authhero 4.74.0 → 4.76.0

package/dist/authhero.d.ts

@@ -50719,6 +50719,38 @@ export interface AuthHeroConfig {
 	 * a JSON body and a Bearer token generated by the built-in service token creator.
 	 */
 	webhookInvoker?: WebhookInvoker;
+	/**
+	 * Handler for serving admin UI static files (JS, CSS, images) at /admin/*.
+	 *
+	 * This must be a platform-specific static file handler, similar to widgetHandler.
+	 * The handler serves the built assets from @authhero/react-admin/dist.
+	 *
+	 * @example Node.js with @hono/node-server:
+	 * ```typescript
+	 * import { serveStatic } from "@hono/node-server/serve-static";
+	 *
+	 * const adminDistPath = path.resolve(__dirname, "../node_modules/@authhero/react-admin/dist");
+	 *
+	 * const { app } = init({
+	 *   dataAdapter,
+	 *   adminHandler: serveStatic({
+	 *     root: adminDistPath,
+	 *     rewriteRequestPath: (p) => p.replace("/admin", ""),
+	 *   }),
+	 * });
+	 * ```
+	 */
+	adminHandler?: Handler<any>;
+	/**
+	 * Pre-configured index.html string for the admin UI SPA fallback.
+	 *
+	 * Read from @authhero/react-admin/dist/index.html with runtime config
+	 * injected via a `<script>window.__AUTHHERO_ADMIN_CONFIG__=...</script>` tag.
+	 *
+	 * When provided, all non-asset requests to /admin/* will return this HTML,
+	 * enabling client-side routing in the admin SPA.
+	 */
+	adminIndexHtml?: string;
 }
 export type SendEmailParams = {
 	emailProvider: EmailProvider;
@@ -51188,6 +51220,10 @@ export interface SeedOptions {
 	 * The admin user's username
 	 */
 	adminUsername: string;
+	/**
+	 * The admin user's email address (optional)
+	 */
+	adminEmail?: string;
 	/**
 	 * The admin user's password (will be hashed with bcrypt)
 	 */
@@ -51348,6 +51384,11 @@ export interface FetchAllOptions {
  * ```
  */
 export declare function fetchAll<T>(listFn: (params: ListParams) => Promise<any>, itemsKey: string, options?: FetchAllOptions): Promise<T[]>;
+export type Primitive = string | number | boolean | symbol | bigint | null | undefined;
+export type DeepPartial<T> = {
+	[P in keyof T]?: T[P] extends Primitive ? T[P] : T[P] extends Array<infer U> ? Array<DeepPartial<U>> : DeepPartial<T[P]>;
+};
+export declare function deepMergePatch<T>(target: T, patch: DeepPartial<T>): T;
 export declare const USERNAME_PASSWORD_PROVIDER = "auth2";
 export interface EnsureUsernameOptions {
 	/**
@@ -59143,418 +59184,6 @@ export declare function init(config: AuthHeroConfig): {
 			};
 		};
 	}, "/logs"> & import("hono/types").MergeSchemaPath<{
-		"/settings": {
-			$get: {
-				input: {
-					header: {
-						"tenant-id"?: string | undefined;
-					};
-				};
-				output: {
-					created_at: string;
-					updated_at: string;
-					id: string;
-					audience: string;
-					friendly_name: string;
-					sender_email: string;
-					sender_name: string;
-					allowed_logout_urls?: string[] | undefined | undefined;
-					oidc_logout?: {
-						rp_logout_end_session_endpoint_discovery?: boolean | undefined | undefined;
-					} | undefined;
-					default_organization?: string | undefined | undefined;
-					picture_url?: string | undefined | undefined;
-					support_email?: string | undefined | undefined;
-					support_url?: string | undefined | undefined;
-					session_lifetime?: number | undefined | undefined;
-					idle_session_lifetime?: number | undefined | undefined;
-					ephemeral_session_lifetime?: number | undefined | undefined;
-					idle_ephemeral_session_lifetime?: number | undefined | undefined;
-					session_cookie?: {
-						mode?: "persistent" | "non-persistent" | undefined | undefined;
-					} | undefined;
-					default_redirection_uri?: string | undefined | undefined;
-					enabled_locales?: string[] | undefined | undefined;
-					default_directory?: string | undefined | undefined;
-					error_page?: {
-						url?: string | undefined | undefined;
-						html?: string | undefined | undefined;
-						show_log_link?: boolean | undefined | undefined;
-					} | undefined;
-					flags?: {
-						allow_changing_enable_sso?: boolean | undefined | undefined;
-						allow_legacy_delegation_grant_types?: boolean | undefined | undefined;
-						allow_legacy_ro_grant_types?: boolean | undefined | undefined;
-						allow_legacy_tokeninfo_endpoint?: boolean | undefined | undefined;
-						change_pwd_flow_v1?: boolean | undefined | undefined;
-						custom_domains_provisioning?: boolean | undefined | undefined;
-						dashboard_insights_view?: boolean | undefined | undefined;
-						dashboard_log_streams_next?: boolean | undefined | undefined;
-						disable_clickjack_protection_headers?: boolean | undefined | undefined;
-						disable_fields_map_fix?: boolean | undefined | undefined;
-						disable_impersonation?: boolean | undefined | undefined;
-						disable_management_api_sms_obfuscation?: boolean | undefined | undefined;
-						enable_adfs_waad_email_verification?: boolean | undefined | undefined;
-						enable_apis_section?: boolean | undefined | undefined;
-						enable_client_connections?: boolean | undefined | undefined;
-						enable_custom_domain_in_emails?: boolean | undefined | undefined;
-						enable_dynamic_client_registration?: boolean | undefined | undefined;
-						enable_idtoken_api2?: boolean | undefined | undefined;
-						enable_legacy_logs_search_v2?: boolean | undefined | undefined;
-						enable_legacy_profile?: boolean | undefined | undefined;
-						enable_pipeline2?: boolean | undefined | undefined;
-						enable_public_signup_user_exists_error?: boolean | undefined | undefined;
-						enable_sso?: boolean | undefined | undefined;
-						enforce_client_authentication_on_passwordless_start?: boolean | undefined | undefined;
-						genai_trial?: boolean | undefined | undefined;
-						improved_signup_bot_detection_in_classic?: boolean | undefined | undefined;
-						mfa_show_factor_list_on_enrollment?: boolean | undefined | undefined;
-						no_disclose_enterprise_connections?: boolean | undefined | undefined;
-						remove_alg_from_jwks?: boolean | undefined | undefined;
-						revoke_refresh_token_grant?: boolean | undefined | undefined;
-						trust_azure_adfs_email_verified_connection_property?: boolean | undefined | undefined;
-						use_scope_descriptions_for_consent?: boolean | undefined | undefined;
-						inherit_global_permissions_in_organizations?: boolean | undefined | undefined;
-					} | undefined;
-					sandbox_version?: string | undefined | undefined;
-					legacy_sandbox_version?: string | undefined | undefined;
-					sandbox_versions_available?: string[] | undefined | undefined;
-					change_password?: {
-						enabled?: boolean | undefined | undefined;
-						html?: string | undefined | undefined;
-					} | undefined;
-					guardian_mfa_page?: {
-						enabled?: boolean | undefined | undefined;
-						html?: string | undefined | undefined;
-					} | undefined;
-					device_flow?: {
-						charset?: "base20" | "digits" | undefined | undefined;
-						mask?: string | undefined | undefined;
-					} | undefined;
-					default_token_quota?: {
-						clients?: {
-							client_credentials?: {
-								[x: string]: any;
-							} | undefined;
-						} | undefined;
-						organizations?: {
-							client_credentials?: {
-								[x: string]: any;
-							} | undefined;
-						} | undefined;
-					} | undefined;
-					default_audience?: string | undefined | undefined;
-					sessions?: {
-						oidc_logout_prompt_enabled?: boolean | undefined | undefined;
-					} | undefined;
-					allow_organization_name_in_authentication_api?: boolean | undefined | undefined;
-					customize_mfa_in_postlogin_action?: boolean | undefined | undefined;
-					acr_values_supported?: string[] | undefined | undefined;
-					mtls?: {
-						enable_endpoint_aliases?: boolean | undefined | undefined;
-					} | undefined;
-					pushed_authorization_requests_supported?: boolean | undefined | undefined;
-					authorization_response_iss_parameter_supported?: boolean | undefined | undefined;
-					mfa?: {
-						policy?: "never" | "always" | undefined | undefined;
-						factors?: {
-							email: boolean;
-							otp: boolean;
-							sms: boolean;
-							push_notification: boolean;
-							webauthn_roaming: boolean;
-							webauthn_platform: boolean;
-							recovery_code: boolean;
-							duo: boolean;
-						} | undefined;
-						twilio?: {
-							from?: string | undefined | undefined;
-							sid?: string | undefined | undefined;
-							auth_token?: string | undefined | undefined;
-							messaging_service_sid?: string | undefined | undefined;
-						} | undefined;
-						sms_provider?: {
-							provider?: "twilio" | "vonage" | "aws_sns" | "phone_message_hook" | undefined | undefined;
-						} | undefined;
-						phone_message?: {
-							message?: string | undefined | undefined;
-						} | undefined;
-					} | undefined;
-				};
-				outputFormat: "json";
-				status: 200;
-			};
-		};
-	} & {
-		"/settings": {
-			$patch: {
-				input: {
-					header: {
-						"tenant-id"?: string | undefined;
-					};
-				} & {
-					json: {
-						allowed_logout_urls?: string[] | undefined;
-						oidc_logout?: {
-							rp_logout_end_session_endpoint_discovery?: boolean | undefined;
-						} | undefined;
-						default_organization?: string | undefined;
-						audience?: string | undefined;
-						id?: string | undefined;
-						sessions?: {
-							oidc_logout_prompt_enabled?: boolean | undefined;
-						} | undefined;
-						friendly_name?: string | undefined;
-						sender_email?: string | undefined;
-						sender_name?: string | undefined;
-						picture_url?: string | undefined;
-						support_email?: string | undefined;
-						support_url?: string | undefined;
-						session_lifetime?: number | undefined;
-						idle_session_lifetime?: number | undefined;
-						ephemeral_session_lifetime?: number | undefined;
-						idle_ephemeral_session_lifetime?: number | undefined;
-						session_cookie?: {
-							mode?: "persistent" | "non-persistent" | undefined;
-						} | undefined;
-						default_redirection_uri?: string | undefined;
-						enabled_locales?: string[] | undefined;
-						default_directory?: string | undefined;
-						error_page?: {
-							url?: string | undefined;
-							html?: string | undefined;
-							show_log_link?: boolean | undefined;
-						} | undefined;
-						flags?: {
-							allow_changing_enable_sso?: boolean | undefined;
-							allow_legacy_delegation_grant_types?: boolean | undefined;
-							allow_legacy_ro_grant_types?: boolean | undefined;
-							allow_legacy_tokeninfo_endpoint?: boolean | undefined;
-							change_pwd_flow_v1?: boolean | undefined;
-							custom_domains_provisioning?: boolean | undefined;
-							dashboard_insights_view?: boolean | undefined;
-							dashboard_log_streams_next?: boolean | undefined;
-							disable_clickjack_protection_headers?: boolean | undefined;
-							disable_fields_map_fix?: boolean | undefined;
-							disable_impersonation?: boolean | undefined;
-							disable_management_api_sms_obfuscation?: boolean | undefined;
-							enable_adfs_waad_email_verification?: boolean | undefined;
-							enable_apis_section?: boolean | undefined;
-							enable_client_connections?: boolean | undefined;
-							enable_custom_domain_in_emails?: boolean | undefined;
-							enable_dynamic_client_registration?: boolean | undefined;
-							enable_idtoken_api2?: boolean | undefined;
-							enable_legacy_logs_search_v2?: boolean | undefined;
-							enable_legacy_profile?: boolean | undefined;
-							enable_pipeline2?: boolean | undefined;
-							enable_public_signup_user_exists_error?: boolean | undefined;
-							enable_sso?: boolean | undefined;
-							enforce_client_authentication_on_passwordless_start?: boolean | undefined;
-							genai_trial?: boolean | undefined;
-							improved_signup_bot_detection_in_classic?: boolean | undefined;
-							mfa_show_factor_list_on_enrollment?: boolean | undefined;
-							no_disclose_enterprise_connections?: boolean | undefined;
-							remove_alg_from_jwks?: boolean | undefined;
-							revoke_refresh_token_grant?: boolean | undefined;
-							trust_azure_adfs_email_verified_connection_property?: boolean | undefined;
-							use_scope_descriptions_for_consent?: boolean | undefined;
-							inherit_global_permissions_in_organizations?: boolean | undefined;
-						} | undefined;
-						sandbox_version?: string | undefined;
-						legacy_sandbox_version?: string | undefined;
-						sandbox_versions_available?: string[] | undefined;
-						change_password?: {
-							enabled?: boolean | undefined;
-							html?: string | undefined;
-						} | undefined;
-						guardian_mfa_page?: {
-							enabled?: boolean | undefined;
-							html?: string | undefined;
-						} | undefined;
-						device_flow?: {
-							charset?: "base20" | "digits" | undefined;
-							mask?: string | undefined;
-						} | undefined;
-						default_token_quota?: {
-							clients?: {
-								client_credentials?: Record<string, any> | undefined;
-							} | undefined;
-							organizations?: {
-								client_credentials?: Record<string, any> | undefined;
-							} | undefined;
-						} | undefined;
-						default_audience?: string | undefined;
-						allow_organization_name_in_authentication_api?: boolean | undefined;
-						customize_mfa_in_postlogin_action?: boolean | undefined;
-						acr_values_supported?: string[] | undefined;
-						mtls?: {
-							enable_endpoint_aliases?: boolean | undefined;
-						} | undefined;
-						pushed_authorization_requests_supported?: boolean | undefined;
-						authorization_response_iss_parameter_supported?: boolean | undefined;
-						mfa?: {
-							policy?: "never" | "always" | undefined;
-							factors?: {
-								email?: boolean | undefined;
-								otp?: boolean | undefined;
-								sms?: boolean | undefined;
-								push_notification?: boolean | undefined;
-								webauthn_roaming?: boolean | undefined;
-								webauthn_platform?: boolean | undefined;
-								recovery_code?: boolean | undefined;
-								duo?: boolean | undefined;
-							} | undefined;
-							twilio?: {
-								from?: string | undefined;
-								sid?: string | undefined;
-								auth_token?: string | undefined;
-								messaging_service_sid?: string | undefined;
-							} | undefined;
-							sms_provider?: {
-								provider?: "twilio" | "vonage" | "aws_sns" | "phone_message_hook" | undefined;
-							} | undefined;
-							phone_message?: {
-								message?: string | undefined;
-							} | undefined;
-						} | undefined;
-					};
-				};
-				output: {
-					created_at: string;
-					updated_at: string;
-					id: string;
-					audience: string;
-					friendly_name: string;
-					sender_email: string;
-					sender_name: string;
-					allowed_logout_urls?: string[] | undefined | undefined;
-					oidc_logout?: {
-						rp_logout_end_session_endpoint_discovery?: boolean | undefined | undefined;
-					} | undefined;
-					default_organization?: string | undefined | undefined;
-					picture_url?: string | undefined | undefined;
-					support_email?: string | undefined | undefined;
-					support_url?: string | undefined | undefined;
-					session_lifetime?: number | undefined | undefined;
-					idle_session_lifetime?: number | undefined | undefined;
-					ephemeral_session_lifetime?: number | undefined | undefined;
-					idle_ephemeral_session_lifetime?: number | undefined | undefined;
-					session_cookie?: {
-						mode?: "persistent" | "non-persistent" | undefined | undefined;
-					} | undefined;
-					default_redirection_uri?: string | undefined | undefined;
-					enabled_locales?: string[] | undefined | undefined;
-					default_directory?: string | undefined | undefined;
-					error_page?: {
-						url?: string | undefined | undefined;
-						html?: string | undefined | undefined;
-						show_log_link?: boolean | undefined | undefined;
-					} | undefined;
-					flags?: {
-						allow_changing_enable_sso?: boolean | undefined | undefined;
-						allow_legacy_delegation_grant_types?: boolean | undefined | undefined;
-						allow_legacy_ro_grant_types?: boolean | undefined | undefined;
-						allow_legacy_tokeninfo_endpoint?: boolean | undefined | undefined;
-						change_pwd_flow_v1?: boolean | undefined | undefined;
-						custom_domains_provisioning?: boolean | undefined | undefined;
-						dashboard_insights_view?: boolean | undefined | undefined;
-						dashboard_log_streams_next?: boolean | undefined | undefined;
-						disable_clickjack_protection_headers?: boolean | undefined | undefined;
-						disable_fields_map_fix?: boolean | undefined | undefined;
-						disable_impersonation?: boolean | undefined | undefined;
-						disable_management_api_sms_obfuscation?: boolean | undefined | undefined;
-						enable_adfs_waad_email_verification?: boolean | undefined | undefined;
-						enable_apis_section?: boolean | undefined | undefined;
-						enable_client_connections?: boolean | undefined | undefined;
-						enable_custom_domain_in_emails?: boolean | undefined | undefined;
-						enable_dynamic_client_registration?: boolean | undefined | undefined;
-						enable_idtoken_api2?: boolean | undefined | undefined;
-						enable_legacy_logs_search_v2?: boolean | undefined | undefined;
-						enable_legacy_profile?: boolean | undefined | undefined;
-						enable_pipeline2?: boolean | undefined | undefined;
-						enable_public_signup_user_exists_error?: boolean | undefined | undefined;
-						enable_sso?: boolean | undefined | undefined;
-						enforce_client_authentication_on_passwordless_start?: boolean | undefined | undefined;
-						genai_trial?: boolean | undefined | undefined;
-						improved_signup_bot_detection_in_classic?: boolean | undefined | undefined;
-						mfa_show_factor_list_on_enrollment?: boolean | undefined | undefined;
-						no_disclose_enterprise_connections?: boolean | undefined | undefined;
-						remove_alg_from_jwks?: boolean | undefined | undefined;
-						revoke_refresh_token_grant?: boolean | undefined | undefined;
-						trust_azure_adfs_email_verified_connection_property?: boolean | undefined | undefined;
-						use_scope_descriptions_for_consent?: boolean | undefined | undefined;
-						inherit_global_permissions_in_organizations?: boolean | undefined | undefined;
-					} | undefined;
-					sandbox_version?: string | undefined | undefined;
-					legacy_sandbox_version?: string | undefined | undefined;
-					sandbox_versions_available?: string[] | undefined | undefined;
-					change_password?: {
-						enabled?: boolean | undefined | undefined;
-						html?: string | undefined | undefined;
-					} | undefined;
-					guardian_mfa_page?: {
-						enabled?: boolean | undefined | undefined;
-						html?: string | undefined | undefined;
-					} | undefined;
-					device_flow?: {
-						charset?: "base20" | "digits" | undefined | undefined;
-						mask?: string | undefined | undefined;
-					} | undefined;
-					default_token_quota?: {
-						clients?: {
-							client_credentials?: {
-								[x: string]: any;
-							} | undefined;
-						} | undefined;
-						organizations?: {
-							client_credentials?: {
-								[x: string]: any;
-							} | undefined;
-						} | undefined;
-					} | undefined;
-					default_audience?: string | undefined | undefined;
-					sessions?: {
-						oidc_logout_prompt_enabled?: boolean | undefined | undefined;
-					} | undefined;
-					allow_organization_name_in_authentication_api?: boolean | undefined | undefined;
-					customize_mfa_in_postlogin_action?: boolean | undefined | undefined;
-					acr_values_supported?: string[] | undefined | undefined;
-					mtls?: {
-						enable_endpoint_aliases?: boolean | undefined | undefined;
-					} | undefined;
-					pushed_authorization_requests_supported?: boolean | undefined | undefined;
-					authorization_response_iss_parameter_supported?: boolean | undefined | undefined;
-					mfa?: {
-						policy?: "never" | "always" | undefined | undefined;
-						factors?: {
-							email: boolean;
-							otp: boolean;
-							sms: boolean;
-							push_notification: boolean;
-							webauthn_roaming: boolean;
-							webauthn_platform: boolean;
-							recovery_code: boolean;
-							duo: boolean;
-						} | undefined;
-						twilio?: {
-							from?: string | undefined | undefined;
-							sid?: string | undefined | undefined;
-							auth_token?: string | undefined | undefined;
-							messaging_service_sid?: string | undefined | undefined;
-						} | undefined;
-						sms_provider?: {
-							provider?: "twilio" | "vonage" | "aws_sns" | "phone_message_hook" | undefined | undefined;
-						} | undefined;
-						phone_message?: {
-							message?: string | undefined | undefined;
-						} | undefined;
-					} | undefined;
-				};
-				outputFormat: "json";
-				status: 200;
-			};
-		};
-	}, "/tenants"> & import("hono/types").MergeSchemaPath<{
 		"/": {
 			$get: {
 				input: {