@better-auth/infra 0.2.13 → 0.3.0

package/dist/index.d.mts

@@ -6,8 +6,8 @@ import z$1 from "zod";
 import * as better_call0 from "better-call";
 import { APIError, Endpoint, EndpointOptions } from "better-call";
 import { DBFieldAttribute } from "better-auth/db";
-import * as zod_v4_core0 from "zod/v4/core";
 import { Invitation, Member, Organization, Team, TeamMember } from "better-auth/plugins";
+import * as zod_v4_core0 from "zod/v4/core";
 export type * from "better-call";
 
 //#region src/identification.d.ts
@@ -285,6 +285,7 @@ declare const sentinel: (options?: SentinelOptions) => {
           getSignedCookie: (key: string, secret: string, prefix?: import("better-call").CookiePrefixOptions) => Promise<string | null | false>;
           setCookie: (key: string, value: string, options?: import("better-call").CookieOptions) => string;
           setSignedCookie: (key: string, value: string, secret: string, options?: import("better-call").CookieOptions) => Promise<string>;
+          responseHeaders: Headers;
           json: (<R extends Record<string, any> | null>(json: R, routerResponse?: {
             status?: number;
             headers?: Record<string, string>;
@@ -674,6 +675,10 @@ interface SendSMSOptions {
    * The SMS template to use (optional - defaults to generic verification message)
    */
   template?: SMSTemplateId;
+  /**
+   * End-user IP for abuse limits when calling from Better Auth server-to-server.
+   */
+  clientIp?: string;
 }
 /**
  * Create an SMS sender instance
@@ -775,7 +780,7 @@ interface DashIdRow {
   id: string;
 }
 //#endregion
-//#region ../../node_modules/.bun/@better-auth+scim@1.6.14+790dbc3a881c5018/node_modules/@better-auth/scim/dist/index.d.mts
+//#region ../../node_modules/.bun/@better-auth+scim@1.7.0-beta.8+e68feb61976e8634/node_modules/@better-auth/scim/dist/index.d.mts
 //#region src/types.d.ts
 interface SCIMProvider {
   id: string;
@@ -784,14 +789,36 @@ interface SCIMProvider {
   organizationId?: string;
   userId?: string;
 }
-type SCIMOptions = {
-  /**
-   * SCIM provider ownership configuration. When enabled, each provider
-   * connection is linked to the user who generated its token.
-   */
-  providerOwnership?: {
-    enabled: boolean;
+type SCIMGroupMemberInput = {
+  value?: string;
+  $ref?: string;
+  display?: string;
+  type?: string;
+};
+type SCIMGroupInput = {
+  externalId?: string;
+  displayName: string;
+  members?: SCIMGroupMemberInput[];
+};
+type MapGroupToRolesInput = {
+  group: SCIMGroupInput;
+  provider: {
+    providerId: string;
+    organizationId: string;
   };
+};
+type SCIMGroupMemberReference = {
+  value: string;
+  $ref: string;
+  display: string;
+  type: "User";
+};
+type SCIMUserGroupReference = {
+  value: string;
+  $ref: string;
+  display: string;
+};
+type SCIMOptions = {
   /**
    * Minimum organization role(s) required for SCIM management operations
    * (generate-token, list/get/delete provider connections).
@@ -804,6 +831,50 @@ type SCIMOptions = {
    * These will take precedence over the database when present.
    */
   defaultSCIM?: Omit<SCIMProvider, "id">[];
+  /**
+   * Maps an incoming SCIM Group resource to Better Auth organization role(s).
+   *
+   * Defaults to using the group's displayName as the role name.
+   */
+  mapGroupToRoles?: (input: MapGroupToRolesInput) => string | string[] | Promise<string | string[]>;
+  /**
+   * Controls whether SCIM provisioning may link to a *pre-existing* Better
+   * Auth user whose email matches the incoming SCIM resource.
+   *
+   * Disabled by default: when a user with the same email already exists,
+   * `createSCIMUser` returns `409` (uniqueness) instead of silently creating a
+   * SCIM account link for that user. Linking by email alone would give a SCIM
+   * token access to an account it never provisioned.
+   *
+   * - `true` restores the legacy behavior of linking any existing user that
+   *   matches by email. Only use this with a fully trusted token-issuance flow.
+   * - An object enables linking only when *every* provided constraint passes.
+   */
+  linkExistingUsers?: boolean | {
+    /**
+     * Only link when the email's domain is in this allow-list
+     * (case-insensitive). An empty/absent list is not a match.
+     */
+    trustedDomains?: string[];
+    /**
+     * For organization-scoped tokens, only link a user who is already
+     * a member of the token's organization (never auto-add them). Has
+     * no effect for non-org (personal) tokens, which then never match
+     * on this constraint.
+     */
+    requireExistingOrgMembership?: boolean;
+    /**
+     * Full control: return `true` to allow linking the matched user.
+     */
+    shouldLinkUser?: (payload: {
+      user: User;
+      email: string;
+      provider: {
+        providerId: string;
+        organizationId?: string;
+      };
+    }) => boolean | Promise<boolean>;
+  };
   /**
    * A callback that runs before a new SCIM token is generated.
    * Runs after the built-in role check, so it can add additional
@@ -823,6 +894,22 @@ type SCIMOptions = {
     scimToken: string;
     scimProvider: SCIMProvider;
   }) => Promise<void>;
+  /**
+   * Authorize who may generate a SCIM token. Runs after the built-in checks
+   * (org-scoped tokens still require org membership + the required role), so it
+   * can add restrictions but cannot loosen them.
+   *
+   * Use this to lock down *personal* (non-org-scoped) token creation, which is
+   * otherwise available to any authenticated user. SCIM tokens can provision
+   * and manage users, so return `false` to deny. `member` is `null` for
+   * personal tokens.
+   */
+  canGenerateToken?: (payload: {
+    user: User;
+    providerId: string;
+    organizationId?: string;
+    member: Member | null;
+  }) => boolean | Promise<boolean>;
   /**
    * How to store the SCIM token in the database.
    *
@@ -1361,6 +1448,8 @@ declare const scim: (options?: SCIMOptions) => {
         scimProvider: Omit<SCIMProvider, "id">;
       }>)[];
     }, {
+      schemas: string[];
+      groups?: SCIMUserGroupReference[] | undefined;
       id: string;
       externalId: string | undefined;
       meta: {
@@ -1379,7 +1468,6 @@ declare const scim: (options?: SCIMOptions) => {
         primary: boolean;
         value: string;
       }[];
-      schemas: string[];
     }>;
     createSCIMUser: better_call0.StrictEndpoint<"/scim/v2/Users", {
       method: "POST";
@@ -1650,6 +1738,8 @@ declare const scim: (options?: SCIMOptions) => {
         scimProvider: Omit<SCIMProvider, "id">;
       }>)[];
     }, {
+      schemas: string[];
+      groups?: SCIMUserGroupReference[] | undefined;
       id: string;
       externalId: string | undefined;
       meta: {
@@ -1668,7 +1758,6 @@ declare const scim: (options?: SCIMOptions) => {
         primary: boolean;
         value: string;
       }[];
-      schemas: string[];
     }>;
     patchSCIMUser: better_call0.StrictEndpoint<"/scim/v2/Users/:userId", {
       method: "PATCH";
@@ -2278,10 +2367,1545 @@ declare const scim: (options?: SCIMOptions) => {
                       readonly displayName: {
                         readonly type: "string";
                       };
-                      readonly active: {
-                        readonly type: "boolean";
-                      };
-                      readonly emails: {
+                      readonly active: {
+                        readonly type: "boolean";
+                      };
+                      readonly emails: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "object";
+                          readonly properties: {
+                            readonly value: {
+                              readonly type: "string";
+                            };
+                            readonly primary: {
+                              readonly type: "boolean";
+                            };
+                          };
+                        };
+                      };
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        scope: "server";
+      };
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        authSCIMToken: string;
+        scimProvider: Omit<SCIMProvider, "id">;
+      }>)[];
+    }, {
+      schemas: string[];
+      groups?: SCIMUserGroupReference[] | undefined;
+      id: string;
+      externalId: string | undefined;
+      meta: {
+        resourceType: string;
+        created: Date;
+        lastModified: Date;
+        location: string;
+      };
+      userName: string;
+      name: {
+        formatted: string;
+      };
+      displayName: string;
+      active: boolean;
+      emails: {
+        primary: boolean;
+        value: string;
+      }[];
+    }>;
+    listSCIMUsers: better_call0.StrictEndpoint<"/scim/v2/Users", {
+      method: "GET";
+      query: zod.ZodOptional<zod.ZodObject<{
+        filter: zod.ZodOptional<zod.ZodString>;
+      }, zod_v4_core0.$strip>>;
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          summary: string;
+          description: string;
+          responses: {
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "401": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "403": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "429": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "500": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      totalResults: {
+                        type: string;
+                      };
+                      itemsPerPage: {
+                        type: string;
+                      };
+                      startIndex: {
+                        type: string;
+                      };
+                      Resources: {
+                        type: string;
+                        items: {
+                          readonly type: "object";
+                          readonly properties: {
+                            readonly id: {
+                              readonly type: "string";
+                            };
+                            readonly meta: {
+                              readonly type: "object";
+                              readonly properties: {
+                                readonly resourceType: {
+                                  readonly type: "string";
+                                };
+                                readonly created: {
+                                  readonly type: "string";
+                                  readonly format: "date-time";
+                                };
+                                readonly lastModified: {
+                                  readonly type: "string";
+                                  readonly format: "date-time";
+                                };
+                                readonly location: {
+                                  readonly type: "string";
+                                };
+                              };
+                            };
+                            readonly userName: {
+                              readonly type: "string";
+                            };
+                            readonly name: {
+                              readonly type: "object";
+                              readonly properties: {
+                                readonly formatted: {
+                                  readonly type: "string";
+                                };
+                                readonly givenName: {
+                                  readonly type: "string";
+                                };
+                                readonly familyName: {
+                                  readonly type: "string";
+                                };
+                              };
+                            };
+                            readonly displayName: {
+                              readonly type: "string";
+                            };
+                            readonly active: {
+                              readonly type: "boolean";
+                            };
+                            readonly emails: {
+                              readonly type: "array";
+                              readonly items: {
+                                readonly type: "object";
+                                readonly properties: {
+                                  readonly value: {
+                                    readonly type: "string";
+                                  };
+                                  readonly primary: {
+                                    readonly type: "boolean";
+                                  };
+                                };
+                              };
+                            };
+                            readonly schemas: {
+                              readonly type: "array";
+                              readonly items: {
+                                readonly type: "string";
+                              };
+                            };
+                          };
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        scope: "server";
+      };
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        authSCIMToken: string;
+        scimProvider: Omit<SCIMProvider, "id">;
+      }>)[];
+    }, {
+      readonly schemas: readonly ["urn:ietf:params:scim:api:messages:2.0:ListResponse"];
+      readonly totalResults: 0;
+      readonly startIndex: 1;
+      readonly itemsPerPage: 0;
+      readonly Resources: readonly [];
+    } | {
+      schemas: string[];
+      totalResults: number;
+      startIndex: number;
+      itemsPerPage: number;
+      Resources: {
+        schemas: string[];
+        groups?: SCIMUserGroupReference[] | undefined;
+        id: string;
+        externalId: string | undefined;
+        meta: {
+          resourceType: string;
+          created: Date;
+          lastModified: Date;
+          location: string;
+        };
+        userName: string;
+        name: {
+          formatted: string;
+        };
+        displayName: string;
+        active: boolean;
+        emails: {
+          primary: boolean;
+          value: string;
+        }[];
+      }[];
+    }>;
+    getSCIMGroup: better_call0.StrictEndpoint<"/scim/v2/Groups/:groupId", {
+      method: "GET";
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          summary: string;
+          description: string;
+          responses: {
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "401": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "403": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "429": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "500": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly id: {
+                        readonly type: "string";
+                      };
+                      readonly externalId: {
+                        readonly type: "string";
+                      };
+                      readonly displayName: {
+                        readonly type: "string";
+                      };
+                      readonly members: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "object";
+                          readonly properties: {
+                            readonly value: {
+                              readonly type: "string";
+                            };
+                            readonly $ref: {
+                              readonly type: "string";
+                            };
+                            readonly display: {
+                              readonly type: "string";
+                            };
+                            readonly type: {
+                              readonly type: "string";
+                            };
+                          };
+                        };
+                      };
+                      readonly meta: {
+                        readonly type: "object";
+                        readonly properties: {
+                          readonly resourceType: {
+                            readonly type: "string";
+                          };
+                          readonly created: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly lastModified: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly location: {
+                            readonly type: "string";
+                          };
+                        };
+                      };
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        scope: "server";
+      };
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        authSCIMToken: string;
+        scimProvider: Omit<SCIMProvider, "id">;
+      }>)[];
+    }, {
+      displayName: string;
+      members: SCIMGroupMemberReference[];
+      meta: {
+        resourceType: string;
+        created: Date;
+        lastModified: Date;
+        location: string;
+      };
+      schemas: string[];
+      externalId?: string | undefined;
+      id: string;
+    }>;
+    createSCIMGroup: better_call0.StrictEndpoint<"/scim/v2/Groups", {
+      method: "POST";
+      body: zod.ZodObject<{
+        externalId: zod.ZodOptional<zod.ZodString>;
+        displayName: zod.ZodString;
+        members: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+          value: zod.ZodOptional<zod.ZodString>;
+          $ref: zod.ZodOptional<zod.ZodString>;
+          display: zod.ZodOptional<zod.ZodString>;
+          type: zod.ZodOptional<zod.ZodString>;
+        }, zod_v4_core0.$strip>>>;
+      }, zod_v4_core0.$strip>;
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          summary: string;
+          description: string;
+          responses: {
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "401": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "403": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "429": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "500": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "201": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly id: {
+                        readonly type: "string";
+                      };
+                      readonly externalId: {
+                        readonly type: "string";
+                      };
+                      readonly displayName: {
+                        readonly type: "string";
+                      };
+                      readonly members: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "object";
+                          readonly properties: {
+                            readonly value: {
+                              readonly type: "string";
+                            };
+                            readonly $ref: {
+                              readonly type: "string";
+                            };
+                            readonly display: {
+                              readonly type: "string";
+                            };
+                            readonly type: {
+                              readonly type: "string";
+                            };
+                          };
+                        };
+                      };
+                      readonly meta: {
+                        readonly type: "object";
+                        readonly properties: {
+                          readonly resourceType: {
+                            readonly type: "string";
+                          };
+                          readonly created: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly lastModified: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly location: {
+                            readonly type: "string";
+                          };
+                        };
+                      };
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        scope: "server";
+      };
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        authSCIMToken: string;
+        scimProvider: Omit<SCIMProvider, "id">;
+      }>)[];
+    }, {
+      displayName: string;
+      members: SCIMGroupMemberReference[];
+      meta: {
+        resourceType: string;
+        created: Date;
+        lastModified: Date;
+        location: string;
+      };
+      schemas: string[];
+      externalId?: string | undefined;
+      id: string;
+    }>;
+    patchSCIMGroup: better_call0.StrictEndpoint<"/scim/v2/Groups/:groupId", {
+      method: "PATCH";
+      body: zod.ZodObject<{
+        schemas: zod.ZodArray<zod.ZodString>;
+        Operations: zod.ZodArray<zod.ZodObject<{
+          op: zod.ZodPipe<zod.ZodDefault<zod.ZodString>, zod.ZodEnum<{
+            replace: "replace";
+            add: "add";
+            remove: "remove";
+          }>>;
+          path: zod.ZodOptional<zod.ZodString>;
+          value: zod.ZodOptional<zod.ZodUnknown>;
+        }, zod_v4_core0.$strip>>;
+      }, zod_v4_core0.$strip>;
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          summary: string;
+          description: string;
+          responses: {
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "401": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "403": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "429": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "500": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly id: {
+                        readonly type: "string";
+                      };
+                      readonly externalId: {
+                        readonly type: "string";
+                      };
+                      readonly displayName: {
+                        readonly type: "string";
+                      };
+                      readonly members: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "object";
+                          readonly properties: {
+                            readonly value: {
+                              readonly type: "string";
+                            };
+                            readonly $ref: {
+                              readonly type: "string";
+                            };
+                            readonly display: {
+                              readonly type: "string";
+                            };
+                            readonly type: {
+                              readonly type: "string";
+                            };
+                          };
+                        };
+                      };
+                      readonly meta: {
+                        readonly type: "object";
+                        readonly properties: {
+                          readonly resourceType: {
+                            readonly type: "string";
+                          };
+                          readonly created: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly lastModified: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly location: {
+                            readonly type: "string";
+                          };
+                        };
+                      };
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        scope: "server";
+      };
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        authSCIMToken: string;
+        scimProvider: Omit<SCIMProvider, "id">;
+      }>)[];
+    }, {
+      displayName: string;
+      members: SCIMGroupMemberReference[];
+      meta: {
+        resourceType: string;
+        created: Date;
+        lastModified: Date;
+        location: string;
+      };
+      schemas: string[];
+      externalId?: string | undefined;
+      id: string;
+    }>;
+    deleteSCIMGroup: better_call0.StrictEndpoint<"/scim/v2/Groups/:groupId", {
+      method: "DELETE";
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          summary: string;
+          description: string;
+          responses: {
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "401": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "403": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "429": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "500": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "204": {
+              description: string;
+            };
+          };
+        };
+        scope: "server";
+      };
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        authSCIMToken: string;
+        scimProvider: Omit<SCIMProvider, "id">;
+      }>)[];
+    }, void>;
+    updateSCIMGroup: better_call0.StrictEndpoint<"/scim/v2/Groups/:groupId", {
+      method: "PUT";
+      body: zod.ZodObject<{
+        externalId: zod.ZodOptional<zod.ZodString>;
+        displayName: zod.ZodString;
+        members: zod.ZodOptional<zod.ZodArray<zod.ZodObject<{
+          value: zod.ZodOptional<zod.ZodString>;
+          $ref: zod.ZodOptional<zod.ZodString>;
+          display: zod.ZodOptional<zod.ZodString>;
+          type: zod.ZodOptional<zod.ZodString>;
+        }, zod_v4_core0.$strip>>>;
+      }, zod_v4_core0.$strip>;
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          summary: string;
+          description: string;
+          responses: {
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "401": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "403": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "404": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "429": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "500": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly schemas: {
+                        readonly type: "array";
+                        readonly items: {
+                          readonly type: "string";
+                        };
+                      };
+                      readonly status: {
+                        readonly type: "string";
+                      };
+                      readonly detail: {
+                        readonly type: "string";
+                      };
+                      readonly scimType: {
+                        readonly type: "string";
+                      };
+                    };
+                  };
+                };
+              };
+            };
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    readonly type: "object";
+                    readonly properties: {
+                      readonly id: {
+                        readonly type: "string";
+                      };
+                      readonly externalId: {
+                        readonly type: "string";
+                      };
+                      readonly displayName: {
+                        readonly type: "string";
+                      };
+                      readonly members: {
                         readonly type: "array";
                         readonly items: {
                           readonly type: "object";
@@ -2289,12 +3913,37 @@ declare const scim: (options?: SCIMOptions) => {
                             readonly value: {
                               readonly type: "string";
                             };
-                            readonly primary: {
-                              readonly type: "boolean";
+                            readonly $ref: {
+                              readonly type: "string";
+                            };
+                            readonly display: {
+                              readonly type: "string";
+                            };
+                            readonly type: {
+                              readonly type: "string";
                             };
                           };
                         };
                       };
+                      readonly meta: {
+                        readonly type: "object";
+                        readonly properties: {
+                          readonly resourceType: {
+                            readonly type: "string";
+                          };
+                          readonly created: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly lastModified: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                          };
+                          readonly location: {
+                            readonly type: "string";
+                          };
+                        };
+                      };
                       readonly schemas: {
                         readonly type: "array";
                         readonly items: {
@@ -2315,30 +3964,24 @@ declare const scim: (options?: SCIMOptions) => {
         scimProvider: Omit<SCIMProvider, "id">;
       }>)[];
     }, {
-      id: string;
-      externalId: string | undefined;
+      displayName: string;
+      members: SCIMGroupMemberReference[];
       meta: {
         resourceType: string;
         created: Date;
         lastModified: Date;
         location: string;
       };
-      userName: string;
-      name: {
-        formatted: string;
-      };
-      displayName: string;
-      active: boolean;
-      emails: {
-        primary: boolean;
-        value: string;
-      }[];
       schemas: string[];
+      externalId?: string | undefined;
+      id: string;
     }>;
-    listSCIMUsers: better_call0.StrictEndpoint<"/scim/v2/Users", {
+    listSCIMGroups: better_call0.StrictEndpoint<"/scim/v2/Groups", {
       method: "GET";
       query: zod.ZodOptional<zod.ZodObject<{
         filter: zod.ZodOptional<zod.ZodString>;
+        startIndex: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
+        count: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
       }, zod_v4_core0.$strip>>;
       metadata: {
         allowedMediaTypes: string[];
@@ -2532,6 +4175,32 @@ declare const scim: (options?: SCIMOptions) => {
                             readonly id: {
                               readonly type: "string";
                             };
+                            readonly externalId: {
+                              readonly type: "string";
+                            };
+                            readonly displayName: {
+                              readonly type: "string";
+                            };
+                            readonly members: {
+                              readonly type: "array";
+                              readonly items: {
+                                readonly type: "object";
+                                readonly properties: {
+                                  readonly value: {
+                                    readonly type: "string";
+                                  };
+                                  readonly $ref: {
+                                    readonly type: "string";
+                                  };
+                                  readonly display: {
+                                    readonly type: "string";
+                                  };
+                                  readonly type: {
+                                    readonly type: "string";
+                                  };
+                                };
+                              };
+                            };
                             readonly meta: {
                               readonly type: "object";
                               readonly properties: {
@@ -2551,43 +4220,6 @@ declare const scim: (options?: SCIMOptions) => {
                                 };
                               };
                             };
-                            readonly userName: {
-                              readonly type: "string";
-                            };
-                            readonly name: {
-                              readonly type: "object";
-                              readonly properties: {
-                                readonly formatted: {
-                                  readonly type: "string";
-                                };
-                                readonly givenName: {
-                                  readonly type: "string";
-                                };
-                                readonly familyName: {
-                                  readonly type: "string";
-                                };
-                              };
-                            };
-                            readonly displayName: {
-                              readonly type: "string";
-                            };
-                            readonly active: {
-                              readonly type: "boolean";
-                            };
-                            readonly emails: {
-                              readonly type: "array";
-                              readonly items: {
-                                readonly type: "object";
-                                readonly properties: {
-                                  readonly value: {
-                                    readonly type: "string";
-                                  };
-                                  readonly primary: {
-                                    readonly type: "boolean";
-                                  };
-                                };
-                              };
-                            };
                             readonly schemas: {
                               readonly type: "array";
                               readonly items: {
@@ -2611,37 +4243,23 @@ declare const scim: (options?: SCIMOptions) => {
         scimProvider: Omit<SCIMProvider, "id">;
       }>)[];
     }, {
-      readonly schemas: readonly ["urn:ietf:params:scim:api:messages:2.0:ListResponse"];
-      readonly totalResults: 0;
-      readonly startIndex: 1;
-      readonly itemsPerPage: 0;
-      readonly Resources: readonly [];
-    } | {
-      schemas: string[];
-      totalResults: number;
-      startIndex: number;
-      itemsPerPage: number;
       Resources: {
-        id: string;
-        externalId: string | undefined;
+        displayName: string;
+        members: SCIMGroupMemberReference[];
         meta: {
           resourceType: string;
           created: Date;
           lastModified: Date;
           location: string;
         };
-        userName: string;
-        name: {
-          formatted: string;
-        };
-        displayName: string;
-        active: boolean;
-        emails: {
-          primary: boolean;
-          value: string;
-        }[];
         schemas: string[];
+        externalId?: string | undefined;
+        id: string;
       }[];
+      schemas: string[];
+      totalResults: number;
+      startIndex: number;
+      itemsPerPage: number;
     }>;
     getSCIMServiceProviderConfig: better_call0.StrictEndpoint<"/scim/v2/ServiceProviderConfig", {
       method: "GET";
@@ -4177,10 +5795,6 @@ declare const scim: (options?: SCIMOptions) => {
   schema: {
     scimProvider: {
       fields: {
-        userId?: {
-          type: "string";
-          required: false;
-        } | undefined;
         providerId: {
           type: "string";
           required: true;
@@ -4195,6 +5809,159 @@ declare const scim: (options?: SCIMOptions) => {
           type: "string";
           required: false;
         };
+        userId: {
+          type: "string";
+          required: false;
+        };
+      };
+    };
+    scimGroup: {
+      fields: {
+        providerId: {
+          type: "string";
+          required: true;
+        };
+        organizationId: {
+          type: "string";
+          required: true;
+        };
+        scimGroupId: {
+          type: "string";
+          required: true;
+          unique: true;
+        };
+        externalId: {
+          type: "string";
+          required: false;
+        };
+        externalIdKey: {
+          type: "string";
+          required: false;
+          unique: true;
+          returned: false;
+        };
+        displayName: {
+          type: "string";
+          required: true;
+        };
+        createdAt: {
+          type: "date";
+          required: true;
+        };
+        updatedAt: {
+          type: "date";
+          required: false;
+        };
+      };
+    };
+    scimGroupMember: {
+      fields: {
+        groupId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        providerId: {
+          type: "string";
+          required: true;
+        };
+        organizationId: {
+          type: "string";
+          required: true;
+        };
+        userId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        membershipKey: {
+          type: "string";
+          required: true;
+          unique: true;
+          returned: false;
+        };
+        createdAt: {
+          type: "date";
+          required: true;
+        };
+      };
+    };
+    scimGroupRole: {
+      fields: {
+        groupId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        role: {
+          type: "string";
+          required: true;
+        };
+        roleKey: {
+          type: "string";
+          required: true;
+          unique: true;
+          returned: false;
+        };
+        createdAt: {
+          type: "date";
+          required: true;
+        };
+      };
+    };
+    scimGroupRoleGrant: {
+      fields: {
+        groupId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        providerId: {
+          type: "string";
+          required: true;
+        };
+        organizationId: {
+          type: "string";
+          required: true;
+        };
+        userId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        role: {
+          type: "string";
+          required: true;
+        };
+        roleGrantKey: {
+          type: "string";
+          required: true;
+          unique: true;
+          returned: false;
+        };
+        isRoleProjected: {
+          type: "boolean";
+          required: true;
+        };
+        createdAt: {
+          type: "date";
+          required: true;
+        };
       };
     };
   };
@@ -4532,6 +6299,7 @@ interface DashTwoFactorTotpViewResponse {
 interface DashTwoFactorBackupCodesResponse {
   backupCodes: string[];
 }
+type DashTwoFactorStatus = "disabled" | "pending" | "enabled";
 //#endregion
 //#region src/routes/users/types.d.ts
 type DashUser = User & {
@@ -4549,11 +6317,12 @@ interface DashUserListResponse {
 }
 type DashUserDetailsResponse = DashUser & {
   account?: Account[];
-  session?: Session[];
+  session?: Omit<Session, "token">[];
   lastActiveAt?: string | Date | null;
   city?: string | null;
   country?: string | null;
   countryCode?: string | null;
+  twoFactorStatus?: DashTwoFactorStatus;
 };
 type DashUserOrganization = Pick<Organization, "id" | "name" | "slug" | "logo" | "createdAt"> & {
   role: string;
@@ -4887,7 +6656,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
         sendOrganizationInvite: import("zod").ZodOptional<import("zod").ZodBoolean>;
         organizationRole: import("zod").ZodOptional<import("zod").ZodString>;
         organizationId: import("zod").ZodOptional<import("zod").ZodString>;
-      }, import("zod/v4/core").$loose>;
+      }, import("zod/v4/core").$catchall<import("zod").ZodUnknown>>;
     }, {
       id: string;
       createdAt: Date;
@@ -5033,6 +6802,15 @@ declare const dash: <O extends DashOptions>(options?: O) => {
           clientSecret: import("zod").ZodOptional<import("zod").ZodString>;
           discoveryUrl: import("zod").ZodOptional<import("zod").ZodString>;
           issuer: import("zod").ZodOptional<import("zod").ZodString>;
+          discoveryEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          authorizationEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          tokenEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          jwksEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          userInfoEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          tokenEndpointAuthentication: import("zod").ZodOptional<import("zod").ZodEnum<{
+            client_secret_post: "client_secret_post";
+            client_secret_basic: "client_secret_basic";
+          }>>;
           mapping: import("zod").ZodOptional<import("zod").ZodObject<{
             id: import("zod").ZodOptional<import("zod").ZodString>;
             email: import("zod").ZodOptional<import("zod").ZodString>;
@@ -5081,6 +6859,15 @@ declare const dash: <O extends DashOptions>(options?: O) => {
           clientSecret: import("zod").ZodOptional<import("zod").ZodString>;
           discoveryUrl: import("zod").ZodOptional<import("zod").ZodString>;
           issuer: import("zod").ZodOptional<import("zod").ZodString>;
+          discoveryEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          authorizationEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          tokenEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          jwksEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          userInfoEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
+          tokenEndpointAuthentication: import("zod").ZodOptional<import("zod").ZodEnum<{
+            client_secret_post: "client_secret_post";
+            client_secret_basic: "client_secret_basic";
+          }>>;
           mapping: import("zod").ZodOptional<import("zod").ZodObject<{
             id: import("zod").ZodOptional<import("zod").ZodString>;
             email: import("zod").ZodOptional<import("zod").ZodString>;
@@ -5210,11 +6997,11 @@ declare const dash: <O extends DashOptions>(options?: O) => {
         };
       }>)[];
       body: import("zod").ZodObject<{
-        name: import("zod").ZodOptional<import("zod").ZodString>;
+        name: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         email: import("zod").ZodOptional<import("zod").ZodEmail>;
-        image: import("zod").ZodOptional<import("zod").ZodString>;
+        image: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         emailVerified: import("zod").ZodOptional<import("zod").ZodBoolean>;
-      }, import("zod/v4/core").$loose>;
+      }, import("zod/v4/core").$catchall<import("zod").ZodUnknown>>;
     }, {
       id: string;
       createdAt: Date;
@@ -5298,7 +7085,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
         };
       }>)[];
       body: import("zod").ZodObject<{
-        logo: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodURL, import("zod").ZodLiteral<"">]>>;
+        logo: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodPipe<import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodURL>, import("zod").ZodTransform<string, string>>, import("zod").ZodLiteral<"">]>>;
         name: import("zod").ZodOptional<import("zod").ZodString>;
         slug: import("zod").ZodOptional<import("zod").ZodString>;
         metadata: import("zod").ZodOptional<import("zod").ZodString>;
@@ -5528,6 +7315,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
       body: import("zod").ZodObject<{
         banReason: import("zod").ZodOptional<import("zod").ZodString>;
         banExpires: import("zod").ZodOptional<import("zod").ZodNumber>;
+        deleteAllSessions: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodBoolean>>;
       }, import("zod/v4/core").$strip>;
     }, DashSuccessResponse>;
     dashBanManyUsers: import("better-call").StrictEndpoint<"/dash/ban-many-users", {
@@ -5540,6 +7328,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
       body: import("zod").ZodObject<{
         banReason: import("zod").ZodOptional<import("zod").ZodString>;
         banExpires: import("zod").ZodOptional<import("zod").ZodNumber>;
+        deleteAllSessions: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodBoolean>>;
       }, import("zod/v4/core").$strip>;
     }, DashBanManyResponse>;
     dashUnbanUser: import("better-call").StrictEndpoint<"/dash/unban-user", {
@@ -5558,7 +7347,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
         };
       }>)[];
       body: import("zod").ZodObject<{
-        callbackUrl: import("zod").ZodURL;
+        callbackUrl: import("zod").ZodPipe<import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodURL>, import("zod").ZodTransform<string, string>>;
       }, import("zod/v4/core").$strip>;
     }, DashSuccessResponse>;
     dashSendManyVerificationEmails: import("better-call").StrictEndpoint<"/dash/send-many-verification-emails", {
@@ -5569,7 +7358,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
         };
       }>)[];
       body: import("zod").ZodObject<{
-        callbackUrl: import("zod").ZodURL;
+        callbackUrl: import("zod").ZodPipe<import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodURL>, import("zod").ZodTransform<string, string>>;
       }, import("zod/v4/core").$strip>;
     }, DashSendManyVerificationEmailsResponse>;
     dashSendResetPasswordEmail: import("better-call").StrictEndpoint<"/dash/send-reset-password-email", {
@@ -5580,7 +7369,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
         };
       }>)[];
       body: import("zod").ZodObject<{
-        callbackUrl: import("zod").ZodURL;
+        callbackUrl: import("zod").ZodPipe<import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodURL>, import("zod").ZodTransform<string, string>>;
       }, import("zod/v4/core").$strip>;
     }, never>;
     dashEnableTwoFactor: import("better-call").StrictEndpoint<"/dash/enable-two-factor", {
@@ -5591,6 +7380,14 @@ declare const dash: <O extends DashOptions>(options?: O) => {
         };
       }>)[];
     }, DashTwoFactorEnableResponse>;
+    dashCompleteTwoFactorSetup: import("better-call").StrictEndpoint<"/dash/complete-two-factor-setup", {
+      method: "POST";
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+        payload: {
+          userId: string;
+        };
+      }>)[];
+    }, DashSuccessResponse>;
     dashViewTwoFactorTotpUri: import("better-call").StrictEndpoint<"/dash/view-two-factor-totp-uri", {
       method: "POST";
       metadata: {
@@ -6001,4 +7798,4 @@ declare const dash: <O extends DashOptions>(options?: O) => {
   } : {};
 };
 //#endregion
-export { type APIError, CHALLENGE_TTL, type CompromisedPasswordResult, type CredentialStuffingResult, type DBField, DEFAULT_DIFFICULTY, type DashAddTeamMemberResponse, type DashBanManyResponse, type DashCheckUserByEmailResponse, type DashCheckUserExistsResponse, type DashCompleteInvitationResponse, type DashConfigResponse, type DashCreateOrganizationBody, type DashCreateOrganizationResponse, type DashCreateTeamResponse, type DashCreateUserResponse, type DashDeleteManyUsersResponse, type DashDirectoryCreateResponse, type DashDirectoryDeleteResponse, type DashDirectoryItem, type DashDirectoryRegenerateTokenResponse, type DashExecuteAdapterCountResponse, type DashExecuteAdapterFindManyResponse, type DashExecuteAdapterFindOneResponse, type DashExecuteAdapterMutationResponse, type DashExecuteAdapterResponse, type DashExportOrganizationsResponse, type DashIdRow, type DashInviteMemberResponse, type DashMaybeSuccessResponse, type DashOptions, type DashOptionsInternal, type DashOptionsResolved, type DashOrganizationAddMemberResponse, type DashOrganizationDeleteManyResponse, type DashOrganizationDetailResponse, type DashOrganizationInvitationItem, type DashOrganizationInvitationListResponse, type DashOrganizationInvitationStatusItem, type DashOrganizationListResponse, type DashOrganizationMember, type DashOrganizationMemberListItem, type DashOrganizationMemberListResponse, type DashOrganizationMemberUser, type DashOrganizationOptionsResponse, type DashOrganizationTeamItem, type DashOrganizationTeamListResponse, type DashOrganizationUpdateMemberRoleResponse, type DashOrganizationUpdateResponse, type DashSendManyVerificationEmailsResponse, type DashSessionRevokeManyResponse, type DashSsoCreateProviderResponse, type DashSsoDeleteResponse, type DashSsoMarkDomainVerifiedResponse, type DashSsoProviderItem, type DashSsoProviderSummary, type DashSsoUpdateProviderResponse, type DashSsoVerificationTokenResponse, type DashSsoVerifyDomainResponse, type DashSuccessResponse, type DashTeam, type DashTeamMember, type DashTeamMemberListResponse, type DashTwoFactorBackupCodesResponse, type DashTwoFactorEnableResponse, type DashTwoFactorTotpViewResponse, type DashUpdateTeamResponse, type DashUpdateUserResponse, type DashUserDetailsResponse, type DashUserGraphDataResponse, type DashUserListResponse, type DashUserOrganizationsResponse, type DashUserRetentionDataResponse, type DashUserStatsActivePeriod, type DashUserStatsResponse, type DashUserStatsSignUpPeriod, type DashValidateResponse, type DirectorySyncConnection, EMAIL_TEMPLATES, type EmailConfig, type EmailTemplateId, type EmailTemplateVariables, type Endpoint, type EndpointOptions, type EventLocation, type EventTypesResponse, type ImpossibleTravelResult, type InfraEndpointContext, type InfraPluginConnectionOptions, type InfraPluginConnectionOptionsInternal, type LocationData, type LocationDataContext, type PoWChallenge, type PoWSolution, type SCIMPlugin, type SMSConfig, type SMSTemplateId, type SMSTemplateVariables, SMS_TEMPLATES, type SecurityEvent, type SecurityEventType, type SecurityOptions, type SecurityVerdict, type SendBulkEmailsOptions, type SendBulkEmailsResult, type SendEmailOptions, type SendEmailResult, type SendSMSOptions, type SendSMSResult, type SentinelOptions, type SentinelOptionsInternal, type StaleUserResult, type ThresholdConfig, USER_EVENT_TYPES, type UserEvent, type UserEventType, type UserEventsResponse, createEmailSender, createSMSSender, dash, decodePoWChallenge, encodePoWSolution, normalizeEmail, sendBulkEmails, sendEmail, sendSMS, sentinel, solvePoWChallenge, verifyPoWSolution };
+export { type APIError, CHALLENGE_TTL, type CompromisedPasswordResult, type CredentialStuffingResult, type DBField, DEFAULT_DIFFICULTY, type DashAddTeamMemberResponse, type DashBanManyResponse, type DashCheckUserByEmailResponse, type DashCheckUserExistsResponse, type DashCompleteInvitationResponse, type DashConfigResponse, type DashCreateOrganizationBody, type DashCreateOrganizationResponse, type DashCreateTeamResponse, type DashCreateUserResponse, type DashDeleteManyUsersResponse, type DashDirectoryCreateResponse, type DashDirectoryDeleteResponse, type DashDirectoryItem, type DashDirectoryRegenerateTokenResponse, type DashExecuteAdapterCountResponse, type DashExecuteAdapterFindManyResponse, type DashExecuteAdapterFindOneResponse, type DashExecuteAdapterMutationResponse, type DashExecuteAdapterResponse, type DashExportOrganizationsResponse, type DashIdRow, type DashInviteMemberResponse, type DashMaybeSuccessResponse, type DashOptions, type DashOptionsInternal, type DashOptionsResolved, type DashOrganizationAddMemberResponse, type DashOrganizationDeleteManyResponse, type DashOrganizationDetailResponse, type DashOrganizationInvitationItem, type DashOrganizationInvitationListResponse, type DashOrganizationInvitationStatusItem, type DashOrganizationListResponse, type DashOrganizationMember, type DashOrganizationMemberListItem, type DashOrganizationMemberListResponse, type DashOrganizationMemberUser, type DashOrganizationOptionsResponse, type DashOrganizationTeamItem, type DashOrganizationTeamListResponse, type DashOrganizationUpdateMemberRoleResponse, type DashOrganizationUpdateResponse, type DashSendManyVerificationEmailsResponse, type DashSessionRevokeManyResponse, type DashSsoCreateProviderResponse, type DashSsoDeleteResponse, type DashSsoMarkDomainVerifiedResponse, type DashSsoProviderItem, type DashSsoProviderSummary, type DashSsoUpdateProviderResponse, type DashSsoVerificationTokenResponse, type DashSsoVerifyDomainResponse, type DashSuccessResponse, type DashTeam, type DashTeamMember, type DashTeamMemberListResponse, type DashTwoFactorBackupCodesResponse, type DashTwoFactorEnableResponse, type DashTwoFactorStatus, type DashTwoFactorTotpViewResponse, type DashUpdateTeamResponse, type DashUpdateUserResponse, type DashUserDetailsResponse, type DashUserGraphDataResponse, type DashUserListResponse, type DashUserOrganizationsResponse, type DashUserRetentionDataResponse, type DashUserStatsActivePeriod, type DashUserStatsResponse, type DashUserStatsSignUpPeriod, type DashValidateResponse, type DirectorySyncConnection, EMAIL_TEMPLATES, type EmailConfig, type EmailTemplateId, type EmailTemplateVariables, type Endpoint, type EndpointOptions, type EventLocation, type EventTypesResponse, type ImpossibleTravelResult, type InfraEndpointContext, type InfraPluginConnectionOptions, type InfraPluginConnectionOptionsInternal, type LocationData, type LocationDataContext, type PoWChallenge, type PoWSolution, type SCIMPlugin, type SMSConfig, type SMSTemplateId, type SMSTemplateVariables, SMS_TEMPLATES, type SecurityEvent, type SecurityEventType, type SecurityOptions, type SecurityVerdict, type SendBulkEmailsOptions, type SendBulkEmailsResult, type SendEmailOptions, type SendEmailResult, type SendSMSOptions, type SendSMSResult, type SentinelOptions, type SentinelOptionsInternal, type StaleUserResult, type ThresholdConfig, USER_EVENT_TYPES, type UserEvent, type UserEventType, type UserEventsResponse, createEmailSender, createSMSSender, dash, decodePoWChallenge, encodePoWSolution, normalizeEmail, sendBulkEmails, sendEmail, sendSMS, sentinel, solvePoWChallenge, verifyPoWSolution };