@modelprofile.com/authswitch 6.5.0 → 8.0.0

package/dist_ts/classes.authoritymodels.d.ts

@@ -1,4 +1,6 @@
 import * as plugins from './plugins.js';
+import type { TAuthSwitchLoginPrompt } from './authority-contract.js';
+import type { IAuthSwitchStoredUsage } from './classes.authorityusage.js';
 export interface IStoredAuthorityMeta {
     id: 'authswitch-authority';
     epoch: string;
@@ -29,7 +31,7 @@ export interface IStoredAuthorityGrant {
     providerId: string;
     purpose: TStoredGrantPurpose;
     audience: string;
-    state: 'ready' | 'exchange_may_have_been_sent' | 'retry_wait' | 'needs_reauth' | 'native' | 'legacy_native_pending' | 'removed';
+    state: 'ready' | 'exchange_may_have_been_sent' | 'retry_wait' | 'needs_reauth' | 'native' | 'legacy_native_pending' | 'handoff_pending' | 'handoff_quarantined' | 'removed';
     owner: 'daemon' | 'claude_native' | 'legacy_native' | 'none';
     grantGeneration: number;
     authorizationGeneration: number;
@@ -43,6 +45,13 @@ export interface IStoredAuthorityGrant {
     statusObservedAt: string;
     updateId: string;
 }
+/** Credential-free provider usage cached for one exact account/login pair. */
+export interface IStoredAuthorityUsage extends IAuthSwitchStoredUsage {
+    id: string;
+    accountId: string;
+    loginId: string;
+}
+export declare const authorityUsageId: (accountId: string, loginId: string) => string;
 export interface IStoredAuthorityBinding {
     id: string;
     accountId: string;
@@ -67,6 +76,7 @@ export interface IStoredAuthorityEnrollment {
 export interface IStoredAuthorityCodexHome {
     id: string;
     accountId: string;
+    grantId: string;
     scopeId: string;
     activeRun: {
         id: string;
@@ -77,6 +87,48 @@ export interface IStoredAuthorityCodexHome {
     createdAt: string;
     updateId: string;
 }
+/** One vendor home owns at most one active Claude grant; activeGrantId has a unique index. */
+export interface IStoredAuthorityClaudeHome {
+    id: string;
+    activeAccountId: string;
+    activeGrantId: string;
+    pendingOperationId: string | null;
+    status: 'ready' | 'quarantined';
+    revision: number;
+    createdAt: string;
+    updateId: string;
+}
+export interface IStoredAuthorityNativePair {
+    credentialDigest: string | null;
+    configDigest: string | null;
+}
+export interface IStoredAuthorityNativeIdentity {
+    accountUuid: string;
+    organizationUuid: string;
+}
+/** Backend-only proof for one exact two-grant native transfer. */
+export interface IStoredAuthorityClaudeHandoff {
+    id: string;
+    homeId: string;
+    outgoingAccountId: string;
+    outgoingGrantId: string;
+    incomingAccountId: string;
+    incomingGrantId: string;
+    phase: 'reserved' | 'prepared' | 'committed' | 'aborted' | 'quarantined';
+    before: IStoredAuthorityNativePair | null;
+    after: IStoredAuthorityNativePair | null;
+    sourceIdentity: IStoredAuthorityNativeIdentity;
+    targetIdentity: IStoredAuthorityNativeIdentity;
+    sourceAccessDigest: string | null;
+    targetAccessDigest: string | null;
+    sealedOutgoing: string | null;
+    runningEffectiveAuth: 'no_scoped_sessions' | 'unsupported_effective_auth' | null;
+    problem: 'none' | 'native_uncertain' | 'foreign_or_torn' | 'unsupported_effective_auth' | 'database_uncertain';
+    startedAt: string;
+    updatedAt: string;
+    revision: number;
+    updateId: string;
+}
 /** Journal for a native-home handoff. A prepared grant is never usable. */
 export interface IStoredAuthorityHandoff {
     id: string;
@@ -88,7 +140,6 @@ export interface IStoredAuthorityHandoff {
     operationId: string;
     sourceDigest: string;
     verifiedSourceDigest: string | null;
-    backupDigest: string | null;
     revision: number;
     statusObservedAt: string;
     updateId: string;
@@ -103,7 +154,6 @@ export interface IStoredAuthorityMigrationLedger {
     status: 'pending_native_owner' | 'prepared' | 'verified' | 'complete' | 'quarantined';
     accountId: string | null;
     grantId: string | null;
-    backupDigest: string | null;
     revision: number;
     statusObservedAt: string;
     updateId: string;
@@ -115,24 +165,106 @@ export interface IStoredAuthorityEvent {
     kind: 'account' | 'binding';
     accountId: string;
 }
+/** A device flow and its immutable result receipt. Provider work is never resumed from this record. */
+export interface IStoredAuthorityDeviceOperation {
+    id: string;
+    kind: 'add_openai' | 'reauth_openai';
+    purpose: 'openai_managed';
+    accountId: string | null;
+    grantId: string | null;
+    expectedGrantGeneration: number | null;
+    state: 'starting' | 'pending' | 'committing' | 'complete' | 'failed' | 'cancelled' | 'interrupted' | 'outcome_unknown';
+    prompt: TAuthSwitchLoginPrompt | null;
+    result: {
+        accountId: string;
+        grantId: string;
+        accountRevision: number;
+        grantGeneration: number;
+    } | null;
+    error: string | null;
+    commitId: string | null;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}
+export type TStoredAuthorityPreuseProblem = 'none' | 'target_unavailable' | 'access_unavailable' | 'catalog_unavailable' | 'account_busy' | 'cancelled' | 'authority_closing' | 'interrupted' | 'request_uncertain';
+/** One quota-consuming request. The prompt and generated prose never enter persistence. */
+export interface IStoredAuthorityPreuseOperation {
+    id: string;
+    kind: 'preuse_openai';
+    purpose: 'openai_managed';
+    accountId: string;
+    grantId: string;
+    /** Hash of the exact target, prompt and requested model; used only for idempotent admission. */
+    requestHash: string;
+    requestedModel: string | null;
+    model: string | null;
+    authorizationGeneration: number;
+    grantGeneration: number | null;
+    state: 'preparing' | 'request_may_have_started' | 'complete' | 'not_sent' | 'outcome_unknown';
+    result: {
+        inputTokens: number | null;
+        outputTokens: number | null;
+        totalTokens: number | null;
+    } | null;
+    problem: TStoredAuthorityPreuseProblem;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}
+export type IStoredAuthorityOperation = IStoredAuthorityDeviceOperation | IStoredAuthorityPreuseOperation;
+/** Decorated storage fields shared by the two exact discriminated operation variants. */
+export interface IStoredAuthorityOperationDocument {
+    id: string;
+    kind: IStoredAuthorityOperation['kind'];
+    purpose: 'openai_managed';
+    accountId: string | null;
+    grantId: string | null;
+    expectedGrantGeneration?: number | null;
+    state: IStoredAuthorityOperation['state'];
+    prompt?: TAuthSwitchLoginPrompt | null;
+    result: IStoredAuthorityOperation['result'];
+    error?: string | null;
+    commitId?: string | null;
+    requestHash?: string;
+    requestedModel?: string | null;
+    model?: string | null;
+    authorizationGeneration?: number;
+    grantGeneration?: number | null;
+    problem?: TStoredAuthorityPreuseProblem;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}
+export declare const assertStoredAuthorityUsage: (value: unknown) => asserts value is IStoredAuthorityUsage;
 export declare const assertStoredAuthorityMeta: (value: unknown) => asserts value is IStoredAuthorityMeta;
 export declare const assertStoredAuthorityAccount: (value: unknown) => asserts value is IStoredAuthorityAccount;
 export declare const assertStoredAuthorityGrant: (value: unknown) => asserts value is IStoredAuthorityGrant;
 export declare const assertStoredAuthorityBinding: (value: unknown) => asserts value is IStoredAuthorityBinding;
 export declare const assertStoredAuthorityEnrollment: (value: unknown) => asserts value is IStoredAuthorityEnrollment;
 export declare const assertStoredAuthorityCodexHome: (value: unknown) => asserts value is IStoredAuthorityCodexHome;
+export declare const assertStoredAuthorityClaudeHome: (value: unknown) => asserts value is IStoredAuthorityClaudeHome;
+export declare const assertStoredAuthorityClaudeHandoff: (value: unknown) => asserts value is IStoredAuthorityClaudeHandoff;
 export declare const assertStoredAuthorityHandoff: (value: unknown) => asserts value is IStoredAuthorityHandoff;
 export declare const assertStoredAuthorityMigrationLedger: (value: unknown) => asserts value is IStoredAuthorityMigrationLedger;
 export declare const assertStoredAuthorityEvent: (value: unknown) => asserts value is IStoredAuthorityEvent;
-export declare class AuthSwitchAuthorityMetaModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityMetaModel, IStoredAuthorityMeta> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityMetaModel>;
+export declare const assertStoredAuthorityOperation: (value: unknown) => asserts value is IStoredAuthorityOperation;
+export declare const assertStoredAuthorityOperationDocument: (value: unknown) => asserts value is IStoredAuthorityOperationDocument;
+export declare class AuthSwitchAuthorityMetaModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityMetaModel, IStoredAuthorityMeta> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityMetaModel>;
     id: 'authswitch-authority';
     epoch: string;
     revision: number;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityAccountModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityAccountModel, IStoredAuthorityAccount> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityAccountModel>;
+export declare class AuthSwitchAuthorityAccountModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityAccountModel, IStoredAuthorityAccount> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityAccountModel>;
     id: string;
     providerId: string;
     issuer: string;
@@ -147,8 +279,8 @@ export declare class AuthSwitchAuthorityAccountModel extends plugins.smartdata.S
     statusObservedAt: string;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityGrantModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityGrantModel, IStoredAuthorityGrant> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityGrantModel>;
+export declare class AuthSwitchAuthorityGrantModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityGrantModel, IStoredAuthorityGrant> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityGrantModel>;
     id: string;
     accountId: string;
     providerId: string;
@@ -168,8 +300,24 @@ export declare class AuthSwitchAuthorityGrantModel extends plugins.smartdata.Sma
     statusObservedAt: string;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityBindingModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityBindingModel, IStoredAuthorityBinding> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityBindingModel>;
+export declare class AuthSwitchAuthorityUsageModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityUsageModel, IStoredAuthorityUsage> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityUsageModel>;
+    id: string;
+    accountId: string;
+    loginId: string;
+    context: IAuthSwitchStoredUsage['context'];
+    updateId: string;
+    reading: IAuthSwitchStoredUsage['reading'];
+    observedAt: string | null;
+    currentUntil: string | null;
+    staleUntil: string | null;
+    lastAttemptAt: string;
+    nextAttemptAt: string;
+    failures: number;
+    problem: IAuthSwitchStoredUsage['problem'];
+}
+export declare class AuthSwitchAuthorityBindingModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityBindingModel, IStoredAuthorityBinding> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityBindingModel>;
     id: string;
     accountId: string;
     grantId: string;
@@ -181,25 +329,60 @@ export declare class AuthSwitchAuthorityBindingModel extends plugins.smartdata.S
     capabilityHash: string;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityEnrollmentModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityEnrollmentModel, IStoredAuthorityEnrollment> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityEnrollmentModel>;
+export declare class AuthSwitchAuthorityEnrollmentModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityEnrollmentModel, IStoredAuthorityEnrollment> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityEnrollmentModel>;
     id: string;
     accountId: string;
     ciphertext: string;
     revision: number;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityCodexHomeModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityCodexHomeModel, IStoredAuthorityCodexHome> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityCodexHomeModel>;
+export declare class AuthSwitchAuthorityCodexHomeModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityCodexHomeModel, IStoredAuthorityCodexHome> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityCodexHomeModel>;
     id: string;
     accountId: string;
+    grantId: string;
     scopeId: string;
     activeRun: IStoredAuthorityCodexHome['activeRun'];
     createdAt: string;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityHandoffModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityHandoffModel, IStoredAuthorityHandoff> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityHandoffModel>;
+export declare class AuthSwitchAuthorityClaudeHomeModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityClaudeHomeModel, IStoredAuthorityClaudeHome> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityClaudeHomeModel>;
+    id: string;
+    activeAccountId: string;
+    activeGrantId: string;
+    pendingOperationId: string | null;
+    status: IStoredAuthorityClaudeHome['status'];
+    revision: number;
+    createdAt: string;
+    updateId: string;
+}
+export declare class AuthSwitchAuthorityClaudeHandoffModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityClaudeHandoffModel, IStoredAuthorityClaudeHandoff> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityClaudeHandoffModel>;
+    id: string;
+    homeId: string;
+    outgoingAccountId: string;
+    outgoingGrantId: string;
+    incomingAccountId: string;
+    incomingGrantId: string;
+    phase: IStoredAuthorityClaudeHandoff['phase'];
+    before: IStoredAuthorityNativePair | null;
+    after: IStoredAuthorityNativePair | null;
+    sourceIdentity: IStoredAuthorityNativeIdentity;
+    targetIdentity: IStoredAuthorityNativeIdentity;
+    sourceAccessDigest: string | null;
+    targetAccessDigest: string | null;
+    sealedOutgoing: string | null;
+    runningEffectiveAuth: IStoredAuthorityClaudeHandoff['runningEffectiveAuth'];
+    problem: IStoredAuthorityClaudeHandoff['problem'];
+    startedAt: string;
+    updatedAt: string;
+    revision: number;
+    updateId: string;
+}
+export declare class AuthSwitchAuthorityHandoffModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityHandoffModel, IStoredAuthorityHandoff> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityHandoffModel>;
     id: string;
     accountId: string;
     grantId: string;
@@ -209,13 +392,12 @@ export declare class AuthSwitchAuthorityHandoffModel extends plugins.smartdata.S
     operationId: string;
     sourceDigest: string;
     verifiedSourceDigest: string | null;
-    backupDigest: string | null;
     revision: number;
     statusObservedAt: string;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityMigrationLedgerModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityMigrationLedgerModel, IStoredAuthorityMigrationLedger> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityMigrationLedgerModel>;
+export declare class AuthSwitchAuthorityMigrationLedgerModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityMigrationLedgerModel, IStoredAuthorityMigrationLedger> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityMigrationLedgerModel>;
     id: string;
     version: number;
     sourceKind: IStoredAuthorityMigrationLedger['sourceKind'];
@@ -224,16 +406,40 @@ export declare class AuthSwitchAuthorityMigrationLedgerModel extends plugins.sma
     status: IStoredAuthorityMigrationLedger['status'];
     accountId: string | null;
     grantId: string | null;
-    backupDigest: string | null;
     revision: number;
     statusObservedAt: string;
     updateId: string;
 }
-export declare class AuthSwitchAuthorityEventModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityEventModel, IStoredAuthorityEvent> {
-    static exact: plugins.smartdata.TExact<AuthSwitchAuthorityEventModel>;
+export declare class AuthSwitchAuthorityEventModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityEventModel, IStoredAuthorityEvent> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityEventModel>;
     id: string;
     epoch: string;
     revision: number;
     kind: IStoredAuthorityEvent['kind'];
     accountId: string;
 }
+export declare class AuthSwitchAuthorityOperationModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityOperationModel, IStoredAuthorityOperationDocument> {
+    static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityOperationModel>;
+    id: string;
+    kind: IStoredAuthorityOperationDocument['kind'];
+    purpose: IStoredAuthorityOperation['purpose'];
+    accountId: string | null;
+    grantId: string | null;
+    expectedGrantGeneration?: number | null;
+    state: IStoredAuthorityOperationDocument['state'];
+    prompt?: TAuthSwitchLoginPrompt | null;
+    result: IStoredAuthorityOperationDocument['result'];
+    error?: string | null;
+    commitId?: string | null;
+    requestHash?: string;
+    requestedModel?: string | null;
+    model?: string | null;
+    authorizationGeneration?: number;
+    grantGeneration?: number | null;
+    problem?: TStoredAuthorityPreuseProblem;
+    createdAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+    revision: number;
+    updateId: string;
+}