@decaf-ts/integrations 0.11.0 → 0.12.0

package/lib/types/io/graphql/GraphqlService.d.mts

@@ -0,0 +1,173 @@
+/**
+ * @module integrations/io/graphql/service
+ * @summary Generic GraphQL endpoint integration service for executing queries and mutations.
+ * @description Posts GraphQL documents to any endpoint as an undecorated
+ * client-based service built on {@link HttpApiService}.
+ * The endpoint is supplied as `endpoint` (an alias normalized to `baseUrl`
+ * during initialization) or the `io.graphql` environment slice; an optional
+ * bearer token is attached to every request, per-request headers can extend
+ * it, and failures are mapped to decaf errors via {@link httpError}. GraphQL
+ * field-level `errors` are returned in the response rather than thrown —
+ * callers decide how to handle partial results.
+ */
+import { type MaybeContextualArg } from "@decaf-ts/core";
+import type { AxiosInstance } from "axios";
+import { HttpApiService, type HttpApiServiceConfig } from "../../shared/http/index.d.mts";
+/**
+ * @description Configuration for the GraphQL service
+ * @summary Extends {@link HttpApiServiceConfig} with the GraphQL `endpoint`
+ * URL (normalized to `baseUrl` during initialization) and the optional bearer
+ * token. When omitted, the `io.graphql` environment slice supplies the
+ * endpoint (and optional `token`, `timeout`).
+ * @category IO
+ * @memberOf module:integrations/io/graphql/service
+ */
+export interface GraphqlServiceConfig extends HttpApiServiceConfig {
+    /**
+     * @description GraphQL endpoint URL
+     * @summary Aliased to `baseUrl` by {@link GraphqlService.initialize}; every
+     * request is posted to this URL.
+     */
+    endpoint?: string;
+    /**
+     * @description Bearer token for the endpoint
+     * @summary Sent as `Authorization: Bearer <token>` with every request.
+     */
+    token?: string;
+}
+/**
+ * @description Input for a GraphQL request
+ * @summary Carries the `query` document, the `variables` map referenced by
+ * it, the optional `operationName` when the document holds multiple named
+ * operations, and per-request `headers` merged into the client's defaults.
+ * @category IO
+ * @memberOf module:integrations/io/graphql/service
+ */
+export interface GraphqlRequest {
+    /**
+     * @description The GraphQL query or mutation document (required)
+     */
+    query: string;
+    /**
+     * @description Variable values for the document's declared variables
+     */
+    variables?: Record<string, unknown>;
+    /**
+     * @description The operation to execute when the document defines several
+     */
+    operationName?: string;
+    /**
+     * @description Extra headers merged over the client's defaults for this request
+     */
+    headers?: Record<string, string>;
+}
+/**
+ * @description GraphQL response envelope
+ * @summary The standard GraphQL execution result: `data` when the operation
+ * produced results, field-level `errors` (message plus response path) when
+ * execution partially failed, and provider `extensions`.
+ * @template T - The expected type of the `data` payload.
+ * @category IO
+ * @memberOf module:integrations/io/graphql/service
+ */
+export interface GraphqlResponse<T = unknown> {
+    data?: T;
+    errors?: Array<{
+        message: string;
+        path?: Array<string | number>;
+    }>;
+    extensions?: Record<string, unknown>;
+}
+/**
+ * @description Generic GraphQL endpoint integration service
+ * @summary An undecorated HTTP service that `POST`s GraphQL
+ * documents to any endpoint. Unlike the other integration services there is
+ * no default base URL — the endpoint must come from the config (`endpoint` or
+ * `baseUrl`) or the `io.graphql` environment slice. Initialization normalizes
+ * the `endpoint` alias to `baseUrl` before delegating to the shared
+ * {@link HttpApiService.initialize}; the optional token is sent as a bearer
+ * header and per-request headers extend it. Transport failures are mapped to
+ * decaf errors via {@link httpError}, while GraphQL field-level `errors` are
+ * returned in the response for the caller to interpret.
+ * @class GraphqlService
+ * @category IO
+ * @example
+ * ```ts
+ * import { GraphqlService } from "@decaf-ts/integrations/io/graphql";
+ *
+ * const graphql = new GraphqlService();
+ * await graphql.initialize({
+ *   endpoint: "https://api.example.com/graphql",
+ *   token: process.env.GRAPH_CREDENTIAL_GRAPHQL_TOKEN,
+ * });
+ * const response = await graphql.request<{ user: { name: string } }>({
+ *   query: `query GetUser($id: ID!) {
+ *     user(id: $id) { name }
+ *   }`,
+ *   variables: { id: "123" },
+ * });
+ * ```
+ * @memberOf module:integrations/io/graphql/service
+ */
+export declare class GraphqlService extends HttpApiService<GraphqlServiceConfig> {
+    /**
+     * @description The provider name used in error messages
+     */
+    protected readonly serviceName = "GraphQL";
+    /**
+     * @description The absence of a default GraphQL endpoint
+     * @summary Returns an empty string because GraphQL endpoints are
+     * provider-specific; {@link GraphqlService.request} rejects execution when
+     * no endpoint was configured.
+     * @returns {string} An empty string.
+     */
+    protected defaultBaseUrl(): string;
+    /**
+     * @description Normalizes the `endpoint` alias before shared initialization
+     * @summary When the provided config carries no `baseUrl` but an `endpoint`,
+     * copies `endpoint` into `baseUrl` and delegates to
+     * {@link HttpApiService.initialize}, which merges the environment slice and
+     * builds the Axios client.
+     * @param {...MaybeContextualArg<any>} args - An optional `Partial<GraphqlServiceConfig>`, optionally followed by a decaf `Context`.
+     * @returns {Promise<{config: GraphqlServiceConfig, client: AxiosInstance}>} The merged configuration and the configured Axios instance.
+     * @throws {InternalError} When no base URL can be resolved from the config or environment.
+     */
+    initialize(...args: MaybeContextualArg<any>): Promise<{
+        config: GraphqlServiceConfig;
+        client: AxiosInstance;
+    }>;
+    /**
+     * @description Builds the GraphQL bearer authorization headers
+     * @summary Returns the `Authorization: Bearer <token>` header when the
+     * config carries a token, and no headers otherwise.
+     * @param {GraphqlServiceConfig} config - The resolved service configuration.
+     * @returns {Record<string, string>} The authorization headers (empty without a token).
+     */
+    protected authHeaders(config: GraphqlServiceConfig): Record<string, string>;
+    /**
+     * @description Reads the GraphQL endpoint and token from the environment
+     * @summary Reads the `io.graphql` environment slice and returns a partial
+     * config (with `endpoint` also mirrored to `baseUrl`) when an endpoint is
+     * configured, `undefined` otherwise. Values pass through
+     * `envString`/`envNumber` to reject unset-leaf proxies.
+     * @returns {Partial<GraphqlServiceConfig> | undefined} A partial config, or `undefined` when no GraphQL endpoint is configured.
+     */
+    protected configFromEnvironment(): Partial<GraphqlServiceConfig> | undefined;
+    /**
+     * @description Executes a GraphQL query or mutation against the configured endpoint
+     * @summary `POST`s the standard GraphQL request body (`query`,
+     * `variables`, `operationName`) to the resolved endpoint with the optional
+     * per-request headers merged over the client defaults. Requires a
+     * non-empty query and a configured endpoint. Returns the raw execution
+     * envelope: field-level `errors` are reported in `GraphqlResponse.errors`
+     * rather than thrown, so callers must inspect them for partial failures.
+     * @template T - The expected type of the `data` payload.
+     * @param {GraphqlRequest} input - The query document, variables, operation name, and per-request headers.
+     * @returns {Promise<GraphqlResponse<T>>} The execution envelope with `data`, `errors`, and `extensions`.
+     * @throws {InternalError} When the query is empty or no endpoint is configured.
+     * @throws {NotFoundError} When the endpoint answers with HTTP 404.
+     * @throws {ConflictError} When the endpoint answers with HTTP 409.
+     * @throws {BadRequestError} When the endpoint answers with any other HTTP error status.
+     */
+    request<T = unknown>(input: GraphqlRequest): Promise<GraphqlResponse<T>>;
+}

package/lib/types/io/graphql/index.d.cts

@@ -0,0 +1,6 @@
+/**
+ * @module integrations/io/graphql
+ * @summary Generic GraphQL endpoint client (queries and mutations).
+ * @description Re-exports the GraphQL client-based service and its types.
+ */
+export * from "./GraphqlService.d.cts";

package/lib/types/io/graphql/index.d.mts

@@ -0,0 +1,6 @@
+/**
+ * @module integrations/io/graphql
+ * @summary Generic GraphQL endpoint client (queries and mutations).
+ * @description Re-exports the GraphQL client-based service and its types.
+ */
+export * from "./GraphqlService.d.mts";

package/lib/types/io/index.d.cts

@@ -0,0 +1,12 @@
+/**
+ * @module integrations/io
+ * @summary IO integration services (Google Sheets, Airtable, GraphQL, Spreadsheet).
+ * @description Re-exports the data-source services, their per-service modules,
+ * and the shared `io` environment slice. Each sub-module is also available
+ * through its own package subpath export.
+ */
+export * from "./airtable/index.d.cts";
+export * from "./google-sheets/index.d.cts";
+export * from "./graphql/index.d.cts";
+export * from "./spreadsheet/index.d.cts";
+export * from "./environment.d.cts";

package/lib/types/io/index.d.mts

@@ -0,0 +1,12 @@
+/**
+ * @module integrations/io
+ * @summary IO integration services (Google Sheets, Airtable, GraphQL, Spreadsheet).
+ * @description Re-exports the data-source services, their per-service modules,
+ * and the shared `io` environment slice. Each sub-module is also available
+ * through its own package subpath export.
+ */
+export * from "./airtable/index.d.mts";
+export * from "./google-sheets/index.d.mts";
+export * from "./graphql/index.d.mts";
+export * from "./spreadsheet/index.d.mts";
+export * from "./environment.d.mts";

package/lib/types/io/spreadsheet/SpreadsheetService.d.cts

@@ -0,0 +1,144 @@
+/**
+ * @module integrations/io/spreadsheet/service
+ * @summary Delimiter-agnostic spreadsheet parsing and serialization service.
+ * @description Parses and serializes CSV, TSV, and JSON tabular content
+ * without external dependencies: a hand-written RFC 4180-style parser (quoted
+ * fields, escaped quotes, CRLF handling) and a quoting serializer. Unlike the
+ * other io services it is not HTTP-backed and requires no configuration — it
+ * operates purely on in-memory strings and arrays.
+ */
+/**
+ * @description The tabular content formats the spreadsheet service handles
+ * @summary `"csv"` (comma-delimited), `"tsv"` (tab-delimited), and `"json"`
+ * (an array of rows or of records keyed by column name).
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export type SpreadsheetFormat = "csv" | "tsv" | "json";
+/**
+ * @description Options controlling how spreadsheet content is parsed
+ * @summary Selects the `format` (inferred from the `delimiter` when omitted:
+ * `"\t"` implies `"tsv"`, otherwise `"csv"`) and whether the first parsed row
+ * is treated as a header (`true` by default; set `header: false` to keep it
+ * in `rows` and receive an empty `header`).
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export interface SpreadsheetParseOptions {
+    /**
+     * @description Explicit content format; inferred from `delimiter` when omitted
+     */
+    format?: SpreadsheetFormat;
+    /**
+     * @description Delimiter for delimited formats; defaults to `","` for CSV and `"\t"` for TSV
+     */
+    delimiter?: string;
+    /**
+     * @description Whether the first row is a header; defaults to `true`
+     */
+    header?: boolean;
+}
+/**
+ * @description Result of parsing spreadsheet content
+ * @summary Carries the resolved `format`, the `header` row (empty when
+ * `header: false` was requested), and the remaining data `rows`.
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export interface SpreadsheetParseResult {
+    format: SpreadsheetFormat;
+    header: string[];
+    rows: string[][];
+}
+/**
+ * @description Options controlling how rows are serialized to spreadsheet content
+ * @summary Selects the `format` (inferred from the `delimiter` when omitted),
+ * the `delimiter` for delimited formats, and an optional `header` row written
+ * before the data. For `"json"`, the `header` values become the record keys
+ * (falling back to the first data row as keys).
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export interface SpreadsheetWriteOptions {
+    /**
+     * @description Explicit output format; inferred from `delimiter` when omitted
+     */
+    format?: SpreadsheetFormat;
+    /**
+     * @description Delimiter for delimited formats; defaults to `","` for CSV and `"\t"` for TSV
+     */
+    delimiter?: string;
+    /**
+     * @description Header row written before the data (or used as record keys for JSON)
+     */
+    header?: string[];
+}
+/**
+ * @description Dependency-free spreadsheet parsing and serialization service
+ * @summary A stateless (no configuration, no HTTP client) service that
+ * converts between tabular strings and row arrays. `parse` handles CSV and
+ * TSV with a quoted-field parser (double-quote escaping, CRLF stripping,
+ * blank-row filtering) and JSON arrays of rows or records; `serialize`
+ * writes CSV/TSV with RFC 4180-style quoting of fields containing the
+ * delimiter, quotes, or line breaks, or pretty-printed JSON records. Values
+ * are stringified with `null`/`undefined` as empty cells and objects as JSON.
+ * @class SpreadsheetService
+ * @category IO
+ * @example
+ * ```ts
+ * import { SpreadsheetService } from "@decaf-ts/integrations/io/spreadsheet";
+ *
+ * const spreadsheets = new SpreadsheetService();
+ * const parsed = spreadsheets.parse("name,count\nalpha,1\nbeta,2", {
+ *   format: "csv",
+ * });
+ * // parsed.header === ["name", "count"], parsed.rows === [["alpha", "1"], ["beta", "2"]]
+ * ```
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export declare class SpreadsheetService {
+    /**
+     * @description Parses spreadsheet text into a header and data rows
+     * @summary Dispatches on the resolved format. `"json"` content must be an
+     * array: either an array of arrays (the first row becomes the header unless
+     * `header: false`) or an array of records (the union of the first record's
+     * keys becomes the header). CSV/TSV content is parsed with a quoted-field
+     * parser honoring `""` escapes and CR/LF line endings, dropping blank rows;
+     * the first row becomes the header unless `header: false`.
+     * @param {string} content - The spreadsheet text content to parse.
+     * @param {SpreadsheetParseOptions} [options] - Format, delimiter, and header options.
+     * @returns {SpreadsheetParseResult} The resolved format, header row, and data rows.
+     * @throws {InternalError} When the content is not a string, the JSON payload is invalid, or the JSON payload is not an array.
+     * @example
+     * ```ts
+     * // TSV with an explicit delimiter and no header row
+     * const tsv = spreadsheets.parse("alpha\t1\nbeta\t2", { delimiter: "\t", header: false });
+     * // JSON records infer the header from the first record's keys
+     * const json = spreadsheets.parse('[{"name":"alpha","count":1}]', { format: "json" });
+     * ```
+     */
+    parse(content: string, options?: SpreadsheetParseOptions): SpreadsheetParseResult;
+    /**
+     * @description Serializes rows into spreadsheet text
+     * @summary Stringifies each cell (objects become JSON, `null`/`undefined`
+     * become empty cells) and dispatches on the resolved format. For `"json"`,
+     * the optional `header` values (or the first data row) become the record
+     * keys and the output is pretty-printed JSON records. For `"csv"`/`"tsv"`,
+     * fields containing the delimiter, quotes, or line breaks are wrapped in
+     * double quotes with inner quotes escaped, and the optional `header` row is
+     * written first. Non-array rows are treated as single-cell rows.
+     * @param {unknown[][]} rows - The data rows to serialize.
+     * @param {SpreadsheetWriteOptions} [options] - Format, delimiter, and header options.
+     * @returns {string} The serialized spreadsheet content.
+     * @throws {InternalError} When `rows` is not an array.
+     * @example
+     * ```ts
+     * const csv = spreadsheets.serialize(
+     *   [["alpha", 1], ["beta, gamma", 2]],
+     *   { format: "csv", header: ["name", "count"] }
+     * );
+     * // "name,count\nalpha,1\n\"beta, gamma\",2"
+     * ```
+     */
+    serialize(rows: unknown[][], options?: SpreadsheetWriteOptions): string;
+}

package/lib/types/io/spreadsheet/SpreadsheetService.d.mts

@@ -0,0 +1,144 @@
+/**
+ * @module integrations/io/spreadsheet/service
+ * @summary Delimiter-agnostic spreadsheet parsing and serialization service.
+ * @description Parses and serializes CSV, TSV, and JSON tabular content
+ * without external dependencies: a hand-written RFC 4180-style parser (quoted
+ * fields, escaped quotes, CRLF handling) and a quoting serializer. Unlike the
+ * other io services it is not HTTP-backed and requires no configuration — it
+ * operates purely on in-memory strings and arrays.
+ */
+/**
+ * @description The tabular content formats the spreadsheet service handles
+ * @summary `"csv"` (comma-delimited), `"tsv"` (tab-delimited), and `"json"`
+ * (an array of rows or of records keyed by column name).
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export type SpreadsheetFormat = "csv" | "tsv" | "json";
+/**
+ * @description Options controlling how spreadsheet content is parsed
+ * @summary Selects the `format` (inferred from the `delimiter` when omitted:
+ * `"\t"` implies `"tsv"`, otherwise `"csv"`) and whether the first parsed row
+ * is treated as a header (`true` by default; set `header: false` to keep it
+ * in `rows` and receive an empty `header`).
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export interface SpreadsheetParseOptions {
+    /**
+     * @description Explicit content format; inferred from `delimiter` when omitted
+     */
+    format?: SpreadsheetFormat;
+    /**
+     * @description Delimiter for delimited formats; defaults to `","` for CSV and `"\t"` for TSV
+     */
+    delimiter?: string;
+    /**
+     * @description Whether the first row is a header; defaults to `true`
+     */
+    header?: boolean;
+}
+/**
+ * @description Result of parsing spreadsheet content
+ * @summary Carries the resolved `format`, the `header` row (empty when
+ * `header: false` was requested), and the remaining data `rows`.
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export interface SpreadsheetParseResult {
+    format: SpreadsheetFormat;
+    header: string[];
+    rows: string[][];
+}
+/**
+ * @description Options controlling how rows are serialized to spreadsheet content
+ * @summary Selects the `format` (inferred from the `delimiter` when omitted),
+ * the `delimiter` for delimited formats, and an optional `header` row written
+ * before the data. For `"json"`, the `header` values become the record keys
+ * (falling back to the first data row as keys).
+ * @category IO
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export interface SpreadsheetWriteOptions {
+    /**
+     * @description Explicit output format; inferred from `delimiter` when omitted
+     */
+    format?: SpreadsheetFormat;
+    /**
+     * @description Delimiter for delimited formats; defaults to `","` for CSV and `"\t"` for TSV
+     */
+    delimiter?: string;
+    /**
+     * @description Header row written before the data (or used as record keys for JSON)
+     */
+    header?: string[];
+}
+/**
+ * @description Dependency-free spreadsheet parsing and serialization service
+ * @summary A stateless (no configuration, no HTTP client) service that
+ * converts between tabular strings and row arrays. `parse` handles CSV and
+ * TSV with a quoted-field parser (double-quote escaping, CRLF stripping,
+ * blank-row filtering) and JSON arrays of rows or records; `serialize`
+ * writes CSV/TSV with RFC 4180-style quoting of fields containing the
+ * delimiter, quotes, or line breaks, or pretty-printed JSON records. Values
+ * are stringified with `null`/`undefined` as empty cells and objects as JSON.
+ * @class SpreadsheetService
+ * @category IO
+ * @example
+ * ```ts
+ * import { SpreadsheetService } from "@decaf-ts/integrations/io/spreadsheet";
+ *
+ * const spreadsheets = new SpreadsheetService();
+ * const parsed = spreadsheets.parse("name,count\nalpha,1\nbeta,2", {
+ *   format: "csv",
+ * });
+ * // parsed.header === ["name", "count"], parsed.rows === [["alpha", "1"], ["beta", "2"]]
+ * ```
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export declare class SpreadsheetService {
+    /**
+     * @description Parses spreadsheet text into a header and data rows
+     * @summary Dispatches on the resolved format. `"json"` content must be an
+     * array: either an array of arrays (the first row becomes the header unless
+     * `header: false`) or an array of records (the union of the first record's
+     * keys becomes the header). CSV/TSV content is parsed with a quoted-field
+     * parser honoring `""` escapes and CR/LF line endings, dropping blank rows;
+     * the first row becomes the header unless `header: false`.
+     * @param {string} content - The spreadsheet text content to parse.
+     * @param {SpreadsheetParseOptions} [options] - Format, delimiter, and header options.
+     * @returns {SpreadsheetParseResult} The resolved format, header row, and data rows.
+     * @throws {InternalError} When the content is not a string, the JSON payload is invalid, or the JSON payload is not an array.
+     * @example
+     * ```ts
+     * // TSV with an explicit delimiter and no header row
+     * const tsv = spreadsheets.parse("alpha\t1\nbeta\t2", { delimiter: "\t", header: false });
+     * // JSON records infer the header from the first record's keys
+     * const json = spreadsheets.parse('[{"name":"alpha","count":1}]', { format: "json" });
+     * ```
+     */
+    parse(content: string, options?: SpreadsheetParseOptions): SpreadsheetParseResult;
+    /**
+     * @description Serializes rows into spreadsheet text
+     * @summary Stringifies each cell (objects become JSON, `null`/`undefined`
+     * become empty cells) and dispatches on the resolved format. For `"json"`,
+     * the optional `header` values (or the first data row) become the record
+     * keys and the output is pretty-printed JSON records. For `"csv"`/`"tsv"`,
+     * fields containing the delimiter, quotes, or line breaks are wrapped in
+     * double quotes with inner quotes escaped, and the optional `header` row is
+     * written first. Non-array rows are treated as single-cell rows.
+     * @param {unknown[][]} rows - The data rows to serialize.
+     * @param {SpreadsheetWriteOptions} [options] - Format, delimiter, and header options.
+     * @returns {string} The serialized spreadsheet content.
+     * @throws {InternalError} When `rows` is not an array.
+     * @example
+     * ```ts
+     * const csv = spreadsheets.serialize(
+     *   [["alpha", 1], ["beta, gamma", 2]],
+     *   { format: "csv", header: ["name", "count"] }
+     * );
+     * // "name,count\nalpha,1\n\"beta, gamma\",2"
+     * ```
+     */
+    serialize(rows: unknown[][], options?: SpreadsheetWriteOptions): string;
+}

package/lib/types/io/spreadsheet/index.d.cts

@@ -0,0 +1,7 @@
+/**
+ * @module integrations/io/spreadsheet
+ * @summary Tabular text parse/serialize service (CSV, TSV, JSON lines).
+ * @description Re-exports the offline spreadsheet service and its types; no
+ * network or credentials are involved.
+ */
+export * from "./SpreadsheetService.d.cts";

package/lib/types/io/spreadsheet/index.d.mts

@@ -0,0 +1,7 @@
+/**
+ * @module integrations/io/spreadsheet
+ * @summary Tabular text parse/serialize service (CSV, TSV, JSON lines).
+ * @description Re-exports the offline spreadsheet service and its types; no
+ * network or credentials are involved.
+ */
+export * from "./SpreadsheetService.d.mts";

package/lib/types/namespaces/index.d.cts

@@ -6,3 +6,4 @@ export * from "./types.d.cts";
 export * from "./utils.d.cts";
 export * from "./models/index.d.cts";
 export * from "./services/index.d.cts";
+export * from "./rls/index.d.cts";

package/lib/types/namespaces/index.d.mts

@@ -6,3 +6,4 @@ export * from "./types.d.mts";
 export * from "./utils.d.mts";
 export * from "./models/index.d.mts";
 export * from "./services/index.d.mts";
+export * from "./rls/index.d.mts";

package/lib/types/namespaces/models/credential.model.d.cts

@@ -0,0 +1,23 @@
+import { CredentialProvider } from "../types.d.cts";
+import { AuthorizationModel } from "./authorization-model.d.cts";
+import { Tenant } from "./tenant.model.d.cts";
+import { OrgUnit } from "./org-unit.model.d.cts";
+import { Principal } from "./principal.model.d.cts";
+export declare class Credential extends AuthorizationModel {
+    id: string;
+    tenant: Tenant | string;
+    orgUnit?: OrgUnit | string;
+    owner?: Principal | string;
+    name: string;
+    credentialType: string;
+    secretName: string;
+    provider: CredentialProvider;
+    description?: string;
+    enabled: boolean;
+    metadata?: Record<string, unknown>;
+    expiresAt?: Date;
+    lastUsedAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(data?: unknown);
+}

package/lib/types/namespaces/models/credential.model.d.mts

@@ -0,0 +1,23 @@
+import { CredentialProvider } from "../types.d.mts";
+import { AuthorizationModel } from "./authorization-model.d.mts";
+import { Tenant } from "./tenant.model.d.mts";
+import { OrgUnit } from "./org-unit.model.d.mts";
+import { Principal } from "./principal.model.d.mts";
+export declare class Credential extends AuthorizationModel {
+    id: string;
+    tenant: Tenant | string;
+    orgUnit?: OrgUnit | string;
+    owner?: Principal | string;
+    name: string;
+    credentialType: string;
+    secretName: string;
+    provider: CredentialProvider;
+    description?: string;
+    enabled: boolean;
+    metadata?: Record<string, unknown>;
+    expiresAt?: Date;
+    lastUsedAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(data?: unknown);
+}

package/lib/types/namespaces/models/index.d.cts

@@ -19,3 +19,4 @@ export * from "./protected-resource.model.d.cts";
 export * from "./resource-grant.model.d.cts";
 export * from "./effective-permission.model.d.cts";
 export * from "./storage-binding.model.d.cts";
+export * from "./credential.model.d.cts";

package/lib/types/namespaces/models/index.d.mts

@@ -19,3 +19,4 @@ export * from "./protected-resource.model.d.mts";
 export * from "./resource-grant.model.d.mts";
 export * from "./effective-permission.model.d.mts";
 export * from "./storage-binding.model.d.mts";
+export * from "./credential.model.d.mts";

package/lib/types/namespaces/rls/index.d.cts

@@ -0,0 +1,10 @@
+/**
+ * @module integrations/namespaces/rls
+ * @summary Namespace row-level-security template, bootstrap service, and session helpers.
+ */
+export * from "./rls.constants.d.cts";
+export * from "./rls.types.d.cts";
+export * from "./rls.template.d.cts";
+export * from "./rls-bootstrap.service.d.cts";
+export * from "./principal-resolver.d.cts";
+export * from "./session-binding.d.cts";

package/lib/types/namespaces/rls/index.d.mts

@@ -0,0 +1,10 @@
+/**
+ * @module integrations/namespaces/rls
+ * @summary Namespace row-level-security template, bootstrap service, and session helpers.
+ */
+export * from "./rls.constants.d.mts";
+export * from "./rls.types.d.mts";
+export * from "./rls.template.d.mts";
+export * from "./rls-bootstrap.service.d.mts";
+export * from "./principal-resolver.d.mts";
+export * from "./session-binding.d.mts";