@authhero/kysely-adapter 10.136.0 → 11.1.0

package/dist/kysely-adapter.d.ts

@@ -37,6 +37,8 @@ declare const actionInsertSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}>, "many">>;
+	is_system: z.ZodOptional<z.ZodBoolean>;
+	inherit: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
 	code: string;
 	name: string;
@@ -53,6 +55,8 @@ declare const actionInsertSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}[] | undefined;
+	is_system?: boolean | undefined;
+	inherit?: boolean | undefined;
 }, {
 	code: string;
 	name: string;
@@ -69,6 +73,8 @@ declare const actionInsertSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}[] | undefined;
+	is_system?: boolean | undefined;
+	inherit?: boolean | undefined;
 }>;
 export type ActionInsert = z.infer<typeof actionInsertSchema>;
 declare const actionUpdateSchema: z.ZodObject<{
@@ -105,6 +111,8 @@ declare const actionUpdateSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}>, "many">>>;
+	is_system: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+	inherit: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
 } & {
 	status: z.ZodOptional<z.ZodEnum<[
 		"draft",
@@ -128,6 +136,8 @@ declare const actionUpdateSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}[] | undefined;
+	is_system?: boolean | undefined;
+	inherit?: boolean | undefined;
 	deployed_at?: string | undefined;
 }, {
 	code?: string | undefined;
@@ -146,6 +156,8 @@ declare const actionUpdateSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}[] | undefined;
+	is_system?: boolean | undefined;
+	inherit?: boolean | undefined;
 	deployed_at?: string | undefined;
 }>;
 export type ActionUpdate = z.infer<typeof actionUpdateSchema>;
@@ -173,6 +185,8 @@ declare const actionSchema: z.ZodObject<{
 		version: string;
 		name: string;
 	}>, "many">>;
+	is_system: z.ZodOptional<z.ZodBoolean>;
+	inherit: z.ZodOptional<z.ZodBoolean>;
 } & {
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
@@ -214,6 +228,8 @@ declare const actionSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}[] | undefined;
+	is_system?: boolean | undefined;
+	inherit?: boolean | undefined;
 	deployed_at?: string | undefined;
 }, {
 	created_at: string;
@@ -236,6 +252,8 @@ declare const actionSchema: z.ZodObject<{
 		name: string;
 		value?: string | undefined;
 	}[] | undefined;
+	is_system?: boolean | undefined;
+	inherit?: boolean | undefined;
 	deployed_at?: string | undefined;
 }>;
 export type Action = z.infer<typeof actionSchema>;
@@ -2262,7 +2280,6 @@ declare const clientInsertSchema: z.ZodObject<{
 		"private_key_jwt"
 	]>>>;
 	client_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>>;
-	disable_sign_ups: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 	hide_sign_up_disabled_error: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 	mobile: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	initiate_login_uri: z.ZodOptional<z.ZodString>;
@@ -2379,7 +2396,6 @@ declare const clientInsertSchema: z.ZodObject<{
 	addons?: Record<string, any> | undefined;
 	token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
 	client_metadata?: Record<string, string> | undefined;
-	disable_sign_ups?: boolean | undefined;
 	hide_sign_up_disabled_error?: boolean | undefined;
 	mobile?: Record<string, any> | undefined;
 	initiate_login_uri?: string | undefined;
@@ -2440,7 +2456,6 @@ declare const clientInsertSchema: z.ZodObject<{
 	addons?: Record<string, any> | undefined;
 	token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
 	client_metadata?: Record<string, string> | undefined;
-	disable_sign_ups?: boolean | undefined;
 	hide_sign_up_disabled_error?: boolean | undefined;
 	mobile?: Record<string, any> | undefined;
 	initiate_login_uri?: string | undefined;
@@ -2528,7 +2543,6 @@ declare const clientSchema: z.ZodObject<{
 		"private_key_jwt"
 	]>>>;
 	client_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>>;
-	disable_sign_ups: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 	hide_sign_up_disabled_error: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 	mobile: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 	initiate_login_uri: z.ZodOptional<z.ZodString>;
@@ -2649,7 +2663,6 @@ declare const clientSchema: z.ZodObject<{
 	addons?: Record<string, any> | undefined;
 	token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
 	client_metadata?: Record<string, string> | undefined;
-	disable_sign_ups?: boolean | undefined;
 	hide_sign_up_disabled_error?: boolean | undefined;
 	mobile?: Record<string, any> | undefined;
 	initiate_login_uri?: string | undefined;
@@ -2712,7 +2725,6 @@ declare const clientSchema: z.ZodObject<{
 	addons?: Record<string, any> | undefined;
 	token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
 	client_metadata?: Record<string, string> | undefined;
-	disable_sign_ups?: boolean | undefined;
 	hide_sign_up_disabled_error?: boolean | undefined;
 	mobile?: Record<string, any> | undefined;
 	initiate_login_uri?: string | undefined;
@@ -2752,19 +2764,19 @@ declare const clientGrantInsertSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
 	client_id: string;
 	audience: string;
+	is_system?: boolean | undefined;
 	scope?: string[] | undefined;
 	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
-	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
 	authorization_details_types?: string[] | undefined;
 }, {
 	client_id: string;
 	audience: string;
+	is_system?: boolean | undefined;
 	scope?: string[] | undefined;
 	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
-	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
 	authorization_details_types?: string[] | undefined;
 }>;
@@ -2794,10 +2806,10 @@ declare const clientGrantSchema: z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
+	is_system?: boolean | undefined;
 	scope?: string[] | undefined;
 	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
-	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
 	authorization_details_types?: string[] | undefined;
 }, {
@@ -2806,10 +2818,10 @@ declare const clientGrantSchema: z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
+	is_system?: boolean | undefined;
 	scope?: string[] | undefined;
 	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
-	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
 	authorization_details_types?: string[] | undefined;
 }>;
@@ -3201,6 +3213,22 @@ declare const connectionInsertSchema: z.ZodObject<{
 		disable_signup: z.ZodOptional<z.ZodBoolean>;
 		brute_force_protection: z.ZodOptional<z.ZodBoolean>;
 		import_mode: z.ZodOptional<z.ZodBoolean>;
+		configuration: z.ZodOptional<z.ZodObject<{
+			token_endpoint: z.ZodOptional<z.ZodString>;
+			userinfo_endpoint: z.ZodOptional<z.ZodString>;
+			client_id: z.ZodOptional<z.ZodString>;
+			client_secret: z.ZodOptional<z.ZodString>;
+		}, "strip", z.ZodTypeAny, {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		}, {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		}>>;
 		attributes: z.ZodOptional<z.ZodObject<{
 			email: z.ZodOptional<z.ZodObject<{
 				identifier: z.ZodOptional<z.ZodObject<{
@@ -3604,6 +3632,12 @@ declare const connectionInsertSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -3710,6 +3744,12 @@ declare const connectionInsertSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -3816,6 +3856,12 @@ declare const connectionInsertSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -3931,6 +3977,12 @@ declare const connectionInsertSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -4095,6 +4147,22 @@ declare const connectionSchema: z.ZodObject<{
 		disable_signup: z.ZodOptional<z.ZodBoolean>;
 		brute_force_protection: z.ZodOptional<z.ZodBoolean>;
 		import_mode: z.ZodOptional<z.ZodBoolean>;
+		configuration: z.ZodOptional<z.ZodObject<{
+			token_endpoint: z.ZodOptional<z.ZodString>;
+			userinfo_endpoint: z.ZodOptional<z.ZodString>;
+			client_id: z.ZodOptional<z.ZodString>;
+			client_secret: z.ZodOptional<z.ZodString>;
+		}, "strip", z.ZodTypeAny, {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		}, {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		}>>;
 		attributes: z.ZodOptional<z.ZodObject<{
 			email: z.ZodOptional<z.ZodObject<{
 				identifier: z.ZodOptional<z.ZodObject<{
@@ -4498,6 +4566,12 @@ declare const connectionSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -4604,6 +4678,12 @@ declare const connectionSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -4710,6 +4790,12 @@ declare const connectionSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -4827,6 +4913,12 @@ declare const connectionSchema: z.ZodObject<{
 		disable_signup?: boolean | undefined;
 		brute_force_protection?: boolean | undefined;
 		import_mode?: boolean | undefined;
+		configuration?: {
+			client_id?: string | undefined;
+			client_secret?: string | undefined;
+			token_endpoint?: string | undefined;
+			userinfo_endpoint?: string | undefined;
+		} | undefined;
 		attributes?: {
 			email?: {
 				validation?: {
@@ -17416,6 +17508,129 @@ declare const logStreamSchema: z.ZodObject<{
 	isPriority?: boolean | undefined;
 }>;
 export type LogStream = z.infer<typeof logStreamSchema>;
+declare const migrationSourceInsertSchema: z.ZodObject<{
+	id: z.ZodOptional<z.ZodString>;
+	name: z.ZodString;
+	provider: z.ZodEnum<[
+		"auth0",
+		"cognito",
+		"okta",
+		"oidc"
+	]>;
+	connection: z.ZodString;
+	enabled: z.ZodDefault<z.ZodBoolean>;
+	credentials: z.ZodObject<{
+		domain: z.ZodString;
+		client_id: z.ZodString;
+		client_secret: z.ZodString;
+		audience: z.ZodOptional<z.ZodString>;
+		scope: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	}, {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	}>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	connection: string;
+	provider: "auth0" | "cognito" | "okta" | "oidc";
+	enabled: boolean;
+	credentials: {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	};
+	id?: string | undefined;
+}, {
+	name: string;
+	connection: string;
+	provider: "auth0" | "cognito" | "okta" | "oidc";
+	credentials: {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	};
+	id?: string | undefined;
+	enabled?: boolean | undefined;
+}>;
+export type MigrationSourceInsert = z.infer<typeof migrationSourceInsertSchema>;
+declare const migrationSourceSchema: z.ZodObject<{
+	created_at: z.ZodString;
+	updated_at: z.ZodString;
+} & {
+	id: z.ZodOptional<z.ZodString>;
+	name: z.ZodString;
+	provider: z.ZodEnum<[
+		"auth0",
+		"cognito",
+		"okta",
+		"oidc"
+	]>;
+	connection: z.ZodString;
+	enabled: z.ZodDefault<z.ZodBoolean>;
+	credentials: z.ZodObject<{
+		domain: z.ZodString;
+		client_id: z.ZodString;
+		client_secret: z.ZodString;
+		audience: z.ZodOptional<z.ZodString>;
+		scope: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	}, {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	}>;
+}, "strip", z.ZodTypeAny, {
+	created_at: string;
+	updated_at: string;
+	name: string;
+	connection: string;
+	provider: "auth0" | "cognito" | "okta" | "oidc";
+	enabled: boolean;
+	credentials: {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	};
+	id?: string | undefined;
+}, {
+	created_at: string;
+	updated_at: string;
+	name: string;
+	connection: string;
+	provider: "auth0" | "cognito" | "okta" | "oidc";
+	credentials: {
+		client_id: string;
+		client_secret: string;
+		domain: string;
+		audience?: string | undefined;
+		scope?: string | undefined;
+	};
+	id?: string | undefined;
+	enabled?: boolean | undefined;
+}>;
+export type MigrationSource = z.infer<typeof migrationSourceSchema>;
 declare const passwordInsertSchema: z.ZodObject<{
 	id: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodString;
@@ -19884,11 +20099,11 @@ declare const resourceServerInsertSchema: z.ZodObject<{
 		enable_introspection_endpoint?: boolean | undefined;
 	} | undefined;
 	id?: string | undefined;
+	is_system?: boolean | undefined;
 	scopes?: {
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
-	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
@@ -19910,12 +20125,12 @@ declare const resourceServerInsertSchema: z.ZodObject<{
 		enable_introspection_endpoint?: boolean | undefined;
 	} | undefined;
 	id?: string | undefined;
+	is_system?: boolean | undefined;
 	scopes?: {
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
 	token_lifetime?: number | undefined;
-	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
@@ -20007,11 +20222,11 @@ declare const resourceServerSchema: z.ZodObject<{
 		enable_introspection_endpoint?: boolean | undefined;
 	} | undefined;
 	id?: string | undefined;
+	is_system?: boolean | undefined;
 	scopes?: {
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
-	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
@@ -20035,12 +20250,12 @@ declare const resourceServerSchema: z.ZodObject<{
 		enable_introspection_endpoint?: boolean | undefined;
 	} | undefined;
 	id?: string | undefined;
+	is_system?: boolean | undefined;
 	scopes?: {
 		value: string;
 		description?: string | undefined;
 	}[] | undefined;
 	token_lifetime?: number | undefined;
-	is_system?: boolean | undefined;
 	metadata?: Record<string, any> | undefined;
 	signing_alg?: string | undefined;
 	signing_secret?: string | undefined;
@@ -20539,6 +20754,73 @@ declare const dailyStatsSchema: z.ZodObject<{
 	leaked_passwords: number;
 }>;
 export type DailyStats = z.infer<typeof dailyStatsSchema>;
+declare const analyticsResourceSchema: z.ZodEnum<[
+	"active-users",
+	"logins",
+	"signups",
+	"refresh-tokens",
+	"sessions"
+]>;
+export type AnalyticsResource = z.infer<typeof analyticsResourceSchema>;
+declare const analyticsIntervalSchema: z.ZodEnum<[
+	"hour",
+	"day",
+	"week",
+	"month"
+]>;
+export type AnalyticsInterval = z.infer<typeof analyticsIntervalSchema>;
+declare const analyticsGroupBySchema: z.ZodEnum<[
+	"time",
+	"connection",
+	"client_id",
+	"user_type",
+	"event"
+]>;
+export type AnalyticsGroupBy = z.infer<typeof analyticsGroupBySchema>;
+declare const analyticsUserTypeSchema: z.ZodEnum<[
+	"password",
+	"social",
+	"passwordless",
+	"enterprise"
+]>;
+export type AnalyticsUserType = z.infer<typeof analyticsUserTypeSchema>;
+export interface AnalyticsFilters {
+	connection?: string[];
+	client_id?: string[];
+	user_type?: AnalyticsUserType[];
+	user_id?: string[];
+}
+export interface AnalyticsQueryParams {
+	/** Inclusive lower bound, ISO 8601 datetime in UTC */
+	from: string;
+	/** Exclusive upper bound, ISO 8601 datetime in UTC */
+	to: string;
+	interval: AnalyticsInterval;
+	/** IANA timezone for bucket boundaries */
+	tz: string;
+	filters: AnalyticsFilters;
+	group_by: AnalyticsGroupBy[];
+	limit: number;
+	offset: number;
+	/** Column name, prefix with `-` for descending */
+	order_by?: string;
+}
+export interface AnalyticsColumnMeta {
+	name: string;
+	/** ClickHouse-style type label (e.g. "Date", "String", "UInt64", "DateTime") */
+	type: string;
+}
+export interface AnalyticsQueryResponse {
+	meta: AnalyticsColumnMeta[];
+	data: Array<Record<string, unknown>>;
+	rows: number;
+	rows_before_limit_at_least?: number;
+	statistics?: {
+		elapsed: number;
+		rows_read?: number;
+		bytes_read?: number;
+	};
+}
 declare const promptScreenSchema: z.ZodEnum<[
 	"login",
 	"login-id",
@@ -20952,6 +21234,13 @@ export interface LogStreamsAdapter {
 	update(tenant_id: string, id: string, params: Partial<LogStream>): Promise<boolean>;
 	remove(tenant_id: string, id: string): Promise<boolean>;
 }
+export interface MigrationSourcesAdapter {
+	create: (tenant_id: string, migration_source: MigrationSourceInsert) => Promise<MigrationSource>;
+	get: (tenant_id: string, id: string) => Promise<MigrationSource | null>;
+	list: (tenant_id: string) => Promise<MigrationSource[]>;
+	remove: (tenant_id: string, id: string) => Promise<boolean>;
+	update: (tenant_id: string, id: string, migration_source: Partial<MigrationSourceInsert>) => Promise<boolean>;
+}
 export interface ListConnectionsResponse extends Totals {
 	connections: Connection[];
 }
@@ -21195,6 +21484,14 @@ export interface StatsAdapter {
 	 */
 	getActiveUsers(tenantId: string): Promise<number>;
 }
+export interface AnalyticsAdapter {
+	/**
+	 * Run an analytics query for a tenant. The adapter is responsible for
+	 * injecting the tenant_id predicate; the route handler never trusts a
+	 * tenant value from a client-controlled source.
+	 */
+	query(tenantId: string, resource: AnalyticsResource, params: AnalyticsQueryParams): Promise<AnalyticsQueryResponse>;
+}
 export interface UniversalLoginTemplate {
 	body: string;
 }
@@ -21366,6 +21663,12 @@ export interface DataAdapters {
 	loginSessions: LoginSessionsAdapter;
 	logs: LogsDataAdapter;
 	logStreams?: LogStreamsAdapter;
+	/**
+	 * Optional tenant-level migration sources for lazy refresh-token re-mint
+	 * against upstream IdPs (Auth0, Cognito, Okta, generic OIDC). When unset,
+	 * unrecognized refresh tokens fail with `invalid_grant` as usual.
+	 */
+	migrationSources?: MigrationSourcesAdapter;
 	passwords: PasswordsAdapter;
 	promptSettings: PromptSettingsAdapter;
 	refreshTokens: RefreshTokensAdapter;
@@ -21375,6 +21678,12 @@ export interface DataAdapters {
 	roles: RolesAdapter;
 	sessions: SessionsAdapter;
 	stats?: StatsAdapter;
+	/**
+	 * Optional richer analytics surface, exposed via `/api/v2/analytics/*`.
+	 * Returns ClickHouse-style `{ meta, data }` responses with filtering and
+	 * grouping. Unlike `stats`, this is not Auth0 wire-compatible.
+	 */
+	analytics?: AnalyticsAdapter;
 	tenants: TenantsDataAdapter;
 	themes: ThemesAdapter;
 	universalLoginTemplates: UniversalLoginTemplatesAdapter;
@@ -21896,6 +22205,8 @@ declare const sqlActionSchema: z.ZodObject<{
 	dependencies: z.ZodNullable<z.ZodOptional<z.ZodString>>;
 	supported_triggers: z.ZodNullable<z.ZodOptional<z.ZodString>>;
 	deployed_at_ts: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
+	is_system: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
+	inherit: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
 	created_at_ts: z.ZodNumber;
 	updated_at_ts: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
@@ -21906,11 +22217,13 @@ declare const sqlActionSchema: z.ZodObject<{
 	id: string;
 	name: string;
 	status?: string | null | undefined;
+	is_system?: number | null | undefined;
 	runtime?: string | null | undefined;
 	secrets?: string | null | undefined;
 	dependencies?: string | null | undefined;
 	supported_triggers?: string | null | undefined;
 	deployed_at_ts?: number | null | undefined;
+	inherit?: number | null | undefined;
 }, {
 	code: string;
 	tenant_id: string;
@@ -21919,11 +22232,13 @@ declare const sqlActionSchema: z.ZodObject<{
 	id: string;
 	name: string;
 	status?: string | null | undefined;
+	is_system?: number | null | undefined;
 	runtime?: string | null | undefined;
 	secrets?: string | null | undefined;
 	dependencies?: string | null | undefined;
 	supported_triggers?: string | null | undefined;
 	deployed_at_ts?: number | null | undefined;
+	inherit?: number | null | undefined;
 }>;
 declare const sqlActionExecutionSchema: z.ZodObject<{
 	id: z.ZodString;
@@ -23877,7 +24192,6 @@ declare const sqlClientSchema: z.ZodObject<{
 	custom_login_page_on: z.ZodNumber;
 	require_pushed_authorization_requests: z.ZodNumber;
 	require_proof_of_possession: z.ZodNumber;
-	disable_sign_ups: z.ZodNumber;
 	hide_sign_up_disabled_error: z.ZodNumber;
 	callbacks: z.ZodString;
 	allowed_origins: z.ZodString;
@@ -23991,7 +24305,6 @@ declare const sqlClientSchema: z.ZodObject<{
 	custom_login_page_on: number;
 	require_pushed_authorization_requests: number;
 	require_proof_of_possession: number;
-	disable_sign_ups: number;
 	hide_sign_up_disabled_error: number;
 	callbacks: string;
 	allowed_origins: string;
@@ -24049,7 +24362,6 @@ declare const sqlClientSchema: z.ZodObject<{
 	custom_login_page_on: number;
 	require_pushed_authorization_requests: number;
 	require_proof_of_possession: number;
-	disable_sign_ups: number;
 	hide_sign_up_disabled_error: number;
 	callbacks: string;
 	allowed_origins: string;
@@ -24241,6 +24553,17 @@ export interface Database {
 		created_at: string;
 		updated_at: string;
 	};
+	migration_sources: {
+		id: string;
+		tenant_id: string;
+		name: string;
+		provider: string;
+		connection: string;
+		enabled: number;
+		credentials: string;
+		created_at: string;
+		updated_at: string;
+	};
 	outbox_events: {
 		id: string;
 		tenant_id: string;