@robelest/convex-auth 0.0.4-preview.18 → 0.0.4-preview.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (541) hide show
  1. package/README.md +6 -3
  2. package/dist/authorization/index.d.ts +46 -0
  3. package/dist/authorization/index.d.ts.map +1 -1
  4. package/dist/authorization/index.js +46 -0
  5. package/dist/authorization/index.js.map +1 -1
  6. package/dist/bin.cjs +21 -13
  7. package/dist/client/core/types.d.ts +20 -0
  8. package/dist/client/core/types.d.ts.map +1 -0
  9. package/dist/client/index.d.ts +2 -16
  10. package/dist/client/index.d.ts.map +1 -1
  11. package/dist/client/index.js +67 -565
  12. package/dist/client/index.js.map +1 -1
  13. package/dist/component/_generated/api.d.ts +40 -12
  14. package/dist/component/_generated/api.d.ts.map +1 -1
  15. package/dist/component/_generated/api.js.map +1 -1
  16. package/dist/component/_generated/component.d.ts +1306 -1344
  17. package/dist/component/_generated/component.d.ts.map +1 -1
  18. package/dist/component/client/core/types.d.ts +2 -0
  19. package/dist/component/client/index.d.ts +2 -2
  20. package/dist/component/model.d.ts +80 -80
  21. package/dist/component/model.d.ts.map +1 -1
  22. package/dist/component/model.js +5 -1
  23. package/dist/component/model.js.map +1 -1
  24. package/dist/component/providers/credentials.d.ts +3 -2
  25. package/dist/component/providers/credentials.d.ts.map +1 -1
  26. package/dist/component/providers/email.d.ts +30 -0
  27. package/dist/component/providers/email.d.ts.map +1 -1
  28. package/dist/component/providers/phone.d.ts +28 -0
  29. package/dist/component/providers/phone.d.ts.map +1 -1
  30. package/dist/component/public/enterprise/audit.d.ts +73 -0
  31. package/dist/component/public/enterprise/audit.d.ts.map +1 -0
  32. package/dist/component/public/enterprise/audit.js +108 -0
  33. package/dist/component/public/enterprise/audit.js.map +1 -0
  34. package/dist/component/public/enterprise/core.d.ts +176 -0
  35. package/dist/component/public/enterprise/core.d.ts.map +1 -0
  36. package/dist/component/public/enterprise/core.js +292 -0
  37. package/dist/component/public/enterprise/core.js.map +1 -0
  38. package/dist/component/public/enterprise/domains.d.ts +174 -0
  39. package/dist/component/public/enterprise/domains.d.ts.map +1 -0
  40. package/dist/component/public/enterprise/domains.js +271 -0
  41. package/dist/component/public/enterprise/domains.js.map +1 -0
  42. package/dist/component/public/enterprise/scim.d.ts +245 -0
  43. package/dist/component/public/enterprise/scim.d.ts.map +1 -0
  44. package/dist/component/public/enterprise/scim.js +344 -0
  45. package/dist/component/public/enterprise/scim.js.map +1 -0
  46. package/dist/component/public/enterprise/secrets.d.ts +78 -0
  47. package/dist/component/public/enterprise/secrets.d.ts.map +1 -0
  48. package/dist/component/public/enterprise/secrets.js +118 -0
  49. package/dist/component/public/enterprise/secrets.js.map +1 -0
  50. package/dist/component/public/enterprise/webhooks.d.ts +211 -0
  51. package/dist/component/public/enterprise/webhooks.d.ts.map +1 -0
  52. package/dist/component/public/enterprise/webhooks.js +300 -0
  53. package/dist/component/public/enterprise/webhooks.js.map +1 -0
  54. package/dist/component/public/factors/devices.d.ts +157 -0
  55. package/dist/component/public/factors/devices.d.ts.map +1 -0
  56. package/dist/component/public/factors/devices.js +216 -0
  57. package/dist/component/public/factors/devices.js.map +1 -0
  58. package/dist/component/public/factors/passkeys.d.ts +175 -0
  59. package/dist/component/public/factors/passkeys.d.ts.map +1 -0
  60. package/dist/component/public/factors/passkeys.js +238 -0
  61. package/dist/component/public/factors/passkeys.js.map +1 -0
  62. package/dist/component/public/factors/totp.d.ts +189 -0
  63. package/dist/component/public/factors/totp.d.ts.map +1 -0
  64. package/dist/component/public/factors/totp.js +254 -0
  65. package/dist/component/public/factors/totp.js.map +1 -0
  66. package/dist/component/public/groups/core.d.ts +137 -0
  67. package/dist/component/public/groups/core.d.ts.map +1 -0
  68. package/dist/component/public/groups/core.js +321 -0
  69. package/dist/component/public/groups/core.js.map +1 -0
  70. package/dist/component/public/groups/invites.d.ts +217 -0
  71. package/dist/component/public/groups/invites.d.ts.map +1 -0
  72. package/dist/component/public/groups/invites.js +457 -0
  73. package/dist/component/public/groups/invites.js.map +1 -0
  74. package/dist/component/public/groups/members.d.ts +204 -0
  75. package/dist/component/public/groups/members.d.ts.map +1 -0
  76. package/dist/component/public/groups/members.js +355 -0
  77. package/dist/component/public/groups/members.js.map +1 -0
  78. package/dist/component/public/identity/accounts.d.ts +147 -0
  79. package/dist/component/public/identity/accounts.d.ts.map +1 -0
  80. package/dist/component/public/identity/accounts.js +200 -0
  81. package/dist/component/public/identity/accounts.js.map +1 -0
  82. package/dist/component/public/identity/codes.d.ts +104 -0
  83. package/dist/component/public/identity/codes.d.ts.map +1 -0
  84. package/dist/component/public/identity/codes.js +140 -0
  85. package/dist/component/public/identity/codes.js.map +1 -0
  86. package/dist/component/public/identity/sessions.d.ts +128 -0
  87. package/dist/component/public/identity/sessions.d.ts.map +1 -0
  88. package/dist/component/public/identity/sessions.js +192 -0
  89. package/dist/component/public/identity/sessions.js.map +1 -0
  90. package/dist/component/public/identity/tokens.d.ts +169 -0
  91. package/dist/component/public/identity/tokens.d.ts.map +1 -0
  92. package/dist/component/public/identity/tokens.js +227 -0
  93. package/dist/component/public/identity/tokens.js.map +1 -0
  94. package/dist/component/public/identity/users.d.ts +212 -0
  95. package/dist/component/public/identity/users.d.ts.map +1 -0
  96. package/dist/component/public/identity/users.js +311 -0
  97. package/dist/component/public/identity/users.js.map +1 -0
  98. package/dist/component/public/identity/verifiers.d.ts +116 -0
  99. package/dist/component/public/identity/verifiers.d.ts.map +1 -0
  100. package/dist/component/public/identity/verifiers.js +154 -0
  101. package/dist/component/public/identity/verifiers.js.map +1 -0
  102. package/dist/component/public/security/keys.d.ts +209 -0
  103. package/dist/component/public/security/keys.d.ts.map +1 -0
  104. package/dist/component/public/security/keys.js +319 -0
  105. package/dist/component/public/security/keys.js.map +1 -0
  106. package/dist/component/public/security/limits.d.ts +114 -0
  107. package/dist/component/public/security/limits.d.ts.map +1 -0
  108. package/dist/component/public/security/limits.js +169 -0
  109. package/dist/component/public/security/limits.js.map +1 -0
  110. package/dist/component/public.d.ts +22 -7
  111. package/dist/component/public.js +21 -6
  112. package/dist/component/schema.d.ts +288 -288
  113. package/dist/component/server/auth.d.ts +212 -25
  114. package/dist/component/server/auth.d.ts.map +1 -1
  115. package/dist/component/server/auth.js +68 -4
  116. package/dist/component/server/auth.js.map +1 -1
  117. package/dist/component/server/authError.js +34 -0
  118. package/dist/component/server/authError.js.map +1 -0
  119. package/dist/component/server/{providers.js → config.js} +2 -2
  120. package/dist/component/server/config.js.map +1 -0
  121. package/dist/component/server/{domains/core.js → core.js} +107 -88
  122. package/dist/component/server/core.js.map +1 -0
  123. package/dist/component/server/{provider.js → crypto.js} +3 -3
  124. package/dist/component/server/crypto.js.map +1 -0
  125. package/dist/component/server/device.js +1 -1
  126. package/dist/component/server/device.js.map +1 -1
  127. package/dist/component/server/enterprise/config.js +46 -0
  128. package/dist/component/server/enterprise/config.js.map +1 -0
  129. package/dist/component/server/{domains/sso.js → enterprise/domain.js} +6 -5
  130. package/dist/component/server/enterprise/domain.js.map +1 -0
  131. package/dist/component/server/enterprise/http.js +766 -0
  132. package/dist/component/server/enterprise/http.js.map +1 -0
  133. package/dist/component/server/enterprise/oidc.js +248 -0
  134. package/dist/component/server/enterprise/oidc.js.map +1 -0
  135. package/dist/component/server/enterprise/policy.js +85 -0
  136. package/dist/component/server/enterprise/policy.js.map +1 -0
  137. package/dist/component/server/enterprise/saml.js +338 -0
  138. package/dist/component/server/enterprise/saml.js.map +1 -0
  139. package/dist/component/server/enterprise/scim.js +97 -0
  140. package/dist/component/server/enterprise/scim.js.map +1 -0
  141. package/dist/component/server/enterprise/shared.js +51 -0
  142. package/dist/component/server/enterprise/shared.js.map +1 -0
  143. package/dist/component/server/errors.js.map +1 -1
  144. package/dist/component/server/http.js +2 -1
  145. package/dist/component/server/http.js.map +1 -1
  146. package/dist/component/server/identity.js +1 -1
  147. package/dist/component/server/identity.js.map +1 -1
  148. package/dist/component/server/{ratelimit.js → limits.js} +3 -3
  149. package/dist/component/server/limits.js.map +1 -0
  150. package/dist/component/server/mutations/account.js +3 -3
  151. package/dist/component/server/mutations/account.js.map +1 -1
  152. package/dist/component/server/mutations/code.js +2 -2
  153. package/dist/component/server/mutations/code.js.map +1 -1
  154. package/dist/component/server/mutations/invalidate.js +1 -1
  155. package/dist/component/server/mutations/invalidate.js.map +1 -1
  156. package/dist/component/server/mutations/oauth.js +5 -3
  157. package/dist/component/server/mutations/oauth.js.map +1 -1
  158. package/dist/component/server/mutations/refresh.js +1 -1
  159. package/dist/component/server/mutations/refresh.js.map +1 -1
  160. package/dist/component/server/mutations/register.js +3 -3
  161. package/dist/component/server/mutations/register.js.map +1 -1
  162. package/dist/component/server/mutations/retrieve.js +4 -4
  163. package/dist/component/server/mutations/retrieve.js.map +1 -1
  164. package/dist/component/server/mutations/signature.js +2 -2
  165. package/dist/component/server/mutations/signature.js.map +1 -1
  166. package/dist/component/server/mutations/signin.js +1 -1
  167. package/dist/component/server/mutations/signin.js.map +1 -1
  168. package/dist/component/server/mutations/signout.js +1 -1
  169. package/dist/component/server/mutations/signout.js.map +1 -1
  170. package/dist/component/server/mutations/store/refs.js +15 -0
  171. package/dist/component/server/mutations/store/refs.js.map +1 -0
  172. package/dist/component/server/mutations/store.js +80 -10
  173. package/dist/component/server/mutations/store.js.map +1 -1
  174. package/dist/component/server/mutations/verifier.js +1 -1
  175. package/dist/component/server/mutations/verifier.js.map +1 -1
  176. package/dist/component/server/mutations/verify.js +4 -3
  177. package/dist/component/server/mutations/verify.js.map +1 -1
  178. package/dist/component/server/oauth.js +1 -1
  179. package/dist/component/server/oauth.js.map +1 -1
  180. package/dist/component/server/passkey.js +2 -1
  181. package/dist/component/server/passkey.js.map +1 -1
  182. package/dist/component/server/redirects.js +1 -1
  183. package/dist/component/server/redirects.js.map +1 -1
  184. package/dist/component/server/refresh.js +1 -1
  185. package/dist/component/server/refresh.js.map +1 -1
  186. package/dist/component/server/{factory.d.ts → runtime.d.ts} +2 -2
  187. package/dist/component/server/runtime.d.ts.map +1 -0
  188. package/dist/component/server/runtime.js +413 -0
  189. package/dist/component/server/runtime.js.map +1 -0
  190. package/dist/component/server/signin.js +2 -1
  191. package/dist/component/server/signin.js.map +1 -1
  192. package/dist/component/server/totp.js +2 -1
  193. package/dist/component/server/totp.js.map +1 -1
  194. package/dist/component/server/types.d.ts +225 -41
  195. package/dist/component/server/types.d.ts.map +1 -1
  196. package/dist/component/server/types.js.map +1 -1
  197. package/dist/component/server/users.js +1 -1
  198. package/dist/component/server/users.js.map +1 -1
  199. package/dist/component/server/utils.js +1 -1
  200. package/dist/component/server/utils.js.map +1 -1
  201. package/dist/core/types.d.ts +369 -0
  202. package/dist/core/types.d.ts.map +1 -0
  203. package/dist/factors/device.js +105 -0
  204. package/dist/factors/device.js.map +1 -0
  205. package/dist/factors/passkey.js +181 -0
  206. package/dist/factors/passkey.js.map +1 -0
  207. package/dist/factors/totp.js +122 -0
  208. package/dist/factors/totp.js.map +1 -0
  209. package/dist/providers/credentials.d.ts +5 -2
  210. package/dist/providers/credentials.d.ts.map +1 -1
  211. package/dist/providers/credentials.js +2 -0
  212. package/dist/providers/credentials.js.map +1 -1
  213. package/dist/providers/email.d.ts +30 -0
  214. package/dist/providers/email.d.ts.map +1 -1
  215. package/dist/providers/email.js +24 -0
  216. package/dist/providers/email.js.map +1 -1
  217. package/dist/providers/phone.d.ts +28 -0
  218. package/dist/providers/phone.d.ts.map +1 -1
  219. package/dist/providers/phone.js +22 -0
  220. package/dist/providers/phone.js.map +1 -1
  221. package/dist/runtime/browser.js +68 -0
  222. package/dist/runtime/browser.js.map +1 -0
  223. package/dist/runtime/invite.js +51 -0
  224. package/dist/runtime/invite.js.map +1 -0
  225. package/dist/runtime/proxy.js +70 -0
  226. package/dist/runtime/proxy.js.map +1 -0
  227. package/dist/runtime/storage.js +37 -0
  228. package/dist/runtime/storage.js.map +1 -0
  229. package/dist/server/auth.d.ts +218 -28
  230. package/dist/server/auth.d.ts.map +1 -1
  231. package/dist/server/auth.js +68 -4
  232. package/dist/server/auth.js.map +1 -1
  233. package/dist/server/{fx.d.ts → authError.d.ts} +25 -15
  234. package/dist/server/authError.d.ts.map +1 -0
  235. package/dist/server/authError.js +34 -0
  236. package/dist/server/authError.js.map +1 -0
  237. package/dist/server/{providers.js → config.js} +2 -2
  238. package/dist/server/config.js.map +1 -0
  239. package/dist/server/core.d.ts +1436 -0
  240. package/dist/server/core.d.ts.map +1 -0
  241. package/dist/server/{domains/core.js → core.js} +107 -88
  242. package/dist/server/core.js.map +1 -0
  243. package/dist/server/{provider.d.ts → crypto.d.ts} +2 -2
  244. package/dist/server/crypto.d.ts.map +1 -0
  245. package/dist/server/{provider.js → crypto.js} +3 -3
  246. package/dist/{component/server/provider.js.map → server/crypto.js.map} +1 -1
  247. package/dist/server/device.js +1 -1
  248. package/dist/server/device.js.map +1 -1
  249. package/dist/server/enterprise/config.js +46 -0
  250. package/dist/server/enterprise/config.js.map +1 -0
  251. package/dist/server/{domains/sso.d.ts → enterprise/domain.d.ts} +4 -4
  252. package/dist/server/enterprise/domain.d.ts.map +1 -0
  253. package/dist/server/{domains/sso.js → enterprise/domain.js} +6 -5
  254. package/dist/server/enterprise/domain.js.map +1 -0
  255. package/dist/server/enterprise/http.d.ts +26 -0
  256. package/dist/server/enterprise/http.d.ts.map +1 -0
  257. package/dist/server/enterprise/http.js +766 -0
  258. package/dist/server/enterprise/http.js.map +1 -0
  259. package/dist/server/enterprise/oidc.js +248 -0
  260. package/dist/server/enterprise/oidc.js.map +1 -0
  261. package/dist/server/enterprise/policy.js +85 -0
  262. package/dist/server/enterprise/policy.js.map +1 -0
  263. package/dist/server/enterprise/saml.d.ts +1 -0
  264. package/dist/server/enterprise/saml.js +338 -0
  265. package/dist/server/enterprise/saml.js.map +1 -0
  266. package/dist/server/enterprise/scim.d.ts +1 -0
  267. package/dist/server/enterprise/scim.js +97 -0
  268. package/dist/server/enterprise/scim.js.map +1 -0
  269. package/dist/server/enterprise/shared.d.ts +5 -0
  270. package/dist/server/enterprise/shared.d.ts.map +1 -0
  271. package/dist/server/enterprise/shared.js +51 -0
  272. package/dist/server/enterprise/shared.js.map +1 -0
  273. package/dist/server/enterprise/validators.d.ts +1 -0
  274. package/dist/server/{enterpriseValidators.js → enterprise/validators.js} +2 -2
  275. package/dist/server/enterprise/validators.js.map +1 -0
  276. package/dist/server/errors.d.ts +2 -0
  277. package/dist/server/errors.d.ts.map +1 -1
  278. package/dist/server/errors.js +2 -0
  279. package/dist/server/errors.js.map +1 -1
  280. package/dist/server/http.d.ts +2 -2
  281. package/dist/server/http.d.ts.map +1 -1
  282. package/dist/server/http.js +2 -1
  283. package/dist/server/http.js.map +1 -1
  284. package/dist/server/identity.js +1 -1
  285. package/dist/server/identity.js.map +1 -1
  286. package/dist/server/index.d.ts +4 -705
  287. package/dist/server/index.js +4 -1367
  288. package/dist/server/limits.d.ts +1 -0
  289. package/dist/server/{ratelimit.js → limits.js} +3 -3
  290. package/dist/server/limits.js.map +1 -0
  291. package/dist/server/mounts.d.ts +647 -0
  292. package/dist/server/mounts.d.ts.map +1 -0
  293. package/dist/server/mounts.js +643 -0
  294. package/dist/server/mounts.js.map +1 -0
  295. package/dist/server/mutations/account.d.ts +8 -8
  296. package/dist/server/mutations/account.js +3 -3
  297. package/dist/server/mutations/account.js.map +1 -1
  298. package/dist/server/mutations/code.d.ts +13 -13
  299. package/dist/server/mutations/code.js +2 -2
  300. package/dist/server/mutations/code.js.map +1 -1
  301. package/dist/server/mutations/index.d.ts +8 -312
  302. package/dist/server/mutations/index.js +14 -84
  303. package/dist/server/mutations/invalidate.d.ts +5 -5
  304. package/dist/server/mutations/invalidate.d.ts.map +1 -1
  305. package/dist/server/mutations/invalidate.js +1 -1
  306. package/dist/server/mutations/invalidate.js.map +1 -1
  307. package/dist/server/mutations/oauth.d.ts +9 -9
  308. package/dist/server/mutations/oauth.d.ts.map +1 -1
  309. package/dist/server/mutations/oauth.js +5 -3
  310. package/dist/server/mutations/oauth.js.map +1 -1
  311. package/dist/server/mutations/refresh.d.ts +4 -4
  312. package/dist/server/mutations/refresh.js +1 -1
  313. package/dist/server/mutations/refresh.js.map +1 -1
  314. package/dist/server/mutations/register.d.ts +10 -10
  315. package/dist/server/mutations/register.d.ts.map +1 -1
  316. package/dist/server/mutations/register.js +3 -3
  317. package/dist/server/mutations/register.js.map +1 -1
  318. package/dist/server/mutations/retrieve.d.ts +8 -10
  319. package/dist/server/mutations/retrieve.d.ts.map +1 -1
  320. package/dist/server/mutations/retrieve.js +5 -7
  321. package/dist/server/mutations/retrieve.js.map +1 -1
  322. package/dist/server/mutations/signature.d.ts +6 -6
  323. package/dist/server/mutations/signature.d.ts.map +1 -1
  324. package/dist/server/mutations/signature.js +2 -2
  325. package/dist/server/mutations/signature.js.map +1 -1
  326. package/dist/server/mutations/signin.d.ts +1 -1
  327. package/dist/server/mutations/signin.js +1 -1
  328. package/dist/server/mutations/signin.js.map +1 -1
  329. package/dist/server/mutations/signout.d.ts +1 -1
  330. package/dist/server/mutations/signout.js +1 -1
  331. package/dist/server/mutations/signout.js.map +1 -1
  332. package/dist/server/mutations/store/refs.d.ts +12 -0
  333. package/dist/server/mutations/store/refs.d.ts.map +1 -0
  334. package/dist/server/mutations/store/refs.js +15 -0
  335. package/dist/server/mutations/store/refs.js.map +1 -0
  336. package/dist/server/mutations/store.d.ts +303 -9
  337. package/dist/server/mutations/store.d.ts.map +1 -1
  338. package/dist/server/mutations/store.js +80 -10
  339. package/dist/server/mutations/store.js.map +1 -1
  340. package/dist/server/mutations/verifier.d.ts +1 -1
  341. package/dist/server/mutations/verifier.js +1 -1
  342. package/dist/server/mutations/verifier.js.map +1 -1
  343. package/dist/server/mutations/verify.d.ts +8 -8
  344. package/dist/server/mutations/verify.d.ts.map +1 -1
  345. package/dist/server/mutations/verify.js +4 -3
  346. package/dist/server/mutations/verify.js.map +1 -1
  347. package/dist/server/oauth.js +1 -1
  348. package/dist/server/oauth.js.map +1 -1
  349. package/dist/server/passkey.d.ts +2 -2
  350. package/dist/server/passkey.d.ts.map +1 -1
  351. package/dist/server/passkey.js +3 -2
  352. package/dist/server/passkey.js.map +1 -1
  353. package/dist/server/redirects.js +1 -1
  354. package/dist/server/redirects.js.map +1 -1
  355. package/dist/server/refresh.js +1 -1
  356. package/dist/server/refresh.js.map +1 -1
  357. package/dist/server/{factory.d.ts → runtime.d.ts} +16 -16
  358. package/dist/server/runtime.d.ts.map +1 -0
  359. package/dist/server/runtime.js +413 -0
  360. package/dist/server/runtime.js.map +1 -0
  361. package/dist/server/signin.js +3 -2
  362. package/dist/server/signin.js.map +1 -1
  363. package/dist/server/ssr.d.ts +226 -0
  364. package/dist/server/ssr.d.ts.map +1 -0
  365. package/dist/server/ssr.js +786 -0
  366. package/dist/server/ssr.js.map +1 -0
  367. package/dist/server/totp.js +2 -1
  368. package/dist/server/totp.js.map +1 -1
  369. package/dist/server/types.d.ts +242 -42
  370. package/dist/server/types.d.ts.map +1 -1
  371. package/dist/server/types.js +12 -1
  372. package/dist/server/types.js.map +1 -1
  373. package/dist/server/users.js +1 -1
  374. package/dist/server/users.js.map +1 -1
  375. package/dist/server/utils.js +1 -1
  376. package/dist/server/utils.js.map +1 -1
  377. package/package.json +3 -4
  378. package/src/authorization/index.ts +46 -0
  379. package/src/cli/index.ts +38 -20
  380. package/src/client/core/types.ts +437 -0
  381. package/src/client/factors/device.ts +160 -0
  382. package/src/client/factors/passkey.ts +282 -0
  383. package/src/client/factors/totp.ts +150 -0
  384. package/src/client/index.ts +133 -1267
  385. package/src/client/runtime/browser.ts +112 -0
  386. package/src/client/runtime/invite.ts +65 -0
  387. package/src/client/runtime/proxy.ts +111 -0
  388. package/src/client/runtime/storage.ts +79 -0
  389. package/src/component/_generated/api.ts +40 -12
  390. package/src/component/_generated/component.ts +1772 -1798
  391. package/src/component/model.ts +6 -0
  392. package/src/component/public/enterprise/audit.ts +120 -0
  393. package/src/component/public/enterprise/core.ts +354 -0
  394. package/src/component/public/enterprise/domains.ts +323 -0
  395. package/src/component/public/enterprise/scim.ts +396 -0
  396. package/src/component/public/enterprise/secrets.ts +132 -0
  397. package/src/component/public/enterprise/webhooks.ts +306 -0
  398. package/src/component/public/factors/devices.ts +223 -0
  399. package/src/component/public/factors/passkeys.ts +242 -0
  400. package/src/component/public/factors/totp.ts +258 -0
  401. package/src/component/public/groups/core.ts +481 -0
  402. package/src/component/public/groups/invites.ts +602 -0
  403. package/src/component/public/groups/members.ts +409 -0
  404. package/src/component/public/identity/accounts.ts +206 -0
  405. package/src/component/public/identity/codes.ts +148 -0
  406. package/src/component/public/identity/sessions.ts +209 -0
  407. package/src/component/public/identity/tokens.ts +250 -0
  408. package/src/component/public/identity/users.ts +354 -0
  409. package/src/component/public/identity/verifiers.ts +157 -0
  410. package/src/component/public/security/keys.ts +365 -0
  411. package/src/component/public/security/limits.ts +173 -0
  412. package/src/component/public.ts +27 -5
  413. package/src/providers/credentials.ts +4 -5
  414. package/src/providers/email.ts +30 -0
  415. package/src/providers/phone.ts +28 -0
  416. package/src/server/auth.ts +282 -28
  417. package/src/server/authError.ts +44 -0
  418. package/src/server/core.ts +2095 -0
  419. package/src/server/{provider.ts → crypto.ts} +1 -1
  420. package/src/server/device.ts +1 -1
  421. package/src/server/enterprise/config.ts +51 -0
  422. package/src/server/{domains/sso.ts → enterprise/domain.ts} +4 -2
  423. package/src/server/enterprise/http.ts +1324 -0
  424. package/src/server/enterprise/oidc.ts +500 -0
  425. package/src/server/enterprise/policy.ts +128 -0
  426. package/src/server/enterprise/saml.ts +578 -0
  427. package/src/server/enterprise/scim.ts +135 -0
  428. package/src/server/enterprise/shared.ts +134 -0
  429. package/src/server/errors.ts +2 -0
  430. package/src/server/http.ts +3 -1
  431. package/src/server/identity.ts +1 -1
  432. package/src/server/index.ts +32 -2605
  433. package/src/server/{ratelimit.ts → limits.ts} +1 -1
  434. package/src/server/mounts.ts +948 -0
  435. package/src/server/mutations/account.ts +4 -4
  436. package/src/server/mutations/code.ts +3 -3
  437. package/src/server/mutations/index.ts +8 -148
  438. package/src/server/mutations/invalidate.ts +2 -2
  439. package/src/server/mutations/oauth.ts +8 -6
  440. package/src/server/mutations/refresh.ts +3 -3
  441. package/src/server/mutations/register.ts +3 -3
  442. package/src/server/mutations/retrieve.ts +4 -8
  443. package/src/server/mutations/signature.ts +3 -3
  444. package/src/server/mutations/signin.ts +2 -2
  445. package/src/server/mutations/signout.ts +2 -2
  446. package/src/server/mutations/store/refs.ts +10 -0
  447. package/src/server/mutations/store.ts +137 -9
  448. package/src/server/mutations/verifier.ts +2 -2
  449. package/src/server/mutations/verify.ts +5 -5
  450. package/src/server/oauth.ts +1 -1
  451. package/src/server/passkey.ts +3 -4
  452. package/src/server/redirects.ts +1 -1
  453. package/src/server/refresh.ts +1 -1
  454. package/src/server/runtime.ts +880 -0
  455. package/src/server/signin.ts +3 -1
  456. package/src/server/ssr.ts +1764 -0
  457. package/src/server/totp.ts +3 -1
  458. package/src/server/types.ts +254 -43
  459. package/src/server/users.ts +1 -1
  460. package/src/server/utils.ts +1 -1
  461. package/src/test.ts +25 -0
  462. package/dist/component/public/enterprise.d.ts +0 -54
  463. package/dist/component/public/enterprise.d.ts.map +0 -1
  464. package/dist/component/public/enterprise.js +0 -515
  465. package/dist/component/public/enterprise.js.map +0 -1
  466. package/dist/component/public/factors.d.ts +0 -52
  467. package/dist/component/public/factors.d.ts.map +0 -1
  468. package/dist/component/public/factors.js +0 -285
  469. package/dist/component/public/factors.js.map +0 -1
  470. package/dist/component/public/groups.d.ts +0 -124
  471. package/dist/component/public/groups.d.ts.map +0 -1
  472. package/dist/component/public/groups.js +0 -680
  473. package/dist/component/public/groups.js.map +0 -1
  474. package/dist/component/public/identity.d.ts +0 -93
  475. package/dist/component/public/identity.d.ts.map +0 -1
  476. package/dist/component/public/identity.js +0 -426
  477. package/dist/component/public/identity.js.map +0 -1
  478. package/dist/component/public/keys.d.ts +0 -41
  479. package/dist/component/public/keys.d.ts.map +0 -1
  480. package/dist/component/public/keys.js +0 -157
  481. package/dist/component/public/keys.js.map +0 -1
  482. package/dist/component/public/shared.d.ts +0 -26
  483. package/dist/component/public/shared.d.ts.map +0 -1
  484. package/dist/component/public/shared.js +0 -32
  485. package/dist/component/public/shared.js.map +0 -1
  486. package/dist/component/server/domains/core.js.map +0 -1
  487. package/dist/component/server/domains/sso.js.map +0 -1
  488. package/dist/component/server/factory.d.ts.map +0 -1
  489. package/dist/component/server/factory.js +0 -1134
  490. package/dist/component/server/factory.js.map +0 -1
  491. package/dist/component/server/fx.js +0 -66
  492. package/dist/component/server/fx.js.map +0 -1
  493. package/dist/component/server/mutations/index.js +0 -85
  494. package/dist/component/server/mutations/index.js.map +0 -1
  495. package/dist/component/server/providers.js.map +0 -1
  496. package/dist/component/server/ratelimit.js.map +0 -1
  497. package/dist/component/server/sso.js +0 -830
  498. package/dist/component/server/sso.js.map +0 -1
  499. package/dist/server/domains/core.d.ts +0 -449
  500. package/dist/server/domains/core.d.ts.map +0 -1
  501. package/dist/server/domains/core.js.map +0 -1
  502. package/dist/server/domains/sso.d.ts.map +0 -1
  503. package/dist/server/domains/sso.js.map +0 -1
  504. package/dist/server/enterpriseValidators.js.map +0 -1
  505. package/dist/server/factory.d.ts.map +0 -1
  506. package/dist/server/factory.js +0 -1134
  507. package/dist/server/factory.js.map +0 -1
  508. package/dist/server/fx.d.ts.map +0 -1
  509. package/dist/server/fx.js +0 -66
  510. package/dist/server/fx.js.map +0 -1
  511. package/dist/server/index.d.ts.map +0 -1
  512. package/dist/server/index.js.map +0 -1
  513. package/dist/server/mutations/index.d.ts.map +0 -1
  514. package/dist/server/mutations/index.js.map +0 -1
  515. package/dist/server/provider.d.ts.map +0 -1
  516. package/dist/server/provider.js.map +0 -1
  517. package/dist/server/providers.js.map +0 -1
  518. package/dist/server/ratelimit.js.map +0 -1
  519. package/dist/server/sso.js +0 -830
  520. package/dist/server/sso.js.map +0 -1
  521. package/dist/server/version.d.ts +0 -5
  522. package/dist/server/version.d.ts.map +0 -1
  523. package/dist/server/version.js +0 -6
  524. package/dist/server/version.js.map +0 -1
  525. package/src/component/public/enterprise.ts +0 -753
  526. package/src/component/public/factors.ts +0 -333
  527. package/src/component/public/groups.ts +0 -1066
  528. package/src/component/public/identity.ts +0 -569
  529. package/src/component/public/keys.ts +0 -209
  530. package/src/component/public/shared.ts +0 -119
  531. package/src/server/domains/core.ts +0 -1096
  532. package/src/server/factory.ts +0 -2181
  533. package/src/server/fx.ts +0 -152
  534. package/src/server/sso.ts +0 -1516
  535. package/src/server/version.ts +0 -2
  536. /package/dist/server/{enterpriseValidators.d.ts → config.d.ts} +0 -0
  537. /package/dist/server/{providers.d.ts → enterprise/config.d.ts} +0 -0
  538. /package/dist/server/{ratelimit.d.ts → enterprise/oidc.d.ts} +0 -0
  539. /package/dist/server/{sso.d.ts → enterprise/policy.d.ts} +0 -0
  540. /package/src/server/{providers.ts → config.ts} +0 -0
  541. /package/src/server/{enterpriseValidators.ts → enterprise/validators.ts} +0 -0
@@ -1,680 +0,0 @@
1
- import { mutation, query } from "../functions.js";
2
- import { vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vTag } from "../model.js";
3
- import { ConvexError, normalizeTag, normalizeTags, v, vPaginated } from "./shared.js";
4
-
5
- //#region src/component/public/groups.ts
6
- /**
7
- * Create a new group. Groups are hierarchical — set `parentGroupId` to nest
8
- * under an existing group, or omit it to create a root-level group.
9
- *
10
- * @returns The ID of the newly created group.
11
- */
12
- const groupCreate = mutation({
13
- args: {
14
- name: v.string(),
15
- slug: v.optional(v.string()),
16
- type: v.optional(v.string()),
17
- parentGroupId: v.optional(v.id("Group")),
18
- tags: v.optional(v.array(vTag)),
19
- extend: v.optional(v.any())
20
- },
21
- returns: v.id("Group"),
22
- handler: async (ctx, args) => {
23
- const { tags: rawTags, ...rest } = args;
24
- const normalizedTags = rawTags ? normalizeTags(rawTags) : void 0;
25
- const isRoot = !args.parentGroupId;
26
- let rootGroupId;
27
- if (!isRoot && args.parentGroupId) rootGroupId = (await ctx.db.get(args.parentGroupId))?.rootGroupId ?? args.parentGroupId;
28
- const groupId = await ctx.db.insert("Group", {
29
- ...rest,
30
- tags: normalizedTags,
31
- isRoot,
32
- rootGroupId: isRoot ? void 0 : rootGroupId
33
- });
34
- if (isRoot) await ctx.db.patch(groupId, { rootGroupId: groupId });
35
- if (normalizedTags) for (const tag of normalizedTags) await ctx.db.insert("GroupTag", {
36
- group_id: groupId,
37
- key: tag.key,
38
- value: tag.value
39
- });
40
- return groupId;
41
- }
42
- });
43
- /** Retrieve a group by its document ID. Returns `null` if not found. */
44
- const groupGet = query({
45
- args: { groupId: v.id("Group") },
46
- returns: v.union(vGroupDoc, v.null()),
47
- handler: async (ctx, { groupId }) => {
48
- return await ctx.db.get("Group", groupId);
49
- }
50
- });
51
- /**
52
- * List groups with optional filtering, sorting, and pagination.
53
- *
54
- * Returns `{ items, nextCursor }`. Empty `where` returns **all** groups.
55
- */
56
- const groupList = query({
57
- args: {
58
- where: v.optional(v.object({
59
- slug: v.optional(v.string()),
60
- type: v.optional(v.string()),
61
- parentGroupId: v.optional(v.id("Group")),
62
- name: v.optional(v.string()),
63
- isRoot: v.optional(v.boolean()),
64
- tagsAll: v.optional(v.array(vTag)),
65
- tagsAny: v.optional(v.array(vTag))
66
- })),
67
- limit: v.optional(v.number()),
68
- cursor: v.optional(v.union(v.string(), v.null())),
69
- orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("name"), v.literal("slug"), v.literal("type"))),
70
- order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
71
- },
72
- returns: vPaginated(vGroupDoc),
73
- handler: async (ctx, args) => {
74
- const where = args.where ?? {};
75
- const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
76
- const order = args.order ?? "desc";
77
- let tagFilteredIds = null;
78
- if (where.tagsAll && where.tagsAll.length > 0) {
79
- let allSet = null;
80
- for (const rawTag of where.tagsAll) {
81
- const t = normalizeTag(rawTag);
82
- const rows = await ctx.db.query("GroupTag").withIndex("by_key_value", (idx) => idx.eq("key", t.key).eq("value", t.value)).collect();
83
- const ids = new Set(rows.map((r) => r.group_id));
84
- if (allSet === null) allSet = ids;
85
- else for (const id of allSet) if (!ids.has(id)) allSet.delete(id);
86
- if (allSet.size === 0) break;
87
- }
88
- tagFilteredIds = allSet ?? /* @__PURE__ */ new Set();
89
- }
90
- if (where.tagsAny && where.tagsAny.length > 0) {
91
- const anySet = /* @__PURE__ */ new Set();
92
- for (const rawTag of where.tagsAny) {
93
- const t = normalizeTag(rawTag);
94
- const rows = await ctx.db.query("GroupTag").withIndex("by_key_value", (idx) => idx.eq("key", t.key).eq("value", t.value)).collect();
95
- for (const r of rows) anySet.add(r.group_id);
96
- }
97
- if (tagFilteredIds !== null) {
98
- for (const id of tagFilteredIds) if (!anySet.has(id)) tagFilteredIds.delete(id);
99
- } else tagFilteredIds = anySet;
100
- }
101
- let q;
102
- if (where.type !== void 0 && where.parentGroupId !== void 0) q = ctx.db.query("Group").withIndex("type_parent_group_id", (idx) => idx.eq("type", where.type).eq("parentGroupId", where.parentGroupId));
103
- else if (where.slug !== void 0) q = ctx.db.query("Group").withIndex("slug", (idx) => idx.eq("slug", where.slug));
104
- else if (where.type !== void 0) q = ctx.db.query("Group").withIndex("type", (idx) => idx.eq("type", where.type));
105
- else if (where.parentGroupId !== void 0) q = ctx.db.query("Group").withIndex("parent_group_id", (idx) => idx.eq("parentGroupId", where.parentGroupId));
106
- else if (where.isRoot !== void 0) q = ctx.db.query("Group").withIndex("is_root", (idx) => idx.eq("isRoot", where.isRoot));
107
- else q = ctx.db.query("Group");
108
- if (where.name !== void 0) q = q.filter((f) => f.eq(f.field("name"), where.name));
109
- if (where.isRoot !== void 0 && where.parentGroupId === void 0 && (where.type !== void 0 || where.slug !== void 0)) q = q.filter((f) => f.eq(f.field("isRoot"), where.isRoot));
110
- if (where.slug !== void 0 && where.type !== void 0) q = q.filter((f) => f.eq(f.field("slug"), where.slug));
111
- q = q.order(order);
112
- let all = await q.collect();
113
- if (tagFilteredIds !== null) all = all.filter((doc) => tagFilteredIds.has(doc._id));
114
- let startIdx = 0;
115
- if (args.cursor) {
116
- const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
117
- if (cursorIdx !== -1) startIdx = cursorIdx + 1;
118
- }
119
- const page = all.slice(startIdx, startIdx + limit + 1);
120
- const hasMore = page.length > limit;
121
- const items = hasMore ? page.slice(0, limit) : page;
122
- return {
123
- items,
124
- nextCursor: hasMore ? items[items.length - 1]._id : null
125
- };
126
- }
127
- });
128
- /** Update a group's fields (name, slug, tags, extend, parentGroupId). */
129
- const groupUpdate = mutation({
130
- args: {
131
- groupId: v.id("Group"),
132
- data: v.any()
133
- },
134
- returns: v.null(),
135
- handler: async (ctx, { groupId, data }) => {
136
- if (data.parentGroupId !== void 0) {
137
- const oldRootGroupId = (await ctx.db.get("Group", groupId))?.rootGroupId;
138
- const newParentGroupId = data.parentGroupId;
139
- const newIsRoot = !newParentGroupId;
140
- let newRootGroupId;
141
- if (newIsRoot) newRootGroupId = groupId;
142
- else newRootGroupId = (await ctx.db.get("Group", newParentGroupId))?.rootGroupId ?? newParentGroupId;
143
- data.isRoot = newIsRoot;
144
- data.rootGroupId = newRootGroupId;
145
- if (oldRootGroupId && oldRootGroupId !== newRootGroupId) {
146
- const descendants = await ctx.db.query("Group").withIndex("root_group_id", (q) => q.eq("rootGroupId", oldRootGroupId)).collect();
147
- for (const desc of descendants) if (desc._id !== groupId) await ctx.db.patch("Group", desc._id, { rootGroupId: newRootGroupId });
148
- }
149
- }
150
- if (data.tags !== void 0) {
151
- const normalizedTags = Array.isArray(data.tags) ? normalizeTags(data.tags) : [];
152
- const existingTags = await ctx.db.query("GroupTag").withIndex("by_group", (idx) => idx.eq("group_id", groupId)).collect();
153
- for (const existing of existingTags) await ctx.db.delete("GroupTag", existing._id);
154
- for (const tag of normalizedTags) await ctx.db.insert("GroupTag", {
155
- group_id: groupId,
156
- key: tag.key,
157
- value: tag.value
158
- });
159
- await ctx.db.patch("Group", groupId, {
160
- ...data,
161
- tags: normalizedTags.length > 0 ? normalizedTags : void 0
162
- });
163
- } else await ctx.db.patch("Group", groupId, data);
164
- return null;
165
- }
166
- });
167
- /**
168
- * Delete a group and all of its descendants. This cascades to:
169
- * - All child groups (recursively)
170
- * - All members of this group and its descendants
171
- * - All invites for this group and its descendants
172
- */
173
- const groupDelete = mutation({
174
- args: { groupId: v.id("Group") },
175
- returns: v.null(),
176
- handler: async (ctx, { groupId }) => {
177
- const deleteGroup = async (id) => {
178
- const children = await ctx.db.query("Group").withIndex("parent_group_id", (q) => q.eq("parentGroupId", id)).collect();
179
- for (const child of children) await deleteGroup(child._id);
180
- const members = await ctx.db.query("GroupMember").withIndex("group_id", (q) => q.eq("groupId", id)).collect();
181
- for (const member of members) await ctx.db.delete("GroupMember", member._id);
182
- const invites = await ctx.db.query("GroupInvite").withIndex("group_id", (q) => q.eq("groupId", id)).collect();
183
- for (const invite of invites) await ctx.db.delete("GroupInvite", invite._id);
184
- const tags = await ctx.db.query("GroupTag").withIndex("by_group", (q) => q.eq("group_id", id)).collect();
185
- for (const tag of tags) await ctx.db.delete("GroupTag", tag._id);
186
- await ctx.db.delete("Group", id);
187
- };
188
- await deleteGroup(groupId);
189
- return null;
190
- }
191
- });
192
- /**
193
- * Add a user as a member of a group.
194
- *
195
- * The `roleIds` field stores application-defined role identifiers. The auth
196
- * component stores assignments but does not enforce access control — your
197
- * application defines what each role means.
198
- *
199
- * Throws `ConvexError` with code `DUPLICATE_MEMBERSHIP` when the user is
200
- * already a member of the target group.
201
- *
202
- * @returns The ID of the new member record.
203
- */
204
- const memberAdd = mutation({
205
- args: {
206
- groupId: v.id("Group"),
207
- userId: v.id("User"),
208
- roleIds: v.optional(v.array(v.string())),
209
- status: v.optional(v.string()),
210
- extend: v.optional(v.any())
211
- },
212
- returns: v.id("GroupMember"),
213
- handler: async (ctx, args) => {
214
- const existingMembership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", args.groupId).eq("userId", args.userId)).unique();
215
- if (existingMembership !== null) throw new ConvexError({
216
- code: "DUPLICATE_MEMBERSHIP",
217
- message: "User is already a member of this group",
218
- groupId: args.groupId,
219
- userId: args.userId,
220
- existingMemberId: existingMembership._id
221
- });
222
- return await ctx.db.insert("GroupMember", args);
223
- }
224
- });
225
- /** Retrieve a member record by its document ID. Returns `null` if not found. */
226
- const memberGet = query({
227
- args: { memberId: v.id("GroupMember") },
228
- returns: v.union(vGroupMemberDoc, v.null()),
229
- handler: async (ctx, { memberId }) => {
230
- return await ctx.db.get("GroupMember", memberId);
231
- }
232
- });
233
- /**
234
- * List members with optional filtering, sorting, and pagination.
235
- *
236
- * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
237
- * `userId`, `roleId`, and `status`.
238
- */
239
- const memberList = query({
240
- args: {
241
- where: v.optional(v.object({
242
- groupId: v.optional(v.id("Group")),
243
- userId: v.optional(v.id("User")),
244
- roleId: v.optional(v.string()),
245
- status: v.optional(v.string())
246
- })),
247
- limit: v.optional(v.number()),
248
- cursor: v.optional(v.union(v.string(), v.null())),
249
- orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("status"))),
250
- order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
251
- },
252
- returns: vPaginated(vGroupMemberDoc),
253
- handler: async (ctx, args) => {
254
- const where = args.where ?? {};
255
- const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
256
- const order = args.order ?? "desc";
257
- let q;
258
- if (where.groupId !== void 0 && where.userId !== void 0) {
259
- q = ctx.db.query("GroupMember").withIndex("group_id_user_id", (idx) => idx.eq("groupId", where.groupId).eq("userId", where.userId));
260
- if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
261
- } else if (where.groupId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupMember").withIndex("group_id_status", (idx) => idx.eq("groupId", where.groupId).eq("status", where.status));
262
- else if (where.groupId !== void 0) q = ctx.db.query("GroupMember").withIndex("group_id", (idx) => idx.eq("groupId", where.groupId));
263
- else if (where.userId !== void 0) {
264
- q = ctx.db.query("GroupMember").withIndex("user_id", (idx) => idx.eq("userId", where.userId));
265
- if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
266
- } else {
267
- q = ctx.db.query("GroupMember");
268
- if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
269
- }
270
- q = q.order(order);
271
- let all = await q.collect();
272
- if (where.roleId !== void 0) all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId));
273
- let startIdx = 0;
274
- if (args.cursor) {
275
- const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
276
- if (cursorIdx !== -1) startIdx = cursorIdx + 1;
277
- }
278
- const page = all.slice(startIdx, startIdx + limit + 1);
279
- const hasMore = page.length > limit;
280
- const items = hasMore ? page.slice(0, limit) : page;
281
- return {
282
- items,
283
- nextCursor: hasMore ? items[items.length - 1]._id : null
284
- };
285
- }
286
- });
287
- /**
288
- * @deprecated Use `memberList` with `where: { userId }` instead.
289
- * Kept for backward compatibility with generated component types.
290
- */
291
- const memberListByUser = query({
292
- args: { userId: v.id("User") },
293
- returns: v.array(vGroupMemberDoc),
294
- handler: async (ctx, { userId }) => {
295
- return await ctx.db.query("GroupMember").withIndex("user_id", (q) => q.eq("userId", userId)).collect();
296
- }
297
- });
298
- /**
299
- * Look up a specific user's membership in a specific group.
300
- * Returns `null` if the user is not a member of the group.
301
- */
302
- const memberGetByGroupAndUser = query({
303
- args: {
304
- groupId: v.id("Group"),
305
- userId: v.id("User")
306
- },
307
- returns: v.union(vGroupMemberDoc, v.null()),
308
- handler: async (ctx, { groupId, userId }) => {
309
- return await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", groupId).eq("userId", userId)).unique();
310
- }
311
- });
312
- /**
313
- * Resolve a user's membership by walking the group hierarchy from the
314
- * requested group up to the root. Returns the first matching membership
315
- * found. When `ancestry` is true, includes the list of traversed group IDs.
316
- *
317
- * This runs entirely inside the component (no cross-component RPCs per level).
318
- */
319
- const memberResolve = query({
320
- args: {
321
- userId: v.id("User"),
322
- groupId: v.id("Group"),
323
- maxDepth: v.optional(v.number()),
324
- ancestry: v.optional(v.boolean())
325
- },
326
- returns: v.object({
327
- membership: v.union(vGroupMemberDoc, v.null()),
328
- matchedGroupId: v.union(v.id("Group"), v.null()),
329
- depth: v.union(v.number(), v.null()),
330
- isDirect: v.boolean(),
331
- isInherited: v.boolean(),
332
- traversedGroupIds: v.optional(v.array(v.id("Group")))
333
- }),
334
- handler: async (ctx, args) => {
335
- const maxDepth = Math.max(0, Math.floor(args.maxDepth ?? 32));
336
- const includeAncestry = args.ancestry ?? false;
337
- const visited = /* @__PURE__ */ new Set();
338
- const traversedGroupIds = [];
339
- let currentGroupId = args.groupId;
340
- let depth = 0;
341
- while (currentGroupId !== void 0 && depth <= maxDepth) {
342
- if (visited.has(currentGroupId)) break;
343
- visited.add(currentGroupId);
344
- if (includeAncestry) traversedGroupIds.push(currentGroupId);
345
- const membership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", currentGroupId).eq("userId", args.userId)).unique();
346
- if (membership !== null) return {
347
- membership,
348
- matchedGroupId: currentGroupId,
349
- depth,
350
- isDirect: depth === 0,
351
- isInherited: depth > 0,
352
- ...includeAncestry ? { traversedGroupIds } : {}
353
- };
354
- const groupDoc = await ctx.db.get(currentGroupId);
355
- if (!groupDoc?.parentGroupId) break;
356
- currentGroupId = groupDoc.parentGroupId;
357
- depth++;
358
- }
359
- return {
360
- membership: null,
361
- matchedGroupId: null,
362
- depth: null,
363
- isDirect: false,
364
- isInherited: false,
365
- ...includeAncestry ? { traversedGroupIds } : {}
366
- };
367
- }
368
- });
369
- /** Remove a member from a group by deleting the member record. */
370
- const memberRemove = mutation({
371
- args: { memberId: v.id("GroupMember") },
372
- returns: v.null(),
373
- handler: async (ctx, { memberId }) => {
374
- await ctx.db.delete("GroupMember", memberId);
375
- return null;
376
- }
377
- });
378
- /**
379
- * Update a member record's fields (roleIds, status, extend).
380
- */
381
- const memberUpdate = mutation({
382
- args: {
383
- memberId: v.id("GroupMember"),
384
- data: v.any()
385
- },
386
- returns: v.null(),
387
- handler: async (ctx, { memberId, data }) => {
388
- await ctx.db.patch("GroupMember", memberId, data);
389
- return null;
390
- }
391
- });
392
- /**
393
- * Create a new platform-level invitation. Optionally set `groupId` to tie
394
- * the invite to a specific group. The invitation is sent to an email address
395
- * and includes a hashed token for secure acceptance.
396
- *
397
- * Throws `ConvexError` with code `DUPLICATE_INVITE` when a pending invite
398
- * already exists for the same email and scope:
399
- * - group invite: same `email` + same `groupId`
400
- * - platform invite: same `email` with no `groupId`
401
- *
402
- * @returns The ID of the new invite record.
403
- */
404
- const inviteCreate = mutation({
405
- args: {
406
- groupId: v.optional(v.id("Group")),
407
- invitedByUserId: v.optional(v.id("User")),
408
- email: v.optional(v.string()),
409
- tokenHash: v.string(),
410
- roleIds: v.optional(v.array(v.string())),
411
- status: vInviteStatus,
412
- expiresTime: v.optional(v.number()),
413
- extend: v.optional(v.any())
414
- },
415
- returns: v.id("GroupInvite"),
416
- handler: async (ctx, args) => {
417
- const now = Date.now();
418
- if (args.email !== void 0) if (args.groupId !== void 0) {
419
- const existingGroupInvites = await ctx.db.query("GroupInvite").withIndex("group_id_status", (q) => q.eq("groupId", args.groupId).eq("status", "pending")).filter((q) => q.eq(q.field("email"), args.email)).collect();
420
- for (const existingGroupInvite of existingGroupInvites) {
421
- if (existingGroupInvite.expiresTime !== void 0 && existingGroupInvite.expiresTime <= now) {
422
- await ctx.db.patch("GroupInvite", existingGroupInvite._id, { status: "expired" });
423
- continue;
424
- }
425
- throw new ConvexError({
426
- code: "DUPLICATE_INVITE",
427
- message: "A pending invite already exists for this email in this group",
428
- email: args.email,
429
- groupId: args.groupId,
430
- existingInviteId: existingGroupInvite._id
431
- });
432
- }
433
- } else {
434
- const existingPlatformInvites = await ctx.db.query("GroupInvite").withIndex("email_status", (q) => q.eq("email", args.email).eq("status", "pending")).filter((q) => q.eq(q.field("groupId"), void 0)).collect();
435
- for (const existingPlatformInvite of existingPlatformInvites) {
436
- if (existingPlatformInvite.expiresTime !== void 0 && existingPlatformInvite.expiresTime <= now) {
437
- await ctx.db.patch("GroupInvite", existingPlatformInvite._id, { status: "expired" });
438
- continue;
439
- }
440
- throw new ConvexError({
441
- code: "DUPLICATE_INVITE",
442
- message: "A pending platform invite already exists for this email",
443
- email: args.email,
444
- existingInviteId: existingPlatformInvite._id
445
- });
446
- }
447
- }
448
- return await ctx.db.insert("GroupInvite", args);
449
- }
450
- });
451
- /** Retrieve an invite by its document ID. Returns `null` if not found. */
452
- const inviteGet = query({
453
- args: { inviteId: v.id("GroupInvite") },
454
- returns: v.union(vGroupInviteDoc, v.null()),
455
- handler: async (ctx, { inviteId }) => {
456
- return await ctx.db.get("GroupInvite", inviteId);
457
- }
458
- });
459
- /** Retrieve an invite by hashed token. Returns `null` if not found. */
460
- const inviteGetByTokenHash = query({
461
- args: { tokenHash: v.string() },
462
- returns: v.union(vGroupInviteDoc, v.null()),
463
- handler: async (ctx, { tokenHash }) => {
464
- return await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
465
- }
466
- });
467
- /**
468
- * List invites with optional filtering, sorting, and pagination.
469
- *
470
- * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
471
- * `status`, `email`, `invitedByUserId`, `roleId`, `acceptedByUserId`, and `tokenHash`.
472
- */
473
- const inviteList = query({
474
- args: {
475
- where: v.optional(v.object({
476
- tokenHash: v.optional(v.string()),
477
- groupId: v.optional(v.id("Group")),
478
- status: v.optional(vInviteStatus),
479
- email: v.optional(v.string()),
480
- invitedByUserId: v.optional(v.id("User")),
481
- roleId: v.optional(v.string()),
482
- acceptedByUserId: v.optional(v.id("User"))
483
- })),
484
- limit: v.optional(v.number()),
485
- cursor: v.optional(v.union(v.string(), v.null())),
486
- orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("status"), v.literal("email"), v.literal("expiresTime"), v.literal("acceptedTime"))),
487
- order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
488
- },
489
- returns: vPaginated(vGroupInviteDoc),
490
- handler: async (ctx, args) => {
491
- const where = args.where ?? {};
492
- const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
493
- const order = args.order ?? "desc";
494
- let q;
495
- if (where.tokenHash !== void 0) q = ctx.db.query("GroupInvite").withIndex("token_hash", (idx) => idx.eq("tokenHash", where.tokenHash));
496
- else if (where.groupId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id_status", (idx) => idx.eq("groupId", where.groupId).eq("status", where.status));
497
- else if (where.email !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("email_status", (idx) => idx.eq("email", where.email).eq("status", where.status));
498
- else if (where.invitedByUserId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("invited_by_user_id_status", (idx) => idx.eq("invitedByUserId", where.invitedByUserId).eq("status", where.status));
499
- else if (where.groupId !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id", (idx) => idx.eq("groupId", where.groupId));
500
- else if (where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("status", (idx) => idx.eq("status", where.status));
501
- else q = ctx.db.query("GroupInvite");
502
- if (where.groupId !== void 0) q = q.filter((f) => f.eq(f.field("groupId"), where.groupId));
503
- if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
504
- if (where.email !== void 0) q = q.filter((f) => f.eq(f.field("email"), where.email));
505
- if (where.invitedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("invitedByUserId"), where.invitedByUserId));
506
- if (where.acceptedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("acceptedByUserId"), where.acceptedByUserId));
507
- if (where.tokenHash !== void 0) q = q.filter((f) => f.eq(f.field("tokenHash"), where.tokenHash));
508
- q = q.order(order);
509
- let all = await q.collect();
510
- if (where.roleId !== void 0) all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId));
511
- let startIdx = 0;
512
- if (args.cursor) {
513
- const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
514
- if (cursorIdx !== -1) startIdx = cursorIdx + 1;
515
- }
516
- const page = all.slice(startIdx, startIdx + limit + 1);
517
- const hasMore = page.length > limit;
518
- const items = hasMore ? page.slice(0, limit) : page;
519
- return {
520
- items,
521
- nextCursor: hasMore ? items[items.length - 1]._id : null
522
- };
523
- }
524
- });
525
- /**
526
- * Accept a pending invitation.
527
- *
528
- * Marks the invite as "accepted" and records the acceptance timestamp.
529
- * Throws a structured `ConvexError` when the invite doesn't exist or is not
530
- * currently pending.
531
- *
532
- * The caller is responsible for creating the corresponding member record.
533
- */
534
- const inviteAccept = mutation({
535
- args: {
536
- inviteId: v.id("GroupInvite"),
537
- acceptedByUserId: v.optional(v.id("User"))
538
- },
539
- returns: v.null(),
540
- handler: async (ctx, { inviteId, acceptedByUserId }) => {
541
- const invite = await ctx.db.get("GroupInvite", inviteId);
542
- if (invite === null) throw new ConvexError({
543
- code: "INVITE_NOT_FOUND",
544
- message: "Invite not found",
545
- inviteId
546
- });
547
- if (invite.status !== "pending") throw new ConvexError({
548
- code: "INVITE_NOT_PENDING",
549
- message: `Cannot accept invite with status "${invite.status}"`,
550
- inviteId,
551
- currentStatus: invite.status
552
- });
553
- if (invite.expiresTime !== void 0 && invite.expiresTime <= Date.now()) {
554
- await ctx.db.patch("GroupInvite", inviteId, { status: "expired" });
555
- throw new ConvexError({
556
- code: "INVITE_EXPIRED",
557
- message: "Invite has expired",
558
- inviteId
559
- });
560
- }
561
- await ctx.db.patch("GroupInvite", inviteId, {
562
- status: "accepted",
563
- acceptedTime: Date.now(),
564
- ...acceptedByUserId ? { acceptedByUserId } : {}
565
- });
566
- return null;
567
- }
568
- });
569
- /**
570
- * Accept an invitation by raw token hash and atomically join group membership.
571
- *
572
- * Returns idempotent success when the invite was already accepted by the same
573
- * user. If the invite targets a group, this mutation also ensures membership.
574
- */
575
- const inviteAcceptByToken = mutation({
576
- args: {
577
- tokenHash: v.string(),
578
- acceptedByUserId: v.id("User")
579
- },
580
- returns: vInviteAcceptByTokenResult,
581
- handler: async (ctx, { tokenHash, acceptedByUserId }) => {
582
- const invite = await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
583
- if (invite === null) throw new ConvexError({
584
- code: "INVITE_NOT_FOUND",
585
- message: "Invite not found"
586
- });
587
- const now = Date.now();
588
- if (invite.status === "pending") {
589
- if (invite.expiresTime !== void 0 && invite.expiresTime <= now) {
590
- await ctx.db.patch("GroupInvite", invite._id, { status: "expired" });
591
- throw new ConvexError({
592
- code: "INVITE_EXPIRED",
593
- message: "Invite has expired",
594
- inviteId: invite._id
595
- });
596
- }
597
- } else if (invite.status === "accepted") {
598
- if (invite.acceptedByUserId !== acceptedByUserId) throw new ConvexError({
599
- code: "INVITE_ALREADY_ACCEPTED",
600
- message: "Invite already accepted by another user",
601
- inviteId: invite._id
602
- });
603
- } else throw new ConvexError({
604
- code: "INVITE_NOT_PENDING",
605
- message: `Cannot accept invite with status "${invite.status}"`,
606
- inviteId: invite._id,
607
- currentStatus: invite.status
608
- });
609
- if (invite.email !== void 0) {
610
- const user = await ctx.db.get("User", acceptedByUserId);
611
- const normalizedInviteEmail = invite.email.trim().toLowerCase();
612
- const normalizedUserEmail = user?.email?.trim().toLowerCase();
613
- if (normalizedUserEmail === void 0 || normalizedUserEmail !== normalizedInviteEmail) throw new ConvexError({
614
- code: "INVITE_EMAIL_MISMATCH",
615
- message: "Invite email does not match accepting user's email",
616
- inviteId: invite._id
617
- });
618
- }
619
- let membershipStatus = "not_applicable";
620
- let memberId;
621
- if (invite.groupId !== void 0) {
622
- const existingMembership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", invite.groupId).eq("userId", acceptedByUserId)).unique();
623
- if (existingMembership !== null) {
624
- membershipStatus = "already_joined";
625
- memberId = existingMembership._id;
626
- } else {
627
- memberId = await ctx.db.insert("GroupMember", {
628
- groupId: invite.groupId,
629
- userId: acceptedByUserId,
630
- roleIds: invite.roleIds,
631
- status: "active"
632
- });
633
- membershipStatus = "joined";
634
- }
635
- }
636
- if (invite.status === "pending") await ctx.db.patch("GroupInvite", invite._id, {
637
- status: "accepted",
638
- acceptedByUserId,
639
- acceptedTime: now
640
- });
641
- const inviteStatus = invite.status === "accepted" ? "already_accepted" : "accepted";
642
- return {
643
- inviteId: invite._id,
644
- groupId: invite.groupId ?? null,
645
- memberId,
646
- inviteStatus,
647
- membershipStatus
648
- };
649
- }
650
- });
651
- /**
652
- * Revoke a pending invitation.
653
- *
654
- * Marks the invite as "revoked". Throws a structured `ConvexError` when the
655
- * invite doesn't exist or is not currently pending.
656
- */
657
- const inviteRevoke = mutation({
658
- args: { inviteId: v.id("GroupInvite") },
659
- returns: v.null(),
660
- handler: async (ctx, { inviteId }) => {
661
- const invite = await ctx.db.get("GroupInvite", inviteId);
662
- if (invite === null) throw new ConvexError({
663
- code: "INVITE_NOT_FOUND",
664
- message: "Invite not found",
665
- inviteId
666
- });
667
- if (invite.status !== "pending") throw new ConvexError({
668
- code: "INVITE_NOT_PENDING",
669
- message: `Cannot revoke invite with status "${invite.status}"`,
670
- inviteId,
671
- currentStatus: invite.status
672
- });
673
- await ctx.db.patch("GroupInvite", inviteId, { status: "revoked" });
674
- return null;
675
- }
676
- });
677
-
678
- //#endregion
679
- export { groupCreate, groupDelete, groupGet, groupList, groupUpdate, inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke, memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberListByUser, memberRemove, memberResolve, memberUpdate };
680
- //# sourceMappingURL=groups.js.map