@modelprofile.com/authswitch 7.0.0 → 8.1.0

package/ts/classes.authoritymodels.ts

@@ -4,8 +4,6 @@ import type { IAuthSwitchStoredUsage } from './classes.authorityusage.js';
 
 export interface IStoredAuthorityMeta {
   id: 'authswitch-authority';
-  schemaVersion: 2;
-  admission: 'open' | 'closed_restored';
   epoch: string;
   revision: number;
   updateId: string;
@@ -53,6 +51,27 @@ export interface IStoredAuthorityGrant {
   updateId: string;
 }
 
+/**
+ * Whether a change of grant owner hands the refresher from one live owner to another.
+ *
+ * `daemon`, `legacy_native` and `claude_native` each refresh the grant they own, so moving between any two
+ * of them is a transfer and needs a verified handoff: doing it in one write would leave two owners believing
+ * they may send the same rotating refresh token. `none` is not an owner but the absence of one -- a grant
+ * that needs re-authentication has no refresher, and a device login gives it one -- so every transition to
+ * or from `none` is an ordinary lifecycle step, not a transfer.
+ */
+export const transfersGrantRefresher = (previous: IStoredAuthorityGrant['owner'],
+  next: IStoredAuthorityGrant['owner']): boolean =>
+  previous !== next && previous !== 'none' && next !== 'none';
+
+/** The refusal that names the direction of a transfer, so a caller learns which handoff it needs. */
+export const grantRefresherTransferRefusal = (previous: IStoredAuthorityGrant['owner'],
+  next: IStoredAuthorityGrant['owner']): string => next === 'daemon'
+  ? 'Native ownership requires a verified handoff.'
+  : previous === 'daemon'
+    ? 'Daemon ownership is released by a verified handoff.'
+    : 'Native ownership moves between native owners by a verified handoff.';
+
 /** Credential-free provider usage cached for one exact account/login pair. */
 export interface IStoredAuthorityUsage extends IAuthSwitchStoredUsage {
   id: string;
@@ -153,7 +172,6 @@ export interface IStoredAuthorityHandoff {
   operationId: string;
   sourceDigest: string;
   verifiedSourceDigest: string | null;
-  backupDigest: string | null;
   revision: number;
   statusObservedAt: string;
   updateId: string;
@@ -169,7 +187,6 @@ export interface IStoredAuthorityMigrationLedger {
   status: 'pending_native_owner' | 'prepared' | 'verified' | 'complete' | 'quarantined';
   accountId: string | null;
   grantId: string | null;
-  backupDigest: string | null;
   revision: number;
   statusObservedAt: string;
   updateId: string;
@@ -206,7 +223,7 @@ export interface IStoredAuthorityDeviceOperation {
 export type TStoredAuthorityPreuseProblem =
   | 'none' | 'target_unavailable' | 'access_unavailable' | 'catalog_unavailable'
   | 'account_busy' | 'cancelled' | 'authority_closing' | 'interrupted'
-  | 'request_uncertain' | 'restored_history_uncertain';
+  | 'request_uncertain';
 
 /** One quota-consuming request. The prompt and generated prose never enter persistence. */
 export interface IStoredAuthorityPreuseOperation {
@@ -375,9 +392,8 @@ export const assertStoredAuthorityUsage: (value: unknown) => asserts value is IS
 };
 
 export const assertStoredAuthorityMeta: (value: unknown) => asserts value is IStoredAuthorityMeta = value => {
-  if (!object(value) || !exactKeys(value, ['id', 'schemaVersion', 'admission', 'epoch', 'revision', 'updateId'])
-    || value.id !== 'authswitch-authority' || value.schemaVersion !== 2
-    || !['open', 'closed_restored'].includes(value.admission as string) || !uuid(value.epoch)
+  if (!object(value) || !exactKeys(value, ['id', 'epoch', 'revision', 'updateId'])
+    || value.id !== 'authswitch-authority' || !uuid(value.epoch)
     || !revision(value.revision) || !uuid(value.updateId)) throw new Error('Invalid authswitch authority metadata.');
 };
 
@@ -517,35 +533,36 @@ export const assertStoredAuthorityClaudeHandoff: (value: unknown) => asserts val
 
 export const assertStoredAuthorityHandoff: (value: unknown) => asserts value is IStoredAuthorityHandoff = value => {
   if (!object(value) || !exactKeys(value, ['id', 'accountId', 'grantId', 'nativeHomeId', 'direction', 'phase',
-    'operationId', 'sourceDigest', 'verifiedSourceDigest', 'backupDigest', 'revision', 'statusObservedAt', 'updateId'])
+    'operationId', 'sourceDigest', 'verifiedSourceDigest', 'revision', 'statusObservedAt', 'updateId'])
     || !hash(value.id) || !hash(value.accountId) || !hash(value.grantId) || !hash(value.nativeHomeId)
     || !['to_native', 'to_daemon'].includes(String(value.direction))
     || !['prepared', 'source_stopped', 'target_written', 'verified', 'committed', 'needs_reauth', 'aborted'].includes(String(value.phase))
     || !uuid(value.operationId) || !hash(value.sourceDigest)
     || (value.verifiedSourceDigest !== null && !hash(value.verifiedSourceDigest))
-    || (value.backupDigest !== null && !hash(value.backupDigest))
     || !revision(value.revision) || !iso(value.statusObservedAt) || !uuid(value.updateId)) {
     throw new Error('Invalid authswitch handoff record.');
   }
-  if (['verified', 'committed'].includes(String(value.phase))
-    && (value.backupDigest === null || value.verifiedSourceDigest === null)) {
-    throw new Error('A verified native handoff requires source and backup proof.');
+  if (['verified', 'committed'].includes(String(value.phase)) && value.verifiedSourceDigest === null) {
+    throw new Error('A verified native handoff requires source proof.');
   }
 };
 
 export const assertStoredAuthorityMigrationLedger: (value: unknown) => asserts value is IStoredAuthorityMigrationLedger = value => {
   if (!object(value) || !exactKeys(value, ['id', 'version', 'sourceKind', 'sourcePathHash', 'sourceDigest',
-    'status', 'accountId', 'grantId', 'backupDigest', 'revision', 'statusObservedAt', 'updateId'])
+    'status', 'accountId', 'grantId', 'revision', 'statusObservedAt', 'updateId'])
     || !hash(value.id) || !revision(value.version) || value.version === 0
     || !['authswitch_stash', 'authswitch_backup', 'agl_flex', 'codex_native', 'opencode_native', 'claude_native'].includes(String(value.sourceKind))
     || !hash(value.sourcePathHash) || !hash(value.sourceDigest)
     || !['pending_native_owner', 'prepared', 'verified', 'complete', 'quarantined'].includes(String(value.status))
     || (value.accountId !== null && !hash(value.accountId))
     || (value.grantId !== null && !hash(value.grantId))
-    || (value.backupDigest !== null && !hash(value.backupDigest))
     || !revision(value.revision) || !iso(value.statusObservedAt) || !uuid(value.updateId)) {
     throw new Error('Invalid authswitch migration ledger record.');
   }
+  // Every row carries its source digest; a verified import additionally names the account and grant it produced.
+  if (['verified', 'complete'].includes(String(value.status)) && (value.accountId === null || value.grantId === null)) {
+    throw new Error('A verified migration requires the imported account and grant.');
+  }
 };
 
 export const assertStoredAuthorityEvent: (value: unknown) => asserts value is IStoredAuthorityEvent = value => {
@@ -619,7 +636,7 @@ const assertStoredAuthorityPreuseOperation: (value: unknown) => asserts value is
     || (value.grantGeneration !== null && (!revision(value.grantGeneration) || value.grantGeneration === 0))
     || !['preparing', 'request_may_have_started', 'complete', 'not_sent', 'outcome_unknown'].includes(String(value.state))
     || !['none', 'target_unavailable', 'access_unavailable', 'catalog_unavailable', 'account_busy', 'cancelled',
-      'authority_closing', 'interrupted', 'request_uncertain', 'restored_history_uncertain'].includes(String(value.problem))
+      'authority_closing', 'interrupted', 'request_uncertain'].includes(String(value.problem))
     || !iso(value.createdAt) || !iso(value.updatedAt)
     || (value.finishedAt !== null && !iso(value.finishedAt))
     || !revision(value.revision) || value.revision === 0 || !uuid(value.updateId)) {
@@ -651,14 +668,10 @@ const assertStoredAuthorityPreuseOperation: (value: unknown) => asserts value is
       || value.problem === 'none' || value.problem === 'request_uncertain' || value.finishedAt === null) {
       throw new Error('Invalid unsent authswitch preuse operation.');
     }
-  } else {
-    const restoredHistory = value.problem === 'restored_history_uncertain';
-    const coherentMarker = (value.model === null) === (value.grantGeneration === null);
-    if (value.result !== null || value.finishedAt === null
-      || (restoredHistory ? !coherentMarker : value.model === null || value.grantGeneration === null
-        || !['cancelled', 'authority_closing', 'request_uncertain'].includes(String(value.problem)))) {
-      throw new Error('Invalid uncertain authswitch preuse operation.');
-    }
+  } else if (value.result !== null || value.finishedAt === null || value.model === null
+    || value.grantGeneration === null
+    || !['cancelled', 'authority_closing', 'request_uncertain'].includes(String(value.problem))) {
+    throw new Error('Invalid uncertain authswitch preuse operation.');
   }
 };
 
@@ -670,273 +683,244 @@ export const assertStoredAuthorityOperationDocument: (value: unknown) => asserts
   assertStoredAuthorityOperation(value);
 };
 
-/**
- * Converts unresolved snapshot history into an immutable restored receipt. A live restart has stronger
- * evidence and is handled separately: a snapshot captured in `preparing` may have sent after capture.
- */
-export const restoreStoredAuthorityOperation = (operation: IStoredAuthorityOperation, options: {
-  restoredAt: string;
-  updateId: string;
-}): IStoredAuthorityOperation => {
-  assertStoredAuthorityOperation(operation);
-  const unresolvedDevice = operation.kind !== 'preuse_openai'
-    && ['starting', 'pending', 'committing'].includes(operation.state);
-  const unresolvedPreuse = operation.kind === 'preuse_openai'
-    && ['preparing', 'request_may_have_started'].includes(operation.state);
-  if (!unresolvedDevice && !unresolvedPreuse) return operation;
-  const restored: IStoredAuthorityOperation = operation.kind === 'preuse_openai'
-    ? { ...operation, state: 'outcome_unknown', result: null, problem: 'restored_history_uncertain',
-      updatedAt: options.restoredAt, finishedAt: options.restoredAt,
-      revision: operation.revision + 1, updateId: options.updateId }
-    : { ...operation, state: 'interrupted', prompt: null, result: null, commitId: null,
-      error: 'Interrupted by authority restore.', updatedAt: options.restoredAt, finishedAt: options.restoredAt,
-      revision: operation.revision + 1, updateId: options.updateId };
-  assertStoredAuthorityOperation(restored);
-  return restored;
-};
-
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_meta' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityMeta })
-export class AuthSwitchAuthorityMetaModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityMetaModel, IStoredAuthorityMeta> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityMetaModel>;
-  @plugins.smartdata.unI() public id!: 'authswitch-authority';
-  @plugins.smartdata.svDb() public schemaVersion!: 2;
-  @plugins.smartdata.svDb() public admission!: IStoredAuthorityMeta['admission'];
-  @plugins.smartdata.svDb() public epoch!: string;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_meta' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityMeta })
+export class AuthSwitchAuthorityMetaModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityMetaModel, IStoredAuthorityMeta> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityMetaModel>;
+  @plugins.nosqldb.unI() public id!: 'authswitch-authority';
+  @plugins.nosqldb.svDb() public epoch!: string;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_account_provider_id', key: { providerId: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_accounts' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityAccount })
-export class AuthSwitchAuthorityAccountModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityAccountModel, IStoredAuthorityAccount> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityAccountModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public providerId!: string;
-  @plugins.smartdata.svDb() public issuer!: string;
-  @plugins.smartdata.svDb() public subject!: string;
-  @plugins.smartdata.svDb() public workspaceId!: string;
-  @plugins.smartdata.svDb() public label!: string;
-  @plugins.smartdata.svDb() public email!: string | null;
-  @plugins.smartdata.svDb() public plan!: string | null;
-  @plugins.smartdata.svDb() public primaryGrantId!: string | null;
-  @plugins.smartdata.svDb() public removed!: boolean;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public statusObservedAt!: string;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_account_provider_id', key: { providerId: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_accounts' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityAccount })
+export class AuthSwitchAuthorityAccountModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityAccountModel, IStoredAuthorityAccount> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityAccountModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public providerId!: string;
+  @plugins.nosqldb.svDb() public issuer!: string;
+  @plugins.nosqldb.svDb() public subject!: string;
+  @plugins.nosqldb.svDb() public workspaceId!: string;
+  @plugins.nosqldb.svDb() public label!: string;
+  @plugins.nosqldb.svDb() public email!: string | null;
+  @plugins.nosqldb.svDb() public plan!: string | null;
+  @plugins.nosqldb.svDb() public primaryGrantId!: string | null;
+  @plugins.nosqldb.svDb() public removed!: boolean;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public statusObservedAt!: string;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_grant_state_id', key: { state: 1, id: 1 } })
-@plugins.smartdata.compoundIndex({ name: 'authority_grant_account_id', key: { accountId: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_grants' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityGrant })
-export class AuthSwitchAuthorityGrantModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityGrantModel, IStoredAuthorityGrant> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityGrantModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public accountId!: string;
-  @plugins.smartdata.svDb() public providerId!: string;
-  @plugins.smartdata.svDb() public purpose!: TStoredGrantPurpose;
-  @plugins.smartdata.svDb() public audience!: string;
-  @plugins.smartdata.svDb() public state!: IStoredAuthorityGrant['state'];
-  @plugins.smartdata.svDb() public owner!: IStoredAuthorityGrant['owner'];
-  @plugins.smartdata.svDb() public grantGeneration!: number;
-  @plugins.smartdata.svDb() public authorizationGeneration!: number;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public ciphertext!: string | null;
-  @plugins.smartdata.svDb() public accessExpiresAt!: string | null;
-  @plugins.smartdata.svDb() public attemptId!: string | null;
-  @plugins.smartdata.svDb() public retryAt!: string | null;
-  @plugins.smartdata.svDb() public retryCount!: number;
-  @plugins.smartdata.svDb() public problem!: IStoredAuthorityGrant['problem'];
-  @plugins.smartdata.svDb() public statusObservedAt!: string;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_grant_state_id', key: { state: 1, id: 1 } })
+@plugins.nosqldb.compoundIndex({ name: 'authority_grant_account_id', key: { accountId: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_grants' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityGrant })
+export class AuthSwitchAuthorityGrantModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityGrantModel, IStoredAuthorityGrant> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityGrantModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public accountId!: string;
+  @plugins.nosqldb.svDb() public providerId!: string;
+  @plugins.nosqldb.svDb() public purpose!: TStoredGrantPurpose;
+  @plugins.nosqldb.svDb() public audience!: string;
+  @plugins.nosqldb.svDb() public state!: IStoredAuthorityGrant['state'];
+  @plugins.nosqldb.svDb() public owner!: IStoredAuthorityGrant['owner'];
+  @plugins.nosqldb.svDb() public grantGeneration!: number;
+  @plugins.nosqldb.svDb() public authorizationGeneration!: number;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public ciphertext!: string | null;
+  @plugins.nosqldb.svDb() public accessExpiresAt!: string | null;
+  @plugins.nosqldb.svDb() public attemptId!: string | null;
+  @plugins.nosqldb.svDb() public retryAt!: string | null;
+  @plugins.nosqldb.svDb() public retryCount!: number;
+  @plugins.nosqldb.svDb() public problem!: IStoredAuthorityGrant['problem'];
+  @plugins.nosqldb.svDb() public statusObservedAt!: string;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_usage_account_login', key: { accountId: 1, loginId: 1 }, options: { unique: true } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_usage' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityUsage })
-export class AuthSwitchAuthorityUsageModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityUsageModel, IStoredAuthorityUsage> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityUsageModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public accountId!: string;
-  @plugins.smartdata.svDb() public loginId!: string;
-  @plugins.smartdata.svDb() public context!: IAuthSwitchStoredUsage['context'];
-  @plugins.smartdata.svDb() public updateId!: string;
-  @plugins.smartdata.svDb() public reading!: IAuthSwitchStoredUsage['reading'];
-  @plugins.smartdata.svDb() public observedAt!: string | null;
-  @plugins.smartdata.svDb() public currentUntil!: string | null;
-  @plugins.smartdata.svDb() public staleUntil!: string | null;
-  @plugins.smartdata.svDb() public lastAttemptAt!: string;
-  @plugins.smartdata.svDb() public nextAttemptAt!: string;
-  @plugins.smartdata.svDb() public failures!: number;
-  @plugins.smartdata.svDb() public problem!: IAuthSwitchStoredUsage['problem'];
+@plugins.nosqldb.compoundIndex({ name: 'authority_usage_account_login', key: { accountId: 1, loginId: 1 }, options: { unique: true } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_usage' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityUsage })
+export class AuthSwitchAuthorityUsageModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityUsageModel, IStoredAuthorityUsage> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityUsageModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public accountId!: string;
+  @plugins.nosqldb.svDb() public loginId!: string;
+  @plugins.nosqldb.svDb() public context!: IAuthSwitchStoredUsage['context'];
+  @plugins.nosqldb.svDb() public updateId!: string;
+  @plugins.nosqldb.svDb() public reading!: IAuthSwitchStoredUsage['reading'];
+  @plugins.nosqldb.svDb() public observedAt!: string | null;
+  @plugins.nosqldb.svDb() public currentUntil!: string | null;
+  @plugins.nosqldb.svDb() public staleUntil!: string | null;
+  @plugins.nosqldb.svDb() public lastAttemptAt!: string;
+  @plugins.nosqldb.svDb() public nextAttemptAt!: string;
+  @plugins.nosqldb.svDb() public failures!: number;
+  @plugins.nosqldb.svDb() public problem!: IAuthSwitchStoredUsage['problem'];
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_binding_account_id', key: { accountId: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_bindings' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityBinding })
-export class AuthSwitchAuthorityBindingModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityBindingModel, IStoredAuthorityBinding> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityBindingModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public accountId!: string;
-  @plugins.smartdata.svDb() public grantId!: string;
-  @plugins.smartdata.svDb() public runtime!: IStoredAuthorityBinding['runtime'];
-  @plugins.smartdata.svDb() public scopeId!: string;
-  @plugins.smartdata.svDb() public incarnationId!: string;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public grantAuthorizationGeneration!: number;
-  @plugins.smartdata.svDb() public capabilityHash!: string;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_binding_account_id', key: { accountId: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_bindings' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityBinding })
+export class AuthSwitchAuthorityBindingModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityBindingModel, IStoredAuthorityBinding> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityBindingModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public accountId!: string;
+  @plugins.nosqldb.svDb() public grantId!: string;
+  @plugins.nosqldb.svDb() public runtime!: IStoredAuthorityBinding['runtime'];
+  @plugins.nosqldb.svDb() public scopeId!: string;
+  @plugins.nosqldb.svDb() public incarnationId!: string;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public grantAuthorizationGeneration!: number;
+  @plugins.nosqldb.svDb() public capabilityHash!: string;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_enrollment_account_id', key: { accountId: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_enrollments' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityEnrollment })
-export class AuthSwitchAuthorityEnrollmentModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityEnrollmentModel, IStoredAuthorityEnrollment> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityEnrollmentModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public accountId!: string;
-  @plugins.smartdata.svDb() public ciphertext!: string;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_enrollment_account_id', key: { accountId: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_enrollments' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityEnrollment })
+export class AuthSwitchAuthorityEnrollmentModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityEnrollmentModel, IStoredAuthorityEnrollment> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityEnrollmentModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public accountId!: string;
+  @plugins.nosqldb.svDb() public ciphertext!: string;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_codex_home_account_id', key: { accountId: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_codex_homes' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityCodexHome })
-export class AuthSwitchAuthorityCodexHomeModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityCodexHomeModel, IStoredAuthorityCodexHome> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityCodexHomeModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public accountId!: string;
-  @plugins.smartdata.svDb() public grantId!: string;
-  @plugins.smartdata.svDb() public scopeId!: string;
-  @plugins.smartdata.svDb() public activeRun!: IStoredAuthorityCodexHome['activeRun'];
-  @plugins.smartdata.svDb() public createdAt!: string;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_codex_home_account_id', key: { accountId: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_codex_homes' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityCodexHome })
+export class AuthSwitchAuthorityCodexHomeModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityCodexHomeModel, IStoredAuthorityCodexHome> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityCodexHomeModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public accountId!: string;
+  @plugins.nosqldb.svDb() public grantId!: string;
+  @plugins.nosqldb.svDb() public scopeId!: string;
+  @plugins.nosqldb.svDb() public activeRun!: IStoredAuthorityCodexHome['activeRun'];
+  @plugins.nosqldb.svDb() public createdAt!: string;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_claude_homes' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityClaudeHome })
-export class AuthSwitchAuthorityClaudeHomeModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityClaudeHomeModel, IStoredAuthorityClaudeHome> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityClaudeHomeModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public activeAccountId!: string;
-  @plugins.smartdata.index({ unique: true }) public activeGrantId!: string;
-  @plugins.smartdata.svDb() public pendingOperationId!: string | null;
-  @plugins.smartdata.svDb() public status!: IStoredAuthorityClaudeHome['status'];
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public createdAt!: string;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_claude_homes' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityClaudeHome })
+export class AuthSwitchAuthorityClaudeHomeModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityClaudeHomeModel, IStoredAuthorityClaudeHome> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityClaudeHomeModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public activeAccountId!: string;
+  @plugins.nosqldb.index({ unique: true }) public activeGrantId!: string;
+  @plugins.nosqldb.svDb() public pendingOperationId!: string | null;
+  @plugins.nosqldb.svDb() public status!: IStoredAuthorityClaudeHome['status'];
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public createdAt!: string;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_claude_handoff_home_phase', key: { homeId: 1, phase: 1, id: 1 } })
-@plugins.smartdata.compoundIndex({ name: 'authority_claude_handoff_phase_id', key: { phase: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_claude_handoffs' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityClaudeHandoff })
-export class AuthSwitchAuthorityClaudeHandoffModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityClaudeHandoffModel, IStoredAuthorityClaudeHandoff> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityClaudeHandoffModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public homeId!: string;
-  @plugins.smartdata.svDb() public outgoingAccountId!: string;
-  @plugins.smartdata.svDb() public outgoingGrantId!: string;
-  @plugins.smartdata.svDb() public incomingAccountId!: string;
-  @plugins.smartdata.svDb() public incomingGrantId!: string;
-  @plugins.smartdata.svDb() public phase!: IStoredAuthorityClaudeHandoff['phase'];
-  @plugins.smartdata.svDb() public before!: IStoredAuthorityNativePair | null;
-  @plugins.smartdata.svDb() public after!: IStoredAuthorityNativePair | null;
-  @plugins.smartdata.svDb() public sourceIdentity!: IStoredAuthorityNativeIdentity;
-  @plugins.smartdata.svDb() public targetIdentity!: IStoredAuthorityNativeIdentity;
-  @plugins.smartdata.svDb() public sourceAccessDigest!: string | null;
-  @plugins.smartdata.svDb() public targetAccessDigest!: string | null;
-  @plugins.smartdata.svDb() public sealedOutgoing!: string | null;
-  @plugins.smartdata.svDb() public runningEffectiveAuth!: IStoredAuthorityClaudeHandoff['runningEffectiveAuth'];
-  @plugins.smartdata.svDb() public problem!: IStoredAuthorityClaudeHandoff['problem'];
-  @plugins.smartdata.svDb() public startedAt!: string;
-  @plugins.smartdata.svDb() public updatedAt!: string;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_claude_handoff_home_phase', key: { homeId: 1, phase: 1, id: 1 } })
+@plugins.nosqldb.compoundIndex({ name: 'authority_claude_handoff_phase_id', key: { phase: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_claude_handoffs' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityClaudeHandoff })
+export class AuthSwitchAuthorityClaudeHandoffModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityClaudeHandoffModel, IStoredAuthorityClaudeHandoff> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityClaudeHandoffModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public homeId!: string;
+  @plugins.nosqldb.svDb() public outgoingAccountId!: string;
+  @plugins.nosqldb.svDb() public outgoingGrantId!: string;
+  @plugins.nosqldb.svDb() public incomingAccountId!: string;
+  @plugins.nosqldb.svDb() public incomingGrantId!: string;
+  @plugins.nosqldb.svDb() public phase!: IStoredAuthorityClaudeHandoff['phase'];
+  @plugins.nosqldb.svDb() public before!: IStoredAuthorityNativePair | null;
+  @plugins.nosqldb.svDb() public after!: IStoredAuthorityNativePair | null;
+  @plugins.nosqldb.svDb() public sourceIdentity!: IStoredAuthorityNativeIdentity;
+  @plugins.nosqldb.svDb() public targetIdentity!: IStoredAuthorityNativeIdentity;
+  @plugins.nosqldb.svDb() public sourceAccessDigest!: string | null;
+  @plugins.nosqldb.svDb() public targetAccessDigest!: string | null;
+  @plugins.nosqldb.svDb() public sealedOutgoing!: string | null;
+  @plugins.nosqldb.svDb() public runningEffectiveAuth!: IStoredAuthorityClaudeHandoff['runningEffectiveAuth'];
+  @plugins.nosqldb.svDb() public problem!: IStoredAuthorityClaudeHandoff['problem'];
+  @plugins.nosqldb.svDb() public startedAt!: string;
+  @plugins.nosqldb.svDb() public updatedAt!: string;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_handoff_grant_id', key: { grantId: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_handoffs' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityHandoff })
-export class AuthSwitchAuthorityHandoffModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityHandoffModel, IStoredAuthorityHandoff> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityHandoffModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public accountId!: string;
-  @plugins.smartdata.svDb() public grantId!: string;
-  @plugins.smartdata.svDb() public nativeHomeId!: string;
-  @plugins.smartdata.svDb() public direction!: IStoredAuthorityHandoff['direction'];
-  @plugins.smartdata.svDb() public phase!: IStoredAuthorityHandoff['phase'];
-  @plugins.smartdata.svDb() public operationId!: string;
-  @plugins.smartdata.svDb() public sourceDigest!: string;
-  @plugins.smartdata.svDb() public verifiedSourceDigest!: string | null;
-  @plugins.smartdata.svDb() public backupDigest!: string | null;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public statusObservedAt!: string;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_handoff_grant_id', key: { grantId: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_handoffs' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityHandoff })
+export class AuthSwitchAuthorityHandoffModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityHandoffModel, IStoredAuthorityHandoff> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityHandoffModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public accountId!: string;
+  @plugins.nosqldb.svDb() public grantId!: string;
+  @plugins.nosqldb.svDb() public nativeHomeId!: string;
+  @plugins.nosqldb.svDb() public direction!: IStoredAuthorityHandoff['direction'];
+  @plugins.nosqldb.svDb() public phase!: IStoredAuthorityHandoff['phase'];
+  @plugins.nosqldb.svDb() public operationId!: string;
+  @plugins.nosqldb.svDb() public sourceDigest!: string;
+  @plugins.nosqldb.svDb() public verifiedSourceDigest!: string | null;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public statusObservedAt!: string;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_migration_status_id', key: { status: 1, id: 1 } })
-@plugins.smartdata.compoundIndex({ name: 'authority_migration_grant_status_id', key: { grantId: 1, status: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_migration_ledger' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityMigrationLedger })
-export class AuthSwitchAuthorityMigrationLedgerModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityMigrationLedgerModel, IStoredAuthorityMigrationLedger> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityMigrationLedgerModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public version!: number;
-  @plugins.smartdata.svDb() public sourceKind!: IStoredAuthorityMigrationLedger['sourceKind'];
-  @plugins.smartdata.svDb() public sourcePathHash!: string;
-  @plugins.smartdata.svDb() public sourceDigest!: string;
-  @plugins.smartdata.svDb() public status!: IStoredAuthorityMigrationLedger['status'];
-  @plugins.smartdata.svDb() public accountId!: string | null;
-  @plugins.smartdata.svDb() public grantId!: string | null;
-  @plugins.smartdata.svDb() public backupDigest!: string | null;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public statusObservedAt!: string;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_migration_status_id', key: { status: 1, id: 1 } })
+@plugins.nosqldb.compoundIndex({ name: 'authority_migration_grant_status_id', key: { grantId: 1, status: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_migration_ledger' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityMigrationLedger })
+export class AuthSwitchAuthorityMigrationLedgerModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityMigrationLedgerModel, IStoredAuthorityMigrationLedger> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityMigrationLedgerModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public version!: number;
+  @plugins.nosqldb.svDb() public sourceKind!: IStoredAuthorityMigrationLedger['sourceKind'];
+  @plugins.nosqldb.svDb() public sourcePathHash!: string;
+  @plugins.nosqldb.svDb() public sourceDigest!: string;
+  @plugins.nosqldb.svDb() public status!: IStoredAuthorityMigrationLedger['status'];
+  @plugins.nosqldb.svDb() public accountId!: string | null;
+  @plugins.nosqldb.svDb() public grantId!: string | null;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public statusObservedAt!: string;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_event_revision_id', key: { revision: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_events' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityEvent })
-export class AuthSwitchAuthorityEventModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityEventModel, IStoredAuthorityEvent> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityEventModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public epoch!: string;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public kind!: IStoredAuthorityEvent['kind'];
-  @plugins.smartdata.svDb() public accountId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_event_revision_id', key: { revision: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_events' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityEvent })
+export class AuthSwitchAuthorityEventModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityEventModel, IStoredAuthorityEvent> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityEventModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public epoch!: string;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public kind!: IStoredAuthorityEvent['kind'];
+  @plugins.nosqldb.svDb() public accountId!: string;
 }
 
-@plugins.smartdata.compoundIndex({ name: 'authority_operation_state_id', key: { state: 1, id: 1 } })
-@plugins.smartdata.compoundIndex({ name: 'authority_operation_account_id', key: { accountId: 1, id: 1 } })
-@plugins.smartdata.compoundIndex({ name: 'authority_operation_kind_id', key: { kind: 1, id: 1 } })
-@plugins.smartdata.managed({ collectionName: 'authswitch_authority_operations' })
-@plugins.smartdata.exactPersistence({ assertDocument: assertStoredAuthorityOperationDocument })
-export class AuthSwitchAuthorityOperationModel extends plugins.smartdata.SmartDataDbDoc<AuthSwitchAuthorityOperationModel, IStoredAuthorityOperationDocument> {
-  declare static exact: plugins.smartdata.TExact<AuthSwitchAuthorityOperationModel>;
-  @plugins.smartdata.unI() public id!: string;
-  @plugins.smartdata.svDb() public kind!: IStoredAuthorityOperationDocument['kind'];
-  @plugins.smartdata.svDb() public purpose!: IStoredAuthorityOperation['purpose'];
-  @plugins.smartdata.svDb() public accountId!: string | null;
-  @plugins.smartdata.svDb() public grantId!: string | null;
-  @plugins.smartdata.svDb() public expectedGrantGeneration?: number | null;
-  @plugins.smartdata.svDb() public state!: IStoredAuthorityOperationDocument['state'];
-  @plugins.smartdata.svDb() public prompt?: TAuthSwitchLoginPrompt | null;
-  @plugins.smartdata.svDb() public result!: IStoredAuthorityOperationDocument['result'];
-  @plugins.smartdata.svDb() public error?: string | null;
-  @plugins.smartdata.svDb() public commitId?: string | null;
-  @plugins.smartdata.svDb() public requestHash?: string;
-  @plugins.smartdata.svDb() public requestedModel?: string | null;
-  @plugins.smartdata.svDb() public model?: string | null;
-  @plugins.smartdata.svDb() public authorizationGeneration?: number;
-  @plugins.smartdata.svDb() public grantGeneration?: number | null;
-  @plugins.smartdata.svDb() public problem?: TStoredAuthorityPreuseProblem;
-  @plugins.smartdata.svDb() public createdAt!: string;
-  @plugins.smartdata.svDb() public updatedAt!: string;
-  @plugins.smartdata.svDb() public finishedAt!: string | null;
-  @plugins.smartdata.svDb() public revision!: number;
-  @plugins.smartdata.svDb() public updateId!: string;
+@plugins.nosqldb.compoundIndex({ name: 'authority_operation_state_id', key: { state: 1, id: 1 } })
+@plugins.nosqldb.compoundIndex({ name: 'authority_operation_account_id', key: { accountId: 1, id: 1 } })
+@plugins.nosqldb.compoundIndex({ name: 'authority_operation_kind_id', key: { kind: 1, id: 1 } })
+@plugins.nosqldb.managed({ collectionName: 'authswitch_authority_operations' })
+@plugins.nosqldb.exactPersistence({ assertDocument: assertStoredAuthorityOperationDocument })
+export class AuthSwitchAuthorityOperationModel extends plugins.nosqldb.SmartDataDbDoc<AuthSwitchAuthorityOperationModel, IStoredAuthorityOperationDocument> {
+  declare static exact: plugins.nosqldb.TExact<AuthSwitchAuthorityOperationModel>;
+  @plugins.nosqldb.unI() public id!: string;
+  @plugins.nosqldb.svDb() public kind!: IStoredAuthorityOperationDocument['kind'];
+  @plugins.nosqldb.svDb() public purpose!: IStoredAuthorityOperation['purpose'];
+  @plugins.nosqldb.svDb() public accountId!: string | null;
+  @plugins.nosqldb.svDb() public grantId!: string | null;
+  @plugins.nosqldb.svDb() public expectedGrantGeneration?: number | null;
+  @plugins.nosqldb.svDb() public state!: IStoredAuthorityOperationDocument['state'];
+  @plugins.nosqldb.svDb() public prompt?: TAuthSwitchLoginPrompt | null;
+  @plugins.nosqldb.svDb() public result!: IStoredAuthorityOperationDocument['result'];
+  @plugins.nosqldb.svDb() public error?: string | null;
+  @plugins.nosqldb.svDb() public commitId?: string | null;
+  @plugins.nosqldb.svDb() public requestHash?: string;
+  @plugins.nosqldb.svDb() public requestedModel?: string | null;
+  @plugins.nosqldb.svDb() public model?: string | null;
+  @plugins.nosqldb.svDb() public authorizationGeneration?: number;
+  @plugins.nosqldb.svDb() public grantGeneration?: number | null;
+  @plugins.nosqldb.svDb() public problem?: TStoredAuthorityPreuseProblem;
+  @plugins.nosqldb.svDb() public createdAt!: string;
+  @plugins.nosqldb.svDb() public updatedAt!: string;
+  @plugins.nosqldb.svDb() public finishedAt!: string | null;
+  @plugins.nosqldb.svDb() public revision!: number;
+  @plugins.nosqldb.svDb() public updateId!: string;
 }