@logto/schemas 1.17.0 → 1.18.0

package/alterations-js/1.18.0-1718807616-organization-role-application-relations.js

@@ -0,0 +1,29 @@
+import { sql } from '@silverhand/slonik';
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      create table organization_role_application_relations (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        organization_id varchar(21) not null,
+        organization_role_id varchar(21) not null
+          references organization_roles (id) on update cascade on delete cascade,
+        application_id varchar(21) not null,
+        primary key (tenant_id, organization_id, organization_role_id, application_id),
+        /** Application's roles in an organization should be synchronized with the application's membership in the organization. */
+        foreign key (tenant_id, organization_id, application_id)
+          references organization_application_relations (tenant_id, organization_id, application_id)
+          on update cascade on delete cascade
+      );
+    `);
+        await applyTableRls(pool, 'organization_role_application_relations');
+    },
+    down: async (pool) => {
+        await dropTableRls(pool, 'organization_role_application_relations');
+        await pool.query(sql `
+      drop table organization_role_application_relations;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.18.0-1718865814-add-subject-tokens.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.18.0-1718865814-add-subject-tokens.js

@@ -0,0 +1,31 @@
+import { sql } from '@silverhand/slonik';
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      create table subject_tokens (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        id varchar(25) not null,
+        context jsonb /* @use JsonObject */ not null default '{}'::jsonb,
+        expires_at timestamptz not null,
+        consumed_at timestamptz,
+        user_id varchar(21) not null
+          references users (id) on update cascade on delete cascade,
+        created_at timestamptz not null default(now()),
+        creator_id varchar(32) not null, /* It is intented to not reference to user or application table */
+        primary key (id)
+      );
+
+      create index subject_token__id on subject_tokens (tenant_id, id);
+    `);
+        await applyTableRls(pool, 'subject_tokens');
+    },
+    down: async (pool) => {
+        await dropTableRls(pool, 'subject_tokens');
+        await pool.query(sql `
+      drop table subject_tokens
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.18.0-1719014832-organization-role-types.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.18.0-1719014832-organization-role-types.js

@@ -0,0 +1,31 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table organization_roles
+        add column type role_type not null default 'User';
+      create function check_organization_role_type(role_id varchar(21), target_type role_type) returns boolean as
+        $$ begin
+          return (select type from organization_roles where id = role_id) = target_type;
+        end; $$ language plpgsql;
+      alter table organization_role_user_relations
+        add constraint organization_role_user_relations__role_type
+          check (check_organization_role_type(organization_role_id, 'User'));
+      alter table organization_role_application_relations
+        add constraint organization_role_application_relations__role_type
+          check (check_organization_role_type(organization_role_id, 'MachineToMachine'));
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table organization_role_application_relations
+        drop constraint organization_role_application_relations__role_type;
+      alter table organization_role_user_relations
+        drop constraint organization_role_user_relations__role_type;
+      alter table organization_roles
+        drop column type;
+      drop function check_organization_role_type;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.18.0-1719221205-fix-functions.d.ts

@@ -0,0 +1,7 @@
+/**
+ * In Logto Cloud, we have multiple schemas and the default search behavior will be problematic.
+ * This alteration script will fix it by setting the search path to public for the functions.
+ */
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.18.0-1719221205-fix-functions.js

@@ -0,0 +1,20 @@
+/**
+ * In Logto Cloud, we have multiple schemas and the default search behavior will be problematic.
+ * This alteration script will fix it by setting the search path to public for the functions.
+ */
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter function check_application_type set search_path = public;
+      alter function check_organization_role_type set search_path = public;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter function check_application_type reset search_path;
+      alter function check_organization_role_type reset search_path;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.18.0-1719312694-custom-ui-assets.d.ts

@@ -0,0 +1,3 @@
+import type { AlterationScript } from '../lib/types/alteration.js';
+declare const alteration: AlterationScript;
+export default alteration;

package/alterations-js/1.18.0-1719312694-custom-ui-assets.js

@@ -0,0 +1,14 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table sign_in_experiences add column custom_ui_asset_id varchar(21);
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table sign_in_experiences drop column custom_ui_asset_id;
+    `);
+    },
+};
+export default alteration;

package/lib/consts/subscriptions.d.ts

@@ -17,13 +17,16 @@ export declare enum ReservedPlanId {
      * - LOG-8339: Migrate legacy Stripe data
      */
     Hobby = "hobby",
+    Pro = "pro",
     /**
      * @deprecated
-     * Now this `pro` ID is not used anymore, we use `hobby` as the `pro` plan ID.
-     * Only use this `pro` value when displaying the plan ID to the user.
-     *
-     * Todo @darcyYe see `Hobby` todo
+     * Should not use this plan ID, we only use this tag as a record for the legacy `pro` plan since we will rename the `hobby` plan to be `pro`.
      */
-    Pro = "pro",
-    Development = "dev"
+    GrandfatheredPro = "grandfathered-pro",
+    Development = "dev",
+    /**
+     * This plan ID is reserved for Admin tenant.
+     * In our new pricing model, we plan to add a special plan for Admin tenant, previously, admin tenant is using the `pro` plan, which is not suitable.
+     */
+    Admin = "admin"
 }

package/lib/consts/subscriptions.js

@@ -18,13 +18,16 @@ export var ReservedPlanId;
      * - LOG-8339: Migrate legacy Stripe data
      */
     ReservedPlanId["Hobby"] = "hobby";
+    ReservedPlanId["Pro"] = "pro";
     /**
      * @deprecated
-     * Now this `pro` ID is not used anymore, we use `hobby` as the `pro` plan ID.
-     * Only use this `pro` value when displaying the plan ID to the user.
-     *
-     * Todo @darcyYe see `Hobby` todo
+     * Should not use this plan ID, we only use this tag as a record for the legacy `pro` plan since we will rename the `hobby` plan to be `pro`.
      */
-    ReservedPlanId["Pro"] = "pro";
+    ReservedPlanId["GrandfatheredPro"] = "grandfathered-pro";
     ReservedPlanId["Development"] = "dev";
+    /**
+     * This plan ID is reserved for Admin tenant.
+     * In our new pricing model, we plan to add a special plan for Admin tenant, previously, admin tenant is using the `pro` plan, which is not suitable.
+     */
+    ReservedPlanId["Admin"] = "admin";
 })(ReservedPlanId || (ReservedPlanId = {}));

package/lib/db-entries/custom-types.d.ts

@@ -30,6 +30,11 @@ export declare enum SignInMode {
     Register = "Register",
     SignInAndRegister = "SignInAndRegister"
 }
+export declare enum AgreeToTermsPolicy {
+    Automatic = "Automatic",
+    ManualRegistrationOnly = "ManualRegistrationOnly",
+    Manual = "Manual"
+}
 export declare enum UsersPasswordEncryptionMethod {
     Argon2i = "Argon2i",
     SHA1 = "SHA1",

package/lib/db-entries/custom-types.js

@@ -37,6 +37,12 @@ export var SignInMode;
     SignInMode["Register"] = "Register";
     SignInMode["SignInAndRegister"] = "SignInAndRegister";
 })(SignInMode || (SignInMode = {}));
+export var AgreeToTermsPolicy;
+(function (AgreeToTermsPolicy) {
+    AgreeToTermsPolicy["Automatic"] = "Automatic";
+    AgreeToTermsPolicy["ManualRegistrationOnly"] = "ManualRegistrationOnly";
+    AgreeToTermsPolicy["Manual"] = "Manual";
+})(AgreeToTermsPolicy || (AgreeToTermsPolicy = {}));
 export var UsersPasswordEncryptionMethod;
 (function (UsersPasswordEncryptionMethod) {
     UsersPasswordEncryptionMethod["Argon2i"] = "Argon2i";

package/lib/db-entries/index.d.ts

@@ -20,8 +20,13 @@ export * from './hook.js';
 export * from './log.js';
 export * from './logto-config.js';
 export * from './oidc-model-instance.js';
+export * from './organization-application-relation.js';
 export * from './organization-invitation-role-relation.js';
 export * from './organization-invitation.js';
+export * from './organization-jit-email-domain.js';
+export * from './organization-jit-role.js';
+export * from './organization-jit-sso-connector.js';
+export * from './organization-role-application-relation.js';
 export * from './organization-role-resource-scope-relation.js';
 export * from './organization-role-scope-relation.js';
 export * from './organization-role-user-relation.js';
@@ -38,6 +43,7 @@ export * from './sentinel-activity.js';
 export * from './service-log.js';
 export * from './sign-in-experience.js';
 export * from './sso-connector.js';
+export * from './subject-token.js';
 export * from './system.js';
 export * from './user-sso-identity.js';
 export * from './user.js';

package/lib/db-entries/index.js

@@ -21,8 +21,13 @@ export * from './hook.js';
 export * from './log.js';
 export * from './logto-config.js';
 export * from './oidc-model-instance.js';
+export * from './organization-application-relation.js';
 export * from './organization-invitation-role-relation.js';
 export * from './organization-invitation.js';
+export * from './organization-jit-email-domain.js';
+export * from './organization-jit-role.js';
+export * from './organization-jit-sso-connector.js';
+export * from './organization-role-application-relation.js';
 export * from './organization-role-resource-scope-relation.js';
 export * from './organization-role-scope-relation.js';
 export * from './organization-role-user-relation.js';
@@ -39,6 +44,7 @@ export * from './sentinel-activity.js';
 export * from './service-log.js';
 export * from './sign-in-experience.js';
 export * from './sso-connector.js';
+export * from './subject-token.js';
 export * from './system.js';
 export * from './user-sso-identity.js';
 export * from './user.js';

package/lib/db-entries/organization-application-relation.d.ts

@@ -0,0 +1,20 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The relations between organizations and applications. It indicates membership of applications in organizations. For now only machine-to-machine applications are supported.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link OrganizationApplicationRelation} for the original type.
+ */
+export type CreateOrganizationApplicationRelation = {
+    tenantId?: string;
+    organizationId: string;
+    applicationId: string;
+};
+/** The relations between organizations and applications. It indicates membership of applications in organizations. For now only machine-to-machine applications are supported. */
+export type OrganizationApplicationRelation = {
+    tenantId: string;
+    organizationId: string;
+    applicationId: string;
+};
+export type OrganizationApplicationRelationKeys = 'tenantId' | 'organizationId' | 'applicationId';
+export declare const OrganizationApplicationRelations: GeneratedSchema<OrganizationApplicationRelationKeys, CreateOrganizationApplicationRelation, OrganizationApplicationRelation, 'organization_application_relations', 'organization_application_relation'>;

package/lib/db-entries/organization-application-relation.js

@@ -0,0 +1,29 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    organizationId: z.string().min(1).max(21),
+    applicationId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    organizationId: z.string().min(1).max(21),
+    applicationId: z.string().min(1).max(21),
+});
+export const OrganizationApplicationRelations = Object.freeze({
+    table: 'organization_application_relations',
+    tableSingular: 'organization_application_relation',
+    fields: {
+        tenantId: 'tenant_id',
+        organizationId: 'organization_id',
+        applicationId: 'application_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'organizationId',
+        'applicationId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/organization-jit-email-domain.d.ts

@@ -0,0 +1,24 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The email domains that will automatically assign users into an organization when they sign up or are added through the Management API.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link OrganizationJitEmailDomain} for the original type.
+ */
+export type CreateOrganizationJitEmailDomain = {
+    tenantId?: string;
+    /** The ID of the organization. */
+    organizationId: string;
+    /** The email domain that will be automatically provisioned. */
+    emailDomain: string;
+};
+/** The email domains that will automatically assign users into an organization when they sign up or are added through the Management API. */
+export type OrganizationJitEmailDomain = {
+    tenantId: string;
+    /** The ID of the organization. */
+    organizationId: string;
+    /** The email domain that will be automatically provisioned. */
+    emailDomain: string;
+};
+export type OrganizationJitEmailDomainKeys = 'tenantId' | 'organizationId' | 'emailDomain';
+export declare const OrganizationJitEmailDomains: GeneratedSchema<OrganizationJitEmailDomainKeys, CreateOrganizationJitEmailDomain, OrganizationJitEmailDomain, 'organization_jit_email_domains', 'organization_jit_email_domain'>;

package/lib/db-entries/organization-jit-email-domain.js

@@ -0,0 +1,29 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    organizationId: z.string().min(1).max(21),
+    emailDomain: z.string().min(1).max(128),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    organizationId: z.string().min(1).max(21),
+    emailDomain: z.string().min(1).max(128),
+});
+export const OrganizationJitEmailDomains = Object.freeze({
+    table: 'organization_jit_email_domains',
+    tableSingular: 'organization_jit_email_domain',
+    fields: {
+        tenantId: 'tenant_id',
+        organizationId: 'organization_id',
+        emailDomain: 'email_domain',
+    },
+    fieldKeys: [
+        'tenantId',
+        'organizationId',
+        'emailDomain',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/organization-jit-role.d.ts

@@ -0,0 +1,24 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The organization roles that will be automatically provisioned to users when they join an organization through JIT.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link OrganizationJitRole} for the original type.
+ */
+export type CreateOrganizationJitRole = {
+    tenantId?: string;
+    /** The ID of the organization. */
+    organizationId: string;
+    /** The organization role ID that will be automatically provisioned. */
+    organizationRoleId: string;
+};
+/** The organization roles that will be automatically provisioned to users when they join an organization through JIT. */
+export type OrganizationJitRole = {
+    tenantId: string;
+    /** The ID of the organization. */
+    organizationId: string;
+    /** The organization role ID that will be automatically provisioned. */
+    organizationRoleId: string;
+};
+export type OrganizationJitRoleKeys = 'tenantId' | 'organizationId' | 'organizationRoleId';
+export declare const OrganizationJitRoles: GeneratedSchema<OrganizationJitRoleKeys, CreateOrganizationJitRole, OrganizationJitRole, 'organization_jit_roles', 'organization_jit_role'>;

package/lib/db-entries/organization-jit-role.js

@@ -0,0 +1,29 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    organizationId: z.string().min(1).max(21),
+    organizationRoleId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    organizationId: z.string().min(1).max(21),
+    organizationRoleId: z.string().min(1).max(21),
+});
+export const OrganizationJitRoles = Object.freeze({
+    table: 'organization_jit_roles',
+    tableSingular: 'organization_jit_role',
+    fields: {
+        tenantId: 'tenant_id',
+        organizationId: 'organization_id',
+        organizationRoleId: 'organization_role_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'organizationId',
+        'organizationRoleId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/organization-jit-sso-connector.d.ts

@@ -0,0 +1,22 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The enterprise SSO connectors that will automatically assign users into an organization when they are authenticated via the SSO connector for the first time.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link OrganizationJitSsoConnector} for the original type.
+ */
+export type CreateOrganizationJitSsoConnector = {
+    tenantId?: string;
+    /** The ID of the organization. */
+    organizationId: string;
+    ssoConnectorId: string;
+};
+/** The enterprise SSO connectors that will automatically assign users into an organization when they are authenticated via the SSO connector for the first time. */
+export type OrganizationJitSsoConnector = {
+    tenantId: string;
+    /** The ID of the organization. */
+    organizationId: string;
+    ssoConnectorId: string;
+};
+export type OrganizationJitSsoConnectorKeys = 'tenantId' | 'organizationId' | 'ssoConnectorId';
+export declare const OrganizationJitSsoConnectors: GeneratedSchema<OrganizationJitSsoConnectorKeys, CreateOrganizationJitSsoConnector, OrganizationJitSsoConnector, 'organization_jit_sso_connectors', 'organization_jit_sso_connector'>;

package/lib/db-entries/organization-jit-sso-connector.js

@@ -0,0 +1,29 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    organizationId: z.string().min(1).max(21),
+    ssoConnectorId: z.string().min(1).max(128),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    organizationId: z.string().min(1).max(21),
+    ssoConnectorId: z.string().min(1).max(128),
+});
+export const OrganizationJitSsoConnectors = Object.freeze({
+    table: 'organization_jit_sso_connectors',
+    tableSingular: 'organization_jit_sso_connector',
+    fields: {
+        tenantId: 'tenant_id',
+        organizationId: 'organization_id',
+        ssoConnectorId: 'sso_connector_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'organizationId',
+        'ssoConnectorId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/organization-role-application-relation.d.ts

@@ -0,0 +1,22 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The relations between organizations, organization roles, and applications. A relation means that an application has a role in an organization.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link OrganizationRoleApplicationRelation} for the original type.
+ */
+export type CreateOrganizationRoleApplicationRelation = {
+    tenantId?: string;
+    organizationId: string;
+    organizationRoleId: string;
+    applicationId: string;
+};
+/** The relations between organizations, organization roles, and applications. A relation means that an application has a role in an organization. */
+export type OrganizationRoleApplicationRelation = {
+    tenantId: string;
+    organizationId: string;
+    organizationRoleId: string;
+    applicationId: string;
+};
+export type OrganizationRoleApplicationRelationKeys = 'tenantId' | 'organizationId' | 'organizationRoleId' | 'applicationId';
+export declare const OrganizationRoleApplicationRelations: GeneratedSchema<OrganizationRoleApplicationRelationKeys, CreateOrganizationRoleApplicationRelation, OrganizationRoleApplicationRelation, 'organization_role_application_relations', 'organization_role_application_relation'>;

package/lib/db-entries/organization-role-application-relation.js

@@ -0,0 +1,33 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    organizationId: z.string().min(1).max(21),
+    organizationRoleId: z.string().min(1).max(21),
+    applicationId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    organizationId: z.string().min(1).max(21),
+    organizationRoleId: z.string().min(1).max(21),
+    applicationId: z.string().min(1).max(21),
+});
+export const OrganizationRoleApplicationRelations = Object.freeze({
+    table: 'organization_role_application_relations',
+    tableSingular: 'organization_role_application_relation',
+    fields: {
+        tenantId: 'tenant_id',
+        organizationId: 'organization_id',
+        organizationRoleId: 'organization_role_id',
+        applicationId: 'application_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'organizationId',
+        'organizationRoleId',
+        'applicationId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/organization-role.d.ts

@@ -1,4 +1,5 @@
 import { GeneratedSchema } from './../foundations/index.js';
+import { RoleType } from './custom-types.js';
 /**
  * The roles defined by the organization template.
  *
@@ -13,6 +14,8 @@ export type CreateOrganizationRole = {
     name: string;
     /** A brief description of the organization role. */
     description?: string | null;
+    /** The type of the organization role. Same as the `type` field in the `roles` table. */
+    type?: RoleType;
 };
 /** The roles defined by the organization template. */
 export type OrganizationRole = {
@@ -23,6 +26,8 @@ export type OrganizationRole = {
     name: string;
     /** A brief description of the organization role. */
     description: string | null;
+    /** The type of the organization role. Same as the `type` field in the `roles` table. */
+    type: RoleType;
 };
-export type OrganizationRoleKeys = 'tenantId' | 'id' | 'name' | 'description';
+export type OrganizationRoleKeys = 'tenantId' | 'id' | 'name' | 'description' | 'type';
 export declare const OrganizationRoles: GeneratedSchema<OrganizationRoleKeys, CreateOrganizationRole, OrganizationRole, 'organization_roles', 'organization_role'>;

package/lib/db-entries/organization-role.js

@@ -1,16 +1,19 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
+import { RoleType } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
     name: z.string().min(1).max(128),
     description: z.string().max(256).nullable().optional(),
+    type: z.nativeEnum(RoleType).optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
     name: z.string().min(1).max(128),
     description: z.string().max(256).nullable(),
+    type: z.nativeEnum(RoleType),
 });
 export const OrganizationRoles = Object.freeze({
     table: 'organization_roles',
@@ -20,12 +23,14 @@ export const OrganizationRoles = Object.freeze({
         id: 'id',
         name: 'name',
         description: 'description',
+        type: 'type',
     },
     fieldKeys: [
         'tenantId',
         'id',
         'name',
         'description',
+        'type',
     ],
     createGuard,
     guard,

package/lib/db-entries/organization.d.ts

@@ -15,6 +15,8 @@ export type CreateOrganization = {
     description?: string | null;
     /** Additional data associated with the organization. */
     customData?: JsonObject;
+    /** Whether multi-factor authentication configuration is required for the members of the organization. */
+    isMfaRequired?: boolean;
     /** When the organization was created. */
     createdAt?: number;
 };
@@ -29,8 +31,10 @@ export type Organization = {
     description: string | null;
     /** Additional data associated with the organization. */
     customData: JsonObject;
+    /** Whether multi-factor authentication configuration is required for the members of the organization. */
+    isMfaRequired: boolean;
     /** When the organization was created. */
     createdAt: number;
 };
-export type OrganizationKeys = 'tenantId' | 'id' | 'name' | 'description' | 'customData' | 'createdAt';
+export type OrganizationKeys = 'tenantId' | 'id' | 'name' | 'description' | 'customData' | 'isMfaRequired' | 'createdAt';
 export declare const Organizations: GeneratedSchema<OrganizationKeys, CreateOrganization, Organization, 'organizations', 'organization'>;