@logto/schemas 1.14.0 → 1.16.0

package/lib/types/logto-config/jwt-customizer.d.ts

@@ -0,0 +1,1726 @@
+import { z } from 'zod';
+export declare const jwtCustomizerGuard: z.ZodObject<{
+    script: z.ZodString;
+    environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("@withtyped/server/lib/types.js").Json, z.ZodTypeDef, import("@withtyped/server/lib/types.js").Json>>>;
+}, "strip", z.ZodTypeAny, {
+    script: string;
+    environmentVariables?: Record<string, string> | undefined;
+    contextSample?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+}, {
+    script: string;
+    environmentVariables?: Record<string, string> | undefined;
+    contextSample?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+}>;
+export declare enum LogtoJwtTokenKeyType {
+    AccessToken = "access-token",
+    ClientCredentials = "client-credentials"
+}
+export declare const jwtCustomizerUserContextGuard: z.ZodObject<{
+    name: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    applicationId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    username: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    profile: z.ZodType<Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>, z.ZodTypeDef, Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
+    customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+    primaryEmail: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    primaryPhone: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    avatar: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    identities: z.ZodType<Record<string, {
+        userId: string;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    }>, z.ZodTypeDef, Record<string, {
+        userId: string;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    }>>;
+    isSuspended: z.ZodType<boolean, z.ZodTypeDef, boolean>;
+    lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
+    ssoIdentities: z.ZodArray<z.ZodObject<Pick<{
+        tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+        id: z.ZodType<string, z.ZodTypeDef, string>;
+        userId: z.ZodType<string, z.ZodTypeDef, string>;
+        issuer: z.ZodType<string, z.ZodTypeDef, string>;
+        identityId: z.ZodType<string, z.ZodTypeDef, string>;
+        detail: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+        createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+        ssoConnectorId: z.ZodType<string, z.ZodTypeDef, string>;
+    }, "issuer" | "identityId" | "detail">, "strip", z.ZodTypeAny, {
+        issuer: string;
+        identityId: string;
+        detail: import("@withtyped/server/lib/types.js").JsonObject;
+    }, {
+        issuer: string;
+        identityId: string;
+        detail: import("@withtyped/server/lib/types.js").JsonObject;
+    }>, "many">;
+    mfaVerificationFactors: z.ZodArray<z.ZodNativeEnum<typeof import("../../foundations/index.js").MfaFactor>, "many">;
+    roles: z.ZodArray<z.ZodObject<{
+        name: z.ZodType<string, z.ZodTypeDef, string>;
+        id: z.ZodType<string, z.ZodTypeDef, string>;
+        description: z.ZodType<string, z.ZodTypeDef, string>;
+        scopes: z.ZodArray<z.ZodObject<Pick<{
+            name: z.ZodType<string, z.ZodTypeDef, string>;
+            id: z.ZodType<string, z.ZodTypeDef, string>;
+            tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+            createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+            description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+            resourceId: z.ZodType<string, z.ZodTypeDef, string>;
+            resource: import("../../foundations/schemas.js").Guard<import("../../db-entries/resource.js").Resource>;
+        }, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
+            name: string;
+            id: string;
+            description: string | null;
+            resource: import("../../db-entries/resource.js").Resource;
+            resourceId: string;
+        }, {
+            name: string;
+            id: string;
+            description: string | null;
+            resource: import("../../db-entries/resource.js").Resource;
+            resourceId: string;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        id: string;
+        description: string;
+        scopes: {
+            name: string;
+            id: string;
+            description: string | null;
+            resource: import("../../db-entries/resource.js").Resource;
+            resourceId: string;
+        }[];
+    }, {
+        name: string;
+        id: string;
+        description: string;
+        scopes: {
+            name: string;
+            id: string;
+            description: string | null;
+            resource: import("../../db-entries/resource.js").Resource;
+            resourceId: string;
+        }[];
+    }>, "many">;
+    organizations: z.ZodArray<z.ZodObject<Pick<{
+        tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+        id: z.ZodType<string, z.ZodTypeDef, string>;
+        name: z.ZodType<string, z.ZodTypeDef, string>;
+        description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+        customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+        createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    }, "name" | "id" | "description">, "strip", z.ZodTypeAny, {
+        name: string;
+        id: string;
+        description: string | null;
+    }, {
+        name: string;
+        id: string;
+        description: string | null;
+    }>, "many">;
+    organizationRoles: z.ZodArray<z.ZodObject<{
+        organizationId: z.ZodString;
+        roleId: z.ZodString;
+        roleName: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        organizationId: string;
+        roleId: string;
+        roleName: string;
+    }, {
+        organizationId: string;
+        roleId: string;
+        roleName: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    name: string | null;
+    id: string;
+    applicationId: string | null;
+    username: string | null;
+    profile: Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>;
+    createdAt: number;
+    updatedAt: number;
+    customData: import("@withtyped/server/lib/types.js").JsonObject;
+    organizations: {
+        name: string;
+        id: string;
+        description: string | null;
+    }[];
+    roles: {
+        name: string;
+        id: string;
+        description: string;
+        scopes: {
+            name: string;
+            id: string;
+            description: string | null;
+            resource: import("../../db-entries/resource.js").Resource;
+            resourceId: string;
+        }[];
+    }[];
+    primaryEmail: string | null;
+    primaryPhone: string | null;
+    avatar: string | null;
+    identities: Record<string, {
+        userId: string;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    }>;
+    isSuspended: boolean;
+    lastSignInAt: number | null;
+    ssoIdentities: {
+        issuer: string;
+        identityId: string;
+        detail: import("@withtyped/server/lib/types.js").JsonObject;
+    }[];
+    mfaVerificationFactors: import("../../foundations/index.js").MfaFactor[];
+    organizationRoles: {
+        organizationId: string;
+        roleId: string;
+        roleName: string;
+    }[];
+}, {
+    name: string | null;
+    id: string;
+    applicationId: string | null;
+    username: string | null;
+    profile: Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>;
+    createdAt: number;
+    updatedAt: number;
+    customData: import("@withtyped/server/lib/types.js").JsonObject;
+    organizations: {
+        name: string;
+        id: string;
+        description: string | null;
+    }[];
+    roles: {
+        name: string;
+        id: string;
+        description: string;
+        scopes: {
+            name: string;
+            id: string;
+            description: string | null;
+            resource: import("../../db-entries/resource.js").Resource;
+            resourceId: string;
+        }[];
+    }[];
+    primaryEmail: string | null;
+    primaryPhone: string | null;
+    avatar: string | null;
+    identities: Record<string, {
+        userId: string;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    }>;
+    isSuspended: boolean;
+    lastSignInAt: number | null;
+    ssoIdentities: {
+        issuer: string;
+        identityId: string;
+        detail: import("@withtyped/server/lib/types.js").JsonObject;
+    }[];
+    mfaVerificationFactors: import("../../foundations/index.js").MfaFactor[];
+    organizationRoles: {
+        organizationId: string;
+        roleId: string;
+        roleName: string;
+    }[];
+}>;
+export type JwtCustomizerUserContext = z.infer<typeof jwtCustomizerUserContextGuard>;
+export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
+    script: z.ZodString;
+    environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    tokenSample: z.ZodOptional<z.ZodObject<{
+        accountId: z.ZodOptional<z.ZodString>;
+        expiresWithSession: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+        grantId: z.ZodOptional<z.ZodString>;
+        gty: z.ZodOptional<z.ZodString>;
+        sessionUid: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        sid: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        kind: z.ZodOptional<z.ZodLiteral<"AccessToken">>;
+        jti: z.ZodOptional<z.ZodString>;
+        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }, {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }>>;
+    contextSample: z.ZodOptional<z.ZodObject<{
+        user: z.ZodObject<{
+            name: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            id: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+            applicationId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            username: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            profile: z.ZodOptional<z.ZodType<Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }>, z.ZodTypeDef, Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }>>>;
+            createdAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
+            updatedAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
+            customData: z.ZodOptional<z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>>;
+            primaryEmail: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            primaryPhone: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            avatar: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            identities: z.ZodOptional<z.ZodType<Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }>, z.ZodTypeDef, Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }>>>;
+            isSuspended: z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>;
+            lastSignInAt: z.ZodOptional<z.ZodType<number | null, z.ZodTypeDef, number | null>>;
+            ssoIdentities: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
+                tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+                id: z.ZodType<string, z.ZodTypeDef, string>;
+                userId: z.ZodType<string, z.ZodTypeDef, string>;
+                issuer: z.ZodType<string, z.ZodTypeDef, string>;
+                identityId: z.ZodType<string, z.ZodTypeDef, string>;
+                detail: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+                createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+                ssoConnectorId: z.ZodType<string, z.ZodTypeDef, string>;
+            }, "issuer" | "identityId" | "detail">, "strip", z.ZodTypeAny, {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }, {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }>, "many">>;
+            mfaVerificationFactors: z.ZodOptional<z.ZodArray<z.ZodNativeEnum<typeof import("../../foundations/index.js").MfaFactor>, "many">>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                name: z.ZodType<string, z.ZodTypeDef, string>;
+                id: z.ZodType<string, z.ZodTypeDef, string>;
+                description: z.ZodType<string, z.ZodTypeDef, string>;
+                scopes: z.ZodArray<z.ZodObject<Pick<{
+                    name: z.ZodType<string, z.ZodTypeDef, string>;
+                    id: z.ZodType<string, z.ZodTypeDef, string>;
+                    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+                    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+                    description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+                    resourceId: z.ZodType<string, z.ZodTypeDef, string>;
+                    resource: import("../../foundations/schemas.js").Guard<import("../../db-entries/resource.js").Resource>;
+                }, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }, {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }>, "many">;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }, {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }>, "many">>;
+            organizations: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
+                tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+                id: z.ZodType<string, z.ZodTypeDef, string>;
+                name: z.ZodType<string, z.ZodTypeDef, string>;
+                description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+                customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+                createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+            }, "name" | "id" | "description">, "strip", z.ZodTypeAny, {
+                name: string;
+                id: string;
+                description: string | null;
+            }, {
+                name: string;
+                id: string;
+                description: string | null;
+            }>, "many">>;
+            organizationRoles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                organizationId: z.ZodString;
+                roleId: z.ZodString;
+                roleName: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }, {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        }, {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    }, {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    script: string;
+    environmentVariables?: Record<string, string> | undefined;
+    tokenSample?: {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    } | undefined;
+    contextSample?: {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    } | undefined;
+}, {
+    script: string;
+    environmentVariables?: Record<string, string> | undefined;
+    tokenSample?: {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    } | undefined;
+    contextSample?: {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    } | undefined;
+}>;
+export type AccessTokenJwtCustomizer = z.infer<typeof accessTokenJwtCustomizerGuard>;
+export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
+    script: z.ZodString;
+    environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("@withtyped/server/lib/types.js").Json, z.ZodTypeDef, import("@withtyped/server/lib/types.js").Json>>>;
+    tokenSample: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodOptional<z.ZodLiteral<"ClientCredentials">>;
+        jti: z.ZodOptional<z.ZodString>;
+        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }, {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    script: string;
+    environmentVariables?: Record<string, string> | undefined;
+    contextSample?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    tokenSample?: {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    } | undefined;
+}, {
+    script: string;
+    environmentVariables?: Record<string, string> | undefined;
+    contextSample?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    tokenSample?: {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    } | undefined;
+}>;
+export type ClientCredentialsJwtCustomizer = z.infer<typeof clientCredentialsJwtCustomizerGuard>;
+/**
+ * This guard is for the core JWT customizer testing API request body guard.
+ * Unlike the DB guard
+ *
+ * - rename the `tokenSample` to `token` and is required for testing.
+ * - rename the `contextSample` to `context` and is required for AccessToken testing.
+ */
+export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<"tokenType", [z.ZodObject<{
+    token: z.ZodObject<{
+        accountId: z.ZodOptional<z.ZodString>;
+        expiresWithSession: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+        grantId: z.ZodOptional<z.ZodString>;
+        gty: z.ZodOptional<z.ZodString>;
+        sessionUid: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        sid: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        kind: z.ZodOptional<z.ZodLiteral<"AccessToken">>;
+        jti: z.ZodOptional<z.ZodString>;
+        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }, {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }>;
+    context: z.ZodObject<{
+        user: z.ZodObject<{
+            name: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            id: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+            applicationId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            username: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            profile: z.ZodOptional<z.ZodType<Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }>, z.ZodTypeDef, Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }>>>;
+            createdAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
+            updatedAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
+            customData: z.ZodOptional<z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>>;
+            primaryEmail: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            primaryPhone: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            avatar: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+            identities: z.ZodOptional<z.ZodType<Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }>, z.ZodTypeDef, Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }>>>;
+            isSuspended: z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>;
+            lastSignInAt: z.ZodOptional<z.ZodType<number | null, z.ZodTypeDef, number | null>>;
+            ssoIdentities: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
+                tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+                id: z.ZodType<string, z.ZodTypeDef, string>;
+                userId: z.ZodType<string, z.ZodTypeDef, string>;
+                issuer: z.ZodType<string, z.ZodTypeDef, string>;
+                identityId: z.ZodType<string, z.ZodTypeDef, string>;
+                detail: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+                createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+                ssoConnectorId: z.ZodType<string, z.ZodTypeDef, string>;
+            }, "issuer" | "identityId" | "detail">, "strip", z.ZodTypeAny, {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }, {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }>, "many">>;
+            mfaVerificationFactors: z.ZodOptional<z.ZodArray<z.ZodNativeEnum<typeof import("../../foundations/index.js").MfaFactor>, "many">>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                name: z.ZodType<string, z.ZodTypeDef, string>;
+                id: z.ZodType<string, z.ZodTypeDef, string>;
+                description: z.ZodType<string, z.ZodTypeDef, string>;
+                scopes: z.ZodArray<z.ZodObject<Pick<{
+                    name: z.ZodType<string, z.ZodTypeDef, string>;
+                    id: z.ZodType<string, z.ZodTypeDef, string>;
+                    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+                    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+                    description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+                    resourceId: z.ZodType<string, z.ZodTypeDef, string>;
+                    resource: import("../../foundations/schemas.js").Guard<import("../../db-entries/resource.js").Resource>;
+                }, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }, {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }>, "many">;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }, {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }>, "many">>;
+            organizations: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
+                tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+                id: z.ZodType<string, z.ZodTypeDef, string>;
+                name: z.ZodType<string, z.ZodTypeDef, string>;
+                description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+                customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+                createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+            }, "name" | "id" | "description">, "strip", z.ZodTypeAny, {
+                name: string;
+                id: string;
+                description: string | null;
+            }, {
+                name: string;
+                id: string;
+                description: string | null;
+            }>, "many">>;
+            organizationRoles: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                organizationId: z.ZodString;
+                roleId: z.ZodString;
+                roleName: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }, {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        }, {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    }, {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    }>;
+    script: z.ZodString;
+    environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.AccessToken>;
+}, "strip", z.ZodTypeAny, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.AccessToken;
+    token: {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    };
+    context: {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    };
+    environmentVariables?: Record<string, string> | undefined;
+}, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.AccessToken;
+    token: {
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        grantId?: string | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    };
+    context: {
+        user: {
+            name?: string | null | undefined;
+            id?: string | undefined;
+            applicationId?: string | null | undefined;
+            username?: string | null | undefined;
+            profile?: Partial<{
+                familyName: string;
+                givenName: string;
+                middleName: string;
+                nickname: string;
+                preferredUsername: string;
+                profile: string;
+                website: string;
+                gender: string;
+                birthdate: string;
+                zoneinfo: string;
+                locale: string;
+                address: Partial<{
+                    formatted: string;
+                    streetAddress: string;
+                    locality: string;
+                    region: string;
+                    postalCode: string;
+                    country: string;
+                }>;
+            }> | undefined;
+            createdAt?: number | undefined;
+            updatedAt?: number | undefined;
+            customData?: import("@withtyped/server/lib/types.js").JsonObject | undefined;
+            primaryEmail?: string | null | undefined;
+            primaryPhone?: string | null | undefined;
+            avatar?: string | null | undefined;
+            identities?: Record<string, {
+                userId: string;
+                details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+            }> | undefined;
+            isSuspended?: boolean | undefined;
+            lastSignInAt?: number | null | undefined;
+            ssoIdentities?: {
+                issuer: string;
+                identityId: string;
+                detail: import("@withtyped/server/lib/types.js").JsonObject;
+            }[] | undefined;
+            mfaVerificationFactors?: import("../../foundations/index.js").MfaFactor[] | undefined;
+            roles?: {
+                name: string;
+                id: string;
+                description: string;
+                scopes: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                    resource: import("../../db-entries/resource.js").Resource;
+                    resourceId: string;
+                }[];
+            }[] | undefined;
+            organizations?: {
+                name: string;
+                id: string;
+                description: string | null;
+            }[] | undefined;
+            organizationRoles?: {
+                organizationId: string;
+                roleId: string;
+                roleName: string;
+            }[] | undefined;
+        };
+    };
+    environmentVariables?: Record<string, string> | undefined;
+}>, z.ZodObject<{
+    token: z.ZodObject<{
+        kind: z.ZodOptional<z.ZodLiteral<"ClientCredentials">>;
+        jti: z.ZodOptional<z.ZodString>;
+        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }, {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    }>;
+    script: z.ZodString;
+    environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.ClientCredentials>;
+}, "strip", z.ZodTypeAny, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.ClientCredentials;
+    token: {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    };
+    environmentVariables?: Record<string, string> | undefined;
+}, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.ClientCredentials;
+    token: {
+        kind?: "ClientCredentials" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        scope?: string | undefined;
+        clientId?: string | undefined;
+    };
+    environmentVariables?: Record<string, string> | undefined;
+}>]>;
+export type JwtCustomizerTestRequestBody = z.infer<typeof jwtCustomizerTestRequestBodyGuard>;
+export declare const customJwtFetcherGuard: z.ZodDiscriminatedUnion<"tokenType", [z.ZodObject<{
+    script: z.ZodString;
+    environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    token: z.ZodRecord<z.ZodString, z.ZodType<import("@withtyped/server/lib/types.js").Json, z.ZodTypeDef, import("@withtyped/server/lib/types.js").Json>>;
+    tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.AccessToken>;
+    context: z.ZodRecord<z.ZodString, z.ZodType<import("@withtyped/server/lib/types.js").Json, z.ZodTypeDef, import("@withtyped/server/lib/types.js").Json>>;
+}, "strip", z.ZodTypeAny, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.AccessToken;
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
+    context: Record<string, import("@withtyped/server/lib/types.js").Json>;
+    environmentVariables?: Record<string, string> | undefined;
+}, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.AccessToken;
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
+    context: Record<string, import("@withtyped/server/lib/types.js").Json>;
+    environmentVariables?: Record<string, string> | undefined;
+}>, z.ZodObject<{
+    script: z.ZodString;
+    environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    token: z.ZodRecord<z.ZodString, z.ZodType<import("@withtyped/server/lib/types.js").Json, z.ZodTypeDef, import("@withtyped/server/lib/types.js").Json>>;
+    tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.ClientCredentials>;
+}, "strip", z.ZodTypeAny, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.ClientCredentials;
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
+    environmentVariables?: Record<string, string> | undefined;
+}, {
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.ClientCredentials;
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
+    environmentVariables?: Record<string, string> | undefined;
+}>]>;
+export type CustomJwtFetcher = z.infer<typeof customJwtFetcherGuard>;