@authhero/kysely-adapter 10.131.5 → 10.132.1

package/dist/kysely-adapter.d.ts

@@ -29,13 +29,13 @@ declare const actionInsertSchema: z.ZodObject<{
 	}>, "many">>;
 	secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
 		name: z.ZodString;
-		value: z.ZodString;
+		value: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}, {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}>, "many">>;
 }, "strip", z.ZodTypeAny, {
 	code: string;
@@ -50,8 +50,8 @@ declare const actionInsertSchema: z.ZodObject<{
 		name: string;
 	}[] | undefined;
 	secrets?: {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}[] | undefined;
 }, {
 	code: string;
@@ -66,8 +66,8 @@ declare const actionInsertSchema: z.ZodObject<{
 		name: string;
 	}[] | undefined;
 	secrets?: {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}[] | undefined;
 }>;
 export type ActionInsert = z.infer<typeof actionInsertSchema>;
@@ -97,13 +97,13 @@ declare const actionUpdateSchema: z.ZodObject<{
 	}>, "many">>>;
 	secrets: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodObject<{
 		name: z.ZodString;
-		value: z.ZodString;
+		value: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}, {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}>, "many">>>;
 } & {
 	status: z.ZodOptional<z.ZodEnum<[
@@ -125,8 +125,8 @@ declare const actionUpdateSchema: z.ZodObject<{
 		name: string;
 	}[] | undefined;
 	secrets?: {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}[] | undefined;
 	deployed_at?: string | undefined;
 }, {
@@ -143,8 +143,8 @@ declare const actionUpdateSchema: z.ZodObject<{
 		name: string;
 	}[] | undefined;
 	secrets?: {
-		value: string;
 		name: string;
+		value?: string | undefined;
 	}[] | undefined;
 	deployed_at?: string | undefined;
 }>;
@@ -1782,7 +1782,7 @@ declare const userSchema: z.ZodObject<{
 }>;
 export type User = z.infer<typeof userSchema>;
 declare const clientInsertSchema: z.ZodObject<{
-	client_id: z.ZodString;
+	client_id: z.ZodOptional<z.ZodString>;
 	name: z.ZodString;
 	description: z.ZodOptional<z.ZodString>;
 	global: z.ZodDefault<z.ZodBoolean>;
@@ -1849,7 +1849,37 @@ declare const clientInsertSchema: z.ZodObject<{
 	mobile: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	initiate_login_uri: z.ZodOptional<z.ZodString>;
 	native_social_login: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
-	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodObject<{
+		rotation_type: z.ZodOptional<z.ZodEnum<[
+			"rotating",
+			"non-rotating"
+		]>>;
+		leeway: z.ZodOptional<z.ZodNumber>;
+		expiration_type: z.ZodOptional<z.ZodEnum<[
+			"expiring",
+			"non-expiring"
+		]>>;
+		token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+		idle_token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_idle_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+	}, "strip", z.ZodTypeAny, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}>>>;
 	default_organization: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	organization_usage: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
 		"deny",
@@ -1887,7 +1917,6 @@ declare const clientInsertSchema: z.ZodObject<{
 	]>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
-	client_id: string;
 	global: boolean;
 	is_first_party: boolean;
 	oidc_conformant: boolean;
@@ -1899,7 +1928,16 @@ declare const clientInsertSchema: z.ZodObject<{
 	require_pushed_authorization_requests: boolean;
 	require_proof_of_possession: boolean;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	client_id?: string | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
 	logo_uri?: string | undefined;
@@ -1940,9 +1978,17 @@ declare const clientInsertSchema: z.ZodObject<{
 	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	name: string;
-	client_id: string;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	client_id?: string | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	global?: boolean | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
@@ -2061,7 +2107,37 @@ declare const clientSchema: z.ZodObject<{
 	mobile: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	initiate_login_uri: z.ZodOptional<z.ZodString>;
 	native_social_login: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
-	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodObject<{
+		rotation_type: z.ZodOptional<z.ZodEnum<[
+			"rotating",
+			"non-rotating"
+		]>>;
+		leeway: z.ZodOptional<z.ZodNumber>;
+		expiration_type: z.ZodOptional<z.ZodEnum<[
+			"expiring",
+			"non-expiring"
+		]>>;
+		token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+		idle_token_lifetime: z.ZodOptional<z.ZodNumber>;
+		infinite_idle_token_lifetime: z.ZodOptional<z.ZodBoolean>;
+	}, "strip", z.ZodTypeAny, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}, {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	}>>>;
 	default_organization: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	organization_usage: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
 		"deny",
@@ -2115,7 +2191,15 @@ declare const clientSchema: z.ZodObject<{
 	require_pushed_authorization_requests: boolean;
 	require_proof_of_possession: boolean;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
 	logo_uri?: string | undefined;
@@ -2160,7 +2244,15 @@ declare const clientSchema: z.ZodObject<{
 	name: string;
 	client_id: string;
 	description?: string | undefined;
-	refresh_token?: Record<string, any> | undefined;
+	refresh_token?: {
+		rotation_type?: "rotating" | "non-rotating" | undefined;
+		leeway?: number | undefined;
+		expiration_type?: "expiring" | "non-expiring" | undefined;
+		token_lifetime?: number | undefined;
+		infinite_token_lifetime?: boolean | undefined;
+		idle_token_lifetime?: number | undefined;
+		infinite_idle_token_lifetime?: boolean | undefined;
+	} | undefined;
 	global?: boolean | undefined;
 	client_secret?: string | undefined;
 	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
@@ -2385,25 +2477,28 @@ declare enum CodeChallengeMethod {
 declare const brandingSchema: z.ZodObject<{
 	colors: z.ZodOptional<z.ZodObject<{
 		primary: z.ZodString;
-		page_background: z.ZodOptional<z.ZodObject<{
-			type: z.ZodOptional<z.ZodString>;
-			start: z.ZodOptional<z.ZodString>;
-			end: z.ZodOptional<z.ZodString>;
-			angle_deg: z.ZodOptional<z.ZodNumber>;
-		}, "strip", z.ZodTypeAny, {
-			type?: string | undefined;
-			start?: string | undefined;
-			end?: string | undefined;
-			angle_deg?: number | undefined;
-		}, {
-			type?: string | undefined;
-			start?: string | undefined;
-			end?: string | undefined;
-			angle_deg?: number | undefined;
-		}>>;
+		page_background: z.ZodOptional<z.ZodUnion<[
+			z.ZodString,
+			z.ZodObject<{
+				type: z.ZodOptional<z.ZodString>;
+				start: z.ZodOptional<z.ZodString>;
+				end: z.ZodOptional<z.ZodString>;
+				angle_deg: z.ZodOptional<z.ZodNumber>;
+			}, "strip", z.ZodTypeAny, {
+				type?: string | undefined;
+				start?: string | undefined;
+				end?: string | undefined;
+				angle_deg?: number | undefined;
+			}, {
+				type?: string | undefined;
+				start?: string | undefined;
+				end?: string | undefined;
+				angle_deg?: number | undefined;
+			}>
+		]>>;
 	}, "strip", z.ZodTypeAny, {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -2411,7 +2506,7 @@ declare const brandingSchema: z.ZodObject<{
 		} | undefined;
 	}, {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -2431,7 +2526,7 @@ declare const brandingSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
 	colors?: {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -2447,7 +2542,7 @@ declare const brandingSchema: z.ZodObject<{
 }, {
 	colors?: {
 		primary: string;
-		page_background?: {
+		page_background?: string | {
 			type?: string | undefined;
 			start?: string | undefined;
 			end?: string | undefined;
@@ -2596,7 +2691,7 @@ declare const connectionInsertSchema: z.ZodObject<{
 	name: z.ZodString;
 	display_name: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodString;
-	options: z.ZodDefault<z.ZodObject<{
+	options: z.ZodDefault<z.ZodEffects<z.ZodObject<{
 		kid: z.ZodOptional<z.ZodString>;
 		team_id: z.ZodOptional<z.ZodString>;
 		realms: z.ZodOptional<z.ZodString>;
@@ -3222,16 +3317,7 @@ declare const connectionInsertSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	}>>;
-	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
-	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
-	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
-	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
-	show_as_button: z.ZodOptional<z.ZodBoolean>;
-	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-	is_system: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-	options: {
+	}>, {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -3334,22 +3420,16 @@ declare const connectionInsertSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	};
-	name: string;
-	strategy: string;
-	id?: string | undefined;
-	is_system?: boolean | undefined;
-	response_type?: AuthorizationResponseType | undefined;
-	response_mode?: AuthorizationResponseMode | undefined;
-	display_name?: string | undefined;
-	enabled_clients?: string[] | undefined;
-	is_domain_connection?: boolean | undefined;
-	show_as_button?: boolean | undefined;
-	metadata?: Record<string, any> | undefined;
-}, {
-	name: string;
-	strategy: string;
-	options?: {
+	}, unknown>>;
+	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
+	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
+	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
+	show_as_button: z.ZodOptional<z.ZodBoolean>;
+	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+	is_system: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+	options: {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -3452,7 +3532,22 @@ declare const connectionInsertSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	} | undefined;
+	};
+	name: string;
+	strategy: string;
+	id?: string | undefined;
+	is_system?: boolean | undefined;
+	response_type?: AuthorizationResponseType | undefined;
+	response_mode?: AuthorizationResponseMode | undefined;
+	display_name?: string | undefined;
+	enabled_clients?: string[] | undefined;
+	is_domain_connection?: boolean | undefined;
+	show_as_button?: boolean | undefined;
+	metadata?: Record<string, any> | undefined;
+}, {
+	name: string;
+	strategy: string;
+	options?: unknown;
 	id?: string | undefined;
 	is_system?: boolean | undefined;
 	response_type?: AuthorizationResponseType | undefined;
@@ -3472,7 +3567,7 @@ declare const connectionSchema: z.ZodObject<{
 	name: z.ZodString;
 	display_name: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodString;
-	options: z.ZodDefault<z.ZodObject<{
+	options: z.ZodDefault<z.ZodEffects<z.ZodObject<{
 		kid: z.ZodOptional<z.ZodString>;
 		team_id: z.ZodOptional<z.ZodString>;
 		realms: z.ZodOptional<z.ZodString>;
@@ -4098,18 +4193,7 @@ declare const connectionSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	}>>;
-	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
-	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
-	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
-	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
-	show_as_button: z.ZodOptional<z.ZodBoolean>;
-	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-	is_system: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-	created_at: string;
-	updated_at: string;
-	options: {
+	}>, {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -4212,24 +4296,18 @@ declare const connectionSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	};
-	name: string;
-	strategy: string;
-	id?: string | undefined;
-	is_system?: boolean | undefined;
-	response_type?: AuthorizationResponseType | undefined;
-	response_mode?: AuthorizationResponseMode | undefined;
-	display_name?: string | undefined;
-	enabled_clients?: string[] | undefined;
-	is_domain_connection?: boolean | undefined;
-	show_as_button?: boolean | undefined;
-	metadata?: Record<string, any> | undefined;
-}, {
+	}, unknown>>;
+	enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+	response_type: z.ZodOptional<z.ZodType<AuthorizationResponseType, z.ZodTypeDef, AuthorizationResponseType>>;
+	response_mode: z.ZodOptional<z.ZodType<AuthorizationResponseMode, z.ZodTypeDef, AuthorizationResponseMode>>;
+	is_domain_connection: z.ZodOptional<z.ZodBoolean>;
+	show_as_button: z.ZodOptional<z.ZodBoolean>;
+	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+	is_system: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
 	created_at: string;
 	updated_at: string;
-	name: string;
-	strategy: string;
-	options?: {
+	options: {
 		validation?: {
 			username?: {
 				min?: number | undefined;
@@ -4332,7 +4410,24 @@ declare const connectionSchema: z.ZodObject<{
 		} | undefined;
 		requires_username?: boolean | undefined;
 		set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
-	} | undefined;
+	};
+	name: string;
+	strategy: string;
+	id?: string | undefined;
+	is_system?: boolean | undefined;
+	response_type?: AuthorizationResponseType | undefined;
+	response_mode?: AuthorizationResponseMode | undefined;
+	display_name?: string | undefined;
+	enabled_clients?: string[] | undefined;
+	is_domain_connection?: boolean | undefined;
+	show_as_button?: boolean | undefined;
+	metadata?: Record<string, any> | undefined;
+}, {
+	created_at: string;
+	updated_at: string;
+	name: string;
+	strategy: string;
+	options?: unknown;
 	id?: string | undefined;
 	is_system?: boolean | undefined;
 	response_type?: AuthorizationResponseType | undefined;
@@ -16256,7 +16351,7 @@ declare const loginSessionSchema: z.ZodObject<{
 }>;
 export type LoginSession = z.infer<typeof loginSessionSchema>;
 declare const logInsertSchema: z.ZodObject<{
-	type: z.ZodEffects<z.ZodString, "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>;
+	type: z.ZodEffects<z.ZodString, "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>;
 	date: z.ZodString;
 	description: z.ZodOptional<z.ZodString>;
 	ip: z.ZodOptional<z.ZodString>;
@@ -16321,7 +16416,7 @@ declare const logInsertSchema: z.ZodObject<{
 		continent_code: string;
 	}>>;
 }, "strip", z.ZodTypeAny, {
-	type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+	type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
 	date: string;
 	isMobile: boolean;
 	description?: string | undefined;
@@ -16394,7 +16489,7 @@ declare const logInsertSchema: z.ZodObject<{
 export type LogInsert = z.infer<typeof logInsertSchema>;
 declare const logSchema: z.ZodObject<{
 	log_id: z.ZodString;
-	type: z.ZodEffects<z.ZodString, "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>;
+	type: z.ZodEffects<z.ZodString, "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>;
 	date: z.ZodString;
 	description: z.ZodOptional<z.ZodString>;
 	ip: z.ZodOptional<z.ZodString>;
@@ -16458,7 +16553,7 @@ declare const logSchema: z.ZodObject<{
 		continent_code: string;
 	}>>;
 }, "strip", z.ZodTypeAny, {
-	type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+	type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
 	date: string;
 	isMobile: boolean;
 	log_id: string;
@@ -16529,6 +16624,114 @@ declare const logSchema: z.ZodObject<{
 	} | undefined;
 }>;
 export type Log = z.infer<typeof logSchema>;
+declare const logStreamInsertSchema: z.ZodObject<{
+	name: z.ZodString;
+	type: z.ZodEnum<[
+		"http",
+		"eventbridge",
+		"eventgrid",
+		"splunk",
+		"datadog",
+		"sumo"
+	]>;
+	status: z.ZodOptional<z.ZodEnum<[
+		"active",
+		"paused",
+		"suspended"
+	]>>;
+	sink: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+	filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		type: z.ZodString;
+		name: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		type: string;
+		name: string;
+	}, {
+		type: string;
+		name: string;
+	}>, "many">>;
+	isPriority: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	name: string;
+	sink: Record<string, unknown>;
+	status?: "active" | "paused" | "suspended" | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	name: string;
+	sink: Record<string, unknown>;
+	status?: "active" | "paused" | "suspended" | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}>;
+export type LogStreamInsert = z.infer<typeof logStreamInsertSchema>;
+declare const logStreamSchema: z.ZodObject<{
+	name: z.ZodString;
+	type: z.ZodEnum<[
+		"http",
+		"eventbridge",
+		"eventgrid",
+		"splunk",
+		"datadog",
+		"sumo"
+	]>;
+	sink: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+	filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		type: z.ZodString;
+		name: z.ZodString;
+	}, "strip", z.ZodTypeAny, {
+		type: string;
+		name: string;
+	}, {
+		type: string;
+		name: string;
+	}>, "many">>;
+	isPriority: z.ZodOptional<z.ZodBoolean>;
+} & {
+	id: z.ZodString;
+	status: z.ZodEnum<[
+		"active",
+		"paused",
+		"suspended"
+	]>;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	status: "active" | "paused" | "suspended";
+	id: string;
+	name: string;
+	sink: Record<string, unknown>;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}, {
+	type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
+	status: "active" | "paused" | "suspended";
+	id: string;
+	name: string;
+	sink: Record<string, unknown>;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	filters?: {
+		type: string;
+		name: string;
+	}[] | undefined;
+	isPriority?: boolean | undefined;
+}>;
+export type LogStream = z.infer<typeof logStreamSchema>;
 declare const passwordInsertSchema: z.ZodObject<{
 	id: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodString;
@@ -16803,9 +17006,10 @@ declare const tenantSchema: z.ZodObject<{
 	}>>;
 	allowed_logout_urls: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 	default_redirection_uri: z.ZodOptional<z.ZodString>;
+	default_client_id: z.ZodOptional<z.ZodString>;
 	enabled_locales: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 	default_directory: z.ZodOptional<z.ZodString>;
-	error_page: z.ZodOptional<z.ZodObject<{
+	error_page: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		html: z.ZodOptional<z.ZodString>;
 		show_log_link: z.ZodOptional<z.ZodBoolean>;
 		url: z.ZodOptional<z.ZodString>;
@@ -16817,7 +17021,7 @@ declare const tenantSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	}>>;
+	}>>>;
 	flags: z.ZodOptional<z.ZodObject<{
 		allow_changing_enable_sso: z.ZodOptional<z.ZodBoolean>;
 		allow_legacy_delegation_grant_types: z.ZodOptional<z.ZodBoolean>;
@@ -16966,7 +17170,7 @@ declare const tenantSchema: z.ZodObject<{
 		charset?: "base20" | "digits" | undefined;
 		mask?: string | undefined;
 	}>>;
-	default_token_quota: z.ZodOptional<z.ZodObject<{
+	default_token_quota: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		clients: z.ZodOptional<z.ZodObject<{
 			client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 		}, "strip", z.ZodTypeAny, {
@@ -16995,7 +17199,7 @@ declare const tenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	}>>;
+	}>>>;
 	default_audience: z.ZodOptional<z.ZodString>;
 	default_organization: z.ZodOptional<z.ZodString>;
 	sessions: z.ZodOptional<z.ZodObject<{
@@ -17015,36 +17219,266 @@ declare const tenantSchema: z.ZodObject<{
 	allow_organization_name_in_authentication_api: z.ZodOptional<z.ZodBoolean>;
 	customize_mfa_in_postlogin_action: z.ZodOptional<z.ZodBoolean>;
 	acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-	mtls: z.ZodOptional<z.ZodObject<{
+	mtls: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		enable_endpoint_aliases: z.ZodOptional<z.ZodBoolean>;
 	}, "strip", z.ZodTypeAny, {
 		enable_endpoint_aliases?: boolean | undefined;
 	}, {
 		enable_endpoint_aliases?: boolean | undefined;
-	}>>;
+	}>>>;
 	pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
 	authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
-	mfa: z.ZodOptional<z.ZodObject<{
-		policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
-			"never",
-			"always"
-		]>>>;
-		factors: z.ZodOptional<z.ZodObject<{
-			sms: z.ZodDefault<z.ZodBoolean>;
-			otp: z.ZodDefault<z.ZodBoolean>;
-			email: z.ZodDefault<z.ZodBoolean>;
-			push_notification: z.ZodDefault<z.ZodBoolean>;
-			webauthn_roaming: z.ZodDefault<z.ZodBoolean>;
-			webauthn_platform: z.ZodDefault<z.ZodBoolean>;
-			recovery_code: z.ZodDefault<z.ZodBoolean>;
-			duo: z.ZodDefault<z.ZodBoolean>;
+	attack_protection: z.ZodOptional<z.ZodObject<{
+		breached_password_detection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			method: z.ZodOptional<z.ZodString>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+				"pre-change-password": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}>>;
 		}, "strip", z.ZodTypeAny, {
-			email: boolean;
-			otp: boolean;
-			sms: boolean;
-			push_notification: boolean;
-			webauthn_roaming: boolean;
-			webauthn_platform: boolean;
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+		brute_force_protection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			mode: z.ZodOptional<z.ZodString>;
+			max_attempts: z.ZodOptional<z.ZodNumber>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}>>;
+		suspicious_ip_throttling: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-login": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}>>;
+	mfa: z.ZodOptional<z.ZodObject<{
+		policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
+			"never",
+			"always"
+		]>>>;
+		factors: z.ZodOptional<z.ZodObject<{
+			sms: z.ZodDefault<z.ZodBoolean>;
+			otp: z.ZodDefault<z.ZodBoolean>;
+			email: z.ZodDefault<z.ZodBoolean>;
+			push_notification: z.ZodDefault<z.ZodBoolean>;
+			webauthn_roaming: z.ZodDefault<z.ZodBoolean>;
+			webauthn_platform: z.ZodDefault<z.ZodBoolean>;
+			recovery_code: z.ZodDefault<z.ZodBoolean>;
+			duo: z.ZodDefault<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			email: boolean;
+			otp: boolean;
+			sms: boolean;
+			push_notification: boolean;
+			webauthn_roaming: boolean;
+			webauthn_platform: boolean;
 			recovery_code: boolean;
 			duo: boolean;
 		}, {
@@ -17167,13 +17601,14 @@ declare const tenantSchema: z.ZodObject<{
 		mode?: "persistent" | "non-persistent" | undefined;
 	} | undefined;
 	default_redirection_uri?: string | undefined;
+	default_client_id?: string | undefined;
 	enabled_locales?: string[] | undefined;
 	default_directory?: string | undefined;
 	error_page?: {
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -17234,7 +17669,7 @@ declare const tenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	sessions?: {
 		oidc_logout_prompt_enabled?: boolean | undefined;
@@ -17244,9 +17679,47 @@ declare const tenantSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -17296,13 +17769,14 @@ declare const tenantSchema: z.ZodObject<{
 		mode?: "persistent" | "non-persistent" | undefined;
 	} | undefined;
 	default_redirection_uri?: string | undefined;
+	default_client_id?: string | undefined;
 	enabled_locales?: string[] | undefined;
 	default_directory?: string | undefined;
 	error_page?: {
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -17363,7 +17837,7 @@ declare const tenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	sessions?: {
 		oidc_logout_prompt_enabled?: boolean | undefined;
@@ -17373,9 +17847,47 @@ declare const tenantSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -17641,14 +18153,29 @@ declare const themeInsertSchema: z.ZodObject<{
 			"left",
 			"right"
 		]>;
+		/**
+		 * Where the tenant logo renders on the page.
+		 * - "widget" (default): inside the widget card via the widget's own header.
+		 * - "chip": as a floating pill in the top-left page corner. The widget's
+		 *   internal logo is suppressed when this is selected.
+		 * - "none": no logo on the page or in the widget.
+		 * Optional for backwards compatibility; absent values mean "widget".
+		 */
+		logo_placement: z.ZodOptional<z.ZodEnum<[
+			"widget",
+			"chip",
+			"none"
+		]>>;
 	}, "strip", z.ZodTypeAny, {
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	}, {
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	}>;
 	widget: z.ZodObject<{
 		header_text_alignment: z.ZodEnum<[
@@ -17686,6 +18213,7 @@ declare const themeInsertSchema: z.ZodObject<{
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	};
 	colors: {
 		error: string;
@@ -17708,6 +18236,13 @@ declare const themeInsertSchema: z.ZodObject<{
 		widget_background: string;
 		widget_border: string;
 	};
+	widget: {
+		logo_url: string;
+		header_text_alignment: "center" | "left" | "right";
+		logo_height: number;
+		logo_position: "none" | "center" | "left" | "right";
+		social_buttons_layout: "bottom" | "top";
+	};
 	borders: {
 		button_border_radius: number;
 		button_border_weight: number;
@@ -17749,18 +18284,12 @@ declare const themeInsertSchema: z.ZodObject<{
 			bold: boolean;
 		};
 	};
-	widget: {
-		logo_url: string;
-		header_text_alignment: "center" | "left" | "right";
-		logo_height: number;
-		logo_position: "none" | "center" | "left" | "right";
-		social_buttons_layout: "bottom" | "top";
-	};
 }, {
 	page_background: {
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	};
 	colors: {
 		error: string;
@@ -17783,6 +18312,13 @@ declare const themeInsertSchema: z.ZodObject<{
 		widget_background: string;
 		widget_border: string;
 	};
+	widget: {
+		logo_url: string;
+		header_text_alignment: "center" | "left" | "right";
+		logo_height: number;
+		logo_position: "none" | "center" | "left" | "right";
+		social_buttons_layout: "bottom" | "top";
+	};
 	borders: {
 		button_border_radius: number;
 		button_border_weight: number;
@@ -17824,13 +18360,6 @@ declare const themeInsertSchema: z.ZodObject<{
 			bold: boolean;
 		};
 	};
-	widget: {
-		logo_url: string;
-		header_text_alignment: "center" | "left" | "right";
-		logo_height: number;
-		logo_position: "none" | "center" | "left" | "right";
-		social_buttons_layout: "bottom" | "top";
-	};
 }>;
 export type ThemeInsert = z.input<typeof themeInsertSchema>;
 declare const themeSchema: z.ZodObject<{
@@ -18071,14 +18600,29 @@ declare const themeSchema: z.ZodObject<{
 			"left",
 			"right"
 		]>;
+		/**
+		 * Where the tenant logo renders on the page.
+		 * - "widget" (default): inside the widget card via the widget's own header.
+		 * - "chip": as a floating pill in the top-left page corner. The widget's
+		 *   internal logo is suppressed when this is selected.
+		 * - "none": no logo on the page or in the widget.
+		 * Optional for backwards compatibility; absent values mean "widget".
+		 */
+		logo_placement: z.ZodOptional<z.ZodEnum<[
+			"widget",
+			"chip",
+			"none"
+		]>>;
 	}, "strip", z.ZodTypeAny, {
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	}, {
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	}>;
 	widget: z.ZodObject<{
 		header_text_alignment: z.ZodEnum<[
@@ -18118,6 +18662,7 @@ declare const themeSchema: z.ZodObject<{
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	};
 	colors: {
 		error: string;
@@ -18140,6 +18685,13 @@ declare const themeSchema: z.ZodObject<{
 		widget_background: string;
 		widget_border: string;
 	};
+	widget: {
+		logo_url: string;
+		header_text_alignment: "center" | "left" | "right";
+		logo_height: number;
+		logo_position: "none" | "center" | "left" | "right";
+		social_buttons_layout: "bottom" | "top";
+	};
 	borders: {
 		button_border_radius: number;
 		button_border_weight: number;
@@ -18181,19 +18733,13 @@ declare const themeSchema: z.ZodObject<{
 			bold: boolean;
 		};
 	};
-	widget: {
-		logo_url: string;
-		header_text_alignment: "center" | "left" | "right";
-		logo_height: number;
-		logo_position: "none" | "center" | "left" | "right";
-		social_buttons_layout: "bottom" | "top";
-	};
 	themeId: string;
 }, {
 	page_background: {
 		background_color: string;
 		background_image_url: string;
 		page_layout: "center" | "left" | "right";
+		logo_placement?: "none" | "widget" | "chip" | undefined;
 	};
 	colors: {
 		error: string;
@@ -18216,6 +18762,13 @@ declare const themeSchema: z.ZodObject<{
 		widget_background: string;
 		widget_border: string;
 	};
+	widget: {
+		logo_url: string;
+		header_text_alignment: "center" | "left" | "right";
+		logo_height: number;
+		logo_position: "none" | "center" | "left" | "right";
+		social_buttons_layout: "bottom" | "top";
+	};
 	borders: {
 		button_border_radius: number;
 		button_border_weight: number;
@@ -18257,13 +18810,6 @@ declare const themeSchema: z.ZodObject<{
 			bold: boolean;
 		};
 	};
-	widget: {
-		logo_url: string;
-		header_text_alignment: "center" | "left" | "right";
-		logo_height: number;
-		logo_position: "none" | "center" | "left" | "right";
-		social_buttons_layout: "bottom" | "top";
-	};
 	themeId: string;
 }>;
 export type Theme = z.infer<typeof themeSchema>;
@@ -18291,113 +18837,17 @@ declare const emailProviderSchema: z.ZodObject<{
 	name: z.ZodString;
 	enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 	default_from_address: z.ZodOptional<z.ZodString>;
-	credentials: z.ZodUnion<[
-		z.ZodObject<{
-			accessKeyId: z.ZodString;
-			secretAccessKey: z.ZodString;
-			region: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			region: string;
-			accessKeyId: string;
-			secretAccessKey: string;
-		}, {
-			region: string;
-			accessKeyId: string;
-			secretAccessKey: string;
-		}>,
-		z.ZodObject<{
-			smtp_host: z.ZodArray<z.ZodString, "many">;
-			smtp_port: z.ZodNumber;
-			smtp_user: z.ZodString;
-			smtp_pass: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			smtp_host: string[];
-			smtp_port: number;
-			smtp_user: string;
-			smtp_pass: string;
-		}, {
-			smtp_host: string[];
-			smtp_port: number;
-			smtp_user: string;
-			smtp_pass: string;
-		}>,
-		z.ZodObject<{
-			api_key: z.ZodString;
-			domain: z.ZodOptional<z.ZodString>;
-		}, "strip", z.ZodTypeAny, {
-			api_key: string;
-			domain?: string | undefined;
-		}, {
-			api_key: string;
-			domain?: string | undefined;
-		}>,
-		z.ZodObject<{
-			connectionString: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			connectionString: string;
-		}, {
-			connectionString: string;
-		}>,
-		z.ZodObject<{
-			tenantId: z.ZodString;
-			clientId: z.ZodString;
-			clientSecret: z.ZodString;
-		}, "strip", z.ZodTypeAny, {
-			tenantId: string;
-			clientId: string;
-			clientSecret: string;
-		}, {
-			tenantId: string;
-			clientId: string;
-			clientSecret: string;
-		}>
-	]>;
+	credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 	settings: z.ZodOptional<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	enabled: boolean;
-	credentials: {
-		region: string;
-		accessKeyId: string;
-		secretAccessKey: string;
-	} | {
-		smtp_host: string[];
-		smtp_port: number;
-		smtp_user: string;
-		smtp_pass: string;
-	} | {
-		api_key: string;
-		domain?: string | undefined;
-	} | {
-		connectionString: string;
-	} | {
-		tenantId: string;
-		clientId: string;
-		clientSecret: string;
-	};
+	credentials: Record<string, unknown>;
 	default_from_address?: string | undefined;
 	settings?: {} | undefined;
 }, {
 	name: string;
-	credentials: {
-		region: string;
-		accessKeyId: string;
-		secretAccessKey: string;
-	} | {
-		smtp_host: string[];
-		smtp_port: number;
-		smtp_user: string;
-		smtp_pass: string;
-	} | {
-		api_key: string;
-		domain?: string | undefined;
-	} | {
-		connectionString: string;
-	} | {
-		tenantId: string;
-		clientId: string;
-		clientSecret: string;
-	};
+	credentials: Record<string, unknown>;
 	enabled?: boolean | undefined;
 	default_from_address?: string | undefined;
 	settings?: {} | undefined;
@@ -18444,10 +18894,16 @@ declare const refreshTokenInsertSchema: z.ZodObject<{
 		audience: string;
 	}>, "many">;
 	rotating: z.ZodBoolean;
+	token_lookup: z.ZodOptional<z.ZodString>;
+	token_hash: z.ZodOptional<z.ZodString>;
+	family_id: z.ZodOptional<z.ZodString>;
+	rotated_to: z.ZodOptional<z.ZodString>;
+	rotated_at: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -18461,14 +18917,19 @@ declare const refreshTokenInsertSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }, {
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -18482,10 +18943,14 @@ declare const refreshTokenInsertSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }>;
 export type RefreshTokenInsert = z.infer<typeof refreshTokenInsertSchema>;
 declare const refreshTokenSchema: z.ZodObject<{
@@ -18529,6 +18994,11 @@ declare const refreshTokenSchema: z.ZodObject<{
 		audience: string;
 	}>, "many">;
 	rotating: z.ZodBoolean;
+	token_lookup: z.ZodOptional<z.ZodString>;
+	token_hash: z.ZodOptional<z.ZodString>;
+	family_id: z.ZodOptional<z.ZodString>;
+	rotated_to: z.ZodOptional<z.ZodString>;
+	rotated_at: z.ZodOptional<z.ZodString>;
 	created_at: z.ZodString;
 	revoked_at: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
@@ -18536,6 +19006,7 @@ declare const refreshTokenSchema: z.ZodObject<{
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -18549,16 +19020,21 @@ declare const refreshTokenSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }, {
 	created_at: string;
 	id: string;
 	client_id: string;
 	user_id: string;
+	rotating: boolean;
 	login_id: string;
 	device: {
 		last_ip: string;
@@ -18572,11 +19048,15 @@ declare const refreshTokenSchema: z.ZodObject<{
 		scopes: string;
 		audience: string;
 	}[];
-	rotating: boolean;
+	token_hash?: string | undefined;
 	expires_at?: string | undefined;
 	revoked_at?: string | undefined;
 	idle_expires_at?: string | undefined;
 	last_exchanged_at?: string | undefined;
+	token_lookup?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
+	rotated_at?: string | undefined;
 }>;
 export type RefreshToken = z.infer<typeof refreshTokenSchema>;
 declare const resourceServerInsertSchema: z.ZodObject<{
@@ -18642,8 +19122,8 @@ declare const resourceServerInsertSchema: z.ZodObject<{
 	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
-	identifier: string;
 	token_lifetime: number;
+	identifier: string;
 	token_lifetime_for_web: number;
 	options?: {
 		mtls?: {
@@ -18687,11 +19167,11 @@ declare const resourceServerInsertSchema: z.ZodObject<{
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
+	token_lifetime?: number | undefined;
 	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
-	token_lifetime?: number | undefined;
 	token_lifetime_for_web?: number | undefined;
 	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
 	allow_offline_access?: boolean | undefined;
@@ -18763,8 +19243,8 @@ declare const resourceServerSchema: z.ZodObject<{
 	metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
-	identifier: string;
 	token_lifetime: number;
+	identifier: string;
 	token_lifetime_for_web: number;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
@@ -18812,11 +19292,11 @@ declare const resourceServerSchema: z.ZodObject<{
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
+	token_lifetime?: number | undefined;
 	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
-	token_lifetime?: number | undefined;
 	token_lifetime_for_web?: number | undefined;
 	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
 	allow_offline_access?: boolean | undefined;
@@ -19200,6 +19680,64 @@ declare const organizationSchema: z.ZodObject<{
 	}[] | undefined;
 }>;
 export type Organization = z.infer<typeof organizationSchema>;
+declare const organizationConnectionInsertSchema: z.ZodObject<{
+	connection_id: z.ZodString;
+	assign_membership_on_login: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	show_as_button: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	is_signup_enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+	connection_id: string;
+	show_as_button: boolean;
+	assign_membership_on_login: boolean;
+	is_signup_enabled: boolean;
+}, {
+	connection_id: string;
+	show_as_button?: boolean | undefined;
+	assign_membership_on_login?: boolean | undefined;
+	is_signup_enabled?: boolean | undefined;
+}>;
+export type OrganizationConnectionInsert = z.input<typeof organizationConnectionInsertSchema>;
+declare const organizationConnectionSchema: z.ZodObject<{
+	connection: z.ZodOptional<z.ZodObject<{
+		name: z.ZodOptional<z.ZodString>;
+		strategy: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	}, {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	}>>;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+	connection_id: z.ZodString;
+	assign_membership_on_login: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	show_as_button: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	is_signup_enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+	connection_id: string;
+	show_as_button: boolean;
+	assign_membership_on_login: boolean;
+	is_signup_enabled: boolean;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	connection?: {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	} | undefined;
+}, {
+	connection_id: string;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	connection?: {
+		name?: string | undefined;
+		strategy?: string | undefined;
+	} | undefined;
+	show_as_button?: boolean | undefined;
+	assign_membership_on_login?: boolean | undefined;
+	is_signup_enabled?: boolean | undefined;
+}>;
+export type OrganizationConnection = z.infer<typeof organizationConnectionSchema>;
 declare const userOrganizationInsertSchema: z.ZodObject<{
 	user_id: z.ZodString;
 	organization_id: z.ZodString;
@@ -19638,6 +20176,13 @@ export interface LogsDataAdapter {
 	list(tenantId: string, params?: ListParams): Promise<ListLogsResponse>;
 	get(tenantId: string, logId: string): Promise<Log | null>;
 }
+export interface LogStreamsAdapter {
+	create(tenant_id: string, params: LogStreamInsert): Promise<LogStream>;
+	get(tenant_id: string, id: string): Promise<LogStream | null>;
+	list(tenant_id: string): Promise<LogStream[]>;
+	update(tenant_id: string, id: string, params: Partial<LogStream>): Promise<boolean>;
+	remove(tenant_id: string, id: string): Promise<boolean>;
+}
 export interface ListConnectionsResponse extends Totals {
 	connections: Connection[];
 }
@@ -19724,10 +20269,22 @@ export interface UpdateRefreshTokenOptions {
 export interface RefreshTokensAdapter {
 	create: (tenant_id: string, refresh_token: RefreshTokenInsert) => Promise<RefreshToken>;
 	get: (tenant_id: string, id: string) => Promise<RefreshToken | null>;
+	/**
+	 * Look up a refresh token by its plaintext `token_lookup` slice (extracted
+	 * from the wire format `rt_<lookup>.<secret>`). Returns null if no row
+	 * matches. Callers must verify the secret hash before trusting the row.
+	 */
+	getByLookup: (tenant_id: string, token_lookup: string) => Promise<RefreshToken | null>;
 	list(tenant_id: string, params?: ListParams): Promise<ListRefreshTokenResponse>;
 	update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
 	remove: (tenant_id: string, id: string) => Promise<boolean>;
 	revokeByLoginSession: (tenant_id: string, login_session_id: string, revoked_at: string) => Promise<number>;
+	/**
+	 * Soft-revoke every refresh token that shares `family_id` and isn't already
+	 * revoked. Used for reuse detection (entire rotation chain torched) and for
+	 * admin revocations that should propagate to descendants.
+	 */
+	revokeFamily: (tenant_id: string, family_id: string, revoked_at: string) => Promise<number>;
 }
 export interface ListFormsResponse extends Totals {
 	forms: Form[];
@@ -19784,6 +20341,13 @@ export interface OrganizationsAdapter {
 	list(tenant_id: string, params?: ListParams): Promise<ListOrganizationsResponse>;
 	update(tenant_id: string, id: string, params: Partial<OrganizationInsert>): Promise<boolean>;
 }
+export interface OrganizationConnectionsAdapter {
+	create(tenant_id: string, organization_id: string, params: OrganizationConnectionInsert): Promise<OrganizationConnection>;
+	list(tenant_id: string, organization_id: string): Promise<OrganizationConnection[]>;
+	get(tenant_id: string, organization_id: string, connection_id: string): Promise<OrganizationConnection | null>;
+	update(tenant_id: string, organization_id: string, connection_id: string, params: Partial<Omit<OrganizationConnectionInsert, "connection_id">>): Promise<OrganizationConnection | null>;
+	remove(tenant_id: string, organization_id: string, connection_id: string): Promise<boolean>;
+}
 export interface UserOrganizationsAdapter {
 	create(tenantId: string, params: UserOrganizationInsert): Promise<UserOrganization>;
 	get(tenantId: string, id: string): Promise<UserOrganization | null>;
@@ -19965,6 +20529,33 @@ export interface OutboxAdapter {
 	/** Delete processed events older than the given ISO date. Returns count deleted. */
 	cleanup(olderThan: string): Promise<number>;
 }
+/**
+ * Logical buckets that consumers can rate-limit against. Backends decide
+ * how each scope is enforced (e.g. mapping to a separate Cloudflare Workers
+ * Rate Limiter binding with its own deploy-time limit/period).
+ */
+export type RateLimitScope = "pre-login" | "pre-user-registration" | "brute-force";
+export interface RateLimitDecision {
+	/** True if the request is allowed; false if the limit was exceeded. */
+	allowed: boolean;
+	/** Optional retry-after hint in seconds (omitted if the backend can't tell). */
+	retryAfterSeconds?: number;
+}
+export interface RateLimitAdapter {
+	/**
+	 * Consume one unit of quota for the given scope and key.
+	 *
+	 * The numeric threshold and window are backend-specific; the
+	 * Cloudflare Workers Rate Limiter binding bakes them in at deploy
+	 * time and cannot honor a per-tenant override. Callers that need
+	 * per-tenant `max_attempts` should layer their own counter on top.
+	 *
+	 * Returns `{ allowed: true }` if the scope is not configured, so
+	 * callers can opt in by configuring backends without changing call
+	 * sites.
+	 */
+	consume(scope: RateLimitScope, key: string): Promise<RateLimitDecision>;
+}
 /**
  * Parameters for cleaning up expired sessions
  */
@@ -19995,6 +20586,7 @@ export interface DataAdapters {
 	keys: KeysAdapter;
 	loginSessions: LoginSessionsAdapter;
 	logs: LogsDataAdapter;
+	logStreams?: LogStreamsAdapter;
 	passwords: PasswordsAdapter;
 	promptSettings: PromptSettingsAdapter;
 	refreshTokens: RefreshTokensAdapter;
@@ -20011,12 +20603,20 @@ export interface DataAdapters {
 	users: UserDataAdapter;
 	userRoles: UserRolesAdapter;
 	organizations: OrganizationsAdapter;
+	organizationConnections: OrganizationConnectionsAdapter;
 	authenticationMethods: AuthenticationMethodsAdapter;
 	userOrganizations: UserOrganizationsAdapter;
 	emailService?: EmailServiceAdapter;
 	smsService?: SmsServiceAdapter;
 	/** Optional outbox adapter for transactional audit event capture */
 	outbox?: OutboxAdapter;
+	/**
+	 * Optional rate-limit adapter for short-window abuse protection
+	 * (e.g. backed by the Cloudflare Workers Rate Limiter binding).
+	 * Auth flows treat this as opt-in: when undefined, no extra
+	 * throttling is applied.
+	 */
+	rateLimit?: RateLimitAdapter;
 	/**
 	 * Execute a callback within a database transaction.
 	 * The callback receives a set of adapters scoped to the transaction.
@@ -20715,9 +21315,14 @@ declare const sqlRefreshTokensSchema: z.ZodObject<Omit<{
 		audience: string;
 	}>, "many">;
 	rotating: z.ZodBoolean;
+	token_lookup: z.ZodOptional<z.ZodString>;
+	token_hash: z.ZodOptional<z.ZodString>;
+	family_id: z.ZodOptional<z.ZodString>;
+	rotated_to: z.ZodOptional<z.ZodString>;
+	rotated_at: z.ZodOptional<z.ZodString>;
 	created_at: z.ZodString;
 	revoked_at: z.ZodOptional<z.ZodString>;
-}, "created_at" | "expires_at" | "revoked_at" | "idle_expires_at" | "device" | "last_exchanged_at" | "resource_servers" | "rotating"> & {
+}, "created_at" | "expires_at" | "revoked_at" | "idle_expires_at" | "device" | "last_exchanged_at" | "resource_servers" | "rotating" | "rotated_at"> & {
 	tenant_id: z.ZodString;
 	device: z.ZodString;
 	resource_servers: z.ZodString;
@@ -20727,6 +21332,7 @@ declare const sqlRefreshTokensSchema: z.ZodObject<Omit<{
 	idle_expires_at_ts: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
 	last_exchanged_at_ts: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
 	revoked_at_ts: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+	rotated_at_ts: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
 }, "strip", z.ZodTypeAny, {
 	tenant_id: string;
 	user_id: string;
@@ -20740,7 +21346,12 @@ declare const sqlRefreshTokensSchema: z.ZodObject<Omit<{
 	expires_at_ts?: number | null | undefined;
 	idle_expires_at_ts?: number | null | undefined;
 	revoked_at_ts?: number | null | undefined;
+	token_lookup?: string | undefined;
+	token_hash?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
 	last_exchanged_at_ts?: number | null | undefined;
+	rotated_at_ts?: number | null | undefined;
 }, {
 	tenant_id: string;
 	user_id: string;
@@ -20754,7 +21365,12 @@ declare const sqlRefreshTokensSchema: z.ZodObject<Omit<{
 	expires_at_ts?: number | null | undefined;
 	idle_expires_at_ts?: number | null | undefined;
 	revoked_at_ts?: number | null | undefined;
+	token_lookup?: string | undefined;
+	token_hash?: string | undefined;
+	family_id?: string | undefined;
+	rotated_to?: string | undefined;
 	last_exchanged_at_ts?: number | null | undefined;
+	rotated_at_ts?: number | null | undefined;
 }>;
 declare const sqlCustomDomainSchema: z.ZodObject<{
 	primary: z.ZodNumber;
@@ -21022,7 +21638,7 @@ declare const sqlLogSchema: z.ZodObject<{
 	time_zone: z.ZodOptional<z.ZodString>;
 	continent_code: z.ZodOptional<z.ZodString>;
 	log_id: z.ZodString;
-	type: z.ZodEffects<z.ZodString, "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>;
+	type: z.ZodEffects<z.ZodString, "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>;
 	date: z.ZodString;
 	description: z.ZodOptional<z.ZodString>;
 	ip: z.ZodOptional<z.ZodString>;
@@ -21060,7 +21676,7 @@ declare const sqlLogSchema: z.ZodObject<{
 		continent_code: string;
 	}>>;
 }, "strip", z.ZodTypeAny, {
-	type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+	type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
 	date: string;
 	tenant_id: string;
 	log_id: string;
@@ -21245,9 +21861,10 @@ declare const sqlTenantSchema: z.ZodObject<{
 	}>>;
 	allowed_logout_urls: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 	default_redirection_uri: z.ZodOptional<z.ZodString>;
+	default_client_id: z.ZodOptional<z.ZodString>;
 	enabled_locales: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 	default_directory: z.ZodOptional<z.ZodString>;
-	error_page: z.ZodOptional<z.ZodObject<{
+	error_page: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		html: z.ZodOptional<z.ZodString>;
 		show_log_link: z.ZodOptional<z.ZodBoolean>;
 		url: z.ZodOptional<z.ZodString>;
@@ -21259,7 +21876,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	}>>;
+	}>>>;
 	flags: z.ZodOptional<z.ZodObject<{
 		allow_changing_enable_sso: z.ZodOptional<z.ZodBoolean>;
 		allow_legacy_delegation_grant_types: z.ZodOptional<z.ZodBoolean>;
@@ -21408,7 +22025,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 		charset?: "base20" | "digits" | undefined;
 		mask?: string | undefined;
 	}>>;
-	default_token_quota: z.ZodOptional<z.ZodObject<{
+	default_token_quota: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		clients: z.ZodOptional<z.ZodObject<{
 			client_credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 		}, "strip", z.ZodTypeAny, {
@@ -21437,7 +22054,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	}>>;
+	}>>>;
 	default_audience: z.ZodOptional<z.ZodString>;
 	default_organization: z.ZodOptional<z.ZodString>;
 	sessions: z.ZodOptional<z.ZodObject<{
@@ -21457,15 +22074,245 @@ declare const sqlTenantSchema: z.ZodObject<{
 	allow_organization_name_in_authentication_api: z.ZodOptional<z.ZodBoolean>;
 	customize_mfa_in_postlogin_action: z.ZodOptional<z.ZodBoolean>;
 	acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-	mtls: z.ZodOptional<z.ZodObject<{
+	mtls: z.ZodOptional<z.ZodNullable<z.ZodObject<{
 		enable_endpoint_aliases: z.ZodOptional<z.ZodBoolean>;
 	}, "strip", z.ZodTypeAny, {
 		enable_endpoint_aliases?: boolean | undefined;
 	}, {
 		enable_endpoint_aliases?: boolean | undefined;
-	}>>;
+	}>>>;
 	pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
 	authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+	attack_protection: z.ZodOptional<z.ZodObject<{
+		breached_password_detection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			admin_notification_frequency: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			method: z.ZodOptional<z.ZodString>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+				"pre-change-password": z.ZodOptional<z.ZodObject<{
+					shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+				}, "strip", z.ZodTypeAny, {
+					shields?: string[] | undefined;
+				}, {
+					shields?: string[] | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+		brute_force_protection: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			mode: z.ZodOptional<z.ZodString>;
+			max_attempts: z.ZodOptional<z.ZodNumber>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		}>>;
+		suspicious_ip_throttling: z.ZodOptional<z.ZodObject<{
+			enabled: z.ZodOptional<z.ZodBoolean>;
+			shields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			stage: z.ZodOptional<z.ZodObject<{
+				"pre-login": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+				"pre-user-registration": z.ZodOptional<z.ZodObject<{
+					max_attempts: z.ZodOptional<z.ZodNumber>;
+					rate: z.ZodOptional<z.ZodNumber>;
+				}, "strip", z.ZodTypeAny, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}, {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				}>>;
+			}, "strip", z.ZodTypeAny, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}, {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			}>>;
+		}, "strip", z.ZodTypeAny, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}, {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		}>>;
+	}, "strip", z.ZodTypeAny, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}, {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	}>>;
 	mfa: z.ZodOptional<z.ZodObject<{
 		policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
 			"never",
@@ -21605,13 +22452,14 @@ declare const sqlTenantSchema: z.ZodObject<{
 	} | undefined;
 	allowed_logout_urls?: string[] | undefined;
 	default_redirection_uri?: string | undefined;
+	default_client_id?: string | undefined;
 	enabled_locales?: string[] | undefined;
 	default_directory?: string | undefined;
 	error_page?: {
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -21672,7 +22520,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	default_organization?: string | undefined;
 	sessions?: {
@@ -21686,9 +22534,47 @@ declare const sqlTenantSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -21734,13 +22620,14 @@ declare const sqlTenantSchema: z.ZodObject<{
 	} | undefined;
 	allowed_logout_urls?: string[] | undefined;
 	default_redirection_uri?: string | undefined;
+	default_client_id?: string | undefined;
 	enabled_locales?: string[] | undefined;
 	default_directory?: string | undefined;
 	error_page?: {
 		url?: string | undefined;
 		html?: string | undefined;
 		show_log_link?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	flags?: {
 		allow_changing_enable_sso?: boolean | undefined;
 		allow_legacy_delegation_grant_types?: boolean | undefined;
@@ -21801,7 +22688,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 		organizations?: {
 			client_credentials?: Record<string, any> | undefined;
 		} | undefined;
-	} | undefined;
+	} | null | undefined;
 	default_audience?: string | undefined;
 	default_organization?: string | undefined;
 	sessions?: {
@@ -21815,9 +22702,47 @@ declare const sqlTenantSchema: z.ZodObject<{
 	acr_values_supported?: string[] | undefined;
 	mtls?: {
 		enable_endpoint_aliases?: boolean | undefined;
-	} | undefined;
+	} | null | undefined;
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
+	attack_protection?: {
+		brute_force_protection?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			mode?: string | undefined;
+			max_attempts?: number | undefined;
+		} | undefined;
+		breached_password_detection?: {
+			method?: string | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			admin_notification_frequency?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+				"pre-change-password"?: {
+					shields?: string[] | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+		suspicious_ip_throttling?: {
+			allowlist?: string[] | undefined;
+			enabled?: boolean | undefined;
+			shields?: string[] | undefined;
+			stage?: {
+				"pre-user-registration"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+				"pre-login"?: {
+					max_attempts?: number | undefined;
+					rate?: number | undefined;
+				} | undefined;
+			} | undefined;
+		} | undefined;
+	} | undefined;
 	mfa?: {
 		policy?: "never" | "always" | undefined;
 		factors?: {
@@ -22053,6 +22978,7 @@ declare const sqlInviteSchema: z.ZodObject<{
 	send_invitation_email?: number | undefined;
 }>;
 declare const sqlClientSchema: z.ZodObject<{
+	client_id: z.ZodString;
 	tenant_id: z.ZodString;
 	global: z.ZodNumber;
 	is_first_party: z.ZodNumber;
@@ -22089,7 +23015,6 @@ declare const sqlClientSchema: z.ZodObject<{
 	owner_user_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
 	registration_type: z.ZodNullable<z.ZodOptional<z.ZodString>>;
 	registration_metadata: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-	client_id: z.ZodString;
 	name: z.ZodString;
 	description: z.ZodOptional<z.ZodString>;
 	client_secret: z.ZodOptional<z.ZodDefault<z.ZodString>>;
@@ -22391,11 +23316,33 @@ export interface Database {
 	user_roles: z.infer<typeof sqlUserRoleSchema>;
 	roles: z.infer<typeof sqlRoleSchema>;
 	organizations: z.infer<typeof sqlOrganizationSchema>;
+	organization_connections: {
+		tenant_id: string;
+		organization_id: string;
+		connection_id: string;
+		assign_membership_on_login: number;
+		show_as_button: number;
+		is_signup_enabled: number;
+		created_at: string;
+		updated_at: string;
+	};
 	user_organizations: z.infer<typeof sqlUserOrganizationSchema>;
 	invites: z.infer<typeof sqlInviteSchema>;
 	universal_login_templates: z.infer<typeof sqlUniversalLoginTemplateSchema>;
 	custom_text: z.infer<typeof sqlCustomTextSchema>;
 	authentication_methods: z.infer<typeof sqlAuthenticationMethodSchema>;
+	log_streams: {
+		id: string;
+		tenant_id: string;
+		name: string;
+		type: string;
+		status: string;
+		sink: string;
+		filters: string | null;
+		is_priority: number | null;
+		created_at: string;
+		updated_at: string;
+	};
 	outbox_events: {
 		id: string;
 		tenant_id: string;