@robelest/convex-auth 0.0.4-preview.34 → 0.0.4-preview.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/dist/component/convex.config.d.ts +2 -2
  2. package/dist/component/model.d.ts +178 -178
  3. package/dist/component/schema.d.ts +78 -78
  4. package/dist/core/index.d.ts +25 -25
  5. package/dist/core/index.js +4 -2
  6. package/dist/server/auth.d.ts +4 -3
  7. package/dist/server/auth.js +2 -2
  8. package/dist/server/mounts.d.ts +30 -30
  9. package/dist/server/runtime.d.ts +9 -9
  10. package/dist/server/sso/domain.d.ts +1 -1
  11. package/dist/server/validators.d.ts +370 -370
  12. package/package.json +1 -1
package/dist/component/schema.d.ts CHANGED
@@ -15,15 +15,15 @@ declare const _default: convex_server93.SchemaDefinition<{
15
15
  * and multiple concurrent sessions.
16
16
  */
17
17
  User: convex_server93.TableDefinition<convex_values1267.VObject<{
18
- email?: string | undefined;
19
18
  name?: string | undefined;
19
+ email?: string | undefined;
20
20
  image?: string | undefined;
21
- extend?: any;
22
- emailVerificationTime?: number | undefined;
23
21
  phone?: string | undefined;
22
+ emailVerificationTime?: number | undefined;
24
23
  phoneVerificationTime?: number | undefined;
25
24
  isAnonymous?: boolean | undefined;
26
25
  lastActiveGroup?: convex_values1267.GenericId<"Group"> | undefined;
26
+ extend?: any;
27
27
  }, {
28
28
  name: convex_values1267.VString<string | undefined, "optional">;
29
29
  image: convex_values1267.VString<string | undefined, "optional">;
@@ -34,7 +34,7 @@ declare const _default: convex_server93.SchemaDefinition<{
34
34
  isAnonymous: convex_values1267.VBoolean<boolean | undefined, "optional">;
35
35
  lastActiveGroup: convex_values1267.VId<convex_values1267.GenericId<"Group"> | undefined, "optional">;
36
36
  extend: convex_values1267.VAny<any, "optional", string>;
37
- }, "required", "email" | "name" | "image" | "extend" | "emailVerificationTime" | "phone" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | `extend.${string}`>, {
37
+ }, "required", "name" | "email" | "image" | "phone" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "extend" | `extend.${string}`>, {
38
38
  email: ["email", "_creationTime"];
39
39
  email_verified: ["email", "emailVerificationTime", "_creationTime"];
40
40
  phone: ["phone", "_creationTime"];
@@ -52,24 +52,24 @@ declare const _default: convex_server93.SchemaDefinition<{
52
52
  * `connectionId` (see server/users.ts) to avoid cross-IdP takeover.
53
53
  */
54
54
  UserEmail: convex_server93.TableDefinition<convex_values1267.VObject<{
55
- provider?: string | undefined;
56
- connectionId?: convex_values1267.GenericId<"GroupConnection"> | undefined;
57
55
  verificationTime?: number | undefined;
58
56
  accountId?: convex_values1267.GenericId<"Account"> | undefined;
57
+ provider?: string | undefined;
58
+ connectionId?: convex_values1267.GenericId<"GroupConnection"> | undefined;
59
59
  email: string;
60
- source: "saml" | "oidc" | "scim" | "password" | "oauth";
61
60
  userId: convex_values1267.GenericId<"User">;
62
61
  isPrimary: boolean;
62
+ source: "password" | "oauth" | "oidc" | "saml" | "scim";
63
63
  }, {
64
64
  userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">;
65
65
  email: convex_values1267.VString<string, "required">;
66
66
  verificationTime: convex_values1267.VFloat64<number | undefined, "optional">;
67
67
  isPrimary: convex_values1267.VBoolean<boolean, "required">;
68
- source: convex_values1267.VUnion<"saml" | "oidc" | "scim" | "password" | "oauth", [convex_values1267.VLiteral<"password", "required">, convex_values1267.VLiteral<"oauth", "required">, convex_values1267.VLiteral<"oidc", "required">, convex_values1267.VLiteral<"saml", "required">, convex_values1267.VLiteral<"scim", "required">], "required", never>;
68
+ source: convex_values1267.VUnion<"password" | "oauth" | "oidc" | "saml" | "scim", [convex_values1267.VLiteral<"password", "required">, convex_values1267.VLiteral<"oauth", "required">, convex_values1267.VLiteral<"oidc", "required">, convex_values1267.VLiteral<"saml", "required">, convex_values1267.VLiteral<"scim", "required">], "required", never>;
69
69
  accountId: convex_values1267.VId<convex_values1267.GenericId<"Account"> | undefined, "optional">;
70
70
  provider: convex_values1267.VString<string | undefined, "optional">;
71
71
  connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection"> | undefined, "optional">;
72
- }, "required", "email" | "provider" | "connectionId" | "source" | "userId" | "verificationTime" | "isPrimary" | "accountId">, {
72
+ }, "required", "email" | "userId" | "verificationTime" | "isPrimary" | "source" | "accountId" | "provider" | "connectionId">, {
73
73
  email: ["email", "_creationTime"];
74
74
  email_verified: ["email", "verificationTime", "_creationTime"];
75
75
  user_id: ["userId", "_creationTime"];
@@ -100,9 +100,9 @@ declare const _default: convex_server93.SchemaDefinition<{
100
100
  extend?: any;
101
101
  secret?: string | undefined;
102
102
  phoneVerified?: string | undefined;
103
+ userId: convex_values1267.GenericId<"User">;
103
104
  provider: string;
104
105
  providerAccountId: string;
105
- userId: convex_values1267.GenericId<"User">;
106
106
  }, {
107
107
  userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">;
108
108
  provider: convex_values1267.VString<string, "required">;
@@ -111,7 +111,7 @@ declare const _default: convex_server93.SchemaDefinition<{
111
111
  emailVerified: convex_values1267.VString<string | undefined, "optional">;
112
112
  phoneVerified: convex_values1267.VString<string | undefined, "optional">;
113
113
  extend: convex_values1267.VAny<any, "optional", string>;
114
- }, "required", "emailVerified" | "extend" | "provider" | "providerAccountId" | `extend.${string}` | "userId" | "secret" | "phoneVerified">, {
114
+ }, "required", "emailVerified" | "extend" | `extend.${string}` | "userId" | "provider" | "providerAccountId" | "secret" | "phoneVerified">, {
115
115
  user_id_provider: ["userId", "provider", "_creationTime"];
116
116
  provider_account_id: ["provider", "providerAccountId", "_creationTime"];
117
117
  }, {}, {}>;
@@ -145,8 +145,8 @@ declare const _default: convex_server93.SchemaDefinition<{
145
145
  emailVerified?: string | undefined;
146
146
  phoneVerified?: string | undefined;
147
147
  verifier?: string | undefined;
148
- provider: string;
149
148
  accountId: convex_values1267.GenericId<"Account">;
149
+ provider: string;
150
150
  expirationTime: number;
151
151
  code: string;
152
152
  }, {
@@ -157,7 +157,7 @@ declare const _default: convex_server93.SchemaDefinition<{
157
157
  verifier: convex_values1267.VString<string | undefined, "optional">;
158
158
  emailVerified: convex_values1267.VString<string | undefined, "optional">;
159
159
  phoneVerified: convex_values1267.VString<string | undefined, "optional">;
160
- }, "required", "emailVerified" | "provider" | "accountId" | "expirationTime" | "phoneVerified" | "code" | "verifier">, {
160
+ }, "required", "emailVerified" | "accountId" | "provider" | "expirationTime" | "phoneVerified" | "code" | "verifier">, {
161
161
  account_id: ["accountId", "_creationTime"];
162
162
  code: ["code", "_creationTime"];
163
163
  }, {}, {}>;
@@ -222,11 +222,11 @@ declare const _default: convex_server93.SchemaDefinition<{
222
222
  name?: string | undefined;
223
223
  lastUsedAt?: number | undefined;
224
224
  userId: convex_values1267.GenericId<"User">;
225
- verified: boolean;
226
225
  secret: ArrayBuffer;
227
226
  createdAt: number;
228
227
  digits: number;
229
228
  period: number;
229
+ verified: boolean;
230
230
  }, {
231
231
  userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">; /** Raw TOTP secret key bytes. */
232
232
  secret: convex_values1267.VBytes<ArrayBuffer, "required">; /** Number of digits in each code (typically 6). */
@@ -236,7 +236,7 @@ declare const _default: convex_server93.SchemaDefinition<{
236
236
  name: convex_values1267.VString<string | undefined, "optional">;
237
237
  createdAt: convex_values1267.VFloat64<number, "required">;
238
238
  lastUsedAt: convex_values1267.VFloat64<number | undefined, "optional">;
239
- }, "required", "name" | "userId" | "verified" | "secret" | "createdAt" | "lastUsedAt" | "digits" | "period">, {
239
+ }, "required", "name" | "userId" | "secret" | "createdAt" | "lastUsedAt" | "digits" | "period" | "verified">, {
240
240
  user_id: ["userId", "_creationTime"];
241
241
  user_id_verified: ["userId", "verified", "_creationTime"];
242
242
  }, {}, {}>;
@@ -250,9 +250,9 @@ declare const _default: convex_server93.SchemaDefinition<{
250
250
  sessionId?: convex_values1267.GenericId<"Session"> | undefined;
251
251
  lastPolledAt?: number | undefined;
252
252
  status: "pending" | "authorized" | "denied";
253
- expiresAt: number;
254
253
  deviceCodeHash: string;
255
254
  userCode: string;
255
+ expiresAt: number;
256
256
  interval: number;
257
257
  }, {
258
258
  /** High-entropy code used by the device for polling. Stored as SHA-256 hash. */deviceCodeHash: convex_values1267.VString<string, "required">; /** Short human-readable code the user enters (e.g. "WDJB-MJHT"). */
@@ -263,7 +263,7 @@ declare const _default: convex_server93.SchemaDefinition<{
263
263
  userId: convex_values1267.VId<convex_values1267.GenericId<"User"> | undefined, "optional">; /** Set when the user authorizes — the session created for the device. */
264
264
  sessionId: convex_values1267.VId<convex_values1267.GenericId<"Session"> | undefined, "optional">; /** Timestamp of the last poll request (for slow_down enforcement). */
265
265
  lastPolledAt: convex_values1267.VFloat64<number | undefined, "optional">;
266
- }, "required", "userId" | "status" | "sessionId" | "expiresAt" | "deviceCodeHash" | "userCode" | "interval" | "lastPolledAt">, {
266
+ }, "required", "userId" | "sessionId" | "status" | "deviceCodeHash" | "userCode" | "expiresAt" | "interval" | "lastPolledAt">, {
267
267
  device_code_hash: ["deviceCodeHash", "_creationTime"];
268
268
  user_code_status: ["userCode", "status", "_creationTime"];
269
269
  }, {}, {}>;
@@ -287,31 +287,31 @@ declare const _default: convex_server93.SchemaDefinition<{
287
287
  * organizations, teams, departments, or any tree structure.
288
288
  */
289
289
  Group: convex_server93.TableDefinition<convex_values1267.VObject<{
290
- type?: string | undefined;
291
290
  extend?: any;
291
+ type?: string | undefined;
292
292
  slug?: string | undefined;
293
293
  parentGroupId?: convex_values1267.GenericId<"Group"> | undefined;
294
294
  rootGroupId?: convex_values1267.GenericId<"Group"> | undefined;
295
295
  isRoot?: boolean | undefined;
296
296
  tags?: {
297
- value: string;
298
297
  key: string;
298
+ value: string;
299
299
  }[] | undefined;
300
300
  policy?: {
301
301
  extend?: any;
302
+ version: 1;
302
303
  identity: {
303
304
  accountLinking: {
304
- saml: "verifiedEmail" | "none" | "sameConnection";
305
305
  oidc: "verifiedEmail" | "none" | "sameConnection";
306
+ saml: "verifiedEmail" | "none" | "sameConnection";
306
307
  };
307
308
  };
308
- version: 1;
309
309
  provisioning: {
310
310
  user: {
311
311
  createOnSignIn: boolean;
312
312
  updateProfileOnLogin: "never" | "missing" | "always";
313
313
  updateProfileFromScim: "never" | "missing" | "always";
314
- authority: "app" | "sso" | "scim";
314
+ authority: "scim" | "app" | "sso";
315
315
  };
316
316
  scimReuse: {
317
317
  user: "none" | "externalId";
@@ -326,13 +326,13 @@ declare const _default: convex_server93.SchemaDefinition<{
326
326
  };
327
327
  groups: {
328
328
  mapping?: Record<string, string[]> | undefined;
329
- mode: "ignore" | "sync";
330
329
  source: "protocol";
330
+ mode: "ignore" | "sync";
331
331
  };
332
332
  roles: {
333
333
  mapping?: Record<string, string[]> | undefined;
334
- mode: "map" | "ignore";
335
334
  source: "protocol";
335
+ mode: "map" | "ignore";
336
336
  };
337
337
  };
338
338
  } | undefined;
@@ -345,30 +345,30 @@ declare const _default: convex_server93.SchemaDefinition<{
345
345
  rootGroupId: convex_values1267.VId<convex_values1267.GenericId<"Group"> | undefined, "optional">; /** Denormalized flag: `true` when `parentGroupId` is absent. */
346
346
  isRoot: convex_values1267.VBoolean<boolean | undefined, "optional">; /** Faceted classification tags. Normalized at write time (trimmed, lowercased). */
347
347
  tags: convex_values1267.VArray<{
348
- value: string;
349
348
  key: string;
350
- }[] | undefined, convex_values1267.VObject<{
351
349
  value: string;
350
+ }[] | undefined, convex_values1267.VObject<{
352
351
  key: string;
352
+ value: string;
353
353
  }, {
354
354
  key: convex_values1267.VString<string, "required">;
355
355
  value: convex_values1267.VString<string, "required">;
356
- }, "required", "value" | "key">, "optional">;
356
+ }, "required", "key" | "value">, "optional">;
357
357
  policy: convex_values1267.VObject<{
358
358
  extend?: any;
359
+ version: 1;
359
360
  identity: {
360
361
  accountLinking: {
361
- saml: "verifiedEmail" | "none" | "sameConnection";
362
362
  oidc: "verifiedEmail" | "none" | "sameConnection";
363
+ saml: "verifiedEmail" | "none" | "sameConnection";
363
364
  };
364
365
  };
365
- version: 1;
366
366
  provisioning: {
367
367
  user: {
368
368
  createOnSignIn: boolean;
369
369
  updateProfileOnLogin: "never" | "missing" | "always";
370
370
  updateProfileFromScim: "never" | "missing" | "always";
371
- authority: "app" | "sso" | "scim";
371
+ authority: "scim" | "app" | "sso";
372
372
  };
373
373
  scimReuse: {
374
374
  user: "none" | "externalId";
@@ -383,37 +383,37 @@ declare const _default: convex_server93.SchemaDefinition<{
383
383
  };
384
384
  groups: {
385
385
  mapping?: Record<string, string[]> | undefined;
386
- mode: "ignore" | "sync";
387
386
  source: "protocol";
387
+ mode: "ignore" | "sync";
388
388
  };
389
389
  roles: {
390
390
  mapping?: Record<string, string[]> | undefined;
391
- mode: "map" | "ignore";
392
391
  source: "protocol";
392
+ mode: "map" | "ignore";
393
393
  };
394
394
  };
395
395
  } | undefined, {
396
396
  version: convex_values1267.VLiteral<1, "required">;
397
397
  identity: convex_values1267.VObject<{
398
398
  accountLinking: {
399
- saml: "verifiedEmail" | "none" | "sameConnection";
400
399
  oidc: "verifiedEmail" | "none" | "sameConnection";
400
+ saml: "verifiedEmail" | "none" | "sameConnection";
401
401
  };
402
402
  }, {
403
403
  accountLinking: convex_values1267.VObject<{
404
- saml: "verifiedEmail" | "none" | "sameConnection";
405
404
  oidc: "verifiedEmail" | "none" | "sameConnection";
405
+ saml: "verifiedEmail" | "none" | "sameConnection";
406
406
  }, {
407
407
  oidc: convex_values1267.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values1267.VLiteral<"verifiedEmail", "required">, convex_values1267.VLiteral<"none", "required">, convex_values1267.VLiteral<"sameConnection", "required">], "required", never>;
408
408
  saml: convex_values1267.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values1267.VLiteral<"verifiedEmail", "required">, convex_values1267.VLiteral<"none", "required">, convex_values1267.VLiteral<"sameConnection", "required">], "required", never>;
409
- }, "required", "saml" | "oidc">;
410
- }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
409
+ }, "required", "oidc" | "saml">;
410
+ }, "required", "accountLinking" | "accountLinking.oidc" | "accountLinking.saml">;
411
411
  provisioning: convex_values1267.VObject<{
412
412
  user: {
413
413
  createOnSignIn: boolean;
414
414
  updateProfileOnLogin: "never" | "missing" | "always";
415
415
  updateProfileFromScim: "never" | "missing" | "always";
416
- authority: "app" | "sso" | "scim";
416
+ authority: "scim" | "app" | "sso";
417
417
  };
418
418
  scimReuse: {
419
419
  user: "none" | "externalId";
@@ -428,25 +428,25 @@ declare const _default: convex_server93.SchemaDefinition<{
428
428
  };
429
429
  groups: {
430
430
  mapping?: Record<string, string[]> | undefined;
431
- mode: "ignore" | "sync";
432
431
  source: "protocol";
432
+ mode: "ignore" | "sync";
433
433
  };
434
434
  roles: {
435
435
  mapping?: Record<string, string[]> | undefined;
436
- mode: "map" | "ignore";
437
436
  source: "protocol";
437
+ mode: "map" | "ignore";
438
438
  };
439
439
  }, {
440
440
  user: convex_values1267.VObject<{
441
441
  createOnSignIn: boolean;
442
442
  updateProfileOnLogin: "never" | "missing" | "always";
443
443
  updateProfileFromScim: "never" | "missing" | "always";
444
- authority: "app" | "sso" | "scim";
444
+ authority: "scim" | "app" | "sso";
445
445
  }, {
446
446
  createOnSignIn: convex_values1267.VBoolean<boolean, "required">;
447
447
  updateProfileOnLogin: convex_values1267.VUnion<"never" | "missing" | "always", [convex_values1267.VLiteral<"never", "required">, convex_values1267.VLiteral<"missing", "required">, convex_values1267.VLiteral<"always", "required">], "required", never>;
448
448
  updateProfileFromScim: convex_values1267.VUnion<"never" | "missing" | "always", [convex_values1267.VLiteral<"never", "required">, convex_values1267.VLiteral<"missing", "required">, convex_values1267.VLiteral<"always", "required">], "required", never>;
449
- authority: convex_values1267.VUnion<"app" | "sso" | "scim", [convex_values1267.VLiteral<"app", "required">, convex_values1267.VLiteral<"sso", "required">, convex_values1267.VLiteral<"scim", "required">], "required", never>;
449
+ authority: convex_values1267.VUnion<"scim" | "app" | "sso", [convex_values1267.VLiteral<"app", "required">, convex_values1267.VLiteral<"sso", "required">, convex_values1267.VLiteral<"scim", "required">], "required", never>;
450
450
  }, "required", "createOnSignIn" | "updateProfileOnLogin" | "updateProfileFromScim" | "authority">;
451
451
  scimReuse: convex_values1267.VObject<{
452
452
  user: "none" | "externalId";
@@ -469,27 +469,27 @@ declare const _default: convex_server93.SchemaDefinition<{
469
469
  }, "required", "mode">;
470
470
  groups: convex_values1267.VObject<{
471
471
  mapping?: Record<string, string[]> | undefined;
472
- mode: "ignore" | "sync";
473
472
  source: "protocol";
473
+ mode: "ignore" | "sync";
474
474
  }, {
475
475
  mode: convex_values1267.VUnion<"ignore" | "sync", [convex_values1267.VLiteral<"ignore", "required">, convex_values1267.VLiteral<"sync", "required">], "required", never>;
476
476
  source: convex_values1267.VLiteral<"protocol", "required">;
477
477
  mapping: convex_values1267.VRecord<Record<string, string[]> | undefined, convex_values1267.VString<string, "required">, convex_values1267.VArray<string[], convex_values1267.VString<string, "required">, "required">, "optional", string>;
478
- }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
478
+ }, "required", "source" | "mode" | "mapping" | `mapping.${string}`>;
479
479
  roles: convex_values1267.VObject<{
480
480
  mapping?: Record<string, string[]> | undefined;
481
- mode: "map" | "ignore";
482
481
  source: "protocol";
482
+ mode: "map" | "ignore";
483
483
  }, {
484
484
  mode: convex_values1267.VUnion<"map" | "ignore", [convex_values1267.VLiteral<"ignore", "required">, convex_values1267.VLiteral<"map", "required">], "required", never>;
485
485
  source: convex_values1267.VLiteral<"protocol", "required">;
486
486
  mapping: convex_values1267.VRecord<Record<string, string[]> | undefined, convex_values1267.VString<string, "required">, convex_values1267.VArray<string[], convex_values1267.VString<string, "required">, "required">, "optional", string>;
487
- }, "required", "mode" | "source" | "mapping" | `mapping.${string}`>;
488
- }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.mode" | "groups.source" | "groups.mapping" | `groups.mapping.${string}` | "roles.mode" | "roles.source" | "roles.mapping" | `roles.mapping.${string}`>;
487
+ }, "required", "source" | "mode" | "mapping" | `mapping.${string}`>;
488
+ }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.source" | "groups.mode" | "groups.mapping" | `groups.mapping.${string}` | "roles.source" | "roles.mode" | "roles.mapping" | `roles.mapping.${string}`>;
489
489
  extend: convex_values1267.VAny<any, "optional", string>;
490
- }, "optional", "identity" | "extend" | `extend.${string}` | "version" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.mode" | "provisioning.groups.source" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.mode" | "provisioning.roles.source" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
490
+ }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.source" | "provisioning.groups.mode" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.source" | "provisioning.roles.mode" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
491
491
  extend: convex_values1267.VAny<any, "optional", string>;
492
- }, "required", "name" | "type" | "extend" | `extend.${string}` | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.identity" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.saml" | "policy.identity.accountLinking.oidc" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.mode" | "policy.provisioning.roles.source" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}`>, {
492
+ }, "required", "name" | "extend" | "type" | `extend.${string}` | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.source" | "policy.provisioning.roles.mode" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}`>, {
493
493
  slug: ["slug", "_creationTime"];
494
494
  parent_group_id: ["parentGroupId", "_creationTime"];
495
495
  root_group_id: ["rootGroupId", "_creationTime"];
@@ -503,14 +503,14 @@ declare const _default: convex_server93.SchemaDefinition<{
503
503
  * `groupCreate`, `groupUpdate`, and `groupDelete`.
504
504
  */
505
505
  GroupTag: convex_server93.TableDefinition<convex_values1267.VObject<{
506
- value: string;
507
506
  key: string;
507
+ value: string;
508
508
  group_id: convex_values1267.GenericId<"Group">;
509
509
  }, {
510
510
  group_id: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
511
511
  key: convex_values1267.VString<string, "required">;
512
512
  value: convex_values1267.VString<string, "required">;
513
- }, "required", "value" | "key" | "group_id">, {
513
+ }, "required", "key" | "value" | "group_id">, {
514
514
  by_group: ["group_id", "_creationTime"];
515
515
  by_key_value: ["key", "value", "_creationTime"];
516
516
  by_key: ["key", "_creationTime"];
@@ -522,11 +522,11 @@ declare const _default: convex_server93.SchemaDefinition<{
522
522
  */
523
523
  GroupMember: convex_server93.TableDefinition<convex_values1267.VObject<{
524
524
  extend?: any;
525
+ status?: string | undefined;
525
526
  role?: string | undefined;
526
527
  roleIds?: string[] | undefined;
527
- status?: string | undefined;
528
- groupId: convex_values1267.GenericId<"Group">;
529
528
  userId: convex_values1267.GenericId<"User">;
529
+ groupId: convex_values1267.GenericId<"Group">;
530
530
  }, {
531
531
  groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
532
532
  userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">;
@@ -534,7 +534,7 @@ declare const _default: convex_server93.SchemaDefinition<{
534
534
  roleIds: convex_values1267.VArray<string[] | undefined, convex_values1267.VString<string, "required">, "optional">;
535
535
  status: convex_values1267.VString<string | undefined, "optional">;
536
536
  extend: convex_values1267.VAny<any, "optional", string>;
537
- }, "required", "extend" | `extend.${string}` | "groupId" | "userId" | "role" | "roleIds" | "status">, {
537
+ }, "required", "extend" | `extend.${string}` | "userId" | "status" | "groupId" | "role" | "roleIds">, {
538
538
  group_id: ["groupId", "_creationTime"];
539
539
  group_id_user_id: ["groupId", "userId", "_creationTime"];
540
540
  group_id_status: ["groupId", "status", "_creationTime"];
@@ -572,7 +572,7 @@ declare const _default: convex_server93.SchemaDefinition<{
572
572
  acceptedByUserId: convex_values1267.VId<convex_values1267.GenericId<"User"> | undefined, "optional">;
573
573
  acceptedTime: convex_values1267.VFloat64<number | undefined, "optional">;
574
574
  extend: convex_values1267.VAny<any, "optional", string>;
575
- }, "required", "email" | "extend" | `extend.${string}` | "groupId" | "role" | "roleIds" | "status" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
575
+ }, "required", "email" | "extend" | `extend.${string}` | "status" | "groupId" | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
576
576
  token_hash: ["tokenHash", "_creationTime"];
577
577
  status: ["status", "_creationTime"];
578
578
  email_status: ["email", "status", "_creationTime"];
@@ -592,18 +592,18 @@ declare const _default: convex_server93.SchemaDefinition<{
592
592
  extend?: any;
593
593
  slug?: string | undefined;
594
594
  config?: any;
595
- protocol: "saml" | "oidc";
596
- groupId: convex_values1267.GenericId<"Group">;
597
595
  status: "draft" | "active" | "disabled";
596
+ protocol: "oidc" | "saml";
597
+ groupId: convex_values1267.GenericId<"Group">;
598
598
  }, {
599
599
  groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
600
600
  slug: convex_values1267.VString<string | undefined, "optional">;
601
601
  name: convex_values1267.VString<string | undefined, "optional">;
602
- protocol: convex_values1267.VUnion<"saml" | "oidc", [convex_values1267.VLiteral<"oidc", "required">, convex_values1267.VLiteral<"saml", "required">], "required", never>;
602
+ protocol: convex_values1267.VUnion<"oidc" | "saml", [convex_values1267.VLiteral<"oidc", "required">, convex_values1267.VLiteral<"saml", "required">], "required", never>;
603
603
  status: convex_values1267.VUnion<"draft" | "active" | "disabled", [convex_values1267.VLiteral<"draft", "required">, convex_values1267.VLiteral<"active", "required">, convex_values1267.VLiteral<"disabled", "required">], "required", never>;
604
604
  config: convex_values1267.VAny<any, "optional", string>;
605
605
  extend: convex_values1267.VAny<any, "optional", string>;
606
- }, "required", "name" | "extend" | "protocol" | `extend.${string}` | "slug" | "groupId" | "status" | "config" | `config.${string}`>, {
606
+ }, "required", "name" | "extend" | `extend.${string}` | "status" | "slug" | "protocol" | "groupId" | "config" | `config.${string}`>, {
607
607
  group_id: ["groupId", "_creationTime"];
608
608
  slug: ["slug", "_creationTime"];
609
609
  status: ["status", "_creationTime"];
@@ -615,9 +615,9 @@ declare const _default: convex_server93.SchemaDefinition<{
615
615
  */
616
616
  GroupConnectionDomain: convex_server93.TableDefinition<convex_values1267.VObject<{
617
617
  verifiedAt?: number | undefined;
618
+ isPrimary: boolean;
618
619
  connectionId: convex_values1267.GenericId<"GroupConnection">;
619
620
  groupId: convex_values1267.GenericId<"Group">;
620
- isPrimary: boolean;
621
621
  domain: string;
622
622
  }, {
623
623
  connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
@@ -625,7 +625,7 @@ declare const _default: convex_server93.SchemaDefinition<{
625
625
  domain: convex_values1267.VString<string, "required">;
626
626
  isPrimary: convex_values1267.VBoolean<boolean, "required">;
627
627
  verifiedAt: convex_values1267.VFloat64<number | undefined, "optional">;
628
- }, "required", "connectionId" | "groupId" | "isPrimary" | "domain" | "verifiedAt">, {
628
+ }, "required", "isPrimary" | "connectionId" | "groupId" | "domain" | "verifiedAt">, {
629
629
  connection_id: ["connectionId", "_creationTime"];
630
630
  group_id: ["groupId", "_creationTime"];
631
631
  domain: ["domain", "_creationTime"];
@@ -635,9 +635,9 @@ declare const _default: convex_server93.SchemaDefinition<{
635
635
  */
636
636
  GroupConnectionDomainVerification: convex_server93.TableDefinition<convex_values1267.VObject<{
637
637
  connectionId: convex_values1267.GenericId<"GroupConnection">;
638
+ expiresAt: number;
638
639
  groupId: convex_values1267.GenericId<"Group">;
639
640
  tokenHash: string;
640
- expiresAt: number;
641
641
  domain: string;
642
642
  domainId: convex_values1267.GenericId<"GroupConnectionDomain">;
643
643
  recordName: string;
@@ -653,7 +653,7 @@ declare const _default: convex_server93.SchemaDefinition<{
653
653
  tokenHash: convex_values1267.VString<string, "required">;
654
654
  requestedAt: convex_values1267.VFloat64<number, "required">;
655
655
  expiresAt: convex_values1267.VFloat64<number, "required">;
656
- }, "required", "connectionId" | "groupId" | "tokenHash" | "expiresAt" | "domain" | "domainId" | "recordName" | "token" | "requestedAt">, {
656
+ }, "required", "connectionId" | "expiresAt" | "groupId" | "tokenHash" | "domain" | "domainId" | "recordName" | "token" | "requestedAt">, {
657
657
  connection_id: ["connectionId", "_creationTime"];
658
658
  domain_id: ["domainId", "_creationTime"];
659
659
  token_hash: ["tokenHash", "_creationTime"];
@@ -663,17 +663,17 @@ declare const _default: convex_server93.SchemaDefinition<{
663
663
  */
664
664
  GroupConnectionSecret: convex_server93.TableDefinition<convex_values1267.VObject<{
665
665
  connectionId: convex_values1267.GenericId<"GroupConnection">;
666
- kind: "oidc_client_secret";
667
666
  groupId: convex_values1267.GenericId<"Group">;
668
667
  ciphertext: string;
669
668
  updatedAt: number;
669
+ kind: "oidc_client_secret";
670
670
  }, {
671
671
  connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
672
672
  groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
673
673
  kind: convex_values1267.VUnion<"oidc_client_secret", [convex_values1267.VLiteral<"oidc_client_secret", "required">], "required", never>;
674
674
  ciphertext: convex_values1267.VString<string, "required">;
675
675
  updatedAt: convex_values1267.VFloat64<number, "required">;
676
- }, "required", "connectionId" | "kind" | "groupId" | "ciphertext" | "updatedAt">, {
676
+ }, "required", "connectionId" | "groupId" | "ciphertext" | "updatedAt" | "kind">, {
677
677
  connection_id: ["connectionId", "_creationTime"];
678
678
  connection_id_kind: ["connectionId", "kind", "_creationTime"];
679
679
  group_id: ["groupId", "_creationTime"];
@@ -685,8 +685,8 @@ declare const _default: convex_server93.SchemaDefinition<{
685
685
  extend?: any;
686
686
  lastRotatedAt?: number | undefined;
687
687
  connectionId: convex_values1267.GenericId<"GroupConnection">;
688
- groupId: convex_values1267.GenericId<"Group">;
689
688
  status: "draft" | "active" | "disabled";
689
+ groupId: convex_values1267.GenericId<"Group">;
690
690
  tokenHash: string;
691
691
  basePath: string;
692
692
  }, {
@@ -697,7 +697,7 @@ declare const _default: convex_server93.SchemaDefinition<{
697
697
  tokenHash: convex_values1267.VString<string, "required">;
698
698
  lastRotatedAt: convex_values1267.VFloat64<number | undefined, "optional">;
699
699
  extend: convex_values1267.VAny<any, "optional", string>;
700
- }, "required", "extend" | "connectionId" | `extend.${string}` | "groupId" | "status" | "tokenHash" | "basePath" | "lastRotatedAt">, {
700
+ }, "required", "extend" | `extend.${string}` | "connectionId" | "status" | "groupId" | "tokenHash" | "basePath" | "lastRotatedAt">, {
701
701
  group_connection_id: ["connectionId", "_creationTime"];
702
702
  group_id: ["groupId", "_creationTime"];
703
703
  token_hash: ["tokenHash", "_creationTime"];
@@ -726,7 +726,7 @@ declare const _default: convex_server93.SchemaDefinition<{
726
726
  lastProvisionedAt: convex_values1267.VFloat64<number | undefined, "optional">;
727
727
  active: convex_values1267.VBoolean<boolean | undefined, "optional">;
728
728
  raw: convex_values1267.VAny<any, "optional", string>;
729
- }, "required", "connectionId" | "externalId" | "groupId" | "userId" | "active" | "resourceType" | "mappedGroupId" | "lastProvisionedAt" | "raw" | `raw.${string}`>, {
729
+ }, "required", "userId" | "connectionId" | "externalId" | "groupId" | "active" | "resourceType" | "mappedGroupId" | "lastProvisionedAt" | "raw" | `raw.${string}`>, {
730
730
  group_connection_id: ["connectionId", "_creationTime"];
731
731
  group_id: ["groupId", "_creationTime"];
732
732
  group_connection_id_resource_type_external_id: ["connectionId", "resourceType", "externalId", "_creationTime"];
@@ -739,22 +739,22 @@ declare const _default: convex_server93.SchemaDefinition<{
739
739
  */
740
740
  GroupAuditEvent: convex_server93.TableDefinition<convex_values1267.VObject<{
741
741
  connectionId?: convex_values1267.GenericId<"GroupConnection"> | undefined;
742
- metadata?: any;
743
742
  actorId?: string | undefined;
744
743
  subjectId?: string | undefined;
745
744
  requestId?: string | undefined;
746
745
  ip?: string | undefined;
747
- groupId: convex_values1267.GenericId<"Group">;
746
+ metadata?: any;
748
747
  status: "success" | "failure";
748
+ groupId: convex_values1267.GenericId<"Group">;
749
+ actorType: "scim" | "user" | "system" | "api_key" | "webhook";
749
750
  eventType: string;
750
- actorType: "user" | "scim" | "system" | "api_key" | "webhook";
751
751
  subjectType: string;
752
752
  occurredAt: number;
753
753
  }, {
754
754
  connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection"> | undefined, "optional">;
755
755
  groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
756
756
  eventType: convex_values1267.VString<string, "required">;
757
- actorType: convex_values1267.VUnion<"user" | "scim" | "system" | "api_key" | "webhook", [convex_values1267.VLiteral<"user", "required">, convex_values1267.VLiteral<"system", "required">, convex_values1267.VLiteral<"scim", "required">, convex_values1267.VLiteral<"api_key", "required">, convex_values1267.VLiteral<"webhook", "required">], "required", never>;
757
+ actorType: convex_values1267.VUnion<"scim" | "user" | "system" | "api_key" | "webhook", [convex_values1267.VLiteral<"user", "required">, convex_values1267.VLiteral<"system", "required">, convex_values1267.VLiteral<"scim", "required">, convex_values1267.VLiteral<"api_key", "required">, convex_values1267.VLiteral<"webhook", "required">], "required", never>;
758
758
  actorId: convex_values1267.VString<string | undefined, "optional">;
759
759
  subjectType: convex_values1267.VString<string, "required">;
760
760
  subjectId: convex_values1267.VString<string | undefined, "optional">;
@@ -763,7 +763,7 @@ declare const _default: convex_server93.SchemaDefinition<{
763
763
  requestId: convex_values1267.VString<string | undefined, "optional">;
764
764
  ip: convex_values1267.VString<string | undefined, "optional">;
765
765
  metadata: convex_values1267.VAny<any, "optional", string>;
766
- }, "required", "connectionId" | "groupId" | "status" | "metadata" | `metadata.${string}` | "eventType" | "actorType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip">, {
766
+ }, "required", "connectionId" | "status" | "groupId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
767
767
  group_connection_id_occurred_at: ["connectionId", "occurredAt", "_creationTime"];
768
768
  group_id_occurred_at: ["groupId", "occurredAt", "_creationTime"];
769
769
  event_type_occurred_at: ["eventType", "occurredAt", "_creationTime"];
@@ -777,8 +777,8 @@ declare const _default: convex_server93.SchemaDefinition<{
777
777
  lastSuccessAt?: number | undefined;
778
778
  lastFailureAt?: number | undefined;
779
779
  connectionId: convex_values1267.GenericId<"GroupConnection">;
780
- groupId: convex_values1267.GenericId<"Group">;
781
780
  status: "active" | "disabled";
781
+ groupId: convex_values1267.GenericId<"Group">;
782
782
  url: string;
783
783
  secretHash: string;
784
784
  subscriptions: string[];
@@ -795,7 +795,7 @@ declare const _default: convex_server93.SchemaDefinition<{
795
795
  lastFailureAt: convex_values1267.VFloat64<number | undefined, "optional">;
796
796
  failureCount: convex_values1267.VFloat64<number, "required">;
797
797
  extend: convex_values1267.VAny<any, "optional", string>;
798
- }, "required", "extend" | "connectionId" | `extend.${string}` | "groupId" | "status" | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
798
+ }, "required", "extend" | `extend.${string}` | "connectionId" | "status" | "groupId" | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
799
799
  group_connection_id: ["connectionId", "_creationTime"];
800
800
  group_id: ["groupId", "_creationTime"];
801
801
  status: ["status", "_creationTime"];
@@ -848,6 +848,8 @@ declare const _default: convex_server93.SchemaDefinition<{
848
848
  */
849
849
  ApiKey: convex_server93.TableDefinition<convex_values1267.VObject<{
850
850
  lastUsedAt?: number | undefined;
851
+ expiresAt?: number | undefined;
852
+ metadata?: any;
851
853
  rateLimit?: {
852
854
  maxRequests: number;
853
855
  windowMs: number;
@@ -856,12 +858,10 @@ declare const _default: convex_server93.SchemaDefinition<{
856
858
  attemptsLeft: number;
857
859
  lastAttemptTime: number;
858
860
  } | undefined;
859
- expiresAt?: number | undefined;
860
- metadata?: any;
861
861
  name: string;
862
862
  userId: convex_values1267.GenericId<"User">;
863
- revoked: boolean;
864
863
  createdAt: number;
864
+ revoked: boolean;
865
865
  prefix: string;
866
866
  hashedKey: string;
867
867
  scopes: {
@@ -902,7 +902,7 @@ declare const _default: convex_server93.SchemaDefinition<{
902
902
  createdAt: convex_values1267.VFloat64<number, "required">; /** Soft-revoke flag. Revoked keys are kept for audit trail. */
903
903
  revoked: convex_values1267.VBoolean<boolean, "required">; /** Arbitrary app-specific metadata attached to the key. */
904
904
  metadata: convex_values1267.VAny<any, "optional", string>;
905
- }, "required", "name" | "userId" | "revoked" | "createdAt" | "lastUsedAt" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "expiresAt" | "metadata" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>, {
905
+ }, "required", "name" | "userId" | "createdAt" | "lastUsedAt" | "expiresAt" | "revoked" | "metadata" | `metadata.${string}` | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime">, {
906
906
  user_id: ["userId", "_creationTime"];
907
907
  hashed_key: ["hashedKey", "_creationTime"];
908
908
  }, {}, {}>;