authula 0.2.0 → 0.3.2

package/dist/plugins/index.d.cts

@@ -1,4 +1,4 @@
-import { h as User, l as Plugin, p as Account, t as ClientWithPlugins, u as AuthulaClient } from "../sdk-DV73pbRH.cjs";
+import { h as User, l as Plugin, m as Session, p as Account, t as ClientWithPlugins, u as AuthulaClient } from "../sdk-DV73pbRH.cjs";
 import { z } from "zod";
 
 //#region src/plugins/admin/types.d.ts
@@ -250,6 +250,211 @@ declare class AdminPlugin implements Plugin {
   };
 }
 //#endregion
+//#region src/plugins/access-control/types.d.ts
+declare const roleSchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Role = z.infer<typeof roleSchema>;
+declare const permissionSchema: z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Permission = z.infer<typeof permissionSchema>;
+declare const permissionGrantSourceSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type PermissionGrantSource = z.infer<typeof permissionGrantSourceSchema>;
+declare const userPermissionInfoSchema: z.ZodObject<{
+  permissionId: z.ZodString;
+  permissionKey: z.ZodString;
+  permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    roleId: z.ZodString;
+    roleName: z.ZodString;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  }, z.core.$strip>>>;
+}, z.core.$strip>;
+type UserPermissionInfo = z.infer<typeof userPermissionInfoSchema>;
+declare const userRoleInfoSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  roleDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type UserRoleInfo = z.infer<typeof userRoleInfoSchema>;
+declare const roleDetailsSchema: z.ZodObject<{
+  role: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isSystem: z.ZodBoolean;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+  }, z.core.$strip>;
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type RoleDetails = z.infer<typeof roleDetailsSchema>;
+declare const getUserPermissionsResponseSchema: z.ZodObject<{
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type GetUserPermissionsResponse = z.infer<typeof getUserPermissionsResponseSchema>;
+declare const checkUserPermissionsResponseSchema: z.ZodObject<{
+  hasPermissions: z.ZodBoolean;
+}, z.core.$strip>;
+type CheckUserPermissionsResponse = z.infer<typeof checkUserPermissionsResponseSchema>;
+type CreateRoleRequest = {
+  name: string;
+  description?: string | null;
+  isSystem: boolean;
+};
+type CreateRoleResponse = {
+  role: Role;
+};
+type UpdateRoleRequest = {
+  name?: string | null;
+  description?: string | null;
+};
+type UpdateRoleResponse = {
+  role: Role;
+};
+type DeleteRoleResponse = {
+  message: string;
+};
+type CreatePermissionRequest = {
+  key: string;
+  description?: string | null;
+  isSystem: boolean;
+};
+type CreatePermissionResponse = {
+  permission: Permission;
+};
+type UpdatePermissionRequest = {
+  description?: string | null;
+};
+type UpdatePermissionResponse = {
+  permission: Permission;
+};
+type DeletePermissionResponse = {
+  message: string;
+};
+type AddRolePermissionRequest = {
+  permissionId: string;
+};
+type AddRolePermissionResponse = {
+  message: string;
+};
+type ReplaceRolePermissionsRequest = {
+  permissionIds: string[];
+};
+type ReplaceRolePermissionResponse = {
+  message: string;
+};
+type RemoveRolePermissionResponse = {
+  message: string;
+};
+type AssignUserRoleRequest = {
+  roleId: string;
+  expiresAt?: string | null;
+};
+type ReplaceUserRolesRequest = {
+  roleIds: string[];
+};
+type ReplaceUserRolesResponse = {
+  message: string;
+};
+type AssignUserRoleResponse = {
+  message: string;
+};
+type RemoveUserRoleResponse = {
+  message: string;
+};
+type CheckUserPermissionsRequest = {
+  permissionKeys: string[];
+};
+type UserWithPermissions = {
+  user: User;
+  permissions: UserPermissionInfo[];
+};
+type UserAuthorizationProfile = {
+  user: User;
+  roles: UserRoleInfo[];
+  permissions: UserPermissionInfo[];
+};
+type UserWithRoles = {
+  user: User;
+  roles: UserRoleInfo[];
+};
+//#endregion
+//#region src/plugins/access-control/plugin.d.ts
+declare class AccessControlPlugin implements Plugin {
+  readonly id = "accessControl";
+  constructor();
+  init(client: AuthulaClient): {
+    createRole: (data: CreateRoleRequest) => Promise<CreateRoleResponse>;
+    getAllRoles: () => Promise<Role[]>;
+    getRoleByName: (roleName: string) => Promise<Role>;
+    getRoleById: (roleId: string) => Promise<RoleDetails>;
+    updateRole: (roleId: string, data: UpdateRoleRequest) => Promise<UpdateRoleResponse>;
+    deleteRole: (roleId: string) => Promise<DeleteRoleResponse>;
+    createPermission: (data: CreatePermissionRequest) => Promise<CreatePermissionResponse>;
+    getAllPermissions: () => Promise<Permission[]>;
+    getPermissionById: (permissionId: string) => Promise<Permission>;
+    updatePermission: (permissionId: string, data: UpdatePermissionRequest) => Promise<UpdatePermissionResponse>;
+    deletePermission: (permissionId: string) => Promise<DeletePermissionResponse>;
+    addRolePermission: (roleId: string, data: AddRolePermissionRequest) => Promise<AddRolePermissionResponse>;
+    getRolePermissions: (roleId: string) => Promise<UserPermissionInfo[]>;
+    replaceRolePermissions: (roleId: string, data: ReplaceRolePermissionsRequest) => Promise<ReplaceRolePermissionResponse>;
+    removeRolePermission: (roleId: string, permissionId: string) => Promise<RemoveRolePermissionResponse>;
+    getUserRoles: (userId: string) => Promise<UserRoleInfo[]>;
+    assignUserRole: (userId: string, data: AssignUserRoleRequest) => Promise<AssignUserRoleResponse>;
+    replaceUserRoles: (userId: string, data: ReplaceUserRolesRequest) => Promise<ReplaceUserRolesResponse>;
+    removeUserRole: (userId: string, roleId: string) => Promise<RemoveUserRoleResponse>;
+    getUserPermissions: (userId: string) => Promise<GetUserPermissionsResponse>;
+    checkUserPermissions: (userId: string, data: CheckUserPermissionsRequest) => Promise<CheckUserPermissionsResponse>;
+  };
+}
+//#endregion
 //#region src/plugins/bearer/types.d.ts
 type BearerPluginOptions = {
   headerName?: string;
@@ -413,5 +618,49 @@ declare class OAuth2Plugin implements Plugin {
   };
 }
 //#endregion
-export { AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CreateAccountRequest, CreateAccountResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, EmailPasswordPlugin, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, VerifyEmailRequest, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, impersonationSchema };
+//#region src/plugins/totp/types.d.ts
+type EnableResponse = {
+  totpUri: string;
+  backupCodes: string[];
+};
+type DisableResponse = {
+  message: string;
+};
+type GetTOTPURIResponse = {
+  totpUri: string;
+};
+type VerifyTOTPRequest = {
+  code: string;
+  trustDevice?: boolean;
+};
+type VerifyTOTPResponse = {
+  user: User;
+  session: Session;
+};
+type VerifyBackupCodeRequest = {
+  code: string;
+  trustDevice?: boolean;
+};
+type VerifyBackupCodeResponse = {
+  user: User;
+  session: Session;
+};
+type GenerateBackupCodesResponse = {
+  backupCodes: string[];
+};
+//#endregion
+//#region src/plugins/totp/plugin.d.ts
+declare class TOTPPlugin implements Plugin {
+  readonly id = "totp";
+  init(client: AuthulaClient): {
+    enable: () => Promise<EnableResponse>;
+    disable: () => Promise<DisableResponse>;
+    getUri: () => Promise<GetTOTPURIResponse>;
+    verify: (data: VerifyTOTPRequest) => Promise<VerifyTOTPResponse>;
+    verifyBackupCode: (data: VerifyBackupCodeRequest) => Promise<VerifyBackupCodeResponse>;
+    generateBackupCodes: () => Promise<GenerateBackupCodesResponse>;
+  };
+}
+//#endregion
+export { AccessControlPlugin, AddRolePermissionRequest, AddRolePermissionResponse, AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, AssignUserRoleRequest, AssignUserRoleResponse, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CheckUserPermissionsRequest, CheckUserPermissionsResponse, CreateAccountRequest, CreateAccountResponse, CreatePermissionRequest, CreatePermissionResponse, CreateRoleRequest, CreateRoleResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeletePermissionResponse, DeleteRoleResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, DisableResponse, EmailPasswordPlugin, EnableResponse, GenerateBackupCodesResponse, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetTOTPURIResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserPermissionsResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, Permission, PermissionGrantSource, RemoveRolePermissionResponse, RemoveUserRoleResponse, ReplaceRolePermissionResponse, ReplaceRolePermissionsRequest, ReplaceUserRolesRequest, ReplaceUserRolesResponse, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, Role, RoleDetails, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TOTPPlugin, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdatePermissionRequest, UpdatePermissionResponse, UpdateRoleRequest, UpdateRoleResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, UserAuthorizationProfile, UserPermissionInfo, UserRoleInfo, UserWithPermissions, UserWithRoles, VerifyBackupCodeRequest, VerifyBackupCodeResponse, VerifyEmailRequest, VerifyTOTPRequest, VerifyTOTPResponse, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, checkUserPermissionsResponseSchema, getUserPermissionsResponseSchema, impersonationSchema, permissionGrantSourceSchema, permissionSchema, roleDetailsSchema, roleSchema, userPermissionInfoSchema, userRoleInfoSchema };
 //# sourceMappingURL=index.d.cts.map

package/dist/plugins/index.d.ts

@@ -1,4 +1,4 @@
-import { h as User, l as Plugin, p as Account, t as ClientWithPlugins, u as AuthulaClient } from "../sdk-BWoai6MP.js";
+import { h as User, l as Plugin, m as Session, p as Account, t as ClientWithPlugins, u as AuthulaClient } from "../sdk-BWoai6MP.js";
 import { z } from "zod";
 
 //#region src/plugins/admin/types.d.ts
@@ -250,6 +250,211 @@ declare class AdminPlugin implements Plugin {
   };
 }
 //#endregion
+//#region src/plugins/access-control/types.d.ts
+declare const roleSchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Role = z.infer<typeof roleSchema>;
+declare const permissionSchema: z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Permission = z.infer<typeof permissionSchema>;
+declare const permissionGrantSourceSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type PermissionGrantSource = z.infer<typeof permissionGrantSourceSchema>;
+declare const userPermissionInfoSchema: z.ZodObject<{
+  permissionId: z.ZodString;
+  permissionKey: z.ZodString;
+  permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    roleId: z.ZodString;
+    roleName: z.ZodString;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  }, z.core.$strip>>>;
+}, z.core.$strip>;
+type UserPermissionInfo = z.infer<typeof userPermissionInfoSchema>;
+declare const userRoleInfoSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  roleDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type UserRoleInfo = z.infer<typeof userRoleInfoSchema>;
+declare const roleDetailsSchema: z.ZodObject<{
+  role: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isSystem: z.ZodBoolean;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+  }, z.core.$strip>;
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type RoleDetails = z.infer<typeof roleDetailsSchema>;
+declare const getUserPermissionsResponseSchema: z.ZodObject<{
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type GetUserPermissionsResponse = z.infer<typeof getUserPermissionsResponseSchema>;
+declare const checkUserPermissionsResponseSchema: z.ZodObject<{
+  hasPermissions: z.ZodBoolean;
+}, z.core.$strip>;
+type CheckUserPermissionsResponse = z.infer<typeof checkUserPermissionsResponseSchema>;
+type CreateRoleRequest = {
+  name: string;
+  description?: string | null;
+  isSystem: boolean;
+};
+type CreateRoleResponse = {
+  role: Role;
+};
+type UpdateRoleRequest = {
+  name?: string | null;
+  description?: string | null;
+};
+type UpdateRoleResponse = {
+  role: Role;
+};
+type DeleteRoleResponse = {
+  message: string;
+};
+type CreatePermissionRequest = {
+  key: string;
+  description?: string | null;
+  isSystem: boolean;
+};
+type CreatePermissionResponse = {
+  permission: Permission;
+};
+type UpdatePermissionRequest = {
+  description?: string | null;
+};
+type UpdatePermissionResponse = {
+  permission: Permission;
+};
+type DeletePermissionResponse = {
+  message: string;
+};
+type AddRolePermissionRequest = {
+  permissionId: string;
+};
+type AddRolePermissionResponse = {
+  message: string;
+};
+type ReplaceRolePermissionsRequest = {
+  permissionIds: string[];
+};
+type ReplaceRolePermissionResponse = {
+  message: string;
+};
+type RemoveRolePermissionResponse = {
+  message: string;
+};
+type AssignUserRoleRequest = {
+  roleId: string;
+  expiresAt?: string | null;
+};
+type ReplaceUserRolesRequest = {
+  roleIds: string[];
+};
+type ReplaceUserRolesResponse = {
+  message: string;
+};
+type AssignUserRoleResponse = {
+  message: string;
+};
+type RemoveUserRoleResponse = {
+  message: string;
+};
+type CheckUserPermissionsRequest = {
+  permissionKeys: string[];
+};
+type UserWithPermissions = {
+  user: User;
+  permissions: UserPermissionInfo[];
+};
+type UserAuthorizationProfile = {
+  user: User;
+  roles: UserRoleInfo[];
+  permissions: UserPermissionInfo[];
+};
+type UserWithRoles = {
+  user: User;
+  roles: UserRoleInfo[];
+};
+//#endregion
+//#region src/plugins/access-control/plugin.d.ts
+declare class AccessControlPlugin implements Plugin {
+  readonly id = "accessControl";
+  constructor();
+  init(client: AuthulaClient): {
+    createRole: (data: CreateRoleRequest) => Promise<CreateRoleResponse>;
+    getAllRoles: () => Promise<Role[]>;
+    getRoleByName: (roleName: string) => Promise<Role>;
+    getRoleById: (roleId: string) => Promise<RoleDetails>;
+    updateRole: (roleId: string, data: UpdateRoleRequest) => Promise<UpdateRoleResponse>;
+    deleteRole: (roleId: string) => Promise<DeleteRoleResponse>;
+    createPermission: (data: CreatePermissionRequest) => Promise<CreatePermissionResponse>;
+    getAllPermissions: () => Promise<Permission[]>;
+    getPermissionById: (permissionId: string) => Promise<Permission>;
+    updatePermission: (permissionId: string, data: UpdatePermissionRequest) => Promise<UpdatePermissionResponse>;
+    deletePermission: (permissionId: string) => Promise<DeletePermissionResponse>;
+    addRolePermission: (roleId: string, data: AddRolePermissionRequest) => Promise<AddRolePermissionResponse>;
+    getRolePermissions: (roleId: string) => Promise<UserPermissionInfo[]>;
+    replaceRolePermissions: (roleId: string, data: ReplaceRolePermissionsRequest) => Promise<ReplaceRolePermissionResponse>;
+    removeRolePermission: (roleId: string, permissionId: string) => Promise<RemoveRolePermissionResponse>;
+    getUserRoles: (userId: string) => Promise<UserRoleInfo[]>;
+    assignUserRole: (userId: string, data: AssignUserRoleRequest) => Promise<AssignUserRoleResponse>;
+    replaceUserRoles: (userId: string, data: ReplaceUserRolesRequest) => Promise<ReplaceUserRolesResponse>;
+    removeUserRole: (userId: string, roleId: string) => Promise<RemoveUserRoleResponse>;
+    getUserPermissions: (userId: string) => Promise<GetUserPermissionsResponse>;
+    checkUserPermissions: (userId: string, data: CheckUserPermissionsRequest) => Promise<CheckUserPermissionsResponse>;
+  };
+}
+//#endregion
 //#region src/plugins/bearer/types.d.ts
 type BearerPluginOptions = {
   headerName?: string;
@@ -413,5 +618,49 @@ declare class OAuth2Plugin implements Plugin {
   };
 }
 //#endregion
-export { AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CreateAccountRequest, CreateAccountResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, EmailPasswordPlugin, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, VerifyEmailRequest, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, impersonationSchema };
+//#region src/plugins/totp/types.d.ts
+type EnableResponse = {
+  totpUri: string;
+  backupCodes: string[];
+};
+type DisableResponse = {
+  message: string;
+};
+type GetTOTPURIResponse = {
+  totpUri: string;
+};
+type VerifyTOTPRequest = {
+  code: string;
+  trustDevice?: boolean;
+};
+type VerifyTOTPResponse = {
+  user: User;
+  session: Session;
+};
+type VerifyBackupCodeRequest = {
+  code: string;
+  trustDevice?: boolean;
+};
+type VerifyBackupCodeResponse = {
+  user: User;
+  session: Session;
+};
+type GenerateBackupCodesResponse = {
+  backupCodes: string[];
+};
+//#endregion
+//#region src/plugins/totp/plugin.d.ts
+declare class TOTPPlugin implements Plugin {
+  readonly id = "totp";
+  init(client: AuthulaClient): {
+    enable: () => Promise<EnableResponse>;
+    disable: () => Promise<DisableResponse>;
+    getUri: () => Promise<GetTOTPURIResponse>;
+    verify: (data: VerifyTOTPRequest) => Promise<VerifyTOTPResponse>;
+    verifyBackupCode: (data: VerifyBackupCodeRequest) => Promise<VerifyBackupCodeResponse>;
+    generateBackupCodes: () => Promise<GenerateBackupCodesResponse>;
+  };
+}
+//#endregion
+export { AccessControlPlugin, AddRolePermissionRequest, AddRolePermissionResponse, AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, AssignUserRoleRequest, AssignUserRoleResponse, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CheckUserPermissionsRequest, CheckUserPermissionsResponse, CreateAccountRequest, CreateAccountResponse, CreatePermissionRequest, CreatePermissionResponse, CreateRoleRequest, CreateRoleResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeletePermissionResponse, DeleteRoleResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, DisableResponse, EmailPasswordPlugin, EnableResponse, GenerateBackupCodesResponse, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetTOTPURIResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserPermissionsResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, Permission, PermissionGrantSource, RemoveRolePermissionResponse, RemoveUserRoleResponse, ReplaceRolePermissionResponse, ReplaceRolePermissionsRequest, ReplaceUserRolesRequest, ReplaceUserRolesResponse, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, Role, RoleDetails, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TOTPPlugin, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdatePermissionRequest, UpdatePermissionResponse, UpdateRoleRequest, UpdateRoleResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, UserAuthorizationProfile, UserPermissionInfo, UserRoleInfo, UserWithPermissions, UserWithRoles, VerifyBackupCodeRequest, VerifyBackupCodeResponse, VerifyEmailRequest, VerifyTOTPRequest, VerifyTOTPResponse, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, checkUserPermissionsResponseSchema, getUserPermissionsResponseSchema, impersonationSchema, permissionGrantSourceSchema, permissionSchema, roleDetailsSchema, roleSchema, userPermissionInfoSchema, userRoleInfoSchema };
 //# sourceMappingURL=index.d.ts.map