@robelest/convex-auth 0.0.2-preview.1 → 0.0.2

package/dist/bin.cjs

@@ -6,6 +6,9 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __commonJS = (cb, mod) => function __require() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
@@ -3769,8 +3772,8 @@ var require_main = __commonJS({
         const shortPaths = [];
         for (const filePath of optionPaths) {
           try {
-            const relative = path3.relative(process.cwd(), filePath);
-            shortPaths.push(relative);
+            const relative2 = path3.relative(process.cwd(), filePath);
+            shortPaths.push(relative2);
           } catch (e) {
             if (debug) {
               _debug(`Failed to load ${filePath} ${e.message}`);
@@ -9623,7 +9626,7 @@ var require_lib2 = __commonJS({
       return matches;
     };
     exports2.analyse = analyse;
-    var detectFile = (filepath, opts = {}) => new Promise((resolve, reject) => {
+    var detectFile = (filepath, opts = {}) => new Promise((resolve2, reject) => {
       let fd;
       const fs = (0, node_1.default)();
       const handler = (err, buffer) => {
@@ -9633,7 +9636,7 @@ var require_lib2 = __commonJS({
         if (err) {
           reject(err);
         } else if (buffer) {
-          resolve((0, exports2.detect)(buffer));
+          resolve2((0, exports2.detect)(buffer));
         } else {
           reject(new Error("No error and no buffer received"));
         }
@@ -14176,7 +14179,7 @@ var require_Observable = __commonJS({
       Observable2.prototype.forEach = function(next, promiseCtor) {
         var _this = this;
         promiseCtor = getPromiseCtor(promiseCtor);
-        return new promiseCtor(function(resolve, reject) {
+        return new promiseCtor(function(resolve2, reject) {
           var subscriber = new Subscriber_1.SafeSubscriber({
             next: function(value) {
               try {
@@ -14187,7 +14190,7 @@ var require_Observable = __commonJS({
               }
             },
             error: reject,
-            complete: resolve
+            complete: resolve2
           });
           _this.subscribe(subscriber);
         });
@@ -14209,14 +14212,14 @@ var require_Observable = __commonJS({
       Observable2.prototype.toPromise = function(promiseCtor) {
         var _this = this;
         promiseCtor = getPromiseCtor(promiseCtor);
-        return new promiseCtor(function(resolve, reject) {
+        return new promiseCtor(function(resolve2, reject) {
           var value;
           _this.subscribe(function(x) {
             return value = x;
           }, function(err) {
             return reject(err);
           }, function() {
-            return resolve(value);
+            return resolve2(value);
           });
         });
       };
@@ -16312,11 +16315,11 @@ var require_innerFrom = __commonJS({
     "use strict";
     var __awaiter = exports2 && exports2.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve) {
-          resolve(value);
+        return value instanceof P ? value : new P(function(resolve2) {
+          resolve2(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve, reject) {
+      return new (P || (P = Promise))(function(resolve2, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -16332,7 +16335,7 @@ var require_innerFrom = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve2(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -16414,14 +16417,14 @@ var require_innerFrom = __commonJS({
       }, i);
       function verb(n) {
         i[n] = o[n] && function(v) {
-          return new Promise(function(resolve, reject) {
-            v = o[n](v), settle(resolve, reject, v.done, v.value);
+          return new Promise(function(resolve2, reject) {
+            v = o[n](v), settle(resolve2, reject, v.done, v.value);
           });
         };
       }
-      function settle(resolve, reject, d, v) {
+      function settle(resolve2, reject, d, v) {
         Promise.resolve(v).then(function(v2) {
-          resolve({ value: v2, done: d });
+          resolve2({ value: v2, done: d });
         }, reject);
       }
     };
@@ -17040,7 +17043,7 @@ var require_lastValueFrom = __commonJS({
     var EmptyError_1 = require_EmptyError();
     function lastValueFrom2(source, config) {
       var hasConfig = typeof config === "object";
-      return new Promise(function(resolve, reject) {
+      return new Promise(function(resolve2, reject) {
         var _hasValue = false;
         var _value;
         source.subscribe({
@@ -17051,9 +17054,9 @@ var require_lastValueFrom = __commonJS({
           error: reject,
           complete: function() {
             if (_hasValue) {
-              resolve(_value);
+              resolve2(_value);
             } else if (hasConfig) {
-              resolve(config.defaultValue);
+              resolve2(config.defaultValue);
             } else {
               reject(new EmptyError_1.EmptyError());
             }
@@ -17075,16 +17078,16 @@ var require_firstValueFrom = __commonJS({
     var Subscriber_1 = require_Subscriber();
     function firstValueFrom(source, config) {
       var hasConfig = typeof config === "object";
-      return new Promise(function(resolve, reject) {
+      return new Promise(function(resolve2, reject) {
         var subscriber = new Subscriber_1.SafeSubscriber({
           next: function(value) {
-            resolve(value);
+            resolve2(value);
             subscriber.unsubscribe();
           },
           error: reject,
           complete: function() {
             if (hasConfig) {
-              resolve(config.defaultValue);
+              resolve2(config.defaultValue);
             } else {
               reject(new EmptyError_1.EmptyError());
             }
@@ -22876,14 +22879,14 @@ var require_run_async = __commonJS({
       return function() {
         var args = arguments;
         var originalThis = this;
-        var promise = new Promise(function(resolve, reject) {
+        var promise = new Promise(function(resolve2, reject) {
           var resolved = false;
           const wrappedResolve = function(value) {
             if (resolved) {
               console.warn("Run-async promise already resolved.");
             }
             resolved = true;
-            resolve(value);
+            resolve2(value);
           };
           var rejected = false;
           const wrappedReject = function(value) {
@@ -22969,6 +22972,383 @@ var require_run_async = __commonJS({
   }
 });
 
+// src/cli/portal-upload.ts
+var portal_upload_exports = {};
+__export(portal_upload_exports, {
+  parsePortalUploadArgs: () => parsePortalUploadArgs,
+  portalUploadMain: () => portalUploadMain
+});
+function getMimeType(path3) {
+  return MIME_TYPES[(0, import_path.extname)(path3).toLowerCase()] || "application/octet-stream";
+}
+function parsePortalUploadArgs(args) {
+  const result = {
+    dist: "./dist",
+    component: "auth",
+    prod: false,
+    build: false,
+    concurrency: 5,
+    help: false
+  };
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--help" || arg === "-h") {
+      result.help = true;
+    } else if (arg === "--dist" || arg === "-d") {
+      result.dist = args[++i] || result.dist;
+    } else if (arg === "--component" || arg === "-c") {
+      result.component = args[++i] || result.component;
+    } else if (arg === "--prod") {
+      result.prod = true;
+    } else if (arg === "--no-prod" || arg === "--dev") {
+      result.prod = false;
+    } else if (arg === "--build" || arg === "-b") {
+      result.build = true;
+    } else if (arg === "--concurrency" || arg === "-j") {
+      const val = parseInt(args[++i], 10);
+      if (val > 0) result.concurrency = val;
+    }
+  }
+  return result;
+}
+function showHelp() {
+  console.log(`
+Usage: npx @robelest/convex-auth portal upload [options]
+
+Upload portal static files to Convex storage.
+
+Options:
+  -d, --dist <path>           Path to dist directory (default: ./dist)
+   -c, --component <name>      Convex module with portal functions (default: auth)
+      --prod                  Deploy to production deployment
+  -b, --build                 Run 'npm run build' before uploading
+  -j, --concurrency <n>       Number of parallel uploads (default: 5)
+  -h, --help                  Show this help message
+
+Examples:
+  npx @robelest/convex-auth portal upload
+  npx @robelest/convex-auth portal upload --dist packages/portal/build --prod
+  npx @robelest/convex-auth portal upload --build --prod
+`);
+}
+function convexRunAsync(functionPath, args = {}) {
+  return new Promise((resolve2, reject) => {
+    const cmdArgs = [
+      "convex",
+      "run",
+      functionPath,
+      JSON.stringify(args),
+      "--typecheck=disable",
+      "--codegen=disable"
+    ];
+    if (useProd) cmdArgs.push("--prod");
+    (0, import_child_process2.execFile)("npx", cmdArgs, { encoding: "utf-8" }, (error, stdout, stderr) => {
+      if (error) {
+        console.error("Convex run failed:", stderr || stdout);
+        reject(error);
+        return;
+      }
+      resolve2(stdout.trim());
+    });
+  });
+}
+function runHosting(componentName, action, extraArgs = {}) {
+  return convexRunAsync(`${componentName}:portalInternal`, {
+    action,
+    ...extraArgs
+  });
+}
+async function uploadSingleFile(file, componentName, deploymentId) {
+  const content = (0, import_fs2.readFileSync)(file.localPath);
+  const uploadUrlOutput = await runHosting(componentName, "generateUploadUrl");
+  const uploadUrl = JSON.parse(uploadUrlOutput);
+  const response = await fetch(uploadUrl, {
+    method: "POST",
+    headers: { "Content-Type": file.contentType },
+    body: content
+  });
+  const { storageId } = await response.json();
+  await runHosting(componentName, "recordAsset", {
+    path: file.path,
+    storageId,
+    contentType: file.contentType,
+    deploymentId
+  });
+  return { path: file.path };
+}
+async function uploadWithConcurrency(files, componentName, deploymentId, concurrency) {
+  const total = files.length;
+  let completed = 0;
+  let failed = false;
+  const pending = /* @__PURE__ */ new Set();
+  const iterator = files[Symbol.iterator]();
+  function enqueue() {
+    if (failed) return;
+    const next = iterator.next();
+    if (next.done) return;
+    const file = next.value;
+    const task = uploadSingleFile(file, componentName, deploymentId).then(
+      ({ path: path3 }) => {
+        completed++;
+        console.log(`  [${completed}/${total}] ${path3}`);
+        pending.delete(task);
+      }
+    );
+    task.catch(() => {
+      failed = true;
+    });
+    pending.add(task);
+    return task;
+  }
+  for (let i = 0; i < concurrency && i < total; i++) {
+    void enqueue();
+  }
+  while (pending.size > 0) {
+    await Promise.race(pending);
+    if (failed) {
+      await Promise.allSettled(pending);
+      throw new Error("Upload failed");
+    }
+    void enqueue();
+  }
+}
+function collectFiles(dir, baseDir) {
+  const files = [];
+  for (const entry of (0, import_fs2.readdirSync)(dir, { withFileTypes: true })) {
+    const fullPath = (0, import_path.join)(dir, entry.name);
+    if (entry.isDirectory()) {
+      files.push(...collectFiles(fullPath, baseDir));
+    } else if (entry.isFile()) {
+      files.push({
+        path: "/" + (0, import_path.relative)(baseDir, fullPath).replace(/\\/g, "/"),
+        localPath: fullPath,
+        contentType: getMimeType(fullPath)
+      });
+    }
+  }
+  return files;
+}
+function getConvexSiteUrl(prod) {
+  try {
+    const envFlag = prod ? "--prod" : "";
+    const result = (0, import_child_process2.execSync)(`npx convex env get CONVEX_CLOUD_URL ${envFlag}`, {
+      stdio: "pipe",
+      encoding: "utf-8"
+    });
+    const cloudUrl = result.trim();
+    if (cloudUrl && cloudUrl.includes(".convex.cloud")) {
+      return cloudUrl.replace(".convex.cloud", ".convex.site");
+    }
+  } catch {
+  }
+  return null;
+}
+async function portalUploadMain(rawArgs) {
+  const args = parsePortalUploadArgs(rawArgs);
+  if (args.help) {
+    showHelp();
+    process.exit(0);
+  }
+  useProd = args.prod;
+  if (args.build) {
+    let convexUrl = null;
+    if (useProd) {
+      try {
+        const result = (0, import_child_process2.execSync)("npx convex dashboard --prod --no-open", {
+          stdio: "pipe",
+          encoding: "utf-8"
+        });
+        const match = result.match(/dashboard\.convex\.dev\/d\/([a-z0-9-]+)/i);
+        if (match) {
+          convexUrl = `https://${match[1]}.convex.cloud`;
+        }
+      } catch {
+        console.error("Could not get production Convex URL.");
+        console.error(
+          "Make sure you have deployed to production: npx convex deploy"
+        );
+        process.exit(1);
+      }
+    } else {
+      if ((0, import_fs2.existsSync)(".env.local")) {
+        const envContent = (0, import_fs2.readFileSync)(".env.local", "utf-8");
+        const match = envContent.match(/(?:VITE_)?CONVEX_URL=(.+)/);
+        if (match) {
+          convexUrl = match[1].trim();
+        }
+      }
+    }
+    if (!convexUrl) {
+      console.error("Could not determine Convex URL for build.");
+      process.exit(1);
+    }
+    const envLabel2 = useProd ? "production" : "development";
+    console.log(`Building for ${envLabel2}...`);
+    console.log(`   VITE_CONVEX_URL=${convexUrl}`);
+    console.log("");
+    const buildResult = (0, import_child_process2.spawnSync)("npm", ["run", "build"], {
+      stdio: "inherit",
+      env: { ...process.env, VITE_CONVEX_URL: convexUrl }
+    });
+    if (buildResult.status !== 0) {
+      console.error("Build failed.");
+      process.exit(1);
+    }
+    console.log("");
+  }
+  const distDir = (0, import_path.resolve)(args.dist);
+  const componentName = args.component;
+  if (!(0, import_fs2.existsSync)(distDir)) {
+    console.error(`Error: dist directory not found: ${distDir}`);
+    console.error(
+      "Run your build command first (e.g., 'bun run build:portal' or add --build flag)"
+    );
+    process.exit(1);
+  }
+  const deploymentId = (0, import_crypto.randomUUID)();
+  const files = collectFiles(distDir, distDir);
+  const envLabel = useProd ? "production" : "development";
+  console.log(`Deploying portal to ${envLabel} environment`);
+  console.log(
+    `Uploading ${files.length} files with deployment ID: ${deploymentId}`
+  );
+  console.log(`Component: ${componentName}`);
+  console.log("");
+  try {
+    await uploadWithConcurrency(
+      files,
+      componentName,
+      deploymentId,
+      args.concurrency
+    );
+  } catch {
+    console.error("Upload failed.");
+    process.exit(1);
+  }
+  console.log("");
+  const gcOutput = await runHosting(componentName, "gcOldAssets", {
+    currentDeploymentId: deploymentId
+  });
+  const gcResult = JSON.parse(gcOutput);
+  const deletedCount = typeof gcResult === "number" ? gcResult : gcResult.deleted;
+  if (deletedCount > 0) {
+    console.log(
+      `Cleaned up ${deletedCount} old storage file(s) from previous deployments`
+    );
+  }
+  console.log("");
+  console.log("Upload complete!");
+  const deployedSiteUrl = getConvexSiteUrl(useProd);
+  if (deployedSiteUrl) {
+    console.log("");
+    console.log(`Portal available at: ${deployedSiteUrl}/auth`);
+  }
+}
+var import_fs2, import_path, import_crypto, import_child_process2, MIME_TYPES, useProd;
+var init_portal_upload = __esm({
+  "src/cli/portal-upload.ts"() {
+    "use strict";
+    import_fs2 = require("fs");
+    import_path = require("path");
+    import_crypto = require("crypto");
+    import_child_process2 = require("child_process");
+    MIME_TYPES = {
+      ".html": "text/html; charset=utf-8",
+      ".js": "application/javascript; charset=utf-8",
+      ".mjs": "application/javascript; charset=utf-8",
+      ".css": "text/css; charset=utf-8",
+      ".json": "application/json; charset=utf-8",
+      ".png": "image/png",
+      ".jpg": "image/jpeg",
+      ".jpeg": "image/jpeg",
+      ".gif": "image/gif",
+      ".svg": "image/svg+xml",
+      ".ico": "image/x-icon",
+      ".webp": "image/webp",
+      ".woff": "font/woff",
+      ".woff2": "font/woff2",
+      ".ttf": "font/ttf",
+      ".txt": "text/plain; charset=utf-8",
+      ".map": "application/json",
+      ".webmanifest": "application/manifest+json",
+      ".xml": "application/xml"
+    };
+    useProd = true;
+  }
+});
+
+// src/cli/portal-link.ts
+var portal_link_exports = {};
+__export(portal_link_exports, {
+  portalLinkMain: () => portalLinkMain
+});
+function convexRunAsync2(functionPath, args = {}) {
+  return new Promise((resolve2, reject) => {
+    const cmdArgs = [
+      "convex",
+      "run",
+      functionPath,
+      JSON.stringify(args),
+      "--typecheck=disable",
+      "--codegen=disable"
+    ];
+    if (useProd2) cmdArgs.push("--prod");
+    (0, import_child_process3.execFile)("npx", cmdArgs, { encoding: "utf-8" }, (error, stdout, stderr) => {
+      if (error) {
+        console.error("Convex run failed:", stderr || stdout);
+        reject(error);
+        return;
+      }
+      resolve2(stdout.trim());
+    });
+  });
+}
+function generateToken() {
+  return (0, import_crypto2.randomBytes)(32).toString("base64url");
+}
+function hashToken(token) {
+  return (0, import_crypto2.createHash)("sha256").update(token).digest("hex");
+}
+async function portalLinkMain(opts) {
+  useProd2 = opts.prod;
+  const component = opts.component;
+  const token = generateToken();
+  const tokenHash = hashToken(token);
+  console.log("Creating portal admin invite...");
+  let portalUrl;
+  try {
+    const raw = await convexRunAsync2(`${component}:portalInternal`, {
+      action: "createPortalInvite",
+      tokenHash
+    });
+    const result = JSON.parse(raw);
+    portalUrl = result.portalUrl;
+  } catch {
+    console.error(
+      "\nFailed to create invite. Make sure your Convex deployment is running",
+      "and the portal module is configured in your convex/ directory."
+    );
+    process.exit(1);
+  }
+  const inviteUrl = `${portalUrl}?invite=${token}`;
+  console.log("\nPortal admin invite created!\n");
+  console.log(`  ${inviteUrl}
+`);
+  console.log("This invite is single-use. Share it securely.");
+  if (useProd2) {
+    console.log("(Using production deployment)");
+  }
+}
+var import_crypto2, import_child_process3, useProd2;
+var init_portal_link = __esm({
+  "src/cli/portal-link.ts"() {
+    "use strict";
+    import_crypto2 = require("crypto");
+    import_child_process3 = require("child_process");
+    useProd2 = false;
+  }
+});
+
 // src/cli/index.ts
 var index_exports = {};
 __export(index_exports, {
@@ -23491,9 +23871,9 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // src/cli/index.ts
-var import_child_process2 = require("child_process");
+var import_child_process4 = require("child_process");
 var import_dotenv = __toESM(require_main(), 1);
-var import_fs2 = require("fs");
+var import_fs3 = require("fs");
 
 // ../../node_modules/.bun/@inquirer+core@11.1.1+8edf6063c4b37a0a/node_modules/@inquirer/core/dist/lib/key.js
 var isUpKey = (key, keybindings = []) => (
@@ -24961,13 +25341,13 @@ var PromisePolyfill = class extends Promise {
   // Available starting from Node 22
   // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise/withResolvers
   static withResolver() {
-    let resolve;
+    let resolve2;
     let reject;
     const promise = new Promise((res, rej) => {
-      resolve = res;
+      resolve2 = res;
       reject = rej;
     });
-    return { promise, resolve, reject };
+    return { promise, resolve: resolve2, reject };
   }
 };
 
@@ -25001,7 +25381,7 @@ function createPrompt(view) {
       output
     });
     const screen = new ScreenManager(rl);
-    const { promise, resolve, reject } = PromisePolyfill.withResolver();
+    const { promise, resolve: resolve2, reject } = PromisePolyfill.withResolver();
     const cancel = () => reject(new CancelPromptError());
     if (signal) {
       const abort = () => reject(new AbortPromptError({ cause: signal.reason }));
@@ -25028,7 +25408,7 @@ function createPrompt(view) {
       cycle(() => {
         try {
           const nextView = view(config, (value) => {
-            setImmediate(() => resolve(value));
+            setImmediate(() => resolve2(value));
           });
           if (nextView === void 0) {
             const callerFilename = callSites[1]?.getFileName();
@@ -26467,7 +26847,7 @@ var PromptsRunner = class {
       throw new Error(`Prompt for type ${question.type} not found`);
     }
     let cleanupSignal;
-    const promptFn = isPromptConstructor(prompt2) ? (q, opt) => new Promise((resolve, reject) => {
+    const promptFn = isPromptConstructor(prompt2) ? (q, opt) => new Promise((resolve2, reject) => {
       const { signal: signal2 } = opt;
       if (signal2.aborted) {
         reject(new AbortPromptError({ cause: signal2.reason }));
@@ -26504,7 +26884,7 @@ var PromptsRunner = class {
         signal2.removeEventListener("abort", abort);
         cleanupSignal = void 0;
       };
-      activePrompt.run().then(resolve, reject).finally(cleanup);
+      activePrompt.run().then(resolve2, reject).finally(cleanup);
     }) : prompt2;
     let cleanupModuleSignal;
     const { signal: moduleSignal } = this.opt;
@@ -26595,7 +26975,7 @@ var inquirer = {
 var dist_default12 = inquirer;
 
 // src/cli/index.ts
-var import_path = __toESM(require("path"), 1);
+var import_path2 = __toESM(require("path"), 1);
 
 // ../../node_modules/.bun/valibot@1.2.0+1fb4c65d43e298b9/node_modules/valibot/dist/index.mjs
 var store$4;
@@ -27138,9 +27518,28 @@ async function generateKeys() {
 }
 
 // src/cli/index.ts
-new Command().name("@robelest/convex-auth").description(
+var program2 = new Command().name("@robelest/convex-auth").description(
   "Add code and set environment variables for @robelest/convex-auth.\n\nFull docs: https://deepwiki.com/robelest/convex-auth"
-).option(
+);
+var portalCmd = program2.command("portal").description("Manage the auth admin portal");
+portalCmd.command("upload").description("Upload portal static files to Convex storage").allowUnknownOption(true).allowExcessArguments(true).action(async () => {
+  const idx = process.argv.indexOf("upload");
+  const uploadArgs = idx >= 0 ? process.argv.slice(idx + 1) : [];
+  const { portalUploadMain: portalUploadMain2 } = await Promise.resolve().then(() => (init_portal_upload(), portal_upload_exports));
+  await portalUploadMain2(uploadArgs);
+});
+portalCmd.command("link").description("Generate an admin invite link for the portal").option("--prod", "Use production deployment").option(
+  "--component <name>",
+  "Convex module with portal functions",
+  "auth"
+).action(async (opts) => {
+  const { portalLinkMain: portalLinkMain2 } = await Promise.resolve().then(() => (init_portal_link(), portal_link_exports));
+  await portalLinkMain2({
+    prod: opts.prod ?? false,
+    component: opts.component
+  });
+});
+program2.option(
   "--site-url <url>",
   "Your frontend app URL (e.g. 'http://localhost:5173' for dev, 'https://myapp.com' for prod)"
 ).option(
@@ -27178,7 +27577,8 @@ new Command().name("@robelest/convex-auth").description(
   } else {
     printFinalSuccessMessage(config);
   }
-}).parse(process.argv);
+});
+program2.parse(process.argv);
 async function configureSiteUrl(config, forcedValue) {
   logStep(config, "Configure SITE_URL");
   if (config.isExpo) {
@@ -27241,13 +27641,13 @@ async function configureKeys(config) {
   await setEnvVar(config, "JWKS", JWKS, { hideValue: true });
 }
 async function backendEnvVar(config, name) {
-  return (0, import_child_process2.execSync)(`npx convex env get ${deploymentOptions(config)} ${name}`, {
+  return (0, import_child_process4.execSync)(`npx convex env get ${deploymentOptions(config)} ${name}`, {
     stdio: "pipe"
   }).toString().slice(0, -1);
 }
 async function setEnvVar(config, name, value, options) {
   const valueEscaped = value.replace(/"/g, '\\"');
-  (0, import_child_process2.execSync)(
+  (0, import_child_process4.execSync)(
     `npx convex env set ${deploymentOptions(config)} -- ${name} "${valueEscaped}"`,
     {
       stdio: options?.hideValue ? "ignore" : "inherit"
@@ -27320,11 +27720,11 @@ var validTsConfig = `{
 async function modifyTsConfig(config) {
   logStep(config, "Modify tsconfig file");
   const projectLevelTsConfigPath = "tsconfig.json";
-  const tsConfigPath = import_path.default.join(config.convexFolderPath, "tsconfig.json");
-  if (!(0, import_fs2.existsSync)(tsConfigPath)) {
-    if ((0, import_fs2.existsSync)(projectLevelTsConfigPath)) {
+  const tsConfigPath = import_path2.default.join(config.convexFolderPath, "tsconfig.json");
+  if (!(0, import_fs3.existsSync)(tsConfigPath)) {
+    if ((0, import_fs3.existsSync)(projectLevelTsConfigPath)) {
       if (config.isExpo) {
-        (0, import_fs2.writeFileSync)(tsConfigPath, validTsConfig);
+        (0, import_fs3.writeFileSync)(tsConfigPath, validTsConfig);
         logSuccess(`Added ${source_default.bold(tsConfigPath)}`);
         return;
       }
@@ -27332,7 +27732,7 @@ async function modifyTsConfig(config) {
     logInfo(`No ${source_default.bold(tsConfigPath)} found. Skipping.`);
     return;
   }
-  const existingTsConfig = (0, import_fs2.readFileSync)(tsConfigPath, "utf8");
+  const existingTsConfig = (0, import_fs3.readFileSync)(tsConfigPath, "utf8");
   const moduleResolutionPattern = /"moduleResolution"\s*:\s*"(\w+)"/;
   const [, existingModuleResolution] = existingTsConfig.match(moduleResolutionPattern) ?? [];
   const skipLibCheckPattern = /"skipLibCheck"\s*:\s*(\w+)/;
@@ -27368,7 +27768,7 @@ ${source}
     skipLibCheckPattern,
     '"skipLibCheck": true'
   );
-  (0, import_fs2.writeFileSync)(tsConfigPath, changedTsConfig);
+  (0, import_fs3.writeFileSync)(tsConfigPath, changedTsConfig);
   logSuccess(`Modified ${source_default.bold(tsConfigPath)}`);
 }
 function addCompilerOption(tsconfig, existingValue, pattern, optionAndValue) {
@@ -27390,10 +27790,10 @@ app.use(auth);
 export default app;
 `;
   const source = templateToSource(sourceTemplate);
-  const convexConfigPath = import_path.default.join(config.convexFolderPath, "convex.config");
+  const convexConfigPath = import_path2.default.join(config.convexFolderPath, "convex.config");
   const existingConfigPath = await existingNonEmptySourcePath(convexConfigPath);
   if (existingConfigPath !== null) {
-    const existingConfig = (0, import_fs2.readFileSync)(existingConfigPath, "utf8");
+    const existingConfig = (0, import_fs3.readFileSync)(existingConfigPath, "utf8");
     if (doesAlreadyMatchTemplate(existingConfig, sourceTemplate)) {
       logSuccess(`The ${source_default.bold(existingConfigPath)} is already set up.`);
     } else {
@@ -27407,25 +27807,28 @@ ${source}
     }
   } else {
     const newConfigPath = config.usesTypeScript ? `${convexConfigPath}.ts` : `${convexConfigPath}.js`;
-    (0, import_fs2.writeFileSync)(newConfigPath, source);
+    (0, import_fs3.writeFileSync)(newConfigPath, source);
     logSuccess(`Created ${source_default.bold(newConfigPath)}`);
   }
 }
 async function initializeAuth(config) {
   logStep(config, "Initialize auth file");
-  const sourceTemplate = `import { Auth } from "@robelest/convex-auth/component";
+  const sourceTemplate = `import { Auth, Portal } from "@robelest/convex-auth/component";
 import { components } from "./_generated/api";
 
-export const { auth, signIn, signOut, store } = Auth({$$
-  component: components.auth,$$
+const auth = new Auth(components.auth, {$$
   providers: [$$],$$
 });
+
+export { auth };
+export const { signIn, signOut, store } = auth;
+export const { portalQuery, portalMutation, portalInternal } = Portal(auth);
 `;
   const source = templateToSource(sourceTemplate);
-  const authPath = import_path.default.join(config.convexFolderPath, "auth");
+  const authPath = import_path2.default.join(config.convexFolderPath, "auth");
   const existingAuthPath = await existingNonEmptySourcePath(authPath);
   if (existingAuthPath !== null) {
-    const existingAuth = (0, import_fs2.readFileSync)(existingAuthPath, "utf8");
+    const existingAuth = (0, import_fs3.readFileSync)(existingAuthPath, "utf8");
     if (doesAlreadyMatchTemplate(existingAuth, sourceTemplate)) {
       logSuccess(`The ${source_default.bold(existingAuthPath)} is already set up.`);
     } else {
@@ -27439,7 +27842,7 @@ ${source}
     }
   } else {
     const newAuthPath = config.usesTypeScript ? `${authPath}.ts` : `${authPath}.js`;
-    (0, import_fs2.writeFileSync)(newAuthPath, source);
+    (0, import_fs3.writeFileSync)(newAuthPath, source);
     logSuccess(`Created ${source_default.bold(newAuthPath)}`);
   }
 }
@@ -27455,10 +27858,10 @@ auth.addHttpRoutes(http);
 export default http;
 `;
   const source = templateToSource(sourceTemplate);
-  const httpPath = import_path.default.join(config.convexFolderPath, "http");
+  const httpPath = import_path2.default.join(config.convexFolderPath, "http");
   const existingHttpPath = await existingNonEmptySourcePath(httpPath);
   if (existingHttpPath !== null) {
-    const existingHttp = (0, import_fs2.readFileSync)(existingHttpPath, "utf8");
+    const existingHttp = (0, import_fs3.readFileSync)(existingHttpPath, "utf8");
     if (doesAlreadyMatchTemplate(existingHttp, sourceTemplate)) {
       logSuccess(`The ${source_default.bold(existingHttpPath)} is already set up.`);
     } else {
@@ -27472,7 +27875,7 @@ ${source}
     }
   } else {
     const newHttpPath = config.usesTypeScript ? `${httpPath}.ts` : `${httpPath}.js`;
-    (0, import_fs2.writeFileSync)(newHttpPath, source);
+    (0, import_fs3.writeFileSync)(newHttpPath, source);
     logSuccess(`Created ${source_default.bold(newHttpPath)}`);
   }
 }
@@ -27532,7 +27935,7 @@ async function existingNonEmptySourcePath(path3) {
   return await existsAndNotEmpty(`${path3}.ts`) ? `${path3}.ts` : await existsAndNotEmpty(`${path3}.js`) ? `${path3}.js` : null;
 }
 async function existsAndNotEmpty(path3) {
-  return (0, import_fs2.existsSync)(path3) && (0, import_fs2.readFileSync)(path3, "utf8").trim() !== "";
+  return (0, import_fs3.existsSync)(path3) && (0, import_fs3.readFileSync)(path3, "utf8").trim() !== "";
 }
 function logStep(config, message2) {
   if (config.step > 1) {
@@ -27544,9 +27947,9 @@ async function checkSourceControl(options) {
   if (options.allowDirtyGitState) {
     return;
   }
-  const isGit = (0, import_fs2.existsSync)(".git");
+  const isGit = (0, import_fs3.existsSync)(".git");
   if (isGit) {
-    const gitStatus = (0, import_child_process2.execSync)("git status --porcelain").toString();
+    const gitStatus = (0, import_child_process4.execSync)("git status --porcelain").toString();
     const changedFiles = gitStatus.split("\n").filter(
       (line) => !/\bpackage(-lock)?.json/.test(line) && line.length > 0
     );
@@ -27568,7 +27971,7 @@ async function checkSourceControl(options) {
 }
 function readPackageJson() {
   try {
-    const data = (0, import_fs2.readFileSync)("package.json", "utf8");
+    const data = (0, import_fs3.readFileSync)("package.json", "utf8");
     return JSON.parse(data);
   } catch (error) {
     logErrorAndExit(
@@ -27578,11 +27981,11 @@ function readPackageJson() {
   }
 }
 function readConvexJson() {
-  if (!(0, import_fs2.existsSync)("convex.json")) {
+  if (!(0, import_fs3.existsSync)("convex.json")) {
     return {};
   }
   try {
-    const data = (0, import_fs2.readFileSync)("convex.json", "utf8");
+    const data = (0, import_fs3.readFileSync)("convex.json", "utf8");
     return JSON.parse(data);
   } catch (error) {
     logErrorAndExit(