import z$1, { z } from 'zod';

declare const PasswordSchema: z.ZodString;
/**
 * Zod schema for registration request.
 */
declare const RegisterRequestSchema: z.ZodObject<{
    email: z.ZodEmail;
    password: z.ZodString;
    firstName: z.ZodString;
    lastName: z.ZodString;
    role: z.ZodOptional<z.ZodEnum<{
        readonly HOST: 1;
        readonly VENDOR: 2;
        readonly VIEWER: 4;
    }>>;
}, z.core.$strip>;
/**
 * Zod schema for registration response.
 */
declare const RegisterResponseSchema: z.ZodObject<{
    username: z.ZodString;
    reference: z.ZodString;
    role: z.ZodOptional<z.ZodEnum<{
        readonly HOST: 1;
        readonly VENDOR: 2;
        readonly VIEWER: 4;
    }>>;
}, z.core.$strip>;
/**
 * Zod schema for login request.
 */
declare const LoginRequestSchema: z.ZodObject<{
    email: z.ZodEmail;
    password: z.ZodString;
    role: z.ZodOptional<z.ZodEnum<{
        readonly HOST: 1;
        readonly VENDOR: 2;
        readonly VIEWER: 4;
    }>>;
}, z.core.$strip>;
declare const VerifyOtpRequestSchema: z.ZodObject<{
    otp: z.ZodString;
    reference: z.ZodString;
    type: z.ZodEnum<{
        registration: "registration";
        passwordReset: "passwordReset";
    }>;
}, z.core.$strip>;
declare const ResendOtpRequestSchema: z.ZodObject<{
    reference: z.ZodString;
    type: z.ZodEnum<{
        registration: "registration";
        passwordReset: "passwordReset";
    }>;
}, z.core.$strip>;
declare const VerifyOtpResponseSchema: z.ZodObject<{
    isValid: z.ZodBoolean;
    message: z.ZodString;
    reference: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
/**
 * Zod schema for login response.
 */
declare const LoginResponseSchema: z.ZodObject<{
    AccessToken: z.ZodString;
    RefreshToken: z.ZodString;
    IdToken: z.ZodString;
    ExpiresIn: z.ZodNumber;
    TokenType: z.ZodLiteral<"Bearer">;
    availableRoles: z.ZodArray<z.ZodEnum<{
        readonly HOST: 1;
        readonly VENDOR: 2;
        readonly VIEWER: 4;
    }>>;
    lastActiveRole: z.ZodNullable<z.ZodEnum<{
        readonly HOST: 1;
        readonly VENDOR: 2;
        readonly VIEWER: 4;
    }>>;
}, z.core.$strip>;
/**
 * Zod schema for switch profile request.
 */
declare const SwitchProfileRequestSchema: z.ZodObject<{
    role: z.ZodEnum<{
        readonly HOST: 1;
        readonly VENDOR: 2;
        readonly VIEWER: 4;
    }>;
}, z.core.$strip>;
/**
 * Zod schema for switch profile response.
 */
declare const SwitchProfileResponseSchema: z.ZodObject<{
    lastActiveRole: z.ZodEnum<{
        readonly HOST: 1;
        readonly VENDOR: 2;
        readonly VIEWER: 4;
    }>;
}, z.core.$strip>;
/**
 * Zod schema for refresh token request.
 */
declare const RefreshTokenRequestSchema: z.ZodObject<{
    refreshToken: z.ZodString;
}, z.core.$strip>;
declare const LogoutRequestSchema: z.ZodObject<{
    refreshToken: z.ZodString;
    accessToken: z.ZodString;
}, z.core.$strip>;
/**
 * Zod schema for forgot password request.
 */
declare const ForgotPasswordRequestSchema: z.ZodObject<{
    email: z.ZodEmail;
}, z.core.$strip>;
declare const ForgotPasswordResponseSchema: z.ZodObject<{
    destination: z.ZodString;
    deliveryMedium: z.ZodString;
    attributeName: z.ZodString;
}, z.core.$strip>;
/**
 * Zod schema for reset password request.
 */
declare const ResetPasswordRequestSchema: z.ZodObject<{
    token: z.ZodString;
    newPassword: z.ZodString;
}, z.core.$strip>;
/**
 * Zod schema for change password request.
 */
declare const ChangePasswordRequestSchema: z.ZodObject<{
    currentPassword: z.ZodString;
    newPassword: z.ZodString;
}, z.core.$strip>;
declare const OauthStartQuerySchema: z.ZodObject<{
    redirectTo: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
declare const OauthStartResponseSchema: z.ZodObject<{
    authorizeUrl: z.ZodURL;
}, z.core.$strip>;
declare const OauthExchangeRequestSchema: z.ZodObject<{
    handoff: z.ZodString;
}, z.core.$strip>;
declare const OauthDirectTokenRequestSchema: z.ZodObject<{
    idToken: z.ZodString;
    nonce: z.ZodString;
    authorizationCode: z.ZodOptional<z.ZodString>;
    user: z.ZodOptional<z.ZodObject<{
        name: z.ZodOptional<z.ZodObject<{
            firstName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
            lastName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$strip>>;
}, z.core.$strip>;
declare const OauthLinkCompleteRequestSchema: z.ZodObject<{
    linkHandoff: z.ZodString;
    password: z.ZodOptional<z.ZodString>;
    otpReference: z.ZodOptional<z.ZodString>;
    otp: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
declare const OauthLinkSendOtpRequestSchema: z.ZodObject<{
    linkHandoff: z.ZodString;
}, z.core.$strip>;
declare const LinkRequiredResponseSchema: z.ZodObject<{
    kind: z.ZodLiteral<"link_required">;
    reason: z.ZodEnum<{
        readonly EMAIL_MATCH: "email_match";
        readonly EMAIL_MISS: "email_missing";
    }>;
    linkHandoff: z.ZodString;
    maskedEmail: z.ZodString;
    hasPassword: z.ZodBoolean;
    provider: z.ZodEnum<{
        readonly GOOGLE: "GOOGLE";
        readonly APPLE: "APPLE";
        readonly FACEBOOK: "FACEBOOK";
        readonly TWITTER: "TWITTER";
    }>;
}, z.core.$strip>;
declare const OauthLinkSendOtpResponseSchema: z.ZodObject<{
    otpReference: z.ZodString;
}, z.core.$strip>;
declare const ProvidersListItemSchema: z.ZodObject<{
    name: z.ZodEnum<{
        readonly GOOGLE: "GOOGLE";
        readonly APPLE: "APPLE";
        readonly FACEBOOK: "FACEBOOK";
        readonly TWITTER: "TWITTER";
    }>;
    enabled: z.ZodBoolean;
    canSignUp: z.ZodBoolean;
}, z.core.$strip>;
declare const ProvidersListResponseSchema: z.ZodObject<{
    providers: z.ZodArray<z.ZodObject<{
        name: z.ZodEnum<{
            readonly GOOGLE: "GOOGLE";
            readonly APPLE: "APPLE";
            readonly FACEBOOK: "FACEBOOK";
            readonly TWITTER: "TWITTER";
        }>;
        enabled: z.ZodBoolean;
        canSignUp: z.ZodBoolean;
    }, z.core.$strip>>;
}, z.core.$strip>;
declare const OauthLinkCompleteEmailRequestSchema: z.ZodObject<{
    linkHandoff: z.ZodString;
    email: z.ZodEmail;
}, z.core.$strip>;

type RegisterRequest = z.infer<typeof RegisterRequestSchema>;
type LoginRequest = z.infer<typeof LoginRequestSchema>;
type LoginResponse = z.infer<typeof LoginResponseSchema>;
type RefreshTokenRequest = z.infer<typeof RefreshTokenRequestSchema>;
type ForgotPasswordRequest = z.infer<typeof ForgotPasswordRequestSchema>;
type ResetPasswordRequest = z.infer<typeof ResetPasswordRequestSchema>;
type LogoutRequestPayload = z.infer<typeof LogoutRequestSchema>;
type RegisterResponsePayload = z.infer<typeof RegisterResponseSchema>;
type VerifyOtpRequest = z.infer<typeof VerifyOtpRequestSchema>;
type ChangePasswordRequest = z.infer<typeof ChangePasswordRequestSchema>;
type OauthStartQuery = z.infer<typeof OauthStartQuerySchema>;
type OauthStartResponse = z.infer<typeof OauthStartResponseSchema>;
type OauthExchangeRequest = z.infer<typeof OauthExchangeRequestSchema>;
type OauthDirectTokenRequest = z.infer<typeof OauthDirectTokenRequestSchema>;
type OauthLinkCompleteRequest = z.infer<typeof OauthLinkCompleteRequestSchema>;
type OauthLinkSendOtpRequest = z.infer<typeof OauthLinkSendOtpRequestSchema>;
type LinkRequiredResponse = z.infer<typeof LinkRequiredResponseSchema>;
type OauthLinkSendOtpResponse = z.infer<typeof OauthLinkSendOtpResponseSchema>;
type ProvidersListResponse = z.infer<typeof ProvidersListResponseSchema>;
type ProvidersListItem = z.infer<typeof ProvidersListItemSchema>;
type OauthLinkCompleteEmailRequest = z.infer<typeof OauthLinkCompleteEmailRequestSchema>;
type SwitchProfileRequest = z.infer<typeof SwitchProfileRequestSchema>;
type SwitchProfileResponse = z.infer<typeof SwitchProfileResponseSchema>;

declare const IdentityProvider: {
    readonly GOOGLE: "GOOGLE";
    readonly APPLE: "APPLE";
    readonly FACEBOOK: "FACEBOOK";
    readonly TWITTER: "TWITTER";
};
type IdentityProvider = (typeof IdentityProvider)[keyof typeof IdentityProvider];
declare const LinkRequiredReasonEnum: {
    readonly EMAIL_MATCH: "email_match";
    readonly EMAIL_MISS: "email_missing";
};
type LinkRequiredReasonEnum = (typeof LinkRequiredReasonEnum)[keyof typeof LinkRequiredReasonEnum];
declare const OauthResolveKind: {
    readonly SIGNED_IN: "signed_in";
    readonly SIGNED_UP: "signed_up";
    readonly LINK_REQUIRED: "link_required";
};
type OauthResolveKind = (typeof OauthResolveKind)[keyof typeof OauthResolveKind];

declare const MFA_ACTIONS: {
    readonly WITHDRAW: "WITHDRAW";
    readonly CANCEL_EVENT: "CANCEL_EVENT";
    readonly END_LIVE: "END_LIVE";
    readonly DISABLE_MFA: "DISABLE_MFA";
    readonly UPDATE_SETTLEMENT_ACCOUNT: "UPDATE_SETTLEMENT_ACCOUNT";
};
type MfaAction = (typeof MFA_ACTIONS)[keyof typeof MFA_ACTIONS];

declare const TotpCodeSchema: z$1.ZodString;
declare const RecoveryCodeSchema: z$1.ZodString;
declare const EnableMfaBodySchema: z$1.ZodObject<{
    totpCode: z$1.ZodString;
}, z$1.core.$strip>;
declare const DisableMfaBodySchema: z$1.ZodObject<{
    totpCode: z$1.ZodOptional<z$1.ZodString>;
    recoveryCode: z$1.ZodOptional<z$1.ZodString>;
}, z$1.core.$strip>;
declare const MfaChallengeBodySchema: z$1.ZodObject<{
    action: z$1.ZodEnum<{
        readonly WITHDRAW: "WITHDRAW";
        readonly CANCEL_EVENT: "CANCEL_EVENT";
        readonly END_LIVE: "END_LIVE";
        readonly DISABLE_MFA: "DISABLE_MFA";
        readonly UPDATE_SETTLEMENT_ACCOUNT: "UPDATE_SETTLEMENT_ACCOUNT";
    }>;
}, z$1.core.$strip>;
declare const MfaVerifyBodySchema: z$1.ZodObject<{
    challengeToken: z$1.ZodString;
    totpCode: z$1.ZodOptional<z$1.ZodString>;
    recoveryCode: z$1.ZodOptional<z$1.ZodString>;
}, z$1.core.$strip>;

type EnableMfaBody = z$1.infer<typeof EnableMfaBodySchema>;
type DisableMfaBody = z$1.infer<typeof DisableMfaBodySchema>;
type MfaChallengeBody = z$1.infer<typeof MfaChallengeBodySchema>;
type MfaVerifyBody = z$1.infer<typeof MfaVerifyBodySchema>;
type TotpCode = z$1.infer<typeof TotpCodeSchema>;
type RecoveryCode = z$1.infer<typeof RecoveryCodeSchema>;

/**
 * Actions that require step-up reauth (a fresh PIN confirmation) before
 * they can be executed. Each protected endpoint on the backend declares
 * its action via `@ReauthRequired(...)`; the FE mints an action-scoped
 * token through `POST /auth/confirm-pin` and passes it in the
 * `X-Reauth-Token` header.
 *
 * Tokens are single-use, TTL-bounded (5 min), and scoped — a token
 * issued for `WITHDRAW` will 401 if replayed against `END_LIVE`.
 */
declare const REAUTH_ACTIONS: {
    readonly END_LIVE: "END_LIVE";
    readonly CANCEL_EVENT: "CANCEL_EVENT";
    readonly WITHDRAW: "WITHDRAW";
    readonly FUND_ESCROW: "FUND_ESCROW";
};
type ReauthAction = (typeof REAUTH_ACTIONS)[keyof typeof REAUTH_ACTIONS];

/**
 * `POST /auth/confirm-pin` body. Regex matches the digit-string PIN
 * format enforced when the PIN was first set (`POST /users/pin`).
 */
declare const ConfirmPinSchema: z.ZodObject<{
    pin: z.ZodString;
    action: z.ZodEnum<{
        readonly END_LIVE: "END_LIVE";
        readonly CANCEL_EVENT: "CANCEL_EVENT";
        readonly WITHDRAW: "WITHDRAW";
        readonly FUND_ESCROW: "FUND_ESCROW";
    }>;
}, z.core.$strip>;
/**
 * `POST /auth/confirm-pin` response. The `reauthToken` is presented via
 * `X-Reauth-Token` on the subsequent destructive request; single-use,
 * scoped to `action`.
 */
declare const ReauthTokenResponseSchema: z.ZodObject<{
    reauthToken: z.ZodString;
    action: z.ZodEnum<{
        readonly END_LIVE: "END_LIVE";
        readonly CANCEL_EVENT: "CANCEL_EVENT";
        readonly WITHDRAW: "WITHDRAW";
        readonly FUND_ESCROW: "FUND_ESCROW";
    }>;
    expiresAt: z.ZodISODateTime;
}, z.core.$strip>;

type ConfirmPin = z$1.infer<typeof ConfirmPinSchema>;
type ReauthTokenResponse = z$1.infer<typeof ReauthTokenResponseSchema>;

export { type ChangePasswordRequest, ChangePasswordRequestSchema, type ConfirmPin, ConfirmPinSchema, type DisableMfaBody, DisableMfaBodySchema, type EnableMfaBody, EnableMfaBodySchema, type ForgotPasswordRequest, ForgotPasswordRequestSchema, ForgotPasswordResponseSchema, IdentityProvider, LinkRequiredReasonEnum, type LinkRequiredResponse, LinkRequiredResponseSchema, type LoginRequest, LoginRequestSchema, type LoginResponse, LoginResponseSchema, type LogoutRequestPayload, LogoutRequestSchema, MFA_ACTIONS, type MfaAction, type MfaChallengeBody, MfaChallengeBodySchema, type MfaVerifyBody, MfaVerifyBodySchema, type OauthDirectTokenRequest, OauthDirectTokenRequestSchema, type OauthExchangeRequest, OauthExchangeRequestSchema, type OauthLinkCompleteEmailRequest, OauthLinkCompleteEmailRequestSchema, type OauthLinkCompleteRequest, OauthLinkCompleteRequestSchema, type OauthLinkSendOtpRequest, OauthLinkSendOtpRequestSchema, type OauthLinkSendOtpResponse, OauthLinkSendOtpResponseSchema, OauthResolveKind, type OauthStartQuery, OauthStartQuerySchema, type OauthStartResponse, OauthStartResponseSchema, PasswordSchema, type ProvidersListItem, ProvidersListItemSchema, type ProvidersListResponse, ProvidersListResponseSchema, REAUTH_ACTIONS, type ReauthAction, type ReauthTokenResponse, ReauthTokenResponseSchema, type RecoveryCode, RecoveryCodeSchema, type RefreshTokenRequest, RefreshTokenRequestSchema, type RegisterRequest, RegisterRequestSchema, type RegisterResponsePayload, RegisterResponseSchema, ResendOtpRequestSchema, type ResetPasswordRequest, ResetPasswordRequestSchema, type SwitchProfileRequest, SwitchProfileRequestSchema, type SwitchProfileResponse, SwitchProfileResponseSchema, type TotpCode, TotpCodeSchema, type VerifyOtpRequest, VerifyOtpRequestSchema, VerifyOtpResponseSchema };