@logto/schemas 1.35.0 → 1.37.0

package/lib/types/logto-config/index.d.ts

@@ -1,3 +1,4 @@
+import { extendedIdTokenClaims } from '@logto/core-kit';
 import type { ZodType } from 'zod';
 import { z } from 'zod';
 import { type AccessTokenJwtCustomizer, type ClientCredentialsJwtCustomizer } from './jwt-customizer.js';
@@ -76,28 +77,28 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
             clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
             grantId?: string | undefined;
+            sid?: string | undefined;
+            jti?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            accountId?: string | undefined;
             scope?: string | undefined;
             sessionUid?: string | undefined;
-            accountId?: string | undefined;
-            jti?: string | undefined;
+            clientId?: string | undefined;
             expiresWithSession?: boolean | undefined;
             gty?: string | undefined;
-            sid?: string | undefined;
-            kind?: "AccessToken" | undefined;
             aud?: string | string[] | undefined;
-            clientId?: string | undefined;
         }, {
             grantId?: string | undefined;
+            sid?: string | undefined;
+            jti?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            accountId?: string | undefined;
             scope?: string | undefined;
             sessionUid?: string | undefined;
-            accountId?: string | undefined;
-            jti?: string | undefined;
+            clientId?: string | undefined;
             expiresWithSession?: boolean | undefined;
             gty?: string | undefined;
-            sid?: string | undefined;
-            kind?: "AccessToken" | undefined;
             aud?: string | string[] | undefined;
-            clientId?: string | undefined;
         }>>;
         contextSample: z.ZodOptional<z.ZodObject<{
             user: z.ZodObject<{
@@ -157,10 +158,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }>>>;
                 updatedAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+                lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
                 primaryEmail: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
                 primaryPhone: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
                 isSuspended: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
-                lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
                 hasPassword: z.ZodOptional<z.ZodBoolean>;
                 ssoIdentities: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
                     tenantId: ZodType<string, z.ZodTypeDef, string>;
@@ -315,6 +316,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -332,15 +337,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -382,6 +383,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -399,15 +404,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -727,8 +728,6 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     code?: string | undefined;
                 }>, z.ZodObject<Omit<{
                     id: z.ZodString;
-                    type: z.ZodLiteral<import("../index.js").VerificationType.WebAuthn>;
-                    userId: z.ZodString;
                     verified: z.ZodBoolean;
                     registrationChallenge: z.ZodOptional<z.ZodString>;
                     registrationRpId: z.ZodOptional<z.ZodString>;
@@ -761,6 +760,9 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         agent: string;
                         name?: string | undefined;
                     }>>;
+                } & {
+                    type: z.ZodLiteral<import("../index.js").VerificationType.WebAuthn>;
+                    userId: z.ZodString;
                 }, "registrationChallenge" | "authenticationChallenge" | "registrationInfo">, "strip", z.ZodTypeAny, {
                     type: import("../index.js").VerificationType.WebAuthn;
                     id: string;
@@ -773,6 +775,56 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                }>, z.ZodObject<Omit<{
+                    id: z.ZodString;
+                    verified: z.ZodBoolean;
+                    registrationChallenge: z.ZodOptional<z.ZodString>;
+                    registrationRpId: z.ZodOptional<z.ZodString>;
+                    authenticationChallenge: z.ZodOptional<z.ZodString>;
+                    registrationInfo: z.ZodOptional<z.ZodObject<{
+                        type: z.ZodLiteral<import("../../index.js").MfaFactor.WebAuthn>;
+                        rpId: z.ZodString;
+                        credentialId: z.ZodString;
+                        publicKey: z.ZodString;
+                        transports: z.ZodArray<z.ZodEnum<["usb", "nfc", "ble", "internal", "cable", "hybrid", "smart-card"]>, "many">;
+                        counter: z.ZodNumber;
+                        agent: z.ZodString;
+                        name: z.ZodOptional<z.ZodString>;
+                    }, "strip", z.ZodTypeAny, {
+                        type: import("../../index.js").MfaFactor.WebAuthn;
+                        rpId: string;
+                        credentialId: string;
+                        publicKey: string;
+                        transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
+                        counter: number;
+                        agent: string;
+                        name?: string | undefined;
+                    }, {
+                        type: import("../../index.js").MfaFactor.WebAuthn;
+                        rpId: string;
+                        credentialId: string;
+                        publicKey: string;
+                        transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
+                        counter: number;
+                        agent: string;
+                        name?: string | undefined;
+                    }>>;
+                } & {
+                    type: z.ZodLiteral<import("../index.js").VerificationType.SignInWebAuthn>;
+                    userId: z.ZodOptional<z.ZodString>;
+                    authenticationRpId: z.ZodOptional<z.ZodString>;
+                }, "registrationChallenge" | "authenticationChallenge" | "registrationInfo" | "authenticationRpId">, "strip", z.ZodTypeAny, {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
+                }, {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 }>, z.ZodObject<{
                     id: z.ZodString;
                     type: z.ZodLiteral<import("../index.js").VerificationType.OneTimeToken>;
@@ -846,6 +898,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                         type: import("../../index.js").SignInIdentifier;
                     };
                 }>]>, "many">>;
+                signInContext: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
             }, "strip", z.ZodTypeAny, {
                 userId?: string | undefined;
                 interactionEvent?: import("../interactions.js").InteractionEvent | undefined;
@@ -934,7 +987,14 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
             }, {
                 userId?: string | undefined;
                 interactionEvent?: import("../interactions.js").InteractionEvent | undefined;
@@ -1023,7 +1083,199 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
+            }>>;
+            application: z.ZodOptional<z.ZodObject<{
+                type: z.ZodOptional<ZodType<import("../../index.js").ApplicationType, z.ZodTypeDef, import("../../index.js").ApplicationType>>;
+                name: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
+                id: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
+                tenantId: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
+                createdAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+                customData: z.ZodOptional<ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>;
+                description: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                oidcClientMetadata: z.ZodOptional<ZodType<import("../../index.js").OidcClientMetadata, z.ZodTypeDef, import("../../index.js").OidcClientMetadata>>;
+                customClientMetadata: z.ZodOptional<ZodType<{
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                }, z.ZodTypeDef, {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                }>>;
+                protectedAppMetadata: z.ZodOptional<ZodType<{
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null, z.ZodTypeDef, {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null>>;
+                isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            }, "strip", z.ZodTypeAny, {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            }, {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
             }>>;
         }, "strip", z.ZodTypeAny, {
             user: {
@@ -1055,6 +1307,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -1072,15 +1328,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1094,6 +1346,56 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     roleName: string;
                 }[] | undefined;
             };
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
             grant?: {
                 type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
                 subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
@@ -1186,7 +1488,14 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
             } | undefined;
         }, {
             user: {
@@ -1218,6 +1527,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -1235,15 +1548,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1257,6 +1566,56 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     roleName: string;
                 }[] | undefined;
             };
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
             grant?: {
                 type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
                 subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
@@ -1349,7 +1708,14 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
             } | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
@@ -1385,6 +1751,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -1402,15 +1772,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1424,6 +1790,56 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     roleName: string;
                 }[] | undefined;
             };
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
             grant?: {
                 type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
                 subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
@@ -1516,21 +1932,28 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
             } | undefined;
         } | undefined;
         tokenSample?: {
             grantId?: string | undefined;
+            sid?: string | undefined;
+            jti?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            accountId?: string | undefined;
             scope?: string | undefined;
             sessionUid?: string | undefined;
-            accountId?: string | undefined;
-            jti?: string | undefined;
+            clientId?: string | undefined;
             expiresWithSession?: boolean | undefined;
             gty?: string | undefined;
-            sid?: string | undefined;
-            kind?: "AccessToken" | undefined;
             aud?: string | string[] | undefined;
-            clientId?: string | undefined;
         } | undefined;
     }, {
         script: string;
@@ -1565,6 +1988,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -1582,15 +2009,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1604,6 +2027,56 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     roleName: string;
                 }[] | undefined;
             };
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
             grant?: {
                 type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
                 subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
@@ -1696,21 +2169,28 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
             } | undefined;
         } | undefined;
         tokenSample?: {
             grantId?: string | undefined;
+            sid?: string | undefined;
+            jti?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            accountId?: string | undefined;
             scope?: string | undefined;
             sessionUid?: string | undefined;
-            accountId?: string | undefined;
-            jti?: string | undefined;
+            clientId?: string | undefined;
             expiresWithSession?: boolean | undefined;
             gty?: string | undefined;
-            sid?: string | undefined;
-            kind?: "AccessToken" | undefined;
             aud?: string | string[] | undefined;
-            clientId?: string | undefined;
         } | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
@@ -1747,6 +2227,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -1764,15 +2248,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1786,6 +2266,56 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     roleName: string;
                 }[] | undefined;
             };
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
             grant?: {
                 type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
                 subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
@@ -1878,21 +2408,28 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
             } | undefined;
         } | undefined;
         tokenSample?: {
             grantId?: string | undefined;
+            sid?: string | undefined;
+            jti?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            accountId?: string | undefined;
             scope?: string | undefined;
             sessionUid?: string | undefined;
-            accountId?: string | undefined;
-            jti?: string | undefined;
+            clientId?: string | undefined;
             expiresWithSession?: boolean | undefined;
             gty?: string | undefined;
-            sid?: string | undefined;
-            kind?: "AccessToken" | undefined;
             aud?: string | string[] | undefined;
-            clientId?: string | undefined;
         } | undefined;
     };
     key: LogtoJwtTokenKey.AccessToken;
@@ -1930,6 +2467,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                 }> | undefined;
                 avatar?: string | null | undefined;
                 customData?: import("@withtyped/server").JsonObject | undefined;
+                identities?: Record<string, {
+                    userId: string;
+                    details?: Record<string, import("@withtyped/server").Json> | undefined;
+                }> | undefined;
                 roles?: {
                     name: string;
                     id: string;
@@ -1947,15 +2488,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     id: string;
                     description: string | null;
                 }[] | undefined;
-                identities?: Record<string, {
-                    userId: string;
-                    details?: Record<string, import("@withtyped/server").Json> | undefined;
-                }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1969,6 +2506,56 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     roleName: string;
                 }[] | undefined;
             };
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
             grant?: {
                 type?: import("../oidc-config.js").GrantType.TokenExchange | undefined;
                 subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
@@ -2061,21 +2648,28 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     userId: string;
                     verified: boolean;
                     registrationRpId?: string | undefined;
+                } | {
+                    type: import("../index.js").VerificationType.SignInWebAuthn;
+                    id: string;
+                    verified: boolean;
+                    userId?: string | undefined;
+                    registrationRpId?: string | undefined;
                 })[] | undefined;
+                signInContext?: Record<string, string> | undefined;
             } | undefined;
         } | undefined;
         tokenSample?: {
             grantId?: string | undefined;
+            sid?: string | undefined;
+            jti?: string | undefined;
+            kind?: "AccessToken" | undefined;
+            accountId?: string | undefined;
             scope?: string | undefined;
             sessionUid?: string | undefined;
-            accountId?: string | undefined;
-            jti?: string | undefined;
+            clientId?: string | undefined;
             expiresWithSession?: boolean | undefined;
             gty?: string | undefined;
-            sid?: string | undefined;
-            kind?: "AccessToken" | undefined;
             aud?: string | string[] | undefined;
-            clientId?: string | undefined;
         } | undefined;
     };
     key: LogtoJwtTokenKey.AccessToken;
@@ -2084,7 +2678,6 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
     value: z.ZodObject<{
         script: z.ZodString;
         environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server").Json, z.ZodTypeDef, import("@withtyped/server").Json>>>;
     } & {
         tokenSample: z.ZodOptional<z.ZodObject<{
             kind: z.ZodOptional<z.ZodLiteral<"ClientCredentials">>;
@@ -2093,52 +2686,494 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
             scope: z.ZodOptional<z.ZodOptional<z.ZodString>>;
             clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
-            scope?: string | undefined;
             jti?: string | undefined;
             kind?: "ClientCredentials" | undefined;
-            aud?: string | string[] | undefined;
+            scope?: string | undefined;
             clientId?: string | undefined;
+            aud?: string | string[] | undefined;
         }, {
-            scope?: string | undefined;
             jti?: string | undefined;
             kind?: "ClientCredentials" | undefined;
-            aud?: string | string[] | undefined;
+            scope?: string | undefined;
             clientId?: string | undefined;
+            aud?: string | string[] | undefined;
+        }>>;
+        contextSample: z.ZodOptional<z.ZodObject<{
+            application: z.ZodOptional<z.ZodObject<{
+                type: z.ZodOptional<ZodType<import("../../index.js").ApplicationType, z.ZodTypeDef, import("../../index.js").ApplicationType>>;
+                name: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
+                id: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
+                tenantId: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
+                createdAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+                customData: z.ZodOptional<ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>;
+                description: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+                oidcClientMetadata: z.ZodOptional<ZodType<import("../../index.js").OidcClientMetadata, z.ZodTypeDef, import("../../index.js").OidcClientMetadata>>;
+                customClientMetadata: z.ZodOptional<ZodType<{
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                }, z.ZodTypeDef, {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                }>>;
+                protectedAppMetadata: z.ZodOptional<ZodType<{
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null, z.ZodTypeDef, {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null>>;
+                isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            }, "strip", z.ZodTypeAny, {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            }, {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
+        }, {
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
         script: string;
         environmentVariables?: Record<string, string> | undefined;
-        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        contextSample?: {
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
+        } | undefined;
         tokenSample?: {
-            scope?: string | undefined;
             jti?: string | undefined;
             kind?: "ClientCredentials" | undefined;
-            aud?: string | string[] | undefined;
+            scope?: string | undefined;
             clientId?: string | undefined;
+            aud?: string | string[] | undefined;
         } | undefined;
     }, {
         script: string;
         environmentVariables?: Record<string, string> | undefined;
-        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        contextSample?: {
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
+        } | undefined;
         tokenSample?: {
-            scope?: string | undefined;
             jti?: string | undefined;
             kind?: "ClientCredentials" | undefined;
-            aud?: string | string[] | undefined;
+            scope?: string | undefined;
             clientId?: string | undefined;
+            aud?: string | string[] | undefined;
         } | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     value: {
         script: string;
         environmentVariables?: Record<string, string> | undefined;
-        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        contextSample?: {
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
+        } | undefined;
         tokenSample?: {
-            scope?: string | undefined;
             jti?: string | undefined;
             kind?: "ClientCredentials" | undefined;
-            aud?: string | string[] | undefined;
+            scope?: string | undefined;
             clientId?: string | undefined;
+            aud?: string | string[] | undefined;
         } | undefined;
     };
     key: LogtoJwtTokenKey.ClientCredentials;
@@ -2146,13 +3181,64 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
     value: {
         script: string;
         environmentVariables?: Record<string, string> | undefined;
-        contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
+        contextSample?: {
+            application?: {
+                type?: import("../../index.js").ApplicationType | undefined;
+                name?: string | undefined;
+                id?: string | undefined;
+                tenantId?: string | undefined;
+                createdAt?: number | undefined;
+                customData?: import("@withtyped/server").JsonObject | undefined;
+                description?: string | null | undefined;
+                oidcClientMetadata?: import("../../index.js").OidcClientMetadata | undefined;
+                customClientMetadata?: {
+                    corsAllowedOrigins?: string[] | undefined;
+                    idTokenTtl?: number | undefined;
+                    refreshTokenTtl?: number | undefined;
+                    refreshTokenTtlInDays?: number | undefined;
+                    tenantId?: string | undefined;
+                    alwaysIssueRefreshToken?: boolean | undefined;
+                    rotateRefreshToken?: boolean | undefined;
+                    allowTokenExchange?: boolean | undefined;
+                } | undefined;
+                protectedAppMetadata?: {
+                    host: string;
+                    origin: string;
+                    sessionDuration: number;
+                    pageRules: {
+                        path: string;
+                    }[];
+                    customDomains?: {
+                        status: import("../../index.js").DomainStatus;
+                        domain: string;
+                        errorMessage: string | null;
+                        dnsRecords: {
+                            value: string;
+                            type: string;
+                            name: string;
+                        }[];
+                        cloudflareData: {
+                            status: string;
+                            id: string;
+                            ssl: {
+                                status: string;
+                                validation_errors?: {
+                                    message: string;
+                                }[] | undefined;
+                            };
+                            verification_errors?: string[] | undefined;
+                        } | null;
+                    }[] | undefined;
+                } | null | undefined;
+                isThirdParty?: boolean | undefined;
+            } | undefined;
+        } | undefined;
         tokenSample?: {
-            scope?: string | undefined;
             jti?: string | undefined;
             kind?: "ClientCredentials" | undefined;
-            aud?: string | string[] | undefined;
+            scope?: string | undefined;
             clientId?: string | undefined;
+            aud?: string | string[] | undefined;
         } | undefined;
     };
     key: LogtoJwtTokenKey.ClientCredentials;
@@ -2238,11 +3324,23 @@ export declare const cloudConnectionDataGuard: z.ZodObject<{
     appSecret: string;
 }>;
 export type CloudConnectionData = z.infer<typeof cloudConnectionDataGuard>;
+export declare const extendedIdTokenClaimsGuard: z.ZodEnum<["custom_data", "identities", "sso_identities", "roles", "organizations", "organization_data", "organization_roles"]>;
+export type ExtendedIdTokenClaim = (typeof extendedIdTokenClaims)[number];
+export declare const idTokenConfigGuard: z.ZodObject<{
+    enabledExtendedClaims: z.ZodOptional<z.ZodArray<z.ZodEnum<["custom_data", "identities", "sso_identities", "roles", "organizations", "organization_data", "organization_roles"]>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    enabledExtendedClaims?: ("custom_data" | "identities" | "sso_identities" | "roles" | "organizations" | "organization_data" | "organization_roles")[] | undefined;
+}, {
+    enabledExtendedClaims?: ("custom_data" | "identities" | "sso_identities" | "roles" | "organizations" | "organization_data" | "organization_roles")[] | undefined;
+}>;
+export type IdTokenConfig = z.infer<typeof idTokenConfigGuard>;
 export declare enum LogtoTenantConfigKey {
     AdminConsole = "adminConsole",
     CloudConnection = "cloudConnection",
     /** The URL to redirect when session not found in Sign-in Experience. */
-    SessionNotFoundRedirectUrl = "sessionNotFoundRedirectUrl"
+    SessionNotFoundRedirectUrl = "sessionNotFoundRedirectUrl",
+    /** ID token configuration for extended claims. */
+    IdToken = "idToken"
 }
 export type LogtoTenantConfigType = {
     [LogtoTenantConfigKey.AdminConsole]: AdminConsoleData;
@@ -2250,6 +3348,7 @@ export type LogtoTenantConfigType = {
     [LogtoTenantConfigKey.SessionNotFoundRedirectUrl]: {
         url: string;
     };
+    [LogtoTenantConfigKey.IdToken]: IdTokenConfig;
 };
 export declare const logtoTenantConfigGuard: Readonly<{
     [key in LogtoTenantConfigKey]: ZodType<LogtoTenantConfigType[key]>;