@logto/cloud 0.2.5-61f7709 → 0.2.5-631f4a7

package/lib/routes/index.d.ts

@@ -3,21 +3,22 @@
 import { Json, JsonObject, RequestContext } from '@withtyped/server';
 import { InferModelType } from '@withtyped/server/model';
 
-export type WithAuthContext<Context = RequestContext> = Context & {
-	auth: {
-		/** The ID of the authenticated subject (`sub`). */
-		id: string;
-		/** The scopes that the subject has (`scope`). */
-		scopes: string[];
-	};
-};
-declare enum VerificationCodeType {
-	SignIn = "SignIn",
-	Register = "Register",
-	ForgotPassword = "ForgotPassword",
-	Generic = "Generic",
-	/** @deprecated Use `Generic` type template for sending test sms/email use case */
-	Test = "Test"
+declare const availableReportableUsageKeys: readonly [
+	"tokenLimit",
+	"machineToMachineLimit",
+	"resourcesLimit",
+	"enterpriseSsoLimit",
+	"hooksLimit",
+	"tenantMembersLimit",
+	"mfaEnabled",
+	"organizationsEnabled",
+	"organizationsLimit"
+];
+export type ReportableUsageKey = (typeof availableReportableUsageKeys)[number];
+export type RealtimeReportableUsageKey = Exclude<ReportableUsageKey, "tokenLimit">;
+declare enum LogtoSkuType {
+	Basic = "Basic",
+	AddOn = "AddOn"
 }
 declare enum TemplateType {
 	/** The template for sending verification code when user is signing in. */
@@ -29,7 +30,11 @@ declare enum TemplateType {
 	/** The template for sending organization invitation. */
 	OrganizationInvitation = "OrganizationInvitation",
 	/** The template for generic usage. */
-	Generic = "Generic"
+	Generic = "Generic",
+	/** The template for validating user permission for sensitive operations. */
+	UserPermissionValidation = "UserPermissionValidation",
+	/** The template for binding a new identifier to an existing account. */
+	BindNewIdentifier = "BindNewIdentifier"
 }
 declare enum OrganizationInvitationStatus {
 	Pending = "Pending",
@@ -69,10 +74,6 @@ declare enum TenantRole {
 	/** Collaborator of the tenant, who has permissions to operate the tenant data, but not the tenant settings. */
 	Collaborator = "collaborator"
 }
-declare enum LogtoSkuType {
-	Basic = "Basic",
-	AddOn = "AddOn"
-}
 declare const AffiliateProperties: import("@withtyped/server/lib/model/index.js").default<"affiliate_properties", {
 	createdAt: Date;
 	affiliateId: string;
@@ -86,10 +87,22 @@ declare const Affiliates: import("@withtyped/server/lib/model/index.js").default
 	id: string;
 }, "id" | "createdAt", "id" | "createdAt">;
 export type Affiliate = InferModelType<typeof Affiliates>;
-declare enum RegionName {
-	EU = "EU",
-	US = "US"
-}
+declare const publicRegionNames: readonly [
+	"EU",
+	"US",
+	"AU",
+	"JP"
+];
+/** The type of region names for the public cloud. */
+export type PublicRegionName = (typeof publicRegionNames)[number];
+export type WithAuthContext<Context = RequestContext> = Context & {
+	auth: {
+		/** The ID of the authenticated subject (`sub`). */
+		id: string;
+		/** The scopes that the subject has (`scope`). */
+		scopes: string[];
+	};
+};
 export type AffiliateData = Affiliate & {
 	properties: Array<Pick<AffiliateProperty, "type" | "value">>;
 };
@@ -119,12 +132,14 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 		}, {
 			id: string;
 			name: string;
+			createdAt: Date;
 			quota: {
 				mauLimit: number | null;
+				tokenLimit: number | null;
 			};
-			createdAt: Date;
 			usage: {
 				activeUsers: number;
+				tokenUsage: number;
 			};
 			indicator: string;
 			isSuspended: boolean;
@@ -134,6 +149,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				planId: string;
 				currentPeriodStart: Date;
 				currentPeriodEnd: Date;
+				isEnterprisePlan: boolean;
 				id?: string | undefined;
 				upcomingInvoice?: {
 					subtotal: number;
@@ -141,15 +157,13 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 					total: number;
 					totalExcludingTax: number | null;
 				} | null | undefined;
-				isAddOnAvailable?: boolean | undefined;
-				isAddOnVisibleToLegacyUsers?: boolean | undefined;
 			};
-			regionName: RegionName;
+			regionName: string;
 			tag: TenantTag;
 			openInvoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -157,6 +171,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -168,12 +183,14 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 		"/tenants": import("@withtyped/server").PathGuard<"/", unknown, unknown, {
 			id: string;
 			name: string;
+			createdAt: Date;
 			quota: {
 				mauLimit: number | null;
+				tokenLimit: number | null;
 			};
-			createdAt: Date;
 			usage: {
 				activeUsers: number;
+				tokenUsage: number;
 			};
 			indicator: string;
 			isSuspended: boolean;
@@ -183,6 +200,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				planId: string;
 				currentPeriodStart: Date;
 				currentPeriodEnd: Date;
+				isEnterprisePlan: boolean;
 				id?: string | undefined;
 				upcomingInvoice?: {
 					subtotal: number;
@@ -190,15 +208,13 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 					total: number;
 					totalExcludingTax: number | null;
 				} | null | undefined;
-				isAddOnAvailable?: boolean | undefined;
-				isAddOnVisibleToLegacyUsers?: boolean | undefined;
 			};
-			regionName: RegionName;
+			regionName: string;
 			tag: TenantTag;
 			openInvoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -206,6 +222,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -214,18 +231,21 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	};
 	post: {
 		"/tenants": import("@withtyped/server").PathGuard<"/", unknown, {
+			id?: string | undefined;
 			name?: string | undefined;
 			tag?: TenantTag | undefined;
-			regionName?: RegionName | undefined;
+			regionName?: string | undefined;
 		}, {
 			id: string;
 			name: string;
+			createdAt: Date;
 			quota: {
 				mauLimit: number | null;
+				tokenLimit: number | null;
 			};
-			createdAt: Date;
 			usage: {
 				activeUsers: number;
+				tokenUsage: number;
 			};
 			indicator: string;
 			isSuspended: boolean;
@@ -235,6 +255,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				planId: string;
 				currentPeriodStart: Date;
 				currentPeriodEnd: Date;
+				isEnterprisePlan: boolean;
 				id?: string | undefined;
 				upcomingInvoice?: {
 					subtotal: number;
@@ -242,15 +263,13 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 					total: number;
 					totalExcludingTax: number | null;
 				} | null | undefined;
-				isAddOnAvailable?: boolean | undefined;
-				isAddOnVisibleToLegacyUsers?: boolean | undefined;
 			};
-			regionName: RegionName;
+			regionName: string;
 			tag: TenantTag;
 			openInvoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -258,6 +277,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -276,9 +296,36 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	get: {
 		"/tenants/my/subscription": import("@withtyped/server").PathGuard<"/my/subscription", unknown, unknown, {
 			status: "incomplete" | "incomplete_expired" | "trialing" | "active" | "past_due" | "canceled" | "unpaid" | "paused";
+			quota: {
+				auditLogsRetentionDays: number | null;
+				mauLimit: number | null;
+				applicationsLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
+				scopesPerResourceLimit: number | null;
+				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
+				machineToMachineRolesLimit: number | null;
+				scopesPerRoleLimit: number | null;
+				hooksLimit: number | null;
+				customJwtEnabled: boolean;
+				subjectTokenEnabled: boolean;
+				bringYourUiEnabled: boolean;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
+				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
+				organizationsLimit: number | null;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
+			};
 			planId: string;
 			currentPeriodStart: Date;
 			currentPeriodEnd: Date;
+			isEnterprisePlan: boolean;
 			id?: string | undefined;
 			upcomingInvoice?: {
 				subtotal: number;
@@ -286,118 +333,109 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				total: number;
 				totalExcludingTax: number | null;
 			} | null | undefined;
-			isAddOnAvailable?: boolean | undefined;
-			isAddOnVisibleToLegacyUsers?: boolean | undefined;
-		}>;
-	} & {
-		"/tenants/my/subscription/quota": import("@withtyped/server").PathGuard<"/my/subscription/quota", unknown, unknown, {
-			mauLimit: number | null;
-			tokenLimit: number | null;
-			applicationsLimit: number | null;
-			machineToMachineLimit: number | null;
-			resourcesLimit: number | null;
-			scopesPerResourceLimit: number | null;
-			socialConnectorsLimit: number | null;
-			machineToMachineRolesLimit: number | null;
-			scopesPerRoleLimit: number | null;
-			hooksLimit: number | null;
-			auditLogsRetentionDays: number | null;
-			mfaEnabled: boolean;
-			organizationsEnabled: boolean;
-			thirdPartyApplicationsLimit: number | null;
-			tenantMembersLimit: number | null;
-			customJwtEnabled: boolean;
-			subjectTokenEnabled: boolean;
-			bringYourUiEnabled: boolean;
-			userRolesLimit: number | null;
-			enterpriseSsoLimit: number | null;
-		}>;
-	} & {
-		"/tenants/my/subscription/usage": import("@withtyped/server").PathGuard<"/my/subscription/usage", unknown, unknown, {
-			mauLimit: number;
-			tokenLimit: number;
-			applicationsLimit: number;
-			machineToMachineLimit: number;
-			resourcesLimit: number;
-			scopesPerResourceLimit: number;
-			socialConnectorsLimit: number;
-			machineToMachineRolesLimit: number;
-			scopesPerRoleLimit: number;
-			hooksLimit: number;
-			mfaEnabled: boolean;
-			organizationsEnabled: boolean;
-			thirdPartyApplicationsLimit: number;
-			tenantMembersLimit: number;
-			customJwtEnabled: boolean;
-			subjectTokenEnabled: boolean;
-			bringYourUiEnabled: boolean;
-			userRolesLimit: number;
-			enterpriseSsoLimit: number;
 		}>;
-	} & {
-		"/tenants/my/subscription/usage/:entityName/scopes": import("@withtyped/server").PathGuard<"/my/subscription/usage/:entityName/scopes", {
-			entityId?: string | undefined;
-		}, unknown, Record<string, number>>;
 	} & {
 		"/tenants/my/subscription-usage": import("@withtyped/server").PathGuard<"/my/subscription-usage", unknown, unknown, {
 			usage: {
-				mauLimit: number;
-				tokenLimit: number;
 				applicationsLimit: number;
-				machineToMachineLimit: number;
-				resourcesLimit: number;
+				thirdPartyApplicationsLimit: number;
 				scopesPerResourceLimit: number;
 				socialConnectorsLimit: number;
+				userRolesLimit: number;
 				machineToMachineRolesLimit: number;
 				scopesPerRoleLimit: number;
 				hooksLimit: number;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number;
-				tenantMembersLimit: number;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number;
+				machineToMachineLimit: number;
+				resourcesLimit: number;
 				enterpriseSsoLimit: number;
+				tenantMembersLimit: number;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
+				organizationsLimit: number;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number;
+				captchaEnabled: boolean;
 			};
 			resources: Record<string, number>;
 			roles: Record<string, number>;
 			quota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
 				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
+				customJwtEnabled: boolean;
+				subjectTokenEnabled: boolean;
+				bringYourUiEnabled: boolean;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
+				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
 				mfaEnabled: boolean;
 				organizationsEnabled: boolean;
+				organizationsLimit: number | null;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
+			};
+			basicQuota: {
+				auditLogsRetentionDays: number | null;
+				mauLimit: number | null;
+				applicationsLimit: number | null;
 				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
+				scopesPerResourceLimit: number | null;
+				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
+				machineToMachineRolesLimit: number | null;
+				scopesPerRoleLimit: number | null;
+				hooksLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number | null;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
 				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
+				organizationsLimit: number | null;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
 			};
-			upcomingInvoice?: {
-				subtotal: number;
-				subtotalExcludingTax: number | null;
-				total: number;
-				totalExcludingTax: number | null;
-			} | null | undefined;
 		}>;
-	} & {
+	};
+	post: {
+		"/tenants/my/subscription/item-updates": import("@withtyped/server").PathGuard<"/my/subscription/item-updates", unknown, {
+			usageKey: RealtimeReportableUsageKey;
+		}, {
+			message: string;
+		}>;
+	};
+	put: {};
+	delete: {};
+	copy: {};
+	head: {};
+}, "/api">>, import("@withtyped/server").RoutesWithPrefix<{
+	patch: {};
+	options: {};
+	get: {
 		"/tenants/:tenantId/subscription": import("@withtyped/server").PathGuard<"/:tenantId/subscription", unknown, unknown, {
 			status: "incomplete" | "incomplete_expired" | "trialing" | "active" | "past_due" | "canceled" | "unpaid" | "paused";
 			planId: string;
 			currentPeriodStart: Date;
 			currentPeriodEnd: Date;
+			isEnterprisePlan: boolean;
 			id?: string | undefined;
 			upcomingInvoice?: {
 				subtotal: number;
@@ -405,118 +443,137 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				total: number;
 				totalExcludingTax: number | null;
 			} | null | undefined;
-			isAddOnAvailable?: boolean | undefined;
-			isAddOnVisibleToLegacyUsers?: boolean | undefined;
-		}>;
-	} & {
-		"/tenants/:tenantId/subscription/quota": import("@withtyped/server").PathGuard<"/:tenantId/subscription/quota", unknown, unknown, {
-			mauLimit: number | null;
-			tokenLimit: number | null;
-			applicationsLimit: number | null;
-			machineToMachineLimit: number | null;
-			resourcesLimit: number | null;
-			scopesPerResourceLimit: number | null;
-			socialConnectorsLimit: number | null;
-			machineToMachineRolesLimit: number | null;
-			scopesPerRoleLimit: number | null;
-			hooksLimit: number | null;
-			auditLogsRetentionDays: number | null;
-			mfaEnabled: boolean;
-			organizationsEnabled: boolean;
-			thirdPartyApplicationsLimit: number | null;
-			tenantMembersLimit: number | null;
-			customJwtEnabled: boolean;
-			subjectTokenEnabled: boolean;
-			bringYourUiEnabled: boolean;
-			userRolesLimit: number | null;
-			enterpriseSsoLimit: number | null;
-		}>;
-	} & {
-		"/tenants/:tenantId/subscription/usage": import("@withtyped/server").PathGuard<"/:tenantId/subscription/usage", unknown, unknown, {
-			mauLimit: number;
-			tokenLimit: number;
-			applicationsLimit: number;
-			machineToMachineLimit: number;
-			resourcesLimit: number;
-			scopesPerResourceLimit: number;
-			socialConnectorsLimit: number;
-			machineToMachineRolesLimit: number;
-			scopesPerRoleLimit: number;
-			hooksLimit: number;
-			mfaEnabled: boolean;
-			organizationsEnabled: boolean;
-			thirdPartyApplicationsLimit: number;
-			tenantMembersLimit: number;
-			customJwtEnabled: boolean;
-			subjectTokenEnabled: boolean;
-			bringYourUiEnabled: boolean;
-			userRolesLimit: number;
-			enterpriseSsoLimit: number;
 		}>;
-	} & {
-		"/tenants/:tenantId/subscription/usage/:entityName/scopes": import("@withtyped/server").PathGuard<"/:tenantId/subscription/usage/:entityName/scopes", {
-			entityId?: string | undefined;
-		}, unknown, Record<string, number>>;
 	} & {
 		"/tenants/:tenantId/subscription-usage": import("@withtyped/server").PathGuard<"/:tenantId/subscription-usage", unknown, unknown, {
 			usage: {
-				mauLimit: number;
-				tokenLimit: number;
 				applicationsLimit: number;
-				machineToMachineLimit: number;
-				resourcesLimit: number;
+				thirdPartyApplicationsLimit: number;
 				scopesPerResourceLimit: number;
 				socialConnectorsLimit: number;
+				userRolesLimit: number;
 				machineToMachineRolesLimit: number;
 				scopesPerRoleLimit: number;
 				hooksLimit: number;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				thirdPartyApplicationsLimit: number;
-				tenantMembersLimit: number;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number;
+				machineToMachineLimit: number;
+				resourcesLimit: number;
 				enterpriseSsoLimit: number;
+				tenantMembersLimit: number;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
+				organizationsLimit: number;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number;
+				captchaEnabled: boolean;
 			};
 			resources: Record<string, number>;
 			roles: Record<string, number>;
 			quota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
 				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
+				customJwtEnabled: boolean;
+				subjectTokenEnabled: boolean;
+				bringYourUiEnabled: boolean;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
+				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
 				mfaEnabled: boolean;
 				organizationsEnabled: boolean;
+				organizationsLimit: number | null;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
+			};
+			basicQuota: {
+				auditLogsRetentionDays: number | null;
+				mauLimit: number | null;
+				applicationsLimit: number | null;
 				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
+				scopesPerResourceLimit: number | null;
+				socialConnectorsLimit: number | null;
+				userRolesLimit: number | null;
+				machineToMachineRolesLimit: number | null;
+				scopesPerRoleLimit: number | null;
+				hooksLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
-				userRolesLimit: number | null;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
 				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
+				organizationsLimit: number | null;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
 			};
-			upcomingInvoice?: {
-				subtotal: number;
-				subtotalExcludingTax: number | null;
-				total: number;
-				totalExcludingTax: number | null;
-			} | null | undefined;
+		}>;
+	} & {
+		"/tenants/:tenantId/subscription/periodic-usage": import("@withtyped/server").PathGuard<"/:tenantId/subscription/periodic-usage", unknown, unknown, {
+			mauLimit: number;
+			tokenLimit: number;
+		}>;
+	} & {
+		"/tenants/:tenantId/subscription/add-on-skus": import("@withtyped/server").PathGuard<"/:tenantId/subscription/add-on-skus", unknown, unknown, {
+			tokenLimit?: {
+				id: string;
+				name: string | null;
+				createdAt: Date;
+				defaultPriceId: string | null;
+				unitPrice: number | null;
+				type: LogtoSkuType;
+				quota: {
+					auditLogsRetentionDays?: number | null | undefined;
+					mauLimit?: number | null | undefined;
+					applicationsLimit?: number | null | undefined;
+					thirdPartyApplicationsLimit?: number | null | undefined;
+					scopesPerResourceLimit?: number | null | undefined;
+					socialConnectorsLimit?: number | null | undefined;
+					userRolesLimit?: number | null | undefined;
+					machineToMachineRolesLimit?: number | null | undefined;
+					scopesPerRoleLimit?: number | null | undefined;
+					hooksLimit?: number | null | undefined;
+					customJwtEnabled?: boolean | undefined;
+					subjectTokenEnabled?: boolean | undefined;
+					bringYourUiEnabled?: boolean | undefined;
+					tokenLimit?: number | null | undefined;
+					machineToMachineLimit?: number | null | undefined;
+					resourcesLimit?: number | null | undefined;
+					enterpriseSsoLimit?: number | null | undefined;
+					tenantMembersLimit?: number | null | undefined;
+					mfaEnabled?: boolean | undefined;
+					organizationsEnabled?: boolean | undefined;
+					organizationsLimit?: number | null | undefined;
+					idpInitiatedSsoEnabled?: boolean | undefined;
+					samlApplicationsLimit?: number | null | undefined;
+					captchaEnabled?: boolean | undefined;
+				};
+				updatedAt: Date;
+				productId: string | null;
+			} | undefined;
 		}>;
 	} & {
 		"/tenants/:tenantId/invoices": import("@withtyped/server").PathGuard<"/:tenantId/invoices", unknown, unknown, {
 			invoices: {
-				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				id: string;
 				createdAt: Date;
+				status: "void" | "open" | "draft" | "paid" | "uncollectible" | null;
 				updatedAt: Date;
 				customerId: string | null;
 				billingReason: string | null;
@@ -524,6 +581,7 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				periodEnd: Date;
 				amountDue: number;
 				amountPaid: number;
+				basicSkuId: string | null;
 				subscriptionId: string | null;
 				hostedInvoiceUrl: string | null;
 				invoicePdf: string | null;
@@ -531,18 +589,51 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 				skuId?: string | null | undefined;
 			}[];
 		}>;
+	} & {
+		"/tenants/:tenantId/available-skus": import("@withtyped/server").PathGuard<"/:tenantId/available-skus", {
+			type?: LogtoSkuType | undefined;
+		}, unknown, {
+			id: string;
+			name: string | null;
+			createdAt: Date;
+			defaultPriceId: string | null;
+			unitPrice: number | null;
+			type: LogtoSkuType;
+			quota: {
+				auditLogsRetentionDays?: number | null | undefined;
+				mauLimit?: number | null | undefined;
+				applicationsLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
+				scopesPerResourceLimit?: number | null | undefined;
+				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
+				machineToMachineRolesLimit?: number | null | undefined;
+				scopesPerRoleLimit?: number | null | undefined;
+				hooksLimit?: number | null | undefined;
+				customJwtEnabled?: boolean | undefined;
+				subjectTokenEnabled?: boolean | undefined;
+				bringYourUiEnabled?: boolean | undefined;
+				tokenLimit?: number | null | undefined;
+				machineToMachineLimit?: number | null | undefined;
+				resourcesLimit?: number | null | undefined;
+				enterpriseSsoLimit?: number | null | undefined;
+				tenantMembersLimit?: number | null | undefined;
+				mfaEnabled?: boolean | undefined;
+				organizationsEnabled?: boolean | undefined;
+				organizationsLimit?: number | null | undefined;
+				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
+			};
+			updatedAt: Date;
+			productId: string | null;
+		}[]>;
 	} & {
 		"/tenants/:tenantId/invoices/:invoiceId/hosted-invoice-url": import("@withtyped/server").PathGuard<"/:tenantId/invoices/:invoiceId/hosted-invoice-url", unknown, unknown, {
 			hostedInvoiceUrl: string;
 		}>;
 	};
 	post: {
-		"/tenants/my/subscription/item-updates": import("@withtyped/server").PathGuard<"/my/subscription/item-updates", unknown, {
-			usageKey: "tokenLimit" | "machineToMachineLimit" | "resourcesLimit" | "enterpriseSsoLimit" | "hooksLimit" | "tenantMembersLimit" | "mfaEnabled" | "organizationsEnabled";
-		}, {
-			message: string;
-		}>;
-	} & {
 		"/tenants/:tenantId/stripe-customer-portal": import("@withtyped/server").PathGuard<"/:tenantId/stripe-customer-portal", unknown, {
 			callbackUrl?: string | undefined;
 		}, {
@@ -568,11 +659,14 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	post: {
 		"/services/mails": import("@withtyped/server").PathGuard<"/mails", unknown, {
 			data: {
-				type: TemplateType | VerificationCodeType;
+				type: TemplateType;
 				payload: {
-					code?: string | undefined;
 					link?: string | undefined;
-				} & Record<string, string> & {
+					code?: string | undefined;
+					locale?: string | undefined;
+				} & {
+					[k: string]: unknown;
+				} & {
 					senderName?: string | undefined;
 					companyInformation?: string | undefined;
 					appLogo?: string | undefined;
@@ -583,27 +677,30 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	} & {
 		"/services/send-sms": import("@withtyped/server").PathGuard<"/send-sms", unknown, {
 			data: {
-				type: TemplateType | VerificationCodeType;
+				type: TemplateType;
 				to: string;
 				payload: {
 					code?: string | undefined;
 					link?: string | undefined;
-				} & Record<string, string>;
+					locale?: string | undefined;
+				} & {
+					[k: string]: unknown;
+				};
 			};
 		}, unknown>;
 	} & {
 		"/services/custom-jwt": import("@withtyped/server").PathGuard<"/custom-jwt", {
 			isTest?: string | undefined;
 		}, {
+			token: Record<string, Json>;
 			context: Record<string, Json>;
 			script: string;
 			tokenType: LogtoJwtTokenKeyType.AccessToken;
-			token: Record<string, Json>;
 			environmentVariables?: Record<string, string> | undefined;
 		} | {
+			token: Record<string, Json>;
 			script: string;
 			tokenType: LogtoJwtTokenKeyType.ClientCredentials;
-			token: Record<string, Json>;
 			environmentVariables?: Record<string, string> | undefined;
 		}, Record<string, unknown>>;
 	};
@@ -628,96 +725,151 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 	patch: {};
 	options: {};
 	get: {
-		"/subscription-plans": import("@withtyped/server").PathGuard<"/", unknown, unknown, {
+		"/skus": import("@withtyped/server").PathGuard<"/", {
+			type?: LogtoSkuType | undefined;
+		}, unknown, {
 			id: string;
+			name: string | null;
 			createdAt: Date;
-			name: string;
+			defaultPriceId: string | null;
+			unitPrice: number | null;
+			type: LogtoSkuType;
+			quota: {
+				auditLogsRetentionDays?: number | null | undefined;
+				mauLimit?: number | null | undefined;
+				applicationsLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
+				scopesPerResourceLimit?: number | null | undefined;
+				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
+				machineToMachineRolesLimit?: number | null | undefined;
+				scopesPerRoleLimit?: number | null | undefined;
+				hooksLimit?: number | null | undefined;
+				customJwtEnabled?: boolean | undefined;
+				subjectTokenEnabled?: boolean | undefined;
+				bringYourUiEnabled?: boolean | undefined;
+				tokenLimit?: number | null | undefined;
+				machineToMachineLimit?: number | null | undefined;
+				resourcesLimit?: number | null | undefined;
+				enterpriseSsoLimit?: number | null | undefined;
+				tenantMembersLimit?: number | null | undefined;
+				mfaEnabled?: boolean | undefined;
+				organizationsEnabled?: boolean | undefined;
+				organizationsLimit?: number | null | undefined;
+				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
+			};
 			updatedAt: Date;
+			productId: string | null;
+		}[]>;
+	};
+	post: {
+		"/skus": import("@withtyped/server").PathGuard<"/", unknown, {
+			type: LogtoSkuType.AddOn;
 			quota: {
+				tokenLimit?: number | null | undefined;
+				machineToMachineLimit?: number | null | undefined;
+				resourcesLimit?: number | null | undefined;
+				enterpriseSsoLimit?: number | null | undefined;
+				hooksLimit?: number | null | undefined;
+				tenantMembersLimit?: number | null | undefined;
+				mfaEnabled?: boolean | undefined;
+				organizationsEnabled?: boolean | undefined;
+				organizationsLimit?: number | null | undefined;
+				auditLogsRetentionDays?: number | null | undefined;
+				mauLimit?: number | null | undefined;
+				applicationsLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
+				scopesPerResourceLimit?: number | null | undefined;
+				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
+				machineToMachineRolesLimit?: number | null | undefined;
+				scopesPerRoleLimit?: number | null | undefined;
+				customJwtEnabled?: boolean | undefined;
+				subjectTokenEnabled?: boolean | undefined;
+				bringYourUiEnabled?: boolean | undefined;
+				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
+			};
+		} | {
+			type: LogtoSkuType.Basic;
+			quota: {
+				auditLogsRetentionDays: number | null;
 				mauLimit: number | null;
-				tokenLimit: number | null;
 				applicationsLimit: number | null;
-				machineToMachineLimit: number | null;
-				resourcesLimit: number | null;
+				thirdPartyApplicationsLimit: number | null;
 				scopesPerResourceLimit: number | null;
-				customDomainEnabled: boolean;
-				omniSignInEnabled: boolean;
-				builtInEmailConnectorEnabled: boolean;
 				socialConnectorsLimit: number | null;
-				standardConnectorsLimit: number | null;
-				rolesLimit: number | null;
+				userRolesLimit: number | null;
 				machineToMachineRolesLimit: number | null;
 				scopesPerRoleLimit: number | null;
 				hooksLimit: number | null;
-				auditLogsRetentionDays: number | null;
-				mfaEnabled: boolean;
-				organizationsEnabled: boolean;
-				ssoEnabled: boolean;
-				thirdPartyApplicationsLimit: number | null;
-				tenantMembersLimit: number | null;
 				customJwtEnabled: boolean;
 				subjectTokenEnabled: boolean;
 				bringYourUiEnabled: boolean;
+				tokenLimit: number | null;
+				machineToMachineLimit: number | null;
+				resourcesLimit: number | null;
+				enterpriseSsoLimit: number | null;
+				tenantMembersLimit: number | null;
+				mfaEnabled: boolean;
+				organizationsEnabled: boolean;
+				organizationsLimit: number | null;
+				idpInitiatedSsoEnabled: boolean;
+				samlApplicationsLimit: number | null;
+				captchaEnabled: boolean;
 			};
-			stripeProducts: {
-				type: "flat" | "tier1" | "tier2" | "tier3";
-				id: string;
-				name: string;
-				price: {
-					id: string;
-					unitAmountDecimal: string;
-					quantity?: 1 | undefined;
-					unitAmount?: number | null | undefined;
-				};
-				description?: string | undefined;
-			}[];
-		}[]>;
-	};
-	post: {};
-	put: {};
-	delete: {};
-	copy: {};
-	head: {};
-}, "/api">>, import("@withtyped/server").RoutesWithPrefix<{
-	patch: {};
-	options: {};
-	get: {
-		"/skus": import("@withtyped/server").PathGuard<"/", {
-			type?: LogtoSkuType | undefined;
-		}, unknown, {
-			type: LogtoSkuType;
+			addOnRelations: {
+				tokenLimit: string;
+			};
+		}, {
 			id: string;
-			name: string | null;
+			createdAt: Date;
+			type: LogtoSkuType;
+			updatedAt: Date;
 			quota: {
+				auditLogsRetentionDays?: number | null | undefined;
 				mauLimit?: number | null | undefined;
-				tokenLimit?: number | null | undefined;
 				applicationsLimit?: number | null | undefined;
-				machineToMachineLimit?: number | null | undefined;
-				resourcesLimit?: number | null | undefined;
+				thirdPartyApplicationsLimit?: number | null | undefined;
 				scopesPerResourceLimit?: number | null | undefined;
 				socialConnectorsLimit?: number | null | undefined;
+				userRolesLimit?: number | null | undefined;
 				machineToMachineRolesLimit?: number | null | undefined;
 				scopesPerRoleLimit?: number | null | undefined;
 				hooksLimit?: number | null | undefined;
-				auditLogsRetentionDays?: number | null | undefined;
-				mfaEnabled?: boolean | undefined;
-				organizationsEnabled?: boolean | undefined;
-				thirdPartyApplicationsLimit?: number | null | undefined;
-				tenantMembersLimit?: number | null | undefined;
 				customJwtEnabled?: boolean | undefined;
 				subjectTokenEnabled?: boolean | undefined;
 				bringYourUiEnabled?: boolean | undefined;
-				userRolesLimit?: number | null | undefined;
+				tokenLimit?: number | null | undefined;
+				machineToMachineLimit?: number | null | undefined;
+				resourcesLimit?: number | null | undefined;
 				enterpriseSsoLimit?: number | null | undefined;
+				tenantMembersLimit?: number | null | undefined;
+				mfaEnabled?: boolean | undefined;
+				organizationsEnabled?: boolean | undefined;
+				organizationsLimit?: number | null | undefined;
+				idpInitiatedSsoEnabled?: boolean | undefined;
+				samlApplicationsLimit?: number | null | undefined;
+				captchaEnabled?: boolean | undefined;
 			};
-			createdAt: Date;
-			updatedAt: Date;
-			unitPrice: number | null;
-		}[]>;
+		}>;
+	} & {
+		"/skus/:skuId/products": import("@withtyped/server").PathGuard<"/:skuId/products", {
+			isOneTime?: string | undefined;
+		}, {
+			name: string;
+			unitPrice: number;
+		}, {
+			productId: string;
+		}>;
 	};
-	post: {};
 	put: {};
-	delete: {};
+	delete: {
+		"/skus/:skuId": import("@withtyped/server").PathGuard<"/:skuId", unknown, unknown, unknown>;
+	};
 	copy: {};
 	head: {};
 }, "/api">>, import("@withtyped/server").RoutesWithPrefix<{
@@ -731,19 +883,18 @@ declare const router: import("@withtyped/server").Router<RequestContext, WithAut
 			status: "open" | "complete" | "expired";
 			tenantId: string | null;
 			updatedAt: Date;
-			planId: string;
 			skuId: string | null;
+			planId: string | null;
 		}>;
 	};
 	post: {
 		"/checkout-session": import("@withtyped/server").PathGuard<"/", unknown, {
-			planId: string;
 			successCallbackUrl: string;
 			tenantId?: string | undefined;
 			skuId?: string | undefined;
 			tenantName?: string | undefined;
 			tenantTag?: TenantTag | undefined;
-			tenantRegionName?: RegionName | undefined;
+			tenantRegionName?: string | undefined;
 			cancelCallbackUrl?: string | undefined;
 		}, {
 			sessionId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/cloud",
-  "version": "0.2.5-61f7709",
+  "version": "0.2.5-631f4a7",
   "description": "Logto Cloud service.",
   "main": "build/index.js",
   "author": "Silverhand Inc. <contact@silverhand.io>",
@@ -21,7 +21,7 @@
     "@types/accepts": "^1.3.5",
     "@types/http-proxy": "^1.17.9",
     "@types/mime-types": "^2.1.1",
-    "@types/node": "^20.0.0",
+    "@types/node": "^22.14.0",
     "@types/yargs": "^17.0.24",
     "dts-bundle-generator": "^9.3.1",
     "eslint": "^8.57.0",
@@ -29,11 +29,11 @@
     "nodemon": "^3.0.0",
     "prettier": "^3.0.0",
     "typescript": "^5.3.3",
-    "vite-tsconfig-paths": "^4.3.1",
-    "vitest": "^2.0.0"
+    "vite-tsconfig-paths": "^5.0.0",
+    "vitest": "^3.1.1"
   },
   "engines": {
-    "node": "^20.9.0"
+    "node": "^22.14.0"
   },
   "eslintConfig": {
     "extends": "@silverhand",
@@ -49,8 +49,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@silverhand/essentials": "^2.9.1",
-    "@withtyped/server": "^0.13.6"
+    "@silverhand/essentials": "^2.9.2",
+    "@withtyped/server": "^0.14.0"
   },
   "scripts": {
     "precommit": "lint-staged",