alepha 0.18.2 → 0.18.3

package/dist/api/users/index.d.ts

@@ -17,6 +17,7 @@ import * as alepha_api_jobs0 from "alepha/api/jobs";
 import * as alepha_api_parameters0 from "alepha/api/parameters";
 import { VerificationController } from "alepha/api/verifications";
 import "drizzle-orm/d1";
+import * as typebox from "typebox";
 import * as drizzle_orm0 from "drizzle-orm";
 import { BuildExtraConfigColumns, SQL, SQLWrapper } from "drizzle-orm";
 import * as drizzle_orm_pg_core0 from "drizzle-orm/pg-core";
@@ -26,29 +27,32 @@ import { LibSQLDatabase } from "drizzle-orm/libsql";
 import { MySql2Database } from "drizzle-orm/mysql2";
 import { SingleStoreDriverDatabase } from "drizzle-orm/singlestore";
 import { ConnectionOptions } from "tls";
-import * as typebox from "typebox";
 import "drizzle-orm/sqlite-core";
 import { FileController } from "alepha/api/files";
 
 //#region \0rolldown/runtime.js
 //#endregion
 //#region ../../src/api/users/atoms/realmAuthSettingsAtom.d.ts
+/**
+ * Tri-state field requirement for realm auth settings.
+ *
+ * - `"none"`: Field is disabled and not shown.
+ * - `"optional"`: Field is shown but not required.
+ * - `"required"`: Field is shown and required.
+ */
+type FieldRequirement = "none" | "optional" | "required";
 declare const realmAuthSettingsAtom: alepha.Atom<alepha.TObject<{
   displayName: alepha.TOptional<alepha.TString>;
   description: alepha.TOptional<alepha.TString>;
   logoUrl: alepha.TOptional<alepha.TString>;
   registrationAllowed: alepha.TBoolean;
-  emailEnabled: alepha.TBoolean;
-  emailRequired: alepha.TBoolean;
-  usernameEnabled: alepha.TBoolean;
-  usernameRequired: alepha.TBoolean;
+  email: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
+  username: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
   usernameRegExp: alepha.TString;
-  phoneEnabled: alepha.TBoolean;
-  phoneRequired: alepha.TBoolean;
+  phoneNumber: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
   verifyEmailRequired: alepha.TBoolean;
   verifyPhoneRequired: alepha.TBoolean;
-  firstNameLastNameEnabled: alepha.TBoolean;
-  firstNameLastNameRequired: alepha.TBoolean;
+  firstNameLastName: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
   resetPasswordAllowed: alepha.TBoolean;
   adminEmails: alepha.TArray<alepha.TString>;
   adminUsernames: alepha.TArray<alepha.TString>;
@@ -66,12 +70,15 @@ type RealmAuthSettings = Static<typeof realmAuthSettingsAtom.schema>;
 /**
  * Transforms a TObject schema for insert operations.
  * All default properties at the root level are made optional.
+ * Generated columns are excluded entirely.
  *
  * @example
- * Before: { name: string; age: number(default=0); }
+ * Before: { name: string; age: number(default=0); fullName: generated }
  * After:  { name: string; age?: number; }
  */
-type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends {
+type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"] as T["properties"][K] extends {
+  [PG_GENERATED]: any;
+} ? never : K]: T["properties"][K] extends {
   [PG_DEFAULT]: any;
 } | {
   "~optional": true;
@@ -81,13 +88,15 @@ type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"]]:
 /**
  * Transforms a TObject schema for update operations.
  * All optional properties at the root level are made nullable (i.e., `T | null`).
- * This allows an API endpoint to explicitly accept `null` to clear an optional field in the database.
+ * Generated columns are excluded entirely.
  *
  * @example
- * Before: { name?: string; age: number; }
+ * Before: { name?: string; age: number; fullName: generated }
  * After:  { name?: string | null; age: number; }
  */
-type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["properties"]]: T["properties"][K] extends TOptional<infer U> ? TOptional<TUnion<[U, TNull]>> : T["properties"][K] }>;
+type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["properties"] as T["properties"][K] extends {
+  [PG_GENERATED]: any;
+} ? never : K]: T["properties"][K] extends TOptional<infer U> ? TOptional<TUnion<[U, TNull]>> : T["properties"][K] }>;
 //#endregion
 //#region ../../src/orm/core/primitives/$entity.d.ts
 interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
@@ -116,6 +125,10 @@ interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
      * Custom name for the index. If not provided, generates name automatically.
      */
     name?: string;
+    /**
+     * Partial index condition. Only rows matching this SQL expression are indexed.
+     */
+    where?: SQL;
   } | {
     /**
      * Multiple columns for composite index (order matters for query optimization).
@@ -129,6 +142,10 @@ interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
      * Custom name for the index. If not provided, generates name automatically.
      */
     name?: string;
+    /**
+     * Partial index condition. Only rows matching this SQL expression are indexed.
+     */
+    where?: SQL;
   })[];
   /**
    * Foreign key constraints to maintain referential integrity.
@@ -238,6 +255,7 @@ declare const PG_VERSION: unique symbol;
 declare const PG_IDENTITY: unique symbol;
 declare const PG_ENUM: unique symbol;
 declare const PG_REF: unique symbol;
+declare const PG_GENERATED: unique symbol;
 /**
  * @deprecated Use `PG_IDENTITY` instead.
  */
@@ -252,6 +270,7 @@ type PgSymbols = {
   [PG_IDENTITY]: PgIdentityOptions;
   [PG_REF]: PgRefOptions;
   [PG_ENUM]: PgEnumOptions;
+  [PG_GENERATED]: PgGeneratedOptions;
   /**
    * @deprecated Use `PG_IDENTITY` instead.
    */
@@ -267,6 +286,18 @@ interface PgEnumOptions {
   name?: string;
   description?: string;
 }
+interface PgGeneratedOptions {
+  /**
+   * SQL expression for the generated column.
+   */
+  expression: SQL;
+  /**
+   * Storage mode for the generated column.
+   * - `"stored"` — value is computed on write and stored on disk (default for PostgreSQL).
+   * - `"virtual"` — value is computed on read (default for SQLite).
+   */
+  mode?: "stored" | "virtual";
+}
 interface PgRefOptions {
   ref: () => {
     name: string;
@@ -821,6 +852,12 @@ type PgQueryWhereConditions<T extends TObject, Relations extends PgRelationMap<T
    * @see notExists for the inverse of this test
    */
   exists?: SQLWrapper;
+  /**
+   * Test whether a subquery evaluates to have no rows.
+   *
+   * @see exists for the inverse of this test
+   */
+  notExists?: SQLWrapper;
 };
 type PgQueryWhereRelations<Relations extends PgRelationMap<TObject> | undefined = undefined> = Relations extends PgRelationMap<TObject> ? { [K in keyof Relations]?: PgQueryWhere<Relations[K]["join"]["schema"], Relations[K]["with"]> } : {};
 //#endregion
@@ -837,6 +874,136 @@ interface PgAttrField {
   one?: boolean;
 }
 //#endregion
+//#region ../../src/orm/core/interfaces/AggregateQuery.d.ts
+type AggregateOp = "count" | "sum" | "avg" | "min" | "max";
+/**
+ * Select definition for aggregate queries.
+ * - `true` means select the column value as-is (used for groupBy columns).
+ * - `{ sum: true, avg: true, ... }` means compute those aggregations.
+ */
+type AggregateColumnSelect = true | Partial<Record<AggregateOp, true>>;
+type AggregateSelect<T extends TObject> = { [K in keyof Static<T>]?: AggregateColumnSelect };
+/**
+ * Maps a single column's select definition to its result type.
+ * - `true` → original column type
+ * - `{ sum: true, avg: true }` → `{ sum: number; avg: number }`
+ */
+type AggregateColumnResult<TValue, TSelect> = TSelect extends true ? TValue : { [Op in AggregateOp as TSelect extends Record<Op, true> ? Op : never]: number };
+/**
+ * Result type for an aggregate query.
+ */
+type AggregateResult<T extends TObject, S extends AggregateSelect<T>> = { [K in keyof S & keyof Static<T>]: AggregateColumnResult<Static<T>[K], NonNullable<S[K]>> };
+/**
+ * HAVING clause for aggregate queries.
+ * Only applies to columns with aggregate operations (not `true`).
+ */
+type AggregateHaving<T extends TObject, S extends AggregateSelect<T>> = { [K in keyof S & keyof Static<T>]?: S[K] extends true ? never : { [Op in AggregateOp as S[K] extends Record<Op, true> ? Op : never]?: {
+  gt?: number;
+  gte?: number;
+  lt?: number;
+  lte?: number;
+  eq?: number;
+  ne?: number;
+} } };
+/**
+ * Full aggregate query definition.
+ */
+interface AggregateQuery<T extends TObject, S extends AggregateSelect<T>> {
+  /**
+   * Columns and aggregate operations to select.
+   */
+  select: S;
+  /**
+   * WHERE clause to filter rows before aggregation.
+   */
+  where?: PgQueryWhereOrSQL<T>;
+  /**
+   * Columns to group by.
+   */
+  groupBy?: (keyof Static<T>)[];
+  /**
+   * HAVING clause to filter groups after aggregation.
+   */
+  having?: AggregateHaving<T, S>;
+  /**
+   * Order results. Supports dot notation for aggregate columns (e.g. "amount.sum").
+   */
+  orderBy?: string | {
+    column: string;
+    direction: "asc" | "desc";
+  } | Array<{
+    column: string;
+    direction: "asc" | "desc";
+  }>;
+  /**
+   * Limit the number of results.
+   */
+  limit?: number;
+  /**
+   * Offset for pagination.
+   */
+  offset?: number;
+}
+//#endregion
+//#region ../../src/orm/core/primitives/$view.d.ts
+interface ViewPrimitiveOptions<T extends TObject> {
+  /**
+   * The database view name.
+   */
+  name: string;
+  /**
+   * TypeBox schema defining the view's columns.
+   */
+  schema: T;
+  /**
+   * SQL query that defines the view.
+   */
+  query: SQL;
+  /**
+   * Whether this is a materialized view (PostgreSQL only).
+   * Materialized views store results on disk and can be refreshed.
+   */
+  materialized?: boolean;
+}
+declare class ViewPrimitive<T extends TObject = TObject> {
+  readonly options: ViewPrimitiveOptions<T>;
+  readonly isView = true;
+  constructor(options: ViewPrimitiveOptions<T>);
+  get name(): string;
+  get schema(): T;
+  get materialized(): boolean;
+}
+//#endregion
+//#region ../../src/orm/core/providers/DbCacheProvider.d.ts
+/**
+ * Database query cache using a simple in-memory Map.
+ *
+ * Uses `{tableName}:{cacheKey}` as the storage key.
+ * Provides per-table invalidation for write-through cache busting.
+ *
+ * This is intentionally self-contained (no external cache dependencies)
+ * so the ORM module does not force `AlephaCache` on all consumers.
+ */
+declare class DbCacheProvider {
+  protected readonly store: Map<string, {
+    value: unknown;
+    expiresAt?: number;
+  }>;
+  protected storeKey(tableName: string, cacheKey: string): string;
+  /**
+   * Get a cached query result.
+   */
+  get<T>(tableName: string, cacheKey: string): Promise<T | undefined>;
+  /**
+   * Store a query result in the cache.
+   */
+  set<T>(tableName: string, cacheKey: string, value: T, ttl?: number): Promise<void>;
+  /**
+   * Invalidate all cached queries for a table.
+   */
+  invalidateTable(tableName: string): Promise<void>;
+}
+//#endregion
 //#region ../../src/orm/core/primitives/$sequence.d.ts
 interface SequencePrimitiveOptions extends PgSequenceOptions {
   /**
@@ -889,6 +1056,13 @@ declare abstract class ModelBuilder {
     schemas: Map<string, unknown>;
     schema: string;
   }): void;
+  /**
+   * Build a view from a view primitive.
+   */
+  abstract buildView(view: ViewPrimitive, options: {
+    tables: Map<string, unknown>;
+    schema: string;
+  }): void;
   /**
    * Build a sequence from a sequence primitive.
    */
@@ -5755,6 +5929,17 @@ declare class DrizzleKitProvider {
    * The actual schema is applied at migration execution time via `search_path`.
    */
   getModelsWithoutSchema(provider: DatabaseProvider): Record<string, unknown>;
+  /**
+   * Preview schema push without executing any statements.
+   *
+   * Returns the SQL statements that would be executed, warnings, and
+   * whether data loss would occur. Does NOT execute any SQL.
+   */
+  dryRunPush(provider: DatabaseProvider): Promise<{
+    statements: string[];
+    warnings: string[];
+    hasDataLoss: boolean;
+  }>;
   protected pushSqlite(kit: typeof api_d_exports, models: Record<string, unknown>, provider: DatabaseProvider): Promise<void>;
   /**
    * Push schema changes to PostgreSQL using Drizzle Kit's pushSchema with schema filters.
@@ -5815,6 +6000,12 @@ declare abstract class DatabaseProvider {
   protected readonly sequencePrimitives: SequencePrimitive[];
   get name(): string;
   get driver(): string;
+  /**
+   * Whether this driver supports SQL-level transactions (BEGIN/COMMIT/ROLLBACK).
+   *
+   * Drivers that do not (e.g. PGlite, Cloudflare D1) should override to `false`.
+   */
+  get supportsTransactions(): boolean;
   /**
    * Raw database connection handle (e.g. DatabaseSync, bun:sqlite Database).
    * Override in providers that expose native connections for introspection.
@@ -5836,6 +6027,7 @@ declare abstract class DatabaseProvider {
   protected parseOperation(sql: string): string;
   table<T extends TObject>(entity: EntityPrimitive<T>): PgTableWithColumns<SchemaToTableConfig<T>>;
   registerEntity(entity: EntityPrimitive): void;
+  registerView(view: ViewPrimitive): void;
   registerSequence(sequence: SequencePrimitive): void;
   /**
    * Rebuild all models into fresh maps using a different schema.
@@ -5990,6 +6182,7 @@ declare abstract class Repository$1<T extends TObject> {
   protected readonly relationManager: PgRelationManager;
   protected readonly queryManager: QueryManager;
   protected readonly dateTimeProvider: DateTimeProvider;
+  protected readonly dbCache: DbCacheProvider;
   protected readonly alepha: Alepha;
   static of<T extends TObject>(entity: EntityPrimitive<T>, provider?: typeof DatabaseProvider): new () => Repository$1<T>;
   constructor(entity: EntityPrimitive<T>, provider?: typeof DatabaseProvider);
@@ -6013,6 +6206,10 @@ declare abstract class Repository$1<T extends TObject> {
    * Get SQL table name. (from Drizzle table object)
    */
   get tableName(): string;
+  /**
+   * Whether this repository is backed by a view (read-only).
+   */
+  get isReadOnly(): boolean;
   /**
    * Getter for the database connection from the database provider.
    *
@@ -6244,6 +6441,21 @@ declare abstract class Repository$1<T extends TObject> {
    * Count entities.
    */
   count(where?: PgQueryWhereOrSQL<T>, opts?: StatementOptions): Promise<number>;
+  /**
+   * Execute an aggregate query with type-safe select, groupBy, and having.
+   *
+   * @example
+   * ```ts
+   * const result = await repo.aggregate({
+   *   select: { category: true, amount: { sum: true, avg: true } },
+   *   groupBy: ["category"],
+   *   having: { amount: { sum: { gt: 100 } } },
+   *   orderBy: { column: "amount.sum", direction: "desc" },
+   * });
+   * // result: Array<{ category: string; amount: { sum: number; avg: number } }>
+   * ```
+   */
+  aggregate<S extends AggregateSelect<T>>(query: AggregateQuery<T, S>, opts?: StatementOptions): Promise<AggregateResult<T, S>[]>;
   protected errorPatterns: {
     conflict: string[];
     foreignKey: string[];
@@ -6269,6 +6481,18 @@ declare abstract class Repository$1<T extends TObject> {
    * Clean a row with joins recursively
    */
   protected cleanWithJoins<T extends TObject>(row: Record<string, unknown>, schema: T, joins: PgJoin[], parentPath?: string): Static<T>;
+  /**
+   * Throw if this repository is read-only (backed by a view).
+   */
+  protected assertWritable(): void;
+  /**
+   * Refresh a materialized view. PostgreSQL only.
+   */
+  refresh(): Promise<void>;
+  /**
+   * Build a cache key from method name and query parameters.
+   */
+  protected buildCacheKey(method: string, query: any): string;
   /**
    * Convert a where clause to SQL.
    */
@@ -6316,9 +6540,59 @@ interface StatementOptions {
    * Force the current time.
    */
   now?: DateTime | string;
+  /**
+   * Cache configuration for query results.
+   *
+   * When set, results are stored in an in-memory cache keyed by query parameters.
+   * Any write to this table automatically invalidates all cached queries.
+   *
+   * @example
+   * ```ts
+   * await repo.findMany(query, { cache: { ttl: 60_000 } });
+   * ```
+   */
+  cache?: {
+    /**
+     * Time-to-live in milliseconds.
+     */
+    ttl?: number;
+    /**
+     * Custom cache key. If not provided, a key is derived from the query.
+     */
+    key?: string;
+  };
 }
 type WithSQL<T> = { [P in keyof T]?: T[P] | SQL };
 //#endregion
+//#region ../../src/orm/core/schemas/databaseEnvSchema.d.ts
+/**
+ * Base database environment schema.
+ *
+ * Defines the `DATABASE_URL` connection string used by all ORM providers
+ * to determine the database driver and connection target.
+ *
+ * Supported URL formats:
+ * - `sqlite://:memory:` or `sqlite://./path/to/db` — SQLite (Node.js or Bun)
+ * - `postgres://user:password@host:port/database` — PostgreSQL (Node.js or Bun)
+ * - `pglite://:memory:` or `pglite://./path` — PGlite (embedded Postgres)
+ * - `d1://BINDING_NAME` — Cloudflare D1
+ * - `hyperdrive://BINDING_NAME` — Cloudflare Hyperdrive
+ */
+declare const databaseEnvSchema: alepha.TObject<{
+  DATABASE_URL: alepha.TOptional<alepha.TString>;
+  /**
+   * Enable or disable push-based schema synchronization (drizzle-kit push).
+   *
+   * Defaults to `true` in development and test, `false` in production.
+   * Set to `false` in development to skip automatic schema sync
+   * (e.g. when managing migrations manually).
+   */
+  DATABASE_SYNC: alepha.TOptional<alepha.TBoolean>;
+}>;
+declare module "alepha" {
+  interface Env extends Partial<Static<typeof databaseEnvSchema>> {}
+} //# sourceMappingURL=databaseEnvSchema.d.ts.map
+//#endregion
 //#region ../../src/api/users/audits/UserAudits.d.ts
 type AuditContext = Omit<CreateAudit, "type" | "action">;
 /**
@@ -6365,11 +6639,11 @@ declare class UserAudits {
     requestId?: string | undefined;
     errorMessage?: string | undefined;
     type: string;
-    id: string;
-    createdAt: string;
     action: string;
     severity: "info" | "warning" | "critical";
     success: boolean;
+    id: string;
+    createdAt: string;
   }>;
   /**
    * Record an authentication-related audit event.
@@ -6407,11 +6681,11 @@ declare class UserAudits {
     requestId?: string | undefined;
     errorMessage?: string | undefined;
     type: string;
-    id: string;
-    createdAt: string;
     action: string;
     severity: "info" | "warning" | "critical";
     success: boolean;
+    id: string;
+    createdAt: string;
   }>;
   /**
    * Record a generic audit event.
@@ -6449,11 +6723,11 @@ declare class UserAudits {
     requestId?: string | undefined;
     errorMessage?: string | undefined;
     type: string;
-    id: string;
-    createdAt: string;
     action: string;
     severity: "info" | "warning" | "critical";
     success: boolean;
+    id: string;
+    createdAt: string;
   }>;
 }
 //#endregion
@@ -6464,7 +6738,7 @@ declare class UserAudits {
  * This service provides file storage for user-related files such as:
  * - User avatars/profile pictures
  *
- * It is lazy-loaded when the `files` feature is enabled in the realm.
+ * It is lazy-loaded when the `avatars` feature is enabled in the realm.
  */
 declare class UserBuckets {
   /**
@@ -6543,11 +6817,11 @@ type RealmPrimitive = IssuerPrimitive & WithLinkFn & WithLoginFn;
 declare const $realm: (options?: RealmOptions) => RealmPrimitive;
 interface RealmFeatures {
   /**
-   * Enable job execution tracking and purge functionality.
+   * Enable session purge functionality for cleaning up expired sessions.
    *
    * @default false
    */
-  jobs?: boolean;
+  sessionPurge?: boolean;
   /**
    * Enable notification system for password reset, verification emails, etc.
    *
@@ -6570,25 +6844,6 @@ interface RealmFeatures {
    * @default false
    */
   apiKeys?: boolean;
-  /**
-   * Enable OAuth2 Authorization Server for third-party client authentication.
-   *
-   * When enabled, Alepha acts as an OAuth2 Authorization Server, allowing
-   * third-party applications to authenticate users via standard OAuth2 flows:
-   * - Authorization Code + PKCE (OAuth 2.1)
-   * - Client Credentials (machine-to-machine)
-   * - Refresh Token
-   *
-   * Also provides:
-   * - Token introspection (RFC 7662)
-   * - Token revocation (RFC 7009)
-   * - AS metadata (RFC 8414)
-   * - Protected Resource metadata (RFC 9728)
-   * - MCP-compatible OAuth2 flow
-   *
-   * @default false
-   */
-  clients?: boolean;
   /**
    * Enable runtime configuration management.
    *
@@ -6598,23 +6853,17 @@ interface RealmFeatures {
    */
   parameters?: boolean;
   /**
-   * Enable file management for avatar uploads and attachments.
+   * Enable avatar uploads for user profiles.
    *
    * @default false
    */
-  files?: boolean;
+  avatars?: boolean;
   /**
    * Enable audit trail for compliance and event logging.
    *
    * @default false
    */
   audits?: boolean;
-  /**
-   * Enable organization management to group users.
-   *
-   * @default false
-   */
-  organizations?: boolean;
 }
 interface RealmOptions {
   /**
@@ -6777,11 +7026,11 @@ declare class AdminIdentityController {
       userRealmName: alepha.TOptional<alepha.TString>;
     }>;
     response: alepha.TPage<alepha.TObject<{
+      userId: PgAttr<alepha.TString, typeof PG_REF>;
       id: PgAttr<PgAttr<alepha.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-      version: PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
       createdAt: PgAttr<PgAttr<alepha.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
       updatedAt: PgAttr<PgAttr<alepha.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-      userId: PgAttr<alepha.TString, typeof PG_REF>;
       provider: alepha.TString;
       providerUserId: alepha.TOptional<alepha.TString>;
       providerData: alepha.TOptional<alepha.TRecord<string, alepha.TAny>>;
@@ -6798,11 +7047,11 @@ declare class AdminIdentityController {
       userRealmName: alepha.TOptional<alepha.TString>;
     }>;
     response: alepha.TObject<{
+      userId: PgAttr<alepha.TString, typeof PG_REF>;
       id: PgAttr<PgAttr<alepha.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-      version: PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
       createdAt: PgAttr<PgAttr<alepha.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
       updatedAt: PgAttr<PgAttr<alepha.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-      userId: PgAttr<alepha.TString, typeof PG_REF>;
       provider: alepha.TString;
       providerUserId: alepha.TOptional<alepha.TString>;
       providerData: alepha.TOptional<alepha.TRecord<string, alepha.TAny>>;
@@ -6975,14 +7224,14 @@ declare class UserNotifications {
 //#endregion
 //#region ../../src/api/users/schemas/createUserSchema.d.ts
 declare const createUserSchema: alepha.TObject<{
-  enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
   email: alepha.TOptional<alepha.TOptional<alepha.TString>>;
+  username: alepha.TOptional<alepha.TOptional<alepha.TString>>;
   phoneNumber: alepha.TOptional<alepha.TOptional<alepha.TString>>;
   id: alepha.TOptional<PgAttr<PgAttr<alepha.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
-  version: alepha.TOptional<PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
   createdAt: alepha.TOptional<PgAttr<PgAttr<alepha.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
+  enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
+  version: alepha.TOptional<PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
   updatedAt: alepha.TOptional<PgAttr<PgAttr<alepha.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
-  username: alepha.TOptional<alepha.TOptional<alepha.TString>>;
   roles: alepha.TOptional<alepha.TArray<alepha.TString>>;
   firstName: alepha.TOptional<alepha.TOptional<alepha.TString>>;
   lastName: alepha.TOptional<alepha.TOptional<alepha.TString>>;
@@ -6993,9 +7242,9 @@ type CreateUser = Static<typeof createUserSchema>;
 //#endregion
 //#region ../../src/api/users/schemas/updateUserSchema.d.ts
 declare const updateUserSchema: alepha.TObject<{
-  enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
   email: alepha.TOptional<alepha.TOptional<alepha.TString>>;
   phoneNumber: alepha.TOptional<alepha.TOptional<alepha.TString>>;
+  enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
   realm: alepha.TOptional<PgAttr<alepha.TString, typeof PG_DEFAULT>>;
   roles: alepha.TOptional<alepha.TArray<alepha.TString>>;
   firstName: alepha.TOptional<alepha.TOptional<alepha.TString>>;
@@ -7152,14 +7401,14 @@ declare class AdminUserController {
       userRealmName: alepha.TOptional<alepha.TString>;
     }>;
     body: alepha.TObject<{
-      enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
       email: alepha.TOptional<alepha.TOptional<alepha.TString>>;
+      username: alepha.TOptional<alepha.TOptional<alepha.TString>>;
       phoneNumber: alepha.TOptional<alepha.TOptional<alepha.TString>>;
       id: alepha.TOptional<PgAttr<PgAttr<alepha.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>>;
-      version: alepha.TOptional<PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
       createdAt: alepha.TOptional<PgAttr<PgAttr<alepha.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>>;
+      enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
+      version: alepha.TOptional<PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>>;
       updatedAt: alepha.TOptional<PgAttr<PgAttr<alepha.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>>;
-      username: alepha.TOptional<alepha.TOptional<alepha.TString>>;
       roles: alepha.TOptional<alepha.TArray<alepha.TString>>;
       firstName: alepha.TOptional<alepha.TOptional<alepha.TString>>;
       lastName: alepha.TOptional<alepha.TOptional<alepha.TString>>;
@@ -7194,9 +7443,9 @@ declare class AdminUserController {
       userRealmName: alepha.TOptional<alepha.TString>;
     }>;
     body: alepha.TObject<{
-      enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
       email: alepha.TOptional<alepha.TOptional<alepha.TString>>;
       phoneNumber: alepha.TOptional<alepha.TOptional<alepha.TString>>;
+      enabled: alepha.TOptional<PgAttr<alepha.TBoolean, typeof PG_DEFAULT>>;
       realm: alepha.TOptional<PgAttr<alepha.TString, typeof PG_DEFAULT>>;
       roles: alepha.TOptional<alepha.TArray<alepha.TString>>;
       firstName: alepha.TOptional<alepha.TOptional<alepha.TString>>;
@@ -7262,17 +7511,13 @@ declare class RealmController {
         description: alepha.TOptional<alepha.TString>;
         logoUrl: alepha.TOptional<alepha.TString>;
         registrationAllowed: alepha.TBoolean;
-        emailEnabled: alepha.TBoolean;
-        emailRequired: alepha.TBoolean;
-        usernameEnabled: alepha.TBoolean;
-        usernameRequired: alepha.TBoolean;
+        email: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
+        username: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
         usernameRegExp: alepha.TString;
-        phoneEnabled: alepha.TBoolean;
-        phoneRequired: alepha.TBoolean;
+        phoneNumber: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
         verifyEmailRequired: alepha.TBoolean;
         verifyPhoneRequired: alepha.TBoolean;
-        firstNameLastNameEnabled: alepha.TBoolean;
-        firstNameLastNameRequired: alepha.TBoolean;
+        firstNameLastName: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
         resetPasswordAllowed: alepha.TBoolean;
         adminEmails: alepha.TArray<alepha.TString>;
         adminUsernames: alepha.TArray<alepha.TString>;
@@ -7729,7 +7974,7 @@ declare class UserController {
  * - Verification code cleanup
  * - Inactive user notifications
  *
- * It is lazy-loaded when the `jobs` feature is enabled in the realm.
+ * It is lazy-loaded when the `sessionPurge` feature is enabled in the realm.
  */
 declare class UserJobs {
   protected readonly log: alepha_logger0.Logger;
@@ -7777,17 +8022,13 @@ declare class UserParameters {
     description: typebox.TOptional<typebox.TString>;
     logoUrl: typebox.TOptional<typebox.TString>;
     registrationAllowed: typebox.TBoolean;
-    emailEnabled: typebox.TBoolean;
-    emailRequired: typebox.TBoolean;
-    usernameEnabled: typebox.TBoolean;
-    usernameRequired: typebox.TBoolean;
+    email: typebox.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
+    username: typebox.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
     usernameRegExp: typebox.TString;
-    phoneEnabled: typebox.TBoolean;
-    phoneRequired: typebox.TBoolean;
+    phoneNumber: typebox.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
     verifyEmailRequired: typebox.TBoolean;
     verifyPhoneRequired: typebox.TBoolean;
-    firstNameLastNameEnabled: typebox.TBoolean;
-    firstNameLastNameRequired: typebox.TBoolean;
+    firstNameLastName: typebox.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
     resetPasswordAllowed: typebox.TBoolean;
     adminEmails: typebox.TArray<typebox.TString>;
     adminUsernames: typebox.TArray<typebox.TString>;
@@ -7803,11 +8044,11 @@ declare class UserParameters {
 //#endregion
 //#region ../../src/api/users/schemas/identityResourceSchema.d.ts
 declare const identityResourceSchema: alepha.TObject<{
+  userId: PgAttr<alepha.TString, typeof PG_REF>;
   id: PgAttr<PgAttr<alepha.TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-  version: PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
   createdAt: PgAttr<PgAttr<alepha.TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+  version: PgAttr<PgAttr<alepha.TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
   updatedAt: PgAttr<PgAttr<alepha.TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-  userId: PgAttr<alepha.TString, typeof PG_REF>;
   provider: alepha.TString;
   providerUserId: alepha.TOptional<alepha.TString>;
   providerData: alepha.TOptional<alepha.TRecord<string, alepha.TAny>>;
@@ -7828,17 +8069,13 @@ declare const realmConfigSchema: alepha.TObject<{
     description: alepha.TOptional<alepha.TString>;
     logoUrl: alepha.TOptional<alepha.TString>;
     registrationAllowed: alepha.TBoolean;
-    emailEnabled: alepha.TBoolean;
-    emailRequired: alepha.TBoolean;
-    usernameEnabled: alepha.TBoolean;
-    usernameRequired: alepha.TBoolean;
+    email: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
+    username: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
     usernameRegExp: alepha.TString;
-    phoneEnabled: alepha.TBoolean;
-    phoneRequired: alepha.TBoolean;
+    phoneNumber: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
     verifyEmailRequired: alepha.TBoolean;
     verifyPhoneRequired: alepha.TBoolean;
-    firstNameLastNameEnabled: alepha.TBoolean;
-    firstNameLastNameRequired: alepha.TBoolean;
+    firstNameLastName: alepha.TUnion<[typebox.TLiteral<"none">, typebox.TLiteral<"optional">, typebox.TLiteral<"required">]>;
     resetPasswordAllowed: alepha.TBoolean;
     adminEmails: alepha.TArray<alepha.TString>;
     adminUsernames: alepha.TArray<alepha.TString>;
@@ -8031,15 +8268,15 @@ declare class SessionService {
   deleteSession(refreshToken: string, userRealmName?: string): Promise<void>;
   link(provider: string, profile: OAuth2Profile, userRealmName?: string): Promise<{
     email?: string | undefined;
-    phoneNumber?: string | undefined;
     username?: string | undefined;
+    phoneNumber?: string | undefined;
     firstName?: string | undefined;
     lastName?: string | undefined;
     picture?: string | undefined;
-    enabled: boolean;
     id: string;
-    version: number;
     createdAt: string;
+    enabled: boolean;
+    version: number;
     updatedAt: string;
     realm: string;
     roles: string[];
@@ -8094,5 +8331,5 @@ declare class SessionService {
  */
 declare const AlephaApiUsers: alepha.Service<alepha.Module>;
 //#endregion
-export { $realm, AdminIdentityController, AdminSessionController, AdminUserController, AlephaApiUsers, CompletePasswordResetRequest, CompleteRegistrationRequest, CreateUser, CredentialService, DEFAULT_USER_REALM_NAME, IdentityEntity, IdentityQuery, IdentityResource, IdentityService, LoginInput, PasswordResetIntentResponse, Realm, RealmAuthSettings, RealmConfig, RealmController, RealmFeatures, RealmOptions, RealmPrimitive, RealmProvider, RealmRepositories, RegisterInput, RegistrationIntentResponse, RegistrationService, ResetPasswordInput, ResetPasswordRequest, SessionCrudService, SessionEntity, SessionQuery, SessionResource, SessionService, UpdateUser, UserAudits, UserBuckets, UserController, UserEntity, UserJobs, UserNotifications, UserParameters, UserQuery, UserResource, UserService, completePasswordResetRequestSchema, completeRegistrationRequestSchema, createUserSchema, identities, identityQuerySchema, identityResourceSchema, loginSchema, passwordResetIntentResponseSchema, realmAuthSettingsAtom, realmConfigSchema, registerSchema, registrationIntentResponseSchema, resetPasswordRequestSchema, resetPasswordSchema, sessionQuerySchema, sessionResourceSchema, sessions, updateUserSchema, userQuerySchema, userResourceSchema, users };
+export { $realm, AdminIdentityController, AdminSessionController, AdminUserController, AlephaApiUsers, CompletePasswordResetRequest, CompleteRegistrationRequest, CreateUser, CredentialService, DEFAULT_USER_REALM_NAME, FieldRequirement, IdentityEntity, IdentityQuery, IdentityResource, IdentityService, LoginInput, PasswordResetIntentResponse, Realm, RealmAuthSettings, RealmConfig, RealmController, RealmFeatures, RealmOptions, RealmPrimitive, RealmProvider, RealmRepositories, RegisterInput, RegistrationIntentResponse, RegistrationService, ResetPasswordInput, ResetPasswordRequest, SessionCrudService, SessionEntity, SessionQuery, SessionResource, SessionService, UpdateUser, UserAudits, UserBuckets, UserController, UserEntity, UserJobs, UserNotifications, UserParameters, UserQuery, UserResource, UserService, completePasswordResetRequestSchema, completeRegistrationRequestSchema, createUserSchema, identities, identityQuerySchema, identityResourceSchema, loginSchema, passwordResetIntentResponseSchema, realmAuthSettingsAtom, realmConfigSchema, registerSchema, registrationIntentResponseSchema, resetPasswordRequestSchema, resetPasswordSchema, sessionQuerySchema, sessionResourceSchema, sessions, updateUserSchema, userQuerySchema, userResourceSchema, users };
 //# sourceMappingURL=index.d.ts.map