@logto/schemas 1.40.0 → 1.41.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/schemas",
-  "version": "1.40.0",
+  "version": "1.41.0",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "license": "MPL-2.0",
   "type": "module",
@@ -31,7 +31,7 @@
     "@types/inquirer": "^9.0.0",
     "@types/node": "^22.14.0",
     "@types/pluralize": "^0.0.33",
-    "@vitest/coverage-v8": "^3.1.1",
+    "@vitest/coverage-v8": "^4.1.8",
     "camelcase": "^8.0.0",
     "chalk": "^5.3.0",
     "eslint": "^8.56.0",
@@ -40,7 +40,7 @@
     "prettier": "^3.5.3",
     "roarr": "^7.11.0",
     "typescript": "^5.5.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.8"
   },
   "eslintConfig": {
     "extends": "@silverhand",
@@ -65,12 +65,12 @@
   "dependencies": {
     "@withtyped/server": "^0.14.0",
     "nanoid": "^5.0.9",
-    "@logto/connector-kit": "^5.0.1",
+    "@logto/connector-kit": "^5.1.0",
     "@logto/language-kit": "^1.3.0",
-    "@logto/core-kit": "^2.9.0",
-    "@logto/phrases-experience": "^1.13.2",
-    "@logto/phrases": "^1.28.0",
-    "@logto/shared": "^3.4.0"
+    "@logto/phrases": "^1.29.0",
+    "@logto/core-kit": "^2.11.0",
+    "@logto/phrases-experience": "^1.14.0",
+    "@logto/shared": "^3.4.1"
   },
   "peerDependencies": {
     "zod": "3.24.3"

package/tables/oidc_model_instances.sql

@@ -27,14 +27,6 @@ create index oidc_model_instances__model_name_payload_uid
     (payload->>'uid')
   );
 
-/* TODO: Consider dropping this full data index if the partial index proves to be effective and safe. */
-create index oidc_model_instances__model_name_payload_grant_id
-  on oidc_model_instances (
-    tenant_id,
-    model_name,
-    (payload->>'grantId')
-  );
-
 create index oidc_model_instances__model_name_payload_grant_id_partial
   on oidc_model_instances (tenant_id, model_name, (payload->>'grantId'))
   where payload ? 'grantId';

package/tables/sentinel_activities.sql

@@ -33,3 +33,7 @@ create index sentinel_activities__target_type_target_hash
 
 create index sentinel_activities__target_type_target_hash_action_action_result_decision
   on sentinel_activities (tenant_id, target_type, target_hash, action, action_result, decision);
+
+/** Supports the cross-tenant retention prune of stale activity rows by age. */
+create index sentinel_activities__created_at
+  on sentinel_activities (created_at);

package/tables/service_logs.sql

@@ -10,7 +10,7 @@ create table service_logs (
 create index service_logs__id
   on service_logs (id);
 
-create index service_logs__tenant_id__type
-  on service_logs (tenant_id, type);
+create index service_logs__tenant_id__type__created_at
+  on service_logs (tenant_id, type, created_at);
 
 /* no_after_each */

package/tables/sign_in_experiences.sql

@@ -32,9 +32,22 @@ create table sign_in_experiences (
   captcha_policy jsonb /* @use CaptchaPolicy */ not null default '{}'::jsonb,
   sentinel_policy jsonb /* @use SentinelPolicy */ not null default '{}'::jsonb,
   email_blocklist_policy jsonb /* @use EmailBlocklistPolicy */ not null default '{}'::jsonb,
+  verification_code_policy jsonb /* @use VerificationCodePolicy */ not null default '{}'::jsonb,
   forgot_password_methods jsonb /* @use ForgotPasswordMethods */ default '[]'::jsonb,
   passkey_sign_in jsonb /* @use PasskeySignIn */ not null default '{}'::jsonb,
-  /** Nullable by design: null keeps legacy full-catalog behavior and [] collects no custom profile fields. */
-  sign_up_profile_fields jsonb /* @use SignUpProfileFields */,
+  /** Nullable by design: null keeps legacy full-catalog behavior, and new rows default to [] to collect no custom profile fields. */
+  sign_up_profile_fields jsonb /* @use SignUpProfileFields */ default '[]'::jsonb,
+  password_expiration jsonb /* @use PasswordExpirationPolicy */ not null default '{}'::jsonb,
+  username_policy jsonb /* @use UsernamePolicy */ not null default ('{
+    "caseSensitive": true,
+    "minLength": 1,
+    "maxLength": 128,
+    "allowedChars": {
+      "lowercase": true,
+      "uppercase": true,
+      "numbers": true,
+      "underscore": true
+    }
+  }'::jsonb),
   primary key (tenant_id, id)
 );

package/tables/users.sql

@@ -22,7 +22,9 @@ create table users (
   logto_config jsonb /* @use JsonObject */ not null default '{}'::jsonb,
   mfa_verifications jsonb /* @use MfaVerifications */ not null default '[]'::jsonb,
   is_suspended boolean not null default false,
+  is_password_expired boolean not null default false,
   last_sign_in_at timestamptz,
+  password_updated_at timestamptz,
   created_at timestamptz not null default (now()),
   updated_at timestamptz not null default (now()),
   primary key (id),
@@ -44,6 +46,11 @@ create index users__name
 create index users_mfa_verifications_gin
   on users using gin (mfa_verifications jsonb_path_ops);
 
+/* Supports case-insensitive username lookups and case-flip conflict detection. */
+create index users__tenant_lower_username
+  on users (tenant_id, lower(username))
+  where username is not null;
+
 create trigger set_updated_at
   before update on users
   for each row