@robelest/convex-auth 0.0.2-preview.2 → 0.0.3-preview

package/dist/component/portalBridge.js

@@ -0,0 +1,102 @@
+/**
+ * Bridge functions that delegate to the self-hosting sub-component.
+ *
+ * The auth component uses self-hosting as a sub-component for serving
+ * portal static assets. These functions expose the self-hosting API
+ * as internal queries/mutations within the auth component, so the
+ * app layer can call them via `ctx.runQuery(components.auth.portalBridge.getByPath, ...)`.
+ */
+import { v } from "convex/values";
+import { query, mutation } from "./_generated/server.js";
+import { components } from "./_generated/api.js";
+// ============================================================================
+// Queries — delegate to selfHosting.lib.*
+// ============================================================================
+/**
+ * Look up a static asset by URL path.
+ * Delegates to selfHosting.lib.getByPath.
+ */
+export const getByPath = query({
+    args: { path: v.string() },
+    returns: v.any(),
+    handler: async (ctx, args) => {
+        return await ctx.runQuery(components.selfHosting.lib.getByPath, {
+            path: args.path,
+        });
+    },
+});
+/**
+ * Get the current deployment info.
+ * Delegates to selfHosting.lib.getCurrentDeployment.
+ */
+export const getCurrentDeployment = query({
+    args: {},
+    returns: v.any(),
+    handler: async (ctx) => {
+        return await ctx.runQuery(components.selfHosting.lib.getCurrentDeployment, {});
+    },
+});
+/**
+ * List all static assets.
+ * Delegates to selfHosting.lib.listAssets.
+ */
+export const listAssets = query({
+    args: { limit: v.optional(v.number()) },
+    returns: v.any(),
+    handler: async (ctx, args) => {
+        return await ctx.runQuery(components.selfHosting.lib.listAssets, {
+            limit: args.limit,
+        });
+    },
+});
+// ============================================================================
+// Mutations — delegate to selfHosting.lib.*
+// ============================================================================
+/**
+ * Record an asset after upload.
+ * Delegates to selfHosting.lib.recordAsset.
+ */
+export const recordAsset = mutation({
+    args: {
+        path: v.string(),
+        storageId: v.optional(v.string()),
+        blobId: v.optional(v.string()),
+        contentType: v.string(),
+        deploymentId: v.string(),
+    },
+    returns: v.any(),
+    handler: async (ctx, args) => {
+        return await ctx.runMutation(components.selfHosting.lib.recordAsset, {
+            path: args.path,
+            ...(args.storageId ? { storageId: args.storageId } : {}),
+            ...(args.blobId ? { blobId: args.blobId } : {}),
+            contentType: args.contentType,
+            deploymentId: args.deploymentId,
+        });
+    },
+});
+/**
+ * Garbage collect assets from old deployments.
+ * Delegates to selfHosting.lib.gcOldAssets.
+ */
+export const gcOldAssets = mutation({
+    args: { currentDeploymentId: v.string() },
+    returns: v.any(),
+    handler: async (ctx, args) => {
+        return await ctx.runMutation(components.selfHosting.lib.gcOldAssets, {
+            currentDeploymentId: args.currentDeploymentId,
+        });
+    },
+});
+/**
+ * Update the current deployment ID.
+ * Delegates to selfHosting.lib.setCurrentDeployment.
+ */
+export const setCurrentDeployment = mutation({
+    args: { deploymentId: v.string() },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        return await ctx.runMutation(components.selfHosting.lib.setCurrentDeployment, { deploymentId: args.deploymentId });
+    },
+});
+//# sourceMappingURL=portalBridge.js.map

package/dist/component/portalBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portalBridge.js","sourceRoot":"","sources":["../../src/component/portalBridge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAoB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC;IAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE;YAC9D,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;IACxC,IAAI,EAAE,EAAE;IACR,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,OAAO,MAAM,GAAG,CAAC,QAAQ,CACvB,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,EAC/C,EAAE,CACH,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC;IAC9B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE;YAC/D,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE;QACJ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;KACzB;IACD,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE;YACnE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE;YACnE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC3C,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,OAAO,MAAM,GAAG,CAAC,WAAW,CAC1B,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,EAC/C,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CACpC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/component/public.d.ts

@@ -1,3 +1,16 @@
+/** List all users. */
+export declare const userList: import("convex/server").RegisteredQuery<"public", {}, Promise<{
+    _id: import("convex/values").GenericId<"user">;
+    _creationTime: number;
+    name?: string | undefined;
+    email?: string | undefined;
+    phone?: string | undefined;
+    image?: string | undefined;
+    emailVerificationTime?: number | undefined;
+    phoneVerificationTime?: number | undefined;
+    isAnonymous?: boolean | undefined;
+    extend?: any;
+}[]>>;
 /** Retrieve a user by their document ID. */
 export declare const userGetById: import("convex/server").RegisteredQuery<"public", {
     userId: import("convex/values").GenericId<"user">;
@@ -65,6 +78,19 @@ export declare const userPatch: import("convex/server").RegisteredMutation<"publ
     userId: import("convex/values").GenericId<"user">;
     data: any;
 }, Promise<void>>;
+/** List all accounts for a user. */
+export declare const accountListByUser: import("convex/server").RegisteredQuery<"public", {
+    userId: import("convex/values").GenericId<"user">;
+}, Promise<{
+    _id: import("convex/values").GenericId<"account">;
+    _creationTime: number;
+    secret?: string | undefined;
+    emailVerified?: string | undefined;
+    phoneVerified?: string | undefined;
+    userId: import("convex/values").GenericId<"user">;
+    provider: string;
+    providerAccountId: string;
+}[]>>;
 /** Look up an account by provider and provider-specific account ID. */
 export declare const accountGet: import("convex/server").RegisteredQuery<"public", {
     provider: string;
@@ -108,6 +134,13 @@ export declare const accountPatch: import("convex/server").RegisteredMutation<"p
 export declare const accountDelete: import("convex/server").RegisteredMutation<"public", {
     accountId: import("convex/values").GenericId<"account">;
 }, Promise<void>>;
+/** List all sessions. */
+export declare const sessionList: import("convex/server").RegisteredQuery<"public", {}, Promise<{
+    _id: import("convex/values").GenericId<"session">;
+    _creationTime: number;
+    userId: import("convex/values").GenericId<"user">;
+    expirationTime: number;
+}[]>>;
 /** Create a new session for a user with an expiration time. */
 export declare const sessionCreate: import("convex/server").RegisteredMutation<"public", {
     userId: import("convex/values").GenericId<"user">;
@@ -268,6 +301,139 @@ export declare const refreshTokenGetActive: import("convex/server").RegisteredQu
     expirationTime: number;
     sessionId: import("convex/values").GenericId<"session">;
 } | null>>;
+/** Store a new passkey credential for a user. */
+export declare const passkeyInsert: import("convex/server").RegisteredMutation<"public", {
+    name?: string | undefined;
+    transports?: string[] | undefined;
+    userId: import("convex/values").GenericId<"user">;
+    credentialId: string;
+    publicKey: ArrayBuffer;
+    algorithm: number;
+    counter: number;
+    deviceType: string;
+    backedUp: boolean;
+    createdAt: number;
+}, Promise<import("convex/values").GenericId<"passkey">>>;
+/** Look up a passkey by its credential ID. */
+export declare const passkeyGetByCredentialId: import("convex/server").RegisteredQuery<"public", {
+    credentialId: string;
+}, Promise<{
+    _id: import("convex/values").GenericId<"passkey">;
+    _creationTime: number;
+    name?: string | undefined;
+    transports?: string[] | undefined;
+    lastUsedAt?: number | undefined;
+    userId: import("convex/values").GenericId<"user">;
+    credentialId: string;
+    publicKey: ArrayBuffer;
+    algorithm: number;
+    counter: number;
+    deviceType: string;
+    backedUp: boolean;
+    createdAt: number;
+} | null>>;
+/** List all passkeys for a user. */
+export declare const passkeyListByUserId: import("convex/server").RegisteredQuery<"public", {
+    userId: import("convex/values").GenericId<"user">;
+}, Promise<{
+    _id: import("convex/values").GenericId<"passkey">;
+    _creationTime: number;
+    name?: string | undefined;
+    transports?: string[] | undefined;
+    lastUsedAt?: number | undefined;
+    userId: import("convex/values").GenericId<"user">;
+    credentialId: string;
+    publicKey: ArrayBuffer;
+    algorithm: number;
+    counter: number;
+    deviceType: string;
+    backedUp: boolean;
+    createdAt: number;
+}[]>>;
+/** Update a passkey's counter and last used timestamp after authentication. */
+export declare const passkeyUpdateCounter: import("convex/server").RegisteredMutation<"public", {
+    counter: number;
+    lastUsedAt: number;
+    passkeyId: import("convex/values").GenericId<"passkey">;
+}, Promise<void>>;
+/** Update a passkey's metadata (name). */
+export declare const passkeyUpdateMeta: import("convex/server").RegisteredMutation<"public", {
+    data: any;
+    passkeyId: import("convex/values").GenericId<"passkey">;
+}, Promise<void>>;
+/** Delete a passkey credential. */
+export declare const passkeyDelete: import("convex/server").RegisteredMutation<"public", {
+    passkeyId: import("convex/values").GenericId<"passkey">;
+}, Promise<void>>;
+/** Store a new TOTP enrollment for a user. */
+export declare const totpInsert: import("convex/server").RegisteredMutation<"public", {
+    name?: string | undefined;
+    secret: ArrayBuffer;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    digits: number;
+    period: number;
+    verified: boolean;
+}, Promise<import("convex/values").GenericId<"totp">>>;
+/** Get a verified TOTP enrollment for a user (returns first match). */
+export declare const totpGetVerifiedByUserId: import("convex/server").RegisteredQuery<"public", {
+    userId: import("convex/values").GenericId<"user">;
+}, Promise<{
+    _id: import("convex/values").GenericId<"totp">;
+    _creationTime: number;
+    name?: string | undefined;
+    lastUsedAt?: number | undefined;
+    secret: ArrayBuffer;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    digits: number;
+    period: number;
+    verified: boolean;
+} | null>>;
+/** List all TOTP enrollments for a user. */
+export declare const totpListByUserId: import("convex/server").RegisteredQuery<"public", {
+    userId: import("convex/values").GenericId<"user">;
+}, Promise<{
+    _id: import("convex/values").GenericId<"totp">;
+    _creationTime: number;
+    name?: string | undefined;
+    lastUsedAt?: number | undefined;
+    secret: ArrayBuffer;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    digits: number;
+    period: number;
+    verified: boolean;
+}[]>>;
+/** Get a TOTP enrollment by its ID. */
+export declare const totpGetById: import("convex/server").RegisteredQuery<"public", {
+    totpId: import("convex/values").GenericId<"totp">;
+}, Promise<{
+    _id: import("convex/values").GenericId<"totp">;
+    _creationTime: number;
+    name?: string | undefined;
+    lastUsedAt?: number | undefined;
+    secret: ArrayBuffer;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    digits: number;
+    period: number;
+    verified: boolean;
+} | null>>;
+/** Mark a TOTP enrollment as verified (setup complete). */
+export declare const totpMarkVerified: import("convex/server").RegisteredMutation<"public", {
+    lastUsedAt: number;
+    totpId: import("convex/values").GenericId<"totp">;
+}, Promise<void>>;
+/** Update a TOTP enrollment's last used timestamp. */
+export declare const totpUpdateLastUsed: import("convex/server").RegisteredMutation<"public", {
+    lastUsedAt: number;
+    totpId: import("convex/values").GenericId<"totp">;
+}, Promise<void>>;
+/** Delete a TOTP enrollment. */
+export declare const totpDelete: import("convex/server").RegisteredMutation<"public", {
+    totpId: import("convex/values").GenericId<"totp">;
+}, Promise<void>>;
 /** Look up a rate limit entry by its identifier. */
 export declare const rateLimitGet: import("convex/server").RegisteredQuery<"public", {
     identifier: string;
@@ -445,14 +611,14 @@ export declare const memberUpdate: import("convex/server").RegisteredMutation<"p
  * @returns The ID of the new invite record.
  */
 export declare const inviteCreate: import("convex/server").RegisteredMutation<"public", {
+    email?: string | undefined;
     extend?: any;
     groupId?: import("convex/values").GenericId<"group"> | undefined;
     role?: string | undefined;
-    email: string;
+    invitedByUserId?: import("convex/values").GenericId<"user"> | undefined;
+    expiresTime?: number | undefined;
     status: "pending" | "accepted" | "revoked" | "expired";
-    invitedByUserId: import("convex/values").GenericId<"user">;
     tokenHash: string;
-    expiresTime: number;
 }, Promise<import("convex/values").GenericId<"invite">>>;
 /** Retrieve an invite by its document ID. Returns `null` if not found. */
 export declare const inviteGet: import("convex/server").RegisteredQuery<"public", {
@@ -460,16 +626,33 @@ export declare const inviteGet: import("convex/server").RegisteredQuery<"public"
 }, Promise<{
     _id: import("convex/values").GenericId<"invite">;
     _creationTime: number;
+    email?: string | undefined;
     extend?: any;
     groupId?: import("convex/values").GenericId<"group"> | undefined;
     role?: string | undefined;
+    invitedByUserId?: import("convex/values").GenericId<"user"> | undefined;
+    expiresTime?: number | undefined;
+    acceptedByUserId?: import("convex/values").GenericId<"user"> | undefined;
+    acceptedTime?: number | undefined;
+    status: "pending" | "accepted" | "revoked" | "expired";
+    tokenHash: string;
+} | null>>;
+/** Retrieve an invite by its token hash. Returns `null` if not found. */
+export declare const inviteGetByTokenHash: import("convex/server").RegisteredQuery<"public", {
+    tokenHash: string;
+}, Promise<{
+    _id: import("convex/values").GenericId<"invite">;
+    _creationTime: number;
+    email?: string | undefined;
+    extend?: any;
+    groupId?: import("convex/values").GenericId<"group"> | undefined;
+    role?: string | undefined;
+    invitedByUserId?: import("convex/values").GenericId<"user"> | undefined;
+    expiresTime?: number | undefined;
     acceptedByUserId?: import("convex/values").GenericId<"user"> | undefined;
     acceptedTime?: number | undefined;
-    email: string;
     status: "pending" | "accepted" | "revoked" | "expired";
-    invitedByUserId: import("convex/values").GenericId<"user">;
     tokenHash: string;
-    expiresTime: number;
 } | null>>;
 /**
  * List invites, optionally filtered by group and/or status.
@@ -481,16 +664,16 @@ export declare const inviteList: import("convex/server").RegisteredQuery<"public
 }, Promise<{
     _id: import("convex/values").GenericId<"invite">;
     _creationTime: number;
+    email?: string | undefined;
     extend?: any;
     groupId?: import("convex/values").GenericId<"group"> | undefined;
     role?: string | undefined;
+    invitedByUserId?: import("convex/values").GenericId<"user"> | undefined;
+    expiresTime?: number | undefined;
     acceptedByUserId?: import("convex/values").GenericId<"user"> | undefined;
     acceptedTime?: number | undefined;
-    email: string;
     status: "pending" | "accepted" | "revoked" | "expired";
-    invitedByUserId: import("convex/values").GenericId<"user">;
     tokenHash: string;
-    expiresTime: number;
 }[]>>;
 /**
  * Accept a pending invitation.
@@ -502,6 +685,7 @@ export declare const inviteList: import("convex/server").RegisteredQuery<"public
  * The caller is responsible for creating the corresponding member record.
  */
 export declare const inviteAccept: import("convex/server").RegisteredMutation<"public", {
+    acceptedByUserId?: import("convex/values").GenericId<"user"> | undefined;
     inviteId: import("convex/values").GenericId<"invite">;
 }, Promise<void>>;
 /**
@@ -513,4 +697,164 @@ export declare const inviteAccept: import("convex/server").RegisteredMutation<"p
 export declare const inviteRevoke: import("convex/server").RegisteredMutation<"public", {
     inviteId: import("convex/values").GenericId<"invite">;
 }, Promise<void>>;
+/**
+ * Insert a new API key record.
+ *
+ * The caller is responsible for hashing the raw key before passing it here —
+ * this function only stores the hash and metadata.
+ */
+export declare const keyInsert: import("convex/server").RegisteredMutation<"public", {
+    rateLimit?: {
+        maxRequests: number;
+        windowMs: number;
+    } | undefined;
+    expiresAt?: number | undefined;
+    name: string;
+    userId: import("convex/values").GenericId<"user">;
+    prefix: string;
+    hashedKey: string;
+    scopes: {
+        resource: string;
+        actions: string[];
+    }[];
+}, Promise<import("convex/values").GenericId<"key">>>;
+/**
+ * Look up an API key by its SHA-256 hash.
+ *
+ * Used during Bearer token verification. Returns the full key record
+ * (including rate limit state) or `null` if not found.
+ */
+export declare const keyGetByHashedKey: import("convex/server").RegisteredQuery<"public", {
+    hashedKey: string;
+}, Promise<{
+    _id: import("convex/values").GenericId<"key">;
+    _creationTime: number;
+    lastUsedAt?: number | undefined;
+    rateLimit?: {
+        maxRequests: number;
+        windowMs: number;
+    } | undefined;
+    rateLimitState?: {
+        lastAttemptTime: number;
+        attemptsLeft: number;
+    } | undefined;
+    expiresAt?: number | undefined;
+    name: string;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    revoked: boolean;
+    prefix: string;
+    hashedKey: string;
+    scopes: {
+        resource: string;
+        actions: string[];
+    }[];
+} | null>>;
+/** List all API keys for a user. */
+export declare const keyListByUserId: import("convex/server").RegisteredQuery<"public", {
+    userId: import("convex/values").GenericId<"user">;
+}, Promise<{
+    _id: import("convex/values").GenericId<"key">;
+    _creationTime: number;
+    lastUsedAt?: number | undefined;
+    rateLimit?: {
+        maxRequests: number;
+        windowMs: number;
+    } | undefined;
+    rateLimitState?: {
+        lastAttemptTime: number;
+        attemptsLeft: number;
+    } | undefined;
+    expiresAt?: number | undefined;
+    name: string;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    revoked: boolean;
+    prefix: string;
+    hashedKey: string;
+    scopes: {
+        resource: string;
+        actions: string[];
+    }[];
+}[]>>;
+/** List all API keys across all users (for portal admin). */
+export declare const keyList: import("convex/server").RegisteredQuery<"public", {}, Promise<{
+    _id: import("convex/values").GenericId<"key">;
+    _creationTime: number;
+    lastUsedAt?: number | undefined;
+    rateLimit?: {
+        maxRequests: number;
+        windowMs: number;
+    } | undefined;
+    rateLimitState?: {
+        lastAttemptTime: number;
+        attemptsLeft: number;
+    } | undefined;
+    expiresAt?: number | undefined;
+    name: string;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    revoked: boolean;
+    prefix: string;
+    hashedKey: string;
+    scopes: {
+        resource: string;
+        actions: string[];
+    }[];
+}[]>>;
+/** Get a single API key by document ID. */
+export declare const keyGetById: import("convex/server").RegisteredQuery<"public", {
+    keyId: import("convex/values").GenericId<"key">;
+}, Promise<{
+    _id: import("convex/values").GenericId<"key">;
+    _creationTime: number;
+    lastUsedAt?: number | undefined;
+    rateLimit?: {
+        maxRequests: number;
+        windowMs: number;
+    } | undefined;
+    rateLimitState?: {
+        lastAttemptTime: number;
+        attemptsLeft: number;
+    } | undefined;
+    expiresAt?: number | undefined;
+    name: string;
+    userId: import("convex/values").GenericId<"user">;
+    createdAt: number;
+    revoked: boolean;
+    prefix: string;
+    hashedKey: string;
+    scopes: {
+        resource: string;
+        actions: string[];
+    }[];
+} | null>>;
+/**
+ * Patch an API key record. Used for updating name, scopes, rate limit config,
+ * revocation, and lastUsedAt / rate limit state tracking.
+ */
+export declare const keyPatch: import("convex/server").RegisteredMutation<"public", {
+    data: {
+        name?: string | undefined;
+        lastUsedAt?: number | undefined;
+        revoked?: boolean | undefined;
+        scopes?: {
+            resource: string;
+            actions: string[];
+        }[] | undefined;
+        rateLimit?: {
+            maxRequests: number;
+            windowMs: number;
+        } | undefined;
+        rateLimitState?: {
+            lastAttemptTime: number;
+            attemptsLeft: number;
+        } | undefined;
+    };
+    keyId: import("convex/values").GenericId<"key">;
+}, Promise<void>>;
+/** Hard delete an API key record. */
+export declare const keyDelete: import("convex/server").RegisteredMutation<"public", {
+    keyId: import("convex/values").GenericId<"key">;
+}, Promise<void>>;
 //# sourceMappingURL=public.d.ts.map

package/dist/component/public.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../src/component/public.ts"],"names":[],"mappings":"AAOA,4CAA4C;AAC5C,eAAO,MAAM,WAAW;;;;;;;;;;;;;UAKtB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;UAUlC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;UAUlC,CAAC;AAEH,kCAAkC;AAClC,eAAO,MAAM,UAAU;;sDAKrB,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,UAAU;;;sDASrB,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,SAAS;;;iBAKpB,CAAC;AAMH,uEAAuE;AACvE,eAAO,MAAM,UAAU;;;;;;;;;;;;UAUrB,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,cAAc;;;;;;;;;;;UAKzB,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,aAAa;;;;;yDAUxB,CAAC;AAEH,4DAA4D;AAC5D,eAAO,MAAM,YAAY;;;iBAKvB,CAAC;AAEH,kCAAkC;AAClC,eAAO,MAAM,aAAa;;iBAKxB,CAAC;AAMH,+DAA+D;AAC/D,eAAO,MAAM,aAAa;;;yDAQxB,CAAC;AAEH,6CAA6C;AAC7C,eAAO,MAAM,cAAc;;;;;;;UAKzB,CAAC;AAEH,6DAA6D;AAC7D,eAAO,MAAM,aAAa;;iBAOxB,CAAC;AAEH,oCAAoC;AACpC,eAAO,MAAM,iBAAiB;;;;;;;KAQ5B,CAAC;AAMH,kEAAkE;AAClE,eAAO,MAAM,cAAc;;0DAKzB,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,eAAe;;;;;;;UAK1B,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,sBAAsB;;;;;;;UAQjC,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,aAAa;;;iBAKxB,CAAC;AAEH,kCAAkC;AAClC,eAAO,MAAM,cAAc;;iBAKzB,CAAC;AAMH,6DAA6D;AAC7D,eAAO,MAAM,8BAA8B;;;;;;;;;;;;UAQzC,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;UAQpC,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB;;;;;;;;8DAajC,CAAC;AAEH,2CAA2C;AAC3C,eAAO,MAAM,sBAAsB;;iBAKjC,CAAC;AAMH,gDAAgD;AAChD,eAAO,MAAM,kBAAkB;;;;uDAS7B,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,mBAAmB;;;;;;;;;UAK9B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,iBAAiB;;;iBAK5B,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,uBAAuB;;;;;;;;;;KAelC,CAAC;AAEH,6CAA6C;AAC7C,eAAO,MAAM,yBAAyB;;;;;;;;;KAUpC,CAAC;AAEH,+CAA+C;AAC/C,eAAO,MAAM,qBAAqB;;iBAWhC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB;;;;;;;;;UAUhC,CAAC;AAMH,oDAAoD;AACpD,eAAO,MAAM,YAAY;;;;;;;;UAQvB,CAAC;AAEH,qCAAqC;AACrC,eAAO,MAAM,eAAe;;;;uDAS1B,CAAC;AAEH,kDAAkD;AAClD,eAAO,MAAM,cAAc;;;iBAKzB,CAAC;AAEH,iCAAiC;AACjC,eAAO,MAAM,eAAe;;iBAK1B,CAAC;AAMH;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;uDAUtB,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,QAAQ;;;;;;;;;UAKnB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;;;;;KAQpB,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,WAAW;;;iBAKtB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;iBAiCtB,CAAC;AAMH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS;;;;;;wDA0BpB,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,SAAS;;;;;;;;;;UAKpB,CAAC;AAEH,4CAA4C;AAC5C,eAAO,MAAM,UAAU;;;;;;;;;;KAQrB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;KAQ3B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;UAUlC,CAAC;AAEH,kEAAkE;AAClE,eAAO,MAAM,YAAY;;iBAKvB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;iBAKvB,CAAC;AAMH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY;;;;;;;;;wDAqDvB,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;UAKpB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;KAmCrB,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;;iBAwBvB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;iBAqBvB,CAAC"}
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../src/component/public.ts"],"names":[],"mappings":"AAOA,sBAAsB;AACtB,eAAO,MAAM,QAAQ;;;;;;;;;;;KAKnB,CAAC;AAEH,4CAA4C;AAC5C,eAAO,MAAM,WAAW;;;;;;;;;;;;;UAKtB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;UAUlC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;UAUlC,CAAC;AAEH,kCAAkC;AAClC,eAAO,MAAM,UAAU;;sDAKrB,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,UAAU;;;sDASrB,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,SAAS;;;iBAKpB,CAAC;AAMH,oCAAoC;AACpC,eAAO,MAAM,iBAAiB;;;;;;;;;;;KAQ5B,CAAC;AAEH,uEAAuE;AACvE,eAAO,MAAM,UAAU;;;;;;;;;;;;UAUrB,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,cAAc;;;;;;;;;;;UAKzB,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,aAAa;;;;;yDAUxB,CAAC;AAEH,4DAA4D;AAC5D,eAAO,MAAM,YAAY;;;iBAKvB,CAAC;AAEH,kCAAkC;AAClC,eAAO,MAAM,aAAa;;iBAKxB,CAAC;AAMH,yBAAyB;AACzB,eAAO,MAAM,WAAW;;;;;KAKtB,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,aAAa;;;yDAQxB,CAAC;AAEH,6CAA6C;AAC7C,eAAO,MAAM,cAAc;;;;;;;UAKzB,CAAC;AAEH,6DAA6D;AAC7D,eAAO,MAAM,aAAa;;iBAOxB,CAAC;AAEH,oCAAoC;AACpC,eAAO,MAAM,iBAAiB;;;;;;;KAQ5B,CAAC;AAMH,kEAAkE;AAClE,eAAO,MAAM,cAAc;;0DAKzB,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,eAAe;;;;;;;UAK1B,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,sBAAsB;;;;;;;UAQjC,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,aAAa;;;iBAKxB,CAAC;AAEH,kCAAkC;AAClC,eAAO,MAAM,cAAc;;iBAKzB,CAAC;AAMH,6DAA6D;AAC7D,eAAO,MAAM,8BAA8B;;;;;;;;;;;;UAQzC,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;UAQpC,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB;;;;;;;;8DAajC,CAAC;AAEH,2CAA2C;AAC3C,eAAO,MAAM,sBAAsB;;iBAKjC,CAAC;AAMH,gDAAgD;AAChD,eAAO,MAAM,kBAAkB;;;;uDAS7B,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,mBAAmB;;;;;;;;;UAK9B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,iBAAiB;;;iBAK5B,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,uBAAuB;;;;;;;;;;KAelC,CAAC;AAEH,6CAA6C;AAC7C,eAAO,MAAM,yBAAyB;;;;;;;;;KAUpC,CAAC;AAEH,+CAA+C;AAC/C,eAAO,MAAM,qBAAqB;;iBAWhC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB;;;;;;;;;UAUhC,CAAC;AAMH,iDAAiD;AACjD,eAAO,MAAM,aAAa;;;;;;;;;;;yDAgBxB,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;UAQnC,CAAC;AAEH,oCAAoC;AACpC,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;KAQ9B,CAAC;AAEH,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB;;;;iBAK/B,CAAC;AAEH,0CAA0C;AAC1C,eAAO,MAAM,iBAAiB;;;iBAK5B,CAAC;AAEH,mCAAmC;AACnC,eAAO,MAAM,aAAa;;iBAKxB,CAAC;AAMH,8CAA8C;AAC9C,eAAO,MAAM,UAAU;;;;;;;;sDAarB,CAAC;AAEH,uEAAuE;AACvE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;UASlC,CAAC;AAEH,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;KAQ3B,CAAC;AAEH,uCAAuC;AACvC,eAAO,MAAM,WAAW;;;;;;;;;;;;;UAKtB,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB;;;iBAK3B,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,kBAAkB;;;iBAK7B,CAAC;AAEH,gCAAgC;AAChC,eAAO,MAAM,UAAU;;iBAKrB,CAAC;AAMH,oDAAoD;AACpD,eAAO,MAAM,YAAY;;;;;;;;UAQvB,CAAC;AAEH,qCAAqC;AACrC,eAAO,MAAM,eAAe;;;;uDAS1B,CAAC;AAEH,kDAAkD;AAClD,eAAO,MAAM,cAAc;;;iBAKzB,CAAC;AAEH,iCAAiC;AACjC,eAAO,MAAM,eAAe;;iBAK1B,CAAC;AAMH;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;uDAUtB,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,QAAQ;;;;;;;;;UAKnB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;;;;;KAQpB,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,WAAW;;;iBAKtB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;iBAiCtB,CAAC;AAMH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS;;;;;;wDA0BpB,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,SAAS;;;;;;;;;;UAKpB,CAAC;AAEH,4CAA4C;AAC5C,eAAO,MAAM,UAAU;;;;;;;;;;KAQrB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;KAQ3B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;UAUlC,CAAC;AAEH,kEAAkE;AAClE,eAAO,MAAM,YAAY;;iBAKvB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;iBAKvB,CAAC;AAMH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY;;;;;;;;;wDA2DvB,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;UAKpB,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;UAQ/B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;KAmCrB,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;;;iBA4BvB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;iBAqBvB,CAAC;AAMH;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;qDA2BpB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;UAQ5B,CAAC;AAEH,oCAAoC;AACpC,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;KAQ1B,CAAC;AAEH,6DAA6D;AAC7D,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;KAKlB,CAAC;AAEH,2CAA2C;AAC3C,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;UAKrB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;iBAwCnB,CAAC;AAEH,qCAAqC;AACrC,eAAO,MAAM,SAAS;;iBAapB,CAAC"}