@authhero/adapter-interfaces 1.6.0 → 1.8.0

package/dist/adapter-interfaces.d.ts

@@ -528,6 +528,8 @@ export declare const auditEventInsertSchema: z.ZodObject<{
 	connection: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodOptional<z.ZodString>;
 	strategy_type: z.ZodOptional<z.ZodString>;
+	audience: z.ZodOptional<z.ZodString>;
+	scope: z.ZodOptional<z.ZodString>;
 	location: z.ZodOptional<z.ZodObject<{
 		country_code: z.ZodString;
 		city_name: z.ZodString;
@@ -609,6 +611,8 @@ export declare const auditEventInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -666,6 +670,8 @@ export declare const auditEventInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -796,6 +802,8 @@ export declare const auditEventSchema: z.ZodObject<{
 	connection: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodOptional<z.ZodString>;
 	strategy_type: z.ZodOptional<z.ZodString>;
+	audience: z.ZodOptional<z.ZodString>;
+	scope: z.ZodOptional<z.ZodString>;
 	location: z.ZodOptional<z.ZodObject<{
 		country_code: z.ZodString;
 		city_name: z.ZodString;
@@ -880,6 +888,8 @@ export declare const auditEventSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -938,6 +948,8 @@ export declare const auditEventSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -3079,6 +3091,13 @@ export declare const clientInsertSchema: z.ZodObject<{
 	]>>;
 	par_request_expiry: z.ZodOptional<z.ZodNumber>;
 	token_quota: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	owner_user_id: z.ZodOptional<z.ZodString>;
+	registration_type: z.ZodOptional<z.ZodEnum<[
+		"manual",
+		"open_dcr",
+		"iat_dcr"
+	]>>;
+	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	client_id: string;
@@ -3128,6 +3147,9 @@ export declare const clientInsertSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }, {
 	name: string;
 	client_id: string;
@@ -3177,6 +3199,9 @@ export declare const clientInsertSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }>;
 export type ClientInsert = z.input<typeof clientInsertSchema>;
 export declare const clientSchema: z.ZodObject<{
@@ -3272,6 +3297,13 @@ export declare const clientSchema: z.ZodObject<{
 	]>>;
 	par_request_expiry: z.ZodOptional<z.ZodNumber>;
 	token_quota: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	owner_user_id: z.ZodOptional<z.ZodString>;
+	registration_type: z.ZodOptional<z.ZodEnum<[
+		"manual",
+		"open_dcr",
+		"iat_dcr"
+	]>>;
+	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -3325,6 +3357,9 @@ export declare const clientSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }, {
 	created_at: string;
 	updated_at: string;
@@ -3376,6 +3411,9 @@ export declare const clientSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 	token_quota?: Record<string, any> | undefined;
+	owner_user_id?: string | undefined;
+	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
+	registration_metadata?: Record<string, any> | undefined;
 }>;
 export type Client = z.infer<typeof clientSchema>;
 export declare const clientGrantInsertSchema: z.ZodObject<{
@@ -3397,8 +3435,8 @@ export declare const clientGrantInsertSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
 	client_id: string;
 	audience: string;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -3406,8 +3444,8 @@ export declare const clientGrantInsertSchema: z.ZodObject<{
 }, {
 	client_id: string;
 	audience: string;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -3439,8 +3477,8 @@ export declare const clientGrantSchema: z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -3451,8 +3489,8 @@ export declare const clientGrantSchema: z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -3484,8 +3522,8 @@ export declare const clientGrantListSchema: z.ZodArray<z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -3496,14 +3534,92 @@ export declare const clientGrantListSchema: z.ZodArray<z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
 	authorization_details_types?: string[] | undefined;
 }>, "many">;
 export type ClientGrantList = z.infer<typeof clientGrantListSchema>;
+export declare const clientRegistrationTokenTypeSchema: z.ZodEnum<[
+	"iat",
+	"rat"
+]>;
+export type ClientRegistrationTokenType = z.infer<typeof clientRegistrationTokenTypeSchema>;
+export declare const clientRegistrationTokenInsertSchema: z.ZodObject<{
+	id: z.ZodString;
+	token_hash: z.ZodString;
+	type: z.ZodEnum<[
+		"iat",
+		"rat"
+	]>;
+	client_id: z.ZodOptional<z.ZodString>;
+	sub: z.ZodOptional<z.ZodString>;
+	constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+	single_use: z.ZodDefault<z.ZodBoolean>;
+	expires_at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	single_use: boolean;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	expires_at?: string | undefined;
+}, {
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	single_use?: boolean | undefined;
+	expires_at?: string | undefined;
+}>;
+export type ClientRegistrationTokenInsert = z.infer<typeof clientRegistrationTokenInsertSchema>;
+export declare const clientRegistrationTokenSchema: z.ZodObject<{
+	id: z.ZodString;
+	token_hash: z.ZodString;
+	type: z.ZodEnum<[
+		"iat",
+		"rat"
+	]>;
+	client_id: z.ZodOptional<z.ZodString>;
+	sub: z.ZodOptional<z.ZodString>;
+	constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+	single_use: z.ZodDefault<z.ZodBoolean>;
+	expires_at: z.ZodOptional<z.ZodString>;
+	created_at: z.ZodString;
+	used_at: z.ZodOptional<z.ZodString>;
+	revoked_at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	created_at: string;
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	single_use: boolean;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	expires_at?: string | undefined;
+	used_at?: string | undefined;
+	revoked_at?: string | undefined;
+}, {
+	created_at: string;
+	type: "iat" | "rat";
+	id: string;
+	token_hash: string;
+	client_id?: string | undefined;
+	sub?: string | undefined;
+	constraints?: Record<string, unknown> | undefined;
+	single_use?: boolean | undefined;
+	expires_at?: string | undefined;
+	used_at?: string | undefined;
+	revoked_at?: string | undefined;
+}>;
+export type ClientRegistrationToken = z.infer<typeof clientRegistrationTokenSchema>;
 /**
  * Types for Auth0 Form Flow components
  * Based on the actual structure used by Auth0 forms API
@@ -11205,9 +11321,9 @@ export declare const authParamsSchema: z.ZodObject<{
 	vendor_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
 	client_id: string;
-	username?: string | undefined;
 	audience?: string | undefined;
 	scope?: string | undefined;
+	username?: string | undefined;
 	act_as?: string | undefined;
 	response_type?: AuthorizationResponseType | undefined;
 	response_mode?: AuthorizationResponseMode | undefined;
@@ -11224,9 +11340,9 @@ export declare const authParamsSchema: z.ZodObject<{
 	vendor_id?: string | undefined;
 }, {
 	client_id: string;
-	username?: string | undefined;
 	audience?: string | undefined;
 	scope?: string | undefined;
+	username?: string | undefined;
 	act_as?: string | undefined;
 	response_type?: AuthorizationResponseType | undefined;
 	response_mode?: AuthorizationResponseMode | undefined;
@@ -11360,12 +11476,13 @@ export declare const codeInsertSchema: z.ZodObject<{
 	used_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11373,14 +11490,14 @@ export declare const codeInsertSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }, {
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11388,7 +11505,6 @@ export declare const codeInsertSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }>;
 export type CodeInsert = z.infer<typeof codeInsertSchema>;
 export declare const codeSchema: z.ZodObject<{
@@ -11420,12 +11536,13 @@ export declare const codeSchema: z.ZodObject<{
 	user_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
 	created_at: string;
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11433,15 +11550,15 @@ export declare const codeSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }, {
 	created_at: string;
+	expires_at: string;
 	code_id: string;
 	login_id: string;
 	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
-	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
+	used_at?: string | undefined;
 	redirect_uri?: string | undefined;
 	state?: string | undefined;
 	nonce?: string | undefined;
@@ -11449,7 +11566,6 @@ export declare const codeSchema: z.ZodObject<{
 	code_challenge?: string | undefined;
 	otp?: string | undefined;
 	code_verifier?: string | undefined;
-	used_at?: string | undefined;
 }>;
 export type Code = z.infer<typeof codeSchema>;
 export declare const connectionOptionsSchema: z.ZodObject<{
@@ -11880,9 +11996,9 @@ export declare const connectionOptionsSchema: z.ZodObject<{
 		} | undefined;
 	} | undefined;
 	client_id?: string | undefined;
+	scope?: string | undefined;
 	provider?: string | undefined;
 	client_secret?: string | undefined;
-	scope?: string | undefined;
 	kid?: string | undefined;
 	team_id?: string | undefined;
 	realms?: string | undefined;
@@ -11983,9 +12099,9 @@ export declare const connectionOptionsSchema: z.ZodObject<{
 		} | undefined;
 	} | undefined;
 	client_id?: string | undefined;
+	scope?: string | undefined;
 	provider?: string | undefined;
 	client_secret?: string | undefined;
-	scope?: string | undefined;
 	kid?: string | undefined;
 	team_id?: string | undefined;
 	realms?: string | undefined;
@@ -12512,9 +12628,9 @@ export declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -12615,9 +12731,9 @@ export declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -12727,9 +12843,9 @@ export declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -12845,9 +12961,9 @@ export declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -13388,9 +13504,9 @@ export declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -13491,9 +13607,9 @@ export declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -13605,9 +13721,9 @@ export declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -13725,9 +13841,9 @@ export declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -42912,7 +43028,7 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	userinfo_endpoint: z.ZodString;
 	mfa_challenge_endpoint: z.ZodString;
 	jwks_uri: z.ZodString;
-	registration_endpoint: z.ZodString;
+	registration_endpoint: z.ZodOptional<z.ZodString>;
 	revocation_endpoint: z.ZodString;
 	scopes_supported: z.ZodArray<z.ZodString, "many">;
 	response_types_supported: z.ZodArray<z.ZodString, "many">;
@@ -42933,7 +43049,6 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	issuer: string;
 	device_authorization_endpoint: string;
 	mfa_challenge_endpoint: string;
-	registration_endpoint: string;
 	revocation_endpoint: string;
 	scopes_supported: string[];
 	response_types_supported: string[];
@@ -42946,6 +43061,7 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	request_uri_parameter_supported: boolean;
 	request_parameter_supported: boolean;
 	token_endpoint_auth_signing_alg_values_supported: string[];
+	registration_endpoint?: string | undefined;
 }, {
 	authorization_endpoint: string;
 	token_endpoint: string;
@@ -42954,7 +43070,6 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	issuer: string;
 	device_authorization_endpoint: string;
 	mfa_challenge_endpoint: string;
-	registration_endpoint: string;
 	revocation_endpoint: string;
 	scopes_supported: string[];
 	response_types_supported: string[];
@@ -42967,6 +43082,7 @@ export declare const openIDConfigurationSchema: z.ZodObject<{
 	request_uri_parameter_supported: boolean;
 	request_parameter_supported: boolean;
 	token_endpoint_auth_signing_alg_values_supported: string[];
+	registration_endpoint?: string | undefined;
 }>;
 export interface ListParams {
 	page?: number;
@@ -43043,9 +43159,9 @@ export declare const loginSessionInsertSchema: z.ZodObject<{
 		vendor_id: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43062,9 +43178,9 @@ export declare const loginSessionInsertSchema: z.ZodObject<{
 		vendor_id?: string | undefined;
 	}, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43103,14 +43219,14 @@ export declare const loginSessionInsertSchema: z.ZodObject<{
 	}>>;
 	authenticated_at: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-	state: LoginSessionState;
 	expires_at: string;
+	state: LoginSessionState;
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43146,9 +43262,9 @@ export declare const loginSessionInsertSchema: z.ZodObject<{
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43209,9 +43325,9 @@ export declare const loginSessionSchema: z.ZodObject<{
 		vendor_id: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43228,9 +43344,9 @@ export declare const loginSessionSchema: z.ZodObject<{
 		vendor_id?: string | undefined;
 	}, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43272,14 +43388,14 @@ export declare const loginSessionSchema: z.ZodObject<{
 	created_at: string;
 	updated_at: string;
 	id: string;
-	state: LoginSessionState;
 	expires_at: string;
+	state: LoginSessionState;
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43318,9 +43434,9 @@ export declare const loginSessionSchema: z.ZodObject<{
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -43631,6 +43747,8 @@ export declare const logInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -43641,8 +43759,6 @@ export declare const logInsertSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -43666,6 +43782,8 @@ export declare const logInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -43676,8 +43794,6 @@ export declare const logInsertSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -43769,6 +43885,8 @@ export declare const logSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -43779,8 +43897,6 @@ export declare const logSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -43804,6 +43920,8 @@ export declare const logSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -43814,8 +43932,6 @@ export declare const logSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -44136,6 +44252,9 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections: z.ZodOptional<z.ZodBoolean>;
 		enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
 		enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
+		dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
+		dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 		enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
@@ -44170,6 +44289,9 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44204,6 +44326,9 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44479,6 +44604,9 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44603,6 +44731,9 @@ export declare const tenantInsertSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44739,6 +44870,9 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections: z.ZodOptional<z.ZodBoolean>;
 		enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
 		enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
+		dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
+		dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 		enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
@@ -44773,6 +44907,9 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -44807,6 +44944,9 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -45086,6 +45226,9 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -45212,6 +45355,9 @@ export declare const tenantSchema: z.ZodObject<{
 		enable_client_connections?: boolean | undefined;
 		enable_custom_domain_in_emails?: boolean | undefined;
 		enable_dynamic_client_registration?: boolean | undefined;
+		dcr_require_initial_access_token?: boolean | undefined;
+		dcr_allowed_grant_types?: string[] | undefined;
+		dcr_allowed_integration_types?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
 		enable_legacy_profile?: boolean | undefined;
@@ -45311,16 +45457,16 @@ export declare const tokenResponseSchema: z.ZodObject<{
 	access_token: string;
 	token_type: string;
 	expires_in: number;
-	refresh_token?: string | undefined;
 	scope?: string | undefined;
+	refresh_token?: string | undefined;
 	id_token?: string | undefined;
 	state?: string | undefined;
 }, {
 	access_token: string;
 	token_type: string;
 	expires_in: number;
-	refresh_token?: string | undefined;
 	scope?: string | undefined;
+	refresh_token?: string | undefined;
 	id_token?: string | undefined;
 	state?: string | undefined;
 }>;
@@ -48738,6 +48884,7 @@ export interface IdentifierConfig {
  *   options.attributes.username.validation.{min_length,max_length}
  */
 export declare function getConnectionIdentifierConfig(connection: ConnectionLike | null | undefined): IdentifierConfig;
+export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
 export interface ListActionsResponse extends Totals {
 	actions: Action[];
 }
@@ -48851,6 +48998,16 @@ export interface ClientGrantsAdapter {
 	update(tenant_id: string, id: string, clientGrant: Partial<ClientGrantInsert>): Promise<boolean>;
 	remove(tenant_id: string, id: string): Promise<boolean>;
 }
+export interface ClientRegistrationTokensAdapter {
+	create: (tenant_id: string, token: ClientRegistrationTokenInsert) => Promise<ClientRegistrationToken>;
+	get: (tenant_id: string, id: string) => Promise<ClientRegistrationToken | null>;
+	getByHash: (tenant_id: string, token_hash: string) => Promise<ClientRegistrationToken | null>;
+	listByClient: (tenant_id: string, client_id: string) => Promise<ClientRegistrationToken[]>;
+	markUsed: (tenant_id: string, id: string, used_at: string) => Promise<boolean>;
+	revoke: (tenant_id: string, id: string, revoked_at: string) => Promise<boolean>;
+	revokeByClient: (tenant_id: string, client_id: string, revoked_at: string) => Promise<number>;
+	remove: (tenant_id: string, id: string) => Promise<boolean>;
+}
 export interface ListCodesResponse extends Totals {
 	codes: Code[];
 }
@@ -48998,11 +49155,23 @@ export interface EmailProvidersAdapter {
 export interface ListRefreshTokenResponse extends Totals {
 	refresh_tokens: RefreshToken[];
 }
+export interface UpdateRefreshTokenOptions {
+	/**
+	 * When provided, the adapter also extends the parent login_session's
+	 * `expires_at` to `expires_at` (only if the current value is smaller).
+	 * The caller is expected to compute the new expiry so the adapter can
+	 * avoid a read-before-write and parallelise the two UPDATEs.
+	 */
+	loginSessionBump?: {
+		login_id: string;
+		expires_at: string;
+	};
+}
 export interface RefreshTokensAdapter {
 	create: (tenant_id: string, refresh_token: RefreshTokenInsert) => Promise<RefreshToken>;
 	get: (tenant_id: string, id: string) => Promise<RefreshToken | null>;
 	list(tenant_id: string, params?: ListParams): Promise<ListRefreshTokenResponse>;
-	update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>) => Promise<boolean>;
+	update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
 	remove: (tenant_id: string, id: string) => Promise<boolean>;
 	revokeByLoginSession: (tenant_id: string, login_session_id: string, revoked_at: string) => Promise<number>;
 }
@@ -49301,6 +49470,7 @@ export interface DataAdapters {
 	clients: ClientsAdapter;
 	clientConnections: ClientConnectionsAdapter;
 	clientGrants: ClientGrantsAdapter;
+	clientRegistrationTokens?: ClientRegistrationTokensAdapter;
 	codes: CodesAdapter;
 	connections: ConnectionsAdapter;
 	customDomains: CustomDomainsAdapter;