//#region src/types/idp.generated.d.ts
/**
 * Configuration for GraphQL operations on IdP users.
 * All operations are enabled by default (undefined or true = enabled, false = disabled).
 */
export type IdPGqlOperationsInput = "query" | {
  create?: boolean | undefined;
  update?: boolean | undefined;
  delete?: boolean | undefined;
  read?: boolean | undefined;
  sendPasswordResetEmail?: boolean | undefined;
  requestMfaSettingsUrl?: boolean | undefined;
  unenrollMfa?: boolean | undefined;
};
export type IdPGqlOperations = {
  /** Enable _createUser mutation (default: true) */
  create?: boolean | undefined;
  /** Enable _updateUser mutation (default: true) */
  update?: boolean | undefined;
  /** Enable _deleteUser mutation (default: true) */
  delete?: boolean | undefined;
  /** Enable _users and _user queries (default: true) */
  read?: boolean | undefined;
  /** Enable _sendPasswordResetEmail mutation (default: true) */
  sendPasswordResetEmail?: boolean | undefined;
  /** Enable _requestMfaSettingsUrl query (default: true) */
  requestMfaSettingsUrl?: boolean | undefined;
  /** Enable _unenrollMfa mutation (default: true) */
  unenrollMfa?: boolean | undefined;
};
/**
 * Namespace-level email configuration defaults
 */
export type IdPEmailConfig = {
  /** Default sender display name for emails */
  fromName?: string | undefined;
  /** Default subject for password reset emails */
  passwordResetSubject?: string | undefined;
};
/**
 * Per-operation permission policies for IdP users
 */
export type IdPPermission = {
  create: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })] | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), boolean] | readonly (boolean | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })])[] | {
    conditions: readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })] | readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })])[];
    description?: string | undefined;
    permit?: boolean | undefined;
  })[];
  read: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })] | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), boolean] | readonly (boolean | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })])[] | {
    conditions: readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })] | readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })])[];
    description?: string | undefined;
    permit?: boolean | undefined;
  })[];
  update: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })] | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), boolean] | readonly (boolean | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })])[] | {
    conditions: readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })] | readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })])[];
    description?: string | undefined;
    permit?: boolean | undefined;
  })[];
  delete: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })] | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), boolean] | readonly (boolean | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })])[] | {
    conditions: readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })] | readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })])[];
    description?: string | undefined;
    permit?: boolean | undefined;
  })[];
  sendPasswordResetEmail?: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })] | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), boolean] | readonly (boolean | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })])[] | {
    conditions: readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })] | readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })])[];
    description?: string | undefined;
    permit?: boolean | undefined;
  })[] | undefined;
  unenrollMfa?: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })] | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), boolean] | readonly (boolean | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
    user: string;
  } | {
    idpUser: "id" | "name" | "disabled";
  } | {
    oldIdpUser: "id" | "name" | "disabled";
  } | {
    newIdpUser: "id" | "name" | "disabled";
  })])[] | {
    conditions: readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })] | readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    }), "=" | "!=" | "in" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
      user: string;
    } | {
      idpUser: "id" | "name" | "disabled";
    } | {
      oldIdpUser: "id" | "name" | "disabled";
    } | {
      newIdpUser: "id" | "name" | "disabled";
    })])[];
    description?: string | undefined;
    permit?: boolean | undefined;
  })[] | undefined;
};
export type IdPInput = {
  /** IdP service name */
  name: string;
  /** OAuth2 client names that can use this IdP */
  clients: string[];
  /** Authorization mode for IdP API access */
  authorization?: "insecure" | "loggedIn" | {
    cel: string;
  } | undefined;
  /** UI language for IdP pages */
  lang?: "en" | "ja" | undefined;
  /** User authentication policy configuration */
  userAuthPolicy?: {
    /** Use non-email identifier for usernames */
    useNonEmailIdentifier?: boolean | undefined;
    /** Allow users to reset their own passwords */
    allowSelfPasswordReset?: boolean | undefined;
    /** Require uppercase letters in passwords */
    passwordRequireUppercase?: boolean | undefined;
    /** Require lowercase letters in passwords */
    passwordRequireLowercase?: boolean | undefined;
    /** Require non-alphanumeric characters in passwords */
    passwordRequireNonAlphanumeric?: boolean | undefined;
    /** Require numeric characters in passwords */
    passwordRequireNumeric?: boolean | undefined;
    /** Minimum password length (6-30) */
    passwordMinLength?: number | undefined;
    /** Maximum password length (6-4096) */
    passwordMaxLength?: number | undefined;
    /** Restrict registration to these email domains. A lone * entry allows every domain */
    allowedEmailDomains?: string[] | undefined;
    /** Enable Google OAuth login */
    allowGoogleOauth?: boolean | undefined;
    /** Enable Microsoft OAuth login */
    allowMicrosoftOauth?: boolean | undefined;
    /** Disable password-based authentication */
    disablePasswordAuth?: boolean | undefined;
    /** Make TOTP MFA available for users in this namespace */
    enableMfa?: boolean | undefined;
    /** Require TOTP MFA enrollment and challenge for password-authenticated users (requires enableMfa) */
    requireMfa?: boolean | undefined;
    /** Application origins (scheme + host + optional port) allowed as MFA self-service return targets */
    allowedReturnOrigins?: string[] | undefined;
    /** Label shown next to the user account in authenticator apps */
    mfaIssuer?: string | undefined;
  } | undefined;
  /** Enable publishing user lifecycle events */
  publishEvents?: boolean | undefined;
  /** Configure which GraphQL operations are enabled */
  gqlOperations?: "query" | {
    /** Enable _createUser mutation (default: true) */
    create?: boolean | undefined;
    /** Enable _updateUser mutation (default: true) */
    update?: boolean | undefined;
    /** Enable _deleteUser mutation (default: true) */
    delete?: boolean | undefined;
    /** Enable _users and _user queries (default: true) */
    read?: boolean | undefined;
    /** Enable _sendPasswordResetEmail mutation (default: true) */
    sendPasswordResetEmail?: boolean | undefined;
    /** Enable _requestMfaSettingsUrl query (default: true) */
    requestMfaSettingsUrl?: boolean | undefined;
    /** Enable _unenrollMfa mutation (default: true) */
    unenrollMfa?: boolean | undefined;
  } | undefined;
  /** Namespace-level email configuration defaults */
  emailConfig?: IdPEmailConfig;
  /** Per-operation permission policies for IdP users */
  permission?: IdPPermission;
};
//#endregion