@robelest/convex-auth 0.0.4-preview.25 → 0.0.4-preview.28

package/dist/component/convex.config.d.ts

@@ -1,7 +1,7 @@
-import * as convex_server24 from "convex/server";
+import * as convex_server0 from "convex/server";
 
 //#region src/component/convex.config.d.ts
-declare const component: convex_server24.ComponentDefinition<any>;
+declare const component: convex_server0.ComponentDefinition<any>;
 //#endregion
 export { component as default };
 //# sourceMappingURL=convex.config.d.ts.map

package/dist/component/index.d.ts

@@ -1,26 +1,4 @@
-// Auto-generated by scripts/fix-component-entrypoint-dts.js — do not edit.
-export { AuthCtx, createAuth, defineRoles } from "../server/auth.js";
-export type {
-  AuthApi,
-  AuthConfig,
-  AuthCtxConfig,
-  InferAuth,
-  UserDoc,
-} from "../server/auth.js";
-export type {
-  ConvexAuthConfig,
-  AuthProviderConfig,
-  EmailConfig,
-  EmailUserConfig,
-  PhoneConfig,
-  PhoneUserConfig,
-  ConvexCredentialsConfig,
-  ApiKeyConfig,
-  KeyScope,
-  ScopeChecker,
-  KeyRecord,
-  HttpKeyContext,
-  CorsConfig,
-  DeviceProviderConfig,
-  GenericDoc,
-} from "../server/types.js";
+import { AuthProviderConfig, ConvexAuthConfig, ConvexCredentialsConfig, CorsConfig, DeviceProviderConfig, EmailConfig, EmailUserConfig, GenericDoc, GroupConnectionPolicy, GroupConnectionPolicyPatch, HttpKeyContext, KeyScope, PhoneConfig, PhoneUserConfig, ScopeChecker } from "../server/types.js";
+import { AuthConfig, AuthContext, AuthContextConfig, InferAuth, OptionalAuthContext, UserDoc } from "../server/auth-context.js";
+import { HttpAuthContext, HttpAuthContextConfig, OptionalHttpAuthContext } from "../server/http.js";
+import { AuthApi, createAuth } from "../server/auth.js";

package/dist/component/index.js

@@ -1,3 +1,3 @@
-import { createAuth } from "./server/auth.js";
+import { createAuth } from "../server/auth.js";
 
 export { createAuth };

package/dist/component/model.d.ts

@@ -1,70 +1,7 @@
-import * as convex_values121 from "convex/values";
+import * as convex_values475 from "convex/values";
 
 //#region src/component/model.d.ts
-declare const vAuthVerifierDoc: convex_values121.VObject<{
-  sessionId?: convex_values121.GenericId<"Session"> | undefined;
-  signature?: string | undefined;
-  _creationTime: number;
-  _id: convex_values121.GenericId<"AuthVerifier">;
-}, {
-  sessionId: convex_values121.VId<convex_values121.GenericId<"Session"> | undefined, "optional">;
-  signature: convex_values121.VString<string | undefined, "optional">;
-  _id: convex_values121.VId<convex_values121.GenericId<"AuthVerifier">, "required">;
-  _creationTime: convex_values121.VFloat64<number, "required">;
-}, "required", "_creationTime" | "_id" | "sessionId" | "signature">;
-declare const vPasskeyDoc: convex_values121.VObject<{
-  name?: string | undefined;
-  lastUsedAt?: number | undefined;
-  transports?: string[] | undefined;
-  _creationTime: number;
-  userId: convex_values121.GenericId<"User">;
-  createdAt: number;
-  _id: convex_values121.GenericId<"Passkey">;
-  credentialId: string;
-  publicKey: ArrayBuffer;
-  algorithm: number;
-  counter: number;
-  deviceType: string;
-  backedUp: boolean;
-}, {
-  userId: convex_values121.VId<convex_values121.GenericId<"User">, "required">;
-  credentialId: convex_values121.VString<string, "required">;
-  publicKey: convex_values121.VBytes<ArrayBuffer, "required">;
-  algorithm: convex_values121.VFloat64<number, "required">;
-  counter: convex_values121.VFloat64<number, "required">;
-  transports: convex_values121.VArray<string[] | undefined, convex_values121.VString<string, "required">, "optional">;
-  deviceType: convex_values121.VString<string, "required">;
-  backedUp: convex_values121.VBoolean<boolean, "required">;
-  name: convex_values121.VString<string | undefined, "optional">;
-  createdAt: convex_values121.VFloat64<number, "required">;
-  lastUsedAt: convex_values121.VFloat64<number | undefined, "optional">;
-  _id: convex_values121.VId<convex_values121.GenericId<"Passkey">, "required">;
-  _creationTime: convex_values121.VFloat64<number, "required">;
-}, "required", "_creationTime" | "name" | "lastUsedAt" | "userId" | "createdAt" | "_id" | "credentialId" | "publicKey" | "algorithm" | "counter" | "transports" | "deviceType" | "backedUp">;
-declare const vTotpFactorDoc: convex_values121.VObject<{
-  name?: string | undefined;
-  lastUsedAt?: number | undefined;
-  _creationTime: number;
-  userId: convex_values121.GenericId<"User">;
-  createdAt: number;
-  _id: convex_values121.GenericId<"TotpFactor">;
-  secret: ArrayBuffer;
-  digits: number;
-  period: number;
-  verified: boolean;
-}, {
-  userId: convex_values121.VId<convex_values121.GenericId<"User">, "required">;
-  secret: convex_values121.VBytes<ArrayBuffer, "required">;
-  digits: convex_values121.VFloat64<number, "required">;
-  period: convex_values121.VFloat64<number, "required">;
-  verified: convex_values121.VBoolean<boolean, "required">;
-  name: convex_values121.VString<string | undefined, "optional">;
-  createdAt: convex_values121.VFloat64<number, "required">;
-  lastUsedAt: convex_values121.VFloat64<number | undefined, "optional">;
-  _id: convex_values121.VId<convex_values121.GenericId<"TotpFactor">, "required">;
-  _creationTime: convex_values121.VFloat64<number, "required">;
-}, "required", "_creationTime" | "name" | "lastUsedAt" | "userId" | "createdAt" | "_id" | "secret" | "digits" | "period" | "verified">;
-declare const vApiKeyDoc: convex_values121.VObject<{
+declare const vApiKeyDoc: convex_values475.VObject<{
   lastUsedAt?: number | undefined;
   expiresAt?: number | undefined;
   rateLimit?: {
@@ -79,7 +16,7 @@ declare const vApiKeyDoc: convex_values121.VObject<{
   _creationTime: number;
   name: string;
   revoked: boolean;
-  userId: convex_values121.GenericId<"User">;
+  userId: convex_values475.GenericId<"User">;
   prefix: string;
   hashedKey: string;
   scopes: {
@@ -87,67 +24,44 @@ declare const vApiKeyDoc: convex_values121.VObject<{
     actions: string[];
   }[];
   createdAt: number;
-  _id: convex_values121.GenericId<"ApiKey">;
+  _id: convex_values475.GenericId<"ApiKey">;
 }, {
-  userId: convex_values121.VId<convex_values121.GenericId<"User">, "required">;
-  prefix: convex_values121.VString<string, "required">;
-  hashedKey: convex_values121.VString<string, "required">;
-  name: convex_values121.VString<string, "required">;
-  scopes: convex_values121.VArray<{
+  userId: convex_values475.VId<convex_values475.GenericId<"User">, "required">;
+  prefix: convex_values475.VString<string, "required">;
+  hashedKey: convex_values475.VString<string, "required">;
+  name: convex_values475.VString<string, "required">;
+  scopes: convex_values475.VArray<{
     resource: string;
     actions: string[];
-  }[], convex_values121.VObject<{
+  }[], convex_values475.VObject<{
     resource: string;
     actions: string[];
   }, {
-    resource: convex_values121.VString<string, "required">;
-    actions: convex_values121.VArray<string[], convex_values121.VString<string, "required">, "required">;
+    resource: convex_values475.VString<string, "required">;
+    actions: convex_values475.VArray<string[], convex_values475.VString<string, "required">, "required">;
   }, "required", "resource" | "actions">, "required">;
-  rateLimit: convex_values121.VObject<{
+  rateLimit: convex_values475.VObject<{
     maxRequests: number;
     windowMs: number;
   } | undefined, {
-    maxRequests: convex_values121.VFloat64<number, "required">;
-    windowMs: convex_values121.VFloat64<number, "required">;
+    maxRequests: convex_values475.VFloat64<number, "required">;
+    windowMs: convex_values475.VFloat64<number, "required">;
   }, "optional", "maxRequests" | "windowMs">;
-  rateLimitState: convex_values121.VObject<{
+  rateLimitState: convex_values475.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined, {
-    attemptsLeft: convex_values121.VFloat64<number, "required">;
-    lastAttemptTime: convex_values121.VFloat64<number, "required">;
+    attemptsLeft: convex_values475.VFloat64<number, "required">;
+    lastAttemptTime: convex_values475.VFloat64<number, "required">;
   }, "optional", "attemptsLeft" | "lastAttemptTime">;
-  expiresAt: convex_values121.VFloat64<number | undefined, "optional">;
-  lastUsedAt: convex_values121.VFloat64<number | undefined, "optional">;
-  createdAt: convex_values121.VFloat64<number, "required">;
-  revoked: convex_values121.VBoolean<boolean, "required">;
-  metadata: convex_values121.VAny<any, "optional", string>;
-  _id: convex_values121.VId<convex_values121.GenericId<"ApiKey">, "required">;
-  _creationTime: convex_values121.VFloat64<number, "required">;
+  expiresAt: convex_values475.VFloat64<number | undefined, "optional">;
+  lastUsedAt: convex_values475.VFloat64<number | undefined, "optional">;
+  createdAt: convex_values475.VFloat64<number, "required">;
+  revoked: convex_values475.VBoolean<boolean, "required">;
+  metadata: convex_values475.VAny<any, "optional", string>;
+  _id: convex_values475.VId<convex_values475.GenericId<"ApiKey">, "required">;
+  _creationTime: convex_values475.VFloat64<number, "required">;
 }, "required", "_creationTime" | "name" | "revoked" | "lastUsedAt" | "expiresAt" | "userId" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "createdAt" | "metadata" | "_id" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>;
-declare const vDeviceCodeDoc: convex_values121.VObject<{
-  userId?: convex_values121.GenericId<"User"> | undefined;
-  sessionId?: convex_values121.GenericId<"Session"> | undefined;
-  lastPolledAt?: number | undefined;
-  _creationTime: number;
-  status: "pending" | "authorized" | "denied";
-  expiresAt: number;
-  _id: convex_values121.GenericId<"DeviceCode">;
-  deviceCodeHash: string;
-  userCode: string;
-  interval: number;
-}, {
-  deviceCodeHash: convex_values121.VString<string, "required">;
-  userCode: convex_values121.VString<string, "required">;
-  expiresAt: convex_values121.VFloat64<number, "required">;
-  interval: convex_values121.VFloat64<number, "required">;
-  status: convex_values121.VUnion<"pending" | "authorized" | "denied", [convex_values121.VLiteral<"pending", "required">, convex_values121.VLiteral<"authorized", "required">, convex_values121.VLiteral<"denied", "required">], "required", never>;
-  userId: convex_values121.VId<convex_values121.GenericId<"User"> | undefined, "optional">;
-  sessionId: convex_values121.VId<convex_values121.GenericId<"Session"> | undefined, "optional">;
-  lastPolledAt: convex_values121.VFloat64<number | undefined, "optional">;
-  _id: convex_values121.VId<convex_values121.GenericId<"DeviceCode">, "required">;
-  _creationTime: convex_values121.VFloat64<number, "required">;
-}, "required", "_creationTime" | "status" | "expiresAt" | "userId" | "_id" | "sessionId" | "deviceCodeHash" | "userCode" | "interval" | "lastPolledAt">;
 //#endregion
-export { vApiKeyDoc, vAuthVerifierDoc, vDeviceCodeDoc, vPasskeyDoc, vTotpFactorDoc };
+export { vApiKeyDoc };
 //# sourceMappingURL=model.d.ts.map

package/dist/component/model.js

@@ -15,15 +15,15 @@ const TABLES = {
 	GroupTag: "GroupTag",
 	GroupMember: "GroupMember",
 	GroupInvite: "GroupInvite",
-	Enterprise: "Enterprise",
-	EnterpriseDomain: "EnterpriseDomain",
-	EnterpriseDomainVerification: "EnterpriseDomainVerification",
-	EnterpriseSecret: "EnterpriseSecret",
-	EnterpriseScimConfig: "EnterpriseScimConfig",
-	EnterpriseScimIdentity: "EnterpriseScimIdentity",
-	EnterpriseAuditEvent: "EnterpriseAuditEvent",
-	EnterpriseWebhookEndpoint: "EnterpriseWebhookEndpoint",
-	EnterpriseWebhookDelivery: "EnterpriseWebhookDelivery",
+	GroupConnection: "GroupConnection",
+	GroupConnectionDomain: "GroupConnectionDomain",
+	GroupConnectionDomainVerification: "GroupConnectionDomainVerification",
+	GroupConnectionSecret: "GroupConnectionSecret",
+	GroupConnectionScimConfig: "GroupConnectionScimConfig",
+	GroupConnectionScimIdentity: "GroupConnectionScimIdentity",
+	GroupAuditEvent: "GroupAuditEvent",
+	GroupWebhookEndpoint: "GroupWebhookEndpoint",
+	GroupWebhookDelivery: "GroupWebhookDelivery",
 	ApiKey: "ApiKey",
 	DeviceCode: "DeviceCode"
 };
@@ -37,25 +37,46 @@ const vPaginated = (item) => v.object({
 });
 const vInviteStatus = v.union(v.literal("pending"), v.literal("accepted"), v.literal("revoked"), v.literal("expired"));
 const vDeviceStatus = v.union(v.literal("pending"), v.literal("authorized"), v.literal("denied"));
-const vEnterpriseAccountLinkingPolicy = v.union(v.literal("verifiedEmail"), v.literal("none"));
-const vEnterpriseScimReuseUserPolicy = v.union(v.literal("externalId"), v.literal("none"));
-const vEnterpriseJitProvisioningMode = v.union(v.literal("off"), v.literal("createUser"), v.literal("createUserAndMembership"));
-const vEnterpriseDeprovisionMode = v.union(v.literal("soft"), v.literal("hard"));
-const vEnterpriseStatus = v.union(v.literal("draft"), v.literal("active"), v.literal("disabled"));
-const vEnterprisePolicy = v.object({
+const vGroupConnectionAccountLinkingPolicy = v.union(v.literal("verifiedEmail"), v.literal("none"));
+const vGroupConnectionScimReuseUserPolicy = v.union(v.literal("externalId"), v.literal("none"));
+const vGroupConnectionJitProvisioningMode = v.union(v.literal("off"), v.literal("createUser"), v.literal("createUserAndMembership"));
+const vGroupConnectionDeprovisionMode = v.union(v.literal("soft"), v.literal("hard"));
+const vGroupConnectionProfileUpdateMode = v.union(v.literal("never"), v.literal("missing"), v.literal("always"));
+const vGroupConnectionProvisioningAuthority = v.union(v.literal("app"), v.literal("sso"), v.literal("scim"));
+const vGroupConnectionGroupSyncMode = v.union(v.literal("ignore"), v.literal("sync"));
+const vGroupConnectionRoleSyncMode = v.union(v.literal("ignore"), v.literal("map"));
+const vGroupConnectionStatus = v.union(v.literal("draft"), v.literal("active"), v.literal("disabled"));
+const vGroupConnectionProtocol = v.union(v.literal("oidc"), v.literal("saml"));
+const vGroupConnectionPolicy = v.object({
 	version: v.literal(1),
 	identity: v.object({ accountLinking: v.object({
-		oidc: vEnterpriseAccountLinkingPolicy,
-		saml: vEnterpriseAccountLinkingPolicy
+		oidc: vGroupConnectionAccountLinkingPolicy,
+		saml: vGroupConnectionAccountLinkingPolicy
 	}) }),
 	provisioning: v.object({
-		scimReuse: v.object({ user: vEnterpriseScimReuseUserPolicy }),
+		user: v.object({
+			createOnSignIn: v.boolean(),
+			updateProfileOnLogin: vGroupConnectionProfileUpdateMode,
+			updateProfileFromScim: vGroupConnectionProfileUpdateMode,
+			authority: vGroupConnectionProvisioningAuthority
+		}),
+		scimReuse: v.object({ user: vGroupConnectionScimReuseUserPolicy }),
 		jit: v.object({
-			mode: vEnterpriseJitProvisioningMode,
+			mode: vGroupConnectionJitProvisioningMode,
 			defaultRole: v.optional(v.string()),
 			defaultRoleIds: v.optional(v.array(v.string()))
 		}),
-		deprovision: v.object({ mode: vEnterpriseDeprovisionMode })
+		deprovision: v.object({ mode: vGroupConnectionDeprovisionMode }),
+		groups: v.object({
+			mode: vGroupConnectionGroupSyncMode,
+			source: v.literal("protocol"),
+			mapping: v.optional(v.record(v.string(), v.array(v.string())))
+		}),
+		roles: v.object({
+			mode: vGroupConnectionRoleSyncMode,
+			source: v.literal("protocol"),
+			mapping: v.optional(v.record(v.string(), v.array(v.string())))
+		})
 	}),
 	extend: v.optional(v.any())
 });
@@ -79,7 +100,7 @@ const vApiKeyRateLimitState = v.object({
 	attemptsLeft: v.number(),
 	lastAttemptTime: v.number()
 });
-const vEnterpriseSecretKind = v.union(v.literal("oidc_client_secret"));
+const vGroupConnectionSecretKind = v.union(v.literal("oidc_client_secret"));
 function vDocMeta(tableName) {
 	return {
 		_id: v.id(tableName),
@@ -174,6 +195,7 @@ const vGroupDoc = v.object({
 	rootGroupId: v.optional(v.id(TABLES.Group)),
 	isRoot: v.optional(v.boolean()),
 	tags: v.optional(v.array(vTag)),
+	policy: v.optional(vGroupConnectionPolicy),
 	extend: v.optional(v.any())
 });
 const vGroupMemberDoc = v.object({
@@ -225,29 +247,29 @@ const vDeviceCodeDoc = v.object({
 	sessionId: v.optional(v.id(TABLES.Session)),
 	lastPolledAt: v.optional(v.number())
 });
-const vEnterpriseDoc = v.object({
-	...vDocMeta(TABLES.Enterprise),
+const vGroupConnectionDoc = v.object({
+	...vDocMeta(TABLES.GroupConnection),
 	groupId: v.id(TABLES.Group),
 	slug: v.optional(v.string()),
 	name: v.optional(v.string()),
-	status: vEnterpriseStatus,
-	policy: v.optional(vEnterprisePolicy),
+	protocol: vGroupConnectionProtocol,
+	status: vGroupConnectionStatus,
 	config: v.optional(v.any()),
 	extend: v.optional(v.any())
 });
-const vEnterpriseDomainDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseDomain),
-	enterpriseId: v.id(TABLES.Enterprise),
+const vGroupConnectionDomainDoc = v.object({
+	...vDocMeta(TABLES.GroupConnectionDomain),
+	connectionId: v.id(TABLES.GroupConnection),
 	groupId: v.id(TABLES.Group),
 	domain: v.string(),
 	isPrimary: v.boolean(),
 	verifiedAt: v.optional(v.number())
 });
-const vEnterpriseDomainVerificationDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseDomainVerification),
-	enterpriseId: v.id(TABLES.Enterprise),
+const vGroupConnectionDomainVerificationDoc = v.object({
+	...vDocMeta(TABLES.GroupConnectionDomainVerification),
+	connectionId: v.id(TABLES.GroupConnection),
 	groupId: v.id(TABLES.Group),
-	domainId: v.id(TABLES.EnterpriseDomain),
+	domainId: v.id(TABLES.GroupConnectionDomain),
 	domain: v.string(),
 	recordName: v.string(),
 	token: v.string(),
@@ -255,17 +277,17 @@ const vEnterpriseDomainVerificationDoc = v.object({
 	requestedAt: v.number(),
 	expiresAt: v.number()
 });
-const vEnterpriseSecretDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseSecret),
-	enterpriseId: v.id(TABLES.Enterprise),
+const vGroupConnectionSecretDoc = v.object({
+	...vDocMeta(TABLES.GroupConnectionSecret),
+	connectionId: v.id(TABLES.GroupConnection),
 	groupId: v.id(TABLES.Group),
-	kind: vEnterpriseSecretKind,
+	kind: vGroupConnectionSecretKind,
 	ciphertext: v.string(),
 	updatedAt: v.number()
 });
-const vEnterpriseScimConfigDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseScimConfig),
-	enterpriseId: v.id(TABLES.Enterprise),
+const vGroupConnectionScimConfigDoc = v.object({
+	...vDocMeta(TABLES.GroupConnectionScimConfig),
+	connectionId: v.id(TABLES.GroupConnection),
 	groupId: v.id(TABLES.Group),
 	status: vScimStatus,
 	basePath: v.string(),
@@ -273,9 +295,9 @@ const vEnterpriseScimConfigDoc = v.object({
 	lastRotatedAt: v.optional(v.number()),
 	extend: v.optional(v.any())
 });
-const vEnterpriseScimIdentityDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseScimIdentity),
-	enterpriseId: v.id(TABLES.Enterprise),
+const vGroupConnectionScimIdentityDoc = v.object({
+	...vDocMeta(TABLES.GroupConnectionScimIdentity),
+	connectionId: v.id(TABLES.GroupConnection),
 	groupId: v.id(TABLES.Group),
 	resourceType: vScimResourceType,
 	externalId: v.string(),
@@ -285,9 +307,9 @@ const vEnterpriseScimIdentityDoc = v.object({
 	active: v.optional(v.boolean()),
 	raw: v.optional(v.any())
 });
-const vEnterpriseAuditEventDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseAuditEvent),
-	enterpriseId: v.id(TABLES.Enterprise),
+const vGroupAuditEventDoc = v.object({
+	...vDocMeta(TABLES.GroupAuditEvent),
+	connectionId: v.optional(v.id(TABLES.GroupConnection)),
 	groupId: v.id(TABLES.Group),
 	eventType: v.string(),
 	actorType: vAuditActorType,
@@ -300,9 +322,9 @@ const vEnterpriseAuditEventDoc = v.object({
 	ip: v.optional(v.string()),
 	metadata: v.optional(v.any())
 });
-const vEnterpriseWebhookEndpointDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseWebhookEndpoint),
-	enterpriseId: v.id(TABLES.Enterprise),
+const vGroupWebhookEndpointDoc = v.object({
+	...vDocMeta(TABLES.GroupWebhookEndpoint),
+	connectionId: v.id(TABLES.GroupConnection),
 	groupId: v.id(TABLES.Group),
 	url: v.string(),
 	status: vWebhookEndpointStatus,
@@ -314,11 +336,11 @@ const vEnterpriseWebhookEndpointDoc = v.object({
 	failureCount: v.number(),
 	extend: v.optional(v.any())
 });
-const vEnterpriseWebhookDeliveryDoc = v.object({
-	...vDocMeta(TABLES.EnterpriseWebhookDelivery),
-	enterpriseId: v.id(TABLES.Enterprise),
-	endpointId: v.id(TABLES.EnterpriseWebhookEndpoint),
-	auditEventId: v.optional(v.id(TABLES.EnterpriseAuditEvent)),
+const vGroupWebhookDeliveryDoc = v.object({
+	...vDocMeta(TABLES.GroupWebhookDelivery),
+	connectionId: v.id(TABLES.GroupConnection),
+	endpointId: v.id(TABLES.GroupWebhookEndpoint),
+	auditEventId: v.optional(v.id(TABLES.GroupAuditEvent)),
 	eventType: v.string(),
 	status: vWebhookDeliveryStatus,
 	attemptCount: v.number(),
@@ -345,5 +367,5 @@ const vInviteAcceptByTokenResult = v.object({
 });
 
 //#endregion
-export { TABLES, vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vEnterpriseAccountLinkingPolicy, vEnterpriseAuditEventDoc, vEnterpriseDeprovisionMode, vEnterpriseDoc, vEnterpriseDomainDoc, vEnterpriseDomainVerificationDoc, vEnterpriseJitProvisioningMode, vEnterprisePolicy, vEnterpriseScimConfigDoc, vEnterpriseScimIdentityDoc, vEnterpriseScimReuseUserPolicy, vEnterpriseSecretDoc, vEnterpriseSecretKind, vEnterpriseStatus, vEnterpriseWebhookDeliveryDoc, vEnterpriseWebhookEndpointDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vInviteAcceptByTokenResult, vInviteStatus, vInviteTokenAcceptStatus, vMembershipStatus, vPaginated, vPasskeyDoc, vRateLimitDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookDeliveryStatus, vWebhookEndpointStatus };
+export { TABLES, vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vGroupAuditEventDoc, vGroupConnectionAccountLinkingPolicy, vGroupConnectionDeprovisionMode, vGroupConnectionDoc, vGroupConnectionDomainDoc, vGroupConnectionDomainVerificationDoc, vGroupConnectionGroupSyncMode, vGroupConnectionJitProvisioningMode, vGroupConnectionPolicy, vGroupConnectionProfileUpdateMode, vGroupConnectionProtocol, vGroupConnectionProvisioningAuthority, vGroupConnectionRoleSyncMode, vGroupConnectionScimConfigDoc, vGroupConnectionScimIdentityDoc, vGroupConnectionScimReuseUserPolicy, vGroupConnectionSecretDoc, vGroupConnectionSecretKind, vGroupConnectionStatus, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vGroupWebhookDeliveryDoc, vGroupWebhookEndpointDoc, vInviteAcceptByTokenResult, vInviteStatus, vInviteTokenAcceptStatus, vMembershipStatus, vPaginated, vPasskeyDoc, vRateLimitDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookDeliveryStatus, vWebhookEndpointStatus };
 //# sourceMappingURL=model.js.map

package/dist/component/modules.js

@@ -0,0 +1,38 @@
+//#region src/component/modules.ts
+const modules = {
+	"./component/_generated/api.ts": () => import("./_generated/api.js"),
+	"./component/_generated/component.ts": () => import("./_generated/component.js"),
+	"./component/_generated/dataModel.ts": () => import("./_generated/dataModel.js"),
+	"./component/_generated/server.ts": () => import("./_generated/server.js"),
+	"./component/convex.config.ts": () => import("./convex.config.js"),
+	"./component/functions.ts": () => import("./functions.js"),
+	"./component/index.ts": () => import("./index.js"),
+	"./component/model.ts": () => import("./model.js"),
+	"./component/public.ts": () => import("./public.js"),
+	"./component/public/factors/devices.ts": () => import("./public/factors/devices.js"),
+	"./component/public/factors/passkeys.ts": () => import("./public/factors/passkeys.js"),
+	"./component/public/factors/totp.ts": () => import("./public/factors/totp.js"),
+	"./component/public/groups/core.ts": () => import("./public/groups/core.js"),
+	"./component/public/groups/invites.ts": () => import("./public/groups/invites.js"),
+	"./component/public/groups/members.ts": () => import("./public/groups/members.js"),
+	"./component/public/identity/accounts.ts": () => import("./public/identity/accounts.js"),
+	"./component/public/identity/codes.ts": () => import("./public/identity/codes.js"),
+	"./component/public/identity/sessions.ts": () => import("./public/identity/sessions.js"),
+	"./component/public/identity/tokens.ts": () => import("./public/identity/tokens.js"),
+	"./component/public/identity/users.ts": () => import("./public/identity/users.js"),
+	"./component/public/identity/verifiers.ts": () => import("./public/identity/verifiers.js"),
+	"./component/public/security/keys.ts": () => import("./public/security/keys.js"),
+	"./component/public/security/limits.ts": () => import("./public/security/limits.js"),
+	"./component/public/sso/audit.ts": () => import("./public/sso/audit.js"),
+	"./component/public/sso/core.ts": () => import("./public/sso/core.js"),
+	"./component/public/sso/domains.ts": () => import("./public/sso/domains.js"),
+	"./component/public/sso/scim.ts": () => import("./public/sso/scim.js"),
+	"./component/public/sso/secrets.ts": () => import("./public/sso/secrets.js"),
+	"./component/public/sso/webhooks.ts": () => import("./public/sso/webhooks.js"),
+	"./component/schema.ts": () => import("./schema.js")
+};
+var modules_default = modules;
+
+//#endregion
+export { modules_default as default };
+//# sourceMappingURL=modules.js.map

package/dist/component/public/factors/devices.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vDeviceCodeDoc, vDeviceStatus } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { v } from "convex/values";
 
 //#region src/component/public/factors/devices.ts

package/dist/component/public/factors/passkeys.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vPasskeyDoc } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { v } from "convex/values";
 
 //#region src/component/public/factors/passkeys.ts

package/dist/component/public/factors/totp.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vTotpFactorDoc } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { v } from "convex/values";
 
 //#region src/component/public/factors/totp.ts

package/dist/component/public/groups/core.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vGroupDoc, vPaginated, vTag } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { v } from "convex/values";
 
 //#region src/component/public/groups/core.ts
@@ -45,7 +45,7 @@ function normalizeTags(tags) {
 *   name: "Acme Corp",
 *   slug: "acme-corp",
 *   type: "organization",
-*   tags: [{ key: "plan", value: "enterprise" }],
+*   tags: [{ key: "plan", value: "group-sso" }],
 * });
 * ```
 */

package/dist/component/public/groups/invites.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vGroupInviteDoc, vInviteAcceptByTokenResult, vInviteStatus, vPaginated } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { ConvexError, v } from "convex/values";
 
 //#region src/component/public/groups/invites.ts

package/dist/component/public/groups/members.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vGroupMemberDoc, vPaginated } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { ConvexError, v } from "convex/values";
 
 //#region src/component/public/groups/members.ts

package/dist/component/public/identity/accounts.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vAccountDoc } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { v } from "convex/values";
 
 //#region src/component/public/identity/accounts.ts

package/dist/component/public/identity/codes.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vVerificationCodeDoc } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { v } from "convex/values";
 
 //#region src/component/public/identity/codes.ts

package/dist/component/public/identity/sessions.js

@@ -1,5 +1,5 @@
-import { mutation, query } from "../../functions.js";
 import { vPaginated, vSessionDoc } from "../../model.js";
+import { mutation, query } from "../../functions.js";
 import { v } from "convex/values";
 
 //#region src/component/public/identity/sessions.ts
@@ -99,6 +99,43 @@ const sessionCreate = mutation({
 		});
 	}
 });
+const sessionIssue = mutation({
+	args: {
+		userId: v.id("User"),
+		sessionId: v.optional(v.id("Session")),
+		replaceSessionId: v.optional(v.id("Session")),
+		sessionExpirationTime: v.number(),
+		refreshTokenExpirationTime: v.optional(v.number())
+	},
+	returns: v.object({
+		userId: v.id("User"),
+		sessionId: v.id("Session"),
+		refreshTokenId: v.optional(v.id("RefreshToken"))
+	}),
+	handler: async (ctx, args) => {
+		let sessionId = args.sessionId;
+		if (sessionId === void 0) {
+			if (args.replaceSessionId !== void 0) {
+				if (await ctx.db.get("Session", args.replaceSessionId) !== null) await ctx.db.delete("Session", args.replaceSessionId);
+				const existingTokens = await ctx.db.query("RefreshToken").withIndex("session_id", (q) => q.eq("sessionId", args.replaceSessionId)).collect();
+				await Promise.all(existingTokens.map((token) => ctx.db.delete("RefreshToken", token._id)));
+			}
+			sessionId = await ctx.db.insert("Session", {
+				userId: args.userId,
+				expirationTime: args.sessionExpirationTime
+			});
+		}
+		const refreshTokenId = args.refreshTokenExpirationTime === void 0 ? void 0 : await ctx.db.insert("RefreshToken", {
+			sessionId,
+			expirationTime: args.refreshTokenExpirationTime
+		});
+		return {
+			userId: args.userId,
+			sessionId,
+			...refreshTokenId === void 0 ? {} : { refreshTokenId }
+		};
+	}
+});
 /**
 * Retrieve a single session by its Convex document ID.
 *
@@ -188,5 +225,5 @@ const sessionListByUser = query({
 });
 
 //#endregion
-export { sessionCreate, sessionDelete, sessionGetById, sessionList, sessionListByUser };
+export { sessionCreate, sessionDelete, sessionGetById, sessionIssue, sessionList, sessionListByUser };
 //# sourceMappingURL=sessions.js.map