authhero 0.185.0 → 0.187.0

package/dist/authhero.d.ts

@@ -12355,70 +12355,6 @@ export declare const tenantSchema: z.ZodObject<{
 	language?: string | undefined;
 }>;
 export type Tenant = z.infer<typeof tenantSchema>;
-export declare const vendorSettingsSchema: z.ZodObject<{
-	logoUrl: z.ZodString;
-	loginBackgroundImage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-	style: z.ZodObject<{
-		primaryColor: z.ZodString;
-		buttonTextColor: z.ZodString;
-		primaryHoverColor: z.ZodString;
-	}, "strip", z.ZodTypeAny, {
-		primaryColor: string;
-		buttonTextColor: string;
-		primaryHoverColor: string;
-	}, {
-		primaryColor: string;
-		buttonTextColor: string;
-		primaryHoverColor: string;
-	}>;
-	country: z.ZodOptional<z.ZodString>;
-	supportEmail: z.ZodNullable<z.ZodString>;
-	supportUrl: z.ZodNullable<z.ZodString>;
-	name: z.ZodString;
-	showGreyishBackground: z.ZodOptional<z.ZodBoolean>;
-	termsAndConditionsUrl: z.ZodNullable<z.ZodString>;
-	companyName: z.ZodOptional<z.ZodString>;
-	checkoutHideSocial: z.ZodOptional<z.ZodBoolean>;
-	siteUrl: z.ZodNullable<z.ZodString>;
-	manageSubscriptionsUrl: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-	name: string;
-	style: {
-		primaryColor: string;
-		buttonTextColor: string;
-		primaryHoverColor: string;
-	};
-	logoUrl: string;
-	supportEmail: string | null;
-	supportUrl: string | null;
-	termsAndConditionsUrl: string | null;
-	siteUrl: string | null;
-	loginBackgroundImage?: string | null | undefined;
-	country?: string | undefined;
-	showGreyishBackground?: boolean | undefined;
-	companyName?: string | undefined;
-	checkoutHideSocial?: boolean | undefined;
-	manageSubscriptionsUrl?: string | undefined;
-}, {
-	name: string;
-	style: {
-		primaryColor: string;
-		buttonTextColor: string;
-		primaryHoverColor: string;
-	};
-	logoUrl: string;
-	supportEmail: string | null;
-	supportUrl: string | null;
-	termsAndConditionsUrl: string | null;
-	siteUrl: string | null;
-	loginBackgroundImage?: string | null | undefined;
-	country?: string | undefined;
-	showGreyishBackground?: boolean | undefined;
-	companyName?: string | undefined;
-	checkoutHideSocial?: boolean | undefined;
-	manageSubscriptionsUrl?: string | undefined;
-}>;
-export type VendorSettings = z.infer<typeof vendorSettingsSchema>;
 export declare enum GrantType {
 	RefreshToken = "refresh_token",
 	AuthorizationCode = "authorization_code",
@@ -13945,6 +13881,695 @@ export declare const smsProviderSchema: z.ZodObject<{
 	name: string;
 }>;
 export type SmsProvider = z.infer<typeof smsProviderSchema>;
+export declare const resourceServerScopeSchema: z.ZodObject<{
+	value: z.ZodString;
+	description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	value: string;
+	description?: string | undefined;
+}, {
+	value: string;
+	description?: string | undefined;
+}>;
+export type ResourceServerScope = z.infer<typeof resourceServerScopeSchema>;
+export declare const resourceServerOptionsSchema: z.ZodObject<{
+	token_dialect: z.ZodOptional<z.ZodEnum<[
+		"access_token",
+		"access_token_authz"
+	]>>;
+	enforce_policies: z.ZodOptional<z.ZodBoolean>;
+	allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+	skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+	persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+	enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+	mtls: z.ZodOptional<z.ZodObject<{
+		bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+	}, "strip", z.ZodTypeAny, {
+		bound_access_tokens?: boolean | undefined;
+	}, {
+		bound_access_tokens?: boolean | undefined;
+	}>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	token_dialect: z.ZodOptional<z.ZodEnum<[
+		"access_token",
+		"access_token_authz"
+	]>>;
+	enforce_policies: z.ZodOptional<z.ZodBoolean>;
+	allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+	skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+	persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+	enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+	mtls: z.ZodOptional<z.ZodObject<{
+		bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+	}, "strip", z.ZodTypeAny, {
+		bound_access_tokens?: boolean | undefined;
+	}, {
+		bound_access_tokens?: boolean | undefined;
+	}>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	token_dialect: z.ZodOptional<z.ZodEnum<[
+		"access_token",
+		"access_token_authz"
+	]>>;
+	enforce_policies: z.ZodOptional<z.ZodBoolean>;
+	allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+	skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+	persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+	enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+	mtls: z.ZodOptional<z.ZodObject<{
+		bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+	}, "strip", z.ZodTypeAny, {
+		bound_access_tokens?: boolean | undefined;
+	}, {
+		bound_access_tokens?: boolean | undefined;
+	}>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type ResourceServerOptions = z.infer<typeof resourceServerOptionsSchema>;
+export declare const resourceServerInsertSchema: z.ZodObject<{
+	name: z.ZodString;
+	identifier: z.ZodString;
+	scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		value: z.ZodString;
+		description: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		value: string;
+		description?: string | undefined;
+	}, {
+		value: string;
+		description?: string | undefined;
+	}>, "many">>;
+	signing_alg: z.ZodOptional<z.ZodString>;
+	signing_secret: z.ZodOptional<z.ZodString>;
+	token_lifetime: z.ZodOptional<z.ZodNumber>;
+	token_lifetime_for_web: z.ZodOptional<z.ZodNumber>;
+	skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+	allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+	verificationKey: z.ZodOptional<z.ZodString>;
+	options: z.ZodOptional<z.ZodObject<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">>>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	identifier: string;
+	options?: z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}, {
+	name: string;
+	identifier: string;
+	options?: z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}>;
+export type ResourceServerInsert = z.input<typeof resourceServerInsertSchema>;
+export declare const resourceServerSchema: z.ZodObject<{
+	name: z.ZodString;
+	identifier: z.ZodString;
+	scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		value: z.ZodString;
+		description: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		value: string;
+		description?: string | undefined;
+	}, {
+		value: string;
+		description?: string | undefined;
+	}>, "many">>;
+	signing_alg: z.ZodOptional<z.ZodString>;
+	signing_secret: z.ZodOptional<z.ZodString>;
+	token_lifetime: z.ZodOptional<z.ZodNumber>;
+	token_lifetime_for_web: z.ZodOptional<z.ZodNumber>;
+	skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+	allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+	verificationKey: z.ZodOptional<z.ZodString>;
+	options: z.ZodOptional<z.ZodObject<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">>>;
+	id: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	identifier: string;
+	options?: z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	id?: string | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}, {
+	name: string;
+	identifier: string;
+	options?: z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	id?: string | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}>;
+export type ResourceServer = z.infer<typeof resourceServerSchema>;
+export declare const resourceServerListSchema: z.ZodArray<z.ZodObject<{
+	name: z.ZodString;
+	identifier: z.ZodString;
+	scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		value: z.ZodString;
+		description: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		value: string;
+		description?: string | undefined;
+	}, {
+		value: string;
+		description?: string | undefined;
+	}>, "many">>;
+	signing_alg: z.ZodOptional<z.ZodString>;
+	signing_secret: z.ZodOptional<z.ZodString>;
+	token_lifetime: z.ZodOptional<z.ZodNumber>;
+	token_lifetime_for_web: z.ZodOptional<z.ZodNumber>;
+	skip_consent_for_verifiable_first_party_clients: z.ZodOptional<z.ZodBoolean>;
+	allow_offline_access: z.ZodOptional<z.ZodBoolean>;
+	verificationKey: z.ZodOptional<z.ZodString>;
+	options: z.ZodOptional<z.ZodObject<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough">>>;
+	id: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	identifier: string;
+	options?: z.objectOutputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	id?: string | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}, {
+	name: string;
+	identifier: string;
+	options?: z.objectInputType<{
+		token_dialect: z.ZodOptional<z.ZodEnum<[
+			"access_token",
+			"access_token_authz"
+		]>>;
+		enforce_policies: z.ZodOptional<z.ZodBoolean>;
+		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
+		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
+		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
+		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
+		mtls: z.ZodOptional<z.ZodObject<{
+			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
+		}, "strip", z.ZodTypeAny, {
+			bound_access_tokens?: boolean | undefined;
+		}, {
+			bound_access_tokens?: boolean | undefined;
+		}>>;
+	}, z.ZodTypeAny, "passthrough"> | undefined;
+	id?: string | undefined;
+	scopes?: {
+		value: string;
+		description?: string | undefined;
+	}[] | undefined;
+	signing_alg?: string | undefined;
+	signing_secret?: string | undefined;
+	token_lifetime?: number | undefined;
+	token_lifetime_for_web?: number | undefined;
+	skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+	allow_offline_access?: boolean | undefined;
+	verificationKey?: string | undefined;
+}>, "many">;
+export type ResourceServerList = z.infer<typeof resourceServerListSchema>;
+export declare const permissionSourceSchema: z.ZodObject<{
+	source_id: z.ZodOptional<z.ZodString>;
+	source_name: z.ZodOptional<z.ZodString>;
+	source_type: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	source_id: z.ZodOptional<z.ZodString>;
+	source_name: z.ZodOptional<z.ZodString>;
+	source_type: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	source_id: z.ZodOptional<z.ZodString>;
+	source_name: z.ZodOptional<z.ZodString>;
+	source_type: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type PermissionSource = z.infer<typeof permissionSourceSchema>;
+export declare const permissionSchema: z.ZodObject<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, z.ZodTypeAny, "passthrough">>;
+export type Permission = z.infer<typeof permissionSchema>;
+export type PermissionInsert = z.input<typeof permissionSchema>;
+export declare const permissionListSchema: z.ZodArray<z.ZodObject<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+	resource_server_identifier: z.ZodString;
+	resource_server_name: z.ZodString;
+	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+		source_id: z.ZodOptional<z.ZodString>;
+		source_name: z.ZodOptional<z.ZodString>;
+		source_type: z.ZodOptional<z.ZodString>;
+	}, z.ZodTypeAny, "passthrough">>, "many">>;
+}, z.ZodTypeAny, "passthrough">>, "many">;
+export type PermissionList = z.infer<typeof permissionListSchema>;
+export declare const ruleInsertSchema: z.ZodObject<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+	name: string;
+	script: string;
+	enabled?: boolean | undefined;
+	order?: number | undefined;
+	stage?: string | undefined;
+}, {
+	name: string;
+	script: string;
+	enabled?: boolean | undefined;
+	order?: number | undefined;
+	stage?: string | undefined;
+}>;
+export type RuleInsert = z.input<typeof ruleInsertSchema>;
+export declare const ruleSchema: z.ZodObject<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type Rule = z.infer<typeof ruleSchema>;
+export declare const ruleListSchema: z.ZodArray<z.ZodObject<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+	name: z.ZodString;
+	script: z.ZodString;
+	order: z.ZodOptional<z.ZodNumber>;
+	enabled: z.ZodOptional<z.ZodBoolean>;
+	stage: z.ZodOptional<z.ZodString>;
+	id: z.ZodString;
+	created_at: z.ZodOptional<z.ZodString>;
+	updated_at: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>, "many">;
+export type RuleList = z.infer<typeof ruleListSchema>;
 export declare function parseUserId(user_id: string): {
 	connection: string;
 	id: string;
@@ -14101,6 +14726,36 @@ export interface FormsAdapter {
 	update(tenant_id: string, form_id: string, form: Partial<FormInsert>): Promise<boolean>;
 	list(tenant_id: string, params?: ListParams): Promise<ListFormsResponse>;
 }
+export interface ListResourceServersResponse extends Totals {
+	resource_servers: ResourceServer[];
+}
+export interface ResourceServersAdapter {
+	create(tenant_id: string, params: ResourceServerInsert): Promise<ResourceServer>;
+	get(tenant_id: string, id: string): Promise<ResourceServer | null>;
+	list(tenant_id: string, params?: ListParams): Promise<ListResourceServersResponse>;
+	update(tenant_id: string, id: string, resourceServer: Partial<ResourceServerInsert>): Promise<boolean>;
+	remove(tenant_id: string, id: string): Promise<boolean>;
+}
+export interface ListRulesResponse extends Totals {
+	rules: Rule[];
+}
+export interface RulesAdapter {
+	create(tenant_id: string, rule: RuleInsert): Promise<Rule>;
+	get(tenant_id: string, rule_id: string): Promise<Rule | null>;
+	list(tenant_id: string, params?: ListParams): Promise<ListRulesResponse>;
+	update(tenant_id: string, rule_id: string, rule: Partial<RuleInsert>): Promise<boolean>;
+	remove(tenant_id: string, rule_id: string): Promise<boolean>;
+}
+export interface ListPermissionsResponse extends Totals {
+	permissions: Permission[];
+}
+export interface PermissionsAdapter {
+	create(tenant_id: string, permission: PermissionInsert): Promise<Permission>;
+	get(tenant_id: string, permission_id: string): Promise<Permission | null>;
+	list(tenant_id: string, params?: ListParams): Promise<ListPermissionsResponse>;
+	update(tenant_id: string, permission_id: string, permission: Partial<PermissionInsert>): Promise<boolean>;
+	remove(tenant_id: string, permission_id: string): Promise<boolean>;
+}
 export interface DataAdapters {
 	applications: ApplicationsAdapter;
 	branding: BrandingAdapter;
@@ -14117,6 +14772,9 @@ export interface DataAdapters {
 	passwords: PasswordsAdapter;
 	promptSettings: PromptSettingsAdapter;
 	refreshTokens: RefreshTokensAdapter;
+	resourceServers: ResourceServersAdapter;
+	rules: RulesAdapter;
+	permissions: PermissionsAdapter;
 	sessions: SessionsAdapter;
 	tenants: TenantsDataAdapter;
 	themes: ThemesAdapter;
@@ -14299,7 +14957,6 @@ export type Bindings = {
 	ENVIRONMENT: string;
 	AUTH_URL: string;
 	JWKS_URL: string;
-	CSS_URL?: string;
 	JWKS_SERVICE: Fetcher;
 	ISSUER: string;
 	UNIVERSAL_LOGIN_URL?: string;
@@ -14326,7 +14983,6 @@ export type Bindings = {
 	JWKS_CACHE_TIMEOUT_IN_SECONDS: number;
 	ORGANIZATION_NAME: string;
 	SAML_SIGN_URL: string;
-	API_URL: string;
 };
 export interface AuthHeroConfig {
 	dataAdapter: DataAdapters;