@medplum/core 5.1.10 → 5.1.12

package/dist/cjs/index.d.ts

@@ -159,6 +159,10 @@ export declare interface AddressFormatOptions {
     lineSeparator?: string;
 }
 
+export declare type AgentChannelStats = {
+    rtt: AgentRttStats;
+};
+
 export declare interface AgentConnectRequest extends BaseAgentRequestMessage {
     type: 'agent:connect:request';
     agentId: string;
@@ -204,9 +208,51 @@ export declare interface AgentReloadConfigResponse extends BaseAgentMessage {
     statusCode: number;
 }
 
-export declare type AgentRequestMessage = AgentConnectRequest | AgentHeartbeatRequest | AgentTransmitRequest | AgentReloadConfigRequest | AgentUpgradeRequest | AgentLogsRequest;
+export declare type AgentRequestMessage = AgentConnectRequest | AgentHeartbeatRequest | AgentTransmitRequest | AgentReloadConfigRequest | AgentUpgradeRequest | AgentLogsRequest | AgentStatsRequest;
+
+export declare type AgentResponseMessage = AgentConnectResponse | AgentHeartbeatResponse | AgentTransmitResponse | AgentReloadConfigResponse | AgentUpgradeResponse | AgentLogsResponse | AgentStatsResponse | AgentError;
+
+export declare type AgentRttStats = {
+    count: number;
+    min: number;
+    max: number;
+    average: number;
+    p50: number;
+    p95: number;
+    p99: number;
+    pendingCount: number;
+};
+
+export declare type AgentStatPrimitiveValue = string | boolean | number;
+
+/**
+ * Statistics about the running agent. Known fields are typed; additional
+ * fields may be present and are preserved as unknown values.
+ */
+export declare interface AgentStats {
+    hl7ConnectionsOpen: number;
+    ping: number;
+    webSocketQueueDepth: number;
+    hl7QueueDepth: number;
+    hl7ClientCount: number;
+    live: boolean;
+    outstandingHeartbeats: number;
+    channelStats: Record<string, AgentChannelStats>;
+    clientStats: Record<string, AgentChannelStats>;
+    [key: string]: AgentStatValue;
+}
+
+export declare interface AgentStatsRequest extends BaseAgentRequestMessage {
+    type: 'agent:stats:request';
+}
+
+export declare interface AgentStatsResponse extends BaseAgentMessage {
+    type: 'agent:stats:response';
+    statusCode: number;
+    stats: AgentStats;
+}
 
-export declare type AgentResponseMessage = AgentConnectResponse | AgentHeartbeatResponse | AgentTransmitResponse | AgentReloadConfigResponse | AgentUpgradeResponse | AgentLogsResponse | AgentError;
+export declare type AgentStatValue = AgentStatPrimitiveValue | Record<string, AgentStatPrimitiveValue | Record<string, AgentStatPrimitiveValue | Record<string, AgentStatPrimitiveValue>>>;
 
 export declare interface AgentTransmitRequest extends BaseAgentRequestMessage {
     type: 'agent:transmit:request';
@@ -352,7 +398,7 @@ export declare interface BackgroundJobContext {
 
 export declare type BackgroundJobInteraction = 'create' | 'update' | 'delete';
 
-export declare function badRequest(details: string, expression?: string): OperationOutcome;
+export declare function badRequest(details: string, expression?: string | string[]): OperationOutcome;
 
 export declare interface BaseAgentMessage {
     type: string;
@@ -809,6 +855,8 @@ export declare class ContainsAtom extends BooleanInfixOperatorAtom {
     eval(context: AtomContext, input: TypedValue[]): TypedValue[];
 }
 
+export declare function contentTooLarge(text: string): OperationOutcome;
+
 /**
  * Content type constants.
  */
@@ -1180,7 +1228,7 @@ export declare interface ElementType {
 export declare interface EmailPasswordLoginRequest extends BaseLoginRequest {
     readonly email: string;
     readonly password: string;
-    /** @deprecated Use scope of "offline" or "offline_access" instead. */
+    /** @deprecated Use "offline_access" scope instead. */
     readonly remember?: boolean;
 }
 
@@ -2138,6 +2186,8 @@ export declare function getNestedProperty(value: TypedValue | undefined, key: st
     withPath?: false;
 }): (TypedValue | TypedValue[] | undefined)[];
 
+export declare function getOutcomeRedirectUrl(outcome: OperationOutcome | undefined): string | undefined;
+
 export declare function getParsedDerivedIdentifierExpression(originalExpression: string, atom: FhirPathAtom): FhirPathAtom;
 
 export declare function getParsedExpressionForResourceType(resourceType: string, expression: string): FhirPathAtom;
@@ -2434,15 +2484,15 @@ export declare class Hl7Message {
     readonly context: Hl7Context;
     /**
      * Internal lazy-parsed segment storage. Entries are `string` until they
-     * are accessed (via {@link getSegment}, {@link getAllSegments}, {@link header},
-     * or the public {@link segments} getter), at which point they are parsed in
+     * are accessed (via {@link Hl7Message.getSegment}, {@link Hl7Message.getAllSegments}, {@link Hl7Message.header},
+     * or the public {@link Hl7Message.segments} getter), at which point they are parsed in
      * place and replaced with their {@link Hl7Segment} form.
      */
     private readonly _segments;
     /**
-     * Maps segment name → indices into {@link _segments}. Storing indices (rather
+     * Maps segment name → indices into {@link Hl7Message#_segments}. Storing indices (rather
      * than references to the segments themselves) keeps this map in sync with
-     * {@link _segments} without needing a per-parse update step, and is immune to
+     * {@link Hl7Message#_segments} without needing a per-parse update step, and is immune to
      * collisions when two segments have identical raw text.
      */
     private segmentsByName;
@@ -2452,8 +2502,8 @@ export declare class Hl7Message {
     /**
      * Creates a new HL7 message.
      *
-     * Segment strings are not parsed until they are accessed via {@link getSegment},
-     * {@link getAllSegments}, {@link header}, or the {@link segments} getter.
+     * Segment strings are not parsed until they are accessed via {@link Hl7Message.getSegment},
+     * {@link Hl7Message.getAllSegments}, {@link Hl7Message.header}, or the {@link Hl7Message.segments} getter.
      *
      * @param segments - The HL7 segments.
      * @param context - Optional HL7 parsing context.
@@ -2462,7 +2512,7 @@ export declare class Hl7Message {
     /**
      * Returns all HL7 segments, parsing any unparsed segment strings on first access.
      *
-     * Prefer {@link getSegment} or {@link getAllSegments} when you only need a subset
+     * Prefer {@link Hl7Message.getSegment} or {@link Hl7Message.getAllSegments} when you only need a subset
      * of segments; those methods avoid parsing unrelated segments.
      *
      * @returns The HL7 segments array.
@@ -2564,7 +2614,7 @@ export declare class Hl7Segment {
     readonly name: string;
     /**
      * Internal lazy-parsed field storage. Entries are `string` until they are
-     * accessed (via {@link getField} or the public {@link fields} getter), at
+     * accessed (via {@link Hl7Segment.getField} or the public {@link Hl7Segment.fields} getter), at
      * which point they are parsed in place and replaced with their
      * {@link Hl7Field} form.
      */
@@ -2577,8 +2627,8 @@ export declare class Hl7Segment {
     /**
      * Creates a new HL7 segment.
      *
-     * Field strings are not parsed until they are accessed via {@link getField}
-     * or via the {@link fields} getter.
+     * Field strings are not parsed until they are accessed via {@link Hl7Segment.getField}
+     * or via the {@link Hl7Segment.fields} getter.
      *
      * @param fields - The HL7 fields. The first field is the segment name.
      * @param context - Optional HL7 parsing context.
@@ -2587,7 +2637,7 @@ export declare class Hl7Segment {
     /**
      * Returns all HL7 fields, parsing any unparsed field strings on first access.
      *
-     * Prefer {@link getField} when you only need a subset of fields; that method
+     * Prefer {@link Hl7Segment.getField} when you only need a subset of fields; that method
      * avoids parsing unrelated fields.
      *
      * @returns The HL7 fields array.
@@ -3365,6 +3415,7 @@ export declare interface LoggerOptions {
 
 export declare interface LoginAuthenticationResponse {
     readonly login: string;
+    readonly emailVerificationRequired?: boolean;
     readonly mfaEnrollRequired?: boolean;
     readonly mfaRequired?: boolean;
     readonly enrollQrCode?: string;
@@ -4999,10 +5050,27 @@ export declare class MedplumClient extends TypedEventTarget<MedplumClientEventMa
     refreshIfExpired(gracePeriod?: number): Promise<void>;
     /**
      * Tries to refresh the auth tokens.
+     *
+     * When `navigator.locks` is available, the network call is wrapped in a Web Lock
+     * scoped to this client's storage namespace. This serializes refresh attempts across
+     * browser tabs/windows on the same origin so a single-use refresh token is not
+     * consumed by more than one tab. Tabs that wait on the lock re-read the latest
+     * tokens from storage when they acquire it and skip the network call if another tab
+     * has already refreshed.
+     *
+     * @param gracePeriod - Optional grace period in milliseconds threaded through to the post-lock authentication check.
      * @returns The refresh promise if available; otherwise undefined.
      * @see https://openid.net/specs/openid-connect-core-1_0.html#RefreshTokens
      */
     private refresh;
+    /**
+     * Acquires a cross-tab Web Lock (when available) and performs the token refresh.
+     * Tabs that wait on the lock check storage on acquisition and skip the network call
+     * if a peer tab has already produced a fresh access token.
+     * @param gracePeriod - Optional grace period in milliseconds used by the post-lock authentication check to decide whether the current token still has enough life left to skip the network refresh.
+     * @returns Promise that resolves when the refresh (or short-circuit) is complete.
+     */
+    private runRefreshWithLock;
     /**
      * Starts a new OAuth2 client credentials flow.
      *
@@ -5626,8 +5694,12 @@ export declare interface MedplumInfraConfig {
     loadBalancerLoggingBucket?: string;
     loadBalancerLoggingPrefix?: string;
     loadBalancerAlgorithm?: 'round_robin' | 'least_outstanding_requests' | 'weighted_random';
+    guardDutyMalwareProtectionEnabled?: boolean;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
     clamscanEnabled: boolean;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
     clamscanLoggingBucket: string;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
     clamscanLoggingPrefix: string;
     skipDns?: boolean;
     hostedZoneName?: string;
@@ -5852,9 +5924,13 @@ export declare interface MedplumSourceInfraConfig {
     loadBalancerLoggingBucket?: ValueOrExternalSecret<string>;
     loadBalancerLoggingPrefix?: ValueOrExternalSecret<string>;
     loadBalancerAlgorithm?: ValueOrExternalSecret<'round_robin' | 'least_outstanding_requests' | 'weighted_random'>;
-    clamscanEnabled: ValueOrExternalSecret<boolean>;
-    clamscanLoggingBucket: ValueOrExternalSecret<string>;
-    clamscanLoggingPrefix: ValueOrExternalSecret<string>;
+    guardDutyMalwareProtectionEnabled?: ValueOrExternalSecret<boolean>;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
+    clamscanEnabled?: ValueOrExternalSecret<boolean>;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
+    clamscanLoggingBucket?: ValueOrExternalSecret<string>;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
+    clamscanLoggingPrefix?: ValueOrExternalSecret<string>;
     skipDns?: ValueOrExternalSecret<boolean>;
     hostedZoneName?: ValueOrExternalSecret<string>;
     wafLogGroupName?: ValueOrExternalSecret<string>;
@@ -6017,7 +6093,7 @@ export declare interface NewUserRequest {
     readonly lastName: string;
     readonly email: string;
     readonly password: string;
-    readonly recaptchaToken: string;
+    readonly recaptchaToken?: string;
     readonly recaptchaSiteKey?: string;
     readonly remember?: boolean;
     readonly projectId?: string;
@@ -6086,6 +6162,7 @@ export declare type OAuthClientAssertionType = (typeof OAuthClientAssertionType)
  * Standard identifiers: {@link https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-07#name-grant-types}
  * JWT bearer extension: {@link https://datatracker.ietf.org/doc/html/rfc7523}
  * Token exchange extension: {@link https://datatracker.ietf.org/doc/html/rfc8693}
+ * Pre-authorized code: {@link https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#name-urnietfparamsoauthgrant-typ}
  */
 export declare const OAuthGrantType: {
     readonly ClientCredentials: "client_credentials";
@@ -6093,6 +6170,7 @@ export declare const OAuthGrantType: {
     readonly RefreshToken: "refresh_token";
     readonly JwtBearer: "urn:ietf:params:oauth:grant-type:jwt-bearer";
     readonly TokenExchange: "urn:ietf:params:oauth:grant-type:token-exchange";
+    readonly PreAuthorizedCode: "urn:ietf:params:oauth:grant-type:pre-authorized_code";
 };
 
 export declare type OAuthGrantType = (typeof OAuthGrantType)[keyof typeof OAuthGrantType];
@@ -6802,6 +6880,8 @@ export declare class ParserBuilder {
 
  export declare function redirect(url: URL): OperationOutcome;
 
+ export declare function redirectOk(url: URL): OperationOutcome;
+
  export declare type ReleaseManifest = {
      tag_name: string;
      assets: {

package/dist/esm/index.d.ts

@@ -159,6 +159,10 @@ export declare interface AddressFormatOptions {
     lineSeparator?: string;
 }
 
+export declare type AgentChannelStats = {
+    rtt: AgentRttStats;
+};
+
 export declare interface AgentConnectRequest extends BaseAgentRequestMessage {
     type: 'agent:connect:request';
     agentId: string;
@@ -204,9 +208,51 @@ export declare interface AgentReloadConfigResponse extends BaseAgentMessage {
     statusCode: number;
 }
 
-export declare type AgentRequestMessage = AgentConnectRequest | AgentHeartbeatRequest | AgentTransmitRequest | AgentReloadConfigRequest | AgentUpgradeRequest | AgentLogsRequest;
+export declare type AgentRequestMessage = AgentConnectRequest | AgentHeartbeatRequest | AgentTransmitRequest | AgentReloadConfigRequest | AgentUpgradeRequest | AgentLogsRequest | AgentStatsRequest;
+
+export declare type AgentResponseMessage = AgentConnectResponse | AgentHeartbeatResponse | AgentTransmitResponse | AgentReloadConfigResponse | AgentUpgradeResponse | AgentLogsResponse | AgentStatsResponse | AgentError;
+
+export declare type AgentRttStats = {
+    count: number;
+    min: number;
+    max: number;
+    average: number;
+    p50: number;
+    p95: number;
+    p99: number;
+    pendingCount: number;
+};
+
+export declare type AgentStatPrimitiveValue = string | boolean | number;
+
+/**
+ * Statistics about the running agent. Known fields are typed; additional
+ * fields may be present and are preserved as unknown values.
+ */
+export declare interface AgentStats {
+    hl7ConnectionsOpen: number;
+    ping: number;
+    webSocketQueueDepth: number;
+    hl7QueueDepth: number;
+    hl7ClientCount: number;
+    live: boolean;
+    outstandingHeartbeats: number;
+    channelStats: Record<string, AgentChannelStats>;
+    clientStats: Record<string, AgentChannelStats>;
+    [key: string]: AgentStatValue;
+}
+
+export declare interface AgentStatsRequest extends BaseAgentRequestMessage {
+    type: 'agent:stats:request';
+}
+
+export declare interface AgentStatsResponse extends BaseAgentMessage {
+    type: 'agent:stats:response';
+    statusCode: number;
+    stats: AgentStats;
+}
 
-export declare type AgentResponseMessage = AgentConnectResponse | AgentHeartbeatResponse | AgentTransmitResponse | AgentReloadConfigResponse | AgentUpgradeResponse | AgentLogsResponse | AgentError;
+export declare type AgentStatValue = AgentStatPrimitiveValue | Record<string, AgentStatPrimitiveValue | Record<string, AgentStatPrimitiveValue | Record<string, AgentStatPrimitiveValue>>>;
 
 export declare interface AgentTransmitRequest extends BaseAgentRequestMessage {
     type: 'agent:transmit:request';
@@ -352,7 +398,7 @@ export declare interface BackgroundJobContext {
 
 export declare type BackgroundJobInteraction = 'create' | 'update' | 'delete';
 
-export declare function badRequest(details: string, expression?: string): OperationOutcome;
+export declare function badRequest(details: string, expression?: string | string[]): OperationOutcome;
 
 export declare interface BaseAgentMessage {
     type: string;
@@ -809,6 +855,8 @@ export declare class ContainsAtom extends BooleanInfixOperatorAtom {
     eval(context: AtomContext, input: TypedValue[]): TypedValue[];
 }
 
+export declare function contentTooLarge(text: string): OperationOutcome;
+
 /**
  * Content type constants.
  */
@@ -1180,7 +1228,7 @@ export declare interface ElementType {
 export declare interface EmailPasswordLoginRequest extends BaseLoginRequest {
     readonly email: string;
     readonly password: string;
-    /** @deprecated Use scope of "offline" or "offline_access" instead. */
+    /** @deprecated Use "offline_access" scope instead. */
     readonly remember?: boolean;
 }
 
@@ -2138,6 +2186,8 @@ export declare function getNestedProperty(value: TypedValue | undefined, key: st
     withPath?: false;
 }): (TypedValue | TypedValue[] | undefined)[];
 
+export declare function getOutcomeRedirectUrl(outcome: OperationOutcome | undefined): string | undefined;
+
 export declare function getParsedDerivedIdentifierExpression(originalExpression: string, atom: FhirPathAtom): FhirPathAtom;
 
 export declare function getParsedExpressionForResourceType(resourceType: string, expression: string): FhirPathAtom;
@@ -2434,15 +2484,15 @@ export declare class Hl7Message {
     readonly context: Hl7Context;
     /**
      * Internal lazy-parsed segment storage. Entries are `string` until they
-     * are accessed (via {@link getSegment}, {@link getAllSegments}, {@link header},
-     * or the public {@link segments} getter), at which point they are parsed in
+     * are accessed (via {@link Hl7Message.getSegment}, {@link Hl7Message.getAllSegments}, {@link Hl7Message.header},
+     * or the public {@link Hl7Message.segments} getter), at which point they are parsed in
      * place and replaced with their {@link Hl7Segment} form.
      */
     private readonly _segments;
     /**
-     * Maps segment name → indices into {@link _segments}. Storing indices (rather
+     * Maps segment name → indices into {@link Hl7Message#_segments}. Storing indices (rather
      * than references to the segments themselves) keeps this map in sync with
-     * {@link _segments} without needing a per-parse update step, and is immune to
+     * {@link Hl7Message#_segments} without needing a per-parse update step, and is immune to
      * collisions when two segments have identical raw text.
      */
     private segmentsByName;
@@ -2452,8 +2502,8 @@ export declare class Hl7Message {
     /**
      * Creates a new HL7 message.
      *
-     * Segment strings are not parsed until they are accessed via {@link getSegment},
-     * {@link getAllSegments}, {@link header}, or the {@link segments} getter.
+     * Segment strings are not parsed until they are accessed via {@link Hl7Message.getSegment},
+     * {@link Hl7Message.getAllSegments}, {@link Hl7Message.header}, or the {@link Hl7Message.segments} getter.
      *
      * @param segments - The HL7 segments.
      * @param context - Optional HL7 parsing context.
@@ -2462,7 +2512,7 @@ export declare class Hl7Message {
     /**
      * Returns all HL7 segments, parsing any unparsed segment strings on first access.
      *
-     * Prefer {@link getSegment} or {@link getAllSegments} when you only need a subset
+     * Prefer {@link Hl7Message.getSegment} or {@link Hl7Message.getAllSegments} when you only need a subset
      * of segments; those methods avoid parsing unrelated segments.
      *
      * @returns The HL7 segments array.
@@ -2564,7 +2614,7 @@ export declare class Hl7Segment {
     readonly name: string;
     /**
      * Internal lazy-parsed field storage. Entries are `string` until they are
-     * accessed (via {@link getField} or the public {@link fields} getter), at
+     * accessed (via {@link Hl7Segment.getField} or the public {@link Hl7Segment.fields} getter), at
      * which point they are parsed in place and replaced with their
      * {@link Hl7Field} form.
      */
@@ -2577,8 +2627,8 @@ export declare class Hl7Segment {
     /**
      * Creates a new HL7 segment.
      *
-     * Field strings are not parsed until they are accessed via {@link getField}
-     * or via the {@link fields} getter.
+     * Field strings are not parsed until they are accessed via {@link Hl7Segment.getField}
+     * or via the {@link Hl7Segment.fields} getter.
      *
      * @param fields - The HL7 fields. The first field is the segment name.
      * @param context - Optional HL7 parsing context.
@@ -2587,7 +2637,7 @@ export declare class Hl7Segment {
     /**
      * Returns all HL7 fields, parsing any unparsed field strings on first access.
      *
-     * Prefer {@link getField} when you only need a subset of fields; that method
+     * Prefer {@link Hl7Segment.getField} when you only need a subset of fields; that method
      * avoids parsing unrelated fields.
      *
      * @returns The HL7 fields array.
@@ -3365,6 +3415,7 @@ export declare interface LoggerOptions {
 
 export declare interface LoginAuthenticationResponse {
     readonly login: string;
+    readonly emailVerificationRequired?: boolean;
     readonly mfaEnrollRequired?: boolean;
     readonly mfaRequired?: boolean;
     readonly enrollQrCode?: string;
@@ -4999,10 +5050,27 @@ export declare class MedplumClient extends TypedEventTarget<MedplumClientEventMa
     refreshIfExpired(gracePeriod?: number): Promise<void>;
     /**
      * Tries to refresh the auth tokens.
+     *
+     * When `navigator.locks` is available, the network call is wrapped in a Web Lock
+     * scoped to this client's storage namespace. This serializes refresh attempts across
+     * browser tabs/windows on the same origin so a single-use refresh token is not
+     * consumed by more than one tab. Tabs that wait on the lock re-read the latest
+     * tokens from storage when they acquire it and skip the network call if another tab
+     * has already refreshed.
+     *
+     * @param gracePeriod - Optional grace period in milliseconds threaded through to the post-lock authentication check.
      * @returns The refresh promise if available; otherwise undefined.
      * @see https://openid.net/specs/openid-connect-core-1_0.html#RefreshTokens
      */
     private refresh;
+    /**
+     * Acquires a cross-tab Web Lock (when available) and performs the token refresh.
+     * Tabs that wait on the lock check storage on acquisition and skip the network call
+     * if a peer tab has already produced a fresh access token.
+     * @param gracePeriod - Optional grace period in milliseconds used by the post-lock authentication check to decide whether the current token still has enough life left to skip the network refresh.
+     * @returns Promise that resolves when the refresh (or short-circuit) is complete.
+     */
+    private runRefreshWithLock;
     /**
      * Starts a new OAuth2 client credentials flow.
      *
@@ -5626,8 +5694,12 @@ export declare interface MedplumInfraConfig {
     loadBalancerLoggingBucket?: string;
     loadBalancerLoggingPrefix?: string;
     loadBalancerAlgorithm?: 'round_robin' | 'least_outstanding_requests' | 'weighted_random';
+    guardDutyMalwareProtectionEnabled?: boolean;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
     clamscanEnabled: boolean;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
     clamscanLoggingBucket: string;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
     clamscanLoggingPrefix: string;
     skipDns?: boolean;
     hostedZoneName?: string;
@@ -5852,9 +5924,13 @@ export declare interface MedplumSourceInfraConfig {
     loadBalancerLoggingBucket?: ValueOrExternalSecret<string>;
     loadBalancerLoggingPrefix?: ValueOrExternalSecret<string>;
     loadBalancerAlgorithm?: ValueOrExternalSecret<'round_robin' | 'least_outstanding_requests' | 'weighted_random'>;
-    clamscanEnabled: ValueOrExternalSecret<boolean>;
-    clamscanLoggingBucket: ValueOrExternalSecret<string>;
-    clamscanLoggingPrefix: ValueOrExternalSecret<string>;
+    guardDutyMalwareProtectionEnabled?: ValueOrExternalSecret<boolean>;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
+    clamscanEnabled?: ValueOrExternalSecret<boolean>;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
+    clamscanLoggingBucket?: ValueOrExternalSecret<string>;
+    /** @deprecated Use guardDutyMalwareProtectionEnabled instead */
+    clamscanLoggingPrefix?: ValueOrExternalSecret<string>;
     skipDns?: ValueOrExternalSecret<boolean>;
     hostedZoneName?: ValueOrExternalSecret<string>;
     wafLogGroupName?: ValueOrExternalSecret<string>;
@@ -6017,7 +6093,7 @@ export declare interface NewUserRequest {
     readonly lastName: string;
     readonly email: string;
     readonly password: string;
-    readonly recaptchaToken: string;
+    readonly recaptchaToken?: string;
     readonly recaptchaSiteKey?: string;
     readonly remember?: boolean;
     readonly projectId?: string;
@@ -6086,6 +6162,7 @@ export declare type OAuthClientAssertionType = (typeof OAuthClientAssertionType)
  * Standard identifiers: {@link https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-07#name-grant-types}
  * JWT bearer extension: {@link https://datatracker.ietf.org/doc/html/rfc7523}
  * Token exchange extension: {@link https://datatracker.ietf.org/doc/html/rfc8693}
+ * Pre-authorized code: {@link https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html#name-urnietfparamsoauthgrant-typ}
  */
 export declare const OAuthGrantType: {
     readonly ClientCredentials: "client_credentials";
@@ -6093,6 +6170,7 @@ export declare const OAuthGrantType: {
     readonly RefreshToken: "refresh_token";
     readonly JwtBearer: "urn:ietf:params:oauth:grant-type:jwt-bearer";
     readonly TokenExchange: "urn:ietf:params:oauth:grant-type:token-exchange";
+    readonly PreAuthorizedCode: "urn:ietf:params:oauth:grant-type:pre-authorized_code";
 };
 
 export declare type OAuthGrantType = (typeof OAuthGrantType)[keyof typeof OAuthGrantType];
@@ -6802,6 +6880,8 @@ export declare class ParserBuilder {
 
  export declare function redirect(url: URL): OperationOutcome;
 
+ export declare function redirectOk(url: URL): OperationOutcome;
+
  export declare type ReleaseManifest = {
      tag_name: string;
      assets: {