@terrascale/sdk 0.0.2 → 0.0.4

package/types/ts-auth-ids.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Validate the documented endpointId:eventId delivery selector.
+ * @param {unknown} value
+ * @returns {string}
+ */
+export function requireDeadLetterId(value: unknown): string;
+/**
+ * Validate identity fields in the hosted-auth DTOs without inspecting customer metadata.
+ * @param {unknown} value
+ * @param {string} route
+ * @param {boolean} [entity]
+ * @returns {void}
+ */
+export function validateTsAuthIds(value: unknown, route: string, entity?: boolean): void;

package/types/ts-auth.d.ts

@@ -38,7 +38,6 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  * @typedef {Omit<TsAuthRuntimeConfig, "apiBaseUrl"> & {
  *   readonly apiBaseUrl: string; // The ts-auth deployment's public origin; there is no default.
  *   readonly instanceSlug: string; // The instance the `sk_` key belongs to; it prefixes every route.
- *   readonly useReverseProxy?: boolean; // Route public auth calls through the reverse proxy instead of regional discovery.
  * }} TsAuthClientConfig
  */
 /**
@@ -48,7 +47,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly email: string | null;
  *   readonly email_verified: boolean;
  *   readonly username: string | null;
@@ -63,7 +62,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly status: string;
  *   readonly created_at: number; // Unix seconds.
  *   readonly expires_at: number; // Unix seconds.
@@ -74,7 +73,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly type: string;
  *   readonly confirmed: boolean;
  *   readonly createdAt: number; // Unix seconds.
@@ -82,7 +81,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly nickname: string | null;
  *   readonly algorithm: string;
  *   readonly createdAt: number; // Unix seconds.
@@ -91,7 +90,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly slug: string;
  *   readonly created_at: number; // Unix seconds.
@@ -99,7 +98,7 @@ export function verifyTsAuthWebhookWithTolerance(signingSecret: string, timestam
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly role: string;
  *   readonly created_at: number; // Unix seconds.
  *   readonly organization: TsAuthOrganization | null;
@@ -307,7 +306,7 @@ export class TsAuthSessionsClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly api_key: string; // One-time full sk_ bearer; only the creating call returns it.
  *   readonly scopes: readonly string[];
@@ -315,7 +314,7 @@ export class TsAuthSessionsClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly scopes: readonly string[];
  *   readonly created_at: number; // Unix seconds.
@@ -352,9 +351,9 @@ export class TsAuthApiKeysClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly organization_id: string;
- *   readonly user_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly organization_id: import("./ids.js").EntityId;
+ *   readonly user_id: import("./ids.js").EntityId;
  *   readonly role: string;
  *   readonly created_at: number; // Unix seconds.
  * }} TsAuthMembership
@@ -362,7 +361,7 @@ export class TsAuthApiKeysClient {
 /**
  * @typedef {TsAuthMembership & {
  *   readonly user: {
- *     readonly id: string;
+ *     readonly id: import("./ids.js").EntityId;
  *     readonly email: string;
  *     readonly name: string;
  *   } | null;
@@ -370,8 +369,8 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly organization_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly organization_id: import("./ids.js").EntityId;
  *   readonly email: string;
  *   readonly role: string;
  *   readonly status: string;
@@ -381,13 +380,13 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly organization_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly organization_id: import("./ids.js").EntityId;
  *   readonly domain: string;
  *   readonly created_at: number; // Unix seconds.
  * }} TsAuthOrganizationDomain
  */
-/** @typedef {{ readonly org_id: string }} TsAuthDomainEnrollment */
+/** @typedef {{ readonly org_id: import("./ids.js").EntityId }} TsAuthDomainEnrollment */
 /**
  * @typedef {{
  *   readonly name: string;
@@ -401,7 +400,7 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly user_id: string;
+ *   readonly user_id: import("./ids.js").EntityId;
  *   readonly role: string;
  * }} TsAuthCreateMembershipRequest
  */
@@ -418,7 +417,7 @@ export class TsAuthApiKeysClient {
  */
 /**
  * @typedef {{
- *   readonly user_id: string;
+ *   readonly user_id: import("./ids.js").EntityId;
  * }} TsAuthEnrollRequest
  */
 export class TsAuthOrganizationsClient {
@@ -552,8 +551,8 @@ export class TsAuthOrganizationsClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly client_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly client_id: import("./ids.js").EntityId;
  *   readonly name: string;
  *   readonly redirect_uris: readonly string[];
  *   readonly post_logout_redirect_uris: readonly string[];
@@ -613,7 +612,7 @@ export class TsAuthOauthClientsClient {
 /**
  * @typedef {{
  *   readonly audience: string;
- *   readonly allowed_client_ids: readonly string[];
+ *   readonly allowed_client_ids: readonly import("./ids.js").EntityId[];
  *   readonly allowed_grant_types: readonly TsAuthOauthGrantType[];
  *   readonly allowed_scopes: readonly string[];
  * }} TsAuthCreateOauthResourceRequest
@@ -621,7 +620,7 @@ export class TsAuthOauthClientsClient {
 /**
  * @typedef {{
  *   readonly expected_auth_epoch: number;
- *   readonly allowed_client_ids?: readonly string[] | undefined;
+ *   readonly allowed_client_ids?: readonly import("./ids.js").EntityId[] | undefined;
  *   readonly allowed_grant_types?: readonly TsAuthOauthGrantType[] | undefined;
  *   readonly allowed_scopes?: readonly string[] | undefined;
  *   readonly enabled?: boolean | undefined;
@@ -630,8 +629,8 @@ export class TsAuthOauthClientsClient {
  */
 /**
  * @typedef {TsAuthCreateOauthResourceRequest & {
- *   readonly id: string;
- *   readonly introspection_client_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly introspection_client_id: import("./ids.js").EntityId;
  *   readonly token_endpoint_auth_method: "client_secret_basic";
  *   readonly auth_epoch: number;
  *   readonly enabled: boolean;
@@ -679,11 +678,11 @@ export class TsAuthOauthResourcesClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly type: "oidc" | "saml";
  *   readonly name: string;
  *   readonly enabled: boolean;
- *   readonly org_id: string | null;
+ *   readonly org_id: import("./ids.js").EntityId | null;
  *   readonly issuer_url: string | null;
  *   readonly client_id: string | null;
  *   readonly authorization_endpoint: string | null;
@@ -756,15 +755,15 @@ export class TsAuthConnectionsClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly org_id: string | null;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly org_id: import("./ids.js").EntityId | null;
  *   readonly token: string; // One-time SCIM bearer; only create and rotate return it.
  * }} TsAuthDirectoryWithToken
  */
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly org_id: string | null;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly org_id: import("./ids.js").EntityId | null;
  *   readonly created_at: number; // Unix seconds.
  * }} TsAuthDirectory
  */
@@ -825,17 +824,17 @@ export class TsAuthJwtTemplatesClient {
     delete(name: string): Promise<TerraScaleResult<void>>;
     /**
      * @param {string} name
-     * @param {{ readonly user_id: string }} request
+     * @param {{ readonly user_id: import("./ids.js").EntityId }} request
      * @returns {Promise<TerraScaleResult<TsAuthJwtTokenResponse>>}
      */
     issueToken(name: string, request: {
-        readonly user_id: string;
+        readonly user_id: import("./ids.js").EntityId;
     }): Promise<TerraScaleResult<TsAuthJwtTokenResponse>>;
     #private;
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly url: string;
  *   readonly events: readonly string[];
  *   readonly signing_secret: string; // One-time HMAC key for verifying deliveries; only create returns it.
@@ -843,7 +842,7 @@ export class TsAuthJwtTemplatesClient {
  */
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly url: string;
  *   readonly events: readonly string[];
  *   readonly enabled: boolean;
@@ -852,9 +851,9 @@ export class TsAuthJwtTemplatesClient {
  */
 /**
  * @typedef {{
- *   readonly id: string; // endpointId:eventId
- *   readonly endpoint_id: string;
- *   readonly event_id: string;
+ *   readonly id: `${import("./ids.js").EntityId}:${import("./ids.js").EntityId}`; // endpointId:eventId delivery selector.
+ *   readonly endpoint_id: import("./ids.js").EntityId;
+ *   readonly event_id: import("./ids.js").EntityId;
  *   readonly attempts: number;
  *   readonly last_error?: string | undefined;
  *   readonly updated_at: number; // Unix seconds.
@@ -901,10 +900,10 @@ export class TsAuthWebhooksClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
- *   readonly instance_id: string;
+ *   readonly id: import("./ids.js").EntityId;
+ *   readonly instance_id: import("./ids.js").EntityId;
  *   readonly type: string;
- *   readonly actor_id?: string | undefined; // Omitted from the wire when null.
+ *   readonly actor_id?: import("./ids.js").EntityId | undefined; // Omitted from the wire when null.
  *   readonly data: Record<string, unknown>;
  *   readonly created_at: number; // Unix seconds.
  *   readonly integrity_version: number;
@@ -983,7 +982,7 @@ export class TsAuthBillingClient {
 }
 /**
  * @typedef {{
- *   readonly id: string;
+ *   readonly id: import("./ids.js").EntityId;
  *   readonly slug: string;
  *   readonly name: string;
  *   readonly logo_url?: string | null | undefined;
@@ -1052,7 +1051,7 @@ export class TsAuthInstanceClient {
 /** @typedef {{ readonly keys: readonly TsAuthOidcJwk[] }} TsAuthOidcJwks */
 /**
  * @typedef {{
- *   readonly client_id: string;
+ *   readonly client_id: import("./ids.js").EntityId;
  *   readonly redirect_uri: string;
  *   readonly response_type: "code";
  *   readonly scope?: string | undefined;
@@ -1127,20 +1126,20 @@ export class TsAuthInstanceClient {
  *   readonly active: true;
  *   readonly token_type: "Bearer";
  *   readonly iss: string;
- *   readonly sub: string;
+ *   readonly sub: import("./ids.js").EntityId;
  *   readonly aud: string;
- *   readonly client_id: string;
+ *   readonly client_id: import("./ids.js").EntityId;
  *   readonly scope: string;
  *   readonly exp: number;
  *   readonly iat: number;
- *   readonly sid: string | null;
+ *   readonly sid: import("./ids.js").EntityId | null;
  *   readonly principal_kind: "user" | "service";
  * }} TsAuthOidcAccessIntrospection
  */
 /**
  * @typedef {Omit<TsAuthOidcAccessIntrospection, "token_type" | "principal_kind"> & {
  *   readonly token_type: "refresh_token";
- *   readonly family_id: string;
+ *   readonly family_id: import("./ids.js").EntityId;
  * }} TsAuthOidcRefreshIntrospection
  */
 /**
@@ -1151,7 +1150,7 @@ export class TsAuthInstanceClient {
 /**
  * @typedef {Omit<TsAuthOidcAccessIntrospection, "sid" | "principal_kind"> &
  *   (
- *     | { readonly principal_kind: "user"; readonly sid: string }
+ *     | { readonly principal_kind: "user"; readonly sid: import("./ids.js").EntityId }
  *     | { readonly principal_kind: "service"; readonly sid: null }
  *   )} TsAuthOidcResourceAccessIntrospection
  */
@@ -1163,13 +1162,13 @@ export class TsAuthInstanceClient {
  * @typedef {{
  *   readonly issuer: string; // Configured canonical provider issuer, independently trusted by the caller.
  *   readonly audience: string; // Exact registered resource URI; never derived from the response.
- *   readonly introspection_client_id: string;
+ *   readonly introspection_client_id: import("./ids.js").EntityId;
  *   readonly introspection_secret: string;
  * }} TsAuthOidcResourceCredentials
  */
 /**
  * @typedef {{
- *   readonly sub: string;
+ *   readonly sub: import("./ids.js").EntityId;
  *   readonly email?: string | undefined;
  *   readonly email_verified?: boolean | undefined;
  *   readonly name?: string | undefined;
@@ -1335,13 +1334,12 @@ export type TsAuthRuntimeConfig = import("./config.js").TsAuthRuntimeConfig;
 export type TsAuthClientConfig = Omit<TsAuthRuntimeConfig, "apiBaseUrl"> & {
     readonly apiBaseUrl: string;
     readonly instanceSlug: string;
-    readonly useReverseProxy?: boolean;
 };
 export type TsAuthRequestOptions = {
     readonly signal?: AbortSignal | undefined;
 };
 export type TsAuthUser = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly email: string | null;
     readonly email_verified: boolean;
     readonly username: string | null;
@@ -1354,7 +1352,7 @@ export type TsAuthUser = {
     readonly private_metadata?: Record<string, unknown> | undefined;
 };
 export type TsAuthSession = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly status: string;
     readonly created_at: number;
     readonly expires_at: number;
@@ -1363,26 +1361,26 @@ export type TsAuthSession = {
     readonly ip_address?: string | null | undefined;
 };
 export type TsAuthMfaFactor = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly type: string;
     readonly confirmed: boolean;
     readonly createdAt: number;
 };
 export type TsAuthPasskey = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly nickname: string | null;
     readonly algorithm: string;
     readonly createdAt: number;
     readonly lastUsedAt: number | null;
 };
 export type TsAuthOrganization = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly slug: string;
     readonly created_at: number;
 };
 export type TsAuthUserOrganizationMembership = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly role: string;
     readonly created_at: number;
     readonly organization: TsAuthOrganization | null;
@@ -1420,13 +1418,13 @@ export type TsAuthCreateUserRequest = {
     readonly name?: string | undefined;
 };
 export type TsAuthApiKeyWithSecret = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly api_key: string;
     readonly scopes: readonly string[];
 };
 export type TsAuthApiKey = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly scopes: readonly string[];
     readonly created_at: number;
@@ -1441,22 +1439,22 @@ export type TsAuthCreateApiKeyRequest = {
     readonly scopes?: readonly string[] | undefined;
 };
 export type TsAuthMembership = {
-    readonly id: string;
-    readonly organization_id: string;
-    readonly user_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly organization_id: import("./ids.js").EntityId;
+    readonly user_id: import("./ids.js").EntityId;
     readonly role: string;
     readonly created_at: number;
 };
 export type TsAuthMembershipWithUser = TsAuthMembership & {
     readonly user: {
-        readonly id: string;
+        readonly id: import("./ids.js").EntityId;
         readonly email: string;
         readonly name: string;
     } | null;
 };
 export type TsAuthInvitation = {
-    readonly id: string;
-    readonly organization_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly organization_id: import("./ids.js").EntityId;
     readonly email: string;
     readonly role: string;
     readonly status: string;
@@ -1464,13 +1462,13 @@ export type TsAuthInvitation = {
     readonly created_at: number;
 };
 export type TsAuthOrganizationDomain = {
-    readonly id: string;
-    readonly organization_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly organization_id: import("./ids.js").EntityId;
     readonly domain: string;
     readonly created_at: number;
 };
 export type TsAuthDomainEnrollment = {
-    readonly org_id: string;
+    readonly org_id: import("./ids.js").EntityId;
 };
 export type TsAuthCreateOrganizationRequest = {
     readonly name: string;
@@ -1480,7 +1478,7 @@ export type TsAuthUpdateOrganizationRequest = {
     readonly name: string;
 };
 export type TsAuthCreateMembershipRequest = {
-    readonly user_id: string;
+    readonly user_id: import("./ids.js").EntityId;
     readonly role: string;
 };
 export type TsAuthCreateInvitationRequest = {
@@ -1491,7 +1489,7 @@ export type TsAuthAddDomainRequest = {
     readonly domain: string;
 };
 export type TsAuthEnrollRequest = {
-    readonly user_id: string;
+    readonly user_id: import("./ids.js").EntityId;
 };
 export type TsAuthOauthGrantType = "authorization_code" | "refresh_token" | "client_credentials" | "urn:ietf:params:oauth:grant-type:device_code";
 export type TsAuthOauthClientAuthMethod = "none" | "client_secret_post" | "client_secret_basic";
@@ -1513,8 +1511,8 @@ export type TsAuthUpdateOauthClientRequest = Omit<TsAuthCreateOauthClientRequest
     readonly rotate_secret?: boolean | undefined;
 };
 export type TsAuthOauthClientView = {
-    readonly id: string;
-    readonly client_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly client_id: import("./ids.js").EntityId;
     readonly name: string;
     readonly redirect_uris: readonly string[];
     readonly post_logout_redirect_uris: readonly string[];
@@ -1539,21 +1537,21 @@ export type TsAuthOauthClientList = {
 export type TsAuthOauthClientUpdate = TsAuthOauthClientView | TsAuthOauthClientWithSecret;
 export type TsAuthCreateOauthResourceRequest = {
     readonly audience: string;
-    readonly allowed_client_ids: readonly string[];
+    readonly allowed_client_ids: readonly import("./ids.js").EntityId[];
     readonly allowed_grant_types: readonly TsAuthOauthGrantType[];
     readonly allowed_scopes: readonly string[];
 };
 export type TsAuthUpdateOauthResourceRequest = {
     readonly expected_auth_epoch: number;
-    readonly allowed_client_ids?: readonly string[] | undefined;
+    readonly allowed_client_ids?: readonly import("./ids.js").EntityId[] | undefined;
     readonly allowed_grant_types?: readonly TsAuthOauthGrantType[] | undefined;
     readonly allowed_scopes?: readonly string[] | undefined;
     readonly enabled?: boolean | undefined;
     readonly rotate_secret?: boolean | undefined;
 };
 export type TsAuthOauthResourceView = TsAuthCreateOauthResourceRequest & {
-    readonly id: string;
-    readonly introspection_client_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly introspection_client_id: import("./ids.js").EntityId;
     readonly token_endpoint_auth_method: "client_secret_basic";
     readonly auth_epoch: number;
     readonly enabled: boolean;
@@ -1568,11 +1566,11 @@ export type TsAuthOauthResourceList = {
     readonly resources: readonly TsAuthOauthResourceView[];
 };
 export type TsAuthConnectionView = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly type: "oidc" | "saml";
     readonly name: string;
     readonly enabled: boolean;
-    readonly org_id: string | null;
+    readonly org_id: import("./ids.js").EntityId | null;
     readonly issuer_url: string | null;
     readonly client_id: string | null;
     readonly authorization_endpoint: string | null;
@@ -1608,17 +1606,17 @@ export type TsAuthConnectionPatch = {
     readonly client_secret?: string | undefined;
 };
 export type TsAuthDirectoryWithToken = {
-    readonly id: string;
-    readonly org_id: string | null;
+    readonly id: import("./ids.js").EntityId;
+    readonly org_id: import("./ids.js").EntityId | null;
     readonly token: string;
 };
 export type TsAuthDirectory = {
-    readonly id: string;
-    readonly org_id: string | null;
+    readonly id: import("./ids.js").EntityId;
+    readonly org_id: import("./ids.js").EntityId | null;
     readonly created_at: number;
 };
 export type TsAuthJwtTemplate = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly name: string;
     readonly claims: Record<string, string>;
     readonly lifetime_seconds: number;
@@ -1638,31 +1636,31 @@ export type TsAuthUpdateJwtTemplateRequest = {
     readonly lifetime_seconds?: number | undefined;
 };
 export type TsAuthWebhookWithSecret = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly url: string;
     readonly events: readonly string[];
     readonly signing_secret: string;
 };
 export type TsAuthWebhook = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly url: string;
     readonly events: readonly string[];
     readonly enabled: boolean;
     readonly created_at: number;
 };
 export type TsAuthDeadLetterEntry = {
-    readonly id: string;
-    readonly endpoint_id: string;
-    readonly event_id: string;
+    readonly id: `${import("./ids.js").EntityId}:${import("./ids.js").EntityId}`;
+    readonly endpoint_id: import("./ids.js").EntityId;
+    readonly event_id: import("./ids.js").EntityId;
     readonly attempts: number;
     readonly last_error?: string | undefined;
     readonly updated_at: number;
 };
 export type TsAuthAuditEvent = {
-    readonly id: string;
-    readonly instance_id: string;
+    readonly id: import("./ids.js").EntityId;
+    readonly instance_id: import("./ids.js").EntityId;
     readonly type: string;
-    readonly actor_id?: string | undefined;
+    readonly actor_id?: import("./ids.js").EntityId | undefined;
     readonly data: Record<string, unknown>;
     readonly created_at: number;
     readonly integrity_version: number;
@@ -1680,7 +1678,7 @@ export type TsAuthBillingOverview = {
     readonly quota: number;
 };
 export type TsAuthInstance = {
-    readonly id: string;
+    readonly id: import("./ids.js").EntityId;
     readonly slug: string;
     readonly name: string;
     readonly logo_url?: string | null | undefined;
@@ -1730,7 +1728,7 @@ export type TsAuthOidcJwks = {
     readonly keys: readonly TsAuthOidcJwk[];
 };
 export type TsAuthOidcAuthorizationRequest = {
-    readonly client_id: string;
+    readonly client_id: import("./ids.js").EntityId;
     readonly redirect_uri: string;
     readonly response_type: "code";
     readonly scope?: string | undefined;
@@ -1788,23 +1786,23 @@ export type TsAuthOidcAccessIntrospection = {
     readonly active: true;
     readonly token_type: "Bearer";
     readonly iss: string;
-    readonly sub: string;
+    readonly sub: import("./ids.js").EntityId;
     readonly aud: string;
-    readonly client_id: string;
+    readonly client_id: import("./ids.js").EntityId;
     readonly scope: string;
     readonly exp: number;
     readonly iat: number;
-    readonly sid: string | null;
+    readonly sid: import("./ids.js").EntityId | null;
     readonly principal_kind: "user" | "service";
 };
 export type TsAuthOidcRefreshIntrospection = Omit<TsAuthOidcAccessIntrospection, "token_type" | "principal_kind"> & {
     readonly token_type: "refresh_token";
-    readonly family_id: string;
+    readonly family_id: import("./ids.js").EntityId;
 };
 export type TsAuthOidcIntrospection = TsAuthOidcInactiveIntrospection | TsAuthOidcAccessIntrospection | TsAuthOidcRefreshIntrospection;
 export type TsAuthOidcResourceAccessIntrospection = Omit<TsAuthOidcAccessIntrospection, "sid" | "principal_kind"> & ({
     readonly principal_kind: "user";
-    readonly sid: string;
+    readonly sid: import("./ids.js").EntityId;
 } | {
     readonly principal_kind: "service";
     readonly sid: null;
@@ -1813,11 +1811,11 @@ export type TsAuthOidcResourceIntrospection = TsAuthOidcInactiveIntrospection |
 export type TsAuthOidcResourceCredentials = {
     readonly issuer: string;
     readonly audience: string;
-    readonly introspection_client_id: string;
+    readonly introspection_client_id: import("./ids.js").EntityId;
     readonly introspection_secret: string;
 };
 export type TsAuthOidcUserInfo = {
-    readonly sub: string;
+    readonly sub: import("./ids.js").EntityId;
     readonly email?: string | undefined;
     readonly email_verified?: boolean | undefined;
     readonly name?: string | undefined;