authhero 4.89.0 → 4.91.0

package/dist/authhero.d.ts

@@ -42053,6 +42053,33 @@ export declare const hookInsertSchema: z.ZodUnion<[
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
 		hook_id?: string | undefined;
+	}>,
+	z.ZodObject<{
+		trigger_id: z.ZodEnum<[
+			"post-user-login",
+			"credentials-exchange",
+			"pre-user-registration",
+			"post-user-registration"
+		]>;
+		code_id: z.ZodString;
+		enabled: z.ZodDefault<z.ZodBoolean>;
+		synchronous: z.ZodDefault<z.ZodBoolean>;
+		priority: z.ZodOptional<z.ZodNumber>;
+		hook_id: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		code_id: string;
+		enabled: boolean;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		synchronous: boolean;
+		priority?: number | undefined;
+		hook_id?: string | undefined;
+	}, {
+		code_id: string;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		enabled?: boolean | undefined;
+		synchronous?: boolean | undefined;
+		priority?: number | undefined;
+		hook_id?: string | undefined;
 	}>
 ]>;
 export type HookInsert = z.infer<typeof hookInsertSchema>;
@@ -42160,9 +42187,77 @@ export declare const hookSchema: z.ZodUnion<[
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
+	}>,
+	z.ZodObject<{
+		hook_id: z.ZodString;
+		code_id: z.ZodString;
+		created_at: z.ZodString;
+		updated_at: z.ZodString;
+		trigger_id: z.ZodEnum<[
+			"post-user-login",
+			"credentials-exchange",
+			"pre-user-registration",
+			"post-user-registration"
+		]>;
+		enabled: z.ZodDefault<z.ZodBoolean>;
+		synchronous: z.ZodDefault<z.ZodBoolean>;
+		priority: z.ZodOptional<z.ZodNumber>;
+	}, "strip", z.ZodTypeAny, {
+		created_at: string;
+		updated_at: string;
+		code_id: string;
+		enabled: boolean;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		synchronous: boolean;
+		hook_id: string;
+		priority?: number | undefined;
+	}, {
+		created_at: string;
+		updated_at: string;
+		code_id: string;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		hook_id: string;
+		enabled?: boolean | undefined;
+		synchronous?: boolean | undefined;
+		priority?: number | undefined;
 	}>
 ]>;
 export type Hook = z.infer<typeof hookSchema>;
+export declare const hookCodeInsertSchema: z.ZodObject<{
+	code: z.ZodString;
+	secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+	code: string;
+	secrets?: Record<string, string> | undefined;
+}, {
+	code: string;
+	secrets?: Record<string, string> | undefined;
+}>;
+export type HookCodeInsert = z.infer<typeof hookCodeInsertSchema>;
+export declare const hookCodeSchema: z.ZodObject<{
+	code: z.ZodString;
+	secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+} & {
+	created_at: z.ZodString;
+	updated_at: z.ZodString;
+	id: z.ZodString;
+	tenant_id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+	code: string;
+	id: string;
+	tenant_id: string;
+	created_at: string;
+	updated_at: string;
+	secrets?: Record<string, string> | undefined;
+}, {
+	code: string;
+	id: string;
+	tenant_id: string;
+	created_at: string;
+	updated_at: string;
+	secrets?: Record<string, string> | undefined;
+}>;
+export type HookCode = z.infer<typeof hookCodeSchema>;
 export declare const profileDataSchema: z.ZodObject<{
 	email: z.ZodOptional<z.ZodString>;
 	email_verified: z.ZodOptional<z.ZodBoolean>;
@@ -48521,6 +48616,12 @@ export interface HooksAdapter {
 	update: (tenant_id: string, hook_id: string, hook: Partial<HookInsert>) => Promise<boolean>;
 	list: (tenant_id: string, params?: ListParams) => Promise<ListHooksResponse>;
 }
+export interface HookCodeAdapter {
+	create: (tenant_id: string, hookCode: HookCodeInsert) => Promise<HookCode>;
+	get: (tenant_id: string, id: string) => Promise<HookCode | null>;
+	update: (tenant_id: string, id: string, hookCode: Partial<HookCodeInsert>) => Promise<boolean>;
+	remove: (tenant_id: string, id: string) => Promise<boolean>;
+}
 export interface ThemesAdapter {
 	create: (tenant_id: string, theme: ThemeInsert, themeId?: string) => Promise<Theme>;
 	remove: (tenant_id: string, themeId: string) => Promise<boolean>;
@@ -48766,6 +48867,43 @@ export interface OutboxAdapter {
 	/** Delete processed events older than the given ISO date. Returns count deleted. */
 	cleanup(olderThan: string): Promise<number>;
 }
+export interface CodeExecutionResult {
+	success: boolean;
+	error?: string;
+	durationMs: number;
+	apiCalls: Array<{
+		method: string;
+		args: unknown[];
+	}>;
+}
+export interface CodeExecutor {
+	execute(params: {
+		code: string;
+		hookCodeId?: string;
+		triggerId: string;
+		event: Record<string, unknown>;
+		/** Wall-clock timeout for the entire execution (ms). */
+		timeoutMs?: number;
+		/**
+		 * CPU-time limit (ms) for runtimes that distinguish CPU time from
+		 * wall-clock time (e.g. Cloudflare Workers for Platforms).
+		 * Ignored by executors that do not support CPU-time limits.
+		 */
+		cpuLimitMs?: number;
+	}): Promise<CodeExecutionResult>;
+	/**
+	 * Deploy user code to the execution environment.
+	 * Called when hook code is created or updated.
+	 * Optional — LocalCodeExecutor does not need this.
+	 */
+	deploy?(hookCodeId: string, code: string): Promise<void>;
+	/**
+	 * Remove user code from the execution environment.
+	 * Called when hook code is deleted.
+	 * Optional — LocalCodeExecutor does not need this.
+	 */
+	remove?(hookCodeId: string): Promise<void>;
+}
 /**
  * Parameters for cleaning up expired sessions
  */
@@ -48788,6 +48926,7 @@ export interface DataAdapters {
 	flows: FlowsAdapter;
 	forms: FormsAdapter;
 	geo?: GeoAdapter;
+	hookCode: HookCodeAdapter;
 	hooks: HooksAdapter;
 	invites: InvitesAdapter;
 	keys: KeysAdapter;
@@ -51542,6 +51681,19 @@ export interface AuthHeroConfig {
 		/** Optional height in pixels (default: 20) */
 		height?: number;
 	};
+	/**
+	 * Code executor for user-authored code hooks.
+	 *
+	 * When provided, code hooks stored in the database will be executed
+	 * using this executor at auth flow trigger points.
+	 *
+	 * Available implementations:
+	 * - `LocalCodeExecutor` — uses `new Function()`, suitable for local dev only
+	 * - Custom implementations for isolated-vm, Cloudflare Workers for Platforms, etc.
+	 *
+	 * If not provided, code hooks are silently skipped.
+	 */
+	codeExecutor?: CodeExecutor;
 	/**
 	 * Custom webhook invoker function.
 	 *
@@ -51648,6 +51800,7 @@ export type Bindings = {
 		href?: string;
 		height?: number;
 	};
+	codeExecutor?: CodeExecutor;
 	webhookInvoker?: WebhookInvoker;
 	outbox?: OutboxConfig;
 };
@@ -52223,6 +52376,18 @@ export interface EnsureUsernameOptions {
 }
 declare function ensureUsername(options?: EnsureUsernameOptions): OnExecutePostLogin;
 declare function setPreferredUsername(): OnExecuteCredentialsExchange;
+/**
+ * Local code executor using `new Function()`.
+ * Suitable for local development only — no isolation or sandboxing.
+ */
+export declare class LocalCodeExecutor implements CodeExecutor {
+	execute(params: {
+		code: string;
+		triggerId: string;
+		event: Record<string, unknown>;
+		timeoutMs?: number;
+	}): Promise<CodeExecutionResult>;
+}
 export declare function init(config: AuthHeroConfig): {
 	app: OpenAPIHono<{
 		Bindings: Bindings;
@@ -59590,6 +59755,142 @@ export declare function init(config: AuthHeroConfig): {
 			};
 		};
 	}, "/connections"> & import("hono/types").MergeSchemaPath<{
+		"/": {
+			$post: {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						code: string;
+						secrets?: Record<string, string> | undefined;
+					};
+				};
+				output: {
+					code: string;
+					created_at: string;
+					updated_at: string;
+					tenant_id: string;
+					id: string;
+					deploymentStatus: "deployed" | "failed" | "not_required";
+					deploymentError?: string | undefined;
+					secrets?: {
+						[x: string]: string;
+					} | undefined;
+				};
+				outputFormat: "json";
+				status: 201;
+			};
+		};
+	} & {
+		"/:id": {
+			$get: {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 404;
+			} | {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {
+					code: string;
+					id: string;
+					tenant_id: string;
+					created_at: string;
+					updated_at: string;
+					secrets?: {
+						[x: string]: string;
+					} | undefined;
+				};
+				outputFormat: "json";
+				status: 200;
+			};
+		};
+	} & {
+		"/:id": {
+			$put: {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						code: string;
+						secrets?: Record<string, string> | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 404;
+			} | {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						code: string;
+						secrets?: Record<string, string> | undefined;
+					};
+				};
+				output: {
+					code: string;
+					created_at: string;
+					updated_at: string;
+					tenant_id: string;
+					id: string;
+					deploymentStatus: "deployed" | "failed" | "not_required";
+					deploymentError?: string | undefined;
+					secrets?: {
+						[x: string]: string;
+					} | undefined;
+				};
+				outputFormat: "json";
+				status: 200;
+			};
+		};
+	} & {
+		"/:id": {
+			$delete: {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 200;
+			};
+		};
+	}, "/hook-code"> & import("hono/types").MergeSchemaPath<{
 		"/": {
 			$get: {
 				input: {
@@ -59634,6 +59935,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				})[] | {
 					length: number;
 					start: number;
@@ -59665,6 +59975,15 @@ export declare function init(config: AuthHeroConfig): {
 						hook_id: string;
 						template_id: "ensure-username" | "set-preferred-username";
 						priority?: number | undefined | undefined;
+					} | {
+						created_at: string;
+						updated_at: string;
+						code_id: string;
+						enabled: boolean;
+						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+						synchronous: boolean;
+						hook_id: string;
+						priority?: number | undefined | undefined;
 					})[];
 					total?: number | undefined;
 				};
@@ -59701,6 +60020,13 @@ export declare function init(config: AuthHeroConfig): {
 						synchronous?: boolean | undefined;
 						priority?: number | undefined;
 						hook_id?: string | undefined;
+					} | {
+						code_id: string;
+						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+						enabled?: boolean | undefined;
+						synchronous?: boolean | undefined;
+						priority?: number | undefined;
+						hook_id?: string | undefined;
 					};
 				};
 				output: {
@@ -59730,6 +60056,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 201;
@@ -59791,6 +60126,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -59848,6 +60192,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -64934,260 +65287,7 @@ export declare function init(config: AuthHeroConfig): {
 				status: 200;
 			};
 		};
-	}, "/forms"> & import("hono/types").MergeSchemaPath<{
-		"/:screenId": {
-			$get: {
-				input: {
-					param: {
-						screenId: string;
-					};
-				} & {
-					query: {
-						state: string;
-						nodeId?: string | undefined;
-						ui_locales?: string | undefined;
-					};
-				};
-				output: {};
-				outputFormat: string;
-				status: 404;
-			} | {
-				input: {
-					param: {
-						screenId: string;
-					};
-				} & {
-					query: {
-						state: string;
-						nodeId?: string | undefined;
-						ui_locales?: string | undefined;
-					};
-				};
-				output: {
-					screen: {
-						method: "POST" | "GET";
-						action: string;
-						components: {
-							type: string;
-							id: string;
-							required?: boolean | undefined;
-							order?: number | undefined;
-							category?: string | undefined;
-							config?: {
-								[x: string]: any;
-							} | undefined;
-							messages?: {
-								type: "error" | "success" | "info" | "warning";
-								text: string;
-								id?: number | undefined;
-							}[] | undefined;
-							visible?: boolean | undefined;
-							sensitive?: boolean | undefined;
-							label?: string | undefined;
-							hint?: string | undefined;
-						}[];
-						name?: string | undefined;
-						description?: string | undefined;
-						title?: string | undefined;
-						links?: {
-							text: string;
-							href: string;
-							id?: string | undefined;
-							linkText?: string | undefined;
-						}[] | undefined;
-						messages?: {
-							type: "error" | "success" | "info" | "warning";
-							text: string;
-							id?: number | undefined;
-						}[] | undefined;
-					};
-					branding?: {
-						colors?: {
-							page_background?: string | {
-								type?: string | undefined;
-								start?: string | undefined;
-								end?: string | undefined;
-								angle_deg?: number | undefined;
-							} | undefined;
-							primary?: string | undefined;
-						} | undefined;
-						logo_url?: string | undefined;
-						favicon_url?: string | undefined;
-						powered_by_logo_url?: string | undefined;
-						font?: {
-							url?: string | undefined;
-						} | undefined;
-					} | undefined;
-				};
-				outputFormat: "json";
-				status: 200;
-			};
-		};
-	} & {
-		"/:screenId": {
-			$post: {
-				input: {
-					param: {
-						screenId: string;
-					};
-				} & {
-					query: {
-						state: string;
-						nodeId?: string | undefined;
-					};
-				} & {
-					json: {
-						data: Record<string, any>;
-					};
-				};
-				output: {};
-				outputFormat: string;
-				status: 400;
-			} | {
-				input: {
-					param: {
-						screenId: string;
-					};
-				} & {
-					query: {
-						state: string;
-						nodeId?: string | undefined;
-					};
-				} & {
-					json: {
-						data: Record<string, any>;
-					};
-				};
-				output: {};
-				outputFormat: string;
-				status: 404;
-			} | {
-				input: {
-					param: {
-						screenId: string;
-					};
-				} & {
-					query: {
-						state: string;
-						nodeId?: string | undefined;
-					};
-				} & {
-					json: {
-						data: Record<string, any>;
-					};
-				};
-				output: {
-					screen: {
-						method: "POST" | "GET";
-						action: string;
-						components: {
-							type: string;
-							id: string;
-							required?: boolean | undefined;
-							order?: number | undefined;
-							category?: string | undefined;
-							config?: {
-								[x: string]: any;
-							} | undefined;
-							messages?: {
-								type: "error" | "success" | "info" | "warning";
-								text: string;
-								id?: number | undefined;
-							}[] | undefined;
-							visible?: boolean | undefined;
-							sensitive?: boolean | undefined;
-							label?: string | undefined;
-							hint?: string | undefined;
-						}[];
-						name?: string | undefined;
-						description?: string | undefined;
-						title?: string | undefined;
-						links?: {
-							text: string;
-							href: string;
-							id?: string | undefined;
-							linkText?: string | undefined;
-						}[] | undefined;
-						messages?: {
-							type: "error" | "success" | "info" | "warning";
-							text: string;
-							id?: number | undefined;
-						}[] | undefined;
-					};
-					branding?: {
-						colors?: {
-							page_background?: string | {
-								type?: string | undefined;
-								start?: string | undefined;
-								end?: string | undefined;
-								angle_deg?: number | undefined;
-							} | undefined;
-							primary?: string | undefined;
-						} | undefined;
-						logo_url?: string | undefined;
-						favicon_url?: string | undefined;
-						powered_by_logo_url?: string | undefined;
-						font?: {
-							url?: string | undefined;
-						} | undefined;
-					} | undefined;
-					screenId?: string | undefined;
-					ceremony?: {
-						options: {
-							user: {
-								name: string;
-								displayName: string;
-								id: string;
-							};
-							rp: {
-								name: string;
-								id: string;
-							};
-							challenge: string;
-							pubKeyCredParams: {
-								type: string;
-								alg: number;
-							}[];
-							timeout?: number | undefined;
-							attestation?: string | undefined;
-							authenticatorSelection?: {
-								residentKey?: string | undefined;
-								userVerification?: string | undefined;
-							} | undefined;
-							excludeCredentials?: {
-								type: string;
-								id: string;
-								transports?: string[] | undefined;
-							}[] | undefined;
-						};
-						type: "webauthn-registration";
-						successAction: string;
-					} | {
-						options: {
-							challenge: string;
-							userVerification?: string | undefined;
-							timeout?: number | undefined;
-							rpId?: string | undefined;
-							allowCredentials?: {
-								type: string;
-								id: string;
-								transports?: string[] | undefined;
-							}[] | undefined;
-						};
-						type: "webauthn-authentication" | "webauthn-authentication-conditional";
-						successAction: string;
-					} | undefined;
-					navigateUrl?: string | undefined;
-				} | {
-					redirect: string;
-				} | {
-					complete: boolean;
-				};
-				outputFormat: "json";
-				status: 200;
-			};
-		};
-	}, "/screen">, "/">;
+	}, "/forms"> & import("hono/types").MergeSchemaPath<{}, "/screen">, "/">;
 	createX509Certificate: typeof createX509Certificate;
 };