tempest-express-sdk 0.8.0 → 0.10.0

package/dist/index.d.cts

@@ -1291,8 +1291,9 @@ declare class HTTPClient {
  * System metrics, mirroring `utils.metrics.MetricsUtils`.
  *
  * Reads CPU, memory and process stats from Node's built-in `node:os` /
- * `process` — no native dependency (GPU metrics from the FastAPI SDK are out of
- * scope here). Includes a Prometheus text-format exporter.
+ * `process` — no native dependency. Optional GPU metrics shell out to
+ * `nvidia-smi` (returns `[]` when unavailable). Includes a Prometheus
+ * text-format exporter.
  */
 /** CPU load metrics. */
 interface CPUMetrics {
@@ -1316,6 +1317,19 @@ interface MemoryMetrics {
     /** Resident set size of the current process. */
     processRss: number;
 }
+/** A single GPU's metrics (from `nvidia-smi`). */
+interface GPUMetrics {
+    /** GPU index. */
+    index: number;
+    /** GPU utilization percent. */
+    utilizationPercent: number;
+    /** Used memory in MiB. */
+    memoryUsedMb: number;
+    /** Total memory in MiB. */
+    memoryTotalMb: number;
+    /** Core temperature in °C. */
+    temperatureC: number;
+}
 /** A snapshot of system + process metrics. */
 interface SystemMetrics {
     cpu: CPUMetrics;
@@ -1330,17 +1344,26 @@ declare function readMemory(): MemoryMetrics;
 /** Read a full system snapshot. */
 declare function readSystem(): SystemMetrics;
 /**
- * Render a snapshot as Prometheus text-format metrics.
+ * Read GPU metrics via `nvidia-smi`. Returns `[]` when the tool is absent or
+ * fails (no GPU, not installed) — never throws.
+ *
+ * @returns One {@link GPUMetrics} per detected GPU.
+ */
+declare function readGpus(): Promise<GPUMetrics[]>;
+/**
+ * Render metrics as Prometheus text-format.
  *
- * @param snapshot - A snapshot (defaults to a fresh {@link readSystem}).
+ * @param snapshot - A system snapshot (defaults to a fresh {@link readSystem}).
+ * @param gpus - Optional GPU metrics to append (from {@link readGpus}).
  * @returns The Prometheus exposition text.
  */
-declare function toPrometheus(snapshot?: SystemMetrics): string;
+declare function toPrometheus(snapshot?: SystemMetrics, gpus?: GPUMetrics[]): string;
 /** Stateless system-metrics reader + Prometheus exporter. */
 declare const MetricsUtils: {
     readonly cpu: typeof readCpu;
     readonly memory: typeof readMemory;
     readonly system: typeof readSystem;
+    readonly gpus: typeof readGpus;
     readonly toPrometheus: typeof toPrometheus;
 };
 
@@ -2618,6 +2641,51 @@ interface TwilioWebhookOptions {
  */
 declare function makeTwilioWebhookRouter(options: TwilioWebhookOptions): Router;
 
+/**
+ * Email channel — a {@link MessagingProvider} over {@link EmailUtils}.
+ *
+ * Lets transactional email participate in the same swappable messaging contract
+ * as WhatsApp/Telegram/SMS: `sendText` sends a plain email, `sendMedia` sends
+ * the media as a link in the body. Inbound (`onMessage`) is absent — email
+ * ingestion is out of scope. Requires the optional `nodemailer` peer via
+ * {@link EmailUtils}.
+ */
+
+/** Options for {@link EmailProvider}. */
+interface EmailProviderOptions {
+    /** The configured SMTP sender. */
+    email: EmailUtils;
+    /** Default subject line for `sendText`/`sendMedia`. Default `"Notification"`. */
+    subject?: string;
+}
+/** An email-backed {@link MessagingProvider}. */
+declare class EmailProvider implements MessagingProvider {
+    private readonly email;
+    private readonly subject;
+    /**
+     * @param options - The email sender and default subject.
+     */
+    constructor(options: EmailProviderOptions);
+    /**
+     * Send a plain-text email.
+     *
+     * @param to - Recipient address.
+     * @param text - Body text (also used as HTML).
+     * @returns A sent result.
+     */
+    sendText(to: string, text: string): Promise<OutboundResult>;
+    /**
+     * Send an email linking to the media (caption becomes the lead text).
+     *
+     * @param to - Recipient address.
+     * @param media - The media reference (URL) + optional caption.
+     * @returns A sent result.
+     */
+    sendMedia(to: string, media: OutboundMedia): Promise<OutboundResult>;
+    /** Always `"connected"` — SMTP reachability is verified on first send. */
+    status(): Promise<string>;
+}
+
 /**
  * Admin site + resource registry, mirroring `admin.site` / `admin.config`.
  *
@@ -2896,6 +2964,17 @@ declare const mfaCodeSchema: z.ZodObject<{
 }, {
     code: string;
 }>;
+/** MFA login-challenge body (`POST /auth/mfa/challenge`). */
+declare const mfaChallengeSchema: z.ZodObject<{
+    mfaToken: z.ZodString;
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+    mfaToken: string;
+}, {
+    code: string;
+    mfaToken: string;
+}>;
 /** Activation body (`POST /auth/activate`). */
 declare const activationSchema: z.ZodObject<{
     token: z.ZodString;
@@ -2930,17 +3009,100 @@ type TokenPair = z.infer<typeof tokenPairSchema>;
 type UserPublic = z.infer<typeof userPublicSchema>;
 type AuthResponse = z.infer<typeof authResponseSchema>;
 type MfaCodeInput = z.infer<typeof mfaCodeSchema>;
+type MfaChallengeInput = z.infer<typeof mfaChallengeSchema>;
 type ActivationInput = z.infer<typeof activationSchema>;
 type PasswordResetRequestInput = z.infer<typeof passwordResetRequestSchema>;
 type PasswordResetConfirmInput = z.infer<typeof passwordResetConfirmSchema>;
 
+/**
+ * TOTP MFA enrollment/verification, mirroring the FastAPI SDK MFA flow.
+ *
+ * Orchestrates {@link TOTPHelper} over a pluggable {@link MfaStore}: enroll
+ * (generate + persist a secret, return the provisioning URI), confirm (verify a
+ * code and flip MFA on), verify (login step) and disable.
+ */
+
+/** Persistence port for MFA secrets/state. */
+interface MfaStore {
+    /** Persist a user's TOTP secret (pending until confirmed). */
+    setSecret(userId: string, secret: string): Promise<void>;
+    /** Read a user's TOTP secret, or `null`. */
+    getSecret(userId: string): Promise<string | null>;
+    /** Flip the MFA-enabled flag. */
+    setEnabled(userId: string, enabled: boolean): Promise<void>;
+    /** Whether MFA is enabled for the user. */
+    isEnabled(userId: string): Promise<boolean>;
+}
+/** The result of starting enrollment. */
+interface MfaEnrollment {
+    /** The base32 secret (persist server-side; also shown once for manual entry). */
+    secret: string;
+    /** The `otpauth://` URI to render as a QR code. */
+    otpauthUri: string;
+}
+/** Options for {@link MfaService}. */
+interface MfaServiceOptions {
+    /** The MFA persistence port. */
+    store: MfaStore;
+    /** The TOTP helper (issuer preconfigured). */
+    totp: TOTPHelper;
+}
+declare class MfaService {
+    private readonly store;
+    private readonly totp;
+    /**
+     * @param options - Store and TOTP helper.
+     */
+    constructor(options: MfaServiceOptions);
+    /**
+     * Begin enrollment: generate and persist a secret, return the QR URI.
+     *
+     * @param userId - The enrolling user.
+     * @param accountName - Label shown in the authenticator (usually the email).
+     * @returns The secret and provisioning URI.
+     */
+    enroll(userId: string, accountName: string): Promise<MfaEnrollment>;
+    /**
+     * Confirm enrollment by verifying a code, enabling MFA on success.
+     *
+     * @param userId - The user.
+     * @param code - The 6-digit code from the authenticator.
+     * @throws {ValidationException} When no secret is pending or the code is wrong.
+     */
+    confirm(userId: string, code: string): Promise<void>;
+    /**
+     * Verify a code (login step). Returns `false` without throwing.
+     *
+     * @param userId - The user.
+     * @param code - The submitted code.
+     * @returns `true` when the code is valid.
+     */
+    verify(userId: string, code: string): Promise<boolean>;
+    /**
+     * Whether MFA is enabled for a user (used to gate the login challenge).
+     *
+     * @param userId - The user.
+     * @returns `true` when MFA is enabled.
+     */
+    isEnabled(userId: string): Promise<boolean>;
+    /**
+     * Disable MFA after verifying a code.
+     *
+     * @param userId - The user.
+     * @param code - The submitted code.
+     * @throws {ValidationException} When the code is invalid.
+     */
+    disable(userId: string, code: string): Promise<void>;
+}
+
 /**
  * User authentication service, mirroring `auth.service.UserAuthService`.
  *
  * Orchestrates signup / login / refresh over a pluggable {@link UserStore},
  * {@link PasswordUtils} and {@link JWTUtils}. It is ORM-agnostic — back the
- * store with a `tempest-db-js` repository (or anything else). MFA, email
- * activation and password-reset flows from the FastAPI SDK are not yet ported.
+ * store with a `tempest-db-js` repository (or anything else). With an
+ * {@link MfaService} wired in, `login` returns an MFA challenge for enrolled
+ * users (complete it via {@link UserAuthService.verifyMfaChallenge}).
  */
 
 /** A persisted user as the auth layer needs to see it. */
@@ -2985,7 +3147,23 @@ interface UserAuthServiceOptions {
     accessTtlSeconds?: number;
     /** Refresh-token lifetime in seconds. Default 1209600 (14 days). */
     refreshTtlSeconds?: number;
-}
+    /**
+     * When provided, `login` returns an MFA challenge instead of tokens for users
+     * with MFA enabled; complete it with {@link UserAuthService.verifyMfaChallenge}.
+     */
+    mfa?: MfaService;
+    /** MFA challenge-token lifetime in seconds. Default 300 (5 min). */
+    mfaChallengeTtlSeconds?: number;
+}
+/** Returned by `login` when the user must complete an MFA challenge. */
+interface MfaChallenge {
+    /** Discriminator: an MFA step is required before tokens are issued. */
+    mfaRequired: true;
+    /** Short-lived token to submit alongside the code to `verifyMfaChallenge`. */
+    mfaToken: string;
+}
+/** `login` result: either full auth, or an MFA challenge to complete. */
+type LoginResult = AuthResponse | MfaChallenge;
 declare class UserAuthService {
     private readonly store;
     private readonly password;
@@ -2993,6 +3171,8 @@ declare class UserAuthService {
     private readonly passwordMinLength;
     private readonly accessTtlSeconds;
     private readonly refreshTtlSeconds;
+    private readonly mfa;
+    private readonly mfaChallengeTtlSeconds;
     /**
      * @param options - Store, password/JWT helpers and token policy.
      */
@@ -3012,10 +3192,20 @@ declare class UserAuthService {
      * Authenticate a user by email + password.
      *
      * @param data - Validated login payload.
-     * @returns The public user and a fresh token pair.
+     * @returns Full auth, or an {@link MfaChallenge} when MFA is enabled.
      * @throws {UnauthorizedException} On bad credentials or inactive account.
      */
-    login(data: LoginInput): Promise<AuthResponse>;
+    login(data: LoginInput): Promise<LoginResult>;
+    /**
+     * Complete an MFA login challenge: verify the code and issue tokens.
+     *
+     * @param mfaToken - The challenge token from {@link login}.
+     * @param code - The authenticator code.
+     * @returns The public user and a fresh token pair.
+     * @throws {UnauthorizedException} When the challenge/code is invalid, MFA is
+     *   not configured, or the account no longer exists / is inactive.
+     */
+    verifyMfaChallenge(mfaToken: string, code: string): Promise<AuthResponse>;
     /**
      * Exchange a valid refresh token for a new token pair.
      *
@@ -3027,80 +3217,6 @@ declare class UserAuthService {
     refresh(refreshToken: string): Promise<AuthResponse>;
 }
 
-/**
- * TOTP MFA enrollment/verification, mirroring the FastAPI SDK MFA flow.
- *
- * Orchestrates {@link TOTPHelper} over a pluggable {@link MfaStore}: enroll
- * (generate + persist a secret, return the provisioning URI), confirm (verify a
- * code and flip MFA on), verify (login step) and disable.
- */
-
-/** Persistence port for MFA secrets/state. */
-interface MfaStore {
-    /** Persist a user's TOTP secret (pending until confirmed). */
-    setSecret(userId: string, secret: string): Promise<void>;
-    /** Read a user's TOTP secret, or `null`. */
-    getSecret(userId: string): Promise<string | null>;
-    /** Flip the MFA-enabled flag. */
-    setEnabled(userId: string, enabled: boolean): Promise<void>;
-    /** Whether MFA is enabled for the user. */
-    isEnabled(userId: string): Promise<boolean>;
-}
-/** The result of starting enrollment. */
-interface MfaEnrollment {
-    /** The base32 secret (persist server-side; also shown once for manual entry). */
-    secret: string;
-    /** The `otpauth://` URI to render as a QR code. */
-    otpauthUri: string;
-}
-/** Options for {@link MfaService}. */
-interface MfaServiceOptions {
-    /** The MFA persistence port. */
-    store: MfaStore;
-    /** The TOTP helper (issuer preconfigured). */
-    totp: TOTPHelper;
-}
-declare class MfaService {
-    private readonly store;
-    private readonly totp;
-    /**
-     * @param options - Store and TOTP helper.
-     */
-    constructor(options: MfaServiceOptions);
-    /**
-     * Begin enrollment: generate and persist a secret, return the QR URI.
-     *
-     * @param userId - The enrolling user.
-     * @param accountName - Label shown in the authenticator (usually the email).
-     * @returns The secret and provisioning URI.
-     */
-    enroll(userId: string, accountName: string): Promise<MfaEnrollment>;
-    /**
-     * Confirm enrollment by verifying a code, enabling MFA on success.
-     *
-     * @param userId - The user.
-     * @param code - The 6-digit code from the authenticator.
-     * @throws {ValidationException} When no secret is pending or the code is wrong.
-     */
-    confirm(userId: string, code: string): Promise<void>;
-    /**
-     * Verify a code (login step). Returns `false` without throwing.
-     *
-     * @param userId - The user.
-     * @param code - The submitted code.
-     * @returns `true` when the code is valid.
-     */
-    verify(userId: string, code: string): Promise<boolean>;
-    /**
-     * Disable MFA after verifying a code.
-     *
-     * @param userId - The user.
-     * @param code - The submitted code.
-     * @throws {ValidationException} When the code is invalid.
-     */
-    disable(userId: string, code: string): Promise<void>;
-}
-
 /**
  * Email-activation flow, mirroring the FastAPI SDK activation flow.
  *
@@ -3509,6 +3625,31 @@ interface HealthRouterOptions {
  */
 declare function makeHealthRouter(options?: HealthRouterOptions): Router;
 
+/**
+ * Prometheus `/metrics` router, mirroring `api.routers.metrics`.
+ *
+ * Serves {@link MetricsUtils.toPrometheus} as `text/plain`. Optionally includes
+ * GPU metrics (via `nvidia-smi`) and can be guarded so the endpoint stays on the
+ * internal network / behind auth.
+ */
+
+/** Options for {@link makeMetricsRouter}. */
+interface MetricsRouterOptions {
+    /** Route path. Default `/metrics`. */
+    path?: string;
+    /** Include GPU metrics via `nvidia-smi` (adds a subprocess call). Default `false`. */
+    includeGpu?: boolean;
+    /** Optional guard middleware (e.g. internal-network or token check). */
+    guard?: RequestHandler;
+}
+/**
+ * Build the Prometheus metrics router.
+ *
+ * @param options - Path, GPU toggle and optional guard.
+ * @returns An Express router exposing the metrics endpoint.
+ */
+declare function makeMetricsRouter(options?: MetricsRouterOptions): Router;
+
 /**
  * Application factory and server runner, mirroring `api.app` + `api.server`.
  *
@@ -3575,6 +3716,6 @@ interface RunServerOptions {
 declare function runServer(app: Express, options?: RunServerOptions): Promise<Server>;
 
 /** The installed SDK version. Single source of truth for the barrel + CLI. */
-declare const VERSION = "0.8.0";
+declare const VERSION = "0.10.0";
 
-export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedisPublisherLike, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };
+export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailProvider, type EmailProviderOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GPUMetrics, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type LoginResult, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, type MetricsRouterOptions, MetricsUtils, type MfaChallenge, type MfaChallengeInput, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedisPublisherLike, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeMetricsRouter, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };