@robelest/convex-auth 0.0.4-preview.22 → 0.0.4-preview.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (314) hide show
  1. package/README.md +10 -11
  2. package/dist/authorization/index.d.ts +1 -1
  3. package/dist/authorization/index.js +1 -1
  4. package/dist/authorization/index.js.map +1 -1
  5. package/dist/client/index.d.ts +1 -2
  6. package/dist/client/index.d.ts.map +1 -1
  7. package/dist/client/index.js +36 -39
  8. package/dist/client/index.js.map +1 -1
  9. package/dist/component/client/index.d.ts +1 -2
  10. package/dist/component/index.js +2 -2
  11. package/dist/component/model.d.ts +9 -9
  12. package/dist/component/model.d.ts.map +1 -1
  13. package/dist/component/public/enterprise/audit.d.ts.map +1 -1
  14. package/dist/component/public/enterprise/audit.js.map +1 -1
  15. package/dist/component/public/enterprise/core.d.ts.map +1 -1
  16. package/dist/component/public/enterprise/core.js.map +1 -1
  17. package/dist/component/public/enterprise/domains.d.ts.map +1 -1
  18. package/dist/component/public/enterprise/domains.js.map +1 -1
  19. package/dist/component/public/enterprise/scim.d.ts.map +1 -1
  20. package/dist/component/public/enterprise/scim.js.map +1 -1
  21. package/dist/component/public/enterprise/secrets.d.ts.map +1 -1
  22. package/dist/component/public/enterprise/secrets.js.map +1 -1
  23. package/dist/component/public/enterprise/webhooks.d.ts.map +1 -1
  24. package/dist/component/public/enterprise/webhooks.js.map +1 -1
  25. package/dist/component/public/factors/devices.d.ts.map +1 -1
  26. package/dist/component/public/factors/devices.js.map +1 -1
  27. package/dist/component/public/factors/passkeys.d.ts.map +1 -1
  28. package/dist/component/public/factors/passkeys.js.map +1 -1
  29. package/dist/component/public/factors/totp.d.ts.map +1 -1
  30. package/dist/component/public/factors/totp.js.map +1 -1
  31. package/dist/component/public/groups/core.js.map +1 -1
  32. package/dist/component/public/groups/invites.d.ts.map +1 -1
  33. package/dist/component/public/groups/invites.js.map +1 -1
  34. package/dist/component/public/groups/members.d.ts.map +1 -1
  35. package/dist/component/public/groups/members.js.map +1 -1
  36. package/dist/component/public/identity/accounts.d.ts.map +1 -1
  37. package/dist/component/public/identity/accounts.js.map +1 -1
  38. package/dist/component/public/identity/codes.d.ts.map +1 -1
  39. package/dist/component/public/identity/codes.js.map +1 -1
  40. package/dist/component/public/identity/sessions.d.ts.map +1 -1
  41. package/dist/component/public/identity/sessions.js.map +1 -1
  42. package/dist/component/public/identity/tokens.d.ts.map +1 -1
  43. package/dist/component/public/identity/tokens.js.map +1 -1
  44. package/dist/component/public/identity/users.d.ts.map +1 -1
  45. package/dist/component/public/identity/users.js.map +1 -1
  46. package/dist/component/public/identity/verifiers.d.ts.map +1 -1
  47. package/dist/component/public/identity/verifiers.js.map +1 -1
  48. package/dist/component/public/security/keys.d.ts.map +1 -1
  49. package/dist/component/public/security/keys.js.map +1 -1
  50. package/dist/component/public/security/limits.d.ts.map +1 -1
  51. package/dist/component/public/security/limits.js.map +1 -1
  52. package/dist/component/schema.d.ts +41 -41
  53. package/dist/component/server/auth.d.ts +127 -130
  54. package/dist/component/server/auth.d.ts.map +1 -1
  55. package/dist/component/server/auth.js +100 -64
  56. package/dist/component/server/auth.js.map +1 -1
  57. package/dist/component/server/context.js +53 -0
  58. package/dist/component/server/context.js.map +1 -0
  59. package/dist/component/server/core.js +113 -250
  60. package/dist/component/server/core.js.map +1 -1
  61. package/dist/component/server/crypto.js +25 -7
  62. package/dist/component/server/crypto.js.map +1 -1
  63. package/dist/component/server/device.js +59 -16
  64. package/dist/component/server/device.js.map +1 -1
  65. package/dist/component/server/enterprise/domain.js +148 -59
  66. package/dist/component/server/enterprise/domain.js.map +1 -1
  67. package/dist/component/server/enterprise/http.js +36 -15
  68. package/dist/component/server/enterprise/http.js.map +1 -1
  69. package/dist/component/server/enterprise/oidc.js +1 -1
  70. package/dist/component/server/http.d.ts +85 -0
  71. package/dist/component/server/http.d.ts.map +1 -0
  72. package/dist/component/server/http.js +85 -22
  73. package/dist/component/server/http.js.map +1 -1
  74. package/dist/component/server/identity.js +5 -2
  75. package/dist/component/server/identity.js.map +1 -1
  76. package/dist/component/server/limits.js +21 -30
  77. package/dist/component/server/limits.js.map +1 -1
  78. package/dist/component/server/mutations/account.js +12 -10
  79. package/dist/component/server/mutations/account.js.map +1 -1
  80. package/dist/component/server/mutations/code.js +5 -2
  81. package/dist/component/server/mutations/code.js.map +1 -1
  82. package/dist/component/server/mutations/invalidate.js +1 -1
  83. package/dist/component/server/mutations/invalidate.js.map +1 -1
  84. package/dist/component/server/mutations/oauth.js +10 -4
  85. package/dist/component/server/mutations/oauth.js.map +1 -1
  86. package/dist/component/server/mutations/refresh.js +2 -2
  87. package/dist/component/server/mutations/refresh.js.map +1 -1
  88. package/dist/component/server/mutations/register.js +46 -42
  89. package/dist/component/server/mutations/register.js.map +1 -1
  90. package/dist/component/server/mutations/retrieve.js +21 -25
  91. package/dist/component/server/mutations/retrieve.js.map +1 -1
  92. package/dist/component/server/mutations/signature.js +10 -4
  93. package/dist/component/server/mutations/signature.js.map +1 -1
  94. package/dist/component/server/mutations/signout.js.map +1 -1
  95. package/dist/component/server/mutations/store.js +9 -24
  96. package/dist/component/server/mutations/store.js.map +1 -1
  97. package/dist/component/server/mutations/verifier.js.map +1 -1
  98. package/dist/component/server/mutations/verify.js +1 -1
  99. package/dist/component/server/mutations/verify.js.map +1 -1
  100. package/dist/component/server/oauth.js +53 -16
  101. package/dist/component/server/oauth.js.map +1 -1
  102. package/dist/component/server/passkey.js +115 -31
  103. package/dist/component/server/passkey.js.map +1 -1
  104. package/dist/component/server/redirects.js +9 -3
  105. package/dist/component/server/redirects.js.map +1 -1
  106. package/dist/component/server/refresh.js +10 -7
  107. package/dist/component/server/refresh.js.map +1 -1
  108. package/dist/component/server/runtime.d.ts +5 -5
  109. package/dist/component/server/runtime.js +156 -113
  110. package/dist/component/server/runtime.js.map +1 -1
  111. package/dist/component/server/signin.js +34 -10
  112. package/dist/component/server/signin.js.map +1 -1
  113. package/dist/component/server/totp.js +79 -19
  114. package/dist/component/server/totp.js.map +1 -1
  115. package/dist/component/server/types.d.ts +12 -20
  116. package/dist/component/server/types.d.ts.map +1 -1
  117. package/dist/component/server/types.js.map +1 -1
  118. package/dist/component/server/users.js +6 -3
  119. package/dist/component/server/users.js.map +1 -1
  120. package/dist/component/server/utils.js +10 -4
  121. package/dist/component/server/utils.js.map +1 -1
  122. package/dist/core/types.d.ts +14 -22
  123. package/dist/core/types.d.ts.map +1 -1
  124. package/dist/factors/device.js +8 -9
  125. package/dist/factors/device.js.map +1 -1
  126. package/dist/factors/passkey.js +18 -21
  127. package/dist/factors/passkey.js.map +1 -1
  128. package/dist/providers/password.js +66 -81
  129. package/dist/providers/password.js.map +1 -1
  130. package/dist/runtime/invite.js +2 -8
  131. package/dist/runtime/invite.js.map +1 -1
  132. package/dist/server/auth.d.ts +127 -130
  133. package/dist/server/auth.d.ts.map +1 -1
  134. package/dist/server/auth.js +100 -64
  135. package/dist/server/auth.js.map +1 -1
  136. package/dist/server/context.d.ts +1 -0
  137. package/dist/server/context.js +53 -0
  138. package/dist/server/context.js.map +1 -0
  139. package/dist/server/core.d.ts +74 -195
  140. package/dist/server/core.d.ts.map +1 -1
  141. package/dist/server/core.js +113 -250
  142. package/dist/server/core.js.map +1 -1
  143. package/dist/server/crypto.d.ts.map +1 -1
  144. package/dist/server/crypto.js +25 -7
  145. package/dist/server/crypto.js.map +1 -1
  146. package/dist/server/device.js +59 -16
  147. package/dist/server/device.js.map +1 -1
  148. package/dist/server/enterprise/domain.d.ts +0 -8
  149. package/dist/server/enterprise/domain.d.ts.map +1 -1
  150. package/dist/server/enterprise/domain.js +148 -59
  151. package/dist/server/enterprise/domain.js.map +1 -1
  152. package/dist/server/enterprise/http.d.ts.map +1 -1
  153. package/dist/server/enterprise/http.js +35 -14
  154. package/dist/server/enterprise/http.js.map +1 -1
  155. package/dist/server/http.d.ts +81 -3
  156. package/dist/server/http.d.ts.map +1 -1
  157. package/dist/server/http.js +84 -21
  158. package/dist/server/http.js.map +1 -1
  159. package/dist/server/identity.js +5 -2
  160. package/dist/server/identity.js.map +1 -1
  161. package/dist/server/index.d.ts +3 -2
  162. package/dist/server/index.js +2 -2
  163. package/dist/server/limits.js +21 -30
  164. package/dist/server/limits.js.map +1 -1
  165. package/dist/server/mounts.d.ts +25 -63
  166. package/dist/server/mounts.d.ts.map +1 -1
  167. package/dist/server/mounts.js +46 -107
  168. package/dist/server/mounts.js.map +1 -1
  169. package/dist/server/mutations/account.d.ts +8 -9
  170. package/dist/server/mutations/account.d.ts.map +1 -1
  171. package/dist/server/mutations/account.js +11 -9
  172. package/dist/server/mutations/account.js.map +1 -1
  173. package/dist/server/mutations/code.d.ts +12 -12
  174. package/dist/server/mutations/code.d.ts.map +1 -1
  175. package/dist/server/mutations/code.js +5 -2
  176. package/dist/server/mutations/code.js.map +1 -1
  177. package/dist/server/mutations/invalidate.d.ts +4 -4
  178. package/dist/server/mutations/invalidate.d.ts.map +1 -1
  179. package/dist/server/mutations/invalidate.js.map +1 -1
  180. package/dist/server/mutations/oauth.d.ts +14 -12
  181. package/dist/server/mutations/oauth.d.ts.map +1 -1
  182. package/dist/server/mutations/oauth.js +9 -3
  183. package/dist/server/mutations/oauth.js.map +1 -1
  184. package/dist/server/mutations/refresh.d.ts +3 -3
  185. package/dist/server/mutations/refresh.d.ts.map +1 -1
  186. package/dist/server/mutations/refresh.js +1 -1
  187. package/dist/server/mutations/refresh.js.map +1 -1
  188. package/dist/server/mutations/register.d.ts +11 -11
  189. package/dist/server/mutations/register.d.ts.map +1 -1
  190. package/dist/server/mutations/register.js +45 -41
  191. package/dist/server/mutations/register.js.map +1 -1
  192. package/dist/server/mutations/retrieve.d.ts +6 -6
  193. package/dist/server/mutations/retrieve.d.ts.map +1 -1
  194. package/dist/server/mutations/retrieve.js +20 -24
  195. package/dist/server/mutations/retrieve.js.map +1 -1
  196. package/dist/server/mutations/signature.d.ts +6 -7
  197. package/dist/server/mutations/signature.d.ts.map +1 -1
  198. package/dist/server/mutations/signature.js +9 -3
  199. package/dist/server/mutations/signature.js.map +1 -1
  200. package/dist/server/mutations/signin.d.ts +5 -5
  201. package/dist/server/mutations/signout.js.map +1 -1
  202. package/dist/server/mutations/store.d.ts +83 -83
  203. package/dist/server/mutations/store.js +8 -23
  204. package/dist/server/mutations/store.js.map +1 -1
  205. package/dist/server/mutations/verifier.js.map +1 -1
  206. package/dist/server/mutations/verify.d.ts +7 -7
  207. package/dist/server/mutations/verify.d.ts.map +1 -1
  208. package/dist/server/mutations/verify.js.map +1 -1
  209. package/dist/server/oauth.js +53 -16
  210. package/dist/server/oauth.js.map +1 -1
  211. package/dist/server/passkey.d.ts +2 -2
  212. package/dist/server/passkey.d.ts.map +1 -1
  213. package/dist/server/passkey.js +114 -30
  214. package/dist/server/passkey.js.map +1 -1
  215. package/dist/server/redirects.js +9 -3
  216. package/dist/server/redirects.js.map +1 -1
  217. package/dist/server/refresh.js +10 -7
  218. package/dist/server/refresh.js.map +1 -1
  219. package/dist/server/runtime.d.ts +11 -11
  220. package/dist/server/runtime.js +155 -112
  221. package/dist/server/runtime.js.map +1 -1
  222. package/dist/server/signin.js +34 -10
  223. package/dist/server/signin.js.map +1 -1
  224. package/dist/server/ssr.d.ts.map +1 -1
  225. package/dist/server/ssr.js +175 -184
  226. package/dist/server/ssr.js.map +1 -1
  227. package/dist/server/totp.js +78 -18
  228. package/dist/server/totp.js.map +1 -1
  229. package/dist/server/types.d.ts +13 -21
  230. package/dist/server/types.d.ts.map +1 -1
  231. package/dist/server/types.js.map +1 -1
  232. package/dist/server/users.js +6 -3
  233. package/dist/server/users.js.map +1 -1
  234. package/dist/server/utils.js +10 -4
  235. package/dist/server/utils.js.map +1 -1
  236. package/package.json +1 -5
  237. package/src/authorization/index.ts +1 -1
  238. package/src/client/core/types.ts +14 -14
  239. package/src/client/factors/device.ts +10 -12
  240. package/src/client/factors/passkey.ts +23 -26
  241. package/src/client/index.ts +54 -64
  242. package/src/client/runtime/invite.ts +5 -7
  243. package/src/component/index.ts +9 -3
  244. package/src/component/public/enterprise/audit.ts +6 -1
  245. package/src/component/public/enterprise/core.ts +1 -0
  246. package/src/component/public/enterprise/domains.ts +5 -1
  247. package/src/component/public/enterprise/scim.ts +1 -0
  248. package/src/component/public/enterprise/secrets.ts +1 -0
  249. package/src/component/public/enterprise/webhooks.ts +1 -0
  250. package/src/component/public/factors/devices.ts +1 -0
  251. package/src/component/public/factors/passkeys.ts +1 -0
  252. package/src/component/public/factors/totp.ts +1 -0
  253. package/src/component/public/groups/core.ts +1 -1
  254. package/src/component/public/groups/invites.ts +7 -1
  255. package/src/component/public/groups/members.ts +1 -0
  256. package/src/component/public/identity/accounts.ts +1 -0
  257. package/src/component/public/identity/codes.ts +1 -0
  258. package/src/component/public/identity/sessions.ts +1 -0
  259. package/src/component/public/identity/tokens.ts +1 -0
  260. package/src/component/public/identity/users.ts +1 -0
  261. package/src/component/public/identity/verifiers.ts +1 -0
  262. package/src/component/public/security/keys.ts +1 -0
  263. package/src/component/public/security/limits.ts +1 -0
  264. package/src/providers/password.ts +89 -110
  265. package/src/server/auth.ts +240 -182
  266. package/src/server/context.ts +90 -0
  267. package/src/server/core.ts +195 -286
  268. package/src/server/crypto.ts +31 -29
  269. package/src/server/device.ts +65 -32
  270. package/src/server/enterprise/domain.ts +158 -170
  271. package/src/server/enterprise/http.ts +46 -39
  272. package/src/server/http.ts +289 -30
  273. package/src/server/identity.ts +5 -5
  274. package/src/server/index.ts +9 -3
  275. package/src/server/limits.ts +53 -80
  276. package/src/server/mounts.ts +56 -80
  277. package/src/server/mutations/account.ts +22 -36
  278. package/src/server/mutations/code.ts +6 -6
  279. package/src/server/mutations/invalidate.ts +1 -1
  280. package/src/server/mutations/oauth.ts +14 -8
  281. package/src/server/mutations/refresh.ts +5 -4
  282. package/src/server/mutations/register.ts +87 -132
  283. package/src/server/mutations/retrieve.ts +44 -44
  284. package/src/server/mutations/signature.ts +13 -6
  285. package/src/server/mutations/signout.ts +1 -1
  286. package/src/server/mutations/store.ts +16 -31
  287. package/src/server/mutations/verifier.ts +1 -1
  288. package/src/server/mutations/verify.ts +3 -5
  289. package/src/server/oauth.ts +60 -69
  290. package/src/server/passkey.ts +567 -517
  291. package/src/server/redirects.ts +10 -6
  292. package/src/server/refresh.ts +14 -18
  293. package/src/server/runtime.ts +340 -302
  294. package/src/server/signin.ts +44 -37
  295. package/src/server/ssr.ts +390 -407
  296. package/src/server/totp.ts +85 -35
  297. package/src/server/types.ts +19 -22
  298. package/src/server/users.ts +7 -6
  299. package/src/server/utils.ts +10 -12
  300. package/dist/component/server/authError.js +0 -34
  301. package/dist/component/server/authError.js.map +0 -1
  302. package/dist/component/server/errors.d.ts +0 -1
  303. package/dist/component/server/errors.js +0 -137
  304. package/dist/component/server/errors.js.map +0 -1
  305. package/dist/server/authError.d.ts +0 -46
  306. package/dist/server/authError.d.ts.map +0 -1
  307. package/dist/server/authError.js +0 -34
  308. package/dist/server/authError.js.map +0 -1
  309. package/dist/server/errors.d.ts +0 -177
  310. package/dist/server/errors.d.ts.map +0 -1
  311. package/dist/server/errors.js +0 -212
  312. package/dist/server/errors.js.map +0 -1
  313. package/src/server/authError.ts +0 -44
  314. package/src/server/errors.ts +0 -290
@@ -15,10 +15,10 @@ declare const _default: convex_server66.SchemaDefinition<{
15
15
  * and multiple concurrent sessions.
16
16
  */
17
17
  User: convex_server66.TableDefinition<convex_values121.VObject<{
18
- phone?: string | undefined;
19
18
  email?: string | undefined;
20
- name?: string | undefined;
21
19
  extend?: any;
20
+ name?: string | undefined;
21
+ phone?: string | undefined;
22
22
  image?: string | undefined;
23
23
  emailVerificationTime?: number | undefined;
24
24
  phoneVerificationTime?: number | undefined;
@@ -32,7 +32,7 @@ declare const _default: convex_server66.SchemaDefinition<{
32
32
  phoneVerificationTime: convex_values121.VFloat64<number | undefined, "optional">;
33
33
  isAnonymous: convex_values121.VBoolean<boolean | undefined, "optional">;
34
34
  extend: convex_values121.VAny<any, "optional", string>;
35
- }, "required", "phone" | "email" | "name" | "extend" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | `extend.${string}`>, {
35
+ }, "required", "email" | "extend" | "name" | "phone" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | `extend.${string}`>, {
36
36
  email: ["email", "_creationTime"];
37
37
  email_verified: ["email", "emailVerificationTime", "_creationTime"];
38
38
  phone: ["phone", "_creationTime"];
@@ -107,9 +107,9 @@ declare const _default: convex_server66.SchemaDefinition<{
107
107
  verifier?: string | undefined;
108
108
  emailVerified?: string | undefined;
109
109
  phoneVerified?: string | undefined;
110
- code: string;
111
110
  provider: string;
112
111
  accountId: convex_values121.GenericId<"Account">;
112
+ code: string;
113
113
  expirationTime: number;
114
114
  }, {
115
115
  accountId: convex_values121.VId<convex_values121.GenericId<"Account">, "required">;
@@ -119,7 +119,7 @@ declare const _default: convex_server66.SchemaDefinition<{
119
119
  verifier: convex_values121.VString<string | undefined, "optional">;
120
120
  emailVerified: convex_values121.VString<string | undefined, "optional">;
121
121
  phoneVerified: convex_values121.VString<string | undefined, "optional">;
122
- }, "required", "code" | "provider" | "verifier" | "accountId" | "expirationTime" | "emailVerified" | "phoneVerified">, {
122
+ }, "required", "provider" | "verifier" | "accountId" | "code" | "expirationTime" | "emailVerified" | "phoneVerified">, {
123
123
  account_id: ["accountId", "_creationTime"];
124
124
  code: ["code", "_creationTime"];
125
125
  }, {}, {}>;
@@ -247,9 +247,9 @@ declare const _default: convex_server66.SchemaDefinition<{
247
247
  * organizations, teams, departments, or any tree structure.
248
248
  */
249
249
  Group: convex_server66.TableDefinition<convex_values121.VObject<{
250
- slug?: string | undefined;
251
250
  type?: string | undefined;
252
251
  extend?: any;
252
+ slug?: string | undefined;
253
253
  parentGroupId?: convex_values121.GenericId<"Group"> | undefined;
254
254
  rootGroupId?: convex_values121.GenericId<"Group"> | undefined;
255
255
  isRoot?: boolean | undefined;
@@ -276,7 +276,7 @@ declare const _default: convex_server66.SchemaDefinition<{
276
276
  value: convex_values121.VString<string, "required">;
277
277
  }, "required", "value" | "key">, "optional">;
278
278
  extend: convex_values121.VAny<any, "optional", string>;
279
- }, "required", "name" | "slug" | "type" | "extend" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags">, {
279
+ }, "required", "type" | "extend" | "name" | "slug" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags">, {
280
280
  slug: ["slug", "_creationTime"];
281
281
  parent_group_id: ["parentGroupId", "_creationTime"];
282
282
  root_group_id: ["rootGroupId", "_creationTime"];
@@ -308,8 +308,8 @@ declare const _default: convex_server66.SchemaDefinition<{
308
308
  * member of multiple groups with different roles in each.
309
309
  */
310
310
  GroupMember: convex_server66.TableDefinition<convex_values121.VObject<{
311
- status?: string | undefined;
312
311
  extend?: any;
312
+ status?: string | undefined;
313
313
  role?: string | undefined;
314
314
  roleIds?: string[] | undefined;
315
315
  groupId: convex_values121.GenericId<"Group">;
@@ -321,7 +321,7 @@ declare const _default: convex_server66.SchemaDefinition<{
321
321
  roleIds: convex_values121.VArray<string[] | undefined, convex_values121.VString<string, "required">, "optional">;
322
322
  status: convex_values121.VString<string | undefined, "optional">;
323
323
  extend: convex_values121.VAny<any, "optional", string>;
324
- }, "required", "status" | "groupId" | "extend" | "userId" | `extend.${string}` | "role" | "roleIds">, {
324
+ }, "required", "groupId" | "extend" | "status" | "userId" | `extend.${string}` | "role" | "roleIds">, {
325
325
  group_id: ["groupId", "_creationTime"];
326
326
  group_id_user_id: ["groupId", "userId", "_creationTime"];
327
327
  group_id_status: ["groupId", "status", "_creationTime"];
@@ -359,7 +359,7 @@ declare const _default: convex_server66.SchemaDefinition<{
359
359
  acceptedByUserId: convex_values121.VId<convex_values121.GenericId<"User"> | undefined, "optional">;
360
360
  acceptedTime: convex_values121.VFloat64<number | undefined, "optional">;
361
361
  extend: convex_values121.VAny<any, "optional", string>;
362
- }, "required", "email" | "status" | "groupId" | "tokenHash" | "extend" | `extend.${string}` | "role" | "roleIds" | "invitedByUserId" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
362
+ }, "required", "email" | "groupId" | "extend" | "status" | `extend.${string}` | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
363
363
  token_hash: ["tokenHash", "_creationTime"];
364
364
  status: ["status", "_creationTime"];
365
365
  email_status: ["email", "status", "_creationTime"];
@@ -375,6 +375,7 @@ declare const _default: convex_server66.SchemaDefinition<{
375
375
  * field addition.
376
376
  */
377
377
  Enterprise: convex_server66.TableDefinition<convex_values121.VObject<{
378
+ extend?: any;
378
379
  name?: string | undefined;
379
380
  slug?: string | undefined;
380
381
  policy?: {
@@ -382,8 +383,8 @@ declare const _default: convex_server66.SchemaDefinition<{
382
383
  version: 1;
383
384
  identity: {
384
385
  accountLinking: {
385
- saml: "verifiedEmail" | "none";
386
386
  oidc: "verifiedEmail" | "none";
387
+ saml: "verifiedEmail" | "none";
387
388
  };
388
389
  };
389
390
  provisioning: {
@@ -400,10 +401,9 @@ declare const _default: convex_server66.SchemaDefinition<{
400
401
  };
401
402
  };
402
403
  } | undefined;
403
- extend?: any;
404
404
  config?: any;
405
- status: "draft" | "active" | "disabled";
406
405
  groupId: convex_values121.GenericId<"Group">;
406
+ status: "draft" | "active" | "disabled";
407
407
  }, {
408
408
  groupId: convex_values121.VId<convex_values121.GenericId<"Group">, "required">;
409
409
  slug: convex_values121.VString<string | undefined, "optional">;
@@ -414,8 +414,8 @@ declare const _default: convex_server66.SchemaDefinition<{
414
414
  version: 1;
415
415
  identity: {
416
416
  accountLinking: {
417
- saml: "verifiedEmail" | "none";
418
417
  oidc: "verifiedEmail" | "none";
418
+ saml: "verifiedEmail" | "none";
419
419
  };
420
420
  };
421
421
  provisioning: {
@@ -435,18 +435,18 @@ declare const _default: convex_server66.SchemaDefinition<{
435
435
  version: convex_values121.VLiteral<1, "required">;
436
436
  identity: convex_values121.VObject<{
437
437
  accountLinking: {
438
- saml: "verifiedEmail" | "none";
439
438
  oidc: "verifiedEmail" | "none";
439
+ saml: "verifiedEmail" | "none";
440
440
  };
441
441
  }, {
442
442
  accountLinking: convex_values121.VObject<{
443
- saml: "verifiedEmail" | "none";
444
443
  oidc: "verifiedEmail" | "none";
444
+ saml: "verifiedEmail" | "none";
445
445
  }, {
446
446
  oidc: convex_values121.VUnion<"verifiedEmail" | "none", [convex_values121.VLiteral<"verifiedEmail", "required">, convex_values121.VLiteral<"none", "required">], "required", never>;
447
447
  saml: convex_values121.VUnion<"verifiedEmail" | "none", [convex_values121.VLiteral<"verifiedEmail", "required">, convex_values121.VLiteral<"none", "required">], "required", never>;
448
- }, "required", "saml" | "oidc">;
449
- }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
448
+ }, "required", "oidc" | "saml">;
449
+ }, "required", "accountLinking" | "accountLinking.oidc" | "accountLinking.saml">;
450
450
  provisioning: convex_values121.VObject<{
451
451
  scimReuse: {
452
452
  user: "none" | "externalId";
@@ -481,10 +481,10 @@ declare const _default: convex_server66.SchemaDefinition<{
481
481
  }, "required", "mode">;
482
482
  }, "required", "scimReuse" | "jit" | "deprovision" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode">;
483
483
  extend: convex_values121.VAny<any, "optional", string>;
484
- }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode">;
484
+ }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode">;
485
485
  config: convex_values121.VAny<any, "optional", string>;
486
486
  extend: convex_values121.VAny<any, "optional", string>;
487
- }, "required", "name" | "slug" | "status" | "groupId" | "policy" | "extend" | `extend.${string}` | "config" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.saml" | "policy.identity.accountLinking.oidc" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | `config.${string}`>, {
487
+ }, "required", "groupId" | "extend" | "name" | "slug" | "status" | `extend.${string}` | "policy" | "config" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | `config.${string}`>, {
488
488
  group_id: ["groupId", "_creationTime"];
489
489
  slug: ["slug", "_creationTime"];
490
490
  status: ["status", "_creationTime"];
@@ -494,9 +494,9 @@ declare const _default: convex_server66.SchemaDefinition<{
494
494
  */
495
495
  EnterpriseDomain: convex_server66.TableDefinition<convex_values121.VObject<{
496
496
  verifiedAt?: number | undefined;
497
- enterpriseId: convex_values121.GenericId<"Enterprise">;
498
497
  groupId: convex_values121.GenericId<"Group">;
499
498
  domain: string;
499
+ enterpriseId: convex_values121.GenericId<"Enterprise">;
500
500
  isPrimary: boolean;
501
501
  }, {
502
502
  enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
@@ -504,7 +504,7 @@ declare const _default: convex_server66.SchemaDefinition<{
504
504
  domain: convex_values121.VString<string, "required">;
505
505
  isPrimary: convex_values121.VBoolean<boolean, "required">;
506
506
  verifiedAt: convex_values121.VFloat64<number | undefined, "optional">;
507
- }, "required", "enterpriseId" | "groupId" | "domain" | "verifiedAt" | "isPrimary">, {
507
+ }, "required", "groupId" | "domain" | "enterpriseId" | "isPrimary" | "verifiedAt">, {
508
508
  enterprise_id: ["enterpriseId", "_creationTime"];
509
509
  group_id: ["groupId", "_creationTime"];
510
510
  domain: ["domain", "_creationTime"];
@@ -513,11 +513,11 @@ declare const _default: convex_server66.SchemaDefinition<{
513
513
  * Pending DNS TXT verification challenges for enterprise domains.
514
514
  */
515
515
  EnterpriseDomainVerification: convex_server66.TableDefinition<convex_values121.VObject<{
516
- enterpriseId: convex_values121.GenericId<"Enterprise">;
517
516
  groupId: convex_values121.GenericId<"Group">;
518
517
  domain: string;
519
- tokenHash: string;
520
518
  expiresAt: number;
519
+ tokenHash: string;
520
+ enterpriseId: convex_values121.GenericId<"Enterprise">;
521
521
  domainId: convex_values121.GenericId<"EnterpriseDomain">;
522
522
  recordName: string;
523
523
  token: string;
@@ -532,7 +532,7 @@ declare const _default: convex_server66.SchemaDefinition<{
532
532
  tokenHash: convex_values121.VString<string, "required">;
533
533
  requestedAt: convex_values121.VFloat64<number, "required">;
534
534
  expiresAt: convex_values121.VFloat64<number, "required">;
535
- }, "required", "enterpriseId" | "groupId" | "domain" | "tokenHash" | "expiresAt" | "domainId" | "recordName" | "token" | "requestedAt">, {
535
+ }, "required", "groupId" | "domain" | "expiresAt" | "tokenHash" | "enterpriseId" | "domainId" | "recordName" | "token" | "requestedAt">, {
536
536
  enterprise_id: ["enterpriseId", "_creationTime"];
537
537
  domain_id: ["domainId", "_creationTime"];
538
538
  token_hash: ["tokenHash", "_creationTime"];
@@ -541,9 +541,9 @@ declare const _default: convex_server66.SchemaDefinition<{
541
541
  * Encrypted enterprise secrets stored separately from protocol config.
542
542
  */
543
543
  EnterpriseSecret: convex_server66.TableDefinition<convex_values121.VObject<{
544
- enterpriseId: convex_values121.GenericId<"Enterprise">;
545
544
  groupId: convex_values121.GenericId<"Group">;
546
545
  kind: "oidc_client_secret";
546
+ enterpriseId: convex_values121.GenericId<"Enterprise">;
547
547
  ciphertext: string;
548
548
  updatedAt: number;
549
549
  }, {
@@ -552,7 +552,7 @@ declare const _default: convex_server66.SchemaDefinition<{
552
552
  kind: convex_values121.VUnion<"oidc_client_secret", [convex_values121.VLiteral<"oidc_client_secret", "required">], "required", never>;
553
553
  ciphertext: convex_values121.VString<string, "required">;
554
554
  updatedAt: convex_values121.VFloat64<number, "required">;
555
- }, "required", "enterpriseId" | "groupId" | "kind" | "ciphertext" | "updatedAt">, {
555
+ }, "required", "groupId" | "kind" | "enterpriseId" | "ciphertext" | "updatedAt">, {
556
556
  enterprise_id: ["enterpriseId", "_creationTime"];
557
557
  enterprise_id_kind: ["enterpriseId", "kind", "_creationTime"];
558
558
  group_id: ["groupId", "_creationTime"];
@@ -563,10 +563,10 @@ declare const _default: convex_server66.SchemaDefinition<{
563
563
  EnterpriseScimConfig: convex_server66.TableDefinition<convex_values121.VObject<{
564
564
  extend?: any;
565
565
  lastRotatedAt?: number | undefined;
566
- status: "draft" | "active" | "disabled";
567
- enterpriseId: convex_values121.GenericId<"Enterprise">;
568
566
  groupId: convex_values121.GenericId<"Group">;
567
+ status: "draft" | "active" | "disabled";
569
568
  tokenHash: string;
569
+ enterpriseId: convex_values121.GenericId<"Enterprise">;
570
570
  basePath: string;
571
571
  }, {
572
572
  enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
@@ -576,7 +576,7 @@ declare const _default: convex_server66.SchemaDefinition<{
576
576
  tokenHash: convex_values121.VString<string, "required">;
577
577
  lastRotatedAt: convex_values121.VFloat64<number | undefined, "optional">;
578
578
  extend: convex_values121.VAny<any, "optional", string>;
579
- }, "required", "status" | "enterpriseId" | "groupId" | "tokenHash" | "basePath" | "extend" | `extend.${string}` | "lastRotatedAt">, {
579
+ }, "required", "groupId" | "extend" | "status" | `extend.${string}` | "tokenHash" | "enterpriseId" | "basePath" | "lastRotatedAt">, {
580
580
  enterprise_id: ["enterpriseId", "_creationTime"];
581
581
  group_id: ["groupId", "_creationTime"];
582
582
  token_hash: ["tokenHash", "_creationTime"];
@@ -587,25 +587,25 @@ declare const _default: convex_server66.SchemaDefinition<{
587
587
  */
588
588
  EnterpriseScimIdentity: convex_server66.TableDefinition<convex_values121.VObject<{
589
589
  active?: boolean | undefined;
590
- lastProvisionedAt?: number | undefined;
591
590
  userId?: convex_values121.GenericId<"User"> | undefined;
592
591
  mappedGroupId?: convex_values121.GenericId<"Group"> | undefined;
592
+ lastProvisionedAt?: number | undefined;
593
593
  raw?: any;
594
- enterpriseId: convex_values121.GenericId<"Enterprise">;
595
594
  groupId: convex_values121.GenericId<"Group">;
596
595
  externalId: string;
597
- resourceType: "user" | "group";
596
+ enterpriseId: convex_values121.GenericId<"Enterprise">;
597
+ resourceType: "group" | "user";
598
598
  }, {
599
599
  enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
600
600
  groupId: convex_values121.VId<convex_values121.GenericId<"Group">, "required">;
601
- resourceType: convex_values121.VUnion<"user" | "group", [convex_values121.VLiteral<"user", "required">, convex_values121.VLiteral<"group", "required">], "required", never>;
601
+ resourceType: convex_values121.VUnion<"group" | "user", [convex_values121.VLiteral<"user", "required">, convex_values121.VLiteral<"group", "required">], "required", never>;
602
602
  externalId: convex_values121.VString<string, "required">;
603
603
  userId: convex_values121.VId<convex_values121.GenericId<"User"> | undefined, "optional">;
604
604
  mappedGroupId: convex_values121.VId<convex_values121.GenericId<"Group"> | undefined, "optional">;
605
605
  lastProvisionedAt: convex_values121.VFloat64<number | undefined, "optional">;
606
606
  active: convex_values121.VBoolean<boolean | undefined, "optional">;
607
607
  raw: convex_values121.VAny<any, "optional", string>;
608
- }, "required", "active" | "enterpriseId" | "groupId" | "lastProvisionedAt" | "userId" | "externalId" | "resourceType" | "mappedGroupId" | "raw" | `raw.${string}`>, {
608
+ }, "required", "groupId" | "active" | "userId" | "externalId" | "enterpriseId" | "resourceType" | "mappedGroupId" | "lastProvisionedAt" | "raw" | `raw.${string}`>, {
609
609
  enterprise_id: ["enterpriseId", "_creationTime"];
610
610
  group_id: ["groupId", "_creationTime"];
611
611
  enterprise_id_resource_type_external_id: ["enterpriseId", "resourceType", "externalId", "_creationTime"];
@@ -622,9 +622,9 @@ declare const _default: convex_server66.SchemaDefinition<{
622
622
  requestId?: string | undefined;
623
623
  ip?: string | undefined;
624
624
  metadata?: any;
625
+ groupId: convex_values121.GenericId<"Group">;
625
626
  status: "success" | "failure";
626
627
  enterpriseId: convex_values121.GenericId<"Enterprise">;
627
- groupId: convex_values121.GenericId<"Group">;
628
628
  actorType: "user" | "system" | "scim" | "api_key" | "webhook";
629
629
  eventType: string;
630
630
  subjectType: string;
@@ -642,7 +642,7 @@ declare const _default: convex_server66.SchemaDefinition<{
642
642
  requestId: convex_values121.VString<string | undefined, "optional">;
643
643
  ip: convex_values121.VString<string | undefined, "optional">;
644
644
  metadata: convex_values121.VAny<any, "optional", string>;
645
- }, "required", "status" | "enterpriseId" | "groupId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
645
+ }, "required", "groupId" | "status" | "enterpriseId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
646
646
  enterprise_id_occurred_at: ["enterpriseId", "occurredAt", "_creationTime"];
647
647
  group_id_occurred_at: ["groupId", "occurredAt", "_creationTime"];
648
648
  event_type_occurred_at: ["eventType", "occurredAt", "_creationTime"];
@@ -655,9 +655,9 @@ declare const _default: convex_server66.SchemaDefinition<{
655
655
  createdByUserId?: convex_values121.GenericId<"User"> | undefined;
656
656
  lastSuccessAt?: number | undefined;
657
657
  lastFailureAt?: number | undefined;
658
+ groupId: convex_values121.GenericId<"Group">;
658
659
  status: "active" | "disabled";
659
660
  enterpriseId: convex_values121.GenericId<"Enterprise">;
660
- groupId: convex_values121.GenericId<"Group">;
661
661
  url: string;
662
662
  secretHash: string;
663
663
  subscriptions: string[];
@@ -674,7 +674,7 @@ declare const _default: convex_server66.SchemaDefinition<{
674
674
  lastFailureAt: convex_values121.VFloat64<number | undefined, "optional">;
675
675
  failureCount: convex_values121.VFloat64<number, "required">;
676
676
  extend: convex_values121.VAny<any, "optional", string>;
677
- }, "required", "status" | "enterpriseId" | "groupId" | "extend" | `extend.${string}` | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
677
+ }, "required", "groupId" | "extend" | "status" | `extend.${string}` | "enterpriseId" | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
678
678
  enterprise_id: ["enterpriseId", "_creationTime"];
679
679
  group_id: ["groupId", "_creationTime"];
680
680
  status: ["status", "_creationTime"];
@@ -689,8 +689,8 @@ declare const _default: convex_server66.SchemaDefinition<{
689
689
  lastError?: string | undefined;
690
690
  status: "pending" | "processing" | "delivered" | "failed";
691
691
  enterpriseId: convex_values121.GenericId<"Enterprise">;
692
- endpointId: convex_values121.GenericId<"EnterpriseWebhookEndpoint">;
693
692
  eventType: string;
693
+ endpointId: convex_values121.GenericId<"EnterpriseWebhookEndpoint">;
694
694
  attemptCount: number;
695
695
  nextAttemptAt: number;
696
696
  payload: any;
@@ -706,7 +706,7 @@ declare const _default: convex_server66.SchemaDefinition<{
706
706
  lastResponseStatus: convex_values121.VFloat64<number | undefined, "optional">;
707
707
  lastError: convex_values121.VString<string | undefined, "optional">;
708
708
  payload: convex_values121.VAny<any, "required", string>;
709
- }, "required", "status" | "enterpriseId" | "endpointId" | "eventType" | "auditEventId" | "attemptCount" | "nextAttemptAt" | "lastAttemptAt" | "lastResponseStatus" | "lastError" | "payload" | `payload.${string}`>, {
709
+ }, "required", "status" | "enterpriseId" | "eventType" | "endpointId" | "auditEventId" | "attemptCount" | "nextAttemptAt" | "lastAttemptAt" | "lastResponseStatus" | "lastError" | "payload" | `payload.${string}`>, {
710
710
  enterprise_id: ["enterpriseId", "_creationTime"];
711
711
  status_next_attempt_at: ["status", "nextAttemptAt", "_creationTime"];
712
712
  endpoint_id_status: ["endpointId", "status", "_creationTime"];