@logto/schemas 1.27.0 → 1.28.0

package/alterations/1.28.0-1745735646-add-email-blocklist-policy-column-to-sie-table.ts

@@ -0,0 +1,20 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      alter table sign_in_experiences
+        add column email_blocklist_policy jsonb not null default '{}'::jsonb;
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      alter table sign_in_experiences
+        drop column email_blocklist_policy;
+    `);
+  },
+};
+
+export default alteration;

package/alterations-js/1.28.0-1745735646-add-email-blocklist-policy-column-to-sie-table.js

@@ -0,0 +1,16 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table sign_in_experiences
+        add column email_blocklist_policy jsonb not null default '{}'::jsonb;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table sign_in_experiences
+        drop column email_blocklist_policy;
+    `);
+    },
+};
+export default alteration;

package/lib/db-entries/sign-in-experience.d.ts

@@ -1,4 +1,4 @@
-import { Color, Branding, LanguageInfo, SignIn, SignUp, SocialSignIn, ConnectorTargets, CustomContent, CustomUiAssets, PartialPasswordPolicy, Mfa, CaptchaPolicy, SentinelPolicy, GeneratedSchema } from './../foundations/index.js';
+import { Color, Branding, LanguageInfo, SignIn, SignUp, SocialSignIn, ConnectorTargets, CustomContent, CustomUiAssets, PartialPasswordPolicy, Mfa, CaptchaPolicy, SentinelPolicy, EmailBlocklistPolicy, GeneratedSchema } from './../foundations/index.js';
 import { AgreeToTermsPolicy, SignInMode } from './custom-types.js';
 /**
  *
@@ -31,6 +31,7 @@ export type CreateSignInExperience = {
     unknownSessionRedirectUrl?: string | null;
     captchaPolicy?: CaptchaPolicy;
     sentinelPolicy?: SentinelPolicy;
+    emailBlocklistPolicy?: EmailBlocklistPolicy;
 };
 export type SignInExperience = {
     tenantId: string;
@@ -58,6 +59,7 @@ export type SignInExperience = {
     unknownSessionRedirectUrl: string | null;
     captchaPolicy: CaptchaPolicy;
     sentinelPolicy: SentinelPolicy;
+    emailBlocklistPolicy: EmailBlocklistPolicy;
 };
-export type SignInExperienceKeys = 'tenantId' | 'id' | 'color' | 'branding' | 'languageInfo' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'agreeToTermsPolicy' | 'signIn' | 'signUp' | 'socialSignIn' | 'socialSignInConnectorTargets' | 'signInMode' | 'customCss' | 'customContent' | 'customUiAssets' | 'passwordPolicy' | 'mfa' | 'singleSignOnEnabled' | 'supportEmail' | 'supportWebsiteUrl' | 'unknownSessionRedirectUrl' | 'captchaPolicy' | 'sentinelPolicy';
+export type SignInExperienceKeys = 'tenantId' | 'id' | 'color' | 'branding' | 'languageInfo' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'agreeToTermsPolicy' | 'signIn' | 'signUp' | 'socialSignIn' | 'socialSignInConnectorTargets' | 'signInMode' | 'customCss' | 'customContent' | 'customUiAssets' | 'passwordPolicy' | 'mfa' | 'singleSignOnEnabled' | 'supportEmail' | 'supportWebsiteUrl' | 'unknownSessionRedirectUrl' | 'captchaPolicy' | 'sentinelPolicy' | 'emailBlocklistPolicy';
 export declare const SignInExperiences: GeneratedSchema<SignInExperienceKeys, CreateSignInExperience, SignInExperience, 'sign_in_experiences', 'sign_in_experience'>;

package/lib/db-entries/sign-in-experience.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { colorGuard, brandingGuard, languageInfoGuard, signInGuard, signUpGuard, socialSignInGuard, connectorTargetsGuard, customContentGuard, customUiAssetsGuard, partialPasswordPolicyGuard, mfaGuard, captchaPolicyGuard, sentinelPolicyGuard } from './../foundations/index.js';
+import { colorGuard, brandingGuard, languageInfoGuard, signInGuard, signUpGuard, socialSignInGuard, connectorTargetsGuard, customContentGuard, customUiAssetsGuard, partialPasswordPolicyGuard, mfaGuard, captchaPolicyGuard, sentinelPolicyGuard, emailBlocklistPolicyGuard } from './../foundations/index.js';
 import { AgreeToTermsPolicy, SignInMode } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
@@ -27,6 +27,7 @@ const createGuard = z.object({
     unknownSessionRedirectUrl: z.string().nullable().optional(),
     captchaPolicy: captchaPolicyGuard.optional(),
     sentinelPolicy: sentinelPolicyGuard.optional(),
+    emailBlocklistPolicy: emailBlocklistPolicyGuard.optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
@@ -53,6 +54,7 @@ const guard = z.object({
     unknownSessionRedirectUrl: z.string().nullable(),
     captchaPolicy: captchaPolicyGuard,
     sentinelPolicy: sentinelPolicyGuard,
+    emailBlocklistPolicy: emailBlocklistPolicyGuard,
 });
 export const SignInExperiences = Object.freeze({
     table: 'sign_in_experiences',
@@ -82,6 +84,7 @@ export const SignInExperiences = Object.freeze({
         unknownSessionRedirectUrl: 'unknown_session_redirect_url',
         captchaPolicy: 'captcha_policy',
         sentinelPolicy: 'sentinel_policy',
+        emailBlocklistPolicy: 'email_blocklist_policy',
     },
     fieldKeys: [
         'tenantId',
@@ -108,6 +111,7 @@ export const SignInExperiences = Object.freeze({
         'unknownSessionRedirectUrl',
         'captchaPolicy',
         'sentinelPolicy',
+        'emailBlocklistPolicy',
     ],
     createGuard,
     guard,

package/lib/foundations/jsonb-types/sign-in-experience.d.ts

@@ -311,4 +311,37 @@ export declare const sentinelPolicyGuard: z.ZodObject<{
     maxAttempts?: number | undefined;
     lockoutDuration?: number | undefined;
 }>;
+/**
+ * Email blocklist policy.
+ *
+ * @remarks
+ * This policy is used to block specific email addresses or domains from signing up.
+ */
+export type EmailBlocklistPolicy = {
+    blockDisposableAddresses?: boolean;
+    blockSubaddressing?: boolean;
+    /**
+     * Custom blocklist of email addresses or domains.
+     *
+     * @example
+     * Email address: abc@xyx.com
+     *
+     * @example
+     * Domain name: @xyz.com
+     */
+    customBlocklist?: string[];
+};
+export declare const emailBlocklistPolicyGuard: z.ZodObject<{
+    blockDisposableAddresses: z.ZodOptional<z.ZodBoolean>;
+    blockSubaddressing: z.ZodOptional<z.ZodBoolean>;
+    customBlocklist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    blockDisposableAddresses?: boolean | undefined;
+    blockSubaddressing?: boolean | undefined;
+    customBlocklist?: string[] | undefined;
+}, {
+    blockDisposableAddresses?: boolean | undefined;
+    blockSubaddressing?: boolean | undefined;
+    customBlocklist?: string[] | undefined;
+}>;
 export {};

package/lib/foundations/jsonb-types/sign-in-experience.js

@@ -110,3 +110,8 @@ export const sentinelPolicyGuard = z.object({
     maxAttempts: z.number().optional(),
     lockoutDuration: z.number().optional(),
 });
+export const emailBlocklistPolicyGuard = z.object({
+    blockDisposableAddresses: z.boolean().optional(),
+    blockSubaddressing: z.boolean().optional(),
+    customBlocklist: z.string().array().optional(),
+});

package/lib/types/application.d.ts

@@ -104,9 +104,7 @@ export declare const featuredApplicationGuard: z.ZodObject<Pick<{
     name: string;
     id: string;
 }>;
-export declare const applicationCreateGuard: z.ZodObject<z.objectUtil.extendShape<{
-    type: z.ZodOptional<z.ZodType<import("../db-entries/custom-types.js").ApplicationType, z.ZodTypeDef, import("../db-entries/custom-types.js").ApplicationType>>;
-    name: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+export declare const applicationCreateGuard: z.ZodObject<{
     customData: z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>>;
     description: z.ZodOptional<z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>>;
     oidcClientMetadata: z.ZodOptional<z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>>;
@@ -185,92 +183,10 @@ export declare const applicationCreateGuard: z.ZodObject<z.objectUtil.extendShap
         }[] | undefined;
     } | null>>>;
     isThirdParty: z.ZodOptional<z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>>;
-}, Pick<{
-    tenantId: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
-    id: z.ZodType<string, z.ZodTypeDef, string>;
-    name: z.ZodType<string, z.ZodTypeDef, string>;
-    secret: z.ZodType<string, z.ZodTypeDef, string>;
-    description: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+} & {
     type: z.ZodType<import("../db-entries/custom-types.js").ApplicationType, z.ZodTypeDef, import("../db-entries/custom-types.js").ApplicationType>;
-    oidcClientMetadata: z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>;
-    customClientMetadata: z.ZodOptional<z.ZodType<{
-        corsAllowedOrigins?: string[] | undefined;
-        idTokenTtl?: number | undefined;
-        refreshTokenTtl?: number | undefined;
-        refreshTokenTtlInDays?: number | undefined;
-        tenantId?: string | undefined;
-        alwaysIssueRefreshToken?: boolean | undefined;
-        rotateRefreshToken?: boolean | undefined;
-    }, z.ZodTypeDef, {
-        corsAllowedOrigins?: string[] | undefined;
-        idTokenTtl?: number | undefined;
-        refreshTokenTtl?: number | undefined;
-        refreshTokenTtlInDays?: number | undefined;
-        tenantId?: string | undefined;
-        alwaysIssueRefreshToken?: boolean | undefined;
-        rotateRefreshToken?: boolean | undefined;
-    }>>;
-    protectedAppMetadata: z.ZodOptional<z.ZodType<{
-        host: string;
-        origin: string;
-        sessionDuration: number;
-        pageRules: {
-            path: string;
-        }[];
-        customDomains?: {
-            status: import("../index.js").DomainStatus;
-            domain: string;
-            errorMessage: string | null;
-            dnsRecords: {
-                value: string;
-                type: string;
-                name: string;
-            }[];
-            cloudflareData: {
-                status: string;
-                id: string;
-                ssl: {
-                    status: string;
-                    validation_errors?: {
-                        message: string;
-                    }[] | undefined;
-                };
-                verification_errors?: string[] | undefined;
-            } | null;
-        }[] | undefined;
-    } | null, z.ZodTypeDef, {
-        host: string;
-        origin: string;
-        sessionDuration: number;
-        pageRules: {
-            path: string;
-        }[];
-        customDomains?: {
-            status: import("../index.js").DomainStatus;
-            domain: string;
-            errorMessage: string | null;
-            dnsRecords: {
-                value: string;
-                type: string;
-                name: string;
-            }[];
-            cloudflareData: {
-                status: string;
-                id: string;
-                ssl: {
-                    status: string;
-                    validation_errors?: {
-                        message: string;
-                    }[] | undefined;
-                };
-                verification_errors?: string[] | undefined;
-            } | null;
-        }[] | undefined;
-    } | null>>;
-    customData: z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>;
-    isThirdParty: z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>;
-    createdAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
-}, "type" | "name">>, "strip", z.ZodTypeAny, {
+    name: z.ZodType<string, z.ZodTypeDef, string>;
+}, "strip", z.ZodTypeAny, {
     type: import("../db-entries/custom-types.js").ApplicationType;
     name: string;
     customData?: import("@withtyped/server").JsonObject;
@@ -583,7 +499,7 @@ export declare enum ApplicationUserConsentScopeType {
     UserScopes = "user-scopes"
 }
 export type ApplicationUserConsentScopesResponse = z.infer<typeof applicationUserConsentScopesResponseGuard>;
-export declare const applicationSignInExperienceCreateGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
+export declare const applicationSignInExperienceCreateGuard: z.ZodObject<Omit<{
     tenantId: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
     applicationId: z.ZodType<string, z.ZodTypeDef, string>;
     color: z.ZodOptional<z.ZodType<Partial<{
@@ -609,10 +525,10 @@ export declare const applicationSignInExperienceCreateGuard: z.ZodObject<z.objec
     termsOfUseUrl: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
     privacyPolicyUrl: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
     displayName: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
-}, "applicationId" | "tenantId" | "termsOfUseUrl" | "privacyPolicyUrl">, {
+}, "applicationId" | "tenantId" | "termsOfUseUrl" | "privacyPolicyUrl"> & {
     termsOfUseUrl: z.ZodUnion<[z.ZodNullable<z.ZodOptional<z.ZodString>>, z.ZodLiteral<"">]>;
     privacyPolicyUrl: z.ZodUnion<[z.ZodNullable<z.ZodOptional<z.ZodString>>, z.ZodLiteral<"">]>;
-}>, "strip", z.ZodTypeAny, {
+}, "strip", z.ZodTypeAny, {
     displayName?: string | null;
     color?: import("../index.js").PartialColor;
     branding?: import("../index.js").Branding;

package/lib/types/connector.d.ts

@@ -2,12 +2,10 @@ import { ConnectorType } from '@logto/connector-kit';
 import { z } from 'zod';
 export type { ConnectorMetadata } from '@logto/connector-kit';
 export { ConnectorType, ConnectorPlatform } from '@logto/connector-kit';
-export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShape<z.objectUtil.extendShape<Pick<{
-    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
-    id: z.ZodType<string, z.ZodTypeDef, string>;
+export declare const connectorResponseGuard: z.ZodObject<{
+    config: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
     syncProfile: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     connectorId: z.ZodType<string, z.ZodTypeDef, string>;
-    config: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
     metadata: z.ZodType<{
         target?: string | undefined;
         name?: import("@logto/connector-kit").I18nPhrases | undefined;
@@ -19,8 +17,7 @@ export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShap
         logo?: string | undefined;
         logoDark?: string | null | undefined;
     }>;
-    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "id" | "config" | "syncProfile" | "connectorId" | "metadata">, z.objectUtil.extendShape<{
+} & {
     id: z.ZodString;
     target: z.ZodString;
     name: z.ZodType<import("@logto/connector-kit").I18nPhrases, z.ZodTypeDef, import("@logto/connector-kit").I18nPhrases>;
@@ -207,15 +204,14 @@ export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShap
     }>]>, "many">>;
     customData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     fromEmail: z.ZodOptional<z.ZodString>;
-}, {
     platform: z.ZodNullable<z.ZodNativeEnum<typeof import("@logto/connector-kit").ConnectorPlatform>>;
     isStandard: z.ZodOptional<z.ZodBoolean>;
-}>>, {
+} & {
     type: z.ZodNativeEnum<typeof ConnectorType>;
     isDemo: z.ZodOptional<z.ZodBoolean>;
     extraInfo: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     usage: z.ZodOptional<z.ZodNumber>;
-}>, "strip", z.ZodTypeAny, {
+}, "strip", z.ZodTypeAny, {
     type: ConnectorType;
     name: {
         en: string;
@@ -879,10 +875,10 @@ export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShap
     extraInfo?: Record<string, unknown> | undefined;
 }>;
 export type ConnectorResponse = z.infer<typeof connectorResponseGuard>;
-export declare const connectorFactoryResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
+export declare const connectorFactoryResponseGuard: z.ZodObject<{
     type: z.ZodNativeEnum<typeof ConnectorType>;
     isDemo: z.ZodOptional<z.ZodBoolean>;
-}, z.objectUtil.extendShape<{
+} & {
     id: z.ZodString;
     target: z.ZodString;
     name: z.ZodType<import("@logto/connector-kit").I18nPhrases, z.ZodTypeDef, import("@logto/connector-kit").I18nPhrases>;
@@ -1069,10 +1065,10 @@ export declare const connectorFactoryResponseGuard: z.ZodObject<z.objectUtil.ext
     }>]>, "many">>;
     customData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     fromEmail: z.ZodOptional<z.ZodString>;
-}, {
+} & {
     platform: z.ZodNullable<z.ZodNativeEnum<typeof import("@logto/connector-kit").ConnectorPlatform>>;
     isStandard: z.ZodOptional<z.ZodBoolean>;
-}>>, "strip", z.ZodTypeAny, {
+}, "strip", z.ZodTypeAny, {
     type: ConnectorType;
     name: {
         en: string;

package/lib/types/consent.d.ts

@@ -268,16 +268,16 @@ export declare const applicationSignInExperienceGuard: z.ZodObject<Pick<{
     privacyPolicyUrl: string | null;
 }>;
 export declare const missingResourceScopesGuard: z.ZodObject<{
-    resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
+    resource: z.ZodObject<Pick<{
         tenantId: z.ZodType<string, z.ZodTypeDef, string>;
         id: z.ZodType<string, z.ZodTypeDef, string>;
         name: z.ZodType<string, z.ZodTypeDef, string>;
         indicator: z.ZodType<string, z.ZodTypeDef, string>;
         isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
         accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
-    }, "name" | "indicator">, {
+    }, "name" | "indicator"> & {
         id: z.ZodString;
-    }>, "strip", z.ZodTypeAny, {
+    }, "strip", z.ZodTypeAny, {
         name: string;
         id: string;
         indicator: string;
@@ -332,7 +332,7 @@ export type MissingResourceScopes = z.infer<typeof missingResourceScopesGuard>;
 /**
  * Define the public organization info that can be exposed to the public. e.g. on the user consent page.
  */
-export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendShape<Pick<{
+export declare const publicOrganizationGuard: z.ZodObject<Pick<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
     name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -351,18 +351,18 @@ export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendSha
         darkFavicon?: string | undefined;
     }>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id">, {
+}, "name" | "id"> & {
     missingResourceScopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
+        resource: z.ZodObject<Pick<{
             tenantId: z.ZodType<string, z.ZodTypeDef, string>;
             id: z.ZodType<string, z.ZodTypeDef, string>;
             name: z.ZodType<string, z.ZodTypeDef, string>;
             indicator: z.ZodType<string, z.ZodTypeDef, string>;
             isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
             accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
-        }, "name" | "indicator">, {
+        }, "name" | "indicator"> & {
             id: z.ZodString;
-        }>, "strip", z.ZodTypeAny, {
+        }, "strip", z.ZodTypeAny, {
             name: string;
             id: string;
             indicator: string;
@@ -410,7 +410,7 @@ export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendSha
             description: string | null;
         }[];
     }>, "many">>;
-}>, "strip", z.ZodTypeAny, {
+}, "strip", z.ZodTypeAny, {
     name: string;
     id: string;
     missingResourceScopes?: {
@@ -443,7 +443,7 @@ export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendSha
 }>;
 export type PublicOrganization = z.infer<typeof publicOrganizationGuard>;
 export declare const consentInfoResponseGuard: z.ZodObject<{
-    application: z.ZodObject<z.objectUtil.extendShape<Pick<{
+    application: z.ZodObject<Pick<{
         tenantId: z.ZodType<string, z.ZodTypeDef, string>;
         id: z.ZodType<string, z.ZodTypeDef, string>;
         name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -528,7 +528,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
         customData: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
         isThirdParty: z.ZodType<boolean, z.ZodTypeDef, boolean>;
         createdAt: z.ZodType<number, z.ZodTypeDef, number>;
-    }, "name" | "id">, {
+    }, "name" | "id"> & {
         displayName: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
         branding: z.ZodOptional<z.ZodType<{
             logoUrl?: string | undefined;
@@ -543,7 +543,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
         }>>;
         termsOfUseUrl: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
         privacyPolicyUrl: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
-    }>, "strip", z.ZodTypeAny, {
+    }, "strip", z.ZodTypeAny, {
         name: string;
         id: string;
         displayName?: string | null | undefined;
@@ -699,7 +699,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
         primaryEmail: string | null;
         primaryPhone: string | null;
     }>;
-    organizations: z.ZodOptional<z.ZodArray<z.ZodObject<z.objectUtil.extendShape<Pick<{
+    organizations: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
         tenantId: z.ZodType<string, z.ZodTypeDef, string>;
         id: z.ZodType<string, z.ZodTypeDef, string>;
         name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -718,18 +718,18 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
             darkFavicon?: string | undefined;
         }>;
         createdAt: z.ZodType<number, z.ZodTypeDef, number>;
-    }, "name" | "id">, {
+    }, "name" | "id"> & {
         missingResourceScopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
+            resource: z.ZodObject<Pick<{
                 tenantId: z.ZodType<string, z.ZodTypeDef, string>;
                 id: z.ZodType<string, z.ZodTypeDef, string>;
                 name: z.ZodType<string, z.ZodTypeDef, string>;
                 indicator: z.ZodType<string, z.ZodTypeDef, string>;
                 isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
                 accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
-            }, "name" | "indicator">, {
+            }, "name" | "indicator"> & {
                 id: z.ZodString;
-            }>, "strip", z.ZodTypeAny, {
+            }, "strip", z.ZodTypeAny, {
                 name: string;
                 id: string;
                 indicator: string;
@@ -777,7 +777,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
                 description: string | null;
             }[];
         }>, "many">>;
-    }>, "strip", z.ZodTypeAny, {
+    }, "strip", z.ZodTypeAny, {
         name: string;
         id: string;
         missingResourceScopes?: {
@@ -810,16 +810,16 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
     }>, "many">>;
     missingOIDCScope: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     missingResourceScopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
+        resource: z.ZodObject<Pick<{
             tenantId: z.ZodType<string, z.ZodTypeDef, string>;
             id: z.ZodType<string, z.ZodTypeDef, string>;
             name: z.ZodType<string, z.ZodTypeDef, string>;
             indicator: z.ZodType<string, z.ZodTypeDef, string>;
             isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
             accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
-        }, "name" | "indicator">, {
+        }, "name" | "indicator"> & {
             id: z.ZodString;
-        }>, "strip", z.ZodTypeAny, {
+        }, "strip", z.ZodTypeAny, {
             name: string;
             id: string;
             indicator: string;

package/lib/types/hook.d.ts

@@ -14,7 +14,7 @@ declare const hookExecutionStatsGuard: z.ZodObject<{
     requestCount: number;
 }>;
 export type HookExecutionStats = z.infer<typeof hookExecutionStatsGuard>;
-export declare const hookResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
+export declare const hookResponseGuard: z.ZodObject<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
     name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -32,7 +32,7 @@ export declare const hookResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
     signingKey: z.ZodType<string, z.ZodTypeDef, string>;
     enabled: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, {
+} & {
     executionStats: z.ZodObject<{
         successCount: z.ZodNumber;
         requestCount: z.ZodNumber;
@@ -43,7 +43,7 @@ export declare const hookResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
         successCount: number;
         requestCount: number;
     }>;
-}>, "strip", z.ZodTypeAny, {
+}, "strip", z.ZodTypeAny, {
     name: string;
     id: string;
     tenantId: string;

package/lib/types/interactions.d.ts

@@ -698,7 +698,7 @@ export declare const totpVerificationPayloadGuard: z.ZodObject<{
 }>;
 /** @deprecated Legacy interaction API use only */
 export type TotpVerificationPayload = z.infer<typeof totpVerificationPayloadGuard>;
-export declare const webAuthnVerificationPayloadGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
+export declare const webAuthnVerificationPayloadGuard: z.ZodObject<Omit<{
     type: z.ZodLiteral<MfaFactor.WebAuthn>;
     id: z.ZodString;
     rawId: z.ZodString;
@@ -753,7 +753,7 @@ export declare const webAuthnVerificationPayloadGuard: z.ZodObject<z.objectUtil.
         } | undefined;
         hmacCreateSecret?: boolean | undefined;
     }>;
-}, "response">, {
+}, "response"> & {
     response: z.ZodObject<{
         clientDataJSON: z.ZodString;
         authenticatorData: z.ZodString;
@@ -770,7 +770,7 @@ export declare const webAuthnVerificationPayloadGuard: z.ZodObject<z.objectUtil.
         signature: string;
         userHandle?: string | undefined;
     }>;
-}>, "strip", z.ZodTypeAny, {
+}, "strip", z.ZodTypeAny, {
     type: MfaFactor.WebAuthn;
     id: string;
     rawId: string;
@@ -828,7 +828,7 @@ export declare const verifyMfaPayloadGuard: z.ZodDiscriminatedUnion<"type", [z.Z
 }, {
     code: string;
     type: MfaFactor.TOTP;
-}>, z.ZodObject<z.objectUtil.extendShape<Omit<{
+}>, z.ZodObject<Omit<{
     type: z.ZodLiteral<MfaFactor.WebAuthn>;
     id: z.ZodString;
     rawId: z.ZodString;
@@ -883,7 +883,7 @@ export declare const verifyMfaPayloadGuard: z.ZodDiscriminatedUnion<"type", [z.Z
         } | undefined;
         hmacCreateSecret?: boolean | undefined;
     }>;
-}, "response">, {
+}, "response"> & {
     response: z.ZodObject<{
         clientDataJSON: z.ZodString;
         authenticatorData: z.ZodString;
@@ -900,7 +900,7 @@ export declare const verifyMfaPayloadGuard: z.ZodDiscriminatedUnion<"type", [z.Z
         signature: string;
         userHandle?: string | undefined;
     }>;
-}>, "strip", z.ZodTypeAny, {
+}, "strip", z.ZodTypeAny, {
     type: MfaFactor.WebAuthn;
     id: string;
     rawId: string;