@robelest/convex-auth 0.0.4-preview.25 → 0.0.4-preview.28

package/dist/component/_generated/component.d.ts

@@ -115,1238 +115,142 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       deviceId: string;
       lastPolledAt: number;
     }, null, Name>;
-    enterprise: {
-      audit: {
-        enterpriseAuditEventCreate: FunctionReference<"mutation", "internal", {
-          actorId?: string;
-          actorType: "user" | "system" | "scim" | "api_key" | "webhook";
-          enterpriseId: string;
-          eventType: string;
-          groupId: string;
-          ip?: string;
-          metadata?: any;
-          occurredAt: number;
-          requestId?: string;
-          status: "success" | "failure";
-          subjectId?: string;
-          subjectType: string;
+    factors: {
+      devices: {
+        deviceAuthorize: FunctionReference<"mutation", "internal", {
+          deviceId: string;
+          sessionId: string;
+          userId: string;
+        }, null, Name>;
+        deviceDelete: FunctionReference<"mutation", "internal", {
+          deviceId: string;
+        }, null, Name>;
+        deviceGetByCodeHash: FunctionReference<"query", "internal", {
+          deviceCodeHash: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          deviceCodeHash: string;
+          expiresAt: number;
+          interval: number;
+          lastPolledAt?: number;
+          sessionId?: string;
+          status: "pending" | "authorized" | "denied";
+          userCode: string;
+          userId?: string;
+        } | null, Name>;
+        deviceGetByUserCode: FunctionReference<"query", "internal", {
+          userCode: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          deviceCodeHash: string;
+          expiresAt: number;
+          interval: number;
+          lastPolledAt?: number;
+          sessionId?: string;
+          status: "pending" | "authorized" | "denied";
+          userCode: string;
+          userId?: string;
+        } | null, Name>;
+        deviceInsert: FunctionReference<"mutation", "internal", {
+          deviceCodeHash: string;
+          expiresAt: number;
+          interval: number;
+          status: "pending" | "authorized" | "denied";
+          userCode: string;
         }, string, Name>;
-        enterpriseAuditEventList: FunctionReference<"query", "internal", {
-          enterpriseId?: string;
-          groupId?: string;
-          limit?: number;
+        deviceUpdateLastPolled: FunctionReference<"mutation", "internal", {
+          deviceId: string;
+          lastPolledAt: number;
+        }, null, Name>;
+      };
+      passkeys: {
+        passkeyDelete: FunctionReference<"mutation", "internal", {
+          passkeyId: string;
+        }, null, Name>;
+        passkeyGetByCredentialId: FunctionReference<"query", "internal", {
+          credentialId: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          algorithm: number;
+          backedUp: boolean;
+          counter: number;
+          createdAt: number;
+          credentialId: string;
+          deviceType: string;
+          lastUsedAt?: number;
+          name?: string;
+          publicKey: ArrayBuffer;
+          transports?: Array<string>;
+          userId: string;
+        } | null, Name>;
+        passkeyInsert: FunctionReference<"mutation", "internal", {
+          algorithm: number;
+          backedUp: boolean;
+          counter: number;
+          createdAt: number;
+          credentialId: string;
+          deviceType: string;
+          name?: string;
+          publicKey: ArrayBuffer;
+          transports?: Array<string>;
+          userId: string;
+        }, string, Name>;
+        passkeyListByUserId: FunctionReference<"query", "internal", {
+          userId: string;
         }, Array<{
           _creationTime: number;
           _id: string;
-          actorId?: string;
-          actorType: "user" | "system" | "scim" | "api_key" | "webhook";
-          enterpriseId: string;
-          eventType: string;
-          groupId: string;
-          ip?: string;
-          metadata?: any;
-          occurredAt: number;
-          requestId?: string;
-          status: "success" | "failure";
-          subjectId?: string;
-          subjectType: string;
+          algorithm: number;
+          backedUp: boolean;
+          counter: number;
+          createdAt: number;
+          credentialId: string;
+          deviceType: string;
+          lastUsedAt?: number;
+          name?: string;
+          publicKey: ArrayBuffer;
+          transports?: Array<string>;
+          userId: string;
         }>, Name>;
+        passkeyUpdateCounter: FunctionReference<"mutation", "internal", {
+          counter: number;
+          lastUsedAt: number;
+          passkeyId: string;
+        }, null, Name>;
+        passkeyUpdateMeta: FunctionReference<"mutation", "internal", {
+          data: any;
+          passkeyId: string;
+        }, null, Name>;
       };
-      core: {
-        enterpriseCreate: FunctionReference<"mutation", "internal", {
-          config?: any;
-          extend?: any;
-          groupId: string;
-          name?: string;
-          policy?: {
-            extend?: any;
-            identity: {
-              accountLinking: {
-                oidc: "verifiedEmail" | "none";
-                saml: "verifiedEmail" | "none";
-              };
-            };
-            provisioning: {
-              deprovision: {
-                mode: "soft" | "hard";
-              };
-              jit: {
-                defaultRole?: string;
-                defaultRoleIds?: Array<string>;
-                mode: "off" | "createUser" | "createUserAndMembership";
-              };
-              scimReuse: {
-                user: "externalId" | "none";
-              };
-            };
-            version: 1;
-          };
-          slug?: string;
-          status?: "draft" | "active" | "disabled";
-        }, string, Name>;
-        enterpriseDelete: FunctionReference<"mutation", "internal", {
-          enterpriseId: string;
+      totp: {
+        totpDelete: FunctionReference<"mutation", "internal", {
+          totpId: string;
         }, null, Name>;
-        enterpriseGet: FunctionReference<"query", "internal", {
-          enterpriseId: string;
+        totpGetById: FunctionReference<"query", "internal", {
+          totpId: string;
         }, {
           _creationTime: number;
           _id: string;
-          config?: any;
-          extend?: any;
-          groupId: string;
+          createdAt: number;
+          digits: number;
+          lastUsedAt?: number;
           name?: string;
-          policy?: {
-            extend?: any;
-            identity: {
-              accountLinking: {
-                oidc: "verifiedEmail" | "none";
-                saml: "verifiedEmail" | "none";
-              };
-            };
-            provisioning: {
-              deprovision: {
-                mode: "soft" | "hard";
-              };
-              jit: {
-                defaultRole?: string;
-                defaultRoleIds?: Array<string>;
-                mode: "off" | "createUser" | "createUserAndMembership";
-              };
-              scimReuse: {
-                user: "externalId" | "none";
-              };
-            };
-            version: 1;
-          };
-          slug?: string;
-          status: "draft" | "active" | "disabled";
-        } | null, Name>;
-        enterpriseGetByDomain: FunctionReference<"query", "internal", {
-          domain: string;
-        }, {
-          domain: {
-            _creationTime: number;
-            _id: string;
-            domain: string;
-            enterpriseId: string;
-            groupId: string;
-            isPrimary: boolean;
-            verifiedAt?: number;
-          };
-          enterprise: {
-            _creationTime: number;
-            _id: string;
-            config?: any;
-            extend?: any;
-            groupId: string;
-            name?: string;
-            policy?: {
-              extend?: any;
-              identity: {
-                accountLinking: {
-                  oidc: "verifiedEmail" | "none";
-                  saml: "verifiedEmail" | "none";
-                };
-              };
-              provisioning: {
-                deprovision: {
-                  mode: "soft" | "hard";
-                };
-                jit: {
-                  defaultRole?: string;
-                  defaultRoleIds?: Array<string>;
-                  mode: "off" | "createUser" | "createUserAndMembership";
-                };
-                scimReuse: {
-                  user: "externalId" | "none";
-                };
-              };
-              version: 1;
-            };
-            slug?: string;
-            status: "draft" | "active" | "disabled";
-          };
+          period: number;
+          secret: ArrayBuffer;
+          userId: string;
+          verified: boolean;
         } | null, Name>;
-        enterpriseGetByGroup: FunctionReference<"query", "internal", {
-          groupId: string;
+        totpGetVerifiedByUserId: FunctionReference<"query", "internal", {
+          userId: string;
         }, {
           _creationTime: number;
           _id: string;
-          config?: any;
-          extend?: any;
-          groupId: string;
-          name?: string;
-          policy?: {
-            extend?: any;
-            identity: {
-              accountLinking: {
-                oidc: "verifiedEmail" | "none";
-                saml: "verifiedEmail" | "none";
-              };
-            };
-            provisioning: {
-              deprovision: {
-                mode: "soft" | "hard";
-              };
-              jit: {
-                defaultRole?: string;
-                defaultRoleIds?: Array<string>;
-                mode: "off" | "createUser" | "createUserAndMembership";
-              };
-              scimReuse: {
-                user: "externalId" | "none";
-              };
-            };
-            version: 1;
-          };
-          slug?: string;
-          status: "draft" | "active" | "disabled";
-        } | null, Name>;
-        enterpriseList: FunctionReference<"query", "internal", {
-          cursor?: string | null;
-          limit?: number;
-          order?: "asc" | "desc";
-          orderBy?: "_creationTime" | "name" | "slug" | "status";
-          where?: {
-            groupId?: string;
-            slug?: string;
-            status?: "draft" | "active" | "disabled";
-          };
-        }, {
-          items: Array<{
-            _creationTime: number;
-            _id: string;
-            config?: any;
-            extend?: any;
-            groupId: string;
-            name?: string;
-            policy?: {
-              extend?: any;
-              identity: {
-                accountLinking: {
-                  oidc: "verifiedEmail" | "none";
-                  saml: "verifiedEmail" | "none";
-                };
-              };
-              provisioning: {
-                deprovision: {
-                  mode: "soft" | "hard";
-                };
-                jit: {
-                  defaultRole?: string;
-                  defaultRoleIds?: Array<string>;
-                  mode: "off" | "createUser" | "createUserAndMembership";
-                };
-                scimReuse: {
-                  user: "externalId" | "none";
-                };
-              };
-              version: 1;
-            };
-            slug?: string;
-            status: "draft" | "active" | "disabled";
-          }>;
-          nextCursor: string | null;
-        }, Name>;
-        enterpriseUpdate: FunctionReference<"mutation", "internal", {
-          data: any;
-          enterpriseId: string;
-        }, null, Name>;
-      };
-      domains: {
-        enterpriseDomainAdd: FunctionReference<"mutation", "internal", {
-          domain: string;
-          enterpriseId: string;
-          groupId: string;
-          isPrimary?: boolean;
-        }, string, Name>;
-        enterpriseDomainDelete: FunctionReference<"mutation", "internal", {
-          domainId: string;
-        }, null, Name>;
-        enterpriseDomainList: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-        }, Array<{
-          _creationTime: number;
-          _id: string;
-          domain: string;
-          enterpriseId: string;
-          groupId: string;
-          isPrimary: boolean;
-          verifiedAt?: number;
-        }>, Name>;
-        enterpriseDomainVerificationDelete: FunctionReference<"mutation", "internal", {
-          domainId: string;
-        }, null, Name>;
-        enterpriseDomainVerificationGet: FunctionReference<"query", "internal", {
-          domainId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          domain: string;
-          domainId: string;
-          enterpriseId: string;
-          expiresAt: number;
-          groupId: string;
-          recordName: string;
-          requestedAt: number;
-          token: string;
-          tokenHash: string;
-        } | null, Name>;
-        enterpriseDomainVerificationUpsert: FunctionReference<"mutation", "internal", {
-          domain: string;
-          domainId: string;
-          enterpriseId: string;
-          expiresAt: number;
-          groupId: string;
-          recordName: string;
-          requestedAt: number;
-          token: string;
-          tokenHash: string;
-        }, string, Name>;
-        enterpriseDomainVerify: FunctionReference<"mutation", "internal", {
-          domainId: string;
-          verifiedAt: number;
-        }, {
-          _creationTime: number;
-          _id: string;
-          domain: string;
-          enterpriseId: string;
-          groupId: string;
-          isPrimary: boolean;
-          verifiedAt?: number;
-        }, Name>;
-      };
-      scim: {
-        enterpriseScimConfigGetByEnterprise: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          basePath: string;
-          enterpriseId: string;
-          extend?: any;
-          groupId: string;
-          lastRotatedAt?: number;
-          status: "draft" | "active" | "disabled";
-          tokenHash: string;
-        } | null, Name>;
-        enterpriseScimConfigGetByTokenHash: FunctionReference<"query", "internal", {
-          tokenHash: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          basePath: string;
-          enterpriseId: string;
-          extend?: any;
-          groupId: string;
-          lastRotatedAt?: number;
-          status: "draft" | "active" | "disabled";
-          tokenHash: string;
-        } | null, Name>;
-        enterpriseScimConfigUpsert: FunctionReference<"mutation", "internal", {
-          basePath: string;
-          enterpriseId: string;
-          extend?: any;
-          groupId: string;
-          lastRotatedAt?: number;
-          status: "draft" | "active" | "disabled";
-          tokenHash: string;
-        }, string, Name>;
-        enterpriseScimIdentityDelete: FunctionReference<"mutation", "internal", {
-          identityId: string;
-        }, null, Name>;
-        enterpriseScimIdentityGet: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-          externalId: string;
-          resourceType: "user" | "group";
-        }, {
-          _creationTime: number;
-          _id: string;
-          active?: boolean;
-          enterpriseId: string;
-          externalId: string;
-          groupId: string;
-          lastProvisionedAt?: number;
-          mappedGroupId?: string;
-          raw?: any;
-          resourceType: "user" | "group";
-          userId?: string;
-        } | null, Name>;
-        enterpriseScimIdentityGetByEnterpriseAndUser: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-          userId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          active?: boolean;
-          enterpriseId: string;
-          externalId: string;
-          groupId: string;
-          lastProvisionedAt?: number;
-          mappedGroupId?: string;
-          raw?: any;
-          resourceType: "user" | "group";
-          userId?: string;
-        } | null, Name>;
-        enterpriseScimIdentityGetByMappedGroup: FunctionReference<"query", "internal", {
-          mappedGroupId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          active?: boolean;
-          enterpriseId: string;
-          externalId: string;
-          groupId: string;
-          lastProvisionedAt?: number;
-          mappedGroupId?: string;
-          raw?: any;
-          resourceType: "user" | "group";
-          userId?: string;
-        } | null, Name>;
-        enterpriseScimIdentityGetByUser: FunctionReference<"query", "internal", {
-          userId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          active?: boolean;
-          enterpriseId: string;
-          externalId: string;
-          groupId: string;
-          lastProvisionedAt?: number;
-          mappedGroupId?: string;
-          raw?: any;
-          resourceType: "user" | "group";
-          userId?: string;
-        } | null, Name>;
-        enterpriseScimIdentityListByEnterprise: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-        }, Array<{
-          _creationTime: number;
-          _id: string;
-          active?: boolean;
-          enterpriseId: string;
-          externalId: string;
-          groupId: string;
-          lastProvisionedAt?: number;
-          mappedGroupId?: string;
-          raw?: any;
-          resourceType: "user" | "group";
-          userId?: string;
-        }>, Name>;
-        enterpriseScimIdentityUpsert: FunctionReference<"mutation", "internal", {
-          active?: boolean;
-          enterpriseId: string;
-          externalId: string;
-          groupId: string;
-          lastProvisionedAt?: number;
-          mappedGroupId?: string;
-          raw?: any;
-          resourceType: "user" | "group";
-          userId?: string;
-        }, string, Name>;
-      };
-      secrets: {
-        enterpriseSecretDelete: FunctionReference<"mutation", "internal", {
-          enterpriseId: string;
-          kind: "oidc_client_secret";
-        }, null, Name>;
-        enterpriseSecretGet: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-          kind: "oidc_client_secret";
-        }, {
-          _creationTime: number;
-          _id: string;
-          ciphertext: string;
-          enterpriseId: string;
-          groupId: string;
-          kind: "oidc_client_secret";
-          updatedAt: number;
-        } | null, Name>;
-        enterpriseSecretUpsert: FunctionReference<"mutation", "internal", {
-          ciphertext: string;
-          enterpriseId: string;
-          groupId: string;
-          kind: "oidc_client_secret";
-          updatedAt: number;
-        }, string, Name>;
-      };
-      webhooks: {
-        enterpriseWebhookDeliveryEnqueue: FunctionReference<"mutation", "internal", {
-          auditEventId?: string;
-          endpointId: string;
-          enterpriseId: string;
-          eventType: string;
-          nextAttemptAt: number;
-          payload: any;
-        }, string, Name>;
-        enterpriseWebhookDeliveryList: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-          limit?: number;
-        }, Array<{
-          _creationTime: number;
-          _id: string;
-          attemptCount: number;
-          auditEventId?: string;
-          endpointId: string;
-          enterpriseId: string;
-          eventType: string;
-          lastAttemptAt?: number;
-          lastError?: string;
-          lastResponseStatus?: number;
-          nextAttemptAt: number;
-          payload: any;
-          status: "pending" | "processing" | "delivered" | "failed";
-        }>, Name>;
-        enterpriseWebhookDeliveryListReady: FunctionReference<"query", "internal", {
-          limit?: number;
-          now: number;
-        }, Array<{
-          _creationTime: number;
-          _id: string;
-          attemptCount: number;
-          auditEventId?: string;
-          endpointId: string;
-          enterpriseId: string;
-          eventType: string;
-          lastAttemptAt?: number;
-          lastError?: string;
-          lastResponseStatus?: number;
-          nextAttemptAt: number;
-          payload: any;
-          status: "pending" | "processing" | "delivered" | "failed";
-        }>, Name>;
-        enterpriseWebhookDeliveryPatch: FunctionReference<"mutation", "internal", {
-          data: any;
-          deliveryId: string;
-        }, null, Name>;
-        enterpriseWebhookEndpointCreate: FunctionReference<"mutation", "internal", {
-          createdByUserId?: string;
-          enterpriseId: string;
-          extend?: any;
-          groupId: string;
-          secretHash: string;
-          status?: "active" | "disabled";
-          subscriptions: Array<string>;
-          url: string;
-        }, string, Name>;
-        enterpriseWebhookEndpointGet: FunctionReference<"query", "internal", {
-          endpointId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          createdByUserId?: string;
-          enterpriseId: string;
-          extend?: any;
-          failureCount: number;
-          groupId: string;
-          lastFailureAt?: number;
-          lastSuccessAt?: number;
-          secretHash: string;
-          status: "active" | "disabled";
-          subscriptions: Array<string>;
-          url: string;
-        } | null, Name>;
-        enterpriseWebhookEndpointList: FunctionReference<"query", "internal", {
-          enterpriseId: string;
-        }, Array<{
-          _creationTime: number;
-          _id: string;
-          createdByUserId?: string;
-          enterpriseId: string;
-          extend?: any;
-          failureCount: number;
-          groupId: string;
-          lastFailureAt?: number;
-          lastSuccessAt?: number;
-          secretHash: string;
-          status: "active" | "disabled";
-          subscriptions: Array<string>;
-          url: string;
-        }>, Name>;
-        enterpriseWebhookEndpointUpdate: FunctionReference<"mutation", "internal", {
-          data: any;
-          endpointId: string;
-        }, null, Name>;
-      };
-    };
-    enterpriseAuditEventCreate: FunctionReference<"mutation", "internal", {
-      actorId?: string;
-      actorType: "user" | "system" | "scim" | "api_key" | "webhook";
-      enterpriseId: string;
-      eventType: string;
-      groupId: string;
-      ip?: string;
-      metadata?: any;
-      occurredAt: number;
-      requestId?: string;
-      status: "success" | "failure";
-      subjectId?: string;
-      subjectType: string;
-    }, string, Name>;
-    enterpriseAuditEventList: FunctionReference<"query", "internal", {
-      enterpriseId?: string;
-      groupId?: string;
-      limit?: number;
-    }, Array<{
-      _creationTime: number;
-      _id: string;
-      actorId?: string;
-      actorType: "user" | "system" | "scim" | "api_key" | "webhook";
-      enterpriseId: string;
-      eventType: string;
-      groupId: string;
-      ip?: string;
-      metadata?: any;
-      occurredAt: number;
-      requestId?: string;
-      status: "success" | "failure";
-      subjectId?: string;
-      subjectType: string;
-    }>, Name>;
-    enterpriseCreate: FunctionReference<"mutation", "internal", {
-      config?: any;
-      extend?: any;
-      groupId: string;
-      name?: string;
-      policy?: {
-        extend?: any;
-        identity: {
-          accountLinking: {
-            oidc: "verifiedEmail" | "none";
-            saml: "verifiedEmail" | "none";
-          };
-        };
-        provisioning: {
-          deprovision: {
-            mode: "soft" | "hard";
-          };
-          jit: {
-            defaultRole?: string;
-            defaultRoleIds?: Array<string>;
-            mode: "off" | "createUser" | "createUserAndMembership";
-          };
-          scimReuse: {
-            user: "externalId" | "none";
-          };
-        };
-        version: 1;
-      };
-      slug?: string;
-      status?: "draft" | "active" | "disabled";
-    }, string, Name>;
-    enterpriseDelete: FunctionReference<"mutation", "internal", {
-      enterpriseId: string;
-    }, null, Name>;
-    enterpriseDomainAdd: FunctionReference<"mutation", "internal", {
-      domain: string;
-      enterpriseId: string;
-      groupId: string;
-      isPrimary?: boolean;
-    }, string, Name>;
-    enterpriseDomainDelete: FunctionReference<"mutation", "internal", {
-      domainId: string;
-    }, null, Name>;
-    enterpriseDomainList: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-    }, Array<{
-      _creationTime: number;
-      _id: string;
-      domain: string;
-      enterpriseId: string;
-      groupId: string;
-      isPrimary: boolean;
-      verifiedAt?: number;
-    }>, Name>;
-    enterpriseDomainVerificationDelete: FunctionReference<"mutation", "internal", {
-      domainId: string;
-    }, null, Name>;
-    enterpriseDomainVerificationGet: FunctionReference<"query", "internal", {
-      domainId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      domain: string;
-      domainId: string;
-      enterpriseId: string;
-      expiresAt: number;
-      groupId: string;
-      recordName: string;
-      requestedAt: number;
-      token: string;
-      tokenHash: string;
-    } | null, Name>;
-    enterpriseDomainVerificationUpsert: FunctionReference<"mutation", "internal", {
-      domain: string;
-      domainId: string;
-      enterpriseId: string;
-      expiresAt: number;
-      groupId: string;
-      recordName: string;
-      requestedAt: number;
-      token: string;
-      tokenHash: string;
-    }, string, Name>;
-    enterpriseDomainVerify: FunctionReference<"mutation", "internal", {
-      domainId: string;
-      verifiedAt: number;
-    }, {
-      _creationTime: number;
-      _id: string;
-      domain: string;
-      enterpriseId: string;
-      groupId: string;
-      isPrimary: boolean;
-      verifiedAt?: number;
-    }, Name>;
-    enterpriseGet: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      config?: any;
-      extend?: any;
-      groupId: string;
-      name?: string;
-      policy?: {
-        extend?: any;
-        identity: {
-          accountLinking: {
-            oidc: "verifiedEmail" | "none";
-            saml: "verifiedEmail" | "none";
-          };
-        };
-        provisioning: {
-          deprovision: {
-            mode: "soft" | "hard";
-          };
-          jit: {
-            defaultRole?: string;
-            defaultRoleIds?: Array<string>;
-            mode: "off" | "createUser" | "createUserAndMembership";
-          };
-          scimReuse: {
-            user: "externalId" | "none";
-          };
-        };
-        version: 1;
-      };
-      slug?: string;
-      status: "draft" | "active" | "disabled";
-    } | null, Name>;
-    enterpriseGetByDomain: FunctionReference<"query", "internal", {
-      domain: string;
-    }, {
-      domain: {
-        _creationTime: number;
-        _id: string;
-        domain: string;
-        enterpriseId: string;
-        groupId: string;
-        isPrimary: boolean;
-        verifiedAt?: number;
-      };
-      enterprise: {
-        _creationTime: number;
-        _id: string;
-        config?: any;
-        extend?: any;
-        groupId: string;
-        name?: string;
-        policy?: {
-          extend?: any;
-          identity: {
-            accountLinking: {
-              oidc: "verifiedEmail" | "none";
-              saml: "verifiedEmail" | "none";
-            };
-          };
-          provisioning: {
-            deprovision: {
-              mode: "soft" | "hard";
-            };
-            jit: {
-              defaultRole?: string;
-              defaultRoleIds?: Array<string>;
-              mode: "off" | "createUser" | "createUserAndMembership";
-            };
-            scimReuse: {
-              user: "externalId" | "none";
-            };
-          };
-          version: 1;
-        };
-        slug?: string;
-        status: "draft" | "active" | "disabled";
-      };
-    } | null, Name>;
-    enterpriseGetByGroup: FunctionReference<"query", "internal", {
-      groupId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      config?: any;
-      extend?: any;
-      groupId: string;
-      name?: string;
-      policy?: {
-        extend?: any;
-        identity: {
-          accountLinking: {
-            oidc: "verifiedEmail" | "none";
-            saml: "verifiedEmail" | "none";
-          };
-        };
-        provisioning: {
-          deprovision: {
-            mode: "soft" | "hard";
-          };
-          jit: {
-            defaultRole?: string;
-            defaultRoleIds?: Array<string>;
-            mode: "off" | "createUser" | "createUserAndMembership";
-          };
-          scimReuse: {
-            user: "externalId" | "none";
-          };
-        };
-        version: 1;
-      };
-      slug?: string;
-      status: "draft" | "active" | "disabled";
-    } | null, Name>;
-    enterpriseList: FunctionReference<"query", "internal", {
-      cursor?: string | null;
-      limit?: number;
-      order?: "asc" | "desc";
-      orderBy?: "_creationTime" | "name" | "slug" | "status";
-      where?: {
-        groupId?: string;
-        slug?: string;
-        status?: "draft" | "active" | "disabled";
-      };
-    }, {
-      items: Array<{
-        _creationTime: number;
-        _id: string;
-        config?: any;
-        extend?: any;
-        groupId: string;
-        name?: string;
-        policy?: {
-          extend?: any;
-          identity: {
-            accountLinking: {
-              oidc: "verifiedEmail" | "none";
-              saml: "verifiedEmail" | "none";
-            };
-          };
-          provisioning: {
-            deprovision: {
-              mode: "soft" | "hard";
-            };
-            jit: {
-              defaultRole?: string;
-              defaultRoleIds?: Array<string>;
-              mode: "off" | "createUser" | "createUserAndMembership";
-            };
-            scimReuse: {
-              user: "externalId" | "none";
-            };
-          };
-          version: 1;
-        };
-        slug?: string;
-        status: "draft" | "active" | "disabled";
-      }>;
-      nextCursor: string | null;
-    }, Name>;
-    enterpriseScimConfigGetByEnterprise: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      basePath: string;
-      enterpriseId: string;
-      extend?: any;
-      groupId: string;
-      lastRotatedAt?: number;
-      status: "draft" | "active" | "disabled";
-      tokenHash: string;
-    } | null, Name>;
-    enterpriseScimConfigGetByTokenHash: FunctionReference<"query", "internal", {
-      tokenHash: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      basePath: string;
-      enterpriseId: string;
-      extend?: any;
-      groupId: string;
-      lastRotatedAt?: number;
-      status: "draft" | "active" | "disabled";
-      tokenHash: string;
-    } | null, Name>;
-    enterpriseScimConfigUpsert: FunctionReference<"mutation", "internal", {
-      basePath: string;
-      enterpriseId: string;
-      extend?: any;
-      groupId: string;
-      lastRotatedAt?: number;
-      status: "draft" | "active" | "disabled";
-      tokenHash: string;
-    }, string, Name>;
-    enterpriseScimIdentityDelete: FunctionReference<"mutation", "internal", {
-      identityId: string;
-    }, null, Name>;
-    enterpriseScimIdentityGet: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-      externalId: string;
-      resourceType: "user" | "group";
-    }, {
-      _creationTime: number;
-      _id: string;
-      active?: boolean;
-      enterpriseId: string;
-      externalId: string;
-      groupId: string;
-      lastProvisionedAt?: number;
-      mappedGroupId?: string;
-      raw?: any;
-      resourceType: "user" | "group";
-      userId?: string;
-    } | null, Name>;
-    enterpriseScimIdentityGetByEnterpriseAndUser: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-      userId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      active?: boolean;
-      enterpriseId: string;
-      externalId: string;
-      groupId: string;
-      lastProvisionedAt?: number;
-      mappedGroupId?: string;
-      raw?: any;
-      resourceType: "user" | "group";
-      userId?: string;
-    } | null, Name>;
-    enterpriseScimIdentityGetByMappedGroup: FunctionReference<"query", "internal", {
-      mappedGroupId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      active?: boolean;
-      enterpriseId: string;
-      externalId: string;
-      groupId: string;
-      lastProvisionedAt?: number;
-      mappedGroupId?: string;
-      raw?: any;
-      resourceType: "user" | "group";
-      userId?: string;
-    } | null, Name>;
-    enterpriseScimIdentityGetByUser: FunctionReference<"query", "internal", {
-      userId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      active?: boolean;
-      enterpriseId: string;
-      externalId: string;
-      groupId: string;
-      lastProvisionedAt?: number;
-      mappedGroupId?: string;
-      raw?: any;
-      resourceType: "user" | "group";
-      userId?: string;
-    } | null, Name>;
-    enterpriseScimIdentityListByEnterprise: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-    }, Array<{
-      _creationTime: number;
-      _id: string;
-      active?: boolean;
-      enterpriseId: string;
-      externalId: string;
-      groupId: string;
-      lastProvisionedAt?: number;
-      mappedGroupId?: string;
-      raw?: any;
-      resourceType: "user" | "group";
-      userId?: string;
-    }>, Name>;
-    enterpriseScimIdentityUpsert: FunctionReference<"mutation", "internal", {
-      active?: boolean;
-      enterpriseId: string;
-      externalId: string;
-      groupId: string;
-      lastProvisionedAt?: number;
-      mappedGroupId?: string;
-      raw?: any;
-      resourceType: "user" | "group";
-      userId?: string;
-    }, string, Name>;
-    enterpriseSecretDelete: FunctionReference<"mutation", "internal", {
-      enterpriseId: string;
-      kind: "oidc_client_secret";
-    }, null, Name>;
-    enterpriseSecretGet: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-      kind: "oidc_client_secret";
-    }, {
-      _creationTime: number;
-      _id: string;
-      ciphertext: string;
-      enterpriseId: string;
-      groupId: string;
-      kind: "oidc_client_secret";
-      updatedAt: number;
-    } | null, Name>;
-    enterpriseSecretUpsert: FunctionReference<"mutation", "internal", {
-      ciphertext: string;
-      enterpriseId: string;
-      groupId: string;
-      kind: "oidc_client_secret";
-      updatedAt: number;
-    }, string, Name>;
-    enterpriseUpdate: FunctionReference<"mutation", "internal", {
-      data: any;
-      enterpriseId: string;
-    }, null, Name>;
-    enterpriseWebhookDeliveryEnqueue: FunctionReference<"mutation", "internal", {
-      auditEventId?: string;
-      endpointId: string;
-      enterpriseId: string;
-      eventType: string;
-      nextAttemptAt: number;
-      payload: any;
-    }, string, Name>;
-    enterpriseWebhookDeliveryList: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-      limit?: number;
-    }, Array<{
-      _creationTime: number;
-      _id: string;
-      attemptCount: number;
-      auditEventId?: string;
-      endpointId: string;
-      enterpriseId: string;
-      eventType: string;
-      lastAttemptAt?: number;
-      lastError?: string;
-      lastResponseStatus?: number;
-      nextAttemptAt: number;
-      payload: any;
-      status: "pending" | "processing" | "delivered" | "failed";
-    }>, Name>;
-    enterpriseWebhookDeliveryListReady: FunctionReference<"query", "internal", {
-      limit?: number;
-      now: number;
-    }, Array<{
-      _creationTime: number;
-      _id: string;
-      attemptCount: number;
-      auditEventId?: string;
-      endpointId: string;
-      enterpriseId: string;
-      eventType: string;
-      lastAttemptAt?: number;
-      lastError?: string;
-      lastResponseStatus?: number;
-      nextAttemptAt: number;
-      payload: any;
-      status: "pending" | "processing" | "delivered" | "failed";
-    }>, Name>;
-    enterpriseWebhookDeliveryPatch: FunctionReference<"mutation", "internal", {
-      data: any;
-      deliveryId: string;
-    }, null, Name>;
-    enterpriseWebhookEndpointCreate: FunctionReference<"mutation", "internal", {
-      createdByUserId?: string;
-      enterpriseId: string;
-      extend?: any;
-      groupId: string;
-      secretHash: string;
-      status?: "active" | "disabled";
-      subscriptions: Array<string>;
-      url: string;
-    }, string, Name>;
-    enterpriseWebhookEndpointGet: FunctionReference<"query", "internal", {
-      endpointId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      createdByUserId?: string;
-      enterpriseId: string;
-      extend?: any;
-      failureCount: number;
-      groupId: string;
-      lastFailureAt?: number;
-      lastSuccessAt?: number;
-      secretHash: string;
-      status: "active" | "disabled";
-      subscriptions: Array<string>;
-      url: string;
-    } | null, Name>;
-    enterpriseWebhookEndpointList: FunctionReference<"query", "internal", {
-      enterpriseId: string;
-    }, Array<{
-      _creationTime: number;
-      _id: string;
-      createdByUserId?: string;
-      enterpriseId: string;
-      extend?: any;
-      failureCount: number;
-      groupId: string;
-      lastFailureAt?: number;
-      lastSuccessAt?: number;
-      secretHash: string;
-      status: "active" | "disabled";
-      subscriptions: Array<string>;
-      url: string;
-    }>, Name>;
-    enterpriseWebhookEndpointUpdate: FunctionReference<"mutation", "internal", {
-      data: any;
-      endpointId: string;
-    }, null, Name>;
-    factors: {
-      devices: {
-        deviceAuthorize: FunctionReference<"mutation", "internal", {
-          deviceId: string;
-          sessionId: string;
-          userId: string;
-        }, null, Name>;
-        deviceDelete: FunctionReference<"mutation", "internal", {
-          deviceId: string;
-        }, null, Name>;
-        deviceGetByCodeHash: FunctionReference<"query", "internal", {
-          deviceCodeHash: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          deviceCodeHash: string;
-          expiresAt: number;
-          interval: number;
-          lastPolledAt?: number;
-          sessionId?: string;
-          status: "pending" | "authorized" | "denied";
-          userCode: string;
-          userId?: string;
-        } | null, Name>;
-        deviceGetByUserCode: FunctionReference<"query", "internal", {
-          userCode: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          deviceCodeHash: string;
-          expiresAt: number;
-          interval: number;
-          lastPolledAt?: number;
-          sessionId?: string;
-          status: "pending" | "authorized" | "denied";
-          userCode: string;
-          userId?: string;
-        } | null, Name>;
-        deviceInsert: FunctionReference<"mutation", "internal", {
-          deviceCodeHash: string;
-          expiresAt: number;
-          interval: number;
-          status: "pending" | "authorized" | "denied";
-          userCode: string;
-        }, string, Name>;
-        deviceUpdateLastPolled: FunctionReference<"mutation", "internal", {
-          deviceId: string;
-          lastPolledAt: number;
-        }, null, Name>;
-      };
-      passkeys: {
-        passkeyDelete: FunctionReference<"mutation", "internal", {
-          passkeyId: string;
-        }, null, Name>;
-        passkeyGetByCredentialId: FunctionReference<"query", "internal", {
-          credentialId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          algorithm: number;
-          backedUp: boolean;
-          counter: number;
-          createdAt: number;
-          credentialId: string;
-          deviceType: string;
-          lastUsedAt?: number;
-          name?: string;
-          publicKey: ArrayBuffer;
-          transports?: Array<string>;
-          userId: string;
-        } | null, Name>;
-        passkeyInsert: FunctionReference<"mutation", "internal", {
-          algorithm: number;
-          backedUp: boolean;
-          counter: number;
-          createdAt: number;
-          credentialId: string;
-          deviceType: string;
-          name?: string;
-          publicKey: ArrayBuffer;
-          transports?: Array<string>;
-          userId: string;
-        }, string, Name>;
-        passkeyListByUserId: FunctionReference<"query", "internal", {
-          userId: string;
-        }, Array<{
-          _creationTime: number;
-          _id: string;
-          algorithm: number;
-          backedUp: boolean;
-          counter: number;
-          createdAt: number;
-          credentialId: string;
-          deviceType: string;
-          lastUsedAt?: number;
-          name?: string;
-          publicKey: ArrayBuffer;
-          transports?: Array<string>;
-          userId: string;
-        }>, Name>;
-        passkeyUpdateCounter: FunctionReference<"mutation", "internal", {
-          counter: number;
-          lastUsedAt: number;
-          passkeyId: string;
-        }, null, Name>;
-        passkeyUpdateMeta: FunctionReference<"mutation", "internal", {
-          data: any;
-          passkeyId: string;
-        }, null, Name>;
-      };
-      totp: {
-        totpDelete: FunctionReference<"mutation", "internal", {
-          totpId: string;
-        }, null, Name>;
-        totpGetById: FunctionReference<"query", "internal", {
-          totpId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          createdAt: number;
-          digits: number;
-          lastUsedAt?: number;
-          name?: string;
-          period: number;
-          secret: ArrayBuffer;
-          userId: string;
-          verified: boolean;
-        } | null, Name>;
-        totpGetVerifiedByUserId: FunctionReference<"query", "internal", {
-          userId: string;
-        }, {
-          _creationTime: number;
-          _id: string;
-          createdAt: number;
-          digits: number;
-          lastUsedAt?: number;
+          createdAt: number;
+          digits: number;
+          lastUsedAt?: number;
           name?: string;
           period: number;
           secret: ArrayBuffer;
@@ -1386,6 +290,328 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
         }, null, Name>;
       };
     };
+    groupAuditEventCreate: FunctionReference<"mutation", "internal", {
+      actorId?: string;
+      actorType: "user" | "system" | "scim" | "api_key" | "webhook";
+      connectionId?: string;
+      eventType: string;
+      groupId: string;
+      ip?: string;
+      metadata?: any;
+      occurredAt: number;
+      requestId?: string;
+      status: "success" | "failure";
+      subjectId?: string;
+      subjectType: string;
+    }, string, Name>;
+    groupAuditEventList: FunctionReference<"query", "internal", {
+      connectionId?: string;
+      groupId?: string;
+      limit?: number;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      actorId?: string;
+      actorType: "user" | "system" | "scim" | "api_key" | "webhook";
+      connectionId?: string;
+      eventType: string;
+      groupId: string;
+      ip?: string;
+      metadata?: any;
+      occurredAt: number;
+      requestId?: string;
+      status: "success" | "failure";
+      subjectId?: string;
+      subjectType: string;
+    }>, Name>;
+    groupConnectionCreate: FunctionReference<"mutation", "internal", {
+      config?: any;
+      extend?: any;
+      groupId: string;
+      name?: string;
+      protocol: "oidc" | "saml";
+      slug?: string;
+      status?: "draft" | "active" | "disabled";
+    }, string, Name>;
+    groupConnectionDelete: FunctionReference<"mutation", "internal", {
+      connectionId: string;
+    }, null, Name>;
+    groupConnectionDomainAdd: FunctionReference<"mutation", "internal", {
+      connectionId: string;
+      domain: string;
+      groupId: string;
+      isPrimary?: boolean;
+    }, string, Name>;
+    groupConnectionDomainDelete: FunctionReference<"mutation", "internal", {
+      domainId: string;
+    }, null, Name>;
+    groupConnectionDomainList: FunctionReference<"query", "internal", {
+      connectionId: string;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      connectionId: string;
+      domain: string;
+      groupId: string;
+      isPrimary: boolean;
+      verifiedAt?: number;
+    }>, Name>;
+    groupConnectionDomainVerificationDelete: FunctionReference<"mutation", "internal", {
+      domainId: string;
+    }, null, Name>;
+    groupConnectionDomainVerificationGet: FunctionReference<"query", "internal", {
+      domainId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      connectionId: string;
+      domain: string;
+      domainId: string;
+      expiresAt: number;
+      groupId: string;
+      recordName: string;
+      requestedAt: number;
+      token: string;
+      tokenHash: string;
+    } | null, Name>;
+    groupConnectionDomainVerificationUpsert: FunctionReference<"mutation", "internal", {
+      connectionId: string;
+      domain: string;
+      domainId: string;
+      expiresAt: number;
+      groupId: string;
+      recordName: string;
+      requestedAt: number;
+      token: string;
+      tokenHash: string;
+    }, string, Name>;
+    groupConnectionDomainVerify: FunctionReference<"mutation", "internal", {
+      domainId: string;
+      verifiedAt: number;
+    }, {
+      _creationTime: number;
+      _id: string;
+      connectionId: string;
+      domain: string;
+      groupId: string;
+      isPrimary: boolean;
+      verifiedAt?: number;
+    }, Name>;
+    groupConnectionGet: FunctionReference<"query", "internal", {
+      connectionId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      config?: any;
+      extend?: any;
+      groupId: string;
+      name?: string;
+      protocol: "oidc" | "saml";
+      slug?: string;
+      status: "draft" | "active" | "disabled";
+    } | null, Name>;
+    groupConnectionGetByDomain: FunctionReference<"query", "internal", {
+      domain: string;
+    }, {
+      connection: {
+        _creationTime: number;
+        _id: string;
+        config?: any;
+        extend?: any;
+        groupId: string;
+        name?: string;
+        protocol: "oidc" | "saml";
+        slug?: string;
+        status: "draft" | "active" | "disabled";
+      };
+      domain: {
+        _creationTime: number;
+        _id: string;
+        connectionId: string;
+        domain: string;
+        groupId: string;
+        isPrimary: boolean;
+        verifiedAt?: number;
+      };
+    } | null, Name>;
+    groupConnectionList: FunctionReference<"query", "internal", {
+      cursor?: string | null;
+      limit?: number;
+      order?: "asc" | "desc";
+      orderBy?: "_creationTime" | "name" | "slug" | "status";
+      where?: {
+        groupId?: string;
+        slug?: string;
+        status?: "draft" | "active" | "disabled";
+      };
+    }, {
+      items: Array<{
+        _creationTime: number;
+        _id: string;
+        config?: any;
+        extend?: any;
+        groupId: string;
+        name?: string;
+        protocol: "oidc" | "saml";
+        slug?: string;
+        status: "draft" | "active" | "disabled";
+      }>;
+      nextCursor: string | null;
+    }, Name>;
+    groupConnectionScimConfigGetByGroupConnection: FunctionReference<"query", "internal", {
+      connectionId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      basePath: string;
+      connectionId: string;
+      extend?: any;
+      groupId: string;
+      lastRotatedAt?: number;
+      status: "draft" | "active" | "disabled";
+      tokenHash: string;
+    } | null, Name>;
+    groupConnectionScimConfigGetByTokenHash: FunctionReference<"query", "internal", {
+      tokenHash: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      basePath: string;
+      connectionId: string;
+      extend?: any;
+      groupId: string;
+      lastRotatedAt?: number;
+      status: "draft" | "active" | "disabled";
+      tokenHash: string;
+    } | null, Name>;
+    groupConnectionScimConfigUpsert: FunctionReference<"mutation", "internal", {
+      basePath: string;
+      connectionId: string;
+      extend?: any;
+      groupId: string;
+      lastRotatedAt?: number;
+      status: "draft" | "active" | "disabled";
+      tokenHash: string;
+    }, string, Name>;
+    groupConnectionScimIdentityDelete: FunctionReference<"mutation", "internal", {
+      identityId: string;
+    }, null, Name>;
+    groupConnectionScimIdentityGet: FunctionReference<"query", "internal", {
+      connectionId: string;
+      externalId: string;
+      resourceType: "user" | "group";
+    }, {
+      _creationTime: number;
+      _id: string;
+      active?: boolean;
+      connectionId: string;
+      externalId: string;
+      groupId: string;
+      lastProvisionedAt?: number;
+      mappedGroupId?: string;
+      raw?: any;
+      resourceType: "user" | "group";
+      userId?: string;
+    } | null, Name>;
+    groupConnectionScimIdentityGetByGroupConnectionAndUser: FunctionReference<"query", "internal", {
+      connectionId: string;
+      userId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      active?: boolean;
+      connectionId: string;
+      externalId: string;
+      groupId: string;
+      lastProvisionedAt?: number;
+      mappedGroupId?: string;
+      raw?: any;
+      resourceType: "user" | "group";
+      userId?: string;
+    } | null, Name>;
+    groupConnectionScimIdentityGetByMappedGroup: FunctionReference<"query", "internal", {
+      mappedGroupId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      active?: boolean;
+      connectionId: string;
+      externalId: string;
+      groupId: string;
+      lastProvisionedAt?: number;
+      mappedGroupId?: string;
+      raw?: any;
+      resourceType: "user" | "group";
+      userId?: string;
+    } | null, Name>;
+    groupConnectionScimIdentityGetByUser: FunctionReference<"query", "internal", {
+      userId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      active?: boolean;
+      connectionId: string;
+      externalId: string;
+      groupId: string;
+      lastProvisionedAt?: number;
+      mappedGroupId?: string;
+      raw?: any;
+      resourceType: "user" | "group";
+      userId?: string;
+    } | null, Name>;
+    groupConnectionScimIdentityListByGroupConnection: FunctionReference<"query", "internal", {
+      connectionId: string;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      active?: boolean;
+      connectionId: string;
+      externalId: string;
+      groupId: string;
+      lastProvisionedAt?: number;
+      mappedGroupId?: string;
+      raw?: any;
+      resourceType: "user" | "group";
+      userId?: string;
+    }>, Name>;
+    groupConnectionScimIdentityUpsert: FunctionReference<"mutation", "internal", {
+      active?: boolean;
+      connectionId: string;
+      externalId: string;
+      groupId: string;
+      lastProvisionedAt?: number;
+      mappedGroupId?: string;
+      raw?: any;
+      resourceType: "user" | "group";
+      userId?: string;
+    }, string, Name>;
+    groupConnectionSecretDelete: FunctionReference<"mutation", "internal", {
+      connectionId: string;
+      kind: "oidc_client_secret";
+    }, null, Name>;
+    groupConnectionSecretGet: FunctionReference<"query", "internal", {
+      connectionId: string;
+      kind: "oidc_client_secret";
+    }, {
+      _creationTime: number;
+      _id: string;
+      ciphertext: string;
+      connectionId: string;
+      groupId: string;
+      kind: "oidc_client_secret";
+      updatedAt: number;
+    } | null, Name>;
+    groupConnectionSecretUpsert: FunctionReference<"mutation", "internal", {
+      ciphertext: string;
+      connectionId: string;
+      groupId: string;
+      kind: "oidc_client_secret";
+      updatedAt: number;
+    }, string, Name>;
+    groupConnectionUpdate: FunctionReference<"mutation", "internal", {
+      connectionId: string;
+      data: any;
+    }, null, Name>;
     groupCreate: FunctionReference<"mutation", "internal", {
       extend?: any;
       name: string;
@@ -1409,6 +635,45 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       isRoot?: boolean;
       name: string;
       parentGroupId?: string;
+      policy?: {
+        extend?: any;
+        identity: {
+          accountLinking: {
+            oidc: "verifiedEmail" | "none";
+            saml: "verifiedEmail" | "none";
+          };
+        };
+        provisioning: {
+          deprovision: {
+            mode: "soft" | "hard";
+          };
+          groups: {
+            mapping?: Record<string, Array<string>>;
+            mode: "ignore" | "sync";
+            source: "protocol";
+          };
+          jit: {
+            defaultRole?: string;
+            defaultRoleIds?: Array<string>;
+            mode: "off" | "createUser" | "createUserAndMembership";
+          };
+          roles: {
+            mapping?: Record<string, Array<string>>;
+            mode: "ignore" | "map";
+            source: "protocol";
+          };
+          scimReuse: {
+            user: "externalId" | "none";
+          };
+          user: {
+            authority: "app" | "sso" | "scim";
+            createOnSignIn: boolean;
+            updateProfileFromScim: "never" | "missing" | "always";
+            updateProfileOnLogin: "never" | "missing" | "always";
+          };
+        };
+        version: 1;
+      };
       rootGroupId?: string;
       slug?: string;
       tags?: Array<{
@@ -1445,6 +710,45 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
         isRoot?: boolean;
         name: string;
         parentGroupId?: string;
+        policy?: {
+          extend?: any;
+          identity: {
+            accountLinking: {
+              oidc: "verifiedEmail" | "none";
+              saml: "verifiedEmail" | "none";
+            };
+          };
+          provisioning: {
+            deprovision: {
+              mode: "soft" | "hard";
+            };
+            groups: {
+              mapping?: Record<string, Array<string>>;
+              mode: "ignore" | "sync";
+              source: "protocol";
+            };
+            jit: {
+              defaultRole?: string;
+              defaultRoleIds?: Array<string>;
+              mode: "off" | "createUser" | "createUserAndMembership";
+            };
+            roles: {
+              mapping?: Record<string, Array<string>>;
+              mode: "ignore" | "map";
+              source: "protocol";
+            };
+            scimReuse: {
+              user: "externalId" | "none";
+            };
+            user: {
+              authority: "app" | "sso" | "scim";
+              createOnSignIn: boolean;
+              updateProfileFromScim: "never" | "missing" | "always";
+              updateProfileOnLogin: "never" | "missing" | "always";
+            };
+          };
+          version: 1;
+        };
         rootGroupId?: string;
         slug?: string;
         tags?: Array<{
@@ -1480,6 +784,45 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           isRoot?: boolean;
           name: string;
           parentGroupId?: string;
+          policy?: {
+            extend?: any;
+            identity: {
+              accountLinking: {
+                oidc: "verifiedEmail" | "none";
+                saml: "verifiedEmail" | "none";
+              };
+            };
+            provisioning: {
+              deprovision: {
+                mode: "soft" | "hard";
+              };
+              groups: {
+                mapping?: Record<string, Array<string>>;
+                mode: "ignore" | "sync";
+                source: "protocol";
+              };
+              jit: {
+                defaultRole?: string;
+                defaultRoleIds?: Array<string>;
+                mode: "off" | "createUser" | "createUserAndMembership";
+              };
+              roles: {
+                mapping?: Record<string, Array<string>>;
+                mode: "ignore" | "map";
+                source: "protocol";
+              };
+              scimReuse: {
+                user: "externalId" | "none";
+              };
+              user: {
+                authority: "app" | "sso" | "scim";
+                createOnSignIn: boolean;
+                updateProfileFromScim: "never" | "missing" | "always";
+                updateProfileOnLogin: "never" | "missing" | "always";
+              };
+            };
+            version: 1;
+          };
           rootGroupId?: string;
           slug?: string;
           tags?: Array<{
@@ -1516,6 +859,45 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
             isRoot?: boolean;
             name: string;
             parentGroupId?: string;
+            policy?: {
+              extend?: any;
+              identity: {
+                accountLinking: {
+                  oidc: "verifiedEmail" | "none";
+                  saml: "verifiedEmail" | "none";
+                };
+              };
+              provisioning: {
+                deprovision: {
+                  mode: "soft" | "hard";
+                };
+                groups: {
+                  mapping?: Record<string, Array<string>>;
+                  mode: "ignore" | "sync";
+                  source: "protocol";
+                };
+                jit: {
+                  defaultRole?: string;
+                  defaultRoleIds?: Array<string>;
+                  mode: "off" | "createUser" | "createUserAndMembership";
+                };
+                roles: {
+                  mapping?: Record<string, Array<string>>;
+                  mode: "ignore" | "map";
+                  source: "protocol";
+                };
+                scimReuse: {
+                  user: "externalId" | "none";
+                };
+                user: {
+                  authority: "app" | "sso" | "scim";
+                  createOnSignIn: boolean;
+                  updateProfileFromScim: "never" | "missing" | "always";
+                  updateProfileOnLogin: "never" | "missing" | "always";
+                };
+              };
+              version: 1;
+            };
             rootGroupId?: string;
             slug?: string;
             tags?: Array<{
@@ -1718,6 +1100,102 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       data: any;
       groupId: string;
     }, null, Name>;
+    groupWebhookDeliveryEnqueue: FunctionReference<"mutation", "internal", {
+      auditEventId?: string;
+      connectionId: string;
+      endpointId: string;
+      eventType: string;
+      nextAttemptAt: number;
+      payload: any;
+    }, string, Name>;
+    groupWebhookDeliveryList: FunctionReference<"query", "internal", {
+      connectionId: string;
+      limit?: number;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      attemptCount: number;
+      auditEventId?: string;
+      connectionId: string;
+      endpointId: string;
+      eventType: string;
+      lastAttemptAt?: number;
+      lastError?: string;
+      lastResponseStatus?: number;
+      nextAttemptAt: number;
+      payload: any;
+      status: "pending" | "processing" | "delivered" | "failed";
+    }>, Name>;
+    groupWebhookDeliveryListReady: FunctionReference<"query", "internal", {
+      limit?: number;
+      now: number;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      attemptCount: number;
+      auditEventId?: string;
+      connectionId: string;
+      endpointId: string;
+      eventType: string;
+      lastAttemptAt?: number;
+      lastError?: string;
+      lastResponseStatus?: number;
+      nextAttemptAt: number;
+      payload: any;
+      status: "pending" | "processing" | "delivered" | "failed";
+    }>, Name>;
+    groupWebhookDeliveryPatch: FunctionReference<"mutation", "internal", {
+      data: any;
+      deliveryId: string;
+    }, null, Name>;
+    groupWebhookEndpointCreate: FunctionReference<"mutation", "internal", {
+      connectionId: string;
+      createdByUserId?: string;
+      extend?: any;
+      groupId: string;
+      secretHash: string;
+      status?: "active" | "disabled";
+      subscriptions: Array<string>;
+      url: string;
+    }, string, Name>;
+    groupWebhookEndpointGet: FunctionReference<"query", "internal", {
+      endpointId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      connectionId: string;
+      createdByUserId?: string;
+      extend?: any;
+      failureCount: number;
+      groupId: string;
+      lastFailureAt?: number;
+      lastSuccessAt?: number;
+      secretHash: string;
+      status: "active" | "disabled";
+      subscriptions: Array<string>;
+      url: string;
+    } | null, Name>;
+    groupWebhookEndpointList: FunctionReference<"query", "internal", {
+      connectionId: string;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      connectionId: string;
+      createdByUserId?: string;
+      extend?: any;
+      failureCount: number;
+      groupId: string;
+      lastFailureAt?: number;
+      lastSuccessAt?: number;
+      secretHash: string;
+      status: "active" | "disabled";
+      subscriptions: Array<string>;
+      url: string;
+    }>, Name>;
+    groupWebhookEndpointUpdate: FunctionReference<"mutation", "internal", {
+      data: any;
+      endpointId: string;
+    }, null, Name>;
     identity: {
       accounts: {
         accountDelete: FunctionReference<"mutation", "internal", {
@@ -1831,6 +1309,17 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           expirationTime: number;
           userId: string;
         } | null, Name>;
+        sessionIssue: FunctionReference<"mutation", "internal", {
+          refreshTokenExpirationTime?: number;
+          replaceSessionId?: string;
+          sessionExpirationTime: number;
+          sessionId?: string;
+          userId: string;
+        }, {
+          refreshTokenId?: string;
+          sessionId: string;
+          userId: string;
+        }, Name>;
         sessionList: FunctionReference<"query", "internal", {
           cursor?: string | null;
           limit?: number;
@@ -1865,6 +1354,17 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
         refreshTokenDeleteAll: FunctionReference<"mutation", "internal", {
           sessionId: string;
         }, null, Name>;
+        refreshTokenExchange: FunctionReference<"mutation", "internal", {
+          now: number;
+          refreshTokenExpirationTime: number;
+          refreshTokenId: string;
+          reuseWindowMs: number;
+          sessionId: string;
+        }, {
+          refreshTokenId: string;
+          sessionId: string;
+          userId: string;
+        } | null, Name>;
         refreshTokenGetActive: FunctionReference<"query", "internal", {
           sessionId: string;
         }, {
@@ -1998,6 +1498,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       verifiers: {
         verifierCreate: FunctionReference<"mutation", "internal", {
           sessionId?: string;
+          signature?: string;
         }, string, Name>;
         verifierDelete: FunctionReference<"mutation", "internal", {
           verifierId: string;
@@ -2423,6 +1924,17 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
     refreshTokenDeleteAll: FunctionReference<"mutation", "internal", {
       sessionId: string;
     }, null, Name>;
+    refreshTokenExchange: FunctionReference<"mutation", "internal", {
+      now: number;
+      refreshTokenExpirationTime: number;
+      refreshTokenId: string;
+      reuseWindowMs: number;
+      sessionId: string;
+    }, {
+      refreshTokenId: string;
+      sessionId: string;
+      userId: string;
+    } | null, Name>;
     refreshTokenGetActive: FunctionReference<"query", "internal", {
       sessionId: string;
     }, {
@@ -2460,214 +1972,657 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       _creationTime: number;
       _id: string;
       expirationTime: number;
-      firstUsedTime?: number;
-      parentRefreshTokenId?: string;
-      sessionId: string;
+      firstUsedTime?: number;
+      parentRefreshTokenId?: string;
+      sessionId: string;
+    }>, Name>;
+    refreshTokenPatch: FunctionReference<"mutation", "internal", {
+      data: any;
+      refreshTokenId: string;
+    }, null, Name>;
+    security: {
+      keys: {
+        keyDelete: FunctionReference<"mutation", "internal", {
+          keyId: string;
+        }, null, Name>;
+        keyGetByHashedKey: FunctionReference<"query", "internal", {
+          hashedKey: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          createdAt: number;
+          expiresAt?: number;
+          hashedKey: string;
+          lastUsedAt?: number;
+          metadata?: any;
+          name: string;
+          prefix: string;
+          rateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+          };
+          rateLimitState?: {
+            attemptsLeft: number;
+            lastAttemptTime: number;
+          };
+          revoked: boolean;
+          scopes: Array<{
+            actions: Array<string>;
+            resource: string;
+          }>;
+          userId: string;
+        } | null, Name>;
+        keyGetById: FunctionReference<"query", "internal", {
+          keyId: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          createdAt: number;
+          expiresAt?: number;
+          hashedKey: string;
+          lastUsedAt?: number;
+          metadata?: any;
+          name: string;
+          prefix: string;
+          rateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+          };
+          rateLimitState?: {
+            attemptsLeft: number;
+            lastAttemptTime: number;
+          };
+          revoked: boolean;
+          scopes: Array<{
+            actions: Array<string>;
+            resource: string;
+          }>;
+          userId: string;
+        } | null, Name>;
+        keyInsert: FunctionReference<"mutation", "internal", {
+          expiresAt?: number;
+          hashedKey: string;
+          metadata?: any;
+          name: string;
+          prefix: string;
+          rateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+          };
+          scopes: Array<{
+            actions: Array<string>;
+            resource: string;
+          }>;
+          userId: string;
+        }, string, Name>;
+        keyList: FunctionReference<"query", "internal", {
+          cursor?: string | null;
+          limit?: number;
+          order?: "asc" | "desc";
+          orderBy?: "_creationTime" | "name" | "lastUsedAt" | "expiresAt" | "revoked";
+          where?: {
+            name?: string;
+            prefix?: string;
+            revoked?: boolean;
+            userId?: string;
+          };
+        }, {
+          items: Array<{
+            _creationTime: number;
+            _id: string;
+            createdAt: number;
+            expiresAt?: number;
+            hashedKey: string;
+            lastUsedAt?: number;
+            metadata?: any;
+            name: string;
+            prefix: string;
+            rateLimit?: {
+              maxRequests: number;
+              windowMs: number;
+            };
+            rateLimitState?: {
+              attemptsLeft: number;
+              lastAttemptTime: number;
+            };
+            revoked: boolean;
+            scopes: Array<{
+              actions: Array<string>;
+              resource: string;
+            }>;
+            userId: string;
+          }>;
+          nextCursor: string | null;
+        }, Name>;
+        keyPatch: FunctionReference<"mutation", "internal", {
+          data: {
+            lastUsedAt?: number;
+            name?: string;
+            rateLimit?: {
+              maxRequests: number;
+              windowMs: number;
+            };
+            rateLimitState?: {
+              attemptsLeft: number;
+              lastAttemptTime: number;
+            };
+            revoked?: boolean;
+            scopes?: Array<{
+              actions: Array<string>;
+              resource: string;
+            }>;
+          };
+          keyId: string;
+        }, null, Name>;
+      };
+      limits: {
+        rateLimitCreate: FunctionReference<"mutation", "internal", {
+          attemptsLeft: number;
+          identifier: string;
+          lastAttemptTime: number;
+        }, string, Name>;
+        rateLimitDelete: FunctionReference<"mutation", "internal", {
+          rateLimitId: string;
+        }, null, Name>;
+        rateLimitGet: FunctionReference<"query", "internal", {
+          identifier: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          attemptsLeft: number;
+          attempts_left: number;
+          identifier: string;
+          lastAttemptTime: number;
+          last_attempt_time: number;
+        } | null, Name>;
+        rateLimitPatch: FunctionReference<"mutation", "internal", {
+          data: any;
+          rateLimitId: string;
+        }, null, Name>;
+      };
+    };
+    sessionCreate: FunctionReference<"mutation", "internal", {
+      expirationTime: number;
+      userId: string;
+    }, string, Name>;
+    sessionDelete: FunctionReference<"mutation", "internal", {
+      sessionId: string;
+    }, null, Name>;
+    sessionGetById: FunctionReference<"query", "internal", {
+      sessionId: string;
+    }, {
+      _creationTime: number;
+      _id: string;
+      expirationTime: number;
+      userId: string;
+    } | null, Name>;
+    sessionIssue: FunctionReference<"mutation", "internal", {
+      refreshTokenExpirationTime?: number;
+      replaceSessionId?: string;
+      sessionExpirationTime: number;
+      sessionId?: string;
+      userId: string;
+    }, {
+      refreshTokenId?: string;
+      sessionId: string;
+      userId: string;
+    }, Name>;
+    sessionList: FunctionReference<"query", "internal", {
+      cursor?: string | null;
+      limit?: number;
+      order?: "asc" | "desc";
+      where?: {
+        userId?: string;
+      };
+    }, {
+      items: Array<{
+        _creationTime: number;
+        _id: string;
+        expirationTime: number;
+        userId: string;
+      }>;
+      nextCursor: string | null;
+    }, Name>;
+    sessionListByUser: FunctionReference<"query", "internal", {
+      userId: string;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      expirationTime: number;
+      userId: string;
     }>, Name>;
-    refreshTokenPatch: FunctionReference<"mutation", "internal", {
-      data: any;
-      refreshTokenId: string;
-    }, null, Name>;
-    security: {
-      keys: {
-        keyDelete: FunctionReference<"mutation", "internal", {
-          keyId: string;
+    sso: {
+      audit: {
+        groupAuditEventCreate: FunctionReference<"mutation", "internal", {
+          actorId?: string;
+          actorType: "user" | "system" | "scim" | "api_key" | "webhook";
+          connectionId?: string;
+          eventType: string;
+          groupId: string;
+          ip?: string;
+          metadata?: any;
+          occurredAt: number;
+          requestId?: string;
+          status: "success" | "failure";
+          subjectId?: string;
+          subjectType: string;
+        }, string, Name>;
+        groupAuditEventList: FunctionReference<"query", "internal", {
+          connectionId?: string;
+          groupId?: string;
+          limit?: number;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          actorId?: string;
+          actorType: "user" | "system" | "scim" | "api_key" | "webhook";
+          connectionId?: string;
+          eventType: string;
+          groupId: string;
+          ip?: string;
+          metadata?: any;
+          occurredAt: number;
+          requestId?: string;
+          status: "success" | "failure";
+          subjectId?: string;
+          subjectType: string;
+        }>, Name>;
+      };
+      core: {
+        groupConnectionCreate: FunctionReference<"mutation", "internal", {
+          config?: any;
+          extend?: any;
+          groupId: string;
+          name?: string;
+          protocol: "oidc" | "saml";
+          slug?: string;
+          status?: "draft" | "active" | "disabled";
+        }, string, Name>;
+        groupConnectionDelete: FunctionReference<"mutation", "internal", {
+          connectionId: string;
         }, null, Name>;
-        keyGetByHashedKey: FunctionReference<"query", "internal", {
-          hashedKey: string;
+        groupConnectionGet: FunctionReference<"query", "internal", {
+          connectionId: string;
         }, {
           _creationTime: number;
           _id: string;
-          createdAt: number;
-          expiresAt?: number;
-          hashedKey: string;
-          lastUsedAt?: number;
-          metadata?: any;
-          name: string;
-          prefix: string;
-          rateLimit?: {
-            maxRequests: number;
-            windowMs: number;
+          config?: any;
+          extend?: any;
+          groupId: string;
+          name?: string;
+          protocol: "oidc" | "saml";
+          slug?: string;
+          status: "draft" | "active" | "disabled";
+        } | null, Name>;
+        groupConnectionGetByDomain: FunctionReference<"query", "internal", {
+          domain: string;
+        }, {
+          connection: {
+            _creationTime: number;
+            _id: string;
+            config?: any;
+            extend?: any;
+            groupId: string;
+            name?: string;
+            protocol: "oidc" | "saml";
+            slug?: string;
+            status: "draft" | "active" | "disabled";
           };
-          rateLimitState?: {
-            attemptsLeft: number;
-            lastAttemptTime: number;
+          domain: {
+            _creationTime: number;
+            _id: string;
+            connectionId: string;
+            domain: string;
+            groupId: string;
+            isPrimary: boolean;
+            verifiedAt?: number;
           };
-          revoked: boolean;
-          scopes: Array<{
-            actions: Array<string>;
-            resource: string;
+        } | null, Name>;
+        groupConnectionList: FunctionReference<"query", "internal", {
+          cursor?: string | null;
+          limit?: number;
+          order?: "asc" | "desc";
+          orderBy?: "_creationTime" | "name" | "slug" | "status";
+          where?: {
+            groupId?: string;
+            slug?: string;
+            status?: "draft" | "active" | "disabled";
+          };
+        }, {
+          items: Array<{
+            _creationTime: number;
+            _id: string;
+            config?: any;
+            extend?: any;
+            groupId: string;
+            name?: string;
+            protocol: "oidc" | "saml";
+            slug?: string;
+            status: "draft" | "active" | "disabled";
           }>;
+          nextCursor: string | null;
+        }, Name>;
+        groupConnectionUpdate: FunctionReference<"mutation", "internal", {
+          connectionId: string;
+          data: any;
+        }, null, Name>;
+      };
+      domains: {
+        groupConnectionDomainAdd: FunctionReference<"mutation", "internal", {
+          connectionId: string;
+          domain: string;
+          groupId: string;
+          isPrimary?: boolean;
+        }, string, Name>;
+        groupConnectionDomainDelete: FunctionReference<"mutation", "internal", {
+          domainId: string;
+        }, null, Name>;
+        groupConnectionDomainList: FunctionReference<"query", "internal", {
+          connectionId: string;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          connectionId: string;
+          domain: string;
+          groupId: string;
+          isPrimary: boolean;
+          verifiedAt?: number;
+        }>, Name>;
+        groupConnectionDomainVerificationDelete: FunctionReference<"mutation", "internal", {
+          domainId: string;
+        }, null, Name>;
+        groupConnectionDomainVerificationGet: FunctionReference<"query", "internal", {
+          domainId: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          connectionId: string;
+          domain: string;
+          domainId: string;
+          expiresAt: number;
+          groupId: string;
+          recordName: string;
+          requestedAt: number;
+          token: string;
+          tokenHash: string;
+        } | null, Name>;
+        groupConnectionDomainVerificationUpsert: FunctionReference<"mutation", "internal", {
+          connectionId: string;
+          domain: string;
+          domainId: string;
+          expiresAt: number;
+          groupId: string;
+          recordName: string;
+          requestedAt: number;
+          token: string;
+          tokenHash: string;
+        }, string, Name>;
+        groupConnectionDomainVerify: FunctionReference<"mutation", "internal", {
+          domainId: string;
+          verifiedAt: number;
+        }, {
+          _creationTime: number;
+          _id: string;
+          connectionId: string;
+          domain: string;
+          groupId: string;
+          isPrimary: boolean;
+          verifiedAt?: number;
+        }, Name>;
+      };
+      scim: {
+        groupConnectionScimConfigGetByGroupConnection: FunctionReference<"query", "internal", {
+          connectionId: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          basePath: string;
+          connectionId: string;
+          extend?: any;
+          groupId: string;
+          lastRotatedAt?: number;
+          status: "draft" | "active" | "disabled";
+          tokenHash: string;
+        } | null, Name>;
+        groupConnectionScimConfigGetByTokenHash: FunctionReference<"query", "internal", {
+          tokenHash: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          basePath: string;
+          connectionId: string;
+          extend?: any;
+          groupId: string;
+          lastRotatedAt?: number;
+          status: "draft" | "active" | "disabled";
+          tokenHash: string;
+        } | null, Name>;
+        groupConnectionScimConfigUpsert: FunctionReference<"mutation", "internal", {
+          basePath: string;
+          connectionId: string;
+          extend?: any;
+          groupId: string;
+          lastRotatedAt?: number;
+          status: "draft" | "active" | "disabled";
+          tokenHash: string;
+        }, string, Name>;
+        groupConnectionScimIdentityDelete: FunctionReference<"mutation", "internal", {
+          identityId: string;
+        }, null, Name>;
+        groupConnectionScimIdentityGet: FunctionReference<"query", "internal", {
+          connectionId: string;
+          externalId: string;
+          resourceType: "user" | "group";
+        }, {
+          _creationTime: number;
+          _id: string;
+          active?: boolean;
+          connectionId: string;
+          externalId: string;
+          groupId: string;
+          lastProvisionedAt?: number;
+          mappedGroupId?: string;
+          raw?: any;
+          resourceType: "user" | "group";
+          userId?: string;
+        } | null, Name>;
+        groupConnectionScimIdentityGetByGroupConnectionAndUser: FunctionReference<"query", "internal", {
+          connectionId: string;
+          userId: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          active?: boolean;
+          connectionId: string;
+          externalId: string;
+          groupId: string;
+          lastProvisionedAt?: number;
+          mappedGroupId?: string;
+          raw?: any;
+          resourceType: "user" | "group";
+          userId?: string;
+        } | null, Name>;
+        groupConnectionScimIdentityGetByMappedGroup: FunctionReference<"query", "internal", {
+          mappedGroupId: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          active?: boolean;
+          connectionId: string;
+          externalId: string;
+          groupId: string;
+          lastProvisionedAt?: number;
+          mappedGroupId?: string;
+          raw?: any;
+          resourceType: "user" | "group";
+          userId?: string;
+        } | null, Name>;
+        groupConnectionScimIdentityGetByUser: FunctionReference<"query", "internal", {
           userId: string;
+        }, {
+          _creationTime: number;
+          _id: string;
+          active?: boolean;
+          connectionId: string;
+          externalId: string;
+          groupId: string;
+          lastProvisionedAt?: number;
+          mappedGroupId?: string;
+          raw?: any;
+          resourceType: "user" | "group";
+          userId?: string;
         } | null, Name>;
-        keyGetById: FunctionReference<"query", "internal", {
-          keyId: string;
+        groupConnectionScimIdentityListByGroupConnection: FunctionReference<"query", "internal", {
+          connectionId: string;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          active?: boolean;
+          connectionId: string;
+          externalId: string;
+          groupId: string;
+          lastProvisionedAt?: number;
+          mappedGroupId?: string;
+          raw?: any;
+          resourceType: "user" | "group";
+          userId?: string;
+        }>, Name>;
+        groupConnectionScimIdentityUpsert: FunctionReference<"mutation", "internal", {
+          active?: boolean;
+          connectionId: string;
+          externalId: string;
+          groupId: string;
+          lastProvisionedAt?: number;
+          mappedGroupId?: string;
+          raw?: any;
+          resourceType: "user" | "group";
+          userId?: string;
+        }, string, Name>;
+      };
+      secrets: {
+        groupConnectionSecretDelete: FunctionReference<"mutation", "internal", {
+          connectionId: string;
+          kind: "oidc_client_secret";
+        }, null, Name>;
+        groupConnectionSecretGet: FunctionReference<"query", "internal", {
+          connectionId: string;
+          kind: "oidc_client_secret";
         }, {
           _creationTime: number;
           _id: string;
-          createdAt: number;
-          expiresAt?: number;
-          hashedKey: string;
-          lastUsedAt?: number;
-          metadata?: any;
-          name: string;
-          prefix: string;
-          rateLimit?: {
-            maxRequests: number;
-            windowMs: number;
-          };
-          rateLimitState?: {
-            attemptsLeft: number;
-            lastAttemptTime: number;
-          };
-          revoked: boolean;
-          scopes: Array<{
-            actions: Array<string>;
-            resource: string;
-          }>;
-          userId: string;
+          ciphertext: string;
+          connectionId: string;
+          groupId: string;
+          kind: "oidc_client_secret";
+          updatedAt: number;
         } | null, Name>;
-        keyInsert: FunctionReference<"mutation", "internal", {
-          expiresAt?: number;
-          hashedKey: string;
-          metadata?: any;
-          name: string;
-          prefix: string;
-          rateLimit?: {
-            maxRequests: number;
-            windowMs: number;
-          };
-          scopes: Array<{
-            actions: Array<string>;
-            resource: string;
-          }>;
-          userId: string;
+        groupConnectionSecretUpsert: FunctionReference<"mutation", "internal", {
+          ciphertext: string;
+          connectionId: string;
+          groupId: string;
+          kind: "oidc_client_secret";
+          updatedAt: number;
         }, string, Name>;
-        keyList: FunctionReference<"query", "internal", {
-          cursor?: string | null;
-          limit?: number;
-          order?: "asc" | "desc";
-          orderBy?: "_creationTime" | "name" | "lastUsedAt" | "expiresAt" | "revoked";
-          where?: {
-            name?: string;
-            prefix?: string;
-            revoked?: boolean;
-            userId?: string;
-          };
-        }, {
-          items: Array<{
-            _creationTime: number;
-            _id: string;
-            createdAt: number;
-            expiresAt?: number;
-            hashedKey: string;
-            lastUsedAt?: number;
-            metadata?: any;
-            name: string;
-            prefix: string;
-            rateLimit?: {
-              maxRequests: number;
-              windowMs: number;
-            };
-            rateLimitState?: {
-              attemptsLeft: number;
-              lastAttemptTime: number;
-            };
-            revoked: boolean;
-            scopes: Array<{
-              actions: Array<string>;
-              resource: string;
-            }>;
-            userId: string;
-          }>;
-          nextCursor: string | null;
-        }, Name>;
-        keyPatch: FunctionReference<"mutation", "internal", {
-          data: {
-            lastUsedAt?: number;
-            name?: string;
-            rateLimit?: {
-              maxRequests: number;
-              windowMs: number;
-            };
-            rateLimitState?: {
-              attemptsLeft: number;
-              lastAttemptTime: number;
-            };
-            revoked?: boolean;
-            scopes?: Array<{
-              actions: Array<string>;
-              resource: string;
-            }>;
-          };
-          keyId: string;
-        }, null, Name>;
       };
-      limits: {
-        rateLimitCreate: FunctionReference<"mutation", "internal", {
-          attemptsLeft: number;
-          identifier: string;
-          lastAttemptTime: number;
+      webhooks: {
+        groupWebhookDeliveryEnqueue: FunctionReference<"mutation", "internal", {
+          auditEventId?: string;
+          connectionId: string;
+          endpointId: string;
+          eventType: string;
+          nextAttemptAt: number;
+          payload: any;
         }, string, Name>;
-        rateLimitDelete: FunctionReference<"mutation", "internal", {
-          rateLimitId: string;
+        groupWebhookDeliveryList: FunctionReference<"query", "internal", {
+          connectionId: string;
+          limit?: number;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          attemptCount: number;
+          auditEventId?: string;
+          connectionId: string;
+          endpointId: string;
+          eventType: string;
+          lastAttemptAt?: number;
+          lastError?: string;
+          lastResponseStatus?: number;
+          nextAttemptAt: number;
+          payload: any;
+          status: "pending" | "processing" | "delivered" | "failed";
+        }>, Name>;
+        groupWebhookDeliveryListReady: FunctionReference<"query", "internal", {
+          limit?: number;
+          now: number;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          attemptCount: number;
+          auditEventId?: string;
+          connectionId: string;
+          endpointId: string;
+          eventType: string;
+          lastAttemptAt?: number;
+          lastError?: string;
+          lastResponseStatus?: number;
+          nextAttemptAt: number;
+          payload: any;
+          status: "pending" | "processing" | "delivered" | "failed";
+        }>, Name>;
+        groupWebhookDeliveryPatch: FunctionReference<"mutation", "internal", {
+          data: any;
+          deliveryId: string;
         }, null, Name>;
-        rateLimitGet: FunctionReference<"query", "internal", {
-          identifier: string;
+        groupWebhookEndpointCreate: FunctionReference<"mutation", "internal", {
+          connectionId: string;
+          createdByUserId?: string;
+          extend?: any;
+          groupId: string;
+          secretHash: string;
+          status?: "active" | "disabled";
+          subscriptions: Array<string>;
+          url: string;
+        }, string, Name>;
+        groupWebhookEndpointGet: FunctionReference<"query", "internal", {
+          endpointId: string;
         }, {
           _creationTime: number;
           _id: string;
-          attemptsLeft: number;
-          attempts_left: number;
-          identifier: string;
-          lastAttemptTime: number;
-          last_attempt_time: number;
+          connectionId: string;
+          createdByUserId?: string;
+          extend?: any;
+          failureCount: number;
+          groupId: string;
+          lastFailureAt?: number;
+          lastSuccessAt?: number;
+          secretHash: string;
+          status: "active" | "disabled";
+          subscriptions: Array<string>;
+          url: string;
         } | null, Name>;
-        rateLimitPatch: FunctionReference<"mutation", "internal", {
+        groupWebhookEndpointList: FunctionReference<"query", "internal", {
+          connectionId: string;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          connectionId: string;
+          createdByUserId?: string;
+          extend?: any;
+          failureCount: number;
+          groupId: string;
+          lastFailureAt?: number;
+          lastSuccessAt?: number;
+          secretHash: string;
+          status: "active" | "disabled";
+          subscriptions: Array<string>;
+          url: string;
+        }>, Name>;
+        groupWebhookEndpointUpdate: FunctionReference<"mutation", "internal", {
           data: any;
-          rateLimitId: string;
+          endpointId: string;
         }, null, Name>;
       };
     };
-    sessionCreate: FunctionReference<"mutation", "internal", {
-      expirationTime: number;
-      userId: string;
-    }, string, Name>;
-    sessionDelete: FunctionReference<"mutation", "internal", {
-      sessionId: string;
-    }, null, Name>;
-    sessionGetById: FunctionReference<"query", "internal", {
-      sessionId: string;
-    }, {
-      _creationTime: number;
-      _id: string;
-      expirationTime: number;
-      userId: string;
-    } | null, Name>;
-    sessionList: FunctionReference<"query", "internal", {
-      cursor?: string | null;
-      limit?: number;
-      order?: "asc" | "desc";
-      where?: {
-        userId?: string;
-      };
-    }, {
-      items: Array<{
-        _creationTime: number;
-        _id: string;
-        expirationTime: number;
-        userId: string;
-      }>;
-      nextCursor: string | null;
-    }, Name>;
-    sessionListByUser: FunctionReference<"query", "internal", {
-      userId: string;
-    }, Array<{
-      _creationTime: number;
-      _id: string;
-      expirationTime: number;
-      userId: string;
-    }>, Name>;
     totpDelete: FunctionReference<"mutation", "internal", {
       totpId: string;
     }, null, Name>;
@@ -2852,6 +2807,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
     } | null, Name>;
     verifierCreate: FunctionReference<"mutation", "internal", {
       sessionId?: string;
+      signature?: string;
     }, string, Name>;
     verifierDelete: FunctionReference<"mutation", "internal", {
       verifierId: string;