@logto/schemas 1.42.0 → 1.44.0

package/lib/db-entries/cimd-user-scope.js

@@ -0,0 +1,25 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    userScope: z.string().min(1).max(64),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    userScope: z.string().min(1).max(64),
+});
+export const CimdUserScopes = Object.freeze({
+    table: 'cimd_user_scopes',
+    tableSingular: 'cimd_user_scope',
+    fields: {
+        tenantId: 'tenant_id',
+        userScope: 'user_scope',
+    },
+    fieldKeys: [
+        'tenantId',
+        'userScope',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/daily-active-user.js

@@ -3,13 +3,13 @@ import { z } from 'zod';
 const createGuard = z.object({
     id: z.string().min(1).max(21),
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     date: z.number().optional(),
 });
 const guard = z.object({
     id: z.string().min(1).max(21),
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     date: z.number(),
 });
 export const DailyActiveUsers = Object.freeze({

package/lib/db-entries/index.d.ts

@@ -19,6 +19,12 @@ export * from './application-user-consent-user-scope.js';
 export * from './application.js';
 export * from './applications-role.js';
 export * from './captcha-provider.js';
+export * from './cimd-grant-client-snapshot.js';
+export * from './cimd-grant-organization.js';
+export * from './cimd-organization-resource-scope.js';
+export * from './cimd-organization-scope.js';
+export * from './cimd-resource-scope.js';
+export * from './cimd-user-scope.js';
 export * from './connector.js';
 export * from './custom-phrase.js';
 export * from './custom-profile-field.js';
@@ -67,6 +73,7 @@ export * from './sso-connector-idp-initiated-auth-config.js';
 export * from './sso-connector.js';
 export * from './subject-token.js';
 export * from './system.js';
+export * from './trusted-device.js';
 export * from './user-geo-location.js';
 export * from './user-sign-in-country.js';
 export * from './user-sso-identity.js';

package/lib/db-entries/index.js

@@ -20,6 +20,12 @@ export * from './application-user-consent-user-scope.js';
 export * from './application.js';
 export * from './applications-role.js';
 export * from './captcha-provider.js';
+export * from './cimd-grant-client-snapshot.js';
+export * from './cimd-grant-organization.js';
+export * from './cimd-organization-resource-scope.js';
+export * from './cimd-organization-scope.js';
+export * from './cimd-resource-scope.js';
+export * from './cimd-user-scope.js';
 export * from './connector.js';
 export * from './custom-phrase.js';
 export * from './custom-profile-field.js';
@@ -68,6 +74,7 @@ export * from './sso-connector-idp-initiated-auth-config.js';
 export * from './sso-connector.js';
 export * from './subject-token.js';
 export * from './system.js';
+export * from './trusted-device.js';
 export * from './user-geo-location.js';
 export * from './user-sign-in-country.js';
 export * from './user-sso-identity.js';

package/lib/db-entries/oidc-session-extension.d.ts

@@ -10,6 +10,7 @@ export type CreateOidcSessionExtension = {
     accountId: string;
     lastSubmission?: JsonObject;
     clientId?: string | null;
+    cimdClientId?: string | null;
     createdAt?: number;
     updatedAt?: number;
 };
@@ -19,8 +20,9 @@ export type OidcSessionExtension = {
     accountId: string;
     lastSubmission: JsonObject;
     clientId: string | null;
+    cimdClientId: string | null;
     createdAt: number;
     updatedAt: number;
 };
-export type OidcSessionExtensionKeys = 'tenantId' | 'sessionUid' | 'accountId' | 'lastSubmission' | 'clientId' | 'createdAt' | 'updatedAt';
+export type OidcSessionExtensionKeys = 'tenantId' | 'sessionUid' | 'accountId' | 'lastSubmission' | 'clientId' | 'cimdClientId' | 'createdAt' | 'updatedAt';
 export declare const OidcSessionExtensions: GeneratedSchema<OidcSessionExtensionKeys, CreateOidcSessionExtension, OidcSessionExtension, 'oidc_session_extensions', 'oidc_session_extension'>;

package/lib/db-entries/oidc-session-extension.js

@@ -4,18 +4,20 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     sessionUid: z.string().min(1).max(128),
-    accountId: z.string().min(1).max(12),
+    accountId: z.string().min(1).max(128),
     lastSubmission: jsonObjectGuard.optional(),
     clientId: z.string().max(21).nullable().optional(),
+    cimdClientId: z.string().max(2048).nullable().optional(),
     createdAt: z.number().optional(),
     updatedAt: z.number().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     sessionUid: z.string().min(1).max(128),
-    accountId: z.string().min(1).max(12),
+    accountId: z.string().min(1).max(128),
     lastSubmission: jsonObjectGuard,
     clientId: z.string().max(21).nullable(),
+    cimdClientId: z.string().max(2048).nullable(),
     createdAt: z.number(),
     updatedAt: z.number(),
 });
@@ -28,6 +30,7 @@ export const OidcSessionExtensions = Object.freeze({
         accountId: 'account_id',
         lastSubmission: 'last_submission',
         clientId: 'client_id',
+        cimdClientId: 'cimd_client_id',
         createdAt: 'created_at',
         updatedAt: 'updated_at',
     },
@@ -37,6 +40,7 @@ export const OidcSessionExtensions = Object.freeze({
         'accountId',
         'lastSubmission',
         'clientId',
+        'cimdClientId',
         'createdAt',
         'updatedAt',
     ],

package/lib/db-entries/organization-invitation.js

@@ -4,9 +4,9 @@ import { OrganizationInvitationStatus } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    inviterId: z.string().max(21).nullable().optional(),
+    inviterId: z.string().max(128).nullable().optional(),
     invitee: z.string().min(1).max(256),
-    acceptedUserId: z.string().max(21).nullable().optional(),
+    acceptedUserId: z.string().max(128).nullable().optional(),
     organizationId: z.string().min(1).max(21),
     status: z.nativeEnum(OrganizationInvitationStatus),
     createdAt: z.number().optional(),
@@ -16,9 +16,9 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    inviterId: z.string().max(21).nullable(),
+    inviterId: z.string().max(128).nullable(),
     invitee: z.string().min(1).max(256),
-    acceptedUserId: z.string().max(21).nullable(),
+    acceptedUserId: z.string().max(128).nullable(),
     organizationId: z.string().min(1).max(21),
     status: z.nativeEnum(OrganizationInvitationStatus),
     createdAt: z.number(),

package/lib/db-entries/organization-role-user-relation.js

@@ -4,13 +4,13 @@ const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     organizationId: z.string().min(1).max(21),
     organizationRoleId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     organizationId: z.string().min(1).max(21),
     organizationRoleId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const OrganizationRoleUserRelations = Object.freeze({
     table: 'organization_role_user_relations',

package/lib/db-entries/organization-user-relation.js

@@ -3,12 +3,12 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const OrganizationUserRelations = Object.freeze({
     table: 'organization_user_relations',

package/lib/db-entries/organization.d.ts

@@ -17,6 +17,8 @@ export type CreateOrganization = {
     customData?: JsonObject;
     /** Whether multi-factor authentication configuration is required for the members of the organization. */
     isMfaRequired?: boolean;
+    /** Whether trusted devices are allowed for members of the organization. */
+    isTrustedDeviceAllowed?: boolean;
     /** The organization's branding color configuration. */
     color?: PartialColor;
     /** The organization's branding configuration. */
@@ -39,6 +41,8 @@ export type Organization = {
     customData: JsonObject;
     /** Whether multi-factor authentication configuration is required for the members of the organization. */
     isMfaRequired: boolean;
+    /** Whether trusted devices are allowed for members of the organization. */
+    isTrustedDeviceAllowed: boolean;
     /** The organization's branding color configuration. */
     color: PartialColor;
     /** The organization's branding configuration. */
@@ -48,5 +52,5 @@ export type Organization = {
     /** When the organization was created. */
     createdAt: number;
 };
-export type OrganizationKeys = 'tenantId' | 'id' | 'name' | 'description' | 'customData' | 'isMfaRequired' | 'color' | 'branding' | 'customCss' | 'createdAt';
+export type OrganizationKeys = 'tenantId' | 'id' | 'name' | 'description' | 'customData' | 'isMfaRequired' | 'isTrustedDeviceAllowed' | 'color' | 'branding' | 'customCss' | 'createdAt';
 export declare const Organizations: GeneratedSchema<OrganizationKeys, CreateOrganization, Organization, 'organizations', 'organization'>;

package/lib/db-entries/organization.js

@@ -8,6 +8,7 @@ const createGuard = z.object({
     description: z.string().max(256).nullable().optional(),
     customData: jsonObjectGuard.optional(),
     isMfaRequired: z.boolean().optional(),
+    isTrustedDeviceAllowed: z.boolean().optional(),
     color: partialColorGuard.optional(),
     branding: brandingGuard.optional(),
     customCss: z.string().nullable().optional(),
@@ -20,6 +21,7 @@ const guard = z.object({
     description: z.string().max(256).nullable(),
     customData: jsonObjectGuard,
     isMfaRequired: z.boolean(),
+    isTrustedDeviceAllowed: z.boolean(),
     color: partialColorGuard,
     branding: brandingGuard,
     customCss: z.string().nullable(),
@@ -35,6 +37,7 @@ export const Organizations = Object.freeze({
         description: 'description',
         customData: 'custom_data',
         isMfaRequired: 'is_mfa_required',
+        isTrustedDeviceAllowed: 'is_trusted_device_allowed',
         color: 'color',
         branding: 'branding',
         customCss: 'custom_css',
@@ -47,6 +50,7 @@ export const Organizations = Object.freeze({
         'description',
         'customData',
         'isMfaRequired',
+        'isTrustedDeviceAllowed',
         'color',
         'branding',
         'customCss',

package/lib/db-entries/personal-access-token.js

@@ -2,7 +2,7 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     name: z.string().min(1).max(256),
     value: z.string().min(1).max(64),
     createdAt: z.number().optional(),
@@ -10,7 +10,7 @@ const createGuard = z.object({
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     name: z.string().min(1).max(256),
     value: z.string().min(1).max(64),
     createdAt: z.number(),

package/lib/db-entries/saml-application-config.d.ts

@@ -1,4 +1,4 @@
-import { SamlAttributeMapping, SamlAcsUrl, SamlEncryption, NameIdFormat, GeneratedSchema } from './../foundations/index.js';
+import { SamlAttributeMapping, SamlAcsUrl, SamlEncryption, SamlAuthnRequestConfig, NameIdFormat, GeneratedSchema } from './../foundations/index.js';
 /**
  * The SAML application config and SAML-type application have a one-to-one correspondence: 1. a SAML-type application can only have one SAML application config. (CANNOT use "semicolon" in comments, since it indicates the end of query.) 2. a SAML application config can only configure one SAML-type application.
  *
@@ -12,6 +12,7 @@ export type CreateSamlApplicationConfig = {
     entityId?: string | null;
     acsUrl?: SamlAcsUrl | null;
     encryption?: SamlEncryption | null;
+    authnRequestConfig?: SamlAuthnRequestConfig | null;
     nameIdFormat: NameIdFormat;
 };
 /** The SAML application config and SAML-type application have a one-to-one correspondence: 1. a SAML-type application can only have one SAML application config. (CANNOT use "semicolon" in comments, since it indicates the end of query.) 2. a SAML application config can only configure one SAML-type application. */
@@ -22,7 +23,8 @@ export type SamlApplicationConfig = {
     entityId: string | null;
     acsUrl: SamlAcsUrl | null;
     encryption: SamlEncryption | null;
+    authnRequestConfig: SamlAuthnRequestConfig | null;
     nameIdFormat: NameIdFormat;
 };
-export type SamlApplicationConfigKeys = 'applicationId' | 'tenantId' | 'attributeMapping' | 'entityId' | 'acsUrl' | 'encryption' | 'nameIdFormat';
+export type SamlApplicationConfigKeys = 'applicationId' | 'tenantId' | 'attributeMapping' | 'entityId' | 'acsUrl' | 'encryption' | 'authnRequestConfig' | 'nameIdFormat';
 export declare const SamlApplicationConfigs: GeneratedSchema<SamlApplicationConfigKeys, CreateSamlApplicationConfig, SamlApplicationConfig, 'saml_application_configs', 'saml_application_config'>;

package/lib/db-entries/saml-application-config.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { samlAttributeMappingGuard, samlAcsUrlGuard, samlEncryptionGuard, nameIdFormatGuard } from './../foundations/index.js';
+import { samlAttributeMappingGuard, samlAcsUrlGuard, samlEncryptionGuard, samlAuthnRequestConfigGuard, nameIdFormatGuard } from './../foundations/index.js';
 const createGuard = z.object({
     applicationId: z.string().min(1).max(21),
     tenantId: z.string().max(21).optional(),
@@ -8,6 +8,7 @@ const createGuard = z.object({
     entityId: z.string().max(128).nullable().optional(),
     acsUrl: samlAcsUrlGuard.nullable().optional(),
     encryption: samlEncryptionGuard.nullable().optional(),
+    authnRequestConfig: samlAuthnRequestConfigGuard.nullable().optional(),
     nameIdFormat: nameIdFormatGuard,
 });
 const guard = z.object({
@@ -17,6 +18,7 @@ const guard = z.object({
     entityId: z.string().max(128).nullable(),
     acsUrl: samlAcsUrlGuard.nullable(),
     encryption: samlEncryptionGuard.nullable(),
+    authnRequestConfig: samlAuthnRequestConfigGuard.nullable(),
     nameIdFormat: nameIdFormatGuard,
 });
 export const SamlApplicationConfigs = Object.freeze({
@@ -29,6 +31,7 @@ export const SamlApplicationConfigs = Object.freeze({
         entityId: 'entity_id',
         acsUrl: 'acs_url',
         encryption: 'encryption',
+        authnRequestConfig: 'authn_request_config',
         nameIdFormat: 'name_id_format',
     },
     fieldKeys: [
@@ -38,6 +41,7 @@ export const SamlApplicationConfigs = Object.freeze({
         'entityId',
         'acsUrl',
         'encryption',
+        'authnRequestConfig',
         'nameIdFormat',
     ],
     createGuard,

package/lib/db-entries/secret.js

@@ -4,7 +4,7 @@ import { secretTypeGuard, bufferLikeGuard, jsonObjectGuard } from './../foundati
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     type: secretTypeGuard,
     encryptedDek: bufferLikeGuard,
     iv: bufferLikeGuard,
@@ -17,7 +17,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     type: secretTypeGuard,
     encryptedDek: bufferLikeGuard,
     iv: bufferLikeGuard,

package/lib/db-entries/sign-in-experience.d.ts

@@ -1,4 +1,4 @@
-import { Color, Branding, LanguageInfo, SignIn, SignUp, SocialSignIn, ConnectorTargets, CustomContent, CustomUiAssets, CustomUiCsp, PartialPasswordPolicy, Mfa, AdaptiveMfa, CaptchaPolicy, SentinelPolicy, EmailBlocklistPolicy, VerificationCodePolicy, ForgotPasswordMethods, PasskeySignIn, SignUpProfileFields, PasswordExpirationPolicy, UsernamePolicy, GeneratedSchema } from './../foundations/index.js';
+import { Color, Branding, LanguageInfo, SignIn, SignUp, SocialSignIn, ConnectorTargets, CustomContent, CustomUiAssets, CustomUiCsp, PartialPasswordPolicy, Mfa, AdaptiveMfa, TrustedDevicePolicy, CaptchaPolicy, SentinelPolicy, EmailBlocklistPolicy, VerificationCodePolicy, ForgotPasswordMethods, PasskeySignIn, SignUpProfileFields, PasswordExpirationPolicy, UsernamePolicy, GeneratedSchema } from './../foundations/index.js';
 import { AgreeToTermsPolicy, SignInMode } from './custom-types.js';
 /**
  *
@@ -28,6 +28,7 @@ export type CreateSignInExperience = {
     passwordPolicy?: PartialPasswordPolicy;
     mfa?: Mfa;
     adaptiveMfa?: AdaptiveMfa;
+    trustedDevice?: TrustedDevicePolicy;
     singleSignOnEnabled?: boolean;
     supportEmail?: string | null;
     supportWebsiteUrl?: string | null;
@@ -66,6 +67,7 @@ export type SignInExperience = {
     passwordPolicy: PartialPasswordPolicy;
     mfa: Mfa;
     adaptiveMfa: AdaptiveMfa;
+    trustedDevice: TrustedDevicePolicy;
     singleSignOnEnabled: boolean;
     supportEmail: string | null;
     supportWebsiteUrl: string | null;
@@ -81,5 +83,5 @@ export type SignInExperience = {
     passwordExpiration: PasswordExpirationPolicy;
     usernamePolicy: UsernamePolicy;
 };
-export type SignInExperienceKeys = 'tenantId' | 'id' | 'color' | 'branding' | 'hideLogtoBranding' | 'languageInfo' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'agreeToTermsPolicy' | 'signIn' | 'signUp' | 'socialSignIn' | 'socialSignInConnectorTargets' | 'signInMode' | 'customCss' | 'customContent' | 'customUiAssets' | 'customUiCsp' | 'passwordPolicy' | 'mfa' | 'adaptiveMfa' | 'singleSignOnEnabled' | 'supportEmail' | 'supportWebsiteUrl' | 'unknownSessionRedirectUrl' | 'captchaPolicy' | 'sentinelPolicy' | 'emailBlocklistPolicy' | 'verificationCodePolicy' | 'forgotPasswordMethods' | 'passkeySignIn' | 'signUpProfileFields' | 'passwordExpiration' | 'usernamePolicy';
+export type SignInExperienceKeys = 'tenantId' | 'id' | 'color' | 'branding' | 'hideLogtoBranding' | 'languageInfo' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'agreeToTermsPolicy' | 'signIn' | 'signUp' | 'socialSignIn' | 'socialSignInConnectorTargets' | 'signInMode' | 'customCss' | 'customContent' | 'customUiAssets' | 'customUiCsp' | 'passwordPolicy' | 'mfa' | 'adaptiveMfa' | 'trustedDevice' | 'singleSignOnEnabled' | 'supportEmail' | 'supportWebsiteUrl' | 'unknownSessionRedirectUrl' | 'captchaPolicy' | 'sentinelPolicy' | 'emailBlocklistPolicy' | 'verificationCodePolicy' | 'forgotPasswordMethods' | 'passkeySignIn' | 'signUpProfileFields' | 'passwordExpiration' | 'usernamePolicy';
 export declare const SignInExperiences: GeneratedSchema<SignInExperienceKeys, CreateSignInExperience, SignInExperience, 'sign_in_experiences', 'sign_in_experience'>;

package/lib/db-entries/sign-in-experience.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { colorGuard, brandingGuard, languageInfoGuard, signInGuard, signUpGuard, socialSignInGuard, connectorTargetsGuard, customContentGuard, customUiAssetsGuard, customUiCspGuard, partialPasswordPolicyGuard, mfaGuard, adaptiveMfaGuard, captchaPolicyGuard, sentinelPolicyGuard, emailBlocklistPolicyGuard, verificationCodePolicyGuard, forgotPasswordMethodsGuard, passkeySignInGuard, signUpProfileFieldsGuard, passwordExpirationPolicyGuard, usernamePolicyGuard } from './../foundations/index.js';
+import { colorGuard, brandingGuard, languageInfoGuard, signInGuard, signUpGuard, socialSignInGuard, connectorTargetsGuard, customContentGuard, customUiAssetsGuard, customUiCspGuard, partialPasswordPolicyGuard, mfaGuard, adaptiveMfaGuard, trustedDevicePolicyGuard, captchaPolicyGuard, sentinelPolicyGuard, emailBlocklistPolicyGuard, verificationCodePolicyGuard, forgotPasswordMethodsGuard, passkeySignInGuard, signUpProfileFieldsGuard, passwordExpirationPolicyGuard, usernamePolicyGuard } from './../foundations/index.js';
 import { AgreeToTermsPolicy, SignInMode } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
@@ -24,6 +24,7 @@ const createGuard = z.object({
     passwordPolicy: partialPasswordPolicyGuard.optional(),
     mfa: mfaGuard.optional(),
     adaptiveMfa: adaptiveMfaGuard.optional(),
+    trustedDevice: trustedDevicePolicyGuard.optional(),
     singleSignOnEnabled: z.boolean().optional(),
     supportEmail: z.string().nullable().optional(),
     supportWebsiteUrl: z.string().nullable().optional(),
@@ -60,6 +61,7 @@ const guard = z.object({
     passwordPolicy: partialPasswordPolicyGuard,
     mfa: mfaGuard,
     adaptiveMfa: adaptiveMfaGuard,
+    trustedDevice: trustedDevicePolicyGuard,
     singleSignOnEnabled: z.boolean(),
     supportEmail: z.string().nullable(),
     supportWebsiteUrl: z.string().nullable(),
@@ -99,6 +101,7 @@ export const SignInExperiences = Object.freeze({
         passwordPolicy: 'password_policy',
         mfa: 'mfa',
         adaptiveMfa: 'adaptive_mfa',
+        trustedDevice: 'trusted_device',
         singleSignOnEnabled: 'single_sign_on_enabled',
         supportEmail: 'support_email',
         supportWebsiteUrl: 'support_website_url',
@@ -135,6 +138,7 @@ export const SignInExperiences = Object.freeze({
         'passwordPolicy',
         'mfa',
         'adaptiveMfa',
+        'trustedDevice',
         'singleSignOnEnabled',
         'supportEmail',
         'supportWebsiteUrl',

package/lib/db-entries/subject-token.js

@@ -7,7 +7,7 @@ const createGuard = z.object({
     context: jsonObjectGuard.optional(),
     expiresAt: z.number(),
     consumedAt: z.number().nullable().optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number().optional(),
     creatorId: z.string().min(1).max(32),
 });
@@ -17,7 +17,7 @@ const guard = z.object({
     context: jsonObjectGuard,
     expiresAt: z.number(),
     consumedAt: z.number().nullable(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number(),
     creatorId: z.string().min(1).max(32),
 });

package/lib/db-entries/trusted-device.d.ts

@@ -0,0 +1,36 @@
+import { BufferLike, GeneratedSchema } from './../foundations/index.js';
+/**
+ * A revocable server-side credential that can fulfill sign-in MFA for a user.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link TrustedDevice} for the original type.
+ */
+export type CreateTrustedDevice = {
+    tenantId?: string;
+    id: string;
+    userId: string;
+    secretHash: BufferLike;
+    userAgent?: string | null;
+    ip?: string | null;
+    country?: string | null;
+    city?: string | null;
+    createdAt?: number;
+    lastUsedAt?: number;
+    expiresAt: number;
+};
+/** A revocable server-side credential that can fulfill sign-in MFA for a user. */
+export type TrustedDevice = {
+    tenantId: string;
+    id: string;
+    userId: string;
+    secretHash: BufferLike;
+    userAgent: string | null;
+    ip: string | null;
+    country: string | null;
+    city: string | null;
+    createdAt: number;
+    lastUsedAt: number;
+    expiresAt: number;
+};
+export type TrustedDeviceKeys = 'tenantId' | 'id' | 'userId' | 'secretHash' | 'userAgent' | 'ip' | 'country' | 'city' | 'createdAt' | 'lastUsedAt' | 'expiresAt';
+export declare const TrustedDevices: GeneratedSchema<TrustedDeviceKeys, CreateTrustedDevice, TrustedDevice, 'trusted_devices', 'trusted_device'>;

package/lib/db-entries/trusted-device.js

@@ -0,0 +1,62 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+import { bufferLikeGuard } from './../foundations/index.js';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    id: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
+    secretHash: bufferLikeGuard,
+    userAgent: z.string().nullable().optional(),
+    ip: z.string().nullable().optional(),
+    country: z.string().max(16).nullable().optional(),
+    city: z.string().nullable().optional(),
+    createdAt: z.number().optional(),
+    lastUsedAt: z.number().optional(),
+    expiresAt: z.number(),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    id: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
+    secretHash: bufferLikeGuard,
+    userAgent: z.string().nullable(),
+    ip: z.string().nullable(),
+    country: z.string().max(16).nullable(),
+    city: z.string().nullable(),
+    createdAt: z.number(),
+    lastUsedAt: z.number(),
+    expiresAt: z.number(),
+});
+export const TrustedDevices = Object.freeze({
+    table: 'trusted_devices',
+    tableSingular: 'trusted_device',
+    fields: {
+        tenantId: 'tenant_id',
+        id: 'id',
+        userId: 'user_id',
+        secretHash: 'secret_hash',
+        userAgent: 'user_agent',
+        ip: 'ip',
+        country: 'country',
+        city: 'city',
+        createdAt: 'created_at',
+        lastUsedAt: 'last_used_at',
+        expiresAt: 'expires_at',
+    },
+    fieldKeys: [
+        'tenantId',
+        'id',
+        'userId',
+        'secretHash',
+        'userAgent',
+        'ip',
+        'country',
+        'city',
+        'createdAt',
+        'lastUsedAt',
+        'expiresAt',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/user-geo-location.js

@@ -2,14 +2,14 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     latitude: z.number().nullable().optional(),
     longitude: z.number().nullable().optional(),
     updatedAt: z.number().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     latitude: z.number().nullable(),
     longitude: z.number().nullable(),
     updatedAt: z.number(),

package/lib/db-entries/user-sign-in-country.js

@@ -2,13 +2,13 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     country: z.string().min(1).max(16),
     lastSignInAt: z.number().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     country: z.string().min(1).max(16),
     lastSignInAt: z.number(),
 });

package/lib/db-entries/user-sso-identity.js

@@ -4,7 +4,7 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     issuer: z.string().min(1).max(256),
     identityId: z.string().min(1).max(128),
     detail: jsonObjectGuard.optional(),
@@ -15,7 +15,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     issuer: z.string().min(1).max(256),
     identityId: z.string().min(1).max(128),
     detail: jsonObjectGuard,

package/lib/db-entries/user.d.ts

@@ -19,6 +19,7 @@ export type CreateUser = {
     /** Additional OpenID Connect standard claims that are not included in user's properties. */
     profile?: UserProfile;
     applicationId?: string | null;
+    cimdClientId?: string | null;
     identities?: Identities;
     customData?: JsonObject;
     logtoConfig?: JsonObject;
@@ -44,6 +45,7 @@ export type User = {
     /** Additional OpenID Connect standard claims that are not included in user's properties. */
     profile: UserProfile;
     applicationId: string | null;
+    cimdClientId: string | null;
     identities: Identities;
     customData: JsonObject;
     logtoConfig: JsonObject;
@@ -55,5 +57,5 @@ export type User = {
     createdAt: number;
     updatedAt: number;
 };
-export type UserKeys = 'tenantId' | 'id' | 'username' | 'primaryEmail' | 'primaryPhone' | 'passwordEncrypted' | 'passwordEncryptionMethod' | 'name' | 'avatar' | 'profile' | 'applicationId' | 'identities' | 'customData' | 'logtoConfig' | 'mfaVerifications' | 'isSuspended' | 'isPasswordExpired' | 'lastSignInAt' | 'passwordUpdatedAt' | 'createdAt' | 'updatedAt';
+export type UserKeys = 'tenantId' | 'id' | 'username' | 'primaryEmail' | 'primaryPhone' | 'passwordEncrypted' | 'passwordEncryptionMethod' | 'name' | 'avatar' | 'profile' | 'applicationId' | 'cimdClientId' | 'identities' | 'customData' | 'logtoConfig' | 'mfaVerifications' | 'isSuspended' | 'isPasswordExpired' | 'lastSignInAt' | 'passwordUpdatedAt' | 'createdAt' | 'updatedAt';
 export declare const Users: GeneratedSchema<UserKeys, CreateUser, User, 'users', 'user'>;