@robelest/convex-auth 0.0.4-preview.13 → 0.0.4-preview.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (328) hide show
  1. package/README.md +140 -9
  2. package/dist/bin.cjs +5957 -5478
  3. package/dist/client/index.d.ts +3 -7
  4. package/dist/client/index.d.ts.map +1 -1
  5. package/dist/client/index.js +27 -26
  6. package/dist/client/index.js.map +1 -1
  7. package/dist/component/_generated/api.d.ts +14 -0
  8. package/dist/component/_generated/api.d.ts.map +1 -1
  9. package/dist/component/_generated/api.js.map +1 -1
  10. package/dist/component/_generated/component.d.ts +1672 -24
  11. package/dist/component/_generated/component.d.ts.map +1 -1
  12. package/dist/component/convex.config.d.ts +2 -2
  13. package/dist/component/convex.config.d.ts.map +1 -1
  14. package/dist/component/index.d.ts +1 -1
  15. package/dist/component/index.js +2 -2
  16. package/dist/component/model.d.ts +153 -0
  17. package/dist/component/model.d.ts.map +1 -0
  18. package/dist/component/model.js +343 -0
  19. package/dist/component/model.js.map +1 -0
  20. package/dist/component/providers/sso.d.ts +1 -1
  21. package/dist/component/public/enterprise.d.ts +54 -0
  22. package/dist/component/public/enterprise.d.ts.map +1 -0
  23. package/dist/component/public/enterprise.js +515 -0
  24. package/dist/component/public/enterprise.js.map +1 -0
  25. package/dist/component/public/factors.d.ts +52 -0
  26. package/dist/component/public/factors.d.ts.map +1 -0
  27. package/dist/component/public/factors.js +285 -0
  28. package/dist/component/public/factors.js.map +1 -0
  29. package/dist/component/public/groups.d.ts +116 -0
  30. package/dist/component/public/groups.d.ts.map +1 -0
  31. package/dist/component/public/groups.js +596 -0
  32. package/dist/component/public/groups.js.map +1 -0
  33. package/dist/component/public/identity.d.ts +93 -0
  34. package/dist/component/public/identity.d.ts.map +1 -0
  35. package/dist/component/public/identity.js +426 -0
  36. package/dist/component/public/identity.js.map +1 -0
  37. package/dist/component/public/keys.d.ts +41 -0
  38. package/dist/component/public/keys.d.ts.map +1 -0
  39. package/dist/component/public/keys.js +157 -0
  40. package/dist/component/public/keys.js.map +1 -0
  41. package/dist/component/public/shared.d.ts +26 -0
  42. package/dist/component/public/shared.d.ts.map +1 -0
  43. package/dist/component/public/shared.js +32 -0
  44. package/dist/component/public/shared.js.map +1 -0
  45. package/dist/component/public.d.ts +9 -321
  46. package/dist/component/public.d.ts.map +1 -1
  47. package/dist/component/public.js +6 -2145
  48. package/dist/component/schema.d.ts +406 -260
  49. package/dist/component/schema.js +37 -32
  50. package/dist/component/schema.js.map +1 -1
  51. package/dist/component/server/auth.d.ts +161 -15
  52. package/dist/component/server/auth.d.ts.map +1 -1
  53. package/dist/component/server/auth.js +100 -7
  54. package/dist/component/server/auth.js.map +1 -1
  55. package/dist/component/server/cookies.js +3 -0
  56. package/dist/component/server/cookies.js.map +1 -1
  57. package/dist/component/server/db.js +1 -0
  58. package/dist/component/server/db.js.map +1 -1
  59. package/dist/component/server/device.js +3 -1
  60. package/dist/component/server/device.js.map +1 -1
  61. package/dist/component/server/domains/core.js +629 -0
  62. package/dist/component/server/domains/core.js.map +1 -0
  63. package/dist/component/server/domains/sso.js +884 -0
  64. package/dist/component/server/domains/sso.js.map +1 -0
  65. package/dist/component/server/factory.d.ts +136 -0
  66. package/dist/component/server/factory.d.ts.map +1 -0
  67. package/dist/component/server/factory.js +1134 -0
  68. package/dist/component/server/factory.js.map +1 -0
  69. package/dist/component/server/fx.js +2 -1
  70. package/dist/component/server/fx.js.map +1 -1
  71. package/dist/component/server/http.js +287 -0
  72. package/dist/component/server/http.js.map +1 -0
  73. package/dist/component/server/identity.js +13 -0
  74. package/dist/component/server/identity.js.map +1 -0
  75. package/dist/component/server/keys.js +4 -0
  76. package/dist/component/server/keys.js.map +1 -1
  77. package/dist/component/server/mutations/account.js +1 -1
  78. package/dist/component/server/mutations/index.js +2 -2
  79. package/dist/component/server/mutations/index.js.map +1 -1
  80. package/dist/component/server/mutations/invalidate.js +1 -1
  81. package/dist/component/server/mutations/oauth.js +10 -7
  82. package/dist/component/server/mutations/oauth.js.map +1 -1
  83. package/dist/component/server/mutations/refresh.js +1 -1
  84. package/dist/component/server/mutations/register.js +1 -1
  85. package/dist/component/server/mutations/retrieve.js +1 -1
  86. package/dist/component/server/mutations/signature.js +1 -1
  87. package/dist/component/server/mutations/store.js +6 -3
  88. package/dist/component/server/mutations/store.js.map +1 -1
  89. package/dist/component/server/mutations/verify.js +1 -1
  90. package/dist/component/server/oauth.js +3 -0
  91. package/dist/component/server/oauth.js.map +1 -1
  92. package/dist/component/server/passkey.js +3 -2
  93. package/dist/component/server/passkey.js.map +1 -1
  94. package/dist/component/server/provider.js +2 -0
  95. package/dist/component/server/provider.js.map +1 -1
  96. package/dist/component/server/providers.js +10 -0
  97. package/dist/component/server/providers.js.map +1 -1
  98. package/dist/component/server/ratelimit.js +3 -0
  99. package/dist/component/server/ratelimit.js.map +1 -1
  100. package/dist/component/server/redirects.js +2 -0
  101. package/dist/component/server/redirects.js.map +1 -1
  102. package/dist/component/server/refresh.js +5 -0
  103. package/dist/component/server/refresh.js.map +1 -1
  104. package/dist/component/server/sessions.js +5 -0
  105. package/dist/component/server/sessions.js.map +1 -1
  106. package/dist/component/server/signin.js +2 -1
  107. package/dist/component/server/signin.js.map +1 -1
  108. package/dist/component/server/sso.js +166 -19
  109. package/dist/component/server/sso.js.map +1 -1
  110. package/dist/component/server/tokens.js +1 -0
  111. package/dist/component/server/tokens.js.map +1 -1
  112. package/dist/component/server/totp.js +4 -2
  113. package/dist/component/server/totp.js.map +1 -1
  114. package/dist/component/server/types.d.ts +106 -38
  115. package/dist/component/server/types.d.ts.map +1 -1
  116. package/dist/component/server/types.js.map +1 -1
  117. package/dist/component/server/users.js +1 -0
  118. package/dist/component/server/users.js.map +1 -1
  119. package/dist/component/server/utils.js +44 -2
  120. package/dist/component/server/utils.js.map +1 -1
  121. package/dist/providers/anonymous.d.ts +1 -1
  122. package/dist/providers/credentials.d.ts +1 -1
  123. package/dist/providers/password.d.ts +1 -1
  124. package/dist/providers/sso.d.ts +1 -1
  125. package/dist/providers/sso.js.map +1 -1
  126. package/dist/server/auth.d.ts +163 -17
  127. package/dist/server/auth.d.ts.map +1 -1
  128. package/dist/server/auth.js +100 -7
  129. package/dist/server/auth.js.map +1 -1
  130. package/dist/server/cookies.d.ts +1 -38
  131. package/dist/server/cookies.js +3 -0
  132. package/dist/server/cookies.js.map +1 -1
  133. package/dist/server/db.d.ts +1 -125
  134. package/dist/server/db.js +1 -0
  135. package/dist/server/db.js.map +1 -1
  136. package/dist/server/device.d.ts +1 -24
  137. package/dist/server/device.js +3 -1
  138. package/dist/server/device.js.map +1 -1
  139. package/dist/server/domains/core.d.ts +434 -0
  140. package/dist/server/domains/core.d.ts.map +1 -0
  141. package/dist/server/domains/core.js +629 -0
  142. package/dist/server/domains/core.js.map +1 -0
  143. package/dist/server/domains/sso.d.ts +409 -0
  144. package/dist/server/domains/sso.d.ts.map +1 -0
  145. package/dist/server/domains/sso.js +884 -0
  146. package/dist/server/domains/sso.js.map +1 -0
  147. package/dist/server/enterpriseValidators.d.ts +1 -0
  148. package/dist/server/enterpriseValidators.js +60 -0
  149. package/dist/server/enterpriseValidators.js.map +1 -0
  150. package/dist/server/factory.d.ts +136 -0
  151. package/dist/server/factory.d.ts.map +1 -0
  152. package/dist/server/factory.js +1134 -0
  153. package/dist/server/factory.js.map +1 -0
  154. package/dist/server/fx.d.ts +1 -16
  155. package/dist/server/fx.d.ts.map +1 -1
  156. package/dist/server/fx.js +1 -0
  157. package/dist/server/fx.js.map +1 -1
  158. package/dist/server/http.d.ts +59 -0
  159. package/dist/server/http.d.ts.map +1 -0
  160. package/dist/server/http.js +287 -0
  161. package/dist/server/http.js.map +1 -0
  162. package/dist/server/identity.d.ts +1 -0
  163. package/dist/server/identity.js +13 -0
  164. package/dist/server/identity.js.map +1 -0
  165. package/dist/server/index.d.ts +468 -1
  166. package/dist/server/index.d.ts.map +1 -1
  167. package/dist/server/index.js +530 -36
  168. package/dist/server/index.js.map +1 -1
  169. package/dist/server/keys.d.ts +1 -57
  170. package/dist/server/keys.js +4 -0
  171. package/dist/server/keys.js.map +1 -1
  172. package/dist/server/mutations/account.d.ts +7 -7
  173. package/dist/server/mutations/account.d.ts.map +1 -1
  174. package/dist/server/mutations/code.d.ts +13 -13
  175. package/dist/server/mutations/code.d.ts.map +1 -1
  176. package/dist/server/mutations/index.d.ts +107 -107
  177. package/dist/server/mutations/index.d.ts.map +1 -1
  178. package/dist/server/mutations/index.js +1 -1
  179. package/dist/server/mutations/index.js.map +1 -1
  180. package/dist/server/mutations/invalidate.d.ts +5 -5
  181. package/dist/server/mutations/invalidate.d.ts.map +1 -1
  182. package/dist/server/mutations/oauth.d.ts +10 -10
  183. package/dist/server/mutations/oauth.d.ts.map +1 -1
  184. package/dist/server/mutations/oauth.js +9 -6
  185. package/dist/server/mutations/oauth.js.map +1 -1
  186. package/dist/server/mutations/refresh.d.ts +4 -4
  187. package/dist/server/mutations/register.d.ts +12 -12
  188. package/dist/server/mutations/register.d.ts.map +1 -1
  189. package/dist/server/mutations/retrieve.d.ts +7 -7
  190. package/dist/server/mutations/signature.d.ts +5 -5
  191. package/dist/server/mutations/signin.d.ts +6 -6
  192. package/dist/server/mutations/signin.d.ts.map +1 -1
  193. package/dist/server/mutations/signout.d.ts +1 -1
  194. package/dist/server/mutations/store.d.ts +3 -2
  195. package/dist/server/mutations/store.d.ts.map +1 -1
  196. package/dist/server/mutations/store.js +6 -3
  197. package/dist/server/mutations/store.js.map +1 -1
  198. package/dist/server/mutations/verifier.d.ts +1 -1
  199. package/dist/server/mutations/verify.d.ts +11 -11
  200. package/dist/server/mutations/verify.d.ts.map +1 -1
  201. package/dist/server/oauth.d.ts +1 -59
  202. package/dist/server/oauth.js +3 -0
  203. package/dist/server/oauth.js.map +1 -1
  204. package/dist/server/passkey.d.ts.map +1 -1
  205. package/dist/server/passkey.js +3 -2
  206. package/dist/server/passkey.js.map +1 -1
  207. package/dist/server/provider.d.ts +1 -14
  208. package/dist/server/provider.d.ts.map +1 -1
  209. package/dist/server/provider.js +2 -0
  210. package/dist/server/provider.js.map +1 -1
  211. package/dist/server/providers.js +10 -0
  212. package/dist/server/providers.js.map +1 -1
  213. package/dist/server/ratelimit.d.ts +1 -22
  214. package/dist/server/ratelimit.js +3 -0
  215. package/dist/server/ratelimit.js.map +1 -1
  216. package/dist/server/redirects.d.ts +1 -10
  217. package/dist/server/redirects.js +2 -0
  218. package/dist/server/redirects.js.map +1 -1
  219. package/dist/server/refresh.d.ts +1 -37
  220. package/dist/server/refresh.js +5 -0
  221. package/dist/server/refresh.js.map +1 -1
  222. package/dist/server/sessions.d.ts +1 -28
  223. package/dist/server/sessions.js +5 -0
  224. package/dist/server/sessions.js.map +1 -1
  225. package/dist/server/signin.d.ts +1 -55
  226. package/dist/server/signin.js +2 -1
  227. package/dist/server/signin.js.map +1 -1
  228. package/dist/server/sso.d.ts +1 -348
  229. package/dist/server/sso.js +165 -18
  230. package/dist/server/sso.js.map +1 -1
  231. package/dist/server/templates.d.ts +1 -21
  232. package/dist/server/templates.js +1 -0
  233. package/dist/server/templates.js.map +1 -1
  234. package/dist/server/tokens.d.ts +1 -11
  235. package/dist/server/tokens.js +1 -0
  236. package/dist/server/tokens.js.map +1 -1
  237. package/dist/server/totp.d.ts +1 -23
  238. package/dist/server/totp.js +4 -2
  239. package/dist/server/totp.js.map +1 -1
  240. package/dist/server/types.d.ts +114 -77
  241. package/dist/server/types.d.ts.map +1 -1
  242. package/dist/server/types.js.map +1 -1
  243. package/dist/server/users.d.ts +1 -31
  244. package/dist/server/users.js +1 -0
  245. package/dist/server/users.js.map +1 -1
  246. package/dist/server/utils.d.ts +1 -27
  247. package/dist/server/utils.js +44 -2
  248. package/dist/server/utils.js.map +1 -1
  249. package/dist/server/version.d.ts +1 -1
  250. package/dist/server/version.js +1 -1
  251. package/dist/server/version.js.map +1 -1
  252. package/package.json +4 -5
  253. package/src/cli/bin.ts +5 -0
  254. package/src/cli/index.ts +22 -9
  255. package/src/cli/keys.ts +3 -0
  256. package/src/client/index.ts +36 -37
  257. package/src/component/_generated/api.ts +14 -0
  258. package/src/component/_generated/component.ts +2106 -9
  259. package/src/component/index.ts +3 -1
  260. package/src/component/model.ts +441 -0
  261. package/src/component/public/enterprise.ts +753 -0
  262. package/src/component/public/factors.ts +332 -0
  263. package/src/component/public/groups.ts +932 -0
  264. package/src/component/public/identity.ts +566 -0
  265. package/src/component/public/keys.ts +209 -0
  266. package/src/component/public/shared.ts +119 -0
  267. package/src/component/public.ts +5 -2965
  268. package/src/component/schema.ts +68 -63
  269. package/src/providers/sso.ts +1 -1
  270. package/src/server/auth.ts +413 -18
  271. package/src/server/cookies.ts +3 -0
  272. package/src/server/db.ts +3 -0
  273. package/src/server/device.ts +3 -1
  274. package/src/server/domains/core.ts +1071 -0
  275. package/src/server/domains/sso.ts +1749 -0
  276. package/src/server/enterpriseValidators.ts +93 -0
  277. package/src/server/factory.ts +2181 -0
  278. package/src/server/fx.ts +1 -0
  279. package/src/server/http.ts +529 -0
  280. package/src/server/identity.ts +18 -0
  281. package/src/server/index.ts +806 -40
  282. package/src/server/keys.ts +4 -0
  283. package/src/server/mutations/index.ts +1 -1
  284. package/src/server/mutations/oauth.ts +36 -8
  285. package/src/server/mutations/store.ts +6 -3
  286. package/src/server/oauth.ts +6 -0
  287. package/src/server/passkey.ts +3 -2
  288. package/src/server/provider.ts +2 -0
  289. package/src/server/providers.ts +20 -0
  290. package/src/server/ratelimit.ts +3 -0
  291. package/src/server/redirects.ts +2 -0
  292. package/src/server/refresh.ts +5 -0
  293. package/src/server/sessions.ts +5 -0
  294. package/src/server/signin.ts +1 -0
  295. package/src/server/sso.ts +259 -17
  296. package/src/server/templates.ts +1 -0
  297. package/src/server/tokens.ts +1 -0
  298. package/src/server/totp.ts +4 -2
  299. package/src/server/types.ts +178 -83
  300. package/src/server/users.ts +1 -0
  301. package/src/server/utils.ts +71 -1
  302. package/src/server/version.ts +1 -1
  303. package/dist/component/public.js.map +0 -1
  304. package/dist/component/server/implementation.d.ts +0 -1264
  305. package/dist/component/server/implementation.d.ts.map +0 -1
  306. package/dist/component/server/implementation.js +0 -2365
  307. package/dist/component/server/implementation.js.map +0 -1
  308. package/dist/server/cookies.d.ts.map +0 -1
  309. package/dist/server/db.d.ts.map +0 -1
  310. package/dist/server/device.d.ts.map +0 -1
  311. package/dist/server/implementation.d.ts +0 -1264
  312. package/dist/server/implementation.d.ts.map +0 -1
  313. package/dist/server/implementation.js +0 -2365
  314. package/dist/server/implementation.js.map +0 -1
  315. package/dist/server/keys.d.ts.map +0 -1
  316. package/dist/server/oauth.d.ts.map +0 -1
  317. package/dist/server/ratelimit.d.ts.map +0 -1
  318. package/dist/server/redirects.d.ts.map +0 -1
  319. package/dist/server/refresh.d.ts.map +0 -1
  320. package/dist/server/sessions.d.ts.map +0 -1
  321. package/dist/server/signin.d.ts.map +0 -1
  322. package/dist/server/sso.d.ts.map +0 -1
  323. package/dist/server/templates.d.ts.map +0 -1
  324. package/dist/server/tokens.d.ts.map +0 -1
  325. package/dist/server/totp.d.ts.map +0 -1
  326. package/dist/server/users.d.ts.map +0 -1
  327. package/dist/server/utils.d.ts.map +0 -1
  328. package/src/server/implementation.ts +0 -5336
@@ -0,0 +1,596 @@
1
+ import { mutation, query } from "../functions.js";
2
+ import { vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vTag } from "../model.js";
3
+ import { ConvexError, normalizeTag, normalizeTags, v, vPaginated } from "./shared.js";
4
+
5
+ //#region src/component/public/groups.ts
6
+ /**
7
+ * Create a new group. Groups are hierarchical — set `parentGroupId` to nest
8
+ * under an existing group, or omit it to create a root-level group.
9
+ *
10
+ * @returns The ID of the newly created group.
11
+ */
12
+ const groupCreate = mutation({
13
+ args: {
14
+ name: v.string(),
15
+ slug: v.optional(v.string()),
16
+ type: v.optional(v.string()),
17
+ parentGroupId: v.optional(v.id("Group")),
18
+ tags: v.optional(v.array(vTag)),
19
+ extend: v.optional(v.any())
20
+ },
21
+ returns: v.id("Group"),
22
+ handler: async (ctx, args) => {
23
+ const { tags: rawTags, ...rest } = args;
24
+ const normalizedTags = rawTags ? normalizeTags(rawTags) : void 0;
25
+ const groupId = await ctx.db.insert("Group", {
26
+ ...rest,
27
+ tags: normalizedTags
28
+ });
29
+ if (normalizedTags) for (const tag of normalizedTags) await ctx.db.insert("GroupTag", {
30
+ group_id: groupId,
31
+ key: tag.key,
32
+ value: tag.value
33
+ });
34
+ return groupId;
35
+ }
36
+ });
37
+ /** Retrieve a group by its document ID. Returns `null` if not found. */
38
+ const groupGet = query({
39
+ args: { groupId: v.id("Group") },
40
+ returns: v.union(vGroupDoc, v.null()),
41
+ handler: async (ctx, { groupId }) => {
42
+ return await ctx.db.get("Group", groupId);
43
+ }
44
+ });
45
+ /**
46
+ * List groups with optional filtering, sorting, and pagination.
47
+ *
48
+ * Returns `{ items, nextCursor }`. Empty `where` returns **all** groups.
49
+ */
50
+ const groupList = query({
51
+ args: {
52
+ where: v.optional(v.object({
53
+ slug: v.optional(v.string()),
54
+ type: v.optional(v.string()),
55
+ parentGroupId: v.optional(v.id("Group")),
56
+ name: v.optional(v.string()),
57
+ isRoot: v.optional(v.boolean()),
58
+ tagsAll: v.optional(v.array(vTag)),
59
+ tagsAny: v.optional(v.array(vTag))
60
+ })),
61
+ limit: v.optional(v.number()),
62
+ cursor: v.optional(v.union(v.string(), v.null())),
63
+ orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("name"), v.literal("slug"), v.literal("type"))),
64
+ order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
65
+ },
66
+ returns: vPaginated(vGroupDoc),
67
+ handler: async (ctx, args) => {
68
+ const where = args.where ?? {};
69
+ const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
70
+ const order = args.order ?? "desc";
71
+ let tagFilteredIds = null;
72
+ if (where.tagsAll && where.tagsAll.length > 0) {
73
+ let allSet = null;
74
+ for (const rawTag of where.tagsAll) {
75
+ const t = normalizeTag(rawTag);
76
+ const rows = await ctx.db.query("GroupTag").withIndex("by_key_value", (idx) => idx.eq("key", t.key).eq("value", t.value)).collect();
77
+ const ids = new Set(rows.map((r) => r.group_id));
78
+ if (allSet === null) allSet = ids;
79
+ else for (const id of allSet) if (!ids.has(id)) allSet.delete(id);
80
+ if (allSet.size === 0) break;
81
+ }
82
+ tagFilteredIds = allSet ?? /* @__PURE__ */ new Set();
83
+ }
84
+ if (where.tagsAny && where.tagsAny.length > 0) {
85
+ const anySet = /* @__PURE__ */ new Set();
86
+ for (const rawTag of where.tagsAny) {
87
+ const t = normalizeTag(rawTag);
88
+ const rows = await ctx.db.query("GroupTag").withIndex("by_key_value", (idx) => idx.eq("key", t.key).eq("value", t.value)).collect();
89
+ for (const r of rows) anySet.add(r.group_id);
90
+ }
91
+ if (tagFilteredIds !== null) {
92
+ for (const id of tagFilteredIds) if (!anySet.has(id)) tagFilteredIds.delete(id);
93
+ } else tagFilteredIds = anySet;
94
+ }
95
+ let q;
96
+ if (where.type !== void 0 && where.parentGroupId !== void 0) q = ctx.db.query("Group").withIndex("type_parent_group_id", (idx) => idx.eq("type", where.type).eq("parentGroupId", where.parentGroupId));
97
+ else if (where.slug !== void 0) q = ctx.db.query("Group").withIndex("slug", (idx) => idx.eq("slug", where.slug));
98
+ else if (where.type !== void 0) q = ctx.db.query("Group").withIndex("type", (idx) => idx.eq("type", where.type));
99
+ else if (where.parentGroupId !== void 0) q = ctx.db.query("Group").withIndex("parent_group_id", (idx) => idx.eq("parentGroupId", where.parentGroupId));
100
+ else q = ctx.db.query("Group");
101
+ if (where.name !== void 0) q = q.filter((f) => f.eq(f.field("name"), where.name));
102
+ if (where.isRoot === true) q = q.filter((f) => f.eq(f.field("parentGroupId"), void 0));
103
+ else if (where.isRoot === false) q = q.filter((f) => f.neq(f.field("parentGroupId"), void 0));
104
+ if (where.slug !== void 0 && where.type !== void 0) q = q.filter((f) => f.eq(f.field("slug"), where.slug));
105
+ q = q.order(order);
106
+ let all = await q.collect();
107
+ if (tagFilteredIds !== null) all = all.filter((doc) => tagFilteredIds.has(doc._id));
108
+ let startIdx = 0;
109
+ if (args.cursor) {
110
+ const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
111
+ if (cursorIdx !== -1) startIdx = cursorIdx + 1;
112
+ }
113
+ const page = all.slice(startIdx, startIdx + limit + 1);
114
+ const hasMore = page.length > limit;
115
+ const items = hasMore ? page.slice(0, limit) : page;
116
+ return {
117
+ items,
118
+ nextCursor: hasMore ? items[items.length - 1]._id : null
119
+ };
120
+ }
121
+ });
122
+ /** Update a group's fields (name, slug, tags, extend, parentGroupId). */
123
+ const groupUpdate = mutation({
124
+ args: {
125
+ groupId: v.id("Group"),
126
+ data: v.any()
127
+ },
128
+ returns: v.null(),
129
+ handler: async (ctx, { groupId, data }) => {
130
+ if (data.tags !== void 0) {
131
+ const normalizedTags = Array.isArray(data.tags) ? normalizeTags(data.tags) : [];
132
+ const existingTags = await ctx.db.query("GroupTag").withIndex("by_group", (idx) => idx.eq("group_id", groupId)).collect();
133
+ for (const existing of existingTags) await ctx.db.delete("GroupTag", existing._id);
134
+ for (const tag of normalizedTags) await ctx.db.insert("GroupTag", {
135
+ group_id: groupId,
136
+ key: tag.key,
137
+ value: tag.value
138
+ });
139
+ await ctx.db.patch("Group", groupId, {
140
+ ...data,
141
+ tags: normalizedTags.length > 0 ? normalizedTags : void 0
142
+ });
143
+ } else await ctx.db.patch("Group", groupId, data);
144
+ return null;
145
+ }
146
+ });
147
+ /**
148
+ * Delete a group and all of its descendants. This cascades to:
149
+ * - All child groups (recursively)
150
+ * - All members of this group and its descendants
151
+ * - All invites for this group and its descendants
152
+ */
153
+ const groupDelete = mutation({
154
+ args: { groupId: v.id("Group") },
155
+ returns: v.null(),
156
+ handler: async (ctx, { groupId }) => {
157
+ const deleteGroup = async (id) => {
158
+ const children = await ctx.db.query("Group").withIndex("parent_group_id", (q) => q.eq("parentGroupId", id)).collect();
159
+ for (const child of children) await deleteGroup(child._id);
160
+ const members = await ctx.db.query("GroupMember").withIndex("group_id", (q) => q.eq("groupId", id)).collect();
161
+ for (const member of members) await ctx.db.delete("GroupMember", member._id);
162
+ const invites = await ctx.db.query("GroupInvite").withIndex("group_id", (q) => q.eq("groupId", id)).collect();
163
+ for (const invite of invites) await ctx.db.delete("GroupInvite", invite._id);
164
+ const tags = await ctx.db.query("GroupTag").withIndex("by_group", (q) => q.eq("group_id", id)).collect();
165
+ for (const tag of tags) await ctx.db.delete("GroupTag", tag._id);
166
+ await ctx.db.delete("Group", id);
167
+ };
168
+ await deleteGroup(groupId);
169
+ return null;
170
+ }
171
+ });
172
+ /**
173
+ * Add a user as a member of a group.
174
+ *
175
+ * The `roleIds` field stores application-defined role identifiers. The auth
176
+ * component stores assignments but does not enforce access control — your
177
+ * application defines what each role means.
178
+ *
179
+ * Throws `ConvexError` with code `DUPLICATE_MEMBERSHIP` when the user is
180
+ * already a member of the target group.
181
+ *
182
+ * @returns The ID of the new member record.
183
+ */
184
+ const memberAdd = mutation({
185
+ args: {
186
+ groupId: v.id("Group"),
187
+ userId: v.id("User"),
188
+ roleIds: v.optional(v.array(v.string())),
189
+ status: v.optional(v.string()),
190
+ extend: v.optional(v.any())
191
+ },
192
+ returns: v.id("GroupMember"),
193
+ handler: async (ctx, args) => {
194
+ const existingMembership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", args.groupId).eq("userId", args.userId)).unique();
195
+ if (existingMembership !== null) throw new ConvexError({
196
+ code: "DUPLICATE_MEMBERSHIP",
197
+ message: "User is already a member of this group",
198
+ groupId: args.groupId,
199
+ userId: args.userId,
200
+ existingMemberId: existingMembership._id
201
+ });
202
+ return await ctx.db.insert("GroupMember", args);
203
+ }
204
+ });
205
+ /** Retrieve a member record by its document ID. Returns `null` if not found. */
206
+ const memberGet = query({
207
+ args: { memberId: v.id("GroupMember") },
208
+ returns: v.union(vGroupMemberDoc, v.null()),
209
+ handler: async (ctx, { memberId }) => {
210
+ return await ctx.db.get("GroupMember", memberId);
211
+ }
212
+ });
213
+ /**
214
+ * List members with optional filtering, sorting, and pagination.
215
+ *
216
+ * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
217
+ * `userId`, `roleId`, and `status`.
218
+ */
219
+ const memberList = query({
220
+ args: {
221
+ where: v.optional(v.object({
222
+ groupId: v.optional(v.id("Group")),
223
+ userId: v.optional(v.id("User")),
224
+ roleId: v.optional(v.string()),
225
+ status: v.optional(v.string())
226
+ })),
227
+ limit: v.optional(v.number()),
228
+ cursor: v.optional(v.union(v.string(), v.null())),
229
+ orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("status"))),
230
+ order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
231
+ },
232
+ returns: vPaginated(vGroupMemberDoc),
233
+ handler: async (ctx, args) => {
234
+ const where = args.where ?? {};
235
+ const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
236
+ const order = args.order ?? "desc";
237
+ let q;
238
+ if (where.groupId !== void 0 && where.userId !== void 0) q = ctx.db.query("GroupMember").withIndex("group_id_user_id", (idx) => idx.eq("groupId", where.groupId).eq("userId", where.userId));
239
+ else if (where.groupId !== void 0) q = ctx.db.query("GroupMember").withIndex("group_id", (idx) => idx.eq("groupId", where.groupId));
240
+ else if (where.userId !== void 0) q = ctx.db.query("GroupMember").withIndex("user_id", (idx) => idx.eq("userId", where.userId));
241
+ else q = ctx.db.query("GroupMember");
242
+ if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
243
+ q = q.order(order);
244
+ let all = await q.collect();
245
+ if (where.roleId !== void 0) all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId));
246
+ let startIdx = 0;
247
+ if (args.cursor) {
248
+ const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
249
+ if (cursorIdx !== -1) startIdx = cursorIdx + 1;
250
+ }
251
+ const page = all.slice(startIdx, startIdx + limit + 1);
252
+ const hasMore = page.length > limit;
253
+ const items = hasMore ? page.slice(0, limit) : page;
254
+ return {
255
+ items,
256
+ nextCursor: hasMore ? items[items.length - 1]._id : null
257
+ };
258
+ }
259
+ });
260
+ /**
261
+ * @deprecated Use `memberList` with `where: { userId }` instead.
262
+ * Kept for backward compatibility with generated component types.
263
+ */
264
+ const memberListByUser = query({
265
+ args: { userId: v.id("User") },
266
+ returns: v.array(vGroupMemberDoc),
267
+ handler: async (ctx, { userId }) => {
268
+ return await ctx.db.query("GroupMember").withIndex("user_id", (q) => q.eq("userId", userId)).collect();
269
+ }
270
+ });
271
+ /**
272
+ * Look up a specific user's membership in a specific group.
273
+ * Returns `null` if the user is not a member of the group.
274
+ */
275
+ const memberGetByGroupAndUser = query({
276
+ args: {
277
+ groupId: v.id("Group"),
278
+ userId: v.id("User")
279
+ },
280
+ returns: v.union(vGroupMemberDoc, v.null()),
281
+ handler: async (ctx, { groupId, userId }) => {
282
+ return await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", groupId).eq("userId", userId)).unique();
283
+ }
284
+ });
285
+ /** Remove a member from a group by deleting the member record. */
286
+ const memberRemove = mutation({
287
+ args: { memberId: v.id("GroupMember") },
288
+ returns: v.null(),
289
+ handler: async (ctx, { memberId }) => {
290
+ await ctx.db.delete("GroupMember", memberId);
291
+ return null;
292
+ }
293
+ });
294
+ /**
295
+ * Update a member record's fields (roleIds, status, extend).
296
+ */
297
+ const memberUpdate = mutation({
298
+ args: {
299
+ memberId: v.id("GroupMember"),
300
+ data: v.any()
301
+ },
302
+ returns: v.null(),
303
+ handler: async (ctx, { memberId, data }) => {
304
+ await ctx.db.patch("GroupMember", memberId, data);
305
+ return null;
306
+ }
307
+ });
308
+ /**
309
+ * Create a new platform-level invitation. Optionally set `groupId` to tie
310
+ * the invite to a specific group. The invitation is sent to an email address
311
+ * and includes a hashed token for secure acceptance.
312
+ *
313
+ * Throws `ConvexError` with code `DUPLICATE_INVITE` when a pending invite
314
+ * already exists for the same email and scope:
315
+ * - group invite: same `email` + same `groupId`
316
+ * - platform invite: same `email` with no `groupId`
317
+ *
318
+ * @returns The ID of the new invite record.
319
+ */
320
+ const inviteCreate = mutation({
321
+ args: {
322
+ groupId: v.optional(v.id("Group")),
323
+ invitedByUserId: v.optional(v.id("User")),
324
+ email: v.optional(v.string()),
325
+ tokenHash: v.string(),
326
+ roleIds: v.optional(v.array(v.string())),
327
+ status: vInviteStatus,
328
+ expiresTime: v.optional(v.number()),
329
+ extend: v.optional(v.any())
330
+ },
331
+ returns: v.id("GroupInvite"),
332
+ handler: async (ctx, args) => {
333
+ const now = Date.now();
334
+ if (args.email !== void 0) if (args.groupId !== void 0) {
335
+ const existingGroupInvites = await ctx.db.query("GroupInvite").withIndex("group_id_status", (q) => q.eq("groupId", args.groupId).eq("status", "pending")).filter((q) => q.eq(q.field("email"), args.email)).collect();
336
+ for (const existingGroupInvite of existingGroupInvites) {
337
+ if (existingGroupInvite.expiresTime !== void 0 && existingGroupInvite.expiresTime <= now) {
338
+ await ctx.db.patch("GroupInvite", existingGroupInvite._id, { status: "expired" });
339
+ continue;
340
+ }
341
+ throw new ConvexError({
342
+ code: "DUPLICATE_INVITE",
343
+ message: "A pending invite already exists for this email in this group",
344
+ email: args.email,
345
+ groupId: args.groupId,
346
+ existingInviteId: existingGroupInvite._id
347
+ });
348
+ }
349
+ } else {
350
+ const existingPlatformInvites = await ctx.db.query("GroupInvite").withIndex("email_status", (q) => q.eq("email", args.email).eq("status", "pending")).filter((q) => q.eq(q.field("groupId"), void 0)).collect();
351
+ for (const existingPlatformInvite of existingPlatformInvites) {
352
+ if (existingPlatformInvite.expiresTime !== void 0 && existingPlatformInvite.expiresTime <= now) {
353
+ await ctx.db.patch("GroupInvite", existingPlatformInvite._id, { status: "expired" });
354
+ continue;
355
+ }
356
+ throw new ConvexError({
357
+ code: "DUPLICATE_INVITE",
358
+ message: "A pending platform invite already exists for this email",
359
+ email: args.email,
360
+ existingInviteId: existingPlatformInvite._id
361
+ });
362
+ }
363
+ }
364
+ return await ctx.db.insert("GroupInvite", args);
365
+ }
366
+ });
367
+ /** Retrieve an invite by its document ID. Returns `null` if not found. */
368
+ const inviteGet = query({
369
+ args: { inviteId: v.id("GroupInvite") },
370
+ returns: v.union(vGroupInviteDoc, v.null()),
371
+ handler: async (ctx, { inviteId }) => {
372
+ return await ctx.db.get("GroupInvite", inviteId);
373
+ }
374
+ });
375
+ /** Retrieve an invite by hashed token. Returns `null` if not found. */
376
+ const inviteGetByTokenHash = query({
377
+ args: { tokenHash: v.string() },
378
+ returns: v.union(vGroupInviteDoc, v.null()),
379
+ handler: async (ctx, { tokenHash }) => {
380
+ return await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
381
+ }
382
+ });
383
+ /**
384
+ * List invites with optional filtering, sorting, and pagination.
385
+ *
386
+ * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
387
+ * `status`, `email`, `invitedByUserId`, `roleId`, `acceptedByUserId`, and `tokenHash`.
388
+ */
389
+ const inviteList = query({
390
+ args: {
391
+ where: v.optional(v.object({
392
+ tokenHash: v.optional(v.string()),
393
+ groupId: v.optional(v.id("Group")),
394
+ status: v.optional(vInviteStatus),
395
+ email: v.optional(v.string()),
396
+ invitedByUserId: v.optional(v.id("User")),
397
+ roleId: v.optional(v.string()),
398
+ acceptedByUserId: v.optional(v.id("User"))
399
+ })),
400
+ limit: v.optional(v.number()),
401
+ cursor: v.optional(v.union(v.string(), v.null())),
402
+ orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("status"), v.literal("email"), v.literal("expiresTime"), v.literal("acceptedTime"))),
403
+ order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
404
+ },
405
+ returns: vPaginated(vGroupInviteDoc),
406
+ handler: async (ctx, args) => {
407
+ const where = args.where ?? {};
408
+ const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
409
+ const order = args.order ?? "desc";
410
+ let q;
411
+ if (where.tokenHash !== void 0) q = ctx.db.query("GroupInvite").withIndex("token_hash", (idx) => idx.eq("tokenHash", where.tokenHash));
412
+ else if (where.groupId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id_status", (idx) => idx.eq("groupId", where.groupId).eq("status", where.status));
413
+ else if (where.email !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("email_status", (idx) => idx.eq("email", where.email).eq("status", where.status));
414
+ else if (where.invitedByUserId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("invited_by_user_id_status", (idx) => idx.eq("invitedByUserId", where.invitedByUserId).eq("status", where.status));
415
+ else if (where.groupId !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id", (idx) => idx.eq("groupId", where.groupId));
416
+ else if (where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("status", (idx) => idx.eq("status", where.status));
417
+ else q = ctx.db.query("GroupInvite");
418
+ if (where.groupId !== void 0) q = q.filter((f) => f.eq(f.field("groupId"), where.groupId));
419
+ if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
420
+ if (where.email !== void 0) q = q.filter((f) => f.eq(f.field("email"), where.email));
421
+ if (where.invitedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("invitedByUserId"), where.invitedByUserId));
422
+ if (where.acceptedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("acceptedByUserId"), where.acceptedByUserId));
423
+ if (where.tokenHash !== void 0) q = q.filter((f) => f.eq(f.field("tokenHash"), where.tokenHash));
424
+ q = q.order(order);
425
+ let all = await q.collect();
426
+ if (where.roleId !== void 0) all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId));
427
+ let startIdx = 0;
428
+ if (args.cursor) {
429
+ const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
430
+ if (cursorIdx !== -1) startIdx = cursorIdx + 1;
431
+ }
432
+ const page = all.slice(startIdx, startIdx + limit + 1);
433
+ const hasMore = page.length > limit;
434
+ const items = hasMore ? page.slice(0, limit) : page;
435
+ return {
436
+ items,
437
+ nextCursor: hasMore ? items[items.length - 1]._id : null
438
+ };
439
+ }
440
+ });
441
+ /**
442
+ * Accept a pending invitation.
443
+ *
444
+ * Marks the invite as "accepted" and records the acceptance timestamp.
445
+ * Throws a structured `ConvexError` when the invite doesn't exist or is not
446
+ * currently pending.
447
+ *
448
+ * The caller is responsible for creating the corresponding member record.
449
+ */
450
+ const inviteAccept = mutation({
451
+ args: {
452
+ inviteId: v.id("GroupInvite"),
453
+ acceptedByUserId: v.optional(v.id("User"))
454
+ },
455
+ returns: v.null(),
456
+ handler: async (ctx, { inviteId, acceptedByUserId }) => {
457
+ const invite = await ctx.db.get("GroupInvite", inviteId);
458
+ if (invite === null) throw new ConvexError({
459
+ code: "INVITE_NOT_FOUND",
460
+ message: "Invite not found",
461
+ inviteId
462
+ });
463
+ if (invite.status !== "pending") throw new ConvexError({
464
+ code: "INVITE_NOT_PENDING",
465
+ message: `Cannot accept invite with status "${invite.status}"`,
466
+ inviteId,
467
+ currentStatus: invite.status
468
+ });
469
+ if (invite.expiresTime !== void 0 && invite.expiresTime <= Date.now()) {
470
+ await ctx.db.patch("GroupInvite", inviteId, { status: "expired" });
471
+ throw new ConvexError({
472
+ code: "INVITE_EXPIRED",
473
+ message: "Invite has expired",
474
+ inviteId
475
+ });
476
+ }
477
+ await ctx.db.patch("GroupInvite", inviteId, {
478
+ status: "accepted",
479
+ acceptedTime: Date.now(),
480
+ ...acceptedByUserId ? { acceptedByUserId } : {}
481
+ });
482
+ return null;
483
+ }
484
+ });
485
+ /**
486
+ * Accept an invitation by raw token hash and atomically join group membership.
487
+ *
488
+ * Returns idempotent success when the invite was already accepted by the same
489
+ * user. If the invite targets a group, this mutation also ensures membership.
490
+ */
491
+ const inviteAcceptByToken = mutation({
492
+ args: {
493
+ tokenHash: v.string(),
494
+ acceptedByUserId: v.id("User")
495
+ },
496
+ returns: vInviteAcceptByTokenResult,
497
+ handler: async (ctx, { tokenHash, acceptedByUserId }) => {
498
+ const invite = await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
499
+ if (invite === null) throw new ConvexError({
500
+ code: "INVITE_NOT_FOUND",
501
+ message: "Invite not found"
502
+ });
503
+ const now = Date.now();
504
+ if (invite.status === "pending") {
505
+ if (invite.expiresTime !== void 0 && invite.expiresTime <= now) {
506
+ await ctx.db.patch("GroupInvite", invite._id, { status: "expired" });
507
+ throw new ConvexError({
508
+ code: "INVITE_EXPIRED",
509
+ message: "Invite has expired",
510
+ inviteId: invite._id
511
+ });
512
+ }
513
+ } else if (invite.status === "accepted") {
514
+ if (invite.acceptedByUserId !== acceptedByUserId) throw new ConvexError({
515
+ code: "INVITE_ALREADY_ACCEPTED",
516
+ message: "Invite already accepted by another user",
517
+ inviteId: invite._id
518
+ });
519
+ } else throw new ConvexError({
520
+ code: "INVITE_NOT_PENDING",
521
+ message: `Cannot accept invite with status "${invite.status}"`,
522
+ inviteId: invite._id,
523
+ currentStatus: invite.status
524
+ });
525
+ if (invite.email !== void 0) {
526
+ const user = await ctx.db.get("User", acceptedByUserId);
527
+ const normalizedInviteEmail = invite.email.trim().toLowerCase();
528
+ const normalizedUserEmail = user?.email?.trim().toLowerCase();
529
+ if (normalizedUserEmail === void 0 || normalizedUserEmail !== normalizedInviteEmail) throw new ConvexError({
530
+ code: "INVITE_EMAIL_MISMATCH",
531
+ message: "Invite email does not match accepting user's email",
532
+ inviteId: invite._id
533
+ });
534
+ }
535
+ let membershipStatus = "not_applicable";
536
+ let memberId;
537
+ if (invite.groupId !== void 0) {
538
+ const existingMembership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", invite.groupId).eq("userId", acceptedByUserId)).unique();
539
+ if (existingMembership !== null) {
540
+ membershipStatus = "already_joined";
541
+ memberId = existingMembership._id;
542
+ } else {
543
+ memberId = await ctx.db.insert("GroupMember", {
544
+ groupId: invite.groupId,
545
+ userId: acceptedByUserId,
546
+ roleIds: invite.roleIds,
547
+ status: "active"
548
+ });
549
+ membershipStatus = "joined";
550
+ }
551
+ }
552
+ if (invite.status === "pending") await ctx.db.patch("GroupInvite", invite._id, {
553
+ status: "accepted",
554
+ acceptedByUserId,
555
+ acceptedTime: now
556
+ });
557
+ const inviteStatus = invite.status === "accepted" ? "already_accepted" : "accepted";
558
+ return {
559
+ inviteId: invite._id,
560
+ groupId: invite.groupId ?? null,
561
+ memberId,
562
+ inviteStatus,
563
+ membershipStatus
564
+ };
565
+ }
566
+ });
567
+ /**
568
+ * Revoke a pending invitation.
569
+ *
570
+ * Marks the invite as "revoked". Throws a structured `ConvexError` when the
571
+ * invite doesn't exist or is not currently pending.
572
+ */
573
+ const inviteRevoke = mutation({
574
+ args: { inviteId: v.id("GroupInvite") },
575
+ returns: v.null(),
576
+ handler: async (ctx, { inviteId }) => {
577
+ const invite = await ctx.db.get("GroupInvite", inviteId);
578
+ if (invite === null) throw new ConvexError({
579
+ code: "INVITE_NOT_FOUND",
580
+ message: "Invite not found",
581
+ inviteId
582
+ });
583
+ if (invite.status !== "pending") throw new ConvexError({
584
+ code: "INVITE_NOT_PENDING",
585
+ message: `Cannot revoke invite with status "${invite.status}"`,
586
+ inviteId,
587
+ currentStatus: invite.status
588
+ });
589
+ await ctx.db.patch("GroupInvite", inviteId, { status: "revoked" });
590
+ return null;
591
+ }
592
+ });
593
+
594
+ //#endregion
595
+ export { groupCreate, groupDelete, groupGet, groupList, groupUpdate, inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke, memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberListByUser, memberRemove, memberUpdate };
596
+ //# sourceMappingURL=groups.js.map