@robelest/convex-auth 0.0.4-preview.13 → 0.0.4-preview.16
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +140 -9
- package/dist/bin.cjs +5957 -5478
- package/dist/client/index.d.ts +3 -7
- package/dist/client/index.d.ts.map +1 -1
- package/dist/client/index.js +27 -26
- package/dist/client/index.js.map +1 -1
- package/dist/component/_generated/api.d.ts +14 -0
- package/dist/component/_generated/api.d.ts.map +1 -1
- package/dist/component/_generated/api.js.map +1 -1
- package/dist/component/_generated/component.d.ts +1672 -24
- package/dist/component/_generated/component.d.ts.map +1 -1
- package/dist/component/convex.config.d.ts +2 -2
- package/dist/component/convex.config.d.ts.map +1 -1
- package/dist/component/index.d.ts +1 -1
- package/dist/component/index.js +2 -2
- package/dist/component/model.d.ts +153 -0
- package/dist/component/model.d.ts.map +1 -0
- package/dist/component/model.js +343 -0
- package/dist/component/model.js.map +1 -0
- package/dist/component/providers/sso.d.ts +1 -1
- package/dist/component/public/enterprise.d.ts +54 -0
- package/dist/component/public/enterprise.d.ts.map +1 -0
- package/dist/component/public/enterprise.js +515 -0
- package/dist/component/public/enterprise.js.map +1 -0
- package/dist/component/public/factors.d.ts +52 -0
- package/dist/component/public/factors.d.ts.map +1 -0
- package/dist/component/public/factors.js +285 -0
- package/dist/component/public/factors.js.map +1 -0
- package/dist/component/public/groups.d.ts +116 -0
- package/dist/component/public/groups.d.ts.map +1 -0
- package/dist/component/public/groups.js +596 -0
- package/dist/component/public/groups.js.map +1 -0
- package/dist/component/public/identity.d.ts +93 -0
- package/dist/component/public/identity.d.ts.map +1 -0
- package/dist/component/public/identity.js +426 -0
- package/dist/component/public/identity.js.map +1 -0
- package/dist/component/public/keys.d.ts +41 -0
- package/dist/component/public/keys.d.ts.map +1 -0
- package/dist/component/public/keys.js +157 -0
- package/dist/component/public/keys.js.map +1 -0
- package/dist/component/public/shared.d.ts +26 -0
- package/dist/component/public/shared.d.ts.map +1 -0
- package/dist/component/public/shared.js +32 -0
- package/dist/component/public/shared.js.map +1 -0
- package/dist/component/public.d.ts +9 -321
- package/dist/component/public.d.ts.map +1 -1
- package/dist/component/public.js +6 -2145
- package/dist/component/schema.d.ts +406 -260
- package/dist/component/schema.js +37 -32
- package/dist/component/schema.js.map +1 -1
- package/dist/component/server/auth.d.ts +161 -15
- package/dist/component/server/auth.d.ts.map +1 -1
- package/dist/component/server/auth.js +100 -7
- package/dist/component/server/auth.js.map +1 -1
- package/dist/component/server/cookies.js +3 -0
- package/dist/component/server/cookies.js.map +1 -1
- package/dist/component/server/db.js +1 -0
- package/dist/component/server/db.js.map +1 -1
- package/dist/component/server/device.js +3 -1
- package/dist/component/server/device.js.map +1 -1
- package/dist/component/server/domains/core.js +629 -0
- package/dist/component/server/domains/core.js.map +1 -0
- package/dist/component/server/domains/sso.js +884 -0
- package/dist/component/server/domains/sso.js.map +1 -0
- package/dist/component/server/factory.d.ts +136 -0
- package/dist/component/server/factory.d.ts.map +1 -0
- package/dist/component/server/factory.js +1134 -0
- package/dist/component/server/factory.js.map +1 -0
- package/dist/component/server/fx.js +2 -1
- package/dist/component/server/fx.js.map +1 -1
- package/dist/component/server/http.js +287 -0
- package/dist/component/server/http.js.map +1 -0
- package/dist/component/server/identity.js +13 -0
- package/dist/component/server/identity.js.map +1 -0
- package/dist/component/server/keys.js +4 -0
- package/dist/component/server/keys.js.map +1 -1
- package/dist/component/server/mutations/account.js +1 -1
- package/dist/component/server/mutations/index.js +2 -2
- package/dist/component/server/mutations/index.js.map +1 -1
- package/dist/component/server/mutations/invalidate.js +1 -1
- package/dist/component/server/mutations/oauth.js +10 -7
- package/dist/component/server/mutations/oauth.js.map +1 -1
- package/dist/component/server/mutations/refresh.js +1 -1
- package/dist/component/server/mutations/register.js +1 -1
- package/dist/component/server/mutations/retrieve.js +1 -1
- package/dist/component/server/mutations/signature.js +1 -1
- package/dist/component/server/mutations/store.js +6 -3
- package/dist/component/server/mutations/store.js.map +1 -1
- package/dist/component/server/mutations/verify.js +1 -1
- package/dist/component/server/oauth.js +3 -0
- package/dist/component/server/oauth.js.map +1 -1
- package/dist/component/server/passkey.js +3 -2
- package/dist/component/server/passkey.js.map +1 -1
- package/dist/component/server/provider.js +2 -0
- package/dist/component/server/provider.js.map +1 -1
- package/dist/component/server/providers.js +10 -0
- package/dist/component/server/providers.js.map +1 -1
- package/dist/component/server/ratelimit.js +3 -0
- package/dist/component/server/ratelimit.js.map +1 -1
- package/dist/component/server/redirects.js +2 -0
- package/dist/component/server/redirects.js.map +1 -1
- package/dist/component/server/refresh.js +5 -0
- package/dist/component/server/refresh.js.map +1 -1
- package/dist/component/server/sessions.js +5 -0
- package/dist/component/server/sessions.js.map +1 -1
- package/dist/component/server/signin.js +2 -1
- package/dist/component/server/signin.js.map +1 -1
- package/dist/component/server/sso.js +166 -19
- package/dist/component/server/sso.js.map +1 -1
- package/dist/component/server/tokens.js +1 -0
- package/dist/component/server/tokens.js.map +1 -1
- package/dist/component/server/totp.js +4 -2
- package/dist/component/server/totp.js.map +1 -1
- package/dist/component/server/types.d.ts +106 -38
- package/dist/component/server/types.d.ts.map +1 -1
- package/dist/component/server/types.js.map +1 -1
- package/dist/component/server/users.js +1 -0
- package/dist/component/server/users.js.map +1 -1
- package/dist/component/server/utils.js +44 -2
- package/dist/component/server/utils.js.map +1 -1
- package/dist/providers/anonymous.d.ts +1 -1
- package/dist/providers/credentials.d.ts +1 -1
- package/dist/providers/password.d.ts +1 -1
- package/dist/providers/sso.d.ts +1 -1
- package/dist/providers/sso.js.map +1 -1
- package/dist/server/auth.d.ts +163 -17
- package/dist/server/auth.d.ts.map +1 -1
- package/dist/server/auth.js +100 -7
- package/dist/server/auth.js.map +1 -1
- package/dist/server/cookies.d.ts +1 -38
- package/dist/server/cookies.js +3 -0
- package/dist/server/cookies.js.map +1 -1
- package/dist/server/db.d.ts +1 -125
- package/dist/server/db.js +1 -0
- package/dist/server/db.js.map +1 -1
- package/dist/server/device.d.ts +1 -24
- package/dist/server/device.js +3 -1
- package/dist/server/device.js.map +1 -1
- package/dist/server/domains/core.d.ts +434 -0
- package/dist/server/domains/core.d.ts.map +1 -0
- package/dist/server/domains/core.js +629 -0
- package/dist/server/domains/core.js.map +1 -0
- package/dist/server/domains/sso.d.ts +409 -0
- package/dist/server/domains/sso.d.ts.map +1 -0
- package/dist/server/domains/sso.js +884 -0
- package/dist/server/domains/sso.js.map +1 -0
- package/dist/server/enterpriseValidators.d.ts +1 -0
- package/dist/server/enterpriseValidators.js +60 -0
- package/dist/server/enterpriseValidators.js.map +1 -0
- package/dist/server/factory.d.ts +136 -0
- package/dist/server/factory.d.ts.map +1 -0
- package/dist/server/factory.js +1134 -0
- package/dist/server/factory.js.map +1 -0
- package/dist/server/fx.d.ts +1 -16
- package/dist/server/fx.d.ts.map +1 -1
- package/dist/server/fx.js +1 -0
- package/dist/server/fx.js.map +1 -1
- package/dist/server/http.d.ts +59 -0
- package/dist/server/http.d.ts.map +1 -0
- package/dist/server/http.js +287 -0
- package/dist/server/http.js.map +1 -0
- package/dist/server/identity.d.ts +1 -0
- package/dist/server/identity.js +13 -0
- package/dist/server/identity.js.map +1 -0
- package/dist/server/index.d.ts +468 -1
- package/dist/server/index.d.ts.map +1 -1
- package/dist/server/index.js +530 -36
- package/dist/server/index.js.map +1 -1
- package/dist/server/keys.d.ts +1 -57
- package/dist/server/keys.js +4 -0
- package/dist/server/keys.js.map +1 -1
- package/dist/server/mutations/account.d.ts +7 -7
- package/dist/server/mutations/account.d.ts.map +1 -1
- package/dist/server/mutations/code.d.ts +13 -13
- package/dist/server/mutations/code.d.ts.map +1 -1
- package/dist/server/mutations/index.d.ts +107 -107
- package/dist/server/mutations/index.d.ts.map +1 -1
- package/dist/server/mutations/index.js +1 -1
- package/dist/server/mutations/index.js.map +1 -1
- package/dist/server/mutations/invalidate.d.ts +5 -5
- package/dist/server/mutations/invalidate.d.ts.map +1 -1
- package/dist/server/mutations/oauth.d.ts +10 -10
- package/dist/server/mutations/oauth.d.ts.map +1 -1
- package/dist/server/mutations/oauth.js +9 -6
- package/dist/server/mutations/oauth.js.map +1 -1
- package/dist/server/mutations/refresh.d.ts +4 -4
- package/dist/server/mutations/register.d.ts +12 -12
- package/dist/server/mutations/register.d.ts.map +1 -1
- package/dist/server/mutations/retrieve.d.ts +7 -7
- package/dist/server/mutations/signature.d.ts +5 -5
- package/dist/server/mutations/signin.d.ts +6 -6
- package/dist/server/mutations/signin.d.ts.map +1 -1
- package/dist/server/mutations/signout.d.ts +1 -1
- package/dist/server/mutations/store.d.ts +3 -2
- package/dist/server/mutations/store.d.ts.map +1 -1
- package/dist/server/mutations/store.js +6 -3
- package/dist/server/mutations/store.js.map +1 -1
- package/dist/server/mutations/verifier.d.ts +1 -1
- package/dist/server/mutations/verify.d.ts +11 -11
- package/dist/server/mutations/verify.d.ts.map +1 -1
- package/dist/server/oauth.d.ts +1 -59
- package/dist/server/oauth.js +3 -0
- package/dist/server/oauth.js.map +1 -1
- package/dist/server/passkey.d.ts.map +1 -1
- package/dist/server/passkey.js +3 -2
- package/dist/server/passkey.js.map +1 -1
- package/dist/server/provider.d.ts +1 -14
- package/dist/server/provider.d.ts.map +1 -1
- package/dist/server/provider.js +2 -0
- package/dist/server/provider.js.map +1 -1
- package/dist/server/providers.js +10 -0
- package/dist/server/providers.js.map +1 -1
- package/dist/server/ratelimit.d.ts +1 -22
- package/dist/server/ratelimit.js +3 -0
- package/dist/server/ratelimit.js.map +1 -1
- package/dist/server/redirects.d.ts +1 -10
- package/dist/server/redirects.js +2 -0
- package/dist/server/redirects.js.map +1 -1
- package/dist/server/refresh.d.ts +1 -37
- package/dist/server/refresh.js +5 -0
- package/dist/server/refresh.js.map +1 -1
- package/dist/server/sessions.d.ts +1 -28
- package/dist/server/sessions.js +5 -0
- package/dist/server/sessions.js.map +1 -1
- package/dist/server/signin.d.ts +1 -55
- package/dist/server/signin.js +2 -1
- package/dist/server/signin.js.map +1 -1
- package/dist/server/sso.d.ts +1 -348
- package/dist/server/sso.js +165 -18
- package/dist/server/sso.js.map +1 -1
- package/dist/server/templates.d.ts +1 -21
- package/dist/server/templates.js +1 -0
- package/dist/server/templates.js.map +1 -1
- package/dist/server/tokens.d.ts +1 -11
- package/dist/server/tokens.js +1 -0
- package/dist/server/tokens.js.map +1 -1
- package/dist/server/totp.d.ts +1 -23
- package/dist/server/totp.js +4 -2
- package/dist/server/totp.js.map +1 -1
- package/dist/server/types.d.ts +114 -77
- package/dist/server/types.d.ts.map +1 -1
- package/dist/server/types.js.map +1 -1
- package/dist/server/users.d.ts +1 -31
- package/dist/server/users.js +1 -0
- package/dist/server/users.js.map +1 -1
- package/dist/server/utils.d.ts +1 -27
- package/dist/server/utils.js +44 -2
- package/dist/server/utils.js.map +1 -1
- package/dist/server/version.d.ts +1 -1
- package/dist/server/version.js +1 -1
- package/dist/server/version.js.map +1 -1
- package/package.json +4 -5
- package/src/cli/bin.ts +5 -0
- package/src/cli/index.ts +22 -9
- package/src/cli/keys.ts +3 -0
- package/src/client/index.ts +36 -37
- package/src/component/_generated/api.ts +14 -0
- package/src/component/_generated/component.ts +2106 -9
- package/src/component/index.ts +3 -1
- package/src/component/model.ts +441 -0
- package/src/component/public/enterprise.ts +753 -0
- package/src/component/public/factors.ts +332 -0
- package/src/component/public/groups.ts +932 -0
- package/src/component/public/identity.ts +566 -0
- package/src/component/public/keys.ts +209 -0
- package/src/component/public/shared.ts +119 -0
- package/src/component/public.ts +5 -2965
- package/src/component/schema.ts +68 -63
- package/src/providers/sso.ts +1 -1
- package/src/server/auth.ts +413 -18
- package/src/server/cookies.ts +3 -0
- package/src/server/db.ts +3 -0
- package/src/server/device.ts +3 -1
- package/src/server/domains/core.ts +1071 -0
- package/src/server/domains/sso.ts +1749 -0
- package/src/server/enterpriseValidators.ts +93 -0
- package/src/server/factory.ts +2181 -0
- package/src/server/fx.ts +1 -0
- package/src/server/http.ts +529 -0
- package/src/server/identity.ts +18 -0
- package/src/server/index.ts +806 -40
- package/src/server/keys.ts +4 -0
- package/src/server/mutations/index.ts +1 -1
- package/src/server/mutations/oauth.ts +36 -8
- package/src/server/mutations/store.ts +6 -3
- package/src/server/oauth.ts +6 -0
- package/src/server/passkey.ts +3 -2
- package/src/server/provider.ts +2 -0
- package/src/server/providers.ts +20 -0
- package/src/server/ratelimit.ts +3 -0
- package/src/server/redirects.ts +2 -0
- package/src/server/refresh.ts +5 -0
- package/src/server/sessions.ts +5 -0
- package/src/server/signin.ts +1 -0
- package/src/server/sso.ts +259 -17
- package/src/server/templates.ts +1 -0
- package/src/server/tokens.ts +1 -0
- package/src/server/totp.ts +4 -2
- package/src/server/types.ts +178 -83
- package/src/server/users.ts +1 -0
- package/src/server/utils.ts +71 -1
- package/src/server/version.ts +1 -1
- package/dist/component/public.js.map +0 -1
- package/dist/component/server/implementation.d.ts +0 -1264
- package/dist/component/server/implementation.d.ts.map +0 -1
- package/dist/component/server/implementation.js +0 -2365
- package/dist/component/server/implementation.js.map +0 -1
- package/dist/server/cookies.d.ts.map +0 -1
- package/dist/server/db.d.ts.map +0 -1
- package/dist/server/device.d.ts.map +0 -1
- package/dist/server/implementation.d.ts +0 -1264
- package/dist/server/implementation.d.ts.map +0 -1
- package/dist/server/implementation.js +0 -2365
- package/dist/server/implementation.js.map +0 -1
- package/dist/server/keys.d.ts.map +0 -1
- package/dist/server/oauth.d.ts.map +0 -1
- package/dist/server/ratelimit.d.ts.map +0 -1
- package/dist/server/redirects.d.ts.map +0 -1
- package/dist/server/refresh.d.ts.map +0 -1
- package/dist/server/sessions.d.ts.map +0 -1
- package/dist/server/signin.d.ts.map +0 -1
- package/dist/server/sso.d.ts.map +0 -1
- package/dist/server/templates.d.ts.map +0 -1
- package/dist/server/tokens.d.ts.map +0 -1
- package/dist/server/totp.d.ts.map +0 -1
- package/dist/server/users.d.ts.map +0 -1
- package/dist/server/utils.d.ts.map +0 -1
- package/src/server/implementation.ts +0 -5336
|
@@ -0,0 +1,596 @@
|
|
|
1
|
+
import { mutation, query } from "../functions.js";
|
|
2
|
+
import { vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vTag } from "../model.js";
|
|
3
|
+
import { ConvexError, normalizeTag, normalizeTags, v, vPaginated } from "./shared.js";
|
|
4
|
+
|
|
5
|
+
//#region src/component/public/groups.ts
|
|
6
|
+
/**
|
|
7
|
+
* Create a new group. Groups are hierarchical — set `parentGroupId` to nest
|
|
8
|
+
* under an existing group, or omit it to create a root-level group.
|
|
9
|
+
*
|
|
10
|
+
* @returns The ID of the newly created group.
|
|
11
|
+
*/
|
|
12
|
+
const groupCreate = mutation({
|
|
13
|
+
args: {
|
|
14
|
+
name: v.string(),
|
|
15
|
+
slug: v.optional(v.string()),
|
|
16
|
+
type: v.optional(v.string()),
|
|
17
|
+
parentGroupId: v.optional(v.id("Group")),
|
|
18
|
+
tags: v.optional(v.array(vTag)),
|
|
19
|
+
extend: v.optional(v.any())
|
|
20
|
+
},
|
|
21
|
+
returns: v.id("Group"),
|
|
22
|
+
handler: async (ctx, args) => {
|
|
23
|
+
const { tags: rawTags, ...rest } = args;
|
|
24
|
+
const normalizedTags = rawTags ? normalizeTags(rawTags) : void 0;
|
|
25
|
+
const groupId = await ctx.db.insert("Group", {
|
|
26
|
+
...rest,
|
|
27
|
+
tags: normalizedTags
|
|
28
|
+
});
|
|
29
|
+
if (normalizedTags) for (const tag of normalizedTags) await ctx.db.insert("GroupTag", {
|
|
30
|
+
group_id: groupId,
|
|
31
|
+
key: tag.key,
|
|
32
|
+
value: tag.value
|
|
33
|
+
});
|
|
34
|
+
return groupId;
|
|
35
|
+
}
|
|
36
|
+
});
|
|
37
|
+
/** Retrieve a group by its document ID. Returns `null` if not found. */
|
|
38
|
+
const groupGet = query({
|
|
39
|
+
args: { groupId: v.id("Group") },
|
|
40
|
+
returns: v.union(vGroupDoc, v.null()),
|
|
41
|
+
handler: async (ctx, { groupId }) => {
|
|
42
|
+
return await ctx.db.get("Group", groupId);
|
|
43
|
+
}
|
|
44
|
+
});
|
|
45
|
+
/**
|
|
46
|
+
* List groups with optional filtering, sorting, and pagination.
|
|
47
|
+
*
|
|
48
|
+
* Returns `{ items, nextCursor }`. Empty `where` returns **all** groups.
|
|
49
|
+
*/
|
|
50
|
+
const groupList = query({
|
|
51
|
+
args: {
|
|
52
|
+
where: v.optional(v.object({
|
|
53
|
+
slug: v.optional(v.string()),
|
|
54
|
+
type: v.optional(v.string()),
|
|
55
|
+
parentGroupId: v.optional(v.id("Group")),
|
|
56
|
+
name: v.optional(v.string()),
|
|
57
|
+
isRoot: v.optional(v.boolean()),
|
|
58
|
+
tagsAll: v.optional(v.array(vTag)),
|
|
59
|
+
tagsAny: v.optional(v.array(vTag))
|
|
60
|
+
})),
|
|
61
|
+
limit: v.optional(v.number()),
|
|
62
|
+
cursor: v.optional(v.union(v.string(), v.null())),
|
|
63
|
+
orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("name"), v.literal("slug"), v.literal("type"))),
|
|
64
|
+
order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
|
|
65
|
+
},
|
|
66
|
+
returns: vPaginated(vGroupDoc),
|
|
67
|
+
handler: async (ctx, args) => {
|
|
68
|
+
const where = args.where ?? {};
|
|
69
|
+
const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
|
|
70
|
+
const order = args.order ?? "desc";
|
|
71
|
+
let tagFilteredIds = null;
|
|
72
|
+
if (where.tagsAll && where.tagsAll.length > 0) {
|
|
73
|
+
let allSet = null;
|
|
74
|
+
for (const rawTag of where.tagsAll) {
|
|
75
|
+
const t = normalizeTag(rawTag);
|
|
76
|
+
const rows = await ctx.db.query("GroupTag").withIndex("by_key_value", (idx) => idx.eq("key", t.key).eq("value", t.value)).collect();
|
|
77
|
+
const ids = new Set(rows.map((r) => r.group_id));
|
|
78
|
+
if (allSet === null) allSet = ids;
|
|
79
|
+
else for (const id of allSet) if (!ids.has(id)) allSet.delete(id);
|
|
80
|
+
if (allSet.size === 0) break;
|
|
81
|
+
}
|
|
82
|
+
tagFilteredIds = allSet ?? /* @__PURE__ */ new Set();
|
|
83
|
+
}
|
|
84
|
+
if (where.tagsAny && where.tagsAny.length > 0) {
|
|
85
|
+
const anySet = /* @__PURE__ */ new Set();
|
|
86
|
+
for (const rawTag of where.tagsAny) {
|
|
87
|
+
const t = normalizeTag(rawTag);
|
|
88
|
+
const rows = await ctx.db.query("GroupTag").withIndex("by_key_value", (idx) => idx.eq("key", t.key).eq("value", t.value)).collect();
|
|
89
|
+
for (const r of rows) anySet.add(r.group_id);
|
|
90
|
+
}
|
|
91
|
+
if (tagFilteredIds !== null) {
|
|
92
|
+
for (const id of tagFilteredIds) if (!anySet.has(id)) tagFilteredIds.delete(id);
|
|
93
|
+
} else tagFilteredIds = anySet;
|
|
94
|
+
}
|
|
95
|
+
let q;
|
|
96
|
+
if (where.type !== void 0 && where.parentGroupId !== void 0) q = ctx.db.query("Group").withIndex("type_parent_group_id", (idx) => idx.eq("type", where.type).eq("parentGroupId", where.parentGroupId));
|
|
97
|
+
else if (where.slug !== void 0) q = ctx.db.query("Group").withIndex("slug", (idx) => idx.eq("slug", where.slug));
|
|
98
|
+
else if (where.type !== void 0) q = ctx.db.query("Group").withIndex("type", (idx) => idx.eq("type", where.type));
|
|
99
|
+
else if (where.parentGroupId !== void 0) q = ctx.db.query("Group").withIndex("parent_group_id", (idx) => idx.eq("parentGroupId", where.parentGroupId));
|
|
100
|
+
else q = ctx.db.query("Group");
|
|
101
|
+
if (where.name !== void 0) q = q.filter((f) => f.eq(f.field("name"), where.name));
|
|
102
|
+
if (where.isRoot === true) q = q.filter((f) => f.eq(f.field("parentGroupId"), void 0));
|
|
103
|
+
else if (where.isRoot === false) q = q.filter((f) => f.neq(f.field("parentGroupId"), void 0));
|
|
104
|
+
if (where.slug !== void 0 && where.type !== void 0) q = q.filter((f) => f.eq(f.field("slug"), where.slug));
|
|
105
|
+
q = q.order(order);
|
|
106
|
+
let all = await q.collect();
|
|
107
|
+
if (tagFilteredIds !== null) all = all.filter((doc) => tagFilteredIds.has(doc._id));
|
|
108
|
+
let startIdx = 0;
|
|
109
|
+
if (args.cursor) {
|
|
110
|
+
const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
|
|
111
|
+
if (cursorIdx !== -1) startIdx = cursorIdx + 1;
|
|
112
|
+
}
|
|
113
|
+
const page = all.slice(startIdx, startIdx + limit + 1);
|
|
114
|
+
const hasMore = page.length > limit;
|
|
115
|
+
const items = hasMore ? page.slice(0, limit) : page;
|
|
116
|
+
return {
|
|
117
|
+
items,
|
|
118
|
+
nextCursor: hasMore ? items[items.length - 1]._id : null
|
|
119
|
+
};
|
|
120
|
+
}
|
|
121
|
+
});
|
|
122
|
+
/** Update a group's fields (name, slug, tags, extend, parentGroupId). */
|
|
123
|
+
const groupUpdate = mutation({
|
|
124
|
+
args: {
|
|
125
|
+
groupId: v.id("Group"),
|
|
126
|
+
data: v.any()
|
|
127
|
+
},
|
|
128
|
+
returns: v.null(),
|
|
129
|
+
handler: async (ctx, { groupId, data }) => {
|
|
130
|
+
if (data.tags !== void 0) {
|
|
131
|
+
const normalizedTags = Array.isArray(data.tags) ? normalizeTags(data.tags) : [];
|
|
132
|
+
const existingTags = await ctx.db.query("GroupTag").withIndex("by_group", (idx) => idx.eq("group_id", groupId)).collect();
|
|
133
|
+
for (const existing of existingTags) await ctx.db.delete("GroupTag", existing._id);
|
|
134
|
+
for (const tag of normalizedTags) await ctx.db.insert("GroupTag", {
|
|
135
|
+
group_id: groupId,
|
|
136
|
+
key: tag.key,
|
|
137
|
+
value: tag.value
|
|
138
|
+
});
|
|
139
|
+
await ctx.db.patch("Group", groupId, {
|
|
140
|
+
...data,
|
|
141
|
+
tags: normalizedTags.length > 0 ? normalizedTags : void 0
|
|
142
|
+
});
|
|
143
|
+
} else await ctx.db.patch("Group", groupId, data);
|
|
144
|
+
return null;
|
|
145
|
+
}
|
|
146
|
+
});
|
|
147
|
+
/**
|
|
148
|
+
* Delete a group and all of its descendants. This cascades to:
|
|
149
|
+
* - All child groups (recursively)
|
|
150
|
+
* - All members of this group and its descendants
|
|
151
|
+
* - All invites for this group and its descendants
|
|
152
|
+
*/
|
|
153
|
+
const groupDelete = mutation({
|
|
154
|
+
args: { groupId: v.id("Group") },
|
|
155
|
+
returns: v.null(),
|
|
156
|
+
handler: async (ctx, { groupId }) => {
|
|
157
|
+
const deleteGroup = async (id) => {
|
|
158
|
+
const children = await ctx.db.query("Group").withIndex("parent_group_id", (q) => q.eq("parentGroupId", id)).collect();
|
|
159
|
+
for (const child of children) await deleteGroup(child._id);
|
|
160
|
+
const members = await ctx.db.query("GroupMember").withIndex("group_id", (q) => q.eq("groupId", id)).collect();
|
|
161
|
+
for (const member of members) await ctx.db.delete("GroupMember", member._id);
|
|
162
|
+
const invites = await ctx.db.query("GroupInvite").withIndex("group_id", (q) => q.eq("groupId", id)).collect();
|
|
163
|
+
for (const invite of invites) await ctx.db.delete("GroupInvite", invite._id);
|
|
164
|
+
const tags = await ctx.db.query("GroupTag").withIndex("by_group", (q) => q.eq("group_id", id)).collect();
|
|
165
|
+
for (const tag of tags) await ctx.db.delete("GroupTag", tag._id);
|
|
166
|
+
await ctx.db.delete("Group", id);
|
|
167
|
+
};
|
|
168
|
+
await deleteGroup(groupId);
|
|
169
|
+
return null;
|
|
170
|
+
}
|
|
171
|
+
});
|
|
172
|
+
/**
|
|
173
|
+
* Add a user as a member of a group.
|
|
174
|
+
*
|
|
175
|
+
* The `roleIds` field stores application-defined role identifiers. The auth
|
|
176
|
+
* component stores assignments but does not enforce access control — your
|
|
177
|
+
* application defines what each role means.
|
|
178
|
+
*
|
|
179
|
+
* Throws `ConvexError` with code `DUPLICATE_MEMBERSHIP` when the user is
|
|
180
|
+
* already a member of the target group.
|
|
181
|
+
*
|
|
182
|
+
* @returns The ID of the new member record.
|
|
183
|
+
*/
|
|
184
|
+
const memberAdd = mutation({
|
|
185
|
+
args: {
|
|
186
|
+
groupId: v.id("Group"),
|
|
187
|
+
userId: v.id("User"),
|
|
188
|
+
roleIds: v.optional(v.array(v.string())),
|
|
189
|
+
status: v.optional(v.string()),
|
|
190
|
+
extend: v.optional(v.any())
|
|
191
|
+
},
|
|
192
|
+
returns: v.id("GroupMember"),
|
|
193
|
+
handler: async (ctx, args) => {
|
|
194
|
+
const existingMembership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", args.groupId).eq("userId", args.userId)).unique();
|
|
195
|
+
if (existingMembership !== null) throw new ConvexError({
|
|
196
|
+
code: "DUPLICATE_MEMBERSHIP",
|
|
197
|
+
message: "User is already a member of this group",
|
|
198
|
+
groupId: args.groupId,
|
|
199
|
+
userId: args.userId,
|
|
200
|
+
existingMemberId: existingMembership._id
|
|
201
|
+
});
|
|
202
|
+
return await ctx.db.insert("GroupMember", args);
|
|
203
|
+
}
|
|
204
|
+
});
|
|
205
|
+
/** Retrieve a member record by its document ID. Returns `null` if not found. */
|
|
206
|
+
const memberGet = query({
|
|
207
|
+
args: { memberId: v.id("GroupMember") },
|
|
208
|
+
returns: v.union(vGroupMemberDoc, v.null()),
|
|
209
|
+
handler: async (ctx, { memberId }) => {
|
|
210
|
+
return await ctx.db.get("GroupMember", memberId);
|
|
211
|
+
}
|
|
212
|
+
});
|
|
213
|
+
/**
|
|
214
|
+
* List members with optional filtering, sorting, and pagination.
|
|
215
|
+
*
|
|
216
|
+
* Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
|
|
217
|
+
* `userId`, `roleId`, and `status`.
|
|
218
|
+
*/
|
|
219
|
+
const memberList = query({
|
|
220
|
+
args: {
|
|
221
|
+
where: v.optional(v.object({
|
|
222
|
+
groupId: v.optional(v.id("Group")),
|
|
223
|
+
userId: v.optional(v.id("User")),
|
|
224
|
+
roleId: v.optional(v.string()),
|
|
225
|
+
status: v.optional(v.string())
|
|
226
|
+
})),
|
|
227
|
+
limit: v.optional(v.number()),
|
|
228
|
+
cursor: v.optional(v.union(v.string(), v.null())),
|
|
229
|
+
orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("status"))),
|
|
230
|
+
order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
|
|
231
|
+
},
|
|
232
|
+
returns: vPaginated(vGroupMemberDoc),
|
|
233
|
+
handler: async (ctx, args) => {
|
|
234
|
+
const where = args.where ?? {};
|
|
235
|
+
const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
|
|
236
|
+
const order = args.order ?? "desc";
|
|
237
|
+
let q;
|
|
238
|
+
if (where.groupId !== void 0 && where.userId !== void 0) q = ctx.db.query("GroupMember").withIndex("group_id_user_id", (idx) => idx.eq("groupId", where.groupId).eq("userId", where.userId));
|
|
239
|
+
else if (where.groupId !== void 0) q = ctx.db.query("GroupMember").withIndex("group_id", (idx) => idx.eq("groupId", where.groupId));
|
|
240
|
+
else if (where.userId !== void 0) q = ctx.db.query("GroupMember").withIndex("user_id", (idx) => idx.eq("userId", where.userId));
|
|
241
|
+
else q = ctx.db.query("GroupMember");
|
|
242
|
+
if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
|
|
243
|
+
q = q.order(order);
|
|
244
|
+
let all = await q.collect();
|
|
245
|
+
if (where.roleId !== void 0) all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId));
|
|
246
|
+
let startIdx = 0;
|
|
247
|
+
if (args.cursor) {
|
|
248
|
+
const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
|
|
249
|
+
if (cursorIdx !== -1) startIdx = cursorIdx + 1;
|
|
250
|
+
}
|
|
251
|
+
const page = all.slice(startIdx, startIdx + limit + 1);
|
|
252
|
+
const hasMore = page.length > limit;
|
|
253
|
+
const items = hasMore ? page.slice(0, limit) : page;
|
|
254
|
+
return {
|
|
255
|
+
items,
|
|
256
|
+
nextCursor: hasMore ? items[items.length - 1]._id : null
|
|
257
|
+
};
|
|
258
|
+
}
|
|
259
|
+
});
|
|
260
|
+
/**
|
|
261
|
+
* @deprecated Use `memberList` with `where: { userId }` instead.
|
|
262
|
+
* Kept for backward compatibility with generated component types.
|
|
263
|
+
*/
|
|
264
|
+
const memberListByUser = query({
|
|
265
|
+
args: { userId: v.id("User") },
|
|
266
|
+
returns: v.array(vGroupMemberDoc),
|
|
267
|
+
handler: async (ctx, { userId }) => {
|
|
268
|
+
return await ctx.db.query("GroupMember").withIndex("user_id", (q) => q.eq("userId", userId)).collect();
|
|
269
|
+
}
|
|
270
|
+
});
|
|
271
|
+
/**
|
|
272
|
+
* Look up a specific user's membership in a specific group.
|
|
273
|
+
* Returns `null` if the user is not a member of the group.
|
|
274
|
+
*/
|
|
275
|
+
const memberGetByGroupAndUser = query({
|
|
276
|
+
args: {
|
|
277
|
+
groupId: v.id("Group"),
|
|
278
|
+
userId: v.id("User")
|
|
279
|
+
},
|
|
280
|
+
returns: v.union(vGroupMemberDoc, v.null()),
|
|
281
|
+
handler: async (ctx, { groupId, userId }) => {
|
|
282
|
+
return await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", groupId).eq("userId", userId)).unique();
|
|
283
|
+
}
|
|
284
|
+
});
|
|
285
|
+
/** Remove a member from a group by deleting the member record. */
|
|
286
|
+
const memberRemove = mutation({
|
|
287
|
+
args: { memberId: v.id("GroupMember") },
|
|
288
|
+
returns: v.null(),
|
|
289
|
+
handler: async (ctx, { memberId }) => {
|
|
290
|
+
await ctx.db.delete("GroupMember", memberId);
|
|
291
|
+
return null;
|
|
292
|
+
}
|
|
293
|
+
});
|
|
294
|
+
/**
|
|
295
|
+
* Update a member record's fields (roleIds, status, extend).
|
|
296
|
+
*/
|
|
297
|
+
const memberUpdate = mutation({
|
|
298
|
+
args: {
|
|
299
|
+
memberId: v.id("GroupMember"),
|
|
300
|
+
data: v.any()
|
|
301
|
+
},
|
|
302
|
+
returns: v.null(),
|
|
303
|
+
handler: async (ctx, { memberId, data }) => {
|
|
304
|
+
await ctx.db.patch("GroupMember", memberId, data);
|
|
305
|
+
return null;
|
|
306
|
+
}
|
|
307
|
+
});
|
|
308
|
+
/**
|
|
309
|
+
* Create a new platform-level invitation. Optionally set `groupId` to tie
|
|
310
|
+
* the invite to a specific group. The invitation is sent to an email address
|
|
311
|
+
* and includes a hashed token for secure acceptance.
|
|
312
|
+
*
|
|
313
|
+
* Throws `ConvexError` with code `DUPLICATE_INVITE` when a pending invite
|
|
314
|
+
* already exists for the same email and scope:
|
|
315
|
+
* - group invite: same `email` + same `groupId`
|
|
316
|
+
* - platform invite: same `email` with no `groupId`
|
|
317
|
+
*
|
|
318
|
+
* @returns The ID of the new invite record.
|
|
319
|
+
*/
|
|
320
|
+
const inviteCreate = mutation({
|
|
321
|
+
args: {
|
|
322
|
+
groupId: v.optional(v.id("Group")),
|
|
323
|
+
invitedByUserId: v.optional(v.id("User")),
|
|
324
|
+
email: v.optional(v.string()),
|
|
325
|
+
tokenHash: v.string(),
|
|
326
|
+
roleIds: v.optional(v.array(v.string())),
|
|
327
|
+
status: vInviteStatus,
|
|
328
|
+
expiresTime: v.optional(v.number()),
|
|
329
|
+
extend: v.optional(v.any())
|
|
330
|
+
},
|
|
331
|
+
returns: v.id("GroupInvite"),
|
|
332
|
+
handler: async (ctx, args) => {
|
|
333
|
+
const now = Date.now();
|
|
334
|
+
if (args.email !== void 0) if (args.groupId !== void 0) {
|
|
335
|
+
const existingGroupInvites = await ctx.db.query("GroupInvite").withIndex("group_id_status", (q) => q.eq("groupId", args.groupId).eq("status", "pending")).filter((q) => q.eq(q.field("email"), args.email)).collect();
|
|
336
|
+
for (const existingGroupInvite of existingGroupInvites) {
|
|
337
|
+
if (existingGroupInvite.expiresTime !== void 0 && existingGroupInvite.expiresTime <= now) {
|
|
338
|
+
await ctx.db.patch("GroupInvite", existingGroupInvite._id, { status: "expired" });
|
|
339
|
+
continue;
|
|
340
|
+
}
|
|
341
|
+
throw new ConvexError({
|
|
342
|
+
code: "DUPLICATE_INVITE",
|
|
343
|
+
message: "A pending invite already exists for this email in this group",
|
|
344
|
+
email: args.email,
|
|
345
|
+
groupId: args.groupId,
|
|
346
|
+
existingInviteId: existingGroupInvite._id
|
|
347
|
+
});
|
|
348
|
+
}
|
|
349
|
+
} else {
|
|
350
|
+
const existingPlatformInvites = await ctx.db.query("GroupInvite").withIndex("email_status", (q) => q.eq("email", args.email).eq("status", "pending")).filter((q) => q.eq(q.field("groupId"), void 0)).collect();
|
|
351
|
+
for (const existingPlatformInvite of existingPlatformInvites) {
|
|
352
|
+
if (existingPlatformInvite.expiresTime !== void 0 && existingPlatformInvite.expiresTime <= now) {
|
|
353
|
+
await ctx.db.patch("GroupInvite", existingPlatformInvite._id, { status: "expired" });
|
|
354
|
+
continue;
|
|
355
|
+
}
|
|
356
|
+
throw new ConvexError({
|
|
357
|
+
code: "DUPLICATE_INVITE",
|
|
358
|
+
message: "A pending platform invite already exists for this email",
|
|
359
|
+
email: args.email,
|
|
360
|
+
existingInviteId: existingPlatformInvite._id
|
|
361
|
+
});
|
|
362
|
+
}
|
|
363
|
+
}
|
|
364
|
+
return await ctx.db.insert("GroupInvite", args);
|
|
365
|
+
}
|
|
366
|
+
});
|
|
367
|
+
/** Retrieve an invite by its document ID. Returns `null` if not found. */
|
|
368
|
+
const inviteGet = query({
|
|
369
|
+
args: { inviteId: v.id("GroupInvite") },
|
|
370
|
+
returns: v.union(vGroupInviteDoc, v.null()),
|
|
371
|
+
handler: async (ctx, { inviteId }) => {
|
|
372
|
+
return await ctx.db.get("GroupInvite", inviteId);
|
|
373
|
+
}
|
|
374
|
+
});
|
|
375
|
+
/** Retrieve an invite by hashed token. Returns `null` if not found. */
|
|
376
|
+
const inviteGetByTokenHash = query({
|
|
377
|
+
args: { tokenHash: v.string() },
|
|
378
|
+
returns: v.union(vGroupInviteDoc, v.null()),
|
|
379
|
+
handler: async (ctx, { tokenHash }) => {
|
|
380
|
+
return await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
|
|
381
|
+
}
|
|
382
|
+
});
|
|
383
|
+
/**
|
|
384
|
+
* List invites with optional filtering, sorting, and pagination.
|
|
385
|
+
*
|
|
386
|
+
* Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
|
|
387
|
+
* `status`, `email`, `invitedByUserId`, `roleId`, `acceptedByUserId`, and `tokenHash`.
|
|
388
|
+
*/
|
|
389
|
+
const inviteList = query({
|
|
390
|
+
args: {
|
|
391
|
+
where: v.optional(v.object({
|
|
392
|
+
tokenHash: v.optional(v.string()),
|
|
393
|
+
groupId: v.optional(v.id("Group")),
|
|
394
|
+
status: v.optional(vInviteStatus),
|
|
395
|
+
email: v.optional(v.string()),
|
|
396
|
+
invitedByUserId: v.optional(v.id("User")),
|
|
397
|
+
roleId: v.optional(v.string()),
|
|
398
|
+
acceptedByUserId: v.optional(v.id("User"))
|
|
399
|
+
})),
|
|
400
|
+
limit: v.optional(v.number()),
|
|
401
|
+
cursor: v.optional(v.union(v.string(), v.null())),
|
|
402
|
+
orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("status"), v.literal("email"), v.literal("expiresTime"), v.literal("acceptedTime"))),
|
|
403
|
+
order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
|
|
404
|
+
},
|
|
405
|
+
returns: vPaginated(vGroupInviteDoc),
|
|
406
|
+
handler: async (ctx, args) => {
|
|
407
|
+
const where = args.where ?? {};
|
|
408
|
+
const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
|
|
409
|
+
const order = args.order ?? "desc";
|
|
410
|
+
let q;
|
|
411
|
+
if (where.tokenHash !== void 0) q = ctx.db.query("GroupInvite").withIndex("token_hash", (idx) => idx.eq("tokenHash", where.tokenHash));
|
|
412
|
+
else if (where.groupId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id_status", (idx) => idx.eq("groupId", where.groupId).eq("status", where.status));
|
|
413
|
+
else if (where.email !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("email_status", (idx) => idx.eq("email", where.email).eq("status", where.status));
|
|
414
|
+
else if (where.invitedByUserId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("invited_by_user_id_status", (idx) => idx.eq("invitedByUserId", where.invitedByUserId).eq("status", where.status));
|
|
415
|
+
else if (where.groupId !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id", (idx) => idx.eq("groupId", where.groupId));
|
|
416
|
+
else if (where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("status", (idx) => idx.eq("status", where.status));
|
|
417
|
+
else q = ctx.db.query("GroupInvite");
|
|
418
|
+
if (where.groupId !== void 0) q = q.filter((f) => f.eq(f.field("groupId"), where.groupId));
|
|
419
|
+
if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
|
|
420
|
+
if (where.email !== void 0) q = q.filter((f) => f.eq(f.field("email"), where.email));
|
|
421
|
+
if (where.invitedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("invitedByUserId"), where.invitedByUserId));
|
|
422
|
+
if (where.acceptedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("acceptedByUserId"), where.acceptedByUserId));
|
|
423
|
+
if (where.tokenHash !== void 0) q = q.filter((f) => f.eq(f.field("tokenHash"), where.tokenHash));
|
|
424
|
+
q = q.order(order);
|
|
425
|
+
let all = await q.collect();
|
|
426
|
+
if (where.roleId !== void 0) all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId));
|
|
427
|
+
let startIdx = 0;
|
|
428
|
+
if (args.cursor) {
|
|
429
|
+
const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
|
|
430
|
+
if (cursorIdx !== -1) startIdx = cursorIdx + 1;
|
|
431
|
+
}
|
|
432
|
+
const page = all.slice(startIdx, startIdx + limit + 1);
|
|
433
|
+
const hasMore = page.length > limit;
|
|
434
|
+
const items = hasMore ? page.slice(0, limit) : page;
|
|
435
|
+
return {
|
|
436
|
+
items,
|
|
437
|
+
nextCursor: hasMore ? items[items.length - 1]._id : null
|
|
438
|
+
};
|
|
439
|
+
}
|
|
440
|
+
});
|
|
441
|
+
/**
|
|
442
|
+
* Accept a pending invitation.
|
|
443
|
+
*
|
|
444
|
+
* Marks the invite as "accepted" and records the acceptance timestamp.
|
|
445
|
+
* Throws a structured `ConvexError` when the invite doesn't exist or is not
|
|
446
|
+
* currently pending.
|
|
447
|
+
*
|
|
448
|
+
* The caller is responsible for creating the corresponding member record.
|
|
449
|
+
*/
|
|
450
|
+
const inviteAccept = mutation({
|
|
451
|
+
args: {
|
|
452
|
+
inviteId: v.id("GroupInvite"),
|
|
453
|
+
acceptedByUserId: v.optional(v.id("User"))
|
|
454
|
+
},
|
|
455
|
+
returns: v.null(),
|
|
456
|
+
handler: async (ctx, { inviteId, acceptedByUserId }) => {
|
|
457
|
+
const invite = await ctx.db.get("GroupInvite", inviteId);
|
|
458
|
+
if (invite === null) throw new ConvexError({
|
|
459
|
+
code: "INVITE_NOT_FOUND",
|
|
460
|
+
message: "Invite not found",
|
|
461
|
+
inviteId
|
|
462
|
+
});
|
|
463
|
+
if (invite.status !== "pending") throw new ConvexError({
|
|
464
|
+
code: "INVITE_NOT_PENDING",
|
|
465
|
+
message: `Cannot accept invite with status "${invite.status}"`,
|
|
466
|
+
inviteId,
|
|
467
|
+
currentStatus: invite.status
|
|
468
|
+
});
|
|
469
|
+
if (invite.expiresTime !== void 0 && invite.expiresTime <= Date.now()) {
|
|
470
|
+
await ctx.db.patch("GroupInvite", inviteId, { status: "expired" });
|
|
471
|
+
throw new ConvexError({
|
|
472
|
+
code: "INVITE_EXPIRED",
|
|
473
|
+
message: "Invite has expired",
|
|
474
|
+
inviteId
|
|
475
|
+
});
|
|
476
|
+
}
|
|
477
|
+
await ctx.db.patch("GroupInvite", inviteId, {
|
|
478
|
+
status: "accepted",
|
|
479
|
+
acceptedTime: Date.now(),
|
|
480
|
+
...acceptedByUserId ? { acceptedByUserId } : {}
|
|
481
|
+
});
|
|
482
|
+
return null;
|
|
483
|
+
}
|
|
484
|
+
});
|
|
485
|
+
/**
|
|
486
|
+
* Accept an invitation by raw token hash and atomically join group membership.
|
|
487
|
+
*
|
|
488
|
+
* Returns idempotent success when the invite was already accepted by the same
|
|
489
|
+
* user. If the invite targets a group, this mutation also ensures membership.
|
|
490
|
+
*/
|
|
491
|
+
const inviteAcceptByToken = mutation({
|
|
492
|
+
args: {
|
|
493
|
+
tokenHash: v.string(),
|
|
494
|
+
acceptedByUserId: v.id("User")
|
|
495
|
+
},
|
|
496
|
+
returns: vInviteAcceptByTokenResult,
|
|
497
|
+
handler: async (ctx, { tokenHash, acceptedByUserId }) => {
|
|
498
|
+
const invite = await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
|
|
499
|
+
if (invite === null) throw new ConvexError({
|
|
500
|
+
code: "INVITE_NOT_FOUND",
|
|
501
|
+
message: "Invite not found"
|
|
502
|
+
});
|
|
503
|
+
const now = Date.now();
|
|
504
|
+
if (invite.status === "pending") {
|
|
505
|
+
if (invite.expiresTime !== void 0 && invite.expiresTime <= now) {
|
|
506
|
+
await ctx.db.patch("GroupInvite", invite._id, { status: "expired" });
|
|
507
|
+
throw new ConvexError({
|
|
508
|
+
code: "INVITE_EXPIRED",
|
|
509
|
+
message: "Invite has expired",
|
|
510
|
+
inviteId: invite._id
|
|
511
|
+
});
|
|
512
|
+
}
|
|
513
|
+
} else if (invite.status === "accepted") {
|
|
514
|
+
if (invite.acceptedByUserId !== acceptedByUserId) throw new ConvexError({
|
|
515
|
+
code: "INVITE_ALREADY_ACCEPTED",
|
|
516
|
+
message: "Invite already accepted by another user",
|
|
517
|
+
inviteId: invite._id
|
|
518
|
+
});
|
|
519
|
+
} else throw new ConvexError({
|
|
520
|
+
code: "INVITE_NOT_PENDING",
|
|
521
|
+
message: `Cannot accept invite with status "${invite.status}"`,
|
|
522
|
+
inviteId: invite._id,
|
|
523
|
+
currentStatus: invite.status
|
|
524
|
+
});
|
|
525
|
+
if (invite.email !== void 0) {
|
|
526
|
+
const user = await ctx.db.get("User", acceptedByUserId);
|
|
527
|
+
const normalizedInviteEmail = invite.email.trim().toLowerCase();
|
|
528
|
+
const normalizedUserEmail = user?.email?.trim().toLowerCase();
|
|
529
|
+
if (normalizedUserEmail === void 0 || normalizedUserEmail !== normalizedInviteEmail) throw new ConvexError({
|
|
530
|
+
code: "INVITE_EMAIL_MISMATCH",
|
|
531
|
+
message: "Invite email does not match accepting user's email",
|
|
532
|
+
inviteId: invite._id
|
|
533
|
+
});
|
|
534
|
+
}
|
|
535
|
+
let membershipStatus = "not_applicable";
|
|
536
|
+
let memberId;
|
|
537
|
+
if (invite.groupId !== void 0) {
|
|
538
|
+
const existingMembership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", invite.groupId).eq("userId", acceptedByUserId)).unique();
|
|
539
|
+
if (existingMembership !== null) {
|
|
540
|
+
membershipStatus = "already_joined";
|
|
541
|
+
memberId = existingMembership._id;
|
|
542
|
+
} else {
|
|
543
|
+
memberId = await ctx.db.insert("GroupMember", {
|
|
544
|
+
groupId: invite.groupId,
|
|
545
|
+
userId: acceptedByUserId,
|
|
546
|
+
roleIds: invite.roleIds,
|
|
547
|
+
status: "active"
|
|
548
|
+
});
|
|
549
|
+
membershipStatus = "joined";
|
|
550
|
+
}
|
|
551
|
+
}
|
|
552
|
+
if (invite.status === "pending") await ctx.db.patch("GroupInvite", invite._id, {
|
|
553
|
+
status: "accepted",
|
|
554
|
+
acceptedByUserId,
|
|
555
|
+
acceptedTime: now
|
|
556
|
+
});
|
|
557
|
+
const inviteStatus = invite.status === "accepted" ? "already_accepted" : "accepted";
|
|
558
|
+
return {
|
|
559
|
+
inviteId: invite._id,
|
|
560
|
+
groupId: invite.groupId ?? null,
|
|
561
|
+
memberId,
|
|
562
|
+
inviteStatus,
|
|
563
|
+
membershipStatus
|
|
564
|
+
};
|
|
565
|
+
}
|
|
566
|
+
});
|
|
567
|
+
/**
|
|
568
|
+
* Revoke a pending invitation.
|
|
569
|
+
*
|
|
570
|
+
* Marks the invite as "revoked". Throws a structured `ConvexError` when the
|
|
571
|
+
* invite doesn't exist or is not currently pending.
|
|
572
|
+
*/
|
|
573
|
+
const inviteRevoke = mutation({
|
|
574
|
+
args: { inviteId: v.id("GroupInvite") },
|
|
575
|
+
returns: v.null(),
|
|
576
|
+
handler: async (ctx, { inviteId }) => {
|
|
577
|
+
const invite = await ctx.db.get("GroupInvite", inviteId);
|
|
578
|
+
if (invite === null) throw new ConvexError({
|
|
579
|
+
code: "INVITE_NOT_FOUND",
|
|
580
|
+
message: "Invite not found",
|
|
581
|
+
inviteId
|
|
582
|
+
});
|
|
583
|
+
if (invite.status !== "pending") throw new ConvexError({
|
|
584
|
+
code: "INVITE_NOT_PENDING",
|
|
585
|
+
message: `Cannot revoke invite with status "${invite.status}"`,
|
|
586
|
+
inviteId,
|
|
587
|
+
currentStatus: invite.status
|
|
588
|
+
});
|
|
589
|
+
await ctx.db.patch("GroupInvite", inviteId, { status: "revoked" });
|
|
590
|
+
return null;
|
|
591
|
+
}
|
|
592
|
+
});
|
|
593
|
+
|
|
594
|
+
//#endregion
|
|
595
|
+
export { groupCreate, groupDelete, groupGet, groupList, groupUpdate, inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke, memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberListByUser, memberRemove, memberUpdate };
|
|
596
|
+
//# sourceMappingURL=groups.js.map
|