@nauth-toolkit/core 0.1.77 → 0.1.78

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. package/dist/dto/social-auth.dto.d.ts +62 -0
  2. package/dist/dto/social-auth.dto.d.ts.map +1 -1
  3. package/dist/dto/social-auth.dto.js +108 -1
  4. package/dist/dto/social-auth.dto.js.map +1 -1
  5. package/dist/interfaces/token-verifier.interface.d.ts +26 -0
  6. package/dist/interfaces/token-verifier.interface.d.ts.map +1 -1
  7. package/dist/schemas/auth-config.schema.d.ts +3598 -390
  8. package/dist/schemas/auth-config.schema.d.ts.map +1 -1
  9. package/package.json +1 -1
package/dist/schemas/auth-config.schema.d.ts CHANGED
@@ -27,38 +27,110 @@ import { z } from 'zod';
27
27
  /**
28
28
  * JWT configuration schema
29
29
  */
30
- export declare const jwtConfigSchema: z.ZodObject<{
31
- algorithm: z.ZodOptional<z.ZodEnum<{
32
- HS256: "HS256";
33
- HS384: "HS384";
34
- HS512: "HS512";
35
- RS256: "RS256";
36
- RS384: "RS384";
37
- RS512: "RS512";
38
- }>>;
30
+ export declare const jwtConfigSchema: z.ZodEffects<z.ZodObject<{
31
+ algorithm: z.ZodOptional<z.ZodEnum<["HS256", "HS384", "HS512", "RS256", "RS384", "RS512"]>>;
39
32
  accessToken: z.ZodObject<{
40
33
  secret: z.ZodOptional<z.ZodString>;
41
34
  privateKey: z.ZodOptional<z.ZodString>;
42
35
  publicKey: z.ZodOptional<z.ZodString>;
43
- expiresIn: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
44
- }, z.core.$strip>;
36
+ expiresIn: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
37
+ }, "strip", z.ZodTypeAny, {
38
+ expiresIn: string | number;
39
+ secret?: string | undefined;
40
+ publicKey?: string | undefined;
41
+ privateKey?: string | undefined;
42
+ }, {
43
+ expiresIn: string | number;
44
+ secret?: string | undefined;
45
+ publicKey?: string | undefined;
46
+ privateKey?: string | undefined;
47
+ }>;
45
48
  refreshToken: z.ZodObject<{
46
49
  secret: z.ZodString;
47
- expiresIn: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
50
+ expiresIn: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
48
51
  rotation: z.ZodOptional<z.ZodBoolean>;
49
52
  reuseDetection: z.ZodOptional<z.ZodBoolean>;
50
- }, z.core.$strip>;
53
+ }, "strip", z.ZodTypeAny, {
54
+ expiresIn: string | number;
55
+ secret: string;
56
+ rotation?: boolean | undefined;
57
+ reuseDetection?: boolean | undefined;
58
+ }, {
59
+ expiresIn: string | number;
60
+ secret: string;
61
+ rotation?: boolean | undefined;
62
+ reuseDetection?: boolean | undefined;
63
+ }>;
51
64
  issuer: z.ZodOptional<z.ZodString>;
52
- audience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
53
- }, z.core.$strip>;
65
+ audience: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
66
+ }, "strip", z.ZodTypeAny, {
67
+ accessToken: {
68
+ expiresIn: string | number;
69
+ secret?: string | undefined;
70
+ publicKey?: string | undefined;
71
+ privateKey?: string | undefined;
72
+ };
73
+ refreshToken: {
74
+ expiresIn: string | number;
75
+ secret: string;
76
+ rotation?: boolean | undefined;
77
+ reuseDetection?: boolean | undefined;
78
+ };
79
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
80
+ issuer?: string | undefined;
81
+ audience?: string | string[] | undefined;
82
+ }, {
83
+ accessToken: {
84
+ expiresIn: string | number;
85
+ secret?: string | undefined;
86
+ publicKey?: string | undefined;
87
+ privateKey?: string | undefined;
88
+ };
89
+ refreshToken: {
90
+ expiresIn: string | number;
91
+ secret: string;
92
+ rotation?: boolean | undefined;
93
+ reuseDetection?: boolean | undefined;
94
+ };
95
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
96
+ issuer?: string | undefined;
97
+ audience?: string | string[] | undefined;
98
+ }>, {
99
+ accessToken: {
100
+ expiresIn: string | number;
101
+ secret?: string | undefined;
102
+ publicKey?: string | undefined;
103
+ privateKey?: string | undefined;
104
+ };
105
+ refreshToken: {
106
+ expiresIn: string | number;
107
+ secret: string;
108
+ rotation?: boolean | undefined;
109
+ reuseDetection?: boolean | undefined;
110
+ };
111
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
112
+ issuer?: string | undefined;
113
+ audience?: string | string[] | undefined;
114
+ }, {
115
+ accessToken: {
116
+ expiresIn: string | number;
117
+ secret?: string | undefined;
118
+ publicKey?: string | undefined;
119
+ privateKey?: string | undefined;
120
+ };
121
+ refreshToken: {
122
+ expiresIn: string | number;
123
+ secret: string;
124
+ rotation?: boolean | undefined;
125
+ reuseDetection?: boolean | undefined;
126
+ };
127
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
128
+ issuer?: string | undefined;
129
+ audience?: string | string[] | undefined;
130
+ }>;
54
131
  export declare const signupConfigSchema: z.ZodObject<{
55
132
  enabled: z.ZodOptional<z.ZodBoolean>;
56
- verificationMethod: z.ZodOptional<z.ZodEnum<{
57
- none: "none";
58
- email: "email";
59
- phone: "phone";
60
- both: "both";
61
- }>>;
133
+ verificationMethod: z.ZodOptional<z.ZodEnum<["none", "email", "phone", "both"]>>;
62
134
  allowDuplicatePhones: z.ZodOptional<z.ZodBoolean>;
63
135
  emailVerification: z.ZodOptional<z.ZodObject<{
64
136
  expiresIn: z.ZodOptional<z.ZodNumber>;
@@ -70,7 +142,27 @@ export declare const signupConfigSchema: z.ZodObject<{
70
142
  maxAttemptsPerIP: z.ZodOptional<z.ZodNumber>;
71
143
  attemptWindow: z.ZodOptional<z.ZodNumber>;
72
144
  baseUrl: z.ZodOptional<z.ZodString>;
73
- }, z.core.$strip>>;
145
+ }, "strip", z.ZodTypeAny, {
146
+ expiresIn?: number | undefined;
147
+ baseUrl?: string | undefined;
148
+ maxAttempts?: number | undefined;
149
+ resendDelay?: number | undefined;
150
+ rateLimitMax?: number | undefined;
151
+ rateLimitWindow?: number | undefined;
152
+ maxAttemptsPerUser?: number | undefined;
153
+ maxAttemptsPerIP?: number | undefined;
154
+ attemptWindow?: number | undefined;
155
+ }, {
156
+ expiresIn?: number | undefined;
157
+ baseUrl?: string | undefined;
158
+ maxAttempts?: number | undefined;
159
+ resendDelay?: number | undefined;
160
+ rateLimitMax?: number | undefined;
161
+ rateLimitWindow?: number | undefined;
162
+ maxAttemptsPerUser?: number | undefined;
163
+ maxAttemptsPerIP?: number | undefined;
164
+ attemptWindow?: number | undefined;
165
+ }>>;
74
166
  phoneVerification: z.ZodOptional<z.ZodObject<{
75
167
  codeLength: z.ZodOptional<z.ZodNumber>;
76
168
  expiresIn: z.ZodOptional<z.ZodNumber>;
@@ -81,17 +173,92 @@ export declare const signupConfigSchema: z.ZodObject<{
81
173
  maxAttemptsPerUser: z.ZodOptional<z.ZodNumber>;
82
174
  maxAttemptsPerIP: z.ZodOptional<z.ZodNumber>;
83
175
  attemptWindow: z.ZodOptional<z.ZodNumber>;
84
- baseUrl: z.ZodOptional<z.ZodString>;
85
- }, z.core.$strip>>;
86
- }, z.core.$strip>;
87
- export declare const loginConfigSchema: z.ZodObject<{
88
- identifierType: z.ZodOptional<z.ZodEnum<{
89
- email: "email";
90
- phone: "phone";
91
- username: "username";
92
- email_or_username: "email_or_username";
176
+ baseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
177
+ }, "strip", z.ZodTypeAny, {
178
+ expiresIn?: number | undefined;
179
+ baseUrl?: string | undefined;
180
+ maxAttempts?: number | undefined;
181
+ resendDelay?: number | undefined;
182
+ rateLimitMax?: number | undefined;
183
+ rateLimitWindow?: number | undefined;
184
+ maxAttemptsPerUser?: number | undefined;
185
+ maxAttemptsPerIP?: number | undefined;
186
+ attemptWindow?: number | undefined;
187
+ codeLength?: number | undefined;
188
+ }, {
189
+ expiresIn?: number | undefined;
190
+ baseUrl?: string | undefined;
191
+ maxAttempts?: number | undefined;
192
+ resendDelay?: number | undefined;
193
+ rateLimitMax?: number | undefined;
194
+ rateLimitWindow?: number | undefined;
195
+ maxAttemptsPerUser?: number | undefined;
196
+ maxAttemptsPerIP?: number | undefined;
197
+ attemptWindow?: number | undefined;
198
+ codeLength?: number | undefined;
93
199
  }>>;
94
- }, z.core.$strip>;
200
+ }, "strip", z.ZodTypeAny, {
201
+ enabled?: boolean | undefined;
202
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
203
+ allowDuplicatePhones?: boolean | undefined;
204
+ emailVerification?: {
205
+ expiresIn?: number | undefined;
206
+ baseUrl?: string | undefined;
207
+ maxAttempts?: number | undefined;
208
+ resendDelay?: number | undefined;
209
+ rateLimitMax?: number | undefined;
210
+ rateLimitWindow?: number | undefined;
211
+ maxAttemptsPerUser?: number | undefined;
212
+ maxAttemptsPerIP?: number | undefined;
213
+ attemptWindow?: number | undefined;
214
+ } | undefined;
215
+ phoneVerification?: {
216
+ expiresIn?: number | undefined;
217
+ baseUrl?: string | undefined;
218
+ maxAttempts?: number | undefined;
219
+ resendDelay?: number | undefined;
220
+ rateLimitMax?: number | undefined;
221
+ rateLimitWindow?: number | undefined;
222
+ maxAttemptsPerUser?: number | undefined;
223
+ maxAttemptsPerIP?: number | undefined;
224
+ attemptWindow?: number | undefined;
225
+ codeLength?: number | undefined;
226
+ } | undefined;
227
+ }, {
228
+ enabled?: boolean | undefined;
229
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
230
+ allowDuplicatePhones?: boolean | undefined;
231
+ emailVerification?: {
232
+ expiresIn?: number | undefined;
233
+ baseUrl?: string | undefined;
234
+ maxAttempts?: number | undefined;
235
+ resendDelay?: number | undefined;
236
+ rateLimitMax?: number | undefined;
237
+ rateLimitWindow?: number | undefined;
238
+ maxAttemptsPerUser?: number | undefined;
239
+ maxAttemptsPerIP?: number | undefined;
240
+ attemptWindow?: number | undefined;
241
+ } | undefined;
242
+ phoneVerification?: {
243
+ expiresIn?: number | undefined;
244
+ baseUrl?: string | undefined;
245
+ maxAttempts?: number | undefined;
246
+ resendDelay?: number | undefined;
247
+ rateLimitMax?: number | undefined;
248
+ rateLimitWindow?: number | undefined;
249
+ maxAttemptsPerUser?: number | undefined;
250
+ maxAttemptsPerIP?: number | undefined;
251
+ attemptWindow?: number | undefined;
252
+ codeLength?: number | undefined;
253
+ } | undefined;
254
+ }>;
255
+ export declare const loginConfigSchema: z.ZodObject<{
256
+ identifierType: z.ZodOptional<z.ZodEnum<["email", "username", "phone", "email_or_username"]>>;
257
+ }, "strip", z.ZodTypeAny, {
258
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
259
+ }, {
260
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
261
+ }>;
95
262
  export declare const passwordConfigSchema: z.ZodObject<{
96
263
  minLength: z.ZodOptional<z.ZodNumber>;
97
264
  maxLength: z.ZodOptional<z.ZodNumber>;
@@ -110,38 +277,162 @@ export declare const passwordConfigSchema: z.ZodObject<{
110
277
  rateLimitMax: z.ZodOptional<z.ZodNumber>;
111
278
  rateLimitWindow: z.ZodOptional<z.ZodNumber>;
112
279
  maxAttempts: z.ZodOptional<z.ZodNumber>;
113
- }, z.core.$strip>>;
114
- }, z.core.$strip>;
280
+ }, "strip", z.ZodTypeAny, {
281
+ expiresIn?: number | undefined;
282
+ maxAttempts?: number | undefined;
283
+ rateLimitMax?: number | undefined;
284
+ rateLimitWindow?: number | undefined;
285
+ codeLength?: number | undefined;
286
+ }, {
287
+ expiresIn?: number | undefined;
288
+ maxAttempts?: number | undefined;
289
+ rateLimitMax?: number | undefined;
290
+ rateLimitWindow?: number | undefined;
291
+ codeLength?: number | undefined;
292
+ }>>;
293
+ }, "strip", z.ZodTypeAny, {
294
+ passwordReset?: {
295
+ expiresIn?: number | undefined;
296
+ maxAttempts?: number | undefined;
297
+ rateLimitMax?: number | undefined;
298
+ rateLimitWindow?: number | undefined;
299
+ codeLength?: number | undefined;
300
+ } | undefined;
301
+ minLength?: number | undefined;
302
+ maxLength?: number | undefined;
303
+ requireUppercase?: boolean | undefined;
304
+ requireLowercase?: boolean | undefined;
305
+ requireNumbers?: boolean | undefined;
306
+ requireSpecialChars?: boolean | undefined;
307
+ specialChars?: string | undefined;
308
+ preventCommon?: boolean | undefined;
309
+ preventUserInfo?: boolean | undefined;
310
+ historyCount?: number | undefined;
311
+ expiryDays?: number | undefined;
312
+ }, {
313
+ passwordReset?: {
314
+ expiresIn?: number | undefined;
315
+ maxAttempts?: number | undefined;
316
+ rateLimitMax?: number | undefined;
317
+ rateLimitWindow?: number | undefined;
318
+ codeLength?: number | undefined;
319
+ } | undefined;
320
+ minLength?: number | undefined;
321
+ maxLength?: number | undefined;
322
+ requireUppercase?: boolean | undefined;
323
+ requireLowercase?: boolean | undefined;
324
+ requireNumbers?: boolean | undefined;
325
+ requireSpecialChars?: boolean | undefined;
326
+ specialChars?: string | undefined;
327
+ preventCommon?: boolean | undefined;
328
+ preventUserInfo?: boolean | undefined;
329
+ historyCount?: number | undefined;
330
+ expiryDays?: number | undefined;
331
+ }>;
115
332
  export declare const lockoutConfigSchema: z.ZodObject<{
116
333
  enabled: z.ZodOptional<z.ZodBoolean>;
117
334
  maxAttempts: z.ZodOptional<z.ZodNumber>;
118
335
  attemptWindow: z.ZodOptional<z.ZodNumber>;
119
336
  duration: z.ZodOptional<z.ZodNumber>;
120
337
  resetOnSuccess: z.ZodOptional<z.ZodBoolean>;
121
- }, z.core.$strip>;
338
+ }, "strip", z.ZodTypeAny, {
339
+ enabled?: boolean | undefined;
340
+ duration?: number | undefined;
341
+ maxAttempts?: number | undefined;
342
+ attemptWindow?: number | undefined;
343
+ resetOnSuccess?: boolean | undefined;
344
+ }, {
345
+ enabled?: boolean | undefined;
346
+ duration?: number | undefined;
347
+ maxAttempts?: number | undefined;
348
+ attemptWindow?: number | undefined;
349
+ resetOnSuccess?: boolean | undefined;
350
+ }>;
122
351
  export declare const sessionConfigSchema: z.ZodObject<{
123
352
  maxConcurrent: z.ZodOptional<z.ZodNumber>;
124
353
  disallowMultipleSessions: z.ZodOptional<z.ZodBoolean>;
125
- maxLifetime: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
126
- }, z.core.$strip>;
354
+ maxLifetime: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
355
+ }, "strip", z.ZodTypeAny, {
356
+ maxConcurrent?: number | undefined;
357
+ disallowMultipleSessions?: boolean | undefined;
358
+ maxLifetime?: string | number | undefined;
359
+ }, {
360
+ maxConcurrent?: number | undefined;
361
+ disallowMultipleSessions?: boolean | undefined;
362
+ maxLifetime?: string | number | undefined;
363
+ }>;
127
364
  export declare const securityConfigSchema: z.ZodObject<{
128
365
  csrf: z.ZodOptional<z.ZodObject<{
129
366
  cookieName: z.ZodOptional<z.ZodString>;
130
367
  headerName: z.ZodOptional<z.ZodString>;
131
368
  tokenLength: z.ZodOptional<z.ZodNumber>;
132
- excludedPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
369
+ excludedPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
133
370
  cookieOptions: z.ZodOptional<z.ZodObject<{
134
371
  secure: z.ZodOptional<z.ZodBoolean>;
135
- sameSite: z.ZodOptional<z.ZodEnum<{
136
- strict: "strict";
137
- lax: "lax";
138
- none: "none";
139
- }>>;
372
+ sameSite: z.ZodOptional<z.ZodEnum<["strict", "lax", "none"]>>;
140
373
  domain: z.ZodOptional<z.ZodString>;
141
374
  path: z.ZodOptional<z.ZodString>;
142
- }, z.core.$strip>>;
143
- }, z.core.$strip>>;
144
- }, z.core.$strip>;
375
+ }, "strip", z.ZodTypeAny, {
376
+ secure?: boolean | undefined;
377
+ sameSite?: "strict" | "lax" | "none" | undefined;
378
+ domain?: string | undefined;
379
+ path?: string | undefined;
380
+ }, {
381
+ secure?: boolean | undefined;
382
+ sameSite?: "strict" | "lax" | "none" | undefined;
383
+ domain?: string | undefined;
384
+ path?: string | undefined;
385
+ }>>;
386
+ }, "strip", z.ZodTypeAny, {
387
+ cookieName?: string | undefined;
388
+ headerName?: string | undefined;
389
+ tokenLength?: number | undefined;
390
+ excludedPaths?: string[] | undefined;
391
+ cookieOptions?: {
392
+ secure?: boolean | undefined;
393
+ sameSite?: "strict" | "lax" | "none" | undefined;
394
+ domain?: string | undefined;
395
+ path?: string | undefined;
396
+ } | undefined;
397
+ }, {
398
+ cookieName?: string | undefined;
399
+ headerName?: string | undefined;
400
+ tokenLength?: number | undefined;
401
+ excludedPaths?: string[] | undefined;
402
+ cookieOptions?: {
403
+ secure?: boolean | undefined;
404
+ sameSite?: "strict" | "lax" | "none" | undefined;
405
+ domain?: string | undefined;
406
+ path?: string | undefined;
407
+ } | undefined;
408
+ }>>;
409
+ }, "strip", z.ZodTypeAny, {
410
+ csrf?: {
411
+ cookieName?: string | undefined;
412
+ headerName?: string | undefined;
413
+ tokenLength?: number | undefined;
414
+ excludedPaths?: string[] | undefined;
415
+ cookieOptions?: {
416
+ secure?: boolean | undefined;
417
+ sameSite?: "strict" | "lax" | "none" | undefined;
418
+ domain?: string | undefined;
419
+ path?: string | undefined;
420
+ } | undefined;
421
+ } | undefined;
422
+ }, {
423
+ csrf?: {
424
+ cookieName?: string | undefined;
425
+ headerName?: string | undefined;
426
+ tokenLength?: number | undefined;
427
+ excludedPaths?: string[] | undefined;
428
+ cookieOptions?: {
429
+ secure?: boolean | undefined;
430
+ sameSite?: "strict" | "lax" | "none" | undefined;
431
+ domain?: string | undefined;
432
+ path?: string | undefined;
433
+ } | undefined;
434
+ } | undefined;
435
+ }>;
145
436
  /**
146
437
  * Email configuration schema
147
438
  */
@@ -155,212 +446,681 @@ export declare const emailConfigSchema: z.ZodObject<{
155
446
  dashboardUrl: z.ZodOptional<z.ZodString>;
156
447
  supportEmail: z.ZodOptional<z.ZodString>;
157
448
  footerDisclaimer: z.ZodOptional<z.ZodString>;
158
- }, z.core.$catchall<z.ZodUnknown>>>;
449
+ }, "strip", z.ZodUnknown, z.objectOutputType<{
450
+ appName: z.ZodOptional<z.ZodString>;
451
+ companyName: z.ZodOptional<z.ZodString>;
452
+ companyAddress: z.ZodOptional<z.ZodString>;
453
+ brandColor: z.ZodOptional<z.ZodString>;
454
+ logoUrl: z.ZodOptional<z.ZodString>;
455
+ dashboardUrl: z.ZodOptional<z.ZodString>;
456
+ supportEmail: z.ZodOptional<z.ZodString>;
457
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
458
+ }, z.ZodUnknown, "strip">, z.objectInputType<{
459
+ appName: z.ZodOptional<z.ZodString>;
460
+ companyName: z.ZodOptional<z.ZodString>;
461
+ companyAddress: z.ZodOptional<z.ZodString>;
462
+ brandColor: z.ZodOptional<z.ZodString>;
463
+ logoUrl: z.ZodOptional<z.ZodString>;
464
+ dashboardUrl: z.ZodOptional<z.ZodString>;
465
+ supportEmail: z.ZodOptional<z.ZodString>;
466
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
467
+ }, z.ZodUnknown, "strip">>>;
159
468
  templates: z.ZodOptional<z.ZodObject<{
160
469
  engine: z.ZodOptional<z.ZodAny>;
161
- customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
470
+ customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
162
471
  htmlPath: z.ZodOptional<z.ZodString>;
163
472
  html: z.ZodOptional<z.ZodString>;
164
473
  textPath: z.ZodOptional<z.ZodString>;
165
474
  text: z.ZodOptional<z.ZodString>;
166
475
  subject: z.ZodOptional<z.ZodString>;
167
- }, z.core.$strip>>>;
168
- }, z.core.$strict>>;
169
- }, z.core.$strict>;
476
+ }, "strip", z.ZodTypeAny, {
477
+ htmlPath?: string | undefined;
478
+ html?: string | undefined;
479
+ textPath?: string | undefined;
480
+ text?: string | undefined;
481
+ subject?: string | undefined;
482
+ }, {
483
+ htmlPath?: string | undefined;
484
+ html?: string | undefined;
485
+ textPath?: string | undefined;
486
+ text?: string | undefined;
487
+ subject?: string | undefined;
488
+ }>, {
489
+ htmlPath?: string | undefined;
490
+ html?: string | undefined;
491
+ textPath?: string | undefined;
492
+ text?: string | undefined;
493
+ subject?: string | undefined;
494
+ }, {
495
+ htmlPath?: string | undefined;
496
+ html?: string | undefined;
497
+ textPath?: string | undefined;
498
+ text?: string | undefined;
499
+ subject?: string | undefined;
500
+ }>, {
501
+ htmlPath?: string | undefined;
502
+ html?: string | undefined;
503
+ textPath?: string | undefined;
504
+ text?: string | undefined;
505
+ subject?: string | undefined;
506
+ }, {
507
+ htmlPath?: string | undefined;
508
+ html?: string | undefined;
509
+ textPath?: string | undefined;
510
+ text?: string | undefined;
511
+ subject?: string | undefined;
512
+ }>, {
513
+ htmlPath?: string | undefined;
514
+ html?: string | undefined;
515
+ textPath?: string | undefined;
516
+ text?: string | undefined;
517
+ subject?: string | undefined;
518
+ }, {
519
+ htmlPath?: string | undefined;
520
+ html?: string | undefined;
521
+ textPath?: string | undefined;
522
+ text?: string | undefined;
523
+ subject?: string | undefined;
524
+ }>>>;
525
+ }, "strict", z.ZodTypeAny, {
526
+ engine?: any;
527
+ customTemplates?: Record<string, {
528
+ htmlPath?: string | undefined;
529
+ html?: string | undefined;
530
+ textPath?: string | undefined;
531
+ text?: string | undefined;
532
+ subject?: string | undefined;
533
+ }> | undefined;
534
+ }, {
535
+ engine?: any;
536
+ customTemplates?: Record<string, {
537
+ htmlPath?: string | undefined;
538
+ html?: string | undefined;
539
+ textPath?: string | undefined;
540
+ text?: string | undefined;
541
+ subject?: string | undefined;
542
+ }> | undefined;
543
+ }>>;
544
+ }, "strict", z.ZodTypeAny, {
545
+ globalVariables?: z.objectOutputType<{
546
+ appName: z.ZodOptional<z.ZodString>;
547
+ companyName: z.ZodOptional<z.ZodString>;
548
+ companyAddress: z.ZodOptional<z.ZodString>;
549
+ brandColor: z.ZodOptional<z.ZodString>;
550
+ logoUrl: z.ZodOptional<z.ZodString>;
551
+ dashboardUrl: z.ZodOptional<z.ZodString>;
552
+ supportEmail: z.ZodOptional<z.ZodString>;
553
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
554
+ }, z.ZodUnknown, "strip"> | undefined;
555
+ templates?: {
556
+ engine?: any;
557
+ customTemplates?: Record<string, {
558
+ htmlPath?: string | undefined;
559
+ html?: string | undefined;
560
+ textPath?: string | undefined;
561
+ text?: string | undefined;
562
+ subject?: string | undefined;
563
+ }> | undefined;
564
+ } | undefined;
565
+ }, {
566
+ globalVariables?: z.objectInputType<{
567
+ appName: z.ZodOptional<z.ZodString>;
568
+ companyName: z.ZodOptional<z.ZodString>;
569
+ companyAddress: z.ZodOptional<z.ZodString>;
570
+ brandColor: z.ZodOptional<z.ZodString>;
571
+ logoUrl: z.ZodOptional<z.ZodString>;
572
+ dashboardUrl: z.ZodOptional<z.ZodString>;
573
+ supportEmail: z.ZodOptional<z.ZodString>;
574
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
575
+ }, z.ZodUnknown, "strip"> | undefined;
576
+ templates?: {
577
+ engine?: any;
578
+ customTemplates?: Record<string, {
579
+ htmlPath?: string | undefined;
580
+ html?: string | undefined;
581
+ textPath?: string | undefined;
582
+ text?: string | undefined;
583
+ subject?: string | undefined;
584
+ }> | undefined;
585
+ } | undefined;
586
+ }>;
170
587
  /**
171
588
  * SMS configuration schema
172
589
  */
173
590
  export declare const smsConfigSchema: z.ZodObject<{
174
591
  templates: z.ZodOptional<z.ZodObject<{
175
592
  engine: z.ZodOptional<z.ZodAny>;
176
- globalVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
177
- customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
593
+ globalVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
594
+ customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodObject<{
178
595
  contentPath: z.ZodOptional<z.ZodString>;
179
596
  content: z.ZodOptional<z.ZodString>;
180
- }, z.core.$strip>>>;
181
- }, z.core.$strip>>;
182
- }, z.core.$strip>;
183
- export declare const phoneConfigSchema: z.ZodObject<{}, z.core.$strip>;
597
+ }, "strip", z.ZodTypeAny, {
598
+ contentPath?: string | undefined;
599
+ content?: string | undefined;
600
+ }, {
601
+ contentPath?: string | undefined;
602
+ content?: string | undefined;
603
+ }>, {
604
+ contentPath?: string | undefined;
605
+ content?: string | undefined;
606
+ }, {
607
+ contentPath?: string | undefined;
608
+ content?: string | undefined;
609
+ }>, {
610
+ contentPath?: string | undefined;
611
+ content?: string | undefined;
612
+ }, {
613
+ contentPath?: string | undefined;
614
+ content?: string | undefined;
615
+ }>>>;
616
+ }, "strip", z.ZodTypeAny, {
617
+ engine?: any;
618
+ customTemplates?: Record<string, {
619
+ contentPath?: string | undefined;
620
+ content?: string | undefined;
621
+ }> | undefined;
622
+ globalVariables?: Record<string, string | number | boolean> | undefined;
623
+ }, {
624
+ engine?: any;
625
+ customTemplates?: Record<string, {
626
+ contentPath?: string | undefined;
627
+ content?: string | undefined;
628
+ }> | undefined;
629
+ globalVariables?: Record<string, string | number | boolean> | undefined;
630
+ }>>;
631
+ }, "strip", z.ZodTypeAny, {
632
+ templates?: {
633
+ engine?: any;
634
+ customTemplates?: Record<string, {
635
+ contentPath?: string | undefined;
636
+ content?: string | undefined;
637
+ }> | undefined;
638
+ globalVariables?: Record<string, string | number | boolean> | undefined;
639
+ } | undefined;
640
+ }, {
641
+ templates?: {
642
+ engine?: any;
643
+ customTemplates?: Record<string, {
644
+ contentPath?: string | undefined;
645
+ content?: string | undefined;
646
+ }> | undefined;
647
+ globalVariables?: Record<string, string | number | boolean> | undefined;
648
+ } | undefined;
649
+ }>;
650
+ export declare const phoneConfigSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
184
651
  export declare const socialProviderConfigSchema: z.ZodObject<{
185
652
  enabled: z.ZodOptional<z.ZodBoolean>;
186
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
653
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
187
654
  clientSecret: z.ZodOptional<z.ZodString>;
188
655
  callbackUrl: z.ZodOptional<z.ZodString>;
189
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
656
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
190
657
  autoLink: z.ZodOptional<z.ZodBoolean>;
191
658
  allowSignup: z.ZodOptional<z.ZodBoolean>;
192
- }, z.core.$strip>;
659
+ }, "strip", z.ZodTypeAny, {
660
+ clientSecret?: string | undefined;
661
+ enabled?: boolean | undefined;
662
+ clientId?: string | string[] | undefined;
663
+ callbackUrl?: string | undefined;
664
+ scopes?: string[] | undefined;
665
+ autoLink?: boolean | undefined;
666
+ allowSignup?: boolean | undefined;
667
+ }, {
668
+ clientSecret?: string | undefined;
669
+ enabled?: boolean | undefined;
670
+ clientId?: string | string[] | undefined;
671
+ callbackUrl?: string | undefined;
672
+ scopes?: string[] | undefined;
673
+ autoLink?: boolean | undefined;
674
+ allowSignup?: boolean | undefined;
675
+ }>;
193
676
  /**
194
677
  * Apple-specific social provider configuration schema
195
678
  *
196
679
  * Apple requires teamId, keyId, and privateKeyPem instead of a static clientSecret.
197
680
  * The toolkit will automatically generate and refresh the JWT client secret.
198
681
  */
199
- export declare const appleSocialProviderConfigSchema: z.ZodObject<{
682
+ export declare const appleSocialProviderConfigSchema: z.ZodObject<Omit<{
200
683
  enabled: z.ZodOptional<z.ZodBoolean>;
201
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
684
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
685
+ clientSecret: z.ZodOptional<z.ZodString>;
202
686
  callbackUrl: z.ZodOptional<z.ZodString>;
203
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
687
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
204
688
  autoLink: z.ZodOptional<z.ZodBoolean>;
205
689
  allowSignup: z.ZodOptional<z.ZodBoolean>;
690
+ }, "clientSecret"> & {
206
691
  teamId: z.ZodOptional<z.ZodString>;
207
692
  keyId: z.ZodOptional<z.ZodString>;
208
693
  privateKeyPem: z.ZodOptional<z.ZodString>;
209
- }, z.core.$strip>;
694
+ }, "strip", z.ZodTypeAny, {
695
+ enabled?: boolean | undefined;
696
+ clientId?: string | string[] | undefined;
697
+ callbackUrl?: string | undefined;
698
+ scopes?: string[] | undefined;
699
+ autoLink?: boolean | undefined;
700
+ allowSignup?: boolean | undefined;
701
+ teamId?: string | undefined;
702
+ keyId?: string | undefined;
703
+ privateKeyPem?: string | undefined;
704
+ }, {
705
+ enabled?: boolean | undefined;
706
+ clientId?: string | string[] | undefined;
707
+ callbackUrl?: string | undefined;
708
+ scopes?: string[] | undefined;
709
+ autoLink?: boolean | undefined;
710
+ allowSignup?: boolean | undefined;
711
+ teamId?: string | undefined;
712
+ keyId?: string | undefined;
713
+ privateKeyPem?: string | undefined;
714
+ }>;
210
715
  export declare const socialRedirectConfigSchema: z.ZodObject<{
211
716
  frontendBaseUrl: z.ZodOptional<z.ZodString>;
212
717
  allowAbsoluteReturnTo: z.ZodOptional<z.ZodBoolean>;
213
- allowedReturnToOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
214
- }, z.core.$strip>;
718
+ allowedReturnToOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
719
+ }, "strip", z.ZodTypeAny, {
720
+ frontendBaseUrl?: string | undefined;
721
+ allowAbsoluteReturnTo?: boolean | undefined;
722
+ allowedReturnToOrigins?: string[] | undefined;
723
+ }, {
724
+ frontendBaseUrl?: string | undefined;
725
+ allowAbsoluteReturnTo?: boolean | undefined;
726
+ allowedReturnToOrigins?: string[] | undefined;
727
+ }>;
215
728
  export declare const socialConfigSchema: z.ZodObject<{
216
729
  google: z.ZodOptional<z.ZodObject<{
217
730
  enabled: z.ZodOptional<z.ZodBoolean>;
218
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
731
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
219
732
  clientSecret: z.ZodOptional<z.ZodString>;
220
733
  callbackUrl: z.ZodOptional<z.ZodString>;
221
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
734
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
222
735
  autoLink: z.ZodOptional<z.ZodBoolean>;
223
736
  allowSignup: z.ZodOptional<z.ZodBoolean>;
224
- }, z.core.$strip>>;
225
- apple: z.ZodOptional<z.ZodObject<{
737
+ }, "strip", z.ZodTypeAny, {
738
+ clientSecret?: string | undefined;
739
+ enabled?: boolean | undefined;
740
+ clientId?: string | string[] | undefined;
741
+ callbackUrl?: string | undefined;
742
+ scopes?: string[] | undefined;
743
+ autoLink?: boolean | undefined;
744
+ allowSignup?: boolean | undefined;
745
+ }, {
746
+ clientSecret?: string | undefined;
747
+ enabled?: boolean | undefined;
748
+ clientId?: string | string[] | undefined;
749
+ callbackUrl?: string | undefined;
750
+ scopes?: string[] | undefined;
751
+ autoLink?: boolean | undefined;
752
+ allowSignup?: boolean | undefined;
753
+ }>>;
754
+ apple: z.ZodOptional<z.ZodObject<Omit<{
226
755
  enabled: z.ZodOptional<z.ZodBoolean>;
227
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
756
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
757
+ clientSecret: z.ZodOptional<z.ZodString>;
228
758
  callbackUrl: z.ZodOptional<z.ZodString>;
229
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
759
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
230
760
  autoLink: z.ZodOptional<z.ZodBoolean>;
231
761
  allowSignup: z.ZodOptional<z.ZodBoolean>;
762
+ }, "clientSecret"> & {
232
763
  teamId: z.ZodOptional<z.ZodString>;
233
764
  keyId: z.ZodOptional<z.ZodString>;
234
765
  privateKeyPem: z.ZodOptional<z.ZodString>;
235
- }, z.core.$strip>>;
766
+ }, "strip", z.ZodTypeAny, {
767
+ enabled?: boolean | undefined;
768
+ clientId?: string | string[] | undefined;
769
+ callbackUrl?: string | undefined;
770
+ scopes?: string[] | undefined;
771
+ autoLink?: boolean | undefined;
772
+ allowSignup?: boolean | undefined;
773
+ teamId?: string | undefined;
774
+ keyId?: string | undefined;
775
+ privateKeyPem?: string | undefined;
776
+ }, {
777
+ enabled?: boolean | undefined;
778
+ clientId?: string | string[] | undefined;
779
+ callbackUrl?: string | undefined;
780
+ scopes?: string[] | undefined;
781
+ autoLink?: boolean | undefined;
782
+ allowSignup?: boolean | undefined;
783
+ teamId?: string | undefined;
784
+ keyId?: string | undefined;
785
+ privateKeyPem?: string | undefined;
786
+ }>>;
236
787
  facebook: z.ZodOptional<z.ZodObject<{
237
788
  enabled: z.ZodOptional<z.ZodBoolean>;
238
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
789
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
239
790
  clientSecret: z.ZodOptional<z.ZodString>;
240
791
  callbackUrl: z.ZodOptional<z.ZodString>;
241
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
792
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
242
793
  autoLink: z.ZodOptional<z.ZodBoolean>;
243
794
  allowSignup: z.ZodOptional<z.ZodBoolean>;
244
- }, z.core.$strip>>;
795
+ }, "strip", z.ZodTypeAny, {
796
+ clientSecret?: string | undefined;
797
+ enabled?: boolean | undefined;
798
+ clientId?: string | string[] | undefined;
799
+ callbackUrl?: string | undefined;
800
+ scopes?: string[] | undefined;
801
+ autoLink?: boolean | undefined;
802
+ allowSignup?: boolean | undefined;
803
+ }, {
804
+ clientSecret?: string | undefined;
805
+ enabled?: boolean | undefined;
806
+ clientId?: string | string[] | undefined;
807
+ callbackUrl?: string | undefined;
808
+ scopes?: string[] | undefined;
809
+ autoLink?: boolean | undefined;
810
+ allowSignup?: boolean | undefined;
811
+ }>>;
245
812
  redirect: z.ZodOptional<z.ZodObject<{
246
813
  frontendBaseUrl: z.ZodOptional<z.ZodString>;
247
814
  allowAbsoluteReturnTo: z.ZodOptional<z.ZodBoolean>;
248
- allowedReturnToOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
249
- }, z.core.$strip>>;
250
- }, z.core.$strip>;
815
+ allowedReturnToOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
816
+ }, "strip", z.ZodTypeAny, {
817
+ frontendBaseUrl?: string | undefined;
818
+ allowAbsoluteReturnTo?: boolean | undefined;
819
+ allowedReturnToOrigins?: string[] | undefined;
820
+ }, {
821
+ frontendBaseUrl?: string | undefined;
822
+ allowAbsoluteReturnTo?: boolean | undefined;
823
+ allowedReturnToOrigins?: string[] | undefined;
824
+ }>>;
825
+ }, "strip", z.ZodTypeAny, {
826
+ google?: {
827
+ clientSecret?: string | undefined;
828
+ enabled?: boolean | undefined;
829
+ clientId?: string | string[] | undefined;
830
+ callbackUrl?: string | undefined;
831
+ scopes?: string[] | undefined;
832
+ autoLink?: boolean | undefined;
833
+ allowSignup?: boolean | undefined;
834
+ } | undefined;
835
+ apple?: {
836
+ enabled?: boolean | undefined;
837
+ clientId?: string | string[] | undefined;
838
+ callbackUrl?: string | undefined;
839
+ scopes?: string[] | undefined;
840
+ autoLink?: boolean | undefined;
841
+ allowSignup?: boolean | undefined;
842
+ teamId?: string | undefined;
843
+ keyId?: string | undefined;
844
+ privateKeyPem?: string | undefined;
845
+ } | undefined;
846
+ facebook?: {
847
+ clientSecret?: string | undefined;
848
+ enabled?: boolean | undefined;
849
+ clientId?: string | string[] | undefined;
850
+ callbackUrl?: string | undefined;
851
+ scopes?: string[] | undefined;
852
+ autoLink?: boolean | undefined;
853
+ allowSignup?: boolean | undefined;
854
+ } | undefined;
855
+ redirect?: {
856
+ frontendBaseUrl?: string | undefined;
857
+ allowAbsoluteReturnTo?: boolean | undefined;
858
+ allowedReturnToOrigins?: string[] | undefined;
859
+ } | undefined;
860
+ }, {
861
+ google?: {
862
+ clientSecret?: string | undefined;
863
+ enabled?: boolean | undefined;
864
+ clientId?: string | string[] | undefined;
865
+ callbackUrl?: string | undefined;
866
+ scopes?: string[] | undefined;
867
+ autoLink?: boolean | undefined;
868
+ allowSignup?: boolean | undefined;
869
+ } | undefined;
870
+ apple?: {
871
+ enabled?: boolean | undefined;
872
+ clientId?: string | string[] | undefined;
873
+ callbackUrl?: string | undefined;
874
+ scopes?: string[] | undefined;
875
+ autoLink?: boolean | undefined;
876
+ allowSignup?: boolean | undefined;
877
+ teamId?: string | undefined;
878
+ keyId?: string | undefined;
879
+ privateKeyPem?: string | undefined;
880
+ } | undefined;
881
+ facebook?: {
882
+ clientSecret?: string | undefined;
883
+ enabled?: boolean | undefined;
884
+ clientId?: string | string[] | undefined;
885
+ callbackUrl?: string | undefined;
886
+ scopes?: string[] | undefined;
887
+ autoLink?: boolean | undefined;
888
+ allowSignup?: boolean | undefined;
889
+ } | undefined;
890
+ redirect?: {
891
+ frontendBaseUrl?: string | undefined;
892
+ allowAbsoluteReturnTo?: boolean | undefined;
893
+ allowedReturnToOrigins?: string[] | undefined;
894
+ } | undefined;
895
+ }>;
251
896
  export declare const totpConfigSchema: z.ZodObject<{
252
897
  window: z.ZodOptional<z.ZodNumber>;
253
898
  stepSeconds: z.ZodOptional<z.ZodNumber>;
254
899
  digits: z.ZodOptional<z.ZodNumber>;
255
- algorithm: z.ZodOptional<z.ZodEnum<{
256
- sha1: "sha1";
257
- sha256: "sha256";
258
- sha512: "sha512";
259
- }>>;
260
- }, z.core.$strip>;
900
+ algorithm: z.ZodOptional<z.ZodEnum<["sha1", "sha256", "sha512"]>>;
901
+ }, "strip", z.ZodTypeAny, {
902
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
903
+ window?: number | undefined;
904
+ stepSeconds?: number | undefined;
905
+ digits?: number | undefined;
906
+ }, {
907
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
908
+ window?: number | undefined;
909
+ stepSeconds?: number | undefined;
910
+ digits?: number | undefined;
911
+ }>;
261
912
  export declare const passkeyConfigSchema: z.ZodObject<{
262
913
  rpName: z.ZodString;
263
914
  rpId: z.ZodString;
264
- origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
915
+ origin: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
265
916
  timeout: z.ZodOptional<z.ZodNumber>;
266
- userVerification: z.ZodOptional<z.ZodEnum<{
267
- required: "required";
268
- preferred: "preferred";
269
- discouraged: "discouraged";
270
- }>>;
271
- authenticatorAttachment: z.ZodOptional<z.ZodEnum<{
272
- platform: "platform";
273
- "cross-platform": "cross-platform";
274
- }>>;
275
- }, z.core.$strip>;
917
+ userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
918
+ authenticatorAttachment: z.ZodOptional<z.ZodEnum<["platform", "cross-platform"]>>;
919
+ }, "strip", z.ZodTypeAny, {
920
+ rpName: string;
921
+ rpId: string;
922
+ origin?: string | string[] | undefined;
923
+ timeout?: number | undefined;
924
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
925
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
926
+ }, {
927
+ rpName: string;
928
+ rpId: string;
929
+ origin?: string | string[] | undefined;
930
+ timeout?: number | undefined;
931
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
932
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
933
+ }>;
276
934
  export declare const backupCodesConfigSchema: z.ZodObject<{
277
935
  enabled: z.ZodOptional<z.ZodBoolean>;
278
936
  codeCount: z.ZodOptional<z.ZodNumber>;
279
937
  codeLength: z.ZodOptional<z.ZodNumber>;
280
- }, z.core.$strip>;
938
+ }, "strip", z.ZodTypeAny, {
939
+ enabled?: boolean | undefined;
940
+ codeLength?: number | undefined;
941
+ codeCount?: number | undefined;
942
+ }, {
943
+ enabled?: boolean | undefined;
944
+ codeLength?: number | undefined;
945
+ codeCount?: number | undefined;
946
+ }>;
281
947
  export declare const riskLevelConfigSchema: z.ZodObject<{
282
948
  maxScore: z.ZodNumber;
283
- action: z.ZodOptional<z.ZodEnum<{
284
- allow: "allow";
285
- require_mfa: "require_mfa";
286
- block_signin: "block_signin";
287
- }>>;
949
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
288
950
  notifyUser: z.ZodOptional<z.ZodBoolean>;
289
- }, z.core.$strip>;
951
+ }, "strip", z.ZodTypeAny, {
952
+ maxScore: number;
953
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
954
+ notifyUser?: boolean | undefined;
955
+ }, {
956
+ maxScore: number;
957
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
958
+ notifyUser?: boolean | undefined;
959
+ }>;
290
960
  export declare const adaptiveMFAConfigSchema: z.ZodObject<{
291
- triggers: z.ZodOptional<z.ZodArray<z.ZodEnum<{
292
- new_device: "new_device";
293
- new_ip: "new_ip";
294
- new_country: "new_country";
295
- impossible_travel: "impossible_travel";
296
- suspicious_activity: "suspicious_activity";
297
- recent_password_reset: "recent_password_reset";
298
- }>>>;
961
+ triggers: z.ZodOptional<z.ZodArray<z.ZodEnum<["new_device", "new_ip", "new_country", "impossible_travel", "suspicious_activity", "recent_password_reset"]>, "many">>;
299
962
  riskThreshold: z.ZodOptional<z.ZodNumber>;
300
963
  riskWeights: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
301
964
  riskLevels: z.ZodOptional<z.ZodObject<{
302
965
  low: z.ZodOptional<z.ZodObject<{
303
966
  maxScore: z.ZodNumber;
304
- action: z.ZodOptional<z.ZodEnum<{
305
- allow: "allow";
306
- require_mfa: "require_mfa";
307
- block_signin: "block_signin";
308
- }>>;
967
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
309
968
  notifyUser: z.ZodOptional<z.ZodBoolean>;
310
- }, z.core.$strip>>;
969
+ }, "strip", z.ZodTypeAny, {
970
+ maxScore: number;
971
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
972
+ notifyUser?: boolean | undefined;
973
+ }, {
974
+ maxScore: number;
975
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
976
+ notifyUser?: boolean | undefined;
977
+ }>>;
311
978
  medium: z.ZodOptional<z.ZodObject<{
312
979
  maxScore: z.ZodNumber;
313
- action: z.ZodOptional<z.ZodEnum<{
314
- allow: "allow";
315
- require_mfa: "require_mfa";
316
- block_signin: "block_signin";
317
- }>>;
980
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
318
981
  notifyUser: z.ZodOptional<z.ZodBoolean>;
319
- }, z.core.$strip>>;
982
+ }, "strip", z.ZodTypeAny, {
983
+ maxScore: number;
984
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
985
+ notifyUser?: boolean | undefined;
986
+ }, {
987
+ maxScore: number;
988
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
989
+ notifyUser?: boolean | undefined;
990
+ }>>;
320
991
  high: z.ZodOptional<z.ZodObject<{
321
992
  maxScore: z.ZodNumber;
322
- action: z.ZodOptional<z.ZodEnum<{
323
- allow: "allow";
324
- require_mfa: "require_mfa";
325
- block_signin: "block_signin";
326
- }>>;
993
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
327
994
  notifyUser: z.ZodOptional<z.ZodBoolean>;
328
- }, z.core.$strip>>;
329
- }, z.core.$strip>>;
995
+ }, "strip", z.ZodTypeAny, {
996
+ maxScore: number;
997
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
998
+ notifyUser?: boolean | undefined;
999
+ }, {
1000
+ maxScore: number;
1001
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1002
+ notifyUser?: boolean | undefined;
1003
+ }>>;
1004
+ }, "strip", z.ZodTypeAny, {
1005
+ low?: {
1006
+ maxScore: number;
1007
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1008
+ notifyUser?: boolean | undefined;
1009
+ } | undefined;
1010
+ medium?: {
1011
+ maxScore: number;
1012
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1013
+ notifyUser?: boolean | undefined;
1014
+ } | undefined;
1015
+ high?: {
1016
+ maxScore: number;
1017
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1018
+ notifyUser?: boolean | undefined;
1019
+ } | undefined;
1020
+ }, {
1021
+ low?: {
1022
+ maxScore: number;
1023
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1024
+ notifyUser?: boolean | undefined;
1025
+ } | undefined;
1026
+ medium?: {
1027
+ maxScore: number;
1028
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1029
+ notifyUser?: boolean | undefined;
1030
+ } | undefined;
1031
+ high?: {
1032
+ maxScore: number;
1033
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1034
+ notifyUser?: boolean | undefined;
1035
+ } | undefined;
1036
+ }>>;
330
1037
  blockedSignIn: z.ZodOptional<z.ZodObject<{
331
1038
  blockDuration: z.ZodOptional<z.ZodNumber>;
332
1039
  message: z.ZodOptional<z.ZodString>;
333
1040
  errorCode: z.ZodOptional<z.ZodString>;
334
- scope: z.ZodOptional<z.ZodEnum<{
335
- user: "user";
336
- device: "device";
337
- ip: "ip";
338
- }>>;
339
- }, z.core.$strip>>;
1041
+ scope: z.ZodOptional<z.ZodEnum<["user", "device", "ip"]>>;
1042
+ }, "strip", z.ZodTypeAny, {
1043
+ message?: string | undefined;
1044
+ scope?: "user" | "device" | "ip" | undefined;
1045
+ blockDuration?: number | undefined;
1046
+ errorCode?: string | undefined;
1047
+ }, {
1048
+ message?: string | undefined;
1049
+ scope?: "user" | "device" | "ip" | undefined;
1050
+ blockDuration?: number | undefined;
1051
+ errorCode?: string | undefined;
1052
+ }>>;
340
1053
  maxTravelSpeed: z.ZodOptional<z.ZodNumber>;
341
1054
  countryChangeThreshold: z.ZodOptional<z.ZodNumber>;
342
1055
  suspiciousActivityWindow: z.ZodOptional<z.ZodNumber>;
343
- }, z.core.$strip>;
1056
+ }, "strip", z.ZodTypeAny, {
1057
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
1058
+ riskThreshold?: number | undefined;
1059
+ riskWeights?: Record<string, number> | undefined;
1060
+ riskLevels?: {
1061
+ low?: {
1062
+ maxScore: number;
1063
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1064
+ notifyUser?: boolean | undefined;
1065
+ } | undefined;
1066
+ medium?: {
1067
+ maxScore: number;
1068
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1069
+ notifyUser?: boolean | undefined;
1070
+ } | undefined;
1071
+ high?: {
1072
+ maxScore: number;
1073
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1074
+ notifyUser?: boolean | undefined;
1075
+ } | undefined;
1076
+ } | undefined;
1077
+ blockedSignIn?: {
1078
+ message?: string | undefined;
1079
+ scope?: "user" | "device" | "ip" | undefined;
1080
+ blockDuration?: number | undefined;
1081
+ errorCode?: string | undefined;
1082
+ } | undefined;
1083
+ maxTravelSpeed?: number | undefined;
1084
+ countryChangeThreshold?: number | undefined;
1085
+ suspiciousActivityWindow?: number | undefined;
1086
+ }, {
1087
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
1088
+ riskThreshold?: number | undefined;
1089
+ riskWeights?: Record<string, number> | undefined;
1090
+ riskLevels?: {
1091
+ low?: {
1092
+ maxScore: number;
1093
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1094
+ notifyUser?: boolean | undefined;
1095
+ } | undefined;
1096
+ medium?: {
1097
+ maxScore: number;
1098
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1099
+ notifyUser?: boolean | undefined;
1100
+ } | undefined;
1101
+ high?: {
1102
+ maxScore: number;
1103
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1104
+ notifyUser?: boolean | undefined;
1105
+ } | undefined;
1106
+ } | undefined;
1107
+ blockedSignIn?: {
1108
+ message?: string | undefined;
1109
+ scope?: "user" | "device" | "ip" | undefined;
1110
+ blockDuration?: number | undefined;
1111
+ errorCode?: string | undefined;
1112
+ } | undefined;
1113
+ maxTravelSpeed?: number | undefined;
1114
+ countryChangeThreshold?: number | undefined;
1115
+ suspiciousActivityWindow?: number | undefined;
1116
+ }>;
344
1117
  export declare const mfaConfigSchema: z.ZodObject<{
345
1118
  enabled: z.ZodOptional<z.ZodBoolean>;
346
- enforcement: z.ZodOptional<z.ZodEnum<{
347
- OPTIONAL: "OPTIONAL";
348
- REQUIRED: "REQUIRED";
349
- ADAPTIVE: "ADAPTIVE";
350
- }>>;
1119
+ enforcement: z.ZodOptional<z.ZodEnum<["OPTIONAL", "REQUIRED", "ADAPTIVE"]>>;
351
1120
  gracePeriod: z.ZodOptional<z.ZodNumber>;
352
- allowedMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
353
- totp: "totp";
354
- sms: "sms";
355
- email: "email";
356
- passkey: "passkey";
357
- }>>>;
1121
+ allowedMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<["totp", "sms", "email", "passkey"]>, "many">>;
358
1122
  requireForSocialLogin: z.ZodOptional<z.ZodBoolean>;
359
- rememberDevices: z.ZodOptional<z.ZodEnum<{
360
- always: "always";
361
- user_opt_in: "user_opt_in";
362
- never: "never";
363
- }>>;
1123
+ rememberDevices: z.ZodOptional<z.ZodEnum<["always", "user_opt_in", "never"]>>;
364
1124
  rememberDeviceDays: z.ZodOptional<z.ZodNumber>;
365
1125
  bypassMFAForTrustedDevices: z.ZodOptional<z.ZodBoolean>;
366
1126
  issuer: z.ZodOptional<z.ZodString>;
@@ -368,112 +1128,394 @@ export declare const mfaConfigSchema: z.ZodObject<{
368
1128
  window: z.ZodOptional<z.ZodNumber>;
369
1129
  stepSeconds: z.ZodOptional<z.ZodNumber>;
370
1130
  digits: z.ZodOptional<z.ZodNumber>;
371
- algorithm: z.ZodOptional<z.ZodEnum<{
372
- sha1: "sha1";
373
- sha256: "sha256";
374
- sha512: "sha512";
375
- }>>;
376
- }, z.core.$strip>>;
1131
+ algorithm: z.ZodOptional<z.ZodEnum<["sha1", "sha256", "sha512"]>>;
1132
+ }, "strip", z.ZodTypeAny, {
1133
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
1134
+ window?: number | undefined;
1135
+ stepSeconds?: number | undefined;
1136
+ digits?: number | undefined;
1137
+ }, {
1138
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
1139
+ window?: number | undefined;
1140
+ stepSeconds?: number | undefined;
1141
+ digits?: number | undefined;
1142
+ }>>;
377
1143
  passkey: z.ZodOptional<z.ZodObject<{
378
1144
  rpName: z.ZodString;
379
1145
  rpId: z.ZodString;
380
- origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1146
+ origin: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
381
1147
  timeout: z.ZodOptional<z.ZodNumber>;
382
- userVerification: z.ZodOptional<z.ZodEnum<{
383
- required: "required";
384
- preferred: "preferred";
385
- discouraged: "discouraged";
386
- }>>;
387
- authenticatorAttachment: z.ZodOptional<z.ZodEnum<{
388
- platform: "platform";
389
- "cross-platform": "cross-platform";
390
- }>>;
391
- }, z.core.$strip>>;
1148
+ userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
1149
+ authenticatorAttachment: z.ZodOptional<z.ZodEnum<["platform", "cross-platform"]>>;
1150
+ }, "strip", z.ZodTypeAny, {
1151
+ rpName: string;
1152
+ rpId: string;
1153
+ origin?: string | string[] | undefined;
1154
+ timeout?: number | undefined;
1155
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
1156
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
1157
+ }, {
1158
+ rpName: string;
1159
+ rpId: string;
1160
+ origin?: string | string[] | undefined;
1161
+ timeout?: number | undefined;
1162
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
1163
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
1164
+ }>>;
392
1165
  backup: z.ZodOptional<z.ZodObject<{
393
1166
  enabled: z.ZodOptional<z.ZodBoolean>;
394
1167
  codeCount: z.ZodOptional<z.ZodNumber>;
395
1168
  codeLength: z.ZodOptional<z.ZodNumber>;
396
- }, z.core.$strip>>;
1169
+ }, "strip", z.ZodTypeAny, {
1170
+ enabled?: boolean | undefined;
1171
+ codeLength?: number | undefined;
1172
+ codeCount?: number | undefined;
1173
+ }, {
1174
+ enabled?: boolean | undefined;
1175
+ codeLength?: number | undefined;
1176
+ codeCount?: number | undefined;
1177
+ }>>;
397
1178
  adaptive: z.ZodOptional<z.ZodObject<{
398
- triggers: z.ZodOptional<z.ZodArray<z.ZodEnum<{
399
- new_device: "new_device";
400
- new_ip: "new_ip";
401
- new_country: "new_country";
402
- impossible_travel: "impossible_travel";
403
- suspicious_activity: "suspicious_activity";
404
- recent_password_reset: "recent_password_reset";
405
- }>>>;
1179
+ triggers: z.ZodOptional<z.ZodArray<z.ZodEnum<["new_device", "new_ip", "new_country", "impossible_travel", "suspicious_activity", "recent_password_reset"]>, "many">>;
406
1180
  riskThreshold: z.ZodOptional<z.ZodNumber>;
407
1181
  riskWeights: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
408
1182
  riskLevels: z.ZodOptional<z.ZodObject<{
409
1183
  low: z.ZodOptional<z.ZodObject<{
410
1184
  maxScore: z.ZodNumber;
411
- action: z.ZodOptional<z.ZodEnum<{
412
- allow: "allow";
413
- require_mfa: "require_mfa";
414
- block_signin: "block_signin";
415
- }>>;
1185
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
416
1186
  notifyUser: z.ZodOptional<z.ZodBoolean>;
417
- }, z.core.$strip>>;
1187
+ }, "strip", z.ZodTypeAny, {
1188
+ maxScore: number;
1189
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1190
+ notifyUser?: boolean | undefined;
1191
+ }, {
1192
+ maxScore: number;
1193
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1194
+ notifyUser?: boolean | undefined;
1195
+ }>>;
418
1196
  medium: z.ZodOptional<z.ZodObject<{
419
1197
  maxScore: z.ZodNumber;
420
- action: z.ZodOptional<z.ZodEnum<{
421
- allow: "allow";
422
- require_mfa: "require_mfa";
423
- block_signin: "block_signin";
424
- }>>;
1198
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
425
1199
  notifyUser: z.ZodOptional<z.ZodBoolean>;
426
- }, z.core.$strip>>;
1200
+ }, "strip", z.ZodTypeAny, {
1201
+ maxScore: number;
1202
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1203
+ notifyUser?: boolean | undefined;
1204
+ }, {
1205
+ maxScore: number;
1206
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1207
+ notifyUser?: boolean | undefined;
1208
+ }>>;
427
1209
  high: z.ZodOptional<z.ZodObject<{
428
1210
  maxScore: z.ZodNumber;
429
- action: z.ZodOptional<z.ZodEnum<{
430
- allow: "allow";
431
- require_mfa: "require_mfa";
432
- block_signin: "block_signin";
433
- }>>;
1211
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
434
1212
  notifyUser: z.ZodOptional<z.ZodBoolean>;
435
- }, z.core.$strip>>;
436
- }, z.core.$strip>>;
1213
+ }, "strip", z.ZodTypeAny, {
1214
+ maxScore: number;
1215
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1216
+ notifyUser?: boolean | undefined;
1217
+ }, {
1218
+ maxScore: number;
1219
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1220
+ notifyUser?: boolean | undefined;
1221
+ }>>;
1222
+ }, "strip", z.ZodTypeAny, {
1223
+ low?: {
1224
+ maxScore: number;
1225
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1226
+ notifyUser?: boolean | undefined;
1227
+ } | undefined;
1228
+ medium?: {
1229
+ maxScore: number;
1230
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1231
+ notifyUser?: boolean | undefined;
1232
+ } | undefined;
1233
+ high?: {
1234
+ maxScore: number;
1235
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1236
+ notifyUser?: boolean | undefined;
1237
+ } | undefined;
1238
+ }, {
1239
+ low?: {
1240
+ maxScore: number;
1241
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1242
+ notifyUser?: boolean | undefined;
1243
+ } | undefined;
1244
+ medium?: {
1245
+ maxScore: number;
1246
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1247
+ notifyUser?: boolean | undefined;
1248
+ } | undefined;
1249
+ high?: {
1250
+ maxScore: number;
1251
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1252
+ notifyUser?: boolean | undefined;
1253
+ } | undefined;
1254
+ }>>;
437
1255
  blockedSignIn: z.ZodOptional<z.ZodObject<{
438
1256
  blockDuration: z.ZodOptional<z.ZodNumber>;
439
1257
  message: z.ZodOptional<z.ZodString>;
440
1258
  errorCode: z.ZodOptional<z.ZodString>;
441
- scope: z.ZodOptional<z.ZodEnum<{
442
- user: "user";
443
- device: "device";
444
- ip: "ip";
445
- }>>;
446
- }, z.core.$strip>>;
1259
+ scope: z.ZodOptional<z.ZodEnum<["user", "device", "ip"]>>;
1260
+ }, "strip", z.ZodTypeAny, {
1261
+ message?: string | undefined;
1262
+ scope?: "user" | "device" | "ip" | undefined;
1263
+ blockDuration?: number | undefined;
1264
+ errorCode?: string | undefined;
1265
+ }, {
1266
+ message?: string | undefined;
1267
+ scope?: "user" | "device" | "ip" | undefined;
1268
+ blockDuration?: number | undefined;
1269
+ errorCode?: string | undefined;
1270
+ }>>;
447
1271
  maxTravelSpeed: z.ZodOptional<z.ZodNumber>;
448
1272
  countryChangeThreshold: z.ZodOptional<z.ZodNumber>;
449
1273
  suspiciousActivityWindow: z.ZodOptional<z.ZodNumber>;
450
- }, z.core.$strip>>;
451
- }, z.core.$strip>;
452
- export declare const tokenDeliveryConfigSchema: z.ZodObject<{
453
- method: z.ZodOptional<z.ZodEnum<{
454
- json: "json";
455
- cookies: "cookies";
456
- hybrid: "hybrid";
1274
+ }, "strip", z.ZodTypeAny, {
1275
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
1276
+ riskThreshold?: number | undefined;
1277
+ riskWeights?: Record<string, number> | undefined;
1278
+ riskLevels?: {
1279
+ low?: {
1280
+ maxScore: number;
1281
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1282
+ notifyUser?: boolean | undefined;
1283
+ } | undefined;
1284
+ medium?: {
1285
+ maxScore: number;
1286
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1287
+ notifyUser?: boolean | undefined;
1288
+ } | undefined;
1289
+ high?: {
1290
+ maxScore: number;
1291
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1292
+ notifyUser?: boolean | undefined;
1293
+ } | undefined;
1294
+ } | undefined;
1295
+ blockedSignIn?: {
1296
+ message?: string | undefined;
1297
+ scope?: "user" | "device" | "ip" | undefined;
1298
+ blockDuration?: number | undefined;
1299
+ errorCode?: string | undefined;
1300
+ } | undefined;
1301
+ maxTravelSpeed?: number | undefined;
1302
+ countryChangeThreshold?: number | undefined;
1303
+ suspiciousActivityWindow?: number | undefined;
1304
+ }, {
1305
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
1306
+ riskThreshold?: number | undefined;
1307
+ riskWeights?: Record<string, number> | undefined;
1308
+ riskLevels?: {
1309
+ low?: {
1310
+ maxScore: number;
1311
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1312
+ notifyUser?: boolean | undefined;
1313
+ } | undefined;
1314
+ medium?: {
1315
+ maxScore: number;
1316
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1317
+ notifyUser?: boolean | undefined;
1318
+ } | undefined;
1319
+ high?: {
1320
+ maxScore: number;
1321
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1322
+ notifyUser?: boolean | undefined;
1323
+ } | undefined;
1324
+ } | undefined;
1325
+ blockedSignIn?: {
1326
+ message?: string | undefined;
1327
+ scope?: "user" | "device" | "ip" | undefined;
1328
+ blockDuration?: number | undefined;
1329
+ errorCode?: string | undefined;
1330
+ } | undefined;
1331
+ maxTravelSpeed?: number | undefined;
1332
+ countryChangeThreshold?: number | undefined;
1333
+ suspiciousActivityWindow?: number | undefined;
457
1334
  }>>;
1335
+ }, "strip", z.ZodTypeAny, {
1336
+ totp?: {
1337
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
1338
+ window?: number | undefined;
1339
+ stepSeconds?: number | undefined;
1340
+ digits?: number | undefined;
1341
+ } | undefined;
1342
+ passkey?: {
1343
+ rpName: string;
1344
+ rpId: string;
1345
+ origin?: string | string[] | undefined;
1346
+ timeout?: number | undefined;
1347
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
1348
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
1349
+ } | undefined;
1350
+ backup?: {
1351
+ enabled?: boolean | undefined;
1352
+ codeLength?: number | undefined;
1353
+ codeCount?: number | undefined;
1354
+ } | undefined;
1355
+ enabled?: boolean | undefined;
1356
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
1357
+ requireForSocialLogin?: boolean | undefined;
1358
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
1359
+ bypassMFAForTrustedDevices?: boolean | undefined;
1360
+ rememberDeviceDays?: number | undefined;
1361
+ issuer?: string | undefined;
1362
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
1363
+ gracePeriod?: number | undefined;
1364
+ adaptive?: {
1365
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
1366
+ riskThreshold?: number | undefined;
1367
+ riskWeights?: Record<string, number> | undefined;
1368
+ riskLevels?: {
1369
+ low?: {
1370
+ maxScore: number;
1371
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1372
+ notifyUser?: boolean | undefined;
1373
+ } | undefined;
1374
+ medium?: {
1375
+ maxScore: number;
1376
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1377
+ notifyUser?: boolean | undefined;
1378
+ } | undefined;
1379
+ high?: {
1380
+ maxScore: number;
1381
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1382
+ notifyUser?: boolean | undefined;
1383
+ } | undefined;
1384
+ } | undefined;
1385
+ blockedSignIn?: {
1386
+ message?: string | undefined;
1387
+ scope?: "user" | "device" | "ip" | undefined;
1388
+ blockDuration?: number | undefined;
1389
+ errorCode?: string | undefined;
1390
+ } | undefined;
1391
+ maxTravelSpeed?: number | undefined;
1392
+ countryChangeThreshold?: number | undefined;
1393
+ suspiciousActivityWindow?: number | undefined;
1394
+ } | undefined;
1395
+ }, {
1396
+ totp?: {
1397
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
1398
+ window?: number | undefined;
1399
+ stepSeconds?: number | undefined;
1400
+ digits?: number | undefined;
1401
+ } | undefined;
1402
+ passkey?: {
1403
+ rpName: string;
1404
+ rpId: string;
1405
+ origin?: string | string[] | undefined;
1406
+ timeout?: number | undefined;
1407
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
1408
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
1409
+ } | undefined;
1410
+ backup?: {
1411
+ enabled?: boolean | undefined;
1412
+ codeLength?: number | undefined;
1413
+ codeCount?: number | undefined;
1414
+ } | undefined;
1415
+ enabled?: boolean | undefined;
1416
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
1417
+ requireForSocialLogin?: boolean | undefined;
1418
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
1419
+ bypassMFAForTrustedDevices?: boolean | undefined;
1420
+ rememberDeviceDays?: number | undefined;
1421
+ issuer?: string | undefined;
1422
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
1423
+ gracePeriod?: number | undefined;
1424
+ adaptive?: {
1425
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
1426
+ riskThreshold?: number | undefined;
1427
+ riskWeights?: Record<string, number> | undefined;
1428
+ riskLevels?: {
1429
+ low?: {
1430
+ maxScore: number;
1431
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1432
+ notifyUser?: boolean | undefined;
1433
+ } | undefined;
1434
+ medium?: {
1435
+ maxScore: number;
1436
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1437
+ notifyUser?: boolean | undefined;
1438
+ } | undefined;
1439
+ high?: {
1440
+ maxScore: number;
1441
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
1442
+ notifyUser?: boolean | undefined;
1443
+ } | undefined;
1444
+ } | undefined;
1445
+ blockedSignIn?: {
1446
+ message?: string | undefined;
1447
+ scope?: "user" | "device" | "ip" | undefined;
1448
+ blockDuration?: number | undefined;
1449
+ errorCode?: string | undefined;
1450
+ } | undefined;
1451
+ maxTravelSpeed?: number | undefined;
1452
+ countryChangeThreshold?: number | undefined;
1453
+ suspiciousActivityWindow?: number | undefined;
1454
+ } | undefined;
1455
+ }>;
1456
+ export declare const tokenDeliveryConfigSchema: z.ZodObject<{
1457
+ method: z.ZodOptional<z.ZodEnum<["json", "cookies", "hybrid"]>>;
458
1458
  cookieNamePrefix: z.ZodOptional<z.ZodString>;
459
1459
  cookieOptions: z.ZodOptional<z.ZodObject<{
460
1460
  secure: z.ZodOptional<z.ZodBoolean>;
461
- sameSite: z.ZodOptional<z.ZodEnum<{
462
- strict: "strict";
463
- lax: "lax";
464
- none: "none";
465
- }>>;
1461
+ sameSite: z.ZodOptional<z.ZodEnum<["strict", "lax", "none"]>>;
466
1462
  path: z.ZodOptional<z.ZodString>;
467
1463
  domain: z.ZodOptional<z.ZodString>;
468
- }, z.core.$strip>>;
1464
+ }, "strip", z.ZodTypeAny, {
1465
+ secure?: boolean | undefined;
1466
+ sameSite?: "strict" | "lax" | "none" | undefined;
1467
+ domain?: string | undefined;
1468
+ path?: string | undefined;
1469
+ }, {
1470
+ secure?: boolean | undefined;
1471
+ sameSite?: "strict" | "lax" | "none" | undefined;
1472
+ domain?: string | undefined;
1473
+ path?: string | undefined;
1474
+ }>>;
469
1475
  hybridPolicy: z.ZodOptional<z.ZodObject<{
470
- webOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
471
- nativeOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
472
- }, z.core.$strip>>;
473
- }, z.core.$strip>;
1476
+ webOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1477
+ nativeOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1478
+ }, "strip", z.ZodTypeAny, {
1479
+ webOrigins?: string[] | undefined;
1480
+ nativeOrigins?: string[] | undefined;
1481
+ }, {
1482
+ webOrigins?: string[] | undefined;
1483
+ nativeOrigins?: string[] | undefined;
1484
+ }>>;
1485
+ }, "strip", z.ZodTypeAny, {
1486
+ method?: "json" | "cookies" | "hybrid" | undefined;
1487
+ cookieOptions?: {
1488
+ secure?: boolean | undefined;
1489
+ sameSite?: "strict" | "lax" | "none" | undefined;
1490
+ domain?: string | undefined;
1491
+ path?: string | undefined;
1492
+ } | undefined;
1493
+ cookieNamePrefix?: string | undefined;
1494
+ hybridPolicy?: {
1495
+ webOrigins?: string[] | undefined;
1496
+ nativeOrigins?: string[] | undefined;
1497
+ } | undefined;
1498
+ }, {
1499
+ method?: "json" | "cookies" | "hybrid" | undefined;
1500
+ cookieOptions?: {
1501
+ secure?: boolean | undefined;
1502
+ sameSite?: "strict" | "lax" | "none" | undefined;
1503
+ domain?: string | undefined;
1504
+ path?: string | undefined;
1505
+ } | undefined;
1506
+ cookieNamePrefix?: string | undefined;
1507
+ hybridPolicy?: {
1508
+ webOrigins?: string[] | undefined;
1509
+ nativeOrigins?: string[] | undefined;
1510
+ } | undefined;
1511
+ }>;
474
1512
  export declare const challengeConfigSchema: z.ZodObject<{
475
1513
  maxAttempts: z.ZodOptional<z.ZodNumber>;
476
- }, z.core.$strip>;
1514
+ }, "strip", z.ZodTypeAny, {
1515
+ maxAttempts?: number | undefined;
1516
+ }, {
1517
+ maxAttempts?: number | undefined;
1518
+ }>;
477
1519
  export declare const geoLocationConfigSchema: z.ZodObject<{
478
1520
  maxMind: z.ZodOptional<z.ZodObject<{
479
1521
  dbPath: z.ZodOptional<z.ZodString>;
@@ -481,9 +1523,41 @@ export declare const geoLocationConfigSchema: z.ZodObject<{
481
1523
  licenseKey: z.ZodOptional<z.ZodString>;
482
1524
  accountId: z.ZodOptional<z.ZodNumber>;
483
1525
  autoDownloadOnStartup: z.ZodOptional<z.ZodBoolean>;
484
- editions: z.ZodOptional<z.ZodArray<z.ZodString>>;
485
- }, z.core.$strip>>;
486
- }, z.core.$strip>;
1526
+ editions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1527
+ }, "strip", z.ZodTypeAny, {
1528
+ dbPath?: string | undefined;
1529
+ skipDownloads?: boolean | undefined;
1530
+ licenseKey?: string | undefined;
1531
+ accountId?: number | undefined;
1532
+ autoDownloadOnStartup?: boolean | undefined;
1533
+ editions?: string[] | undefined;
1534
+ }, {
1535
+ dbPath?: string | undefined;
1536
+ skipDownloads?: boolean | undefined;
1537
+ licenseKey?: string | undefined;
1538
+ accountId?: number | undefined;
1539
+ autoDownloadOnStartup?: boolean | undefined;
1540
+ editions?: string[] | undefined;
1541
+ }>>;
1542
+ }, "strip", z.ZodTypeAny, {
1543
+ maxMind?: {
1544
+ dbPath?: string | undefined;
1545
+ skipDownloads?: boolean | undefined;
1546
+ licenseKey?: string | undefined;
1547
+ accountId?: number | undefined;
1548
+ autoDownloadOnStartup?: boolean | undefined;
1549
+ editions?: string[] | undefined;
1550
+ } | undefined;
1551
+ }, {
1552
+ maxMind?: {
1553
+ dbPath?: string | undefined;
1554
+ skipDownloads?: boolean | undefined;
1555
+ licenseKey?: string | undefined;
1556
+ accountId?: number | undefined;
1557
+ autoDownloadOnStartup?: boolean | undefined;
1558
+ editions?: string[] | undefined;
1559
+ } | undefined;
1560
+ }>;
487
1561
  /**
488
1562
  * Email notifications configuration schema
489
1563
  *
@@ -505,8 +1579,66 @@ export declare const emailNotificationsConfigSchema: z.ZodOptional<z.ZodObject<{
505
1579
  emailChangedNew: z.ZodOptional<z.ZodBoolean>;
506
1580
  accountLockout: z.ZodOptional<z.ZodBoolean>;
507
1581
  sessionsRevoked: z.ZodOptional<z.ZodBoolean>;
508
- }, z.core.$strip>>;
509
- }, z.core.$strip>>;
1582
+ }, "strip", z.ZodTypeAny, {
1583
+ welcome?: boolean | undefined;
1584
+ accountLockout?: boolean | undefined;
1585
+ passwordChanged?: boolean | undefined;
1586
+ mfaDeviceRemoved?: boolean | undefined;
1587
+ mfaMethodAdded?: boolean | undefined;
1588
+ accountDisabled?: boolean | undefined;
1589
+ accountEnabled?: boolean | undefined;
1590
+ emailChangedOld?: boolean | undefined;
1591
+ emailChangedNew?: boolean | undefined;
1592
+ sessionsRevoked?: boolean | undefined;
1593
+ mfaFirstEnabled?: boolean | undefined;
1594
+ adaptiveMfaRiskDetected?: boolean | undefined;
1595
+ }, {
1596
+ welcome?: boolean | undefined;
1597
+ accountLockout?: boolean | undefined;
1598
+ passwordChanged?: boolean | undefined;
1599
+ mfaDeviceRemoved?: boolean | undefined;
1600
+ mfaMethodAdded?: boolean | undefined;
1601
+ accountDisabled?: boolean | undefined;
1602
+ accountEnabled?: boolean | undefined;
1603
+ emailChangedOld?: boolean | undefined;
1604
+ emailChangedNew?: boolean | undefined;
1605
+ sessionsRevoked?: boolean | undefined;
1606
+ mfaFirstEnabled?: boolean | undefined;
1607
+ adaptiveMfaRiskDetected?: boolean | undefined;
1608
+ }>>;
1609
+ }, "strip", z.ZodTypeAny, {
1610
+ enabled?: boolean | undefined;
1611
+ suppress?: {
1612
+ welcome?: boolean | undefined;
1613
+ accountLockout?: boolean | undefined;
1614
+ passwordChanged?: boolean | undefined;
1615
+ mfaDeviceRemoved?: boolean | undefined;
1616
+ mfaMethodAdded?: boolean | undefined;
1617
+ accountDisabled?: boolean | undefined;
1618
+ accountEnabled?: boolean | undefined;
1619
+ emailChangedOld?: boolean | undefined;
1620
+ emailChangedNew?: boolean | undefined;
1621
+ sessionsRevoked?: boolean | undefined;
1622
+ mfaFirstEnabled?: boolean | undefined;
1623
+ adaptiveMfaRiskDetected?: boolean | undefined;
1624
+ } | undefined;
1625
+ }, {
1626
+ enabled?: boolean | undefined;
1627
+ suppress?: {
1628
+ welcome?: boolean | undefined;
1629
+ accountLockout?: boolean | undefined;
1630
+ passwordChanged?: boolean | undefined;
1631
+ mfaDeviceRemoved?: boolean | undefined;
1632
+ mfaMethodAdded?: boolean | undefined;
1633
+ accountDisabled?: boolean | undefined;
1634
+ accountEnabled?: boolean | undefined;
1635
+ emailChangedOld?: boolean | undefined;
1636
+ emailChangedNew?: boolean | undefined;
1637
+ sessionsRevoked?: boolean | undefined;
1638
+ mfaFirstEnabled?: boolean | undefined;
1639
+ adaptiveMfaRiskDetected?: boolean | undefined;
1640
+ } | undefined;
1641
+ }>>;
510
1642
  /**
511
1643
  * Root authentication configuration schema
512
1644
  *
@@ -517,40 +1649,112 @@ export declare const emailNotificationsConfigSchema: z.ZodOptional<z.ZodObject<{
517
1649
  * - JWT algorithm requires appropriate keys
518
1650
  * - MaxMind geolocation requires credentials for downloads
519
1651
  */
520
- export declare const authConfigSchema: z.ZodObject<{
1652
+ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
521
1653
  tablePrefix: z.ZodOptional<z.ZodString>;
522
- jwt: z.ZodObject<{
523
- algorithm: z.ZodOptional<z.ZodEnum<{
524
- HS256: "HS256";
525
- HS384: "HS384";
526
- HS512: "HS512";
527
- RS256: "RS256";
528
- RS384: "RS384";
529
- RS512: "RS512";
530
- }>>;
1654
+ jwt: z.ZodEffects<z.ZodObject<{
1655
+ algorithm: z.ZodOptional<z.ZodEnum<["HS256", "HS384", "HS512", "RS256", "RS384", "RS512"]>>;
531
1656
  accessToken: z.ZodObject<{
532
1657
  secret: z.ZodOptional<z.ZodString>;
533
1658
  privateKey: z.ZodOptional<z.ZodString>;
534
1659
  publicKey: z.ZodOptional<z.ZodString>;
535
- expiresIn: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
536
- }, z.core.$strip>;
1660
+ expiresIn: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
1661
+ }, "strip", z.ZodTypeAny, {
1662
+ expiresIn: string | number;
1663
+ secret?: string | undefined;
1664
+ publicKey?: string | undefined;
1665
+ privateKey?: string | undefined;
1666
+ }, {
1667
+ expiresIn: string | number;
1668
+ secret?: string | undefined;
1669
+ publicKey?: string | undefined;
1670
+ privateKey?: string | undefined;
1671
+ }>;
537
1672
  refreshToken: z.ZodObject<{
538
1673
  secret: z.ZodString;
539
- expiresIn: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
1674
+ expiresIn: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
540
1675
  rotation: z.ZodOptional<z.ZodBoolean>;
541
1676
  reuseDetection: z.ZodOptional<z.ZodBoolean>;
542
- }, z.core.$strip>;
1677
+ }, "strip", z.ZodTypeAny, {
1678
+ expiresIn: string | number;
1679
+ secret: string;
1680
+ rotation?: boolean | undefined;
1681
+ reuseDetection?: boolean | undefined;
1682
+ }, {
1683
+ expiresIn: string | number;
1684
+ secret: string;
1685
+ rotation?: boolean | undefined;
1686
+ reuseDetection?: boolean | undefined;
1687
+ }>;
543
1688
  issuer: z.ZodOptional<z.ZodString>;
544
- audience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
545
- }, z.core.$strip>;
1689
+ audience: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
1690
+ }, "strip", z.ZodTypeAny, {
1691
+ accessToken: {
1692
+ expiresIn: string | number;
1693
+ secret?: string | undefined;
1694
+ publicKey?: string | undefined;
1695
+ privateKey?: string | undefined;
1696
+ };
1697
+ refreshToken: {
1698
+ expiresIn: string | number;
1699
+ secret: string;
1700
+ rotation?: boolean | undefined;
1701
+ reuseDetection?: boolean | undefined;
1702
+ };
1703
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
1704
+ issuer?: string | undefined;
1705
+ audience?: string | string[] | undefined;
1706
+ }, {
1707
+ accessToken: {
1708
+ expiresIn: string | number;
1709
+ secret?: string | undefined;
1710
+ publicKey?: string | undefined;
1711
+ privateKey?: string | undefined;
1712
+ };
1713
+ refreshToken: {
1714
+ expiresIn: string | number;
1715
+ secret: string;
1716
+ rotation?: boolean | undefined;
1717
+ reuseDetection?: boolean | undefined;
1718
+ };
1719
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
1720
+ issuer?: string | undefined;
1721
+ audience?: string | string[] | undefined;
1722
+ }>, {
1723
+ accessToken: {
1724
+ expiresIn: string | number;
1725
+ secret?: string | undefined;
1726
+ publicKey?: string | undefined;
1727
+ privateKey?: string | undefined;
1728
+ };
1729
+ refreshToken: {
1730
+ expiresIn: string | number;
1731
+ secret: string;
1732
+ rotation?: boolean | undefined;
1733
+ reuseDetection?: boolean | undefined;
1734
+ };
1735
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
1736
+ issuer?: string | undefined;
1737
+ audience?: string | string[] | undefined;
1738
+ }, {
1739
+ accessToken: {
1740
+ expiresIn: string | number;
1741
+ secret?: string | undefined;
1742
+ publicKey?: string | undefined;
1743
+ privateKey?: string | undefined;
1744
+ };
1745
+ refreshToken: {
1746
+ expiresIn: string | number;
1747
+ secret: string;
1748
+ rotation?: boolean | undefined;
1749
+ reuseDetection?: boolean | undefined;
1750
+ };
1751
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
1752
+ issuer?: string | undefined;
1753
+ audience?: string | string[] | undefined;
1754
+ }>;
546
1755
  signup: z.ZodOptional<z.ZodObject<{
547
1756
  enabled: z.ZodOptional<z.ZodBoolean>;
548
- verificationMethod: z.ZodOptional<z.ZodEnum<{
549
- none: "none";
550
- email: "email";
551
- phone: "phone";
552
- both: "both";
553
- }>>;
1757
+ verificationMethod: z.ZodOptional<z.ZodEnum<["none", "email", "phone", "both"]>>;
554
1758
  allowDuplicatePhones: z.ZodOptional<z.ZodBoolean>;
555
1759
  emailVerification: z.ZodOptional<z.ZodObject<{
556
1760
  expiresIn: z.ZodOptional<z.ZodNumber>;
@@ -562,7 +1766,27 @@ export declare const authConfigSchema: z.ZodObject<{
562
1766
  maxAttemptsPerIP: z.ZodOptional<z.ZodNumber>;
563
1767
  attemptWindow: z.ZodOptional<z.ZodNumber>;
564
1768
  baseUrl: z.ZodOptional<z.ZodString>;
565
- }, z.core.$strip>>;
1769
+ }, "strip", z.ZodTypeAny, {
1770
+ expiresIn?: number | undefined;
1771
+ baseUrl?: string | undefined;
1772
+ maxAttempts?: number | undefined;
1773
+ resendDelay?: number | undefined;
1774
+ rateLimitMax?: number | undefined;
1775
+ rateLimitWindow?: number | undefined;
1776
+ maxAttemptsPerUser?: number | undefined;
1777
+ maxAttemptsPerIP?: number | undefined;
1778
+ attemptWindow?: number | undefined;
1779
+ }, {
1780
+ expiresIn?: number | undefined;
1781
+ baseUrl?: string | undefined;
1782
+ maxAttempts?: number | undefined;
1783
+ resendDelay?: number | undefined;
1784
+ rateLimitMax?: number | undefined;
1785
+ rateLimitWindow?: number | undefined;
1786
+ maxAttemptsPerUser?: number | undefined;
1787
+ maxAttemptsPerIP?: number | undefined;
1788
+ attemptWindow?: number | undefined;
1789
+ }>>;
566
1790
  phoneVerification: z.ZodOptional<z.ZodObject<{
567
1791
  codeLength: z.ZodOptional<z.ZodNumber>;
568
1792
  expiresIn: z.ZodOptional<z.ZodNumber>;
@@ -573,17 +1797,92 @@ export declare const authConfigSchema: z.ZodObject<{
573
1797
  maxAttemptsPerUser: z.ZodOptional<z.ZodNumber>;
574
1798
  maxAttemptsPerIP: z.ZodOptional<z.ZodNumber>;
575
1799
  attemptWindow: z.ZodOptional<z.ZodNumber>;
576
- baseUrl: z.ZodOptional<z.ZodString>;
577
- }, z.core.$strip>>;
578
- }, z.core.$strip>>;
579
- login: z.ZodOptional<z.ZodObject<{
580
- identifierType: z.ZodOptional<z.ZodEnum<{
581
- email: "email";
582
- phone: "phone";
583
- username: "username";
584
- email_or_username: "email_or_username";
1800
+ baseUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
1801
+ }, "strip", z.ZodTypeAny, {
1802
+ expiresIn?: number | undefined;
1803
+ baseUrl?: string | undefined;
1804
+ maxAttempts?: number | undefined;
1805
+ resendDelay?: number | undefined;
1806
+ rateLimitMax?: number | undefined;
1807
+ rateLimitWindow?: number | undefined;
1808
+ maxAttemptsPerUser?: number | undefined;
1809
+ maxAttemptsPerIP?: number | undefined;
1810
+ attemptWindow?: number | undefined;
1811
+ codeLength?: number | undefined;
1812
+ }, {
1813
+ expiresIn?: number | undefined;
1814
+ baseUrl?: string | undefined;
1815
+ maxAttempts?: number | undefined;
1816
+ resendDelay?: number | undefined;
1817
+ rateLimitMax?: number | undefined;
1818
+ rateLimitWindow?: number | undefined;
1819
+ maxAttemptsPerUser?: number | undefined;
1820
+ maxAttemptsPerIP?: number | undefined;
1821
+ attemptWindow?: number | undefined;
1822
+ codeLength?: number | undefined;
585
1823
  }>>;
586
- }, z.core.$strip>>;
1824
+ }, "strip", z.ZodTypeAny, {
1825
+ enabled?: boolean | undefined;
1826
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
1827
+ allowDuplicatePhones?: boolean | undefined;
1828
+ emailVerification?: {
1829
+ expiresIn?: number | undefined;
1830
+ baseUrl?: string | undefined;
1831
+ maxAttempts?: number | undefined;
1832
+ resendDelay?: number | undefined;
1833
+ rateLimitMax?: number | undefined;
1834
+ rateLimitWindow?: number | undefined;
1835
+ maxAttemptsPerUser?: number | undefined;
1836
+ maxAttemptsPerIP?: number | undefined;
1837
+ attemptWindow?: number | undefined;
1838
+ } | undefined;
1839
+ phoneVerification?: {
1840
+ expiresIn?: number | undefined;
1841
+ baseUrl?: string | undefined;
1842
+ maxAttempts?: number | undefined;
1843
+ resendDelay?: number | undefined;
1844
+ rateLimitMax?: number | undefined;
1845
+ rateLimitWindow?: number | undefined;
1846
+ maxAttemptsPerUser?: number | undefined;
1847
+ maxAttemptsPerIP?: number | undefined;
1848
+ attemptWindow?: number | undefined;
1849
+ codeLength?: number | undefined;
1850
+ } | undefined;
1851
+ }, {
1852
+ enabled?: boolean | undefined;
1853
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
1854
+ allowDuplicatePhones?: boolean | undefined;
1855
+ emailVerification?: {
1856
+ expiresIn?: number | undefined;
1857
+ baseUrl?: string | undefined;
1858
+ maxAttempts?: number | undefined;
1859
+ resendDelay?: number | undefined;
1860
+ rateLimitMax?: number | undefined;
1861
+ rateLimitWindow?: number | undefined;
1862
+ maxAttemptsPerUser?: number | undefined;
1863
+ maxAttemptsPerIP?: number | undefined;
1864
+ attemptWindow?: number | undefined;
1865
+ } | undefined;
1866
+ phoneVerification?: {
1867
+ expiresIn?: number | undefined;
1868
+ baseUrl?: string | undefined;
1869
+ maxAttempts?: number | undefined;
1870
+ resendDelay?: number | undefined;
1871
+ rateLimitMax?: number | undefined;
1872
+ rateLimitWindow?: number | undefined;
1873
+ maxAttemptsPerUser?: number | undefined;
1874
+ maxAttemptsPerIP?: number | undefined;
1875
+ attemptWindow?: number | undefined;
1876
+ codeLength?: number | undefined;
1877
+ } | undefined;
1878
+ }>>;
1879
+ login: z.ZodOptional<z.ZodObject<{
1880
+ identifierType: z.ZodOptional<z.ZodEnum<["email", "username", "phone", "email_or_username"]>>;
1881
+ }, "strip", z.ZodTypeAny, {
1882
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
1883
+ }, {
1884
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
1885
+ }>>;
587
1886
  password: z.ZodOptional<z.ZodObject<{
588
1887
  minLength: z.ZodOptional<z.ZodNumber>;
589
1888
  maxLength: z.ZodOptional<z.ZodNumber>;
@@ -602,42 +1901,172 @@ export declare const authConfigSchema: z.ZodObject<{
602
1901
  rateLimitMax: z.ZodOptional<z.ZodNumber>;
603
1902
  rateLimitWindow: z.ZodOptional<z.ZodNumber>;
604
1903
  maxAttempts: z.ZodOptional<z.ZodNumber>;
605
- }, z.core.$strip>>;
606
- }, z.core.$strip>>;
1904
+ }, "strip", z.ZodTypeAny, {
1905
+ expiresIn?: number | undefined;
1906
+ maxAttempts?: number | undefined;
1907
+ rateLimitMax?: number | undefined;
1908
+ rateLimitWindow?: number | undefined;
1909
+ codeLength?: number | undefined;
1910
+ }, {
1911
+ expiresIn?: number | undefined;
1912
+ maxAttempts?: number | undefined;
1913
+ rateLimitMax?: number | undefined;
1914
+ rateLimitWindow?: number | undefined;
1915
+ codeLength?: number | undefined;
1916
+ }>>;
1917
+ }, "strip", z.ZodTypeAny, {
1918
+ passwordReset?: {
1919
+ expiresIn?: number | undefined;
1920
+ maxAttempts?: number | undefined;
1921
+ rateLimitMax?: number | undefined;
1922
+ rateLimitWindow?: number | undefined;
1923
+ codeLength?: number | undefined;
1924
+ } | undefined;
1925
+ minLength?: number | undefined;
1926
+ maxLength?: number | undefined;
1927
+ requireUppercase?: boolean | undefined;
1928
+ requireLowercase?: boolean | undefined;
1929
+ requireNumbers?: boolean | undefined;
1930
+ requireSpecialChars?: boolean | undefined;
1931
+ specialChars?: string | undefined;
1932
+ preventCommon?: boolean | undefined;
1933
+ preventUserInfo?: boolean | undefined;
1934
+ historyCount?: number | undefined;
1935
+ expiryDays?: number | undefined;
1936
+ }, {
1937
+ passwordReset?: {
1938
+ expiresIn?: number | undefined;
1939
+ maxAttempts?: number | undefined;
1940
+ rateLimitMax?: number | undefined;
1941
+ rateLimitWindow?: number | undefined;
1942
+ codeLength?: number | undefined;
1943
+ } | undefined;
1944
+ minLength?: number | undefined;
1945
+ maxLength?: number | undefined;
1946
+ requireUppercase?: boolean | undefined;
1947
+ requireLowercase?: boolean | undefined;
1948
+ requireNumbers?: boolean | undefined;
1949
+ requireSpecialChars?: boolean | undefined;
1950
+ specialChars?: string | undefined;
1951
+ preventCommon?: boolean | undefined;
1952
+ preventUserInfo?: boolean | undefined;
1953
+ historyCount?: number | undefined;
1954
+ expiryDays?: number | undefined;
1955
+ }>>;
607
1956
  lockout: z.ZodOptional<z.ZodObject<{
608
1957
  enabled: z.ZodOptional<z.ZodBoolean>;
609
1958
  maxAttempts: z.ZodOptional<z.ZodNumber>;
610
1959
  attemptWindow: z.ZodOptional<z.ZodNumber>;
611
1960
  duration: z.ZodOptional<z.ZodNumber>;
612
1961
  resetOnSuccess: z.ZodOptional<z.ZodBoolean>;
613
- }, z.core.$strip>>;
1962
+ }, "strip", z.ZodTypeAny, {
1963
+ enabled?: boolean | undefined;
1964
+ duration?: number | undefined;
1965
+ maxAttempts?: number | undefined;
1966
+ attemptWindow?: number | undefined;
1967
+ resetOnSuccess?: boolean | undefined;
1968
+ }, {
1969
+ enabled?: boolean | undefined;
1970
+ duration?: number | undefined;
1971
+ maxAttempts?: number | undefined;
1972
+ attemptWindow?: number | undefined;
1973
+ resetOnSuccess?: boolean | undefined;
1974
+ }>>;
614
1975
  session: z.ZodOptional<z.ZodObject<{
615
1976
  maxConcurrent: z.ZodOptional<z.ZodNumber>;
616
1977
  disallowMultipleSessions: z.ZodOptional<z.ZodBoolean>;
617
- maxLifetime: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
618
- }, z.core.$strip>>;
1978
+ maxLifetime: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber]>>;
1979
+ }, "strip", z.ZodTypeAny, {
1980
+ maxConcurrent?: number | undefined;
1981
+ disallowMultipleSessions?: boolean | undefined;
1982
+ maxLifetime?: string | number | undefined;
1983
+ }, {
1984
+ maxConcurrent?: number | undefined;
1985
+ disallowMultipleSessions?: boolean | undefined;
1986
+ maxLifetime?: string | number | undefined;
1987
+ }>>;
619
1988
  security: z.ZodOptional<z.ZodObject<{
620
1989
  csrf: z.ZodOptional<z.ZodObject<{
621
1990
  cookieName: z.ZodOptional<z.ZodString>;
622
1991
  headerName: z.ZodOptional<z.ZodString>;
623
1992
  tokenLength: z.ZodOptional<z.ZodNumber>;
624
- excludedPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
1993
+ excludedPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
625
1994
  cookieOptions: z.ZodOptional<z.ZodObject<{
626
1995
  secure: z.ZodOptional<z.ZodBoolean>;
627
- sameSite: z.ZodOptional<z.ZodEnum<{
628
- strict: "strict";
629
- lax: "lax";
630
- none: "none";
631
- }>>;
1996
+ sameSite: z.ZodOptional<z.ZodEnum<["strict", "lax", "none"]>>;
632
1997
  domain: z.ZodOptional<z.ZodString>;
633
1998
  path: z.ZodOptional<z.ZodString>;
634
- }, z.core.$strip>>;
635
- }, z.core.$strip>>;
636
- }, z.core.$strip>>;
1999
+ }, "strip", z.ZodTypeAny, {
2000
+ secure?: boolean | undefined;
2001
+ sameSite?: "strict" | "lax" | "none" | undefined;
2002
+ domain?: string | undefined;
2003
+ path?: string | undefined;
2004
+ }, {
2005
+ secure?: boolean | undefined;
2006
+ sameSite?: "strict" | "lax" | "none" | undefined;
2007
+ domain?: string | undefined;
2008
+ path?: string | undefined;
2009
+ }>>;
2010
+ }, "strip", z.ZodTypeAny, {
2011
+ cookieName?: string | undefined;
2012
+ headerName?: string | undefined;
2013
+ tokenLength?: number | undefined;
2014
+ excludedPaths?: string[] | undefined;
2015
+ cookieOptions?: {
2016
+ secure?: boolean | undefined;
2017
+ sameSite?: "strict" | "lax" | "none" | undefined;
2018
+ domain?: string | undefined;
2019
+ path?: string | undefined;
2020
+ } | undefined;
2021
+ }, {
2022
+ cookieName?: string | undefined;
2023
+ headerName?: string | undefined;
2024
+ tokenLength?: number | undefined;
2025
+ excludedPaths?: string[] | undefined;
2026
+ cookieOptions?: {
2027
+ secure?: boolean | undefined;
2028
+ sameSite?: "strict" | "lax" | "none" | undefined;
2029
+ domain?: string | undefined;
2030
+ path?: string | undefined;
2031
+ } | undefined;
2032
+ }>>;
2033
+ }, "strip", z.ZodTypeAny, {
2034
+ csrf?: {
2035
+ cookieName?: string | undefined;
2036
+ headerName?: string | undefined;
2037
+ tokenLength?: number | undefined;
2038
+ excludedPaths?: string[] | undefined;
2039
+ cookieOptions?: {
2040
+ secure?: boolean | undefined;
2041
+ sameSite?: "strict" | "lax" | "none" | undefined;
2042
+ domain?: string | undefined;
2043
+ path?: string | undefined;
2044
+ } | undefined;
2045
+ } | undefined;
2046
+ }, {
2047
+ csrf?: {
2048
+ cookieName?: string | undefined;
2049
+ headerName?: string | undefined;
2050
+ tokenLength?: number | undefined;
2051
+ excludedPaths?: string[] | undefined;
2052
+ cookieOptions?: {
2053
+ secure?: boolean | undefined;
2054
+ sameSite?: "strict" | "lax" | "none" | undefined;
2055
+ domain?: string | undefined;
2056
+ path?: string | undefined;
2057
+ } | undefined;
2058
+ } | undefined;
2059
+ }>>;
637
2060
  auditLogs: z.ZodOptional<z.ZodObject<{
638
2061
  enabled: z.ZodOptional<z.ZodBoolean>;
639
2062
  fireAndForget: z.ZodOptional<z.ZodBoolean>;
640
- }, z.core.$strip>>;
2063
+ }, "strip", z.ZodTypeAny, {
2064
+ enabled?: boolean | undefined;
2065
+ fireAndForget?: boolean | undefined;
2066
+ }, {
2067
+ enabled?: boolean | undefined;
2068
+ fireAndForget?: boolean | undefined;
2069
+ }>>;
641
2070
  emailNotifications: z.ZodOptional<z.ZodObject<{
642
2071
  enabled: z.ZodOptional<z.ZodBoolean>;
643
2072
  suppress: z.ZodOptional<z.ZodObject<{
@@ -653,8 +2082,66 @@ export declare const authConfigSchema: z.ZodObject<{
653
2082
  emailChangedNew: z.ZodOptional<z.ZodBoolean>;
654
2083
  accountLockout: z.ZodOptional<z.ZodBoolean>;
655
2084
  sessionsRevoked: z.ZodOptional<z.ZodBoolean>;
656
- }, z.core.$strip>>;
657
- }, z.core.$strip>>;
2085
+ }, "strip", z.ZodTypeAny, {
2086
+ welcome?: boolean | undefined;
2087
+ accountLockout?: boolean | undefined;
2088
+ passwordChanged?: boolean | undefined;
2089
+ mfaDeviceRemoved?: boolean | undefined;
2090
+ mfaMethodAdded?: boolean | undefined;
2091
+ accountDisabled?: boolean | undefined;
2092
+ accountEnabled?: boolean | undefined;
2093
+ emailChangedOld?: boolean | undefined;
2094
+ emailChangedNew?: boolean | undefined;
2095
+ sessionsRevoked?: boolean | undefined;
2096
+ mfaFirstEnabled?: boolean | undefined;
2097
+ adaptiveMfaRiskDetected?: boolean | undefined;
2098
+ }, {
2099
+ welcome?: boolean | undefined;
2100
+ accountLockout?: boolean | undefined;
2101
+ passwordChanged?: boolean | undefined;
2102
+ mfaDeviceRemoved?: boolean | undefined;
2103
+ mfaMethodAdded?: boolean | undefined;
2104
+ accountDisabled?: boolean | undefined;
2105
+ accountEnabled?: boolean | undefined;
2106
+ emailChangedOld?: boolean | undefined;
2107
+ emailChangedNew?: boolean | undefined;
2108
+ sessionsRevoked?: boolean | undefined;
2109
+ mfaFirstEnabled?: boolean | undefined;
2110
+ adaptiveMfaRiskDetected?: boolean | undefined;
2111
+ }>>;
2112
+ }, "strip", z.ZodTypeAny, {
2113
+ enabled?: boolean | undefined;
2114
+ suppress?: {
2115
+ welcome?: boolean | undefined;
2116
+ accountLockout?: boolean | undefined;
2117
+ passwordChanged?: boolean | undefined;
2118
+ mfaDeviceRemoved?: boolean | undefined;
2119
+ mfaMethodAdded?: boolean | undefined;
2120
+ accountDisabled?: boolean | undefined;
2121
+ accountEnabled?: boolean | undefined;
2122
+ emailChangedOld?: boolean | undefined;
2123
+ emailChangedNew?: boolean | undefined;
2124
+ sessionsRevoked?: boolean | undefined;
2125
+ mfaFirstEnabled?: boolean | undefined;
2126
+ adaptiveMfaRiskDetected?: boolean | undefined;
2127
+ } | undefined;
2128
+ }, {
2129
+ enabled?: boolean | undefined;
2130
+ suppress?: {
2131
+ welcome?: boolean | undefined;
2132
+ accountLockout?: boolean | undefined;
2133
+ passwordChanged?: boolean | undefined;
2134
+ mfaDeviceRemoved?: boolean | undefined;
2135
+ mfaMethodAdded?: boolean | undefined;
2136
+ accountDisabled?: boolean | undefined;
2137
+ accountEnabled?: boolean | undefined;
2138
+ emailChangedOld?: boolean | undefined;
2139
+ emailChangedNew?: boolean | undefined;
2140
+ sessionsRevoked?: boolean | undefined;
2141
+ mfaFirstEnabled?: boolean | undefined;
2142
+ adaptiveMfaRiskDetected?: boolean | undefined;
2143
+ } | undefined;
2144
+ }>>;
658
2145
  emailProvider: z.ZodOptional<z.ZodAny>;
659
2146
  email: z.ZodOptional<z.ZodObject<{
660
2147
  globalVariables: z.ZodOptional<z.ZodObject<{
@@ -666,87 +2153,382 @@ export declare const authConfigSchema: z.ZodObject<{
666
2153
  dashboardUrl: z.ZodOptional<z.ZodString>;
667
2154
  supportEmail: z.ZodOptional<z.ZodString>;
668
2155
  footerDisclaimer: z.ZodOptional<z.ZodString>;
669
- }, z.core.$catchall<z.ZodUnknown>>>;
2156
+ }, "strip", z.ZodUnknown, z.objectOutputType<{
2157
+ appName: z.ZodOptional<z.ZodString>;
2158
+ companyName: z.ZodOptional<z.ZodString>;
2159
+ companyAddress: z.ZodOptional<z.ZodString>;
2160
+ brandColor: z.ZodOptional<z.ZodString>;
2161
+ logoUrl: z.ZodOptional<z.ZodString>;
2162
+ dashboardUrl: z.ZodOptional<z.ZodString>;
2163
+ supportEmail: z.ZodOptional<z.ZodString>;
2164
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
2165
+ }, z.ZodUnknown, "strip">, z.objectInputType<{
2166
+ appName: z.ZodOptional<z.ZodString>;
2167
+ companyName: z.ZodOptional<z.ZodString>;
2168
+ companyAddress: z.ZodOptional<z.ZodString>;
2169
+ brandColor: z.ZodOptional<z.ZodString>;
2170
+ logoUrl: z.ZodOptional<z.ZodString>;
2171
+ dashboardUrl: z.ZodOptional<z.ZodString>;
2172
+ supportEmail: z.ZodOptional<z.ZodString>;
2173
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
2174
+ }, z.ZodUnknown, "strip">>>;
670
2175
  templates: z.ZodOptional<z.ZodObject<{
671
2176
  engine: z.ZodOptional<z.ZodAny>;
672
- customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
2177
+ customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
673
2178
  htmlPath: z.ZodOptional<z.ZodString>;
674
2179
  html: z.ZodOptional<z.ZodString>;
675
2180
  textPath: z.ZodOptional<z.ZodString>;
676
2181
  text: z.ZodOptional<z.ZodString>;
677
2182
  subject: z.ZodOptional<z.ZodString>;
678
- }, z.core.$strip>>>;
679
- }, z.core.$strict>>;
680
- }, z.core.$strict>>;
2183
+ }, "strip", z.ZodTypeAny, {
2184
+ htmlPath?: string | undefined;
2185
+ html?: string | undefined;
2186
+ textPath?: string | undefined;
2187
+ text?: string | undefined;
2188
+ subject?: string | undefined;
2189
+ }, {
2190
+ htmlPath?: string | undefined;
2191
+ html?: string | undefined;
2192
+ textPath?: string | undefined;
2193
+ text?: string | undefined;
2194
+ subject?: string | undefined;
2195
+ }>, {
2196
+ htmlPath?: string | undefined;
2197
+ html?: string | undefined;
2198
+ textPath?: string | undefined;
2199
+ text?: string | undefined;
2200
+ subject?: string | undefined;
2201
+ }, {
2202
+ htmlPath?: string | undefined;
2203
+ html?: string | undefined;
2204
+ textPath?: string | undefined;
2205
+ text?: string | undefined;
2206
+ subject?: string | undefined;
2207
+ }>, {
2208
+ htmlPath?: string | undefined;
2209
+ html?: string | undefined;
2210
+ textPath?: string | undefined;
2211
+ text?: string | undefined;
2212
+ subject?: string | undefined;
2213
+ }, {
2214
+ htmlPath?: string | undefined;
2215
+ html?: string | undefined;
2216
+ textPath?: string | undefined;
2217
+ text?: string | undefined;
2218
+ subject?: string | undefined;
2219
+ }>, {
2220
+ htmlPath?: string | undefined;
2221
+ html?: string | undefined;
2222
+ textPath?: string | undefined;
2223
+ text?: string | undefined;
2224
+ subject?: string | undefined;
2225
+ }, {
2226
+ htmlPath?: string | undefined;
2227
+ html?: string | undefined;
2228
+ textPath?: string | undefined;
2229
+ text?: string | undefined;
2230
+ subject?: string | undefined;
2231
+ }>>>;
2232
+ }, "strict", z.ZodTypeAny, {
2233
+ engine?: any;
2234
+ customTemplates?: Record<string, {
2235
+ htmlPath?: string | undefined;
2236
+ html?: string | undefined;
2237
+ textPath?: string | undefined;
2238
+ text?: string | undefined;
2239
+ subject?: string | undefined;
2240
+ }> | undefined;
2241
+ }, {
2242
+ engine?: any;
2243
+ customTemplates?: Record<string, {
2244
+ htmlPath?: string | undefined;
2245
+ html?: string | undefined;
2246
+ textPath?: string | undefined;
2247
+ text?: string | undefined;
2248
+ subject?: string | undefined;
2249
+ }> | undefined;
2250
+ }>>;
2251
+ }, "strict", z.ZodTypeAny, {
2252
+ globalVariables?: z.objectOutputType<{
2253
+ appName: z.ZodOptional<z.ZodString>;
2254
+ companyName: z.ZodOptional<z.ZodString>;
2255
+ companyAddress: z.ZodOptional<z.ZodString>;
2256
+ brandColor: z.ZodOptional<z.ZodString>;
2257
+ logoUrl: z.ZodOptional<z.ZodString>;
2258
+ dashboardUrl: z.ZodOptional<z.ZodString>;
2259
+ supportEmail: z.ZodOptional<z.ZodString>;
2260
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
2261
+ }, z.ZodUnknown, "strip"> | undefined;
2262
+ templates?: {
2263
+ engine?: any;
2264
+ customTemplates?: Record<string, {
2265
+ htmlPath?: string | undefined;
2266
+ html?: string | undefined;
2267
+ textPath?: string | undefined;
2268
+ text?: string | undefined;
2269
+ subject?: string | undefined;
2270
+ }> | undefined;
2271
+ } | undefined;
2272
+ }, {
2273
+ globalVariables?: z.objectInputType<{
2274
+ appName: z.ZodOptional<z.ZodString>;
2275
+ companyName: z.ZodOptional<z.ZodString>;
2276
+ companyAddress: z.ZodOptional<z.ZodString>;
2277
+ brandColor: z.ZodOptional<z.ZodString>;
2278
+ logoUrl: z.ZodOptional<z.ZodString>;
2279
+ dashboardUrl: z.ZodOptional<z.ZodString>;
2280
+ supportEmail: z.ZodOptional<z.ZodString>;
2281
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
2282
+ }, z.ZodUnknown, "strip"> | undefined;
2283
+ templates?: {
2284
+ engine?: any;
2285
+ customTemplates?: Record<string, {
2286
+ htmlPath?: string | undefined;
2287
+ html?: string | undefined;
2288
+ textPath?: string | undefined;
2289
+ text?: string | undefined;
2290
+ subject?: string | undefined;
2291
+ }> | undefined;
2292
+ } | undefined;
2293
+ }>>;
681
2294
  smsProvider: z.ZodOptional<z.ZodAny>;
682
2295
  sms: z.ZodOptional<z.ZodObject<{
683
2296
  templates: z.ZodOptional<z.ZodObject<{
684
2297
  engine: z.ZodOptional<z.ZodAny>;
685
- globalVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
686
- customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
2298
+ globalVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
2299
+ customTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodObject<{
687
2300
  contentPath: z.ZodOptional<z.ZodString>;
688
2301
  content: z.ZodOptional<z.ZodString>;
689
- }, z.core.$strip>>>;
690
- }, z.core.$strip>>;
691
- }, z.core.$strip>>;
692
- phone: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
2302
+ }, "strip", z.ZodTypeAny, {
2303
+ contentPath?: string | undefined;
2304
+ content?: string | undefined;
2305
+ }, {
2306
+ contentPath?: string | undefined;
2307
+ content?: string | undefined;
2308
+ }>, {
2309
+ contentPath?: string | undefined;
2310
+ content?: string | undefined;
2311
+ }, {
2312
+ contentPath?: string | undefined;
2313
+ content?: string | undefined;
2314
+ }>, {
2315
+ contentPath?: string | undefined;
2316
+ content?: string | undefined;
2317
+ }, {
2318
+ contentPath?: string | undefined;
2319
+ content?: string | undefined;
2320
+ }>>>;
2321
+ }, "strip", z.ZodTypeAny, {
2322
+ engine?: any;
2323
+ customTemplates?: Record<string, {
2324
+ contentPath?: string | undefined;
2325
+ content?: string | undefined;
2326
+ }> | undefined;
2327
+ globalVariables?: Record<string, string | number | boolean> | undefined;
2328
+ }, {
2329
+ engine?: any;
2330
+ customTemplates?: Record<string, {
2331
+ contentPath?: string | undefined;
2332
+ content?: string | undefined;
2333
+ }> | undefined;
2334
+ globalVariables?: Record<string, string | number | boolean> | undefined;
2335
+ }>>;
2336
+ }, "strip", z.ZodTypeAny, {
2337
+ templates?: {
2338
+ engine?: any;
2339
+ customTemplates?: Record<string, {
2340
+ contentPath?: string | undefined;
2341
+ content?: string | undefined;
2342
+ }> | undefined;
2343
+ globalVariables?: Record<string, string | number | boolean> | undefined;
2344
+ } | undefined;
2345
+ }, {
2346
+ templates?: {
2347
+ engine?: any;
2348
+ customTemplates?: Record<string, {
2349
+ contentPath?: string | undefined;
2350
+ content?: string | undefined;
2351
+ }> | undefined;
2352
+ globalVariables?: Record<string, string | number | boolean> | undefined;
2353
+ } | undefined;
2354
+ }>>;
2355
+ phone: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
693
2356
  storageAdapter: z.ZodOptional<z.ZodAny>;
694
2357
  social: z.ZodOptional<z.ZodObject<{
695
2358
  google: z.ZodOptional<z.ZodObject<{
696
2359
  enabled: z.ZodOptional<z.ZodBoolean>;
697
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2360
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
698
2361
  clientSecret: z.ZodOptional<z.ZodString>;
699
2362
  callbackUrl: z.ZodOptional<z.ZodString>;
700
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
2363
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
701
2364
  autoLink: z.ZodOptional<z.ZodBoolean>;
702
2365
  allowSignup: z.ZodOptional<z.ZodBoolean>;
703
- }, z.core.$strip>>;
704
- apple: z.ZodOptional<z.ZodObject<{
2366
+ }, "strip", z.ZodTypeAny, {
2367
+ clientSecret?: string | undefined;
2368
+ enabled?: boolean | undefined;
2369
+ clientId?: string | string[] | undefined;
2370
+ callbackUrl?: string | undefined;
2371
+ scopes?: string[] | undefined;
2372
+ autoLink?: boolean | undefined;
2373
+ allowSignup?: boolean | undefined;
2374
+ }, {
2375
+ clientSecret?: string | undefined;
2376
+ enabled?: boolean | undefined;
2377
+ clientId?: string | string[] | undefined;
2378
+ callbackUrl?: string | undefined;
2379
+ scopes?: string[] | undefined;
2380
+ autoLink?: boolean | undefined;
2381
+ allowSignup?: boolean | undefined;
2382
+ }>>;
2383
+ apple: z.ZodOptional<z.ZodObject<Omit<{
705
2384
  enabled: z.ZodOptional<z.ZodBoolean>;
706
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2385
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
2386
+ clientSecret: z.ZodOptional<z.ZodString>;
707
2387
  callbackUrl: z.ZodOptional<z.ZodString>;
708
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
2388
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
709
2389
  autoLink: z.ZodOptional<z.ZodBoolean>;
710
2390
  allowSignup: z.ZodOptional<z.ZodBoolean>;
2391
+ }, "clientSecret"> & {
711
2392
  teamId: z.ZodOptional<z.ZodString>;
712
2393
  keyId: z.ZodOptional<z.ZodString>;
713
2394
  privateKeyPem: z.ZodOptional<z.ZodString>;
714
- }, z.core.$strip>>;
2395
+ }, "strip", z.ZodTypeAny, {
2396
+ enabled?: boolean | undefined;
2397
+ clientId?: string | string[] | undefined;
2398
+ callbackUrl?: string | undefined;
2399
+ scopes?: string[] | undefined;
2400
+ autoLink?: boolean | undefined;
2401
+ allowSignup?: boolean | undefined;
2402
+ teamId?: string | undefined;
2403
+ keyId?: string | undefined;
2404
+ privateKeyPem?: string | undefined;
2405
+ }, {
2406
+ enabled?: boolean | undefined;
2407
+ clientId?: string | string[] | undefined;
2408
+ callbackUrl?: string | undefined;
2409
+ scopes?: string[] | undefined;
2410
+ autoLink?: boolean | undefined;
2411
+ allowSignup?: boolean | undefined;
2412
+ teamId?: string | undefined;
2413
+ keyId?: string | undefined;
2414
+ privateKeyPem?: string | undefined;
2415
+ }>>;
715
2416
  facebook: z.ZodOptional<z.ZodObject<{
716
2417
  enabled: z.ZodOptional<z.ZodBoolean>;
717
- clientId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2418
+ clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
718
2419
  clientSecret: z.ZodOptional<z.ZodString>;
719
2420
  callbackUrl: z.ZodOptional<z.ZodString>;
720
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
2421
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
721
2422
  autoLink: z.ZodOptional<z.ZodBoolean>;
722
2423
  allowSignup: z.ZodOptional<z.ZodBoolean>;
723
- }, z.core.$strip>>;
2424
+ }, "strip", z.ZodTypeAny, {
2425
+ clientSecret?: string | undefined;
2426
+ enabled?: boolean | undefined;
2427
+ clientId?: string | string[] | undefined;
2428
+ callbackUrl?: string | undefined;
2429
+ scopes?: string[] | undefined;
2430
+ autoLink?: boolean | undefined;
2431
+ allowSignup?: boolean | undefined;
2432
+ }, {
2433
+ clientSecret?: string | undefined;
2434
+ enabled?: boolean | undefined;
2435
+ clientId?: string | string[] | undefined;
2436
+ callbackUrl?: string | undefined;
2437
+ scopes?: string[] | undefined;
2438
+ autoLink?: boolean | undefined;
2439
+ allowSignup?: boolean | undefined;
2440
+ }>>;
724
2441
  redirect: z.ZodOptional<z.ZodObject<{
725
2442
  frontendBaseUrl: z.ZodOptional<z.ZodString>;
726
2443
  allowAbsoluteReturnTo: z.ZodOptional<z.ZodBoolean>;
727
- allowedReturnToOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
728
- }, z.core.$strip>>;
729
- }, z.core.$strip>>;
2444
+ allowedReturnToOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2445
+ }, "strip", z.ZodTypeAny, {
2446
+ frontendBaseUrl?: string | undefined;
2447
+ allowAbsoluteReturnTo?: boolean | undefined;
2448
+ allowedReturnToOrigins?: string[] | undefined;
2449
+ }, {
2450
+ frontendBaseUrl?: string | undefined;
2451
+ allowAbsoluteReturnTo?: boolean | undefined;
2452
+ allowedReturnToOrigins?: string[] | undefined;
2453
+ }>>;
2454
+ }, "strip", z.ZodTypeAny, {
2455
+ google?: {
2456
+ clientSecret?: string | undefined;
2457
+ enabled?: boolean | undefined;
2458
+ clientId?: string | string[] | undefined;
2459
+ callbackUrl?: string | undefined;
2460
+ scopes?: string[] | undefined;
2461
+ autoLink?: boolean | undefined;
2462
+ allowSignup?: boolean | undefined;
2463
+ } | undefined;
2464
+ apple?: {
2465
+ enabled?: boolean | undefined;
2466
+ clientId?: string | string[] | undefined;
2467
+ callbackUrl?: string | undefined;
2468
+ scopes?: string[] | undefined;
2469
+ autoLink?: boolean | undefined;
2470
+ allowSignup?: boolean | undefined;
2471
+ teamId?: string | undefined;
2472
+ keyId?: string | undefined;
2473
+ privateKeyPem?: string | undefined;
2474
+ } | undefined;
2475
+ facebook?: {
2476
+ clientSecret?: string | undefined;
2477
+ enabled?: boolean | undefined;
2478
+ clientId?: string | string[] | undefined;
2479
+ callbackUrl?: string | undefined;
2480
+ scopes?: string[] | undefined;
2481
+ autoLink?: boolean | undefined;
2482
+ allowSignup?: boolean | undefined;
2483
+ } | undefined;
2484
+ redirect?: {
2485
+ frontendBaseUrl?: string | undefined;
2486
+ allowAbsoluteReturnTo?: boolean | undefined;
2487
+ allowedReturnToOrigins?: string[] | undefined;
2488
+ } | undefined;
2489
+ }, {
2490
+ google?: {
2491
+ clientSecret?: string | undefined;
2492
+ enabled?: boolean | undefined;
2493
+ clientId?: string | string[] | undefined;
2494
+ callbackUrl?: string | undefined;
2495
+ scopes?: string[] | undefined;
2496
+ autoLink?: boolean | undefined;
2497
+ allowSignup?: boolean | undefined;
2498
+ } | undefined;
2499
+ apple?: {
2500
+ enabled?: boolean | undefined;
2501
+ clientId?: string | string[] | undefined;
2502
+ callbackUrl?: string | undefined;
2503
+ scopes?: string[] | undefined;
2504
+ autoLink?: boolean | undefined;
2505
+ allowSignup?: boolean | undefined;
2506
+ teamId?: string | undefined;
2507
+ keyId?: string | undefined;
2508
+ privateKeyPem?: string | undefined;
2509
+ } | undefined;
2510
+ facebook?: {
2511
+ clientSecret?: string | undefined;
2512
+ enabled?: boolean | undefined;
2513
+ clientId?: string | string[] | undefined;
2514
+ callbackUrl?: string | undefined;
2515
+ scopes?: string[] | undefined;
2516
+ autoLink?: boolean | undefined;
2517
+ allowSignup?: boolean | undefined;
2518
+ } | undefined;
2519
+ redirect?: {
2520
+ frontendBaseUrl?: string | undefined;
2521
+ allowAbsoluteReturnTo?: boolean | undefined;
2522
+ allowedReturnToOrigins?: string[] | undefined;
2523
+ } | undefined;
2524
+ }>>;
730
2525
  mfa: z.ZodOptional<z.ZodObject<{
731
2526
  enabled: z.ZodOptional<z.ZodBoolean>;
732
- enforcement: z.ZodOptional<z.ZodEnum<{
733
- OPTIONAL: "OPTIONAL";
734
- REQUIRED: "REQUIRED";
735
- ADAPTIVE: "ADAPTIVE";
736
- }>>;
2527
+ enforcement: z.ZodOptional<z.ZodEnum<["OPTIONAL", "REQUIRED", "ADAPTIVE"]>>;
737
2528
  gracePeriod: z.ZodOptional<z.ZodNumber>;
738
- allowedMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
739
- totp: "totp";
740
- sms: "sms";
741
- email: "email";
742
- passkey: "passkey";
743
- }>>>;
2529
+ allowedMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<["totp", "sms", "email", "passkey"]>, "many">>;
744
2530
  requireForSocialLogin: z.ZodOptional<z.ZodBoolean>;
745
- rememberDevices: z.ZodOptional<z.ZodEnum<{
746
- always: "always";
747
- user_opt_in: "user_opt_in";
748
- never: "never";
749
- }>>;
2531
+ rememberDevices: z.ZodOptional<z.ZodEnum<["always", "user_opt_in", "never"]>>;
750
2532
  rememberDeviceDays: z.ZodOptional<z.ZodNumber>;
751
2533
  bypassMFAForTrustedDevices: z.ZodOptional<z.ZodBoolean>;
752
2534
  issuer: z.ZodOptional<z.ZodString>;
@@ -754,113 +2536,395 @@ export declare const authConfigSchema: z.ZodObject<{
754
2536
  window: z.ZodOptional<z.ZodNumber>;
755
2537
  stepSeconds: z.ZodOptional<z.ZodNumber>;
756
2538
  digits: z.ZodOptional<z.ZodNumber>;
757
- algorithm: z.ZodOptional<z.ZodEnum<{
758
- sha1: "sha1";
759
- sha256: "sha256";
760
- sha512: "sha512";
761
- }>>;
762
- }, z.core.$strip>>;
2539
+ algorithm: z.ZodOptional<z.ZodEnum<["sha1", "sha256", "sha512"]>>;
2540
+ }, "strip", z.ZodTypeAny, {
2541
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
2542
+ window?: number | undefined;
2543
+ stepSeconds?: number | undefined;
2544
+ digits?: number | undefined;
2545
+ }, {
2546
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
2547
+ window?: number | undefined;
2548
+ stepSeconds?: number | undefined;
2549
+ digits?: number | undefined;
2550
+ }>>;
763
2551
  passkey: z.ZodOptional<z.ZodObject<{
764
2552
  rpName: z.ZodString;
765
2553
  rpId: z.ZodString;
766
- origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2554
+ origin: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
767
2555
  timeout: z.ZodOptional<z.ZodNumber>;
768
- userVerification: z.ZodOptional<z.ZodEnum<{
769
- required: "required";
770
- preferred: "preferred";
771
- discouraged: "discouraged";
772
- }>>;
773
- authenticatorAttachment: z.ZodOptional<z.ZodEnum<{
774
- platform: "platform";
775
- "cross-platform": "cross-platform";
776
- }>>;
777
- }, z.core.$strip>>;
2556
+ userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
2557
+ authenticatorAttachment: z.ZodOptional<z.ZodEnum<["platform", "cross-platform"]>>;
2558
+ }, "strip", z.ZodTypeAny, {
2559
+ rpName: string;
2560
+ rpId: string;
2561
+ origin?: string | string[] | undefined;
2562
+ timeout?: number | undefined;
2563
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
2564
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
2565
+ }, {
2566
+ rpName: string;
2567
+ rpId: string;
2568
+ origin?: string | string[] | undefined;
2569
+ timeout?: number | undefined;
2570
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
2571
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
2572
+ }>>;
778
2573
  backup: z.ZodOptional<z.ZodObject<{
779
2574
  enabled: z.ZodOptional<z.ZodBoolean>;
780
2575
  codeCount: z.ZodOptional<z.ZodNumber>;
781
2576
  codeLength: z.ZodOptional<z.ZodNumber>;
782
- }, z.core.$strip>>;
2577
+ }, "strip", z.ZodTypeAny, {
2578
+ enabled?: boolean | undefined;
2579
+ codeLength?: number | undefined;
2580
+ codeCount?: number | undefined;
2581
+ }, {
2582
+ enabled?: boolean | undefined;
2583
+ codeLength?: number | undefined;
2584
+ codeCount?: number | undefined;
2585
+ }>>;
783
2586
  adaptive: z.ZodOptional<z.ZodObject<{
784
- triggers: z.ZodOptional<z.ZodArray<z.ZodEnum<{
785
- new_device: "new_device";
786
- new_ip: "new_ip";
787
- new_country: "new_country";
788
- impossible_travel: "impossible_travel";
789
- suspicious_activity: "suspicious_activity";
790
- recent_password_reset: "recent_password_reset";
791
- }>>>;
2587
+ triggers: z.ZodOptional<z.ZodArray<z.ZodEnum<["new_device", "new_ip", "new_country", "impossible_travel", "suspicious_activity", "recent_password_reset"]>, "many">>;
792
2588
  riskThreshold: z.ZodOptional<z.ZodNumber>;
793
2589
  riskWeights: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
794
2590
  riskLevels: z.ZodOptional<z.ZodObject<{
795
2591
  low: z.ZodOptional<z.ZodObject<{
796
2592
  maxScore: z.ZodNumber;
797
- action: z.ZodOptional<z.ZodEnum<{
798
- allow: "allow";
799
- require_mfa: "require_mfa";
800
- block_signin: "block_signin";
801
- }>>;
2593
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
802
2594
  notifyUser: z.ZodOptional<z.ZodBoolean>;
803
- }, z.core.$strip>>;
2595
+ }, "strip", z.ZodTypeAny, {
2596
+ maxScore: number;
2597
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2598
+ notifyUser?: boolean | undefined;
2599
+ }, {
2600
+ maxScore: number;
2601
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2602
+ notifyUser?: boolean | undefined;
2603
+ }>>;
804
2604
  medium: z.ZodOptional<z.ZodObject<{
805
2605
  maxScore: z.ZodNumber;
806
- action: z.ZodOptional<z.ZodEnum<{
807
- allow: "allow";
808
- require_mfa: "require_mfa";
809
- block_signin: "block_signin";
810
- }>>;
2606
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
811
2607
  notifyUser: z.ZodOptional<z.ZodBoolean>;
812
- }, z.core.$strip>>;
2608
+ }, "strip", z.ZodTypeAny, {
2609
+ maxScore: number;
2610
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2611
+ notifyUser?: boolean | undefined;
2612
+ }, {
2613
+ maxScore: number;
2614
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2615
+ notifyUser?: boolean | undefined;
2616
+ }>>;
813
2617
  high: z.ZodOptional<z.ZodObject<{
814
2618
  maxScore: z.ZodNumber;
815
- action: z.ZodOptional<z.ZodEnum<{
816
- allow: "allow";
817
- require_mfa: "require_mfa";
818
- block_signin: "block_signin";
819
- }>>;
2619
+ action: z.ZodOptional<z.ZodEnum<["allow", "require_mfa", "block_signin"]>>;
820
2620
  notifyUser: z.ZodOptional<z.ZodBoolean>;
821
- }, z.core.$strip>>;
822
- }, z.core.$strip>>;
2621
+ }, "strip", z.ZodTypeAny, {
2622
+ maxScore: number;
2623
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2624
+ notifyUser?: boolean | undefined;
2625
+ }, {
2626
+ maxScore: number;
2627
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2628
+ notifyUser?: boolean | undefined;
2629
+ }>>;
2630
+ }, "strip", z.ZodTypeAny, {
2631
+ low?: {
2632
+ maxScore: number;
2633
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2634
+ notifyUser?: boolean | undefined;
2635
+ } | undefined;
2636
+ medium?: {
2637
+ maxScore: number;
2638
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2639
+ notifyUser?: boolean | undefined;
2640
+ } | undefined;
2641
+ high?: {
2642
+ maxScore: number;
2643
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2644
+ notifyUser?: boolean | undefined;
2645
+ } | undefined;
2646
+ }, {
2647
+ low?: {
2648
+ maxScore: number;
2649
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2650
+ notifyUser?: boolean | undefined;
2651
+ } | undefined;
2652
+ medium?: {
2653
+ maxScore: number;
2654
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2655
+ notifyUser?: boolean | undefined;
2656
+ } | undefined;
2657
+ high?: {
2658
+ maxScore: number;
2659
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2660
+ notifyUser?: boolean | undefined;
2661
+ } | undefined;
2662
+ }>>;
823
2663
  blockedSignIn: z.ZodOptional<z.ZodObject<{
824
2664
  blockDuration: z.ZodOptional<z.ZodNumber>;
825
2665
  message: z.ZodOptional<z.ZodString>;
826
2666
  errorCode: z.ZodOptional<z.ZodString>;
827
- scope: z.ZodOptional<z.ZodEnum<{
828
- user: "user";
829
- device: "device";
830
- ip: "ip";
831
- }>>;
832
- }, z.core.$strip>>;
2667
+ scope: z.ZodOptional<z.ZodEnum<["user", "device", "ip"]>>;
2668
+ }, "strip", z.ZodTypeAny, {
2669
+ message?: string | undefined;
2670
+ scope?: "user" | "device" | "ip" | undefined;
2671
+ blockDuration?: number | undefined;
2672
+ errorCode?: string | undefined;
2673
+ }, {
2674
+ message?: string | undefined;
2675
+ scope?: "user" | "device" | "ip" | undefined;
2676
+ blockDuration?: number | undefined;
2677
+ errorCode?: string | undefined;
2678
+ }>>;
833
2679
  maxTravelSpeed: z.ZodOptional<z.ZodNumber>;
834
2680
  countryChangeThreshold: z.ZodOptional<z.ZodNumber>;
835
2681
  suspiciousActivityWindow: z.ZodOptional<z.ZodNumber>;
836
- }, z.core.$strip>>;
837
- }, z.core.$strip>>;
2682
+ }, "strip", z.ZodTypeAny, {
2683
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
2684
+ riskThreshold?: number | undefined;
2685
+ riskWeights?: Record<string, number> | undefined;
2686
+ riskLevels?: {
2687
+ low?: {
2688
+ maxScore: number;
2689
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2690
+ notifyUser?: boolean | undefined;
2691
+ } | undefined;
2692
+ medium?: {
2693
+ maxScore: number;
2694
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2695
+ notifyUser?: boolean | undefined;
2696
+ } | undefined;
2697
+ high?: {
2698
+ maxScore: number;
2699
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2700
+ notifyUser?: boolean | undefined;
2701
+ } | undefined;
2702
+ } | undefined;
2703
+ blockedSignIn?: {
2704
+ message?: string | undefined;
2705
+ scope?: "user" | "device" | "ip" | undefined;
2706
+ blockDuration?: number | undefined;
2707
+ errorCode?: string | undefined;
2708
+ } | undefined;
2709
+ maxTravelSpeed?: number | undefined;
2710
+ countryChangeThreshold?: number | undefined;
2711
+ suspiciousActivityWindow?: number | undefined;
2712
+ }, {
2713
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
2714
+ riskThreshold?: number | undefined;
2715
+ riskWeights?: Record<string, number> | undefined;
2716
+ riskLevels?: {
2717
+ low?: {
2718
+ maxScore: number;
2719
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2720
+ notifyUser?: boolean | undefined;
2721
+ } | undefined;
2722
+ medium?: {
2723
+ maxScore: number;
2724
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2725
+ notifyUser?: boolean | undefined;
2726
+ } | undefined;
2727
+ high?: {
2728
+ maxScore: number;
2729
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2730
+ notifyUser?: boolean | undefined;
2731
+ } | undefined;
2732
+ } | undefined;
2733
+ blockedSignIn?: {
2734
+ message?: string | undefined;
2735
+ scope?: "user" | "device" | "ip" | undefined;
2736
+ blockDuration?: number | undefined;
2737
+ errorCode?: string | undefined;
2738
+ } | undefined;
2739
+ maxTravelSpeed?: number | undefined;
2740
+ countryChangeThreshold?: number | undefined;
2741
+ suspiciousActivityWindow?: number | undefined;
2742
+ }>>;
2743
+ }, "strip", z.ZodTypeAny, {
2744
+ totp?: {
2745
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
2746
+ window?: number | undefined;
2747
+ stepSeconds?: number | undefined;
2748
+ digits?: number | undefined;
2749
+ } | undefined;
2750
+ passkey?: {
2751
+ rpName: string;
2752
+ rpId: string;
2753
+ origin?: string | string[] | undefined;
2754
+ timeout?: number | undefined;
2755
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
2756
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
2757
+ } | undefined;
2758
+ backup?: {
2759
+ enabled?: boolean | undefined;
2760
+ codeLength?: number | undefined;
2761
+ codeCount?: number | undefined;
2762
+ } | undefined;
2763
+ enabled?: boolean | undefined;
2764
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
2765
+ requireForSocialLogin?: boolean | undefined;
2766
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
2767
+ bypassMFAForTrustedDevices?: boolean | undefined;
2768
+ rememberDeviceDays?: number | undefined;
2769
+ issuer?: string | undefined;
2770
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
2771
+ gracePeriod?: number | undefined;
2772
+ adaptive?: {
2773
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
2774
+ riskThreshold?: number | undefined;
2775
+ riskWeights?: Record<string, number> | undefined;
2776
+ riskLevels?: {
2777
+ low?: {
2778
+ maxScore: number;
2779
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2780
+ notifyUser?: boolean | undefined;
2781
+ } | undefined;
2782
+ medium?: {
2783
+ maxScore: number;
2784
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2785
+ notifyUser?: boolean | undefined;
2786
+ } | undefined;
2787
+ high?: {
2788
+ maxScore: number;
2789
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2790
+ notifyUser?: boolean | undefined;
2791
+ } | undefined;
2792
+ } | undefined;
2793
+ blockedSignIn?: {
2794
+ message?: string | undefined;
2795
+ scope?: "user" | "device" | "ip" | undefined;
2796
+ blockDuration?: number | undefined;
2797
+ errorCode?: string | undefined;
2798
+ } | undefined;
2799
+ maxTravelSpeed?: number | undefined;
2800
+ countryChangeThreshold?: number | undefined;
2801
+ suspiciousActivityWindow?: number | undefined;
2802
+ } | undefined;
2803
+ }, {
2804
+ totp?: {
2805
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
2806
+ window?: number | undefined;
2807
+ stepSeconds?: number | undefined;
2808
+ digits?: number | undefined;
2809
+ } | undefined;
2810
+ passkey?: {
2811
+ rpName: string;
2812
+ rpId: string;
2813
+ origin?: string | string[] | undefined;
2814
+ timeout?: number | undefined;
2815
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
2816
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
2817
+ } | undefined;
2818
+ backup?: {
2819
+ enabled?: boolean | undefined;
2820
+ codeLength?: number | undefined;
2821
+ codeCount?: number | undefined;
2822
+ } | undefined;
2823
+ enabled?: boolean | undefined;
2824
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
2825
+ requireForSocialLogin?: boolean | undefined;
2826
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
2827
+ bypassMFAForTrustedDevices?: boolean | undefined;
2828
+ rememberDeviceDays?: number | undefined;
2829
+ issuer?: string | undefined;
2830
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
2831
+ gracePeriod?: number | undefined;
2832
+ adaptive?: {
2833
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
2834
+ riskThreshold?: number | undefined;
2835
+ riskWeights?: Record<string, number> | undefined;
2836
+ riskLevels?: {
2837
+ low?: {
2838
+ maxScore: number;
2839
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2840
+ notifyUser?: boolean | undefined;
2841
+ } | undefined;
2842
+ medium?: {
2843
+ maxScore: number;
2844
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2845
+ notifyUser?: boolean | undefined;
2846
+ } | undefined;
2847
+ high?: {
2848
+ maxScore: number;
2849
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
2850
+ notifyUser?: boolean | undefined;
2851
+ } | undefined;
2852
+ } | undefined;
2853
+ blockedSignIn?: {
2854
+ message?: string | undefined;
2855
+ scope?: "user" | "device" | "ip" | undefined;
2856
+ blockDuration?: number | undefined;
2857
+ errorCode?: string | undefined;
2858
+ } | undefined;
2859
+ maxTravelSpeed?: number | undefined;
2860
+ countryChangeThreshold?: number | undefined;
2861
+ suspiciousActivityWindow?: number | undefined;
2862
+ } | undefined;
2863
+ }>>;
838
2864
  logger: z.ZodOptional<z.ZodAny>;
839
2865
  tokenDelivery: z.ZodOptional<z.ZodObject<{
840
- method: z.ZodOptional<z.ZodEnum<{
841
- json: "json";
842
- cookies: "cookies";
843
- hybrid: "hybrid";
844
- }>>;
2866
+ method: z.ZodOptional<z.ZodEnum<["json", "cookies", "hybrid"]>>;
845
2867
  cookieNamePrefix: z.ZodOptional<z.ZodString>;
846
2868
  cookieOptions: z.ZodOptional<z.ZodObject<{
847
2869
  secure: z.ZodOptional<z.ZodBoolean>;
848
- sameSite: z.ZodOptional<z.ZodEnum<{
849
- strict: "strict";
850
- lax: "lax";
851
- none: "none";
852
- }>>;
2870
+ sameSite: z.ZodOptional<z.ZodEnum<["strict", "lax", "none"]>>;
853
2871
  path: z.ZodOptional<z.ZodString>;
854
2872
  domain: z.ZodOptional<z.ZodString>;
855
- }, z.core.$strip>>;
2873
+ }, "strip", z.ZodTypeAny, {
2874
+ secure?: boolean | undefined;
2875
+ sameSite?: "strict" | "lax" | "none" | undefined;
2876
+ domain?: string | undefined;
2877
+ path?: string | undefined;
2878
+ }, {
2879
+ secure?: boolean | undefined;
2880
+ sameSite?: "strict" | "lax" | "none" | undefined;
2881
+ domain?: string | undefined;
2882
+ path?: string | undefined;
2883
+ }>>;
856
2884
  hybridPolicy: z.ZodOptional<z.ZodObject<{
857
- webOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
858
- nativeOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
859
- }, z.core.$strip>>;
860
- }, z.core.$strip>>;
2885
+ webOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2886
+ nativeOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2887
+ }, "strip", z.ZodTypeAny, {
2888
+ webOrigins?: string[] | undefined;
2889
+ nativeOrigins?: string[] | undefined;
2890
+ }, {
2891
+ webOrigins?: string[] | undefined;
2892
+ nativeOrigins?: string[] | undefined;
2893
+ }>>;
2894
+ }, "strip", z.ZodTypeAny, {
2895
+ method?: "json" | "cookies" | "hybrid" | undefined;
2896
+ cookieOptions?: {
2897
+ secure?: boolean | undefined;
2898
+ sameSite?: "strict" | "lax" | "none" | undefined;
2899
+ domain?: string | undefined;
2900
+ path?: string | undefined;
2901
+ } | undefined;
2902
+ cookieNamePrefix?: string | undefined;
2903
+ hybridPolicy?: {
2904
+ webOrigins?: string[] | undefined;
2905
+ nativeOrigins?: string[] | undefined;
2906
+ } | undefined;
2907
+ }, {
2908
+ method?: "json" | "cookies" | "hybrid" | undefined;
2909
+ cookieOptions?: {
2910
+ secure?: boolean | undefined;
2911
+ sameSite?: "strict" | "lax" | "none" | undefined;
2912
+ domain?: string | undefined;
2913
+ path?: string | undefined;
2914
+ } | undefined;
2915
+ cookieNamePrefix?: string | undefined;
2916
+ hybridPolicy?: {
2917
+ webOrigins?: string[] | undefined;
2918
+ nativeOrigins?: string[] | undefined;
2919
+ } | undefined;
2920
+ }>>;
861
2921
  challenge: z.ZodOptional<z.ZodObject<{
862
2922
  maxAttempts: z.ZodOptional<z.ZodNumber>;
863
- }, z.core.$strip>>;
2923
+ }, "strip", z.ZodTypeAny, {
2924
+ maxAttempts?: number | undefined;
2925
+ }, {
2926
+ maxAttempts?: number | undefined;
2927
+ }>>;
864
2928
  geoLocation: z.ZodOptional<z.ZodObject<{
865
2929
  maxMind: z.ZodOptional<z.ZodObject<{
866
2930
  dbPath: z.ZodOptional<z.ZodString>;
@@ -868,10 +2932,1154 @@ export declare const authConfigSchema: z.ZodObject<{
868
2932
  licenseKey: z.ZodOptional<z.ZodString>;
869
2933
  accountId: z.ZodOptional<z.ZodNumber>;
870
2934
  autoDownloadOnStartup: z.ZodOptional<z.ZodBoolean>;
871
- editions: z.ZodOptional<z.ZodArray<z.ZodString>>;
872
- }, z.core.$strip>>;
873
- }, z.core.$strip>>;
874
- }, z.core.$strip>;
2935
+ editions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2936
+ }, "strip", z.ZodTypeAny, {
2937
+ dbPath?: string | undefined;
2938
+ skipDownloads?: boolean | undefined;
2939
+ licenseKey?: string | undefined;
2940
+ accountId?: number | undefined;
2941
+ autoDownloadOnStartup?: boolean | undefined;
2942
+ editions?: string[] | undefined;
2943
+ }, {
2944
+ dbPath?: string | undefined;
2945
+ skipDownloads?: boolean | undefined;
2946
+ licenseKey?: string | undefined;
2947
+ accountId?: number | undefined;
2948
+ autoDownloadOnStartup?: boolean | undefined;
2949
+ editions?: string[] | undefined;
2950
+ }>>;
2951
+ }, "strip", z.ZodTypeAny, {
2952
+ maxMind?: {
2953
+ dbPath?: string | undefined;
2954
+ skipDownloads?: boolean | undefined;
2955
+ licenseKey?: string | undefined;
2956
+ accountId?: number | undefined;
2957
+ autoDownloadOnStartup?: boolean | undefined;
2958
+ editions?: string[] | undefined;
2959
+ } | undefined;
2960
+ }, {
2961
+ maxMind?: {
2962
+ dbPath?: string | undefined;
2963
+ skipDownloads?: boolean | undefined;
2964
+ licenseKey?: string | undefined;
2965
+ accountId?: number | undefined;
2966
+ autoDownloadOnStartup?: boolean | undefined;
2967
+ editions?: string[] | undefined;
2968
+ } | undefined;
2969
+ }>>;
2970
+ }, "strip", z.ZodTypeAny, {
2971
+ jwt: {
2972
+ accessToken: {
2973
+ expiresIn: string | number;
2974
+ secret?: string | undefined;
2975
+ publicKey?: string | undefined;
2976
+ privateKey?: string | undefined;
2977
+ };
2978
+ refreshToken: {
2979
+ expiresIn: string | number;
2980
+ secret: string;
2981
+ rotation?: boolean | undefined;
2982
+ reuseDetection?: boolean | undefined;
2983
+ };
2984
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
2985
+ issuer?: string | undefined;
2986
+ audience?: string | string[] | undefined;
2987
+ };
2988
+ sms?: {
2989
+ templates?: {
2990
+ engine?: any;
2991
+ customTemplates?: Record<string, {
2992
+ contentPath?: string | undefined;
2993
+ content?: string | undefined;
2994
+ }> | undefined;
2995
+ globalVariables?: Record<string, string | number | boolean> | undefined;
2996
+ } | undefined;
2997
+ } | undefined;
2998
+ email?: {
2999
+ globalVariables?: z.objectOutputType<{
3000
+ appName: z.ZodOptional<z.ZodString>;
3001
+ companyName: z.ZodOptional<z.ZodString>;
3002
+ companyAddress: z.ZodOptional<z.ZodString>;
3003
+ brandColor: z.ZodOptional<z.ZodString>;
3004
+ logoUrl: z.ZodOptional<z.ZodString>;
3005
+ dashboardUrl: z.ZodOptional<z.ZodString>;
3006
+ supportEmail: z.ZodOptional<z.ZodString>;
3007
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
3008
+ }, z.ZodUnknown, "strip"> | undefined;
3009
+ templates?: {
3010
+ engine?: any;
3011
+ customTemplates?: Record<string, {
3012
+ htmlPath?: string | undefined;
3013
+ html?: string | undefined;
3014
+ textPath?: string | undefined;
3015
+ text?: string | undefined;
3016
+ subject?: string | undefined;
3017
+ }> | undefined;
3018
+ } | undefined;
3019
+ } | undefined;
3020
+ mfa?: {
3021
+ totp?: {
3022
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
3023
+ window?: number | undefined;
3024
+ stepSeconds?: number | undefined;
3025
+ digits?: number | undefined;
3026
+ } | undefined;
3027
+ passkey?: {
3028
+ rpName: string;
3029
+ rpId: string;
3030
+ origin?: string | string[] | undefined;
3031
+ timeout?: number | undefined;
3032
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
3033
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
3034
+ } | undefined;
3035
+ backup?: {
3036
+ enabled?: boolean | undefined;
3037
+ codeLength?: number | undefined;
3038
+ codeCount?: number | undefined;
3039
+ } | undefined;
3040
+ enabled?: boolean | undefined;
3041
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
3042
+ requireForSocialLogin?: boolean | undefined;
3043
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
3044
+ bypassMFAForTrustedDevices?: boolean | undefined;
3045
+ rememberDeviceDays?: number | undefined;
3046
+ issuer?: string | undefined;
3047
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
3048
+ gracePeriod?: number | undefined;
3049
+ adaptive?: {
3050
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
3051
+ riskThreshold?: number | undefined;
3052
+ riskWeights?: Record<string, number> | undefined;
3053
+ riskLevels?: {
3054
+ low?: {
3055
+ maxScore: number;
3056
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3057
+ notifyUser?: boolean | undefined;
3058
+ } | undefined;
3059
+ medium?: {
3060
+ maxScore: number;
3061
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3062
+ notifyUser?: boolean | undefined;
3063
+ } | undefined;
3064
+ high?: {
3065
+ maxScore: number;
3066
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3067
+ notifyUser?: boolean | undefined;
3068
+ } | undefined;
3069
+ } | undefined;
3070
+ blockedSignIn?: {
3071
+ message?: string | undefined;
3072
+ scope?: "user" | "device" | "ip" | undefined;
3073
+ blockDuration?: number | undefined;
3074
+ errorCode?: string | undefined;
3075
+ } | undefined;
3076
+ maxTravelSpeed?: number | undefined;
3077
+ countryChangeThreshold?: number | undefined;
3078
+ suspiciousActivityWindow?: number | undefined;
3079
+ } | undefined;
3080
+ } | undefined;
3081
+ phone?: {} | undefined;
3082
+ password?: {
3083
+ passwordReset?: {
3084
+ expiresIn?: number | undefined;
3085
+ maxAttempts?: number | undefined;
3086
+ rateLimitMax?: number | undefined;
3087
+ rateLimitWindow?: number | undefined;
3088
+ codeLength?: number | undefined;
3089
+ } | undefined;
3090
+ minLength?: number | undefined;
3091
+ maxLength?: number | undefined;
3092
+ requireUppercase?: boolean | undefined;
3093
+ requireLowercase?: boolean | undefined;
3094
+ requireNumbers?: boolean | undefined;
3095
+ requireSpecialChars?: boolean | undefined;
3096
+ specialChars?: string | undefined;
3097
+ preventCommon?: boolean | undefined;
3098
+ preventUserInfo?: boolean | undefined;
3099
+ historyCount?: number | undefined;
3100
+ expiryDays?: number | undefined;
3101
+ } | undefined;
3102
+ session?: {
3103
+ maxConcurrent?: number | undefined;
3104
+ disallowMultipleSessions?: boolean | undefined;
3105
+ maxLifetime?: string | number | undefined;
3106
+ } | undefined;
3107
+ login?: {
3108
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
3109
+ } | undefined;
3110
+ social?: {
3111
+ google?: {
3112
+ clientSecret?: string | undefined;
3113
+ enabled?: boolean | undefined;
3114
+ clientId?: string | string[] | undefined;
3115
+ callbackUrl?: string | undefined;
3116
+ scopes?: string[] | undefined;
3117
+ autoLink?: boolean | undefined;
3118
+ allowSignup?: boolean | undefined;
3119
+ } | undefined;
3120
+ apple?: {
3121
+ enabled?: boolean | undefined;
3122
+ clientId?: string | string[] | undefined;
3123
+ callbackUrl?: string | undefined;
3124
+ scopes?: string[] | undefined;
3125
+ autoLink?: boolean | undefined;
3126
+ allowSignup?: boolean | undefined;
3127
+ teamId?: string | undefined;
3128
+ keyId?: string | undefined;
3129
+ privateKeyPem?: string | undefined;
3130
+ } | undefined;
3131
+ facebook?: {
3132
+ clientSecret?: string | undefined;
3133
+ enabled?: boolean | undefined;
3134
+ clientId?: string | string[] | undefined;
3135
+ callbackUrl?: string | undefined;
3136
+ scopes?: string[] | undefined;
3137
+ autoLink?: boolean | undefined;
3138
+ allowSignup?: boolean | undefined;
3139
+ } | undefined;
3140
+ redirect?: {
3141
+ frontendBaseUrl?: string | undefined;
3142
+ allowAbsoluteReturnTo?: boolean | undefined;
3143
+ allowedReturnToOrigins?: string[] | undefined;
3144
+ } | undefined;
3145
+ } | undefined;
3146
+ signup?: {
3147
+ enabled?: boolean | undefined;
3148
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
3149
+ allowDuplicatePhones?: boolean | undefined;
3150
+ emailVerification?: {
3151
+ expiresIn?: number | undefined;
3152
+ baseUrl?: string | undefined;
3153
+ maxAttempts?: number | undefined;
3154
+ resendDelay?: number | undefined;
3155
+ rateLimitMax?: number | undefined;
3156
+ rateLimitWindow?: number | undefined;
3157
+ maxAttemptsPerUser?: number | undefined;
3158
+ maxAttemptsPerIP?: number | undefined;
3159
+ attemptWindow?: number | undefined;
3160
+ } | undefined;
3161
+ phoneVerification?: {
3162
+ expiresIn?: number | undefined;
3163
+ baseUrl?: string | undefined;
3164
+ maxAttempts?: number | undefined;
3165
+ resendDelay?: number | undefined;
3166
+ rateLimitMax?: number | undefined;
3167
+ rateLimitWindow?: number | undefined;
3168
+ maxAttemptsPerUser?: number | undefined;
3169
+ maxAttemptsPerIP?: number | undefined;
3170
+ attemptWindow?: number | undefined;
3171
+ codeLength?: number | undefined;
3172
+ } | undefined;
3173
+ } | undefined;
3174
+ security?: {
3175
+ csrf?: {
3176
+ cookieName?: string | undefined;
3177
+ headerName?: string | undefined;
3178
+ tokenLength?: number | undefined;
3179
+ excludedPaths?: string[] | undefined;
3180
+ cookieOptions?: {
3181
+ secure?: boolean | undefined;
3182
+ sameSite?: "strict" | "lax" | "none" | undefined;
3183
+ domain?: string | undefined;
3184
+ path?: string | undefined;
3185
+ } | undefined;
3186
+ } | undefined;
3187
+ } | undefined;
3188
+ tokenDelivery?: {
3189
+ method?: "json" | "cookies" | "hybrid" | undefined;
3190
+ cookieOptions?: {
3191
+ secure?: boolean | undefined;
3192
+ sameSite?: "strict" | "lax" | "none" | undefined;
3193
+ domain?: string | undefined;
3194
+ path?: string | undefined;
3195
+ } | undefined;
3196
+ cookieNamePrefix?: string | undefined;
3197
+ hybridPolicy?: {
3198
+ webOrigins?: string[] | undefined;
3199
+ nativeOrigins?: string[] | undefined;
3200
+ } | undefined;
3201
+ } | undefined;
3202
+ tablePrefix?: string | undefined;
3203
+ lockout?: {
3204
+ enabled?: boolean | undefined;
3205
+ duration?: number | undefined;
3206
+ maxAttempts?: number | undefined;
3207
+ attemptWindow?: number | undefined;
3208
+ resetOnSuccess?: boolean | undefined;
3209
+ } | undefined;
3210
+ auditLogs?: {
3211
+ enabled?: boolean | undefined;
3212
+ fireAndForget?: boolean | undefined;
3213
+ } | undefined;
3214
+ emailNotifications?: {
3215
+ enabled?: boolean | undefined;
3216
+ suppress?: {
3217
+ welcome?: boolean | undefined;
3218
+ accountLockout?: boolean | undefined;
3219
+ passwordChanged?: boolean | undefined;
3220
+ mfaDeviceRemoved?: boolean | undefined;
3221
+ mfaMethodAdded?: boolean | undefined;
3222
+ accountDisabled?: boolean | undefined;
3223
+ accountEnabled?: boolean | undefined;
3224
+ emailChangedOld?: boolean | undefined;
3225
+ emailChangedNew?: boolean | undefined;
3226
+ sessionsRevoked?: boolean | undefined;
3227
+ mfaFirstEnabled?: boolean | undefined;
3228
+ adaptiveMfaRiskDetected?: boolean | undefined;
3229
+ } | undefined;
3230
+ } | undefined;
3231
+ emailProvider?: any;
3232
+ smsProvider?: any;
3233
+ storageAdapter?: any;
3234
+ logger?: any;
3235
+ challenge?: {
3236
+ maxAttempts?: number | undefined;
3237
+ } | undefined;
3238
+ geoLocation?: {
3239
+ maxMind?: {
3240
+ dbPath?: string | undefined;
3241
+ skipDownloads?: boolean | undefined;
3242
+ licenseKey?: string | undefined;
3243
+ accountId?: number | undefined;
3244
+ autoDownloadOnStartup?: boolean | undefined;
3245
+ editions?: string[] | undefined;
3246
+ } | undefined;
3247
+ } | undefined;
3248
+ }, {
3249
+ jwt: {
3250
+ accessToken: {
3251
+ expiresIn: string | number;
3252
+ secret?: string | undefined;
3253
+ publicKey?: string | undefined;
3254
+ privateKey?: string | undefined;
3255
+ };
3256
+ refreshToken: {
3257
+ expiresIn: string | number;
3258
+ secret: string;
3259
+ rotation?: boolean | undefined;
3260
+ reuseDetection?: boolean | undefined;
3261
+ };
3262
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
3263
+ issuer?: string | undefined;
3264
+ audience?: string | string[] | undefined;
3265
+ };
3266
+ sms?: {
3267
+ templates?: {
3268
+ engine?: any;
3269
+ customTemplates?: Record<string, {
3270
+ contentPath?: string | undefined;
3271
+ content?: string | undefined;
3272
+ }> | undefined;
3273
+ globalVariables?: Record<string, string | number | boolean> | undefined;
3274
+ } | undefined;
3275
+ } | undefined;
3276
+ email?: {
3277
+ globalVariables?: z.objectInputType<{
3278
+ appName: z.ZodOptional<z.ZodString>;
3279
+ companyName: z.ZodOptional<z.ZodString>;
3280
+ companyAddress: z.ZodOptional<z.ZodString>;
3281
+ brandColor: z.ZodOptional<z.ZodString>;
3282
+ logoUrl: z.ZodOptional<z.ZodString>;
3283
+ dashboardUrl: z.ZodOptional<z.ZodString>;
3284
+ supportEmail: z.ZodOptional<z.ZodString>;
3285
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
3286
+ }, z.ZodUnknown, "strip"> | undefined;
3287
+ templates?: {
3288
+ engine?: any;
3289
+ customTemplates?: Record<string, {
3290
+ htmlPath?: string | undefined;
3291
+ html?: string | undefined;
3292
+ textPath?: string | undefined;
3293
+ text?: string | undefined;
3294
+ subject?: string | undefined;
3295
+ }> | undefined;
3296
+ } | undefined;
3297
+ } | undefined;
3298
+ mfa?: {
3299
+ totp?: {
3300
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
3301
+ window?: number | undefined;
3302
+ stepSeconds?: number | undefined;
3303
+ digits?: number | undefined;
3304
+ } | undefined;
3305
+ passkey?: {
3306
+ rpName: string;
3307
+ rpId: string;
3308
+ origin?: string | string[] | undefined;
3309
+ timeout?: number | undefined;
3310
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
3311
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
3312
+ } | undefined;
3313
+ backup?: {
3314
+ enabled?: boolean | undefined;
3315
+ codeLength?: number | undefined;
3316
+ codeCount?: number | undefined;
3317
+ } | undefined;
3318
+ enabled?: boolean | undefined;
3319
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
3320
+ requireForSocialLogin?: boolean | undefined;
3321
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
3322
+ bypassMFAForTrustedDevices?: boolean | undefined;
3323
+ rememberDeviceDays?: number | undefined;
3324
+ issuer?: string | undefined;
3325
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
3326
+ gracePeriod?: number | undefined;
3327
+ adaptive?: {
3328
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
3329
+ riskThreshold?: number | undefined;
3330
+ riskWeights?: Record<string, number> | undefined;
3331
+ riskLevels?: {
3332
+ low?: {
3333
+ maxScore: number;
3334
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3335
+ notifyUser?: boolean | undefined;
3336
+ } | undefined;
3337
+ medium?: {
3338
+ maxScore: number;
3339
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3340
+ notifyUser?: boolean | undefined;
3341
+ } | undefined;
3342
+ high?: {
3343
+ maxScore: number;
3344
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3345
+ notifyUser?: boolean | undefined;
3346
+ } | undefined;
3347
+ } | undefined;
3348
+ blockedSignIn?: {
3349
+ message?: string | undefined;
3350
+ scope?: "user" | "device" | "ip" | undefined;
3351
+ blockDuration?: number | undefined;
3352
+ errorCode?: string | undefined;
3353
+ } | undefined;
3354
+ maxTravelSpeed?: number | undefined;
3355
+ countryChangeThreshold?: number | undefined;
3356
+ suspiciousActivityWindow?: number | undefined;
3357
+ } | undefined;
3358
+ } | undefined;
3359
+ phone?: {} | undefined;
3360
+ password?: {
3361
+ passwordReset?: {
3362
+ expiresIn?: number | undefined;
3363
+ maxAttempts?: number | undefined;
3364
+ rateLimitMax?: number | undefined;
3365
+ rateLimitWindow?: number | undefined;
3366
+ codeLength?: number | undefined;
3367
+ } | undefined;
3368
+ minLength?: number | undefined;
3369
+ maxLength?: number | undefined;
3370
+ requireUppercase?: boolean | undefined;
3371
+ requireLowercase?: boolean | undefined;
3372
+ requireNumbers?: boolean | undefined;
3373
+ requireSpecialChars?: boolean | undefined;
3374
+ specialChars?: string | undefined;
3375
+ preventCommon?: boolean | undefined;
3376
+ preventUserInfo?: boolean | undefined;
3377
+ historyCount?: number | undefined;
3378
+ expiryDays?: number | undefined;
3379
+ } | undefined;
3380
+ session?: {
3381
+ maxConcurrent?: number | undefined;
3382
+ disallowMultipleSessions?: boolean | undefined;
3383
+ maxLifetime?: string | number | undefined;
3384
+ } | undefined;
3385
+ login?: {
3386
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
3387
+ } | undefined;
3388
+ social?: {
3389
+ google?: {
3390
+ clientSecret?: string | undefined;
3391
+ enabled?: boolean | undefined;
3392
+ clientId?: string | string[] | undefined;
3393
+ callbackUrl?: string | undefined;
3394
+ scopes?: string[] | undefined;
3395
+ autoLink?: boolean | undefined;
3396
+ allowSignup?: boolean | undefined;
3397
+ } | undefined;
3398
+ apple?: {
3399
+ enabled?: boolean | undefined;
3400
+ clientId?: string | string[] | undefined;
3401
+ callbackUrl?: string | undefined;
3402
+ scopes?: string[] | undefined;
3403
+ autoLink?: boolean | undefined;
3404
+ allowSignup?: boolean | undefined;
3405
+ teamId?: string | undefined;
3406
+ keyId?: string | undefined;
3407
+ privateKeyPem?: string | undefined;
3408
+ } | undefined;
3409
+ facebook?: {
3410
+ clientSecret?: string | undefined;
3411
+ enabled?: boolean | undefined;
3412
+ clientId?: string | string[] | undefined;
3413
+ callbackUrl?: string | undefined;
3414
+ scopes?: string[] | undefined;
3415
+ autoLink?: boolean | undefined;
3416
+ allowSignup?: boolean | undefined;
3417
+ } | undefined;
3418
+ redirect?: {
3419
+ frontendBaseUrl?: string | undefined;
3420
+ allowAbsoluteReturnTo?: boolean | undefined;
3421
+ allowedReturnToOrigins?: string[] | undefined;
3422
+ } | undefined;
3423
+ } | undefined;
3424
+ signup?: {
3425
+ enabled?: boolean | undefined;
3426
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
3427
+ allowDuplicatePhones?: boolean | undefined;
3428
+ emailVerification?: {
3429
+ expiresIn?: number | undefined;
3430
+ baseUrl?: string | undefined;
3431
+ maxAttempts?: number | undefined;
3432
+ resendDelay?: number | undefined;
3433
+ rateLimitMax?: number | undefined;
3434
+ rateLimitWindow?: number | undefined;
3435
+ maxAttemptsPerUser?: number | undefined;
3436
+ maxAttemptsPerIP?: number | undefined;
3437
+ attemptWindow?: number | undefined;
3438
+ } | undefined;
3439
+ phoneVerification?: {
3440
+ expiresIn?: number | undefined;
3441
+ baseUrl?: string | undefined;
3442
+ maxAttempts?: number | undefined;
3443
+ resendDelay?: number | undefined;
3444
+ rateLimitMax?: number | undefined;
3445
+ rateLimitWindow?: number | undefined;
3446
+ maxAttemptsPerUser?: number | undefined;
3447
+ maxAttemptsPerIP?: number | undefined;
3448
+ attemptWindow?: number | undefined;
3449
+ codeLength?: number | undefined;
3450
+ } | undefined;
3451
+ } | undefined;
3452
+ security?: {
3453
+ csrf?: {
3454
+ cookieName?: string | undefined;
3455
+ headerName?: string | undefined;
3456
+ tokenLength?: number | undefined;
3457
+ excludedPaths?: string[] | undefined;
3458
+ cookieOptions?: {
3459
+ secure?: boolean | undefined;
3460
+ sameSite?: "strict" | "lax" | "none" | undefined;
3461
+ domain?: string | undefined;
3462
+ path?: string | undefined;
3463
+ } | undefined;
3464
+ } | undefined;
3465
+ } | undefined;
3466
+ tokenDelivery?: {
3467
+ method?: "json" | "cookies" | "hybrid" | undefined;
3468
+ cookieOptions?: {
3469
+ secure?: boolean | undefined;
3470
+ sameSite?: "strict" | "lax" | "none" | undefined;
3471
+ domain?: string | undefined;
3472
+ path?: string | undefined;
3473
+ } | undefined;
3474
+ cookieNamePrefix?: string | undefined;
3475
+ hybridPolicy?: {
3476
+ webOrigins?: string[] | undefined;
3477
+ nativeOrigins?: string[] | undefined;
3478
+ } | undefined;
3479
+ } | undefined;
3480
+ tablePrefix?: string | undefined;
3481
+ lockout?: {
3482
+ enabled?: boolean | undefined;
3483
+ duration?: number | undefined;
3484
+ maxAttempts?: number | undefined;
3485
+ attemptWindow?: number | undefined;
3486
+ resetOnSuccess?: boolean | undefined;
3487
+ } | undefined;
3488
+ auditLogs?: {
3489
+ enabled?: boolean | undefined;
3490
+ fireAndForget?: boolean | undefined;
3491
+ } | undefined;
3492
+ emailNotifications?: {
3493
+ enabled?: boolean | undefined;
3494
+ suppress?: {
3495
+ welcome?: boolean | undefined;
3496
+ accountLockout?: boolean | undefined;
3497
+ passwordChanged?: boolean | undefined;
3498
+ mfaDeviceRemoved?: boolean | undefined;
3499
+ mfaMethodAdded?: boolean | undefined;
3500
+ accountDisabled?: boolean | undefined;
3501
+ accountEnabled?: boolean | undefined;
3502
+ emailChangedOld?: boolean | undefined;
3503
+ emailChangedNew?: boolean | undefined;
3504
+ sessionsRevoked?: boolean | undefined;
3505
+ mfaFirstEnabled?: boolean | undefined;
3506
+ adaptiveMfaRiskDetected?: boolean | undefined;
3507
+ } | undefined;
3508
+ } | undefined;
3509
+ emailProvider?: any;
3510
+ smsProvider?: any;
3511
+ storageAdapter?: any;
3512
+ logger?: any;
3513
+ challenge?: {
3514
+ maxAttempts?: number | undefined;
3515
+ } | undefined;
3516
+ geoLocation?: {
3517
+ maxMind?: {
3518
+ dbPath?: string | undefined;
3519
+ skipDownloads?: boolean | undefined;
3520
+ licenseKey?: string | undefined;
3521
+ accountId?: number | undefined;
3522
+ autoDownloadOnStartup?: boolean | undefined;
3523
+ editions?: string[] | undefined;
3524
+ } | undefined;
3525
+ } | undefined;
3526
+ }>, {
3527
+ jwt: {
3528
+ accessToken: {
3529
+ expiresIn: string | number;
3530
+ secret?: string | undefined;
3531
+ publicKey?: string | undefined;
3532
+ privateKey?: string | undefined;
3533
+ };
3534
+ refreshToken: {
3535
+ expiresIn: string | number;
3536
+ secret: string;
3537
+ rotation?: boolean | undefined;
3538
+ reuseDetection?: boolean | undefined;
3539
+ };
3540
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
3541
+ issuer?: string | undefined;
3542
+ audience?: string | string[] | undefined;
3543
+ };
3544
+ sms?: {
3545
+ templates?: {
3546
+ engine?: any;
3547
+ customTemplates?: Record<string, {
3548
+ contentPath?: string | undefined;
3549
+ content?: string | undefined;
3550
+ }> | undefined;
3551
+ globalVariables?: Record<string, string | number | boolean> | undefined;
3552
+ } | undefined;
3553
+ } | undefined;
3554
+ email?: {
3555
+ globalVariables?: z.objectOutputType<{
3556
+ appName: z.ZodOptional<z.ZodString>;
3557
+ companyName: z.ZodOptional<z.ZodString>;
3558
+ companyAddress: z.ZodOptional<z.ZodString>;
3559
+ brandColor: z.ZodOptional<z.ZodString>;
3560
+ logoUrl: z.ZodOptional<z.ZodString>;
3561
+ dashboardUrl: z.ZodOptional<z.ZodString>;
3562
+ supportEmail: z.ZodOptional<z.ZodString>;
3563
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
3564
+ }, z.ZodUnknown, "strip"> | undefined;
3565
+ templates?: {
3566
+ engine?: any;
3567
+ customTemplates?: Record<string, {
3568
+ htmlPath?: string | undefined;
3569
+ html?: string | undefined;
3570
+ textPath?: string | undefined;
3571
+ text?: string | undefined;
3572
+ subject?: string | undefined;
3573
+ }> | undefined;
3574
+ } | undefined;
3575
+ } | undefined;
3576
+ mfa?: {
3577
+ totp?: {
3578
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
3579
+ window?: number | undefined;
3580
+ stepSeconds?: number | undefined;
3581
+ digits?: number | undefined;
3582
+ } | undefined;
3583
+ passkey?: {
3584
+ rpName: string;
3585
+ rpId: string;
3586
+ origin?: string | string[] | undefined;
3587
+ timeout?: number | undefined;
3588
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
3589
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
3590
+ } | undefined;
3591
+ backup?: {
3592
+ enabled?: boolean | undefined;
3593
+ codeLength?: number | undefined;
3594
+ codeCount?: number | undefined;
3595
+ } | undefined;
3596
+ enabled?: boolean | undefined;
3597
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
3598
+ requireForSocialLogin?: boolean | undefined;
3599
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
3600
+ bypassMFAForTrustedDevices?: boolean | undefined;
3601
+ rememberDeviceDays?: number | undefined;
3602
+ issuer?: string | undefined;
3603
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
3604
+ gracePeriod?: number | undefined;
3605
+ adaptive?: {
3606
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
3607
+ riskThreshold?: number | undefined;
3608
+ riskWeights?: Record<string, number> | undefined;
3609
+ riskLevels?: {
3610
+ low?: {
3611
+ maxScore: number;
3612
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3613
+ notifyUser?: boolean | undefined;
3614
+ } | undefined;
3615
+ medium?: {
3616
+ maxScore: number;
3617
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3618
+ notifyUser?: boolean | undefined;
3619
+ } | undefined;
3620
+ high?: {
3621
+ maxScore: number;
3622
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3623
+ notifyUser?: boolean | undefined;
3624
+ } | undefined;
3625
+ } | undefined;
3626
+ blockedSignIn?: {
3627
+ message?: string | undefined;
3628
+ scope?: "user" | "device" | "ip" | undefined;
3629
+ blockDuration?: number | undefined;
3630
+ errorCode?: string | undefined;
3631
+ } | undefined;
3632
+ maxTravelSpeed?: number | undefined;
3633
+ countryChangeThreshold?: number | undefined;
3634
+ suspiciousActivityWindow?: number | undefined;
3635
+ } | undefined;
3636
+ } | undefined;
3637
+ phone?: {} | undefined;
3638
+ password?: {
3639
+ passwordReset?: {
3640
+ expiresIn?: number | undefined;
3641
+ maxAttempts?: number | undefined;
3642
+ rateLimitMax?: number | undefined;
3643
+ rateLimitWindow?: number | undefined;
3644
+ codeLength?: number | undefined;
3645
+ } | undefined;
3646
+ minLength?: number | undefined;
3647
+ maxLength?: number | undefined;
3648
+ requireUppercase?: boolean | undefined;
3649
+ requireLowercase?: boolean | undefined;
3650
+ requireNumbers?: boolean | undefined;
3651
+ requireSpecialChars?: boolean | undefined;
3652
+ specialChars?: string | undefined;
3653
+ preventCommon?: boolean | undefined;
3654
+ preventUserInfo?: boolean | undefined;
3655
+ historyCount?: number | undefined;
3656
+ expiryDays?: number | undefined;
3657
+ } | undefined;
3658
+ session?: {
3659
+ maxConcurrent?: number | undefined;
3660
+ disallowMultipleSessions?: boolean | undefined;
3661
+ maxLifetime?: string | number | undefined;
3662
+ } | undefined;
3663
+ login?: {
3664
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
3665
+ } | undefined;
3666
+ social?: {
3667
+ google?: {
3668
+ clientSecret?: string | undefined;
3669
+ enabled?: boolean | undefined;
3670
+ clientId?: string | string[] | undefined;
3671
+ callbackUrl?: string | undefined;
3672
+ scopes?: string[] | undefined;
3673
+ autoLink?: boolean | undefined;
3674
+ allowSignup?: boolean | undefined;
3675
+ } | undefined;
3676
+ apple?: {
3677
+ enabled?: boolean | undefined;
3678
+ clientId?: string | string[] | undefined;
3679
+ callbackUrl?: string | undefined;
3680
+ scopes?: string[] | undefined;
3681
+ autoLink?: boolean | undefined;
3682
+ allowSignup?: boolean | undefined;
3683
+ teamId?: string | undefined;
3684
+ keyId?: string | undefined;
3685
+ privateKeyPem?: string | undefined;
3686
+ } | undefined;
3687
+ facebook?: {
3688
+ clientSecret?: string | undefined;
3689
+ enabled?: boolean | undefined;
3690
+ clientId?: string | string[] | undefined;
3691
+ callbackUrl?: string | undefined;
3692
+ scopes?: string[] | undefined;
3693
+ autoLink?: boolean | undefined;
3694
+ allowSignup?: boolean | undefined;
3695
+ } | undefined;
3696
+ redirect?: {
3697
+ frontendBaseUrl?: string | undefined;
3698
+ allowAbsoluteReturnTo?: boolean | undefined;
3699
+ allowedReturnToOrigins?: string[] | undefined;
3700
+ } | undefined;
3701
+ } | undefined;
3702
+ signup?: {
3703
+ enabled?: boolean | undefined;
3704
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
3705
+ allowDuplicatePhones?: boolean | undefined;
3706
+ emailVerification?: {
3707
+ expiresIn?: number | undefined;
3708
+ baseUrl?: string | undefined;
3709
+ maxAttempts?: number | undefined;
3710
+ resendDelay?: number | undefined;
3711
+ rateLimitMax?: number | undefined;
3712
+ rateLimitWindow?: number | undefined;
3713
+ maxAttemptsPerUser?: number | undefined;
3714
+ maxAttemptsPerIP?: number | undefined;
3715
+ attemptWindow?: number | undefined;
3716
+ } | undefined;
3717
+ phoneVerification?: {
3718
+ expiresIn?: number | undefined;
3719
+ baseUrl?: string | undefined;
3720
+ maxAttempts?: number | undefined;
3721
+ resendDelay?: number | undefined;
3722
+ rateLimitMax?: number | undefined;
3723
+ rateLimitWindow?: number | undefined;
3724
+ maxAttemptsPerUser?: number | undefined;
3725
+ maxAttemptsPerIP?: number | undefined;
3726
+ attemptWindow?: number | undefined;
3727
+ codeLength?: number | undefined;
3728
+ } | undefined;
3729
+ } | undefined;
3730
+ security?: {
3731
+ csrf?: {
3732
+ cookieName?: string | undefined;
3733
+ headerName?: string | undefined;
3734
+ tokenLength?: number | undefined;
3735
+ excludedPaths?: string[] | undefined;
3736
+ cookieOptions?: {
3737
+ secure?: boolean | undefined;
3738
+ sameSite?: "strict" | "lax" | "none" | undefined;
3739
+ domain?: string | undefined;
3740
+ path?: string | undefined;
3741
+ } | undefined;
3742
+ } | undefined;
3743
+ } | undefined;
3744
+ tokenDelivery?: {
3745
+ method?: "json" | "cookies" | "hybrid" | undefined;
3746
+ cookieOptions?: {
3747
+ secure?: boolean | undefined;
3748
+ sameSite?: "strict" | "lax" | "none" | undefined;
3749
+ domain?: string | undefined;
3750
+ path?: string | undefined;
3751
+ } | undefined;
3752
+ cookieNamePrefix?: string | undefined;
3753
+ hybridPolicy?: {
3754
+ webOrigins?: string[] | undefined;
3755
+ nativeOrigins?: string[] | undefined;
3756
+ } | undefined;
3757
+ } | undefined;
3758
+ tablePrefix?: string | undefined;
3759
+ lockout?: {
3760
+ enabled?: boolean | undefined;
3761
+ duration?: number | undefined;
3762
+ maxAttempts?: number | undefined;
3763
+ attemptWindow?: number | undefined;
3764
+ resetOnSuccess?: boolean | undefined;
3765
+ } | undefined;
3766
+ auditLogs?: {
3767
+ enabled?: boolean | undefined;
3768
+ fireAndForget?: boolean | undefined;
3769
+ } | undefined;
3770
+ emailNotifications?: {
3771
+ enabled?: boolean | undefined;
3772
+ suppress?: {
3773
+ welcome?: boolean | undefined;
3774
+ accountLockout?: boolean | undefined;
3775
+ passwordChanged?: boolean | undefined;
3776
+ mfaDeviceRemoved?: boolean | undefined;
3777
+ mfaMethodAdded?: boolean | undefined;
3778
+ accountDisabled?: boolean | undefined;
3779
+ accountEnabled?: boolean | undefined;
3780
+ emailChangedOld?: boolean | undefined;
3781
+ emailChangedNew?: boolean | undefined;
3782
+ sessionsRevoked?: boolean | undefined;
3783
+ mfaFirstEnabled?: boolean | undefined;
3784
+ adaptiveMfaRiskDetected?: boolean | undefined;
3785
+ } | undefined;
3786
+ } | undefined;
3787
+ emailProvider?: any;
3788
+ smsProvider?: any;
3789
+ storageAdapter?: any;
3790
+ logger?: any;
3791
+ challenge?: {
3792
+ maxAttempts?: number | undefined;
3793
+ } | undefined;
3794
+ geoLocation?: {
3795
+ maxMind?: {
3796
+ dbPath?: string | undefined;
3797
+ skipDownloads?: boolean | undefined;
3798
+ licenseKey?: string | undefined;
3799
+ accountId?: number | undefined;
3800
+ autoDownloadOnStartup?: boolean | undefined;
3801
+ editions?: string[] | undefined;
3802
+ } | undefined;
3803
+ } | undefined;
3804
+ }, {
3805
+ jwt: {
3806
+ accessToken: {
3807
+ expiresIn: string | number;
3808
+ secret?: string | undefined;
3809
+ publicKey?: string | undefined;
3810
+ privateKey?: string | undefined;
3811
+ };
3812
+ refreshToken: {
3813
+ expiresIn: string | number;
3814
+ secret: string;
3815
+ rotation?: boolean | undefined;
3816
+ reuseDetection?: boolean | undefined;
3817
+ };
3818
+ algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | undefined;
3819
+ issuer?: string | undefined;
3820
+ audience?: string | string[] | undefined;
3821
+ };
3822
+ sms?: {
3823
+ templates?: {
3824
+ engine?: any;
3825
+ customTemplates?: Record<string, {
3826
+ contentPath?: string | undefined;
3827
+ content?: string | undefined;
3828
+ }> | undefined;
3829
+ globalVariables?: Record<string, string | number | boolean> | undefined;
3830
+ } | undefined;
3831
+ } | undefined;
3832
+ email?: {
3833
+ globalVariables?: z.objectInputType<{
3834
+ appName: z.ZodOptional<z.ZodString>;
3835
+ companyName: z.ZodOptional<z.ZodString>;
3836
+ companyAddress: z.ZodOptional<z.ZodString>;
3837
+ brandColor: z.ZodOptional<z.ZodString>;
3838
+ logoUrl: z.ZodOptional<z.ZodString>;
3839
+ dashboardUrl: z.ZodOptional<z.ZodString>;
3840
+ supportEmail: z.ZodOptional<z.ZodString>;
3841
+ footerDisclaimer: z.ZodOptional<z.ZodString>;
3842
+ }, z.ZodUnknown, "strip"> | undefined;
3843
+ templates?: {
3844
+ engine?: any;
3845
+ customTemplates?: Record<string, {
3846
+ htmlPath?: string | undefined;
3847
+ html?: string | undefined;
3848
+ textPath?: string | undefined;
3849
+ text?: string | undefined;
3850
+ subject?: string | undefined;
3851
+ }> | undefined;
3852
+ } | undefined;
3853
+ } | undefined;
3854
+ mfa?: {
3855
+ totp?: {
3856
+ algorithm?: "sha1" | "sha256" | "sha512" | undefined;
3857
+ window?: number | undefined;
3858
+ stepSeconds?: number | undefined;
3859
+ digits?: number | undefined;
3860
+ } | undefined;
3861
+ passkey?: {
3862
+ rpName: string;
3863
+ rpId: string;
3864
+ origin?: string | string[] | undefined;
3865
+ timeout?: number | undefined;
3866
+ userVerification?: "required" | "preferred" | "discouraged" | undefined;
3867
+ authenticatorAttachment?: "platform" | "cross-platform" | undefined;
3868
+ } | undefined;
3869
+ backup?: {
3870
+ enabled?: boolean | undefined;
3871
+ codeLength?: number | undefined;
3872
+ codeCount?: number | undefined;
3873
+ } | undefined;
3874
+ enabled?: boolean | undefined;
3875
+ rememberDevices?: "always" | "user_opt_in" | "never" | undefined;
3876
+ requireForSocialLogin?: boolean | undefined;
3877
+ allowedMethods?: ("totp" | "sms" | "email" | "passkey")[] | undefined;
3878
+ bypassMFAForTrustedDevices?: boolean | undefined;
3879
+ rememberDeviceDays?: number | undefined;
3880
+ issuer?: string | undefined;
3881
+ enforcement?: "OPTIONAL" | "REQUIRED" | "ADAPTIVE" | undefined;
3882
+ gracePeriod?: number | undefined;
3883
+ adaptive?: {
3884
+ triggers?: ("new_device" | "new_ip" | "new_country" | "impossible_travel" | "suspicious_activity" | "recent_password_reset")[] | undefined;
3885
+ riskThreshold?: number | undefined;
3886
+ riskWeights?: Record<string, number> | undefined;
3887
+ riskLevels?: {
3888
+ low?: {
3889
+ maxScore: number;
3890
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3891
+ notifyUser?: boolean | undefined;
3892
+ } | undefined;
3893
+ medium?: {
3894
+ maxScore: number;
3895
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3896
+ notifyUser?: boolean | undefined;
3897
+ } | undefined;
3898
+ high?: {
3899
+ maxScore: number;
3900
+ action?: "allow" | "require_mfa" | "block_signin" | undefined;
3901
+ notifyUser?: boolean | undefined;
3902
+ } | undefined;
3903
+ } | undefined;
3904
+ blockedSignIn?: {
3905
+ message?: string | undefined;
3906
+ scope?: "user" | "device" | "ip" | undefined;
3907
+ blockDuration?: number | undefined;
3908
+ errorCode?: string | undefined;
3909
+ } | undefined;
3910
+ maxTravelSpeed?: number | undefined;
3911
+ countryChangeThreshold?: number | undefined;
3912
+ suspiciousActivityWindow?: number | undefined;
3913
+ } | undefined;
3914
+ } | undefined;
3915
+ phone?: {} | undefined;
3916
+ password?: {
3917
+ passwordReset?: {
3918
+ expiresIn?: number | undefined;
3919
+ maxAttempts?: number | undefined;
3920
+ rateLimitMax?: number | undefined;
3921
+ rateLimitWindow?: number | undefined;
3922
+ codeLength?: number | undefined;
3923
+ } | undefined;
3924
+ minLength?: number | undefined;
3925
+ maxLength?: number | undefined;
3926
+ requireUppercase?: boolean | undefined;
3927
+ requireLowercase?: boolean | undefined;
3928
+ requireNumbers?: boolean | undefined;
3929
+ requireSpecialChars?: boolean | undefined;
3930
+ specialChars?: string | undefined;
3931
+ preventCommon?: boolean | undefined;
3932
+ preventUserInfo?: boolean | undefined;
3933
+ historyCount?: number | undefined;
3934
+ expiryDays?: number | undefined;
3935
+ } | undefined;
3936
+ session?: {
3937
+ maxConcurrent?: number | undefined;
3938
+ disallowMultipleSessions?: boolean | undefined;
3939
+ maxLifetime?: string | number | undefined;
3940
+ } | undefined;
3941
+ login?: {
3942
+ identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
3943
+ } | undefined;
3944
+ social?: {
3945
+ google?: {
3946
+ clientSecret?: string | undefined;
3947
+ enabled?: boolean | undefined;
3948
+ clientId?: string | string[] | undefined;
3949
+ callbackUrl?: string | undefined;
3950
+ scopes?: string[] | undefined;
3951
+ autoLink?: boolean | undefined;
3952
+ allowSignup?: boolean | undefined;
3953
+ } | undefined;
3954
+ apple?: {
3955
+ enabled?: boolean | undefined;
3956
+ clientId?: string | string[] | undefined;
3957
+ callbackUrl?: string | undefined;
3958
+ scopes?: string[] | undefined;
3959
+ autoLink?: boolean | undefined;
3960
+ allowSignup?: boolean | undefined;
3961
+ teamId?: string | undefined;
3962
+ keyId?: string | undefined;
3963
+ privateKeyPem?: string | undefined;
3964
+ } | undefined;
3965
+ facebook?: {
3966
+ clientSecret?: string | undefined;
3967
+ enabled?: boolean | undefined;
3968
+ clientId?: string | string[] | undefined;
3969
+ callbackUrl?: string | undefined;
3970
+ scopes?: string[] | undefined;
3971
+ autoLink?: boolean | undefined;
3972
+ allowSignup?: boolean | undefined;
3973
+ } | undefined;
3974
+ redirect?: {
3975
+ frontendBaseUrl?: string | undefined;
3976
+ allowAbsoluteReturnTo?: boolean | undefined;
3977
+ allowedReturnToOrigins?: string[] | undefined;
3978
+ } | undefined;
3979
+ } | undefined;
3980
+ signup?: {
3981
+ enabled?: boolean | undefined;
3982
+ verificationMethod?: "none" | "email" | "phone" | "both" | undefined;
3983
+ allowDuplicatePhones?: boolean | undefined;
3984
+ emailVerification?: {
3985
+ expiresIn?: number | undefined;
3986
+ baseUrl?: string | undefined;
3987
+ maxAttempts?: number | undefined;
3988
+ resendDelay?: number | undefined;
3989
+ rateLimitMax?: number | undefined;
3990
+ rateLimitWindow?: number | undefined;
3991
+ maxAttemptsPerUser?: number | undefined;
3992
+ maxAttemptsPerIP?: number | undefined;
3993
+ attemptWindow?: number | undefined;
3994
+ } | undefined;
3995
+ phoneVerification?: {
3996
+ expiresIn?: number | undefined;
3997
+ baseUrl?: string | undefined;
3998
+ maxAttempts?: number | undefined;
3999
+ resendDelay?: number | undefined;
4000
+ rateLimitMax?: number | undefined;
4001
+ rateLimitWindow?: number | undefined;
4002
+ maxAttemptsPerUser?: number | undefined;
4003
+ maxAttemptsPerIP?: number | undefined;
4004
+ attemptWindow?: number | undefined;
4005
+ codeLength?: number | undefined;
4006
+ } | undefined;
4007
+ } | undefined;
4008
+ security?: {
4009
+ csrf?: {
4010
+ cookieName?: string | undefined;
4011
+ headerName?: string | undefined;
4012
+ tokenLength?: number | undefined;
4013
+ excludedPaths?: string[] | undefined;
4014
+ cookieOptions?: {
4015
+ secure?: boolean | undefined;
4016
+ sameSite?: "strict" | "lax" | "none" | undefined;
4017
+ domain?: string | undefined;
4018
+ path?: string | undefined;
4019
+ } | undefined;
4020
+ } | undefined;
4021
+ } | undefined;
4022
+ tokenDelivery?: {
4023
+ method?: "json" | "cookies" | "hybrid" | undefined;
4024
+ cookieOptions?: {
4025
+ secure?: boolean | undefined;
4026
+ sameSite?: "strict" | "lax" | "none" | undefined;
4027
+ domain?: string | undefined;
4028
+ path?: string | undefined;
4029
+ } | undefined;
4030
+ cookieNamePrefix?: string | undefined;
4031
+ hybridPolicy?: {
4032
+ webOrigins?: string[] | undefined;
4033
+ nativeOrigins?: string[] | undefined;
4034
+ } | undefined;
4035
+ } | undefined;
4036
+ tablePrefix?: string | undefined;
4037
+ lockout?: {
4038
+ enabled?: boolean | undefined;
4039
+ duration?: number | undefined;
4040
+ maxAttempts?: number | undefined;
4041
+ attemptWindow?: number | undefined;
4042
+ resetOnSuccess?: boolean | undefined;
4043
+ } | undefined;
4044
+ auditLogs?: {
4045
+ enabled?: boolean | undefined;
4046
+ fireAndForget?: boolean | undefined;
4047
+ } | undefined;
4048
+ emailNotifications?: {
4049
+ enabled?: boolean | undefined;
4050
+ suppress?: {
4051
+ welcome?: boolean | undefined;
4052
+ accountLockout?: boolean | undefined;
4053
+ passwordChanged?: boolean | undefined;
4054
+ mfaDeviceRemoved?: boolean | undefined;
4055
+ mfaMethodAdded?: boolean | undefined;
4056
+ accountDisabled?: boolean | undefined;
4057
+ accountEnabled?: boolean | undefined;
4058
+ emailChangedOld?: boolean | undefined;
4059
+ emailChangedNew?: boolean | undefined;
4060
+ sessionsRevoked?: boolean | undefined;
4061
+ mfaFirstEnabled?: boolean | undefined;
4062
+ adaptiveMfaRiskDetected?: boolean | undefined;
4063
+ } | undefined;
4064
+ } | undefined;
4065
+ emailProvider?: any;
4066
+ smsProvider?: any;
4067
+ storageAdapter?: any;
4068
+ logger?: any;
4069
+ challenge?: {
4070
+ maxAttempts?: number | undefined;
4071
+ } | undefined;
4072
+ geoLocation?: {
4073
+ maxMind?: {
4074
+ dbPath?: string | undefined;
4075
+ skipDownloads?: boolean | undefined;
4076
+ licenseKey?: string | undefined;
4077
+ accountId?: number | undefined;
4078
+ autoDownloadOnStartup?: boolean | undefined;
4079
+ editions?: string[] | undefined;
4080
+ } | undefined;
4081
+ } | undefined;
4082
+ }>;
875
4083
  /**
876
4084
  * Type inference from Zod schema
877
4085
  * This provides type safety while Zod provides runtime validation