@samebase/identity-broker 0.0.0-stage → 0.2.0

package/dist/client/connectors/upstream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream.js","sourceRoot":"","sources":["../../../src/client/connectors/upstream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8C,CAAC;AAEzE,mDAAmD;AACnD,SAAS,mBAAmB,CAC1B,SAAyC;IAEzC,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,SAAS,CAAC,qBAAqB;YACvC,sBAAsB,EAAE,SAAS,CAAC,qBAAqB;YACvD,cAAc,EAAE,SAAS,CAAC,aAAa;SACxC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK;SAClB,gBAAgB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;SAC/C,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAInC;IACC,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,iCAAiC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7F,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAOpC;IACC,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,CACxD,EAAE,EACF,MAAM,EACN,UAAU,EACV,MAAM,EACN,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,YAAY,CAClB,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClF,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;QAChF,cAAc,EAAE,IAAI;QACpB,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,wBAAwB,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAqB,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAC9D,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxC,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;QAClD,QAAQ,CAAC,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1C,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/client/html.d.ts

@@ -0,0 +1,34 @@
+/** The few pages the broker renders itself. Plain HTML, one stylesheet, no script. */
+export declare function page(title: string, body: string, status?: number): Response;
+/**
+ * The connector choice. A third-party app gets the consent wording and a deny link; a first-party
+ * app only sees the buttons.
+ */
+export declare function chooserPage(args: {
+    appName: string;
+    firstParty: boolean;
+    /** The granted scopes: the consent names only what they release. */
+    scopes: string[];
+    connectors: Array<{
+        name: string;
+        label: string;
+        href: string;
+    }>;
+    denyHref: string;
+}): Response;
+export declare function emailAddressPage(args: {
+    appName: string;
+    action: string;
+    requestId: string;
+    error?: string;
+    status?: number;
+}): Response;
+export declare function emailCodePage(args: {
+    appName: string;
+    action: string;
+    requestId: string;
+    email: string;
+    error?: string;
+    status?: number;
+}): Response;
+export declare function errorPage(title: string, message: string, status?: number): Response;

package/dist/client/html.js

@@ -0,0 +1,91 @@
+/** The few pages the broker renders itself. Plain HTML, one stylesheet, no script. */
+function escape(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+const STYLE = `
+  body { margin: 0; font: 16px/1.5 system-ui, sans-serif; color: #111; background: #fff; }
+  main { max-width: 24rem; margin: 10vh auto; padding: 0 1rem; }
+  h1 { font-size: 1.25rem; font-weight: 600; }
+  p { margin: 0.5rem 0; }
+  .list { display: grid; gap: 0.5rem; margin: 1.5rem 0; }
+  a.button, button { display: block; width: 100%; box-sizing: border-box; padding: 0.75rem 1rem;
+    font: inherit; color: #111; background: #fff; border: 1px solid #111; text-align: center;
+    text-decoration: none; cursor: pointer; }
+  input { display: block; width: 100%; box-sizing: border-box; padding: 0.75rem 1rem; font: inherit;
+    border: 1px solid #111; margin: 1rem 0; }
+  .error { color: #b00020; }
+  .muted { color: #555; }
+`;
+export function page(title, body, status = 200) {
+    const html = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="robots" content="noindex">
+<title>${escape(title)}</title>
+<style>${STYLE}</style>
+</head>
+<body><main>${body}</main></body>
+</html>`;
+    return new Response(html, {
+        status,
+        headers: {
+            "Content-Type": "text/html; charset=utf-8",
+            "Cache-Control": "no-store",
+            "Referrer-Policy": "no-referrer",
+        },
+    });
+}
+/**
+ * The connector choice. A third-party app gets the consent wording and a deny link; a first-party
+ * app only sees the buttons.
+ */
+export function chooserPage(args) {
+    const buttons = args.connectors
+        .map((connector) => `<a class="button" href="${escape(connector.href)}">Continue with ${escape(connector.label)}</a>`)
+        .join("\n");
+    const released = [
+        "a stable id",
+        ...(args.scopes.includes("profile") ? ["your name and picture"] : []),
+        ...(args.scopes.includes("email") ? ["your verified email address"] : []),
+    ];
+    const list = released.length <= 2
+        ? released.join(" and ")
+        : `${released.slice(0, -1).join(", ")}, and ${released.slice(-1).join("")}`;
+    const consent = args.firstParty
+        ? ""
+        : `<p class="muted">${escape(args.appName)} will receive your identity from the provider you choose: ${list}.</p>`;
+    const deny = args.firstParty
+        ? ""
+        : `<p><a href="${escape(args.denyHref)}">Cancel and return to ${escape(args.appName)}</a></p>`;
+    return page(`Sign in to ${args.appName}`, `<h1>Sign in to ${escape(args.appName)}</h1>${consent}<div class="list">${buttons}</div>${deny}`);
+}
+export function emailAddressPage(args) {
+    const error = args.error === undefined ? "" : `<p class="error">${escape(args.error)}</p>`;
+    return page(`Sign in to ${args.appName}`, `<h1>Sign in to ${escape(args.appName)}</h1><p>Enter your email address. A six-digit code is sent to it.</p>${error}
+<form method="post" action="${escape(args.action)}">
+<input type="hidden" name="request" value="${escape(args.requestId)}">
+<input type="hidden" name="step" value="send">
+<input type="email" name="email" required autocomplete="email" autofocus placeholder="you@example.com">
+<button type="submit">Send code</button>
+</form>`, args.status);
+}
+export function emailCodePage(args) {
+    const error = args.error === undefined ? "" : `<p class="error">${escape(args.error)}</p>`;
+    return page(`Sign in to ${args.appName}`, `<h1>Check your email</h1><p>Enter the six-digit code sent to ${escape(args.email)}.</p>${error}
+<form method="post" action="${escape(args.action)}">
+<input type="hidden" name="request" value="${escape(args.requestId)}">
+<input type="hidden" name="step" value="verify">
+<input type="text" name="code" inputmode="numeric" pattern="[0-9]{6}" required autocomplete="one-time-code" autofocus placeholder="000000">
+<button type="submit">Continue</button>
+</form>`, args.status);
+}
+export function errorPage(title, message, status = 400) {
+    return page(title, `<h1>${escape(title)}</h1><p>${escape(message)}</p>`, status);
+}
+//# sourceMappingURL=html.js.map

package/dist/client/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../../src/client/html.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,KAAK,GAAG;;;;;;;;;;;;;CAab,CAAC;AAEF,MAAM,UAAU,IAAI,CAAC,KAAa,EAAE,IAAY,EAAE,MAAM,GAAG,GAAG;IAC5D,MAAM,IAAI,GAAG;;;;;;SAMN,MAAM,CAAC,KAAK,CAAC;SACb,KAAK;;cAEA,IAAI;QACV,CAAC;IACP,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,aAAa;SACjC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAO3B;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU;SAC5B,GAAG,CACF,CAAC,SAAS,EAAE,EAAE,CACZ,2BAA2B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CACpG;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG;QACf,aAAa;QACb,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,MAAM,IAAI,GACR,QAAQ,CAAC,MAAM,IAAI,CAAC;QAClB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,6DAA6D,IAAI,OAAO,CAAC;IACrH,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;IACjG,OAAO,IAAI,CACT,cAAc,IAAI,CAAC,OAAO,EAAE,EAC5B,kBAAkB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,OAAO,qBAAqB,OAAO,SAAS,IAAI,EAAE,CACjG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAMhC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3F,OAAO,IAAI,CACT,cAAc,IAAI,CAAC,OAAO,EAAE,EAC5B,kBAAkB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,wEAAwE,KAAK;8BACzF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;6CACJ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;;;;QAI3D,EACJ,IAAI,CAAC,MAAM,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAO7B;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3F,OAAO,IAAI,CACT,cAAc,IAAI,CAAC,OAAO,EAAE,EAC5B,gEAAgE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK;8BACrE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;6CACJ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;;;;QAI3D,EACJ,IAAI,CAAC,MAAM,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,OAAe,EAAE,MAAM,GAAG,GAAG;IACpE,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC"}

package/dist/client/index.d.ts

@@ -0,0 +1,93 @@
+import { type HttpRouter } from "convex/server";
+import type { ComponentApi } from "../component/_generated/component.js";
+import type { Connector } from "./connectors/types.js";
+export type { Connector, EmailConnector, OauthConnector, OidcConnector, SendEmailCode, UpstreamIdentity, } from "./connectors/types.js";
+export { github } from "./connectors/github.js";
+export { google } from "./connectors/google.js";
+export { email } from "./connectors/email.js";
+export { createKeySet, parseKeySet, rotateKeySet, type KeySet } from "./keys.js";
+export type IdentityBrokerConfig = {
+    /** `components.identityBroker` of the host app. */
+    component: ComponentApi;
+    /** The issuer URL, host-only or with a path, e.g. `https://auth.example.com`. */
+    issuer: string;
+    /** The content of `IDENTITY_BROKER_KEYS`, read in the request. */
+    keys: () => string | undefined;
+    connectors: Connector[];
+};
+/** Lifecycle values the host's cron passes to `cleanup`. */
+export declare const PREVIEW_CLIENT_MAX_AGE_MS: number;
+export declare const SIGN_IN_RETENTION_MS: number;
+export declare function defineIdentityBroker(config: IdentityBrokerConfig): {
+    /** Mounts every endpoint on the host's router. */
+    addHttpRoutes(http: HttpRouter): void;
+    /**
+     * Administration as internal functions of the host, for `npx convex run`: export them from a
+     * host module such as `convex/identityBroker.ts`.
+     */
+    admin(): {
+        createApp: import("convex/server").RegisteredMutation<"internal", {
+            allowedCallbackHosts: string[];
+            firstParty: boolean;
+            name: string;
+        }, Promise<{
+            appId: string;
+        }>>;
+        mintRegistrationToken: import("convex/server").RegisteredMutation<"internal", {
+            appId: string;
+            expiresInDays?: number;
+        }, Promise<{
+            token: string;
+            expiresAt: number;
+        }>>;
+        setAllowedCallbackHosts: import("convex/server").RegisteredMutation<"internal", {
+            allowedCallbackHosts: string[];
+            appId: string;
+        }, Promise<null>>;
+        listRegistrationTokens: import("convex/server").RegisteredQuery<"internal", {
+            appId: string;
+        }, Promise<{
+            createdAt: number;
+            expiresAt: number;
+            tokenHash: string;
+        }[]>>;
+        revokeRegistrationToken: import("convex/server").RegisteredMutation<"internal", {
+            tokenHash: string;
+        }, Promise<null>>;
+        deleteClient: import("convex/server").RegisteredMutation<"internal", {
+            clientId: string;
+        }, Promise<null>>;
+        deleteApp: import("convex/server").RegisteredMutation<"internal", {
+            appId: string;
+        }, Promise<null>>;
+        listApps: import("convex/server").RegisteredQuery<"internal", {}, Promise<{
+            allowedCallbackHosts: Array<string>;
+            appId: string;
+            createdAt: number;
+            firstParty: boolean;
+            name: string;
+        }[]>>;
+        listClients: import("convex/server").RegisteredQuery<"internal", {
+            appId: string;
+        }, Promise<{
+            appId: string;
+            clientId: string;
+            clientName: string;
+            createdAt: number;
+            deploymentType: "production" | "development" | "preview";
+            lastSignInAt?: number;
+            redirectUri: string;
+            secretHash: string;
+            softwareVersion: string;
+            tokenEndpointAuthMethod: "client_secret_post" | "client_secret_basic";
+        }[]>>;
+        cleanup: import("convex/server").RegisteredMutation<"internal", {}, Promise<{
+            authRequests: number;
+            authorizationCodes: number;
+            emailSends: number;
+            previewClients: number;
+            registrationTokens: number;
+            signIns: number;
+        }>>;
+    };
+};