@tempoxyz/id 0.0.0-pr-187.sha-eed04d3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (712) hide show
  1. package/README.md +81 -0
  2. package/dist/App.d.ts +20 -0
  3. package/dist/App.d.ts.map +1 -0
  4. package/dist/App.js +26 -0
  5. package/dist/App.js.map +1 -0
  6. package/dist/app/client/.assetsignore +2 -0
  7. package/dist/app/client/assets/BRLA-CZvVDNYr.png +0 -0
  8. package/dist/app/client/assets/CHFAU-DCedc4aH.png +0 -0
  9. package/dist/app/client/assets/DLUSD-BnRXm3EI.png +0 -0
  10. package/dist/app/client/assets/PRIME-CiFp2-3e.svg +14 -0
  11. package/dist/app/client/assets/Pilat-Bold-C1t1eIrF.woff2 +0 -0
  12. package/dist/app/client/assets/Pilat-Book-CbS8ofT8.woff2 +0 -0
  13. package/dist/app/client/assets/Pilat-Demi-CADSbPAt.woff2 +0 -0
  14. package/dist/app/client/assets/Pilat-Regular-Bx8vzE7q.woff2 +0 -0
  15. package/dist/app/client/assets/USD1-COVcO_PB.svg +30 -0
  16. package/dist/app/client/assets/YLDS-CRh8Zw0g.svg +3 -0
  17. package/dist/app/client/assets/ccip-Cq1mMiVl.js +1 -0
  18. package/dist/app/client/assets/frxUSD-n9pTpinR.svg +1 -0
  19. package/dist/app/client/assets/geist-mono-latin-wght-normal-XN7g48iV.woff2 +0 -0
  20. package/dist/app/client/assets/index-B7YJVP00.css +1 -0
  21. package/dist/app/client/assets/index-UXTxXCLk.js +55 -0
  22. package/dist/app/client/assets/pathUSD-BvaO6ooS.svg +25 -0
  23. package/dist/app/client/assets/reset-co-CHrff.css +1 -0
  24. package/dist/app/client/assets/wYLDS-CaCKDrO-.svg +10 -0
  25. package/dist/app/db/auth.d.ts +3207 -0
  26. package/dist/app/db/auth.d.ts.map +1 -0
  27. package/dist/app/db/auth.js +330 -0
  28. package/dist/app/db/auth.js.map +1 -0
  29. package/dist/app/db/schema.d.ts +932 -0
  30. package/dist/app/db/schema.d.ts.map +1 -0
  31. package/dist/app/db/schema.js +171 -0
  32. package/dist/app/db/schema.js.map +1 -0
  33. package/dist/app/server/.vite/manifest.json +489 -0
  34. package/dist/app/server/assets/BRLA-CZvVDNYr.png +0 -0
  35. package/dist/app/server/assets/CHFAU-DCedc4aH.png +0 -0
  36. package/dist/app/server/assets/DLUSD-BnRXm3EI.png +0 -0
  37. package/dist/app/server/assets/PRIME-CiFp2-3e.svg +14 -0
  38. package/dist/app/server/assets/Pilat-Bold-C1t1eIrF.woff2 +0 -0
  39. package/dist/app/server/assets/Pilat-Book-CbS8ofT8.woff2 +0 -0
  40. package/dist/app/server/assets/Pilat-Demi-CADSbPAt.woff2 +0 -0
  41. package/dist/app/server/assets/Pilat-Regular-Bx8vzE7q.woff2 +0 -0
  42. package/dist/app/server/assets/USD1-COVcO_PB.svg +30 -0
  43. package/dist/app/server/assets/YLDS-CRh8Zw0g.svg +3 -0
  44. package/dist/app/server/assets/_tanstack-start-manifest_v-DjQNeRZp.js +1 -0
  45. package/dist/app/server/assets/arktype-aI7TBD0R-D1R3Byo5.js +2 -0
  46. package/dist/app/server/assets/arktype-aI7TBD0R-D1R3Byo5.js.map +1 -0
  47. package/dist/app/server/assets/authorize-C95F-9E1-CbESJKGU.js +31 -0
  48. package/dist/app/server/assets/authorize-C95F-9E1-CbESJKGU.js.map +1 -0
  49. package/dist/app/server/assets/bun-sqlite-dialect-DoOVo4ja-CtyBkVMb.js +2 -0
  50. package/dist/app/server/assets/bun-sqlite-dialect-DoOVo4ja-CtyBkVMb.js.map +1 -0
  51. package/dist/app/server/assets/call-UQamaCKN.js +32 -0
  52. package/dist/app/server/assets/call-UQamaCKN.js.map +1 -0
  53. package/dist/app/server/assets/ccip-CbNKFO4n.js +2 -0
  54. package/dist/app/server/assets/ccip-CbNKFO4n.js.map +1 -0
  55. package/dist/app/server/assets/compiled-query-Ds2NVcFT.js +2 -0
  56. package/dist/app/server/assets/compiled-query-Ds2NVcFT.js.map +1 -0
  57. package/dist/app/server/assets/convert-BIC8n32x.js +2 -0
  58. package/dist/app/server/assets/convert-BIC8n32x.js.map +1 -0
  59. package/dist/app/server/assets/cookie-CS900nSP.css +1 -0
  60. package/dist/app/server/assets/cookie-Cce9CrIP.js +10 -0
  61. package/dist/app/server/assets/cookie-Cce9CrIP.js.map +1 -0
  62. package/dist/app/server/assets/core-B1HCXUmx.js +56 -0
  63. package/dist/app/server/assets/core-B1HCXUmx.js.map +1 -0
  64. package/dist/app/server/assets/d1-sqlite-dialect-m0f01-4z-Cv-csE1u.js +2 -0
  65. package/dist/app/server/assets/d1-sqlite-dialect-m0f01-4z-Cv-csE1u.js.map +1 -0
  66. package/dist/app/server/assets/default-u_dwuiYb-BJJ9PwCi.js +2 -0
  67. package/dist/app/server/assets/default-u_dwuiYb-BJJ9PwCi.js.map +1 -0
  68. package/dist/app/server/assets/dist-BxSwugSY.js +1 -0
  69. package/dist/app/server/assets/dist-CZGFhmQd.js +2 -0
  70. package/dist/app/server/assets/dist-CZGFhmQd.js.map +1 -0
  71. package/dist/app/server/assets/dist-Dg3PQqiW.js +15 -0
  72. package/dist/app/server/assets/dist-Dg3PQqiW.js.map +1 -0
  73. package/dist/app/server/assets/effect-QlVUlMFu-2tSPDT2b.js +2 -0
  74. package/dist/app/server/assets/effect-QlVUlMFu-2tSPDT2b.js.map +1 -0
  75. package/dist/app/server/assets/empty-plugin-adapters-BaGcmrjC.js +2 -0
  76. package/dist/app/server/assets/empty-plugin-adapters-BaGcmrjC.js.map +1 -0
  77. package/dist/app/server/assets/factory-ipHlJXZY.js +5 -0
  78. package/dist/app/server/assets/factory-ipHlJXZY.js.map +1 -0
  79. package/dist/app/server/assets/frxUSD-n9pTpinR.svg +1 -0
  80. package/dist/app/server/assets/geist-mono-latin-wght-normal-XN7g48iV.woff2 +0 -0
  81. package/dist/app/server/assets/get-id-field-B0x109VU.js +6 -0
  82. package/dist/app/server/assets/get-id-field-B0x109VU.js.map +1 -0
  83. package/dist/app/server/assets/index-CLddUTqr-xpSuLpBt.js +2 -0
  84. package/dist/app/server/assets/index-CLddUTqr-xpSuLpBt.js.map +1 -0
  85. package/dist/app/server/assets/index-DZEfthgZ-8Uq5s5Pt.js +2 -0
  86. package/dist/app/server/assets/index-DZEfthgZ-8Uq5s5Pt.js.map +1 -0
  87. package/dist/app/server/assets/kysely-adapter-MkHAI9Jk.js +1 -0
  88. package/dist/app/server/assets/node-sqlite-dialect-BowWLXvK.js +2 -0
  89. package/dist/app/server/assets/node-sqlite-dialect-BowWLXvK.js.map +1 -0
  90. package/dist/app/server/assets/pathUSD-BvaO6ooS.svg +25 -0
  91. package/dist/app/server/assets/reset-co-CHrff.css +1 -0
  92. package/dist/app/server/assets/rolldown-runtime-B0Z9INg1.js +1 -0
  93. package/dist/app/server/assets/router-CcbyBCI4.css +1 -0
  94. package/dist/app/server/assets/router-xjZtEeaI.js +7 -0
  95. package/dist/app/server/assets/router-xjZtEeaI.js.map +1 -0
  96. package/dist/app/server/assets/schema-check-Cf7QOZZD.js +9 -0
  97. package/dist/app/server/assets/schema-check-Cf7QOZZD.js.map +1 -0
  98. package/dist/app/server/assets/schemas-C2lCYmR5.js +2 -0
  99. package/dist/app/server/assets/schemas-C2lCYmR5.js.map +1 -0
  100. package/dist/app/server/assets/secp256k1-buM5g4AL.js +2 -0
  101. package/dist/app/server/assets/secp256k1-buM5g4AL.js.map +1 -0
  102. package/dist/app/server/assets/sqlite-adapter-C_LAV4e3.js +2 -0
  103. package/dist/app/server/assets/sqlite-adapter-C_LAV4e3.js.map +1 -0
  104. package/dist/app/server/assets/sqlite-introspector-DSCAP82F-Crx7Ny14.js +6 -0
  105. package/dist/app/server/assets/sqlite-introspector-DSCAP82F-Crx7Ny14.js.map +1 -0
  106. package/dist/app/server/assets/standard-json-Cg1N07hM.js +2 -0
  107. package/dist/app/server/assets/standard-json-Cg1N07hM.js.map +1 -0
  108. package/dist/app/server/assets/standard-json-DY77efq0.js +2 -0
  109. package/dist/app/server/assets/standard-json-DY77efq0.js.map +1 -0
  110. package/dist/app/server/assets/standard-json-ig2t0wRt.js +2 -0
  111. package/dist/app/server/assets/standard-json-ig2t0wRt.js.map +1 -0
  112. package/dist/app/server/assets/standard-json-t-LNckA6.js +2 -0
  113. package/dist/app/server/assets/standard-json-t-LNckA6.js.map +1 -0
  114. package/dist/app/server/assets/standard-openapi-CONmVRl8.js +2 -0
  115. package/dist/app/server/assets/standard-openapi-CONmVRl8.js.map +1 -0
  116. package/dist/app/server/assets/start-C63VetBp.js +2 -0
  117. package/dist/app/server/assets/start-C63VetBp.js.map +1 -0
  118. package/dist/app/server/assets/sury-CWZTCd75-xt1mWc9f.js +2 -0
  119. package/dist/app/server/assets/sury-CWZTCd75-xt1mWc9f.js.map +1 -0
  120. package/dist/app/server/assets/typebox-Dei93FPO-D_lCVdAz.js +2 -0
  121. package/dist/app/server/assets/typebox-Dei93FPO-D_lCVdAz.js.map +1 -0
  122. package/dist/app/server/assets/utils-C4ZXZIZW.js +2 -0
  123. package/dist/app/server/assets/utils-C4ZXZIZW.js.map +1 -0
  124. package/dist/app/server/assets/valibot--1zFm7rT-NSoY2xTp.js +2 -0
  125. package/dist/app/server/assets/valibot--1zFm7rT-NSoY2xTp.js.map +1 -0
  126. package/dist/app/server/assets/valibot-D_HTw1Gn-CJwWeOUE.js +2 -0
  127. package/dist/app/server/assets/valibot-D_HTw1Gn-CJwWeOUE.js.map +1 -0
  128. package/dist/app/server/assets/wYLDS-CaCKDrO-.svg +10 -0
  129. package/dist/app/server/assets/zod-Bwrt9trS-CV38yPnQ.js +2 -0
  130. package/dist/app/server/assets/zod-Bwrt9trS-CV38yPnQ.js.map +1 -0
  131. package/dist/app/server/assets/zod-DSgpEGAE-BvlnBE2L.js +2 -0
  132. package/dist/app/server/assets/zod-DSgpEGAE-BvlnBE2L.js.map +1 -0
  133. package/dist/app/server/index.js +574 -0
  134. package/dist/app/server/index.js.map +1 -0
  135. package/dist/app/server/wrangler.json +1 -0
  136. package/dist/cli/Admin.d.ts +38 -0
  137. package/dist/cli/Admin.d.ts.map +1 -0
  138. package/dist/cli/Admin.js +62 -0
  139. package/dist/cli/Admin.js.map +1 -0
  140. package/dist/cli/Apps.d.ts +9 -0
  141. package/dist/cli/Apps.d.ts.map +1 -0
  142. package/dist/cli/Apps.js +36 -0
  143. package/dist/cli/Apps.js.map +1 -0
  144. package/dist/cli/Cli.d.ts +14 -0
  145. package/dist/cli/Cli.d.ts.map +1 -0
  146. package/dist/cli/Cli.js +27 -0
  147. package/dist/cli/Cli.js.map +1 -0
  148. package/dist/cli/Project.d.ts +20 -0
  149. package/dist/cli/Project.d.ts.map +1 -0
  150. package/dist/cli/Project.js +88 -0
  151. package/dist/cli/Project.js.map +1 -0
  152. package/dist/cli/Realms.d.ts +24 -0
  153. package/dist/cli/Realms.d.ts.map +1 -0
  154. package/dist/cli/Realms.js +49 -0
  155. package/dist/cli/Realms.js.map +1 -0
  156. package/dist/cli/Session.d.ts +85 -0
  157. package/dist/cli/Session.d.ts.map +1 -0
  158. package/dist/cli/Session.js +178 -0
  159. package/dist/cli/Session.js.map +1 -0
  160. package/dist/cli/User.d.ts +29 -0
  161. package/dist/cli/User.d.ts.map +1 -0
  162. package/dist/cli/User.js +39 -0
  163. package/dist/cli/User.js.map +1 -0
  164. package/dist/cli/V1.d.ts +35 -0
  165. package/dist/cli/V1.d.ts.map +1 -0
  166. package/dist/cli/V1.js +41 -0
  167. package/dist/cli/V1.js.map +1 -0
  168. package/dist/cli/bin.d.ts +3 -0
  169. package/dist/cli/bin.d.ts.map +1 -0
  170. package/dist/cli/bin.js +46 -0
  171. package/dist/cli/bin.js.map +1 -0
  172. package/dist/cli/commands/admin/apps/create.d.ts +23 -0
  173. package/dist/cli/commands/admin/apps/create.d.ts.map +1 -0
  174. package/dist/cli/commands/admin/apps/create.js +89 -0
  175. package/dist/cli/commands/admin/apps/create.js.map +1 -0
  176. package/dist/cli/commands/admin/apps/delete.d.ts +14 -0
  177. package/dist/cli/commands/admin/apps/delete.d.ts.map +1 -0
  178. package/dist/cli/commands/admin/apps/delete.js +41 -0
  179. package/dist/cli/commands/admin/apps/delete.js.map +1 -0
  180. package/dist/cli/commands/admin/apps/index.d.ts +5 -0
  181. package/dist/cli/commands/admin/apps/index.d.ts.map +1 -0
  182. package/dist/cli/commands/admin/apps/index.js +14 -0
  183. package/dist/cli/commands/admin/apps/index.js.map +1 -0
  184. package/dist/cli/commands/admin/apps/list.d.ts +9 -0
  185. package/dist/cli/commands/admin/apps/list.d.ts.map +1 -0
  186. package/dist/cli/commands/admin/apps/list.js +26 -0
  187. package/dist/cli/commands/admin/apps/list.js.map +1 -0
  188. package/dist/cli/commands/admin/apps/rotate-secret.d.ts +16 -0
  189. package/dist/cli/commands/admin/apps/rotate-secret.d.ts.map +1 -0
  190. package/dist/cli/commands/admin/apps/rotate-secret.js +47 -0
  191. package/dist/cli/commands/admin/apps/rotate-secret.js.map +1 -0
  192. package/dist/cli/commands/admin/apps/update.d.ts +20 -0
  193. package/dist/cli/commands/admin/apps/update.d.ts.map +1 -0
  194. package/dist/cli/commands/admin/apps/update.js +76 -0
  195. package/dist/cli/commands/admin/apps/update.js.map +1 -0
  196. package/dist/cli/commands/admin/index.d.ts +5 -0
  197. package/dist/cli/commands/admin/index.d.ts.map +1 -0
  198. package/dist/cli/commands/admin/index.js +13 -0
  199. package/dist/cli/commands/admin/index.js.map +1 -0
  200. package/dist/cli/commands/admin/migrate.d.ts +9 -0
  201. package/dist/cli/commands/admin/migrate.d.ts.map +1 -0
  202. package/dist/cli/commands/admin/migrate.js +17 -0
  203. package/dist/cli/commands/admin/migrate.js.map +1 -0
  204. package/dist/cli/commands/admin/realms/add.d.ts +12 -0
  205. package/dist/cli/commands/admin/realms/add.d.ts.map +1 -0
  206. package/dist/cli/commands/admin/realms/add.js +42 -0
  207. package/dist/cli/commands/admin/realms/add.js.map +1 -0
  208. package/dist/cli/commands/admin/realms/index.d.ts +5 -0
  209. package/dist/cli/commands/admin/realms/index.d.ts.map +1 -0
  210. package/dist/cli/commands/admin/realms/index.js +13 -0
  211. package/dist/cli/commands/admin/realms/index.js.map +1 -0
  212. package/dist/cli/commands/admin/realms/list.d.ts +13 -0
  213. package/dist/cli/commands/admin/realms/list.d.ts.map +1 -0
  214. package/dist/cli/commands/admin/realms/list.js +36 -0
  215. package/dist/cli/commands/admin/realms/list.js.map +1 -0
  216. package/dist/cli/commands/admin/realms/passkeys/index.d.ts +5 -0
  217. package/dist/cli/commands/admin/realms/passkeys/index.d.ts.map +1 -0
  218. package/dist/cli/commands/admin/realms/passkeys/index.js +13 -0
  219. package/dist/cli/commands/admin/realms/passkeys/index.js.map +1 -0
  220. package/dist/cli/commands/admin/realms/passkeys/set.d.ts +16 -0
  221. package/dist/cli/commands/admin/realms/passkeys/set.d.ts.map +1 -0
  222. package/dist/cli/commands/admin/realms/passkeys/set.js +46 -0
  223. package/dist/cli/commands/admin/realms/passkeys/set.js.map +1 -0
  224. package/dist/cli/commands/admin/realms/privy/index.d.ts +5 -0
  225. package/dist/cli/commands/admin/realms/privy/index.d.ts.map +1 -0
  226. package/dist/cli/commands/admin/realms/privy/index.js +13 -0
  227. package/dist/cli/commands/admin/realms/privy/index.js.map +1 -0
  228. package/dist/cli/commands/admin/realms/privy/set.d.ts +18 -0
  229. package/dist/cli/commands/admin/realms/privy/set.d.ts.map +1 -0
  230. package/dist/cli/commands/admin/realms/privy/set.js +66 -0
  231. package/dist/cli/commands/admin/realms/privy/set.js.map +1 -0
  232. package/dist/cli/commands/admin/realms/remove.d.ts +11 -0
  233. package/dist/cli/commands/admin/realms/remove.d.ts.map +1 -0
  234. package/dist/cli/commands/admin/realms/remove.js +35 -0
  235. package/dist/cli/commands/admin/realms/remove.js.map +1 -0
  236. package/dist/cli/commands/admin/realms/secp256k1/disable.d.ts +15 -0
  237. package/dist/cli/commands/admin/realms/secp256k1/disable.d.ts.map +1 -0
  238. package/dist/cli/commands/admin/realms/secp256k1/disable.js +42 -0
  239. package/dist/cli/commands/admin/realms/secp256k1/disable.js.map +1 -0
  240. package/dist/cli/commands/admin/realms/secp256k1/enable.d.ts +15 -0
  241. package/dist/cli/commands/admin/realms/secp256k1/enable.d.ts.map +1 -0
  242. package/dist/cli/commands/admin/realms/secp256k1/enable.js +42 -0
  243. package/dist/cli/commands/admin/realms/secp256k1/enable.js.map +1 -0
  244. package/dist/cli/commands/admin/realms/secp256k1/index.d.ts +9 -0
  245. package/dist/cli/commands/admin/realms/secp256k1/index.d.ts.map +1 -0
  246. package/dist/cli/commands/admin/realms/secp256k1/index.js +17 -0
  247. package/dist/cli/commands/admin/realms/secp256k1/index.js.map +1 -0
  248. package/dist/cli/commands/admin/realms/set.d.ts +16 -0
  249. package/dist/cli/commands/admin/realms/set.d.ts.map +1 -0
  250. package/dist/cli/commands/admin/realms/set.js +46 -0
  251. package/dist/cli/commands/admin/realms/set.js.map +1 -0
  252. package/dist/cli/commands/admin/rotate-key.d.ts +15 -0
  253. package/dist/cli/commands/admin/rotate-key.d.ts.map +1 -0
  254. package/dist/cli/commands/admin/rotate-key.js +46 -0
  255. package/dist/cli/commands/admin/rotate-key.js.map +1 -0
  256. package/dist/cli/commands/init.d.ts +11 -0
  257. package/dist/cli/commands/init.d.ts.map +1 -0
  258. package/dist/cli/commands/init.js +34 -0
  259. package/dist/cli/commands/init.js.map +1 -0
  260. package/dist/cli/commands/login.d.ts +12 -0
  261. package/dist/cli/commands/login.d.ts.map +1 -0
  262. package/dist/cli/commands/login.js +29 -0
  263. package/dist/cli/commands/login.js.map +1 -0
  264. package/dist/cli/commands/logout.d.ts +8 -0
  265. package/dist/cli/commands/logout.d.ts.map +1 -0
  266. package/dist/cli/commands/logout.js +19 -0
  267. package/dist/cli/commands/logout.js.map +1 -0
  268. package/dist/cli/commands/whoami.d.ts +12 -0
  269. package/dist/cli/commands/whoami.d.ts.map +1 -0
  270. package/dist/cli/commands/whoami.js +24 -0
  271. package/dist/cli/commands/whoami.js.map +1 -0
  272. package/dist/client/Actions.d.ts +101 -0
  273. package/dist/client/Actions.d.ts.map +1 -0
  274. package/dist/client/Actions.js +90 -0
  275. package/dist/client/Actions.js.map +1 -0
  276. package/dist/client/Auth.d.ts +161 -0
  277. package/dist/client/Auth.d.ts.map +1 -0
  278. package/dist/client/Auth.js +113 -0
  279. package/dist/client/Auth.js.map +1 -0
  280. package/dist/client/Authorization.d.ts +29 -0
  281. package/dist/client/Authorization.d.ts.map +1 -0
  282. package/dist/client/Authorization.js +12 -0
  283. package/dist/client/Authorization.js.map +1 -0
  284. package/dist/client/Decorator.d.ts +170 -0
  285. package/dist/client/Decorator.d.ts.map +1 -0
  286. package/dist/client/Decorator.js +227 -0
  287. package/dist/client/Decorator.js.map +1 -0
  288. package/dist/client/Key.d.ts +85 -0
  289. package/dist/client/Key.d.ts.map +1 -0
  290. package/dist/client/Key.js +83 -0
  291. package/dist/client/Key.js.map +1 -0
  292. package/dist/client/Pending.d.ts +39 -0
  293. package/dist/client/Pending.d.ts.map +1 -0
  294. package/dist/client/Pending.js +12 -0
  295. package/dist/client/Pending.js.map +1 -0
  296. package/dist/client/Permissions.d.ts +34 -0
  297. package/dist/client/Permissions.d.ts.map +1 -0
  298. package/dist/client/Permissions.js +16 -0
  299. package/dist/client/Permissions.js.map +1 -0
  300. package/dist/client/Provider.d.ts +16 -0
  301. package/dist/client/Provider.d.ts.map +1 -0
  302. package/dist/client/Provider.js +12 -0
  303. package/dist/client/Provider.js.map +1 -0
  304. package/dist/client/Step.d.ts +21 -0
  305. package/dist/client/Step.d.ts.map +1 -0
  306. package/dist/client/Step.js +16 -0
  307. package/dist/client/Step.js.map +1 -0
  308. package/dist/client/Storage.d.ts +27 -0
  309. package/dist/client/Storage.d.ts.map +1 -0
  310. package/dist/client/Storage.js +16 -0
  311. package/dist/client/Storage.js.map +1 -0
  312. package/dist/client/TempoAccount.d.ts +40 -0
  313. package/dist/client/TempoAccount.d.ts.map +1 -0
  314. package/dist/client/TempoAccount.js +16 -0
  315. package/dist/client/TempoAccount.js.map +1 -0
  316. package/dist/client/Tokens.d.ts +25 -0
  317. package/dist/client/Tokens.d.ts.map +1 -0
  318. package/dist/client/Tokens.js +12 -0
  319. package/dist/client/Tokens.js.map +1 -0
  320. package/dist/client/User.d.ts +21 -0
  321. package/dist/client/User.d.ts.map +1 -0
  322. package/dist/client/User.js +12 -0
  323. package/dist/client/User.js.map +1 -0
  324. package/dist/client/actions/account.d.ts +25 -0
  325. package/dist/client/actions/account.d.ts.map +1 -0
  326. package/dist/client/actions/account.js +34 -0
  327. package/dist/client/actions/account.js.map +1 -0
  328. package/dist/client/actions/device.d.ts +53 -0
  329. package/dist/client/actions/device.d.ts.map +1 -0
  330. package/dist/client/actions/device.js +79 -0
  331. package/dist/client/actions/device.js.map +1 -0
  332. package/dist/client/actions/email.d.ts +84 -0
  333. package/dist/client/actions/email.d.ts.map +1 -0
  334. package/dist/client/actions/email.js +63 -0
  335. package/dist/client/actions/email.js.map +1 -0
  336. package/dist/client/actions/oauth.d.ts +115 -0
  337. package/dist/client/actions/oauth.d.ts.map +1 -0
  338. package/dist/client/actions/oauth.js +105 -0
  339. package/dist/client/actions/oauth.js.map +1 -0
  340. package/dist/client/actions/passkey.d.ts +88 -0
  341. package/dist/client/actions/passkey.d.ts.map +1 -0
  342. package/dist/client/actions/passkey.js +60 -0
  343. package/dist/client/actions/passkey.js.map +1 -0
  344. package/dist/client/actions/provider.d.ts +49 -0
  345. package/dist/client/actions/provider.d.ts.map +1 -0
  346. package/dist/client/actions/provider.js +34 -0
  347. package/dist/client/actions/provider.js.map +1 -0
  348. package/dist/client/actions/realm.d.ts +24 -0
  349. package/dist/client/actions/realm.d.ts.map +1 -0
  350. package/dist/client/actions/realm.js +15 -0
  351. package/dist/client/actions/realm.js.map +1 -0
  352. package/dist/client/actions/redirect.d.ts +153 -0
  353. package/dist/client/actions/redirect.d.ts.map +1 -0
  354. package/dist/client/actions/redirect.js +236 -0
  355. package/dist/client/actions/redirect.js.map +1 -0
  356. package/dist/client/internal/accessKey.d.ts +21 -0
  357. package/dist/client/internal/accessKey.d.ts.map +1 -0
  358. package/dist/client/internal/accessKey.js +38 -0
  359. package/dist/client/internal/accessKey.js.map +1 -0
  360. package/dist/client/internal/account.d.ts +14 -0
  361. package/dist/client/internal/account.d.ts.map +1 -0
  362. package/dist/client/internal/account.js +3 -0
  363. package/dist/client/internal/account.js.map +1 -0
  364. package/dist/client/internal/api.d.ts +106 -0
  365. package/dist/client/internal/api.d.ts.map +1 -0
  366. package/dist/client/internal/api.js +129 -0
  367. package/dist/client/internal/api.js.map +1 -0
  368. package/dist/client/internal/headless.d.ts +33 -0
  369. package/dist/client/internal/headless.d.ts.map +1 -0
  370. package/dist/client/internal/headless.js +46 -0
  371. package/dist/client/internal/headless.js.map +1 -0
  372. package/dist/client/internal/indexedDb.d.ts +9 -0
  373. package/dist/client/internal/indexedDb.d.ts.map +1 -0
  374. package/dist/client/internal/indexedDb.js +32 -0
  375. package/dist/client/internal/indexedDb.js.map +1 -0
  376. package/dist/client/internal/request.d.ts +58 -0
  377. package/dist/client/internal/request.d.ts.map +1 -0
  378. package/dist/client/internal/request.js +45 -0
  379. package/dist/client/internal/request.js.map +1 -0
  380. package/dist/client/internal/store.d.ts +12 -0
  381. package/dist/client/internal/store.d.ts.map +1 -0
  382. package/dist/client/internal/store.js +15 -0
  383. package/dist/client/internal/store.js.map +1 -0
  384. package/dist/client.d.ts +20 -0
  385. package/dist/client.d.ts.map +1 -0
  386. package/dist/client.js +20 -0
  387. package/dist/client.js.map +1 -0
  388. package/dist/index.d.ts +7 -0
  389. package/dist/index.d.ts.map +1 -0
  390. package/dist/index.js +7 -0
  391. package/dist/index.js.map +1 -0
  392. package/dist/internal/Apps.d.ts +3051 -0
  393. package/dist/internal/Apps.d.ts.map +1 -0
  394. package/dist/internal/Apps.js +472 -0
  395. package/dist/internal/Apps.js.map +1 -0
  396. package/dist/internal/Auth.d.ts +4058 -0
  397. package/dist/internal/Auth.d.ts.map +1 -0
  398. package/dist/internal/Auth.js +137 -0
  399. package/dist/internal/Auth.js.map +1 -0
  400. package/dist/internal/Authorize.d.ts +532 -0
  401. package/dist/internal/Authorize.d.ts.map +1 -0
  402. package/dist/internal/Authorize.js +326 -0
  403. package/dist/internal/Authorize.js.map +1 -0
  404. package/dist/internal/Device.d.ts +371 -0
  405. package/dist/internal/Device.d.ts.map +1 -0
  406. package/dist/internal/Device.js +271 -0
  407. package/dist/internal/Device.js.map +1 -0
  408. package/dist/internal/Env.d.ts +57 -0
  409. package/dist/internal/Env.d.ts.map +1 -0
  410. package/dist/internal/Env.js +2 -0
  411. package/dist/internal/Env.js.map +1 -0
  412. package/dist/internal/ErrorResponse.d.ts +609 -0
  413. package/dist/internal/ErrorResponse.d.ts.map +1 -0
  414. package/dist/internal/ErrorResponse.js +679 -0
  415. package/dist/internal/ErrorResponse.js.map +1 -0
  416. package/dist/internal/Id.d.ts +10 -0
  417. package/dist/internal/Id.d.ts.map +1 -0
  418. package/dist/internal/Id.js +34 -0
  419. package/dist/internal/Id.js.map +1 -0
  420. package/dist/internal/KeyAuthorization.d.ts +1456 -0
  421. package/dist/internal/KeyAuthorization.d.ts.map +1 -0
  422. package/dist/internal/KeyAuthorization.js +1030 -0
  423. package/dist/internal/KeyAuthorization.js.map +1 -0
  424. package/dist/internal/Limits.d.ts +65 -0
  425. package/dist/internal/Limits.d.ts.map +1 -0
  426. package/dist/internal/Limits.js +35 -0
  427. package/dist/internal/Limits.js.map +1 -0
  428. package/dist/internal/Log.d.ts +49 -0
  429. package/dist/internal/Log.d.ts.map +1 -0
  430. package/dist/internal/Log.js +101 -0
  431. package/dist/internal/Log.js.map +1 -0
  432. package/dist/internal/LogLine.d.ts +33 -0
  433. package/dist/internal/LogLine.d.ts.map +1 -0
  434. package/dist/internal/LogLine.js +56 -0
  435. package/dist/internal/LogLine.js.map +1 -0
  436. package/dist/internal/Migrations.d.ts +19 -0
  437. package/dist/internal/Migrations.d.ts.map +1 -0
  438. package/dist/internal/Migrations.js +57 -0
  439. package/dist/internal/Migrations.js.map +1 -0
  440. package/dist/internal/Owner.d.ts +146 -0
  441. package/dist/internal/Owner.d.ts.map +1 -0
  442. package/dist/internal/Owner.js +65 -0
  443. package/dist/internal/Owner.js.map +1 -0
  444. package/dist/internal/Passkey.d.ts +528 -0
  445. package/dist/internal/Passkey.d.ts.map +1 -0
  446. package/dist/internal/Passkey.js +658 -0
  447. package/dist/internal/Passkey.js.map +1 -0
  448. package/dist/internal/PendingKey.d.ts +49 -0
  449. package/dist/internal/PendingKey.d.ts.map +1 -0
  450. package/dist/internal/PendingKey.js +58 -0
  451. package/dist/internal/PendingKey.js.map +1 -0
  452. package/dist/internal/Privy.d.ts +105 -0
  453. package/dist/internal/Privy.d.ts.map +1 -0
  454. package/dist/internal/Privy.js +224 -0
  455. package/dist/internal/Privy.js.map +1 -0
  456. package/dist/internal/RateLimit.d.ts +190 -0
  457. package/dist/internal/RateLimit.d.ts.map +1 -0
  458. package/dist/internal/RateLimit.js +148 -0
  459. package/dist/internal/RateLimit.js.map +1 -0
  460. package/dist/internal/Realm.d.ts +281 -0
  461. package/dist/internal/Realm.d.ts.map +1 -0
  462. package/dist/internal/Realm.js +477 -0
  463. package/dist/internal/Realm.js.map +1 -0
  464. package/dist/internal/RequestId.d.ts +16 -0
  465. package/dist/internal/RequestId.d.ts.map +1 -0
  466. package/dist/internal/RequestId.js +78 -0
  467. package/dist/internal/RequestId.js.map +1 -0
  468. package/dist/internal/SigningKey.d.ts +115 -0
  469. package/dist/internal/SigningKey.d.ts.map +1 -0
  470. package/dist/internal/SigningKey.js +197 -0
  471. package/dist/internal/SigningKey.js.map +1 -0
  472. package/dist/internal/TestInbox.d.ts +42 -0
  473. package/dist/internal/TestInbox.d.ts.map +1 -0
  474. package/dist/internal/TestInbox.js +20 -0
  475. package/dist/internal/TestInbox.js.map +1 -0
  476. package/dist/internal/Timing.d.ts +51 -0
  477. package/dist/internal/Timing.d.ts.map +1 -0
  478. package/dist/internal/Timing.js +103 -0
  479. package/dist/internal/Timing.js.map +1 -0
  480. package/dist/internal/Validation.d.ts +52 -0
  481. package/dist/internal/Validation.d.ts.map +1 -0
  482. package/dist/internal/Validation.js +22 -0
  483. package/dist/internal/Validation.js.map +1 -0
  484. package/dist/internal/Wallet.d.ts +37 -0
  485. package/dist/internal/Wallet.d.ts.map +1 -0
  486. package/dist/internal/Wallet.js +43 -0
  487. package/dist/internal/Wallet.js.map +1 -0
  488. package/dist/worker.d.ts +12 -0
  489. package/dist/worker.d.ts.map +1 -0
  490. package/dist/worker.js +12 -0
  491. package/dist/worker.js.map +1 -0
  492. package/package.json +82 -0
  493. package/src/Api.ts +151 -0
  494. package/src/App.ts +56 -0
  495. package/src/api/account.ts +311 -0
  496. package/src/api/authenticate.ts +1290 -0
  497. package/src/api/authorize.ts +1030 -0
  498. package/src/api/device.ts +874 -0
  499. package/src/api/health.ts +72 -0
  500. package/src/api/lib/AccountStep.ts +335 -0
  501. package/src/api/lib/Auth.ts +134 -0
  502. package/src/api/lib/Consent.ts +339 -0
  503. package/src/api/lib/Cors.ts +107 -0
  504. package/src/api/lib/Database.ts +10 -0
  505. package/src/api/lib/DeviceRequest.ts +265 -0
  506. package/src/api/lib/FirstAccount.ts +90 -0
  507. package/src/api/lib/KeySigner.ts +393 -0
  508. package/src/api/lib/PasskeyLink.ts +162 -0
  509. package/src/api/lib/Session.ts +34 -0
  510. package/src/api/lib/SignInConsent.ts +316 -0
  511. package/src/api/oauth.ts +1282 -0
  512. package/src/api/provider.ts +441 -0
  513. package/src/app/components/Button.tsx +128 -0
  514. package/src/app/components/CodeInput.tsx +186 -0
  515. package/src/app/components/ErrorMessage.tsx +66 -0
  516. package/src/app/components/Grant.tsx +323 -0
  517. package/src/app/components/Input.tsx +48 -0
  518. package/src/app/components/Tooltip.tsx +45 -0
  519. package/src/app/components/icons/BRLA.png +0 -0
  520. package/src/app/components/icons/BRZ.svg +1 -0
  521. package/src/app/components/icons/CHFAU.png +0 -0
  522. package/src/app/components/icons/DLUSD.png +0 -0
  523. package/src/app/components/icons/EURAU.svg +1 -0
  524. package/src/app/components/icons/EURC.e.svg +1 -0
  525. package/src/app/components/icons/GBPA.svg +4 -0
  526. package/src/app/components/icons/GUSD.svg +1 -0
  527. package/src/app/components/icons/MACH.svg +4 -0
  528. package/src/app/components/icons/OUSD.svg +5 -0
  529. package/src/app/components/icons/PRIME.svg +14 -0
  530. package/src/app/components/icons/SBC.svg +1 -0
  531. package/src/app/components/icons/SEKAU.svg +5 -0
  532. package/src/app/components/icons/USD1.svg +30 -0
  533. package/src/app/components/icons/USDB.svg +11 -0
  534. package/src/app/components/icons/USDC.e.svg +1 -0
  535. package/src/app/components/icons/USDT0.svg +1 -0
  536. package/src/app/components/icons/USDY.svg +16 -0
  537. package/src/app/components/icons/USDe.svg +1 -0
  538. package/src/app/components/icons/YLDS.svg +3 -0
  539. package/src/app/components/icons/alphaUSD.svg +1 -0
  540. package/src/app/components/icons/betaUSD.svg +1 -0
  541. package/src/app/components/icons/cUSD.svg +1 -0
  542. package/src/app/components/icons/cbBTC.svg +1 -0
  543. package/src/app/components/icons/frxUSD.svg +1 -0
  544. package/src/app/components/icons/goUSD.svg +5 -0
  545. package/src/app/components/icons/iUSD.svg +1 -0
  546. package/src/app/components/icons/pathUSD.svg +25 -0
  547. package/src/app/components/icons/rUSD.svg +1 -0
  548. package/src/app/components/icons/reUSD.svg +1 -0
  549. package/src/app/components/icons/sUSDe.svg +1 -0
  550. package/src/app/components/icons/siUSD.svg +1 -0
  551. package/src/app/components/icons/stcUSD.svg +1 -0
  552. package/src/app/components/icons/syrupUSDC.svg +5 -0
  553. package/src/app/components/icons/thetaUSD.svg +1 -0
  554. package/src/app/components/icons/wYLDS.svg +10 -0
  555. package/src/app/components/icons/wsrUSD.svg +1 -0
  556. package/src/app/components/logos/OUSD.dark.svg +17 -0
  557. package/src/app/components/logos/OUSD.light.svg +17 -0
  558. package/src/app/crons/cleanup.ts +42 -0
  559. package/src/app/db/auth.ts +416 -0
  560. package/src/app/db/migrations/0000_better_auth.sql +53 -0
  561. package/src/app/db/migrations/0001_oauth_provider.sql +162 -0
  562. package/src/app/db/migrations/0002_device_code.sql +17 -0
  563. package/src/app/db/migrations/0003_realms.sql +27 -0
  564. package/src/app/db/migrations/0004_default_realm.sql +2 -0
  565. package/src/app/db/migrations/0005_passkeys.sql +30 -0
  566. package/src/app/db/migrations/0006_first_accounts.sql +9 -0
  567. package/src/app/db/migrations/0007_pending_keys.sql +13 -0
  568. package/src/app/db/migrations/0008_secp256k1_owners.sql +18 -0
  569. package/src/app/db/migrations/0009_device_requests.sql +8 -0
  570. package/src/app/db/migrations/0010_device_keys.sql +4 -0
  571. package/src/app/db/migrations/meta/0000_snapshot.json +362 -0
  572. package/src/app/db/migrations/meta/0001_snapshot.json +1487 -0
  573. package/src/app/db/migrations/meta/0002_snapshot.json +1603 -0
  574. package/src/app/db/migrations/meta/0003_snapshot.json +1760 -0
  575. package/src/app/db/migrations/meta/0004_snapshot.json +1760 -0
  576. package/src/app/db/migrations/meta/0005_snapshot.json +1911 -0
  577. package/src/app/db/migrations/meta/0006_snapshot.json +1967 -0
  578. package/src/app/db/migrations/meta/0007_snapshot.json +2047 -0
  579. package/src/app/db/migrations/meta/0008_snapshot.json +2157 -0
  580. package/src/app/db/migrations/meta/0009_snapshot.json +2207 -0
  581. package/src/app/db/migrations/meta/0010_snapshot.json +2231 -0
  582. package/src/app/db/migrations/meta/_journal.json +83 -0
  583. package/src/app/db/schema.ts +218 -0
  584. package/src/app/env.ts +49 -0
  585. package/src/app/lib/Client.ts +82 -0
  586. package/src/app/lib/Loader.ts +24 -0
  587. package/src/app/package.json +8 -0
  588. package/src/app/routeTree.gen.ts +198 -0
  589. package/src/app/router.tsx +48 -0
  590. package/src/app/routes/[_].flows.tsx +3001 -0
  591. package/src/app/routes/__root.tsx +91 -0
  592. package/src/app/routes/authorize.tsx +197 -0
  593. package/src/app/routes/choose-account.tsx +111 -0
  594. package/src/app/routes/deposit.tsx +105 -0
  595. package/src/app/routes/device.tsx +227 -0
  596. package/src/app/routes/index.tsx +115 -0
  597. package/src/app/routes/login.tsx +506 -0
  598. package/src/app/screens/Account.tsx +347 -0
  599. package/src/app/screens/Approval.tsx +276 -0
  600. package/src/app/screens/ChooseAccount.tsx +240 -0
  601. package/src/app/screens/Deposit.tsx +762 -0
  602. package/src/app/screens/DeviceApproval.tsx +480 -0
  603. package/src/app/screens/SignIn.tsx +362 -0
  604. package/src/app/screens/chains/base.svg +3 -0
  605. package/src/app/screens/chains/ethereum.svg +11 -0
  606. package/src/app/screens/chains/solana.svg +4 -0
  607. package/src/app/screens/chains/tempo.svg +4 -0
  608. package/src/app/server.ts +204 -0
  609. package/src/app/vite.config.ts +95 -0
  610. package/src/app/void.config.ts +29 -0
  611. package/src/app/zyzz.config.ts +274 -0
  612. package/src/cli/Admin.ts +73 -0
  613. package/src/cli/Apps.ts +29 -0
  614. package/src/cli/Cli.ts +42 -0
  615. package/src/cli/Project.ts +117 -0
  616. package/src/cli/Realms.ts +50 -0
  617. package/src/cli/Session.ts +239 -0
  618. package/src/cli/User.ts +45 -0
  619. package/src/cli/V1.ts +57 -0
  620. package/src/cli/bin.ts +44 -0
  621. package/src/cli/commands/admin/apps/create.ts +101 -0
  622. package/src/cli/commands/admin/apps/delete.ts +38 -0
  623. package/src/cli/commands/admin/apps/index.ts +15 -0
  624. package/src/cli/commands/admin/apps/list.ts +25 -0
  625. package/src/cli/commands/admin/apps/rotate-secret.ts +47 -0
  626. package/src/cli/commands/admin/apps/update.ts +86 -0
  627. package/src/cli/commands/admin/index.ts +14 -0
  628. package/src/cli/commands/admin/migrate.ts +16 -0
  629. package/src/cli/commands/admin/realms/add.ts +40 -0
  630. package/src/cli/commands/admin/realms/index.ts +14 -0
  631. package/src/cli/commands/admin/realms/list.ts +38 -0
  632. package/src/cli/commands/admin/realms/passkeys/index.ts +15 -0
  633. package/src/cli/commands/admin/realms/passkeys/set.ts +44 -0
  634. package/src/cli/commands/admin/realms/privy/index.ts +14 -0
  635. package/src/cli/commands/admin/realms/privy/set.ts +69 -0
  636. package/src/cli/commands/admin/realms/remove.ts +33 -0
  637. package/src/cli/commands/admin/realms/secp256k1/disable.ts +40 -0
  638. package/src/cli/commands/admin/realms/secp256k1/enable.ts +40 -0
  639. package/src/cli/commands/admin/realms/secp256k1/index.ts +19 -0
  640. package/src/cli/commands/admin/realms/set.ts +46 -0
  641. package/src/cli/commands/admin/rotate-key.ts +47 -0
  642. package/src/cli/commands/init.ts +42 -0
  643. package/src/cli/commands/login.ts +32 -0
  644. package/src/cli/commands/logout.ts +19 -0
  645. package/src/cli/commands/whoami.ts +23 -0
  646. package/src/client/Actions.ts +168 -0
  647. package/src/client/Auth.ts +285 -0
  648. package/src/client/Authorization.ts +34 -0
  649. package/src/client/Decorator.ts +410 -0
  650. package/src/client/Key.ts +140 -0
  651. package/src/client/Pending.ts +46 -0
  652. package/src/client/Permissions.ts +39 -0
  653. package/src/client/Provider.ts +18 -0
  654. package/src/client/Step.ts +24 -0
  655. package/src/client/Storage.ts +29 -0
  656. package/src/client/TempoAccount.ts +42 -0
  657. package/src/client/Tokens.ts +27 -0
  658. package/src/client/User.ts +23 -0
  659. package/src/client/actions/account.ts +57 -0
  660. package/src/client/actions/device.ts +151 -0
  661. package/src/client/actions/email.ts +141 -0
  662. package/src/client/actions/oauth.ts +182 -0
  663. package/src/client/actions/passkey.ts +141 -0
  664. package/src/client/actions/provider.ts +70 -0
  665. package/src/client/actions/realm.ts +36 -0
  666. package/src/client/actions/redirect.ts +408 -0
  667. package/src/client/internal/accessKey.ts +54 -0
  668. package/src/client/internal/account.ts +15 -0
  669. package/src/client/internal/api.ts +224 -0
  670. package/src/client/internal/headless.ts +77 -0
  671. package/src/client/internal/indexedDb.ts +44 -0
  672. package/src/client/internal/request.ts +71 -0
  673. package/src/client/internal/store.ts +20 -0
  674. package/src/client.ts +19 -0
  675. package/src/index.ts +6 -0
  676. package/src/internal/Apps.ts +718 -0
  677. package/src/internal/Auth.ts +203 -0
  678. package/src/internal/Authorize.ts +424 -0
  679. package/src/internal/Balance.ts +168 -0
  680. package/src/internal/BodyLimit.ts +36 -0
  681. package/src/internal/Chain.ts +16 -0
  682. package/src/internal/Device.ts +469 -0
  683. package/src/internal/Env.ts +58 -0
  684. package/src/internal/ErrorResponse.ts +854 -0
  685. package/src/internal/Id.ts +41 -0
  686. package/src/internal/KeyAuthorization.ts +1339 -0
  687. package/src/internal/Limits.ts +39 -0
  688. package/src/internal/Log.ts +178 -0
  689. package/src/internal/LogLine.ts +87 -0
  690. package/src/internal/Logout.ts +336 -0
  691. package/src/internal/Migrations.ts +86 -0
  692. package/src/internal/OpenApi.ts +300 -0
  693. package/src/internal/Owner.ts +211 -0
  694. package/src/internal/Passkey.ts +1052 -0
  695. package/src/internal/PendingKey.ts +104 -0
  696. package/src/internal/Privy.ts +402 -0
  697. package/src/internal/Provider.ts +125 -0
  698. package/src/internal/RateLimit.ts +259 -0
  699. package/src/internal/Realm.ts +768 -0
  700. package/src/internal/RequestId.ts +118 -0
  701. package/src/internal/SignInGrant.ts +168 -0
  702. package/src/internal/SigningKey.ts +286 -0
  703. package/src/internal/TempoAccount.ts +342 -0
  704. package/src/internal/TestInbox.ts +51 -0
  705. package/src/internal/Timing.ts +158 -0
  706. package/src/internal/Validation.ts +52 -0
  707. package/src/internal/Wallet.ts +62 -0
  708. package/src/internal/owners/Passkey.ts +72 -0
  709. package/src/internal/owners/Privy.ts +81 -0
  710. package/src/internal/owners/Secp256k1.ts +143 -0
  711. package/src/types/app.d.ts +19 -0
  712. package/src/worker.ts +11 -0
@@ -0,0 +1,4058 @@
1
+ /**
2
+ * Builds the Better Auth options that every Tempo ID app shares, and declares the sign-in refusals.
3
+ * Callers pass the database, secret, and origin, so the options read no environment of their own.
4
+ * @module
5
+ */
6
+ import type { betterAuth, BetterAuthOptions } from 'better-auth';
7
+ import type * as BetterCall from 'better-call';
8
+ import { drizzleAdapter } from 'better-auth/adapters/drizzle';
9
+ import * as Apps from './Apps.js';
10
+ import * as ErrorResponse from './ErrorResponse.js';
11
+ declare const AuthorizationExpiredError_base: {
12
+ new (options: ErrorResponse.define.Options): {
13
+ message: string;
14
+ stack?: string;
15
+ cause?: unknown;
16
+ readonly res?: Response;
17
+ readonly status: import("hono/utils/http-status").ContentfulStatusCode;
18
+ getResponse(): Response;
19
+ readonly name: string;
20
+ readonly response: Omit<{
21
+ error: string;
22
+ error_description: string;
23
+ error_uri: string;
24
+ field?: string | undefined;
25
+ meta?: Readonly<Record<string, string | number>> | undefined;
26
+ reason: string;
27
+ request_id?: string | undefined;
28
+ }, "error" | "reason"> & {
29
+ error: "invalid_request";
30
+ reason: "authorization_expired";
31
+ };
32
+ };
33
+ readonly reason: "authorization_expired";
34
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
35
+ prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
36
+ stackTraceLimit: number;
37
+ };
38
+ /**
39
+ * The app's authorization request that a sign-in or the approval page continues, its signed
40
+ * `oauth_query`, is forged or expired. The sign-in did not run, so the code stays unspent.
41
+ */
42
+ export declare class AuthorizationExpiredError extends AuthorizationExpiredError_base {
43
+ readonly name = "Auth.AuthorizationExpiredError";
44
+ constructor();
45
+ }
46
+ declare const InvalidCodeError_base: {
47
+ new (options: ErrorResponse.define.Options): {
48
+ message: string;
49
+ stack?: string;
50
+ cause?: unknown;
51
+ readonly res?: Response;
52
+ readonly status: import("hono/utils/http-status").ContentfulStatusCode;
53
+ getResponse(): Response;
54
+ readonly name: string;
55
+ readonly response: Omit<{
56
+ error: string;
57
+ error_description: string;
58
+ error_uri: string;
59
+ field?: string | undefined;
60
+ meta?: Readonly<Record<string, string | number>> | undefined;
61
+ reason: string;
62
+ request_id?: string | undefined;
63
+ }, "error" | "reason"> & {
64
+ error: "invalid_grant";
65
+ reason: "invalid_code";
66
+ };
67
+ };
68
+ readonly reason: "invalid_code";
69
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
70
+ prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
71
+ stackTraceLimit: number;
72
+ };
73
+ /** The emailed code is wrong or expired. The refusal never reveals whether the account exists. */
74
+ export declare class InvalidCodeError extends InvalidCodeError_base {
75
+ readonly name = "Auth.InvalidCodeError";
76
+ constructor();
77
+ }
78
+ declare const SessionChangedError_base: {
79
+ new (options: ErrorResponse.define.Options): {
80
+ message: string;
81
+ stack?: string;
82
+ cause?: unknown;
83
+ readonly res?: Response;
84
+ readonly status: import("hono/utils/http-status").ContentfulStatusCode;
85
+ getResponse(): Response;
86
+ readonly name: string;
87
+ readonly response: Omit<{
88
+ error: string;
89
+ error_description: string;
90
+ error_uri: string;
91
+ field?: string | undefined;
92
+ meta?: Readonly<Record<string, string | number>> | undefined;
93
+ reason: string;
94
+ request_id?: string | undefined;
95
+ }, "error" | "reason"> & {
96
+ error: "invalid_request";
97
+ reason: "session_changed";
98
+ };
99
+ };
100
+ readonly reason: "session_changed";
101
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
102
+ prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
103
+ stackTraceLimit: number;
104
+ };
105
+ /**
106
+ * The signed-in session differs from the one that the approval page showed, such as after a sign-in
107
+ * to another account in another tab. The approval page stored no consent.
108
+ */
109
+ export declare class SessionChangedError extends SessionChangedError_base {
110
+ readonly name = "Auth.SessionChangedError";
111
+ constructor();
112
+ }
113
+ declare const SessionRequiredError_base: {
114
+ new (options: ErrorResponse.define.Options): {
115
+ message: string;
116
+ stack?: string;
117
+ cause?: unknown;
118
+ readonly res?: Response;
119
+ readonly status: import("hono/utils/http-status").ContentfulStatusCode;
120
+ getResponse(): Response;
121
+ readonly name: string;
122
+ readonly response: Omit<{
123
+ error: string;
124
+ error_description: string;
125
+ error_uri: string;
126
+ field?: string | undefined;
127
+ meta?: Readonly<Record<string, string | number>> | undefined;
128
+ reason: string;
129
+ request_id?: string | undefined;
130
+ }, "error" | "reason"> & {
131
+ error: "login_required";
132
+ reason: "session_required";
133
+ };
134
+ };
135
+ readonly reason: "session_required";
136
+ captureStackTrace(targetObject: object, constructorOpt?: Function): void;
137
+ prepareStackTrace(err: Error, stackTraces: NodeJS.CallSite[]): any;
138
+ stackTraceLimit: number;
139
+ };
140
+ /** The request needs a signed-in session, and has none. */
141
+ export declare class SessionRequiredError extends SessionRequiredError_base {
142
+ readonly name = "Auth.SessionRequiredError";
143
+ constructor();
144
+ }
145
+ /**
146
+ * A request validation issue from the device plugin's types. Declarations name it through this alias,
147
+ * since TypeScript cannot reach it from `better-call`'s exports alone.
148
+ */
149
+ export type Issue = BetterCall.StandardSchemaV1.Issue;
150
+ /** A Better Auth instance with Tempo ID's options, which each request creates. */
151
+ export type Instance = ReturnType<typeof betterAuth<ReturnType<typeof options>>>;
152
+ /** The session cookie, which every app on the same site shares. */
153
+ export declare const sessionCookie = "tempo-id-session";
154
+ /** Returns the Better Auth options for `options`. */
155
+ export declare function options(options: options.Options): {
156
+ account: {
157
+ updateAccountOnSignIn: false;
158
+ };
159
+ advanced: {
160
+ backgroundTasks: {
161
+ handler: (promise: Promise<unknown>) => void;
162
+ };
163
+ cookies: {
164
+ session_token: {
165
+ name: string;
166
+ };
167
+ };
168
+ database: {
169
+ generateId: (id: {
170
+ model: import("better-auth").ModelNames;
171
+ size?: number | undefined;
172
+ }) => string;
173
+ };
174
+ ipAddress: {
175
+ ipAddressHeaders: string[];
176
+ };
177
+ };
178
+ basePath: string;
179
+ baseURL: string;
180
+ database: (options: BetterAuthOptions) => import("better-auth").DBAdapter<BetterAuthOptions>;
181
+ databaseHooks: {
182
+ account: {
183
+ create: {
184
+ before: () => Promise<{
185
+ data: {
186
+ accessToken: null;
187
+ accessTokenExpiresAt: null;
188
+ idToken: null;
189
+ refreshToken: null;
190
+ refreshTokenExpiresAt: null;
191
+ };
192
+ }>;
193
+ };
194
+ };
195
+ user: {
196
+ create: {
197
+ before: (user: {
198
+ id: string;
199
+ createdAt: Date;
200
+ updatedAt: Date;
201
+ email: string;
202
+ emailVerified: boolean;
203
+ name: string;
204
+ image?: string | null | undefined;
205
+ } & Record<string, unknown>) => Promise<boolean>;
206
+ };
207
+ };
208
+ };
209
+ onAPIError: {
210
+ errorURL: string;
211
+ };
212
+ plugins: [{
213
+ id: "email-otp";
214
+ version: string;
215
+ init(ctx: import("better-auth").AuthContext): {
216
+ options: {
217
+ emailVerification: {
218
+ sendVerificationEmail(data: {
219
+ user: import("better-auth").User;
220
+ url: string;
221
+ token: string;
222
+ }, request: Request | undefined): Promise<void>;
223
+ };
224
+ };
225
+ } | undefined;
226
+ endpoints: {
227
+ sendVerificationOTP: BetterCall.StrictEndpoint<"/email-otp/send-verification-otp", {
228
+ method: "POST";
229
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<void>>[];
230
+ body: import("better-auth").ZodObject<{
231
+ email: import("better-auth").ZodString;
232
+ type: import("better-auth").ZodEnum<{
233
+ "sign-in": "sign-in";
234
+ "change-email": "change-email";
235
+ "email-verification": "email-verification";
236
+ "forget-password": "forget-password";
237
+ }>;
238
+ }, import("zod/v4/core").$strip>;
239
+ metadata: {
240
+ openapi: {
241
+ operationId: string;
242
+ description: string;
243
+ responses: {
244
+ 200: {
245
+ description: string;
246
+ content: {
247
+ "application/json": {
248
+ schema: {
249
+ type: "object";
250
+ properties: {
251
+ success: {
252
+ type: string;
253
+ };
254
+ };
255
+ };
256
+ };
257
+ };
258
+ };
259
+ };
260
+ };
261
+ };
262
+ }, {
263
+ success: boolean;
264
+ }>;
265
+ createVerificationOTP: BetterCall.StrictEndpoint<string, {
266
+ method: "POST";
267
+ body: import("better-auth").ZodObject<{
268
+ email: import("better-auth").ZodString;
269
+ type: import("better-auth").ZodEnum<{
270
+ "sign-in": "sign-in";
271
+ "change-email": "change-email";
272
+ "email-verification": "email-verification";
273
+ "forget-password": "forget-password";
274
+ }>;
275
+ }, import("zod/v4/core").$strip>;
276
+ metadata: {
277
+ openapi: {
278
+ operationId: string;
279
+ description: string;
280
+ responses: {
281
+ 200: {
282
+ description: string;
283
+ content: {
284
+ "application/json": {
285
+ schema: {
286
+ type: "string";
287
+ };
288
+ };
289
+ };
290
+ };
291
+ };
292
+ };
293
+ };
294
+ }, string>;
295
+ getVerificationOTP: BetterCall.StrictEndpoint<string, {
296
+ method: "GET";
297
+ query: import("better-auth").ZodObject<{
298
+ email: import("better-auth").ZodString;
299
+ type: import("better-auth").ZodEnum<{
300
+ "sign-in": "sign-in";
301
+ "change-email": "change-email";
302
+ "email-verification": "email-verification";
303
+ "forget-password": "forget-password";
304
+ }>;
305
+ }, import("zod/v4/core").$strip>;
306
+ metadata: {
307
+ openapi: {
308
+ operationId: string;
309
+ description: string;
310
+ responses: {
311
+ "200": {
312
+ description: string;
313
+ content: {
314
+ "application/json": {
315
+ schema: {
316
+ type: "object";
317
+ properties: {
318
+ otp: {
319
+ type: string;
320
+ nullable: boolean;
321
+ description: string;
322
+ };
323
+ };
324
+ required: string[];
325
+ };
326
+ };
327
+ };
328
+ };
329
+ };
330
+ };
331
+ };
332
+ }, {
333
+ otp: null;
334
+ } | {
335
+ otp: string;
336
+ }>;
337
+ checkVerificationOTP: BetterCall.StrictEndpoint<"/email-otp/check-verification-otp", {
338
+ method: "POST";
339
+ body: import("better-auth").ZodObject<{
340
+ email: import("better-auth").ZodString;
341
+ type: import("better-auth").ZodEnum<{
342
+ "sign-in": "sign-in";
343
+ "change-email": "change-email";
344
+ "email-verification": "email-verification";
345
+ "forget-password": "forget-password";
346
+ }>;
347
+ otp: import("better-auth").ZodString;
348
+ }, import("zod/v4/core").$strip>;
349
+ metadata: {
350
+ openapi: {
351
+ operationId: string;
352
+ description: string;
353
+ responses: {
354
+ 200: {
355
+ description: string;
356
+ content: {
357
+ "application/json": {
358
+ schema: {
359
+ type: "object";
360
+ properties: {
361
+ success: {
362
+ type: string;
363
+ };
364
+ };
365
+ };
366
+ };
367
+ };
368
+ };
369
+ };
370
+ };
371
+ };
372
+ }, {
373
+ success: boolean;
374
+ }>;
375
+ verifyEmailOTP: BetterCall.StrictEndpoint<"/email-otp/verify-email", {
376
+ method: "POST";
377
+ body: import("better-auth").ZodObject<{
378
+ email: import("better-auth").ZodString;
379
+ otp: import("better-auth").ZodString;
380
+ }, import("zod/v4/core").$strip>;
381
+ metadata: {
382
+ openapi: {
383
+ description: string;
384
+ responses: {
385
+ 200: {
386
+ description: string;
387
+ content: {
388
+ "application/json": {
389
+ schema: {
390
+ type: "object";
391
+ properties: {
392
+ status: {
393
+ type: string;
394
+ description: string;
395
+ enum: boolean[];
396
+ };
397
+ token: {
398
+ type: string;
399
+ nullable: boolean;
400
+ description: string;
401
+ };
402
+ user: {
403
+ $ref: string;
404
+ };
405
+ };
406
+ required: string[];
407
+ };
408
+ };
409
+ };
410
+ };
411
+ };
412
+ };
413
+ };
414
+ }, {
415
+ status: boolean;
416
+ token: string;
417
+ user: {
418
+ id: string;
419
+ createdAt: Date;
420
+ updatedAt: Date;
421
+ email: string;
422
+ emailVerified: boolean;
423
+ name: string;
424
+ image?: string | null | undefined;
425
+ } & Record<string, any>;
426
+ } | {
427
+ status: boolean;
428
+ token: null;
429
+ user: {
430
+ id: string;
431
+ createdAt: Date;
432
+ updatedAt: Date;
433
+ email: string;
434
+ emailVerified: boolean;
435
+ name: string;
436
+ image?: string | null | undefined;
437
+ } & Record<string, any>;
438
+ }>;
439
+ signInEmailOTP: BetterCall.StrictEndpoint<"/sign-in/email-otp", {
440
+ method: "POST";
441
+ body: import("better-auth").ZodIntersection<import("better-auth").ZodObject<{
442
+ email: import("better-auth").ZodString;
443
+ otp: import("better-auth").ZodString;
444
+ name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
445
+ image: import("better-auth").ZodOptional<import("better-auth").ZodString>;
446
+ }, import("zod/v4/core").$strip>, import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
447
+ metadata: {
448
+ openapi: {
449
+ operationId: string;
450
+ description: string;
451
+ responses: {
452
+ 200: {
453
+ description: string;
454
+ content: {
455
+ "application/json": {
456
+ schema: {
457
+ type: "object";
458
+ properties: {
459
+ token: {
460
+ type: string;
461
+ description: string;
462
+ };
463
+ user: {
464
+ $ref: string;
465
+ };
466
+ };
467
+ required: string[];
468
+ };
469
+ };
470
+ };
471
+ };
472
+ };
473
+ };
474
+ };
475
+ }, {
476
+ token: string;
477
+ user: {
478
+ id: string;
479
+ createdAt: Date;
480
+ updatedAt: Date;
481
+ email: string;
482
+ emailVerified: boolean;
483
+ name: string;
484
+ image?: string | null | undefined;
485
+ };
486
+ }>;
487
+ requestPasswordResetEmailOTP: BetterCall.StrictEndpoint<"/email-otp/request-password-reset", {
488
+ method: "POST";
489
+ body: import("better-auth").ZodObject<{
490
+ email: import("better-auth").ZodString;
491
+ }, import("zod/v4/core").$strip>;
492
+ metadata: {
493
+ openapi: {
494
+ operationId: string;
495
+ description: string;
496
+ responses: {
497
+ 200: {
498
+ description: string;
499
+ content: {
500
+ "application/json": {
501
+ schema: {
502
+ type: "object";
503
+ properties: {
504
+ success: {
505
+ type: string;
506
+ description: string;
507
+ };
508
+ };
509
+ };
510
+ };
511
+ };
512
+ };
513
+ };
514
+ };
515
+ };
516
+ }, {
517
+ success: boolean;
518
+ }>;
519
+ forgetPasswordEmailOTP: BetterCall.StrictEndpoint<"/forget-password/email-otp", {
520
+ method: "POST";
521
+ body: import("better-auth").ZodObject<{
522
+ email: import("better-auth").ZodString;
523
+ }, import("zod/v4/core").$strip>;
524
+ metadata: {
525
+ openapi: {
526
+ operationId: string;
527
+ description: string;
528
+ responses: {
529
+ 200: {
530
+ description: string;
531
+ content: {
532
+ "application/json": {
533
+ schema: {
534
+ type: "object";
535
+ properties: {
536
+ success: {
537
+ type: string;
538
+ description: string;
539
+ };
540
+ };
541
+ };
542
+ };
543
+ };
544
+ };
545
+ };
546
+ };
547
+ };
548
+ }, {
549
+ success: boolean;
550
+ }>;
551
+ resetPasswordEmailOTP: BetterCall.StrictEndpoint<"/email-otp/reset-password", {
552
+ method: "POST";
553
+ body: import("better-auth").ZodObject<{
554
+ email: import("better-auth").ZodString;
555
+ otp: import("better-auth").ZodString;
556
+ password: import("better-auth").ZodString;
557
+ }, import("zod/v4/core").$strip>;
558
+ metadata: {
559
+ openapi: {
560
+ operationId: string;
561
+ description: string;
562
+ responses: {
563
+ 200: {
564
+ description: string;
565
+ content: {
566
+ "application/json": {
567
+ schema: {
568
+ type: "object";
569
+ properties: {
570
+ success: {
571
+ type: string;
572
+ };
573
+ };
574
+ };
575
+ };
576
+ };
577
+ };
578
+ };
579
+ };
580
+ };
581
+ }, {
582
+ success: boolean;
583
+ }>;
584
+ requestEmailChangeEmailOTP: BetterCall.StrictEndpoint<"/email-otp/request-email-change", {
585
+ method: "POST";
586
+ body: import("better-auth").ZodObject<{
587
+ newEmail: import("better-auth").ZodString;
588
+ otp: import("better-auth").ZodOptional<import("better-auth").ZodString>;
589
+ }, import("zod/v4/core").$strip>;
590
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
591
+ session: {
592
+ session: Record<string, any> & {
593
+ id: string;
594
+ createdAt: Date;
595
+ updatedAt: Date;
596
+ userId: string;
597
+ expiresAt: Date;
598
+ token: string;
599
+ ipAddress?: string | null | undefined;
600
+ userAgent?: string | null | undefined;
601
+ };
602
+ user: Record<string, any> & {
603
+ id: string;
604
+ createdAt: Date;
605
+ updatedAt: Date;
606
+ email: string;
607
+ emailVerified: boolean;
608
+ name: string;
609
+ image?: string | null | undefined;
610
+ };
611
+ };
612
+ }>>[];
613
+ metadata: {
614
+ openapi: {
615
+ operationId: string;
616
+ description: string;
617
+ responses: {
618
+ 200: {
619
+ description: string;
620
+ content: {
621
+ "application/json": {
622
+ schema: {
623
+ type: "object";
624
+ properties: {
625
+ success: {
626
+ type: string;
627
+ };
628
+ };
629
+ };
630
+ };
631
+ };
632
+ };
633
+ };
634
+ };
635
+ };
636
+ }, {
637
+ success: boolean;
638
+ }>;
639
+ changeEmailEmailOTP: BetterCall.StrictEndpoint<"/email-otp/change-email", {
640
+ method: "POST";
641
+ body: import("better-auth").ZodObject<{
642
+ newEmail: import("better-auth").ZodString;
643
+ otp: import("better-auth").ZodString;
644
+ }, import("zod/v4/core").$strip>;
645
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
646
+ session: {
647
+ session: Record<string, any> & {
648
+ id: string;
649
+ createdAt: Date;
650
+ updatedAt: Date;
651
+ userId: string;
652
+ expiresAt: Date;
653
+ token: string;
654
+ ipAddress?: string | null | undefined;
655
+ userAgent?: string | null | undefined;
656
+ };
657
+ user: Record<string, any> & {
658
+ id: string;
659
+ createdAt: Date;
660
+ updatedAt: Date;
661
+ email: string;
662
+ emailVerified: boolean;
663
+ name: string;
664
+ image?: string | null | undefined;
665
+ };
666
+ };
667
+ }>>[];
668
+ metadata: {
669
+ openapi: {
670
+ operationId: string;
671
+ description: string;
672
+ responses: {
673
+ 200: {
674
+ description: string;
675
+ content: {
676
+ "application/json": {
677
+ schema: {
678
+ type: "object";
679
+ properties: {
680
+ success: {
681
+ type: string;
682
+ };
683
+ };
684
+ };
685
+ };
686
+ };
687
+ };
688
+ };
689
+ };
690
+ };
691
+ }, {
692
+ success: boolean;
693
+ }>;
694
+ };
695
+ hooks: {
696
+ after: {
697
+ matcher(context: import("better-auth").HookEndpointContext): boolean;
698
+ handler: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<void>>;
699
+ }[];
700
+ };
701
+ rateLimit: ({
702
+ pathMatcher(path: string): path is "/email-otp/send-verification-otp";
703
+ window: number;
704
+ max: number;
705
+ } | {
706
+ pathMatcher(path: string): path is "/email-otp/check-verification-otp";
707
+ window: number;
708
+ max: number;
709
+ } | {
710
+ pathMatcher(path: string): path is "/email-otp/verify-email";
711
+ window: number;
712
+ max: number;
713
+ } | {
714
+ pathMatcher(path: string): path is "/sign-in/email-otp";
715
+ window: number;
716
+ max: number;
717
+ } | {
718
+ pathMatcher(path: string): path is "/email-otp/request-password-reset";
719
+ window: number;
720
+ max: number;
721
+ } | {
722
+ pathMatcher(path: string): path is "/email-otp/reset-password";
723
+ window: number;
724
+ max: number;
725
+ } | {
726
+ pathMatcher(path: string): path is "/forget-password/email-otp";
727
+ window: number;
728
+ max: number;
729
+ } | {
730
+ pathMatcher(path: string): path is "/email-otp/request-email-change";
731
+ window: number;
732
+ max: number;
733
+ } | {
734
+ pathMatcher(path: string): path is "/email-otp/change-email";
735
+ window: number;
736
+ max: number;
737
+ })[];
738
+ options: import("better-auth/plugins/email-otp").EmailOTPOptions;
739
+ $ERROR_CODES: {
740
+ OTP_EXPIRED: import("better-auth").RawError<"OTP_EXPIRED">;
741
+ INVALID_OTP: import("better-auth").RawError<"INVALID_OTP">;
742
+ TOO_MANY_ATTEMPTS: import("better-auth").RawError<"TOO_MANY_ATTEMPTS">;
743
+ };
744
+ }, {
745
+ endpoints: {
746
+ signInPasskey: BetterCall.StrictEndpoint<string, {
747
+ body: import("better-auth").ZodObject<{
748
+ oauth_query: import("better-auth").ZodOptional<import("better-auth").ZodString>;
749
+ userId: import("better-auth").ZodString;
750
+ }, import("zod/v4/core").$strip>;
751
+ method: "POST";
752
+ }, {
753
+ user: {
754
+ email: string;
755
+ id: string;
756
+ };
757
+ }>;
758
+ };
759
+ id: "tempo-id-passkey";
760
+ }, ...({
761
+ id: "jwt";
762
+ version: string;
763
+ options: NoInfer<{
764
+ adapter: {
765
+ getJwks: (ctx: import("better-auth").GenericEndpointContext) => Promise<import("better-auth/plugins").Jwk[]>;
766
+ };
767
+ jwks: {
768
+ gracePeriod: number;
769
+ jwksPath: string;
770
+ keyPairConfig: {
771
+ alg: 'RS256';
772
+ modulusLength: number;
773
+ };
774
+ };
775
+ jwt: {
776
+ issuer: string;
777
+ };
778
+ }>;
779
+ init(ctx: import("better-auth").AuthContext): {
780
+ context: {
781
+ sessionConfig: {
782
+ cookieCacheSigner: import("better-auth").CookieCacheSigner;
783
+ updateAge: number;
784
+ expiresIn: number;
785
+ freshAge: number;
786
+ cookieRefreshCache: false | {
787
+ enabled: true;
788
+ updateAge: number;
789
+ };
790
+ };
791
+ };
792
+ } | undefined;
793
+ endpoints: {
794
+ getJwks: BetterCall.StrictEndpoint<string, {
795
+ method: "GET";
796
+ metadata: {
797
+ openapi: {
798
+ operationId: string;
799
+ description: string;
800
+ responses: {
801
+ "200": {
802
+ description: string;
803
+ content: {
804
+ "application/json": {
805
+ schema: {
806
+ type: "object";
807
+ properties: {
808
+ keys: {
809
+ type: string;
810
+ description: string;
811
+ items: {
812
+ type: string;
813
+ properties: {
814
+ kid: {
815
+ type: string;
816
+ description: string;
817
+ };
818
+ kty: {
819
+ type: string;
820
+ description: string;
821
+ };
822
+ alg: {
823
+ type: string;
824
+ description: string;
825
+ };
826
+ use: {
827
+ type: string;
828
+ description: string;
829
+ enum: string[];
830
+ nullable: boolean;
831
+ };
832
+ n: {
833
+ type: string;
834
+ description: string;
835
+ nullable: boolean;
836
+ };
837
+ e: {
838
+ type: string;
839
+ description: string;
840
+ nullable: boolean;
841
+ };
842
+ crv: {
843
+ type: string;
844
+ description: string;
845
+ nullable: boolean;
846
+ };
847
+ x: {
848
+ type: string;
849
+ description: string;
850
+ nullable: boolean;
851
+ };
852
+ y: {
853
+ type: string;
854
+ description: string;
855
+ nullable: boolean;
856
+ };
857
+ };
858
+ required: string[];
859
+ };
860
+ };
861
+ };
862
+ required: string[];
863
+ };
864
+ };
865
+ };
866
+ };
867
+ };
868
+ };
869
+ };
870
+ }, import("better-auth").JSONWebKeySet>;
871
+ getToken: BetterCall.StrictEndpoint<"/token", {
872
+ method: "GET";
873
+ requireHeaders: true;
874
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
875
+ session: {
876
+ session: Record<string, any> & {
877
+ id: string;
878
+ createdAt: Date;
879
+ updatedAt: Date;
880
+ userId: string;
881
+ expiresAt: Date;
882
+ token: string;
883
+ ipAddress?: string | null | undefined;
884
+ userAgent?: string | null | undefined;
885
+ };
886
+ user: Record<string, any> & {
887
+ id: string;
888
+ createdAt: Date;
889
+ updatedAt: Date;
890
+ email: string;
891
+ emailVerified: boolean;
892
+ name: string;
893
+ image?: string | null | undefined;
894
+ };
895
+ };
896
+ }>>[];
897
+ metadata: {
898
+ openapi: {
899
+ operationId: string;
900
+ description: string;
901
+ responses: {
902
+ 200: {
903
+ description: string;
904
+ content: {
905
+ "application/json": {
906
+ schema: {
907
+ type: "object";
908
+ properties: {
909
+ token: {
910
+ type: string;
911
+ };
912
+ };
913
+ };
914
+ };
915
+ };
916
+ };
917
+ };
918
+ };
919
+ };
920
+ }, {
921
+ token: string;
922
+ }>;
923
+ signJWT: BetterCall.StrictEndpoint<string, {
924
+ method: "POST";
925
+ metadata: {
926
+ $Infer: {
927
+ body: {
928
+ payload: import("better-auth").JWTPayload;
929
+ overrideOptions?: import("better-auth/plugins").JwtOptions | undefined;
930
+ };
931
+ };
932
+ };
933
+ body: import("better-auth").ZodObject<{
934
+ payload: import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>;
935
+ overrideOptions: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
936
+ }, import("zod/v4/core").$strip>;
937
+ }, {
938
+ token: string;
939
+ }>;
940
+ verifyJWT: BetterCall.StrictEndpoint<string, {
941
+ method: "POST";
942
+ metadata: {
943
+ $Infer: {
944
+ body: {
945
+ token: string;
946
+ issuer?: string;
947
+ };
948
+ response: {
949
+ payload: {
950
+ sub: string;
951
+ aud: string;
952
+ [key: string]: any;
953
+ } | null;
954
+ };
955
+ };
956
+ };
957
+ body: import("better-auth").ZodObject<{
958
+ token: import("better-auth").ZodString;
959
+ issuer: import("better-auth").ZodOptional<import("better-auth").ZodString>;
960
+ }, import("zod/v4/core").$strip>;
961
+ }, {
962
+ payload: (import("better-auth").JWTPayload & Required<Pick<import("better-auth").JWTPayload, "sub" | "aud">>) | null;
963
+ }>;
964
+ };
965
+ hooks: {
966
+ after: {
967
+ matcher(context: import("better-auth").HookEndpointContext): boolean;
968
+ handler: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<void>>;
969
+ }[];
970
+ };
971
+ schema: {
972
+ jwks: {
973
+ fields: {
974
+ publicKey: {
975
+ type: "string";
976
+ required: true;
977
+ };
978
+ privateKey: {
979
+ type: "string";
980
+ required: true;
981
+ };
982
+ createdAt: {
983
+ type: "date";
984
+ required: true;
985
+ };
986
+ expiresAt: {
987
+ type: "date";
988
+ required: false;
989
+ };
990
+ alg: {
991
+ type: "string";
992
+ required: false;
993
+ };
994
+ crv: {
995
+ type: "string";
996
+ required: false;
997
+ };
998
+ };
999
+ };
1000
+ };
1001
+ } | {
1002
+ id: "oauth-provider";
1003
+ version: string;
1004
+ options: NoInfer<{
1005
+ allowDynamicClientRegistration: false;
1006
+ consentPage: string;
1007
+ customIdTokenClaims: (info: {
1008
+ user: {
1009
+ id: string;
1010
+ createdAt: Date;
1011
+ updatedAt: Date;
1012
+ email: string;
1013
+ emailVerified: boolean;
1014
+ name: string;
1015
+ image?: string | null | undefined;
1016
+ } & Record<string, unknown>;
1017
+ scopes: import("@better-auth/oauth-provider").Scope[];
1018
+ metadata?: Record<string, any>;
1019
+ }) => {
1020
+ email: string;
1021
+ email_verified: boolean;
1022
+ } | {
1023
+ email?: never;
1024
+ email_verified?: never;
1025
+ };
1026
+ enforcePerClientResources: false;
1027
+ loginPage: string;
1028
+ postLogin?: {
1029
+ consentReferenceId: () => undefined;
1030
+ page: string;
1031
+ shouldRedirect: (context: {
1032
+ headers: Headers;
1033
+ session: {
1034
+ id: string;
1035
+ };
1036
+ user: {
1037
+ id: string;
1038
+ };
1039
+ }) => Promise<boolean>;
1040
+ };
1041
+ customTokenResponseFields?: (info: {
1042
+ grantType: string;
1043
+ user?: {
1044
+ id: string;
1045
+ } | null | undefined;
1046
+ verificationValue?: {
1047
+ query: {
1048
+ client_id: string;
1049
+ code_challenge?: string | undefined;
1050
+ key_authorization?: unknown;
1051
+ };
1052
+ };
1053
+ }) => Promise<{
1054
+ account?: never;
1055
+ key_authorization?: never;
1056
+ } | {
1057
+ account: `0x${string}`;
1058
+ key_authorization: import("ox/tempo/KeyAuthorization").Rpc;
1059
+ }>;
1060
+ resources: {
1061
+ accessTokenTtl: number;
1062
+ identifier: string;
1063
+ name: string;
1064
+ }[];
1065
+ scopes: ("email" | "offline_access" | "openid" | "profile")[];
1066
+ storeClientSecret: {
1067
+ hash: typeof Apps.hashSecret;
1068
+ };
1069
+ }>;
1070
+ onRequest: (request: Request, ctx: import("better-auth").AuthContext) => Promise<{
1071
+ response: Response;
1072
+ } | {
1073
+ request: Request;
1074
+ } | void>;
1075
+ init: (ctx: import("better-auth").AuthContext) => Promise<{
1076
+ options: {
1077
+ databaseHooks: {
1078
+ session: {
1079
+ delete: {
1080
+ before(session: {
1081
+ id: string;
1082
+ createdAt: Date;
1083
+ updatedAt: Date;
1084
+ userId: string;
1085
+ expiresAt: Date;
1086
+ token: string;
1087
+ ipAddress?: string | null | undefined;
1088
+ userAgent?: string | null | undefined;
1089
+ } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
1090
+ after(session: {
1091
+ id: string;
1092
+ createdAt: Date;
1093
+ updatedAt: Date;
1094
+ userId: string;
1095
+ expiresAt: Date;
1096
+ token: string;
1097
+ ipAddress?: string | null | undefined;
1098
+ userAgent?: string | null | undefined;
1099
+ } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
1100
+ };
1101
+ };
1102
+ };
1103
+ };
1104
+ }>;
1105
+ hooks: {
1106
+ before: {
1107
+ matcher(ctx: import("better-auth").HookEndpointContext): any;
1108
+ handler: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<void>>;
1109
+ }[];
1110
+ after: {
1111
+ matcher(ctx: import("better-auth").HookEndpointContext): boolean;
1112
+ handler: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
1113
+ redirect: true;
1114
+ url: string;
1115
+ } | undefined>>;
1116
+ }[];
1117
+ };
1118
+ endpoints: {
1119
+ getOAuthServerConfig: BetterCall.StrictEndpoint<"/.well-known/oauth-authorization-server", {
1120
+ method: "GET";
1121
+ metadata: {
1122
+ SERVER_ONLY: true;
1123
+ };
1124
+ }, import("@better-auth/oauth-provider").AuthServerMetadata>;
1125
+ getOpenIdConfig: BetterCall.StrictEndpoint<"/.well-known/openid-configuration", {
1126
+ method: "GET";
1127
+ metadata: {
1128
+ SERVER_ONLY: true;
1129
+ };
1130
+ }, {
1131
+ jwks_uri?: string | undefined;
1132
+ userinfo_endpoint: string;
1133
+ acr_values_supported?: string[] | undefined;
1134
+ subject_types_supported: ("public" | "pairwise")[];
1135
+ claims_supported: string[];
1136
+ claims_parameter_supported?: boolean | undefined;
1137
+ end_session_endpoint: string;
1138
+ request_parameter_supported?: boolean | undefined;
1139
+ request_uri_parameter_supported?: boolean | undefined;
1140
+ prompt_values_supported: import("@better-auth/oauth-provider").Prompt[];
1141
+ issuer: string;
1142
+ authorization_endpoint: string;
1143
+ token_endpoint: string;
1144
+ registration_endpoint?: string | undefined;
1145
+ scopes_supported?: string[] | undefined;
1146
+ response_types_supported: "code"[];
1147
+ response_modes_supported: "query"[];
1148
+ grant_types_supported: import("@better-auth/oauth-provider").GrantType[];
1149
+ token_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
1150
+ token_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
1151
+ service_documentation?: string | undefined;
1152
+ ui_locales_supported?: string[] | undefined;
1153
+ op_policy_uri?: string | undefined;
1154
+ op_tos_uri?: string | undefined;
1155
+ revocation_endpoint?: string | undefined;
1156
+ revocation_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
1157
+ revocation_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
1158
+ introspection_endpoint?: string | undefined;
1159
+ introspection_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
1160
+ introspection_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
1161
+ code_challenge_methods_supported: "S256"[];
1162
+ authorization_response_iss_parameter_supported?: boolean | undefined;
1163
+ client_id_metadata_document_supported?: boolean | undefined;
1164
+ backchannel_logout_supported?: boolean | undefined;
1165
+ backchannel_logout_session_supported?: boolean | undefined;
1166
+ dpop_signing_alg_values_supported?: import("better-auth/plugins").JWSAlgorithms[] | undefined;
1167
+ id_token_signing_alg_values_supported: import("better-auth/plugins").JWSAlgorithms[] | ["HS256"];
1168
+ }>;
1169
+ oauth2Authorize: BetterCall.StrictEndpoint<"/oauth2/authorize", {
1170
+ method: ("GET" | "POST")[];
1171
+ body: import("better-auth").ZodObject<{}, import("zod/v4/core").$loose>;
1172
+ redirectOnError: import("@better-auth/oauth-provider").OAuthRedirectOnError<import("better-auth").GenericEndpointContext, {
1173
+ redirect: true;
1174
+ url: string;
1175
+ }>;
1176
+ metadata: {
1177
+ allowedMediaTypes: string[];
1178
+ openapi: {
1179
+ description: string;
1180
+ parameters: ({
1181
+ name: string;
1182
+ in: "query";
1183
+ required: false;
1184
+ schema: {
1185
+ type: "string";
1186
+ format?: undefined;
1187
+ minimum?: undefined;
1188
+ items?: undefined;
1189
+ };
1190
+ description: string;
1191
+ } | {
1192
+ name: string;
1193
+ in: "query";
1194
+ required: true;
1195
+ schema: {
1196
+ type: "string";
1197
+ format?: undefined;
1198
+ minimum?: undefined;
1199
+ items?: undefined;
1200
+ };
1201
+ description: string;
1202
+ } | {
1203
+ name: string;
1204
+ in: "query";
1205
+ required: false;
1206
+ schema: {
1207
+ type: "string";
1208
+ format: string;
1209
+ minimum?: undefined;
1210
+ items?: undefined;
1211
+ };
1212
+ description: string;
1213
+ } | {
1214
+ name: string;
1215
+ in: "query";
1216
+ required: false;
1217
+ schema: {
1218
+ type: "integer";
1219
+ minimum: number;
1220
+ format?: undefined;
1221
+ items?: undefined;
1222
+ };
1223
+ description: string;
1224
+ } | {
1225
+ name: string;
1226
+ in: "query";
1227
+ required: false;
1228
+ schema: {
1229
+ type: "array";
1230
+ items: {
1231
+ type: "string";
1232
+ };
1233
+ format?: undefined;
1234
+ minimum?: undefined;
1235
+ };
1236
+ description: string;
1237
+ })[];
1238
+ responses: {
1239
+ "302": {
1240
+ description: string;
1241
+ headers: {
1242
+ Location: {
1243
+ description: string;
1244
+ schema: {
1245
+ type: string;
1246
+ format: string;
1247
+ };
1248
+ };
1249
+ };
1250
+ };
1251
+ "400": {
1252
+ description: string;
1253
+ content: {
1254
+ "application/json": {
1255
+ schema: {
1256
+ type: "object";
1257
+ properties: {
1258
+ error: {
1259
+ type: string;
1260
+ };
1261
+ error_description: {
1262
+ type: string;
1263
+ };
1264
+ state: {
1265
+ type: string;
1266
+ };
1267
+ };
1268
+ required: string[];
1269
+ };
1270
+ };
1271
+ };
1272
+ };
1273
+ };
1274
+ };
1275
+ };
1276
+ }, {
1277
+ redirect: true;
1278
+ url: string;
1279
+ }>;
1280
+ oauth2Consent: BetterCall.StrictEndpoint<"/oauth2/consent", {
1281
+ method: "POST";
1282
+ body: import("better-auth").ZodObject<{
1283
+ accept: import("better-auth").ZodBoolean;
1284
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1285
+ claims: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>]>>;
1286
+ oauth_query: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1287
+ }, import("zod/v4/core").$strip>;
1288
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
1289
+ session: {
1290
+ session: Record<string, any> & {
1291
+ id: string;
1292
+ createdAt: Date;
1293
+ updatedAt: Date;
1294
+ userId: string;
1295
+ expiresAt: Date;
1296
+ token: string;
1297
+ ipAddress?: string | null | undefined;
1298
+ userAgent?: string | null | undefined;
1299
+ };
1300
+ user: Record<string, any> & {
1301
+ id: string;
1302
+ createdAt: Date;
1303
+ updatedAt: Date;
1304
+ email: string;
1305
+ emailVerified: boolean;
1306
+ name: string;
1307
+ image?: string | null | undefined;
1308
+ };
1309
+ };
1310
+ }>>[];
1311
+ metadata: {
1312
+ openapi: {
1313
+ description: string;
1314
+ responses: {
1315
+ "200": {
1316
+ description: string;
1317
+ content: {
1318
+ "application/json": {
1319
+ schema: {
1320
+ type: "object";
1321
+ properties: {
1322
+ redirect_uri: {
1323
+ type: string;
1324
+ format: string;
1325
+ description: string;
1326
+ };
1327
+ };
1328
+ required: string[];
1329
+ };
1330
+ };
1331
+ };
1332
+ };
1333
+ };
1334
+ };
1335
+ };
1336
+ }, {
1337
+ redirect: true;
1338
+ url: string;
1339
+ } | {
1340
+ redirect: boolean;
1341
+ url: string;
1342
+ }>;
1343
+ oauth2Continue: BetterCall.StrictEndpoint<"/oauth2/continue", {
1344
+ method: "POST";
1345
+ body: import("better-auth").ZodObject<{
1346
+ selected: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
1347
+ created: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
1348
+ postLogin: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
1349
+ oauth_query: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1350
+ }, import("zod/v4/core").$strip>;
1351
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
1352
+ session: {
1353
+ session: Record<string, any> & {
1354
+ id: string;
1355
+ createdAt: Date;
1356
+ updatedAt: Date;
1357
+ userId: string;
1358
+ expiresAt: Date;
1359
+ token: string;
1360
+ ipAddress?: string | null | undefined;
1361
+ userAgent?: string | null | undefined;
1362
+ };
1363
+ user: Record<string, any> & {
1364
+ id: string;
1365
+ createdAt: Date;
1366
+ updatedAt: Date;
1367
+ email: string;
1368
+ emailVerified: boolean;
1369
+ name: string;
1370
+ image?: string | null | undefined;
1371
+ };
1372
+ };
1373
+ }>>[];
1374
+ metadata: {
1375
+ openapi: {
1376
+ description: string;
1377
+ responses: {
1378
+ "200": {
1379
+ description: string;
1380
+ content: {
1381
+ "application/json": {
1382
+ schema: {
1383
+ type: "object";
1384
+ properties: {
1385
+ redirect_uri: {
1386
+ type: string;
1387
+ format: string;
1388
+ description: string;
1389
+ };
1390
+ };
1391
+ required: string[];
1392
+ };
1393
+ };
1394
+ };
1395
+ };
1396
+ };
1397
+ };
1398
+ };
1399
+ }, {
1400
+ redirect: true;
1401
+ url: string;
1402
+ }>;
1403
+ oauth2Token: BetterCall.StrictEndpoint<"/oauth2/token", {
1404
+ method: "POST";
1405
+ cloneRequest: true;
1406
+ body: import("better-auth").ZodObject<{
1407
+ grant_type: import("better-auth").ZodString;
1408
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1409
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1410
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1411
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1412
+ code: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1413
+ code_verifier: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1414
+ redirect_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
1415
+ refresh_token: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1416
+ resource: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodArray<import("better-auth").ZodString>]>>;
1417
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1418
+ }, import("zod/v4/core").$loose>;
1419
+ errorCodesByField: {
1420
+ grant_type: {
1421
+ missing: "invalid_request";
1422
+ invalid: "unsupported_grant_type";
1423
+ };
1424
+ resource: {
1425
+ invalid: "invalid_target";
1426
+ };
1427
+ };
1428
+ metadata: {
1429
+ noStore: boolean;
1430
+ allowedMediaTypes: string[];
1431
+ openapi: {
1432
+ description: string;
1433
+ parameters: {
1434
+ name: string;
1435
+ in: "header";
1436
+ required: false;
1437
+ schema: {
1438
+ type: "string";
1439
+ };
1440
+ description: string;
1441
+ }[];
1442
+ requestBody: {
1443
+ required: boolean;
1444
+ content: {
1445
+ "application/json": {
1446
+ schema: {
1447
+ type: "object";
1448
+ properties: {
1449
+ grant_type: {
1450
+ type: string;
1451
+ description: string;
1452
+ };
1453
+ client_id: {
1454
+ type: string;
1455
+ description: string;
1456
+ };
1457
+ client_secret: {
1458
+ type: string;
1459
+ description: string;
1460
+ };
1461
+ code: {
1462
+ type: string;
1463
+ description: string;
1464
+ };
1465
+ code_verifier: {
1466
+ type: string;
1467
+ description: string;
1468
+ };
1469
+ redirect_uri: {
1470
+ type: string;
1471
+ format: string;
1472
+ description: string;
1473
+ };
1474
+ refresh_token: {
1475
+ type: string;
1476
+ description: string;
1477
+ };
1478
+ resource: {
1479
+ oneOf: ({
1480
+ type: string;
1481
+ description: string;
1482
+ items?: undefined;
1483
+ } | {
1484
+ type: string;
1485
+ items: {
1486
+ type: string;
1487
+ };
1488
+ description: string;
1489
+ })[];
1490
+ description: string;
1491
+ };
1492
+ scope: {
1493
+ type: string;
1494
+ description: string;
1495
+ };
1496
+ };
1497
+ required: string[];
1498
+ };
1499
+ };
1500
+ };
1501
+ };
1502
+ responses: {
1503
+ "200": {
1504
+ description: string;
1505
+ content: {
1506
+ "application/json": {
1507
+ schema: {
1508
+ type: "object";
1509
+ properties: {
1510
+ access_token: {
1511
+ type: string;
1512
+ description: string;
1513
+ };
1514
+ token_type: {
1515
+ type: string;
1516
+ description: string;
1517
+ enum: string[];
1518
+ };
1519
+ expires_in: {
1520
+ type: string;
1521
+ description: string;
1522
+ };
1523
+ refresh_token: {
1524
+ type: string;
1525
+ description: string;
1526
+ };
1527
+ scope: {
1528
+ type: string;
1529
+ description: string;
1530
+ };
1531
+ id_token: {
1532
+ type: string;
1533
+ description: string;
1534
+ };
1535
+ };
1536
+ required: string[];
1537
+ };
1538
+ };
1539
+ };
1540
+ };
1541
+ "400": {
1542
+ description: string;
1543
+ content: {
1544
+ "application/json": {
1545
+ schema: {
1546
+ type: "object";
1547
+ properties: {
1548
+ error: {
1549
+ type: string;
1550
+ };
1551
+ error_description: {
1552
+ type: string;
1553
+ };
1554
+ error_uri: {
1555
+ type: string;
1556
+ };
1557
+ };
1558
+ required: string[];
1559
+ };
1560
+ };
1561
+ };
1562
+ };
1563
+ };
1564
+ };
1565
+ };
1566
+ }, {
1567
+ expires_in: number;
1568
+ access_token: string;
1569
+ expires_at: number;
1570
+ token_type: import("@better-auth/oauth-provider").TokenType;
1571
+ refresh_token: string | undefined;
1572
+ scope: string;
1573
+ id_token: string | undefined;
1574
+ }>;
1575
+ oauth2Introspect: BetterCall.StrictEndpoint<"/oauth2/introspect", {
1576
+ method: "POST";
1577
+ cloneRequest: true;
1578
+ body: import("better-auth").ZodObject<{
1579
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1580
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1581
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1582
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1583
+ token: import("better-auth").ZodString;
1584
+ token_type_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1585
+ }, import("zod/v4/core").$strip>;
1586
+ metadata: {
1587
+ noStore: boolean;
1588
+ allowedMediaTypes: string[];
1589
+ openapi: {
1590
+ description: string;
1591
+ requestBody: {
1592
+ required: boolean;
1593
+ content: {
1594
+ "application/json": {
1595
+ schema: {
1596
+ type: "object";
1597
+ properties: {
1598
+ client_id: {
1599
+ type: string;
1600
+ description: string;
1601
+ };
1602
+ client_secret: {
1603
+ type: string;
1604
+ description: string;
1605
+ };
1606
+ token: {
1607
+ type: string;
1608
+ description: string;
1609
+ };
1610
+ token_type_hint: {
1611
+ type: string;
1612
+ description: string;
1613
+ };
1614
+ };
1615
+ required: string[];
1616
+ };
1617
+ };
1618
+ };
1619
+ };
1620
+ responses: {
1621
+ "200": {
1622
+ description: string;
1623
+ content: {
1624
+ "application/json": {
1625
+ schema: {
1626
+ type: "object";
1627
+ properties: {
1628
+ active: {
1629
+ type: string;
1630
+ description: string;
1631
+ };
1632
+ scope: {
1633
+ type: string;
1634
+ description: string;
1635
+ };
1636
+ client_id: {
1637
+ type: string;
1638
+ description: string;
1639
+ };
1640
+ username: {
1641
+ type: string;
1642
+ description: string;
1643
+ };
1644
+ token_type: {
1645
+ type: string;
1646
+ description: string;
1647
+ };
1648
+ exp: {
1649
+ type: string;
1650
+ description: string;
1651
+ };
1652
+ iat: {
1653
+ type: string;
1654
+ description: string;
1655
+ };
1656
+ nbf: {
1657
+ type: string;
1658
+ description: string;
1659
+ };
1660
+ sub: {
1661
+ type: string;
1662
+ description: string;
1663
+ };
1664
+ aud: {
1665
+ type: string;
1666
+ description: string;
1667
+ };
1668
+ iss: {
1669
+ type: string;
1670
+ description: string;
1671
+ };
1672
+ jti: {
1673
+ type: string;
1674
+ description: string;
1675
+ };
1676
+ };
1677
+ required: string[];
1678
+ };
1679
+ };
1680
+ };
1681
+ };
1682
+ "400": {
1683
+ description: string;
1684
+ content: {
1685
+ "application/json": {
1686
+ schema: {
1687
+ type: "object";
1688
+ properties: {
1689
+ error: {
1690
+ type: string;
1691
+ };
1692
+ error_description: {
1693
+ type: string;
1694
+ };
1695
+ error_uri: {
1696
+ type: string;
1697
+ };
1698
+ };
1699
+ required: string[];
1700
+ };
1701
+ };
1702
+ };
1703
+ };
1704
+ };
1705
+ };
1706
+ };
1707
+ }, import("better-auth").JWTPayload>;
1708
+ oauth2Revoke: BetterCall.StrictEndpoint<"/oauth2/revoke", {
1709
+ method: "POST";
1710
+ cloneRequest: true;
1711
+ body: import("better-auth").ZodObject<{
1712
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1713
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1714
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1715
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1716
+ token: import("better-auth").ZodString;
1717
+ token_type_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1718
+ }, import("zod/v4/core").$strip>;
1719
+ metadata: {
1720
+ allowedMediaTypes: string[];
1721
+ openapi: {
1722
+ description: string;
1723
+ requestBody: {
1724
+ required: boolean;
1725
+ content: {
1726
+ "application/json": {
1727
+ schema: {
1728
+ type: "object";
1729
+ properties: {
1730
+ client_id: {
1731
+ type: string;
1732
+ description: string;
1733
+ };
1734
+ client_secret: {
1735
+ type: string;
1736
+ description: string;
1737
+ };
1738
+ token: {
1739
+ type: string;
1740
+ description: string;
1741
+ };
1742
+ token_type_hint: {
1743
+ type: string;
1744
+ description: string;
1745
+ };
1746
+ };
1747
+ required: string[];
1748
+ };
1749
+ };
1750
+ };
1751
+ };
1752
+ responses: {
1753
+ "200": {
1754
+ description: string;
1755
+ content: {
1756
+ "application/json": {
1757
+ schema: {
1758
+ type: "object";
1759
+ description: string;
1760
+ };
1761
+ };
1762
+ };
1763
+ };
1764
+ "400": {
1765
+ description: string;
1766
+ content: {
1767
+ "application/json": {
1768
+ schema: {
1769
+ type: "object";
1770
+ properties: {
1771
+ error: {
1772
+ type: string;
1773
+ };
1774
+ error_description: {
1775
+ type: string;
1776
+ };
1777
+ error_uri: {
1778
+ type: string;
1779
+ };
1780
+ };
1781
+ required: string[];
1782
+ };
1783
+ };
1784
+ };
1785
+ };
1786
+ };
1787
+ };
1788
+ };
1789
+ }, null | undefined>;
1790
+ oauth2UserInfo: BetterCall.StrictEndpoint<"/oauth2/userinfo", {
1791
+ method: ("GET" | "POST")[];
1792
+ body: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
1793
+ access_token: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1794
+ }, import("zod/v4/core").$loose>>;
1795
+ metadata: {
1796
+ noStore: boolean;
1797
+ allowedMediaTypes: string[];
1798
+ openapi: {
1799
+ description: string;
1800
+ security: ({
1801
+ bearerAuth: never[];
1802
+ OAuth2?: undefined;
1803
+ } | {
1804
+ OAuth2: string[];
1805
+ bearerAuth?: undefined;
1806
+ })[];
1807
+ parameters: {
1808
+ name: string;
1809
+ in: "header";
1810
+ required: false;
1811
+ schema: {
1812
+ type: "string";
1813
+ };
1814
+ description: string;
1815
+ }[];
1816
+ responses: {
1817
+ "200": {
1818
+ description: string;
1819
+ content: {
1820
+ "application/json": {
1821
+ schema: {
1822
+ type: "object";
1823
+ properties: {
1824
+ sub: {
1825
+ type: string;
1826
+ description: string;
1827
+ };
1828
+ email: {
1829
+ type: string;
1830
+ format: string;
1831
+ nullable: boolean;
1832
+ description: string;
1833
+ };
1834
+ name: {
1835
+ type: string;
1836
+ nullable: boolean;
1837
+ description: string;
1838
+ };
1839
+ picture: {
1840
+ type: string;
1841
+ format: string;
1842
+ nullable: boolean;
1843
+ description: string;
1844
+ };
1845
+ given_name: {
1846
+ type: string;
1847
+ nullable: boolean;
1848
+ description: string;
1849
+ };
1850
+ family_name: {
1851
+ type: string;
1852
+ nullable: boolean;
1853
+ description: string;
1854
+ };
1855
+ email_verified: {
1856
+ type: string;
1857
+ nullable: boolean;
1858
+ description: string;
1859
+ };
1860
+ };
1861
+ required: string[];
1862
+ };
1863
+ };
1864
+ };
1865
+ };
1866
+ "401": {
1867
+ description: string;
1868
+ content: {
1869
+ "application/json": {
1870
+ schema: {
1871
+ type: "object";
1872
+ properties: {
1873
+ error: {
1874
+ type: string;
1875
+ };
1876
+ error_description: {
1877
+ type: string;
1878
+ };
1879
+ };
1880
+ required: string[];
1881
+ };
1882
+ };
1883
+ };
1884
+ };
1885
+ "403": {
1886
+ description: string;
1887
+ content: {
1888
+ "application/json": {
1889
+ schema: {
1890
+ type: "object";
1891
+ properties: {
1892
+ error: {
1893
+ type: string;
1894
+ };
1895
+ error_description: {
1896
+ type: string;
1897
+ };
1898
+ };
1899
+ required: string[];
1900
+ };
1901
+ };
1902
+ };
1903
+ };
1904
+ };
1905
+ };
1906
+ };
1907
+ }, {
1908
+ sub: unknown;
1909
+ }>;
1910
+ oauth2EndSession: BetterCall.StrictEndpoint<"/oauth2/end-session", {
1911
+ method: ("GET" | "POST")[];
1912
+ body: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
1913
+ id_token_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1914
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1915
+ post_logout_redirect_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
1916
+ state: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1917
+ }, import("zod/v4/core").$strip>>;
1918
+ query: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
1919
+ id_token_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1920
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1921
+ post_logout_redirect_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
1922
+ state: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1923
+ }, import("zod/v4/core").$strip>>;
1924
+ metadata: {
1925
+ noStore: boolean;
1926
+ allowedMediaTypes: string[];
1927
+ $Infer: {
1928
+ body: {
1929
+ id_token_hint?: string;
1930
+ client_id?: string;
1931
+ post_logout_redirect_uri?: string;
1932
+ state?: string;
1933
+ } | {
1934
+ query: {
1935
+ id_token_hint?: string;
1936
+ client_id?: string;
1937
+ post_logout_redirect_uri?: string;
1938
+ state?: string;
1939
+ };
1940
+ };
1941
+ query: {
1942
+ id_token_hint?: string;
1943
+ client_id?: string;
1944
+ post_logout_redirect_uri?: string;
1945
+ state?: string;
1946
+ };
1947
+ };
1948
+ openapi: {
1949
+ description: string;
1950
+ responses: {
1951
+ "200": {
1952
+ description: string;
1953
+ content: {
1954
+ "application/json": {
1955
+ schema: {
1956
+ type: "object";
1957
+ properties: {
1958
+ redirect_uri: {
1959
+ type: string;
1960
+ format: string;
1961
+ description: string;
1962
+ };
1963
+ message: {
1964
+ type: string;
1965
+ description: string;
1966
+ };
1967
+ };
1968
+ };
1969
+ };
1970
+ "text/html": {
1971
+ schema: {
1972
+ type: "string";
1973
+ };
1974
+ };
1975
+ };
1976
+ };
1977
+ };
1978
+ };
1979
+ };
1980
+ }, Response | {
1981
+ redirect: true;
1982
+ url: string;
1983
+ } | null>;
1984
+ oauth2EndSessionConfirmation: BetterCall.StrictEndpoint<"/oauth2/end-session/confirm", {
1985
+ method: "POST";
1986
+ body: import("better-auth").ZodObject<{
1987
+ action: import("better-auth").ZodLiteral<"confirm">;
1988
+ }, import("zod/v4/core").$strip>;
1989
+ metadata: {
1990
+ noStore: boolean;
1991
+ allowedMediaTypes: string[];
1992
+ scope: "http";
1993
+ };
1994
+ }, Response | {
1995
+ redirect: true;
1996
+ url: string;
1997
+ } | null>;
1998
+ registerOAuthClient: BetterCall.StrictEndpoint<"/oauth2/register", {
1999
+ method: "POST";
2000
+ body: import("better-auth").ZodObject<{
2001
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2002
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2003
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2004
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2005
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2006
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2007
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2008
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2009
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2010
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2011
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2012
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2013
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2014
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2015
+ token_endpoint_auth_method: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2016
+ jwks: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2017
+ keys: import("better-auth").ZodArray<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2018
+ }, import("zod/v4/core").$strip>>;
2019
+ jwks_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2020
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2021
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2022
+ code: "code";
2023
+ }>>>;
2024
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2025
+ web: "web";
2026
+ native: "native";
2027
+ }>>;
2028
+ subject_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2029
+ public: "public";
2030
+ pairwise: "pairwise";
2031
+ }>>;
2032
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2033
+ resources: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2034
+ skip_consent: import("better-auth").ZodOptional<import("better-auth").ZodNever>;
2035
+ }, import("zod/v4/core").$strip>;
2036
+ errorCodesByField: {
2037
+ redirect_uris: "invalid_redirect_uri";
2038
+ post_logout_redirect_uris: "invalid_redirect_uri";
2039
+ software_statement: "invalid_software_statement";
2040
+ resources: "invalid_target";
2041
+ };
2042
+ defaultError: "invalid_client_metadata";
2043
+ metadata: {
2044
+ noStore: boolean;
2045
+ openapi: {
2046
+ description: string;
2047
+ responses: {
2048
+ "201": {
2049
+ description: string;
2050
+ content: {
2051
+ "application/json": {
2052
+ schema: {
2053
+ type: "object";
2054
+ properties: {
2055
+ client_id: {
2056
+ type: string;
2057
+ description: string;
2058
+ };
2059
+ client_secret: {
2060
+ type: string;
2061
+ description: string;
2062
+ };
2063
+ client_secret_expires_at: {
2064
+ type: string;
2065
+ description: string;
2066
+ };
2067
+ scope: {
2068
+ type: string;
2069
+ description: string;
2070
+ };
2071
+ user_id: {
2072
+ type: string;
2073
+ description: string;
2074
+ };
2075
+ client_id_issued_at: {
2076
+ type: string;
2077
+ description: string;
2078
+ };
2079
+ client_name: {
2080
+ type: string;
2081
+ description: string;
2082
+ };
2083
+ client_uri: {
2084
+ type: string;
2085
+ description: string;
2086
+ };
2087
+ logo_uri: {
2088
+ type: string;
2089
+ description: string;
2090
+ };
2091
+ contacts: {
2092
+ type: string;
2093
+ items: {
2094
+ type: string;
2095
+ };
2096
+ description: string;
2097
+ };
2098
+ tos_uri: {
2099
+ type: string;
2100
+ description: string;
2101
+ };
2102
+ policy_uri: {
2103
+ type: string;
2104
+ description: string;
2105
+ };
2106
+ software_id: {
2107
+ type: string;
2108
+ description: string;
2109
+ };
2110
+ software_version: {
2111
+ type: string;
2112
+ description: string;
2113
+ };
2114
+ software_statement: {
2115
+ type: string;
2116
+ description: string;
2117
+ };
2118
+ redirect_uris: {
2119
+ type: string;
2120
+ items: {
2121
+ type: string;
2122
+ format: string;
2123
+ };
2124
+ description: string;
2125
+ };
2126
+ post_logout_redirect_uris: {
2127
+ type: string;
2128
+ items: {
2129
+ type: string;
2130
+ format: string;
2131
+ };
2132
+ description: string;
2133
+ };
2134
+ backchannel_logout_uri: {
2135
+ type: string;
2136
+ format: string;
2137
+ description: string;
2138
+ };
2139
+ backchannel_logout_session_required: {
2140
+ type: string;
2141
+ description: string;
2142
+ };
2143
+ token_endpoint_auth_method: {
2144
+ type: string;
2145
+ description: string;
2146
+ };
2147
+ grant_types: {
2148
+ type: string;
2149
+ items: {
2150
+ type: string;
2151
+ };
2152
+ description: string;
2153
+ };
2154
+ response_types: {
2155
+ type: string;
2156
+ items: {
2157
+ type: string;
2158
+ enum: string[];
2159
+ };
2160
+ description: string;
2161
+ };
2162
+ application_type: {
2163
+ type: string;
2164
+ description: string;
2165
+ enum: string[];
2166
+ };
2167
+ resources: {
2168
+ type: string;
2169
+ items: {
2170
+ type: string;
2171
+ format: string;
2172
+ };
2173
+ description: string;
2174
+ };
2175
+ disabled: {
2176
+ type: string;
2177
+ description: string;
2178
+ };
2179
+ };
2180
+ required: string[];
2181
+ };
2182
+ };
2183
+ };
2184
+ };
2185
+ };
2186
+ };
2187
+ };
2188
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
2189
+ adminCreateOAuthClient: BetterCall.StrictEndpoint<"/admin/oauth2/create-client", {
2190
+ method: "POST";
2191
+ body: import("better-auth").ZodObject<{
2192
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2193
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2194
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2195
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2196
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2197
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2198
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2199
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2200
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2201
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2202
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2203
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2204
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2205
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2206
+ token_endpoint_auth_method: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2207
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2208
+ web: "web";
2209
+ native: "native";
2210
+ }>>;
2211
+ jwks: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2212
+ keys: import("better-auth").ZodArray<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2213
+ }, import("zod/v4/core").$strip>>;
2214
+ jwks_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2215
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2216
+ client_credentials_scopes: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2217
+ resources: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2218
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2219
+ code: "code";
2220
+ }>>>;
2221
+ client_secret_expires_at: import("better-auth").ZodDefault<import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodNumber]>>>;
2222
+ skip_consent: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2223
+ enable_end_session: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2224
+ require_pkce: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2225
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2226
+ subject_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2227
+ public: "public";
2228
+ pairwise: "pairwise";
2229
+ }>>;
2230
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2231
+ }, import("zod/v4/core").$strip>;
2232
+ metadata: {
2233
+ noStore: boolean;
2234
+ SERVER_ONLY: true;
2235
+ openapi: {
2236
+ description: string;
2237
+ responses: {
2238
+ "201": {
2239
+ description: string;
2240
+ content: {
2241
+ "application/json": {
2242
+ schema: {
2243
+ type: "object";
2244
+ properties: {
2245
+ client_id: {
2246
+ type: string;
2247
+ description: string;
2248
+ };
2249
+ client_secret: {
2250
+ type: string;
2251
+ description: string;
2252
+ };
2253
+ client_secret_expires_at: {
2254
+ type: string;
2255
+ description: string;
2256
+ };
2257
+ scope: {
2258
+ type: string;
2259
+ description: string;
2260
+ };
2261
+ client_credentials_scopes: {
2262
+ type: string;
2263
+ items: {
2264
+ type: string;
2265
+ };
2266
+ description: string;
2267
+ };
2268
+ user_id: {
2269
+ type: string;
2270
+ description: string;
2271
+ };
2272
+ client_id_issued_at: {
2273
+ type: string;
2274
+ description: string;
2275
+ };
2276
+ client_name: {
2277
+ type: string;
2278
+ description: string;
2279
+ };
2280
+ client_uri: {
2281
+ type: string;
2282
+ description: string;
2283
+ };
2284
+ logo_uri: {
2285
+ type: string;
2286
+ description: string;
2287
+ };
2288
+ contacts: {
2289
+ type: string;
2290
+ items: {
2291
+ type: string;
2292
+ };
2293
+ description: string;
2294
+ };
2295
+ tos_uri: {
2296
+ type: string;
2297
+ description: string;
2298
+ };
2299
+ policy_uri: {
2300
+ type: string;
2301
+ description: string;
2302
+ };
2303
+ software_id: {
2304
+ type: string;
2305
+ description: string;
2306
+ };
2307
+ software_version: {
2308
+ type: string;
2309
+ description: string;
2310
+ };
2311
+ software_statement: {
2312
+ type: string;
2313
+ description: string;
2314
+ };
2315
+ redirect_uris: {
2316
+ type: string;
2317
+ items: {
2318
+ type: string;
2319
+ format: string;
2320
+ };
2321
+ description: string;
2322
+ };
2323
+ token_endpoint_auth_method: {
2324
+ type: string;
2325
+ description: string;
2326
+ };
2327
+ grant_types: {
2328
+ type: string;
2329
+ items: {
2330
+ type: string;
2331
+ };
2332
+ description: string;
2333
+ };
2334
+ response_types: {
2335
+ type: string;
2336
+ items: {
2337
+ type: string;
2338
+ enum: string[];
2339
+ };
2340
+ description: string;
2341
+ };
2342
+ application_type: {
2343
+ type: string;
2344
+ description: string;
2345
+ enum: string[];
2346
+ };
2347
+ resources: {
2348
+ type: string;
2349
+ items: {
2350
+ type: string;
2351
+ format: string;
2352
+ };
2353
+ description: string;
2354
+ };
2355
+ disabled: {
2356
+ type: string;
2357
+ description: string;
2358
+ };
2359
+ require_pkce: {
2360
+ type: string;
2361
+ description: string;
2362
+ default: boolean;
2363
+ };
2364
+ metadata: {
2365
+ type: string;
2366
+ additionalProperties: boolean;
2367
+ nullable: boolean;
2368
+ description: string;
2369
+ };
2370
+ };
2371
+ required: string[];
2372
+ };
2373
+ };
2374
+ };
2375
+ };
2376
+ };
2377
+ };
2378
+ };
2379
+ }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
2380
+ createOAuthClient: BetterCall.StrictEndpoint<"/oauth2/create-client", {
2381
+ method: "POST";
2382
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2383
+ session: {
2384
+ session: Record<string, any> & {
2385
+ id: string;
2386
+ createdAt: Date;
2387
+ updatedAt: Date;
2388
+ userId: string;
2389
+ expiresAt: Date;
2390
+ token: string;
2391
+ ipAddress?: string | null | undefined;
2392
+ userAgent?: string | null | undefined;
2393
+ };
2394
+ user: Record<string, any> & {
2395
+ id: string;
2396
+ createdAt: Date;
2397
+ updatedAt: Date;
2398
+ email: string;
2399
+ emailVerified: boolean;
2400
+ name: string;
2401
+ image?: string | null | undefined;
2402
+ };
2403
+ };
2404
+ }>>[];
2405
+ body: import("better-auth").ZodObject<{
2406
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2407
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2408
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2409
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2410
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2411
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2412
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2413
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2414
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2415
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2416
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2417
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2418
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2419
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2420
+ token_endpoint_auth_method: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2421
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2422
+ web: "web";
2423
+ native: "native";
2424
+ }>>;
2425
+ jwks: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2426
+ keys: import("better-auth").ZodArray<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2427
+ }, import("zod/v4/core").$strip>>;
2428
+ jwks_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2429
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2430
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2431
+ code: "code";
2432
+ }>>>;
2433
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2434
+ }, import("zod/v4/core").$strip>;
2435
+ metadata: {
2436
+ noStore: boolean;
2437
+ openapi: {
2438
+ description: string;
2439
+ responses: {
2440
+ "201": {
2441
+ description: string;
2442
+ content: {
2443
+ "application/json": {
2444
+ schema: {
2445
+ type: "object";
2446
+ properties: {
2447
+ client_id: {
2448
+ type: string;
2449
+ description: string;
2450
+ };
2451
+ client_secret: {
2452
+ type: string;
2453
+ description: string;
2454
+ };
2455
+ client_secret_expires_at: {
2456
+ type: string;
2457
+ description: string;
2458
+ };
2459
+ scope: {
2460
+ type: string;
2461
+ description: string;
2462
+ };
2463
+ user_id: {
2464
+ type: string;
2465
+ description: string;
2466
+ };
2467
+ client_id_issued_at: {
2468
+ type: string;
2469
+ description: string;
2470
+ };
2471
+ client_name: {
2472
+ type: string;
2473
+ description: string;
2474
+ };
2475
+ client_uri: {
2476
+ type: string;
2477
+ description: string;
2478
+ };
2479
+ logo_uri: {
2480
+ type: string;
2481
+ description: string;
2482
+ };
2483
+ contacts: {
2484
+ type: string;
2485
+ items: {
2486
+ type: string;
2487
+ };
2488
+ description: string;
2489
+ };
2490
+ tos_uri: {
2491
+ type: string;
2492
+ description: string;
2493
+ };
2494
+ policy_uri: {
2495
+ type: string;
2496
+ description: string;
2497
+ };
2498
+ software_id: {
2499
+ type: string;
2500
+ description: string;
2501
+ };
2502
+ software_version: {
2503
+ type: string;
2504
+ description: string;
2505
+ };
2506
+ software_statement: {
2507
+ type: string;
2508
+ description: string;
2509
+ };
2510
+ redirect_uris: {
2511
+ type: string;
2512
+ items: {
2513
+ type: string;
2514
+ format: string;
2515
+ };
2516
+ description: string;
2517
+ };
2518
+ token_endpoint_auth_method: {
2519
+ type: string;
2520
+ description: string;
2521
+ };
2522
+ grant_types: {
2523
+ type: string;
2524
+ items: {
2525
+ type: string;
2526
+ };
2527
+ description: string;
2528
+ };
2529
+ response_types: {
2530
+ type: string;
2531
+ items: {
2532
+ type: string;
2533
+ enum: string[];
2534
+ };
2535
+ description: string;
2536
+ };
2537
+ application_type: {
2538
+ type: string;
2539
+ description: string;
2540
+ enum: string[];
2541
+ };
2542
+ resources: {
2543
+ type: string;
2544
+ items: {
2545
+ type: string;
2546
+ format: string;
2547
+ };
2548
+ description: string;
2549
+ };
2550
+ disabled: {
2551
+ type: string;
2552
+ description: string;
2553
+ };
2554
+ metadata: {
2555
+ type: string;
2556
+ additionalProperties: boolean;
2557
+ nullable: boolean;
2558
+ description: string;
2559
+ };
2560
+ };
2561
+ required: string[];
2562
+ };
2563
+ };
2564
+ };
2565
+ };
2566
+ };
2567
+ };
2568
+ };
2569
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
2570
+ getOAuthClient: BetterCall.StrictEndpoint<"/oauth2/get-client", {
2571
+ method: "GET";
2572
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2573
+ session: {
2574
+ session: Record<string, any> & {
2575
+ id: string;
2576
+ createdAt: Date;
2577
+ updatedAt: Date;
2578
+ userId: string;
2579
+ expiresAt: Date;
2580
+ token: string;
2581
+ ipAddress?: string | null | undefined;
2582
+ userAgent?: string | null | undefined;
2583
+ };
2584
+ user: Record<string, any> & {
2585
+ id: string;
2586
+ createdAt: Date;
2587
+ updatedAt: Date;
2588
+ email: string;
2589
+ emailVerified: boolean;
2590
+ name: string;
2591
+ image?: string | null | undefined;
2592
+ };
2593
+ };
2594
+ }>>[];
2595
+ query: import("better-auth").ZodObject<{
2596
+ client_id: import("better-auth").ZodString;
2597
+ }, import("zod/v4/core").$strip>;
2598
+ metadata: {
2599
+ openapi: {
2600
+ description: string;
2601
+ };
2602
+ };
2603
+ }, import("@better-auth/oauth-provider").OAuthClient>;
2604
+ getOAuthClientPublic: BetterCall.StrictEndpoint<"/oauth2/public-client", {
2605
+ method: "GET";
2606
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2607
+ session: {
2608
+ session: Record<string, any> & {
2609
+ id: string;
2610
+ createdAt: Date;
2611
+ updatedAt: Date;
2612
+ userId: string;
2613
+ expiresAt: Date;
2614
+ token: string;
2615
+ ipAddress?: string | null | undefined;
2616
+ userAgent?: string | null | undefined;
2617
+ };
2618
+ user: Record<string, any> & {
2619
+ id: string;
2620
+ createdAt: Date;
2621
+ updatedAt: Date;
2622
+ email: string;
2623
+ emailVerified: boolean;
2624
+ name: string;
2625
+ image?: string | null | undefined;
2626
+ };
2627
+ };
2628
+ }>>[];
2629
+ query: import("better-auth").ZodObject<{
2630
+ client_id: import("better-auth").ZodString;
2631
+ }, import("zod/v4/core").$strip>;
2632
+ metadata: {
2633
+ openapi: {
2634
+ description: string;
2635
+ };
2636
+ };
2637
+ }, import("@better-auth/oauth-provider").OAuthClient>;
2638
+ getOAuthClientPublicPrelogin: BetterCall.StrictEndpoint<"/oauth2/public-client-prelogin", {
2639
+ method: "POST";
2640
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<void>>[];
2641
+ body: import("better-auth").ZodObject<{
2642
+ client_id: import("better-auth").ZodString;
2643
+ oauth_query: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2644
+ }, import("zod/v4/core").$strip>;
2645
+ metadata: {
2646
+ openapi: {
2647
+ description: string;
2648
+ };
2649
+ };
2650
+ }, import("@better-auth/oauth-provider").OAuthClient>;
2651
+ getOAuthClients: BetterCall.StrictEndpoint<"/oauth2/get-clients", {
2652
+ method: "GET";
2653
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2654
+ session: {
2655
+ session: Record<string, any> & {
2656
+ id: string;
2657
+ createdAt: Date;
2658
+ updatedAt: Date;
2659
+ userId: string;
2660
+ expiresAt: Date;
2661
+ token: string;
2662
+ ipAddress?: string | null | undefined;
2663
+ userAgent?: string | null | undefined;
2664
+ };
2665
+ user: Record<string, any> & {
2666
+ id: string;
2667
+ createdAt: Date;
2668
+ updatedAt: Date;
2669
+ email: string;
2670
+ emailVerified: boolean;
2671
+ name: string;
2672
+ image?: string | null | undefined;
2673
+ };
2674
+ };
2675
+ }>>[];
2676
+ metadata: {
2677
+ openapi: {
2678
+ description: string;
2679
+ };
2680
+ };
2681
+ }, import("@better-auth/oauth-provider").OAuthClient[] | null>;
2682
+ adminUpdateOAuthClient: BetterCall.StrictEndpoint<"/admin/oauth2/update-client", {
2683
+ method: "PATCH";
2684
+ body: import("better-auth").ZodObject<{
2685
+ client_id: import("better-auth").ZodString;
2686
+ update: import("better-auth").ZodObject<{
2687
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2688
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2689
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2690
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2691
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2692
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2693
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2694
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2695
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2696
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2697
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2698
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2699
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2700
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2701
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2702
+ web: "web";
2703
+ native: "native";
2704
+ }>>;
2705
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2706
+ client_credentials_scopes: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2707
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2708
+ code: "code";
2709
+ }>>>;
2710
+ client_secret_expires_at: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodNumber]>>;
2711
+ skip_consent: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2712
+ enable_end_session: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2713
+ disabled: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2714
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2715
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2716
+ }, import("zod/v4/core").$strip>;
2717
+ }, import("zod/v4/core").$strip>;
2718
+ metadata: {
2719
+ SERVER_ONLY: true;
2720
+ openapi: {
2721
+ description: string;
2722
+ };
2723
+ };
2724
+ }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
2725
+ updateOAuthClient: BetterCall.StrictEndpoint<"/oauth2/update-client", {
2726
+ method: "POST";
2727
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2728
+ session: {
2729
+ session: Record<string, any> & {
2730
+ id: string;
2731
+ createdAt: Date;
2732
+ updatedAt: Date;
2733
+ userId: string;
2734
+ expiresAt: Date;
2735
+ token: string;
2736
+ ipAddress?: string | null | undefined;
2737
+ userAgent?: string | null | undefined;
2738
+ };
2739
+ user: Record<string, any> & {
2740
+ id: string;
2741
+ createdAt: Date;
2742
+ updatedAt: Date;
2743
+ email: string;
2744
+ emailVerified: boolean;
2745
+ name: string;
2746
+ image?: string | null | undefined;
2747
+ };
2748
+ };
2749
+ }>>[];
2750
+ body: import("better-auth").ZodObject<{
2751
+ client_id: import("better-auth").ZodString;
2752
+ update: import("better-auth").ZodObject<{
2753
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2754
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2755
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2756
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2757
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2758
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2759
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2760
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2761
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2762
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2763
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2764
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2765
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2766
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2767
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2768
+ web: "web";
2769
+ native: "native";
2770
+ }>>;
2771
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2772
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2773
+ code: "code";
2774
+ }>>>;
2775
+ }, import("zod/v4/core").$strip>;
2776
+ }, import("zod/v4/core").$strip>;
2777
+ metadata: {
2778
+ openapi: {
2779
+ description: string;
2780
+ };
2781
+ };
2782
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
2783
+ rotateClientSecret: BetterCall.StrictEndpoint<"/oauth2/client/rotate-secret", {
2784
+ method: "POST";
2785
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2786
+ session: {
2787
+ session: Record<string, any> & {
2788
+ id: string;
2789
+ createdAt: Date;
2790
+ updatedAt: Date;
2791
+ userId: string;
2792
+ expiresAt: Date;
2793
+ token: string;
2794
+ ipAddress?: string | null | undefined;
2795
+ userAgent?: string | null | undefined;
2796
+ };
2797
+ user: Record<string, any> & {
2798
+ id: string;
2799
+ createdAt: Date;
2800
+ updatedAt: Date;
2801
+ email: string;
2802
+ emailVerified: boolean;
2803
+ name: string;
2804
+ image?: string | null | undefined;
2805
+ };
2806
+ };
2807
+ }>>[];
2808
+ body: import("better-auth").ZodObject<{
2809
+ client_id: import("better-auth").ZodString;
2810
+ }, import("zod/v4/core").$strip>;
2811
+ metadata: {
2812
+ noStore: boolean;
2813
+ openapi: {
2814
+ description: string;
2815
+ };
2816
+ };
2817
+ }, import("@better-auth/oauth-provider").OAuthClient>;
2818
+ deleteOAuthClient: BetterCall.StrictEndpoint<"/oauth2/delete-client", {
2819
+ method: "POST";
2820
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2821
+ session: {
2822
+ session: Record<string, any> & {
2823
+ id: string;
2824
+ createdAt: Date;
2825
+ updatedAt: Date;
2826
+ userId: string;
2827
+ expiresAt: Date;
2828
+ token: string;
2829
+ ipAddress?: string | null | undefined;
2830
+ userAgent?: string | null | undefined;
2831
+ };
2832
+ user: Record<string, any> & {
2833
+ id: string;
2834
+ createdAt: Date;
2835
+ updatedAt: Date;
2836
+ email: string;
2837
+ emailVerified: boolean;
2838
+ name: string;
2839
+ image?: string | null | undefined;
2840
+ };
2841
+ };
2842
+ }>>[];
2843
+ body: import("better-auth").ZodObject<{
2844
+ client_id: import("better-auth").ZodString;
2845
+ }, import("zod/v4/core").$strip>;
2846
+ metadata: {
2847
+ openapi: {
2848
+ description: string;
2849
+ };
2850
+ };
2851
+ }, void>;
2852
+ getOAuthConsent: BetterCall.StrictEndpoint<"/oauth2/get-consent", {
2853
+ method: "GET";
2854
+ query: import("better-auth").ZodObject<{
2855
+ id: import("better-auth").ZodString;
2856
+ }, import("zod/v4/core").$strip>;
2857
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2858
+ session: {
2859
+ session: Record<string, any> & {
2860
+ id: string;
2861
+ createdAt: Date;
2862
+ updatedAt: Date;
2863
+ userId: string;
2864
+ expiresAt: Date;
2865
+ token: string;
2866
+ ipAddress?: string | null | undefined;
2867
+ userAgent?: string | null | undefined;
2868
+ };
2869
+ user: Record<string, any> & {
2870
+ id: string;
2871
+ createdAt: Date;
2872
+ updatedAt: Date;
2873
+ email: string;
2874
+ emailVerified: boolean;
2875
+ name: string;
2876
+ image?: string | null | undefined;
2877
+ };
2878
+ };
2879
+ }>>[];
2880
+ metadata: {
2881
+ openapi: {
2882
+ description: string;
2883
+ };
2884
+ };
2885
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>>;
2886
+ getOAuthConsents: BetterCall.StrictEndpoint<"/oauth2/get-consents", {
2887
+ method: "GET";
2888
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2889
+ session: {
2890
+ session: Record<string, any> & {
2891
+ id: string;
2892
+ createdAt: Date;
2893
+ updatedAt: Date;
2894
+ userId: string;
2895
+ expiresAt: Date;
2896
+ token: string;
2897
+ ipAddress?: string | null | undefined;
2898
+ userAgent?: string | null | undefined;
2899
+ };
2900
+ user: Record<string, any> & {
2901
+ id: string;
2902
+ createdAt: Date;
2903
+ updatedAt: Date;
2904
+ email: string;
2905
+ emailVerified: boolean;
2906
+ name: string;
2907
+ image?: string | null | undefined;
2908
+ };
2909
+ };
2910
+ }>>[];
2911
+ metadata: {
2912
+ openapi: {
2913
+ description: string;
2914
+ };
2915
+ };
2916
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>[]>;
2917
+ updateOAuthConsent: BetterCall.StrictEndpoint<"/oauth2/update-consent", {
2918
+ method: "POST";
2919
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2920
+ session: {
2921
+ session: Record<string, any> & {
2922
+ id: string;
2923
+ createdAt: Date;
2924
+ updatedAt: Date;
2925
+ userId: string;
2926
+ expiresAt: Date;
2927
+ token: string;
2928
+ ipAddress?: string | null | undefined;
2929
+ userAgent?: string | null | undefined;
2930
+ };
2931
+ user: Record<string, any> & {
2932
+ id: string;
2933
+ createdAt: Date;
2934
+ updatedAt: Date;
2935
+ email: string;
2936
+ emailVerified: boolean;
2937
+ name: string;
2938
+ image?: string | null | undefined;
2939
+ };
2940
+ };
2941
+ }>>[];
2942
+ body: import("better-auth").ZodObject<{
2943
+ id: import("better-auth").ZodString;
2944
+ update: import("better-auth").ZodObject<{
2945
+ scopes: import("better-auth").ZodArray<import("better-auth").ZodString>;
2946
+ }, import("zod/v4/core").$strip>;
2947
+ }, import("zod/v4/core").$strip>;
2948
+ metadata: {
2949
+ openapi: {
2950
+ description: string;
2951
+ };
2952
+ };
2953
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]> | null>;
2954
+ deleteOAuthConsent: BetterCall.StrictEndpoint<"/oauth2/delete-consent", {
2955
+ method: "POST";
2956
+ use: BetterCall.Middleware<BetterCall.MiddlewareOptions, (inputContext: BetterCall.MiddlewareInputContext<BetterCall.MiddlewareOptions>) => Promise<{
2957
+ session: {
2958
+ session: Record<string, any> & {
2959
+ id: string;
2960
+ createdAt: Date;
2961
+ updatedAt: Date;
2962
+ userId: string;
2963
+ expiresAt: Date;
2964
+ token: string;
2965
+ ipAddress?: string | null | undefined;
2966
+ userAgent?: string | null | undefined;
2967
+ };
2968
+ user: Record<string, any> & {
2969
+ id: string;
2970
+ createdAt: Date;
2971
+ updatedAt: Date;
2972
+ email: string;
2973
+ emailVerified: boolean;
2974
+ name: string;
2975
+ image?: string | null | undefined;
2976
+ };
2977
+ };
2978
+ }>>[];
2979
+ body: import("better-auth").ZodObject<{
2980
+ id: import("better-auth").ZodString;
2981
+ }, import("zod/v4/core").$strip>;
2982
+ metadata: {
2983
+ openapi: {
2984
+ description: string;
2985
+ };
2986
+ };
2987
+ }, void>;
2988
+ adminCreateOAuthResource: BetterCall.StrictEndpoint<"/admin/oauth2/resources", {
2989
+ method: "POST";
2990
+ body: import("better-auth").ZodObject<{
2991
+ identifier: import("better-auth").ZodNonOptional<import("better-auth").ZodOptional<import("better-auth").ZodString>>;
2992
+ name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2993
+ accessTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
2994
+ refreshTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
2995
+ signingAlgorithm: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodEnum<{
2996
+ RS256: "RS256";
2997
+ PS256: "PS256";
2998
+ ES256: "ES256";
2999
+ ES512: "ES512";
3000
+ EdDSA: "EdDSA";
3001
+ }>>>;
3002
+ signingKeyId: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodString>>;
3003
+ allowedScopes: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodArray<import("better-auth").ZodString>>>;
3004
+ customClaims: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3005
+ dpopBoundAccessTokensRequired: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3006
+ disabled: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3007
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3008
+ }, import("zod/v4/core").$strip>;
3009
+ metadata: {
3010
+ SERVER_ONLY: true;
3011
+ };
3012
+ }, import("@better-auth/oauth-provider").OAuthResource>;
3013
+ adminListOAuthResources: BetterCall.StrictEndpoint<"/admin/oauth2/resources", {
3014
+ method: "GET";
3015
+ metadata: {
3016
+ SERVER_ONLY: true;
3017
+ };
3018
+ }, import("@better-auth/oauth-provider").OAuthResource[]>;
3019
+ adminGetOAuthResource: BetterCall.StrictEndpoint<"/admin/oauth2/resources/:identifier", {
3020
+ method: "GET";
3021
+ metadata: {
3022
+ SERVER_ONLY: true;
3023
+ };
3024
+ }, import("@better-auth/oauth-provider").OAuthResource>;
3025
+ adminUpdateOAuthResource: BetterCall.StrictEndpoint<"/admin/oauth2/resources/:identifier", {
3026
+ method: "PATCH";
3027
+ body: import("better-auth").ZodObject<{
3028
+ identifier: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3029
+ name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3030
+ accessTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
3031
+ refreshTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
3032
+ signingAlgorithm: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodEnum<{
3033
+ RS256: "RS256";
3034
+ PS256: "PS256";
3035
+ ES256: "ES256";
3036
+ ES512: "ES512";
3037
+ EdDSA: "EdDSA";
3038
+ }>>>;
3039
+ signingKeyId: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodString>>;
3040
+ allowedScopes: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodArray<import("better-auth").ZodString>>>;
3041
+ customClaims: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3042
+ dpopBoundAccessTokensRequired: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3043
+ disabled: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3044
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3045
+ }, import("zod/v4/core").$strip>;
3046
+ metadata: {
3047
+ SERVER_ONLY: true;
3048
+ };
3049
+ }, import("@better-auth/oauth-provider").OAuthResource>;
3050
+ adminDeleteOAuthResource: BetterCall.StrictEndpoint<"/admin/oauth2/resources/:identifier", {
3051
+ method: "DELETE";
3052
+ metadata: {
3053
+ SERVER_ONLY: true;
3054
+ };
3055
+ }, {
3056
+ deleted: boolean;
3057
+ }>;
3058
+ adminLinkClientResource: BetterCall.StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
3059
+ method: "POST";
3060
+ metadata: {
3061
+ SERVER_ONLY: true;
3062
+ };
3063
+ }, {
3064
+ linked: boolean;
3065
+ }>;
3066
+ adminUnlinkClientResource: BetterCall.StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
3067
+ method: "DELETE";
3068
+ metadata: {
3069
+ SERVER_ONLY: true;
3070
+ };
3071
+ }, {
3072
+ unlinked: boolean;
3073
+ }>;
3074
+ };
3075
+ schema: {
3076
+ oauthClient: {
3077
+ modelName: string;
3078
+ fields: {
3079
+ clientId: {
3080
+ type: "string";
3081
+ unique: true;
3082
+ required: true;
3083
+ };
3084
+ clientSecret: {
3085
+ type: "string";
3086
+ required: false;
3087
+ };
3088
+ clientDiscoveryId: {
3089
+ type: "string";
3090
+ required: false;
3091
+ };
3092
+ disabled: {
3093
+ type: "boolean";
3094
+ defaultValue: false;
3095
+ required: false;
3096
+ };
3097
+ skipConsent: {
3098
+ type: "boolean";
3099
+ required: false;
3100
+ };
3101
+ enableEndSession: {
3102
+ type: "boolean";
3103
+ required: false;
3104
+ };
3105
+ subjectType: {
3106
+ type: "string";
3107
+ required: false;
3108
+ };
3109
+ scopes: {
3110
+ type: "string[]";
3111
+ required: false;
3112
+ };
3113
+ clientCredentialsScopes: {
3114
+ type: "string[]";
3115
+ required: false;
3116
+ defaultValue: never[];
3117
+ };
3118
+ userId: {
3119
+ type: "string";
3120
+ required: false;
3121
+ references: {
3122
+ model: string;
3123
+ field: string;
3124
+ };
3125
+ index: true;
3126
+ };
3127
+ createdAt: {
3128
+ type: "date";
3129
+ required: false;
3130
+ };
3131
+ updatedAt: {
3132
+ type: "date";
3133
+ required: false;
3134
+ };
3135
+ name: {
3136
+ type: "string";
3137
+ required: false;
3138
+ };
3139
+ uri: {
3140
+ type: "string";
3141
+ required: false;
3142
+ };
3143
+ icon: {
3144
+ type: "string";
3145
+ required: false;
3146
+ };
3147
+ contacts: {
3148
+ type: "string[]";
3149
+ required: false;
3150
+ };
3151
+ tos: {
3152
+ type: "string";
3153
+ required: false;
3154
+ };
3155
+ policy: {
3156
+ type: "string";
3157
+ required: false;
3158
+ };
3159
+ softwareId: {
3160
+ type: "string";
3161
+ required: false;
3162
+ };
3163
+ softwareVersion: {
3164
+ type: "string";
3165
+ required: false;
3166
+ };
3167
+ softwareStatement: {
3168
+ type: "string";
3169
+ required: false;
3170
+ };
3171
+ redirectUris: {
3172
+ type: "string[]";
3173
+ required: true;
3174
+ };
3175
+ postLogoutRedirectUris: {
3176
+ type: "string[]";
3177
+ required: false;
3178
+ };
3179
+ backchannelLogoutUri: {
3180
+ type: "string";
3181
+ required: false;
3182
+ };
3183
+ backchannelLogoutSessionRequired: {
3184
+ type: "boolean";
3185
+ required: false;
3186
+ };
3187
+ tokenEndpointAuthMethod: {
3188
+ type: "string";
3189
+ required: false;
3190
+ };
3191
+ applicationType: {
3192
+ type: "string";
3193
+ required: false;
3194
+ };
3195
+ jwks: {
3196
+ type: "string";
3197
+ required: false;
3198
+ };
3199
+ jwksUri: {
3200
+ type: "string";
3201
+ required: false;
3202
+ };
3203
+ grantTypes: {
3204
+ type: "string[]";
3205
+ required: false;
3206
+ };
3207
+ responseTypes: {
3208
+ type: "string[]";
3209
+ required: false;
3210
+ };
3211
+ requirePKCE: {
3212
+ type: "boolean";
3213
+ required: false;
3214
+ };
3215
+ dpopBoundAccessTokens: {
3216
+ type: "boolean";
3217
+ required: false;
3218
+ defaultValue: false;
3219
+ };
3220
+ referenceId: {
3221
+ type: "string";
3222
+ required: false;
3223
+ };
3224
+ metadata: {
3225
+ type: "json";
3226
+ required: false;
3227
+ };
3228
+ };
3229
+ };
3230
+ oauthResource: {
3231
+ modelName: string;
3232
+ fields: {
3233
+ identifier: {
3234
+ type: "string";
3235
+ required: true;
3236
+ unique: true;
3237
+ };
3238
+ name: {
3239
+ type: "string";
3240
+ required: true;
3241
+ };
3242
+ accessTokenTtl: {
3243
+ type: "number";
3244
+ required: false;
3245
+ };
3246
+ refreshTokenTtl: {
3247
+ type: "number";
3248
+ required: false;
3249
+ };
3250
+ signingAlgorithm: {
3251
+ type: "string";
3252
+ required: false;
3253
+ };
3254
+ signingKeyId: {
3255
+ type: "string";
3256
+ required: false;
3257
+ };
3258
+ allowedScopes: {
3259
+ type: "string[]";
3260
+ required: false;
3261
+ };
3262
+ customClaims: {
3263
+ type: "json";
3264
+ required: false;
3265
+ };
3266
+ dpopBoundAccessTokensRequired: {
3267
+ type: "boolean";
3268
+ required: false;
3269
+ defaultValue: false;
3270
+ };
3271
+ disabled: {
3272
+ type: "boolean";
3273
+ required: false;
3274
+ defaultValue: false;
3275
+ };
3276
+ createdAt: {
3277
+ type: "date";
3278
+ required: false;
3279
+ };
3280
+ updatedAt: {
3281
+ type: "date";
3282
+ required: false;
3283
+ };
3284
+ policyVersion: {
3285
+ type: "number";
3286
+ required: false;
3287
+ defaultValue: number;
3288
+ };
3289
+ metadata: {
3290
+ type: "json";
3291
+ required: false;
3292
+ };
3293
+ };
3294
+ };
3295
+ oauthClientResource: {
3296
+ modelName: string;
3297
+ fields: {
3298
+ clientId: {
3299
+ type: "string";
3300
+ required: true;
3301
+ references: {
3302
+ model: string;
3303
+ field: string;
3304
+ onDelete: "cascade";
3305
+ };
3306
+ index: true;
3307
+ };
3308
+ resourceId: {
3309
+ type: "string";
3310
+ required: true;
3311
+ references: {
3312
+ model: string;
3313
+ field: string;
3314
+ onDelete: "cascade";
3315
+ };
3316
+ index: true;
3317
+ };
3318
+ metadata: {
3319
+ type: "json";
3320
+ required: false;
3321
+ };
3322
+ createdAt: {
3323
+ type: "date";
3324
+ required: false;
3325
+ };
3326
+ };
3327
+ indexes: {
3328
+ fields: [string, string];
3329
+ unique: true;
3330
+ }[];
3331
+ };
3332
+ oauthRefreshToken: {
3333
+ fields: {
3334
+ token: {
3335
+ type: "string";
3336
+ required: true;
3337
+ unique: true;
3338
+ };
3339
+ clientId: {
3340
+ type: "string";
3341
+ required: true;
3342
+ references: {
3343
+ model: string;
3344
+ field: string;
3345
+ };
3346
+ index: true;
3347
+ };
3348
+ sessionId: {
3349
+ type: "string";
3350
+ required: false;
3351
+ references: {
3352
+ model: string;
3353
+ field: string;
3354
+ onDelete: "set null";
3355
+ };
3356
+ index: true;
3357
+ };
3358
+ userId: {
3359
+ type: "string";
3360
+ required: true;
3361
+ references: {
3362
+ model: string;
3363
+ field: string;
3364
+ };
3365
+ index: true;
3366
+ };
3367
+ referenceId: {
3368
+ type: "string";
3369
+ required: false;
3370
+ };
3371
+ authorizationCodeId: {
3372
+ type: "string";
3373
+ required: false;
3374
+ index: true;
3375
+ };
3376
+ resources: {
3377
+ type: "string[]";
3378
+ required: false;
3379
+ };
3380
+ requestedUserInfoClaims: {
3381
+ type: "string[]";
3382
+ required: false;
3383
+ };
3384
+ expiresAt: {
3385
+ type: "date";
3386
+ };
3387
+ createdAt: {
3388
+ type: "date";
3389
+ };
3390
+ revoked: {
3391
+ type: "date";
3392
+ required: false;
3393
+ };
3394
+ rotatedAt: {
3395
+ type: "date";
3396
+ required: false;
3397
+ };
3398
+ rotationReplayResponse: {
3399
+ type: "string";
3400
+ required: false;
3401
+ };
3402
+ rotationReplayExpiresAt: {
3403
+ type: "date";
3404
+ required: false;
3405
+ };
3406
+ authTime: {
3407
+ type: "date";
3408
+ required: false;
3409
+ };
3410
+ confirmation: {
3411
+ type: "json";
3412
+ required: false;
3413
+ };
3414
+ scopes: {
3415
+ type: "string[]";
3416
+ required: true;
3417
+ };
3418
+ };
3419
+ };
3420
+ oauthAccessToken: {
3421
+ modelName: string;
3422
+ fields: {
3423
+ token: {
3424
+ type: "string";
3425
+ unique: true;
3426
+ };
3427
+ clientId: {
3428
+ type: "string";
3429
+ required: true;
3430
+ references: {
3431
+ model: string;
3432
+ field: string;
3433
+ };
3434
+ index: true;
3435
+ };
3436
+ sessionId: {
3437
+ type: "string";
3438
+ required: false;
3439
+ references: {
3440
+ model: string;
3441
+ field: string;
3442
+ onDelete: "set null";
3443
+ };
3444
+ index: true;
3445
+ };
3446
+ userId: {
3447
+ type: "string";
3448
+ required: false;
3449
+ references: {
3450
+ model: string;
3451
+ field: string;
3452
+ };
3453
+ index: true;
3454
+ };
3455
+ referenceId: {
3456
+ type: "string";
3457
+ required: false;
3458
+ };
3459
+ authorizationCodeId: {
3460
+ type: "string";
3461
+ required: false;
3462
+ index: true;
3463
+ };
3464
+ resources: {
3465
+ type: "string[]";
3466
+ required: false;
3467
+ };
3468
+ requestedUserInfoClaims: {
3469
+ type: "string[]";
3470
+ required: false;
3471
+ };
3472
+ refreshId: {
3473
+ type: "string";
3474
+ required: false;
3475
+ references: {
3476
+ model: string;
3477
+ field: string;
3478
+ };
3479
+ index: true;
3480
+ };
3481
+ expiresAt: {
3482
+ type: "date";
3483
+ };
3484
+ createdAt: {
3485
+ type: "date";
3486
+ };
3487
+ revoked: {
3488
+ type: "date";
3489
+ required: false;
3490
+ };
3491
+ confirmation: {
3492
+ type: "json";
3493
+ required: false;
3494
+ };
3495
+ scopes: {
3496
+ type: "string[]";
3497
+ required: true;
3498
+ };
3499
+ };
3500
+ };
3501
+ oauthConsent: {
3502
+ modelName: string;
3503
+ fields: {
3504
+ clientId: {
3505
+ type: "string";
3506
+ required: true;
3507
+ references: {
3508
+ model: string;
3509
+ field: string;
3510
+ };
3511
+ index: true;
3512
+ };
3513
+ userId: {
3514
+ type: "string";
3515
+ required: false;
3516
+ references: {
3517
+ model: string;
3518
+ field: string;
3519
+ };
3520
+ index: true;
3521
+ };
3522
+ referenceId: {
3523
+ type: "string";
3524
+ required: false;
3525
+ };
3526
+ resources: {
3527
+ type: "string[]";
3528
+ required: false;
3529
+ };
3530
+ requestedUserInfoClaims: {
3531
+ type: "string[]";
3532
+ required: false;
3533
+ };
3534
+ scopes: {
3535
+ type: "string[]";
3536
+ required: true;
3537
+ };
3538
+ createdAt: {
3539
+ type: "date";
3540
+ };
3541
+ updatedAt: {
3542
+ type: "date";
3543
+ };
3544
+ };
3545
+ };
3546
+ oauthClientAssertion: {
3547
+ modelName: string;
3548
+ fields: {
3549
+ expiresAt: {
3550
+ type: "date";
3551
+ required: true;
3552
+ };
3553
+ };
3554
+ };
3555
+ };
3556
+ rateLimit: ({
3557
+ pathMatcher: (path: string) => path is "/oauth2/token";
3558
+ window: number;
3559
+ max: number;
3560
+ } | {
3561
+ pathMatcher: (path: string) => path is "/oauth2/authorize";
3562
+ window: number;
3563
+ max: number;
3564
+ } | {
3565
+ pathMatcher: (path: string) => path is "/oauth2/introspect";
3566
+ window: number;
3567
+ max: number;
3568
+ } | {
3569
+ pathMatcher: (path: string) => path is "/oauth2/revoke";
3570
+ window: number;
3571
+ max: number;
3572
+ } | {
3573
+ pathMatcher: (path: string) => path is "/oauth2/register";
3574
+ window: number;
3575
+ max: number;
3576
+ } | {
3577
+ pathMatcher: (path: string) => path is "/oauth2/userinfo";
3578
+ window: number;
3579
+ max: number;
3580
+ })[];
3581
+ })[], {
3582
+ init(ctx: import("better-auth").AuthContext): void;
3583
+ id: "device-authorization";
3584
+ version: string;
3585
+ schema: {
3586
+ deviceCode: {
3587
+ fields: {
3588
+ deviceCode: {
3589
+ type: "string";
3590
+ required: true;
3591
+ };
3592
+ userCode: {
3593
+ type: "string";
3594
+ required: true;
3595
+ };
3596
+ userId: {
3597
+ type: "string";
3598
+ required: false;
3599
+ };
3600
+ expiresAt: {
3601
+ type: "date";
3602
+ required: true;
3603
+ };
3604
+ status: {
3605
+ type: "string";
3606
+ required: true;
3607
+ };
3608
+ lastPolledAt: {
3609
+ type: "date";
3610
+ required: false;
3611
+ };
3612
+ pollingInterval: {
3613
+ type: "number";
3614
+ required: false;
3615
+ };
3616
+ clientId: {
3617
+ type: "string";
3618
+ required: false;
3619
+ };
3620
+ scope: {
3621
+ type: "string";
3622
+ required: false;
3623
+ };
3624
+ };
3625
+ indexes: {
3626
+ fields: [string];
3627
+ unique: true;
3628
+ }[];
3629
+ };
3630
+ };
3631
+ endpoints: {
3632
+ deviceCode: BetterCall.StrictEndpoint<"/device/code", {
3633
+ method: "POST";
3634
+ cloneRequest: true;
3635
+ body: import("better-auth").ZodObject<{
3636
+ client_id: import("better-auth").ZodString;
3637
+ user_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3638
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3639
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3640
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3641
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3642
+ resource: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodArray<import("better-auth").ZodString>, import("better-auth").ZodLiteral<"">]>>;
3643
+ }, import("zod/v4/core").$strip> | import("better-auth").ZodObject<{
3644
+ user_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3645
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3646
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3647
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3648
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3649
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3650
+ resource: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodArray<import("better-auth").ZodString>, import("better-auth").ZodLiteral<"">]>>;
3651
+ }, import("zod/v4/core").$strip>;
3652
+ error: import("better-auth").ZodObject<{
3653
+ error: import("better-auth").ZodEnum<{
3654
+ invalid_request: "invalid_request";
3655
+ invalid_client: "invalid_client";
3656
+ unauthorized_client: "unauthorized_client";
3657
+ invalid_scope: "invalid_scope";
3658
+ server_error: "server_error";
3659
+ invalid_target: "invalid_target";
3660
+ }>;
3661
+ error_description: import("better-auth").ZodString;
3662
+ }, import("zod/v4/core").$strip>;
3663
+ onValidationError: ({ issues, message }: {
3664
+ message: string;
3665
+ issues: readonly BetterCall.StandardSchemaV1.Issue[];
3666
+ }) => never;
3667
+ metadata: {
3668
+ noStore: boolean;
3669
+ allowedMediaTypes: string[];
3670
+ openapi: {
3671
+ description: string;
3672
+ responses: {
3673
+ 200: {
3674
+ description: string;
3675
+ content: {
3676
+ "application/json": {
3677
+ schema: {
3678
+ type: "object";
3679
+ properties: {
3680
+ device_code: {
3681
+ type: string;
3682
+ description: string;
3683
+ };
3684
+ user_code: {
3685
+ type: string;
3686
+ description: string;
3687
+ };
3688
+ verification_uri: {
3689
+ type: string;
3690
+ format: string;
3691
+ description: string;
3692
+ };
3693
+ verification_uri_complete: {
3694
+ type: string;
3695
+ format: string;
3696
+ description: string;
3697
+ };
3698
+ expires_in: {
3699
+ type: string;
3700
+ description: string;
3701
+ };
3702
+ interval: {
3703
+ type: string;
3704
+ description: string;
3705
+ };
3706
+ };
3707
+ };
3708
+ };
3709
+ };
3710
+ };
3711
+ 400: {
3712
+ description: string;
3713
+ content: {
3714
+ "application/json": {
3715
+ schema: {
3716
+ type: "object";
3717
+ properties: {
3718
+ error: {
3719
+ type: string;
3720
+ enum: ["invalid_request", "invalid_client", "unauthorized_client", "invalid_scope", "invalid_target"];
3721
+ };
3722
+ error_description: {
3723
+ type: string;
3724
+ };
3725
+ };
3726
+ };
3727
+ };
3728
+ };
3729
+ };
3730
+ 500: {
3731
+ description: string;
3732
+ content: {
3733
+ "application/json": {
3734
+ schema: {
3735
+ type: "object";
3736
+ properties: {
3737
+ error: {
3738
+ type: string;
3739
+ enum: string[];
3740
+ };
3741
+ error_description: {
3742
+ type: string;
3743
+ };
3744
+ };
3745
+ };
3746
+ };
3747
+ };
3748
+ };
3749
+ };
3750
+ };
3751
+ };
3752
+ }, {
3753
+ device_code: string;
3754
+ user_code: string;
3755
+ verification_uri: string;
3756
+ verification_uri_complete: string;
3757
+ expires_in: number;
3758
+ interval: number;
3759
+ }>;
3760
+ deviceToken: BetterCall.StrictEndpoint<"/device/token", {
3761
+ method: "POST";
3762
+ body: import("better-auth").ZodObject<{
3763
+ grant_type: import("better-auth").ZodLiteral<"urn:ietf:params:oauth:grant-type:device_code">;
3764
+ device_code: import("better-auth").ZodString;
3765
+ client_id: import("better-auth").ZodString;
3766
+ }, import("zod/v4/core").$strip>;
3767
+ error: import("better-auth").ZodObject<{
3768
+ error: import("better-auth").ZodEnum<{
3769
+ invalid_request: "invalid_request";
3770
+ authorization_pending: "authorization_pending";
3771
+ slow_down: "slow_down";
3772
+ expired_token: "expired_token";
3773
+ access_denied: "access_denied";
3774
+ invalid_grant: "invalid_grant";
3775
+ }>;
3776
+ error_description: import("better-auth").ZodString;
3777
+ }, import("zod/v4/core").$strip>;
3778
+ metadata: {
3779
+ noStore: boolean;
3780
+ openapi: {
3781
+ description: string;
3782
+ responses: {
3783
+ 200: {
3784
+ description: string;
3785
+ content: {
3786
+ "application/json": {
3787
+ schema: {
3788
+ type: "object";
3789
+ properties: {
3790
+ session: {
3791
+ $ref: string;
3792
+ };
3793
+ user: {
3794
+ $ref: string;
3795
+ };
3796
+ };
3797
+ };
3798
+ };
3799
+ };
3800
+ };
3801
+ 400: {
3802
+ description: string;
3803
+ content: {
3804
+ "application/json": {
3805
+ schema: {
3806
+ type: "object";
3807
+ properties: {
3808
+ error: {
3809
+ type: string;
3810
+ enum: string[];
3811
+ };
3812
+ error_description: {
3813
+ type: string;
3814
+ };
3815
+ };
3816
+ };
3817
+ };
3818
+ };
3819
+ };
3820
+ };
3821
+ };
3822
+ };
3823
+ }, {
3824
+ access_token: string;
3825
+ token_type: string;
3826
+ expires_in: number;
3827
+ scope: string;
3828
+ }>;
3829
+ deviceVerify: BetterCall.StrictEndpoint<"/device", {
3830
+ method: "GET";
3831
+ query: import("better-auth").ZodObject<{
3832
+ user_code: import("better-auth").ZodString;
3833
+ }, import("zod/v4/core").$strip>;
3834
+ error: import("better-auth").ZodObject<{
3835
+ error: import("better-auth").ZodEnum<{
3836
+ invalid_request: "invalid_request";
3837
+ }>;
3838
+ error_description: import("better-auth").ZodString;
3839
+ }, import("zod/v4/core").$strip>;
3840
+ metadata: {
3841
+ openapi: {
3842
+ description: string;
3843
+ responses: {
3844
+ 200: {
3845
+ description: string;
3846
+ content: {
3847
+ "application/json": {
3848
+ schema: {
3849
+ type: "object";
3850
+ properties: {
3851
+ user_code: {
3852
+ type: string;
3853
+ description: string;
3854
+ };
3855
+ status: {
3856
+ type: string;
3857
+ enum: string[];
3858
+ description: string;
3859
+ };
3860
+ client_id: {
3861
+ type: string;
3862
+ description: string;
3863
+ };
3864
+ scope: {
3865
+ type: string;
3866
+ description: string;
3867
+ };
3868
+ };
3869
+ };
3870
+ };
3871
+ };
3872
+ };
3873
+ };
3874
+ };
3875
+ };
3876
+ }, {
3877
+ user_code: string;
3878
+ status: string;
3879
+ client_id?: string | undefined;
3880
+ scope?: string | undefined;
3881
+ } & Partial<{
3882
+ resource: string | string[] | undefined;
3883
+ }>>;
3884
+ deviceApprove: BetterCall.StrictEndpoint<"/device/approve", {
3885
+ method: "POST";
3886
+ body: import("better-auth").ZodObject<{
3887
+ userCode: import("better-auth").ZodString;
3888
+ }, import("zod/v4/core").$strip>;
3889
+ error: import("better-auth").ZodObject<{
3890
+ error: import("better-auth").ZodEnum<{
3891
+ invalid_request: "invalid_request";
3892
+ expired_token: "expired_token";
3893
+ access_denied: "access_denied";
3894
+ device_code_already_processed: "device_code_already_processed";
3895
+ unauthorized: "unauthorized";
3896
+ }>;
3897
+ error_description: import("better-auth").ZodString;
3898
+ }, import("zod/v4/core").$strip>;
3899
+ requireHeaders: true;
3900
+ metadata: {
3901
+ openapi: {
3902
+ description: string;
3903
+ responses: {
3904
+ 200: {
3905
+ description: string;
3906
+ content: {
3907
+ "application/json": {
3908
+ schema: {
3909
+ type: "object";
3910
+ properties: {
3911
+ success: {
3912
+ type: string;
3913
+ };
3914
+ };
3915
+ };
3916
+ };
3917
+ };
3918
+ };
3919
+ };
3920
+ };
3921
+ };
3922
+ }, {
3923
+ success: boolean;
3924
+ }>;
3925
+ deviceDeny: BetterCall.StrictEndpoint<"/device/deny", {
3926
+ method: "POST";
3927
+ body: import("better-auth").ZodObject<{
3928
+ userCode: import("better-auth").ZodString;
3929
+ }, import("zod/v4/core").$strip>;
3930
+ error: import("better-auth").ZodObject<{
3931
+ error: import("better-auth").ZodEnum<{
3932
+ invalid_request: "invalid_request";
3933
+ expired_token: "expired_token";
3934
+ access_denied: "access_denied";
3935
+ unauthorized: "unauthorized";
3936
+ }>;
3937
+ error_description: import("better-auth").ZodString;
3938
+ }, import("zod/v4/core").$strip>;
3939
+ requireHeaders: true;
3940
+ metadata: {
3941
+ openapi: {
3942
+ description: string;
3943
+ responses: {
3944
+ 200: {
3945
+ description: string;
3946
+ content: {
3947
+ "application/json": {
3948
+ schema: {
3949
+ type: "object";
3950
+ properties: {
3951
+ success: {
3952
+ type: string;
3953
+ };
3954
+ };
3955
+ };
3956
+ };
3957
+ };
3958
+ };
3959
+ };
3960
+ };
3961
+ };
3962
+ }, {
3963
+ success: boolean;
3964
+ }>;
3965
+ };
3966
+ rateLimit: {
3967
+ pathMatcher(path: string): path is "/device";
3968
+ window: number;
3969
+ max: number;
3970
+ }[];
3971
+ $ERROR_CODES: {
3972
+ USER_NOT_FOUND: import("better-auth").RawError<"USER_NOT_FOUND">;
3973
+ FAILED_TO_CREATE_SESSION: import("better-auth").RawError<"FAILED_TO_CREATE_SESSION">;
3974
+ INVALID_DEVICE_CODE: import("better-auth").RawError<"INVALID_DEVICE_CODE">;
3975
+ EXPIRED_DEVICE_CODE: import("better-auth").RawError<"EXPIRED_DEVICE_CODE">;
3976
+ EXPIRED_USER_CODE: import("better-auth").RawError<"EXPIRED_USER_CODE">;
3977
+ AUTHORIZATION_PENDING: import("better-auth").RawError<"AUTHORIZATION_PENDING">;
3978
+ ACCESS_DENIED: import("better-auth").RawError<"ACCESS_DENIED">;
3979
+ INVALID_USER_CODE: import("better-auth").RawError<"INVALID_USER_CODE">;
3980
+ DEVICE_CODE_ALREADY_PROCESSED: import("better-auth").RawError<"DEVICE_CODE_ALREADY_PROCESSED">;
3981
+ DEVICE_CODE_NOT_CLAIMED: import("better-auth").RawError<"DEVICE_CODE_NOT_CLAIMED">;
3982
+ POLLING_TOO_FREQUENTLY: import("better-auth").RawError<"POLLING_TOO_FREQUENTLY">;
3983
+ INVALID_DEVICE_CODE_STATUS: import("better-auth").RawError<"INVALID_DEVICE_CODE_STATUS">;
3984
+ AUTHENTICATION_REQUIRED: import("better-auth").RawError<"AUTHENTICATION_REQUIRED">;
3985
+ };
3986
+ options: {
3987
+ grant: import("better-auth/plugins").DeviceAuthorizationGrant<Readonly<{
3988
+ [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
3989
+ }>, Record<string, unknown>> | undefined;
3990
+ expiresIn: import("better-auth/plugins").TimeString;
3991
+ interval: import("better-auth/plugins").TimeString;
3992
+ deviceCodeLength: number;
3993
+ userCodeLength: number;
3994
+ generateDeviceCode?: (() => string | Promise<string>) | undefined;
3995
+ generateUserCode?: (() => string | Promise<string>) | undefined;
3996
+ validateClient?: ((clientId: string) => boolean | Promise<boolean>) | undefined;
3997
+ onDeviceAuthRequest?: ((clientId: string, scope: string | undefined) => void | Promise<void>) | undefined;
3998
+ verificationUri?: string | undefined;
3999
+ schema?: {
4000
+ deviceCode?: {
4001
+ modelName?: string | undefined;
4002
+ fields?: {
4003
+ deviceCode?: string | undefined;
4004
+ userCode?: string | undefined;
4005
+ userId?: string | undefined;
4006
+ expiresAt?: string | undefined;
4007
+ status?: string | undefined;
4008
+ lastPolledAt?: string | undefined;
4009
+ pollingInterval?: string | undefined;
4010
+ clientId?: string | undefined;
4011
+ scope?: string | undefined;
4012
+ } | undefined;
4013
+ } | undefined;
4014
+ } | undefined;
4015
+ };
4016
+ }];
4017
+ rateLimit: {
4018
+ enabled: false;
4019
+ };
4020
+ secret: string;
4021
+ socialProviders: {
4022
+ google: {
4023
+ clientId: string;
4024
+ clientSecret: string;
4025
+ prompt: "select_account";
4026
+ };
4027
+ } | {
4028
+ google?: never;
4029
+ };
4030
+ };
4031
+ export declare namespace options {
4032
+ type Options = {
4033
+ /** Decides whether an authorization needs the account step, as `Apps.plugins` describes. */
4034
+ accountStep?: Apps.plugins.Options['accountStep'];
4035
+ /** Tempo ID's origin, such as `https://id.tempo.xyz`. */
4036
+ baseURL: string;
4037
+ /** The Drizzle database that holds Tempo ID's tables. */
4038
+ db: Parameters<typeof drizzleAdapter>[0];
4039
+ /** Google's OAuth client. Absent, Tempo ID offers no Google sign-in. */
4040
+ google?: {
4041
+ clientId: string;
4042
+ clientSecret: string;
4043
+ } | undefined;
4044
+ /** Takes the key authorization that a code's redemption returns, as `Apps.plugins` describes. */
4045
+ pendingKey?: Apps.plugins.Options['pendingKey'];
4046
+ /** The secret that signs cookies and encrypts the signing keys. */
4047
+ secret: string;
4048
+ /** Emails a sign-in code to an address. */
4049
+ sendCode: (options: {
4050
+ code: string;
4051
+ email: string;
4052
+ }) => Promise<void>;
4053
+ /** Keeps work alive after the response, such as `c.executionCtx.waitUntil`. */
4054
+ waitUntil: (promise: Promise<unknown>) => void;
4055
+ };
4056
+ }
4057
+ export {};
4058
+ //# sourceMappingURL=Auth.d.ts.map