authhero 8.14.0 → 8.15.0

package/dist/authhero.d.ts

@@ -1,6 +1,6 @@
 import * as hono_utils_types from 'hono/utils/types';
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, CustomDomain, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, HooksAdapter, LogsDataAdapter, LogInsert, UserDataAdapter, CustomDomainsAdapter, ProxyRoutesAdapter, ListParams, KeysAdapter, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, CustomDomain, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, HooksAdapter, LogsDataAdapter, LogInsert, UserDataAdapter, CustomDomainsAdapter, ProxyRoutesAdapter, ListParams, KeysAdapter, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_types from 'hono/types';
 import * as hono_utils_http_status from 'hono/utils/http-status';
@@ -1008,6 +1008,21 @@ interface ManagementApiExtension {
      */
     router: OpenAPIHono<any, any, any>;
 }
+/**
+ * Enqueues a durable tenant lifecycle operation (issue #1026): creates
+ * the `tenant_operations` row and starts execution on the configured
+ * engine. The inline engine resolves with a terminal row; durable engines
+ * resolve as soon as the run is enqueued — clients poll
+ * `GET /api/v2/operations/{id}`.
+ */
+interface TenantOperationExecutorBinding {
+    engine: string;
+    enqueue(params: {
+        kind: TenantOperationKind;
+        tenant_id: string | null;
+        initiated_by?: string;
+    }): Promise<TenantOperation>;
+}
 /**
  * Configuration for the transactional outbox pattern.
  * When enabled, audit events are written atomically with entity mutations
@@ -1289,6 +1304,16 @@ interface AuthHeroConfig {
      * ```
      */
     tenantUpgrade?: (tenantId: string) => Promise<void>;
+    /**
+     * Optional executor for durable tenant lifecycle operations (issue
+     * #1026). When set together with the `tenantOperations` /
+     * `tenantOperationEvents` adapters, `POST /api/v2/tenants/{id}/operations`
+     * enqueues operations through it. Kept structural so authhero core
+     * depends on neither `@authhero/multi-tenancy` nor any engine —
+     * `@authhero/multi-tenancy`'s `enqueueTenantOperation` + executors
+     * satisfy this shape.
+     */
+    tenantOperationExecutor?: TenantOperationExecutorBinding;
     /**
      * Optional powered-by logo to display at the bottom left of the login widget.
      * This is only configurable in code, not stored in the database.
@@ -1554,6 +1579,7 @@ type Bindings = {
     codeExecutor?: CodeExecutor;
     webhookInvoker?: WebhookInvoker;
     tenantUpgrade?: (tenantId: string) => Promise<void>;
+    tenantOperationExecutor?: TenantOperationExecutorBinding;
     outbox?: OutboxConfig;
     userLinkingMode?: UserLinkingModeOption;
     usernamePasswordProvider?: UsernamePasswordProviderResolver;
@@ -19755,4 +19781,4 @@ declare function init(config: AuthHeroConfig): {
 };
 
 export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_SYNC_EVENT_PREFIX, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, ControlPlaneSyncDestination, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, createApplySyncEvents, createAuthMiddleware, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wrapProxyAdaptersWithKvPublish };
-export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, EncryptKeyIdResolver, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WrappedProxyAdapters };
+export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, EncryptKeyIdResolver, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantOperationExecutorBinding, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WrappedProxyAdapters };