@modelprofile.com/authswitch 6.5.0 → 7.0.0

package/ts/interfaces.list.ts

@@ -2,7 +2,7 @@ import type { IAccountType, IHarnessAccount, IHarnessAccountStatus, IHarnessBill
 
 /** Credential-free, versioned output of list --json. Missing status fields stay omitted. */
 export interface IAccountList {
-  schemaVersion: 2;
+  schemaVersion: 3;
   generatedAt: string;
   complete: boolean;
   harnesses: IHarnessAccountList[];
@@ -22,7 +22,7 @@ export interface IHarnessAccountList {
 
 /** Credential-free, versioned output of limits --json. One entry per account and limit type. */
 export interface IAccountLimits {
-  schemaVersion: 1;
+  schemaVersion: 2;
   generatedAt: string;
   complete: boolean;
   limits: IAccountLimitRow[];
@@ -36,6 +36,9 @@ export interface IAccountLimitRow {
   provider: string;
   /** The account's public label, which is its email wherever the provider reports one. */
   account: string | null;
+  /** Exact provider-native account identifier; null when unavailable or this row names no account. */
+  providerAccountId: string | null;
+  /** Opaque authswitch account identifier used for harness operations. */
   accountId: string | null;
   slotId?: string;
   isActive: boolean;
@@ -61,7 +64,7 @@ export interface IAccountLimitRow {
 
 /** Credential-free, versioned output of active --json. One entry per active credential slot. */
 export interface IActiveAccounts {
-  schemaVersion: 1;
+  schemaVersion: 2;
   generatedAt: string;
   complete: boolean;
   active: IActiveAccountRow[];
@@ -72,6 +75,9 @@ export interface IActiveAccountRow {
   harnessId: string;
   provider: string;
   account: string | null;
+  /** Exact provider-native account identifier; null when unavailable or this row names no account. */
+  providerAccountId: string | null;
+  /** Opaque authswitch account identifier used for harness operations. */
   accountId: string | null;
   slotId?: string;
   /** The adapter's plan name (`max`, `pro`), sanitised but not display-formatted; null when none is known or the row names no account. */

package/ts/plugins.ts

@@ -5,11 +5,12 @@ import * as path from 'node:path';
 import * as childProcess from 'node:child_process';
 import * as crypto from 'node:crypto';
 import * as net from 'node:net';
+import * as stream from 'node:stream';
 import { createRequire } from 'node:module';
 import { fileURLToPath } from 'node:url';
 import type { DatabaseSync } from 'node:sqlite';
 
-export { childProcess, crypto, fileURLToPath, fs, net, os, path };
+export { childProcess, crypto, fileURLToPath, fs, net, os, path, stream };
 export type { DatabaseSync };
 const nativeRequire = createRequire(import.meta.url);
 /** SQLite is needed only when accessing a Codex state database, not when hosting account APIs. */
@@ -24,14 +25,18 @@ export type TProperLockfile = typeof properLockfile;
  */
 export const loadProperLockfile = (): Promise<TProperLockfile> => import('proper-lockfile');
 
+// @lossless.org modules
+import * as smartbucket from '@lossless.org/client/objectstorage';
+
 // @push.rocks modules
 import * as smartconsole from '@push.rocks/smartconsole';
+import * as smartcrypto from '@push.rocks/smartcrypto';
 import * as smartdata from '@push.rocks/smartdata';
 import * as smartdb from '@push.rocks/smartdb';
 import * as smartsecret from '@push.rocks/smartsecret';
 import * as smartdaemon from '@push.rocks/smartdaemon';
 import * as typedrequest from '@api.global/typedrequest';
-export { smartconsole, smartdata, smartdb, smartsecret, smartdaemon, typedrequest };
+export { smartbucket, smartconsole, smartcrypto, smartdata, smartdb, smartsecret, smartdaemon, typedrequest };
 
 // @modelprofile.com modules
 import * as flexModels from '@modelprofile.com/flexharness-models';

package/ts/ts_migration/0001_authority_meta.ts

@@ -0,0 +1,33 @@
+import type { SmartdataDb } from '@push.rocks/smartdata';
+import { assertStoredAuthorityMeta } from '../classes.authoritymodels.js';
+
+const reserved = new Set(['_id', '_smartdataRevision', '_createdAt', '_updatedAt']);
+const keys = ['id', 'epoch', 'revision', 'updateId'];
+const uuid = (value: unknown): boolean => typeof value === 'string' && /^[a-f0-9-]{36}$/.test(value);
+
+/** One-time published 6.4/6.5 metadata upgrade, under the exclusive LocalSmartDb root owner. */
+export const migrateAuthorityMetaV1 = async (db: SmartdataDb): Promise<void> => {
+  const collection = db.mongoDb.collection('authswitch_authority_meta');
+  const stored = await collection.findOne({ id: 'authswitch-authority' });
+  if (!stored) throw new Error('Existing authswitch authority database has no metadata.');
+  const body = Object.fromEntries(Object.entries(stored).filter(([key]) => !reserved.has(key)));
+  if (body.schemaVersion === 2) {
+    assertStoredAuthorityMeta(body);
+    return;
+  }
+  if (Object.keys(body).length !== keys.length || !keys.every(key => Object.hasOwn(body, key))
+    || body.id !== 'authswitch-authority' || !uuid(body.epoch) || !uuid(body.updateId)
+    || !Number.isSafeInteger(body.revision) || Number(body.revision) < 0) {
+    throw new Error('Existing authswitch authority metadata has an unknown schema.');
+  }
+  const result = await collection.updateOne({ _id: stored._id, id: 'authswitch-authority',
+    schemaVersion: { $exists: false }, admission: { $exists: false } },
+  { $set: { schemaVersion: 2, admission: 'open' } });
+  if (result.matchedCount !== 1 || result.modifiedCount !== 1) {
+    throw new Error('Authswitch authority metadata migration did not commit exactly once.');
+  }
+  const migrated = await collection.findOne({ _id: stored._id });
+  if (!migrated) throw new Error('Authswitch authority metadata disappeared during migration.');
+  assertStoredAuthorityMeta(Object.fromEntries(Object.entries(migrated)
+    .filter(([key]) => !reserved.has(key))));
+};

package/ts/ts_migration/index.ts

@@ -0,0 +1,7 @@
+import type { SmartdataDb } from '@push.rocks/smartdata';
+import { migrateAuthorityMetaV1 } from './0001_authority_meta.js';
+
+/** The persisted metadata schema version records completion. Order is fixed for later migrations. */
+export const runAuthorityMigrations = async (db: SmartdataDb): Promise<void> => {
+  await migrateAuthorityMetaV1(db);
+};