@blen/fedreg-mcp-server 2.0.11 → 2.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (76) hide show
  1. package/CHANGELOG.md +13 -1
  2. package/README.md +14 -2
  3. package/dist/accounts/app.d.ts +18 -0
  4. package/dist/accounts/app.d.ts.map +1 -0
  5. package/dist/accounts/app.js +377 -0
  6. package/dist/accounts/app.js.map +1 -0
  7. package/dist/accounts/config.d.ts +21 -0
  8. package/dist/accounts/config.d.ts.map +1 -0
  9. package/dist/accounts/config.js +55 -0
  10. package/dist/accounts/config.js.map +1 -0
  11. package/dist/accounts/crypto.d.ts +18 -0
  12. package/dist/accounts/crypto.d.ts.map +1 -0
  13. package/dist/accounts/crypto.js +43 -0
  14. package/dist/accounts/crypto.js.map +1 -0
  15. package/dist/accounts/paths.d.ts +10 -0
  16. package/dist/accounts/paths.d.ts.map +1 -0
  17. package/dist/accounts/paths.js +10 -0
  18. package/dist/accounts/paths.js.map +1 -0
  19. package/dist/accounts/portal.d.ts +8 -0
  20. package/dist/accounts/portal.d.ts.map +1 -0
  21. package/dist/accounts/portal.js +171 -0
  22. package/dist/accounts/portal.js.map +1 -0
  23. package/dist/accounts/provider.d.ts +2568 -0
  24. package/dist/accounts/provider.d.ts.map +1 -0
  25. package/dist/accounts/provider.js +108 -0
  26. package/dist/accounts/provider.js.map +1 -0
  27. package/dist/accounts/runtime.d.ts +22 -0
  28. package/dist/accounts/runtime.d.ts.map +1 -0
  29. package/dist/accounts/runtime.js +137 -0
  30. package/dist/accounts/runtime.js.map +1 -0
  31. package/dist/accounts/store.d.ts +25 -0
  32. package/dist/accounts/store.d.ts.map +1 -0
  33. package/dist/accounts/store.js +142 -0
  34. package/dist/accounts/store.js.map +1 -0
  35. package/dist/bin.js +14 -3
  36. package/dist/bin.js.map +1 -1
  37. package/dist/sdk/bindings.js +1 -1
  38. package/dist/sdk/bindings.js.map +1 -1
  39. package/dist/sdk/sources/corpus-loader.d.ts +3 -1
  40. package/dist/sdk/sources/corpus-loader.d.ts.map +1 -1
  41. package/dist/sdk/sources/corpus-loader.js +10 -2
  42. package/dist/sdk/sources/corpus-loader.js.map +1 -1
  43. package/dist/sdk/sources/source.d.ts +2 -5
  44. package/dist/sdk/sources/source.d.ts.map +1 -1
  45. package/dist/server/http.d.ts +1 -0
  46. package/dist/server/http.d.ts.map +1 -1
  47. package/dist/server/http.js +1 -1
  48. package/dist/server/http.js.map +1 -1
  49. package/dist/server/mcpServer.js +1 -1
  50. package/dist/server/mcpServer.js.map +1 -1
  51. package/dist/server/toolCatalog.d.ts +2 -1
  52. package/dist/server/toolCatalog.d.ts.map +1 -1
  53. package/dist/server/toolCatalog.js.map +1 -1
  54. package/dist/server/zodToJsonSchema.d.ts +1 -1
  55. package/dist/server/zodToJsonSchema.d.ts.map +1 -1
  56. package/dist/tools/describeSchema.d.ts +1 -1
  57. package/dist/tools/describeSchema.d.ts.map +1 -1
  58. package/dist/tools/describeSchema.js +1 -1
  59. package/dist/tools/describeSchema.js.map +1 -1
  60. package/dist/tools/execute.d.ts +4 -2
  61. package/dist/tools/execute.d.ts.map +1 -1
  62. package/dist/tools/execute.js +5 -4
  63. package/dist/tools/execute.js.map +1 -1
  64. package/dist/tools/searchApi.d.ts +1 -1
  65. package/dist/tools/searchApi.d.ts.map +1 -1
  66. package/dist/tools/searchApi.js +1 -1
  67. package/dist/tools/searchApi.js.map +1 -1
  68. package/dist/util/httpClient.d.ts +9 -4
  69. package/dist/util/httpClient.d.ts.map +1 -1
  70. package/dist/util/httpClient.js +1 -1
  71. package/dist/util/httpClient.js.map +1 -1
  72. package/dist/web/assets/blen-logo-BKJFojyj.png +0 -0
  73. package/dist/web/assets/index-BcPp-Yki.css +2 -0
  74. package/dist/web/assets/index-pTfbTXY9.js +299 -0
  75. package/dist/web/index.html +14 -0
  76. package/package.json +35 -7
@@ -0,0 +1,2568 @@
1
+ import type { AccountConfig } from './config.js';
2
+ import type { Store } from './store.js';
3
+ export declare const SCOPES: string[];
4
+ /** Same Google / OAuth provider as Data.gov, scoped to personal accounts. */
5
+ export declare function createAuth(config: AccountConfig, store: Store): import("better-auth").Auth<{
6
+ baseURL: string;
7
+ basePath: string;
8
+ secret: string;
9
+ database: import("pg").Pool;
10
+ trustedOrigins: string[];
11
+ logger: {
12
+ disabled: true;
13
+ };
14
+ advanced: {
15
+ useSecureCookies: boolean;
16
+ };
17
+ rateLimit: {
18
+ enabled: boolean;
19
+ };
20
+ session: {
21
+ expiresIn: number;
22
+ cookieCache: {
23
+ enabled: false;
24
+ };
25
+ };
26
+ account: {
27
+ encryptOAuthTokens: true;
28
+ accountLinking: {
29
+ enabled: false;
30
+ };
31
+ };
32
+ emailAndPassword: {
33
+ enabled: false;
34
+ };
35
+ disabledPaths: string[];
36
+ socialProviders: {
37
+ google: {
38
+ clientId: string;
39
+ clientSecret: string;
40
+ accessType: "online";
41
+ prompt: "select_account";
42
+ };
43
+ };
44
+ hooks: {
45
+ before: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
46
+ };
47
+ plugins: [{
48
+ id: "oauth-provider";
49
+ version: string;
50
+ options: NoInfer<import("@better-auth/oauth-provider").OAuthOptions<import("@better-auth/oauth-provider").Scope[]>>;
51
+ onRequest: (request: Request, ctx: import("better-auth").AuthContext) => Promise<{
52
+ response: Response;
53
+ } | {
54
+ request: Request;
55
+ } | void>;
56
+ init: (ctx: import("better-auth").AuthContext) => Promise<{
57
+ options: {
58
+ databaseHooks: {
59
+ session: {
60
+ delete: {
61
+ before(session: {
62
+ id: string;
63
+ createdAt: Date;
64
+ updatedAt: Date;
65
+ userId: string;
66
+ expiresAt: Date;
67
+ token: string;
68
+ ipAddress?: string | null | undefined;
69
+ userAgent?: string | null | undefined;
70
+ } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
71
+ after(session: {
72
+ id: string;
73
+ createdAt: Date;
74
+ updatedAt: Date;
75
+ userId: string;
76
+ expiresAt: Date;
77
+ token: string;
78
+ ipAddress?: string | null | undefined;
79
+ userAgent?: string | null | undefined;
80
+ } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
81
+ };
82
+ };
83
+ };
84
+ };
85
+ }>;
86
+ hooks: {
87
+ before: {
88
+ matcher(ctx: import("better-auth").HookEndpointContext): any;
89
+ handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
90
+ }[];
91
+ after: {
92
+ matcher(ctx: import("better-auth").HookEndpointContext): boolean;
93
+ handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
94
+ redirect: true;
95
+ url: string;
96
+ } | undefined>>;
97
+ }[];
98
+ };
99
+ endpoints: {
100
+ getOAuthServerConfig: import("better-auth").StrictEndpoint<"/.well-known/oauth-authorization-server", {
101
+ method: "GET";
102
+ metadata: {
103
+ SERVER_ONLY: true;
104
+ };
105
+ }, import("@better-auth/oauth-provider").AuthServerMetadata>;
106
+ getOpenIdConfig: import("better-auth").StrictEndpoint<"/.well-known/openid-configuration", {
107
+ method: "GET";
108
+ metadata: {
109
+ SERVER_ONLY: true;
110
+ };
111
+ }, {
112
+ jwks_uri?: string | undefined;
113
+ userinfo_endpoint: string;
114
+ acr_values_supported?: string[] | undefined;
115
+ subject_types_supported: ("public" | "pairwise")[];
116
+ claims_supported: string[];
117
+ claims_parameter_supported?: boolean | undefined;
118
+ end_session_endpoint: string;
119
+ request_parameter_supported?: boolean | undefined;
120
+ request_uri_parameter_supported?: boolean | undefined;
121
+ prompt_values_supported: import("@better-auth/oauth-provider").Prompt[];
122
+ issuer: string;
123
+ authorization_endpoint: string;
124
+ token_endpoint: string;
125
+ registration_endpoint?: string | undefined;
126
+ scopes_supported?: string[] | undefined;
127
+ response_types_supported: "code"[];
128
+ response_modes_supported: "query"[];
129
+ grant_types_supported: import("@better-auth/oauth-provider").GrantType[];
130
+ token_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
131
+ token_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
132
+ service_documentation?: string | undefined;
133
+ ui_locales_supported?: string[] | undefined;
134
+ op_policy_uri?: string | undefined;
135
+ op_tos_uri?: string | undefined;
136
+ revocation_endpoint?: string | undefined;
137
+ revocation_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
138
+ revocation_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
139
+ introspection_endpoint?: string | undefined;
140
+ introspection_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
141
+ introspection_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
142
+ code_challenge_methods_supported: "S256"[];
143
+ authorization_response_iss_parameter_supported?: boolean | undefined;
144
+ client_id_metadata_document_supported?: boolean | undefined;
145
+ backchannel_logout_supported?: boolean | undefined;
146
+ backchannel_logout_session_supported?: boolean | undefined;
147
+ dpop_signing_alg_values_supported?: import("better-auth/plugins").JWSAlgorithms[] | undefined;
148
+ id_token_signing_alg_values_supported: import("better-auth/plugins").JWSAlgorithms[] | ["HS256"];
149
+ }>;
150
+ oauth2Authorize: import("better-auth").StrictEndpoint<"/oauth2/authorize", {
151
+ method: ("GET" | "POST")[];
152
+ body: import("zod").ZodObject<{}, import("zod/v4/core").$loose>;
153
+ redirectOnError: import("@better-auth/oauth-provider").OAuthRedirectOnError<import("better-auth").GenericEndpointContext, {
154
+ redirect: true;
155
+ url: string;
156
+ }>;
157
+ metadata: {
158
+ allowedMediaTypes: string[];
159
+ openapi: {
160
+ description: string;
161
+ parameters: ({
162
+ name: string;
163
+ in: "query";
164
+ required: false;
165
+ schema: {
166
+ type: "string";
167
+ format?: undefined;
168
+ minimum?: undefined;
169
+ items?: undefined;
170
+ };
171
+ description: string;
172
+ } | {
173
+ name: string;
174
+ in: "query";
175
+ required: true;
176
+ schema: {
177
+ type: "string";
178
+ format?: undefined;
179
+ minimum?: undefined;
180
+ items?: undefined;
181
+ };
182
+ description: string;
183
+ } | {
184
+ name: string;
185
+ in: "query";
186
+ required: false;
187
+ schema: {
188
+ type: "string";
189
+ format: string;
190
+ minimum?: undefined;
191
+ items?: undefined;
192
+ };
193
+ description: string;
194
+ } | {
195
+ name: string;
196
+ in: "query";
197
+ required: false;
198
+ schema: {
199
+ type: "integer";
200
+ minimum: number;
201
+ format?: undefined;
202
+ items?: undefined;
203
+ };
204
+ description: string;
205
+ } | {
206
+ name: string;
207
+ in: "query";
208
+ required: false;
209
+ schema: {
210
+ type: "array";
211
+ items: {
212
+ type: "string";
213
+ };
214
+ format?: undefined;
215
+ minimum?: undefined;
216
+ };
217
+ description: string;
218
+ })[];
219
+ responses: {
220
+ "302": {
221
+ description: string;
222
+ headers: {
223
+ Location: {
224
+ description: string;
225
+ schema: {
226
+ type: string;
227
+ format: string;
228
+ };
229
+ };
230
+ };
231
+ };
232
+ "400": {
233
+ description: string;
234
+ content: {
235
+ "application/json": {
236
+ schema: {
237
+ type: "object";
238
+ properties: {
239
+ error: {
240
+ type: string;
241
+ };
242
+ error_description: {
243
+ type: string;
244
+ };
245
+ state: {
246
+ type: string;
247
+ };
248
+ };
249
+ required: string[];
250
+ };
251
+ };
252
+ };
253
+ };
254
+ };
255
+ };
256
+ };
257
+ }, {
258
+ redirect: true;
259
+ url: string;
260
+ }>;
261
+ oauth2Consent: import("better-auth").StrictEndpoint<"/oauth2/consent", {
262
+ method: "POST";
263
+ body: import("zod").ZodObject<{
264
+ accept: import("zod").ZodBoolean;
265
+ scope: import("zod").ZodOptional<import("zod").ZodString>;
266
+ claims: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>]>>;
267
+ oauth_query: import("zod").ZodOptional<import("zod").ZodString>;
268
+ }, import("zod/v4/core").$strip>;
269
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
270
+ session: {
271
+ session: Record<string, any> & {
272
+ id: string;
273
+ createdAt: Date;
274
+ updatedAt: Date;
275
+ userId: string;
276
+ expiresAt: Date;
277
+ token: string;
278
+ ipAddress?: string | null | undefined;
279
+ userAgent?: string | null | undefined;
280
+ };
281
+ user: Record<string, any> & {
282
+ id: string;
283
+ createdAt: Date;
284
+ updatedAt: Date;
285
+ email: string;
286
+ emailVerified: boolean;
287
+ name: string;
288
+ image?: string | null | undefined;
289
+ };
290
+ };
291
+ }>>[];
292
+ metadata: {
293
+ openapi: {
294
+ description: string;
295
+ responses: {
296
+ "200": {
297
+ description: string;
298
+ content: {
299
+ "application/json": {
300
+ schema: {
301
+ type: "object";
302
+ properties: {
303
+ redirect_uri: {
304
+ type: string;
305
+ format: string;
306
+ description: string;
307
+ };
308
+ };
309
+ required: string[];
310
+ };
311
+ };
312
+ };
313
+ };
314
+ };
315
+ };
316
+ };
317
+ }, {
318
+ redirect: true;
319
+ url: string;
320
+ } | {
321
+ redirect: boolean;
322
+ url: string;
323
+ }>;
324
+ oauth2Continue: import("better-auth").StrictEndpoint<"/oauth2/continue", {
325
+ method: "POST";
326
+ body: import("zod").ZodObject<{
327
+ selected: import("zod").ZodOptional<import("zod").ZodBoolean>;
328
+ created: import("zod").ZodOptional<import("zod").ZodBoolean>;
329
+ postLogin: import("zod").ZodOptional<import("zod").ZodBoolean>;
330
+ oauth_query: import("zod").ZodOptional<import("zod").ZodString>;
331
+ }, import("zod/v4/core").$strip>;
332
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
333
+ session: {
334
+ session: Record<string, any> & {
335
+ id: string;
336
+ createdAt: Date;
337
+ updatedAt: Date;
338
+ userId: string;
339
+ expiresAt: Date;
340
+ token: string;
341
+ ipAddress?: string | null | undefined;
342
+ userAgent?: string | null | undefined;
343
+ };
344
+ user: Record<string, any> & {
345
+ id: string;
346
+ createdAt: Date;
347
+ updatedAt: Date;
348
+ email: string;
349
+ emailVerified: boolean;
350
+ name: string;
351
+ image?: string | null | undefined;
352
+ };
353
+ };
354
+ }>>[];
355
+ metadata: {
356
+ openapi: {
357
+ description: string;
358
+ responses: {
359
+ "200": {
360
+ description: string;
361
+ content: {
362
+ "application/json": {
363
+ schema: {
364
+ type: "object";
365
+ properties: {
366
+ redirect_uri: {
367
+ type: string;
368
+ format: string;
369
+ description: string;
370
+ };
371
+ };
372
+ required: string[];
373
+ };
374
+ };
375
+ };
376
+ };
377
+ };
378
+ };
379
+ };
380
+ }, {
381
+ redirect: true;
382
+ url: string;
383
+ }>;
384
+ oauth2Token: import("better-auth").StrictEndpoint<"/oauth2/token", {
385
+ method: "POST";
386
+ cloneRequest: true;
387
+ body: import("zod").ZodObject<{
388
+ grant_type: import("zod").ZodString;
389
+ client_id: import("zod").ZodOptional<import("zod").ZodString>;
390
+ client_secret: import("zod").ZodOptional<import("zod").ZodString>;
391
+ client_assertion: import("zod").ZodOptional<import("zod").ZodString>;
392
+ client_assertion_type: import("zod").ZodOptional<import("zod").ZodString>;
393
+ code: import("zod").ZodOptional<import("zod").ZodString>;
394
+ code_verifier: import("zod").ZodOptional<import("zod").ZodString>;
395
+ redirect_uri: import("zod").ZodOptional<import("zod").ZodURL>;
396
+ refresh_token: import("zod").ZodOptional<import("zod").ZodString>;
397
+ resource: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodArray<import("zod").ZodString>]>>;
398
+ scope: import("zod").ZodOptional<import("zod").ZodString>;
399
+ }, import("zod/v4/core").$loose>;
400
+ errorCodesByField: {
401
+ grant_type: {
402
+ missing: "invalid_request";
403
+ invalid: "unsupported_grant_type";
404
+ };
405
+ resource: {
406
+ invalid: "invalid_target";
407
+ };
408
+ };
409
+ metadata: {
410
+ noStore: boolean;
411
+ allowedMediaTypes: string[];
412
+ openapi: {
413
+ description: string;
414
+ parameters: {
415
+ name: string;
416
+ in: "header";
417
+ required: false;
418
+ schema: {
419
+ type: "string";
420
+ };
421
+ description: string;
422
+ }[];
423
+ requestBody: {
424
+ required: boolean;
425
+ content: {
426
+ "application/json": {
427
+ schema: {
428
+ type: "object";
429
+ properties: {
430
+ grant_type: {
431
+ type: string;
432
+ description: string;
433
+ };
434
+ client_id: {
435
+ type: string;
436
+ description: string;
437
+ };
438
+ client_secret: {
439
+ type: string;
440
+ description: string;
441
+ };
442
+ code: {
443
+ type: string;
444
+ description: string;
445
+ };
446
+ code_verifier: {
447
+ type: string;
448
+ description: string;
449
+ };
450
+ redirect_uri: {
451
+ type: string;
452
+ format: string;
453
+ description: string;
454
+ };
455
+ refresh_token: {
456
+ type: string;
457
+ description: string;
458
+ };
459
+ resource: {
460
+ oneOf: ({
461
+ type: string;
462
+ description: string;
463
+ items?: undefined;
464
+ } | {
465
+ type: string;
466
+ items: {
467
+ type: string;
468
+ };
469
+ description: string;
470
+ })[];
471
+ description: string;
472
+ };
473
+ scope: {
474
+ type: string;
475
+ description: string;
476
+ };
477
+ };
478
+ required: string[];
479
+ };
480
+ };
481
+ };
482
+ };
483
+ responses: {
484
+ "200": {
485
+ description: string;
486
+ content: {
487
+ "application/json": {
488
+ schema: {
489
+ type: "object";
490
+ properties: {
491
+ access_token: {
492
+ type: string;
493
+ description: string;
494
+ };
495
+ token_type: {
496
+ type: string;
497
+ description: string;
498
+ enum: string[];
499
+ };
500
+ expires_in: {
501
+ type: string;
502
+ description: string;
503
+ };
504
+ refresh_token: {
505
+ type: string;
506
+ description: string;
507
+ };
508
+ scope: {
509
+ type: string;
510
+ description: string;
511
+ };
512
+ id_token: {
513
+ type: string;
514
+ description: string;
515
+ };
516
+ };
517
+ required: string[];
518
+ };
519
+ };
520
+ };
521
+ };
522
+ "400": {
523
+ description: string;
524
+ content: {
525
+ "application/json": {
526
+ schema: {
527
+ type: "object";
528
+ properties: {
529
+ error: {
530
+ type: string;
531
+ };
532
+ error_description: {
533
+ type: string;
534
+ };
535
+ error_uri: {
536
+ type: string;
537
+ };
538
+ };
539
+ required: string[];
540
+ };
541
+ };
542
+ };
543
+ };
544
+ };
545
+ };
546
+ };
547
+ }, {
548
+ expires_in: number;
549
+ access_token: string;
550
+ expires_at: number;
551
+ token_type: import("@better-auth/oauth-provider").TokenType;
552
+ refresh_token: string | undefined;
553
+ scope: string;
554
+ id_token: string | undefined;
555
+ }>;
556
+ oauth2Introspect: import("better-auth").StrictEndpoint<"/oauth2/introspect", {
557
+ method: "POST";
558
+ cloneRequest: true;
559
+ body: import("zod").ZodObject<{
560
+ client_id: import("zod").ZodOptional<import("zod").ZodString>;
561
+ client_secret: import("zod").ZodOptional<import("zod").ZodString>;
562
+ client_assertion: import("zod").ZodOptional<import("zod").ZodString>;
563
+ client_assertion_type: import("zod").ZodOptional<import("zod").ZodString>;
564
+ token: import("zod").ZodString;
565
+ token_type_hint: import("zod").ZodOptional<import("zod").ZodString>;
566
+ }, import("zod/v4/core").$strip>;
567
+ metadata: {
568
+ noStore: boolean;
569
+ allowedMediaTypes: string[];
570
+ openapi: {
571
+ description: string;
572
+ requestBody: {
573
+ required: boolean;
574
+ content: {
575
+ "application/json": {
576
+ schema: {
577
+ type: "object";
578
+ properties: {
579
+ client_id: {
580
+ type: string;
581
+ description: string;
582
+ };
583
+ client_secret: {
584
+ type: string;
585
+ description: string;
586
+ };
587
+ token: {
588
+ type: string;
589
+ description: string;
590
+ };
591
+ token_type_hint: {
592
+ type: string;
593
+ description: string;
594
+ };
595
+ };
596
+ required: string[];
597
+ };
598
+ };
599
+ };
600
+ };
601
+ responses: {
602
+ "200": {
603
+ description: string;
604
+ content: {
605
+ "application/json": {
606
+ schema: {
607
+ type: "object";
608
+ properties: {
609
+ active: {
610
+ type: string;
611
+ description: string;
612
+ };
613
+ scope: {
614
+ type: string;
615
+ description: string;
616
+ };
617
+ client_id: {
618
+ type: string;
619
+ description: string;
620
+ };
621
+ username: {
622
+ type: string;
623
+ description: string;
624
+ };
625
+ token_type: {
626
+ type: string;
627
+ description: string;
628
+ };
629
+ exp: {
630
+ type: string;
631
+ description: string;
632
+ };
633
+ iat: {
634
+ type: string;
635
+ description: string;
636
+ };
637
+ nbf: {
638
+ type: string;
639
+ description: string;
640
+ };
641
+ sub: {
642
+ type: string;
643
+ description: string;
644
+ };
645
+ aud: {
646
+ type: string;
647
+ description: string;
648
+ };
649
+ iss: {
650
+ type: string;
651
+ description: string;
652
+ };
653
+ jti: {
654
+ type: string;
655
+ description: string;
656
+ };
657
+ };
658
+ required: string[];
659
+ };
660
+ };
661
+ };
662
+ };
663
+ "400": {
664
+ description: string;
665
+ content: {
666
+ "application/json": {
667
+ schema: {
668
+ type: "object";
669
+ properties: {
670
+ error: {
671
+ type: string;
672
+ };
673
+ error_description: {
674
+ type: string;
675
+ };
676
+ error_uri: {
677
+ type: string;
678
+ };
679
+ };
680
+ required: string[];
681
+ };
682
+ };
683
+ };
684
+ };
685
+ };
686
+ };
687
+ };
688
+ }, import("jose").JWTPayload>;
689
+ oauth2Revoke: import("better-auth").StrictEndpoint<"/oauth2/revoke", {
690
+ method: "POST";
691
+ cloneRequest: true;
692
+ body: import("zod").ZodObject<{
693
+ client_id: import("zod").ZodOptional<import("zod").ZodString>;
694
+ client_secret: import("zod").ZodOptional<import("zod").ZodString>;
695
+ client_assertion: import("zod").ZodOptional<import("zod").ZodString>;
696
+ client_assertion_type: import("zod").ZodOptional<import("zod").ZodString>;
697
+ token: import("zod").ZodString;
698
+ token_type_hint: import("zod").ZodOptional<import("zod").ZodString>;
699
+ }, import("zod/v4/core").$strip>;
700
+ metadata: {
701
+ allowedMediaTypes: string[];
702
+ openapi: {
703
+ description: string;
704
+ requestBody: {
705
+ required: boolean;
706
+ content: {
707
+ "application/json": {
708
+ schema: {
709
+ type: "object";
710
+ properties: {
711
+ client_id: {
712
+ type: string;
713
+ description: string;
714
+ };
715
+ client_secret: {
716
+ type: string;
717
+ description: string;
718
+ };
719
+ token: {
720
+ type: string;
721
+ description: string;
722
+ };
723
+ token_type_hint: {
724
+ type: string;
725
+ description: string;
726
+ };
727
+ };
728
+ required: string[];
729
+ };
730
+ };
731
+ };
732
+ };
733
+ responses: {
734
+ "200": {
735
+ description: string;
736
+ content: {
737
+ "application/json": {
738
+ schema: {
739
+ type: "object";
740
+ description: string;
741
+ };
742
+ };
743
+ };
744
+ };
745
+ "400": {
746
+ description: string;
747
+ content: {
748
+ "application/json": {
749
+ schema: {
750
+ type: "object";
751
+ properties: {
752
+ error: {
753
+ type: string;
754
+ };
755
+ error_description: {
756
+ type: string;
757
+ };
758
+ error_uri: {
759
+ type: string;
760
+ };
761
+ };
762
+ required: string[];
763
+ };
764
+ };
765
+ };
766
+ };
767
+ };
768
+ };
769
+ };
770
+ }, null | undefined>;
771
+ oauth2UserInfo: import("better-auth").StrictEndpoint<"/oauth2/userinfo", {
772
+ method: ("GET" | "POST")[];
773
+ body: import("zod").ZodOptional<import("zod").ZodObject<{
774
+ access_token: import("zod").ZodOptional<import("zod").ZodString>;
775
+ }, import("zod/v4/core").$loose>>;
776
+ metadata: {
777
+ noStore: boolean;
778
+ allowedMediaTypes: string[];
779
+ openapi: {
780
+ description: string;
781
+ security: ({
782
+ bearerAuth: never[];
783
+ OAuth2?: undefined;
784
+ } | {
785
+ OAuth2: string[];
786
+ bearerAuth?: undefined;
787
+ })[];
788
+ parameters: {
789
+ name: string;
790
+ in: "header";
791
+ required: false;
792
+ schema: {
793
+ type: "string";
794
+ };
795
+ description: string;
796
+ }[];
797
+ responses: {
798
+ "200": {
799
+ description: string;
800
+ content: {
801
+ "application/json": {
802
+ schema: {
803
+ type: "object";
804
+ properties: {
805
+ sub: {
806
+ type: string;
807
+ description: string;
808
+ };
809
+ email: {
810
+ type: string;
811
+ format: string;
812
+ nullable: boolean;
813
+ description: string;
814
+ };
815
+ name: {
816
+ type: string;
817
+ nullable: boolean;
818
+ description: string;
819
+ };
820
+ picture: {
821
+ type: string;
822
+ format: string;
823
+ nullable: boolean;
824
+ description: string;
825
+ };
826
+ given_name: {
827
+ type: string;
828
+ nullable: boolean;
829
+ description: string;
830
+ };
831
+ family_name: {
832
+ type: string;
833
+ nullable: boolean;
834
+ description: string;
835
+ };
836
+ email_verified: {
837
+ type: string;
838
+ nullable: boolean;
839
+ description: string;
840
+ };
841
+ };
842
+ required: string[];
843
+ };
844
+ };
845
+ };
846
+ };
847
+ "401": {
848
+ description: string;
849
+ content: {
850
+ "application/json": {
851
+ schema: {
852
+ type: "object";
853
+ properties: {
854
+ error: {
855
+ type: string;
856
+ };
857
+ error_description: {
858
+ type: string;
859
+ };
860
+ };
861
+ required: string[];
862
+ };
863
+ };
864
+ };
865
+ };
866
+ "403": {
867
+ description: string;
868
+ content: {
869
+ "application/json": {
870
+ schema: {
871
+ type: "object";
872
+ properties: {
873
+ error: {
874
+ type: string;
875
+ };
876
+ error_description: {
877
+ type: string;
878
+ };
879
+ };
880
+ required: string[];
881
+ };
882
+ };
883
+ };
884
+ };
885
+ };
886
+ };
887
+ };
888
+ }, {
889
+ sub: unknown;
890
+ }>;
891
+ oauth2EndSession: import("better-auth").StrictEndpoint<"/oauth2/end-session", {
892
+ method: ("GET" | "POST")[];
893
+ body: import("zod").ZodOptional<import("zod").ZodObject<{
894
+ id_token_hint: import("zod").ZodOptional<import("zod").ZodString>;
895
+ client_id: import("zod").ZodOptional<import("zod").ZodString>;
896
+ post_logout_redirect_uri: import("zod").ZodOptional<import("zod").ZodURL>;
897
+ state: import("zod").ZodOptional<import("zod").ZodString>;
898
+ }, import("zod/v4/core").$strip>>;
899
+ query: import("zod").ZodOptional<import("zod").ZodObject<{
900
+ id_token_hint: import("zod").ZodOptional<import("zod").ZodString>;
901
+ client_id: import("zod").ZodOptional<import("zod").ZodString>;
902
+ post_logout_redirect_uri: import("zod").ZodOptional<import("zod").ZodURL>;
903
+ state: import("zod").ZodOptional<import("zod").ZodString>;
904
+ }, import("zod/v4/core").$strip>>;
905
+ metadata: {
906
+ noStore: boolean;
907
+ allowedMediaTypes: string[];
908
+ $Infer: {
909
+ body: {
910
+ id_token_hint?: string;
911
+ client_id?: string;
912
+ post_logout_redirect_uri?: string;
913
+ state?: string;
914
+ } | {
915
+ query: {
916
+ id_token_hint?: string;
917
+ client_id?: string;
918
+ post_logout_redirect_uri?: string;
919
+ state?: string;
920
+ };
921
+ };
922
+ query: {
923
+ id_token_hint?: string;
924
+ client_id?: string;
925
+ post_logout_redirect_uri?: string;
926
+ state?: string;
927
+ };
928
+ };
929
+ openapi: {
930
+ description: string;
931
+ responses: {
932
+ "200": {
933
+ description: string;
934
+ content: {
935
+ "application/json": {
936
+ schema: {
937
+ type: "object";
938
+ properties: {
939
+ redirect_uri: {
940
+ type: string;
941
+ format: string;
942
+ description: string;
943
+ };
944
+ message: {
945
+ type: string;
946
+ description: string;
947
+ };
948
+ };
949
+ };
950
+ };
951
+ "text/html": {
952
+ schema: {
953
+ type: "string";
954
+ };
955
+ };
956
+ };
957
+ };
958
+ };
959
+ };
960
+ };
961
+ }, Response | {
962
+ redirect: true;
963
+ url: string;
964
+ } | null>;
965
+ oauth2EndSessionConfirmation: import("better-auth").StrictEndpoint<"/oauth2/end-session/confirm", {
966
+ method: "POST";
967
+ body: import("zod").ZodObject<{
968
+ action: import("zod").ZodLiteral<"confirm">;
969
+ }, import("zod/v4/core").$strip>;
970
+ metadata: {
971
+ noStore: boolean;
972
+ allowedMediaTypes: string[];
973
+ scope: "http";
974
+ };
975
+ }, Response | {
976
+ redirect: true;
977
+ url: string;
978
+ } | null>;
979
+ registerOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/register", {
980
+ method: "POST";
981
+ body: import("zod").ZodObject<{
982
+ redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
983
+ scope: import("zod").ZodOptional<import("zod").ZodString>;
984
+ client_name: import("zod").ZodOptional<import("zod").ZodString>;
985
+ client_uri: import("zod").ZodOptional<import("zod").ZodString>;
986
+ logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
987
+ contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
988
+ tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
989
+ policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
990
+ software_id: import("zod").ZodOptional<import("zod").ZodString>;
991
+ software_version: import("zod").ZodOptional<import("zod").ZodString>;
992
+ software_statement: import("zod").ZodOptional<import("zod").ZodString>;
993
+ post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
994
+ backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
995
+ backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
996
+ token_endpoint_auth_method: import("zod").ZodOptional<import("zod").ZodString>;
997
+ jwks: import("zod").ZodOptional<import("zod").ZodObject<{
998
+ keys: import("zod").ZodArray<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
999
+ }, import("zod/v4/core").$strip>>;
1000
+ jwks_uri: import("zod").ZodOptional<import("zod").ZodString>;
1001
+ grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1002
+ response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
1003
+ code: "code";
1004
+ }>>>;
1005
+ application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
1006
+ web: "web";
1007
+ native: "native";
1008
+ }>>;
1009
+ subject_type: import("zod").ZodOptional<import("zod").ZodEnum<{
1010
+ public: "public";
1011
+ pairwise: "pairwise";
1012
+ }>>;
1013
+ dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
1014
+ resources: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1015
+ skip_consent: import("zod").ZodOptional<import("zod").ZodNever>;
1016
+ }, import("zod/v4/core").$strip>;
1017
+ errorCodesByField: {
1018
+ redirect_uris: "invalid_redirect_uri";
1019
+ post_logout_redirect_uris: "invalid_redirect_uri";
1020
+ software_statement: "invalid_software_statement";
1021
+ resources: "invalid_target";
1022
+ };
1023
+ defaultError: "invalid_client_metadata";
1024
+ metadata: {
1025
+ noStore: boolean;
1026
+ openapi: {
1027
+ description: string;
1028
+ responses: {
1029
+ "201": {
1030
+ description: string;
1031
+ content: {
1032
+ "application/json": {
1033
+ schema: {
1034
+ type: "object";
1035
+ properties: {
1036
+ client_id: {
1037
+ type: string;
1038
+ description: string;
1039
+ };
1040
+ client_secret: {
1041
+ type: string;
1042
+ description: string;
1043
+ };
1044
+ client_secret_expires_at: {
1045
+ type: string;
1046
+ description: string;
1047
+ };
1048
+ scope: {
1049
+ type: string;
1050
+ description: string;
1051
+ };
1052
+ user_id: {
1053
+ type: string;
1054
+ description: string;
1055
+ };
1056
+ client_id_issued_at: {
1057
+ type: string;
1058
+ description: string;
1059
+ };
1060
+ client_name: {
1061
+ type: string;
1062
+ description: string;
1063
+ };
1064
+ client_uri: {
1065
+ type: string;
1066
+ description: string;
1067
+ };
1068
+ logo_uri: {
1069
+ type: string;
1070
+ description: string;
1071
+ };
1072
+ contacts: {
1073
+ type: string;
1074
+ items: {
1075
+ type: string;
1076
+ };
1077
+ description: string;
1078
+ };
1079
+ tos_uri: {
1080
+ type: string;
1081
+ description: string;
1082
+ };
1083
+ policy_uri: {
1084
+ type: string;
1085
+ description: string;
1086
+ };
1087
+ software_id: {
1088
+ type: string;
1089
+ description: string;
1090
+ };
1091
+ software_version: {
1092
+ type: string;
1093
+ description: string;
1094
+ };
1095
+ software_statement: {
1096
+ type: string;
1097
+ description: string;
1098
+ };
1099
+ redirect_uris: {
1100
+ type: string;
1101
+ items: {
1102
+ type: string;
1103
+ format: string;
1104
+ };
1105
+ description: string;
1106
+ };
1107
+ post_logout_redirect_uris: {
1108
+ type: string;
1109
+ items: {
1110
+ type: string;
1111
+ format: string;
1112
+ };
1113
+ description: string;
1114
+ };
1115
+ backchannel_logout_uri: {
1116
+ type: string;
1117
+ format: string;
1118
+ description: string;
1119
+ };
1120
+ backchannel_logout_session_required: {
1121
+ type: string;
1122
+ description: string;
1123
+ };
1124
+ token_endpoint_auth_method: {
1125
+ type: string;
1126
+ description: string;
1127
+ };
1128
+ grant_types: {
1129
+ type: string;
1130
+ items: {
1131
+ type: string;
1132
+ };
1133
+ description: string;
1134
+ };
1135
+ response_types: {
1136
+ type: string;
1137
+ items: {
1138
+ type: string;
1139
+ enum: string[];
1140
+ };
1141
+ description: string;
1142
+ };
1143
+ application_type: {
1144
+ type: string;
1145
+ description: string;
1146
+ enum: string[];
1147
+ };
1148
+ resources: {
1149
+ type: string;
1150
+ items: {
1151
+ type: string;
1152
+ format: string;
1153
+ };
1154
+ description: string;
1155
+ };
1156
+ disabled: {
1157
+ type: string;
1158
+ description: string;
1159
+ };
1160
+ };
1161
+ required: string[];
1162
+ };
1163
+ };
1164
+ };
1165
+ };
1166
+ };
1167
+ };
1168
+ };
1169
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
1170
+ adminCreateOAuthClient: import("better-auth").StrictEndpoint<"/admin/oauth2/create-client", {
1171
+ method: "POST";
1172
+ body: import("zod").ZodObject<{
1173
+ redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1174
+ scope: import("zod").ZodOptional<import("zod").ZodString>;
1175
+ client_name: import("zod").ZodOptional<import("zod").ZodString>;
1176
+ client_uri: import("zod").ZodOptional<import("zod").ZodString>;
1177
+ logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
1178
+ contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1179
+ tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
1180
+ policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
1181
+ software_id: import("zod").ZodOptional<import("zod").ZodString>;
1182
+ software_version: import("zod").ZodOptional<import("zod").ZodString>;
1183
+ software_statement: import("zod").ZodOptional<import("zod").ZodString>;
1184
+ post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1185
+ backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
1186
+ backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
1187
+ token_endpoint_auth_method: import("zod").ZodOptional<import("zod").ZodString>;
1188
+ application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
1189
+ web: "web";
1190
+ native: "native";
1191
+ }>>;
1192
+ jwks: import("zod").ZodOptional<import("zod").ZodObject<{
1193
+ keys: import("zod").ZodArray<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
1194
+ }, import("zod/v4/core").$strip>>;
1195
+ jwks_uri: import("zod").ZodOptional<import("zod").ZodString>;
1196
+ grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1197
+ client_credentials_scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1198
+ response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
1199
+ code: "code";
1200
+ }>>>;
1201
+ client_secret_expires_at: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodNumber]>>>;
1202
+ skip_consent: import("zod").ZodOptional<import("zod").ZodBoolean>;
1203
+ enable_end_session: import("zod").ZodOptional<import("zod").ZodBoolean>;
1204
+ require_pkce: import("zod").ZodOptional<import("zod").ZodBoolean>;
1205
+ dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
1206
+ subject_type: import("zod").ZodOptional<import("zod").ZodEnum<{
1207
+ public: "public";
1208
+ pairwise: "pairwise";
1209
+ }>>;
1210
+ metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
1211
+ }, import("zod/v4/core").$strip>;
1212
+ metadata: {
1213
+ noStore: boolean;
1214
+ SERVER_ONLY: true;
1215
+ openapi: {
1216
+ description: string;
1217
+ responses: {
1218
+ "201": {
1219
+ description: string;
1220
+ content: {
1221
+ "application/json": {
1222
+ schema: {
1223
+ type: "object";
1224
+ properties: {
1225
+ client_id: {
1226
+ type: string;
1227
+ description: string;
1228
+ };
1229
+ client_secret: {
1230
+ type: string;
1231
+ description: string;
1232
+ };
1233
+ client_secret_expires_at: {
1234
+ type: string;
1235
+ description: string;
1236
+ };
1237
+ scope: {
1238
+ type: string;
1239
+ description: string;
1240
+ };
1241
+ client_credentials_scopes: {
1242
+ type: string;
1243
+ items: {
1244
+ type: string;
1245
+ };
1246
+ description: string;
1247
+ };
1248
+ user_id: {
1249
+ type: string;
1250
+ description: string;
1251
+ };
1252
+ client_id_issued_at: {
1253
+ type: string;
1254
+ description: string;
1255
+ };
1256
+ client_name: {
1257
+ type: string;
1258
+ description: string;
1259
+ };
1260
+ client_uri: {
1261
+ type: string;
1262
+ description: string;
1263
+ };
1264
+ logo_uri: {
1265
+ type: string;
1266
+ description: string;
1267
+ };
1268
+ contacts: {
1269
+ type: string;
1270
+ items: {
1271
+ type: string;
1272
+ };
1273
+ description: string;
1274
+ };
1275
+ tos_uri: {
1276
+ type: string;
1277
+ description: string;
1278
+ };
1279
+ policy_uri: {
1280
+ type: string;
1281
+ description: string;
1282
+ };
1283
+ software_id: {
1284
+ type: string;
1285
+ description: string;
1286
+ };
1287
+ software_version: {
1288
+ type: string;
1289
+ description: string;
1290
+ };
1291
+ software_statement: {
1292
+ type: string;
1293
+ description: string;
1294
+ };
1295
+ redirect_uris: {
1296
+ type: string;
1297
+ items: {
1298
+ type: string;
1299
+ format: string;
1300
+ };
1301
+ description: string;
1302
+ };
1303
+ token_endpoint_auth_method: {
1304
+ type: string;
1305
+ description: string;
1306
+ };
1307
+ grant_types: {
1308
+ type: string;
1309
+ items: {
1310
+ type: string;
1311
+ };
1312
+ description: string;
1313
+ };
1314
+ response_types: {
1315
+ type: string;
1316
+ items: {
1317
+ type: string;
1318
+ enum: string[];
1319
+ };
1320
+ description: string;
1321
+ };
1322
+ application_type: {
1323
+ type: string;
1324
+ description: string;
1325
+ enum: string[];
1326
+ };
1327
+ resources: {
1328
+ type: string;
1329
+ items: {
1330
+ type: string;
1331
+ format: string;
1332
+ };
1333
+ description: string;
1334
+ };
1335
+ disabled: {
1336
+ type: string;
1337
+ description: string;
1338
+ };
1339
+ require_pkce: {
1340
+ type: string;
1341
+ description: string;
1342
+ default: boolean;
1343
+ };
1344
+ metadata: {
1345
+ type: string;
1346
+ additionalProperties: boolean;
1347
+ nullable: boolean;
1348
+ description: string;
1349
+ };
1350
+ };
1351
+ required: string[];
1352
+ };
1353
+ };
1354
+ };
1355
+ };
1356
+ };
1357
+ };
1358
+ };
1359
+ }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
1360
+ createOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/create-client", {
1361
+ method: "POST";
1362
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1363
+ session: {
1364
+ session: Record<string, any> & {
1365
+ id: string;
1366
+ createdAt: Date;
1367
+ updatedAt: Date;
1368
+ userId: string;
1369
+ expiresAt: Date;
1370
+ token: string;
1371
+ ipAddress?: string | null | undefined;
1372
+ userAgent?: string | null | undefined;
1373
+ };
1374
+ user: Record<string, any> & {
1375
+ id: string;
1376
+ createdAt: Date;
1377
+ updatedAt: Date;
1378
+ email: string;
1379
+ emailVerified: boolean;
1380
+ name: string;
1381
+ image?: string | null | undefined;
1382
+ };
1383
+ };
1384
+ }>>[];
1385
+ body: import("zod").ZodObject<{
1386
+ redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1387
+ scope: import("zod").ZodOptional<import("zod").ZodString>;
1388
+ client_name: import("zod").ZodOptional<import("zod").ZodString>;
1389
+ client_uri: import("zod").ZodOptional<import("zod").ZodString>;
1390
+ logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
1391
+ contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1392
+ tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
1393
+ policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
1394
+ software_id: import("zod").ZodOptional<import("zod").ZodString>;
1395
+ software_version: import("zod").ZodOptional<import("zod").ZodString>;
1396
+ software_statement: import("zod").ZodOptional<import("zod").ZodString>;
1397
+ post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1398
+ backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
1399
+ backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
1400
+ token_endpoint_auth_method: import("zod").ZodOptional<import("zod").ZodString>;
1401
+ application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
1402
+ web: "web";
1403
+ native: "native";
1404
+ }>>;
1405
+ jwks: import("zod").ZodOptional<import("zod").ZodObject<{
1406
+ keys: import("zod").ZodArray<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
1407
+ }, import("zod/v4/core").$strip>>;
1408
+ jwks_uri: import("zod").ZodOptional<import("zod").ZodString>;
1409
+ grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1410
+ response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
1411
+ code: "code";
1412
+ }>>>;
1413
+ dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
1414
+ }, import("zod/v4/core").$strip>;
1415
+ metadata: {
1416
+ noStore: boolean;
1417
+ openapi: {
1418
+ description: string;
1419
+ responses: {
1420
+ "201": {
1421
+ description: string;
1422
+ content: {
1423
+ "application/json": {
1424
+ schema: {
1425
+ type: "object";
1426
+ properties: {
1427
+ client_id: {
1428
+ type: string;
1429
+ description: string;
1430
+ };
1431
+ client_secret: {
1432
+ type: string;
1433
+ description: string;
1434
+ };
1435
+ client_secret_expires_at: {
1436
+ type: string;
1437
+ description: string;
1438
+ };
1439
+ scope: {
1440
+ type: string;
1441
+ description: string;
1442
+ };
1443
+ user_id: {
1444
+ type: string;
1445
+ description: string;
1446
+ };
1447
+ client_id_issued_at: {
1448
+ type: string;
1449
+ description: string;
1450
+ };
1451
+ client_name: {
1452
+ type: string;
1453
+ description: string;
1454
+ };
1455
+ client_uri: {
1456
+ type: string;
1457
+ description: string;
1458
+ };
1459
+ logo_uri: {
1460
+ type: string;
1461
+ description: string;
1462
+ };
1463
+ contacts: {
1464
+ type: string;
1465
+ items: {
1466
+ type: string;
1467
+ };
1468
+ description: string;
1469
+ };
1470
+ tos_uri: {
1471
+ type: string;
1472
+ description: string;
1473
+ };
1474
+ policy_uri: {
1475
+ type: string;
1476
+ description: string;
1477
+ };
1478
+ software_id: {
1479
+ type: string;
1480
+ description: string;
1481
+ };
1482
+ software_version: {
1483
+ type: string;
1484
+ description: string;
1485
+ };
1486
+ software_statement: {
1487
+ type: string;
1488
+ description: string;
1489
+ };
1490
+ redirect_uris: {
1491
+ type: string;
1492
+ items: {
1493
+ type: string;
1494
+ format: string;
1495
+ };
1496
+ description: string;
1497
+ };
1498
+ token_endpoint_auth_method: {
1499
+ type: string;
1500
+ description: string;
1501
+ };
1502
+ grant_types: {
1503
+ type: string;
1504
+ items: {
1505
+ type: string;
1506
+ };
1507
+ description: string;
1508
+ };
1509
+ response_types: {
1510
+ type: string;
1511
+ items: {
1512
+ type: string;
1513
+ enum: string[];
1514
+ };
1515
+ description: string;
1516
+ };
1517
+ application_type: {
1518
+ type: string;
1519
+ description: string;
1520
+ enum: string[];
1521
+ };
1522
+ resources: {
1523
+ type: string;
1524
+ items: {
1525
+ type: string;
1526
+ format: string;
1527
+ };
1528
+ description: string;
1529
+ };
1530
+ disabled: {
1531
+ type: string;
1532
+ description: string;
1533
+ };
1534
+ metadata: {
1535
+ type: string;
1536
+ additionalProperties: boolean;
1537
+ nullable: boolean;
1538
+ description: string;
1539
+ };
1540
+ };
1541
+ required: string[];
1542
+ };
1543
+ };
1544
+ };
1545
+ };
1546
+ };
1547
+ };
1548
+ };
1549
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
1550
+ getOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/get-client", {
1551
+ method: "GET";
1552
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1553
+ session: {
1554
+ session: Record<string, any> & {
1555
+ id: string;
1556
+ createdAt: Date;
1557
+ updatedAt: Date;
1558
+ userId: string;
1559
+ expiresAt: Date;
1560
+ token: string;
1561
+ ipAddress?: string | null | undefined;
1562
+ userAgent?: string | null | undefined;
1563
+ };
1564
+ user: Record<string, any> & {
1565
+ id: string;
1566
+ createdAt: Date;
1567
+ updatedAt: Date;
1568
+ email: string;
1569
+ emailVerified: boolean;
1570
+ name: string;
1571
+ image?: string | null | undefined;
1572
+ };
1573
+ };
1574
+ }>>[];
1575
+ query: import("zod").ZodObject<{
1576
+ client_id: import("zod").ZodString;
1577
+ }, import("zod/v4/core").$strip>;
1578
+ metadata: {
1579
+ openapi: {
1580
+ description: string;
1581
+ };
1582
+ };
1583
+ }, import("@better-auth/oauth-provider").OAuthClient>;
1584
+ getOAuthClientPublic: import("better-auth").StrictEndpoint<"/oauth2/public-client", {
1585
+ method: "GET";
1586
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1587
+ session: {
1588
+ session: Record<string, any> & {
1589
+ id: string;
1590
+ createdAt: Date;
1591
+ updatedAt: Date;
1592
+ userId: string;
1593
+ expiresAt: Date;
1594
+ token: string;
1595
+ ipAddress?: string | null | undefined;
1596
+ userAgent?: string | null | undefined;
1597
+ };
1598
+ user: Record<string, any> & {
1599
+ id: string;
1600
+ createdAt: Date;
1601
+ updatedAt: Date;
1602
+ email: string;
1603
+ emailVerified: boolean;
1604
+ name: string;
1605
+ image?: string | null | undefined;
1606
+ };
1607
+ };
1608
+ }>>[];
1609
+ query: import("zod").ZodObject<{
1610
+ client_id: import("zod").ZodString;
1611
+ }, import("zod/v4/core").$strip>;
1612
+ metadata: {
1613
+ openapi: {
1614
+ description: string;
1615
+ };
1616
+ };
1617
+ }, import("@better-auth/oauth-provider").OAuthClient>;
1618
+ getOAuthClientPublicPrelogin: import("better-auth").StrictEndpoint<"/oauth2/public-client-prelogin", {
1619
+ method: "POST";
1620
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
1621
+ body: import("zod").ZodObject<{
1622
+ client_id: import("zod").ZodString;
1623
+ oauth_query: import("zod").ZodOptional<import("zod").ZodString>;
1624
+ }, import("zod/v4/core").$strip>;
1625
+ metadata: {
1626
+ openapi: {
1627
+ description: string;
1628
+ };
1629
+ };
1630
+ }, import("@better-auth/oauth-provider").OAuthClient>;
1631
+ getOAuthClients: import("better-auth").StrictEndpoint<"/oauth2/get-clients", {
1632
+ method: "GET";
1633
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1634
+ session: {
1635
+ session: Record<string, any> & {
1636
+ id: string;
1637
+ createdAt: Date;
1638
+ updatedAt: Date;
1639
+ userId: string;
1640
+ expiresAt: Date;
1641
+ token: string;
1642
+ ipAddress?: string | null | undefined;
1643
+ userAgent?: string | null | undefined;
1644
+ };
1645
+ user: Record<string, any> & {
1646
+ id: string;
1647
+ createdAt: Date;
1648
+ updatedAt: Date;
1649
+ email: string;
1650
+ emailVerified: boolean;
1651
+ name: string;
1652
+ image?: string | null | undefined;
1653
+ };
1654
+ };
1655
+ }>>[];
1656
+ metadata: {
1657
+ openapi: {
1658
+ description: string;
1659
+ };
1660
+ };
1661
+ }, import("@better-auth/oauth-provider").OAuthClient[] | null>;
1662
+ adminUpdateOAuthClient: import("better-auth").StrictEndpoint<"/admin/oauth2/update-client", {
1663
+ method: "PATCH";
1664
+ body: import("zod").ZodObject<{
1665
+ client_id: import("zod").ZodString;
1666
+ update: import("zod").ZodObject<{
1667
+ redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1668
+ scope: import("zod").ZodOptional<import("zod").ZodString>;
1669
+ client_name: import("zod").ZodOptional<import("zod").ZodString>;
1670
+ client_uri: import("zod").ZodOptional<import("zod").ZodString>;
1671
+ logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
1672
+ contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1673
+ tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
1674
+ policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
1675
+ software_id: import("zod").ZodOptional<import("zod").ZodString>;
1676
+ software_version: import("zod").ZodOptional<import("zod").ZodString>;
1677
+ software_statement: import("zod").ZodOptional<import("zod").ZodString>;
1678
+ post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1679
+ backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
1680
+ backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
1681
+ application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
1682
+ web: "web";
1683
+ native: "native";
1684
+ }>>;
1685
+ grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1686
+ client_credentials_scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1687
+ response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
1688
+ code: "code";
1689
+ }>>>;
1690
+ client_secret_expires_at: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodNumber]>>;
1691
+ skip_consent: import("zod").ZodOptional<import("zod").ZodBoolean>;
1692
+ enable_end_session: import("zod").ZodOptional<import("zod").ZodBoolean>;
1693
+ dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
1694
+ metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
1695
+ }, import("zod/v4/core").$strip>;
1696
+ }, import("zod/v4/core").$strip>;
1697
+ metadata: {
1698
+ SERVER_ONLY: true;
1699
+ openapi: {
1700
+ description: string;
1701
+ };
1702
+ };
1703
+ }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
1704
+ updateOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/update-client", {
1705
+ method: "POST";
1706
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1707
+ session: {
1708
+ session: Record<string, any> & {
1709
+ id: string;
1710
+ createdAt: Date;
1711
+ updatedAt: Date;
1712
+ userId: string;
1713
+ expiresAt: Date;
1714
+ token: string;
1715
+ ipAddress?: string | null | undefined;
1716
+ userAgent?: string | null | undefined;
1717
+ };
1718
+ user: Record<string, any> & {
1719
+ id: string;
1720
+ createdAt: Date;
1721
+ updatedAt: Date;
1722
+ email: string;
1723
+ emailVerified: boolean;
1724
+ name: string;
1725
+ image?: string | null | undefined;
1726
+ };
1727
+ };
1728
+ }>>[];
1729
+ body: import("zod").ZodObject<{
1730
+ client_id: import("zod").ZodString;
1731
+ update: import("zod").ZodObject<{
1732
+ redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1733
+ scope: import("zod").ZodOptional<import("zod").ZodString>;
1734
+ client_name: import("zod").ZodOptional<import("zod").ZodString>;
1735
+ client_uri: import("zod").ZodOptional<import("zod").ZodString>;
1736
+ logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
1737
+ contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1738
+ tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
1739
+ policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
1740
+ software_id: import("zod").ZodOptional<import("zod").ZodString>;
1741
+ software_version: import("zod").ZodOptional<import("zod").ZodString>;
1742
+ software_statement: import("zod").ZodOptional<import("zod").ZodString>;
1743
+ post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
1744
+ backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
1745
+ backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
1746
+ application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
1747
+ web: "web";
1748
+ native: "native";
1749
+ }>>;
1750
+ grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
1751
+ response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
1752
+ code: "code";
1753
+ }>>>;
1754
+ }, import("zod/v4/core").$strip>;
1755
+ }, import("zod/v4/core").$strip>;
1756
+ metadata: {
1757
+ openapi: {
1758
+ description: string;
1759
+ };
1760
+ };
1761
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
1762
+ rotateClientSecret: import("better-auth").StrictEndpoint<"/oauth2/client/rotate-secret", {
1763
+ method: "POST";
1764
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1765
+ session: {
1766
+ session: Record<string, any> & {
1767
+ id: string;
1768
+ createdAt: Date;
1769
+ updatedAt: Date;
1770
+ userId: string;
1771
+ expiresAt: Date;
1772
+ token: string;
1773
+ ipAddress?: string | null | undefined;
1774
+ userAgent?: string | null | undefined;
1775
+ };
1776
+ user: Record<string, any> & {
1777
+ id: string;
1778
+ createdAt: Date;
1779
+ updatedAt: Date;
1780
+ email: string;
1781
+ emailVerified: boolean;
1782
+ name: string;
1783
+ image?: string | null | undefined;
1784
+ };
1785
+ };
1786
+ }>>[];
1787
+ body: import("zod").ZodObject<{
1788
+ client_id: import("zod").ZodString;
1789
+ }, import("zod/v4/core").$strip>;
1790
+ metadata: {
1791
+ noStore: boolean;
1792
+ openapi: {
1793
+ description: string;
1794
+ };
1795
+ };
1796
+ }, import("@better-auth/oauth-provider").OAuthClient>;
1797
+ deleteOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/delete-client", {
1798
+ method: "POST";
1799
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1800
+ session: {
1801
+ session: Record<string, any> & {
1802
+ id: string;
1803
+ createdAt: Date;
1804
+ updatedAt: Date;
1805
+ userId: string;
1806
+ expiresAt: Date;
1807
+ token: string;
1808
+ ipAddress?: string | null | undefined;
1809
+ userAgent?: string | null | undefined;
1810
+ };
1811
+ user: Record<string, any> & {
1812
+ id: string;
1813
+ createdAt: Date;
1814
+ updatedAt: Date;
1815
+ email: string;
1816
+ emailVerified: boolean;
1817
+ name: string;
1818
+ image?: string | null | undefined;
1819
+ };
1820
+ };
1821
+ }>>[];
1822
+ body: import("zod").ZodObject<{
1823
+ client_id: import("zod").ZodString;
1824
+ }, import("zod/v4/core").$strip>;
1825
+ metadata: {
1826
+ openapi: {
1827
+ description: string;
1828
+ };
1829
+ };
1830
+ }, void>;
1831
+ getOAuthConsent: import("better-auth").StrictEndpoint<"/oauth2/get-consent", {
1832
+ method: "GET";
1833
+ query: import("zod").ZodObject<{
1834
+ id: import("zod").ZodString;
1835
+ }, import("zod/v4/core").$strip>;
1836
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1837
+ session: {
1838
+ session: Record<string, any> & {
1839
+ id: string;
1840
+ createdAt: Date;
1841
+ updatedAt: Date;
1842
+ userId: string;
1843
+ expiresAt: Date;
1844
+ token: string;
1845
+ ipAddress?: string | null | undefined;
1846
+ userAgent?: string | null | undefined;
1847
+ };
1848
+ user: Record<string, any> & {
1849
+ id: string;
1850
+ createdAt: Date;
1851
+ updatedAt: Date;
1852
+ email: string;
1853
+ emailVerified: boolean;
1854
+ name: string;
1855
+ image?: string | null | undefined;
1856
+ };
1857
+ };
1858
+ }>>[];
1859
+ metadata: {
1860
+ openapi: {
1861
+ description: string;
1862
+ };
1863
+ };
1864
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>>;
1865
+ getOAuthConsents: import("better-auth").StrictEndpoint<"/oauth2/get-consents", {
1866
+ method: "GET";
1867
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1868
+ session: {
1869
+ session: Record<string, any> & {
1870
+ id: string;
1871
+ createdAt: Date;
1872
+ updatedAt: Date;
1873
+ userId: string;
1874
+ expiresAt: Date;
1875
+ token: string;
1876
+ ipAddress?: string | null | undefined;
1877
+ userAgent?: string | null | undefined;
1878
+ };
1879
+ user: Record<string, any> & {
1880
+ id: string;
1881
+ createdAt: Date;
1882
+ updatedAt: Date;
1883
+ email: string;
1884
+ emailVerified: boolean;
1885
+ name: string;
1886
+ image?: string | null | undefined;
1887
+ };
1888
+ };
1889
+ }>>[];
1890
+ metadata: {
1891
+ openapi: {
1892
+ description: string;
1893
+ };
1894
+ };
1895
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>[]>;
1896
+ updateOAuthConsent: import("better-auth").StrictEndpoint<"/oauth2/update-consent", {
1897
+ method: "POST";
1898
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1899
+ session: {
1900
+ session: Record<string, any> & {
1901
+ id: string;
1902
+ createdAt: Date;
1903
+ updatedAt: Date;
1904
+ userId: string;
1905
+ expiresAt: Date;
1906
+ token: string;
1907
+ ipAddress?: string | null | undefined;
1908
+ userAgent?: string | null | undefined;
1909
+ };
1910
+ user: Record<string, any> & {
1911
+ id: string;
1912
+ createdAt: Date;
1913
+ updatedAt: Date;
1914
+ email: string;
1915
+ emailVerified: boolean;
1916
+ name: string;
1917
+ image?: string | null | undefined;
1918
+ };
1919
+ };
1920
+ }>>[];
1921
+ body: import("zod").ZodObject<{
1922
+ id: import("zod").ZodString;
1923
+ update: import("zod").ZodObject<{
1924
+ scopes: import("zod").ZodArray<import("zod").ZodString>;
1925
+ }, import("zod/v4/core").$strip>;
1926
+ }, import("zod/v4/core").$strip>;
1927
+ metadata: {
1928
+ openapi: {
1929
+ description: string;
1930
+ };
1931
+ };
1932
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]> | null>;
1933
+ deleteOAuthConsent: import("better-auth").StrictEndpoint<"/oauth2/delete-consent", {
1934
+ method: "POST";
1935
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1936
+ session: {
1937
+ session: Record<string, any> & {
1938
+ id: string;
1939
+ createdAt: Date;
1940
+ updatedAt: Date;
1941
+ userId: string;
1942
+ expiresAt: Date;
1943
+ token: string;
1944
+ ipAddress?: string | null | undefined;
1945
+ userAgent?: string | null | undefined;
1946
+ };
1947
+ user: Record<string, any> & {
1948
+ id: string;
1949
+ createdAt: Date;
1950
+ updatedAt: Date;
1951
+ email: string;
1952
+ emailVerified: boolean;
1953
+ name: string;
1954
+ image?: string | null | undefined;
1955
+ };
1956
+ };
1957
+ }>>[];
1958
+ body: import("zod").ZodObject<{
1959
+ id: import("zod").ZodString;
1960
+ }, import("zod/v4/core").$strip>;
1961
+ metadata: {
1962
+ openapi: {
1963
+ description: string;
1964
+ };
1965
+ };
1966
+ }, void>;
1967
+ adminCreateOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources", {
1968
+ method: "POST";
1969
+ body: import("zod").ZodObject<{
1970
+ identifier: import("zod").ZodNonOptional<import("zod").ZodOptional<import("zod").ZodString>>;
1971
+ name: import("zod").ZodOptional<import("zod").ZodString>;
1972
+ accessTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
1973
+ refreshTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
1974
+ signingAlgorithm: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodEnum<{
1975
+ RS256: "RS256";
1976
+ PS256: "PS256";
1977
+ ES256: "ES256";
1978
+ ES512: "ES512";
1979
+ EdDSA: "EdDSA";
1980
+ }>>>;
1981
+ signingKeyId: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
1982
+ allowedScopes: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodString>>>;
1983
+ customClaims: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
1984
+ dpopBoundAccessTokensRequired: import("zod").ZodOptional<import("zod").ZodBoolean>;
1985
+ disabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
1986
+ metadata: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
1987
+ }, import("zod/v4/core").$strip>;
1988
+ metadata: {
1989
+ SERVER_ONLY: true;
1990
+ };
1991
+ }, import("@better-auth/oauth-provider").OAuthResource>;
1992
+ adminListOAuthResources: import("better-auth").StrictEndpoint<"/admin/oauth2/resources", {
1993
+ method: "GET";
1994
+ metadata: {
1995
+ SERVER_ONLY: true;
1996
+ };
1997
+ }, import("@better-auth/oauth-provider").OAuthResource[]>;
1998
+ adminGetOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
1999
+ method: "GET";
2000
+ metadata: {
2001
+ SERVER_ONLY: true;
2002
+ };
2003
+ }, import("@better-auth/oauth-provider").OAuthResource>;
2004
+ adminUpdateOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
2005
+ method: "PATCH";
2006
+ body: import("zod").ZodObject<{
2007
+ identifier: import("zod").ZodOptional<import("zod").ZodString>;
2008
+ name: import("zod").ZodOptional<import("zod").ZodString>;
2009
+ accessTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
2010
+ refreshTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
2011
+ signingAlgorithm: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodEnum<{
2012
+ RS256: "RS256";
2013
+ PS256: "PS256";
2014
+ ES256: "ES256";
2015
+ ES512: "ES512";
2016
+ EdDSA: "EdDSA";
2017
+ }>>>;
2018
+ signingKeyId: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
2019
+ allowedScopes: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodString>>>;
2020
+ customClaims: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
2021
+ dpopBoundAccessTokensRequired: import("zod").ZodOptional<import("zod").ZodBoolean>;
2022
+ disabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
2023
+ metadata: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
2024
+ }, import("zod/v4/core").$strip>;
2025
+ metadata: {
2026
+ SERVER_ONLY: true;
2027
+ };
2028
+ }, import("@better-auth/oauth-provider").OAuthResource>;
2029
+ adminDeleteOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
2030
+ method: "DELETE";
2031
+ metadata: {
2032
+ SERVER_ONLY: true;
2033
+ };
2034
+ }, {
2035
+ deleted: boolean;
2036
+ }>;
2037
+ adminLinkClientResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
2038
+ method: "POST";
2039
+ metadata: {
2040
+ SERVER_ONLY: true;
2041
+ };
2042
+ }, {
2043
+ linked: boolean;
2044
+ }>;
2045
+ adminUnlinkClientResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
2046
+ method: "DELETE";
2047
+ metadata: {
2048
+ SERVER_ONLY: true;
2049
+ };
2050
+ }, {
2051
+ unlinked: boolean;
2052
+ }>;
2053
+ };
2054
+ schema: {
2055
+ oauthClient: {
2056
+ modelName: string;
2057
+ fields: {
2058
+ clientId: {
2059
+ type: "string";
2060
+ unique: true;
2061
+ required: true;
2062
+ };
2063
+ clientSecret: {
2064
+ type: "string";
2065
+ required: false;
2066
+ };
2067
+ clientDiscoveryId: {
2068
+ type: "string";
2069
+ required: false;
2070
+ };
2071
+ disabled: {
2072
+ type: "boolean";
2073
+ defaultValue: false;
2074
+ required: false;
2075
+ };
2076
+ skipConsent: {
2077
+ type: "boolean";
2078
+ required: false;
2079
+ };
2080
+ enableEndSession: {
2081
+ type: "boolean";
2082
+ required: false;
2083
+ };
2084
+ subjectType: {
2085
+ type: "string";
2086
+ required: false;
2087
+ };
2088
+ scopes: {
2089
+ type: "string[]";
2090
+ required: false;
2091
+ };
2092
+ clientCredentialsScopes: {
2093
+ type: "string[]";
2094
+ required: false;
2095
+ defaultValue: never[];
2096
+ };
2097
+ userId: {
2098
+ type: "string";
2099
+ required: false;
2100
+ references: {
2101
+ model: string;
2102
+ field: string;
2103
+ };
2104
+ index: true;
2105
+ };
2106
+ createdAt: {
2107
+ type: "date";
2108
+ required: false;
2109
+ };
2110
+ updatedAt: {
2111
+ type: "date";
2112
+ required: false;
2113
+ };
2114
+ name: {
2115
+ type: "string";
2116
+ required: false;
2117
+ };
2118
+ uri: {
2119
+ type: "string";
2120
+ required: false;
2121
+ };
2122
+ icon: {
2123
+ type: "string";
2124
+ required: false;
2125
+ };
2126
+ contacts: {
2127
+ type: "string[]";
2128
+ required: false;
2129
+ };
2130
+ tos: {
2131
+ type: "string";
2132
+ required: false;
2133
+ };
2134
+ policy: {
2135
+ type: "string";
2136
+ required: false;
2137
+ };
2138
+ softwareId: {
2139
+ type: "string";
2140
+ required: false;
2141
+ };
2142
+ softwareVersion: {
2143
+ type: "string";
2144
+ required: false;
2145
+ };
2146
+ softwareStatement: {
2147
+ type: "string";
2148
+ required: false;
2149
+ };
2150
+ redirectUris: {
2151
+ type: "string[]";
2152
+ required: true;
2153
+ };
2154
+ postLogoutRedirectUris: {
2155
+ type: "string[]";
2156
+ required: false;
2157
+ };
2158
+ backchannelLogoutUri: {
2159
+ type: "string";
2160
+ required: false;
2161
+ };
2162
+ backchannelLogoutSessionRequired: {
2163
+ type: "boolean";
2164
+ required: false;
2165
+ };
2166
+ tokenEndpointAuthMethod: {
2167
+ type: "string";
2168
+ required: false;
2169
+ };
2170
+ applicationType: {
2171
+ type: "string";
2172
+ required: false;
2173
+ };
2174
+ jwks: {
2175
+ type: "string";
2176
+ required: false;
2177
+ };
2178
+ jwksUri: {
2179
+ type: "string";
2180
+ required: false;
2181
+ };
2182
+ grantTypes: {
2183
+ type: "string[]";
2184
+ required: false;
2185
+ };
2186
+ responseTypes: {
2187
+ type: "string[]";
2188
+ required: false;
2189
+ };
2190
+ requirePKCE: {
2191
+ type: "boolean";
2192
+ required: false;
2193
+ };
2194
+ dpopBoundAccessTokens: {
2195
+ type: "boolean";
2196
+ required: false;
2197
+ defaultValue: false;
2198
+ };
2199
+ referenceId: {
2200
+ type: "string";
2201
+ required: false;
2202
+ };
2203
+ metadata: {
2204
+ type: "json";
2205
+ required: false;
2206
+ };
2207
+ };
2208
+ };
2209
+ oauthResource: {
2210
+ modelName: string;
2211
+ fields: {
2212
+ identifier: {
2213
+ type: "string";
2214
+ required: true;
2215
+ unique: true;
2216
+ };
2217
+ name: {
2218
+ type: "string";
2219
+ required: true;
2220
+ };
2221
+ accessTokenTtl: {
2222
+ type: "number";
2223
+ required: false;
2224
+ };
2225
+ refreshTokenTtl: {
2226
+ type: "number";
2227
+ required: false;
2228
+ };
2229
+ signingAlgorithm: {
2230
+ type: "string";
2231
+ required: false;
2232
+ };
2233
+ signingKeyId: {
2234
+ type: "string";
2235
+ required: false;
2236
+ };
2237
+ allowedScopes: {
2238
+ type: "string[]";
2239
+ required: false;
2240
+ };
2241
+ customClaims: {
2242
+ type: "json";
2243
+ required: false;
2244
+ };
2245
+ dpopBoundAccessTokensRequired: {
2246
+ type: "boolean";
2247
+ required: false;
2248
+ defaultValue: false;
2249
+ };
2250
+ disabled: {
2251
+ type: "boolean";
2252
+ required: false;
2253
+ defaultValue: false;
2254
+ };
2255
+ createdAt: {
2256
+ type: "date";
2257
+ required: false;
2258
+ };
2259
+ updatedAt: {
2260
+ type: "date";
2261
+ required: false;
2262
+ };
2263
+ policyVersion: {
2264
+ type: "number";
2265
+ required: false;
2266
+ defaultValue: number;
2267
+ };
2268
+ metadata: {
2269
+ type: "json";
2270
+ required: false;
2271
+ };
2272
+ };
2273
+ };
2274
+ oauthClientResource: {
2275
+ modelName: string;
2276
+ fields: {
2277
+ clientId: {
2278
+ type: "string";
2279
+ required: true;
2280
+ references: {
2281
+ model: string;
2282
+ field: string;
2283
+ onDelete: "cascade";
2284
+ };
2285
+ index: true;
2286
+ };
2287
+ resourceId: {
2288
+ type: "string";
2289
+ required: true;
2290
+ references: {
2291
+ model: string;
2292
+ field: string;
2293
+ onDelete: "cascade";
2294
+ };
2295
+ index: true;
2296
+ };
2297
+ metadata: {
2298
+ type: "json";
2299
+ required: false;
2300
+ };
2301
+ createdAt: {
2302
+ type: "date";
2303
+ required: false;
2304
+ };
2305
+ };
2306
+ indexes: {
2307
+ fields: [string, string];
2308
+ unique: true;
2309
+ }[];
2310
+ };
2311
+ oauthRefreshToken: {
2312
+ fields: {
2313
+ token: {
2314
+ type: "string";
2315
+ required: true;
2316
+ unique: true;
2317
+ };
2318
+ clientId: {
2319
+ type: "string";
2320
+ required: true;
2321
+ references: {
2322
+ model: string;
2323
+ field: string;
2324
+ };
2325
+ index: true;
2326
+ };
2327
+ sessionId: {
2328
+ type: "string";
2329
+ required: false;
2330
+ references: {
2331
+ model: string;
2332
+ field: string;
2333
+ onDelete: "set null";
2334
+ };
2335
+ index: true;
2336
+ };
2337
+ userId: {
2338
+ type: "string";
2339
+ required: true;
2340
+ references: {
2341
+ model: string;
2342
+ field: string;
2343
+ };
2344
+ index: true;
2345
+ };
2346
+ referenceId: {
2347
+ type: "string";
2348
+ required: false;
2349
+ };
2350
+ authorizationCodeId: {
2351
+ type: "string";
2352
+ required: false;
2353
+ index: true;
2354
+ };
2355
+ resources: {
2356
+ type: "string[]";
2357
+ required: false;
2358
+ };
2359
+ requestedUserInfoClaims: {
2360
+ type: "string[]";
2361
+ required: false;
2362
+ };
2363
+ expiresAt: {
2364
+ type: "date";
2365
+ };
2366
+ createdAt: {
2367
+ type: "date";
2368
+ };
2369
+ revoked: {
2370
+ type: "date";
2371
+ required: false;
2372
+ };
2373
+ rotatedAt: {
2374
+ type: "date";
2375
+ required: false;
2376
+ };
2377
+ rotationReplayResponse: {
2378
+ type: "string";
2379
+ required: false;
2380
+ };
2381
+ rotationReplayExpiresAt: {
2382
+ type: "date";
2383
+ required: false;
2384
+ };
2385
+ authTime: {
2386
+ type: "date";
2387
+ required: false;
2388
+ };
2389
+ confirmation: {
2390
+ type: "json";
2391
+ required: false;
2392
+ };
2393
+ scopes: {
2394
+ type: "string[]";
2395
+ required: true;
2396
+ };
2397
+ };
2398
+ };
2399
+ oauthAccessToken: {
2400
+ modelName: string;
2401
+ fields: {
2402
+ token: {
2403
+ type: "string";
2404
+ unique: true;
2405
+ };
2406
+ clientId: {
2407
+ type: "string";
2408
+ required: true;
2409
+ references: {
2410
+ model: string;
2411
+ field: string;
2412
+ };
2413
+ index: true;
2414
+ };
2415
+ sessionId: {
2416
+ type: "string";
2417
+ required: false;
2418
+ references: {
2419
+ model: string;
2420
+ field: string;
2421
+ onDelete: "set null";
2422
+ };
2423
+ index: true;
2424
+ };
2425
+ userId: {
2426
+ type: "string";
2427
+ required: false;
2428
+ references: {
2429
+ model: string;
2430
+ field: string;
2431
+ };
2432
+ index: true;
2433
+ };
2434
+ referenceId: {
2435
+ type: "string";
2436
+ required: false;
2437
+ };
2438
+ authorizationCodeId: {
2439
+ type: "string";
2440
+ required: false;
2441
+ index: true;
2442
+ };
2443
+ resources: {
2444
+ type: "string[]";
2445
+ required: false;
2446
+ };
2447
+ requestedUserInfoClaims: {
2448
+ type: "string[]";
2449
+ required: false;
2450
+ };
2451
+ refreshId: {
2452
+ type: "string";
2453
+ required: false;
2454
+ references: {
2455
+ model: string;
2456
+ field: string;
2457
+ };
2458
+ index: true;
2459
+ };
2460
+ expiresAt: {
2461
+ type: "date";
2462
+ };
2463
+ createdAt: {
2464
+ type: "date";
2465
+ };
2466
+ revoked: {
2467
+ type: "date";
2468
+ required: false;
2469
+ };
2470
+ confirmation: {
2471
+ type: "json";
2472
+ required: false;
2473
+ };
2474
+ scopes: {
2475
+ type: "string[]";
2476
+ required: true;
2477
+ };
2478
+ };
2479
+ };
2480
+ oauthConsent: {
2481
+ modelName: string;
2482
+ fields: {
2483
+ clientId: {
2484
+ type: "string";
2485
+ required: true;
2486
+ references: {
2487
+ model: string;
2488
+ field: string;
2489
+ };
2490
+ index: true;
2491
+ };
2492
+ userId: {
2493
+ type: "string";
2494
+ required: false;
2495
+ references: {
2496
+ model: string;
2497
+ field: string;
2498
+ };
2499
+ index: true;
2500
+ };
2501
+ referenceId: {
2502
+ type: "string";
2503
+ required: false;
2504
+ };
2505
+ resources: {
2506
+ type: "string[]";
2507
+ required: false;
2508
+ };
2509
+ requestedUserInfoClaims: {
2510
+ type: "string[]";
2511
+ required: false;
2512
+ };
2513
+ scopes: {
2514
+ type: "string[]";
2515
+ required: true;
2516
+ };
2517
+ createdAt: {
2518
+ type: "date";
2519
+ };
2520
+ updatedAt: {
2521
+ type: "date";
2522
+ };
2523
+ };
2524
+ };
2525
+ oauthClientAssertion: {
2526
+ modelName: string;
2527
+ fields: {
2528
+ expiresAt: {
2529
+ type: "date";
2530
+ required: true;
2531
+ };
2532
+ };
2533
+ };
2534
+ };
2535
+ rateLimit: ({
2536
+ pathMatcher: (path: string) => path is "/oauth2/token";
2537
+ window: number;
2538
+ max: number;
2539
+ } | {
2540
+ pathMatcher: (path: string) => path is "/oauth2/authorize";
2541
+ window: number;
2542
+ max: number;
2543
+ } | {
2544
+ pathMatcher: (path: string) => path is "/oauth2/introspect";
2545
+ window: number;
2546
+ max: number;
2547
+ } | {
2548
+ pathMatcher: (path: string) => path is "/oauth2/revoke";
2549
+ window: number;
2550
+ max: number;
2551
+ } | {
2552
+ pathMatcher: (path: string) => path is "/oauth2/register";
2553
+ window: number;
2554
+ max: number;
2555
+ } | {
2556
+ pathMatcher: (path: string) => path is "/oauth2/userinfo";
2557
+ window: number;
2558
+ max: number;
2559
+ })[];
2560
+ }, {
2561
+ id: "cimd";
2562
+ version: string;
2563
+ init(ctx: import("better-auth").AuthContext): void;
2564
+ }];
2565
+ }>;
2566
+ export type Auth = ReturnType<typeof createAuth>;
2567
+ export declare function initializeAuth(auth: Auth, config: AccountConfig, store: Store): Promise<void>;
2568
+ //# sourceMappingURL=provider.d.ts.map