@robelest/convex-auth 0.0.4-preview.32 → 0.0.4-preview.34

package/dist/server/validators.d.ts

@@ -0,0 +1,745 @@
+import * as convex_values54 from "convex/values";
+import { Infer, Validator, v } from "convex/values";
+import * as convex_server13 from "convex/server";
+
+//#region src/server/validators.d.ts
+/**
+ * Validators a consumer may supply for the `extend` field of each table.
+ *
+ * Passed as `createAuth({ extend })`. Every entry is optional; a missing
+ * entry falls back to `v.any()`, preserving the untyped default.
+ */
+type AuthExtendValidators = {
+  /** Shape of `User.extend`. */User?: Validator<any, any, any>; /** Shape of `Group.extend`. */
+  Group?: Validator<any, any, any>; /** Shape of `GroupMember.extend`. */
+  GroupMember?: Validator<any, any, any>;
+};
+type ExtendFor<TExtend extends AuthExtendValidators, K extends keyof AuthExtendValidators> = TExtend[K] extends Validator<any, any, any> ? TExtend[K] : ReturnType<typeof v.any>;
+/**
+ * Build the `auth.v.*` validator namespace from the consumer's `extend`
+ * config.
+ *
+ * `vUserDoc`/`vGroupDoc`/`vGroupMemberDoc` already declare an
+ * `extend: v.optional(v.any())` field; this rebuilds each with the
+ * supplied validator so the inferred type carries the real shape while
+ * the runtime validator still accepts the stored document.
+ *
+ * @typeParam TExtend - The consumer's per-table `extend` validators.
+ * @param extend - The `extend` map from `createAuth` config. Defaults to
+ *   an empty object (all `extend` fields stay `v.any()`).
+ * @returns The `auth.v` namespace: `user`, `group`, `member`, `invite`,
+ *   `viewer`, `viewerWithGroups`, and the `list` page-wrapper helper.
+ *
+ * @example
+ * ```ts
+ * const av = buildAuthValidators({
+ *   User: v.object({ stripeCustomerId: v.optional(v.string()) }),
+ * });
+ * // Infer<typeof av.viewer> -> User document with typed `extend`
+ * ```
+ */
+declare function buildAuthValidators<TExtend extends AuthExtendValidators>(extend?: TExtend): {
+  /** Single User document validator (extend-aware). */user: convex_values54.VObject<convex_server13.Expand<{ [Property in "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)]?: Exclude<Infer<(Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  })[Property]>, undefined> | undefined } & { [Property_1 in Exclude<"email", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_creationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"name", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"image", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"extend", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"emailVerificationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"phone", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"phoneVerificationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"isAnonymous", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"lastActiveGroup", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_id", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)>]: Infer<(Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  })[Property_1]> }>, Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  }, "required", "email" | "_creationTime" | "name" | "image" | "extend" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "_id" | `extend.${convex_values54.VOptional<ExtendFor<TExtend, "User">>["fieldPaths"]}`>; /** Single Group document validator (extend-aware). */
+  group: convex_values54.VObject<convex_server13.Expand<{ [Property_2 in "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)]?: Exclude<Infer<(Omit<{
+    name: convex_values54.VString<string, "required">;
+    slug: convex_values54.VString<string | undefined, "optional">;
+    type: convex_values54.VString<string | undefined, "optional">;
+    parentGroupId: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    rootGroupId: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    isRoot: convex_values54.VBoolean<boolean | undefined, "optional">;
+    tags: convex_values54.VArray<{
+      value: string;
+      key: string;
+    }[] | undefined, convex_values54.VObject<{
+      value: string;
+      key: string;
+    }, {
+      key: convex_values54.VString<string, "required">;
+      value: convex_values54.VString<string, "required">;
+    }, "required", "value" | "key">, "optional">;
+    policy: convex_values54.VObject<{
+      extend?: any;
+      identity: {
+        accountLinking: {
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        };
+      };
+      version: 1;
+      provisioning: {
+        user: {
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        };
+        scimReuse: {
+          user: "none" | "externalId";
+        };
+        jit: {
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        };
+        deprovision: {
+          mode: "soft" | "hard";
+        };
+        groups: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        };
+        roles: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        };
+      };
+    } | undefined, {
+      version: convex_values54.VLiteral<1, "required">;
+      identity: convex_values54.VObject<{
+        accountLinking: {
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        };
+      }, {
+        accountLinking: convex_values54.VObject<{
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        }, {
+          oidc: convex_values54.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values54.VLiteral<"verifiedEmail", "required">, convex_values54.VLiteral<"none", "required">, convex_values54.VLiteral<"sameConnection", "required">], "required", never>;
+          saml: convex_values54.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values54.VLiteral<"verifiedEmail", "required">, convex_values54.VLiteral<"none", "required">, convex_values54.VLiteral<"sameConnection", "required">], "required", never>;
+        }, "required", "saml" | "oidc">;
+      }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
+      provisioning: convex_values54.VObject<{
+        user: {
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        };
+        scimReuse: {
+          user: "none" | "externalId";
+        };
+        jit: {
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        };
+        deprovision: {
+          mode: "soft" | "hard";
+        };
+        groups: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        };
+        roles: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        };
+      }, {
+        user: convex_values54.VObject<{
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        }, {
+          createOnSignIn: convex_values54.VBoolean<boolean, "required">;
+          updateProfileOnLogin: convex_values54.VUnion<"never" | "missing" | "always", [convex_values54.VLiteral<"never", "required">, convex_values54.VLiteral<"missing", "required">, convex_values54.VLiteral<"always", "required">], "required", never>;
+          updateProfileFromScim: convex_values54.VUnion<"never" | "missing" | "always", [convex_values54.VLiteral<"never", "required">, convex_values54.VLiteral<"missing", "required">, convex_values54.VLiteral<"always", "required">], "required", never>;
+          authority: convex_values54.VUnion<"app" | "sso" | "scim", [convex_values54.VLiteral<"app", "required">, convex_values54.VLiteral<"sso", "required">, convex_values54.VLiteral<"scim", "required">], "required", never>;
+        }, "required", "createOnSignIn" | "updateProfileOnLogin" | "updateProfileFromScim" | "authority">;
+        scimReuse: convex_values54.VObject<{
+          user: "none" | "externalId";
+        }, {
+          user: convex_values54.VUnion<"none" | "externalId", [convex_values54.VLiteral<"externalId", "required">, convex_values54.VLiteral<"none", "required">], "required", never>;
+        }, "required", "user">;
+        jit: convex_values54.VObject<{
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        }, {
+          mode: convex_values54.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values54.VLiteral<"off", "required">, convex_values54.VLiteral<"createUser", "required">, convex_values54.VLiteral<"createUserAndMembership", "required">], "required", never>;
+          defaultRole: convex_values54.VString<string | undefined, "optional">;
+          defaultRoleIds: convex_values54.VArray<string[] | undefined, convex_values54.VString<string, "required">, "optional">;
+        }, "required", "mode" | "defaultRole" | "defaultRoleIds">;
+        deprovision: convex_values54.VObject<{
+          mode: "soft" | "hard";
+        }, {
+          mode: convex_values54.VUnion<"soft" | "hard", [convex_values54.VLiteral<"soft", "required">, convex_values54.VLiteral<"hard", "required">], "required", never>;
+        }, "required", "mode">;
+        groups: convex_values54.VObject<{
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        }, {
+          mode: convex_values54.VUnion<"ignore" | "sync", [convex_values54.VLiteral<"ignore", "required">, convex_values54.VLiteral<"sync", "required">], "required", never>;
+          source: convex_values54.VLiteral<"protocol", "required">;
+          mapping: convex_values54.VRecord<Record<string, string[]> | undefined, convex_values54.VString<string, "required">, convex_values54.VArray<string[], convex_values54.VString<string, "required">, "required">, "optional", string>;
+        }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
+        roles: convex_values54.VObject<{
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        }, {
+          mode: convex_values54.VUnion<"map" | "ignore", [convex_values54.VLiteral<"ignore", "required">, convex_values54.VLiteral<"map", "required">], "required", never>;
+          source: convex_values54.VLiteral<"protocol", "required">;
+          mapping: convex_values54.VRecord<Record<string, string[]> | undefined, convex_values54.VString<string, "required">, convex_values54.VArray<string[], convex_values54.VString<string, "required">, "required">, "optional", string>;
+        }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
+      }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.mode" | "groups.source" | "groups.mapping" | `groups.mapping.${string}` | "roles.mode" | "roles.source" | "roles.mapping" | `roles.mapping.${string}`>;
+      extend: convex_values54.VAny<any, "optional", string>;
+    }, "optional", "identity" | "extend" | `extend.${string}` | "version" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.mode" | "provisioning.groups.source" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.mode" | "provisioning.roles.source" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"Group">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "Group">>;
+  })[Property_2]>, undefined> | undefined } & { [Property_1_1 in Exclude<"_creationTime", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"name", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"type", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"extend", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_id", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"slug", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"parentGroupId", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"rootGroupId", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"isRoot", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"tags", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"policy", "type" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | (convex_values54.VOptional<ExtendFor<TExtend, "Group">>["isOptional"] extends "optional" ? "extend" : never)>]: Infer<(Omit<{
+    name: convex_values54.VString<string, "required">;
+    slug: convex_values54.VString<string | undefined, "optional">;
+    type: convex_values54.VString<string | undefined, "optional">;
+    parentGroupId: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    rootGroupId: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    isRoot: convex_values54.VBoolean<boolean | undefined, "optional">;
+    tags: convex_values54.VArray<{
+      value: string;
+      key: string;
+    }[] | undefined, convex_values54.VObject<{
+      value: string;
+      key: string;
+    }, {
+      key: convex_values54.VString<string, "required">;
+      value: convex_values54.VString<string, "required">;
+    }, "required", "value" | "key">, "optional">;
+    policy: convex_values54.VObject<{
+      extend?: any;
+      identity: {
+        accountLinking: {
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        };
+      };
+      version: 1;
+      provisioning: {
+        user: {
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        };
+        scimReuse: {
+          user: "none" | "externalId";
+        };
+        jit: {
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        };
+        deprovision: {
+          mode: "soft" | "hard";
+        };
+        groups: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        };
+        roles: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        };
+      };
+    } | undefined, {
+      version: convex_values54.VLiteral<1, "required">;
+      identity: convex_values54.VObject<{
+        accountLinking: {
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        };
+      }, {
+        accountLinking: convex_values54.VObject<{
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        }, {
+          oidc: convex_values54.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values54.VLiteral<"verifiedEmail", "required">, convex_values54.VLiteral<"none", "required">, convex_values54.VLiteral<"sameConnection", "required">], "required", never>;
+          saml: convex_values54.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values54.VLiteral<"verifiedEmail", "required">, convex_values54.VLiteral<"none", "required">, convex_values54.VLiteral<"sameConnection", "required">], "required", never>;
+        }, "required", "saml" | "oidc">;
+      }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
+      provisioning: convex_values54.VObject<{
+        user: {
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        };
+        scimReuse: {
+          user: "none" | "externalId";
+        };
+        jit: {
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        };
+        deprovision: {
+          mode: "soft" | "hard";
+        };
+        groups: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        };
+        roles: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        };
+      }, {
+        user: convex_values54.VObject<{
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        }, {
+          createOnSignIn: convex_values54.VBoolean<boolean, "required">;
+          updateProfileOnLogin: convex_values54.VUnion<"never" | "missing" | "always", [convex_values54.VLiteral<"never", "required">, convex_values54.VLiteral<"missing", "required">, convex_values54.VLiteral<"always", "required">], "required", never>;
+          updateProfileFromScim: convex_values54.VUnion<"never" | "missing" | "always", [convex_values54.VLiteral<"never", "required">, convex_values54.VLiteral<"missing", "required">, convex_values54.VLiteral<"always", "required">], "required", never>;
+          authority: convex_values54.VUnion<"app" | "sso" | "scim", [convex_values54.VLiteral<"app", "required">, convex_values54.VLiteral<"sso", "required">, convex_values54.VLiteral<"scim", "required">], "required", never>;
+        }, "required", "createOnSignIn" | "updateProfileOnLogin" | "updateProfileFromScim" | "authority">;
+        scimReuse: convex_values54.VObject<{
+          user: "none" | "externalId";
+        }, {
+          user: convex_values54.VUnion<"none" | "externalId", [convex_values54.VLiteral<"externalId", "required">, convex_values54.VLiteral<"none", "required">], "required", never>;
+        }, "required", "user">;
+        jit: convex_values54.VObject<{
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        }, {
+          mode: convex_values54.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values54.VLiteral<"off", "required">, convex_values54.VLiteral<"createUser", "required">, convex_values54.VLiteral<"createUserAndMembership", "required">], "required", never>;
+          defaultRole: convex_values54.VString<string | undefined, "optional">;
+          defaultRoleIds: convex_values54.VArray<string[] | undefined, convex_values54.VString<string, "required">, "optional">;
+        }, "required", "mode" | "defaultRole" | "defaultRoleIds">;
+        deprovision: convex_values54.VObject<{
+          mode: "soft" | "hard";
+        }, {
+          mode: convex_values54.VUnion<"soft" | "hard", [convex_values54.VLiteral<"soft", "required">, convex_values54.VLiteral<"hard", "required">], "required", never>;
+        }, "required", "mode">;
+        groups: convex_values54.VObject<{
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        }, {
+          mode: convex_values54.VUnion<"ignore" | "sync", [convex_values54.VLiteral<"ignore", "required">, convex_values54.VLiteral<"sync", "required">], "required", never>;
+          source: convex_values54.VLiteral<"protocol", "required">;
+          mapping: convex_values54.VRecord<Record<string, string[]> | undefined, convex_values54.VString<string, "required">, convex_values54.VArray<string[], convex_values54.VString<string, "required">, "required">, "optional", string>;
+        }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
+        roles: convex_values54.VObject<{
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        }, {
+          mode: convex_values54.VUnion<"map" | "ignore", [convex_values54.VLiteral<"ignore", "required">, convex_values54.VLiteral<"map", "required">], "required", never>;
+          source: convex_values54.VLiteral<"protocol", "required">;
+          mapping: convex_values54.VRecord<Record<string, string[]> | undefined, convex_values54.VString<string, "required">, convex_values54.VArray<string[], convex_values54.VString<string, "required">, "required">, "optional", string>;
+        }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
+      }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.mode" | "groups.source" | "groups.mapping" | `groups.mapping.${string}` | "roles.mode" | "roles.source" | "roles.mapping" | `roles.mapping.${string}`>;
+      extend: convex_values54.VAny<any, "optional", string>;
+    }, "optional", "identity" | "extend" | `extend.${string}` | "version" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.mode" | "provisioning.groups.source" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.mode" | "provisioning.roles.source" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"Group">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "Group">>;
+  })[Property_1_1]> }>, Omit<{
+    name: convex_values54.VString<string, "required">;
+    slug: convex_values54.VString<string | undefined, "optional">;
+    type: convex_values54.VString<string | undefined, "optional">;
+    parentGroupId: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    rootGroupId: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    isRoot: convex_values54.VBoolean<boolean | undefined, "optional">;
+    tags: convex_values54.VArray<{
+      value: string;
+      key: string;
+    }[] | undefined, convex_values54.VObject<{
+      value: string;
+      key: string;
+    }, {
+      key: convex_values54.VString<string, "required">;
+      value: convex_values54.VString<string, "required">;
+    }, "required", "value" | "key">, "optional">;
+    policy: convex_values54.VObject<{
+      extend?: any;
+      identity: {
+        accountLinking: {
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        };
+      };
+      version: 1;
+      provisioning: {
+        user: {
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        };
+        scimReuse: {
+          user: "none" | "externalId";
+        };
+        jit: {
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        };
+        deprovision: {
+          mode: "soft" | "hard";
+        };
+        groups: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        };
+        roles: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        };
+      };
+    } | undefined, {
+      version: convex_values54.VLiteral<1, "required">;
+      identity: convex_values54.VObject<{
+        accountLinking: {
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        };
+      }, {
+        accountLinking: convex_values54.VObject<{
+          saml: "verifiedEmail" | "none" | "sameConnection";
+          oidc: "verifiedEmail" | "none" | "sameConnection";
+        }, {
+          oidc: convex_values54.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values54.VLiteral<"verifiedEmail", "required">, convex_values54.VLiteral<"none", "required">, convex_values54.VLiteral<"sameConnection", "required">], "required", never>;
+          saml: convex_values54.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values54.VLiteral<"verifiedEmail", "required">, convex_values54.VLiteral<"none", "required">, convex_values54.VLiteral<"sameConnection", "required">], "required", never>;
+        }, "required", "saml" | "oidc">;
+      }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
+      provisioning: convex_values54.VObject<{
+        user: {
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        };
+        scimReuse: {
+          user: "none" | "externalId";
+        };
+        jit: {
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        };
+        deprovision: {
+          mode: "soft" | "hard";
+        };
+        groups: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        };
+        roles: {
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        };
+      }, {
+        user: convex_values54.VObject<{
+          createOnSignIn: boolean;
+          updateProfileOnLogin: "never" | "missing" | "always";
+          updateProfileFromScim: "never" | "missing" | "always";
+          authority: "app" | "sso" | "scim";
+        }, {
+          createOnSignIn: convex_values54.VBoolean<boolean, "required">;
+          updateProfileOnLogin: convex_values54.VUnion<"never" | "missing" | "always", [convex_values54.VLiteral<"never", "required">, convex_values54.VLiteral<"missing", "required">, convex_values54.VLiteral<"always", "required">], "required", never>;
+          updateProfileFromScim: convex_values54.VUnion<"never" | "missing" | "always", [convex_values54.VLiteral<"never", "required">, convex_values54.VLiteral<"missing", "required">, convex_values54.VLiteral<"always", "required">], "required", never>;
+          authority: convex_values54.VUnion<"app" | "sso" | "scim", [convex_values54.VLiteral<"app", "required">, convex_values54.VLiteral<"sso", "required">, convex_values54.VLiteral<"scim", "required">], "required", never>;
+        }, "required", "createOnSignIn" | "updateProfileOnLogin" | "updateProfileFromScim" | "authority">;
+        scimReuse: convex_values54.VObject<{
+          user: "none" | "externalId";
+        }, {
+          user: convex_values54.VUnion<"none" | "externalId", [convex_values54.VLiteral<"externalId", "required">, convex_values54.VLiteral<"none", "required">], "required", never>;
+        }, "required", "user">;
+        jit: convex_values54.VObject<{
+          defaultRole?: string | undefined;
+          defaultRoleIds?: string[] | undefined;
+          mode: "off" | "createUser" | "createUserAndMembership";
+        }, {
+          mode: convex_values54.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values54.VLiteral<"off", "required">, convex_values54.VLiteral<"createUser", "required">, convex_values54.VLiteral<"createUserAndMembership", "required">], "required", never>;
+          defaultRole: convex_values54.VString<string | undefined, "optional">;
+          defaultRoleIds: convex_values54.VArray<string[] | undefined, convex_values54.VString<string, "required">, "optional">;
+        }, "required", "mode" | "defaultRole" | "defaultRoleIds">;
+        deprovision: convex_values54.VObject<{
+          mode: "soft" | "hard";
+        }, {
+          mode: convex_values54.VUnion<"soft" | "hard", [convex_values54.VLiteral<"soft", "required">, convex_values54.VLiteral<"hard", "required">], "required", never>;
+        }, "required", "mode">;
+        groups: convex_values54.VObject<{
+          mapping?: Record<string, string[]> | undefined;
+          mode: "ignore" | "sync";
+          source: "protocol";
+        }, {
+          mode: convex_values54.VUnion<"ignore" | "sync", [convex_values54.VLiteral<"ignore", "required">, convex_values54.VLiteral<"sync", "required">], "required", never>;
+          source: convex_values54.VLiteral<"protocol", "required">;
+          mapping: convex_values54.VRecord<Record<string, string[]> | undefined, convex_values54.VString<string, "required">, convex_values54.VArray<string[], convex_values54.VString<string, "required">, "required">, "optional", string>;
+        }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
+        roles: convex_values54.VObject<{
+          mapping?: Record<string, string[]> | undefined;
+          mode: "map" | "ignore";
+          source: "protocol";
+        }, {
+          mode: convex_values54.VUnion<"map" | "ignore", [convex_values54.VLiteral<"ignore", "required">, convex_values54.VLiteral<"map", "required">], "required", never>;
+          source: convex_values54.VLiteral<"protocol", "required">;
+          mapping: convex_values54.VRecord<Record<string, string[]> | undefined, convex_values54.VString<string, "required">, convex_values54.VArray<string[], convex_values54.VString<string, "required">, "required">, "optional", string>;
+        }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
+      }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.mode" | "groups.source" | "groups.mapping" | `groups.mapping.${string}` | "roles.mode" | "roles.source" | "roles.mapping" | `roles.mapping.${string}`>;
+      extend: convex_values54.VAny<any, "optional", string>;
+    }, "optional", "identity" | "extend" | `extend.${string}` | "version" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.mode" | "provisioning.groups.source" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.mode" | "provisioning.roles.source" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"Group">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "Group">>;
+  }, "required", "_creationTime" | "name" | "type" | "extend" | "_id" | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.identity" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.saml" | "policy.identity.accountLinking.oidc" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.mode" | "policy.provisioning.roles.source" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}` | `extend.${convex_values54.VOptional<ExtendFor<TExtend, "Group">>["fieldPaths"]}`>; /** Single GroupMember document validator (extend-aware). */
+  member: convex_values54.VObject<convex_server13.Expand<{ [Property_3 in "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)]?: Exclude<Infer<(Omit<{
+    groupId: convex_values54.VId<convex_values54.GenericId<"Group">, "required">;
+    userId: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    role: convex_values54.VString<string | undefined, "optional">;
+    roleIds: convex_values54.VArray<string[] | undefined, convex_values54.VString<string, "required">, "optional">;
+    status: convex_values54.VString<string | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"GroupMember">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>;
+  })[Property_3]>, undefined> | undefined } & { [Property_1_2 in Exclude<"_creationTime", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"extend", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_id", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"groupId", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"userId", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"role", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"roleIds", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"status", "role" | "roleIds" | "status" | (convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["isOptional"] extends "optional" ? "extend" : never)>]: Infer<(Omit<{
+    groupId: convex_values54.VId<convex_values54.GenericId<"Group">, "required">;
+    userId: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    role: convex_values54.VString<string | undefined, "optional">;
+    roleIds: convex_values54.VArray<string[] | undefined, convex_values54.VString<string, "required">, "optional">;
+    status: convex_values54.VString<string | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"GroupMember">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>;
+  })[Property_1_2]> }>, Omit<{
+    groupId: convex_values54.VId<convex_values54.GenericId<"Group">, "required">;
+    userId: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    role: convex_values54.VString<string | undefined, "optional">;
+    roleIds: convex_values54.VArray<string[] | undefined, convex_values54.VString<string, "required">, "optional">;
+    status: convex_values54.VString<string | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"GroupMember">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>;
+  }, "required", "_creationTime" | "extend" | "_id" | "groupId" | "userId" | "role" | "roleIds" | "status" | `extend.${convex_values54.VOptional<ExtendFor<TExtend, "GroupMember">>["fieldPaths"]}`>; /** Single GroupInvite document validator. */
+  invite: convex_values54.VObject<{
+    email?: string | undefined;
+    extend?: any;
+    groupId?: convex_values54.GenericId<"Group"> | undefined;
+    role?: string | undefined;
+    roleIds?: string[] | undefined;
+    invitedByUserId?: convex_values54.GenericId<"User"> | undefined;
+    expiresTime?: number | undefined;
+    acceptedByUserId?: convex_values54.GenericId<"User"> | undefined;
+    acceptedTime?: number | undefined;
+    _creationTime: number;
+    _id: convex_values54.GenericId<"GroupInvite">;
+    status: "pending" | "accepted" | "revoked" | "expired";
+    tokenHash: string;
+  }, {
+    groupId: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    invitedByUserId: convex_values54.VId<convex_values54.GenericId<"User"> | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    tokenHash: convex_values54.VString<string, "required">;
+    role: convex_values54.VString<string | undefined, "optional">;
+    roleIds: convex_values54.VArray<string[] | undefined, convex_values54.VString<string, "required">, "optional">;
+    status: convex_values54.VUnion<"pending" | "accepted" | "revoked" | "expired", [convex_values54.VLiteral<"pending", "required">, convex_values54.VLiteral<"accepted", "required">, convex_values54.VLiteral<"revoked", "required">, convex_values54.VLiteral<"expired", "required">], "required", never>;
+    expiresTime: convex_values54.VFloat64<number | undefined, "optional">;
+    acceptedByUserId: convex_values54.VId<convex_values54.GenericId<"User"> | undefined, "optional">;
+    acceptedTime: convex_values54.VFloat64<number | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"GroupInvite">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "required", "email" | "_creationTime" | "extend" | "_id" | `extend.${string}` | "groupId" | "role" | "roleIds" | "status" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">; /** Single UserEmail document validator. */
+  email: convex_values54.VObject<{
+    provider?: string | undefined;
+    connectionId?: convex_values54.GenericId<"GroupConnection"> | undefined;
+    verificationTime?: number | undefined;
+    accountId?: convex_values54.GenericId<"Account"> | undefined;
+    email: string;
+    _creationTime: number;
+    _id: convex_values54.GenericId<"UserEmail">;
+    source: "saml" | "oidc" | "scim" | "password" | "oauth";
+    userId: convex_values54.GenericId<"User">;
+    isPrimary: boolean;
+  }, {
+    userId: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    email: convex_values54.VString<string, "required">;
+    verificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isPrimary: convex_values54.VBoolean<boolean, "required">;
+    source: convex_values54.VUnion<"saml" | "oidc" | "scim" | "password" | "oauth", [convex_values54.VLiteral<"password", "required">, convex_values54.VLiteral<"oauth", "required">, convex_values54.VLiteral<"oidc", "required">, convex_values54.VLiteral<"saml", "required">, convex_values54.VLiteral<"scim", "required">], "required", never>;
+    accountId: convex_values54.VId<convex_values54.GenericId<"Account"> | undefined, "optional">;
+    provider: convex_values54.VString<string | undefined, "optional">;
+    connectionId: convex_values54.VId<convex_values54.GenericId<"GroupConnection"> | undefined, "optional">;
+    _id: convex_values54.VId<convex_values54.GenericId<"UserEmail">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "required", "email" | "_creationTime" | "provider" | "connectionId" | "_id" | "source" | "userId" | "verificationTime" | "isPrimary" | "accountId">; /** `User | null` — for a `viewer`/current-user query. */
+  viewer: convex_values54.VUnion<convex_server13.Expand<{ [Property in "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)]?: Exclude<Infer<(Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  })[Property]>, undefined> | undefined } & { [Property_1 in Exclude<"email", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_creationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"name", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"image", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"extend", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"emailVerificationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"phone", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"phoneVerificationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"isAnonymous", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"lastActiveGroup", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_id", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)>]: Infer<(Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  })[Property_1]> }> | null, [convex_values54.VObject<convex_server13.Expand<{ [Property in "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)]?: Exclude<Infer<(Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  })[Property]>, undefined> | undefined } & { [Property_1 in Exclude<"email", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_creationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"name", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"image", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"extend", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"emailVerificationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"phone", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"phoneVerificationTime", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"isAnonymous", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"lastActiveGroup", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)> | Exclude<"_id", "email" | "name" | "image" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | (convex_values54.VOptional<ExtendFor<TExtend, "User">>["isOptional"] extends "optional" ? "extend" : never)>]: Infer<(Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  })[Property_1]> }>, Omit<{
+    name: convex_values54.VString<string | undefined, "optional">;
+    image: convex_values54.VString<string | undefined, "optional">;
+    email: convex_values54.VString<string | undefined, "optional">;
+    emailVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    phone: convex_values54.VString<string | undefined, "optional">;
+    phoneVerificationTime: convex_values54.VFloat64<number | undefined, "optional">;
+    isAnonymous: convex_values54.VBoolean<boolean | undefined, "optional">;
+    lastActiveGroup: convex_values54.VId<convex_values54.GenericId<"Group"> | undefined, "optional">;
+    extend: convex_values54.VAny<any, "optional", string>;
+    _id: convex_values54.VId<convex_values54.GenericId<"User">, "required">;
+    _creationTime: convex_values54.VFloat64<number, "required">;
+  }, "extend"> & {
+    extend: convex_values54.VOptional<ExtendFor<TExtend, "User">>;
+  }, "required", "email" | "_creationTime" | "name" | "image" | "extend" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "_id" | `extend.${convex_values54.VOptional<ExtendFor<TExtend, "User">>["fieldPaths"]}`>, convex_values54.VNull<null, "required">], "required", "email" | "_creationTime" | "name" | "image" | "extend" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "_id" | `extend.${convex_values54.VOptional<ExtendFor<TExtend, "User">>["fieldPaths"]}`>; /** Wrap any item validator in the `{ items, nextCursor }` page shape. */
+  list: <V extends Validator<any, any, any>>(item: V) => convex_values54.VObject<{
+    items: V["type"][];
+    nextCursor: string | null;
+  }, {
+    items: convex_values54.VArray<V["type"][], V, "required">;
+    nextCursor: convex_values54.VUnion<string | null, [convex_values54.VString<string, "required">, convex_values54.VNull<null, "required">], "required", never>;
+  }, "required", "items" | "nextCursor">;
+};
+/**
+ * The `auth.v` namespace type, parameterized by the consumer's `extend`.
+ *
+ * @typeParam TExtend - The consumer's per-table `extend` validators.
+ */
+type AuthValidators<TExtend extends AuthExtendValidators = {}> = ReturnType<typeof buildAuthValidators<TExtend>>;
+/**
+ * Inferred current-user document type (extend-aware).
+ *
+ * @typeParam TExtend - The consumer's per-table `extend` validators.
+ */
+type Viewer<TExtend extends AuthExtendValidators = {}> = Infer<AuthValidators<TExtend>["user"]>;
+/**
+ * Inferred Group document type (extend-aware).
+ *
+ * @typeParam TExtend - The consumer's per-table `extend` validators.
+ */
+type Group<TExtend extends AuthExtendValidators = {}> = Infer<AuthValidators<TExtend>["group"]>;
+/**
+ * Inferred GroupMember document type (extend-aware).
+ *
+ * @typeParam TExtend - The consumer's per-table `extend` validators.
+ */
+type Membership<TExtend extends AuthExtendValidators = {}> = Infer<AuthValidators<TExtend>["member"]>;
+//#endregion
+export { AuthExtendValidators, AuthValidators, Group, Membership, Viewer, buildAuthValidators };
+//# sourceMappingURL=validators.d.ts.map