@tx5dr/contracts 1.2.0

package/dist/schema/auth.schema.d.ts

@@ -0,0 +1,738 @@
+import { z } from 'zod';
+export declare enum UserRole {
+    VIEWER = "viewer",
+    OPERATOR = "operator",
+    ADMIN = "admin"
+}
+/** 角色权限等级（用于比较） */
+export declare const USER_ROLE_LEVEL: Record<UserRole, number>;
+export declare const AuthTokenSchema: z.ZodObject<{
+    id: z.ZodString;
+    tokenHash: z.ZodString;
+    tokenPlain: z.ZodOptional<z.ZodString>;
+    label: z.ZodString;
+    role: z.ZodNativeEnum<typeof UserRole>;
+    operatorIds: z.ZodArray<z.ZodString, "many">;
+    createdBy: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodNumber;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    lastUsedAt: z.ZodOptional<z.ZodNumber>;
+    revoked: z.ZodBoolean;
+    system: z.ZodOptional<z.ZodBoolean>;
+    maxOperators: z.ZodOptional<z.ZodNumber>;
+    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }>, "many">>;
+    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
+    loginCredential: z.ZodOptional<z.ZodObject<{
+        username: z.ZodString;
+        usernameNormalized: z.ZodString;
+        passwordHash: z.ZodString;
+        updatedAt: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        updatedAt: number;
+        username: string;
+        usernameNormalized: string;
+        passwordHash: string;
+    }, {
+        updatedAt: number;
+        username: string;
+        usernameNormalized: string;
+        passwordHash: string;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    label: string;
+    createdAt: number;
+    role: UserRole;
+    operatorIds: string[];
+    tokenHash: string;
+    createdBy: string | null;
+    revoked: boolean;
+    system?: boolean | undefined;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    tokenPlain?: string | undefined;
+    expiresAt?: number | undefined;
+    lastUsedAt?: number | undefined;
+    maxOperators?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        updatedAt: number;
+        username: string;
+        usernameNormalized: string;
+        passwordHash: string;
+    } | undefined;
+}, {
+    id: string;
+    label: string;
+    createdAt: number;
+    role: UserRole;
+    operatorIds: string[];
+    tokenHash: string;
+    createdBy: string | null;
+    revoked: boolean;
+    system?: boolean | undefined;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    tokenPlain?: string | undefined;
+    expiresAt?: number | undefined;
+    lastUsedAt?: number | undefined;
+    maxOperators?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        updatedAt: number;
+        username: string;
+        usernameNormalized: string;
+        passwordHash: string;
+    } | undefined;
+}>;
+export type AuthToken = z.infer<typeof AuthTokenSchema>;
+export declare const JWTPayloadSchema: z.ZodObject<{
+    tokenId: z.ZodString;
+    role: z.ZodNativeEnum<typeof UserRole>;
+    operatorIds: z.ZodArray<z.ZodString, "many">;
+    iat: z.ZodNumber;
+    exp: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    role: UserRole;
+    operatorIds: string[];
+    tokenId: string;
+    iat: number;
+    exp: number;
+}, {
+    role: UserRole;
+    operatorIds: string[];
+    tokenId: string;
+    iat: number;
+    exp: number;
+}>;
+export type JWTPayload = z.infer<typeof JWTPayloadSchema>;
+export declare const LoginRequestSchema: z.ZodObject<{
+    token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    token: string;
+}, {
+    token: string;
+}>;
+export type LoginRequest = z.infer<typeof LoginRequestSchema>;
+export declare const PasswordLoginRequestSchema: z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    username: string;
+}, {
+    password: string;
+    username: string;
+}>;
+export type PasswordLoginRequest = z.infer<typeof PasswordLoginRequestSchema>;
+export declare const LoginResponseSchema: z.ZodObject<{
+    jwt: z.ZodString;
+    role: z.ZodNativeEnum<typeof UserRole>;
+    label: z.ZodString;
+    operatorIds: z.ZodArray<z.ZodString, "many">;
+    maxOperators: z.ZodOptional<z.ZodNumber>;
+    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    jwt: string;
+    role: UserRole;
+    operatorIds: string[];
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    maxOperators?: number | undefined;
+}, {
+    label: string;
+    jwt: string;
+    role: UserRole;
+    operatorIds: string[];
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    maxOperators?: number | undefined;
+}>;
+export type LoginResponse = z.infer<typeof LoginResponseSchema>;
+export declare const LoginCredentialSummarySchema: z.ZodObject<{
+    username: z.ZodString;
+    allowSelfService: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    username: string;
+    allowSelfService: boolean;
+}, {
+    username: string;
+    allowSelfService: boolean;
+}>;
+export type LoginCredentialSummary = z.infer<typeof LoginCredentialSummarySchema>;
+export declare const AuthMeLoginCredentialSchema: z.ZodObject<{
+    configured: z.ZodBoolean;
+    username: z.ZodNullable<z.ZodString>;
+    allowSelfService: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    username: string | null;
+    allowSelfService: boolean;
+    configured: boolean;
+}, {
+    username: string | null;
+    allowSelfService: boolean;
+    configured: boolean;
+}>;
+export type AuthMeLoginCredential = z.infer<typeof AuthMeLoginCredentialSchema>;
+export declare const CreateTokenLoginCredentialRequestSchema: z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    username: string;
+}, {
+    password: string;
+    username: string;
+}>;
+export type CreateTokenLoginCredentialRequest = z.infer<typeof CreateTokenLoginCredentialRequestSchema>;
+export declare const UpdateTokenLoginCredentialRequestSchema: z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    username: string;
+    password?: string | undefined;
+}, {
+    username: string;
+    password?: string | undefined;
+}>;
+export type UpdateTokenLoginCredentialRequest = z.infer<typeof UpdateTokenLoginCredentialRequestSchema>;
+export declare const CreateTokenRequestSchema: z.ZodObject<{
+    label: z.ZodString;
+    role: z.ZodNativeEnum<typeof UserRole>;
+    operatorIds: z.ZodArray<z.ZodString, "many">;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    maxOperators: z.ZodNumber;
+    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }>, "many">>;
+    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
+    loginCredential: z.ZodOptional<z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        password: string;
+        username: string;
+    }, {
+        password: string;
+        username: string;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    role: UserRole;
+    operatorIds: string[];
+    maxOperators: number;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    expiresAt?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        password: string;
+        username: string;
+    } | undefined;
+}, {
+    label: string;
+    role: UserRole;
+    operatorIds: string[];
+    maxOperators: number;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    expiresAt?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        password: string;
+        username: string;
+    } | undefined;
+}>;
+export type CreateTokenRequest = z.infer<typeof CreateTokenRequestSchema>;
+export declare const CreateTokenResponseSchema: z.ZodObject<{
+    id: z.ZodString;
+    token: z.ZodString;
+    label: z.ZodString;
+    role: z.ZodNativeEnum<typeof UserRole>;
+    operatorIds: z.ZodArray<z.ZodString, "many">;
+    maxOperators: z.ZodOptional<z.ZodNumber>;
+    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }>, "many">>;
+    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
+    loginCredential: z.ZodOptional<z.ZodObject<{
+        username: z.ZodString;
+        allowSelfService: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        username: string;
+        allowSelfService: boolean;
+    }, {
+        username: string;
+        allowSelfService: boolean;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    label: string;
+    token: string;
+    role: UserRole;
+    operatorIds: string[];
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    maxOperators?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        username: string;
+        allowSelfService: boolean;
+    } | undefined;
+}, {
+    id: string;
+    label: string;
+    token: string;
+    role: UserRole;
+    operatorIds: string[];
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    maxOperators?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        username: string;
+        allowSelfService: boolean;
+    } | undefined;
+}>;
+export type CreateTokenResponse = z.infer<typeof CreateTokenResponseSchema>;
+export declare const TokenInfoSchema: z.ZodObject<{
+    id: z.ZodString;
+    token: z.ZodOptional<z.ZodString>;
+    label: z.ZodString;
+    role: z.ZodNativeEnum<typeof UserRole>;
+    operatorIds: z.ZodArray<z.ZodString, "many">;
+    createdBy: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodNumber;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    lastUsedAt: z.ZodOptional<z.ZodNumber>;
+    revoked: z.ZodBoolean;
+    system: z.ZodOptional<z.ZodBoolean>;
+    maxOperators: z.ZodOptional<z.ZodNumber>;
+    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }>, "many">>;
+    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
+    loginCredential: z.ZodOptional<z.ZodObject<{
+        username: z.ZodString;
+        allowSelfService: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        username: string;
+        allowSelfService: boolean;
+    }, {
+        username: string;
+        allowSelfService: boolean;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    label: string;
+    createdAt: number;
+    role: UserRole;
+    operatorIds: string[];
+    createdBy: string | null;
+    revoked: boolean;
+    system?: boolean | undefined;
+    token?: string | undefined;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    expiresAt?: number | undefined;
+    lastUsedAt?: number | undefined;
+    maxOperators?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        username: string;
+        allowSelfService: boolean;
+    } | undefined;
+}, {
+    id: string;
+    label: string;
+    createdAt: number;
+    role: UserRole;
+    operatorIds: string[];
+    createdBy: string | null;
+    revoked: boolean;
+    system?: boolean | undefined;
+    token?: string | undefined;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    expiresAt?: number | undefined;
+    lastUsedAt?: number | undefined;
+    maxOperators?: number | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        username: string;
+        allowSelfService: boolean;
+    } | undefined;
+}>;
+export type TokenInfo = z.infer<typeof TokenInfoSchema>;
+export declare const UpdateTokenRequestSchema: z.ZodObject<{
+    label: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodNativeEnum<typeof UserRole>>;
+    operatorIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    maxOperators: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    permissionGrants: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }>, "many">>>;
+    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
+    loginCredential: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        username: string;
+        password?: string | undefined;
+    }, {
+        username: string;
+        password?: string | undefined;
+    }>>>;
+}, "strip", z.ZodTypeAny, {
+    label?: string | undefined;
+    role?: UserRole | undefined;
+    operatorIds?: string[] | undefined;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | null | undefined;
+    expiresAt?: number | null | undefined;
+    maxOperators?: number | null | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        username: string;
+        password?: string | undefined;
+    } | null | undefined;
+}, {
+    label?: string | undefined;
+    role?: UserRole | undefined;
+    operatorIds?: string[] | undefined;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | null | undefined;
+    expiresAt?: number | null | undefined;
+    maxOperators?: number | null | undefined;
+    allowSelfLoginCredential?: boolean | undefined;
+    loginCredential?: {
+        username: string;
+        password?: string | undefined;
+    } | null | undefined;
+}>;
+export type UpdateTokenRequest = z.infer<typeof UpdateTokenRequestSchema>;
+export declare const AuthStatusSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    allowPublicViewing: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    allowPublicViewing: boolean;
+}, {
+    enabled: boolean;
+    allowPublicViewing: boolean;
+}>;
+export type AuthStatus = z.infer<typeof AuthStatusSchema>;
+export declare const AuthMeResponseSchema: z.ZodObject<{
+    role: z.ZodNativeEnum<typeof UserRole>;
+    label: z.ZodString;
+    operatorIds: z.ZodArray<z.ZodString, "many">;
+    tokenId: z.ZodString;
+    maxOperators: z.ZodOptional<z.ZodNumber>;
+    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }, {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }>, "many">>;
+    loginCredential: z.ZodObject<{
+        configured: z.ZodBoolean;
+        username: z.ZodNullable<z.ZodString>;
+        allowSelfService: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        username: string | null;
+        allowSelfService: boolean;
+        configured: boolean;
+    }, {
+        username: string | null;
+        allowSelfService: boolean;
+        configured: boolean;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    role: UserRole;
+    operatorIds: string[];
+    loginCredential: {
+        username: string | null;
+        allowSelfService: boolean;
+        configured: boolean;
+    };
+    tokenId: string;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    maxOperators?: number | undefined;
+}, {
+    label: string;
+    role: UserRole;
+    operatorIds: string[];
+    loginCredential: {
+        username: string | null;
+        allowSelfService: boolean;
+        configured: boolean;
+    };
+    tokenId: string;
+    permissionGrants?: {
+        permission: import("./ability.js").Permission;
+        conditions?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    maxOperators?: number | undefined;
+}>;
+export type AuthMeResponse = z.infer<typeof AuthMeResponseSchema>;
+export declare const UpdateSelfLoginCredentialRequestSchema: z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    username: string;
+    password?: string | undefined;
+}, {
+    username: string;
+    password?: string | undefined;
+}>;
+export type UpdateSelfLoginCredentialRequest = z.infer<typeof UpdateSelfLoginCredentialRequestSchema>;
+export declare const UpdateAuthConfigRequestSchema: z.ZodObject<{
+    allowPublicViewing: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    allowPublicViewing?: boolean | undefined;
+}, {
+    allowPublicViewing?: boolean | undefined;
+}>;
+export type UpdateAuthConfigRequest = z.infer<typeof UpdateAuthConfigRequestSchema>;
+export declare const AuthConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    allowPublicViewing: z.ZodDefault<z.ZodBoolean>;
+    jwtSecret: z.ZodOptional<z.ZodString>;
+    jwtExpiresInSeconds: z.ZodDefault<z.ZodNumber>;
+    tokens: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        tokenHash: z.ZodString;
+        tokenPlain: z.ZodOptional<z.ZodString>;
+        label: z.ZodString;
+        role: z.ZodNativeEnum<typeof UserRole>;
+        operatorIds: z.ZodArray<z.ZodString, "many">;
+        createdBy: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        lastUsedAt: z.ZodOptional<z.ZodNumber>;
+        revoked: z.ZodBoolean;
+        system: z.ZodOptional<z.ZodBoolean>;
+        maxOperators: z.ZodOptional<z.ZodNumber>;
+        permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
+            conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, "strip", z.ZodTypeAny, {
+            permission: import("./ability.js").Permission;
+            conditions?: Record<string, unknown> | undefined;
+        }, {
+            permission: import("./ability.js").Permission;
+            conditions?: Record<string, unknown> | undefined;
+        }>, "many">>;
+        allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
+        loginCredential: z.ZodOptional<z.ZodObject<{
+            username: z.ZodString;
+            usernameNormalized: z.ZodString;
+            passwordHash: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            updatedAt: number;
+            username: string;
+            usernameNormalized: string;
+            passwordHash: string;
+        }, {
+            updatedAt: number;
+            username: string;
+            usernameNormalized: string;
+            passwordHash: string;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        label: string;
+        createdAt: number;
+        role: UserRole;
+        operatorIds: string[];
+        tokenHash: string;
+        createdBy: string | null;
+        revoked: boolean;
+        system?: boolean | undefined;
+        permissionGrants?: {
+            permission: import("./ability.js").Permission;
+            conditions?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        tokenPlain?: string | undefined;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        maxOperators?: number | undefined;
+        allowSelfLoginCredential?: boolean | undefined;
+        loginCredential?: {
+            updatedAt: number;
+            username: string;
+            usernameNormalized: string;
+            passwordHash: string;
+        } | undefined;
+    }, {
+        id: string;
+        label: string;
+        createdAt: number;
+        role: UserRole;
+        operatorIds: string[];
+        tokenHash: string;
+        createdBy: string | null;
+        revoked: boolean;
+        system?: boolean | undefined;
+        permissionGrants?: {
+            permission: import("./ability.js").Permission;
+            conditions?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        tokenPlain?: string | undefined;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        maxOperators?: number | undefined;
+        allowSelfLoginCredential?: boolean | undefined;
+        loginCredential?: {
+            updatedAt: number;
+            username: string;
+            usernameNormalized: string;
+            passwordHash: string;
+        } | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    allowPublicViewing: boolean;
+    jwtExpiresInSeconds: number;
+    tokens: {
+        id: string;
+        label: string;
+        createdAt: number;
+        role: UserRole;
+        operatorIds: string[];
+        tokenHash: string;
+        createdBy: string | null;
+        revoked: boolean;
+        system?: boolean | undefined;
+        permissionGrants?: {
+            permission: import("./ability.js").Permission;
+            conditions?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        tokenPlain?: string | undefined;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        maxOperators?: number | undefined;
+        allowSelfLoginCredential?: boolean | undefined;
+        loginCredential?: {
+            updatedAt: number;
+            username: string;
+            usernameNormalized: string;
+            passwordHash: string;
+        } | undefined;
+    }[];
+    jwtSecret?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    allowPublicViewing?: boolean | undefined;
+    jwtSecret?: string | undefined;
+    jwtExpiresInSeconds?: number | undefined;
+    tokens?: {
+        id: string;
+        label: string;
+        createdAt: number;
+        role: UserRole;
+        operatorIds: string[];
+        tokenHash: string;
+        createdBy: string | null;
+        revoked: boolean;
+        system?: boolean | undefined;
+        permissionGrants?: {
+            permission: import("./ability.js").Permission;
+            conditions?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        tokenPlain?: string | undefined;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        maxOperators?: number | undefined;
+        allowSelfLoginCredential?: boolean | undefined;
+        loginCredential?: {
+            updatedAt: number;
+            username: string;
+            usernameNormalized: string;
+            passwordHash: string;
+        } | undefined;
+    }[] | undefined;
+}>;
+export type AuthConfig = z.infer<typeof AuthConfigSchema>;
+//# sourceMappingURL=auth.schema.d.ts.map