@authhero/kysely-adapter 10.28.0 → 10.31.0

package/dist/kysely-adapter.d.ts

@@ -372,6 +372,7 @@ declare const applicationInsertSchema: z.ZodObject<{
 	]>>>;
 	client_secret: z.ZodOptional<z.ZodDefault<z.ZodString>>;
 	disable_sign_ups: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	client_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	id: string;
@@ -403,6 +404,7 @@ declare const applicationInsertSchema: z.ZodObject<{
 	} | undefined;
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }, {
 	name: string;
 	id: string;
@@ -434,8 +436,9 @@ declare const applicationInsertSchema: z.ZodObject<{
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
 	disable_sign_ups?: boolean | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }>;
-export type ApplicationInsert = z.infer<typeof applicationInsertSchema>;
+export type ApplicationInsert = z.input<typeof applicationInsertSchema>;
 declare const applicationSchema: z.ZodObject<{
 	id: z.ZodString;
 	name: z.ZodString;
@@ -543,6 +546,7 @@ declare const applicationSchema: z.ZodObject<{
 	]>>>;
 	client_secret: z.ZodOptional<z.ZodDefault<z.ZodString>>;
 	disable_sign_ups: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	client_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 	created_at: z.ZodEffects<z.ZodString, string, string>;
 	updated_at: z.ZodEffects<z.ZodString, string, string>;
 }, "strip", z.ZodTypeAny, {
@@ -578,6 +582,7 @@ declare const applicationSchema: z.ZodObject<{
 	} | undefined;
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }, {
 	created_at: string;
 	updated_at: string;
@@ -611,6 +616,7 @@ declare const applicationSchema: z.ZodObject<{
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
 	disable_sign_ups?: boolean | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }>;
 export type Application = z.infer<typeof applicationSchema>;
 declare enum AuthorizationResponseType {
@@ -980,6 +986,7 @@ declare const ClientSchema: z.ZodObject<{
 	]>>>;
 	client_secret: z.ZodOptional<z.ZodDefault<z.ZodString>>;
 	disable_sign_ups: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+	client_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 	created_at: z.ZodEffects<z.ZodString, string, string>;
 	updated_at: z.ZodEffects<z.ZodString, string, string>;
 }, "strip", z.ZodTypeAny, {
@@ -1059,6 +1066,7 @@ declare const ClientSchema: z.ZodObject<{
 	} | undefined;
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }, {
 	created_at: string;
 	updated_at: string;
@@ -1136,6 +1144,7 @@ declare const ClientSchema: z.ZodObject<{
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
 	disable_sign_ups?: boolean | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }>;
 export type Client = z.infer<typeof ClientSchema>;
 declare const codeTypeSchema: z.ZodEnum<[
@@ -5494,6 +5503,391 @@ declare const refreshTokenSchema: z.ZodObject<{
 	last_exchanged_at?: string | undefined;
 }>;
 export type RefreshToken = z.infer<typeof refreshTokenSchema>;
+declare const resourceServerInsertSchema: z.ZodObject<{
+	name: z.ZodString;
+	identifier: z.ZodString;
+	scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		value: z.ZodString;
+		description: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		value: string;
+		description?: string | undefined;
+	}, {
+		value: string;
+		description?: string | undefined;
+	}>, "many">>;
+	signing_alg: z.ZodOptional<z.ZodString>;
+	signing_secret: z.ZodOptional<z.ZodString>;
+	token_lifetime: z.ZodOptional<z.ZodNumber>;
+	token_lifetime_for_web: z.ZodOptional<z.ZodNumber>;
+	skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+	allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+	verificationKey: z.ZodOptional<z.ZodString>;
+	options: z.ZodOptional<z.ZodObject<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">>>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	identifier: string;
+	options?: z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}, {
+	name: string;
+	identifier: string;
+	options?: z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}>;
+export type ResourceServerInsert = z.input<typeof resourceServerInsertSchema>;
+declare const resourceServerSchema: z.ZodObject<{
+	name: z.ZodString;
+	identifier: z.ZodString;
+	scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		value: z.ZodString;
+		description: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		value: string;
+		description?: string | undefined;
+	}, {
+		value: string;
+		description?: string | undefined;
+	}>, "many">>;
+	signing_alg: z.ZodOptional<z.ZodString>;
+	signing_secret: z.ZodOptional<z.ZodString>;
+	token_lifetime: z.ZodOptional<z.ZodNumber>;
+	token_lifetime_for_web: z.ZodOptional<z.ZodNumber>;
+	skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+	allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+	verificationKey: z.ZodOptional<z.ZodString>;
+	options: z.ZodOptional<z.ZodObject<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">>>;
+	id: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	identifier: string;
+	options?: z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	id?: string | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}, {
+	name: string;
+	identifier: string;
+	options?: z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	id?: string | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}>;
+export type ResourceServer = z.infer<typeof resourceServerSchema>;
+declare const permissionSchema: z.ZodObject<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, z.ZodTypeAny, "passthrough">>;
+export type Permission = z.infer<typeof permissionSchema>;
+export type PermissionInsert = z.input<typeof permissionSchema>;
+declare const ruleInsertSchema: z.ZodObject<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	script: string;
+	enabled?: boolean | undefined;
+	order?: number | undefined;
+	stage?: string | undefined;
+}, {
+	name: string;
+	script: string;
+	enabled?: boolean | undefined;
+	order?: number | undefined;
+	stage?: string | undefined;
+}>;
+export type RuleInsert = z.input<typeof ruleInsertSchema>;
+declare const ruleSchema: z.ZodObject<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type Rule = z.infer<typeof ruleSchema>;
 export interface ListCodesResponse extends Totals {
 	codes: Code[];
 }
@@ -5646,6 +6040,36 @@ export interface FormsAdapter {
 	update(tenant_id: string, form_id: string, form: Partial<FormInsert>): Promise<boolean>;
 	list(tenant_id: string, params?: ListParams): Promise<ListFormsResponse>;
 }
+export interface ListResourceServersResponse extends Totals {
+	resource_servers: ResourceServer[];
+}
+export interface ResourceServersAdapter {
+	create(tenant_id: string, params: ResourceServerInsert): Promise<ResourceServer>;
+	get(tenant_id: string, id: string): Promise<ResourceServer | null>;
+	list(tenant_id: string, params?: ListParams): Promise<ListResourceServersResponse>;
+	update(tenant_id: string, id: string, resourceServer: Partial<ResourceServerInsert>): Promise<boolean>;
+	remove(tenant_id: string, id: string): Promise<boolean>;
+}
+export interface ListRulesResponse extends Totals {
+	rules: Rule[];
+}
+export interface RulesAdapter {
+	create(tenant_id: string, rule: RuleInsert): Promise<Rule>;
+	get(tenant_id: string, rule_id: string): Promise<Rule | null>;
+	list(tenant_id: string, params?: ListParams): Promise<ListRulesResponse>;
+	update(tenant_id: string, rule_id: string, rule: Partial<RuleInsert>): Promise<boolean>;
+	remove(tenant_id: string, rule_id: string): Promise<boolean>;
+}
+export interface ListPermissionsResponse extends Totals {
+	permissions: Permission[];
+}
+export interface PermissionsAdapter {
+	create(tenant_id: string, permission: PermissionInsert): Promise<Permission>;
+	get(tenant_id: string, permission_id: string): Promise<Permission | null>;
+	list(tenant_id: string, params?: ListParams): Promise<ListPermissionsResponse>;
+	update(tenant_id: string, permission_id: string, permission: Partial<PermissionInsert>): Promise<boolean>;
+	remove(tenant_id: string, permission_id: string): Promise<boolean>;
+}
 export interface DataAdapters {
 	applications: ApplicationsAdapter;
 	branding: BrandingAdapter;
@@ -5662,6 +6086,9 @@ export interface DataAdapters {
 	passwords: PasswordsAdapter;
 	promptSettings: PromptSettingsAdapter;
 	refreshTokens: RefreshTokensAdapter;
+	resourceServers: ResourceServersAdapter;
+	rules: RulesAdapter;
+	permissions: PermissionsAdapter;
 	sessions: SessionsAdapter;
 	tenants: TenantsDataAdapter;
 	themes: ThemesAdapter;
@@ -5755,6 +6182,7 @@ declare const sqlApplicationSchema: z.ZodObject<{
 		"enforced"
 	]>>>;
 	client_secret: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+	client_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 	created_at: z.ZodEffects<z.ZodString, string, string>;
 	updated_at: z.ZodEffects<z.ZodString, string, string>;
 }, "strip", z.ZodTypeAny, {
@@ -5772,6 +6200,7 @@ declare const sqlApplicationSchema: z.ZodObject<{
 	updated_at: string;
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }, {
 	tenant_id: string;
 	addons: string;
@@ -5787,6 +6216,7 @@ declare const sqlApplicationSchema: z.ZodObject<{
 	updated_at: string;
 	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 	client_secret?: string | undefined;
+	client_metadata?: Record<string, string> | undefined;
 }>;
 declare const sqlPromptSettingSchema: z.ZodObject<{
 	identifier_first: z.ZodNumber;
@@ -6328,6 +6758,105 @@ declare const sqlFormSchema: z.ZodObject<{
 		css?: string | undefined;
 	} | undefined;
 }>;
+declare const sqlResourceServerSchema: z.ZodObject<{
+	tenant_id: z.ZodString;
+	scopes: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+	options: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+	skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodNumber>;
+	allow_offline_access: z.ZodOptional<z.ZodNumber>;
+	name: z.ZodString;
+	identifier: z.ZodString;
+	signing_alg: z.ZodOptional<z.ZodString>;
+	signing_secret: z.ZodOptional<z.ZodString>;
+	token_lifetime: z.ZodOptional<z.ZodNumber>;
+	token_lifetime_for_web: z.ZodOptional<z.ZodNumber>;
+	verificationKey: z.ZodOptional<z.ZodString>;
+	id: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	options: string;
+	tenant_id: string;
+	name: string;
+	scopes: string;
+	identifier: string;
+	id?: string | undefined;
+	skip_consent_for_verifiable_first_party_clients?: number | undefined;
+	allow_offline_access?: number | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	verificationKey?: string | undefined;
+}, {
+	tenant_id: string;
+	name: string;
+	identifier: string;
+	options?: string | undefined;
+	id?: string | undefined;
+	scopes?: string | undefined;
+	skip_consent_for_verifiable_first_party_clients?: number | undefined;
+	allow_offline_access?: number | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	verificationKey?: string | undefined;
+}>;
+declare const sqlRuleSchema: z.ZodObject<{
+	tenant_id: z.ZodString;
+	enabled: z.ZodOptional<z.ZodNumber>;
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	tenant_id: string;
+	id: string;
+	name: string;
+	script: string;
+	enabled?: number | undefined;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	order?: number | undefined;
+	stage?: string | undefined;
+}, {
+	tenant_id: string;
+	id: string;
+	name: string;
+	script: string;
+	enabled?: number | undefined;
+	created_at?: string | undefined;
+	updated_at?: string | undefined;
+	order?: number | undefined;
+	stage?: string | undefined;
+}>;
+declare const sqlPermissionSchema: z.ZodObject<{
+	tenant_id: z.ZodString;
+	sources: z.ZodOptional<z.ZodString>;
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+	tenant_id: string;
+	id: string;
+	permission_name: string;
+	resource_server_identifier: string;
+	resource_server_name: string;
+	description?: string | null | undefined;
+	sources?: string | undefined;
+}, {
+	tenant_id: string;
+	id: string;
+	permission_name: string;
+	resource_server_identifier: string;
+	resource_server_name: string;
+	description?: string | null | undefined;
+	sources?: string | undefined;
+}>;
 export interface Database {
 	applications: z.infer<typeof sqlApplicationSchema>;
 	branding: z.infer<typeof sqlBrandingSchema>;
@@ -6353,6 +6882,9 @@ export interface Database {
 	sessions: z.infer<typeof sqlSessionSchema>;
 	tenants: Tenant;
 	themes: z.infer<typeof sqlThemeSchema>;
+	resource_servers: z.infer<typeof sqlResourceServerSchema>;
+	rules: z.infer<typeof sqlRuleSchema>;
+	permissions: z.infer<typeof sqlPermissionSchema>;
 }
 export declare function migrateToLatest(db: Kysely<Database>, debug?: boolean): Promise<void>;
 export declare function migrateDown(db: Kysely<Database>): Promise<void>;