@robelest/convex-auth 0.0.2-preview.1 → 0.0.2

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYzC,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,OAAO;QACL,KAAK,EAAE,GAAG,MAAM,iBAAiB;QACjC,YAAY,EAAE,GAAG,MAAM,0BAA0B;QACjD,QAAQ,EAAE,GAAG,MAAM,2BAA2B;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,YAAuC,EACvC,IAAa;IAEb,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI;QAClC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI;QAChD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAoB,EACpB,IAAa,EACb,SAA2B,EAAE,MAAM,EAAE,IAAI,EAAE;IAE3C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAc;QACxB,MAAM;KACP,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;IAC1C,OAAO;QACL,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE;YAC1C,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAC3C,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC;QACF,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE;YACxD,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAClD,OAAO,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SACjE,CAAC;QACF,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;YAChD,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAgB;IACtE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,GAAG,QAAQ,GAAG,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAK1C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA0BzC,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,OAAO;QACL,KAAK,EAAE,GAAG,MAAM,iBAAiB;QACjC,YAAY,EAAE,GAAG,MAAM,0BAA0B;QACjD,QAAQ,EAAE,GAAG,MAAM,2BAA2B;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,YAAuC,EACvC,IAAa;IAEb,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI;QAClC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI;QAChD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAoB,EACpB,IAAa,EACb,SAA2B,EAAE,MAAM,EAAE,IAAI,EAAE;IAE3C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAc;QACxB,MAAM;KACP,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;IAC1C,OAAO;QACL,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE;YAC1C,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAC3C,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC;QACF,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE;YACxD,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAClD,OAAO,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SACjE,CAAC;QACF,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;YAChD,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAgB;IACtE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,GAAG,QAAQ,GAAG,CAAC;AAC9D,CAAC;AAED,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAIlD,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,YAAY,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IAEzC,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,OAAO,CAAC,KAAK,CACX,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,yBAAyB,OAAO,EAAE,CAC9D,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAE,EAAE;QACtC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAAC,OAAgB,EAAE,EAAE;QAC/C,OAAO,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,QAAkB,EAAE,OAAiB,EAAE,EAAE;QAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE;QACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YACxC,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAE,EAAE;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;YAClC,SAAS,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAC3C,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,KAAa,EAAuB,EAAE;QACzD,IAAI,CAAC;YACH,OAAO,SAAS,CAAe,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,KAAqB,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EACzB,OAAgB,EACqD,EAAE;QACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;QACxC,IAAI,YAAY,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,UAAU,CAAC,yCAAyC,CAAC,CAAC;YACtD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,YAAY,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,UAAU,CAAC,qDAAqD,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,YAAY,EAAE,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACtE,UAAU,CAAC,+CAA+C,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,oBAAoB,GAAG,YAAY,CAAC,GAAG,GAAG,IAAI,GAAG,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC;QAC/E,MAAM,iBAAiB,GACrB,IAAI,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,GAAG,CACN,0BAA0B,EAC1B,IAAI,CAAC,GAAG,CAAC,kCAAkC,EAAE,oBAAoB,GAAG,EAAE,CAAC,CACxE,CAAC;QACJ,IAAI,YAAY,CAAC,GAAG,GAAG,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAChD,UAAU,CAAC,2CAA2C,CAAC,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,MAAM,CACxC,aAAwC,EACxC;gBACE,YAAY;aACb,CACF,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,UAAU,CAAC,0BAA0B,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,UAAU,CAAC,6CAA6C,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAgB;YACpB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAgB;YAC3B,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;YACjD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,YAAY,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,YAAY,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,OAAgB;YAC1B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;YAEtD,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC1D,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAEjC,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACpC,IAAI,cAAc,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;wBACzC,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxC,CAAC;oBACD,IAAI,CAAC,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC;gBAClD,CAAC;gBACD,MAAM,MAAM,GAAG,YAAY,CACzB,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS;oBAChE,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,cAAc,CAAC,KAAK,CACzB,CAAC;gBAEF,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAChC,aAAwC,EACxC,IAAI,CACL,CAAC;oBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;wBAC7D,OAAO,aAAa,CAClB,QAAQ,EACR,oBAAoB,CAClB;4BACE,GAAG,cAAc;4BACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;yBAClC,EACD,IAAI,EACJ,YAAY,CACb,CACF,CAAC;oBACJ,CAAC;oBACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,QAAQ,GAAG,YAAY,CAAC;4BAC5B,MAAM,EACJ,MAAM,CAAC,MAAM,KAAK,IAAI;gCACpB,CAAC,CAAC,IAAI;gCACN,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE;yBAC5D,CAAC,CAAC;wBACH,OAAO,aAAa,CAClB,QAAQ,EACR,oBAAoB,CAClB;4BACE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI;4BACnC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI;4BACjD,QAAQ,EAAE,IAAI;yBACf,EACD,IAAI,EACJ,YAAY,CACb,CACF,CAAC;oBACJ,CAAC;oBACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC9B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;oBACxE,OAAO,aAAa,CAClB,QAAQ,EACR,oBAAoB,CAClB;wBACE,KAAK,EAAE,IAAI;wBACX,YAAY,EAAE,IAAI;wBAClB,QAAQ,EAAE,IAAI;qBACf,EACD,IAAI,EACJ,YAAY,CACb,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,CAC7C,cAA0C,CAC3C,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,OAAO,aAAa,CAClB,YAAY,CAAC,IAAI,CAAC,EAClB,oBAAoB,CAClB;gBACE,KAAK,EAAE,IAAI;gBACX,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,IAAI;aACf,EACD,IAAI,EACJ,YAAY,CACb,CACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAgB;YAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAEjC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO,EAAE,oBAAoB,CAC3B;wBACE,KAAK,EAAE,IAAI;wBACX,YAAY,EAAE,IAAI;wBAClB,QAAQ,EAAE,IAAI;qBACf,EACD,IAAI,EACJ,YAAY,CACb;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACpC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,OAAO,OAAO,CAAC,gBAAgB,KAAK,UAAU;oBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC;oBACzC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAEjC,IACE,IAAI,KAAK,IAAI;gBACb,OAAO,CAAC,MAAM,KAAK,KAAK;gBACxB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC;gBACpD,gBAAgB,EAChB,CAAC;gBACD,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,MAAM,CACxC,aAAwC,EACxC;wBACE,MAAM,EAAE,EAAE,IAAI,EAAE;wBAChB,QAAQ,EAAE,cAAc,CAAC,QAAQ,IAAI,SAAS;qBAC/C,CACF,CAAC;oBACF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;oBACpE,CAAC;oBACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;oBAChE,OAAO;wBACL,QAAQ,EAAE,aAAa,CACrB,QAAQ,EACR,oBAAoB,CAClB;4BACE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI;4BACnC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI;4BACjD,QAAQ,EAAE,IAAI;yBACf,EACD,IAAI,EACJ,YAAY,CACb,CACF;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;oBAChE,OAAO;wBACL,QAAQ,EAAE,aAAa,CACrB,QAAQ,EACR,oBAAoB,CAClB;4BACE,KAAK,EAAE,IAAI;4BACX,YAAY,EAAE,IAAI;4BAClB,QAAQ,EAAE,IAAI;yBACf,EACD,IAAI,EACJ,YAAY,CACb,CACF;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,oBAAoB,CAC3B;oBACE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI;oBAC5B,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,IAAI;oBAC1C,QAAQ,EAAE,IAAI;iBACf,EACD,IAAI,EACJ,YAAY,CACb;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/portal-email.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Styled dark-theme magic link email template for the Convex Auth Portal.
+ *
+ * Matches the portal's design system:
+ * - Background: #1e1c1a (body), #2a2825 (card)
+ * - Accent: #63a8f8 (Convex blue)
+ * - Text: #ffffff (headings), #b9b1aa (secondary), #8f8780 (muted)
+ * - Border: #4a4743
+ *
+ * @module
+ */
+/**
+ * Generate the styled magic link email HTML.
+ *
+ * @param url - The magic link URL the user clicks to sign in.
+ * @param expiresInHours - How long the link is valid (shown in the email).
+ */
+export declare function portalMagicLinkEmail(url: string, expiresInHours?: number): string;
+//# sourceMappingURL=portal-email.d.ts.map

package/dist/server/portal-email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-email.d.ts","sourceRoot":"","sources":["../../src/server/portal-email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,cAAc,GAAE,MAAW,GAC1B,MAAM,CAuER"}

package/dist/server/portal-email.js

@@ -0,0 +1,89 @@
+/**
+ * Styled dark-theme magic link email template for the Convex Auth Portal.
+ *
+ * Matches the portal's design system:
+ * - Background: #1e1c1a (body), #2a2825 (card)
+ * - Accent: #63a8f8 (Convex blue)
+ * - Text: #ffffff (headings), #b9b1aa (secondary), #8f8780 (muted)
+ * - Border: #4a4743
+ *
+ * @module
+ */
+const SHIELD_SVG = `<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="#63a8f8" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z"/></svg>`;
+/**
+ * Generate the styled magic link email HTML.
+ *
+ * @param url - The magic link URL the user clicks to sign in.
+ * @param expiresInHours - How long the link is valid (shown in the email).
+ */
+export function portalMagicLinkEmail(url, expiresInHours = 24) {
+    const expiryText = expiresInHours >= 24
+        ? `${Math.floor(expiresInHours / 24)} day${Math.floor(expiresInHours / 24) > 1 ? "s" : ""}`
+        : `${expiresInHours} hour${expiresInHours > 1 ? "s" : ""}`;
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <meta name="color-scheme" content="dark" />
+  <meta name="supported-color-schemes" content="dark" />
+  <title>Sign in to Convex Auth Portal</title>
+</head>
+<body style="margin:0;padding:0;background-color:#1e1c1a;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
+  <table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background-color:#1e1c1a;padding:40px 16px;">
+    <tr>
+      <td align="center">
+        <table role="presentation" width="480" cellpadding="0" cellspacing="0" style="background-color:#2a2825;border:1px solid #4a4743;border-radius:8px;overflow:hidden;">
+          <!-- Header -->
+          <tr>
+            <td style="padding:32px 32px 0 32px;text-align:center;">
+              ${SHIELD_SVG}
+              <h1 style="margin:16px 0 0 0;font-size:20px;font-weight:600;color:#ffffff;line-height:1.3;">
+                Convex Auth Portal
+              </h1>
+            </td>
+          </tr>
+
+          <!-- Body -->
+          <tr>
+            <td style="padding:24px 32px;">
+              <p style="margin:0 0 20px 0;font-size:15px;line-height:1.6;color:#b9b1aa;">
+                Click the button below to sign in to the admin portal. This link will expire in ${expiryText}.
+              </p>
+
+              <!-- CTA Button -->
+              <table role="presentation" width="100%" cellpadding="0" cellspacing="0">
+                <tr>
+                  <td align="center" style="padding:8px 0 24px 0;">
+                    <a href="${url}" target="_blank" style="display:inline-block;background-color:#63a8f8;color:#0a0a0b;font-size:15px;font-weight:600;text-decoration:none;padding:12px 32px;border-radius:6px;line-height:1;">
+                      Sign in to Portal
+                    </a>
+                  </td>
+                </tr>
+              </table>
+
+              <p style="margin:0 0 16px 0;font-size:13px;line-height:1.6;color:#8f8780;">
+                If the button doesn't work, copy and paste this URL into your browser:
+              </p>
+              <p style="margin:0;font-size:13px;line-height:1.5;color:#63a8f8;word-break:break-all;">
+                ${url}
+              </p>
+            </td>
+          </tr>
+
+          <!-- Footer -->
+          <tr>
+            <td style="padding:20px 32px;border-top:1px solid #4a4743;">
+              <p style="margin:0;font-size:12px;line-height:1.5;color:#8f8780;text-align:center;">
+                If you didn't request this email, you can safely ignore it.
+              </p>
+            </td>
+          </tr>
+        </table>
+      </td>
+    </tr>
+  </table>
+</body>
+</html>`;
+}
+//# sourceMappingURL=portal-email.js.map

package/dist/server/portal-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-email.js","sourceRoot":"","sources":["../../src/server/portal-email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,UAAU,GAAG,sWAAsW,CAAC;AAE1X;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,iBAAyB,EAAE;IAE3B,MAAM,UAAU,GACd,cAAc,IAAI,EAAE;QAClB,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3F,CAAC,CAAC,GAAG,cAAc,QAAQ,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAE/D,OAAO;;;;;;;;;;;;;;;;;gBAiBO,UAAU;;;;;;;;;;;kGAWwE,UAAU;;;;;;;+BAO7E,GAAG;;;;;;;;;;;kBAWhB,GAAG;;;;;;;;;;;;;;;;;;QAkBb,CAAC;AACT,CAAC"}

package/dist/server/portal.d.ts

@@ -0,0 +1,116 @@
+import type { HttpRouter } from "convex/server";
+import type { ComponentApi as AuthComponentApi } from "../component/_generated/component.js";
+/**
+ * Configure the Convex Auth Portal. Returns all the functions needed to
+ * serve the portal admin UI, manage invite links, and query auth data.
+ *
+ * The portal dogfoods the same `Auth()` instance as your app. Portal admins
+ * sign in via email magic link and are identified by accepted invites with
+ * `role: "portalAdmin"`.
+ *
+ * ```ts filename="convex/portal.ts"
+ * import { Portal } from "@robelest/convex-auth/component";
+ * import { auth } from "./auth";
+ * import { components } from "./_generated/api";
+ *
+ * export const {
+ *   hosting, getCurrentDeployment,
+ *   portalQuery, portalMutation,
+ *   validateInvite, acceptInvite, createPortalInvite,
+ *   portal,
+ * } = Portal(components.auth, components.selfHosting, auth);
+ * ```
+ *
+ * ## Setup
+ *
+ * 1. Configure an email provider in your `Auth()` config (e.g. Resend).
+ * 2. Generate an admin invite link:
+ *    `npx @robelest/convex-auth portal link [--prod]`
+ * 3. Visit the link, enter your email, click the magic link, and you're in.
+ *
+ * The portal URL is auto-derived from `CONVEX_SITE_URL` (always set by Convex).
+ * Override with `options.portalUrl` if you need a custom URL.
+ */
+export declare function Portal(authComponent: AuthComponentApi, selfHostingComponent: any, auth: any, options?: {
+    portalUrl?: string;
+}): {
+    /**
+     * Combined internal mutation for self-hosting operations.
+     * Used by the CLI (`@robelest/convex-auth portal upload`) to
+     * upload static assets and manage deployments.
+     */
+    hosting: import("convex/server").RegisteredMutation<"internal", any, Promise<any>>;
+    getCurrentDeployment: import("convex/server").RegisteredQuery<"public", {}, Promise<any>>;
+    /**
+     * Validate an invite token. Returns the invite if valid and pending,
+     * or `null` otherwise. Used by the portal UI to check if an invite
+     * link is valid before showing the registration form.
+     */
+    validateInvite: import("convex/server").RegisteredQuery<"public", {
+        tokenHash: string;
+    }, Promise<{
+        _id: any;
+        role: any;
+    } | null>>;
+    /**
+     * Accept a portal invite. Must be called by an authenticated user.
+     * Marks the invite as accepted and records the accepting user's ID.
+     *
+     * The portal UI calls this after the user has signed in via magic link
+     * following an invite link.
+     */
+    acceptInvite: import("convex/server").RegisteredMutation<"public", {
+        tokenHash: string;
+    }, Promise<void>>;
+    /**
+     * Create a portal admin invite. Internal mutation called by the CLI
+     * (`npx @robelest/convex-auth portal link`).
+     */
+    createPortalInvite: import("convex/server").RegisteredMutation<"internal", {
+        tokenHash: string;
+    }, Promise<{
+        portalUrl: string;
+    }>>;
+    /**
+     * Combined portal query for all auth data reads.
+     * Requires the caller to be an authenticated portal admin.
+     *
+     * Actions:
+     * - `listUsers` — List all users
+     * - `listSessions` — List all sessions
+     * - `getUser` — Get a single user by ID (requires `userId`)
+     * - `getUserSessions` — List sessions for a user (requires `userId`)
+     * - `getUserAccounts` — List auth accounts for a user (requires `userId`)
+     * - `isAdmin` — Check if the current user is a portal admin
+     */
+    portalQuery: import("convex/server").RegisteredQuery<"public", {
+        action: string;
+        userId?: string;
+    }, Promise<any>>;
+    /**
+     * Combined portal mutation for all auth data writes.
+     * Requires the caller to be an authenticated portal admin.
+     *
+     * Actions:
+     * - `revokeSession` — Revoke (delete) a session (requires `sessionId`)
+     */
+    portalMutation: import("convex/server").RegisteredMutation<"public", {
+        action: string;
+        sessionId?: string;
+    }, Promise<void>>;
+    portal: {
+        /**
+         * The URL where the portal is served. Used by the Svelte client
+         * as the `redirectTo` for magic link sign-in.
+         */
+        portalUrl: string;
+        /**
+         * Register HTTP routes that serve the portal static UI.
+         */
+        addHttpRoutes: (http: HttpRouter, opts?: {
+            pathPrefix?: string;
+            spaFallback?: boolean;
+        }) => void;
+    };
+};
+//# sourceMappingURL=portal.d.ts.map

package/dist/server/portal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/server/portal.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAiC7F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,MAAM,CACpB,aAAa,EAAE,gBAAgB,EAC/B,oBAAoB,EAAE,GAAG,EACzB,IAAI,EAAE,GAAG,EACT,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;IAW9B;;;;OAIG;;;IAoFH;;;;OAIG;;mBAGqD,MAAM;;;;;IAe9D;;;;;;OAMG;;mBAGqD,MAAM;;IAwB9D;;;OAGG;;mBAGqD,MAAM;;;;IAY9D;;;;;;;;;;;OAWG;;gBAQ+B,MAAM;iBAAW,MAAM;;IAkDzD;;;;;;OAMG;;gBAQkC,MAAM;oBAAc,MAAM;;;QAqB7D;;;WAGG;;QAGH;;WAEG;8BAEK,UAAU,SACT;YAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,OAAO,CAAA;SAAE;;EAY5D"}

package/dist/server/portal.js

@@ -0,0 +1,294 @@
+import { queryGeneric, mutationGeneric, internalMutationGeneric, } from "convex/server";
+import { v } from "convex/values";
+import { registerStaticRoutes } from "@convex-dev/self-hosting";
+// ============================================================================
+// Helpers
+// ============================================================================
+/**
+ * Check if the authenticated user is a portal admin.
+ * Portal admins are identified by having an accepted invite
+ * with `role: "portalAdmin"`.
+ */
+async function requirePortalAdmin(ctx, authComponent, userId) {
+    const invites = await ctx.runQuery(authComponent.public.inviteList, {
+        status: "accepted",
+    });
+    const isAdmin = invites.some((invite) => invite.role === "portalAdmin" && invite.acceptedByUserId === userId);
+    if (!isAdmin) {
+        throw new Error("Not authorized: portal admin access required");
+    }
+}
+// ============================================================================
+// Portal() factory
+// ============================================================================
+/**
+ * Configure the Convex Auth Portal. Returns all the functions needed to
+ * serve the portal admin UI, manage invite links, and query auth data.
+ *
+ * The portal dogfoods the same `Auth()` instance as your app. Portal admins
+ * sign in via email magic link and are identified by accepted invites with
+ * `role: "portalAdmin"`.
+ *
+ * ```ts filename="convex/portal.ts"
+ * import { Portal } from "@robelest/convex-auth/component";
+ * import { auth } from "./auth";
+ * import { components } from "./_generated/api";
+ *
+ * export const {
+ *   hosting, getCurrentDeployment,
+ *   portalQuery, portalMutation,
+ *   validateInvite, acceptInvite, createPortalInvite,
+ *   portal,
+ * } = Portal(components.auth, components.selfHosting, auth);
+ * ```
+ *
+ * ## Setup
+ *
+ * 1. Configure an email provider in your `Auth()` config (e.g. Resend).
+ * 2. Generate an admin invite link:
+ *    `npx @robelest/convex-auth portal link [--prod]`
+ * 3. Visit the link, enter your email, click the magic link, and you're in.
+ *
+ * The portal URL is auto-derived from `CONVEX_SITE_URL` (always set by Convex).
+ * Override with `options.portalUrl` if you need a custom URL.
+ */
+export function Portal(authComponent, selfHostingComponent, auth, options) {
+    const portalUrl = options?.portalUrl ??
+        (process.env.CONVEX_SITE_URL
+            ? `${process.env.CONVEX_SITE_URL.replace(/\/$/, "")}/portal`
+            : "/portal");
+    return {
+        // ---- Self-hosting: combined internal mutation for CLI ----
+        /**
+         * Combined internal mutation for self-hosting operations.
+         * Used by the CLI (`@robelest/convex-auth portal upload`) to
+         * upload static assets and manage deployments.
+         */
+        hosting: internalMutationGeneric({
+            args: {
+                action: v.string(),
+                path: v.optional(v.string()),
+                storageId: v.optional(v.string()),
+                blobId: v.optional(v.string()),
+                contentType: v.optional(v.string()),
+                deploymentId: v.optional(v.string()),
+                currentDeploymentId: v.optional(v.string()),
+                limit: v.optional(v.number()),
+            },
+            handler: async (ctx, args) => {
+                switch (args.action) {
+                    case "generateUploadUrl": {
+                        return await ctx.storage.generateUploadUrl();
+                    }
+                    case "recordAsset": {
+                        const { oldStorageId, oldBlobId } = await ctx.runMutation(selfHostingComponent.lib.recordAsset, {
+                            path: args.path,
+                            ...(args.storageId ? { storageId: args.storageId } : {}),
+                            ...(args.blobId ? { blobId: args.blobId } : {}),
+                            contentType: args.contentType,
+                            deploymentId: args.deploymentId,
+                        });
+                        if (oldStorageId) {
+                            try {
+                                await ctx.storage.delete(oldStorageId);
+                            }
+                            catch {
+                                // Ignore — old file may have been in different storage
+                            }
+                        }
+                        return oldBlobId ?? null;
+                    }
+                    case "gcOldAssets": {
+                        const { storageIds, blobIds } = await ctx.runMutation(selfHostingComponent.lib.gcOldAssets, { currentDeploymentId: args.currentDeploymentId });
+                        for (const storageId of storageIds) {
+                            try {
+                                await ctx.storage.delete(storageId);
+                            }
+                            catch {
+                                // Ignore
+                            }
+                        }
+                        await ctx.runMutation(selfHostingComponent.lib.setCurrentDeployment, { deploymentId: args.currentDeploymentId });
+                        return { deleted: storageIds.length, blobIds };
+                    }
+                    case "listAssets": {
+                        return await ctx.runQuery(selfHostingComponent.lib.listAssets, {
+                            limit: args.limit,
+                        });
+                    }
+                    default:
+                        throw new Error(`Unknown hosting action: ${args.action}`);
+                }
+            },
+        }),
+        // ---- Deployment query (public, for client live-reload) ----
+        getCurrentDeployment: queryGeneric({
+            args: {},
+            handler: async (ctx) => {
+                return await ctx.runQuery(selfHostingComponent.lib.getCurrentDeployment, {});
+            },
+        }),
+        // ---- Invite management ----
+        /**
+         * Validate an invite token. Returns the invite if valid and pending,
+         * or `null` otherwise. Used by the portal UI to check if an invite
+         * link is valid before showing the registration form.
+         */
+        validateInvite: queryGeneric({
+            args: { tokenHash: v.string() },
+            handler: async (ctx, { tokenHash }) => {
+                const invite = await ctx.runQuery(authComponent.public.inviteGetByTokenHash, { tokenHash });
+                if (!invite || invite.status !== "pending") {
+                    return null;
+                }
+                if (invite.expiresTime && invite.expiresTime < Date.now()) {
+                    return null;
+                }
+                return { _id: invite._id, role: invite.role };
+            },
+        }),
+        /**
+         * Accept a portal invite. Must be called by an authenticated user.
+         * Marks the invite as accepted and records the accepting user's ID.
+         *
+         * The portal UI calls this after the user has signed in via magic link
+         * following an invite link.
+         */
+        acceptInvite: mutationGeneric({
+            args: { tokenHash: v.string() },
+            handler: async (ctx, { tokenHash }) => {
+                const userId = await auth.user.require(ctx);
+                const invite = await ctx.runQuery(authComponent.public.inviteGetByTokenHash, { tokenHash });
+                if (!invite) {
+                    throw new Error("Invalid invite token");
+                }
+                if (invite.status !== "pending") {
+                    throw new Error(`Invite already ${invite.status}`);
+                }
+                if (invite.expiresTime && invite.expiresTime < Date.now()) {
+                    throw new Error("Invite has expired");
+                }
+                await ctx.runMutation(authComponent.public.inviteAccept, {
+                    inviteId: invite._id,
+                    acceptedByUserId: userId,
+                });
+            },
+        }),
+        /**
+         * Create a portal admin invite. Internal mutation called by the CLI
+         * (`npx @robelest/convex-auth portal link`).
+         */
+        createPortalInvite: internalMutationGeneric({
+            args: { tokenHash: v.string() },
+            handler: async (ctx, { tokenHash }) => {
+                await ctx.runMutation(authComponent.public.inviteCreate, {
+                    tokenHash,
+                    role: "portalAdmin",
+                    status: "pending",
+                });
+                return { portalUrl };
+            },
+        }),
+        // ---- Portal data query (auth-gated) ----
+        /**
+         * Combined portal query for all auth data reads.
+         * Requires the caller to be an authenticated portal admin.
+         *
+         * Actions:
+         * - `listUsers` — List all users
+         * - `listSessions` — List all sessions
+         * - `getUser` — Get a single user by ID (requires `userId`)
+         * - `getUserSessions` — List sessions for a user (requires `userId`)
+         * - `getUserAccounts` — List auth accounts for a user (requires `userId`)
+         * - `isAdmin` — Check if the current user is a portal admin
+         */
+        portalQuery: queryGeneric({
+            args: {
+                action: v.string(),
+                userId: v.optional(v.string()),
+            },
+            handler: async (ctx, { action, userId }) => {
+                const currentUserId = await auth.user.require(ctx);
+                // Allow isAdmin check without admin requirement
+                if (action === "isAdmin") {
+                    try {
+                        await requirePortalAdmin(ctx, authComponent, currentUserId);
+                        return true;
+                    }
+                    catch {
+                        return false;
+                    }
+                }
+                await requirePortalAdmin(ctx, authComponent, currentUserId);
+                switch (action) {
+                    case "listUsers":
+                        return await ctx.runQuery(authComponent.public.userList);
+                    case "listSessions":
+                        return await ctx.runQuery(authComponent.public.sessionList);
+                    case "getUser":
+                        return await ctx.runQuery(authComponent.public.userGetById, {
+                            userId: userId,
+                        });
+                    case "getUserSessions":
+                        return await ctx.runQuery(authComponent.public.sessionListByUser, {
+                            userId: userId,
+                        });
+                    case "getUserAccounts": {
+                        const accounts = await ctx.runQuery(authComponent.public.accountListByUser, { userId: userId });
+                        // Strip secrets — never send password hashes to the frontend
+                        return accounts.map(({ secret: _, ...rest }) => rest);
+                    }
+                    default:
+                        throw new Error(`Unknown portal query action: ${action}`);
+                }
+            },
+        }),
+        // ---- Portal mutation (auth-gated) ----
+        /**
+         * Combined portal mutation for all auth data writes.
+         * Requires the caller to be an authenticated portal admin.
+         *
+         * Actions:
+         * - `revokeSession` — Revoke (delete) a session (requires `sessionId`)
+         */
+        portalMutation: mutationGeneric({
+            args: {
+                action: v.string(),
+                sessionId: v.optional(v.string()),
+            },
+            handler: async (ctx, { action, sessionId }) => {
+                const currentUserId = await auth.user.require(ctx);
+                await requirePortalAdmin(ctx, authComponent, currentUserId);
+                switch (action) {
+                    case "revokeSession":
+                        await ctx.runMutation(authComponent.public.sessionDelete, {
+                            sessionId: sessionId,
+                        });
+                        return;
+                    default:
+                        throw new Error(`Unknown portal mutation action: ${action}`);
+                }
+            },
+        }),
+        // ---- Portal namespace ----
+        portal: {
+            /**
+             * The URL where the portal is served. Used by the Svelte client
+             * as the `redirectTo` for magic link sign-in.
+             */
+            portalUrl,
+            /**
+             * Register HTTP routes that serve the portal static UI.
+             */
+            addHttpRoutes: (http, opts) => {
+                const prefix = opts?.pathPrefix ?? "/portal";
+                // Static file serving
+                registerStaticRoutes(http, selfHostingComponent, {
+                    pathPrefix: prefix,
+                    spaFallback: opts?.spaFallback ?? true,
+                });
+            },
+        },
+    };
+}
+//# sourceMappingURL=portal.js.map

package/dist/server/portal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal.js","sourceRoot":"","sources":["../../src/server/portal.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,eAAe,EACf,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,GAAQ,EACR,aAA+B,EAC/B,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE;QAClE,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,MAAW,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,CACtE,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,MAAM,CACpB,aAA+B,EAC/B,oBAAyB,EACzB,IAAS,EACT,OAAgC;IAEhC,MAAM,SAAS,GACb,OAAO,EAAE,SAAS;QAClB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe;YAC1B,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS;YAC5D,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,OAAO;QACL,6DAA6D;QAE7D;;;;WAIG;QACH,OAAO,EAAE,uBAAuB,CAAC;YAC/B,IAAI,EAAE;gBACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC5B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC9B,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACnC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACpC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC3C,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B;YACD,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;gBACrC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpB,KAAK,mBAAmB,CAAC,CAAC,CAAC;wBACzB,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;oBAC/C,CAAC;oBAED,KAAK,aAAa,CAAC,CAAC,CAAC;wBACnB,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CACvD,oBAAoB,CAAC,GAAG,CAAC,WAAW,EACpC;4BACE,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACxD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;yBAChC,CACF,CAAC;wBACF,IAAI,YAAY,EAAE,CAAC;4BACjB,IAAI,CAAC;gCACH,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;4BACzC,CAAC;4BAAC,MAAM,CAAC;gCACP,uDAAuD;4BACzD,CAAC;wBACH,CAAC;wBACD,OAAO,SAAS,IAAI,IAAI,CAAC;oBAC3B,CAAC;oBAED,KAAK,aAAa,CAAC,CAAC,CAAC;wBACnB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CACnD,oBAAoB,CAAC,GAAG,CAAC,WAAW,EACpC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAClD,CAAC;wBACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;4BACnC,IAAI,CAAC;gCACH,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;4BACtC,CAAC;4BAAC,MAAM,CAAC;gCACP,SAAS;4BACX,CAAC;wBACH,CAAC;wBACD,MAAM,GAAG,CAAC,WAAW,CACnB,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,EAC7C,EAAE,YAAY,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAC3C,CAAC;wBACF,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBACjD,CAAC;oBAED,KAAK,YAAY,CAAC,CAAC,CAAC;wBAClB,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE;4BAC7D,KAAK,EAAE,IAAI,CAAC,KAAK;yBAClB,CAAC,CAAC;oBACL,CAAC;oBAED;wBACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;SACF,CAAC;QAEF,8DAA8D;QAE9D,oBAAoB,EAAE,YAAY,CAAC;YACjC,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;gBAC1B,OAAO,MAAM,GAAG,CAAC,QAAQ,CACvB,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,EAC7C,EAAE,CACH,CAAC;YACJ,CAAC;SACF,CAAC;QAEF,8BAA8B;QAE9B;;;;WAIG;QACH,cAAc,EAAE,YAAY,CAAC;YAC3B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/B,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE,SAAS,EAAyB,EAAE,EAAE;gBAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAC/B,aAAa,CAAC,MAAM,CAAC,oBAAoB,EACzC,EAAE,SAAS,EAAE,CACd,CAAC;gBACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC3C,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC1D,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YAChD,CAAC;SACF,CAAC;QAEF;;;;;;WAMG;QACH,YAAY,EAAE,eAAe,CAAC;YAC5B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/B,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE,SAAS,EAAyB,EAAE,EAAE;gBAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAE5C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAC/B,aAAa,CAAC,MAAM,CAAC,oBAAoB,EACzC,EAAE,SAAS,EAAE,CACd,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACxC,CAAC;gBAED,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE;oBACvD,QAAQ,EAAE,MAAM,CAAC,GAAG;oBACpB,gBAAgB,EAAE,MAAM;iBACzB,CAAC,CAAC;YACL,CAAC;SACF,CAAC;QAEF;;;WAGG;QACH,kBAAkB,EAAE,uBAAuB,CAAC;YAC1C,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/B,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE,SAAS,EAAyB,EAAE,EAAE;gBAChE,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE;oBACvD,SAAS;oBACT,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,SAAkB;iBAC3B,CAAC,CAAC;gBACH,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,CAAC;SACF,CAAC;QAEF,2CAA2C;QAE3C;;;;;;;;;;;WAWG;QACH,WAAW,EAAE,YAAY,CAAC;YACxB,IAAI,EAAE;gBACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aAC/B;YACD,OAAO,EAAE,KAAK,EACZ,GAAQ,EACR,EAAE,MAAM,EAAE,MAAM,EAAuC,EACvD,EAAE;gBACF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAEnD,gDAAgD;gBAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,MAAM,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;wBAC5D,OAAO,IAAI,CAAC;oBACd,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC;gBAED,MAAM,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;gBAE5D,QAAQ,MAAM,EAAE,CAAC;oBACf,KAAK,WAAW;wBACd,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAE3D,KAAK,cAAc;wBACjB,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;oBAE9D,KAAK,SAAS;wBACZ,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE;4BAC1D,MAAM,EAAE,MAAO;yBAChB,CAAC,CAAC;oBAEL,KAAK,iBAAiB;wBACpB,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,iBAAiB,EAAE;4BAChE,MAAM,EAAE,MAAO;yBAChB,CAAC,CAAC;oBAEL,KAAK,iBAAiB,CAAC,CAAC,CAAC;wBACvB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CACjC,aAAa,CAAC,MAAM,CAAC,iBAAiB,EACtC,EAAE,MAAM,EAAE,MAAO,EAAE,CACpB,CAAC;wBACF,6DAA6D;wBAC7D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,EAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;oBAC7D,CAAC;oBAED;wBACE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;SACF,CAAC;QAEF,yCAAyC;QAEzC;;;;;;WAMG;QACH,cAAc,EAAE,eAAe,CAAC;YAC9B,IAAI,EAAE;gBACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aAClC;YACD,OAAO,EAAE,KAAK,EACZ,GAAQ,EACR,EAAE,MAAM,EAAE,SAAS,EAA0C,EAC7D,EAAE;gBACF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;gBAE5D,QAAQ,MAAM,EAAE,CAAC;oBACf,KAAK,eAAe;wBAClB,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE;4BACxD,SAAS,EAAE,SAAU;yBACtB,CAAC,CAAC;wBACH,OAAO;oBAET;wBACE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;SACF,CAAC;QAEF,6BAA6B;QAE7B,MAAM,EAAE;YACN;;;eAGG;YACH,SAAS;YAET;;eAEG;YACH,aAAa,EAAE,CACb,IAAgB,EAChB,IAAqD,EACrD,EAAE;gBACF,MAAM,MAAM,GAAG,IAAI,EAAE,UAAU,IAAI,SAAS,CAAC;gBAE7C,sBAAsB;gBACtB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,EAAE;oBAC/C,UAAU,EAAE,MAAM;oBAClB,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI;iBACvC,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/server/provider_utils.d.ts

@@ -6,7 +6,7 @@ import { AuthProviderConfig, AuthProviderMaterializedConfig, ConvexAuthConfig }
 export declare function configDefaults(config_: ConvexAuthConfig): {
     extraProviders: AuthProviderMaterializedConfig[];
     theme: import("@auth/core/types.js").Theme;
-    providers: (OIDCConfig<any> | OAuth2Config<any> | import("./types.js").ConvexCredentialsConfig | import("./types.js").EmailConfig<import("convex/server").GenericDataModel> | import("./types.js").PhoneConfig<import("convex/server").GenericDataModel>)[];
+    providers: (OIDCConfig<any> | OAuth2Config<any> | import("./types.js").ConvexCredentialsConfig | import("./types.js").PasskeyProviderConfig | import("./types.js").TotpProviderConfig | import("./types.js").EmailConfig<import("convex/server").GenericDataModel> | import("./types.js").PhoneConfig<import("convex/server").GenericDataModel>)[];
     component: import("./types.js").AuthComponentApi;
     session?: {
         totalDurationMs?: number;

package/dist/server/provider_utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider_utils.d.ts","sourceRoot":"","sources":["../../src/server/provider_utils.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,UAAU,EAEX,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB;;;;;;uBAGlB,CAAC;0BAM3B,CAAC;;;kBAWZ,CAAC;;;+BAUe,CAAC;;;gBAuCiB,CAAC;;;0BAiBhC,CAAC;;;;;qBAyCwB,CAAA;qBAAyB,CAAC;6BAC1B,CAAC;6BACtB,CAAA;;sBAG6B,CAAC;;iCAyB9B,CAAJ;;;;;;qBA4Bqd,CAAC;qBAAyB,CAAC;6BAAiC,CAAC;6BAAkC,CAAC;;sBAAgI,CAAC;;;EAvKzrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,GAGhC,8BAA8B,CAC7D;AAwFD,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAI5D,wBAAgB,iBAAiB,CAC/B,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EACvC,MAAM,CAAC,EAAE,MAAM;;;;;;;;cAmBhB;AAID;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAgBzD;AAMD;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,EACzC,mBAAmB,EAAE,OAAO,UAQ7B"}
+{"version":3,"file":"provider_utils.d.ts","sourceRoot":"","sources":["../../src/server/provider_utils.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,UAAU,EAEX,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB;;;;;;uBAGpC,CAAC;0BAKhB,CAAC;;;kBAOc,CAAC;;;+BAenB,CAAF;;;gBAoC8C,CAAC;;;0BAgBzC,CAAA;;;;;qBA+BoD,CAAC;qBAChD,CAAA;6BACN,CAAC;6BACJ,CAAF;;sBAKqC,CAAC;;iCAsBxB,CAAC;;;;;;qBA+CU,CAAC;qBAAyB,CAAC;6BAC5B,CAAC;6BACJ,CAAC;;sBAKd,CAAL;;;EAnLF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,GAGhC,8BAA8B,CAC7D;AAiID,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAI5D,wBAAgB,iBAAiB,CAC/B,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EACvC,MAAM,CAAC,EAAE,MAAM;;;;;;;;cAmBhB;AAID;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAgBzD;AAMD;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,EACzC,mBAAmB,EAAE,OAAO,UAQ7B"}

package/dist/server/provider_utils.js

@@ -55,8 +55,38 @@ function materializeAndDefaultProviders(config_) {
     // Have to materialize first so that the correct env variables are used
     const providers = config_.providers.map((provider) => providerDefaults(typeof provider === "function" ? provider() : provider));
     const config = { ...config_, providers };
+    // setEnvDefaults is from Auth.js and only works with Auth.js provider types.
+    // Filter out passkey and TOTP providers before passing to setEnvDefaults,
+    // then reinsert them at their original positions.
+    const passkeyIndices = [];
+    const passkeyProviders = [];
+    const totpIndices = [];
+    const totpProviders = [];
+    const filteredProviders = config.providers.filter((p, i) => {
+        if (p.type === "passkey") {
+            passkeyIndices.push(i);
+            passkeyProviders.push(p);
+            return false;
+        }
+        if (p.type === "totp") {
+            totpIndices.push(i);
+            totpProviders.push(p);
+            return false;
+        }
+        return true;
+    });
     // Unfortunately mutates its argument
-    setEnvDefaults(process.env, config);
+    const tempConfig = { ...config, providers: filteredProviders };
+    setEnvDefaults(process.env, tempConfig);
+    // Reinsert passkey and TOTP providers at their original positions
+    const merged = [...tempConfig.providers];
+    for (let i = 0; i < passkeyIndices.length; i++) {
+        merged.splice(passkeyIndices[i], 0, passkeyProviders[i]);
+    }
+    for (let i = 0; i < totpIndices.length; i++) {
+        merged.splice(totpIndices[i], 0, totpProviders[i]);
+    }
+    config.providers = merged;
     // Manually do this for new provider type
     config.providers.forEach((provider) => {
         if (provider.type === "phone") {
@@ -69,6 +99,14 @@ function materializeAndDefaultProviders(config_) {
     return config;
 }
 function providerDefaults(provider) {
+    // Passkey providers don't use Auth.js options merge or OAuth normalization
+    if (provider.type === "passkey") {
+        return provider;
+    }
+    // TOTP providers don't use Auth.js options merge or OAuth normalization
+    if (provider.type === "totp") {
+        return provider;
+    }
     // TODO: Add `redirectProxyUrl` to oauth providers
     const merged = merge(provider, provider.options);
     return merged.type === "oauth" || merged.type === "oidc"