@modelprofile.com/authswitch 6.4.0 → 7.0.0

package/dist_ts/classes.authoritymodels.d.ts

@@ -1,6 +1,10 @@
 import * as plugins from './plugins.js';
+import type { TAuthSwitchLoginPrompt } from './authority-contract.js';
+import type { IAuthSwitchStoredUsage } from './classes.authorityusage.js';
 export interface IStoredAuthorityMeta {
     id: 'authswitch-authority';
+    schemaVersion: 2;
+    admission: 'open' | 'closed_restored';
     epoch: string;
     revision: number;
     updateId: string;
@@ -29,7 +33,7 @@ export interface IStoredAuthorityGrant {
     providerId: string;
     purpose: TStoredGrantPurpose;
     audience: string;
-    state: 'ready' | 'exchange_may_have_been_sent' | 'retry_wait' | 'needs_reauth' | 'native' | 'legacy_native_pending' | 'removed';
+    state: 'ready' | 'exchange_may_have_been_sent' | 'retry_wait' | 'needs_reauth' | 'native' | 'legacy_native_pending' | 'handoff_pending' | 'handoff_quarantined' | 'removed';
     owner: 'daemon' | 'claude_native' | 'legacy_native' | 'none';
     grantGeneration: number;
     authorizationGeneration: number;
@@ -43,6 +47,13 @@ export interface IStoredAuthorityGrant {
     statusObservedAt: string;
     updateId: string;
 }
+/** Credential-free provider usage cached for one exact account/login pair. */
+export interface IStoredAuthorityUsage extends IAuthSwitchStoredUsage {
+    id: string;
+    accountId: string;
+    loginId: string;
+}
+export declare const authorityUsageId: (accountId: string, loginId: string) => string;
 export interface IStoredAuthorityBinding {
     id: string;
     accountId: string;
@@ -63,6 +74,63 @@ export interface IStoredAuthorityEnrollment {
     revision: number;
     updateId: string;
 }
+/** An immutable assignment of one private native Codex state home to one account and runtime scope. */
+export interface IStoredAuthorityCodexHome {
+    id: string;
+    accountId: string;
+    grantId: string;
+    scopeId: string;
+    activeRun: {
+        id: string;
+        socketPath: string;
+        pid: number | null;
+        startedAt: string | null;
+    } | null;
+    createdAt: string;
+    updateId: string;
+}
+/** One vendor home owns at most one active Claude grant; activeGrantId has a unique index. */
+export interface IStoredAuthorityClaudeHome {
+    id: string;
+    activeAccountId: string;
+    activeGrantId: string;
+    pendingOperationId: string | null;
+    status: 'ready' | 'quarantined';
+    revision: number;
+    createdAt: string;
+    updateId: string;
+}
+export interface IStoredAuthorityNativePair {
+    credentialDigest: string | null;
+    configDigest: string | null;
+}
+export interface IStoredAuthorityNativeIdentity {
+    accountUuid: string;
+    organizationUuid: string;
+}
+/** Backend-only proof for one exact two-grant native transfer. */
+export interface IStoredAuthorityClaudeHandoff {
+    id: string;
+    homeId: string;
+    outgoingAccountId: string;
+    outgoingGrantId: string;
+    incomingAccountId: string;
+    incomingGrantId: string;
+    phase: 'reserved' | 'prepared' | 'committed' | 'aborted' | 'quarantined';
+    before: IStoredAuthorityNativePair | null;
+    after: IStoredAuthorityNativePair | null;
+    sourceIdentity: IStoredAuthorityNativeIdentity;
+    targetIdentity: IStoredAuthorityNativeIdentity;
+    sourceAccessDigest: string | null;
+    targetAccessDigest: string | null;
+    sealedOutgoing: string | null;
+    runningEffectiveAuth: 'no_scoped_sessions' | 'unsupported_effective_auth' | null;
+    problem: 'none' | 'native_uncertain' | 'foreign_or_torn' | 'unsupported_effective_auth' | 'database_uncertain';
+    startedAt: string;
+    updatedAt: string;
+    revision: number;
+    updateId: string;
+}
 /** Journal for a native-home handoff. A prepared grant is never usable. */
 export interface IStoredAuthorityHandoff {
     id: string;
@@ -101,17 +169,110 @@ export interface IStoredAuthorityEvent {
     kind: 'account' | 'binding';
     accountId: string;
 }
+/** A device flow and its immutable result receipt. Provider work is never resumed from this record. */
+export interface IStoredAuthorityDeviceOperation {
+    id: string;
+    kind: 'add_openai' | 'reauth_openai';
+    purpose: 'openai_managed';
+    accountId: string | null;
+    grantId: string | null;
+    expectedGrantGeneration: number | null;
+    state: 'starting' | 'pending' | 'committing' | 'complete' | 'failed' | 'cancelled' | 'interrupted' | 'outcome_unknown';
+    prompt: TAuthSwitchLoginPrompt | null;
+    result: {
+        accountId: string;
+        grantId: string;
+        accountRevision: number;
+        grantGeneration: number;
+    } | null;
+    error: string | null;
+    commitId: string | null;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}
+export type TStoredAuthorityPreuseProblem = 'none' | 'target_unavailable' | 'access_unavailable' | 'catalog_unavailable' | 'account_busy' | 'cancelled' | 'authority_closing' | 'interrupted' | 'request_uncertain' | 'restored_history_uncertain';
+/** One quota-consuming request. The prompt and generated prose never enter persistence. */
+export interface IStoredAuthorityPreuseOperation {
+    id: string;
+    kind: 'preuse_openai';
+    purpose: 'openai_managed';
+    accountId: string;
+    grantId: string;
+    /** Hash of the exact target, prompt and requested model; used only for idempotent admission. */
+    requestHash: string;
+    requestedModel: string | null;
+    model: string | null;
+    authorizationGeneration: number;
+    grantGeneration: number | null;
+    state: 'preparing' | 'request_may_have_started' | 'complete' | 'not_sent' | 'outcome_unknown';
+    result: {
+        inputTokens: number | null;
+        outputTokens: number | null;
+        totalTokens: number | null;
+    } | null;
+    problem: TStoredAuthorityPreuseProblem;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}
+export type IStoredAuthorityOperation = IStoredAuthorityDeviceOperation | IStoredAuthorityPreuseOperation;
+/** Decorated storage fields shared by the two exact discriminated operation variants. */
+export interface IStoredAuthorityOperationDocument {
+    id: string;
+    kind: IStoredAuthorityOperation['kind'];
+    purpose: 'openai_managed';
+    accountId: string | null;
+    grantId: string | null;
+    expectedGrantGeneration?: number | null;
+    state: IStoredAuthorityOperation['state'];
+    prompt?: TAuthSwitchLoginPrompt | null;
+    result: IStoredAuthorityOperation['result'];
+    error?: string | null;
+    commitId?: string | null;
+    requestHash?: string;
+    requestedModel?: string | null;
+    model?: string | null;
+    authorizationGeneration?: number;
+    grantGeneration?: number | null;
+    problem?: TStoredAuthorityPreuseProblem;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}
+export declare const assertStoredAuthorityUsage: (value: unknown) => asserts value is IStoredAuthorityUsage;
 export declare const assertStoredAuthorityMeta: (value: unknown) => asserts value is IStoredAuthorityMeta;
 export declare const assertStoredAuthorityAccount: (value: unknown) => asserts value is IStoredAuthorityAccount;
 export declare const assertStoredAuthorityGrant: (value: unknown) => asserts value is IStoredAuthorityGrant;
 export declare const assertStoredAuthorityBinding: (value: unknown) => asserts value is IStoredAuthorityBinding;
 export declare const assertStoredAuthorityEnrollment: (value: unknown) => asserts value is IStoredAuthorityEnrollment;
+export declare const assertStoredAuthorityCodexHome: (value: unknown) => asserts value is IStoredAuthorityCodexHome;
+export declare const assertStoredAuthorityClaudeHome: (value: unknown) => asserts value is IStoredAuthorityClaudeHome;
+export declare const assertStoredAuthorityClaudeHandoff: (value: unknown) => asserts value is IStoredAuthorityClaudeHandoff;
 export declare const assertStoredAuthorityHandoff: (value: unknown) => asserts value is IStoredAuthorityHandoff;
 export declare const assertStoredAuthorityMigrationLedger: (value: unknown) => asserts value is IStoredAuthorityMigrationLedger;
 export declare const assertStoredAuthorityEvent: (value: unknown) => asserts value is IStoredAuthorityEvent;
+export declare const assertStoredAuthorityOperation: (value: unknown) => asserts value is IStoredAuthorityOperation;
+export declare const assertStoredAuthorityOperationDocument: (value: unknown) => asserts value is IStoredAuthorityOperationDocument;
+/**
+ * Converts unresolved snapshot history into an immutable restored receipt. A live restart has stronger
+ * evidence and is handled separately: a snapshot captured in `preparing` may have sent after capture.
+ */
+export declare const restoreStoredAuthorityOperation: (operation: IStoredAuthorityOperation, options: {
+    restoredAt: string;
+    updateId: string;
+}) => IStoredAuthorityOperation;
 export declare class AuthSwitchAuthorityMetaModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityMetaModel, IStoredAuthorityMeta> {
     static exact: plugins.smartdata.TExact<AuthSwitchAuthorityMetaModel>;
     id: 'authswitch-authority';
+    schemaVersion: 2;
+    admission: IStoredAuthorityMeta['admission'];
     epoch: string;
     revision: number;
     updateId: string;
@@ -153,6 +314,22 @@ export declare class AuthSwitchAuthorityGrantModel extends plugins.smartdata.Sma
     statusObservedAt: string;
     updateId: string;
 }
+export declare class AuthSwitchAuthorityUsageModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityUsageModel, IStoredAuthorityUsage> {
+    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityUsageModel>;
+    id: string;
+    accountId: string;
+    loginId: string;
+    context: IAuthSwitchStoredUsage['context'];
+    updateId: string;
+    reading: IAuthSwitchStoredUsage['reading'];
+    observedAt: string | null;
+    currentUntil: string | null;
+    staleUntil: string | null;
+    lastAttemptAt: string;
+    nextAttemptAt: string;
+    failures: number;
+    problem: IAuthSwitchStoredUsage['problem'];
+}
 export declare class AuthSwitchAuthorityBindingModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityBindingModel, IStoredAuthorityBinding> {
     static exact: plugins.smartdata.TExact<AuthSwitchAuthorityBindingModel>;
     id: string;
@@ -174,6 +351,50 @@ export declare class AuthSwitchAuthorityEnrollmentModel extends plugins.smartdat
     revision: number;
     updateId: string;
 }
+export declare class AuthSwitchAuthorityCodexHomeModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityCodexHomeModel, IStoredAuthorityCodexHome> {
+    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityCodexHomeModel>;
+    id: string;
+    accountId: string;
+    grantId: string;
+    scopeId: string;
+    activeRun: IStoredAuthorityCodexHome['activeRun'];
+    createdAt: string;
+    updateId: string;
+}
+export declare class AuthSwitchAuthorityClaudeHomeModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityClaudeHomeModel, IStoredAuthorityClaudeHome> {
+    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityClaudeHomeModel>;
+    id: string;
+    activeAccountId: string;
+    activeGrantId: string;
+    pendingOperationId: string | null;
+    status: IStoredAuthorityClaudeHome['status'];
+    revision: number;
+    createdAt: string;
+    updateId: string;
+}
+export declare class AuthSwitchAuthorityClaudeHandoffModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityClaudeHandoffModel, IStoredAuthorityClaudeHandoff> {
+    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityClaudeHandoffModel>;
+    id: string;
+    homeId: string;
+    outgoingAccountId: string;
+    outgoingGrantId: string;
+    incomingAccountId: string;
+    incomingGrantId: string;
+    phase: IStoredAuthorityClaudeHandoff['phase'];
+    before: IStoredAuthorityNativePair | null;
+    after: IStoredAuthorityNativePair | null;
+    sourceIdentity: IStoredAuthorityNativeIdentity;
+    targetIdentity: IStoredAuthorityNativeIdentity;
+    sourceAccessDigest: string | null;
+    targetAccessDigest: string | null;
+    sealedOutgoing: string | null;
+    runningEffectiveAuth: IStoredAuthorityClaudeHandoff['runningEffectiveAuth'];
+    problem: IStoredAuthorityClaudeHandoff['problem'];
+    startedAt: string;
+    updatedAt: string;
+    revision: number;
+    updateId: string;
+}
 export declare class AuthSwitchAuthorityHandoffModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityHandoffModel, IStoredAuthorityHandoff> {
     static exact: plugins.smartdata.TExact<AuthSwitchAuthorityHandoffModel>;
     id: string;
@@ -213,3 +434,28 @@ export declare class AuthSwitchAuthorityEventModel extends plugins.smartdata.Sma
     kind: IStoredAuthorityEvent['kind'];
     accountId: string;
 }
+export declare class AuthSwitchAuthorityOperationModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityOperationModel, IStoredAuthorityOperationDocument> {
+    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityOperationModel>;
+    id: string;
+    kind: IStoredAuthorityOperationDocument['kind'];
+    purpose: IStoredAuthorityOperation['purpose'];
+    accountId: string | null;
+    grantId: string | null;
+    expectedGrantGeneration?: number | null;
+    state: IStoredAuthorityOperationDocument['state'];
+    prompt?: TAuthSwitchLoginPrompt | null;
+    result: IStoredAuthorityOperationDocument['result'];
+    error?: string | null;
+    commitId?: string | null;
+    requestHash?: string;
+    requestedModel?: string | null;
+    model?: string | null;
+    authorizationGeneration?: number;
+    grantGeneration?: number | null;
+    problem?: TStoredAuthorityPreuseProblem;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}