@authhero/kysely-adapter 10.129.0 → 10.131.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/dist/kysely-adapter.cjs +15 -15
  2. package/dist/kysely-adapter.d.ts +253 -39
  3. package/dist/kysely-adapter.mjs +2262 -2052
  4. package/package.json +2 -2
package/dist/kysely-adapter.d.ts CHANGED
@@ -353,6 +353,8 @@ declare const auditEventInsertSchema: z.ZodObject<{
353
353
  connection: z.ZodOptional<z.ZodString>;
354
354
  strategy: z.ZodOptional<z.ZodString>;
355
355
  strategy_type: z.ZodOptional<z.ZodString>;
356
+ audience: z.ZodOptional<z.ZodString>;
357
+ scope: z.ZodOptional<z.ZodString>;
356
358
  location: z.ZodOptional<z.ZodObject<{
357
359
  country_code: z.ZodString;
358
360
  city_name: z.ZodString;
@@ -434,6 +436,8 @@ declare const auditEventInsertSchema: z.ZodObject<{
434
436
  connection?: string | undefined;
435
437
  strategy?: string | undefined;
436
438
  strategy_type?: string | undefined;
439
+ audience?: string | undefined;
440
+ scope?: string | undefined;
437
441
  location?: {
438
442
  country_code: string;
439
443
  city_name: string;
@@ -491,6 +495,8 @@ declare const auditEventInsertSchema: z.ZodObject<{
491
495
  connection?: string | undefined;
492
496
  strategy?: string | undefined;
493
497
  strategy_type?: string | undefined;
498
+ audience?: string | undefined;
499
+ scope?: string | undefined;
494
500
  location?: {
495
501
  country_code: string;
496
502
  city_name: string;
@@ -621,6 +627,8 @@ declare const auditEventSchema: z.ZodObject<{
621
627
  connection: z.ZodOptional<z.ZodString>;
622
628
  strategy: z.ZodOptional<z.ZodString>;
623
629
  strategy_type: z.ZodOptional<z.ZodString>;
630
+ audience: z.ZodOptional<z.ZodString>;
631
+ scope: z.ZodOptional<z.ZodString>;
624
632
  location: z.ZodOptional<z.ZodObject<{
625
633
  country_code: z.ZodString;
626
634
  city_name: z.ZodString;
@@ -705,6 +713,8 @@ declare const auditEventSchema: z.ZodObject<{
705
713
  connection?: string | undefined;
706
714
  strategy?: string | undefined;
707
715
  strategy_type?: string | undefined;
716
+ audience?: string | undefined;
717
+ scope?: string | undefined;
708
718
  location?: {
709
719
  country_code: string;
710
720
  city_name: string;
@@ -763,6 +773,8 @@ declare const auditEventSchema: z.ZodObject<{
763
773
  connection?: string | undefined;
764
774
  strategy?: string | undefined;
765
775
  strategy_type?: string | undefined;
776
+ audience?: string | undefined;
777
+ scope?: string | undefined;
766
778
  location?: {
767
779
  country_code: string;
768
780
  city_name: string;
@@ -1862,6 +1874,13 @@ declare const clientInsertSchema: z.ZodObject<{
1862
1874
  ]>>;
1863
1875
  par_request_expiry: z.ZodOptional<z.ZodNumber>;
1864
1876
  token_quota: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
1877
+ owner_user_id: z.ZodOptional<z.ZodString>;
1878
+ registration_type: z.ZodOptional<z.ZodEnum<[
1879
+ "manual",
1880
+ "open_dcr",
1881
+ "iat_dcr"
1882
+ ]>>;
1883
+ registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
1865
1884
  }, "strip", z.ZodTypeAny, {
1866
1885
  name: string;
1867
1886
  client_id: string;
@@ -1911,6 +1930,9 @@ declare const clientInsertSchema: z.ZodObject<{
1911
1930
  compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
1912
1931
  par_request_expiry?: number | undefined;
1913
1932
  token_quota?: Record<string, any> | undefined;
1933
+ owner_user_id?: string | undefined;
1934
+ registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
1935
+ registration_metadata?: Record<string, any> | undefined;
1914
1936
  }, {
1915
1937
  name: string;
1916
1938
  client_id: string;
@@ -1960,6 +1982,9 @@ declare const clientInsertSchema: z.ZodObject<{
1960
1982
  compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
1961
1983
  par_request_expiry?: number | undefined;
1962
1984
  token_quota?: Record<string, any> | undefined;
1985
+ owner_user_id?: string | undefined;
1986
+ registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
1987
+ registration_metadata?: Record<string, any> | undefined;
1963
1988
  }>;
1964
1989
  export type ClientInsert = z.input<typeof clientInsertSchema>;
1965
1990
  declare const clientSchema: z.ZodObject<{
@@ -2055,6 +2080,13 @@ declare const clientSchema: z.ZodObject<{
2055
2080
  ]>>;
2056
2081
  par_request_expiry: z.ZodOptional<z.ZodNumber>;
2057
2082
  token_quota: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
2083
+ owner_user_id: z.ZodOptional<z.ZodString>;
2084
+ registration_type: z.ZodOptional<z.ZodEnum<[
2085
+ "manual",
2086
+ "open_dcr",
2087
+ "iat_dcr"
2088
+ ]>>;
2089
+ registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
2058
2090
  created_at: z.ZodString;
2059
2091
  updated_at: z.ZodString;
2060
2092
  }, "strip", z.ZodTypeAny, {
@@ -2108,6 +2140,9 @@ declare const clientSchema: z.ZodObject<{
2108
2140
  compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
2109
2141
  par_request_expiry?: number | undefined;
2110
2142
  token_quota?: Record<string, any> | undefined;
2143
+ owner_user_id?: string | undefined;
2144
+ registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
2145
+ registration_metadata?: Record<string, any> | undefined;
2111
2146
  }, {
2112
2147
  created_at: string;
2113
2148
  updated_at: string;
@@ -2159,6 +2194,9 @@ declare const clientSchema: z.ZodObject<{
2159
2194
  compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
2160
2195
  par_request_expiry?: number | undefined;
2161
2196
  token_quota?: Record<string, any> | undefined;
2197
+ owner_user_id?: string | undefined;
2198
+ registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
2199
+ registration_metadata?: Record<string, any> | undefined;
2162
2200
  }>;
2163
2201
  export type Client = z.infer<typeof clientSchema>;
2164
2202
  declare const clientGrantInsertSchema: z.ZodObject<{
@@ -2180,8 +2218,8 @@ declare const clientGrantInsertSchema: z.ZodObject<{
2180
2218
  }, "strip", z.ZodTypeAny, {
2181
2219
  client_id: string;
2182
2220
  audience: string;
2183
- organization_usage?: "deny" | "allow" | "require" | undefined;
2184
2221
  scope?: string[] | undefined;
2222
+ organization_usage?: "deny" | "allow" | "require" | undefined;
2185
2223
  allow_any_organization?: boolean | undefined;
2186
2224
  is_system?: boolean | undefined;
2187
2225
  subject_type?: "user" | "client" | undefined;
@@ -2189,8 +2227,8 @@ declare const clientGrantInsertSchema: z.ZodObject<{
2189
2227
  }, {
2190
2228
  client_id: string;
2191
2229
  audience: string;
2192
- organization_usage?: "deny" | "allow" | "require" | undefined;
2193
2230
  scope?: string[] | undefined;
2231
+ organization_usage?: "deny" | "allow" | "require" | undefined;
2194
2232
  allow_any_organization?: boolean | undefined;
2195
2233
  is_system?: boolean | undefined;
2196
2234
  subject_type?: "user" | "client" | undefined;
@@ -2222,8 +2260,8 @@ declare const clientGrantSchema: z.ZodObject<{
2222
2260
  audience: string;
2223
2261
  created_at?: string | undefined;
2224
2262
  updated_at?: string | undefined;
2225
- organization_usage?: "deny" | "allow" | "require" | undefined;
2226
2263
  scope?: string[] | undefined;
2264
+ organization_usage?: "deny" | "allow" | "require" | undefined;
2227
2265
  allow_any_organization?: boolean | undefined;
2228
2266
  is_system?: boolean | undefined;
2229
2267
  subject_type?: "user" | "client" | undefined;
@@ -2234,14 +2272,87 @@ declare const clientGrantSchema: z.ZodObject<{
2234
2272
  audience: string;
2235
2273
  created_at?: string | undefined;
2236
2274
  updated_at?: string | undefined;
2237
- organization_usage?: "deny" | "allow" | "require" | undefined;
2238
2275
  scope?: string[] | undefined;
2276
+ organization_usage?: "deny" | "allow" | "require" | undefined;
2239
2277
  allow_any_organization?: boolean | undefined;
2240
2278
  is_system?: boolean | undefined;
2241
2279
  subject_type?: "user" | "client" | undefined;
2242
2280
  authorization_details_types?: string[] | undefined;
2243
2281
  }>;
2244
2282
  export type ClientGrant = z.infer<typeof clientGrantSchema>;
2283
+ declare const clientRegistrationTokenInsertSchema: z.ZodObject<{
2284
+ id: z.ZodString;
2285
+ token_hash: z.ZodString;
2286
+ type: z.ZodEnum<[
2287
+ "iat",
2288
+ "rat"
2289
+ ]>;
2290
+ client_id: z.ZodOptional<z.ZodString>;
2291
+ sub: z.ZodOptional<z.ZodString>;
2292
+ constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
2293
+ single_use: z.ZodDefault<z.ZodBoolean>;
2294
+ expires_at: z.ZodOptional<z.ZodString>;
2295
+ }, "strip", z.ZodTypeAny, {
2296
+ type: "iat" | "rat";
2297
+ id: string;
2298
+ token_hash: string;
2299
+ single_use: boolean;
2300
+ client_id?: string | undefined;
2301
+ sub?: string | undefined;
2302
+ constraints?: Record<string, unknown> | undefined;
2303
+ expires_at?: string | undefined;
2304
+ }, {
2305
+ type: "iat" | "rat";
2306
+ id: string;
2307
+ token_hash: string;
2308
+ client_id?: string | undefined;
2309
+ sub?: string | undefined;
2310
+ constraints?: Record<string, unknown> | undefined;
2311
+ single_use?: boolean | undefined;
2312
+ expires_at?: string | undefined;
2313
+ }>;
2314
+ export type ClientRegistrationTokenInsert = z.infer<typeof clientRegistrationTokenInsertSchema>;
2315
+ declare const clientRegistrationTokenSchema: z.ZodObject<{
2316
+ id: z.ZodString;
2317
+ token_hash: z.ZodString;
2318
+ type: z.ZodEnum<[
2319
+ "iat",
2320
+ "rat"
2321
+ ]>;
2322
+ client_id: z.ZodOptional<z.ZodString>;
2323
+ sub: z.ZodOptional<z.ZodString>;
2324
+ constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
2325
+ single_use: z.ZodDefault<z.ZodBoolean>;
2326
+ expires_at: z.ZodOptional<z.ZodString>;
2327
+ created_at: z.ZodString;
2328
+ used_at: z.ZodOptional<z.ZodString>;
2329
+ revoked_at: z.ZodOptional<z.ZodString>;
2330
+ }, "strip", z.ZodTypeAny, {
2331
+ created_at: string;
2332
+ type: "iat" | "rat";
2333
+ id: string;
2334
+ token_hash: string;
2335
+ single_use: boolean;
2336
+ client_id?: string | undefined;
2337
+ sub?: string | undefined;
2338
+ constraints?: Record<string, unknown> | undefined;
2339
+ expires_at?: string | undefined;
2340
+ used_at?: string | undefined;
2341
+ revoked_at?: string | undefined;
2342
+ }, {
2343
+ created_at: string;
2344
+ type: "iat" | "rat";
2345
+ id: string;
2346
+ token_hash: string;
2347
+ client_id?: string | undefined;
2348
+ sub?: string | undefined;
2349
+ constraints?: Record<string, unknown> | undefined;
2350
+ single_use?: boolean | undefined;
2351
+ expires_at?: string | undefined;
2352
+ used_at?: string | undefined;
2353
+ revoked_at?: string | undefined;
2354
+ }>;
2355
+ export type ClientRegistrationToken = z.infer<typeof clientRegistrationTokenSchema>;
2245
2356
  declare enum AuthorizationResponseType {
2246
2357
  TOKEN = "token",
2247
2358
  ID_TOKEN = "id_token",
@@ -2376,12 +2487,13 @@ declare const codeInsertSchema: z.ZodObject<{
2376
2487
  used_at: z.ZodOptional<z.ZodString>;
2377
2488
  user_id: z.ZodOptional<z.ZodString>;
2378
2489
  }, "strip", z.ZodTypeAny, {
2490
+ expires_at: string;
2379
2491
  code_id: string;
2380
2492
  login_id: string;
2381
2493
  code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
2382
- expires_at: string;
2383
2494
  connection_id?: string | undefined;
2384
2495
  user_id?: string | undefined;
2496
+ used_at?: string | undefined;
2385
2497
  redirect_uri?: string | undefined;
2386
2498
  state?: string | undefined;
2387
2499
  nonce?: string | undefined;
@@ -2389,14 +2501,14 @@ declare const codeInsertSchema: z.ZodObject<{
2389
2501
  code_challenge?: string | undefined;
2390
2502
  otp?: string | undefined;
2391
2503
  code_verifier?: string | undefined;
2392
- used_at?: string | undefined;
2393
2504
  }, {
2505
+ expires_at: string;
2394
2506
  code_id: string;
2395
2507
  login_id: string;
2396
2508
  code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
2397
- expires_at: string;
2398
2509
  connection_id?: string | undefined;
2399
2510
  user_id?: string | undefined;
2511
+ used_at?: string | undefined;
2400
2512
  redirect_uri?: string | undefined;
2401
2513
  state?: string | undefined;
2402
2514
  nonce?: string | undefined;
@@ -2404,7 +2516,6 @@ declare const codeInsertSchema: z.ZodObject<{
2404
2516
  code_challenge?: string | undefined;
2405
2517
  otp?: string | undefined;
2406
2518
  code_verifier?: string | undefined;
2407
- used_at?: string | undefined;
2408
2519
  }>;
2409
2520
  export type CodeInsert = z.infer<typeof codeInsertSchema>;
2410
2521
  declare const codeSchema: z.ZodObject<{
@@ -2436,12 +2547,13 @@ declare const codeSchema: z.ZodObject<{
2436
2547
  user_id: z.ZodOptional<z.ZodString>;
2437
2548
  }, "strip", z.ZodTypeAny, {
2438
2549
  created_at: string;
2550
+ expires_at: string;
2439
2551
  code_id: string;
2440
2552
  login_id: string;
2441
2553
  code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
2442
- expires_at: string;
2443
2554
  connection_id?: string | undefined;
2444
2555
  user_id?: string | undefined;
2556
+ used_at?: string | undefined;
2445
2557
  redirect_uri?: string | undefined;
2446
2558
  state?: string | undefined;
2447
2559
  nonce?: string | undefined;
@@ -2449,15 +2561,15 @@ declare const codeSchema: z.ZodObject<{
2449
2561
  code_challenge?: string | undefined;
2450
2562
  otp?: string | undefined;
2451
2563
  code_verifier?: string | undefined;
2452
- used_at?: string | undefined;
2453
2564
  }, {
2454
2565
  created_at: string;
2566
+ expires_at: string;
2455
2567
  code_id: string;
2456
2568
  login_id: string;
2457
2569
  code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
2458
- expires_at: string;
2459
2570
  connection_id?: string | undefined;
2460
2571
  user_id?: string | undefined;
2572
+ used_at?: string | undefined;
2461
2573
  redirect_uri?: string | undefined;
2462
2574
  state?: string | undefined;
2463
2575
  nonce?: string | undefined;
@@ -2465,7 +2577,6 @@ declare const codeSchema: z.ZodObject<{
2465
2577
  code_challenge?: string | undefined;
2466
2578
  otp?: string | undefined;
2467
2579
  code_verifier?: string | undefined;
2468
- used_at?: string | undefined;
2469
2580
  }>;
2470
2581
  export type Code = z.infer<typeof codeSchema>;
2471
2582
  declare const connectionInsertSchema: z.ZodObject<{
@@ -2901,9 +3012,9 @@ declare const connectionInsertSchema: z.ZodObject<{
2901
3012
  } | undefined;
2902
3013
  } | undefined;
2903
3014
  client_id?: string | undefined;
3015
+ scope?: string | undefined;
2904
3016
  provider?: string | undefined;
2905
3017
  client_secret?: string | undefined;
2906
- scope?: string | undefined;
2907
3018
  kid?: string | undefined;
2908
3019
  team_id?: string | undefined;
2909
3020
  realms?: string | undefined;
@@ -3004,9 +3115,9 @@ declare const connectionInsertSchema: z.ZodObject<{
3004
3115
  } | undefined;
3005
3116
  } | undefined;
3006
3117
  client_id?: string | undefined;
3118
+ scope?: string | undefined;
3007
3119
  provider?: string | undefined;
3008
3120
  client_secret?: string | undefined;
3009
- scope?: string | undefined;
3010
3121
  kid?: string | undefined;
3011
3122
  team_id?: string | undefined;
3012
3123
  realms?: string | undefined;
@@ -3116,9 +3227,9 @@ declare const connectionInsertSchema: z.ZodObject<{
3116
3227
  } | undefined;
3117
3228
  } | undefined;
3118
3229
  client_id?: string | undefined;
3230
+ scope?: string | undefined;
3119
3231
  provider?: string | undefined;
3120
3232
  client_secret?: string | undefined;
3121
- scope?: string | undefined;
3122
3233
  kid?: string | undefined;
3123
3234
  team_id?: string | undefined;
3124
3235
  realms?: string | undefined;
@@ -3234,9 +3345,9 @@ declare const connectionInsertSchema: z.ZodObject<{
3234
3345
  } | undefined;
3235
3346
  } | undefined;
3236
3347
  client_id?: string | undefined;
3348
+ scope?: string | undefined;
3237
3349
  provider?: string | undefined;
3238
3350
  client_secret?: string | undefined;
3239
- scope?: string | undefined;
3240
3351
  kid?: string | undefined;
3241
3352
  team_id?: string | undefined;
3242
3353
  realms?: string | undefined;
@@ -3777,9 +3888,9 @@ declare const connectionSchema: z.ZodObject<{
3777
3888
  } | undefined;
3778
3889
  } | undefined;
3779
3890
  client_id?: string | undefined;
3891
+ scope?: string | undefined;
3780
3892
  provider?: string | undefined;
3781
3893
  client_secret?: string | undefined;
3782
- scope?: string | undefined;
3783
3894
  kid?: string | undefined;
3784
3895
  team_id?: string | undefined;
3785
3896
  realms?: string | undefined;
@@ -3880,9 +3991,9 @@ declare const connectionSchema: z.ZodObject<{
3880
3991
  } | undefined;
3881
3992
  } | undefined;
3882
3993
  client_id?: string | undefined;
3994
+ scope?: string | undefined;
3883
3995
  provider?: string | undefined;
3884
3996
  client_secret?: string | undefined;
3885
- scope?: string | undefined;
3886
3997
  kid?: string | undefined;
3887
3998
  team_id?: string | undefined;
3888
3999
  realms?: string | undefined;
@@ -3994,9 +4105,9 @@ declare const connectionSchema: z.ZodObject<{
3994
4105
  } | undefined;
3995
4106
  } | undefined;
3996
4107
  client_id?: string | undefined;
4108
+ scope?: string | undefined;
3997
4109
  provider?: string | undefined;
3998
4110
  client_secret?: string | undefined;
3999
- scope?: string | undefined;
4000
4111
  kid?: string | undefined;
4001
4112
  team_id?: string | undefined;
4002
4113
  realms?: string | undefined;
@@ -4114,9 +4225,9 @@ declare const connectionSchema: z.ZodObject<{
4114
4225
  } | undefined;
4115
4226
  } | undefined;
4116
4227
  client_id?: string | undefined;
4228
+ scope?: string | undefined;
4117
4229
  provider?: string | undefined;
4118
4230
  client_secret?: string | undefined;
4119
- scope?: string | undefined;
4120
4231
  kid?: string | undefined;
4121
4232
  team_id?: string | undefined;
4122
4233
  realms?: string | undefined;
@@ -15701,9 +15812,9 @@ declare const loginSessionInsertSchema: z.ZodObject<{
15701
15812
  vendor_id: z.ZodOptional<z.ZodString>;
15702
15813
  }, "strip", z.ZodTypeAny, {
15703
15814
  client_id: string;
15704
- username?: string | undefined;
15705
15815
  audience?: string | undefined;
15706
15816
  scope?: string | undefined;
15817
+ username?: string | undefined;
15707
15818
  act_as?: string | undefined;
15708
15819
  response_type?: AuthorizationResponseType | undefined;
15709
15820
  response_mode?: AuthorizationResponseMode | undefined;
@@ -15720,9 +15831,9 @@ declare const loginSessionInsertSchema: z.ZodObject<{
15720
15831
  vendor_id?: string | undefined;
15721
15832
  }, {
15722
15833
  client_id: string;
15723
- username?: string | undefined;
15724
15834
  audience?: string | undefined;
15725
15835
  scope?: string | undefined;
15836
+ username?: string | undefined;
15726
15837
  act_as?: string | undefined;
15727
15838
  response_type?: AuthorizationResponseType | undefined;
15728
15839
  response_mode?: AuthorizationResponseMode | undefined;
@@ -15761,14 +15872,14 @@ declare const loginSessionInsertSchema: z.ZodObject<{
15761
15872
  }>>;
15762
15873
  authenticated_at: z.ZodOptional<z.ZodString>;
15763
15874
  }, "strip", z.ZodTypeAny, {
15764
- state: LoginSessionState;
15765
15875
  expires_at: string;
15876
+ state: LoginSessionState;
15766
15877
  csrf_token: string;
15767
15878
  authParams: {
15768
15879
  client_id: string;
15769
- username?: string | undefined;
15770
15880
  audience?: string | undefined;
15771
15881
  scope?: string | undefined;
15882
+ username?: string | undefined;
15772
15883
  act_as?: string | undefined;
15773
15884
  response_type?: AuthorizationResponseType | undefined;
15774
15885
  response_mode?: AuthorizationResponseMode | undefined;
@@ -15804,9 +15915,9 @@ declare const loginSessionInsertSchema: z.ZodObject<{
15804
15915
  csrf_token: string;
15805
15916
  authParams: {
15806
15917
  client_id: string;
15807
- username?: string | undefined;
15808
15918
  audience?: string | undefined;
15809
15919
  scope?: string | undefined;
15920
+ username?: string | undefined;
15810
15921
  act_as?: string | undefined;
15811
15922
  response_type?: AuthorizationResponseType | undefined;
15812
15923
  response_mode?: AuthorizationResponseMode | undefined;
@@ -15867,9 +15978,9 @@ declare const loginSessionSchema: z.ZodObject<{
15867
15978
  vendor_id: z.ZodOptional<z.ZodString>;
15868
15979
  }, "strip", z.ZodTypeAny, {
15869
15980
  client_id: string;
15870
- username?: string | undefined;
15871
15981
  audience?: string | undefined;
15872
15982
  scope?: string | undefined;
15983
+ username?: string | undefined;
15873
15984
  act_as?: string | undefined;
15874
15985
  response_type?: AuthorizationResponseType | undefined;
15875
15986
  response_mode?: AuthorizationResponseMode | undefined;
@@ -15886,9 +15997,9 @@ declare const loginSessionSchema: z.ZodObject<{
15886
15997
  vendor_id?: string | undefined;
15887
15998
  }, {
15888
15999
  client_id: string;
15889
- username?: string | undefined;
15890
16000
  audience?: string | undefined;
15891
16001
  scope?: string | undefined;
16002
+ username?: string | undefined;
15892
16003
  act_as?: string | undefined;
15893
16004
  response_type?: AuthorizationResponseType | undefined;
15894
16005
  response_mode?: AuthorizationResponseMode | undefined;
@@ -15930,14 +16041,14 @@ declare const loginSessionSchema: z.ZodObject<{
15930
16041
  created_at: string;
15931
16042
  updated_at: string;
15932
16043
  id: string;
15933
- state: LoginSessionState;
15934
16044
  expires_at: string;
16045
+ state: LoginSessionState;
15935
16046
  csrf_token: string;
15936
16047
  authParams: {
15937
16048
  client_id: string;
15938
- username?: string | undefined;
15939
16049
  audience?: string | undefined;
15940
16050
  scope?: string | undefined;
16051
+ username?: string | undefined;
15941
16052
  act_as?: string | undefined;
15942
16053
  response_type?: AuthorizationResponseType | undefined;
15943
16054
  response_mode?: AuthorizationResponseMode | undefined;
@@ -15976,9 +16087,9 @@ declare const loginSessionSchema: z.ZodObject<{
15976
16087
  csrf_token: string;
15977
16088
  authParams: {
15978
16089
  client_id: string;
15979
- username?: string | undefined;
15980
16090
  audience?: string | undefined;
15981
16091
  scope?: string | undefined;
16092
+ username?: string | undefined;
15982
16093
  act_as?: string | undefined;
15983
16094
  response_type?: AuthorizationResponseType | undefined;
15984
16095
  response_mode?: AuthorizationResponseMode | undefined;
@@ -16088,6 +16199,8 @@ declare const logInsertSchema: z.ZodObject<{
16088
16199
  connection?: string | undefined;
16089
16200
  strategy?: string | undefined;
16090
16201
  strategy_type?: string | undefined;
16202
+ audience?: string | undefined;
16203
+ scope?: string | undefined;
16091
16204
  auth0_client?: {
16092
16205
  version: string;
16093
16206
  name: string;
@@ -16098,8 +16211,6 @@ declare const logInsertSchema: z.ZodObject<{
16098
16211
  hostname?: string | undefined;
16099
16212
  connection_id?: string | undefined;
16100
16213
  user_id?: string | undefined;
16101
- audience?: string | undefined;
16102
- scope?: string | undefined;
16103
16214
  details?: any;
16104
16215
  user_name?: string | undefined;
16105
16216
  client_name?: string | undefined;
@@ -16123,6 +16234,8 @@ declare const logInsertSchema: z.ZodObject<{
16123
16234
  connection?: string | undefined;
16124
16235
  strategy?: string | undefined;
16125
16236
  strategy_type?: string | undefined;
16237
+ audience?: string | undefined;
16238
+ scope?: string | undefined;
16126
16239
  auth0_client?: {
16127
16240
  version: string;
16128
16241
  name: string;
@@ -16133,8 +16246,6 @@ declare const logInsertSchema: z.ZodObject<{
16133
16246
  hostname?: string | undefined;
16134
16247
  connection_id?: string | undefined;
16135
16248
  user_id?: string | undefined;
16136
- audience?: string | undefined;
16137
- scope?: string | undefined;
16138
16249
  details?: any;
16139
16250
  user_name?: string | undefined;
16140
16251
  client_name?: string | undefined;
@@ -16226,6 +16337,8 @@ declare const logSchema: z.ZodObject<{
16226
16337
  connection?: string | undefined;
16227
16338
  strategy?: string | undefined;
16228
16339
  strategy_type?: string | undefined;
16340
+ audience?: string | undefined;
16341
+ scope?: string | undefined;
16229
16342
  auth0_client?: {
16230
16343
  version: string;
16231
16344
  name: string;
@@ -16236,8 +16349,6 @@ declare const logSchema: z.ZodObject<{
16236
16349
  hostname?: string | undefined;
16237
16350
  connection_id?: string | undefined;
16238
16351
  user_id?: string | undefined;
16239
- audience?: string | undefined;
16240
- scope?: string | undefined;
16241
16352
  details?: any;
16242
16353
  user_name?: string | undefined;
16243
16354
  client_name?: string | undefined;
@@ -16261,6 +16372,8 @@ declare const logSchema: z.ZodObject<{
16261
16372
  connection?: string | undefined;
16262
16373
  strategy?: string | undefined;
16263
16374
  strategy_type?: string | undefined;
16375
+ audience?: string | undefined;
16376
+ scope?: string | undefined;
16264
16377
  auth0_client?: {
16265
16378
  version: string;
16266
16379
  name: string;
@@ -16271,8 +16384,6 @@ declare const logSchema: z.ZodObject<{
16271
16384
  hostname?: string | undefined;
16272
16385
  connection_id?: string | undefined;
16273
16386
  user_id?: string | undefined;
16274
- audience?: string | undefined;
16275
- scope?: string | undefined;
16276
16387
  details?: any;
16277
16388
  user_name?: string | undefined;
16278
16389
  client_name?: string | undefined;
@@ -16593,6 +16704,9 @@ declare const tenantSchema: z.ZodObject<{
16593
16704
  enable_client_connections: z.ZodOptional<z.ZodBoolean>;
16594
16705
  enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
16595
16706
  enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
16707
+ dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
16708
+ dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
16709
+ dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
16596
16710
  enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
16597
16711
  enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
16598
16712
  enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
@@ -16627,6 +16741,9 @@ declare const tenantSchema: z.ZodObject<{
16627
16741
  enable_client_connections?: boolean | undefined;
16628
16742
  enable_custom_domain_in_emails?: boolean | undefined;
16629
16743
  enable_dynamic_client_registration?: boolean | undefined;
16744
+ dcr_require_initial_access_token?: boolean | undefined;
16745
+ dcr_allowed_grant_types?: string[] | undefined;
16746
+ dcr_allowed_integration_types?: string[] | undefined;
16630
16747
  enable_idtoken_api2?: boolean | undefined;
16631
16748
  enable_legacy_logs_search_v2?: boolean | undefined;
16632
16749
  enable_legacy_profile?: boolean | undefined;
@@ -16661,6 +16778,9 @@ declare const tenantSchema: z.ZodObject<{
16661
16778
  enable_client_connections?: boolean | undefined;
16662
16779
  enable_custom_domain_in_emails?: boolean | undefined;
16663
16780
  enable_dynamic_client_registration?: boolean | undefined;
16781
+ dcr_require_initial_access_token?: boolean | undefined;
16782
+ dcr_allowed_grant_types?: string[] | undefined;
16783
+ dcr_allowed_integration_types?: string[] | undefined;
16664
16784
  enable_idtoken_api2?: boolean | undefined;
16665
16785
  enable_legacy_logs_search_v2?: boolean | undefined;
16666
16786
  enable_legacy_profile?: boolean | undefined;
@@ -16940,6 +17060,9 @@ declare const tenantSchema: z.ZodObject<{
16940
17060
  enable_client_connections?: boolean | undefined;
16941
17061
  enable_custom_domain_in_emails?: boolean | undefined;
16942
17062
  enable_dynamic_client_registration?: boolean | undefined;
17063
+ dcr_require_initial_access_token?: boolean | undefined;
17064
+ dcr_allowed_grant_types?: string[] | undefined;
17065
+ dcr_allowed_integration_types?: string[] | undefined;
16943
17066
  enable_idtoken_api2?: boolean | undefined;
16944
17067
  enable_legacy_logs_search_v2?: boolean | undefined;
16945
17068
  enable_legacy_profile?: boolean | undefined;
@@ -17066,6 +17189,9 @@ declare const tenantSchema: z.ZodObject<{
17066
17189
  enable_client_connections?: boolean | undefined;
17067
17190
  enable_custom_domain_in_emails?: boolean | undefined;
17068
17191
  enable_dynamic_client_registration?: boolean | undefined;
17192
+ dcr_require_initial_access_token?: boolean | undefined;
17193
+ dcr_allowed_grant_types?: string[] | undefined;
17194
+ dcr_allowed_integration_types?: string[] | undefined;
17069
17195
  enable_idtoken_api2?: boolean | undefined;
17070
17196
  enable_legacy_logs_search_v2?: boolean | undefined;
17071
17197
  enable_legacy_profile?: boolean | undefined;
@@ -19294,6 +19420,16 @@ export interface ClientGrantsAdapter {
19294
19420
  update(tenant_id: string, id: string, clientGrant: Partial<ClientGrantInsert>): Promise<boolean>;
19295
19421
  remove(tenant_id: string, id: string): Promise<boolean>;
19296
19422
  }
19423
+ export interface ClientRegistrationTokensAdapter {
19424
+ create: (tenant_id: string, token: ClientRegistrationTokenInsert) => Promise<ClientRegistrationToken>;
19425
+ get: (tenant_id: string, id: string) => Promise<ClientRegistrationToken | null>;
19426
+ getByHash: (tenant_id: string, token_hash: string) => Promise<ClientRegistrationToken | null>;
19427
+ listByClient: (tenant_id: string, client_id: string) => Promise<ClientRegistrationToken[]>;
19428
+ markUsed: (tenant_id: string, id: string, used_at: string) => Promise<boolean>;
19429
+ revoke: (tenant_id: string, id: string, revoked_at: string) => Promise<boolean>;
19430
+ revokeByClient: (tenant_id: string, client_id: string, revoked_at: string) => Promise<number>;
19431
+ remove: (tenant_id: string, id: string) => Promise<boolean>;
19432
+ }
19297
19433
  export interface ListCodesResponse extends Totals {
19298
19434
  codes: Code[];
19299
19435
  }
@@ -19441,11 +19577,23 @@ export interface EmailProvidersAdapter {
19441
19577
  export interface ListRefreshTokenResponse extends Totals {
19442
19578
  refresh_tokens: RefreshToken[];
19443
19579
  }
19580
+ export interface UpdateRefreshTokenOptions {
19581
+ /**
19582
+ * When provided, the adapter also extends the parent login_session's
19583
+ * `expires_at` to `expires_at` (only if the current value is smaller).
19584
+ * The caller is expected to compute the new expiry so the adapter can
19585
+ * avoid a read-before-write and parallelise the two UPDATEs.
19586
+ */
19587
+ loginSessionBump?: {
19588
+ login_id: string;
19589
+ expires_at: string;
19590
+ };
19591
+ }
19444
19592
  export interface RefreshTokensAdapter {
19445
19593
  create: (tenant_id: string, refresh_token: RefreshTokenInsert) => Promise<RefreshToken>;
19446
19594
  get: (tenant_id: string, id: string) => Promise<RefreshToken | null>;
19447
19595
  list(tenant_id: string, params?: ListParams): Promise<ListRefreshTokenResponse>;
19448
- update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>) => Promise<boolean>;
19596
+ update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
19449
19597
  remove: (tenant_id: string, id: string) => Promise<boolean>;
19450
19598
  revokeByLoginSession: (tenant_id: string, login_session_id: string, revoked_at: string) => Promise<number>;
19451
19599
  }
@@ -19701,6 +19849,7 @@ export interface DataAdapters {
19701
19849
  clients: ClientsAdapter;
19702
19850
  clientConnections: ClientConnectionsAdapter;
19703
19851
  clientGrants: ClientGrantsAdapter;
19852
+ clientRegistrationTokens?: ClientRegistrationTokensAdapter;
19704
19853
  codes: CodesAdapter;
19705
19854
  connections: ConnectionsAdapter;
19706
19855
  customDomains: CustomDomainsAdapter;
@@ -20994,6 +21143,9 @@ declare const sqlTenantSchema: z.ZodObject<{
20994
21143
  enable_client_connections: z.ZodOptional<z.ZodBoolean>;
20995
21144
  enable_custom_domain_in_emails: z.ZodOptional<z.ZodBoolean>;
20996
21145
  enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
21146
+ dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
21147
+ dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
21148
+ dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
20997
21149
  enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
20998
21150
  enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
20999
21151
  enable_legacy_profile: z.ZodOptional<z.ZodBoolean>;
@@ -21028,6 +21180,9 @@ declare const sqlTenantSchema: z.ZodObject<{
21028
21180
  enable_client_connections?: boolean | undefined;
21029
21181
  enable_custom_domain_in_emails?: boolean | undefined;
21030
21182
  enable_dynamic_client_registration?: boolean | undefined;
21183
+ dcr_require_initial_access_token?: boolean | undefined;
21184
+ dcr_allowed_grant_types?: string[] | undefined;
21185
+ dcr_allowed_integration_types?: string[] | undefined;
21031
21186
  enable_idtoken_api2?: boolean | undefined;
21032
21187
  enable_legacy_logs_search_v2?: boolean | undefined;
21033
21188
  enable_legacy_profile?: boolean | undefined;
@@ -21062,6 +21217,9 @@ declare const sqlTenantSchema: z.ZodObject<{
21062
21217
  enable_client_connections?: boolean | undefined;
21063
21218
  enable_custom_domain_in_emails?: boolean | undefined;
21064
21219
  enable_dynamic_client_registration?: boolean | undefined;
21220
+ dcr_require_initial_access_token?: boolean | undefined;
21221
+ dcr_allowed_grant_types?: string[] | undefined;
21222
+ dcr_allowed_integration_types?: string[] | undefined;
21065
21223
  enable_idtoken_api2?: boolean | undefined;
21066
21224
  enable_legacy_logs_search_v2?: boolean | undefined;
21067
21225
  enable_legacy_profile?: boolean | undefined;
@@ -21337,6 +21495,9 @@ declare const sqlTenantSchema: z.ZodObject<{
21337
21495
  enable_client_connections?: boolean | undefined;
21338
21496
  enable_custom_domain_in_emails?: boolean | undefined;
21339
21497
  enable_dynamic_client_registration?: boolean | undefined;
21498
+ dcr_require_initial_access_token?: boolean | undefined;
21499
+ dcr_allowed_grant_types?: string[] | undefined;
21500
+ dcr_allowed_integration_types?: string[] | undefined;
21340
21501
  enable_idtoken_api2?: boolean | undefined;
21341
21502
  enable_legacy_logs_search_v2?: boolean | undefined;
21342
21503
  enable_legacy_profile?: boolean | undefined;
@@ -21463,6 +21624,9 @@ declare const sqlTenantSchema: z.ZodObject<{
21463
21624
  enable_client_connections?: boolean | undefined;
21464
21625
  enable_custom_domain_in_emails?: boolean | undefined;
21465
21626
  enable_dynamic_client_registration?: boolean | undefined;
21627
+ dcr_require_initial_access_token?: boolean | undefined;
21628
+ dcr_allowed_grant_types?: string[] | undefined;
21629
+ dcr_allowed_integration_types?: string[] | undefined;
21466
21630
  enable_idtoken_api2?: boolean | undefined;
21467
21631
  enable_legacy_logs_search_v2?: boolean | undefined;
21468
21632
  enable_legacy_profile?: boolean | undefined;
@@ -21787,6 +21951,9 @@ declare const sqlClientSchema: z.ZodObject<{
21787
21951
  client_authentication_methods: z.ZodString;
21788
21952
  signed_request_object: z.ZodString;
21789
21953
  token_quota: z.ZodString;
21954
+ owner_user_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
21955
+ registration_type: z.ZodNullable<z.ZodOptional<z.ZodString>>;
21956
+ registration_metadata: z.ZodNullable<z.ZodOptional<z.ZodString>>;
21790
21957
  client_id: z.ZodString;
21791
21958
  name: z.ZodString;
21792
21959
  description: z.ZodOptional<z.ZodString>;
@@ -21889,6 +22056,9 @@ declare const sqlClientSchema: z.ZodObject<{
21889
22056
  signed_request_object: string;
21890
22057
  description?: string | undefined;
21891
22058
  organization_usage?: "deny" | "allow" | "require" | undefined;
22059
+ owner_user_id?: string | null | undefined;
22060
+ registration_type?: string | null | undefined;
22061
+ registration_metadata?: string | null | undefined;
21892
22062
  client_secret?: string | undefined;
21893
22063
  app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
21894
22064
  logo_uri?: string | undefined;
@@ -21941,6 +22111,9 @@ declare const sqlClientSchema: z.ZodObject<{
21941
22111
  signed_request_object: string;
21942
22112
  description?: string | undefined;
21943
22113
  organization_usage?: "deny" | "allow" | "require" | undefined;
22114
+ owner_user_id?: string | null | undefined;
22115
+ registration_type?: string | null | undefined;
22116
+ registration_metadata?: string | null | undefined;
21944
22117
  client_secret?: string | undefined;
21945
22118
  app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
21946
22119
  logo_uri?: string | undefined;
@@ -21954,6 +22127,46 @@ declare const sqlClientSchema: z.ZodObject<{
21954
22127
  compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
21955
22128
  par_request_expiry?: number | undefined;
21956
22129
  }>;
22130
+ declare const sqlClientRegistrationTokenSchema: z.ZodObject<{
22131
+ id: z.ZodString;
22132
+ tenant_id: z.ZodString;
22133
+ token_hash: z.ZodString;
22134
+ type: z.ZodString;
22135
+ client_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
22136
+ sub: z.ZodNullable<z.ZodOptional<z.ZodString>>;
22137
+ constraints: z.ZodNullable<z.ZodOptional<z.ZodString>>;
22138
+ single_use: z.ZodNumber;
22139
+ used_at_ts: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
22140
+ expires_at_ts: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
22141
+ created_at_ts: z.ZodNumber;
22142
+ revoked_at_ts: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
22143
+ }, "strip", z.ZodTypeAny, {
22144
+ type: string;
22145
+ tenant_id: string;
22146
+ created_at_ts: number;
22147
+ id: string;
22148
+ token_hash: string;
22149
+ single_use: number;
22150
+ expires_at_ts?: number | null | undefined;
22151
+ used_at_ts?: number | null | undefined;
22152
+ revoked_at_ts?: number | null | undefined;
22153
+ client_id?: string | null | undefined;
22154
+ sub?: string | null | undefined;
22155
+ constraints?: string | null | undefined;
22156
+ }, {
22157
+ type: string;
22158
+ tenant_id: string;
22159
+ created_at_ts: number;
22160
+ id: string;
22161
+ token_hash: string;
22162
+ single_use: number;
22163
+ expires_at_ts?: number | null | undefined;
22164
+ used_at_ts?: number | null | undefined;
22165
+ revoked_at_ts?: number | null | undefined;
22166
+ client_id?: string | null | undefined;
22167
+ sub?: string | null | undefined;
22168
+ constraints?: string | null | undefined;
22169
+ }>;
21957
22170
  declare const sqlAuthenticationMethodSchema: z.ZodObject<{
21958
22171
  id: z.ZodString;
21959
22172
  tenant_id: z.ZodString;
@@ -22009,6 +22222,7 @@ export interface Database {
22009
22222
  branding: z.infer<typeof sqlBrandingSchema>;
22010
22223
  clients: z.infer<typeof sqlClientSchema>;
22011
22224
  client_grants: z.infer<typeof sqlClientGrantSchema>;
22225
+ client_registration_tokens: z.infer<typeof sqlClientRegistrationTokenSchema>;
22012
22226
  codes: Code & {
22013
22227
  tenant_id: string;
22014
22228
  };