@robelest/convex-auth 0.0.4-preview.27 → 0.0.4-preview.28

package/dist/server/refresh.js

@@ -1,80 +1,27 @@
-import { LOG_LEVELS } from "../shared/log.js";
 import { envOptionalNumber, readConfigSync } from "./env.js";
-import { authDb } from "./db.js";
-import { log, maybeRedact } from "./log.js";
+import { maybeRedact } from "./log.js";
 import { ConvexError } from "convex/values";
-import { Effect } from "effect";
 
 //#region src/server/refresh.ts
 const REFRESH_TOKEN_DIVIDER = "|";
 const DEFAULT_SESSION_INACTIVE_DURATION_MS = 1e3 * 60 * 60 * 24 * 30;
 /** @internal */
 const REFRESH_TOKEN_REUSE_WINDOW_MS = 10 * 1e3;
-/** @internal */
-async function createRefreshToken(ctx, config, sessionId, parentRefreshTokenId) {
-	const expirationTime = Date.now() + (config.session?.inactiveDurationMs ?? readConfigSync(envOptionalNumber("AUTH_SESSION_INACTIVE_DURATION_MS")) ?? DEFAULT_SESSION_INACTIVE_DURATION_MS);
-	return authDb(ctx, config).refreshTokens.create({
-		sessionId,
-		expirationTime,
-		parentRefreshTokenId: parentRefreshTokenId ?? void 0
-	});
-}
+const refreshTokenExpirationTime = (config, now = Date.now()) => now + (config.session?.inactiveDurationMs ?? readConfigSync(envOptionalNumber("AUTH_SESSION_INACTIVE_DURATION_MS")) ?? DEFAULT_SESSION_INACTIVE_DURATION_MS);
 /** @internal */
 const parseRefreshToken = (refreshToken) => {
 	const [refreshTokenId, sessionId] = refreshToken.split(REFRESH_TOKEN_DIVIDER);
 	const message = `Can't parse refresh token: ${maybeRedact(refreshToken)}`;
-	if (refreshTokenId == null || sessionId == null) return Effect.fail(new ConvexError({
+	if (refreshTokenId == null || sessionId == null) throw new ConvexError({
 		code: "INVALID_REFRESH_TOKEN",
 		message
-	}));
-	return Effect.succeed({
+	});
+	return {
 		refreshTokenId,
 		sessionId
-	});
-};
-/** @internal */
-function invalidateRefreshTokensInSubtree(ctx, refreshToken, config) {
-	const db = authDb(ctx, config);
-	return Effect.gen(function* () {
-		const tokensToInvalidate = [refreshToken];
-		const visited = new Set([refreshToken._id]);
-		let frontier = [refreshToken._id];
-		while (frontier.length > 0) {
-			const nextFrontier = [];
-			for (const currentTokenId of frontier) {
-				const children = yield* Effect.promise(() => db.refreshTokens.getChildren(refreshToken.sessionId, currentTokenId));
-				for (const child of children) {
-					if (visited.has(child._id)) continue;
-					visited.add(child._id);
-					tokensToInvalidate.push(child);
-					nextFrontier.push(child._id);
-				}
-			}
-			frontier = nextFrontier;
-		}
-		yield* Effect.forEach(tokensToInvalidate, (token) => token.firstUsedTime === void 0 || token.firstUsedTime > Date.now() - REFRESH_TOKEN_REUSE_WINDOW_MS ? Effect.promise(() => db.refreshTokens.patch(token._id, { firstUsedTime: Date.now() - REFRESH_TOKEN_REUSE_WINDOW_MS })) : Effect.void, { discard: true });
-		return tokensToInvalidate;
-	});
-}
-/** @internal */
-const refreshTokenIfValid = (ctx, refreshTokenId, tokenSessionId, config) => {
-	const db = authDb(ctx, config);
-	const fetchDoc = (promise, failMsg) => Effect.tryPromise({
-		try: promise,
-		catch: () => failMsg
-	}).pipe(Effect.catch((message) => Effect.sync(() => {
-		log(LOG_LEVELS.ERROR, message);
-		return null;
-	})));
-	return fetchDoc(() => db.refreshTokens.getById(refreshTokenId), "Invalid refresh token format").pipe(Effect.flatMap((doc) => doc !== null ? Effect.succeed(doc) : Effect.fail("Invalid refresh token")), Effect.flatMap((doc) => doc.expirationTime >= Date.now() ? Effect.succeed(doc) : Effect.fail("Expired refresh token")), Effect.flatMap((doc) => doc.sessionId === tokenSessionId ? Effect.succeed(doc) : Effect.fail("Invalid refresh token session ID"))).pipe(Effect.flatMap((refreshTokenDoc) => fetchDoc(() => db.sessions.getById(refreshTokenDoc.sessionId), "Invalid refresh token session format").pipe(Effect.flatMap((session) => session !== null ? Effect.succeed(session) : Effect.fail("Invalid refresh token session")), Effect.flatMap((session) => session.expirationTime >= Date.now() ? Effect.succeed(session) : Effect.fail("Expired refresh token session")), Effect.map((session) => ({
-		session,
-		refreshTokenDoc
-	})))), Effect.catch((message) => Effect.sync(() => {
-		log(LOG_LEVELS.ERROR, message);
-		return null;
-	})));
+	};
 };
 
 //#endregion
-export { REFRESH_TOKEN_DIVIDER, REFRESH_TOKEN_REUSE_WINDOW_MS, createRefreshToken, invalidateRefreshTokensInSubtree, parseRefreshToken, refreshTokenIfValid };
+export { REFRESH_TOKEN_DIVIDER, REFRESH_TOKEN_REUSE_WINDOW_MS, parseRefreshToken, refreshTokenExpirationTime };
 //# sourceMappingURL=refresh.js.map

package/dist/server/runtime.d.ts

@@ -1,9 +1,10 @@
-import { AuthProviderConfig, ConvexAuthConfig, CorsConfig, Doc, HttpKeyContext, KeyDoc, KeyScope, ScopeChecker, UserOrderBy, UserWhere } from "./types.js";
+import { ComponentCtx, ComponentReadCtx } from "./componentContext.js";
+import { AuthProviderConfig, ConvexAuthConfig, CorsConfig, HttpKeyContext, KeyDoc, KeyScope, ScopeChecker, UserOrderBy, UserWhere } from "./types.js";
 import { AuthProfile, SignInParams } from "./payloads.js";
 import { HttpAuthContext, HttpAuthContextConfig, OptionalHttpAuthContext } from "./http.js";
 import { createGroupConnectionDomain } from "./sso/domain.js";
-import * as convex_values1045 from "convex/values";
-import * as convex_server100 from "convex/server";
+import * as convex_values1133 from "convex/values";
+import * as convex_server106 from "convex/server";
 import { GenericActionCtx, GenericDataModel, HttpRouter } from "convex/server";
 
 //#region src/server/runtime.d.ts
@@ -31,33 +32,21 @@ declare function Auth(config_: ConvexAuthConfig): {
    */
   auth: {
     user: {
-      get: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, userId: string) => Promise<any>;
-      list: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts?: {
+      get: (ctx: ComponentReadCtx, userId: string) => Promise<any>;
+      list: (ctx: ComponentReadCtx, opts?: {
         where?: UserWhere;
         limit?: number;
         cursor?: string | null;
         orderBy?: UserOrderBy;
         order?: "asc" | "desc";
       }) => Promise<any>;
-      viewer: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      } & {
-        auth: convex_server100.Auth;
+      viewer: (ctx: ComponentReadCtx & {
+        auth: convex_server106.Auth;
       }) => Promise<any>;
-      update: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, userId: string, data: Record<string, unknown>) => Promise<{
+      update: (ctx: ComponentCtx, userId: string, data: Record<string, unknown>) => Promise<{
         userId: string;
       }>;
-      setActiveGroup: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, opts: {
+      setActiveGroup: (ctx: ComponentCtx, opts: {
         userId: string;
         groupId: string | null;
       }) => Promise<{
@@ -67,15 +56,10 @@ declare function Auth(config_: ConvexAuthConfig): {
         userId: string;
         groupId: string;
       }>;
-      getActiveGroup: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts: {
+      getActiveGroup: (ctx: ComponentReadCtx, opts: {
         userId: string;
       }) => Promise<string | null>;
-      delete: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, userId: string, opts?: {
+      delete: (ctx: ComponentCtx, userId: string, opts?: {
         cascade?: boolean;
       }) => Promise<{
         userId: string;
@@ -83,21 +67,17 @@ declare function Auth(config_: ConvexAuthConfig): {
     };
     session: {
       current: (ctx: {
-        auth: convex_server100.Auth;
-      }) => Promise<convex_values1045.GenericId<"Session"> | null>;
+        auth: convex_server106.Auth;
+      }) => Promise<convex_values1133.GenericId<"Session"> | null>;
       invalidate: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>, args: {
-        userId: convex_values1045.GenericId<"User">;
-        except?: convex_values1045.GenericId<"Session">[];
+        userId: convex_values1133.GenericId<"User">;
+        except?: convex_values1133.GenericId<"Session">[];
       }) => Promise<{
-        userId: convex_values1045.GenericId<"User">;
-        except: convex_values1045.GenericId<"Session">[];
+        userId: convex_values1133.GenericId<"User">;
+        except: convex_values1133.GenericId<"Session">[];
       }>;
-      get: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, sessionId: string) => Promise<any>;
-      list: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts: {
+      get: (ctx: ComponentReadCtx, sessionId: string) => Promise<any>;
+      list: (ctx: ComponentReadCtx, opts: {
         userId: string;
       }) => Promise<any>;
     };
@@ -142,55 +122,36 @@ declare function Auth(config_: ConvexAuthConfig): {
       }) => Promise<{
         accountId: string;
       }>;
-      delete: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, accountId: string) => Promise<{
+      delete: (ctx: ComponentCtx, accountId: string) => Promise<{
         accountId: string;
       }>;
-      listPasskeys: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts: {
+      listPasskeys: (ctx: ComponentReadCtx, opts: {
         userId: string;
       }) => Promise<any>;
-      renamePasskey: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, passkeyId: string, name: string) => Promise<{
+      renamePasskey: (ctx: ComponentCtx, passkeyId: string, name: string) => Promise<{
         passkeyId: string;
       }>;
-      deletePasskey: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, passkeyId: string) => Promise<{
+      deletePasskey: (ctx: ComponentCtx, passkeyId: string) => Promise<{
         passkeyId: string;
       }>;
-      listTotps: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts: {
+      listTotps: (ctx: ComponentReadCtx, opts: {
         userId: string;
       }) => Promise<any>;
-      deleteTotp: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, totpId: string) => Promise<{
+      deleteTotp: (ctx: ComponentCtx, totpId: string) => Promise<{
         totpId: string;
       }>;
     };
     provider: {
-      signIn: <DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>, providerConfig: AuthProviderConfig, args: {
-        accountId?: convex_values1045.GenericId<"Account">;
+      signIn: (<DataModel extends GenericDataModel>(ctx: GenericActionCtx<DataModel>, providerConfig: AuthProviderConfig, args: {
+        accountId?: convex_values1133.GenericId<"Account">;
         params?: SignInParams;
       }) => Promise<{
-        userId: convex_values1045.GenericId<"User">;
-        sessionId: convex_values1045.GenericId<"Session">;
-      } | null>;
+        userId: string;
+        sessionId: string;
+      } | null>) | undefined;
     };
     group: {
-      create: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, data: {
+      create: (ctx: ComponentCtx, data: {
         name: string;
         slug?: string;
         type?: string;
@@ -203,12 +164,8 @@ declare function Auth(config_: ConvexAuthConfig): {
       }) => Promise<{
         groupId: string;
       }>;
-      get: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, groupId: string) => Promise<any>;
-      list: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts?: {
+      get: (ctx: ComponentReadCtx, groupId: string) => Promise<any>;
+      list: (ctx: ComponentReadCtx, opts?: {
         where?: {
           slug?: string;
           type?: string;
@@ -229,21 +186,13 @@ declare function Auth(config_: ConvexAuthConfig): {
         orderBy?: "_creationTime" | "name" | "slug" | "type";
         order?: "asc" | "desc";
       }) => Promise<any>;
-      update: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, groupId: string, data: Record<string, unknown>) => Promise<{
+      update: (ctx: ComponentCtx, groupId: string, data: Record<string, unknown>) => Promise<{
         groupId: string;
       }>;
-      delete: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, groupId: string) => Promise<{
+      delete: (ctx: ComponentCtx, groupId: string) => Promise<{
         groupId: string;
       }>;
-      ancestors: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts: {
+      ancestors: (ctx: ComponentReadCtx, opts: {
         groupId: string;
         maxDepth?: number;
         includeSelf?: boolean;
@@ -254,10 +203,7 @@ declare function Auth(config_: ConvexAuthConfig): {
       }>;
     };
     member: {
-      create: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, data: {
+      create: (ctx: ComponentCtx, data: {
         groupId: string;
         userId: string;
         roleIds?: string[];
@@ -266,12 +212,8 @@ declare function Auth(config_: ConvexAuthConfig): {
       }) => Promise<{
         memberId: string;
       }>;
-      get: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, memberId: string) => Promise<any>;
-      list: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts?: {
+      get: (ctx: ComponentReadCtx, memberId: string) => Promise<any>;
+      list: (ctx: ComponentReadCtx, opts?: {
         where?: {
           groupId?: string;
           userId?: string;
@@ -283,21 +225,13 @@ declare function Auth(config_: ConvexAuthConfig): {
         orderBy?: "_creationTime" | "status";
         order?: "asc" | "desc";
       }) => Promise<any>;
-      delete: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, memberId: string) => Promise<{
+      delete: (ctx: ComponentCtx, memberId: string) => Promise<{
         memberId: string;
       }>;
-      update: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, memberId: string, data: Record<string, unknown>) => Promise<{
+      update: (ctx: ComponentCtx, memberId: string, data: Record<string, unknown>) => Promise<{
         memberId: string;
       }>;
-      inspect: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts: {
+      inspect: (ctx: ComponentReadCtx, opts: {
         userId: string;
         groupId: string;
         ancestry?: boolean;
@@ -320,9 +254,7 @@ declare function Auth(config_: ConvexAuthConfig): {
         roleIds: string[];
         grants: string[];
       }>;
-      require: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts: {
+      require: (ctx: ComponentReadCtx, opts: {
         userId: string;
         groupId: string;
         ancestry?: boolean;
@@ -345,10 +277,7 @@ declare function Auth(config_: ConvexAuthConfig): {
       }>;
     };
     invite: {
-      create: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, data: {
+      create: (ctx: ComponentCtx, data: {
         groupId?: string;
         invitedByUserId?: string;
         email?: string;
@@ -359,24 +288,15 @@ declare function Auth(config_: ConvexAuthConfig): {
         inviteId: string;
         token: string;
       }>;
-      get: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, inviteId: string) => Promise<any>;
+      get: (ctx: ComponentReadCtx, inviteId: string) => Promise<any>;
       token: {
-        get: (ctx: {
-          runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        }, token: string) => Promise<any>;
-        accept: (ctx: {
-          runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-          runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-        }, args: {
+        get: (ctx: ComponentReadCtx, token: string) => Promise<any>;
+        accept: (ctx: ComponentCtx, args: {
           token: string;
           acceptedByUserId: string;
         }) => Promise<any>;
       };
-      list: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts?: {
+      list: (ctx: ComponentReadCtx, opts?: {
         where?: {
           tokenHash?: string;
           groupId?: string;
@@ -391,25 +311,16 @@ declare function Auth(config_: ConvexAuthConfig): {
         orderBy?: "_creationTime" | "status" | "email" | "expiresTime" | "acceptedTime";
         order?: "asc" | "desc";
       }) => Promise<any>;
-      accept: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, inviteId: string, acceptedByUserId?: string) => Promise<{
+      accept: (ctx: ComponentCtx, inviteId: string, acceptedByUserId?: string) => Promise<{
         inviteId: string;
         acceptedByUserId: string | null;
       }>;
-      revoke: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, inviteId: string) => Promise<{
+      revoke: (ctx: ComponentCtx, inviteId: string) => Promise<{
         inviteId: string;
       }>;
     };
     key: {
-      create: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, opts: {
+      create: (ctx: ComponentCtx, opts: {
         userId: string;
         name: string;
         scopes: KeyScope[];
@@ -423,17 +334,12 @@ declare function Auth(config_: ConvexAuthConfig): {
         keyId: string;
         secret: string;
       }>;
-      verify: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, rawKey: string) => Promise<{
+      verify: (ctx: ComponentCtx, rawKey: string) => Promise<{
         userId: string;
         keyId: string;
         scopes: ScopeChecker;
       }>;
-      list: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, opts?: {
+      list: (ctx: ComponentReadCtx, opts?: {
         where?: {
           userId?: string;
           revoked?: boolean;
@@ -445,13 +351,8 @@ declare function Auth(config_: ConvexAuthConfig): {
         orderBy?: "_creationTime" | "name" | "lastUsedAt" | "expiresAt" | "revoked";
         order?: "asc" | "desc";
       }) => Promise<any>;
-      get: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-      }, keyId: string) => Promise<KeyDoc | null>;
-      update: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, keyId: string, data: {
+      get: (ctx: ComponentReadCtx, keyId: string) => Promise<KeyDoc | null>;
+      update: (ctx: ComponentCtx, keyId: string, data: {
         name?: string;
         scopes?: KeyScope[];
         rateLimit?: {
@@ -461,22 +362,13 @@ declare function Auth(config_: ConvexAuthConfig): {
       }) => Promise<{
         keyId: string;
       }>;
-      revoke: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, keyId: string) => Promise<{
+      revoke: (ctx: ComponentCtx, keyId: string) => Promise<{
         keyId: string;
       }>;
-      delete: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, keyId: string) => Promise<{
+      delete: (ctx: ComponentCtx, keyId: string) => Promise<{
         keyId: string;
       }>;
-      rotate: (ctx: {
-        runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        runMutation: <Mutation extends convex_server100.FunctionReference<"mutation", "public" | "internal">>(mutation: Mutation, ...args: convex_server100.OptionalRestArgs<Mutation>) => Promise<convex_server100.FunctionReturnType<Mutation>>;
-      }, keyId: string, opts?: {
+      rotate: (ctx: ComponentCtx, keyId: string, opts?: {
         name?: string;
         expiresAt?: number;
       }) => Promise<{
@@ -541,32 +433,24 @@ declare function Auth(config_: ConvexAuthConfig): {
       context: {
         <TResolve extends Record<string, unknown> = Record<string, never>, TCtx extends {
           auth: {
-            getUserIdentity: () => Promise<convex_server100.UserIdentity | null>;
+            getUserIdentity: () => Promise<convex_server106.UserIdentity | null>;
           };
-        } & {
-          runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        } = {
+        } & ComponentReadCtx = {
           auth: {
-            getUserIdentity: () => Promise<convex_server100.UserIdentity | null>;
+            getUserIdentity: () => Promise<convex_server106.UserIdentity | null>;
           };
-        } & {
-          runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        }>(ctx: TCtx, request: Request, config: HttpAuthContextConfig<TResolve, TCtx> & {
+        } & ComponentReadCtx>(ctx: TCtx, request: Request, config: HttpAuthContextConfig<TResolve, TCtx> & {
           optional: true;
         }): Promise<OptionalHttpAuthContext & TResolve>;
         <TResolve extends Record<string, unknown> = Record<string, never>, TCtx extends {
           auth: {
-            getUserIdentity: () => Promise<convex_server100.UserIdentity | null>;
+            getUserIdentity: () => Promise<convex_server106.UserIdentity | null>;
           };
-        } & {
-          runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        } = {
+        } & ComponentReadCtx = {
           auth: {
-            getUserIdentity: () => Promise<convex_server100.UserIdentity | null>;
+            getUserIdentity: () => Promise<convex_server106.UserIdentity | null>;
           };
-        } & {
-          runQuery: <Query extends convex_server100.FunctionReference<"query", "public" | "internal">>(query: Query, ...args: convex_server100.OptionalRestArgs<Query>) => Promise<convex_server100.FunctionReturnType<Query>>;
-        }>(ctx: TCtx, request: Request, config?: HttpAuthContextConfig<TResolve, TCtx>): Promise<HttpAuthContext & TResolve>;
+        } & ComponentReadCtx>(ctx: TCtx, request: Request, config?: HttpAuthContextConfig<TResolve, TCtx>): Promise<HttpAuthContext & TResolve>;
       };
       /**
        * Wrap an HTTP action handler with Bearer token authentication.
@@ -598,7 +482,7 @@ declare function Auth(config_: ConvexAuthConfig): {
           action: string;
         };
         cors?: CorsConfig;
-      }) => convex_server100.PublicHttpAction;
+      }) => convex_server106.PublicHttpAction;
       /**
        * Register a Bearer-authenticated route **and** its OPTIONS preflight
        * in a single call.
@@ -644,22 +528,22 @@ declare function Auth(config_: ConvexAuthConfig): {
    *
    * Also used for refreshing the session.
    */
-  signIn: convex_server100.RegisteredAction<"public", {
+  signIn: convex_server106.RegisteredAction<"public", {
     provider?: string | undefined;
-    params?: Record<string, string | number | boolean | (string | number | boolean | null)[] | Record<string, string | number | boolean | (string | number | boolean | null)[] | null> | null> | undefined;
     verifier?: string | undefined;
+    params?: Record<string, string | number | boolean | (string | number | boolean | null)[] | Record<string, string | number | boolean | (string | number | boolean | null)[] | null> | null> | undefined;
     refreshToken?: string | undefined;
     calledBy?: string | undefined;
   }, Promise<SignInActionResult>>;
   /**
    * Action called by the client to invalidate the current session.
    */
-  signOut: convex_server100.RegisteredAction<"public", {}, Promise<void>>;
+  signOut: convex_server106.RegisteredAction<"public", {}, Promise<void>>;
   /**
    * Internal mutation used by the library to read and write
    * to the database during signin and signout.
    */
-  store: convex_server100.RegisteredMutation<"internal", {
+  store: convex_server106.RegisteredMutation<"internal", {
     args: {
       sessionId?: string | undefined;
       type: "signIn";
@@ -678,6 +562,7 @@ declare function Auth(config_: ConvexAuthConfig): {
       generateTokens: boolean;
       allowExtraProviders: boolean;
     } | {
+      signature?: string | undefined;
       type: "verifier";
     } | {
       type: "verifierSignature";
@@ -685,36 +570,36 @@ declare function Auth(config_: ConvexAuthConfig): {
       signature: string;
     } | {
       accountExtend?: {
-        saml?: {
-          attributes?: Record<string, string | string[]> | undefined;
-          sessionIndex?: string | undefined;
-        } | undefined;
         identity?: {
           type?: string | undefined;
-          protocol?: string | undefined;
           provider?: string | undefined;
           providerAccountId?: string | undefined;
+          protocol?: string | undefined;
           connectionId?: string | undefined;
           subject?: string | undefined;
           issuer?: string | undefined;
           discoveryUrl?: string | undefined;
           entityId?: string | undefined;
         } | undefined;
+        saml?: {
+          attributes?: Record<string, string | string[]> | undefined;
+          sessionIndex?: string | undefined;
+        } | undefined;
       } | undefined;
       profile: Record<string, string | number | boolean | (string | number | boolean | null)[] | Record<string, string | number | boolean | (string | number | boolean | null)[] | null> | null>;
       type: "userOAuth";
       provider: string;
-      signature: string;
       providerAccountId: string;
+      signature: string;
     } | {
       email?: string | undefined;
       phone?: string | undefined;
       accountId?: string | undefined;
-      code: string;
       type: "createVerificationCode";
+      expirationTime: number;
       provider: string;
+      code: string;
       allowExtraProviders: boolean;
-      expirationTime: number;
     } | {
       shouldLinkViaEmail?: boolean | undefined;
       shouldLinkViaPhone?: boolean | undefined;
@@ -744,16 +629,7 @@ declare function Auth(config_: ConvexAuthConfig): {
       type: "invalidateSessions";
       userId: string;
     };
-  }, Promise<string | void | {
-    token: string;
-    refreshToken: string;
-  } | {
-    userId: convex_values1045.GenericId<"User">;
-    sessionId: convex_values1045.GenericId<"Session">;
-  } | {
-    account: Doc<"Account">;
-    user: Doc<"User">;
-  } | null>>;
+  }, Promise<unknown>>;
 };
 //#endregion
 export { Auth };