kitcn 0.12.11 → 0.12.12

package/dist/aggregate/index.d.ts

@@ -1,4 +1,4 @@
-import { C as ConvexNumberBuilderInitial, E as ConvexIdBuilderInitial, N as ConvexCustomBuilderInitial, dn as ConvexTableWithColumns, tr as ConvexTextBuilderInitial } from "../where-clause-compiler-DJ2S06w0.js";
+import { C as ConvexNumberBuilderInitial, E as ConvexIdBuilderInitial, N as ConvexCustomBuilderInitial, dn as ConvexTableWithColumns, tr as ConvexTextBuilderInitial } from "../where-clause-compiler-BpfS2FJi.js";
 import * as convex_values0 from "convex/values";
 import { GenericId, Infer, Value } from "convex/values";
 import { DocumentByName, GenericDataModel, GenericDatabaseReader, GenericDatabaseWriter, TableNamesInDataModel } from "convex/server";

package/dist/auth/generated/index.d.ts

@@ -1,2 +1,2 @@
-import { S as defineAuth, _ as GenericAuthBeforeResult, b as GenericAuthTriggerHandlers, g as BetterAuthOptionsWithoutDatabase, i as getGeneratedAuthDisabledReason, n as GeneratedAuthDisabledReasonKind, r as createDisabledAuthRuntime, t as AuthRuntime, v as GenericAuthDefinition, x as GenericAuthTriggers, y as GenericAuthTriggerChange } from "../../generated-contract-disabled-Cf7sqlVD.js";
+import { S as defineAuth, _ as GenericAuthBeforeResult, b as GenericAuthTriggerHandlers, g as BetterAuthOptionsWithoutDatabase, i as getGeneratedAuthDisabledReason, n as GeneratedAuthDisabledReasonKind, r as createDisabledAuthRuntime, t as AuthRuntime, v as GenericAuthDefinition, x as GenericAuthTriggers, y as GenericAuthTriggerChange } from "../../generated-contract-disabled-9Yg1NHlV.js";
 export { type AuthRuntime, BetterAuthOptionsWithoutDatabase, type GeneratedAuthDisabledReasonKind, GenericAuthBeforeResult, GenericAuthDefinition, GenericAuthTriggerChange, GenericAuthTriggerHandlers, GenericAuthTriggers, createDisabledAuthRuntime, defineAuth, getGeneratedAuthDisabledReason };

package/dist/auth/index.d.ts

@@ -1,7 +1,7 @@
 import { a as QueryCtxWithPreferredOrmQueryTable, n as LookupByIdResultByCtx, t as DocByCtx } from "../query-context-CFZqIvD7.js";
 import { t as GetAuth } from "../types-BiJE7qxR.js";
 import { t as GenericCtx } from "../context-utils-HPC5nXzx.js";
-import { S as defineAuth, _ as GenericAuthBeforeResult, a as AuthFunctions, b as GenericAuthTriggerHandlers, c as createApi, d as deleteOneHandler, f as findManyHandler, g as BetterAuthOptionsWithoutDatabase, h as updateOneHandler, i as getGeneratedAuthDisabledReason, l as createHandler, m as updateManyHandler, n as GeneratedAuthDisabledReasonKind, o as Triggers, p as findOneHandler, r as createDisabledAuthRuntime, s as createClient, t as AuthRuntime, u as deleteManyHandler, v as GenericAuthDefinition, x as GenericAuthTriggers, y as GenericAuthTriggerChange } from "../generated-contract-disabled-Cf7sqlVD.js";
+import { S as defineAuth, _ as GenericAuthBeforeResult, a as AuthFunctions, b as GenericAuthTriggerHandlers, c as createApi, d as deleteOneHandler, f as findManyHandler, g as BetterAuthOptionsWithoutDatabase, h as updateOneHandler, i as getGeneratedAuthDisabledReason, l as createHandler, m as updateManyHandler, n as GeneratedAuthDisabledReasonKind, o as Triggers, p as findOneHandler, r as createDisabledAuthRuntime, s as createClient, t as AuthRuntime, u as deleteManyHandler, v as GenericAuthDefinition, x as GenericAuthTriggers, y as GenericAuthTriggerChange } from "../generated-contract-disabled-9Yg1NHlV.js";
 import * as convex_values0 from "convex/values";
 import { Infer } from "convex/values";
 import { DocumentByName, GenericDataModel, GenericMutationCtx, GenericQueryCtx, GenericSchema, PaginationOptions, PaginationResult, SchemaDefinition, TableNamesInDataModel } from "convex/server";
@@ -124,8 +124,8 @@ declare const adapterArgsValidator: convex_values0.VObject<{
   select?: string[] | undefined;
   offset?: number | undefined;
   sortBy?: {
-    direction: "asc" | "desc";
     field: string;
+    direction: "asc" | "desc";
   } | undefined;
   model: string;
 }, {
@@ -134,12 +134,12 @@ declare const adapterArgsValidator: convex_values0.VObject<{
   offset: convex_values0.VFloat64<number | undefined, "optional">;
   select: convex_values0.VArray<string[] | undefined, convex_values0.VString<string, "required">, "optional">;
   sortBy: convex_values0.VObject<{
-    direction: "asc" | "desc";
     field: string;
+    direction: "asc" | "desc";
   } | undefined, {
     direction: convex_values0.VUnion<"asc" | "desc", [convex_values0.VLiteral<"asc", "required">, convex_values0.VLiteral<"desc", "required">], "required", never>;
     field: convex_values0.VString<string, "required">;
-  }, "optional", "direction" | "field">;
+  }, "optional", "field" | "direction">;
   where: convex_values0.VArray<{
     operator?: "eq" | "ne" | "lt" | "lte" | "gt" | "gte" | "in" | "not_in" | "contains" | "starts_with" | "ends_with" | undefined;
     connector?: "AND" | "OR" | undefined;
@@ -156,7 +156,7 @@ declare const adapterArgsValidator: convex_values0.VObject<{
     operator: convex_values0.VUnion<"eq" | "ne" | "lt" | "lte" | "gt" | "gte" | "in" | "not_in" | "contains" | "starts_with" | "ends_with" | undefined, [convex_values0.VLiteral<"lt", "required">, convex_values0.VLiteral<"lte", "required">, convex_values0.VLiteral<"gt", "required">, convex_values0.VLiteral<"gte", "required">, convex_values0.VLiteral<"eq", "required">, convex_values0.VLiteral<"in", "required">, convex_values0.VLiteral<"not_in", "required">, convex_values0.VLiteral<"ne", "required">, convex_values0.VLiteral<"contains", "required">, convex_values0.VLiteral<"starts_with", "required">, convex_values0.VLiteral<"ends_with", "required">], "optional", never>;
     value: convex_values0.VUnion<string | number | boolean | string[] | number[] | null, [convex_values0.VString<string, "required">, convex_values0.VFloat64<number, "required">, convex_values0.VBoolean<boolean, "required">, convex_values0.VArray<string[], convex_values0.VString<string, "required">, "required">, convex_values0.VArray<number[], convex_values0.VFloat64<number, "required">, "required">, convex_values0.VNull<null, "required">], "required", never>;
   }, "required", "value" | "operator" | "field" | "connector">, "optional">;
-}, "required", "limit" | "where" | "model" | "select" | "offset" | "sortBy" | "sortBy.direction" | "sortBy.field">;
+}, "required", "limit" | "where" | "model" | "select" | "offset" | "sortBy" | "sortBy.field" | "sortBy.direction">;
 declare const hasUniqueFields: (betterAuthSchema: BetterAuthDBSchema, model: string, input: Record<string, any>) => boolean;
 declare const checkUniqueFields: <Schema extends SchemaDefinition<any, any>>(ctx: GenericQueryCtx<GenericDataModel>, schema: Schema, betterAuthSchema: BetterAuthDBSchema, table: string, input: Record<string, any>, doc?: Record<string, any>) => Promise<void>;
 declare const selectFields: <T extends TableNamesInDataModel<GenericDataModel>, D extends DocumentByName<GenericDataModel, T>>(doc: D | null, select?: string[]) => D | null;

package/dist/{backend-core-DUsUG58E.mjs → backend-core-Cf6h5gQc.mjs}

@@ -14926,4 +14926,4 @@ function isEntryPoint(entry, filename) {
 }
 
 //#endregion
-export { resolvePresetScaffoldTemplates as $, resolveDocTopic as A, runDevSchemaBackfillIfNeeded as B, isInitialized as C, highlighter as Ct, resolveBackfillConfig as D, readPackageVersions as E, runAggregateBackfillFlow as F, withWorkingDirectory as G, runMigrationCreate as H, runAggregatePruneFlow as I, filterScaffoldTemplatePathMap as J, createSpinner as K, runBackendFunction as L, resolveMigrationConfig as M, resolveRunDeps as N, resolveCodegenTrimSegments as O, runAfterScaffoldScript as P, resolvePluginPreset as Q, runConfiguredCodegen as R, isEntryPoint as S, logger as St, parseInitCommandArgs as T, runMigrationFlow as U, runInitCommandFlow as V, trackProcess as W, promptForScaffoldTemplateSelection as X, promptForPluginSelection as Y, resolveAddTemplateDefaults as Z, formatInfoOutput as _, resolveProjectScaffoldContext as _t, cleanup as a, buildPluginInstallPlan as at, hasRemoteConvexDeploymentEnv as b, generateMeta as bt, createCommandEnv as c, collectInstalledPluginKeys as ct, extractBackfillCliOptions as d, readPluginLockfile as dt, resolveTemplateSelectionSource as et, extractConcaveRunTargetArgs as f, resolveSchemaInstalledPlugins as ft, formatDocsOutput as g, inspectPluginDependencyInstall as gt, extractResetCliOptions as h, applyPluginDependencyInstall as ht, buildInitializationPlan as i, isSupportedPluginKey as it, resolveInitProjectDir as j, resolveConfiguredBackend as k, ensureConvexGitignoreEntry as l, getPluginLockfilePath as lt, extractMigrationDownOptions as m, applyPlanningDependencyInstall as mt, applyPluginInstallPlanFiles as n, getPluginCatalogEntry as nt, createBackendAdapter as o, resolvePluginScaffoldRoots as ot, extractMigrationCliOptions as p, applyDependencyHintsInstall as pt, collectPluginScaffoldTemplates as q, assertNoRemovedDevPreRunFlag as r, getSupportedPluginKeys as rt, createBackendCommandEnv as s, assertSchemaFileExists as st, applyDependencyInstallPlan as t, resolveTemplatesByIdOrThrow as tt, extractBackendRunTargetArgs as u, getSchemaFilePath as ut, getAggregateBackfillDeploymentKey as v, resolveAuthEnvState as vt, parseArgs as w, isConvexDevPreRunConflictFlag as x, getConvexConfig as xt, getDevAggregateBackfillStatePath as y, stripConvexCommandNoise as yt, runConvexInitIfNeeded as z };
+export { resolvePluginPreset as $, resolveConfiguredBackend as A, runConvexInitIfNeeded as B, isInitialized as C, getConvexConfig as Ct, readPackageVersions as D, parseInitCommandArgs as E, runAfterScaffoldScript as F, trackProcess as G, runInitCommandFlow as H, runAggregateBackfillFlow as I, collectPluginScaffoldTemplates as J, withWorkingDirectory as K, runAggregatePruneFlow as L, resolveInitProjectDir as M, resolveMigrationConfig as N, resolveBackfillConfig as O, resolveRunDeps as P, resolveAddTemplateDefaults as Q, runBackendFunction as R, isEntryPoint as S, generateMeta as St, parseBackendRunJson as T, highlighter as Tt, runMigrationCreate as U, runDevSchemaBackfillIfNeeded as V, runMigrationFlow as W, promptForPluginSelection as X, filterScaffoldTemplatePathMap as Y, promptForScaffoldTemplateSelection as Z, formatInfoOutput as _, inspectPluginDependencyInstall as _t, cleanup as a, isSupportedPluginKey as at, hasRemoteConvexDeploymentEnv as b, serializeEnvValue as bt, createCommandEnv as c, assertSchemaFileExists as ct, extractBackfillCliOptions as d, getSchemaFilePath as dt, resolvePresetScaffoldTemplates as et, extractConcaveRunTargetArgs as f, readPluginLockfile as ft, formatDocsOutput as g, applyPluginDependencyInstall as gt, extractResetCliOptions as h, applyPlanningDependencyInstall as ht, buildInitializationPlan as i, getSupportedPluginKeys as it, resolveDocTopic as j, resolveCodegenTrimSegments as k, ensureConvexGitignoreEntry as l, collectInstalledPluginKeys as lt, extractMigrationDownOptions as m, applyDependencyHintsInstall as mt, applyPluginInstallPlanFiles as n, resolveTemplatesByIdOrThrow as nt, createBackendAdapter as o, buildPluginInstallPlan as ot, extractMigrationCliOptions as p, resolveSchemaInstalledPlugins as pt, createSpinner as q, assertNoRemovedDevPreRunFlag as r, getPluginCatalogEntry as rt, createBackendCommandEnv as s, resolvePluginScaffoldRoots as st, applyDependencyInstallPlan as t, resolveTemplateSelectionSource as tt, extractBackendRunTargetArgs as u, getPluginLockfilePath as ut, getAggregateBackfillDeploymentKey as v, resolveProjectScaffoldContext as vt, parseArgs as w, logger as wt, isConvexDevPreRunConflictFlag as x, stripConvexCommandNoise as xt, getDevAggregateBackfillStatePath as y, resolveAuthEnvState as yt, runConfiguredCodegen as z };

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as resolvePresetScaffoldTemplates, A as resolveDocTopic, B as runDevSchemaBackfillIfNeeded, C as isInitialized, Ct as highlighter, D as resolveBackfillConfig, E as readPackageVersions, F as runAggregateBackfillFlow, G as withWorkingDirectory, H as runMigrationCreate, I as runAggregatePruneFlow, J as filterScaffoldTemplatePathMap, K as createSpinner, L as runBackendFunction, M as resolveMigrationConfig, N as resolveRunDeps, O as resolveCodegenTrimSegments, P as runAfterScaffoldScript, Q as resolvePluginPreset, R as runConfiguredCodegen, S as isEntryPoint, St as logger, T as parseInitCommandArgs, U as runMigrationFlow, V as runInitCommandFlow, W as trackProcess, X as promptForScaffoldTemplateSelection, Y as promptForPluginSelection, Z as resolveAddTemplateDefaults, _ as formatInfoOutput, _t as resolveProjectScaffoldContext, a as cleanup, at as buildPluginInstallPlan, b as hasRemoteConvexDeploymentEnv, c as createCommandEnv, ct as collectInstalledPluginKeys, d as extractBackfillCliOptions, dt as readPluginLockfile, et as resolveTemplateSelectionSource, f as extractConcaveRunTargetArgs, ft as resolveSchemaInstalledPlugins, g as formatDocsOutput, gt as inspectPluginDependencyInstall, h as extractResetCliOptions, ht as applyPluginDependencyInstall, i as buildInitializationPlan, it as isSupportedPluginKey, j as resolveInitProjectDir, k as resolveConfiguredBackend, l as ensureConvexGitignoreEntry, lt as getPluginLockfilePath, m as extractMigrationDownOptions, mt as applyPlanningDependencyInstall, n as applyPluginInstallPlanFiles, nt as getPluginCatalogEntry, o as createBackendAdapter, ot as resolvePluginScaffoldRoots, p as extractMigrationCliOptions, pt as applyDependencyHintsInstall, q as collectPluginScaffoldTemplates, r as assertNoRemovedDevPreRunFlag, rt as getSupportedPluginKeys, s as createBackendCommandEnv, st as assertSchemaFileExists, t as applyDependencyInstallPlan, tt as resolveTemplatesByIdOrThrow, u as extractBackendRunTargetArgs, ut as getSchemaFilePath, v as getAggregateBackfillDeploymentKey, vt as resolveAuthEnvState, w as parseArgs, x as isConvexDevPreRunConflictFlag, y as getDevAggregateBackfillStatePath, yt as stripConvexCommandNoise, z as runConvexInitIfNeeded } from "./backend-core-DUsUG58E.mjs";
+import { $ as resolvePluginPreset, A as resolveConfiguredBackend, B as runConvexInitIfNeeded, C as isInitialized, D as readPackageVersions, E as parseInitCommandArgs, F as runAfterScaffoldScript, G as trackProcess, H as runInitCommandFlow, I as runAggregateBackfillFlow, J as collectPluginScaffoldTemplates, K as withWorkingDirectory, L as runAggregatePruneFlow, M as resolveInitProjectDir, N as resolveMigrationConfig, O as resolveBackfillConfig, P as resolveRunDeps, Q as resolveAddTemplateDefaults, R as runBackendFunction, S as isEntryPoint, T as parseBackendRunJson, Tt as highlighter, U as runMigrationCreate, V as runDevSchemaBackfillIfNeeded, W as runMigrationFlow, X as promptForPluginSelection, Y as filterScaffoldTemplatePathMap, Z as promptForScaffoldTemplateSelection, _ as formatInfoOutput, _t as inspectPluginDependencyInstall, a as cleanup, at as isSupportedPluginKey, b as hasRemoteConvexDeploymentEnv, bt as serializeEnvValue, c as createCommandEnv, ct as assertSchemaFileExists, d as extractBackfillCliOptions, dt as getSchemaFilePath, et as resolvePresetScaffoldTemplates, f as extractConcaveRunTargetArgs, ft as readPluginLockfile, g as formatDocsOutput, gt as applyPluginDependencyInstall, h as extractResetCliOptions, ht as applyPlanningDependencyInstall, i as buildInitializationPlan, it as getSupportedPluginKeys, j as resolveDocTopic, k as resolveCodegenTrimSegments, l as ensureConvexGitignoreEntry, lt as collectInstalledPluginKeys, m as extractMigrationDownOptions, mt as applyDependencyHintsInstall, n as applyPluginInstallPlanFiles, nt as resolveTemplatesByIdOrThrow, o as createBackendAdapter, ot as buildPluginInstallPlan, p as extractMigrationCliOptions, pt as resolveSchemaInstalledPlugins, q as createSpinner, r as assertNoRemovedDevPreRunFlag, rt as getPluginCatalogEntry, s as createBackendCommandEnv, st as resolvePluginScaffoldRoots, t as applyDependencyInstallPlan, tt as resolveTemplateSelectionSource, u as extractBackendRunTargetArgs, ut as getPluginLockfilePath, v as getAggregateBackfillDeploymentKey, vt as resolveProjectScaffoldContext, w as parseArgs, wt as logger, x as isConvexDevPreRunConflictFlag, xt as stripConvexCommandNoise, y as getDevAggregateBackfillStatePath, yt as resolveAuthEnvState, z as runConfiguredCodegen } from "./backend-core-Cf6h5gQc.mjs";
 import fs, { existsSync, readFileSync } from "node:fs";
 import path, { delimiter, dirname, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -322,7 +322,7 @@ const serializeDryRunPlan = (plan) => {
 //#region src/cli/commands/dev.ts
 const __filename$1 = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename$1);
-const HELP_FLAGS$10 = new Set(["--help", "-h"]);
+const HELP_FLAGS$11 = new Set(["--help", "-h"]);
 const LOCAL_CONCAVE_HOST = "127.0.0.1";
 const LOCAL_CONCAVE_DEV_PORT = 3210;
 const LOCAL_CONCAVE_SITE_PORT = 3211;
@@ -851,7 +851,7 @@ Options:
   --no-migrations-wait    Skip waiting for migration completion`;
 const handleDevCommand = async (argv, deps) => {
 	const parsed = parseArgs(argv);
-	if (HELP_FLAGS$10.has(argv[0] ?? "") || HELP_FLAGS$10.has(parsed.restArgs[0] ?? "")) {
+	if (HELP_FLAGS$11.has(argv[0] ?? "") || HELP_FLAGS$11.has(parsed.restArgs[0] ?? "")) {
 		logger.write(DEV_HELP_TEXT);
 		return 0;
 	}
@@ -1169,7 +1169,7 @@ const handleDevCommand = async (argv, deps) => {
 
 //#endregion
 //#region src/cli/commands/add.ts
-const HELP_FLAGS$9 = new Set(["--help", "-h"]);
+const HELP_FLAGS$10 = new Set(["--help", "-h"]);
 const RAW_CONVEX_AUTH_PRESET = "convex";
 const AUTH_SCHEMA_ONLY_SCOPE = "schema";
 const AUTH_SCHEMA_FLAG = "--schema";
@@ -1340,7 +1340,7 @@ const assertRawConvexAuthDeploymentReady = () => {
 };
 const handleAddCommand = async (argv, deps = {}) => {
 	const parsed = parseArgs(argv);
-	if (HELP_FLAGS$9.has(argv[0] ?? "") || HELP_FLAGS$9.has(parsed.restArgs[0] ?? "")) {
+	if (HELP_FLAGS$10.has(argv[0] ?? "") || HELP_FLAGS$10.has(parsed.restArgs[0] ?? "")) {
 		logger.write(ADD_HELP_TEXT);
 		return 0;
 	}
@@ -1599,6 +1599,102 @@ const handleAnalyzeCommand = async (argv, deps = {}) => {
 	return runAnalyze(parsed.restArgs);
 };
 
+//#endregion
+//#region src/cli/commands/auth.ts
+const HELP_FLAGS$9 = new Set(["--help", "-h"]);
+const AUTH_JWKS_FUNCTION = "generated/auth:getLatestJwks";
+const AUTH_ROTATE_KEYS_FUNCTION = "generated/auth:rotateKeys";
+const AUTH_HELP_TEXT = `Usage: kitcn auth jwks [options]
+
+Commands:
+  jwks                       Print a manual JWKS env payload from the auth runtime
+
+Options:
+  --rotate                   Rotate auth keys before fetching JWKS
+  --json                     Machine-readable output
+
+Target options:
+  Convex:  --prod --deployment-name <name> --preview-name <name> --env-file <path> --component <name>
+  Concave: --url <url> --port <port> --component <name>`;
+const parseAuthCommandArgs = (args) => {
+	const subcommand = args[0];
+	if (!subcommand) throw new Error("Missing auth command. Usage: `kitcn auth jwks`.");
+	if (subcommand !== "jwks") throw new Error(`Unknown auth command "${subcommand}". Supported commands: jwks.`);
+	let json = false;
+	let rotate = false;
+	const targetRemainder = [];
+	for (const arg of args.slice(1)) {
+		if (arg === "--json") {
+			json = true;
+			continue;
+		}
+		if (arg === "--rotate") {
+			rotate = true;
+			continue;
+		}
+		targetRemainder.push(arg);
+	}
+	return {
+		json,
+		rotate,
+		subcommand,
+		targetRemainder
+	};
+};
+const formatRelativePath = (cwd, filePath) => path.relative(cwd, filePath).replaceAll("\\", "/") || ".";
+const assertAuthRuntimeReady = (sharedDir) => {
+	const cwd = process.cwd();
+	const authState = resolveAuthEnvState({
+		cwd,
+		sharedDir
+	});
+	if (!authState.installed) throw new Error(`Auth JWKS export requires auth scaffold at ${formatRelativePath(cwd, authState.definitionPath)}. Install auth first.`);
+	if (!authState.runtimeReady) throw new Error(`Auth JWKS export requires generated auth runtime at ${formatRelativePath(cwd, authState.generatedPath)}. Run \`kitcn codegen\` or \`kitcn dev --bootstrap\` first.`);
+};
+const parseRunValue = (stdout) => {
+	const parsed = parseBackendRunJson(stdout);
+	return typeof parsed === "string" ? parsed : JSON.stringify(parsed);
+};
+const handleAuthCommand = async (argv, deps = {}) => {
+	const parsed = parseArgs(argv);
+	if (argv.length === 0 || HELP_FLAGS$9.has(argv[0] ?? "") || parsed.restArgs.length === 0 || parsed.restArgs.some((arg) => HELP_FLAGS$9.has(arg))) {
+		logger.write(AUTH_HELP_TEXT);
+		return 0;
+	}
+	const authArgs = parseAuthCommandArgs(parsed.restArgs);
+	const { execa: execaFn, loadCliConfig: loadCliConfigFn, realConcave: realConcavePath, realConvex: realConvexPath } = resolveRunDeps(deps);
+	const config = loadCliConfigFn(parsed.configPath);
+	const backend = resolveConfiguredBackend({
+		backendArg: parsed.backend,
+		config
+	});
+	const backendAdapter = createBackendAdapter({
+		backend,
+		realConvexPath,
+		realConcavePath
+	});
+	assertAuthRuntimeReady(parsed.sharedDir ?? config.paths.shared);
+	const targetArgs = extractBackendRunTargetArgs(backend, authArgs.targetRemainder);
+	if (authArgs.rotate) {
+		const rotateResult = await runBackendFunction(execaFn, backendAdapter, AUTH_ROTATE_KEYS_FUNCTION, {}, targetArgs, { echoOutput: false });
+		if (rotateResult.exitCode !== 0) return rotateResult.exitCode;
+	}
+	const jwksResult = await runBackendFunction(execaFn, backendAdapter, AUTH_JWKS_FUNCTION, {}, targetArgs, { echoOutput: false });
+	if (jwksResult.exitCode !== 0) return jwksResult.exitCode;
+	const jwks = parseRunValue(jwksResult.stdout);
+	const envLine = `JWKS=${serializeEnvValue(jwks)}`;
+	if (authArgs.json) console.info(JSON.stringify({
+		backend,
+		command: "auth",
+		envLine,
+		jwks,
+		rotated: authArgs.rotate,
+		subcommand: authArgs.subcommand
+	}));
+	else console.info(envLine);
+	return 0;
+};
+
 //#endregion
 //#region src/cli/commands/codegen.ts
 const HELP_FLAGS$8 = new Set(["--help", "-h"]);
@@ -2553,6 +2649,7 @@ const COMMAND_HELP = {
 	view: VIEW_HELP_TEXT,
 	info: INFO_HELP_TEXT,
 	docs: DOCS_HELP_TEXT,
+	auth: AUTH_HELP_TEXT,
 	dev: DEV_HELP_TEXT,
 	verify: VERIFY_HELP_TEXT,
 	codegen: CODEGEN_HELP_TEXT,
@@ -2565,6 +2662,7 @@ const COMMAND_HANDLERS = {
 	view: handleViewCommand,
 	info: handleInfoCommand,
 	docs: handleDocsCommand,
+	auth: handleAuthCommand,
 	verify: handleVerifyCommand,
 	codegen: handleCodegenCommand,
 	env: handleEnvCommand,
@@ -2601,6 +2699,7 @@ Commands:
   view [plugin]                Inspect a plugin install plan without writing
   info                         Inspect project + installed plugin state
   docs <topic...>              Show docs links for CLI and plugins
+  auth                         Auth runtime helpers
   env                          Manage Convex environment variables
   deploy                       Deploy with migrations/backfill flows
   migrate                      Migration lifecycle commands

package/dist/{generated-contract-disabled-Cf7sqlVD.d.ts → generated-contract-disabled-9Yg1NHlV.d.ts}

@@ -216,8 +216,8 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>, DataModel e
     };
   }, Promise<Record<string, unknown> | undefined>>;
   findMany: convex_server0.RegisteredQuery<"internal", {
-    limit?: number | undefined;
     join?: any;
+    limit?: number | undefined;
     where?: {
       operator?: "eq" | "ne" | "lt" | "lte" | "gt" | "gte" | "in" | "not_in" | "contains" | "starts_with" | "ends_with" | undefined;
       connector?: "AND" | "OR" | undefined;
@@ -226,8 +226,8 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>, DataModel e
     }[] | undefined;
     offset?: number | undefined;
     sortBy?: {
-      direction: "asc" | "desc";
       field: string;
+      direction: "asc" | "desc";
     } | undefined;
     paginationOpts: {
       id?: number;

package/dist/orm/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as GenericOrmCtx$1, $n as unique, $r as endsWith, $t as ManyConfig, A as ConvexDateMode, An as ConvexRankIndexBuilder, Ar as ReturningResult, At as MigrationManifestEntry, B as ConvexBytesBuilderInitial, Bn as rankIndex, Br as OrmSchemaRelations, Bt as defineMigration, C as ConvexNumberBuilderInitial, Ci as ColumnBuilderWithTableName, Cn as RlsRole, Cr as MutationReturning, Ct as MigrationStatusArgs, D as id, Di as IsPrimaryKey, Dn as ConvexAggregateIndexBuilderOn, Dr as PaginatedResult, Dt as MigrationDoc, E as ConvexIdBuilderInitial, Ei as HasDefault, En as ConvexAggregateIndexBuilder, Er as OrderDirection, Et as MigrationDirection, F as custom, Fn as ConvexVectorIndexBuilder, Fr as unsetToken, Ft as MigrationStateMap, G as ConvexBigIntBuilder, Gn as ConvexCheckConfig, Gr as ExpressionVisitor, Gt as OrmReader$1, H as ConvexBooleanBuilder, Hn as uniqueIndex, Hr as TableName, Ht as detectMigrationDrift, I as json, In as ConvexVectorIndexBuilderOn, Ir as Brand, It as MigrationStep, J as CountBackfillChunkArgs, Jn as ConvexUniqueConstraintBuilder, Jr as LogicalExpression, Jt as RlsMode, K as ConvexBigIntBuilderInitial, Kn as ConvexForeignKeyBuilder, Kr as FieldReference, Kt as OrmWriter$1, L as objectOf, Ln as ConvexVectorIndexConfig, Lr as Columns, Lt as MigrationTableName, M as ConvexCustomBuilder, Mn as ConvexSearchIndexBuilder, Mr as UpdateSet, Mt as MigrationPlan, N as ConvexCustomBuilderInitial, Nn as ConvexSearchIndexBuilderOn, Nr as VectorQueryConfig, Nt as MigrationRunStatus, O as ConvexDateBuilder, Oi as IsUnique, On as ConvexIndexBuilder, Or as PredicateWhereIndexConfig, Ot as MigrationDocContext, P as arrayOf, Pn as ConvexSearchIndexConfig, Pr as VectorSearchProvider, Pt as MigrationSet, Q as GenericOrm$1, Qn as foreignKey, Qr as contains, Qt as ExtractTablesWithRelations, R as unionOf, Rn as aggregateIndex, Rr as OrmSchemaExtensionTables, Rt as MigrationWriteMode, S as ConvexNumberBuilder, Si as ColumnBuilderTypeConfig, Sn as rlsPolicy, Sr as MutationResult, St as MigrationRunChunkArgs, T as ConvexIdBuilder, Ti as DrizzleEntity, Tn as rlsRole, Tr as OrderByClause, Tt as MigrationDefinition, U as ConvexBooleanBuilderInitial, Un as vectorIndex, Ur as SystemFields, Ut as DatabaseWithMutations, V as bytes, Vn as searchIndex, Vr as OrmSchemaTriggers, Vt as defineMigrationSet, W as boolean, Wn as ConvexCheckBuilder, Wr as BinaryExpression, Wt as DatabaseWithQuery, X as CountBackfillStatusArgs, Xn as ConvexUniqueConstraintConfig, Xr as and, Xt as extractRelationsConfig, Y as CountBackfillKickoffArgs, Yn as ConvexUniqueConstraintBuilderOn, Yr as UnaryExpression, Yt as EdgeMetadata, Z as CreateOrmOptions, Zn as check, Zr as between, Zt as ExtractTablesFromSchema, _ as ConvexTimestampMode, _i as startsWith, _n as deletion, _r as MutationExecuteConfig, _t as OrmTriggerContext, a as requireSchemaRelations, ai as inArray, an as TablesRelationalConfig, ar as AggregateResult, at as OrmWriterCtx, b as ConvexTextEnumBuilderInitial, bi as ColumnBuilderBaseConfig, bn as RlsPolicyConfig, br as MutationPaginateConfig, bt as MigrationCancelArgs, c as TableConfigResult, ci as isNull, cn as ConvexDeletionBuilder, cr as CountConfig, ct as ScheduledMutationBatchArgs, d as OrmNotFoundError, di as lte, dn as ConvexTableWithColumns, dr as FilterOperators, dt as scheduledDeleteFactory, ei as eq, en as OneConfig, er as ConvexTextBuilder, et as OrmApiResult, f as ConvexVectorBuilder, fi as ne, fn as DiscriminatorBuilderConfig, fr as GetColumnData, ft as SchemaExtension, g as ConvexTimestampBuilderInitial, gi as or, gn as convexTable, gr as InsertValue, gt as OrmTriggerChange, h as ConvexTimestampBuilder, hi as notInArray, hn as TableConfig, hr as InferSelectModel, ht as OrmTableTriggers, i as getSchemaTriggers, ii as ilike, in as TableRelationalConfig, ir as AggregateFieldValue, it as OrmReaderCtx, j as date, jn as ConvexRankIndexBuilderOn, jr as ReturningSelection, jt as MigrationMigrateOne, k as ConvexDateBuilderInitial, ki as NotNull, kn as ConvexIndexBuilderOn, kr as ReturningAll, kt as MigrationDriftIssue, l as getTableColumns, li as like, ln as ConvexDeletionConfig, lr as CountResult, lt as scheduledMutationBatchFactory, m as vector, mi as notBetween, mn as OrmLifecycleOperation, mr as InferModelFromColumns, mt as OrmBeforeResult, n as defineSchema, ni as gt, nn as RelationsBuilderColumnBase, nr as text, nt as OrmClientWithApi$1, o as asc, oi as isFieldReference, on as defineRelations, or as BuildQueryResult, ot as ResolveOrmSchema, p as ConvexVectorBuilderInitial, pi as not, pn as OrmLifecycleChange, pr as InferInsertModel, pt as defineSchemaExtension, q as bigint, qn as ConvexForeignKeyConfig, qr as FilterExpression, qt as RlsContext, r as getSchemaRelations, ri as gte, rn as RelationsBuilderColumnConfig, rr as AggregateConfig, rt as OrmFunctions, s as desc, si as isNotNull, sn as defineRelationsPart, sr as BuildRelationResult, st as createOrm, t as WhereClauseResult, ti as fieldRef, tn as RelationsBuilder, tr as ConvexTextBuilderInitial, tt as OrmClientBase$1, u as getTableConfig, ui as lt, un as ConvexTable, ur as DBQueryConfig, ut as ScheduledDeleteArgs, v as timestamp, vi as AnyColumn, vn as discriminator, vr as MutationExecuteResult, vt as OrmTriggers, w as integer, wi as ColumnDataType, wn as RlsRoleConfig, wr as MutationRunMode, wt as MigrationAppliedState, x as textEnum, xi as ColumnBuilderRuntimeConfig, xn as RlsPolicyToOption, xr as MutationPaginatedResult, xt as MigrationRunArgs, y as ConvexTextEnumBuilder, yi as ColumnBuilder, yn as RlsPolicy, yr as MutationExecutionMode, yt as defineTriggers, z as ConvexBytesBuilder, zn as index, zr as OrmSchemaExtensions, zt as buildMigrationPlan } from "../where-clause-compiler-DJ2S06w0.js";
+import { $ as GenericOrmCtx$1, $n as unique, $r as endsWith, $t as ManyConfig, A as ConvexDateMode, An as ConvexRankIndexBuilder, Ar as ReturningResult, At as MigrationManifestEntry, B as ConvexBytesBuilderInitial, Bn as rankIndex, Br as OrmSchemaRelations, Bt as defineMigration, C as ConvexNumberBuilderInitial, Ci as ColumnBuilderWithTableName, Cn as RlsRole, Cr as MutationReturning, Ct as MigrationStatusArgs, D as id, Di as IsPrimaryKey, Dn as ConvexAggregateIndexBuilderOn, Dr as PaginatedResult, Dt as MigrationDoc, E as ConvexIdBuilderInitial, Ei as HasDefault, En as ConvexAggregateIndexBuilder, Er as OrderDirection, Et as MigrationDirection, F as custom, Fn as ConvexVectorIndexBuilder, Fr as unsetToken, Ft as MigrationStateMap, G as ConvexBigIntBuilder, Gn as ConvexCheckConfig, Gr as ExpressionVisitor, Gt as OrmReader$1, H as ConvexBooleanBuilder, Hn as uniqueIndex, Hr as TableName, Ht as detectMigrationDrift, I as json, In as ConvexVectorIndexBuilderOn, Ir as Brand, It as MigrationStep, J as CountBackfillChunkArgs, Jn as ConvexUniqueConstraintBuilder, Jr as LogicalExpression, Jt as RlsMode, K as ConvexBigIntBuilderInitial, Kn as ConvexForeignKeyBuilder, Kr as FieldReference, Kt as OrmWriter$1, L as objectOf, Ln as ConvexVectorIndexConfig, Lr as Columns, Lt as MigrationTableName, M as ConvexCustomBuilder, Mn as ConvexSearchIndexBuilder, Mr as UpdateSet, Mt as MigrationPlan, N as ConvexCustomBuilderInitial, Nn as ConvexSearchIndexBuilderOn, Nr as VectorQueryConfig, Nt as MigrationRunStatus, O as ConvexDateBuilder, Oi as IsUnique, On as ConvexIndexBuilder, Or as PredicateWhereIndexConfig, Ot as MigrationDocContext, P as arrayOf, Pn as ConvexSearchIndexConfig, Pr as VectorSearchProvider, Pt as MigrationSet, Q as GenericOrm$1, Qn as foreignKey, Qr as contains, Qt as ExtractTablesWithRelations, R as unionOf, Rn as aggregateIndex, Rr as OrmSchemaExtensionTables, Rt as MigrationWriteMode, S as ConvexNumberBuilder, Si as ColumnBuilderTypeConfig, Sn as rlsPolicy, Sr as MutationResult, St as MigrationRunChunkArgs, T as ConvexIdBuilder, Ti as DrizzleEntity, Tn as rlsRole, Tr as OrderByClause, Tt as MigrationDefinition, U as ConvexBooleanBuilderInitial, Un as vectorIndex, Ur as SystemFields, Ut as DatabaseWithMutations, V as bytes, Vn as searchIndex, Vr as OrmSchemaTriggers, Vt as defineMigrationSet, W as boolean, Wn as ConvexCheckBuilder, Wr as BinaryExpression, Wt as DatabaseWithQuery, X as CountBackfillStatusArgs, Xn as ConvexUniqueConstraintConfig, Xr as and, Xt as extractRelationsConfig, Y as CountBackfillKickoffArgs, Yn as ConvexUniqueConstraintBuilderOn, Yr as UnaryExpression, Yt as EdgeMetadata, Z as CreateOrmOptions, Zn as check, Zr as between, Zt as ExtractTablesFromSchema, _ as ConvexTimestampMode, _i as startsWith, _n as deletion, _r as MutationExecuteConfig, _t as OrmTriggerContext, a as requireSchemaRelations, ai as inArray, an as TablesRelationalConfig, ar as AggregateResult, at as OrmWriterCtx, b as ConvexTextEnumBuilderInitial, bi as ColumnBuilderBaseConfig, bn as RlsPolicyConfig, br as MutationPaginateConfig, bt as MigrationCancelArgs, c as TableConfigResult, ci as isNull, cn as ConvexDeletionBuilder, cr as CountConfig, ct as ScheduledMutationBatchArgs, d as OrmNotFoundError, di as lte, dn as ConvexTableWithColumns, dr as FilterOperators, dt as scheduledDeleteFactory, ei as eq, en as OneConfig, er as ConvexTextBuilder, et as OrmApiResult, f as ConvexVectorBuilder, fi as ne, fn as DiscriminatorBuilderConfig, fr as GetColumnData, ft as SchemaExtension, g as ConvexTimestampBuilderInitial, gi as or, gn as convexTable, gr as InsertValue, gt as OrmTriggerChange, h as ConvexTimestampBuilder, hi as notInArray, hn as TableConfig, hr as InferSelectModel, ht as OrmTableTriggers, i as getSchemaTriggers, ii as ilike, in as TableRelationalConfig, ir as AggregateFieldValue, it as OrmReaderCtx, j as date, jn as ConvexRankIndexBuilderOn, jr as ReturningSelection, jt as MigrationMigrateOne, k as ConvexDateBuilderInitial, ki as NotNull, kn as ConvexIndexBuilderOn, kr as ReturningAll, kt as MigrationDriftIssue, l as getTableColumns, li as like, ln as ConvexDeletionConfig, lr as CountResult, lt as scheduledMutationBatchFactory, m as vector, mi as notBetween, mn as OrmLifecycleOperation, mr as InferModelFromColumns, mt as OrmBeforeResult, n as defineSchema, ni as gt, nn as RelationsBuilderColumnBase, nr as text, nt as OrmClientWithApi$1, o as asc, oi as isFieldReference, on as defineRelations, or as BuildQueryResult, ot as ResolveOrmSchema, p as ConvexVectorBuilderInitial, pi as not, pn as OrmLifecycleChange, pr as InferInsertModel, pt as defineSchemaExtension, q as bigint, qn as ConvexForeignKeyConfig, qr as FilterExpression, qt as RlsContext, r as getSchemaRelations, ri as gte, rn as RelationsBuilderColumnConfig, rr as AggregateConfig, rt as OrmFunctions, s as desc, si as isNotNull, sn as defineRelationsPart, sr as BuildRelationResult, st as createOrm, t as WhereClauseResult, ti as fieldRef, tn as RelationsBuilder, tr as ConvexTextBuilderInitial, tt as OrmClientBase$1, u as getTableConfig, ui as lt, un as ConvexTable, ur as DBQueryConfig, ut as ScheduledDeleteArgs, v as timestamp, vi as AnyColumn, vn as discriminator, vr as MutationExecuteResult, vt as OrmTriggers, w as integer, wi as ColumnDataType, wn as RlsRoleConfig, wr as MutationRunMode, wt as MigrationAppliedState, x as textEnum, xi as ColumnBuilderRuntimeConfig, xn as RlsPolicyToOption, xr as MutationPaginatedResult, xt as MigrationRunArgs, y as ConvexTextEnumBuilder, yi as ColumnBuilder, yn as RlsPolicy, yr as MutationExecutionMode, yt as defineTriggers, z as ConvexBytesBuilder, zn as index, zr as OrmSchemaExtensions, zt as buildMigrationPlan } from "../where-clause-compiler-BpfS2FJi.js";
 import { i as pretendRequired, n as deprecated, r as pretend } from "../validators-vzRKjBJC.js";
 import { a as QueryCtxWithPreferredOrmQueryTable, i as QueryCtxWithOrmQueryTable, n as LookupByIdResultByCtx, o as getByIdWithOrmQueryFallback, r as QueryCtxWithOptionalOrmQueryTable, t as DocByCtx } from "../query-context-CFZqIvD7.js";
 import { DefineSchemaOptions, GenericDatabaseReader, GenericDatabaseWriter, GenericSchema, SchemaDefinition } from "convex/server";

package/dist/watcher.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { N as resolveRunDeps, St as logger, bt as generateMeta, k as resolveConfiguredBackend, xt as getConvexConfig } from "./backend-core-DUsUG58E.mjs";
+import { A as resolveConfiguredBackend, Ct as getConvexConfig, P as resolveRunDeps, St as generateMeta, wt as logger } from "./backend-core-Cf6h5gQc.mjs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 

package/dist/{where-clause-compiler-DJ2S06w0.d.ts → where-clause-compiler-BpfS2FJi.d.ts}

@@ -3717,6 +3717,19 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
   readonly aggregate_bucket: ConvexTableWithColumns<{
     name: "aggregate_bucket";
     columns: {
+      count: ConvexNumberBuilderInitial<""> & {
+        _: {
+          notNull: true;
+        };
+      } & {
+        _: {
+          tableName: "aggregate_bucket";
+        };
+      } & {
+        _: {
+          fieldName: "count";
+        };
+      };
       tableKey: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
@@ -3786,19 +3799,6 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
           fieldName: "keyParts";
         };
       };
-      count: ConvexNumberBuilderInitial<""> & {
-        _: {
-          notNull: true;
-        };
-      } & {
-        _: {
-          tableName: "aggregate_bucket";
-        };
-      } & {
-        _: {
-          fieldName: "count";
-        };
-      };
       sumValues: (NotNull<$Type<ConvexCustomBuilderInitial<"", convex_values0.VRecord<Record<string, any>, convex_values0.VString<string, "required">, convex_values0.VId<any, any> | convex_values0.VString<any, any> | convex_values0.VFloat64<any, any> | convex_values0.VInt64<any, any> | convex_values0.VBoolean<any, any> | convex_values0.VNull<any, any> | convex_values0.VAny<any, any, string> | convex_values0.VLiteral<any, any> | convex_values0.VBytes<any, any> | convex_values0.VObject<any, Record<string, convex_values0.Validator<any, convex_values0.OptionalProperty, any>>, any, any> | convex_values0.VArray<any, convex_values0.Validator<any, "required", any>, any> | convex_values0.VRecord<any, convex_values0.Validator<string, "required", any>, convex_values0.Validator<any, "required", any>, any, any> | convex_values0.VUnion<any, convex_values0.Validator<any, "required", any>[], any, any>, "required", string>>, Record<string, number>>> | NotNull<$Type<ConvexCustomBuilderInitial<"", convex_values0.VId<any, any> | convex_values0.VString<any, any> | convex_values0.VFloat64<any, any> | convex_values0.VInt64<any, any> | convex_values0.VBoolean<any, any> | convex_values0.VNull<any, any> | convex_values0.VAny<any, any, string> | convex_values0.VLiteral<any, any> | convex_values0.VBytes<any, any> | convex_values0.VObject<any, Record<string, convex_values0.Validator<any, convex_values0.OptionalProperty, any>>, any, any> | convex_values0.VArray<any, convex_values0.Validator<any, "required", any>, any> | convex_values0.VRecord<any, convex_values0.Validator<string, "required", any>, convex_values0.Validator<any, "required", any>, any, any> | convex_values0.VUnion<any, convex_values0.Validator<any, "required", any>[], any, any>>, Record<string, number>>>) & {
         _: {
           tableName: "aggregate_bucket";
@@ -3826,7 +3826,7 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
   readonly aggregate_member: ConvexTableWithColumns<{
     name: "aggregate_member";
     columns: {
-      tableKey: ConvexTextBuilderInitial<""> & {
+      kind: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -3836,10 +3836,10 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "tableKey";
+          fieldName: "kind";
         };
       };
-      kind: ConvexTextBuilderInitial<""> & {
+      tableKey: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -3849,7 +3849,7 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "kind";
+          fieldName: "tableKey";
         };
       };
       indexName: ConvexTextBuilderInitial<""> & {
@@ -3992,7 +3992,11 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
   readonly aggregate_extrema: ConvexTableWithColumns<{
     name: "aggregate_extrema";
     columns: {
-      tableKey: ConvexTextBuilderInitial<""> & {
+      value: ConvexCustomBuilderInitial<"", convex_values0.VAny<any, "required", string>> & {
+        _: {
+          $type: convex_values0.Value;
+        };
+      } & {
         _: {
           notNull: true;
         };
@@ -4002,10 +4006,10 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "tableKey";
+          fieldName: "value";
         };
       };
-      indexName: ConvexTextBuilderInitial<""> & {
+      count: ConvexNumberBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -4015,10 +4019,10 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "indexName";
+          fieldName: "count";
         };
       };
-      updatedAt: ConvexNumberBuilderInitial<""> & {
+      tableKey: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -4028,14 +4032,10 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "updatedAt";
+          fieldName: "tableKey";
         };
       };
-      value: ConvexCustomBuilderInitial<"", convex_values0.VAny<any, "required", string>> & {
-        _: {
-          $type: convex_values0.Value;
-        };
-      } & {
+      indexName: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -4045,10 +4045,10 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "value";
+          fieldName: "indexName";
         };
       };
-      keyHash: ConvexTextBuilderInitial<""> & {
+      updatedAt: ConvexNumberBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -4058,10 +4058,10 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "keyHash";
+          fieldName: "updatedAt";
         };
       };
-      count: ConvexNumberBuilderInitial<""> & {
+      keyHash: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -4071,7 +4071,7 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "count";
+          fieldName: "keyHash";
         };
       };
       fieldName: ConvexTextBuilderInitial<""> & {
@@ -4244,7 +4244,7 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
   readonly aggregate_state: ConvexTableWithColumns<{
     name: "aggregate_state";
     columns: {
-      tableKey: ConvexTextBuilderInitial<""> & {
+      kind: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -4254,10 +4254,19 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "tableKey";
+          fieldName: "kind";
         };
       };
-      kind: ConvexTextBuilderInitial<""> & {
+      cursor: ConvexTextBuilderInitial<""> & {
+        _: {
+          tableName: "aggregate_state";
+        };
+      } & {
+        _: {
+          fieldName: "cursor";
+        };
+      };
+      tableKey: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
         };
@@ -4267,7 +4276,7 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
         };
       } & {
         _: {
-          fieldName: "kind";
+          fieldName: "tableKey";
         };
       };
       indexName: ConvexTextBuilderInitial<""> & {
@@ -4322,15 +4331,6 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
           fieldName: "status";
         };
       };
-      cursor: ConvexTextBuilderInitial<""> & {
-        _: {
-          tableName: "aggregate_state";
-        };
-      } & {
-        _: {
-          fieldName: "cursor";
-        };
-      };
       processed: ConvexNumberBuilderInitial<""> & {
         _: {
           notNull: true;
@@ -4398,26 +4398,35 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
   readonly migration_state: ConvexTableWithColumns<{
     name: "migration_state";
     columns: {
-      status: ConvexTextBuilderInitial<""> & {
+      direction: ConvexTextBuilderInitial<""> & {
         _: {
-          notNull: true;
+          tableName: "migration_state";
         };
       } & {
+        _: {
+          fieldName: "direction";
+        };
+      };
+      cursor: ConvexTextBuilderInitial<""> & {
         _: {
           tableName: "migration_state";
         };
       } & {
         _: {
-          fieldName: "status";
+          fieldName: "cursor";
         };
       };
-      cursor: ConvexTextBuilderInitial<""> & {
+      status: ConvexTextBuilderInitial<""> & {
+        _: {
+          notNull: true;
+        };
+      } & {
         _: {
           tableName: "migration_state";
         };
       } & {
         _: {
-          fieldName: "cursor";
+          fieldName: "status";
         };
       };
       processed: ConvexNumberBuilderInitial<""> & {
@@ -4512,15 +4521,6 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
           fieldName: "applied";
         };
       };
-      direction: ConvexTextBuilderInitial<""> & {
-        _: {
-          tableName: "migration_state";
-        };
-      } & {
-        _: {
-          fieldName: "direction";
-        };
-      };
       runId: ConvexTextBuilderInitial<""> & {
         _: {
           tableName: "migration_state";
@@ -4552,6 +4552,19 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
   readonly migration_run: ConvexTableWithColumns<{
     name: "migration_run";
     columns: {
+      direction: ConvexTextBuilderInitial<""> & {
+        _: {
+          notNull: true;
+        };
+      } & {
+        _: {
+          tableName: "migration_run";
+        };
+      } & {
+        _: {
+          fieldName: "direction";
+        };
+      };
       status: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;
@@ -4609,19 +4622,6 @@ declare const BUILTIN_SCHEMA_EXTENSIONS: readonly [SchemaExtension<{
           fieldName: "lastError";
         };
       };
-      direction: ConvexTextBuilderInitial<""> & {
-        _: {
-          notNull: true;
-        };
-      } & {
-        _: {
-          tableName: "migration_run";
-        };
-      } & {
-        _: {
-          fieldName: "direction";
-        };
-      };
       runId: ConvexTextBuilderInitial<""> & {
         _: {
           notNull: true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kitcn",
-  "version": "0.12.11",
+  "version": "0.12.12",
   "description": "kitcn - React Query integration and CLI tools for Convex",
   "keywords": [
     "convex",

package/skills/convex/references/features/auth.md

@@ -206,8 +206,10 @@ Local Convex:
 Remote / repair:
 1. Use `npx kitcn env push` when the target deployment is already active.
 2. Use `npx kitcn env push --prod` for production sync.
+3. Use `npx kitcn auth jwks` when you need a manual static `JWKS` payload, including backend `concave`.
 
 Key rotation: `npx kitcn env push --rotate` (invalidates all tokens).
+Manual rotation/export: `npx kitcn auth jwks --rotate`.
 
 ---
 

package/skills/convex/references/setup/auth.md

@@ -277,10 +277,16 @@ Use this to sync static `JWKS` onto the target deployment too.
 ```bash
 bunx kitcn env push --prod
 bunx kitcn env push --rotate
+
+# Manual static JWKS payload, including backend concave
+bunx kitcn auth jwks
+bunx kitcn auth jwks --rotate
 ```
 
 Use `--prod` for production and `--rotate` when you want fresh keys plus fresh
-`JWKS`. See `/docs/cli/backend#env` for the full env command surface.
+`JWKS`. `kitcn auth jwks` prints a manual `JWKS=...` line when you need to set
+the env value yourself instead of using `env push`. See `/docs/cli/backend#env`
+and `/docs/cli/backend#auth` for the full command surface.
 
 Rotate later:
 

package/skills/convex/references/setup/index.md

@@ -612,6 +612,8 @@ bunx kitcn codegen
 bunx kitcn env push
 bunx kitcn env push --prod
 bunx kitcn env push --rotate
+bunx kitcn auth jwks
+bunx kitcn auth jwks --rotate
 # deploy with automatic aggregate backfill:
 bunx kitcn deploy --prod
 # aggregate index management:
@@ -623,7 +625,9 @@ bunx kitcn analyze
 
 On backend `convex`, `kitcn dev` watches `convex/.env` during a local
 dev session and auto-pushes later edits. Keep `env push` for `--prod`,
-`--rotate`, or explicit repair against an already active deployment.
+`--rotate`, or explicit repair against an already active deployment. Use
+`auth jwks` when you need a manual static `JWKS` payload, especially on backend
+`concave`.
 
 ### 11.2 Phase A gate: non-auth baseline (required before auth work)