@objectstack/spec 0.6.1 → 0.7.2

package/dist/auth/config.zod.d.ts

@@ -9,6 +9,355 @@ import { z } from 'zod';
  * This is a framework-agnostic specification that can be implemented with any
  * authentication library (better-auth, Auth.js, Passport, etc.)
  */
+/**
+ * OAuth2 Authentication Schema
+ * Standard OAuth2 configuration for connector authentication
+ */
+export declare const OAuth2Schema: z.ZodObject<{
+    type: z.ZodLiteral<"oauth2">;
+    authorizationUrl: z.ZodString;
+    tokenUrl: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    redirectUri: z.ZodOptional<z.ZodString>;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    tokenExpiry: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    type: "oauth2";
+    authorizationUrl: string;
+    tokenUrl: string;
+    clientId: string;
+    clientSecret: string;
+    scopes?: string[] | undefined;
+    redirectUri?: string | undefined;
+    refreshToken?: string | undefined;
+    tokenExpiry?: number | undefined;
+}, {
+    type: "oauth2";
+    authorizationUrl: string;
+    tokenUrl: string;
+    clientId: string;
+    clientSecret: string;
+    scopes?: string[] | undefined;
+    redirectUri?: string | undefined;
+    refreshToken?: string | undefined;
+    tokenExpiry?: number | undefined;
+}>;
+export type OAuth2 = z.infer<typeof OAuth2Schema>;
+/**
+ * API Key Authentication Schema
+ * Simple API key authentication for connectors
+ */
+export declare const APIKeySchema: z.ZodObject<{
+    type: z.ZodLiteral<"api-key">;
+    key: z.ZodString;
+    headerName: z.ZodDefault<z.ZodString>;
+    paramName: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "api-key";
+    key: string;
+    headerName: string;
+    paramName?: string | undefined;
+}, {
+    type: "api-key";
+    key: string;
+    headerName?: string | undefined;
+    paramName?: string | undefined;
+}>;
+export type APIKey = z.infer<typeof APIKeySchema>;
+/**
+ * Basic Authentication Schema
+ * HTTP Basic Authentication (username/password)
+ */
+export declare const BasicAuthSchema: z.ZodObject<{
+    type: z.ZodLiteral<"basic">;
+    username: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "basic";
+    password: string;
+    username: string;
+}, {
+    type: "basic";
+    password: string;
+    username: string;
+}>;
+export type BasicAuth = z.infer<typeof BasicAuthSchema>;
+/**
+ * Bearer Token Authentication Schema
+ * HTTP Bearer token authentication
+ */
+export declare const BearerAuthSchema: z.ZodObject<{
+    type: z.ZodLiteral<"bearer">;
+    token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "bearer";
+    token: string;
+}, {
+    type: "bearer";
+    token: string;
+}>;
+export type BearerAuth = z.infer<typeof BearerAuthSchema>;
+/**
+ * No Authentication Schema
+ * For public endpoints that don't require authentication
+ */
+export declare const NoAuthSchema: z.ZodObject<{
+    type: z.ZodLiteral<"none">;
+}, "strip", z.ZodTypeAny, {
+    type: "none";
+}, {
+    type: "none";
+}>;
+export type NoAuth = z.infer<typeof NoAuthSchema>;
+/**
+ * JWT Authentication Schema
+ * JSON Web Token authentication for connectors
+ */
+export declare const JWTAuthSchema: z.ZodObject<{
+    type: z.ZodLiteral<"jwt">;
+    token: z.ZodOptional<z.ZodString>;
+    secretKey: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodDefault<z.ZodEnum<["HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512"]>>;
+    issuer: z.ZodOptional<z.ZodString>;
+    audience: z.ZodOptional<z.ZodString>;
+    subject: z.ZodOptional<z.ZodString>;
+    expiresIn: z.ZodDefault<z.ZodNumber>;
+    claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, "strip", z.ZodTypeAny, {
+    type: "jwt";
+    algorithm: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512";
+    expiresIn: number;
+    token?: string | undefined;
+    subject?: string | undefined;
+    secretKey?: string | undefined;
+    issuer?: string | undefined;
+    audience?: string | undefined;
+    claims?: Record<string, any> | undefined;
+}, {
+    type: "jwt";
+    algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | undefined;
+    token?: string | undefined;
+    expiresIn?: number | undefined;
+    subject?: string | undefined;
+    secretKey?: string | undefined;
+    issuer?: string | undefined;
+    audience?: string | undefined;
+    claims?: Record<string, any> | undefined;
+}>;
+export type JWTAuth = z.infer<typeof JWTAuthSchema>;
+/**
+ * SAML Authentication Schema
+ * SAML 2.0 authentication for enterprise connectors
+ */
+export declare const SAMLAuthSchema: z.ZodObject<{
+    type: z.ZodLiteral<"saml">;
+    entryPoint: z.ZodString;
+    issuer: z.ZodString;
+    certificate: z.ZodString;
+    privateKey: z.ZodOptional<z.ZodString>;
+    callbackUrl: z.ZodOptional<z.ZodString>;
+    signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha1", "sha256", "sha512"]>>;
+    wantAssertionsSigned: z.ZodDefault<z.ZodBoolean>;
+    identifierFormat: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "saml";
+    issuer: string;
+    entryPoint: string;
+    certificate: string;
+    signatureAlgorithm: "sha1" | "sha256" | "sha512";
+    wantAssertionsSigned: boolean;
+    privateKey?: string | undefined;
+    callbackUrl?: string | undefined;
+    identifierFormat?: string | undefined;
+}, {
+    type: "saml";
+    issuer: string;
+    entryPoint: string;
+    certificate: string;
+    privateKey?: string | undefined;
+    callbackUrl?: string | undefined;
+    signatureAlgorithm?: "sha1" | "sha256" | "sha512" | undefined;
+    wantAssertionsSigned?: boolean | undefined;
+    identifierFormat?: string | undefined;
+}>;
+export type SAMLAuth = z.infer<typeof SAMLAuthSchema>;
+/**
+ * Unified Authentication Configuration Schema
+ * Discriminated union of all connector authentication methods
+ *
+ * This is the canonical authentication schema used by connectors and integrations.
+ *
+ * @example
+ * ```typescript
+ * // OAuth2 example
+ * const auth: AuthConfigSchema = {
+ *   type: 'oauth2',
+ *   authorizationUrl: 'https://accounts.google.com/o/oauth2/auth',
+ *   tokenUrl: 'https://oauth2.googleapis.com/token',
+ *   clientId: 'YOUR_CLIENT_ID',
+ *   clientSecret: 'YOUR_CLIENT_SECRET',
+ *   scopes: ['https://www.googleapis.com/auth/userinfo.email']
+ * };
+ *
+ * // API Key example
+ * const auth: AuthConfigSchema = {
+ *   type: 'api-key',
+ *   key: process.env.API_KEY,
+ *   headerName: 'X-API-Key'
+ * };
+ *
+ * // Basic Auth example
+ * const auth: AuthConfigSchema = {
+ *   type: 'basic',
+ *   username: 'admin',
+ *   password: process.env.PASSWORD
+ * };
+ *
+ * // JWT example
+ * const auth: AuthConfigSchema = {
+ *   type: 'jwt',
+ *   secretKey: process.env.JWT_SECRET,
+ *   algorithm: 'HS256',
+ *   expiresIn: 3600
+ * };
+ * ```
+ */
+export declare const AuthConfigSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"oauth2">;
+    authorizationUrl: z.ZodString;
+    tokenUrl: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    redirectUri: z.ZodOptional<z.ZodString>;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    tokenExpiry: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    type: "oauth2";
+    authorizationUrl: string;
+    tokenUrl: string;
+    clientId: string;
+    clientSecret: string;
+    scopes?: string[] | undefined;
+    redirectUri?: string | undefined;
+    refreshToken?: string | undefined;
+    tokenExpiry?: number | undefined;
+}, {
+    type: "oauth2";
+    authorizationUrl: string;
+    tokenUrl: string;
+    clientId: string;
+    clientSecret: string;
+    scopes?: string[] | undefined;
+    redirectUri?: string | undefined;
+    refreshToken?: string | undefined;
+    tokenExpiry?: number | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"api-key">;
+    key: z.ZodString;
+    headerName: z.ZodDefault<z.ZodString>;
+    paramName: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "api-key";
+    key: string;
+    headerName: string;
+    paramName?: string | undefined;
+}, {
+    type: "api-key";
+    key: string;
+    headerName?: string | undefined;
+    paramName?: string | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"basic">;
+    username: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "basic";
+    password: string;
+    username: string;
+}, {
+    type: "basic";
+    password: string;
+    username: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"bearer">;
+    token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "bearer";
+    token: string;
+}, {
+    type: "bearer";
+    token: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"jwt">;
+    token: z.ZodOptional<z.ZodString>;
+    secretKey: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodDefault<z.ZodEnum<["HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512"]>>;
+    issuer: z.ZodOptional<z.ZodString>;
+    audience: z.ZodOptional<z.ZodString>;
+    subject: z.ZodOptional<z.ZodString>;
+    expiresIn: z.ZodDefault<z.ZodNumber>;
+    claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, "strip", z.ZodTypeAny, {
+    type: "jwt";
+    algorithm: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512";
+    expiresIn: number;
+    token?: string | undefined;
+    subject?: string | undefined;
+    secretKey?: string | undefined;
+    issuer?: string | undefined;
+    audience?: string | undefined;
+    claims?: Record<string, any> | undefined;
+}, {
+    type: "jwt";
+    algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | undefined;
+    token?: string | undefined;
+    expiresIn?: number | undefined;
+    subject?: string | undefined;
+    secretKey?: string | undefined;
+    issuer?: string | undefined;
+    audience?: string | undefined;
+    claims?: Record<string, any> | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"saml">;
+    entryPoint: z.ZodString;
+    issuer: z.ZodString;
+    certificate: z.ZodString;
+    privateKey: z.ZodOptional<z.ZodString>;
+    callbackUrl: z.ZodOptional<z.ZodString>;
+    signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha1", "sha256", "sha512"]>>;
+    wantAssertionsSigned: z.ZodDefault<z.ZodBoolean>;
+    identifierFormat: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "saml";
+    issuer: string;
+    entryPoint: string;
+    certificate: string;
+    signatureAlgorithm: "sha1" | "sha256" | "sha512";
+    wantAssertionsSigned: boolean;
+    privateKey?: string | undefined;
+    callbackUrl?: string | undefined;
+    identifierFormat?: string | undefined;
+}, {
+    type: "saml";
+    issuer: string;
+    entryPoint: string;
+    certificate: string;
+    privateKey?: string | undefined;
+    callbackUrl?: string | undefined;
+    signatureAlgorithm?: "sha1" | "sha256" | "sha512" | undefined;
+    wantAssertionsSigned?: boolean | undefined;
+    identifierFormat?: string | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"none">;
+}, "strip", z.ZodTypeAny, {
+    type: "none";
+}, {
+    type: "none";
+}>]>;
+export type AuthConfig = z.infer<typeof AuthConfigSchema>;
 /**
  * Supported authentication strategies
  */
@@ -40,8 +389,8 @@ export declare const OAuthProviderSchema: z.ZodObject<{
     provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
     clientId: string;
     clientSecret: string;
-    icon?: string | undefined;
     enabled?: boolean | undefined;
+    icon?: string | undefined;
     scopes?: string[] | undefined;
     redirectUri?: string | undefined;
     displayName?: string | undefined;
@@ -125,13 +474,13 @@ export declare const PasskeyConfigSchema: z.ZodObject<{
     rpName: string;
     userVerification: "required" | "preferred" | "discouraged";
     attestation: "none" | "indirect" | "direct" | "enterprise";
-    rpId?: string | undefined;
     allowedOrigins?: string[] | undefined;
+    rpId?: string | undefined;
 }, {
     rpName: string;
     enabled?: boolean | undefined;
-    rpId?: string | undefined;
     allowedOrigins?: string[] | undefined;
+    rpId?: string | undefined;
     userVerification?: "required" | "preferred" | "discouraged" | undefined;
     attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
 }>;
@@ -179,14 +528,14 @@ export declare const RateLimitConfigSchema: z.ZodObject<{
     skipSuccessfulRequests: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     enabled: boolean;
-    maxAttempts: number;
     windowMs: number;
+    maxAttempts: number;
     blockDuration: number;
     skipSuccessfulRequests: boolean;
 }, {
     enabled?: boolean | undefined;
-    maxAttempts?: number | undefined;
     windowMs?: number | undefined;
+    maxAttempts?: number | undefined;
     blockDuration?: number | undefined;
     skipSuccessfulRequests?: boolean | undefined;
 }>;
@@ -201,14 +550,14 @@ export declare const CSRFConfigSchema: z.ZodObject<{
     headerName: z.ZodDefault<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     enabled: boolean;
+    headerName: string;
     cookieName: string;
     tokenLength: number;
-    headerName: string;
 }, {
     enabled?: boolean | undefined;
+    headerName?: string | undefined;
     cookieName?: string | undefined;
     tokenLength?: number | undefined;
-    headerName?: string | undefined;
 }>;
 export type CSRFConfig = z.infer<typeof CSRFConfigSchema>;
 /**
@@ -240,27 +589,27 @@ export declare const TwoFactorConfigSchema: z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         count: z.ZodDefault<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        count: number;
         enabled: boolean;
+        count: number;
     }, {
-        count?: number | undefined;
         enabled?: boolean | undefined;
+        count?: number | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
     enabled: boolean;
     qrCodeSize: number;
     issuer?: string | undefined;
     backupCodes?: {
-        count: number;
         enabled: boolean;
+        count: number;
     } | undefined;
 }, {
     enabled?: boolean | undefined;
     issuer?: string | undefined;
     qrCodeSize?: number | undefined;
     backupCodes?: {
-        count?: number | undefined;
         enabled?: boolean | undefined;
+        count?: number | undefined;
     } | undefined;
 }>;
 export type TwoFactorConfig = z.infer<typeof TwoFactorConfigSchema>;
@@ -290,8 +639,8 @@ export declare const OIDCConfigSchema: z.ZodObject<{
     clientId: string;
     clientSecret: string;
     issuer: string;
-    icon?: string | undefined;
     enabled?: boolean | undefined;
+    icon?: string | undefined;
     scopes?: string[] | undefined;
     displayName?: string | undefined;
     attributeMapping?: Record<string, string> | undefined;
@@ -323,11 +672,11 @@ export declare const SAMLConfigSchema: z.ZodObject<{
     cert: string;
     issuer: string;
     entryPoint: string;
-    icon?: string | undefined;
     enabled?: boolean | undefined;
+    icon?: string | undefined;
+    signatureAlgorithm?: "sha256" | "sha512" | undefined;
     displayName?: string | undefined;
     attributeMapping?: Record<string, string> | undefined;
-    signatureAlgorithm?: "sha256" | "sha512" | undefined;
 }>;
 export type SAMLConfig = z.infer<typeof SAMLConfigSchema>;
 /**
@@ -345,8 +694,8 @@ export declare const LDAPConfigSchema: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    url: string;
     enabled: boolean;
+    url: string;
     bindDn: string;
     bindCredentials: string;
     searchBase: string;
@@ -360,8 +709,8 @@ export declare const LDAPConfigSchema: z.ZodObject<{
     bindCredentials: string;
     searchBase: string;
     searchFilter: string;
-    icon?: string | undefined;
     enabled?: boolean | undefined;
+    icon?: string | undefined;
     displayName?: string | undefined;
     groupSearchBase?: string | undefined;
 }>;
@@ -393,8 +742,8 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         clientId: string;
         clientSecret: string;
         issuer: string;
-        icon?: string | undefined;
         enabled?: boolean | undefined;
+        icon?: string | undefined;
         scopes?: string[] | undefined;
         displayName?: string | undefined;
         attributeMapping?: Record<string, string> | undefined;
@@ -421,11 +770,11 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         cert: string;
         issuer: string;
         entryPoint: string;
-        icon?: string | undefined;
         enabled?: boolean | undefined;
+        icon?: string | undefined;
+        signatureAlgorithm?: "sha256" | "sha512" | undefined;
         displayName?: string | undefined;
         attributeMapping?: Record<string, string> | undefined;
-        signatureAlgorithm?: "sha256" | "sha512" | undefined;
     }>>;
     ldap: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -438,8 +787,8 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         displayName: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        url: string;
         enabled: boolean;
+        url: string;
         bindDn: string;
         bindCredentials: string;
         searchBase: string;
@@ -453,35 +802,35 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         bindCredentials: string;
         searchBase: string;
         searchFilter: string;
-        icon?: string | undefined;
         enabled?: boolean | undefined;
+        icon?: string | undefined;
         displayName?: string | undefined;
         groupSearchBase?: string | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    oidc?: {
+    saml?: {
         enabled: boolean;
-        clientId: string;
-        clientSecret: string;
-        scopes: string[];
+        cert: string;
         issuer: string;
+        entryPoint: string;
+        signatureAlgorithm: "sha256" | "sha512";
         icon?: string | undefined;
         displayName?: string | undefined;
         attributeMapping?: Record<string, string> | undefined;
     } | undefined;
-    saml?: {
+    oidc?: {
         enabled: boolean;
-        cert: string;
+        clientId: string;
+        clientSecret: string;
+        scopes: string[];
         issuer: string;
-        entryPoint: string;
-        signatureAlgorithm: "sha256" | "sha512";
         icon?: string | undefined;
         displayName?: string | undefined;
         attributeMapping?: Record<string, string> | undefined;
     } | undefined;
     ldap?: {
-        url: string;
         enabled: boolean;
+        url: string;
         bindDn: string;
         bindCredentials: string;
         searchBase: string;
@@ -491,25 +840,25 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         groupSearchBase?: string | undefined;
     } | undefined;
 }, {
-    oidc?: {
-        clientId: string;
-        clientSecret: string;
+    saml?: {
+        cert: string;
         issuer: string;
-        icon?: string | undefined;
+        entryPoint: string;
         enabled?: boolean | undefined;
-        scopes?: string[] | undefined;
+        icon?: string | undefined;
+        signatureAlgorithm?: "sha256" | "sha512" | undefined;
         displayName?: string | undefined;
         attributeMapping?: Record<string, string> | undefined;
     } | undefined;
-    saml?: {
-        cert: string;
+    oidc?: {
+        clientId: string;
+        clientSecret: string;
         issuer: string;
-        entryPoint: string;
-        icon?: string | undefined;
         enabled?: boolean | undefined;
+        icon?: string | undefined;
+        scopes?: string[] | undefined;
         displayName?: string | undefined;
         attributeMapping?: Record<string, string> | undefined;
-        signatureAlgorithm?: "sha256" | "sha512" | undefined;
     } | undefined;
     ldap?: {
         url: string;
@@ -517,8 +866,8 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         bindCredentials: string;
         searchBase: string;
         searchFilter: string;
-        icon?: string | undefined;
         enabled?: boolean | undefined;
+        icon?: string | undefined;
         displayName?: string | undefined;
         groupSearchBase?: string | undefined;
     } | undefined;
@@ -540,18 +889,18 @@ export declare const UserFieldMappingSchema: z.ZodObject<{
     email: string;
     name: string;
     id: string;
-    emailVerified: string;
     createdAt: string;
     updatedAt: string;
+    emailVerified: string;
     image?: string | undefined;
 }, {
     email?: string | undefined;
     image?: string | undefined;
     name?: string | undefined;
     id?: string | undefined;
-    emailVerified?: string | undefined;
     createdAt?: string | undefined;
     updatedAt?: string | undefined;
+    emailVerified?: string | undefined;
 }>;
 export type UserFieldMapping = z.infer<typeof UserFieldMappingSchema>;
 /**
@@ -653,8 +1002,8 @@ export declare const AuthPluginConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     enabled: boolean;
+    name: string;
     options?: Record<string, any> | undefined;
 }, {
     name: string;
@@ -663,14 +1012,16 @@ export declare const AuthPluginConfigSchema: z.ZodObject<{
 }>;
 export type AuthPluginConfig = z.infer<typeof AuthPluginConfigSchema>;
 /**
- * Complete Authentication Configuration Schema
+ * Complete Application Authentication Configuration Schema
  *
- * This is the main configuration object for authentication
- * in an ObjectStack application.
+ * This is the main configuration object for user authentication
+ * in an ObjectStack application (not for connector authentication).
+ *
+ * For connector authentication, use AuthConfigSchema instead.
  *
  * @example
  * ```typescript
- * const authConfig: AuthConfig = {
+ * const authConfig: ApplicationAuthConfig = {
  *   name: 'main_auth',
  *   label: 'Main Authentication',
  *   strategies: ['email_password', 'oauth'],
@@ -694,7 +1045,7 @@ export type AuthPluginConfig = z.infer<typeof AuthPluginConfigSchema>;
  * };
  * ```
  */
-export declare const AuthConfigSchema: z.ZodObject<{
+export declare const ApplicationAuthConfigSchema: z.ZodObject<{
     /**
      * Unique identifier for this auth configuration
      * Must be in snake_case following ObjectStack conventions
@@ -799,13 +1150,13 @@ export declare const AuthConfigSchema: z.ZodObject<{
         rpName: string;
         userVerification: "required" | "preferred" | "discouraged";
         attestation: "none" | "indirect" | "direct" | "enterprise";
-        rpId?: string | undefined;
         allowedOrigins?: string[] | undefined;
+        rpId?: string | undefined;
     }, {
         rpName: string;
         enabled?: boolean | undefined;
-        rpId?: string | undefined;
         allowedOrigins?: string[] | undefined;
+        rpId?: string | undefined;
         userVerification?: "required" | "preferred" | "discouraged" | undefined;
         attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
     }>>;
@@ -835,8 +1186,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
             provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             clientId: string;
             clientSecret: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
             scopes?: string[] | undefined;
             redirectUri?: string | undefined;
             displayName?: string | undefined;
@@ -857,8 +1208,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
             provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             clientId: string;
             clientSecret: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
             scopes?: string[] | undefined;
             redirectUri?: string | undefined;
             displayName?: string | undefined;
@@ -906,14 +1257,14 @@ export declare const AuthConfigSchema: z.ZodObject<{
         skipSuccessfulRequests: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
-        maxAttempts: number;
         windowMs: number;
+        maxAttempts: number;
         blockDuration: number;
         skipSuccessfulRequests: boolean;
     }, {
         enabled?: boolean | undefined;
-        maxAttempts?: number | undefined;
         windowMs?: number | undefined;
+        maxAttempts?: number | undefined;
         blockDuration?: number | undefined;
         skipSuccessfulRequests?: boolean | undefined;
     }>>;
@@ -927,14 +1278,14 @@ export declare const AuthConfigSchema: z.ZodObject<{
         headerName: z.ZodDefault<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
+        headerName: string;
         cookieName: string;
         tokenLength: number;
-        headerName: string;
     }, {
         enabled?: boolean | undefined;
+        headerName?: string | undefined;
         cookieName?: string | undefined;
         tokenLength?: number | undefined;
-        headerName?: string | undefined;
     }>>;
     /**
      * Account linking configuration
@@ -963,27 +1314,27 @@ export declare const AuthConfigSchema: z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             count: z.ZodDefault<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
-            count: number;
             enabled: boolean;
+            count: number;
         }, {
-            count?: number | undefined;
             enabled?: boolean | undefined;
+            count?: number | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
         qrCodeSize: number;
         issuer?: string | undefined;
         backupCodes?: {
-            count: number;
             enabled: boolean;
+            count: number;
         } | undefined;
     }, {
         enabled?: boolean | undefined;
         issuer?: string | undefined;
         qrCodeSize?: number | undefined;
         backupCodes?: {
-            count?: number | undefined;
             enabled?: boolean | undefined;
+            count?: number | undefined;
         } | undefined;
     }>>;
     /**
@@ -1032,8 +1383,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
             clientId: string;
             clientSecret: string;
             issuer: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
             scopes?: string[] | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
@@ -1060,11 +1411,11 @@ export declare const AuthConfigSchema: z.ZodObject<{
             cert: string;
             issuer: string;
             entryPoint: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
+            signatureAlgorithm?: "sha256" | "sha512" | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
-            signatureAlgorithm?: "sha256" | "sha512" | undefined;
         }>>;
         ldap: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -1077,8 +1428,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
             displayName: z.ZodOptional<z.ZodString>;
             icon: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            url: string;
             enabled: boolean;
+            url: string;
             bindDn: string;
             bindCredentials: string;
             searchBase: string;
@@ -1092,22 +1443,12 @@ export declare const AuthConfigSchema: z.ZodObject<{
             bindCredentials: string;
             searchBase: string;
             searchFilter: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
             displayName?: string | undefined;
             groupSearchBase?: string | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
-        oidc?: {
-            enabled: boolean;
-            clientId: string;
-            clientSecret: string;
-            scopes: string[];
-            issuer: string;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
         saml?: {
             enabled: boolean;
             cert: string;
@@ -1118,11 +1459,21 @@ export declare const AuthConfigSchema: z.ZodObject<{
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
         } | undefined;
-        ldap?: {
-            url: string;
+        oidc?: {
             enabled: boolean;
-            bindDn: string;
-            bindCredentials: string;
+            clientId: string;
+            clientSecret: string;
+            scopes: string[];
+            issuer: string;
+            icon?: string | undefined;
+            displayName?: string | undefined;
+            attributeMapping?: Record<string, string> | undefined;
+        } | undefined;
+        ldap?: {
+            enabled: boolean;
+            url: string;
+            bindDn: string;
+            bindCredentials: string;
             searchBase: string;
             searchFilter: string;
             icon?: string | undefined;
@@ -1130,25 +1481,25 @@ export declare const AuthConfigSchema: z.ZodObject<{
             groupSearchBase?: string | undefined;
         } | undefined;
     }, {
-        oidc?: {
-            clientId: string;
-            clientSecret: string;
+        saml?: {
+            cert: string;
             issuer: string;
-            icon?: string | undefined;
+            entryPoint: string;
             enabled?: boolean | undefined;
-            scopes?: string[] | undefined;
+            icon?: string | undefined;
+            signatureAlgorithm?: "sha256" | "sha512" | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
         } | undefined;
-        saml?: {
-            cert: string;
+        oidc?: {
+            clientId: string;
+            clientSecret: string;
             issuer: string;
-            entryPoint: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
+            scopes?: string[] | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
-            signatureAlgorithm?: "sha256" | "sha512" | undefined;
         } | undefined;
         ldap?: {
             url: string;
@@ -1156,8 +1507,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
             bindCredentials: string;
             searchBase: string;
             searchFilter: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
             displayName?: string | undefined;
             groupSearchBase?: string | undefined;
         } | undefined;
@@ -1177,18 +1528,18 @@ export declare const AuthConfigSchema: z.ZodObject<{
         email: string;
         name: string;
         id: string;
-        emailVerified: string;
         createdAt: string;
         updatedAt: string;
+        emailVerified: string;
         image?: string | undefined;
     }, {
         email?: string | undefined;
         image?: string | undefined;
         name?: string | undefined;
         id?: string | undefined;
-        emailVerified?: string | undefined;
         createdAt?: string | undefined;
         updatedAt?: string | undefined;
+        emailVerified?: string | undefined;
     }>>;
     /**
      * Database adapter configuration
@@ -1257,8 +1608,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         enabled: boolean;
+        name: string;
         options?: Record<string, any> | undefined;
     }, {
         name: string;
@@ -1442,22 +1793,22 @@ export declare const AuthConfigSchema: z.ZodObject<{
         cookieHttpOnly: boolean;
         cookieDomain?: string | undefined;
     };
-    secret: string;
-    driver: string;
-    strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-    baseUrl: string;
     rateLimit: {
         enabled: boolean;
-        maxAttempts: number;
         windowMs: number;
+        maxAttempts: number;
         blockDuration: number;
         skipSuccessfulRequests: boolean;
     };
+    secret: string;
+    driver: string;
+    strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
+    baseUrl: string;
     csrf: {
         enabled: boolean;
+        headerName: string;
         cookieName: string;
         tokenLength: number;
-        headerName: string;
     };
     accountLinking: {
         enabled: boolean;
@@ -1468,14 +1819,14 @@ export declare const AuthConfigSchema: z.ZodObject<{
         email: string;
         name: string;
         id: string;
-        emailVerified: string;
         createdAt: string;
         updatedAt: string;
+        emailVerified: string;
         image?: string | undefined;
     };
     plugins: {
-        name: string;
         enabled: boolean;
+        name: string;
         options?: Record<string, any> | undefined;
     }[];
     allowRegistration: boolean;
@@ -1491,6 +1842,13 @@ export declare const AuthConfigSchema: z.ZodObject<{
         config?: Record<string, any> | undefined;
         fromName?: string | undefined;
     } | undefined;
+    security?: {
+        trustProxy: boolean;
+        ipRateLimiting: boolean;
+        sessionFingerprinting: boolean;
+        maxSessions: number;
+        allowedOrigins?: string[] | undefined;
+    } | undefined;
     oauth?: {
         providers: {
             enabled: boolean;
@@ -1508,33 +1866,33 @@ export declare const AuthConfigSchema: z.ZodObject<{
         rpName: string;
         userVerification: "required" | "preferred" | "discouraged";
         attestation: "none" | "indirect" | "direct" | "enterprise";
-        rpId?: string | undefined;
         allowedOrigins?: string[] | undefined;
+        rpId?: string | undefined;
     } | undefined;
     enterprise?: {
-        oidc?: {
+        saml?: {
             enabled: boolean;
-            clientId: string;
-            clientSecret: string;
-            scopes: string[];
+            cert: string;
             issuer: string;
+            entryPoint: string;
+            signatureAlgorithm: "sha256" | "sha512";
             icon?: string | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
         } | undefined;
-        saml?: {
+        oidc?: {
             enabled: boolean;
-            cert: string;
+            clientId: string;
+            clientSecret: string;
+            scopes: string[];
             issuer: string;
-            entryPoint: string;
-            signatureAlgorithm: "sha256" | "sha512";
             icon?: string | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
         } | undefined;
         ldap?: {
-            url: string;
             enabled: boolean;
+            url: string;
             bindDn: string;
             bindCredentials: string;
             searchBase: string;
@@ -1566,8 +1924,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
         qrCodeSize: number;
         issuer?: string | undefined;
         backupCodes?: {
-            count: number;
             enabled: boolean;
+            count: number;
         } | undefined;
     } | undefined;
     organization?: {
@@ -1604,13 +1962,6 @@ export declare const AuthConfigSchema: z.ZodObject<{
             sessionId: string;
         }, ...args: unknown[]) => Promise<void>) | undefined;
     } | undefined;
-    security?: {
-        trustProxy: boolean;
-        ipRateLimiting: boolean;
-        sessionFingerprinting: boolean;
-        maxSessions: number;
-        allowedOrigins?: string[] | undefined;
-    } | undefined;
     ui?: {
         primaryColor?: string | undefined;
         logo?: string | undefined;
@@ -1646,14 +1997,28 @@ export declare const AuthConfigSchema: z.ZodObject<{
         cookiePath?: string | undefined;
         cookieHttpOnly?: boolean | undefined;
     } | undefined;
+    rateLimit?: {
+        enabled?: boolean | undefined;
+        windowMs?: number | undefined;
+        maxAttempts?: number | undefined;
+        blockDuration?: number | undefined;
+        skipSuccessfulRequests?: boolean | undefined;
+    } | undefined;
     driver?: string | undefined;
+    security?: {
+        allowedOrigins?: string[] | undefined;
+        trustProxy?: boolean | undefined;
+        ipRateLimiting?: boolean | undefined;
+        sessionFingerprinting?: boolean | undefined;
+        maxSessions?: number | undefined;
+    } | undefined;
     oauth?: {
         providers: {
             provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
             clientId: string;
             clientSecret: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
             scopes?: string[] | undefined;
             redirectUri?: string | undefined;
             displayName?: string | undefined;
@@ -1662,31 +2027,31 @@ export declare const AuthConfigSchema: z.ZodObject<{
     passkey?: {
         rpName: string;
         enabled?: boolean | undefined;
-        rpId?: string | undefined;
         allowedOrigins?: string[] | undefined;
+        rpId?: string | undefined;
         userVerification?: "required" | "preferred" | "discouraged" | undefined;
         attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
     } | undefined;
     enterprise?: {
-        oidc?: {
-            clientId: string;
-            clientSecret: string;
+        saml?: {
+            cert: string;
             issuer: string;
-            icon?: string | undefined;
+            entryPoint: string;
             enabled?: boolean | undefined;
-            scopes?: string[] | undefined;
+            icon?: string | undefined;
+            signatureAlgorithm?: "sha256" | "sha512" | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
         } | undefined;
-        saml?: {
-            cert: string;
+        oidc?: {
+            clientId: string;
+            clientSecret: string;
             issuer: string;
-            entryPoint: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
+            scopes?: string[] | undefined;
             displayName?: string | undefined;
             attributeMapping?: Record<string, string> | undefined;
-            signatureAlgorithm?: "sha256" | "sha512" | undefined;
         } | undefined;
         ldap?: {
             url: string;
@@ -1694,8 +2059,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
             bindCredentials: string;
             searchBase: string;
             searchFilter: string;
-            icon?: string | undefined;
             enabled?: boolean | undefined;
+            icon?: string | undefined;
             displayName?: string | undefined;
             groupSearchBase?: string | undefined;
         } | undefined;
@@ -1717,18 +2082,11 @@ export declare const AuthConfigSchema: z.ZodObject<{
             link: string;
         }, ...args: unknown[]) => Promise<void>) | undefined;
     } | undefined;
-    rateLimit?: {
-        enabled?: boolean | undefined;
-        maxAttempts?: number | undefined;
-        windowMs?: number | undefined;
-        blockDuration?: number | undefined;
-        skipSuccessfulRequests?: boolean | undefined;
-    } | undefined;
     csrf?: {
         enabled?: boolean | undefined;
+        headerName?: string | undefined;
         cookieName?: string | undefined;
         tokenLength?: number | undefined;
-        headerName?: string | undefined;
     } | undefined;
     accountLinking?: {
         enabled?: boolean | undefined;
@@ -1740,8 +2098,8 @@ export declare const AuthConfigSchema: z.ZodObject<{
         issuer?: string | undefined;
         qrCodeSize?: number | undefined;
         backupCodes?: {
-            count?: number | undefined;
             enabled?: boolean | undefined;
+            count?: number | undefined;
         } | undefined;
     } | undefined;
     organization?: {
@@ -1755,9 +2113,9 @@ export declare const AuthConfigSchema: z.ZodObject<{
         image?: string | undefined;
         name?: string | undefined;
         id?: string | undefined;
-        emailVerified?: string | undefined;
         createdAt?: string | undefined;
         updatedAt?: string | undefined;
+        emailVerified?: string | undefined;
     } | undefined;
     mapping?: {
         session?: Record<string, string> | undefined;
@@ -1792,13 +2150,6 @@ export declare const AuthConfigSchema: z.ZodObject<{
             sessionId: string;
         }, ...args: unknown[]) => Promise<void>) | undefined;
     } | undefined;
-    security?: {
-        allowedOrigins?: string[] | undefined;
-        trustProxy?: boolean | undefined;
-        ipRateLimiting?: boolean | undefined;
-        sessionFingerprinting?: boolean | undefined;
-        maxSessions?: number | undefined;
-    } | undefined;
     ui?: {
         primaryColor?: string | undefined;
         logo?: string | undefined;
@@ -1808,9 +2159,9 @@ export declare const AuthConfigSchema: z.ZodObject<{
     allowRegistration?: boolean | undefined;
 }>;
 /**
- * TypeScript type inferred from AuthConfigSchema
+ * TypeScript type inferred from ApplicationAuthConfigSchema
  */
-export type AuthConfig = z.infer<typeof AuthConfigSchema>;
+export type ApplicationAuthConfig = z.infer<typeof ApplicationAuthConfigSchema>;
 /**
  * Standard Authentication Provider Schema
  * Wraps the configuration for use in the identity system
@@ -1922,13 +2273,13 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             rpName: string;
             userVerification: "required" | "preferred" | "discouraged";
             attestation: "none" | "indirect" | "direct" | "enterprise";
-            rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
+            rpId?: string | undefined;
         }, {
             rpName: string;
             enabled?: boolean | undefined;
-            rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
+            rpId?: string | undefined;
             userVerification?: "required" | "preferred" | "discouraged" | undefined;
             attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
         }>>;
@@ -1958,8 +2309,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 scopes?: string[] | undefined;
                 redirectUri?: string | undefined;
                 displayName?: string | undefined;
@@ -1980,8 +2331,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 scopes?: string[] | undefined;
                 redirectUri?: string | undefined;
                 displayName?: string | undefined;
@@ -2029,14 +2380,14 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             skipSuccessfulRequests: z.ZodDefault<z.ZodBoolean>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
-            maxAttempts: number;
             windowMs: number;
+            maxAttempts: number;
             blockDuration: number;
             skipSuccessfulRequests: boolean;
         }, {
             enabled?: boolean | undefined;
-            maxAttempts?: number | undefined;
             windowMs?: number | undefined;
+            maxAttempts?: number | undefined;
             blockDuration?: number | undefined;
             skipSuccessfulRequests?: boolean | undefined;
         }>>;
@@ -2050,14 +2401,14 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             headerName: z.ZodDefault<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
+            headerName: string;
             cookieName: string;
             tokenLength: number;
-            headerName: string;
         }, {
             enabled?: boolean | undefined;
+            headerName?: string | undefined;
             cookieName?: string | undefined;
             tokenLength?: number | undefined;
-            headerName?: string | undefined;
         }>>;
         /**
          * Account linking configuration
@@ -2086,27 +2437,27 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
                 count: z.ZodDefault<z.ZodNumber>;
             }, "strip", z.ZodTypeAny, {
-                count: number;
                 enabled: boolean;
+                count: number;
             }, {
-                count?: number | undefined;
                 enabled?: boolean | undefined;
+                count?: number | undefined;
             }>>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
             qrCodeSize: number;
             issuer?: string | undefined;
             backupCodes?: {
-                count: number;
                 enabled: boolean;
+                count: number;
             } | undefined;
         }, {
             enabled?: boolean | undefined;
             issuer?: string | undefined;
             qrCodeSize?: number | undefined;
             backupCodes?: {
-                count?: number | undefined;
                 enabled?: boolean | undefined;
+                count?: number | undefined;
             } | undefined;
         }>>;
         /**
@@ -2155,8 +2506,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 clientId: string;
                 clientSecret: string;
                 issuer: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 scopes?: string[] | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
@@ -2183,11 +2534,11 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 cert: string;
                 issuer: string;
                 entryPoint: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
             }>>;
             ldap: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
@@ -2200,8 +2551,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 displayName: z.ZodOptional<z.ZodString>;
                 icon: z.ZodOptional<z.ZodString>;
             }, "strip", z.ZodTypeAny, {
-                url: string;
                 enabled: boolean;
+                url: string;
                 bindDn: string;
                 bindCredentials: string;
                 searchBase: string;
@@ -2215,35 +2566,35 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 bindCredentials: string;
                 searchBase: string;
                 searchFilter: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 displayName?: string | undefined;
                 groupSearchBase?: string | undefined;
             }>>;
         }, "strip", z.ZodTypeAny, {
-            oidc?: {
+            saml?: {
                 enabled: boolean;
-                clientId: string;
-                clientSecret: string;
-                scopes: string[];
+                cert: string;
                 issuer: string;
+                entryPoint: string;
+                signatureAlgorithm: "sha256" | "sha512";
                 icon?: string | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
-            saml?: {
+            oidc?: {
                 enabled: boolean;
-                cert: string;
+                clientId: string;
+                clientSecret: string;
+                scopes: string[];
                 issuer: string;
-                entryPoint: string;
-                signatureAlgorithm: "sha256" | "sha512";
                 icon?: string | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
             ldap?: {
-                url: string;
                 enabled: boolean;
+                url: string;
                 bindDn: string;
                 bindCredentials: string;
                 searchBase: string;
@@ -2253,25 +2604,25 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 groupSearchBase?: string | undefined;
             } | undefined;
         }, {
-            oidc?: {
-                clientId: string;
-                clientSecret: string;
+            saml?: {
+                cert: string;
                 issuer: string;
-                icon?: string | undefined;
+                entryPoint: string;
                 enabled?: boolean | undefined;
-                scopes?: string[] | undefined;
+                icon?: string | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
-            saml?: {
-                cert: string;
+            oidc?: {
+                clientId: string;
+                clientSecret: string;
                 issuer: string;
-                entryPoint: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
+                scopes?: string[] | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
             } | undefined;
             ldap?: {
                 url: string;
@@ -2279,8 +2630,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 bindCredentials: string;
                 searchBase: string;
                 searchFilter: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 displayName?: string | undefined;
                 groupSearchBase?: string | undefined;
             } | undefined;
@@ -2300,18 +2651,18 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             email: string;
             name: string;
             id: string;
-            emailVerified: string;
             createdAt: string;
             updatedAt: string;
+            emailVerified: string;
             image?: string | undefined;
         }, {
             email?: string | undefined;
             image?: string | undefined;
             name?: string | undefined;
             id?: string | undefined;
-            emailVerified?: string | undefined;
             createdAt?: string | undefined;
             updatedAt?: string | undefined;
+            emailVerified?: string | undefined;
         }>>;
         /**
          * Database adapter configuration
@@ -2380,8 +2731,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, "strip", z.ZodTypeAny, {
-            name: string;
             enabled: boolean;
+            name: string;
             options?: Record<string, any> | undefined;
         }, {
             name: string;
@@ -2565,22 +2916,22 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             cookieHttpOnly: boolean;
             cookieDomain?: string | undefined;
         };
-        secret: string;
-        driver: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
         rateLimit: {
             enabled: boolean;
-            maxAttempts: number;
             windowMs: number;
+            maxAttempts: number;
             blockDuration: number;
             skipSuccessfulRequests: boolean;
         };
+        secret: string;
+        driver: string;
+        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
+        baseUrl: string;
         csrf: {
             enabled: boolean;
+            headerName: string;
             cookieName: string;
             tokenLength: number;
-            headerName: string;
         };
         accountLinking: {
             enabled: boolean;
@@ -2591,14 +2942,14 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             email: string;
             name: string;
             id: string;
-            emailVerified: string;
             createdAt: string;
             updatedAt: string;
+            emailVerified: string;
             image?: string | undefined;
         };
         plugins: {
-            name: string;
             enabled: boolean;
+            name: string;
             options?: Record<string, any> | undefined;
         }[];
         allowRegistration: boolean;
@@ -2614,6 +2965,13 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             config?: Record<string, any> | undefined;
             fromName?: string | undefined;
         } | undefined;
+        security?: {
+            trustProxy: boolean;
+            ipRateLimiting: boolean;
+            sessionFingerprinting: boolean;
+            maxSessions: number;
+            allowedOrigins?: string[] | undefined;
+        } | undefined;
         oauth?: {
             providers: {
                 enabled: boolean;
@@ -2631,33 +2989,33 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             rpName: string;
             userVerification: "required" | "preferred" | "discouraged";
             attestation: "none" | "indirect" | "direct" | "enterprise";
-            rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
+            rpId?: string | undefined;
         } | undefined;
         enterprise?: {
-            oidc?: {
+            saml?: {
                 enabled: boolean;
-                clientId: string;
-                clientSecret: string;
-                scopes: string[];
+                cert: string;
                 issuer: string;
+                entryPoint: string;
+                signatureAlgorithm: "sha256" | "sha512";
                 icon?: string | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
-            saml?: {
+            oidc?: {
                 enabled: boolean;
-                cert: string;
+                clientId: string;
+                clientSecret: string;
+                scopes: string[];
                 issuer: string;
-                entryPoint: string;
-                signatureAlgorithm: "sha256" | "sha512";
                 icon?: string | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
             ldap?: {
-                url: string;
                 enabled: boolean;
+                url: string;
                 bindDn: string;
                 bindCredentials: string;
                 searchBase: string;
@@ -2689,8 +3047,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             qrCodeSize: number;
             issuer?: string | undefined;
             backupCodes?: {
-                count: number;
                 enabled: boolean;
+                count: number;
             } | undefined;
         } | undefined;
         organization?: {
@@ -2727,13 +3085,6 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 sessionId: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        security?: {
-            trustProxy: boolean;
-            ipRateLimiting: boolean;
-            sessionFingerprinting: boolean;
-            maxSessions: number;
-            allowedOrigins?: string[] | undefined;
-        } | undefined;
         ui?: {
             primaryColor?: string | undefined;
             logo?: string | undefined;
@@ -2769,14 +3120,28 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             cookiePath?: string | undefined;
             cookieHttpOnly?: boolean | undefined;
         } | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            maxAttempts?: number | undefined;
+            blockDuration?: number | undefined;
+            skipSuccessfulRequests?: boolean | undefined;
+        } | undefined;
         driver?: string | undefined;
+        security?: {
+            allowedOrigins?: string[] | undefined;
+            trustProxy?: boolean | undefined;
+            ipRateLimiting?: boolean | undefined;
+            sessionFingerprinting?: boolean | undefined;
+            maxSessions?: number | undefined;
+        } | undefined;
         oauth?: {
             providers: {
                 provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 scopes?: string[] | undefined;
                 redirectUri?: string | undefined;
                 displayName?: string | undefined;
@@ -2785,31 +3150,31 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
         passkey?: {
             rpName: string;
             enabled?: boolean | undefined;
-            rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
+            rpId?: string | undefined;
             userVerification?: "required" | "preferred" | "discouraged" | undefined;
             attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
         } | undefined;
         enterprise?: {
-            oidc?: {
-                clientId: string;
-                clientSecret: string;
+            saml?: {
+                cert: string;
                 issuer: string;
-                icon?: string | undefined;
+                entryPoint: string;
                 enabled?: boolean | undefined;
-                scopes?: string[] | undefined;
+                icon?: string | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
-            saml?: {
-                cert: string;
+            oidc?: {
+                clientId: string;
+                clientSecret: string;
                 issuer: string;
-                entryPoint: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
+                scopes?: string[] | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
             } | undefined;
             ldap?: {
                 url: string;
@@ -2817,8 +3182,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 bindCredentials: string;
                 searchBase: string;
                 searchFilter: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 displayName?: string | undefined;
                 groupSearchBase?: string | undefined;
             } | undefined;
@@ -2840,18 +3205,11 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 link: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        rateLimit?: {
-            enabled?: boolean | undefined;
-            maxAttempts?: number | undefined;
-            windowMs?: number | undefined;
-            blockDuration?: number | undefined;
-            skipSuccessfulRequests?: boolean | undefined;
-        } | undefined;
         csrf?: {
             enabled?: boolean | undefined;
+            headerName?: string | undefined;
             cookieName?: string | undefined;
             tokenLength?: number | undefined;
-            headerName?: string | undefined;
         } | undefined;
         accountLinking?: {
             enabled?: boolean | undefined;
@@ -2863,8 +3221,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             issuer?: string | undefined;
             qrCodeSize?: number | undefined;
             backupCodes?: {
-                count?: number | undefined;
                 enabled?: boolean | undefined;
+                count?: number | undefined;
             } | undefined;
         } | undefined;
         organization?: {
@@ -2878,9 +3236,9 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             image?: string | undefined;
             name?: string | undefined;
             id?: string | undefined;
-            emailVerified?: string | undefined;
             createdAt?: string | undefined;
             updatedAt?: string | undefined;
+            emailVerified?: string | undefined;
         } | undefined;
         mapping?: {
             session?: Record<string, string> | undefined;
@@ -2915,13 +3273,6 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 sessionId: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        security?: {
-            allowedOrigins?: string[] | undefined;
-            trustProxy?: boolean | undefined;
-            ipRateLimiting?: boolean | undefined;
-            sessionFingerprinting?: boolean | undefined;
-            maxSessions?: number | undefined;
-        } | undefined;
         ui?: {
             primaryColor?: string | undefined;
             logo?: string | undefined;
@@ -2946,22 +3297,22 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             cookieHttpOnly: boolean;
             cookieDomain?: string | undefined;
         };
-        secret: string;
-        driver: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
         rateLimit: {
             enabled: boolean;
-            maxAttempts: number;
             windowMs: number;
+            maxAttempts: number;
             blockDuration: number;
             skipSuccessfulRequests: boolean;
         };
+        secret: string;
+        driver: string;
+        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
+        baseUrl: string;
         csrf: {
             enabled: boolean;
+            headerName: string;
             cookieName: string;
             tokenLength: number;
-            headerName: string;
         };
         accountLinking: {
             enabled: boolean;
@@ -2972,14 +3323,14 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             email: string;
             name: string;
             id: string;
-            emailVerified: string;
             createdAt: string;
             updatedAt: string;
+            emailVerified: string;
             image?: string | undefined;
         };
         plugins: {
-            name: string;
             enabled: boolean;
+            name: string;
             options?: Record<string, any> | undefined;
         }[];
         allowRegistration: boolean;
@@ -2995,6 +3346,13 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             config?: Record<string, any> | undefined;
             fromName?: string | undefined;
         } | undefined;
+        security?: {
+            trustProxy: boolean;
+            ipRateLimiting: boolean;
+            sessionFingerprinting: boolean;
+            maxSessions: number;
+            allowedOrigins?: string[] | undefined;
+        } | undefined;
         oauth?: {
             providers: {
                 enabled: boolean;
@@ -3012,33 +3370,33 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             rpName: string;
             userVerification: "required" | "preferred" | "discouraged";
             attestation: "none" | "indirect" | "direct" | "enterprise";
-            rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
+            rpId?: string | undefined;
         } | undefined;
         enterprise?: {
-            oidc?: {
+            saml?: {
                 enabled: boolean;
-                clientId: string;
-                clientSecret: string;
-                scopes: string[];
+                cert: string;
                 issuer: string;
+                entryPoint: string;
+                signatureAlgorithm: "sha256" | "sha512";
                 icon?: string | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
-            saml?: {
+            oidc?: {
                 enabled: boolean;
-                cert: string;
+                clientId: string;
+                clientSecret: string;
+                scopes: string[];
                 issuer: string;
-                entryPoint: string;
-                signatureAlgorithm: "sha256" | "sha512";
                 icon?: string | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
             ldap?: {
-                url: string;
                 enabled: boolean;
+                url: string;
                 bindDn: string;
                 bindCredentials: string;
                 searchBase: string;
@@ -3070,8 +3428,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             qrCodeSize: number;
             issuer?: string | undefined;
             backupCodes?: {
-                count: number;
                 enabled: boolean;
+                count: number;
             } | undefined;
         } | undefined;
         organization?: {
@@ -3108,13 +3466,6 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 sessionId: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        security?: {
-            trustProxy: boolean;
-            ipRateLimiting: boolean;
-            sessionFingerprinting: boolean;
-            maxSessions: number;
-            allowedOrigins?: string[] | undefined;
-        } | undefined;
         ui?: {
             primaryColor?: string | undefined;
             logo?: string | undefined;
@@ -3153,14 +3504,28 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             cookiePath?: string | undefined;
             cookieHttpOnly?: boolean | undefined;
         } | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            maxAttempts?: number | undefined;
+            blockDuration?: number | undefined;
+            skipSuccessfulRequests?: boolean | undefined;
+        } | undefined;
         driver?: string | undefined;
+        security?: {
+            allowedOrigins?: string[] | undefined;
+            trustProxy?: boolean | undefined;
+            ipRateLimiting?: boolean | undefined;
+            sessionFingerprinting?: boolean | undefined;
+            maxSessions?: number | undefined;
+        } | undefined;
         oauth?: {
             providers: {
                 provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
                 clientId: string;
                 clientSecret: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 scopes?: string[] | undefined;
                 redirectUri?: string | undefined;
                 displayName?: string | undefined;
@@ -3169,31 +3534,31 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
         passkey?: {
             rpName: string;
             enabled?: boolean | undefined;
-            rpId?: string | undefined;
             allowedOrigins?: string[] | undefined;
+            rpId?: string | undefined;
             userVerification?: "required" | "preferred" | "discouraged" | undefined;
             attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
         } | undefined;
         enterprise?: {
-            oidc?: {
-                clientId: string;
-                clientSecret: string;
+            saml?: {
+                cert: string;
                 issuer: string;
-                icon?: string | undefined;
+                entryPoint: string;
                 enabled?: boolean | undefined;
-                scopes?: string[] | undefined;
+                icon?: string | undefined;
+                signatureAlgorithm?: "sha256" | "sha512" | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
             } | undefined;
-            saml?: {
-                cert: string;
+            oidc?: {
+                clientId: string;
+                clientSecret: string;
                 issuer: string;
-                entryPoint: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
+                scopes?: string[] | undefined;
                 displayName?: string | undefined;
                 attributeMapping?: Record<string, string> | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
             } | undefined;
             ldap?: {
                 url: string;
@@ -3201,8 +3566,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 bindCredentials: string;
                 searchBase: string;
                 searchFilter: string;
-                icon?: string | undefined;
                 enabled?: boolean | undefined;
+                icon?: string | undefined;
                 displayName?: string | undefined;
                 groupSearchBase?: string | undefined;
             } | undefined;
@@ -3224,18 +3589,11 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 link: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        rateLimit?: {
-            enabled?: boolean | undefined;
-            maxAttempts?: number | undefined;
-            windowMs?: number | undefined;
-            blockDuration?: number | undefined;
-            skipSuccessfulRequests?: boolean | undefined;
-        } | undefined;
         csrf?: {
             enabled?: boolean | undefined;
+            headerName?: string | undefined;
             cookieName?: string | undefined;
             tokenLength?: number | undefined;
-            headerName?: string | undefined;
         } | undefined;
         accountLinking?: {
             enabled?: boolean | undefined;
@@ -3247,8 +3605,8 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             issuer?: string | undefined;
             qrCodeSize?: number | undefined;
             backupCodes?: {
-                count?: number | undefined;
                 enabled?: boolean | undefined;
+                count?: number | undefined;
             } | undefined;
         } | undefined;
         organization?: {
@@ -3262,9 +3620,9 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             image?: string | undefined;
             name?: string | undefined;
             id?: string | undefined;
-            emailVerified?: string | undefined;
             createdAt?: string | undefined;
             updatedAt?: string | undefined;
+            emailVerified?: string | undefined;
         } | undefined;
         mapping?: {
             session?: Record<string, string> | undefined;
@@ -3299,13 +3657,6 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 sessionId: string;
             }, ...args: unknown[]) => Promise<void>) | undefined;
         } | undefined;
-        security?: {
-            allowedOrigins?: string[] | undefined;
-            trustProxy?: boolean | undefined;
-            ipRateLimiting?: boolean | undefined;
-            sessionFingerprinting?: boolean | undefined;
-            maxSessions?: number | undefined;
-        } | undefined;
         ui?: {
             primaryColor?: string | undefined;
             logo?: string | undefined;