@logto/schemas 1.41.0 → 1.43.0

package/lib/db-entries/cimd-organization-scope.d.ts

@@ -0,0 +1,20 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The organization scopes (permissions) that client ID metadata document (CIMD) clients of the tenant can request. Rows are an allowlist: an empty table allows nothing (deny-all), and an unrestricted state is not expressible.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link CimdOrganizationScope} for the original type.
+ */
+export type CreateCimdOrganizationScope = {
+    tenantId?: string;
+    /** The globally unique identifier of the organization scope. */
+    organizationScopeId: string;
+};
+/** The organization scopes (permissions) that client ID metadata document (CIMD) clients of the tenant can request. Rows are an allowlist: an empty table allows nothing (deny-all), and an unrestricted state is not expressible. */
+export type CimdOrganizationScope = {
+    tenantId: string;
+    /** The globally unique identifier of the organization scope. */
+    organizationScopeId: string;
+};
+export type CimdOrganizationScopeKeys = 'tenantId' | 'organizationScopeId';
+export declare const CimdOrganizationScopes: GeneratedSchema<CimdOrganizationScopeKeys, CreateCimdOrganizationScope, CimdOrganizationScope, 'cimd_organization_scopes', 'cimd_organization_scope'>;

package/lib/db-entries/cimd-organization-scope.js

@@ -0,0 +1,25 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    organizationScopeId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    organizationScopeId: z.string().min(1).max(21),
+});
+export const CimdOrganizationScopes = Object.freeze({
+    table: 'cimd_organization_scopes',
+    tableSingular: 'cimd_organization_scope',
+    fields: {
+        tenantId: 'tenant_id',
+        organizationScopeId: 'organization_scope_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'organizationScopeId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/cimd-resource-scope.d.ts

@@ -0,0 +1,20 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The API resource scopes (permissions) that client ID metadata document (CIMD) clients of the tenant can request. Rows are an allowlist: an empty table allows nothing (deny-all), and an unrestricted state is not expressible.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link CimdResourceScope} for the original type.
+ */
+export type CreateCimdResourceScope = {
+    tenantId?: string;
+    /** The globally unique identifier of the API resource scope. */
+    scopeId: string;
+};
+/** The API resource scopes (permissions) that client ID metadata document (CIMD) clients of the tenant can request. Rows are an allowlist: an empty table allows nothing (deny-all), and an unrestricted state is not expressible. */
+export type CimdResourceScope = {
+    tenantId: string;
+    /** The globally unique identifier of the API resource scope. */
+    scopeId: string;
+};
+export type CimdResourceScopeKeys = 'tenantId' | 'scopeId';
+export declare const CimdResourceScopes: GeneratedSchema<CimdResourceScopeKeys, CreateCimdResourceScope, CimdResourceScope, 'cimd_resource_scopes', 'cimd_resource_scope'>;

package/lib/db-entries/cimd-resource-scope.js

@@ -0,0 +1,25 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    scopeId: z.string().min(1).max(21),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    scopeId: z.string().min(1).max(21),
+});
+export const CimdResourceScopes = Object.freeze({
+    table: 'cimd_resource_scopes',
+    tableSingular: 'cimd_resource_scope',
+    fields: {
+        tenantId: 'tenant_id',
+        scopeId: 'scope_id',
+    },
+    fieldKeys: [
+        'tenantId',
+        'scopeId',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/cimd-user-scope.d.ts

@@ -0,0 +1,20 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * The user scopes (permissions) that client ID metadata document (CIMD) clients of the tenant can request. Rows are an allowlist: an empty table allows nothing (deny-all), and an unrestricted state is not expressible.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link CimdUserScope} for the original type.
+ */
+export type CreateCimdUserScope = {
+    tenantId?: string;
+    /** The unique UserScope enum value @see (@logto/core-kit/open-id.js) for more details */
+    userScope: string;
+};
+/** The user scopes (permissions) that client ID metadata document (CIMD) clients of the tenant can request. Rows are an allowlist: an empty table allows nothing (deny-all), and an unrestricted state is not expressible. */
+export type CimdUserScope = {
+    tenantId: string;
+    /** The unique UserScope enum value @see (@logto/core-kit/open-id.js) for more details */
+    userScope: string;
+};
+export type CimdUserScopeKeys = 'tenantId' | 'userScope';
+export declare const CimdUserScopes: GeneratedSchema<CimdUserScopeKeys, CreateCimdUserScope, CimdUserScope, 'cimd_user_scopes', 'cimd_user_scope'>;

package/lib/db-entries/cimd-user-scope.js

@@ -0,0 +1,25 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    userScope: z.string().min(1).max(64),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    userScope: z.string().min(1).max(64),
+});
+export const CimdUserScopes = Object.freeze({
+    table: 'cimd_user_scopes',
+    tableSingular: 'cimd_user_scope',
+    fields: {
+        tenantId: 'tenant_id',
+        userScope: 'user_scope',
+    },
+    fieldKeys: [
+        'tenantId',
+        'userScope',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/domain.d.ts

@@ -1,4 +1,4 @@
-import { DomainStatus, DomainDnsRecords, CloudflareData, GeneratedSchema } from './../foundations/index.js';
+import { DomainStatus, DomainDnsRecords, DomainVerificationFiles, CloudflareData, GeneratedSchema } from './../foundations/index.js';
 /**
  *
  * @remarks This is a type for database creation.
@@ -11,6 +11,7 @@ export type CreateDomain = {
     status?: DomainStatus;
     errorMessage?: string | null;
     dnsRecords?: DomainDnsRecords;
+    verificationFiles?: DomainVerificationFiles;
     cloudflareData?: CloudflareData | null;
     updatedAt?: number;
     createdAt?: number;
@@ -22,9 +23,10 @@ export type Domain = {
     status: DomainStatus;
     errorMessage: string | null;
     dnsRecords: DomainDnsRecords;
+    verificationFiles: DomainVerificationFiles;
     cloudflareData: CloudflareData | null;
     updatedAt: number;
     createdAt: number;
 };
-export type DomainKeys = 'tenantId' | 'id' | 'domain' | 'status' | 'errorMessage' | 'dnsRecords' | 'cloudflareData' | 'updatedAt' | 'createdAt';
+export type DomainKeys = 'tenantId' | 'id' | 'domain' | 'status' | 'errorMessage' | 'dnsRecords' | 'verificationFiles' | 'cloudflareData' | 'updatedAt' | 'createdAt';
 export declare const Domains: GeneratedSchema<DomainKeys, CreateDomain, Domain, 'domains', 'domain'>;

package/lib/db-entries/domain.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { domainStatusGuard, domainDnsRecordsGuard, cloudflareDataGuard } from './../foundations/index.js';
+import { domainStatusGuard, domainDnsRecordsGuard, domainVerificationFilesGuard, cloudflareDataGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
@@ -8,6 +8,7 @@ const createGuard = z.object({
     status: domainStatusGuard.optional(),
     errorMessage: z.string().max(1024).nullable().optional(),
     dnsRecords: domainDnsRecordsGuard.optional(),
+    verificationFiles: domainVerificationFilesGuard.optional(),
     cloudflareData: cloudflareDataGuard.nullable().optional(),
     updatedAt: z.number().optional(),
     createdAt: z.number().optional(),
@@ -19,6 +20,7 @@ const guard = z.object({
     status: domainStatusGuard,
     errorMessage: z.string().max(1024).nullable(),
     dnsRecords: domainDnsRecordsGuard,
+    verificationFiles: domainVerificationFilesGuard,
     cloudflareData: cloudflareDataGuard.nullable(),
     updatedAt: z.number(),
     createdAt: z.number(),
@@ -33,6 +35,7 @@ export const Domains = Object.freeze({
         status: 'status',
         errorMessage: 'error_message',
         dnsRecords: 'dns_records',
+        verificationFiles: 'verification_files',
         cloudflareData: 'cloudflare_data',
         updatedAt: 'updated_at',
         createdAt: 'created_at',
@@ -44,6 +47,7 @@ export const Domains = Object.freeze({
         'status',
         'errorMessage',
         'dnsRecords',
+        'verificationFiles',
         'cloudflareData',
         'updatedAt',
         'createdAt',

package/lib/db-entries/index.d.ts

@@ -19,6 +19,12 @@ export * from './application-user-consent-user-scope.js';
 export * from './application.js';
 export * from './applications-role.js';
 export * from './captcha-provider.js';
+export * from './cimd-grant-client-snapshot.js';
+export * from './cimd-grant-organization.js';
+export * from './cimd-organization-resource-scope.js';
+export * from './cimd-organization-scope.js';
+export * from './cimd-resource-scope.js';
+export * from './cimd-user-scope.js';
 export * from './connector.js';
 export * from './custom-phrase.js';
 export * from './custom-profile-field.js';
@@ -55,6 +61,7 @@ export * from './roles-scope.js';
 export * from './saml-application-config.js';
 export * from './saml-application-secret.js';
 export * from './saml-application-session.js';
+export * from './saml-sso-connector-signing-key.js';
 export * from './scope.js';
 export * from './secret-enterprise-sso-connector-relation.js';
 export * from './secret-social-connector-relation.js';
@@ -66,6 +73,7 @@ export * from './sso-connector-idp-initiated-auth-config.js';
 export * from './sso-connector.js';
 export * from './subject-token.js';
 export * from './system.js';
+export * from './trusted-device.js';
 export * from './user-geo-location.js';
 export * from './user-sign-in-country.js';
 export * from './user-sso-identity.js';

package/lib/db-entries/index.js

@@ -20,6 +20,12 @@ export * from './application-user-consent-user-scope.js';
 export * from './application.js';
 export * from './applications-role.js';
 export * from './captcha-provider.js';
+export * from './cimd-grant-client-snapshot.js';
+export * from './cimd-grant-organization.js';
+export * from './cimd-organization-resource-scope.js';
+export * from './cimd-organization-scope.js';
+export * from './cimd-resource-scope.js';
+export * from './cimd-user-scope.js';
 export * from './connector.js';
 export * from './custom-phrase.js';
 export * from './custom-profile-field.js';
@@ -56,6 +62,7 @@ export * from './roles-scope.js';
 export * from './saml-application-config.js';
 export * from './saml-application-secret.js';
 export * from './saml-application-session.js';
+export * from './saml-sso-connector-signing-key.js';
 export * from './scope.js';
 export * from './secret-enterprise-sso-connector-relation.js';
 export * from './secret-social-connector-relation.js';
@@ -67,6 +74,7 @@ export * from './sso-connector-idp-initiated-auth-config.js';
 export * from './sso-connector.js';
 export * from './subject-token.js';
 export * from './system.js';
+export * from './trusted-device.js';
 export * from './user-geo-location.js';
 export * from './user-sign-in-country.js';
 export * from './user-sso-identity.js';

package/lib/db-entries/oidc-session-extension.d.ts

@@ -10,6 +10,7 @@ export type CreateOidcSessionExtension = {
     accountId: string;
     lastSubmission?: JsonObject;
     clientId?: string | null;
+    cimdClientId?: string | null;
     createdAt?: number;
     updatedAt?: number;
 };
@@ -19,8 +20,9 @@ export type OidcSessionExtension = {
     accountId: string;
     lastSubmission: JsonObject;
     clientId: string | null;
+    cimdClientId: string | null;
     createdAt: number;
     updatedAt: number;
 };
-export type OidcSessionExtensionKeys = 'tenantId' | 'sessionUid' | 'accountId' | 'lastSubmission' | 'clientId' | 'createdAt' | 'updatedAt';
+export type OidcSessionExtensionKeys = 'tenantId' | 'sessionUid' | 'accountId' | 'lastSubmission' | 'clientId' | 'cimdClientId' | 'createdAt' | 'updatedAt';
 export declare const OidcSessionExtensions: GeneratedSchema<OidcSessionExtensionKeys, CreateOidcSessionExtension, OidcSessionExtension, 'oidc_session_extensions', 'oidc_session_extension'>;

package/lib/db-entries/oidc-session-extension.js

@@ -7,6 +7,7 @@ const createGuard = z.object({
     accountId: z.string().min(1).max(12),
     lastSubmission: jsonObjectGuard.optional(),
     clientId: z.string().max(21).nullable().optional(),
+    cimdClientId: z.string().max(2048).nullable().optional(),
     createdAt: z.number().optional(),
     updatedAt: z.number().optional(),
 });
@@ -16,6 +17,7 @@ const guard = z.object({
     accountId: z.string().min(1).max(12),
     lastSubmission: jsonObjectGuard,
     clientId: z.string().max(21).nullable(),
+    cimdClientId: z.string().max(2048).nullable(),
     createdAt: z.number(),
     updatedAt: z.number(),
 });
@@ -28,6 +30,7 @@ export const OidcSessionExtensions = Object.freeze({
         accountId: 'account_id',
         lastSubmission: 'last_submission',
         clientId: 'client_id',
+        cimdClientId: 'cimd_client_id',
         createdAt: 'created_at',
         updatedAt: 'updated_at',
     },
@@ -37,6 +40,7 @@ export const OidcSessionExtensions = Object.freeze({
         'accountId',
         'lastSubmission',
         'clientId',
+        'cimdClientId',
         'createdAt',
         'updatedAt',
     ],

package/lib/db-entries/organization.d.ts

@@ -17,6 +17,8 @@ export type CreateOrganization = {
     customData?: JsonObject;
     /** Whether multi-factor authentication configuration is required for the members of the organization. */
     isMfaRequired?: boolean;
+    /** Whether trusted devices are allowed for members of the organization. */
+    isTrustedDeviceAllowed?: boolean;
     /** The organization's branding color configuration. */
     color?: PartialColor;
     /** The organization's branding configuration. */
@@ -39,6 +41,8 @@ export type Organization = {
     customData: JsonObject;
     /** Whether multi-factor authentication configuration is required for the members of the organization. */
     isMfaRequired: boolean;
+    /** Whether trusted devices are allowed for members of the organization. */
+    isTrustedDeviceAllowed: boolean;
     /** The organization's branding color configuration. */
     color: PartialColor;
     /** The organization's branding configuration. */
@@ -48,5 +52,5 @@ export type Organization = {
     /** When the organization was created. */
     createdAt: number;
 };
-export type OrganizationKeys = 'tenantId' | 'id' | 'name' | 'description' | 'customData' | 'isMfaRequired' | 'color' | 'branding' | 'customCss' | 'createdAt';
+export type OrganizationKeys = 'tenantId' | 'id' | 'name' | 'description' | 'customData' | 'isMfaRequired' | 'isTrustedDeviceAllowed' | 'color' | 'branding' | 'customCss' | 'createdAt';
 export declare const Organizations: GeneratedSchema<OrganizationKeys, CreateOrganization, Organization, 'organizations', 'organization'>;

package/lib/db-entries/organization.js

@@ -8,6 +8,7 @@ const createGuard = z.object({
     description: z.string().max(256).nullable().optional(),
     customData: jsonObjectGuard.optional(),
     isMfaRequired: z.boolean().optional(),
+    isTrustedDeviceAllowed: z.boolean().optional(),
     color: partialColorGuard.optional(),
     branding: brandingGuard.optional(),
     customCss: z.string().nullable().optional(),
@@ -20,6 +21,7 @@ const guard = z.object({
     description: z.string().max(256).nullable(),
     customData: jsonObjectGuard,
     isMfaRequired: z.boolean(),
+    isTrustedDeviceAllowed: z.boolean(),
     color: partialColorGuard,
     branding: brandingGuard,
     customCss: z.string().nullable(),
@@ -35,6 +37,7 @@ export const Organizations = Object.freeze({
         description: 'description',
         customData: 'custom_data',
         isMfaRequired: 'is_mfa_required',
+        isTrustedDeviceAllowed: 'is_trusted_device_allowed',
         color: 'color',
         branding: 'branding',
         customCss: 'custom_css',
@@ -47,6 +50,7 @@ export const Organizations = Object.freeze({
         'description',
         'customData',
         'isMfaRequired',
+        'isTrustedDeviceAllowed',
         'color',
         'branding',
         'customCss',

package/lib/db-entries/saml-sso-connector-signing-key.d.ts

@@ -0,0 +1,32 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link SamlSsoConnectorSigningKey} for the original type.
+ */
+export type CreateSamlSsoConnectorSigningKey = {
+    id: string;
+    tenantId?: string;
+    ssoConnectorId: string;
+    /** The SP private key (plaintext PEM) used to sign the SAML AuthnRequest. Tenant-isolated by RLS and never returned by the API. */
+    privateKey: string;
+    /** The PEM-encoded self-signed SP certificate matching the private key. Public and safe to expose. */
+    certificate: string;
+    createdAt?: number;
+    expiresAt: number;
+    active: boolean;
+};
+export type SamlSsoConnectorSigningKey = {
+    id: string;
+    tenantId: string;
+    ssoConnectorId: string;
+    /** The SP private key (plaintext PEM) used to sign the SAML AuthnRequest. Tenant-isolated by RLS and never returned by the API. */
+    privateKey: string;
+    /** The PEM-encoded self-signed SP certificate matching the private key. Public and safe to expose. */
+    certificate: string;
+    createdAt: number;
+    expiresAt: number;
+    active: boolean;
+};
+export type SamlSsoConnectorSigningKeyKeys = 'id' | 'tenantId' | 'ssoConnectorId' | 'privateKey' | 'certificate' | 'createdAt' | 'expiresAt' | 'active';
+export declare const SamlSsoConnectorSigningKeys: GeneratedSchema<SamlSsoConnectorSigningKeyKeys, CreateSamlSsoConnectorSigningKey, SamlSsoConnectorSigningKey, 'saml_sso_connector_signing_keys', 'saml_sso_connector_signing_key'>;

package/lib/db-entries/saml-sso-connector-signing-key.js

@@ -0,0 +1,49 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    id: z.string().min(1).max(21),
+    tenantId: z.string().max(21).optional(),
+    ssoConnectorId: z.string().min(1).max(128),
+    privateKey: z.string().min(1),
+    certificate: z.string().min(1),
+    createdAt: z.number().optional(),
+    expiresAt: z.number(),
+    active: z.boolean(),
+});
+const guard = z.object({
+    id: z.string().min(1).max(21),
+    tenantId: z.string().max(21),
+    ssoConnectorId: z.string().min(1).max(128),
+    privateKey: z.string().min(1),
+    certificate: z.string().min(1),
+    createdAt: z.number(),
+    expiresAt: z.number(),
+    active: z.boolean(),
+});
+export const SamlSsoConnectorSigningKeys = Object.freeze({
+    table: 'saml_sso_connector_signing_keys',
+    tableSingular: 'saml_sso_connector_signing_key',
+    fields: {
+        id: 'id',
+        tenantId: 'tenant_id',
+        ssoConnectorId: 'sso_connector_id',
+        privateKey: 'private_key',
+        certificate: 'certificate',
+        createdAt: 'created_at',
+        expiresAt: 'expires_at',
+        active: 'active',
+    },
+    fieldKeys: [
+        'id',
+        'tenantId',
+        'ssoConnectorId',
+        'privateKey',
+        'certificate',
+        'createdAt',
+        'expiresAt',
+        'active',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/sign-in-experience.d.ts

@@ -1,4 +1,4 @@
-import { Color, Branding, LanguageInfo, SignIn, SignUp, SocialSignIn, ConnectorTargets, CustomContent, CustomUiAssets, CustomUiCsp, PartialPasswordPolicy, Mfa, AdaptiveMfa, CaptchaPolicy, SentinelPolicy, EmailBlocklistPolicy, VerificationCodePolicy, ForgotPasswordMethods, PasskeySignIn, SignUpProfileFields, PasswordExpirationPolicy, UsernamePolicy, GeneratedSchema } from './../foundations/index.js';
+import { Color, Branding, LanguageInfo, SignIn, SignUp, SocialSignIn, ConnectorTargets, CustomContent, CustomUiAssets, CustomUiCsp, PartialPasswordPolicy, Mfa, AdaptiveMfa, TrustedDevicePolicy, CaptchaPolicy, SentinelPolicy, EmailBlocklistPolicy, VerificationCodePolicy, ForgotPasswordMethods, PasskeySignIn, SignUpProfileFields, PasswordExpirationPolicy, UsernamePolicy, GeneratedSchema } from './../foundations/index.js';
 import { AgreeToTermsPolicy, SignInMode } from './custom-types.js';
 /**
  *
@@ -28,6 +28,7 @@ export type CreateSignInExperience = {
     passwordPolicy?: PartialPasswordPolicy;
     mfa?: Mfa;
     adaptiveMfa?: AdaptiveMfa;
+    trustedDevice?: TrustedDevicePolicy;
     singleSignOnEnabled?: boolean;
     supportEmail?: string | null;
     supportWebsiteUrl?: string | null;
@@ -66,6 +67,7 @@ export type SignInExperience = {
     passwordPolicy: PartialPasswordPolicy;
     mfa: Mfa;
     adaptiveMfa: AdaptiveMfa;
+    trustedDevice: TrustedDevicePolicy;
     singleSignOnEnabled: boolean;
     supportEmail: string | null;
     supportWebsiteUrl: string | null;
@@ -81,5 +83,5 @@ export type SignInExperience = {
     passwordExpiration: PasswordExpirationPolicy;
     usernamePolicy: UsernamePolicy;
 };
-export type SignInExperienceKeys = 'tenantId' | 'id' | 'color' | 'branding' | 'hideLogtoBranding' | 'languageInfo' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'agreeToTermsPolicy' | 'signIn' | 'signUp' | 'socialSignIn' | 'socialSignInConnectorTargets' | 'signInMode' | 'customCss' | 'customContent' | 'customUiAssets' | 'customUiCsp' | 'passwordPolicy' | 'mfa' | 'adaptiveMfa' | 'singleSignOnEnabled' | 'supportEmail' | 'supportWebsiteUrl' | 'unknownSessionRedirectUrl' | 'captchaPolicy' | 'sentinelPolicy' | 'emailBlocklistPolicy' | 'verificationCodePolicy' | 'forgotPasswordMethods' | 'passkeySignIn' | 'signUpProfileFields' | 'passwordExpiration' | 'usernamePolicy';
+export type SignInExperienceKeys = 'tenantId' | 'id' | 'color' | 'branding' | 'hideLogtoBranding' | 'languageInfo' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'agreeToTermsPolicy' | 'signIn' | 'signUp' | 'socialSignIn' | 'socialSignInConnectorTargets' | 'signInMode' | 'customCss' | 'customContent' | 'customUiAssets' | 'customUiCsp' | 'passwordPolicy' | 'mfa' | 'adaptiveMfa' | 'trustedDevice' | 'singleSignOnEnabled' | 'supportEmail' | 'supportWebsiteUrl' | 'unknownSessionRedirectUrl' | 'captchaPolicy' | 'sentinelPolicy' | 'emailBlocklistPolicy' | 'verificationCodePolicy' | 'forgotPasswordMethods' | 'passkeySignIn' | 'signUpProfileFields' | 'passwordExpiration' | 'usernamePolicy';
 export declare const SignInExperiences: GeneratedSchema<SignInExperienceKeys, CreateSignInExperience, SignInExperience, 'sign_in_experiences', 'sign_in_experience'>;

package/lib/db-entries/sign-in-experience.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { colorGuard, brandingGuard, languageInfoGuard, signInGuard, signUpGuard, socialSignInGuard, connectorTargetsGuard, customContentGuard, customUiAssetsGuard, customUiCspGuard, partialPasswordPolicyGuard, mfaGuard, adaptiveMfaGuard, captchaPolicyGuard, sentinelPolicyGuard, emailBlocklistPolicyGuard, verificationCodePolicyGuard, forgotPasswordMethodsGuard, passkeySignInGuard, signUpProfileFieldsGuard, passwordExpirationPolicyGuard, usernamePolicyGuard } from './../foundations/index.js';
+import { colorGuard, brandingGuard, languageInfoGuard, signInGuard, signUpGuard, socialSignInGuard, connectorTargetsGuard, customContentGuard, customUiAssetsGuard, customUiCspGuard, partialPasswordPolicyGuard, mfaGuard, adaptiveMfaGuard, trustedDevicePolicyGuard, captchaPolicyGuard, sentinelPolicyGuard, emailBlocklistPolicyGuard, verificationCodePolicyGuard, forgotPasswordMethodsGuard, passkeySignInGuard, signUpProfileFieldsGuard, passwordExpirationPolicyGuard, usernamePolicyGuard } from './../foundations/index.js';
 import { AgreeToTermsPolicy, SignInMode } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
@@ -24,6 +24,7 @@ const createGuard = z.object({
     passwordPolicy: partialPasswordPolicyGuard.optional(),
     mfa: mfaGuard.optional(),
     adaptiveMfa: adaptiveMfaGuard.optional(),
+    trustedDevice: trustedDevicePolicyGuard.optional(),
     singleSignOnEnabled: z.boolean().optional(),
     supportEmail: z.string().nullable().optional(),
     supportWebsiteUrl: z.string().nullable().optional(),
@@ -60,6 +61,7 @@ const guard = z.object({
     passwordPolicy: partialPasswordPolicyGuard,
     mfa: mfaGuard,
     adaptiveMfa: adaptiveMfaGuard,
+    trustedDevice: trustedDevicePolicyGuard,
     singleSignOnEnabled: z.boolean(),
     supportEmail: z.string().nullable(),
     supportWebsiteUrl: z.string().nullable(),
@@ -99,6 +101,7 @@ export const SignInExperiences = Object.freeze({
         passwordPolicy: 'password_policy',
         mfa: 'mfa',
         adaptiveMfa: 'adaptive_mfa',
+        trustedDevice: 'trusted_device',
         singleSignOnEnabled: 'single_sign_on_enabled',
         supportEmail: 'support_email',
         supportWebsiteUrl: 'support_website_url',
@@ -135,6 +138,7 @@ export const SignInExperiences = Object.freeze({
         'passwordPolicy',
         'mfa',
         'adaptiveMfa',
+        'trustedDevice',
         'singleSignOnEnabled',
         'supportEmail',
         'supportWebsiteUrl',

package/lib/db-entries/trusted-device.d.ts

@@ -0,0 +1,36 @@
+import { BufferLike, GeneratedSchema } from './../foundations/index.js';
+/**
+ * A revocable server-side credential that can fulfill sign-in MFA for a user.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link TrustedDevice} for the original type.
+ */
+export type CreateTrustedDevice = {
+    tenantId?: string;
+    id: string;
+    userId: string;
+    secretHash: BufferLike;
+    userAgent?: string | null;
+    ip?: string | null;
+    country?: string | null;
+    city?: string | null;
+    createdAt?: number;
+    lastUsedAt?: number;
+    expiresAt: number;
+};
+/** A revocable server-side credential that can fulfill sign-in MFA for a user. */
+export type TrustedDevice = {
+    tenantId: string;
+    id: string;
+    userId: string;
+    secretHash: BufferLike;
+    userAgent: string | null;
+    ip: string | null;
+    country: string | null;
+    city: string | null;
+    createdAt: number;
+    lastUsedAt: number;
+    expiresAt: number;
+};
+export type TrustedDeviceKeys = 'tenantId' | 'id' | 'userId' | 'secretHash' | 'userAgent' | 'ip' | 'country' | 'city' | 'createdAt' | 'lastUsedAt' | 'expiresAt';
+export declare const TrustedDevices: GeneratedSchema<TrustedDeviceKeys, CreateTrustedDevice, TrustedDevice, 'trusted_devices', 'trusted_device'>;

package/lib/db-entries/trusted-device.js

@@ -0,0 +1,62 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+import { bufferLikeGuard } from './../foundations/index.js';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    id: z.string().min(1).max(21),
+    userId: z.string().min(1).max(12),
+    secretHash: bufferLikeGuard,
+    userAgent: z.string().nullable().optional(),
+    ip: z.string().nullable().optional(),
+    country: z.string().max(16).nullable().optional(),
+    city: z.string().nullable().optional(),
+    createdAt: z.number().optional(),
+    lastUsedAt: z.number().optional(),
+    expiresAt: z.number(),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    id: z.string().min(1).max(21),
+    userId: z.string().min(1).max(12),
+    secretHash: bufferLikeGuard,
+    userAgent: z.string().nullable(),
+    ip: z.string().nullable(),
+    country: z.string().max(16).nullable(),
+    city: z.string().nullable(),
+    createdAt: z.number(),
+    lastUsedAt: z.number(),
+    expiresAt: z.number(),
+});
+export const TrustedDevices = Object.freeze({
+    table: 'trusted_devices',
+    tableSingular: 'trusted_device',
+    fields: {
+        tenantId: 'tenant_id',
+        id: 'id',
+        userId: 'user_id',
+        secretHash: 'secret_hash',
+        userAgent: 'user_agent',
+        ip: 'ip',
+        country: 'country',
+        city: 'city',
+        createdAt: 'created_at',
+        lastUsedAt: 'last_used_at',
+        expiresAt: 'expires_at',
+    },
+    fieldKeys: [
+        'tenantId',
+        'id',
+        'userId',
+        'secretHash',
+        'userAgent',
+        'ip',
+        'country',
+        'city',
+        'createdAt',
+        'lastUsedAt',
+        'expiresAt',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/user.d.ts

@@ -19,6 +19,7 @@ export type CreateUser = {
     /** Additional OpenID Connect standard claims that are not included in user's properties. */
     profile?: UserProfile;
     applicationId?: string | null;
+    cimdClientId?: string | null;
     identities?: Identities;
     customData?: JsonObject;
     logtoConfig?: JsonObject;
@@ -44,6 +45,7 @@ export type User = {
     /** Additional OpenID Connect standard claims that are not included in user's properties. */
     profile: UserProfile;
     applicationId: string | null;
+    cimdClientId: string | null;
     identities: Identities;
     customData: JsonObject;
     logtoConfig: JsonObject;
@@ -55,5 +57,5 @@ export type User = {
     createdAt: number;
     updatedAt: number;
 };
-export type UserKeys = 'tenantId' | 'id' | 'username' | 'primaryEmail' | 'primaryPhone' | 'passwordEncrypted' | 'passwordEncryptionMethod' | 'name' | 'avatar' | 'profile' | 'applicationId' | 'identities' | 'customData' | 'logtoConfig' | 'mfaVerifications' | 'isSuspended' | 'isPasswordExpired' | 'lastSignInAt' | 'passwordUpdatedAt' | 'createdAt' | 'updatedAt';
+export type UserKeys = 'tenantId' | 'id' | 'username' | 'primaryEmail' | 'primaryPhone' | 'passwordEncrypted' | 'passwordEncryptionMethod' | 'name' | 'avatar' | 'profile' | 'applicationId' | 'cimdClientId' | 'identities' | 'customData' | 'logtoConfig' | 'mfaVerifications' | 'isSuspended' | 'isPasswordExpired' | 'lastSignInAt' | 'passwordUpdatedAt' | 'createdAt' | 'updatedAt';
 export declare const Users: GeneratedSchema<UserKeys, CreateUser, User, 'users', 'user'>;