@modelprofile.com/authswitch 6.2.0 → 6.4.0

package/dist_ts/classes.authoritydatabase.d.ts

@@ -0,0 +1,94 @@
+import { type IStoredAuthorityAccount, type IStoredAuthorityBinding, type IStoredAuthorityEnrollment, type IStoredAuthorityEvent, type IStoredAuthorityGrant, type IStoredAuthorityHandoff, type IStoredAuthorityMeta, type IStoredAuthorityMigrationLedger } from './classes.authoritymodels.js';
+export interface IAuthSwitchAuthorityDatabaseOptions {
+    dataDirectory: string;
+    socketPath: string;
+}
+/** Separate account, grant, binding and journal records; the only global record is a revision counter. */
+export declare class AuthSwitchAuthorityDatabase {
+    private readonly options;
+    private engine?;
+    private database?;
+    private started;
+    constructor(options: IAuthSwitchAuthorityDatabaseOptions);
+    private privateDirectory;
+    start(): Promise<void>;
+    private db;
+    private transaction;
+    readMeta(): Promise<IStoredAuthorityMeta>;
+    readAccount(id: string): Promise<IStoredAuthorityAccount | null>;
+    readBinding(id: string): Promise<IStoredAuthorityBinding | null>;
+    /** One consistent authorization view. Callers must not combine separate binding and grant reads. */
+    readBindingContext(id: string): Promise<{
+        binding: IStoredAuthorityBinding | null;
+        account: IStoredAuthorityAccount | null;
+        grant: IStoredAuthorityGrant | null;
+    }>;
+    readGrant(id: string): Promise<IStoredAuthorityGrant | null>;
+    readEnrollment(id: string): Promise<IStoredAuthorityEnrollment | null>;
+    readHandoff(id: string): Promise<IStoredAuthorityHandoff | null>;
+    readMigrationLedger(id: string): Promise<IStoredAuthorityMigrationLedger | null>;
+    migrationLedgerByStatus(status: IStoredAuthorityMigrationLedger['status'], after: string | null, limit?: number): Promise<IStoredAuthorityMigrationLedger[]>;
+    readAccountAndPrimaryGrant(id: string): Promise<{
+        account: IStoredAuthorityAccount | null;
+        grant: IStoredAuthorityGrant | null;
+    }>;
+    page(accountAfter: string | null, bindingAfter: string | null, limit: number): Promise<{
+        meta: IStoredAuthorityMeta;
+        accounts: Array<{
+            account: IStoredAuthorityAccount;
+            grant: IStoredAuthorityGrant | null;
+        }>;
+        bindings: IStoredAuthorityBinding[];
+        nextAccountCursor: string | null;
+        nextBindingCursor: string | null;
+    }>;
+    grantsByState(state: IStoredAuthorityGrant['state'], after: string | null, limit?: number): Promise<IStoredAuthorityGrant[]>;
+    grantsForAccount(accountId: string, after: string | null, limit?: number): Promise<IStoredAuthorityGrant[]>;
+    eventsAfter(revision: number, limit?: number): Promise<IStoredAuthorityEvent[]>;
+    private appendEvent;
+    private persistAccount;
+    private persistGrant;
+    /** Atomic account/grant enrollment or reauthentication. Both records become visible together. */
+    changeAccountAndGrant(updateId: string, accountId: string, grantId: string, change: (account: IStoredAuthorityAccount | null, grant: IStoredAuthorityGrant | null) => {
+        account: IStoredAuthorityAccount;
+        grant: IStoredAuthorityGrant;
+    }): Promise<{
+        meta: IStoredAuthorityMeta;
+        account: IStoredAuthorityAccount;
+        grant: IStoredAuthorityGrant;
+    }>;
+    /** Grant transition and public account revision share a transaction and one event. */
+    changeGrant(updateId: string, grantId: string, change: (grant: IStoredAuthorityGrant, account: IStoredAuthorityAccount) => IStoredAuthorityGrant): Promise<{
+        meta: IStoredAuthorityMeta;
+        account: IStoredAuthorityAccount;
+        grant: IStoredAuthorityGrant;
+    }>;
+    /** Add a distinct per-purpose grant without replacing the account's primary grant. */
+    changeSecondaryGrant(updateId: string, accountId: string, grantId: string, change: (grant: IStoredAuthorityGrant | null, account: IStoredAuthorityAccount) => IStoredAuthorityGrant): Promise<{
+        account: IStoredAuthorityAccount;
+        grant: IStoredAuthorityGrant;
+    }>;
+    /** Remove all managed grants in one transaction; native owners must be stopped and handed off first. */
+    removeAccountAndGrants(updateId: string, accountId: string, expectedRevision: number, statusObservedAt: string): Promise<IStoredAuthorityAccount>;
+    changeAccount(updateId: string, accountId: string, change: (draft: IStoredAuthorityAccount | null) => IStoredAuthorityAccount): Promise<{
+        meta: IStoredAuthorityMeta;
+        account: IStoredAuthorityAccount;
+    }>;
+    changeBinding(updateId: string, bindingId: string, accountId: string, change: (draft: IStoredAuthorityBinding | null, account: IStoredAuthorityAccount, grant: IStoredAuthorityGrant | null) => IStoredAuthorityBinding): Promise<{
+        meta: IStoredAuthorityMeta;
+        binding: IStoredAuthorityBinding;
+    }>;
+    /** Enrollment metadata is sealed by the caller and cannot become detached from an account. */
+    changeEnrollment(updateId: string, enrollmentId: string, accountId: string, change: (current: IStoredAuthorityEnrollment | null) => IStoredAuthorityEnrollment): Promise<IStoredAuthorityEnrollment>;
+    /** Journal and grant advance together; no intermediate phase may expose an active daemon grant. */
+    changeHandoffAndGrant(updateId: string, handoffId: string, grantId: string, change: (current: IStoredAuthorityHandoff | null, grant: IStoredAuthorityGrant, account: IStoredAuthorityAccount) => {
+        handoff: IStoredAuthorityHandoff;
+        grant: IStoredAuthorityGrant;
+    }): Promise<{
+        handoff: IStoredAuthorityHandoff;
+        grant: IStoredAuthorityGrant;
+    }>;
+    /** Ledger transitions never silently replace an active credential or waive backup proof. */
+    changeMigrationLedger(updateId: string, ledgerId: string, change: (current: IStoredAuthorityMigrationLedger | null) => IStoredAuthorityMigrationLedger): Promise<IStoredAuthorityMigrationLedger>;
+    stop(): Promise<void>;
+}