@atproto/pds 0.4.34 → 0.4.35

package/dist/account-manager/helpers/token.d.ts

@@ -0,0 +1,485 @@
+import { Code, NewTokenData, RefreshToken, TokenData, TokenId, TokenInfo } from '@atproto/oauth-provider';
+import { Selectable } from 'kysely';
+import { AccountDb, Token } from '../db';
+import { ActorAccount } from './account';
+import { SelectableDeviceAccount } from './device-account';
+type LeftJoined<T> = {
+    [K in keyof T]: null | T[K];
+};
+export type ActorAccountToken = Selectable<ActorAccount> & Selectable<Omit<Token, 'id' | 'did'>> & LeftJoined<SelectableDeviceAccount>;
+export declare const toTokenInfo: (row: ActorAccountToken, audience: string) => TokenInfo;
+export declare const createQB: (db: AccountDb, tokenId: TokenId, data: TokenData, refreshToken?: RefreshToken) => import("kysely").InsertQueryBuilder<import("../db").DatabaseSchema, "token", import("kysely").InsertResult>;
+export declare const forRotateQB: (db: AccountDb, id: TokenId) => import("kysely/dist/cjs/parser/select-parser").QueryBuilderWithSelection<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "token">, "token", {}, "id" | "currentRefreshToken">;
+export declare const findByQB: (db: AccountDb, search: {
+    id?: number;
+    code?: Code;
+    tokenId?: TokenId;
+    currentRefreshToken?: RefreshToken;
+}) => import("kysely").SelectQueryBuilder<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", import("kysely/dist/cjs/util/type-utils").MergePartial<import("kysely/dist/cjs/util/type-utils").MergePartial<import("kysely/dist/cjs/util/type-utils").MergePartial<import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>, import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>>, import("kysely/dist/cjs/util/type-utils").MergePartial<import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>, import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>>>, import("kysely/dist/cjs/util/type-utils").MergePartial<import("kysely/dist/cjs/util/type-utils").MergePartial<import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>, import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>>, import("kysely/dist/cjs/util/type-utils").MergePartial<import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>, import("kysely/dist/cjs/util/type-utils").MergePartial<Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">, Partial<Omit<{}, never>> & Partial<Omit<Partial<Omit<{}, never>>, never>> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("../db").DeviceAccount;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "account" | "actor", "actor.did" | "account.email" | "account.invitesDisabled" | "account.emailConfirmedAt" | "actor.handle" | "actor.createdAt" | "actor.takedownRef" | "actor.deactivatedAt" | "actor.deleteAfter"> & import("kysely").Selection<{
+    account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").Account>;
+    token: Token;
+    actor: import("../db").Actor;
+    device: import("../db").Device;
+    device_account: import("kysely/dist/cjs/util/type-utils").Nullable<import("../db").DeviceAccount>;
+    authorization_request: import("../db").AuthorizationRequest;
+    used_refresh_token: import("../db").UsedRefreshToken;
+    repo_root: import("../db").RepoRoot;
+    refresh_token: import("../db").RefreshToken;
+    app_password: import("../db").AppPassword;
+    invite_code: import("../db").InviteCode;
+    invite_code_use: import("../db").InviteCodeUse;
+    email_token: import("../db").EmailToken;
+}, "token" | "account" | "actor" | "device_account", "device_account.authenticatedAt" | "device_account.remember" | "device_account.authorizedClients" | "token.did" | "token.code" | "token.tokenId" | "token.createdAt" | "token.updatedAt" | "token.deviceId" | "token.clientId" | "token.clientAuth" | "token.parameters" | "token.expiresAt" | "token.details" | "token.currentRefreshToken">>>>>>;
+export declare const removeByDidQB: (db: AccountDb, did: string) => import("kysely").DeleteQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "token">, "token", import("kysely").DeleteResult>;
+export declare const rotateQB: (db: AccountDb, id: number, newTokenId: TokenId, newRefreshToken: RefreshToken, newData: NewTokenData) => import("kysely").UpdateQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "token">, "token", "token", import("kysely").UpdateResult>;
+export declare const removeQB: (db: AccountDb, tokenId: TokenId) => import("kysely").DeleteQueryBuilder<import("kysely/dist/cjs/parser/table-parser").From<import("../db").DatabaseSchema, "token">, "token", import("kysely").DeleteResult>;
+export {};
+//# sourceMappingURL=token.d.ts.map

package/dist/account-manager/helpers/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/account-manager/helpers/token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,YAAY,EAEZ,YAAY,EACZ,SAAS,EACT,OAAO,EACP,SAAS,EACV,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AASnC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AACxC,OAAO,EAAE,YAAY,EAAmB,MAAM,WAAW,CAAA;AACzD,OAAO,EACL,uBAAuB,EAGxB,MAAM,kBAAkB,CAAA;AAEzB,KAAK,UAAU,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,CAAA;AAEpD,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,YAAY,CAAC,GACtD,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,GACrC,UAAU,CAAC,uBAAuB,CAAC,CAAA;AAErC,eAAO,MAAM,WAAW,QACjB,iBAAiB,YACZ,MAAM,KACf,SAwBD,CAAA;AA+BF,eAAO,MAAM,QAAQ,2BAEV,OAAO,QACV,SAAS,iBACA,YAAY,gHAezB,CAAA;AAEJ,eAAO,MAAM,WAAW,sBAAuB,OAAO,qNAKZ,CAAA;AAE1C,eAAO,MAAM,QAAQ,0BAEX;IACN,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,mBAAmB,CAAC,EAAE,YAAY,CAAA;CACnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uYA+BF,CAAA;AAED,eAAO,MAAM,aAAa,uBAAwB,MAAM,6KAEN,CAAA;AAElD,eAAO,MAAM,QAAQ,sBAEf,MAAM,cACE,OAAO,mBACF,YAAY,WACpB,YAAY,sLAaE,CAAA;AAEzB,eAAO,MAAM,QAAQ,2BAA4B,OAAO,6KAEE,CAAA"}

package/dist/account-manager/helpers/token.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeQB = exports.rotateQB = exports.removeByDidQB = exports.findByQB = exports.forRotateQB = exports.createQB = exports.toTokenInfo = void 0;
+const db_1 = require("../../db");
+const account_1 = require("./account");
+const device_account_1 = require("./device-account");
+const toTokenInfo = (row, audience) => ({
+    id: row.tokenId,
+    data: {
+        createdAt: (0, db_1.fromDateISO)(row.createdAt),
+        expiresAt: (0, db_1.fromDateISO)(row.expiresAt),
+        updatedAt: (0, db_1.fromDateISO)(row.updatedAt),
+        clientId: row.clientId,
+        clientAuth: (0, db_1.fromJsonObject)(row.clientAuth),
+        deviceId: row.deviceId,
+        sub: row.did,
+        parameters: (0, db_1.fromJsonObject)(row.parameters),
+        details: row.details
+            ? (0, db_1.fromJsonArray)(row.details)
+            : null,
+        code: row.code,
+    },
+    account: (0, device_account_1.toAccount)(row, audience),
+    info: row.authenticatedAt != null &&
+        row.authorizedClients != null &&
+        row.remember != null
+        ? (0, device_account_1.toDeviceAccountInfo)(row)
+        : undefined,
+    currentRefreshToken: row.currentRefreshToken,
+});
+exports.toTokenInfo = toTokenInfo;
+const selectTokenInfoQB = (db) => (0, account_1.selectAccountQB)(db, { includeDeactivated: true })
+    // uses "token_did_idx" index (though unlikely in practice)
+    .innerJoin('token', 'token.did', 'actor.did')
+    .leftJoin('device_account', (join) => join
+    // uses "device_account_pk" index
+    .on('device_account.did', '=', 'token.did')
+    // @ts-expect-error "deviceId" is nullable in token
+    .on('device_account.deviceId', '=', 'token.deviceId'))
+    .select([
+    'token.tokenId',
+    'token.createdAt',
+    'token.updatedAt',
+    'token.expiresAt',
+    'token.clientId',
+    'token.clientAuth',
+    'token.deviceId',
+    'token.did',
+    'token.parameters',
+    'token.details',
+    'token.code',
+    'token.currentRefreshToken',
+    'device_account.authenticatedAt',
+    'device_account.authorizedClients',
+    'device_account.remember',
+]);
+const createQB = (db, tokenId, data, refreshToken) => db.db.insertInto('token').values({
+    tokenId,
+    createdAt: (0, db_1.toDateISO)(data.createdAt),
+    expiresAt: (0, db_1.toDateISO)(data.expiresAt),
+    updatedAt: (0, db_1.toDateISO)(data.updatedAt),
+    clientId: data.clientId,
+    clientAuth: (0, db_1.toJsonObject)(data.clientAuth),
+    deviceId: data.deviceId,
+    did: data.sub,
+    parameters: (0, db_1.toJsonObject)(data.parameters),
+    details: data.details ? (0, db_1.toJsonArray)(data.details) : null,
+    code: data.code,
+    currentRefreshToken: refreshToken || null,
+});
+exports.createQB = createQB;
+const forRotateQB = (db, id) => db.db
+    .selectFrom('token')
+    .where('tokenId', '=', id)
+    .where('currentRefreshToken', 'is not', null)
+    .select(['id', 'currentRefreshToken']);
+exports.forRotateQB = forRotateQB;
+const findByQB = (db, search) => {
+    if (search.id === undefined &&
+        search.code === undefined &&
+        search.tokenId === undefined &&
+        search.currentRefreshToken === undefined) {
+        // Prevent accidental scan
+        throw new TypeError('At least one search parameter is required');
+    }
+    return selectTokenInfoQB(db)
+        .if(search.id !== undefined, (qb) => 
+    // uses primary key index
+    qb.where('token.id', '=', search.id))
+        .if(search.code !== undefined, (qb) => 
+    // uses "token_code_idx" partial index (hence the null check)
+    qb
+        .where('token.code', '=', search.code)
+        .where('token.code', 'is not', null))
+        .if(search.tokenId !== undefined, (qb) => 
+    // uses "token_token_id_idx"
+    qb.where('token.tokenId', '=', search.tokenId))
+        .if(search.currentRefreshToken !== undefined, (qb) => 
+    // uses "token_refresh_token_unique_idx"
+    qb.where('token.currentRefreshToken', '=', search.currentRefreshToken));
+};
+exports.findByQB = findByQB;
+const removeByDidQB = (db, did) => 
+// uses "token_did_idx" index
+db.db.deleteFrom('token').where('did', '=', did);
+exports.removeByDidQB = removeByDidQB;
+const rotateQB = (db, id, newTokenId, newRefreshToken, newData) => db.db
+    .updateTable('token')
+    .set({
+    tokenId: newTokenId,
+    currentRefreshToken: newRefreshToken,
+    expiresAt: (0, db_1.toDateISO)(newData.expiresAt),
+    updatedAt: (0, db_1.toDateISO)(newData.updatedAt),
+    clientAuth: (0, db_1.toJsonObject)(newData.clientAuth),
+})
+    // uses primary key index
+    .where('id', '=', id);
+exports.rotateQB = rotateQB;
+const removeQB = (db, tokenId) => 
+// uses "used_refresh_token_fk" to cascade delete
+db.db.deleteFrom('token').where('tokenId', '=', tokenId);
+exports.removeQB = removeQB;
+//# sourceMappingURL=token.js.map