fix: use enum for type

fix: update folder retrieval logic in createTemplate function
fix: fix folder retrieval for template creation
2025-11-10 20:42:34 +10:00 · 2025-05-02 21:20:58 +03:00 · 2025-05-02 20:47:27 +03:00 · 2025-05-02 20:39:41 +03:00
130 changed files with 14122 additions and 13516 deletions
--- a/.npmrc
+++ b/.npmrc
@ -1,3 +1 @@
 auto-install-peers = true
-legacy-peer-deps = true
-prefer-dedupe = true
--- a/apps/documentation/next.config.js
+++ b/apps/documentation/next.config.js
@ -1,5 +1,3 @@
-import nextra from 'nextra';
-
 /** @type {import('next').NextConfig} */
 const nextConfig = {
  transpilePackages: [
@ -11,10 +9,9 @@ const nextConfig = {
  ],
 };

-const withNextra = nextra({
+const withNextra = require('nextra')({
  theme: 'nextra-theme-docs',
  themeConfig: './theme.config.tsx',
-  codeHighlight: true,
 });

-export default withNextra(nextConfig);
+module.exports = withNextra(nextConfig);
--- a/apps/documentation/package.json
+++ b/apps/documentation/package.json
@ -15,7 +15,7 @@
    "@documenso/tailwind-config": "*",
    "@documenso/trpc": "*",
    "@documenso/ui": "*",
-    "next": "14.2.28",
+    "next": "14.2.6",
    "next-plausible": "^3.12.0",
    "nextra": "^2.13.4",
    "nextra-theme-docs": "^2.13.4",
--- a/apps/documentation/theme.config.tsx
+++ b/apps/documentation/theme.config.tsx
@ -19,22 +19,6 @@ const themeConfig: DocsThemeConfig = {
        <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
        <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" />
        <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" />
-        <script
-          dangerouslySetInnerHTML={{
-            __html: `
-            !function(){
-             if (location.hostname === 'localhost') return;
-              var e="6c236490c9a68c1",
-                  t=function(){Reo.init({ clientID: e })},
-                  n=document.createElement("script");
-              n.src="https://static.reo.dev/"+e+"/reo.js";
-              n.defer=true;
-              n.onload=t;
-              document.head.appendChild(n);
-            }();
-          `,
-          }}
-        />
      </>
    );
  },
--- a/apps/openpage-api/package.json
+++ b/apps/openpage-api/package.json
@ -12,7 +12,7 @@
  "dependencies": {
    "@documenso/prisma": "*",
    "luxon": "^3.5.0",
-    "next": "14.2.28"
+    "next": "14.2.6"
  },
  "devDependencies": {
    "@types/node": "^20",
--- a/apps/remix/app/components/embed/authoring/configure-fields-view.tsx
+++ b/apps/remix/app/components/embed/authoring/configure-fields-view.tsx
@ -173,59 +173,34 @@ export const ConfigureFieldsView = ({
  });

  const onFieldCopy = useCallback(
-    (event?: KeyboardEvent | null, options?: { duplicate?: boolean; duplicateAll?: boolean }) => {
-      const { duplicate = false, duplicateAll = false } = options ?? {};
+    (event?: KeyboardEvent | null, options?: { duplicate?: boolean }) => {
+      const { duplicate = false } = options ?? {};

      if (lastActiveField) {
        event?.preventDefault();

-        if (duplicate) {
-          const newField: TConfigureFieldsFormSchema['fields'][0] = {
-            ...structuredClone(lastActiveField),
-            nativeId: undefined,
-            formId: nanoid(12),
-            signerEmail: selectedRecipient?.email ?? lastActiveField.signerEmail,
-            recipientId: selectedRecipient?.id ?? lastActiveField.recipientId,
-            pageX: lastActiveField.pageX + 3,
-            pageY: lastActiveField.pageY + 3,
-          };
+        if (!duplicate) {
+          setFieldClipboard(lastActiveField);

-          append(newField);
-
-          return;
-        }
-
-        if (duplicateAll) {
-          const pages = Array.from(document.querySelectorAll(PDF_VIEWER_PAGE_SELECTOR));
-
-          pages.forEach((_, index) => {
-            const pageNumber = index + 1;
-
-            if (pageNumber === lastActiveField.pageNumber) {
-              return;
-            }
-
-            const newField: TConfigureFieldsFormSchema['fields'][0] = {
-              ...structuredClone(lastActiveField),
-              nativeId: undefined,
-              formId: nanoid(12),
-              signerEmail: selectedRecipient?.email ?? lastActiveField.signerEmail,
-              recipientId: selectedRecipient?.id ?? lastActiveField.recipientId,
-              pageNumber,
-            };
-
-            append(newField);
+          toast({
+            title: 'Copied field',
+            description: 'Copied field to clipboard',
          });

          return;
        }

-        setFieldClipboard(lastActiveField);
+        const newField: TConfigureFieldsFormSchema['fields'][0] = {
+          ...structuredClone(lastActiveField),
+          nativeId: undefined,
+          formId: nanoid(12),
+          signerEmail: selectedRecipient?.email ?? lastActiveField.signerEmail,
+          recipientId: selectedRecipient?.id ?? lastActiveField.recipientId,
+          pageX: lastActiveField.pageX + 3,
+          pageY: lastActiveField.pageY + 3,
+        };

-        toast({
-          title: 'Copied field',
-          description: 'Copied field to clipboard',
-        });
+        append(newField);
      }
    },
    [append, lastActiveField, selectedRecipient?.email, selectedRecipient?.id, toast],
@ -558,7 +533,6 @@ export const ConfigureFieldsView = ({
                          onMove={(node) => onFieldMove(node, index)}
                          onRemove={() => remove(index)}
                          onDuplicate={() => onFieldCopy(null, { duplicate: true })}
-                          onDuplicateAllPages={() => onFieldCopy(null, { duplicateAll: true })}
                          onFocus={() => setLastActiveField(field)}
                          onBlur={() => setLastActiveField(null)}
                          onAdvancedSettings={() => {
--- a/apps/remix/app/components/embed/embed-direct-template-client-page.tsx
+++ b/apps/remix/app/components/embed/embed-direct-template-client-page.tsx
@ -332,7 +332,7 @@ export const EmbedDirectTemplateClientPage = ({
        {/* Widget */}
        <div
          key={isExpanded ? 'expanded' : 'collapsed'}
-          className="group/document-widget fixed bottom-8 left-0 z-50 h-fit max-h-[calc(100dvh-2rem)] w-full flex-shrink-0 px-6 md:sticky md:bottom-[unset] md:top-4 md:z-auto md:w-[350px] md:px-0"
+          className="group/document-widget fixed bottom-8 left-0 z-50 h-fit max-h-[calc(100dvh-2rem)] w-full flex-shrink-0 px-6 md:sticky md:top-4 md:z-auto md:w-[350px] md:px-0"
          data-expanded={isExpanded || undefined}
        >
          <div className="border-border bg-widget flex h-fit w-full flex-col rounded-xl border px-4 py-4 md:min-h-[min(calc(100dvh-2rem),48rem)] md:py-6">
--- a/apps/remix/app/components/embed/embed-document-signing-page.tsx
+++ b/apps/remix/app/components/embed/embed-document-signing-page.tsx
@ -290,7 +290,7 @@ export const EmbedSignDocumentClientPage = ({
          {/* Widget */}
          <div
            key={isExpanded ? 'expanded' : 'collapsed'}
-            className="embed--DocumentWidgetContainer group/document-widget fixed bottom-8 left-0 z-50 h-fit max-h-[calc(100dvh-2rem)] w-full flex-shrink-0 px-6 md:sticky md:bottom-[unset] md:top-4 md:z-auto md:w-[350px] md:px-0"
+            className="embed--DocumentWidgetContainer group/document-widget fixed bottom-8 left-0 z-50 h-fit max-h-[calc(100dvh-2rem)] w-full flex-shrink-0 px-6 md:sticky md:top-4 md:z-auto md:w-[350px] md:px-0"
            data-expanded={isExpanded || undefined}
          >
            <div className="embed--DocumentWidget border-border bg-widget flex w-full flex-col rounded-xl border px-4 py-4 md:py-6">
--- a/apps/remix/app/components/embed/multisign/multi-sign-document-list.tsx
+++ b/apps/remix/app/components/embed/multisign/multi-sign-document-list.tsx
@ -1,182 +0,0 @@
-import { Trans } from '@lingui/react/macro';
-import { ReadStatus, RecipientRole, SigningStatus } from '@prisma/client';
-import { ArrowRight, EyeIcon, XCircle } from 'lucide-react';
-import { match } from 'ts-pattern';
-
-import type { DocumentAndSender } from '@documenso/lib/server-only/document/get-document-by-token';
-import type { getRecipientByToken } from '@documenso/lib/server-only/recipient/get-recipient-by-token';
-import { Alert, AlertDescription, AlertTitle } from '@documenso/ui/primitives/alert';
-import { Badge } from '@documenso/ui/primitives/badge';
-import { Button } from '@documenso/ui/primitives/button';
-import { Progress } from '@documenso/ui/primitives/progress';
-
-// Get the return type from getRecipientByToken
-type RecipientWithFields = Awaited<ReturnType<typeof getRecipientByToken>>;
-
-interface DocumentEnvelope {
-  document: DocumentAndSender;
-  recipient: RecipientWithFields;
-}
-
-interface MultiSignDocumentListProps {
-  envelopes: DocumentEnvelope[];
-  onDocumentSelect: (document: DocumentEnvelope['document']) => void;
-}
-
-export function MultiSignDocumentList({ envelopes, onDocumentSelect }: MultiSignDocumentListProps) {
-  // Calculate progress
-  const completedDocuments = envelopes.filter(
-    (envelope) => envelope.recipient.signingStatus === SigningStatus.SIGNED,
-  );
-  const totalDocuments = envelopes.length;
-  const progressPercentage = (completedDocuments.length / totalDocuments) * 100;
-
-  // Find next document to sign (first one that's not signed and not rejected)
-  const nextDocumentToSign = envelopes.find(
-    (envelope) =>
-      envelope.recipient.signingStatus !== SigningStatus.SIGNED &&
-      envelope.recipient.signingStatus !== SigningStatus.REJECTED,
-  );
-
-  const allDocumentsCompleted = completedDocuments.length === totalDocuments;
-
-  const hasAssistantOrCcRecipient = envelopes.some(
-    (envelope) =>
-      envelope.recipient.role === RecipientRole.ASSISTANT ||
-      envelope.recipient.role === RecipientRole.CC,
-  );
-
-  function handleView(doc: DocumentEnvelope['document']) {
-    onDocumentSelect(doc);
-  }
-
-  function handleNextDocument() {
-    if (nextDocumentToSign) {
-      onDocumentSelect(nextDocumentToSign.document);
-    }
-  }
-
-  if (hasAssistantOrCcRecipient) {
-    return (
-      <div className="mx-auto mt-16 flex w-full max-w-lg flex-col md:mt-16 md:rounded-2xl md:border md:px-8 md:py-16 md:shadow-lg">
-        <div className="flex items-center justify-center">
-          <XCircle className="text-destructive h-16 w-16 md:h-24 md:w-24" strokeWidth={1.2} />
-        </div>
-
-        <h2 className="mt-12 text-xl font-bold md:text-2xl">
-          <Trans>It looks like we ran into an issue!</Trans>
-        </h2>
-
-        <p className="text-muted-foreground mt-6">
-          <Trans>
-            One of the documents in the current bundle has a signing role that is not compatible
-            with the current signing experience.
-          </Trans>
-        </p>
-
-        <p className="text-muted-foreground mt-2">
-          <Trans>
-            Assistants and Copy roles are currently not compatible with the multi-sign experience.
-          </Trans>
-        </p>
-
-        <p className="text-muted-foreground mt-2">
-          <Trans>Please contact the site owner for further assistance.</Trans>
-        </p>
-      </div>
-    );
-  }
-
-  return (
-    <div className="bg-background mx-auto w-full max-w-lg md:my-12 md:rounded-2xl md:border md:p-8 md:shadow-lg">
-      <h2 className="text-foreground mb-1 text-lg font-semibold">
-        <Trans>Sign Documents</Trans>
-      </h2>
-
-      <p className="text-muted-foreground text-sm">
-        <Trans>
-          You have been requested to sign the following documents. Review each document carefully
-          and complete the signing process.
-        </Trans>
-      </p>
-
-      {/* Progress Section */}
-      <div className="mt-6">
-        <div className="flex items-center justify-between text-sm">
-          <span className="text-muted-foreground font-medium">
-            <Trans>Progress</Trans>
-          </span>
-          <span className="text-muted-foreground">
-            {completedDocuments.length} of {totalDocuments} completed
-          </span>
-        </div>
-
-        <div className="mt-4">
-          <Progress value={progressPercentage} className="h-2" />
-        </div>
-      </div>
-
-      <div className="mt-6 flex flex-col gap-4">
-        {envelopes.map((envelope) => (
-          <div
-            key={envelope.document.id}
-            className="border-border flex items-center gap-4 rounded-lg border px-4 py-2"
-          >
-            <span className="text-foreground flex-1 truncate text-sm font-medium">
-              {envelope.document.title}
-            </span>
-
-            {match(envelope.recipient)
-              .with({ signingStatus: SigningStatus.SIGNED }, () => (
-                <Badge size="small" variant="default">
-                  <Trans>Completed</Trans>
-                </Badge>
-              ))
-              .with({ signingStatus: SigningStatus.REJECTED }, () => (
-                <Badge size="small" variant="destructive">
-                  <Trans>Rejected</Trans>
-                </Badge>
-              ))
-              .with({ readStatus: ReadStatus.OPENED }, () => (
-                <Badge size="small" variant="neutral">
-                  <Trans>Viewed</Trans>
-                </Badge>
-              ))
-              .otherwise(() => null)}
-
-            <Button
-              className="-mr-2"
-              variant="outline"
-              size="sm"
-              onClick={() => handleView(envelope.document)}
-            >
-              <EyeIcon className="mr-1 h-4 w-4" />
-              <Trans>View</Trans>
-            </Button>
-          </div>
-        ))}
-      </div>
-
-      {/* Next Document Button */}
-      {!allDocumentsCompleted && nextDocumentToSign && (
-        <div className="mt-6">
-          <Button onClick={handleNextDocument} className="w-full" size="lg">
-            <Trans>View next document</Trans>
-            <ArrowRight className="ml-2 h-4 w-4" />
-          </Button>
-        </div>
-      )}
-
-      {allDocumentsCompleted && (
-        <Alert className="mt-6 text-center">
-          <AlertTitle>
-            <Trans>All documents have been completed!</Trans>
-          </AlertTitle>
-          <AlertDescription>
-            <Trans>Thank you for completing the signing process.</Trans>
-          </AlertDescription>
-        </Alert>
-      )}
-    </div>
-  );
-}
--- a/apps/remix/app/components/embed/multisign/multi-sign-document-signing-view.tsx
+++ b/apps/remix/app/components/embed/multisign/multi-sign-document-signing-view.tsx
@ -1,396 +0,0 @@
-import { useState } from 'react';
-
-import { msg } from '@lingui/core/macro';
-import { useLingui } from '@lingui/react';
-import { Trans } from '@lingui/react/macro';
-import { DocumentStatus, FieldType, SigningStatus } from '@prisma/client';
-import { Loader, LucideChevronDown, LucideChevronUp, X } from 'lucide-react';
-import { P, match } from 'ts-pattern';
-
-import { PDF_VIEWER_PAGE_SELECTOR } from '@documenso/lib/constants/pdf-viewer';
-import { AppError, AppErrorCode } from '@documenso/lib/errors/app-error';
-import { trpc } from '@documenso/trpc/react';
-import type {
-  TRemovedSignedFieldWithTokenMutationSchema,
-  TSignFieldWithTokenMutationSchema,
-} from '@documenso/trpc/server/field-router/schema';
-import { DocumentReadOnlyFields } from '@documenso/ui/components/document/document-read-only-fields';
-import { FieldToolTip } from '@documenso/ui/components/field/field-tooltip';
-import { cn } from '@documenso/ui/lib/utils';
-import { Button } from '@documenso/ui/primitives/button';
-import { ElementVisible } from '@documenso/ui/primitives/element-visible';
-import { Input } from '@documenso/ui/primitives/input';
-import { Label } from '@documenso/ui/primitives/label';
-import PDFViewer from '@documenso/ui/primitives/pdf-viewer';
-import { SignaturePadDialog } from '@documenso/ui/primitives/signature-pad/signature-pad-dialog';
-import { useToast } from '@documenso/ui/primitives/use-toast';
-
-import { useRequiredDocumentSigningContext } from '../../general/document-signing/document-signing-provider';
-import { DocumentSigningRejectDialog } from '../../general/document-signing/document-signing-reject-dialog';
-import { EmbedDocumentFields } from '../embed-document-fields';
-
-interface MultiSignDocumentSigningViewProps {
-  token: string;
-  recipientId: number;
-  onBack: () => void;
-  onDocumentCompleted?: (data: { token: string; documentId: number; recipientId: number }) => void;
-  onDocumentRejected?: (data: {
-    token: string;
-    documentId: number;
-    recipientId: number;
-    reason: string;
-  }) => void;
-  onDocumentError?: () => void;
-  onDocumentReady?: () => void;
-  isNameLocked?: boolean;
-  allowDocumentRejection?: boolean;
-}
-
-export const MultiSignDocumentSigningView = ({
-  token,
-  recipientId,
-  onBack,
-  onDocumentCompleted,
-  onDocumentRejected,
-  onDocumentError,
-  onDocumentReady,
-  isNameLocked = false,
-  allowDocumentRejection = false,
-}: MultiSignDocumentSigningViewProps) => {
-  const { _ } = useLingui();
-  const { toast } = useToast();
-
-  const { fullName, email, signature, setFullName, setSignature } =
-    useRequiredDocumentSigningContext();
-
-  const [hasDocumentLoaded, setHasDocumentLoaded] = useState(false);
-
-  const [isExpanded, setIsExpanded] = useState(false);
-  const [isSubmitting, setIsSubmitting] = useState(false);
-  const [showPendingFieldTooltip, setShowPendingFieldTooltip] = useState(false);
-
-  const { data: document, isLoading } = trpc.embeddingPresign.getMultiSignDocument.useQuery(
-    { token },
-    {
-      staleTime: 0,
-    },
-  );
-
-  const { mutateAsync: signFieldWithToken } = trpc.field.signFieldWithToken.useMutation();
-  const { mutateAsync: removeSignedFieldWithToken } =
-    trpc.field.removeSignedFieldWithToken.useMutation();
-
-  const { mutateAsync: completeDocumentWithToken } =
-    trpc.recipient.completeDocumentWithToken.useMutation();
-
-  const hasSignatureField = document?.fields.some((field) => field.type === FieldType.SIGNATURE);
-
-  const [pendingFields, completedFields] = [
-    document?.fields.filter((field) => field.recipient.signingStatus !== SigningStatus.SIGNED) ??
-      [],
-    document?.fields.filter((field) => field.recipient.signingStatus === SigningStatus.SIGNED) ??
-      [],
-  ];
-
-  const uninsertedFields = document?.fields.filter((field) => !field.inserted) ?? [];
-
-  const onSignField = async (payload: TSignFieldWithTokenMutationSchema) => {
-    try {
-      await signFieldWithToken(payload);
-    } catch (err) {
-      const error = AppError.parseError(err);
-
-      if (error.code === AppErrorCode.UNAUTHORIZED) {
-        throw error;
-      }
-
-      console.error(err);
-
-      toast({
-        title: _(msg`Error`),
-        description: _(msg`An error occurred while signing the document.`),
-        variant: 'destructive',
-      });
-    }
-  };
-
-  const onUnsignField = async (payload: TRemovedSignedFieldWithTokenMutationSchema) => {
-    try {
-      await removeSignedFieldWithToken(payload);
-    } catch (err) {
-      const error = AppError.parseError(err);
-
-      if (error.code === AppErrorCode.UNAUTHORIZED) {
-        throw error;
-      }
-
-      console.error(err);
-    }
-  };
-
-  const onDocumentComplete = async () => {
-    try {
-      setIsSubmitting(true);
-
-      await completeDocumentWithToken({
-        documentId: document!.id,
-        token,
-      });
-
-      onBack();
-
-      onDocumentCompleted?.({
-        token,
-        documentId: document!.id,
-        recipientId,
-      });
-    } catch (err) {
-      onDocumentError?.();
-
-      toast({
-        title: 'Error',
-        description: 'Failed to complete the document. Please try again.',
-        variant: 'destructive',
-      });
-    } finally {
-      setIsSubmitting(false);
-    }
-  };
-
-  const onNextFieldClick = () => {
-    setShowPendingFieldTooltip(true);
-
-    setIsExpanded(false);
-  };
-
-  const onRejected = (reason: string) => {
-    if (onDocumentRejected && document) {
-      onDocumentRejected({
-        token,
-        documentId: document.id,
-        recipientId,
-        reason,
-      });
-    }
-  };
-
-  return (
-    <div className="bg-background min-h-screen overflow-hidden">
-      <div id="document-field-portal-root" className="relative h-full w-full overflow-y-auto p-8">
-        {match({ isLoading, document })
-          .with({ isLoading: true }, () => (
-            <div className="flex min-h-[400px] w-full items-center justify-center">
-              <div className="flex flex-col items-center gap-4">
-                <Loader className="text-primary h-8 w-8 animate-spin" />
-                <p className="text-muted-foreground text-sm">
-                  <Trans>Loading document...</Trans>
-                </p>
-              </div>
-            </div>
-          ))
-          .with({ isLoading: false, document: undefined }, () => (
-            <div className="flex min-h-[400px] w-full items-center justify-center">
-              <p className="text-muted-foreground text-sm">
-                <Trans>Failed to load document</Trans>
-              </p>
-            </div>
-          ))
-          .with({ document: P.nonNullable }, ({ document }) => (
-            <>
-              <div className="mx-auto flex w-full max-w-screen-xl items-baseline justify-between">
-                <div className="flex items-center gap-4">
-                  <h1 className="text-2xl font-semibold">{document.title}</h1>
-                </div>
-
-                <Button variant="ghost" size="sm" onClick={onBack} className="p-2">
-                  <X className="h-5 w-5" />
-                </Button>
-              </div>
-
-              {allowDocumentRejection && (
-                <div className="embed--Actions mb-4 mt-8 flex w-full flex-row-reverse items-baseline justify-between">
-                  <DocumentSigningRejectDialog
-                    document={document}
-                    token={token}
-                    onRejected={onRejected}
-                  />
-                </div>
-              )}
-
-              <div className="embed--DocumentContainer relative mx-auto mt-8 flex w-full max-w-screen-xl flex-col gap-x-6 gap-y-12 md:flex-row">
-                <div
-                  className={cn('embed--DocumentViewer flex-1', {
-                    'md:mx-auto md:max-w-2xl': document.status === DocumentStatus.COMPLETED,
-                  })}
-                >
-                  <PDFViewer
-                    documentData={document.documentData}
-                    onDocumentLoad={() => {
-                      setHasDocumentLoaded(true);
-                      onDocumentReady?.();
-                    }}
-                  />
-                </div>
-
-                {/* Widget */}
-                {document.status !== DocumentStatus.COMPLETED && (
-                  <div
-                    key={isExpanded ? 'expanded' : 'collapsed'}
-                    className="embed--DocumentWidgetContainer group/document-widget fixed bottom-8 left-0 z-50 h-fit max-h-[calc(100dvh-2rem)] w-full flex-shrink-0 px-6 md:sticky md:bottom-[unset] md:top-0 md:z-auto md:w-[350px] md:px-0"
-                    data-expanded={isExpanded || undefined}
-                  >
-                    <div className="embed--DocumentWidget border-border bg-widget flex w-full flex-col rounded-xl border px-4 py-4 md:py-6">
-                      {/* Header */}
-                      <div className="embed--DocumentWidgetHeader">
-                        <div className="flex items-center justify-between gap-x-2">
-                          <h3 className="text-foreground text-xl font-semibold md:text-2xl">
-                            <Trans>Sign document</Trans>
-                          </h3>
-
-                          <Button variant="outline" className="h-8 w-8 p-0 md:hidden">
-                            {isExpanded ? (
-                              <LucideChevronDown
-                                className="text-muted-foreground h-5 w-5"
-                                onClick={() => setIsExpanded(false)}
-                              />
-                            ) : (
-                              <LucideChevronUp
-                                className="text-muted-foreground h-5 w-5"
-                                onClick={() => setIsExpanded(true)}
-                              />
-                            )}
-                          </Button>
-                        </div>
-                      </div>
-
-                      <div className="embed--DocumentWidgetContent hidden group-data-[expanded]/document-widget:block md:block">
-                        <p className="text-muted-foreground mt-2 text-sm">
-                          <Trans>Sign the document to complete the process.</Trans>
-                        </p>
-
-                        <hr className="border-border mb-8 mt-4" />
-                      </div>
-
-                      {/* Form */}
-                      <div className="embed--DocumentWidgetForm -mx-2 hidden px-2 group-data-[expanded]/document-widget:block md:block">
-                        <div className="flex flex-1 flex-col gap-y-4">
-                          {
-                            <>
-                              <div>
-                                <Label htmlFor="full-name">
-                                  <Trans>Full Name</Trans>
-                                </Label>
-
-                                <Input
-                                  type="text"
-                                  id="full-name"
-                                  className="bg-background mt-2"
-                                  disabled={isNameLocked}
-                                  value={fullName}
-                                  onChange={(e) => !isNameLocked && setFullName(e.target.value)}
-                                />
-                              </div>
-
-                              <div>
-                                <Label htmlFor="email">
-                                  <Trans>Email</Trans>
-                                </Label>
-
-                                <Input
-                                  type="email"
-                                  id="email"
-                                  className="bg-background mt-2"
-                                  value={email}
-                                  disabled
-                                />
-                              </div>
-
-                              {hasSignatureField && (
-                                <div>
-                                  <Label htmlFor="Signature">
-                                    <Trans>Signature</Trans>
-                                  </Label>
-
-                                  <SignaturePadDialog
-                                    className="mt-2"
-                                    disabled={isSubmitting}
-                                    disableAnimation
-                                    value={signature ?? ''}
-                                    onChange={(v) => setSignature(v ?? '')}
-                                    typedSignatureEnabled={
-                                      document.documentMeta?.typedSignatureEnabled
-                                    }
-                                    uploadSignatureEnabled={
-                                      document.documentMeta?.uploadSignatureEnabled
-                                    }
-                                    drawSignatureEnabled={
-                                      document.documentMeta?.drawSignatureEnabled
-                                    }
-                                  />
-                                </div>
-                              )}
-                            </>
-                          }
-                        </div>
-                      </div>
-
-                      <div className="hidden flex-1 group-data-[expanded]/document-widget:block md:block" />
-
-                      <div className="embed--DocumentWidgetFooter mt-4 hidden w-full grid-cols-2 items-center group-data-[expanded]/document-widget:grid md:grid">
-                        {uninsertedFields.length > 0 ? (
-                          <Button className="col-start-2" onClick={onNextFieldClick}>
-                            <Trans>Next</Trans>
-                          </Button>
-                        ) : (
-                          <Button
-                            className="col-span-2"
-                            loading={isSubmitting}
-                            onClick={onDocumentComplete}
-                          >
-                            <Trans>Complete</Trans>
-                          </Button>
-                        )}
-                      </div>
-                    </div>
-                  </div>
-                )}
-              </div>
-
-              {hasDocumentLoaded && (
-                <ElementVisible target={PDF_VIEWER_PAGE_SELECTOR}>
-                  {showPendingFieldTooltip && pendingFields.length > 0 && (
-                    <FieldToolTip
-                      key={pendingFields[0].id}
-                      field={pendingFields[0]}
-                      color="warning"
-                    >
-                      <Trans>Click to insert field</Trans>
-                    </FieldToolTip>
-                  )}
-                </ElementVisible>
-              )}
-
-              {/* Fields */}
-              {hasDocumentLoaded && (
-                <EmbedDocumentFields
-                  fields={pendingFields}
-                  metadata={document.documentMeta}
-                  onSignField={onSignField}
-                  onUnsignField={onUnsignField}
-                />
-              )}
-
-              {/* Completed fields */}
-              {document.status !== DocumentStatus.COMPLETED && (
-                <DocumentReadOnlyFields
-                  documentMeta={document.documentMeta ?? undefined}
-                  fields={completedFields}
-                />
-              )}
-            </>
-          ))
-          .otherwise(() => null)}
-      </div>
-    </div>
-  );
-};
--- a/apps/remix/app/components/general/direct-template/direct-template-configure-form.tsx
+++ b/apps/remix/app/components/general/direct-template/direct-template-configure-form.tsx
@ -130,7 +130,7 @@ export const DirectTemplateConfigureForm = ({
                      {...field}
                      disabled={
                        field.disabled ||
-                        derivedRecipientAccessAuth.length > 0 ||
+                        derivedRecipientAccessAuth !== null ||
                        user?.email !== undefined
                      }
                      placeholder="recipient@documenso.com"
--- a/apps/remix/app/components/general/document-signing/document-signing-auth-dialog.tsx
+++ b/apps/remix/app/components/general/document-signing/document-signing-auth-dialog.tsx
@ -1,8 +1,5 @@
-import { useState } from 'react';
-
 import { Trans } from '@lingui/react/macro';
 import type { FieldType } from '@prisma/client';
-import { ChevronLeftIcon } from 'lucide-react';
 import { P, match } from 'ts-pattern';

 import {
@ -10,7 +7,6 @@ import {
  type TRecipientActionAuth,
  type TRecipientActionAuthTypes,
 } from '@documenso/lib/types/document-auth';
-import { Button } from '@documenso/ui/primitives/button';
 import {
  Dialog,
  DialogContent,
@ -22,12 +18,11 @@ import {
 import { DocumentSigningAuth2FA } from './document-signing-auth-2fa';
 import { DocumentSigningAuthAccount } from './document-signing-auth-account';
 import { DocumentSigningAuthPasskey } from './document-signing-auth-passkey';
-import { DocumentSigningAuthPassword } from './document-signing-auth-password';
 import { useRequiredDocumentSigningAuthContext } from './document-signing-auth-provider';

 export type DocumentSigningAuthDialogProps = {
  title?: string;
-  availableAuthTypes: TRecipientActionAuthTypes[];
+  documentAuthType: TRecipientActionAuthTypes;
  description?: string;
  actionTarget: FieldType | 'DOCUMENT';
  open: boolean;
@ -42,158 +37,54 @@ export type DocumentSigningAuthDialogProps = {
 export const DocumentSigningAuthDialog = ({
  title,
  description,
-  availableAuthTypes,
+  documentAuthType,
  open,
  onOpenChange,
  onReauthFormSubmit,
 }: DocumentSigningAuthDialogProps) => {
  const { recipient, user, isCurrentlyAuthenticating } = useRequiredDocumentSigningAuthContext();

-  // Filter out EXPLICIT_NONE from available auth types for the chooser
-  const validAuthTypes = availableAuthTypes.filter(
-    (authType) => authType !== DocumentAuth.EXPLICIT_NONE,
-  );
-
-  const [selectedAuthType, setSelectedAuthType] = useState<TRecipientActionAuthTypes | null>(() => {
-    // Auto-select if there's only one valid option
-    if (validAuthTypes.length === 1) {
-      return validAuthTypes[0];
-    }
-    // Return null if multiple options - show chooser
-    return null;
-  });
-
  const handleOnOpenChange = (value: boolean) => {
    if (isCurrentlyAuthenticating) {
      return;
    }

-    // Reset selected auth type when dialog closes
-    if (!value) {
-      setSelectedAuthType(() => {
-        if (validAuthTypes.length === 1) {
-          return validAuthTypes[0];
-        }
-
-        return null;
-      });
-    }
-
    onOpenChange(value);
  };

-  const handleBackToChooser = () => {
-    setSelectedAuthType(null);
-  };
-
-  // If no valid auth types available, don't render anything
-  if (validAuthTypes.length === 0) {
-    return null;
-  }
-
  return (
    <Dialog open={open} onOpenChange={handleOnOpenChange}>
      <DialogContent>
        <DialogHeader>
-          <DialogTitle>
-            {selectedAuthType && validAuthTypes.length > 1 && (
-              <div className="flex items-center gap-2">
-                <Button
-                  type="button"
-                  variant="ghost"
-                  size="sm"
-                  onClick={handleBackToChooser}
-                  className="h-6 w-6 p-0"
-                >
-                  <ChevronLeftIcon className="h-4 w-4" />
-                </Button>
-                <span>{title || <Trans>Sign field</Trans>}</span>
-              </div>
-            )}
-            {(!selectedAuthType || validAuthTypes.length === 1) &&
-              (title || <Trans>Sign field</Trans>)}
-          </DialogTitle>
+          <DialogTitle>{title || <Trans>Sign field</Trans>}</DialogTitle>

          <DialogDescription>
            {description || <Trans>Reauthentication is required to sign this field</Trans>}
          </DialogDescription>
        </DialogHeader>

-        {/* Show chooser if no auth type is selected and there are multiple options */}
-        {!selectedAuthType && validAuthTypes.length > 1 && (
-          <div className="space-y-4">
-            <p className="text-muted-foreground text-sm">
-              <Trans>Choose your preferred authentication method:</Trans>
-            </p>
-            <div className="grid gap-2">
-              {validAuthTypes.map((authType) => (
-                <Button
-                  key={authType}
-                  type="button"
-                  variant="outline"
-                  className="h-auto justify-start p-4"
-                  onClick={() => setSelectedAuthType(authType)}
-                >
-                  <div className="text-left">
-                    <div className="font-medium">
-                      {match(authType)
-                        .with(DocumentAuth.ACCOUNT, () => <Trans>Account</Trans>)
-                        .with(DocumentAuth.PASSKEY, () => <Trans>Passkey</Trans>)
-                        .with(DocumentAuth.TWO_FACTOR_AUTH, () => <Trans>2FA</Trans>)
-                        .with(DocumentAuth.PASSWORD, () => <Trans>Password</Trans>)
-                        .exhaustive()}
-                    </div>
-
-                    <div className="text-muted-foreground text-sm">
-                      {match(authType)
-                        .with(DocumentAuth.ACCOUNT, () => <Trans>Sign in to your account</Trans>)
-                        .with(DocumentAuth.PASSKEY, () => (
-                          <Trans>Use your passkey for authentication</Trans>
-                        ))
-                        .with(DocumentAuth.TWO_FACTOR_AUTH, () => (
-                          <Trans>Enter your 2FA code</Trans>
-                        ))
-                        .with(DocumentAuth.PASSWORD, () => <Trans>Enter your password</Trans>)
-                        .exhaustive()}
-                    </div>
-                  </div>
-                </Button>
-              ))}
-            </div>
-          </div>
-        )}
-
-        {/* Show the selected auth component */}
-        {selectedAuthType &&
-          match({ documentAuthType: selectedAuthType, user })
-            .with(
-              { documentAuthType: DocumentAuth.ACCOUNT },
-              { user: P.when((user) => !user || user.email !== recipient.email) }, // Assume all current auth methods requires them to be logged in.
-              () => <DocumentSigningAuthAccount onOpenChange={onOpenChange} />,
-            )
-            .with({ documentAuthType: DocumentAuth.PASSKEY }, () => (
-              <DocumentSigningAuthPasskey
-                open={open}
-                onOpenChange={onOpenChange}
-                onReauthFormSubmit={onReauthFormSubmit}
-              />
-            ))
-            .with({ documentAuthType: DocumentAuth.TWO_FACTOR_AUTH }, () => (
-              <DocumentSigningAuth2FA
-                open={open}
-                onOpenChange={onOpenChange}
-                onReauthFormSubmit={onReauthFormSubmit}
-              />
-            ))
-            .with({ documentAuthType: DocumentAuth.PASSWORD }, () => (
-              <DocumentSigningAuthPassword
-                open={open}
-                onOpenChange={onOpenChange}
-                onReauthFormSubmit={onReauthFormSubmit}
-              />
-            ))
-            .with({ documentAuthType: DocumentAuth.EXPLICIT_NONE }, () => null)
-            .exhaustive()}
+        {match({ documentAuthType, user })
+          .with(
+            { documentAuthType: DocumentAuth.ACCOUNT },
+            { user: P.when((user) => !user || user.email !== recipient.email) }, // Assume all current auth methods requires them to be logged in.
+            () => <DocumentSigningAuthAccount onOpenChange={onOpenChange} />,
+          )
+          .with({ documentAuthType: DocumentAuth.PASSKEY }, () => (
+            <DocumentSigningAuthPasskey
+              open={open}
+              onOpenChange={onOpenChange}
+              onReauthFormSubmit={onReauthFormSubmit}
+            />
+          ))
+          .with({ documentAuthType: DocumentAuth.TWO_FACTOR_AUTH }, () => (
+            <DocumentSigningAuth2FA
+              open={open}
+              onOpenChange={onOpenChange}
+              onReauthFormSubmit={onReauthFormSubmit}
+            />
+          ))
+          .with({ documentAuthType: DocumentAuth.EXPLICIT_NONE }, () => null)
+          .exhaustive()}
      </DialogContent>
    </Dialog>
  );
--- a/apps/remix/app/components/general/document-signing/document-signing-auth-password.tsx
+++ b/apps/remix/app/components/general/document-signing/document-signing-auth-password.tsx
@ -1,148 +0,0 @@
-import { useEffect, useState } from 'react';
-
-import { zodResolver } from '@hookform/resolvers/zod';
-import { Trans } from '@lingui/react/macro';
-import { useForm } from 'react-hook-form';
-import { z } from 'zod';
-
-import { AppError } from '@documenso/lib/errors/app-error';
-import { DocumentAuth, type TRecipientActionAuth } from '@documenso/lib/types/document-auth';
-import { Alert, AlertDescription, AlertTitle } from '@documenso/ui/primitives/alert';
-import { Button } from '@documenso/ui/primitives/button';
-import { DialogFooter } from '@documenso/ui/primitives/dialog';
-import {
-  Form,
-  FormControl,
-  FormField,
-  FormItem,
-  FormLabel,
-  FormMessage,
-} from '@documenso/ui/primitives/form/form';
-import { Input } from '@documenso/ui/primitives/input';
-
-import { useRequiredDocumentSigningAuthContext } from './document-signing-auth-provider';
-
-export type DocumentSigningAuthPasswordProps = {
-  actionTarget?: 'FIELD' | 'DOCUMENT';
-  actionVerb?: string;
-  open: boolean;
-  onOpenChange: (value: boolean) => void;
-  onReauthFormSubmit: (values?: TRecipientActionAuth) => Promise<void> | void;
-};
-
-const ZPasswordAuthFormSchema = z.object({
-  password: z
-    .string()
-    .min(1, { message: 'Password is required' })
-    .max(72, { message: 'Password must be at most 72 characters long' }),
-});
-
-type TPasswordAuthFormSchema = z.infer<typeof ZPasswordAuthFormSchema>;
-
-export const DocumentSigningAuthPassword = ({
-  actionTarget = 'FIELD',
-  actionVerb = 'sign',
-  onReauthFormSubmit,
-  open,
-  onOpenChange,
-}: DocumentSigningAuthPasswordProps) => {
-  const { recipient, isCurrentlyAuthenticating, setIsCurrentlyAuthenticating } =
-    useRequiredDocumentSigningAuthContext();
-
-  const form = useForm<TPasswordAuthFormSchema>({
-    resolver: zodResolver(ZPasswordAuthFormSchema),
-    defaultValues: {
-      password: '',
-    },
-  });
-
-  const [formErrorCode, setFormErrorCode] = useState<string | null>(null);
-
-  const onFormSubmit = async ({ password }: TPasswordAuthFormSchema) => {
-    try {
-      setIsCurrentlyAuthenticating(true);
-
-      await onReauthFormSubmit({
-        type: DocumentAuth.PASSWORD,
-        password,
-      });
-
-      setIsCurrentlyAuthenticating(false);
-
-      onOpenChange(false);
-    } catch (err) {
-      setIsCurrentlyAuthenticating(false);
-
-      const error = AppError.parseError(err);
-      setFormErrorCode(error.code);
-
-      // Todo: Alert.
-    }
-  };
-
-  useEffect(() => {
-    form.reset({
-      password: '',
-    });
-
-    setFormErrorCode(null);
-
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [open]);
-
-  return (
-    <Form {...form}>
-      <form onSubmit={form.handleSubmit(onFormSubmit)}>
-        <fieldset disabled={isCurrentlyAuthenticating}>
-          <div className="space-y-4">
-            {formErrorCode && (
-              <Alert variant="destructive">
-                <AlertTitle>
-                  <Trans>Unauthorized</Trans>
-                </AlertTitle>
-                <AlertDescription>
-                  <Trans>
-                    We were unable to verify your details. Please try again or contact support
-                  </Trans>
-                </AlertDescription>
-              </Alert>
-            )}
-
-            <FormField
-              control={form.control}
-              name="password"
-              render={({ field }) => (
-                <FormItem>
-                  <FormLabel required>
-                    <Trans>Password</Trans>
-                  </FormLabel>
-
-                  <FormControl>
-                    <Input
-                      type="password"
-                      placeholder="Enter your password"
-                      {...field}
-                      autoComplete="current-password"
-                    />
-                  </FormControl>
-
-                  <FormMessage />
-                </FormItem>
-              )}
-            />
-
-            <DialogFooter>
-              <Button type="button" variant="secondary" onClick={() => onOpenChange(false)}>
-                <Trans>Cancel</Trans>
-              </Button>
-
-              <Button type="submit" loading={isCurrentlyAuthenticating}>
-                <Trans>Sign</Trans>
-              </Button>
-            </DialogFooter>
-          </div>
-        </fieldset>
-      </form>
-    </Form>
-  );
-};
--- a/apps/remix/app/components/general/document-signing/document-signing-auth-provider.tsx
+++ b/apps/remix/app/components/general/document-signing/document-signing-auth-provider.tsx
@ -1,6 +1,7 @@
 import { createContext, useContext, useEffect, useMemo, useState } from 'react';

 import { type Document, FieldType, type Passkey, type Recipient } from '@prisma/client';
+import { match } from 'ts-pattern';

 import type { SessionUser } from '@documenso/auth/server/lib/session/session';
 import { MAXIMUM_PASSKEYS } from '@documenso/lib/constants/auth';
@ -32,8 +33,8 @@ export type DocumentSigningAuthContextValue = {
  recipient: Recipient;
  recipientAuthOption: TRecipientAuthOptions;
  setRecipient: (_value: Recipient) => void;
-  derivedRecipientAccessAuth: TRecipientAccessAuthTypes[];
-  derivedRecipientActionAuth: TRecipientActionAuthTypes[];
+  derivedRecipientAccessAuth: TRecipientAccessAuthTypes | null;
+  derivedRecipientActionAuth: TRecipientActionAuthTypes | null;
  isAuthRedirectRequired: boolean;
  isCurrentlyAuthenticating: boolean;
  setIsCurrentlyAuthenticating: (_value: boolean) => void;
@ -99,7 +100,7 @@ export const DocumentSigningAuthProvider = ({
    },
    {
      placeholderData: (previousData) => previousData,
-      enabled: derivedRecipientActionAuth?.includes(DocumentAuth.PASSKEY) ?? false,
+      enabled: derivedRecipientActionAuth === DocumentAuth.PASSKEY,
    },
  );

@ -120,28 +121,21 @@ export const DocumentSigningAuthProvider = ({
   * Will be `null` if the user still requires authentication, or if they don't need
   * authentication.
   */
-  const preCalculatedActionAuthOptions = useMemo(() => {
-    if (
-      !derivedRecipientActionAuth ||
-      derivedRecipientActionAuth.length === 0 ||
-      derivedRecipientActionAuth.includes(DocumentAuth.EXPLICIT_NONE)
-    ) {
-      return {
-        type: DocumentAuth.EXPLICIT_NONE,
-      };
-    }
+  const preCalculatedActionAuthOptions = match(derivedRecipientActionAuth)
+    .with(DocumentAuth.ACCOUNT, () => {
+      if (recipient.email !== user?.email) {
+        return null;
+      }

-    if (
-      derivedRecipientActionAuth.includes(DocumentAuth.ACCOUNT) &&
-      user?.email == recipient.email
-    ) {
      return {
        type: DocumentAuth.ACCOUNT,
      };
-    }
-
-    return null;
-  }, [derivedRecipientActionAuth, user, recipient]);
+    })
+    .with(DocumentAuth.EXPLICIT_NONE, () => ({
+      type: DocumentAuth.EXPLICIT_NONE,
+    }))
+    .with(DocumentAuth.PASSKEY, DocumentAuth.TWO_FACTOR_AUTH, null, () => null)
+    .exhaustive();

  const executeActionAuthProcedure = async (options: ExecuteActionAuthProcedureOptions) => {
    // Directly run callback if no auth required.
@ -176,8 +170,7 @@ export const DocumentSigningAuthProvider = ({
  // Assume that a user must be logged in for any auth requirements.
  const isAuthRedirectRequired = Boolean(
    derivedRecipientActionAuth &&
-      derivedRecipientActionAuth.length > 0 &&
-      !derivedRecipientActionAuth.includes(DocumentAuth.EXPLICIT_NONE) &&
+      derivedRecipientActionAuth !== DocumentAuth.EXPLICIT_NONE &&
      user?.email !== recipient.email,
  );

@ -215,7 +208,7 @@ export const DocumentSigningAuthProvider = ({
          onOpenChange={() => setDocumentAuthDialogPayload(null)}
          onReauthFormSubmit={documentAuthDialogPayload.onReauthFormSubmit}
          actionTarget={documentAuthDialogPayload.actionTarget}
-          availableAuthTypes={derivedRecipientActionAuth}
+          documentAuthType={derivedRecipientActionAuth}
        />
      )}
    </DocumentSigningAuthContext.Provider>
@ -224,7 +217,7 @@ export const DocumentSigningAuthProvider = ({

 type ExecuteActionAuthProcedureOptions = Omit<
  DocumentSigningAuthDialogProps,
-  'open' | 'onOpenChange' | 'documentAuthType' | 'recipientRole' | 'availableAuthTypes'
+  'open' | 'onOpenChange' | 'documentAuthType' | 'recipientRole'
 >;

 DocumentSigningAuthProvider.displayName = 'DocumentSigningAuthProvider';
--- a/apps/remix/app/components/general/document-signing/document-signing-auto-sign.tsx
+++ b/apps/remix/app/components/general/document-signing/document-signing-auto-sign.tsx
@ -44,7 +44,6 @@ const AUTO_SIGNABLE_FIELD_TYPES: string[] = [
 // other field types.
 const NON_AUTO_SIGNABLE_ACTION_AUTH_TYPES: string[] = [
  DocumentAuth.PASSKEY,
-  DocumentAuth.PASSWORD,
  DocumentAuth.TWO_FACTOR_AUTH,
 ];

@ -97,8 +96,8 @@ export const DocumentSigningAutoSign = ({ recipient, fields }: DocumentSigningAu
    return true;
  });

-  const actionAuthAllowsAutoSign = derivedRecipientActionAuth.every(
-    (actionAuth) => !NON_AUTO_SIGNABLE_ACTION_AUTH_TYPES.includes(actionAuth),
+  const actionAuthAllowsAutoSign = !NON_AUTO_SIGNABLE_ACTION_AUTH_TYPES.includes(
+    derivedRecipientActionAuth ?? '',
  );

  const onSubmit = async () => {
@ -111,16 +110,16 @@ export const DocumentSigningAutoSign = ({ recipient, fields }: DocumentSigningAu
          .with(FieldType.DATE, () => new Date().toISOString())
          .otherwise(() => '');

-        const authOptions = match(derivedRecipientActionAuth.at(0))
+        const authOptions = match(derivedRecipientActionAuth)
          .with(DocumentAuth.ACCOUNT, () => ({
            type: DocumentAuth.ACCOUNT,
          }))
          .with(DocumentAuth.EXPLICIT_NONE, () => ({
            type: DocumentAuth.EXPLICIT_NONE,
          }))
-          .with(undefined, () => undefined)
+          .with(null, () => undefined)
          .with(
-            P.union(DocumentAuth.PASSKEY, DocumentAuth.TWO_FACTOR_AUTH, DocumentAuth.PASSWORD),
+            P.union(DocumentAuth.PASSKEY, DocumentAuth.TWO_FACTOR_AUTH),
            // This is a bit dirty, but the sentinel value used here is incredibly short-lived.
            () => 'NOT_SUPPORTED' as const,
          )
--- a/apps/remix/app/components/general/document-signing/document-signing-complete-dialog.tsx
+++ b/apps/remix/app/components/general/document-signing/document-signing-complete-dialog.tsx
@ -92,6 +92,8 @@ export const DocumentSigningCompleteDialog = ({
  };

  const onFormSubmit = async (data: TNextSignerFormSchema) => {
+    console.log('data', data);
+    console.log('form.formState.errors', form.formState.errors);
    try {
      if (allowDictateNextSigner && data.name && data.email) {
        await onSignatureComplete({ name: data.name, email: data.email });
--- a/apps/remix/app/components/general/document-signing/document-signing-field-container.tsx
+++ b/apps/remix/app/components/general/document-signing/document-signing-field-container.tsx
@ -166,7 +166,7 @@ export const DocumentSigningFieldContainer = ({
            </TooltipTrigger>

            <TooltipContent
-              className="border-0 bg-orange-300 fill-orange-300 text-orange-900"
+              className="border-0 bg-orange-300 fill-orange-300 font-bold text-orange-900"
              sideOffset={2}
            >
              {tooltipText && <p>{tooltipText}</p>}
--- a/apps/remix/app/components/general/document/document-edit-form.tsx
+++ b/apps/remix/app/components/general/document/document-edit-form.tsx
@ -183,8 +183,8 @@ export const DocumentEditForm = ({
          title: data.title,
          externalId: data.externalId || null,
          visibility: data.visibility,
-          globalAccessAuth: data.globalAccessAuth ?? [],
-          globalActionAuth: data.globalActionAuth ?? [],
+          globalAccessAuth: data.globalAccessAuth ?? null,
+          globalActionAuth: data.globalActionAuth ?? null,
        },
        meta: {
          timezone,
@ -229,7 +229,7 @@ export const DocumentEditForm = ({
          recipients: data.signers.map((signer) => ({
            ...signer,
            // Explicitly set to null to indicate we want to remove auth if required.
-            actionAuth: signer.actionAuth ?? [],
+            actionAuth: signer.actionAuth || null,
          })),
        }),
      ]);
--- a/apps/remix/app/components/general/document/document-history-sheet.tsx
+++ b/apps/remix/app/components/general/document/document-history-sheet.tsx
@ -81,15 +81,11 @@ export const DocumentHistorySheet = ({
   * @param text The text to format
   * @returns The formatted text
   */
-  const formatGenericText = (text?: string | string[] | null): string => {
+  const formatGenericText = (text?: string | null) => {
    if (!text) {
      return '';
    }

-    if (Array.isArray(text)) {
-      return text.map((t) => formatGenericText(t)).join(', ');
-    }
-
    return (text.charAt(0).toUpperCase() + text.slice(1).toLowerCase()).replaceAll('_', ' ');
  };

@ -249,19 +245,11 @@ export const DocumentHistorySheet = ({
                        values={[
                          {
                            key: 'Old',
-                            value: Array.isArray(data.from)
-                              ? data.from
-                                  .map((f) => DOCUMENT_AUTH_TYPES[f]?.value || 'None')
-                                  .join(', ')
-                              : DOCUMENT_AUTH_TYPES[data.from || '']?.value || 'None',
+                            value: DOCUMENT_AUTH_TYPES[data.from || '']?.value || 'None',
                          },
                          {
                            key: 'New',
-                            value: Array.isArray(data.to)
-                              ? data.to
-                                  .map((f) => DOCUMENT_AUTH_TYPES[f]?.value || 'None')
-                                  .join(', ')
-                              : DOCUMENT_AUTH_TYPES[data.to || '']?.value || 'None',
+                            value: DOCUMENT_AUTH_TYPES[data.to || '']?.value || 'None',
                          },
                        ]}
                      />
--- a/apps/remix/app/components/general/template/template-edit-form.tsx
+++ b/apps/remix/app/components/general/template/template-edit-form.tsx
@ -134,8 +134,8 @@ export const TemplateEditForm = ({
          title: data.title,
          externalId: data.externalId || null,
          visibility: data.visibility,
-          globalAccessAuth: data.globalAccessAuth ?? [],
-          globalActionAuth: data.globalActionAuth ?? [],
+          globalAccessAuth: data.globalAccessAuth ?? null,
+          globalActionAuth: data.globalActionAuth ?? null,
        },
        meta: {
          ...data.meta,
--- a/apps/remix/app/components/general/webhook-multiselect-combobox.tsx
+++ b/apps/remix/app/components/general/webhook-multiselect-combobox.tsx
@ -1,47 +1,96 @@
-import { msg } from '@lingui/core/macro';
-import { useLingui } from '@lingui/react';
+import { useEffect, useState } from 'react';
+
+import { Plural, Trans } from '@lingui/react/macro';
 import { WebhookTriggerEvents } from '@prisma/client';
+import { Check, ChevronsUpDown } from 'lucide-react';

 import { toFriendlyWebhookEventName } from '@documenso/lib/universal/webhook/to-friendly-webhook-event-name';
-import { MultiSelect, type Option } from '@documenso/ui/primitives/multiselect';
+import { cn } from '@documenso/ui/lib/utils';
+import { Button } from '@documenso/ui/primitives/button';
+import {
+  Command,
+  CommandEmpty,
+  CommandGroup,
+  CommandInput,
+  CommandItem,
+} from '@documenso/ui/primitives/command';
+import { Popover, PopoverContent, PopoverTrigger } from '@documenso/ui/primitives/popover';
+
+import { truncateTitle } from '~/utils/truncate-title';

 type WebhookMultiSelectComboboxProps = {
  listValues: string[];
  onChange: (_values: string[]) => void;
 };

-const triggerEvents = Object.values(WebhookTriggerEvents).map((event) => ({
-  value: event,
-  label: toFriendlyWebhookEventName(event),
-}));
-
 export const WebhookMultiSelectCombobox = ({
  listValues,
  onChange,
 }: WebhookMultiSelectComboboxProps) => {
-  const { _ } = useLingui();
+  const [isOpen, setIsOpen] = useState(false);
+  const [selectedValues, setSelectedValues] = useState<string[]>([]);

-  const value = listValues.map((event) => ({
-    value: event,
-    label: toFriendlyWebhookEventName(event),
-  }));
+  const triggerEvents = Object.values(WebhookTriggerEvents);

-  const onMutliSelectChange = (options: Option[]) => {
-    onChange(options.map((option) => option.value));
+  useEffect(() => {
+    setSelectedValues(listValues);
+  }, [listValues]);
+
+  const allEvents = [...new Set([...triggerEvents, ...selectedValues])];
+
+  const handleSelect = (currentValue: string) => {
+    let newSelectedValues;
+
+    if (selectedValues.includes(currentValue)) {
+      newSelectedValues = selectedValues.filter((value) => value !== currentValue);
+    } else {
+      newSelectedValues = [...selectedValues, currentValue];
+    }
+
+    setSelectedValues(newSelectedValues);
+    onChange(newSelectedValues);
+    setIsOpen(false);
  };

  return (
-    <MultiSelect
-      commandProps={{
-        label: _(msg`Select triggers`),
-      }}
-      defaultOptions={triggerEvents}
-      value={value}
-      onChange={onMutliSelectChange}
-      placeholder={_(msg`Select triggers`)}
-      hideClearAllButton
-      hidePlaceholderWhenSelected
-      emptyIndicator={<p className="text-center text-sm">No triggers available</p>}
-    />
+    <Popover open={isOpen} onOpenChange={setIsOpen}>
+      <PopoverTrigger asChild>
+        <Button
+          variant="outline"
+          role="combobox"
+          aria-expanded={isOpen}
+          className="w-[200px] justify-between"
+        >
+          <Plural value={selectedValues.length} zero="Select values" other="# selected..." />
+          <ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
+        </Button>
+      </PopoverTrigger>
+      <PopoverContent className="z-9999 w-full max-w-[280px] p-0">
+        <Command>
+          <CommandInput
+            placeholder={truncateTitle(
+              selectedValues.map((v) => toFriendlyWebhookEventName(v)).join(', '),
+              15,
+            )}
+          />
+          <CommandEmpty>
+            <Trans>No value found.</Trans>
+          </CommandEmpty>
+          <CommandGroup>
+            {allEvents.map((value: string, i: number) => (
+              <CommandItem key={i} onSelect={() => handleSelect(value)}>
+                <Check
+                  className={cn(
+                    'mr-2 h-4 w-4',
+                    selectedValues.includes(value) ? 'opacity-100' : 'opacity-0',
+                  )}
+                />
+                {toFriendlyWebhookEventName(value)}
+              </CommandItem>
+            ))}
+          </CommandGroup>
+        </Command>
+      </PopoverContent>
+    </Popover>
  );
 };
--- a/apps/remix/app/components/tables/documents-table-action-dropdown.tsx
+++ b/apps/remix/app/components/tables/documents-table-action-dropdown.tsx
@ -10,8 +10,6 @@ import {
  Download,
  Edit,
  EyeIcon,
-  FileDown,
-  FolderInput,
  Loader,
  MoreHorizontal,
  MoveRight,
@ -184,7 +182,7 @@ export const DocumentsTableActionDropdown = ({
        </DropdownMenuItem>

        <DropdownMenuItem onClick={onDownloadOriginalClick}>
-          <FileDown className="mr-2 h-4 w-4" />
+          <Download className="mr-2 h-4 w-4" />
          <Trans>Download Original</Trans>
        </DropdownMenuItem>

@ -203,7 +201,7 @@ export const DocumentsTableActionDropdown = ({

        {onMoveDocument && (
          <DropdownMenuItem onClick={onMoveDocument} onSelect={(e) => e.preventDefault()}>
-            <FolderInput className="mr-2 h-4 w-4" />
+            <MoveRight className="mr-2 h-4 w-4" />
            <Trans>Move to Folder</Trans>
          </DropdownMenuItem>
        )}
--- a/apps/remix/app/components/tables/templates-table-action-dropdown.tsx
+++ b/apps/remix/app/components/tables/templates-table-action-dropdown.tsx
@ -69,6 +69,8 @@ export const TemplatesTableActionDropdown = ({
    ? `${templateRootPath}/f/${row.folderId}/${row.id}/edit`
    : `${templateRootPath}/${row.id}/edit`;

+  
+
  return (
    <DropdownMenu>
      <DropdownMenuTrigger data-testid="template-table-action-btn">
--- a/apps/remix/app/routes/_internal+/[__htmltopdf]+/certificate.tsx
+++ b/apps/remix/app/routes/_internal+/[__htmltopdf]+/certificate.tsx
@ -3,7 +3,6 @@ import { useLingui } from '@lingui/react';
 import { FieldType, SigningStatus } from '@prisma/client';
 import { DateTime } from 'luxon';
 import { redirect } from 'react-router';
-import { prop, sortBy } from 'remeda';
 import { match } from 'ts-pattern';
 import { UAParser } from 'ua-parser-js';
 import { renderSVG } from 'uqr';
@ -18,7 +17,6 @@ import {
 import { getEntireDocument } from '@documenso/lib/server-only/admin/get-entire-document';
 import { decryptSecondaryData } from '@documenso/lib/server-only/crypto/decrypt';
 import { getDocumentCertificateAuditLogs } from '@documenso/lib/server-only/document/get-document-certificate-audit-logs';
-import { getTeamById } from '@documenso/lib/server-only/team/get-team';
 import { DOCUMENT_AUDIT_LOG_TYPE } from '@documenso/lib/types/document-audit-logs';
 import { extractDocumentAuthMethods } from '@documenso/lib/utils/document-auth';
 import { getTranslations } from '@documenso/lib/utils/i18n';
@ -64,10 +62,6 @@ export async function loader({ request }: Route.LoaderArgs) {
    throw redirect('/');
  }

-  const team = document.teamId
-    ? await getTeamById({ teamId: document.teamId, userId: document.userId })
-    : null;
-
  const isPlatformDocument = await isDocumentPlatform(document);

  const documentLanguage = ZSupportedLanguageCodeSchema.parse(document.documentMeta?.language);
@ -80,7 +74,6 @@ export async function loader({ request }: Route.LoaderArgs) {

  return {
    document,
-    team,
    documentLanguage,
    isPlatformDocument,
    auditLogs,
@ -98,7 +91,7 @@ export async function loader({ request }: Route.LoaderArgs) {
 * Update: Maybe <Trans> tags work now after RR7 migration.
 */
 export default function SigningCertificate({ loaderData }: Route.ComponentProps) {
-  const { document, team, documentLanguage, isPlatformDocument, auditLogs, messages } = loaderData;
+  const { document, documentLanguage, isPlatformDocument, auditLogs, messages } = loaderData;

  const { i18n, _ } = useLingui();

@ -134,30 +127,18 @@ export default function SigningCertificate({ loaderData }: Route.ComponentProps)
      recipientAuth: recipient.authOptions,
    });

-    const insertedAuditLogsWithFieldAuth = sortBy(
-      auditLogs.DOCUMENT_FIELD_INSERTED.filter(
-        (log) => log.data.recipientId === recipient.id && log.data.fieldSecurity,
-      ),
-      [prop('createdAt'), 'desc'],
-    );
-
-    const actionAuthMethod = insertedAuditLogsWithFieldAuth.at(0)?.data?.fieldSecurity?.type;
-
-    let authLevel = match(actionAuthMethod)
+    let authLevel = match(extractedAuthMethods.derivedRecipientActionAuth)
      .with('ACCOUNT', () => _(msg`Account Re-Authentication`))
      .with('TWO_FACTOR_AUTH', () => _(msg`Two-Factor Re-Authentication`))
-      .with('PASSWORD', () => _(msg`Password Re-Authentication`))
      .with('PASSKEY', () => _(msg`Passkey Re-Authentication`))
      .with('EXPLICIT_NONE', () => _(msg`Email`))
-      .with(undefined, () => null)
+      .with(null, () => null)
      .exhaustive();

    if (!authLevel) {
-      const accessAuthMethod = extractedAuthMethods.derivedRecipientAccessAuth.at(0);
-
-      authLevel = match(accessAuthMethod)
+      authLevel = match(extractedAuthMethods.derivedRecipientAccessAuth)
        .with('ACCOUNT', () => _(msg`Account Authentication`))
-        .with(undefined, () => _(msg`Email`))
+        .with(null, () => _(msg`Email`))
        .exhaustive();
    }

@ -362,7 +343,7 @@ export default function SigningCertificate({ loaderData }: Route.ComponentProps)
        </CardContent>
      </Card>

-      {!isPlatformDocument && !team?.teamGlobalSettings?.brandingHidePoweredBy && (
+      {isPlatformDocument && (
        <div className="my-8 flex-row-reverse space-y-4">
          <div className="flex items-end justify-end gap-x-4">
            <div
--- a/apps/remix/app/routes/_recipient+/d.$token+/_index.tsx
+++ b/apps/remix/app/routes/_recipient+/d.$token+/_index.tsx
@ -47,9 +47,9 @@ export async function loader({ params, request }: Route.LoaderArgs) {
  });

  // Ensure typesafety when we add more options.
-  const isAccessAuthValid = match(derivedRecipientAccessAuth.at(0))
+  const isAccessAuthValid = match(derivedRecipientAccessAuth)
    .with(DocumentAccessAuth.ACCOUNT, () => Boolean(session.user))
-    .with(undefined, () => true)
+    .with(null, () => true)
    .exhaustive();

  if (!isAccessAuthValid) {
--- a/apps/remix/app/routes/_recipient+/sign.$token+/complete.tsx
+++ b/apps/remix/app/routes/_recipient+/sign.$token+/complete.tsx
@ -119,7 +119,7 @@ export default function CompletedSigningPage({ loaderData }: Route.ComponentProp
  return (
    <div
      className={cn(
-        '-mx-4 flex flex-col items-center overflow-hidden px-4 pt-24 md:-mx-8 md:px-8 lg:pt-36 xl:pt-44',
+        '-mx-4 flex flex-col items-center overflow-x-hidden px-4 pt-24 md:-mx-8 md:px-8 lg:pt-36 xl:pt-44',
        { 'pt-0 lg:pt-0 xl:pt-0': canSignUp },
      )}
    >
--- a/apps/remix/app/routes/embed+/_v0+/direct.$url.tsx
+++ b/apps/remix/app/routes/embed+/_v0+/direct.$url.tsx
@ -68,9 +68,9 @@ export async function loader({ params, request }: Route.LoaderArgs) {
    }),
  ]);

-  const isAccessAuthValid = match(derivedRecipientAccessAuth.at(0))
-    .with(DocumentAccessAuth.ACCOUNT, () => !!user)
-    .with(undefined, () => true)
+  const isAccessAuthValid = match(derivedRecipientAccessAuth)
+    .with(DocumentAccessAuth.ACCOUNT, () => user !== null)
+    .with(null, () => true)
    .exhaustive();

  if (!isAccessAuthValid) {
--- a/apps/remix/app/routes/embed+/_v0+/sign.$url.tsx
+++ b/apps/remix/app/routes/embed+/_v0+/sign.$url.tsx
@ -81,9 +81,9 @@ export async function loader({ params, request }: Route.LoaderArgs) {
    documentAuth: document.authOptions,
  });

-  const isAccessAuthValid = match(derivedRecipientAccessAuth.at(0))
-    .with(DocumentAccessAuth.ACCOUNT, () => user && user.email === recipient.email)
-    .with(undefined, () => true)
+  const isAccessAuthValid = match(derivedRecipientAccessAuth)
+    .with(DocumentAccessAuth.ACCOUNT, () => user !== null)
+    .with(null, () => true)
    .exhaustive();

  if (!isAccessAuthValid) {
--- a/apps/remix/app/routes/embed+/v1+/multisign+/_index.tsx
+++ b/apps/remix/app/routes/embed+/v1+/multisign+/_index.tsx
@ -1,325 +0,0 @@
-import { useEffect, useLayoutEffect, useState } from 'react';
-
-import { SigningStatus } from '@prisma/client';
-import { useRevalidator } from 'react-router';
-
-import { getOptionalSession } from '@documenso/auth/server/lib/utils/get-session';
-import { isCommunityPlan as isUserCommunityPlan } from '@documenso/ee/server-only/util/is-community-plan';
-import { isUserEnterprise } from '@documenso/ee/server-only/util/is-document-enterprise';
-import { isDocumentPlatform } from '@documenso/ee/server-only/util/is-document-platform';
-import { getDocumentAndSenderByToken } from '@documenso/lib/server-only/document/get-document-by-token';
-import { getRecipientByToken } from '@documenso/lib/server-only/recipient/get-recipient-by-token';
-import { getTeamById } from '@documenso/lib/server-only/team/get-team';
-
-import { BrandingLogo } from '~/components/general/branding-logo';
-import { DocumentSigningAuthProvider } from '~/components/general/document-signing/document-signing-auth-provider';
-import { DocumentSigningProvider } from '~/components/general/document-signing/document-signing-provider';
-import { DocumentSigningRecipientProvider } from '~/components/general/document-signing/document-signing-recipient-provider';
-import { ZSignDocumentEmbedDataSchema } from '~/types/embed-document-sign-schema';
-import { injectCss } from '~/utils/css-vars';
-import { superLoaderJson, useSuperLoaderData } from '~/utils/super-json-loader';
-
-import { MultiSignDocumentList } from '../../../../components/embed/multisign/multi-sign-document-list';
-import { MultiSignDocumentSigningView } from '../../../../components/embed/multisign/multi-sign-document-signing-view';
-import type { Route } from './+types/_index';
-
-export async function loader({ request }: Route.LoaderArgs) {
-  const { user } = await getOptionalSession(request);
-
-  const url = new URL(request.url);
-
-  const tokens = url.searchParams.getAll('token');
-
-  const envelopes = await Promise.all(
-    tokens.map(async (token) => {
-      const document = await getDocumentAndSenderByToken({
-        token,
-      });
-
-      const recipient = await getRecipientByToken({ token });
-
-      return { document, recipient };
-    }),
-  );
-
-  // Check the first envelope for whitelabelling settings (assuming all docs are from same team)
-  const firstDocument = envelopes[0]?.document;
-
-  if (!firstDocument) {
-    return superLoaderJson({
-      envelopes,
-      user,
-      hidePoweredBy: false,
-      allowWhitelabelling: false,
-    });
-  }
-
-  const team = firstDocument.teamId
-    ? await getTeamById({ teamId: firstDocument.teamId, userId: firstDocument.userId }).catch(
-        () => null,
-      )
-    : null;
-
-  const [isPlatformDocument, isEnterpriseDocument, isCommunityPlan] = await Promise.all([
-    isDocumentPlatform(firstDocument),
-    isUserEnterprise({
-      userId: firstDocument.userId,
-      teamId: firstDocument.teamId ?? undefined,
-    }),
-    isUserCommunityPlan({
-      userId: firstDocument.userId,
-      teamId: firstDocument.teamId ?? undefined,
-    }),
-  ]);
-
-  const hidePoweredBy = team?.teamGlobalSettings?.brandingHidePoweredBy ?? false;
-  const allowWhitelabelling = isCommunityPlan || isPlatformDocument || isEnterpriseDocument;
-
-  return superLoaderJson({
-    envelopes,
-    user,
-    hidePoweredBy,
-    allowWhitelabelling,
-  });
-}
-
-export default function MultisignPage() {
-  const { envelopes, user, hidePoweredBy, allowWhitelabelling } =
-    useSuperLoaderData<typeof loader>();
-  const revalidator = useRevalidator();
-
-  const [selectedDocument, setSelectedDocument] = useState<
-    (typeof envelopes)[number]['document'] | null
-  >(null);
-
-  // Additional state for embed functionality
-  const [hasFinishedInit, setHasFinishedInit] = useState(false);
-  const [isNameLocked, setIsNameLocked] = useState(false);
-  const [allowDocumentRejection, setAllowDocumentRejection] = useState(false);
-  const [showOtherRecipientsCompletedFields, setShowOtherRecipientsCompletedFields] =
-    useState(false);
-  const [embedFullName, setEmbedFullName] = useState('');
-
-  // Check if all documents are completed
-  const isCompleted = envelopes.every(
-    (envelope) => envelope.recipient.signingStatus === SigningStatus.SIGNED,
-  );
-
-  const selectedRecipient = selectedDocument
-    ? envelopes.find((e) => e.document.id === selectedDocument.id)?.recipient
-    : null;
-
-  const onSelectDocument = (document: (typeof envelopes)[number]['document']) => {
-    setSelectedDocument(document);
-  };
-
-  const onBackToDocumentList = () => {
-    setSelectedDocument(null);
-    // Revalidate to fetch fresh data when returning to document list
-    void revalidator.revalidate();
-  };
-
-  const onDocumentCompleted = (data: {
-    token: string;
-    documentId: number;
-    recipientId: number;
-  }) => {
-    // Send postMessage for individual document completion
-    if (window.parent) {
-      window.parent.postMessage(
-        {
-          action: 'document-completed',
-          data: {
-            token: data.token,
-            documentId: data.documentId,
-            recipientId: data.recipientId,
-          },
-        },
-        '*',
-      );
-    }
-  };
-
-  const onDocumentRejected = (data: {
-    token: string;
-    documentId: number;
-    recipientId: number;
-    reason: string;
-  }) => {
-    // Send postMessage for document rejection
-    if (window.parent) {
-      window.parent.postMessage(
-        {
-          action: 'document-rejected',
-          data: {
-            token: data.token,
-            documentId: data.documentId,
-            recipientId: data.recipientId,
-            reason: data.reason,
-          },
-        },
-        '*',
-      );
-    }
-  };
-
-  const onDocumentError = () => {
-    // Send postMessage for document error
-    if (window.parent) {
-      window.parent.postMessage(
-        {
-          action: 'document-error',
-          data: null,
-        },
-        '*',
-      );
-    }
-  };
-
-  const onDocumentReady = () => {
-    // Send postMessage when document is ready
-    if (window.parent) {
-      window.parent.postMessage(
-        {
-          action: 'document-ready',
-          data: null,
-        },
-        '*',
-      );
-    }
-  };
-
-  const onAllDocumentsCompleted = () => {
-    // Send postMessage for all documents completion
-    if (window.parent) {
-      window.parent.postMessage(
-        {
-          action: 'all-documents-completed',
-          data: {
-            documents: envelopes.map((envelope) => ({
-              token: envelope.recipient.token,
-              documentId: envelope.document.id,
-              recipientId: envelope.recipient.id,
-              action:
-                envelope.recipient.signingStatus === SigningStatus.SIGNED
-                  ? 'document-completed'
-                  : 'document-rejected',
-              reason:
-                envelope.recipient.signingStatus === SigningStatus.REJECTED
-                  ? envelope.recipient.rejectionReason
-                  : undefined,
-            })),
-          },
-        },
-        '*',
-      );
-    }
-  };
-
-  useEffect(() => {
-    if (
-      envelopes.every((envelope) => envelope.recipient.signingStatus !== SigningStatus.NOT_SIGNED)
-    ) {
-      onAllDocumentsCompleted();
-    }
-  }, [envelopes]);
-
-  useLayoutEffect(() => {
-    const hash = window.location.hash.slice(1);
-
-    try {
-      const data = ZSignDocumentEmbedDataSchema.parse(JSON.parse(decodeURIComponent(atob(hash))));
-
-      if (!isCompleted && data.name) {
-        setEmbedFullName(data.name);
-      }
-
-      // Since a recipient can be provided a name we can lock it without requiring
-      // a to be provided by the parent application, unlike direct templates.
-      setIsNameLocked(!!data.lockName);
-      setAllowDocumentRejection(!!data.allowDocumentRejection);
-      setShowOtherRecipientsCompletedFields(!!data.showOtherRecipientsCompletedFields);
-
-      if (data.darkModeDisabled) {
-        document.documentElement.classList.add('dark-mode-disabled');
-      }
-
-      if (allowWhitelabelling) {
-        injectCss({
-          css: data.css,
-          cssVars: data.cssVars,
-        });
-      }
-    } catch (err) {
-      console.error(err);
-    }
-
-    setHasFinishedInit(true);
-
-    // !: While the two setters are stable we still want to ensure we're avoiding
-    // !: re-renders.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, []);
-
-  // If a document is selected, show the signing view
-  if (selectedDocument && selectedRecipient) {
-    // Determine the full name to use - prioritize embed data, then user name, then recipient name
-    const fullNameToUse =
-      embedFullName ||
-      (user?.email === selectedRecipient.email ? user?.name : selectedRecipient.name) ||
-      '';
-
-    return (
-      <div className="p-4">
-        <DocumentSigningProvider
-          email={selectedRecipient.email}
-          fullName={fullNameToUse}
-          signature={user?.email === selectedRecipient.email ? user?.signature : undefined}
-          typedSignatureEnabled={selectedDocument.documentMeta?.typedSignatureEnabled}
-          uploadSignatureEnabled={selectedDocument.documentMeta?.uploadSignatureEnabled}
-          drawSignatureEnabled={selectedDocument.documentMeta?.drawSignatureEnabled}
-        >
-          <DocumentSigningAuthProvider
-            documentAuthOptions={selectedDocument.authOptions}
-            recipient={selectedRecipient}
-            user={user}
-          >
-            <DocumentSigningRecipientProvider recipient={selectedRecipient} targetSigner={null}>
-              <MultiSignDocumentSigningView
-                token={selectedRecipient.token}
-                recipientId={selectedRecipient.id}
-                onBack={onBackToDocumentList}
-                onDocumentCompleted={onDocumentCompleted}
-                onDocumentRejected={onDocumentRejected}
-                onDocumentError={onDocumentError}
-                onDocumentReady={onDocumentReady}
-                isNameLocked={isNameLocked}
-              />
-            </DocumentSigningRecipientProvider>
-          </DocumentSigningAuthProvider>
-        </DocumentSigningProvider>
-
-        {!hidePoweredBy && (
-          <div className="bg-primary text-primary-foreground fixed bottom-0 left-0 z-40 rounded-tr px-2 py-1 text-xs font-medium opacity-60 hover:opacity-100">
-            <span>Powered by</span>
-            <BrandingLogo className="ml-2 inline-block h-[14px]" />
-          </div>
-        )}
-      </div>
-    );
-  }
-
-  // Otherwise, show the document list
-  return (
-    <div className="p-4">
-      <MultiSignDocumentList envelopes={envelopes} onDocumentSelect={onSelectDocument} />
-
-      {!hidePoweredBy && (
-        <div className="bg-primary text-primary-foreground fixed bottom-0 left-0 z-40 rounded-tr px-2 py-1 text-xs font-medium opacity-60 hover:opacity-100">
-          <span>Powered by</span>
-          <BrandingLogo className="ml-2 inline-block h-[14px]" />
-        </div>
-      )}
-    </div>
-  );
-}
--- a/apps/remix/app/storage/lang-cookie.server.ts
+++ b/apps/remix/app/storage/lang-cookie.server.ts
@ -1,10 +1,6 @@
 import { createCookie } from 'react-router';

-import { env } from '@documenso/lib/utils/env';
-
 export const langCookie = createCookie('lang', {
  path: '/',
  maxAge: 60 * 60 * 24 * 365 * 2,
-  httpOnly: true,
-  secure: env('NODE_ENV') === 'production',
 });
--- a/apps/remix/app/types/embed-multisign-document-schema.ts
+++ b/apps/remix/app/types/embed-multisign-document-schema.ts
@ -1,17 +0,0 @@
-import { z } from 'zod';
-
-import { ZBaseEmbedDataSchema } from './embed-base-schemas';
-
-export const ZEmbedMultiSignDocumentSchema = ZBaseEmbedDataSchema.extend({
-  email: z
-    .union([z.literal(''), z.string().email()])
-    .optional()
-    .transform((value) => value || undefined),
-  lockEmail: z.boolean().optional().default(false),
-  name: z
-    .string()
-    .optional()
-    .transform((value) => value || undefined),
-  lockName: z.boolean().optional().default(false),
-  allowDocumentRejection: z.boolean().optional(),
-});
--- a/apps/remix/package.json
+++ b/apps/remix/package.json
@ -33,8 +33,8 @@
    "@lingui/react": "^5.2.0",
    "@oslojs/crypto": "^1.0.1",
    "@oslojs/encoding": "^1.1.0",
-    "@react-router/node": "^7.6.0",
-    "@react-router/serve": "^7.6.0",
+    "@react-router/node": "^7.1.5",
+    "@react-router/serve": "^7.1.5",
    "@simplewebauthn/browser": "^9.0.1",
    "@simplewebauthn/server": "^9.0.3",
    "autoprefixer": "^10.4.13",
@ -49,8 +49,8 @@
    "luxon": "^3.4.0",
    "papaparse": "^5.4.1",
    "plausible-tracker": "^0.3.9",
-    "posthog-js": "^1.245.0",
-    "posthog-node": "^4.17.0",
+    "posthog-js": "^1.224.0",
+    "posthog-node": "^4.8.1",
    "react": "^18",
    "react-call": "^1.3.0",
    "react-dom": "^18",
@ -59,7 +59,7 @@
    "react-hotkeys-hook": "^4.4.1",
    "react-icons": "^5.4.0",
    "react-rnd": "^10.4.1",
-    "react-router": "^7.6.0",
+    "react-router": "^7.1.5",
    "recharts": "^2.7.2",
    "remeda": "^2.17.3",
    "remix-themes": "^2.0.4",
@ -75,9 +75,9 @@
    "@babel/preset-react": "^7.26.3",
    "@babel/preset-typescript": "^7.26.0",
    "@lingui/babel-plugin-lingui-macro": "^5.2.0",
-    "@lingui/vite-plugin": "^5.3.1",
-    "@react-router/dev": "^7.6.0",
-    "@react-router/remix-routes-option-adapter": "^7.6.0",
+    "@lingui/vite-plugin": "^5.2.0",
+    "@react-router/dev": "^7.1.5",
+    "@react-router/remix-routes-option-adapter": "^7.1.5",
    "@rollup/plugin-babel": "^6.0.4",
    "@rollup/plugin-commonjs": "^28.0.2",
    "@rollup/plugin-node-resolve": "^16.0.0",
@ -91,14 +91,14 @@
    "@types/react-dom": "^18",
    "@types/ua-parser-js": "^0.7.39",
    "cross-env": "^7.0.3",
-    "esbuild": "^0.25.4",
+    "esbuild": "0.24.2",
    "remix-flat-routes": "^0.8.4",
    "rollup": "^4.34.5",
    "tsx": "^4.19.2",
    "typescript": "5.6.2",
-    "vite": "^6.3.5",
+    "vite": "^6.1.0",
    "vite-plugin-babel-macros": "^1.0.6",
    "vite-tsconfig-paths": "^5.1.4"
  },
-  "version": "1.12.0-rc.2"
+  "version": "1.10.0"
 }
--- a/apps/remix/vite.config.ts
+++ b/apps/remix/vite.config.ts
@ -35,27 +35,12 @@ export default defineConfig({
  ],
  ssr: {
    noExternal: ['react-dropzone', 'plausible-tracker', 'pdfjs-dist'],
-    external: [
-      '@node-rs/bcrypt',
-      '@prisma/client',
-      '@documenso/tailwind-config',
-      'playwright',
-      'playwright-core',
-      '@playwright/browser-chromium',
-    ],
+    external: ['@node-rs/bcrypt', '@prisma/client', '@documenso/tailwind-config'],
  },
  optimizeDeps: {
    entries: ['./app/**/*', '../../packages/ui/**/*', '../../packages/lib/**/*'],
    include: ['prop-types', 'file-selector', 'attr-accept'],
-    exclude: [
-      'node_modules',
-      '@node-rs/bcrypt',
-      '@documenso/pdf-sign',
-      'sharp',
-      'playwright',
-      'playwright-core',
-      '@playwright/browser-chromium',
-    ],
+    exclude: ['node_modules', '@node-rs/bcrypt', '@documenso/pdf-sign', 'sharp'],
  },
  resolve: {
    alias: {
@ -83,8 +68,7 @@ export default defineConfig({
        '@documenso/pdf-sign',
        '@aws-sdk/cloudfront-signer',
        'nodemailer',
-        /playwright/,
-        '@playwright/browser-chromium',
+        'playwright',
      ],
    },
  },
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@ -114,4 +114,4 @@ COPY --chown=nodejs:nodejs ./docker/start.sh /app/apps/remix/start.sh

 WORKDIR /app/apps/remix

-CMD ["sh", "start.sh"]
+CMD ["sh", "start.sh"]
--- a/docker/development/compose.yml
+++ b/docker/development/compose.yml
@ -40,6 +40,43 @@ services:
    entrypoint: sh
    command: -c 'mkdir -p /data/documenso && minio server /data --console-address ":9001" --address ":9002"'

+  triggerdotdev:
+    image: ghcr.io/triggerdotdev/trigger.dev:latest
+    container_name: triggerdotdev
+    environment:
+      - LOGIN_ORIGIN=http://localhost:3030
+      - APP_ORIGIN=http://localhost:3030
+      - PORT=3030
+      - REMIX_APP_PORT=3030
+      - MAGIC_LINK_SECRET=secret
+      - SESSION_SECRET=secret
+      - ENCRYPTION_KEY=deadbeefcafefeed
+      - DATABASE_URL=postgresql://trigger:password@triggerdotdev_database:5432/trigger
+      - DIRECT_URL=postgresql://trigger:password@triggerdotdev_database:5432/trigger
+      - RUNTIME_PLATFORM=docker-compose
+    ports:
+      - 3030:3030
+    depends_on:
+      - triggerdotdev_database
+
+  triggerdotdev_database:
+    container_name: triggerdotdev_database
+    image: postgres:15
+    volumes:
+      - triggerdotdev_database:/var/lib/postgresql/data
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U ${POSTGRES_USER}']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    environment:
+      - POSTGRES_USER=trigger
+      - POSTGRES_PASSWORD=password
+      - POSTGRES_DB=trigger
+    ports:
+      - 54321:5432
+
 volumes:
  minio:
  documenso_database:
+  triggerdotdev_database:
--- a/package-lock.json
+++ b/package-lock.json
--- a/package.json
+++ b/package.json
@ -1,6 +1,6 @@
 {
  "private": true,
-  "version": "1.12.0-rc.2",
+  "version": "1.10.0",
  "scripts": {
    "build": "turbo run build",
    "dev": "turbo run dev --filter=@documenso/remix",
@ -44,22 +44,18 @@
    "@commitlint/cli": "^17.7.1",
    "@commitlint/config-conventional": "^17.7.0",
    "@lingui/cli": "^5.2.0",
-    "dotenv": "^16.5.0",
-    "dotenv-cli": "^8.0.0",
+    "@trigger.dev/cli": "^2.3.18",
+    "dotenv": "^16.3.1",
+    "dotenv-cli": "^7.3.0",
    "eslint": "^8.40.0",
    "eslint-config-custom": "*",
    "husky": "^9.0.11",
    "lint-staged": "^15.2.2",
-    "playwright": "1.52.0",
+    "playwright": "1.43.0",
    "prettier": "^3.3.3",
    "rimraf": "^5.0.1",
    "turbo": "^1.9.3",
-    "vite": "^6.3.5",
-    "@prisma/client": "^6.8.2",
-    "prisma": "^6.8.2",
-    "prisma-extension-kysely": "^3.0.0",
-    "prisma-kysely": "^1.8.0",
-    "nodemailer": "^6.10.1"
+    "vite": "^6.1.0"
  },
  "name": "@documenso/root",
  "workspaces": [
--- a/packages/api/package.json
+++ b/packages/api/package.json
@ -20,11 +20,11 @@
    "@ts-rest/core": "^3.30.5",
    "@ts-rest/open-api": "^3.33.0",
    "@ts-rest/serverless": "^3.30.5",
-    "@types/swagger-ui-react": "^5.18.0",
+    "@types/swagger-ui-react": "^4.18.3",
    "luxon": "^3.4.0",
    "superjson": "^1.13.1",
-    "swagger-ui-react": "^5.21.0",
+    "swagger-ui-react": "^5.11.0",
    "ts-pattern": "^5.0.5",
    "zod": "3.24.1"
  }
-}
+}
--- a/packages/api/v1/contract.ts
+++ b/packages/api/v1/contract.ts
@ -11,7 +11,6 @@ import {
  ZDeleteDocumentMutationSchema,
  ZDeleteFieldMutationSchema,
  ZDeleteRecipientMutationSchema,
-  ZDownloadDocumentQuerySchema,
  ZDownloadDocumentSuccessfulSchema,
  ZFindTeamMembersResponseSchema,
  ZGenerateDocumentFromTemplateMutationResponseSchema,
@ -72,7 +71,6 @@ export const ApiContractV1 = c.router(
    downloadSignedDocument: {
      method: 'GET',
      path: '/api/v1/documents/:id/download',
-      query: ZDownloadDocumentQuerySchema,
      responses: {
        200: ZDownloadDocumentSuccessfulSchema,
        401: ZUnsuccessfulResponseSchema,
--- a/packages/api/v1/implementation.ts
+++ b/packages/api/v1/implementation.ts
@ -142,7 +142,6 @@ export const ApiContractV1Implementation = tsr.router(ApiContractV1, {

  downloadSignedDocument: authenticatedMiddleware(async (args, user, team) => {
    const { id: documentId } = args.params;
-    const { downloadOriginalDocument } = args.query;

    try {
      if (process.env.NEXT_PUBLIC_UPLOAD_TRANSPORT !== 's3') {
@ -178,7 +177,7 @@ export const ApiContractV1Implementation = tsr.router(ApiContractV1, {
        };
      }

-      if (!downloadOriginalDocument && !isDocumentCompleted(document.status)) {
+      if (!isDocumentCompleted(document.status)) {
        return {
          status: 400,
          body: {
@ -187,9 +186,7 @@ export const ApiContractV1Implementation = tsr.router(ApiContractV1, {
        };
      }

-      const { url } = await getPresignGetUrl(
-        downloadOriginalDocument ? document.documentData.initialData : document.documentData.data,
-      );
+      const { url } = await getPresignGetUrl(document.documentData.data);

      return {
        status: 200,
@ -821,7 +818,7 @@ export const ApiContractV1Implementation = tsr.router(ApiContractV1, {
            name,
            role,
            signingOrder,
-            actionAuth: authOptions?.actionAuth ?? [],
+            actionAuth: authOptions?.actionAuth ?? null,
          },
        ],
        requestMetadata: metadata,
@ -888,7 +885,7 @@ export const ApiContractV1Implementation = tsr.router(ApiContractV1, {
      name,
      role,
      signingOrder,
-      actionAuth: authOptions?.actionAuth ?? [],
+      actionAuth: authOptions?.actionAuth,
      requestMetadata: metadata.requestMetadata,
    }).catch(() => null);

--- a/packages/api/v1/schema.ts
+++ b/packages/api/v1/schema.ts
@ -119,15 +119,6 @@ export const ZUploadDocumentSuccessfulSchema = z.object({
  key: z.string(),
 });

-export const ZDownloadDocumentQuerySchema = z.object({
-  downloadOriginalDocument: z
-    .preprocess((val) => String(val) === 'true' || String(val) === '1', z.boolean())
-    .optional()
-    .default(false),
-});
-
-export type TDownloadDocumentQuerySchema = z.infer<typeof ZDownloadDocumentQuerySchema>;
-
 export const ZDownloadDocumentSuccessfulSchema = z.object({
  downloadUrl: z.string(),
 });
@ -177,8 +168,8 @@ export const ZCreateDocumentMutationSchema = z.object({
    .default({}),
  authOptions: z
    .object({
-      globalAccessAuth: z.array(ZDocumentAccessAuthTypesSchema).optional().default([]),
-      globalActionAuth: z.array(ZDocumentActionAuthTypesSchema).optional().default([]),
+      globalAccessAuth: ZDocumentAccessAuthTypesSchema.optional(),
+      globalActionAuth: ZDocumentActionAuthTypesSchema.optional(),
    })
    .optional()
    .openapi({
@ -237,8 +228,8 @@ export const ZCreateDocumentFromTemplateMutationSchema = z.object({
    .optional(),
  authOptions: z
    .object({
-      globalAccessAuth: z.array(ZDocumentAccessAuthTypesSchema).optional().default([]),
-      globalActionAuth: z.array(ZDocumentActionAuthTypesSchema).optional().default([]),
+      globalAccessAuth: ZDocumentAccessAuthTypesSchema.optional(),
+      globalActionAuth: ZDocumentActionAuthTypesSchema.optional(),
    })
    .optional(),
  formValues: z.record(z.string(), z.union([z.string(), z.boolean(), z.number()])).optional(),
@ -310,8 +301,8 @@ export const ZGenerateDocumentFromTemplateMutationSchema = z.object({
    .optional(),
  authOptions: z
    .object({
-      globalAccessAuth: z.array(ZDocumentAccessAuthTypesSchema).optional().default([]),
-      globalActionAuth: z.array(ZDocumentActionAuthTypesSchema).optional().default([]),
+      globalAccessAuth: ZDocumentAccessAuthTypesSchema.optional(),
+      globalActionAuth: ZDocumentActionAuthTypesSchema.optional(),
    })
    .optional(),
  formValues: z.record(z.string(), z.union([z.string(), z.boolean(), z.number()])).optional(),
@ -350,7 +341,7 @@ export const ZCreateRecipientMutationSchema = z.object({
  signingOrder: z.number().nullish(),
  authOptions: z
    .object({
-      actionAuth: z.array(ZRecipientActionAuthTypesSchema).optional().default([]),
+      actionAuth: ZRecipientActionAuthTypesSchema.optional(),
    })
    .optional()
    .openapi({
--- a/packages/app-tests/e2e/document-auth/access-auth.spec.ts
+++ b/packages/app-tests/e2e/document-auth/access-auth.spec.ts
@ -42,8 +42,8 @@ test('[DOCUMENT_AUTH]: should allow or deny access when required', async ({ page
    {
      createDocumentOptions: {
        authOptions: createDocumentAuthOptions({
-          globalAccessAuth: ['ACCOUNT'],
-          globalActionAuth: [],
+          globalAccessAuth: 'ACCOUNT',
+          globalActionAuth: null,
        }),
      },
    },
--- a/packages/app-tests/e2e/document-auth/action-auth.spec.ts
+++ b/packages/app-tests/e2e/document-auth/action-auth.spec.ts
@ -65,8 +65,8 @@ test('[DOCUMENT_AUTH]: should allow signing with valid global auth', async ({ pa
    recipients: [recipientWithAccount],
    updateDocumentOptions: {
      authOptions: createDocumentAuthOptions({
-        globalAccessAuth: [],
-        globalActionAuth: ['ACCOUNT'],
+        globalAccessAuth: null,
+        globalActionAuth: 'ACCOUNT',
      }),
    },
  });
@ -116,8 +116,8 @@ test.skip('[DOCUMENT_AUTH]: should deny signing document when required for globa
    recipients: [recipientWithAccount],
    updateDocumentOptions: {
      authOptions: createDocumentAuthOptions({
-        globalAccessAuth: [],
-        globalActionAuth: ['ACCOUNT'],
+        globalAccessAuth: null,
+        globalActionAuth: 'ACCOUNT',
      }),
    },
  });
@ -147,8 +147,8 @@ test('[DOCUMENT_AUTH]: should deny signing fields when required for global auth'
    recipients: [recipientWithAccount, seedTestEmail()],
    updateDocumentOptions: {
      authOptions: createDocumentAuthOptions({
-        globalAccessAuth: [],
-        globalActionAuth: ['ACCOUNT'],
+        globalAccessAuth: null,
+        globalActionAuth: 'ACCOUNT',
      }),
    },
  });
@ -193,20 +193,20 @@ test('[DOCUMENT_AUTH]: should allow field signing when required for recipient au
    recipientsCreateOptions: [
      {
        authOptions: createRecipientAuthOptions({
-          accessAuth: [],
-          actionAuth: [],
+          accessAuth: null,
+          actionAuth: null,
        }),
      },
      {
        authOptions: createRecipientAuthOptions({
-          accessAuth: [],
-          actionAuth: ['EXPLICIT_NONE'],
+          accessAuth: null,
+          actionAuth: 'EXPLICIT_NONE',
        }),
      },
      {
        authOptions: createRecipientAuthOptions({
-          accessAuth: [],
-          actionAuth: ['ACCOUNT'],
+          accessAuth: null,
+          actionAuth: 'ACCOUNT',
        }),
      },
    ],
@ -218,7 +218,7 @@ test('[DOCUMENT_AUTH]: should allow field signing when required for recipient au
    const { actionAuth } = ZRecipientAuthOptionsSchema.parse(recipient.authOptions);

    // This document has no global action auth, so only account should require auth.
-    const isAuthRequired = actionAuth.includes('ACCOUNT');
+    const isAuthRequired = actionAuth === 'ACCOUNT';

    const signUrl = `/sign/${token}`;

@ -292,28 +292,28 @@ test('[DOCUMENT_AUTH]: should allow field signing when required for recipient an
    recipientsCreateOptions: [
      {
        authOptions: createRecipientAuthOptions({
-          accessAuth: [],
-          actionAuth: [],
+          accessAuth: null,
+          actionAuth: null,
        }),
      },
      {
        authOptions: createRecipientAuthOptions({
-          accessAuth: [],
-          actionAuth: ['EXPLICIT_NONE'],
+          accessAuth: null,
+          actionAuth: 'EXPLICIT_NONE',
        }),
      },
      {
        authOptions: createRecipientAuthOptions({
-          accessAuth: [],
-          actionAuth: ['ACCOUNT'],
+          accessAuth: null,
+          actionAuth: 'ACCOUNT',
        }),
      },
    ],
    fields: [FieldType.DATE, FieldType.SIGNATURE],
    updateDocumentOptions: {
      authOptions: createDocumentAuthOptions({
-        globalAccessAuth: [],
-        globalActionAuth: ['ACCOUNT'],
+        globalAccessAuth: null,
+        globalActionAuth: 'ACCOUNT',
      }),
    },
  });
@ -323,7 +323,7 @@ test('[DOCUMENT_AUTH]: should allow field signing when required for recipient an
    const { actionAuth } = ZRecipientAuthOptionsSchema.parse(recipient.authOptions);

    // This document HAS global action auth, so account and inherit should require auth.
-    const isAuthRequired = actionAuth.includes('ACCOUNT') || actionAuth.length === 0;
+    const isAuthRequired = actionAuth === 'ACCOUNT' || actionAuth === null;

    const signUrl = `/sign/${token}`;

--- a/packages/app-tests/e2e/document-flow/settings-step.spec.ts
+++ b/packages/app-tests/e2e/document-flow/settings-step.spec.ts
@ -40,7 +40,7 @@ test.describe('[EE_ONLY]', () => {

    // Set EE action auth.
    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByLabel('Require passkey').getByText('Require passkey').click();
    await expect(page.getByTestId('documentActionSelectValue')).toContainText('Require passkey');

    // Save the settings by going to the next step.
@ -82,7 +82,7 @@ test.describe('[EE_ONLY]', () => {

    // Set EE action auth.
    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByLabel('Require passkey').getByText('Require passkey').click();
    await expect(page.getByTestId('documentActionSelectValue')).toContainText('Require passkey');

    // Save the settings by going to the next step.
@ -143,7 +143,7 @@ test('[DOCUMENT_FLOW]: add settings', async ({ page }) => {

  // Set access auth.
  await page.getByTestId('documentAccessSelectValue').click();
-  await page.getByRole('option').filter({ hasText: 'Require account' }).click();
+  await page.getByLabel('Require account').getByText('Require account').click();
  await expect(page.getByTestId('documentAccessSelectValue')).toContainText('Require account');

  // Action auth should NOT be visible.
--- a/packages/app-tests/e2e/documents/delete-documents.spec.ts
+++ b/packages/app-tests/e2e/documents/delete-documents.spec.ts
@ -256,16 +256,10 @@ test('[DOCUMENTS]: deleting documents as a recipient should only hide it for the
  });

  // Open document action menu.
-  await expect(async () => {
-    await page
-      .locator('tr', { hasText: 'Document 1 - Completed' })
-      .getByTestId('document-table-action-btn')
-      .click();
-
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Hide' })).toBeVisible();
-  }).toPass();
+  await page
+    .locator('tr', { hasText: 'Document 1 - Completed' })
+    .getByTestId('document-table-action-btn')
+    .click();

  // Delete document.
  await page.getByRole('menuitem', { name: 'Hide' }).click();
@ -273,16 +267,11 @@ test('[DOCUMENTS]: deleting documents as a recipient should only hide it for the

  await page.waitForTimeout(1000);

-  await expect(async () => {
-    await page
-      .locator('tr', { hasText: 'Document 1 - Pending' })
-      .getByTestId('document-table-action-btn')
-      .click();
-
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Hide' })).toBeVisible();
-  }).toPass();
+  // Open document action menu.
+  await page
+    .locator('tr', { hasText: 'Document 1 - Pending' })
+    .getByTestId('document-table-action-btn')
+    .click();

  // Delete document.
  await page.getByRole('menuitem', { name: 'Hide' }).click();
--- a/packages/app-tests/e2e/folders/individual-account-folders.spec.ts
+++ b/packages/app-tests/e2e/folders/individual-account-folders.spec.ts
@ -342,13 +342,7 @@ test('user can move a document to a document folder', async ({ page }) => {
    redirectPath: '/documents',
  });

-  await expect(async () => {
-    await page.getByTestId('document-table-action-btn').first().click();
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Move to Folder' })).toBeVisible();
-  }).toPass();
-
+  await page.getByTestId('document-table-action-btn').click();
  await page.getByRole('menuitem', { name: 'Move to Folder' }).click();

  await page.getByRole('button', { name: 'Proposals' }).click();
@ -385,13 +379,7 @@ test('user can move a document from folder to the root', async ({ page }) => {

  await page.getByText('Proposals').click();

-  await expect(async () => {
-    await page.getByTestId('document-table-action-btn').first().click();
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Move to Folder' })).toBeVisible();
-  }).toPass();
-
+  await page.getByTestId('document-table-action-btn').click();
  await page.getByRole('menuitem', { name: 'Move to Folder' }).click();

  await page.getByRole('button', { name: 'Root' }).click();
@ -803,13 +791,7 @@ test('user can move a template to a template folder', async ({ page }) => {
    redirectPath: '/templates',
  });

-  await expect(async () => {
-    await page.getByTestId('template-table-action-btn').first().click();
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Move to Folder' })).toBeVisible();
-  }).toPass();
-
+  await page.getByTestId('template-table-action-btn').click();
  await page.getByRole('menuitem', { name: 'Move to Folder' }).click();

  await page.getByRole('button', { name: 'Client Templates' }).click();
@ -846,13 +828,7 @@ test('user can move a template from a folder to the root', async ({ page }) => {

  await page.getByText('Client Templates').click();

-  await expect(async () => {
-    await page.getByTestId('template-table-action-btn').first().click();
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Move to Folder' })).toBeVisible();
-  }).toPass();
-
+  await page.getByTestId('template-table-action-btn').click();
  await page.getByRole('menuitem', { name: 'Move to Folder' }).click();

  await page.getByRole('button', { name: 'Root' }).click();
--- a/packages/app-tests/e2e/teams/team-documents.spec.ts
+++ b/packages/app-tests/e2e/teams/team-documents.spec.ts
@ -230,21 +230,13 @@ test('[TEAMS]: resend pending team document', async ({ page }) => {
    redirectPath: `/t/${team.url}/documents?status=PENDING`,
  });

-  await expect(async () => {
-    await page.getByTestId('document-table-action-btn').first().click();
+  await page.getByRole('row').getByRole('button').nth(1).click();
+  await page.getByRole('menuitem', { name: 'Resend' }).click();

-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Resend' })).toBeVisible();
-  }).toPass();
-
-  await page.getByRole('menuitem').filter({ hasText: 'Resend' }).click();
  await page.getByLabel('test.documenso.com').first().click();
  await page.getByRole('button', { name: 'Send reminder' }).click();

-  await expect(
-    page.getByRole('status').filter({ hasText: 'Document re-sent' }).first(),
-  ).toBeVisible();
+  await expect(page.getByRole('status')).toContainText('Document re-sent');
 });

 test('[TEAMS]: delete draft team document', async ({ page }) => {
@ -256,13 +248,7 @@ test('[TEAMS]: delete draft team document', async ({ page }) => {
    redirectPath: `/t/${team.url}/documents?status=DRAFT`,
  });

-  await expect(async () => {
-    await page.getByTestId('document-table-action-btn').first().click();
-
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Delete' })).toBeVisible();
-  }).toPass();
+  await page.getByRole('row').getByRole('button').nth(1).click();

  await page.getByRole('menuitem', { name: 'Delete' }).click();
  await page.getByRole('button', { name: 'Delete' }).click();
@ -300,13 +286,7 @@ test('[TEAMS]: delete pending team document', async ({ page }) => {
    redirectPath: `/t/${team.url}/documents?status=PENDING`,
  });

-  await expect(async () => {
-    await page.getByTestId('document-table-action-btn').first().click();
-
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Delete' })).toBeVisible();
-  }).toPass();
+  await page.getByRole('row').getByRole('button').nth(1).click();

  await page.getByRole('menuitem', { name: 'Delete' }).click();
  await page.getByPlaceholder("Type 'delete' to confirm").fill('delete');
@ -345,13 +325,7 @@ test('[TEAMS]: delete completed team document', async ({ page }) => {
    redirectPath: `/t/${team.url}/documents?status=COMPLETED`,
  });

-  await expect(async () => {
-    await page.getByTestId('document-table-action-btn').first().click();
-
-    await page.waitForTimeout(1000);
-
-    await expect(page.getByRole('menuitem', { name: 'Delete' })).toBeVisible();
-  }).toPass();
+  await page.getByRole('row').getByRole('button').nth(2).click();

  await page.getByRole('menuitem', { name: 'Delete' }).click();
  await page.getByPlaceholder("Type 'delete' to confirm").fill('delete');
--- a/packages/app-tests/e2e/templates-flow/template-settings-step.spec.ts
+++ b/packages/app-tests/e2e/templates-flow/template-settings-step.spec.ts
@ -37,7 +37,7 @@ test.describe('[EE_ONLY]', () => {

    // Set EE action auth.
    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByLabel('Require passkey').getByText('Require passkey').click();
    await expect(page.getByTestId('documentActionSelectValue')).toContainText('Require passkey');

    // Save the settings by going to the next step.
@ -79,7 +79,7 @@ test.describe('[EE_ONLY]', () => {

    // Set EE action auth.
    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByLabel('Require passkey').getByText('Require passkey').click();
    await expect(page.getByTestId('documentActionSelectValue')).toContainText('Require passkey');

    // Save the settings by going to the next step.
@ -140,7 +140,7 @@ test('[TEMPLATE_FLOW]: add settings', async ({ page }) => {

  // Set access auth.
  await page.getByTestId('documentAccessSelectValue').click();
-  await page.getByRole('option').filter({ hasText: 'Require account' }).click();
+  await page.getByLabel('Require account').getByText('Require account').click();
  await expect(page.getByTestId('documentAccessSelectValue')).toContainText('Require account');

  // Action auth should NOT be visible.
--- a/packages/app-tests/e2e/templates-flow/template-signers-step.spec.ts
+++ b/packages/app-tests/e2e/templates-flow/template-signers-step.spec.ts
@ -58,8 +58,8 @@ test.describe('[EE_ONLY]', () => {

    // Add advanced settings for a single recipient.
    await page.getByLabel('Show advanced settings').check();
-    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByRole('combobox').first().click();
+    await page.getByLabel('Require passkey').click();

    // Navigate to the next step and back.
    await page.getByRole('button', { name: 'Continue' }).click();
--- a/packages/app-tests/e2e/templates/create-document-from-template.spec.ts
+++ b/packages/app-tests/e2e/templates/create-document-from-template.spec.ts
@ -48,13 +48,13 @@ test('[TEMPLATE]: should create a document from a template', async ({ page }) =>

  // Set template document access.
  await page.getByTestId('documentAccessSelectValue').click();
-  await page.getByRole('option').filter({ hasText: 'Require account' }).click();
+  await page.getByLabel('Require account').getByText('Require account').click();
  await expect(page.getByTestId('documentAccessSelectValue')).toContainText('Require account');

  // Set EE action auth.
  if (isBillingEnabled) {
    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByLabel('Require passkey').getByText('Require passkey').click();
    await expect(page.getByTestId('documentActionSelectValue')).toContainText('Require passkey');
  }

@ -85,8 +85,8 @@ test('[TEMPLATE]: should create a document from a template', async ({ page }) =>
  // Apply require passkey for Recipient 1.
  if (isBillingEnabled) {
    await page.getByLabel('Show advanced settings').check();
-    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByRole('combobox').first().click();
+    await page.getByLabel('Require passkey').click();
  }

  await page.getByRole('button', { name: 'Continue' }).click();
@ -119,12 +119,10 @@ test('[TEMPLATE]: should create a document from a template', async ({ page }) =>
  });

  expect(document.title).toEqual('TEMPLATE_TITLE');
-  expect(documentAuth.documentAuthOption.globalAccessAuth).toContain('ACCOUNT');
-
-  if (isBillingEnabled) {
-    expect(documentAuth.documentAuthOption.globalActionAuth).toContain('PASSKEY');
-  }
-
+  expect(documentAuth.documentAuthOption.globalAccessAuth).toEqual('ACCOUNT');
+  expect(documentAuth.documentAuthOption.globalActionAuth).toEqual(
+    isBillingEnabled ? 'PASSKEY' : null,
+  );
  expect(document.documentMeta?.dateFormat).toEqual('dd/MM/yyyy hh:mm a');
  expect(document.documentMeta?.message).toEqual('MESSAGE');
  expect(document.documentMeta?.redirectUrl).toEqual('https://documenso.com');
@ -145,11 +143,11 @@ test('[TEMPLATE]: should create a document from a template', async ({ page }) =>
  });

  if (isBillingEnabled) {
-    expect(recipientOneAuth.derivedRecipientActionAuth).toContain('PASSKEY');
+    expect(recipientOneAuth.derivedRecipientActionAuth).toEqual('PASSKEY');
  }

-  expect(recipientOneAuth.derivedRecipientAccessAuth).toContain('ACCOUNT');
-  expect(recipientTwoAuth.derivedRecipientAccessAuth).toContain('ACCOUNT');
+  expect(recipientOneAuth.derivedRecipientAccessAuth).toEqual('ACCOUNT');
+  expect(recipientTwoAuth.derivedRecipientAccessAuth).toEqual('ACCOUNT');
 });

 /**
@ -185,13 +183,13 @@ test('[TEMPLATE]: should create a team document from a team template', async ({

  // Set template document access.
  await page.getByTestId('documentAccessSelectValue').click();
-  await page.getByRole('option').filter({ hasText: 'Require account' }).click();
+  await page.getByLabel('Require account').getByText('Require account').click();
  await expect(page.getByTestId('documentAccessSelectValue')).toContainText('Require account');

  // Set EE action auth.
  if (isBillingEnabled) {
    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByLabel('Require passkey').getByText('Require passkey').click();
    await expect(page.getByTestId('documentActionSelectValue')).toContainText('Require passkey');
  }

@ -222,8 +220,8 @@ test('[TEMPLATE]: should create a team document from a team template', async ({
  // Apply require passkey for Recipient 1.
  if (isBillingEnabled) {
    await page.getByLabel('Show advanced settings').check();
-    await page.getByTestId('documentActionSelectValue').click();
-    await page.getByRole('option').filter({ hasText: 'Require passkey' }).click();
+    await page.getByRole('combobox').first().click();
+    await page.getByLabel('Require passkey').click();
  }

  await page.getByRole('button', { name: 'Continue' }).click();
@ -258,12 +256,10 @@ test('[TEMPLATE]: should create a team document from a team template', async ({
  });

  expect(document.title).toEqual('TEMPLATE_TITLE');
-  expect(documentAuth.documentAuthOption.globalAccessAuth).toContain('ACCOUNT');
-
-  if (isBillingEnabled) {
-    expect(documentAuth.documentAuthOption.globalActionAuth).toContain('PASSKEY');
-  }
-
+  expect(documentAuth.documentAuthOption.globalAccessAuth).toEqual('ACCOUNT');
+  expect(documentAuth.documentAuthOption.globalActionAuth).toEqual(
+    isBillingEnabled ? 'PASSKEY' : null,
+  );
  expect(document.documentMeta?.dateFormat).toEqual('dd/MM/yyyy hh:mm a');
  expect(document.documentMeta?.message).toEqual('MESSAGE');
  expect(document.documentMeta?.redirectUrl).toEqual('https://documenso.com');
@ -284,11 +280,11 @@ test('[TEMPLATE]: should create a team document from a team template', async ({
  });

  if (isBillingEnabled) {
-    expect(recipientOneAuth.derivedRecipientActionAuth).toContain('PASSKEY');
+    expect(recipientOneAuth.derivedRecipientActionAuth).toEqual('PASSKEY');
  }

-  expect(recipientOneAuth.derivedRecipientAccessAuth).toContain('ACCOUNT');
-  expect(recipientTwoAuth.derivedRecipientAccessAuth).toContain('ACCOUNT');
+  expect(recipientOneAuth.derivedRecipientAccessAuth).toEqual('ACCOUNT');
+  expect(recipientTwoAuth.derivedRecipientAccessAuth).toEqual('ACCOUNT');
 });

 /**
--- a/packages/app-tests/e2e/templates/direct-templates.spec.ts
+++ b/packages/app-tests/e2e/templates/direct-templates.spec.ts
@ -172,8 +172,8 @@ test('[DIRECT_TEMPLATES]: direct template link auth access', async ({ page }) =>
    userId: user.id,
    createTemplateOptions: {
      authOptions: createDocumentAuthOptions({
-        globalAccessAuth: ['ACCOUNT'],
-        globalActionAuth: [],
+        globalAccessAuth: 'ACCOUNT',
+        globalActionAuth: null,
      }),
    },
  });
--- a/packages/app-tests/e2e/user/auth-flow.spec.ts
+++ b/packages/app-tests/e2e/user/auth-flow.spec.ts
@ -1,6 +1,5 @@
 import { type Page, expect, test } from '@playwright/test';

-import { alphaid } from '@documenso/lib/universal/id';
 import {
  extractUserVerificationToken,
  seedTestEmail,
@ -24,11 +23,9 @@ test('[USER] can sign up with email and password', async ({ page }: { page: Page
  await signSignaturePad(page);

  await page.getByRole('button', { name: 'Next', exact: true }).click();
+  await page.getByLabel('Public profile username').fill(Date.now().toString());

-  await page.getByLabel('Public profile username').fill(alphaid(10));
-  await page.getByLabel('Public profile username').blur();
-
-  await page.getByRole('button', { name: 'Complete' }).click();
+  await page.getByRole('button', { name: 'Complete', exact: true }).click();

  await page.waitForURL('/unverified-account');

--- a/packages/app-tests/package.json
+++ b/packages/app-tests/package.json
@ -12,13 +12,13 @@
  "keywords": [],
  "author": "",
  "devDependencies": {
-    "@playwright/test": "1.52.0",
+    "@playwright/test": "^1.18.1",
    "@types/node": "^20",
    "@documenso/lib": "*",
    "@documenso/prisma": "*",
    "pdf-lib": "^1.17.1"
  },
  "dependencies": {
-    "start-server-and-test": "^2.0.12"
+    "start-server-and-test": "^2.0.1"
  }
-}
+}
--- a/packages/app-tests/playwright.config.ts
+++ b/packages/app-tests/playwright.config.ts
@ -17,7 +17,7 @@ export default defineConfig({
  testDir: './e2e',
  /* Run tests in files in parallel */
  fullyParallel: false,
-  workers: 1,
+  workers: '50%',
  maxFailures: process.env.CI ? 1 : undefined,
  /* Fail the build on CI if you accidentally left test.only in the source code. */
  forbidOnly: !!process.env.CI,
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@ -18,8 +18,8 @@
    "arctic": "^3.1.0",
    "hono": "4.7.0",
    "luxon": "^3.5.0",
-    "nanoid": "^5.1.5",
+    "nanoid": "^4.0.2",
    "ts-pattern": "^5.0.5",
    "zod": "3.24.1"
  }
-}
+}
--- a/packages/email/package.json
+++ b/packages/email/package.json
@ -36,7 +36,7 @@
    "@react-email/section": "0.0.10",
    "@react-email/tailwind": "0.0.9",
    "@react-email/text": "0.0.6",
-    "nodemailer": "^6.10.1",
+    "nodemailer": "6.9.9",
    "react-email": "1.9.5",
    "resend": "2.0.0"
  },
--- a/packages/eslint-config/index.cjs
+++ b/packages/eslint-config/index.cjs
@ -1,7 +1,13 @@
 module.exports = {
-  extends: ['next', 'turbo', 'eslint:recommended', 'plugin:@typescript-eslint/recommended'],
+  extends: [
+    'next',
+    'turbo',
+    'eslint:recommended',
+    'plugin:@typescript-eslint/recommended',
+    'plugin:package-json/recommended',
+  ],

-  plugins: ['unused-imports'],
+  plugins: ['package-json', 'unused-imports'],

  env: {
    es2022: true,
--- a/packages/eslint-config/package.json
+++ b/packages/eslint-config/package.json
@ -10,11 +10,11 @@
    "@typescript-eslint/eslint-plugin": "^7.1.1",
    "@typescript-eslint/parser": "^7.1.1",
    "eslint": "^8.57.0",
-    "eslint-config-next": "^14.2.28",
+    "eslint-config-next": "^14.1.3",
    "eslint-config-turbo": "^1.12.5",
-    "eslint-plugin-package-json": "^0.31.0",
-    "eslint-plugin-react": "^7.37.5",
-    "eslint-plugin-unused-imports": "^4.1.4",
+    "eslint-plugin-package-json": "^0.10.4",
+    "eslint-plugin-react": "^7.34.0",
+    "eslint-plugin-unused-imports": "^3.1.0",
    "typescript": "5.6.2"
  }
 }
--- a/packages/lib/client-only/hooks/use-element-bounds.ts
+++ b/packages/lib/client-only/hooks/use-element-bounds.ts
@ -1,75 +0,0 @@
-import { useEffect, useState } from 'react';
-
-import { getBoundingClientRect } from '@documenso/lib/client-only/get-bounding-client-rect';
-
-export const useElementBounds = (elementOrSelector: HTMLElement | string, withScroll = false) => {
-  const [bounds, setBounds] = useState({
-    top: 0,
-    left: 0,
-    height: 0,
-    width: 0,
-  });
-
-  const calculateBounds = () => {
-    const $el =
-      typeof elementOrSelector === 'string'
-        ? document.querySelector<HTMLElement>(elementOrSelector)
-        : elementOrSelector;
-
-    if (!$el) {
-      throw new Error('Element not found');
-    }
-
-    if (withScroll) {
-      return getBoundingClientRect($el);
-    }
-
-    const { top, left, width, height } = $el.getBoundingClientRect();
-
-    return {
-      top,
-      left,
-      width,
-      height,
-    };
-  };
-
-  useEffect(() => {
-    setBounds(calculateBounds());
-  }, [calculateBounds]);
-
-  useEffect(() => {
-    const onResize = () => {
-      setBounds(calculateBounds());
-    };
-
-    window.addEventListener('resize', onResize);
-
-    return () => {
-      window.removeEventListener('resize', onResize);
-    };
-  }, [calculateBounds]);
-
-  useEffect(() => {
-    const $el =
-      typeof elementOrSelector === 'string'
-        ? document.querySelector<HTMLElement>(elementOrSelector)
-        : elementOrSelector;
-
-    if (!$el) {
-      return;
-    }
-
-    const observer = new ResizeObserver(() => {
-      setBounds(calculateBounds());
-    });
-
-    observer.observe($el);
-
-    return () => {
-      observer.disconnect();
-    };
-  }, [calculateBounds]);
-
-  return bounds;
-};
--- a/packages/lib/constants/document-auth.ts
+++ b/packages/lib/constants/document-auth.ts
@ -19,10 +19,6 @@ export const DOCUMENT_AUTH_TYPES: Record<string, DocumentAuthTypeData> = {
    key: DocumentAuth.TWO_FACTOR_AUTH,
    value: 'Require 2FA',
  },
-  [DocumentAuth.PASSWORD]: {
-    key: DocumentAuth.PASSWORD,
-    value: 'Require password',
-  },
  [DocumentAuth.EXPLICIT_NONE]: {
    key: DocumentAuth.EXPLICIT_NONE,
    value: 'None (Overrides global settings)',
--- a/packages/lib/jobs/definitions/internal/seal-document.handler.ts
+++ b/packages/lib/jobs/definitions/internal/seal-document.handler.ts
@ -157,7 +157,7 @@ export const run = async ({

    // Normalize and flatten layers that could cause issues with the signature
    normalizeSignatureAppearances(pdfDoc);
-    await flattenForm(pdfDoc);
+    flattenForm(pdfDoc);
    flattenAnnotations(pdfDoc);

    // Add rejection stamp if the document is rejected
@ -188,7 +188,7 @@ export const run = async ({

    // Re-flatten the form to handle our checkbox and radio fields that
    // create native arcoFields
-    await flattenForm(pdfDoc);
+    flattenForm(pdfDoc);

    const pdfBytes = await pdfDoc.save();
    const pdfBuffer = await signPdf({ pdf: Buffer.from(pdfBytes) });
--- a/packages/lib/package.json
+++ b/packages/lib/package.json
@ -15,6 +15,7 @@
    "clean": "rimraf node_modules"
  },
  "dependencies": {
+    "@auth/kysely-adapter": "^0.6.0",
    "@aws-sdk/client-s3": "^3.410.0",
    "@aws-sdk/cloudfront-signer": "^3.410.0",
    "@aws-sdk/s3-request-presigner": "^3.410.0",
@ -40,13 +41,12 @@
    "kysely": "0.26.3",
    "luxon": "^3.4.0",
    "micro": "^10.0.1",
-    "nanoid": "^5.1.5",
+    "nanoid": "^4.0.2",
    "oslo": "^0.17.0",
    "pdf-lib": "^1.17.1",
    "pg": "^8.11.3",
-    "playwright": "1.52.0",
-    "posthog-js": "^1.245.0",
-    "posthog-node": "^4.17.0",
+    "playwright": "1.43.0",
+    "posthog-js": "^1.224.0",
    "react": "^18",
    "remeda": "^2.17.3",
    "sharp": "0.32.6",
@ -55,7 +55,7 @@
    "zod": "3.24.1"
  },
  "devDependencies": {
-    "@playwright/browser-chromium": "1.52.0",
+    "@playwright/browser-chromium": "1.43.0",
    "@types/luxon": "^3.3.1",
    "@types/pg": "^8.11.4"
  }
--- a/packages/lib/server-only/2fa/verify-password.ts
+++ b/packages/lib/server-only/2fa/verify-password.ts
@ -1,20 +0,0 @@
-import { compare } from '@node-rs/bcrypt';
-
-import { prisma } from '@documenso/prisma';
-
-type VerifyPasswordOptions = {
-  userId: number;
-  password: string;
-};
-
-export const verifyPassword = async ({ userId, password }: VerifyPasswordOptions) => {
-  const user = await prisma.user.findUnique({
-    where: { id: userId },
-  });
-
-  if (!user || !user.password) {
-    return false;
-  }
-
-  return await compare(password, user.password);
-};
--- a/packages/lib/server-only/document/complete-document-with-token.ts
+++ b/packages/lib/server-only/document/complete-document-with-token.ts
@ -23,7 +23,6 @@ import {
  ZWebhookDocumentSchema,
  mapDocumentToWebhookDocumentPayload,
 } from '../../types/webhook-payload';
-import { extractDocumentAuthMethods } from '../../utils/document-auth';
 import { getIsRecipientsTurnToSign } from '../recipient/get-is-recipient-turn';
 import { triggerWebhook } from '../webhooks/trigger/trigger-webhook';
 import { sendPendingEmail } from './send-pending-email';
@ -141,11 +140,6 @@ export const completeDocumentWithToken = async ({
      },
    });

-    const authOptions = extractDocumentAuthMethods({
-      documentAuth: document.authOptions,
-      recipientAuth: recipient.authOptions,
-    });
-
    await tx.documentAuditLog.create({
      data: createDocumentAuditLogData({
        type: DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_RECIPIENT_COMPLETED,
@ -160,7 +154,6 @@ export const completeDocumentWithToken = async ({
          recipientName: recipient.name,
          recipientId: recipient.id,
          recipientRole: recipient.role,
-          actionAuth: authOptions.derivedRecipientActionAuth,
        },
      }),
    });
--- a/packages/lib/server-only/document/create-document-v2.ts
+++ b/packages/lib/server-only/document/create-document-v2.ts
@ -39,8 +39,8 @@ export type CreateDocumentOptions = {
    title: string;
    externalId?: string;
    visibility?: DocumentVisibility;
-    globalAccessAuth?: TDocumentAccessAuthTypes[];
-    globalActionAuth?: TDocumentActionAuthTypes[];
+    globalAccessAuth?: TDocumentAccessAuthTypes;
+    globalActionAuth?: TDocumentActionAuthTypes;
    formValues?: TDocumentFormValues;
    recipients: TCreateDocumentV2Request['recipients'];
  };
@ -113,16 +113,14 @@ export const createDocumentV2 = async ({
  }

  const authOptions = createDocumentAuthOptions({
-    globalAccessAuth: data?.globalAccessAuth || [],
-    globalActionAuth: data?.globalActionAuth || [],
+    globalAccessAuth: data?.globalAccessAuth || null,
+    globalActionAuth: data?.globalActionAuth || null,
  });

-  const recipientsHaveActionAuth = data.recipients?.some(
-    (recipient) => recipient.actionAuth && recipient.actionAuth.length > 0,
-  );
+  const recipientsHaveActionAuth = data.recipients?.some((recipient) => recipient.actionAuth);

  // Check if user has permission to set the global action auth.
-  if (authOptions.globalActionAuth.length > 0 || recipientsHaveActionAuth) {
+  if (authOptions.globalActionAuth || recipientsHaveActionAuth) {
    const isDocumentEnterprise = await isUserEnterprise({
      userId,
      teamId,
@ -173,8 +171,8 @@ export const createDocumentV2 = async ({
    await Promise.all(
      (data.recipients || []).map(async (recipient) => {
        const recipientAuthOptions = createRecipientAuthOptions({
-          accessAuth: recipient.accessAuth ?? [],
-          actionAuth: recipient.actionAuth ?? [],
+          accessAuth: recipient.accessAuth || null,
+          actionAuth: recipient.actionAuth || null,
        });

        await tx.recipient.create({
--- a/packages/lib/server-only/document/duplicate-document-by-id.ts
+++ b/packages/lib/server-only/document/duplicate-document-by-id.ts
@ -1,14 +1,9 @@
-import { DocumentSource, type Prisma, WebhookTriggerEvents } from '@prisma/client';
+import { DocumentSource, type Prisma } from '@prisma/client';

 import { prisma } from '@documenso/prisma';

 import { AppError, AppErrorCode } from '../../errors/app-error';
-import {
-  ZWebhookDocumentSchema,
-  mapDocumentToWebhookDocumentPayload,
-} from '../../types/webhook-payload';
 import { prefixedId } from '../../universal/id';
-import { triggerWebhook } from '../webhooks/trigger/trigger-webhook';
 import { getDocumentWhereInput } from './get-document-by-id';

 export interface DuplicateDocumentOptions {
@ -91,24 +86,7 @@ export const duplicateDocument = async ({
    };
  }

-  const createdDocument = await prisma.document.create({
-    ...createDocumentArguments,
-    include: {
-      recipients: true,
-      documentMeta: true,
-    },
-  });
-
-  await triggerWebhook({
-    event: WebhookTriggerEvents.DOCUMENT_CREATED,
-    data: ZWebhookDocumentSchema.parse({
-      ...mapDocumentToWebhookDocumentPayload(createdDocument),
-      recipients: createdDocument.recipients,
-      documentMeta: createdDocument.documentMeta,
-    }),
-    userId: userId,
-    teamId: teamId,
-  });
+  const createdDocument = await prisma.document.create(createDocumentArguments);

  return {
    documentId: createdDocument.id,
--- a/packages/lib/server-only/document/get-document-certificate-audit-logs.ts
+++ b/packages/lib/server-only/document/get-document-certificate-audit-logs.ts
@ -17,7 +17,6 @@ export const getDocumentCertificateAuditLogs = async ({
        in: [
          DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_RECIPIENT_COMPLETED,
          DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_RECIPIENT_REJECTED,
-          DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_FIELD_INSERTED,
          DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_OPENED,
          DOCUMENT_AUDIT_LOG_TYPE.EMAIL_SENT,
        ],
@ -37,9 +36,6 @@ export const getDocumentCertificateAuditLogs = async ({
    [DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_OPENED]: auditLogs.filter(
      (log) => log.type === DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_OPENED,
    ),
-    [DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_FIELD_INSERTED]: auditLogs.filter(
-      (log) => log.type === DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_FIELD_INSERTED,
-    ),
    [DOCUMENT_AUDIT_LOG_TYPE.EMAIL_SENT]: auditLogs.filter(
      (log) =>
        log.type === DOCUMENT_AUDIT_LOG_TYPE.EMAIL_SENT &&
--- a/packages/lib/server-only/document/is-recipient-authorized.ts
+++ b/packages/lib/server-only/document/is-recipient-authorized.ts
@ -5,7 +5,6 @@ import { match } from 'ts-pattern';
 import { prisma } from '@documenso/prisma';

 import { verifyTwoFactorAuthenticationToken } from '../2fa/verify-2fa-token';
-import { verifyPassword } from '../2fa/verify-password';
 import { AppError, AppErrorCode } from '../../errors/app-error';
 import type { TDocumentAuth, TDocumentAuthMethods } from '../../types/document-auth';
 import { DocumentAuth } from '../../types/document-auth';
@ -61,26 +60,23 @@ export const isRecipientAuthorized = async ({
    recipientAuth: recipient.authOptions,
  });

-  const authMethods: TDocumentAuth[] =
+  const authMethod: TDocumentAuth | null =
    type === 'ACCESS' ? derivedRecipientAccessAuth : derivedRecipientActionAuth;

  // Early true return when auth is not required.
-  if (
-    authMethods.length === 0 ||
-    authMethods.some((method) => method === DocumentAuth.EXPLICIT_NONE)
-  ) {
+  if (!authMethod || authMethod === DocumentAuth.EXPLICIT_NONE) {
    return true;
  }

  // Create auth options when none are passed for account.
-  if (!authOptions && authMethods.some((method) => method === DocumentAuth.ACCOUNT)) {
+  if (!authOptions && authMethod === DocumentAuth.ACCOUNT) {
    authOptions = {
      type: DocumentAuth.ACCOUNT,
    };
  }

  // Authentication required does not match provided method.
-  if (!authOptions || !authMethods.includes(authOptions.type) || !userId) {
+  if (!authOptions || authOptions.type !== authMethod || !userId) {
    return false;
  }

@ -121,15 +117,6 @@ export const isRecipientAuthorized = async ({
        window: 10, // 5 minutes worth of tokens
      });
    })
-    .with({ type: DocumentAuth.PASSWORD }, async ({ password }) => {
-      return await verifyPassword({
-        userId,
-        password,
-      });
-    })
-    .with({ type: DocumentAuth.EXPLICIT_NONE }, () => {
-      return true;
-    })
    .exhaustive();
 };

@ -173,7 +160,7 @@ const verifyPasskey = async ({
 }: VerifyPasskeyOptions): Promise<void> => {
  const passkey = await prisma.passkey.findFirst({
    where: {
-      credentialId: new Uint8Array(Buffer.from(authenticationResponse.id, 'base64')),
+      credentialId: Buffer.from(authenticationResponse.id, 'base64'),
      userId,
    },
  });
--- a/packages/lib/server-only/document/seal-document.ts
+++ b/packages/lib/server-only/document/seal-document.ts
@ -128,7 +128,7 @@ export const sealDocument = async ({

  // Normalize and flatten layers that could cause issues with the signature
  normalizeSignatureAppearances(doc);
-  await flattenForm(doc);
+  flattenForm(doc);
  flattenAnnotations(doc);

  // Add rejection stamp if the document is rejected
@ -153,7 +153,7 @@ export const sealDocument = async ({
  }

  // Re-flatten post-insertion to handle fields that create arcoFields
-  await flattenForm(doc);
+  flattenForm(doc);

  const pdfBytes = await doc.save();

--- a/packages/lib/server-only/document/update-document.ts
+++ b/packages/lib/server-only/document/update-document.ts
@ -21,8 +21,8 @@ export type UpdateDocumentOptions = {
    title?: string;
    externalId?: string | null;
    visibility?: DocumentVisibility | null;
-    globalAccessAuth?: TDocumentAccessAuthTypes[];
-    globalActionAuth?: TDocumentActionAuthTypes[];
+    globalAccessAuth?: TDocumentAccessAuthTypes | null;
+    globalActionAuth?: TDocumentActionAuthTypes | null;
    useLegacyFieldInsertion?: boolean;
  };
  requestMetadata: ApiRequestMetadata;
@ -119,6 +119,7 @@ export const updateDocument = async ({

  // If no data just return the document since this function is normally chained after a meta update.
  if (!data || Object.values(data).length === 0) {
+    console.log('no data');
    return document;
  }

@ -136,7 +137,7 @@ export const updateDocument = async ({
    data?.globalActionAuth === undefined ? documentGlobalActionAuth : data.globalActionAuth;

  // Check if user has permission to set the global action auth.
-  if (newGlobalActionAuth && newGlobalActionAuth.length > 0) {
+  if (newGlobalActionAuth) {
    const isDocumentEnterprise = await isUserEnterprise({
      userId,
      teamId,
--- a/packages/lib/server-only/document/validate-field-auth.ts
+++ b/packages/lib/server-only/document/validate-field-auth.ts
@ -3,6 +3,7 @@ import { FieldType } from '@prisma/client';

 import { AppError, AppErrorCode } from '../../errors/app-error';
 import type { TRecipientActionAuth } from '../../types/document-auth';
+import { extractDocumentAuthMethods } from '../../utils/document-auth';
 import { isRecipientAuthorized } from './is-recipient-authorized';

 export type ValidateFieldAuthOptions = {
@ -25,9 +26,14 @@ export const validateFieldAuth = async ({
  userId,
  authOptions,
 }: ValidateFieldAuthOptions) => {
+  const { derivedRecipientActionAuth } = extractDocumentAuthMethods({
+    documentAuth: documentAuthOptions,
+    recipientAuth: recipient.authOptions,
+  });
+
  // Override all non-signature fields to not require any auth.
  if (field.type !== FieldType.SIGNATURE) {
-    return undefined;
+    return null;
  }

  const isValid = await isRecipientAuthorized({
@ -44,5 +50,5 @@ export const validateFieldAuth = async ({
    });
  }

-  return authOptions?.type;
+  return derivedRecipientActionAuth;
 };
--- a/packages/lib/server-only/document/viewed-document.ts
+++ b/packages/lib/server-only/document/viewed-document.ts
@ -15,7 +15,7 @@ import { triggerWebhook } from '../webhooks/trigger/trigger-webhook';

 export type ViewedDocumentOptions = {
  token: string;
-  recipientAccessAuth?: TDocumentAccessAuthTypes[];
+  recipientAccessAuth?: TDocumentAccessAuthTypes | null;
  requestMetadata?: RequestMetadata;
 };

@ -63,7 +63,7 @@ export const viewedDocument = async ({
          recipientId: recipient.id,
          recipientName: recipient.name,
          recipientRole: recipient.role,
-          accessAuth: recipientAccessAuth ?? [],
+          accessAuth: recipientAccessAuth || undefined,
        },
      }),
    });
--- a/packages/lib/server-only/embedding-presign/create-embedding-presign-token.ts
+++ b/packages/lib/server-only/embedding-presign/create-embedding-presign-token.ts
@ -27,6 +27,7 @@ export const createEmbeddingPresignToken = async ({
    // In development mode, allow setting expiresIn to 0 for testing
    // In production, enforce a minimum expiration time
    const isDevelopment = env('NODE_ENV') !== 'production';
+    console.log('isDevelopment', isDevelopment);
    const minExpirationMinutes = isDevelopment ? 0 : 5;

    // Ensure expiresIn is at least the minimum allowed value
--- a/packages/lib/server-only/pdf/flatten-form.ts
+++ b/packages/lib/server-only/pdf/flatten-form.ts
@ -1,4 +1,3 @@
-import fontkit from '@pdf-lib/fontkit';
 import type { PDFField, PDFWidgetAnnotation } from 'pdf-lib';
 import {
  PDFCheckBox,
@ -14,8 +13,6 @@ import {
  translate,
 } from 'pdf-lib';

-import { NEXT_PUBLIC_WEBAPP_URL } from '../../constants/app';
-
 export const removeOptionalContentGroups = (document: PDFDocument) => {
  const context = document.context;
  const catalog = context.lookup(context.trailerInfo.Root);
@ -24,20 +21,12 @@ export const removeOptionalContentGroups = (document: PDFDocument) => {
  }
 };

-export const flattenForm = async (document: PDFDocument) => {
+export const flattenForm = (document: PDFDocument) => {
  removeOptionalContentGroups(document);

  const form = document.getForm();

-  const fontNoto = await fetch(`${NEXT_PUBLIC_WEBAPP_URL()}/fonts/noto-sans.ttf`).then(
-    async (res) => res.arrayBuffer(),
-  );
-
-  document.registerFontkit(fontkit);
-
-  const font = await document.embedFont(fontNoto);
-
-  form.updateFieldAppearances(font);
+  form.updateFieldAppearances();

  for (const field of form.getFields()) {
    for (const widget of field.acroField.getWidgets()) {
--- a/packages/lib/server-only/pdf/insert-field-in-pdf.ts
+++ b/packages/lib/server-only/pdf/insert-field-in-pdf.ts
@ -1,15 +1,8 @@
 // https://github.com/Hopding/pdf-lib/issues/20#issuecomment-412852821
 import fontkit from '@pdf-lib/fontkit';
 import { FieldType } from '@prisma/client';
-import type { PDFDocument, PDFFont, PDFTextField } from 'pdf-lib';
-import {
-  RotationTypes,
-  TextAlignment,
-  degrees,
-  radiansToDegrees,
-  rgb,
-  setFontAndSize,
-} from 'pdf-lib';
+import type { PDFDocument, PDFFont } from 'pdf-lib';
+import { RotationTypes, TextAlignment, degrees, radiansToDegrees, rgb } from 'pdf-lib';
 import { P, match } from 'ts-pattern';

 import {
@ -449,10 +442,6 @@ export const insertFieldInPDF = async (pdf: PDFDocument, field: FieldWithSignatu
        adjustedFieldY = adjustedPosition.yPos;
      }

-      // Set properties for the text field
-      setTextFieldFontSize(textField, font, fontSize);
-      textField.setText(textToInsert);
-
      // Set the position and size of the text field
      textField.addToPage(page, {
        x: adjustedFieldX,
@ -461,8 +450,6 @@ export const insertFieldInPDF = async (pdf: PDFDocument, field: FieldWithSignatu
        height: adjustedFieldHeight,
        rotate: degrees(pageRotationInDegrees),

-        font,
-
        // Hide borders.
        borderWidth: 0,
        borderColor: undefined,
@ -470,6 +457,10 @@ export const insertFieldInPDF = async (pdf: PDFDocument, field: FieldWithSignatu

        ...(isDebugMode ? { borderWidth: 1, borderColor: rgb(0, 0, 1) } : {}),
      });
+
+      // Set properties for the text field
+      textField.setFontSize(fontSize);
+      textField.setText(textToInsert);
    });

  return pdf;
@ -638,21 +629,3 @@ function breakLongString(text: string, maxWidth: number, font: PDFFont, fontSize

  return lines.join('\n');
 }
-
-const setTextFieldFontSize = (textField: PDFTextField, font: PDFFont, fontSize: number) => {
-  textField.defaultUpdateAppearances(font);
-  textField.updateAppearances(font);
-
-  try {
-    textField.setFontSize(fontSize);
-  } catch (err) {
-    let da = textField.acroField.getDefaultAppearance() ?? '';
-
-    da += `\n ${setFontAndSize(font.name, fontSize)}`;
-
-    textField.acroField.setDefaultAppearance(da);
-  }
-
-  textField.defaultUpdateAppearances(font);
-  textField.updateAppearances(font);
-};
--- a/packages/lib/server-only/pdf/normalize-pdf.ts
+++ b/packages/lib/server-only/pdf/normalize-pdf.ts
@ -11,7 +11,7 @@ export const normalizePdf = async (pdf: Buffer) => {
  }

  removeOptionalContentGroups(pdfDoc);
-  await flattenForm(pdfDoc);
+  flattenForm(pdfDoc);
  flattenAnnotations(pdfDoc);

  return Buffer.from(await pdfDoc.save());
--- a/packages/lib/server-only/recipient/create-document-recipients.ts
+++ b/packages/lib/server-only/recipient/create-document-recipients.ts
@ -22,8 +22,8 @@ export interface CreateDocumentRecipientsOptions {
    name: string;
    role: RecipientRole;
    signingOrder?: number | null;
-    accessAuth?: TRecipientAccessAuthTypes[];
-    actionAuth?: TRecipientActionAuthTypes[];
+    accessAuth?: TRecipientAccessAuthTypes | null;
+    actionAuth?: TRecipientActionAuthTypes | null;
  }[];
  requestMetadata: ApiRequestMetadata;
 }
@ -71,9 +71,7 @@ export const createDocumentRecipients = async ({
    });
  }

-  const recipientsHaveActionAuth = recipientsToCreate.some(
-    (recipient) => recipient.actionAuth && recipient.actionAuth.length > 0,
-  );
+  const recipientsHaveActionAuth = recipientsToCreate.some((recipient) => recipient.actionAuth);

  // Check if user has permission to set the global action auth.
  if (recipientsHaveActionAuth) {
@ -112,8 +110,8 @@ export const createDocumentRecipients = async ({
    return await Promise.all(
      normalizedRecipients.map(async (recipient) => {
        const authOptions = createRecipientAuthOptions({
-          accessAuth: recipient.accessAuth ?? [],
-          actionAuth: recipient.actionAuth ?? [],
+          accessAuth: recipient.accessAuth || null,
+          actionAuth: recipient.actionAuth || null,
        });

        const createdRecipient = await tx.recipient.create({
@ -142,8 +140,8 @@ export const createDocumentRecipients = async ({
              recipientName: createdRecipient.name,
              recipientId: createdRecipient.id,
              recipientRole: createdRecipient.role,
-              accessAuth: recipient.accessAuth ?? [],
-              actionAuth: recipient.actionAuth ?? [],
+              accessAuth: recipient.accessAuth || undefined,
+              actionAuth: recipient.actionAuth || undefined,
            },
          }),
        });
--- a/packages/lib/server-only/recipient/create-template-recipients.ts
+++ b/packages/lib/server-only/recipient/create-template-recipients.ts
@ -19,8 +19,8 @@ export interface CreateTemplateRecipientsOptions {
    name: string;
    role: RecipientRole;
    signingOrder?: number | null;
-    accessAuth?: TRecipientAccessAuthTypes[];
-    actionAuth?: TRecipientActionAuthTypes[];
+    accessAuth?: TRecipientAccessAuthTypes | null;
+    actionAuth?: TRecipientActionAuthTypes | null;
  }[];
 }

@ -60,9 +60,7 @@ export const createTemplateRecipients = async ({
    });
  }

-  const recipientsHaveActionAuth = recipientsToCreate.some(
-    (recipient) => recipient.actionAuth && recipient.actionAuth.length > 0,
-  );
+  const recipientsHaveActionAuth = recipientsToCreate.some((recipient) => recipient.actionAuth);

  // Check if user has permission to set the global action auth.
  if (recipientsHaveActionAuth) {
@ -101,8 +99,8 @@ export const createTemplateRecipients = async ({
    return await Promise.all(
      normalizedRecipients.map(async (recipient) => {
        const authOptions = createRecipientAuthOptions({
-          accessAuth: recipient.accessAuth ?? [],
-          actionAuth: recipient.actionAuth ?? [],
+          accessAuth: recipient.accessAuth || null,
+          actionAuth: recipient.actionAuth || null,
        });

        const createdRecipient = await tx.recipient.create({
--- a/packages/lib/server-only/recipient/set-document-recipients.ts
+++ b/packages/lib/server-only/recipient/set-document-recipients.ts
@ -4,7 +4,6 @@ import { msg } from '@lingui/core/macro';
 import type { Recipient } from '@prisma/client';
 import { RecipientRole } from '@prisma/client';
 import { SendStatus, SigningStatus } from '@prisma/client';
-import { isDeepEqual } from 'remeda';

 import { isUserEnterprise } from '@documenso/ee/server-only/util/is-document-enterprise';
 import { mailer } from '@documenso/email/mailer';
@ -97,9 +96,7 @@ export const setDocumentRecipients = async ({
    throw new Error('Document already complete');
  }

-  const recipientsHaveActionAuth = recipients.some(
-    (recipient) => recipient.actionAuth && recipient.actionAuth.length > 0,
-  );
+  const recipientsHaveActionAuth = recipients.some((recipient) => recipient.actionAuth);

  // Check if user has permission to set the global action auth.
  if (recipientsHaveActionAuth) {
@ -248,8 +245,8 @@ export const setDocumentRecipients = async ({
              metadata: requestMetadata,
              data: {
                ...baseAuditLog,
-                accessAuth: recipient.accessAuth || [],
-                actionAuth: recipient.actionAuth || [],
+                accessAuth: recipient.accessAuth || undefined,
+                actionAuth: recipient.actionAuth || undefined,
              },
            }),
          });
@ -364,8 +361,8 @@ type RecipientData = {
  name: string;
  role: RecipientRole;
  signingOrder?: number | null;
-  accessAuth?: TRecipientAccessAuthTypes[];
-  actionAuth?: TRecipientActionAuthTypes[];
+  accessAuth?: TRecipientAccessAuthTypes | null;
+  actionAuth?: TRecipientActionAuthTypes | null;
 };

 type RecipientDataWithClientId = Recipient & {
@ -375,15 +372,15 @@ type RecipientDataWithClientId = Recipient & {
 const hasRecipientBeenChanged = (recipient: Recipient, newRecipientData: RecipientData) => {
  const authOptions = ZRecipientAuthOptionsSchema.parse(recipient.authOptions);

-  const newRecipientAccessAuth = newRecipientData.accessAuth || [];
-  const newRecipientActionAuth = newRecipientData.actionAuth || [];
+  const newRecipientAccessAuth = newRecipientData.accessAuth || null;
+  const newRecipientActionAuth = newRecipientData.actionAuth || null;

  return (
    recipient.email !== newRecipientData.email ||
    recipient.name !== newRecipientData.name ||
    recipient.role !== newRecipientData.role ||
    recipient.signingOrder !== newRecipientData.signingOrder ||
-    !isDeepEqual(authOptions.accessAuth, newRecipientAccessAuth) ||
-    !isDeepEqual(authOptions.actionAuth, newRecipientActionAuth)
+    authOptions.accessAuth !== newRecipientAccessAuth ||
+    authOptions.actionAuth !== newRecipientActionAuth
  );
 };
--- a/packages/lib/server-only/recipient/set-template-recipients.ts
+++ b/packages/lib/server-only/recipient/set-template-recipients.ts
@ -26,7 +26,7 @@ export type SetTemplateRecipientsOptions = {
    name: string;
    role: RecipientRole;
    signingOrder?: number | null;
-    actionAuth?: TRecipientActionAuthTypes[];
+    actionAuth?: TRecipientActionAuthTypes | null;
  }[];
 };

@ -64,9 +64,7 @@ export const setTemplateRecipients = async ({
    throw new Error('Template not found');
  }

-  const recipientsHaveActionAuth = recipients.some(
-    (recipient) => recipient.actionAuth && recipient.actionAuth.length > 0,
-  );
+  const recipientsHaveActionAuth = recipients.some((recipient) => recipient.actionAuth);

  // Check if user has permission to set the global action auth.
  if (recipientsHaveActionAuth) {
--- a/packages/lib/server-only/recipient/update-document-recipients.ts
+++ b/packages/lib/server-only/recipient/update-document-recipients.ts
@ -1,7 +1,6 @@
 import type { Recipient } from '@prisma/client';
 import { RecipientRole } from '@prisma/client';
 import { SendStatus, SigningStatus } from '@prisma/client';
-import { isDeepEqual } from 'remeda';

 import { isUserEnterprise } from '@documenso/ee/server-only/util/is-document-enterprise';
 import { DOCUMENT_AUDIT_LOG_TYPE } from '@documenso/lib/types/document-audit-logs';
@ -73,9 +72,7 @@ export const updateDocumentRecipients = async ({
    });
  }

-  const recipientsHaveActionAuth = recipients.some(
-    (recipient) => recipient.actionAuth && recipient.actionAuth.length > 0,
-  );
+  const recipientsHaveActionAuth = recipients.some((recipient) => recipient.actionAuth);

  // Check if user has permission to set the global action auth.
  if (recipientsHaveActionAuth) {
@ -221,8 +218,8 @@ type RecipientData = {
  name?: string;
  role?: RecipientRole;
  signingOrder?: number | null;
-  accessAuth?: TRecipientAccessAuthTypes[];
-  actionAuth?: TRecipientActionAuthTypes[];
+  accessAuth?: TRecipientAccessAuthTypes | null;
+  actionAuth?: TRecipientActionAuthTypes | null;
 };

 const hasRecipientBeenChanged = (recipient: Recipient, newRecipientData: RecipientData) => {
@ -236,7 +233,7 @@ const hasRecipientBeenChanged = (recipient: Recipient, newRecipientData: Recipie
    recipient.name !== newRecipientData.name ||
    recipient.role !== newRecipientData.role ||
    recipient.signingOrder !== newRecipientData.signingOrder ||
-    !isDeepEqual(authOptions.accessAuth, newRecipientAccessAuth) ||
-    !isDeepEqual(authOptions.actionAuth, newRecipientActionAuth)
+    authOptions.accessAuth !== newRecipientAccessAuth ||
+    authOptions.actionAuth !== newRecipientActionAuth
  );
 };
--- a/packages/lib/server-only/recipient/update-recipient.ts
+++ b/packages/lib/server-only/recipient/update-recipient.ts
@ -20,7 +20,7 @@ export type UpdateRecipientOptions = {
  name?: string;
  role?: RecipientRole;
  signingOrder?: number | null;
-  actionAuth?: TRecipientActionAuthTypes[];
+  actionAuth?: TRecipientActionAuthTypes | null;
  userId: number;
  teamId?: number;
  requestMetadata?: RequestMetadata;
@ -90,7 +90,7 @@ export const updateRecipient = async ({
    throw new Error('Recipient not found');
  }

-  if (actionAuth && actionAuth.length > 0) {
+  if (actionAuth) {
    const isDocumentEnterprise = await isUserEnterprise({
      userId,
      teamId,
@ -117,7 +117,7 @@ export const updateRecipient = async ({
        signingOrder,
        authOptions: createRecipientAuthOptions({
          accessAuth: recipientAuthOptions.accessAuth,
-          actionAuth: actionAuth ?? [],
+          actionAuth: actionAuth ?? null,
        }),
      },
    });
--- a/packages/lib/server-only/recipient/update-template-recipients.ts
+++ b/packages/lib/server-only/recipient/update-template-recipients.ts
@ -22,8 +22,8 @@ export interface UpdateTemplateRecipientsOptions {
    name?: string;
    role?: RecipientRole;
    signingOrder?: number | null;
-    accessAuth?: TRecipientAccessAuthTypes[];
-    actionAuth?: TRecipientActionAuthTypes[];
+    accessAuth?: TRecipientAccessAuthTypes | null;
+    actionAuth?: TRecipientActionAuthTypes | null;
  }[];
 }

@ -63,9 +63,7 @@ export const updateTemplateRecipients = async ({
    });
  }

-  const recipientsHaveActionAuth = recipients.some(
-    (recipient) => recipient.actionAuth && recipient.actionAuth.length > 0,
-  );
+  const recipientsHaveActionAuth = recipients.some((recipient) => recipient.actionAuth);

  // Check if user has permission to set the global action auth.
  if (recipientsHaveActionAuth) {
--- a/packages/lib/server-only/template/create-document-from-direct-template.ts
+++ b/packages/lib/server-only/template/create-document-from-direct-template.ts
@ -70,7 +70,7 @@ export type CreateDocumentFromDirectTemplateOptions = {

 type CreatedDirectRecipientField = {
  field: Field & { signature?: Signature | null };
-  derivedRecipientActionAuth?: TRecipientActionAuthTypes;
+  derivedRecipientActionAuth: TRecipientActionAuthTypes | null;
 };

 export const ZCreateDocumentFromDirectTemplateResponseSchema = z.object({
@ -151,9 +151,9 @@ export const createDocumentFromDirectTemplate = async ({
  const directRecipientName = user?.name || initialDirectRecipientName;

  // Ensure typesafety when we add more options.
-  const isAccessAuthValid = match(derivedRecipientAccessAuth.at(0))
+  const isAccessAuthValid = match(derivedRecipientAccessAuth)
    .with(DocumentAccessAuth.ACCOUNT, () => user && user?.email === directRecipientEmail)
-    .with(undefined, () => true)
+    .with(null, () => true)
    .exhaustive();

  if (!isAccessAuthValid) {
@ -460,7 +460,7 @@ export const createDocumentFromDirectTemplate = async ({
    const createdDirectRecipientFields: CreatedDirectRecipientField[] = [
      ...createdDirectRecipient.fields.map((field) => ({
        field,
-        derivedRecipientActionAuth: undefined,
+        derivedRecipientActionAuth: null,
      })),
      ...createdDirectRecipientSignatureFields,
    ];
@ -567,7 +567,6 @@ export const createDocumentFromDirectTemplate = async ({
          recipientId: createdDirectRecipient.id,
          recipientName: createdDirectRecipient.name,
          recipientRole: createdDirectRecipient.role,
-          actionAuth: createdDirectRecipient.authOptions?.actionAuth ?? [],
        },
      }),
    ];
--- a/packages/lib/server-only/template/create-document-from-template.ts
+++ b/packages/lib/server-only/template/create-document-from-template.ts
@ -9,13 +9,11 @@ import {
  SigningStatus,
  WebhookTriggerEvents,
 } from '@prisma/client';
-import { DateTime } from 'luxon';
 import { match } from 'ts-pattern';

 import { nanoid, prefixedId } from '@documenso/lib/universal/id';
 import { prisma } from '@documenso/prisma';

-import { DEFAULT_DOCUMENT_DATE_FORMAT } from '../../constants/date-formats';
 import type { SupportedLanguageCodes } from '../../constants/i18n';
 import { AppError, AppErrorCode } from '../../errors/app-error';
 import { DOCUMENT_AUDIT_LOG_TYPE } from '../../types/document-audit-logs';
@ -510,8 +508,10 @@ export const createDocumentFromTemplate = async ({
      fieldsToCreate = fieldsToCreate.concat(
        fields.map((field) => {
          const prefillField = prefillFields?.find((value) => value.id === field.id);
+          // Use type assertion to help TypeScript understand the structure
+          const updatedFieldMeta = getUpdatedFieldMeta(field, prefillField);

-          const payload = {
+          return {
            documentId: document.id,
            recipientId: recipient.id,
            type: field.type,
@ -522,38 +522,8 @@ export const createDocumentFromTemplate = async ({
            height: field.height,
            customText: '',
            inserted: false,
-            fieldMeta: field.fieldMeta,
+            fieldMeta: updatedFieldMeta,
          };
-
-          if (prefillField) {
-            match(prefillField)
-              .with({ type: 'date' }, (selector) => {
-                if (!selector.value) {
-                  throw new AppError(AppErrorCode.INVALID_BODY, {
-                    message: `Date value is required for field ${field.id}`,
-                  });
-                }
-
-                const date = new Date(selector.value);
-
-                if (isNaN(date.getTime())) {
-                  throw new AppError(AppErrorCode.INVALID_BODY, {
-                    message: `Invalid date value for field ${field.id}: ${selector.value}`,
-                  });
-                }
-
-                payload.customText = DateTime.fromJSDate(date).toFormat(
-                  template.templateMeta?.dateFormat ?? DEFAULT_DOCUMENT_DATE_FORMAT,
-                );
-
-                payload.inserted = true;
-              })
-              .otherwise((selector) => {
-                payload.fieldMeta = getUpdatedFieldMeta(field, selector);
-              });
-          }
-
-          return payload;
        }),
      );
    });
--- a/packages/lib/server-only/template/create-template.ts
+++ b/packages/lib/server-only/template/create-template.ts
@ -1,6 +1,7 @@
 import type { z } from 'zod';

 import { prisma } from '@documenso/prisma';
+import { FolderType } from '@documenso/prisma/generated/types';
 import { TemplateSchema } from '@documenso/prisma/generated/zod/modelSchema//TemplateSchema';
 import type { TCreateTemplateMutationSchema } from '@documenso/trpc/server/template-router/schema';

@ -44,10 +45,13 @@ export const createTemplate = async ({
    }
  }

+  let folder = null;
+
  if (folderId) {
-    const folder = await prisma.folder.findFirst({
+    folder = await prisma.folder.findFirst({
      where: {
        id: folderId,
+        type: FolderType.TEMPLATE,
        ...(teamId
          ? {
              team: {
@ -67,23 +71,17 @@ export const createTemplate = async ({
    });

    if (!folder) {
-      throw new AppError(AppErrorCode.NOT_FOUND, {
-        message: 'Folder not found',
-      });
+      throw new AppError(AppErrorCode.NOT_FOUND);
    }
  }

-  if (teamId && !team) {
-    throw new AppError(AppErrorCode.NOT_FOUND);
-  }
-
  return await prisma.template.create({
    data: {
      title,
      userId,
      templateDocumentDataId,
      teamId,
-      folderId: folderId,
+      folderId: folder?.id,
      templateMeta: {
        create: {
          language: team?.teamGlobalSettings?.documentLanguage,
--- a/packages/lib/server-only/template/update-template.ts
+++ b/packages/lib/server-only/template/update-template.ts
@ -15,8 +15,8 @@ export type UpdateTemplateOptions = {
    title?: string;
    externalId?: string | null;
    visibility?: DocumentVisibility;
-    globalAccessAuth?: TDocumentAccessAuthTypes[];
-    globalActionAuth?: TDocumentActionAuthTypes[];
+    globalAccessAuth?: TDocumentAccessAuthTypes | null;
+    globalActionAuth?: TDocumentActionAuthTypes | null;
    publicTitle?: string;
    publicDescription?: string;
    type?: Template['type'];
@ -74,7 +74,7 @@ export const updateTemplate = async ({
    data?.globalActionAuth === undefined ? documentGlobalActionAuth : data.globalActionAuth;

  // Check if user has permission to set the global action auth.
-  if (newGlobalActionAuth && newGlobalActionAuth.length > 0) {
+  if (newGlobalActionAuth) {
    const isDocumentEnterprise = await isUserEnterprise({
      userId,
      teamId,
--- a/packages/lib/translations/de/web.po
+++ b/packages/lib/translations/de/web.po
--- a/packages/lib/translations/en/web.po
+++ b/packages/lib/translations/en/web.po
--- a/packages/lib/translations/es/web.po
+++ b/packages/lib/translations/es/web.po
--- a/packages/lib/translations/fr/web.po
+++ b/packages/lib/translations/fr/web.po
--- a/packages/lib/translations/it/web.po
+++ b/packages/lib/translations/it/web.po
--- a/packages/lib/translations/pl/web.po
+++ b/packages/lib/translations/pl/web.po
--- a/packages/lib/types/document-audit-logs.ts
+++ b/packages/lib/types/document-audit-logs.ts
@ -123,8 +123,8 @@ export const ZDocumentAuditLogFieldDiffSchema = z.union([
 ]);

 export const ZGenericFromToSchema = z.object({
-  from: z.union([z.string(), z.array(z.string())]).nullable(),
-  to: z.union([z.string(), z.array(z.string())]).nullable(),
+  from: z.string().nullable(),
+  to: z.string().nullable(),
 });

 export const ZRecipientDiffActionAuthSchema = ZGenericFromToSchema.extend({
@ -296,7 +296,7 @@ export const ZDocumentAuditLogEventDocumentFieldInsertedSchema = z.object({
      },
      z
        .object({
-          type: ZRecipientActionAuthTypesSchema.optional(),
+          type: ZRecipientActionAuthTypesSchema,
        })
        .optional(),
    ),
@ -384,7 +384,7 @@ export const ZDocumentAuditLogEventDocumentFieldPrefilledSchema = z.object({
      },
      z
        .object({
-          type: ZRecipientActionAuthTypesSchema.optional(),
+          type: ZRecipientActionAuthTypesSchema,
        })
        .optional(),
    ),
@ -428,13 +428,7 @@ export const ZDocumentAuditLogEventDocumentMetaUpdatedSchema = z.object({
 export const ZDocumentAuditLogEventDocumentOpenedSchema = z.object({
  type: z.literal(DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_OPENED),
  data: ZBaseRecipientDataSchema.extend({
-    accessAuth: z.preprocess((unknownValue) => {
-      if (!unknownValue) {
-        return [];
-      }
-
-      return Array.isArray(unknownValue) ? unknownValue : [unknownValue];
-    }, z.array(ZRecipientAccessAuthTypesSchema)),
+    accessAuth: z.string().optional(),
  }),
 });

@ -444,13 +438,7 @@ export const ZDocumentAuditLogEventDocumentOpenedSchema = z.object({
 export const ZDocumentAuditLogEventDocumentRecipientCompleteSchema = z.object({
  type: z.literal(DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_RECIPIENT_COMPLETED),
  data: ZBaseRecipientDataSchema.extend({
-    actionAuth: z.preprocess((unknownValue) => {
-      if (!unknownValue) {
-        return [];
-      }
-
-      return Array.isArray(unknownValue) ? unknownValue : [unknownValue];
-    }, z.array(ZRecipientActionAuthTypesSchema)),
+    actionAuth: z.string().optional(),
  }),
 });

@ -528,20 +516,8 @@ export const ZDocumentAuditLogEventFieldUpdatedSchema = z.object({
 export const ZDocumentAuditLogEventRecipientAddedSchema = z.object({
  type: z.literal(DOCUMENT_AUDIT_LOG_TYPE.RECIPIENT_CREATED),
  data: ZBaseRecipientDataSchema.extend({
-    accessAuth: z.preprocess((unknownValue) => {
-      if (!unknownValue) {
-        return [];
-      }
-
-      return Array.isArray(unknownValue) ? unknownValue : [unknownValue];
-    }, z.array(ZRecipientAccessAuthTypesSchema)),
-    actionAuth: z.preprocess((unknownValue) => {
-      if (!unknownValue) {
-        return [];
-      }
-
-      return Array.isArray(unknownValue) ? unknownValue : [unknownValue];
-    }, z.array(ZRecipientActionAuthTypesSchema)),
+    accessAuth: ZRecipientAccessAuthTypesSchema.optional(),
+    actionAuth: ZRecipientActionAuthTypesSchema.optional(),
  }),
 });

--- a/packages/lib/types/document-auth.ts
+++ b/packages/lib/types/document-auth.ts
@ -9,10 +9,8 @@ export const ZDocumentAuthTypesSchema = z.enum([
  'ACCOUNT',
  'PASSKEY',
  'TWO_FACTOR_AUTH',
-  'PASSWORD',
  'EXPLICIT_NONE',
 ]);
-
 export const DocumentAuth = ZDocumentAuthTypesSchema.Enum;

 const ZDocumentAuthAccountSchema = z.object({
@ -29,11 +27,6 @@ const ZDocumentAuthPasskeySchema = z.object({
  tokenReference: z.string().min(1),
 });

-const ZDocumentAuthPasswordSchema = z.object({
-  type: z.literal(DocumentAuth.PASSWORD),
-  password: z.string().min(1),
-});
-
 const ZDocumentAuth2FASchema = z.object({
  type: z.literal(DocumentAuth.TWO_FACTOR_AUTH),
  token: z.string().min(4).max(10),
@ -47,7 +40,6 @@ export const ZDocumentAuthMethodsSchema = z.discriminatedUnion('type', [
  ZDocumentAuthExplicitNoneSchema,
  ZDocumentAuthPasskeySchema,
  ZDocumentAuth2FASchema,
-  ZDocumentAuthPasswordSchema,
 ]);

 /**
@ -69,15 +61,9 @@ export const ZDocumentActionAuthSchema = z.discriminatedUnion('type', [
  ZDocumentAuthAccountSchema,
  ZDocumentAuthPasskeySchema,
  ZDocumentAuth2FASchema,
-  ZDocumentAuthPasswordSchema,
 ]);
 export const ZDocumentActionAuthTypesSchema = z
-  .enum([
-    DocumentAuth.ACCOUNT,
-    DocumentAuth.PASSKEY,
-    DocumentAuth.TWO_FACTOR_AUTH,
-    DocumentAuth.PASSWORD,
-  ])
+  .enum([DocumentAuth.ACCOUNT, DocumentAuth.PASSKEY, DocumentAuth.TWO_FACTOR_AUTH])
  .describe(
    'The type of authentication required for the recipient to sign the document. This field is restricted to Enterprise plan users only.',
  );
@ -103,7 +89,6 @@ export const ZRecipientActionAuthSchema = z.discriminatedUnion('type', [
  ZDocumentAuthAccountSchema,
  ZDocumentAuthPasskeySchema,
  ZDocumentAuth2FASchema,
-  ZDocumentAuthPasswordSchema,
  ZDocumentAuthExplicitNoneSchema,
 ]);
 export const ZRecipientActionAuthTypesSchema = z
@ -111,7 +96,6 @@ export const ZRecipientActionAuthTypesSchema = z
    DocumentAuth.ACCOUNT,
    DocumentAuth.PASSKEY,
    DocumentAuth.TWO_FACTOR_AUTH,
-    DocumentAuth.PASSWORD,
    DocumentAuth.EXPLICIT_NONE,
  ])
  .describe('The type of authentication required for the recipient to sign the document.');
@ -126,26 +110,18 @@ export const RecipientActionAuth = ZRecipientActionAuthTypesSchema.Enum;
 */
 export const ZDocumentAuthOptionsSchema = z.preprocess(
  (unknownValue) => {
-    if (!unknownValue || typeof unknownValue !== 'object') {
-      return {
-        globalAccessAuth: [],
-        globalActionAuth: [],
-      };
+    if (unknownValue) {
+      return unknownValue;
    }

-    const globalAccessAuth =
-      'globalAccessAuth' in unknownValue ? processAuthValue(unknownValue.globalAccessAuth) : [];
-    const globalActionAuth =
-      'globalActionAuth' in unknownValue ? processAuthValue(unknownValue.globalActionAuth) : [];
-
    return {
-      globalAccessAuth,
-      globalActionAuth,
+      globalAccessAuth: null,
+      globalActionAuth: null,
    };
  },
  z.object({
-    globalAccessAuth: z.array(ZDocumentAccessAuthTypesSchema),
-    globalActionAuth: z.array(ZDocumentActionAuthTypesSchema),
+    globalAccessAuth: ZDocumentAccessAuthTypesSchema.nullable(),
+    globalActionAuth: ZDocumentActionAuthTypesSchema.nullable(),
  }),
 );

@ -154,46 +130,21 @@ export const ZDocumentAuthOptionsSchema = z.preprocess(
 */
 export const ZRecipientAuthOptionsSchema = z.preprocess(
  (unknownValue) => {
-    if (!unknownValue || typeof unknownValue !== 'object') {
-      return {
-        accessAuth: [],
-        actionAuth: [],
-      };
+    if (unknownValue) {
+      return unknownValue;
    }

-    const accessAuth =
-      'accessAuth' in unknownValue ? processAuthValue(unknownValue.accessAuth) : [];
-    const actionAuth =
-      'actionAuth' in unknownValue ? processAuthValue(unknownValue.actionAuth) : [];
-
    return {
-      accessAuth,
-      actionAuth,
+      accessAuth: null,
+      actionAuth: null,
    };
  },
  z.object({
-    accessAuth: z.array(ZRecipientAccessAuthTypesSchema),
-    actionAuth: z.array(ZRecipientActionAuthTypesSchema),
+    accessAuth: ZRecipientAccessAuthTypesSchema.nullable(),
+    actionAuth: ZRecipientActionAuthTypesSchema.nullable(),
  }),
 );

-/**
- * Utility function to process the auth value.
- *
- * Converts the old singular auth value to an array of auth values.
- */
-const processAuthValue = (value: unknown) => {
-  if (value === null || value === undefined) {
-    return [];
-  }
-
-  if (Array.isArray(value)) {
-    return value;
-  }
-
-  return [value];
-};
-
 export type TDocumentAuth = z.infer<typeof ZDocumentAuthTypesSchema>;
 export type TDocumentAuthMethods = z.infer<typeof ZDocumentAuthMethodsSchema>;
 export type TDocumentAuthOptions = z.infer<typeof ZDocumentAuthOptionsSchema>;
--- a/packages/lib/types/field-meta.ts
+++ b/packages/lib/types/field-meta.ts
@ -155,10 +155,6 @@ export const ZFieldMetaPrefillFieldsSchema = z
        label: z.string().optional(),
        value: z.string().optional(),
      }),
-      z.object({
-        type: z.literal('date'),
-        value: z.string().optional(),
-      }),
    ]),
  );

--- a/packages/lib/utils/document-audit-logs.ts
+++ b/packages/lib/utils/document-audit-logs.ts
@ -2,7 +2,6 @@ import type { I18n } from '@lingui/core';
 import { msg } from '@lingui/core/macro';
 import type { DocumentAuditLog, DocumentMeta, Field, Recipient } from '@prisma/client';
 import { RecipientRole } from '@prisma/client';
-import { isDeepEqual } from 'remeda';
 import { match } from 'ts-pattern';

 import type {
@ -107,7 +106,7 @@ export const diffRecipientChanges = (
  const newActionAuth =
    newAuthOptions?.actionAuth === undefined ? oldActionAuth : newAuthOptions.actionAuth;

-  if (!isDeepEqual(oldAccessAuth, newAccessAuth)) {
+  if (oldAccessAuth !== newAccessAuth) {
    diffs.push({
      type: RECIPIENT_DIFF_TYPE.ACCESS_AUTH,
      from: oldAccessAuth ?? '',
@ -115,7 +114,7 @@ export const diffRecipientChanges = (
    });
  }

-  if (!isDeepEqual(oldActionAuth, newActionAuth)) {
+  if (oldActionAuth !== newActionAuth) {
    diffs.push({
      type: RECIPIENT_DIFF_TYPE.ACTION_AUTH,
      from: oldActionAuth ?? '',
--- a/packages/lib/utils/document-auth.ts
+++ b/packages/lib/utils/document-auth.ts
@ -27,21 +27,17 @@ export const extractDocumentAuthMethods = ({
  const documentAuthOption = ZDocumentAuthOptionsSchema.parse(documentAuth);
  const recipientAuthOption = ZRecipientAuthOptionsSchema.parse(recipientAuth);

-  const derivedRecipientAccessAuth: TRecipientAccessAuthTypes[] =
-    recipientAuthOption.accessAuth.length > 0
-      ? recipientAuthOption.accessAuth
-      : documentAuthOption.globalAccessAuth;
+  const derivedRecipientAccessAuth: TRecipientAccessAuthTypes | null =
+    recipientAuthOption.accessAuth || documentAuthOption.globalAccessAuth;

-  const derivedRecipientActionAuth: TRecipientActionAuthTypes[] =
-    recipientAuthOption.actionAuth.length > 0
-      ? recipientAuthOption.actionAuth
-      : documentAuthOption.globalActionAuth;
+  const derivedRecipientActionAuth: TRecipientActionAuthTypes | null =
+    recipientAuthOption.actionAuth || documentAuthOption.globalActionAuth;

-  const recipientAccessAuthRequired = derivedRecipientAccessAuth.length > 0;
+  const recipientAccessAuthRequired = derivedRecipientAccessAuth !== null;

  const recipientActionAuthRequired =
-    derivedRecipientActionAuth.length > 0 &&
-    !derivedRecipientActionAuth.includes(DocumentAuth.EXPLICIT_NONE);
+    derivedRecipientActionAuth !== DocumentAuth.EXPLICIT_NONE &&
+    derivedRecipientActionAuth !== null;

  return {
    derivedRecipientAccessAuth,
@ -58,8 +54,8 @@ export const extractDocumentAuthMethods = ({
 */
 export const createDocumentAuthOptions = (options: TDocumentAuthOptions): TDocumentAuthOptions => {
  return {
-    globalAccessAuth: options?.globalAccessAuth ?? [],
-    globalActionAuth: options?.globalActionAuth ?? [],
+    globalAccessAuth: options?.globalAccessAuth ?? null,
+    globalActionAuth: options?.globalActionAuth ?? null,
  };
 };

@ -70,7 +66,7 @@ export const createRecipientAuthOptions = (
  options: TRecipientAuthOptions,
 ): TRecipientAuthOptions => {
  return {
-    accessAuth: options?.accessAuth ?? [],
-    actionAuth: options?.actionAuth ?? [],
+    accessAuth: options?.accessAuth ?? null,
+    actionAuth: options?.actionAuth ?? null,
  };
 };
--- a/packages/prisma/package.json
+++ b/packages/prisma/package.json
@ -21,18 +21,18 @@
    "seed": "tsx ./seed-database.ts"
  },
  "dependencies": {
-    "@prisma/client": "^6.8.2",
+    "@prisma/client": "^5.4.2",
    "kysely": "0.26.3",
-    "prisma": "^6.8.2",
-    "prisma-extension-kysely": "^3.0.0",
+    "prisma": "^5.4.2",
+    "prisma-extension-kysely": "^2.1.0",
    "prisma-kysely": "^1.8.0",
    "prisma-json-types-generator": "^3.2.2",
    "ts-pattern": "^5.0.6",
-    "zod-prisma-types": "3.2.4"
+    "zod-prisma-types": "3.1.9"
  },
  "devDependencies": {
-    "dotenv": "^16.5.0",
-    "dotenv-cli": "^8.0.0",
+    "dotenv": "^16.3.1",
+    "dotenv-cli": "^7.3.0",
    "tsx": "^4.19.2",
    "typescript": "5.6.2"
  }
--- a/packages/signing/package.json
+++ b/packages/signing/package.json
@ -18,6 +18,6 @@
    "ts-pattern": "^5.0.5"
  },
  "devDependencies": {
-    "vitest": "^3.1.4"
+    "vitest": "^2.1.8"
  }
 }
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Catalin Documenso	90b6ebe5f0	fix: use enum for type	2025-05-02 21:20:58 +03:00
Catalin Documenso	6e8cd8fc6a	fix: update folder retrieval logic in createTemplate function	2025-05-02 20:47:27 +03:00
Catalin Documenso	928745e13b	fix: fix folder retrieval for template creation	2025-05-02 20:39:41 +03:00