@logto/schemas 1.34.0 → 1.36.0

package/lib/types/log/interaction.d.ts

@@ -32,6 +32,10 @@ export declare enum Action {
     /** Change an entity to the end state. (E.g. end an interaction) */
     End = "End"
 }
+/**
+ * @deprecated Deprecated interaction log keys used in legacy interaction endpoints.
+ */
+export type DeprecatedInteractionLogKey = `${Prefix}.${InteractionEvent}.${Field.Profile}.${Action.Create | Action.Delete}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Exclude<Method, Method.Password>}.${Action.Create | Action.Submit}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Method.Password}.${Action.Submit}` | `${Prefix}.${InteractionEvent.ForgotPassword}.${Field.Identifier}.${Method.VerificationCode}.${Action.Create | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.BindMfa}.${MfaFactor}.${Action.Create}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Mfa}.${MfaFactor}.${Action.Submit | Action.Create}`;
 /**
  * The union type of all available log keys for interaction.
  * The key MUST describe an {@link Action}.
@@ -69,4 +73,4 @@ export declare enum Action {
  *   - When {@link Method} is `VerificationCode`, {@link Action} can be `Create` (generate and send a code) or `Submit` (verify and submit to the identifiers);
  *   - Otherwise, {@link Action} is fixed to `Submit` (other methods can be verified on submitting).
  */
-export type LogKey = `${Prefix}.${Action.Create | Action.End}` | `${Prefix}.${Action.Create}.${Field.Captcha}` | `${Prefix}.${InteractionEvent}.${Action.Create | Action.Update | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Profile}.${Action.Update | Action.Create | Action.Delete}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Exclude<Method, Method.Password>}.${Action.Create | Action.Submit}` | `${Prefix}.${Exclude<InteractionEvent, InteractionEvent.ForgotPassword>}.${Field.Identifier}.${Method.Password}.${Action.Submit}` | `${Prefix}.${InteractionEvent.ForgotPassword}.${Field.Identifier}.${Method.VerificationCode}.${Action.Create | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.BindMfa}.${MfaFactor}.${Action.Submit | Action.Create}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Mfa}.${MfaFactor}.${Action.Submit | Action.Create}` | `${Prefix}.${InteractionEvent}.${Field.Verification}.${VerificationType}.${Action}` | `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Verification}.IdpInitiatedSso.${Action.Create}`;
+export type LogKey = `${Prefix}.${Action.Create | Action.End}` | `${Prefix}.${Action.Create}.${Field.Captcha}` | `${Prefix}.${InteractionEvent}.${Action.Create | Action.Update | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Profile}.${Action.Update}` | `${Prefix}.${InteractionEvent}.${Field.BindMfa}.${MfaFactor}.${Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Verification}.${VerificationType}.${Action}` | `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Verification}.IdpInitiatedSso.${Action.Create}` | DeprecatedInteractionLogKey;

package/lib/types/logto-config/index.d.ts

@@ -157,10 +157,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }>>>;
                 updatedAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+                lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
                 primaryEmail: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
                 primaryPhone: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
                 isSuspended: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
-                lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
                 hasPassword: z.ZodOptional<z.ZodBoolean>;
                 ssoIdentities: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
                     tenantId: ZodType<string, z.ZodTypeDef, string>;
@@ -337,10 +337,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -404,10 +404,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1077,10 +1077,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1240,10 +1240,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1407,10 +1407,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1587,10 +1587,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1769,10 +1769,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;
@@ -1952,10 +1952,10 @@ export declare const jwtCustomizerConfigsGuard: z.ZodDiscriminatedUnion<"key", [
                     details?: Record<string, import("@withtyped/server").Json> | undefined;
                 }> | undefined;
                 updatedAt?: number | undefined;
+                lastSignInAt?: number | null | undefined;
                 primaryEmail?: string | null | undefined;
                 primaryPhone?: string | null | undefined;
                 isSuspended?: boolean | undefined;
-                lastSignInAt?: number | null | undefined;
                 hasPassword?: boolean | undefined;
                 ssoIdentities?: {
                     issuer: string;

package/lib/types/logto-config/jwt-customizer.d.ts

@@ -156,7 +156,7 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
     lastSignInAt: ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: ZodType<number, z.ZodTypeDef, number>;
     updatedAt: ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "primaryEmail" | "primaryPhone" | "isSuspended" | "lastSignInAt"> & {
+}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "lastSignInAt" | "primaryEmail" | "primaryPhone" | "isSuspended"> & {
     hasPassword: z.ZodBoolean;
     ssoIdentities: z.ZodArray<z.ZodObject<Pick<{
         tenantId: ZodType<string, z.ZodTypeDef, string>;
@@ -310,10 +310,10 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
     }[];
     identities: import("../../foundations/index.js").Identities;
     updatedAt: number;
+    lastSignInAt: number | null;
     primaryEmail: string | null;
     primaryPhone: string | null;
     isSuspended: boolean;
-    lastSignInAt: number | null;
     hasPassword: boolean;
     ssoIdentities: {
         issuer: string;
@@ -354,10 +354,10 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
     }[];
     identities: import("../../foundations/index.js").Identities;
     updatedAt: number;
+    lastSignInAt: number | null;
     primaryEmail: string | null;
     primaryPhone: string | null;
     isSuspended: boolean;
-    lastSignInAt: number | null;
     hasPassword: boolean;
     ssoIdentities: {
         issuer: string;
@@ -1076,10 +1076,10 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }>>>;
             updatedAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+            lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
             primaryEmail: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             primaryPhone: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             isSuspended: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
-            lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
             hasPassword: z.ZodOptional<z.ZodBoolean>;
             ssoIdentities: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
                 tenantId: ZodType<string, z.ZodTypeDef, string>;
@@ -1256,10 +1256,10 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -1323,10 +1323,10 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -1996,10 +1996,10 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -2159,10 +2159,10 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -2326,10 +2326,10 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -2506,10 +2506,10 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -2784,10 +2784,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }>>>;
             updatedAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
+            lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
             primaryEmail: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             primaryPhone: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             isSuspended: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
-            lastSignInAt: z.ZodOptional<ZodType<number | null, z.ZodTypeDef, number | null>>;
             hasPassword: z.ZodOptional<z.ZodBoolean>;
             ssoIdentities: z.ZodOptional<z.ZodArray<z.ZodObject<Pick<{
                 tenantId: ZodType<string, z.ZodTypeDef, string>;
@@ -2964,10 +2964,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -3031,10 +3031,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -3704,10 +3704,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -3867,10 +3867,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -4048,10 +4048,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;
@@ -4229,10 +4229,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
             }> | undefined;
             updatedAt?: number | undefined;
+            lastSignInAt?: number | null | undefined;
             primaryEmail?: string | null | undefined;
             primaryPhone?: string | null | undefined;
             isSuspended?: boolean | undefined;
-            lastSignInAt?: number | null | undefined;
             hasPassword?: boolean | undefined;
             ssoIdentities?: {
                 issuer: string;

package/lib/types/saml-application.d.ts

@@ -4,7 +4,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<{
     name: z.ZodType<string, z.ZodTypeDef, string>;
     customData: z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>>>;
     description: z.ZodOptional<z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>>;
-    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>>;
+    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>>;
     entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
     acsUrl: z.ZodOptional<z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>>;
     encryption: z.ZodOptional<z.ZodType<{
@@ -23,7 +23,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<{
     nameIdFormat: NameIdFormat;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -35,7 +35,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<{
     name: string;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -50,7 +50,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<{
     name: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
     customData: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>>>>;
     description: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>>>;
-    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>>;
+    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>>;
     entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
     acsUrl: z.ZodOptional<z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>>;
     encryption: z.ZodOptional<z.ZodType<{
@@ -68,7 +68,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<{
     name?: string | undefined;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -81,7 +81,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<{
     name?: string | undefined;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -101,7 +101,7 @@ export declare const samlApplicationResponseGuard: z.ZodObject<{
     customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     isThirdParty: z.ZodType<boolean, z.ZodTypeDef, boolean>;
-    attributeMapping: z.ZodType<Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>;
+    attributeMapping: z.ZodType<Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "email" | "username" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>;
     entityId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     acsUrl: z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>;
     encryption: z.ZodType<{

package/lib/types/sign-in-experience.d.ts

@@ -1,7 +1,7 @@
 import { type ConnectorMetadata, type GoogleOneTapConfig } from '@logto/connector-kit';
 import { z } from 'zod';
 import { type CustomProfileField, type SignInExperience } from '../db-entries/index.js';
-import { CaptchaType } from '../foundations/jsonb-types/index.js';
+import { CaptchaType, RecaptchaEnterpriseMode } from '../foundations/jsonb-types/index.js';
 import { type SsoConnectorMetadata } from './sso-connector.js';
 type ForgotPassword = {
     phone: boolean;
@@ -32,6 +32,8 @@ export type FullSignInExperience = Omit<SignInExperience, 'forgotPasswordMethods
     captchaConfig?: {
         type: CaptchaType;
         siteKey: string;
+        domain?: string;
+        mode?: RecaptchaEnterpriseMode;
     };
     customProfileFields?: Readonly<CustomProfileField[]>;
 };
@@ -127,6 +129,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
         } | undefined;
     }>;
     mfa: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").Mfa, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").Mfa>;
+    adaptiveMfa: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").AdaptiveMfa, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").AdaptiveMfa>;
     singleSignOnEnabled: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     supportEmail: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     supportWebsiteUrl: z.ZodType<string | null, z.ZodTypeDef, string | null>;
@@ -139,6 +142,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     sentinelPolicy: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").SentinelPolicy, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").SentinelPolicy>;
     emailBlocklistPolicy: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").EmailBlocklistPolicy, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").EmailBlocklistPolicy>;
     forgotPasswordMethods: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").ForgotPasswordMethod[] | null, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").ForgotPasswordMethod[] | null>;
+    passkeySignIn: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").PasskeySignIn, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").PasskeySignIn>;
 }, "forgotPasswordMethods"> & {
     socialConnectors: z.ZodArray<z.ZodObject<Omit<{
         id: z.ZodString;
@@ -674,12 +678,18 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     captchaConfig: z.ZodOptional<z.ZodObject<{
         type: z.ZodNativeEnum<typeof CaptchaType>;
         siteKey: z.ZodString;
+        domain: z.ZodOptional<z.ZodString>;
+        mode: z.ZodOptional<z.ZodNativeEnum<typeof RecaptchaEnterpriseMode>>;
     }, "strip", z.ZodTypeAny, {
         type: CaptchaType;
         siteKey: string;
+        domain?: string | undefined;
+        mode?: RecaptchaEnterpriseMode | undefined;
     }, {
         type: CaptchaType;
         siteKey: string;
+        domain?: string | undefined;
+        mode?: RecaptchaEnterpriseMode | undefined;
     }>>;
     customProfileFields: z.ZodArray<import("../index.js").Guard<CustomProfileField>, "many">;
 }, "strip", z.ZodTypeAny, {
@@ -702,6 +712,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     customContent: import("../foundations/jsonb-types/sign-in-experience.js").CustomContent;
     customUiAssets: import("../foundations/jsonb-types/sign-in-experience.js").CustomUiAssets | null;
     passwordPolicy: import("../foundations/jsonb-types/logs.js").PartialPasswordPolicy;
+    adaptiveMfa: import("../foundations/jsonb-types/sign-in-experience.js").AdaptiveMfa;
     singleSignOnEnabled: boolean;
     supportEmail: string | null;
     supportWebsiteUrl: string | null;
@@ -709,6 +720,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     captchaPolicy: import("../foundations/jsonb-types/sign-in-experience.js").CaptchaPolicy;
     sentinelPolicy: import("../foundations/jsonb-types/sign-in-experience.js").SentinelPolicy;
     emailBlocklistPolicy: import("../foundations/jsonb-types/sign-in-experience.js").EmailBlocklistPolicy;
+    passkeySignIn: import("../foundations/jsonb-types/sign-in-experience.js").PasskeySignIn;
     socialConnectors: {
         name: {
             en: string;
@@ -873,6 +885,8 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     captchaConfig?: {
         type: CaptchaType;
         siteKey: string;
+        domain?: string | undefined;
+        mode?: RecaptchaEnterpriseMode | undefined;
     } | undefined;
 }, {
     id: string;
@@ -894,6 +908,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     customContent: import("../foundations/jsonb-types/sign-in-experience.js").CustomContent;
     customUiAssets: import("../foundations/jsonb-types/sign-in-experience.js").CustomUiAssets | null;
     passwordPolicy: import("../foundations/jsonb-types/logs.js").PartialPasswordPolicy;
+    adaptiveMfa: import("../foundations/jsonb-types/sign-in-experience.js").AdaptiveMfa;
     singleSignOnEnabled: boolean;
     supportEmail: string | null;
     supportWebsiteUrl: string | null;
@@ -901,6 +916,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     captchaPolicy: import("../foundations/jsonb-types/sign-in-experience.js").CaptchaPolicy;
     sentinelPolicy: import("../foundations/jsonb-types/sign-in-experience.js").SentinelPolicy;
     emailBlocklistPolicy: import("../foundations/jsonb-types/sign-in-experience.js").EmailBlocklistPolicy;
+    passkeySignIn: import("../foundations/jsonb-types/sign-in-experience.js").PasskeySignIn;
     socialConnectors: {
         name: {
             en: string;
@@ -1065,6 +1081,8 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     captchaConfig?: {
         type: CaptchaType;
         siteKey: string;
+        domain?: string | undefined;
+        mode?: RecaptchaEnterpriseMode | undefined;
     } | undefined;
 }>;
 export {};

package/lib/types/sign-in-experience.js

@@ -1,7 +1,7 @@
 import { connectorMetadataGuard, googleOneTapConfigGuard, } from '@logto/connector-kit';
 import { z } from 'zod';
 import { CustomProfileFields, SignInExperiences, } from '../db-entries/index.js';
-import { CaptchaType } from '../foundations/jsonb-types/index.js';
+import { CaptchaType, RecaptchaEnterpriseMode } from '../foundations/jsonb-types/index.js';
 import { ssoConnectorMetadataGuard } from './sso-connector.js';
 export const fullSignInExperienceGuard = SignInExperiences.guard
     .omit({ forgotPasswordMethods: true })
@@ -25,6 +25,8 @@ export const fullSignInExperienceGuard = SignInExperiences.guard
         .object({
         type: z.nativeEnum(CaptchaType),
         siteKey: z.string(),
+        domain: z.string().optional(),
+        mode: z.nativeEnum(RecaptchaEnterpriseMode).optional(),
     })
         .optional(),
     customProfileFields: CustomProfileFields.guard.array(),

package/lib/types/user.d.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { type User } from '../db-entries/index.js';
 import { MfaFactor } from '../foundations/index.js';
-export declare const userInfoSelectFields: readonly ("name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "primaryEmail" | "primaryPhone" | "isSuspended" | "lastSignInAt")[];
+export declare const userInfoSelectFields: readonly ("name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "lastSignInAt" | "primaryEmail" | "primaryPhone" | "isSuspended")[];
 export declare const userInfoGuard: z.ZodObject<Pick<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
@@ -122,7 +122,7 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
     updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "primaryEmail" | "primaryPhone" | "isSuspended" | "lastSignInAt">, "strip", z.ZodTypeAny, {
+}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "lastSignInAt" | "primaryEmail" | "primaryPhone" | "isSuspended">, "strip", z.ZodTypeAny, {
     name: string | null;
     id: string;
     applicationId: string | null;
@@ -133,10 +133,10 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     identities: import("../foundations/index.js").Identities;
     updatedAt: number;
+    lastSignInAt: number | null;
     primaryEmail: string | null;
     primaryPhone: string | null;
     isSuspended: boolean;
-    lastSignInAt: number | null;
 }, {
     name: string | null;
     id: string;
@@ -148,10 +148,10 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     identities: import("../foundations/index.js").Identities;
     updatedAt: number;
+    lastSignInAt: number | null;
     primaryEmail: string | null;
     primaryPhone: string | null;
     isSuspended: boolean;
-    lastSignInAt: number | null;
 }>;
 export type UserInfo = z.infer<typeof userInfoGuard>;
 export declare const userProfileResponseGuard: z.ZodObject<Pick<{
@@ -274,7 +274,7 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
     updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "primaryEmail" | "primaryPhone" | "isSuspended" | "lastSignInAt"> & {
+}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "lastSignInAt" | "primaryEmail" | "primaryPhone" | "isSuspended"> & {
     hasPassword: z.ZodOptional<z.ZodBoolean>;
     ssoIdentities: z.ZodOptional<z.ZodArray<import("../foundations/schemas.js").Guard<import("../db-entries/user-sso-identity.js").UserSsoIdentity>, "many">>;
 }, "strip", z.ZodTypeAny, {
@@ -288,10 +288,10 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     identities: import("../foundations/index.js").Identities;
     updatedAt: number;
+    lastSignInAt: number | null;
     primaryEmail: string | null;
     primaryPhone: string | null;
     isSuspended: boolean;
-    lastSignInAt: number | null;
     hasPassword?: boolean | undefined;
     ssoIdentities?: import("../db-entries/user-sso-identity.js").UserSsoIdentity[] | undefined;
 }, {
@@ -305,10 +305,10 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     identities: import("../foundations/index.js").Identities;
     updatedAt: number;
+    lastSignInAt: number | null;
     primaryEmail: string | null;
     primaryPhone: string | null;
     isSuspended: boolean;
-    lastSignInAt: number | null;
     hasPassword?: boolean | undefined;
     ssoIdentities?: import("../db-entries/user-sso-identity.js").UserSsoIdentity[] | undefined;
 }>;
@@ -316,6 +316,7 @@ export type UserProfileResponse = z.infer<typeof userProfileResponseGuard>;
 export declare const userMfaVerificationResponseGuard: z.ZodArray<z.ZodObject<{
     id: z.ZodString;
     createdAt: z.ZodString;
+    lastUsedAt: z.ZodOptional<z.ZodString>;
     type: z.ZodNativeEnum<typeof MfaFactor>;
     agent: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
@@ -325,6 +326,7 @@ export declare const userMfaVerificationResponseGuard: z.ZodArray<z.ZodObject<{
     id: string;
     createdAt: string;
     name?: string | undefined;
+    lastUsedAt?: string | undefined;
     agent?: string | undefined;
     remainCodes?: number | undefined;
 }, {
@@ -332,6 +334,7 @@ export declare const userMfaVerificationResponseGuard: z.ZodArray<z.ZodObject<{
     id: string;
     createdAt: string;
     name?: string | undefined;
+    lastUsedAt?: string | undefined;
     agent?: string | undefined;
     remainCodes?: number | undefined;
 }>, "many">;