@logto/cloud 0.2.5-5e334eb → 0.2.5-631f4a7

package/lib/routes/index.d.ts

@@ -3,21 +3,22 @@
 import { Json, JsonObject, RequestContext } from '@withtyped/server';
 import { InferModelType } from '@withtyped/server/model';
 
-export type WithAuthContext<Context = RequestContext> = Context & {
-	auth: {
-		/** The ID of the authenticated subject (`sub`). */
-		id: string;
-		/** The scopes that the subject has (`scope`). */
-		scopes: string[];
-	};
-};
-declare enum VerificationCodeType {
-	SignIn = "SignIn",
-	Register = "Register",
-	ForgotPassword = "ForgotPassword",
-	Generic = "Generic",
-	/** @deprecated Use `Generic` type template for sending test sms/email use case */
-	Test = "Test"
+declare const availableReportableUsageKeys: readonly [
+	"tokenLimit",
+	"machineToMachineLimit",
+	"resourcesLimit",
+	"enterpriseSsoLimit",
+	"hooksLimit",
+	"tenantMembersLimit",
+	"mfaEnabled",
+	"organizationsEnabled",
+	"organizationsLimit"
+];
+export type ReportableUsageKey = (typeof availableReportableUsageKeys)[number];
+export type RealtimeReportableUsageKey = Exclude<ReportableUsageKey, "tokenLimit">;
+declare enum LogtoSkuType {
+	Basic = "Basic",
+	AddOn = "AddOn"
 }
 declare enum TemplateType {
 	/** The template for sending verification code when user is signing in. */
@@ -29,7 +30,11 @@ declare enum TemplateType {
 	/** The template for sending organization invitation. */
 	OrganizationInvitation = "OrganizationInvitation",
 	/** The template for generic usage. */
-	Generic = "Generic"
+	Generic = "Generic",
+	/** The template for validating user permission for sensitive operations. */
+	UserPermissionValidation = "UserPermissionValidation",
+	/** The template for binding a new identifier to an existing account. */
+	BindNewIdentifier = "BindNewIdentifier"
 }
 declare enum OrganizationInvitationStatus {
 	Pending = "Pending",
@@ -69,23 +74,6 @@ declare enum TenantRole {
 	/** Collaborator of the tenant, who has permissions to operate the tenant data, but not the tenant settings. */
 	Collaborator = "collaborator"
 }
-declare const availableReportableUsageKeys: readonly [
-	"tokenLimit",
-	"machineToMachineLimit",
-	"resourcesLimit",
-	"enterpriseSsoLimit",
-	"hooksLimit",
-	"tenantMembersLimit",
-	"mfaEnabled",
-	"organizationsEnabled",
-	"organizationsLimit"
-];
-export type ReportableUsageKey = (typeof availableReportableUsageKeys)[number];
-export type RealtimeReportableUsageKey = Exclude<ReportableUsageKey, "tokenLimit">;
-declare enum LogtoSkuType {
-	Basic = "Basic",
-	AddOn = "AddOn"
-}
 declare const AffiliateProperties: import("@withtyped/server/lib/model/index.js").default<"affiliate_properties", {
 	createdAt: Date;
 	affiliateId: string;
@@ -99,11 +87,22 @@ declare const Affiliates: import("@withtyped/server/lib/model/index.js").default
 	id: string;
 }, "id" | "createdAt", "id" | "createdAt">;
 export type Affiliate = InferModelType<typeof Affiliates>;
-declare enum RegionName {
-	EU = "EU",
-	US = "US",
-	AU = "AU"
-}
+declare const publicRegionNames: readonly [
+	"EU",
+	"US",
+	"AU",
+	"JP"
+];
+/** The type of region names for the public cloud. */
+export type PublicRegionName = (typeof publicRegionNames)[number];
+export type WithAuthContext<Context = RequestContext> = Context & {
+	auth: {
+		/** The ID of the authenticated subject (`sub`). */
+		id: string;
+		/** The scopes that the subject has (`scope`). */
+		scopes: string[];
+	};
+};
 export type AffiliateData = Affiliate & {
 	properties: Array<Pick<AffiliateProperty, "type" | "value">>;
 };
@@ -126,18 +125,18 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 		body?: Json | undefined;
 		bodyRaw?: Buffer | undefined;
 	};
-}>, import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").BaseRoutes, import("@withtyped/server").RoutesWithPrefix<{
+}>, import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").MergeRoutes<import("@withtyped/server").BaseRoutes, import("@withtyped/server").RoutesWithPrefix<{
 	patch: {
 		"/tenants/:tenantId": import("@withtyped/server").PathGuard<"/:tenantId", unknown, {
 			name?: string | undefined;
 		}, {
 			id: string;
 			name: string;
+			createdAt: Date;
 			quota: {
 				mauLimit: number | null;
 				tokenLimit: number | null;
 			};
-			createdAt: Date;
 			usage: {
 				activeUsers: number;
 				tokenUsage: number;
@@ -158,14 +157,13 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 					total: number;
 					totalExcludingTax: number | null;
 				} | null | undefined;
-				isAddOnAvailable?: boolean | undefined;
 			};
-			regionName: RegionName;
+			regionName: string;
 			tag: TenantTag;
 			openInvoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -173,6 +171,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -184,11 +183,11 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 		"/tenants": import("@withtyped/server").PathGuard<"/", unknown, unknown, {
 			id: string;
 			name: string;
+			createdAt: Date;
 			quota: {
 				mauLimit: number | null;
 				tokenLimit: number | null;
 			};
-			createdAt: Date;
 			usage: {
 				activeUsers: number;
 				tokenUsage: number;
@@ -209,14 +208,13 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 					total: number;
 					totalExcludingTax: number | null;
 				} | null | undefined;
-				isAddOnAvailable?: boolean | undefined;
 			};
-			regionName: RegionName;
+			regionName: string;
 			tag: TenantTag;
 			openInvoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -224,6 +222,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -232,17 +231,18 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	};
 	post: {
 		"/tenants": import("@withtyped/server").PathGuard<"/", unknown, {
+			id?: string | undefined;
 			name?: string | undefined;
 			tag?: TenantTag | undefined;
-			regionName?: RegionName | undefined;
+			regionName?: string | undefined;
 		}, {
 			id: string;
 			name: string;
+			createdAt: Date;
 			quota: {
 				mauLimit: number | null;
 				tokenLimit: number | null;
 			};
-			createdAt: Date;
 			usage: {
 				activeUsers: number;
 				tokenUsage: number;
@@ -263,14 +263,13 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 					total: number;
 					totalExcludingTax: number | null;
 				} | null | undefined;
-				isAddOnAvailable?: boolean | undefined;
 			};
-			regionName: RegionName;
+			regionName: string;
 			tag: TenantTag;
 			openInvoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -278,6 +277,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -296,6 +296,32 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	get: {
 		"/tenants/my/subscription": import("@withtyped/server").PathGuard<"/my/subscription", unknown, unknown, {
 			status: "incomplete" | "incomplete_expired" | "trialing" | "active" | "past_due" | "canceled" | "unpaid" | "paused";
+			quota: {
+				auditLogsRetentionDays: number | null;
+				mauLimit: number | null;
+				applicationsLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
+				scopesPerResourceLimit: number | null;
+				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
+				machineToMachineRolesLimit: number | null;
+				scopesPerRoleLimit: number | null;
+				hooksLimit: number | null;
+				customJwtEnabled: boolean;
+				subjectTokenEnabled: boolean;
+				bringYourUiEnabled: boolean;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
+				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
+				organizationsLimit: number | null;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
+			};
 			planId: string;
 			currentPeriodStart: Date;
 			currentPeriodEnd: Date;
@@ -307,83 +333,103 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				total: number;
 				totalExcludingTax: number | null;
 			} | null | undefined;
-			isAddOnAvailable?: boolean | undefined;
 		}>;
 	} & {
 		"/tenants/my/subscription-usage": import("@withtyped/server").PathGuard<"/my/subscription-usage", unknown, unknown, {
 			usage: {
 				applicationsLimit: number;
-				machineToMachineLimit: number;
-				resourcesLimit: number;
+				thirdPartyApplicationsLimit: number;
 				scopesPerResourceLimit: number;
 				socialConnectorsLimit: number;
+				userRolesLimit: number;
 				machineToMachineRolesLimit: number;
 				scopesPerRoleLimit: number;
 				hooksLimit: number;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number;
-				tenantMembersLimit: number;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number;
+				machineToMachineLimit: number;
+				resourcesLimit: number;
 				enterpriseSsoLimit: number;
+				tenantMembersLimit: number;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
 				organizationsLimit: number;
 				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number;
+				captchaEnabled: boolean;
 			};
 			resources: Record<string, number>;
 			roles: Record<string, number>;
 			quota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
 				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number | null;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
 				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
 				organizationsLimit: number | null;
 				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
 			};
 			basicQuota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
 				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number | null;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
 				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
 				organizationsLimit: number | null;
 				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
 			};
 		}>;
-	} & {
+	};
+	post: {
+		"/tenants/my/subscription/item-updates": import("@withtyped/server").PathGuard<"/my/subscription/item-updates", unknown, {
+			usageKey: RealtimeReportableUsageKey;
+		}, {
+			message: string;
+		}>;
+	};
+	put: {};
+	delete: {};
+	copy: {};
+	head: {};
+}, "/api">>, import("@withtyped/server").RoutesWithPrefix<{
+	patch: {};
+	options: {};
+	get: {
 		"/tenants/:tenantId/subscription": import("@withtyped/server").PathGuard<"/:tenantId/subscription", unknown, unknown, {
 			status: "incomplete" | "incomplete_expired" | "trialing" | "active" | "past_due" | "canceled" | "unpaid" | "paused";
 			planId: string;
@@ -397,80 +443,85 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				total: number;
 				totalExcludingTax: number | null;
 			} | null | undefined;
-			isAddOnAvailable?: boolean | undefined;
 		}>;
 	} & {
 		"/tenants/:tenantId/subscription-usage": import("@withtyped/server").PathGuard<"/:tenantId/subscription-usage", unknown, unknown, {
 			usage: {
 				applicationsLimit: number;
-				machineToMachineLimit: number;
-				resourcesLimit: number;
+				thirdPartyApplicationsLimit: number;
 				scopesPerResourceLimit: number;
 				socialConnectorsLimit: number;
+				userRolesLimit: number;
 				machineToMachineRolesLimit: number;
 				scopesPerRoleLimit: number;
 				hooksLimit: number;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number;
-				tenantMembersLimit: number;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number;
+				machineToMachineLimit: number;
+				resourcesLimit: number;
 				enterpriseSsoLimit: number;
+				tenantMembersLimit: number;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
 				organizationsLimit: number;
 				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number;
+				captchaEnabled: boolean;
 			};
 			resources: Record<string, number>;
 			roles: Record<string, number>;
 			quota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
 				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number | null;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
 				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
 				organizationsLimit: number | null;
 				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
 			};
 			basicQuota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
 				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number | null;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
 				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
 				organizationsLimit: number | null;
 				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
 			};
 		}>;
 	} & {
@@ -478,12 +529,51 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 			mauLimit: number;
 			tokenLimit: number;
 		}>;
+	} & {
+		"/tenants/:tenantId/subscription/add-on-skus": import("@withtyped/server").PathGuard<"/:tenantId/subscription/add-on-skus", unknown, unknown, {
+			tokenLimit?: {
+				id: string;
+				name: string | null;
+				createdAt: Date;
+				defaultPriceId: string | null;
+				unitPrice: number | null;
+				type: LogtoSkuType;
+				quota: {
+					auditLogsRetentionDays?: number | null | undefined;
+					mauLimit?: number | null | undefined;
+					applicationsLimit?: number | null | undefined;
+					thirdPartyApplicationsLimit?: number | null | undefined;
+					scopesPerResourceLimit?: number | null | undefined;
+					socialConnectorsLimit?: number | null | undefined;
+					userRolesLimit?: number | null | undefined;
+					machineToMachineRolesLimit?: number | null | undefined;
+					scopesPerRoleLimit?: number | null | undefined;
+					hooksLimit?: number | null | undefined;
+					customJwtEnabled?: boolean | undefined;
+					subjectTokenEnabled?: boolean | undefined;
+					bringYourUiEnabled?: boolean | undefined;
+					tokenLimit?: number | null | undefined;
+					machineToMachineLimit?: number | null | undefined;
+					resourcesLimit?: number | null | undefined;
+					enterpriseSsoLimit?: number | null | undefined;
+					tenantMembersLimit?: number | null | undefined;
+					mfaEnabled?: boolean | undefined;
+					organizationsEnabled?: boolean | undefined;
+					organizationsLimit?: number | null | undefined;
+					idpInitiatedSsoEnabled?: boolean | undefined;
+					samlApplicationsLimit?: number | null | undefined;
+					captchaEnabled?: boolean | undefined;
+				};
+				updatedAt: Date;
+				productId: string | null;
+			} | undefined;
+		}>;
 	} & {
 		"/tenants/:tenantId/invoices": import("@withtyped/server").PathGuard<"/:tenantId/invoices", unknown, unknown, {
 			invoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -491,6 +581,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -502,37 +593,39 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 		"/tenants/:tenantId/available-skus": import("@withtyped/server").PathGuard<"/:tenantId/available-skus", {
 			type?: LogtoSkuType | undefined;
 		}, unknown, {
-			type: LogtoSkuType;
 			id: string;
 			name: string | null;
+			createdAt: Date;
+			defaultPriceId: string | null;
+			unitPrice: number | null;
+			type: LogtoSkuType;
 			quota: {
+				auditLogsRetentionDays?: number | null | undefined;
 				mauLimit?: number | null | undefined;
-				tokenLimit?: number | null | undefined;
 				applicationsLimit?: number | null | undefined;
-				machineToMachineLimit?: number | null | undefined;
-				resourcesLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
 				scopesPerResourceLimit?: number | null | undefined;
 				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
 				machineToMachineRolesLimit?: number | null | undefined;
 				scopesPerRoleLimit?: number | null | undefined;
 				hooksLimit?: number | null | undefined;
-				auditLogsRetentionDays?: number | null | undefined;
-				mfaEnabled?: boolean | undefined;
-				organizationsEnabled?: boolean | undefined;
-				thirdPartyApplicationsLimit?: number | null | undefined;
-				tenantMembersLimit?: number | null | undefined;
 				customJwtEnabled?: boolean | undefined;
 				subjectTokenEnabled?: boolean | undefined;
 				bringYourUiEnabled?: boolean | undefined;
-				userRolesLimit?: number | null | undefined;
+				tokenLimit?: number | null | undefined;
+				machineToMachineLimit?: number | null | undefined;
+				resourcesLimit?: number | null | undefined;
 				enterpriseSsoLimit?: number | null | undefined;
+				tenantMembersLimit?: number | null | undefined;
+				mfaEnabled?: boolean | undefined;
+				organizationsEnabled?: boolean | undefined;
 				organizationsLimit?: number | null | undefined;
 				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
 			};
-			createdAt: Date;
 			updatedAt: Date;
-			defaultPriceId: string | null;
-			unitPrice: number | null;
 			productId: string | null;
 		}[]>;
 	} & {
@@ -541,12 +634,6 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 		}>;
 	};
 	post: {
-		"/tenants/my/subscription/item-updates": import("@withtyped/server").PathGuard<"/my/subscription/item-updates", unknown, {
-			usageKey: RealtimeReportableUsageKey;
-		}, {
-			message: string;
-		}>;
-	} & {
 		"/tenants/:tenantId/stripe-customer-portal": import("@withtyped/server").PathGuard<"/:tenantId/stripe-customer-portal", unknown, {
 			callbackUrl?: string | undefined;
 		}, {
@@ -572,11 +659,14 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	post: {
 		"/services/mails": import("@withtyped/server").PathGuard<"/mails", unknown, {
 			data: {
-				type: TemplateType | VerificationCodeType;
+				type: TemplateType;
 				payload: {
-					code?: string | undefined;
 					link?: string | undefined;
-				} & Record<string, string> & {
+					code?: string | undefined;
+					locale?: string | undefined;
+				} & {
+					[k: string]: unknown;
+				} & {
 					senderName?: string | undefined;
 					companyInformation?: string | undefined;
 					appLogo?: string | undefined;
@@ -587,27 +677,30 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	} & {
 		"/services/send-sms": import("@withtyped/server").PathGuard<"/send-sms", unknown, {
 			data: {
-				type: TemplateType | VerificationCodeType;
+				type: TemplateType;
 				to: string;
 				payload: {
 					code?: string | undefined;
 					link?: string | undefined;
-				} & Record<string, string>;
+					locale?: string | undefined;
+				} & {
+					[k: string]: unknown;
+				};
 			};
 		}, unknown>;
 	} & {
 		"/services/custom-jwt": import("@withtyped/server").PathGuard<"/custom-jwt", {
 			isTest?: string | undefined;
 		}, {
+			token: Record<string, Json>;
 			context: Record<string, Json>;
 			script: string;
 			tokenType: LogtoJwtTokenKeyType.AccessToken;
-			token: Record<string, Json>;
 			environmentVariables?: Record<string, string> | undefined;
 		} | {
+			token: Record<string, Json>;
 			script: string;
 			tokenType: LogtoJwtTokenKeyType.ClientCredentials;
-			token: Record<string, Json>;
 			environmentVariables?: Record<string, string> | undefined;
 		}, Record<string, unknown>>;
 	};
@@ -635,37 +728,39 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 		"/skus": import("@withtyped/server").PathGuard<"/", {
 			type?: LogtoSkuType | undefined;
 		}, unknown, {
-			type: LogtoSkuType;
 			id: string;
 			name: string | null;
+			createdAt: Date;
+			defaultPriceId: string | null;
+			unitPrice: number | null;
+			type: LogtoSkuType;
 			quota: {
+				auditLogsRetentionDays?: number | null | undefined;
 				mauLimit?: number | null | undefined;
-				tokenLimit?: number | null | undefined;
 				applicationsLimit?: number | null | undefined;
-				machineToMachineLimit?: number | null | undefined;
-				resourcesLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
 				scopesPerResourceLimit?: number | null | undefined;
 				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
 				machineToMachineRolesLimit?: number | null | undefined;
 				scopesPerRoleLimit?: number | null | undefined;
 				hooksLimit?: number | null | undefined;
-				auditLogsRetentionDays?: number | null | undefined;
-				mfaEnabled?: boolean | undefined;
-				organizationsEnabled?: boolean | undefined;
-				thirdPartyApplicationsLimit?: number | null | undefined;
-				tenantMembersLimit?: number | null | undefined;
 				customJwtEnabled?: boolean | undefined;
 				subjectTokenEnabled?: boolean | undefined;
 				bringYourUiEnabled?: boolean | undefined;
-				userRolesLimit?: number | null | undefined;
+				tokenLimit?: number | null | undefined;
+				machineToMachineLimit?: number | null | undefined;
+				resourcesLimit?: number | null | undefined;
 				enterpriseSsoLimit?: number | null | undefined;
+				tenantMembersLimit?: number | null | undefined;
+				mfaEnabled?: boolean | undefined;
+				organizationsEnabled?: boolean | undefined;
 				organizationsLimit?: number | null | undefined;
 				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
 			};
-			createdAt: Date;
 			updatedAt: Date;
-			defaultPriceId: string | null;
-			unitPrice: number | null;
 			productId: string | null;
 		}[]>;
 	};
@@ -682,45 +777,52 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				mfaEnabled?: boolean | undefined;
 				organizationsEnabled?: boolean | undefined;
 				organizationsLimit?: number | null | undefined;
+				auditLogsRetentionDays?: number | null | undefined;
 				mauLimit?: number | null | undefined;
 				applicationsLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
 				scopesPerResourceLimit?: number | null | undefined;
 				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
 				machineToMachineRolesLimit?: number | null | undefined;
 				scopesPerRoleLimit?: number | null | undefined;
-				auditLogsRetentionDays?: number | null | undefined;
-				thirdPartyApplicationsLimit?: number | null | undefined;
 				customJwtEnabled?: boolean | undefined;
 				subjectTokenEnabled?: boolean | undefined;
 				bringYourUiEnabled?: boolean | undefined;
-				userRolesLimit?: number | null | undefined;
 				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
 			};
 		} | {
 			type: LogtoSkuType.Basic;
 			quota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
 				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number | null;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
 				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
 				organizationsLimit: number | null;
 				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
+			};
+			addOnRelations: {
+				tokenLimit: string;
 			};
 		}, {
 			id: string;
@@ -728,28 +830,30 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 			type: LogtoSkuType;
 			updatedAt: Date;
 			quota: {
+				auditLogsRetentionDays?: number | null | undefined;
 				mauLimit?: number | null | undefined;
-				tokenLimit?: number | null | undefined;
 				applicationsLimit?: number | null | undefined;
-				machineToMachineLimit?: number | null | undefined;
-				resourcesLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
 				scopesPerResourceLimit?: number | null | undefined;
 				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
 				machineToMachineRolesLimit?: number | null | undefined;
 				scopesPerRoleLimit?: number | null | undefined;
 				hooksLimit?: number | null | undefined;
-				auditLogsRetentionDays?: number | null | undefined;
-				mfaEnabled?: boolean | undefined;
-				organizationsEnabled?: boolean | undefined;
-				thirdPartyApplicationsLimit?: number | null | undefined;
-				tenantMembersLimit?: number | null | undefined;
 				customJwtEnabled?: boolean | undefined;
 				subjectTokenEnabled?: boolean | undefined;
 				bringYourUiEnabled?: boolean | undefined;
-				userRolesLimit?: number | null | undefined;
+				tokenLimit?: number | null | undefined;
+				machineToMachineLimit?: number | null | undefined;
+				resourcesLimit?: number | null | undefined;
 				enterpriseSsoLimit?: number | null | undefined;
+				tenantMembersLimit?: number | null | undefined;
+				mfaEnabled?: boolean | undefined;
+				organizationsEnabled?: boolean | undefined;
 				organizationsLimit?: number | null | undefined;
 				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
 			};
 		}>;
 	} & {
@@ -779,19 +883,18 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 			status: "open" | "complete" | "expired";
 			tenantId: string | null;
 			updatedAt: Date;
-			planId: string | null;
 			skuId: string | null;
+			planId: string | null;
 		}>;
 	};
 	post: {
 		"/checkout-session": import("@withtyped/server").PathGuard<"/", unknown, {
 			successCallbackUrl: string;
 			tenantId?: string | undefined;
-			planId?: string | undefined;
 			skuId?: string | undefined;
 			tenantName?: string | undefined;
 			tenantTag?: TenantTag | undefined;
-			tenantRegionName?: RegionName | undefined;
+			tenantRegionName?: string | undefined;
 			cancelCallbackUrl?: string | undefined;
 		}, {
 			sessionId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/cloud",
-  "version": "0.2.5-5e334eb",
+  "version": "0.2.5-631f4a7",
   "description": "Logto Cloud service.",
   "main": "build/index.js",
   "author": "Silverhand Inc. <contact@silverhand.io>",
@@ -21,7 +21,7 @@
     "@types/accepts": "^1.3.5",
     "@types/http-proxy": "^1.17.9",
     "@types/mime-types": "^2.1.1",
-    "@types/node": "^20.0.0",
+    "@types/node": "^22.14.0",
     "@types/yargs": "^17.0.24",
     "dts-bundle-generator": "^9.3.1",
     "eslint": "^8.57.0",
@@ -30,10 +30,10 @@
     "prettier": "^3.0.0",
     "typescript": "^5.3.3",
     "vite-tsconfig-paths": "^5.0.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.1.1"
   },
   "engines": {
-    "node": "^20.9.0"
+    "node": "^22.14.0"
   },
   "eslintConfig": {
     "extends": "@silverhand",