@robelest/convex-auth 0.0.4-preview.18 → 0.0.4-preview.19

package/dist/component/public/identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"identity.js","names":[],"sources":["../../../src/component/public/identity.ts"],"sourcesContent":["import {\n  mutation,\n  query,\n  v,\n  vAccountDoc,\n  vAuthVerifierDoc,\n  vPaginated,\n  vRefreshTokenDoc,\n  vSessionDoc,\n  vUserDoc,\n  vVerificationCodeDoc,\n} from \"./shared\";\n\n// ============================================================================\n// Users\n// ============================================================================\n\n/**\n * List users with optional filtering, sorting, and pagination.\n *\n * Returns `{ items, nextCursor }` — pass `nextCursor` back as `cursor`\n * for the next page, or `null` when exhausted.\n */\nexport const userList = query({\n  args: {\n    where: v.optional(\n      v.object({\n        email: v.optional(v.string()),\n        phone: v.optional(v.string()),\n        isAnonymous: v.optional(v.boolean()),\n        name: v.optional(v.string()),\n      }),\n    ),\n    limit: v.optional(v.number()),\n    cursor: v.optional(v.union(v.string(), v.null())),\n    orderBy: v.optional(\n      v.union(\n        v.literal(\"_creationTime\"),\n        v.literal(\"name\"),\n        v.literal(\"email\"),\n        v.literal(\"phone\"),\n      ),\n    ),\n    order: v.optional(v.union(v.literal(\"asc\"), v.literal(\"desc\"))),\n  },\n  returns: vPaginated(vUserDoc),\n  handler: async (ctx, args) => {\n    const where = args.where ?? {};\n    const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);\n    const order = args.order ?? \"desc\";\n\n    // Pick index based on where fields\n    let q;\n    if (where.email !== undefined) {\n      q = ctx.db\n        .query(\"User\")\n        .withIndex(\"email\", (idx) => idx.eq(\"email\", where.email!));\n    } else if (where.phone !== undefined) {\n      q = ctx.db\n        .query(\"User\")\n        .withIndex(\"phone\", (idx) => idx.eq(\"phone\", where.phone!));\n    } else {\n      q = ctx.db.query(\"User\");\n    }\n\n    // Apply remaining filters\n    if (where.isAnonymous !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"isAnonymous\"), where.isAnonymous!));\n    }\n    if (where.name !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"name\"), where.name!));\n    }\n    // email/phone filters when not used as index\n    if (where.email !== undefined && where.phone !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"phone\"), where.phone!));\n    }\n\n    q = q.order(order);\n\n    // Cursor-based pagination: skip past the cursor ID\n    const all = await q.collect();\n    let startIdx = 0;\n    if (args.cursor) {\n      const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);\n      if (cursorIdx !== -1) {\n        startIdx = cursorIdx + 1;\n      }\n    }\n    const page = all.slice(startIdx, startIdx + limit + 1);\n    const hasMore = page.length > limit;\n    const items = hasMore ? page.slice(0, limit) : page;\n    const nextCursor = hasMore ? items[items.length - 1]._id : null;\n    return { items, nextCursor };\n  },\n});\n\n/** Retrieve a user by their document ID. */\nexport const userGetById = query({\n  args: { userId: v.id(\"User\") },\n  returns: v.union(vUserDoc, v.null()),\n  handler: async (ctx, { userId }) => {\n    return await ctx.db.get(\"User\", userId);\n  },\n});\n\n/**\n * Find a user by their verified email address. Returns `null` if no user\n * has this email verified, or if multiple users share the same verified email\n * (ambiguous — should not happen in normal operation).\n */\nexport const userFindByVerifiedEmail = query({\n  args: { email: v.string() },\n  returns: v.union(vUserDoc, v.null()),\n  handler: async (ctx, { email }) => {\n    const users = await ctx.db\n      .query(\"User\")\n      .withIndex(\"email_verified\", (q) =>\n        q.eq(\"email\", email).gt(\"emailVerificationTime\", undefined),\n      )\n      .take(2);\n    return users.length === 1 ? users[0] : null;\n  },\n});\n\n/**\n * Find a user by their verified phone number. Returns `null` if no user\n * has this phone verified, or if multiple users share the same verified phone\n * (ambiguous — should not happen in normal operation).\n */\nexport const userFindByVerifiedPhone = query({\n  args: { phone: v.string() },\n  returns: v.union(vUserDoc, v.null()),\n  handler: async (ctx, { phone }) => {\n    const users = await ctx.db\n      .query(\"User\")\n      .withIndex(\"phone_verified\", (q) =>\n        q.eq(\"phone\", phone).gt(\"phoneVerificationTime\", undefined),\n      )\n      .take(2);\n    return users.length === 1 ? users[0] : null;\n  },\n});\n\n/** Insert a new user document. */\nexport const userInsert = mutation({\n  args: { data: v.any() },\n  returns: v.id(\"User\"),\n  handler: async (ctx, { data }) => {\n    return await ctx.db.insert(\"User\", data);\n  },\n});\n\n/** Insert a new user or update an existing one. */\nexport const userUpsert = mutation({\n  args: { userId: v.optional(v.id(\"User\")), data: v.any() },\n  returns: v.id(\"User\"),\n  handler: async (ctx, { userId, data }) => {\n    if (userId !== undefined) {\n      await ctx.db.patch(\"User\", userId, data);\n      return userId;\n    }\n    return await ctx.db.insert(\"User\", data);\n  },\n});\n\n/** Patch an existing user document with partial data. */\nexport const userPatch = mutation({\n  args: { userId: v.id(\"User\"), data: v.any() },\n  returns: v.null(),\n  handler: async (ctx, { userId, data }) => {\n    await ctx.db.patch(\"User\", userId, data);\n    return null;\n  },\n});\n\n/** Delete a user document by ID. No-op if the user does not exist. */\nexport const userDelete = mutation({\n  args: { userId: v.id(\"User\") },\n  returns: v.null(),\n  handler: async (ctx, { userId }) => {\n    if ((await ctx.db.get(\"User\", userId)) !== null) {\n      await ctx.db.delete(\"User\", userId);\n    }\n    return null;\n  },\n});\n\n// ============================================================================\n// Accounts\n// ============================================================================\n\n/** List all accounts for a user. */\nexport const accountListByUser = query({\n  args: { userId: v.id(\"User\") },\n  returns: v.array(vAccountDoc),\n  handler: async (ctx, { userId }) => {\n    return await ctx.db\n      .query(\"Account\")\n      .withIndex(\"user_id_provider\", (q) => q.eq(\"userId\", userId as any))\n      .collect();\n  },\n});\n\n/** Look up an account by provider and provider-specific account ID. */\nexport const accountGet = query({\n  args: { provider: v.string(), providerAccountId: v.string() },\n  returns: v.union(vAccountDoc, v.null()),\n  handler: async (ctx, { provider, providerAccountId }) => {\n    return await ctx.db\n      .query(\"Account\")\n      .withIndex(\"provider_account_id\", (q) =>\n        q.eq(\"provider\", provider).eq(\"providerAccountId\", providerAccountId),\n      )\n      .unique();\n  },\n});\n\n/** Retrieve an account by its document ID. */\nexport const accountGetById = query({\n  args: { accountId: v.id(\"Account\") },\n  returns: v.union(vAccountDoc, v.null()),\n  handler: async (ctx, { accountId }) => {\n    return await ctx.db.get(\"Account\", accountId);\n  },\n});\n\n/** Create a new account linking a user to an auth provider. */\nexport const accountInsert = mutation({\n  args: {\n    userId: v.id(\"User\"),\n    provider: v.string(),\n    providerAccountId: v.string(),\n    secret: v.optional(v.string()),\n    extend: v.optional(v.any()),\n  },\n  returns: v.id(\"Account\"),\n  handler: async (ctx, args) => {\n    return await ctx.db.insert(\"Account\", args as any);\n  },\n});\n\n/** Patch an existing account document with partial data. */\nexport const accountPatch = mutation({\n  args: { accountId: v.id(\"Account\"), data: v.any() },\n  returns: v.null(),\n  handler: async (ctx, { accountId, data }) => {\n    await ctx.db.patch(\"Account\", accountId, data);\n    return null;\n  },\n});\n\n/** Delete an account document. */\nexport const accountDelete = mutation({\n  args: { accountId: v.id(\"Account\") },\n  returns: v.null(),\n  handler: async (ctx, { accountId }) => {\n    await ctx.db.delete(\"Account\", accountId);\n    return null;\n  },\n});\n\n// ============================================================================\n// Sessions\n// ============================================================================\n\n/**\n * List sessions with optional filtering and pagination.\n *\n * Returns `{ items, nextCursor }`.\n */\nexport const sessionList = query({\n  args: {\n    where: v.optional(\n      v.object({\n        userId: v.optional(v.id(\"User\")),\n      }),\n    ),\n    limit: v.optional(v.number()),\n    cursor: v.optional(v.union(v.string(), v.null())),\n    order: v.optional(v.union(v.literal(\"asc\"), v.literal(\"desc\"))),\n  },\n  returns: vPaginated(vSessionDoc),\n  handler: async (ctx, args) => {\n    const where = args.where ?? {};\n    const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);\n    const order = args.order ?? \"desc\";\n\n    let q;\n    if (where.userId !== undefined) {\n      q = ctx.db\n        .query(\"Session\")\n        .withIndex(\"user_id\", (idx) => idx.eq(\"userId\", where.userId!));\n    } else {\n      q = ctx.db.query(\"Session\");\n    }\n\n    q = q.order(order);\n\n    const all = await q.collect();\n    let startIdx = 0;\n    if (args.cursor) {\n      const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);\n      if (cursorIdx !== -1) {\n        startIdx = cursorIdx + 1;\n      }\n    }\n    const page = all.slice(startIdx, startIdx + limit + 1);\n    const hasMore = page.length > limit;\n    const items = hasMore ? page.slice(0, limit) : page;\n    const nextCursor = hasMore ? items[items.length - 1]._id : null;\n    return { items, nextCursor };\n  },\n});\n\n/** Create a new session for a user with an expiration time. */\nexport const sessionCreate = mutation({\n  args: { userId: v.id(\"User\"), expirationTime: v.number() },\n  returns: v.id(\"Session\"),\n  handler: async (ctx, { userId, expirationTime }) => {\n    return await ctx.db.insert(\"Session\", {\n      userId: userId as any,\n      expirationTime,\n    });\n  },\n});\n\n/** Retrieve a session by its document ID. */\nexport const sessionGetById = query({\n  args: { sessionId: v.id(\"Session\") },\n  returns: v.union(vSessionDoc, v.null()),\n  handler: async (ctx, { sessionId }) => {\n    return await ctx.db.get(\"Session\", sessionId);\n  },\n});\n\n/** Delete a session. No-op if the session does not exist. */\nexport const sessionDelete = mutation({\n  args: { sessionId: v.id(\"Session\") },\n  returns: v.null(),\n  handler: async (ctx, { sessionId }) => {\n    if ((await ctx.db.get(\"Session\", sessionId)) !== null) {\n      await ctx.db.delete(\"Session\", sessionId);\n    }\n    return null;\n  },\n});\n\n/** List all sessions for a user. */\nexport const sessionListByUser = query({\n  args: { userId: v.id(\"User\") },\n  returns: v.array(vSessionDoc),\n  handler: async (ctx, { userId }) => {\n    return await ctx.db\n      .query(\"Session\")\n      .withIndex(\"user_id\", (q) => q.eq(\"userId\", userId as any))\n      .collect();\n  },\n});\n\n// ============================================================================\n// Verifiers\n// ============================================================================\n\n/** Create a new PKCE verifier, optionally linked to a session. */\nexport const verifierCreate = mutation({\n  args: { sessionId: v.optional(v.id(\"Session\")) },\n  returns: v.id(\"AuthVerifier\"),\n  handler: async (ctx, { sessionId }) => {\n    return await ctx.db.insert(\"AuthVerifier\", { sessionId: sessionId as any });\n  },\n});\n\n/** Retrieve a verifier by its document ID. */\nexport const verifierGetById = query({\n  args: { verifierId: v.id(\"AuthVerifier\") },\n  returns: v.union(vAuthVerifierDoc, v.null()),\n  handler: async (ctx, { verifierId }) => {\n    return await ctx.db.get(\"AuthVerifier\", verifierId);\n  },\n});\n\n/** Look up a verifier by its cryptographic signature. */\nexport const verifierGetBySignature = query({\n  args: { signature: v.string() },\n  returns: v.union(vAuthVerifierDoc, v.null()),\n  handler: async (ctx, { signature }) => {\n    return await ctx.db\n      .query(\"AuthVerifier\")\n      .withIndex(\"signature\", (q) => q.eq(\"signature\", signature))\n      .unique();\n  },\n});\n\n/** Patch a verifier document with partial data. */\nexport const verifierPatch = mutation({\n  args: { verifierId: v.id(\"AuthVerifier\"), data: v.any() },\n  returns: v.null(),\n  handler: async (ctx, { verifierId, data }) => {\n    await ctx.db.patch(\"AuthVerifier\", verifierId, data);\n    return null;\n  },\n});\n\n/** Delete a verifier document. */\nexport const verifierDelete = mutation({\n  args: { verifierId: v.id(\"AuthVerifier\") },\n  returns: v.null(),\n  handler: async (ctx, { verifierId }) => {\n    await ctx.db.delete(\"AuthVerifier\", verifierId);\n    return null;\n  },\n});\n\n// ============================================================================\n// Verification Codes\n// ============================================================================\n\n/** Find a verification code by its associated account ID. */\nexport const verificationCodeGetByAccountId = query({\n  args: { accountId: v.id(\"Account\") },\n  returns: v.union(vVerificationCodeDoc, v.null()),\n  handler: async (ctx, { accountId }) => {\n    return await ctx.db\n      .query(\"VerificationCode\")\n      .withIndex(\"account_id\", (q) => q.eq(\"accountId\", accountId as any))\n      .unique();\n  },\n});\n\n/** Find a verification code by its code string. */\nexport const verificationCodeGetByCode = query({\n  args: { code: v.string() },\n  returns: v.union(vVerificationCodeDoc, v.null()),\n  handler: async (ctx, { code }) => {\n    return await ctx.db\n      .query(\"VerificationCode\")\n      .withIndex(\"code\", (q) => q.eq(\"code\", code))\n      .unique();\n  },\n});\n\n/** Create a new verification code for OTP, magic link, or OAuth flows. */\nexport const verificationCodeCreate = mutation({\n  args: {\n    accountId: v.id(\"Account\"),\n    provider: v.string(),\n    code: v.string(),\n    expirationTime: v.number(),\n    verifier: v.optional(v.string()),\n    emailVerified: v.optional(v.string()),\n    phoneVerified: v.optional(v.string()),\n  },\n  returns: v.id(\"VerificationCode\"),\n  handler: async (ctx, args) => {\n    return await ctx.db.insert(\"VerificationCode\", args as any);\n  },\n});\n\n/** Delete a verification code document. */\nexport const verificationCodeDelete = mutation({\n  args: { verificationCodeId: v.id(\"VerificationCode\") },\n  returns: v.null(),\n  handler: async (ctx, { verificationCodeId }) => {\n    await ctx.db.delete(\"VerificationCode\", verificationCodeId);\n    return null;\n  },\n});\n\n// ============================================================================\n// Refresh Tokens\n// ============================================================================\n\n/** Create a new refresh token for a session. */\nexport const refreshTokenCreate = mutation({\n  args: {\n    sessionId: v.id(\"Session\"),\n    expirationTime: v.number(),\n    parentRefreshTokenId: v.optional(v.id(\"RefreshToken\")),\n  },\n  returns: v.id(\"RefreshToken\"),\n  handler: async (ctx, args) => {\n    return await ctx.db.insert(\"RefreshToken\", args as any);\n  },\n});\n\n/** Retrieve a refresh token by its document ID. */\nexport const refreshTokenGetById = query({\n  args: { refreshTokenId: v.id(\"RefreshToken\") },\n  returns: v.union(vRefreshTokenDoc, v.null()),\n  handler: async (ctx, { refreshTokenId }) => {\n    return await ctx.db.get(\"RefreshToken\", refreshTokenId);\n  },\n});\n\n/** Patch a refresh token document with partial data. */\nexport const refreshTokenPatch = mutation({\n  args: { refreshTokenId: v.id(\"RefreshToken\"), data: v.any() },\n  returns: v.null(),\n  handler: async (ctx, { refreshTokenId, data }) => {\n    await ctx.db.patch(\"RefreshToken\", refreshTokenId, data);\n    return null;\n  },\n});\n\n/** Get child tokens that were created by exchanging a specific parent token. */\nexport const refreshTokenGetChildren = query({\n  args: {\n    sessionId: v.id(\"Session\"),\n    parentRefreshTokenId: v.id(\"RefreshToken\"),\n  },\n  returns: v.array(vRefreshTokenDoc),\n  handler: async (ctx, { sessionId, parentRefreshTokenId }) => {\n    return await ctx.db\n      .query(\"RefreshToken\")\n      .withIndex(\"session_id_parent_refresh_token_id\", (q) =>\n        q\n          .eq(\"sessionId\", sessionId as any)\n          .eq(\"parentRefreshTokenId\", parentRefreshTokenId as any),\n      )\n      .collect();\n  },\n});\n\n/** List all refresh tokens for a session. */\nexport const refreshTokenListBySession = query({\n  args: { sessionId: v.id(\"Session\") },\n  returns: v.array(vRefreshTokenDoc),\n  handler: async (ctx, { sessionId }) => {\n    return await ctx.db\n      .query(\"RefreshToken\")\n      .withIndex(\"session_id_parent_refresh_token_id\", (q) =>\n        q.eq(\"sessionId\", sessionId as any),\n      )\n      .collect();\n  },\n});\n\n/** Delete all refresh tokens for a session. */\nexport const refreshTokenDeleteAll = mutation({\n  args: { sessionId: v.id(\"Session\") },\n  returns: v.null(),\n  handler: async (ctx, { sessionId }) => {\n    const tokens = await ctx.db\n      .query(\"RefreshToken\")\n      .withIndex(\"session_id_parent_refresh_token_id\", (q) =>\n        q.eq(\"sessionId\", sessionId as any),\n      )\n      .collect();\n    await Promise.all(\n      tokens.map((token) => ctx.db.delete(\"RefreshToken\", token._id)),\n    );\n    return null;\n  },\n});\n\n/** Get the active (unused) refresh token for a session. */\nexport const refreshTokenGetActive = query({\n  args: { sessionId: v.id(\"Session\") },\n  returns: v.union(vRefreshTokenDoc, v.null()),\n  handler: async (ctx, { sessionId }) => {\n    return await ctx.db\n      .query(\"RefreshToken\")\n      .withIndex(\"session_id_first_used\", (q) =>\n        q.eq(\"sessionId\", sessionId as any).eq(\"firstUsedTime\", undefined),\n      )\n      .order(\"desc\")\n      .first();\n  },\n});\n"],"mappings":";;;;;;;;;;;AAuBA,MAAa,WAAW,MAAM;CAC5B,MAAM;EACJ,OAAO,EAAE,SACP,EAAE,OAAO;GACP,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC7B,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC;GACpC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC7B,CAAC,CACH;EACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;EACjD,SAAS,EAAE,SACT,EAAE,MACA,EAAE,QAAQ,gBAAgB,EAC1B,EAAE,QAAQ,OAAO,EACjB,EAAE,QAAQ,QAAQ,EAClB,EAAE,QAAQ,QAAQ,CACnB,CACF;EACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EAChE;CACD,SAAS,WAAW,SAAS;CAC7B,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,QAAQ,KAAK,SAAS,EAAE;EAC9B,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAC1D,MAAM,QAAQ,KAAK,SAAS;EAG5B,IAAI;AACJ,MAAI,MAAM,UAAU,OAClB,KAAI,IAAI,GACL,MAAM,OAAO,CACb,UAAU,UAAU,QAAQ,IAAI,GAAG,SAAS,MAAM,MAAO,CAAC;WACpD,MAAM,UAAU,OACzB,KAAI,IAAI,GACL,MAAM,OAAO,CACb,UAAU,UAAU,QAAQ,IAAI,GAAG,SAAS,MAAM,MAAO,CAAC;MAE7D,KAAI,IAAI,GAAG,MAAM,OAAO;AAI1B,MAAI,MAAM,gBAAgB,OACxB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,cAAc,EAAE,MAAM,YAAa,CAAC;AAEvE,MAAI,MAAM,SAAS,OACjB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,OAAO,EAAE,MAAM,KAAM,CAAC;AAGzD,MAAI,MAAM,UAAU,UAAa,MAAM,UAAU,OAC/C,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,QAAQ,EAAE,MAAM,MAAO,CAAC;AAG3D,MAAI,EAAE,MAAM,MAAM;EAGlB,MAAM,MAAM,MAAM,EAAE,SAAS;EAC7B,IAAI,WAAW;AACf,MAAI,KAAK,QAAQ;GACf,MAAM,YAAY,IAAI,WAAW,QAAQ,IAAI,QAAQ,KAAK,OAAO;AACjE,OAAI,cAAc,GAChB,YAAW,YAAY;;EAG3B,MAAM,OAAO,IAAI,MAAM,UAAU,WAAW,QAAQ,EAAE;EACtD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG;AAE/C,SAAO;GAAE;GAAO,YADG,UAAU,MAAM,MAAM,SAAS,GAAG,MAAM;GAC/B;;CAE/B,CAAC;;AAGF,MAAa,cAAc,MAAM;CAC/B,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE;CAC9B,SAAS,EAAE,MAAM,UAAU,EAAE,MAAM,CAAC;CACpC,SAAS,OAAO,KAAK,EAAE,aAAa;AAClC,SAAO,MAAM,IAAI,GAAG,IAAI,QAAQ,OAAO;;CAE1C,CAAC;;;;;;AAOF,MAAa,0BAA0B,MAAM;CAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE;CAC3B,SAAS,EAAE,MAAM,UAAU,EAAE,MAAM,CAAC;CACpC,SAAS,OAAO,KAAK,EAAE,YAAY;EACjC,MAAM,QAAQ,MAAM,IAAI,GACrB,MAAM,OAAO,CACb,UAAU,mBAAmB,MAC5B,EAAE,GAAG,SAAS,MAAM,CAAC,GAAG,yBAAyB,OAAU,CAC5D,CACA,KAAK,EAAE;AACV,SAAO,MAAM,WAAW,IAAI,MAAM,KAAK;;CAE1C,CAAC;;;;;;AAOF,MAAa,0BAA0B,MAAM;CAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE;CAC3B,SAAS,EAAE,MAAM,UAAU,EAAE,MAAM,CAAC;CACpC,SAAS,OAAO,KAAK,EAAE,YAAY;EACjC,MAAM,QAAQ,MAAM,IAAI,GACrB,MAAM,OAAO,CACb,UAAU,mBAAmB,MAC5B,EAAE,GAAG,SAAS,MAAM,CAAC,GAAG,yBAAyB,OAAU,CAC5D,CACA,KAAK,EAAE;AACV,SAAO,MAAM,WAAW,IAAI,MAAM,KAAK;;CAE1C,CAAC;;AAGF,MAAa,aAAa,SAAS;CACjC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;CACvB,SAAS,EAAE,GAAG,OAAO;CACrB,SAAS,OAAO,KAAK,EAAE,WAAW;AAChC,SAAO,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK;;CAE3C,CAAC;;AAGF,MAAa,aAAa,SAAS;CACjC,MAAM;EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;EAAE,MAAM,EAAE,KAAK;EAAE;CACzD,SAAS,EAAE,GAAG,OAAO;CACrB,SAAS,OAAO,KAAK,EAAE,QAAQ,WAAW;AACxC,MAAI,WAAW,QAAW;AACxB,SAAM,IAAI,GAAG,MAAM,QAAQ,QAAQ,KAAK;AACxC,UAAO;;AAET,SAAO,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK;;CAE3C,CAAC;;AAGF,MAAa,YAAY,SAAS;CAChC,MAAM;EAAE,QAAQ,EAAE,GAAG,OAAO;EAAE,MAAM,EAAE,KAAK;EAAE;CAC7C,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,QAAQ,WAAW;AACxC,QAAM,IAAI,GAAG,MAAM,QAAQ,QAAQ,KAAK;AACxC,SAAO;;CAEV,CAAC;;AAGF,MAAa,aAAa,SAAS;CACjC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE;CAC9B,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,aAAa;AAClC,MAAK,MAAM,IAAI,GAAG,IAAI,QAAQ,OAAO,KAAM,KACzC,OAAM,IAAI,GAAG,OAAO,QAAQ,OAAO;AAErC,SAAO;;CAEV,CAAC;;AAOF,MAAa,oBAAoB,MAAM;CACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE;CAC9B,SAAS,EAAE,MAAM,YAAY;CAC7B,SAAS,OAAO,KAAK,EAAE,aAAa;AAClC,SAAO,MAAM,IAAI,GACd,MAAM,UAAU,CAChB,UAAU,qBAAqB,MAAM,EAAE,GAAG,UAAU,OAAc,CAAC,CACnE,SAAS;;CAEf,CAAC;;AAGF,MAAa,aAAa,MAAM;CAC9B,MAAM;EAAE,UAAU,EAAE,QAAQ;EAAE,mBAAmB,EAAE,QAAQ;EAAE;CAC7D,SAAS,EAAE,MAAM,aAAa,EAAE,MAAM,CAAC;CACvC,SAAS,OAAO,KAAK,EAAE,UAAU,wBAAwB;AACvD,SAAO,MAAM,IAAI,GACd,MAAM,UAAU,CAChB,UAAU,wBAAwB,MACjC,EAAE,GAAG,YAAY,SAAS,CAAC,GAAG,qBAAqB,kBAAkB,CACtE,CACA,QAAQ;;CAEd,CAAC;;AAGF,MAAa,iBAAiB,MAAM;CAClC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM,aAAa,EAAE,MAAM,CAAC;CACvC,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GAAG,IAAI,WAAW,UAAU;;CAEhD,CAAC;;AAGF,MAAa,gBAAgB,SAAS;CACpC,MAAM;EACJ,QAAQ,EAAE,GAAG,OAAO;EACpB,UAAU,EAAE,QAAQ;EACpB,mBAAmB,EAAE,QAAQ;EAC7B,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC9B,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;EAC5B;CACD,SAAS,EAAE,GAAG,UAAU;CACxB,SAAS,OAAO,KAAK,SAAS;AAC5B,SAAO,MAAM,IAAI,GAAG,OAAO,WAAW,KAAY;;CAErD,CAAC;;AAGF,MAAa,eAAe,SAAS;CACnC,MAAM;EAAE,WAAW,EAAE,GAAG,UAAU;EAAE,MAAM,EAAE,KAAK;EAAE;CACnD,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,WAAW,WAAW;AAC3C,QAAM,IAAI,GAAG,MAAM,WAAW,WAAW,KAAK;AAC9C,SAAO;;CAEV,CAAC;;AAGF,MAAa,gBAAgB,SAAS;CACpC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,QAAM,IAAI,GAAG,OAAO,WAAW,UAAU;AACzC,SAAO;;CAEV,CAAC;;;;;;AAWF,MAAa,cAAc,MAAM;CAC/B,MAAM;EACJ,OAAO,EAAE,SACP,EAAE,OAAO,EACP,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,EACjC,CAAC,CACH;EACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;EACjD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EAChE;CACD,SAAS,WAAW,YAAY;CAChC,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,QAAQ,KAAK,SAAS,EAAE;EAC9B,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAC1D,MAAM,QAAQ,KAAK,SAAS;EAE5B,IAAI;AACJ,MAAI,MAAM,WAAW,OACnB,KAAI,IAAI,GACL,MAAM,UAAU,CAChB,UAAU,YAAY,QAAQ,IAAI,GAAG,UAAU,MAAM,OAAQ,CAAC;MAEjE,KAAI,IAAI,GAAG,MAAM,UAAU;AAG7B,MAAI,EAAE,MAAM,MAAM;EAElB,MAAM,MAAM,MAAM,EAAE,SAAS;EAC7B,IAAI,WAAW;AACf,MAAI,KAAK,QAAQ;GACf,MAAM,YAAY,IAAI,WAAW,QAAQ,IAAI,QAAQ,KAAK,OAAO;AACjE,OAAI,cAAc,GAChB,YAAW,YAAY;;EAG3B,MAAM,OAAO,IAAI,MAAM,UAAU,WAAW,QAAQ,EAAE;EACtD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG;AAE/C,SAAO;GAAE;GAAO,YADG,UAAU,MAAM,MAAM,SAAS,GAAG,MAAM;GAC/B;;CAE/B,CAAC;;AAGF,MAAa,gBAAgB,SAAS;CACpC,MAAM;EAAE,QAAQ,EAAE,GAAG,OAAO;EAAE,gBAAgB,EAAE,QAAQ;EAAE;CAC1D,SAAS,EAAE,GAAG,UAAU;CACxB,SAAS,OAAO,KAAK,EAAE,QAAQ,qBAAqB;AAClD,SAAO,MAAM,IAAI,GAAG,OAAO,WAAW;GAC5B;GACR;GACD,CAAC;;CAEL,CAAC;;AAGF,MAAa,iBAAiB,MAAM;CAClC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM,aAAa,EAAE,MAAM,CAAC;CACvC,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GAAG,IAAI,WAAW,UAAU;;CAEhD,CAAC;;AAGF,MAAa,gBAAgB,SAAS;CACpC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,MAAK,MAAM,IAAI,GAAG,IAAI,WAAW,UAAU,KAAM,KAC/C,OAAM,IAAI,GAAG,OAAO,WAAW,UAAU;AAE3C,SAAO;;CAEV,CAAC;;AAGF,MAAa,oBAAoB,MAAM;CACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE;CAC9B,SAAS,EAAE,MAAM,YAAY;CAC7B,SAAS,OAAO,KAAK,EAAE,aAAa;AAClC,SAAO,MAAM,IAAI,GACd,MAAM,UAAU,CAChB,UAAU,YAAY,MAAM,EAAE,GAAG,UAAU,OAAc,CAAC,CAC1D,SAAS;;CAEf,CAAC;;AAOF,MAAa,iBAAiB,SAAS;CACrC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,EAAE;CAChD,SAAS,EAAE,GAAG,eAAe;CAC7B,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GAAG,OAAO,gBAAgB,EAAa,WAAkB,CAAC;;CAE9E,CAAC;;AAGF,MAAa,kBAAkB,MAAM;CACnC,MAAM,EAAE,YAAY,EAAE,GAAG,eAAe,EAAE;CAC1C,SAAS,EAAE,MAAM,kBAAkB,EAAE,MAAM,CAAC;CAC5C,SAAS,OAAO,KAAK,EAAE,iBAAiB;AACtC,SAAO,MAAM,IAAI,GAAG,IAAI,gBAAgB,WAAW;;CAEtD,CAAC;;AAGF,MAAa,yBAAyB,MAAM;CAC1C,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE;CAC/B,SAAS,EAAE,MAAM,kBAAkB,EAAE,MAAM,CAAC;CAC5C,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GACd,MAAM,eAAe,CACrB,UAAU,cAAc,MAAM,EAAE,GAAG,aAAa,UAAU,CAAC,CAC3D,QAAQ;;CAEd,CAAC;;AAGF,MAAa,gBAAgB,SAAS;CACpC,MAAM;EAAE,YAAY,EAAE,GAAG,eAAe;EAAE,MAAM,EAAE,KAAK;EAAE;CACzD,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,YAAY,WAAW;AAC5C,QAAM,IAAI,GAAG,MAAM,gBAAgB,YAAY,KAAK;AACpD,SAAO;;CAEV,CAAC;;AAGF,MAAa,iBAAiB,SAAS;CACrC,MAAM,EAAE,YAAY,EAAE,GAAG,eAAe,EAAE;CAC1C,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,iBAAiB;AACtC,QAAM,IAAI,GAAG,OAAO,gBAAgB,WAAW;AAC/C,SAAO;;CAEV,CAAC;;AAOF,MAAa,iCAAiC,MAAM;CAClD,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM,sBAAsB,EAAE,MAAM,CAAC;CAChD,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GACd,MAAM,mBAAmB,CACzB,UAAU,eAAe,MAAM,EAAE,GAAG,aAAa,UAAiB,CAAC,CACnE,QAAQ;;CAEd,CAAC;;AAGF,MAAa,4BAA4B,MAAM;CAC7C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;CAC1B,SAAS,EAAE,MAAM,sBAAsB,EAAE,MAAM,CAAC;CAChD,SAAS,OAAO,KAAK,EAAE,WAAW;AAChC,SAAO,MAAM,IAAI,GACd,MAAM,mBAAmB,CACzB,UAAU,SAAS,MAAM,EAAE,GAAG,QAAQ,KAAK,CAAC,CAC5C,QAAQ;;CAEd,CAAC;;AAGF,MAAa,yBAAyB,SAAS;CAC7C,MAAM;EACJ,WAAW,EAAE,GAAG,UAAU;EAC1B,UAAU,EAAE,QAAQ;EACpB,MAAM,EAAE,QAAQ;EAChB,gBAAgB,EAAE,QAAQ;EAC1B,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EAChC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;EACrC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;EACtC;CACD,SAAS,EAAE,GAAG,mBAAmB;CACjC,SAAS,OAAO,KAAK,SAAS;AAC5B,SAAO,MAAM,IAAI,GAAG,OAAO,oBAAoB,KAAY;;CAE9D,CAAC;;AAGF,MAAa,yBAAyB,SAAS;CAC7C,MAAM,EAAE,oBAAoB,EAAE,GAAG,mBAAmB,EAAE;CACtD,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,yBAAyB;AAC9C,QAAM,IAAI,GAAG,OAAO,oBAAoB,mBAAmB;AAC3D,SAAO;;CAEV,CAAC;;AAOF,MAAa,qBAAqB,SAAS;CACzC,MAAM;EACJ,WAAW,EAAE,GAAG,UAAU;EAC1B,gBAAgB,EAAE,QAAQ;EAC1B,sBAAsB,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC;EACvD;CACD,SAAS,EAAE,GAAG,eAAe;CAC7B,SAAS,OAAO,KAAK,SAAS;AAC5B,SAAO,MAAM,IAAI,GAAG,OAAO,gBAAgB,KAAY;;CAE1D,CAAC;;AAGF,MAAa,sBAAsB,MAAM;CACvC,MAAM,EAAE,gBAAgB,EAAE,GAAG,eAAe,EAAE;CAC9C,SAAS,EAAE,MAAM,kBAAkB,EAAE,MAAM,CAAC;CAC5C,SAAS,OAAO,KAAK,EAAE,qBAAqB;AAC1C,SAAO,MAAM,IAAI,GAAG,IAAI,gBAAgB,eAAe;;CAE1D,CAAC;;AAGF,MAAa,oBAAoB,SAAS;CACxC,MAAM;EAAE,gBAAgB,EAAE,GAAG,eAAe;EAAE,MAAM,EAAE,KAAK;EAAE;CAC7D,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,gBAAgB,WAAW;AAChD,QAAM,IAAI,GAAG,MAAM,gBAAgB,gBAAgB,KAAK;AACxD,SAAO;;CAEV,CAAC;;AAGF,MAAa,0BAA0B,MAAM;CAC3C,MAAM;EACJ,WAAW,EAAE,GAAG,UAAU;EAC1B,sBAAsB,EAAE,GAAG,eAAe;EAC3C;CACD,SAAS,EAAE,MAAM,iBAAiB;CAClC,SAAS,OAAO,KAAK,EAAE,WAAW,2BAA2B;AAC3D,SAAO,MAAM,IAAI,GACd,MAAM,eAAe,CACrB,UAAU,uCAAuC,MAChD,EACG,GAAG,aAAa,UAAiB,CACjC,GAAG,wBAAwB,qBAA4B,CAC3D,CACA,SAAS;;CAEf,CAAC;;AAGF,MAAa,4BAA4B,MAAM;CAC7C,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM,iBAAiB;CAClC,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GACd,MAAM,eAAe,CACrB,UAAU,uCAAuC,MAChD,EAAE,GAAG,aAAa,UAAiB,CACpC,CACA,SAAS;;CAEf,CAAC;;AAGF,MAAa,wBAAwB,SAAS;CAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,gBAAgB;EACrC,MAAM,SAAS,MAAM,IAAI,GACtB,MAAM,eAAe,CACrB,UAAU,uCAAuC,MAChD,EAAE,GAAG,aAAa,UAAiB,CACpC,CACA,SAAS;AACZ,QAAM,QAAQ,IACZ,OAAO,KAAK,UAAU,IAAI,GAAG,OAAO,gBAAgB,MAAM,IAAI,CAAC,CAChE;AACD,SAAO;;CAEV,CAAC;;AAGF,MAAa,wBAAwB,MAAM;CACzC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE;CACpC,SAAS,EAAE,MAAM,kBAAkB,EAAE,MAAM,CAAC;CAC5C,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GACd,MAAM,eAAe,CACrB,UAAU,0BAA0B,MACnC,EAAE,GAAG,aAAa,UAAiB,CAAC,GAAG,iBAAiB,OAAU,CACnE,CACA,MAAM,OAAO,CACb,OAAO;;CAEb,CAAC"}

package/dist/component/public/keys.d.ts

@@ -1,41 +0,0 @@
-declare namespace keys_d_exports {
-  export { keyDelete, keyGetByHashedKey, keyGetById, keyInsert, keyList, keyListByUserId, keyPatch };
-}
-/**
- * Insert a new API key record.
- *
- * The caller is responsible for hashing the raw key before passing it here —
- * this function only stores the hash and metadata.
- */
-declare const keyInsert: any;
-/**
- * Look up an API key by its SHA-256 hash.
- *
- * Used during Bearer token verification. Returns the full key record
- * (including rate limit state) or `null` if not found.
- */
-declare const keyGetByHashedKey: any;
-/**
- * @deprecated Use `keyList` with `where: { userId }` instead.
- * Kept for backward compatibility with generated component types.
- */
-declare const keyListByUserId: any;
-/**
- * List API keys with optional filtering, sorting, and pagination.
- *
- * Returns `{ items, nextCursor }`. Supports filtering by `userId`,
- * `revoked`, `name`, and `prefix`.
- */
-declare const keyList: any;
-/** Get a single API key by document ID. */
-declare const keyGetById: any;
-/**
- * Patch an API key record. Used for updating name, scopes, rate limit config,
- * revocation, and lastUsedAt / rate limit state tracking.
- */
-declare const keyPatch: any;
-/** Hard delete an API key record. */
-declare const keyDelete: any;
-//#endregion
-export { keyDelete, keyGetByHashedKey, keyGetById, keyInsert, keyList, keyListByUserId, keyPatch, keys_d_exports };
-//# sourceMappingURL=keys.d.ts.map

package/dist/component/public/keys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.d.ts","names":[],"sources":["../../../src/component/public/keys.ts"],"mappings":";;;;;;;;;cAsBa,SAAA;;;;;;AAAb;cAgCa,iBAAA;;;;AAAb;cAea,eAAA;;;;AAAb;;;cAiBa,OAAA;;cAmEA,UAAA;;;;;cAYA,QAAA;;cA4BA,SAAA"}

package/dist/component/public/keys.js

@@ -1,157 +0,0 @@
-import { mutation, query } from "../functions.js";
-import { vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope } from "../model.js";
-import { ConvexError, v, vPaginated } from "./shared.js";
-
-//#region src/component/public/keys.ts
-/**
-* Insert a new API key record.
-*
-* The caller is responsible for hashing the raw key before passing it here —
-* this function only stores the hash and metadata.
-*/
-const keyInsert = mutation({
-	args: {
-		userId: v.id("User"),
-		prefix: v.string(),
-		hashedKey: v.string(),
-		name: v.string(),
-		scopes: v.array(v.object({
-			resource: v.string(),
-			actions: v.array(v.string())
-		})),
-		rateLimit: v.optional(vApiKeyRateLimit),
-		expiresAt: v.optional(v.number()),
-		metadata: v.optional(v.any())
-	},
-	returns: v.id("ApiKey"),
-	handler: async (ctx, args) => {
-		return await ctx.db.insert("ApiKey", {
-			...args,
-			createdAt: Date.now(),
-			revoked: false
-		});
-	}
-});
-/**
-* Look up an API key by its SHA-256 hash.
-*
-* Used during Bearer token verification. Returns the full key record
-* (including rate limit state) or `null` if not found.
-*/
-const keyGetByHashedKey = query({
-	args: { hashedKey: v.string() },
-	returns: v.union(vApiKeyDoc, v.null()),
-	handler: async (ctx, { hashedKey }) => {
-		return await ctx.db.query("ApiKey").withIndex("hashed_key", (q) => q.eq("hashedKey", hashedKey)).first();
-	}
-});
-/**
-* @deprecated Use `keyList` with `where: { userId }` instead.
-* Kept for backward compatibility with generated component types.
-*/
-const keyListByUserId = query({
-	args: { userId: v.id("User") },
-	returns: v.array(vApiKeyDoc),
-	handler: async (ctx, { userId }) => {
-		return await ctx.db.query("ApiKey").withIndex("user_id", (q) => q.eq("userId", userId)).collect();
-	}
-});
-/**
-* List API keys with optional filtering, sorting, and pagination.
-*
-* Returns `{ items, nextCursor }`. Supports filtering by `userId`,
-* `revoked`, `name`, and `prefix`.
-*/
-const keyList = query({
-	args: {
-		where: v.optional(v.object({
-			userId: v.optional(v.id("User")),
-			revoked: v.optional(v.boolean()),
-			name: v.optional(v.string()),
-			prefix: v.optional(v.string())
-		})),
-		limit: v.optional(v.number()),
-		cursor: v.optional(v.union(v.string(), v.null())),
-		orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("name"), v.literal("lastUsedAt"), v.literal("expiresAt"), v.literal("revoked"))),
-		order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
-	},
-	returns: vPaginated(vApiKeyDoc),
-	handler: async (ctx, args) => {
-		const where = args.where ?? {};
-		const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
-		const order = args.order ?? "desc";
-		let q;
-		if (where.userId !== void 0) q = ctx.db.query("ApiKey").withIndex("user_id", (idx) => idx.eq("userId", where.userId));
-		else q = ctx.db.query("ApiKey");
-		if (where.revoked !== void 0) q = q.filter((f) => f.eq(f.field("revoked"), where.revoked));
-		if (where.name !== void 0) q = q.filter((f) => f.eq(f.field("name"), where.name));
-		if (where.prefix !== void 0) q = q.filter((f) => f.eq(f.field("prefix"), where.prefix));
-		q = q.order(order);
-		const all = await q.collect();
-		let startIdx = 0;
-		if (args.cursor) {
-			const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
-			if (cursorIdx !== -1) startIdx = cursorIdx + 1;
-		}
-		const page = all.slice(startIdx, startIdx + limit + 1);
-		const hasMore = page.length > limit;
-		const items = hasMore ? page.slice(0, limit) : page;
-		return {
-			items,
-			nextCursor: hasMore ? items[items.length - 1]._id : null
-		};
-	}
-});
-/** Get a single API key by document ID. */
-const keyGetById = query({
-	args: { keyId: v.id("ApiKey") },
-	returns: v.union(vApiKeyDoc, v.null()),
-	handler: async (ctx, { keyId }) => {
-		return await ctx.db.get("ApiKey", keyId);
-	}
-});
-/**
-* Patch an API key record. Used for updating name, scopes, rate limit config,
-* revocation, and lastUsedAt / rate limit state tracking.
-*/
-const keyPatch = mutation({
-	args: {
-		keyId: v.id("ApiKey"),
-		data: v.object({
-			name: v.optional(v.string()),
-			scopes: v.optional(v.array(vApiKeyScope)),
-			rateLimit: v.optional(vApiKeyRateLimit),
-			rateLimitState: v.optional(vApiKeyRateLimitState),
-			revoked: v.optional(v.boolean()),
-			lastUsedAt: v.optional(v.number())
-		})
-	},
-	returns: v.null(),
-	handler: async (ctx, { keyId, data }) => {
-		if (await ctx.db.get("ApiKey", keyId) === null) throw new ConvexError({
-			code: "KEY_NOT_FOUND",
-			message: "API key not found",
-			keyId
-		});
-		await ctx.db.patch("ApiKey", keyId, data);
-		return null;
-	}
-});
-/** Hard delete an API key record. */
-const keyDelete = mutation({
-	args: { keyId: v.id("ApiKey") },
-	returns: v.null(),
-	handler: async (ctx, { keyId }) => {
-		if (await ctx.db.get("ApiKey", keyId) === null) throw new ConvexError({
-			code: "KEY_NOT_FOUND",
-			message: "API key not found",
-			keyId
-		});
-		await ctx.db.delete("ApiKey", keyId);
-		return null;
-	}
-});
-
-//#endregion
-export { keyDelete, keyGetByHashedKey, keyGetById, keyInsert, keyList, keyListByUserId, keyPatch };
-//# sourceMappingURL=keys.js.map

package/dist/component/public/keys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.js","names":[],"sources":["../../../src/component/public/keys.ts"],"sourcesContent":["import {\n  ConvexError,\n  mutation,\n  query,\n  v,\n  vApiKeyDoc,\n  vApiKeyRateLimit,\n  vApiKeyRateLimitState,\n  vApiKeyScope,\n  vPaginated,\n} from \"./shared\";\n\n// ============================================================================\n// API Keys\n// ============================================================================\n\n/**\n * Insert a new API key record.\n *\n * The caller is responsible for hashing the raw key before passing it here —\n * this function only stores the hash and metadata.\n */\nexport const keyInsert = mutation({\n  args: {\n    userId: v.id(\"User\"),\n    prefix: v.string(),\n    hashedKey: v.string(),\n    name: v.string(),\n    scopes: v.array(\n      v.object({\n        resource: v.string(),\n        actions: v.array(v.string()),\n      }),\n    ),\n    rateLimit: v.optional(vApiKeyRateLimit),\n    expiresAt: v.optional(v.number()),\n    metadata: v.optional(v.any()),\n  },\n  returns: v.id(\"ApiKey\"),\n  handler: async (ctx, args) => {\n    return await ctx.db.insert(\"ApiKey\", {\n      ...args,\n      createdAt: Date.now(),\n      revoked: false,\n    });\n  },\n});\n\n/**\n * Look up an API key by its SHA-256 hash.\n *\n * Used during Bearer token verification. Returns the full key record\n * (including rate limit state) or `null` if not found.\n */\nexport const keyGetByHashedKey = query({\n  args: { hashedKey: v.string() },\n  returns: v.union(vApiKeyDoc, v.null()),\n  handler: async (ctx, { hashedKey }) => {\n    return await ctx.db\n      .query(\"ApiKey\")\n      .withIndex(\"hashed_key\", (q) => q.eq(\"hashedKey\", hashedKey))\n      .first();\n  },\n});\n\n/**\n * @deprecated Use `keyList` with `where: { userId }` instead.\n * Kept for backward compatibility with generated component types.\n */\nexport const keyListByUserId = query({\n  args: { userId: v.id(\"User\") },\n  returns: v.array(vApiKeyDoc),\n  handler: async (ctx, { userId }) => {\n    return await ctx.db\n      .query(\"ApiKey\")\n      .withIndex(\"user_id\", (q) => q.eq(\"userId\", userId))\n      .collect();\n  },\n});\n\n/**\n * List API keys with optional filtering, sorting, and pagination.\n *\n * Returns `{ items, nextCursor }`. Supports filtering by `userId`,\n * `revoked`, `name`, and `prefix`.\n */\nexport const keyList = query({\n  args: {\n    where: v.optional(\n      v.object({\n        userId: v.optional(v.id(\"User\")),\n        revoked: v.optional(v.boolean()),\n        name: v.optional(v.string()),\n        prefix: v.optional(v.string()),\n      }),\n    ),\n    limit: v.optional(v.number()),\n    cursor: v.optional(v.union(v.string(), v.null())),\n    orderBy: v.optional(\n      v.union(\n        v.literal(\"_creationTime\"),\n        v.literal(\"name\"),\n        v.literal(\"lastUsedAt\"),\n        v.literal(\"expiresAt\"),\n        v.literal(\"revoked\"),\n      ),\n    ),\n    order: v.optional(v.union(v.literal(\"asc\"), v.literal(\"desc\"))),\n  },\n  returns: vPaginated(vApiKeyDoc),\n  handler: async (ctx, args) => {\n    const where = args.where ?? {};\n    const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);\n    const order = args.order ?? \"desc\";\n\n    let q;\n    if (where.userId !== undefined) {\n      q = ctx.db\n        .query(\"ApiKey\")\n        .withIndex(\"user_id\", (idx) => idx.eq(\"userId\", where.userId!));\n    } else {\n      q = ctx.db.query(\"ApiKey\");\n    }\n\n    if (where.revoked !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"revoked\"), where.revoked!));\n    }\n    if (where.name !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"name\"), where.name!));\n    }\n    if (where.prefix !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"prefix\"), where.prefix!));\n    }\n\n    q = q.order(order);\n\n    const all = await q.collect();\n    let startIdx = 0;\n    if (args.cursor) {\n      const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);\n      if (cursorIdx !== -1) {\n        startIdx = cursorIdx + 1;\n      }\n    }\n    const page = all.slice(startIdx, startIdx + limit + 1);\n    const hasMore = page.length > limit;\n    const items = hasMore ? page.slice(0, limit) : page;\n    const nextCursor = hasMore ? items[items.length - 1]._id : null;\n    return { items, nextCursor };\n  },\n});\n\n/** Get a single API key by document ID. */\nexport const keyGetById = query({\n  args: { keyId: v.id(\"ApiKey\") },\n  returns: v.union(vApiKeyDoc, v.null()),\n  handler: async (ctx, { keyId }) => {\n    return await ctx.db.get(\"ApiKey\", keyId);\n  },\n});\n\n/**\n * Patch an API key record. Used for updating name, scopes, rate limit config,\n * revocation, and lastUsedAt / rate limit state tracking.\n */\nexport const keyPatch = mutation({\n  args: {\n    keyId: v.id(\"ApiKey\"),\n    data: v.object({\n      name: v.optional(v.string()),\n      scopes: v.optional(v.array(vApiKeyScope)),\n      rateLimit: v.optional(vApiKeyRateLimit),\n      rateLimitState: v.optional(vApiKeyRateLimitState),\n      revoked: v.optional(v.boolean()),\n      lastUsedAt: v.optional(v.number()),\n    }),\n  },\n  returns: v.null(),\n  handler: async (ctx, { keyId, data }) => {\n    const key = await ctx.db.get(\"ApiKey\", keyId);\n    if (key === null) {\n      throw new ConvexError({\n        code: \"KEY_NOT_FOUND\",\n        message: \"API key not found\",\n        keyId,\n      });\n    }\n    await ctx.db.patch(\"ApiKey\", keyId, data);\n    return null;\n  },\n});\n\n/** Hard delete an API key record. */\nexport const keyDelete = mutation({\n  args: { keyId: v.id(\"ApiKey\") },\n  returns: v.null(),\n  handler: async (ctx, { keyId }) => {\n    const key = await ctx.db.get(\"ApiKey\", keyId);\n    if (key === null) {\n      throw new ConvexError({\n        code: \"KEY_NOT_FOUND\",\n        message: \"API key not found\",\n        keyId,\n      });\n    }\n    await ctx.db.delete(\"ApiKey\", keyId);\n    return null;\n  },\n});\n"],"mappings":";;;;;;;;;;;AAsBA,MAAa,YAAY,SAAS;CAChC,MAAM;EACJ,QAAQ,EAAE,GAAG,OAAO;EACpB,QAAQ,EAAE,QAAQ;EAClB,WAAW,EAAE,QAAQ;EACrB,MAAM,EAAE,QAAQ;EAChB,QAAQ,EAAE,MACR,EAAE,OAAO;GACP,UAAU,EAAE,QAAQ;GACpB,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC;GAC7B,CAAC,CACH;EACD,WAAW,EAAE,SAAS,iBAAiB;EACvC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;EAC9B;CACD,SAAS,EAAE,GAAG,SAAS;CACvB,SAAS,OAAO,KAAK,SAAS;AAC5B,SAAO,MAAM,IAAI,GAAG,OAAO,UAAU;GACnC,GAAG;GACH,WAAW,KAAK,KAAK;GACrB,SAAS;GACV,CAAC;;CAEL,CAAC;;;;;;;AAQF,MAAa,oBAAoB,MAAM;CACrC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE;CAC/B,SAAS,EAAE,MAAM,YAAY,EAAE,MAAM,CAAC;CACtC,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GACd,MAAM,SAAS,CACf,UAAU,eAAe,MAAM,EAAE,GAAG,aAAa,UAAU,CAAC,CAC5D,OAAO;;CAEb,CAAC;;;;;AAMF,MAAa,kBAAkB,MAAM;CACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE;CAC9B,SAAS,EAAE,MAAM,WAAW;CAC5B,SAAS,OAAO,KAAK,EAAE,aAAa;AAClC,SAAO,MAAM,IAAI,GACd,MAAM,SAAS,CACf,UAAU,YAAY,MAAM,EAAE,GAAG,UAAU,OAAO,CAAC,CACnD,SAAS;;CAEf,CAAC;;;;;;;AAQF,MAAa,UAAU,MAAM;CAC3B,MAAM;EACJ,OAAO,EAAE,SACP,EAAE,OAAO;GACP,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;GAChC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;GAChC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC5B,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC/B,CAAC,CACH;EACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;EACjD,SAAS,EAAE,SACT,EAAE,MACA,EAAE,QAAQ,gBAAgB,EAC1B,EAAE,QAAQ,OAAO,EACjB,EAAE,QAAQ,aAAa,EACvB,EAAE,QAAQ,YAAY,EACtB,EAAE,QAAQ,UAAU,CACrB,CACF;EACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EAChE;CACD,SAAS,WAAW,WAAW;CAC/B,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,QAAQ,KAAK,SAAS,EAAE;EAC9B,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAC1D,MAAM,QAAQ,KAAK,SAAS;EAE5B,IAAI;AACJ,MAAI,MAAM,WAAW,OACnB,KAAI,IAAI,GACL,MAAM,SAAS,CACf,UAAU,YAAY,QAAQ,IAAI,GAAG,UAAU,MAAM,OAAQ,CAAC;MAEjE,KAAI,IAAI,GAAG,MAAM,SAAS;AAG5B,MAAI,MAAM,YAAY,OACpB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,UAAU,EAAE,MAAM,QAAS,CAAC;AAE/D,MAAI,MAAM,SAAS,OACjB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,OAAO,EAAE,MAAM,KAAM,CAAC;AAEzD,MAAI,MAAM,WAAW,OACnB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,SAAS,EAAE,MAAM,OAAQ,CAAC;AAG7D,MAAI,EAAE,MAAM,MAAM;EAElB,MAAM,MAAM,MAAM,EAAE,SAAS;EAC7B,IAAI,WAAW;AACf,MAAI,KAAK,QAAQ;GACf,MAAM,YAAY,IAAI,WAAW,QAAQ,IAAI,QAAQ,KAAK,OAAO;AACjE,OAAI,cAAc,GAChB,YAAW,YAAY;;EAG3B,MAAM,OAAO,IAAI,MAAM,UAAU,WAAW,QAAQ,EAAE;EACtD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG;AAE/C,SAAO;GAAE;GAAO,YADG,UAAU,MAAM,MAAM,SAAS,GAAG,MAAM;GAC/B;;CAE/B,CAAC;;AAGF,MAAa,aAAa,MAAM;CAC9B,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE;CAC/B,SAAS,EAAE,MAAM,YAAY,EAAE,MAAM,CAAC;CACtC,SAAS,OAAO,KAAK,EAAE,YAAY;AACjC,SAAO,MAAM,IAAI,GAAG,IAAI,UAAU,MAAM;;CAE3C,CAAC;;;;;AAMF,MAAa,WAAW,SAAS;CAC/B,MAAM;EACJ,OAAO,EAAE,GAAG,SAAS;EACrB,MAAM,EAAE,OAAO;GACb,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC5B,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;GACzC,WAAW,EAAE,SAAS,iBAAiB;GACvC,gBAAgB,EAAE,SAAS,sBAAsB;GACjD,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;GAChC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;GACnC,CAAC;EACH;CACD,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,OAAO,WAAW;AAEvC,MADY,MAAM,IAAI,GAAG,IAAI,UAAU,MAAM,KACjC,KACV,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACT;GACD,CAAC;AAEJ,QAAM,IAAI,GAAG,MAAM,UAAU,OAAO,KAAK;AACzC,SAAO;;CAEV,CAAC;;AAGF,MAAa,YAAY,SAAS;CAChC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE;CAC/B,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,YAAY;AAEjC,MADY,MAAM,IAAI,GAAG,IAAI,UAAU,MAAM,KACjC,KACV,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACT;GACD,CAAC;AAEJ,QAAM,IAAI,GAAG,OAAO,UAAU,MAAM;AACpC,SAAO;;CAEV,CAAC"}

package/dist/component/public/shared.d.ts

@@ -1,26 +0,0 @@
-import { Id } from "../_generated/dataModel.js";
-import { mutation, query } from "../functions.js";
-import { vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vEnterpriseAuditEventDoc, vEnterpriseDoc, vEnterpriseDomainDoc, vEnterpriseDomainVerificationDoc, vEnterprisePolicy, vEnterpriseScimConfigDoc, vEnterpriseScimIdentityDoc, vEnterpriseSecretDoc, vEnterpriseSecretKind, vEnterpriseStatus, vEnterpriseWebhookDeliveryDoc, vEnterpriseWebhookEndpointDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vPasskeyDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookEndpointStatus } from "../model.js";
-import * as convex_values568 from "convex/values";
-import { ConvexError, v } from "convex/values";
-
-//#region src/component/public/shared.d.ts
-declare namespace shared_d_exports {
-  export { ConvexError, Id, TagPair, mutation, normalizeTag, normalizeTags, query, v, vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vEnterpriseAuditEventDoc, vEnterpriseDoc, vEnterpriseDomainDoc, vEnterpriseDomainVerificationDoc, vEnterprisePolicy, vEnterpriseScimConfigDoc, vEnterpriseScimIdentityDoc, vEnterpriseSecretDoc, vEnterpriseSecretKind, vEnterpriseStatus, vEnterpriseWebhookDeliveryDoc, vEnterpriseWebhookEndpointDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vPaginated, vPasskeyDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookEndpointStatus };
-}
-declare const vPaginated: (item: any) => convex_values568.VObject<{
-  items: any[];
-  nextCursor: string | null;
-}, {
-  items: convex_values568.VArray<any[], any, "required">;
-  nextCursor: convex_values568.VUnion<string | null, [convex_values568.VString<string, "required">, convex_values568.VNull<null, "required">], "required", never>;
-}, "required", "items" | "nextCursor">;
-type TagPair = {
-  key: string;
-  value: string;
-};
-declare function normalizeTag(tag: TagPair): TagPair;
-declare function normalizeTags(tags: TagPair[]): TagPair[];
-//#endregion
-export { ConvexError, type Id, TagPair, mutation, normalizeTag, normalizeTags, query, shared_d_exports, v, vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vEnterpriseAuditEventDoc, vEnterpriseDoc, vEnterpriseDomainDoc, vEnterpriseDomainVerificationDoc, vEnterprisePolicy, vEnterpriseScimConfigDoc, vEnterpriseScimIdentityDoc, vEnterpriseSecretDoc, vEnterpriseSecretKind, vEnterpriseStatus, vEnterpriseWebhookDeliveryDoc, vEnterpriseWebhookEndpointDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vPaginated, vPasskeyDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookEndpointStatus };
-//# sourceMappingURL=shared.d.ts.map

package/dist/component/public/shared.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.d.ts","names":[],"sources":["../../../src/component/public/shared.ts"],"mappings":";;;;;;;;;;cA2Fa,UAAA,GAAc,IAAA,2BAAS,OAAA;;;;SAIhC,gBAAA,CAAA,MAAA;;;KAEQ,OAAA;EAAY,GAAA;EAAa,KAAA;AAAA;AAAA,iBAErB,YAAA,CAAa,GAAA,EAAK,OAAA,GAAU,OAAA;AAAA,iBAO5B,aAAA,CAAc,IAAA,EAAM,OAAA,KAAY,OAAA"}

package/dist/component/public/shared.js

@@ -1,32 +0,0 @@
-import { mutation, query } from "../functions.js";
-import { vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vEnterpriseAuditEventDoc, vEnterpriseDoc, vEnterpriseDomainDoc, vEnterpriseDomainVerificationDoc, vEnterprisePolicy, vEnterpriseScimConfigDoc, vEnterpriseScimIdentityDoc, vEnterpriseSecretDoc, vEnterpriseSecretKind, vEnterpriseStatus, vEnterpriseWebhookDeliveryDoc, vEnterpriseWebhookEndpointDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vPasskeyDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookEndpointStatus } from "../model.js";
-import { ConvexError, v } from "convex/values";
-
-//#region src/component/public/shared.ts
-const vPaginated = (item) => v.object({
-	items: v.array(item),
-	nextCursor: v.union(v.string(), v.null())
-});
-function normalizeTag(tag) {
-	return {
-		key: tag.key.trim().toLowerCase(),
-		value: tag.value.trim().toLowerCase()
-	};
-}
-function normalizeTags(tags) {
-	const seen = /* @__PURE__ */ new Set();
-	const result = [];
-	for (const raw of tags) {
-		const t = normalizeTag(raw);
-		const composite = `${t.key}\0${t.value}`;
-		if (!seen.has(composite)) {
-			seen.add(composite);
-			result.push(t);
-		}
-	}
-	return result;
-}
-
-//#endregion
-export { ConvexError, mutation, normalizeTag, normalizeTags, query, v, vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vEnterpriseAuditEventDoc, vEnterpriseDoc, vEnterpriseDomainDoc, vEnterpriseDomainVerificationDoc, vEnterprisePolicy, vEnterpriseScimConfigDoc, vEnterpriseScimIdentityDoc, vEnterpriseSecretDoc, vEnterpriseSecretKind, vEnterpriseStatus, vEnterpriseWebhookDeliveryDoc, vEnterpriseWebhookEndpointDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vPaginated, vPasskeyDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookEndpointStatus };
-//# sourceMappingURL=shared.js.map

package/dist/component/public/shared.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.js","names":[],"sources":["../../../src/component/public/shared.ts"],"sourcesContent":["import { ConvexError, v } from \"convex/values\";\n\nimport type { Id } from \"../_generated/dataModel\";\nimport { mutation, query } from \"../functions\";\nimport {\n  vAccountDoc,\n  vApiKeyDoc,\n  vApiKeyRateLimit,\n  vApiKeyRateLimitState,\n  vApiKeyScope,\n  vAuditActorType,\n  vAuditStatus,\n  vAuthVerifierDoc,\n  vDeviceCodeDoc,\n  vDeviceStatus,\n  vEnterpriseAuditEventDoc,\n  vEnterpriseDoc,\n  vEnterpriseDomainDoc,\n  vEnterpriseDomainVerificationDoc,\n  vEnterprisePolicy,\n  vEnterpriseScimConfigDoc,\n  vEnterpriseScimIdentityDoc,\n  vEnterpriseSecretDoc,\n  vEnterpriseSecretKind,\n  vEnterpriseStatus,\n  vEnterpriseWebhookDeliveryDoc,\n  vEnterpriseWebhookEndpointDoc,\n  vGroupDoc,\n  vGroupInviteDoc,\n  vGroupMemberDoc,\n  vInviteAcceptByTokenResult,\n  vInviteStatus,\n  vPasskeyDoc,\n  vRateLimitResult,\n  vRefreshTokenDoc,\n  vScimResourceType,\n  vScimStatus,\n  vSessionDoc,\n  vTag,\n  vTotpFactorDoc,\n  vUserDoc,\n  vVerificationCodeDoc,\n  vWebhookEndpointStatus,\n} from \"../model\";\n\nexport {\n  ConvexError,\n  mutation,\n  query,\n  v,\n  vAccountDoc,\n  vApiKeyDoc,\n  vApiKeyRateLimit,\n  vApiKeyRateLimitState,\n  vApiKeyScope,\n  vAuditActorType,\n  vAuditStatus,\n  vAuthVerifierDoc,\n  vDeviceCodeDoc,\n  vDeviceStatus,\n  vEnterpriseAuditEventDoc,\n  vEnterpriseDoc,\n  vEnterpriseDomainDoc,\n  vEnterpriseDomainVerificationDoc,\n  vEnterprisePolicy,\n  vEnterpriseScimConfigDoc,\n  vEnterpriseScimIdentityDoc,\n  vEnterpriseSecretDoc,\n  vEnterpriseSecretKind,\n  vEnterpriseStatus,\n  vEnterpriseWebhookDeliveryDoc,\n  vEnterpriseWebhookEndpointDoc,\n  vGroupDoc,\n  vGroupInviteDoc,\n  vGroupMemberDoc,\n  vInviteAcceptByTokenResult,\n  vInviteStatus,\n  vPasskeyDoc,\n  vRateLimitResult,\n  vRefreshTokenDoc,\n  vScimResourceType,\n  vScimStatus,\n  vSessionDoc,\n  vTag,\n  vTotpFactorDoc,\n  vUserDoc,\n  vVerificationCodeDoc,\n  vWebhookEndpointStatus,\n};\nexport type { Id };\n\nexport const vPaginated = (item: any) =>\n  v.object({\n    items: v.array(item),\n    nextCursor: v.union(v.string(), v.null()),\n  });\n\nexport type TagPair = { key: string; value: string };\n\nexport function normalizeTag(tag: TagPair): TagPair {\n  return {\n    key: tag.key.trim().toLowerCase(),\n    value: tag.value.trim().toLowerCase(),\n  };\n}\n\nexport function normalizeTags(tags: TagPair[]): TagPair[] {\n  const seen = new Set<string>();\n  const result: TagPair[] = [];\n  for (const raw of tags) {\n    const t = normalizeTag(raw);\n    const composite = `${t.key}\\0${t.value}`;\n    if (!seen.has(composite)) {\n      seen.add(composite);\n      result.push(t);\n    }\n  }\n  return result;\n}\n"],"mappings":";;;;;AA2FA,MAAa,cAAc,SACzB,EAAE,OAAO;CACP,OAAO,EAAE,MAAM,KAAK;CACpB,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC;CAC1C,CAAC;AAIJ,SAAgB,aAAa,KAAuB;AAClD,QAAO;EACL,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa;EACjC,OAAO,IAAI,MAAM,MAAM,CAAC,aAAa;EACtC;;AAGH,SAAgB,cAAc,MAA4B;CACxD,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAM,SAAoB,EAAE;AAC5B,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,IAAI,aAAa,IAAI;EAC3B,MAAM,YAAY,GAAG,EAAE,IAAI,IAAI,EAAE;AACjC,MAAI,CAAC,KAAK,IAAI,UAAU,EAAE;AACxB,QAAK,IAAI,UAAU;AACnB,UAAO,KAAK,EAAE;;;AAGlB,QAAO"}

package/dist/component/server/domains/core.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"core.js","names":[],"sources":["../../../../src/server/domains/core.ts"],"sourcesContent":["import { Auth, GenericActionCtx, GenericDataModel } from \"convex/server\";\nimport { GenericId } from \"convex/values\";\n\nimport {\n  buildScopeChecker,\n  checkKeyRateLimit,\n  generateApiKey,\n  hashApiKey,\n} from \"../keys\";\nimport { materializeProvider } from \"../providers\";\nimport { signInImpl } from \"../signin\";\nimport type {\n  AuthProviderConfig,\n  KeyDoc,\n  KeyScope,\n  ScopeChecker,\n  UserOrderBy,\n  UserWhere,\n} from \"../types\";\nimport {\n  generateRandomString,\n  sha256,\n  TOKEN_SUB_CLAIM_DIVIDER,\n} from \"../utils\";\n\ntype ComponentCtx = Pick<\n  GenericActionCtx<GenericDataModel>,\n  \"runQuery\" | \"runMutation\"\n>;\ntype ComponentReadCtx = Pick<GenericActionCtx<GenericDataModel>, \"runQuery\">;\ntype ComponentAuthReadCtx = ComponentReadCtx & { auth: Auth };\ntype AccountCredentials = { id: string; secret?: string };\ntype CreateAccountArgs = {\n  provider: string;\n  account: AccountCredentials;\n  profile: Record<string, unknown>;\n  shouldLinkViaEmail?: boolean;\n  shouldLinkViaPhone?: boolean;\n};\ntype RetrieveAccountArgs = { provider: string; account: AccountCredentials };\ntype UpdateAccountCredentialsArgs = {\n  provider: string;\n  account: { id: string; secret: string };\n};\n\ntype CoreDeps = {\n  config: any;\n  getAuth: () => any;\n  callInvalidateSessions: <DataModel extends GenericDataModel>(\n    ctx: GenericActionCtx<DataModel>,\n    args: { userId: GenericId<\"User\">; except?: GenericId<\"Session\">[] },\n  ) => Promise<void>;\n  callCreateAccountFromCredentials: <DataModel extends GenericDataModel>(\n    ctx: GenericActionCtx<DataModel>,\n    args: CreateAccountArgs,\n  ) => Promise<any>;\n  callRetrieveAccountWithCredentials: <DataModel extends GenericDataModel>(\n    ctx: GenericActionCtx<DataModel>,\n    args: RetrieveAccountArgs,\n  ) => Promise<any>;\n  callModifyAccount: <DataModel extends GenericDataModel>(\n    ctx: GenericActionCtx<DataModel>,\n    args: UpdateAccountCredentialsArgs,\n  ) => Promise<void>;\n  getEnrichCtx: () => <DataModel extends GenericDataModel>(\n    ctx: GenericActionCtx<DataModel>,\n  ) => any;\n  inviteTokenAlphabet: string;\n  inviteTokenLength: number;\n};\n\n/**\n * Build the core auth domains that back the canonical app API surface.\n */\nexport function createCoreDomains(deps: CoreDeps) {\n  const {\n    config,\n    getAuth,\n    callInvalidateSessions,\n    callCreateAccountFromCredentials,\n    callRetrieveAccountWithCredentials,\n    callModifyAccount,\n    getEnrichCtx,\n    inviteTokenAlphabet,\n    inviteTokenLength,\n  } = deps;\n\n  const roleDefinitions = config.authorization.roles as Record<\n    string,\n    { label?: string; grants: string[] }\n  >;\n\n  const getRoleDefinition = (roleId: string) => {\n    return roleDefinitions[roleId] ?? null;\n  };\n\n  const normalizeRoleIds = (\n    roleIds?: string[],\n  ):\n    | { ok: true; roleIds: string[] }\n    | { ok: false; invalidRoleIds: string[] } => {\n    const normalized = Array.from(new Set(roleIds ?? []));\n    const invalid = normalized.filter((id) => getRoleDefinition(id) === null);\n    if (invalid.length > 0) {\n      return { ok: false, invalidRoleIds: invalid };\n    }\n    return { ok: true, roleIds: normalized };\n  };\n\n  const resolveGrantedPermissions = (roleIds?: string[]) => {\n    const grants = new Set<string>();\n    for (const roleId of roleIds ?? []) {\n      const role = getRoleDefinition(roleId);\n      if (role === null) continue;\n      for (const grant of role.grants) {\n        grants.add(grant);\n      }\n    }\n    return Array.from(grants).sort();\n  };\n\n  // Per-execution cache — attached to ctx so each function invocation has its own.\n  // Eliminates redundant cross-component RPCs for the same entity within a handler.\n  type CtxCache = {\n    users: Map<string, any>;\n    groups: Map<string, any>;\n  };\n  const AUTH_CACHE = Symbol(\"__convexAuthCache\");\n  function cache(ctx: any): CtxCache {\n    if (!ctx[AUTH_CACHE]) {\n      ctx[AUTH_CACHE] = {\n        users: new Map(),\n        groups: new Map(),\n      } satisfies CtxCache;\n    }\n    return ctx[AUTH_CACHE];\n  }\n\n  const user = {\n    id: async (\n      ctx: { auth: Auth } & Partial<ComponentCtx>,\n      request?: Request,\n    ): Promise<string | null> => {\n      const identity = await ctx.auth.getUserIdentity();\n      if (identity !== null) {\n        const [userId] = identity.subject.split(TOKEN_SUB_CLAIM_DIVIDER);\n        return userId;\n      }\n      if (request !== undefined && \"runMutation\" in ctx && ctx.runMutation) {\n        const authHeader = request.headers.get(\"Authorization\");\n        if (authHeader?.startsWith(\"Bearer sk_\")) {\n          const rawKey = authHeader.slice(7);\n          const result = await getAuth().key.verify(\n            ctx as ComponentCtx,\n            rawKey,\n          );\n          if (result.ok) {\n            return result.userId;\n          }\n          return null;\n        }\n      }\n      return null;\n    },\n    get: async (ctx: ComponentReadCtx, userId: string) => {\n      const c = cache(ctx);\n      if (c.users.has(userId)) return c.users.get(userId);\n      const result = await ctx.runQuery(config.component.public.userGetById, {\n        userId,\n      });\n      c.users.set(userId, result);\n      return result;\n    },\n    list: async (\n      ctx: ComponentReadCtx,\n      opts: {\n        where?: UserWhere;\n        limit?: number;\n        cursor?: string | null;\n        orderBy?: UserOrderBy;\n        order?: \"asc\" | \"desc\";\n      } = {},\n    ) => {\n      return await ctx.runQuery(config.component.public.userList, opts);\n    },\n    viewer: async (ctx: ComponentAuthReadCtx) => {\n      const userId = await user.id(ctx);\n      if (userId === null) return null;\n      return await user.get(ctx, userId);\n    },\n    update: async (\n      ctx: ComponentCtx,\n      userId: string,\n      data: Record<string, unknown>,\n    ) => {\n      await ctx.runMutation(config.component.public.userPatch, {\n        userId,\n        data,\n      });\n      return { ok: true as const, userId };\n    },\n    setActiveGroup: async (\n      ctx: ComponentCtx,\n      opts: { userId: string; groupId: string | null },\n    ) => {\n      const doc = await user.get(ctx, opts.userId);\n      const existingExtend =\n        doc !== null &&\n        doc.extend !== null &&\n        typeof doc.extend === \"object\" &&\n        !Array.isArray(doc.extend)\n          ? { ...(doc.extend as Record<string, unknown>) }\n          : {};\n      if (opts.groupId === null) {\n        const { lastActiveGroup: _omit, ...rest } = existingExtend;\n        await user.update(ctx, opts.userId, { extend: rest });\n        return { ok: true as const, userId: opts.userId, groupId: null };\n      }\n      await user.update(ctx, opts.userId, {\n        extend: { ...existingExtend, lastActiveGroup: opts.groupId },\n      });\n      return { ok: true as const, userId: opts.userId, groupId: opts.groupId };\n    },\n    getActiveGroup: async (\n      ctx: ComponentReadCtx,\n      opts: { userId: string },\n    ): Promise<string | null> => {\n      const doc = await user.get(ctx, opts.userId);\n      if (\n        doc !== null &&\n        doc.extend !== null &&\n        typeof doc.extend === \"object\" &&\n        !Array.isArray(doc.extend)\n      ) {\n        const val = (doc.extend as Record<string, unknown>).lastActiveGroup;\n        if (typeof val === \"string\") return val;\n      }\n      return null;\n    },\n    delete: async (\n      ctx: ComponentCtx,\n      userId: string,\n      opts?: { cascade?: boolean },\n    ) => {\n      const cascade = opts?.cascade !== false;\n      const [sessions, accounts, keys, members, passkeys, totps] =\n        await Promise.all([\n          ctx.runQuery(config.component.public.sessionListByUser, {\n            userId,\n          }) as Promise<Array<{ _id: string }>>,\n          ctx.runQuery(config.component.public.accountListByUser, {\n            userId,\n          }) as Promise<Array<{ _id: string }>>,\n          ctx.runQuery(config.component.public.keyListByUserId, {\n            userId,\n          }) as Promise<Array<{ _id: string }>>,\n          ctx.runQuery(config.component.public.memberListByUser, {\n            userId,\n          }) as Promise<Array<{ _id: string }>>,\n          ctx.runQuery(config.component.public.passkeyListByUserId, {\n            userId,\n          }) as Promise<Array<{ _id: string }>>,\n          ctx.runQuery(config.component.public.totpListByUserId, {\n            userId,\n          }) as Promise<Array<{ _id: string }>>,\n        ]);\n      const totalLinked =\n        sessions.length +\n        accounts.length +\n        keys.length +\n        members.length +\n        passkeys.length +\n        totps.length;\n      if (!cascade && totalLinked > 0) {\n        return { ok: false as const, code: \"INVALID_PARAMETERS\" as const };\n      }\n      const deletions: Promise<unknown>[] = [];\n      for (const s of sessions)\n        deletions.push(\n          ctx.runMutation(config.component.public.sessionDelete, {\n            sessionId: s._id,\n          }),\n        );\n      for (const a of accounts)\n        deletions.push(\n          ctx.runMutation(config.component.public.accountDelete, {\n            accountId: a._id,\n          }),\n        );\n      for (const k of keys)\n        deletions.push(\n          ctx.runMutation(config.component.public.keyDelete, { keyId: k._id }),\n        );\n      for (const m of members)\n        deletions.push(\n          ctx.runMutation(config.component.public.memberRemove, {\n            memberId: m._id,\n          }),\n        );\n      for (const p of passkeys)\n        deletions.push(\n          ctx.runMutation(config.component.public.passkeyDelete, {\n            passkeyId: p._id,\n          }),\n        );\n      for (const t of totps)\n        deletions.push(\n          ctx.runMutation(config.component.public.totpDelete, {\n            totpId: t._id,\n          }),\n        );\n      await Promise.all(deletions);\n      await ctx.runMutation(config.component.public.userDelete, { userId });\n      return { ok: true as const, userId };\n    },\n  };\n\n  const session = {\n    current: async (ctx: { auth: Auth }) => {\n      const identity = await ctx.auth.getUserIdentity();\n      if (identity === null) return null;\n      const [, sessionId] = identity.subject.split(TOKEN_SUB_CLAIM_DIVIDER);\n      return sessionId as GenericId<\"Session\">;\n    },\n    invalidate: async <DataModel extends GenericDataModel>(\n      ctx: GenericActionCtx<DataModel>,\n      args: { userId: GenericId<\"User\">; except?: GenericId<\"Session\">[] },\n    ) => {\n      await callInvalidateSessions(ctx, args);\n      return {\n        ok: true as const,\n        userId: args.userId,\n        except: args.except ?? [],\n      };\n    },\n    get: async (ctx: ComponentReadCtx, sessionId: string) => {\n      return await ctx.runQuery(config.component.public.sessionGetById, {\n        sessionId,\n      });\n    },\n    list: async (ctx: ComponentReadCtx, opts: { userId: string }) => {\n      return await ctx.runQuery(config.component.public.sessionListByUser, {\n        userId: opts.userId,\n      });\n    },\n  };\n\n  const account = {\n    create: async <DataModel extends GenericDataModel>(\n      ctx: GenericActionCtx<DataModel>,\n      args: CreateAccountArgs,\n    ) => {\n      const created = await callCreateAccountFromCredentials(ctx, args);\n      return { ok: true as const, ...created };\n    },\n    get: async <DataModel extends GenericDataModel>(\n      ctx: GenericActionCtx<DataModel>,\n      args: RetrieveAccountArgs,\n    ) => {\n      const result = await callRetrieveAccountWithCredentials(ctx, args);\n      if (typeof result === \"string\") {\n        return null;\n      }\n      return result;\n    },\n    update: async <DataModel extends GenericDataModel>(\n      ctx: GenericActionCtx<DataModel>,\n      args: UpdateAccountCredentialsArgs,\n    ) => {\n      await callModifyAccount(ctx, args);\n      return { ok: true as const, accountId: args.account.id };\n    },\n    delete: async (ctx: ComponentCtx, accountId: string) => {\n      const doc = await ctx.runQuery(config.component.public.accountGetById, {\n        accountId,\n      });\n      if (doc === null) {\n        return { ok: false as const, code: \"ACCOUNT_NOT_FOUND\" as const };\n      }\n      const allAccounts = (await ctx.runQuery(\n        config.component.public.accountListByUser,\n        { userId: (doc as any).userId },\n      )) as Array<{ _id: string }>;\n      if (allAccounts.length <= 1) {\n        return { ok: false as const, code: \"INVALID_PARAMETERS\" as const };\n      }\n      await ctx.runMutation(config.component.public.accountDelete, {\n        accountId,\n      });\n      return { ok: true as const, accountId };\n    },\n    listPasskeys: async (ctx: ComponentReadCtx, opts: { userId: string }) => {\n      return await ctx.runQuery(\n        config.component.public.passkeyListByUserId,\n        opts,\n      );\n    },\n    renamePasskey: async (\n      ctx: ComponentCtx,\n      passkeyId: string,\n      name: string,\n    ) => {\n      await ctx.runMutation(config.component.public.passkeyUpdateMeta, {\n        passkeyId,\n        data: { name },\n      });\n      return { ok: true as const, passkeyId };\n    },\n    deletePasskey: async (ctx: ComponentCtx, passkeyId: string) => {\n      await ctx.runMutation(config.component.public.passkeyDelete, {\n        passkeyId,\n      });\n      return { ok: true as const, passkeyId };\n    },\n    listTotps: async (ctx: ComponentReadCtx, opts: { userId: string }) => {\n      return await ctx.runQuery(config.component.public.totpListByUserId, opts);\n    },\n    deleteTotp: async (ctx: ComponentCtx, totpId: string) => {\n      await ctx.runMutation(config.component.public.totpDelete, { totpId });\n      return { ok: true as const, totpId };\n    },\n  };\n\n  const provider = {\n    signIn: async <DataModel extends GenericDataModel>(\n      ctx: GenericActionCtx<DataModel>,\n      providerConfig: AuthProviderConfig,\n      args: {\n        accountId?: GenericId<\"Account\">;\n        params?: Record<string, unknown>;\n      },\n    ) => {\n      const result = await signInImpl(\n        getEnrichCtx()(ctx),\n        materializeProvider(providerConfig),\n        args as {\n          accountId?: GenericId<\"Account\">;\n          params?: Record<string, any>;\n        },\n        { generateTokens: false, allowExtraProviders: true },\n      );\n      return result.kind === \"signedIn\"\n        ? result.signedIn !== null\n          ? {\n              userId: result.signedIn.userId,\n              sessionId: result.signedIn.sessionId,\n            }\n          : null\n        : null;\n    },\n  };\n\n  const group = {\n    create: async (\n      ctx: ComponentCtx,\n      data: {\n        name: string;\n        slug?: string;\n        type?: string;\n        parentGroupId?: string;\n        tags?: Array<{ key: string; value: string }>;\n        extend?: Record<string, unknown>;\n      },\n    ): Promise<{ ok: true; groupId: string }> => {\n      const groupId = (await ctx.runMutation(\n        config.component.public.groupCreate,\n        data,\n      )) as string;\n      return { ok: true, groupId };\n    },\n    get: async (ctx: ComponentReadCtx, groupId: string) => {\n      const c = cache(ctx);\n      if (c.groups.has(groupId)) return c.groups.get(groupId);\n      const result = await ctx.runQuery(config.component.public.groupGet, {\n        groupId,\n      });\n      c.groups.set(groupId, result);\n      return result;\n    },\n    list: async (\n      ctx: ComponentReadCtx,\n      opts?: {\n        where?: {\n          slug?: string;\n          type?: string;\n          parentGroupId?: string;\n          name?: string;\n          isRoot?: boolean;\n          tagsAll?: Array<{ key: string; value: string }>;\n          tagsAny?: Array<{ key: string; value: string }>;\n        };\n        limit?: number;\n        cursor?: string | null;\n        orderBy?: \"_creationTime\" | \"name\" | \"slug\" | \"type\";\n        order?: \"asc\" | \"desc\";\n      },\n    ) => {\n      return await ctx.runQuery(config.component.public.groupList, {\n        where: opts?.where,\n        limit: opts?.limit,\n        cursor: opts?.cursor,\n        orderBy: opts?.orderBy,\n        order: opts?.order,\n      });\n    },\n    update: async (\n      ctx: ComponentCtx,\n      groupId: string,\n      data: Record<string, unknown>,\n    ) => {\n      await ctx.runMutation(config.component.public.groupUpdate, {\n        groupId,\n        data,\n      });\n      return { ok: true as const, groupId };\n    },\n    delete: async (ctx: ComponentCtx, groupId: string) => {\n      await ctx.runMutation(config.component.public.groupDelete, { groupId });\n      return { ok: true as const, groupId };\n    },\n    ancestors: async (\n      ctx: ComponentReadCtx,\n      opts: { groupId: string; maxDepth?: number; includeSelf?: boolean },\n    ) => {\n      const maxDepth = Math.max(0, Math.floor(opts.maxDepth ?? 32));\n      const visited = new Set<string>();\n      const ancestors: any[] = [];\n      let cycleDetected = false;\n      let maxDepthReached = false;\n      let currentGroupId: string | undefined = opts.groupId;\n      let depth = 0;\n      let isFirst = true;\n      while (currentGroupId !== undefined) {\n        if (depth > maxDepth) {\n          maxDepthReached = true;\n          break;\n        }\n        if (visited.has(currentGroupId)) {\n          cycleDetected = true;\n          break;\n        }\n        visited.add(currentGroupId);\n        const doc = await group.get(ctx, currentGroupId);\n        if (doc === null) break;\n        if (isFirst) {\n          isFirst = false;\n          if (opts.includeSelf) ancestors.push(doc);\n          currentGroupId = doc.parentGroupId;\n          depth += 1;\n          continue;\n        }\n        ancestors.push(doc);\n        currentGroupId = doc.parentGroupId;\n        depth += 1;\n      }\n      return { ancestors, cycleDetected, maxDepthReached };\n    },\n  };\n\n  const member = {\n    create: async (\n      ctx: ComponentCtx,\n      data: {\n        groupId: string;\n        userId: string;\n        roleIds?: string[];\n        status?: string;\n        extend?: Record<string, unknown>;\n      },\n    ) => {\n      const normalized = normalizeRoleIds(data.roleIds);\n      if (!normalized.ok)\n        return {\n          ok: false as const,\n          code: \"INVALID_ROLE_IDS\" as const,\n          invalidRoleIds: normalized.invalidRoleIds,\n        };\n      const memberId = (await ctx.runMutation(\n        config.component.public.memberAdd,\n        { ...data, roleIds: normalized.roleIds },\n      )) as string;\n      return { ok: true as const, memberId };\n    },\n    get: async (ctx: ComponentReadCtx, memberId: string) => {\n      return await ctx.runQuery(config.component.public.memberGet, {\n        memberId,\n      });\n    },\n    getByUserAndGroup: async (\n      ctx: ComponentReadCtx,\n      opts: { userId: string; groupId: string },\n    ) => {\n      return await ctx.runQuery(\n        config.component.public.memberGetByGroupAndUser,\n        opts,\n      );\n    },\n    list: async (\n      ctx: ComponentReadCtx,\n      opts?: {\n        where?: {\n          groupId?: string;\n          userId?: string;\n          roleId?: string;\n          status?: string;\n        };\n        limit?: number;\n        cursor?: string | null;\n        orderBy?: \"_creationTime\" | \"status\";\n        order?: \"asc\" | \"desc\";\n      },\n    ) => {\n      return await ctx.runQuery(config.component.public.memberList, {\n        where: opts?.where,\n        limit: opts?.limit,\n        cursor: opts?.cursor,\n        orderBy: opts?.orderBy,\n        order: opts?.order,\n      });\n    },\n    delete: async (ctx: ComponentCtx, memberId: string) => {\n      await ctx.runMutation(config.component.public.memberRemove, { memberId });\n      return { ok: true as const, memberId };\n    },\n    update: async (\n      ctx: ComponentCtx,\n      memberId: string,\n      data: Record<string, unknown>,\n    ) => {\n      const nextData = { ...data };\n      if (\"roleIds\" in nextData) {\n        const normalized = normalizeRoleIds(\n          Array.isArray(nextData.roleIds)\n            ? (nextData.roleIds as string[])\n            : undefined,\n        );\n        if (!normalized.ok)\n          return {\n            ok: false as const,\n            code: \"INVALID_ROLE_IDS\" as const,\n            invalidRoleIds: normalized.invalidRoleIds,\n          };\n        nextData.roleIds = normalized.roleIds;\n      }\n      await ctx.runMutation(config.component.public.memberUpdate, {\n        memberId,\n        data: nextData,\n      });\n      return { ok: true as const, memberId };\n    },\n    resolve: async (\n      ctx: ComponentReadCtx,\n      opts: {\n        userId: string;\n        groupId: string;\n        roleIds?: string[];\n        grants?: string[];\n        maxDepth?: number;\n      },\n    ) => {\n      const normalized = normalizeRoleIds(opts.roleIds);\n      if (!normalized.ok)\n        return {\n          ok: false as const,\n          code: \"INVALID_ROLE_IDS\" as const,\n          invalidRoleIds: normalized.invalidRoleIds,\n        };\n      const requestedRoleIds = normalized.roleIds;\n      const roleFilter =\n        requestedRoleIds.length > 0 ? new Set(requestedRoleIds) : null;\n      const requiredGrants = Array.from(new Set(opts.grants ?? []));\n      const maxDepth = Math.max(0, Math.floor(opts.maxDepth ?? 32));\n\n      // Single cross-component RPC — hierarchy walk happens inside the component\n      const result = await ctx.runQuery(config.component.public.memberResolve, {\n        userId: opts.userId,\n        groupId: opts.groupId,\n        maxDepth,\n        ancestry: true,\n      });\n\n      const traversedGroupIds = result.traversedGroupIds ?? [];\n\n      if (result.membership === null) {\n        return {\n          requestedGroupId: opts.groupId,\n          matchedGroupId: null,\n          membership: null,\n          roleIds: [] as string[],\n          grants: [] as string[],\n          missingGrants: requiredGrants,\n          depth: null,\n          isDirect: false,\n          isInherited: false,\n          traversedGroupIds,\n          cycleDetected: false,\n          maxDepthReached: false,\n        };\n      }\n\n      // Grant resolution uses app-defined roles — stays server-side\n      const membershipRoleIds = (result.membership as any).roleIds ?? [];\n      const membershipGrants = resolveGrantedPermissions(membershipRoleIds);\n\n      // Check role filter\n      if (\n        roleFilter !== null &&\n        !membershipRoleIds.some((roleId: string) => roleFilter.has(roleId))\n      ) {\n        return {\n          requestedGroupId: opts.groupId,\n          matchedGroupId: null,\n          membership: null,\n          roleIds: [] as string[],\n          grants: [] as string[],\n          missingGrants: requiredGrants,\n          depth: null,\n          isDirect: false,\n          isInherited: false,\n          traversedGroupIds,\n          cycleDetected: false,\n          maxDepthReached: false,\n        };\n      }\n\n      // Check required grants\n      const missingGrants = requiredGrants.filter(\n        (grant) => !membershipGrants.includes(grant),\n      );\n      if (missingGrants.length > 0) {\n        return {\n          requestedGroupId: opts.groupId,\n          matchedGroupId: result.matchedGroupId,\n          membership: result.membership,\n          roleIds: membershipRoleIds,\n          grants: membershipGrants,\n          missingGrants,\n          depth: result.depth,\n          isDirect: result.isDirect,\n          isInherited: result.isInherited,\n          traversedGroupIds,\n          cycleDetected: false,\n          maxDepthReached: false,\n        };\n      }\n\n      return {\n        requestedGroupId: opts.groupId,\n        matchedGroupId: result.matchedGroupId,\n        membership: result.membership,\n        roleIds: membershipRoleIds,\n        grants: membershipGrants,\n        missingGrants: [] as string[],\n        depth: result.depth,\n        isDirect: result.isDirect,\n        isInherited: result.isInherited,\n        traversedGroupIds,\n        cycleDetected: false,\n        maxDepthReached: false,\n      };\n    },\n  };\n\n  const access = {\n    check: async (\n      ctx: ComponentReadCtx,\n      opts: {\n        userId: string;\n        groupId: string;\n        grants: string[];\n        maxDepth?: number;\n      },\n    ) => {\n      const requiredGrants = Array.from(new Set(opts.grants));\n      const result = await member.resolve(ctx, {\n        userId: opts.userId,\n        groupId: opts.groupId,\n        grants: requiredGrants,\n        maxDepth: opts.maxDepth,\n      });\n      if (\"code\" in result && result.code === \"INVALID_ROLE_IDS\") {\n        return {\n          ok: false,\n          membership: null,\n          matchedGroupId: null,\n          roleIds: [] as string[],\n          grants: [] as string[],\n          missingGrants: requiredGrants,\n          isDirect: false,\n          isInherited: false,\n          depth: null,\n        };\n      }\n      const missingGrants = requiredGrants.filter(\n        (grant) => !result.grants.includes(grant),\n      );\n      return {\n        ok: result.membership !== null && missingGrants.length === 0,\n        membership: result.membership,\n        matchedGroupId: result.matchedGroupId,\n        roleIds: result.roleIds,\n        grants: result.grants,\n        missingGrants,\n        isDirect: result.isDirect,\n        isInherited: result.isInherited,\n        depth: result.depth,\n      };\n    },\n  };\n\n  const invite = {\n    create: async (\n      ctx: ComponentCtx,\n      data: {\n        groupId?: string;\n        invitedByUserId?: string;\n        email?: string;\n        roleIds?: string[];\n        expiresTime?: number;\n        extend?: Record<string, unknown>;\n      },\n    ) => {\n      const normalized = normalizeRoleIds(data.roleIds);\n      if (!normalized.ok)\n        return {\n          ok: false as const,\n          code: \"INVALID_ROLE_IDS\" as const,\n          invalidRoleIds: normalized.invalidRoleIds,\n        };\n      const token = generateRandomString(\n        inviteTokenLength,\n        inviteTokenAlphabet,\n      );\n      const tokenHash = await sha256(token);\n      const inviteId = (await ctx.runMutation(\n        config.component.public.inviteCreate,\n        { ...data, roleIds: normalized.roleIds, tokenHash, status: \"pending\" },\n      )) as string;\n      return { ok: true as const, inviteId, token };\n    },\n    get: async (ctx: ComponentReadCtx, inviteId: string) => {\n      return await ctx.runQuery(config.component.public.inviteGet, {\n        inviteId,\n      });\n    },\n    token: {\n      get: async (ctx: ComponentReadCtx, token: string) => {\n        const tokenHash = await sha256(token);\n        return await ctx.runQuery(\n          config.component.public.inviteGetByTokenHash,\n          { tokenHash },\n        );\n      },\n      accept: async (\n        ctx: ComponentCtx,\n        args: { token: string; acceptedByUserId: string },\n      ) => {\n        const tokenHash = await sha256(args.token);\n        const result = await ctx.runMutation(\n          config.component.public.inviteAcceptByToken,\n          { tokenHash, acceptedByUserId: args.acceptedByUserId },\n        );\n        return { ok: true as const, ...result };\n      },\n    },\n    list: async (\n      ctx: ComponentReadCtx,\n      opts?: {\n        where?: {\n          tokenHash?: string;\n          groupId?: string;\n          status?: \"pending\" | \"accepted\" | \"revoked\" | \"expired\";\n          email?: string;\n          invitedByUserId?: string;\n          roleId?: string;\n          acceptedByUserId?: string;\n        };\n        limit?: number;\n        cursor?: string | null;\n        orderBy?:\n          | \"_creationTime\"\n          | \"status\"\n          | \"email\"\n          | \"expiresTime\"\n          | \"acceptedTime\";\n        order?: \"asc\" | \"desc\";\n      },\n    ) => {\n      return await ctx.runQuery(config.component.public.inviteList, {\n        where: opts?.where,\n        limit: opts?.limit,\n        cursor: opts?.cursor,\n        orderBy: opts?.orderBy,\n        order: opts?.order,\n      });\n    },\n    accept: async (\n      ctx: ComponentCtx,\n      inviteId: string,\n      acceptedByUserId?: string,\n    ) => {\n      await ctx.runMutation(config.component.public.inviteAccept, {\n        inviteId,\n        ...(acceptedByUserId ? { acceptedByUserId } : {}),\n      });\n      return {\n        ok: true as const,\n        inviteId,\n        acceptedByUserId: acceptedByUserId ?? null,\n      };\n    },\n    revoke: async (ctx: ComponentCtx, inviteId: string) => {\n      await ctx.runMutation(config.component.public.inviteRevoke, { inviteId });\n      return { ok: true as const, inviteId };\n    },\n  };\n\n  const key = {\n    create: async (\n      ctx: ComponentCtx,\n      opts: {\n        userId: string;\n        name: string;\n        scopes: KeyScope[];\n        rateLimit?: { maxRequests: number; windowMs: number };\n        expiresAt?: number;\n        metadata?: Record<string, unknown>;\n      },\n    ): Promise<{ ok: true; keyId: string; secret: string }> => {\n      const { raw, hashedKey, displayPrefix } = await generateApiKey(\"sk_\");\n      const keyId = (await ctx.runMutation(config.component.public.keyInsert, {\n        userId: opts.userId,\n        prefix: displayPrefix,\n        hashedKey,\n        name: opts.name,\n        scopes: opts.scopes,\n        rateLimit: opts.rateLimit,\n        expiresAt: opts.expiresAt,\n        metadata: opts.metadata,\n      })) as string;\n      return { ok: true, keyId, secret: raw };\n    },\n    verify: async (\n      ctx: ComponentCtx,\n      rawKey: string,\n    ): Promise<\n      | { ok: true; userId: string; keyId: string; scopes: ScopeChecker }\n      | {\n          ok: false;\n          code:\n            | \"INVALID_API_KEY\"\n            | \"API_KEY_REVOKED\"\n            | \"API_KEY_EXPIRED\"\n            | \"API_KEY_RATE_LIMITED\";\n        }\n    > => {\n      const hashedKey = await hashApiKey(rawKey);\n      const doc = (await ctx.runQuery(\n        config.component.public.keyGetByHashedKey,\n        { hashedKey },\n      )) as KeyDoc | null;\n      if (!doc) {\n        return { ok: false as const, code: \"INVALID_API_KEY\" as const };\n      }\n      const k = doc;\n      if (k.revoked) {\n        return { ok: false as const, code: \"API_KEY_REVOKED\" as const };\n      }\n      if (k.expiresAt && k.expiresAt < Date.now()) {\n        return { ok: false as const, code: \"API_KEY_EXPIRED\" as const };\n      }\n      const patchData: Record<string, unknown> = { lastUsedAt: Date.now() };\n      if (k.rateLimit) {\n        const { limited, newState } = checkKeyRateLimit(\n          k.rateLimit,\n          k.rateLimitState ?? undefined,\n        );\n        if (limited) {\n          return { ok: false as const, code: \"API_KEY_RATE_LIMITED\" as const };\n        }\n        patchData.rateLimitState = newState;\n      }\n      await ctx.runMutation(config.component.public.keyPatch, {\n        keyId: k._id,\n        data: patchData,\n      });\n      return {\n        ok: true as const,\n        userId: k.userId,\n        keyId: k._id,\n        scopes: buildScopeChecker(k.scopes),\n      };\n    },\n    list: async (\n      ctx: ComponentReadCtx,\n      opts?: {\n        where?: {\n          userId?: string;\n          revoked?: boolean;\n          name?: string;\n          prefix?: string;\n        };\n        limit?: number;\n        cursor?: string | null;\n        orderBy?:\n          | \"_creationTime\"\n          | \"name\"\n          | \"lastUsedAt\"\n          | \"expiresAt\"\n          | \"revoked\";\n        order?: \"asc\" | \"desc\";\n      },\n    ) => {\n      return await ctx.runQuery(config.component.public.keyList, {\n        where: opts?.where,\n        limit: opts?.limit,\n        cursor: opts?.cursor,\n        orderBy: opts?.orderBy,\n        order: opts?.order,\n      });\n    },\n    get: async (\n      ctx: ComponentReadCtx,\n      keyId: string,\n    ): Promise<KeyDoc | null> => {\n      return (await ctx.runQuery(config.component.public.keyGetById, {\n        keyId,\n      })) as KeyDoc | null;\n    },\n    update: async (\n      ctx: ComponentCtx,\n      keyId: string,\n      data: {\n        name?: string;\n        scopes?: KeyScope[];\n        rateLimit?: { maxRequests: number; windowMs: number };\n      },\n    ) => {\n      await ctx.runMutation(config.component.public.keyPatch, { keyId, data });\n      return { ok: true as const, keyId };\n    },\n    revoke: async (ctx: ComponentCtx, keyId: string) => {\n      await ctx.runMutation(config.component.public.keyPatch, {\n        keyId,\n        data: { revoked: true },\n      });\n      return { ok: true as const, keyId };\n    },\n    delete: async (ctx: ComponentCtx, keyId: string) => {\n      await ctx.runMutation(config.component.public.keyDelete, { keyId });\n      return { ok: true as const, keyId };\n    },\n    rotate: async (\n      ctx: ComponentCtx,\n      keyId: string,\n      opts?: { name?: string; expiresAt?: number },\n    ): Promise<\n      | { ok: true; keyId: string; secret: string }\n      | { ok: false; code: \"INVALID_PARAMETERS\" | \"API_KEY_REVOKED\" }\n    > => {\n      const existing = await ctx.runQuery(config.component.public.keyGetById, {\n        keyId,\n      });\n      if (!existing) {\n        return { ok: false as const, code: \"INVALID_PARAMETERS\" as const };\n      }\n      if ((existing as any).revoked === true) {\n        return { ok: false as const, code: \"API_KEY_REVOKED\" as const };\n      }\n      await ctx.runMutation(config.component.public.keyPatch, {\n        keyId,\n        data: { revoked: true },\n      });\n      return await key.create(ctx, {\n        userId: (existing as any).userId,\n        name: opts?.name ?? (existing as any).name,\n        scopes: (existing as any).scopes ?? [],\n        rateLimit: (existing as any).rateLimit,\n        expiresAt: opts?.expiresAt,\n        metadata: (existing as any).metadata,\n      });\n    },\n  };\n\n  return {\n    user,\n    session,\n    account,\n    provider,\n    group,\n    member,\n    access,\n    invite,\n    key,\n  };\n}\n"],"mappings":";;;;;;;;;AA0EA,SAAgB,kBAAkB,MAAgB;CAChD,MAAM,EACJ,QACA,SACA,wBACA,kCACA,oCACA,mBACA,cACA,qBACA,sBACE;CAEJ,MAAM,kBAAkB,OAAO,cAAc;CAK7C,MAAM,qBAAqB,WAAmB;AAC5C,SAAO,gBAAgB,WAAW;;CAGpC,MAAM,oBACJ,YAG6C;EAC7C,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;EACrD,MAAM,UAAU,WAAW,QAAQ,OAAO,kBAAkB,GAAG,KAAK,KAAK;AACzE,MAAI,QAAQ,SAAS,EACnB,QAAO;GAAE,IAAI;GAAO,gBAAgB;GAAS;AAE/C,SAAO;GAAE,IAAI;GAAM,SAAS;GAAY;;CAG1C,MAAM,6BAA6B,YAAuB;EACxD,MAAM,yBAAS,IAAI,KAAa;AAChC,OAAK,MAAM,UAAU,WAAW,EAAE,EAAE;GAClC,MAAM,OAAO,kBAAkB,OAAO;AACtC,OAAI,SAAS,KAAM;AACnB,QAAK,MAAM,SAAS,KAAK,OACvB,QAAO,IAAI,MAAM;;AAGrB,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM;;CASlC,MAAM,aAAa,OAAO,oBAAoB;CAC9C,SAAS,MAAM,KAAoB;AACjC,MAAI,CAAC,IAAI,YACP,KAAI,cAAc;GAChB,uBAAO,IAAI,KAAK;GAChB,wBAAQ,IAAI,KAAK;GAClB;AAEH,SAAO,IAAI;;CAGb,MAAM,OAAO;EACX,IAAI,OACF,KACA,YAC2B;GAC3B,MAAM,WAAW,MAAM,IAAI,KAAK,iBAAiB;AACjD,OAAI,aAAa,MAAM;IACrB,MAAM,CAAC,UAAU,SAAS,QAAQ,MAAM,wBAAwB;AAChE,WAAO;;AAET,OAAI,YAAY,UAAa,iBAAiB,OAAO,IAAI,aAAa;IACpE,MAAM,aAAa,QAAQ,QAAQ,IAAI,gBAAgB;AACvD,QAAI,YAAY,WAAW,aAAa,EAAE;KACxC,MAAM,SAAS,WAAW,MAAM,EAAE;KAClC,MAAM,SAAS,MAAM,SAAS,CAAC,IAAI,OACjC,KACA,OACD;AACD,SAAI,OAAO,GACT,QAAO,OAAO;AAEhB,YAAO;;;AAGX,UAAO;;EAET,KAAK,OAAO,KAAuB,WAAmB;GACpD,MAAM,IAAI,MAAM,IAAI;AACpB,OAAI,EAAE,MAAM,IAAI,OAAO,CAAE,QAAO,EAAE,MAAM,IAAI,OAAO;GACnD,MAAM,SAAS,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,aAAa,EACrE,QACD,CAAC;AACF,KAAE,MAAM,IAAI,QAAQ,OAAO;AAC3B,UAAO;;EAET,MAAM,OACJ,KACA,OAMI,EAAE,KACH;AACH,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,UAAU,KAAK;;EAEnE,QAAQ,OAAO,QAA8B;GAC3C,MAAM,SAAS,MAAM,KAAK,GAAG,IAAI;AACjC,OAAI,WAAW,KAAM,QAAO;AAC5B,UAAO,MAAM,KAAK,IAAI,KAAK,OAAO;;EAEpC,QAAQ,OACN,KACA,QACA,SACG;AACH,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,WAAW;IACvD;IACA;IACD,CAAC;AACF,UAAO;IAAE,IAAI;IAAe;IAAQ;;EAEtC,gBAAgB,OACd,KACA,SACG;GACH,MAAM,MAAM,MAAM,KAAK,IAAI,KAAK,KAAK,OAAO;GAC5C,MAAM,iBACJ,QAAQ,QACR,IAAI,WAAW,QACf,OAAO,IAAI,WAAW,YACtB,CAAC,MAAM,QAAQ,IAAI,OAAO,GACtB,EAAE,GAAI,IAAI,QAAoC,GAC9C,EAAE;AACR,OAAI,KAAK,YAAY,MAAM;IACzB,MAAM,EAAE,iBAAiB,OAAO,GAAG,SAAS;AAC5C,UAAM,KAAK,OAAO,KAAK,KAAK,QAAQ,EAAE,QAAQ,MAAM,CAAC;AACrD,WAAO;KAAE,IAAI;KAAe,QAAQ,KAAK;KAAQ,SAAS;KAAM;;AAElE,SAAM,KAAK,OAAO,KAAK,KAAK,QAAQ,EAClC,QAAQ;IAAE,GAAG;IAAgB,iBAAiB,KAAK;IAAS,EAC7D,CAAC;AACF,UAAO;IAAE,IAAI;IAAe,QAAQ,KAAK;IAAQ,SAAS,KAAK;IAAS;;EAE1E,gBAAgB,OACd,KACA,SAC2B;GAC3B,MAAM,MAAM,MAAM,KAAK,IAAI,KAAK,KAAK,OAAO;AAC5C,OACE,QAAQ,QACR,IAAI,WAAW,QACf,OAAO,IAAI,WAAW,YACtB,CAAC,MAAM,QAAQ,IAAI,OAAO,EAC1B;IACA,MAAM,MAAO,IAAI,OAAmC;AACpD,QAAI,OAAO,QAAQ,SAAU,QAAO;;AAEtC,UAAO;;EAET,QAAQ,OACN,KACA,QACA,SACG;GACH,MAAM,UAAU,MAAM,YAAY;GAClC,MAAM,CAAC,UAAU,UAAU,MAAM,SAAS,UAAU,SAClD,MAAM,QAAQ,IAAI;IAChB,IAAI,SAAS,OAAO,UAAU,OAAO,mBAAmB,EACtD,QACD,CAAC;IACF,IAAI,SAAS,OAAO,UAAU,OAAO,mBAAmB,EACtD,QACD,CAAC;IACF,IAAI,SAAS,OAAO,UAAU,OAAO,iBAAiB,EACpD,QACD,CAAC;IACF,IAAI,SAAS,OAAO,UAAU,OAAO,kBAAkB,EACrD,QACD,CAAC;IACF,IAAI,SAAS,OAAO,UAAU,OAAO,qBAAqB,EACxD,QACD,CAAC;IACF,IAAI,SAAS,OAAO,UAAU,OAAO,kBAAkB,EACrD,QACD,CAAC;IACH,CAAC;GACJ,MAAM,cACJ,SAAS,SACT,SAAS,SACT,KAAK,SACL,QAAQ,SACR,SAAS,SACT,MAAM;AACR,OAAI,CAAC,WAAW,cAAc,EAC5B,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA+B;GAEpE,MAAM,YAAgC,EAAE;AACxC,QAAK,MAAM,KAAK,SACd,WAAU,KACR,IAAI,YAAY,OAAO,UAAU,OAAO,eAAe,EACrD,WAAW,EAAE,KACd,CAAC,CACH;AACH,QAAK,MAAM,KAAK,SACd,WAAU,KACR,IAAI,YAAY,OAAO,UAAU,OAAO,eAAe,EACrD,WAAW,EAAE,KACd,CAAC,CACH;AACH,QAAK,MAAM,KAAK,KACd,WAAU,KACR,IAAI,YAAY,OAAO,UAAU,OAAO,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CACrE;AACH,QAAK,MAAM,KAAK,QACd,WAAU,KACR,IAAI,YAAY,OAAO,UAAU,OAAO,cAAc,EACpD,UAAU,EAAE,KACb,CAAC,CACH;AACH,QAAK,MAAM,KAAK,SACd,WAAU,KACR,IAAI,YAAY,OAAO,UAAU,OAAO,eAAe,EACrD,WAAW,EAAE,KACd,CAAC,CACH;AACH,QAAK,MAAM,KAAK,MACd,WAAU,KACR,IAAI,YAAY,OAAO,UAAU,OAAO,YAAY,EAClD,QAAQ,EAAE,KACX,CAAC,CACH;AACH,SAAM,QAAQ,IAAI,UAAU;AAC5B,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,YAAY,EAAE,QAAQ,CAAC;AACrE,UAAO;IAAE,IAAI;IAAe;IAAQ;;EAEvC;CAED,MAAM,UAAU;EACd,SAAS,OAAO,QAAwB;GACtC,MAAM,WAAW,MAAM,IAAI,KAAK,iBAAiB;AACjD,OAAI,aAAa,KAAM,QAAO;GAC9B,MAAM,GAAG,aAAa,SAAS,QAAQ,MAAM,wBAAwB;AACrE,UAAO;;EAET,YAAY,OACV,KACA,SACG;AACH,SAAM,uBAAuB,KAAK,KAAK;AACvC,UAAO;IACL,IAAI;IACJ,QAAQ,KAAK;IACb,QAAQ,KAAK,UAAU,EAAE;IAC1B;;EAEH,KAAK,OAAO,KAAuB,cAAsB;AACvD,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,gBAAgB,EAChE,WACD,CAAC;;EAEJ,MAAM,OAAO,KAAuB,SAA6B;AAC/D,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,mBAAmB,EACnE,QAAQ,KAAK,QACd,CAAC;;EAEL;CAED,MAAM,UAAU;EACd,QAAQ,OACN,KACA,SACG;AAEH,UAAO;IAAE,IAAI;IAAe,GADZ,MAAM,iCAAiC,KAAK,KAAK;IACzB;;EAE1C,KAAK,OACH,KACA,SACG;GACH,MAAM,SAAS,MAAM,mCAAmC,KAAK,KAAK;AAClE,OAAI,OAAO,WAAW,SACpB,QAAO;AAET,UAAO;;EAET,QAAQ,OACN,KACA,SACG;AACH,SAAM,kBAAkB,KAAK,KAAK;AAClC,UAAO;IAAE,IAAI;IAAe,WAAW,KAAK,QAAQ;IAAI;;EAE1D,QAAQ,OAAO,KAAmB,cAAsB;GACtD,MAAM,MAAM,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,gBAAgB,EACrE,WACD,CAAC;AACF,OAAI,QAAQ,KACV,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA8B;AAMnE,QAJqB,MAAM,IAAI,SAC7B,OAAO,UAAU,OAAO,mBACxB,EAAE,QAAS,IAAY,QAAQ,CAChC,EACe,UAAU,EACxB,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA+B;AAEpE,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,eAAe,EAC3D,WACD,CAAC;AACF,UAAO;IAAE,IAAI;IAAe;IAAW;;EAEzC,cAAc,OAAO,KAAuB,SAA6B;AACvE,UAAO,MAAM,IAAI,SACf,OAAO,UAAU,OAAO,qBACxB,KACD;;EAEH,eAAe,OACb,KACA,WACA,SACG;AACH,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,mBAAmB;IAC/D;IACA,MAAM,EAAE,MAAM;IACf,CAAC;AACF,UAAO;IAAE,IAAI;IAAe;IAAW;;EAEzC,eAAe,OAAO,KAAmB,cAAsB;AAC7D,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,eAAe,EAC3D,WACD,CAAC;AACF,UAAO;IAAE,IAAI;IAAe;IAAW;;EAEzC,WAAW,OAAO,KAAuB,SAA6B;AACpE,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,kBAAkB,KAAK;;EAE3E,YAAY,OAAO,KAAmB,WAAmB;AACvD,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,YAAY,EAAE,QAAQ,CAAC;AACrE,UAAO;IAAE,IAAI;IAAe;IAAQ;;EAEvC;CAED,MAAM,WAAW,EACf,QAAQ,OACN,KACA,gBACA,SAIG;EACH,MAAM,SAAS,MAAM,WACnB,cAAc,CAAC,IAAI,EACnB,oBAAoB,eAAe,EACnC,MAIA;GAAE,gBAAgB;GAAO,qBAAqB;GAAM,CACrD;AACD,SAAO,OAAO,SAAS,aACnB,OAAO,aAAa,OAClB;GACE,QAAQ,OAAO,SAAS;GACxB,WAAW,OAAO,SAAS;GAC5B,GACD,OACF;IAEP;CAED,MAAM,QAAQ;EACZ,QAAQ,OACN,KACA,SAQ2C;AAK3C,UAAO;IAAE,IAAI;IAAM,SAJF,MAAM,IAAI,YACzB,OAAO,UAAU,OAAO,aACxB,KACD;IAC2B;;EAE9B,KAAK,OAAO,KAAuB,YAAoB;GACrD,MAAM,IAAI,MAAM,IAAI;AACpB,OAAI,EAAE,OAAO,IAAI,QAAQ,CAAE,QAAO,EAAE,OAAO,IAAI,QAAQ;GACvD,MAAM,SAAS,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,UAAU,EAClE,SACD,CAAC;AACF,KAAE,OAAO,IAAI,SAAS,OAAO;AAC7B,UAAO;;EAET,MAAM,OACJ,KACA,SAeG;AACH,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,WAAW;IAC3D,OAAO,MAAM;IACb,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,MAAM;IACf,OAAO,MAAM;IACd,CAAC;;EAEJ,QAAQ,OACN,KACA,SACA,SACG;AACH,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,aAAa;IACzD;IACA;IACD,CAAC;AACF,UAAO;IAAE,IAAI;IAAe;IAAS;;EAEvC,QAAQ,OAAO,KAAmB,YAAoB;AACpD,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,aAAa,EAAE,SAAS,CAAC;AACvE,UAAO;IAAE,IAAI;IAAe;IAAS;;EAEvC,WAAW,OACT,KACA,SACG;GACH,MAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,GAAG,CAAC;GAC7D,MAAM,0BAAU,IAAI,KAAa;GACjC,MAAM,YAAmB,EAAE;GAC3B,IAAI,gBAAgB;GACpB,IAAI,kBAAkB;GACtB,IAAI,iBAAqC,KAAK;GAC9C,IAAI,QAAQ;GACZ,IAAI,UAAU;AACd,UAAO,mBAAmB,QAAW;AACnC,QAAI,QAAQ,UAAU;AACpB,uBAAkB;AAClB;;AAEF,QAAI,QAAQ,IAAI,eAAe,EAAE;AAC/B,qBAAgB;AAChB;;AAEF,YAAQ,IAAI,eAAe;IAC3B,MAAM,MAAM,MAAM,MAAM,IAAI,KAAK,eAAe;AAChD,QAAI,QAAQ,KAAM;AAClB,QAAI,SAAS;AACX,eAAU;AACV,SAAI,KAAK,YAAa,WAAU,KAAK,IAAI;AACzC,sBAAiB,IAAI;AACrB,cAAS;AACT;;AAEF,cAAU,KAAK,IAAI;AACnB,qBAAiB,IAAI;AACrB,aAAS;;AAEX,UAAO;IAAE;IAAW;IAAe;IAAiB;;EAEvD;CAED,MAAM,SAAS;EACb,QAAQ,OACN,KACA,SAOG;GACH,MAAM,aAAa,iBAAiB,KAAK,QAAQ;AACjD,OAAI,CAAC,WAAW,GACd,QAAO;IACL,IAAI;IACJ,MAAM;IACN,gBAAgB,WAAW;IAC5B;AAKH,UAAO;IAAE,IAAI;IAAe,UAJV,MAAM,IAAI,YAC1B,OAAO,UAAU,OAAO,WACxB;KAAE,GAAG;KAAM,SAAS,WAAW;KAAS,CACzC;IACqC;;EAExC,KAAK,OAAO,KAAuB,aAAqB;AACtD,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,WAAW,EAC3D,UACD,CAAC;;EAEJ,mBAAmB,OACjB,KACA,SACG;AACH,UAAO,MAAM,IAAI,SACf,OAAO,UAAU,OAAO,yBACxB,KACD;;EAEH,MAAM,OACJ,KACA,SAYG;AACH,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,YAAY;IAC5D,OAAO,MAAM;IACb,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,MAAM;IACf,OAAO,MAAM;IACd,CAAC;;EAEJ,QAAQ,OAAO,KAAmB,aAAqB;AACrD,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,cAAc,EAAE,UAAU,CAAC;AACzE,UAAO;IAAE,IAAI;IAAe;IAAU;;EAExC,QAAQ,OACN,KACA,UACA,SACG;GACH,MAAM,WAAW,EAAE,GAAG,MAAM;AAC5B,OAAI,aAAa,UAAU;IACzB,MAAM,aAAa,iBACjB,MAAM,QAAQ,SAAS,QAAQ,GAC1B,SAAS,UACV,OACL;AACD,QAAI,CAAC,WAAW,GACd,QAAO;KACL,IAAI;KACJ,MAAM;KACN,gBAAgB,WAAW;KAC5B;AACH,aAAS,UAAU,WAAW;;AAEhC,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,cAAc;IAC1D;IACA,MAAM;IACP,CAAC;AACF,UAAO;IAAE,IAAI;IAAe;IAAU;;EAExC,SAAS,OACP,KACA,SAOG;GACH,MAAM,aAAa,iBAAiB,KAAK,QAAQ;AACjD,OAAI,CAAC,WAAW,GACd,QAAO;IACL,IAAI;IACJ,MAAM;IACN,gBAAgB,WAAW;IAC5B;GACH,MAAM,mBAAmB,WAAW;GACpC,MAAM,aACJ,iBAAiB,SAAS,IAAI,IAAI,IAAI,iBAAiB,GAAG;GAC5D,MAAM,iBAAiB,MAAM,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC,CAAC;GAC7D,MAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,GAAG,CAAC;GAG7D,MAAM,SAAS,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,eAAe;IACvE,QAAQ,KAAK;IACb,SAAS,KAAK;IACd;IACA,UAAU;IACX,CAAC;GAEF,MAAM,oBAAoB,OAAO,qBAAqB,EAAE;AAExD,OAAI,OAAO,eAAe,KACxB,QAAO;IACL,kBAAkB,KAAK;IACvB,gBAAgB;IAChB,YAAY;IACZ,SAAS,EAAE;IACX,QAAQ,EAAE;IACV,eAAe;IACf,OAAO;IACP,UAAU;IACV,aAAa;IACb;IACA,eAAe;IACf,iBAAiB;IAClB;GAIH,MAAM,oBAAqB,OAAO,WAAmB,WAAW,EAAE;GAClE,MAAM,mBAAmB,0BAA0B,kBAAkB;AAGrE,OACE,eAAe,QACf,CAAC,kBAAkB,MAAM,WAAmB,WAAW,IAAI,OAAO,CAAC,CAEnE,QAAO;IACL,kBAAkB,KAAK;IACvB,gBAAgB;IAChB,YAAY;IACZ,SAAS,EAAE;IACX,QAAQ,EAAE;IACV,eAAe;IACf,OAAO;IACP,UAAU;IACV,aAAa;IACb;IACA,eAAe;IACf,iBAAiB;IAClB;GAIH,MAAM,gBAAgB,eAAe,QAClC,UAAU,CAAC,iBAAiB,SAAS,MAAM,CAC7C;AACD,OAAI,cAAc,SAAS,EACzB,QAAO;IACL,kBAAkB,KAAK;IACvB,gBAAgB,OAAO;IACvB,YAAY,OAAO;IACnB,SAAS;IACT,QAAQ;IACR;IACA,OAAO,OAAO;IACd,UAAU,OAAO;IACjB,aAAa,OAAO;IACpB;IACA,eAAe;IACf,iBAAiB;IAClB;AAGH,UAAO;IACL,kBAAkB,KAAK;IACvB,gBAAgB,OAAO;IACvB,YAAY,OAAO;IACnB,SAAS;IACT,QAAQ;IACR,eAAe,EAAE;IACjB,OAAO,OAAO;IACd,UAAU,OAAO;IACjB,aAAa,OAAO;IACpB;IACA,eAAe;IACf,iBAAiB;IAClB;;EAEJ;CAED,MAAM,SAAS,EACb,OAAO,OACL,KACA,SAMG;EACH,MAAM,iBAAiB,MAAM,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;EACvD,MAAM,SAAS,MAAM,OAAO,QAAQ,KAAK;GACvC,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,QAAQ;GACR,UAAU,KAAK;GAChB,CAAC;AACF,MAAI,UAAU,UAAU,OAAO,SAAS,mBACtC,QAAO;GACL,IAAI;GACJ,YAAY;GACZ,gBAAgB;GAChB,SAAS,EAAE;GACX,QAAQ,EAAE;GACV,eAAe;GACf,UAAU;GACV,aAAa;GACb,OAAO;GACR;EAEH,MAAM,gBAAgB,eAAe,QAClC,UAAU,CAAC,OAAO,OAAO,SAAS,MAAM,CAC1C;AACD,SAAO;GACL,IAAI,OAAO,eAAe,QAAQ,cAAc,WAAW;GAC3D,YAAY,OAAO;GACnB,gBAAgB,OAAO;GACvB,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf;GACA,UAAU,OAAO;GACjB,aAAa,OAAO;GACpB,OAAO,OAAO;GACf;IAEJ;CAED,MAAM,SAAS;EACb,QAAQ,OACN,KACA,SAQG;GACH,MAAM,aAAa,iBAAiB,KAAK,QAAQ;AACjD,OAAI,CAAC,WAAW,GACd,QAAO;IACL,IAAI;IACJ,MAAM;IACN,gBAAgB,WAAW;IAC5B;GACH,MAAM,QAAQ,qBACZ,mBACA,oBACD;GACD,MAAM,YAAY,MAAM,OAAO,MAAM;AAKrC,UAAO;IAAE,IAAI;IAAe,UAJV,MAAM,IAAI,YAC1B,OAAO,UAAU,OAAO,cACxB;KAAE,GAAG;KAAM,SAAS,WAAW;KAAS;KAAW,QAAQ;KAAW,CACvE;IACqC;IAAO;;EAE/C,KAAK,OAAO,KAAuB,aAAqB;AACtD,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,WAAW,EAC3D,UACD,CAAC;;EAEJ,OAAO;GACL,KAAK,OAAO,KAAuB,UAAkB;IACnD,MAAM,YAAY,MAAM,OAAO,MAAM;AACrC,WAAO,MAAM,IAAI,SACf,OAAO,UAAU,OAAO,sBACxB,EAAE,WAAW,CACd;;GAEH,QAAQ,OACN,KACA,SACG;IACH,MAAM,YAAY,MAAM,OAAO,KAAK,MAAM;AAK1C,WAAO;KAAE,IAAI;KAAe,GAJb,MAAM,IAAI,YACvB,OAAO,UAAU,OAAO,qBACxB;MAAE;MAAW,kBAAkB,KAAK;MAAkB,CACvD;KACsC;;GAE1C;EACD,MAAM,OACJ,KACA,SAoBG;AACH,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,YAAY;IAC5D,OAAO,MAAM;IACb,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,MAAM;IACf,OAAO,MAAM;IACd,CAAC;;EAEJ,QAAQ,OACN,KACA,UACA,qBACG;AACH,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,cAAc;IAC1D;IACA,GAAI,mBAAmB,EAAE,kBAAkB,GAAG,EAAE;IACjD,CAAC;AACF,UAAO;IACL,IAAI;IACJ;IACA,kBAAkB,oBAAoB;IACvC;;EAEH,QAAQ,OAAO,KAAmB,aAAqB;AACrD,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,cAAc,EAAE,UAAU,CAAC;AACzE,UAAO;IAAE,IAAI;IAAe;IAAU;;EAEzC;CAED,MAAM,MAAM;EACV,QAAQ,OACN,KACA,SAQyD;GACzD,MAAM,EAAE,KAAK,WAAW,kBAAkB,MAAM,eAAe,MAAM;AAWrE,UAAO;IAAE,IAAI;IAAM,OAVJ,MAAM,IAAI,YAAY,OAAO,UAAU,OAAO,WAAW;KACtE,QAAQ,KAAK;KACb,QAAQ;KACR;KACA,MAAM,KAAK;KACX,QAAQ,KAAK;KACb,WAAW,KAAK;KAChB,WAAW,KAAK;KAChB,UAAU,KAAK;KAChB,CAAC;IACwB,QAAQ;IAAK;;EAEzC,QAAQ,OACN,KACA,WAWG;GACH,MAAM,YAAY,MAAM,WAAW,OAAO;GAC1C,MAAM,MAAO,MAAM,IAAI,SACrB,OAAO,UAAU,OAAO,mBACxB,EAAE,WAAW,CACd;AACD,OAAI,CAAC,IACH,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA4B;GAEjE,MAAM,IAAI;AACV,OAAI,EAAE,QACJ,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA4B;AAEjE,OAAI,EAAE,aAAa,EAAE,YAAY,KAAK,KAAK,CACzC,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA4B;GAEjE,MAAM,YAAqC,EAAE,YAAY,KAAK,KAAK,EAAE;AACrE,OAAI,EAAE,WAAW;IACf,MAAM,EAAE,SAAS,aAAa,kBAC5B,EAAE,WACF,EAAE,kBAAkB,OACrB;AACD,QAAI,QACF,QAAO;KAAE,IAAI;KAAgB,MAAM;KAAiC;AAEtE,cAAU,iBAAiB;;AAE7B,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,UAAU;IACtD,OAAO,EAAE;IACT,MAAM;IACP,CAAC;AACF,UAAO;IACL,IAAI;IACJ,QAAQ,EAAE;IACV,OAAO,EAAE;IACT,QAAQ,kBAAkB,EAAE,OAAO;IACpC;;EAEH,MAAM,OACJ,KACA,SAiBG;AACH,UAAO,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,SAAS;IACzD,OAAO,MAAM;IACb,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,MAAM;IACf,OAAO,MAAM;IACd,CAAC;;EAEJ,KAAK,OACH,KACA,UAC2B;AAC3B,UAAQ,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,YAAY,EAC7D,OACD,CAAC;;EAEJ,QAAQ,OACN,KACA,OACA,SAKG;AACH,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,UAAU;IAAE;IAAO;IAAM,CAAC;AACxE,UAAO;IAAE,IAAI;IAAe;IAAO;;EAErC,QAAQ,OAAO,KAAmB,UAAkB;AAClD,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,UAAU;IACtD;IACA,MAAM,EAAE,SAAS,MAAM;IACxB,CAAC;AACF,UAAO;IAAE,IAAI;IAAe;IAAO;;EAErC,QAAQ,OAAO,KAAmB,UAAkB;AAClD,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,WAAW,EAAE,OAAO,CAAC;AACnE,UAAO;IAAE,IAAI;IAAe;IAAO;;EAErC,QAAQ,OACN,KACA,OACA,SAIG;GACH,MAAM,WAAW,MAAM,IAAI,SAAS,OAAO,UAAU,OAAO,YAAY,EACtE,OACD,CAAC;AACF,OAAI,CAAC,SACH,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA+B;AAEpE,OAAK,SAAiB,YAAY,KAChC,QAAO;IAAE,IAAI;IAAgB,MAAM;IAA4B;AAEjE,SAAM,IAAI,YAAY,OAAO,UAAU,OAAO,UAAU;IACtD;IACA,MAAM,EAAE,SAAS,MAAM;IACxB,CAAC;AACF,UAAO,MAAM,IAAI,OAAO,KAAK;IAC3B,QAAS,SAAiB;IAC1B,MAAM,MAAM,QAAS,SAAiB;IACtC,QAAS,SAAiB,UAAU,EAAE;IACtC,WAAY,SAAiB;IAC7B,WAAW,MAAM;IACjB,UAAW,SAAiB;IAC7B,CAAC;;EAEL;AAED,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD"}