@authhero/adapter-interfaces 4.20.0 → 4.22.0

package/dist/types/adapters/OrganizationConnections.d.ts

@@ -1,8 +1,23 @@
 import { OrganizationConnection, OrganizationConnectionInsert } from "../types";
 import { CreateOptions } from "../types/ImportMetadata";
+import { ListParams } from "../types/ListParams";
+export interface ListOrganizationConnectionsCheckpointResponse {
+    connections: OrganizationConnection[];
+    /** Opaque checkpoint cursor for the next page; absent on the last page. */
+    next?: string;
+}
 export interface OrganizationConnectionsAdapter {
     create(tenant_id: string, organization_id: string, params: OrganizationConnectionInsert, options?: CreateOptions): Promise<OrganizationConnection>;
     list(tenant_id: string, organization_id: string): Promise<OrganizationConnection[]>;
+    /**
+     * Checkpoint (from/take) pagination over an organization's enabled
+     * connections, ordered by connection id ascending (unique per organization).
+     * Separate from `list` because that returns a bare array with nowhere to
+     * carry `next`. Optional so existing adapter implementations keep compiling;
+     * the management API answers checkpoint requests with 501 when it is
+     * missing.
+     */
+    listCheckpoint?(tenant_id: string, organization_id: string, params?: ListParams): Promise<ListOrganizationConnectionsCheckpointResponse>;
     get(tenant_id: string, organization_id: string, connection_id: string): Promise<OrganizationConnection | null>;
     update(tenant_id: string, organization_id: string, connection_id: string, params: Partial<Omit<OrganizationConnectionInsert, "connection_id">>): Promise<OrganizationConnection | null>;
     remove(tenant_id: string, organization_id: string, connection_id: string): Promise<boolean>;

package/dist/types/adapters/Outbox.d.ts

@@ -21,6 +21,11 @@ export interface ListFailedEventsResponse {
     start: number;
     limit: number;
     length: number;
+    /**
+     * Opaque keyset cursor for the next page. Set only when the caller paginated
+     * with from/take and more rows may follow.
+     */
+    next?: string;
 }
 export interface OutboxAdapter {
     /** Write an audit event to the outbox. Returns the event ID. */

package/dist/types/adapters/RefreshTokens.d.ts

@@ -16,18 +16,6 @@ export interface RefreshTokenListParams extends ListParams {
 export interface ListRefreshTokenResponse extends Totals {
     refresh_tokens: RefreshToken[];
 }
-export interface UpdateRefreshTokenOptions {
-    /**
-     * When provided, the adapter also extends the parent login_session's
-     * `expires_at` to `expires_at` (only if the current value is smaller).
-     * The caller is expected to compute the new expiry so the adapter can
-     * avoid a read-before-write and parallelise the two UPDATEs.
-     */
-    loginSessionBump?: {
-        login_id: string;
-        expires_at: string;
-    };
-}
 /**
  * Update payload for a refresh token.
  *
@@ -55,7 +43,7 @@ export interface RefreshTokensAdapter {
      */
     getByLookup: (tenant_id: string, token_lookup: string) => Promise<RefreshToken | null>;
     list(tenant_id: string, params?: RefreshTokenListParams): Promise<ListRefreshTokenResponse>;
-    update: (tenant_id: string, id: string, refresh_token: RefreshTokenUpdate, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
+    update: (tenant_id: string, id: string, refresh_token: RefreshTokenUpdate) => Promise<boolean>;
     remove: (tenant_id: string, id: string) => Promise<boolean>;
     /**
      * Soft-revoke every refresh token belonging to a user that isn't already

package/dist/types/adapters/Tenants.d.ts

@@ -9,6 +9,7 @@ export interface CreateTenantParams {
     id?: string;
     session_lifetime?: number;
     idle_session_lifetime?: number;
+    parent_tenant_id?: string | null;
     deployment_type?: "shared" | "wfp";
     provisioning_state?: "pending" | "ready" | "failed";
     provisioning_error?: string;

package/dist/types/adapters/UserPermissions.d.ts

@@ -1,8 +1,22 @@
 import { ListParams } from "../types/ListParams";
 import { UserPermissionInsert, UserPermissionWithDetailsList } from "../types";
 import { CreateOptions } from "../types/ImportMetadata";
+export interface ListUserPermissionsCheckpointResponse {
+    permissions: UserPermissionWithDetailsList;
+    /** Opaque checkpoint cursor for the next page; absent on the last page. */
+    next?: string;
+}
 export interface UserPermissionsAdapter {
     create(tenant_id: string, user_id: string, permission: UserPermissionInsert, organization_id?: string, options?: CreateOptions): Promise<boolean>;
     remove(tenant_id: string, user_id: string, permission: Pick<UserPermissionInsert, "resource_server_identifier" | "permission_name">, organization_id?: string): Promise<boolean>;
     list(tenant_id: string, user_id: string, params?: ListParams, organization_id?: string): Promise<UserPermissionWithDetailsList>;
+    /**
+     * Checkpoint (from/take) pagination over a user's permissions, ordered by
+     * (resource_server_identifier, permission_name, organization_id) ascending —
+     * the composite key. Separate from `list` because that returns a bare array
+     * with nowhere to carry `next`. Optional so existing adapter implementations
+     * keep compiling; the management API answers checkpoint requests with 501
+     * when it is missing.
+     */
+    listCheckpoint?(tenant_id: string, user_id: string, params?: ListParams, organization_id?: string): Promise<ListUserPermissionsCheckpointResponse>;
 }

package/dist/types/adapters/UserRoles.d.ts

@@ -7,6 +7,11 @@ export interface ListUserRolesResponse {
     limit: number;
     length: number;
 }
+export interface ListUserRolesCheckpointResponse {
+    roles: Role[];
+    /** Opaque checkpoint cursor for the next page; absent on the last page. */
+    next?: string;
+}
 export interface ListRoleUsersResponse {
     /** Distinct user ids holding the role, ordered by user_id ascending. */
     userIds: string[];
@@ -35,6 +40,15 @@ export interface UserRolesAdapter {
      * lookups (see #1198).
      */
     list(tenantId: string, userId: string, params?: ListParams, organizationId?: string): Promise<Role[]>;
+    /**
+     * Checkpoint (from/take) pagination over the roles assigned to a user,
+     * ordered by role id ascending. Roles are distinct: one held under several
+     * organization scopes appears once (unlike `list`, which returns one row per
+     * assignment). `organizationId` filters exactly as it does for `list`.
+     * Optional so existing adapter implementations keep compiling; the
+     * management API answers checkpoint requests with 501 when it is missing.
+     */
+    listCheckpoint?(tenantId: string, userId: string, params?: ListParams, organizationId?: string): Promise<ListUserRolesCheckpointResponse>;
     /**
      * List the distinct users assigned to a role, across all organization
      * scopes (a user holding the role in several organizations appears once).

package/dist/types/types/Action.d.ts

@@ -12,6 +12,18 @@ export declare const actionSecretSchema: z.ZodObject<{
     value: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const actionInsertSchema: z.ZodObject<{
+    inherit: z.ZodOptional<z.ZodBoolean>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     name: z.ZodString;
     code: z.ZodString;
     supported_triggers: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -28,10 +40,21 @@ export declare const actionInsertSchema: z.ZodObject<{
         value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     is_system: z.ZodOptional<z.ZodBoolean>;
-    inherit: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ActionInsert = z.infer<typeof actionInsertSchema>;
 export declare const actionUpdateSchema: z.ZodObject<{
+    inherit: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+    scope: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>>;
+    override: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>>;
+    enforce: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
     name: z.ZodOptional<z.ZodString>;
     code: z.ZodOptional<z.ZodString>;
     supported_triggers: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -48,7 +71,6 @@ export declare const actionUpdateSchema: z.ZodObject<{
         value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>;
     is_system: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
-    inherit: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
     status: z.ZodOptional<z.ZodEnum<{
         draft: "draft";
         built: "built";
@@ -57,6 +79,18 @@ export declare const actionUpdateSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type ActionUpdate = z.infer<typeof actionUpdateSchema>;
 export declare const actionSchema: z.ZodObject<{
+    inherit: z.ZodOptional<z.ZodBoolean>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     name: z.ZodString;
     code: z.ZodString;
     supported_triggers: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -69,7 +103,6 @@ export declare const actionSchema: z.ZodObject<{
         version: z.ZodString;
     }, z.core.$strip>>>;
     is_system: z.ZodOptional<z.ZodBoolean>;
-    inherit: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodString;
     tenant_id: z.ZodString;
     status: z.ZodDefault<z.ZodEnum<{
@@ -98,6 +131,18 @@ export declare const actionSecretNameSchema: z.ZodObject<{
  * system enforce it rather than relying on every handler remembering.
  */
 export declare const actionResponseSchema: z.ZodObject<{
+    inherit: z.ZodOptional<z.ZodBoolean>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     name: z.ZodString;
     code: z.ZodString;
     supported_triggers: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -110,7 +155,6 @@ export declare const actionResponseSchema: z.ZodObject<{
         version: z.ZodString;
     }, z.core.$strip>>>;
     is_system: z.ZodOptional<z.ZodBoolean>;
-    inherit: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodString;
     tenant_id: z.ZodString;
     status: z.ZodDefault<z.ZodEnum<{

package/dist/types/types/AuditEvent.d.ts

@@ -33,6 +33,25 @@ export declare const targetSchema: z.ZodObject<{
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type Target = z.infer<typeof targetSchema>;
+/**
+ * The authenticated caller of a bearer-token request, mirroring Auth0's
+ * `details.request.auth` on `sapi` logs. `user` is set when the token was
+ * issued to a user and omitted for client-credentials tokens. Absent on
+ * requests that carry no bearer token, such as login flows.
+ */
+export declare const requestAuthSchema: z.ZodObject<{
+    user: z.ZodOptional<z.ZodObject<{
+        user_id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    strategy: z.ZodString;
+    credentials: z.ZodOptional<z.ZodObject<{
+        jti: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type RequestAuth = z.infer<typeof requestAuthSchema>;
 export declare const requestContextSchema: z.ZodObject<{
     method: z.ZodString;
     path: z.ZodString;
@@ -43,6 +62,18 @@ export declare const requestContextSchema: z.ZodObject<{
     correlation_id: z.ZodOptional<z.ZodString>;
     redirect_uri: z.ZodOptional<z.ZodString>;
     authorization_url: z.ZodOptional<z.ZodString>;
+    auth: z.ZodOptional<z.ZodObject<{
+        user: z.ZodOptional<z.ZodObject<{
+            user_id: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            email: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        strategy: z.ZodString;
+        credentials: z.ZodOptional<z.ZodObject<{
+            jti: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RequestContext = z.infer<typeof requestContextSchema>;
 export declare const responseContextSchema: z.ZodObject<{
@@ -109,6 +140,18 @@ export declare const auditEventInsertSchema: z.ZodObject<{
         correlation_id: z.ZodOptional<z.ZodString>;
         redirect_uri: z.ZodOptional<z.ZodString>;
         authorization_url: z.ZodOptional<z.ZodString>;
+        auth: z.ZodOptional<z.ZodObject<{
+            user: z.ZodOptional<z.ZodObject<{
+                user_id: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                email: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            strategy: z.ZodString;
+            credentials: z.ZodOptional<z.ZodObject<{
+                jti: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
     response: z.ZodOptional<z.ZodObject<{
         status_code: z.ZodNumber;
@@ -137,6 +180,8 @@ export declare const auditEventInsertSchema: z.ZodObject<{
     hostname: z.ZodString;
     is_mobile: z.ZodOptional<z.ZodBoolean>;
     execution_id: z.ZodOptional<z.ZodString>;
+    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    login_session_id: z.ZodOptional<z.ZodString>;
     timestamp: z.ZodString;
 }, z.core.$strip>;
 export type AuditEventInsert = z.infer<typeof auditEventInsertSchema>;
@@ -186,6 +231,18 @@ export declare const auditEventSchema: z.ZodObject<{
         correlation_id: z.ZodOptional<z.ZodString>;
         redirect_uri: z.ZodOptional<z.ZodString>;
         authorization_url: z.ZodOptional<z.ZodString>;
+        auth: z.ZodOptional<z.ZodObject<{
+            user: z.ZodOptional<z.ZodObject<{
+                user_id: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                email: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            strategy: z.ZodString;
+            credentials: z.ZodOptional<z.ZodObject<{
+                jti: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
     response: z.ZodOptional<z.ZodObject<{
         status_code: z.ZodNumber;
@@ -214,6 +271,8 @@ export declare const auditEventSchema: z.ZodObject<{
     hostname: z.ZodString;
     is_mobile: z.ZodOptional<z.ZodBoolean>;
     execution_id: z.ZodOptional<z.ZodString>;
+    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    login_session_id: z.ZodOptional<z.ZodString>;
     timestamp: z.ZodString;
     id: z.ZodString;
 }, z.core.$strip>;

package/dist/types/types/Branding.d.ts

@@ -20,5 +20,16 @@ export declare const brandingSchema: z.ZodObject<{
         light: "light";
         auto: "auto";
     }>>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type Branding = z.infer<typeof brandingSchema>;

package/dist/types/types/ConfigInheritance.d.ts

@@ -0,0 +1,39 @@
+import { z } from "@hono/zod-openapi";
+/**
+ * Publishing properties for tenant config inheritance
+ * (docs/design/tenant-config-inheritance.md, section 3.2).
+ *
+ * Unset (null/undefined) reads as `scope: "local"`, `override: "none"`,
+ * `enforce: false`, which is today's behaviour.
+ */
+export declare const configScopeSchema: z.ZodEnum<{
+    local: "local";
+    shared: "shared";
+    platform: "platform";
+}>;
+export type ConfigScope = z.infer<typeof configScopeSchema>;
+export declare const configOverrideSchema: z.ZodEnum<{
+    none: "none";
+    secrets: "secrets";
+    fields: "fields";
+}>;
+export type ConfigOverride = z.infer<typeof configOverrideSchema>;
+export declare const configInheritanceShape: {
+    /**
+     * `local`: not published. `shared`: visible to child tenants, who may copy
+     * or override it. `platform`: hidden from and locked for children, run only.
+     */
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    /** What a child may change on a `shared` row. */
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    /** A child cannot disable or delete the row. */
+    enforce: z.ZodOptional<z.ZodBoolean>;
+};

package/dist/types/types/Connection.d.ts

@@ -151,6 +151,17 @@ export declare const connectionOptionsSchema: z.ZodObject<{
     }>>;
 }, z.core.$strip>;
 export declare const connectionInsertSchema: z.ZodObject<{
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
     display_name: z.ZodOptional<z.ZodString>;
@@ -317,6 +328,17 @@ export type ConnectionInsert = z.infer<typeof connectionInsertSchema>;
 export declare const connectionSchema: z.ZodObject<{
     created_at: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     updated_at: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
     display_name: z.ZodOptional<z.ZodString>;

package/dist/types/types/EmailProvider.d.ts

@@ -5,5 +5,16 @@ export declare const emailProviderSchema: z.ZodObject<{
     default_from_address: z.ZodOptional<z.ZodString>;
     credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     settings: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type EmailProvider = z.infer<typeof emailProviderSchema>;

package/dist/types/types/Hook.d.ts

@@ -48,6 +48,17 @@ export declare const hookInsertSchema: z.ZodUnion<readonly [z.ZodObject<{
         "post-user-deletion": "post-user-deletion";
     }>;
     url: z.ZodString;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -58,6 +69,17 @@ export declare const hookInsertSchema: z.ZodUnion<readonly [z.ZodObject<{
         "post-user-login": "post-user-login";
     }>;
     form_id: z.ZodString;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -75,6 +97,17 @@ export declare const hookInsertSchema: z.ZodUnion<readonly [z.ZodObject<{
         "set-preferred-username": "set-preferred-username";
         "account-linking": "account-linking";
     }>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -88,6 +121,17 @@ export declare const hookInsertSchema: z.ZodUnion<readonly [z.ZodObject<{
         "credentials-exchange": "credentials-exchange";
     }>;
     code_id: z.ZodString;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -101,6 +145,17 @@ export declare const hookInsertSchema: z.ZodUnion<readonly [z.ZodObject<{
         impersonate: "impersonate";
     }>;
     permission_required: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -118,6 +173,17 @@ export declare const hookSchema: z.ZodUnion<readonly [z.ZodObject<{
         "pre-user-deletion": "pre-user-deletion";
         "post-user-deletion": "post-user-deletion";
     }>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -130,6 +196,17 @@ export declare const hookSchema: z.ZodUnion<readonly [z.ZodObject<{
     trigger_id: z.ZodEnum<{
         "post-user-login": "post-user-login";
     }>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -145,6 +222,17 @@ export declare const hookSchema: z.ZodUnion<readonly [z.ZodObject<{
         "post-user-update": "post-user-update";
         "credentials-exchange": "credentials-exchange";
     }>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -164,6 +252,17 @@ export declare const hookSchema: z.ZodUnion<readonly [z.ZodObject<{
         "post-user-login": "post-user-login";
         "credentials-exchange": "credentials-exchange";
     }>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
@@ -176,6 +275,17 @@ export declare const hookSchema: z.ZodUnion<readonly [z.ZodObject<{
     trigger_id: z.ZodEnum<{
         "post-user-login": "post-user-login";
     }>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        shared: "shared";
+        platform: "platform";
+    }>>;
+    override: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        secrets: "secrets";
+        fields: "fields";
+    }>>;
+    enforce: z.ZodOptional<z.ZodBoolean>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     synchronous: z.ZodDefault<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;