@logto/schemas 1.43.0 → 1.45.0

package/lib/consts/oidc.d.ts

@@ -67,7 +67,17 @@ export declare enum ExtraParamsKey {
     /**
      * The Google One Tap credential JWT token for external website integration.
      */
-    GoogleOneTapCredential = "google_one_tap_credential"
+    GoogleOneTapCredential = "google_one_tap_credential",
+    /**
+     * Overrides the theme that the sign-in experience would otherwise resolve from the end-user's
+     * OS settings, so an application with its own light / dark toggle can keep Logto in sync.
+     *
+     * The parameter is ignored when dark mode is disabled in the sign-in experience configuration,
+     * and an unrecognized value is ignored without affecting the other parameters.
+     *
+     * The available values are `light` and `dark`.
+     */
+    Theme = "theme"
 }
 /** @deprecated Use {@link FirstScreen} instead. */
 export declare enum InteractionMode {
@@ -94,6 +104,7 @@ export declare const extraParamsObjectGuard: z.ZodObject<{
     identifier: z.ZodOptional<z.ZodString>;
     one_time_token: z.ZodOptional<z.ZodString>;
     google_one_tap_credential: z.ZodOptional<z.ZodString>;
+    theme: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     interaction_mode?: InteractionMode | undefined;
     first_screen?: FirstScreen | undefined;
@@ -104,6 +115,7 @@ export declare const extraParamsObjectGuard: z.ZodObject<{
     identifier?: string | undefined;
     one_time_token?: string | undefined;
     google_one_tap_credential?: string | undefined;
+    theme?: string | undefined;
 }, {
     interaction_mode?: InteractionMode | undefined;
     first_screen?: FirstScreen | undefined;
@@ -114,6 +126,7 @@ export declare const extraParamsObjectGuard: z.ZodObject<{
     identifier?: string | undefined;
     one_time_token?: string | undefined;
     google_one_tap_credential?: string | undefined;
+    theme?: string | undefined;
 }>;
 export type ExtraParamsObject = Partial<{
     [ExtraParamsKey.InteractionMode]: InteractionMode;
@@ -125,4 +138,5 @@ export type ExtraParamsObject = Partial<{
     [ExtraParamsKey.Identifier]: string;
     [ExtraParamsKey.OneTimeToken]: string;
     [ExtraParamsKey.GoogleOneTapCredential]: string;
+    [ExtraParamsKey.Theme]: string;
 }>;

package/lib/consts/oidc.js

@@ -70,6 +70,16 @@ export var ExtraParamsKey;
      * The Google One Tap credential JWT token for external website integration.
      */
     ExtraParamsKey["GoogleOneTapCredential"] = "google_one_tap_credential";
+    /**
+     * Overrides the theme that the sign-in experience would otherwise resolve from the end-user's
+     * OS settings, so an application with its own light / dark toggle can keep Logto in sync.
+     *
+     * The parameter is ignored when dark mode is disabled in the sign-in experience configuration,
+     * and an unrecognized value is ignored without affecting the other parameters.
+     *
+     * The available values are `light` and `dark`.
+     */
+    ExtraParamsKey["Theme"] = "theme";
 })(ExtraParamsKey || (ExtraParamsKey = {}));
 /** @deprecated Use {@link FirstScreen} instead. */
 export var InteractionMode;
@@ -99,5 +109,6 @@ export const extraParamsObjectGuard = z
     [ExtraParamsKey.Identifier]: z.string(),
     [ExtraParamsKey.OneTimeToken]: z.string(),
     [ExtraParamsKey.GoogleOneTapCredential]: z.string(),
+    [ExtraParamsKey.Theme]: z.string(),
 })
     .partial();

package/lib/consts/oidc.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/consts/oidc.test.js

@@ -0,0 +1,15 @@
+import { describe, expect, it } from 'vitest';
+import { ExtraParamsKey, FirstScreen, extraParamsObjectGuard } from './oidc.js';
+describe('extraParamsObjectGuard', () => {
+    it('should keep the other parameters when the theme is not a supported value', () => {
+        // Core parses every extra param in one call and falls back to an empty object when the
+        // parse throws, so a loose value here must never discard the parameters next to it.
+        const params = extraParamsObjectGuard.parse({
+            [ExtraParamsKey.Theme]: 'sepia',
+            [ExtraParamsKey.FirstScreen]: FirstScreen.Register,
+            [ExtraParamsKey.LoginHint]: 'foo@logto.io',
+        });
+        expect(params[ExtraParamsKey.FirstScreen]).toBe(FirstScreen.Register);
+        expect(params[ExtraParamsKey.LoginHint]).toBe('foo@logto.io');
+    });
+});

package/lib/consts/subscriptions.d.ts

@@ -27,7 +27,19 @@ export declare enum ReservedPlanId {
     /**
      * Latest Pro plan ID applied from 2025-09.
      */
-    Pro202509 = "pro-202509"
+    Pro202509 = "pro-202509",
+    /**
+     * Self-hosted Pro plan, unlocked by installing a license key on a self-hosted instance.
+     *
+     * Unlike the plans above, this one is never returned by the Cloud subscription API: it is carried
+     * in the signed license payload and resolved locally. See `licensePayloadGuard`.
+     */
+    SelfHostedPro = "self-hosted-pro",
+    /**
+     * Self-hosted Enterprise plan, unlocked by installing a license key on a self-hosted instance.
+     * See {@link SelfHostedPro}.
+     */
+    SelfHostedEnterprise = "self-hosted-enterprise"
 }
 /**
  * Tenant subscription related Redis cache keys.

package/lib/consts/subscriptions.js

@@ -29,6 +29,18 @@ export var ReservedPlanId;
      * Latest Pro plan ID applied from 2025-09.
      */
     ReservedPlanId["Pro202509"] = "pro-202509";
+    /**
+     * Self-hosted Pro plan, unlocked by installing a license key on a self-hosted instance.
+     *
+     * Unlike the plans above, this one is never returned by the Cloud subscription API: it is carried
+     * in the signed license payload and resolved locally. See `licensePayloadGuard`.
+     */
+    ReservedPlanId["SelfHostedPro"] = "self-hosted-pro";
+    /**
+     * Self-hosted Enterprise plan, unlocked by installing a license key on a self-hosted instance.
+     * See {@link SelfHostedPro}.
+     */
+    ReservedPlanId["SelfHostedEnterprise"] = "self-hosted-enterprise";
 })(ReservedPlanId || (ReservedPlanId = {}));
 /**
  * Tenant subscription related Redis cache keys.

package/lib/db-entries/aggregated-daily-active-user.js

@@ -3,13 +3,13 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     activityDate: z.number(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     activityCount: z.number(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     activityDate: z.number(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     activityCount: z.number(),
 });
 export const AggregatedDailyActiveUsers = Object.freeze({

package/lib/db-entries/application-access-control-user-relation.js

@@ -3,12 +3,12 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     applicationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     applicationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const ApplicationAccessControlUserRelations = Object.freeze({
     table: 'application_access_control_user_relations',

package/lib/db-entries/application-user-consent-organization.js

@@ -4,13 +4,13 @@ const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     applicationId: z.string().min(1).max(21),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     applicationId: z.string().min(1).max(21),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const ApplicationUserConsentOrganizations = Object.freeze({
     table: 'application_user_consent_organizations',

package/lib/db-entries/cimd-grant-organization.js

@@ -5,14 +5,14 @@ const createGuard = z.object({
     grantId: z.string().min(1).max(128),
     grantModelName: z.string().min(1).max(64).optional(),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     grantId: z.string().min(1).max(128),
     grantModelName: z.string().max(64),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const CimdGrantOrganizations = Object.freeze({
     table: 'cimd_grant_organizations',

package/lib/db-entries/daily-active-user.js

@@ -3,13 +3,13 @@ import { z } from 'zod';
 const createGuard = z.object({
     id: z.string().min(1).max(21),
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     date: z.number().optional(),
 });
 const guard = z.object({
     id: z.string().min(1).max(21),
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     date: z.number(),
 });
 export const DailyActiveUsers = Object.freeze({

package/lib/db-entries/oidc-session-extension.js

@@ -4,7 +4,7 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     sessionUid: z.string().min(1).max(128),
-    accountId: z.string().min(1).max(12),
+    accountId: z.string().min(1).max(128),
     lastSubmission: jsonObjectGuard.optional(),
     clientId: z.string().max(21).nullable().optional(),
     cimdClientId: z.string().max(2048).nullable().optional(),
@@ -14,7 +14,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     sessionUid: z.string().min(1).max(128),
-    accountId: z.string().min(1).max(12),
+    accountId: z.string().min(1).max(128),
     lastSubmission: jsonObjectGuard,
     clientId: z.string().max(21).nullable(),
     cimdClientId: z.string().max(2048).nullable(),

package/lib/db-entries/organization-invitation.js

@@ -4,9 +4,9 @@ import { OrganizationInvitationStatus } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    inviterId: z.string().max(21).nullable().optional(),
+    inviterId: z.string().max(128).nullable().optional(),
     invitee: z.string().min(1).max(256),
-    acceptedUserId: z.string().max(21).nullable().optional(),
+    acceptedUserId: z.string().max(128).nullable().optional(),
     organizationId: z.string().min(1).max(21),
     status: z.nativeEnum(OrganizationInvitationStatus),
     createdAt: z.number().optional(),
@@ -16,9 +16,9 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    inviterId: z.string().max(21).nullable(),
+    inviterId: z.string().max(128).nullable(),
     invitee: z.string().min(1).max(256),
-    acceptedUserId: z.string().max(21).nullable(),
+    acceptedUserId: z.string().max(128).nullable(),
     organizationId: z.string().min(1).max(21),
     status: z.nativeEnum(OrganizationInvitationStatus),
     createdAt: z.number(),

package/lib/db-entries/organization-role-user-relation.js

@@ -4,13 +4,13 @@ const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     organizationId: z.string().min(1).max(21),
     organizationRoleId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     organizationId: z.string().min(1).max(21),
     organizationRoleId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const OrganizationRoleUserRelations = Object.freeze({
     table: 'organization_role_user_relations',

package/lib/db-entries/organization-user-relation.js

@@ -3,12 +3,12 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     organizationId: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
 });
 export const OrganizationUserRelations = Object.freeze({
     table: 'organization_user_relations',

package/lib/db-entries/personal-access-token.js

@@ -2,7 +2,7 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     name: z.string().min(1).max(256),
     value: z.string().min(1).max(64),
     createdAt: z.number().optional(),
@@ -10,7 +10,7 @@ const createGuard = z.object({
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     name: z.string().min(1).max(256),
     value: z.string().min(1).max(64),
     createdAt: z.number(),

package/lib/db-entries/saml-application-config.d.ts

@@ -1,4 +1,4 @@
-import { SamlAttributeMapping, SamlAcsUrl, SamlEncryption, NameIdFormat, GeneratedSchema } from './../foundations/index.js';
+import { SamlAttributeMapping, SamlAcsUrl, SamlEncryption, SamlAuthnRequestConfig, NameIdFormat, GeneratedSchema } from './../foundations/index.js';
 /**
  * The SAML application config and SAML-type application have a one-to-one correspondence: 1. a SAML-type application can only have one SAML application config. (CANNOT use "semicolon" in comments, since it indicates the end of query.) 2. a SAML application config can only configure one SAML-type application.
  *
@@ -12,6 +12,7 @@ export type CreateSamlApplicationConfig = {
     entityId?: string | null;
     acsUrl?: SamlAcsUrl | null;
     encryption?: SamlEncryption | null;
+    authnRequestConfig?: SamlAuthnRequestConfig | null;
     nameIdFormat: NameIdFormat;
 };
 /** The SAML application config and SAML-type application have a one-to-one correspondence: 1. a SAML-type application can only have one SAML application config. (CANNOT use "semicolon" in comments, since it indicates the end of query.) 2. a SAML application config can only configure one SAML-type application. */
@@ -22,7 +23,8 @@ export type SamlApplicationConfig = {
     entityId: string | null;
     acsUrl: SamlAcsUrl | null;
     encryption: SamlEncryption | null;
+    authnRequestConfig: SamlAuthnRequestConfig | null;
     nameIdFormat: NameIdFormat;
 };
-export type SamlApplicationConfigKeys = 'applicationId' | 'tenantId' | 'attributeMapping' | 'entityId' | 'acsUrl' | 'encryption' | 'nameIdFormat';
+export type SamlApplicationConfigKeys = 'applicationId' | 'tenantId' | 'attributeMapping' | 'entityId' | 'acsUrl' | 'encryption' | 'authnRequestConfig' | 'nameIdFormat';
 export declare const SamlApplicationConfigs: GeneratedSchema<SamlApplicationConfigKeys, CreateSamlApplicationConfig, SamlApplicationConfig, 'saml_application_configs', 'saml_application_config'>;

package/lib/db-entries/saml-application-config.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { samlAttributeMappingGuard, samlAcsUrlGuard, samlEncryptionGuard, nameIdFormatGuard } from './../foundations/index.js';
+import { samlAttributeMappingGuard, samlAcsUrlGuard, samlEncryptionGuard, samlAuthnRequestConfigGuard, nameIdFormatGuard } from './../foundations/index.js';
 const createGuard = z.object({
     applicationId: z.string().min(1).max(21),
     tenantId: z.string().max(21).optional(),
@@ -8,6 +8,7 @@ const createGuard = z.object({
     entityId: z.string().max(128).nullable().optional(),
     acsUrl: samlAcsUrlGuard.nullable().optional(),
     encryption: samlEncryptionGuard.nullable().optional(),
+    authnRequestConfig: samlAuthnRequestConfigGuard.nullable().optional(),
     nameIdFormat: nameIdFormatGuard,
 });
 const guard = z.object({
@@ -17,6 +18,7 @@ const guard = z.object({
     entityId: z.string().max(128).nullable(),
     acsUrl: samlAcsUrlGuard.nullable(),
     encryption: samlEncryptionGuard.nullable(),
+    authnRequestConfig: samlAuthnRequestConfigGuard.nullable(),
     nameIdFormat: nameIdFormatGuard,
 });
 export const SamlApplicationConfigs = Object.freeze({
@@ -29,6 +31,7 @@ export const SamlApplicationConfigs = Object.freeze({
         entityId: 'entity_id',
         acsUrl: 'acs_url',
         encryption: 'encryption',
+        authnRequestConfig: 'authn_request_config',
         nameIdFormat: 'name_id_format',
     },
     fieldKeys: [
@@ -38,6 +41,7 @@ export const SamlApplicationConfigs = Object.freeze({
         'entityId',
         'acsUrl',
         'encryption',
+        'authnRequestConfig',
         'nameIdFormat',
     ],
     createGuard,

package/lib/db-entries/secret.js

@@ -4,7 +4,7 @@ import { secretTypeGuard, bufferLikeGuard, jsonObjectGuard } from './../foundati
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     type: secretTypeGuard,
     encryptedDek: bufferLikeGuard,
     iv: bufferLikeGuard,
@@ -17,7 +17,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     type: secretTypeGuard,
     encryptedDek: bufferLikeGuard,
     iv: bufferLikeGuard,

package/lib/db-entries/subject-token.js

@@ -7,7 +7,7 @@ const createGuard = z.object({
     context: jsonObjectGuard.optional(),
     expiresAt: z.number(),
     consumedAt: z.number().nullable().optional(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number().optional(),
     creatorId: z.string().min(1).max(32),
 });
@@ -17,7 +17,7 @@ const guard = z.object({
     context: jsonObjectGuard,
     expiresAt: z.number(),
     consumedAt: z.number().nullable(),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number(),
     creatorId: z.string().min(1).max(32),
 });

package/lib/db-entries/trusted-device.js

@@ -4,7 +4,7 @@ import { bufferLikeGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     secretHash: bufferLikeGuard,
     userAgent: z.string().nullable().optional(),
     ip: z.string().nullable().optional(),
@@ -17,7 +17,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     secretHash: bufferLikeGuard,
     userAgent: z.string().nullable(),
     ip: z.string().nullable(),

package/lib/db-entries/user-geo-location.js

@@ -2,14 +2,14 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     latitude: z.number().nullable().optional(),
     longitude: z.number().nullable().optional(),
     updatedAt: z.number().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     latitude: z.number().nullable(),
     longitude: z.number().nullable(),
     updatedAt: z.number(),

package/lib/db-entries/user-sign-in-country.js

@@ -2,13 +2,13 @@
 import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     country: z.string().min(1).max(16),
     lastSignInAt: z.number().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     country: z.string().min(1).max(16),
     lastSignInAt: z.number(),
 });

package/lib/db-entries/user-sso-identity.js

@@ -4,7 +4,7 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     issuer: z.string().min(1).max(256),
     identityId: z.string().min(1).max(128),
     detail: jsonObjectGuard.optional(),
@@ -15,7 +15,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(12),
+    userId: z.string().min(1).max(128),
     issuer: z.string().min(1).max(256),
     identityId: z.string().min(1).max(128),
     detail: jsonObjectGuard,

package/lib/db-entries/user.js

@@ -4,7 +4,7 @@ import { userProfileGuard, identitiesGuard, jsonObjectGuard, mfaVerificationsGua
 import { UsersPasswordEncryptionMethod } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
-    id: z.string().min(1).max(12),
+    id: z.string().min(1).max(128),
     username: z.string().max(128).nullable().optional(),
     primaryEmail: z.string().max(128).nullable().optional(),
     primaryPhone: z.string().max(128).nullable().optional(),
@@ -28,7 +28,7 @@ const createGuard = z.object({
 });
 const guard = z.object({
     tenantId: z.string().max(21),
-    id: z.string().min(1).max(12),
+    id: z.string().min(1).max(128),
     username: z.string().max(128).nullable(),
     primaryEmail: z.string().max(128).nullable(),
     primaryPhone: z.string().max(128).nullable(),

package/lib/db-entries/users-role.js

@@ -3,13 +3,13 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     roleId: z.string().min(1).max(21),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     roleId: z.string().min(1).max(21),
 });
 export const UsersRoles = Object.freeze({

package/lib/db-entries/verification-record.js

@@ -4,7 +4,7 @@ import { jsonObjectGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().max(21).nullable().optional(),
+    userId: z.string().max(128).nullable().optional(),
     createdAt: z.number().optional(),
     expiresAt: z.number(),
     data: jsonObjectGuard.optional(),
@@ -12,7 +12,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().max(21).nullable(),
+    userId: z.string().max(128).nullable(),
     createdAt: z.number(),
     expiresAt: z.number(),
     data: jsonObjectGuard,

package/lib/db-entries/verification-status.js

@@ -3,14 +3,14 @@ import { z } from 'zod';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number().optional(),
     verifiedIdentifier: z.string().max(255).nullable().optional(),
 });
 const guard = z.object({
     tenantId: z.string().max(21),
     id: z.string().min(1).max(21),
-    userId: z.string().min(1).max(21),
+    userId: z.string().min(1).max(128),
     createdAt: z.number(),
     verifiedIdentifier: z.string().max(255).nullable(),
 });

package/lib/foundations/jsonb-types/captcha.d.ts

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 export declare enum CaptchaType {
     RecaptchaEnterprise = "RecaptchaEnterprise",
-    Turnstile = "Turnstile"
+    Turnstile = "Turnstile",
+    Cap = "Cap"
 }
 export declare enum RecaptchaEnterpriseMode {
     Invisible = "invisible",
@@ -28,6 +29,7 @@ export declare const recaptchaEnterpriseConfigGuard: z.ZodObject<{
     projectId: z.ZodString;
     domain: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodNativeEnum<typeof RecaptchaEnterpriseMode>>;
+    scoreThreshold: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -35,6 +37,7 @@ export declare const recaptchaEnterpriseConfigGuard: z.ZodObject<{
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
 }, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -42,8 +45,32 @@ export declare const recaptchaEnterpriseConfigGuard: z.ZodObject<{
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
 }>;
 export type RecaptchaEnterpriseConfig = z.infer<typeof recaptchaEnterpriseConfigGuard>;
+/**
+ * Config of a self-hosted Cap Standalone instance.
+ *
+ * @see https://capjs.js.org/guide/standalone/
+ */
+export declare const capConfigGuard: z.ZodObject<{
+    type: z.ZodLiteral<CaptchaType.Cap>;
+    /** The public base URL of the Cap Standalone instance, e.g. `https://cap.example.com`. */
+    endpoint: z.ZodEffects<z.ZodString, string, string>;
+    siteKey: z.ZodString;
+    secretKey: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
+}, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
+}>;
+export type CapConfig = z.infer<typeof capConfigGuard>;
 export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<CaptchaType.Turnstile>;
     siteKey: z.ZodString;
@@ -63,6 +90,7 @@ export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodO
     projectId: z.ZodString;
     domain: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodNativeEnum<typeof RecaptchaEnterpriseMode>>;
+    scoreThreshold: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -70,6 +98,7 @@ export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodO
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
 }, {
     type: CaptchaType.RecaptchaEnterprise;
     siteKey: string;
@@ -77,5 +106,22 @@ export declare const captchaConfigGuard: z.ZodDiscriminatedUnion<"type", [z.ZodO
     projectId: string;
     domain?: string | undefined;
     mode?: RecaptchaEnterpriseMode | undefined;
+    scoreThreshold?: number | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<CaptchaType.Cap>;
+    /** The public base URL of the Cap Standalone instance, e.g. `https://cap.example.com`. */
+    endpoint: z.ZodEffects<z.ZodString, string, string>;
+    siteKey: z.ZodString;
+    secretKey: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
+}, {
+    type: CaptchaType.Cap;
+    siteKey: string;
+    secretKey: string;
+    endpoint: string;
 }>]>;
 export type CaptchaConfig = z.infer<typeof captchaConfigGuard>;