@logto/schemas 1.14.0 → 1.16.0

package/lib/types/logto-config/index.d.ts

@@ -0,0 +1,1098 @@
+import type { ZodType } from 'zod';
+import { z } from 'zod';
+import { type AccessTokenJwtCustomizer, type ClientCredentialsJwtCustomizer } from './jwt-customizer.js';
+export * from './oidc-provider.js';
+export * from './jwt-customizer.js';
+/**
+ * Logto OIDC signing key types, used mainly in REST API routes.
+ */
+export declare enum LogtoOidcConfigKeyType {
+    PrivateKeys = "private-keys",
+    CookieKeys = "cookie-keys"
+}
+/**
+ * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+ */
+export declare enum LogtoOidcConfigKey {
+    PrivateKeys = "oidc.privateKeys",
+    CookieKeys = "oidc.cookieKeys"
+}
+/**
+ * Logto supported signing key algorithms for OIDC private keys that sign JWT tokens.
+ */
+export declare enum SupportedSigningKeyAlgorithm {
+    RSA = "RSA",
+    EC = "EC"
+}
+export declare const oidcConfigKeyGuard: z.ZodObject<{
+    id: z.ZodString;
+    value: z.ZodString;
+    createdAt: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    value: string;
+    id: string;
+    createdAt: number;
+}, {
+    value: string;
+    id: string;
+    createdAt: number;
+}>;
+export type OidcConfigKey = z.infer<typeof oidcConfigKeyGuard>;
+export type LogtoOidcConfigType = {
+    [LogtoOidcConfigKey.PrivateKeys]: OidcConfigKey[];
+    [LogtoOidcConfigKey.CookieKeys]: OidcConfigKey[];
+};
+export declare const logtoOidcConfigGuard: Readonly<{
+    [key in LogtoOidcConfigKey]: ZodType<LogtoOidcConfigType[key]>;
+}>;
+export declare enum LogtoJwtTokenKey {
+    AccessToken = "jwt.accessToken",
+    ClientCredentials = "jwt.clientCredentials"
+}
+export type JwtCustomizerType = {
+    [LogtoJwtTokenKey.AccessToken]: AccessTokenJwtCustomizer;
+    [LogtoJwtTokenKey.ClientCredentials]: ClientCredentialsJwtCustomizer;
+};
+export declare const jwtCustomizerConfigGuard: Readonly<{
+    [key in LogtoJwtTokenKey]: ZodType<JwtCustomizerType[key]>;
+}>;
+export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [z.ZodObject<{
+    key: z.ZodLiteral<LogtoJwtTokenKey.AccessToken>;
+    value: z.ZodObject<{
+        script: z.ZodString;
+        environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        tokenSample: z.ZodOptional<z.ZodObject<{
+            accountId: z.ZodOptional<z.ZodString>;
+            expiresWithSession: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+            grantId: z.ZodOptional<z.ZodString>;
+            gty: z.ZodOptional<z.ZodString>;
+            sessionUid: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            sid: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            kind: z.ZodOptional<z.ZodLiteral<"AccessToken">>;
+            jti: z.ZodOptional<z.ZodString>;
+            aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+            scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            accountId?: string | undefined;
+            expiresWithSession?: boolean | undefined;
+            grantId?: string | undefined;
+            gty?: string | undefined;
+            sessionUid?: string | undefined;
+            sid?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        }, {
+            accountId?: string | undefined;
+            expiresWithSession?: boolean | undefined;
+            grantId?: string | undefined;
+            gty?: string | undefined;
+            sessionUid?: string | undefined;
+            sid?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        }>>;
+        contextSample: z.ZodOptional<z.ZodObject<{
+            user: z.ZodObject<{
+                name: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                id: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
+                applicationId: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                username: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                profile: z.ZodOptional<ZodType<Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }>, z.ZodTypeDef, Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }>>>;
+                createdAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+                updatedAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+                customData: z.ZodOptional<ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>;
+                primaryEmail: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                primaryPhone: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                avatar: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                identities: z.ZodOptional<ZodType<Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }>, z.ZodTypeDef, Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }>>>;
+                isSuspended: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+                lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
+                ssoIdentities: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
+                    tenantId: ZodType<string, z.ZodTypeDef, string>;
+                    id: ZodType<string, z.ZodTypeDef, string>;
+                    userId: ZodType<string, z.ZodTypeDef, string>;
+                    issuer: ZodType<string, z.ZodTypeDef, string>;
+                    identityId: ZodType<string, z.ZodTypeDef, string>;
+                    detail: ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
+                    createdAt: ZodType<number, z.ZodTypeDef, number>;
+                    ssoConnectorId: ZodType<string, z.ZodTypeDef, string>;
+                }, "issuer" | "identityId" | "detail">, "strip", z.ZodTypeAny, {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }, {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }>, "many">>;
+                mfaVerificationFactors: z.ZodOptional<z.ZodArray<z.ZodNativeEnum<typeof import("../../index.js").MfaFactor>, "many">>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    name: ZodType<string, z.ZodTypeDef, string>;
+                    id: ZodType<string, z.ZodTypeDef, string>;
+                    description: ZodType<string, z.ZodTypeDef, string>;
+                    scopes: z.ZodArray<z.ZodObject<Pick<{
+                        name: ZodType<string, z.ZodTypeDef, string>;
+                        id: ZodType<string, z.ZodTypeDef, string>;
+                        tenantId: ZodType<string, z.ZodTypeDef, string>;
+                        createdAt: ZodType<number, z.ZodTypeDef, number>;
+                        description: ZodType<string | null, z.ZodTypeDef, string | null>;
+                        resourceId: ZodType<string, z.ZodTypeDef, string>;
+                        resource: import("../../index.js").Guard<import("../../index.js").Resource>;
+                    }, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }, {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }>, "many">;
+                }, "strip", z.ZodTypeAny, {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }, {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }>, "many">>;
+                organizations: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
+                    tenantId: ZodType<string, z.ZodTypeDef, string>;
+                    id: ZodType<string, z.ZodTypeDef, string>;
+                    name: ZodType<string, z.ZodTypeDef, string>;
+                    description: ZodType<string | null, z.ZodTypeDef, string | null>;
+                    customData: ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
+                    createdAt: ZodType<number, z.ZodTypeDef, number>;
+                }, "name" | "id" | "description">, "strip", z.ZodTypeAny, {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }, {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }>, "many">>;
+                organizationRoles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    organizationId: z.ZodString;
+                    roleId: z.ZodString;
+                    roleName: z.ZodString;
+                }, "strip", z.ZodTypeAny, {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }, {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }>, "many">>;
+            }, "strip", z.ZodTypeAny, {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            }, {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            }>;
+        }, "strip", z.ZodTypeAny, {
+            user: {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            };
+        }, {
+            user: {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            };
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        tokenSample?: {
+            accountId?: string | undefined;
+            expiresWithSession?: boolean | undefined;
+            grantId?: string | undefined;
+            gty?: string | undefined;
+            sessionUid?: string | undefined;
+            sid?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+        contextSample?: {
+            user: {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            };
+        } | undefined;
+    }, {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        tokenSample?: {
+            accountId?: string | undefined;
+            expiresWithSession?: boolean | undefined;
+            grantId?: string | undefined;
+            gty?: string | undefined;
+            sessionUid?: string | undefined;
+            sid?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+        contextSample?: {
+            user: {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            };
+        } | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    value: {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        tokenSample?: {
+            accountId?: string | undefined;
+            expiresWithSession?: boolean | undefined;
+            grantId?: string | undefined;
+            gty?: string | undefined;
+            sessionUid?: string | undefined;
+            sid?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+        contextSample?: {
+            user: {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            };
+        } | undefined;
+    };
+    key: LogtoJwtTokenKey.AccessToken;
+}, {
+    value: {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        tokenSample?: {
+            accountId?: string | undefined;
+            expiresWithSession?: boolean | undefined;
+            grantId?: string | undefined;
+            gty?: string | undefined;
+            sessionUid?: string | undefined;
+            sid?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+        contextSample?: {
+            user: {
+                name?: string | null | undefined;
+                id?: string | undefined;
+                applicationId?: string | null | undefined;
+                username?: string | null | undefined;
+                profile?: Partial<{
+                    familyName: string;
+                    givenName: string;
+                    middleName: string;
+                    nickname: string;
+                    preferredUsername: string;
+                    profile: string;
+                    website: string;
+                    gender: string;
+                    birthdate: string;
+                    zoneinfo: string;
+                    locale: string;
+                    address: Partial<{
+                        formatted: string;
+                        streetAddress: string;
+                        locality: string;
+                        /**
+                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
+                         */
+                        region: string;
+                        postalCode: string;
+                        country: string;
+                    }>;
+                }> | undefined;
+                createdAt?: number | undefined;
+                updatedAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                primaryEmail?: string | null | undefined;
+                primaryPhone?: string | null | undefined;
+                avatar?: string | null | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
+                isSuspended?: boolean | undefined;
+                lastSignInAt?: number | null | undefined;
+                ssoIdentities?: {
+                    issuer: string;
+                    identityId: string;
+                    detail: import("@withtyped/server").JsonObject;
+                }[] | undefined;
+                mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                organizationRoles?: {
+                    organizationId: string;
+                    roleId: string;
+                    roleName: string;
+                }[] | undefined;
+            };
+        } | undefined;
+    };
+    key: LogtoJwtTokenKey.AccessToken;
+}>, z.ZodObject<{
+    key: z.ZodLiteral<LogtoJwtTokenKey.ClientCredentials>;
+    value: z.ZodObject<{
+        script: z.ZodString;
+        environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server").Json, z.ZodTypeDef, import("@withtyped/server").Json>>>;
+        tokenSample: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodOptional<z.ZodLiteral<"ClientCredentials">>;
+            jti: z.ZodOptional<z.ZodString>;
+            aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+            scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            kind?: "ClientCredentials" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        }, {
+            kind?: "ClientCredentials" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        tokenSample?: {
+            kind?: "ClientCredentials" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+    }, {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        tokenSample?: {
+            kind?: "ClientCredentials" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    value: {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        tokenSample?: {
+            kind?: "ClientCredentials" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+    };
+    key: LogtoJwtTokenKey.ClientCredentials;
+}, {
+    value: {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
+        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        tokenSample?: {
+            kind?: "ClientCredentials" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            scope?: string | undefined;
+            clientId?: string | undefined;
+        } | undefined;
+    };
+    key: LogtoJwtTokenKey.ClientCredentials;
+}>]>;
+export type JwtCustomizerConfigs = z.infer<typeof jwtCustomizerConfigsGuard>;
+export declare const adminConsoleDataGuard: z.ZodObject<{
+    signInExperienceCustomized: z.ZodBoolean;
+    organizationCreated: z.ZodBoolean;
+    developmentTenantMigrationNotification: z.ZodOptional<z.ZodObject<{
+        isPaidTenant: z.ZodBoolean;
+        /**
+         * Tag is used to store the original tenant tag before dev tenant migration.
+         * This field is only used for DB rollback and because the `TenantTag` may change, so we don't guard it as the `TenantTag` type.
+         */
+        tag: z.ZodString;
+        readAt: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        isPaidTenant: boolean;
+        tag: string;
+        readAt?: number | undefined;
+    }, {
+        isPaidTenant: boolean;
+        tag: string;
+        readAt?: number | undefined;
+    }>>;
+    checkedChargeNotification: z.ZodOptional<z.ZodObject<{
+        token: z.ZodOptional<z.ZodBoolean>;
+        apiResource: z.ZodOptional<z.ZodBoolean>;
+        machineToMachineApp: z.ZodOptional<z.ZodBoolean>;
+        tenantMember: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        token?: boolean | undefined;
+        apiResource?: boolean | undefined;
+        machineToMachineApp?: boolean | undefined;
+        tenantMember?: boolean | undefined;
+    }, {
+        token?: boolean | undefined;
+        apiResource?: boolean | undefined;
+        machineToMachineApp?: boolean | undefined;
+        tenantMember?: boolean | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    signInExperienceCustomized: boolean;
+    organizationCreated: boolean;
+    developmentTenantMigrationNotification?: {
+        isPaidTenant: boolean;
+        tag: string;
+        readAt?: number | undefined;
+    } | undefined;
+    checkedChargeNotification?: {
+        token?: boolean | undefined;
+        apiResource?: boolean | undefined;
+        machineToMachineApp?: boolean | undefined;
+        tenantMember?: boolean | undefined;
+    } | undefined;
+}, {
+    signInExperienceCustomized: boolean;
+    organizationCreated: boolean;
+    developmentTenantMigrationNotification?: {
+        isPaidTenant: boolean;
+        tag: string;
+        readAt?: number | undefined;
+    } | undefined;
+    checkedChargeNotification?: {
+        token?: boolean | undefined;
+        apiResource?: boolean | undefined;
+        machineToMachineApp?: boolean | undefined;
+        tenantMember?: boolean | undefined;
+    } | undefined;
+}>;
+export type AdminConsoleData = z.infer<typeof adminConsoleDataGuard>;
+export declare const cloudConnectionDataGuard: z.ZodObject<{
+    appId: z.ZodString;
+    appSecret: z.ZodString;
+    resource: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    resource: string;
+    appId: string;
+    appSecret: string;
+}, {
+    resource: string;
+    appId: string;
+    appSecret: string;
+}>;
+export type CloudConnectionData = z.infer<typeof cloudConnectionDataGuard>;
+export declare enum LogtoTenantConfigKey {
+    AdminConsole = "adminConsole",
+    CloudConnection = "cloudConnection",
+    /** The URL to redirect when session not found in Sign-in Experience. */
+    SessionNotFoundRedirectUrl = "sessionNotFoundRedirectUrl"
+}
+export type LogtoTenantConfigType = {
+    [LogtoTenantConfigKey.AdminConsole]: AdminConsoleData;
+    [LogtoTenantConfigKey.CloudConnection]: CloudConnectionData;
+    [LogtoTenantConfigKey.SessionNotFoundRedirectUrl]: {
+        url: string;
+    };
+};
+export declare const logtoTenantConfigGuard: Readonly<{
+    [key in LogtoTenantConfigKey]: ZodType<LogtoTenantConfigType[key]>;
+}>;
+export type LogtoConfigKey = LogtoOidcConfigKey | LogtoJwtTokenKey | LogtoTenantConfigKey;
+export type LogtoConfigType = LogtoOidcConfigType | JwtCustomizerType | LogtoTenantConfigType;
+export type LogtoConfigGuard = typeof logtoOidcConfigGuard & typeof jwtCustomizerConfigGuard & typeof logtoTenantConfigGuard;
+export declare const logtoConfigKeys: readonly LogtoConfigKey[];
+export declare const logtoConfigGuards: LogtoConfigGuard;
+export declare const oidcConfigKeysResponseGuard: z.ZodObject<{
+    id: z.ZodString;
+    createdAt: z.ZodNumber;
+    signingKeyAlgorithm: z.ZodOptional<z.ZodNativeEnum<typeof SupportedSigningKeyAlgorithm>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    createdAt: number;
+    signingKeyAlgorithm?: SupportedSigningKeyAlgorithm | undefined;
+}, {
+    id: string;
+    createdAt: number;
+    signingKeyAlgorithm?: SupportedSigningKeyAlgorithm | undefined;
+}>;
+export type OidcConfigKeysResponse = z.infer<typeof oidcConfigKeysResponseGuard>;