@objectstack/spec 0.2.0 → 0.3.0

package/dist/system/auth.zod.d.ts

@@ -28,8 +28,8 @@ export declare const OAuthProviderSchema: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
     enabled: boolean;
+    provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
     clientId: string;
     clientSecret: string;
     icon?: string | undefined;
@@ -84,29 +84,29 @@ export declare const MagicLinkConfigSchema: z.ZodObject<{
         link: z.ZodString;
         token: z.ZodString;
     }, "strip", z.ZodTypeAny, {
+        token: string;
         to: string;
         link: string;
-        token: string;
     }, {
+        token: string;
         to: string;
         link: string;
-        token: string;
     }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
 }, "strip", z.ZodTypeAny, {
     enabled: boolean;
     expiryTime: number;
     sendEmail?: ((args_0: {
+        token: string;
         to: string;
         link: string;
-        token: string;
     }, ...args: unknown[]) => Promise<void>) | undefined;
 }, {
     enabled?: boolean | undefined;
     expiryTime?: number | undefined;
     sendEmail?: ((args_0: {
+        token: string;
         to: string;
         link: string;
-        token: string;
     }, ...args: unknown[]) => Promise<void>) | undefined;
 }>;
 export type MagicLinkConfig = z.infer<typeof MagicLinkConfigSchema>;
@@ -264,6 +264,266 @@ export declare const TwoFactorConfigSchema: z.ZodObject<{
     } | undefined;
 }>;
 export type TwoFactorConfig = z.infer<typeof TwoFactorConfigSchema>;
+/**
+ * OIDC / OAuth2 Enterprise Configuration
+ * OpenID Connect configuration for enterprise SSO
+ */
+export declare const OIDCConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    issuer: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    displayName: z.ZodOptional<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    clientId: string;
+    clientSecret: string;
+    scopes: string[];
+    issuer: string;
+    icon?: string | undefined;
+    displayName?: string | undefined;
+    attributeMapping?: Record<string, string> | undefined;
+}, {
+    clientId: string;
+    clientSecret: string;
+    issuer: string;
+    icon?: string | undefined;
+    enabled?: boolean | undefined;
+    scopes?: string[] | undefined;
+    displayName?: string | undefined;
+    attributeMapping?: Record<string, string> | undefined;
+}>;
+export type OIDCConfig = z.infer<typeof OIDCConfigSchema>;
+/**
+ * SAML 2.0 Enterprise Configuration
+ * SAML configuration for legacy enterprise SSO
+ */
+export declare const SAMLConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    entryPoint: z.ZodString;
+    cert: z.ZodString;
+    issuer: z.ZodString;
+    signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+    attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    displayName: z.ZodOptional<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    issuer: string;
+    entryPoint: string;
+    cert: string;
+    signatureAlgorithm: "sha256" | "sha512";
+    icon?: string | undefined;
+    displayName?: string | undefined;
+    attributeMapping?: Record<string, string> | undefined;
+}, {
+    issuer: string;
+    entryPoint: string;
+    cert: string;
+    icon?: string | undefined;
+    enabled?: boolean | undefined;
+    displayName?: string | undefined;
+    attributeMapping?: Record<string, string> | undefined;
+    signatureAlgorithm?: "sha256" | "sha512" | undefined;
+}>;
+export type SAMLConfig = z.infer<typeof SAMLConfigSchema>;
+/**
+ * LDAP / Active Directory Enterprise Configuration
+ * LDAP configuration for on-premise directory services
+ */
+export declare const LDAPConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    url: z.ZodString;
+    bindDn: z.ZodString;
+    bindCredentials: z.ZodString;
+    searchBase: z.ZodString;
+    searchFilter: z.ZodString;
+    groupSearchBase: z.ZodOptional<z.ZodString>;
+    displayName: z.ZodOptional<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    enabled: boolean;
+    bindDn: string;
+    bindCredentials: string;
+    searchBase: string;
+    searchFilter: string;
+    icon?: string | undefined;
+    displayName?: string | undefined;
+    groupSearchBase?: string | undefined;
+}, {
+    url: string;
+    bindDn: string;
+    bindCredentials: string;
+    searchBase: string;
+    searchFilter: string;
+    icon?: string | undefined;
+    enabled?: boolean | undefined;
+    displayName?: string | undefined;
+    groupSearchBase?: string | undefined;
+}>;
+export type LDAPConfig = z.infer<typeof LDAPConfigSchema>;
+/**
+ * Enterprise Authentication Configuration
+ * Combines SAML, LDAP, and OIDC configurations for enterprise SSO
+ */
+export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
+    oidc: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        issuer: z.ZodString;
+        clientId: z.ZodString;
+        clientSecret: z.ZodString;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        clientId: string;
+        clientSecret: string;
+        scopes: string[];
+        issuer: string;
+        icon?: string | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+    }, {
+        clientId: string;
+        clientSecret: string;
+        issuer: string;
+        icon?: string | undefined;
+        enabled?: boolean | undefined;
+        scopes?: string[] | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+    }>>;
+    saml: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        entryPoint: z.ZodString;
+        cert: z.ZodString;
+        issuer: z.ZodString;
+        signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+        attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        issuer: string;
+        entryPoint: string;
+        cert: string;
+        signatureAlgorithm: "sha256" | "sha512";
+        icon?: string | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+    }, {
+        issuer: string;
+        entryPoint: string;
+        cert: string;
+        icon?: string | undefined;
+        enabled?: boolean | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+        signatureAlgorithm?: "sha256" | "sha512" | undefined;
+    }>>;
+    ldap: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        url: z.ZodString;
+        bindDn: z.ZodString;
+        bindCredentials: z.ZodString;
+        searchBase: z.ZodString;
+        searchFilter: z.ZodString;
+        groupSearchBase: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        enabled: boolean;
+        bindDn: string;
+        bindCredentials: string;
+        searchBase: string;
+        searchFilter: string;
+        icon?: string | undefined;
+        displayName?: string | undefined;
+        groupSearchBase?: string | undefined;
+    }, {
+        url: string;
+        bindDn: string;
+        bindCredentials: string;
+        searchBase: string;
+        searchFilter: string;
+        icon?: string | undefined;
+        enabled?: boolean | undefined;
+        displayName?: string | undefined;
+        groupSearchBase?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    oidc?: {
+        enabled: boolean;
+        clientId: string;
+        clientSecret: string;
+        scopes: string[];
+        issuer: string;
+        icon?: string | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+    } | undefined;
+    saml?: {
+        enabled: boolean;
+        issuer: string;
+        entryPoint: string;
+        cert: string;
+        signatureAlgorithm: "sha256" | "sha512";
+        icon?: string | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+    } | undefined;
+    ldap?: {
+        url: string;
+        enabled: boolean;
+        bindDn: string;
+        bindCredentials: string;
+        searchBase: string;
+        searchFilter: string;
+        icon?: string | undefined;
+        displayName?: string | undefined;
+        groupSearchBase?: string | undefined;
+    } | undefined;
+}, {
+    oidc?: {
+        clientId: string;
+        clientSecret: string;
+        issuer: string;
+        icon?: string | undefined;
+        enabled?: boolean | undefined;
+        scopes?: string[] | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+    } | undefined;
+    saml?: {
+        issuer: string;
+        entryPoint: string;
+        cert: string;
+        icon?: string | undefined;
+        enabled?: boolean | undefined;
+        displayName?: string | undefined;
+        attributeMapping?: Record<string, string> | undefined;
+        signatureAlgorithm?: "sha256" | "sha512" | undefined;
+    } | undefined;
+    ldap?: {
+        url: string;
+        bindDn: string;
+        bindCredentials: string;
+        searchBase: string;
+        searchFilter: string;
+        icon?: string | undefined;
+        enabled?: boolean | undefined;
+        displayName?: string | undefined;
+        groupSearchBase?: string | undefined;
+    } | undefined;
+}>;
+export type EnterpriseAuthConfig = z.infer<typeof EnterpriseAuthConfigSchema>;
 /**
  * User Field Mapping Configuration
  * Maps authentication user fields to ObjectStack user object fields
@@ -314,6 +574,76 @@ export declare const DatabaseAdapterSchema: z.ZodObject<{
     schema?: string | undefined;
 }>;
 export type DatabaseAdapter = z.infer<typeof DatabaseAdapterSchema>;
+/**
+ * Default field mappings for better-auth compatibility
+ * These mappings bridge the gap between ObjectStack standard (Auth.js conventions)
+ * and better-auth's field naming conventions
+ */
+export declare const BETTER_AUTH_FIELD_MAPPINGS: {
+    readonly session: {
+        readonly sessionToken: "token";
+        readonly expires: "expiresAt";
+    };
+    readonly account: {
+        readonly providerAccountId: "accountId";
+        readonly provider: "providerId";
+    };
+};
+/**
+ * Database Field Mapping Configuration
+ * Maps ObjectStack standard field names to driver-specific field names.
+ *
+ * Useful when the underlying authentication driver (e.g., better-auth) uses
+ * different column names than the ObjectStack standard schemas (which follow
+ * Auth.js conventions).
+ *
+ * @example
+ * ```typescript
+ * mapping: {
+ *   session: {
+ *     sessionToken: 'token',      // better-auth uses 'token'
+ *     expires: 'expiresAt'        // better-auth uses 'expiresAt'
+ *   },
+ *   account: {
+ *     providerAccountId: 'accountId',  // better-auth uses 'accountId'
+ *     provider: 'providerId'           // better-auth uses 'providerId'
+ *   }
+ * }
+ * ```
+ */
+export declare const DatabaseMappingSchema: z.ZodObject<{
+    /**
+     * User model field mapping
+     * Maps ObjectStack User fields to driver fields
+     */
+    user: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /**
+     * Session model field mapping
+     * Maps ObjectStack Session fields to driver fields
+     */
+    session: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /**
+     * Account model field mapping
+     * Maps ObjectStack Account fields to driver fields
+     */
+    account: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /**
+     * Verification token field mapping
+     * Maps ObjectStack VerificationToken fields to driver fields
+     */
+    verificationToken: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    session: Record<string, string>;
+    account: Record<string, string>;
+    user?: Record<string, string> | undefined;
+    verificationToken?: Record<string, string> | undefined;
+}, {
+    user?: Record<string, string> | undefined;
+    session?: Record<string, string> | undefined;
+    account?: Record<string, string> | undefined;
+    verificationToken?: Record<string, string> | undefined;
+}>;
+export type DatabaseMapping = z.infer<typeof DatabaseMappingSchema>;
 /**
  * Authentication Plugin Configuration
  * Extends authentication with additional features
@@ -429,29 +759,29 @@ export declare const AuthConfigSchema: z.ZodObject<{
             link: z.ZodString;
             token: z.ZodString;
         }, "strip", z.ZodTypeAny, {
+            token: string;
             to: string;
             link: string;
-            token: string;
         }, {
+            token: string;
             to: string;
             link: string;
-            token: string;
         }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
         expiryTime: number;
         sendEmail?: ((args_0: {
+            token: string;
             to: string;
             link: string;
-            token: string;
         }, ...args: unknown[]) => Promise<void>) | undefined;
     }, {
         enabled?: boolean | undefined;
         expiryTime?: number | undefined;
         sendEmail?: ((args_0: {
+            token: string;
             to: string;
             link: string;
-            token: string;
         }, ...args: unknown[]) => Promise<void>) | undefined;
     }>>;
     /**
@@ -493,8 +823,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
             displayName: z.ZodOptional<z.ZodString>;
             icon: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             enabled: boolean;
+            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             clientId: string;
             clientSecret: string;
             icon?: string | undefined;
@@ -513,8 +843,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
         }>, "many">;
     }, "strip", z.ZodTypeAny, {
         providers: {
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             enabled: boolean;
+            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             clientId: string;
             clientSecret: string;
             icon?: string | undefined;
@@ -656,6 +986,182 @@ export declare const AuthConfigSchema: z.ZodObject<{
             enabled?: boolean | undefined;
         } | undefined;
     }>>;
+    /**
+     * Organization (Multi-tenant) configuration
+     * Enables B2B SaaS scenarios where users belong to multiple teams/workspaces
+     */
+    organization: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        allowUserToCreateOrg: z.ZodDefault<z.ZodBoolean>;
+        defaultRole: z.ZodDefault<z.ZodString>;
+        creatorRole: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        allowUserToCreateOrg: boolean;
+        defaultRole: string;
+        creatorRole: string;
+    }, {
+        enabled?: boolean | undefined;
+        allowUserToCreateOrg?: boolean | undefined;
+        defaultRole?: string | undefined;
+        creatorRole?: string | undefined;
+    }>>;
+    /**
+     * Enterprise authentication configuration (SAML, LDAP, OIDC)
+     */
+    enterprise: z.ZodOptional<z.ZodObject<{
+        oidc: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            issuer: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            displayName: z.ZodOptional<z.ZodString>;
+            icon: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            clientId: string;
+            clientSecret: string;
+            scopes: string[];
+            issuer: string;
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        }, {
+            clientId: string;
+            clientSecret: string;
+            issuer: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            scopes?: string[] | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        }>>;
+        saml: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            entryPoint: z.ZodString;
+            cert: z.ZodString;
+            issuer: z.ZodString;
+            signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+            attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            displayName: z.ZodOptional<z.ZodString>;
+            icon: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            issuer: string;
+            entryPoint: string;
+            cert: string;
+            signatureAlgorithm: "sha256" | "sha512";
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        }, {
+            issuer: string;
+            entryPoint: string;
+            cert: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+            signatureAlgorithm?: "sha256" | "sha512" | undefined;
+        }>>;
+        ldap: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            url: z.ZodString;
+            bindDn: z.ZodString;
+            bindCredentials: z.ZodString;
+            searchBase: z.ZodString;
+            searchFilter: z.ZodString;
+            groupSearchBase: z.ZodOptional<z.ZodString>;
+            displayName: z.ZodOptional<z.ZodString>;
+            icon: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            url: string;
+            enabled: boolean;
+            bindDn: string;
+            bindCredentials: string;
+            searchBase: string;
+            searchFilter: string;
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            groupSearchBase?: string | undefined;
+        }, {
+            url: string;
+            bindDn: string;
+            bindCredentials: string;
+            searchBase: string;
+            searchFilter: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            displayName?: string | undefined;
+            groupSearchBase?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        oidc?: {
+            enabled: boolean;
+            clientId: string;
+            clientSecret: string;
+            scopes: string[];
+            issuer: string;
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        } | undefined;
+        saml?: {
+            enabled: boolean;
+            issuer: string;
+            entryPoint: string;
+            cert: string;
+            signatureAlgorithm: "sha256" | "sha512";
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        } | undefined;
+        ldap?: {
+            url: string;
+            enabled: boolean;
+            bindDn: string;
+            bindCredentials: string;
+            searchBase: string;
+            searchFilter: string;
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            groupSearchBase?: string | undefined;
+        } | undefined;
+    }, {
+        oidc?: {
+            clientId: string;
+            clientSecret: string;
+            issuer: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            scopes?: string[] | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        } | undefined;
+        saml?: {
+            issuer: string;
+            entryPoint: string;
+            cert: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+            signatureAlgorithm?: "sha256" | "sha512" | undefined;
+        } | undefined;
+        ldap?: {
+            url: string;
+            bindDn: string;
+            bindCredentials: string;
+            searchBase: string;
+            searchFilter: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            displayName?: string | undefined;
+            groupSearchBase?: string | undefined;
+        } | undefined;
+    }>>;
     /**
      * User field mapping
      */
@@ -703,6 +1209,46 @@ export declare const AuthConfigSchema: z.ZodObject<{
         tablePrefix?: string | undefined;
         schema?: string | undefined;
     }>>;
+    /**
+     * Database field mapping configuration
+     * Maps ObjectStack standard field names to driver-specific field names.
+     *
+     * This is distinct from the database adapter configuration and provides
+     * instructions for the driver to map our standard schema fields to the
+     * underlying engine's fields (e.g., better-auth uses 'token' instead of 'sessionToken').
+     */
+    mapping: z.ZodOptional<z.ZodObject<{
+        /**
+         * User model field mapping
+         * Maps ObjectStack User fields to driver fields
+         */
+        user: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /**
+         * Session model field mapping
+         * Maps ObjectStack Session fields to driver fields
+         */
+        session: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /**
+         * Account model field mapping
+         * Maps ObjectStack Account fields to driver fields
+         */
+        account: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /**
+         * Verification token field mapping
+         * Maps ObjectStack VerificationToken fields to driver fields
+         */
+        verificationToken: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        session: Record<string, string>;
+        account: Record<string, string>;
+        user?: Record<string, string> | undefined;
+        verificationToken?: Record<string, string> | undefined;
+    }, {
+        user?: Record<string, string> | undefined;
+        session?: Record<string, string> | undefined;
+        account?: Record<string, string> | undefined;
+        verificationToken?: Record<string, string> | undefined;
+    }>>;
     /**
      * Additional authentication plugins
      */
@@ -895,8 +1441,6 @@ export declare const AuthConfigSchema: z.ZodObject<{
         blockDuration: number;
         skipSuccessfulRequests: boolean;
     };
-    strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-    baseUrl: string;
     session: {
         expiresIn: number;
         updateAge: number;
@@ -907,6 +1451,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
         cookieHttpOnly: boolean;
         cookieDomain?: string | undefined;
     };
+    strategies: ("oauth" | "email_password" | "magic_link" | "passkey" | "otp" | "anonymous")[];
+    baseUrl: string;
     csrf: {
         enabled: boolean;
         cookieName: string;
@@ -941,8 +1487,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
     } | undefined;
     oauth?: {
         providers: {
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             enabled: boolean;
+            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             clientId: string;
             clientSecret: string;
             icon?: string | undefined;
@@ -959,6 +1505,39 @@ export declare const AuthConfigSchema: z.ZodObject<{
         rpId?: string | undefined;
         allowedOrigins?: string[] | undefined;
     } | undefined;
+    enterprise?: {
+        oidc?: {
+            enabled: boolean;
+            clientId: string;
+            clientSecret: string;
+            scopes: string[];
+            issuer: string;
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        } | undefined;
+        saml?: {
+            enabled: boolean;
+            issuer: string;
+            entryPoint: string;
+            cert: string;
+            signatureAlgorithm: "sha256" | "sha512";
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        } | undefined;
+        ldap?: {
+            url: string;
+            enabled: boolean;
+            bindDn: string;
+            bindCredentials: string;
+            searchBase: string;
+            searchFilter: string;
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            groupSearchBase?: string | undefined;
+        } | undefined;
+    } | undefined;
     emailPassword?: {
         enabled: boolean;
         requireEmailVerification: boolean;
@@ -971,9 +1550,9 @@ export declare const AuthConfigSchema: z.ZodObject<{
         enabled: boolean;
         expiryTime: number;
         sendEmail?: ((args_0: {
+            token: string;
             to: string;
             link: string;
-            token: string;
         }, ...args: unknown[]) => Promise<void>) | undefined;
     } | undefined;
     twoFactor?: {
@@ -985,12 +1564,24 @@ export declare const AuthConfigSchema: z.ZodObject<{
             enabled: boolean;
         } | undefined;
     } | undefined;
+    organization?: {
+        enabled: boolean;
+        allowUserToCreateOrg: boolean;
+        defaultRole: string;
+        creatorRole: string;
+    } | undefined;
     database?: {
         type: "custom" | "prisma" | "drizzle" | "kysely";
         tablePrefix: string;
         connectionString?: string | undefined;
         schema?: string | undefined;
     } | undefined;
+    mapping?: {
+        session: Record<string, string>;
+        account: Record<string, string>;
+        user?: Record<string, string> | undefined;
+        verificationToken?: Record<string, string> | undefined;
+    } | undefined;
     hooks?: {
         beforeSignIn?: ((args_0: {
             email: string;
@@ -1030,7 +1621,7 @@ export declare const AuthConfigSchema: z.ZodObject<{
     label: string;
     name: string;
     secret: string;
-    strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
+    strategies: ("oauth" | "email_password" | "magic_link" | "passkey" | "otp" | "anonymous")[];
     baseUrl: string;
     email?: {
         provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
@@ -1067,6 +1658,49 @@ export declare const AuthConfigSchema: z.ZodObject<{
         userVerification?: "required" | "preferred" | "discouraged" | undefined;
         attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
     } | undefined;
+    enterprise?: {
+        oidc?: {
+            clientId: string;
+            clientSecret: string;
+            issuer: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            scopes?: string[] | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        } | undefined;
+        saml?: {
+            issuer: string;
+            entryPoint: string;
+            cert: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+            signatureAlgorithm?: "sha256" | "sha512" | undefined;
+        } | undefined;
+        ldap?: {
+            url: string;
+            bindDn: string;
+            bindCredentials: string;
+            searchBase: string;
+            searchFilter: string;
+            icon?: string | undefined;
+            enabled?: boolean | undefined;
+            displayName?: string | undefined;
+            groupSearchBase?: string | undefined;
+        } | undefined;
+    } | undefined;
+    session?: {
+        expiresIn?: number | undefined;
+        updateAge?: number | undefined;
+        cookieName?: string | undefined;
+        cookieSecure?: boolean | undefined;
+        cookieSameSite?: "strict" | "none" | "lax" | undefined;
+        cookieDomain?: string | undefined;
+        cookiePath?: string | undefined;
+        cookieHttpOnly?: boolean | undefined;
+    } | undefined;
     emailPassword?: {
         enabled?: boolean | undefined;
         requireEmailVerification?: boolean | undefined;
@@ -1079,21 +1713,11 @@ export declare const AuthConfigSchema: z.ZodObject<{
         enabled?: boolean | undefined;
         expiryTime?: number | undefined;
         sendEmail?: ((args_0: {
+            token: string;
             to: string;
             link: string;
-            token: string;
         }, ...args: unknown[]) => Promise<void>) | undefined;
     } | undefined;
-    session?: {
-        expiresIn?: number | undefined;
-        updateAge?: number | undefined;
-        cookieName?: string | undefined;
-        cookieSecure?: boolean | undefined;
-        cookieSameSite?: "strict" | "none" | "lax" | undefined;
-        cookieDomain?: string | undefined;
-        cookiePath?: string | undefined;
-        cookieHttpOnly?: boolean | undefined;
-    } | undefined;
     csrf?: {
         enabled?: boolean | undefined;
         cookieName?: string | undefined;
@@ -1114,6 +1738,12 @@ export declare const AuthConfigSchema: z.ZodObject<{
             enabled?: boolean | undefined;
         } | undefined;
     } | undefined;
+    organization?: {
+        enabled?: boolean | undefined;
+        allowUserToCreateOrg?: boolean | undefined;
+        defaultRole?: string | undefined;
+        creatorRole?: string | undefined;
+    } | undefined;
     userFieldMapping?: {
         email?: string | undefined;
         image?: string | undefined;
@@ -1129,6 +1759,12 @@ export declare const AuthConfigSchema: z.ZodObject<{
         tablePrefix?: string | undefined;
         schema?: string | undefined;
     } | undefined;
+    mapping?: {
+        user?: Record<string, string> | undefined;
+        session?: Record<string, string> | undefined;
+        account?: Record<string, string> | undefined;
+        verificationToken?: Record<string, string> | undefined;
+    } | undefined;
     plugins?: {
         name: string;
         options?: Record<string, any> | undefined;
@@ -1246,29 +1882,29 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 link: z.ZodString;
                 token: z.ZodString;
             }, "strip", z.ZodTypeAny, {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }, {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
             expiryTime: number;
             sendEmail?: ((args_0: {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         }, {
             enabled?: boolean | undefined;
             expiryTime?: number | undefined;
             sendEmail?: ((args_0: {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         }>>;
         /**
@@ -1310,8 +1946,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 displayName: z.ZodOptional<z.ZodString>;
                 icon: z.ZodOptional<z.ZodString>;
             }, "strip", z.ZodTypeAny, {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 enabled: boolean;
+                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
                 icon?: string | undefined;
@@ -1330,8 +1966,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             }>, "many">;
         }, "strip", z.ZodTypeAny, {
             providers: {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 enabled: boolean;
+                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
                 icon?: string | undefined;
@@ -1473,6 +2109,182 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 enabled?: boolean | undefined;
             } | undefined;
         }>>;
+        /**
+         * Organization (Multi-tenant) configuration
+         * Enables B2B SaaS scenarios where users belong to multiple teams/workspaces
+         */
+        organization: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            allowUserToCreateOrg: z.ZodDefault<z.ZodBoolean>;
+            defaultRole: z.ZodDefault<z.ZodString>;
+            creatorRole: z.ZodDefault<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            allowUserToCreateOrg: boolean;
+            defaultRole: string;
+            creatorRole: string;
+        }, {
+            enabled?: boolean | undefined;
+            allowUserToCreateOrg?: boolean | undefined;
+            defaultRole?: string | undefined;
+            creatorRole?: string | undefined;
+        }>>;
+        /**
+         * Enterprise authentication configuration (SAML, LDAP, OIDC)
+         */
+        enterprise: z.ZodOptional<z.ZodObject<{
+            oidc: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                issuer: z.ZodString;
+                clientId: z.ZodString;
+                clientSecret: z.ZodString;
+                scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                displayName: z.ZodOptional<z.ZodString>;
+                icon: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                clientId: string;
+                clientSecret: string;
+                scopes: string[];
+                issuer: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            }, {
+                clientId: string;
+                clientSecret: string;
+                issuer: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                scopes?: string[] | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            }>>;
+            saml: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                entryPoint: z.ZodString;
+                cert: z.ZodString;
+                issuer: z.ZodString;
+                signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+                attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                displayName: z.ZodOptional<z.ZodString>;
+                icon: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                signatureAlgorithm: "sha256" | "sha512";
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            }, {
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
+            }>>;
+            ldap: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                url: z.ZodString;
+                bindDn: z.ZodString;
+                bindCredentials: z.ZodString;
+                searchBase: z.ZodString;
+                searchFilter: z.ZodString;
+                groupSearchBase: z.ZodOptional<z.ZodString>;
+                displayName: z.ZodOptional<z.ZodString>;
+                icon: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                url: string;
+                enabled: boolean;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            }, {
+                url: string;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            oidc?: {
+                enabled: boolean;
+                clientId: string;
+                clientSecret: string;
+                scopes: string[];
+                issuer: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            saml?: {
+                enabled: boolean;
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                signatureAlgorithm: "sha256" | "sha512";
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            ldap?: {
+                url: string;
+                enabled: boolean;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            } | undefined;
+        }, {
+            oidc?: {
+                clientId: string;
+                clientSecret: string;
+                issuer: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                scopes?: string[] | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            saml?: {
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
+            } | undefined;
+            ldap?: {
+                url: string;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            } | undefined;
+        }>>;
         /**
          * User field mapping
          */
@@ -1520,6 +2332,46 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             tablePrefix?: string | undefined;
             schema?: string | undefined;
         }>>;
+        /**
+         * Database field mapping configuration
+         * Maps ObjectStack standard field names to driver-specific field names.
+         *
+         * This is distinct from the database adapter configuration and provides
+         * instructions for the driver to map our standard schema fields to the
+         * underlying engine's fields (e.g., better-auth uses 'token' instead of 'sessionToken').
+         */
+        mapping: z.ZodOptional<z.ZodObject<{
+            /**
+             * User model field mapping
+             * Maps ObjectStack User fields to driver fields
+             */
+            user: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            /**
+             * Session model field mapping
+             * Maps ObjectStack Session fields to driver fields
+             */
+            session: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            /**
+             * Account model field mapping
+             * Maps ObjectStack Account fields to driver fields
+             */
+            account: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            /**
+             * Verification token field mapping
+             * Maps ObjectStack VerificationToken fields to driver fields
+             */
+            verificationToken: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            session: Record<string, string>;
+            account: Record<string, string>;
+            user?: Record<string, string> | undefined;
+            verificationToken?: Record<string, string> | undefined;
+        }, {
+            user?: Record<string, string> | undefined;
+            session?: Record<string, string> | undefined;
+            account?: Record<string, string> | undefined;
+            verificationToken?: Record<string, string> | undefined;
+        }>>;
         /**
          * Additional authentication plugins
          */
@@ -1712,8 +2564,6 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             blockDuration: number;
             skipSuccessfulRequests: boolean;
         };
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
         session: {
             expiresIn: number;
             updateAge: number;
@@ -1724,6 +2574,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             cookieHttpOnly: boolean;
             cookieDomain?: string | undefined;
         };
+        strategies: ("oauth" | "email_password" | "magic_link" | "passkey" | "otp" | "anonymous")[];
+        baseUrl: string;
         csrf: {
             enabled: boolean;
             cookieName: string;
@@ -1758,8 +2610,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
         } | undefined;
         oauth?: {
             providers: {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 enabled: boolean;
+                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
                 icon?: string | undefined;
@@ -1776,6 +2628,39 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
         } | undefined;
+        enterprise?: {
+            oidc?: {
+                enabled: boolean;
+                clientId: string;
+                clientSecret: string;
+                scopes: string[];
+                issuer: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            saml?: {
+                enabled: boolean;
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                signatureAlgorithm: "sha256" | "sha512";
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            ldap?: {
+                url: string;
+                enabled: boolean;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            } | undefined;
+        } | undefined;
         emailPassword?: {
             enabled: boolean;
             requireEmailVerification: boolean;
@@ -1788,9 +2673,9 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             enabled: boolean;
             expiryTime: number;
             sendEmail?: ((args_0: {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
         twoFactor?: {
@@ -1802,12 +2687,24 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 enabled: boolean;
             } | undefined;
         } | undefined;
+        organization?: {
+            enabled: boolean;
+            allowUserToCreateOrg: boolean;
+            defaultRole: string;
+            creatorRole: string;
+        } | undefined;
         database?: {
             type: "custom" | "prisma" | "drizzle" | "kysely";
             tablePrefix: string;
             connectionString?: string | undefined;
             schema?: string | undefined;
         } | undefined;
+        mapping?: {
+            session: Record<string, string>;
+            account: Record<string, string>;
+            user?: Record<string, string> | undefined;
+            verificationToken?: Record<string, string> | undefined;
+        } | undefined;
         hooks?: {
             beforeSignIn?: ((args_0: {
                 email: string;
@@ -1847,7 +2744,7 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
         label: string;
         name: string;
         secret: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
+        strategies: ("oauth" | "email_password" | "magic_link" | "passkey" | "otp" | "anonymous")[];
         baseUrl: string;
         email?: {
             provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
@@ -1884,6 +2781,49 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             userVerification?: "required" | "preferred" | "discouraged" | undefined;
             attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
         } | undefined;
+        enterprise?: {
+            oidc?: {
+                clientId: string;
+                clientSecret: string;
+                issuer: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                scopes?: string[] | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            saml?: {
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
+            } | undefined;
+            ldap?: {
+                url: string;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            } | undefined;
+        } | undefined;
+        session?: {
+            expiresIn?: number | undefined;
+            updateAge?: number | undefined;
+            cookieName?: string | undefined;
+            cookieSecure?: boolean | undefined;
+            cookieSameSite?: "strict" | "none" | "lax" | undefined;
+            cookieDomain?: string | undefined;
+            cookiePath?: string | undefined;
+            cookieHttpOnly?: boolean | undefined;
+        } | undefined;
         emailPassword?: {
             enabled?: boolean | undefined;
             requireEmailVerification?: boolean | undefined;
@@ -1896,21 +2836,11 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             enabled?: boolean | undefined;
             expiryTime?: number | undefined;
             sendEmail?: ((args_0: {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        session?: {
-            expiresIn?: number | undefined;
-            updateAge?: number | undefined;
-            cookieName?: string | undefined;
-            cookieSecure?: boolean | undefined;
-            cookieSameSite?: "strict" | "none" | "lax" | undefined;
-            cookieDomain?: string | undefined;
-            cookiePath?: string | undefined;
-            cookieHttpOnly?: boolean | undefined;
-        } | undefined;
         csrf?: {
             enabled?: boolean | undefined;
             cookieName?: string | undefined;
@@ -1931,6 +2861,12 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 enabled?: boolean | undefined;
             } | undefined;
         } | undefined;
+        organization?: {
+            enabled?: boolean | undefined;
+            allowUserToCreateOrg?: boolean | undefined;
+            defaultRole?: string | undefined;
+            creatorRole?: string | undefined;
+        } | undefined;
         userFieldMapping?: {
             email?: string | undefined;
             image?: string | undefined;
@@ -1946,6 +2882,12 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             tablePrefix?: string | undefined;
             schema?: string | undefined;
         } | undefined;
+        mapping?: {
+            user?: Record<string, string> | undefined;
+            session?: Record<string, string> | undefined;
+            account?: Record<string, string> | undefined;
+            verificationToken?: Record<string, string> | undefined;
+        } | undefined;
         plugins?: {
             name: string;
             options?: Record<string, any> | undefined;
@@ -2003,8 +2945,6 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             blockDuration: number;
             skipSuccessfulRequests: boolean;
         };
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
         session: {
             expiresIn: number;
             updateAge: number;
@@ -2015,6 +2955,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             cookieHttpOnly: boolean;
             cookieDomain?: string | undefined;
         };
+        strategies: ("oauth" | "email_password" | "magic_link" | "passkey" | "otp" | "anonymous")[];
+        baseUrl: string;
         csrf: {
             enabled: boolean;
             cookieName: string;
@@ -2049,8 +2991,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
         } | undefined;
         oauth?: {
             providers: {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 enabled: boolean;
+                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
                 icon?: string | undefined;
@@ -2067,6 +3009,39 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
         } | undefined;
+        enterprise?: {
+            oidc?: {
+                enabled: boolean;
+                clientId: string;
+                clientSecret: string;
+                scopes: string[];
+                issuer: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            saml?: {
+                enabled: boolean;
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                signatureAlgorithm: "sha256" | "sha512";
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            ldap?: {
+                url: string;
+                enabled: boolean;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            } | undefined;
+        } | undefined;
         emailPassword?: {
             enabled: boolean;
             requireEmailVerification: boolean;
@@ -2079,9 +3054,9 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             enabled: boolean;
             expiryTime: number;
             sendEmail?: ((args_0: {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
         twoFactor?: {
@@ -2093,12 +3068,24 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 enabled: boolean;
             } | undefined;
         } | undefined;
+        organization?: {
+            enabled: boolean;
+            allowUserToCreateOrg: boolean;
+            defaultRole: string;
+            creatorRole: string;
+        } | undefined;
         database?: {
             type: "custom" | "prisma" | "drizzle" | "kysely";
             tablePrefix: string;
             connectionString?: string | undefined;
             schema?: string | undefined;
         } | undefined;
+        mapping?: {
+            session: Record<string, string>;
+            account: Record<string, string>;
+            user?: Record<string, string> | undefined;
+            verificationToken?: Record<string, string> | undefined;
+        } | undefined;
         hooks?: {
             beforeSignIn?: ((args_0: {
                 email: string;
@@ -2141,7 +3128,7 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
         label: string;
         name: string;
         secret: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
+        strategies: ("oauth" | "email_password" | "magic_link" | "passkey" | "otp" | "anonymous")[];
         baseUrl: string;
         email?: {
             provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
@@ -2178,6 +3165,49 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             userVerification?: "required" | "preferred" | "discouraged" | undefined;
             attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
         } | undefined;
+        enterprise?: {
+            oidc?: {
+                clientId: string;
+                clientSecret: string;
+                issuer: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                scopes?: string[] | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+            } | undefined;
+            saml?: {
+                issuer: string;
+                entryPoint: string;
+                cert: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                attributeMapping?: Record<string, string> | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
+            } | undefined;
+            ldap?: {
+                url: string;
+                bindDn: string;
+                bindCredentials: string;
+                searchBase: string;
+                searchFilter: string;
+                icon?: string | undefined;
+                enabled?: boolean | undefined;
+                displayName?: string | undefined;
+                groupSearchBase?: string | undefined;
+            } | undefined;
+        } | undefined;
+        session?: {
+            expiresIn?: number | undefined;
+            updateAge?: number | undefined;
+            cookieName?: string | undefined;
+            cookieSecure?: boolean | undefined;
+            cookieSameSite?: "strict" | "none" | "lax" | undefined;
+            cookieDomain?: string | undefined;
+            cookiePath?: string | undefined;
+            cookieHttpOnly?: boolean | undefined;
+        } | undefined;
         emailPassword?: {
             enabled?: boolean | undefined;
             requireEmailVerification?: boolean | undefined;
@@ -2190,21 +3220,11 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             enabled?: boolean | undefined;
             expiryTime?: number | undefined;
             sendEmail?: ((args_0: {
+                token: string;
                 to: string;
                 link: string;
-                token: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        session?: {
-            expiresIn?: number | undefined;
-            updateAge?: number | undefined;
-            cookieName?: string | undefined;
-            cookieSecure?: boolean | undefined;
-            cookieSameSite?: "strict" | "none" | "lax" | undefined;
-            cookieDomain?: string | undefined;
-            cookiePath?: string | undefined;
-            cookieHttpOnly?: boolean | undefined;
-        } | undefined;
         csrf?: {
             enabled?: boolean | undefined;
             cookieName?: string | undefined;
@@ -2225,6 +3245,12 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 enabled?: boolean | undefined;
             } | undefined;
         } | undefined;
+        organization?: {
+            enabled?: boolean | undefined;
+            allowUserToCreateOrg?: boolean | undefined;
+            defaultRole?: string | undefined;
+            creatorRole?: string | undefined;
+        } | undefined;
         userFieldMapping?: {
             email?: string | undefined;
             image?: string | undefined;
@@ -2240,6 +3266,12 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             tablePrefix?: string | undefined;
             schema?: string | undefined;
         } | undefined;
+        mapping?: {
+            user?: Record<string, string> | undefined;
+            session?: Record<string, string> | undefined;
+            account?: Record<string, string> | undefined;
+            verificationToken?: Record<string, string> | undefined;
+        } | undefined;
         plugins?: {
             name: string;
             options?: Record<string, any> | undefined;