@modelprofile.com/authswitch 6.5.0 → 8.0.0

package/dist_ts/classes.authoritypreuse.d.ts

@@ -0,0 +1,47 @@
+import * as plugins from './plugins.js';
+import type { IAuthSwitchPreuseOperation } from './authority-contract.js';
+import { AuthSwitchAuthorityBroker } from './classes.authoritybroker.js';
+import { AuthSwitchAuthorityDatabase } from './classes.authoritydatabase.js';
+import { type ICodexPreuseLifecycle } from './classes.codexpreuse.js';
+import type { IHarnessPreuseOptions, IHarnessPreuseResult } from './interfaces.harness.js';
+export interface IAuthSwitchAuthorityPreuseExecutor {
+    runAccess(credential: plugins.flexAccounts.IOpenAiChatGptAccessCredential, options: IHarnessPreuseOptions, lifecycle: ICodexPreuseLifecycle): Promise<IHarnessPreuseResult>;
+}
+export interface IAuthSwitchAuthorityPreuseOptions {
+    executor?: IAuthSwitchAuthorityPreuseExecutor;
+    now?: () => number;
+    minAccessValidityMs?: number;
+}
+export interface IAuthSwitchAuthorityPreuseRequest {
+    operationId: string;
+    accountId: string;
+    loginId: string;
+    purpose: 'openai_managed';
+    prompt: string;
+    model?: string;
+}
+export type TAuthSwitchAuthorityPreuseFreshAdmission = () => 'admitted' | 'account_busy';
+/** Durable, at-most-once owner of one quota-consuming inference for one exact login. */
+export declare class AuthSwitchAuthorityPreuse {
+    private readonly database;
+    private readonly broker;
+    private readonly executor;
+    private readonly now;
+    private readonly minAccessValidityMs;
+    private readonly starts;
+    private readonly running;
+    private closed;
+    constructor(database: AuthSwitchAuthorityDatabase, broker: AuthSwitchAuthorityBroker, options?: IAuthSwitchAuthorityPreuseOptions);
+    /** Terminalize every abandoned record before management admission opens. */
+    start(): Promise<void>;
+    begin(input: IAuthSwitchAuthorityPreuseRequest, admitFresh: TAuthSwitchAuthorityPreuseFreshAdmission): Promise<IAuthSwitchPreuseOperation>;
+    private admit;
+    private perform;
+    private fail;
+    private readStored;
+    get(operationId: string): Promise<IAuthSwitchPreuseOperation>;
+    cancel(operationId: string): Promise<IAuthSwitchPreuseOperation>;
+    wait(operationId: string): Promise<void>;
+    hasActive(operationId: string): boolean;
+    close(): Promise<void>;
+}

package/dist_ts/classes.authoritypreuse.js

@@ -0,0 +1,277 @@
+import * as plugins from './plugins.js';
+import { AuthSwitchAuthorityBroker } from './classes.authoritybroker.js';
+import { AuthSwitchAuthorityDatabase } from './classes.authoritydatabase.js';
+import { CodexPreuse } from './classes.codexpreuse.js';
+import { validatePreuseOptions } from './preuse.js';
+const uuid = (value) => typeof value === 'string' && /^[a-f0-9-]{36}$/.test(value);
+const hash = (value) => typeof value === 'string' && /^[a-f0-9]{64}$/.test(value);
+const publicOperation = (operation) => ({
+    id: operation.id, accountId: operation.accountId, loginId: operation.grantId,
+    purpose: operation.purpose, requestedModel: operation.requestedModel, model: operation.model,
+    state: operation.state, result: operation.result, problem: operation.problem,
+    createdAt: operation.createdAt, updatedAt: operation.updatedAt,
+    finishedAt: operation.finishedAt, revision: operation.revision,
+});
+/** Durable, at-most-once owner of one quota-consuming inference for one exact login. */
+export class AuthSwitchAuthorityPreuse {
+    database;
+    broker;
+    executor;
+    now;
+    minAccessValidityMs;
+    starts = new Map();
+    running = new Map();
+    closed = false;
+    constructor(database, broker, options = {}) {
+        this.database = database;
+        this.broker = broker;
+        this.executor = options.executor ?? new CodexPreuse();
+        this.now = options.now ?? Date.now;
+        this.minAccessValidityMs = options.minAccessValidityMs ?? 300_000;
+    }
+    /** Terminalize every abandoned record before management admission opens. */
+    async start() {
+        for (const state of ['preparing', 'request_may_have_started']) {
+            let after = null;
+            while (true) {
+                const page = await this.database.preuseOperationsByState(state, after);
+                if (!page.length)
+                    break;
+                for (const operation of page) {
+                    const updateId = plugins.crypto.randomUUID();
+                    const now = new Date(this.now()).toISOString();
+                    await this.database.changePreuseOperation(updateId, operation.id, current => {
+                        if (current.state !== state)
+                            throw new Error('Preuse recovery changed concurrently.');
+                        return { ...current, state: state === 'preparing' ? 'not_sent' : 'outcome_unknown',
+                            problem: state === 'preparing' ? 'interrupted' : 'request_uncertain',
+                            updatedAt: now, finishedAt: now, revision: current.revision + 1, updateId };
+                    });
+                }
+                after = page.at(-1).id;
+            }
+        }
+    }
+    begin(input, admitFresh) {
+        if (this.closed)
+            return Promise.reject(new Error('Authswitch preuse is closing.'));
+        if (!uuid(input.operationId) || !hash(input.accountId) || !hash(input.loginId)
+            || input.purpose !== 'openai_managed') {
+            return Promise.reject(new Error('Invalid preuse target.'));
+        }
+        validatePreuseOptions({ prompt: input.prompt, model: input.model });
+        const requestedModel = input.model ?? null;
+        const requestHash = plugins.crypto.createHash('sha256').update(JSON.stringify([
+            'authswitch-preuse-v1', input.accountId, input.loginId, input.purpose, input.prompt, requestedModel,
+        ])).digest('hex');
+        const active = this.running.get(input.operationId);
+        if (active) {
+            if (active.requestHash !== requestHash)
+                return Promise.reject(new Error('Preuse operation ID belongs to a different request.'));
+            return this.get(input.operationId);
+        }
+        const starting = this.starts.get(input.operationId);
+        if (starting) {
+            if (starting.requestHash !== requestHash)
+                return Promise.reject(new Error('Preuse operation ID belongs to a different request.'));
+            return starting.promise;
+        }
+        const promise = this.admit(input, requestHash, requestedModel, admitFresh).finally(() => {
+            if (this.starts.get(input.operationId)?.promise === promise)
+                this.starts.delete(input.operationId);
+        });
+        this.starts.set(input.operationId, { requestHash, promise });
+        return promise;
+    }
+    async admit(input, requestHash, requestedModel, admitFresh) {
+        if (this.closed)
+            throw new Error('Authswitch preuse is closing.');
+        const prior = await this.database.readOperation(input.operationId);
+        if (prior) {
+            if (prior.kind !== 'preuse_openai' || prior.accountId !== input.accountId || prior.grantId !== input.loginId
+                || prior.purpose !== input.purpose || prior.requestHash !== requestHash
+                || prior.requestedModel !== requestedModel) {
+                throw new Error('Preuse operation ID belongs to a different request.');
+            }
+            if (prior.state !== 'preparing')
+                return publicOperation(prior);
+            const updateId = plugins.crypto.randomUUID();
+            const interruptedAt = new Date(this.now()).toISOString();
+            return publicOperation(await this.database.changePreuseOperation(updateId, prior.id, current => ({
+                ...current, state: 'not_sent', problem: 'interrupted', updatedAt: interruptedAt,
+                finishedAt: interruptedAt, revision: current.revision + 1, updateId,
+            })));
+        }
+        const context = await this.database.readUsageContext(input.accountId, input.loginId);
+        if (!context || context.providerId !== 'openai' || context.purpose !== input.purpose
+            || context.owner !== 'daemon' || context.removed
+            || !['ready', 'retry_wait'].includes(context.grantState)) {
+            throw new Error('Selected OpenAI login is unavailable for preuse.');
+        }
+        if (this.closed)
+            throw new Error('Authswitch preuse is closing.');
+        const freshAdmission = admitFresh();
+        if (freshAdmission === 'admitted' && this.running.size >= 32) {
+            throw new Error('Too many active preuse operations.');
+        }
+        const now = new Date(this.now()).toISOString();
+        const admitted = await this.database.createPreuseOperation({
+            id: input.operationId, kind: 'preuse_openai', purpose: input.purpose,
+            accountId: input.accountId, grantId: input.loginId, requestHash, requestedModel,
+            model: null, authorizationGeneration: context.authorizationGeneration, grantGeneration: null,
+            state: 'preparing', result: null, problem: 'none', createdAt: now, updatedAt: now,
+            finishedAt: null, revision: 1, updateId: plugins.crypto.randomUUID(),
+        });
+        if (!admitted.created) {
+            if (admitted.operation.state !== 'preparing')
+                return publicOperation(admitted.operation);
+            const updateId = plugins.crypto.randomUUID();
+            const interruptedAt = new Date(this.now()).toISOString();
+            const interrupted = await this.database.changePreuseOperation(updateId, admitted.operation.id, current => ({
+                ...current, state: 'not_sent', problem: 'interrupted', updatedAt: interruptedAt,
+                finishedAt: interruptedAt, revision: current.revision + 1, updateId,
+            }));
+            return publicOperation(interrupted);
+        }
+        if (freshAdmission === 'account_busy') {
+            const updateId = plugins.crypto.randomUUID();
+            const finishedAt = new Date(this.now()).toISOString();
+            const busy = await this.database.changePreuseOperation(updateId, admitted.operation.id, current => ({
+                ...current, state: 'not_sent', problem: 'account_busy', updatedAt: finishedAt,
+                finishedAt, revision: current.revision + 1, updateId,
+            }));
+            return publicOperation(busy);
+        }
+        if (this.closed) {
+            const updateId = plugins.crypto.randomUUID();
+            const closedAt = new Date(this.now()).toISOString();
+            const closed = await this.database.changePreuseOperation(updateId, admitted.operation.id, current => ({
+                ...current, state: 'not_sent', problem: 'authority_closing', updatedAt: closedAt,
+                finishedAt: closedAt, revision: current.revision + 1, updateId,
+            }));
+            return publicOperation(closed);
+        }
+        const controller = new AbortController();
+        const owned = { requestHash, controller, task: Promise.resolve() };
+        this.running.set(input.operationId, owned);
+        owned.task = this.perform(admitted.operation, input.prompt, controller.signal).finally(() => {
+            if (this.running.get(input.operationId) === owned)
+                this.running.delete(input.operationId);
+        });
+        void owned.task.catch(() => { });
+        return publicOperation(admitted.operation);
+    }
+    async perform(operation, prompt, signal) {
+        let phase = 'target';
+        try {
+            signal.throwIfAborted();
+            const context = await this.database.readUsageContext(operation.accountId, operation.grantId);
+            if (!context || context.providerId !== 'openai' || context.purpose !== operation.purpose
+                || context.owner !== 'daemon' || context.removed
+                || context.authorizationGeneration !== operation.authorizationGeneration
+                || !['ready', 'retry_wait'].includes(context.grantState)) {
+                throw new Error('Preuse target changed.');
+            }
+            phase = 'access';
+            const access = await this.broker.resolveUsageAccess(context, undefined, this.minAccessValidityMs);
+            signal.throwIfAborted();
+            phase = operation.requestedModel === null ? 'catalog' : 'access';
+            const credential = {
+                kind: 'chatgptAccess', providerId: 'openai', accessToken: access.accessToken,
+                accountId: access.accountId, isFedrampAccount: access.isFedrampAccount,
+            };
+            const result = await this.executor.runAccess(credential, { prompt, ...(operation.requestedModel === null ? {} : { model: operation.requestedModel }), signal }, { beforeRequest: async (model) => {
+                    signal.throwIfAborted();
+                    await this.database.markPreuseRequestMayHaveStarted(operation.id, plugins.crypto.randomUUID(), model, access.grantGeneration, new Date(this.now()).toISOString());
+                } });
+            const current = await this.readStored(operation.id);
+            if (current.state !== 'request_may_have_started')
+                return;
+            const count = (value) => Number.isSafeInteger(value) && value >= 0 ? value : null;
+            const updateId = plugins.crypto.randomUUID();
+            const now = new Date(this.now()).toISOString();
+            await this.database.changePreuseOperation(updateId, operation.id, prior => ({ ...prior,
+                state: 'complete', result: { inputTokens: count(result.inputTokens), outputTokens: count(result.outputTokens),
+                    totalTokens: count(result.totalTokens) }, problem: 'none', updatedAt: now, finishedAt: now,
+                revision: prior.revision + 1, updateId }));
+        }
+        catch {
+            await this.fail(operation.id, phase, signal);
+        }
+    }
+    async fail(operationId, phase, signal) {
+        let current;
+        try {
+            current = await this.readStored(operationId);
+        }
+        catch {
+            return;
+        }
+        if (!['preparing', 'request_may_have_started'].includes(current.state))
+            return;
+        const marked = current.state === 'request_may_have_started';
+        const problem = marked
+            ? this.closed ? 'authority_closing' : signal.aborted ? 'cancelled' : 'request_uncertain'
+            : this.closed ? 'authority_closing' : signal.aborted ? 'cancelled'
+                : phase === 'target' ? 'target_unavailable' : phase === 'catalog' ? 'catalog_unavailable' : 'access_unavailable';
+        const updateId = plugins.crypto.randomUUID();
+        const now = new Date(this.now()).toISOString();
+        try {
+            await this.database.changePreuseOperation(updateId, operationId, prior => ({ ...prior,
+                state: marked ? 'outcome_unknown' : 'not_sent', problem,
+                updatedAt: now, finishedAt: now, revision: prior.revision + 1, updateId }));
+        }
+        catch { /* A durable request marker remains recoverable as outcome_unknown on restart. */ }
+    }
+    async readStored(operationId) {
+        if (!uuid(operationId))
+            throw new Error('Invalid preuse operation ID.');
+        const operation = await this.database.readOperation(operationId);
+        if (!operation || operation.kind !== 'preuse_openai')
+            throw new Error('Preuse operation was not found.');
+        return operation;
+    }
+    async get(operationId) {
+        return publicOperation(await this.readStored(operationId));
+    }
+    async cancel(operationId) {
+        let current = await this.readStored(operationId);
+        if (!['preparing', 'request_may_have_started'].includes(current.state))
+            return publicOperation(current);
+        this.running.get(operationId)?.controller.abort(new Error('Preuse cancelled.'));
+        const updateId = plugins.crypto.randomUUID();
+        const now = new Date(this.now()).toISOString();
+        try {
+            current = await this.database.changePreuseOperation(updateId, operationId, prior => ({ ...prior,
+                state: prior.state === 'preparing' ? 'not_sent' : 'outcome_unknown', problem: 'cancelled',
+                updatedAt: now, finishedAt: now, revision: prior.revision + 1, updateId }));
+        }
+        catch {
+            current = await this.readStored(operationId);
+            if (['preparing', 'request_may_have_started'].includes(current.state))
+                throw new Error('Preuse cancellation outcome is unknown.');
+        }
+        return publicOperation(current);
+    }
+    async wait(operationId) {
+        const starting = this.starts.get(operationId);
+        if (starting)
+            await starting.promise;
+        const running = this.running.get(operationId);
+        if (running)
+            await running.task;
+    }
+    hasActive(operationId) {
+        return this.starts.has(operationId) || this.running.has(operationId);
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        await Promise.allSettled([...this.starts.values()].map(item => item.promise));
+        for (const running of this.running.values())
+            running.controller.abort(new Error('Authswitch authority is closing.'));
+        await Promise.allSettled([...this.running.values()].map(item => item.task));
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/classes.authorityregistry.d.ts

@@ -0,0 +1,9 @@
+import * as plugins from './plugins.js';
+interface IAuthorityModelEntry {
+    readonly name: string;
+    initialize(db: plugins.nosqldb.SmartdataDb): Promise<void>;
+    prepare(): Promise<void>;
+}
+/** The sole authority collection inventory: startup admits exactly these collections and prepares each one. */
+export declare const authorityModelRegistry: readonly IAuthorityModelEntry[];
+export {};

package/dist_ts/classes.authorityregistry.js

@@ -0,0 +1,32 @@
+import * as plugins from './plugins.js';
+import { AuthSwitchAuthorityAccountModel, AuthSwitchAuthorityBindingModel, AuthSwitchAuthorityClaudeHandoffModel, AuthSwitchAuthorityClaudeHomeModel, AuthSwitchAuthorityCodexHomeModel, AuthSwitchAuthorityEnrollmentModel, AuthSwitchAuthorityEventModel, AuthSwitchAuthorityGrantModel, AuthSwitchAuthorityHandoffModel, AuthSwitchAuthorityMetaModel, AuthSwitchAuthorityMigrationLedgerModel, AuthSwitchAuthorityOperationModel, AuthSwitchAuthorityUsageModel, } from './classes.authoritymodels.js';
+const define = (name, model) => Object.freeze({
+    name,
+    initialize: async (db) => {
+        plugins.nosqldb.setDefaultManagerForDoc({ db }, model);
+        await model.init();
+    },
+    prepare: () => model.exact.prepare(),
+});
+/** The sole authority collection inventory: startup admits exactly these collections and prepares each one. */
+export const authorityModelRegistry = Object.freeze([
+    define('authswitch_authority_accounts', AuthSwitchAuthorityAccountModel),
+    define('authswitch_authority_bindings', AuthSwitchAuthorityBindingModel),
+    define('authswitch_authority_claude_handoffs', AuthSwitchAuthorityClaudeHandoffModel),
+    define('authswitch_authority_claude_homes', AuthSwitchAuthorityClaudeHomeModel),
+    define('authswitch_authority_codex_homes', AuthSwitchAuthorityCodexHomeModel),
+    define('authswitch_authority_enrollments', AuthSwitchAuthorityEnrollmentModel),
+    define('authswitch_authority_events', AuthSwitchAuthorityEventModel),
+    define('authswitch_authority_grants', AuthSwitchAuthorityGrantModel),
+    define('authswitch_authority_handoffs', AuthSwitchAuthorityHandoffModel),
+    define('authswitch_authority_meta', AuthSwitchAuthorityMetaModel),
+    define('authswitch_authority_migration_ledger', AuthSwitchAuthorityMigrationLedgerModel),
+    define('authswitch_authority_operations', AuthSwitchAuthorityOperationModel),
+    define('authswitch_authority_usage', AuthSwitchAuthorityUsageModel),
+]);
+for (let index = 1; index < authorityModelRegistry.length; index++) {
+    if (authorityModelRegistry[index - 1].name >= authorityModelRegistry[index].name) {
+        throw new Error('Authority model registry must be unique and sorted.');
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5hdXRob3JpdHlyZWdpc3RyeS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzL2NsYXNzZXMuYXV0aG9yaXR5cmVnaXN0cnkudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxjQUFjLENBQUM7QUFDeEMsT0FBTyxFQUNMLCtCQUErQixFQUFFLCtCQUErQixFQUFFLHFDQUFxQyxFQUN2RyxrQ0FBa0MsRUFBRSxpQ0FBaUMsRUFBRSxrQ0FBa0MsRUFDekcsNkJBQTZCLEVBQUUsNkJBQTZCLEVBQUUsK0JBQStCLEVBQzdGLDRCQUE0QixFQUFFLHVDQUF1QyxFQUFFLGlDQUFpQyxFQUN4Ryw2QkFBNkIsR0FDOUIsTUFBTSw4QkFBOEIsQ0FBQztBQVF0QyxNQUFNLE1BQU0sR0FBRyxDQUFDLElBQVksRUFBRSxLQUFxRSxFQUF3QixFQUFFLENBQzNILE1BQU0sQ0FBQyxNQUFNLENBQUM7SUFDWixJQUFJO0lBQ0osVUFBVSxFQUFFLEtBQUssRUFBRSxFQUErQixFQUFFLEVBQUU7UUFDcEQsT0FBTyxDQUFDLE9BQU8sQ0FBQyx1QkFBdUIsQ0FBQyxFQUFFLEVBQUUsRUFBRSxFQUFFLEtBQUssQ0FBQyxDQUFDO1FBQ3ZELE1BQU0sS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDO0lBQ3JCLENBQUM7SUFDRCxPQUFPLEVBQUUsR0FBRyxFQUFFLENBQUMsS0FBSyxDQUFDLEtBQUssQ0FBQyxPQUFPLEVBQUU7Q0FDckMsQ0FBQyxDQUFDO0FBRUwsK0dBQStHO0FBQy9HLE1BQU0sQ0FBQyxNQUFNLHNCQUFzQixHQUFvQyxNQUFNLENBQUMsTUFBTSxDQUFDO0lBQ25GLE1BQU0sQ0FBQywrQkFBK0IsRUFBRSwrQkFBK0IsQ0FBQztJQUN4RSxNQUFNLENBQUMsK0JBQStCLEVBQUUsK0JBQStCLENBQUM7SUFDeEUsTUFBTSxDQUFDLHNDQUFzQyxFQUFFLHFDQUFxQyxDQUFDO0lBQ3JGLE1BQU0sQ0FBQyxtQ0FBbUMsRUFBRSxrQ0FBa0MsQ0FBQztJQUMvRSxNQUFNLENBQUMsa0NBQWtDLEVBQUUsaUNBQWlDLENBQUM7SUFDN0UsTUFBTSxDQUFDLGtDQUFrQyxFQUFFLGtDQUFrQyxDQUFDO0lBQzlFLE1BQU0sQ0FBQyw2QkFBNkIsRUFBRSw2QkFBNkIsQ0FBQztJQUNwRSxNQUFNLENBQUMsNkJBQTZCLEVBQUUsNkJBQTZCLENBQUM7SUFDcEUsTUFBTSxDQUFDLCtCQUErQixFQUFFLCtCQUErQixDQUFDO0lBQ3hFLE1BQU0sQ0FBQywyQkFBMkIsRUFBRSw0QkFBNEIsQ0FBQztJQUNqRSxNQUFNLENBQUMsdUNBQXVDLEVBQUUsdUNBQXVDLENBQUM7SUFDeEYsTUFBTSxDQUFDLGlDQUFpQyxFQUFFLGlDQUFpQyxDQUFDO0lBQzVFLE1BQU0sQ0FBQyw0QkFBNEIsRUFBRSw2QkFBNkIsQ0FBQztDQUNwRSxDQUFDLENBQUM7QUFFSCxLQUFLLElBQUksS0FBSyxHQUFHLENBQUMsRUFBRSxLQUFLLEdBQUcsc0JBQXNCLENBQUMsTUFBTSxFQUFFLEtBQUssRUFBRSxFQUFFLENBQUM7SUFDbkUsSUFBSSxzQkFBc0IsQ0FBQyxLQUFLLEdBQUcsQ0FBQyxDQUFDLENBQUMsSUFBSSxJQUFJLHNCQUFzQixDQUFDLEtBQUssQ0FBQyxDQUFDLElBQUksRUFBRSxDQUFDO1FBQ2pGLE1BQU0sSUFBSSxLQUFLLENBQUMscURBQXFELENBQUMsQ0FBQztJQUN6RSxDQUFDO0FBQ0gsQ0FBQyJ9

package/dist_ts/classes.authoritysecrets.d.ts

@@ -2,7 +2,7 @@ export interface IAuthSwitchSecretCodec {
     seal(accountId: string, plaintext: Uint8Array): Promise<string>;
     unseal(accountId: string, ciphertext: string): Promise<Uint8Array>;
 }
-/** TPM-sealed byte payloads live only as ciphertext in SmartData. */
+/** TPM-sealed byte payloads live only as ciphertext in NoSQLDB. */
 export declare class AuthSwitchTpmSecretCodec implements IAuthSwitchSecretCodec {
     seal(accountId: string, plaintext: Uint8Array): Promise<string>;
     unseal(accountId: string, ciphertext: string): Promise<Uint8Array>;

package/dist_ts/classes.authoritysecrets.js

@@ -4,7 +4,7 @@ const secretName = (accountId) => {
         throw new Error('Invalid account identity for secret custody.');
     return `authswitch.account.${accountId}`;
 };
-/** TPM-sealed byte payloads live only as ciphertext in SmartData. */
+/** TPM-sealed byte payloads live only as ciphertext in NoSQLDB. */
 export class AuthSwitchTpmSecretCodec {
     async seal(accountId, plaintext) {
         const ciphertext = await plugins.smartsecret.sealSmartSecretTpm2Credential(secretName(accountId), plaintext);
@@ -27,4 +27,4 @@ export class AuthSwitchTpmSecretCodec {
         }
     }
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/classes.authorityusage.d.ts

@@ -0,0 +1,160 @@
+import * as plugins from './plugins.js';
+import type { IClaudeLogin, IClaudeStatusRead } from './classes.claudestatus.js';
+type TRateLimits = plugins.flexAccounts.ISmartAiProviderAccountRateLimits;
+export type TAuthSwitchUsageProblem = 'none' | 'unsupported' | 'access_unavailable' | 'provider_unavailable' | 'provider_rejected' | 'profile_unavailable' | 'usage_unavailable' | 'context_changed' | 'expired';
+export interface IAuthSwitchNativeUsageSource {
+    homeId: string;
+    credentialDigest: string;
+    configDigest: string;
+    accessTokenDigest: string;
+}
+/** A credential-free, exact view of the account and login used for one usage read. */
+export interface IAuthSwitchUsageContext {
+    epoch: string;
+    accountId: string;
+    loginId: string;
+    subjectId: string;
+    workspaceId: string;
+    providerId: string;
+    purpose: string;
+    owner: string;
+    grantState: string;
+    removed: boolean;
+    authorizationGeneration: number;
+    grantGeneration: number;
+    nativeSource: IAuthSwitchNativeUsageSource | null;
+}
+/** A bounded, credential-free projection; it is independent of the legacy harness API. */
+export interface IAuthSwitchClaudeStatus {
+    plan: {
+        name: string;
+        source: 'live' | 'stored';
+    } | null;
+    windows: {
+        label: string;
+        scope: 'account' | 'feature';
+        durationSeconds: number;
+        usedPercent: number;
+        resetAt: string | null;
+        severity?: 'normal' | 'warning' | 'critical';
+        headline?: true;
+    }[] | null;
+    facts: {
+        section: string | null;
+        label: string;
+        value: string;
+        summaryKey?: 'subscription' | 'billing' | 'usageWindows' | 'resets' | 'resetDetails';
+    }[];
+    problems: string[];
+    rateLimit: {
+        retryAt: string | null;
+    } | null;
+}
+export type TAuthSwitchUsageReading = {
+    kind: 'openai';
+    rateLimits: TRateLimits;
+} | {
+    kind: 'anthropic';
+    status: IAuthSwitchClaudeStatus;
+};
+export interface IAuthSwitchUsageAccess {
+    accessToken: string;
+    accountId: string;
+    isFedrampAccount: boolean;
+    expiresAt: string;
+    grantGeneration: number;
+}
+/** Persist through NoSQLDB in the authority integration. No credential belongs in this record. */
+export interface IAuthSwitchStoredUsage {
+    context: IAuthSwitchUsageContext;
+    updateId: string;
+    reading: TAuthSwitchUsageReading | null;
+    observedAt: string | null;
+    currentUntil: string | null;
+    staleUntil: string | null;
+    lastAttemptAt: string;
+    nextAttemptAt: string;
+    failures: number;
+    problem: Exclude<TAuthSwitchUsageProblem, 'context_changed' | 'expired'>;
+}
+export interface IAuthSwitchUsageSnapshot {
+    accountId: string;
+    loginId: string;
+    state: 'current' | 'partial' | 'stale' | 'unavailable';
+    reading: TAuthSwitchUsageReading | null;
+    observedAt: string | null;
+    currentUntil: string | null;
+    staleUntil: string | null;
+    lastAttemptAt: string | null;
+    nextAttemptAt: string | null;
+    problem: TAuthSwitchUsageProblem;
+}
+export interface IAuthSwitchUsageStore {
+    /** Read only the exact login's record. The helper discards a mismatched context. */
+    read(accountId: string, loginId: string): Promise<IAuthSwitchStoredUsage | null>;
+    /**
+     * In one NoSQLDB transaction, re-read epoch/account/login and compare every semantic
+     * context field, compare the previous usage update ID, write next, and append a revisioned
+     * account event. The account row revision may increase in that transaction; it is not
+     * part of the usage validity key and must not invalidate the reading just published.
+     * A null previousUpdateId also permits replacing a record for a different context;
+     * it must reject a concurrently written record for this same context.
+     * Return false on either conflict; do not publish an old provider callback.
+     */
+    publishIfCurrent(context: IAuthSwitchUsageContext, previousUpdateId: string | null, next: IAuthSwitchStoredUsage): Promise<boolean>;
+}
+export interface IAuthSwitchAuthorityUsageOptions {
+    /** Re-read from the owning NoSQLDB authority. Return null for an absent login. */
+    readContext(accountId: string, loginId: string): Promise<IAuthSwitchUsageContext | null>;
+    /** Broker-owned access resolution; rejected generation may perform at most one durable refresh. */
+    resolveAccess(context: IAuthSwitchUsageContext, rejectedGrantGeneration: number | undefined, minValidityMs: number): Promise<IAuthSwitchUsageAccess>;
+    resolveClaudeLogin?(context: IAuthSwitchUsageContext, rejectedGrantGeneration: number | undefined, minValidityMs: number): Promise<{
+        login: IClaudeLogin;
+        grantGeneration: number;
+        expiresAt: string | null;
+    }>;
+    claudeStatus?: Pick<{
+        readDetailed(login: IClaudeLogin): Promise<IClaudeStatusRead>;
+    }, 'readDetailed'>;
+    /** The callback holds the qualified vendor lease through the whole read and publication. */
+    withNativeSource?(context: IAuthSwitchUsageContext, action: (source: {
+        context: IAuthSwitchUsageContext;
+        login: IClaudeLogin;
+        readContext(): Promise<IAuthSwitchUsageContext | null>;
+    }) => Promise<IAuthSwitchUsageSnapshot>): Promise<IAuthSwitchUsageSnapshot>;
+    store: IAuthSwitchUsageStore;
+    provider: Pick<plugins.flexAccounts.ISmartAiProviderAdapter, 'getAccountRateLimits'>;
+    now?: () => number;
+    currentMaxAgeMs?: number;
+    maxStaleAgeMs?: number;
+    minAttemptIntervalMs?: number;
+    retryBaseMs?: number;
+    retryMaxMs?: number;
+    providerTimeoutMs?: number;
+    minAccessValidityMs?: number;
+}
+/** On-demand daemon cache coordinator. The injected store is the only publication authority. */
+export declare class AuthSwitchAuthorityUsage {
+    private readonly options;
+    private readonly now;
+    private readonly policy;
+    private readonly pending;
+    private readonly admitted;
+    private closed;
+    private closing?;
+    constructor(options: IAuthSwitchAuthorityUsageOptions);
+    private unavailable;
+    private snapshot;
+    private currentContext;
+    get(accountId: string, loginId: string, force?: boolean): Promise<IAuthSwitchUsageSnapshot>;
+    private read;
+    private readWithContext;
+    /** Coalesce the entire read/decision/fetch lifecycle, including the first stored read. */
+    private readForContext;
+    private refresh;
+    private validAccess;
+    private query;
+    /** Wait for admitted reads before the daemon disposes the shared provider or database. */
+    close(): Promise<void>;
+}
+export {};