@robelest/convex-auth 0.0.4-preview.25 → 0.0.4-preview.28

package/dist/server/mutations/retrieve.d.ts

@@ -1,33 +0,0 @@
-import { Doc, MutationCtx } from "../types.js";
-import { Config, GetProviderOrThrowFunc } from "../crypto.js";
-import { Fx } from "@robelest/fx";
-import { GenericActionCtx, GenericDataModel } from "convex/server";
-import * as convex_values26 from "convex/values";
-import { Infer } from "convex/values";
-
-//#region src/server/mutations/retrieve.d.ts
-declare const retrieveAccountWithCredentialsArgs: convex_values26.VObject<{
-  provider: string;
-  account: {
-    secret?: string | undefined;
-    id: string;
-  };
-}, {
-  provider: convex_values26.VString<string, "required">;
-  account: convex_values26.VObject<{
-    secret?: string | undefined;
-    id: string;
-  }, {
-    id: convex_values26.VString<string, "required">;
-    secret: convex_values26.VString<string | undefined, "optional">;
-  }, "required", "id" | "secret">;
-}, "required", "provider" | "account" | "account.id" | "account.secret">;
-type ReturnType = "InvalidAccountId" | "TooManyFailedAttempts" | "InvalidSecret" | {
-  account: Doc<"Account">;
-  user: Doc<"User">;
-};
-declare function retrieveAccountWithCredentialsImpl(ctx: MutationCtx, args: Infer<typeof retrieveAccountWithCredentialsArgs>, getProviderOrThrow: GetProviderOrThrowFunc, config: Config): Fx<ReturnType>;
-declare const callRetrieveAccountWithCredentials: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>, args: Infer<typeof retrieveAccountWithCredentialsArgs>) => Promise<ReturnType>;
-//#endregion
-export { callRetrieveAccountWithCredentials, retrieveAccountWithCredentialsArgs, retrieveAccountWithCredentialsImpl };
-//# sourceMappingURL=retrieve.d.ts.map

package/dist/server/mutations/retrieve.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"retrieve.d.ts","names":[],"sources":["../../../src/server/mutations/retrieve.ts"],"mappings":";;;;;;;;cAea,kCAAA,kBAAkC,OAAA;;;;;;;YAG7C,eAAA,CAAA,OAAA;;;;;;;;;KAEG,UAAA;EAIC,OAAA,EAAS,GAAA;EAAgB,IAAA,EAAM,GAAA;AAAA;AAAA,iBAErB,kCAAA,CACd,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,kCAAA,GACnB,kBAAA,EAAoB,sBAAA,EACpB,MAAA,EAAQ,MAAA,GACP,EAAA,CAAG,UAAA;AAAA,cAiEO,kCAAA,qBACO,gBAAA,EAElB,GAAA,EAAK,gBAAA,CAAiB,SAAA,GACtB,IAAA,EAAM,KAAA,QAAa,kCAAA,MAClB,OAAA,CAAQ,UAAA"}

package/dist/server/mutations/retrieve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"retrieve.js","names":["Provider.verify","v"],"sources":["../../../src/server/mutations/retrieve.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\nimport type { GenericActionCtx, GenericDataModel } from \"convex/server\";\nimport { Infer, v } from \"convex/values\";\n\nimport * as Provider from \"../crypto\";\nimport { authDb } from \"../db\";\nimport {\n  isSignInRateLimited,\n  recordFailedSignIn,\n  resetSignInRateLimit,\n} from \"../limits\";\nimport { Doc, MutationCtx } from \"../types\";\nimport { LOG_LEVELS, logWithLevel, maybeRedact } from \"../utils\";\nimport { AUTH_STORE_REF } from \"./store/refs\";\n\nexport const retrieveAccountWithCredentialsArgs = v.object({\n  provider: v.string(),\n  account: v.object({ id: v.string(), secret: v.optional(v.string()) }),\n});\n\ntype ReturnType =\n  | \"InvalidAccountId\"\n  | \"TooManyFailedAttempts\"\n  | \"InvalidSecret\"\n  | { account: Doc<\"Account\">; user: Doc<\"User\"> };\n\nexport function retrieveAccountWithCredentialsImpl(\n  ctx: MutationCtx,\n  args: Infer<typeof retrieveAccountWithCredentialsArgs>,\n  getProviderOrThrow: Provider.GetProviderOrThrowFunc,\n  config: Provider.Config,\n): Fx<ReturnType> {\n  const { provider: providerId, account } = args;\n  const db = authDb(ctx, config);\n\n  logWithLevel(LOG_LEVELS.DEBUG, \"retrieveAccountWithCredentialsImpl args:\", {\n    provider: providerId,\n    account: { id: account.id, secret: maybeRedact(account.secret ?? \"\") },\n  });\n\n  return Fx.gen(function* () {\n    const existingAccount = yield* Fx.promise(\n      () =>\n        db.accounts.get(\n          providerId,\n          account.id,\n        ) as Promise<Doc<\"Account\"> | null>,\n    );\n    if (existingAccount === null) {\n      return \"InvalidAccountId\" as const;\n    }\n\n    if (account.secret !== undefined) {\n      const limited = yield* isSignInRateLimited(\n        ctx,\n        existingAccount._id,\n        config,\n      );\n      if (limited) {\n        return \"TooManyFailedAttempts\" as const;\n      }\n\n      const valid = yield* Provider.verify(\n        getProviderOrThrow(providerId),\n        account.secret,\n        existingAccount.secret ?? \"\",\n      );\n      if (!valid) {\n        yield* recordFailedSignIn(ctx, existingAccount._id, config);\n        return \"InvalidSecret\" as const;\n      }\n\n      yield* resetSignInRateLimit(ctx, existingAccount._id, config);\n    }\n\n    const user = yield* Fx.promise(\n      () =>\n        db.users.getById(existingAccount.userId) as Promise<Doc<\"User\"> | null>,\n    );\n    if (user === null) {\n      logWithLevel(\n        LOG_LEVELS.ERROR,\n        `Account ${existingAccount._id} is linked to missing user ${existingAccount.userId}`,\n      );\n      return \"InvalidAccountId\" as const;\n    }\n\n    return { account: existingAccount, user } as ReturnType;\n  }).pipe(\n    Fx.fold({\n      ok: (v) => v as ReturnType,\n      err: () => \"InvalidAccountId\" as ReturnType,\n    }),\n  );\n}\n\nexport const callRetrieveAccountWithCredentials = async <\n  DataModel extends GenericDataModel,\n>(\n  ctx: GenericActionCtx<DataModel>,\n  args: Infer<typeof retrieveAccountWithCredentialsArgs>,\n): Promise<ReturnType> => {\n  return ctx.runMutation(AUTH_STORE_REF, {\n    args: {\n      type: \"retrieveAccountWithCredentials\",\n      ...args,\n    },\n  });\n};\n"],"mappings":";;;;;;;;;AAeA,MAAa,qCAAqC,EAAE,OAAO;CACzD,UAAU,EAAE,QAAQ;CACpB,SAAS,EAAE,OAAO;EAAE,IAAI,EAAE,QAAQ;EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;EAAE,CAAC;CACtE,CAAC;AAQF,SAAgB,mCACd,KACA,MACA,oBACA,QACgB;CAChB,MAAM,EAAE,UAAU,YAAY,YAAY;CAC1C,MAAM,KAAK,OAAO,KAAK,OAAO;AAE9B,cAAa,WAAW,OAAO,4CAA4C;EACzE,UAAU;EACV,SAAS;GAAE,IAAI,QAAQ;GAAI,QAAQ,YAAY,QAAQ,UAAU,GAAG;GAAE;EACvE,CAAC;AAEF,QAAO,GAAG,IAAI,aAAa;EACzB,MAAM,kBAAkB,OAAO,GAAG,cAE9B,GAAG,SAAS,IACV,YACA,QAAQ,GACT,CACJ;AACD,MAAI,oBAAoB,KACtB,QAAO;AAGT,MAAI,QAAQ,WAAW,QAAW;AAMhC,OALgB,OAAO,oBACrB,KACA,gBAAgB,KAChB,OACD,CAEC,QAAO;AAQT,OAAI,EALU,OAAOA,OACnB,mBAAmB,WAAW,EAC9B,QAAQ,QACR,gBAAgB,UAAU,GAC3B,GACW;AACV,WAAO,mBAAmB,KAAK,gBAAgB,KAAK,OAAO;AAC3D,WAAO;;AAGT,UAAO,qBAAqB,KAAK,gBAAgB,KAAK,OAAO;;EAG/D,MAAM,OAAO,OAAO,GAAG,cAEnB,GAAG,MAAM,QAAQ,gBAAgB,OAAO,CAC3C;AACD,MAAI,SAAS,MAAM;AACjB,gBACE,WAAW,OACX,WAAW,gBAAgB,IAAI,6BAA6B,gBAAgB,SAC7E;AACD,UAAO;;AAGT,SAAO;GAAE,SAAS;GAAiB;GAAM;GACzC,CAAC,KACD,GAAG,KAAK;EACN,KAAK,QAAMC;EACX,WAAW;EACZ,CAAC,CACH;;AAGH,MAAa,qCAAqC,OAGhD,KACA,SACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}

package/dist/server/mutations/signature.d.ts

@@ -1,21 +0,0 @@
-import { MutationCtx } from "../types.js";
-import { Config } from "../crypto.js";
-import { Fx } from "@robelest/fx";
-import { GenericActionCtx, GenericDataModel } from "convex/server";
-import * as convex_values112 from "convex/values";
-import { ConvexError, Infer } from "convex/values";
-
-//#region src/server/mutations/signature.d.ts
-declare const verifierSignatureArgs: convex_values112.VObject<{
-  verifier: string;
-  signature: string;
-}, {
-  verifier: convex_values112.VString<string, "required">;
-  signature: convex_values112.VString<string, "required">;
-}, "required", "verifier" | "signature">;
-type ReturnType = void;
-declare function verifierSignatureImpl(ctx: MutationCtx, args: Infer<typeof verifierSignatureArgs>, config: Config): Fx<ReturnType, ConvexError<any>>;
-declare const callVerifierSignature: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>, args: Infer<typeof verifierSignatureArgs>) => Promise<void>;
-//#endregion
-export { callVerifierSignature, verifierSignatureArgs, verifierSignatureImpl };
-//# sourceMappingURL=signature.d.ts.map

package/dist/server/mutations/signature.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature.d.ts","names":[],"sources":["../../../src/server/mutations/signature.ts"],"mappings":";;;;;;;;cAUa,qBAAA,mBAAqB,OAAA;;;;YAGhC,gBAAA,CAAA,OAAA;;;KAEG,UAAA;AAAA,iBAEW,qBAAA,CACd,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,qBAAA,GACnB,MAAA,EAAQ,MAAA,GACP,EAAA,CAAG,UAAA,EAAY,WAAA;AAAA,cAyBL,qBAAA,qBAAiD,gBAAA,EAC5D,GAAA,EAAK,gBAAA,CAAiB,SAAA,GACtB,IAAA,EAAM,KAAA,QAAa,qBAAA,MAClB,OAAA"}

package/dist/server/mutations/signature.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature.js","names":[],"sources":["../../../src/server/mutations/signature.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\nimport { Cv } from \"@robelest/fx/convex\";\nimport type { GenericActionCtx, GenericDataModel } from \"convex/server\";\nimport { ConvexError, GenericId, Infer, v } from \"convex/values\";\n\nimport * as Provider from \"../crypto\";\nimport { authDb } from \"../db\";\nimport { MutationCtx } from \"../types\";\nimport { AUTH_STORE_REF } from \"./store/refs\";\n\nexport const verifierSignatureArgs = v.object({\n  verifier: v.string(),\n  signature: v.string(),\n});\n\ntype ReturnType = void;\n\nexport function verifierSignatureImpl(\n  ctx: MutationCtx,\n  args: Infer<typeof verifierSignatureArgs>,\n  config: Provider.Config,\n): Fx<ReturnType, ConvexError<any>> {\n  return Fx.gen(function* () {\n    const { verifier, signature } = args;\n    const db = authDb(ctx, config);\n    const verifierDoc = yield* Fx.from({\n      ok: () => db.verifiers.getById(verifier as GenericId<\"AuthVerifier\">),\n      err: () =>\n        Cv.error({\n          code: \"INVALID_VERIFIER\",\n          message: \"Invalid or expired verifier.\",\n        }),\n    }).pipe(\n      Fx.chain((doc) =>\n        doc === null\n          ? Cv.fail({\n              code: \"INVALID_VERIFIER\",\n              message: \"Invalid or expired verifier.\",\n            })\n          : Fx.succeed(doc),\n      ),\n    );\n    yield* Fx.promise(() => db.verifiers.patch(verifierDoc._id, { signature }));\n  });\n}\n\nexport const callVerifierSignature = async <DataModel extends GenericDataModel>(\n  ctx: GenericActionCtx<DataModel>,\n  args: Infer<typeof verifierSignatureArgs>,\n): Promise<void> => {\n  return ctx.runMutation(AUTH_STORE_REF, {\n    args: {\n      type: \"verifierSignature\",\n      ...args,\n    },\n  });\n};\n"],"mappings":";;;;;;;AAUA,MAAa,wBAAwB,EAAE,OAAO;CAC5C,UAAU,EAAE,QAAQ;CACpB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAIF,SAAgB,sBACd,KACA,MACA,QACkC;AAClC,QAAO,GAAG,IAAI,aAAa;EACzB,MAAM,EAAE,UAAU,cAAc;EAChC,MAAM,KAAK,OAAO,KAAK,OAAO;EAC9B,MAAM,cAAc,OAAO,GAAG,KAAK;GACjC,UAAU,GAAG,UAAU,QAAQ,SAAsC;GACrE,WACE,GAAG,MAAM;IACP,MAAM;IACN,SAAS;IACV,CAAC;GACL,CAAC,CAAC,KACD,GAAG,OAAO,QACR,QAAQ,OACJ,GAAG,KAAK;GACN,MAAM;GACN,SAAS;GACV,CAAC,GACF,GAAG,QAAQ,IAAI,CACpB,CACF;AACD,SAAO,GAAG,cAAc,GAAG,UAAU,MAAM,YAAY,KAAK,EAAE,WAAW,CAAC,CAAC;GAC3E;;AAGJ,MAAa,wBAAwB,OACnC,KACA,SACkB;AAClB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}

package/dist/server/mutations/signin.d.ts

@@ -1,22 +0,0 @@
-import { MutationCtx, SessionInfo } from "../types.js";
-import { Config } from "../crypto.js";
-import { GenericActionCtx, GenericDataModel } from "convex/server";
-import * as convex_values100 from "convex/values";
-import { Infer } from "convex/values";
-
-//#region src/server/mutations/signin.d.ts
-declare const signInArgs: convex_values100.VObject<{
-  sessionId?: string | undefined;
-  userId: string;
-  generateTokens: boolean;
-}, {
-  userId: convex_values100.VString<string, "required">;
-  sessionId: convex_values100.VString<string | undefined, "optional">;
-  generateTokens: convex_values100.VBoolean<boolean, "required">;
-}, "required", "userId" | "sessionId" | "generateTokens">;
-type ReturnType = SessionInfo;
-declare function signInImpl(ctx: MutationCtx, args: Infer<typeof signInArgs>, config: Config): Promise<ReturnType>;
-declare const callSignIn: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>, args: Infer<typeof signInArgs>) => Promise<ReturnType>;
-//#endregion
-export { callSignIn, signInArgs, signInImpl };
-//# sourceMappingURL=signin.d.ts.map

package/dist/server/mutations/signin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signin.d.ts","names":[],"sources":["../../../src/server/mutations/signin.ts"],"mappings":";;;;;;;cAYa,UAAA,mBAAU,OAAA;;;;;UAIrB,gBAAA,CAAA,OAAA;;;;KAEG,UAAA,GAAa,WAAA;AAAA,iBAEI,UAAA,CACpB,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,UAAA,GACnB,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAmBE,UAAA,qBAAsC,gBAAA,EACjD,GAAA,EAAK,gBAAA,CAAiB,SAAA,GACtB,IAAA,EAAM,KAAA,QAAa,UAAA,MAClB,OAAA,CAAQ,UAAA"}

package/dist/server/mutations/signin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signin.js","names":[],"sources":["../../../src/server/mutations/signin.ts"],"sourcesContent":["import type { GenericActionCtx, GenericDataModel } from \"convex/server\";\nimport { GenericId, Infer, v } from \"convex/values\";\n\nimport * as Provider from \"../crypto\";\nimport {\n  createNewAndDeleteExistingSession,\n  maybeGenerateTokensForSession,\n} from \"../sessions\";\nimport { MutationCtx, SessionInfo } from \"../types\";\nimport { LOG_LEVELS, logWithLevel } from \"../utils\";\nimport { AUTH_STORE_REF } from \"./store/refs\";\n\nexport const signInArgs = v.object({\n  userId: v.string(),\n  sessionId: v.optional(v.string()),\n  generateTokens: v.boolean(),\n});\n\ntype ReturnType = SessionInfo;\n\nexport async function signInImpl(\n  ctx: MutationCtx,\n  args: Infer<typeof signInArgs>,\n  config: Provider.Config,\n): Promise<ReturnType> {\n  logWithLevel(LOG_LEVELS.DEBUG, \"signInImpl args:\", args);\n  const { userId, sessionId: existingSessionId, generateTokens } = args;\n  const typedUserId = userId as GenericId<\"User\">;\n  const typedExistingSessionId = existingSessionId as\n    | GenericId<\"Session\">\n    | undefined;\n  const sessionId =\n    typedExistingSessionId ??\n    (await createNewAndDeleteExistingSession(ctx, config, typedUserId));\n  return await maybeGenerateTokensForSession(\n    ctx,\n    config,\n    typedUserId,\n    sessionId,\n    generateTokens,\n  );\n}\n\nexport const callSignIn = async <DataModel extends GenericDataModel>(\n  ctx: GenericActionCtx<DataModel>,\n  args: Infer<typeof signInArgs>,\n): Promise<ReturnType> => {\n  return ctx.runMutation(AUTH_STORE_REF, {\n    args: {\n      type: \"signIn\",\n      ...args,\n    },\n  });\n};\n"],"mappings":";;;;;;AAYA,MAAa,aAAa,EAAE,OAAO;CACjC,QAAQ,EAAE,QAAQ;CAClB,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,gBAAgB,EAAE,SAAS;CAC5B,CAAC;AAIF,eAAsB,WACpB,KACA,MACA,QACqB;AACrB,cAAa,WAAW,OAAO,oBAAoB,KAAK;CACxD,MAAM,EAAE,QAAQ,WAAW,mBAAmB,mBAAmB;CACjE,MAAM,cAAc;AAOpB,QAAO,MAAM,8BACX,KACA,QACA,aAT6B,qBAK5B,MAAM,kCAAkC,KAAK,QAAQ,YAAY,EAMlE,eACD;;AAGH,MAAa,aAAa,OACxB,KACA,SACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}

package/dist/server/mutations/signout.d.ts

@@ -1,16 +0,0 @@
-import { MutationCtx } from "../types.js";
-import { Config } from "../crypto.js";
-import { Fx } from "@robelest/fx";
-import { GenericActionCtx, GenericDataModel } from "convex/server";
-import { GenericId } from "convex/values";
-
-//#region src/server/mutations/signout.d.ts
-type ReturnType = {
-  userId: GenericId<"User">;
-  sessionId: GenericId<"Session">;
-} | null;
-declare function signOutImpl(ctx: MutationCtx, config: Config): Fx<ReturnType, never>;
-declare const callSignOut: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>) => Promise<void>;
-//#endregion
-export { callSignOut, signOutImpl };
-//# sourceMappingURL=signout.d.ts.map

package/dist/server/mutations/signout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signout.d.ts","names":[],"sources":["../../../src/server/mutations/signout.ts"],"mappings":";;;;;;;KAUK,UAAA;EACH,MAAA,EAAQ,SAAA;EACR,SAAA,EAAW,SAAA;AAAA;AAAA,iBAGG,WAAA,CACd,GAAA,EAAK,WAAA,EACL,MAAA,EAAQ,MAAA,GACP,EAAA,CAAG,UAAA;AAAA,cAgBO,WAAA,qBAAuC,gBAAA,EAClD,GAAA,EAAK,gBAAA,CAAiB,SAAA,MACrB,OAAA"}

package/dist/server/mutations/signout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signout.js","names":[],"sources":["../../../src/server/mutations/signout.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\nimport type { GenericActionCtx, GenericDataModel } from \"convex/server\";\nimport { GenericId } from \"convex/values\";\n\nimport * as Provider from \"../crypto\";\nimport { authDb } from \"../db\";\nimport { deleteSession, getAuthSessionId } from \"../sessions\";\nimport { MutationCtx } from \"../types\";\nimport { AUTH_STORE_REF } from \"./store/refs\";\n\ntype ReturnType = {\n  userId: GenericId<\"User\">;\n  sessionId: GenericId<\"Session\">;\n} | null;\n\nexport function signOutImpl(\n  ctx: MutationCtx,\n  config: Provider.Config,\n): Fx<ReturnType, never> {\n  return Fx.gen(function* () {\n    const db = authDb(ctx, config);\n    const sessionId = yield* Fx.promise(() => getAuthSessionId(ctx));\n    if (sessionId === null) {\n      return null;\n    }\n    const session = yield* Fx.promise(() => db.sessions.getById(sessionId));\n    if (session === null) {\n      return null;\n    }\n    yield* Fx.promise(() => deleteSession(ctx, session, config));\n    return { userId: session.userId, sessionId: session._id };\n  });\n}\n\nexport const callSignOut = async <DataModel extends GenericDataModel>(\n  ctx: GenericActionCtx<DataModel>,\n): Promise<void> => {\n  return ctx.runMutation(AUTH_STORE_REF, {\n    args: {\n      type: \"signOut\",\n    },\n  });\n};\n"],"mappings":";;;;;;AAeA,SAAgB,YACd,KACA,QACuB;AACvB,QAAO,GAAG,IAAI,aAAa;EACzB,MAAM,KAAK,OAAO,KAAK,OAAO;EAC9B,MAAM,YAAY,OAAO,GAAG,cAAc,iBAAiB,IAAI,CAAC;AAChE,MAAI,cAAc,KAChB,QAAO;EAET,MAAM,UAAU,OAAO,GAAG,cAAc,GAAG,SAAS,QAAQ,UAAU,CAAC;AACvE,MAAI,YAAY,KACd,QAAO;AAET,SAAO,GAAG,cAAc,cAAc,KAAK,SAAS,OAAO,CAAC;AAC5D,SAAO;GAAE,QAAQ,QAAQ;GAAQ,WAAW,QAAQ;GAAK;GACzD;;AAGJ,MAAa,cAAc,OACzB,QACkB;AAClB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM,EACJ,MAAM,WACP,EACF,CAAC"}

package/dist/server/mutations/store/refs.d.ts

@@ -1,12 +0,0 @@
-//#region src/server/mutations/store/refs.d.ts
-/**
- * Internal function reference for the library's store dispatch mutation.
- *
- * The package cannot import the consumer app's generated `api` module,
- * so it uses a canonical function reference name that matches the app-level
- * `export const { store } = auth` surface.
- */
-declare const AUTH_STORE_REF: any;
-//#endregion
-export { AUTH_STORE_REF };
-//# sourceMappingURL=refs.d.ts.map

package/dist/server/mutations/store/refs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"refs.d.ts","names":[],"sources":["../../../../src/server/mutations/store/refs.ts"],"mappings":";;AASA;;;;;;cAAa,cAAA"}

package/dist/server/mutations/store/refs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"refs.js","names":[],"sources":["../../../../src/server/mutations/store/refs.ts"],"sourcesContent":["import { makeFunctionReference } from \"convex/server\";\n\n/**\n * Internal function reference for the library's store dispatch mutation.\n *\n * The package cannot import the consumer app's generated `api` module,\n * so it uses a canonical function reference name that matches the app-level\n * `export const { store } = auth` surface.\n */\nexport const AUTH_STORE_REF = makeFunctionReference(\"auth:store\") as any;\n"],"mappings":";;;;;;;;;;AASA,MAAa,iBAAiB,sBAAsB,aAAa"}

package/dist/server/mutations/store.d.ts

@@ -1,306 +0,0 @@
-import { Doc, MutationCtx, SessionInfo } from "../types.js";
-import { Config, GetProviderOrThrowFunc } from "../crypto.js";
-import * as convex_values31 from "convex/values";
-import { Infer } from "convex/values";
-
-//#region src/server/mutations/store.d.ts
-declare const storeArgs: convex_values31.VObject<{
-  args: {
-    sessionId?: string | undefined;
-    type: "signIn";
-    userId: string;
-    generateTokens: boolean;
-  } | {
-    type: "signOut";
-  } | {
-    type: "refreshSession";
-    refreshToken: string;
-  } | {
-    provider?: string | undefined;
-    verifier?: string | undefined;
-    type: "verifyCodeAndSignIn";
-    params: any;
-    generateTokens: boolean;
-    allowExtraProviders: boolean;
-  } | {
-    type: "verifier";
-  } | {
-    type: "verifierSignature";
-    verifier: string;
-    signature: string;
-  } | {
-    accountExtend?: any;
-    type: "userOAuth";
-    provider: string;
-    signature: string;
-    providerAccountId: string;
-    profile: any;
-  } | {
-    phone?: string | undefined;
-    email?: string | undefined;
-    accountId?: string | undefined;
-    type: "createVerificationCode";
-    provider: string;
-    allowExtraProviders: boolean;
-    code: string;
-    expirationTime: number;
-  } | {
-    shouldLinkViaEmail?: boolean | undefined;
-    shouldLinkViaPhone?: boolean | undefined;
-    type: "createAccountFromCredentials";
-    provider: string;
-    profile: any;
-    account: {
-      secret?: string | undefined;
-      id: string;
-    };
-  } | {
-    type: "retrieveAccountWithCredentials";
-    provider: string;
-    account: {
-      secret?: string | undefined;
-      id: string;
-    };
-  } | {
-    type: "modifyAccount";
-    provider: string;
-    account: {
-      id: string;
-      secret: string;
-    };
-  } | {
-    except?: string[] | undefined;
-    type: "invalidateSessions";
-    userId: string;
-  };
-}, {
-  args: convex_values31.VUnion<{
-    sessionId?: string | undefined;
-    type: "signIn";
-    userId: string;
-    generateTokens: boolean;
-  } | {
-    type: "signOut";
-  } | {
-    type: "refreshSession";
-    refreshToken: string;
-  } | {
-    provider?: string | undefined;
-    verifier?: string | undefined;
-    type: "verifyCodeAndSignIn";
-    params: any;
-    generateTokens: boolean;
-    allowExtraProviders: boolean;
-  } | {
-    type: "verifier";
-  } | {
-    type: "verifierSignature";
-    verifier: string;
-    signature: string;
-  } | {
-    accountExtend?: any;
-    type: "userOAuth";
-    provider: string;
-    signature: string;
-    providerAccountId: string;
-    profile: any;
-  } | {
-    phone?: string | undefined;
-    email?: string | undefined;
-    accountId?: string | undefined;
-    type: "createVerificationCode";
-    provider: string;
-    allowExtraProviders: boolean;
-    code: string;
-    expirationTime: number;
-  } | {
-    shouldLinkViaEmail?: boolean | undefined;
-    shouldLinkViaPhone?: boolean | undefined;
-    type: "createAccountFromCredentials";
-    provider: string;
-    profile: any;
-    account: {
-      secret?: string | undefined;
-      id: string;
-    };
-  } | {
-    type: "retrieveAccountWithCredentials";
-    provider: string;
-    account: {
-      secret?: string | undefined;
-      id: string;
-    };
-  } | {
-    type: "modifyAccount";
-    provider: string;
-    account: {
-      id: string;
-      secret: string;
-    };
-  } | {
-    except?: string[] | undefined;
-    type: "invalidateSessions";
-    userId: string;
-  }, [convex_values31.VObject<{
-    sessionId?: string | undefined;
-    type: "signIn";
-    userId: string;
-    generateTokens: boolean;
-  }, {
-    userId: convex_values31.VString<string, "required">;
-    sessionId: convex_values31.VString<string | undefined, "optional">;
-    generateTokens: convex_values31.VBoolean<boolean, "required">;
-    type: convex_values31.VLiteral<"signIn", "required">;
-  }, "required", "type" | "userId" | "sessionId" | "generateTokens">, convex_values31.VObject<{
-    type: "signOut";
-  }, {
-    type: convex_values31.VLiteral<"signOut", "required">;
-  }, "required", "type">, convex_values31.VObject<{
-    type: "refreshSession";
-    refreshToken: string;
-  }, {
-    refreshToken: convex_values31.VString<string, "required">;
-    type: convex_values31.VLiteral<"refreshSession", "required">;
-  }, "required", "type" | "refreshToken">, convex_values31.VObject<{
-    provider?: string | undefined;
-    verifier?: string | undefined;
-    type: "verifyCodeAndSignIn";
-    params: any;
-    generateTokens: boolean;
-    allowExtraProviders: boolean;
-  }, {
-    params: convex_values31.VAny<any, "required", string>;
-    provider: convex_values31.VString<string | undefined, "optional">;
-    verifier: convex_values31.VString<string | undefined, "optional">;
-    generateTokens: convex_values31.VBoolean<boolean, "required">;
-    allowExtraProviders: convex_values31.VBoolean<boolean, "required">;
-    type: convex_values31.VLiteral<"verifyCodeAndSignIn", "required">;
-  }, "required", "type" | "provider" | "params" | "verifier" | "generateTokens" | "allowExtraProviders" | `params.${string}`>, convex_values31.VObject<{
-    type: "verifier";
-  }, {
-    type: convex_values31.VLiteral<"verifier", "required">;
-  }, "required", "type">, convex_values31.VObject<{
-    type: "verifierSignature";
-    verifier: string;
-    signature: string;
-  }, {
-    verifier: convex_values31.VString<string, "required">;
-    signature: convex_values31.VString<string, "required">;
-    type: convex_values31.VLiteral<"verifierSignature", "required">;
-  }, "required", "type" | "verifier" | "signature">, convex_values31.VObject<{
-    accountExtend?: any;
-    type: "userOAuth";
-    provider: string;
-    signature: string;
-    providerAccountId: string;
-    profile: any;
-  }, {
-    provider: convex_values31.VString<string, "required">;
-    providerAccountId: convex_values31.VString<string, "required">;
-    profile: convex_values31.VAny<any, "required", string>;
-    signature: convex_values31.VString<string, "required">;
-    accountExtend: convex_values31.VAny<any, "optional", string>;
-    type: convex_values31.VLiteral<"userOAuth", "required">;
-  }, "required", "type" | "provider" | "signature" | "providerAccountId" | "profile" | "accountExtend" | `profile.${string}` | `accountExtend.${string}`>, convex_values31.VObject<{
-    phone?: string | undefined;
-    email?: string | undefined;
-    accountId?: string | undefined;
-    type: "createVerificationCode";
-    provider: string;
-    allowExtraProviders: boolean;
-    code: string;
-    expirationTime: number;
-  }, {
-    accountId: convex_values31.VString<string | undefined, "optional">;
-    provider: convex_values31.VString<string, "required">;
-    email: convex_values31.VString<string | undefined, "optional">;
-    phone: convex_values31.VString<string | undefined, "optional">;
-    code: convex_values31.VString<string, "required">;
-    expirationTime: convex_values31.VFloat64<number, "required">;
-    allowExtraProviders: convex_values31.VBoolean<boolean, "required">;
-    type: convex_values31.VLiteral<"createVerificationCode", "required">;
-  }, "required", "phone" | "email" | "type" | "provider" | "allowExtraProviders" | "accountId" | "code" | "expirationTime">, convex_values31.VObject<{
-    shouldLinkViaEmail?: boolean | undefined;
-    shouldLinkViaPhone?: boolean | undefined;
-    type: "createAccountFromCredentials";
-    provider: string;
-    profile: any;
-    account: {
-      secret?: string | undefined;
-      id: string;
-    };
-  }, {
-    provider: convex_values31.VString<string, "required">;
-    account: convex_values31.VObject<{
-      secret?: string | undefined;
-      id: string;
-    }, {
-      id: convex_values31.VString<string, "required">;
-      secret: convex_values31.VString<string | undefined, "optional">;
-    }, "required", "id" | "secret">;
-    profile: convex_values31.VAny<any, "required", string>;
-    shouldLinkViaEmail: convex_values31.VBoolean<boolean | undefined, "optional">;
-    shouldLinkViaPhone: convex_values31.VBoolean<boolean | undefined, "optional">;
-    type: convex_values31.VLiteral<"createAccountFromCredentials", "required">;
-  }, "required", "type" | "provider" | "profile" | `profile.${string}` | "account" | "shouldLinkViaEmail" | "shouldLinkViaPhone" | "account.id" | "account.secret">, convex_values31.VObject<{
-    type: "retrieveAccountWithCredentials";
-    provider: string;
-    account: {
-      secret?: string | undefined;
-      id: string;
-    };
-  }, {
-    provider: convex_values31.VString<string, "required">;
-    account: convex_values31.VObject<{
-      secret?: string | undefined;
-      id: string;
-    }, {
-      id: convex_values31.VString<string, "required">;
-      secret: convex_values31.VString<string | undefined, "optional">;
-    }, "required", "id" | "secret">;
-    type: convex_values31.VLiteral<"retrieveAccountWithCredentials", "required">;
-  }, "required", "type" | "provider" | "account" | "account.id" | "account.secret">, convex_values31.VObject<{
-    type: "modifyAccount";
-    provider: string;
-    account: {
-      id: string;
-      secret: string;
-    };
-  }, {
-    provider: convex_values31.VString<string, "required">;
-    account: convex_values31.VObject<{
-      id: string;
-      secret: string;
-    }, {
-      id: convex_values31.VString<string, "required">;
-      secret: convex_values31.VString<string, "required">;
-    }, "required", "id" | "secret">;
-    type: convex_values31.VLiteral<"modifyAccount", "required">;
-  }, "required", "type" | "provider" | "account" | "account.id" | "account.secret">, convex_values31.VObject<{
-    except?: string[] | undefined;
-    type: "invalidateSessions";
-    userId: string;
-  }, {
-    userId: convex_values31.VString<string, "required">;
-    except: convex_values31.VArray<string[] | undefined, convex_values31.VString<string, "required">, "optional">;
-    type: convex_values31.VLiteral<"invalidateSessions", "required">;
-  }, "required", "type" | "userId" | "except">], "required", "phone" | "email" | "type" | "userId" | "sessionId" | "provider" | "params" | "verifier" | "refreshToken" | "generateTokens" | "allowExtraProviders" | `params.${string}` | "signature" | "providerAccountId" | "profile" | "accountExtend" | `profile.${string}` | `accountExtend.${string}` | "accountId" | "code" | "expirationTime" | "account" | "shouldLinkViaEmail" | "shouldLinkViaPhone" | "account.id" | "account.secret" | "except">;
-}, "required", "args" | "args.phone" | "args.email" | "args.type" | "args.userId" | "args.sessionId" | "args.provider" | "args.params" | "args.verifier" | "args.refreshToken" | "args.generateTokens" | "args.allowExtraProviders" | `args.params.${string}` | "args.signature" | "args.providerAccountId" | "args.profile" | "args.accountExtend" | `args.profile.${string}` | `args.accountExtend.${string}` | "args.accountId" | "args.code" | "args.expirationTime" | "args.account" | "args.shouldLinkViaEmail" | "args.shouldLinkViaPhone" | "args.account.id" | "args.account.secret" | "args.except">;
-declare const storeImpl: (ctx: MutationCtx, fnArgs: Infer<typeof storeArgs>, getProviderOrThrow: GetProviderOrThrowFunc, config: Config) => Promise<string | void | SessionInfo | {
-  userId: convex_values31.GenericId<"User">;
-  sessionId: convex_values31.GenericId<"Session">;
-} | (string & {
-  __tableName: "AuthVerifier";
-}) | {
-  token: string;
-  refreshToken: string;
-} | {
-  account: Doc<"Account">;
-  user: Doc<"User">;
-} | {
-  account: Doc<"Account">;
-  user: Doc<"User">;
-} | null>;
-//#endregion
-export { storeArgs, storeImpl };
-//# sourceMappingURL=store.d.ts.map

package/dist/server/mutations/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","names":[],"sources":["../../../src/server/mutations/store.ts"],"mappings":";;;;;;cAyBa,SAAA,kBAAS,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAiDpB,eAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAEW,SAAA,GACX,GAAA,EAAK,WAAA,EACL,MAAA,EAAQ,KAAA,QAAa,SAAA,GACrB,kBAAA,EAAoB,sBAAA,EACpB,MAAA,EAAQ,MAAA,KAAe,OAAA,iBAAA,WAAA;UAAA,eAAA,CAAA,SAAA"}

package/dist/server/mutations/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","names":[],"sources":["../../../src/server/mutations/store.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\nimport { Infer, v } from \"convex/values\";\n\nimport * as Provider from \"../crypto\";\nimport { MutationCtx } from \"../types\";\nimport { LOG_LEVELS, logWithLevel } from \"../utils\";\nimport { modifyAccountArgs, modifyAccountImpl } from \"./account\";\nimport { createVerificationCodeArgs, createVerificationCodeImpl } from \"./code\";\nimport { invalidateSessionsArgs, invalidateSessionsImpl } from \"./invalidate\";\nimport { userOAuthArgs, userOAuthImpl } from \"./oauth\";\nimport { refreshSessionArgs, refreshSessionImpl } from \"./refresh\";\nimport {\n  createAccountFromCredentialsArgs,\n  createAccountFromCredentialsImpl,\n} from \"./register\";\nimport {\n  retrieveAccountWithCredentialsArgs,\n  retrieveAccountWithCredentialsImpl,\n} from \"./retrieve\";\nimport { verifierSignatureArgs, verifierSignatureImpl } from \"./signature\";\nimport { signInArgs, signInImpl } from \"./signin\";\nimport { signOutImpl } from \"./signout\";\nimport { verifierImpl } from \"./verifier\";\nimport { verifyCodeAndSignInArgs, verifyCodeAndSignInImpl } from \"./verify\";\n\nexport const storeArgs = v.object({\n  args: v.union(\n    v.object({\n      type: v.literal(\"signIn\"),\n      ...signInArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"signOut\"),\n    }),\n    v.object({\n      type: v.literal(\"refreshSession\"),\n      ...refreshSessionArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"verifyCodeAndSignIn\"),\n      ...verifyCodeAndSignInArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"verifier\"),\n    }),\n    v.object({\n      type: v.literal(\"verifierSignature\"),\n      ...verifierSignatureArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"userOAuth\"),\n      ...userOAuthArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"createVerificationCode\"),\n      ...createVerificationCodeArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"createAccountFromCredentials\"),\n      ...createAccountFromCredentialsArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"retrieveAccountWithCredentials\"),\n      ...retrieveAccountWithCredentialsArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"modifyAccount\"),\n      ...modifyAccountArgs.fields,\n    }),\n    v.object({\n      type: v.literal(\"invalidateSessions\"),\n      ...invalidateSessionsArgs.fields,\n    }),\n  ),\n});\n\nexport const storeImpl = async (\n  ctx: MutationCtx,\n  fnArgs: Infer<typeof storeArgs>,\n  getProviderOrThrow: Provider.GetProviderOrThrowFunc,\n  config: Provider.Config,\n) => {\n  const args = fnArgs.args;\n  logWithLevel(LOG_LEVELS.INFO, `\\`auth:store\\` type: ${args.type}`);\n  return Fx.run(\n    Fx.match(args, args.type, {\n      signIn: (a) => Fx.promise(() => signInImpl(ctx, a, config)),\n      signOut: () => signOutImpl(ctx, config),\n      refreshSession: (a) =>\n        Fx.promise(() =>\n          refreshSessionImpl(ctx, a, getProviderOrThrow, config),\n        ),\n      verifyCodeAndSignIn: (a) =>\n        Fx.promise(() =>\n          verifyCodeAndSignInImpl(ctx, a, getProviderOrThrow, config),\n        ),\n      verifier: () => verifierImpl(ctx, config),\n      verifierSignature: (a) =>\n        verifierSignatureImpl(ctx, a, config).pipe(\n          Fx.recover((e) => Fx.fatal(e)),\n        ),\n      userOAuth: (a) =>\n        userOAuthImpl(ctx, a, getProviderOrThrow, config).pipe(\n          Fx.recover((e) => Fx.fatal(e)),\n        ),\n      createVerificationCode: (a) =>\n        Fx.promise(() =>\n          createVerificationCodeImpl(ctx, a, getProviderOrThrow, config),\n        ),\n      createAccountFromCredentials: (a) =>\n        Fx.promise(() =>\n          createAccountFromCredentialsImpl(ctx, a, getProviderOrThrow, config),\n        ),\n      retrieveAccountWithCredentials: (a) =>\n        retrieveAccountWithCredentialsImpl(ctx, a, getProviderOrThrow, config),\n      modifyAccount: (a) =>\n        modifyAccountImpl(ctx, a, getProviderOrThrow, config).pipe(\n          Fx.recover((e) => Fx.fatal(e)),\n        ),\n      invalidateSessions: (a) => invalidateSessionsImpl(ctx, a, config),\n    }),\n  );\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAyBA,MAAa,YAAY,EAAE,OAAO,EAChC,MAAM,EAAE,MACN,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,SAAS;CACzB,GAAG,WAAW;CACf,CAAC,EACF,EAAE,OAAO,EACP,MAAM,EAAE,QAAQ,UAAU,EAC3B,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,iBAAiB;CACjC,GAAG,mBAAmB;CACvB,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,sBAAsB;CACtC,GAAG,wBAAwB;CAC5B,CAAC,EACF,EAAE,OAAO,EACP,MAAM,EAAE,QAAQ,WAAW,EAC5B,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,oBAAoB;CACpC,GAAG,sBAAsB;CAC1B,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,YAAY;CAC5B,GAAG,cAAc;CAClB,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,yBAAyB;CACzC,GAAG,2BAA2B;CAC/B,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,+BAA+B;CAC/C,GAAG,iCAAiC;CACrC,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,iCAAiC;CACjD,GAAG,mCAAmC;CACvC,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,gBAAgB;CAChC,GAAG,kBAAkB;CACtB,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,qBAAqB;CACrC,GAAG,uBAAuB;CAC3B,CAAC,CACH,EACF,CAAC;AAEF,MAAa,YAAY,OACvB,KACA,QACA,oBACA,WACG;CACH,MAAM,OAAO,OAAO;AACpB,cAAa,WAAW,MAAM,wBAAwB,KAAK,OAAO;AAClE,QAAO,GAAG,IACR,GAAG,MAAM,MAAM,KAAK,MAAM;EACxB,SAAS,MAAM,GAAG,cAAc,WAAW,KAAK,GAAG,OAAO,CAAC;EAC3D,eAAe,YAAY,KAAK,OAAO;EACvC,iBAAiB,MACf,GAAG,cACD,mBAAmB,KAAK,GAAG,oBAAoB,OAAO,CACvD;EACH,sBAAsB,MACpB,GAAG,cACD,wBAAwB,KAAK,GAAG,oBAAoB,OAAO,CAC5D;EACH,gBAAgB,aAAa,KAAK,OAAO;EACzC,oBAAoB,MAClB,sBAAsB,KAAK,GAAG,OAAO,CAAC,KACpC,GAAG,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,CAC/B;EACH,YAAY,MACV,cAAc,KAAK,GAAG,oBAAoB,OAAO,CAAC,KAChD,GAAG,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,CAC/B;EACH,yBAAyB,MACvB,GAAG,cACD,2BAA2B,KAAK,GAAG,oBAAoB,OAAO,CAC/D;EACH,+BAA+B,MAC7B,GAAG,cACD,iCAAiC,KAAK,GAAG,oBAAoB,OAAO,CACrE;EACH,iCAAiC,MAC/B,mCAAmC,KAAK,GAAG,oBAAoB,OAAO;EACxE,gBAAgB,MACd,kBAAkB,KAAK,GAAG,oBAAoB,OAAO,CAAC,KACpD,GAAG,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,CAC/B;EACH,qBAAqB,MAAM,uBAAuB,KAAK,GAAG,OAAO;EAClE,CAAC,CACH"}

package/dist/server/mutations/verifier.d.ts

@@ -1,13 +0,0 @@
-import { MutationCtx } from "../types.js";
-import { Config } from "../crypto.js";
-import { Fx } from "@robelest/fx";
-import { GenericActionCtx, GenericDataModel } from "convex/server";
-import { GenericId } from "convex/values";
-
-//#region src/server/mutations/verifier.d.ts
-type ReturnType = GenericId<"AuthVerifier">;
-declare function verifierImpl(ctx: MutationCtx, config: Config): Fx<ReturnType, never>;
-declare const callVerifier: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>) => Promise<ReturnType>;
-//#endregion
-export { callVerifier, verifierImpl };
-//# sourceMappingURL=verifier.d.ts.map

package/dist/server/mutations/verifier.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifier.d.ts","names":[],"sources":["../../../src/server/mutations/verifier.ts"],"mappings":";;;;;;;KAUK,UAAA,GAAa,SAAA;AAAA,iBAEF,YAAA,CACd,GAAA,EAAK,WAAA,EACL,MAAA,EAAQ,MAAA,GACP,EAAA,CAAG,UAAA;AAAA,cAUO,YAAA,qBAAwC,gBAAA,EACnD,GAAA,EAAK,gBAAA,CAAiB,SAAA,MACrB,OAAA,CAAQ,UAAA"}

package/dist/server/mutations/verifier.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifier.js","names":[],"sources":["../../../src/server/mutations/verifier.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\nimport type { GenericActionCtx, GenericDataModel } from \"convex/server\";\nimport { GenericId } from \"convex/values\";\n\nimport * as Provider from \"../crypto\";\nimport { authDb } from \"../db\";\nimport { getAuthSessionId } from \"../sessions\";\nimport { MutationCtx } from \"../types\";\nimport { AUTH_STORE_REF } from \"./store/refs\";\n\ntype ReturnType = GenericId<\"AuthVerifier\">;\n\nexport function verifierImpl(\n  ctx: MutationCtx,\n  config: Provider.Config,\n): Fx<ReturnType, never> {\n  return Fx.gen(function* () {\n    return (yield* Fx.promise(async () =>\n      authDb(ctx, config).verifiers.create(\n        (await getAuthSessionId(ctx)) ?? undefined,\n      ),\n    )) as ReturnType;\n  });\n}\n\nexport const callVerifier = async <DataModel extends GenericDataModel>(\n  ctx: GenericActionCtx<DataModel>,\n): Promise<ReturnType> => {\n  return ctx.runMutation(AUTH_STORE_REF, {\n    args: {\n      type: \"verifier\",\n    },\n  });\n};\n"],"mappings":";;;;;;AAYA,SAAgB,aACd,KACA,QACuB;AACvB,QAAO,GAAG,IAAI,aAAa;AACzB,SAAQ,OAAO,GAAG,QAAQ,YACxB,OAAO,KAAK,OAAO,CAAC,UAAU,OAC3B,MAAM,iBAAiB,IAAI,IAAK,OAClC,CACF;GACD;;AAGJ,MAAa,eAAe,OAC1B,QACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM,EACJ,MAAM,YACP,EACF,CAAC"}

package/dist/server/mutations/verify.d.ts

@@ -1,26 +0,0 @@
-import { MutationCtx, SessionInfo } from "../types.js";
-import { Config, GetProviderOrThrowFunc } from "../crypto.js";
-import { GenericActionCtx, GenericDataModel } from "convex/server";
-import * as convex_values115 from "convex/values";
-import { Infer } from "convex/values";
-
-//#region src/server/mutations/verify.d.ts
-declare const verifyCodeAndSignInArgs: convex_values115.VObject<{
-  provider?: string | undefined;
-  verifier?: string | undefined;
-  params: any;
-  generateTokens: boolean;
-  allowExtraProviders: boolean;
-}, {
-  params: convex_values115.VAny<any, "required", string>;
-  provider: convex_values115.VString<string | undefined, "optional">;
-  verifier: convex_values115.VString<string | undefined, "optional">;
-  generateTokens: convex_values115.VBoolean<boolean, "required">;
-  allowExtraProviders: convex_values115.VBoolean<boolean, "required">;
-}, "required", "provider" | "params" | "verifier" | "generateTokens" | "allowExtraProviders" | `params.${string}`>;
-type ReturnType = null | SessionInfo;
-declare function verifyCodeAndSignInImpl(ctx: MutationCtx, args: Infer<typeof verifyCodeAndSignInArgs>, getProviderOrThrow: GetProviderOrThrowFunc, config: Config): Promise<ReturnType>;
-declare const callVerifyCodeAndSignIn: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>, args: Infer<typeof verifyCodeAndSignInArgs>) => Promise<ReturnType>;
-//#endregion
-export { callVerifyCodeAndSignIn, verifyCodeAndSignInArgs, verifyCodeAndSignInImpl };
-//# sourceMappingURL=verify.d.ts.map

package/dist/server/mutations/verify.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.d.ts","names":[],"sources":["../../../src/server/mutations/verify.ts"],"mappings":";;;;;;;cAwBa,uBAAA,mBAAuB,OAAA;;;;;;;UAMlC,gBAAA,CAAA,IAAA;;;;;;KAEG,UAAA,UAAoB,WAAA;AAAA,iBAgBH,uBAAA,CACpB,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,uBAAA,GACnB,kBAAA,EAAoB,sBAAA,EACpB,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAsIE,uBAAA,qBACO,gBAAA,EAElB,GAAA,EAAK,gBAAA,CAAiB,SAAA,GACtB,IAAA,EAAM,KAAA,QAAa,uBAAA,MAClB,OAAA,CAAQ,UAAA"}

package/dist/server/mutations/verify.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.js","names":[],"sources":["../../../src/server/mutations/verify.ts"],"sourcesContent":["import { Fx } from \"@robelest/fx\";\nimport type { GenericActionCtx, GenericDataModel } from \"convex/server\";\nimport { Infer, v } from \"convex/values\";\n\nimport * as Provider from \"../crypto\";\nimport { authDb } from \"../db\";\nimport { createSyntheticOAuthMaterializedConfig } from \"../enterprise/oidc\";\nimport { isEnterpriseProviderId } from \"../enterprise/shared\";\nimport {\n  isSignInRateLimited,\n  recordFailedSignIn,\n  resetSignInRateLimit,\n} from \"../limits\";\nimport {\n  createNewAndDeleteExistingSession,\n  getAuthSessionId,\n  maybeGenerateTokensForSession,\n} from \"../sessions\";\nimport { MutationCtx, SessionInfo } from \"../types\";\nimport { upsertUserAndAccount } from \"../users\";\nimport { LOG_LEVELS, logWithLevel, sha256 } from \"../utils\";\nimport { requireEnv } from \"../utils\";\nimport { AUTH_STORE_REF } from \"./store/refs\";\n\nexport const verifyCodeAndSignInArgs = v.object({\n  params: v.any(),\n  provider: v.optional(v.string()),\n  verifier: v.optional(v.string()),\n  generateTokens: v.boolean(),\n  allowExtraProviders: v.boolean(),\n});\n\ntype ReturnType = null | SessionInfo;\n\n// ============================================================================\n// Small validators for the verification pipeline\n// ============================================================================\n\n/** A soft verification failure — logged and collapsed to null at the boundary. */\nclass VerifyFailure {\n  readonly _tag = \"VerifyFailure\" as const;\n  constructor(readonly reason: string) {}\n}\n\n// ============================================================================\n// Main exported function\n// ============================================================================\n\nexport async function verifyCodeAndSignInImpl(\n  ctx: MutationCtx,\n  args: Infer<typeof verifyCodeAndSignInArgs>,\n  getProviderOrThrow: Provider.GetProviderOrThrowFunc,\n  config: Provider.Config,\n): Promise<ReturnType> {\n  logWithLevel(LOG_LEVELS.DEBUG, \"verifyCodeAndSignInImpl args:\", {\n    params: { email: args.params.email, phone: args.params.phone },\n    provider: args.provider,\n    verifier: args.verifier,\n    generateTokens: args.generateTokens,\n    allowExtraProviders: args.allowExtraProviders,\n  });\n\n  const { generateTokens, provider, allowExtraProviders } = args;\n  if (generateTokens) {\n    requireEnv(\"JWT_PRIVATE_KEY\");\n    requireEnv(\"JWKS\");\n    requireEnv(\"CONVEX_SITE_URL\");\n  }\n  const identifier: string | undefined = args.params.email ?? args.params.phone;\n\n  try {\n    if (identifier !== undefined) {\n      const limited = await Fx.run(\n        isSignInRateLimited(ctx, identifier, config),\n      );\n      if (limited) {\n        throw new VerifyFailure(\n          \"Too many failed attempts to verify code for this email\",\n        );\n      }\n    }\n\n    const db = authDb(ctx, config);\n    const { params, verifier } = args;\n    const hash = await sha256(params.code);\n    const code = await db.verificationCodes.getByCode(hash);\n    if (code === null) {\n      throw new VerifyFailure(\"Invalid verification code\");\n    }\n\n    await db.verificationCodes.delete(code._id);\n\n    if (code.verifier !== verifier) {\n      throw new VerifyFailure(\"Invalid verifier\");\n    }\n    if (code.expirationTime < Date.now()) {\n      throw new VerifyFailure(\"Expired verification code\");\n    }\n    if (provider !== undefined && code.provider !== provider) {\n      throw new VerifyFailure(\n        `Invalid provider \"${provider}\" for given \\`code\\``,\n      );\n    }\n\n    const account = await db.accounts.getById(code.accountId);\n    if (account === null) {\n      throw new VerifyFailure(\n        \"Account associated with this email has been deleted\",\n      );\n    }\n\n    const codeProvider = isEnterpriseProviderId(code.provider)\n      ? createSyntheticOAuthMaterializedConfig(code.provider)\n      : getProviderOrThrow(code.provider, allowExtraProviders);\n\n    if (\n      codeProvider !== null &&\n      (codeProvider.type === \"email\" || codeProvider.type === \"phone\") &&\n      codeProvider.authorize !== undefined\n    ) {\n      await codeProvider.authorize(args.params, account);\n    }\n\n    const methodProvider = isEnterpriseProviderId(account.provider)\n      ? createSyntheticOAuthMaterializedConfig(account.provider)\n      : getProviderOrThrow(account.provider);\n\n    const userId =\n      methodProvider.type === \"oauth\"\n        ? account.userId\n        : (\n            await upsertUserAndAccount(\n              ctx,\n              await getAuthSessionId(ctx),\n              { existingAccount: account },\n              {\n                type: \"verification\",\n                provider: methodProvider,\n                profile: {\n                  ...(code.emailVerified !== undefined\n                    ? { email: code.emailVerified, emailVerified: true }\n                    : {}),\n                  ...(code.phoneVerified !== undefined\n                    ? { phone: code.phoneVerified, phoneVerified: true }\n                    : {}),\n                },\n              },\n              config,\n            )\n          ).userId;\n\n    if (identifier !== undefined) {\n      await Fx.run(resetSignInRateLimit(ctx, identifier, config));\n    }\n\n    const sessionId = await createNewAndDeleteExistingSession(\n      ctx,\n      config,\n      userId,\n    );\n    return await maybeGenerateTokensForSession(\n      ctx,\n      config,\n      userId,\n      sessionId,\n      generateTokens,\n    );\n  } catch (error) {\n    if (error instanceof VerifyFailure) {\n      logWithLevel(LOG_LEVELS.ERROR, error.reason);\n      if (identifier !== undefined) {\n        await Fx.run(recordFailedSignIn(ctx, identifier, config));\n      }\n      return null;\n    }\n    logWithLevel(\n      LOG_LEVELS.ERROR,\n      `verifyCodeAndSignInImpl failed: ${String(error)}`,\n    );\n    return null;\n  }\n}\n\n// ============================================================================\n// Action-level caller (unchanged — just forwards to mutation)\n// ============================================================================\n\nexport const callVerifyCodeAndSignIn = async <\n  DataModel extends GenericDataModel,\n>(\n  ctx: GenericActionCtx<DataModel>,\n  args: Infer<typeof verifyCodeAndSignInArgs>,\n): Promise<ReturnType> => {\n  return ctx.runMutation(AUTH_STORE_REF, {\n    args: {\n      type: \"verifyCodeAndSignIn\",\n      ...args,\n    },\n  });\n};\n"],"mappings":";;;;;;;;;;;;AAwBA,MAAa,0BAA0B,EAAE,OAAO;CAC9C,QAAQ,EAAE,KAAK;CACf,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;CAChC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;CAChC,gBAAgB,EAAE,SAAS;CAC3B,qBAAqB,EAAE,SAAS;CACjC,CAAC;;AASF,IAAM,gBAAN,MAAoB;CAClB,AAAS,OAAO;CAChB,YAAY,AAAS,QAAgB;EAAhB;;;AAOvB,eAAsB,wBACpB,KACA,MACA,oBACA,QACqB;AACrB,cAAa,WAAW,OAAO,iCAAiC;EAC9D,QAAQ;GAAE,OAAO,KAAK,OAAO;GAAO,OAAO,KAAK,OAAO;GAAO;EAC9D,UAAU,KAAK;EACf,UAAU,KAAK;EACf,gBAAgB,KAAK;EACrB,qBAAqB,KAAK;EAC3B,CAAC;CAEF,MAAM,EAAE,gBAAgB,UAAU,wBAAwB;AAC1D,KAAI,gBAAgB;AAClB,aAAW,kBAAkB;AAC7B,aAAW,OAAO;AAClB,aAAW,kBAAkB;;CAE/B,MAAM,aAAiC,KAAK,OAAO,SAAS,KAAK,OAAO;AAExE,KAAI;AACF,MAAI,eAAe,QAIjB;OAHgB,MAAM,GAAG,IACvB,oBAAoB,KAAK,YAAY,OAAO,CAC7C,CAEC,OAAM,IAAI,cACR,yDACD;;EAIL,MAAM,KAAK,OAAO,KAAK,OAAO;EAC9B,MAAM,EAAE,QAAQ,aAAa;EAC7B,MAAM,OAAO,MAAM,OAAO,OAAO,KAAK;EACtC,MAAM,OAAO,MAAM,GAAG,kBAAkB,UAAU,KAAK;AACvD,MAAI,SAAS,KACX,OAAM,IAAI,cAAc,4BAA4B;AAGtD,QAAM,GAAG,kBAAkB,OAAO,KAAK,IAAI;AAE3C,MAAI,KAAK,aAAa,SACpB,OAAM,IAAI,cAAc,mBAAmB;AAE7C,MAAI,KAAK,iBAAiB,KAAK,KAAK,CAClC,OAAM,IAAI,cAAc,4BAA4B;AAEtD,MAAI,aAAa,UAAa,KAAK,aAAa,SAC9C,OAAM,IAAI,cACR,qBAAqB,SAAS,sBAC/B;EAGH,MAAM,UAAU,MAAM,GAAG,SAAS,QAAQ,KAAK,UAAU;AACzD,MAAI,YAAY,KACd,OAAM,IAAI,cACR,sDACD;EAGH,MAAM,eAAe,uBAAuB,KAAK,SAAS,GACtD,uCAAuC,KAAK,SAAS,GACrD,mBAAmB,KAAK,UAAU,oBAAoB;AAE1D,MACE,iBAAiB,SAChB,aAAa,SAAS,WAAW,aAAa,SAAS,YACxD,aAAa,cAAc,OAE3B,OAAM,aAAa,UAAU,KAAK,QAAQ,QAAQ;EAGpD,MAAM,iBAAiB,uBAAuB,QAAQ,SAAS,GAC3D,uCAAuC,QAAQ,SAAS,GACxD,mBAAmB,QAAQ,SAAS;EAExC,MAAM,SACJ,eAAe,SAAS,UACpB,QAAQ,UAEN,MAAM,qBACJ,KACA,MAAM,iBAAiB,IAAI,EAC3B,EAAE,iBAAiB,SAAS,EAC5B;GACE,MAAM;GACN,UAAU;GACV,SAAS;IACP,GAAI,KAAK,kBAAkB,SACvB;KAAE,OAAO,KAAK;KAAe,eAAe;KAAM,GAClD,EAAE;IACN,GAAI,KAAK,kBAAkB,SACvB;KAAE,OAAO,KAAK;KAAe,eAAe;KAAM,GAClD,EAAE;IACP;GACF,EACD,OACD,EACD;AAER,MAAI,eAAe,OACjB,OAAM,GAAG,IAAI,qBAAqB,KAAK,YAAY,OAAO,CAAC;AAQ7D,SAAO,MAAM,8BACX,KACA,QACA,QARgB,MAAM,kCACtB,KACA,QACA,OACD,EAMC,eACD;UACM,OAAO;AACd,MAAI,iBAAiB,eAAe;AAClC,gBAAa,WAAW,OAAO,MAAM,OAAO;AAC5C,OAAI,eAAe,OACjB,OAAM,GAAG,IAAI,mBAAmB,KAAK,YAAY,OAAO,CAAC;AAE3D,UAAO;;AAET,eACE,WAAW,OACX,mCAAmC,OAAO,MAAM,GACjD;AACD,SAAO;;;AAQX,MAAa,0BAA0B,OAGrC,KACA,SACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}

package/dist/server/oauth.d.ts

@@ -1 +0,0 @@
-export { };