@logto/schemas 1.12.0 → 1.13.0

package/alterations-js/1.13.0-1704935001-add-organization-invitation-tables.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1704935001-add-organization-invitation-tables.js

@@ -0,0 +1,72 @@
+import { sql } from 'slonik';
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      create type organization_invitation_status as enum ('Pending', 'Accepted', 'Expired', 'Revoked');
+
+      create table organization_invitations (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        /** The unique identifier of the invitation. */
+        id varchar(21) not null,
+        /** The user ID who sent the invitation. */
+        inviter_id varchar(21) not null,
+        /** The email address or other identifier of the invitee. */
+        invitee varchar(256) not null,
+        /** The user ID of who accepted the invitation. */
+        accepted_user_id varchar(21)
+          references users (id) on update cascade on delete cascade,
+        /** The ID of the organization to which the invitee is invited. */
+        organization_id varchar(21) not null,
+        /** The status of the invitation. */
+        status organization_invitation_status not null,
+        /** The ID of the magic link that can be used to accept the invitation. */
+        magic_link_id varchar(21)
+          references magic_links (id) on update cascade on delete cascade,
+        /** The time when the invitation was created. */
+        created_at timestamptz not null default (now()),
+        /** The time when the invitation status was last updated. */
+        updated_at timestamptz not null default (now()),
+        /** The time when the invitation expires. */
+        expires_at timestamptz not null,
+        primary key (id),
+        foreign key (tenant_id, inviter_id, organization_id)
+          references organization_user_relations (tenant_id, user_id, organization_id)
+          on update cascade on delete cascade
+      );
+
+      -- Ensure there is only one pending invitation for a given invitee and organization.
+      create unique index organization_invitations__invitee_organization_id
+        on organization_invitations (tenant_id, invitee, organization_id)
+        where status = 'Pending';
+    `);
+        await applyTableRls(pool, 'organization_invitations');
+        await pool.query(sql `
+      create table organization_invitation_role_relations (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        /** The ID of the invitation. */
+        invitation_id varchar(21) not null
+          references organization_invitations (id) on update cascade on delete cascade,
+        /** The ID of the organization role. */
+        organization_role_id varchar(21) not null
+          references organization_roles (id) on update cascade on delete cascade,
+        primary key (tenant_id, invitation_id, organization_role_id)
+      );
+    `);
+        await applyTableRls(pool, 'organization_invitation_role_relations');
+    },
+    down: async (pool) => {
+        await dropTableRls(pool, 'organization_invitation_role_relations');
+        await pool.query(sql `
+      drop table organization_invitation_role_relations;
+    `);
+        await dropTableRls(pool, 'organization_invitations');
+        await pool.query(sql `
+      drop table organization_invitations;
+      drop type organization_invitation_status;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.13.0-1705288654-add-application-user-consent-organizations-table.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1705288654-add-application-user-consent-organizations-table.js

@@ -0,0 +1,52 @@
+import { sql } from 'slonik';
+const getDatabaseName = async (pool) => {
+    const { currentDatabase } = await pool.one(sql `
+    select current_database();
+  `);
+    return currentDatabase.replaceAll('-', '_');
+};
+const enableRls = async (pool, database, table) => {
+    const baseRoleId = sql.identifier([`logto_tenant_${database}`]);
+    await pool.query(sql `
+    create trigger set_tenant_id before insert on ${sql.identifier([table])}
+      for each row execute procedure set_tenant_id();
+
+    alter table ${sql.identifier([table])} enable row level security;
+
+    create policy ${sql.identifier([`${table}_tenant_id`])} on ${sql.identifier([table])}
+      as restrictive
+      using (tenant_id = (select id from tenants where db_user = current_user));
+
+    create policy ${sql.identifier([`${table}_modification`])} on ${sql.identifier([table])}
+      using (true);
+
+    grant select, insert, update, delete on ${sql.identifier([table])} to ${baseRoleId};
+  `);
+};
+const alteration = {
+    up: async (pool) => {
+        const database = await getDatabaseName(pool);
+        await pool.query(sql `
+      create table application_user_consent_organizations (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        application_id varchar(21) not null
+          references applications (id) on update cascade on delete cascade,
+        organization_id varchar(21) not null,
+        user_id varchar(21) not null,
+        primary key (tenant_id, application_id, organization_id, user_id),
+        /** User's consent to an application should be synchronized with the user's membership in the organization. */
+        foreign key (tenant_id, organization_id, user_id)
+          references organization_user_relations (tenant_id, organization_id, user_id)
+          on update cascade on delete cascade
+      )
+    `);
+        await enableRls(pool, database, 'application_user_consent_organizations');
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      drop table application_user_consent_organizations;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.13.0-1705991158-update-invitation-indices.d.ts

@@ -0,0 +1,7 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+/**
+ * @fileoverview Separates the index (tenant_id, inviter_id, organization_id) to two indices. Also
+ * makes the inviter_id nullable.
+ */
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1705991158-update-invitation-indices.js

@@ -0,0 +1,27 @@
+import { sql } from 'slonik';
+/**
+ * @fileoverview Separates the index (tenant_id, inviter_id, organization_id) to two indices. Also
+ * makes the inviter_id nullable.
+ */
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table organization_invitations
+        drop constraint organization_invitations_tenant_id_inviter_id_organization_fkey,
+        add foreign key (inviter_id) references users (id) on update cascade on delete cascade,
+        add foreign key (organization_id) references organizations (id) on update cascade on delete cascade,
+        alter column inviter_id drop not null;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table organization_invitations
+        drop constraint organization_invitations_inviter_id_fkey,
+        drop constraint organization_invitations_organization_id_fkey,
+        add foreign key (tenant_id, inviter_id, organization_id) references organization_user_relations
+          (tenant_id, user_id, organization_id) on update cascade on delete cascade,
+        alter column inviter_id set not null;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.13.0-1706449174-update-organization-invitation-column.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1706449174-update-organization-invitation-column.js

@@ -0,0 +1,20 @@
+import { sql } from 'slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table organization_invitation_role_relations
+        rename column invitation_id to organization_invitation_id;
+      alter table organization_invitation_role_relations
+        rename constraint organization_invitation_role_relations_invitation_id_fkey to organization_invitation_role_re_organization_invitation_id_fkey;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table organization_invitation_role_relations
+        rename column organization_invitation_id to invitation_id;
+        alter table organization_invitation_role_relations
+        rename constraint organization_invitation_role_re_organization_invitation_id_fkey to organization_invitation_role_relations_invitation_id_fkey;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.13.0-1706510290-protected-app-host-index.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1706510290-protected-app-host-index.js

@@ -0,0 +1,17 @@
+import { sql } from 'slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      create unique index applications__protected_app_metadata_host
+      on applications (
+        (protected_app_metadata->>'host')
+      );
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      drop index applications__protected_app_metadata_host;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.13.0-1706512952-restore-get-started-page.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1706512952-restore-get-started-page.js

@@ -0,0 +1,13 @@
+import { sql } from 'slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      update users
+      set custom_data = custom_data #- '{adminConsolePreferences, getStartedHidden}';
+    `);
+    },
+    down: async () => {
+        // Do nothing as the data change is not reversible
+    },
+};
+export default alteration;

package/alterations-js/1.13.0-1706528755-remove-magic-links.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1706528755-remove-magic-links.js

@@ -0,0 +1,41 @@
+import { sql } from 'slonik';
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table organization_invitations
+        drop column magic_link_id;
+    `);
+        await dropTableRls(pool, 'magic_links');
+        await pool.query(sql `
+      drop table magic_links;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      create table magic_links (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        /** The unique identifier of the link. */
+        id varchar(21) not null,
+        /** The token that can be used to verify the link. */
+        token varchar(32) not null,
+        /** The time when the link was created. */
+        created_at timestamptz not null default (now()),
+        /** The time when the link was consumed. */
+        consumed_at timestamptz,
+        primary key (id)
+      );
+
+      create index magic_links__token
+        on magic_links (tenant_id, token);
+    `);
+        await applyTableRls(pool, 'magic_links');
+        await pool.query(sql `
+      alter table organization_invitations
+        add column magic_link_id varchar(21)
+          references magic_links (id) on update cascade on delete cascade;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.13.0-1706585206-protected-app-custom-domain-unique.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.13.0-1706585206-protected-app-custom-domain-unique.js

@@ -0,0 +1,17 @@
+import { sql } from 'slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      create unique index applications__protected_app_metadata_custom_domain
+      on applications (
+        (protected_app_metadata->'customDomains'->0->>'domain')
+      );
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      drop index applications__protected_app_metadata_custom_domain;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/utils/1704934999-tables.d.ts

@@ -0,0 +1,11 @@
+import { type CommonQueryMethods } from 'slonik';
+/**
+ * A function to call after the table is created. It will apply the necessary row-level security
+ * policies and triggers to the table.
+ */
+export declare const applyTableRls: (pool: CommonQueryMethods, tableName: string) => Promise<void>;
+/**
+ * A function to call before the table is dropped. It will remove the row-level security policies
+ * and triggers from the table.
+ */
+export declare const dropTableRls: (pool: CommonQueryMethods, tableName: string) => Promise<void>;

package/alterations-js/utils/1704934999-tables.js

@@ -0,0 +1,43 @@
+import { sql } from 'slonik';
+const getId = (value) => sql.identifier([value]);
+const getDatabaseName = async (pool) => {
+    const { currentDatabase } = await pool.one(sql `
+    select current_database();
+  `);
+    return currentDatabase.replaceAll('-', '_');
+};
+/**
+ * A function to call after the table is created. It will apply the necessary row-level security
+ * policies and triggers to the table.
+ */
+export const applyTableRls = async (pool, tableName) => {
+    const database = await getDatabaseName(pool);
+    const baseRoleId = getId(`logto_tenant_${database}`);
+    const table = getId(tableName);
+    await pool.query(sql `
+    create trigger set_tenant_id before insert on ${table}
+      for each row execute procedure set_tenant_id();
+
+    alter table ${table} enable row level security;
+
+    create policy ${getId(`${tableName}_tenant_id`)} on ${table}
+      as restrictive
+      using (tenant_id = (select id from tenants where db_user = current_user));
+
+    create policy ${getId(`${tableName}_modification`)} on ${table}
+      using (true);
+
+    grant select, insert, update, delete on ${table} to ${baseRoleId};
+  `);
+};
+/**
+ * A function to call before the table is dropped. It will remove the row-level security policies
+ * and triggers from the table.
+ */
+export const dropTableRls = async (pool, tableName) => {
+    await pool.query(sql `
+    drop policy ${getId(`${tableName}_modification`)} on ${getId(tableName)};
+    drop policy ${getId(`${tableName}_tenant_id`)} on ${getId(tableName)};
+    drop trigger set_tenant_id on ${getId(tableName)};
+  `);
+};

package/lib/db-entries/application-sign-in-experience.d.ts

@@ -0,0 +1,26 @@
+import { Branding, GeneratedSchema } from './../foundations/index.js';
+/**
+ * Application level sign-in experience configuration.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link ApplicationSignInExperience} for the original type.
+ */
+export type CreateApplicationSignInExperience = {
+    tenantId?: string;
+    applicationId: string;
+    branding?: Branding;
+    termsOfUseUrl?: string | null;
+    privacyPolicyUrl?: string | null;
+    displayName?: string | null;
+};
+/** Application level sign-in experience configuration. */
+export type ApplicationSignInExperience = {
+    tenantId: string;
+    applicationId: string;
+    branding: Branding;
+    termsOfUseUrl: string | null;
+    privacyPolicyUrl: string | null;
+    displayName: string | null;
+};
+export type ApplicationSignInExperienceKeys = 'tenantId' | 'applicationId' | 'branding' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'displayName';
+export declare const ApplicationSignInExperiences: GeneratedSchema<ApplicationSignInExperienceKeys, CreateApplicationSignInExperience, ApplicationSignInExperience, 'application_sign_in_experiences', 'application_sign_in_experience'>;

package/lib/db-entries/application-sign-in-experience.js

@@ -0,0 +1,42 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+import { brandingGuard } from './../foundations/index.js';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    applicationId: z.string().min(1).max(21),
+    branding: brandingGuard.optional(),
+    termsOfUseUrl: z.string().max(2048).nullable().optional(),
+    privacyPolicyUrl: z.string().max(2048).nullable().optional(),
+    displayName: z.string().max(256).nullable().optional(),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    applicationId: z.string().min(1).max(21),
+    branding: brandingGuard,
+    termsOfUseUrl: z.string().max(2048).nullable(),
+    privacyPolicyUrl: z.string().max(2048).nullable(),
+    displayName: z.string().max(256).nullable(),
+});
+export const ApplicationSignInExperiences = Object.freeze({
+    table: 'application_sign_in_experiences',
+    tableSingular: 'application_sign_in_experience',
+    fields: {
+        tenantId: 'tenant_id',
+        applicationId: 'application_id',
+        branding: 'branding',
+        termsOfUseUrl: 'terms_of_use_url',
+        privacyPolicyUrl: 'privacy_policy_url',
+        displayName: 'display_name',
+    },
+    fieldKeys: [
+        'tenantId',
+        'applicationId',
+        'branding',
+        'termsOfUseUrl',
+        'privacyPolicyUrl',
+        'displayName',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/application-user-consent-organization-scope.d.ts

@@ -0,0 +1,24 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The organization scopes (permissions) assigned to an application.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link ApplicationUserConsentOrganizationScope} for the original type.
+ */
+export type CreateApplicationUserConsentOrganizationScope = {
+    tenantId?: string;
+    /** The globally unique identifier of the application. */
+    applicationId: string;
+    /** The globally unique identifier of the organization scope. */
+    organizationScopeId: string;
+};
+/** The organization scopes (permissions) assigned to an application. */
+export type ApplicationUserConsentOrganizationScope = {
+    tenantId: string;
+    /** The globally unique identifier of the application. */
+    applicationId: string;
+    /** The globally unique identifier of the organization scope. */
+    organizationScopeId: string;
+};
+export type ApplicationUserConsentOrganizationScopeKeys = 'tenantId' | 'applicationId' | 'organizationScopeId';
+export declare const ApplicationUserConsentOrganizationScopes: GeneratedSchema<ApplicationUserConsentOrganizationScopeKeys, CreateApplicationUserConsentOrganizationScope, ApplicationUserConsentOrganizationScope, 'application_user_consent_organization_scopes', 'application_user_consent_organization_scope'>;

package/lib/db-entries/application-user-consent-organization-scope.js

@@ -0,0 +1,29 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    applicationId: z.string().min(1).max(21),
+    organizationScopeId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    applicationId: z.string().min(1).max(21),
+    organizationScopeId: z.string().min(1).max(21),
+});
+export const ApplicationUserConsentOrganizationScopes = Object.freeze({
+    table: 'application_user_consent_organization_scopes',
+    tableSingular: 'application_user_consent_organization_scope',
+    fields: {
+        tenantId: 'tenant_id',
+        applicationId: 'application_id',
+        organizationScopeId: 'organization_scope_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'applicationId',
+        'organizationScopeId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/application-user-consent-organization.d.ts

@@ -0,0 +1,22 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The relations between applications, users and organizations. A relation means that a user has consented to an application to access data in an organization.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link ApplicationUserConsentOrganization} for the original type.
+ */
+export type CreateApplicationUserConsentOrganization = {
+    tenantId?: string;
+    applicationId: string;
+    organizationId: string;
+    userId: string;
+};
+/** The relations between applications, users and organizations. A relation means that a user has consented to an application to access data in an organization. */
+export type ApplicationUserConsentOrganization = {
+    tenantId: string;
+    applicationId: string;
+    organizationId: string;
+    userId: string;
+};
+export type ApplicationUserConsentOrganizationKeys = 'tenantId' | 'applicationId' | 'organizationId' | 'userId';
+export declare const ApplicationUserConsentOrganizations: GeneratedSchema<ApplicationUserConsentOrganizationKeys, CreateApplicationUserConsentOrganization, ApplicationUserConsentOrganization, 'application_user_consent_organizations', 'application_user_consent_organization'>;

package/lib/db-entries/application-user-consent-organization.js

@@ -0,0 +1,33 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    applicationId: z.string().min(1).max(21),
+    organizationId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    applicationId: z.string().min(1).max(21),
+    organizationId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(21),
+});
+export const ApplicationUserConsentOrganizations = Object.freeze({
+    table: 'application_user_consent_organizations',
+    tableSingular: 'application_user_consent_organization',
+    fields: {
+        tenantId: 'tenant_id',
+        applicationId: 'application_id',
+        organizationId: 'organization_id',
+        userId: 'user_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'applicationId',
+        'organizationId',
+        'userId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/application-user-consent-resource-scope.d.ts

@@ -0,0 +1,24 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The resource scopes (permissions) assigned to an application's consent request.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link ApplicationUserConsentResourceScope} for the original type.
+ */
+export type CreateApplicationUserConsentResourceScope = {
+    tenantId?: string;
+    /** The globally unique identifier of the application. */
+    applicationId: string;
+    /** The globally unique identifier of the resource scope. */
+    scopeId: string;
+};
+/** The resource scopes (permissions) assigned to an application's consent request. */
+export type ApplicationUserConsentResourceScope = {
+    tenantId: string;
+    /** The globally unique identifier of the application. */
+    applicationId: string;
+    /** The globally unique identifier of the resource scope. */
+    scopeId: string;
+};
+export type ApplicationUserConsentResourceScopeKeys = 'tenantId' | 'applicationId' | 'scopeId';
+export declare const ApplicationUserConsentResourceScopes: GeneratedSchema<ApplicationUserConsentResourceScopeKeys, CreateApplicationUserConsentResourceScope, ApplicationUserConsentResourceScope, 'application_user_consent_resource_scopes', 'application_user_consent_resource_scope'>;

package/lib/db-entries/application-user-consent-resource-scope.js

@@ -0,0 +1,29 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    applicationId: z.string().min(1).max(21),
+    scopeId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    applicationId: z.string().min(1).max(21),
+    scopeId: z.string().min(1).max(21),
+});
+export const ApplicationUserConsentResourceScopes = Object.freeze({
+    table: 'application_user_consent_resource_scopes',
+    tableSingular: 'application_user_consent_resource_scope',
+    fields: {
+        tenantId: 'tenant_id',
+        applicationId: 'application_id',
+        scopeId: 'scope_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'applicationId',
+        'scopeId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/application-user-consent-user-scope.d.ts

@@ -0,0 +1,24 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The user scopes (permissions) assigned to an application
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link ApplicationUserConsentUserScope} for the original type.
+ */
+export type CreateApplicationUserConsentUserScope = {
+    tenantId?: string;
+    /** The globally unique identifier of the application. */
+    applicationId: string;
+    /** The unique UserScope enum value @see (@logto/core-kit/open-id.js) for more details */
+    userScope: string;
+};
+/** The user scopes (permissions) assigned to an application */
+export type ApplicationUserConsentUserScope = {
+    tenantId: string;
+    /** The globally unique identifier of the application. */
+    applicationId: string;
+    /** The unique UserScope enum value @see (@logto/core-kit/open-id.js) for more details */
+    userScope: string;
+};
+export type ApplicationUserConsentUserScopeKeys = 'tenantId' | 'applicationId' | 'userScope';
+export declare const ApplicationUserConsentUserScopes: GeneratedSchema<ApplicationUserConsentUserScopeKeys, CreateApplicationUserConsentUserScope, ApplicationUserConsentUserScope, 'application_user_consent_user_scopes', 'application_user_consent_user_scope'>;