{
  "type": "object",
  "properties": {
    "email": {
      "type": "string",
      "format": "email",
      "maxLength": 254
    },
    "password": {
      "type": "string",
      "minLength": 1,
      "maxLength": 256
    }
  },
  "required": [
    "email",
    "password"
  ]
}

/** POST /api/admin/auth/sign-in {email, password} → {done} with the session cookie, or {challenge, session, username, secret?, otpauth?}. */
export const POST = authRoute(async (request, { requestId }) => {
  if (!staffConfigured()) throw new CloudError(503, "not_configured", "Staff sign-in isn't configured yet (ADMIN_USER_POOL_ID).");
  const { email, password } = await readBody(request, signInSchema);
  await limitLogin(request, email);
  const step = await initiate(email, password).catch((error) => {
    throw staffAuthFailure(error, "sign-in");
  });
  return stepResponse(step, request, requestId);
});