@objectstack/spec 0.3.2 → 0.4.1

package/dist/auth/scim.zod.d.ts

@@ -0,0 +1,2732 @@
+import { z } from 'zod';
+/**
+ * # SCIM 2.0 Protocol Implementation
+ *
+ * System for Cross-domain Identity Management (SCIM) 2.0 specification
+ * implementation for ObjectStack.
+ *
+ * ## Overview
+ *
+ * SCIM 2.0 is an HTTP-based protocol for managing user and group identities
+ * across domains. It provides a standardized REST API for user provisioning,
+ * de-provisioning, and synchronization.
+ *
+ * ## Use Cases
+ *
+ * 1. **Enterprise SSO Integration**
+ *    - Integrate with Okta, Azure AD, OneLogin
+ *    - Automatic user provisioning from corporate directory
+ *    - Just-in-Time (JIT) user creation on first login
+ *
+ * 2. **User Lifecycle Management**
+ *    - Automatically create users when they join organization
+ *    - Update user attributes when they change roles
+ *    - Deactivate users when they leave organization
+ *
+ * 3. **Group/Department Synchronization**
+ *    - Sync organizational structure from AD/LDAP
+ *    - Maintain group memberships automatically
+ *    - Map corporate roles to application permissions
+ *
+ * 4. **Compliance & Audit**
+ *    - Maintain accurate user directory
+ *    - Track all identity changes
+ *    - Meet SOX/HIPAA requirements for user management
+ *
+ * ## Specification References
+ *
+ * - **RFC 7643**: SCIM Core Schema
+ * - **RFC 7644**: SCIM Protocol
+ * - **RFC 7642**: SCIM Requirements
+ *
+ * ## Industry Implementations
+ *
+ * - **Okta**: Leading SCIM provider
+ * - **Azure AD**: Microsoft's identity platform
+ * - **OneLogin**: Enterprise SSO provider
+ * - **Google Workspace**: Google's identity management
+ *
+ * @see https://datatracker.ietf.org/doc/html/rfc7643
+ * @see https://datatracker.ietf.org/doc/html/rfc7644
+ */
+/**
+ * SCIM Schema URIs
+ * Standard schema identifiers defined in RFC 7643
+ */
+export declare const SCIM_SCHEMAS: {
+    readonly USER: "urn:ietf:params:scim:schemas:core:2.0:User";
+    readonly GROUP: "urn:ietf:params:scim:schemas:core:2.0:Group";
+    readonly ENTERPRISE_USER: "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User";
+    readonly RESOURCE_TYPE: "urn:ietf:params:scim:schemas:core:2.0:ResourceType";
+    readonly SERVICE_PROVIDER_CONFIG: "urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig";
+    readonly SCHEMA: "urn:ietf:params:scim:schemas:core:2.0:Schema";
+    readonly LIST_RESPONSE: "urn:ietf:params:scim:api:messages:2.0:ListResponse";
+    readonly PATCH_OP: "urn:ietf:params:scim:api:messages:2.0:PatchOp";
+    readonly BULK_REQUEST: "urn:ietf:params:scim:api:messages:2.0:BulkRequest";
+    readonly BULK_RESPONSE: "urn:ietf:params:scim:api:messages:2.0:BulkResponse";
+    readonly ERROR: "urn:ietf:params:scim:api:messages:2.0:Error";
+};
+/**
+ * SCIM Meta Schema
+ * Common metadata for all SCIM resources
+ */
+export declare const SCIMMetaSchema: z.ZodObject<{
+    /**
+     * Resource type name
+     * @example "User", "Group"
+     */
+    resourceType: z.ZodOptional<z.ZodString>;
+    /**
+     * Resource creation timestamp (ISO 8601)
+     */
+    created: z.ZodOptional<z.ZodString>;
+    /**
+     * Last modification timestamp (ISO 8601)
+     */
+    lastModified: z.ZodOptional<z.ZodString>;
+    /**
+     * Resource location URI
+     * Absolute URL to the resource
+     */
+    location: z.ZodOptional<z.ZodString>;
+    /**
+     * Entity tag for optimistic concurrency control
+     * Used with If-Match header for conditional updates
+     */
+    version: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    location?: string | undefined;
+    version?: string | undefined;
+    lastModified?: string | undefined;
+    created?: string | undefined;
+    resourceType?: string | undefined;
+}, {
+    location?: string | undefined;
+    version?: string | undefined;
+    lastModified?: string | undefined;
+    created?: string | undefined;
+    resourceType?: string | undefined;
+}>;
+export type SCIMMeta = z.infer<typeof SCIMMetaSchema>;
+/**
+ * SCIM Name Schema
+ * Structured name components
+ */
+export declare const SCIMNameSchema: z.ZodObject<{
+    /**
+     * Full name formatted for display
+     * @example "Ms. Barbara Jane Jensen III"
+     */
+    formatted: z.ZodOptional<z.ZodString>;
+    /**
+     * Family name (surname)
+     * @example "Jensen"
+     */
+    familyName: z.ZodOptional<z.ZodString>;
+    /**
+     * Given name (first name)
+     * @example "Barbara"
+     */
+    givenName: z.ZodOptional<z.ZodString>;
+    /**
+     * Middle name
+     * @example "Jane"
+     */
+    middleName: z.ZodOptional<z.ZodString>;
+    /**
+     * Honorific prefix
+     * @example "Ms.", "Dr.", "Prof."
+     */
+    honorificPrefix: z.ZodOptional<z.ZodString>;
+    /**
+     * Honorific suffix
+     * @example "III", "Jr.", "Sr."
+     */
+    honorificSuffix: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    formatted?: string | undefined;
+    familyName?: string | undefined;
+    givenName?: string | undefined;
+    middleName?: string | undefined;
+    honorificPrefix?: string | undefined;
+    honorificSuffix?: string | undefined;
+}, {
+    formatted?: string | undefined;
+    familyName?: string | undefined;
+    givenName?: string | undefined;
+    middleName?: string | undefined;
+    honorificPrefix?: string | undefined;
+    honorificSuffix?: string | undefined;
+}>;
+export type SCIMName = z.infer<typeof SCIMNameSchema>;
+/**
+ * SCIM Email Schema
+ * Multi-valued email address
+ */
+export declare const SCIMEmailSchema: z.ZodObject<{
+    /**
+     * Email address value
+     */
+    value: z.ZodString;
+    /**
+     * Email type
+     * @example "work", "home", "other"
+     */
+    type: z.ZodOptional<z.ZodEnum<["work", "home", "other"]>>;
+    /**
+     * Display label for the email
+     */
+    display: z.ZodOptional<z.ZodString>;
+    /**
+     * Whether this is the primary email
+     */
+    primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    value: string;
+    primary: boolean;
+    type?: "home" | "work" | "other" | undefined;
+    display?: string | undefined;
+}, {
+    value: string;
+    type?: "home" | "work" | "other" | undefined;
+    display?: string | undefined;
+    primary?: boolean | undefined;
+}>;
+export type SCIMEmail = z.infer<typeof SCIMEmailSchema>;
+/**
+ * SCIM Phone Number Schema
+ * Multi-valued phone number
+ */
+export declare const SCIMPhoneNumberSchema: z.ZodObject<{
+    /**
+     * Phone number value
+     * Format is not enforced to support international numbers
+     */
+    value: z.ZodString;
+    /**
+     * Phone type
+     */
+    type: z.ZodOptional<z.ZodEnum<["work", "home", "mobile", "fax", "pager", "other"]>>;
+    /**
+     * Display label for the phone number
+     */
+    display: z.ZodOptional<z.ZodString>;
+    /**
+     * Whether this is the primary phone
+     */
+    primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    value: string;
+    primary: boolean;
+    type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+    display?: string | undefined;
+}, {
+    value: string;
+    type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+    display?: string | undefined;
+    primary?: boolean | undefined;
+}>;
+export type SCIMPhoneNumber = z.infer<typeof SCIMPhoneNumberSchema>;
+/**
+ * SCIM Address Schema
+ * Multi-valued physical mailing address
+ */
+export declare const SCIMAddressSchema: z.ZodObject<{
+    /**
+     * Full mailing address formatted for display
+     */
+    formatted: z.ZodOptional<z.ZodString>;
+    /**
+     * Full street address
+     */
+    streetAddress: z.ZodOptional<z.ZodString>;
+    /**
+     * City or locality
+     */
+    locality: z.ZodOptional<z.ZodString>;
+    /**
+     * State or region
+     */
+    region: z.ZodOptional<z.ZodString>;
+    /**
+     * Zip code or postal code
+     */
+    postalCode: z.ZodOptional<z.ZodString>;
+    /**
+     * Country
+     */
+    country: z.ZodOptional<z.ZodString>;
+    /**
+     * Address type
+     */
+    type: z.ZodOptional<z.ZodEnum<["work", "home", "other"]>>;
+    /**
+     * Whether this is the primary address
+     */
+    primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    primary: boolean;
+    type?: "home" | "work" | "other" | undefined;
+    postalCode?: string | undefined;
+    country?: string | undefined;
+    formatted?: string | undefined;
+    region?: string | undefined;
+    streetAddress?: string | undefined;
+    locality?: string | undefined;
+}, {
+    type?: "home" | "work" | "other" | undefined;
+    postalCode?: string | undefined;
+    country?: string | undefined;
+    formatted?: string | undefined;
+    primary?: boolean | undefined;
+    region?: string | undefined;
+    streetAddress?: string | undefined;
+    locality?: string | undefined;
+}>;
+export type SCIMAddress = z.infer<typeof SCIMAddressSchema>;
+/**
+ * SCIM Group Reference
+ * Reference to a group the user belongs to
+ */
+export declare const SCIMGroupReferenceSchema: z.ZodObject<{
+    /**
+     * Group identifier
+     */
+    value: z.ZodString;
+    /**
+     * Direct reference to the group resource
+     */
+    $ref: z.ZodOptional<z.ZodString>;
+    /**
+     * Human-readable group name
+     */
+    display: z.ZodOptional<z.ZodString>;
+    /**
+     * Type of group
+     */
+    type: z.ZodOptional<z.ZodEnum<["direct", "indirect"]>>;
+}, "strip", z.ZodTypeAny, {
+    value: string;
+    type?: "indirect" | "direct" | undefined;
+    display?: string | undefined;
+    $ref?: string | undefined;
+}, {
+    value: string;
+    type?: "indirect" | "direct" | undefined;
+    display?: string | undefined;
+    $ref?: string | undefined;
+}>;
+export type SCIMGroupReference = z.infer<typeof SCIMGroupReferenceSchema>;
+/**
+ * SCIM Enterprise User Extension
+ * Enterprise-specific user attributes
+ */
+export declare const SCIMEnterpriseUserSchema: z.ZodObject<{
+    /**
+     * Employee number
+     */
+    employeeNumber: z.ZodOptional<z.ZodString>;
+    /**
+     * Cost center
+     */
+    costCenter: z.ZodOptional<z.ZodString>;
+    /**
+     * Organization unit
+     */
+    organization: z.ZodOptional<z.ZodString>;
+    /**
+     * Division
+     */
+    division: z.ZodOptional<z.ZodString>;
+    /**
+     * Department
+     */
+    department: z.ZodOptional<z.ZodString>;
+    /**
+     * Manager reference
+     */
+    manager: z.ZodOptional<z.ZodObject<{
+        value: z.ZodString;
+        $ref: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        displayName?: string | undefined;
+        $ref?: string | undefined;
+    }, {
+        value: string;
+        displayName?: string | undefined;
+        $ref?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    department?: string | undefined;
+    organization?: string | undefined;
+    employeeNumber?: string | undefined;
+    costCenter?: string | undefined;
+    division?: string | undefined;
+    manager?: {
+        value: string;
+        displayName?: string | undefined;
+        $ref?: string | undefined;
+    } | undefined;
+}, {
+    department?: string | undefined;
+    organization?: string | undefined;
+    employeeNumber?: string | undefined;
+    costCenter?: string | undefined;
+    division?: string | undefined;
+    manager?: {
+        value: string;
+        displayName?: string | undefined;
+        $ref?: string | undefined;
+    } | undefined;
+}>;
+export type SCIMEnterpriseUser = z.infer<typeof SCIMEnterpriseUserSchema>;
+/**
+ * SCIM User Schema (Core)
+ * Complete SCIM 2.0 User resource
+ */
+export declare const SCIMUserSchema: z.ZodEffects<z.ZodObject<{
+    /**
+     * SCIM schema URIs
+     * Must include at minimum the core User schema URI
+     */
+    schemas: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    /**
+     * Unique identifier
+     */
+    id: z.ZodOptional<z.ZodString>;
+    /**
+     * External identifier
+     * Identifier from the provisioning client
+     */
+    externalId: z.ZodOptional<z.ZodString>;
+    /**
+     * Unique username
+     * REQUIRED for user creation
+     */
+    userName: z.ZodString;
+    /**
+     * Structured name
+     */
+    name: z.ZodOptional<z.ZodObject<{
+        /**
+         * Full name formatted for display
+         * @example "Ms. Barbara Jane Jensen III"
+         */
+        formatted: z.ZodOptional<z.ZodString>;
+        /**
+         * Family name (surname)
+         * @example "Jensen"
+         */
+        familyName: z.ZodOptional<z.ZodString>;
+        /**
+         * Given name (first name)
+         * @example "Barbara"
+         */
+        givenName: z.ZodOptional<z.ZodString>;
+        /**
+         * Middle name
+         * @example "Jane"
+         */
+        middleName: z.ZodOptional<z.ZodString>;
+        /**
+         * Honorific prefix
+         * @example "Ms.", "Dr.", "Prof."
+         */
+        honorificPrefix: z.ZodOptional<z.ZodString>;
+        /**
+         * Honorific suffix
+         * @example "III", "Jr.", "Sr."
+         */
+        honorificSuffix: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        formatted?: string | undefined;
+        familyName?: string | undefined;
+        givenName?: string | undefined;
+        middleName?: string | undefined;
+        honorificPrefix?: string | undefined;
+        honorificSuffix?: string | undefined;
+    }, {
+        formatted?: string | undefined;
+        familyName?: string | undefined;
+        givenName?: string | undefined;
+        middleName?: string | undefined;
+        honorificPrefix?: string | undefined;
+        honorificSuffix?: string | undefined;
+    }>>;
+    /**
+     * Display name
+     */
+    displayName: z.ZodOptional<z.ZodString>;
+    /**
+     * Nickname or casual name
+     */
+    nickName: z.ZodOptional<z.ZodString>;
+    /**
+     * Profile URL
+     */
+    profileUrl: z.ZodOptional<z.ZodString>;
+    /**
+     * Job title
+     */
+    title: z.ZodOptional<z.ZodString>;
+    /**
+     * User type (employee, contractor, etc.)
+     */
+    userType: z.ZodOptional<z.ZodString>;
+    /**
+     * Preferred language (ISO 639-1)
+     */
+    preferredLanguage: z.ZodOptional<z.ZodString>;
+    /**
+     * Locale (e.g., en-US)
+     */
+    locale: z.ZodOptional<z.ZodString>;
+    /**
+     * Timezone (e.g., America/Los_Angeles)
+     */
+    timezone: z.ZodOptional<z.ZodString>;
+    /**
+     * Account active status
+     */
+    active: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    /**
+     * Password (write-only, never returned)
+     */
+    password: z.ZodOptional<z.ZodString>;
+    /**
+     * Email addresses (multi-valued)
+     */
+    emails: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        /**
+         * Email address value
+         */
+        value: z.ZodString;
+        /**
+         * Email type
+         * @example "work", "home", "other"
+         */
+        type: z.ZodOptional<z.ZodEnum<["work", "home", "other"]>>;
+        /**
+         * Display label for the email
+         */
+        display: z.ZodOptional<z.ZodString>;
+        /**
+         * Whether this is the primary email
+         */
+        primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        primary: boolean;
+        type?: "home" | "work" | "other" | undefined;
+        display?: string | undefined;
+    }, {
+        value: string;
+        type?: "home" | "work" | "other" | undefined;
+        display?: string | undefined;
+        primary?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * Phone numbers (multi-valued)
+     */
+    phoneNumbers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        /**
+         * Phone number value
+         * Format is not enforced to support international numbers
+         */
+        value: z.ZodString;
+        /**
+         * Phone type
+         */
+        type: z.ZodOptional<z.ZodEnum<["work", "home", "mobile", "fax", "pager", "other"]>>;
+        /**
+         * Display label for the phone number
+         */
+        display: z.ZodOptional<z.ZodString>;
+        /**
+         * Whether this is the primary phone
+         */
+        primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        primary: boolean;
+        type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+        display?: string | undefined;
+    }, {
+        value: string;
+        type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+        display?: string | undefined;
+        primary?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * Instant messaging addresses
+     */
+    ims: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        type: z.ZodOptional<z.ZodString>;
+        primary: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * Photos (profile pictures)
+     */
+    photos: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        type: z.ZodOptional<z.ZodEnum<["photo", "thumbnail"]>>;
+        primary: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type?: "photo" | "thumbnail" | undefined;
+        primary?: boolean | undefined;
+    }, {
+        value: string;
+        type?: "photo" | "thumbnail" | undefined;
+        primary?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * Physical addresses
+     */
+    addresses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        /**
+         * Full mailing address formatted for display
+         */
+        formatted: z.ZodOptional<z.ZodString>;
+        /**
+         * Full street address
+         */
+        streetAddress: z.ZodOptional<z.ZodString>;
+        /**
+         * City or locality
+         */
+        locality: z.ZodOptional<z.ZodString>;
+        /**
+         * State or region
+         */
+        region: z.ZodOptional<z.ZodString>;
+        /**
+         * Zip code or postal code
+         */
+        postalCode: z.ZodOptional<z.ZodString>;
+        /**
+         * Country
+         */
+        country: z.ZodOptional<z.ZodString>;
+        /**
+         * Address type
+         */
+        type: z.ZodOptional<z.ZodEnum<["work", "home", "other"]>>;
+        /**
+         * Whether this is the primary address
+         */
+        primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        primary: boolean;
+        type?: "home" | "work" | "other" | undefined;
+        postalCode?: string | undefined;
+        country?: string | undefined;
+        formatted?: string | undefined;
+        region?: string | undefined;
+        streetAddress?: string | undefined;
+        locality?: string | undefined;
+    }, {
+        type?: "home" | "work" | "other" | undefined;
+        postalCode?: string | undefined;
+        country?: string | undefined;
+        formatted?: string | undefined;
+        primary?: boolean | undefined;
+        region?: string | undefined;
+        streetAddress?: string | undefined;
+        locality?: string | undefined;
+    }>, "many">>;
+    /**
+     * Group memberships
+     */
+    groups: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        /**
+         * Group identifier
+         */
+        value: z.ZodString;
+        /**
+         * Direct reference to the group resource
+         */
+        $ref: z.ZodOptional<z.ZodString>;
+        /**
+         * Human-readable group name
+         */
+        display: z.ZodOptional<z.ZodString>;
+        /**
+         * Type of group
+         */
+        type: z.ZodOptional<z.ZodEnum<["direct", "indirect"]>>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type?: "indirect" | "direct" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }, {
+        value: string;
+        type?: "indirect" | "direct" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }>, "many">>;
+    /**
+     * User entitlements
+     */
+    entitlements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        type: z.ZodOptional<z.ZodString>;
+        primary: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * User roles
+     */
+    roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        type: z.ZodOptional<z.ZodString>;
+        primary: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * X509 certificates
+     */
+    x509Certificates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        type: z.ZodOptional<z.ZodString>;
+        primary: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }, {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * Resource metadata
+     */
+    meta: z.ZodOptional<z.ZodObject<{
+        /**
+         * Resource type name
+         * @example "User", "Group"
+         */
+        resourceType: z.ZodOptional<z.ZodString>;
+        /**
+         * Resource creation timestamp (ISO 8601)
+         */
+        created: z.ZodOptional<z.ZodString>;
+        /**
+         * Last modification timestamp (ISO 8601)
+         */
+        lastModified: z.ZodOptional<z.ZodString>;
+        /**
+         * Resource location URI
+         * Absolute URL to the resource
+         */
+        location: z.ZodOptional<z.ZodString>;
+        /**
+         * Entity tag for optimistic concurrency control
+         * Used with If-Match header for conditional updates
+         */
+        version: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    }, {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    }>>;
+    /**
+     * Enterprise user extension
+     * Only present when enterprise extension is used
+     */
+    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": z.ZodOptional<z.ZodObject<{
+        /**
+         * Employee number
+         */
+        employeeNumber: z.ZodOptional<z.ZodString>;
+        /**
+         * Cost center
+         */
+        costCenter: z.ZodOptional<z.ZodString>;
+        /**
+         * Organization unit
+         */
+        organization: z.ZodOptional<z.ZodString>;
+        /**
+         * Division
+         */
+        division: z.ZodOptional<z.ZodString>;
+        /**
+         * Department
+         */
+        department: z.ZodOptional<z.ZodString>;
+        /**
+         * Manager reference
+         */
+        manager: z.ZodOptional<z.ZodObject<{
+            value: z.ZodString;
+            $ref: z.ZodOptional<z.ZodString>;
+            displayName: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        }, {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        department?: string | undefined;
+        organization?: string | undefined;
+        employeeNumber?: string | undefined;
+        costCenter?: string | undefined;
+        division?: string | undefined;
+        manager?: {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        } | undefined;
+    }, {
+        department?: string | undefined;
+        organization?: string | undefined;
+        employeeNumber?: string | undefined;
+        costCenter?: string | undefined;
+        division?: string | undefined;
+        manager?: {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        } | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    active: boolean;
+    schemas: string[];
+    userName: string;
+    password?: string | undefined;
+    name?: {
+        formatted?: string | undefined;
+        familyName?: string | undefined;
+        givenName?: string | undefined;
+        middleName?: string | undefined;
+        honorificPrefix?: string | undefined;
+        honorificSuffix?: string | undefined;
+    } | undefined;
+    externalId?: string | undefined;
+    id?: string | undefined;
+    roles?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    groups?: {
+        value: string;
+        type?: "indirect" | "direct" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }[] | undefined;
+    title?: string | undefined;
+    timezone?: string | undefined;
+    locale?: string | undefined;
+    displayName?: string | undefined;
+    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+        department?: string | undefined;
+        organization?: string | undefined;
+        employeeNumber?: string | undefined;
+        costCenter?: string | undefined;
+        division?: string | undefined;
+        manager?: {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        } | undefined;
+    } | undefined;
+    nickName?: string | undefined;
+    profileUrl?: string | undefined;
+    userType?: string | undefined;
+    preferredLanguage?: string | undefined;
+    emails?: {
+        value: string;
+        primary: boolean;
+        type?: "home" | "work" | "other" | undefined;
+        display?: string | undefined;
+    }[] | undefined;
+    phoneNumbers?: {
+        value: string;
+        primary: boolean;
+        type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+        display?: string | undefined;
+    }[] | undefined;
+    ims?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    photos?: {
+        value: string;
+        type?: "photo" | "thumbnail" | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    addresses?: {
+        primary: boolean;
+        type?: "home" | "work" | "other" | undefined;
+        postalCode?: string | undefined;
+        country?: string | undefined;
+        formatted?: string | undefined;
+        region?: string | undefined;
+        streetAddress?: string | undefined;
+        locality?: string | undefined;
+    }[] | undefined;
+    entitlements?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    x509Certificates?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    meta?: {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    } | undefined;
+}, {
+    userName: string;
+    password?: string | undefined;
+    name?: {
+        formatted?: string | undefined;
+        familyName?: string | undefined;
+        givenName?: string | undefined;
+        middleName?: string | undefined;
+        honorificPrefix?: string | undefined;
+        honorificSuffix?: string | undefined;
+    } | undefined;
+    externalId?: string | undefined;
+    active?: boolean | undefined;
+    id?: string | undefined;
+    roles?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    groups?: {
+        value: string;
+        type?: "indirect" | "direct" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }[] | undefined;
+    title?: string | undefined;
+    timezone?: string | undefined;
+    locale?: string | undefined;
+    displayName?: string | undefined;
+    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+        department?: string | undefined;
+        organization?: string | undefined;
+        employeeNumber?: string | undefined;
+        costCenter?: string | undefined;
+        division?: string | undefined;
+        manager?: {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        } | undefined;
+    } | undefined;
+    schemas?: string[] | undefined;
+    nickName?: string | undefined;
+    profileUrl?: string | undefined;
+    userType?: string | undefined;
+    preferredLanguage?: string | undefined;
+    emails?: {
+        value: string;
+        type?: "home" | "work" | "other" | undefined;
+        display?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    phoneNumbers?: {
+        value: string;
+        type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+        display?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    ims?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    photos?: {
+        value: string;
+        type?: "photo" | "thumbnail" | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    addresses?: {
+        type?: "home" | "work" | "other" | undefined;
+        postalCode?: string | undefined;
+        country?: string | undefined;
+        formatted?: string | undefined;
+        primary?: boolean | undefined;
+        region?: string | undefined;
+        streetAddress?: string | undefined;
+        locality?: string | undefined;
+    }[] | undefined;
+    entitlements?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    x509Certificates?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    meta?: {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    } | undefined;
+}>, {
+    active: boolean;
+    schemas: string[];
+    userName: string;
+    password?: string | undefined;
+    name?: {
+        formatted?: string | undefined;
+        familyName?: string | undefined;
+        givenName?: string | undefined;
+        middleName?: string | undefined;
+        honorificPrefix?: string | undefined;
+        honorificSuffix?: string | undefined;
+    } | undefined;
+    externalId?: string | undefined;
+    id?: string | undefined;
+    roles?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    groups?: {
+        value: string;
+        type?: "indirect" | "direct" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }[] | undefined;
+    title?: string | undefined;
+    timezone?: string | undefined;
+    locale?: string | undefined;
+    displayName?: string | undefined;
+    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+        department?: string | undefined;
+        organization?: string | undefined;
+        employeeNumber?: string | undefined;
+        costCenter?: string | undefined;
+        division?: string | undefined;
+        manager?: {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        } | undefined;
+    } | undefined;
+    nickName?: string | undefined;
+    profileUrl?: string | undefined;
+    userType?: string | undefined;
+    preferredLanguage?: string | undefined;
+    emails?: {
+        value: string;
+        primary: boolean;
+        type?: "home" | "work" | "other" | undefined;
+        display?: string | undefined;
+    }[] | undefined;
+    phoneNumbers?: {
+        value: string;
+        primary: boolean;
+        type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+        display?: string | undefined;
+    }[] | undefined;
+    ims?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    photos?: {
+        value: string;
+        type?: "photo" | "thumbnail" | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    addresses?: {
+        primary: boolean;
+        type?: "home" | "work" | "other" | undefined;
+        postalCode?: string | undefined;
+        country?: string | undefined;
+        formatted?: string | undefined;
+        region?: string | undefined;
+        streetAddress?: string | undefined;
+        locality?: string | undefined;
+    }[] | undefined;
+    entitlements?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    x509Certificates?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    meta?: {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    } | undefined;
+}, {
+    userName: string;
+    password?: string | undefined;
+    name?: {
+        formatted?: string | undefined;
+        familyName?: string | undefined;
+        givenName?: string | undefined;
+        middleName?: string | undefined;
+        honorificPrefix?: string | undefined;
+        honorificSuffix?: string | undefined;
+    } | undefined;
+    externalId?: string | undefined;
+    active?: boolean | undefined;
+    id?: string | undefined;
+    roles?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    groups?: {
+        value: string;
+        type?: "indirect" | "direct" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }[] | undefined;
+    title?: string | undefined;
+    timezone?: string | undefined;
+    locale?: string | undefined;
+    displayName?: string | undefined;
+    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+        department?: string | undefined;
+        organization?: string | undefined;
+        employeeNumber?: string | undefined;
+        costCenter?: string | undefined;
+        division?: string | undefined;
+        manager?: {
+            value: string;
+            displayName?: string | undefined;
+            $ref?: string | undefined;
+        } | undefined;
+    } | undefined;
+    schemas?: string[] | undefined;
+    nickName?: string | undefined;
+    profileUrl?: string | undefined;
+    userType?: string | undefined;
+    preferredLanguage?: string | undefined;
+    emails?: {
+        value: string;
+        type?: "home" | "work" | "other" | undefined;
+        display?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    phoneNumbers?: {
+        value: string;
+        type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+        display?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    ims?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    photos?: {
+        value: string;
+        type?: "photo" | "thumbnail" | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    addresses?: {
+        type?: "home" | "work" | "other" | undefined;
+        postalCode?: string | undefined;
+        country?: string | undefined;
+        formatted?: string | undefined;
+        primary?: boolean | undefined;
+        region?: string | undefined;
+        streetAddress?: string | undefined;
+        locality?: string | undefined;
+    }[] | undefined;
+    entitlements?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    x509Certificates?: {
+        value: string;
+        type?: string | undefined;
+        primary?: boolean | undefined;
+    }[] | undefined;
+    meta?: {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    } | undefined;
+}>;
+export type SCIMUser = z.infer<typeof SCIMUserSchema>;
+/**
+ * SCIM Member Reference
+ * Reference to a member in a group
+ */
+export declare const SCIMMemberReferenceSchema: z.ZodObject<{
+    /**
+     * Member identifier
+     */
+    value: z.ZodString;
+    /**
+     * Direct reference to the member resource
+     */
+    $ref: z.ZodOptional<z.ZodString>;
+    /**
+     * Member type (User or Group for nested groups)
+     */
+    type: z.ZodOptional<z.ZodEnum<["User", "Group"]>>;
+    /**
+     * Human-readable member name
+     */
+    display: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    value: string;
+    type?: "User" | "Group" | undefined;
+    display?: string | undefined;
+    $ref?: string | undefined;
+}, {
+    value: string;
+    type?: "User" | "Group" | undefined;
+    display?: string | undefined;
+    $ref?: string | undefined;
+}>;
+export type SCIMMemberReference = z.infer<typeof SCIMMemberReferenceSchema>;
+/**
+ * SCIM Group Schema
+ * Complete SCIM 2.0 Group resource
+ */
+export declare const SCIMGroupSchema: z.ZodObject<{
+    /**
+     * SCIM schema URIs
+     * Must include at minimum the core Group schema URI
+     */
+    schemas: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    /**
+     * Unique identifier
+     */
+    id: z.ZodOptional<z.ZodString>;
+    /**
+     * External identifier
+     */
+    externalId: z.ZodOptional<z.ZodString>;
+    /**
+     * Group display name
+     * REQUIRED for group creation
+     */
+    displayName: z.ZodString;
+    /**
+     * Group members
+     */
+    members: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        /**
+         * Member identifier
+         */
+        value: z.ZodString;
+        /**
+         * Direct reference to the member resource
+         */
+        $ref: z.ZodOptional<z.ZodString>;
+        /**
+         * Member type (User or Group for nested groups)
+         */
+        type: z.ZodOptional<z.ZodEnum<["User", "Group"]>>;
+        /**
+         * Human-readable member name
+         */
+        display: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type?: "User" | "Group" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }, {
+        value: string;
+        type?: "User" | "Group" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }>, "many">>;
+    /**
+     * Resource metadata
+     */
+    meta: z.ZodOptional<z.ZodObject<{
+        /**
+         * Resource type name
+         * @example "User", "Group"
+         */
+        resourceType: z.ZodOptional<z.ZodString>;
+        /**
+         * Resource creation timestamp (ISO 8601)
+         */
+        created: z.ZodOptional<z.ZodString>;
+        /**
+         * Last modification timestamp (ISO 8601)
+         */
+        lastModified: z.ZodOptional<z.ZodString>;
+        /**
+         * Resource location URI
+         * Absolute URL to the resource
+         */
+        location: z.ZodOptional<z.ZodString>;
+        /**
+         * Entity tag for optimistic concurrency control
+         * Used with If-Match header for conditional updates
+         */
+        version: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    }, {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    displayName: string;
+    schemas: string[];
+    externalId?: string | undefined;
+    id?: string | undefined;
+    meta?: {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    } | undefined;
+    members?: {
+        value: string;
+        type?: "User" | "Group" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }[] | undefined;
+}, {
+    displayName: string;
+    externalId?: string | undefined;
+    id?: string | undefined;
+    schemas?: string[] | undefined;
+    meta?: {
+        location?: string | undefined;
+        version?: string | undefined;
+        lastModified?: string | undefined;
+        created?: string | undefined;
+        resourceType?: string | undefined;
+    } | undefined;
+    members?: {
+        value: string;
+        type?: "User" | "Group" | undefined;
+        display?: string | undefined;
+        $ref?: string | undefined;
+    }[] | undefined;
+}>;
+export type SCIMGroup = z.infer<typeof SCIMGroupSchema>;
+/**
+ * SCIM Resource Union Type
+ * Known SCIM resource types for type-safe list responses
+ */
+export type SCIMResource = SCIMUser | SCIMGroup;
+/**
+ * SCIM List Response
+ * Paginated list of resources
+ *
+ * Generic type T allows for type-safe responses when the resource type is known.
+ * For mixed resource types, use SCIMResource union.
+ */
+export declare const SCIMListResponseSchema: z.ZodObject<{
+    /**
+     * SCIM schema URI
+     */
+    schemas: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    /**
+     * Total number of results matching the query
+     */
+    totalResults: z.ZodNumber;
+    /**
+     * Resources returned in this response
+     * Use SCIMListResponseOf<T> for type-safe responses
+     */
+    Resources: z.ZodArray<z.ZodUnion<[z.ZodEffects<z.ZodObject<{
+        /**
+         * SCIM schema URIs
+         * Must include at minimum the core User schema URI
+         */
+        schemas: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+        /**
+         * Unique identifier
+         */
+        id: z.ZodOptional<z.ZodString>;
+        /**
+         * External identifier
+         * Identifier from the provisioning client
+         */
+        externalId: z.ZodOptional<z.ZodString>;
+        /**
+         * Unique username
+         * REQUIRED for user creation
+         */
+        userName: z.ZodString;
+        /**
+         * Structured name
+         */
+        name: z.ZodOptional<z.ZodObject<{
+            /**
+             * Full name formatted for display
+             * @example "Ms. Barbara Jane Jensen III"
+             */
+            formatted: z.ZodOptional<z.ZodString>;
+            /**
+             * Family name (surname)
+             * @example "Jensen"
+             */
+            familyName: z.ZodOptional<z.ZodString>;
+            /**
+             * Given name (first name)
+             * @example "Barbara"
+             */
+            givenName: z.ZodOptional<z.ZodString>;
+            /**
+             * Middle name
+             * @example "Jane"
+             */
+            middleName: z.ZodOptional<z.ZodString>;
+            /**
+             * Honorific prefix
+             * @example "Ms.", "Dr.", "Prof."
+             */
+            honorificPrefix: z.ZodOptional<z.ZodString>;
+            /**
+             * Honorific suffix
+             * @example "III", "Jr.", "Sr."
+             */
+            honorificSuffix: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        }, {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        }>>;
+        /**
+         * Display name
+         */
+        displayName: z.ZodOptional<z.ZodString>;
+        /**
+         * Nickname or casual name
+         */
+        nickName: z.ZodOptional<z.ZodString>;
+        /**
+         * Profile URL
+         */
+        profileUrl: z.ZodOptional<z.ZodString>;
+        /**
+         * Job title
+         */
+        title: z.ZodOptional<z.ZodString>;
+        /**
+         * User type (employee, contractor, etc.)
+         */
+        userType: z.ZodOptional<z.ZodString>;
+        /**
+         * Preferred language (ISO 639-1)
+         */
+        preferredLanguage: z.ZodOptional<z.ZodString>;
+        /**
+         * Locale (e.g., en-US)
+         */
+        locale: z.ZodOptional<z.ZodString>;
+        /**
+         * Timezone (e.g., America/Los_Angeles)
+         */
+        timezone: z.ZodOptional<z.ZodString>;
+        /**
+         * Account active status
+         */
+        active: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /**
+         * Password (write-only, never returned)
+         */
+        password: z.ZodOptional<z.ZodString>;
+        /**
+         * Email addresses (multi-valued)
+         */
+        emails: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            /**
+             * Email address value
+             */
+            value: z.ZodString;
+            /**
+             * Email type
+             * @example "work", "home", "other"
+             */
+            type: z.ZodOptional<z.ZodEnum<["work", "home", "other"]>>;
+            /**
+             * Display label for the email
+             */
+            display: z.ZodOptional<z.ZodString>;
+            /**
+             * Whether this is the primary email
+             */
+            primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+        }, {
+            value: string;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * Phone numbers (multi-valued)
+         */
+        phoneNumbers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            /**
+             * Phone number value
+             * Format is not enforced to support international numbers
+             */
+            value: z.ZodString;
+            /**
+             * Phone type
+             */
+            type: z.ZodOptional<z.ZodEnum<["work", "home", "mobile", "fax", "pager", "other"]>>;
+            /**
+             * Display label for the phone number
+             */
+            display: z.ZodOptional<z.ZodString>;
+            /**
+             * Whether this is the primary phone
+             */
+            primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+        }, {
+            value: string;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * Instant messaging addresses
+         */
+        ims: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            type: z.ZodOptional<z.ZodString>;
+            primary: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * Photos (profile pictures)
+         */
+        photos: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            type: z.ZodOptional<z.ZodEnum<["photo", "thumbnail"]>>;
+            primary: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }, {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * Physical addresses
+         */
+        addresses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            /**
+             * Full mailing address formatted for display
+             */
+            formatted: z.ZodOptional<z.ZodString>;
+            /**
+             * Full street address
+             */
+            streetAddress: z.ZodOptional<z.ZodString>;
+            /**
+             * City or locality
+             */
+            locality: z.ZodOptional<z.ZodString>;
+            /**
+             * State or region
+             */
+            region: z.ZodOptional<z.ZodString>;
+            /**
+             * Zip code or postal code
+             */
+            postalCode: z.ZodOptional<z.ZodString>;
+            /**
+             * Country
+             */
+            country: z.ZodOptional<z.ZodString>;
+            /**
+             * Address type
+             */
+            type: z.ZodOptional<z.ZodEnum<["work", "home", "other"]>>;
+            /**
+             * Whether this is the primary address
+             */
+            primary: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }, {
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            primary?: boolean | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }>, "many">>;
+        /**
+         * Group memberships
+         */
+        groups: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            /**
+             * Group identifier
+             */
+            value: z.ZodString;
+            /**
+             * Direct reference to the group resource
+             */
+            $ref: z.ZodOptional<z.ZodString>;
+            /**
+             * Human-readable group name
+             */
+            display: z.ZodOptional<z.ZodString>;
+            /**
+             * Type of group
+             */
+            type: z.ZodOptional<z.ZodEnum<["direct", "indirect"]>>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }, {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }>, "many">>;
+        /**
+         * User entitlements
+         */
+        entitlements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            type: z.ZodOptional<z.ZodString>;
+            primary: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * User roles
+         */
+        roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            type: z.ZodOptional<z.ZodString>;
+            primary: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * X509 certificates
+         */
+        x509Certificates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            type: z.ZodOptional<z.ZodString>;
+            primary: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }, {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * Resource metadata
+         */
+        meta: z.ZodOptional<z.ZodObject<{
+            /**
+             * Resource type name
+             * @example "User", "Group"
+             */
+            resourceType: z.ZodOptional<z.ZodString>;
+            /**
+             * Resource creation timestamp (ISO 8601)
+             */
+            created: z.ZodOptional<z.ZodString>;
+            /**
+             * Last modification timestamp (ISO 8601)
+             */
+            lastModified: z.ZodOptional<z.ZodString>;
+            /**
+             * Resource location URI
+             * Absolute URL to the resource
+             */
+            location: z.ZodOptional<z.ZodString>;
+            /**
+             * Entity tag for optimistic concurrency control
+             * Used with If-Match header for conditional updates
+             */
+            version: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        }, {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        }>>;
+        /**
+         * Enterprise user extension
+         * Only present when enterprise extension is used
+         */
+        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": z.ZodOptional<z.ZodObject<{
+            /**
+             * Employee number
+             */
+            employeeNumber: z.ZodOptional<z.ZodString>;
+            /**
+             * Cost center
+             */
+            costCenter: z.ZodOptional<z.ZodString>;
+            /**
+             * Organization unit
+             */
+            organization: z.ZodOptional<z.ZodString>;
+            /**
+             * Division
+             */
+            division: z.ZodOptional<z.ZodString>;
+            /**
+             * Department
+             */
+            department: z.ZodOptional<z.ZodString>;
+            /**
+             * Manager reference
+             */
+            manager: z.ZodOptional<z.ZodObject<{
+                value: z.ZodString;
+                $ref: z.ZodOptional<z.ZodString>;
+                displayName: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            }, {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        }, {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        active: boolean;
+        schemas: string[];
+        userName: string;
+        password?: string | undefined;
+        name?: {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        } | undefined;
+        externalId?: string | undefined;
+        id?: string | undefined;
+        roles?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        groups?: {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+        timezone?: string | undefined;
+        locale?: string | undefined;
+        displayName?: string | undefined;
+        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        } | undefined;
+        nickName?: string | undefined;
+        profileUrl?: string | undefined;
+        userType?: string | undefined;
+        preferredLanguage?: string | undefined;
+        emails?: {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+        }[] | undefined;
+        phoneNumbers?: {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+        }[] | undefined;
+        ims?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        photos?: {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        addresses?: {
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }[] | undefined;
+        entitlements?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        x509Certificates?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+    }, {
+        userName: string;
+        password?: string | undefined;
+        name?: {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        } | undefined;
+        externalId?: string | undefined;
+        active?: boolean | undefined;
+        id?: string | undefined;
+        roles?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        groups?: {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+        timezone?: string | undefined;
+        locale?: string | undefined;
+        displayName?: string | undefined;
+        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        } | undefined;
+        schemas?: string[] | undefined;
+        nickName?: string | undefined;
+        profileUrl?: string | undefined;
+        userType?: string | undefined;
+        preferredLanguage?: string | undefined;
+        emails?: {
+            value: string;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        phoneNumbers?: {
+            value: string;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        ims?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        photos?: {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        addresses?: {
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            primary?: boolean | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }[] | undefined;
+        entitlements?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        x509Certificates?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+    }>, {
+        active: boolean;
+        schemas: string[];
+        userName: string;
+        password?: string | undefined;
+        name?: {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        } | undefined;
+        externalId?: string | undefined;
+        id?: string | undefined;
+        roles?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        groups?: {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+        timezone?: string | undefined;
+        locale?: string | undefined;
+        displayName?: string | undefined;
+        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        } | undefined;
+        nickName?: string | undefined;
+        profileUrl?: string | undefined;
+        userType?: string | undefined;
+        preferredLanguage?: string | undefined;
+        emails?: {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+        }[] | undefined;
+        phoneNumbers?: {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+        }[] | undefined;
+        ims?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        photos?: {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        addresses?: {
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }[] | undefined;
+        entitlements?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        x509Certificates?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+    }, {
+        userName: string;
+        password?: string | undefined;
+        name?: {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        } | undefined;
+        externalId?: string | undefined;
+        active?: boolean | undefined;
+        id?: string | undefined;
+        roles?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        groups?: {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+        timezone?: string | undefined;
+        locale?: string | undefined;
+        displayName?: string | undefined;
+        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        } | undefined;
+        schemas?: string[] | undefined;
+        nickName?: string | undefined;
+        profileUrl?: string | undefined;
+        userType?: string | undefined;
+        preferredLanguage?: string | undefined;
+        emails?: {
+            value: string;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        phoneNumbers?: {
+            value: string;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        ims?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        photos?: {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        addresses?: {
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            primary?: boolean | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }[] | undefined;
+        entitlements?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        x509Certificates?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+    }>, z.ZodObject<{
+        /**
+         * SCIM schema URIs
+         * Must include at minimum the core Group schema URI
+         */
+        schemas: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+        /**
+         * Unique identifier
+         */
+        id: z.ZodOptional<z.ZodString>;
+        /**
+         * External identifier
+         */
+        externalId: z.ZodOptional<z.ZodString>;
+        /**
+         * Group display name
+         * REQUIRED for group creation
+         */
+        displayName: z.ZodString;
+        /**
+         * Group members
+         */
+        members: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            /**
+             * Member identifier
+             */
+            value: z.ZodString;
+            /**
+             * Direct reference to the member resource
+             */
+            $ref: z.ZodOptional<z.ZodString>;
+            /**
+             * Member type (User or Group for nested groups)
+             */
+            type: z.ZodOptional<z.ZodEnum<["User", "Group"]>>;
+            /**
+             * Human-readable member name
+             */
+            display: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            type?: "User" | "Group" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }, {
+            value: string;
+            type?: "User" | "Group" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }>, "many">>;
+        /**
+         * Resource metadata
+         */
+        meta: z.ZodOptional<z.ZodObject<{
+            /**
+             * Resource type name
+             * @example "User", "Group"
+             */
+            resourceType: z.ZodOptional<z.ZodString>;
+            /**
+             * Resource creation timestamp (ISO 8601)
+             */
+            created: z.ZodOptional<z.ZodString>;
+            /**
+             * Last modification timestamp (ISO 8601)
+             */
+            lastModified: z.ZodOptional<z.ZodString>;
+            /**
+             * Resource location URI
+             * Absolute URL to the resource
+             */
+            location: z.ZodOptional<z.ZodString>;
+            /**
+             * Entity tag for optimistic concurrency control
+             * Used with If-Match header for conditional updates
+             */
+            version: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        }, {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        displayName: string;
+        schemas: string[];
+        externalId?: string | undefined;
+        id?: string | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+        members?: {
+            value: string;
+            type?: "User" | "Group" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+    }, {
+        displayName: string;
+        externalId?: string | undefined;
+        id?: string | undefined;
+        schemas?: string[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+        members?: {
+            value: string;
+            type?: "User" | "Group" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+    }>, z.ZodRecord<z.ZodString, z.ZodAny>]>, "many">;
+    /**
+     * 1-based index of the first result
+     */
+    startIndex: z.ZodOptional<z.ZodNumber>;
+    /**
+     * Number of resources per page
+     */
+    itemsPerPage: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    schemas: string[];
+    totalResults: number;
+    Resources: (Record<string, any> | {
+        active: boolean;
+        schemas: string[];
+        userName: string;
+        password?: string | undefined;
+        name?: {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        } | undefined;
+        externalId?: string | undefined;
+        id?: string | undefined;
+        roles?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        groups?: {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+        timezone?: string | undefined;
+        locale?: string | undefined;
+        displayName?: string | undefined;
+        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        } | undefined;
+        nickName?: string | undefined;
+        profileUrl?: string | undefined;
+        userType?: string | undefined;
+        preferredLanguage?: string | undefined;
+        emails?: {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+        }[] | undefined;
+        phoneNumbers?: {
+            value: string;
+            primary: boolean;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+        }[] | undefined;
+        ims?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        photos?: {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        addresses?: {
+            primary: boolean;
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }[] | undefined;
+        entitlements?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        x509Certificates?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+    } | {
+        displayName: string;
+        schemas: string[];
+        externalId?: string | undefined;
+        id?: string | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+        members?: {
+            value: string;
+            type?: "User" | "Group" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+    })[];
+    startIndex?: number | undefined;
+    itemsPerPage?: number | undefined;
+}, {
+    totalResults: number;
+    Resources: (Record<string, any> | {
+        userName: string;
+        password?: string | undefined;
+        name?: {
+            formatted?: string | undefined;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            middleName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+        } | undefined;
+        externalId?: string | undefined;
+        active?: boolean | undefined;
+        id?: string | undefined;
+        roles?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        groups?: {
+            value: string;
+            type?: "indirect" | "direct" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+        timezone?: string | undefined;
+        locale?: string | undefined;
+        displayName?: string | undefined;
+        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"?: {
+            department?: string | undefined;
+            organization?: string | undefined;
+            employeeNumber?: string | undefined;
+            costCenter?: string | undefined;
+            division?: string | undefined;
+            manager?: {
+                value: string;
+                displayName?: string | undefined;
+                $ref?: string | undefined;
+            } | undefined;
+        } | undefined;
+        schemas?: string[] | undefined;
+        nickName?: string | undefined;
+        profileUrl?: string | undefined;
+        userType?: string | undefined;
+        preferredLanguage?: string | undefined;
+        emails?: {
+            value: string;
+            type?: "home" | "work" | "other" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        phoneNumbers?: {
+            value: string;
+            type?: "home" | "work" | "other" | "mobile" | "fax" | "pager" | undefined;
+            display?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        ims?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        photos?: {
+            value: string;
+            type?: "photo" | "thumbnail" | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        addresses?: {
+            type?: "home" | "work" | "other" | undefined;
+            postalCode?: string | undefined;
+            country?: string | undefined;
+            formatted?: string | undefined;
+            primary?: boolean | undefined;
+            region?: string | undefined;
+            streetAddress?: string | undefined;
+            locality?: string | undefined;
+        }[] | undefined;
+        entitlements?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        x509Certificates?: {
+            value: string;
+            type?: string | undefined;
+            primary?: boolean | undefined;
+        }[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+    } | {
+        displayName: string;
+        externalId?: string | undefined;
+        id?: string | undefined;
+        schemas?: string[] | undefined;
+        meta?: {
+            location?: string | undefined;
+            version?: string | undefined;
+            lastModified?: string | undefined;
+            created?: string | undefined;
+            resourceType?: string | undefined;
+        } | undefined;
+        members?: {
+            value: string;
+            type?: "User" | "Group" | undefined;
+            display?: string | undefined;
+            $ref?: string | undefined;
+        }[] | undefined;
+    })[];
+    schemas?: string[] | undefined;
+    startIndex?: number | undefined;
+    itemsPerPage?: number | undefined;
+}>;
+export type SCIMListResponse = z.infer<typeof SCIMListResponseSchema>;
+/**
+ * SCIM Error Response
+ * Error response format
+ */
+export declare const SCIMErrorSchema: z.ZodObject<{
+    /**
+     * SCIM schema URI
+     */
+    schemas: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    /**
+     * HTTP status code
+     */
+    status: z.ZodNumber;
+    /**
+     * SCIM error type
+     */
+    scimType: z.ZodOptional<z.ZodEnum<["invalidFilter", "tooMany", "uniqueness", "mutability", "invalidSyntax", "invalidPath", "noTarget", "invalidValue", "invalidVers", "sensitive"]>>;
+    /**
+     * Human-readable error description
+     */
+    detail: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: number;
+    schemas: string[];
+    scimType?: "invalidFilter" | "tooMany" | "uniqueness" | "mutability" | "invalidSyntax" | "invalidPath" | "noTarget" | "invalidValue" | "invalidVers" | "sensitive" | undefined;
+    detail?: string | undefined;
+}, {
+    status: number;
+    schemas?: string[] | undefined;
+    scimType?: "invalidFilter" | "tooMany" | "uniqueness" | "mutability" | "invalidSyntax" | "invalidPath" | "noTarget" | "invalidValue" | "invalidVers" | "sensitive" | undefined;
+    detail?: string | undefined;
+}>;
+export type SCIMError = z.infer<typeof SCIMErrorSchema>;
+/**
+ * SCIM Patch Operation
+ * For PATCH requests
+ */
+export declare const SCIMPatchOperationSchema: z.ZodObject<{
+    /**
+     * Operation type
+     */
+    op: z.ZodEnum<["add", "remove", "replace"]>;
+    /**
+     * Attribute path to modify
+     */
+    path: z.ZodOptional<z.ZodString>;
+    /**
+     * Value to set
+     */
+    value: z.ZodOptional<z.ZodAny>;
+}, "strip", z.ZodTypeAny, {
+    op: "replace" | "add" | "remove";
+    value?: any;
+    path?: string | undefined;
+}, {
+    op: "replace" | "add" | "remove";
+    value?: any;
+    path?: string | undefined;
+}>;
+export type SCIMPatchOperation = z.infer<typeof SCIMPatchOperationSchema>;
+/**
+ * SCIM Patch Request
+ */
+export declare const SCIMPatchRequestSchema: z.ZodObject<{
+    /**
+     * SCIM schema URI
+     */
+    schemas: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    /**
+     * Array of patch operations
+     */
+    Operations: z.ZodArray<z.ZodObject<{
+        /**
+         * Operation type
+         */
+        op: z.ZodEnum<["add", "remove", "replace"]>;
+        /**
+         * Attribute path to modify
+         */
+        path: z.ZodOptional<z.ZodString>;
+        /**
+         * Value to set
+         */
+        value: z.ZodOptional<z.ZodAny>;
+    }, "strip", z.ZodTypeAny, {
+        op: "replace" | "add" | "remove";
+        value?: any;
+        path?: string | undefined;
+    }, {
+        op: "replace" | "add" | "remove";
+        value?: any;
+        path?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    schemas: string[];
+    Operations: {
+        op: "replace" | "add" | "remove";
+        value?: any;
+        path?: string | undefined;
+    }[];
+}, {
+    Operations: {
+        op: "replace" | "add" | "remove";
+        value?: any;
+        path?: string | undefined;
+    }[];
+    schemas?: string[] | undefined;
+}>;
+export type SCIMPatchRequest = z.infer<typeof SCIMPatchRequestSchema>;
+/**
+ * Helper factory for creating SCIM resources
+ */
+export declare const SCIM: {
+    /**
+     * Create a basic SCIM user
+     */
+    readonly user: (userName: string, email: string, givenName?: string, familyName?: string) => SCIMUser;
+    /**
+     * Create a SCIM group
+     */
+    readonly group: (displayName: string, members?: SCIMMemberReference[]) => SCIMGroup;
+    /**
+     * Create a list response
+     */
+    readonly listResponse: <T>(resources: T[], totalResults?: number) => SCIMListResponse;
+    /**
+     * Create an error response
+     */
+    readonly error: (status: number, detail: string, scimType?: "invalidFilter" | "tooMany" | "uniqueness" | "mutability" | "invalidSyntax" | "invalidPath" | "noTarget" | "invalidValue" | "invalidVers" | "sensitive") => SCIMError;
+};
+//# sourceMappingURL=scim.zod.d.ts.map