@hexclave/next 1.0.2 → 1.0.5

package/src/lib/hexclave-app/email/index.ts

@@ -0,0 +1,280 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+import type { Json } from "@hexclave/shared/dist/utils/json";
+import { XOR } from "@hexclave/shared/dist/utils/types";
+
+export type AdminSentEmail = {
+  id: string,
+  to: string[],
+  subject: string,
+  recipient: string, // We'll derive this from to[0] for display
+  sentAt: Date, // We'll derive this from sent_at_millis for display
+  error?: unknown,
+}
+
+export type AdminEmailOutboxRecipient =
+  | { type: "user-primary-email", userId: string }
+  | { type: "user-custom-emails", userId: string, emails: string[] }
+  | { type: "custom-emails", emails: string[] };
+
+export type AdminEmailOutboxStatus =
+  | "paused"
+  | "preparing"
+  | "rendering"
+  | "render-error"
+  | "scheduled"
+  | "queued"
+  | "sending"
+  | "server-error"
+  | "skipped"
+  | "bounced"
+  | "delivery-delayed"
+  | "sent"
+  | "opened"
+  | "clicked"
+  | "marked-as-spam";
+
+export type AdminEmailOutboxSimpleStatus =
+  | "in-progress"
+  | "ok"
+  | "error";
+
+export type AdminEmailOutboxCreatedWith = "draft" | "programmatic-call";
+
+// Error entry from a failed send attempt
+export type AdminSendAttemptError = {
+  attemptNumber: number,
+  timestamp: string,
+  externalMessage: string,
+  externalDetails: Record<string, unknown>,
+  internalMessage: string,
+  internalDetails: Record<string, unknown>,
+};
+
+// =============================== BASE TYPES ===============================
+
+// Base fields present on all emails
+type AdminEmailOutboxBase = {
+  id: string,
+  createdAt: Date,
+  updatedAt: Date,
+  tsxSource: string,
+  themeId: string | null,
+  to: AdminEmailOutboxRecipient,
+  scheduledAt: Date,
+  // Source tracking for grouping emails by template/draft
+  createdWith: AdminEmailOutboxCreatedWith,
+  emailDraftId: string | null,
+  emailProgrammaticCallTemplateId: string | null,
+  variables: Record<string, Json>,
+  isPaused: false,
+  hasRendered: false,
+  hasDelivered: false,
+  // Retry tracking fields
+  sendRetries: number,
+  nextSendRetryAt: Date | null,
+  sendAttemptErrors: AdminSendAttemptError[] | null,
+};
+
+// Fields available after rendering completes successfully
+// Use Omit to properly override hasRendered from base
+type AdminEmailOutboxRenderedFields = Omit<AdminEmailOutboxBase, "hasRendered"> & {
+  hasRendered: true,
+  startedRenderingAt: Date,
+  renderedAt: Date,
+  subject: string,
+  html: string | null,
+  text: string | null,
+  isTransactional: boolean,
+  isHighPriority: boolean,
+  notificationCategoryId: string | null,
+};
+
+// Fields available after sending starts
+type AdminEmailOutboxStartedSendingFields = AdminEmailOutboxRenderedFields & {
+  startedSendingAt: Date,
+};
+
+// Fields available after delivery completes
+// Use Omit to properly override hasDelivered from base (inherited through chain)
+type AdminEmailOutboxFinishedDeliveringFields = Omit<AdminEmailOutboxStartedSendingFields, "hasDelivered"> & {
+  hasDelivered: true,
+  deliveredAt: Date,
+};
+
+// =============================== STATUS-SPECIFIC TYPES ===============================
+
+// Use Omit to properly override isPaused from base
+export type AdminEmailOutboxPaused = Omit<AdminEmailOutboxBase, "isPaused"> & {
+  status: "paused",
+  simpleStatus: "in-progress",
+  isPaused: true,
+};
+
+export type AdminEmailOutboxPreparing = AdminEmailOutboxBase & {
+  status: "preparing",
+  simpleStatus: "in-progress",
+};
+
+export type AdminEmailOutboxRendering = AdminEmailOutboxBase & {
+  status: "rendering",
+  simpleStatus: "in-progress",
+  startedRenderingAt: Date,
+};
+
+export type AdminEmailOutboxRenderError = AdminEmailOutboxBase & {
+  status: "render-error",
+  simpleStatus: "error",
+  startedRenderingAt: Date,
+  renderedAt: Date,
+  renderError: string,
+};
+
+export type AdminEmailOutboxScheduled = AdminEmailOutboxRenderedFields & {
+  status: "scheduled",
+  simpleStatus: "in-progress",
+};
+
+export type AdminEmailOutboxQueued = AdminEmailOutboxRenderedFields & {
+  status: "queued",
+  simpleStatus: "in-progress",
+};
+
+export type AdminEmailOutboxSending = AdminEmailOutboxStartedSendingFields & {
+  status: "sending",
+  simpleStatus: "in-progress",
+};
+
+export type AdminEmailOutboxServerError = AdminEmailOutboxStartedSendingFields & {
+  status: "server-error",
+  simpleStatus: "error",
+  errorAt: Date,
+  serverError: string,
+};
+
+// SKIPPED can happen at any time, so rendering/sending fields are optional
+// Use Omit to properly override hasRendered from base (can be true or false when skipped)
+export type AdminEmailOutboxSkipped = Omit<AdminEmailOutboxBase, "hasRendered"> & {
+  status: "skipped",
+  simpleStatus: "ok",
+  hasRendered: boolean,
+  skippedAt: Date,
+  skippedReason: string,
+  skippedDetails: Record<string, unknown>,
+  // Optional fields depending on when skipped
+  startedRenderingAt?: Date,
+  renderedAt?: Date,
+  subject?: string,
+  html?: string | null,
+  text?: string | null,
+  isTransactional?: boolean,
+  isHighPriority?: boolean,
+  notificationCategoryId?: string | null,
+  startedSendingAt?: Date,
+};
+
+export type AdminEmailOutboxBounced = AdminEmailOutboxStartedSendingFields & {
+  status: "bounced",
+  simpleStatus: "error",
+  bouncedAt: Date,
+};
+
+export type AdminEmailOutboxDeliveryDelayed = AdminEmailOutboxStartedSendingFields & {
+  status: "delivery-delayed",
+  simpleStatus: "ok",
+  deliveryDelayedAt: Date,
+};
+
+export type AdminEmailOutboxSent = AdminEmailOutboxFinishedDeliveringFields & {
+  status: "sent",
+  simpleStatus: "ok",
+  canHaveDeliveryInfo: boolean,
+};
+
+export type AdminEmailOutboxOpened = AdminEmailOutboxFinishedDeliveringFields & {
+  status: "opened",
+  simpleStatus: "ok",
+  openedAt: Date,
+  canHaveDeliveryInfo: true,
+};
+
+export type AdminEmailOutboxClicked = AdminEmailOutboxFinishedDeliveringFields & {
+  status: "clicked",
+  simpleStatus: "ok",
+  clickedAt: Date,
+  canHaveDeliveryInfo: true,
+};
+
+export type AdminEmailOutboxMarkedAsSpam = AdminEmailOutboxFinishedDeliveringFields & {
+  status: "marked-as-spam",
+  simpleStatus: "ok",
+  markedAsSpamAt: Date,
+  canHaveDeliveryInfo: true,
+};
+
+// =============================== DISCRIMINATED UNION ===============================
+
+export type AdminEmailOutbox =
+  | AdminEmailOutboxPaused
+  | AdminEmailOutboxPreparing
+  | AdminEmailOutboxRendering
+  | AdminEmailOutboxRenderError
+  | AdminEmailOutboxScheduled
+  | AdminEmailOutboxQueued
+  | AdminEmailOutboxSending
+  | AdminEmailOutboxServerError
+  | AdminEmailOutboxSkipped
+  | AdminEmailOutboxBounced
+  | AdminEmailOutboxDeliveryDelayed
+  | AdminEmailOutboxSent
+  | AdminEmailOutboxOpened
+  | AdminEmailOutboxClicked
+  | AdminEmailOutboxMarkedAsSpam;
+
+type SendEmailOptionsBase = {
+  themeId?: string | null | false,
+  subject?: string,
+  notificationCategoryName?: string,
+  scheduledAt?: Date,
+  variables?: Record<string, unknown>,
+}
+
+
+export type SendEmailOptions = SendEmailOptionsBase
+  & XOR<[
+    { userIds: string[] },
+    { allUsers: true }
+  ]>
+  & XOR<[
+    { html: string },
+    { templateId: string },
+    { draftId: string }
+  ]>
+
+export type EmailDeliveryWindowStats = {
+  sent: number,
+  bounced: number,
+  marked_as_spam: number,
+};
+
+export type EmailDeliveryStats = {
+  hour: EmailDeliveryWindowStats,
+  day: EmailDeliveryWindowStats,
+  week: EmailDeliveryWindowStats,
+  month: EmailDeliveryWindowStats,
+};
+
+export type EmailDeliveryCapacity = {
+  rate_per_second: number,
+  boost_multiplier: number,
+  penalty_factor: number,
+  is_boost_active: boolean,
+  boost_expires_at: string | null,
+};
+
+export type EmailDeliveryInfo = {
+  stats: EmailDeliveryStats,
+  capacity: EmailDeliveryCapacity,
+};

package/src/lib/hexclave-app/email-templates/index.ts

@@ -0,0 +1,24 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+import { EmailTemplateCrud, EmailTemplateType } from "@hexclave/shared/dist/interface/crud/email-templates";
+
+
+export type AdminEmailTemplate = {
+  type: EmailTemplateType,
+  subject: string,
+  content: any,
+  isDefault: boolean,
+}
+
+export type AdminEmailTemplateUpdateOptions = {
+  subject?: string,
+  content?: any,
+};
+export function adminEmailTemplateUpdateOptionsToCrud(options: AdminEmailTemplateUpdateOptions): EmailTemplateCrud['Admin']['Update'] {
+  return {
+    subject: options.subject,
+    content: options.content,
+  };
+}

package/src/lib/hexclave-app/index.ts

@@ -0,0 +1,146 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+export {
+  HexclaveAdminApp,
+  HexclaveClientApp,
+  HexclaveServerApp,
+} from "./apps";
+
+// Legacy Stack* aliases — same runtime symbols, kept for backwards compatibility.
+// Prefer the Hexclave* equivalents in new code.
+// The @deprecated JSDoc lives on the original declarations in ./apps/interfaces/*.ts
+// so it survives dts bundling (per-specifier JSDoc on re-exports does not).
+export { StackAdminApp } from "./apps";
+export { StackClientApp } from "./apps";
+export { StackServerApp } from "./apps";
+
+// HexclaveAdminApp / HexclaveClientApp / HexclaveServerApp are already exported above as values
+// (which TypeScript treats as both value and type). Only the constructor / options / JSON
+// helper types need separate type-only re-exports.
+export type {
+  HexclaveAdminAppConstructor,
+  HexclaveAdminAppConstructorOptions,
+  HexclaveClientAppConstructor,
+  HexclaveClientAppConstructorOptions,
+  HexclaveClientAppJson,
+  HexclaveServerAppConstructor,
+  HexclaveServerAppConstructorOptions,
+} from "./apps";
+
+// Legacy Stack* type aliases — @deprecated tags live on the original declarations
+// in ./apps/interfaces/*.ts (per-specifier JSDoc on re-exports doesn't survive dts bundling).
+export type { StackAdminAppConstructor } from "./apps";
+export type { StackAdminAppConstructorOptions } from "./apps";
+export type { StackClientAppConstructor } from "./apps";
+export type { StackClientAppConstructorOptions } from "./apps";
+export type { StackClientAppJson } from "./apps";
+export type { StackServerAppConstructor } from "./apps";
+export type { StackServerAppConstructorOptions } from "./apps";
+
+export type {
+  EmailOutboxListOptions,
+  EmailOutboxListResult,
+  EmailOutboxUpdateOptions
+} from "./apps/interfaces/admin-app";
+
+export type {
+  ProjectConfig
+} from "./project-configs";
+
+export type {
+  InternalApiKey,
+  InternalApiKeyBase,
+  InternalApiKeyBaseCrudRead,
+  InternalApiKeyCreateOptions,
+  InternalApiKeyFirstView
+} from "./internal-api-keys";
+
+export {
+  hexclaveAppInternalsSymbol,
+} from "./common";
+export {
+  getPagePrompt,
+} from "./url-targets";
+export type {
+  GetCurrentUserOptions,
+  /** @deprecated Use GetCurrentUserOptions instead */
+  GetCurrentUserOptions as GetUserOptions,
+  HandlerUrlOptions,
+  HandlerUrls, OAuthScopesOnSignIn, ResolvedHandlerUrls
+} from "./common";
+
+export type {
+  Connection,
+  OAuthConnection
+} from "./connected-accounts";
+
+export type {
+  ContactChannel,
+  ServerContactChannel
+} from "./contact-channels";
+
+export type {
+  AdminEmailOutbox,
+  AdminEmailOutboxRecipient,
+  AdminEmailOutboxSimpleStatus,
+  AdminEmailOutboxStatus,
+  AdminSendAttemptError,
+  AdminSentEmail
+} from "./email";
+
+export type {
+  AdminProjectPermission,
+  AdminProjectPermissionDefinition,
+  AdminProjectPermissionDefinitionCreateOptions,
+  AdminProjectPermissionDefinitionUpdateOptions, AdminTeamPermission,
+  AdminTeamPermissionDefinition,
+  AdminTeamPermissionDefinitionCreateOptions,
+  AdminTeamPermissionDefinitionUpdateOptions
+} from "./permissions";
+
+export type {
+  AdminDomainConfig,
+  AdminEmailConfig,
+  AdminOAuthProviderConfig,
+  AdminProjectConfig,
+  AdminProjectConfigUpdateOptions,
+  OAuthProviderConfig
+} from "./project-configs";
+
+export type {
+  AdminOwnedProject,
+  AdminProject,
+  AdminProjectCreateOptions,
+  AdminProjectUpdateOptions,
+  Project,
+  PushedConfigSource
+} from "./projects";
+
+export type {
+  EditableTeamMemberProfile, ReceivedTeamInvitation,
+  SentTeamInvitation, ServerListUsersOptions,
+  ServerTeam,
+  ServerTeamCreateOptions, ServerTeamMemberProfile,
+  ServerTeamUpdateOptions,
+  ServerTeamUser,
+  Team,
+  TeamCreateOptions,
+  TeamInvitation,
+  TeamMemberProfile,
+  TeamUpdateOptions,
+  TeamUser
+} from "./teams";
+
+export type {
+  Auth,
+  CurrentInternalServerUser,
+  CurrentInternalUser,
+  CurrentServerUser,
+  CurrentUser,
+  OAuthProvider,
+  ServerOAuthProvider,
+  ServerUser,
+  User
+} from "./users";

package/src/lib/hexclave-app/internal-api-keys/index.ts

@@ -0,0 +1,55 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+
+import { InternalApiKeyCreateCrudRequest } from "@hexclave/shared/dist/interface/admin-interface";
+import { InternalApiKeysCrud } from "@hexclave/shared/dist/interface/crud/internal-api-keys";
+
+export type InternalApiKeyBase = {
+  id: string,
+  description: string,
+  expiresAt: Date,
+  manuallyRevokedAt: Date | null,
+  createdAt: Date,
+  isValid(): boolean,
+  whyInvalid(): "expired" | "manually-revoked" | null,
+  revoke(): Promise<void>,
+};
+
+export type InternalApiKeyBaseCrudRead = Pick<InternalApiKeysCrud["Admin"]["Read"], "id" | "created_at_millis" | "description" | "expires_at_millis" | "manually_revoked_at_millis">;
+
+export type InternalApiKeyFirstView = {
+  publishableClientKey?: string,
+  secretServerKey?: string,
+  superSecretAdminKey?: string,
+} & InternalApiKeyBase;
+
+export type InternalApiKey = {
+  publishableClientKey: null | {
+    lastFour: string,
+  },
+  secretServerKey: null | {
+    lastFour: string,
+  },
+  superSecretAdminKey: null | {
+    lastFour: string,
+  },
+} & InternalApiKeyBase;
+
+export type InternalApiKeyCreateOptions = {
+  description: string,
+  expiresAt: Date,
+  hasPublishableClientKey: boolean,
+  hasSecretServerKey: boolean,
+  hasSuperSecretAdminKey: boolean,
+};
+export function internalApiKeyCreateOptionsToCrud(options: InternalApiKeyCreateOptions): InternalApiKeyCreateCrudRequest {
+  return {
+    description: options.description,
+    expires_at_millis: options.expiresAt.getTime(),
+    has_publishable_client_key: options.hasPublishableClientKey,
+    has_secret_server_key: options.hasSecretServerKey,
+    has_super_secret_admin_key: options.hasSuperSecretAdminKey,
+  };
+}

package/src/lib/hexclave-app/notification-categories/index.ts

@@ -0,0 +1,12 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+export type NotificationCategory = {
+  id: string,
+  name: string,
+  enabled: boolean,
+  canDisable: boolean,
+
+  setEnabled(enabled: boolean): Promise<void>,
+}

package/src/lib/hexclave-app/permissions/index.ts

@@ -0,0 +1,75 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+import { ProjectPermissionDefinitionsCrud } from "@hexclave/shared/dist/interface/crud/project-permissions";
+import { TeamPermissionDefinitionsCrud } from "@hexclave/shared/dist/interface/crud/team-permissions";
+
+
+export type TeamPermission = {
+  id: string,
+};
+
+export type AdminTeamPermission = TeamPermission;
+
+export type AdminTeamPermissionDefinition = {
+  id: string,
+  description?: string,
+  containedPermissionIds: string[],
+  isDefaultUserPermission?: boolean,
+};
+
+export type AdminTeamPermissionDefinitionCreateOptions = {
+  id: string,
+  description?: string,
+  containedPermissionIds: string[],
+  isDefaultUserPermission?: boolean,
+};
+export function adminTeamPermissionDefinitionCreateOptionsToCrud(options: AdminTeamPermissionDefinitionCreateOptions): TeamPermissionDefinitionsCrud["Admin"]["Create"] {
+  return {
+    id: options.id,
+    description: options.description,
+    contained_permission_ids: options.containedPermissionIds,
+  };
+}
+
+export type AdminTeamPermissionDefinitionUpdateOptions = Pick<Partial<AdminTeamPermissionDefinitionCreateOptions>, "description" | "containedPermissionIds">;
+export function adminTeamPermissionDefinitionUpdateOptionsToCrud(options: AdminTeamPermissionDefinitionUpdateOptions): TeamPermissionDefinitionsCrud["Admin"]["Update"] {
+  return {
+    description: options.description,
+    contained_permission_ids: options.containedPermissionIds,
+  };
+}
+
+export type ProjectPermission = {
+  id: string,
+};
+
+export type AdminProjectPermission = ProjectPermission;
+
+export type AdminProjectPermissionDefinition = {
+  id: string,
+  description?: string,
+  containedPermissionIds: string[],
+};
+
+export type AdminProjectPermissionDefinitionCreateOptions = {
+  id: string,
+  description?: string,
+  containedPermissionIds: string[],
+};
+export function adminProjectPermissionDefinitionCreateOptionsToCrud(options: AdminProjectPermissionDefinitionCreateOptions): ProjectPermissionDefinitionsCrud["Admin"]["Create"] {
+  return {
+    id: options.id,
+    description: options.description,
+    contained_permission_ids: options.containedPermissionIds,
+  };
+}
+
+export type AdminProjectPermissionDefinitionUpdateOptions = Pick<Partial<AdminProjectPermissionDefinitionCreateOptions>, "description" | "containedPermissionIds">;
+export function adminProjectPermissionDefinitionUpdateOptionsToCrud(options: AdminProjectPermissionDefinitionUpdateOptions): ProjectPermissionDefinitionsCrud["Admin"]["Update"] {
+  return {
+    description: options.description,
+    contained_permission_ids: options.containedPermissionIds,
+  };
+}

package/src/lib/hexclave-app/project-configs/index.ts

@@ -0,0 +1,103 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+import { AdminTeamPermission } from "../permissions";
+
+export type ProjectConfig = {
+  readonly signUpEnabled: boolean,
+  readonly credentialEnabled: boolean,
+  readonly magicLinkEnabled: boolean,
+  readonly passkeyEnabled: boolean,
+  readonly clientTeamCreationEnabled: boolean,
+  readonly clientUserDeletionEnabled: boolean,
+  readonly oauthProviders: OAuthProviderConfig[],
+  readonly allowUserApiKeys: boolean,
+  readonly allowTeamApiKeys: boolean,
+};
+
+export type OAuthProviderConfig = {
+  readonly id: string,
+};
+
+/**
+ * @deprecated This type is deprecated. Use the new config override setup instead.
+ */
+export type AdminProjectConfig = {
+  readonly signUpEnabled: boolean,
+  readonly credentialEnabled: boolean,
+  readonly magicLinkEnabled: boolean,
+  readonly passkeyEnabled: boolean,
+  readonly clientTeamCreationEnabled: boolean,
+  readonly clientUserDeletionEnabled: boolean,
+  readonly allowLocalhost: boolean,
+  readonly oauthProviders: AdminOAuthProviderConfig[],
+  readonly emailConfig?: AdminEmailConfig,
+  readonly emailTheme: string,
+  readonly domains: AdminDomainConfig[],
+  readonly createTeamOnSignUp: boolean,
+  readonly teamCreatorDefaultPermissions: AdminTeamPermission[],
+  readonly teamMemberDefaultPermissions: AdminTeamPermission[],
+  readonly userDefaultPermissions: AdminTeamPermission[],
+  readonly oauthAccountMergeStrategy: 'link_method' | 'raise_error' | 'allow_duplicates',
+  readonly allowUserApiKeys: boolean,
+  readonly allowTeamApiKeys: boolean,
+};
+
+export type AdminEmailConfig = (
+  {
+    type: "standard" | "resend",
+    senderName: string,
+    senderEmail: string,
+    host: string,
+    port: number,
+    username: string,
+    password: string,
+  }
+  | {
+    type: "shared",
+  }
+);
+
+export type AdminDomainConfig = {
+  domain: string,
+  handlerPath: string,
+};
+
+export type AdminOAuthProviderConfig = {
+  id: string,
+} & (
+    | { type: 'shared' }
+    | {
+      type: 'standard',
+      clientId: string,
+      clientSecret: string,
+      facebookConfigId?: string,
+      microsoftTenantId?: string,
+      appleBundleIds?: string[],
+    }
+  ) & OAuthProviderConfig;
+
+export type AdminProjectConfigUpdateOptions = {
+  domains?: {
+    domain: string,
+    handlerPath: string,
+  }[],
+  oauthProviders?: AdminOAuthProviderConfig[],
+  signUpEnabled?: boolean,
+  credentialEnabled?: boolean,
+  magicLinkEnabled?: boolean,
+  passkeyEnabled?: boolean,
+  clientTeamCreationEnabled?: boolean,
+  clientUserDeletionEnabled?: boolean,
+  allowLocalhost?: boolean,
+  createTeamOnSignUp?: boolean,
+  emailConfig?: AdminEmailConfig,
+  emailTheme?: string,
+  teamCreatorDefaultPermissions?: { id: string }[],
+  teamMemberDefaultPermissions?: { id: string }[],
+  userDefaultPermissions?: { id: string }[],
+  oauthAccountMergeStrategy?: 'link_method' | 'raise_error' | 'allow_duplicates',
+  allowUserApiKeys?: boolean,
+  allowTeamApiKeys?: boolean,
+};