@logto/schemas 1.41.0 → 1.43.0

package/lib/types/logto-config/jwt-customizer.d.ts

@@ -92,6 +92,7 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
         }>;
     }>>;
     applicationId: ZodType<string | null, z.ZodTypeDef, string | null>;
+    cimdClientId: ZodType<string | null, z.ZodTypeDef, string | null>;
     identities: ZodType<Record<string, {
         userId: string;
         details?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
@@ -164,7 +165,7 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
     passwordUpdatedAt: ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: ZodType<number, z.ZodTypeDef, number>;
     updatedAt: ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "lastSignInAt" | "primaryEmail" | "primaryPhone" | "isSuspended"> & {
+}, "name" | "id" | "applicationId" | "cimdClientId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "lastSignInAt" | "primaryEmail" | "primaryPhone" | "isSuspended"> & {
     hasPassword: z.ZodBoolean;
     ssoIdentities: z.ZodArray<z.ZodObject<Pick<{
         tenantId: ZodType<string, z.ZodTypeDef, string>;
@@ -246,6 +247,7 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
         description: ZodType<string | null, z.ZodTypeDef, string | null>;
         customData: ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
         isMfaRequired: ZodType<boolean, z.ZodTypeDef, boolean>;
+        isTrustedDeviceAllowed: ZodType<boolean, z.ZodTypeDef, boolean>;
         color: ZodType<Partial<{
             primaryColor: string;
             isDarkModeEnabled: boolean;
@@ -294,6 +296,7 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
     name: string | null;
     id: string;
     applicationId: string | null;
+    cimdClientId: string | null;
     username: string | null;
     createdAt: number;
     profile: import("../../foundations/index.js").UserProfile;
@@ -338,6 +341,7 @@ export declare const jwtCustomizerUserContextGuard: z.ZodObject<Pick<{
     name: string | null;
     id: string;
     applicationId: string | null;
+    cimdClientId: string | null;
     username: string | null;
     createdAt: number;
     profile: import("../../foundations/index.js").UserProfile;
@@ -867,10 +871,13 @@ export declare const jwtCustomizerUserInteractionContextGuard: z.ZodObject<{
         }>;
         oneTimeTokenContext: z.ZodOptional<z.ZodObject<{
             jitOrganizationIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            interactionEvent: z.ZodOptional<z.ZodNativeEnum<typeof InteractionEvent>>;
         }, "strip", z.ZodTypeAny, {
             jitOrganizationIds?: string[] | undefined;
+            interactionEvent?: InteractionEvent | undefined;
         }, {
             jitOrganizationIds?: string[] | undefined;
+            interactionEvent?: InteractionEvent | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         type: VerificationType.OneTimeToken;
@@ -882,6 +889,7 @@ export declare const jwtCustomizerUserInteractionContextGuard: z.ZodObject<{
         verified: boolean;
         oneTimeTokenContext?: {
             jitOrganizationIds?: string[] | undefined;
+            interactionEvent?: InteractionEvent | undefined;
         } | undefined;
     }, {
         type: VerificationType.OneTimeToken;
@@ -893,6 +901,7 @@ export declare const jwtCustomizerUserInteractionContextGuard: z.ZodObject<{
         verified: boolean;
         oneTimeTokenContext?: {
             jitOrganizationIds?: string[] | undefined;
+            interactionEvent?: InteractionEvent | undefined;
         } | undefined;
     }>, z.ZodObject<Omit<{
         id: z.ZodString;
@@ -986,6 +995,7 @@ export declare const jwtCustomizerUserInteractionContextGuard: z.ZodObject<{
         verified: boolean;
         oneTimeTokenContext?: {
             jitOrganizationIds?: string[] | undefined;
+            interactionEvent?: InteractionEvent | undefined;
         } | undefined;
     } | {
         type: VerificationType.Password;
@@ -1100,6 +1110,7 @@ export declare const jwtCustomizerUserInteractionContextGuard: z.ZodObject<{
         verified: boolean;
         oneTimeTokenContext?: {
             jitOrganizationIds?: string[] | undefined;
+            interactionEvent?: InteractionEvent | undefined;
         } | undefined;
     } | {
         type: VerificationType.Password;
@@ -1291,6 +1302,7 @@ export declare const jwtCustomizerOrganizationContextGuard: z.ZodObject<Pick<{
     description: ZodType<string | null, z.ZodTypeDef, string | null>;
     customData: ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     isMfaRequired: ZodType<boolean, z.ZodTypeDef, boolean>;
+    isTrustedDeviceAllowed: ZodType<boolean, z.ZodTypeDef, boolean>;
     color: ZodType<Partial<{
         primaryColor: string;
         isDarkModeEnabled: boolean;
@@ -1349,8 +1361,8 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -1361,8 +1373,8 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -1372,6 +1384,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             name: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             id: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
             applicationId: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+            cimdClientId: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             username: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             createdAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
             profile: z.ZodOptional<ZodType<Partial<{
@@ -1510,6 +1523,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 description: ZodType<string | null, z.ZodTypeDef, string | null>;
                 customData: ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
                 isMfaRequired: ZodType<boolean, z.ZodTypeDef, boolean>;
+                isTrustedDeviceAllowed: ZodType<boolean, z.ZodTypeDef, boolean>;
                 color: ZodType<Partial<{
                     primaryColor: string;
                     isDarkModeEnabled: boolean;
@@ -1558,6 +1572,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -1625,6 +1640,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -2176,10 +2192,13 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }>;
                 oneTimeTokenContext: z.ZodOptional<z.ZodObject<{
                     jitOrganizationIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                    interactionEvent: z.ZodOptional<z.ZodNativeEnum<typeof InteractionEvent>>;
                 }, "strip", z.ZodTypeAny, {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 }, {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 }>>;
             }, "strip", z.ZodTypeAny, {
                 type: VerificationType.OneTimeToken;
@@ -2191,6 +2210,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             }, {
                 type: VerificationType.OneTimeToken;
@@ -2202,6 +2222,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             }>, z.ZodObject<Omit<{
                 id: z.ZodString;
@@ -2295,6 +2316,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -2409,6 +2431,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -2684,6 +2707,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -2873,6 +2897,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -2932,6 +2957,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -3121,6 +3147,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -3184,6 +3211,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -3373,6 +3401,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -3436,8 +3465,8 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -3450,6 +3479,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -3639,6 +3669,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -3702,8 +3733,8 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -4209,8 +4240,8 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -4221,8 +4252,8 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -4232,6 +4263,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
             name: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             id: z.ZodOptional<ZodType<string, z.ZodTypeDef, string>>;
             applicationId: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
+            cimdClientId: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             username: z.ZodOptional<ZodType<string | null, z.ZodTypeDef, string | null>>;
             createdAt: z.ZodOptional<ZodType<number, z.ZodTypeDef, number>>;
             profile: z.ZodOptional<ZodType<Partial<{
@@ -4370,6 +4402,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 description: ZodType<string | null, z.ZodTypeDef, string | null>;
                 customData: ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
                 isMfaRequired: ZodType<boolean, z.ZodTypeDef, boolean>;
+                isTrustedDeviceAllowed: ZodType<boolean, z.ZodTypeDef, boolean>;
                 color: ZodType<Partial<{
                     primaryColor: string;
                     isDarkModeEnabled: boolean;
@@ -4418,6 +4451,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -4485,6 +4519,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -5036,10 +5071,13 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }>;
                 oneTimeTokenContext: z.ZodOptional<z.ZodObject<{
                     jitOrganizationIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                    interactionEvent: z.ZodOptional<z.ZodNativeEnum<typeof InteractionEvent>>;
                 }, "strip", z.ZodTypeAny, {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 }, {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 }>>;
             }, "strip", z.ZodTypeAny, {
                 type: VerificationType.OneTimeToken;
@@ -5051,6 +5089,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             }, {
                 type: VerificationType.OneTimeToken;
@@ -5062,6 +5101,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             }>, z.ZodObject<Omit<{
                 id: z.ZodString;
@@ -5155,6 +5195,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -5269,6 +5310,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -5544,6 +5586,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -5733,6 +5776,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -5792,6 +5836,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -5981,6 +6026,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -6047,8 +6093,8 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -6058,6 +6104,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -6247,6 +6294,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -6313,8 +6361,8 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
         kind?: "AccessToken" | undefined;
         accountId?: string | undefined;
         scope?: string | undefined;
-        sessionUid?: string | undefined;
         clientId?: string | undefined;
+        sessionUid?: string | undefined;
         expiresWithSession?: boolean | undefined;
         gty?: string | undefined;
         aud?: string | string[] | undefined;
@@ -6324,6 +6372,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
             name?: string | null | undefined;
             id?: string | undefined;
             applicationId?: string | null | undefined;
+            cimdClientId?: string | null | undefined;
             username?: string | null | undefined;
             createdAt?: number | undefined;
             profile?: Partial<{
@@ -6513,6 +6562,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 verified: boolean;
                 oneTimeTokenContext?: {
                     jitOrganizationIds?: string[] | undefined;
+                    interactionEvent?: InteractionEvent | undefined;
                 } | undefined;
             } | {
                 type: VerificationType.Password;
@@ -7092,7 +7142,7 @@ export declare enum CustomJwtErrorCode {
     AccessDenied = "AccessDenied",
     /** General JWT customizer error,
      * this is the fallback custom jwt error code
-     * for any internal error thrown by the JWT customizer (localVM, azure function, or CF worker).
+     * for any internal error thrown by the JWT customizer on any runtime.
      */
     General = "General"
 }

package/lib/types/logto-config/jwt-customizer.js

@@ -203,7 +203,7 @@ export var CustomJwtErrorCode;
     CustomJwtErrorCode["AccessDenied"] = "AccessDenied";
     /** General JWT customizer error,
      * this is the fallback custom jwt error code
-     * for any internal error thrown by the JWT customizer (localVM, azure function, or CF worker).
+     * for any internal error thrown by the JWT customizer on any runtime.
      */
     CustomJwtErrorCode["General"] = "General";
 })(CustomJwtErrorCode || (CustomJwtErrorCode = {}));

package/lib/types/logto-config/oidc-provider.d.ts

@@ -28,8 +28,8 @@ export declare const accessTokenPayloadGuard: z.ZodObject<{
     aud: string | string[];
     sid?: string | undefined;
     scope?: string | undefined;
-    sessionUid?: string | undefined;
     clientId?: string | undefined;
+    sessionUid?: string | undefined;
     expiresWithSession?: boolean | undefined;
 }, {
     grantId: string;
@@ -40,8 +40,8 @@ export declare const accessTokenPayloadGuard: z.ZodObject<{
     aud: string | string[];
     sid?: string | undefined;
     scope?: string | undefined;
-    sessionUid?: string | undefined;
     clientId?: string | undefined;
+    sessionUid?: string | undefined;
     expiresWithSession?: boolean | undefined;
 }>;
 export type AccessTokenPayload = z.infer<typeof accessTokenPayloadGuard>;

package/lib/types/organization.d.ts

@@ -1,3 +1,4 @@
+import { z } from 'zod';
 import { type OrganizationRole, type Organization, type OrganizationInvitation, type Application } from '../db-entries/index.js';
 import { type ToZodObject } from '../utils/zod.js';
 import { type UserInfo, type FeaturedUser } from './user.js';
@@ -66,7 +67,141 @@ export type ApplicationWithOrganizationRoles = Application & {
     /** The roles of the application in the organization. */
     organizationRoles: OrganizationRoleEntity[];
 };
-export declare const applicationWithOrganizationRolesGuard: ToZodObject<ApplicationWithOrganizationRoles>;
+export declare const applicationWithOrganizationRolesGuard: z.ZodObject<{
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    name: z.ZodType<string, z.ZodTypeDef, string>;
+    description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    type: z.ZodType<import("../db-entries/custom-types.js").ApplicationType, z.ZodTypeDef, import("../db-entries/custom-types.js").ApplicationType>;
+    oidcClientMetadata: z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>;
+    customClientMetadata: z.ZodType<{
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+        allowTokenExchange?: boolean | undefined;
+        isDeviceFlow?: boolean | undefined;
+        maxAllowedGrants?: number | undefined;
+    }, z.ZodTypeDef, {
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+        allowTokenExchange?: boolean | undefined;
+        isDeviceFlow?: boolean | undefined;
+        maxAllowedGrants?: number | undefined;
+    }>;
+    protectedAppMetadata: z.ZodType<{
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                value: string;
+                type: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null, z.ZodTypeDef, {
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                value: string;
+                type: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null>;
+    customData: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
+    isThirdParty: z.ZodType<boolean, z.ZodTypeDef, boolean>;
+    appLevelAccessControlEnabled: z.ZodType<boolean, z.ZodTypeDef, boolean>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+} & {
+    secret: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+} & {
+    organizationRoles: z.ZodArray<ToZodObject<OrganizationRoleEntity>, "many">;
+}, "strip", z.ZodTypeAny, {
+    type: import("../db-entries/custom-types.js").ApplicationType;
+    name: string;
+    id: string;
+    tenantId: string;
+    createdAt: number;
+    customData: import("@withtyped/server").JsonObject;
+    description: string | null;
+    oidcClientMetadata: import("../index.js").OidcClientMetadata;
+    customClientMetadata: import("../index.js").CustomClientMetadata;
+    protectedAppMetadata: import("../index.js").ProtectedAppMetadata | null;
+    isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
+    organizationRoles: {
+        name: string;
+        id: string;
+    }[];
+    secret?: string | undefined;
+}, {
+    type: import("../db-entries/custom-types.js").ApplicationType;
+    name: string;
+    id: string;
+    tenantId: string;
+    createdAt: number;
+    customData: import("@withtyped/server").JsonObject;
+    description: string | null;
+    oidcClientMetadata: import("../index.js").OidcClientMetadata;
+    customClientMetadata: import("../index.js").CustomClientMetadata;
+    protectedAppMetadata: import("../index.js").ProtectedAppMetadata | null;
+    isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
+    organizationRoles: {
+        name: string;
+        id: string;
+    }[];
+    secret?: string | undefined;
+}>;
+export type ApplicationWithOrganizationRolesResponse = z.infer<typeof applicationWithOrganizationRolesGuard>;
 /**
  * The organization invitation with additional fields:
  *

package/lib/types/organization.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
-import { OrganizationRoles, Organizations, OrganizationInvitations, Applications, } from '../db-entries/index.js';
+import { OrganizationRoles, Organizations, OrganizationInvitations, } from '../db-entries/index.js';
+import { applicationResponseGuard } from './application.js';
 import { userInfoGuard } from './user.js';
 export const organizationRoleWithScopesGuard = OrganizationRoles.guard.extend({
     scopes: z
@@ -29,7 +30,7 @@ export const organizationWithOrganizationRolesGuard = Organizations.guard.extend
 export const userWithOrganizationRolesGuard = userInfoGuard.extend({
     organizationRoles: organizationRoleEntityGuard.array(),
 });
-export const applicationWithOrganizationRolesGuard = Applications.guard.extend({
+export const applicationWithOrganizationRolesGuard = applicationResponseGuard.extend({
     organizationRoles: organizationRoleEntityGuard.array(),
 });
 export const organizationInvitationEntityGuard = OrganizationInvitations.guard.extend({

package/lib/types/service-log.d.ts

@@ -1,5 +1,18 @@
+/**
+ * Types of `service_logs` rows. The rows are written by the Logto Cloud service; some members
+ * are cloud-only concepts kept here so every type shares this single definition.
+ */
 export declare enum ServiceLogType {
     SendEmail = "sendEmail",
     SendSms = "sendSms",
-    FetchCustomJwt = "fetchCustomJwt"
+    /** Cloud-only: custom JWT worker invocations. */
+    FetchCustomJwt = "fetchCustomJwt",
+    /**
+     * Cloud-only: a hosted-email send that failed at the provider; the payload carries the
+     * normalized provider error. Deliberately distinct from {@link ServiceLogType.SendEmail}:
+     * usage counting matches on that exact type, so failed sends never count toward email usage.
+     */
+    SendEmailFailed = "sendEmailFailed",
+    /** Cloud-only: an Actions script run on the script runner. Mirrors the `runAction` entry. */
+    RunAction = "runAction"
 }