@logto/schemas 1.26.0 → 1.28.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/alterations/1.27.0-1744013256-add-sentinel-policy-column-to-sie-table.ts +20 -0
  2. package/alterations/1.27.0-1744357867-add-sentinel-activities-hash-index.ts +19 -0
  3. package/alterations/1.28.0-1745735646-add-email-blocklist-policy-column-to-sie-table.ts +20 -0
  4. package/alterations-js/1.27.0-1744013256-add-sentinel-policy-column-to-sie-table.js +16 -0
  5. package/alterations-js/1.27.0-1744357867-add-sentinel-activities-hash-index.js +15 -0
  6. package/alterations-js/1.28.0-1745735646-add-email-blocklist-policy-column-to-sie-table.js +16 -0
  7. package/lib/consts/experience.d.ts +1 -1
  8. package/lib/consts/experience.js +1 -1
  9. package/lib/consts/index.d.ts +1 -0
  10. package/lib/consts/index.js +1 -0
  11. package/lib/consts/sentinel.d.ts +10 -0
  12. package/lib/consts/sentinel.js +10 -0
  13. package/lib/db-entries/sign-in-experience.d.ts +6 -2
  14. package/lib/db-entries/sign-in-experience.js +9 -1
  15. package/lib/foundations/jsonb-types/applications.d.ts +14 -14
  16. package/lib/foundations/jsonb-types/captcha.d.ts +2 -0
  17. package/lib/foundations/jsonb-types/custom-domain.d.ts +4 -4
  18. package/lib/foundations/jsonb-types/sign-in-experience.d.ts +53 -0
  19. package/lib/foundations/jsonb-types/sign-in-experience.js +9 -0
  20. package/lib/types/application.d.ts +13 -97
  21. package/lib/types/connector.d.ts +9 -13
  22. package/lib/types/consent.d.ts +25 -25
  23. package/lib/types/domain.d.ts +2 -2
  24. package/lib/types/hook.d.ts +3 -3
  25. package/lib/types/interactions.d.ts +24 -24
  26. package/lib/types/log/interaction.d.ts +3 -2
  27. package/lib/types/log/interaction.js +1 -0
  28. package/lib/types/logto-config/index.d.ts +15 -16
  29. package/lib/types/logto-config/jwt-customizer.d.ts +35 -36
  30. package/lib/types/saml-application.d.ts +19 -342
  31. package/lib/types/scope.d.ts +3 -3
  32. package/lib/types/sign-in-experience.d.ts +15 -9
  33. package/lib/types/sso-connector.d.ts +4 -5
  34. package/lib/types/system.d.ts +3 -20
  35. package/lib/types/system.js +0 -13
  36. package/lib/types/user.d.ts +3 -3
  37. package/package.json +13 -13
  38. package/tables/sentinel_activities.sql +3 -0
  39. package/tables/sign_in_experiences.sql +2 -0
@@ -2,12 +2,10 @@ import { ConnectorType } from '@logto/connector-kit';
2
2
  import { z } from 'zod';
3
3
  export type { ConnectorMetadata } from '@logto/connector-kit';
4
4
  export { ConnectorType, ConnectorPlatform } from '@logto/connector-kit';
5
- export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShape<z.objectUtil.extendShape<Pick<{
6
- tenantId: z.ZodType<string, z.ZodTypeDef, string>;
7
- id: z.ZodType<string, z.ZodTypeDef, string>;
5
+ export declare const connectorResponseGuard: z.ZodObject<{
6
+ config: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
8
7
  syncProfile: z.ZodType<boolean, z.ZodTypeDef, boolean>;
9
8
  connectorId: z.ZodType<string, z.ZodTypeDef, string>;
10
- config: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
11
9
  metadata: z.ZodType<{
12
10
  target?: string | undefined;
13
11
  name?: import("@logto/connector-kit").I18nPhrases | undefined;
@@ -19,8 +17,7 @@ export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShap
19
17
  logo?: string | undefined;
20
18
  logoDark?: string | null | undefined;
21
19
  }>;
22
- createdAt: z.ZodType<number, z.ZodTypeDef, number>;
23
- }, "id" | "config" | "syncProfile" | "connectorId" | "metadata">, z.objectUtil.extendShape<{
20
+ } & {
24
21
  id: z.ZodString;
25
22
  target: z.ZodString;
26
23
  name: z.ZodType<import("@logto/connector-kit").I18nPhrases, z.ZodTypeDef, import("@logto/connector-kit").I18nPhrases>;
@@ -207,15 +204,14 @@ export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShap
207
204
  }>]>, "many">>;
208
205
  customData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
209
206
  fromEmail: z.ZodOptional<z.ZodString>;
210
- }, {
211
207
  platform: z.ZodNullable<z.ZodNativeEnum<typeof import("@logto/connector-kit").ConnectorPlatform>>;
212
208
  isStandard: z.ZodOptional<z.ZodBoolean>;
213
- }>>, {
209
+ } & {
214
210
  type: z.ZodNativeEnum<typeof ConnectorType>;
215
211
  isDemo: z.ZodOptional<z.ZodBoolean>;
216
212
  extraInfo: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
217
213
  usage: z.ZodOptional<z.ZodNumber>;
218
- }>, "strip", z.ZodTypeAny, {
214
+ }, "strip", z.ZodTypeAny, {
219
215
  type: ConnectorType;
220
216
  name: {
221
217
  en: string;
@@ -879,10 +875,10 @@ export declare const connectorResponseGuard: z.ZodObject<z.objectUtil.extendShap
879
875
  extraInfo?: Record<string, unknown> | undefined;
880
876
  }>;
881
877
  export type ConnectorResponse = z.infer<typeof connectorResponseGuard>;
882
- export declare const connectorFactoryResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
878
+ export declare const connectorFactoryResponseGuard: z.ZodObject<{
883
879
  type: z.ZodNativeEnum<typeof ConnectorType>;
884
880
  isDemo: z.ZodOptional<z.ZodBoolean>;
885
- }, z.objectUtil.extendShape<{
881
+ } & {
886
882
  id: z.ZodString;
887
883
  target: z.ZodString;
888
884
  name: z.ZodType<import("@logto/connector-kit").I18nPhrases, z.ZodTypeDef, import("@logto/connector-kit").I18nPhrases>;
@@ -1069,10 +1065,10 @@ export declare const connectorFactoryResponseGuard: z.ZodObject<z.objectUtil.ext
1069
1065
  }>]>, "many">>;
1070
1066
  customData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
1071
1067
  fromEmail: z.ZodOptional<z.ZodString>;
1072
- }, {
1068
+ } & {
1073
1069
  platform: z.ZodNullable<z.ZodNativeEnum<typeof import("@logto/connector-kit").ConnectorPlatform>>;
1074
1070
  isStandard: z.ZodOptional<z.ZodBoolean>;
1075
- }>>, "strip", z.ZodTypeAny, {
1071
+ }, "strip", z.ZodTypeAny, {
1076
1072
  type: ConnectorType;
1077
1073
  name: {
1078
1074
  en: string;
@@ -174,8 +174,8 @@ export declare const publicApplicationGuard: z.ZodObject<Pick<{
174
174
  domain: string;
175
175
  errorMessage: string | null;
176
176
  dnsRecords: {
177
- type: string;
178
177
  value: string;
178
+ type: string;
179
179
  name: string;
180
180
  }[];
181
181
  cloudflareData: {
@@ -202,8 +202,8 @@ export declare const publicApplicationGuard: z.ZodObject<Pick<{
202
202
  domain: string;
203
203
  errorMessage: string | null;
204
204
  dnsRecords: {
205
- type: string;
206
205
  value: string;
206
+ type: string;
207
207
  name: string;
208
208
  }[];
209
209
  cloudflareData: {
@@ -268,16 +268,16 @@ export declare const applicationSignInExperienceGuard: z.ZodObject<Pick<{
268
268
  privacyPolicyUrl: string | null;
269
269
  }>;
270
270
  export declare const missingResourceScopesGuard: z.ZodObject<{
271
- resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
271
+ resource: z.ZodObject<Pick<{
272
272
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
273
273
  id: z.ZodType<string, z.ZodTypeDef, string>;
274
274
  name: z.ZodType<string, z.ZodTypeDef, string>;
275
275
  indicator: z.ZodType<string, z.ZodTypeDef, string>;
276
276
  isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
277
277
  accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
278
- }, "name" | "indicator">, {
278
+ }, "name" | "indicator"> & {
279
279
  id: z.ZodString;
280
- }>, "strip", z.ZodTypeAny, {
280
+ }, "strip", z.ZodTypeAny, {
281
281
  name: string;
282
282
  id: string;
283
283
  indicator: string;
@@ -332,7 +332,7 @@ export type MissingResourceScopes = z.infer<typeof missingResourceScopesGuard>;
332
332
  /**
333
333
  * Define the public organization info that can be exposed to the public. e.g. on the user consent page.
334
334
  */
335
- export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendShape<Pick<{
335
+ export declare const publicOrganizationGuard: z.ZodObject<Pick<{
336
336
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
337
337
  id: z.ZodType<string, z.ZodTypeDef, string>;
338
338
  name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -351,18 +351,18 @@ export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendSha
351
351
  darkFavicon?: string | undefined;
352
352
  }>;
353
353
  createdAt: z.ZodType<number, z.ZodTypeDef, number>;
354
- }, "name" | "id">, {
354
+ }, "name" | "id"> & {
355
355
  missingResourceScopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
356
- resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
356
+ resource: z.ZodObject<Pick<{
357
357
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
358
358
  id: z.ZodType<string, z.ZodTypeDef, string>;
359
359
  name: z.ZodType<string, z.ZodTypeDef, string>;
360
360
  indicator: z.ZodType<string, z.ZodTypeDef, string>;
361
361
  isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
362
362
  accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
363
- }, "name" | "indicator">, {
363
+ }, "name" | "indicator"> & {
364
364
  id: z.ZodString;
365
- }>, "strip", z.ZodTypeAny, {
365
+ }, "strip", z.ZodTypeAny, {
366
366
  name: string;
367
367
  id: string;
368
368
  indicator: string;
@@ -410,7 +410,7 @@ export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendSha
410
410
  description: string | null;
411
411
  }[];
412
412
  }>, "many">>;
413
- }>, "strip", z.ZodTypeAny, {
413
+ }, "strip", z.ZodTypeAny, {
414
414
  name: string;
415
415
  id: string;
416
416
  missingResourceScopes?: {
@@ -443,7 +443,7 @@ export declare const publicOrganizationGuard: z.ZodObject<z.objectUtil.extendSha
443
443
  }>;
444
444
  export type PublicOrganization = z.infer<typeof publicOrganizationGuard>;
445
445
  export declare const consentInfoResponseGuard: z.ZodObject<{
446
- application: z.ZodObject<z.objectUtil.extendShape<Pick<{
446
+ application: z.ZodObject<Pick<{
447
447
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
448
448
  id: z.ZodType<string, z.ZodTypeDef, string>;
449
449
  name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -480,8 +480,8 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
480
480
  domain: string;
481
481
  errorMessage: string | null;
482
482
  dnsRecords: {
483
- type: string;
484
483
  value: string;
484
+ type: string;
485
485
  name: string;
486
486
  }[];
487
487
  cloudflareData: {
@@ -508,8 +508,8 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
508
508
  domain: string;
509
509
  errorMessage: string | null;
510
510
  dnsRecords: {
511
- type: string;
512
511
  value: string;
512
+ type: string;
513
513
  name: string;
514
514
  }[];
515
515
  cloudflareData: {
@@ -528,7 +528,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
528
528
  customData: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
529
529
  isThirdParty: z.ZodType<boolean, z.ZodTypeDef, boolean>;
530
530
  createdAt: z.ZodType<number, z.ZodTypeDef, number>;
531
- }, "name" | "id">, {
531
+ }, "name" | "id"> & {
532
532
  displayName: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
533
533
  branding: z.ZodOptional<z.ZodType<{
534
534
  logoUrl?: string | undefined;
@@ -543,7 +543,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
543
543
  }>>;
544
544
  termsOfUseUrl: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
545
545
  privacyPolicyUrl: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
546
- }>, "strip", z.ZodTypeAny, {
546
+ }, "strip", z.ZodTypeAny, {
547
547
  name: string;
548
548
  id: string;
549
549
  displayName?: string | null | undefined;
@@ -699,7 +699,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
699
699
  primaryEmail: string | null;
700
700
  primaryPhone: string | null;
701
701
  }>;
702
- organizations: z.ZodOptional<z.ZodArray<z.ZodObject<z.objectUtil.extendShape<Pick<{
702
+ organizations: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
703
703
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
704
704
  id: z.ZodType<string, z.ZodTypeDef, string>;
705
705
  name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -718,18 +718,18 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
718
718
  darkFavicon?: string | undefined;
719
719
  }>;
720
720
  createdAt: z.ZodType<number, z.ZodTypeDef, number>;
721
- }, "name" | "id">, {
721
+ }, "name" | "id"> & {
722
722
  missingResourceScopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
723
- resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
723
+ resource: z.ZodObject<Pick<{
724
724
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
725
725
  id: z.ZodType<string, z.ZodTypeDef, string>;
726
726
  name: z.ZodType<string, z.ZodTypeDef, string>;
727
727
  indicator: z.ZodType<string, z.ZodTypeDef, string>;
728
728
  isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
729
729
  accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
730
- }, "name" | "indicator">, {
730
+ }, "name" | "indicator"> & {
731
731
  id: z.ZodString;
732
- }>, "strip", z.ZodTypeAny, {
732
+ }, "strip", z.ZodTypeAny, {
733
733
  name: string;
734
734
  id: string;
735
735
  indicator: string;
@@ -777,7 +777,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
777
777
  description: string | null;
778
778
  }[];
779
779
  }>, "many">>;
780
- }>, "strip", z.ZodTypeAny, {
780
+ }, "strip", z.ZodTypeAny, {
781
781
  name: string;
782
782
  id: string;
783
783
  missingResourceScopes?: {
@@ -810,16 +810,16 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
810
810
  }>, "many">>;
811
811
  missingOIDCScope: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
812
812
  missingResourceScopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
813
- resource: z.ZodObject<z.objectUtil.extendShape<Pick<{
813
+ resource: z.ZodObject<Pick<{
814
814
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
815
815
  id: z.ZodType<string, z.ZodTypeDef, string>;
816
816
  name: z.ZodType<string, z.ZodTypeDef, string>;
817
817
  indicator: z.ZodType<string, z.ZodTypeDef, string>;
818
818
  isDefault: z.ZodType<boolean, z.ZodTypeDef, boolean>;
819
819
  accessTokenTtl: z.ZodType<number, z.ZodTypeDef, number>;
820
- }, "name" | "indicator">, {
820
+ }, "name" | "indicator"> & {
821
821
  id: z.ZodString;
822
- }>, "strip", z.ZodTypeAny, {
822
+ }, "strip", z.ZodTypeAny, {
823
823
  name: string;
824
824
  id: string;
825
825
  indicator: string;
@@ -7,12 +7,12 @@ export declare const domainResponseGuard: z.ZodObject<Pick<{
7
7
  status: z.ZodType<import("../index.js").DomainStatus, z.ZodTypeDef, import("../index.js").DomainStatus>;
8
8
  errorMessage: z.ZodType<string | null, z.ZodTypeDef, string | null>;
9
9
  dnsRecords: z.ZodType<{
10
- type: string;
11
10
  value: string;
11
+ type: string;
12
12
  name: string;
13
13
  }[], z.ZodTypeDef, {
14
- type: string;
15
14
  value: string;
15
+ type: string;
16
16
  name: string;
17
17
  }[]>;
18
18
  cloudflareData: z.ZodType<{
@@ -14,7 +14,7 @@ declare const hookExecutionStatsGuard: z.ZodObject<{
14
14
  requestCount: number;
15
15
  }>;
16
16
  export type HookExecutionStats = z.infer<typeof hookExecutionStatsGuard>;
17
- export declare const hookResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
17
+ export declare const hookResponseGuard: z.ZodObject<{
18
18
  tenantId: z.ZodType<string, z.ZodTypeDef, string>;
19
19
  id: z.ZodType<string, z.ZodTypeDef, string>;
20
20
  name: z.ZodType<string, z.ZodTypeDef, string>;
@@ -32,7 +32,7 @@ export declare const hookResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
32
32
  signingKey: z.ZodType<string, z.ZodTypeDef, string>;
33
33
  enabled: z.ZodType<boolean, z.ZodTypeDef, boolean>;
34
34
  createdAt: z.ZodType<number, z.ZodTypeDef, number>;
35
- }, {
35
+ } & {
36
36
  executionStats: z.ZodObject<{
37
37
  successCount: z.ZodNumber;
38
38
  requestCount: z.ZodNumber;
@@ -43,7 +43,7 @@ export declare const hookResponseGuard: z.ZodObject<z.objectUtil.extendShape<{
43
43
  successCount: number;
44
44
  requestCount: number;
45
45
  }>;
46
- }>, "strip", z.ZodTypeAny, {
46
+ }, "strip", z.ZodTypeAny, {
47
47
  name: string;
48
48
  id: string;
49
49
  tenantId: string;
@@ -18,11 +18,11 @@ export declare const verificationIdentifierGuard: z.ZodObject<{
18
18
  type: z.ZodUnion<[z.ZodNativeEnum<typeof SignInIdentifier>, z.ZodNativeEnum<typeof AdditionalIdentifier>]>;
19
19
  value: z.ZodString;
20
20
  }, "strip", z.ZodTypeAny, {
21
- type: SignInIdentifier | AdditionalIdentifier;
22
21
  value: string;
23
- }, {
24
22
  type: SignInIdentifier | AdditionalIdentifier;
23
+ }, {
25
24
  value: string;
25
+ type: SignInIdentifier | AdditionalIdentifier;
26
26
  }>;
27
27
  /** Identifiers that can be used to uniquely identify a user. */
28
28
  export type InteractionIdentifier<T extends SignInIdentifier = SignInIdentifier> = {
@@ -33,11 +33,11 @@ export declare const interactionIdentifierGuard: z.ZodObject<{
33
33
  type: z.ZodNativeEnum<typeof SignInIdentifier>;
34
34
  value: z.ZodString;
35
35
  }, "strip", z.ZodTypeAny, {
36
- type: SignInIdentifier;
37
36
  value: string;
38
- }, {
39
37
  type: SignInIdentifier;
38
+ }, {
40
39
  value: string;
40
+ type: SignInIdentifier;
41
41
  }>;
42
42
  export type VerificationCodeSignInIdentifier = SignInIdentifier.Email | SignInIdentifier.Phone;
43
43
  /** Currently only email and phone are supported for verification code validation. */
@@ -49,11 +49,11 @@ export declare const verificationCodeIdentifierGuard: z.ZodObject<{
49
49
  type: z.ZodEnum<[SignInIdentifier.Email, SignInIdentifier.Phone]>;
50
50
  value: z.ZodString;
51
51
  }, "strip", z.ZodTypeAny, {
52
- type: SignInIdentifier.Email | SignInIdentifier.Phone;
53
52
  value: string;
54
- }, {
55
53
  type: SignInIdentifier.Email | SignInIdentifier.Phone;
54
+ }, {
56
55
  value: string;
56
+ type: SignInIdentifier.Email | SignInIdentifier.Phone;
57
57
  }>;
58
58
  /** Payload type for `POST /api/experience/verification/{social|sso}/:connectorId/authorization-uri`. */
59
59
  export type SocialAuthorizationUrlPayload = {
@@ -102,24 +102,24 @@ export declare const passwordVerificationPayloadGuard: z.ZodObject<{
102
102
  type: z.ZodNativeEnum<typeof SignInIdentifier>;
103
103
  value: z.ZodString;
104
104
  }, "strip", z.ZodTypeAny, {
105
- type: SignInIdentifier;
106
105
  value: string;
107
- }, {
108
106
  type: SignInIdentifier;
107
+ }, {
109
108
  value: string;
109
+ type: SignInIdentifier;
110
110
  }>;
111
111
  password: z.ZodString;
112
112
  }, "strip", z.ZodTypeAny, {
113
113
  password: string;
114
114
  identifier: {
115
- type: SignInIdentifier;
116
115
  value: string;
116
+ type: SignInIdentifier;
117
117
  };
118
118
  }, {
119
119
  password: string;
120
120
  identifier: {
121
- type: SignInIdentifier;
122
121
  value: string;
122
+ type: SignInIdentifier;
123
123
  };
124
124
  }>;
125
125
  /** Payload type for `POST /api/experience/verification/totp/verify`. */
@@ -168,23 +168,23 @@ export declare const oneTimeTokenVerificationVerifyPayloadGuard: z.ZodObject<{
168
168
  type: z.ZodLiteral<SignInIdentifier.Email>;
169
169
  value: z.ZodString;
170
170
  }, "strip", z.ZodTypeAny, {
171
- type: SignInIdentifier.Email;
172
171
  value: string;
173
- }, {
174
172
  type: SignInIdentifier.Email;
173
+ }, {
175
174
  value: string;
175
+ type: SignInIdentifier.Email;
176
176
  }>;
177
177
  token: z.ZodString;
178
178
  }, "strip", z.ZodTypeAny, {
179
179
  identifier: {
180
- type: SignInIdentifier.Email;
181
180
  value: string;
181
+ type: SignInIdentifier.Email;
182
182
  };
183
183
  token: string;
184
184
  }, {
185
185
  identifier: {
186
- type: SignInIdentifier.Email;
187
186
  value: string;
187
+ type: SignInIdentifier.Email;
188
188
  };
189
189
  token: string;
190
190
  }>;
@@ -235,20 +235,20 @@ export declare const updateProfileApiPayloadGuard: z.ZodDiscriminatedUnion<"type
235
235
  type: z.ZodLiteral<SignInIdentifier.Username>;
236
236
  value: z.ZodString;
237
237
  }, "strip", z.ZodTypeAny, {
238
- type: SignInIdentifier.Username;
239
238
  value: string;
240
- }, {
241
239
  type: SignInIdentifier.Username;
240
+ }, {
242
241
  value: string;
242
+ type: SignInIdentifier.Username;
243
243
  }>, z.ZodObject<{
244
244
  type: z.ZodLiteral<"password">;
245
245
  value: z.ZodString;
246
246
  }, "strip", z.ZodTypeAny, {
247
- type: "password";
248
247
  value: string;
249
- }, {
250
248
  type: "password";
249
+ }, {
251
250
  value: string;
251
+ type: "password";
252
252
  }>, z.ZodObject<{
253
253
  type: z.ZodLiteral<SignInIdentifier.Email>;
254
254
  verificationId: z.ZodString;
@@ -698,7 +698,7 @@ export declare const totpVerificationPayloadGuard: z.ZodObject<{
698
698
  }>;
699
699
  /** @deprecated Legacy interaction API use only */
700
700
  export type TotpVerificationPayload = z.infer<typeof totpVerificationPayloadGuard>;
701
- export declare const webAuthnVerificationPayloadGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
701
+ export declare const webAuthnVerificationPayloadGuard: z.ZodObject<Omit<{
702
702
  type: z.ZodLiteral<MfaFactor.WebAuthn>;
703
703
  id: z.ZodString;
704
704
  rawId: z.ZodString;
@@ -753,7 +753,7 @@ export declare const webAuthnVerificationPayloadGuard: z.ZodObject<z.objectUtil.
753
753
  } | undefined;
754
754
  hmacCreateSecret?: boolean | undefined;
755
755
  }>;
756
- }, "response">, {
756
+ }, "response"> & {
757
757
  response: z.ZodObject<{
758
758
  clientDataJSON: z.ZodString;
759
759
  authenticatorData: z.ZodString;
@@ -770,7 +770,7 @@ export declare const webAuthnVerificationPayloadGuard: z.ZodObject<z.objectUtil.
770
770
  signature: string;
771
771
  userHandle?: string | undefined;
772
772
  }>;
773
- }>, "strip", z.ZodTypeAny, {
773
+ }, "strip", z.ZodTypeAny, {
774
774
  type: MfaFactor.WebAuthn;
775
775
  id: string;
776
776
  rawId: string;
@@ -828,7 +828,7 @@ export declare const verifyMfaPayloadGuard: z.ZodDiscriminatedUnion<"type", [z.Z
828
828
  }, {
829
829
  code: string;
830
830
  type: MfaFactor.TOTP;
831
- }>, z.ZodObject<z.objectUtil.extendShape<Omit<{
831
+ }>, z.ZodObject<Omit<{
832
832
  type: z.ZodLiteral<MfaFactor.WebAuthn>;
833
833
  id: z.ZodString;
834
834
  rawId: z.ZodString;
@@ -883,7 +883,7 @@ export declare const verifyMfaPayloadGuard: z.ZodDiscriminatedUnion<"type", [z.Z
883
883
  } | undefined;
884
884
  hmacCreateSecret?: boolean | undefined;
885
885
  }>;
886
- }, "response">, {
886
+ }, "response"> & {
887
887
  response: z.ZodObject<{
888
888
  clientDataJSON: z.ZodString;
889
889
  authenticatorData: z.ZodString;
@@ -900,7 +900,7 @@ export declare const verifyMfaPayloadGuard: z.ZodDiscriminatedUnion<"type", [z.Z
900
900
  signature: string;
901
901
  userHandle?: string | undefined;
902
902
  }>;
903
- }>, "strip", z.ZodTypeAny, {
903
+ }, "strip", z.ZodTypeAny, {
904
904
  type: MfaFactor.WebAuthn;
905
905
  id: string;
906
906
  rawId: string;
@@ -9,7 +9,8 @@ export declare enum Field {
9
9
  Profile = "Profile",
10
10
  BindMfa = "BindMfa",
11
11
  Mfa = "Mfa",
12
- Verification = "Verification"
12
+ Verification = "Verification",
13
+ Captcha = "Captcha"
13
14
  }
14
15
  /** Method to verify the identifier */
15
16
  export declare enum Method {
@@ -67,4 +68,4 @@ export declare enum Action {
67
68
  * - When {@link Method} is `VerificationCode`, {@link Action} can be `Create` (generate and send a code) or `Submit` (verify and submit to the identifiers);
68
69
  * - Otherwise, {@link Action} is fixed to `Submit` (other methods can be verified on submitting).
69
70
  */
70
- export type LogKey = `${Prefix}.${Action.Create | Action.End}` | `${Prefix}.${InteractionEvent}.${Action.Create | Action.Update | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Profile}.${Action.Update | Action.Create | Action.Delete}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Exclude<Method, Method.Password>}.${Action.Create | Action.Submit}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Method.Password}.${Action.Submit}` | `${Prefix}.${InteractionEvent.ForgotPassword}.${Field.Identifier}.${Method.VerificationCode}.${Action.Create | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.BindMfa}.${MfaFactor}.${Action.Submit | Action.Create}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Mfa}.${MfaFactor}.${Action.Submit | Action.Create}` | `${Prefix}.${InteractionEvent}.${Field.Verification}.${VerificationType}.${Action}` | `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Verification}.IdpInitiatedSso.${Action.Create}`;
71
+ export type LogKey = `${Prefix}.${Action.Create | Action.End}` | `${Prefix}.${Action.Create}.${Field.Captcha}` | `${Prefix}.${InteractionEvent}.${Action.Create | Action.Update | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Profile}.${Action.Update | Action.Create | Action.Delete}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Exclude<Method, Method.Password>}.${Action.Create | Action.Submit}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Method.Password}.${Action.Submit}` | `${Prefix}.${InteractionEvent.ForgotPassword}.${Field.Identifier}.${Method.VerificationCode}.${Action.Create | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.BindMfa}.${MfaFactor}.${Action.Submit | Action.Create}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Mfa}.${MfaFactor}.${Action.Submit | Action.Create}` | `${Prefix}.${InteractionEvent}.${Field.Verification}.${VerificationType}.${Action}` | `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Verification}.IdpInitiatedSso.${Action.Create}`;
@@ -8,6 +8,7 @@ export var Field;
8
8
  Field["BindMfa"] = "BindMfa";
9
9
  Field["Mfa"] = "Mfa";
10
10
  Field["Verification"] = "Verification";
11
+ Field["Captcha"] = "Captcha";
11
12
  })(Field || (Field = {}));
12
13
  /** Method to verify the identifier */
13
14
  export var Method;
@@ -58,11 +58,10 @@ export declare const jwtCustomizerConfigGuard: Readonly<{
58
58
  }>;
59
59
  export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [z.ZodObject<{
60
60
  key: z.ZodLiteral<LogtoJwtTokenKey.AccessToken>;
61
- value: z.ZodObject<z.objectUtil.extendShape<{
61
+ value: z.ZodObject<{
62
62
  script: z.ZodString;
63
63
  environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
64
- contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server").Json, z.ZodTypeDef, import("@withtyped/server").Json>>>;
65
- }, {
64
+ } & {
66
65
  tokenSample: z.ZodOptional<z.ZodObject<{
67
66
  accountId: z.ZodOptional<z.ZodString>;
68
67
  expiresWithSession: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
@@ -182,24 +181,24 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
182
181
  detail: import("@withtyped/server").JsonObject;
183
182
  }>, "many">>;
184
183
  mfaVerificationFactors: z.ZodOptional<z.ZodArray<z.ZodNativeEnum<typeof import("../../index.js").MfaFactor>, "many">>;
185
- roles: z.ZodOptional<z.ZodArray<z.ZodObject<z.objectUtil.extendShape<Pick<{
184
+ roles: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
186
185
  tenantId: ZodType<string, z.ZodTypeDef, string>;
187
186
  id: ZodType<string, z.ZodTypeDef, string>;
188
187
  name: ZodType<string, z.ZodTypeDef, string>;
189
188
  description: ZodType<string, z.ZodTypeDef, string>;
190
189
  type: ZodType<import("../../index.js").RoleType, z.ZodTypeDef, import("../../index.js").RoleType>;
191
190
  isDefault: ZodType<boolean, z.ZodTypeDef, boolean>;
192
- }, "name" | "id" | "description">, {
193
- scopes: z.ZodArray<z.ZodObject<Pick<z.objectUtil.extendShape<{
191
+ }, "name" | "id" | "description"> & {
192
+ scopes: z.ZodArray<z.ZodObject<Pick<{
194
193
  tenantId: ZodType<string, z.ZodTypeDef, string>;
195
194
  id: ZodType<string, z.ZodTypeDef, string>;
196
195
  resourceId: ZodType<string, z.ZodTypeDef, string>;
197
196
  name: ZodType<string, z.ZodTypeDef, string>;
198
197
  description: ZodType<string | null, z.ZodTypeDef, string | null>;
199
198
  createdAt: ZodType<number, z.ZodTypeDef, number>;
200
- }, {
199
+ } & {
201
200
  resource: import("../../index.js").Guard<import("../../index.js").Resource>;
202
- }>, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
201
+ }, "name" | "id" | "description" | "resource" | "resourceId">, "strip", z.ZodTypeAny, {
203
202
  name: string;
204
203
  id: string;
205
204
  description: string | null;
@@ -212,7 +211,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
212
211
  resource: import("../../index.js").Resource;
213
212
  resourceId: string;
214
213
  }>, "many">;
215
- }>, "strip", z.ZodTypeAny, {
214
+ }, "strip", z.ZodTypeAny, {
216
215
  name: string;
217
216
  id: string;
218
217
  description: string;
@@ -568,7 +567,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
568
567
  subjectTokenContext?: Record<string, import("@withtyped/server").Json> | undefined;
569
568
  } | undefined;
570
569
  }>>;
571
- }>, "strict", z.ZodTypeAny, {
570
+ }, "strict", z.ZodTypeAny, {
572
571
  script: string;
573
572
  environmentVariables?: Record<string, string> | undefined;
574
573
  contextSample?: {
@@ -937,11 +936,11 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
937
936
  key: LogtoJwtTokenKey.AccessToken;
938
937
  }>, z.ZodObject<{
939
938
  key: z.ZodLiteral<LogtoJwtTokenKey.ClientCredentials>;
940
- value: z.ZodObject<z.objectUtil.extendShape<{
939
+ value: z.ZodObject<{
941
940
  script: z.ZodString;
942
941
  environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
943
942
  contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server").Json, z.ZodTypeDef, import("@withtyped/server").Json>>>;
944
- }, {
943
+ } & {
945
944
  tokenSample: z.ZodOptional<z.ZodObject<{
946
945
  kind: z.ZodOptional<z.ZodLiteral<"ClientCredentials">>;
947
946
  jti: z.ZodOptional<z.ZodString>;
@@ -961,7 +960,7 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
961
960
  aud?: string | string[] | undefined;
962
961
  clientId?: string | undefined;
963
962
  }>>;
964
- }>, "strict", z.ZodTypeAny, {
963
+ }, "strict", z.ZodTypeAny, {
965
964
  script: string;
966
965
  environmentVariables?: Record<string, string> | undefined;
967
966
  contextSample?: Record<string, import("@withtyped/server").Json> | undefined;
@@ -1115,13 +1114,13 @@ export type LogtoConfigType = LogtoOidcConfigType | JwtCustomizerType | LogtoTen
1115
1114
  export type LogtoConfigGuard = typeof logtoOidcConfigGuard & typeof jwtCustomizerConfigGuard & typeof logtoTenantConfigGuard;
1116
1115
  export declare const logtoConfigKeys: readonly LogtoConfigKey[];
1117
1116
  export declare const logtoConfigGuards: LogtoConfigGuard;
1118
- export declare const oidcConfigKeysResponseGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
1117
+ export declare const oidcConfigKeysResponseGuard: z.ZodObject<Omit<{
1119
1118
  id: z.ZodString;
1120
1119
  value: z.ZodString;
1121
1120
  createdAt: z.ZodNumber;
1122
- }, "value">, {
1121
+ }, "value"> & {
1123
1122
  signingKeyAlgorithm: z.ZodOptional<z.ZodNativeEnum<typeof SupportedSigningKeyAlgorithm>>;
1124
- }>, "strip", z.ZodTypeAny, {
1123
+ }, "strip", z.ZodTypeAny, {
1125
1124
  id: string;
1126
1125
  createdAt: number;
1127
1126
  signingKeyAlgorithm?: SupportedSigningKeyAlgorithm | undefined;