authhero 4.106.0 → 4.106.1

package/dist/authhero.d.ts

@@ -3101,6 +3101,10 @@ export declare const clientInsertSchema: z.ZodObject<{
 		"iat_dcr"
 	]>>;
 	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	user_linking_mode: z.ZodOptional<z.ZodEnum<[
+		"builtin",
+		"off"
+	]>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	client_id: string;
@@ -3153,6 +3157,7 @@ export declare const clientInsertSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	name: string;
 	client_id: string;
@@ -3205,6 +3210,7 @@ export declare const clientInsertSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }>;
 export type ClientInsert = z.input<typeof clientInsertSchema>;
 export declare const clientSchema: z.ZodObject<{
@@ -3307,6 +3313,10 @@ export declare const clientSchema: z.ZodObject<{
 		"iat_dcr"
 	]>>;
 	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	user_linking_mode: z.ZodOptional<z.ZodEnum<[
+		"builtin",
+		"off"
+	]>>;
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -3363,6 +3373,7 @@ export declare const clientSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	created_at: string;
 	updated_at: string;
@@ -3417,6 +3428,7 @@ export declare const clientSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }>;
 export type Client = z.infer<typeof clientSchema>;
 export declare const clientGrantInsertSchema: z.ZodObject<{
@@ -42344,17 +42356,20 @@ export declare function isWidgetComponent(component: FormNodeComponent): compone
 export declare function isFieldComponent(component: FormNodeComponent): component is FieldComponent$1;
 export declare const hookTemplateId: z.ZodEnum<[
 	"ensure-username",
-	"set-preferred-username"
+	"set-preferred-username",
+	"account-linking"
 ]>;
 export type HookTemplateId = z.infer<typeof hookTemplateId>;
 /**
  * Registry of available hook templates.
- * Maps template IDs to their metadata and allowed triggers.
+ * Maps template IDs to their metadata and allowed triggers. Some templates
+ * (e.g. `account-linking`) can bind to more than one trigger; in that case
+ * `trigger_ids` lists every trigger the template supports.
  */
 export declare const hookTemplates: Record<HookTemplateId, {
 	name: string;
 	description: string;
-	trigger_id: string;
+	trigger_ids: string[];
 }>;
 export declare const hookInsertSchema: z.ZodUnion<[
 	z.ZodObject<{
@@ -42362,6 +42377,7 @@ export declare const hookInsertSchema: z.ZodUnion<[
 			"pre-user-registration",
 			"post-user-registration",
 			"post-user-login",
+			"post-user-update",
 			"validate-registration-username",
 			"pre-user-deletion",
 			"post-user-deletion"
@@ -42374,13 +42390,13 @@ export declare const hookInsertSchema: z.ZodUnion<[
 	}, "strip", z.ZodTypeAny, {
 		url: string;
 		enabled: boolean;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		synchronous: boolean;
 		priority?: number | undefined;
 		hook_id?: string | undefined;
 	}, {
 		url: string;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
@@ -42418,11 +42434,14 @@ export declare const hookInsertSchema: z.ZodUnion<[
 	z.ZodObject<{
 		trigger_id: z.ZodEnum<[
 			"post-user-login",
+			"post-user-registration",
+			"post-user-update",
 			"credentials-exchange"
 		]>;
 		template_id: z.ZodEnum<[
 			"ensure-username",
-			"set-preferred-username"
+			"set-preferred-username",
+			"account-linking"
 		]>;
 		enabled: z.ZodDefault<z.ZodBoolean>;
 		synchronous: z.ZodDefault<z.ZodBoolean>;
@@ -42430,14 +42449,14 @@ export declare const hookInsertSchema: z.ZodUnion<[
 		hook_id: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
 		enabled: boolean;
-		trigger_id: "post-user-login" | "credentials-exchange";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 		synchronous: boolean;
-		template_id: "ensure-username" | "set-preferred-username";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		priority?: number | undefined;
 		hook_id?: string | undefined;
 	}, {
-		trigger_id: "post-user-login" | "credentials-exchange";
-		template_id: "ensure-username" | "set-preferred-username";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
@@ -42482,6 +42501,7 @@ export declare const hookSchema: z.ZodUnion<[
 			"pre-user-registration",
 			"post-user-registration",
 			"post-user-login",
+			"post-user-update",
 			"validate-registration-username",
 			"pre-user-deletion",
 			"post-user-deletion"
@@ -42494,7 +42514,7 @@ export declare const hookSchema: z.ZodUnion<[
 		updated_at: string;
 		url: string;
 		enabled: boolean;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		synchronous: boolean;
 		hook_id: string;
 		priority?: number | undefined;
@@ -42502,7 +42522,7 @@ export declare const hookSchema: z.ZodUnion<[
 		created_at: string;
 		updated_at: string;
 		url: string;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		hook_id: string;
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
@@ -42547,12 +42567,15 @@ export declare const hookSchema: z.ZodUnion<[
 		hook_id: z.ZodString;
 		template_id: z.ZodEnum<[
 			"ensure-username",
-			"set-preferred-username"
+			"set-preferred-username",
+			"account-linking"
 		]>;
 		created_at: z.ZodString;
 		updated_at: z.ZodString;
 		trigger_id: z.ZodEnum<[
 			"post-user-login",
+			"post-user-registration",
+			"post-user-update",
 			"credentials-exchange"
 		]>;
 		enabled: z.ZodDefault<z.ZodBoolean>;
@@ -42562,17 +42585,17 @@ export declare const hookSchema: z.ZodUnion<[
 		created_at: string;
 		updated_at: string;
 		enabled: boolean;
-		trigger_id: "post-user-login" | "credentials-exchange";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 		synchronous: boolean;
 		hook_id: string;
-		template_id: "ensure-username" | "set-preferred-username";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		priority?: number | undefined;
 	}, {
 		created_at: string;
 		updated_at: string;
-		trigger_id: "post-user-login" | "credentials-exchange";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 		hook_id: string;
-		template_id: "ensure-username" | "set-preferred-username";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
@@ -51206,6 +51229,10 @@ declare const enrichedClientSchema: z.ZodObject<{
 		"iat_dcr"
 	]>>;
 	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	user_linking_mode: z.ZodOptional<z.ZodEnum<[
+		"builtin",
+		"off"
+	]>>;
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -51510,6 +51537,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	name: string;
 	tenant: {
@@ -51812,6 +51840,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }>;
 export type EnrichedClient = z.infer<typeof enrichedClientSchema>;
 /** Context passed to entity hooks */
@@ -52157,6 +52186,26 @@ export interface OutboxConfig {
 	/** Max delivery retries before giving up on an event (default: 5) */
 	maxRetries?: number;
 }
+/**
+ * Mode for the built-in email-based user linking path.
+ *
+ * - `"builtin"` — `commitUserHook` runs the email→primary lookup at user
+ *   creation and email update, linking by verified email match. Default
+ *   for backwards compatibility.
+ * - `"off"` — built-in lookup is skipped. Linking only happens if the
+ *   tenant has enabled the `account-linking` template hook for the
+ *   relevant trigger (`post-user-registration`, `post-user-update`, or
+ *   `post-user-login`).
+ *
+ * The template hook is controlled independently via the management API,
+ * so a tenant on `"builtin"` mode can still enable the template at
+ * `post-user-login` to catch legacy unlinked accounts. Running both at
+ * the same trigger is harmless but redundant — the template no-ops once
+ * the built-in has set `linked_to`.
+ *
+ * A per-client `user_linking_mode` overrides this service-level default.
+ */
+export type UserLinkingMode = "builtin" | "off";
 export interface AuthHeroConfig {
 	dataAdapter: DataAdapters;
 	/**
@@ -52343,6 +52392,16 @@ export interface AuthHeroConfig {
 	 * by a background relay to the logs table (and other destinations).
 	 */
 	outbox?: OutboxConfig;
+	/**
+	 * Default mode for the built-in email-based user-linking path.
+	 *
+	 * Controls whether `linkUsersHook` performs an automatic primary-user
+	 * lookup by verified email at user creation and email update. A per-client
+	 * `user_linking_mode` setting overrides this default.
+	 *
+	 * @default "builtin"
+	 */
+	userLinkingMode?: UserLinkingMode;
 }
 export type UserInfo = {
 	sub: string;
@@ -52402,6 +52461,7 @@ export type Bindings = {
 	codeExecutor?: CodeExecutor;
 	webhookInvoker?: WebhookInvoker;
 	outbox?: OutboxConfig;
+	userLinkingMode?: UserLinkingMode;
 };
 export interface CreateX509CertificateParams {
 	name: string;
@@ -53229,7 +53289,14 @@ export interface AccountLinkingOptions {
 	 */
 	requireVerifiedEmail?: boolean;
 }
-declare function accountLinking(options?: AccountLinkingOptions): OnExecutePostLogin;
+/**
+ * Trigger-agnostic event handler used by all `account-linking` template
+ * dispatch sites. It accepts the same shape as `OnExecutePostLogin` but
+ * ignores the trigger-specific `api` object, which lets the same function
+ * back `post-user-login`, `post-user-registration`, and `post-user-update`.
+ */
+export type AccountLinkingHandler = (event: HookEvent) => Promise<void>;
+declare function accountLinking(options?: AccountLinkingOptions): OnExecutePostLogin & AccountLinkingHandler;
 /**
  * Local code executor using `new Function()`.
  * Suitable for local development only — no isolation or sandboxing.
@@ -60814,7 +60881,7 @@ export declare function init(config: AuthHeroConfig): {
 					updated_at: string;
 					url: string;
 					enabled: boolean;
-					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 					synchronous: boolean;
 					hook_id: string;
 					priority?: number | undefined | undefined;
@@ -60831,10 +60898,10 @@ export declare function init(config: AuthHeroConfig): {
 					created_at: string;
 					updated_at: string;
 					enabled: boolean;
-					trigger_id: "post-user-login" | "credentials-exchange";
+					trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 					synchronous: boolean;
 					hook_id: string;
-					template_id: "ensure-username" | "set-preferred-username";
+					template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 					priority?: number | undefined | undefined;
 				} | {
 					created_at: string;
@@ -60854,7 +60921,7 @@ export declare function init(config: AuthHeroConfig): {
 						updated_at: string;
 						url: string;
 						enabled: boolean;
-						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 						synchronous: boolean;
 						hook_id: string;
 						priority?: number | undefined | undefined;
@@ -60871,10 +60938,10 @@ export declare function init(config: AuthHeroConfig): {
 						created_at: string;
 						updated_at: string;
 						enabled: boolean;
-						trigger_id: "post-user-login" | "credentials-exchange";
+						trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 						synchronous: boolean;
 						hook_id: string;
-						template_id: "ensure-username" | "set-preferred-username";
+						template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 						priority?: number | undefined | undefined;
 					} | {
 						created_at: string;
@@ -60902,7 +60969,7 @@ export declare function init(config: AuthHeroConfig): {
 				} & {
 					json: {
 						url: string;
-						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 						enabled?: boolean | undefined;
 						synchronous?: boolean | undefined;
 						priority?: number | undefined;
@@ -60915,8 +60982,8 @@ export declare function init(config: AuthHeroConfig): {
 						priority?: number | undefined;
 						hook_id?: string | undefined;
 					} | {
-						trigger_id: "post-user-login" | "credentials-exchange";
-						template_id: "ensure-username" | "set-preferred-username";
+						trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+						template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 						enabled?: boolean | undefined;
 						synchronous?: boolean | undefined;
 						priority?: number | undefined;
@@ -60935,7 +61002,7 @@ export declare function init(config: AuthHeroConfig): {
 					updated_at: string;
 					url: string;
 					enabled: boolean;
-					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 					synchronous: boolean;
 					hook_id: string;
 					priority?: number | undefined | undefined;
@@ -60952,10 +61019,10 @@ export declare function init(config: AuthHeroConfig): {
 					created_at: string;
 					updated_at: string;
 					enabled: boolean;
-					trigger_id: "post-user-login" | "credentials-exchange";
+					trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 					synchronous: boolean;
 					hook_id: string;
-					template_id: "ensure-username" | "set-preferred-username";
+					template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 					priority?: number | undefined | undefined;
 				} | {
 					created_at: string;
@@ -61005,7 +61072,7 @@ export declare function init(config: AuthHeroConfig): {
 					updated_at: string;
 					url: string;
 					enabled: boolean;
-					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 					synchronous: boolean;
 					hook_id: string;
 					priority?: number | undefined | undefined;
@@ -61022,10 +61089,10 @@ export declare function init(config: AuthHeroConfig): {
 					created_at: string;
 					updated_at: string;
 					enabled: boolean;
-					trigger_id: "post-user-login" | "credentials-exchange";
+					trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 					synchronous: boolean;
 					hook_id: string;
-					template_id: "ensure-username" | "set-preferred-username";
+					template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 					priority?: number | undefined | undefined;
 				} | {
 					created_at: string;
@@ -61071,7 +61138,7 @@ export declare function init(config: AuthHeroConfig): {
 					updated_at: string;
 					url: string;
 					enabled: boolean;
-					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 					synchronous: boolean;
 					hook_id: string;
 					priority?: number | undefined | undefined;
@@ -61088,10 +61155,10 @@ export declare function init(config: AuthHeroConfig): {
 					created_at: string;
 					updated_at: string;
 					enabled: boolean;
-					trigger_id: "post-user-login" | "credentials-exchange";
+					trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 					synchronous: boolean;
 					hook_id: string;
-					template_id: "ensure-username" | "set-preferred-username";
+					template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 					priority?: number | undefined | undefined;
 				} | {
 					created_at: string;
@@ -61721,6 +61788,7 @@ export declare function init(config: AuthHeroConfig): {
 					registration_metadata?: {
 						[x: string]: any;
 					} | undefined;
+					user_linking_mode?: "builtin" | "off" | undefined | undefined;
 				}[] | {
 					length: number;
 					start: number;
@@ -61809,6 +61877,7 @@ export declare function init(config: AuthHeroConfig): {
 						registration_metadata?: {
 							[x: string]: any;
 						} | undefined;
+						user_linking_mode?: "builtin" | "off" | undefined | undefined;
 					}[];
 					total?: number | undefined;
 				};
@@ -61912,6 +61981,7 @@ export declare function init(config: AuthHeroConfig): {
 					registration_metadata?: {
 						[x: string]: any;
 					} | undefined;
+					user_linking_mode?: "builtin" | "off" | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -61998,6 +62068,7 @@ export declare function init(config: AuthHeroConfig): {
 						owner_user_id?: string | undefined;
 						registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 						registration_metadata?: Record<string, any> | undefined;
+						user_linking_mode?: "builtin" | "off" | undefined;
 					};
 				};
 				output: {
@@ -62084,6 +62155,7 @@ export declare function init(config: AuthHeroConfig): {
 					registration_metadata?: {
 						[x: string]: any;
 					} | undefined;
+					user_linking_mode?: "builtin" | "off" | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -62149,6 +62221,7 @@ export declare function init(config: AuthHeroConfig): {
 						owner_user_id?: string | undefined;
 						registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 						registration_metadata?: Record<string, any> | undefined;
+						user_linking_mode?: "builtin" | "off" | undefined;
 					};
 				};
 				output: {
@@ -62235,6 +62308,7 @@ export declare function init(config: AuthHeroConfig): {
 					registration_metadata?: {
 						[x: string]: any;
 					} | undefined;
+					user_linking_mode?: "builtin" | "off" | undefined;
 				};
 				outputFormat: "json";
 				status: 201;