@logto/schemas 1.18.0 → 1.20.0

package/lib/types/logto-config/index.d.ts

@@ -58,9 +58,11 @@ export declare const jwtCustomizerConfigGuard: Readonly<{
 }>;
 export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [z.ZodObject<{
     key: z.ZodLiteral<LogtoJwtTokenKey.AccessToken>;
-    value: z.ZodObject<{
+    value: z.ZodObject<z.objectUtil.extendShape<{
         script: z.ZodString;
         environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server").Json, z.ZodTypeDef, import("@withtyped/server").Json>>>;
+    }, {
         tokenSample: z.ZodOptional<z.ZodObject<{
             accountId: z.ZodOptional<z.ZodString>;
             expiresWithSession: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
@@ -74,28 +76,28 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
             scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
             clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
+            grantId?: string | undefined;
+            scope?: string | undefined;
             accountId?: string | undefined;
             expiresWithSession?: boolean | undefined;
-            grantId?: string | undefined;
             gty?: string | undefined;
             sessionUid?: string | undefined;
             sid?: string | undefined;
             kind?: "AccessToken" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         }, {
+            grantId?: string | undefined;
+            scope?: string | undefined;
             accountId?: string | undefined;
             expiresWithSession?: boolean | undefined;
-            grantId?: string | undefined;
             gty?: string | undefined;
             sessionUid?: string | undefined;
             sid?: string | undefined;
             kind?: "AccessToken" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         }>>;
         contextSample: z.ZodOptional<z.ZodObject<{
@@ -104,6 +106,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 id: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
                 applicationId: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
                 username: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                createdAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
                 profile: z.ZodOptional<ZodType<Partial<{
                     familyName: string;
                     givenName: string;
@@ -120,9 +123,6 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
@@ -143,17 +143,13 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }>>>;
-                createdAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
-                updatedAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
                 customData: z.ZodOptional<ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>;
+                updatedAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
                 primaryEmail: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
                 primaryPhone: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
                 avatar: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
@@ -186,19 +182,24 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }>, "many">>;
                 mfaVerificationFactors: z.ZodOptional<z.ZodArray<z.ZodNativeEnum<typeof import("../../index.js").MfaFactor>, "many">>;
-                roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                    name: ZodType<string, z.ZodTypeDef, string>;
+                roles: z.ZodOptional<z.ZodArray<z.ZodObject<z.objectUtil.extendShape<Pick<{
+                    tenantId: ZodType<string, z.ZodTypeDef, string>;
                     id: ZodType<string, z.ZodTypeDef, string>;
+                    name: ZodType<string, z.ZodTypeDef, string>;
                     description: ZodType<string, z.ZodTypeDef, string>;
-                    scopes: z.ZodArray<z.ZodObject<Pick<{
-                        name: ZodType<string, z.ZodTypeDef, string>;
-                        id: ZodType<string, z.ZodTypeDef, string>;
+                    type: ZodType<import("../../index.js").RoleType, z.ZodTypeDef, import("../../index.js").RoleType>;
+                    isDefault: ZodType<boolean, z.ZodTypeDef, boolean>;
+                }, "name" | "id" | "description">, {
+                    scopes: z.ZodArray<z.ZodObject<Pick<z.objectUtil.extendShape<{
                         tenantId: ZodType<string, z.ZodTypeDef, string>;
-                        createdAt: ZodType<number, z.ZodTypeDef, number>;
-                        description: ZodType<string | null, z.ZodTypeDef, string | null>;
+                        id: ZodType<string, z.ZodTypeDef, string>;
                         resourceId: ZodType<string, z.ZodTypeDef, string>;
+                        name: ZodType<string, z.ZodTypeDef, string>;
+                        description: ZodType<string | null, z.ZodTypeDef, string | null>;
+                        createdAt: ZodType<number, z.ZodTypeDef, number>;
+                    }, {
                         resource: import("../../index.js").Guard<import("../../index.js").Resource>;
-                    }, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
+                    }>, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
                         name: string;
                         id: string;
                         description: string | null;
@@ -211,7 +212,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         resource: import("../../index.js").Resource;
                         resourceId: string;
                     }>, "many">;
-                }, "strip", z.ZodTypeAny, {
+                }>, "strip", z.ZodTypeAny, {
                     name: string;
                     id: string;
                     description: string;
@@ -241,6 +242,17 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     description: ZodType<string | null, z.ZodTypeDef, string | null>;
                     customData: ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
                     isMfaRequired: ZodType<boolean, z.ZodTypeDef, boolean>;
+                    branding: ZodType<{
+                        logoUrl?: string | undefined;
+                        darkLogoUrl?: string | undefined;
+                        favicon?: string | undefined;
+                        darkFavicon?: string | undefined;
+                    }, z.ZodTypeDef, {
+                        logoUrl?: string | undefined;
+                        darkLogoUrl?: string | undefined;
+                        favicon?: string | undefined;
+                        darkFavicon?: string | undefined;
+                    }>;
                     createdAt: ZodType<number, z.ZodTypeDef, number>;
                 }, "name" | "id" | "description">, "strip", z.ZodTypeAny, {
                     name: string;
@@ -269,6 +281,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -285,17 +298,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -312,23 +338,6 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
@@ -339,6 +348,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -355,17 +365,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -382,35 +405,29 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
                     roleName: string;
                 }[] | undefined;
             }>;
+            grant: z.ZodOptional<z.ZodObject<{
+                type: z.ZodOptional<z.ZodLiteral<import("../oidc-config.js").GrantType.TokenExchange>>;
+                subjectTokenContext: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server").Json, z.ZodTypeDef, import("@withtyped/server").Json>>>;
+            }, "strip", z.ZodTypeAny, {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            }, {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            }>>;
         }, "strip", z.ZodTypeAny, {
             user: {
                 name?: string | null | undefined;
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -427,17 +444,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -454,35 +484,23 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
                     roleName: string;
                 }[] | undefined;
             };
+            grant?: {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            } | undefined;
         }, {
             user: {
                 name?: string | null | undefined;
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -499,17 +517,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -526,52 +557,27 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
                     roleName: string;
                 }[] | undefined;
             };
+            grant?: {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            } | undefined;
         }>>;
-    }, "strict", z.ZodTypeAny, {
+    }>, "strict", z.ZodTypeAny, {
         script: string;
         environmentVariables?: Record<string, string> | undefined;
-        tokenSample?: {
-            accountId?: string | undefined;
-            expiresWithSession?: boolean | undefined;
-            grantId?: string | undefined;
-            gty?: string | undefined;
-            sessionUid?: string | undefined;
-            sid?: string | undefined;
-            kind?: "AccessToken" | undefined;
-            jti?: string | undefined;
-            aud?: string | string[] | undefined;
-            scope?: string | undefined;
-            clientId?: string | undefined;
-        } | undefined;
         contextSample?: {
             user: {
                 name?: string | null | undefined;
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -588,17 +594,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -615,52 +634,40 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
                     roleName: string;
                 }[] | undefined;
             };
+            grant?: {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            } | undefined;
         } | undefined;
-    }, {
-        script: string;
-        environmentVariables?: Record<string, string> | undefined;
         tokenSample?: {
+            grantId?: string | undefined;
+            scope?: string | undefined;
             accountId?: string | undefined;
             expiresWithSession?: boolean | undefined;
-            grantId?: string | undefined;
             gty?: string | undefined;
             sessionUid?: string | undefined;
             sid?: string | undefined;
             kind?: "AccessToken" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         } | undefined;
+    }, {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
         contextSample?: {
             user: {
                 name?: string | null | undefined;
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -677,17 +684,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -704,54 +724,42 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
                     roleName: string;
                 }[] | undefined;
             };
+            grant?: {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            } | undefined;
         } | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    value: {
-        script: string;
-        environmentVariables?: Record<string, string> | undefined;
         tokenSample?: {
+            grantId?: string | undefined;
+            scope?: string | undefined;
             accountId?: string | undefined;
             expiresWithSession?: boolean | undefined;
-            grantId?: string | undefined;
             gty?: string | undefined;
             sessionUid?: string | undefined;
             sid?: string | undefined;
             kind?: "AccessToken" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         } | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    value: {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
         contextSample?: {
             user: {
                 name?: string | null | undefined;
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -768,17 +776,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -795,55 +816,43 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
                     roleName: string;
                 }[] | undefined;
             };
+            grant?: {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            } | undefined;
         } | undefined;
-    };
-    key: LogtoJwtTokenKey.AccessToken;
-}, {
-    value: {
-        script: string;
-        environmentVariables?: Record<string, string> | undefined;
         tokenSample?: {
+            grantId?: string | undefined;
+            scope?: string | undefined;
             accountId?: string | undefined;
             expiresWithSession?: boolean | undefined;
-            grantId?: string | undefined;
             gty?: string | undefined;
             sessionUid?: string | undefined;
             sid?: string | undefined;
             kind?: "AccessToken" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         } | undefined;
+    };
+    key: LogtoJwtTokenKey.AccessToken;
+}, {
+    value: {
+        script: string;
+        environmentVariables?: Record<string, string> | undefined;
         contextSample?: {
             user: {
                 name?: string | null | undefined;
                 id?: string | undefined;
                 applicationId?: string | null | undefined;
                 username?: string | null | undefined;
+                createdAt?: number | undefined;
                 profile?: Partial<{
                     familyName: string;
                     givenName: string;
@@ -860,17 +869,30 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         formatted: string;
                         streetAddress: string;
                         locality: string;
-                        /**
-                         * Value maps to config key names in `logto_configs` table. Used mainly in DB SQL related scenarios.
-                         */
                         region: string;
                         postalCode: string;
                         country: string;
                     }>;
                 }> | undefined;
-                createdAt?: number | undefined;
-                updatedAt?: number | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                updatedAt?: number | undefined;
+                organizations?: {
+                    name: string;
+                    id: string;
+                    description: string | null;
+                }[] | undefined;
+                roles?: {
+                    name: string;
+                    id: string;
+                    description: string;
+                    scopes: {
+                        name: string;
+                        id: string;
+                        description: string | null;
+                        resource: import("../../index.js").Resource;
+                        resourceId: string;
+                    }[];
+                }[] | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 avatar?: string | null | undefined;
@@ -887,38 +909,39 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     detail: import("@withtyped/server").JsonObject;
                 }[] | undefined;
                 mfaVerificationFactors?: import("../../index.js").MfaFactor[] | undefined;
-                roles?: {
-                    name: string;
-                    id: string;
-                    description: string;
-                    scopes: {
-                        name: string;
-                        id: string;
-                        description: string | null;
-                        resource: import("../../index.js").Resource;
-                        resourceId: string;
-                    }[];
-                }[] | undefined;
-                organizations?: {
-                    name: string;
-                    id: string;
-                    description: string | null;
-                }[] | undefined;
                 organizationRoles?: {
                     organizationId: string;
                     roleId: string;
                     roleName: string;
                 }[] | undefined;
             };
+            grant?: {
+                type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
+                subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
+            } | undefined;
+        } | undefined;
+        tokenSample?: {
+            grantId?: string | undefined;
+            scope?: string | undefined;
+            accountId?: string | undefined;
+            expiresWithSession?: boolean | undefined;
+            gty?: string | undefined;
+            sessionUid?: string | undefined;
+            sid?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            jti?: string | undefined;
+            aud?: string | string[] | undefined;
+            clientId?: string | undefined;
         } | undefined;
     };
     key: LogtoJwtTokenKey.AccessToken;
 }>, z.ZodObject<{
     key: z.ZodLiteral<LogtoJwtTokenKey.ClientCredentials>;
-    value: z.ZodObject<{
+    value: z.ZodObject<z.objectUtil.extendShape<{
         script: z.ZodString;
         environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server").Json, z.ZodTypeDef, import("@withtyped/server").Json>>>;
+    }, {
         tokenSample: z.ZodOptional<z.ZodObject<{
             kind: z.ZodOptional<z.ZodLiteral<"ClientCredentials">>;
             jti: z.ZodOptional<z.ZodString>;
@@ -926,27 +949,27 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
             scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
             clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
+            scope?: string | undefined;
             kind?: "ClientCredentials" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         }, {
+            scope?: string | undefined;
             kind?: "ClientCredentials" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         }>>;
-    }, "strict", z.ZodTypeAny, {
+    }>, "strict", z.ZodTypeAny, {
         script: string;
         environmentVariables?: Record<string, string> | undefined;
         contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
         tokenSample?: {
+            scope?: string | undefined;
             kind?: "ClientCredentials" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         } | undefined;
     }, {
@@ -954,10 +977,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
         environmentVariables?: Record<string, string> | undefined;
         contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
         tokenSample?: {
+            scope?: string | undefined;
             kind?: "ClientCredentials" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         } | undefined;
     }>;
@@ -967,10 +990,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
         environmentVariables?: Record<string, string> | undefined;
         contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
         tokenSample?: {
+            scope?: string | undefined;
             kind?: "ClientCredentials" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         } | undefined;
     };
@@ -981,10 +1004,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
         environmentVariables?: Record<string, string> | undefined;
         contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
         tokenSample?: {
+            scope?: string | undefined;
             kind?: "ClientCredentials" | undefined;
             jti?: string | undefined;
             aud?: string | string[] | undefined;
-            scope?: string | undefined;
             clientId?: string | undefined;
         } | undefined;
     };
@@ -1092,11 +1115,13 @@ export type LogtoConfigType = LogtoOidcConfigType | JwtCustomizerType | LogtoTen
 export type LogtoConfigGuard = typeof logtoOidcConfigGuard & typeof jwtCustomizerConfigGuard & typeof logtoTenantConfigGuard;
 export declare const logtoConfigKeys: readonly LogtoConfigKey[];
 export declare const logtoConfigGuards: LogtoConfigGuard;
-export declare const oidcConfigKeysResponseGuard: z.ZodObject<{
+export declare const oidcConfigKeysResponseGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
     id: z.ZodString;
+    value: z.ZodString;
     createdAt: z.ZodNumber;
+}, "value">, {
     signingKeyAlgorithm: z.ZodOptional<z.ZodNativeEnum<typeof SupportedSigningKeyAlgorithm>>;
-}, "strip", z.ZodTypeAny, {
+}>, "strip", z.ZodTypeAny, {
     id: string;
     createdAt: number;
     signingKeyAlgorithm?: SupportedSigningKeyAlgorithm | undefined;