@robelest/convex-auth 0.0.4-preview.2 → 0.0.4-preview.21

package/dist/component/public/enterprise/webhooks.d.ts

@@ -0,0 +1,211 @@
+declare namespace webhooks_d_exports {
+  export { enterpriseWebhookDeliveryEnqueue, enterpriseWebhookDeliveryList, enterpriseWebhookDeliveryListReady, enterpriseWebhookDeliveryPatch, enterpriseWebhookEndpointCreate, enterpriseWebhookEndpointGet, enterpriseWebhookEndpointList, enterpriseWebhookEndpointUpdate };
+}
+/**
+ * Register a new webhook endpoint for an enterprise.
+ *
+ * Creates an `EnterpriseWebhookEndpoint` document with an initial failure
+ * count of `0`. The endpoint status defaults to `"active"` when not
+ * explicitly provided. Each endpoint subscribes to a set of event types
+ * that determine which deliveries are sent to it.
+ *
+ * @param args.enterpriseId - The ID of the enterprise this endpoint belongs to.
+ * @param args.groupId - The ID of the root group that owns the enterprise.
+ * @param args.url - The HTTPS URL where webhook payloads will be delivered.
+ * @param args.status - An optional lifecycle status (`"active"`, `"paused"`, or `"disabled"`). Defaults to `"active"`.
+ * @param args.secretHash - A hash of the signing secret used to verify delivery payloads.
+ * @param args.subscriptions - An array of event type strings this endpoint subscribes to (e.g. `["user.login", "scim.provision"]`).
+ * @param args.createdByUserId - An optional ID of the user who created this endpoint.
+ * @param args.extend - An optional arbitrary extension object for custom endpoint metadata.
+ * @returns The ID of the newly created `EnterpriseWebhookEndpoint` document.
+ *
+ * @example
+ * ```ts
+ * const endpointId = await ctx.runMutation(
+ *   components.auth.enterprise.enterpriseWebhookEndpointCreate,
+ *   {
+ *     enterpriseId,
+ *     groupId: orgGroupId,
+ *     url: "https://acme.com/webhooks/auth",
+ *     secretHash: "sha256:whsec_...",
+ *     subscriptions: ["user.login", "user.created", "scim.provision"],
+ *   },
+ * );
+ * ```
+ */
+declare const enterpriseWebhookEndpointCreate: any;
+/**
+ * List all webhook endpoints registered for an enterprise.
+ *
+ * Returns all `EnterpriseWebhookEndpoint` documents associated with the
+ * given enterprise, regardless of status.
+ *
+ * @param args.enterpriseId - The ID of the enterprise whose webhook endpoints to list.
+ * @returns An array of webhook endpoint documents.
+ *
+ * @example
+ * ```ts
+ * const endpoints = await ctx.runQuery(
+ *   components.auth.enterprise.enterpriseWebhookEndpointList,
+ *   { enterpriseId },
+ * );
+ * for (const ep of endpoints) {
+ *   console.log(ep.url, ep.status, ep.subscriptions);
+ * }
+ * ```
+ */
+declare const enterpriseWebhookEndpointList: any;
+/**
+ * Retrieve a single webhook endpoint by its document ID.
+ *
+ * Returns the full endpoint document if it exists, or `null` if no
+ * endpoint is found with the given ID.
+ *
+ * @param args.endpointId - The document ID of the webhook endpoint to retrieve.
+ * @returns The webhook endpoint document, or `null` if not found.
+ *
+ * @example
+ * ```ts
+ * const endpoint = await ctx.runQuery(
+ *   components.auth.enterprise.enterpriseWebhookEndpointGet,
+ *   { endpointId },
+ * );
+ * if (endpoint) {
+ *   console.log(endpoint.url, endpoint.failureCount);
+ * }
+ * ```
+ */
+declare const enterpriseWebhookEndpointGet: any;
+/**
+ * Partially update (patch) an existing webhook endpoint.
+ *
+ * Merges the provided `data` fields into the endpoint document. Only the
+ * fields present in `data` are changed; all other fields are preserved.
+ * Common updates include changing the URL, rotating the secret, updating
+ * subscriptions, or changing the status.
+ *
+ * @param args.endpointId - The document ID of the webhook endpoint to update.
+ * @param args.data - An object containing the fields to update (e.g. `{ url, status, subscriptions }`).
+ * @returns `null` on success.
+ *
+ * @example
+ * ```ts
+ * await ctx.runMutation(
+ *   components.auth.enterprise.enterpriseWebhookEndpointUpdate,
+ *   {
+ *     endpointId,
+ *     data: {
+ *       status: "paused",
+ *       subscriptions: ["user.login"],
+ *     },
+ *   },
+ * );
+ * ```
+ */
+declare const enterpriseWebhookEndpointUpdate: any;
+/**
+ * Enqueue a webhook delivery for a specific endpoint.
+ *
+ * Creates a new `EnterpriseWebhookDelivery` document with an initial status
+ * of `"pending"` and an attempt count of `0`. The delivery will be picked up
+ * by the delivery worker once `nextAttemptAt` is reached.
+ *
+ * @param args.enterpriseId - The ID of the enterprise the delivery belongs to.
+ * @param args.endpointId - The ID of the webhook endpoint this delivery targets.
+ * @param args.auditEventId - An optional ID of the audit event that triggered this delivery.
+ * @param args.eventType - The event type string describing the payload (e.g. `"user.created"`).
+ * @param args.payload - The arbitrary JSON payload to deliver to the endpoint.
+ * @param args.nextAttemptAt - Epoch timestamp (ms) when the delivery should first be attempted.
+ * @returns The ID of the newly created `EnterpriseWebhookDelivery` document.
+ *
+ * @example
+ * ```ts
+ * const deliveryId = await ctx.runMutation(
+ *   components.auth.enterprise.enterpriseWebhookDeliveryEnqueue,
+ *   {
+ *     enterpriseId,
+ *     endpointId,
+ *     auditEventId,
+ *     eventType: "user.created",
+ *     payload: { userId, email: "jane@acme.com" },
+ *     nextAttemptAt: Date.now(),
+ *   },
+ * );
+ * ```
+ */
+declare const enterpriseWebhookDeliveryEnqueue: any;
+/**
+ * List pending webhook deliveries that are ready to be attempted.
+ *
+ * Queries the `status_next_attempt_at` index for deliveries with status
+ * `"pending"` whose `nextAttemptAt` is at or before the provided timestamp.
+ * This is used by the delivery worker to find deliveries due for processing.
+ *
+ * @param args.now - The current epoch timestamp (ms) used as the cutoff for `nextAttemptAt`.
+ * @param args.limit - Maximum number of deliveries to return (clamped between 1 and 100, defaults to 50).
+ * @returns An array of webhook delivery documents ready for dispatch.
+ *
+ * @example
+ * ```ts
+ * const ready = await ctx.runQuery(
+ *   components.auth.enterprise.enterpriseWebhookDeliveryListReady,
+ *   { now: Date.now(), limit: 10 },
+ * );
+ * for (const delivery of ready) {
+ *   await dispatchWebhook(delivery);
+ * }
+ * ```
+ */
+declare const enterpriseWebhookDeliveryListReady: any;
+/**
+ * List webhook deliveries for a specific enterprise, ordered by most recent first.
+ *
+ * Returns deliveries in reverse chronological order, useful for displaying
+ * delivery history in an admin dashboard. Includes deliveries of all statuses.
+ *
+ * @param args.enterpriseId - The ID of the enterprise whose deliveries to list.
+ * @param args.limit - Maximum number of deliveries to return (clamped between 1 and 100, defaults to 50).
+ * @returns An array of webhook delivery documents, most recent first.
+ *
+ * @example
+ * ```ts
+ * const deliveries = await ctx.runQuery(
+ *   components.auth.enterprise.enterpriseWebhookDeliveryList,
+ *   { enterpriseId, limit: 25 },
+ * );
+ * for (const d of deliveries) {
+ *   console.log(d.eventType, d.status, d.attemptCount);
+ * }
+ * ```
+ */
+declare const enterpriseWebhookDeliveryList: any;
+/**
+ * Partially update (patch) an existing webhook delivery record.
+ *
+ * Merges the provided `data` fields into the delivery document. This is
+ * typically used by the delivery worker to update the delivery status,
+ * increment the attempt count, record response codes, or schedule retry
+ * timestamps after a delivery attempt.
+ *
+ * @param args.deliveryId - The document ID of the webhook delivery to update.
+ * @param args.data - An object containing the fields to update (e.g. `{ status, attemptCount, nextAttemptAt }`).
+ * @returns `null` on success.
+ *
+ * @example
+ * ```ts
+ * await ctx.runMutation(
+ *   components.auth.enterprise.enterpriseWebhookDeliveryPatch,
+ *   {
+ *     deliveryId,
+ *     data: {
+ *       status: "delivered",
+ *       attemptCount: 1,
+ *     },
+ *   },
+ * );
+ * ```
+ */
+declare const enterpriseWebhookDeliveryPatch: any;
+//#endregion
+export { enterpriseWebhookDeliveryEnqueue, enterpriseWebhookDeliveryList, enterpriseWebhookDeliveryListReady, enterpriseWebhookDeliveryPatch, enterpriseWebhookEndpointCreate, enterpriseWebhookEndpointGet, enterpriseWebhookEndpointList, enterpriseWebhookEndpointUpdate, webhooks_d_exports };
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/component/public/enterprise/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","names":[],"sources":["../../../../src/component/public/enterprise/webhooks.ts"],"mappings":";;;;;;;;;;;;;;;;AAwCA;;;;;AAyCA;;;;;AA+BA;;;;;AAkCA;;;;cA1Ga,+BAAA;AAiJb;;;;;AAyCA;;;;;AAkCA;;;;;AAsCA;;;;;AAjHA,cAxGa,6BAAA;;;;;;;;;;;;;;;;;;;;;cA+BA,4BAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkCA,+BAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAuCA,gCAAA;;;;;;;;;;;;;;;;;;;;;;;cAyCA,kCAAA;;;;;;;;;;;;;;;;;;;;;;cAkCA,6BAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsCA,8BAAA"}

package/dist/component/public/enterprise/webhooks.js

@@ -0,0 +1,300 @@
+import { mutation, query } from "../../functions.js";
+import { vEnterpriseWebhookDeliveryDoc, vEnterpriseWebhookEndpointDoc, vWebhookEndpointStatus } from "../../model.js";
+import { v } from "convex/values";
+
+//#region src/component/public/enterprise/webhooks.ts
+/**
+* Register a new webhook endpoint for an enterprise.
+*
+* Creates an `EnterpriseWebhookEndpoint` document with an initial failure
+* count of `0`. The endpoint status defaults to `"active"` when not
+* explicitly provided. Each endpoint subscribes to a set of event types
+* that determine which deliveries are sent to it.
+*
+* @param args.enterpriseId - The ID of the enterprise this endpoint belongs to.
+* @param args.groupId - The ID of the root group that owns the enterprise.
+* @param args.url - The HTTPS URL where webhook payloads will be delivered.
+* @param args.status - An optional lifecycle status (`"active"`, `"paused"`, or `"disabled"`). Defaults to `"active"`.
+* @param args.secretHash - A hash of the signing secret used to verify delivery payloads.
+* @param args.subscriptions - An array of event type strings this endpoint subscribes to (e.g. `["user.login", "scim.provision"]`).
+* @param args.createdByUserId - An optional ID of the user who created this endpoint.
+* @param args.extend - An optional arbitrary extension object for custom endpoint metadata.
+* @returns The ID of the newly created `EnterpriseWebhookEndpoint` document.
+*
+* @example
+* ```ts
+* const endpointId = await ctx.runMutation(
+*   components.auth.enterprise.enterpriseWebhookEndpointCreate,
+*   {
+*     enterpriseId,
+*     groupId: orgGroupId,
+*     url: "https://acme.com/webhooks/auth",
+*     secretHash: "sha256:whsec_...",
+*     subscriptions: ["user.login", "user.created", "scim.provision"],
+*   },
+* );
+* ```
+*/
+const enterpriseWebhookEndpointCreate = mutation({
+	args: {
+		enterpriseId: v.id("Enterprise"),
+		groupId: v.id("Group"),
+		url: v.string(),
+		status: v.optional(vWebhookEndpointStatus),
+		secretHash: v.string(),
+		subscriptions: v.array(v.string()),
+		createdByUserId: v.optional(v.id("User")),
+		extend: v.optional(v.any())
+	},
+	returns: v.id("EnterpriseWebhookEndpoint"),
+	handler: async (ctx, args) => {
+		return await ctx.db.insert("EnterpriseWebhookEndpoint", {
+			...args,
+			status: args.status ?? "active",
+			failureCount: 0
+		});
+	}
+});
+/**
+* List all webhook endpoints registered for an enterprise.
+*
+* Returns all `EnterpriseWebhookEndpoint` documents associated with the
+* given enterprise, regardless of status.
+*
+* @param args.enterpriseId - The ID of the enterprise whose webhook endpoints to list.
+* @returns An array of webhook endpoint documents.
+*
+* @example
+* ```ts
+* const endpoints = await ctx.runQuery(
+*   components.auth.enterprise.enterpriseWebhookEndpointList,
+*   { enterpriseId },
+* );
+* for (const ep of endpoints) {
+*   console.log(ep.url, ep.status, ep.subscriptions);
+* }
+* ```
+*/
+const enterpriseWebhookEndpointList = query({
+	args: { enterpriseId: v.id("Enterprise") },
+	returns: v.array(vEnterpriseWebhookEndpointDoc),
+	handler: async (ctx, { enterpriseId }) => {
+		return await ctx.db.query("EnterpriseWebhookEndpoint").withIndex("enterprise_id", (idx) => idx.eq("enterpriseId", enterpriseId)).collect();
+	}
+});
+/**
+* Retrieve a single webhook endpoint by its document ID.
+*
+* Returns the full endpoint document if it exists, or `null` if no
+* endpoint is found with the given ID.
+*
+* @param args.endpointId - The document ID of the webhook endpoint to retrieve.
+* @returns The webhook endpoint document, or `null` if not found.
+*
+* @example
+* ```ts
+* const endpoint = await ctx.runQuery(
+*   components.auth.enterprise.enterpriseWebhookEndpointGet,
+*   { endpointId },
+* );
+* if (endpoint) {
+*   console.log(endpoint.url, endpoint.failureCount);
+* }
+* ```
+*/
+const enterpriseWebhookEndpointGet = query({
+	args: { endpointId: v.id("EnterpriseWebhookEndpoint") },
+	returns: v.union(vEnterpriseWebhookEndpointDoc, v.null()),
+	handler: async (ctx, { endpointId }) => {
+		return await ctx.db.get(endpointId);
+	}
+});
+/**
+* Partially update (patch) an existing webhook endpoint.
+*
+* Merges the provided `data` fields into the endpoint document. Only the
+* fields present in `data` are changed; all other fields are preserved.
+* Common updates include changing the URL, rotating the secret, updating
+* subscriptions, or changing the status.
+*
+* @param args.endpointId - The document ID of the webhook endpoint to update.
+* @param args.data - An object containing the fields to update (e.g. `{ url, status, subscriptions }`).
+* @returns `null` on success.
+*
+* @example
+* ```ts
+* await ctx.runMutation(
+*   components.auth.enterprise.enterpriseWebhookEndpointUpdate,
+*   {
+*     endpointId,
+*     data: {
+*       status: "paused",
+*       subscriptions: ["user.login"],
+*     },
+*   },
+* );
+* ```
+*/
+const enterpriseWebhookEndpointUpdate = mutation({
+	args: {
+		endpointId: v.id("EnterpriseWebhookEndpoint"),
+		data: v.any()
+	},
+	returns: v.null(),
+	handler: async (ctx, { endpointId, data }) => {
+		await ctx.db.patch(endpointId, data);
+		return null;
+	}
+});
+/**
+* Enqueue a webhook delivery for a specific endpoint.
+*
+* Creates a new `EnterpriseWebhookDelivery` document with an initial status
+* of `"pending"` and an attempt count of `0`. The delivery will be picked up
+* by the delivery worker once `nextAttemptAt` is reached.
+*
+* @param args.enterpriseId - The ID of the enterprise the delivery belongs to.
+* @param args.endpointId - The ID of the webhook endpoint this delivery targets.
+* @param args.auditEventId - An optional ID of the audit event that triggered this delivery.
+* @param args.eventType - The event type string describing the payload (e.g. `"user.created"`).
+* @param args.payload - The arbitrary JSON payload to deliver to the endpoint.
+* @param args.nextAttemptAt - Epoch timestamp (ms) when the delivery should first be attempted.
+* @returns The ID of the newly created `EnterpriseWebhookDelivery` document.
+*
+* @example
+* ```ts
+* const deliveryId = await ctx.runMutation(
+*   components.auth.enterprise.enterpriseWebhookDeliveryEnqueue,
+*   {
+*     enterpriseId,
+*     endpointId,
+*     auditEventId,
+*     eventType: "user.created",
+*     payload: { userId, email: "jane@acme.com" },
+*     nextAttemptAt: Date.now(),
+*   },
+* );
+* ```
+*/
+const enterpriseWebhookDeliveryEnqueue = mutation({
+	args: {
+		enterpriseId: v.id("Enterprise"),
+		endpointId: v.id("EnterpriseWebhookEndpoint"),
+		auditEventId: v.optional(v.id("EnterpriseAuditEvent")),
+		eventType: v.string(),
+		payload: v.any(),
+		nextAttemptAt: v.number()
+	},
+	returns: v.id("EnterpriseWebhookDelivery"),
+	handler: async (ctx, args) => {
+		return await ctx.db.insert("EnterpriseWebhookDelivery", {
+			...args,
+			status: "pending",
+			attemptCount: 0
+		});
+	}
+});
+/**
+* List pending webhook deliveries that are ready to be attempted.
+*
+* Queries the `status_next_attempt_at` index for deliveries with status
+* `"pending"` whose `nextAttemptAt` is at or before the provided timestamp.
+* This is used by the delivery worker to find deliveries due for processing.
+*
+* @param args.now - The current epoch timestamp (ms) used as the cutoff for `nextAttemptAt`.
+* @param args.limit - Maximum number of deliveries to return (clamped between 1 and 100, defaults to 50).
+* @returns An array of webhook delivery documents ready for dispatch.
+*
+* @example
+* ```ts
+* const ready = await ctx.runQuery(
+*   components.auth.enterprise.enterpriseWebhookDeliveryListReady,
+*   { now: Date.now(), limit: 10 },
+* );
+* for (const delivery of ready) {
+*   await dispatchWebhook(delivery);
+* }
+* ```
+*/
+const enterpriseWebhookDeliveryListReady = query({
+	args: {
+		now: v.number(),
+		limit: v.optional(v.number())
+	},
+	returns: v.array(vEnterpriseWebhookDeliveryDoc),
+	handler: async (ctx, { now, limit }) => {
+		return await ctx.db.query("EnterpriseWebhookDelivery").withIndex("status_next_attempt_at", (idx) => idx.eq("status", "pending").lte("nextAttemptAt", now)).take(Math.min(Math.max(limit ?? 50, 1), 100));
+	}
+});
+/**
+* List webhook deliveries for a specific enterprise, ordered by most recent first.
+*
+* Returns deliveries in reverse chronological order, useful for displaying
+* delivery history in an admin dashboard. Includes deliveries of all statuses.
+*
+* @param args.enterpriseId - The ID of the enterprise whose deliveries to list.
+* @param args.limit - Maximum number of deliveries to return (clamped between 1 and 100, defaults to 50).
+* @returns An array of webhook delivery documents, most recent first.
+*
+* @example
+* ```ts
+* const deliveries = await ctx.runQuery(
+*   components.auth.enterprise.enterpriseWebhookDeliveryList,
+*   { enterpriseId, limit: 25 },
+* );
+* for (const d of deliveries) {
+*   console.log(d.eventType, d.status, d.attemptCount);
+* }
+* ```
+*/
+const enterpriseWebhookDeliveryList = query({
+	args: {
+		enterpriseId: v.id("Enterprise"),
+		limit: v.optional(v.number())
+	},
+	returns: v.array(vEnterpriseWebhookDeliveryDoc),
+	handler: async (ctx, { enterpriseId, limit }) => {
+		return await ctx.db.query("EnterpriseWebhookDelivery").withIndex("enterprise_id", (idx) => idx.eq("enterpriseId", enterpriseId)).order("desc").take(Math.min(Math.max(limit ?? 50, 1), 100));
+	}
+});
+/**
+* Partially update (patch) an existing webhook delivery record.
+*
+* Merges the provided `data` fields into the delivery document. This is
+* typically used by the delivery worker to update the delivery status,
+* increment the attempt count, record response codes, or schedule retry
+* timestamps after a delivery attempt.
+*
+* @param args.deliveryId - The document ID of the webhook delivery to update.
+* @param args.data - An object containing the fields to update (e.g. `{ status, attemptCount, nextAttemptAt }`).
+* @returns `null` on success.
+*
+* @example
+* ```ts
+* await ctx.runMutation(
+*   components.auth.enterprise.enterpriseWebhookDeliveryPatch,
+*   {
+*     deliveryId,
+*     data: {
+*       status: "delivered",
+*       attemptCount: 1,
+*     },
+*   },
+* );
+* ```
+*/
+const enterpriseWebhookDeliveryPatch = mutation({
+	args: {
+		deliveryId: v.id("EnterpriseWebhookDelivery"),
+		data: v.any()
+	},
+	returns: v.null(),
+	handler: async (ctx, { deliveryId, data }) => {
+		await ctx.db.patch(deliveryId, data);
+		return null;
+	}
+});
+
+//#endregion
+export { enterpriseWebhookDeliveryEnqueue, enterpriseWebhookDeliveryList, enterpriseWebhookDeliveryListReady, enterpriseWebhookDeliveryPatch, enterpriseWebhookEndpointCreate, enterpriseWebhookEndpointGet, enterpriseWebhookEndpointList, enterpriseWebhookEndpointUpdate };
+//# sourceMappingURL=webhooks.js.map

package/dist/component/public/enterprise/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","names":[],"sources":["../../../../src/component/public/enterprise/webhooks.ts"],"sourcesContent":["import { v } from \"convex/values\";\nimport { mutation, query } from \"../../functions\";\nimport {\n  vEnterpriseWebhookDeliveryDoc,\n  vEnterpriseWebhookEndpointDoc,\n  vWebhookEndpointStatus,\n} from \"../../model\";\n\n/**\n * Register a new webhook endpoint for an enterprise.\n *\n * Creates an `EnterpriseWebhookEndpoint` document with an initial failure\n * count of `0`. The endpoint status defaults to `\"active\"` when not\n * explicitly provided. Each endpoint subscribes to a set of event types\n * that determine which deliveries are sent to it.\n *\n * @param args.enterpriseId - The ID of the enterprise this endpoint belongs to.\n * @param args.groupId - The ID of the root group that owns the enterprise.\n * @param args.url - The HTTPS URL where webhook payloads will be delivered.\n * @param args.status - An optional lifecycle status (`\"active\"`, `\"paused\"`, or `\"disabled\"`). Defaults to `\"active\"`.\n * @param args.secretHash - A hash of the signing secret used to verify delivery payloads.\n * @param args.subscriptions - An array of event type strings this endpoint subscribes to (e.g. `[\"user.login\", \"scim.provision\"]`).\n * @param args.createdByUserId - An optional ID of the user who created this endpoint.\n * @param args.extend - An optional arbitrary extension object for custom endpoint metadata.\n * @returns The ID of the newly created `EnterpriseWebhookEndpoint` document.\n *\n * @example\n * ```ts\n * const endpointId = await ctx.runMutation(\n *   components.auth.enterprise.enterpriseWebhookEndpointCreate,\n *   {\n *     enterpriseId,\n *     groupId: orgGroupId,\n *     url: \"https://acme.com/webhooks/auth\",\n *     secretHash: \"sha256:whsec_...\",\n *     subscriptions: [\"user.login\", \"user.created\", \"scim.provision\"],\n *   },\n * );\n * ```\n */\nexport const enterpriseWebhookEndpointCreate = mutation({\n  args: {\n    enterpriseId: v.id(\"Enterprise\"),\n    groupId: v.id(\"Group\"),\n    url: v.string(),\n    status: v.optional(vWebhookEndpointStatus),\n    secretHash: v.string(),\n    subscriptions: v.array(v.string()),\n    createdByUserId: v.optional(v.id(\"User\")),\n    extend: v.optional(v.any()),\n  },\n  returns: v.id(\"EnterpriseWebhookEndpoint\"),\n  handler: async (ctx, args) => {\n    return await ctx.db.insert(\"EnterpriseWebhookEndpoint\", {\n      ...args,\n      status: args.status ?? \"active\",\n      failureCount: 0,\n    });\n  },\n});\n\n/**\n * List all webhook endpoints registered for an enterprise.\n *\n * Returns all `EnterpriseWebhookEndpoint` documents associated with the\n * given enterprise, regardless of status.\n *\n * @param args.enterpriseId - The ID of the enterprise whose webhook endpoints to list.\n * @returns An array of webhook endpoint documents.\n *\n * @example\n * ```ts\n * const endpoints = await ctx.runQuery(\n *   components.auth.enterprise.enterpriseWebhookEndpointList,\n *   { enterpriseId },\n * );\n * for (const ep of endpoints) {\n *   console.log(ep.url, ep.status, ep.subscriptions);\n * }\n * ```\n */\nexport const enterpriseWebhookEndpointList = query({\n  args: { enterpriseId: v.id(\"Enterprise\") },\n  returns: v.array(vEnterpriseWebhookEndpointDoc),\n  handler: async (ctx, { enterpriseId }) => {\n    return await ctx.db\n      .query(\"EnterpriseWebhookEndpoint\")\n      .withIndex(\"enterprise_id\", (idx) => idx.eq(\"enterpriseId\", enterpriseId))\n      .collect();\n  },\n});\n\n/**\n * Retrieve a single webhook endpoint by its document ID.\n *\n * Returns the full endpoint document if it exists, or `null` if no\n * endpoint is found with the given ID.\n *\n * @param args.endpointId - The document ID of the webhook endpoint to retrieve.\n * @returns The webhook endpoint document, or `null` if not found.\n *\n * @example\n * ```ts\n * const endpoint = await ctx.runQuery(\n *   components.auth.enterprise.enterpriseWebhookEndpointGet,\n *   { endpointId },\n * );\n * if (endpoint) {\n *   console.log(endpoint.url, endpoint.failureCount);\n * }\n * ```\n */\nexport const enterpriseWebhookEndpointGet = query({\n  args: { endpointId: v.id(\"EnterpriseWebhookEndpoint\") },\n  returns: v.union(vEnterpriseWebhookEndpointDoc, v.null()),\n  handler: async (ctx, { endpointId }) => {\n    return await ctx.db.get(endpointId);\n  },\n});\n\n/**\n * Partially update (patch) an existing webhook endpoint.\n *\n * Merges the provided `data` fields into the endpoint document. Only the\n * fields present in `data` are changed; all other fields are preserved.\n * Common updates include changing the URL, rotating the secret, updating\n * subscriptions, or changing the status.\n *\n * @param args.endpointId - The document ID of the webhook endpoint to update.\n * @param args.data - An object containing the fields to update (e.g. `{ url, status, subscriptions }`).\n * @returns `null` on success.\n *\n * @example\n * ```ts\n * await ctx.runMutation(\n *   components.auth.enterprise.enterpriseWebhookEndpointUpdate,\n *   {\n *     endpointId,\n *     data: {\n *       status: \"paused\",\n *       subscriptions: [\"user.login\"],\n *     },\n *   },\n * );\n * ```\n */\nexport const enterpriseWebhookEndpointUpdate = mutation({\n  args: { endpointId: v.id(\"EnterpriseWebhookEndpoint\"), data: v.any() },\n  returns: v.null(),\n  handler: async (ctx, { endpointId, data }) => {\n    await ctx.db.patch(endpointId, data);\n    return null;\n  },\n});\n\n/**\n * Enqueue a webhook delivery for a specific endpoint.\n *\n * Creates a new `EnterpriseWebhookDelivery` document with an initial status\n * of `\"pending\"` and an attempt count of `0`. The delivery will be picked up\n * by the delivery worker once `nextAttemptAt` is reached.\n *\n * @param args.enterpriseId - The ID of the enterprise the delivery belongs to.\n * @param args.endpointId - The ID of the webhook endpoint this delivery targets.\n * @param args.auditEventId - An optional ID of the audit event that triggered this delivery.\n * @param args.eventType - The event type string describing the payload (e.g. `\"user.created\"`).\n * @param args.payload - The arbitrary JSON payload to deliver to the endpoint.\n * @param args.nextAttemptAt - Epoch timestamp (ms) when the delivery should first be attempted.\n * @returns The ID of the newly created `EnterpriseWebhookDelivery` document.\n *\n * @example\n * ```ts\n * const deliveryId = await ctx.runMutation(\n *   components.auth.enterprise.enterpriseWebhookDeliveryEnqueue,\n *   {\n *     enterpriseId,\n *     endpointId,\n *     auditEventId,\n *     eventType: \"user.created\",\n *     payload: { userId, email: \"jane@acme.com\" },\n *     nextAttemptAt: Date.now(),\n *   },\n * );\n * ```\n */\nexport const enterpriseWebhookDeliveryEnqueue = mutation({\n  args: {\n    enterpriseId: v.id(\"Enterprise\"),\n    endpointId: v.id(\"EnterpriseWebhookEndpoint\"),\n    auditEventId: v.optional(v.id(\"EnterpriseAuditEvent\")),\n    eventType: v.string(),\n    payload: v.any(),\n    nextAttemptAt: v.number(),\n  },\n  returns: v.id(\"EnterpriseWebhookDelivery\"),\n  handler: async (ctx, args) => {\n    return await ctx.db.insert(\"EnterpriseWebhookDelivery\", {\n      ...args,\n      status: \"pending\",\n      attemptCount: 0,\n    });\n  },\n});\n\n/**\n * List pending webhook deliveries that are ready to be attempted.\n *\n * Queries the `status_next_attempt_at` index for deliveries with status\n * `\"pending\"` whose `nextAttemptAt` is at or before the provided timestamp.\n * This is used by the delivery worker to find deliveries due for processing.\n *\n * @param args.now - The current epoch timestamp (ms) used as the cutoff for `nextAttemptAt`.\n * @param args.limit - Maximum number of deliveries to return (clamped between 1 and 100, defaults to 50).\n * @returns An array of webhook delivery documents ready for dispatch.\n *\n * @example\n * ```ts\n * const ready = await ctx.runQuery(\n *   components.auth.enterprise.enterpriseWebhookDeliveryListReady,\n *   { now: Date.now(), limit: 10 },\n * );\n * for (const delivery of ready) {\n *   await dispatchWebhook(delivery);\n * }\n * ```\n */\nexport const enterpriseWebhookDeliveryListReady = query({\n  args: { now: v.number(), limit: v.optional(v.number()) },\n  returns: v.array(vEnterpriseWebhookDeliveryDoc),\n  handler: async (ctx, { now, limit }) => {\n    return await ctx.db\n      .query(\"EnterpriseWebhookDelivery\")\n      .withIndex(\"status_next_attempt_at\", (idx) =>\n        idx.eq(\"status\", \"pending\").lte(\"nextAttemptAt\", now),\n      )\n      .take(Math.min(Math.max(limit ?? 50, 1), 100));\n  },\n});\n\n/**\n * List webhook deliveries for a specific enterprise, ordered by most recent first.\n *\n * Returns deliveries in reverse chronological order, useful for displaying\n * delivery history in an admin dashboard. Includes deliveries of all statuses.\n *\n * @param args.enterpriseId - The ID of the enterprise whose deliveries to list.\n * @param args.limit - Maximum number of deliveries to return (clamped between 1 and 100, defaults to 50).\n * @returns An array of webhook delivery documents, most recent first.\n *\n * @example\n * ```ts\n * const deliveries = await ctx.runQuery(\n *   components.auth.enterprise.enterpriseWebhookDeliveryList,\n *   { enterpriseId, limit: 25 },\n * );\n * for (const d of deliveries) {\n *   console.log(d.eventType, d.status, d.attemptCount);\n * }\n * ```\n */\nexport const enterpriseWebhookDeliveryList = query({\n  args: { enterpriseId: v.id(\"Enterprise\"), limit: v.optional(v.number()) },\n  returns: v.array(vEnterpriseWebhookDeliveryDoc),\n  handler: async (ctx, { enterpriseId, limit }) => {\n    return await ctx.db\n      .query(\"EnterpriseWebhookDelivery\")\n      .withIndex(\"enterprise_id\", (idx) => idx.eq(\"enterpriseId\", enterpriseId))\n      .order(\"desc\")\n      .take(Math.min(Math.max(limit ?? 50, 1), 100));\n  },\n});\n\n/**\n * Partially update (patch) an existing webhook delivery record.\n *\n * Merges the provided `data` fields into the delivery document. This is\n * typically used by the delivery worker to update the delivery status,\n * increment the attempt count, record response codes, or schedule retry\n * timestamps after a delivery attempt.\n *\n * @param args.deliveryId - The document ID of the webhook delivery to update.\n * @param args.data - An object containing the fields to update (e.g. `{ status, attemptCount, nextAttemptAt }`).\n * @returns `null` on success.\n *\n * @example\n * ```ts\n * await ctx.runMutation(\n *   components.auth.enterprise.enterpriseWebhookDeliveryPatch,\n *   {\n *     deliveryId,\n *     data: {\n *       status: \"delivered\",\n *       attemptCount: 1,\n *     },\n *   },\n * );\n * ```\n */\nexport const enterpriseWebhookDeliveryPatch = mutation({\n  args: { deliveryId: v.id(\"EnterpriseWebhookDelivery\"), data: v.any() },\n  returns: v.null(),\n  handler: async (ctx, { deliveryId, data }) => {\n    await ctx.db.patch(deliveryId, data);\n    return null;\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,MAAa,kCAAkC,SAAS;CACtD,MAAM;EACJ,cAAc,EAAE,GAAG,aAAa;EAChC,SAAS,EAAE,GAAG,QAAQ;EACtB,KAAK,EAAE,QAAQ;EACf,QAAQ,EAAE,SAAS,uBAAuB;EAC1C,YAAY,EAAE,QAAQ;EACtB,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC;EAClC,iBAAiB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;EACzC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;EAC5B;CACD,SAAS,EAAE,GAAG,4BAA4B;CAC1C,SAAS,OAAO,KAAK,SAAS;AAC5B,SAAO,MAAM,IAAI,GAAG,OAAO,6BAA6B;GACtD,GAAG;GACH,QAAQ,KAAK,UAAU;GACvB,cAAc;GACf,CAAC;;CAEL,CAAC;;;;;;;;;;;;;;;;;;;;;AAsBF,MAAa,gCAAgC,MAAM;CACjD,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,EAAE;CAC1C,SAAS,EAAE,MAAM,8BAA8B;CAC/C,SAAS,OAAO,KAAK,EAAE,mBAAmB;AACxC,SAAO,MAAM,IAAI,GACd,MAAM,4BAA4B,CAClC,UAAU,kBAAkB,QAAQ,IAAI,GAAG,gBAAgB,aAAa,CAAC,CACzE,SAAS;;CAEf,CAAC;;;;;;;;;;;;;;;;;;;;;AAsBF,MAAa,+BAA+B,MAAM;CAChD,MAAM,EAAE,YAAY,EAAE,GAAG,4BAA4B,EAAE;CACvD,SAAS,EAAE,MAAM,+BAA+B,EAAE,MAAM,CAAC;CACzD,SAAS,OAAO,KAAK,EAAE,iBAAiB;AACtC,SAAO,MAAM,IAAI,GAAG,IAAI,WAAW;;CAEtC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BF,MAAa,kCAAkC,SAAS;CACtD,MAAM;EAAE,YAAY,EAAE,GAAG,4BAA4B;EAAE,MAAM,EAAE,KAAK;EAAE;CACtE,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,YAAY,WAAW;AAC5C,QAAM,IAAI,GAAG,MAAM,YAAY,KAAK;AACpC,SAAO;;CAEV,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCF,MAAa,mCAAmC,SAAS;CACvD,MAAM;EACJ,cAAc,EAAE,GAAG,aAAa;EAChC,YAAY,EAAE,GAAG,4BAA4B;EAC7C,cAAc,EAAE,SAAS,EAAE,GAAG,uBAAuB,CAAC;EACtD,WAAW,EAAE,QAAQ;EACrB,SAAS,EAAE,KAAK;EAChB,eAAe,EAAE,QAAQ;EAC1B;CACD,SAAS,EAAE,GAAG,4BAA4B;CAC1C,SAAS,OAAO,KAAK,SAAS;AAC5B,SAAO,MAAM,IAAI,GAAG,OAAO,6BAA6B;GACtD,GAAG;GACH,QAAQ;GACR,cAAc;GACf,CAAC;;CAEL,CAAC;;;;;;;;;;;;;;;;;;;;;;;AAwBF,MAAa,qCAAqC,MAAM;CACtD,MAAM;EAAE,KAAK,EAAE,QAAQ;EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAAE;CACxD,SAAS,EAAE,MAAM,8BAA8B;CAC/C,SAAS,OAAO,KAAK,EAAE,KAAK,YAAY;AACtC,SAAO,MAAM,IAAI,GACd,MAAM,4BAA4B,CAClC,UAAU,2BAA2B,QACpC,IAAI,GAAG,UAAU,UAAU,CAAC,IAAI,iBAAiB,IAAI,CACtD,CACA,KAAK,KAAK,IAAI,KAAK,IAAI,SAAS,IAAI,EAAE,EAAE,IAAI,CAAC;;CAEnD,CAAC;;;;;;;;;;;;;;;;;;;;;;AAuBF,MAAa,gCAAgC,MAAM;CACjD,MAAM;EAAE,cAAc,EAAE,GAAG,aAAa;EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAAE;CACzE,SAAS,EAAE,MAAM,8BAA8B;CAC/C,SAAS,OAAO,KAAK,EAAE,cAAc,YAAY;AAC/C,SAAO,MAAM,IAAI,GACd,MAAM,4BAA4B,CAClC,UAAU,kBAAkB,QAAQ,IAAI,GAAG,gBAAgB,aAAa,CAAC,CACzE,MAAM,OAAO,CACb,KAAK,KAAK,IAAI,KAAK,IAAI,SAAS,IAAI,EAAE,EAAE,IAAI,CAAC;;CAEnD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BF,MAAa,iCAAiC,SAAS;CACrD,MAAM;EAAE,YAAY,EAAE,GAAG,4BAA4B;EAAE,MAAM,EAAE,KAAK;EAAE;CACtE,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,YAAY,WAAW;AAC5C,QAAM,IAAI,GAAG,MAAM,YAAY,KAAK;AACpC,SAAO;;CAEV,CAAC"}