@robelest/convex-auth 0.0.4-preview.33 → 0.0.4-preview.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (88) hide show
  1. package/dist/component/_generated/component.d.ts +1611 -2039
  2. package/dist/component/account.js +3 -0
  3. package/dist/component/convex.config.d.ts +2 -2
  4. package/dist/component/factor/device.js +3 -0
  5. package/dist/component/factor/passkey.js +3 -0
  6. package/dist/component/factor/totp.js +3 -0
  7. package/dist/component/group/invite.js +3 -0
  8. package/dist/component/group/member.js +3 -0
  9. package/dist/component/group.js +3 -0
  10. package/dist/component/model.d.ts +182 -159
  11. package/dist/component/model.js +22 -4
  12. package/dist/component/modules.js +24 -21
  13. package/dist/component/public/factors/devices.js +37 -106
  14. package/dist/component/public/factors/passkeys.js +29 -149
  15. package/dist/component/public/factors/totp.js +32 -159
  16. package/dist/component/public/groups/core.js +19 -82
  17. package/dist/component/public/groups/invites.js +15 -104
  18. package/dist/component/public/groups/members.js +26 -149
  19. package/dist/component/public/identity/accounts.js +12 -94
  20. package/dist/component/public/identity/codes.js +13 -73
  21. package/dist/component/public/identity/sessions.js +5 -107
  22. package/dist/component/public/identity/tokens.js +13 -103
  23. package/dist/component/public/identity/users.js +188 -185
  24. package/dist/component/public/identity/verifiers.js +17 -80
  25. package/dist/component/public/security/keys.js +13 -120
  26. package/dist/component/public/security/limits.js +0 -43
  27. package/dist/component/public/sso/audit.js +0 -28
  28. package/dist/component/public/sso/core.js +31 -104
  29. package/dist/component/public/sso/domains.js +0 -71
  30. package/dist/component/public/sso/scim.js +63 -239
  31. package/dist/component/public/sso/secrets.js +0 -30
  32. package/dist/component/public/sso/webhooks.js +23 -128
  33. package/dist/component/rateLimit.js +3 -0
  34. package/dist/component/schema.d.ts +384 -348
  35. package/dist/component/schema.js +11 -1
  36. package/dist/component/session.js +3 -0
  37. package/dist/component/sso/audit.js +3 -0
  38. package/dist/component/sso/connection/domain/verification.js +3 -0
  39. package/dist/component/sso/connection/domain.js +3 -0
  40. package/dist/component/sso/connection/scim/config.js +3 -0
  41. package/dist/component/sso/connection/scim/identity.js +3 -0
  42. package/dist/component/sso/connection/secret.js +3 -0
  43. package/dist/component/sso/connection.js +3 -0
  44. package/dist/component/sso/webhook/delivery.js +3 -0
  45. package/dist/component/sso/webhook/endpoint.js +3 -0
  46. package/dist/component/token/pkce.js +3 -0
  47. package/dist/component/token/refresh.js +3 -0
  48. package/dist/component/token/verification.js +3 -0
  49. package/dist/component/user/email.js +3 -0
  50. package/dist/component/user/key.js +3 -0
  51. package/dist/component/user.js +62 -0
  52. package/dist/core/index.d.ts +129 -27
  53. package/dist/core/index.js +5 -1
  54. package/dist/model.js +22 -4
  55. package/dist/providers/credentials.d.ts +1 -1
  56. package/dist/providers/github.js +6 -0
  57. package/dist/providers/password.js +1 -2
  58. package/dist/server/auth.d.ts +4 -2
  59. package/dist/server/auth.js +3 -2
  60. package/dist/server/context.js +30 -3
  61. package/dist/server/contract.js +42 -42
  62. package/dist/server/core.js +224 -86
  63. package/dist/server/db.js +45 -37
  64. package/dist/server/facade.d.ts +39 -0
  65. package/dist/server/facade.js +16 -0
  66. package/dist/server/index.d.ts +2 -2
  67. package/dist/server/index.js +2 -2
  68. package/dist/server/mounts.d.ts +101 -101
  69. package/dist/server/mutations/credentials/signin.js +3 -7
  70. package/dist/server/mutations/oauth.js +9 -6
  71. package/dist/server/runtime.d.ts +153 -52
  72. package/dist/server/runtime.js +10 -8
  73. package/dist/server/services/group.js +9 -9
  74. package/dist/server/sso/domain.js +40 -40
  75. package/dist/server/sso/http.js +18 -18
  76. package/dist/server/sso/oidc.js +1 -1
  77. package/dist/server/sso/policies.js +3 -3
  78. package/dist/server/sso/policy.js +12 -4
  79. package/dist/server/sso/provision.js +9 -9
  80. package/dist/server/sso/validators.js +2 -2
  81. package/dist/server/sso/webhook.js +8 -8
  82. package/dist/server/types.d.ts +184 -123
  83. package/dist/server/types.js +29 -24
  84. package/dist/server/users.js +49 -2
  85. package/dist/server/validators.d.ts +373 -350
  86. package/dist/server/validators.js +3 -2
  87. package/package.json +1 -1
  88. package/dist/component/public.js +0 -22
@@ -0,0 +1,3 @@
1
+ import { accountDelete, accountGet, accountInsert, accountList, accountPatch } from "./public/identity/accounts.js";
2
+
3
+ export { accountInsert as create, accountDelete as delete, accountGet as get, accountList as list, accountPatch as update };
@@ -1,7 +1,7 @@
1
- import * as convex_server4 from "convex/server";
1
+ import * as convex_server0 from "convex/server";
2
2
 
3
3
  //#region src/component/convex.config.d.ts
4
- declare const component: convex_server4.ComponentDefinition<any>;
4
+ declare const component: convex_server0.ComponentDefinition<any>;
5
5
  //#endregion
6
6
  export { component as default };
7
7
  //# sourceMappingURL=convex.config.d.ts.map
@@ -0,0 +1,3 @@
1
+ import { deviceAuthorize, deviceDelete, deviceGet, deviceInsert, deviceUpdate } from "../public/factors/devices.js";
2
+
3
+ export { deviceAuthorize as authorize, deviceInsert as create, deviceDelete as delete, deviceGet as get, deviceUpdate as update };
@@ -0,0 +1,3 @@
1
+ import { passkeyDelete, passkeyGet, passkeyInsert, passkeyList, passkeyUpdate } from "../public/factors/passkeys.js";
2
+
3
+ export { passkeyInsert as create, passkeyDelete as delete, passkeyGet as get, passkeyList as list, passkeyUpdate as update };
@@ -0,0 +1,3 @@
1
+ import { totpDelete, totpGet, totpInsert, totpList, totpUpdate } from "../public/factors/totp.js";
2
+
3
+ export { totpInsert as create, totpDelete as delete, totpGet as get, totpList as list, totpUpdate as update };
@@ -0,0 +1,3 @@
1
+ import { inviteAccept, inviteCreate, inviteGet, inviteList, inviteRedeem, inviteRevoke } from "../public/groups/invites.js";
2
+
3
+ export { inviteAccept as accept, inviteCreate as create, inviteGet as get, inviteList as list, inviteRedeem as redeem, inviteRevoke as revoke };
@@ -0,0 +1,3 @@
1
+ import { memberAdd, memberGet, memberList, memberRemove, memberResolve, memberUpdate } from "../public/groups/members.js";
2
+
3
+ export { memberAdd as create, memberRemove as delete, memberGet as get, memberList as list, memberResolve as resolve, memberUpdate as update };
@@ -0,0 +1,3 @@
1
+ import { groupAncestors, groupCreate, groupDelete, groupGet, groupList, groupUpdate } from "./public/groups/core.js";
2
+
3
+ export { groupAncestors as ancestors, groupCreate as create, groupDelete as delete, groupGet as get, groupList as list, groupUpdate as update };
@@ -1,45 +1,68 @@
1
- import * as convex_values477 from "convex/values";
1
+ import * as convex_values519 from "convex/values";
2
2
  import { Validator } from "convex/values";
3
3
 
4
4
  //#region src/component/model.d.ts
5
- declare const vPaginated: <V extends Validator<any, any, any>>(item: V) => convex_values477.VObject<{
5
+ declare const vPaginated: <V extends Validator<any, any, any>>(item: V) => convex_values519.VObject<{
6
6
  items: V["type"][];
7
7
  nextCursor: string | null;
8
8
  }, {
9
- items: convex_values477.VArray<V["type"][], V, "required">;
10
- nextCursor: convex_values477.VUnion<string | null, [convex_values477.VString<string, "required">, convex_values477.VNull<null, "required">], "required", never>;
9
+ items: convex_values519.VArray<V["type"][], V, "required">;
10
+ nextCursor: convex_values519.VUnion<string | null, [convex_values519.VString<string, "required">, convex_values519.VNull<null, "required">], "required", never>;
11
11
  }, "required", "items" | "nextCursor">;
12
- declare const vUserDoc: convex_values477.VObject<{
12
+ declare const vUserDoc: convex_values519.VObject<{
13
13
  name?: string | undefined;
14
14
  email?: string | undefined;
15
- phone?: string | undefined;
16
- extend?: any;
17
15
  image?: string | undefined;
16
+ phone?: string | undefined;
18
17
  emailVerificationTime?: number | undefined;
19
18
  phoneVerificationTime?: number | undefined;
20
19
  isAnonymous?: boolean | undefined;
21
- hasTotp?: boolean | undefined;
20
+ lastActiveGroup?: convex_values519.GenericId<"Group"> | undefined;
21
+ extend?: any;
22
22
  _creationTime: number;
23
- _id: convex_values477.GenericId<"User">;
23
+ _id: convex_values519.GenericId<"User">;
24
24
  }, {
25
- name: convex_values477.VString<string | undefined, "optional">;
26
- image: convex_values477.VString<string | undefined, "optional">;
27
- email: convex_values477.VString<string | undefined, "optional">;
28
- emailVerificationTime: convex_values477.VFloat64<number | undefined, "optional">;
29
- phone: convex_values477.VString<string | undefined, "optional">;
30
- phoneVerificationTime: convex_values477.VFloat64<number | undefined, "optional">;
31
- isAnonymous: convex_values477.VBoolean<boolean | undefined, "optional">;
32
- hasTotp: convex_values477.VBoolean<boolean | undefined, "optional">;
33
- extend: convex_values477.VAny<any, "optional", string>;
34
- _id: convex_values477.VId<convex_values477.GenericId<"User">, "required">;
35
- _creationTime: convex_values477.VFloat64<number, "required">;
36
- }, "required", "_creationTime" | "name" | "email" | "phone" | "extend" | "_id" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | "hasTotp" | `extend.${string}`>;
37
- declare const vGroupDoc: convex_values477.VObject<{
38
- slug?: string | undefined;
39
- type?: string | undefined;
25
+ name: convex_values519.VString<string | undefined, "optional">;
26
+ image: convex_values519.VString<string | undefined, "optional">;
27
+ email: convex_values519.VString<string | undefined, "optional">;
28
+ emailVerificationTime: convex_values519.VFloat64<number | undefined, "optional">;
29
+ phone: convex_values519.VString<string | undefined, "optional">;
30
+ phoneVerificationTime: convex_values519.VFloat64<number | undefined, "optional">;
31
+ isAnonymous: convex_values519.VBoolean<boolean | undefined, "optional">;
32
+ lastActiveGroup: convex_values519.VId<convex_values519.GenericId<"Group"> | undefined, "optional">;
33
+ extend: convex_values519.VAny<any, "optional", string>;
34
+ _id: convex_values519.VId<convex_values519.GenericId<"User">, "required">;
35
+ _creationTime: convex_values519.VFloat64<number, "required">;
36
+ }, "required", "name" | "email" | "image" | "_creationTime" | "phone" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "extend" | `extend.${string}` | "_id">;
37
+ declare const vUserEmailDoc: convex_values519.VObject<{
38
+ verificationTime?: number | undefined;
39
+ accountId?: convex_values519.GenericId<"Account"> | undefined;
40
+ provider?: string | undefined;
41
+ connectionId?: convex_values519.GenericId<"GroupConnection"> | undefined;
42
+ email: string;
43
+ _creationTime: number;
44
+ userId: convex_values519.GenericId<"User">;
45
+ isPrimary: boolean;
46
+ source: "password" | "oauth" | "oidc" | "saml" | "scim";
47
+ _id: convex_values519.GenericId<"UserEmail">;
48
+ }, {
49
+ userId: convex_values519.VId<convex_values519.GenericId<"User">, "required">;
50
+ email: convex_values519.VString<string, "required">;
51
+ verificationTime: convex_values519.VFloat64<number | undefined, "optional">;
52
+ isPrimary: convex_values519.VBoolean<boolean, "required">;
53
+ source: convex_values519.VUnion<"password" | "oauth" | "oidc" | "saml" | "scim", [convex_values519.VLiteral<"password", "required">, convex_values519.VLiteral<"oauth", "required">, convex_values519.VLiteral<"oidc", "required">, convex_values519.VLiteral<"saml", "required">, convex_values519.VLiteral<"scim", "required">], "required", never>;
54
+ accountId: convex_values519.VId<convex_values519.GenericId<"Account"> | undefined, "optional">;
55
+ provider: convex_values519.VString<string | undefined, "optional">;
56
+ connectionId: convex_values519.VId<convex_values519.GenericId<"GroupConnection"> | undefined, "optional">;
57
+ _id: convex_values519.VId<convex_values519.GenericId<"UserEmail">, "required">;
58
+ _creationTime: convex_values519.VFloat64<number, "required">;
59
+ }, "required", "email" | "_creationTime" | "userId" | "verificationTime" | "isPrimary" | "source" | "accountId" | "provider" | "connectionId" | "_id">;
60
+ declare const vGroupDoc: convex_values519.VObject<{
40
61
  extend?: any;
41
- parentGroupId?: convex_values477.GenericId<"Group"> | undefined;
42
- rootGroupId?: convex_values477.GenericId<"Group"> | undefined;
62
+ type?: string | undefined;
63
+ slug?: string | undefined;
64
+ parentGroupId?: convex_values519.GenericId<"Group"> | undefined;
65
+ rootGroupId?: convex_values519.GenericId<"Group"> | undefined;
43
66
  isRoot?: boolean | undefined;
44
67
  tags?: {
45
68
  key: string;
@@ -50,8 +73,8 @@ declare const vGroupDoc: convex_values477.VObject<{
50
73
  version: 1;
51
74
  identity: {
52
75
  accountLinking: {
53
- oidc: "verifiedEmail" | "none";
54
- saml: "verifiedEmail" | "none";
76
+ oidc: "verifiedEmail" | "none" | "sameConnection";
77
+ saml: "verifiedEmail" | "none" | "sameConnection";
55
78
  };
56
79
  };
57
80
  provisioning: {
@@ -59,7 +82,7 @@ declare const vGroupDoc: convex_values477.VObject<{
59
82
  createOnSignIn: boolean;
60
83
  updateProfileOnLogin: "never" | "missing" | "always";
61
84
  updateProfileFromScim: "never" | "missing" | "always";
62
- authority: "app" | "sso" | "scim";
85
+ authority: "scim" | "app" | "sso";
63
86
  };
64
87
  scimReuse: {
65
88
  user: "none" | "externalId";
@@ -74,43 +97,43 @@ declare const vGroupDoc: convex_values477.VObject<{
74
97
  };
75
98
  groups: {
76
99
  mapping?: Record<string, string[]> | undefined;
77
- mode: "ignore" | "sync";
78
100
  source: "protocol";
101
+ mode: "ignore" | "sync";
79
102
  };
80
103
  roles: {
81
104
  mapping?: Record<string, string[]> | undefined;
82
- mode: "map" | "ignore";
83
105
  source: "protocol";
106
+ mode: "map" | "ignore";
84
107
  };
85
108
  };
86
109
  } | undefined;
87
- _creationTime: number;
88
110
  name: string;
89
- _id: convex_values477.GenericId<"Group">;
111
+ _creationTime: number;
112
+ _id: convex_values519.GenericId<"Group">;
90
113
  }, {
91
- name: convex_values477.VString<string, "required">;
92
- slug: convex_values477.VString<string | undefined, "optional">;
93
- type: convex_values477.VString<string | undefined, "optional">;
94
- parentGroupId: convex_values477.VId<convex_values477.GenericId<"Group"> | undefined, "optional">;
95
- rootGroupId: convex_values477.VId<convex_values477.GenericId<"Group"> | undefined, "optional">;
96
- isRoot: convex_values477.VBoolean<boolean | undefined, "optional">;
97
- tags: convex_values477.VArray<{
114
+ name: convex_values519.VString<string, "required">;
115
+ slug: convex_values519.VString<string | undefined, "optional">;
116
+ type: convex_values519.VString<string | undefined, "optional">;
117
+ parentGroupId: convex_values519.VId<convex_values519.GenericId<"Group"> | undefined, "optional">;
118
+ rootGroupId: convex_values519.VId<convex_values519.GenericId<"Group"> | undefined, "optional">;
119
+ isRoot: convex_values519.VBoolean<boolean | undefined, "optional">;
120
+ tags: convex_values519.VArray<{
98
121
  key: string;
99
122
  value: string;
100
- }[] | undefined, convex_values477.VObject<{
123
+ }[] | undefined, convex_values519.VObject<{
101
124
  key: string;
102
125
  value: string;
103
126
  }, {
104
- key: convex_values477.VString<string, "required">;
105
- value: convex_values477.VString<string, "required">;
127
+ key: convex_values519.VString<string, "required">;
128
+ value: convex_values519.VString<string, "required">;
106
129
  }, "required", "key" | "value">, "optional">;
107
- policy: convex_values477.VObject<{
130
+ policy: convex_values519.VObject<{
108
131
  extend?: any;
109
132
  version: 1;
110
133
  identity: {
111
134
  accountLinking: {
112
- oidc: "verifiedEmail" | "none";
113
- saml: "verifiedEmail" | "none";
135
+ oidc: "verifiedEmail" | "none" | "sameConnection";
136
+ saml: "verifiedEmail" | "none" | "sameConnection";
114
137
  };
115
138
  };
116
139
  provisioning: {
@@ -118,7 +141,7 @@ declare const vGroupDoc: convex_values477.VObject<{
118
141
  createOnSignIn: boolean;
119
142
  updateProfileOnLogin: "never" | "missing" | "always";
120
143
  updateProfileFromScim: "never" | "missing" | "always";
121
- authority: "app" | "sso" | "scim";
144
+ authority: "scim" | "app" | "sso";
122
145
  };
123
146
  scimReuse: {
124
147
  user: "none" | "externalId";
@@ -133,37 +156,37 @@ declare const vGroupDoc: convex_values477.VObject<{
133
156
  };
134
157
  groups: {
135
158
  mapping?: Record<string, string[]> | undefined;
136
- mode: "ignore" | "sync";
137
159
  source: "protocol";
160
+ mode: "ignore" | "sync";
138
161
  };
139
162
  roles: {
140
163
  mapping?: Record<string, string[]> | undefined;
141
- mode: "map" | "ignore";
142
164
  source: "protocol";
165
+ mode: "map" | "ignore";
143
166
  };
144
167
  };
145
168
  } | undefined, {
146
- version: convex_values477.VLiteral<1, "required">;
147
- identity: convex_values477.VObject<{
169
+ version: convex_values519.VLiteral<1, "required">;
170
+ identity: convex_values519.VObject<{
148
171
  accountLinking: {
149
- oidc: "verifiedEmail" | "none";
150
- saml: "verifiedEmail" | "none";
172
+ oidc: "verifiedEmail" | "none" | "sameConnection";
173
+ saml: "verifiedEmail" | "none" | "sameConnection";
151
174
  };
152
175
  }, {
153
- accountLinking: convex_values477.VObject<{
154
- oidc: "verifiedEmail" | "none";
155
- saml: "verifiedEmail" | "none";
176
+ accountLinking: convex_values519.VObject<{
177
+ oidc: "verifiedEmail" | "none" | "sameConnection";
178
+ saml: "verifiedEmail" | "none" | "sameConnection";
156
179
  }, {
157
- oidc: convex_values477.VUnion<"verifiedEmail" | "none", [convex_values477.VLiteral<"verifiedEmail", "required">, convex_values477.VLiteral<"none", "required">], "required", never>;
158
- saml: convex_values477.VUnion<"verifiedEmail" | "none", [convex_values477.VLiteral<"verifiedEmail", "required">, convex_values477.VLiteral<"none", "required">], "required", never>;
180
+ oidc: convex_values519.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values519.VLiteral<"verifiedEmail", "required">, convex_values519.VLiteral<"none", "required">, convex_values519.VLiteral<"sameConnection", "required">], "required", never>;
181
+ saml: convex_values519.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values519.VLiteral<"verifiedEmail", "required">, convex_values519.VLiteral<"none", "required">, convex_values519.VLiteral<"sameConnection", "required">], "required", never>;
159
182
  }, "required", "oidc" | "saml">;
160
183
  }, "required", "accountLinking" | "accountLinking.oidc" | "accountLinking.saml">;
161
- provisioning: convex_values477.VObject<{
184
+ provisioning: convex_values519.VObject<{
162
185
  user: {
163
186
  createOnSignIn: boolean;
164
187
  updateProfileOnLogin: "never" | "missing" | "always";
165
188
  updateProfileFromScim: "never" | "missing" | "always";
166
- authority: "app" | "sso" | "scim";
189
+ authority: "scim" | "app" | "sso";
167
190
  };
168
191
  scimReuse: {
169
192
  user: "none" | "externalId";
@@ -178,121 +201,122 @@ declare const vGroupDoc: convex_values477.VObject<{
178
201
  };
179
202
  groups: {
180
203
  mapping?: Record<string, string[]> | undefined;
181
- mode: "ignore" | "sync";
182
204
  source: "protocol";
205
+ mode: "ignore" | "sync";
183
206
  };
184
207
  roles: {
185
208
  mapping?: Record<string, string[]> | undefined;
186
- mode: "map" | "ignore";
187
209
  source: "protocol";
210
+ mode: "map" | "ignore";
188
211
  };
189
212
  }, {
190
- user: convex_values477.VObject<{
213
+ user: convex_values519.VObject<{
191
214
  createOnSignIn: boolean;
192
215
  updateProfileOnLogin: "never" | "missing" | "always";
193
216
  updateProfileFromScim: "never" | "missing" | "always";
194
- authority: "app" | "sso" | "scim";
217
+ authority: "scim" | "app" | "sso";
195
218
  }, {
196
- createOnSignIn: convex_values477.VBoolean<boolean, "required">;
197
- updateProfileOnLogin: convex_values477.VUnion<"never" | "missing" | "always", [convex_values477.VLiteral<"never", "required">, convex_values477.VLiteral<"missing", "required">, convex_values477.VLiteral<"always", "required">], "required", never>;
198
- updateProfileFromScim: convex_values477.VUnion<"never" | "missing" | "always", [convex_values477.VLiteral<"never", "required">, convex_values477.VLiteral<"missing", "required">, convex_values477.VLiteral<"always", "required">], "required", never>;
199
- authority: convex_values477.VUnion<"app" | "sso" | "scim", [convex_values477.VLiteral<"app", "required">, convex_values477.VLiteral<"sso", "required">, convex_values477.VLiteral<"scim", "required">], "required", never>;
219
+ createOnSignIn: convex_values519.VBoolean<boolean, "required">;
220
+ updateProfileOnLogin: convex_values519.VUnion<"never" | "missing" | "always", [convex_values519.VLiteral<"never", "required">, convex_values519.VLiteral<"missing", "required">, convex_values519.VLiteral<"always", "required">], "required", never>;
221
+ updateProfileFromScim: convex_values519.VUnion<"never" | "missing" | "always", [convex_values519.VLiteral<"never", "required">, convex_values519.VLiteral<"missing", "required">, convex_values519.VLiteral<"always", "required">], "required", never>;
222
+ authority: convex_values519.VUnion<"scim" | "app" | "sso", [convex_values519.VLiteral<"app", "required">, convex_values519.VLiteral<"sso", "required">, convex_values519.VLiteral<"scim", "required">], "required", never>;
200
223
  }, "required", "createOnSignIn" | "updateProfileOnLogin" | "updateProfileFromScim" | "authority">;
201
- scimReuse: convex_values477.VObject<{
224
+ scimReuse: convex_values519.VObject<{
202
225
  user: "none" | "externalId";
203
226
  }, {
204
- user: convex_values477.VUnion<"none" | "externalId", [convex_values477.VLiteral<"externalId", "required">, convex_values477.VLiteral<"none", "required">], "required", never>;
227
+ user: convex_values519.VUnion<"none" | "externalId", [convex_values519.VLiteral<"externalId", "required">, convex_values519.VLiteral<"none", "required">], "required", never>;
205
228
  }, "required", "user">;
206
- jit: convex_values477.VObject<{
229
+ jit: convex_values519.VObject<{
207
230
  defaultRole?: string | undefined;
208
231
  defaultRoleIds?: string[] | undefined;
209
232
  mode: "off" | "createUser" | "createUserAndMembership";
210
233
  }, {
211
- mode: convex_values477.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values477.VLiteral<"off", "required">, convex_values477.VLiteral<"createUser", "required">, convex_values477.VLiteral<"createUserAndMembership", "required">], "required", never>;
212
- defaultRole: convex_values477.VString<string | undefined, "optional">;
213
- defaultRoleIds: convex_values477.VArray<string[] | undefined, convex_values477.VString<string, "required">, "optional">;
234
+ mode: convex_values519.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values519.VLiteral<"off", "required">, convex_values519.VLiteral<"createUser", "required">, convex_values519.VLiteral<"createUserAndMembership", "required">], "required", never>;
235
+ defaultRole: convex_values519.VString<string | undefined, "optional">;
236
+ defaultRoleIds: convex_values519.VArray<string[] | undefined, convex_values519.VString<string, "required">, "optional">;
214
237
  }, "required", "mode" | "defaultRole" | "defaultRoleIds">;
215
- deprovision: convex_values477.VObject<{
238
+ deprovision: convex_values519.VObject<{
216
239
  mode: "soft" | "hard";
217
240
  }, {
218
- mode: convex_values477.VUnion<"soft" | "hard", [convex_values477.VLiteral<"soft", "required">, convex_values477.VLiteral<"hard", "required">], "required", never>;
241
+ mode: convex_values519.VUnion<"soft" | "hard", [convex_values519.VLiteral<"soft", "required">, convex_values519.VLiteral<"hard", "required">], "required", never>;
219
242
  }, "required", "mode">;
220
- groups: convex_values477.VObject<{
243
+ groups: convex_values519.VObject<{
221
244
  mapping?: Record<string, string[]> | undefined;
222
- mode: "ignore" | "sync";
223
245
  source: "protocol";
246
+ mode: "ignore" | "sync";
224
247
  }, {
225
- mode: convex_values477.VUnion<"ignore" | "sync", [convex_values477.VLiteral<"ignore", "required">, convex_values477.VLiteral<"sync", "required">], "required", never>;
226
- source: convex_values477.VLiteral<"protocol", "required">;
227
- mapping: convex_values477.VRecord<Record<string, string[]> | undefined, convex_values477.VString<string, "required">, convex_values477.VArray<string[], convex_values477.VString<string, "required">, "required">, "optional", string>;
228
- }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
229
- roles: convex_values477.VObject<{
248
+ mode: convex_values519.VUnion<"ignore" | "sync", [convex_values519.VLiteral<"ignore", "required">, convex_values519.VLiteral<"sync", "required">], "required", never>;
249
+ source: convex_values519.VLiteral<"protocol", "required">;
250
+ mapping: convex_values519.VRecord<Record<string, string[]> | undefined, convex_values519.VString<string, "required">, convex_values519.VArray<string[], convex_values519.VString<string, "required">, "required">, "optional", string>;
251
+ }, "required", "source" | "mode" | "mapping" | `mapping.${string}`>;
252
+ roles: convex_values519.VObject<{
230
253
  mapping?: Record<string, string[]> | undefined;
231
- mode: "map" | "ignore";
232
254
  source: "protocol";
255
+ mode: "map" | "ignore";
233
256
  }, {
234
- mode: convex_values477.VUnion<"map" | "ignore", [convex_values477.VLiteral<"ignore", "required">, convex_values477.VLiteral<"map", "required">], "required", never>;
235
- source: convex_values477.VLiteral<"protocol", "required">;
236
- mapping: convex_values477.VRecord<Record<string, string[]> | undefined, convex_values477.VString<string, "required">, convex_values477.VArray<string[], convex_values477.VString<string, "required">, "required">, "optional", string>;
237
- }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
238
- }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.mode" | "groups.source" | "groups.mapping" | `groups.mapping.${string}` | "roles.mode" | "roles.source" | "roles.mapping" | `roles.mapping.${string}`>;
239
- extend: convex_values477.VAny<any, "optional", string>;
240
- }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.mode" | "provisioning.groups.source" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.mode" | "provisioning.roles.source" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
241
- extend: convex_values477.VAny<any, "optional", string>;
242
- _id: convex_values477.VId<convex_values477.GenericId<"Group">, "required">;
243
- _creationTime: convex_values477.VFloat64<number, "required">;
244
- }, "required", "_creationTime" | "name" | "slug" | "type" | "extend" | "_id" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.mode" | "policy.provisioning.roles.source" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}`>;
245
- declare const vGroupMemberDoc: convex_values477.VObject<{
246
- status?: string | undefined;
257
+ mode: convex_values519.VUnion<"map" | "ignore", [convex_values519.VLiteral<"ignore", "required">, convex_values519.VLiteral<"map", "required">], "required", never>;
258
+ source: convex_values519.VLiteral<"protocol", "required">;
259
+ mapping: convex_values519.VRecord<Record<string, string[]> | undefined, convex_values519.VString<string, "required">, convex_values519.VArray<string[], convex_values519.VString<string, "required">, "required">, "optional", string>;
260
+ }, "required", "source" | "mode" | "mapping" | `mapping.${string}`>;
261
+ }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.source" | "groups.mode" | "groups.mapping" | `groups.mapping.${string}` | "roles.source" | "roles.mode" | "roles.mapping" | `roles.mapping.${string}`>;
262
+ extend: convex_values519.VAny<any, "optional", string>;
263
+ }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.source" | "provisioning.groups.mode" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.source" | "provisioning.roles.mode" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
264
+ extend: convex_values519.VAny<any, "optional", string>;
265
+ _id: convex_values519.VId<convex_values519.GenericId<"Group">, "required">;
266
+ _creationTime: convex_values519.VFloat64<number, "required">;
267
+ }, "required", "name" | "_creationTime" | "extend" | "type" | `extend.${string}` | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.source" | "policy.provisioning.roles.mode" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}` | "_id">;
268
+ declare const vGroupMemberDoc: convex_values519.VObject<{
247
269
  extend?: any;
270
+ status?: string | undefined;
248
271
  role?: string | undefined;
249
272
  roleIds?: string[] | undefined;
250
273
  _creationTime: number;
251
- userId: convex_values477.GenericId<"User">;
252
- _id: convex_values477.GenericId<"GroupMember">;
253
- groupId: convex_values477.GenericId<"Group">;
274
+ userId: convex_values519.GenericId<"User">;
275
+ groupId: convex_values519.GenericId<"Group">;
276
+ _id: convex_values519.GenericId<"GroupMember">;
254
277
  }, {
255
- groupId: convex_values477.VId<convex_values477.GenericId<"Group">, "required">;
256
- userId: convex_values477.VId<convex_values477.GenericId<"User">, "required">;
257
- role: convex_values477.VString<string | undefined, "optional">;
258
- roleIds: convex_values477.VArray<string[] | undefined, convex_values477.VString<string, "required">, "optional">;
259
- status: convex_values477.VString<string | undefined, "optional">;
260
- extend: convex_values477.VAny<any, "optional", string>;
261
- _id: convex_values477.VId<convex_values477.GenericId<"GroupMember">, "required">;
262
- _creationTime: convex_values477.VFloat64<number, "required">;
263
- }, "required", "_creationTime" | "status" | "userId" | "extend" | "_id" | `extend.${string}` | "groupId" | "role" | "roleIds">;
264
- declare const vGroupInviteDoc: convex_values477.VObject<{
278
+ groupId: convex_values519.VId<convex_values519.GenericId<"Group">, "required">;
279
+ userId: convex_values519.VId<convex_values519.GenericId<"User">, "required">;
280
+ role: convex_values519.VString<string | undefined, "optional">;
281
+ roleIds: convex_values519.VArray<string[] | undefined, convex_values519.VString<string, "required">, "optional">;
282
+ status: convex_values519.VString<string | undefined, "optional">;
283
+ extend: convex_values519.VAny<any, "optional", string>;
284
+ _id: convex_values519.VId<convex_values519.GenericId<"GroupMember">, "required">;
285
+ _creationTime: convex_values519.VFloat64<number, "required">;
286
+ }, "required", "_creationTime" | "extend" | `extend.${string}` | "userId" | "status" | "groupId" | "role" | "roleIds" | "_id">;
287
+ declare const vGroupInviteDoc: convex_values519.VObject<{
265
288
  email?: string | undefined;
266
- expiresTime?: number | undefined;
267
- acceptedTime?: number | undefined;
268
289
  extend?: any;
269
- groupId?: convex_values477.GenericId<"Group"> | undefined;
290
+ groupId?: convex_values519.GenericId<"Group"> | undefined;
270
291
  role?: string | undefined;
271
292
  roleIds?: string[] | undefined;
272
- invitedByUserId?: convex_values477.GenericId<"User"> | undefined;
273
- acceptedByUserId?: convex_values477.GenericId<"User"> | undefined;
293
+ invitedByUserId?: convex_values519.GenericId<"User"> | undefined;
294
+ expiresTime?: number | undefined;
295
+ acceptedByUserId?: convex_values519.GenericId<"User"> | undefined;
296
+ acceptedTime?: number | undefined;
274
297
  _creationTime: number;
275
298
  status: "pending" | "accepted" | "revoked" | "expired";
276
- _id: convex_values477.GenericId<"GroupInvite">;
277
299
  tokenHash: string;
300
+ _id: convex_values519.GenericId<"GroupInvite">;
278
301
  }, {
279
- groupId: convex_values477.VId<convex_values477.GenericId<"Group"> | undefined, "optional">;
280
- invitedByUserId: convex_values477.VId<convex_values477.GenericId<"User"> | undefined, "optional">;
281
- email: convex_values477.VString<string | undefined, "optional">;
282
- tokenHash: convex_values477.VString<string, "required">;
283
- role: convex_values477.VString<string | undefined, "optional">;
284
- roleIds: convex_values477.VArray<string[] | undefined, convex_values477.VString<string, "required">, "optional">;
285
- status: convex_values477.VUnion<"pending" | "accepted" | "revoked" | "expired", [convex_values477.VLiteral<"pending", "required">, convex_values477.VLiteral<"accepted", "required">, convex_values477.VLiteral<"revoked", "required">, convex_values477.VLiteral<"expired", "required">], "required", never>;
286
- expiresTime: convex_values477.VFloat64<number | undefined, "optional">;
287
- acceptedByUserId: convex_values477.VId<convex_values477.GenericId<"User"> | undefined, "optional">;
288
- acceptedTime: convex_values477.VFloat64<number | undefined, "optional">;
289
- extend: convex_values477.VAny<any, "optional", string>;
290
- _id: convex_values477.VId<convex_values477.GenericId<"GroupInvite">, "required">;
291
- _creationTime: convex_values477.VFloat64<number, "required">;
292
- }, "required", "_creationTime" | "email" | "status" | "expiresTime" | "acceptedTime" | "extend" | "_id" | `extend.${string}` | "groupId" | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "acceptedByUserId">;
293
- declare const vApiKeyDoc: convex_values477.VObject<{
302
+ groupId: convex_values519.VId<convex_values519.GenericId<"Group"> | undefined, "optional">;
303
+ invitedByUserId: convex_values519.VId<convex_values519.GenericId<"User"> | undefined, "optional">;
304
+ email: convex_values519.VString<string | undefined, "optional">;
305
+ tokenHash: convex_values519.VString<string, "required">;
306
+ role: convex_values519.VString<string | undefined, "optional">;
307
+ roleIds: convex_values519.VArray<string[] | undefined, convex_values519.VString<string, "required">, "optional">;
308
+ status: convex_values519.VUnion<"pending" | "accepted" | "revoked" | "expired", [convex_values519.VLiteral<"pending", "required">, convex_values519.VLiteral<"accepted", "required">, convex_values519.VLiteral<"revoked", "required">, convex_values519.VLiteral<"expired", "required">], "required", never>;
309
+ expiresTime: convex_values519.VFloat64<number | undefined, "optional">;
310
+ acceptedByUserId: convex_values519.VId<convex_values519.GenericId<"User"> | undefined, "optional">;
311
+ acceptedTime: convex_values519.VFloat64<number | undefined, "optional">;
312
+ extend: convex_values519.VAny<any, "optional", string>;
313
+ _id: convex_values519.VId<convex_values519.GenericId<"GroupInvite">, "required">;
314
+ _creationTime: convex_values519.VFloat64<number, "required">;
315
+ }, "required", "email" | "_creationTime" | "extend" | `extend.${string}` | "status" | "groupId" | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime" | "_id">;
316
+ declare const vApiKeyDoc: convex_values519.VObject<{
294
317
  lastUsedAt?: number | undefined;
295
318
  expiresAt?: number | undefined;
319
+ metadata?: any;
296
320
  rateLimit?: {
297
321
  maxRequests: number;
298
322
  windowMs: number;
@@ -301,56 +325,55 @@ declare const vApiKeyDoc: convex_values477.VObject<{
301
325
  attemptsLeft: number;
302
326
  lastAttemptTime: number;
303
327
  } | undefined;
304
- metadata?: any;
305
- _creationTime: number;
306
328
  name: string;
329
+ _creationTime: number;
330
+ userId: convex_values519.GenericId<"User">;
331
+ createdAt: number;
307
332
  revoked: boolean;
308
- userId: convex_values477.GenericId<"User">;
309
333
  prefix: string;
310
334
  hashedKey: string;
311
335
  scopes: {
312
336
  resource: string;
313
337
  actions: string[];
314
338
  }[];
315
- createdAt: number;
316
- _id: convex_values477.GenericId<"ApiKey">;
339
+ _id: convex_values519.GenericId<"ApiKey">;
317
340
  }, {
318
- userId: convex_values477.VId<convex_values477.GenericId<"User">, "required">;
319
- prefix: convex_values477.VString<string, "required">;
320
- hashedKey: convex_values477.VString<string, "required">;
321
- name: convex_values477.VString<string, "required">;
322
- scopes: convex_values477.VArray<{
341
+ userId: convex_values519.VId<convex_values519.GenericId<"User">, "required">;
342
+ prefix: convex_values519.VString<string, "required">;
343
+ hashedKey: convex_values519.VString<string, "required">;
344
+ name: convex_values519.VString<string, "required">;
345
+ scopes: convex_values519.VArray<{
323
346
  resource: string;
324
347
  actions: string[];
325
- }[], convex_values477.VObject<{
348
+ }[], convex_values519.VObject<{
326
349
  resource: string;
327
350
  actions: string[];
328
351
  }, {
329
- resource: convex_values477.VString<string, "required">;
330
- actions: convex_values477.VArray<string[], convex_values477.VString<string, "required">, "required">;
352
+ resource: convex_values519.VString<string, "required">;
353
+ actions: convex_values519.VArray<string[], convex_values519.VString<string, "required">, "required">;
331
354
  }, "required", "resource" | "actions">, "required">;
332
- rateLimit: convex_values477.VObject<{
355
+ rateLimit: convex_values519.VObject<{
333
356
  maxRequests: number;
334
357
  windowMs: number;
335
358
  } | undefined, {
336
- maxRequests: convex_values477.VFloat64<number, "required">;
337
- windowMs: convex_values477.VFloat64<number, "required">;
359
+ maxRequests: convex_values519.VFloat64<number, "required">;
360
+ windowMs: convex_values519.VFloat64<number, "required">;
338
361
  }, "optional", "maxRequests" | "windowMs">;
339
- rateLimitState: convex_values477.VObject<{
362
+ rateLimitState: convex_values519.VObject<{
340
363
  attemptsLeft: number;
341
364
  lastAttemptTime: number;
342
365
  } | undefined, {
343
- attemptsLeft: convex_values477.VFloat64<number, "required">;
344
- lastAttemptTime: convex_values477.VFloat64<number, "required">;
366
+ attemptsLeft: convex_values519.VFloat64<number, "required">;
367
+ lastAttemptTime: convex_values519.VFloat64<number, "required">;
345
368
  }, "optional", "attemptsLeft" | "lastAttemptTime">;
346
- expiresAt: convex_values477.VFloat64<number | undefined, "optional">;
347
- lastUsedAt: convex_values477.VFloat64<number | undefined, "optional">;
348
- createdAt: convex_values477.VFloat64<number, "required">;
349
- revoked: convex_values477.VBoolean<boolean, "required">;
350
- metadata: convex_values477.VAny<any, "optional", string>;
351
- _id: convex_values477.VId<convex_values477.GenericId<"ApiKey">, "required">;
352
- _creationTime: convex_values477.VFloat64<number, "required">;
353
- }, "required", "_creationTime" | "name" | "revoked" | "lastUsedAt" | "expiresAt" | "userId" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "createdAt" | "metadata" | "_id" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>;
369
+ expiresAt: convex_values519.VFloat64<number | undefined, "optional">;
370
+ lastUsedAt: convex_values519.VFloat64<number | undefined, "optional">;
371
+ createdAt: convex_values519.VFloat64<number, "required">;
372
+ revoked: convex_values519.VBoolean<boolean, "required">;
373
+ metadata: convex_values519.VAny<any, "optional", string>;
374
+ _id: convex_values519.VId<convex_values519.GenericId<"ApiKey">, "required">;
375
+ _creationTime: convex_values519.VFloat64<number, "required">;
376
+ }, "required", "name" | "_creationTime" | "userId" | "createdAt" | "lastUsedAt" | "expiresAt" | "revoked" | "metadata" | `metadata.${string}` | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | "_id">;
354
377
  //#endregion
355
- export { vApiKeyDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vPaginated, vUserDoc };
378
+ export { vApiKeyDoc, vGroupDoc, vGroupInviteDoc, vGroupMemberDoc, vPaginated, vUserDoc, vUserEmailDoc };
356
379
  //# sourceMappingURL=model.d.ts.map