@logto/schemas 1.39.0 → 1.40.0

package/lib/types/logto-config/jwt-customizer.d.ts

@@ -1190,6 +1190,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
         pageRules: {
             path: string;
         }[];
+        additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
         customDomains?: {
             status: import("../../foundations/index.js").DomainStatus;
             domain: string;
@@ -1218,6 +1219,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
         pageRules: {
             path: string;
         }[];
+        additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
         customDomains?: {
             status: import("../../foundations/index.js").DomainStatus;
             domain: string;
@@ -1242,6 +1244,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
     } | null>;
     customData: ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     isThirdParty: ZodType<boolean, z.ZodTypeDef, boolean>;
+    appLevelAccessControlEnabled: ZodType<boolean, z.ZodTypeDef, boolean>;
     createdAt: ZodType<number, z.ZodTypeDef, number>;
 }, "secret">, "strip", z.ZodTypeAny, {
     type: import("../../db-entries/custom-types.js").ApplicationType;
@@ -1255,6 +1258,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
     customClientMetadata: import("../../foundations/index.js").CustomClientMetadata;
     protectedAppMetadata: import("../../foundations/index.js").ProtectedAppMetadata | null;
     isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
 }, {
     type: import("../../db-entries/custom-types.js").ApplicationType;
     name: string;
@@ -1267,6 +1271,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
     customClientMetadata: import("../../foundations/index.js").CustomClientMetadata;
     protectedAppMetadata: import("../../foundations/index.js").ProtectedAppMetadata | null;
     isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
 }>;
 export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
     script: z.ZodString;
@@ -2445,6 +2450,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2473,6 +2479,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2496,6 +2503,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -2524,6 +2532,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2547,6 +2556,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -2575,6 +2585,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2598,6 +2609,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         user: {
@@ -2696,6 +2708,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2719,6 +2732,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -2936,6 +2950,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2959,6 +2974,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -3180,6 +3196,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3203,6 +3220,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -3438,6 +3456,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3461,6 +3480,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -3662,6 +3682,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3690,6 +3711,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3713,6 +3735,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -3741,6 +3764,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3764,6 +3788,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -3792,6 +3817,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3815,6 +3841,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         application?: {
@@ -3845,6 +3872,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3868,6 +3896,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }, {
         application?: {
@@ -3898,6 +3927,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3921,6 +3951,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
@@ -3955,6 +3986,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3978,6 +4010,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     } | undefined;
     blockIssuanceOnError?: boolean | undefined;
@@ -4020,6 +4053,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -4043,6 +4077,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     } | undefined;
     blockIssuanceOnError?: boolean | undefined;
@@ -5235,6 +5270,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5263,6 +5299,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5286,6 +5323,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -5314,6 +5352,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5337,6 +5376,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -5365,6 +5405,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5388,6 +5429,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         user: {
@@ -5486,6 +5528,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5509,6 +5552,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -5726,6 +5770,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5749,6 +5794,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -5984,6 +6030,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6007,6 +6054,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -6242,6 +6290,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6265,6 +6314,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -6449,6 +6499,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6477,6 +6528,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6500,6 +6552,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -6528,6 +6581,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6551,6 +6605,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -6579,6 +6634,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6602,6 +6658,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         application?: {
@@ -6632,6 +6689,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6655,6 +6713,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }, {
         application?: {
@@ -6685,6 +6744,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6708,6 +6768,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }>;
     script: z.ZodString;
@@ -6750,6 +6811,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6773,6 +6835,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     };
     tokenType: LogtoJwtTokenKeyType.ClientCredentials;
@@ -6815,6 +6878,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6838,6 +6902,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     };
     tokenType: LogtoJwtTokenKeyType.ClientCredentials;

package/lib/types/saml-application.d.ts

@@ -101,6 +101,7 @@ export declare const samlApplicationResponseGuard: z.ZodObject<{
     customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     isThirdParty: z.ZodType<boolean, z.ZodTypeDef, boolean>;
+    appLevelAccessControlEnabled: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     attributeMapping: z.ZodType<Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "created_at" | "custom_data" | "identities" | "sso_identities" | "roles" | "organizations" | "organization_data" | "organization_roles", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "created_at" | "custom_data" | "identities" | "sso_identities" | "roles" | "organizations" | "organization_data" | "organization_roles", string>>>;
     entityId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     acsUrl: z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>;
@@ -124,6 +125,7 @@ export declare const samlApplicationResponseGuard: z.ZodObject<{
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     description: string | null;
     isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
     attributeMapping: import("../foundations/index.js").SamlAttributeMapping;
     entityId: string | null;
     acsUrl: import("../foundations/index.js").SamlAcsUrl | null;
@@ -138,6 +140,7 @@ export declare const samlApplicationResponseGuard: z.ZodObject<{
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     description: string | null;
     isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
     attributeMapping: import("../foundations/index.js").SamlAttributeMapping;
     entityId: string | null;
     acsUrl: import("../foundations/index.js").SamlAcsUrl | null;

package/lib/types/sign-in-experience.d.ts

@@ -35,7 +35,15 @@ export type FullSignInExperience = Omit<SignInExperience, 'forgotPasswordMethods
         domain?: string;
         mode?: RecaptchaEnterpriseMode;
     };
+    /**
+     * Custom profile fields selected for the sign-up (Collect user profile) flow.
+     */
     customProfileFields?: Readonly<CustomProfileField[]>;
+    /**
+     * Full custom profile field catalog used to resolve field metadata (for example `required`
+     * and `type`) outside the sign-up field list, such as the account center profile page.
+     */
+    customProfileFieldCatalog?: Readonly<CustomProfileField[]>;
 };
 export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
@@ -99,6 +107,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
         id: string;
         createdAt: number;
     } | null>;
+    customUiCsp: z.ZodType<import("../foundations/jsonb-types/index.js").CustomUiCsp, z.ZodTypeDef, import("../foundations/jsonb-types/index.js").CustomUiCsp>;
     passwordPolicy: z.ZodType<{
         length?: {
             min?: number | undefined;
@@ -699,6 +708,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
         mode?: RecaptchaEnterpriseMode | undefined;
     }>>;
     customProfileFields: z.ZodArray<import("../index.js").Guard<CustomProfileField>, "many">;
+    customProfileFieldCatalog: z.ZodOptional<z.ZodArray<import("../index.js").Guard<CustomProfileField>, "many">>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     tenantId: string;
@@ -718,6 +728,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     signInMode: import("../db-entries/custom-types.js").SignInMode;
     customContent: import("../foundations/jsonb-types/sign-in-experience.js").CustomContent;
     customUiAssets: import("../foundations/jsonb-types/sign-in-experience.js").CustomUiAssets | null;
+    customUiCsp: import("../foundations/jsonb-types/index.js").CustomUiCsp;
     passwordPolicy: import("../foundations/jsonb-types/logs.js").PartialPasswordPolicy;
     adaptiveMfa: import("../foundations/jsonb-types/sign-in-experience.js").AdaptiveMfa;
     singleSignOnEnabled: boolean;
@@ -897,6 +908,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
         domain?: string | undefined;
         mode?: RecaptchaEnterpriseMode | undefined;
     } | undefined;
+    customProfileFieldCatalog?: CustomProfileField[] | undefined;
 }, {
     id: string;
     tenantId: string;
@@ -916,6 +928,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     signInMode: import("../db-entries/custom-types.js").SignInMode;
     customContent: import("../foundations/jsonb-types/sign-in-experience.js").CustomContent;
     customUiAssets: import("../foundations/jsonb-types/sign-in-experience.js").CustomUiAssets | null;
+    customUiCsp: import("../foundations/jsonb-types/index.js").CustomUiCsp;
     passwordPolicy: import("../foundations/jsonb-types/logs.js").PartialPasswordPolicy;
     adaptiveMfa: import("../foundations/jsonb-types/sign-in-experience.js").AdaptiveMfa;
     singleSignOnEnabled: boolean;
@@ -1095,5 +1108,6 @@ export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
         domain?: string | undefined;
         mode?: RecaptchaEnterpriseMode | undefined;
     } | undefined;
+    customProfileFieldCatalog?: CustomProfileField[] | undefined;
 }>;
 export {};

package/lib/types/sign-in-experience.js

@@ -30,4 +30,5 @@ export const fullSignInExperienceGuard = SignInExperiences.guard
     })
         .optional(),
     customProfileFields: CustomProfileFields.guard.array(),
+    customProfileFieldCatalog: CustomProfileFields.guard.array().optional(),
 });