@robelest/convex-auth 0.0.4-preview.35 → 0.0.4-preview.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (14) hide show
  1. package/dist/component/_generated/component.d.ts +6 -0
  2. package/dist/component/convex.config.d.ts +2 -2
  3. package/dist/component/convex.config.js +2 -0
  4. package/dist/component/migrations.js +36 -0
  5. package/dist/component/model.d.ts +144 -142
  6. package/dist/component/model.js +1 -0
  7. package/dist/component/modules.js +1 -0
  8. package/dist/component/schema.d.ts +303 -301
  9. package/dist/component/schema.js +1 -0
  10. package/dist/model.js +1 -0
  11. package/dist/server/mounts.d.ts +4 -4
  12. package/dist/server/runtime.d.ts +2 -2
  13. package/dist/server/validators.d.ts +21 -13
  14. package/package.json +2 -1
package/dist/component/schema.d.ts CHANGED
@@ -1,4 +1,4 @@
1
- import * as convex_values1267 from "convex/values";
1
+ import * as convex_values1279 from "convex/values";
2
2
  import * as convex_server93 from "convex/server";
3
3
 
4
4
  //#region src/component/schema.d.ts
@@ -14,27 +14,29 @@ declare const _default: convex_server93.SchemaDefinition<{
14
14
  * Authenticated users. A user may have multiple linked accounts
15
15
  * and multiple concurrent sessions.
16
16
  */
17
- User: convex_server93.TableDefinition<convex_values1267.VObject<{
17
+ User: convex_server93.TableDefinition<convex_values1279.VObject<{
18
18
  name?: string | undefined;
19
19
  email?: string | undefined;
20
- image?: string | undefined;
21
20
  phone?: string | undefined;
21
+ image?: string | undefined;
22
22
  emailVerificationTime?: number | undefined;
23
23
  phoneVerificationTime?: number | undefined;
24
24
  isAnonymous?: boolean | undefined;
25
- lastActiveGroup?: convex_values1267.GenericId<"Group"> | undefined;
25
+ lastActiveGroup?: convex_values1279.GenericId<"Group"> | undefined;
26
+ hasTotp?: boolean | undefined;
26
27
  extend?: any;
27
28
  }, {
28
- name: convex_values1267.VString<string | undefined, "optional">;
29
- image: convex_values1267.VString<string | undefined, "optional">;
30
- email: convex_values1267.VString<string | undefined, "optional">;
31
- emailVerificationTime: convex_values1267.VFloat64<number | undefined, "optional">;
32
- phone: convex_values1267.VString<string | undefined, "optional">;
33
- phoneVerificationTime: convex_values1267.VFloat64<number | undefined, "optional">;
34
- isAnonymous: convex_values1267.VBoolean<boolean | undefined, "optional">;
35
- lastActiveGroup: convex_values1267.VId<convex_values1267.GenericId<"Group"> | undefined, "optional">;
36
- extend: convex_values1267.VAny<any, "optional", string>;
37
- }, "required", "name" | "email" | "image" | "phone" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "extend" | `extend.${string}`>, {
29
+ name: convex_values1279.VString<string | undefined, "optional">;
30
+ image: convex_values1279.VString<string | undefined, "optional">;
31
+ email: convex_values1279.VString<string | undefined, "optional">;
32
+ emailVerificationTime: convex_values1279.VFloat64<number | undefined, "optional">;
33
+ phone: convex_values1279.VString<string | undefined, "optional">;
34
+ phoneVerificationTime: convex_values1279.VFloat64<number | undefined, "optional">;
35
+ isAnonymous: convex_values1279.VBoolean<boolean | undefined, "optional">;
36
+ lastActiveGroup: convex_values1279.VId<convex_values1279.GenericId<"Group"> | undefined, "optional">;
37
+ hasTotp: convex_values1279.VBoolean<boolean | undefined, "optional">;
38
+ extend: convex_values1279.VAny<any, "optional", string>;
39
+ }, "required", "name" | "email" | "phone" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | "lastActiveGroup" | "hasTotp" | "extend" | `extend.${string}`>, {
38
40
  email: ["email", "_creationTime"];
39
41
  email_verified: ["email", "emailVerificationTime", "_creationTime"];
40
42
  phone: ["phone", "_creationTime"];
@@ -51,24 +53,24 @@ declare const _default: convex_server93.SchemaDefinition<{
51
53
  * email-based account linking for SSO must stay scoped to the same
52
54
  * `connectionId` (see server/users.ts) to avoid cross-IdP takeover.
53
55
  */
54
- UserEmail: convex_server93.TableDefinition<convex_values1267.VObject<{
56
+ UserEmail: convex_server93.TableDefinition<convex_values1279.VObject<{
55
57
  verificationTime?: number | undefined;
56
- accountId?: convex_values1267.GenericId<"Account"> | undefined;
58
+ accountId?: convex_values1279.GenericId<"Account"> | undefined;
57
59
  provider?: string | undefined;
58
- connectionId?: convex_values1267.GenericId<"GroupConnection"> | undefined;
60
+ connectionId?: convex_values1279.GenericId<"GroupConnection"> | undefined;
59
61
  email: string;
60
- userId: convex_values1267.GenericId<"User">;
62
+ userId: convex_values1279.GenericId<"User">;
61
63
  isPrimary: boolean;
62
64
  source: "password" | "oauth" | "oidc" | "saml" | "scim";
63
65
  }, {
64
- userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">;
65
- email: convex_values1267.VString<string, "required">;
66
- verificationTime: convex_values1267.VFloat64<number | undefined, "optional">;
67
- isPrimary: convex_values1267.VBoolean<boolean, "required">;
68
- source: convex_values1267.VUnion<"password" | "oauth" | "oidc" | "saml" | "scim", [convex_values1267.VLiteral<"password", "required">, convex_values1267.VLiteral<"oauth", "required">, convex_values1267.VLiteral<"oidc", "required">, convex_values1267.VLiteral<"saml", "required">, convex_values1267.VLiteral<"scim", "required">], "required", never>;
69
- accountId: convex_values1267.VId<convex_values1267.GenericId<"Account"> | undefined, "optional">;
70
- provider: convex_values1267.VString<string | undefined, "optional">;
71
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection"> | undefined, "optional">;
66
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User">, "required">;
67
+ email: convex_values1279.VString<string, "required">;
68
+ verificationTime: convex_values1279.VFloat64<number | undefined, "optional">;
69
+ isPrimary: convex_values1279.VBoolean<boolean, "required">;
70
+ source: convex_values1279.VUnion<"password" | "oauth" | "oidc" | "saml" | "scim", [convex_values1279.VLiteral<"password", "required">, convex_values1279.VLiteral<"oauth", "required">, convex_values1279.VLiteral<"oidc", "required">, convex_values1279.VLiteral<"saml", "required">, convex_values1279.VLiteral<"scim", "required">], "required", never>;
71
+ accountId: convex_values1279.VId<convex_values1279.GenericId<"Account"> | undefined, "optional">;
72
+ provider: convex_values1279.VString<string | undefined, "optional">;
73
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection"> | undefined, "optional">;
72
74
  }, "required", "email" | "userId" | "verificationTime" | "isPrimary" | "source" | "accountId" | "provider" | "connectionId">, {
73
75
  email: ["email", "_creationTime"];
74
76
  email_verified: ["email", "verificationTime", "_creationTime"];
@@ -81,12 +83,12 @@ declare const _default: convex_server93.SchemaDefinition<{
81
83
  * across different devices or browsers. Sessions expire after a
82
84
  * configurable duration.
83
85
  */
84
- Session: convex_server93.TableDefinition<convex_values1267.VObject<{
85
- userId: convex_values1267.GenericId<"User">;
86
+ Session: convex_server93.TableDefinition<convex_values1279.VObject<{
87
+ userId: convex_values1279.GenericId<"User">;
86
88
  expirationTime: number;
87
89
  }, {
88
- userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">;
89
- expirationTime: convex_values1267.VFloat64<number, "required">;
90
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User">, "required">;
91
+ expirationTime: convex_values1279.VFloat64<number, "required">;
90
92
  }, "required", "userId" | "expirationTime">, {
91
93
  user_id: ["userId", "_creationTime"];
92
94
  }, {}, {}>;
@@ -95,23 +97,23 @@ declare const _default: convex_server93.SchemaDefinition<{
95
97
  * authentication provider (e.g. Google OAuth, email/password).
96
98
  * A user can have multiple accounts linked.
97
99
  */
98
- Account: convex_server93.TableDefinition<convex_values1267.VObject<{
99
- emailVerified?: string | undefined;
100
+ Account: convex_server93.TableDefinition<convex_values1279.VObject<{
100
101
  extend?: any;
101
102
  secret?: string | undefined;
103
+ emailVerified?: string | undefined;
102
104
  phoneVerified?: string | undefined;
103
- userId: convex_values1267.GenericId<"User">;
105
+ userId: convex_values1279.GenericId<"User">;
104
106
  provider: string;
105
107
  providerAccountId: string;
106
108
  }, {
107
- userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">;
108
- provider: convex_values1267.VString<string, "required">;
109
- providerAccountId: convex_values1267.VString<string, "required">;
110
- secret: convex_values1267.VString<string | undefined, "optional">;
111
- emailVerified: convex_values1267.VString<string | undefined, "optional">;
112
- phoneVerified: convex_values1267.VString<string | undefined, "optional">;
113
- extend: convex_values1267.VAny<any, "optional", string>;
114
- }, "required", "emailVerified" | "extend" | `extend.${string}` | "userId" | "provider" | "providerAccountId" | "secret" | "phoneVerified">, {
109
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User">, "required">;
110
+ provider: convex_values1279.VString<string, "required">;
111
+ providerAccountId: convex_values1279.VString<string, "required">;
112
+ secret: convex_values1279.VString<string | undefined, "optional">;
113
+ emailVerified: convex_values1279.VString<string | undefined, "optional">;
114
+ phoneVerified: convex_values1279.VString<string | undefined, "optional">;
115
+ extend: convex_values1279.VAny<any, "optional", string>;
116
+ }, "required", "extend" | `extend.${string}` | "userId" | "provider" | "providerAccountId" | "secret" | "emailVerified" | "phoneVerified">, {
115
117
  user_id_provider: ["userId", "provider", "_creationTime"];
116
118
  provider_account_id: ["provider", "providerAccountId", "_creationTime"];
117
119
  }, {}, {}>;
@@ -123,16 +125,16 @@ declare const _default: convex_server93.SchemaDefinition<{
123
125
  * been used yet. A 10-second reuse window allows for concurrent requests.
124
126
  * Any invalid use of a token invalidates the entire chain.
125
127
  */
126
- RefreshToken: convex_server93.TableDefinition<convex_values1267.VObject<{
128
+ RefreshToken: convex_server93.TableDefinition<convex_values1279.VObject<{
127
129
  firstUsedTime?: number | undefined;
128
- parentRefreshTokenId?: convex_values1267.GenericId<"RefreshToken"> | undefined;
130
+ parentRefreshTokenId?: convex_values1279.GenericId<"RefreshToken"> | undefined;
129
131
  expirationTime: number;
130
- sessionId: convex_values1267.GenericId<"Session">;
132
+ sessionId: convex_values1279.GenericId<"Session">;
131
133
  }, {
132
- sessionId: convex_values1267.VId<convex_values1267.GenericId<"Session">, "required">;
133
- expirationTime: convex_values1267.VFloat64<number, "required">;
134
- firstUsedTime: convex_values1267.VFloat64<number | undefined, "optional">;
135
- parentRefreshTokenId: convex_values1267.VId<convex_values1267.GenericId<"RefreshToken"> | undefined, "optional">;
134
+ sessionId: convex_values1279.VId<convex_values1279.GenericId<"Session">, "required">;
135
+ expirationTime: convex_values1279.VFloat64<number, "required">;
136
+ firstUsedTime: convex_values1279.VFloat64<number | undefined, "optional">;
137
+ parentRefreshTokenId: convex_values1279.VId<convex_values1279.GenericId<"RefreshToken"> | undefined, "optional">;
136
138
  }, "required", "expirationTime" | "sessionId" | "firstUsedTime" | "parentRefreshTokenId">, {
137
139
  session_id: ["sessionId", "_creationTime"];
138
140
  session_id_first_used: ["sessionId", "firstUsedTime", "_creationTime"];
@@ -141,23 +143,23 @@ declare const _default: convex_server93.SchemaDefinition<{
141
143
  /**
142
144
  * Verification codes for OTP tokens, magic link tokens, and OAuth codes.
143
145
  */
144
- VerificationCode: convex_server93.TableDefinition<convex_values1267.VObject<{
146
+ VerificationCode: convex_server93.TableDefinition<convex_values1279.VObject<{
145
147
  emailVerified?: string | undefined;
146
148
  phoneVerified?: string | undefined;
147
149
  verifier?: string | undefined;
148
- accountId: convex_values1267.GenericId<"Account">;
150
+ accountId: convex_values1279.GenericId<"Account">;
149
151
  provider: string;
150
152
  expirationTime: number;
151
153
  code: string;
152
154
  }, {
153
- accountId: convex_values1267.VId<convex_values1267.GenericId<"Account">, "required">;
154
- provider: convex_values1267.VString<string, "required">;
155
- code: convex_values1267.VString<string, "required">;
156
- expirationTime: convex_values1267.VFloat64<number, "required">;
157
- verifier: convex_values1267.VString<string | undefined, "optional">;
158
- emailVerified: convex_values1267.VString<string | undefined, "optional">;
159
- phoneVerified: convex_values1267.VString<string | undefined, "optional">;
160
- }, "required", "emailVerified" | "accountId" | "provider" | "expirationTime" | "phoneVerified" | "code" | "verifier">, {
155
+ accountId: convex_values1279.VId<convex_values1279.GenericId<"Account">, "required">;
156
+ provider: convex_values1279.VString<string, "required">;
157
+ code: convex_values1279.VString<string, "required">;
158
+ expirationTime: convex_values1279.VFloat64<number, "required">;
159
+ verifier: convex_values1279.VString<string | undefined, "optional">;
160
+ emailVerified: convex_values1279.VString<string | undefined, "optional">;
161
+ phoneVerified: convex_values1279.VString<string | undefined, "optional">;
162
+ }, "required", "accountId" | "provider" | "expirationTime" | "emailVerified" | "phoneVerified" | "code" | "verifier">, {
161
163
  account_id: ["accountId", "_creationTime"];
162
164
  code: ["code", "_creationTime"];
163
165
  }, {}, {}>;
@@ -165,14 +167,14 @@ declare const _default: convex_server93.SchemaDefinition<{
165
167
  * PKCE verifiers for OAuth flows. Stores the cryptographic verifier
166
168
  * used to prove the authorization request originated from this client.
167
169
  */
168
- AuthVerifier: convex_server93.TableDefinition<convex_values1267.VObject<{
170
+ AuthVerifier: convex_server93.TableDefinition<convex_values1279.VObject<{
169
171
  expirationTime?: number | undefined;
170
- sessionId?: convex_values1267.GenericId<"Session"> | undefined;
172
+ sessionId?: convex_values1279.GenericId<"Session"> | undefined;
171
173
  signature?: string | undefined;
172
174
  }, {
173
- sessionId: convex_values1267.VId<convex_values1267.GenericId<"Session"> | undefined, "optional">;
174
- signature: convex_values1267.VString<string | undefined, "optional">;
175
- expirationTime: convex_values1267.VFloat64<number | undefined, "optional">;
175
+ sessionId: convex_values1279.VId<convex_values1279.GenericId<"Session"> | undefined, "optional">;
176
+ signature: convex_values1279.VString<string | undefined, "optional">;
177
+ expirationTime: convex_values1279.VFloat64<number | undefined, "optional">;
176
178
  }, "required", "expirationTime" | "sessionId" | "signature">, {
177
179
  signature: ["signature", "_creationTime"];
178
180
  }, {}, {}>;
@@ -181,11 +183,11 @@ declare const _default: convex_server93.SchemaDefinition<{
181
183
  * registered authenticator (Touch ID, Face ID, security key, etc.).
182
184
  * A user can have multiple passkeys across different devices.
183
185
  */
184
- Passkey: convex_server93.TableDefinition<convex_values1267.VObject<{
186
+ Passkey: convex_server93.TableDefinition<convex_values1279.VObject<{
185
187
  name?: string | undefined;
186
188
  transports?: string[] | undefined;
187
189
  lastUsedAt?: number | undefined;
188
- userId: convex_values1267.GenericId<"User">;
190
+ userId: convex_values1279.GenericId<"User">;
189
191
  credentialId: string;
190
192
  publicKey: ArrayBuffer;
191
193
  algorithm: number;
@@ -194,17 +196,17 @@ declare const _default: convex_server93.SchemaDefinition<{
194
196
  backedUp: boolean;
195
197
  createdAt: number;
196
198
  }, {
197
- userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">; /** Base64url-encoded credential ID from the authenticator. */
198
- credentialId: convex_values1267.VString<string, "required">; /** Public key bytes (SEC1 uncompressed for EC, SPKI for RSA). */
199
- publicKey: convex_values1267.VBytes<ArrayBuffer, "required">; /** COSE algorithm identifier (-7 for ES256, -257 for RS256, -8 for EdDSA). */
200
- algorithm: convex_values1267.VFloat64<number, "required">; /** Signature counter for clone detection. Many authenticators return 0. */
201
- counter: convex_values1267.VFloat64<number, "required">; /** Authenticator transport hints (e.g. "internal", "hybrid", "usb", "ble", "nfc"). */
202
- transports: convex_values1267.VArray<string[] | undefined, convex_values1267.VString<string, "required">, "optional">; /** Whether this is a single-device or multi-device (synced) credential. */
203
- deviceType: convex_values1267.VString<string, "required">; /** Whether the credential is backed up (synced passkey). */
204
- backedUp: convex_values1267.VBoolean<boolean, "required">; /** User-assigned friendly name (e.g. "MacBook Touch ID"). */
205
- name: convex_values1267.VString<string | undefined, "optional">;
206
- createdAt: convex_values1267.VFloat64<number, "required">;
207
- lastUsedAt: convex_values1267.VFloat64<number | undefined, "optional">;
199
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User">, "required">; /** Base64url-encoded credential ID from the authenticator. */
200
+ credentialId: convex_values1279.VString<string, "required">; /** Public key bytes (SEC1 uncompressed for EC, SPKI for RSA). */
201
+ publicKey: convex_values1279.VBytes<ArrayBuffer, "required">; /** COSE algorithm identifier (-7 for ES256, -257 for RS256, -8 for EdDSA). */
202
+ algorithm: convex_values1279.VFloat64<number, "required">; /** Signature counter for clone detection. Many authenticators return 0. */
203
+ counter: convex_values1279.VFloat64<number, "required">; /** Authenticator transport hints (e.g. "internal", "hybrid", "usb", "ble", "nfc"). */
204
+ transports: convex_values1279.VArray<string[] | undefined, convex_values1279.VString<string, "required">, "optional">; /** Whether this is a single-device or multi-device (synced) credential. */
205
+ deviceType: convex_values1279.VString<string, "required">; /** Whether the credential is backed up (synced passkey). */
206
+ backedUp: convex_values1279.VBoolean<boolean, "required">; /** User-assigned friendly name (e.g. "MacBook Touch ID"). */
207
+ name: convex_values1279.VString<string | undefined, "optional">;
208
+ createdAt: convex_values1279.VFloat64<number, "required">;
209
+ lastUsedAt: convex_values1279.VFloat64<number | undefined, "optional">;
208
210
  }, "required", "name" | "userId" | "credentialId" | "publicKey" | "algorithm" | "counter" | "transports" | "deviceType" | "backedUp" | "createdAt" | "lastUsedAt">, {
209
211
  user_id: ["userId", "_creationTime"];
210
212
  credential_id: ["credentialId", "_creationTime"];
@@ -218,24 +220,24 @@ declare const _default: convex_server93.SchemaDefinition<{
218
220
  * by successfully entering a code from their authenticator app.
219
221
  * Unverified enrollments are in-progress setup that can be discarded.
220
222
  */
221
- TotpFactor: convex_server93.TableDefinition<convex_values1267.VObject<{
223
+ TotpFactor: convex_server93.TableDefinition<convex_values1279.VObject<{
222
224
  name?: string | undefined;
223
225
  lastUsedAt?: number | undefined;
224
- userId: convex_values1267.GenericId<"User">;
226
+ userId: convex_values1279.GenericId<"User">;
225
227
  secret: ArrayBuffer;
226
228
  createdAt: number;
227
229
  digits: number;
228
230
  period: number;
229
231
  verified: boolean;
230
232
  }, {
231
- userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">; /** Raw TOTP secret key bytes. */
232
- secret: convex_values1267.VBytes<ArrayBuffer, "required">; /** Number of digits in each code (typically 6). */
233
- digits: convex_values1267.VFloat64<number, "required">; /** Time period in seconds for code rotation (typically 30). */
234
- period: convex_values1267.VFloat64<number, "required">; /** Whether setup has been confirmed with a valid code. */
235
- verified: convex_values1267.VBoolean<boolean, "required">; /** User-assigned friendly name (e.g. "Google Authenticator"). */
236
- name: convex_values1267.VString<string | undefined, "optional">;
237
- createdAt: convex_values1267.VFloat64<number, "required">;
238
- lastUsedAt: convex_values1267.VFloat64<number | undefined, "optional">;
233
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User">, "required">; /** Raw TOTP secret key bytes. */
234
+ secret: convex_values1279.VBytes<ArrayBuffer, "required">; /** Number of digits in each code (typically 6). */
235
+ digits: convex_values1279.VFloat64<number, "required">; /** Time period in seconds for code rotation (typically 30). */
236
+ period: convex_values1279.VFloat64<number, "required">; /** Whether setup has been confirmed with a valid code. */
237
+ verified: convex_values1279.VBoolean<boolean, "required">; /** User-assigned friendly name (e.g. "Google Authenticator"). */
238
+ name: convex_values1279.VString<string | undefined, "optional">;
239
+ createdAt: convex_values1279.VFloat64<number, "required">;
240
+ lastUsedAt: convex_values1279.VFloat64<number | undefined, "optional">;
239
241
  }, "required", "name" | "userId" | "secret" | "createdAt" | "lastUsedAt" | "digits" | "period" | "verified">, {
240
242
  user_id: ["userId", "_creationTime"];
241
243
  user_id_verified: ["userId", "verified", "_creationTime"];
@@ -245,9 +247,9 @@ declare const _default: convex_server93.SchemaDefinition<{
245
247
  * device auth session — the device polls with `deviceCode` while the
246
248
  * user authorizes via `userCode` on a secondary device.
247
249
  */
248
- DeviceCode: convex_server93.TableDefinition<convex_values1267.VObject<{
249
- userId?: convex_values1267.GenericId<"User"> | undefined;
250
- sessionId?: convex_values1267.GenericId<"Session"> | undefined;
250
+ DeviceCode: convex_server93.TableDefinition<convex_values1279.VObject<{
251
+ userId?: convex_values1279.GenericId<"User"> | undefined;
252
+ sessionId?: convex_values1279.GenericId<"Session"> | undefined;
251
253
  lastPolledAt?: number | undefined;
252
254
  status: "pending" | "authorized" | "denied";
253
255
  deviceCodeHash: string;
@@ -255,14 +257,14 @@ declare const _default: convex_server93.SchemaDefinition<{
255
257
  expiresAt: number;
256
258
  interval: number;
257
259
  }, {
258
- /** High-entropy code used by the device for polling. Stored as SHA-256 hash. */deviceCodeHash: convex_values1267.VString<string, "required">; /** Short human-readable code the user enters (e.g. "WDJB-MJHT"). */
259
- userCode: convex_values1267.VString<string, "required">; /** Expiration timestamp (ms since epoch). */
260
- expiresAt: convex_values1267.VFloat64<number, "required">; /** Minimum polling interval in seconds. */
261
- interval: convex_values1267.VFloat64<number, "required">; /** Current status of this device authorization session. */
262
- status: convex_values1267.VUnion<"pending" | "authorized" | "denied", [convex_values1267.VLiteral<"pending", "required">, convex_values1267.VLiteral<"authorized", "required">, convex_values1267.VLiteral<"denied", "required">], "required", never>; /** Set when the user authorizes — links to the authorizing user. */
263
- userId: convex_values1267.VId<convex_values1267.GenericId<"User"> | undefined, "optional">; /** Set when the user authorizes — the session created for the device. */
264
- sessionId: convex_values1267.VId<convex_values1267.GenericId<"Session"> | undefined, "optional">; /** Timestamp of the last poll request (for slow_down enforcement). */
265
- lastPolledAt: convex_values1267.VFloat64<number | undefined, "optional">;
260
+ /** High-entropy code used by the device for polling. Stored as SHA-256 hash. */deviceCodeHash: convex_values1279.VString<string, "required">; /** Short human-readable code the user enters (e.g. "WDJB-MJHT"). */
261
+ userCode: convex_values1279.VString<string, "required">; /** Expiration timestamp (ms since epoch). */
262
+ expiresAt: convex_values1279.VFloat64<number, "required">; /** Minimum polling interval in seconds. */
263
+ interval: convex_values1279.VFloat64<number, "required">; /** Current status of this device authorization session. */
264
+ status: convex_values1279.VUnion<"pending" | "authorized" | "denied", [convex_values1279.VLiteral<"pending", "required">, convex_values1279.VLiteral<"authorized", "required">, convex_values1279.VLiteral<"denied", "required">], "required", never>; /** Set when the user authorizes — links to the authorizing user. */
265
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User"> | undefined, "optional">; /** Set when the user authorizes — the session created for the device. */
266
+ sessionId: convex_values1279.VId<convex_values1279.GenericId<"Session"> | undefined, "optional">; /** Timestamp of the last poll request (for slow_down enforcement). */
267
+ lastPolledAt: convex_values1279.VFloat64<number | undefined, "optional">;
266
268
  }, "required", "userId" | "sessionId" | "status" | "deviceCodeHash" | "userCode" | "expiresAt" | "interval" | "lastPolledAt">, {
267
269
  device_code_hash: ["deviceCodeHash", "_creationTime"];
268
270
  user_code_status: ["userCode", "status", "_creationTime"];
@@ -270,14 +272,14 @@ declare const _default: convex_server93.SchemaDefinition<{
270
272
  /**
271
273
  * Rate limit tracking for OTP and password sign-in attempts.
272
274
  */
273
- RateLimit: convex_server93.TableDefinition<convex_values1267.VObject<{
275
+ RateLimit: convex_server93.TableDefinition<convex_values1279.VObject<{
274
276
  identifier: string;
275
277
  last_attempt_time: number;
276
278
  attempts_left: number;
277
279
  }, {
278
- identifier: convex_values1267.VString<string, "required">;
279
- last_attempt_time: convex_values1267.VFloat64<number, "required">;
280
- attempts_left: convex_values1267.VFloat64<number, "required">;
280
+ identifier: convex_values1279.VString<string, "required">;
281
+ last_attempt_time: convex_values1279.VFloat64<number, "required">;
282
+ attempts_left: convex_values1279.VFloat64<number, "required">;
281
283
  }, "required", "identifier" | "last_attempt_time" | "attempts_left">, {
282
284
  by_identifier: ["identifier", "_creationTime"];
283
285
  }, {}, {}>;
@@ -286,12 +288,12 @@ declare const _default: convex_server93.SchemaDefinition<{
286
288
  * Groups can nest arbitrarily deep via `parentGroupId` for modeling
287
289
  * organizations, teams, departments, or any tree structure.
288
290
  */
289
- Group: convex_server93.TableDefinition<convex_values1267.VObject<{
291
+ Group: convex_server93.TableDefinition<convex_values1279.VObject<{
290
292
  extend?: any;
291
293
  type?: string | undefined;
292
294
  slug?: string | undefined;
293
- parentGroupId?: convex_values1267.GenericId<"Group"> | undefined;
294
- rootGroupId?: convex_values1267.GenericId<"Group"> | undefined;
295
+ parentGroupId?: convex_values1279.GenericId<"Group"> | undefined;
296
+ rootGroupId?: convex_values1279.GenericId<"Group"> | undefined;
295
297
  isRoot?: boolean | undefined;
296
298
  tags?: {
297
299
  key: string;
@@ -338,23 +340,23 @@ declare const _default: convex_server93.SchemaDefinition<{
338
340
  } | undefined;
339
341
  name: string;
340
342
  }, {
341
- name: convex_values1267.VString<string, "required">;
342
- slug: convex_values1267.VString<string | undefined, "optional">;
343
- type: convex_values1267.VString<string | undefined, "optional">;
344
- parentGroupId: convex_values1267.VId<convex_values1267.GenericId<"Group"> | undefined, "optional">; /** Denormalized root group ID. Self-referencing for root groups. */
345
- rootGroupId: convex_values1267.VId<convex_values1267.GenericId<"Group"> | undefined, "optional">; /** Denormalized flag: `true` when `parentGroupId` is absent. */
346
- isRoot: convex_values1267.VBoolean<boolean | undefined, "optional">; /** Faceted classification tags. Normalized at write time (trimmed, lowercased). */
347
- tags: convex_values1267.VArray<{
343
+ name: convex_values1279.VString<string, "required">;
344
+ slug: convex_values1279.VString<string | undefined, "optional">;
345
+ type: convex_values1279.VString<string | undefined, "optional">;
346
+ parentGroupId: convex_values1279.VId<convex_values1279.GenericId<"Group"> | undefined, "optional">; /** Denormalized root group ID. Self-referencing for root groups. */
347
+ rootGroupId: convex_values1279.VId<convex_values1279.GenericId<"Group"> | undefined, "optional">; /** Denormalized flag: `true` when `parentGroupId` is absent. */
348
+ isRoot: convex_values1279.VBoolean<boolean | undefined, "optional">; /** Faceted classification tags. Normalized at write time (trimmed, lowercased). */
349
+ tags: convex_values1279.VArray<{
348
350
  key: string;
349
351
  value: string;
350
- }[] | undefined, convex_values1267.VObject<{
352
+ }[] | undefined, convex_values1279.VObject<{
351
353
  key: string;
352
354
  value: string;
353
355
  }, {
354
- key: convex_values1267.VString<string, "required">;
355
- value: convex_values1267.VString<string, "required">;
356
+ key: convex_values1279.VString<string, "required">;
357
+ value: convex_values1279.VString<string, "required">;
356
358
  }, "required", "key" | "value">, "optional">;
357
- policy: convex_values1267.VObject<{
359
+ policy: convex_values1279.VObject<{
358
360
  extend?: any;
359
361
  version: 1;
360
362
  identity: {
@@ -393,22 +395,22 @@ declare const _default: convex_server93.SchemaDefinition<{
393
395
  };
394
396
  };
395
397
  } | undefined, {
396
- version: convex_values1267.VLiteral<1, "required">;
397
- identity: convex_values1267.VObject<{
398
+ version: convex_values1279.VLiteral<1, "required">;
399
+ identity: convex_values1279.VObject<{
398
400
  accountLinking: {
399
401
  oidc: "verifiedEmail" | "none" | "sameConnection";
400
402
  saml: "verifiedEmail" | "none" | "sameConnection";
401
403
  };
402
404
  }, {
403
- accountLinking: convex_values1267.VObject<{
405
+ accountLinking: convex_values1279.VObject<{
404
406
  oidc: "verifiedEmail" | "none" | "sameConnection";
405
407
  saml: "verifiedEmail" | "none" | "sameConnection";
406
408
  }, {
407
- oidc: convex_values1267.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values1267.VLiteral<"verifiedEmail", "required">, convex_values1267.VLiteral<"none", "required">, convex_values1267.VLiteral<"sameConnection", "required">], "required", never>;
408
- saml: convex_values1267.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values1267.VLiteral<"verifiedEmail", "required">, convex_values1267.VLiteral<"none", "required">, convex_values1267.VLiteral<"sameConnection", "required">], "required", never>;
409
+ oidc: convex_values1279.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values1279.VLiteral<"verifiedEmail", "required">, convex_values1279.VLiteral<"none", "required">, convex_values1279.VLiteral<"sameConnection", "required">], "required", never>;
410
+ saml: convex_values1279.VUnion<"verifiedEmail" | "none" | "sameConnection", [convex_values1279.VLiteral<"verifiedEmail", "required">, convex_values1279.VLiteral<"none", "required">, convex_values1279.VLiteral<"sameConnection", "required">], "required", never>;
409
411
  }, "required", "oidc" | "saml">;
410
412
  }, "required", "accountLinking" | "accountLinking.oidc" | "accountLinking.saml">;
411
- provisioning: convex_values1267.VObject<{
413
+ provisioning: convex_values1279.VObject<{
412
414
  user: {
413
415
  createOnSignIn: boolean;
414
416
  updateProfileOnLogin: "never" | "missing" | "always";
@@ -437,58 +439,58 @@ declare const _default: convex_server93.SchemaDefinition<{
437
439
  mode: "map" | "ignore";
438
440
  };
439
441
  }, {
440
- user: convex_values1267.VObject<{
442
+ user: convex_values1279.VObject<{
441
443
  createOnSignIn: boolean;
442
444
  updateProfileOnLogin: "never" | "missing" | "always";
443
445
  updateProfileFromScim: "never" | "missing" | "always";
444
446
  authority: "scim" | "app" | "sso";
445
447
  }, {
446
- createOnSignIn: convex_values1267.VBoolean<boolean, "required">;
447
- updateProfileOnLogin: convex_values1267.VUnion<"never" | "missing" | "always", [convex_values1267.VLiteral<"never", "required">, convex_values1267.VLiteral<"missing", "required">, convex_values1267.VLiteral<"always", "required">], "required", never>;
448
- updateProfileFromScim: convex_values1267.VUnion<"never" | "missing" | "always", [convex_values1267.VLiteral<"never", "required">, convex_values1267.VLiteral<"missing", "required">, convex_values1267.VLiteral<"always", "required">], "required", never>;
449
- authority: convex_values1267.VUnion<"scim" | "app" | "sso", [convex_values1267.VLiteral<"app", "required">, convex_values1267.VLiteral<"sso", "required">, convex_values1267.VLiteral<"scim", "required">], "required", never>;
448
+ createOnSignIn: convex_values1279.VBoolean<boolean, "required">;
449
+ updateProfileOnLogin: convex_values1279.VUnion<"never" | "missing" | "always", [convex_values1279.VLiteral<"never", "required">, convex_values1279.VLiteral<"missing", "required">, convex_values1279.VLiteral<"always", "required">], "required", never>;
450
+ updateProfileFromScim: convex_values1279.VUnion<"never" | "missing" | "always", [convex_values1279.VLiteral<"never", "required">, convex_values1279.VLiteral<"missing", "required">, convex_values1279.VLiteral<"always", "required">], "required", never>;
451
+ authority: convex_values1279.VUnion<"scim" | "app" | "sso", [convex_values1279.VLiteral<"app", "required">, convex_values1279.VLiteral<"sso", "required">, convex_values1279.VLiteral<"scim", "required">], "required", never>;
450
452
  }, "required", "createOnSignIn" | "updateProfileOnLogin" | "updateProfileFromScim" | "authority">;
451
- scimReuse: convex_values1267.VObject<{
453
+ scimReuse: convex_values1279.VObject<{
452
454
  user: "none" | "externalId";
453
455
  }, {
454
- user: convex_values1267.VUnion<"none" | "externalId", [convex_values1267.VLiteral<"externalId", "required">, convex_values1267.VLiteral<"none", "required">], "required", never>;
456
+ user: convex_values1279.VUnion<"none" | "externalId", [convex_values1279.VLiteral<"externalId", "required">, convex_values1279.VLiteral<"none", "required">], "required", never>;
455
457
  }, "required", "user">;
456
- jit: convex_values1267.VObject<{
458
+ jit: convex_values1279.VObject<{
457
459
  defaultRole?: string | undefined;
458
460
  defaultRoleIds?: string[] | undefined;
459
461
  mode: "off" | "createUser" | "createUserAndMembership";
460
462
  }, {
461
- mode: convex_values1267.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values1267.VLiteral<"off", "required">, convex_values1267.VLiteral<"createUser", "required">, convex_values1267.VLiteral<"createUserAndMembership", "required">], "required", never>;
462
- defaultRole: convex_values1267.VString<string | undefined, "optional">;
463
- defaultRoleIds: convex_values1267.VArray<string[] | undefined, convex_values1267.VString<string, "required">, "optional">;
463
+ mode: convex_values1279.VUnion<"off" | "createUser" | "createUserAndMembership", [convex_values1279.VLiteral<"off", "required">, convex_values1279.VLiteral<"createUser", "required">, convex_values1279.VLiteral<"createUserAndMembership", "required">], "required", never>;
464
+ defaultRole: convex_values1279.VString<string | undefined, "optional">;
465
+ defaultRoleIds: convex_values1279.VArray<string[] | undefined, convex_values1279.VString<string, "required">, "optional">;
464
466
  }, "required", "mode" | "defaultRole" | "defaultRoleIds">;
465
- deprovision: convex_values1267.VObject<{
467
+ deprovision: convex_values1279.VObject<{
466
468
  mode: "soft" | "hard";
467
469
  }, {
468
- mode: convex_values1267.VUnion<"soft" | "hard", [convex_values1267.VLiteral<"soft", "required">, convex_values1267.VLiteral<"hard", "required">], "required", never>;
470
+ mode: convex_values1279.VUnion<"soft" | "hard", [convex_values1279.VLiteral<"soft", "required">, convex_values1279.VLiteral<"hard", "required">], "required", never>;
469
471
  }, "required", "mode">;
470
- groups: convex_values1267.VObject<{
472
+ groups: convex_values1279.VObject<{
471
473
  mapping?: Record<string, string[]> | undefined;
472
474
  source: "protocol";
473
475
  mode: "ignore" | "sync";
474
476
  }, {
475
- mode: convex_values1267.VUnion<"ignore" | "sync", [convex_values1267.VLiteral<"ignore", "required">, convex_values1267.VLiteral<"sync", "required">], "required", never>;
476
- source: convex_values1267.VLiteral<"protocol", "required">;
477
- mapping: convex_values1267.VRecord<Record<string, string[]> | undefined, convex_values1267.VString<string, "required">, convex_values1267.VArray<string[], convex_values1267.VString<string, "required">, "required">, "optional", string>;
477
+ mode: convex_values1279.VUnion<"ignore" | "sync", [convex_values1279.VLiteral<"ignore", "required">, convex_values1279.VLiteral<"sync", "required">], "required", never>;
478
+ source: convex_values1279.VLiteral<"protocol", "required">;
479
+ mapping: convex_values1279.VRecord<Record<string, string[]> | undefined, convex_values1279.VString<string, "required">, convex_values1279.VArray<string[], convex_values1279.VString<string, "required">, "required">, "optional", string>;
478
480
  }, "required", "source" | "mode" | "mapping" | `mapping.${string}`>;
479
- roles: convex_values1267.VObject<{
481
+ roles: convex_values1279.VObject<{
480
482
  mapping?: Record<string, string[]> | undefined;
481
483
  source: "protocol";
482
484
  mode: "map" | "ignore";
483
485
  }, {
484
- mode: convex_values1267.VUnion<"map" | "ignore", [convex_values1267.VLiteral<"ignore", "required">, convex_values1267.VLiteral<"map", "required">], "required", never>;
485
- source: convex_values1267.VLiteral<"protocol", "required">;
486
- mapping: convex_values1267.VRecord<Record<string, string[]> | undefined, convex_values1267.VString<string, "required">, convex_values1267.VArray<string[], convex_values1267.VString<string, "required">, "required">, "optional", string>;
486
+ mode: convex_values1279.VUnion<"map" | "ignore", [convex_values1279.VLiteral<"ignore", "required">, convex_values1279.VLiteral<"map", "required">], "required", never>;
487
+ source: convex_values1279.VLiteral<"protocol", "required">;
488
+ mapping: convex_values1279.VRecord<Record<string, string[]> | undefined, convex_values1279.VString<string, "required">, convex_values1279.VArray<string[], convex_values1279.VString<string, "required">, "required">, "optional", string>;
487
489
  }, "required", "source" | "mode" | "mapping" | `mapping.${string}`>;
488
490
  }, "required", "user" | "scimReuse" | "jit" | "deprovision" | "groups" | "roles" | "user.createOnSignIn" | "user.updateProfileOnLogin" | "user.updateProfileFromScim" | "user.authority" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode" | "groups.source" | "groups.mode" | "groups.mapping" | `groups.mapping.${string}` | "roles.source" | "roles.mode" | "roles.mapping" | `roles.mapping.${string}`>;
489
- extend: convex_values1267.VAny<any, "optional", string>;
491
+ extend: convex_values1279.VAny<any, "optional", string>;
490
492
  }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.user" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.groups" | "provisioning.roles" | "provisioning.user.createOnSignIn" | "provisioning.user.updateProfileOnLogin" | "provisioning.user.updateProfileFromScim" | "provisioning.user.authority" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode" | "provisioning.groups.source" | "provisioning.groups.mode" | "provisioning.groups.mapping" | `provisioning.groups.mapping.${string}` | "provisioning.roles.source" | "provisioning.roles.mode" | "provisioning.roles.mapping" | `provisioning.roles.mapping.${string}`>;
491
- extend: convex_values1267.VAny<any, "optional", string>;
493
+ extend: convex_values1279.VAny<any, "optional", string>;
492
494
  }, "required", "name" | "extend" | "type" | `extend.${string}` | "slug" | "parentGroupId" | "rootGroupId" | "isRoot" | "tags" | "policy" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.user" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.groups" | "policy.provisioning.roles" | "policy.provisioning.user.createOnSignIn" | "policy.provisioning.user.updateProfileOnLogin" | "policy.provisioning.user.updateProfileFromScim" | "policy.provisioning.user.authority" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | "policy.provisioning.groups.source" | "policy.provisioning.groups.mode" | "policy.provisioning.groups.mapping" | `policy.provisioning.groups.mapping.${string}` | "policy.provisioning.roles.source" | "policy.provisioning.roles.mode" | "policy.provisioning.roles.mapping" | `policy.provisioning.roles.mapping.${string}`>, {
493
495
  slug: ["slug", "_creationTime"];
494
496
  parent_group_id: ["parentGroupId", "_creationTime"];
@@ -502,14 +504,14 @@ declare const _default: convex_server93.SchemaDefinition<{
502
504
  * Each row maps one `(key, value)` pair to a group. Kept in sync by
503
505
  * `groupCreate`, `groupUpdate`, and `groupDelete`.
504
506
  */
505
- GroupTag: convex_server93.TableDefinition<convex_values1267.VObject<{
507
+ GroupTag: convex_server93.TableDefinition<convex_values1279.VObject<{
506
508
  key: string;
507
509
  value: string;
508
- group_id: convex_values1267.GenericId<"Group">;
510
+ group_id: convex_values1279.GenericId<"Group">;
509
511
  }, {
510
- group_id: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
511
- key: convex_values1267.VString<string, "required">;
512
- value: convex_values1267.VString<string, "required">;
512
+ group_id: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
513
+ key: convex_values1279.VString<string, "required">;
514
+ value: convex_values1279.VString<string, "required">;
513
515
  }, "required", "key" | "value" | "group_id">, {
514
516
  by_group: ["group_id", "_creationTime"];
515
517
  by_key_value: ["key", "value", "_creationTime"];
@@ -520,20 +522,20 @@ declare const _default: convex_server93.SchemaDefinition<{
520
522
  * role (e.g. "owner", "admin", "member", "viewer"). A user can be a
521
523
  * member of multiple groups with different roles in each.
522
524
  */
523
- GroupMember: convex_server93.TableDefinition<convex_values1267.VObject<{
525
+ GroupMember: convex_server93.TableDefinition<convex_values1279.VObject<{
524
526
  extend?: any;
525
527
  status?: string | undefined;
526
528
  role?: string | undefined;
527
529
  roleIds?: string[] | undefined;
528
- userId: convex_values1267.GenericId<"User">;
529
- groupId: convex_values1267.GenericId<"Group">;
530
+ userId: convex_values1279.GenericId<"User">;
531
+ groupId: convex_values1279.GenericId<"Group">;
530
532
  }, {
531
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
532
- userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">;
533
- role: convex_values1267.VString<string | undefined, "optional">;
534
- roleIds: convex_values1267.VArray<string[] | undefined, convex_values1267.VString<string, "required">, "optional">;
535
- status: convex_values1267.VString<string | undefined, "optional">;
536
- extend: convex_values1267.VAny<any, "optional", string>;
533
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
534
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User">, "required">;
535
+ role: convex_values1279.VString<string | undefined, "optional">;
536
+ roleIds: convex_values1279.VArray<string[] | undefined, convex_values1279.VString<string, "required">, "optional">;
537
+ status: convex_values1279.VString<string | undefined, "optional">;
538
+ extend: convex_values1279.VAny<any, "optional", string>;
537
539
  }, "required", "extend" | `extend.${string}` | "userId" | "status" | "groupId" | "role" | "roleIds">, {
538
540
  group_id: ["groupId", "_creationTime"];
539
541
  group_id_user_id: ["groupId", "userId", "_creationTime"];
@@ -548,30 +550,30 @@ declare const _default: convex_server93.SchemaDefinition<{
548
550
  * `email` and `invitedByUserId` are optional to support CLI-generated
549
551
  * invite links where neither is known upfront.
550
552
  */
551
- GroupInvite: convex_server93.TableDefinition<convex_values1267.VObject<{
553
+ GroupInvite: convex_server93.TableDefinition<convex_values1279.VObject<{
552
554
  email?: string | undefined;
553
555
  extend?: any;
554
- groupId?: convex_values1267.GenericId<"Group"> | undefined;
556
+ groupId?: convex_values1279.GenericId<"Group"> | undefined;
555
557
  role?: string | undefined;
556
558
  roleIds?: string[] | undefined;
557
- invitedByUserId?: convex_values1267.GenericId<"User"> | undefined;
559
+ invitedByUserId?: convex_values1279.GenericId<"User"> | undefined;
558
560
  expiresTime?: number | undefined;
559
- acceptedByUserId?: convex_values1267.GenericId<"User"> | undefined;
561
+ acceptedByUserId?: convex_values1279.GenericId<"User"> | undefined;
560
562
  acceptedTime?: number | undefined;
561
563
  status: "pending" | "accepted" | "revoked" | "expired";
562
564
  tokenHash: string;
563
565
  }, {
564
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group"> | undefined, "optional">;
565
- invitedByUserId: convex_values1267.VId<convex_values1267.GenericId<"User"> | undefined, "optional">;
566
- email: convex_values1267.VString<string | undefined, "optional">;
567
- tokenHash: convex_values1267.VString<string, "required">;
568
- role: convex_values1267.VString<string | undefined, "optional">;
569
- roleIds: convex_values1267.VArray<string[] | undefined, convex_values1267.VString<string, "required">, "optional">;
570
- status: convex_values1267.VUnion<"pending" | "accepted" | "revoked" | "expired", [convex_values1267.VLiteral<"pending", "required">, convex_values1267.VLiteral<"accepted", "required">, convex_values1267.VLiteral<"revoked", "required">, convex_values1267.VLiteral<"expired", "required">], "required", never>;
571
- expiresTime: convex_values1267.VFloat64<number | undefined, "optional">;
572
- acceptedByUserId: convex_values1267.VId<convex_values1267.GenericId<"User"> | undefined, "optional">;
573
- acceptedTime: convex_values1267.VFloat64<number | undefined, "optional">;
574
- extend: convex_values1267.VAny<any, "optional", string>;
566
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group"> | undefined, "optional">;
567
+ invitedByUserId: convex_values1279.VId<convex_values1279.GenericId<"User"> | undefined, "optional">;
568
+ email: convex_values1279.VString<string | undefined, "optional">;
569
+ tokenHash: convex_values1279.VString<string, "required">;
570
+ role: convex_values1279.VString<string | undefined, "optional">;
571
+ roleIds: convex_values1279.VArray<string[] | undefined, convex_values1279.VString<string, "required">, "optional">;
572
+ status: convex_values1279.VUnion<"pending" | "accepted" | "revoked" | "expired", [convex_values1279.VLiteral<"pending", "required">, convex_values1279.VLiteral<"accepted", "required">, convex_values1279.VLiteral<"revoked", "required">, convex_values1279.VLiteral<"expired", "required">], "required", never>;
573
+ expiresTime: convex_values1279.VFloat64<number | undefined, "optional">;
574
+ acceptedByUserId: convex_values1279.VId<convex_values1279.GenericId<"User"> | undefined, "optional">;
575
+ acceptedTime: convex_values1279.VFloat64<number | undefined, "optional">;
576
+ extend: convex_values1279.VAny<any, "optional", string>;
575
577
  }, "required", "email" | "extend" | `extend.${string}` | "status" | "groupId" | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
576
578
  token_hash: ["tokenHash", "_creationTime"];
577
579
  status: ["status", "_creationTime"];
@@ -587,22 +589,22 @@ declare const _default: convex_server93.SchemaDefinition<{
587
589
  * SDK can evolve without forcing schema churn for every protocol-specific
588
590
  * field addition.
589
591
  */
590
- GroupConnection: convex_server93.TableDefinition<convex_values1267.VObject<{
592
+ GroupConnection: convex_server93.TableDefinition<convex_values1279.VObject<{
591
593
  name?: string | undefined;
592
594
  extend?: any;
593
595
  slug?: string | undefined;
594
596
  config?: any;
595
597
  status: "draft" | "active" | "disabled";
596
598
  protocol: "oidc" | "saml";
597
- groupId: convex_values1267.GenericId<"Group">;
599
+ groupId: convex_values1279.GenericId<"Group">;
598
600
  }, {
599
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
600
- slug: convex_values1267.VString<string | undefined, "optional">;
601
- name: convex_values1267.VString<string | undefined, "optional">;
602
- protocol: convex_values1267.VUnion<"oidc" | "saml", [convex_values1267.VLiteral<"oidc", "required">, convex_values1267.VLiteral<"saml", "required">], "required", never>;
603
- status: convex_values1267.VUnion<"draft" | "active" | "disabled", [convex_values1267.VLiteral<"draft", "required">, convex_values1267.VLiteral<"active", "required">, convex_values1267.VLiteral<"disabled", "required">], "required", never>;
604
- config: convex_values1267.VAny<any, "optional", string>;
605
- extend: convex_values1267.VAny<any, "optional", string>;
601
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
602
+ slug: convex_values1279.VString<string | undefined, "optional">;
603
+ name: convex_values1279.VString<string | undefined, "optional">;
604
+ protocol: convex_values1279.VUnion<"oidc" | "saml", [convex_values1279.VLiteral<"oidc", "required">, convex_values1279.VLiteral<"saml", "required">], "required", never>;
605
+ status: convex_values1279.VUnion<"draft" | "active" | "disabled", [convex_values1279.VLiteral<"draft", "required">, convex_values1279.VLiteral<"active", "required">, convex_values1279.VLiteral<"disabled", "required">], "required", never>;
606
+ config: convex_values1279.VAny<any, "optional", string>;
607
+ extend: convex_values1279.VAny<any, "optional", string>;
606
608
  }, "required", "name" | "extend" | `extend.${string}` | "status" | "slug" | "protocol" | "groupId" | "config" | `config.${string}`>, {
607
609
  group_id: ["groupId", "_creationTime"];
608
610
  slug: ["slug", "_creationTime"];
@@ -613,18 +615,18 @@ declare const _default: convex_server93.SchemaDefinition<{
613
615
  /**
614
616
  * Verified or pending domains linked to an group connection record.
615
617
  */
616
- GroupConnectionDomain: convex_server93.TableDefinition<convex_values1267.VObject<{
618
+ GroupConnectionDomain: convex_server93.TableDefinition<convex_values1279.VObject<{
617
619
  verifiedAt?: number | undefined;
618
620
  isPrimary: boolean;
619
- connectionId: convex_values1267.GenericId<"GroupConnection">;
620
- groupId: convex_values1267.GenericId<"Group">;
621
+ connectionId: convex_values1279.GenericId<"GroupConnection">;
622
+ groupId: convex_values1279.GenericId<"Group">;
621
623
  domain: string;
622
624
  }, {
623
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
624
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
625
- domain: convex_values1267.VString<string, "required">;
626
- isPrimary: convex_values1267.VBoolean<boolean, "required">;
627
- verifiedAt: convex_values1267.VFloat64<number | undefined, "optional">;
625
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection">, "required">;
626
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
627
+ domain: convex_values1279.VString<string, "required">;
628
+ isPrimary: convex_values1279.VBoolean<boolean, "required">;
629
+ verifiedAt: convex_values1279.VFloat64<number | undefined, "optional">;
628
630
  }, "required", "isPrimary" | "connectionId" | "groupId" | "domain" | "verifiedAt">, {
629
631
  connection_id: ["connectionId", "_creationTime"];
630
632
  group_id: ["groupId", "_creationTime"];
@@ -633,26 +635,26 @@ declare const _default: convex_server93.SchemaDefinition<{
633
635
  /**
634
636
  * Pending DNS TXT verification challenges for group connection domains.
635
637
  */
636
- GroupConnectionDomainVerification: convex_server93.TableDefinition<convex_values1267.VObject<{
637
- connectionId: convex_values1267.GenericId<"GroupConnection">;
638
+ GroupConnectionDomainVerification: convex_server93.TableDefinition<convex_values1279.VObject<{
639
+ connectionId: convex_values1279.GenericId<"GroupConnection">;
638
640
  expiresAt: number;
639
- groupId: convex_values1267.GenericId<"Group">;
641
+ groupId: convex_values1279.GenericId<"Group">;
640
642
  tokenHash: string;
641
643
  domain: string;
642
- domainId: convex_values1267.GenericId<"GroupConnectionDomain">;
644
+ domainId: convex_values1279.GenericId<"GroupConnectionDomain">;
643
645
  recordName: string;
644
646
  token: string;
645
647
  requestedAt: number;
646
648
  }, {
647
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
648
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
649
- domainId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnectionDomain">, "required">;
650
- domain: convex_values1267.VString<string, "required">;
651
- recordName: convex_values1267.VString<string, "required">;
652
- token: convex_values1267.VString<string, "required">;
653
- tokenHash: convex_values1267.VString<string, "required">;
654
- requestedAt: convex_values1267.VFloat64<number, "required">;
655
- expiresAt: convex_values1267.VFloat64<number, "required">;
649
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection">, "required">;
650
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
651
+ domainId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnectionDomain">, "required">;
652
+ domain: convex_values1279.VString<string, "required">;
653
+ recordName: convex_values1279.VString<string, "required">;
654
+ token: convex_values1279.VString<string, "required">;
655
+ tokenHash: convex_values1279.VString<string, "required">;
656
+ requestedAt: convex_values1279.VFloat64<number, "required">;
657
+ expiresAt: convex_values1279.VFloat64<number, "required">;
656
658
  }, "required", "connectionId" | "expiresAt" | "groupId" | "tokenHash" | "domain" | "domainId" | "recordName" | "token" | "requestedAt">, {
657
659
  connection_id: ["connectionId", "_creationTime"];
658
660
  domain_id: ["domainId", "_creationTime"];
@@ -661,18 +663,18 @@ declare const _default: convex_server93.SchemaDefinition<{
661
663
  /**
662
664
  * Encrypted group connection secrets stored separately from protocol config.
663
665
  */
664
- GroupConnectionSecret: convex_server93.TableDefinition<convex_values1267.VObject<{
665
- connectionId: convex_values1267.GenericId<"GroupConnection">;
666
- groupId: convex_values1267.GenericId<"Group">;
666
+ GroupConnectionSecret: convex_server93.TableDefinition<convex_values1279.VObject<{
667
+ connectionId: convex_values1279.GenericId<"GroupConnection">;
668
+ groupId: convex_values1279.GenericId<"Group">;
667
669
  ciphertext: string;
668
670
  updatedAt: number;
669
671
  kind: "oidc_client_secret";
670
672
  }, {
671
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
672
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
673
- kind: convex_values1267.VUnion<"oidc_client_secret", [convex_values1267.VLiteral<"oidc_client_secret", "required">], "required", never>;
674
- ciphertext: convex_values1267.VString<string, "required">;
675
- updatedAt: convex_values1267.VFloat64<number, "required">;
673
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection">, "required">;
674
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
675
+ kind: convex_values1279.VUnion<"oidc_client_secret", [convex_values1279.VLiteral<"oidc_client_secret", "required">], "required", never>;
676
+ ciphertext: convex_values1279.VString<string, "required">;
677
+ updatedAt: convex_values1279.VFloat64<number, "required">;
676
678
  }, "required", "connectionId" | "groupId" | "ciphertext" | "updatedAt" | "kind">, {
677
679
  connection_id: ["connectionId", "_creationTime"];
678
680
  connection_id_kind: ["connectionId", "kind", "_creationTime"];
@@ -681,22 +683,22 @@ declare const _default: convex_server93.SchemaDefinition<{
681
683
  /**
682
684
  * SCIM configuration for an group connection tenant.
683
685
  */
684
- GroupConnectionScimConfig: convex_server93.TableDefinition<convex_values1267.VObject<{
686
+ GroupConnectionScimConfig: convex_server93.TableDefinition<convex_values1279.VObject<{
685
687
  extend?: any;
686
688
  lastRotatedAt?: number | undefined;
687
- connectionId: convex_values1267.GenericId<"GroupConnection">;
689
+ connectionId: convex_values1279.GenericId<"GroupConnection">;
688
690
  status: "draft" | "active" | "disabled";
689
- groupId: convex_values1267.GenericId<"Group">;
691
+ groupId: convex_values1279.GenericId<"Group">;
690
692
  tokenHash: string;
691
693
  basePath: string;
692
694
  }, {
693
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
694
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
695
- status: convex_values1267.VUnion<"draft" | "active" | "disabled", [convex_values1267.VLiteral<"draft", "required">, convex_values1267.VLiteral<"active", "required">, convex_values1267.VLiteral<"disabled", "required">], "required", never>;
696
- basePath: convex_values1267.VString<string, "required">;
697
- tokenHash: convex_values1267.VString<string, "required">;
698
- lastRotatedAt: convex_values1267.VFloat64<number | undefined, "optional">;
699
- extend: convex_values1267.VAny<any, "optional", string>;
695
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection">, "required">;
696
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
697
+ status: convex_values1279.VUnion<"draft" | "active" | "disabled", [convex_values1279.VLiteral<"draft", "required">, convex_values1279.VLiteral<"active", "required">, convex_values1279.VLiteral<"disabled", "required">], "required", never>;
698
+ basePath: convex_values1279.VString<string, "required">;
699
+ tokenHash: convex_values1279.VString<string, "required">;
700
+ lastRotatedAt: convex_values1279.VFloat64<number | undefined, "optional">;
701
+ extend: convex_values1279.VAny<any, "optional", string>;
700
702
  }, "required", "extend" | `extend.${string}` | "connectionId" | "status" | "groupId" | "tokenHash" | "basePath" | "lastRotatedAt">, {
701
703
  group_connection_id: ["connectionId", "_creationTime"];
702
704
  group_id: ["groupId", "_creationTime"];
@@ -706,26 +708,26 @@ declare const _default: convex_server93.SchemaDefinition<{
706
708
  /**
707
709
  * External SCIM identities mapped into local users/groups.
708
710
  */
709
- GroupConnectionScimIdentity: convex_server93.TableDefinition<convex_values1267.VObject<{
710
- userId?: convex_values1267.GenericId<"User"> | undefined;
711
+ GroupConnectionScimIdentity: convex_server93.TableDefinition<convex_values1279.VObject<{
712
+ userId?: convex_values1279.GenericId<"User"> | undefined;
711
713
  active?: boolean | undefined;
712
- mappedGroupId?: convex_values1267.GenericId<"Group"> | undefined;
714
+ mappedGroupId?: convex_values1279.GenericId<"Group"> | undefined;
713
715
  lastProvisionedAt?: number | undefined;
714
716
  raw?: any;
715
- connectionId: convex_values1267.GenericId<"GroupConnection">;
717
+ connectionId: convex_values1279.GenericId<"GroupConnection">;
716
718
  externalId: string;
717
- groupId: convex_values1267.GenericId<"Group">;
719
+ groupId: convex_values1279.GenericId<"Group">;
718
720
  resourceType: "user" | "group";
719
721
  }, {
720
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
721
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
722
- resourceType: convex_values1267.VUnion<"user" | "group", [convex_values1267.VLiteral<"user", "required">, convex_values1267.VLiteral<"group", "required">], "required", never>;
723
- externalId: convex_values1267.VString<string, "required">;
724
- userId: convex_values1267.VId<convex_values1267.GenericId<"User"> | undefined, "optional">;
725
- mappedGroupId: convex_values1267.VId<convex_values1267.GenericId<"Group"> | undefined, "optional">;
726
- lastProvisionedAt: convex_values1267.VFloat64<number | undefined, "optional">;
727
- active: convex_values1267.VBoolean<boolean | undefined, "optional">;
728
- raw: convex_values1267.VAny<any, "optional", string>;
722
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection">, "required">;
723
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
724
+ resourceType: convex_values1279.VUnion<"user" | "group", [convex_values1279.VLiteral<"user", "required">, convex_values1279.VLiteral<"group", "required">], "required", never>;
725
+ externalId: convex_values1279.VString<string, "required">;
726
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User"> | undefined, "optional">;
727
+ mappedGroupId: convex_values1279.VId<convex_values1279.GenericId<"Group"> | undefined, "optional">;
728
+ lastProvisionedAt: convex_values1279.VFloat64<number | undefined, "optional">;
729
+ active: convex_values1279.VBoolean<boolean | undefined, "optional">;
730
+ raw: convex_values1279.VAny<any, "optional", string>;
729
731
  }, "required", "userId" | "connectionId" | "externalId" | "groupId" | "active" | "resourceType" | "mappedGroupId" | "lastProvisionedAt" | "raw" | `raw.${string}`>, {
730
732
  group_connection_id: ["connectionId", "_creationTime"];
731
733
  group_id: ["groupId", "_creationTime"];
@@ -737,32 +739,32 @@ declare const _default: convex_server93.SchemaDefinition<{
737
739
  /**
738
740
  * Immutable audit trail for group connection operations.
739
741
  */
740
- GroupAuditEvent: convex_server93.TableDefinition<convex_values1267.VObject<{
741
- connectionId?: convex_values1267.GenericId<"GroupConnection"> | undefined;
742
+ GroupAuditEvent: convex_server93.TableDefinition<convex_values1279.VObject<{
743
+ connectionId?: convex_values1279.GenericId<"GroupConnection"> | undefined;
742
744
  actorId?: string | undefined;
743
745
  subjectId?: string | undefined;
744
746
  requestId?: string | undefined;
745
747
  ip?: string | undefined;
746
748
  metadata?: any;
747
749
  status: "success" | "failure";
748
- groupId: convex_values1267.GenericId<"Group">;
750
+ groupId: convex_values1279.GenericId<"Group">;
749
751
  actorType: "scim" | "user" | "system" | "api_key" | "webhook";
750
752
  eventType: string;
751
753
  subjectType: string;
752
754
  occurredAt: number;
753
755
  }, {
754
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection"> | undefined, "optional">;
755
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
756
- eventType: convex_values1267.VString<string, "required">;
757
- actorType: convex_values1267.VUnion<"scim" | "user" | "system" | "api_key" | "webhook", [convex_values1267.VLiteral<"user", "required">, convex_values1267.VLiteral<"system", "required">, convex_values1267.VLiteral<"scim", "required">, convex_values1267.VLiteral<"api_key", "required">, convex_values1267.VLiteral<"webhook", "required">], "required", never>;
758
- actorId: convex_values1267.VString<string | undefined, "optional">;
759
- subjectType: convex_values1267.VString<string, "required">;
760
- subjectId: convex_values1267.VString<string | undefined, "optional">;
761
- status: convex_values1267.VUnion<"success" | "failure", [convex_values1267.VLiteral<"success", "required">, convex_values1267.VLiteral<"failure", "required">], "required", never>;
762
- occurredAt: convex_values1267.VFloat64<number, "required">;
763
- requestId: convex_values1267.VString<string | undefined, "optional">;
764
- ip: convex_values1267.VString<string | undefined, "optional">;
765
- metadata: convex_values1267.VAny<any, "optional", string>;
756
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection"> | undefined, "optional">;
757
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
758
+ eventType: convex_values1279.VString<string, "required">;
759
+ actorType: convex_values1279.VUnion<"scim" | "user" | "system" | "api_key" | "webhook", [convex_values1279.VLiteral<"user", "required">, convex_values1279.VLiteral<"system", "required">, convex_values1279.VLiteral<"scim", "required">, convex_values1279.VLiteral<"api_key", "required">, convex_values1279.VLiteral<"webhook", "required">], "required", never>;
760
+ actorId: convex_values1279.VString<string | undefined, "optional">;
761
+ subjectType: convex_values1279.VString<string, "required">;
762
+ subjectId: convex_values1279.VString<string | undefined, "optional">;
763
+ status: convex_values1279.VUnion<"success" | "failure", [convex_values1279.VLiteral<"success", "required">, convex_values1279.VLiteral<"failure", "required">], "required", never>;
764
+ occurredAt: convex_values1279.VFloat64<number, "required">;
765
+ requestId: convex_values1279.VString<string | undefined, "optional">;
766
+ ip: convex_values1279.VString<string | undefined, "optional">;
767
+ metadata: convex_values1279.VAny<any, "optional", string>;
766
768
  }, "required", "connectionId" | "status" | "groupId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
767
769
  group_connection_id_occurred_at: ["connectionId", "occurredAt", "_creationTime"];
768
770
  group_id_occurred_at: ["groupId", "occurredAt", "_creationTime"];
@@ -771,30 +773,30 @@ declare const _default: convex_server93.SchemaDefinition<{
771
773
  /**
772
774
  * Webhook endpoints subscribed to group audit and lifecycle events.
773
775
  */
774
- GroupWebhookEndpoint: convex_server93.TableDefinition<convex_values1267.VObject<{
776
+ GroupWebhookEndpoint: convex_server93.TableDefinition<convex_values1279.VObject<{
775
777
  extend?: any;
776
- createdByUserId?: convex_values1267.GenericId<"User"> | undefined;
778
+ createdByUserId?: convex_values1279.GenericId<"User"> | undefined;
777
779
  lastSuccessAt?: number | undefined;
778
780
  lastFailureAt?: number | undefined;
779
- connectionId: convex_values1267.GenericId<"GroupConnection">;
781
+ connectionId: convex_values1279.GenericId<"GroupConnection">;
780
782
  status: "active" | "disabled";
781
- groupId: convex_values1267.GenericId<"Group">;
783
+ groupId: convex_values1279.GenericId<"Group">;
782
784
  url: string;
783
785
  secretHash: string;
784
786
  subscriptions: string[];
785
787
  failureCount: number;
786
788
  }, {
787
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
788
- groupId: convex_values1267.VId<convex_values1267.GenericId<"Group">, "required">;
789
- url: convex_values1267.VString<string, "required">;
790
- status: convex_values1267.VUnion<"active" | "disabled", [convex_values1267.VLiteral<"active", "required">, convex_values1267.VLiteral<"disabled", "required">], "required", never>;
791
- secretHash: convex_values1267.VString<string, "required">;
792
- subscriptions: convex_values1267.VArray<string[], convex_values1267.VString<string, "required">, "required">;
793
- createdByUserId: convex_values1267.VId<convex_values1267.GenericId<"User"> | undefined, "optional">;
794
- lastSuccessAt: convex_values1267.VFloat64<number | undefined, "optional">;
795
- lastFailureAt: convex_values1267.VFloat64<number | undefined, "optional">;
796
- failureCount: convex_values1267.VFloat64<number, "required">;
797
- extend: convex_values1267.VAny<any, "optional", string>;
789
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection">, "required">;
790
+ groupId: convex_values1279.VId<convex_values1279.GenericId<"Group">, "required">;
791
+ url: convex_values1279.VString<string, "required">;
792
+ status: convex_values1279.VUnion<"active" | "disabled", [convex_values1279.VLiteral<"active", "required">, convex_values1279.VLiteral<"disabled", "required">], "required", never>;
793
+ secretHash: convex_values1279.VString<string, "required">;
794
+ subscriptions: convex_values1279.VArray<string[], convex_values1279.VString<string, "required">, "required">;
795
+ createdByUserId: convex_values1279.VId<convex_values1279.GenericId<"User"> | undefined, "optional">;
796
+ lastSuccessAt: convex_values1279.VFloat64<number | undefined, "optional">;
797
+ lastFailureAt: convex_values1279.VFloat64<number | undefined, "optional">;
798
+ failureCount: convex_values1279.VFloat64<number, "required">;
799
+ extend: convex_values1279.VAny<any, "optional", string>;
798
800
  }, "required", "extend" | `extend.${string}` | "connectionId" | "status" | "groupId" | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
799
801
  group_connection_id: ["connectionId", "_creationTime"];
800
802
  group_id: ["groupId", "_creationTime"];
@@ -803,30 +805,30 @@ declare const _default: convex_server93.SchemaDefinition<{
803
805
  /**
804
806
  * Delivery queue for outbound group webhooks.
805
807
  */
806
- GroupWebhookDelivery: convex_server93.TableDefinition<convex_values1267.VObject<{
807
- auditEventId?: convex_values1267.GenericId<"GroupAuditEvent"> | undefined;
808
+ GroupWebhookDelivery: convex_server93.TableDefinition<convex_values1279.VObject<{
809
+ auditEventId?: convex_values1279.GenericId<"GroupAuditEvent"> | undefined;
808
810
  lastAttemptAt?: number | undefined;
809
811
  lastResponseStatus?: number | undefined;
810
812
  lastError?: string | undefined;
811
- connectionId: convex_values1267.GenericId<"GroupConnection">;
813
+ connectionId: convex_values1279.GenericId<"GroupConnection">;
812
814
  status: "pending" | "processing" | "delivered" | "failed";
813
815
  eventType: string;
814
- endpointId: convex_values1267.GenericId<"GroupWebhookEndpoint">;
816
+ endpointId: convex_values1279.GenericId<"GroupWebhookEndpoint">;
815
817
  attemptCount: number;
816
818
  nextAttemptAt: number;
817
819
  payload: any;
818
820
  }, {
819
- connectionId: convex_values1267.VId<convex_values1267.GenericId<"GroupConnection">, "required">;
820
- endpointId: convex_values1267.VId<convex_values1267.GenericId<"GroupWebhookEndpoint">, "required">;
821
- auditEventId: convex_values1267.VId<convex_values1267.GenericId<"GroupAuditEvent"> | undefined, "optional">;
822
- eventType: convex_values1267.VString<string, "required">;
823
- status: convex_values1267.VUnion<"pending" | "processing" | "delivered" | "failed", [convex_values1267.VLiteral<"pending", "required">, convex_values1267.VLiteral<"processing", "required">, convex_values1267.VLiteral<"delivered", "required">, convex_values1267.VLiteral<"failed", "required">], "required", never>;
824
- attemptCount: convex_values1267.VFloat64<number, "required">;
825
- nextAttemptAt: convex_values1267.VFloat64<number, "required">;
826
- lastAttemptAt: convex_values1267.VFloat64<number | undefined, "optional">;
827
- lastResponseStatus: convex_values1267.VFloat64<number | undefined, "optional">;
828
- lastError: convex_values1267.VString<string | undefined, "optional">;
829
- payload: convex_values1267.VAny<any, "required", string>;
821
+ connectionId: convex_values1279.VId<convex_values1279.GenericId<"GroupConnection">, "required">;
822
+ endpointId: convex_values1279.VId<convex_values1279.GenericId<"GroupWebhookEndpoint">, "required">;
823
+ auditEventId: convex_values1279.VId<convex_values1279.GenericId<"GroupAuditEvent"> | undefined, "optional">;
824
+ eventType: convex_values1279.VString<string, "required">;
825
+ status: convex_values1279.VUnion<"pending" | "processing" | "delivered" | "failed", [convex_values1279.VLiteral<"pending", "required">, convex_values1279.VLiteral<"processing", "required">, convex_values1279.VLiteral<"delivered", "required">, convex_values1279.VLiteral<"failed", "required">], "required", never>;
826
+ attemptCount: convex_values1279.VFloat64<number, "required">;
827
+ nextAttemptAt: convex_values1279.VFloat64<number, "required">;
828
+ lastAttemptAt: convex_values1279.VFloat64<number | undefined, "optional">;
829
+ lastResponseStatus: convex_values1279.VFloat64<number | undefined, "optional">;
830
+ lastError: convex_values1279.VString<string | undefined, "optional">;
831
+ payload: convex_values1279.VAny<any, "required", string>;
830
832
  }, "required", "connectionId" | "status" | "eventType" | "endpointId" | "auditEventId" | "attemptCount" | "nextAttemptAt" | "lastAttemptAt" | "lastResponseStatus" | "lastError" | "payload" | `payload.${string}`>, {
831
833
  group_connection_id: ["connectionId", "_creationTime"];
832
834
  status_next_attempt_at: ["status", "nextAttemptAt", "_creationTime"];
@@ -846,7 +848,7 @@ declare const _default: convex_server93.SchemaDefinition<{
846
848
  * - **Expiration**: optional TTL
847
849
  * - **Soft revocation**: `revoked` flag preserves audit trail
848
850
  */
849
- ApiKey: convex_server93.TableDefinition<convex_values1267.VObject<{
851
+ ApiKey: convex_server93.TableDefinition<convex_values1279.VObject<{
850
852
  lastUsedAt?: number | undefined;
851
853
  expiresAt?: number | undefined;
852
854
  metadata?: any;
@@ -859,7 +861,7 @@ declare const _default: convex_server93.SchemaDefinition<{
859
861
  lastAttemptTime: number;
860
862
  } | undefined;
861
863
  name: string;
862
- userId: convex_values1267.GenericId<"User">;
864
+ userId: convex_values1279.GenericId<"User">;
863
865
  createdAt: number;
864
866
  revoked: boolean;
865
867
  prefix: string;
@@ -869,39 +871,39 @@ declare const _default: convex_server93.SchemaDefinition<{
869
871
  actions: string[];
870
872
  }[];
871
873
  }, {
872
- userId: convex_values1267.VId<convex_values1267.GenericId<"User">, "required">; /** First chars of the key for display (e.g. "sk_abc1..."). */
873
- prefix: convex_values1267.VString<string, "required">; /** SHA-256 hex hash of the full raw key. */
874
- hashedKey: convex_values1267.VString<string, "required">; /** User-assigned name (e.g. "CI Pipeline", "Production API"). */
875
- name: convex_values1267.VString<string, "required">; /** Scoped permissions: [{ resource: "users", actions: ["read", "list"] }]. */
876
- scopes: convex_values1267.VArray<{
874
+ userId: convex_values1279.VId<convex_values1279.GenericId<"User">, "required">; /** First chars of the key for display (e.g. "sk_abc1..."). */
875
+ prefix: convex_values1279.VString<string, "required">; /** SHA-256 hex hash of the full raw key. */
876
+ hashedKey: convex_values1279.VString<string, "required">; /** User-assigned name (e.g. "CI Pipeline", "Production API"). */
877
+ name: convex_values1279.VString<string, "required">; /** Scoped permissions: [{ resource: "users", actions: ["read", "list"] }]. */
878
+ scopes: convex_values1279.VArray<{
877
879
  resource: string;
878
880
  actions: string[];
879
- }[], convex_values1267.VObject<{
881
+ }[], convex_values1279.VObject<{
880
882
  resource: string;
881
883
  actions: string[];
882
884
  }, {
883
- resource: convex_values1267.VString<string, "required">;
884
- actions: convex_values1267.VArray<string[], convex_values1267.VString<string, "required">, "required">;
885
+ resource: convex_values1279.VString<string, "required">;
886
+ actions: convex_values1279.VArray<string[], convex_values1279.VString<string, "required">, "required">;
885
887
  }, "required", "resource" | "actions">, "required">; /** Optional per-key rate limit configuration. */
886
- rateLimit: convex_values1267.VObject<{
888
+ rateLimit: convex_values1279.VObject<{
887
889
  maxRequests: number;
888
890
  windowMs: number;
889
891
  } | undefined, {
890
- maxRequests: convex_values1267.VFloat64<number, "required">;
891
- windowMs: convex_values1267.VFloat64<number, "required">;
892
+ maxRequests: convex_values1279.VFloat64<number, "required">;
893
+ windowMs: convex_values1279.VFloat64<number, "required">;
892
894
  }, "optional", "maxRequests" | "windowMs">; /** Rate limit state tracking (token-bucket). */
893
- rateLimitState: convex_values1267.VObject<{
895
+ rateLimitState: convex_values1279.VObject<{
894
896
  attemptsLeft: number;
895
897
  lastAttemptTime: number;
896
898
  } | undefined, {
897
- attemptsLeft: convex_values1267.VFloat64<number, "required">;
898
- lastAttemptTime: convex_values1267.VFloat64<number, "required">;
899
+ attemptsLeft: convex_values1279.VFloat64<number, "required">;
900
+ lastAttemptTime: convex_values1279.VFloat64<number, "required">;
899
901
  }, "optional", "attemptsLeft" | "lastAttemptTime">; /** Expiration timestamp. Null/undefined = never expires. */
900
- expiresAt: convex_values1267.VFloat64<number | undefined, "optional">;
901
- lastUsedAt: convex_values1267.VFloat64<number | undefined, "optional">;
902
- createdAt: convex_values1267.VFloat64<number, "required">; /** Soft-revoke flag. Revoked keys are kept for audit trail. */
903
- revoked: convex_values1267.VBoolean<boolean, "required">; /** Arbitrary app-specific metadata attached to the key. */
904
- metadata: convex_values1267.VAny<any, "optional", string>;
902
+ expiresAt: convex_values1279.VFloat64<number | undefined, "optional">;
903
+ lastUsedAt: convex_values1279.VFloat64<number | undefined, "optional">;
904
+ createdAt: convex_values1279.VFloat64<number, "required">; /** Soft-revoke flag. Revoked keys are kept for audit trail. */
905
+ revoked: convex_values1279.VBoolean<boolean, "required">; /** Arbitrary app-specific metadata attached to the key. */
906
+ metadata: convex_values1279.VAny<any, "optional", string>;
905
907
  }, "required", "name" | "userId" | "createdAt" | "lastUsedAt" | "expiresAt" | "revoked" | "metadata" | `metadata.${string}` | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime">, {
906
908
  user_id: ["userId", "_creationTime"];
907
909
  hashed_key: ["hashedKey", "_creationTime"];