@authhero/adapter-interfaces 2.6.0 → 2.7.0

package/dist/types/types/ResourceServer.d.ts

@@ -0,0 +1,124 @@
+import { z } from "@hono/zod-openapi";
+export declare const resourceServerScopeSchema: z.ZodObject<{
+    value: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ResourceServerScope = z.infer<typeof resourceServerScopeSchema>;
+export declare const resourceServerOptionsSchema: z.ZodObject<{
+    token_dialect: z.ZodOptional<z.ZodEnum<{
+        access_token: "access_token";
+        access_token_authz: "access_token_authz";
+    }>>;
+    enforce_policies: z.ZodOptional<z.ZodBoolean>;
+    allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+    skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+    persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+    enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+    mtls: z.ZodOptional<z.ZodObject<{
+        bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ResourceServerOptions = z.infer<typeof resourceServerOptionsSchema>;
+export declare const resourceServerInsertSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    identifier: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    signing_alg: z.ZodOptional<z.ZodString>;
+    signing_secret: z.ZodOptional<z.ZodString>;
+    token_lifetime: z.ZodDefault<z.ZodNumber>;
+    token_lifetime_for_web: z.ZodDefault<z.ZodNumber>;
+    skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+    allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+    verificationKey: z.ZodOptional<z.ZodString>;
+    options: z.ZodOptional<z.ZodObject<{
+        token_dialect: z.ZodOptional<z.ZodEnum<{
+            access_token: "access_token";
+            access_token_authz: "access_token_authz";
+        }>>;
+        enforce_policies: z.ZodOptional<z.ZodBoolean>;
+        allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+        skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+        persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+        enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+        mtls: z.ZodOptional<z.ZodObject<{
+            bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    is_system: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.core.$strip>;
+export type ResourceServerInsert = z.input<typeof resourceServerInsertSchema>;
+export declare const resourceServerSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    identifier: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    signing_alg: z.ZodOptional<z.ZodString>;
+    signing_secret: z.ZodOptional<z.ZodString>;
+    token_lifetime: z.ZodDefault<z.ZodNumber>;
+    token_lifetime_for_web: z.ZodDefault<z.ZodNumber>;
+    skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+    allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+    verificationKey: z.ZodOptional<z.ZodString>;
+    options: z.ZodOptional<z.ZodObject<{
+        token_dialect: z.ZodOptional<z.ZodEnum<{
+            access_token: "access_token";
+            access_token_authz: "access_token_authz";
+        }>>;
+        enforce_policies: z.ZodOptional<z.ZodBoolean>;
+        allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+        skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+        persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+        enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+        mtls: z.ZodOptional<z.ZodObject<{
+            bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    is_system: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    created_at: z.ZodOptional<z.ZodString>;
+    updated_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ResourceServer = z.infer<typeof resourceServerSchema>;
+export declare const resourceServerListSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    identifier: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    signing_alg: z.ZodOptional<z.ZodString>;
+    signing_secret: z.ZodOptional<z.ZodString>;
+    token_lifetime: z.ZodDefault<z.ZodNumber>;
+    token_lifetime_for_web: z.ZodDefault<z.ZodNumber>;
+    skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+    allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+    verificationKey: z.ZodOptional<z.ZodString>;
+    options: z.ZodOptional<z.ZodObject<{
+        token_dialect: z.ZodOptional<z.ZodEnum<{
+            access_token: "access_token";
+            access_token_authz: "access_token_authz";
+        }>>;
+        enforce_policies: z.ZodOptional<z.ZodBoolean>;
+        allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+        skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+        persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+        enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+        mtls: z.ZodOptional<z.ZodObject<{
+            bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    is_system: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    created_at: z.ZodOptional<z.ZodString>;
+    updated_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
+export type ResourceServerList = z.infer<typeof resourceServerListSchema>;

package/dist/types/types/Role.d.ts

@@ -0,0 +1,29 @@
+import { z } from "@hono/zod-openapi";
+export declare const roleInsertSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    is_system: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.core.$strip>;
+export declare const roleSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    is_system: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    id: z.ZodString;
+    created_at: z.ZodOptional<z.ZodString>;
+    updated_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type Role = z.infer<typeof roleSchema>;
+export type RoleInsert = z.infer<typeof roleInsertSchema>;
+export declare const roleListSchema: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    is_system: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    id: z.ZodString;
+    created_at: z.ZodOptional<z.ZodString>;
+    updated_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
+export type RoleList = z.infer<typeof roleListSchema>;

package/dist/types/types/RolePermission.d.ts

@@ -0,0 +1,21 @@
+import { z } from "@hono/zod-openapi";
+export declare const rolePermissionInsertSchema: z.ZodObject<{
+    role_id: z.ZodString;
+    resource_server_identifier: z.ZodString;
+    permission_name: z.ZodString;
+}, z.core.$strip>;
+export type RolePermissionInsert = z.infer<typeof rolePermissionInsertSchema>;
+export declare const rolePermissionSchema: z.ZodObject<{
+    role_id: z.ZodString;
+    resource_server_identifier: z.ZodString;
+    permission_name: z.ZodString;
+    created_at: z.ZodString;
+}, z.core.$strip>;
+export type RolePermission = z.infer<typeof rolePermissionSchema>;
+export declare const rolePermissionListSchema: z.ZodArray<z.ZodObject<{
+    role_id: z.ZodString;
+    resource_server_identifier: z.ZodString;
+    permission_name: z.ZodString;
+    created_at: z.ZodString;
+}, z.core.$strip>>;
+export type RolePermissionList = z.infer<typeof rolePermissionListSchema>;

package/dist/types/types/Session.d.ts

@@ -0,0 +1,43 @@
+import { z } from "@hono/zod-openapi";
+export declare const sessionInsertSchema: z.ZodObject<{
+    id: z.ZodString;
+    revoked_at: z.ZodOptional<z.ZodString>;
+    used_at: z.ZodOptional<z.ZodString>;
+    user_id: z.ZodString;
+    expires_at: z.ZodOptional<z.ZodString>;
+    login_session_id: z.ZodString;
+    idle_expires_at: z.ZodOptional<z.ZodString>;
+    device: z.ZodObject<{
+        initial_user_agent: z.ZodString;
+        initial_ip: z.ZodString;
+        initial_asn: z.ZodString;
+        last_user_agent: z.ZodString;
+        last_ip: z.ZodString;
+        last_asn: z.ZodString;
+    }, z.core.$strip>;
+    clients: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type SessionInsert = z.infer<typeof sessionInsertSchema>;
+export declare const sessionSchema: z.ZodObject<{
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+    authenticated_at: z.ZodString;
+    last_interaction_at: z.ZodString;
+    id: z.ZodString;
+    revoked_at: z.ZodOptional<z.ZodString>;
+    used_at: z.ZodOptional<z.ZodString>;
+    user_id: z.ZodString;
+    expires_at: z.ZodOptional<z.ZodString>;
+    login_session_id: z.ZodString;
+    idle_expires_at: z.ZodOptional<z.ZodString>;
+    device: z.ZodObject<{
+        initial_user_agent: z.ZodString;
+        initial_ip: z.ZodString;
+        initial_asn: z.ZodString;
+        last_user_agent: z.ZodString;
+        last_ip: z.ZodString;
+        last_asn: z.ZodString;
+    }, z.core.$strip>;
+    clients: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type Session = z.infer<typeof sessionSchema>;

package/dist/types/types/SigningKey.d.ts

@@ -0,0 +1,22 @@
+import { z } from "@hono/zod-openapi";
+export declare const signingKeySchema: z.ZodObject<{
+    kid: z.ZodString;
+    tenant_id: z.ZodOptional<z.ZodString>;
+    cert: z.ZodString;
+    fingerprint: z.ZodString;
+    thumbprint: z.ZodString;
+    pkcs7: z.ZodOptional<z.ZodString>;
+    current: z.ZodOptional<z.ZodBoolean>;
+    next: z.ZodOptional<z.ZodBoolean>;
+    previous: z.ZodOptional<z.ZodBoolean>;
+    current_since: z.ZodOptional<z.ZodString>;
+    current_until: z.ZodOptional<z.ZodString>;
+    revoked: z.ZodOptional<z.ZodBoolean>;
+    revoked_at: z.ZodOptional<z.ZodString>;
+    connection: z.ZodOptional<z.ZodString>;
+    type: z.ZodEnum<{
+        jwt_signing: "jwt_signing";
+        saml_encryption: "saml_encryption";
+    }>;
+}, z.core.$strip>;
+export type SigningKey = z.infer<typeof signingKeySchema>;

package/dist/types/types/SmsProvider.d.ts

@@ -0,0 +1,11 @@
+import { z } from "@hono/zod-openapi";
+export declare const smsSendParamsSchema: z.ZodObject<{
+    to: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>;
+export type SmsSendParams = z.infer<typeof smsSendParamsSchema>;
+export declare const smsProviderSchema: z.ZodObject<{
+    name: z.ZodString;
+    options: z.ZodObject<{}, z.core.$strip>;
+}, z.core.$strip>;
+export type SmsProvider = z.infer<typeof smsProviderSchema>;

package/dist/types/types/Stats.d.ts

@@ -0,0 +1,12 @@
+import { z } from "@hono/zod-openapi";
+export declare const dailyStatsSchema: z.ZodObject<{
+    date: z.ZodString;
+    logins: z.ZodNumber;
+    signups: z.ZodNumber;
+    leaked_passwords: z.ZodNumber;
+    updated_at: z.ZodString;
+    created_at: z.ZodString;
+}, z.core.$strip>;
+export type DailyStats = z.infer<typeof dailyStatsSchema>;
+export declare const activeUsersResponseSchema: z.ZodNumber;
+export type ActiveUsersResponse = z.infer<typeof activeUsersResponseSchema>;

package/dist/types/types/Strategy.d.ts

@@ -0,0 +1,21 @@
+export declare const Strategy: {
+    readonly EMAIL: "email";
+    readonly SMS: "sms";
+    readonly USERNAME_PASSWORD: "Username-Password-Authentication";
+    readonly GOOGLE_OAUTH2: "google-oauth2";
+    readonly APPLE: "apple";
+    readonly FACEBOOK: "facebook";
+    readonly GITHUB: "github";
+    readonly MICROSOFT: "microsoft";
+    readonly VIPPS: "vipps";
+    readonly OIDC: "oidc";
+    readonly OAUTH2: "oauth2";
+    readonly SAMLP: "samlp";
+    readonly WAAD: "waad";
+    readonly ADFS: "adfs";
+};
+export declare const StrategyType: {
+    readonly DATABASE: "database";
+    readonly SOCIAL: "social";
+    readonly PASSWORDLESS: "passwordless";
+};

package/dist/types/types/Tenant.d.ts

@@ -0,0 +1,367 @@
+import { z } from "@hono/zod-openapi";
+export declare const tenantInsertSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    audience: z.ZodString;
+    friendly_name: z.ZodString;
+    picture_url: z.ZodOptional<z.ZodString>;
+    support_email: z.ZodOptional<z.ZodString>;
+    support_url: z.ZodOptional<z.ZodString>;
+    sender_email: z.ZodString;
+    sender_name: z.ZodString;
+    session_lifetime: z.ZodOptional<z.ZodNumber>;
+    idle_session_lifetime: z.ZodOptional<z.ZodNumber>;
+    ephemeral_session_lifetime: z.ZodOptional<z.ZodNumber>;
+    idle_ephemeral_session_lifetime: z.ZodOptional<z.ZodNumber>;
+    session_cookie: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<{
+            persistent: "persistent";
+            "non-persistent": "non-persistent";
+        }>>;
+    }, z.core.$strip>>;
+    allowed_logout_urls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    default_redirection_uri: z.ZodOptional<z.ZodString>;
+    default_client_id: z.ZodOptional<z.ZodString>;
+    enabled_locales: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    default_directory: z.ZodOptional<z.ZodString>;
+    error_page: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        html: z.ZodOptional<z.ZodString>;
+        show_log_link: z.ZodOptional<z.ZodBoolean>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    flags: z.ZodOptional<z.ZodObject<{
+        allow_changing_enable_sso: z.ZodOptional<z.ZodBoolean>;
+        allow_legacy_delegation_grant_types: z.ZodOptional<z.ZodBoolean>;
+        allow_legacy_ro_grant_types: z.ZodOptional<z.ZodBoolean>;
+        allow_legacy_tokeninfo_endpoint: z.ZodOptional<z.ZodBoolean>;
+        change_pwd_flow_v1: z.ZodOptional<z.ZodBoolean>;
+        custom_domains_provisioning: z.ZodOptional<z.ZodBoolean>;
+        dashboard_insights_view: z.ZodOptional<z.ZodBoolean>;
+        dashboard_log_streams_next: z.ZodOptional<z.ZodBoolean>;
+        disable_clickjack_protection_headers: z.ZodOptional<z.ZodBoolean>;
+        disable_fields_map_fix: z.ZodOptional<z.ZodBoolean>;
+        disable_impersonation: z.ZodOptional<z.ZodBoolean>;
+        disable_management_api_sms_obfuscation: z.ZodOptional<z.ZodBoolean>;
+        enable_adfs_waad_email_verification: z.ZodOptional<z.ZodBoolean>;
+        enable_apis_section: z.ZodOptional<z.ZodBoolean>;
+        enable_client_connections: z.ZodOptional<z.ZodBoolean>;
+        enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
+        enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
+        dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
+        dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allow_http_return_to: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
+        enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
+        enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
+        enable_pipeline2: z.ZodOptional<z.ZodBoolean>;
+        enable_public_signup_user_exists_error: z.ZodOptional<z.ZodBoolean>;
+        enable_sso: z.ZodOptional<z.ZodBoolean>;
+        enforce_client_authentication_on_passwordless_start: z.ZodOptional<z.ZodBoolean>;
+        genai_trial: z.ZodOptional<z.ZodBoolean>;
+        improved_signup_bot_detection_in_classic: z.ZodOptional<z.ZodBoolean>;
+        mfa_show_factor_list_on_enrollment: z.ZodOptional<z.ZodBoolean>;
+        no_disclose_enterprise_connections: z.ZodOptional<z.ZodBoolean>;
+        remove_alg_from_jwks: z.ZodOptional<z.ZodBoolean>;
+        revoke_refresh_token_grant: z.ZodOptional<z.ZodBoolean>;
+        trust_azure_adfs_email_verified_connection_property: z.ZodOptional<z.ZodBoolean>;
+        use_scope_descriptions_for_consent: z.ZodOptional<z.ZodBoolean>;
+        inherit_global_permissions_in_organizations: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    sandbox_version: z.ZodOptional<z.ZodString>;
+    legacy_sandbox_version: z.ZodOptional<z.ZodString>;
+    sandbox_versions_available: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    change_password: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        html: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    guardian_mfa_page: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        html: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    device_flow: z.ZodOptional<z.ZodObject<{
+        charset: z.ZodOptional<z.ZodEnum<{
+            base20: "base20";
+            digits: "digits";
+        }>>;
+        mask: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    default_token_quota: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        clients: z.ZodOptional<z.ZodObject<{
+            client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        }, z.core.$strip>>;
+        organizations: z.ZodOptional<z.ZodObject<{
+            client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    default_audience: z.ZodOptional<z.ZodString>;
+    default_organization: z.ZodOptional<z.ZodString>;
+    sessions: z.ZodOptional<z.ZodObject<{
+        oidc_logout_prompt_enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    oidc_logout: z.ZodOptional<z.ZodObject<{
+        rp_logout_end_session_endpoint_discovery: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    allow_organization_name_in_authentication_api: z.ZodOptional<z.ZodBoolean>;
+    customize_mfa_in_postlogin_action: z.ZodOptional<z.ZodBoolean>;
+    acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    mtls: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        enable_endpoint_aliases: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
+    authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    attack_protection: z.ZodOptional<z.ZodObject<{
+        breached_password_detection: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            method: z.ZodOptional<z.ZodString>;
+            stage: z.ZodOptional<z.ZodObject<{
+                "pre-user-registration": z.ZodOptional<z.ZodObject<{
+                    shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
+                "pre-change-password": z.ZodOptional<z.ZodObject<{
+                    shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        brute_force_protection: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            mode: z.ZodOptional<z.ZodString>;
+            max_attempts: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        suspicious_ip_throttling: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            stage: z.ZodOptional<z.ZodObject<{
+                "pre-login": z.ZodOptional<z.ZodObject<{
+                    max_attempts: z.ZodOptional<z.ZodNumber>;
+                    rate: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strip>>;
+                "pre-user-registration": z.ZodOptional<z.ZodObject<{
+                    max_attempts: z.ZodOptional<z.ZodNumber>;
+                    rate: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    mfa: z.ZodOptional<z.ZodObject<{
+        policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            never: "never";
+            always: "always";
+        }>>>;
+        factors: z.ZodOptional<z.ZodObject<{
+            sms: z.ZodDefault<z.ZodBoolean>;
+            otp: z.ZodDefault<z.ZodBoolean>;
+            email: z.ZodDefault<z.ZodBoolean>;
+            push_notification: z.ZodDefault<z.ZodBoolean>;
+            webauthn_roaming: z.ZodDefault<z.ZodBoolean>;
+            webauthn_platform: z.ZodDefault<z.ZodBoolean>;
+            recovery_code: z.ZodDefault<z.ZodBoolean>;
+            duo: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        sms_provider: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodOptional<z.ZodEnum<{
+                twilio: "twilio";
+                vonage: "vonage";
+                aws_sns: "aws_sns";
+                phone_message_hook: "phone_message_hook";
+            }>>;
+        }, z.core.$strip>>;
+        twilio: z.ZodOptional<z.ZodObject<{
+            sid: z.ZodOptional<z.ZodString>;
+            auth_token: z.ZodOptional<z.ZodString>;
+            from: z.ZodOptional<z.ZodString>;
+            messaging_service_sid: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        phone_message: z.ZodOptional<z.ZodObject<{
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const tenantSchema: z.ZodObject<{
+    created_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
+    updated_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
+    audience: z.ZodString;
+    friendly_name: z.ZodString;
+    picture_url: z.ZodOptional<z.ZodString>;
+    support_email: z.ZodOptional<z.ZodString>;
+    support_url: z.ZodOptional<z.ZodString>;
+    sender_email: z.ZodString;
+    sender_name: z.ZodString;
+    session_lifetime: z.ZodOptional<z.ZodNumber>;
+    idle_session_lifetime: z.ZodOptional<z.ZodNumber>;
+    ephemeral_session_lifetime: z.ZodOptional<z.ZodNumber>;
+    idle_ephemeral_session_lifetime: z.ZodOptional<z.ZodNumber>;
+    session_cookie: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<{
+            persistent: "persistent";
+            "non-persistent": "non-persistent";
+        }>>;
+    }, z.core.$strip>>;
+    allowed_logout_urls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    default_redirection_uri: z.ZodOptional<z.ZodString>;
+    default_client_id: z.ZodOptional<z.ZodString>;
+    enabled_locales: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    default_directory: z.ZodOptional<z.ZodString>;
+    error_page: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        html: z.ZodOptional<z.ZodString>;
+        show_log_link: z.ZodOptional<z.ZodBoolean>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    flags: z.ZodOptional<z.ZodObject<{
+        allow_changing_enable_sso: z.ZodOptional<z.ZodBoolean>;
+        allow_legacy_delegation_grant_types: z.ZodOptional<z.ZodBoolean>;
+        allow_legacy_ro_grant_types: z.ZodOptional<z.ZodBoolean>;
+        allow_legacy_tokeninfo_endpoint: z.ZodOptional<z.ZodBoolean>;
+        change_pwd_flow_v1: z.ZodOptional<z.ZodBoolean>;
+        custom_domains_provisioning: z.ZodOptional<z.ZodBoolean>;
+        dashboard_insights_view: z.ZodOptional<z.ZodBoolean>;
+        dashboard_log_streams_next: z.ZodOptional<z.ZodBoolean>;
+        disable_clickjack_protection_headers: z.ZodOptional<z.ZodBoolean>;
+        disable_fields_map_fix: z.ZodOptional<z.ZodBoolean>;
+        disable_impersonation: z.ZodOptional<z.ZodBoolean>;
+        disable_management_api_sms_obfuscation: z.ZodOptional<z.ZodBoolean>;
+        enable_adfs_waad_email_verification: z.ZodOptional<z.ZodBoolean>;
+        enable_apis_section: z.ZodOptional<z.ZodBoolean>;
+        enable_client_connections: z.ZodOptional<z.ZodBoolean>;
+        enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
+        enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
+        dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
+        dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allow_http_return_to: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
+        enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
+        enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
+        enable_pipeline2: z.ZodOptional<z.ZodBoolean>;
+        enable_public_signup_user_exists_error: z.ZodOptional<z.ZodBoolean>;
+        enable_sso: z.ZodOptional<z.ZodBoolean>;
+        enforce_client_authentication_on_passwordless_start: z.ZodOptional<z.ZodBoolean>;
+        genai_trial: z.ZodOptional<z.ZodBoolean>;
+        improved_signup_bot_detection_in_classic: z.ZodOptional<z.ZodBoolean>;
+        mfa_show_factor_list_on_enrollment: z.ZodOptional<z.ZodBoolean>;
+        no_disclose_enterprise_connections: z.ZodOptional<z.ZodBoolean>;
+        remove_alg_from_jwks: z.ZodOptional<z.ZodBoolean>;
+        revoke_refresh_token_grant: z.ZodOptional<z.ZodBoolean>;
+        trust_azure_adfs_email_verified_connection_property: z.ZodOptional<z.ZodBoolean>;
+        use_scope_descriptions_for_consent: z.ZodOptional<z.ZodBoolean>;
+        inherit_global_permissions_in_organizations: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    sandbox_version: z.ZodOptional<z.ZodString>;
+    legacy_sandbox_version: z.ZodOptional<z.ZodString>;
+    sandbox_versions_available: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    change_password: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        html: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    guardian_mfa_page: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        html: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    device_flow: z.ZodOptional<z.ZodObject<{
+        charset: z.ZodOptional<z.ZodEnum<{
+            base20: "base20";
+            digits: "digits";
+        }>>;
+        mask: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    default_token_quota: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        clients: z.ZodOptional<z.ZodObject<{
+            client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        }, z.core.$strip>>;
+        organizations: z.ZodOptional<z.ZodObject<{
+            client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    default_audience: z.ZodOptional<z.ZodString>;
+    default_organization: z.ZodOptional<z.ZodString>;
+    sessions: z.ZodOptional<z.ZodObject<{
+        oidc_logout_prompt_enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    oidc_logout: z.ZodOptional<z.ZodObject<{
+        rp_logout_end_session_endpoint_discovery: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    allow_organization_name_in_authentication_api: z.ZodOptional<z.ZodBoolean>;
+    customize_mfa_in_postlogin_action: z.ZodOptional<z.ZodBoolean>;
+    acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    mtls: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        enable_endpoint_aliases: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
+    authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+    attack_protection: z.ZodOptional<z.ZodObject<{
+        breached_password_detection: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            method: z.ZodOptional<z.ZodString>;
+            stage: z.ZodOptional<z.ZodObject<{
+                "pre-user-registration": z.ZodOptional<z.ZodObject<{
+                    shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
+                "pre-change-password": z.ZodOptional<z.ZodObject<{
+                    shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        brute_force_protection: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            mode: z.ZodOptional<z.ZodString>;
+            max_attempts: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        suspicious_ip_throttling: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            shields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            stage: z.ZodOptional<z.ZodObject<{
+                "pre-login": z.ZodOptional<z.ZodObject<{
+                    max_attempts: z.ZodOptional<z.ZodNumber>;
+                    rate: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strip>>;
+                "pre-user-registration": z.ZodOptional<z.ZodObject<{
+                    max_attempts: z.ZodOptional<z.ZodNumber>;
+                    rate: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    mfa: z.ZodOptional<z.ZodObject<{
+        policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            never: "never";
+            always: "always";
+        }>>>;
+        factors: z.ZodOptional<z.ZodObject<{
+            sms: z.ZodDefault<z.ZodBoolean>;
+            otp: z.ZodDefault<z.ZodBoolean>;
+            email: z.ZodDefault<z.ZodBoolean>;
+            push_notification: z.ZodDefault<z.ZodBoolean>;
+            webauthn_roaming: z.ZodDefault<z.ZodBoolean>;
+            webauthn_platform: z.ZodDefault<z.ZodBoolean>;
+            recovery_code: z.ZodDefault<z.ZodBoolean>;
+            duo: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        sms_provider: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodOptional<z.ZodEnum<{
+                twilio: "twilio";
+                vonage: "vonage";
+                aws_sns: "aws_sns";
+                phone_message_hook: "phone_message_hook";
+            }>>;
+        }, z.core.$strip>>;
+        twilio: z.ZodOptional<z.ZodObject<{
+            sid: z.ZodOptional<z.ZodString>;
+            auth_token: z.ZodOptional<z.ZodString>;
+            from: z.ZodOptional<z.ZodString>;
+            messaging_service_sid: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        phone_message: z.ZodOptional<z.ZodObject<{
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    id: z.ZodString;
+    is_control_plane: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type Tenant = z.infer<typeof tenantSchema>;