@logto/schemas 1.33.0 → 1.35.0

package/alterations/1.34.0-1762338508-add-organization-roles-type-index.ts

@@ -0,0 +1,19 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      create index organization_roles__type
+      on organization_roles (tenant_id, type);
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      drop index organization_roles__type;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.34.0-1764164658-add-applications-roles-include-indexes.ts

@@ -0,0 +1,38 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      create index applications__include_type_is_third_party
+      on applications (tenant_id) include (type, is_third_party);
+    `);
+
+    // Update table statistics to help query planner use the new index efficiently
+    await pool.query(sql`
+      analyze applications;
+    `);
+
+    await pool.query(sql`
+      create index roles__include_type_name
+      on roles (tenant_id) include (type, name);
+    `);
+
+    // Update table statistics to help query planner use the new index efficiently
+    await pool.query(sql`
+      analyze roles;
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      drop index if exists applications__include_type_is_third_party;
+    `);
+
+    await pool.query(sql`
+      drop index if exists roles__include_type_name;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.34.0-1764236036-remove-applications-roles-include-indexes.ts

@@ -0,0 +1,38 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      drop index if exists applications__include_type_is_third_party;
+    `);
+
+    await pool.query(sql`
+      drop index if exists roles__include_type_name;
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      create index applications__include_type_is_third_party
+      on applications (tenant_id) include (type, is_third_party);
+    `);
+
+    // Update table statistics to help query planner use the new index efficiently
+    await pool.query(sql`
+      analyze applications;
+    `);
+
+    await pool.query(sql`
+      create index roles__include_type_name
+      on roles (tenant_id) include (type, name);
+    `);
+
+    // Update table statistics to help query planner use the new index efficiently
+    await pool.query(sql`
+      analyze roles;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.35.0-1764580455-remove-daily-active-users-foreign-key.ts

@@ -0,0 +1,69 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+/**
+ * Remove foreign key constraint from daily_active_users table to allow
+ * historical billing data to persist even after tenant deletion.
+ * This supports the MAU-based billing system requirements.
+ *
+ * Index optimizations:
+ * 1. Removes redundant (tenant_id, id) index (id is already primary key)
+ * 2. Adds optimized index (tenant_id, date, user_id) for aggregation queries
+ * 3. Replaces problematic partial index with BRIN index
+ */
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    // Drop the existing foreign key constraint
+    await pool.query(sql`
+      alter table daily_active_users
+      drop constraint if exists daily_active_users_tenant_id_fkey
+    `);
+
+    // Remove the redundant (tenant_id, id) index since id is already primary key
+    await pool.query(sql`
+      drop index if exists daily_active_users__id
+    `);
+
+    // Add optimized index for aggregation queries with better write performance
+    await pool.query(sql`
+      create index daily_active_users__tenant_date_user
+      on daily_active_users (tenant_id, date, user_id)
+    `);
+
+    // Add BRIN index for time-series date range queries
+    // Optimized for sequential data insertion and range scans (date >= ?)
+    await pool.query(sql`
+      create index daily_active_users__date_brin
+      on daily_active_users using brin (date)
+    `);
+  },
+
+  down: async (pool) => {
+    // Drop the new indexes we created
+    await pool.query(sql`
+      drop index if exists daily_active_users__date_brin
+    `);
+
+    await pool.query(sql`
+      drop index if exists daily_active_users__tenant_date_user
+    `);
+
+    // Recreate the original redundant index
+    await pool.query(sql`
+      create index daily_active_users__id
+      on daily_active_users (tenant_id, id)
+    `);
+
+    // Recreate the foreign key constraint
+    await pool.query(sql`
+      alter table daily_active_users
+      add constraint daily_active_users_tenant_id_fkey
+      foreign key (tenant_id) references tenants(id)
+      on update cascade on delete cascade
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.35.0-1764580589-create-aggregated-daily-active-users-table.ts

@@ -0,0 +1,51 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+
+/**
+ * Create aggregated_daily_active_users table for MAU-based billing system.
+ * This table consolidates daily user activities for efficient billing calculations.
+ */
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    // Create the aggregated daily active users table
+    await pool.query(sql`
+      create table aggregated_daily_active_users (
+        tenant_id varchar(21) not null,
+        activity_date date not null,
+        user_id varchar(21) not null,
+        activity_count integer not null,
+        primary key (tenant_id, activity_date, user_id)
+      );
+    `);
+
+    // Index for billing cycle range queries
+    await pool.query(sql`
+      create index aggregated_daily_active_users__tenant_date
+        on aggregated_daily_active_users (tenant_id, activity_date);
+    `);
+
+    // Index for tenant-specific user activity queries
+    await pool.query(sql`
+      create index aggregated_daily_active_users__tenant_user_date
+        on aggregated_daily_active_users (tenant_id, user_id, activity_date desc);
+    `);
+
+    await applyTableRls(pool, 'aggregated_daily_active_users');
+  },
+
+  down: async (pool) => {
+    // Drop RLS policies first
+    await dropTableRls(pool, 'aggregated_daily_active_users');
+
+    // Drop the table and all its indexes
+    await pool.query(sql`
+      drop table aggregated_daily_active_users;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.35.0-1764653048-update-daily-token-usage-mau-support.ts

@@ -0,0 +1,37 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    // Add new columns for user and m2m token usage tracking
+    await pool.query(sql`
+      alter table daily_token_usage
+      add column user_token_usage bigint not null default 0,
+      add column m2m_token_usage bigint not null default 0;
+    `);
+
+    // Remove foreign key constraint to support enterprise tenant deletion requirements
+    await pool.query(sql`
+      alter table daily_token_usage
+      drop constraint if exists daily_token_usage_tenant_id_fkey;
+    `);
+  },
+  down: async (pool) => {
+    // Remove the new columns
+    await pool.query(sql`
+      alter table daily_token_usage
+      drop column if exists user_token_usage,
+      drop column if exists m2m_token_usage;
+    `);
+
+    // Re-add the foreign key constraint
+    await pool.query(sql`
+      alter table daily_token_usage
+      add constraint daily_token_usage_tenant_id_fkey
+      foreign key (tenant_id) references tenants (id) on update cascade on delete cascade;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.35.0-1765183934-add-logs-created-at-id-index.ts

@@ -0,0 +1,39 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  beforeUp: async (pool) => {
+    /**
+     * Use 'if not exists' to ensure idempotency.
+     * If the subsequent transaction in 'up' fails, the migration can be safely re-run without failing on an already created index.
+     */
+    await pool.query(sql`
+      create index concurrently if not exists logs__created_at_id
+      on logs (tenant_id, created_at, id);
+    `);
+  },
+  up: async () => {
+    /**
+     * The index on the logs table must be created outside of a transaction to avoid table locks.
+     * 'concurrently' cannot be used inside a transaction, so this up is intentionally left empty.
+     */
+  },
+  beforeDown: async (pool) => {
+    /**
+     * Use 'if exists' to ensure idempotency. If the subsequent transaction in 'down' fails,
+     * the rollback can be safely re-run without failing on a non-existent index.
+     */
+    await pool.query(sql`
+      drop index concurrently if exists logs__created_at_id;
+    `);
+  },
+  down: async () => {
+    /**
+     * The index on the logs table must be dropped outside of a transaction to avoid table locks.
+     * 'concurrently' cannot be used inside a transaction, so this down is intentionally left empty.
+     */
+  },
+};
+
+export default alteration;

package/alterations/1.35.0-1765255453-update-saml-session-relay-state-to-varchar-512.ts

@@ -0,0 +1,31 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+/**
+ * Update saml_application_sessions.relay_state column type from varchar(256) to text
+ * to support longer relay state values that may be used in SAML authentication flows.
+ *
+ * The relay state parameter in SAML can contain arbitrary data that needs to be
+ * preserved and returned to the service provider, and 256 characters may not be
+ * sufficient for all use cases.
+ */
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      alter table saml_application_sessions
+      alter column relay_state type varchar(512)
+    `);
+  },
+
+  down: async (pool) => {
+    // The down migration may fail or cause data loss if any existing relay_state values exceed 256 characters. Consider adding a USING clause to safely truncate values during rollback, this ensures the rollback operation won't fail due to data that's too long for the varchar(256) constraint.
+    await pool.query(sql`
+      alter table saml_application_sessions
+      alter column relay_state type varchar(256) using left(relay_state, 256)
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.35.0-1765631949-drop-redundant-logs-id-index.ts

@@ -0,0 +1,47 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+/**
+ * The `logs__id` index on (tenant_id, id) is redundant because:
+ * 1. `id` is already the primary key, which can efficiently lookup by id
+ * 2. `logs__created_at_id` index on (tenant_id, created_at, id) already covers tenant_id queries
+ *
+ * Removing this index reduces write IOPS during log deletion operations,
+ * as each DELETE no longer needs to update this redundant index.
+ */
+const alteration: AlterationScript = {
+  beforeUp: async (pool) => {
+    /**
+     * Use 'if exists' to ensure idempotency.
+     * 'concurrently' avoids table locks during index drop.
+     */
+    await pool.query(sql`
+      drop index concurrently if exists logs__id;
+    `);
+  },
+  up: async () => {
+    /**
+     * The index must be dropped outside of a transaction to avoid table locks.
+     * 'concurrently' cannot be used inside a transaction, so this up is intentionally left empty.
+     */
+  },
+  beforeDown: async (pool) => {
+    /**
+     * Recreate the index if rolling back.
+     * Use 'if not exists' to ensure idempotency.
+     */
+    await pool.query(sql`
+      create index concurrently if not exists logs__id
+      on logs (tenant_id, id);
+    `);
+  },
+  down: async () => {
+    /**
+     * The index must be created outside of a transaction to avoid table locks.
+     * 'concurrently' cannot be used inside a transaction, so this down is intentionally left empty.
+     */
+  },
+};
+
+export default alteration;

package/alterations/1.35.0-1766028646-grant-tenants-table-tag-column-read-permission.ts

@@ -0,0 +1,39 @@
+import { type CommonQueryMethods, sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const getDatabaseName = async (pool: CommonQueryMethods) => {
+  const { currentDatabase } = await pool.one<{ currentDatabase: string }>(sql`
+    select current_database();
+  `);
+
+  return currentDatabase.replaceAll('-', '_');
+};
+
+/**
+ * Grant read permission to the tag column in the tenants table to the logto_tenant_<databaseName> role.
+ */
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    const databaseName = await getDatabaseName(pool);
+    const baseRoleId = sql.identifier([`logto_tenant_${databaseName}`]);
+
+    await pool.query(sql`
+      grant select (tag)
+        on table tenants
+        to ${baseRoleId}
+    `);
+  },
+  down: async (pool) => {
+    const databaseName = await getDatabaseName(pool);
+    const baseRoleId = sql.identifier([`logto_tenant_${databaseName}`]);
+
+    await pool.query(sql`
+      revoke select (tag)
+        on table tenants
+        from ${baseRoleId}
+    `);
+  },
+};
+
+export default alteration;

package/alterations-js/1.34.0-1762338508-add-organization-roles-type-index.js

@@ -0,0 +1,15 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      create index organization_roles__type
+      on organization_roles (tenant_id, type);
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      drop index organization_roles__type;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.34.0-1764164658-add-applications-roles-include-indexes.js

@@ -0,0 +1,30 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      create index applications__include_type_is_third_party
+      on applications (tenant_id) include (type, is_third_party);
+    `);
+        // Update table statistics to help query planner use the new index efficiently
+        await pool.query(sql `
+      analyze applications;
+    `);
+        await pool.query(sql `
+      create index roles__include_type_name
+      on roles (tenant_id) include (type, name);
+    `);
+        // Update table statistics to help query planner use the new index efficiently
+        await pool.query(sql `
+      analyze roles;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      drop index if exists applications__include_type_is_third_party;
+    `);
+        await pool.query(sql `
+      drop index if exists roles__include_type_name;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.34.0-1764236036-remove-applications-roles-include-indexes.js

@@ -0,0 +1,30 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      drop index if exists applications__include_type_is_third_party;
+    `);
+        await pool.query(sql `
+      drop index if exists roles__include_type_name;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      create index applications__include_type_is_third_party
+      on applications (tenant_id) include (type, is_third_party);
+    `);
+        // Update table statistics to help query planner use the new index efficiently
+        await pool.query(sql `
+      analyze applications;
+    `);
+        await pool.query(sql `
+      create index roles__include_type_name
+      on roles (tenant_id) include (type, name);
+    `);
+        // Update table statistics to help query planner use the new index efficiently
+        await pool.query(sql `
+      analyze roles;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.35.0-1764580455-remove-daily-active-users-foreign-key.js

@@ -0,0 +1,57 @@
+import { sql } from '@silverhand/slonik';
+/**
+ * Remove foreign key constraint from daily_active_users table to allow
+ * historical billing data to persist even after tenant deletion.
+ * This supports the MAU-based billing system requirements.
+ *
+ * Index optimizations:
+ * 1. Removes redundant (tenant_id, id) index (id is already primary key)
+ * 2. Adds optimized index (tenant_id, date, user_id) for aggregation queries
+ * 3. Replaces problematic partial index with BRIN index
+ */
+const alteration = {
+    up: async (pool) => {
+        // Drop the existing foreign key constraint
+        await pool.query(sql `
+      alter table daily_active_users
+      drop constraint if exists daily_active_users_tenant_id_fkey
+    `);
+        // Remove the redundant (tenant_id, id) index since id is already primary key
+        await pool.query(sql `
+      drop index if exists daily_active_users__id
+    `);
+        // Add optimized index for aggregation queries with better write performance
+        await pool.query(sql `
+      create index daily_active_users__tenant_date_user
+      on daily_active_users (tenant_id, date, user_id)
+    `);
+        // Add BRIN index for time-series date range queries
+        // Optimized for sequential data insertion and range scans (date >= ?)
+        await pool.query(sql `
+      create index daily_active_users__date_brin
+      on daily_active_users using brin (date)
+    `);
+    },
+    down: async (pool) => {
+        // Drop the new indexes we created
+        await pool.query(sql `
+      drop index if exists daily_active_users__date_brin
+    `);
+        await pool.query(sql `
+      drop index if exists daily_active_users__tenant_date_user
+    `);
+        // Recreate the original redundant index
+        await pool.query(sql `
+      create index daily_active_users__id
+      on daily_active_users (tenant_id, id)
+    `);
+        // Recreate the foreign key constraint
+        await pool.query(sql `
+      alter table daily_active_users
+      add constraint daily_active_users_tenant_id_fkey
+      foreign key (tenant_id) references tenants(id)
+      on update cascade on delete cascade
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.35.0-1764580589-create-aggregated-daily-active-users-table.js

@@ -0,0 +1,40 @@
+import { sql } from '@silverhand/slonik';
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+/**
+ * Create aggregated_daily_active_users table for MAU-based billing system.
+ * This table consolidates daily user activities for efficient billing calculations.
+ */
+const alteration = {
+    up: async (pool) => {
+        // Create the aggregated daily active users table
+        await pool.query(sql `
+      create table aggregated_daily_active_users (
+        tenant_id varchar(21) not null,
+        activity_date date not null,
+        user_id varchar(21) not null,
+        activity_count integer not null,
+        primary key (tenant_id, activity_date, user_id)
+      );
+    `);
+        // Index for billing cycle range queries
+        await pool.query(sql `
+      create index aggregated_daily_active_users__tenant_date
+        on aggregated_daily_active_users (tenant_id, activity_date);
+    `);
+        // Index for tenant-specific user activity queries
+        await pool.query(sql `
+      create index aggregated_daily_active_users__tenant_user_date
+        on aggregated_daily_active_users (tenant_id, user_id, activity_date desc);
+    `);
+        await applyTableRls(pool, 'aggregated_daily_active_users');
+    },
+    down: async (pool) => {
+        // Drop RLS policies first
+        await dropTableRls(pool, 'aggregated_daily_active_users');
+        // Drop the table and all its indexes
+        await pool.query(sql `
+      drop table aggregated_daily_active_users;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.35.0-1764653048-update-daily-token-usage-mau-support.js

@@ -0,0 +1,31 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        // Add new columns for user and m2m token usage tracking
+        await pool.query(sql `
+      alter table daily_token_usage
+      add column user_token_usage bigint not null default 0,
+      add column m2m_token_usage bigint not null default 0;
+    `);
+        // Remove foreign key constraint to support enterprise tenant deletion requirements
+        await pool.query(sql `
+      alter table daily_token_usage
+      drop constraint if exists daily_token_usage_tenant_id_fkey;
+    `);
+    },
+    down: async (pool) => {
+        // Remove the new columns
+        await pool.query(sql `
+      alter table daily_token_usage
+      drop column if exists user_token_usage,
+      drop column if exists m2m_token_usage;
+    `);
+        // Re-add the foreign key constraint
+        await pool.query(sql `
+      alter table daily_token_usage
+      add constraint daily_token_usage_tenant_id_fkey
+      foreign key (tenant_id) references tenants (id) on update cascade on delete cascade;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.35.0-1765183934-add-logs-created-at-id-index.js

@@ -0,0 +1,35 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    beforeUp: async (pool) => {
+        /**
+         * Use 'if not exists' to ensure idempotency.
+         * If the subsequent transaction in 'up' fails, the migration can be safely re-run without failing on an already created index.
+         */
+        await pool.query(sql `
+      create index concurrently if not exists logs__created_at_id
+      on logs (tenant_id, created_at, id);
+    `);
+    },
+    up: async () => {
+        /**
+         * The index on the logs table must be created outside of a transaction to avoid table locks.
+         * 'concurrently' cannot be used inside a transaction, so this up is intentionally left empty.
+         */
+    },
+    beforeDown: async (pool) => {
+        /**
+         * Use 'if exists' to ensure idempotency. If the subsequent transaction in 'down' fails,
+         * the rollback can be safely re-run without failing on a non-existent index.
+         */
+        await pool.query(sql `
+      drop index concurrently if exists logs__created_at_id;
+    `);
+    },
+    down: async () => {
+        /**
+         * The index on the logs table must be dropped outside of a transaction to avoid table locks.
+         * 'concurrently' cannot be used inside a transaction, so this down is intentionally left empty.
+         */
+    },
+};
+export default alteration;