@logto/schemas 1.43.0 → 1.44.0

package/lib/consts/subscriptions.d.ts

@@ -27,7 +27,19 @@ export declare enum ReservedPlanId {
     /**
      * Latest Pro plan ID applied from 2025-09.
      */
-    Pro202509 = "pro-202509"
+    Pro202509 = "pro-202509",
+    /**
+     * Self-hosted Pro plan, unlocked by installing a license key on a self-hosted instance.
+     *
+     * Unlike the plans above, this one is never returned by the Cloud subscription API: it is carried
+     * in the signed license payload and resolved locally. See `licensePayloadGuard`.
+     */
+    SelfHostedPro = "self-hosted-pro",
+    /**
+     * Self-hosted Enterprise plan, unlocked by installing a license key on a self-hosted instance.
+     * See {@link SelfHostedPro}.
+     */
+    SelfHostedEnterprise = "self-hosted-enterprise"
 }
 /**
  * Tenant subscription related Redis cache keys.

package/lib/consts/subscriptions.js

@@ -29,6 +29,18 @@ export var ReservedPlanId;
      * Latest Pro plan ID applied from 2025-09.
      */
     ReservedPlanId["Pro202509"] = "pro-202509";
+    /**
+     * Self-hosted Pro plan, unlocked by installing a license key on a self-hosted instance.
+     *
+     * Unlike the plans above, this one is never returned by the Cloud subscription API: it is carried
+     * in the signed license payload and resolved locally. See `licensePayloadGuard`.
+     */
+    ReservedPlanId["SelfHostedPro"] = "self-hosted-pro";
+    /**
+     * Self-hosted Enterprise plan, unlocked by installing a license key on a self-hosted instance.
+     * See {@link SelfHostedPro}.
+     */
+    ReservedPlanId["SelfHostedEnterprise"] = "self-hosted-enterprise";
 })(ReservedPlanId || (ReservedPlanId = {}));
 /**
  * Tenant subscription related Redis cache keys.

package/lib/db-entries/aggregated-daily-active-user.js

@@ -3,13 +3,13 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     activityDate: z.number(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     activityCount: z.number(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     activityDate: z.number(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     activityCount: z.number(),
 });
 export const AggregatedDailyActiveUsers = Object.freeze({

package/lib/db-entries/application-access-control-user-relation.js

@@ -3,12 +3,12 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     applicationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     applicationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const ApplicationAccessControlUserRelations = Object.freeze({
     table: 'application_access_control_user_relations',

package/lib/db-entries/application-user-consent-organization.js

@@ -4,13 +4,13 @@ const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     applicationId: z.string().min(1).max(21),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     applicationId: z.string().min(1).max(21),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const ApplicationUserConsentOrganizations = Object.freeze({
     table: 'application_user_consent_organizations',

package/lib/db-entries/cimd-grant-organization.js

@@ -5,14 +5,14 @@ const createGuard = z.object({
     grantId: z.string().min(1).max(128),
     grantModelName: z.string().min(1).max(64).optional(),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     grantId: z.string().min(1).max(128),
     grantModelName: z.string().max(64),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const CimdGrantOrganizations = Object.freeze({
     table: 'cimd_grant_organizations',

package/lib/db-entries/daily-active-user.js

@@ -3,13 +3,13 @@ import { z } from 'zod';
 const createGuard = z.object({
     id: z.string().min(1).max(21),
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     date: z.number().optional(),
 });
 const guard = z.object({
     id: z.string().min(1).max(21),
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     date: z.number(),
 });
 export const DailyActiveUsers = Object.freeze({

package/lib/db-entries/oidc-session-extension.js

@@ -4,7 +4,7 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     sessionUid: z.string().min(1).max(128),
-    accountId: z.string().min(1).max(12),
+    accountId: z.string().min(1).max(128),
     lastSubmission: jsonObjectGuard.optional(),
     clientId: z.string().max(21).nullable().optional(),
     cimdClientId: z.string().max(2048).nullable().optional(),
@@ -14,7 +14,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     sessionUid: z.string().min(1).max(128),
-    accountId: z.string().min(1).max(12),
+    accountId: z.string().min(1).max(128),
     lastSubmission: jsonObjectGuard,
     clientId: z.string().max(21).nullable(),
     cimdClientId: z.string().max(2048).nullable(),

package/lib/db-entries/organization-invitation.js

@@ -4,9 +4,9 @@ import { OrganizationInvitationStatus } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    inviterId: z.string().max(21).nullable().optional(),
+    inviterId: z.string().max(128).nullable().optional(),
     invitee: z.string().min(1).max(256),
-    acceptedUserId: z.string().max(21).nullable().optional(),
+    acceptedUserId: z.string().max(128).nullable().optional(),
     organizationId: z.string().min(1).max(21),
     status: z.nativeEnum(OrganizationInvitationStatus),
     createdAt: z.number().optional(),
@@ -16,9 +16,9 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    inviterId: z.string().max(21).nullable(),
+    inviterId: z.string().max(128).nullable(),
     invitee: z.string().min(1).max(256),
-    acceptedUserId: z.string().max(21).nullable(),
+    acceptedUserId: z.string().max(128).nullable(),
     organizationId: z.string().min(1).max(21),
     status: z.nativeEnum(OrganizationInvitationStatus),
     createdAt: z.number(),

package/lib/db-entries/organization-role-user-relation.js

@@ -4,13 +4,13 @@ const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     organizationId: z.string().min(1).max(21),
     organizationRoleId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     organizationId: z.string().min(1).max(21),
     organizationRoleId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const OrganizationRoleUserRelations = Object.freeze({
     table: 'organization_role_user_relations',

package/lib/db-entries/organization-user-relation.js

@@ -3,12 +3,12 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const OrganizationUserRelations = Object.freeze({
     table: 'organization_user_relations',

package/lib/db-entries/personal-access-token.js

@@ -2,7 +2,7 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     name: z.string().min(1).max(256),
     value: z.string().min(1).max(64),
     createdAt: z.number().optional(),
@@ -10,7 +10,7 @@ const createGuard = z.object({
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     name: z.string().min(1).max(256),
     value: z.string().min(1).max(64),
     createdAt: z.number(),

package/lib/db-entries/saml-application-config.d.ts

@@ -1,4 +1,4 @@
-import { SamlAttributeMapping, SamlAcsUrl, SamlEncryption, NameIdFormat, GeneratedSchema } from './../foundations/index.js';
+import { SamlAttributeMapping, SamlAcsUrl, SamlEncryption, SamlAuthnRequestConfig, NameIdFormat, GeneratedSchema } from './../foundations/index.js';
 /**
  * The SAML application config and SAML-type application have a one-to-one correspondence: 1. a SAML-type application can only have one SAML application config. (CANNOT use "semicolon" in comments, since it indicates the end of query.) 2. a SAML application config can only configure one SAML-type application.
  *
@@ -12,6 +12,7 @@ export type CreateSamlApplicationConfig = {
     entityId?: string | null;
     acsUrl?: SamlAcsUrl | null;
     encryption?: SamlEncryption | null;
+    authnRequestConfig?: SamlAuthnRequestConfig | null;
     nameIdFormat: NameIdFormat;
 };
 /** The SAML application config and SAML-type application have a one-to-one correspondence: 1. a SAML-type application can only have one SAML application config. (CANNOT use "semicolon" in comments, since it indicates the end of query.) 2. a SAML application config can only configure one SAML-type application. */
@@ -22,7 +23,8 @@ export type SamlApplicationConfig = {
     entityId: string | null;
     acsUrl: SamlAcsUrl | null;
     encryption: SamlEncryption | null;
+    authnRequestConfig: SamlAuthnRequestConfig | null;
     nameIdFormat: NameIdFormat;
 };
-export type SamlApplicationConfigKeys = 'applicationId' | 'tenantId' | 'attributeMapping' | 'entityId' | 'acsUrl' | 'encryption' | 'nameIdFormat';
+export type SamlApplicationConfigKeys = 'applicationId' | 'tenantId' | 'attributeMapping' | 'entityId' | 'acsUrl' | 'encryption' | 'authnRequestConfig' | 'nameIdFormat';
 export declare const SamlApplicationConfigs: GeneratedSchema<SamlApplicationConfigKeys, CreateSamlApplicationConfig, SamlApplicationConfig, 'saml_application_configs', 'saml_application_config'>;

package/lib/db-entries/saml-application-config.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { samlAttributeMappingGuard, samlAcsUrlGuard, samlEncryptionGuard, nameIdFormatGuard } from './../foundations/index.js';
+import { samlAttributeMappingGuard, samlAcsUrlGuard, samlEncryptionGuard, samlAuthnRequestConfigGuard, nameIdFormatGuard } from './../foundations/index.js';
 const createGuard = z.object({
     applicationId: z.string().min(1).max(21),
     tenantId: z.string().max(21).optional(),
@@ -8,6 +8,7 @@ const createGuard = z.object({
     entityId: z.string().max(128).nullable().optional(),
     acsUrl: samlAcsUrlGuard.nullable().optional(),
     encryption: samlEncryptionGuard.nullable().optional(),
+    authnRequestConfig: samlAuthnRequestConfigGuard.nullable().optional(),
     nameIdFormat: nameIdFormatGuard,
 });
 const guard = z.object({
@@ -17,6 +18,7 @@ const guard = z.object({
     entityId: z.string().max(128).nullable(),
     acsUrl: samlAcsUrlGuard.nullable(),
     encryption: samlEncryptionGuard.nullable(),
+    authnRequestConfig: samlAuthnRequestConfigGuard.nullable(),
     nameIdFormat: nameIdFormatGuard,
 });
 export const SamlApplicationConfigs = Object.freeze({
@@ -29,6 +31,7 @@ export const SamlApplicationConfigs = Object.freeze({
         entityId: 'entity_id',
         acsUrl: 'acs_url',
         encryption: 'encryption',
+        authnRequestConfig: 'authn_request_config',
         nameIdFormat: 'name_id_format',
     },
     fieldKeys: [
@@ -38,6 +41,7 @@ export const SamlApplicationConfigs = Object.freeze({
         'entityId',
         'acsUrl',
         'encryption',
+        'authnRequestConfig',
         'nameIdFormat',
     ],
     createGuard,

package/lib/db-entries/secret.js

@@ -4,7 +4,7 @@ import { secretTypeGuard, bufferLikeGuard, jsonObjectGuard } from './../foundati
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     type: secretTypeGuard,
     encryptedDek: bufferLikeGuard,
     iv: bufferLikeGuard,
@@ -17,7 +17,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     type: secretTypeGuard,
     encryptedDek: bufferLikeGuard,
     iv: bufferLikeGuard,

package/lib/db-entries/subject-token.js

@@ -7,7 +7,7 @@ const createGuard = z.object({
     context: jsonObjectGuard.optional(),
     expiresAt: z.number(),
     consumedAt: z.number().nullable().optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number().optional(),
     creatorId: z.string().min(1).max(32),
 });
@@ -17,7 +17,7 @@ const guard = z.object({
     context: jsonObjectGuard,
     expiresAt: z.number(),
     consumedAt: z.number().nullable(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number(),
     creatorId: z.string().min(1).max(32),
 });

package/lib/db-entries/trusted-device.js

@@ -4,7 +4,7 @@ import { bufferLikeGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     secretHash: bufferLikeGuard,
     userAgent: z.string().nullable().optional(),
     ip: z.string().nullable().optional(),
@@ -17,7 +17,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     secretHash: bufferLikeGuard,
     userAgent: z.string().nullable(),
     ip: z.string().nullable(),

package/lib/db-entries/user-geo-location.js

@@ -2,14 +2,14 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     latitude: z.number().nullable().optional(),
     longitude: z.number().nullable().optional(),
     updatedAt: z.number().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     latitude: z.number().nullable(),
     longitude: z.number().nullable(),
     updatedAt: z.number(),

package/lib/db-entries/user-sign-in-country.js

@@ -2,13 +2,13 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     country: z.string().min(1).max(16),
     lastSignInAt: z.number().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     country: z.string().min(1).max(16),
     lastSignInAt: z.number(),
 });

package/lib/db-entries/user-sso-identity.js

@@ -4,7 +4,7 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     issuer: z.string().min(1).max(256),
     identityId: z.string().min(1).max(128),
     detail: jsonObjectGuard.optional(),
@@ -15,7 +15,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     issuer: z.string().min(1).max(256),
     identityId: z.string().min(1).max(128),
     detail: jsonObjectGuard,

package/lib/db-entries/user.js

@@ -4,7 +4,7 @@ import { userProfileGuard, identitiesGuard, jsonObjectGuard, mfaVerificationsGua
 import { UsersPasswordEncryptionMethod } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    id: z.string().min(1).max(12),
+    id: z.string().min(1).max(128),
     username: z.string().max(128).nullable().optional(),
     primaryEmail: z.string().max(128).nullable().optional(),
     primaryPhone: z.string().max(128).nullable().optional(),
@@ -28,7 +28,7 @@ const createGuard = z.object({
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    id: z.string().min(1).max(12),
+    id: z.string().min(1).max(128),
     username: z.string().max(128).nullable(),
     primaryEmail: z.string().max(128).nullable(),
     primaryPhone: z.string().max(128).nullable(),

package/lib/db-entries/users-role.js

@@ -3,13 +3,13 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     roleId: z.string().min(1).max(21),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     roleId: z.string().min(1).max(21),
 });
 export const UsersRoles = Object.freeze({

package/lib/db-entries/verification-record.js

@@ -4,7 +4,7 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().max(21).nullable().optional(),
+    userId: z.string().max(128).nullable().optional(),
     createdAt: z.number().optional(),
     expiresAt: z.number(),
     data: jsonObjectGuard.optional(),
@@ -12,7 +12,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().max(21).nullable(),
+    userId: z.string().max(128).nullable(),
     createdAt: z.number(),
     expiresAt: z.number(),
     data: jsonObjectGuard,

package/lib/db-entries/verification-status.js

@@ -3,14 +3,14 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number().optional(),
     verifiedIdentifier: z.string().max(255).nullable().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number(),
     verifiedIdentifier: z.string().max(255).nullable(),
 });

package/lib/foundations/jsonb-types/captcha.d.ts

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 export declare enum CaptchaType {
     RecaptchaEnterprise = "RecaptchaEnterprise",
-    Turnstile = "Turnstile"
+    Turnstile = "Turnstile",
+    Cap = "Cap"
 }
 export declare enum RecaptchaEnterpriseMode {
     Invisible = "invisible",
@@ -28,6 +29,7 @@ export declare const recaptchaEnterpriseConfigGuard: z.ZodObject<{
     projectId: z.ZodString;
     domain: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodNativeEnum<typeof RecaptchaEnterpriseMode>>;
+    scoreThreshold: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -35,6 +37,7 @@ export declare const recaptchaEnterpriseConfigGuard: z.ZodObject<{
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
 }, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -42,8 +45,32 @@ export declare const recaptchaEnterpriseConfigGuard: z.ZodObject<{
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
 }>;
 export type RecaptchaEnterpriseConfig = z.infer<typeof recaptchaEnterpriseConfigGuard>;
+/**
+ * Config of a self-hosted Cap Standalone instance.
+ *
+ * @see https://capjs.js.org/guide/standalone/
+ */
+export declare const capConfigGuard: z.ZodObject<{
+    type: z.ZodLiteral<CaptchaType.Cap>;
+    /** The public base URL of the Cap Standalone instance, e.g. `https://cap.example.com`. */
+    endpoint: z.ZodEffects<z.ZodString, string, string>;
+    siteKey: z.ZodString;
+    secretKey: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
+}, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
+}>;
+export type CapConfig = z.infer<typeof capConfigGuard>;
 export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<CaptchaType.Turnstile>;
     siteKey: z.ZodString;
@@ -63,6 +90,7 @@ export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodO
     projectId: z.ZodString;
     domain: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodNativeEnum<typeof RecaptchaEnterpriseMode>>;
+    scoreThreshold: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -70,6 +98,7 @@ export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodO
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
 }, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -77,5 +106,22 @@ export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodO
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<CaptchaType.Cap>;
+    /** The public base URL of the Cap Standalone instance, e.g. `https://cap.example.com`. */
+    endpoint: z.ZodEffects<z.ZodString, string, string>;
+    siteKey: z.ZodString;
+    secretKey: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
+}, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
 }>]>;
 export type CaptchaConfig = z.infer<typeof captchaConfigGuard>;

package/lib/foundations/jsonb-types/captcha.js

@@ -3,6 +3,7 @@ export var CaptchaType;
 (function (CaptchaType) {
     CaptchaType["RecaptchaEnterprise"] = "RecaptchaEnterprise";
     CaptchaType["Turnstile"] = "Turnstile";
+    CaptchaType["Cap"] = "Cap";
 })(CaptchaType || (CaptchaType = {}));
 export var RecaptchaEnterpriseMode;
 (function (RecaptchaEnterpriseMode) {
@@ -21,8 +22,27 @@ export const recaptchaEnterpriseConfigGuard = z.object({
     projectId: z.string(),
     domain: z.string().optional(),
     mode: z.nativeEnum(RecaptchaEnterpriseMode).optional(),
+    scoreThreshold: z.number().min(0).max(1).optional(),
+});
+/**
+ * Config of a self-hosted Cap Standalone instance.
+ *
+ * @see https://capjs.js.org/guide/standalone/
+ */
+export const capConfigGuard = z.object({
+    type: z.literal(CaptchaType.Cap),
+    /** The public base URL of the Cap Standalone instance, e.g. `https://cap.example.com`. */
+    endpoint: z
+        .string()
+        .url()
+        .refine((value) => ['http:', 'https:'].includes(new URL(value).protocol), {
+        message: 'The endpoint must be an HTTP(S) URL.',
+    }),
+    siteKey: z.string(),
+    secretKey: z.string(),
 });
 export const captchaConfigGuard = z.discriminatedUnion('type', [
     turnstileConfigGuard,
     recaptchaEnterpriseConfigGuard,
+    capConfigGuard,
 ]);

package/lib/foundations/jsonb-types/hooks.d.ts

@@ -33,9 +33,6 @@ type CustomDataHookMutableSchema = `${Exclude<DataHookSchema, DataHookSchema.Tru
 type DataHookPropertyUpdateEvent = `${CustomDataHookMutableSchema}.${DataHookDetailMutationType.Updated}`;
 export type ExceptionHookEvent = 'Identifier.Lockout' | 'Message.RateLimited' | 'Grant.LimitExceeded';
 export type DataHookEvent = BasicDataHookEvent | DataHookPropertyUpdateEvent;
-/** Data hook events that are available only while their feature is under development. */
-export declare const devFeatureHookEvents: readonly ["TrustedDevice.Created", "TrustedDevice.Deleted"];
-export type DevFeatureHookEvent = (typeof devFeatureHookEvents)[number];
 /** The hook event values that can be registered. */
 export declare const hookEvents: readonly [InteractionHookEvent.PostRegister, InteractionHookEvent.PostSignIn, InteractionHookEvent.PostSignInAdaptiveMfaTriggered, InteractionHookEvent.PostResetPassword, "User.Created", "User.Deleted", "User.Data.Updated", "User.SuspensionStatus.Updated", "TrustedDevice.Created", "TrustedDevice.Deleted", "Role.Created", "Role.Deleted", "Role.Data.Updated", "Role.Scopes.Updated", "Scope.Created", "Scope.Deleted", "Scope.Data.Updated", "Organization.Created", "Organization.Deleted", "Organization.Data.Updated", "Organization.Membership.Updated", "OrganizationRole.Created", "OrganizationRole.Deleted", "OrganizationRole.Data.Updated", "OrganizationRole.Scopes.Updated", "OrganizationScope.Created", "OrganizationScope.Deleted", "OrganizationScope.Data.Updated", "Identifier.Lockout", "Message.RateLimited", "Grant.LimitExceeded"];
 /** The type of hook event values that can be registered. */

package/lib/foundations/jsonb-types/hooks.js

@@ -34,11 +34,6 @@ var DataHookDetailMutationType;
 (function (DataHookDetailMutationType) {
     DataHookDetailMutationType["Updated"] = "Updated";
 })(DataHookDetailMutationType || (DataHookDetailMutationType = {}));
-/** Data hook events that are available only while their feature is under development. */
-export const devFeatureHookEvents = Object.freeze([
-    'TrustedDevice.Created',
-    'TrustedDevice.Deleted',
-]);
 /** The hook event values that can be registered. */
 export const hookEvents = Object.freeze([
     InteractionHookEvent.PostRegister,
@@ -49,7 +44,8 @@ export const hookEvents = Object.freeze([
     'User.Deleted',
     'User.Data.Updated',
     'User.SuspensionStatus.Updated',
-    ...devFeatureHookEvents,
+    'TrustedDevice.Created',
+    'TrustedDevice.Deleted',
     'Role.Created',
     'Role.Deleted',
     'Role.Data.Updated',