@robelest/convex-auth 0.0.4-preview.25 → 0.0.4-preview.28

package/dist/component/public/groups/invites.d.ts

@@ -1,217 +0,0 @@
-declare namespace invites_d_exports {
-  export { inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke };
-}
-/**
- * Create a new platform-level invitation. Optionally set `groupId` to tie
- * the invite to a specific group. The invitation is sent to an email address
- * and includes a hashed token for secure acceptance.
- *
- * Throws `ConvexError` with code `DUPLICATE_INVITE` when a pending invite
- * already exists for the same email and scope:
- * - group invite: same `email` + same `groupId`
- * - platform invite: same `email` with no `groupId`
- *
- * When a duplicate check finds an existing invite that has passed its
- * `expiresTime`, that invite is automatically marked as `"expired"` and the
- * new invite is allowed through. CLI-generated invites (no email) skip
- * duplicate detection entirely.
- *
- * @param args.groupId - Optional `Id<"Group">` to scope this invite to a specific group. Omit for a platform-wide invite.
- * @param args.invitedByUserId - Optional `Id<"User">` of the user who issued the invitation.
- * @param args.email - Optional email address of the invitee. When provided, duplicate detection is enforced.
- * @param args.tokenHash - A pre-hashed token string used for secure, URL-safe invite acceptance.
- * @param args.roleIds - Optional array of application-defined role identifiers to assign upon acceptance.
- * @param args.status - The initial status of the invite (typically `"pending"`).
- * @param args.expiresTime - Optional Unix timestamp (ms) after which the invite is considered expired.
- * @param args.extend - Optional arbitrary payload for application-specific metadata.
- * @returns The `Id<"GroupInvite">` of the newly created invite document.
- *
- * @example
- * ```ts
- * const inviteId = await ctx.runMutation(
- *   components.auth.groups.inviteCreate,
- *   {
- *     groupId: teamGroupId,
- *     invitedByUserId: currentUserId,
- *     email: "alice@example.com",
- *     tokenHash: hashedToken,
- *     roleIds: ["editor"],
- *     status: "pending",
- *     expiresTime: Date.now() + 7 * 24 * 60 * 60 * 1000, // 7 days
- *   },
- * );
- * ```
- */
-declare const inviteCreate: any;
-/**
- * Retrieve an invite by its document ID.
- *
- * Performs a direct lookup in the `GroupInvite` table and returns the full
- * invite document, or `null` if no invite exists with the given ID.
- *
- * @param args.inviteId - The `Id<"GroupInvite">` of the invite to retrieve.
- * @returns The invite document (including `email`, `status`, `groupId`, `tokenHash`, etc.) or `null` if not found.
- *
- * @example
- * ```ts
- * const invite = await ctx.runQuery(components.auth.groups.inviteGet, {
- *   inviteId: existingInviteId,
- * });
- * if (invite !== null) {
- *   console.log(invite.email, invite.status);
- * }
- * ```
- */
-declare const inviteGet: any;
-/**
- * Retrieve an invite by its hashed token.
- *
- * Looks up the `GroupInvite` table using the `token_hash` index. This is
- * the primary mechanism for resolving an invite from a URL-embedded token.
- * Returns `null` if no invite matches the given hash.
- *
- * @param args.tokenHash - The hashed token string to look up (must match the value stored at creation time).
- * @returns The invite document or `null` if no invite exists with the given token hash.
- *
- * @example
- * ```ts
- * const invite = await ctx.runQuery(
- *   components.auth.groups.inviteGetByTokenHash,
- *   { tokenHash: "sha256_abc123..." },
- * );
- * if (invite !== null && invite.status === "pending") {
- *   // proceed with acceptance flow
- * }
- * ```
- */
-declare const inviteGetByTokenHash: any;
-/**
- * List invites with optional filtering, sorting, and pagination.
- *
- * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
- * `status`, `email`, `invitedByUserId`, `roleId`, `acceptedByUserId`, and
- * `tokenHash`. The query engine automatically selects the best compound
- * index based on the combination of filter fields provided. The `roleId`
- * filter is applied in-memory after the index scan because role IDs are
- * stored as an array.
- *
- * @param args.where - Optional filter criteria for narrowing results.
- * @param args.where.tokenHash - Match invites with this exact hashed token.
- * @param args.where.groupId - Match invites scoped to this group.
- * @param args.where.status - Match invites with this status (e.g. `"pending"`, `"accepted"`, `"revoked"`).
- * @param args.where.email - Match invites sent to this email address.
- * @param args.where.invitedByUserId - Match invites created by this user.
- * @param args.where.roleId - Match invites that include this role identifier in their `roleIds` array.
- * @param args.where.acceptedByUserId - Match invites accepted by this specific user.
- * @param args.limit - Maximum number of items per page (clamped to 1..100, defaults to 50).
- * @param args.cursor - An opaque cursor string from a previous response's `nextCursor` to fetch the next page, or `null` to start from the beginning.
- * @param args.orderBy - The field to sort by: `"_creationTime"`, `"status"`, `"email"`, `"expiresTime"`, or `"acceptedTime"`.
- * @param args.order - Sort direction: `"asc"` or `"desc"` (defaults to `"desc"`).
- * @returns An object `{ items, nextCursor }` where `items` is an array of invite documents and `nextCursor` is `null` when there are no more pages.
- *
- * @example
- * ```ts
- * const { items, nextCursor } = await ctx.runQuery(
- *   components.auth.groups.inviteList,
- *   {
- *     where: { groupId: teamGroupId, status: "pending" },
- *     limit: 25,
- *     order: "desc",
- *   },
- * );
- * ```
- */
-declare const inviteList: any;
-/**
- * Accept a pending invitation.
- *
- * Marks the invite as `"accepted"` and records the acceptance timestamp.
- * Throws a structured `ConvexError` when the invite doesn't exist or is not
- * currently pending. If the invite has passed its `expiresTime`, it is
- * automatically transitioned to `"expired"` and the acceptance is rejected.
- *
- * The caller is responsible for creating the corresponding member record
- * (see {@link inviteAcceptByToken} for an all-in-one alternative that also
- * handles membership).
- *
- * @param args.inviteId - The `Id<"GroupInvite">` of the invite to accept.
- * @param args.acceptedByUserId - Optional `Id<"User">` of the user accepting the invite. Stored on the invite for audit purposes.
- * @returns `null` on success.
- * @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.
- * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or otherwise finalized.
- * @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.
- *
- * @example
- * ```ts
- * await ctx.runMutation(components.auth.groups.inviteAccept, {
- *   inviteId: pendingInviteId,
- *   acceptedByUserId: currentUserId,
- * });
- * ```
- */
-declare const inviteAccept: any;
-/**
- * Accept an invitation by raw token hash and atomically join group membership.
- *
- * This is the primary token-based acceptance flow. It looks up the invite by
- * `tokenHash`, validates status and expiry, verifies the accepting user's
- * email matches the invite email (when set), and — if the invite is scoped
- * to a group — creates a `GroupMember` record in the same transaction.
- *
- * The operation is idempotent: if the invite was already accepted by the
- * same user, it returns a result with `inviteStatus: "already_accepted"`
- * and the existing membership information.
- *
- * @param args.tokenHash - The hashed token string that identifies the invite (typically extracted from an invite URL).
- * @param args.acceptedByUserId - The `Id<"User">` of the user accepting the invitation. Their email must match the invite's email when one was specified.
- * @returns An object describing the outcome:
- *   - `inviteId` — the ID of the accepted invite.
- *   - `groupId` — the group the invite targets, or `null` for platform invites.
- *   - `memberId` — the ID of the created (or existing) member record, or `undefined` for platform invites.
- *   - `inviteStatus` — `"accepted"` for a fresh acceptance, `"already_accepted"` for idempotent replays.
- *   - `membershipStatus` — `"joined"`, `"already_joined"`, or `"not_applicable"`.
- * @throws `ConvexError` with code `INVITE_NOT_FOUND` if no invite matches the token hash.
- * @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.
- * @throws `ConvexError` with code `INVITE_ALREADY_ACCEPTED` if the invite was accepted by a different user.
- * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has been revoked or is in another non-pending state.
- * @throws `ConvexError` with code `INVITE_EMAIL_MISMATCH` if the accepting user's email does not match the invite's email.
- *
- * @example
- * ```ts
- * const result = await ctx.runMutation(
- *   components.auth.groups.inviteAcceptByToken,
- *   {
- *     tokenHash: "sha256_abc123...",
- *     acceptedByUserId: currentUserId,
- *   },
- * );
- * if (result.membershipStatus === "joined") {
- *   console.log("Joined group", result.groupId, "as member", result.memberId);
- * }
- * ```
- */
-declare const inviteAcceptByToken: any;
-/**
- * Revoke a pending invitation.
- *
- * Marks the invite as `"revoked"`. Only invites with status `"pending"` can
- * be revoked. Throws a structured `ConvexError` when the invite doesn't
- * exist or is not currently pending. Once revoked, the invite's token can
- * no longer be used for acceptance.
- *
- * @param args.inviteId - The `Id<"GroupInvite">` of the invite to revoke.
- * @returns `null` on success.
- * @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.
- * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or expired.
- *
- * @example
- * ```ts
- * await ctx.runMutation(components.auth.groups.inviteRevoke, {
- *   inviteId: pendingInviteId,
- * });
- * ```
- */
-declare const inviteRevoke: any;
-//#endregion
-export { inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke, invites_d_exports };
-//# sourceMappingURL=invites.d.ts.map

package/dist/component/public/groups/invites.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"invites.d.ts","names":[],"sources":["../../../../src/component/public/groups/invites.ts"],"mappings":";;;;;;;;;;;;;;;AAoDA;;;;;AAiGA;;;;;AA6BA;;;;;AA+CA;;;;;AAmJA;;;;;AAkFA;;;;cAlZa,YAAA;AAohBb;;;;;;;;;;;;;;;;;;;AAAA,cAnba,SAAA;;;;;;;;;;;;;;;;;;;;;;cA6BA,oBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA+CA,UAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAmJA,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkFA,mBAAA;;;;;;;;;;;;;;;;;;;;;cAkIA,YAAA"}

package/dist/component/public/groups/invites.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invites.js","names":[],"sources":["../../../../src/component/public/groups/invites.ts"],"sourcesContent":["import { ConvexError, v } from \"convex/values\";\n\nimport type { Id } from \"../../_generated/dataModel\";\nimport { mutation, query } from \"../../functions\";\nimport {\n  vGroupInviteDoc,\n  vInviteAcceptByTokenResult,\n  vInviteStatus,\n  vPaginated,\n} from \"../../model\";\n\n/**\n * Create a new platform-level invitation. Optionally set `groupId` to tie\n * the invite to a specific group. The invitation is sent to an email address\n * and includes a hashed token for secure acceptance.\n *\n * Throws `ConvexError` with code `DUPLICATE_INVITE` when a pending invite\n * already exists for the same email and scope:\n * - group invite: same `email` + same `groupId`\n * - platform invite: same `email` with no `groupId`\n *\n * When a duplicate check finds an existing invite that has passed its\n * `expiresTime`, that invite is automatically marked as `\"expired\"` and the\n * new invite is allowed through. CLI-generated invites (no email) skip\n * duplicate detection entirely.\n *\n * @param args.groupId - Optional `Id<\"Group\">` to scope this invite to a specific group. Omit for a platform-wide invite.\n * @param args.invitedByUserId - Optional `Id<\"User\">` of the user who issued the invitation.\n * @param args.email - Optional email address of the invitee. When provided, duplicate detection is enforced.\n * @param args.tokenHash - A pre-hashed token string used for secure, URL-safe invite acceptance.\n * @param args.roleIds - Optional array of application-defined role identifiers to assign upon acceptance.\n * @param args.status - The initial status of the invite (typically `\"pending\"`).\n * @param args.expiresTime - Optional Unix timestamp (ms) after which the invite is considered expired.\n * @param args.extend - Optional arbitrary payload for application-specific metadata.\n * @returns The `Id<\"GroupInvite\">` of the newly created invite document.\n *\n * @example\n * ```ts\n * const inviteId = await ctx.runMutation(\n *   components.auth.groups.inviteCreate,\n *   {\n *     groupId: teamGroupId,\n *     invitedByUserId: currentUserId,\n *     email: \"alice@example.com\",\n *     tokenHash: hashedToken,\n *     roleIds: [\"editor\"],\n *     status: \"pending\",\n *     expiresTime: Date.now() + 7 * 24 * 60 * 60 * 1000, // 7 days\n *   },\n * );\n * ```\n */\nexport const inviteCreate = mutation({\n  args: {\n    groupId: v.optional(v.id(\"Group\")),\n    invitedByUserId: v.optional(v.id(\"User\")),\n    email: v.optional(v.string()),\n    tokenHash: v.string(),\n    roleIds: v.optional(v.array(v.string())),\n    status: vInviteStatus,\n    expiresTime: v.optional(v.number()),\n    extend: v.optional(v.any()),\n  },\n  returns: v.id(\"GroupInvite\"),\n  handler: async (ctx, args) => {\n    const now = Date.now();\n\n    // Only check for duplicates when an email is provided.\n    // CLI-generated invites (no email) are always allowed.\n    if (args.email !== undefined) {\n      if (args.groupId !== undefined) {\n        const existingGroupInvites = await ctx.db\n          .query(\"GroupInvite\")\n          .withIndex(\"group_id_status\", (q) =>\n            q.eq(\"groupId\", args.groupId).eq(\"status\", \"pending\"),\n          )\n          .filter((q) => q.eq(q.field(\"email\"), args.email))\n          .collect();\n\n        for (const existingGroupInvite of existingGroupInvites) {\n          const isExpired =\n            existingGroupInvite.expiresTime !== undefined &&\n            existingGroupInvite.expiresTime <= now;\n          if (isExpired) {\n            await ctx.db.patch(\"GroupInvite\", existingGroupInvite._id, {\n              status: \"expired\",\n            });\n            continue;\n          }\n          throw new ConvexError({\n            code: \"DUPLICATE_INVITE\",\n            message:\n              \"A pending invite already exists for this email in this group\",\n            email: args.email,\n            groupId: args.groupId,\n            existingInviteId: existingGroupInvite._id,\n          });\n        }\n      } else {\n        const existingPlatformInvites = await ctx.db\n          .query(\"GroupInvite\")\n          .withIndex(\"email_status\", (q) =>\n            q.eq(\"email\", args.email).eq(\"status\", \"pending\"),\n          )\n          .filter((q) => q.eq(q.field(\"groupId\"), undefined))\n          .collect();\n\n        for (const existingPlatformInvite of existingPlatformInvites) {\n          const isExpired =\n            existingPlatformInvite.expiresTime !== undefined &&\n            existingPlatformInvite.expiresTime <= now;\n          if (isExpired) {\n            await ctx.db.patch(\"GroupInvite\", existingPlatformInvite._id, {\n              status: \"expired\",\n            });\n            continue;\n          }\n          throw new ConvexError({\n            code: \"DUPLICATE_INVITE\",\n            message: \"A pending platform invite already exists for this email\",\n            email: args.email,\n            existingInviteId: existingPlatformInvite._id,\n          });\n        }\n      }\n    }\n    return await ctx.db.insert(\"GroupInvite\", args);\n  },\n});\n\n/**\n * Retrieve an invite by its document ID.\n *\n * Performs a direct lookup in the `GroupInvite` table and returns the full\n * invite document, or `null` if no invite exists with the given ID.\n *\n * @param args.inviteId - The `Id<\"GroupInvite\">` of the invite to retrieve.\n * @returns The invite document (including `email`, `status`, `groupId`, `tokenHash`, etc.) or `null` if not found.\n *\n * @example\n * ```ts\n * const invite = await ctx.runQuery(components.auth.groups.inviteGet, {\n *   inviteId: existingInviteId,\n * });\n * if (invite !== null) {\n *   console.log(invite.email, invite.status);\n * }\n * ```\n */\nexport const inviteGet = query({\n  args: { inviteId: v.id(\"GroupInvite\") },\n  returns: v.union(vGroupInviteDoc, v.null()),\n  handler: async (ctx, { inviteId }) => {\n    return await ctx.db.get(\"GroupInvite\", inviteId);\n  },\n});\n\n/**\n * Retrieve an invite by its hashed token.\n *\n * Looks up the `GroupInvite` table using the `token_hash` index. This is\n * the primary mechanism for resolving an invite from a URL-embedded token.\n * Returns `null` if no invite matches the given hash.\n *\n * @param args.tokenHash - The hashed token string to look up (must match the value stored at creation time).\n * @returns The invite document or `null` if no invite exists with the given token hash.\n *\n * @example\n * ```ts\n * const invite = await ctx.runQuery(\n *   components.auth.groups.inviteGetByTokenHash,\n *   { tokenHash: \"sha256_abc123...\" },\n * );\n * if (invite !== null && invite.status === \"pending\") {\n *   // proceed with acceptance flow\n * }\n * ```\n */\nexport const inviteGetByTokenHash = query({\n  args: { tokenHash: v.string() },\n  returns: v.union(vGroupInviteDoc, v.null()),\n  handler: async (ctx, { tokenHash }) => {\n    return await ctx.db\n      .query(\"GroupInvite\")\n      .withIndex(\"token_hash\", (q) => q.eq(\"tokenHash\", tokenHash))\n      .first();\n  },\n});\n\n/**\n * List invites with optional filtering, sorting, and pagination.\n *\n * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,\n * `status`, `email`, `invitedByUserId`, `roleId`, `acceptedByUserId`, and\n * `tokenHash`. The query engine automatically selects the best compound\n * index based on the combination of filter fields provided. The `roleId`\n * filter is applied in-memory after the index scan because role IDs are\n * stored as an array.\n *\n * @param args.where - Optional filter criteria for narrowing results.\n * @param args.where.tokenHash - Match invites with this exact hashed token.\n * @param args.where.groupId - Match invites scoped to this group.\n * @param args.where.status - Match invites with this status (e.g. `\"pending\"`, `\"accepted\"`, `\"revoked\"`).\n * @param args.where.email - Match invites sent to this email address.\n * @param args.where.invitedByUserId - Match invites created by this user.\n * @param args.where.roleId - Match invites that include this role identifier in their `roleIds` array.\n * @param args.where.acceptedByUserId - Match invites accepted by this specific user.\n * @param args.limit - Maximum number of items per page (clamped to 1..100, defaults to 50).\n * @param args.cursor - An opaque cursor string from a previous response's `nextCursor` to fetch the next page, or `null` to start from the beginning.\n * @param args.orderBy - The field to sort by: `\"_creationTime\"`, `\"status\"`, `\"email\"`, `\"expiresTime\"`, or `\"acceptedTime\"`.\n * @param args.order - Sort direction: `\"asc\"` or `\"desc\"` (defaults to `\"desc\"`).\n * @returns An object `{ items, nextCursor }` where `items` is an array of invite documents and `nextCursor` is `null` when there are no more pages.\n *\n * @example\n * ```ts\n * const { items, nextCursor } = await ctx.runQuery(\n *   components.auth.groups.inviteList,\n *   {\n *     where: { groupId: teamGroupId, status: \"pending\" },\n *     limit: 25,\n *     order: \"desc\",\n *   },\n * );\n * ```\n */\nexport const inviteList = query({\n  args: {\n    where: v.optional(\n      v.object({\n        tokenHash: v.optional(v.string()),\n        groupId: v.optional(v.id(\"Group\")),\n        status: v.optional(vInviteStatus),\n        email: v.optional(v.string()),\n        invitedByUserId: v.optional(v.id(\"User\")),\n        roleId: v.optional(v.string()),\n        acceptedByUserId: v.optional(v.id(\"User\")),\n      }),\n    ),\n    limit: v.optional(v.number()),\n    cursor: v.optional(v.union(v.string(), v.null())),\n    orderBy: v.optional(\n      v.union(\n        v.literal(\"_creationTime\"),\n        v.literal(\"status\"),\n        v.literal(\"email\"),\n        v.literal(\"expiresTime\"),\n        v.literal(\"acceptedTime\"),\n      ),\n    ),\n    order: v.optional(v.union(v.literal(\"asc\"), v.literal(\"desc\"))),\n  },\n  returns: vPaginated(vGroupInviteDoc),\n  handler: async (ctx, args) => {\n    const where = args.where ?? {};\n    const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);\n    const order = args.order ?? \"desc\";\n\n    // Pick best index\n    let q;\n    if (where.tokenHash !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"token_hash\", (idx) =>\n          idx.eq(\"tokenHash\", where.tokenHash!),\n        );\n    } else if (where.groupId !== undefined && where.status !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"group_id_status\", (idx) =>\n          idx.eq(\"groupId\", where.groupId!).eq(\"status\", where.status!),\n        );\n    } else if (where.email !== undefined && where.status !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"email_status\", (idx) =>\n          idx.eq(\"email\", where.email!).eq(\"status\", where.status!),\n        );\n    } else if (\n      where.invitedByUserId !== undefined &&\n      where.status !== undefined\n    ) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"invited_by_user_id_status\", (idx) =>\n          idx\n            .eq(\"invitedByUserId\", where.invitedByUserId!)\n            .eq(\"status\", where.status!),\n        );\n    } else if (where.groupId !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"group_id\", (idx) => idx.eq(\"groupId\", where.groupId!));\n    } else if (where.status !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"status\", (idx) => idx.eq(\"status\", where.status!));\n    } else {\n      q = ctx.db.query(\"GroupInvite\");\n    }\n\n    // Apply remaining filters\n    if (where.groupId !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"groupId\"), where.groupId!));\n    }\n    if (where.status !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"status\"), where.status!));\n    }\n    if (where.email !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"email\"), where.email!));\n    }\n    if (where.invitedByUserId !== undefined) {\n      q = q.filter((f) =>\n        f.eq(f.field(\"invitedByUserId\"), where.invitedByUserId!),\n      );\n    }\n    if (where.acceptedByUserId !== undefined) {\n      q = q.filter((f) =>\n        f.eq(f.field(\"acceptedByUserId\"), where.acceptedByUserId!),\n      );\n    }\n    if (where.tokenHash !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"tokenHash\"), where.tokenHash!));\n    }\n\n    q = q.order(order);\n\n    let all = await q.collect();\n    if (where.roleId !== undefined) {\n      all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId!));\n    }\n    let startIdx = 0;\n    if (args.cursor) {\n      const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);\n      if (cursorIdx !== -1) {\n        startIdx = cursorIdx + 1;\n      }\n    }\n    const page = all.slice(startIdx, startIdx + limit + 1);\n    const hasMore = page.length > limit;\n    const items = hasMore ? page.slice(0, limit) : page;\n    const nextCursor = hasMore ? items[items.length - 1]._id : null;\n    return { items, nextCursor };\n  },\n});\n\n/**\n * Accept a pending invitation.\n *\n * Marks the invite as `\"accepted\"` and records the acceptance timestamp.\n * Throws a structured `ConvexError` when the invite doesn't exist or is not\n * currently pending. If the invite has passed its `expiresTime`, it is\n * automatically transitioned to `\"expired\"` and the acceptance is rejected.\n *\n * The caller is responsible for creating the corresponding member record\n * (see {@link inviteAcceptByToken} for an all-in-one alternative that also\n * handles membership).\n *\n * @param args.inviteId - The `Id<\"GroupInvite\">` of the invite to accept.\n * @param args.acceptedByUserId - Optional `Id<\"User\">` of the user accepting the invite. Stored on the invite for audit purposes.\n * @returns `null` on success.\n * @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.\n * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or otherwise finalized.\n * @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.\n *\n * @example\n * ```ts\n * await ctx.runMutation(components.auth.groups.inviteAccept, {\n *   inviteId: pendingInviteId,\n *   acceptedByUserId: currentUserId,\n * });\n * ```\n */\nexport const inviteAccept = mutation({\n  args: {\n    inviteId: v.id(\"GroupInvite\"),\n    acceptedByUserId: v.optional(v.id(\"User\")),\n  },\n  returns: v.null(),\n  handler: async (ctx, { inviteId, acceptedByUserId }) => {\n    const invite = await ctx.db.get(\"GroupInvite\", inviteId);\n    if (invite === null) {\n      throw new ConvexError({\n        code: \"INVITE_NOT_FOUND\",\n        message: \"Invite not found\",\n        inviteId,\n      });\n    }\n    if (invite.status !== \"pending\") {\n      throw new ConvexError({\n        code: \"INVITE_NOT_PENDING\",\n        message: `Cannot accept invite with status \"${invite.status}\"`,\n        inviteId,\n        currentStatus: invite.status,\n      });\n    }\n    if (invite.expiresTime !== undefined && invite.expiresTime <= Date.now()) {\n      await ctx.db.patch(\"GroupInvite\", inviteId, {\n        status: \"expired\",\n      });\n      throw new ConvexError({\n        code: \"INVITE_EXPIRED\",\n        message: \"Invite has expired\",\n        inviteId,\n      });\n    }\n    await ctx.db.patch(\"GroupInvite\", inviteId, {\n      status: \"accepted\",\n      acceptedTime: Date.now(),\n      ...(acceptedByUserId ? { acceptedByUserId } : {}),\n    });\n    return null;\n  },\n});\n\n/**\n * Accept an invitation by raw token hash and atomically join group membership.\n *\n * This is the primary token-based acceptance flow. It looks up the invite by\n * `tokenHash`, validates status and expiry, verifies the accepting user's\n * email matches the invite email (when set), and — if the invite is scoped\n * to a group — creates a `GroupMember` record in the same transaction.\n *\n * The operation is idempotent: if the invite was already accepted by the\n * same user, it returns a result with `inviteStatus: \"already_accepted\"`\n * and the existing membership information.\n *\n * @param args.tokenHash - The hashed token string that identifies the invite (typically extracted from an invite URL).\n * @param args.acceptedByUserId - The `Id<\"User\">` of the user accepting the invitation. Their email must match the invite's email when one was specified.\n * @returns An object describing the outcome:\n *   - `inviteId` — the ID of the accepted invite.\n *   - `groupId` — the group the invite targets, or `null` for platform invites.\n *   - `memberId` — the ID of the created (or existing) member record, or `undefined` for platform invites.\n *   - `inviteStatus` — `\"accepted\"` for a fresh acceptance, `\"already_accepted\"` for idempotent replays.\n *   - `membershipStatus` — `\"joined\"`, `\"already_joined\"`, or `\"not_applicable\"`.\n * @throws `ConvexError` with code `INVITE_NOT_FOUND` if no invite matches the token hash.\n * @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.\n * @throws `ConvexError` with code `INVITE_ALREADY_ACCEPTED` if the invite was accepted by a different user.\n * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has been revoked or is in another non-pending state.\n * @throws `ConvexError` with code `INVITE_EMAIL_MISMATCH` if the accepting user's email does not match the invite's email.\n *\n * @example\n * ```ts\n * const result = await ctx.runMutation(\n *   components.auth.groups.inviteAcceptByToken,\n *   {\n *     tokenHash: \"sha256_abc123...\",\n *     acceptedByUserId: currentUserId,\n *   },\n * );\n * if (result.membershipStatus === \"joined\") {\n *   console.log(\"Joined group\", result.groupId, \"as member\", result.memberId);\n * }\n * ```\n */\nexport const inviteAcceptByToken = mutation({\n  args: {\n    tokenHash: v.string(),\n    acceptedByUserId: v.id(\"User\"),\n  },\n  returns: vInviteAcceptByTokenResult,\n  handler: async (ctx, { tokenHash, acceptedByUserId }) => {\n    const invite = await ctx.db\n      .query(\"GroupInvite\")\n      .withIndex(\"token_hash\", (q) => q.eq(\"tokenHash\", tokenHash))\n      .first();\n\n    if (invite === null) {\n      throw new ConvexError({\n        code: \"INVITE_NOT_FOUND\",\n        message: \"Invite not found\",\n      });\n    }\n\n    const now = Date.now();\n    if (invite.status === \"pending\") {\n      if (invite.expiresTime !== undefined && invite.expiresTime <= now) {\n        await ctx.db.patch(\"GroupInvite\", invite._id, { status: \"expired\" });\n        throw new ConvexError({\n          code: \"INVITE_EXPIRED\",\n          message: \"Invite has expired\",\n          inviteId: invite._id,\n        });\n      }\n    } else if (invite.status === \"accepted\") {\n      if (invite.acceptedByUserId !== acceptedByUserId) {\n        throw new ConvexError({\n          code: \"INVITE_ALREADY_ACCEPTED\",\n          message: \"Invite already accepted by another user\",\n          inviteId: invite._id,\n        });\n      }\n    } else {\n      throw new ConvexError({\n        code: \"INVITE_NOT_PENDING\",\n        message: `Cannot accept invite with status \"${invite.status}\"`,\n        inviteId: invite._id,\n        currentStatus: invite.status,\n      });\n    }\n\n    if (invite.email !== undefined) {\n      const user = await ctx.db.get(\"User\", acceptedByUserId);\n      const normalizedInviteEmail = invite.email.trim().toLowerCase();\n      const normalizedUserEmail = user?.email?.trim().toLowerCase();\n\n      if (\n        normalizedUserEmail === undefined ||\n        normalizedUserEmail !== normalizedInviteEmail\n      ) {\n        throw new ConvexError({\n          code: \"INVITE_EMAIL_MISMATCH\",\n          message: \"Invite email does not match accepting user's email\",\n          inviteId: invite._id,\n        });\n      }\n    }\n\n    let membershipStatus: \"joined\" | \"already_joined\" | \"not_applicable\" =\n      \"not_applicable\";\n    let memberId: Id<\"GroupMember\"> | undefined;\n\n    if (invite.groupId !== undefined) {\n      const existingMembership = await ctx.db\n        .query(\"GroupMember\")\n        .withIndex(\"group_id_user_id\", (q) =>\n          q.eq(\"groupId\", invite.groupId!).eq(\"userId\", acceptedByUserId),\n        )\n        .unique();\n\n      if (existingMembership !== null) {\n        membershipStatus = \"already_joined\";\n        memberId = existingMembership._id;\n      } else {\n        memberId = await ctx.db.insert(\"GroupMember\", {\n          groupId: invite.groupId,\n          userId: acceptedByUserId,\n          roleIds: invite.roleIds,\n          status: \"active\",\n        });\n        membershipStatus = \"joined\";\n      }\n    }\n\n    if (invite.status === \"pending\") {\n      await ctx.db.patch(\"GroupInvite\", invite._id, {\n        status: \"accepted\",\n        acceptedByUserId,\n        acceptedTime: now,\n      });\n    }\n\n    const inviteStatus: \"accepted\" | \"already_accepted\" =\n      invite.status === \"accepted\" ? \"already_accepted\" : \"accepted\";\n\n    return {\n      inviteId: invite._id,\n      groupId: invite.groupId ?? null,\n      memberId,\n      inviteStatus,\n      membershipStatus,\n    };\n  },\n});\n\n/**\n * Revoke a pending invitation.\n *\n * Marks the invite as `\"revoked\"`. Only invites with status `\"pending\"` can\n * be revoked. Throws a structured `ConvexError` when the invite doesn't\n * exist or is not currently pending. Once revoked, the invite's token can\n * no longer be used for acceptance.\n *\n * @param args.inviteId - The `Id<\"GroupInvite\">` of the invite to revoke.\n * @returns `null` on success.\n * @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.\n * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or expired.\n *\n * @example\n * ```ts\n * await ctx.runMutation(components.auth.groups.inviteRevoke, {\n *   inviteId: pendingInviteId,\n * });\n * ```\n */\nexport const inviteRevoke = mutation({\n  args: { inviteId: v.id(\"GroupInvite\") },\n  returns: v.null(),\n  handler: async (ctx, { inviteId }) => {\n    const invite = await ctx.db.get(\"GroupInvite\", inviteId);\n    if (invite === null) {\n      throw new ConvexError({\n        code: \"INVITE_NOT_FOUND\",\n        message: \"Invite not found\",\n        inviteId,\n      });\n    }\n    if (invite.status !== \"pending\") {\n      throw new ConvexError({\n        code: \"INVITE_NOT_PENDING\",\n        message: `Cannot revoke invite with status \"${invite.status}\"`,\n        inviteId,\n        currentStatus: invite.status,\n      });\n    }\n    await ctx.db.patch(\"GroupInvite\", inviteId, { status: \"revoked\" });\n    return null;\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDA,MAAa,eAAe,SAAS;CACnC,MAAM;EACJ,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;EAClC,iBAAiB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;EACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,WAAW,EAAE,QAAQ;EACrB,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;EACxC,QAAQ;EACR,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;EACnC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;EAC5B;CACD,SAAS,EAAE,GAAG,cAAc;CAC5B,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,MAAM,KAAK,KAAK;AAItB,MAAI,KAAK,UAAU,OACjB,KAAI,KAAK,YAAY,QAAW;GAC9B,MAAM,uBAAuB,MAAM,IAAI,GACpC,MAAM,cAAc,CACpB,UAAU,oBAAoB,MAC7B,EAAE,GAAG,WAAW,KAAK,QAAQ,CAAC,GAAG,UAAU,UAAU,CACtD,CACA,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,QAAQ,EAAE,KAAK,MAAM,CAAC,CACjD,SAAS;AAEZ,QAAK,MAAM,uBAAuB,sBAAsB;AAItD,QAFE,oBAAoB,gBAAgB,UACpC,oBAAoB,eAAe,KACtB;AACb,WAAM,IAAI,GAAG,MAAM,eAAe,oBAAoB,KAAK,EACzD,QAAQ,WACT,CAAC;AACF;;AAEF,UAAM,IAAI,YAAY;KACpB,MAAM;KACN,SACE;KACF,OAAO,KAAK;KACZ,SAAS,KAAK;KACd,kBAAkB,oBAAoB;KACvC,CAAC;;SAEC;GACL,MAAM,0BAA0B,MAAM,IAAI,GACvC,MAAM,cAAc,CACpB,UAAU,iBAAiB,MAC1B,EAAE,GAAG,SAAS,KAAK,MAAM,CAAC,GAAG,UAAU,UAAU,CAClD,CACA,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,UAAU,EAAE,OAAU,CAAC,CAClD,SAAS;AAEZ,QAAK,MAAM,0BAA0B,yBAAyB;AAI5D,QAFE,uBAAuB,gBAAgB,UACvC,uBAAuB,eAAe,KACzB;AACb,WAAM,IAAI,GAAG,MAAM,eAAe,uBAAuB,KAAK,EAC5D,QAAQ,WACT,CAAC;AACF;;AAEF,UAAM,IAAI,YAAY;KACpB,MAAM;KACN,SAAS;KACT,OAAO,KAAK;KACZ,kBAAkB,uBAAuB;KAC1C,CAAC;;;AAIR,SAAO,MAAM,IAAI,GAAG,OAAO,eAAe,KAAK;;CAElD,CAAC;;;;;;;;;;;;;;;;;;;;AAqBF,MAAa,YAAY,MAAM;CAC7B,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE;CACvC,SAAS,EAAE,MAAM,iBAAiB,EAAE,MAAM,CAAC;CAC3C,SAAS,OAAO,KAAK,EAAE,eAAe;AACpC,SAAO,MAAM,IAAI,GAAG,IAAI,eAAe,SAAS;;CAEnD,CAAC;;;;;;;;;;;;;;;;;;;;;;AAuBF,MAAa,uBAAuB,MAAM;CACxC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE;CAC/B,SAAS,EAAE,MAAM,iBAAiB,EAAE,MAAM,CAAC;CAC3C,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GACd,MAAM,cAAc,CACpB,UAAU,eAAe,MAAM,EAAE,GAAG,aAAa,UAAU,CAAC,CAC5D,OAAO;;CAEb,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCF,MAAa,aAAa,MAAM;CAC9B,MAAM;EACJ,OAAO,EAAE,SACP,EAAE,OAAO;GACP,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;GACjC,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;GAClC,QAAQ,EAAE,SAAS,cAAc;GACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC7B,iBAAiB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;GACzC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC9B,kBAAkB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;GAC3C,CAAC,CACH;EACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;EACjD,SAAS,EAAE,SACT,EAAE,MACA,EAAE,QAAQ,gBAAgB,EAC1B,EAAE,QAAQ,SAAS,EACnB,EAAE,QAAQ,QAAQ,EAClB,EAAE,QAAQ,cAAc,EACxB,EAAE,QAAQ,eAAe,CAC1B,CACF;EACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EAChE;CACD,SAAS,WAAW,gBAAgB;CACpC,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,QAAQ,KAAK,SAAS,EAAE;EAC9B,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAC1D,MAAM,QAAQ,KAAK,SAAS;EAG5B,IAAI;AACJ,MAAI,MAAM,cAAc,OACtB,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,eAAe,QACxB,IAAI,GAAG,aAAa,MAAM,UAAW,CACtC;WACM,MAAM,YAAY,UAAa,MAAM,WAAW,OACzD,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,oBAAoB,QAC7B,IAAI,GAAG,WAAW,MAAM,QAAS,CAAC,GAAG,UAAU,MAAM,OAAQ,CAC9D;WACM,MAAM,UAAU,UAAa,MAAM,WAAW,OACvD,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,iBAAiB,QAC1B,IAAI,GAAG,SAAS,MAAM,MAAO,CAAC,GAAG,UAAU,MAAM,OAAQ,CAC1D;WAEH,MAAM,oBAAoB,UAC1B,MAAM,WAAW,OAEjB,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,8BAA8B,QACvC,IACG,GAAG,mBAAmB,MAAM,gBAAiB,CAC7C,GAAG,UAAU,MAAM,OAAQ,CAC/B;WACM,MAAM,YAAY,OAC3B,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,aAAa,QAAQ,IAAI,GAAG,WAAW,MAAM,QAAS,CAAC;WAC3D,MAAM,WAAW,OAC1B,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,WAAW,QAAQ,IAAI,GAAG,UAAU,MAAM,OAAQ,CAAC;MAEhE,KAAI,IAAI,GAAG,MAAM,cAAc;AAIjC,MAAI,MAAM,YAAY,OACpB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,UAAU,EAAE,MAAM,QAAS,CAAC;AAE/D,MAAI,MAAM,WAAW,OACnB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,SAAS,EAAE,MAAM,OAAQ,CAAC;AAE7D,MAAI,MAAM,UAAU,OAClB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,QAAQ,EAAE,MAAM,MAAO,CAAC;AAE3D,MAAI,MAAM,oBAAoB,OAC5B,KAAI,EAAE,QAAQ,MACZ,EAAE,GAAG,EAAE,MAAM,kBAAkB,EAAE,MAAM,gBAAiB,CACzD;AAEH,MAAI,MAAM,qBAAqB,OAC7B,KAAI,EAAE,QAAQ,MACZ,EAAE,GAAG,EAAE,MAAM,mBAAmB,EAAE,MAAM,iBAAkB,CAC3D;AAEH,MAAI,MAAM,cAAc,OACtB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,YAAY,EAAE,MAAM,UAAW,CAAC;AAGnE,MAAI,EAAE,MAAM,MAAM;EAElB,IAAI,MAAM,MAAM,EAAE,SAAS;AAC3B,MAAI,MAAM,WAAW,OACnB,OAAM,IAAI,QAAQ,SAAS,IAAI,WAAW,EAAE,EAAE,SAAS,MAAM,OAAQ,CAAC;EAExE,IAAI,WAAW;AACf,MAAI,KAAK,QAAQ;GACf,MAAM,YAAY,IAAI,WAAW,QAAQ,IAAI,QAAQ,KAAK,OAAO;AACjE,OAAI,cAAc,GAChB,YAAW,YAAY;;EAG3B,MAAM,OAAO,IAAI,MAAM,UAAU,WAAW,QAAQ,EAAE;EACtD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG;AAE/C,SAAO;GAAE;GAAO,YADG,UAAU,MAAM,MAAM,SAAS,GAAG,MAAM;GAC/B;;CAE/B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BF,MAAa,eAAe,SAAS;CACnC,MAAM;EACJ,UAAU,EAAE,GAAG,cAAc;EAC7B,kBAAkB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;EAC3C;CACD,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,UAAU,uBAAuB;EACtD,MAAM,SAAS,MAAM,IAAI,GAAG,IAAI,eAAe,SAAS;AACxD,MAAI,WAAW,KACb,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACT;GACD,CAAC;AAEJ,MAAI,OAAO,WAAW,UACpB,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS,qCAAqC,OAAO,OAAO;GAC5D;GACA,eAAe,OAAO;GACvB,CAAC;AAEJ,MAAI,OAAO,gBAAgB,UAAa,OAAO,eAAe,KAAK,KAAK,EAAE;AACxE,SAAM,IAAI,GAAG,MAAM,eAAe,UAAU,EAC1C,QAAQ,WACT,CAAC;AACF,SAAM,IAAI,YAAY;IACpB,MAAM;IACN,SAAS;IACT;IACD,CAAC;;AAEJ,QAAM,IAAI,GAAG,MAAM,eAAe,UAAU;GAC1C,QAAQ;GACR,cAAc,KAAK,KAAK;GACxB,GAAI,mBAAmB,EAAE,kBAAkB,GAAG,EAAE;GACjD,CAAC;AACF,SAAO;;CAEV,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CF,MAAa,sBAAsB,SAAS;CAC1C,MAAM;EACJ,WAAW,EAAE,QAAQ;EACrB,kBAAkB,EAAE,GAAG,OAAO;EAC/B;CACD,SAAS;CACT,SAAS,OAAO,KAAK,EAAE,WAAW,uBAAuB;EACvD,MAAM,SAAS,MAAM,IAAI,GACtB,MAAM,cAAc,CACpB,UAAU,eAAe,MAAM,EAAE,GAAG,aAAa,UAAU,CAAC,CAC5D,OAAO;AAEV,MAAI,WAAW,KACb,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACV,CAAC;EAGJ,MAAM,MAAM,KAAK,KAAK;AACtB,MAAI,OAAO,WAAW,WACpB;OAAI,OAAO,gBAAgB,UAAa,OAAO,eAAe,KAAK;AACjE,UAAM,IAAI,GAAG,MAAM,eAAe,OAAO,KAAK,EAAE,QAAQ,WAAW,CAAC;AACpE,UAAM,IAAI,YAAY;KACpB,MAAM;KACN,SAAS;KACT,UAAU,OAAO;KAClB,CAAC;;aAEK,OAAO,WAAW,YAC3B;OAAI,OAAO,qBAAqB,iBAC9B,OAAM,IAAI,YAAY;IACpB,MAAM;IACN,SAAS;IACT,UAAU,OAAO;IAClB,CAAC;QAGJ,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS,qCAAqC,OAAO,OAAO;GAC5D,UAAU,OAAO;GACjB,eAAe,OAAO;GACvB,CAAC;AAGJ,MAAI,OAAO,UAAU,QAAW;GAC9B,MAAM,OAAO,MAAM,IAAI,GAAG,IAAI,QAAQ,iBAAiB;GACvD,MAAM,wBAAwB,OAAO,MAAM,MAAM,CAAC,aAAa;GAC/D,MAAM,sBAAsB,MAAM,OAAO,MAAM,CAAC,aAAa;AAE7D,OACE,wBAAwB,UACxB,wBAAwB,sBAExB,OAAM,IAAI,YAAY;IACpB,MAAM;IACN,SAAS;IACT,UAAU,OAAO;IAClB,CAAC;;EAIN,IAAI,mBACF;EACF,IAAI;AAEJ,MAAI,OAAO,YAAY,QAAW;GAChC,MAAM,qBAAqB,MAAM,IAAI,GAClC,MAAM,cAAc,CACpB,UAAU,qBAAqB,MAC9B,EAAE,GAAG,WAAW,OAAO,QAAS,CAAC,GAAG,UAAU,iBAAiB,CAChE,CACA,QAAQ;AAEX,OAAI,uBAAuB,MAAM;AAC/B,uBAAmB;AACnB,eAAW,mBAAmB;UACzB;AACL,eAAW,MAAM,IAAI,GAAG,OAAO,eAAe;KAC5C,SAAS,OAAO;KAChB,QAAQ;KACR,SAAS,OAAO;KAChB,QAAQ;KACT,CAAC;AACF,uBAAmB;;;AAIvB,MAAI,OAAO,WAAW,UACpB,OAAM,IAAI,GAAG,MAAM,eAAe,OAAO,KAAK;GAC5C,QAAQ;GACR;GACA,cAAc;GACf,CAAC;EAGJ,MAAM,eACJ,OAAO,WAAW,aAAa,qBAAqB;AAEtD,SAAO;GACL,UAAU,OAAO;GACjB,SAAS,OAAO,WAAW;GAC3B;GACA;GACA;GACD;;CAEJ,CAAC;;;;;;;;;;;;;;;;;;;;;AAsBF,MAAa,eAAe,SAAS;CACnC,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE;CACvC,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,eAAe;EACpC,MAAM,SAAS,MAAM,IAAI,GAAG,IAAI,eAAe,SAAS;AACxD,MAAI,WAAW,KACb,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACT;GACD,CAAC;AAEJ,MAAI,OAAO,WAAW,UACpB,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS,qCAAqC,OAAO,OAAO;GAC5D;GACA,eAAe,OAAO;GACvB,CAAC;AAEJ,QAAM,IAAI,GAAG,MAAM,eAAe,UAAU,EAAE,QAAQ,WAAW,CAAC;AAClE,SAAO;;CAEV,CAAC"}

package/dist/component/public/groups/members.d.ts

@@ -1,204 +0,0 @@
-declare namespace members_d_exports {
-  export { memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberRemove, memberResolve, memberUpdate };
-}
-/**
- * Add a user as a member of a group.
- *
- * The `roleIds` field stores application-defined role identifiers. The auth
- * component stores assignments but does not enforce access control — your
- * application defines what each role means.
- *
- * Throws `ConvexError` with code `DUPLICATE_MEMBERSHIP` when the user is
- * already a member of the target group. The duplicate check uses the
- * `group_id_user_id` compound index for an exact match.
- *
- * @param args.groupId - The `Id<"Group">` of the group to add the user to.
- * @param args.userId - The `Id<"User">` of the user to add as a member.
- * @param args.roleIds - Optional array of application-defined role identifiers (e.g. `["admin", "editor"]`).
- * @param args.status - Optional membership status string (e.g. `"active"`, `"suspended"`). Defaults to whatever your application convention is.
- * @param args.extend - Optional arbitrary payload for application-specific metadata on the membership.
- * @returns The `Id<"GroupMember">` of the newly created member document.
- * @throws `ConvexError` with code `DUPLICATE_MEMBERSHIP` if the user is already a member of this group.
- *
- * @example
- * ```ts
- * const memberId = await ctx.runMutation(
- *   components.auth.groups.memberAdd,
- *   {
- *     groupId: teamGroupId,
- *     userId: newUserId,
- *     roleIds: ["viewer"],
- *     status: "active",
- *   },
- * );
- * ```
- */
-declare const memberAdd: any;
-/**
- * Retrieve a member record by its document ID.
- *
- * Performs a direct lookup in the `GroupMember` table and returns the full
- * member document, or `null` if no member exists with the given ID.
- *
- * @param args.memberId - The `Id<"GroupMember">` of the member record to retrieve.
- * @returns The member document (including `groupId`, `userId`, `roleIds`, `status`, etc.) or `null` if not found.
- *
- * @example
- * ```ts
- * const member = await ctx.runQuery(components.auth.groups.memberGet, {
- *   memberId: existingMemberId,
- * });
- * if (member !== null) {
- *   console.log(member.userId, member.roleIds);
- * }
- * ```
- */
-declare const memberGet: any;
-/**
- * List members with optional filtering, sorting, and pagination.
- *
- * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
- * `userId`, `roleId`, and `status`. The query engine automatically selects
- * the best compound index based on the combination of filter fields
- * provided. The `roleId` filter is applied in-memory after the index scan
- * because role IDs are stored as an array.
- *
- * @param args.where - Optional filter criteria for narrowing results.
- * @param args.where.groupId - Match members belonging to this group.
- * @param args.where.userId - Match members for this specific user.
- * @param args.where.roleId - Match members whose `roleIds` array includes this role identifier.
- * @param args.where.status - Match members with this exact status string (e.g. `"active"`).
- * @param args.limit - Maximum number of items per page (clamped to 1..100, defaults to 50).
- * @param args.cursor - An opaque cursor string from a previous response's `nextCursor` to fetch the next page, or `null` to start from the beginning.
- * @param args.orderBy - The field to sort by: `"_creationTime"` or `"status"`.
- * @param args.order - Sort direction: `"asc"` or `"desc"` (defaults to `"desc"`).
- * @returns An object `{ items, nextCursor }` where `items` is an array of member documents and `nextCursor` is `null` when there are no more pages.
- *
- * @example
- * ```ts
- * const { items, nextCursor } = await ctx.runQuery(
- *   components.auth.groups.memberList,
- *   {
- *     where: { groupId: teamGroupId, status: "active" },
- *     limit: 30,
- *     order: "asc",
- *   },
- * );
- * ```
- */
-declare const memberList: any;
-/**
- * Look up a specific user's membership in a specific group.
- *
- * Uses the `group_id_user_id` compound index for an efficient exact-match
- * lookup. Returns `null` if the user is not a member of the group. Unlike
- * {@link memberResolve}, this does **not** walk the group hierarchy — it
- * checks only the specified group.
- *
- * @param args.groupId - The `Id<"Group">` of the group to check.
- * @param args.userId - The `Id<"User">` of the user whose membership to look up.
- * @returns The member document or `null` if the user is not a direct member of the group.
- *
- * @example
- * ```ts
- * const member = await ctx.runQuery(
- *   components.auth.groups.memberGetByGroupAndUser,
- *   { groupId: teamGroupId, userId: currentUserId },
- * );
- * if (member !== null) {
- *   console.log("User has roles:", member.roleIds);
- * }
- * ```
- */
-declare const memberGetByGroupAndUser: any;
-/**
- * Resolve a user's membership by walking the group hierarchy from the
- * requested group up to the root. Returns the first matching membership
- * found, enabling inherited (ancestor-level) access checks.
- *
- * The traversal walks from `groupId` to its `parentGroupId`, then to the
- * parent's parent, and so on, up to `maxDepth` levels (default 32). It
- * stops at the first group where the user has a membership record. Cycle
- * detection prevents infinite loops if the hierarchy is malformed.
- *
- * When `ancestry` is `true`, the response includes a `traversedGroupIds`
- * array showing the full path that was walked (useful for debugging or
- * audit trails).
- *
- * This runs entirely inside the component (no cross-component RPCs per level).
- *
- * @param args.userId - The `Id<"User">` of the user whose membership to resolve.
- * @param args.groupId - The `Id<"Group">` to start the upward traversal from.
- * @param args.maxDepth - Optional maximum number of parent levels to traverse (defaults to 32). Set to `0` to check only the exact group.
- * @param args.ancestry - When `true`, the response includes the `traversedGroupIds` array showing all group IDs visited during the walk.
- * @returns An object with:
- *   - `membership` — the member document at the matched group, or `null` if none was found.
- *   - `matchedGroupId` — the ID of the group where membership was found, or `null`.
- *   - `depth` — how many levels above `groupId` the match was found (0 = direct), or `null` if not found.
- *   - `isDirect` — `true` when `depth === 0`.
- *   - `isInherited` — `true` when `depth > 0`.
- *   - `traversedGroupIds` — (only when `ancestry` is `true`) array of group IDs visited.
- *
- * @example
- * ```ts
- * const result = await ctx.runQuery(
- *   components.auth.groups.memberResolve,
- *   {
- *     userId: currentUserId,
- *     groupId: subTeamGroupId,
- *     maxDepth: 5,
- *     ancestry: true,
- *   },
- * );
- * if (result.membership !== null) {
- *   console.log(
- *     result.isDirect ? "Direct member" : `Inherited from depth ${result.depth}`,
- *   );
- * }
- * ```
- */
-declare const memberResolve: any;
-/**
- * Remove a member from a group by permanently deleting the member record.
- *
- * This is a hard delete — the `GroupMember` document is removed from the
- * database entirely. If you need soft-delete semantics, use
- * {@link memberUpdate} to set the `status` field instead.
- *
- * @param args.memberId - The `Id<"GroupMember">` of the member record to delete.
- * @returns `null` on success.
- *
- * @example
- * ```ts
- * await ctx.runMutation(components.auth.groups.memberRemove, {
- *   memberId: memberToRemoveId,
- * });
- * ```
- */
-declare const memberRemove: any;
-/**
- * Update a member record's mutable fields such as `roleIds`, `status`, and
- * `extend`.
- *
- * Uses `db.patch` under the hood, so only the fields present in `data` are
- * modified — all other fields on the member document are left unchanged.
- *
- * @param args.memberId - The `Id<"GroupMember">` of the member record to update.
- * @param args.data - A partial object of fields to patch. Supported keys include `roleIds`, `status`, and `extend`.
- * @returns `null` on success.
- *
- * @example
- * ```ts
- * await ctx.runMutation(components.auth.groups.memberUpdate, {
- *   memberId: existingMemberId,
- *   data: {
- *     roleIds: ["admin", "editor"],
- *     status: "active",
- *   },
- * });
- * ```
- */
-declare const memberUpdate: any;
-//#endregion
-export { memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberRemove, memberResolve, memberUpdate, members_d_exports };
-//# sourceMappingURL=members.d.ts.map

package/dist/component/public/groups/members.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"members.d.ts","names":[],"sources":["../../../../src/component/public/groups/members.ts"],"mappings":";;;;;;;;;;;;;;;AAsCA;;;;;AAgDA;;;;;AAwCA;;;;;AAqGA;;;;;cA7La,SAAA;;;;;AAyUb;;;;;AA+BA;;;;;;;;;;cAxTa,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwCA,UAAA;;;;;;;;;;;;;;;;;;;;;;;;cAqGA,uBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA2DA,aAAA;;;;;;;;;;;;;;;;;;cAiFA,YAAA;;;;;;;;;;;;;;;;;;;;;;;cA+BA,YAAA"}

package/dist/component/public/groups/members.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"members.js","names":[],"sources":["../../../../src/component/public/groups/members.ts"],"sourcesContent":["import { ConvexError, v } from \"convex/values\";\n\nimport type { Id } from \"../../_generated/dataModel\";\nimport { mutation, query } from \"../../functions\";\nimport { vGroupMemberDoc, vPaginated } from \"../../model\";\n\n/**\n * Add a user as a member of a group.\n *\n * The `roleIds` field stores application-defined role identifiers. The auth\n * component stores assignments but does not enforce access control — your\n * application defines what each role means.\n *\n * Throws `ConvexError` with code `DUPLICATE_MEMBERSHIP` when the user is\n * already a member of the target group. The duplicate check uses the\n * `group_id_user_id` compound index for an exact match.\n *\n * @param args.groupId - The `Id<\"Group\">` of the group to add the user to.\n * @param args.userId - The `Id<\"User\">` of the user to add as a member.\n * @param args.roleIds - Optional array of application-defined role identifiers (e.g. `[\"admin\", \"editor\"]`).\n * @param args.status - Optional membership status string (e.g. `\"active\"`, `\"suspended\"`). Defaults to whatever your application convention is.\n * @param args.extend - Optional arbitrary payload for application-specific metadata on the membership.\n * @returns The `Id<\"GroupMember\">` of the newly created member document.\n * @throws `ConvexError` with code `DUPLICATE_MEMBERSHIP` if the user is already a member of this group.\n *\n * @example\n * ```ts\n * const memberId = await ctx.runMutation(\n *   components.auth.groups.memberAdd,\n *   {\n *     groupId: teamGroupId,\n *     userId: newUserId,\n *     roleIds: [\"viewer\"],\n *     status: \"active\",\n *   },\n * );\n * ```\n */\nexport const memberAdd = mutation({\n  args: {\n    groupId: v.id(\"Group\"),\n    userId: v.id(\"User\"),\n    roleIds: v.optional(v.array(v.string())),\n    status: v.optional(v.string()),\n    extend: v.optional(v.any()),\n  },\n  returns: v.id(\"GroupMember\"),\n  handler: async (ctx, args) => {\n    const existingMembership = await ctx.db\n      .query(\"GroupMember\")\n      .withIndex(\"group_id_user_id\", (q) =>\n        q.eq(\"groupId\", args.groupId).eq(\"userId\", args.userId),\n      )\n      .unique();\n    if (existingMembership !== null) {\n      throw new ConvexError({\n        code: \"DUPLICATE_MEMBERSHIP\",\n        message: \"User is already a member of this group\",\n        groupId: args.groupId,\n        userId: args.userId,\n        existingMemberId: existingMembership._id,\n      });\n    }\n    return await ctx.db.insert(\"GroupMember\", args);\n  },\n});\n\n/**\n * Retrieve a member record by its document ID.\n *\n * Performs a direct lookup in the `GroupMember` table and returns the full\n * member document, or `null` if no member exists with the given ID.\n *\n * @param args.memberId - The `Id<\"GroupMember\">` of the member record to retrieve.\n * @returns The member document (including `groupId`, `userId`, `roleIds`, `status`, etc.) or `null` if not found.\n *\n * @example\n * ```ts\n * const member = await ctx.runQuery(components.auth.groups.memberGet, {\n *   memberId: existingMemberId,\n * });\n * if (member !== null) {\n *   console.log(member.userId, member.roleIds);\n * }\n * ```\n */\nexport const memberGet = query({\n  args: { memberId: v.id(\"GroupMember\") },\n  returns: v.union(vGroupMemberDoc, v.null()),\n  handler: async (ctx, { memberId }) => {\n    return await ctx.db.get(\"GroupMember\", memberId);\n  },\n});\n\n/**\n * List members with optional filtering, sorting, and pagination.\n *\n * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,\n * `userId`, `roleId`, and `status`. The query engine automatically selects\n * the best compound index based on the combination of filter fields\n * provided. The `roleId` filter is applied in-memory after the index scan\n * because role IDs are stored as an array.\n *\n * @param args.where - Optional filter criteria for narrowing results.\n * @param args.where.groupId - Match members belonging to this group.\n * @param args.where.userId - Match members for this specific user.\n * @param args.where.roleId - Match members whose `roleIds` array includes this role identifier.\n * @param args.where.status - Match members with this exact status string (e.g. `\"active\"`).\n * @param args.limit - Maximum number of items per page (clamped to 1..100, defaults to 50).\n * @param args.cursor - An opaque cursor string from a previous response's `nextCursor` to fetch the next page, or `null` to start from the beginning.\n * @param args.orderBy - The field to sort by: `\"_creationTime\"` or `\"status\"`.\n * @param args.order - Sort direction: `\"asc\"` or `\"desc\"` (defaults to `\"desc\"`).\n * @returns An object `{ items, nextCursor }` where `items` is an array of member documents and `nextCursor` is `null` when there are no more pages.\n *\n * @example\n * ```ts\n * const { items, nextCursor } = await ctx.runQuery(\n *   components.auth.groups.memberList,\n *   {\n *     where: { groupId: teamGroupId, status: \"active\" },\n *     limit: 30,\n *     order: \"asc\",\n *   },\n * );\n * ```\n */\nexport const memberList = query({\n  args: {\n    where: v.optional(\n      v.object({\n        groupId: v.optional(v.id(\"Group\")),\n        userId: v.optional(v.id(\"User\")),\n        roleId: v.optional(v.string()),\n        status: v.optional(v.string()),\n      }),\n    ),\n    limit: v.optional(v.number()),\n    cursor: v.optional(v.union(v.string(), v.null())),\n    orderBy: v.optional(\n      v.union(v.literal(\"_creationTime\"), v.literal(\"status\")),\n    ),\n    order: v.optional(v.union(v.literal(\"asc\"), v.literal(\"desc\"))),\n  },\n  returns: vPaginated(vGroupMemberDoc),\n  handler: async (ctx, args) => {\n    const where = args.where ?? {};\n    const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);\n    const order = args.order ?? \"desc\";\n\n    let q;\n    if (where.groupId !== undefined && where.userId !== undefined) {\n      q = ctx.db\n        .query(\"GroupMember\")\n        .withIndex(\"group_id_user_id\", (idx) =>\n          idx.eq(\"groupId\", where.groupId!).eq(\"userId\", where.userId!),\n        );\n      if (where.status !== undefined) {\n        q = q.filter((f) => f.eq(f.field(\"status\"), where.status!));\n      }\n    } else if (where.groupId !== undefined && where.status !== undefined) {\n      q = ctx.db\n        .query(\"GroupMember\")\n        .withIndex(\"group_id_status\", (idx) =>\n          idx.eq(\"groupId\", where.groupId!).eq(\"status\", where.status!),\n        );\n    } else if (where.groupId !== undefined) {\n      q = ctx.db\n        .query(\"GroupMember\")\n        .withIndex(\"group_id\", (idx) => idx.eq(\"groupId\", where.groupId!));\n    } else if (where.userId !== undefined) {\n      q = ctx.db\n        .query(\"GroupMember\")\n        .withIndex(\"user_id\", (idx) => idx.eq(\"userId\", where.userId!));\n      if (where.status !== undefined) {\n        q = q.filter((f) => f.eq(f.field(\"status\"), where.status!));\n      }\n    } else {\n      q = ctx.db.query(\"GroupMember\");\n      if (where.status !== undefined) {\n        q = q.filter((f) => f.eq(f.field(\"status\"), where.status!));\n      }\n    }\n\n    q = q.order(order);\n\n    let all = await q.collect();\n    if (where.roleId !== undefined) {\n      all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId!));\n    }\n    let startIdx = 0;\n    if (args.cursor) {\n      const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);\n      if (cursorIdx !== -1) {\n        startIdx = cursorIdx + 1;\n      }\n    }\n    const page = all.slice(startIdx, startIdx + limit + 1);\n    const hasMore = page.length > limit;\n    const items = hasMore ? page.slice(0, limit) : page;\n    const nextCursor = hasMore ? items[items.length - 1]._id : null;\n    return { items, nextCursor };\n  },\n});\n\n/**\n * Look up a specific user's membership in a specific group.\n *\n * Uses the `group_id_user_id` compound index for an efficient exact-match\n * lookup. Returns `null` if the user is not a member of the group. Unlike\n * {@link memberResolve}, this does **not** walk the group hierarchy — it\n * checks only the specified group.\n *\n * @param args.groupId - The `Id<\"Group\">` of the group to check.\n * @param args.userId - The `Id<\"User\">` of the user whose membership to look up.\n * @returns The member document or `null` if the user is not a direct member of the group.\n *\n * @example\n * ```ts\n * const member = await ctx.runQuery(\n *   components.auth.groups.memberGetByGroupAndUser,\n *   { groupId: teamGroupId, userId: currentUserId },\n * );\n * if (member !== null) {\n *   console.log(\"User has roles:\", member.roleIds);\n * }\n * ```\n */\nexport const memberGetByGroupAndUser = query({\n  args: { groupId: v.id(\"Group\"), userId: v.id(\"User\") },\n  returns: v.union(vGroupMemberDoc, v.null()),\n  handler: async (ctx, { groupId, userId }) => {\n    return await ctx.db\n      .query(\"GroupMember\")\n      .withIndex(\"group_id_user_id\", (q) =>\n        q.eq(\"groupId\", groupId).eq(\"userId\", userId),\n      )\n      .unique();\n  },\n});\n\n/**\n * Resolve a user's membership by walking the group hierarchy from the\n * requested group up to the root. Returns the first matching membership\n * found, enabling inherited (ancestor-level) access checks.\n *\n * The traversal walks from `groupId` to its `parentGroupId`, then to the\n * parent's parent, and so on, up to `maxDepth` levels (default 32). It\n * stops at the first group where the user has a membership record. Cycle\n * detection prevents infinite loops if the hierarchy is malformed.\n *\n * When `ancestry` is `true`, the response includes a `traversedGroupIds`\n * array showing the full path that was walked (useful for debugging or\n * audit trails).\n *\n * This runs entirely inside the component (no cross-component RPCs per level).\n *\n * @param args.userId - The `Id<\"User\">` of the user whose membership to resolve.\n * @param args.groupId - The `Id<\"Group\">` to start the upward traversal from.\n * @param args.maxDepth - Optional maximum number of parent levels to traverse (defaults to 32). Set to `0` to check only the exact group.\n * @param args.ancestry - When `true`, the response includes the `traversedGroupIds` array showing all group IDs visited during the walk.\n * @returns An object with:\n *   - `membership` — the member document at the matched group, or `null` if none was found.\n *   - `matchedGroupId` — the ID of the group where membership was found, or `null`.\n *   - `depth` — how many levels above `groupId` the match was found (0 = direct), or `null` if not found.\n *   - `isDirect` — `true` when `depth === 0`.\n *   - `isInherited` — `true` when `depth > 0`.\n *   - `traversedGroupIds` — (only when `ancestry` is `true`) array of group IDs visited.\n *\n * @example\n * ```ts\n * const result = await ctx.runQuery(\n *   components.auth.groups.memberResolve,\n *   {\n *     userId: currentUserId,\n *     groupId: subTeamGroupId,\n *     maxDepth: 5,\n *     ancestry: true,\n *   },\n * );\n * if (result.membership !== null) {\n *   console.log(\n *     result.isDirect ? \"Direct member\" : `Inherited from depth ${result.depth}`,\n *   );\n * }\n * ```\n */\nexport const memberResolve = query({\n  args: {\n    userId: v.id(\"User\"),\n    groupId: v.id(\"Group\"),\n    maxDepth: v.optional(v.number()),\n    ancestry: v.optional(v.boolean()),\n  },\n  returns: v.object({\n    membership: v.union(vGroupMemberDoc, v.null()),\n    matchedGroupId: v.union(v.id(\"Group\"), v.null()),\n    depth: v.union(v.number(), v.null()),\n    isDirect: v.boolean(),\n    isInherited: v.boolean(),\n    traversedGroupIds: v.optional(v.array(v.id(\"Group\"))),\n  }),\n  handler: async (ctx, args) => {\n    const maxDepth = Math.max(0, Math.floor(args.maxDepth ?? 32));\n    const includeAncestry = args.ancestry ?? false;\n    const visited = new Set<string>();\n    const traversedGroupIds: Id<\"Group\">[] = [];\n    let currentGroupId: Id<\"Group\"> | undefined = args.groupId;\n    let depth = 0;\n\n    while (currentGroupId !== undefined && depth <= maxDepth) {\n      if (visited.has(currentGroupId)) break;\n      visited.add(currentGroupId);\n      if (includeAncestry) traversedGroupIds.push(currentGroupId);\n\n      const membership = await ctx.db\n        .query(\"GroupMember\")\n        .withIndex(\"group_id_user_id\", (q) =>\n          q.eq(\"groupId\", currentGroupId!).eq(\"userId\", args.userId),\n        )\n        .unique();\n\n      if (membership !== null) {\n        return {\n          membership,\n          matchedGroupId: currentGroupId,\n          depth,\n          isDirect: depth === 0,\n          isInherited: depth > 0,\n          ...(includeAncestry ? { traversedGroupIds } : {}),\n        };\n      }\n\n      const groupDoc: { parentGroupId?: Id<\"Group\"> } | null =\n        await ctx.db.get(currentGroupId);\n      if (!groupDoc?.parentGroupId) break;\n      currentGroupId = groupDoc.parentGroupId;\n      depth++;\n    }\n\n    return {\n      membership: null,\n      matchedGroupId: null,\n      depth: null,\n      isDirect: false,\n      isInherited: false,\n      ...(includeAncestry ? { traversedGroupIds } : {}),\n    };\n  },\n});\n\n/**\n * Remove a member from a group by permanently deleting the member record.\n *\n * This is a hard delete — the `GroupMember` document is removed from the\n * database entirely. If you need soft-delete semantics, use\n * {@link memberUpdate} to set the `status` field instead.\n *\n * @param args.memberId - The `Id<\"GroupMember\">` of the member record to delete.\n * @returns `null` on success.\n *\n * @example\n * ```ts\n * await ctx.runMutation(components.auth.groups.memberRemove, {\n *   memberId: memberToRemoveId,\n * });\n * ```\n */\nexport const memberRemove = mutation({\n  args: { memberId: v.id(\"GroupMember\") },\n  returns: v.null(),\n  handler: async (ctx, { memberId }) => {\n    await ctx.db.delete(\"GroupMember\", memberId);\n    return null;\n  },\n});\n\n/**\n * Update a member record's mutable fields such as `roleIds`, `status`, and\n * `extend`.\n *\n * Uses `db.patch` under the hood, so only the fields present in `data` are\n * modified — all other fields on the member document are left unchanged.\n *\n * @param args.memberId - The `Id<\"GroupMember\">` of the member record to update.\n * @param args.data - A partial object of fields to patch. Supported keys include `roleIds`, `status`, and `extend`.\n * @returns `null` on success.\n *\n * @example\n * ```ts\n * await ctx.runMutation(components.auth.groups.memberUpdate, {\n *   memberId: existingMemberId,\n *   data: {\n *     roleIds: [\"admin\", \"editor\"],\n *     status: \"active\",\n *   },\n * });\n * ```\n */\nexport const memberUpdate = mutation({\n  args: { memberId: v.id(\"GroupMember\"), data: v.any() },\n  returns: v.null(),\n  handler: async (ctx, { memberId, data }) => {\n    await ctx.db.patch(\"GroupMember\", memberId, data);\n    return null;\n  },\n});\n\n// ============================================================================\n// Invites\n// ============================================================================\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,MAAa,YAAY,SAAS;CAChC,MAAM;EACJ,SAAS,EAAE,GAAG,QAAQ;EACtB,QAAQ,EAAE,GAAG,OAAO;EACpB,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;EACxC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC9B,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;EAC5B;CACD,SAAS,EAAE,GAAG,cAAc;CAC5B,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,qBAAqB,MAAM,IAAI,GAClC,MAAM,cAAc,CACpB,UAAU,qBAAqB,MAC9B,EAAE,GAAG,WAAW,KAAK,QAAQ,CAAC,GAAG,UAAU,KAAK,OAAO,CACxD,CACA,QAAQ;AACX,MAAI,uBAAuB,KACzB,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACT,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,kBAAkB,mBAAmB;GACtC,CAAC;AAEJ,SAAO,MAAM,IAAI,GAAG,OAAO,eAAe,KAAK;;CAElD,CAAC;;;;;;;;;;;;;;;;;;;;AAqBF,MAAa,YAAY,MAAM;CAC7B,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE;CACvC,SAAS,EAAE,MAAM,iBAAiB,EAAE,MAAM,CAAC;CAC3C,SAAS,OAAO,KAAK,EAAE,eAAe;AACpC,SAAO,MAAM,IAAI,GAAG,IAAI,eAAe,SAAS;;CAEnD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCF,MAAa,aAAa,MAAM;CAC9B,MAAM;EACJ,OAAO,EAAE,SACP,EAAE,OAAO;GACP,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;GAClC,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;GAChC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC9B,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC/B,CAAC,CACH;EACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;EACjD,SAAS,EAAE,SACT,EAAE,MAAM,EAAE,QAAQ,gBAAgB,EAAE,EAAE,QAAQ,SAAS,CAAC,CACzD;EACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EAChE;CACD,SAAS,WAAW,gBAAgB;CACpC,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,QAAQ,KAAK,SAAS,EAAE;EAC9B,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAC1D,MAAM,QAAQ,KAAK,SAAS;EAE5B,IAAI;AACJ,MAAI,MAAM,YAAY,UAAa,MAAM,WAAW,QAAW;AAC7D,OAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,qBAAqB,QAC9B,IAAI,GAAG,WAAW,MAAM,QAAS,CAAC,GAAG,UAAU,MAAM,OAAQ,CAC9D;AACH,OAAI,MAAM,WAAW,OACnB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,SAAS,EAAE,MAAM,OAAQ,CAAC;aAEpD,MAAM,YAAY,UAAa,MAAM,WAAW,OACzD,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,oBAAoB,QAC7B,IAAI,GAAG,WAAW,MAAM,QAAS,CAAC,GAAG,UAAU,MAAM,OAAQ,CAC9D;WACM,MAAM,YAAY,OAC3B,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,aAAa,QAAQ,IAAI,GAAG,WAAW,MAAM,QAAS,CAAC;WAC3D,MAAM,WAAW,QAAW;AACrC,OAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,YAAY,QAAQ,IAAI,GAAG,UAAU,MAAM,OAAQ,CAAC;AACjE,OAAI,MAAM,WAAW,OACnB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,SAAS,EAAE,MAAM,OAAQ,CAAC;SAExD;AACL,OAAI,IAAI,GAAG,MAAM,cAAc;AAC/B,OAAI,MAAM,WAAW,OACnB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,SAAS,EAAE,MAAM,OAAQ,CAAC;;AAI/D,MAAI,EAAE,MAAM,MAAM;EAElB,IAAI,MAAM,MAAM,EAAE,SAAS;AAC3B,MAAI,MAAM,WAAW,OACnB,OAAM,IAAI,QAAQ,SAAS,IAAI,WAAW,EAAE,EAAE,SAAS,MAAM,OAAQ,CAAC;EAExE,IAAI,WAAW;AACf,MAAI,KAAK,QAAQ;GACf,MAAM,YAAY,IAAI,WAAW,QAAQ,IAAI,QAAQ,KAAK,OAAO;AACjE,OAAI,cAAc,GAChB,YAAW,YAAY;;EAG3B,MAAM,OAAO,IAAI,MAAM,UAAU,WAAW,QAAQ,EAAE;EACtD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG;AAE/C,SAAO;GAAE;GAAO,YADG,UAAU,MAAM,MAAM,SAAS,GAAG,MAAM;GAC/B;;CAE/B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;AAyBF,MAAa,0BAA0B,MAAM;CAC3C,MAAM;EAAE,SAAS,EAAE,GAAG,QAAQ;EAAE,QAAQ,EAAE,GAAG,OAAO;EAAE;CACtD,SAAS,EAAE,MAAM,iBAAiB,EAAE,MAAM,CAAC;CAC3C,SAAS,OAAO,KAAK,EAAE,SAAS,aAAa;AAC3C,SAAO,MAAM,IAAI,GACd,MAAM,cAAc,CACpB,UAAU,qBAAqB,MAC9B,EAAE,GAAG,WAAW,QAAQ,CAAC,GAAG,UAAU,OAAO,CAC9C,CACA,QAAQ;;CAEd,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDF,MAAa,gBAAgB,MAAM;CACjC,MAAM;EACJ,QAAQ,EAAE,GAAG,OAAO;EACpB,SAAS,EAAE,GAAG,QAAQ;EACtB,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EAChC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;EAClC;CACD,SAAS,EAAE,OAAO;EAChB,YAAY,EAAE,MAAM,iBAAiB,EAAE,MAAM,CAAC;EAC9C,gBAAgB,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,MAAM,CAAC;EAChD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC;EACpC,UAAU,EAAE,SAAS;EACrB,aAAa,EAAE,SAAS;EACxB,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;EACtD,CAAC;CACF,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,GAAG,CAAC;EAC7D,MAAM,kBAAkB,KAAK,YAAY;EACzC,MAAM,0BAAU,IAAI,KAAa;EACjC,MAAM,oBAAmC,EAAE;EAC3C,IAAI,iBAA0C,KAAK;EACnD,IAAI,QAAQ;AAEZ,SAAO,mBAAmB,UAAa,SAAS,UAAU;AACxD,OAAI,QAAQ,IAAI,eAAe,CAAE;AACjC,WAAQ,IAAI,eAAe;AAC3B,OAAI,gBAAiB,mBAAkB,KAAK,eAAe;GAE3D,MAAM,aAAa,MAAM,IAAI,GAC1B,MAAM,cAAc,CACpB,UAAU,qBAAqB,MAC9B,EAAE,GAAG,WAAW,eAAgB,CAAC,GAAG,UAAU,KAAK,OAAO,CAC3D,CACA,QAAQ;AAEX,OAAI,eAAe,KACjB,QAAO;IACL;IACA,gBAAgB;IAChB;IACA,UAAU,UAAU;IACpB,aAAa,QAAQ;IACrB,GAAI,kBAAkB,EAAE,mBAAmB,GAAG,EAAE;IACjD;GAGH,MAAM,WACJ,MAAM,IAAI,GAAG,IAAI,eAAe;AAClC,OAAI,CAAC,UAAU,cAAe;AAC9B,oBAAiB,SAAS;AAC1B;;AAGF,SAAO;GACL,YAAY;GACZ,gBAAgB;GAChB,OAAO;GACP,UAAU;GACV,aAAa;GACb,GAAI,kBAAkB,EAAE,mBAAmB,GAAG,EAAE;GACjD;;CAEJ,CAAC;;;;;;;;;;;;;;;;;;AAmBF,MAAa,eAAe,SAAS;CACnC,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE;CACvC,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,eAAe;AACpC,QAAM,IAAI,GAAG,OAAO,eAAe,SAAS;AAC5C,SAAO;;CAEV,CAAC;;;;;;;;;;;;;;;;;;;;;;;AAwBF,MAAa,eAAe,SAAS;CACnC,MAAM;EAAE,UAAU,EAAE,GAAG,cAAc;EAAE,MAAM,EAAE,KAAK;EAAE;CACtD,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,UAAU,WAAW;AAC1C,QAAM,IAAI,GAAG,MAAM,eAAe,UAAU,KAAK;AACjD,SAAO;;CAEV,CAAC"}