@objectstack/spec 0.7.1 → 0.8.0

package/dist/auth/config.zod.d.ts

@@ -19,31 +19,11 @@ export declare const OAuth2Schema: z.ZodObject<{
     tokenUrl: z.ZodString;
     clientId: z.ZodString;
     clientSecret: z.ZodString;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     redirectUri: z.ZodOptional<z.ZodString>;
     refreshToken: z.ZodOptional<z.ZodString>;
     tokenExpiry: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    type: "oauth2";
-    authorizationUrl: string;
-    tokenUrl: string;
-    clientId: string;
-    clientSecret: string;
-    scopes?: string[] | undefined;
-    redirectUri?: string | undefined;
-    refreshToken?: string | undefined;
-    tokenExpiry?: number | undefined;
-}, {
-    type: "oauth2";
-    authorizationUrl: string;
-    tokenUrl: string;
-    clientId: string;
-    clientSecret: string;
-    scopes?: string[] | undefined;
-    redirectUri?: string | undefined;
-    refreshToken?: string | undefined;
-    tokenExpiry?: number | undefined;
-}>;
+}, z.core.$strip>;
 export type OAuth2 = z.infer<typeof OAuth2Schema>;
 /**
  * API Key Authentication Schema
@@ -54,17 +34,7 @@ export declare const APIKeySchema: z.ZodObject<{
     key: z.ZodString;
     headerName: z.ZodDefault<z.ZodString>;
     paramName: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    type: "api-key";
-    key: string;
-    headerName: string;
-    paramName?: string | undefined;
-}, {
-    type: "api-key";
-    key: string;
-    headerName?: string | undefined;
-    paramName?: string | undefined;
-}>;
+}, z.core.$strip>;
 export type APIKey = z.infer<typeof APIKeySchema>;
 /**
  * Basic Authentication Schema
@@ -74,15 +44,7 @@ export declare const BasicAuthSchema: z.ZodObject<{
     type: z.ZodLiteral<"basic">;
     username: z.ZodString;
     password: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    type: "basic";
-    password: string;
-    username: string;
-}, {
-    type: "basic";
-    password: string;
-    username: string;
-}>;
+}, z.core.$strip>;
 export type BasicAuth = z.infer<typeof BasicAuthSchema>;
 /**
  * Bearer Token Authentication Schema
@@ -91,13 +53,7 @@ export type BasicAuth = z.infer<typeof BasicAuthSchema>;
 export declare const BearerAuthSchema: z.ZodObject<{
     type: z.ZodLiteral<"bearer">;
     token: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    type: "bearer";
-    token: string;
-}, {
-    type: "bearer";
-    token: string;
-}>;
+}, z.core.$strip>;
 export type BearerAuth = z.infer<typeof BearerAuthSchema>;
 /**
  * No Authentication Schema
@@ -105,11 +61,7 @@ export type BearerAuth = z.infer<typeof BearerAuthSchema>;
  */
 export declare const NoAuthSchema: z.ZodObject<{
     type: z.ZodLiteral<"none">;
-}, "strip", z.ZodTypeAny, {
-    type: "none";
-}, {
-    type: "none";
-}>;
+}, z.core.$strip>;
 export type NoAuth = z.infer<typeof NoAuthSchema>;
 /**
  * JWT Authentication Schema
@@ -119,33 +71,23 @@ export declare const JWTAuthSchema: z.ZodObject<{
     type: z.ZodLiteral<"jwt">;
     token: z.ZodOptional<z.ZodString>;
     secretKey: z.ZodOptional<z.ZodString>;
-    algorithm: z.ZodDefault<z.ZodEnum<["HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512"]>>;
+    algorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+    }>>;
     issuer: z.ZodOptional<z.ZodString>;
     audience: z.ZodOptional<z.ZodString>;
     subject: z.ZodOptional<z.ZodString>;
     expiresIn: z.ZodDefault<z.ZodNumber>;
     claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-}, "strip", z.ZodTypeAny, {
-    type: "jwt";
-    algorithm: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512";
-    expiresIn: number;
-    token?: string | undefined;
-    subject?: string | undefined;
-    secretKey?: string | undefined;
-    issuer?: string | undefined;
-    audience?: string | undefined;
-    claims?: Record<string, any> | undefined;
-}, {
-    type: "jwt";
-    algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | undefined;
-    token?: string | undefined;
-    expiresIn?: number | undefined;
-    subject?: string | undefined;
-    secretKey?: string | undefined;
-    issuer?: string | undefined;
-    audience?: string | undefined;
-    claims?: Record<string, any> | undefined;
-}>;
+}, z.core.$strip>;
 export type JWTAuth = z.infer<typeof JWTAuthSchema>;
 /**
  * SAML Authentication Schema
@@ -158,30 +100,14 @@ export declare const SAMLAuthSchema: z.ZodObject<{
     certificate: z.ZodString;
     privateKey: z.ZodOptional<z.ZodString>;
     callbackUrl: z.ZodOptional<z.ZodString>;
-    signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha1", "sha256", "sha512"]>>;
+    signatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        sha1: "sha1";
+        sha256: "sha256";
+        sha512: "sha512";
+    }>>;
     wantAssertionsSigned: z.ZodDefault<z.ZodBoolean>;
     identifierFormat: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    type: "saml";
-    issuer: string;
-    entryPoint: string;
-    certificate: string;
-    signatureAlgorithm: "sha1" | "sha256" | "sha512";
-    wantAssertionsSigned: boolean;
-    privateKey?: string | undefined;
-    callbackUrl?: string | undefined;
-    identifierFormat?: string | undefined;
-}, {
-    type: "saml";
-    issuer: string;
-    entryPoint: string;
-    certificate: string;
-    privateKey?: string | undefined;
-    callbackUrl?: string | undefined;
-    signatureAlgorithm?: "sha1" | "sha256" | "sha512" | undefined;
-    wantAssertionsSigned?: boolean | undefined;
-    identifierFormat?: string | undefined;
-}>;
+}, z.core.$strip>;
 export type SAMLAuth = z.infer<typeof SAMLAuthSchema>;
 /**
  * Unified Authentication Configuration Schema
@@ -224,177 +150,103 @@ export type SAMLAuth = z.infer<typeof SAMLAuthSchema>;
  * };
  * ```
  */
-export declare const AuthConfigSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+export declare const AuthConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"oauth2">;
     authorizationUrl: z.ZodString;
     tokenUrl: z.ZodString;
     clientId: z.ZodString;
     clientSecret: z.ZodString;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     redirectUri: z.ZodOptional<z.ZodString>;
     refreshToken: z.ZodOptional<z.ZodString>;
     tokenExpiry: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    type: "oauth2";
-    authorizationUrl: string;
-    tokenUrl: string;
-    clientId: string;
-    clientSecret: string;
-    scopes?: string[] | undefined;
-    redirectUri?: string | undefined;
-    refreshToken?: string | undefined;
-    tokenExpiry?: number | undefined;
-}, {
-    type: "oauth2";
-    authorizationUrl: string;
-    tokenUrl: string;
-    clientId: string;
-    clientSecret: string;
-    scopes?: string[] | undefined;
-    redirectUri?: string | undefined;
-    refreshToken?: string | undefined;
-    tokenExpiry?: number | undefined;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"api-key">;
     key: z.ZodString;
     headerName: z.ZodDefault<z.ZodString>;
     paramName: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    type: "api-key";
-    key: string;
-    headerName: string;
-    paramName?: string | undefined;
-}, {
-    type: "api-key";
-    key: string;
-    headerName?: string | undefined;
-    paramName?: string | undefined;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"basic">;
     username: z.ZodString;
     password: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    type: "basic";
-    password: string;
-    username: string;
-}, {
-    type: "basic";
-    password: string;
-    username: string;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"bearer">;
     token: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    type: "bearer";
-    token: string;
-}, {
-    type: "bearer";
-    token: string;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"jwt">;
     token: z.ZodOptional<z.ZodString>;
     secretKey: z.ZodOptional<z.ZodString>;
-    algorithm: z.ZodDefault<z.ZodEnum<["HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512"]>>;
+    algorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+    }>>;
     issuer: z.ZodOptional<z.ZodString>;
     audience: z.ZodOptional<z.ZodString>;
     subject: z.ZodOptional<z.ZodString>;
     expiresIn: z.ZodDefault<z.ZodNumber>;
     claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-}, "strip", z.ZodTypeAny, {
-    type: "jwt";
-    algorithm: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512";
-    expiresIn: number;
-    token?: string | undefined;
-    subject?: string | undefined;
-    secretKey?: string | undefined;
-    issuer?: string | undefined;
-    audience?: string | undefined;
-    claims?: Record<string, any> | undefined;
-}, {
-    type: "jwt";
-    algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | undefined;
-    token?: string | undefined;
-    expiresIn?: number | undefined;
-    subject?: string | undefined;
-    secretKey?: string | undefined;
-    issuer?: string | undefined;
-    audience?: string | undefined;
-    claims?: Record<string, any> | undefined;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"saml">;
     entryPoint: z.ZodString;
     issuer: z.ZodString;
     certificate: z.ZodString;
     privateKey: z.ZodOptional<z.ZodString>;
     callbackUrl: z.ZodOptional<z.ZodString>;
-    signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha1", "sha256", "sha512"]>>;
+    signatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        sha1: "sha1";
+        sha256: "sha256";
+        sha512: "sha512";
+    }>>;
     wantAssertionsSigned: z.ZodDefault<z.ZodBoolean>;
     identifierFormat: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    type: "saml";
-    issuer: string;
-    entryPoint: string;
-    certificate: string;
-    signatureAlgorithm: "sha1" | "sha256" | "sha512";
-    wantAssertionsSigned: boolean;
-    privateKey?: string | undefined;
-    callbackUrl?: string | undefined;
-    identifierFormat?: string | undefined;
-}, {
-    type: "saml";
-    issuer: string;
-    entryPoint: string;
-    certificate: string;
-    privateKey?: string | undefined;
-    callbackUrl?: string | undefined;
-    signatureAlgorithm?: "sha1" | "sha256" | "sha512" | undefined;
-    wantAssertionsSigned?: boolean | undefined;
-    identifierFormat?: string | undefined;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"none">;
-}, "strip", z.ZodTypeAny, {
-    type: "none";
-}, {
-    type: "none";
-}>]>;
+}, z.core.$strip>], "type">;
 export type AuthConfig = z.infer<typeof AuthConfigSchema>;
 /**
  * Supported authentication strategies
  */
-export declare const AuthStrategy: z.ZodEnum<["email_password", "magic_link", "oauth", "passkey", "otp", "anonymous"]>;
+export declare const AuthStrategy: z.ZodEnum<{
+    email_password: "email_password";
+    magic_link: "magic_link";
+    oauth: "oauth";
+    passkey: "passkey";
+    otp: "otp";
+    anonymous: "anonymous";
+}>;
 export type AuthStrategy = z.infer<typeof AuthStrategy>;
 /**
  * OAuth Provider Configuration
  * Supports popular OAuth2 providers
  */
 export declare const OAuthProviderSchema: z.ZodObject<{
-    provider: z.ZodEnum<["google", "github", "facebook", "twitter", "linkedin", "microsoft", "apple", "discord", "gitlab", "custom"]>;
+    provider: z.ZodEnum<{
+        custom: "custom";
+        google: "google";
+        github: "github";
+        facebook: "facebook";
+        twitter: "twitter";
+        linkedin: "linkedin";
+        microsoft: "microsoft";
+        apple: "apple";
+        discord: "discord";
+        gitlab: "gitlab";
+    }>;
     clientId: z.ZodString;
     clientSecret: z.ZodString;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     redirectUri: z.ZodOptional<z.ZodString>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     displayName: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-    clientId: string;
-    clientSecret: string;
-    icon?: string | undefined;
-    scopes?: string[] | undefined;
-    redirectUri?: string | undefined;
-    displayName?: string | undefined;
-}, {
-    provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-    clientId: string;
-    clientSecret: string;
-    enabled?: boolean | undefined;
-    icon?: string | undefined;
-    scopes?: string[] | undefined;
-    redirectUri?: string | undefined;
-    displayName?: string | undefined;
-}>;
+}, z.core.$strip>;
 export type OAuthProvider = z.infer<typeof OAuthProviderSchema>;
 /**
  * Email & Password Strategy Configuration
@@ -406,21 +258,7 @@ export declare const EmailPasswordConfigSchema: z.ZodObject<{
     requirePasswordComplexity: z.ZodDefault<z.ZodBoolean>;
     allowPasswordReset: z.ZodDefault<z.ZodBoolean>;
     passwordResetExpiry: z.ZodDefault<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    requireEmailVerification: boolean;
-    minPasswordLength: number;
-    requirePasswordComplexity: boolean;
-    allowPasswordReset: boolean;
-    passwordResetExpiry: number;
-}, {
-    enabled?: boolean | undefined;
-    requireEmailVerification?: boolean | undefined;
-    minPasswordLength?: number | undefined;
-    requirePasswordComplexity?: boolean | undefined;
-    allowPasswordReset?: boolean | undefined;
-    passwordResetExpiry?: number | undefined;
-}>;
+}, z.core.$strip>;
 export type EmailPasswordConfig = z.infer<typeof EmailPasswordConfigSchema>;
 /**
  * Magic Link Strategy Configuration
@@ -432,32 +270,8 @@ export declare const MagicLinkConfigSchema: z.ZodObject<{
         to: z.ZodString;
         link: z.ZodString;
         token: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        to: string;
-        token: string;
-        link: string;
-    }, {
-        to: string;
-        token: string;
-        link: string;
-    }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    expiryTime: number;
-    sendEmail?: ((args_0: {
-        to: string;
-        token: string;
-        link: string;
-    }, ...args: unknown[]) => Promise<void>) | undefined;
-}, {
-    enabled?: boolean | undefined;
-    expiryTime?: number | undefined;
-    sendEmail?: ((args_0: {
-        to: string;
-        token: string;
-        link: string;
-    }, ...args: unknown[]) => Promise<void>) | undefined;
-}>;
+    }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
+}, z.core.$strip>;
 export type MagicLinkConfig = z.infer<typeof MagicLinkConfigSchema>;
 /**
  * Passkey (WebAuthn) Strategy Configuration
@@ -466,24 +280,19 @@ export declare const PasskeyConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     rpName: z.ZodString;
     rpId: z.ZodOptional<z.ZodString>;
-    allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    userVerification: z.ZodDefault<z.ZodEnum<["required", "preferred", "discouraged"]>>;
-    attestation: z.ZodDefault<z.ZodEnum<["none", "indirect", "direct", "enterprise"]>>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    rpName: string;
-    userVerification: "required" | "preferred" | "discouraged";
-    attestation: "none" | "indirect" | "direct" | "enterprise";
-    allowedOrigins?: string[] | undefined;
-    rpId?: string | undefined;
-}, {
-    rpName: string;
-    enabled?: boolean | undefined;
-    allowedOrigins?: string[] | undefined;
-    rpId?: string | undefined;
-    userVerification?: "required" | "preferred" | "discouraged" | undefined;
-    attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
-}>;
+    allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    userVerification: z.ZodDefault<z.ZodEnum<{
+        required: "required";
+        preferred: "preferred";
+        discouraged: "discouraged";
+    }>>;
+    attestation: z.ZodDefault<z.ZodEnum<{
+        none: "none";
+        indirect: "indirect";
+        direct: "direct";
+        enterprise: "enterprise";
+    }>>;
+}, z.core.$strip>;
 export type PasskeyConfig = z.infer<typeof PasskeyConfigSchema>;
 /**
  * Session Configuration
@@ -493,29 +302,15 @@ export declare const SessionConfigSchema: z.ZodObject<{
     updateAge: z.ZodDefault<z.ZodNumber>;
     cookieName: z.ZodDefault<z.ZodString>;
     cookieSecure: z.ZodDefault<z.ZodBoolean>;
-    cookieSameSite: z.ZodDefault<z.ZodEnum<["strict", "lax", "none"]>>;
+    cookieSameSite: z.ZodDefault<z.ZodEnum<{
+        none: "none";
+        strict: "strict";
+        lax: "lax";
+    }>>;
     cookieDomain: z.ZodOptional<z.ZodString>;
     cookiePath: z.ZodDefault<z.ZodString>;
     cookieHttpOnly: z.ZodDefault<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    expiresIn: number;
-    updateAge: number;
-    cookieName: string;
-    cookieSecure: boolean;
-    cookieSameSite: "strict" | "none" | "lax";
-    cookiePath: string;
-    cookieHttpOnly: boolean;
-    cookieDomain?: string | undefined;
-}, {
-    expiresIn?: number | undefined;
-    updateAge?: number | undefined;
-    cookieName?: string | undefined;
-    cookieSecure?: boolean | undefined;
-    cookieSameSite?: "strict" | "none" | "lax" | undefined;
-    cookieDomain?: string | undefined;
-    cookiePath?: string | undefined;
-    cookieHttpOnly?: boolean | undefined;
-}>;
+}, z.core.$strip>;
 export type SessionConfig = z.infer<typeof SessionConfigSchema>;
 /**
  * Rate Limiting Configuration
@@ -526,19 +321,7 @@ export declare const RateLimitConfigSchema: z.ZodObject<{
     windowMs: z.ZodDefault<z.ZodNumber>;
     blockDuration: z.ZodDefault<z.ZodNumber>;
     skipSuccessfulRequests: z.ZodDefault<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    windowMs: number;
-    maxAttempts: number;
-    blockDuration: number;
-    skipSuccessfulRequests: boolean;
-}, {
-    enabled?: boolean | undefined;
-    windowMs?: number | undefined;
-    maxAttempts?: number | undefined;
-    blockDuration?: number | undefined;
-    skipSuccessfulRequests?: boolean | undefined;
-}>;
+}, z.core.$strip>;
 export type RateLimitConfig = z.infer<typeof RateLimitConfigSchema>;
 /**
  * CSRF Protection Configuration
@@ -548,17 +331,7 @@ export declare const CSRFConfigSchema: z.ZodObject<{
     tokenLength: z.ZodDefault<z.ZodNumber>;
     cookieName: z.ZodDefault<z.ZodString>;
     headerName: z.ZodDefault<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    headerName: string;
-    cookieName: string;
-    tokenLength: number;
-}, {
-    enabled?: boolean | undefined;
-    headerName?: string | undefined;
-    cookieName?: string | undefined;
-    tokenLength?: number | undefined;
-}>;
+}, z.core.$strip>;
 export type CSRFConfig = z.infer<typeof CSRFConfigSchema>;
 /**
  * Account Linking Configuration
@@ -568,15 +341,7 @@ export declare const AccountLinkingConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     autoLink: z.ZodDefault<z.ZodBoolean>;
     requireVerification: z.ZodDefault<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    autoLink: boolean;
-    requireVerification: boolean;
-}, {
-    enabled?: boolean | undefined;
-    autoLink?: boolean | undefined;
-    requireVerification?: boolean | undefined;
-}>;
+}, z.core.$strip>;
 export type AccountLinkingConfig = z.infer<typeof AccountLinkingConfigSchema>;
 /**
  * Two-Factor Authentication (2FA) Configuration
@@ -588,30 +353,8 @@ export declare const TwoFactorConfigSchema: z.ZodObject<{
     backupCodes: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         count: z.ZodDefault<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        count: number;
-    }, {
-        enabled?: boolean | undefined;
-        count?: number | undefined;
-    }>>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    qrCodeSize: number;
-    issuer?: string | undefined;
-    backupCodes?: {
-        enabled: boolean;
-        count: number;
-    } | undefined;
-}, {
-    enabled?: boolean | undefined;
-    issuer?: string | undefined;
-    qrCodeSize?: number | undefined;
-    backupCodes?: {
-        enabled?: boolean | undefined;
-        count?: number | undefined;
-    } | undefined;
-}>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export type TwoFactorConfig = z.infer<typeof TwoFactorConfigSchema>;
 /**
  * OIDC / OAuth2 Enterprise Configuration
@@ -622,29 +365,11 @@ export declare const OIDCConfigSchema: z.ZodObject<{
     issuer: z.ZodString;
     clientId: z.ZodString;
     clientSecret: z.ZodString;
-    scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
     attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     displayName: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    clientId: string;
-    clientSecret: string;
-    scopes: string[];
-    issuer: string;
-    icon?: string | undefined;
-    displayName?: string | undefined;
-    attributeMapping?: Record<string, string> | undefined;
-}, {
-    clientId: string;
-    clientSecret: string;
-    issuer: string;
-    enabled?: boolean | undefined;
-    icon?: string | undefined;
-    scopes?: string[] | undefined;
-    displayName?: string | undefined;
-    attributeMapping?: Record<string, string> | undefined;
-}>;
+}, z.core.$strip>;
 export type OIDCConfig = z.infer<typeof OIDCConfigSchema>;
 /**
  * SAML 2.0 Enterprise Configuration
@@ -655,29 +380,14 @@ export declare const SAMLConfigSchema: z.ZodObject<{
     entryPoint: z.ZodString;
     cert: z.ZodString;
     issuer: z.ZodString;
-    signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+    signatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        sha256: "sha256";
+        sha512: "sha512";
+    }>>;
     attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     displayName: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    cert: string;
-    issuer: string;
-    entryPoint: string;
-    signatureAlgorithm: "sha256" | "sha512";
-    icon?: string | undefined;
-    displayName?: string | undefined;
-    attributeMapping?: Record<string, string> | undefined;
-}, {
-    cert: string;
-    issuer: string;
-    entryPoint: string;
-    enabled?: boolean | undefined;
-    icon?: string | undefined;
-    signatureAlgorithm?: "sha256" | "sha512" | undefined;
-    displayName?: string | undefined;
-    attributeMapping?: Record<string, string> | undefined;
-}>;
+}, z.core.$strip>;
 export type SAMLConfig = z.infer<typeof SAMLConfigSchema>;
 /**
  * LDAP / Active Directory Enterprise Configuration
@@ -693,27 +403,7 @@ export declare const LDAPConfigSchema: z.ZodObject<{
     groupSearchBase: z.ZodOptional<z.ZodString>;
     displayName: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    url: string;
-    bindDn: string;
-    bindCredentials: string;
-    searchBase: string;
-    searchFilter: string;
-    icon?: string | undefined;
-    displayName?: string | undefined;
-    groupSearchBase?: string | undefined;
-}, {
-    url: string;
-    bindDn: string;
-    bindCredentials: string;
-    searchBase: string;
-    searchFilter: string;
-    enabled?: boolean | undefined;
-    icon?: string | undefined;
-    displayName?: string | undefined;
-    groupSearchBase?: string | undefined;
-}>;
+}, z.core.$strip>;
 export type LDAPConfig = z.infer<typeof LDAPConfigSchema>;
 /**
  * Enterprise Authentication Configuration
@@ -725,57 +415,24 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         issuer: z.ZodString;
         clientId: z.ZodString;
         clientSecret: z.ZodString;
-        scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
         attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         displayName: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        clientId: string;
-        clientSecret: string;
-        scopes: string[];
-        issuer: string;
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    }, {
-        clientId: string;
-        clientSecret: string;
-        issuer: string;
-        enabled?: boolean | undefined;
-        icon?: string | undefined;
-        scopes?: string[] | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    }>>;
+    }, z.core.$strip>>;
     saml: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         entryPoint: z.ZodString;
         cert: z.ZodString;
         issuer: z.ZodString;
-        signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+        signatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+            sha256: "sha256";
+            sha512: "sha512";
+        }>>;
         attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         displayName: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        cert: string;
-        issuer: string;
-        entryPoint: string;
-        signatureAlgorithm: "sha256" | "sha512";
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    }, {
-        cert: string;
-        issuer: string;
-        entryPoint: string;
-        enabled?: boolean | undefined;
-        icon?: string | undefined;
-        signatureAlgorithm?: "sha256" | "sha512" | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    }>>;
+    }, z.core.$strip>>;
     ldap: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         url: z.ZodString;
@@ -786,92 +443,8 @@ export declare const EnterpriseAuthConfigSchema: z.ZodObject<{
         groupSearchBase: z.ZodOptional<z.ZodString>;
         displayName: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        url: string;
-        bindDn: string;
-        bindCredentials: string;
-        searchBase: string;
-        searchFilter: string;
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        groupSearchBase?: string | undefined;
-    }, {
-        url: string;
-        bindDn: string;
-        bindCredentials: string;
-        searchBase: string;
-        searchFilter: string;
-        enabled?: boolean | undefined;
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        groupSearchBase?: string | undefined;
-    }>>;
-}, "strip", z.ZodTypeAny, {
-    saml?: {
-        enabled: boolean;
-        cert: string;
-        issuer: string;
-        entryPoint: string;
-        signatureAlgorithm: "sha256" | "sha512";
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    } | undefined;
-    oidc?: {
-        enabled: boolean;
-        clientId: string;
-        clientSecret: string;
-        scopes: string[];
-        issuer: string;
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    } | undefined;
-    ldap?: {
-        enabled: boolean;
-        url: string;
-        bindDn: string;
-        bindCredentials: string;
-        searchBase: string;
-        searchFilter: string;
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        groupSearchBase?: string | undefined;
-    } | undefined;
-}, {
-    saml?: {
-        cert: string;
-        issuer: string;
-        entryPoint: string;
-        enabled?: boolean | undefined;
-        icon?: string | undefined;
-        signatureAlgorithm?: "sha256" | "sha512" | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    } | undefined;
-    oidc?: {
-        clientId: string;
-        clientSecret: string;
-        issuer: string;
-        enabled?: boolean | undefined;
-        icon?: string | undefined;
-        scopes?: string[] | undefined;
-        displayName?: string | undefined;
-        attributeMapping?: Record<string, string> | undefined;
-    } | undefined;
-    ldap?: {
-        url: string;
-        bindDn: string;
-        bindCredentials: string;
-        searchBase: string;
-        searchFilter: string;
-        enabled?: boolean | undefined;
-        icon?: string | undefined;
-        displayName?: string | undefined;
-        groupSearchBase?: string | undefined;
-    } | undefined;
-}>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export type EnterpriseAuthConfig = z.infer<typeof EnterpriseAuthConfigSchema>;
 /**
  * User Field Mapping Configuration
@@ -885,43 +458,22 @@ export declare const UserFieldMappingSchema: z.ZodObject<{
     emailVerified: z.ZodDefault<z.ZodString>;
     createdAt: z.ZodDefault<z.ZodString>;
     updatedAt: z.ZodDefault<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-    name: string;
-    id: string;
-    createdAt: string;
-    emailVerified: string;
-    updatedAt: string;
-    image?: string | undefined;
-}, {
-    email?: string | undefined;
-    image?: string | undefined;
-    name?: string | undefined;
-    id?: string | undefined;
-    createdAt?: string | undefined;
-    emailVerified?: string | undefined;
-    updatedAt?: string | undefined;
-}>;
+}, z.core.$strip>;
 export type UserFieldMapping = z.infer<typeof UserFieldMappingSchema>;
 /**
  * Database Adapter Configuration
  */
 export declare const DatabaseAdapterSchema: z.ZodObject<{
-    type: z.ZodEnum<["prisma", "drizzle", "kysely", "custom"]>;
+    type: z.ZodEnum<{
+        custom: "custom";
+        prisma: "prisma";
+        drizzle: "drizzle";
+        kysely: "kysely";
+    }>;
     connectionString: z.ZodOptional<z.ZodString>;
     tablePrefix: z.ZodDefault<z.ZodString>;
     schema: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    type: "custom" | "prisma" | "drizzle" | "kysely";
-    tablePrefix: string;
-    schema?: string | undefined;
-    connectionString?: string | undefined;
-}, {
-    type: "custom" | "prisma" | "drizzle" | "kysely";
-    schema?: string | undefined;
-    connectionString?: string | undefined;
-    tablePrefix?: string | undefined;
-}>;
+}, z.core.$strip>;
 export type DatabaseAdapter = z.infer<typeof DatabaseAdapterSchema>;
 /**
  * Default field mappings for better-auth compatibility
@@ -961,37 +513,11 @@ export declare const BETTER_AUTH_FIELD_MAPPINGS: {
  * ```
  */
 export declare const DatabaseMappingSchema: z.ZodObject<{
-    /**
-     * User model field mapping
-     * Maps ObjectStack User fields to driver fields
-     */
     user: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    /**
-     * Session model field mapping
-     * Maps ObjectStack Session fields to driver fields
-     */
     session: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-    /**
-     * Account model field mapping
-     * Maps ObjectStack Account fields to driver fields
-     */
     account: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-    /**
-     * Verification token field mapping
-     * Maps ObjectStack VerificationToken fields to driver fields
-     */
     verificationToken: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    session: Record<string, string>;
-    account: Record<string, string>;
-    user?: Record<string, string> | undefined;
-    verificationToken?: Record<string, string> | undefined;
-}, {
-    session?: Record<string, string> | undefined;
-    user?: Record<string, string> | undefined;
-    account?: Record<string, string> | undefined;
-    verificationToken?: Record<string, string> | undefined;
-}>;
+}, z.core.$strip>;
 export type DatabaseMapping = z.infer<typeof DatabaseMappingSchema>;
 /**
  * Authentication Plugin Configuration
@@ -1001,15 +527,7 @@ export declare const AuthPluginConfigSchema: z.ZodObject<{
     name: z.ZodString;
     enabled: z.ZodDefault<z.ZodBoolean>;
     options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    name: string;
-    options?: Record<string, any> | undefined;
-}, {
-    name: string;
-    options?: Record<string, any> | undefined;
-    enabled?: boolean | undefined;
-}>;
+}, z.core.$strip>;
 export type AuthPluginConfig = z.infer<typeof AuthPluginConfigSchema>;
 /**
  * Complete Application Authentication Configuration Schema
@@ -1046,37 +564,19 @@ export type AuthPluginConfig = z.infer<typeof AuthPluginConfigSchema>;
  * ```
  */
 export declare const ApplicationAuthConfigSchema: z.ZodObject<{
-    /**
-     * Unique identifier for this auth configuration
-     * Must be in snake_case following ObjectStack conventions
-     */
     name: z.ZodString;
-    /**
-     * Human-readable label
-     */
     label: z.ZodString;
-    /**
-     * The underlying authentication implementation driver
-     * Default: 'better-auth' (the reference implementation)
-     * Can be: 'better-auth', 'auth-js', 'passport', or custom driver name
-     */
     driver: z.ZodDefault<z.ZodString>;
-    /**
-     * Enabled authentication strategies
-     */
-    strategies: z.ZodArray<z.ZodEnum<["email_password", "magic_link", "oauth", "passkey", "otp", "anonymous"]>, "many">;
-    /**
-     * Base URL for the application
-     */
+    strategies: z.ZodArray<z.ZodEnum<{
+        email_password: "email_password";
+        magic_link: "magic_link";
+        oauth: "oauth";
+        passkey: "passkey";
+        otp: "otp";
+        anonymous: "anonymous";
+    }>>;
     baseUrl: z.ZodString;
-    /**
-     * Secret key for signing tokens and cookies
-     * Should be loaded from environment variables
-     */
     secret: z.ZodString;
-    /**
-     * Email & Password configuration
-     */
     emailPassword: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
@@ -1084,24 +584,7 @@ export declare const ApplicationAuthConfigSchema: z.ZodObject<{
         requirePasswordComplexity: z.ZodDefault<z.ZodBoolean>;
         allowPasswordReset: z.ZodDefault<z.ZodBoolean>;
         passwordResetExpiry: z.ZodDefault<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        requireEmailVerification: boolean;
-        minPasswordLength: number;
-        requirePasswordComplexity: boolean;
-        allowPasswordReset: boolean;
-        passwordResetExpiry: number;
-    }, {
-        enabled?: boolean | undefined;
-        requireEmailVerification?: boolean | undefined;
-        minPasswordLength?: number | undefined;
-        requirePasswordComplexity?: boolean | undefined;
-        allowPasswordReset?: boolean | undefined;
-        passwordResetExpiry?: number | undefined;
-    }>>;
-    /**
-     * Magic Link configuration
-     */
+    }, z.core.$strip>>;
     magicLink: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         expiryTime: z.ZodDefault<z.ZodNumber>;
@@ -1109,203 +592,80 @@ export declare const ApplicationAuthConfigSchema: z.ZodObject<{
             to: z.ZodString;
             link: z.ZodString;
             token: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            to: string;
-            token: string;
-            link: string;
-        }, {
-            to: string;
-            token: string;
-            link: string;
-        }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        expiryTime: number;
-        sendEmail?: ((args_0: {
-            to: string;
-            token: string;
-            link: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    }, {
-        enabled?: boolean | undefined;
-        expiryTime?: number | undefined;
-        sendEmail?: ((args_0: {
-            to: string;
-            token: string;
-            link: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    }>>;
-    /**
-     * Passkey (WebAuthn) configuration
-     */
+        }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
+    }, z.core.$strip>>;
     passkey: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         rpName: z.ZodString;
         rpId: z.ZodOptional<z.ZodString>;
-        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        userVerification: z.ZodDefault<z.ZodEnum<["required", "preferred", "discouraged"]>>;
-        attestation: z.ZodDefault<z.ZodEnum<["none", "indirect", "direct", "enterprise"]>>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        rpName: string;
-        userVerification: "required" | "preferred" | "discouraged";
-        attestation: "none" | "indirect" | "direct" | "enterprise";
-        allowedOrigins?: string[] | undefined;
-        rpId?: string | undefined;
-    }, {
-        rpName: string;
-        enabled?: boolean | undefined;
-        allowedOrigins?: string[] | undefined;
-        rpId?: string | undefined;
-        userVerification?: "required" | "preferred" | "discouraged" | undefined;
-        attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
-    }>>;
-    /**
-     * OAuth configuration
-     */
+        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        userVerification: z.ZodDefault<z.ZodEnum<{
+            required: "required";
+            preferred: "preferred";
+            discouraged: "discouraged";
+        }>>;
+        attestation: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            indirect: "indirect";
+            direct: "direct";
+            enterprise: "enterprise";
+        }>>;
+    }, z.core.$strip>>;
     oauth: z.ZodOptional<z.ZodObject<{
         providers: z.ZodArray<z.ZodObject<{
-            provider: z.ZodEnum<["google", "github", "facebook", "twitter", "linkedin", "microsoft", "apple", "discord", "gitlab", "custom"]>;
+            provider: z.ZodEnum<{
+                custom: "custom";
+                google: "google";
+                github: "github";
+                facebook: "facebook";
+                twitter: "twitter";
+                linkedin: "linkedin";
+                microsoft: "microsoft";
+                apple: "apple";
+                discord: "discord";
+                gitlab: "gitlab";
+            }>;
             clientId: z.ZodString;
             clientSecret: z.ZodString;
-            scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
             redirectUri: z.ZodOptional<z.ZodString>;
             enabled: z.ZodDefault<z.ZodBoolean>;
             displayName: z.ZodOptional<z.ZodString>;
             icon: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-            clientId: string;
-            clientSecret: string;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            redirectUri?: string | undefined;
-            displayName?: string | undefined;
-        }, {
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-            clientId: string;
-            clientSecret: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            redirectUri?: string | undefined;
-            displayName?: string | undefined;
-        }>, "many">;
-    }, "strip", z.ZodTypeAny, {
-        providers: {
-            enabled: boolean;
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-            clientId: string;
-            clientSecret: string;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            redirectUri?: string | undefined;
-            displayName?: string | undefined;
-        }[];
-    }, {
-        providers: {
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-            clientId: string;
-            clientSecret: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            redirectUri?: string | undefined;
-            displayName?: string | undefined;
-        }[];
-    }>>;
-    /**
-     * Session configuration
-     */
-    session: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    session: z.ZodOptional<z.ZodObject<{
         expiresIn: z.ZodDefault<z.ZodNumber>;
         updateAge: z.ZodDefault<z.ZodNumber>;
         cookieName: z.ZodDefault<z.ZodString>;
         cookieSecure: z.ZodDefault<z.ZodBoolean>;
-        cookieSameSite: z.ZodDefault<z.ZodEnum<["strict", "lax", "none"]>>;
+        cookieSameSite: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            strict: "strict";
+            lax: "lax";
+        }>>;
         cookieDomain: z.ZodOptional<z.ZodString>;
         cookiePath: z.ZodDefault<z.ZodString>;
         cookieHttpOnly: z.ZodDefault<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        expiresIn: number;
-        updateAge: number;
-        cookieName: string;
-        cookieSecure: boolean;
-        cookieSameSite: "strict" | "none" | "lax";
-        cookiePath: string;
-        cookieHttpOnly: boolean;
-        cookieDomain?: string | undefined;
-    }, {
-        expiresIn?: number | undefined;
-        updateAge?: number | undefined;
-        cookieName?: string | undefined;
-        cookieSecure?: boolean | undefined;
-        cookieSameSite?: "strict" | "none" | "lax" | undefined;
-        cookieDomain?: string | undefined;
-        cookiePath?: string | undefined;
-        cookieHttpOnly?: boolean | undefined;
-    }>>;
-    /**
-     * Rate limiting configuration
-     */
-    rateLimit: z.ZodDefault<z.ZodObject<{
+    }, z.core.$strip>>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         maxAttempts: z.ZodDefault<z.ZodNumber>;
         windowMs: z.ZodDefault<z.ZodNumber>;
         blockDuration: z.ZodDefault<z.ZodNumber>;
         skipSuccessfulRequests: z.ZodDefault<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        windowMs: number;
-        maxAttempts: number;
-        blockDuration: number;
-        skipSuccessfulRequests: boolean;
-    }, {
-        enabled?: boolean | undefined;
-        windowMs?: number | undefined;
-        maxAttempts?: number | undefined;
-        blockDuration?: number | undefined;
-        skipSuccessfulRequests?: boolean | undefined;
-    }>>;
-    /**
-     * CSRF protection configuration
-     */
-    csrf: z.ZodDefault<z.ZodObject<{
+    }, z.core.$strip>>;
+    csrf: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         tokenLength: z.ZodDefault<z.ZodNumber>;
         cookieName: z.ZodDefault<z.ZodString>;
         headerName: z.ZodDefault<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        headerName: string;
-        cookieName: string;
-        tokenLength: number;
-    }, {
-        enabled?: boolean | undefined;
-        headerName?: string | undefined;
-        cookieName?: string | undefined;
-        tokenLength?: number | undefined;
-    }>>;
-    /**
-     * Account linking configuration
-     */
-    accountLinking: z.ZodDefault<z.ZodObject<{
+    }, z.core.$strip>>;
+    accountLinking: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         autoLink: z.ZodDefault<z.ZodBoolean>;
         requireVerification: z.ZodDefault<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        autoLink: boolean;
-        requireVerification: boolean;
-    }, {
-        enabled?: boolean | undefined;
-        autoLink?: boolean | undefined;
-        requireVerification?: boolean | undefined;
-    }>>;
-    /**
-     * Two-factor authentication configuration
-     */
+    }, z.core.$strip>>;
     twoFactor: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         issuer: z.ZodOptional<z.ZodString>;
@@ -1313,110 +673,38 @@ export declare const ApplicationAuthConfigSchema: z.ZodObject<{
         backupCodes: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             count: z.ZodDefault<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            count: number;
-        }, {
-            enabled?: boolean | undefined;
-            count?: number | undefined;
-        }>>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        qrCodeSize: number;
-        issuer?: string | undefined;
-        backupCodes?: {
-            enabled: boolean;
-            count: number;
-        } | undefined;
-    }, {
-        enabled?: boolean | undefined;
-        issuer?: string | undefined;
-        qrCodeSize?: number | undefined;
-        backupCodes?: {
-            enabled?: boolean | undefined;
-            count?: number | undefined;
-        } | undefined;
-    }>>;
-    /**
-     * Organization (Multi-tenant) configuration
-     * Enables B2B SaaS scenarios where users belong to multiple teams/workspaces
-     */
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
     organization: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         allowUserToCreateOrg: z.ZodDefault<z.ZodBoolean>;
         defaultRole: z.ZodDefault<z.ZodString>;
         creatorRole: z.ZodDefault<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        allowUserToCreateOrg: boolean;
-        defaultRole: string;
-        creatorRole: string;
-    }, {
-        enabled?: boolean | undefined;
-        allowUserToCreateOrg?: boolean | undefined;
-        defaultRole?: string | undefined;
-        creatorRole?: string | undefined;
-    }>>;
-    /**
-     * Enterprise authentication configuration (SAML, LDAP, OIDC)
-     */
+    }, z.core.$strip>>;
     enterprise: z.ZodOptional<z.ZodObject<{
         oidc: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             issuer: z.ZodString;
             clientId: z.ZodString;
             clientSecret: z.ZodString;
-            scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
             attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             displayName: z.ZodOptional<z.ZodString>;
             icon: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            clientId: string;
-            clientSecret: string;
-            scopes: string[];
-            issuer: string;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        }, {
-            clientId: string;
-            clientSecret: string;
-            issuer: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        }>>;
+        }, z.core.$strip>>;
         saml: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             entryPoint: z.ZodString;
             cert: z.ZodString;
             issuer: z.ZodString;
-            signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+            signatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+                sha256: "sha256";
+                sha512: "sha512";
+            }>>;
             attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             displayName: z.ZodOptional<z.ZodString>;
             icon: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            cert: string;
-            issuer: string;
-            entryPoint: string;
-            signatureAlgorithm: "sha256" | "sha512";
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        }, {
-            cert: string;
-            issuer: string;
-            entryPoint: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            signatureAlgorithm?: "sha256" | "sha512" | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        }>>;
+        }, z.core.$strip>>;
         ldap: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             url: z.ZodString;
@@ -1427,96 +715,9 @@ export declare const ApplicationAuthConfigSchema: z.ZodObject<{
             groupSearchBase: z.ZodOptional<z.ZodString>;
             displayName: z.ZodOptional<z.ZodString>;
             icon: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            url: string;
-            bindDn: string;
-            bindCredentials: string;
-            searchBase: string;
-            searchFilter: string;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            groupSearchBase?: string | undefined;
-        }, {
-            url: string;
-            bindDn: string;
-            bindCredentials: string;
-            searchBase: string;
-            searchFilter: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            groupSearchBase?: string | undefined;
-        }>>;
-    }, "strip", z.ZodTypeAny, {
-        saml?: {
-            enabled: boolean;
-            cert: string;
-            issuer: string;
-            entryPoint: string;
-            signatureAlgorithm: "sha256" | "sha512";
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        oidc?: {
-            enabled: boolean;
-            clientId: string;
-            clientSecret: string;
-            scopes: string[];
-            issuer: string;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        ldap?: {
-            enabled: boolean;
-            url: string;
-            bindDn: string;
-            bindCredentials: string;
-            searchBase: string;
-            searchFilter: string;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            groupSearchBase?: string | undefined;
-        } | undefined;
-    }, {
-        saml?: {
-            cert: string;
-            issuer: string;
-            entryPoint: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            signatureAlgorithm?: "sha256" | "sha512" | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        oidc?: {
-            clientId: string;
-            clientSecret: string;
-            issuer: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        ldap?: {
-            url: string;
-            bindDn: string;
-            bindCredentials: string;
-            searchBase: string;
-            searchFilter: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            groupSearchBase?: string | undefined;
-        } | undefined;
-    }>>;
-    /**
-     * User field mapping
-     */
-    userFieldMapping: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    userFieldMapping: z.ZodOptional<z.ZodObject<{
         id: z.ZodDefault<z.ZodString>;
         email: z.ZodDefault<z.ZodString>;
         name: z.ZodDefault<z.ZodString>;
@@ -1524,640 +725,80 @@ export declare const ApplicationAuthConfigSchema: z.ZodObject<{
         emailVerified: z.ZodDefault<z.ZodString>;
         createdAt: z.ZodDefault<z.ZodString>;
         updatedAt: z.ZodDefault<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        email: string;
-        name: string;
-        id: string;
-        createdAt: string;
-        emailVerified: string;
-        updatedAt: string;
-        image?: string | undefined;
-    }, {
-        email?: string | undefined;
-        image?: string | undefined;
-        name?: string | undefined;
-        id?: string | undefined;
-        createdAt?: string | undefined;
-        emailVerified?: string | undefined;
-        updatedAt?: string | undefined;
-    }>>;
-    /**
-     * Database adapter configuration
-     */
+    }, z.core.$strip>>;
     database: z.ZodOptional<z.ZodObject<{
-        type: z.ZodEnum<["prisma", "drizzle", "kysely", "custom"]>;
+        type: z.ZodEnum<{
+            custom: "custom";
+            prisma: "prisma";
+            drizzle: "drizzle";
+            kysely: "kysely";
+        }>;
         connectionString: z.ZodOptional<z.ZodString>;
         tablePrefix: z.ZodDefault<z.ZodString>;
         schema: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "custom" | "prisma" | "drizzle" | "kysely";
-        tablePrefix: string;
-        schema?: string | undefined;
-        connectionString?: string | undefined;
-    }, {
-        type: "custom" | "prisma" | "drizzle" | "kysely";
-        schema?: string | undefined;
-        connectionString?: string | undefined;
-        tablePrefix?: string | undefined;
-    }>>;
-    /**
-     * Database field mapping configuration
-     * Maps ObjectStack standard field names to driver-specific field names.
-     *
-     * This is distinct from the database adapter configuration and provides
-     * instructions for the driver to map our standard schema fields to the
-     * underlying engine's fields (e.g., better-auth uses 'token' instead of 'sessionToken').
-     */
+    }, z.core.$strip>>;
     mapping: z.ZodOptional<z.ZodObject<{
-        /**
-         * User model field mapping
-         * Maps ObjectStack User fields to driver fields
-         */
         user: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        /**
-         * Session model field mapping
-         * Maps ObjectStack Session fields to driver fields
-         */
         session: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-        /**
-         * Account model field mapping
-         * Maps ObjectStack Account fields to driver fields
-         */
         account: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-        /**
-         * Verification token field mapping
-         * Maps ObjectStack VerificationToken fields to driver fields
-         */
         verificationToken: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        session: Record<string, string>;
-        account: Record<string, string>;
-        user?: Record<string, string> | undefined;
-        verificationToken?: Record<string, string> | undefined;
-    }, {
-        session?: Record<string, string> | undefined;
-        user?: Record<string, string> | undefined;
-        account?: Record<string, string> | undefined;
-        verificationToken?: Record<string, string> | undefined;
-    }>>;
-    /**
-     * Additional authentication plugins
-     */
+    }, z.core.$strip>>;
     plugins: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         enabled: z.ZodDefault<z.ZodBoolean>;
         options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        name: string;
-        options?: Record<string, any> | undefined;
-    }, {
-        name: string;
-        options?: Record<string, any> | undefined;
-        enabled?: boolean | undefined;
-    }>, "many">>;
-    /**
-     * Custom hooks for authentication events
-     */
+    }, z.core.$strip>>>;
     hooks: z.ZodOptional<z.ZodObject<{
         beforeSignIn: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
             email: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            email: string;
-        }, {
-            email: string;
-        }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+        }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
         afterSignIn: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
             user: z.ZodAny;
             session: z.ZodAny;
-        }, "strip", z.ZodTypeAny, {
-            session?: any;
-            user?: any;
-        }, {
-            session?: any;
-            user?: any;
-        }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+        }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
         beforeSignUp: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
             email: z.ZodString;
             name: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            email: string;
-            name?: string | undefined;
-        }, {
-            email: string;
-            name?: string | undefined;
-        }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+        }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
         afterSignUp: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
             user: z.ZodAny;
-        }, "strip", z.ZodTypeAny, {
-            user?: any;
-        }, {
-            user?: any;
-        }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+        }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
         beforeSignOut: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
             sessionId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            sessionId: string;
-        }, {
-            sessionId: string;
-        }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+        }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
         afterSignOut: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
             sessionId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            sessionId: string;
-        }, {
-            sessionId: string;
-        }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
-    }, "strip", z.ZodTypeAny, {
-        beforeSignIn?: ((args_0: {
-            email: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignIn?: ((args_0: {
-            session?: any;
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignUp?: ((args_0: {
-            email: string;
-            name?: string | undefined;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignUp?: ((args_0: {
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    }, {
-        beforeSignIn?: ((args_0: {
-            email: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignIn?: ((args_0: {
-            session?: any;
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignUp?: ((args_0: {
-            email: string;
-            name?: string | undefined;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignUp?: ((args_0: {
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    }>>;
-    /**
-     * Advanced security settings
-     */
+        }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
+    }, z.core.$strip>>;
     security: z.ZodOptional<z.ZodObject<{
-        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
         trustProxy: z.ZodDefault<z.ZodBoolean>;
         ipRateLimiting: z.ZodDefault<z.ZodBoolean>;
         sessionFingerprinting: z.ZodDefault<z.ZodBoolean>;
         maxSessions: z.ZodDefault<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-        trustProxy: boolean;
-        ipRateLimiting: boolean;
-        sessionFingerprinting: boolean;
-        maxSessions: number;
-        allowedOrigins?: string[] | undefined;
-    }, {
-        allowedOrigins?: string[] | undefined;
-        trustProxy?: boolean | undefined;
-        ipRateLimiting?: boolean | undefined;
-        sessionFingerprinting?: boolean | undefined;
-        maxSessions?: number | undefined;
-    }>>;
-    /**
-     * Email configuration for transactional emails
-     */
+    }, z.core.$strip>>;
     email: z.ZodOptional<z.ZodObject<{
         from: z.ZodString;
         fromName: z.ZodOptional<z.ZodString>;
-        provider: z.ZodEnum<["smtp", "sendgrid", "mailgun", "ses", "resend", "custom"]>;
+        provider: z.ZodEnum<{
+            custom: "custom";
+            smtp: "smtp";
+            sendgrid: "sendgrid";
+            mailgun: "mailgun";
+            ses: "ses";
+            resend: "resend";
+        }>;
         config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-    }, "strip", z.ZodTypeAny, {
-        provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-        from: string;
-        config?: Record<string, any> | undefined;
-        fromName?: string | undefined;
-    }, {
-        provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-        from: string;
-        config?: Record<string, any> | undefined;
-        fromName?: string | undefined;
-    }>>;
-    /**
-     * UI customization options
-     */
+    }, z.core.$strip>>;
     ui: z.ZodOptional<z.ZodObject<{
         brandName: z.ZodOptional<z.ZodString>;
         logo: z.ZodOptional<z.ZodString>;
         primaryColor: z.ZodOptional<z.ZodString>;
         customCss: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        primaryColor?: string | undefined;
-        logo?: string | undefined;
-        brandName?: string | undefined;
-        customCss?: string | undefined;
-    }, {
-        primaryColor?: string | undefined;
-        logo?: string | undefined;
-        brandName?: string | undefined;
-        customCss?: string | undefined;
-    }>>;
-    /**
-     * Whether this auth provider is active
-     */
+    }, z.core.$strip>>;
     active: z.ZodDefault<z.ZodBoolean>;
-    /**
-     * Whether to allow new user registration
-     */
     allowRegistration: z.ZodDefault<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    label: string;
-    name: string;
-    active: boolean;
-    session: {
-        expiresIn: number;
-        updateAge: number;
-        cookieName: string;
-        cookieSecure: boolean;
-        cookieSameSite: "strict" | "none" | "lax";
-        cookiePath: string;
-        cookieHttpOnly: boolean;
-        cookieDomain?: string | undefined;
-    };
-    rateLimit: {
-        enabled: boolean;
-        windowMs: number;
-        maxAttempts: number;
-        blockDuration: number;
-        skipSuccessfulRequests: boolean;
-    };
-    secret: string;
-    driver: string;
-    strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-    baseUrl: string;
-    csrf: {
-        enabled: boolean;
-        headerName: string;
-        cookieName: string;
-        tokenLength: number;
-    };
-    accountLinking: {
-        enabled: boolean;
-        autoLink: boolean;
-        requireVerification: boolean;
-    };
-    userFieldMapping: {
-        email: string;
-        name: string;
-        id: string;
-        createdAt: string;
-        emailVerified: string;
-        updatedAt: string;
-        image?: string | undefined;
-    };
-    plugins: {
-        enabled: boolean;
-        name: string;
-        options?: Record<string, any> | undefined;
-    }[];
-    allowRegistration: boolean;
-    database?: {
-        type: "custom" | "prisma" | "drizzle" | "kysely";
-        tablePrefix: string;
-        schema?: string | undefined;
-        connectionString?: string | undefined;
-    } | undefined;
-    email?: {
-        provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-        from: string;
-        config?: Record<string, any> | undefined;
-        fromName?: string | undefined;
-    } | undefined;
-    security?: {
-        trustProxy: boolean;
-        ipRateLimiting: boolean;
-        sessionFingerprinting: boolean;
-        maxSessions: number;
-        allowedOrigins?: string[] | undefined;
-    } | undefined;
-    oauth?: {
-        providers: {
-            enabled: boolean;
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-            clientId: string;
-            clientSecret: string;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            redirectUri?: string | undefined;
-            displayName?: string | undefined;
-        }[];
-    } | undefined;
-    passkey?: {
-        enabled: boolean;
-        rpName: string;
-        userVerification: "required" | "preferred" | "discouraged";
-        attestation: "none" | "indirect" | "direct" | "enterprise";
-        allowedOrigins?: string[] | undefined;
-        rpId?: string | undefined;
-    } | undefined;
-    enterprise?: {
-        saml?: {
-            enabled: boolean;
-            cert: string;
-            issuer: string;
-            entryPoint: string;
-            signatureAlgorithm: "sha256" | "sha512";
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        oidc?: {
-            enabled: boolean;
-            clientId: string;
-            clientSecret: string;
-            scopes: string[];
-            issuer: string;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        ldap?: {
-            enabled: boolean;
-            url: string;
-            bindDn: string;
-            bindCredentials: string;
-            searchBase: string;
-            searchFilter: string;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            groupSearchBase?: string | undefined;
-        } | undefined;
-    } | undefined;
-    emailPassword?: {
-        enabled: boolean;
-        requireEmailVerification: boolean;
-        minPasswordLength: number;
-        requirePasswordComplexity: boolean;
-        allowPasswordReset: boolean;
-        passwordResetExpiry: number;
-    } | undefined;
-    magicLink?: {
-        enabled: boolean;
-        expiryTime: number;
-        sendEmail?: ((args_0: {
-            to: string;
-            token: string;
-            link: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    } | undefined;
-    twoFactor?: {
-        enabled: boolean;
-        qrCodeSize: number;
-        issuer?: string | undefined;
-        backupCodes?: {
-            enabled: boolean;
-            count: number;
-        } | undefined;
-    } | undefined;
-    organization?: {
-        enabled: boolean;
-        allowUserToCreateOrg: boolean;
-        defaultRole: string;
-        creatorRole: string;
-    } | undefined;
-    mapping?: {
-        session: Record<string, string>;
-        account: Record<string, string>;
-        user?: Record<string, string> | undefined;
-        verificationToken?: Record<string, string> | undefined;
-    } | undefined;
-    hooks?: {
-        beforeSignIn?: ((args_0: {
-            email: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignIn?: ((args_0: {
-            session?: any;
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignUp?: ((args_0: {
-            email: string;
-            name?: string | undefined;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignUp?: ((args_0: {
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    } | undefined;
-    ui?: {
-        primaryColor?: string | undefined;
-        logo?: string | undefined;
-        brandName?: string | undefined;
-        customCss?: string | undefined;
-    } | undefined;
-}, {
-    label: string;
-    name: string;
-    secret: string;
-    strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-    baseUrl: string;
-    database?: {
-        type: "custom" | "prisma" | "drizzle" | "kysely";
-        schema?: string | undefined;
-        connectionString?: string | undefined;
-        tablePrefix?: string | undefined;
-    } | undefined;
-    email?: {
-        provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-        from: string;
-        config?: Record<string, any> | undefined;
-        fromName?: string | undefined;
-    } | undefined;
-    active?: boolean | undefined;
-    session?: {
-        expiresIn?: number | undefined;
-        updateAge?: number | undefined;
-        cookieName?: string | undefined;
-        cookieSecure?: boolean | undefined;
-        cookieSameSite?: "strict" | "none" | "lax" | undefined;
-        cookieDomain?: string | undefined;
-        cookiePath?: string | undefined;
-        cookieHttpOnly?: boolean | undefined;
-    } | undefined;
-    rateLimit?: {
-        enabled?: boolean | undefined;
-        windowMs?: number | undefined;
-        maxAttempts?: number | undefined;
-        blockDuration?: number | undefined;
-        skipSuccessfulRequests?: boolean | undefined;
-    } | undefined;
-    driver?: string | undefined;
-    security?: {
-        allowedOrigins?: string[] | undefined;
-        trustProxy?: boolean | undefined;
-        ipRateLimiting?: boolean | undefined;
-        sessionFingerprinting?: boolean | undefined;
-        maxSessions?: number | undefined;
-    } | undefined;
-    oauth?: {
-        providers: {
-            provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-            clientId: string;
-            clientSecret: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            redirectUri?: string | undefined;
-            displayName?: string | undefined;
-        }[];
-    } | undefined;
-    passkey?: {
-        rpName: string;
-        enabled?: boolean | undefined;
-        allowedOrigins?: string[] | undefined;
-        rpId?: string | undefined;
-        userVerification?: "required" | "preferred" | "discouraged" | undefined;
-        attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
-    } | undefined;
-    enterprise?: {
-        saml?: {
-            cert: string;
-            issuer: string;
-            entryPoint: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            signatureAlgorithm?: "sha256" | "sha512" | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        oidc?: {
-            clientId: string;
-            clientSecret: string;
-            issuer: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            scopes?: string[] | undefined;
-            displayName?: string | undefined;
-            attributeMapping?: Record<string, string> | undefined;
-        } | undefined;
-        ldap?: {
-            url: string;
-            bindDn: string;
-            bindCredentials: string;
-            searchBase: string;
-            searchFilter: string;
-            enabled?: boolean | undefined;
-            icon?: string | undefined;
-            displayName?: string | undefined;
-            groupSearchBase?: string | undefined;
-        } | undefined;
-    } | undefined;
-    emailPassword?: {
-        enabled?: boolean | undefined;
-        requireEmailVerification?: boolean | undefined;
-        minPasswordLength?: number | undefined;
-        requirePasswordComplexity?: boolean | undefined;
-        allowPasswordReset?: boolean | undefined;
-        passwordResetExpiry?: number | undefined;
-    } | undefined;
-    magicLink?: {
-        enabled?: boolean | undefined;
-        expiryTime?: number | undefined;
-        sendEmail?: ((args_0: {
-            to: string;
-            token: string;
-            link: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    } | undefined;
-    csrf?: {
-        enabled?: boolean | undefined;
-        headerName?: string | undefined;
-        cookieName?: string | undefined;
-        tokenLength?: number | undefined;
-    } | undefined;
-    accountLinking?: {
-        enabled?: boolean | undefined;
-        autoLink?: boolean | undefined;
-        requireVerification?: boolean | undefined;
-    } | undefined;
-    twoFactor?: {
-        enabled?: boolean | undefined;
-        issuer?: string | undefined;
-        qrCodeSize?: number | undefined;
-        backupCodes?: {
-            enabled?: boolean | undefined;
-            count?: number | undefined;
-        } | undefined;
-    } | undefined;
-    organization?: {
-        enabled?: boolean | undefined;
-        allowUserToCreateOrg?: boolean | undefined;
-        defaultRole?: string | undefined;
-        creatorRole?: string | undefined;
-    } | undefined;
-    userFieldMapping?: {
-        email?: string | undefined;
-        image?: string | undefined;
-        name?: string | undefined;
-        id?: string | undefined;
-        createdAt?: string | undefined;
-        emailVerified?: string | undefined;
-        updatedAt?: string | undefined;
-    } | undefined;
-    mapping?: {
-        session?: Record<string, string> | undefined;
-        user?: Record<string, string> | undefined;
-        account?: Record<string, string> | undefined;
-        verificationToken?: Record<string, string> | undefined;
-    } | undefined;
-    plugins?: {
-        name: string;
-        options?: Record<string, any> | undefined;
-        enabled?: boolean | undefined;
-    }[] | undefined;
-    hooks?: {
-        beforeSignIn?: ((args_0: {
-            email: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignIn?: ((args_0: {
-            session?: any;
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignUp?: ((args_0: {
-            email: string;
-            name?: string | undefined;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignUp?: ((args_0: {
-            user?: any;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        beforeSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-        afterSignOut?: ((args_0: {
-            sessionId: string;
-        }, ...args: unknown[]) => Promise<void>) | undefined;
-    } | undefined;
-    ui?: {
-        primaryColor?: string | undefined;
-        logo?: string | undefined;
-        brandName?: string | undefined;
-        customCss?: string | undefined;
-    } | undefined;
-    allowRegistration?: boolean | undefined;
-}>;
+}, z.core.$strip>;
 /**
  * TypeScript type inferred from ApplicationAuthConfigSchema
  */
@@ -2169,37 +810,19 @@ export type ApplicationAuthConfig = z.infer<typeof ApplicationAuthConfigSchema>;
 export declare const StandardAuthProviderSchema: z.ZodObject<{
     type: z.ZodLiteral<"standard_auth">;
     config: z.ZodObject<{
-        /**
-         * Unique identifier for this auth configuration
-         * Must be in snake_case following ObjectStack conventions
-         */
         name: z.ZodString;
-        /**
-         * Human-readable label
-         */
         label: z.ZodString;
-        /**
-         * The underlying authentication implementation driver
-         * Default: 'better-auth' (the reference implementation)
-         * Can be: 'better-auth', 'auth-js', 'passport', or custom driver name
-         */
         driver: z.ZodDefault<z.ZodString>;
-        /**
-         * Enabled authentication strategies
-         */
-        strategies: z.ZodArray<z.ZodEnum<["email_password", "magic_link", "oauth", "passkey", "otp", "anonymous"]>, "many">;
-        /**
-         * Base URL for the application
-         */
+        strategies: z.ZodArray<z.ZodEnum<{
+            email_password: "email_password";
+            magic_link: "magic_link";
+            oauth: "oauth";
+            passkey: "passkey";
+            otp: "otp";
+            anonymous: "anonymous";
+        }>>;
         baseUrl: z.ZodString;
-        /**
-         * Secret key for signing tokens and cookies
-         * Should be loaded from environment variables
-         */
         secret: z.ZodString;
-        /**
-         * Email & Password configuration
-         */
         emailPassword: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
@@ -2207,24 +830,7 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             requirePasswordComplexity: z.ZodDefault<z.ZodBoolean>;
             allowPasswordReset: z.ZodDefault<z.ZodBoolean>;
             passwordResetExpiry: z.ZodDefault<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            requireEmailVerification: boolean;
-            minPasswordLength: number;
-            requirePasswordComplexity: boolean;
-            allowPasswordReset: boolean;
-            passwordResetExpiry: number;
-        }, {
-            enabled?: boolean | undefined;
-            requireEmailVerification?: boolean | undefined;
-            minPasswordLength?: number | undefined;
-            requirePasswordComplexity?: boolean | undefined;
-            allowPasswordReset?: boolean | undefined;
-            passwordResetExpiry?: number | undefined;
-        }>>;
-        /**
-         * Magic Link configuration
-         */
+        }, z.core.$strip>>;
         magicLink: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             expiryTime: z.ZodDefault<z.ZodNumber>;
@@ -2232,203 +838,80 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 to: z.ZodString;
                 link: z.ZodString;
                 token: z.ZodString;
-            }, "strip", z.ZodTypeAny, {
-                to: string;
-                token: string;
-                link: string;
-            }, {
-                to: string;
-                token: string;
-                link: string;
-            }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            expiryTime: number;
-            sendEmail?: ((args_0: {
-                to: string;
-                token: string;
-                link: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        }, {
-            enabled?: boolean | undefined;
-            expiryTime?: number | undefined;
-            sendEmail?: ((args_0: {
-                to: string;
-                token: string;
-                link: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        }>>;
-        /**
-         * Passkey (WebAuthn) configuration
-         */
+            }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
+        }, z.core.$strip>>;
         passkey: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             rpName: z.ZodString;
             rpId: z.ZodOptional<z.ZodString>;
-            allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-            userVerification: z.ZodDefault<z.ZodEnum<["required", "preferred", "discouraged"]>>;
-            attestation: z.ZodDefault<z.ZodEnum<["none", "indirect", "direct", "enterprise"]>>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            rpName: string;
-            userVerification: "required" | "preferred" | "discouraged";
-            attestation: "none" | "indirect" | "direct" | "enterprise";
-            allowedOrigins?: string[] | undefined;
-            rpId?: string | undefined;
-        }, {
-            rpName: string;
-            enabled?: boolean | undefined;
-            allowedOrigins?: string[] | undefined;
-            rpId?: string | undefined;
-            userVerification?: "required" | "preferred" | "discouraged" | undefined;
-            attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
-        }>>;
-        /**
-         * OAuth configuration
-         */
+            allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            userVerification: z.ZodDefault<z.ZodEnum<{
+                required: "required";
+                preferred: "preferred";
+                discouraged: "discouraged";
+            }>>;
+            attestation: z.ZodDefault<z.ZodEnum<{
+                none: "none";
+                indirect: "indirect";
+                direct: "direct";
+                enterprise: "enterprise";
+            }>>;
+        }, z.core.$strip>>;
         oauth: z.ZodOptional<z.ZodObject<{
             providers: z.ZodArray<z.ZodObject<{
-                provider: z.ZodEnum<["google", "github", "facebook", "twitter", "linkedin", "microsoft", "apple", "discord", "gitlab", "custom"]>;
+                provider: z.ZodEnum<{
+                    custom: "custom";
+                    google: "google";
+                    github: "github";
+                    facebook: "facebook";
+                    twitter: "twitter";
+                    linkedin: "linkedin";
+                    microsoft: "microsoft";
+                    apple: "apple";
+                    discord: "discord";
+                    gitlab: "gitlab";
+                }>;
                 clientId: z.ZodString;
                 clientSecret: z.ZodString;
-                scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 redirectUri: z.ZodOptional<z.ZodString>;
                 enabled: z.ZodDefault<z.ZodBoolean>;
                 displayName: z.ZodOptional<z.ZodString>;
                 icon: z.ZodOptional<z.ZodString>;
-            }, "strip", z.ZodTypeAny, {
-                enabled: boolean;
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }, {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            providers: {
-                enabled: boolean;
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }[];
-        }, {
-            providers: {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }[];
-        }>>;
-        /**
-         * Session configuration
-         */
-        session: z.ZodDefault<z.ZodObject<{
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        session: z.ZodOptional<z.ZodObject<{
             expiresIn: z.ZodDefault<z.ZodNumber>;
             updateAge: z.ZodDefault<z.ZodNumber>;
             cookieName: z.ZodDefault<z.ZodString>;
             cookieSecure: z.ZodDefault<z.ZodBoolean>;
-            cookieSameSite: z.ZodDefault<z.ZodEnum<["strict", "lax", "none"]>>;
+            cookieSameSite: z.ZodDefault<z.ZodEnum<{
+                none: "none";
+                strict: "strict";
+                lax: "lax";
+            }>>;
             cookieDomain: z.ZodOptional<z.ZodString>;
             cookiePath: z.ZodDefault<z.ZodString>;
             cookieHttpOnly: z.ZodDefault<z.ZodBoolean>;
-        }, "strip", z.ZodTypeAny, {
-            expiresIn: number;
-            updateAge: number;
-            cookieName: string;
-            cookieSecure: boolean;
-            cookieSameSite: "strict" | "none" | "lax";
-            cookiePath: string;
-            cookieHttpOnly: boolean;
-            cookieDomain?: string | undefined;
-        }, {
-            expiresIn?: number | undefined;
-            updateAge?: number | undefined;
-            cookieName?: string | undefined;
-            cookieSecure?: boolean | undefined;
-            cookieSameSite?: "strict" | "none" | "lax" | undefined;
-            cookieDomain?: string | undefined;
-            cookiePath?: string | undefined;
-            cookieHttpOnly?: boolean | undefined;
-        }>>;
-        /**
-         * Rate limiting configuration
-         */
-        rateLimit: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strip>>;
+        rateLimit: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             maxAttempts: z.ZodDefault<z.ZodNumber>;
             windowMs: z.ZodDefault<z.ZodNumber>;
             blockDuration: z.ZodDefault<z.ZodNumber>;
             skipSuccessfulRequests: z.ZodDefault<z.ZodBoolean>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            windowMs: number;
-            maxAttempts: number;
-            blockDuration: number;
-            skipSuccessfulRequests: boolean;
-        }, {
-            enabled?: boolean | undefined;
-            windowMs?: number | undefined;
-            maxAttempts?: number | undefined;
-            blockDuration?: number | undefined;
-            skipSuccessfulRequests?: boolean | undefined;
-        }>>;
-        /**
-         * CSRF protection configuration
-         */
-        csrf: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strip>>;
+        csrf: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             tokenLength: z.ZodDefault<z.ZodNumber>;
             cookieName: z.ZodDefault<z.ZodString>;
             headerName: z.ZodDefault<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            headerName: string;
-            cookieName: string;
-            tokenLength: number;
-        }, {
-            enabled?: boolean | undefined;
-            headerName?: string | undefined;
-            cookieName?: string | undefined;
-            tokenLength?: number | undefined;
-        }>>;
-        /**
-         * Account linking configuration
-         */
-        accountLinking: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strip>>;
+        accountLinking: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             autoLink: z.ZodDefault<z.ZodBoolean>;
             requireVerification: z.ZodDefault<z.ZodBoolean>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            autoLink: boolean;
-            requireVerification: boolean;
-        }, {
-            enabled?: boolean | undefined;
-            autoLink?: boolean | undefined;
-            requireVerification?: boolean | undefined;
-        }>>;
-        /**
-         * Two-factor authentication configuration
-         */
+        }, z.core.$strip>>;
         twoFactor: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             issuer: z.ZodOptional<z.ZodString>;
@@ -2436,110 +919,38 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             backupCodes: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
                 count: z.ZodDefault<z.ZodNumber>;
-            }, "strip", z.ZodTypeAny, {
-                enabled: boolean;
-                count: number;
-            }, {
-                enabled?: boolean | undefined;
-                count?: number | undefined;
-            }>>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            qrCodeSize: number;
-            issuer?: string | undefined;
-            backupCodes?: {
-                enabled: boolean;
-                count: number;
-            } | undefined;
-        }, {
-            enabled?: boolean | undefined;
-            issuer?: string | undefined;
-            qrCodeSize?: number | undefined;
-            backupCodes?: {
-                enabled?: boolean | undefined;
-                count?: number | undefined;
-            } | undefined;
-        }>>;
-        /**
-         * Organization (Multi-tenant) configuration
-         * Enables B2B SaaS scenarios where users belong to multiple teams/workspaces
-         */
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
         organization: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             allowUserToCreateOrg: z.ZodDefault<z.ZodBoolean>;
             defaultRole: z.ZodDefault<z.ZodString>;
             creatorRole: z.ZodDefault<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            allowUserToCreateOrg: boolean;
-            defaultRole: string;
-            creatorRole: string;
-        }, {
-            enabled?: boolean | undefined;
-            allowUserToCreateOrg?: boolean | undefined;
-            defaultRole?: string | undefined;
-            creatorRole?: string | undefined;
-        }>>;
-        /**
-         * Enterprise authentication configuration (SAML, LDAP, OIDC)
-         */
+        }, z.core.$strip>>;
         enterprise: z.ZodOptional<z.ZodObject<{
             oidc: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
                 issuer: z.ZodString;
                 clientId: z.ZodString;
                 clientSecret: z.ZodString;
-                scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                 displayName: z.ZodOptional<z.ZodString>;
                 icon: z.ZodOptional<z.ZodString>;
-            }, "strip", z.ZodTypeAny, {
-                enabled: boolean;
-                clientId: string;
-                clientSecret: string;
-                scopes: string[];
-                issuer: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            }, {
-                clientId: string;
-                clientSecret: string;
-                issuer: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            }>>;
+            }, z.core.$strip>>;
             saml: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
                 entryPoint: z.ZodString;
                 cert: z.ZodString;
                 issuer: z.ZodString;
-                signatureAlgorithm: z.ZodDefault<z.ZodEnum<["sha256", "sha512"]>>;
+                signatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+                    sha256: "sha256";
+                    sha512: "sha512";
+                }>>;
                 attributeMapping: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                 displayName: z.ZodOptional<z.ZodString>;
                 icon: z.ZodOptional<z.ZodString>;
-            }, "strip", z.ZodTypeAny, {
-                enabled: boolean;
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                signatureAlgorithm: "sha256" | "sha512";
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            }, {
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            }>>;
+            }, z.core.$strip>>;
             ldap: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
                 url: z.ZodString;
@@ -2550,96 +961,9 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
                 groupSearchBase: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodOptional<z.ZodString>;
                 icon: z.ZodOptional<z.ZodString>;
-            }, "strip", z.ZodTypeAny, {
-                enabled: boolean;
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            }, {
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            }>>;
-        }, "strip", z.ZodTypeAny, {
-            saml?: {
-                enabled: boolean;
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                signatureAlgorithm: "sha256" | "sha512";
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            oidc?: {
-                enabled: boolean;
-                clientId: string;
-                clientSecret: string;
-                scopes: string[];
-                issuer: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            ldap?: {
-                enabled: boolean;
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            } | undefined;
-        }, {
-            saml?: {
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            oidc?: {
-                clientId: string;
-                clientSecret: string;
-                issuer: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            ldap?: {
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            } | undefined;
-        }>>;
-        /**
-         * User field mapping
-         */
-        userFieldMapping: z.ZodDefault<z.ZodObject<{
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        userFieldMapping: z.ZodOptional<z.ZodObject<{
             id: z.ZodDefault<z.ZodString>;
             email: z.ZodDefault<z.ZodString>;
             name: z.ZodDefault<z.ZodString>;
@@ -2647,1024 +971,80 @@ export declare const StandardAuthProviderSchema: z.ZodObject<{
             emailVerified: z.ZodDefault<z.ZodString>;
             createdAt: z.ZodDefault<z.ZodString>;
             updatedAt: z.ZodDefault<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            email: string;
-            name: string;
-            id: string;
-            createdAt: string;
-            emailVerified: string;
-            updatedAt: string;
-            image?: string | undefined;
-        }, {
-            email?: string | undefined;
-            image?: string | undefined;
-            name?: string | undefined;
-            id?: string | undefined;
-            createdAt?: string | undefined;
-            emailVerified?: string | undefined;
-            updatedAt?: string | undefined;
-        }>>;
-        /**
-         * Database adapter configuration
-         */
+        }, z.core.$strip>>;
         database: z.ZodOptional<z.ZodObject<{
-            type: z.ZodEnum<["prisma", "drizzle", "kysely", "custom"]>;
+            type: z.ZodEnum<{
+                custom: "custom";
+                prisma: "prisma";
+                drizzle: "drizzle";
+                kysely: "kysely";
+            }>;
             connectionString: z.ZodOptional<z.ZodString>;
             tablePrefix: z.ZodDefault<z.ZodString>;
             schema: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            type: "custom" | "prisma" | "drizzle" | "kysely";
-            tablePrefix: string;
-            schema?: string | undefined;
-            connectionString?: string | undefined;
-        }, {
-            type: "custom" | "prisma" | "drizzle" | "kysely";
-            schema?: string | undefined;
-            connectionString?: string | undefined;
-            tablePrefix?: string | undefined;
-        }>>;
-        /**
-         * Database field mapping configuration
-         * Maps ObjectStack standard field names to driver-specific field names.
-         *
-         * This is distinct from the database adapter configuration and provides
-         * instructions for the driver to map our standard schema fields to the
-         * underlying engine's fields (e.g., better-auth uses 'token' instead of 'sessionToken').
-         */
+        }, z.core.$strip>>;
         mapping: z.ZodOptional<z.ZodObject<{
-            /**
-             * User model field mapping
-             * Maps ObjectStack User fields to driver fields
-             */
             user: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-            /**
-             * Session model field mapping
-             * Maps ObjectStack Session fields to driver fields
-             */
             session: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-            /**
-             * Account model field mapping
-             * Maps ObjectStack Account fields to driver fields
-             */
             account: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-            /**
-             * Verification token field mapping
-             * Maps ObjectStack VerificationToken fields to driver fields
-             */
             verificationToken: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        }, "strip", z.ZodTypeAny, {
-            session: Record<string, string>;
-            account: Record<string, string>;
-            user?: Record<string, string> | undefined;
-            verificationToken?: Record<string, string> | undefined;
-        }, {
-            session?: Record<string, string> | undefined;
-            user?: Record<string, string> | undefined;
-            account?: Record<string, string> | undefined;
-            verificationToken?: Record<string, string> | undefined;
-        }>>;
-        /**
-         * Additional authentication plugins
-         */
+        }, z.core.$strip>>;
         plugins: z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             enabled: z.ZodDefault<z.ZodBoolean>;
             options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-        }, "strip", z.ZodTypeAny, {
-            enabled: boolean;
-            name: string;
-            options?: Record<string, any> | undefined;
-        }, {
-            name: string;
-            options?: Record<string, any> | undefined;
-            enabled?: boolean | undefined;
-        }>, "many">>;
-        /**
-         * Custom hooks for authentication events
-         */
+        }, z.core.$strip>>>;
         hooks: z.ZodOptional<z.ZodObject<{
             beforeSignIn: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
                 email: z.ZodString;
-            }, "strip", z.ZodTypeAny, {
-                email: string;
-            }, {
-                email: string;
-            }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+            }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
             afterSignIn: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
                 user: z.ZodAny;
                 session: z.ZodAny;
-            }, "strip", z.ZodTypeAny, {
-                session?: any;
-                user?: any;
-            }, {
-                session?: any;
-                user?: any;
-            }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+            }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
             beforeSignUp: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
                 email: z.ZodString;
                 name: z.ZodOptional<z.ZodString>;
-            }, "strip", z.ZodTypeAny, {
-                email: string;
-                name?: string | undefined;
-            }, {
-                email: string;
-                name?: string | undefined;
-            }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+            }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
             afterSignUp: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
                 user: z.ZodAny;
-            }, "strip", z.ZodTypeAny, {
-                user?: any;
-            }, {
-                user?: any;
-            }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+            }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
             beforeSignOut: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
                 sessionId: z.ZodString;
-            }, "strip", z.ZodTypeAny, {
-                sessionId: string;
-            }, {
-                sessionId: string;
-            }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
+            }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
             afterSignOut: z.ZodOptional<z.ZodFunction<z.ZodTuple<[z.ZodObject<{
                 sessionId: z.ZodString;
-            }, "strip", z.ZodTypeAny, {
-                sessionId: string;
-            }, {
-                sessionId: string;
-            }>], z.ZodUnknown>, z.ZodPromise<z.ZodVoid>>>;
-        }, "strip", z.ZodTypeAny, {
-            beforeSignIn?: ((args_0: {
-                email: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignIn?: ((args_0: {
-                session?: any;
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignUp?: ((args_0: {
-                email: string;
-                name?: string | undefined;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignUp?: ((args_0: {
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        }, {
-            beforeSignIn?: ((args_0: {
-                email: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignIn?: ((args_0: {
-                session?: any;
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignUp?: ((args_0: {
-                email: string;
-                name?: string | undefined;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignUp?: ((args_0: {
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        }>>;
-        /**
-         * Advanced security settings
-         */
+            }, z.core.$strip>], null>, z.ZodPromise<z.ZodVoid>>>;
+        }, z.core.$strip>>;
         security: z.ZodOptional<z.ZodObject<{
-            allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
             trustProxy: z.ZodDefault<z.ZodBoolean>;
             ipRateLimiting: z.ZodDefault<z.ZodBoolean>;
             sessionFingerprinting: z.ZodDefault<z.ZodBoolean>;
             maxSessions: z.ZodDefault<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            trustProxy: boolean;
-            ipRateLimiting: boolean;
-            sessionFingerprinting: boolean;
-            maxSessions: number;
-            allowedOrigins?: string[] | undefined;
-        }, {
-            allowedOrigins?: string[] | undefined;
-            trustProxy?: boolean | undefined;
-            ipRateLimiting?: boolean | undefined;
-            sessionFingerprinting?: boolean | undefined;
-            maxSessions?: number | undefined;
-        }>>;
-        /**
-         * Email configuration for transactional emails
-         */
+        }, z.core.$strip>>;
         email: z.ZodOptional<z.ZodObject<{
             from: z.ZodString;
             fromName: z.ZodOptional<z.ZodString>;
-            provider: z.ZodEnum<["smtp", "sendgrid", "mailgun", "ses", "resend", "custom"]>;
+            provider: z.ZodEnum<{
+                custom: "custom";
+                smtp: "smtp";
+                sendgrid: "sendgrid";
+                mailgun: "mailgun";
+                ses: "ses";
+                resend: "resend";
+            }>;
             config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-        }, "strip", z.ZodTypeAny, {
-            provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-            from: string;
-            config?: Record<string, any> | undefined;
-            fromName?: string | undefined;
-        }, {
-            provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-            from: string;
-            config?: Record<string, any> | undefined;
-            fromName?: string | undefined;
-        }>>;
-        /**
-         * UI customization options
-         */
+        }, z.core.$strip>>;
         ui: z.ZodOptional<z.ZodObject<{
             brandName: z.ZodOptional<z.ZodString>;
             logo: z.ZodOptional<z.ZodString>;
             primaryColor: z.ZodOptional<z.ZodString>;
             customCss: z.ZodOptional<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            primaryColor?: string | undefined;
-            logo?: string | undefined;
-            brandName?: string | undefined;
-            customCss?: string | undefined;
-        }, {
-            primaryColor?: string | undefined;
-            logo?: string | undefined;
-            brandName?: string | undefined;
-            customCss?: string | undefined;
-        }>>;
-        /**
-         * Whether this auth provider is active
-         */
+        }, z.core.$strip>>;
         active: z.ZodDefault<z.ZodBoolean>;
-        /**
-         * Whether to allow new user registration
-         */
         allowRegistration: z.ZodDefault<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        label: string;
-        name: string;
-        active: boolean;
-        session: {
-            expiresIn: number;
-            updateAge: number;
-            cookieName: string;
-            cookieSecure: boolean;
-            cookieSameSite: "strict" | "none" | "lax";
-            cookiePath: string;
-            cookieHttpOnly: boolean;
-            cookieDomain?: string | undefined;
-        };
-        rateLimit: {
-            enabled: boolean;
-            windowMs: number;
-            maxAttempts: number;
-            blockDuration: number;
-            skipSuccessfulRequests: boolean;
-        };
-        secret: string;
-        driver: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
-        csrf: {
-            enabled: boolean;
-            headerName: string;
-            cookieName: string;
-            tokenLength: number;
-        };
-        accountLinking: {
-            enabled: boolean;
-            autoLink: boolean;
-            requireVerification: boolean;
-        };
-        userFieldMapping: {
-            email: string;
-            name: string;
-            id: string;
-            createdAt: string;
-            emailVerified: string;
-            updatedAt: string;
-            image?: string | undefined;
-        };
-        plugins: {
-            enabled: boolean;
-            name: string;
-            options?: Record<string, any> | undefined;
-        }[];
-        allowRegistration: boolean;
-        database?: {
-            type: "custom" | "prisma" | "drizzle" | "kysely";
-            tablePrefix: string;
-            schema?: string | undefined;
-            connectionString?: string | undefined;
-        } | undefined;
-        email?: {
-            provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-            from: string;
-            config?: Record<string, any> | undefined;
-            fromName?: string | undefined;
-        } | undefined;
-        security?: {
-            trustProxy: boolean;
-            ipRateLimiting: boolean;
-            sessionFingerprinting: boolean;
-            maxSessions: number;
-            allowedOrigins?: string[] | undefined;
-        } | undefined;
-        oauth?: {
-            providers: {
-                enabled: boolean;
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }[];
-        } | undefined;
-        passkey?: {
-            enabled: boolean;
-            rpName: string;
-            userVerification: "required" | "preferred" | "discouraged";
-            attestation: "none" | "indirect" | "direct" | "enterprise";
-            allowedOrigins?: string[] | undefined;
-            rpId?: string | undefined;
-        } | undefined;
-        enterprise?: {
-            saml?: {
-                enabled: boolean;
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                signatureAlgorithm: "sha256" | "sha512";
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            oidc?: {
-                enabled: boolean;
-                clientId: string;
-                clientSecret: string;
-                scopes: string[];
-                issuer: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            ldap?: {
-                enabled: boolean;
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            } | undefined;
-        } | undefined;
-        emailPassword?: {
-            enabled: boolean;
-            requireEmailVerification: boolean;
-            minPasswordLength: number;
-            requirePasswordComplexity: boolean;
-            allowPasswordReset: boolean;
-            passwordResetExpiry: number;
-        } | undefined;
-        magicLink?: {
-            enabled: boolean;
-            expiryTime: number;
-            sendEmail?: ((args_0: {
-                to: string;
-                token: string;
-                link: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        twoFactor?: {
-            enabled: boolean;
-            qrCodeSize: number;
-            issuer?: string | undefined;
-            backupCodes?: {
-                enabled: boolean;
-                count: number;
-            } | undefined;
-        } | undefined;
-        organization?: {
-            enabled: boolean;
-            allowUserToCreateOrg: boolean;
-            defaultRole: string;
-            creatorRole: string;
-        } | undefined;
-        mapping?: {
-            session: Record<string, string>;
-            account: Record<string, string>;
-            user?: Record<string, string> | undefined;
-            verificationToken?: Record<string, string> | undefined;
-        } | undefined;
-        hooks?: {
-            beforeSignIn?: ((args_0: {
-                email: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignIn?: ((args_0: {
-                session?: any;
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignUp?: ((args_0: {
-                email: string;
-                name?: string | undefined;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignUp?: ((args_0: {
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        ui?: {
-            primaryColor?: string | undefined;
-            logo?: string | undefined;
-            brandName?: string | undefined;
-            customCss?: string | undefined;
-        } | undefined;
-    }, {
-        label: string;
-        name: string;
-        secret: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
-        database?: {
-            type: "custom" | "prisma" | "drizzle" | "kysely";
-            schema?: string | undefined;
-            connectionString?: string | undefined;
-            tablePrefix?: string | undefined;
-        } | undefined;
-        email?: {
-            provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-            from: string;
-            config?: Record<string, any> | undefined;
-            fromName?: string | undefined;
-        } | undefined;
-        active?: boolean | undefined;
-        session?: {
-            expiresIn?: number | undefined;
-            updateAge?: number | undefined;
-            cookieName?: string | undefined;
-            cookieSecure?: boolean | undefined;
-            cookieSameSite?: "strict" | "none" | "lax" | undefined;
-            cookieDomain?: string | undefined;
-            cookiePath?: string | undefined;
-            cookieHttpOnly?: boolean | undefined;
-        } | undefined;
-        rateLimit?: {
-            enabled?: boolean | undefined;
-            windowMs?: number | undefined;
-            maxAttempts?: number | undefined;
-            blockDuration?: number | undefined;
-            skipSuccessfulRequests?: boolean | undefined;
-        } | undefined;
-        driver?: string | undefined;
-        security?: {
-            allowedOrigins?: string[] | undefined;
-            trustProxy?: boolean | undefined;
-            ipRateLimiting?: boolean | undefined;
-            sessionFingerprinting?: boolean | undefined;
-            maxSessions?: number | undefined;
-        } | undefined;
-        oauth?: {
-            providers: {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }[];
-        } | undefined;
-        passkey?: {
-            rpName: string;
-            enabled?: boolean | undefined;
-            allowedOrigins?: string[] | undefined;
-            rpId?: string | undefined;
-            userVerification?: "required" | "preferred" | "discouraged" | undefined;
-            attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
-        } | undefined;
-        enterprise?: {
-            saml?: {
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            oidc?: {
-                clientId: string;
-                clientSecret: string;
-                issuer: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            ldap?: {
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            } | undefined;
-        } | undefined;
-        emailPassword?: {
-            enabled?: boolean | undefined;
-            requireEmailVerification?: boolean | undefined;
-            minPasswordLength?: number | undefined;
-            requirePasswordComplexity?: boolean | undefined;
-            allowPasswordReset?: boolean | undefined;
-            passwordResetExpiry?: number | undefined;
-        } | undefined;
-        magicLink?: {
-            enabled?: boolean | undefined;
-            expiryTime?: number | undefined;
-            sendEmail?: ((args_0: {
-                to: string;
-                token: string;
-                link: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        csrf?: {
-            enabled?: boolean | undefined;
-            headerName?: string | undefined;
-            cookieName?: string | undefined;
-            tokenLength?: number | undefined;
-        } | undefined;
-        accountLinking?: {
-            enabled?: boolean | undefined;
-            autoLink?: boolean | undefined;
-            requireVerification?: boolean | undefined;
-        } | undefined;
-        twoFactor?: {
-            enabled?: boolean | undefined;
-            issuer?: string | undefined;
-            qrCodeSize?: number | undefined;
-            backupCodes?: {
-                enabled?: boolean | undefined;
-                count?: number | undefined;
-            } | undefined;
-        } | undefined;
-        organization?: {
-            enabled?: boolean | undefined;
-            allowUserToCreateOrg?: boolean | undefined;
-            defaultRole?: string | undefined;
-            creatorRole?: string | undefined;
-        } | undefined;
-        userFieldMapping?: {
-            email?: string | undefined;
-            image?: string | undefined;
-            name?: string | undefined;
-            id?: string | undefined;
-            createdAt?: string | undefined;
-            emailVerified?: string | undefined;
-            updatedAt?: string | undefined;
-        } | undefined;
-        mapping?: {
-            session?: Record<string, string> | undefined;
-            user?: Record<string, string> | undefined;
-            account?: Record<string, string> | undefined;
-            verificationToken?: Record<string, string> | undefined;
-        } | undefined;
-        plugins?: {
-            name: string;
-            options?: Record<string, any> | undefined;
-            enabled?: boolean | undefined;
-        }[] | undefined;
-        hooks?: {
-            beforeSignIn?: ((args_0: {
-                email: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignIn?: ((args_0: {
-                session?: any;
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignUp?: ((args_0: {
-                email: string;
-                name?: string | undefined;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignUp?: ((args_0: {
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        ui?: {
-            primaryColor?: string | undefined;
-            logo?: string | undefined;
-            brandName?: string | undefined;
-            customCss?: string | undefined;
-        } | undefined;
-        allowRegistration?: boolean | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    type: "standard_auth";
-    config: {
-        label: string;
-        name: string;
-        active: boolean;
-        session: {
-            expiresIn: number;
-            updateAge: number;
-            cookieName: string;
-            cookieSecure: boolean;
-            cookieSameSite: "strict" | "none" | "lax";
-            cookiePath: string;
-            cookieHttpOnly: boolean;
-            cookieDomain?: string | undefined;
-        };
-        rateLimit: {
-            enabled: boolean;
-            windowMs: number;
-            maxAttempts: number;
-            blockDuration: number;
-            skipSuccessfulRequests: boolean;
-        };
-        secret: string;
-        driver: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
-        csrf: {
-            enabled: boolean;
-            headerName: string;
-            cookieName: string;
-            tokenLength: number;
-        };
-        accountLinking: {
-            enabled: boolean;
-            autoLink: boolean;
-            requireVerification: boolean;
-        };
-        userFieldMapping: {
-            email: string;
-            name: string;
-            id: string;
-            createdAt: string;
-            emailVerified: string;
-            updatedAt: string;
-            image?: string | undefined;
-        };
-        plugins: {
-            enabled: boolean;
-            name: string;
-            options?: Record<string, any> | undefined;
-        }[];
-        allowRegistration: boolean;
-        database?: {
-            type: "custom" | "prisma" | "drizzle" | "kysely";
-            tablePrefix: string;
-            schema?: string | undefined;
-            connectionString?: string | undefined;
-        } | undefined;
-        email?: {
-            provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-            from: string;
-            config?: Record<string, any> | undefined;
-            fromName?: string | undefined;
-        } | undefined;
-        security?: {
-            trustProxy: boolean;
-            ipRateLimiting: boolean;
-            sessionFingerprinting: boolean;
-            maxSessions: number;
-            allowedOrigins?: string[] | undefined;
-        } | undefined;
-        oauth?: {
-            providers: {
-                enabled: boolean;
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }[];
-        } | undefined;
-        passkey?: {
-            enabled: boolean;
-            rpName: string;
-            userVerification: "required" | "preferred" | "discouraged";
-            attestation: "none" | "indirect" | "direct" | "enterprise";
-            allowedOrigins?: string[] | undefined;
-            rpId?: string | undefined;
-        } | undefined;
-        enterprise?: {
-            saml?: {
-                enabled: boolean;
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                signatureAlgorithm: "sha256" | "sha512";
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            oidc?: {
-                enabled: boolean;
-                clientId: string;
-                clientSecret: string;
-                scopes: string[];
-                issuer: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            ldap?: {
-                enabled: boolean;
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            } | undefined;
-        } | undefined;
-        emailPassword?: {
-            enabled: boolean;
-            requireEmailVerification: boolean;
-            minPasswordLength: number;
-            requirePasswordComplexity: boolean;
-            allowPasswordReset: boolean;
-            passwordResetExpiry: number;
-        } | undefined;
-        magicLink?: {
-            enabled: boolean;
-            expiryTime: number;
-            sendEmail?: ((args_0: {
-                to: string;
-                token: string;
-                link: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        twoFactor?: {
-            enabled: boolean;
-            qrCodeSize: number;
-            issuer?: string | undefined;
-            backupCodes?: {
-                enabled: boolean;
-                count: number;
-            } | undefined;
-        } | undefined;
-        organization?: {
-            enabled: boolean;
-            allowUserToCreateOrg: boolean;
-            defaultRole: string;
-            creatorRole: string;
-        } | undefined;
-        mapping?: {
-            session: Record<string, string>;
-            account: Record<string, string>;
-            user?: Record<string, string> | undefined;
-            verificationToken?: Record<string, string> | undefined;
-        } | undefined;
-        hooks?: {
-            beforeSignIn?: ((args_0: {
-                email: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignIn?: ((args_0: {
-                session?: any;
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignUp?: ((args_0: {
-                email: string;
-                name?: string | undefined;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignUp?: ((args_0: {
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        ui?: {
-            primaryColor?: string | undefined;
-            logo?: string | undefined;
-            brandName?: string | undefined;
-            customCss?: string | undefined;
-        } | undefined;
-    };
-}, {
-    type: "standard_auth";
-    config: {
-        label: string;
-        name: string;
-        secret: string;
-        strategies: ("email_password" | "magic_link" | "oauth" | "passkey" | "otp" | "anonymous")[];
-        baseUrl: string;
-        database?: {
-            type: "custom" | "prisma" | "drizzle" | "kysely";
-            schema?: string | undefined;
-            connectionString?: string | undefined;
-            tablePrefix?: string | undefined;
-        } | undefined;
-        email?: {
-            provider: "custom" | "smtp" | "sendgrid" | "mailgun" | "ses" | "resend";
-            from: string;
-            config?: Record<string, any> | undefined;
-            fromName?: string | undefined;
-        } | undefined;
-        active?: boolean | undefined;
-        session?: {
-            expiresIn?: number | undefined;
-            updateAge?: number | undefined;
-            cookieName?: string | undefined;
-            cookieSecure?: boolean | undefined;
-            cookieSameSite?: "strict" | "none" | "lax" | undefined;
-            cookieDomain?: string | undefined;
-            cookiePath?: string | undefined;
-            cookieHttpOnly?: boolean | undefined;
-        } | undefined;
-        rateLimit?: {
-            enabled?: boolean | undefined;
-            windowMs?: number | undefined;
-            maxAttempts?: number | undefined;
-            blockDuration?: number | undefined;
-            skipSuccessfulRequests?: boolean | undefined;
-        } | undefined;
-        driver?: string | undefined;
-        security?: {
-            allowedOrigins?: string[] | undefined;
-            trustProxy?: boolean | undefined;
-            ipRateLimiting?: boolean | undefined;
-            sessionFingerprinting?: boolean | undefined;
-            maxSessions?: number | undefined;
-        } | undefined;
-        oauth?: {
-            providers: {
-                provider: "custom" | "google" | "github" | "facebook" | "twitter" | "linkedin" | "microsoft" | "apple" | "discord" | "gitlab";
-                clientId: string;
-                clientSecret: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                redirectUri?: string | undefined;
-                displayName?: string | undefined;
-            }[];
-        } | undefined;
-        passkey?: {
-            rpName: string;
-            enabled?: boolean | undefined;
-            allowedOrigins?: string[] | undefined;
-            rpId?: string | undefined;
-            userVerification?: "required" | "preferred" | "discouraged" | undefined;
-            attestation?: "none" | "indirect" | "direct" | "enterprise" | undefined;
-        } | undefined;
-        enterprise?: {
-            saml?: {
-                cert: string;
-                issuer: string;
-                entryPoint: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                signatureAlgorithm?: "sha256" | "sha512" | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            oidc?: {
-                clientId: string;
-                clientSecret: string;
-                issuer: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                scopes?: string[] | undefined;
-                displayName?: string | undefined;
-                attributeMapping?: Record<string, string> | undefined;
-            } | undefined;
-            ldap?: {
-                url: string;
-                bindDn: string;
-                bindCredentials: string;
-                searchBase: string;
-                searchFilter: string;
-                enabled?: boolean | undefined;
-                icon?: string | undefined;
-                displayName?: string | undefined;
-                groupSearchBase?: string | undefined;
-            } | undefined;
-        } | undefined;
-        emailPassword?: {
-            enabled?: boolean | undefined;
-            requireEmailVerification?: boolean | undefined;
-            minPasswordLength?: number | undefined;
-            requirePasswordComplexity?: boolean | undefined;
-            allowPasswordReset?: boolean | undefined;
-            passwordResetExpiry?: number | undefined;
-        } | undefined;
-        magicLink?: {
-            enabled?: boolean | undefined;
-            expiryTime?: number | undefined;
-            sendEmail?: ((args_0: {
-                to: string;
-                token: string;
-                link: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        csrf?: {
-            enabled?: boolean | undefined;
-            headerName?: string | undefined;
-            cookieName?: string | undefined;
-            tokenLength?: number | undefined;
-        } | undefined;
-        accountLinking?: {
-            enabled?: boolean | undefined;
-            autoLink?: boolean | undefined;
-            requireVerification?: boolean | undefined;
-        } | undefined;
-        twoFactor?: {
-            enabled?: boolean | undefined;
-            issuer?: string | undefined;
-            qrCodeSize?: number | undefined;
-            backupCodes?: {
-                enabled?: boolean | undefined;
-                count?: number | undefined;
-            } | undefined;
-        } | undefined;
-        organization?: {
-            enabled?: boolean | undefined;
-            allowUserToCreateOrg?: boolean | undefined;
-            defaultRole?: string | undefined;
-            creatorRole?: string | undefined;
-        } | undefined;
-        userFieldMapping?: {
-            email?: string | undefined;
-            image?: string | undefined;
-            name?: string | undefined;
-            id?: string | undefined;
-            createdAt?: string | undefined;
-            emailVerified?: string | undefined;
-            updatedAt?: string | undefined;
-        } | undefined;
-        mapping?: {
-            session?: Record<string, string> | undefined;
-            user?: Record<string, string> | undefined;
-            account?: Record<string, string> | undefined;
-            verificationToken?: Record<string, string> | undefined;
-        } | undefined;
-        plugins?: {
-            name: string;
-            options?: Record<string, any> | undefined;
-            enabled?: boolean | undefined;
-        }[] | undefined;
-        hooks?: {
-            beforeSignIn?: ((args_0: {
-                email: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignIn?: ((args_0: {
-                session?: any;
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignUp?: ((args_0: {
-                email: string;
-                name?: string | undefined;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignUp?: ((args_0: {
-                user?: any;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            beforeSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-            afterSignOut?: ((args_0: {
-                sessionId: string;
-            }, ...args: unknown[]) => Promise<void>) | undefined;
-        } | undefined;
-        ui?: {
-            primaryColor?: string | undefined;
-            logo?: string | undefined;
-            brandName?: string | undefined;
-            customCss?: string | undefined;
-        } | undefined;
-        allowRegistration?: boolean | undefined;
-    };
-}>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 export type StandardAuthProvider = z.infer<typeof StandardAuthProviderSchema>;
 //# sourceMappingURL=config.zod.d.ts.map