npm - @authhero/adapter-interfaces - Versions diffs - 1.10.2 → 1.11.0 - Mend

@authhero/adapter-interfaces 1.10.2 → 1.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/dist/adapter-interfaces.cjs +1 -1
package/dist/adapter-interfaces.d.ts +1513 -220
package/dist/adapter-interfaces.mjs +744 -606
package/package.json +1 -1

package/dist/adapter-interfaces.d.ts CHANGED Viewed

@@ -2999,7 +2999,7 @@ export declare const userResponseSchema: z.ZodObject<{
 }, z.ZodAny, "strip">>;
 export type UserResponse = z.infer<typeof userResponseSchema>;
 export declare const clientInsertSchema: z.ZodObject<{
-	client_id: z.ZodString;
+	client_id: z.ZodOptional<z.ZodString>;
 	name: z.ZodString;
 	description: z.ZodOptional<z.ZodString>;
 	global: z.ZodDefault<z.ZodBoolean>;
@@ -3066,7 +3066,37 @@ export declare const clientInsertSchema: z.ZodObject<{
 	mobile: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	initiate_login_uri: z.ZodOptional<z.ZodString>;
 	native_social_login: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
-	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodObject<{
+		rotation_type: z.ZodOptional<z.ZodEnum<[
+			"rotating",
+			"non-rotating"
+		]>>;
+		leeway: z.ZodOptional<z.ZodNumber>;
+		expiration_type: z.ZodOptional<z.ZodEnum<[
+			"expiring",
+			"non-expiring"
+		]>>;
+		token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+		idle_token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_idle_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+	}, "strip", z.ZodTypeAny, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}>>>;
 	default_organization: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	organization_usage: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
 		"deny",
@@ -3104,7 +3134,6 @@ export declare const clientInsertSchema: z.ZodObject<{
 	]>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
-	client_id: string;
 	global: boolean;
 	is_first_party: boolean;
 	oidc_conformant: boolean;
@@ -3116,7 +3145,16 @@ export declare const clientInsertSchema: z.ZodObject<{
 	require_pushed_authorization_requests: boolean;
 	require_proof_of_possession: boolean;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	client_id?: string | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
 	logo_uri?: string | undefined;
@@ -3157,9 +3195,17 @@ export declare const clientInsertSchema: z.ZodObject<{
 	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	name: string;
-	client_id: string;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	client_id?: string | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	global?: boolean | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
@@ -3278,7 +3324,37 @@ export declare const clientSchema: z.ZodObject<{
 	mobile: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	initiate_login_uri: z.ZodOptional<z.ZodString>;
 	native_social_login: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
-	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodObject<{
+		rotation_type: z.ZodOptional<z.ZodEnum<[
+			"rotating",
+			"non-rotating"
+		]>>;
+		leeway: z.ZodOptional<z.ZodNumber>;
+		expiration_type: z.ZodOptional<z.ZodEnum<[
+			"expiring",
+			"non-expiring"
+		]>>;
+		token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+		idle_token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_idle_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+	}, "strip", z.ZodTypeAny, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}>>>;
 	default_organization: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	organization_usage: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
 		"deny",
@@ -3332,7 +3408,15 @@ export declare const clientSchema: z.ZodObject<{
 	require_pushed_authorization_requests: boolean;
 	require_proof_of_possession: boolean;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
 	logo_uri?: string | undefined;
@@ -3377,7 +3461,15 @@ export declare const clientSchema: z.ZodObject<{
 	name: string;
 	client_id: string;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	global?: boolean | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
@@ -11374,25 +11466,28 @@ export type AuthParams = z.infer<typeof authParamsSchema>;
 export declare const brandingSchema: z.ZodObject<{
 	colors: z.ZodOptional<z.ZodObject<{
 		primary: z.ZodString;
-		page_background: z.ZodOptional<z.ZodObject<{
-			type: z.ZodOptional<z.ZodString>;
-			start: z.ZodOptional<z.ZodString>;
-			end: z.ZodOptional<z.ZodString>;
-			angle_deg: z.ZodOptional<z.ZodNumber>;
-		}, "strip", z.ZodTypeAny, {
-			type?: string | undefined;
-			start?: string | undefined;
-			end?: string | undefined;
-			angle_deg?: number | undefined;
-		}, {
-			type?: string | undefined;
-			start?: string | undefined;
-			end?: string | undefined;
-			angle_deg?: number | undefined;
-		}>>;
+		page_background: z.ZodOptional<z.ZodUnion<[
+			z.ZodString,
+			z.ZodObject<{
+				type: z.ZodOptional<z.ZodString>;
+				start: z.ZodOptional<z.ZodString>;
+				end: z.ZodOptional<z.ZodString>;
+				angle_deg: z.ZodOptional<z.ZodNumber>;
+			}, "strip", z.ZodTypeAny, {
+				type?: string | undefined;
+				start?: string | undefined;
+				end?: string | undefined;
+				angle_deg?: number | undefined;
+			}, {
+				type?: string | undefined;
+				start?: string | undefined;
+				end?: string | undefined;
+				angle_deg?: number | undefined;
+			}>
+		]>>;
 	}, "strip", z.ZodTypeAny, {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -11400,7 +11495,7 @@ export declare const brandingSchema: z.ZodObject<{
 		} | undefined;
 	}, {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -11420,7 +11515,7 @@ export declare const brandingSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
 	colors?: {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -11436,7 +11531,7 @@ export declare const brandingSchema: z.ZodObject<{
 }, {
 	colors?: {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -12212,7 +12307,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
 	name: z.ZodString;
 	display_name: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodString;
-	options: z.ZodDefault<z.ZodObject<{
+	options: z.ZodDefault<z.ZodEffects<z.ZodObject<{
 		kid: z.ZodOptional<z.ZodString>;
 		team_id: z.ZodOptional<z.ZodString>;
 		realms: z.ZodOptional<z.ZodString>;
@@ -12838,16 +12933,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	}>>;
-	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
-	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
-	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
-	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
-	show_as_button: z.ZodOptional<z.ZodBoolean>;
-	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-	is_system: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-	options: {
+	}>, {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -12950,22 +13036,16 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	};
-	name: string;
-	strategy: string;
-	id?: string | undefined;
-	is_system?: boolean | undefined;
-	response_type?: AuthorizationResponseType | undefined;
-	response_mode?: AuthorizationResponseMode | undefined;
-	display_name?: string | undefined;
-	enabled_clients?: string[] | undefined;
-	is_domain_connection?: boolean | undefined;
-	show_as_button?: boolean | undefined;
-	metadata?: Record<string, any> | undefined;
-}, {
-	name: string;
-	strategy: string;
-	options?: {
+	}, unknown>>;
+	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
+	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
+	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
+	show_as_button: z.ZodOptional<z.ZodBoolean>;
+	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+	is_system: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+	options: {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -13068,7 +13148,22 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	} | undefined;
+	};
+	name: string;
+	strategy: string;
+	id?: string | undefined;
+	is_system?: boolean | undefined;
+	response_type?: AuthorizationResponseType | undefined;
+	response_mode?: AuthorizationResponseMode | undefined;
+	display_name?: string | undefined;
+	enabled_clients?: string[] | undefined;
+	is_domain_connection?: boolean | undefined;
+	show_as_button?: boolean | undefined;
+	metadata?: Record<string, any> | undefined;
+}, {
+	name: string;
+	strategy: string;
+	options?: unknown;
 	id?: string | undefined;
 	is_system?: boolean | undefined;
 	response_type?: AuthorizationResponseType | undefined;
@@ -13088,7 +13183,7 @@ export declare const connectionSchema: z.ZodObject<{
 	name: z.ZodString;
 	display_name: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodString;
-	options: z.ZodDefault<z.ZodObject<{
+	options: z.ZodDefault<z.ZodEffects<z.ZodObject<{
 		kid: z.ZodOptional<z.ZodString>;
 		team_id: z.ZodOptional<z.ZodString>;
 		realms: z.ZodOptional<z.ZodString>;
@@ -13714,18 +13809,7 @@ export declare const connectionSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	}>>;
-	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
-	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
-	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
-	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
-	show_as_button: z.ZodOptional<z.ZodBoolean>;
-	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-	is_system: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-	created_at: string;
-	updated_at: string;
-	options: {
+	}>, {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -13828,24 +13912,18 @@ export declare const connectionSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	};
-	name: string;
-	strategy: string;
-	id?: string | undefined;
-	is_system?: boolean | undefined;
-	response_type?: AuthorizationResponseType | undefined;
-	response_mode?: AuthorizationResponseMode | undefined;
-	display_name?: string | undefined;
-	enabled_clients?: string[] | undefined;
-	is_domain_connection?: boolean | undefined;
-	show_as_button?: boolean | undefined;
-	metadata?: Record<string, any> | undefined;
-}, {
+	}, unknown>>;
+	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
+	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
+	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
+	show_as_button: z.ZodOptional<z.ZodBoolean>;
+	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+	is_system: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
 	created_at: string;
 	updated_at: string;
-	name: string;
-	strategy: string;
-	options?: {
+	options: {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -13948,7 +14026,24 @@ export declare const connectionSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	} | undefined;
+	};
+	name: string;
+	strategy: string;
+	id?: string | undefined;
+	is_system?: boolean | undefined;
+	response_type?: AuthorizationResponseType | undefined;
+	response_mode?: AuthorizationResponseMode | undefined;
+	display_name?: string | undefined;
+	enabled_clients?: string[] | undefined;
+	is_domain_connection?: boolean | undefined;
+	show_as_button?: boolean | undefined;
+	metadata?: Record<string, any> | undefined;
+}, {
+	created_at: string;
+	updated_at: string;
+	name: string;
+	strategy: string;
+	options?: unknown;
 	id?: string | undefined;
 	is_system?: boolean | undefined;
 	response_type?: AuthorizationResponseType | undefined;
@@ -43165,8 +43260,10 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	jwks_uri: z.ZodString;
 	registration_endpoint: z.ZodOptional<z.ZodString>;
 	revocation_endpoint: z.ZodString;
+	end_session_endpoint: z.ZodOptional<z.ZodString>;
 	scopes_supported: z.ZodArray<z.ZodString, "many">;
 	response_types_supported: z.ZodArray<z.ZodString, "many">;
+	grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 	code_challenge_methods_supported: z.ZodArray<z.ZodString, "many">;
 	response_modes_supported: z.ZodArray<z.ZodString, "many">;
 	subject_types_supported: z.ZodArray<z.ZodString, "many">;
@@ -43197,6 +43294,8 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	request_parameter_supported: boolean;
 	token_endpoint_auth_signing_alg_values_supported: string[];
 	registration_endpoint?: string | undefined;
+	end_session_endpoint?: string | undefined;
+	grant_types_supported?: string[] | undefined;
 }, {
 	authorization_endpoint: string;
 	token_endpoint: string;
@@ -43218,6 +43317,8 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	request_parameter_supported: boolean;
 	token_endpoint_auth_signing_alg_values_supported: string[];
 	registration_endpoint?: string | undefined;
+	end_session_endpoint?: string | undefined;
+	grant_types_supported?: string[] | undefined;
 }>;
 export interface ListParams {
 	page?: number;
@@ -44080,6 +44181,525 @@ export declare const logSchema: z.ZodObject<{
 	} | undefined;
 }>;
 export type Log = z.infer<typeof logSchema>;
+export declare const logStreamTypeSchema: z.ZodEnum<[
+	"http",
+	"eventbridge",
+	"eventgrid",
+	"splunk",
+	"datadog",
+	"sumo"
+]>;
+export declare const logStreamStatusSchema: z.ZodEnum<[
+	"active",
+	"paused",
+	"suspended"
+]>;
+export declare const logStreamFilterSchema: z.ZodObject<{
+	type: z.ZodString;
+	name: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+	type: string;
+	name: string;
+}, {
+	type: string;
+	name: string;
+}>;
+export declare const logStreamInsertSchema: z.ZodObject<{
+	name: z.ZodString;
+	type: z.ZodEnum<[
+		"http",
+		"eventbridge",
+		"eventgrid",
+		"splunk",
+		"datadog",
+		"sumo"
+	]>;
+	status: z.ZodOptional<z.ZodEnum<[
+		"active",
+		"paused",
+		"suspended"
+	]>>;
+	sink: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+	filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		type: z.ZodString;
+		name: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		type: string;
+		name: string;
+	}, {
+		type: string;
+		name: string;
+	}>, "many">>;
+	isPriority: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	name: string;
+	sink: Record<string, unknown>;
+	status?: "active" | "paused" | "suspended" | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	name: string;
+	sink: Record<string, unknown>;
+	status?: "active" | "paused" | "suspended" | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}>;
+export type LogStreamInsert = z.infer<typeof logStreamInsertSchema>;
+export declare const logStreamSchema: z.ZodObject<{
+	name: z.ZodString;
+	type: z.ZodEnum<[
+		"http",
+		"eventbridge",
+		"eventgrid",
+		"splunk",
+		"datadog",
+		"sumo"
+	]>;
+	sink: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+	filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		type: z.ZodString;
+		name: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		type: string;
+		name: string;
+	}, {
+		type: string;
+		name: string;
+	}>, "many">>;
+	isPriority: z.ZodOptional<z.ZodBoolean>;
+} & {
+	id: z.ZodString;
+	status: z.ZodEnum<[
+		"active",
+		"paused",
+		"suspended"
+	]>;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	status: "active" | "paused" | "suspended";
+	id: string;
+	name: string;
+	sink: Record<string, unknown>;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	status: "active" | "paused" | "suspended";
+	id: string;
+	name: string;
+	sink: Record<string, unknown>;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}>;
+export type LogStream = z.infer<typeof logStreamSchema>;
+export declare const breachedPasswordDetectionSchema: z.ZodObject<{
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+	admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+	method: z.ZodOptional<z.ZodString>;
+	stage: z.ZodOptional<z.ZodObject<{
+		"pre-user-registration": z.ZodOptional<z.ZodObject<{
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		}, "strip", z.ZodTypeAny, {
+			shields?: string[] | undefined;
+		}, {
+			shields?: string[] | undefined;
+		}>>;
+		"pre-change-password": z.ZodOptional<z.ZodObject<{
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		}, "strip", z.ZodTypeAny, {
+			shields?: string[] | undefined;
+		}, {
+			shields?: string[] | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		"pre-user-registration"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+		"pre-change-password"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+	}, {
+		"pre-user-registration"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+		"pre-change-password"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+	}>>;
+}, "strip", z.ZodTypeAny, {
+	method?: string | undefined;
+	enabled?: boolean | undefined;
+	shields?: string[] | undefined;
+	admin_notification_frequency?: string[] | undefined;
+	stage?: {
+		"pre-user-registration"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+		"pre-change-password"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+	} | undefined;
+}, {
+	method?: string | undefined;
+	enabled?: boolean | undefined;
+	shields?: string[] | undefined;
+	admin_notification_frequency?: string[] | undefined;
+	stage?: {
+		"pre-user-registration"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+		"pre-change-password"?: {
+			shields?: string[] | undefined;
+		} | undefined;
+	} | undefined;
+}>;
+export type BreachedPasswordDetection = z.infer<typeof breachedPasswordDetectionSchema>;
+export declare const bruteForceProtectionSchema: z.ZodObject<{
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+	allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+	mode: z.ZodOptional<z.ZodString>;
+	max_attempts: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+	allowlist?: string[] | undefined;
+	enabled?: boolean | undefined;
+	shields?: string[] | undefined;
+	mode?: string | undefined;
+	max_attempts?: number | undefined;
+}, {
+	allowlist?: string[] | undefined;
+	enabled?: boolean | undefined;
+	shields?: string[] | undefined;
+	mode?: string | undefined;
+	max_attempts?: number | undefined;
+}>;
+export type BruteForceProtection = z.infer<typeof bruteForceProtectionSchema>;
+export declare const suspiciousIpThrottlingSchema: z.ZodObject<{
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+	allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+	stage: z.ZodOptional<z.ZodObject<{
+		"pre-login": z.ZodOptional<z.ZodObject<{
+			max_attempts: z.ZodOptional<z.ZodNumber>;
+			rate: z.ZodOptional<z.ZodNumber>;
+		}, "strip", z.ZodTypeAny, {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		}, {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		}>>;
+		"pre-user-registration": z.ZodOptional<z.ZodObject<{
+			max_attempts: z.ZodOptional<z.ZodNumber>;
+			rate: z.ZodOptional<z.ZodNumber>;
+		}, "strip", z.ZodTypeAny, {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		}, {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		"pre-user-registration"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+		"pre-login"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+	}, {
+		"pre-user-registration"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+		"pre-login"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+	}>>;
+}, "strip", z.ZodTypeAny, {
+	allowlist?: string[] | undefined;
+	enabled?: boolean | undefined;
+	shields?: string[] | undefined;
+	stage?: {
+		"pre-user-registration"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+		"pre-login"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+	} | undefined;
+}, {
+	allowlist?: string[] | undefined;
+	enabled?: boolean | undefined;
+	shields?: string[] | undefined;
+	stage?: {
+		"pre-user-registration"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+		"pre-login"?: {
+			max_attempts?: number | undefined;
+			rate?: number | undefined;
+		} | undefined;
+	} | undefined;
+}>;
+export type SuspiciousIpThrottling = z.infer<typeof suspiciousIpThrottlingSchema>;
+export declare const attackProtectionSchema: z.ZodObject<{
+	breached_password_detection: z.ZodOptional<z.ZodObject<{
+		enabled: z.ZodOptional<z.ZodBoolean>;
+		shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		method: z.ZodOptional<z.ZodString>;
+		stage: z.ZodOptional<z.ZodObject<{
+			"pre-user-registration": z.ZodOptional<z.ZodObject<{
+				shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			}, "strip", z.ZodTypeAny, {
+				shields?: string[] | undefined;
+			}, {
+				shields?: string[] | undefined;
+			}>>;
+			"pre-change-password": z.ZodOptional<z.ZodObject<{
+				shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			}, "strip", z.ZodTypeAny, {
+				shields?: string[] | undefined;
+			}, {
+				shields?: string[] | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			"pre-user-registration"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+			"pre-change-password"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+		}, {
+			"pre-user-registration"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+			"pre-change-password"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		method?: string | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		admin_notification_frequency?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+			"pre-change-password"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+		} | undefined;
+	}, {
+		method?: string | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		admin_notification_frequency?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+			"pre-change-password"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+		} | undefined;
+	}>>;
+	brute_force_protection: z.ZodOptional<z.ZodObject<{
+		enabled: z.ZodOptional<z.ZodBoolean>;
+		shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		mode: z.ZodOptional<z.ZodString>;
+		max_attempts: z.ZodOptional<z.ZodNumber>;
+	}, "strip", z.ZodTypeAny, {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		mode?: string | undefined;
+		max_attempts?: number | undefined;
+	}, {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		mode?: string | undefined;
+		max_attempts?: number | undefined;
+	}>>;
+	suspicious_ip_throttling: z.ZodOptional<z.ZodObject<{
+		enabled: z.ZodOptional<z.ZodBoolean>;
+		shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		stage: z.ZodOptional<z.ZodObject<{
+			"pre-login": z.ZodOptional<z.ZodObject<{
+				max_attempts: z.ZodOptional<z.ZodNumber>;
+				rate: z.ZodOptional<z.ZodNumber>;
+			}, "strip", z.ZodTypeAny, {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			}, {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			}>>;
+			"pre-user-registration": z.ZodOptional<z.ZodObject<{
+				max_attempts: z.ZodOptional<z.ZodNumber>;
+				rate: z.ZodOptional<z.ZodNumber>;
+			}, "strip", z.ZodTypeAny, {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			}, {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			"pre-user-registration"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+			"pre-login"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+		}, {
+			"pre-user-registration"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+			"pre-login"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+			"pre-login"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+		} | undefined;
+	}, {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+			"pre-login"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+		} | undefined;
+	}>>;
+}, "strip", z.ZodTypeAny, {
+	brute_force_protection?: {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		mode?: string | undefined;
+		max_attempts?: number | undefined;
+	} | undefined;
+	breached_password_detection?: {
+		method?: string | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		admin_notification_frequency?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+			"pre-change-password"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
+	suspicious_ip_throttling?: {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+			"pre-login"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
+}, {
+	brute_force_protection?: {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		mode?: string | undefined;
+		max_attempts?: number | undefined;
+	} | undefined;
+	breached_password_detection?: {
+		method?: string | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		admin_notification_frequency?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+			"pre-change-password"?: {
+				shields?: string[] | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
+	suspicious_ip_throttling?: {
+		allowlist?: string[] | undefined;
+		enabled?: boolean | undefined;
+		shields?: string[] | undefined;
+		stage?: {
+			"pre-user-registration"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+			"pre-login"?: {
+				max_attempts?: number | undefined;
+				rate?: number | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
+}>;
+export type AttackProtection = z.infer<typeof attackProtectionSchema>;
 export declare const passwordInsertSchema: z.ZodObject<{
 	id: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodString;
@@ -44356,7 +44976,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 	default_redirection_uri: z.ZodOptional<z.ZodString>;
 	enabled_locales: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 	default_directory: z.ZodOptional<z.ZodString>;
-	error_page: z.ZodOptional<z.ZodObject<{
+	error_page: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		html: z.ZodOptional<z.ZodString>;
 		show_log_link: z.ZodOptional<z.ZodBoolean>;
 		url: z.ZodOptional<z.ZodString>;
@@ -44368,7 +44988,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	}>>;
+	}>>>;
 	flags: z.ZodOptional<z.ZodObject<{
 		allow_changing_enable_sso: z.ZodOptional<z.ZodBoolean>;
 		allow_legacy_delegation_grant_types: z.ZodOptional<z.ZodBoolean>;
@@ -44517,7 +45137,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		charset?: "base20" | "digits" | undefined;
 		mask?: string | undefined;
 	}>>;
-	default_token_quota: z.ZodOptional<z.ZodObject<{
+	default_token_quota: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		clients: z.ZodOptional<z.ZodObject<{
 			client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 		}, "strip", z.ZodTypeAny, {
@@ -44546,7 +45166,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	}>>;
+	}>>>;
 	default_audience: z.ZodOptional<z.ZodString>;
 	default_organization: z.ZodOptional<z.ZodString>;
 	sessions: z.ZodOptional<z.ZodObject<{
@@ -44566,15 +45186,245 @@ export declare const tenantInsertSchema: z.ZodObject<{
 	allow_organization_name_in_authentication_api: z.ZodOptional<z.ZodBoolean>;
 	customize_mfa_in_postlogin_action: z.ZodOptional<z.ZodBoolean>;
 	acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-	mtls: z.ZodOptional<z.ZodObject<{
+	mtls: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		enable_endpoint_aliases: z.ZodOptional<z.ZodBoolean>;
 	}, "strip", z.ZodTypeAny, {
 		enable_endpoint_aliases?: boolean | undefined;
 	}, {
 		enable_endpoint_aliases?: boolean | undefined;
-	}>>;
+	}>>>;
 	pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
 	authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+	attack_protection: z.ZodOptional<z.ZodObject<{
+		breached_password_detection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			method: z.ZodOptional<z.ZodString>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+				"pre-change-password": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+		brute_force_protection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			mode: z.ZodOptional<z.ZodString>;
+			max_attempts: z.ZodOptional<z.ZodNumber>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}>>;
+		suspicious_ip_throttling: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-login": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}>>;
 	mfa: z.ZodOptional<z.ZodObject<{
 		policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
 			"never",
@@ -44720,7 +45570,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -44781,7 +45631,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	sessions?: {
 		oidc_logout_prompt_enabled?: boolean | undefined;
@@ -44791,9 +45641,47 @@ export declare const tenantInsertSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -44847,7 +45735,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -44908,7 +45796,7 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	sessions?: {
 		oidc_logout_prompt_enabled?: boolean | undefined;
@@ -44918,9 +45806,47 @@ export declare const tenantInsertSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -44974,7 +45900,7 @@ export declare const tenantSchema: z.ZodObject<{
 	default_redirection_uri: z.ZodOptional<z.ZodString>;
 	enabled_locales: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 	default_directory: z.ZodOptional<z.ZodString>;
-	error_page: z.ZodOptional<z.ZodObject<{
+	error_page: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		html: z.ZodOptional<z.ZodString>;
 		show_log_link: z.ZodOptional<z.ZodBoolean>;
 		url: z.ZodOptional<z.ZodString>;
@@ -44986,7 +45912,7 @@ export declare const tenantSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	}>>;
+	}>>>;
 	flags: z.ZodOptional<z.ZodObject<{
 		allow_changing_enable_sso: z.ZodOptional<z.ZodBoolean>;
 		allow_legacy_delegation_grant_types: z.ZodOptional<z.ZodBoolean>;
@@ -45135,7 +46061,7 @@ export declare const tenantSchema: z.ZodObject<{
 		charset?: "base20" | "digits" | undefined;
 		mask?: string | undefined;
 	}>>;
-	default_token_quota: z.ZodOptional<z.ZodObject<{
+	default_token_quota: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		clients: z.ZodOptional<z.ZodObject<{
 			client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 		}, "strip", z.ZodTypeAny, {
@@ -45164,7 +46090,7 @@ export declare const tenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	}>>;
+	}>>>;
 	default_audience: z.ZodOptional<z.ZodString>;
 	default_organization: z.ZodOptional<z.ZodString>;
 	sessions: z.ZodOptional<z.ZodObject<{
@@ -45184,15 +46110,245 @@ export declare const tenantSchema: z.ZodObject<{
 	allow_organization_name_in_authentication_api: z.ZodOptional<z.ZodBoolean>;
 	customize_mfa_in_postlogin_action: z.ZodOptional<z.ZodBoolean>;
 	acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-	mtls: z.ZodOptional<z.ZodObject<{
+	mtls: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		enable_endpoint_aliases: z.ZodOptional<z.ZodBoolean>;
 	}, "strip", z.ZodTypeAny, {
 		enable_endpoint_aliases?: boolean | undefined;
 	}, {
 		enable_endpoint_aliases?: boolean | undefined;
-	}>>;
+	}>>>;
 	pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
 	authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+	attack_protection: z.ZodOptional<z.ZodObject<{
+		breached_password_detection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			method: z.ZodOptional<z.ZodString>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+				"pre-change-password": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+		brute_force_protection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			mode: z.ZodOptional<z.ZodString>;
+			max_attempts: z.ZodOptional<z.ZodNumber>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}>>;
+		suspicious_ip_throttling: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-login": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}>>;
 	mfa: z.ZodOptional<z.ZodObject<{
 		policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
 			"never",
@@ -45342,7 +46498,7 @@ export declare const tenantSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -45403,7 +46559,7 @@ export declare const tenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	sessions?: {
 		oidc_logout_prompt_enabled?: boolean | undefined;
@@ -45413,9 +46569,47 @@ export declare const tenantSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -45471,7 +46665,7 @@ export declare const tenantSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -45532,7 +46726,7 @@ export declare const tenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	sessions?: {
 		oidc_logout_prompt_enabled?: boolean | undefined;
@@ -45542,9 +46736,47 @@ export declare const tenantSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -46791,113 +48023,17 @@ export declare const emailProviderSchema: z.ZodObject<{
 	name: z.ZodString;
 	enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 	default_from_address: z.ZodOptional<z.ZodString>;
-	credentials: z.ZodUnion<[
-		z.ZodObject<{
-			accessKeyId: z.ZodString;
-			secretAccessKey: z.ZodString;
-			region: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			region: string;
-			accessKeyId: string;
-			secretAccessKey: string;
-		}, {
-			region: string;
-			accessKeyId: string;
-			secretAccessKey: string;
-		}>,
-		z.ZodObject<{
-			smtp_host: z.ZodArray<z.ZodString, "many">;
-			smtp_port: z.ZodNumber;
-			smtp_user: z.ZodString;
-			smtp_pass: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			smtp_host: string[];
-			smtp_port: number;
-			smtp_user: string;
-			smtp_pass: string;
-		}, {
-			smtp_host: string[];
-			smtp_port: number;
-			smtp_user: string;
-			smtp_pass: string;
-		}>,
-		z.ZodObject<{
-			api_key: z.ZodString;
-			domain: z.ZodOptional<z.ZodString>;
-		}, "strip", z.ZodTypeAny, {
-			api_key: string;
-			domain?: string | undefined;
-		}, {
-			api_key: string;
-			domain?: string | undefined;
-		}>,
-		z.ZodObject<{
-			connectionString: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			connectionString: string;
-		}, {
-			connectionString: string;
-		}>,
-		z.ZodObject<{
-			tenantId: z.ZodString;
-			clientId: z.ZodString;
-			clientSecret: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			tenantId: string;
-			clientId: string;
-			clientSecret: string;
-		}, {
-			tenantId: string;
-			clientId: string;
-			clientSecret: string;
-		}>
-	]>;
+	credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 	settings: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	enabled: boolean;
-	credentials: {
-		region: string;
-		accessKeyId: string;
-		secretAccessKey: string;
-	} | {
-		smtp_host: string[];
-		smtp_port: number;
-		smtp_user: string;
-		smtp_pass: string;
-	} | {
-		api_key: string;
-		domain?: string | undefined;
-	} | {
-		connectionString: string;
-	} | {
-		tenantId: string;
-		clientId: string;
-		clientSecret: string;
-	};
+	credentials: Record<string, unknown>;
 	default_from_address?: string | undefined;
 	settings?: {} | undefined;
 }, {
 	name: string;
-	credentials: {
-		region: string;
-		accessKeyId: string;
-		secretAccessKey: string;
-	} | {
-		smtp_host: string[];
-		smtp_port: number;
-		smtp_user: string;
-		smtp_pass: string;
-	} | {
-		api_key: string;
-		domain?: string | undefined;
-	} | {
-		connectionString: string;
-	} | {
-		tenantId: string;
-		clientId: string;
-		clientSecret: string;
-	};
+	credentials: Record<string, unknown>;
 	enabled?: boolean | undefined;
 	default_from_address?: string | undefined;
 	settings?: {} | undefined;
@@ -46944,10 +48080,16 @@ export declare const refreshTokenInsertSchema: z.ZodObject<{
 		audience: string;
 	}>, "many">;
 	rotating: z.ZodBoolean;
+	token_lookup: z.ZodOptional<z.ZodString>;
+	token_hash: z.ZodOptional<z.ZodString>;
+	family_id: z.ZodOptional<z.ZodString>;
+	rotated_to: z.ZodOptional<z.ZodString>;
+	rotated_at: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -46961,14 +48103,19 @@ export declare const refreshTokenInsertSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }, {
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -46982,10 +48129,14 @@ export declare const refreshTokenInsertSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }>;
 export type RefreshTokenInsert = z.infer<typeof refreshTokenInsertSchema>;
 export declare const refreshTokenSchema: z.ZodObject<{
@@ -47029,6 +48180,11 @@ export declare const refreshTokenSchema: z.ZodObject<{
 		audience: string;
 	}>, "many">;
 	rotating: z.ZodBoolean;
+	token_lookup: z.ZodOptional<z.ZodString>;
+	token_hash: z.ZodOptional<z.ZodString>;
+	family_id: z.ZodOptional<z.ZodString>;
+	rotated_to: z.ZodOptional<z.ZodString>;
+	rotated_at: z.ZodOptional<z.ZodString>;
 	created_at: z.ZodString;
 	revoked_at: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
@@ -47036,6 +48192,7 @@ export declare const refreshTokenSchema: z.ZodObject<{
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -47049,16 +48206,21 @@ export declare const refreshTokenSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }, {
 	created_at: string;
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -47072,11 +48234,15 @@ export declare const refreshTokenSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }>;
 export type RefreshToken = z.infer<typeof refreshTokenSchema>;
 export declare const smsSendParamsSchema: z.ZodObject<{
@@ -47214,8 +48380,8 @@ export declare const resourceServerInsertSchema: z.ZodObject<{
 	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
-	identifier: string;
 	token_lifetime: number;
+	identifier: string;
 	token_lifetime_for_web: number;
 	options?: {
 		mtls?: {
@@ -47259,11 +48425,11 @@ export declare const resourceServerInsertSchema: z.ZodObject<{
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
+	token_lifetime?: number | undefined;
 	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
-	token_lifetime?: number | undefined;
 	token_lifetime_for_web?: number | undefined;
 	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
 	allow_offline_access?: boolean | undefined;
@@ -47335,8 +48501,8 @@ export declare const resourceServerSchema: z.ZodObject<{
 	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
-	identifier: string;
 	token_lifetime: number;
+	identifier: string;
 	token_lifetime_for_web: number;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
@@ -47384,11 +48550,11 @@ export declare const resourceServerSchema: z.ZodObject<{
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
+	token_lifetime?: number | undefined;
 	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
-	token_lifetime?: number | undefined;
 	token_lifetime_for_web?: number | undefined;
 	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
 	allow_offline_access?: boolean | undefined;
@@ -47460,8 +48626,8 @@ export declare const resourceServerListSchema: z.ZodArray<z.ZodObject<{
 	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
-	identifier: string;
 	token_lifetime: number;
+	identifier: string;
 	token_lifetime_for_web: number;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
@@ -47509,11 +48675,11 @@ export declare const resourceServerListSchema: z.ZodArray<z.ZodObject<{
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
+	token_lifetime?: number | undefined;
 	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
-	token_lifetime?: number | undefined;
 	token_lifetime_for_web?: number | undefined;
 	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
 	allow_offline_access?: boolean | undefined;
@@ -48135,6 +49301,105 @@ export declare const organizationSchema: z.ZodObject<{
 	}[] | undefined;
 }>;
 export type Organization = z.infer<typeof organizationSchema>;
+export declare const organizationConnectionInsertSchema: z.ZodObject<{
+	connection_id: z.ZodString;
+	assign_membership_on_login: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	show_as_button: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	is_signup_enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+	connection_id: string;
+	show_as_button: boolean;
+	assign_membership_on_login: boolean;
+	is_signup_enabled: boolean;
+}, {
+	connection_id: string;
+	show_as_button?: boolean | undefined;
+	assign_membership_on_login?: boolean | undefined;
+	is_signup_enabled?: boolean | undefined;
+}>;
+export type OrganizationConnectionInsert = z.input<typeof organizationConnectionInsertSchema>;
+export declare const organizationConnectionSchema: z.ZodObject<{
+	connection: z.ZodOptional<z.ZodObject<{
+		name: z.ZodOptional<z.ZodString>;
+		strategy: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	}, {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	}>>;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+	connection_id: z.ZodString;
+	assign_membership_on_login: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	show_as_button: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	is_signup_enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+	connection_id: string;
+	show_as_button: boolean;
+	assign_membership_on_login: boolean;
+	is_signup_enabled: boolean;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	connection?: {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	} | undefined;
+}, {
+	connection_id: string;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	connection?: {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	} | undefined;
+	show_as_button?: boolean | undefined;
+	assign_membership_on_login?: boolean | undefined;
+	is_signup_enabled?: boolean | undefined;
+}>;
+export type OrganizationConnection = z.infer<typeof organizationConnectionSchema>;
+export declare const organizationConnectionListSchema: z.ZodArray<z.ZodObject<{
+	connection: z.ZodOptional<z.ZodObject<{
+		name: z.ZodOptional<z.ZodString>;
+		strategy: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	}, {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	}>>;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+	connection_id: z.ZodString;
+	assign_membership_on_login: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	show_as_button: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	is_signup_enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+	connection_id: string;
+	show_as_button: boolean;
+	assign_membership_on_login: boolean;
+	is_signup_enabled: boolean;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	connection?: {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	} | undefined;
+}, {
+	connection_id: string;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	connection?: {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	} | undefined;
+	show_as_button?: boolean | undefined;
+	assign_membership_on_login?: boolean | undefined;
+	is_signup_enabled?: boolean | undefined;
+}>, "many">;
+export type OrganizationConnectionList = z.infer<typeof organizationConnectionListSchema>;
 export declare const userOrganizationInsertSchema: z.ZodObject<{
 	user_id: z.ZodString;
 	organization_id: z.ZodString;
@@ -49219,6 +50484,13 @@ export interface LogsDataAdapter {
 	list(tenantId: string, params?: ListParams): Promise<ListLogsResponse>;
 	get(tenantId: string, logId: string): Promise<Log | null>;
 }
+export interface LogStreamsAdapter {
+	create(tenant_id: string, params: LogStreamInsert): Promise<LogStream>;
+	get(tenant_id: string, id: string): Promise<LogStream | null>;
+	list(tenant_id: string): Promise<LogStream[]>;
+	update(tenant_id: string, id: string, params: Partial<LogStream>): Promise<boolean>;
+	remove(tenant_id: string, id: string): Promise<boolean>;
+}
 export interface ListConnectionsResponse extends Totals {
 	connections: Connection[];
 }
@@ -49305,10 +50577,22 @@ export interface UpdateRefreshTokenOptions {
 export interface RefreshTokensAdapter {
 	create: (tenant_id: string, refresh_token: RefreshTokenInsert) => Promise<RefreshToken>;
 	get: (tenant_id: string, id: string) => Promise<RefreshToken | null>;
+	/**
+	 * Look up a refresh token by its plaintext `token_lookup` slice (extracted
+	 * from the wire format `rt_<lookup>.<secret>`). Returns null if no row
+	 * matches. Callers must verify the secret hash before trusting the row.
+	 */
+	getByLookup: (tenant_id: string, token_lookup: string) => Promise<RefreshToken | null>;
 	list(tenant_id: string, params?: ListParams): Promise<ListRefreshTokenResponse>;
 	update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
 	remove: (tenant_id: string, id: string) => Promise<boolean>;
 	revokeByLoginSession: (tenant_id: string, login_session_id: string, revoked_at: string) => Promise<number>;
+	/**
+	 * Soft-revoke every refresh token that shares `family_id` and isn't already
+	 * revoked. Used for reuse detection (entire rotation chain torched) and for
+	 * admin revocations that should propagate to descendants.
+	 */
+	revokeFamily: (tenant_id: string, family_id: string, revoked_at: string) => Promise<number>;
 }
 export interface ListFormsResponse extends Totals {
 	forms: Form[];
@@ -49371,6 +50655,13 @@ export interface OrganizationsAdapter {
 	list(tenant_id: string, params?: ListParams): Promise<ListOrganizationsResponse>;
 	update(tenant_id: string, id: string, params: Partial<OrganizationInsert>): Promise<boolean>;
 }
+export interface OrganizationConnectionsAdapter {
+	create(tenant_id: string, organization_id: string, params: OrganizationConnectionInsert): Promise<OrganizationConnection>;
+	list(tenant_id: string, organization_id: string): Promise<OrganizationConnection[]>;
+	get(tenant_id: string, organization_id: string, connection_id: string): Promise<OrganizationConnection | null>;
+	update(tenant_id: string, organization_id: string, connection_id: string, params: Partial<Omit<OrganizationConnectionInsert, "connection_id">>): Promise<OrganizationConnection | null>;
+	remove(tenant_id: string, organization_id: string, connection_id: string): Promise<boolean>;
+}
 export interface UserOrganizationsAdapter {
 	create(tenantId: string, params: UserOrganizationInsert): Promise<UserOrganization>;
 	get(tenantId: string, id: string): Promise<UserOrganization | null>;
@@ -49619,6 +50910,7 @@ export interface DataAdapters {
 	keys: KeysAdapter;
 	loginSessions: LoginSessionsAdapter;
 	logs: LogsDataAdapter;
+	logStreams?: LogStreamsAdapter;
 	passwords: PasswordsAdapter;
 	promptSettings: PromptSettingsAdapter;
 	refreshTokens: RefreshTokensAdapter;
@@ -49635,6 +50927,7 @@ export interface DataAdapters {
 	users: UserDataAdapter;
 	userRoles: UserRolesAdapter;
 	organizations: OrganizationsAdapter;
+	organizationConnections: OrganizationConnectionsAdapter;
 	authenticationMethods: AuthenticationMethodsAdapter;
 	userOrganizations: UserOrganizationsAdapter;
 	emailService?: EmailServiceAdapter;