@modelprofile.com/authswitch 6.4.0 → 7.0.0

package/dist_ts/classes.claudeauthority.d.ts

@@ -0,0 +1,66 @@
+import type { IAuthSwitchClaudeNativeHandoff } from './authority-contract.js';
+import { AuthSwitchAuthorityDatabase } from './classes.authoritydatabase.js';
+import type { IStoredAuthorityGrant } from './classes.authoritymodels.js';
+import { ClaudeNativeAdapter } from './classes.claudenative.js';
+import { ClaudeTokenRefresh } from './classes.claudetokenrefresh.js';
+import { type IAuthSwitchSecretCodec } from './classes.authoritysecrets.js';
+import type { IClaudeLogin } from './classes.claudestatus.js';
+import type { IAuthSwitchUsageContext, IAuthSwitchUsageSnapshot } from './classes.authorityusage.js';
+export interface IClaudeNativeAuthorityOptions {
+    homeId: string;
+    adapter: ClaudeNativeAdapter;
+    secrets?: IAuthSwitchSecretCodec;
+    refresh?: ClaudeTokenRefresh;
+    now?: () => number;
+    onChanged?: () => void;
+}
+/** Daemon-owned Claude refresh and a journaled transfer of one native home between two grants. */
+export declare class ClaudeNativeAuthority {
+    private readonly database;
+    private readonly options;
+    private readonly secrets;
+    private readonly refresh;
+    private readonly now;
+    private readonly activeRefreshes;
+    private readonly activeHandoffs;
+    private closed;
+    constructor(database: AuthSwitchAuthorityDatabase, options: IClaudeNativeAuthorityOptions);
+    private timestamp;
+    private changed;
+    private eventIds;
+    private grantStep;
+    private homeStep;
+    private sealLogin;
+    private unsealLogin;
+    private change;
+    start(): Promise<void>;
+    refreshInactiveGrant(grantId: string, rejectedGrantGeneration?: number, minValidityMs?: number, expectedGrant?: Pick<IStoredAuthorityGrant, 'revision' | 'grantGeneration' | 'ciphertext'>): Promise<void>;
+    private performRefresh;
+    private statusLogin;
+    /** Backend-only inactive access. Only this owner may rotate, with a durable pre-send marker. */
+    resolveInactiveStatusLogin(context: IAuthSwitchUsageContext, rejectedGrantGeneration: number | undefined, minValidityMs: number): Promise<{
+        login: IClaudeLogin;
+        grantGeneration: number;
+        expiresAt: string | null;
+    }>;
+    /** Keep the exact native source and qualified vendor locks through status GET and publication. */
+    withNativeUsageSource(context: IAuthSwitchUsageContext, action: (source: {
+        context: IAuthSwitchUsageContext;
+        login: IClaudeLogin;
+        readContext(): Promise<IAuthSwitchUsageContext | null>;
+    }) => Promise<IAuthSwitchUsageSnapshot>): Promise<IAuthSwitchUsageSnapshot>;
+    private reserve;
+    private prepare;
+    private settle;
+    private classify;
+    reconcileOperation(operationId: string): Promise<IAuthSwitchClaudeNativeHandoff>;
+    reconcilePending(): Promise<void>;
+    switchTo(accountId: string, loginId: string): Promise<IAuthSwitchClaudeNativeHandoff>;
+    private performSwitch;
+    getHandoff(operationId: string): Promise<IAuthSwitchClaudeNativeHandoff>;
+    listHandoffs(after: string | null, limit?: number): Promise<{
+        handoffs: IAuthSwitchClaudeNativeHandoff[];
+        nextCursor: string | null;
+    }>;
+    close(): Promise<void>;
+}