@logto/schemas 1.13.1 → 1.15.0

package/lib/types/user.d.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { type User } from '../db-entries/index.js';
 import { MfaFactor } from '../foundations/index.js';
-export declare const userInfoSelectFields: readonly ["id", "username", "primaryEmail", "primaryPhone", "name", "avatar", "customData", "identities", "lastSignInAt", "createdAt", "applicationId", "isSuspended"];
+export declare const userInfoSelectFields: readonly ("name" | "id" | "applicationId" | "username" | "profile" | "createdAt" | "updatedAt" | "primaryEmail" | "primaryPhone" | "avatar" | "identities" | "customData" | "isSuspended" | "lastSignInAt")[];
 export declare const userInfoGuard: z.ZodObject<Pick<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
@@ -12,13 +12,54 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     passwordEncryptionMethod: z.ZodType<import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null, z.ZodTypeDef, import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null>;
     name: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     avatar: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    profile: z.ZodType<Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>, z.ZodTypeDef, Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>>;
     applicationId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     identities: z.ZodType<Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>, z.ZodTypeDef, Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>>;
     customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     logtoConfig: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
@@ -76,96 +117,81 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     isSuspended: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "tenantId" | "username" | "createdAt" | "primaryEmail" | "primaryPhone" | "passwordEncrypted" | "passwordEncryptionMethod" | "avatar" | "identities" | "customData" | "logtoConfig" | "mfaVerifications" | "isSuspended" | "lastSignInAt">, "strip", z.ZodTypeAny, {
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
+}, "name" | "id" | "applicationId" | "username" | "profile" | "createdAt" | "updatedAt" | "primaryEmail" | "primaryPhone" | "avatar" | "identities" | "customData" | "isSuspended" | "lastSignInAt">, "strip", z.ZodTypeAny, {
     name: string | null;
     id: string;
     applicationId: string | null;
-    tenantId: string;
     username: string | null;
+    profile: Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>;
     createdAt: number;
+    updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    passwordEncrypted: string | null;
-    passwordEncryptionMethod: import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null;
     avatar: string | null;
     identities: Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
-    logtoConfig: import("@withtyped/server/lib/types.js").JsonObject;
-    mfaVerifications: ({
-        type: MfaFactor.TOTP;
-        id: string;
-        key: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.WebAuthn;
-        id: string;
-        createdAt: string;
-        credentialId: string;
-        publicKey: string;
-        counter: number;
-        agent: string;
-        transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.BackupCode;
-        id: string;
-        createdAt: string;
-        codes: {
-            code: string;
-            usedAt?: string | undefined;
-        }[];
-        lastUsedAt?: string | undefined;
-    })[];
     isSuspended: boolean;
     lastSignInAt: number | null;
 }, {
     name: string | null;
     id: string;
     applicationId: string | null;
-    tenantId: string;
     username: string | null;
+    profile: Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>;
     createdAt: number;
+    updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    passwordEncrypted: string | null;
-    passwordEncryptionMethod: import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null;
     avatar: string | null;
     identities: Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
-    logtoConfig: import("@withtyped/server/lib/types.js").JsonObject;
-    mfaVerifications: ({
-        type: MfaFactor.TOTP;
-        id: string;
-        key: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.WebAuthn;
-        id: string;
-        createdAt: string;
-        credentialId: string;
-        publicKey: string;
-        counter: number;
-        agent: string;
-        transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.BackupCode;
-        id: string;
-        createdAt: string;
-        codes: {
-            code: string;
-            usedAt?: string | undefined;
-        }[];
-        lastUsedAt?: string | undefined;
-    })[];
     isSuspended: boolean;
     lastSignInAt: number | null;
 }>;
@@ -174,74 +200,61 @@ export declare const userProfileResponseGuard: z.ZodObject<{
     name: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
     applicationId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
-    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     username: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    profile: z.ZodType<Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>, z.ZodTypeDef, Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
     primaryEmail: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     primaryPhone: z.ZodType<string | null, z.ZodTypeDef, string | null>;
-    passwordEncrypted: z.ZodType<string | null, z.ZodTypeDef, string | null>;
-    passwordEncryptionMethod: z.ZodType<import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null, z.ZodTypeDef, import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null>;
     avatar: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     identities: z.ZodType<Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>, z.ZodTypeDef, Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>>;
     customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
-    logtoConfig: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
-    mfaVerifications: z.ZodType<({
-        type: MfaFactor.TOTP;
-        id: string;
-        key: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.WebAuthn;
-        id: string;
-        createdAt: string;
-        credentialId: string;
-        publicKey: string;
-        counter: number;
-        agent: string;
-        transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.BackupCode;
-        id: string;
-        createdAt: string;
-        codes: {
-            code: string;
-            usedAt?: string | undefined;
-        }[];
-        lastUsedAt?: string | undefined;
-    })[], z.ZodTypeDef, ({
-        type: MfaFactor.TOTP;
-        id: string;
-        key: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.WebAuthn;
-        id: string;
-        createdAt: string;
-        credentialId: string;
-        publicKey: string;
-        counter: number;
-        agent: string;
-        transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.BackupCode;
-        id: string;
-        createdAt: string;
-        codes: {
-            code: string;
-            usedAt?: string | undefined;
-        }[];
-        lastUsedAt?: string | undefined;
-    })[]>;
     isSuspended: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     hasPassword: z.ZodOptional<z.ZodBoolean>;
@@ -250,46 +263,38 @@ export declare const userProfileResponseGuard: z.ZodObject<{
     name: string | null;
     id: string;
     applicationId: string | null;
-    tenantId: string;
     username: string | null;
+    profile: Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>;
     createdAt: number;
+    updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    passwordEncrypted: string | null;
-    passwordEncryptionMethod: import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null;
     avatar: string | null;
     identities: Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
-    logtoConfig: import("@withtyped/server/lib/types.js").JsonObject;
-    mfaVerifications: ({
-        type: MfaFactor.TOTP;
-        id: string;
-        key: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.WebAuthn;
-        id: string;
-        createdAt: string;
-        credentialId: string;
-        publicKey: string;
-        counter: number;
-        agent: string;
-        transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.BackupCode;
-        id: string;
-        createdAt: string;
-        codes: {
-            code: string;
-            usedAt?: string | undefined;
-        }[];
-        lastUsedAt?: string | undefined;
-    })[];
     isSuspended: boolean;
     lastSignInAt: number | null;
     hasPassword?: boolean | undefined;
@@ -298,46 +303,38 @@ export declare const userProfileResponseGuard: z.ZodObject<{
     name: string | null;
     id: string;
     applicationId: string | null;
-    tenantId: string;
     username: string | null;
+    profile: Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>;
     createdAt: number;
+    updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    passwordEncrypted: string | null;
-    passwordEncryptionMethod: import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null;
     avatar: string | null;
     identities: Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
-    logtoConfig: import("@withtyped/server/lib/types.js").JsonObject;
-    mfaVerifications: ({
-        type: MfaFactor.TOTP;
-        id: string;
-        key: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.WebAuthn;
-        id: string;
-        createdAt: string;
-        credentialId: string;
-        publicKey: string;
-        counter: number;
-        agent: string;
-        transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.BackupCode;
-        id: string;
-        createdAt: string;
-        codes: {
-            code: string;
-            usedAt?: string | undefined;
-        }[];
-        lastUsedAt?: string | undefined;
-    })[];
     isSuspended: boolean;
     lastSignInAt: number | null;
     hasPassword?: boolean | undefined;
@@ -398,13 +395,54 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
     passwordEncryptionMethod: z.ZodType<import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null, z.ZodTypeDef, import("../db-entries/custom-types.js").UsersPasswordEncryptionMethod | null>;
     name: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     avatar: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    profile: z.ZodType<Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>, z.ZodTypeDef, Partial<{
+        familyName: string;
+        givenName: string;
+        middleName: string;
+        nickname: string;
+        preferredUsername: string;
+        profile: string;
+        website: string;
+        gender: string;
+        birthdate: string;
+        zoneinfo: string;
+        locale: string;
+        address: Partial<{
+            formatted: string;
+            streetAddress: string;
+            locality: string;
+            region: string;
+            postalCode: string;
+            country: string;
+        }>;
+    }>>;
     applicationId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     identities: z.ZodType<Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>, z.ZodTypeDef, Record<string, {
         userId: string;
-        details?: Record<string, unknown> | undefined;
+        details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
     }>>;
     customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     logtoConfig: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
@@ -462,6 +500,7 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
     isSuspended: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
 }, "name" | "id" | "avatar">, "strip", z.ZodTypeAny, {
     name: string | null;
     id: string;

package/lib/types/user.js

@@ -12,10 +12,14 @@ export const userInfoSelectFields = Object.freeze([
     'identities',
     'lastSignInAt',
     'createdAt',
+    'updatedAt',
+    'profile',
     'applicationId',
     'isSuspended',
 ]);
-export const userInfoGuard = Users.guard.pick(Object.fromEntries(userInfoSelectFields.map((key) => [key, true])));
+export const userInfoGuard = Users.guard.pick(
+// eslint-disable-next-line no-restricted-syntax
+Object.fromEntries(userInfoSelectFields.map((field) => [field, true])));
 export const userProfileResponseGuard = userInfoGuard.extend({
     hasPassword: z.boolean().optional(),
     ssoIdentities: z.array(UserSsoIdentities.guard).optional(),

package/lib/utils/domain.test.js

@@ -1,3 +1,4 @@
+import { describe, it, expect } from 'vitest';
 import { findDuplicatedOrBlockedEmailDomains } from './domain.js';
 describe('findDuplicatedOrBlockedEmailDomains', () => {
     it('should return blocked domains and duplicated domains correctly', () => {

package/lib/utils/zod.d.ts

@@ -0,0 +1,4 @@
+import { type z } from 'zod';
+export type ToZodObject<T> = z.ZodObject<{
+    [K in keyof T]: z.ZodType<T[K]>;
+}>;

package/lib/utils/zod.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/schemas",
-  "version": "1.13.1",
+  "version": "1.15.0",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "license": "MPL-2.0",
   "type": "module",
@@ -26,22 +26,21 @@
   "devDependencies": {
     "@silverhand/eslint-config": "5.0.0",
     "@silverhand/essentials": "^2.9.0",
+    "@silverhand/slonik": "31.0.0-beta.2",
     "@silverhand/ts-config": "5.0.0",
     "@types/inquirer": "^9.0.0",
-    "@types/jest": "^29.4.0",
     "@types/node": "^20.9.5",
     "@types/pluralize": "^0.0.33",
+    "@vitest/coverage-v8": "^1.4.0",
     "camelcase": "^8.0.0",
     "chalk": "^5.0.0",
     "eslint": "^8.44.0",
-    "jest": "^29.7.0",
     "lint-staged": "^15.0.0",
     "pluralize": "^8.0.0",
     "prettier": "^3.0.0",
     "roarr": "^7.11.0",
-    "slonik": "^30.0.0",
-    "slonik-sql-tag-raw": "^1.1.4",
-    "typescript": "^5.3.3"
+    "typescript": "^5.3.3",
+    "vitest": "^1.4.0"
   },
   "eslintConfig": {
     "extends": "@silverhand",
@@ -64,13 +63,13 @@
   },
   "prettier": "@silverhand/eslint-config/.prettierrc",
   "dependencies": {
-    "@logto/connector-kit": "^2.1.0",
-    "@logto/core-kit": "^2.3.0",
+    "@logto/connector-kit": "^3.0.0",
+    "@logto/core-kit": "^2.4.0",
     "@logto/language-kit": "^1.1.0",
-    "@logto/phrases": "^1.9.0",
-    "@logto/phrases-experience": "^1.6.0",
+    "@logto/phrases": "^1.10.0",
+    "@logto/phrases-experience": "^1.6.1",
     "@logto/shared": "^3.1.0",
-    "@withtyped/server": "^0.12.9"
+    "@withtyped/server": "^0.13.3"
   },
   "peerDependencies": {
     "zod": "^3.22.4"
@@ -81,12 +80,11 @@
     "generate": "./generate.sh",
     "build:alterations": "rm -rf alterations-js && tsc -p tsconfig.build.alterations.json",
     "build": "pnpm generate && rm -rf lib/ && tsc -p tsconfig.build.json && pnpm build:alterations",
-    "build:test": "pnpm generate && rm -rf lib/ && tsc -p tsconfig.test.json --sourcemap",
+    "build:test": "pnpm build",
     "dev": "tsc -p tsconfig.build.json --watch --preserveWatchOutput --incremental",
     "lint": "eslint --ext .ts src",
     "lint:report": "pnpm lint --format json --output-file report.json",
-    "test:only": "NODE_OPTIONS=--experimental-vm-modules jest",
-    "test": "pnpm build:test && pnpm test:only",
-    "test:ci": "pnpm test:only"
+    "test": "vitest src",
+    "test:ci": "pnpm run test --silent --coverage"
   }
 }

package/tables/_before_all.sql

@@ -1,3 +1,3 @@
 /* This SQL will run before all other queries. */
 
-create role logto_tenant_${database} noinherit;
+create role logto_tenant_${database} password '${password}' noinherit;

package/tables/_functions.sql

@@ -1,5 +1,6 @@
 /* init_order = 0.5 */
 
+/** A function to set the tenant_id column based on the current user. */
 create function set_tenant_id() returns trigger as
 $$ begin
   if new.tenant_id is not null then
@@ -13,4 +14,11 @@ $$ begin
   return new;
 end; $$ language plpgsql;
 
+/** A function to set the `updated_at` column to the current time. */
+create function set_updated_at() returns trigger as
+$$ begin
+  new.updated_at = now();
+  return new;
+end; $$ language plpgsql;
+
 /* no_after_each */

package/tables/daily_active_users.sql

@@ -3,7 +3,7 @@ create table daily_active_users (
   tenant_id varchar(21) not null
     references tenants (id) on update cascade on delete cascade,
   user_id varchar(21) not null,
-  date timestamptz not null,
+  date timestamptz not null default (now()),
   primary key (id),
   constraint daily_active_users__user_id_date
     unique (user_id, date)

package/tables/organization_role_resource_scope_relations.sql

@@ -0,0 +1,12 @@
+/* init_order = 3 */
+
+/** The relations between organization roles and resource scopes (normal scopes). It indicates which resource scopes are available to which organization roles. */
+create table organization_role_resource_scope_relations (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  organization_role_id varchar(21) not null
+    references organization_roles (id) on update cascade on delete cascade,
+  scope_id varchar(21) not null
+    references scopes (id) on update cascade on delete cascade,
+  primary key (tenant_id, organization_role_id, scope_id)
+);