@estifanos-sh/convex-auth 0.0.8 → 0.0.9

package/README.md

@@ -29,7 +29,8 @@ Then define your providers and permissions with `defineAuth`:
 
 ```ts
 import { definePermissions } from "@estifanos-sh/convex-auth/permissions";
-import { password, webauthn } from "@estifanos-sh/convex-auth/providers";
+import { password } from "@estifanos-sh/convex-auth/providers/password";
+import { webauthn } from "@estifanos-sh/convex-auth/providers/webauthn";
 import { defineAuth } from "@estifanos-sh/convex-auth/server";
 import { components } from "./_generated/api";
 

package/dist/component/account.d.ts

@@ -1,6 +1,6 @@
 import { SessionRows } from "./session.js";
-import * as convex_values2300 from "convex/values";
-import * as convex_server56 from "convex/server";
+import * as convex_values2496 from "convex/values";
+import * as convex_server96 from "convex/server";
 
 //#region src/component/account.d.ts
 declare namespace account_d_exports {
@@ -10,7 +10,7 @@ type AcceptedCredentialsSignIn = Omit<SessionRows, "epoch"> & {
   status: "accepted";
 };
 /** Reserve a password attempt and load all sign-in state in one transaction. */
-declare const beginCredentialsSignIn: convex_server56.RegisteredMutation<"public", {
+declare const beginCredentialsSignIn: convex_server96.RegisteredMutation<"public", {
   provider: string;
   providerAccountId: string;
   limitIdentifier: string;
@@ -30,18 +30,18 @@ declare const beginCredentialsSignIn: convex_server56.RegisteredMutation<"public
 } | {
   status: "ready";
   account: {
-    _id: convex_values2300.GenericId<"Account">;
+    _id: convex_values2496.GenericId<"Account">;
     _creationTime: number;
     extend?: any;
     secret?: string | undefined;
     emailVerified?: string | undefined;
     phoneVerified?: string | undefined;
-    userId: convex_values2300.GenericId<"User">;
+    userId: convex_values2496.GenericId<"User">;
     provider: string;
     providerAccountId: string;
   };
   user: {
-    _id: convex_values2300.GenericId<"User">;
+    _id: convex_values2496.GenericId<"User">;
     _creationTime: number;
     email?: string | undefined;
     phone?: string | undefined;
@@ -53,20 +53,20 @@ declare const beginCredentialsSignIn: convex_server56.RegisteredMutation<"public
     emailVerificationTime?: number | undefined;
     phoneVerificationTime?: number | undefined;
     isAnonymous?: boolean | undefined;
-    lastActiveGroup?: convex_values2300.GenericId<"Group"> | undefined;
+    lastActiveGroup?: convex_values2496.GenericId<"Group"> | undefined;
     sessionEpoch: number;
   };
   hasTotp: boolean;
 }>>;
 /** Refund a verified password attempt and optionally issue its session atomically. */
-declare const completeCredentialsSignIn: convex_server56.RegisteredMutation<"public", {
+declare const completeCredentialsSignIn: convex_server96.RegisteredMutation<"public", {
   replaceSession?: {
-    sessionId: convex_values2300.GenericId<"Session">;
-    authenticatedUserId: convex_values2300.GenericId<"User">;
+    sessionId: convex_values2496.GenericId<"Session">;
+    authenticatedUserId: convex_values2496.GenericId<"User">;
   } | undefined;
   sessionExpirationTime: number;
   refreshTokenExpirationTime: number;
-  accountId: convex_values2300.GenericId<"Account">;
+  accountId: convex_values2496.GenericId<"Account">;
   limitIdentifier: string;
   issueSession: boolean;
   generateTokens: boolean;
@@ -79,18 +79,18 @@ declare const completeCredentialsSignIn: convex_server56.RegisteredMutation<"pub
  * Read an account by id, or by `{ provider, providerAccountId }` when both
  * are given. Returns `null` when no selector matches.
  */
-declare const get: convex_server56.RegisteredQuery<"public", {
-  id?: convex_values2300.GenericId<"Account"> | undefined;
+declare const get: convex_server96.RegisteredQuery<"public", {
+  id?: convex_values2496.GenericId<"Account"> | undefined;
   provider?: string | undefined;
   providerAccountId?: string | undefined;
 }, Promise<{
-  _id: convex_values2300.GenericId<"Account">;
+  _id: convex_values2496.GenericId<"Account">;
   _creationTime: number;
   extend?: any;
   secret?: string | undefined;
   emailVerified?: string | undefined;
   phoneVerified?: string | undefined;
-  userId: convex_values2300.GenericId<"User">;
+  userId: convex_values2496.GenericId<"User">;
   provider: string;
   providerAccountId: string;
 } | null>>;
@@ -101,34 +101,34 @@ declare const get: convex_server56.RegisteredQuery<"public", {
  * public server facade projects these raw records into safe capability
  * summaries before exposing them to application code.
  */
-declare const list: convex_server56.RegisteredQuery<"public", {
-  userId?: convex_values2300.GenericId<"User"> | undefined;
+declare const list: convex_server96.RegisteredQuery<"public", {
+  userId?: convex_values2496.GenericId<"User"> | undefined;
   provider?: string | undefined;
-  userIds?: convex_values2300.GenericId<"User">[] | undefined;
+  userIds?: convex_values2496.GenericId<"User">[] | undefined;
 }, Promise<{
-  _id: convex_values2300.GenericId<"Account">;
+  _id: convex_values2496.GenericId<"Account">;
   _creationTime: number;
   extend?: any;
   secret?: string | undefined;
   emailVerified?: string | undefined;
   phoneVerified?: string | undefined;
-  userId: convex_values2300.GenericId<"User">;
+  userId: convex_values2496.GenericId<"User">;
   provider: string;
   providerAccountId: string;
 }[]>>;
 /** Insert a new account. */
-declare const create: convex_server56.RegisteredMutation<"public", {
+declare const create: convex_server96.RegisteredMutation<"public", {
   extend?: any;
   secret?: string | undefined;
-  userId: convex_values2300.GenericId<"User">;
+  userId: convex_values2496.GenericId<"User">;
   provider: string;
   providerAccountId: string;
-}, Promise<convex_values2300.GenericId<"Account">>>;
+}, Promise<convex_values2496.GenericId<"Account">>>;
 /** Patch fields on an account. */
-declare const update: convex_server56.RegisteredMutation<"public", {
-  id: convex_values2300.GenericId<"Account">;
+declare const update: convex_server96.RegisteredMutation<"public", {
+  id: convex_values2496.GenericId<"Account">;
   patch: {
-    userId?: convex_values2300.GenericId<"User"> | undefined;
+    userId?: convex_values2496.GenericId<"User"> | undefined;
     extend?: any;
     provider?: string | undefined;
     providerAccountId?: string | undefined;
@@ -141,10 +141,10 @@ declare const update: convex_server56.RegisteredMutation<"public", {
  * Delete an account. When `requireOtherAccount` is set, refuses to delete the
  * user's last remaining account so they are never left with none.
  */
-declare const remove: convex_server56.RegisteredMutation<"public", {
-  userId?: convex_values2300.GenericId<"User"> | undefined;
+declare const remove: convex_server96.RegisteredMutation<"public", {
+  userId?: convex_values2496.GenericId<"User"> | undefined;
   requireOtherAccount?: boolean | undefined;
-  id: convex_values2300.GenericId<"Account">;
+  id: convex_values2496.GenericId<"Account">;
 }, Promise<null>>;
 //#endregion
 export { account_d_exports };

package/dist/component/connection/audit.d.ts

@@ -1,5 +1,5 @@
-import * as convex_values2754 from "convex/values";
-import * as convex_server172 from "convex/server";
+import * as convex_values2817 from "convex/values";
+import * as convex_server194 from "convex/server";
 
 //#region src/component/connection/audit.d.ts
 declare namespace audit_d_exports {
@@ -15,7 +15,7 @@ declare namespace audit_d_exports {
  * paginated. Requires exactly one of `connectionId` or `groupId`, so a caller
  * cannot scan the whole event log by omitting the scope.
  */
-declare const list: convex_server172.RegisteredQuery<"public", {
+declare const list: convex_server194.RegisteredQuery<"public", {
   paginationOpts: {
     id?: number;
     endCursor?: string | null;
@@ -25,12 +25,12 @@ declare const list: convex_server172.RegisteredQuery<"public", {
     cursor: string | null;
   };
   scope: {
-    connectionId: convex_values2754.GenericId<"GroupConnection">;
+    connectionId: convex_values2817.GenericId<"GroupConnection">;
   } | {
-    groupId: convex_values2754.GenericId<"Group">;
+    groupId: convex_values2817.GenericId<"Group">;
   };
-}, Promise<convex_server172.PaginationResult<{
-  _id: convex_values2754.GenericId<"AuthEventProjection">;
+}, Promise<convex_server194.PaginationResult<{
+  _id: convex_values2817.GenericId<"AuthEventProjection">;
   _creationTime: number;
   requestId?: string | undefined;
   ip?: string | undefined;

package/dist/component/connection/cache.d.ts

@@ -1,4 +1,4 @@
-import * as convex_server193 from "convex/server";
+import * as convex_server196 from "convex/server";
 
 //#region src/component/connection/cache.d.ts
 declare namespace cache_d_exports {
@@ -27,7 +27,7 @@ declare namespace cache_d_exports {
 /**
  * Read-through fetch for OIDC discovery JSON. Cached 1h per URL.
  */
-declare const oidcDiscovery: convex_server193.RegisteredAction<"public", {
+declare const oidcDiscovery: convex_server196.RegisteredAction<"public", {
   runtimeOrigin?: string | undefined;
   externalHost?: string | undefined;
   url: string;
@@ -45,7 +45,7 @@ declare const oidcDiscovery: convex_server193.RegisteredAction<"public", {
  * Cached 2h per URL (separate from the runtime sign-in path so admin
  * dashboards don't share keys with hot-path traffic).
  */
-declare const oidcStatusDiscovery: convex_server193.RegisteredAction<"public", {
+declare const oidcStatusDiscovery: convex_server196.RegisteredAction<"public", {
   runtimeOrigin?: string | undefined;
   externalHost?: string | undefined;
   url: string;
@@ -61,19 +61,19 @@ declare const oidcStatusDiscovery: convex_server193.RegisteredAction<"public", {
 /**
  * Read-through fetch for SAML IdP metadata XML. Cached 24h per URL.
  */
-declare const samlMetadata: convex_server193.RegisteredAction<"public", {
+declare const samlMetadata: convex_server196.RegisteredAction<"public", {
   runtimeOrigin?: string | undefined;
   externalHost?: string | undefined;
   url: string;
 }, Promise<string>>;
 /** Invalidate a cached OIDC discovery entry (e.g. on `discoveryUrl` update). */
-declare const invalidateOidcDiscovery: convex_server193.RegisteredMutation<"public", {
+declare const invalidateOidcDiscovery: convex_server196.RegisteredMutation<"public", {
   runtimeOrigin?: string | undefined;
   externalHost?: string | undefined;
   url: string;
 }, Promise<null>>;
 /** Invalidate a cached SAML metadata entry (e.g. on `metadataUrl` update). */
-declare const invalidateSamlMetadata: convex_server193.RegisteredMutation<"public", {
+declare const invalidateSamlMetadata: convex_server196.RegisteredMutation<"public", {
   runtimeOrigin?: string | undefined;
   externalHost?: string | undefined;
   url: string;

package/dist/component/connection/domain/verification.d.ts

@@ -1,5 +1,5 @@
-import * as convex_values2829 from "convex/values";
-import * as convex_server198 from "convex/server";
+import * as convex_values2763 from "convex/values";
+import * as convex_server179 from "convex/server";
 
 //#region src/component/connection/domain/verification.d.ts
 declare namespace verification_d_exports {
@@ -12,36 +12,36 @@ declare namespace verification_d_exports {
  * @module
  */
 /** Read a domain's verification record by `domainId`, or `null` if none. */
-declare const get: convex_server198.RegisteredQuery<"public", {
-  domainId: convex_values2829.GenericId<"GroupConnectionDomain">;
+declare const get: convex_server179.RegisteredQuery<"public", {
+  domainId: convex_values2763.GenericId<"GroupConnectionDomain">;
 }, Promise<{
-  _id: convex_values2829.GenericId<"GroupConnectionDomainVerification">;
+  _id: convex_values2763.GenericId<"GroupConnectionDomainVerification">;
   _creationTime: number;
-  connectionId: convex_values2829.GenericId<"GroupConnection">;
+  connectionId: convex_values2763.GenericId<"GroupConnection">;
   domain: string;
   recordName: string;
   expiresAt: number;
-  groupId: convex_values2829.GenericId<"Group">;
+  groupId: convex_values2763.GenericId<"Group">;
   tokenHash: string;
-  domainId: convex_values2829.GenericId<"GroupConnectionDomain">;
+  domainId: convex_values2763.GenericId<"GroupConnectionDomain">;
   token: string;
   requestedAt: number;
 } | null>>;
 /** Insert a verification record, or patch it when one already exists for the domain (keyed by `domainId`). */
-declare const upsert: convex_server198.RegisteredMutation<"public", {
-  connectionId: convex_values2829.GenericId<"GroupConnection">;
+declare const upsert: convex_server179.RegisteredMutation<"public", {
+  connectionId: convex_values2763.GenericId<"GroupConnection">;
   domain: string;
   recordName: string;
   expiresAt: number;
-  groupId: convex_values2829.GenericId<"Group">;
+  groupId: convex_values2763.GenericId<"Group">;
   tokenHash: string;
-  domainId: convex_values2829.GenericId<"GroupConnectionDomain">;
+  domainId: convex_values2763.GenericId<"GroupConnectionDomain">;
   token: string;
   requestedAt: number;
-}, Promise<convex_values2829.GenericId<"GroupConnectionDomainVerification">>>;
+}, Promise<convex_values2763.GenericId<"GroupConnectionDomainVerification">>>;
 /** Delete a domain's verification record, if any. */
-declare const remove: convex_server198.RegisteredMutation<"public", {
-  domainId: convex_values2829.GenericId<"GroupConnectionDomain">;
+declare const remove: convex_server179.RegisteredMutation<"public", {
+  domainId: convex_values2763.GenericId<"GroupConnectionDomain">;
 }, Promise<null>>;
 //#endregion
 export { verification_d_exports };

package/dist/component/connection/domain.d.ts

@@ -1,5 +1,5 @@
-import * as convex_values2817 from "convex/values";
-import * as convex_server189 from "convex/server";
+import * as convex_values2751 from "convex/values";
+import * as convex_server175 from "convex/server";
 
 //#region src/component/connection/domain.d.ts
 declare namespace domain_d_exports {
@@ -15,16 +15,16 @@ declare namespace domain_d_exports {
  * @module
  */
 /** List the domains attached to a connection (`limit` clamped to 1..500, default 100). */
-declare const list: convex_server189.RegisteredQuery<"public", {
+declare const list: convex_server175.RegisteredQuery<"public", {
   limit?: number | undefined;
-  connectionId: convex_values2817.GenericId<"GroupConnection">;
+  connectionId: convex_values2751.GenericId<"GroupConnection">;
 }, Promise<{
-  _id: convex_values2817.GenericId<"GroupConnectionDomain">;
+  _id: convex_values2751.GenericId<"GroupConnectionDomain">;
   _creationTime: number;
   verifiedAt?: number | undefined;
-  connectionId: convex_values2817.GenericId<"GroupConnection">;
+  connectionId: convex_values2751.GenericId<"GroupConnection">;
   domain: string;
-  groupId: convex_values2817.GenericId<"Group">;
+  groupId: convex_values2751.GenericId<"Group">;
   isPrimary: boolean;
 }[]>>;
 /**
@@ -33,30 +33,30 @@ declare const list: convex_server189.RegisteredQuery<"public", {
  * domain already belongs to a different connection. Setting `isPrimary` demotes
  * any current primary; the first domain on a connection becomes primary by default.
  */
-declare const create: convex_server189.RegisteredMutation<"public", {
+declare const create: convex_server175.RegisteredMutation<"public", {
   isPrimary?: boolean | undefined;
-  connectionId: convex_values2817.GenericId<"GroupConnection">;
+  connectionId: convex_values2751.GenericId<"GroupConnection">;
   domain: string;
-  groupId: convex_values2817.GenericId<"Group">;
-}, Promise<convex_values2817.GenericId<"GroupConnectionDomain">>>;
+  groupId: convex_values2751.GenericId<"Group">;
+}, Promise<convex_values2751.GenericId<"GroupConnectionDomain">>>;
 /** Delete a domain and its dependent verification record, if any. */
-declare const remove: convex_server189.RegisteredMutation<"public", {
-  id: convex_values2817.GenericId<"GroupConnectionDomain">;
+declare const remove: convex_server175.RegisteredMutation<"public", {
+  id: convex_values2751.GenericId<"GroupConnectionDomain">;
 }, Promise<null>>;
 /**
  * Mark a domain verified at `verifiedAt` and clear its pending verification
  * record. Returns the updated domain doc.
  */
-declare const verify: convex_server189.RegisteredMutation<"public", {
-  id: convex_values2817.GenericId<"GroupConnectionDomain">;
+declare const verify: convex_server175.RegisteredMutation<"public", {
+  id: convex_values2751.GenericId<"GroupConnectionDomain">;
   verifiedAt: number;
 }, Promise<{
-  _id: convex_values2817.GenericId<"GroupConnectionDomain">;
+  _id: convex_values2751.GenericId<"GroupConnectionDomain">;
   _creationTime: number;
   verifiedAt?: number | undefined;
-  connectionId: convex_values2817.GenericId<"GroupConnection">;
+  connectionId: convex_values2751.GenericId<"GroupConnection">;
   domain: string;
-  groupId: convex_values2817.GenericId<"Group">;
+  groupId: convex_values2751.GenericId<"Group">;
   isPrimary: boolean;
 }>>;
 //#endregion

package/dist/component/connection/saml/assertion.d.ts

@@ -1,5 +1,5 @@
-import * as convex_values2816 from "convex/values";
-import * as convex_server188 from "convex/server";
+import * as convex_values2750 from "convex/values";
+import * as convex_server174 from "convex/server";
 
 //#region src/component/connection/saml/assertion.d.ts
 declare namespace assertion_d_exports {
@@ -21,8 +21,8 @@ declare namespace assertion_d_exports {
  * first sighting (the row is inserted); returns `false` if the assertion ID was
  * already recorded, signalling a replay the caller must reject.
  */
-declare const accept: convex_server188.RegisteredMutation<"public", {
-  connectionId: convex_values2816.GenericId<"GroupConnection">;
+declare const accept: convex_server174.RegisteredMutation<"public", {
+  connectionId: convex_values2750.GenericId<"GroupConnection">;
   expiresAt: number;
   assertionId: string;
 }, Promise<boolean>>;

package/dist/component/connection/saml/request.d.ts

@@ -1,5 +1,5 @@
-import * as convex_values2813 from "convex/values";
-import * as convex_server186 from "convex/server";
+import * as convex_values2747 from "convex/values";
+import * as convex_server172 from "convex/server";
 
 //#region src/component/connection/saml/request.d.ts
 declare namespace request_d_exports {
@@ -17,11 +17,11 @@ declare namespace request_d_exports {
  * @module
  */
 /** Persist a pending SAML AuthnRequest ID so the ACS handler can accept it once. */
-declare const create: convex_server186.RegisteredMutation<"public", {
+declare const create: convex_server172.RegisteredMutation<"public", {
   requestId: string;
-  connectionId: convex_values2813.GenericId<"GroupConnection">;
+  connectionId: convex_values2747.GenericId<"GroupConnection">;
   expiresAt: number;
-}, Promise<convex_values2813.GenericId<"SamlLoginRequest">>>;
+}, Promise<convex_values2747.GenericId<"SamlLoginRequest">>>;
 /**
  * Atomically accept a pending SAML AuthnRequest by its `requestId`. Returns
  * `true` only when a matching, unaccepted, unexpired row existed and was
@@ -36,8 +36,8 @@ declare const create: convex_server186.RegisteredMutation<"public", {
  * connection can still accept it (a wrong-connection probe cannot burn a
  * legitimate pending request).
  */
-declare const accept: convex_server186.RegisteredMutation<"public", {
-  connectionId?: convex_values2813.GenericId<"GroupConnection"> | undefined;
+declare const accept: convex_server172.RegisteredMutation<"public", {
+  connectionId?: convex_values2747.GenericId<"GroupConnection"> | undefined;
   requestId: string;
   now: number;
 }, Promise<boolean>>;

package/dist/component/connection/scim/config.d.ts

@@ -1,5 +1,5 @@
-import * as convex_values2757 from "convex/values";
-import * as convex_server174 from "convex/server";
+import * as convex_values2604 from "convex/values";
+import * as convex_server130 from "convex/server";
 
 //#region src/component/connection/scim/config.d.ts
 declare namespace config_d_exports {
@@ -18,30 +18,30 @@ declare namespace config_d_exports {
  * Read a SCIM config. Overloaded: lookup by `{ tokenHash }` (bearer-token
  * resolution) or by `{ connectionId }`. Returns `null` when nothing matches.
  */
-declare const get: convex_server174.RegisteredQuery<"public", {
-  connectionId?: convex_values2757.GenericId<"GroupConnection"> | undefined;
+declare const get: convex_server130.RegisteredQuery<"public", {
+  connectionId?: convex_values2604.GenericId<"GroupConnection"> | undefined;
   tokenHash?: string | undefined;
 }, Promise<{
-  _id: convex_values2757.GenericId<"GroupConnectionScimConfig">;
+  _id: convex_values2604.GenericId<"GroupConnectionScimConfig">;
   _creationTime: number;
   extend?: any;
   lastRotatedAt?: number | undefined;
-  connectionId: convex_values2757.GenericId<"GroupConnection">;
-  groupId: convex_values2757.GenericId<"Group">;
+  connectionId: convex_values2604.GenericId<"GroupConnection">;
+  groupId: convex_values2604.GenericId<"Group">;
   status: "active" | "draft" | "disabled";
   tokenHash: string;
   basePath: string;
 } | null>>;
 /** Insert a SCIM config, or patch it when one already exists for the connection (keyed by `connectionId`). */
-declare const upsert: convex_server174.RegisteredMutation<"public", {
+declare const upsert: convex_server130.RegisteredMutation<"public", {
   extend?: any;
   lastRotatedAt?: number | undefined;
-  connectionId: convex_values2757.GenericId<"GroupConnection">;
-  groupId: convex_values2757.GenericId<"Group">;
+  connectionId: convex_values2604.GenericId<"GroupConnection">;
+  groupId: convex_values2604.GenericId<"Group">;
   status: "active" | "draft" | "disabled";
   tokenHash: string;
   basePath: string;
-}, Promise<convex_values2757.GenericId<"GroupConnectionScimConfig">>>;
+}, Promise<convex_values2604.GenericId<"GroupConnectionScimConfig">>>;
 //#endregion
 export { config_d_exports };
 //# sourceMappingURL=config.d.ts.map