@authhero/adapter-interfaces 4.22.0 → 4.24.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -417,10 +417,10 @@ declare const targetSchema: z.ZodObject<{
417
417
  }, z.core.$strip>;
418
418
  type Target = z.infer<typeof targetSchema>;
419
419
  /**
420
- * The authenticated caller of a bearer-token request, mirroring Auth0's
421
- * `details.request.auth` on `sapi` logs. `user` is set when the token was
422
- * issued to a user and omitted for client-credentials tokens. Absent on
423
- * requests that carry no bearer token, such as login flows.
420
+ * The authenticated caller, mirroring Auth0's `details.request.auth` on
421
+ * `sapi` logs. `user` is set for user tokens and verified account sessions,
422
+ * and omitted for client-credentials tokens. `strategy` identifies JWT or
423
+ * session authentication. Absent on unauthenticated requests.
424
424
  */
425
425
  declare const requestAuthSchema: z.ZodObject<{
426
426
  user: z.ZodOptional<z.ZodObject<{
@@ -2346,6 +2346,28 @@ declare const codeSchema: z.ZodObject<{
2346
2346
  }, z.core.$strip>;
2347
2347
  type Code = z.infer<typeof codeSchema>;
2348
2348
 
2349
+ declare const deviceCodeSchema: z.ZodObject<{
2350
+ device_code_hash: z.ZodString;
2351
+ user_code_hash: z.ZodString;
2352
+ client_id: z.ZodString;
2353
+ scope: z.ZodOptional<z.ZodString>;
2354
+ audience: z.ZodOptional<z.ZodString>;
2355
+ status: z.ZodEnum<{
2356
+ pending: "pending";
2357
+ approved: "approved";
2358
+ denied: "denied";
2359
+ consumed: "consumed";
2360
+ }>;
2361
+ login_id: z.ZodOptional<z.ZodString>;
2362
+ expires_at: z.ZodString;
2363
+ created_at: z.ZodString;
2364
+ last_polled_at: z.ZodOptional<z.ZodString>;
2365
+ interval: z.ZodNumber;
2366
+ version: z.ZodNumber;
2367
+ }, z.core.$strip>;
2368
+ type DeviceCode = z.infer<typeof deviceCodeSchema>;
2369
+ type DeviceCodePatch = Partial<Pick<DeviceCode, "status" | "login_id" | "last_polled_at" | "interval">>;
2370
+
2349
2371
  declare const connectionOptionsSchema: z.ZodObject<{
2350
2372
  kid: z.ZodOptional<z.ZodString>;
2351
2373
  team_id: z.ZodOptional<z.ZodString>;
@@ -8424,7 +8446,12 @@ declare const hookInsertSchema: z.ZodUnion<readonly [z.ZodObject<{
8424
8446
  "pre-user-registration": "pre-user-registration";
8425
8447
  "post-user-registration": "post-user-registration";
8426
8448
  "post-user-login": "post-user-login";
8449
+ "post-user-update": "post-user-update";
8450
+ "validate-registration-username": "validate-registration-username";
8451
+ "pre-user-deletion": "pre-user-deletion";
8452
+ "post-user-deletion": "post-user-deletion";
8427
8453
  "credentials-exchange": "credentials-exchange";
8454
+ "pre-user-update": "pre-user-update";
8428
8455
  }>;
8429
8456
  code_id: z.ZodString;
8430
8457
  scope: z.ZodOptional<z.ZodEnum<{
@@ -8556,7 +8583,12 @@ declare const hookSchema: z.ZodUnion<readonly [z.ZodObject<{
8556
8583
  "pre-user-registration": "pre-user-registration";
8557
8584
  "post-user-registration": "post-user-registration";
8558
8585
  "post-user-login": "post-user-login";
8586
+ "post-user-update": "post-user-update";
8587
+ "validate-registration-username": "validate-registration-username";
8588
+ "pre-user-deletion": "pre-user-deletion";
8589
+ "post-user-deletion": "post-user-deletion";
8559
8590
  "credentials-exchange": "credentials-exchange";
8591
+ "pre-user-update": "pre-user-update";
8560
8592
  }>;
8561
8593
  scope: z.ZodOptional<z.ZodEnum<{
8562
8594
  local: "local";
@@ -8777,6 +8809,7 @@ declare const openIDConfigurationSchema: z.ZodObject<{
8777
8809
  issuer: z.ZodString;
8778
8810
  authorization_endpoint: z.ZodString;
8779
8811
  token_endpoint: z.ZodString;
8812
+ device_authorization_endpoint: z.ZodOptional<z.ZodString>;
8780
8813
  userinfo_endpoint: z.ZodString;
8781
8814
  jwks_uri: z.ZodString;
8782
8815
  registration_endpoint: z.ZodOptional<z.ZodString>;
@@ -8975,6 +9008,7 @@ declare const LogTypes: {
8975
9008
  readonly CODE_SENT: "cs";
8976
9009
  readonly DEPRECATION_NOTICE: "depnote";
8977
9010
  readonly CONFIG_INHERITANCE_DIFF: "cfgdiff";
9011
+ readonly CONFIG_DRIFT: "cfgdrift";
8978
9012
  readonly FAILED_LOGIN: "f";
8979
9013
  readonly FAILED_BY_CONNECTOR: "fc";
8980
9014
  readonly FAILED_CHANGE_EMAIL: "fce";
@@ -9145,7 +9179,7 @@ declare const LocationInfo: z.ZodObject<{
9145
9179
  continent_code: z.ZodString;
9146
9180
  }, z.core.$strip>;
9147
9181
  declare const logInsertSchema: z.ZodObject<{
9148
- type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
9182
+ type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
9149
9183
  date: z.ZodString;
9150
9184
  description: z.ZodOptional<z.ZodString>;
9151
9185
  ip: z.ZodOptional<z.ZodString>;
@@ -9182,7 +9216,7 @@ declare const logInsertSchema: z.ZodObject<{
9182
9216
  }, z.core.$strip>;
9183
9217
  type LogInsert = z.infer<typeof logInsertSchema>;
9184
9218
  declare const logSchema: z.ZodObject<{
9185
- type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
9219
+ type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
9186
9220
  date: z.ZodString;
9187
9221
  description: z.ZodOptional<z.ZodString>;
9188
9222
  ip: z.ZodOptional<z.ZodString>;
@@ -9516,6 +9550,13 @@ type SigningKey = z.infer<typeof signingKeySchema>;
9516
9550
  declare const tenantInsertSchema: z.ZodObject<{
9517
9551
  id: z.ZodOptional<z.ZodString>;
9518
9552
  parent_tenant_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
9553
+ config_sync: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
9554
+ "inherit-on-read": "inherit-on-read";
9555
+ synced: "synced";
9556
+ detached: "detached";
9557
+ }>>>;
9558
+ config_sync_hash: z.ZodOptional<z.ZodNullable<z.ZodString>>;
9559
+ config_synced_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
9519
9560
  audience: z.ZodOptional<z.ZodString>;
9520
9561
  friendly_name: z.ZodString;
9521
9562
  picture_url: z.ZodOptional<z.ZodString>;
@@ -9722,6 +9763,13 @@ declare const tenantSchema: z.ZodObject<{
9722
9763
  created_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
9723
9764
  updated_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
9724
9765
  parent_tenant_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
9766
+ config_sync: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
9767
+ "inherit-on-read": "inherit-on-read";
9768
+ synced: "synced";
9769
+ detached: "detached";
9770
+ }>>>;
9771
+ config_sync_hash: z.ZodOptional<z.ZodNullable<z.ZodString>>;
9772
+ config_synced_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
9725
9773
  audience: z.ZodOptional<z.ZodString>;
9726
9774
  friendly_name: z.ZodString;
9727
9775
  picture_url: z.ZodOptional<z.ZodString>;
@@ -9925,6 +9973,7 @@ declare const tenantSchema: z.ZodObject<{
9925
9973
  }, z.core.$strip>>;
9926
9974
  id: z.ZodString;
9927
9975
  is_control_plane: z.ZodOptional<z.ZodBoolean>;
9976
+ has_children: z.ZodOptional<z.ZodBoolean>;
9928
9977
  }, z.core.$strip>;
9929
9978
  type Tenant = z.infer<typeof tenantSchema>;
9930
9979
 
@@ -9943,6 +9992,9 @@ declare const tenantOperationKindSchema: z.ZodEnum<{
9943
9992
  backup: "backup";
9944
9993
  deprovision: "deprovision";
9945
9994
  users_import: "users_import";
9995
+ "sync-defaults": "sync-defaults";
9996
+ detach: "detach";
9997
+ "tenant-members-request": "tenant-members-request";
9946
9998
  }>;
9947
9999
  type TenantOperationKind = z.infer<typeof tenantOperationKindSchema>;
9948
10000
  declare const tenantOperationStatusSchema: z.ZodEnum<{
@@ -9979,6 +10031,9 @@ declare const tenantOperationInsertSchema: z.ZodObject<{
9979
10031
  backup: "backup";
9980
10032
  deprovision: "deprovision";
9981
10033
  users_import: "users_import";
10034
+ "sync-defaults": "sync-defaults";
10035
+ detach: "detach";
10036
+ "tenant-members-request": "tenant-members-request";
9982
10037
  }>;
9983
10038
  engine: z.ZodString;
9984
10039
  engine_instance_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -9998,6 +10053,9 @@ declare const tenantOperationSchema: z.ZodObject<{
9998
10053
  backup: "backup";
9999
10054
  deprovision: "deprovision";
10000
10055
  users_import: "users_import";
10056
+ "sync-defaults": "sync-defaults";
10057
+ detach: "detach";
10058
+ "tenant-members-request": "tenant-members-request";
10001
10059
  }>;
10002
10060
  engine: z.ZodString;
10003
10061
  engine_instance_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -10187,6 +10245,7 @@ declare const rolloutKindSchema: z.ZodEnum<{
10187
10245
  upgrade: "upgrade";
10188
10246
  backup: "backup";
10189
10247
  reseed: "reseed";
10248
+ "config-sync": "config-sync";
10190
10249
  }>;
10191
10250
  type RolloutKind = z.infer<typeof rolloutKindSchema>;
10192
10251
  declare const rolloutStatusSchema: z.ZodEnum<{
@@ -10203,6 +10262,7 @@ declare const rolloutInsertSchema: z.ZodObject<{
10203
10262
  upgrade: "upgrade";
10204
10263
  backup: "backup";
10205
10264
  reseed: "reseed";
10265
+ "config-sync": "config-sync";
10206
10266
  }>;
10207
10267
  target_worker_version: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10208
10268
  target_database_version: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -10210,6 +10270,7 @@ declare const rolloutInsertSchema: z.ZodObject<{
10210
10270
  canary_tenant_ids: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
10211
10271
  filter: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
10212
10272
  initiated_by: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10273
+ config: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
10213
10274
  }, z.core.$strip>;
10214
10275
  type RolloutInsert = z.input<typeof rolloutInsertSchema>;
10215
10276
  declare const rolloutSchema: z.ZodObject<{
@@ -10217,6 +10278,7 @@ declare const rolloutSchema: z.ZodObject<{
10217
10278
  upgrade: "upgrade";
10218
10279
  backup: "backup";
10219
10280
  reseed: "reseed";
10281
+ "config-sync": "config-sync";
10220
10282
  }>;
10221
10283
  target_worker_version: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10222
10284
  target_database_version: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -10224,6 +10286,7 @@ declare const rolloutSchema: z.ZodObject<{
10224
10286
  canary_tenant_ids: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
10225
10287
  filter: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
10226
10288
  initiated_by: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10289
+ config: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
10227
10290
  id: z.ZodString;
10228
10291
  status: z.ZodEnum<{
10229
10292
  pending: "pending";
@@ -10236,6 +10299,7 @@ declare const rolloutSchema: z.ZodObject<{
10236
10299
  created_at: z.ZodString;
10237
10300
  updated_at: z.ZodString;
10238
10301
  finished_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10302
+ paused_reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10239
10303
  }, z.core.$strip>;
10240
10304
  type Rollout = z.infer<typeof rolloutSchema>;
10241
10305
  declare const rolloutUpdateSchema: z.ZodObject<{
@@ -10248,13 +10312,89 @@ declare const rolloutUpdateSchema: z.ZodObject<{
10248
10312
  done: "done";
10249
10313
  }>>;
10250
10314
  filter: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
10315
+ config: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
10251
10316
  finished_at: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
10252
10317
  wave_size: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
10253
10318
  canary_tenant_ids: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>>;
10319
+ paused_reason: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
10254
10320
  }, z.core.$strip>;
10255
10321
  type RolloutUpdate = z.infer<typeof rolloutUpdateSchema>;
10256
10322
 
10323
+ /**
10324
+ * A change to a tenant's team that a WFP shard registers and the control plane
10325
+ * carries out (issue #1550). The row lives in the shard's own database, so the
10326
+ * shard keeps a record of what was asked, and the control plane writes the
10327
+ * outcome back to it.
10328
+ */
10329
+ declare const tenantMemberRequestKindSchema: z.ZodEnum<{
10330
+ invite: "invite";
10331
+ add_members: "add_members";
10332
+ remove_members: "remove_members";
10333
+ assign_roles: "assign_roles";
10334
+ remove_roles: "remove_roles";
10335
+ revoke_invitation: "revoke_invitation";
10336
+ }>;
10337
+ type TenantMemberRequestKind = z.infer<typeof tenantMemberRequestKindSchema>;
10338
+ declare const tenantMemberRequestStatusSchema: z.ZodEnum<{
10339
+ pending: "pending";
10340
+ failed: "failed";
10341
+ succeeded: "succeeded";
10342
+ }>;
10343
+ type TenantMemberRequestStatus = z.infer<typeof tenantMemberRequestStatusSchema>;
10344
+ declare const tenantMemberRequestInsertSchema: z.ZodObject<{
10345
+ kind: z.ZodEnum<{
10346
+ invite: "invite";
10347
+ add_members: "add_members";
10348
+ remove_members: "remove_members";
10349
+ assign_roles: "assign_roles";
10350
+ remove_roles: "remove_roles";
10351
+ revoke_invitation: "revoke_invitation";
10352
+ }>;
10353
+ requested_by: z.ZodString;
10354
+ payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
10355
+ }, z.core.$strip>;
10356
+ type TenantMemberRequestInsert = z.input<typeof tenantMemberRequestInsertSchema>;
10357
+ declare const tenantMemberRequestSchema: z.ZodObject<{
10358
+ kind: z.ZodEnum<{
10359
+ invite: "invite";
10360
+ add_members: "add_members";
10361
+ remove_members: "remove_members";
10362
+ assign_roles: "assign_roles";
10363
+ remove_roles: "remove_roles";
10364
+ revoke_invitation: "revoke_invitation";
10365
+ }>;
10366
+ requested_by: z.ZodString;
10367
+ payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
10368
+ id: z.ZodString;
10369
+ tenant_id: z.ZodString;
10370
+ status: z.ZodEnum<{
10371
+ pending: "pending";
10372
+ failed: "failed";
10373
+ succeeded: "succeeded";
10374
+ }>;
10375
+ result: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
10376
+ error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10377
+ notified_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10378
+ created_at: z.ZodString;
10379
+ updated_at: z.ZodString;
10380
+ finished_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10381
+ }, z.core.$strip>;
10382
+ type TenantMemberRequest = z.infer<typeof tenantMemberRequestSchema>;
10383
+ declare const tenantMemberRequestUpdateSchema: z.ZodObject<{
10384
+ status: z.ZodOptional<z.ZodEnum<{
10385
+ pending: "pending";
10386
+ failed: "failed";
10387
+ succeeded: "succeeded";
10388
+ }>>;
10389
+ result: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
10390
+ error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10391
+ notified_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10392
+ finished_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
10393
+ }, z.core.$strip>;
10394
+ type TenantMemberRequestUpdate = z.infer<typeof tenantMemberRequestUpdateSchema>;
10395
+
10257
10396
  declare enum GrantType {
10397
+ DeviceCode = "urn:ietf:params:oauth:grant-type:device_code",
10258
10398
  RefreshToken = "refresh_token",
10259
10399
  AuthorizationCode = "authorization_code",
10260
10400
  ClientCredential = "client_credentials",
@@ -12727,6 +12867,20 @@ interface CodesAdapter {
12727
12867
  cleanup: (olderThan: string) => Promise<number>;
12728
12868
  }
12729
12869
 
12870
+ /** RFC 8628 grants. Both codes are SHA-256 hashes; never store the wire device code. */
12871
+ interface DeviceCodesAdapter {
12872
+ /** Must reject duplicate device/user code hashes within the tenant. */
12873
+ create(tenantId: string, code: DeviceCode): Promise<void>;
12874
+ get(tenantId: string, deviceCodeHash: string): Promise<DeviceCode | null>;
12875
+ getByUserCode(tenantId: string, userCodeHash: string): Promise<DeviceCode | null>;
12876
+ /** Atomic compare-and-swap. Increment version iff the expected version matches. */
12877
+ update(tenantId: string, deviceCodeHash: string, version: number, patch: DeviceCodePatch): Promise<boolean>;
12878
+ /** Atomically increment a fixed-window throttle bucket; return its new count. */
12879
+ incrementAttempts(tenantId: string, key: string, expiresAt: string): Promise<number>;
12880
+ /** Delete expired grants and throttle buckets globally. DynamoDB may use TTL. */
12881
+ cleanup(olderThan: string): Promise<number>;
12882
+ }
12883
+
12730
12884
  interface PasswordsAdapter {
12731
12885
  create: (tenant_id: string, params: PasswordInsert, options?: CreateOptions) => Promise<Password>;
12732
12886
  update: (tenant_id: string, params: PasswordInsert) => Promise<boolean>;
@@ -12771,6 +12925,7 @@ interface CreateTenantParams {
12771
12925
  session_lifetime?: number;
12772
12926
  idle_session_lifetime?: number;
12773
12927
  parent_tenant_id?: string | null;
12928
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null;
12774
12929
  deployment_type?: "shared" | "wfp";
12775
12930
  provisioning_state?: "pending" | "ready" | "failed";
12776
12931
  provisioning_error?: string;
@@ -13725,17 +13880,57 @@ interface ListRolloutsResult {
13725
13880
  limit: number;
13726
13881
  length: number;
13727
13882
  }
13883
+ interface ListRolloutsParams extends ListParams {
13884
+ status?: RolloutStatus | RolloutStatus[];
13885
+ kind?: RolloutKind;
13886
+ }
13728
13887
  interface RolloutsAdapter {
13729
13888
  /** Generates the `rol_<nanoid>` id and inserts with status `pending`. */
13730
13889
  create(rollout: RolloutInsert): Promise<Rollout>;
13731
13890
  get(id: string): Promise<Rollout | null>;
13732
13891
  /** Default sort: `created_at` descending. */
13733
- list(params?: ListParams): Promise<ListRolloutsResult>;
13892
+ list(params?: ListRolloutsParams): Promise<ListRolloutsResult>;
13734
13893
  /** Always bumps `updated_at`. */
13735
13894
  update(id: string, rollout: RolloutUpdate): Promise<boolean>;
13736
13895
  remove(id: string): Promise<boolean>;
13737
13896
  }
13738
13897
 
13898
+ interface ListTenantMemberRequestsParams extends ListParams {
13899
+ status?: TenantMemberRequestStatus | TenantMemberRequestStatus[];
13900
+ /**
13901
+ * `true`: only requests the control plane has not acknowledged yet
13902
+ * (`notified_at` unset). The reconcile job reads these.
13903
+ */
13904
+ unnotified?: boolean;
13905
+ /** Only requests created before this instant (ISO 8601). */
13906
+ created_before?: string;
13907
+ }
13908
+ interface ListTenantMemberRequestsResult {
13909
+ requests: TenantMemberRequest[];
13910
+ start: number;
13911
+ limit: number;
13912
+ length: number;
13913
+ }
13914
+ /**
13915
+ * Team-change requests of a tenant (issue #1550), stored in the tenant's own
13916
+ * database. Every method but `cleanup` is scoped to one tenant.
13917
+ */
13918
+ interface TenantMemberRequestsAdapter {
13919
+ /** Generates the `tmr_<nanoid>` id and inserts with status `pending`. */
13920
+ create(tenantId: string, request: TenantMemberRequestInsert): Promise<TenantMemberRequest>;
13921
+ get(tenantId: string, id: string): Promise<TenantMemberRequest | null>;
13922
+ /** Default sort: `created_at` descending. */
13923
+ list(tenantId: string, params?: ListTenantMemberRequestsParams): Promise<ListTenantMemberRequestsResult>;
13924
+ /**
13925
+ * Always bumps `updated_at`. With `expectedStatus` the update only applies
13926
+ * while the row still has that status, which is how a `pending` request is
13927
+ * finished exactly once. Returns whether a row was updated.
13928
+ */
13929
+ update(tenantId: string, id: string, patch: TenantMemberRequestUpdate, expectedStatus?: TenantMemberRequestStatus): Promise<boolean>;
13930
+ /** Deletes finished requests (`succeeded` or `failed`) finished before `olderThan`, across tenants. */
13931
+ cleanup(olderThan: string): Promise<number>;
13932
+ }
13933
+
13739
13934
  interface CodeExecutionLog {
13740
13935
  level: "log" | "info" | "warn" | "error" | "debug";
13741
13936
  message: string;
@@ -13809,6 +14004,8 @@ interface DataAdapters {
13809
14004
  clientGrants: ClientGrantsAdapter;
13810
14005
  clientRegistrationTokens?: ClientRegistrationTokensAdapter;
13811
14006
  codes: CodesAdapter;
14007
+ /** Optional RFC 8628 storage. Enables the device authorization grant. */
14008
+ deviceCodes?: DeviceCodesAdapter;
13812
14009
  connections: ConnectionsAdapter;
13813
14010
  customDomains: CustomDomainsAdapter;
13814
14011
  emailProviders: EmailProvidersAdapter;
@@ -13914,6 +14111,12 @@ interface DataAdapters {
13914
14111
  * and CRUD only; the wave/canary coordinator and routes come later.
13915
14112
  */
13916
14113
  rollouts?: RolloutsAdapter;
14114
+ /**
14115
+ * Optional team-change requests of a tenant, kept in the tenant's own
14116
+ * database (issue #1550). A shard registers a request here and the control
14117
+ * plane writes the outcome back.
14118
+ */
14119
+ tenantMemberRequests?: TenantMemberRequestsAdapter;
13917
14120
  themes: ThemesAdapter;
13918
14121
  universalLoginTemplates: UniversalLoginTemplatesAdapter;
13919
14122
  customText: CustomTextAdapter;
@@ -13976,5 +14179,5 @@ interface DataAdapters {
13976
14179
  };
13977
14180
  }
13978
14181
 
13979
- export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FeatureNotSupportedError, FlowActionTypeEnum, GrantType, KNOWN_TENANT_OPERATION_ENGINES, LocationInfo, LogTypes, LoginSessionState, MONDAY_EPOCH_SHIFT_MS, NodeType, PRESERVE_LOCATION_HEADER, RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, RedirectTargetEnum, Strategy, StrategyType, TERMINAL_TENANT_OPERATION_ROW_STATUSES, TOKEN_EXCHANGE_PROFILE_TYPE, TRIGGER_API_SHAPES, TRIGGER_FUNCTION_NAMES, USERNAME_CONTAINS_AT_MESSAGE, USERNAME_INVALID_CHARACTERS_MESSAGE, WEEK_MS, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionResponseSchema, actionSchema, actionSecretNameSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, allowedTriggersForHook, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buildRefreshTokenRetention, buildSessionRetention, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, configInheritanceShape, configOverrideSchema, configScopeSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase32, decodeBase64, decodeBase64Url, decodeBase64UrlString, decodeCursor, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase32, encodeBase64, encodeBase64Url, encodeBase64UrlString, encodeCursor, encodeHex, endingSchema, escapeLuceneValue, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookPageId, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isEmailSearchTerm, isFeatureNotSupportedError, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, normalizeUsername, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptPartialInsertionPoints, promptPartialsEntrySchema, promptPartialsSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenRetentionCohortSchema, refreshTokenRetentionResponseSchema, refreshTokenSchema, requestAuthSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, sanitizeLuceneQuery, scimConfigurationInsertSchema, scimConfigurationSchema, scimExternalIdInsertSchema, scimExternalIdSchema, scimMappingEntrySchema, scimTokenInsertSchema, scimTokenSchema, screenLinkSchema, sessionInsertSchema, sessionRetentionCohortSchema, sessionRetentionResponseSchema, sessionRetentionWindow, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, splitLuceneOrGroups, startSchema, subjectTokenTypeSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationRowInsertSchema, tenantOperationRowOutcomeSchema, tenantOperationRowSchema, tenantOperationRowStatusSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenExchangeJwtAlgorithmSchema, tokenExchangeJwtVerificationSchema, tokenExchangeProfileInsertSchema, tokenExchangeProfileSchema, tokenExchangeProfileUpdateSchema, tokenExchangeUserMappingSchema, tokenResponseSchema, tokenizeLuceneQuery, totalsSchema, uiScreenPartialsSchema, uiScreenSchema, unescapeLuceneValue, unquoteLuceneValue, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, usernameHasOnlyAllowedCharacters, validateUsername, verificationMethodsSchema, weekIndex, weekStartMs, widgetComponentSchema, widgetSchema };
13980
- export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionResponse, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeField, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, ConfigOverride, ConfigScope, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateOptions, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CursorPayload, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainUpdate, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookPageId, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, ImportMetadata, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, LinkCandidate, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationConnectionsCheckpointResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRolePermissionsCheckpointResponse, ListRoleUsersResponse, ListRolesResponse, ListRolloutsResult, ListSesssionsResponse, ListTenantOperationEventsResult, ListTenantOperationRowsParams, ListTenantOperationRowsResult, ListTenantOperationsParams, ListTenantOperationsResult, ListUserPermissionsCheckpointResponse, ListUserRolesCheckpointResponse, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, OutboxEventInsert, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptPartialInsertionPoint, PromptPartials, PromptPartialsAdapter, PromptPartialsEntry, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokenListParams, RefreshTokenRetentionCohort, RefreshTokenRetentionParams, RefreshTokenRetentionResponse, RefreshTokenUpdate, RefreshTokensAdapter, RequestAuth, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, Rollout, RolloutInsert, RolloutKind, RolloutStatus, RolloutUpdate, RolloutsAdapter, RouteMatch, RouterNode, RuntimeComponent, ScimConfiguration, ScimConfigurationInsert, ScimConfigurationsAdapter, ScimExternalId, ScimExternalIdInsert, ScimExternalIdsAdapter, ScimMappingEntry, ScimToken, ScimTokenInsert, ScimTokensAdapter, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionRetentionCohort, SessionRetentionParams, SessionRetentionRawRow, SessionRetentionResponse, SessionRetentionWindow, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantOperation, TenantOperationEngine, TenantOperationEvent, TenantOperationEventInsert, TenantOperationEventOutcome, TenantOperationEventsAdapter, TenantOperationInsert, TenantOperationKind, TenantOperationRow, TenantOperationRowCounts, TenantOperationRowInsert, TenantOperationRowOutcome, TenantOperationRowStatus, TenantOperationRowsAdapter, TenantOperationStatus, TenantOperationUpdate, TenantOperationsAdapter, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenExchangeJwtAlgorithm, TokenExchangeJwtVerification, TokenExchangeProfile, TokenExchangeProfileInsert, TokenExchangeProfileUpdate, TokenExchangeProfilesAdapter, TokenExchangeUserMapping, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UrlField, User, UserActivity, UserActivityAdapter, UserActivityUpdate, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, UsernameLengthBounds, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent, WriteOptions };
14182
+ export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FeatureNotSupportedError, FlowActionTypeEnum, GrantType, KNOWN_TENANT_OPERATION_ENGINES, LocationInfo, LogTypes, LoginSessionState, MONDAY_EPOCH_SHIFT_MS, NodeType, PRESERVE_LOCATION_HEADER, RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, RedirectTargetEnum, Strategy, StrategyType, TERMINAL_TENANT_OPERATION_ROW_STATUSES, TOKEN_EXCHANGE_PROFILE_TYPE, TRIGGER_API_SHAPES, TRIGGER_FUNCTION_NAMES, USERNAME_CONTAINS_AT_MESSAGE, USERNAME_INVALID_CHARACTERS_MESSAGE, WEEK_MS, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionResponseSchema, actionSchema, actionSecretNameSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, allowedTriggersForHook, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buildRefreshTokenRetention, buildSessionRetention, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, configInheritanceShape, configOverrideSchema, configScopeSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase32, decodeBase64, decodeBase64Url, decodeBase64UrlString, decodeCursor, deviceCodeSchema, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase32, encodeBase64, encodeBase64Url, encodeBase64UrlString, encodeCursor, encodeHex, endingSchema, escapeLuceneValue, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookPageId, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isEmailSearchTerm, isFeatureNotSupportedError, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, normalizeUsername, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptPartialInsertionPoints, promptPartialsEntrySchema, promptPartialsSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenRetentionCohortSchema, refreshTokenRetentionResponseSchema, refreshTokenSchema, requestAuthSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, sanitizeLuceneQuery, scimConfigurationInsertSchema, scimConfigurationSchema, scimExternalIdInsertSchema, scimExternalIdSchema, scimMappingEntrySchema, scimTokenInsertSchema, scimTokenSchema, screenLinkSchema, sessionInsertSchema, sessionRetentionCohortSchema, sessionRetentionResponseSchema, sessionRetentionWindow, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, splitLuceneOrGroups, startSchema, subjectTokenTypeSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantMemberRequestInsertSchema, tenantMemberRequestKindSchema, tenantMemberRequestSchema, tenantMemberRequestStatusSchema, tenantMemberRequestUpdateSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationRowInsertSchema, tenantOperationRowOutcomeSchema, tenantOperationRowSchema, tenantOperationRowStatusSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenExchangeJwtAlgorithmSchema, tokenExchangeJwtVerificationSchema, tokenExchangeProfileInsertSchema, tokenExchangeProfileSchema, tokenExchangeProfileUpdateSchema, tokenExchangeUserMappingSchema, tokenResponseSchema, tokenizeLuceneQuery, totalsSchema, uiScreenPartialsSchema, uiScreenSchema, unescapeLuceneValue, unquoteLuceneValue, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, usernameHasOnlyAllowedCharacters, validateUsername, verificationMethodsSchema, weekIndex, weekStartMs, widgetComponentSchema, widgetSchema };
14183
+ export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionResponse, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeField, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, ConfigOverride, ConfigScope, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateOptions, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CursorPayload, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainUpdate, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DeviceCode, DeviceCodePatch, DeviceCodesAdapter, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookPageId, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, ImportMetadata, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, LinkCandidate, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationConnectionsCheckpointResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRolePermissionsCheckpointResponse, ListRoleUsersResponse, ListRolesResponse, ListRolloutsParams, ListRolloutsResult, ListSesssionsResponse, ListTenantMemberRequestsParams, ListTenantMemberRequestsResult, ListTenantOperationEventsResult, ListTenantOperationRowsParams, ListTenantOperationRowsResult, ListTenantOperationsParams, ListTenantOperationsResult, ListUserPermissionsCheckpointResponse, ListUserRolesCheckpointResponse, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, OutboxEventInsert, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptPartialInsertionPoint, PromptPartials, PromptPartialsAdapter, PromptPartialsEntry, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokenListParams, RefreshTokenRetentionCohort, RefreshTokenRetentionParams, RefreshTokenRetentionResponse, RefreshTokenUpdate, RefreshTokensAdapter, RequestAuth, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, Rollout, RolloutInsert, RolloutKind, RolloutStatus, RolloutUpdate, RolloutsAdapter, RouteMatch, RouterNode, RuntimeComponent, ScimConfiguration, ScimConfigurationInsert, ScimConfigurationsAdapter, ScimExternalId, ScimExternalIdInsert, ScimExternalIdsAdapter, ScimMappingEntry, ScimToken, ScimTokenInsert, ScimTokensAdapter, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionRetentionCohort, SessionRetentionParams, SessionRetentionRawRow, SessionRetentionResponse, SessionRetentionWindow, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantMemberRequest, TenantMemberRequestInsert, TenantMemberRequestKind, TenantMemberRequestStatus, TenantMemberRequestUpdate, TenantMemberRequestsAdapter, TenantOperation, TenantOperationEngine, TenantOperationEvent, TenantOperationEventInsert, TenantOperationEventOutcome, TenantOperationEventsAdapter, TenantOperationInsert, TenantOperationKind, TenantOperationRow, TenantOperationRowCounts, TenantOperationRowInsert, TenantOperationRowOutcome, TenantOperationRowStatus, TenantOperationRowsAdapter, TenantOperationStatus, TenantOperationUpdate, TenantOperationsAdapter, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenExchangeJwtAlgorithm, TokenExchangeJwtVerification, TokenExchangeProfile, TokenExchangeProfileInsert, TokenExchangeProfileUpdate, TokenExchangeProfilesAdapter, TokenExchangeUserMapping, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UrlField, User, UserActivity, UserActivityAdapter, UserActivityUpdate, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, UsernameLengthBounds, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent, WriteOptions };