@databutton/firebase-types 1.141.1 → 1.143.0

package/lib/types/published/enums.d.ts

@@ -41,6 +41,7 @@ export declare enum CollectionName {
     LOGS = "logs",
     ACCOUNT_MEMBERS = "members",
     ACCOUNT_CONFIGS = "configs",
+    PROJECT_CONFIGS = "configs",
     ACCOUNT_APPROVAL_REQUESTS = "approval-requests",
     ACCOUNT_INVITES = "account-invites",
     ACCOUNT_KNOWLEDGE_SUGGESTIONS = "knowledge-suggestions",

package/lib/types/published/enums.js

@@ -42,6 +42,7 @@ export var CollectionName;
     CollectionName["LOGS"] = "logs";
     CollectionName["ACCOUNT_MEMBERS"] = "members";
     CollectionName["ACCOUNT_CONFIGS"] = "configs";
+    CollectionName["PROJECT_CONFIGS"] = "configs";
     CollectionName["ACCOUNT_APPROVAL_REQUESTS"] = "approval-requests";
     CollectionName["ACCOUNT_INVITES"] = "account-invites";
     CollectionName["ACCOUNT_KNOWLEDGE_SUGGESTIONS"] = "knowledge-suggestions";

package/lib/types/published/persisted.d.ts

@@ -220,6 +220,27 @@ export interface GatingConfig extends AccountConfigBase {
     approvalLevelRequiredFor: Record<ProjectPermissionName, ApprovalLevel>;
 }
 export type AccountConfig = SSOConfig | PostHogConfig | GatingConfig;
+interface ProjectConfigBase {
+    enabledBy: PerformedBy;
+    lastUpdatedBy: PerformedBy;
+}
+/**
+ * Project-level SSO configuration that overrides the account-level config.
+ * Stored at /projects/{projectId}/configs/sso
+ */
+export interface ProjectSSOConfig extends ProjectConfigBase {
+    type: ConfigTypes.SSO;
+    /**
+     * Organization ID from WorkOS - if set, overrides the account organizationId
+     */
+    organizationId?: string | null;
+    /**
+     * Project-specific role mapping - fully replaces account mapping when set.
+     * If not set, falls back to the account-level mapping.
+     */
+    riffToWorkosRoleMapping?: Record<string, string[]>;
+}
+export type ProjectConfig = ProjectSSOConfig;
 export interface SSOConfigLookupEntry {
     lastUpdatedAt: Timestamp;
     organizationId: string;
@@ -1015,6 +1036,7 @@ export interface OidcAuthExtensionAttributesForWorkos {
 export interface WorkosAuthExtensionConfig {
     clientId: string;
     orgId: string;
+    refreshKey?: string;
 }
 export interface StackAuthExtensionConfig {
     projectId: string;
@@ -1549,6 +1571,9 @@ export interface ProjectAccess {
     prodxAppbutlerId?: string | null;
     supportUntil?: Timestamp | null;
     devxOpenUntil?: Timestamp | null;
+    refreshKey?: string;
+    salt?: string;
+    checkAttributes?: OidcAttributeCheck[];
 }
 export type DnsRecord = {
     name: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@databutton/firebase-types",
-  "version": "1.141.1",
+  "version": "1.143.0",
   "main": "lib/types/published/index.js",
   "type": "module",
   "engines": {