@robelest/convex-auth 0.0.4-preview.33 → 0.0.4-preview.34

package/dist/component/account.js

@@ -0,0 +1,3 @@
+import { accountDelete, accountGet, accountInsert, accountList, accountPatch } from "./public/identity/accounts.js";
+
+export { accountInsert as create, accountDelete as delete, accountGet as get, accountList as list, accountPatch as update };

package/dist/component/convex.config.d.ts

@@ -1,7 +1,7 @@
-import * as convex_server4 from "convex/server";
+import * as convex_server12 from "convex/server";
 
 //#region src/component/convex.config.d.ts
-declare const component: convex_server4.ComponentDefinition<any>;
+declare const component: convex_server12.ComponentDefinition<any>;
 //#endregion
 export { component as default };
 //# sourceMappingURL=convex.config.d.ts.map

package/dist/component/factor/device.js

@@ -0,0 +1,3 @@
+import { deviceAuthorize, deviceDelete, deviceGet, deviceInsert, deviceUpdate } from "../public/factors/devices.js";
+
+export { deviceAuthorize as authorize, deviceInsert as create, deviceDelete as delete, deviceGet as get, deviceUpdate as update };

package/dist/component/factor/passkey.js

@@ -0,0 +1,3 @@
+import { passkeyDelete, passkeyGet, passkeyInsert, passkeyList, passkeyUpdate } from "../public/factors/passkeys.js";
+
+export { passkeyInsert as create, passkeyDelete as delete, passkeyGet as get, passkeyList as list, passkeyUpdate as update };

package/dist/component/factor/totp.js

@@ -0,0 +1,3 @@
+import { totpDelete, totpGet, totpInsert, totpList, totpUpdate } from "../public/factors/totp.js";
+
+export { totpInsert as create, totpDelete as delete, totpGet as get, totpList as list, totpUpdate as update };

package/dist/component/group/invite.js

@@ -0,0 +1,3 @@
+import { inviteAccept, inviteCreate, inviteGet, inviteList, inviteRedeem, inviteRevoke } from "../public/groups/invites.js";
+
+export { inviteAccept as accept, inviteCreate as create, inviteGet as get, inviteList as list, inviteRedeem as redeem, inviteRevoke as revoke };

package/dist/component/group/member.js

@@ -0,0 +1,3 @@
+import { memberAdd, memberGet, memberList, memberRemove, memberResolve, memberUpdate } from "../public/groups/members.js";
+
+export { memberAdd as create, memberRemove as delete, memberGet as get, memberList as list, memberResolve as resolve, memberUpdate as update };

package/dist/component/group.js

@@ -0,0 +1,3 @@
+import { groupAncestors, groupCreate, groupDelete, groupGet, groupList, groupUpdate } from "./public/groups/core.js";
+
+export { groupAncestors as ancestors, groupCreate as create, groupDelete as delete, groupGet as get, groupList as list, groupUpdate as update };

package/dist/component/model.d.ts

@@ -1,59 +1,82 @@
-import * as convex_values477 from "convex/values";
+import * as convex_values566 from "convex/values";
 import { Validator } from "convex/values";
 
 //#region src/component/model.d.ts
-declare const vPaginated: <V extends Validator<any, any, any>>(item: V) => convex_values477.VObject<{
+declare const vPaginated: <V extends Validator<any, any, any>>(item: V) => convex_values566.VObject<{
   items: V["type"][];
   nextCursor: string | null;
 }, {
-  items: convex_values477.VArray<V["type"][], V, "required">;
-  nextCursor: convex_values477.VUnion<string | null, [convex_values477.VString<string, "required">, convex_values477.VNull<null, "required">], "required", never>;
+  items: convex_values566.VArray<V["type"][], V, "required">;
+  nextCursor: convex_values566.VUnion<string | null, [convex_values566.VString<string, "required">, convex_values566.VNull<null, "required">], "required", never>;
 }, "required", "items" | "nextCursor">;
-declare const vUserDoc: convex_values477.VObject<{
-  name?: string | undefined;
+declare const vUserDoc: convex_values566.VObject<{
   email?: string | undefined;
-  phone?: string | undefined;
-  extend?: any;
+  name?: string | undefined;
   image?: string | undefined;
+  extend?: any;
   emailVerificationTime?: number | undefined;
+  phone?: string | undefined;
   phoneVerificationTime?: number | undefined;
   isAnonymous?: boolean | undefined;
-  hasTotp?: boolean | undefined;
+  lastActiveGroup?: convex_values566.GenericId<"Group"> | undefined;
   _creationTime: number;
-  _id: convex_values477.GenericId<"User">;
+  _id: convex_values566.GenericId<"User">;
 }, {
-  name: convex_values477.VString<string | undefined, "optional">;
-  image: convex_values477.VString<string | undefined, "optional">;
-  email: convex_values477.VString<string | undefined, "optional">;
-  emailVerificationTime: convex_values477.VFloat64<number | undefined, "optional">;
-  phone: convex_values477.VString<string | undefined, "optional">;
-  phoneVerificationTime: convex_values477.VFloat64<number | undefined, "optional">;
-  isAnonymous: convex_values477.VBoolean<boolean | undefined, "optional">;
-  hasTotp: convex_values477.VBoolean<boolean | undefined, "optional">;
-  extend: convex_values477.VAny<any, "optional", string>;
-  _id: convex_values477.VId<convex_values477.GenericId<"User">, "required">;
-  _creationTime: convex_values477.VFloat64<number, "required">;
-}, "required", "_creationTime" | "name" | "email" | "phone" | "extend" | "_id" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | "hasTotp" | `extend.${string}`>;
-declare const vGroupDoc: convex_values477.VObject<{
-  slug?: string | undefined;
+  name: convex_values566.VString<string | undefined, "optional">;
+  image: convex_values566.VString<string | undefined, "optional">;
+  email: convex_values566.VString<string | undefined, "optional">;
+  emailVerificationTime: convex_values566.VFloat64<number | undefined, "optional">;
+  phone: convex_values566.VString<string | undefined, "optional">;
+  phoneVerificationTime: convex_values566.VFloat64<number | undefined, "optional">;
+  isAnonymous: convex_values566.VBoolean<boolean | undefined, "optional">;
+  lastActiveGroup: convex_values566.VId<convex_values566.GenericId<"Group"> | undefined, "optional">;
+  extend: convex_values566.VAny<any, "optional", string>;
+  _id: convex_values566.VId<convex_values566.GenericId<"User">, "required">;
+  _creationTime: convex_values566.VFloat64<number, "required">;
+}, "required", "email" | "_creationTime" | "name" | "image" | "extend" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "_id" | `extend.${string}`>;
+declare const vUserEmailDoc: convex_values566.VObject<{
+  provider?: string | undefined;
+  connectionId?: convex_values566.GenericId<"GroupConnection"> | undefined;
+  verificationTime?: number | undefined;
+  accountId?: convex_values566.GenericId<"Account"> | undefined;
+  email: string;
+  _creationTime: number;
+  _id: convex_values566.GenericId<"UserEmail">;
+  source: "saml" | "oidc" | "scim" | "password" | "oauth";
+  userId: convex_values566.GenericId<"User">;
+  isPrimary: boolean;
+}, {
+  userId: convex_values566.VId<convex_values566.GenericId<"User">, "required">;
+  email: convex_values566.VString<string, "required">;
+  verificationTime: convex_values566.VFloat64<number | undefined, "optional">;
+  isPrimary: convex_values566.VBoolean<boolean, "required">;
+  source: convex_values566.VUnion<"saml" | "oidc" | "scim" | "password" | "oauth", [convex_values566.VLiteral<"password", "required">, convex_values566.VLiteral<"oauth", "required">, convex_values566.VLiteral<"oidc", "required">, convex_values566.VLiteral<"saml", "required">, convex_values566.VLiteral<"scim", "required">], "required", never>;
+  accountId: convex_values566.VId<convex_values566.GenericId<"Account"> | undefined, "optional">;
+  provider: convex_values566.VString<string | undefined, "optional">;
+  connectionId: convex_values566.VId<convex_values566.GenericId<"GroupConnection"> | undefined, "optional">;
+  _id: convex_values566.VId<convex_values566.GenericId<"UserEmail">, "required">;
+  _creationTime: convex_values566.VFloat64<number, "required">;
+}, "required", "email" | "_creationTime" | "provider" | "connectionId" | "_id" | "source" | "userId" | "verificationTime" | "isPrimary" | "accountId">;
+declare const vGroupDoc: convex_values566.VObject<{
   type?: string | undefined;
   extend?: any;
-  parentGroupId?: convex_values477.GenericId<"Group"> | undefined;
-  rootGroupId?: convex_values477.GenericId<"Group"> | undefined;
+  slug?: string | undefined;
+  parentGroupId?: convex_values566.GenericId<"Group"> | undefined;
+  rootGroupId?: convex_values566.GenericId<"Group"> | undefined;
   isRoot?: boolean | undefined;
   tags?: {
-    key: string;
     value: string;
+    key: string;
   }[] | undefined;
   policy?: {
     extend?: any;
-    version: 1;
     identity: {
       accountLinking: {
-        oidc: "verifiedEmail" | "none";
-        saml: "verifiedEmail" | "none";
+        saml: "verifiedEmail" | "none" | "sameConnection";
+        oidc: "verifiedEmail" | "none" | "sameConnection";
       };
     };
+    version: 1;
     provisioning: {
       user: {
         createOnSignIn: boolean;
@@ -86,33 +109,33 @@ declare const vGroupDoc: convex_values477.VObject<{
   } | undefined;
   _creationTime: number;
   name: string;
-  _id: convex_values477.GenericId<"Group">;
+  _id: convex_values566.GenericId<"Group">;
 }, {
-  name: convex_values477.VString<string, "required">;
-  slug: convex_values477.VString<string | undefined, "optional">;
-  type: convex_values477.VString<string | undefined, "optional">;
-  parentGroupId: convex_values477.VId<convex_values477.GenericId<"Group"> | undefined, "optional">;
-  rootGroupId: convex_values477.VId<convex_values477.GenericId<"Group"> | undefined, "optional">;
-  isRoot: convex_values477.VBoolean<boolean | undefined, "optional">;
-  tags: convex_values477.VArray<{
-    key: string;
+  name: convex_values566.VString<string, "required">;
+  slug: convex_values566.VString<string | undefined, "optional">;
+  type: convex_values566.VString<string | undefined, "optional">;
+  parentGroupId: convex_values566.VId<convex_values566.GenericId<"Group"> | undefined, "optional">;
+  rootGroupId: convex_values566.VId<convex_values566.GenericId<"Group"> | undefined, "optional">;
+  isRoot: convex_values566.VBoolean<boolean | undefined, "optional">;
+  tags: convex_values566.VArray<{
     value: string;
-  }[] | undefined, convex_values477.VObject<{
     key: string;
+  }[] | undefined, convex_values566.VObject<{
     value: string;
+    key: string;
   }, {
-    key: convex_values477.VString<string, "required">;
-    value: convex_values477.VString<string, "required">;
-  }, "required", "key" | "value">, "optional">;
-  policy: convex_values477.VObject<{
+    key: convex_values566.VString<string, "required">;
+    value: convex_values566.VString<string, "required">;
+  }, "required", "value" | "key">, "optional">;
+  policy: convex_values566.VObject<{
     extend?: any;
-    version: 1;
     identity: {
       accountLinking: {
-        oidc: "verifiedEmail" | "none";
-        saml: "verifiedEmail" | "none";
+        saml: "verifiedEmail" | "none" | "sameConnection";
+        oidc: "verifiedEmail" | "none" | "sameConnection";
       };
     };
+    version: 1;
     provisioning: {
       user: {
         createOnSignIn: boolean;
@@ -143,22 +166,22 @@ declare const vGroupDoc: convex_values477.VObject<{
       };
     };
   } | undefined, {
-    version: convex_values477.VLiteral<1, "required">;
-    identity: convex_values477.VObject<{
+    version: convex_values566.VLiteral<1, "required">;
+    identity: convex_values566.VObject<{
       accountLinking: {
-        oidc: "verifiedEmail" | "none";
-        saml: "verifiedEmail" | "none";
+        saml: "verifiedEmail" | "none" | "sameConnection";
+        oidc: "verifiedEmail" | "none" | "sameConnection";
       };
     }, {
-      accountLinking: convex_values477.VObject<{
-        oidc: "verifiedEmail" | "none";
-        saml: "verifiedEmail" | "none";
+      accountLinking: convex_values566.VObject<{
+        saml: "verifiedEmail" | "none" | "sameConnection";
+        oidc: "verifiedEmail" | "none" | "sameConnection";
       }, {
-        oidc: convex_values477.VUnion<"verifiedEmail" | "none", [convex_values477.VLiteral<"verifiedEmail", "required">, convex_values477.VLiteral<"none", "required">], "required", never>;
-        saml: convex_values477.VUnion<"verifiedEmail" | "none", [convex_values477.VLiteral<"verifiedEmail", "required">, convex_values477.VLiteral<"none", "required">], "required", never>;
-      }, "required", "oidc" | "saml">;
-    }, "required", "accountLinking" | "accountLinking.oidc" | "accountLinking.saml">;
-    provisioning: convex_values477.VObject<{
+        oidc: convex_values566.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values566.VLiteral<"verifiedEmail", "required">, convex_values566.VLiteral<"none", "required">, convex_values566.VLiteral<"sameConnection", "required">], "required", never>;
+        saml: convex_values566.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values566.VLiteral<"verifiedEmail", "required">, convex_values566.VLiteral<"none", "required">, convex_values566.VLiteral<"sameConnection", "required">], "required", never>;
+      }, "required", "saml" | "oidc">;
+    }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
+    provisioning: convex_values566.VObject<{
       user: {
         createOnSignIn: boolean;
         updateProfileOnLogin: "never" | "missing" | "always";
@@ -187,112 +210,111 @@ declare const vGroupDoc: convex_values477.VObject<{
         source: "protocol";
       };
     }, {
-      user: convex_values477.VObject<{
+      user: convex_values566.VObject<{
         createOnSignIn: boolean;
         updateProfileOnLogin: "never" | "missing" | "always";
         updateProfileFromScim: "never" | "missing" | "always";
         authority: "app" | "sso" | "scim";
       }, {
-        createOnSignIn: convex_values477.VBoolean<boolean, "required">;
-        updateProfileOnLogin: convex_values477.VUnion<"never" | "missing" | "always", [convex_values477.VLiteral<"never", "required">, convex_values477.VLiteral<"missing", "required">, convex_values477.VLiteral<"always", "required">], "required", never>;
-        updateProfileFromScim: convex_values477.VUnion<"never" | "missing" | "always", [convex_values477.VLiteral<"never", "required">, convex_values477.VLiteral<"missing", "required">, convex_values477.VLiteral<"always", "required">], "required", never>;
-        authority: convex_values477.VUnion<"app" | "sso" | "scim", [convex_values477.VLiteral<"app", "required">, convex_values477.VLiteral<"sso", "required">, convex_values477.VLiteral<"scim", "required">], "required", never>;
+        createOnSignIn: convex_values566.VBoolean<boolean, "required">;
+        updateProfileOnLogin: convex_values566.VUnion<"never" | "missing" | "always", [convex_values566.VLiteral<"never", "required">, convex_values566.VLiteral<"missing", "required">, convex_values566.VLiteral<"always", "required">], "required", never>;
+        updateProfileFromScim: convex_values566.VUnion<"never" | "missing" | "always", [convex_values566.VLiteral<"never", "required">, convex_values566.VLiteral<"missing", "required">, convex_values566.VLiteral<"always", "required">], "required", never>;
+        authority: convex_values566.VUnion<"app" | "sso" | "scim", [convex_values566.VLiteral<"app", "required">, convex_values566.VLiteral<"sso", "required">, convex_values566.VLiteral<"scim", "required">], "required", never>;
       }, "required", "createOnSignIn" | "updateProfileOnLogin" | "updateProfileFromScim" | "authority">;
-      scimReuse: convex_values477.VObject<{
+      scimReuse: convex_values566.VObject<{
         user: "none" | "externalId";
       }, {
-        user: convex_values477.VUnion<"none" | "externalId", [convex_values477.VLiteral<"externalId", "required">, convex_values477.VLiteral<"none", "required">], "required", never>;
+        user: convex_values566.VUnion<"none" | "externalId", [convex_values566.VLiteral<"externalId", "required">, convex_values566.VLiteral<"none", "required">], "required", never>;
       }, "required", "user">;
-      jit: convex_values477.VObject<{
+      jit: convex_values566.VObject<{
         defaultRole?: string | undefined;
         defaultRoleIds?: string[] | undefined;
         mode: "off" | "createUser" | "createUserAndMembership";
       }, {
-        mode: convex_values477.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values477.VLiteral<"off", "required">, convex_values477.VLiteral<"createUser", "required">, convex_values477.VLiteral<"createUserAndMembership", "required">], "required", never>;
-        defaultRole: convex_values477.VString<string | undefined, "optional">;
-        defaultRoleIds: convex_values477.VArray<string[] | undefined, convex_values477.VString<string, "required">, "optional">;
+        mode: convex_values566.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values566.VLiteral<"off", "required">, convex_values566.VLiteral<"createUser", "required">, convex_values566.VLiteral<"createUserAndMembership", "required">], "required", never>;
+        defaultRole: convex_values566.VString<string | undefined, "optional">;
+        defaultRoleIds: convex_values566.VArray<string[] | undefined, convex_values566.VString<string, "required">, "optional">;
       }, "required", "mode" | "defaultRole" | "defaultRoleIds">;
-      deprovision: convex_values477.VObject<{
+      deprovision: convex_values566.VObject<{
         mode: "soft" | "hard";
       }, {
-        mode: convex_values477.VUnion<"soft" | "hard", [convex_values477.VLiteral<"soft", "required">, convex_values477.VLiteral<"hard", "required">], "required", never>;
+        mode: convex_values566.VUnion<"soft" | "hard", [convex_values566.VLiteral<"soft", "required">, convex_values566.VLiteral<"hard", "required">], "required", never>;
       }, "required", "mode">;
-      groups: convex_values477.VObject<{
+      groups: convex_values566.VObject<{
         mapping?: Record<string, string[]> | undefined;
         mode: "ignore" | "sync";
         source: "protocol";
       }, {
-        mode: convex_values477.VUnion<"ignore" | "sync", [convex_values477.VLiteral<"ignore", "required">, convex_values477.VLiteral<"sync", "required">], "required", never>;
-        source: convex_values477.VLiteral<"protocol", "required">;
-        mapping: convex_values477.VRecord<Record<string, string[]> | undefined, convex_values477.VString<string, "required">, convex_values477.VArray<string[], convex_values477.VString<string, "required">, "required">, "optional", string>;
+        mode: convex_values566.VUnion<"ignore" | "sync", [convex_values566.VLiteral<"ignore", "required">, convex_values566.VLiteral<"sync", "required">], "required", never>;
+        source: convex_values566.VLiteral<"protocol", "required">;
+        mapping: convex_values566.VRecord<Record<string, string[]> | undefined, convex_values566.VString<string, "required">, convex_values566.VArray<string[], convex_values566.VString<string, "required">, "required">, "optional", string>;
       }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
-      roles: convex_values477.VObject<{
+      roles: convex_values566.VObject<{
         mapping?: Record<string, string[]> | undefined;
         mode: "map" | "ignore";
         source: "protocol";
       }, {
-        mode: convex_values477.VUnion<"map" | "ignore", [convex_values477.VLiteral<"ignore", "required">, convex_values477.VLiteral<"map", "required">], "required", never>;
-        source: convex_values477.VLiteral<"protocol", "required">;
-        mapping: convex_values477.VRecord<Record<string, string[]> | undefined, convex_values477.VString<string, "required">, convex_values477.VArray<string[], convex_values477.VString<string, "required">, "required">, "optional", string>;
+        mode: convex_values566.VUnion<"map" | "ignore", [convex_values566.VLiteral<"ignore", "required">, convex_values566.VLiteral<"map", "required">], "required", never>;
+        source: convex_values566.VLiteral<"protocol", "required">;
+        mapping: convex_values566.VRecord<Record<string, string[]> | undefined, convex_values566.VString<string, "required">, convex_values566.VArray<string[], convex_values566.VString<string, "required">, "required">, "optional", string>;
       }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
     }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.mode" | "groups.source" | "groups.mapping" | `groups.mapping.${string}` | "roles.mode" | "roles.source" | "roles.mapping" | `roles.mapping.${string}`>;
-    extend: convex_values477.VAny<any, "optional", string>;
-  }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.mode" | "provisioning.groups.source" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.mode" | "provisioning.roles.source" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
-  extend: convex_values477.VAny<any, "optional", string>;
-  _id: convex_values477.VId<convex_values477.GenericId<"Group">, "required">;
-  _creationTime: convex_values477.VFloat64<number, "required">;
-}, "required", "_creationTime" | "name" | "slug" | "type" | "extend" | "_id" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.mode" | "policy.provisioning.roles.source" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}`>;
-declare const vGroupMemberDoc: convex_values477.VObject<{
-  status?: string | undefined;
+    extend: convex_values566.VAny<any, "optional", string>;
+  }, "optional", "identity" | "extend" | `extend.${string}` | "version" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.mode" | "provisioning.groups.source" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.mode" | "provisioning.roles.source" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
+  extend: convex_values566.VAny<any, "optional", string>;
+  _id: convex_values566.VId<convex_values566.GenericId<"Group">, "required">;
+  _creationTime: convex_values566.VFloat64<number, "required">;
+}, "required", "_creationTime" | "name" | "type" | "extend" | "_id" | `extend.${string}` | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.identity" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.saml" | "policy.identity.accountLinking.oidc" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.mode" | "policy.provisioning.roles.source" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}`>;
+declare const vGroupMemberDoc: convex_values566.VObject<{
   extend?: any;
   role?: string | undefined;
   roleIds?: string[] | undefined;
+  status?: string | undefined;
   _creationTime: number;
-  userId: convex_values477.GenericId<"User">;
-  _id: convex_values477.GenericId<"GroupMember">;
-  groupId: convex_values477.GenericId<"Group">;
+  _id: convex_values566.GenericId<"GroupMember">;
+  groupId: convex_values566.GenericId<"Group">;
+  userId: convex_values566.GenericId<"User">;
 }, {
-  groupId: convex_values477.VId<convex_values477.GenericId<"Group">, "required">;
-  userId: convex_values477.VId<convex_values477.GenericId<"User">, "required">;
-  role: convex_values477.VString<string | undefined, "optional">;
-  roleIds: convex_values477.VArray<string[] | undefined, convex_values477.VString<string, "required">, "optional">;
-  status: convex_values477.VString<string | undefined, "optional">;
-  extend: convex_values477.VAny<any, "optional", string>;
-  _id: convex_values477.VId<convex_values477.GenericId<"GroupMember">, "required">;
-  _creationTime: convex_values477.VFloat64<number, "required">;
-}, "required", "_creationTime" | "status" | "userId" | "extend" | "_id" | `extend.${string}` | "groupId" | "role" | "roleIds">;
-declare const vGroupInviteDoc: convex_values477.VObject<{
+  groupId: convex_values566.VId<convex_values566.GenericId<"Group">, "required">;
+  userId: convex_values566.VId<convex_values566.GenericId<"User">, "required">;
+  role: convex_values566.VString<string | undefined, "optional">;
+  roleIds: convex_values566.VArray<string[] | undefined, convex_values566.VString<string, "required">, "optional">;
+  status: convex_values566.VString<string | undefined, "optional">;
+  extend: convex_values566.VAny<any, "optional", string>;
+  _id: convex_values566.VId<convex_values566.GenericId<"GroupMember">, "required">;
+  _creationTime: convex_values566.VFloat64<number, "required">;
+}, "required", "_creationTime" | "extend" | "_id" | `extend.${string}` | "groupId" | "userId" | "role" | "roleIds" | "status">;
+declare const vGroupInviteDoc: convex_values566.VObject<{
   email?: string | undefined;
-  expiresTime?: number | undefined;
-  acceptedTime?: number | undefined;
   extend?: any;
-  groupId?: convex_values477.GenericId<"Group"> | undefined;
+  groupId?: convex_values566.GenericId<"Group"> | undefined;
   role?: string | undefined;
   roleIds?: string[] | undefined;
-  invitedByUserId?: convex_values477.GenericId<"User"> | undefined;
-  acceptedByUserId?: convex_values477.GenericId<"User"> | undefined;
+  invitedByUserId?: convex_values566.GenericId<"User"> | undefined;
+  expiresTime?: number | undefined;
+  acceptedByUserId?: convex_values566.GenericId<"User"> | undefined;
+  acceptedTime?: number | undefined;
   _creationTime: number;
+  _id: convex_values566.GenericId<"GroupInvite">;
   status: "pending" | "accepted" | "revoked" | "expired";
-  _id: convex_values477.GenericId<"GroupInvite">;
   tokenHash: string;
 }, {
-  groupId: convex_values477.VId<convex_values477.GenericId<"Group"> | undefined, "optional">;
-  invitedByUserId: convex_values477.VId<convex_values477.GenericId<"User"> | undefined, "optional">;
-  email: convex_values477.VString<string | undefined, "optional">;
-  tokenHash: convex_values477.VString<string, "required">;
-  role: convex_values477.VString<string | undefined, "optional">;
-  roleIds: convex_values477.VArray<string[] | undefined, convex_values477.VString<string, "required">, "optional">;
-  status: convex_values477.VUnion<"pending" | "accepted" | "revoked" | "expired", [convex_values477.VLiteral<"pending", "required">, convex_values477.VLiteral<"accepted", "required">, convex_values477.VLiteral<"revoked", "required">, convex_values477.VLiteral<"expired", "required">], "required", never>;
-  expiresTime: convex_values477.VFloat64<number | undefined, "optional">;
-  acceptedByUserId: convex_values477.VId<convex_values477.GenericId<"User"> | undefined, "optional">;
-  acceptedTime: convex_values477.VFloat64<number | undefined, "optional">;
-  extend: convex_values477.VAny<any, "optional", string>;
-  _id: convex_values477.VId<convex_values477.GenericId<"GroupInvite">, "required">;
-  _creationTime: convex_values477.VFloat64<number, "required">;
-}, "required", "_creationTime" | "email" | "status" | "expiresTime" | "acceptedTime" | "extend" | "_id" | `extend.${string}` | "groupId" | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "acceptedByUserId">;
-declare const vApiKeyDoc: convex_values477.VObject<{
+  groupId: convex_values566.VId<convex_values566.GenericId<"Group"> | undefined, "optional">;
+  invitedByUserId: convex_values566.VId<convex_values566.GenericId<"User"> | undefined, "optional">;
+  email: convex_values566.VString<string | undefined, "optional">;
+  tokenHash: convex_values566.VString<string, "required">;
+  role: convex_values566.VString<string | undefined, "optional">;
+  roleIds: convex_values566.VArray<string[] | undefined, convex_values566.VString<string, "required">, "optional">;
+  status: convex_values566.VUnion<"pending" | "accepted" | "revoked" | "expired", [convex_values566.VLiteral<"pending", "required">, convex_values566.VLiteral<"accepted", "required">, convex_values566.VLiteral<"revoked", "required">, convex_values566.VLiteral<"expired", "required">], "required", never>;
+  expiresTime: convex_values566.VFloat64<number | undefined, "optional">;
+  acceptedByUserId: convex_values566.VId<convex_values566.GenericId<"User"> | undefined, "optional">;
+  acceptedTime: convex_values566.VFloat64<number | undefined, "optional">;
+  extend: convex_values566.VAny<any, "optional", string>;
+  _id: convex_values566.VId<convex_values566.GenericId<"GroupInvite">, "required">;
+  _creationTime: convex_values566.VFloat64<number, "required">;
+}, "required", "email" | "_creationTime" | "extend" | "_id" | `extend.${string}` | "groupId" | "role" | "roleIds" | "status" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">;
+declare const vApiKeyDoc: convex_values566.VObject<{
   lastUsedAt?: number | undefined;
-  expiresAt?: number | undefined;
   rateLimit?: {
     maxRequests: number;
     windowMs: number;
@@ -301,56 +323,57 @@ declare const vApiKeyDoc: convex_values477.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined;
+  expiresAt?: number | undefined;
   metadata?: any;
   _creationTime: number;
   name: string;
+  _id: convex_values566.GenericId<"ApiKey">;
+  userId: convex_values566.GenericId<"User">;
   revoked: boolean;
-  userId: convex_values477.GenericId<"User">;
+  createdAt: number;
   prefix: string;
   hashedKey: string;
   scopes: {
     resource: string;
     actions: string[];
   }[];
-  createdAt: number;
-  _id: convex_values477.GenericId<"ApiKey">;
 }, {
-  userId: convex_values477.VId<convex_values477.GenericId<"User">, "required">;
-  prefix: convex_values477.VString<string, "required">;
-  hashedKey: convex_values477.VString<string, "required">;
-  name: convex_values477.VString<string, "required">;
-  scopes: convex_values477.VArray<{
+  userId: convex_values566.VId<convex_values566.GenericId<"User">, "required">;
+  prefix: convex_values566.VString<string, "required">;
+  hashedKey: convex_values566.VString<string, "required">;
+  name: convex_values566.VString<string, "required">;
+  scopes: convex_values566.VArray<{
     resource: string;
     actions: string[];
-  }[], convex_values477.VObject<{
+  }[], convex_values566.VObject<{
     resource: string;
     actions: string[];
   }, {
-    resource: convex_values477.VString<string, "required">;
-    actions: convex_values477.VArray<string[], convex_values477.VString<string, "required">, "required">;
+    resource: convex_values566.VString<string, "required">;
+    actions: convex_values566.VArray<string[], convex_values566.VString<string, "required">, "required">;
   }, "required", "resource" | "actions">, "required">;
-  rateLimit: convex_values477.VObject<{
+  rateLimit: convex_values566.VObject<{
     maxRequests: number;
     windowMs: number;
   } | undefined, {
-    maxRequests: convex_values477.VFloat64<number, "required">;
-    windowMs: convex_values477.VFloat64<number, "required">;
+    maxRequests: convex_values566.VFloat64<number, "required">;
+    windowMs: convex_values566.VFloat64<number, "required">;
   }, "optional", "maxRequests" | "windowMs">;
-  rateLimitState: convex_values477.VObject<{
+  rateLimitState: convex_values566.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined, {
-    attemptsLeft: convex_values477.VFloat64<number, "required">;
-    lastAttemptTime: convex_values477.VFloat64<number, "required">;
+    attemptsLeft: convex_values566.VFloat64<number, "required">;
+    lastAttemptTime: convex_values566.VFloat64<number, "required">;
   }, "optional", "attemptsLeft" | "lastAttemptTime">;
-  expiresAt: convex_values477.VFloat64<number | undefined, "optional">;
-  lastUsedAt: convex_values477.VFloat64<number | undefined, "optional">;
-  createdAt: convex_values477.VFloat64<number, "required">;
-  revoked: convex_values477.VBoolean<boolean, "required">;
-  metadata: convex_values477.VAny<any, "optional", string>;
-  _id: convex_values477.VId<convex_values477.GenericId<"ApiKey">, "required">;
-  _creationTime: convex_values477.VFloat64<number, "required">;
-}, "required", "_creationTime" | "name" | "revoked" | "lastUsedAt" | "expiresAt" | "userId" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "createdAt" | "metadata" | "_id" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>;
+  expiresAt: convex_values566.VFloat64<number | undefined, "optional">;
+  lastUsedAt: convex_values566.VFloat64<number | undefined, "optional">;
+  createdAt: convex_values566.VFloat64<number, "required">;
+  revoked: convex_values566.VBoolean<boolean, "required">;
+  metadata: convex_values566.VAny<any, "optional", string>;
+  _id: convex_values566.VId<convex_values566.GenericId<"ApiKey">, "required">;
+  _creationTime: convex_values566.VFloat64<number, "required">;
+}, "required", "_creationTime" | "name" | "_id" | "userId" | "revoked" | "createdAt" | "lastUsedAt" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "expiresAt" | "metadata" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>;
 //#endregion
-export { vApiKeyDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vPaginated, vUserDoc };
+export { vApiKeyDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vPaginated, vUserDoc, vUserEmailDoc };
 //# sourceMappingURL=model.d.ts.map

package/dist/component/model.js

@@ -3,6 +3,7 @@ import { v } from "convex/values";
 //#region src/component/model.ts
 const TABLES = {
 	User: "User",
+	UserEmail: "UserEmail",
 	Session: "Session",
 	Account: "Account",
 	AuthVerifier: "AuthVerifier",
@@ -37,7 +38,7 @@ const vPaginated = (item) => v.object({
 });
 const vInviteStatus = v.union(v.literal("pending"), v.literal("accepted"), v.literal("revoked"), v.literal("expired"));
 const vDeviceStatus = v.union(v.literal("pending"), v.literal("authorized"), v.literal("denied"));
-const vGroupConnectionAccountLinkingPolicy = v.union(v.literal("verifiedEmail"), v.literal("none"));
+const vGroupConnectionAccountLinkingPolicy = v.union(v.literal("verifiedEmail"), v.literal("none"), v.literal("sameConnection"));
 const vGroupConnectionScimReuseUserPolicy = v.union(v.literal("externalId"), v.literal("none"));
 const vGroupConnectionJitProvisioningMode = v.union(v.literal("off"), v.literal("createUser"), v.literal("createUserAndMembership"));
 const vGroupConnectionDeprovisionMode = v.union(v.literal("soft"), v.literal("hard"));
@@ -116,9 +117,26 @@ const vUserDoc = v.object({
 	phone: v.optional(v.string()),
 	phoneVerificationTime: v.optional(v.number()),
 	isAnonymous: v.optional(v.boolean()),
-	hasTotp: v.optional(v.boolean()),
+	lastActiveGroup: v.optional(v.id(TABLES.Group)),
 	extend: v.optional(v.any())
 });
+const vUserEmailSource = v.union(v.literal("password"), v.literal("oauth"), v.literal("oidc"), v.literal("saml"), v.literal("scim"));
+const vProfileEmail = v.object({
+	email: v.string(),
+	primary: v.optional(v.boolean()),
+	verified: v.optional(v.boolean())
+});
+const vUserEmailDoc = v.object({
+	...vDocMeta(TABLES.UserEmail),
+	userId: v.id(TABLES.User),
+	email: v.string(),
+	verificationTime: v.optional(v.number()),
+	isPrimary: v.boolean(),
+	source: vUserEmailSource,
+	accountId: v.optional(v.id(TABLES.Account)),
+	provider: v.optional(v.string()),
+	connectionId: v.optional(v.id(TABLES.GroupConnection))
+});
 const vSessionDoc = v.object({
 	...vDocMeta(TABLES.Session),
 	userId: v.id(TABLES.User),
@@ -360,7 +378,7 @@ const vRateLimitResult = v.object({
 	attemptsLeft: v.number(),
 	lastAttemptTime: v.number()
 });
-const vInviteAcceptByTokenResult = v.object({
+const vInviteRedeemResult = v.object({
 	inviteId: v.id(TABLES.GroupInvite),
 	groupId: v.union(v.id(TABLES.Group), v.null()),
 	memberId: v.optional(v.id(TABLES.GroupMember)),
@@ -369,5 +387,5 @@ const vInviteAcceptByTokenResult = v.object({
 });
 
 //#endregion
-export { TABLES, vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vGroupAuditEventDoc, vGroupConnectionAccountLinkingPolicy, vGroupConnectionDeprovisionMode, vGroupConnectionDoc, vGroupConnectionDomainDoc, vGroupConnectionDomainVerificationDoc, vGroupConnectionGroupSyncMode, vGroupConnectionJitProvisioningMode, vGroupConnectionPolicy, vGroupConnectionProfileUpdateMode, vGroupConnectionProtocol, vGroupConnectionProvisioningAuthority, vGroupConnectionRoleSyncMode, vGroupConnectionScimConfigDoc, vGroupConnectionScimIdentityDoc, vGroupConnectionScimReuseUserPolicy, vGroupConnectionSecretDoc, vGroupConnectionSecretKind, vGroupConnectionStatus, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vGroupWebhookDeliveryDoc, vGroupWebhookEndpointDoc, vInviteAcceptByTokenResult, vInviteStatus, vInviteTokenAcceptStatus, vMembershipStatus, vPaginated, vPasskeyDoc, vRateLimitDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vVerificationCodeDoc, vWebhookDeliveryStatus, vWebhookEndpointStatus };
+export { TABLES, vAccountDoc, vApiKeyDoc, vApiKeyRateLimit, vApiKeyRateLimitState, vApiKeyScope, vAuditActorType, vAuditStatus, vAuthVerifierDoc, vDeviceCodeDoc, vDeviceStatus, vGroupAuditEventDoc, vGroupConnectionAccountLinkingPolicy, vGroupConnectionDeprovisionMode, vGroupConnectionDoc, vGroupConnectionDomainDoc, vGroupConnectionDomainVerificationDoc, vGroupConnectionGroupSyncMode, vGroupConnectionJitProvisioningMode, vGroupConnectionPolicy, vGroupConnectionProfileUpdateMode, vGroupConnectionProtocol, vGroupConnectionProvisioningAuthority, vGroupConnectionRoleSyncMode, vGroupConnectionScimConfigDoc, vGroupConnectionScimIdentityDoc, vGroupConnectionScimReuseUserPolicy, vGroupConnectionSecretDoc, vGroupConnectionSecretKind, vGroupConnectionStatus, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vGroupWebhookDeliveryDoc, vGroupWebhookEndpointDoc, vInviteRedeemResult, vInviteStatus, vInviteTokenAcceptStatus, vMembershipStatus, vPaginated, vPasskeyDoc, vProfileEmail, vRateLimitDoc, vRateLimitResult, vRefreshTokenDoc, vScimResourceType, vScimStatus, vSessionDoc, vTag, vTotpFactorDoc, vUserDoc, vUserEmailDoc, vUserEmailSource, vVerificationCodeDoc, vWebhookDeliveryStatus, vWebhookEndpointStatus };
 //# sourceMappingURL=model.js.map