@cortexkit/common-auth 0.2.1 → 0.2.2

package/dist/store/rows.d.ts

@@ -9,6 +9,13 @@ export interface RowOperationOptions {
     onFailure?: FailureHook;
     /** The provider-wide lock, when an operation may change identity keying. */
     providerLock?: PoolLockSpec;
+    /**
+     * Further locks taken after the row lock and the provider-wide lock, in
+     * this order, before the store locks: the same place `refresh` takes its
+     * extra locks, so a caller holding legacy locks around a row write and a
+     * refresh of that row acquire them in one order and cannot deadlock.
+     */
+    extraLocks?: readonly PoolLockSpec[];
 }
 export interface AddInput {
     id: string;

package/dist/store/rows.js

@@ -78,6 +78,8 @@ export async function addRow(rt, input, options = {}) {
         await locks.acquire(rowLockSpec(rt, { id, identity }));
         if (credential.type === 'oauth')
             await locks.acquire(options.providerLock ?? rt.providerLock);
+        for (const extra of options.extraLocks ?? [])
+            await locks.acquire(extra);
         return withTransaction(ctx, locks, progress, { operation: 'add', rowId: id }, async (tx) => {
             const rows = tx.rows();
             const fingerprint = fingerprintOf(credential);
@@ -150,6 +152,8 @@ export async function replaceRow(rt, id, credential, input = {}, options = {}) {
         await locks.acquire(rowLockSpec(rt, seen));
         if (credential.type === 'oauth')
             await locks.acquire(options.providerLock ?? rt.providerLock);
+        for (const extra of options.extraLocks ?? [])
+            await locks.acquire(extra);
         return withTransaction(ctx, locks, progress, { operation: 'replace', rowId: id }, async (tx) => {
             const row = requireUsableRow('replace', id, tx.row(id), credential);
             if (rowLockKey(row) !== rowLockKey(seen))
@@ -197,6 +201,8 @@ export async function rotateRow(rt, id, credential, input = {}, options = {}) {
         await locks.acquire(rowLockSpec(rt, seen));
         if (input.identity !== undefined && credential.type === 'oauth')
             await locks.acquire(options.providerLock ?? rt.providerLock);
+        for (const extra of options.extraLocks ?? [])
+            await locks.acquire(extra);
         return withTransaction(ctx, locks, progress, { operation: 'rotate', rowId: id }, async (tx) => {
             const row = requireUsableRow('rotate', id, tx.row(id), credential);
             if (rowLockKey(row) !== rowLockKey(seen))
@@ -238,6 +244,8 @@ export async function recordRowIdentity(rt, id, identity, options = {}) {
         const { row: seen } = await readRow(rt, 'recordIdentity', id);
         await locks.acquire(rowLockSpec(rt, seen));
         await locks.acquire(options.providerLock ?? rt.providerLock);
+        for (const extra of options.extraLocks ?? [])
+            await locks.acquire(extra);
         return withTransaction(rt.ctx, locks, progress, { operation: 'recordIdentity', rowId: id }, async (tx) => {
             const row = requireUsableRow('recordIdentity', id, tx.row(id));
             if (rowLockKey(row) !== rowLockKey(seen))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/common-auth",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Shared plumbing for the CortexKit auth plugins: loopback RPC, file locks and atomic writes, logger, sidebar state file, TUI preferences and TUI build.",
   "license": "MIT",
   "repository": {