@logto/cli 1.0.0-rc.0 → 1.0.0-rc.2

package/LICENSE.cloud

@@ -0,0 +1,93 @@
+Elastic License 2.0
+
+URL: https://www.elastic.co/licensing/elastic-license
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject to
+the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor’s trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+*As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.*
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that
+organization. **control** means ownership of substantially all the assets of an
+entity, or the power to direct its management and policies by vote, contract, or
+otherwise. Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under
+these terms.
+
+**use** means anything you do with the software requiring one of your licenses.
+
+**trademark** means trademarks, service marks, and similar rights.

package/lib/commands/connector/add.js

@@ -1,4 +1,4 @@
-import { log } from '../../utilities.js';
+import { log } from '../../utils.js';
 import { addConnectors, addOfficialConnectors, inquireInstancePath } from './utils.js';
 const add = {
     command: ['add [packages...]', 'a', 'install', 'i'],

package/lib/commands/connector/remove.js

@@ -1,6 +1,6 @@
 import fs from 'fs/promises';
 import chalk from 'chalk';
-import { log } from '../../utilities.js';
+import { log } from '../../utils.js';
 import { getConnectorPackagesFrom } from './utils.js';
 const remove = {
     command: ['remove [packages...]', 'rm', 'delete'],

package/lib/commands/connector/utils.d.ts

@@ -15,6 +15,6 @@ export declare const npmPackResultGuard: z.ZodArray<z.ZodObject<{
 export declare const inquireInstancePath: (initialPath?: string) => Promise<string>;
 export declare const normalizePackageName: (name: string) => string;
 export declare const isOfficialConnector: (packageName: string) => boolean;
-export declare const getConnectorPackagesFrom: (instancePath?: string) => Promise<import("../../utilities.js").ConnectorPackage[]>;
+export declare const getConnectorPackagesFrom: (instancePath?: string) => Promise<import("../../utils.js").ConnectorPackage[]>;
 export declare const addConnectors: (instancePath: string, packageNames: string[]) => Promise<void>;
 export declare const addOfficialConnectors: (instancePath: string) => Promise<void>;

package/lib/commands/connector/utils.js

@@ -12,7 +12,7 @@ import pRetry from 'p-retry';
 import tar from 'tar';
 import { z } from 'zod';
 import { connectorDirectory } from '../../constants.js';
-import { getConnectorPackagesFromDirectory, isTty, log, oraPromise } from '../../utilities.js';
+import { getConnectorPackagesFromDirectory, isTty, log, oraPromise } from '../../utils.js';
 import { defaultPath } from '../install/utils.js';
 const coreDirectory = 'packages/core';
 const execPromise = promisify(exec);

package/lib/commands/database/alteration/index.js

@@ -2,7 +2,7 @@ import { conditionalString } from '@silverhand/essentials';
 import chalk from 'chalk';
 import { createPoolFromConfig } from '../../../database.js';
 import { getCurrentDatabaseAlterationTimestamp, updateDatabaseTimestamp, } from '../../../queries/system.js';
-import { log } from '../../../utilities.js';
+import { log } from '../../../utils.js';
 import { getAlterationFiles, getTimestampFromFilename } from './utils.js';
 import { chooseAlterationsByVersion, chooseRevertAlterationsByVersion } from './version.js';
 const importAlterationScript = async (filePath) => {

package/lib/commands/database/alteration/index.test.js

@@ -25,7 +25,7 @@ describe('getAvailableAlterations()', () => {
         await expect(getAvailableAlterations(pool)).resolves.toEqual(files);
     });
     it('returns files whose timestamp is greater then database timestamp', async () => {
-        getCurrentDatabaseAlterationTimestamp.mockResolvedValue(1663923770);
+        getCurrentDatabaseAlterationTimestamp.mockResolvedValue(1_663_923_770);
         await expect(getAvailableAlterations(pool)).resolves.toEqual([files[1], files[2]]);
     });
 });

package/lib/commands/database/alteration/utils.js

@@ -3,7 +3,7 @@ import fs from 'fs/promises';
 import { fileURLToPath } from 'node:url';
 import path from 'path';
 import { findPackage } from '@logto/shared';
-import { getPathInModule } from '../../../utilities.js';
+import { getPathInModule } from '../../../utils.js';
 const currentDirname = path.dirname(fileURLToPath(import.meta.url));
 const alterationFilenameRegex = /-([\d.]+)-?.*\.js$/;
 export const getTimestampFromFilename = (filename) => {

package/lib/commands/database/alteration/version.js

@@ -2,7 +2,7 @@ import { assert, conditional } from '@silverhand/essentials';
 import chalk from 'chalk';
 import inquirer from 'inquirer';
 import { SemVer, compare, eq, gt } from 'semver';
-import { findLastIndex, isTty, log } from '../../../utilities.js';
+import { findLastIndex, isTty, log } from '../../../utils.js';
 const getVersionStringFromFilename = (filename) => filename.split('-')[0]?.replaceAll('_', '-') ?? 'unknown';
 const getVersionFromFilename = (filename) => {
     try {

package/lib/commands/database/config.js

@@ -1,10 +1,10 @@
-import { LogtoOidcConfigKey, logtoConfigGuards, logtoConfigKeys } from '@logto/schemas';
+import { defaultTenantId, LogtoOidcConfigKey, logtoConfigGuards, logtoConfigKeys, } from '@logto/schemas';
 import { deduplicate, noop } from '@silverhand/essentials';
 import chalk from 'chalk';
 import { createPoolFromConfig } from '../../database.js';
 import { getRowsByKeys, updateValueByKey } from '../../queries/logto-config.js';
-import { log } from '../../utilities.js';
-import { generateOidcCookieKey, generateOidcPrivateKey } from './utilities.js';
+import { log } from '../../utils.js';
+import { generateOidcCookieKey, generateOidcPrivateKey } from './utils.js';
 const validKeysDisplay = chalk.green(logtoConfigKeys.join(', '));
 const validateKeys = (keys) => {
     const invalidKey = (Array.isArray(keys) ? keys : [keys]).find(
@@ -40,12 +40,17 @@ const getConfig = {
         type: 'string',
         array: true,
         default: [],
+    })
+        .option('tenantId', {
+        describe: 'The tenant to operate',
+        type: 'string',
+        default: defaultTenantId,
     }),
-    handler: async ({ key, keys }) => {
+    handler: async ({ key, keys, tenantId }) => {
         const queryKeys = deduplicate([key, ...keys]);
         validateKeys(queryKeys);
         const pool = await createPoolFromConfig();
-        const { rows } = await getRowsByKeys(pool, queryKeys);
+        const { rows } = await getRowsByKeys(pool, tenantId, queryKeys);
         await pool.end();
         console.log(queryKeys
             .map((currentKey) => {
@@ -70,12 +75,17 @@ const setConfig = {
         describe: 'The value to set, should be a valid JSON string',
         type: 'string',
         demandOption: true,
+    })
+        .option('tenantId', {
+        describe: 'The tenant to operate',
+        type: 'string',
+        default: defaultTenantId,
     }),
-    handler: async ({ key, value }) => {
+    handler: async ({ key, value, tenantId }) => {
         validateKeys(key);
         const guarded = logtoConfigGuards[key].parse(JSON.parse(value));
         const pool = await createPoolFromConfig();
-        await updateValueByKey(pool, key, guarded);
+        await updateValueByKey(pool, tenantId, key, guarded);
         await pool.end();
         log.info(`Update ${chalk.green(key)} succeeded`);
     },
@@ -83,15 +93,21 @@ const setConfig = {
 const rotateConfig = {
     command: 'rotate <key>',
     describe: 'Generate a new private or secret key for the given config key and prepend to the key array',
-    builder: (yargs) => yargs.positional('key', {
+    builder: (yargs) => yargs
+        .positional('key', {
         describe: `The key to rotate, one of ${chalk.green(validRotateKeys.join(', '))}`,
         type: 'string',
         demandOption: true,
+    })
+        .option('tenantId', {
+        describe: 'The tenant to operate',
+        type: 'string',
+        default: defaultTenantId,
     }),
-    handler: async ({ key }) => {
+    handler: async ({ key, tenantId }) => {
         validateRotateKey(key);
         const pool = await createPoolFromConfig();
-        const { rows } = await getRowsByKeys(pool, [key]);
+        const { rows } = await getRowsByKeys(pool, tenantId, [key]);
         if (!rows[0]) {
             log.warn('No key found, create a new one');
         }
@@ -99,16 +115,17 @@ const rotateConfig = {
             const parsed = logtoConfigGuards[key].safeParse(rows[0]?.value);
             const original = parsed.success ? parsed.data : [];
             // No need for default. It's already exhaustive
-            // eslint-disable-next-line default-case
             switch (key) {
-                case LogtoOidcConfigKey.PrivateKeys:
+                case LogtoOidcConfigKey.PrivateKeys: {
                     return [await generateOidcPrivateKey(), ...original];
-                case LogtoOidcConfigKey.CookieKeys:
+                }
+                case LogtoOidcConfigKey.CookieKeys: {
                     return [generateOidcCookieKey(), ...original];
+                }
             }
         };
         const rotated = await getValue();
-        await updateValueByKey(pool, key, rotated);
+        await updateValueByKey(pool, tenantId, key, rotated);
         await pool.end();
         log.info(`Rotate ${chalk.green(key)} succeeded, now it has ${rotated.length} keys`);
     },
@@ -127,14 +144,19 @@ const trimConfig = {
         type: 'number',
         default: 1,
         demandOption: true,
+    })
+        .option('tenantId', {
+        describe: 'The tenant to operate',
+        type: 'string',
+        default: defaultTenantId,
     }),
-    handler: async ({ key, length }) => {
+    handler: async ({ key, length, tenantId }) => {
         validateRotateKey(key);
         if (length < 1) {
             log.error('Invalid length provided');
         }
         const pool = await createPoolFromConfig();
-        const { rows } = await getRowsByKeys(pool, [key]);
+        const { rows } = await getRowsByKeys(pool, tenantId, [key]);
         if (!rows[0]) {
             log.warn('No key found, create a new one');
         }
@@ -147,7 +169,7 @@ const trimConfig = {
             return value.slice(0, -length);
         };
         const trimmed = await getValue();
-        await updateValueByKey(pool, key, trimmed);
+        await updateValueByKey(pool, tenantId, key, trimmed);
         await pool.end();
         log.info(`Trim ${chalk.green(key)} succeeded, now it has ${trimmed.length} keys`);
     },

package/lib/commands/database/seed/index.d.ts

@@ -1,7 +1,7 @@
 import type { DatabasePool } from 'slonik';
 import type { CommandModule } from 'yargs';
 declare const seedChoices: readonly ["all", "oidc"];
-type SeedChoice = typeof seedChoices[number];
+type SeedChoice = (typeof seedChoices)[number];
 export declare const seedByPool: (pool: DatabasePool, type: SeedChoice) => Promise<void>;
 declare const seed: CommandModule<Record<string, unknown>, {
     type: string;

package/lib/commands/database/seed/index.js

@@ -1,107 +1,10 @@
-import { readdir, readFile } from 'fs/promises';
-import path from 'path';
-import { generateStandardId } from '@logto/core-kit';
-import { logtoConfigGuards, LogtoOidcConfigKey, managementResource, defaultSignInExperience, createDefaultAdminConsoleConfig, createDemoAppApplication, defaultRole, managementResourceScope, defaultRoleScopeRelation, defaultTenant, } from '@logto/schemas';
-import { Hooks, Tenants } from '@logto/schemas/models';
 import chalk from 'chalk';
-import { sql } from 'slonik';
-import { raw } from 'slonik-sql-tag-raw';
-import { z } from 'zod';
-import { createPoolAndDatabaseIfNeeded, insertInto } from '../../../database.js';
-import { getRowsByKeys, doesConfigsTableExist, updateValueByKey, } from '../../../queries/logto-config.js';
-import { updateDatabaseTimestamp } from '../../../queries/system.js';
-import { getPathInModule, log, oraPromise } from '../../../utilities.js';
+import { createPoolAndDatabaseIfNeeded } from '../../../database.js';
+import { doesConfigsTableExist } from '../../../queries/logto-config.js';
+import { log, oraPromise } from '../../../utils.js';
 import { getLatestAlterationTimestamp } from '../alteration/index.js';
 import { getAlterationDirectory } from '../alteration/utils.js';
-import { oidcConfigReaders } from './oidc-config.js';
-const getExplicitOrder = (query) => {
-    const matched = /\/\*\s*init_order\s*=\s*([\d.]+)\s*\*\//.exec(query)?.[1];
-    return matched ? Number(matched) : undefined;
-};
-const compareQuery = ([t1, q1], [t2, q2]) => {
-    const o1 = getExplicitOrder(q1);
-    const o2 = getExplicitOrder(q2);
-    if (o1 === undefined && o2 === undefined) {
-        return t1.localeCompare(t2);
-    }
-    if (o1 === undefined) {
-        return 1;
-    }
-    if (o2 === undefined) {
-        return -1;
-    }
-    return o1 - o2;
-};
-const createTables = async (connection) => {
-    const tableDirectory = getPathInModule('@logto/schemas', 'tables');
-    const directoryFiles = await readdir(tableDirectory);
-    const tableFiles = directoryFiles.filter((file) => file.endsWith('.sql'));
-    const queries = await Promise.all(tableFiles.map(async (file) => [
-        file,
-        await readFile(path.join(tableDirectory, file), 'utf8'),
-    ]));
-    const allQueries = [
-        [Hooks.tableName, Hooks.raw],
-        [Tenants.tableName, Tenants.raw],
-        ...queries,
-    ];
-    const sorted = allQueries.slice().sort(compareQuery);
-    for (const [, query] of sorted) {
-        // eslint-disable-next-line no-await-in-loop
-        await connection.query(sql `${raw(query)}`);
-    }
-};
-const seedTables = async (connection, latestTimestamp) => {
-    await connection.query(insertInto(defaultTenant, 'tenants'));
-    await Promise.all([
-        connection.query(insertInto(managementResource, 'resources')),
-        connection.query(insertInto(managementResourceScope, 'scopes')),
-        connection.query(insertInto(createDefaultAdminConsoleConfig(), 'logto_configs')),
-        connection.query(insertInto(defaultSignInExperience, 'sign_in_experiences')),
-        connection.query(insertInto(createDemoAppApplication(generateStandardId()), 'applications')),
-        connection.query(insertInto(defaultRole, 'roles')),
-        connection.query(insertInto(defaultRoleScopeRelation, 'roles_scopes')),
-        updateDatabaseTimestamp(connection, latestTimestamp),
-    ]);
-};
-const seedOidcConfigs = async (pool) => {
-    const configGuard = z.object({
-        key: z.nativeEnum(LogtoOidcConfigKey),
-        value: z.unknown(),
-    });
-    const { rows } = await getRowsByKeys(pool, Object.values(LogtoOidcConfigKey));
-    // Filter out valid keys that hold a valid value
-    const result = await Promise.all(rows.map(async (row) => {
-        try {
-            const { key, value } = await configGuard.parseAsync(row);
-            await logtoConfigGuards[key].parseAsync(value);
-            return key;
-        }
-        catch { }
-    }));
-    const existingKeys = new Set(result.filter(Boolean));
-    const validOptions = Object.values(LogtoOidcConfigKey).filter((key) => {
-        const included = existingKeys.has(key);
-        if (included) {
-            log.info(`Key ${chalk.green(key)} exists, skipping`);
-        }
-        return !included;
-    });
-    // The awaits in loop is intended since we'd like to log info in sequence
-    /* eslint-disable no-await-in-loop */
-    for (const key of validOptions) {
-        const { value, fromEnv } = await oidcConfigReaders[key]();
-        if (fromEnv) {
-            log.info(`Read config ${chalk.green(key)} from env`);
-        }
-        else {
-            log.info(`Generated config ${chalk.green(key)}`);
-        }
-        await updateValueByKey(pool, key, value);
-    }
-    /* eslint-enable no-await-in-loop */
-    log.succeed('Seed OIDC config');
-};
+import { createTables, seedTables } from './tables.js';
 const seedChoices = Object.freeze(['all', 'oidc']);
 export const seedByPool = async (pool, type) => {
     await pool.transaction(async (connection) => {
@@ -121,7 +24,6 @@ export const seedByPool = async (pool, type) => {
                 prefixText: chalk.blue('[info]'),
             });
         }
-        await seedOidcConfigs(connection);
     });
 };
 const seed = {

package/lib/commands/database/seed/oidc-config.d.ts

@@ -1,5 +1,7 @@
 import type { LogtoOidcConfigType } from '@logto/schemas';
 import { LogtoOidcConfigKey } from '@logto/schemas';
+import type { DatabaseTransactionConnection } from 'slonik';
+export declare const seedOidcConfigs: (pool: DatabaseTransactionConnection, tenantId: string) => Promise<void>;
 /**
  * Each config reader will do the following things in order:
  * 1. Try to read value from env (mimic the behavior from the original core)

package/lib/commands/database/seed/oidc-config.js

@@ -1,8 +1,51 @@
 import { readFile } from 'fs/promises';
-import { LogtoOidcConfigKey } from '@logto/schemas';
+import { LogtoOidcConfigKey, logtoConfigGuards } from '@logto/schemas';
 import { getEnvAsStringArray } from '@silverhand/essentials';
-import { generateOidcCookieKey, generateOidcPrivateKey } from '../utilities.js';
+import chalk from 'chalk';
+import { z } from 'zod';
+import { getRowsByKeys, updateValueByKey } from '../../../queries/logto-config.js';
+import { log } from '../../../utils.js';
+import { generateOidcCookieKey, generateOidcPrivateKey } from '../utils.js';
 const isBase64FormatPrivateKey = (key) => !key.includes('-');
+export const seedOidcConfigs = async (pool, tenantId) => {
+    const tenantPrefix = `[${tenantId}]`;
+    const configGuard = z.object({
+        key: z.nativeEnum(LogtoOidcConfigKey),
+        value: z.unknown(),
+    });
+    const { rows } = await getRowsByKeys(pool, tenantId, Object.values(LogtoOidcConfigKey));
+    // Filter out valid keys that hold a valid value
+    const result = await Promise.all(rows.map(async (row) => {
+        try {
+            const { key, value } = await configGuard.parseAsync(row);
+            await logtoConfigGuards[key].parseAsync(value);
+            return key;
+        }
+        catch { }
+    }));
+    const existingKeys = new Set(result.filter(Boolean));
+    const validOptions = Object.values(LogtoOidcConfigKey).filter((key) => {
+        const included = existingKeys.has(key);
+        if (included) {
+            log.info(tenantPrefix, `Key ${chalk.green(key)} exists, skipping`);
+        }
+        return !included;
+    });
+    // The awaits in loop is intended since we'd like to log info in sequence
+    /* eslint-disable no-await-in-loop */
+    for (const key of validOptions) {
+        const { value, fromEnv } = await oidcConfigReaders[key]();
+        if (fromEnv) {
+            log.info(tenantPrefix, `Read config ${chalk.green(key)} from env`);
+        }
+        else {
+            log.info(tenantPrefix, `Generated config ${chalk.green(key)}`);
+        }
+        await updateValueByKey(pool, tenantId, key, value);
+    }
+    /* eslint-enable no-await-in-loop */
+    log.succeed(tenantPrefix, 'Seed OIDC config');
+};
 /**
  * Each config reader will do the following things in order:
  * 1. Try to read value from env (mimic the behavior from the original core)

package/lib/commands/database/seed/tables.d.ts

@@ -0,0 +1,3 @@
+import type { DatabaseTransactionConnection } from 'slonik';
+export declare const createTables: (connection: DatabaseTransactionConnection) => Promise<void>;
+export declare const seedTables: (connection: DatabaseTransactionConnection, latestTimestamp: number) => Promise<void>;

package/lib/commands/database/seed/tables.js

@@ -0,0 +1,89 @@
+import { readdir, readFile } from 'fs/promises';
+import path from 'path';
+import { createDefaultAdminConsoleConfig, defaultTenantId, adminTenantId, defaultManagementApi, createAdminDataInAdminTenant, createMeApiInAdminTenant, createDefaultSignInExperience, createAdminTenantSignInExperience, createDefaultAdminConsoleApplication, } from '@logto/schemas';
+import { Hooks, Tenants } from '@logto/schemas/models';
+import { sql } from 'slonik';
+import { raw } from 'slonik-sql-tag-raw';
+import { insertInto } from '../../../database.js';
+import { getDatabaseName } from '../../../queries/database.js';
+import { updateDatabaseTimestamp } from '../../../queries/system.js';
+import { getPathInModule } from '../../../utils.js';
+import { seedOidcConfigs } from './oidc-config.js';
+import { createTenant, seedAdminData } from './tenant.js';
+const getExplicitOrder = (query) => {
+    const matched = /\/\*\s*init_order\s*=\s*([\d.]+)\s*\*\//.exec(query)?.[1];
+    return matched ? Number(matched) : undefined;
+};
+const compareQuery = ([t1, q1], [t2, q2]) => {
+    const o1 = getExplicitOrder(q1);
+    const o2 = getExplicitOrder(q2);
+    if (o1 === undefined && o2 === undefined) {
+        return t1.localeCompare(t2);
+    }
+    if (o1 === undefined) {
+        return 1;
+    }
+    if (o2 === undefined) {
+        return -1;
+    }
+    return o1 - o2;
+};
+const lifecycleNames = Object.freeze([
+    'before_all',
+    'after_all',
+    'after_each',
+]);
+export const createTables = async (connection) => {
+    const tableDirectory = getPathInModule('@logto/schemas', 'tables');
+    const directoryFiles = await readdir(tableDirectory);
+    const tableFiles = directoryFiles.filter((file) => file.endsWith('.sql'));
+    const queries = await Promise.all(tableFiles.map(async (file) => [
+        file,
+        await readFile(path.join(tableDirectory, file), 'utf8'),
+    ]));
+    const runLifecycleQuery = async (lifecycle, parameters = {}) => {
+        const query = queries.find(([file]) => file.slice(1, -4) === lifecycle)?.[1];
+        if (query) {
+            await connection.query(sql `${raw(
+            /* eslint-disable no-template-curly-in-string */
+            query
+                .replaceAll('${name}', parameters.name ?? '')
+                .replaceAll('${database}', parameters.database ?? '')
+            /* eslint-enable no-template-curly-in-string */
+            )}`);
+        }
+    };
+    const allQueries = [
+        [Hooks.tableName, Hooks.raw],
+        [Tenants.tableName, Tenants.raw],
+        ...queries.filter(([file]) => !lifecycleNames.includes(file.slice(1, -4))),
+    ];
+    const sorted = allQueries.slice().sort(compareQuery);
+    const database = await getDatabaseName(connection, true);
+    await runLifecycleQuery('before_all', { database });
+    /* eslint-disable no-await-in-loop */
+    for (const [file, query] of sorted) {
+        await connection.query(sql `${raw(query)}`);
+        if (!query.includes('/* no_after_each */')) {
+            await runLifecycleQuery('after_each', { name: file.split('.')[0], database });
+        }
+    }
+    /* eslint-enable no-await-in-loop */
+    await runLifecycleQuery('after_all', { database });
+};
+export const seedTables = async (connection, latestTimestamp) => {
+    await createTenant(connection, defaultTenantId);
+    await seedOidcConfigs(connection, defaultTenantId);
+    await seedAdminData(connection, defaultManagementApi);
+    await createTenant(connection, adminTenantId);
+    await seedOidcConfigs(connection, adminTenantId);
+    await seedAdminData(connection, createAdminDataInAdminTenant(defaultTenantId));
+    await seedAdminData(connection, createMeApiInAdminTenant());
+    await Promise.all([
+        connection.query(insertInto(createDefaultAdminConsoleConfig(defaultTenantId), 'logto_configs')),
+        connection.query(insertInto(createDefaultSignInExperience(defaultTenantId), 'sign_in_experiences')),
+        connection.query(insertInto(createAdminTenantSignInExperience(), 'sign_in_experiences')),
+        connection.query(insertInto(createDefaultAdminConsoleApplication(), 'applications')),
+        updateDatabaseTimestamp(connection, latestTimestamp),
+    ]);
+};

package/lib/commands/database/seed/tenant.d.ts

@@ -0,0 +1,4 @@
+import type { AdminData } from '@logto/schemas';
+import type { CommonQueryMethods } from 'slonik';
+export declare const createTenant: (pool: CommonQueryMethods, tenantId: string) => Promise<void>;
+export declare const seedAdminData: (pool: CommonQueryMethods, data: AdminData) => Promise<void>;

package/lib/commands/database/seed/tenant.js

@@ -0,0 +1,31 @@
+import { generateStandardId } from '@logto/core-kit';
+import { createTenantMetadata } from '@logto/shared';
+import { assert } from '@silverhand/essentials';
+import { sql } from 'slonik';
+import { raw } from 'slonik-sql-tag-raw';
+import { insertInto } from '../../../database.js';
+import { getDatabaseName } from '../../../queries/database.js';
+export const createTenant = async (pool, tenantId) => {
+    const database = await getDatabaseName(pool, true);
+    const { parentRole, role, password } = createTenantMetadata(database, tenantId);
+    const tenantModel = { id: tenantId, dbUser: role, dbUserPassword: password };
+    await pool.query(insertInto(tenantModel, 'tenants'));
+    await pool.query(sql `
+    create role ${sql.identifier([role])} with inherit login
+      password '${raw(password)}'
+      in role ${sql.identifier([parentRole])};
+  `);
+};
+export const seedAdminData = async (pool, data) => {
+    const { resource, scope, role } = data;
+    assert(resource.tenantId === scope.tenantId && scope.tenantId === role.tenantId, new Error('All data should have the same tenant ID'));
+    await pool.query(insertInto(resource, 'resources'));
+    await pool.query(insertInto(scope, 'scopes'));
+    await pool.query(insertInto(role, 'roles'));
+    await pool.query(insertInto({
+        id: generateStandardId(),
+        roleId: role.id,
+        scopeId: scope.id,
+        tenantId: resource.tenantId,
+    }, 'roles_scopes'));
+};

package/lib/commands/database/{utilities.js → utils.js}

@@ -1,6 +1,6 @@
 import { generateKeyPair } from 'crypto';
 import { promisify } from 'util';
-import { nanoid } from 'nanoid';
+import { generateStandardId } from '@logto/core-kit';
 export const generateOidcPrivateKey = async (type = 'ec') => {
     if (type === 'rsa') {
         const { privateKey } = await promisify(generateKeyPair)('rsa', {
@@ -34,4 +34,4 @@ export const generateOidcPrivateKey = async (type = 'ec') => {
     }
     throw new Error(`Unsupported private key ${String(type)}`);
 };
-export const generateOidcCookieKey = () => nanoid();
+export const generateOidcCookieKey = () => generateStandardId();

package/lib/commands/install/index.js

@@ -1,6 +1,6 @@
 import chalk from 'chalk';
 import { getDatabaseUrlFromConfig } from '../../database.js';
-import { log } from '../../utilities.js';
+import { log } from '../../utils.js';
 import { validateNodeVersion, inquireInstancePath, validateDatabase, downloadRelease, seedDatabase, createEnv, logFinale, decompress, isUrl, } from './utils.js';
 const installLogto = async ({ path, skipSeed, officialConnectors, downloadUrl }) => {
     validateNodeVersion();

package/lib/commands/install/utils.js

@@ -10,7 +10,7 @@ import * as semver from 'semver';
 import tar from 'tar';
 import { createPoolAndDatabaseIfNeeded } from '../../database.js';
 import { packageJson } from '../../package-json.js';
-import { cliConfig, ConfigKey, downloadFile, isTty, log, oraPromise, safeExecSync, } from '../../utilities.js';
+import { cliConfig, ConfigKey, downloadFile, isTty, log, oraPromise, safeExecSync, } from '../../utils.js';
 import { seedByPool } from '../database/seed/index.js';
 export const defaultPath = path.join(os.homedir(), 'logto');
 const pgRequired = new semver.SemVer('14.0.0');

package/lib/database.js

@@ -4,7 +4,7 @@ import decamelize from 'decamelize';
 import { createPool, parseDsn, sql, stringifyDsn } from 'slonik';
 import { createInterceptors } from 'slonik-interceptor-preset';
 import { z } from 'zod';
-import { ConfigKey, getCliConfigWithPrompt, log } from './utilities.js';
+import { ConfigKey, getCliConfigWithPrompt, log } from './utils.js';
 export const defaultDatabaseUrl = 'postgresql://localhost:5432/logto';
 export const getDatabaseUrlFromConfig = async () => (await getCliConfigWithPrompt({
     key: ConfigKey.DatabaseUrl,

package/lib/index.js

@@ -6,7 +6,7 @@ import connector from './commands/connector/index.js';
 import database from './commands/database/index.js';
 import install from './commands/install/index.js';
 import { packageJson } from './package-json.js';
-import { cliConfig, ConfigKey } from './utilities.js';
+import { cliConfig, ConfigKey } from './utils.js';
 void yargs(hideBin(process.argv))
     .version(false)
     .option('env', {

package/lib/package-json.d.ts

@@ -82,9 +82,6 @@ export declare const packageJson: {
     };
     eslintConfig: {
         extends: string;
-        rules: {
-            complexity: (string | number)[];
-        };
         ignorePatterns: string[];
     };
     prettier: string;

package/lib/package-json.js

@@ -1,6 +1,6 @@
 export const packageJson = {
     "name": "@logto/cli",
-    "version": "1.0.0-rc.0",
+    "version": "1.0.0-rc.2",
     "description": "Logto CLI.",
     "author": "Silverhand Inc. <contact@silverhand.io>",
     "homepage": "https://github.com/logto-io/logto#readme",
@@ -46,7 +46,7 @@ export const packageJson = {
         "@logto/core-kit": "workspace:*",
         "@logto/schemas": "workspace:*",
         "@logto/shared": "workspace:*",
-        "@silverhand/essentials": "2.1.0",
+        "@silverhand/essentials": "2.2.0",
         "chalk": "^5.0.0",
         "decamelize": "^6.0.0",
         "dotenv": "^16.0.0",
@@ -67,8 +67,8 @@ export const packageJson = {
         "zod": "^3.20.2"
     },
     "devDependencies": {
-        "@silverhand/eslint-config": "1.3.0",
-        "@silverhand/ts-config": "1.2.1",
+        "@silverhand/eslint-config": "2.0.1",
+        "@silverhand/ts-config": "2.0.3",
         "@types/inquirer": "^9.0.0",
         "@types/jest": "^29.1.2",
         "@types/node": "^18.11.18",
@@ -76,21 +76,15 @@ export const packageJson = {
         "@types/sinon": "^10.0.13",
         "@types/tar": "^6.1.2",
         "@types/yargs": "^17.0.13",
-        "eslint": "^8.21.0",
+        "eslint": "^8.34.0",
         "jest": "^29.3.1",
         "lint-staged": "^13.0.0",
-        "prettier": "^2.8.1",
+        "prettier": "^2.8.2",
         "sinon": "^15.0.0",
         "typescript": "^4.9.4"
     },
     "eslintConfig": {
         "extends": "@silverhand",
-        "rules": {
-            "complexity": [
-                "error",
-                11
-            ]
-        },
         "ignorePatterns": [
             "src/package-json.ts"
         ]

package/lib/queries/database.d.ts

@@ -0,0 +1,2 @@
+import type { CommonQueryMethods } from 'slonik';
+export declare const getDatabaseName: (pool: CommonQueryMethods, normalized?: boolean) => Promise<string>;

package/lib/queries/database.js

@@ -0,0 +1,7 @@
+import { sql } from 'slonik';
+export const getDatabaseName = async (pool, normalized = false) => {
+    const { currentDatabase } = await pool.one(sql `
+    select current_database();
+  `);
+    return normalized ? currentDatabase.replaceAll('-', '_') : currentDatabase;
+};

package/lib/queries/logto-config.d.ts

@@ -2,5 +2,5 @@ import type { LogtoConfig, LogtoConfigKey, logtoConfigGuards } from '@logto/sche
 import type { CommonQueryMethods } from 'slonik';
 import type { z } from 'zod';
 export declare const doesConfigsTableExist: (pool: CommonQueryMethods) => Promise<boolean>;
-export declare const getRowsByKeys: (pool: CommonQueryMethods, keys: LogtoConfigKey[]) => Promise<import("slonik").QueryResult<LogtoConfig>>;
-export declare const updateValueByKey: <T extends LogtoConfigKey>(pool: CommonQueryMethods, key: T, value: z.TypeOf<import("@logto/schemas").LogtoConfigGuard[T]>) => Promise<import("slonik").QueryResult<import("slonik").QueryResultRow>>;
+export declare const getRowsByKeys: (pool: CommonQueryMethods, tenantId: string, keys: LogtoConfigKey[]) => Promise<import("slonik").QueryResult<LogtoConfig>>;
+export declare const updateValueByKey: <T extends LogtoConfigKey>(pool: CommonQueryMethods, tenantId: string, key: T, value: z.TypeOf<import("@logto/schemas").LogtoConfigGuard[T]>) => Promise<import("slonik").QueryResult<import("slonik").QueryResultRow>>;

package/lib/queries/logto-config.js

@@ -6,13 +6,14 @@ export const doesConfigsTableExist = async (pool) => {
     const { rows } = await pool.query(sql `select to_regclass(${LogtoConfigs.table}) as regclass`);
     return Boolean(rows[0]?.regclass);
 };
-export const getRowsByKeys = async (pool, keys) => pool.query(sql `
+export const getRowsByKeys = async (pool, tenantId, keys) => pool.query(sql `
     select ${sql.join([fields.key, fields.value], sql `,`)} from ${table}
-      where ${fields.key} in (${sql.join(keys, sql `,`)})
+      where ${fields.tenantId} = ${tenantId}
+      and ${fields.key} in (${sql.join(keys, sql `,`)})
   `);
-export const updateValueByKey = async (pool, key, value) => pool.query(sql `
-      insert into ${table} (${fields.key}, ${fields.value}) 
-        values (${key}, ${sql.jsonb(value)})
+export const updateValueByKey = async (pool, tenantId, key, value) => pool.query(sql `
+      insert into ${table} (${fields.tenantId}, ${fields.key}, ${fields.value}) 
+        values (${tenantId}, ${key}, ${sql.jsonb(value)})
         on conflict (${fields.tenantId}, ${fields.key})
           do update set ${fields.value}=excluded.${fields.value}
     `);

package/lib/queries/system.test.js

@@ -1,7 +1,7 @@
 import { AlterationStateKey, Systems } from '@logto/schemas';
 import { convertToIdentifiers } from '@logto/shared';
 import { createMockPool, createMockQueryResult, sql } from 'slonik';
-import { expectSqlAssert } from '../test-utilities.js';
+import { expectSqlAssert } from '../test-utils.js';
 import { updateDatabaseTimestamp, getCurrentDatabaseAlterationTimestamp } from './system.js';
 const { jest } = import.meta;
 const mockQuery = jest.fn();
@@ -11,7 +11,7 @@ const pool = createMockPool({
     },
 });
 const { table, fields } = convertToIdentifiers(Systems);
-const timestamp = 1663923776;
+const timestamp = 1_663_923_776;
 const systemsTableExists = async () => createMockQueryResult([{ regclass: true }]);
 describe('getCurrentDatabaseAlterationTimestamp()', () => {
     it('returns 0 if query failed (table not found)', async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/cli",
-  "version": "1.0.0-rc.0",
+  "version": "1.0.0-rc.2",
   "description": "Logto CLI.",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "homepage": "https://github.com/logto-io/logto#readme",
@@ -28,7 +28,7 @@
     "url": "https://github.com/logto-io/logto/issues"
   },
   "dependencies": {
-    "@silverhand/essentials": "2.1.0",
+    "@silverhand/essentials": "2.2.0",
     "chalk": "^5.0.0",
     "decamelize": "^6.0.0",
     "dotenv": "^16.0.0",
@@ -48,12 +48,12 @@
     "yargs": "^17.6.0",
     "zod": "^3.20.2",
     "@logto/core-kit": "1.0.0-rc.0",
-    "@logto/schemas": "1.0.0-rc.0",
-    "@logto/shared": "1.0.0-rc.0"
+    "@logto/schemas": "1.0.0-rc.1",
+    "@logto/shared": "1.0.0-rc.1"
   },
   "devDependencies": {
-    "@silverhand/eslint-config": "1.3.0",
-    "@silverhand/ts-config": "1.2.1",
+    "@silverhand/eslint-config": "2.0.1",
+    "@silverhand/ts-config": "2.0.3",
     "@types/inquirer": "^9.0.0",
     "@types/jest": "^29.1.2",
     "@types/node": "^18.11.18",
@@ -61,21 +61,15 @@
     "@types/sinon": "^10.0.13",
     "@types/tar": "^6.1.2",
     "@types/yargs": "^17.0.13",
-    "eslint": "^8.21.0",
+    "eslint": "^8.34.0",
     "jest": "^29.3.1",
     "lint-staged": "^13.0.0",
-    "prettier": "^2.8.1",
+    "prettier": "^2.8.2",
     "sinon": "^15.0.0",
     "typescript": "^4.9.4"
   },
   "eslintConfig": {
     "extends": "@silverhand",
-    "rules": {
-      "complexity": [
-        "error",
-        11
-      ]
-    },
     "ignorePatterns": [
       "src/package-json.ts"
     ]