@logto/schemas 1.29.0 → 1.30.1

package/lib/types/logto-config/jwt-customizer.js

@@ -61,8 +61,13 @@ const jwtCustomizerUserInteractionVerificationRecordGuard = z.discriminatedUnion
     phoneCodeVerificationRecordDataGuard,
     socialVerificationRecordDataGuard.omit({
         connectorSession: true,
+        encryptedTokenSet: true,
     }),
-    enterpriseSsoVerificationRecordDataGuard.extend({
+    enterpriseSsoVerificationRecordDataGuard
+        .omit({
+        encryptedTokenSet: true,
+    })
+        .extend({
         // The original `enterpriseSsoUserInfo` field type is extended with `socialUserInfo` with `catchall(unknown)`.
         // However, the unknown type may cause error when using the `sql.jsonb` function in Slonik.
         // See {@logto/cli/src/queries/logto-config.ts#updateValueByKey} for more reference.

package/lib/types/secrets.d.ts

@@ -0,0 +1,436 @@
+import { z } from 'zod';
+import { type CreateSecret } from '../db-entries/secret.js';
+import { SecretType } from '../foundations/index.js';
+export declare const encryptedSecretGuard: z.ZodObject<Pick<{
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    userId: z.ZodType<string, z.ZodTypeDef, string>;
+    type: z.ZodType<SecretType, z.ZodTypeDef, SecretType>;
+    encryptedDek: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    iv: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    authTag: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    ciphertext: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    metadata: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
+}, "encryptedDek" | "iv" | "authTag" | "ciphertext">, "strip", z.ZodTypeAny, {
+    encryptedDek: import("../foundations/index.js").BufferLike;
+    iv: import("../foundations/index.js").BufferLike;
+    authTag: import("../foundations/index.js").BufferLike;
+    ciphertext: import("../foundations/index.js").BufferLike;
+}, {
+    encryptedDek: import("../foundations/index.js").BufferLike;
+    iv: import("../foundations/index.js").BufferLike;
+    authTag: import("../foundations/index.js").BufferLike;
+    ciphertext: import("../foundations/index.js").BufferLike;
+}>;
+export type EncryptedSecret = z.infer<typeof encryptedSecretGuard>;
+export declare const tokenSetGuard: z.ZodObject<{
+    id_token: z.ZodOptional<z.ZodString>;
+    access_token: z.ZodString;
+    refresh_token: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    access_token: string;
+    id_token?: string | undefined;
+    refresh_token?: string | undefined;
+}, {
+    access_token: string;
+    id_token?: string | undefined;
+    refresh_token?: string | undefined;
+}>;
+export type TokenSet = z.infer<typeof tokenSetGuard>;
+export declare const tokenSetMetadataGuard: z.ZodObject<{
+    scope: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    tokenType: z.ZodOptional<z.ZodString>;
+    hasRefreshToken: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    hasRefreshToken: boolean;
+    scope?: string | undefined;
+    expiresAt?: number | undefined;
+    tokenType?: string | undefined;
+}, {
+    hasRefreshToken: boolean;
+    scope?: string | undefined;
+    expiresAt?: number | undefined;
+    tokenType?: string | undefined;
+}>;
+export type TokenSetMetadata = z.infer<typeof tokenSetMetadataGuard>;
+export declare const encryptedTokenSetGuard: z.ZodObject<{
+    encryptedTokenSetBase64: z.ZodString;
+    metadata: z.ZodObject<{
+        scope: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        tokenType: z.ZodOptional<z.ZodString>;
+        hasRefreshToken: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    encryptedTokenSetBase64: string;
+}, {
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    encryptedTokenSetBase64: string;
+}>;
+export type EncryptedTokenSet = z.infer<typeof encryptedTokenSetGuard>;
+export type CreateSocialTokenSetSecret = CreateSecret & {
+    metadata: TokenSetMetadata;
+};
+export declare const secretSocialConnectorRelationPayloadGuard: z.ZodObject<Pick<{
+    tenantId: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+    secretId: z.ZodType<string, z.ZodTypeDef, string>;
+    connectorId: z.ZodType<string, z.ZodTypeDef, string>;
+    target: z.ZodType<string, z.ZodTypeDef, string>;
+    identityId: z.ZodType<string, z.ZodTypeDef, string>;
+}, "connectorId" | "target" | "identityId">, "strip", z.ZodTypeAny, {
+    connectorId: string;
+    target: string;
+    identityId: string;
+}, {
+    connectorId: string;
+    target: string;
+    identityId: string;
+}>;
+export type SecretSocialConnectorRelationPayload = z.infer<typeof secretSocialConnectorRelationPayloadGuard>;
+export declare const secretEnterpriseSsoConnectorRelationPayloadGuard: z.ZodObject<Pick<{
+    tenantId: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+    secretId: z.ZodType<string, z.ZodTypeDef, string>;
+    ssoConnectorId: z.ZodType<string, z.ZodTypeDef, string>;
+    issuer: z.ZodType<string, z.ZodTypeDef, string>;
+    identityId: z.ZodType<string, z.ZodTypeDef, string>;
+}, "issuer" | "ssoConnectorId" | "identityId">, "strip", z.ZodTypeAny, {
+    issuer: string;
+    ssoConnectorId: string;
+    identityId: string;
+}, {
+    issuer: string;
+    ssoConnectorId: string;
+    identityId: string;
+}>;
+export type SecretEnterpriseSsoConnectorRelationPayload = z.infer<typeof secretEnterpriseSsoConnectorRelationPayloadGuard>;
+export declare const socialTokenSetSecretGuard: z.ZodObject<{
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    userId: z.ZodType<string, z.ZodTypeDef, string>;
+    encryptedDek: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    iv: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    authTag: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    ciphertext: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
+} & {
+    type: z.ZodLiteral<SecretType>;
+    metadata: z.ZodObject<{
+        scope: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        tokenType: z.ZodOptional<z.ZodString>;
+        hasRefreshToken: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }>;
+    connectorId: z.ZodString;
+    identityId: z.ZodString;
+    target: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    updatedAt: number;
+    connectorId: string;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    target: string;
+    identityId: string;
+    encryptedDek: import("../foundations/index.js").BufferLike;
+    iv: import("../foundations/index.js").BufferLike;
+    authTag: import("../foundations/index.js").BufferLike;
+    ciphertext: import("../foundations/index.js").BufferLike;
+}, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    updatedAt: number;
+    connectorId: string;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    target: string;
+    identityId: string;
+    encryptedDek: import("../foundations/index.js").BufferLike;
+    iv: import("../foundations/index.js").BufferLike;
+    authTag: import("../foundations/index.js").BufferLike;
+    ciphertext: import("../foundations/index.js").BufferLike;
+}>;
+/**
+ * Social token set secret type
+ * - Secret type is `FederatedTokenSet`
+ * - Metadata is the social connector token set metadata
+ * - Joined with the social connector relation
+ */
+export type SocialTokenSetSecret = z.infer<typeof socialTokenSetSecretGuard>;
+export declare const desensitizedSocialTokenSetSecretGuard: z.ZodObject<Omit<{
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    userId: z.ZodType<string, z.ZodTypeDef, string>;
+    encryptedDek: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    iv: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    authTag: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    ciphertext: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
+} & {
+    type: z.ZodLiteral<SecretType>;
+    metadata: z.ZodObject<{
+        scope: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        tokenType: z.ZodOptional<z.ZodString>;
+        hasRefreshToken: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }>;
+    connectorId: z.ZodString;
+    identityId: z.ZodString;
+    target: z.ZodString;
+}, "encryptedDek" | "iv" | "authTag" | "ciphertext">, "strip", z.ZodTypeAny, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    updatedAt: number;
+    connectorId: string;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    target: string;
+    identityId: string;
+}, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    updatedAt: number;
+    connectorId: string;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    target: string;
+    identityId: string;
+}>;
+export type DesensitizedSocialTokenSetSecret = z.infer<typeof desensitizedSocialTokenSetSecretGuard>;
+export declare const enterpriseSsoTokenSetSecretGuard: z.ZodObject<{
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    userId: z.ZodType<string, z.ZodTypeDef, string>;
+    encryptedDek: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    iv: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    authTag: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    ciphertext: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
+} & {
+    type: z.ZodLiteral<SecretType>;
+    metadata: z.ZodObject<{
+        scope: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        tokenType: z.ZodOptional<z.ZodString>;
+        hasRefreshToken: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }>;
+    ssoConnectorId: z.ZodString;
+    issuer: z.ZodString;
+    identityId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    issuer: string;
+    updatedAt: number;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    ssoConnectorId: string;
+    identityId: string;
+    encryptedDek: import("../foundations/index.js").BufferLike;
+    iv: import("../foundations/index.js").BufferLike;
+    authTag: import("../foundations/index.js").BufferLike;
+    ciphertext: import("../foundations/index.js").BufferLike;
+}, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    issuer: string;
+    updatedAt: number;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    ssoConnectorId: string;
+    identityId: string;
+    encryptedDek: import("../foundations/index.js").BufferLike;
+    iv: import("../foundations/index.js").BufferLike;
+    authTag: import("../foundations/index.js").BufferLike;
+    ciphertext: import("../foundations/index.js").BufferLike;
+}>;
+/**
+ * Enterprise SSO token set secret type
+ * - Secret type is `FederatedTokenSet`
+ * - Metadata is the Enterprise SSO connector token set metadata
+ * - Joined with the Enterprise SSO connector relation
+ */
+export type EnterpriseSsoTokenSetSecret = z.infer<typeof enterpriseSsoTokenSetSecretGuard>;
+export declare const desensitizedEnterpriseSsoTokenSetSecretGuard: z.ZodObject<Omit<{
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    userId: z.ZodType<string, z.ZodTypeDef, string>;
+    encryptedDek: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    iv: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    authTag: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    ciphertext: z.ZodType<Buffer, z.ZodTypeDef, Buffer>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
+} & {
+    type: z.ZodLiteral<SecretType>;
+    metadata: z.ZodObject<{
+        scope: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        tokenType: z.ZodOptional<z.ZodString>;
+        hasRefreshToken: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }, {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    }>;
+    ssoConnectorId: z.ZodString;
+    issuer: z.ZodString;
+    identityId: z.ZodString;
+}, "encryptedDek" | "iv" | "authTag" | "ciphertext">, "strip", z.ZodTypeAny, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    issuer: string;
+    updatedAt: number;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    ssoConnectorId: string;
+    identityId: string;
+}, {
+    type: SecretType;
+    id: string;
+    userId: string;
+    tenantId: string;
+    createdAt: number;
+    issuer: string;
+    updatedAt: number;
+    metadata: {
+        hasRefreshToken: boolean;
+        scope?: string | undefined;
+        expiresAt?: number | undefined;
+        tokenType?: string | undefined;
+    };
+    ssoConnectorId: string;
+    identityId: string;
+}>;
+export type DesensitizedEnterpriseSsoTokenSetSecret = z.infer<typeof desensitizedEnterpriseSsoTokenSetSecretGuard>;
+export type DesensitizedTokenSetSecret<T extends SocialTokenSetSecret | EnterpriseSsoTokenSetSecret> = Omit<T, 'encryptedDek' | 'iv' | 'authTag' | 'ciphertext'>;
+export declare const getThirdPartyAccessTokenResponseGuard: z.ZodObject<{
+    scope: z.ZodOptional<z.ZodString>;
+    expires_in: z.ZodOptional<z.ZodUnion<[z.ZodNumber, z.ZodString]>>;
+    token_type: z.ZodOptional<z.ZodString>;
+} & {
+    access_token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    access_token: string;
+    scope?: string | undefined;
+    expires_in?: string | number | undefined;
+    token_type?: string | undefined;
+}, {
+    access_token: string;
+    scope?: string | undefined;
+    expires_in?: string | number | undefined;
+    token_type?: string | undefined;
+}>;
+export type GetThirdPartyAccessTokenResponse = z.infer<typeof getThirdPartyAccessTokenResponseGuard>;

package/lib/types/secrets.js

@@ -0,0 +1,73 @@
+import { tokenResponseGuard } from '@logto/connector-kit';
+import { z } from 'zod';
+import { SecretEnterpriseSsoConnectorRelations } from '../db-entries/secret-enterprise-sso-connector-relation.js';
+import { SecretSocialConnectorRelations } from '../db-entries/secret-social-connector-relation.js';
+import { Secrets } from '../db-entries/secret.js';
+import { SecretType } from '../foundations/index.js';
+export const encryptedSecretGuard = Secrets.guard.pick({
+    encryptedDek: true,
+    iv: true,
+    authTag: true,
+    ciphertext: true,
+});
+export const tokenSetGuard = z.object({
+    id_token: z.string().optional(),
+    access_token: z.string(),
+    refresh_token: z.string().optional(),
+});
+export const tokenSetMetadataGuard = z.object({
+    scope: z.string().optional(),
+    expiresAt: z.number().optional(),
+    tokenType: z.string().optional(),
+    hasRefreshToken: z.boolean(),
+});
+export const encryptedTokenSetGuard = z.object({
+    encryptedTokenSetBase64: z.string(),
+    metadata: tokenSetMetadataGuard,
+});
+export const secretSocialConnectorRelationPayloadGuard = SecretSocialConnectorRelations.createGuard.pick({
+    connectorId: true,
+    target: true,
+    identityId: true,
+});
+export const secretEnterpriseSsoConnectorRelationPayloadGuard = SecretEnterpriseSsoConnectorRelations.createGuard.pick({
+    ssoConnectorId: true,
+    issuer: true,
+    identityId: true,
+});
+export const socialTokenSetSecretGuard = Secrets.guard.extend({
+    type: z.literal(SecretType.FederatedTokenSet),
+    metadata: tokenSetMetadataGuard,
+    connectorId: z.string(),
+    identityId: z.string(),
+    target: z.string(),
+});
+export const desensitizedSocialTokenSetSecretGuard = socialTokenSetSecretGuard.omit({
+    encryptedDek: true,
+    iv: true,
+    authTag: true,
+    ciphertext: true,
+});
+export const enterpriseSsoTokenSetSecretGuard = Secrets.guard.extend({
+    type: z.literal(SecretType.FederatedTokenSet),
+    metadata: tokenSetMetadataGuard,
+    ssoConnectorId: z.string(),
+    issuer: z.string(),
+    identityId: z.string(),
+});
+export const desensitizedEnterpriseSsoTokenSetSecretGuard = enterpriseSsoTokenSetSecretGuard.omit({
+    encryptedDek: true,
+    iv: true,
+    authTag: true,
+    ciphertext: true,
+});
+export const getThirdPartyAccessTokenResponseGuard = tokenResponseGuard
+    .pick({
+    access_token: true,
+    scope: true,
+    token_type: true,
+    expires_in: true,
+})
+    .extend({
+    access_token: z.string(),
+});

package/lib/types/sign-in-experience.d.ts

@@ -1,6 +1,6 @@
 import { type ConnectorMetadata, type GoogleOneTapConfig } from '@logto/connector-kit';
 import { z } from 'zod';
-import { type SignInExperience } from '../db-entries/index.js';
+import { type CustomProfileField, type SignInExperience } from '../db-entries/index.js';
 import { CaptchaType } from '../foundations/jsonb-types/index.js';
 import { type SsoConnectorMetadata } from './sso-connector.js';
 type ForgotPassword = {
@@ -33,6 +33,7 @@ export type FullSignInExperience = SignInExperience & {
         type: CaptchaType;
         siteKey: string;
     };
+    customProfileFields?: Readonly<CustomProfileField[]>;
 };
 export declare const fullSignInExperienceGuard: z.ZodObject<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
@@ -165,6 +166,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
             tooltip: z.ZodOptional<z.ZodString>;
             isConfidential: z.ZodOptional<z.ZodBoolean>;
+            isDevFeature: z.ZodOptional<z.ZodBoolean>;
             type: z.ZodLiteral<import("@logto/connector-kit").ConnectorConfigFormItemType.Select>;
             selectItems: z.ZodArray<z.ZodObject<{
                 value: z.ZodString;
@@ -194,6 +196,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description?: string | undefined;
             tooltip?: string | undefined;
             isConfidential?: boolean | undefined;
+            isDevFeature?: boolean | undefined;
         }, {
             type: import("@logto/connector-kit").ConnectorConfigFormItemType.Select;
             selectItems: {
@@ -212,6 +215,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description?: string | undefined;
             tooltip?: string | undefined;
             isConfidential?: boolean | undefined;
+            isDevFeature?: boolean | undefined;
         }>, z.ZodObject<{
             key: z.ZodString;
             label: z.ZodString;
@@ -231,6 +235,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
             tooltip: z.ZodOptional<z.ZodString>;
             isConfidential: z.ZodOptional<z.ZodBoolean>;
+            isDevFeature: z.ZodOptional<z.ZodBoolean>;
             type: z.ZodLiteral<import("@logto/connector-kit").ConnectorConfigFormItemType.MultiSelect>;
             selectItems: z.ZodArray<z.ZodObject<{
                 value: z.ZodString;
@@ -256,6 +261,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description?: string | undefined;
             tooltip?: string | undefined;
             isConfidential?: boolean | undefined;
+            isDevFeature?: boolean | undefined;
         }, {
             type: import("@logto/connector-kit").ConnectorConfigFormItemType.MultiSelect;
             selectItems: {
@@ -273,6 +279,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description?: string | undefined;
             tooltip?: string | undefined;
             isConfidential?: boolean | undefined;
+            isDevFeature?: boolean | undefined;
         }>, z.ZodObject<{
             key: z.ZodString;
             label: z.ZodString;
@@ -292,6 +299,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
             tooltip: z.ZodOptional<z.ZodString>;
             isConfidential: z.ZodOptional<z.ZodBoolean>;
+            isDevFeature: z.ZodOptional<z.ZodBoolean>;
             type: z.ZodEnum<[import("@logto/connector-kit").ConnectorConfigFormItemType.Text, import("@logto/connector-kit").ConnectorConfigFormItemType.Number, import("@logto/connector-kit").ConnectorConfigFormItemType.MultilineText, import("@logto/connector-kit").ConnectorConfigFormItemType.Switch, import("@logto/connector-kit").ConnectorConfigFormItemType.Json]>;
         }, "strip", z.ZodTypeAny, {
             type: import("@logto/connector-kit").ConnectorConfigFormItemType.Text | import("@logto/connector-kit").ConnectorConfigFormItemType.Number | import("@logto/connector-kit").ConnectorConfigFormItemType.MultilineText | import("@logto/connector-kit").ConnectorConfigFormItemType.Switch | import("@logto/connector-kit").ConnectorConfigFormItemType.Json;
@@ -307,6 +315,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description?: string | undefined;
             tooltip?: string | undefined;
             isConfidential?: boolean | undefined;
+            isDevFeature?: boolean | undefined;
         }, {
             type: import("@logto/connector-kit").ConnectorConfigFormItemType.Text | import("@logto/connector-kit").ConnectorConfigFormItemType.Number | import("@logto/connector-kit").ConnectorConfigFormItemType.MultilineText | import("@logto/connector-kit").ConnectorConfigFormItemType.Switch | import("@logto/connector-kit").ConnectorConfigFormItemType.Json;
             key: string;
@@ -321,12 +330,14 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
             description?: string | undefined;
             tooltip?: string | undefined;
             isConfidential?: boolean | undefined;
+            isDevFeature?: boolean | undefined;
         }>]>, "many">>;
         customData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         fromEmail: z.ZodOptional<z.ZodString>;
     } & {
         platform: z.ZodNullable<z.ZodNativeEnum<typeof import("@logto/connector-kit").ConnectorPlatform>>;
         isStandard: z.ZodOptional<z.ZodBoolean>;
+        isTokenStorageSupported: z.ZodOptional<z.ZodBoolean>;
     }, "customData" | "description" | "readme" | "configTemplate" | "formItems">, "strip", z.ZodTypeAny, {
         name: {
             en: string;
@@ -466,6 +477,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         platform: import("@logto/connector-kit").ConnectorPlatform | null;
         fromEmail?: string | undefined;
         isStandard?: boolean | undefined;
+        isTokenStorageSupported?: boolean | undefined;
     }, {
         name: {
             en: string;
@@ -605,6 +617,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         platform: import("@logto/connector-kit").ConnectorPlatform | null;
         fromEmail?: string | undefined;
         isStandard?: boolean | undefined;
+        isTokenStorageSupported?: boolean | undefined;
     }>, "many">;
     ssoConnectors: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -666,6 +679,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         type: CaptchaType;
         siteKey: string;
     }>>;
+    customProfileFields: z.ZodOptional<z.ZodArray<import("../index.js").Guard<CustomProfileField>, "many">>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     tenantId: string;
@@ -831,6 +845,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         platform: import("@logto/connector-kit").ConnectorPlatform | null;
         fromEmail?: string | undefined;
         isStandard?: boolean | undefined;
+        isTokenStorageSupported?: boolean | undefined;
     }[];
     ssoConnectors: {
         id: string;
@@ -855,6 +870,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         type: CaptchaType;
         siteKey: string;
     } | undefined;
+    customProfileFields?: CustomProfileField[] | undefined;
 }, {
     id: string;
     tenantId: string;
@@ -1020,6 +1036,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         platform: import("@logto/connector-kit").ConnectorPlatform | null;
         fromEmail?: string | undefined;
         isStandard?: boolean | undefined;
+        isTokenStorageSupported?: boolean | undefined;
     }[];
     ssoConnectors: {
         id: string;
@@ -1044,5 +1061,6 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         type: CaptchaType;
         siteKey: string;
     } | undefined;
+    customProfileFields?: CustomProfileField[] | undefined;
 }>;
 export {};

package/lib/types/sign-in-experience.js

@@ -1,6 +1,6 @@
 import { connectorMetadataGuard, googleOneTapConfigGuard, } from '@logto/connector-kit';
 import { z } from 'zod';
-import { SignInExperiences } from '../db-entries/index.js';
+import { CustomProfileFields, SignInExperiences, } from '../db-entries/index.js';
 import { CaptchaType } from '../foundations/jsonb-types/index.js';
 import { ssoConnectorMetadataGuard } from './sso-connector.js';
 export const fullSignInExperienceGuard = SignInExperiences.guard.extend({
@@ -25,4 +25,6 @@ export const fullSignInExperienceGuard = SignInExperiences.guard.extend({
         siteKey: z.string(),
     })
         .optional(),
+    // @charles TODO: Remove `optional` before release
+    customProfileFields: CustomProfileFields.guard.array().optional(),
 });