@robelest/convex-auth 0.0.4-preview.20 → 0.0.4-preview.22

package/dist/component/model.d.ts

@@ -11,13 +11,13 @@ declare const vAuthVerifierDoc: convex_values474.VObject<{
   signature: convex_values474.VString<string | undefined, "optional">;
   _id: convex_values474.VId<convex_values474.GenericId<"AuthVerifier">, "required">;
   _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "sessionId" | "signature" | "_creationTime" | "_id">;
+}, "required", "_creationTime" | "sessionId" | "signature" | "_id">;
 declare const vPasskeyDoc: convex_values474.VObject<{
   name?: string | undefined;
   transports?: string[] | undefined;
   lastUsedAt?: number | undefined;
-  userId: convex_values474.GenericId<"User">;
   _creationTime: number;
+  userId: convex_values474.GenericId<"User">;
   credentialId: string;
   publicKey: ArrayBuffer;
   algorithm: number;
@@ -40,13 +40,13 @@ declare const vPasskeyDoc: convex_values474.VObject<{
   lastUsedAt: convex_values474.VFloat64<number | undefined, "optional">;
   _id: convex_values474.VId<convex_values474.GenericId<"Passkey">, "required">;
   _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "name" | "userId" | "_creationTime" | "credentialId" | "publicKey" | "algorithm" | "counter" | "transports" | "deviceType" | "backedUp" | "createdAt" | "lastUsedAt" | "_id">;
+}, "required", "_creationTime" | "name" | "userId" | "credentialId" | "publicKey" | "algorithm" | "counter" | "transports" | "deviceType" | "backedUp" | "createdAt" | "lastUsedAt" | "_id">;
 declare const vTotpFactorDoc: convex_values474.VObject<{
   name?: string | undefined;
   lastUsedAt?: number | undefined;
+  _creationTime: number;
   userId: convex_values474.GenericId<"User">;
   secret: ArrayBuffer;
-  _creationTime: number;
   createdAt: number;
   digits: number;
   period: number;
@@ -63,7 +63,7 @@ declare const vTotpFactorDoc: convex_values474.VObject<{
   lastUsedAt: convex_values474.VFloat64<number | undefined, "optional">;
   _id: convex_values474.VId<convex_values474.GenericId<"TotpFactor">, "required">;
   _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "name" | "userId" | "secret" | "_creationTime" | "createdAt" | "lastUsedAt" | "digits" | "period" | "verified" | "_id">;
+}, "required", "_creationTime" | "name" | "userId" | "secret" | "createdAt" | "lastUsedAt" | "digits" | "period" | "verified" | "_id">;
 declare const vApiKeyDoc: convex_values474.VObject<{
   lastUsedAt?: number | undefined;
   expiresAt?: number | undefined;
@@ -76,9 +76,9 @@ declare const vApiKeyDoc: convex_values474.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined;
+  _creationTime: number;
   name: string;
   userId: convex_values474.GenericId<"User">;
-  _creationTime: number;
   createdAt: number;
   revoked: boolean;
   prefix: string;
@@ -124,13 +124,13 @@ declare const vApiKeyDoc: convex_values474.VObject<{
   metadata: convex_values474.VAny<any, "optional", string>;
   _id: convex_values474.VId<convex_values474.GenericId<"ApiKey">, "required">;
   _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "name" | "userId" | "_creationTime" | "createdAt" | "lastUsedAt" | "expiresAt" | "revoked" | "metadata" | `metadata.${string}` | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | "_id">;
+}, "required", "_creationTime" | "name" | "userId" | "createdAt" | "lastUsedAt" | "expiresAt" | "revoked" | "metadata" | `metadata.${string}` | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | "_id">;
 declare const vDeviceCodeDoc: convex_values474.VObject<{
   userId?: convex_values474.GenericId<"User"> | undefined;
   sessionId?: convex_values474.GenericId<"Session"> | undefined;
   lastPolledAt?: number | undefined;
-  status: "pending" | "authorized" | "denied";
   _creationTime: number;
+  status: "pending" | "authorized" | "denied";
   deviceCodeHash: string;
   userCode: string;
   expiresAt: number;
@@ -147,7 +147,7 @@ declare const vDeviceCodeDoc: convex_values474.VObject<{
   lastPolledAt: convex_values474.VFloat64<number | undefined, "optional">;
   _id: convex_values474.VId<convex_values474.GenericId<"DeviceCode">, "required">;
   _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "status" | "userId" | "sessionId" | "_creationTime" | "deviceCodeHash" | "userCode" | "expiresAt" | "interval" | "lastPolledAt" | "_id">;
+}, "required", "_creationTime" | "status" | "userId" | "sessionId" | "deviceCodeHash" | "userCode" | "expiresAt" | "interval" | "lastPolledAt" | "_id">;
 //#endregion
 export { vApiKeyDoc, vAuthVerifierDoc, vDeviceCodeDoc, vPasskeyDoc, vTotpFactorDoc };
 //# sourceMappingURL=model.d.ts.map

package/dist/component/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","names":[],"sources":["../../src/component/model.ts"],"mappings":";;;;;;cAEa,MAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;cA2BA,IAAA,iBAAI,OAAA;;;;OAAmD,cAAA,CAAA,OAAA;;;cAEvD,UAAA,GAAc,IAAA,yBAAS,OAAA;;;;SAIhC,cAAA,CAAA,MAAA;;;cAES,aAAA,EAAa,cAAA,CAAA,MAAA,kDAKzB,cAAA,CALyB,QAAA,yBAAA,cAAA,CAAA,QAAA,0BAAA,cAAA,CAAA,QAAA,yBAAA,cAAA,CAAA,QAAA;AAAA,cAOb,aAAA,EAAa,cAAA,CAAA,MAAA,uCAIzB,cAAA,CAJyB,QAAA,yBAAA,cAAA,CAAA,QAAA,4BAAA,cAAA,CAAA,QAAA;AAAA,cAMb,+BAAA,EAA+B,cAAA,CAAA,MAAA,4BAG3C,cAAA,CAH2C,QAAA,+BAAA,cAAA,CAAA,QAAA;AAAA,cAK/B,8BAAA,EAA8B,cAAA,CAAA,MAAA,yBAG1C,cAAA,CAH0C,QAAA,4BAAA,cAAA,CAAA,QAAA;AAAA,cAK9B,8BAAA,EAA8B,cAAA,CAAA,MAAA,oDAI1C,cAAA,CAJ0C,QAAA,qBAAA,cAAA,CAAA,QAAA,4BAAA,cAAA,CAAA,QAAA;AAAA,cAM9B,0BAAA,EAA0B,cAAA,CAAA,MAAA,mBAGtC,cAAA,CAHsC,QAAA,sBAAA,cAAA,CAAA,QAAA;AAAA,cAK1B,iBAAA,EAAiB,cAAA,CAAA,MAAA,mCAI7B,cAAA,CAJ6B,QAAA,uBAAA,cAAA,CAAA,QAAA,wBAAA,cAAA,CAAA,QAAA;AAAA,cAMjB,iBAAA,iBAAiB,OAAA;;;;;;;;;;;;;;;;;;;;;;;WAsB5B,cAAA,CAAA,QAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,WAAA,EAAW,cAAA,CAAA,MAAA,mCAIvB,cAAA,CAJuB,QAAA,uBAAA,cAAA,CAAA,QAAA,wBAAA,cAAA,CAAA,QAAA;AAAA,cAMX,iBAAA,EAAiB,cAAA,CAAA,MAAA,oBAAiD,cAAA,CAAjD,QAAA,sBAAA,cAAA,CAAA,QAAA;AAAA,cAEjB,eAAA,EAAe,cAAA,CAAA,MAAA,sDAM3B,cAAA,CAN2B,QAAA,sBAAA,cAAA,CAAA,QAAA,wBAAA,cAAA,CAAA,QAAA,sBAAA,cAAA,CAAA,QAAA,yBAAA,cAAA,CAAA,QAAA;AAAA,cAQf,YAAA,EAAY,cAAA,CAAA,MAAA,yBAAsD,cAAA,CAAtD,QAAA,yBAAA,cAAA,CAAA,QAAA;AAAA,cAEZ,sBAAA,EAAsB,cAAA,CAAA,MAAA,yBAGlC,cAAA,CAHkC,QAAA,wBAAA,cAAA,CAAA,QAAA;AAAA,cAKtB,sBAAA,EAAsB,cAAA,CAAA,MAAA,qDAKlC,cAAA,CALkC,QAAA,yBAAA,cAAA,CAAA,QAAA,4BAAA,cAAA,CAAA,QAAA,2BAAA,cAAA,CAAA,QAAA;AAAA,cAOtB,wBAAA,EAAwB,cAAA,CAAA,MAAA,mCAGpC,cAAA,CAHoC,QAAA,0BAAA,cAAA,CAAA,QAAA;AAAA,cAKxB,iBAAA,EAAiB,cAAA,CAAA,MAAA,kDAI7B,cAAA,CAJ6B,QAAA,wBAAA,cAAA,CAAA,QAAA,gCAAA,cAAA,CAAA,QAAA;AAAA,cAMjB,YAAA,iBAAY,OAAA;;;;YAGvB,cAAA,CAAA,OAAA;;;cAEW,gBAAA,iBAAgB,OAAA;;;;eAG3B,cAAA,CAAA,QAAA;;;cAEW,qBAAA,iBAAqB,OAAA;;;;gBAGhC,cAAA,CAAA,QAAA;;;cAEW,qBAAA,EAAqB,cAAA,CAAA,MAAA,wBAA2C,cAAA,CAA3C,QAAA;AAAA,cAWrB,QAAA,iBAAQ,OAAA;;;;;;;;;OAUnB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;cAEW,WAAA,iBAAW,OAAA;OAItB,cAAA,CAAA,SAAA;;;;;;;;;;cAEW,WAAA,iBAAW,OAAA;;;;;OAStB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;cAEW,gBAAA,iBAAgB,OAAA;cAI3B,cAAA,CAAA,SAAA;;;;;;;;;;cAEW,oBAAA,iBAAoB,OAAA;;;;OAS/B,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;cAEW,gBAAA,iBAAgB,OAAA;;yBAM3B,cAAA,CAAA,SAAA;;;;;;;;;;;;;cAEW,WAAA,iBAAW,OAAA;;;;OAatB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,cAAA,iBAAc,OAAA;;;OAUzB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;cAEW,aAAA,iBAAa,OAAA;OAKxB,cAAA,CAAA,SAAA;;;;;;;;;;;;cAEW,SAAA,iBAAS,OAAA;;;;kBAUpB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,eAAA,iBAAe,OAAA;;;;;OAQ1B,cAAA,CAAA,SAAA;;;;;;;;;;;;;;cAEW,eAAA,iBAAe,OAAA;;;YAa1B,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,UAAA,iBAAU,OAAA;;;;;;;;;;;;;;OAcrB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,cAAA,iBAAc,OAAA;WAUzB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;cAEW,cAAA,iBAAc,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;OASzB,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,oBAAA,iBAAoB,OAAA;;OAO/B,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;cAEW,gCAAA,iBAAgC,OAAA;OAW3C,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;cAEW,oBAAA,iBAAoB,OAAA;OAO/B,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;cAEW,wBAAA,iBAAwB,OAAA;;;OASnC,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;cAEW,0BAAA,iBAA0B,OAAA;;WAWrC,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;cAEW,wBAAA,iBAAwB,OAAA;;;;;;OAcnC,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,6BAAA,iBAA6B,OAAA;;oBAaxC,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,6BAAA,iBAA6B,OAAA;iBAaxC,cAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,gBAAA,iBAAgB,OAAA;;;OAO3B,cAAA,CAAA,SAAA;;;;;;;;;;;;;;cAEW,0BAAA,iBAA0B,OAAA;aAMrC,cAAA,CAAA,SAAA"}
+{"version":3,"file":"model.d.ts","names":[],"sources":["../../src/component/model.ts"],"mappings":";;;cAqMa,gBAAA,mBAAgB,OAAA;cAI3B,gBAAA,CAAA,SAAA;;;;;;;;;;cAqBW,WAAA,mBAAW,OAAA;;;;;UAatB,gBAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;cAEW,cAAA,mBAAc,OAAA;;;;UAUzB,gBAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;cA8CW,UAAA,mBAAU,OAAA;;;;;;;;;;;;;;UAcrB,gBAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,cAAA,mBAAc,OAAA;WAUzB,gBAAA,CAAA,SAAA"}

package/dist/component/schema.d.ts

@@ -15,10 +15,10 @@ declare const _default: convex_server66.SchemaDefinition<{
    * and multiple concurrent sessions.
    */
   User: convex_server66.TableDefinition<convex_values121.VObject<{
-    email?: string | undefined;
     phone?: string | undefined;
-    extend?: any;
+    email?: string | undefined;
     name?: string | undefined;
+    extend?: any;
     image?: string | undefined;
     emailVerificationTime?: number | undefined;
     phoneVerificationTime?: number | undefined;
@@ -32,7 +32,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     phoneVerificationTime: convex_values121.VFloat64<number | undefined, "optional">;
     isAnonymous: convex_values121.VBoolean<boolean | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "email" | "phone" | "extend" | "name" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | `extend.${string}`>, {
+  }, "required", "phone" | "email" | "name" | "extend" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | `extend.${string}`>, {
     email: ["email", "_creationTime"];
     email_verified: ["email", "emailVerificationTime", "_creationTime"];
     phone: ["phone", "_creationTime"];
@@ -247,9 +247,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    * organizations, teams, departments, or any tree structure.
    */
   Group: convex_server66.TableDefinition<convex_values121.VObject<{
+    slug?: string | undefined;
     type?: string | undefined;
     extend?: any;
-    slug?: string | undefined;
     parentGroupId?: convex_values121.GenericId<"Group"> | undefined;
     rootGroupId?: convex_values121.GenericId<"Group"> | undefined;
     isRoot?: boolean | undefined;
@@ -276,7 +276,7 @@ declare const _default: convex_server66.SchemaDefinition<{
       value: convex_values121.VString<string, "required">;
     }, "required", "value" | "key">, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "type" | "extend" | "name" | "slug" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags">, {
+  }, "required", "name" | "slug" | "type" | "extend" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags">, {
     slug: ["slug", "_creationTime"];
     parent_group_id: ["parentGroupId", "_creationTime"];
     root_group_id: ["rootGroupId", "_creationTime"];
@@ -308,8 +308,8 @@ declare const _default: convex_server66.SchemaDefinition<{
    * member of multiple groups with different roles in each.
    */
   GroupMember: convex_server66.TableDefinition<convex_values121.VObject<{
-    extend?: any;
     status?: string | undefined;
+    extend?: any;
     role?: string | undefined;
     roleIds?: string[] | undefined;
     groupId: convex_values121.GenericId<"Group">;
@@ -321,7 +321,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     roleIds: convex_values121.VArray<string[] | undefined, convex_values121.VString<string, "required">, "optional">;
     status: convex_values121.VString<string | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "groupId" | "extend" | "status" | "userId" | `extend.${string}` | "role" | "roleIds">, {
+  }, "required", "status" | "groupId" | "extend" | "userId" | `extend.${string}` | "role" | "roleIds">, {
     group_id: ["groupId", "_creationTime"];
     group_id_user_id: ["groupId", "userId", "_creationTime"];
     group_id_status: ["groupId", "status", "_creationTime"];
@@ -359,7 +359,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     acceptedByUserId: convex_values121.VId<convex_values121.GenericId<"User"> | undefined, "optional">;
     acceptedTime: convex_values121.VFloat64<number | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "email" | "groupId" | "extend" | "status" | `extend.${string}` | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
+  }, "required", "email" | "status" | "groupId" | "tokenHash" | "extend" | `extend.${string}` | "role" | "roleIds" | "invitedByUserId" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
     token_hash: ["tokenHash", "_creationTime"];
     status: ["status", "_creationTime"];
     email_status: ["email", "status", "_creationTime"];
@@ -375,7 +375,6 @@ declare const _default: convex_server66.SchemaDefinition<{
    * field addition.
    */
   Enterprise: convex_server66.TableDefinition<convex_values121.VObject<{
-    extend?: any;
     name?: string | undefined;
     slug?: string | undefined;
     policy?: {
@@ -383,8 +382,8 @@ declare const _default: convex_server66.SchemaDefinition<{
       version: 1;
       identity: {
         accountLinking: {
-          oidc: "verifiedEmail" | "none";
           saml: "verifiedEmail" | "none";
+          oidc: "verifiedEmail" | "none";
         };
       };
       provisioning: {
@@ -401,9 +400,10 @@ declare const _default: convex_server66.SchemaDefinition<{
         };
       };
     } | undefined;
+    extend?: any;
     config?: any;
-    groupId: convex_values121.GenericId<"Group">;
     status: "draft" | "active" | "disabled";
+    groupId: convex_values121.GenericId<"Group">;
   }, {
     groupId: convex_values121.VId<convex_values121.GenericId<"Group">, "required">;
     slug: convex_values121.VString<string | undefined, "optional">;
@@ -414,8 +414,8 @@ declare const _default: convex_server66.SchemaDefinition<{
       version: 1;
       identity: {
         accountLinking: {
-          oidc: "verifiedEmail" | "none";
           saml: "verifiedEmail" | "none";
+          oidc: "verifiedEmail" | "none";
         };
       };
       provisioning: {
@@ -435,18 +435,18 @@ declare const _default: convex_server66.SchemaDefinition<{
       version: convex_values121.VLiteral<1, "required">;
       identity: convex_values121.VObject<{
         accountLinking: {
-          oidc: "verifiedEmail" | "none";
           saml: "verifiedEmail" | "none";
+          oidc: "verifiedEmail" | "none";
         };
       }, {
         accountLinking: convex_values121.VObject<{
-          oidc: "verifiedEmail" | "none";
           saml: "verifiedEmail" | "none";
+          oidc: "verifiedEmail" | "none";
         }, {
           oidc: convex_values121.VUnion<"verifiedEmail" | "none", [convex_values121.VLiteral<"verifiedEmail", "required">, convex_values121.VLiteral<"none", "required">], "required", never>;
           saml: convex_values121.VUnion<"verifiedEmail" | "none", [convex_values121.VLiteral<"verifiedEmail", "required">, convex_values121.VLiteral<"none", "required">], "required", never>;
-        }, "required", "oidc" | "saml">;
-      }, "required", "accountLinking" | "accountLinking.oidc" | "accountLinking.saml">;
+        }, "required", "saml" | "oidc">;
+      }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
       provisioning: convex_values121.VObject<{
         scimReuse: {
           user: "none" | "externalId";
@@ -481,10 +481,10 @@ declare const _default: convex_server66.SchemaDefinition<{
         }, "required", "mode">;
       }, "required", "scimReuse" | "jit" | "deprovision" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode">;
       extend: convex_values121.VAny<any, "optional", string>;
-    }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode">;
+    }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode">;
     config: convex_values121.VAny<any, "optional", string>;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "groupId" | "extend" | "name" | "slug" | "status" | `extend.${string}` | "policy" | "config" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | `config.${string}`>, {
+  }, "required", "name" | "slug" | "status" | "groupId" | "policy" | "extend" | `extend.${string}` | "config" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.saml" | "policy.identity.accountLinking.oidc" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | `config.${string}`>, {
     group_id: ["groupId", "_creationTime"];
     slug: ["slug", "_creationTime"];
     status: ["status", "_creationTime"];
@@ -494,9 +494,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    */
   EnterpriseDomain: convex_server66.TableDefinition<convex_values121.VObject<{
     verifiedAt?: number | undefined;
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     domain: string;
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     isPrimary: boolean;
   }, {
     enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
@@ -504,7 +504,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     domain: convex_values121.VString<string, "required">;
     isPrimary: convex_values121.VBoolean<boolean, "required">;
     verifiedAt: convex_values121.VFloat64<number | undefined, "optional">;
-  }, "required", "groupId" | "domain" | "enterpriseId" | "isPrimary" | "verifiedAt">, {
+  }, "required", "enterpriseId" | "groupId" | "domain" | "verifiedAt" | "isPrimary">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     domain: ["domain", "_creationTime"];
@@ -513,11 +513,11 @@ declare const _default: convex_server66.SchemaDefinition<{
    * Pending DNS TXT verification challenges for enterprise domains.
    */
   EnterpriseDomainVerification: convex_server66.TableDefinition<convex_values121.VObject<{
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     domain: string;
-    expiresAt: number;
     tokenHash: string;
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
+    expiresAt: number;
     domainId: convex_values121.GenericId<"EnterpriseDomain">;
     recordName: string;
     token: string;
@@ -532,7 +532,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     tokenHash: convex_values121.VString<string, "required">;
     requestedAt: convex_values121.VFloat64<number, "required">;
     expiresAt: convex_values121.VFloat64<number, "required">;
-  }, "required", "groupId" | "domain" | "expiresAt" | "tokenHash" | "enterpriseId" | "domainId" | "recordName" | "token" | "requestedAt">, {
+  }, "required", "enterpriseId" | "groupId" | "domain" | "tokenHash" | "expiresAt" | "domainId" | "recordName" | "token" | "requestedAt">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     domain_id: ["domainId", "_creationTime"];
     token_hash: ["tokenHash", "_creationTime"];
@@ -541,9 +541,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    * Encrypted enterprise secrets stored separately from protocol config.
    */
   EnterpriseSecret: convex_server66.TableDefinition<convex_values121.VObject<{
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     kind: "oidc_client_secret";
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     ciphertext: string;
     updatedAt: number;
   }, {
@@ -552,7 +552,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     kind: convex_values121.VUnion<"oidc_client_secret", [convex_values121.VLiteral<"oidc_client_secret", "required">], "required", never>;
     ciphertext: convex_values121.VString<string, "required">;
     updatedAt: convex_values121.VFloat64<number, "required">;
-  }, "required", "groupId" | "kind" | "enterpriseId" | "ciphertext" | "updatedAt">, {
+  }, "required", "enterpriseId" | "groupId" | "kind" | "ciphertext" | "updatedAt">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     enterprise_id_kind: ["enterpriseId", "kind", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
@@ -563,10 +563,10 @@ declare const _default: convex_server66.SchemaDefinition<{
   EnterpriseScimConfig: convex_server66.TableDefinition<convex_values121.VObject<{
     extend?: any;
     lastRotatedAt?: number | undefined;
-    groupId: convex_values121.GenericId<"Group">;
     status: "draft" | "active" | "disabled";
-    tokenHash: string;
     enterpriseId: convex_values121.GenericId<"Enterprise">;
+    groupId: convex_values121.GenericId<"Group">;
+    tokenHash: string;
     basePath: string;
   }, {
     enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
@@ -576,7 +576,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     tokenHash: convex_values121.VString<string, "required">;
     lastRotatedAt: convex_values121.VFloat64<number | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "groupId" | "extend" | "status" | `extend.${string}` | "tokenHash" | "enterpriseId" | "basePath" | "lastRotatedAt">, {
+  }, "required", "status" | "enterpriseId" | "groupId" | "tokenHash" | "basePath" | "extend" | `extend.${string}` | "lastRotatedAt">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     token_hash: ["tokenHash", "_creationTime"];
@@ -587,13 +587,13 @@ declare const _default: convex_server66.SchemaDefinition<{
    */
   EnterpriseScimIdentity: convex_server66.TableDefinition<convex_values121.VObject<{
     active?: boolean | undefined;
+    lastProvisionedAt?: number | undefined;
     userId?: convex_values121.GenericId<"User"> | undefined;
     mappedGroupId?: convex_values121.GenericId<"Group"> | undefined;
-    lastProvisionedAt?: number | undefined;
     raw?: any;
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     externalId: string;
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     resourceType: "user" | "group";
   }, {
     enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
@@ -605,7 +605,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     lastProvisionedAt: convex_values121.VFloat64<number | undefined, "optional">;
     active: convex_values121.VBoolean<boolean | undefined, "optional">;
     raw: convex_values121.VAny<any, "optional", string>;
-  }, "required", "groupId" | "active" | "userId" | "externalId" | "enterpriseId" | "resourceType" | "mappedGroupId" | "lastProvisionedAt" | "raw" | `raw.${string}`>, {
+  }, "required", "active" | "enterpriseId" | "groupId" | "lastProvisionedAt" | "userId" | "externalId" | "resourceType" | "mappedGroupId" | "raw" | `raw.${string}`>, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     enterprise_id_resource_type_external_id: ["enterpriseId", "resourceType", "externalId", "_creationTime"];
@@ -622,9 +622,9 @@ declare const _default: convex_server66.SchemaDefinition<{
     requestId?: string | undefined;
     ip?: string | undefined;
     metadata?: any;
-    groupId: convex_values121.GenericId<"Group">;
     status: "success" | "failure";
     enterpriseId: convex_values121.GenericId<"Enterprise">;
+    groupId: convex_values121.GenericId<"Group">;
     actorType: "user" | "system" | "scim" | "api_key" | "webhook";
     eventType: string;
     subjectType: string;
@@ -642,7 +642,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     requestId: convex_values121.VString<string | undefined, "optional">;
     ip: convex_values121.VString<string | undefined, "optional">;
     metadata: convex_values121.VAny<any, "optional", string>;
-  }, "required", "groupId" | "status" | "enterpriseId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
+  }, "required", "status" | "enterpriseId" | "groupId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
     enterprise_id_occurred_at: ["enterpriseId", "occurredAt", "_creationTime"];
     group_id_occurred_at: ["groupId", "occurredAt", "_creationTime"];
     event_type_occurred_at: ["eventType", "occurredAt", "_creationTime"];
@@ -655,9 +655,9 @@ declare const _default: convex_server66.SchemaDefinition<{
     createdByUserId?: convex_values121.GenericId<"User"> | undefined;
     lastSuccessAt?: number | undefined;
     lastFailureAt?: number | undefined;
-    groupId: convex_values121.GenericId<"Group">;
     status: "active" | "disabled";
     enterpriseId: convex_values121.GenericId<"Enterprise">;
+    groupId: convex_values121.GenericId<"Group">;
     url: string;
     secretHash: string;
     subscriptions: string[];
@@ -674,7 +674,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     lastFailureAt: convex_values121.VFloat64<number | undefined, "optional">;
     failureCount: convex_values121.VFloat64<number, "required">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "groupId" | "extend" | "status" | `extend.${string}` | "enterpriseId" | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
+  }, "required", "status" | "enterpriseId" | "groupId" | "extend" | `extend.${string}` | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     status: ["status", "_creationTime"];
@@ -689,8 +689,8 @@ declare const _default: convex_server66.SchemaDefinition<{
     lastError?: string | undefined;
     status: "pending" | "processing" | "delivered" | "failed";
     enterpriseId: convex_values121.GenericId<"Enterprise">;
-    eventType: string;
     endpointId: convex_values121.GenericId<"EnterpriseWebhookEndpoint">;
+    eventType: string;
     attemptCount: number;
     nextAttemptAt: number;
     payload: any;
@@ -706,7 +706,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     lastResponseStatus: convex_values121.VFloat64<number | undefined, "optional">;
     lastError: convex_values121.VString<string | undefined, "optional">;
     payload: convex_values121.VAny<any, "required", string>;
-  }, "required", "status" | "enterpriseId" | "eventType" | "endpointId" | "auditEventId" | "attemptCount" | "nextAttemptAt" | "lastAttemptAt" | "lastResponseStatus" | "lastError" | "payload" | `payload.${string}`>, {
+  }, "required", "status" | "enterpriseId" | "endpointId" | "eventType" | "auditEventId" | "attemptCount" | "nextAttemptAt" | "lastAttemptAt" | "lastResponseStatus" | "lastError" | "payload" | `payload.${string}`>, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     status_next_attempt_at: ["status", "nextAttemptAt", "_creationTime"];
     endpoint_id_status: ["endpointId", "status", "_creationTime"];

package/dist/component/server/auth.d.ts

@@ -10,6 +10,8 @@ import { GenericId } from "convex/values";
  * minus `component` (which is passed as the first constructor argument).
  */
 type AuthConfig = Omit<ConvexAuthConfig, "component">;
+/** Canonical user document type exposed by Convex Auth. */
+type UserDoc = Doc<"User">;
 type MemberApiWithAuthorization<TAuthorization extends AuthAuthorizationConfig | undefined> = Omit<ReturnType<typeof Auth>["auth"]["member"], "create" | "list" | "update" | "resolve"> & {
   create: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["create"]>[0], data: {
     groupId: string;
@@ -151,19 +153,45 @@ type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = un
   };
 };
 /**
- * Resolved auth context injected into `ctx.auth` by `auth.ctx()`.
+ * Resolved auth context injected into `ctx.auth` by `auth.ctx()` and
+ * {@link AuthCtx}. Also the expected return shape for custom
+ * {@link AuthCtxConfig.authResolve | authResolve} hooks.
  *
  * - `null` when unauthenticated.
  * - `groupId` is `null` when the user has no active group set.
  * - `role` / `grants` are `null` / `[]` when no active group or no membership.
+ *
+ * @example
+ * ```ts
+ * import type { AuthResolvedContext } from "@robelest/convex-auth/server";
+ *
+ * const mockAuth: AuthResolvedContext = {
+ *   userId: "user123" as Id<"User">,
+ *   user: { _id: "user123", email: "test@example.com" },
+ *   groupId: "group456",
+ *   role: "admin",
+ *   grants: ["read", "write"],
+ * };
+ * ```
  */
 type AuthResolvedContext = {
-  /** The authenticated user's document ID. */userId: string; /** The authenticated user's full document. */
-  user: any; /** The user's active group ID, or `null` if none set. */
+  /** The authenticated user's document ID. */userId: GenericId<"User">; /** The authenticated user's full document. */
+  user: UserDoc; /** The user's active group ID, or `null` if none set. */
   groupId: string | null; /** The user's primary role in the active group, or `null`. */
   role: string | null; /** Resolved grant strings from the user's role definitions. */
   grants: string[];
 };
+type AuthCtxBase = {
+  getUserIdentity: () => Promise<UserIdentity | null>;
+};
+type RequiredAuthCtxState = AuthCtxBase & AuthResolvedContext;
+type OptionalAuthCtxState = AuthCtxBase & {
+  userId: GenericId<"User"> | null;
+  user: UserDoc | null;
+  groupId: string | null;
+  role: string | null;
+  grants: string[];
+};
 type InternalSsoApi = ReturnType<typeof Auth>["auth"]["sso"];
 type PublicSsoAdminApi = {
   connection: InternalSsoApi["connection"] & {
@@ -280,8 +308,6 @@ declare function createAuth<P extends AuthProviderConfig[], TAuthorization exten
   providers: P;
   authorization?: TAuthorization;
 }): ConvexAuthResult<P, TAuthorization>;
-/** Canonical user document type exposed by Convex Auth. */
-type UserDoc = Doc<"User">;
 /**
  * Configuration for {@link AuthCtx} context enrichment.
  *
@@ -291,16 +317,42 @@ type UserDoc = Doc<"User">;
 type AuthCtxConfig<TResolve extends Record<string, unknown> = Record<string, never>> = {
   /** Allow unauthenticated callers and return `userId: null` / `user: null`. */optional?: boolean;
   /**
-   * Attach additional derived fields to the auth context after the user is resolved.
+   * Attach additional derived fields to the auth context after the base auth
+   * context is resolved.
+   */
+  resolve?: (ctx: any, user: UserDoc, auth: AuthResolvedContext) => Promise<TResolve> | TResolve;
+  /**
+   * Override or wrap the base auth resolution used by {@link AuthCtx}.
+   *
+   * Return `undefined` to fall back to the built-in resolver,
+   * `null` for an explicit unauthenticated state, or an
+   * {@link AuthResolvedContext} object to provide a pre-resolved auth state.
+   * This is useful for tests, proxy auth, impersonation flows, or any
+   * environment that needs to inject auth without depending on the standard
+   * Convex auth tables.
+   *
+   * @param ctx - The Convex function context.
+   * @param fallback - The built-in auth resolver used by {@link AuthCtx}.
+   * @returns Resolved auth state, `null`, or `undefined` to use the fallback.
+   *
+   * @example
+   * ```ts
+   * const authCtx = AuthCtx(auth, {
+   *   authResolve: async (ctx, fallback) => {
+   *     const injected = getInjectedAuth(ctx);
+   *     return injected ?? (await fallback());
+   *   },
+   * });
+   * ```
    */
-  resolve?: (ctx: any, user: UserDoc) => Promise<TResolve> | TResolve;
+  authResolve?: (ctx: any, fallback: () => Promise<AuthResolvedContext | null>) => Promise<AuthResolvedContext | null | undefined> | AuthResolvedContext | null | undefined;
 };
 /**
  * Create a context enrichment for `customQuery` / `customMutation` — optional auth.
  *
  * When `optional: true` is set, unauthenticated requests are allowed.
- * The enriched `ctx.auth` will have `userId: null` and `user: null`
- * for unauthenticated callers.
+ * The enriched `ctx.auth` will have `userId: null`, `user: null`,
+ * `groupId: null`, `role: null`, and `grants: []` for unauthenticated callers.
  *
  * @param auth - The auth API object returned by {@link createAuth}.
  * @param config - Configuration with `optional: true` and an optional
@@ -324,11 +376,7 @@ declare function AuthCtx<TResolve extends Record<string, unknown> = Record<strin
   args: {};
   input: (ctx: any, _args: any, _extra?: any) => Promise<{
     ctx: {
-      auth: {
-        getUserIdentity: () => Promise<UserIdentity | null>;
-        userId: GenericId<"User"> | null;
-        user: UserDoc | null;
-      } & TResolve;
+      auth: OptionalAuthCtxState & TResolve;
     };
     args: {};
   }>;
@@ -338,8 +386,9 @@ declare function AuthCtx<TResolve extends Record<string, unknown> = Record<strin
  *
  * When `optional` is omitted or `false`, the inferred type is the authenticated
  * auth shape. At runtime this helper still resolves instead of throwing, so if
- * no user is signed in the returned `ctx.auth.userId` and `ctx.auth.user` are
- * `null`.
+ * no user is signed in the returned `ctx.auth.userId` / `ctx.auth.user` are
+ * `null`, `ctx.auth.groupId` / `ctx.auth.role` are `null`, and
+ * `ctx.auth.grants` is `[]`.
  *
  * @param auth - The auth API object returned by {@link createAuth}.
  * @param config - Optional configuration with a `resolve` callback
@@ -360,11 +409,7 @@ declare function AuthCtx<TResolve extends Record<string, unknown> = Record<strin
   args: {};
   input: (ctx: any, _args: any, _extra?: any) => Promise<{
     ctx: {
-      auth: {
-        getUserIdentity: () => Promise<UserIdentity | null>;
-        userId: GenericId<"User">;
-        user: UserDoc;
-      } & TResolve;
+      auth: RequiredAuthCtxState & TResolve;
     };
     args: {};
   }>;
@@ -374,9 +419,10 @@ declare function AuthCtx<TResolve extends Record<string, unknown> = Record<strin
  *
  * Use this to type function parameters or variables that receive the
  * enriched auth context produced by `AuthCtx`. The inferred type includes
- * `userId`, `user`, `getUserIdentity`, and any additional fields added
- * by the `resolve` callback. This is the generic utility for reusing the
- * enriched auth shape without manually duplicating conditional auth types.
+ * `userId`, `user`, `groupId`, `role`, `grants`, `getUserIdentity`, and any
+ * additional fields added by the `resolve` callback. This is the generic
+ * utility for reusing the enriched auth shape without manually duplicating
+ * conditional auth types.
  *
  * @typeParam T - An `AuthCtx` return value (must have an `input` method
  *   that returns `{ ctx: { auth: ... } }`).
@@ -400,5 +446,5 @@ type InferAuth<T extends {
   }>;
 }> = Awaited<ReturnType<T["input"]>>["ctx"]["auth"];
 //#endregion
-export { AuthApi, AuthConfig, AuthCtx, AuthCtxConfig, InferAuth, UserDoc, createAuth };
+export { AuthApi, AuthConfig, AuthCtx, AuthCtxConfig, AuthResolvedContext, InferAuth, UserDoc, createAuth };
 //# sourceMappingURL=auth.d.ts.map

package/dist/component/server/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","names":[],"sources":["../../../src/server/auth.ts"],"mappings":";;;;;;;;AAmC6D;;;KAAjD,UAAA,GAAa,IAAA,CAAK,gBAAA;AAAA,KAEzB,0BAAA,wBACoB,uBAAA,gBACrB,IAAA,CACF,UAAA,QAAkB,IAAA;EAGlB,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,IAAA;IACE,OAAA;IACA,MAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA;IACA,MAAA,GAAS,MAAA;EAAA,MAER,OAAA;IAAU,EAAA;IAAU,QAAA;EAAA;EACzB,IAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,iCAEpB,IAAA;IACE,KAAA;MACE,OAAA;MACA,MAAA;MACA,MAAA,GAAS,UAAA,CAAW,cAAA;MACpB,MAAA;IAAA;IAEF,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;EAClC,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,QAAA,UACA,IAAA,EAAM,MAAA;IAA4B,OAAA,GAAU,UAAA,CAAW,cAAA;EAAA,MACpD,OAAA;IAAU,EAAA;IAAU,QAAA;EAAA;EACzB,OAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,oCAEpB,IAAA;IACE,MAAA;IACA,OAAA;IACA,QAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA,GAAS,SAAA,CAAU,cAAA;IACnB,QAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;AAAA;;;;;;;;;;;;;;;;KAmBxB,WAAA,wBACa,uBAAA;EAEvB,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,IAAA,EAAM,UAAA,QAAkB,IAAA;EACxB,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,QAAA,EAAU,UAAA,QAAkB,IAAA;EAC5B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,MAAA,EAAQ,0BAAA,CAA2B,cAAA;EACnC,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,GAAA,EAAK,UAAA,QAAkB,IAAA;EACvB,IAAA,EAAM,UAAA,QAAkB,IAAA;EA9DlB;;;;;;;;;;;;;;;;;;;;;;;;EAuFN,OAAA,GAAU,GAAA,UAAa,OAAA,CAAQ,mBAAA;EAvEhB;;;;;;;;;;;;;;;;;;;;;;;AAgCjB;;;;;;;;;;;;;;;;EA+EE,GAAA;IACE,IAAA,EAAM,MAAA;IACN,KAAA,GAAQ,GAAA,UAAa,OAAA;MACnB,GAAA;QAAO,IAAA,EAAM,mBAAA;MAAA;MACb,IAAA,EAAM,MAAA;IAAA;EAAA;AAAA;;;;;;;;KAYA,mBAAA;EAdoB,4CAgB9B,MAAA,UAhGA;EAkGA,IAAA,OAhGA;EAkGA,OAAA,iBAlG0B;EAoG1B,IAAA,iBAnGS;EAqGT,MAAA;AAAA;AAAA,KAGG,cAAA,GAAiB,UAAA,QAAkB,IAAA;AAAA,KAEnC,iBAAA;EACH,UAAA,EAAY,cAAA;IACV,MAAA;MACE,IAAA,EAAM,cAAA;MACN,QAAA,EAAU,cAAA;MACV,GAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,YAAA,UACA,OAAA,EAAS,KAAA;QACP,MAAA;QACA,SAAA;MAAA,OAEC,OAAA;QACH,EAAA;QACA,YAAA;QACA,OAAA,EAAS,KAAA;UACP,QAAA;UACA,MAAA;UACA,SAAA;UACA,QAAA;UACA,UAAA;QAAA;MAAA;MAGJ,YAAA;QACE,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,EAAA;UACA,YAAA;UACA,MAAA;UACA,WAAA;UACA,SAAA;UACA,SAAA;YACE,UAAA;YACA,UAAA;YACA,WAAA;UAAA;QAAA;QAGJ,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,EAAA;UACA,YAAA;UACA,MAAA;UACA,UAAA;UACA,MAAA,EAAQ,KAAA;YAAQ,IAAA;YAAc,EAAA;YAAa,OAAA;UAAA;QAAA;MAAA;IAAA;EAAA;EAKnD,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,MAAA,EAAQ,cAAA;EACR,KAAA;IACE,IAAA,EAAM,cAAA;EAAA;EAER,OAAA;IACE,QAAA,EAAU,cAAA;IACV,QAAA;MACE,IAAA,EAAM,cAAA;IAAA;EAAA;AAAA;AAAA,KAKP,kBAAA;EACH,MAAA,EAAQ,cAAA;EACR,QAAA,EAAU,cAAA;AAAA;AAAA,KAGP,YAAA;EACH,KAAA,EAAO,iBAAA;EACP,MAAA,EAAQ,kBAAA;AAAA;AAAA,KAGL,aAAA;EACH,KAAA,EAAO,IAAA,CAAK,cAAA;AAAA;;;;;;;;;;;;;;;;KAkBF,OAAA,wBACa,uBAAA,4BACrB,WAAA,CAAY,cAAA;EACd,GAAA,EAAK,YAAA;EACL,IAAA,EAAM,aAAA;AAAA;;;;;;;;;;;;;;;;KAkBI,gBAAA,WACA,kBAAA,2BACa,uBAAA,4BAEvB,MAAA,CAAO,CAAA,iBACH,OAAA,CAAQ,cAAA,IACR,WAAA,CAAY,cAAA;AAAA,iBA6FF,UAAA,WACJ,kBAAA,2BACa,uBAAA,yBAAA,CAEvB,SAAA,EAAW,gBAAA,eACX,MAAA,EAAQ,IAAA,CAAK,UAAA;EACX,SAAA,EAAW,CAAA;EACX,aAAA,GAAgB,cAAA;AAAA,IAEjB,gBAAA,CAAiB,CAAA,EAAG,cAAA;;KA2MX,OAAA,GAAU,GAAA;;;;;;;KAQV,aAAA,kBACO,MAAA,oBAA0B,MAAA;EAzYnC,8EA4YR,QAAA;EA1YQ;;;EA8YR,OAAA,IAAW,GAAA,OAAU,IAAA,EAAM,OAAA,KAAY,OAAA,CAAQ,QAAA,IAAY,QAAA;AAAA;;;;;;;;;;;;;;;;;;;;;AA/XnC;;;iBAyZV,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,aAAA,CAAc,QAAA;EAAc,QAAA;AAAA;EAEpC,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA;QACE,eAAA,QAAuB,OAAA,CAAQ,YAAA;QAC/B,MAAA,EAAQ,SAAA;QACR,IAAA,EAAM,OAAA;MAAA,IACJ,QAAA;IAAA;IAEN,IAAA;EAAA;AAAA;;;AAhawB;;;;;;;;;AAsB5B;;;;;;;;;;;;iBAoagB,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,GAAS,aAAA,CAAc,QAAA;EAEvB,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA;QACE,eAAA,QAAuB,OAAA,CAAQ,YAAA;QAC/B,MAAA,EAAQ,SAAA;QACR,IAAA,EAAM,OAAA;MAAA,IACJ,QAAA;IAAA;IAEN,IAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;AA9TJ;;;KAwZY,SAAA;EACE,KAAA,MAAW,IAAA,YAAgB,OAAA;IAAU,GAAA;MAAO,IAAA;IAAA;EAAA;AAAA,KACtD,OAAA,CAAQ,UAAA,CAAW,CAAA"}
+{"version":3,"file":"auth.d.ts","names":[],"sources":["../../../src/server/auth.ts"],"mappings":";;;;;;;;AAqCA;;;KAHY,UAAA,GAAa,IAAA,CAAK,gBAAA;;KAGlB,OAAA,GAAU,GAAA;AAAA,KAEjB,0BAAA,wBACoB,uBAAA,gBACrB,IAAA,CACF,UAAA,QAAkB,IAAA;EAGlB,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,IAAA;IACE,OAAA;IACA,MAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA;IACA,MAAA,GAAS,MAAA;EAAA,MAER,OAAA;IAAU,EAAA;IAAU,QAAA;EAAA;EACzB,IAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,iCAEpB,IAAA;IACE,KAAA;MACE,OAAA;MACA,MAAA;MACA,MAAA,GAAS,UAAA,CAAW,cAAA;MACpB,MAAA;IAAA;IAEF,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;EAClC,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,QAAA,UACA,IAAA,EAAM,MAAA;IAA4B,OAAA,GAAU,UAAA,CAAW,cAAA;EAAA,MACpD,OAAA;IAAU,EAAA;IAAU,QAAA;EAAA;EACzB,OAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,oCAEpB,IAAA;IACE,MAAA;IACA,OAAA;IACA,QAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA,GAAS,SAAA,CAAU,cAAA;IACnB,QAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;AAAA;;;;;;;;;;;;;;;;KAmBxB,WAAA,wBACa,uBAAA;EAEvB,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,IAAA,EAAM,UAAA,QAAkB,IAAA;EACxB,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,QAAA,EAAU,UAAA,QAAkB,IAAA;EAC5B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,MAAA,EAAQ,0BAAA,CAA2B,cAAA;EACnC,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,GAAA,EAAK,UAAA,QAAkB,IAAA;EACvB,IAAA,EAAM,UAAA,QAAkB,IAAA;EApEtB;;;;;;;;;;;;;;;;;;;;;;;;EA6FF,OAAA,GAAU,GAAA,UAAa,OAAA,CAAQ,mBAAA;EAxE0B;;;;;;;;;;;;;;;;;;;;;;;;;;AAiC3D;;;;;;;;;;;;;EA+EE,GAAA;IACE,IAAA,EAAM,MAAA;IACN,KAAA,GAAQ,GAAA,UAAa,OAAA;MACnB,GAAA;QAAO,IAAA,EAAM,mBAAA;MAAA;MACb,IAAA,EAAM,MAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;KA2BA,mBAAA;EAzGe,4CA2GzB,MAAA,EAAQ,SAAA,UA1GF;EA4GN,IAAA,EAAM,OAAA,EA3GN;EA6GA,OAAA,iBA7G2B;EA+G3B,IAAA,iBA9GU;EAgHV,MAAA;AAAA;AAAA,KAGG,WAAA;EACH,eAAA,QAAuB,OAAA,CAAQ,YAAA;AAAA;AAAA,KAG5B,oBAAA,GAAuB,WAAA,GAAc,mBAAA;AAAA,KAErC,oBAAA,GAAuB,WAAA;EAC1B,MAAA,EAAQ,SAAA;EACR,IAAA,EAAM,OAAA;EACN,OAAA;EACA,IAAA;EACA,MAAA;AAAA;AAAA,KAGG,cAAA,GAAiB,UAAA,QAAkB,IAAA;AAAA,KAEnC,iBAAA;EACH,UAAA,EAAY,cAAA;IACV,MAAA;MACE,IAAA,EAAM,cAAA;MACN,QAAA,EAAU,cAAA;MACV,GAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,YAAA,UACA,OAAA,EAAS,KAAA;QACP,MAAA;QACA,SAAA;MAAA,OAEC,OAAA;QACH,EAAA;QACA,YAAA;QACA,OAAA,EAAS,KAAA;UACP,QAAA;UACA,MAAA;UACA,SAAA;UACA,QAAA;UACA,UAAA;QAAA;MAAA;MAGJ,YAAA;QACE,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,EAAA;UACA,YAAA;UACA,MAAA;UACA,WAAA;UACA,SAAA;UACA,SAAA;YACE,UAAA;YACA,UAAA;YACA,WAAA;UAAA;QAAA;QAGJ,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,EAAA;UACA,YAAA;UACA,MAAA;UACA,UAAA;UACA,MAAA,EAAQ,KAAA;YAAQ,IAAA;YAAc,EAAA;YAAa,OAAA;UAAA;QAAA;MAAA;IAAA;EAAA;EAKnD,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,MAAA,EAAQ,cAAA;EACR,KAAA;IACE,IAAA,EAAM,cAAA;EAAA;EAER,OAAA;IACE,QAAA,EAAU,cAAA;IACV,QAAA;MACE,IAAA,EAAM,cAAA;IAAA;EAAA;AAAA;AAAA,KAKP,kBAAA;EACH,MAAA,EAAQ,cAAA;EACR,QAAA,EAAU,cAAA;AAAA;AAAA,KAGP,YAAA;EACH,KAAA,EAAO,iBAAA;EACP,MAAA,EAAQ,kBAAA;AAAA;AAAA,KAGL,aAAA;EACH,KAAA,EAAO,IAAA,CAAK,cAAA;AAAA;;;;;;;;;;;;;;;;KAkBF,OAAA,wBACa,uBAAA,4BACrB,WAAA,CAAY,cAAA;EACd,GAAA,EAAK,YAAA;EACL,IAAA,EAAM,aAAA;AAAA;;;;;;;;;;;;;;;;KAkBI,gBAAA,WACA,kBAAA,2BACa,uBAAA,4BAEvB,MAAA,CAAO,CAAA,iBACH,OAAA,CAAQ,cAAA,IACR,WAAA,CAAY,cAAA;AAAA,iBA6FF,UAAA,WACJ,kBAAA,2BACa,uBAAA,yBAAA,CAEvB,SAAA,EAAW,gBAAA,eACX,MAAA,EAAQ,IAAA,CAAK,UAAA;EACX,SAAA,EAAW,CAAA;EACX,aAAA,GAAgB,cAAA;AAAA,IAEjB,gBAAA,CAAiB,CAAA,EAAG,cAAA;;;;;;;KAgNX,aAAA,kBACO,MAAA,oBAA0B,MAAA;EAjZnC,8EAoZR,QAAA;EAlZU;;;;EAuZV,OAAA,IACE,GAAA,OACA,IAAA,EAAM,OAAA,EACN,IAAA,EAAM,mBAAA,KACH,OAAA,CAAQ,QAAA,IAAY,QAAA;EAtZjB;;;;;;;;;;;;;;;;;;;;;;;;EA+aR,WAAA,IACE,GAAA,OACA,QAAA,QAAgB,OAAA,CAAQ,mBAAA,aAEtB,OAAA,CAAQ,mBAAA,uBACR,mBAAA;AAAA;;;;;;;;AA/ZoB;;;;;;;;;;AAOA;;;;;;iBAobV,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,aAAA,CAAc,QAAA;EAAc,QAAA;AAAA;EAEpC,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA,EAAM,oBAAA,GAAuB,QAAA;IAAA;IAE/B,IAAA;EAAA;AAAA;;;AAxaJ;;;;;;;;;;;;;;;;;;;;AAsBA;;iBA6agB,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,GAAS,aAAA,CAAc,QAAA;EAEvB,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA,EAAM,oBAAA,GAAuB,QAAA;IAAA;IAE/B,IAAA;EAAA;AAAA;;;;;;;;;;;;;;;AAzVJ;;;;;;;;;;KAqaY,SAAA;EACE,KAAA,MAAW,IAAA,YAAgB,OAAA;IAAU,GAAA;MAAO,IAAA;IAAA;EAAA;AAAA,KACtD,OAAA,CAAQ,UAAA,CAAW,CAAA"}