@estifanos-sh/convex-auth 0.0.2 → 0.0.3

package/dist/server/validators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validators.d.ts","names":[],"sources":["../../src/server/validators.ts"],"mappings":";;;;;;;;;;;KAoDY,oBAAA;EASP,8BAPH,IAAA,GAAO,SAAA,iBAOK;EALZ,KAAA,GAAQ,SAAA,iBAK2D;EAHnE,WAAA,GAAc,SAAA;AAAA;AAAA,KAGX,SAAA,iBAA0B,oBAAA,kBAAsC,oBAAA,IACnE,OAAA,CAAQ,CAAA,UAAW,SAAA,kBAA2B,OAAA,CAAQ,CAAA,IAAK,UAAA,QAAkB,CAAA,CAAE,GAAA;;;;;;;;;;;;;;;;;;;;iBAkUjE,oBAAA,iBAAqC,oBAAA,CAAA,CACnD,MAAA,GAAQ,OAAA;EADM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4CJ,cAAA,iBAA+B,oBAAA,SAA6B,UAAA,QAC/D,oBAAA,CAAqB,OAAA;;;;;;KAQlB,MAAA,iBAAuB,oBAAA,SAA6B,KAAA,CAC9D,cAAA,CAAe,OAAA;;;;;;KAOL,KAAA,iBAAsB,oBAAA,SAA6B,KAAA,CAC7D,cAAA,CAAe,OAAA;;;;;;KAOL,UAAA,iBAA2B,oBAAA,SAA6B,KAAA,CAClE,cAAA,CAAe,OAAA"}
+{"version":3,"file":"validators.d.ts","names":[],"sources":["../../src/server/validators.ts"],"mappings":";;;;;;;;;;;;KAoDY,oBAAA;EASP,8BAPH,IAAA,GAAO,SAAA,iBAOK;EALZ,KAAA,GAAQ,SAAA,iBAK2D;EAHnE,WAAA,GAAc,SAAA;AAAA;AAAA,KAGX,SAAA,iBAA0B,oBAAA,kBAAsC,oBAAA,IACnE,OAAA,CAAQ,CAAA,UAAW,SAAA,kBAA2B,OAAA,CAAQ,CAAA,IAAK,UAAA,QAAkB,CAAA,CAAE,GAAA;;;;;;;;;;;;;;;;;;;;iBAkUjE,oBAAA,iBAAqC,oBAAA,CAAA,CACnD,MAAA,GAAQ,OAAA;EADM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAkDJ,cAAA,iBAA+B,oBAAA,SAA6B,UAAA,QAC/D,oBAAA,CAAqB,OAAA;;;;;;KAQlB,MAAA,iBAAuB,oBAAA,SAA6B,KAAA,CAC9D,cAAA,CAAe,OAAA;;;;;;KAOL,KAAA,iBAAsB,oBAAA,SAA6B,KAAA,CAC7D,cAAA,CAAe,OAAA;;;;;;KAOL,UAAA,iBAA2B,oBAAA,SAA6B,KAAA,CAClE,cAAA,CAAe,OAAA"}

package/dist/server/validators.js

@@ -36,15 +36,15 @@ const vConnectionCheck = v.object({
 	ok: v.boolean(),
 	message: v.optional(v.string())
 });
-const vConnectionIdResult = v.object({ connectionId: v.string() });
+const vConnectionIdResult = v.object({ connectionId: vIdString("GroupConnection") });
 const vConnectionGroupResult = v.object({
-	connectionId: v.string(),
-	groupId: v.string()
+	connectionId: vIdString("GroupConnection"),
+	groupId: vIdString("Group")
 });
 const vConnectionDoc = v.object({
-	_id: v.string(),
+	_id: vIdString("GroupConnection"),
 	_creationTime: v.number(),
-	groupId: v.string(),
+	groupId: vIdString("Group"),
 	slug: v.optional(v.string()),
 	name: v.optional(v.string()),
 	protocol: vGroupConnectionProtocol,
@@ -53,10 +53,10 @@ const vConnectionDoc = v.object({
 	extend: v.optional(v.any())
 });
 const vConnectionDomainDoc = v.object({
-	_id: v.string(),
+	_id: vIdString("GroupConnectionDomain"),
 	_creationTime: v.number(),
-	connectionId: v.string(),
-	groupId: v.string(),
+	connectionId: vIdString("GroupConnection"),
+	groupId: vIdString("Group"),
 	domain: v.string(),
 	isPrimary: v.boolean(),
 	verifiedAt: v.optional(v.number())
@@ -66,14 +66,14 @@ const vConnectionLookup = v.union(v.object({
 	domain: v.union(vConnectionDomainDoc, v.null())
 }), v.null());
 const vConnectionDomainSummary = v.object({
-	domainId: v.string(),
+	domainId: vIdString("GroupConnectionDomain"),
 	domain: v.string(),
 	isPrimary: v.boolean(),
 	verified: v.boolean(),
 	verifiedAt: vNullableNumber
 });
 const vConnectionDomainValidation = v.object({
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	ready: v.boolean(),
 	summary: v.object({
 		domainCount: v.number(),
@@ -84,11 +84,11 @@ const vConnectionDomainValidation = v.object({
 	warnings: v.array(v.string())
 });
 const vConnectionDomainSet = v.object({
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	domains: v.array(vConnectionDomainSummary)
 });
 const vConnectionDomainVerificationRequest = v.object({
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	domain: v.string(),
 	requestedAt: v.number(),
 	expiresAt: v.number(),
@@ -99,13 +99,13 @@ const vConnectionDomainVerificationRequest = v.object({
 	})
 });
 const vConnectionDomainVerificationConfirm = v.object({
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	domain: v.string(),
 	verifiedAt: v.optional(v.number()),
 	checks: v.array(vConnectionCheck)
 });
 const vConnectionStatus = v.object({
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	status: vGroupConnectionStatus,
 	ready: v.boolean(),
 	domainCount: v.number(),
@@ -140,20 +140,20 @@ const vConnectionOidcConfig = v.object({
 });
 const vConnectionValidation = v.object({
 	ok: v.boolean(),
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	checks: v.array(vConnectionCheck)
 });
 const vConnectionPolicyValidation = v.object({
 	ok: v.boolean(),
-	groupId: v.string(),
+	groupId: vIdString("Group"),
 	policy: v.optional(vGroupConnectionPolicy),
 	checks: v.array(vConnectionCheck)
 });
 const vConnectionScimConfig = v.object({
-	_id: v.string(),
+	_id: vIdString("GroupConnectionScimConfig"),
 	_creationTime: v.number(),
-	connectionId: v.string(),
-	groupId: v.string(),
+	connectionId: vIdString("GroupConnection"),
+	groupId: vIdString("Group"),
 	status: vScimStatus,
 	basePath: v.string(),
 	lastRotatedAt: v.optional(v.number()),
@@ -163,14 +163,14 @@ const vConnectionScimConfig = v.object({
 	profile: v.optional(v.any())
 });
 const vConnectionScimSet = v.object({
-	connectionId: v.string(),
-	configId: v.string(),
+	connectionId: vIdString("GroupConnection"),
+	configId: vIdString("GroupConnectionScimConfig"),
 	basePath: v.string(),
 	token: v.string()
 });
 const vConnectionScimValidation = v.object({
 	ok: v.boolean(),
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	basePath: v.optional(v.string()),
 	deprovisionMode: v.optional(v.union(v.literal("soft"), v.literal("hard"))),
 	capabilities: v.optional(v.object({
@@ -185,7 +185,7 @@ const vConnectionScimValidation = v.object({
 	checks: v.array(vConnectionCheck)
 });
 const vConnectionSignIn = v.object({
-	connectionId: v.string(),
+	connectionId: vIdString("GroupConnection"),
 	providerId: v.string(),
 	protocol: vGroupConnectionProtocol,
 	signInPath: v.string(),
@@ -193,7 +193,7 @@ const vConnectionSignIn = v.object({
 	redirectTo: v.optional(v.string())
 });
 const vConnectionAuditEvent = v.object({
-	_id: v.string(),
+	_id: vIdString("AuthEventProjection"),
 	_creationTime: v.number(),
 	eventId: v.string(),
 	targetKind: vAuthEventTargetKind,
@@ -212,24 +212,24 @@ const vConnectionAuditEvent = v.object({
 	data: v.optional(vAuthEventData)
 });
 const vConnectionWebhookEndpoint = v.object({
-	_id: v.string(),
+	_id: vIdString("GroupWebhookEndpoint"),
 	_creationTime: v.number(),
-	connectionId: v.string(),
-	groupId: v.string(),
+	connectionId: vIdString("GroupConnection"),
+	groupId: vIdString("Group"),
 	url: v.string(),
 	status: vWebhookEndpointStatus,
 	subscriptions: v.array(vAuthEventKind),
-	createdByUserId: v.optional(v.string()),
+	createdByUserId: v.optional(vIdString("User")),
 	lastSuccessAt: v.optional(v.number()),
 	lastFailureAt: v.optional(v.number()),
 	failureCount: v.number(),
 	extend: v.optional(v.any())
 });
 const vConnectionWebhookDelivery = v.object({
-	_id: v.string(),
+	_id: vIdString("GroupWebhookDelivery"),
 	_creationTime: v.number(),
-	connectionId: v.string(),
-	endpointId: v.string(),
+	connectionId: vIdString("GroupConnection"),
+	endpointId: vIdString("GroupWebhookEndpoint"),
 	eventId: v.string(),
 	kind: vAuthEventKind,
 	status: vWebhookDeliveryStatus,
@@ -278,7 +278,7 @@ const connectionValidators = {
 	webhook: {
 		endpoint: vConnectionWebhookEndpoint,
 		delivery: vConnectionWebhookDelivery,
-		disabled: v.object({ endpointId: v.string() })
+		disabled: v.object({ endpointId: vIdString("GroupWebhookEndpoint") })
 	}
 };
 /**
@@ -303,6 +303,7 @@ const connectionValidators = {
 function createAuthValidators(extend = {}) {
 	const user = docWithExtend(userFieldsX, extend.User ?? v.any());
 	return {
+		id: vIdString,
 		user,
 		group: docWithExtend(groupFieldsX, extend.Group ?? v.any()),
 		member: docWithExtend(memberFieldsX, extend.GroupMember ?? v.any()),

package/dist/server/validators.js.map

@@ -1 +1 @@
-{"version":3,"file":"validators.js","names":[],"sources":["../../src/server/validators.ts"],"sourcesContent":["/**\n * Public Convex `returns:` validators for the auth read surface.\n *\n * These back the `auth.v` namespace on the {@link defineAuth} result.\n * Consumers set them as their function `returns:` so client-side\n * `useQuery` inference flows end-to-end with zero hand-rolled validators\n * or DTO mappers. The `extend` field on User/Group/GroupMember is\n * replaced with the validator the consumer supplied via\n * `defineAuth({ extend: { ... } })`, so `viewer.extend.<field>` is fully\n * typed instead of `any`.\n *\n * @module\n */\n\nimport { type GenericId, type Infer, v, type VId, type Validator } from \"convex/values\";\n\nimport {\n  vAuthEventActorType,\n  vAuthEventCategory,\n  vAuthEventData,\n  vAuthEventKind,\n  vAuthEventOutcome,\n  vAuthEventSubjectType,\n  vAuthEventTargetKind,\n  emailFields,\n  groupFields,\n  type IdValidatorFn,\n  inviteFields,\n  memberFields,\n  userFields,\n  vGroupConnectionPolicy,\n  vGroupConnectionProtocol,\n  vGroupConnectionStatus,\n  vPaginated,\n  vScimStatus,\n  vWebhookDeliveryStatus,\n  vWebhookEndpointStatus,\n} from \"../component/model\";\n\n/**\n * `Id<T>` at the type level, `v.string()` at runtime — for cross-component\n * fields where the consumer's data model lacks the component's table tag.\n */\nconst vIdString: IdValidatorFn = <T extends string>(_table: T) =>\n  v.string() as unknown as VId<GenericId<T>, \"required\">;\n\n/**\n * Validators a consumer may supply for the `extend` field of each table.\n *\n * Passed as `defineAuth({ extend })`. Every entry is optional; a missing\n * entry falls back to `v.any()`, preserving the untyped default.\n */\nexport type AuthExtendValidators = {\n  /** Shape of `User.extend`. */\n  User?: Validator<any, any, any>;\n  /** Shape of `Group.extend`. */\n  Group?: Validator<any, any, any>;\n  /** Shape of `GroupMember.extend`. */\n  GroupMember?: Validator<any, any, any>;\n};\n\ntype ExtendFor<TExtend extends AuthExtendValidators, K extends keyof AuthExtendValidators> =\n  TExtend[K] extends Validator<any, any, any> ? TExtend[K] : ReturnType<typeof v.any>;\n\nconst docWithExtend = <\n  Fields extends Record<string, Validator<any, any, any>>,\n  E extends Validator<any, any, any>,\n>(\n  fields: Fields,\n  extend: E,\n) =>\n  v.object({\n    ...(fields as Omit<Fields, \"extend\">),\n    extend: v.optional(extend),\n  });\n\nconst userFieldsX = userFields(vIdString);\nconst groupFieldsX = groupFields(vIdString);\nconst memberFieldsX = memberFields(vIdString);\nconst inviteDocX = v.object(inviteFields(vIdString));\nconst emailDocX = v.object(emailFields(vIdString));\n\nconst vNullableString = v.union(v.string(), v.null());\nconst vNullableNumber = v.union(v.number(), v.null());\n\nconst vConnectionCheck = v.object({\n  name: v.string(),\n  ok: v.boolean(),\n  message: v.optional(v.string()),\n});\n\nconst vConnectionIdResult = v.object({ connectionId: v.string() });\n\nconst vConnectionGroupResult = v.object({\n  connectionId: v.string(),\n  groupId: v.string(),\n});\n\nconst vConnectionDoc = v.object({\n  _id: v.string(),\n  _creationTime: v.number(),\n  groupId: v.string(),\n  slug: v.optional(v.string()),\n  name: v.optional(v.string()),\n  protocol: vGroupConnectionProtocol,\n  status: vGroupConnectionStatus,\n  config: v.optional(v.any()),\n  extend: v.optional(v.any()),\n});\n\nconst vConnectionDomainDoc = v.object({\n  _id: v.string(),\n  _creationTime: v.number(),\n  connectionId: v.string(),\n  groupId: v.string(),\n  domain: v.string(),\n  isPrimary: v.boolean(),\n  verifiedAt: v.optional(v.number()),\n});\n\nconst vConnectionLookup = v.union(\n  v.object({\n    connection: v.union(vConnectionDoc, v.null()),\n    domain: v.union(vConnectionDomainDoc, v.null()),\n  }),\n  v.null(),\n);\n\nconst vConnectionDomainSummary = v.object({\n  domainId: v.string(),\n  domain: v.string(),\n  isPrimary: v.boolean(),\n  verified: v.boolean(),\n  verifiedAt: vNullableNumber,\n});\n\nconst vConnectionDomainValidation = v.object({\n  connectionId: v.string(),\n  ready: v.boolean(),\n  summary: v.object({\n    domainCount: v.number(),\n    primaryCount: v.number(),\n    verifiedCount: v.number(),\n  }),\n  domains: v.array(vConnectionDomainSummary),\n  warnings: v.array(v.string()),\n});\n\nconst vConnectionDomainSet = v.object({\n  connectionId: v.string(),\n  domains: v.array(vConnectionDomainSummary),\n});\n\nconst vConnectionDomainVerificationRequest = v.object({\n  connectionId: v.string(),\n  domain: v.string(),\n  requestedAt: v.number(),\n  expiresAt: v.number(),\n  challenge: v.object({\n    recordType: v.literal(\"TXT\"),\n    recordName: v.string(),\n    recordValue: v.string(),\n  }),\n});\n\nconst vConnectionDomainVerificationConfirm = v.object({\n  connectionId: v.string(),\n  domain: v.string(),\n  verifiedAt: v.optional(v.number()),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionStatus = v.object({\n  connectionId: v.string(),\n  status: vGroupConnectionStatus,\n  ready: v.boolean(),\n  domainCount: v.number(),\n  protocols: v.object({\n    oidc: v.object({\n      configured: v.boolean(),\n      ready: v.boolean(),\n      clientId: vNullableString,\n      issuer: vNullableString,\n    }),\n    saml: v.object({\n      configured: v.boolean(),\n      ready: v.boolean(),\n      entityId: vNullableString,\n    }),\n    scim: v.object({\n      configured: v.boolean(),\n      ready: v.boolean(),\n      basePath: vNullableString,\n      deprovisionMode: v.union(v.literal(\"soft\"), v.literal(\"hard\")),\n    }),\n  }),\n});\n\nconst vConnectionOidcConfig = v.object({\n  enabled: v.optional(v.boolean()),\n  discovery: v.optional(v.any()),\n  client: v.optional(v.any()),\n  request: v.optional(v.any()),\n  security: v.optional(v.any()),\n  profile: v.optional(v.any()),\n  hasClientSecret: v.optional(v.boolean()),\n});\n\nconst vConnectionValidation = v.object({\n  ok: v.boolean(),\n  connectionId: v.string(),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionPolicyValidation = v.object({\n  ok: v.boolean(),\n  groupId: v.string(),\n  policy: v.optional(vGroupConnectionPolicy),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionScimConfig = v.object({\n  _id: v.string(),\n  _creationTime: v.number(),\n  connectionId: v.string(),\n  groupId: v.string(),\n  status: vScimStatus,\n  basePath: v.string(),\n  lastRotatedAt: v.optional(v.number()),\n  extend: v.optional(v.any()),\n  hasToken: v.boolean(),\n  security: v.optional(v.any()),\n  profile: v.optional(v.any()),\n});\n\nconst vConnectionScimSet = v.object({\n  connectionId: v.string(),\n  configId: v.string(),\n  basePath: v.string(),\n  token: v.string(),\n});\n\nconst vConnectionScimValidation = v.object({\n  ok: v.boolean(),\n  connectionId: v.string(),\n  basePath: v.optional(v.string()),\n  deprovisionMode: v.optional(v.union(v.literal(\"soft\"), v.literal(\"hard\"))),\n  capabilities: v.optional(\n    v.object({\n      users: v.boolean(),\n      groups: v.boolean(),\n      patch: v.boolean(),\n      put: v.boolean(),\n      filters: v.array(v.string()),\n      bulk: v.boolean(),\n      etag: v.boolean(),\n    }),\n  ),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionSignIn = v.object({\n  connectionId: v.string(),\n  providerId: v.string(),\n  protocol: vGroupConnectionProtocol,\n  signInPath: v.string(),\n  callbackPath: v.string(),\n  redirectTo: v.optional(v.string()),\n});\n\nconst vConnectionAuditEvent = v.object({\n  _id: v.string(),\n  _creationTime: v.number(),\n  eventId: v.string(),\n  targetKind: vAuthEventTargetKind,\n  targetId: v.string(),\n  kind: vAuthEventKind,\n  category: vAuthEventCategory,\n  occurredAt: v.number(),\n  actorType: vAuthEventActorType,\n  actorId: v.optional(v.string()),\n  subjectType: vAuthEventSubjectType,\n  subjectId: v.optional(v.string()),\n  outcome: vAuthEventOutcome,\n  errorCode: v.optional(v.string()),\n  requestId: v.optional(v.string()),\n  ip: v.optional(v.string()),\n  data: v.optional(vAuthEventData),\n});\n\nconst vConnectionWebhookEndpoint = v.object({\n  _id: v.string(),\n  _creationTime: v.number(),\n  connectionId: v.string(),\n  groupId: v.string(),\n  url: v.string(),\n  status: vWebhookEndpointStatus,\n  subscriptions: v.array(vAuthEventKind),\n  createdByUserId: v.optional(v.string()),\n  lastSuccessAt: v.optional(v.number()),\n  lastFailureAt: v.optional(v.number()),\n  failureCount: v.number(),\n  extend: v.optional(v.any()),\n});\n\nconst vConnectionWebhookDelivery = v.object({\n  _id: v.string(),\n  _creationTime: v.number(),\n  connectionId: v.string(),\n  endpointId: v.string(),\n  eventId: v.string(),\n  kind: vAuthEventKind,\n  status: vWebhookDeliveryStatus,\n  attemptCount: v.number(),\n  nextAttemptAt: v.number(),\n  lastAttemptAt: v.optional(v.number()),\n  lastResponseStatus: v.optional(v.number()),\n  lastError: v.optional(v.string()),\n  signedAt: v.number(),\n});\n\nconst connectionValidators = {\n  protocol: vGroupConnectionProtocol,\n  doc: vConnectionDoc,\n  lookup: vConnectionLookup,\n  id: vConnectionIdResult,\n  created: vConnectionGroupResult,\n  status: vConnectionStatus,\n  validation: vConnectionValidation,\n  signIn: vConnectionSignIn,\n  domain: {\n    doc: vConnectionDomainDoc,\n    summary: vConnectionDomainSummary,\n    validation: vConnectionDomainValidation,\n    upsert: vConnectionDomainSet,\n    verificationRequest: vConnectionDomainVerificationRequest,\n    verificationConfirm: vConnectionDomainVerificationConfirm,\n  },\n  oidc: {\n    config: vConnectionOidcConfig,\n    validation: vConnectionValidation,\n  },\n  saml: {\n    validation: vConnectionValidation,\n    metadata: v.string(),\n  },\n  policy: {\n    config: vGroupConnectionPolicy,\n    validation: vConnectionPolicyValidation,\n  },\n  scim: {\n    config: vConnectionScimConfig,\n    upsert: vConnectionScimSet,\n    validation: vConnectionScimValidation,\n  },\n  audit: {\n    event: vConnectionAuditEvent,\n  },\n  webhook: {\n    endpoint: vConnectionWebhookEndpoint,\n    delivery: vConnectionWebhookDelivery,\n    disabled: v.object({ endpointId: v.string() }),\n  },\n};\n\n/**\n * Build the `auth.v.*` validator namespace from the consumer's `extend`\n * config. Each doc validator's `extend` field is rebuilt with the\n * supplied validator so the inferred type carries the real shape.\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n * @param extend - The `extend` map from `defineAuth` config. Defaults to\n *   an empty object (all `extend` fields stay `v.any()`).\n * @returns The `auth.v` namespace: `user`, `group`, `member`, `invite`,\n *   `viewer`, `viewerWithGroups`, and the `list` page-wrapper helper.\n *\n * @example\n * ```ts\n * const av = createAuthValidators({\n *   User: v.object({ stripeCustomerId: v.optional(v.string()) }),\n * });\n * // Infer<typeof av.viewer> -> User document with typed `extend`\n * ```\n */\nexport function createAuthValidators<TExtend extends AuthExtendValidators>(\n  extend: TExtend = {} as TExtend,\n) {\n  const user = docWithExtend<typeof userFieldsX, ExtendFor<TExtend, \"User\">>(\n    userFieldsX,\n    (extend.User ?? v.any()) as ExtendFor<TExtend, \"User\">,\n  );\n  const group = docWithExtend<typeof groupFieldsX, ExtendFor<TExtend, \"Group\">>(\n    groupFieldsX,\n    (extend.Group ?? v.any()) as ExtendFor<TExtend, \"Group\">,\n  );\n  const member = docWithExtend<typeof memberFieldsX, ExtendFor<TExtend, \"GroupMember\">>(\n    memberFieldsX,\n    (extend.GroupMember ?? v.any()) as ExtendFor<TExtend, \"GroupMember\">,\n  );\n  const invite = inviteDocX;\n  const email = emailDocX;\n  const viewer = v.union(user, v.null());\n\n  return {\n    /** Single User document validator (extend-aware). */\n    user,\n    /** Single Group document validator (extend-aware). */\n    group,\n    /** Single GroupMember document validator (extend-aware). */\n    member,\n    /** Single GroupInvite document validator. */\n    invite,\n    /** Single UserEmail document validator. */\n    email,\n    /** `User | null` — for a `viewer`/current-user query. */\n    viewer,\n    /** Wrap any item validator in Convex's native pagination result shape. */\n    list: vPaginated,\n    /** Validators for the group connection admin facade. */\n    connection: connectionValidators,\n  };\n}\n\n/**\n * The `auth.v` namespace type, parameterized by the consumer's `extend`.\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type AuthValidators<TExtend extends AuthExtendValidators = {}> = ReturnType<\n  typeof createAuthValidators<TExtend>\n>;\n\n/**\n * Inferred current-user document type (extend-aware).\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type Viewer<TExtend extends AuthExtendValidators = {}> = Infer<\n  AuthValidators<TExtend>[\"user\"]\n>;\n/**\n * Inferred Group document type (extend-aware).\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type Group<TExtend extends AuthExtendValidators = {}> = Infer<\n  AuthValidators<TExtend>[\"group\"]\n>;\n/**\n * Inferred GroupMember document type (extend-aware).\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type Membership<TExtend extends AuthExtendValidators = {}> = Infer<\n  AuthValidators<TExtend>[\"member\"]\n>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2CA,MAAM,aAA8C,WAClD,EAAE,QAAQ;AAoBZ,MAAM,iBAIJ,QACA,WAEA,EAAE,OAAO;CACP,GAAI;CACJ,QAAQ,EAAE,SAAS,OAAO;CAC3B,CAAC;AAEJ,MAAM,cAAc,WAAW,UAAU;AACzC,MAAM,eAAe,YAAY,UAAU;AAC3C,MAAM,gBAAgB,aAAa,UAAU;AAC7C,MAAM,aAAa,EAAE,OAAO,aAAa,UAAU,CAAC;AACpD,MAAM,YAAY,EAAE,OAAO,YAAY,UAAU,CAAC;AAElD,MAAM,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC;AACrD,MAAM,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC;AAErD,MAAM,mBAAmB,EAAE,OAAO;CAChC,MAAM,EAAE,QAAQ;CAChB,IAAI,EAAE,SAAS;CACf,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAChC,CAAC;AAEF,MAAM,sBAAsB,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AAElE,MAAM,yBAAyB,EAAE,OAAO;CACtC,cAAc,EAAE,QAAQ;CACxB,SAAS,EAAE,QAAQ;CACpB,CAAC;AAEF,MAAM,iBAAiB,EAAE,OAAO;CAC9B,KAAK,EAAE,QAAQ;CACf,eAAe,EAAE,QAAQ;CACzB,SAAS,EAAE,QAAQ;CACnB,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC5B,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC5B,UAAU;CACV,QAAQ;CACR,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC3B,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,CAAC;AAEF,MAAM,uBAAuB,EAAE,OAAO;CACpC,KAAK,EAAE,QAAQ;CACf,eAAe,EAAE,QAAQ;CACzB,cAAc,EAAE,QAAQ;CACxB,SAAS,EAAE,QAAQ;CACnB,QAAQ,EAAE,QAAQ;CAClB,WAAW,EAAE,SAAS;CACtB,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;CACnC,CAAC;AAEF,MAAM,oBAAoB,EAAE,MAC1B,EAAE,OAAO;CACP,YAAY,EAAE,MAAM,gBAAgB,EAAE,MAAM,CAAC;CAC7C,QAAQ,EAAE,MAAM,sBAAsB,EAAE,MAAM,CAAC;CAChD,CAAC,EACF,EAAE,MAAM,CACT;AAED,MAAM,2BAA2B,EAAE,OAAO;CACxC,UAAU,EAAE,QAAQ;CACpB,QAAQ,EAAE,QAAQ;CAClB,WAAW,EAAE,SAAS;CACtB,UAAU,EAAE,SAAS;CACrB,YAAY;CACb,CAAC;AAEF,MAAM,8BAA8B,EAAE,OAAO;CAC3C,cAAc,EAAE,QAAQ;CACxB,OAAO,EAAE,SAAS;CAClB,SAAS,EAAE,OAAO;EAChB,aAAa,EAAE,QAAQ;EACvB,cAAc,EAAE,QAAQ;EACxB,eAAe,EAAE,QAAQ;EAC1B,CAAC;CACF,SAAS,EAAE,MAAM,yBAAyB;CAC1C,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,uBAAuB,EAAE,OAAO;CACpC,cAAc,EAAE,QAAQ;CACxB,SAAS,EAAE,MAAM,yBAAyB;CAC3C,CAAC;AAEF,MAAM,uCAAuC,EAAE,OAAO;CACpD,cAAc,EAAE,QAAQ;CACxB,QAAQ,EAAE,QAAQ;CAClB,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,OAAO;EAClB,YAAY,EAAE,QAAQ,MAAM;EAC5B,YAAY,EAAE,QAAQ;EACtB,aAAa,EAAE,QAAQ;EACxB,CAAC;CACH,CAAC;AAEF,MAAM,uCAAuC,EAAE,OAAO;CACpD,cAAc,EAAE,QAAQ;CACxB,QAAQ,EAAE,QAAQ;CAClB,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;CAClC,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,oBAAoB,EAAE,OAAO;CACjC,cAAc,EAAE,QAAQ;CACxB,QAAQ;CACR,OAAO,EAAE,SAAS;CAClB,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,OAAO;EAClB,MAAM,EAAE,OAAO;GACb,YAAY,EAAE,SAAS;GACvB,OAAO,EAAE,SAAS;GAClB,UAAU;GACV,QAAQ;GACT,CAAC;EACF,MAAM,EAAE,OAAO;GACb,YAAY,EAAE,SAAS;GACvB,OAAO,EAAE,SAAS;GAClB,UAAU;GACX,CAAC;EACF,MAAM,EAAE,OAAO;GACb,YAAY,EAAE,SAAS;GACvB,OAAO,EAAE,SAAS;GAClB,UAAU;GACV,iBAAiB,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,CAAC;GAC/D,CAAC;EACH,CAAC;CACH,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;CAChC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;CAC9B,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC3B,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;CAC7B,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,iBAAiB,EAAE,SAAS,EAAE,SAAS,CAAC;CACzC,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,IAAI,EAAE,SAAS;CACf,cAAc,EAAE,QAAQ;CACxB,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,8BAA8B,EAAE,OAAO;CAC3C,IAAI,EAAE,SAAS;CACf,SAAS,EAAE,QAAQ;CACnB,QAAQ,EAAE,SAAS,uBAAuB;CAC1C,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,KAAK,EAAE,QAAQ;CACf,eAAe,EAAE,QAAQ;CACzB,cAAc,EAAE,QAAQ;CACxB,SAAS,EAAE,QAAQ;CACnB,QAAQ;CACR,UAAU,EAAE,QAAQ;CACpB,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC3B,UAAU,EAAE,SAAS;CACrB,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;CAC7B,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC7B,CAAC;AAEF,MAAM,qBAAqB,EAAE,OAAO;CAClC,cAAc,EAAE,QAAQ;CACxB,UAAU,EAAE,QAAQ;CACpB,UAAU,EAAE,QAAQ;CACpB,OAAO,EAAE,QAAQ;CAClB,CAAC;AAEF,MAAM,4BAA4B,EAAE,OAAO;CACzC,IAAI,EAAE,SAAS;CACf,cAAc,EAAE,QAAQ;CACxB,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;CAChC,iBAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;CAC1E,cAAc,EAAE,SACd,EAAE,OAAO;EACP,OAAO,EAAE,SAAS;EAClB,QAAQ,EAAE,SAAS;EACnB,OAAO,EAAE,SAAS;EAClB,KAAK,EAAE,SAAS;EAChB,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC;EAC5B,MAAM,EAAE,SAAS;EACjB,MAAM,EAAE,SAAS;EAClB,CAAC,CACH;CACD,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,oBAAoB,EAAE,OAAO;CACjC,cAAc,EAAE,QAAQ;CACxB,YAAY,EAAE,QAAQ;CACtB,UAAU;CACV,YAAY,EAAE,QAAQ;CACtB,cAAc,EAAE,QAAQ;CACxB,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;CACnC,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,KAAK,EAAE,QAAQ;CACf,eAAe,EAAE,QAAQ;CACzB,SAAS,EAAE,QAAQ;CACnB,YAAY;CACZ,UAAU,EAAE,QAAQ;CACpB,MAAM;CACN,UAAU;CACV,YAAY,EAAE,QAAQ;CACtB,WAAW;CACX,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC/B,aAAa;CACb,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,SAAS;CACT,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC1B,MAAM,EAAE,SAAS,eAAe;CACjC,CAAC;AAEF,MAAM,6BAA6B,EAAE,OAAO;CAC1C,KAAK,EAAE,QAAQ;CACf,eAAe,EAAE,QAAQ;CACzB,cAAc,EAAE,QAAQ;CACxB,SAAS,EAAE,QAAQ;CACnB,KAAK,EAAE,QAAQ;CACf,QAAQ;CACR,eAAe,EAAE,MAAM,eAAe;CACtC,iBAAiB,EAAE,SAAS,EAAE,QAAQ,CAAC;CACvC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,cAAc,EAAE,QAAQ;CACxB,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,CAAC;AAEF,MAAM,6BAA6B,EAAE,OAAO;CAC1C,KAAK,EAAE,QAAQ;CACf,eAAe,EAAE,QAAQ;CACzB,cAAc,EAAE,QAAQ;CACxB,YAAY,EAAE,QAAQ;CACtB,SAAS,EAAE,QAAQ;CACnB,MAAM;CACN,QAAQ;CACR,cAAc,EAAE,QAAQ;CACxB,eAAe,EAAE,QAAQ;CACzB,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC1C,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,uBAAuB;CAC3B,UAAU;CACV,KAAK;CACL,QAAQ;CACR,IAAI;CACJ,SAAS;CACT,QAAQ;CACR,YAAY;CACZ,QAAQ;CACR,QAAQ;EACN,KAAK;EACL,SAAS;EACT,YAAY;EACZ,QAAQ;EACR,qBAAqB;EACrB,qBAAqB;EACtB;CACD,MAAM;EACJ,QAAQ;EACR,YAAY;EACb;CACD,MAAM;EACJ,YAAY;EACZ,UAAU,EAAE,QAAQ;EACrB;CACD,QAAQ;EACN,QAAQ;EACR,YAAY;EACb;CACD,MAAM;EACJ,QAAQ;EACR,QAAQ;EACR,YAAY;EACb;CACD,OAAO,EACL,OAAO,uBACR;CACD,SAAS;EACP,UAAU;EACV,UAAU;EACV,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;EAC/C;CACF;;;;;;;;;;;;;;;;;;;;AAqBD,SAAgB,qBACd,SAAkB,EAAE,EACpB;CACA,MAAM,OAAO,cACX,aACC,OAAO,QAAQ,EAAE,KAAK,CACxB;AAaD,QAAO;EAEL;EAEA,OAhBY,cACZ,cACC,OAAO,SAAS,EAAE,KAAK,CACzB;EAeC,QAda,cACb,eACC,OAAO,eAAe,EAAE,KAAK,CAC/B;EAaC,QAZa;EAcb,OAbY;EAeZ,QAda,EAAE,MAAM,MAAM,EAAE,MAAM,CAAC;EAgBpC,MAAM;EAEN,YAAY;EACb"}
+{"version":3,"file":"validators.js","names":[],"sources":["../../src/server/validators.ts"],"sourcesContent":["/**\n * Public Convex `returns:` validators for the auth read surface.\n *\n * These back the `auth.v` namespace on the {@link defineAuth} result.\n * Consumers set them as their function `returns:` so client-side\n * `useQuery` inference flows end-to-end with zero hand-rolled validators\n * or DTO mappers. The `extend` field on User/Group/GroupMember is\n * replaced with the validator the consumer supplied via\n * `defineAuth({ extend: { ... } })`, so `viewer.extend.<field>` is fully\n * typed instead of `any`.\n *\n * @module\n */\n\nimport { type GenericId, type Infer, v, type VId, type Validator } from \"convex/values\";\n\nimport {\n  vAuthEventActorType,\n  vAuthEventCategory,\n  vAuthEventData,\n  vAuthEventKind,\n  vAuthEventOutcome,\n  vAuthEventSubjectType,\n  vAuthEventTargetKind,\n  emailFields,\n  groupFields,\n  type IdValidatorFn,\n  inviteFields,\n  memberFields,\n  userFields,\n  vGroupConnectionPolicy,\n  vGroupConnectionProtocol,\n  vGroupConnectionStatus,\n  vPaginated,\n  vScimStatus,\n  vWebhookDeliveryStatus,\n  vWebhookEndpointStatus,\n} from \"../component/model\";\n\n/**\n * `Id<T>` at the type level, `v.string()` at runtime — for cross-component\n * fields where the consumer's data model lacks the component's table tag.\n */\nconst vIdString: IdValidatorFn = <T extends string>(_table: T) =>\n  v.string() as unknown as VId<GenericId<T>, \"required\">;\n\n/**\n * Validators a consumer may supply for the `extend` field of each table.\n *\n * Passed as `defineAuth({ extend })`. Every entry is optional; a missing\n * entry falls back to `v.any()`, preserving the untyped default.\n */\nexport type AuthExtendValidators = {\n  /** Shape of `User.extend`. */\n  User?: Validator<any, any, any>;\n  /** Shape of `Group.extend`. */\n  Group?: Validator<any, any, any>;\n  /** Shape of `GroupMember.extend`. */\n  GroupMember?: Validator<any, any, any>;\n};\n\ntype ExtendFor<TExtend extends AuthExtendValidators, K extends keyof AuthExtendValidators> =\n  TExtend[K] extends Validator<any, any, any> ? TExtend[K] : ReturnType<typeof v.any>;\n\nconst docWithExtend = <\n  Fields extends Record<string, Validator<any, any, any>>,\n  E extends Validator<any, any, any>,\n>(\n  fields: Fields,\n  extend: E,\n) =>\n  v.object({\n    ...(fields as Omit<Fields, \"extend\">),\n    extend: v.optional(extend),\n  });\n\nconst userFieldsX = userFields(vIdString);\nconst groupFieldsX = groupFields(vIdString);\nconst memberFieldsX = memberFields(vIdString);\nconst inviteDocX = v.object(inviteFields(vIdString));\nconst emailDocX = v.object(emailFields(vIdString));\n\nconst vNullableString = v.union(v.string(), v.null());\nconst vNullableNumber = v.union(v.number(), v.null());\n\nconst vConnectionCheck = v.object({\n  name: v.string(),\n  ok: v.boolean(),\n  message: v.optional(v.string()),\n});\n\nconst vConnectionIdResult = v.object({ connectionId: vIdString(\"GroupConnection\") });\n\nconst vConnectionGroupResult = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  groupId: vIdString(\"Group\"),\n});\n\nconst vConnectionDoc = v.object({\n  _id: vIdString(\"GroupConnection\"),\n  _creationTime: v.number(),\n  groupId: vIdString(\"Group\"),\n  slug: v.optional(v.string()),\n  name: v.optional(v.string()),\n  protocol: vGroupConnectionProtocol,\n  status: vGroupConnectionStatus,\n  config: v.optional(v.any()),\n  extend: v.optional(v.any()),\n});\n\nconst vConnectionDomainDoc = v.object({\n  _id: vIdString(\"GroupConnectionDomain\"),\n  _creationTime: v.number(),\n  connectionId: vIdString(\"GroupConnection\"),\n  groupId: vIdString(\"Group\"),\n  domain: v.string(),\n  isPrimary: v.boolean(),\n  verifiedAt: v.optional(v.number()),\n});\n\nconst vConnectionLookup = v.union(\n  v.object({\n    connection: v.union(vConnectionDoc, v.null()),\n    domain: v.union(vConnectionDomainDoc, v.null()),\n  }),\n  v.null(),\n);\n\nconst vConnectionDomainSummary = v.object({\n  domainId: vIdString(\"GroupConnectionDomain\"),\n  domain: v.string(),\n  isPrimary: v.boolean(),\n  verified: v.boolean(),\n  verifiedAt: vNullableNumber,\n});\n\nconst vConnectionDomainValidation = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  ready: v.boolean(),\n  summary: v.object({\n    domainCount: v.number(),\n    primaryCount: v.number(),\n    verifiedCount: v.number(),\n  }),\n  domains: v.array(vConnectionDomainSummary),\n  warnings: v.array(v.string()),\n});\n\nconst vConnectionDomainSet = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  domains: v.array(vConnectionDomainSummary),\n});\n\nconst vConnectionDomainVerificationRequest = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  domain: v.string(),\n  requestedAt: v.number(),\n  expiresAt: v.number(),\n  challenge: v.object({\n    recordType: v.literal(\"TXT\"),\n    recordName: v.string(),\n    recordValue: v.string(),\n  }),\n});\n\nconst vConnectionDomainVerificationConfirm = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  domain: v.string(),\n  verifiedAt: v.optional(v.number()),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionStatus = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  status: vGroupConnectionStatus,\n  ready: v.boolean(),\n  domainCount: v.number(),\n  protocols: v.object({\n    oidc: v.object({\n      configured: v.boolean(),\n      ready: v.boolean(),\n      clientId: vNullableString,\n      issuer: vNullableString,\n    }),\n    saml: v.object({\n      configured: v.boolean(),\n      ready: v.boolean(),\n      entityId: vNullableString,\n    }),\n    scim: v.object({\n      configured: v.boolean(),\n      ready: v.boolean(),\n      basePath: vNullableString,\n      deprovisionMode: v.union(v.literal(\"soft\"), v.literal(\"hard\")),\n    }),\n  }),\n});\n\nconst vConnectionOidcConfig = v.object({\n  enabled: v.optional(v.boolean()),\n  discovery: v.optional(v.any()),\n  client: v.optional(v.any()),\n  request: v.optional(v.any()),\n  security: v.optional(v.any()),\n  profile: v.optional(v.any()),\n  hasClientSecret: v.optional(v.boolean()),\n});\n\nconst vConnectionValidation = v.object({\n  ok: v.boolean(),\n  connectionId: vIdString(\"GroupConnection\"),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionPolicyValidation = v.object({\n  ok: v.boolean(),\n  groupId: vIdString(\"Group\"),\n  policy: v.optional(vGroupConnectionPolicy),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionScimConfig = v.object({\n  _id: vIdString(\"GroupConnectionScimConfig\"),\n  _creationTime: v.number(),\n  connectionId: vIdString(\"GroupConnection\"),\n  groupId: vIdString(\"Group\"),\n  status: vScimStatus,\n  basePath: v.string(),\n  lastRotatedAt: v.optional(v.number()),\n  extend: v.optional(v.any()),\n  hasToken: v.boolean(),\n  security: v.optional(v.any()),\n  profile: v.optional(v.any()),\n});\n\nconst vConnectionScimSet = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  configId: vIdString(\"GroupConnectionScimConfig\"),\n  basePath: v.string(),\n  token: v.string(),\n});\n\nconst vConnectionScimValidation = v.object({\n  ok: v.boolean(),\n  connectionId: vIdString(\"GroupConnection\"),\n  basePath: v.optional(v.string()),\n  deprovisionMode: v.optional(v.union(v.literal(\"soft\"), v.literal(\"hard\"))),\n  capabilities: v.optional(\n    v.object({\n      users: v.boolean(),\n      groups: v.boolean(),\n      patch: v.boolean(),\n      put: v.boolean(),\n      filters: v.array(v.string()),\n      bulk: v.boolean(),\n      etag: v.boolean(),\n    }),\n  ),\n  checks: v.array(vConnectionCheck),\n});\n\nconst vConnectionSignIn = v.object({\n  connectionId: vIdString(\"GroupConnection\"),\n  providerId: v.string(),\n  protocol: vGroupConnectionProtocol,\n  signInPath: v.string(),\n  callbackPath: v.string(),\n  redirectTo: v.optional(v.string()),\n});\n\nconst vConnectionAuditEvent = v.object({\n  _id: vIdString(\"AuthEventProjection\"),\n  _creationTime: v.number(),\n  eventId: v.string(),\n  targetKind: vAuthEventTargetKind,\n  targetId: v.string(),\n  kind: vAuthEventKind,\n  category: vAuthEventCategory,\n  occurredAt: v.number(),\n  actorType: vAuthEventActorType,\n  actorId: v.optional(v.string()),\n  subjectType: vAuthEventSubjectType,\n  subjectId: v.optional(v.string()),\n  outcome: vAuthEventOutcome,\n  errorCode: v.optional(v.string()),\n  requestId: v.optional(v.string()),\n  ip: v.optional(v.string()),\n  data: v.optional(vAuthEventData),\n});\n\nconst vConnectionWebhookEndpoint = v.object({\n  _id: vIdString(\"GroupWebhookEndpoint\"),\n  _creationTime: v.number(),\n  connectionId: vIdString(\"GroupConnection\"),\n  groupId: vIdString(\"Group\"),\n  url: v.string(),\n  status: vWebhookEndpointStatus,\n  subscriptions: v.array(vAuthEventKind),\n  createdByUserId: v.optional(vIdString(\"User\")),\n  lastSuccessAt: v.optional(v.number()),\n  lastFailureAt: v.optional(v.number()),\n  failureCount: v.number(),\n  extend: v.optional(v.any()),\n});\n\nconst vConnectionWebhookDelivery = v.object({\n  _id: vIdString(\"GroupWebhookDelivery\"),\n  _creationTime: v.number(),\n  connectionId: vIdString(\"GroupConnection\"),\n  endpointId: vIdString(\"GroupWebhookEndpoint\"),\n  eventId: v.string(),\n  kind: vAuthEventKind,\n  status: vWebhookDeliveryStatus,\n  attemptCount: v.number(),\n  nextAttemptAt: v.number(),\n  lastAttemptAt: v.optional(v.number()),\n  lastResponseStatus: v.optional(v.number()),\n  lastError: v.optional(v.string()),\n  signedAt: v.number(),\n});\n\nconst connectionValidators = {\n  protocol: vGroupConnectionProtocol,\n  doc: vConnectionDoc,\n  lookup: vConnectionLookup,\n  id: vConnectionIdResult,\n  created: vConnectionGroupResult,\n  status: vConnectionStatus,\n  validation: vConnectionValidation,\n  signIn: vConnectionSignIn,\n  domain: {\n    doc: vConnectionDomainDoc,\n    summary: vConnectionDomainSummary,\n    validation: vConnectionDomainValidation,\n    upsert: vConnectionDomainSet,\n    verificationRequest: vConnectionDomainVerificationRequest,\n    verificationConfirm: vConnectionDomainVerificationConfirm,\n  },\n  oidc: {\n    config: vConnectionOidcConfig,\n    validation: vConnectionValidation,\n  },\n  saml: {\n    validation: vConnectionValidation,\n    metadata: v.string(),\n  },\n  policy: {\n    config: vGroupConnectionPolicy,\n    validation: vConnectionPolicyValidation,\n  },\n  scim: {\n    config: vConnectionScimConfig,\n    upsert: vConnectionScimSet,\n    validation: vConnectionScimValidation,\n  },\n  audit: {\n    event: vConnectionAuditEvent,\n  },\n  webhook: {\n    endpoint: vConnectionWebhookEndpoint,\n    delivery: vConnectionWebhookDelivery,\n    disabled: v.object({ endpointId: vIdString(\"GroupWebhookEndpoint\") }),\n  },\n};\n\n/**\n * Build the `auth.v.*` validator namespace from the consumer's `extend`\n * config. Each doc validator's `extend` field is rebuilt with the\n * supplied validator so the inferred type carries the real shape.\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n * @param extend - The `extend` map from `defineAuth` config. Defaults to\n *   an empty object (all `extend` fields stay `v.any()`).\n * @returns The `auth.v` namespace: `user`, `group`, `member`, `invite`,\n *   `viewer`, `viewerWithGroups`, and the `list` page-wrapper helper.\n *\n * @example\n * ```ts\n * const av = createAuthValidators({\n *   User: v.object({ stripeCustomerId: v.optional(v.string()) }),\n * });\n * // Infer<typeof av.viewer> -> User document with typed `extend`\n * ```\n */\nexport function createAuthValidators<TExtend extends AuthExtendValidators>(\n  extend: TExtend = {} as TExtend,\n) {\n  const user = docWithExtend<typeof userFieldsX, ExtendFor<TExtend, \"User\">>(\n    userFieldsX,\n    (extend.User ?? v.any()) as ExtendFor<TExtend, \"User\">,\n  );\n  const group = docWithExtend<typeof groupFieldsX, ExtendFor<TExtend, \"Group\">>(\n    groupFieldsX,\n    (extend.Group ?? v.any()) as ExtendFor<TExtend, \"Group\">,\n  );\n  const member = docWithExtend<typeof memberFieldsX, ExtendFor<TExtend, \"GroupMember\">>(\n    memberFieldsX,\n    (extend.GroupMember ?? v.any()) as ExtendFor<TExtend, \"GroupMember\">,\n  );\n  const invite = inviteDocX;\n  const email = emailDocX;\n  const viewer = v.union(user, v.null());\n\n  return {\n    /**\n     * Typed component document IDs. They validate as strings because this\n     * application crosses a component boundary, while preserving the exact\n     * component table identity in TypeScript.\n     */\n    id: vIdString,\n    /** Single User document validator (extend-aware). */\n    user,\n    /** Single Group document validator (extend-aware). */\n    group,\n    /** Single GroupMember document validator (extend-aware). */\n    member,\n    /** Single GroupInvite document validator. */\n    invite,\n    /** Single UserEmail document validator. */\n    email,\n    /** `User | null` — for a `viewer`/current-user query. */\n    viewer,\n    /** Wrap any item validator in Convex's native pagination result shape. */\n    list: vPaginated,\n    /** Validators for the group connection admin facade. */\n    connection: connectionValidators,\n  };\n}\n\n/**\n * The `auth.v` namespace type, parameterized by the consumer's `extend`.\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type AuthValidators<TExtend extends AuthExtendValidators = {}> = ReturnType<\n  typeof createAuthValidators<TExtend>\n>;\n\n/**\n * Inferred current-user document type (extend-aware).\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type Viewer<TExtend extends AuthExtendValidators = {}> = Infer<\n  AuthValidators<TExtend>[\"user\"]\n>;\n/**\n * Inferred Group document type (extend-aware).\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type Group<TExtend extends AuthExtendValidators = {}> = Infer<\n  AuthValidators<TExtend>[\"group\"]\n>;\n/**\n * Inferred GroupMember document type (extend-aware).\n *\n * @typeParam TExtend - The consumer's per-table `extend` validators.\n */\nexport type Membership<TExtend extends AuthExtendValidators = {}> = Infer<\n  AuthValidators<TExtend>[\"member\"]\n>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2CA,MAAM,aAA8C,WAClD,EAAE,QAAQ;AAoBZ,MAAM,iBAIJ,QACA,WAEA,EAAE,OAAO;CACP,GAAI;CACJ,QAAQ,EAAE,SAAS,OAAO;CAC3B,CAAC;AAEJ,MAAM,cAAc,WAAW,UAAU;AACzC,MAAM,eAAe,YAAY,UAAU;AAC3C,MAAM,gBAAgB,aAAa,UAAU;AAC7C,MAAM,aAAa,EAAE,OAAO,aAAa,UAAU,CAAC;AACpD,MAAM,YAAY,EAAE,OAAO,YAAY,UAAU,CAAC;AAElD,MAAM,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC;AACrD,MAAM,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC;AAErD,MAAM,mBAAmB,EAAE,OAAO;CAChC,MAAM,EAAE,QAAQ;CAChB,IAAI,EAAE,SAAS;CACf,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAChC,CAAC;AAEF,MAAM,sBAAsB,EAAE,OAAO,EAAE,cAAc,UAAU,kBAAkB,EAAE,CAAC;AAEpF,MAAM,yBAAyB,EAAE,OAAO;CACtC,cAAc,UAAU,kBAAkB;CAC1C,SAAS,UAAU,QAAQ;CAC5B,CAAC;AAEF,MAAM,iBAAiB,EAAE,OAAO;CAC9B,KAAK,UAAU,kBAAkB;CACjC,eAAe,EAAE,QAAQ;CACzB,SAAS,UAAU,QAAQ;CAC3B,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC5B,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC5B,UAAU;CACV,QAAQ;CACR,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC3B,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,CAAC;AAEF,MAAM,uBAAuB,EAAE,OAAO;CACpC,KAAK,UAAU,wBAAwB;CACvC,eAAe,EAAE,QAAQ;CACzB,cAAc,UAAU,kBAAkB;CAC1C,SAAS,UAAU,QAAQ;CAC3B,QAAQ,EAAE,QAAQ;CAClB,WAAW,EAAE,SAAS;CACtB,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;CACnC,CAAC;AAEF,MAAM,oBAAoB,EAAE,MAC1B,EAAE,OAAO;CACP,YAAY,EAAE,MAAM,gBAAgB,EAAE,MAAM,CAAC;CAC7C,QAAQ,EAAE,MAAM,sBAAsB,EAAE,MAAM,CAAC;CAChD,CAAC,EACF,EAAE,MAAM,CACT;AAED,MAAM,2BAA2B,EAAE,OAAO;CACxC,UAAU,UAAU,wBAAwB;CAC5C,QAAQ,EAAE,QAAQ;CAClB,WAAW,EAAE,SAAS;CACtB,UAAU,EAAE,SAAS;CACrB,YAAY;CACb,CAAC;AAEF,MAAM,8BAA8B,EAAE,OAAO;CAC3C,cAAc,UAAU,kBAAkB;CAC1C,OAAO,EAAE,SAAS;CAClB,SAAS,EAAE,OAAO;EAChB,aAAa,EAAE,QAAQ;EACvB,cAAc,EAAE,QAAQ;EACxB,eAAe,EAAE,QAAQ;EAC1B,CAAC;CACF,SAAS,EAAE,MAAM,yBAAyB;CAC1C,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,uBAAuB,EAAE,OAAO;CACpC,cAAc,UAAU,kBAAkB;CAC1C,SAAS,EAAE,MAAM,yBAAyB;CAC3C,CAAC;AAEF,MAAM,uCAAuC,EAAE,OAAO;CACpD,cAAc,UAAU,kBAAkB;CAC1C,QAAQ,EAAE,QAAQ;CAClB,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,OAAO;EAClB,YAAY,EAAE,QAAQ,MAAM;EAC5B,YAAY,EAAE,QAAQ;EACtB,aAAa,EAAE,QAAQ;EACxB,CAAC;CACH,CAAC;AAEF,MAAM,uCAAuC,EAAE,OAAO;CACpD,cAAc,UAAU,kBAAkB;CAC1C,QAAQ,EAAE,QAAQ;CAClB,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;CAClC,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,oBAAoB,EAAE,OAAO;CACjC,cAAc,UAAU,kBAAkB;CAC1C,QAAQ;CACR,OAAO,EAAE,SAAS;CAClB,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,OAAO;EAClB,MAAM,EAAE,OAAO;GACb,YAAY,EAAE,SAAS;GACvB,OAAO,EAAE,SAAS;GAClB,UAAU;GACV,QAAQ;GACT,CAAC;EACF,MAAM,EAAE,OAAO;GACb,YAAY,EAAE,SAAS;GACvB,OAAO,EAAE,SAAS;GAClB,UAAU;GACX,CAAC;EACF,MAAM,EAAE,OAAO;GACb,YAAY,EAAE,SAAS;GACvB,OAAO,EAAE,SAAS;GAClB,UAAU;GACV,iBAAiB,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,CAAC;GAC/D,CAAC;EACH,CAAC;CACH,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;CAChC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;CAC9B,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC3B,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;CAC7B,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,iBAAiB,EAAE,SAAS,EAAE,SAAS,CAAC;CACzC,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,IAAI,EAAE,SAAS;CACf,cAAc,UAAU,kBAAkB;CAC1C,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,8BAA8B,EAAE,OAAO;CAC3C,IAAI,EAAE,SAAS;CACf,SAAS,UAAU,QAAQ;CAC3B,QAAQ,EAAE,SAAS,uBAAuB;CAC1C,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,KAAK,UAAU,4BAA4B;CAC3C,eAAe,EAAE,QAAQ;CACzB,cAAc,UAAU,kBAAkB;CAC1C,SAAS,UAAU,QAAQ;CAC3B,QAAQ;CACR,UAAU,EAAE,QAAQ;CACpB,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC3B,UAAU,EAAE,SAAS;CACrB,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;CAC7B,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC7B,CAAC;AAEF,MAAM,qBAAqB,EAAE,OAAO;CAClC,cAAc,UAAU,kBAAkB;CAC1C,UAAU,UAAU,4BAA4B;CAChD,UAAU,EAAE,QAAQ;CACpB,OAAO,EAAE,QAAQ;CAClB,CAAC;AAEF,MAAM,4BAA4B,EAAE,OAAO;CACzC,IAAI,EAAE,SAAS;CACf,cAAc,UAAU,kBAAkB;CAC1C,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;CAChC,iBAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;CAC1E,cAAc,EAAE,SACd,EAAE,OAAO;EACP,OAAO,EAAE,SAAS;EAClB,QAAQ,EAAE,SAAS;EACnB,OAAO,EAAE,SAAS;EAClB,KAAK,EAAE,SAAS;EAChB,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC;EAC5B,MAAM,EAAE,SAAS;EACjB,MAAM,EAAE,SAAS;EAClB,CAAC,CACH;CACD,QAAQ,EAAE,MAAM,iBAAiB;CAClC,CAAC;AAEF,MAAM,oBAAoB,EAAE,OAAO;CACjC,cAAc,UAAU,kBAAkB;CAC1C,YAAY,EAAE,QAAQ;CACtB,UAAU;CACV,YAAY,EAAE,QAAQ;CACtB,cAAc,EAAE,QAAQ;CACxB,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;CACnC,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACrC,KAAK,UAAU,sBAAsB;CACrC,eAAe,EAAE,QAAQ;CACzB,SAAS,EAAE,QAAQ;CACnB,YAAY;CACZ,UAAU,EAAE,QAAQ;CACpB,MAAM;CACN,UAAU;CACV,YAAY,EAAE,QAAQ;CACtB,WAAW;CACX,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC/B,aAAa;CACb,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,SAAS;CACT,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC1B,MAAM,EAAE,SAAS,eAAe;CACjC,CAAC;AAEF,MAAM,6BAA6B,EAAE,OAAO;CAC1C,KAAK,UAAU,uBAAuB;CACtC,eAAe,EAAE,QAAQ;CACzB,cAAc,UAAU,kBAAkB;CAC1C,SAAS,UAAU,QAAQ;CAC3B,KAAK,EAAE,QAAQ;CACf,QAAQ;CACR,eAAe,EAAE,MAAM,eAAe;CACtC,iBAAiB,EAAE,SAAS,UAAU,OAAO,CAAC;CAC9C,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,cAAc,EAAE,QAAQ;CACxB,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,CAAC;AAEF,MAAM,6BAA6B,EAAE,OAAO;CAC1C,KAAK,UAAU,uBAAuB;CACtC,eAAe,EAAE,QAAQ;CACzB,cAAc,UAAU,kBAAkB;CAC1C,YAAY,UAAU,uBAAuB;CAC7C,SAAS,EAAE,QAAQ;CACnB,MAAM;CACN,QAAQ;CACR,cAAc,EAAE,QAAQ;CACxB,eAAe,EAAE,QAAQ;CACzB,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;CACrC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC1C,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,uBAAuB;CAC3B,UAAU;CACV,KAAK;CACL,QAAQ;CACR,IAAI;CACJ,SAAS;CACT,QAAQ;CACR,YAAY;CACZ,QAAQ;CACR,QAAQ;EACN,KAAK;EACL,SAAS;EACT,YAAY;EACZ,QAAQ;EACR,qBAAqB;EACrB,qBAAqB;EACtB;CACD,MAAM;EACJ,QAAQ;EACR,YAAY;EACb;CACD,MAAM;EACJ,YAAY;EACZ,UAAU,EAAE,QAAQ;EACrB;CACD,QAAQ;EACN,QAAQ;EACR,YAAY;EACb;CACD,MAAM;EACJ,QAAQ;EACR,QAAQ;EACR,YAAY;EACb;CACD,OAAO,EACL,OAAO,uBACR;CACD,SAAS;EACP,UAAU;EACV,UAAU;EACV,UAAU,EAAE,OAAO,EAAE,YAAY,UAAU,uBAAuB,EAAE,CAAC;EACtE;CACF;;;;;;;;;;;;;;;;;;;;AAqBD,SAAgB,qBACd,SAAkB,EAAE,EACpB;CACA,MAAM,OAAO,cACX,aACC,OAAO,QAAQ,EAAE,KAAK,CACxB;AAaD,QAAO;EAML,IAAI;EAEJ;EAEA,OAtBY,cACZ,cACC,OAAO,SAAS,EAAE,KAAK,CACzB;EAqBC,QApBa,cACb,eACC,OAAO,eAAe,EAAE,KAAK,CAC/B;EAmBC,QAlBa;EAoBb,OAnBY;EAqBZ,QApBa,EAAE,MAAM,MAAM,EAAE,MAAM,CAAC;EAsBpC,MAAM;EAEN,YAAY;EACb"}

package/dist/server/webauthn.js

@@ -7,7 +7,7 @@ import { queueAuthEvent } from "./events.js";
 import { log } from "./log.js";
 import { encodeRefreshToken, refreshTokenExpirationTime } from "./token/refresh.js";
 import { setActiveSpanAttributes } from "./utils/span.js";
-import { buildSessionIdentity, finalizeSessionIssuance, getAuthSessionId, sessionExpirationTime } from "./session/lifecycle.js";
+import { buildSessionIdentity, finalizeSessionIssuance, getAuthSessionId, getAuthSessionReplacement, sessionExpirationTime } from "./session/lifecycle.js";
 import { authFlowError } from "../shared/errors.js";
 import { toConvexError } from "./errors.js";
 import { buildKnownSignInIdentityAttributes } from "./telemetry.js";
@@ -541,7 +541,7 @@ async function handleWebAuthn(ctx, provider, args) {
 			const data = registrationData(userId, credentialId, publicKeyBytes, algorithm, authData.signatureCounter, backupState, params, attestationEvidence, ctx);
 			if (continuationId === void 0) completed = await mutatePasskeyCompleteRegistration(ctx, {
 				...data,
-				replaceSessionId: await getAuthSessionId(ctx) ?? void 0
+				replaceSession: await getAuthSessionReplacement(ctx)
 			});
 			else {
 				const rotation = await mutatePasskeyCompleteRotation(ctx, {
@@ -656,7 +656,7 @@ async function handleWebAuthn(ctx, provider, args) {
 		validateBackupEligibility(passkey.deviceType, backupState.deviceType);
 		if (rp.registration.attestation) await assertStoredAttestationTrusted(rp.registration.attestation, passkey.attestation);
 		if ((passkey.counter !== 0 || authenticatorData.signatureCounter !== 0) && authenticatorData.signatureCounter <= passkey.counter) throw convexError(ErrorCode.PASSKEY_COUNTER_ERROR, "Authenticator counter did not increase — possible credential cloning detected.");
-		const replaceSessionId = await getAuthSessionId(ctx) ?? void 0;
+		const replaceSession = await getAuthSessionReplacement(ctx);
 		let completed;
 		try {
 			completed = await mutatePasskeyCompleteAssertion(ctx, {
@@ -664,7 +664,7 @@ async function handleWebAuthn(ctx, provider, args) {
 				counter: authenticatorData.signatureCounter,
 				lastUsedAt: Date.now(),
 				backedUp: backupState.backedUp,
-				replaceSessionId,
+				replaceSession,
 				sessionExpirationTime: sessionExpirationTime(ctx.auth.config),
 				refreshTokenExpirationTime: refreshTokenExpirationTime(ctx.auth.config)
 			});