>;
+        }>>;
+        readonly revoke: import("../endpoint.js").Endpoint<"POST", "/security/sessions/revoke", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            sessionId: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+        readonly revokeOther: import("../endpoint.js").Endpoint<"POST", "/security/sessions/revoke-other", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            revokedCount: typeof import("effect/Schema").Number;
+        }>>;
+        readonly rename: import("../endpoint.js").Endpoint<"POST", "/security/sessions/rename", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            sessionId: typeof import("effect/Schema").String;
+            name: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+    };
+    readonly score: {
+        readonly getScore: import("../endpoint.js").Endpoint<"GET", "/security/score", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            score: typeof import("effect/Schema").Number;
+            factors: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                name: typeof import("effect/Schema").String;
+                enabled: typeof import("effect/Schema").Boolean;
+                points: typeof import("effect/Schema").Number;
+                maxPoints: typeof import("effect/Schema").Number;
+            }>>;
+            recommendations: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                id: typeof import("effect/Schema").String;
+                title: typeof import("effect/Schema").String;
+                description: typeof import("effect/Schema").String;
+                priority: import("effect/Schema").Literal<["low", "medium", "high"]>;
+                action: typeof import("effect/Schema").String;
+            }>>;
+        }>>;
+        readonly getStatusQuick: import("../endpoint.js").Endpoint<"GET", "/security/status", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            score: typeof import("effect/Schema").Number;
+            level: import("effect/Schema").Literal<["low", "medium", "high", "excellent"]>;
+            hasPassword: typeof import("effect/Schema").Boolean;
+            hasTwoFactor: typeof import("effect/Schema").Boolean;
+            hasPasskeys: typeof import("effect/Schema").Boolean;
+            sessionCount: typeof import("effect/Schema").Number;
+        }>>;
+    };
+    readonly alerts: {
+        readonly list: import("../endpoint.js").Endpoint<"GET", "/security/alerts", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            unreadOnly: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            alerts: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+                id: typeof import("effect/Schema").String;
+                type: import("effect/Schema").Literal<["password_changed", "email_changed", "two_factor_enabled", "two_factor_disabled", "new_device", "suspicious_login", "account_locked", "account_unlocked"]>;
+                title: typeof import("effect/Schema").String;
+                description: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+                metadata: import("effect/Schema").NullOr<import("effect/Schema").Record$<typeof import("effect/Schema").String, typeof import("effect/Schema").Unknown>>;
+                read: typeof import("effect/Schema").Boolean;
+                createdAt: typeof import("effect/Schema").String;
+            }>>;
+        }>>;
+        readonly unreadCount: import("../endpoint.js").Endpoint<"GET", "/security/alerts/unread-count", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            count: typeof import("effect/Schema").Number;
+        }>>;
+        readonly markRead: import("../endpoint.js").Endpoint<"POST", "/security/alerts/mark-read", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            alertId: typeof import("effect/Schema").String;
+        }>, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+        readonly markAllRead: import("../endpoint.js").Endpoint<"POST", "/security/alerts/mark-all-read", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+            success: typeof import("effect/Schema").Boolean;
+        }>>;
+    };
+};
+//# sourceMappingURL=security.d.ts.map

package/dist/endpoints/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/endpoints/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAsUH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASpB,CAAA"}