authhero 4.90.0 → 4.92.0

package/dist/authhero.d.ts

@@ -42053,6 +42053,33 @@ export declare const hookInsertSchema: z.ZodUnion<[
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
 		hook_id?: string | undefined;
+	}>,
+	z.ZodObject<{
+		trigger_id: z.ZodEnum<[
+			"post-user-login",
+			"credentials-exchange",
+			"pre-user-registration",
+			"post-user-registration"
+		]>;
+		code_id: z.ZodString;
+		enabled: z.ZodDefault<z.ZodBoolean>;
+		synchronous: z.ZodDefault<z.ZodBoolean>;
+		priority: z.ZodOptional<z.ZodNumber>;
+		hook_id: z.ZodOptional<z.ZodString>;
+	}, "strip", z.ZodTypeAny, {
+		code_id: string;
+		enabled: boolean;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		synchronous: boolean;
+		priority?: number | undefined;
+		hook_id?: string | undefined;
+	}, {
+		code_id: string;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		enabled?: boolean | undefined;
+		synchronous?: boolean | undefined;
+		priority?: number | undefined;
+		hook_id?: string | undefined;
 	}>
 ]>;
 export type HookInsert = z.infer<typeof hookInsertSchema>;
@@ -42160,9 +42187,77 @@ export declare const hookSchema: z.ZodUnion<[
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
+	}>,
+	z.ZodObject<{
+		hook_id: z.ZodString;
+		code_id: z.ZodString;
+		created_at: z.ZodString;
+		updated_at: z.ZodString;
+		trigger_id: z.ZodEnum<[
+			"post-user-login",
+			"credentials-exchange",
+			"pre-user-registration",
+			"post-user-registration"
+		]>;
+		enabled: z.ZodDefault<z.ZodBoolean>;
+		synchronous: z.ZodDefault<z.ZodBoolean>;
+		priority: z.ZodOptional<z.ZodNumber>;
+	}, "strip", z.ZodTypeAny, {
+		created_at: string;
+		updated_at: string;
+		code_id: string;
+		enabled: boolean;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		synchronous: boolean;
+		hook_id: string;
+		priority?: number | undefined;
+	}, {
+		created_at: string;
+		updated_at: string;
+		code_id: string;
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+		hook_id: string;
+		enabled?: boolean | undefined;
+		synchronous?: boolean | undefined;
+		priority?: number | undefined;
 	}>
 ]>;
 export type Hook = z.infer<typeof hookSchema>;
+export declare const hookCodeInsertSchema: z.ZodObject<{
+	code: z.ZodString;
+	secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+	code: string;
+	secrets?: Record<string, string> | undefined;
+}, {
+	code: string;
+	secrets?: Record<string, string> | undefined;
+}>;
+export type HookCodeInsert = z.infer<typeof hookCodeInsertSchema>;
+export declare const hookCodeSchema: z.ZodObject<{
+	code: z.ZodString;
+	secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+} & {
+	created_at: z.ZodString;
+	updated_at: z.ZodString;
+	id: z.ZodString;
+	tenant_id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+	code: string;
+	id: string;
+	tenant_id: string;
+	created_at: string;
+	updated_at: string;
+	secrets?: Record<string, string> | undefined;
+}, {
+	code: string;
+	id: string;
+	tenant_id: string;
+	created_at: string;
+	updated_at: string;
+	secrets?: Record<string, string> | undefined;
+}>;
+export type HookCode = z.infer<typeof hookCodeSchema>;
 export declare const profileDataSchema: z.ZodObject<{
 	email: z.ZodOptional<z.ZodString>;
 	email_verified: z.ZodOptional<z.ZodBoolean>;
@@ -48521,6 +48616,12 @@ export interface HooksAdapter {
 	update: (tenant_id: string, hook_id: string, hook: Partial<HookInsert>) => Promise<boolean>;
 	list: (tenant_id: string, params?: ListParams) => Promise<ListHooksResponse>;
 }
+export interface HookCodeAdapter {
+	create: (tenant_id: string, hookCode: HookCodeInsert) => Promise<HookCode>;
+	get: (tenant_id: string, id: string) => Promise<HookCode | null>;
+	update: (tenant_id: string, id: string, hookCode: Partial<HookCodeInsert>) => Promise<boolean>;
+	remove: (tenant_id: string, id: string) => Promise<boolean>;
+}
 export interface ThemesAdapter {
 	create: (tenant_id: string, theme: ThemeInsert, themeId?: string) => Promise<Theme>;
 	remove: (tenant_id: string, themeId: string) => Promise<boolean>;
@@ -48766,6 +48867,43 @@ export interface OutboxAdapter {
 	/** Delete processed events older than the given ISO date. Returns count deleted. */
 	cleanup(olderThan: string): Promise<number>;
 }
+export interface CodeExecutionResult {
+	success: boolean;
+	error?: string;
+	durationMs: number;
+	apiCalls: Array<{
+		method: string;
+		args: unknown[];
+	}>;
+}
+export interface CodeExecutor {
+	execute(params: {
+		code: string;
+		hookCodeId?: string;
+		triggerId: string;
+		event: Record<string, unknown>;
+		/** Wall-clock timeout for the entire execution (ms). */
+		timeoutMs?: number;
+		/**
+		 * CPU-time limit (ms) for runtimes that distinguish CPU time from
+		 * wall-clock time (e.g. Cloudflare Workers for Platforms).
+		 * Ignored by executors that do not support CPU-time limits.
+		 */
+		cpuLimitMs?: number;
+	}): Promise<CodeExecutionResult>;
+	/**
+	 * Deploy user code to the execution environment.
+	 * Called when hook code is created or updated.
+	 * Optional — LocalCodeExecutor does not need this.
+	 */
+	deploy?(hookCodeId: string, code: string): Promise<void>;
+	/**
+	 * Remove user code from the execution environment.
+	 * Called when hook code is deleted.
+	 * Optional — LocalCodeExecutor does not need this.
+	 */
+	remove?(hookCodeId: string): Promise<void>;
+}
 /**
  * Parameters for cleaning up expired sessions
  */
@@ -48788,6 +48926,7 @@ export interface DataAdapters {
 	flows: FlowsAdapter;
 	forms: FormsAdapter;
 	geo?: GeoAdapter;
+	hookCode: HookCodeAdapter;
 	hooks: HooksAdapter;
 	invites: InvitesAdapter;
 	keys: KeysAdapter;
@@ -51542,6 +51681,19 @@ export interface AuthHeroConfig {
 		/** Optional height in pixels (default: 20) */
 		height?: number;
 	};
+	/**
+	 * Code executor for user-authored code hooks.
+	 *
+	 * When provided, code hooks stored in the database will be executed
+	 * using this executor at auth flow trigger points.
+	 *
+	 * Available implementations:
+	 * - `LocalCodeExecutor` — uses `new Function()`, suitable for local dev only
+	 * - Custom implementations for isolated-vm, Cloudflare Workers for Platforms, etc.
+	 *
+	 * If not provided, code hooks are silently skipped.
+	 */
+	codeExecutor?: CodeExecutor;
 	/**
 	 * Custom webhook invoker function.
 	 *
@@ -51648,6 +51800,7 @@ export type Bindings = {
 		href?: string;
 		height?: number;
 	};
+	codeExecutor?: CodeExecutor;
 	webhookInvoker?: WebhookInvoker;
 	outbox?: OutboxConfig;
 };
@@ -52223,6 +52376,18 @@ export interface EnsureUsernameOptions {
 }
 declare function ensureUsername(options?: EnsureUsernameOptions): OnExecutePostLogin;
 declare function setPreferredUsername(): OnExecuteCredentialsExchange;
+/**
+ * Local code executor using `new Function()`.
+ * Suitable for local development only — no isolation or sandboxing.
+ */
+export declare class LocalCodeExecutor implements CodeExecutor {
+	execute(params: {
+		code: string;
+		triggerId: string;
+		event: Record<string, unknown>;
+		timeoutMs?: number;
+	}): Promise<CodeExecutionResult>;
+}
 export declare function init(config: AuthHeroConfig): {
 	app: OpenAPIHono<{
 		Bindings: Bindings;
@@ -59590,6 +59755,142 @@ export declare function init(config: AuthHeroConfig): {
 			};
 		};
 	}, "/connections"> & import("hono/types").MergeSchemaPath<{
+		"/": {
+			$post: {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						code: string;
+						secrets?: Record<string, string> | undefined;
+					};
+				};
+				output: {
+					code: string;
+					created_at: string;
+					updated_at: string;
+					tenant_id: string;
+					id: string;
+					deploymentStatus: "deployed" | "failed" | "not_required";
+					deploymentError?: string | undefined;
+					secrets?: {
+						[x: string]: string;
+					} | undefined;
+				};
+				outputFormat: "json";
+				status: 201;
+			};
+		};
+	} & {
+		"/:id": {
+			$get: {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 404;
+			} | {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {
+					code: string;
+					id: string;
+					tenant_id: string;
+					created_at: string;
+					updated_at: string;
+					secrets?: {
+						[x: string]: string;
+					} | undefined;
+				};
+				outputFormat: "json";
+				status: 200;
+			};
+		};
+	} & {
+		"/:id": {
+			$put: {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						code: string;
+						secrets?: Record<string, string> | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 404;
+			} | {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						code: string;
+						secrets?: Record<string, string> | undefined;
+					};
+				};
+				output: {
+					code: string;
+					created_at: string;
+					updated_at: string;
+					tenant_id: string;
+					id: string;
+					deploymentStatus: "deployed" | "failed" | "not_required";
+					deploymentError?: string | undefined;
+					secrets?: {
+						[x: string]: string;
+					} | undefined;
+				};
+				outputFormat: "json";
+				status: 200;
+			};
+		};
+	} & {
+		"/:id": {
+			$delete: {
+				input: {
+					param: {
+						id: string;
+					};
+				} & {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 200;
+			};
+		};
+	}, "/hook-code"> & import("hono/types").MergeSchemaPath<{
 		"/": {
 			$get: {
 				input: {
@@ -59634,6 +59935,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				})[] | {
 					length: number;
 					start: number;
@@ -59665,6 +59975,15 @@ export declare function init(config: AuthHeroConfig): {
 						hook_id: string;
 						template_id: "ensure-username" | "set-preferred-username";
 						priority?: number | undefined | undefined;
+					} | {
+						created_at: string;
+						updated_at: string;
+						code_id: string;
+						enabled: boolean;
+						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+						synchronous: boolean;
+						hook_id: string;
+						priority?: number | undefined | undefined;
 					})[];
 					total?: number | undefined;
 				};
@@ -59701,6 +60020,13 @@ export declare function init(config: AuthHeroConfig): {
 						synchronous?: boolean | undefined;
 						priority?: number | undefined;
 						hook_id?: string | undefined;
+					} | {
+						code_id: string;
+						trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+						enabled?: boolean | undefined;
+						synchronous?: boolean | undefined;
+						priority?: number | undefined;
+						hook_id?: string | undefined;
 					};
 				};
 				output: {
@@ -59730,6 +60056,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 201;
@@ -59791,6 +60126,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -59848,6 +60192,15 @@ export declare function init(config: AuthHeroConfig): {
 					hook_id: string;
 					template_id: "ensure-username" | "set-preferred-username";
 					priority?: number | undefined | undefined;
+				} | {
+					created_at: string;
+					updated_at: string;
+					code_id: string;
+					enabled: boolean;
+					trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+					synchronous: boolean;
+					hook_id: string;
+					priority?: number | undefined | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -62876,8 +63229,8 @@ export declare function init(config: AuthHeroConfig): {
 						scope?: string | undefined;
 						error?: string | undefined;
 						error_description?: string | undefined;
-						hd?: string | undefined;
 						error_code?: string | undefined;
+						hd?: string | undefined;
 						error_reason?: string | undefined;
 					};
 				};
@@ -62892,8 +63245,8 @@ export declare function init(config: AuthHeroConfig): {
 						scope?: string | undefined;
 						error?: string | undefined;
 						error_description?: string | undefined;
-						hd?: string | undefined;
 						error_code?: string | undefined;
+						hd?: string | undefined;
 						error_reason?: string | undefined;
 					};
 				};
@@ -62910,8 +63263,8 @@ export declare function init(config: AuthHeroConfig): {
 						scope?: string | undefined;
 						error?: string | undefined;
 						error_description?: string | undefined;
-						hd?: string | undefined;
 						error_code?: string | undefined;
+						hd?: string | undefined;
 						error_reason?: string | undefined;
 					};
 				};
@@ -62932,8 +63285,8 @@ export declare function init(config: AuthHeroConfig): {
 						scope?: string | undefined;
 						error?: string | undefined;
 						error_description?: string | undefined;
-						hd?: string | undefined;
 						error_code?: string | undefined;
+						hd?: string | undefined;
 						error_reason?: string | undefined;
 					};
 				};
@@ -62948,8 +63301,8 @@ export declare function init(config: AuthHeroConfig): {
 						scope?: string | undefined;
 						error?: string | undefined;
 						error_description?: string | undefined;
-						hd?: string | undefined;
 						error_code?: string | undefined;
+						hd?: string | undefined;
 						error_reason?: string | undefined;
 					};
 				};
@@ -62966,8 +63319,8 @@ export declare function init(config: AuthHeroConfig): {
 						scope?: string | undefined;
 						error?: string | undefined;
 						error_description?: string | undefined;
-						hd?: string | undefined;
 						error_code?: string | undefined;
+						hd?: string | undefined;
 						error_reason?: string | undefined;
 					};
 				};