@modelprofile.com/authswitch 7.0.0 → 8.1.0

package/dist_ts/classes.authoritybackup.d.ts

@@ -1,134 +0,0 @@
-import * as plugins from './plugins.js';
-import { type IAuthorityStoredRecord } from './classes.authorityregistry.js';
-import type { IAuthSwitchSecretCodec } from './classes.authoritysecrets.js';
-import type { IRemoteControlEnrollment } from './interfaces.js';
-/** This ID preserves Codex's complete three-column enrollment key, without email matching. */
-export declare const authorityEnrollmentId: (row: IRemoteControlEnrollment) => string;
-export type IAuthorityBackupRecord = IAuthorityStoredRecord;
-export interface IAuthorityBackupSourceCapsule {
-    kind: string;
-    id: string;
-    linkedModel: string;
-    linkedId: string;
-    linkedDigestField: 'sourceDigest' | 'before.credentialDigest' | 'before.configDigest';
-    /** Exact bytes re-read under the native owner's exclusion; the caller retains and wipes its buffer. */
-    bytes: Uint8Array;
-}
-export interface IAuthorityBackupSnapshotAttempt {
-    epoch: string;
-    revision: number;
-    records: AsyncIterable<IAuthorityBackupRecord>;
-    sources: AsyncIterable<IAuthorityBackupSourceCapsule>;
-}
-/** Implement with one SmartData session.withTransaction; each retry invokes visit anew. */
-export interface IAuthorityBackupSnapshotSource {
-    capture(visit: (attempt: IAuthorityBackupSnapshotAttempt) => Promise<void>): Promise<void>;
-}
-export interface IAuthorityBackupObjectStore {
-    prepare(signal?: AbortSignal): Promise<void>;
-    putExact(path: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;
-    get(path: string, maxBytes: number, signal?: AbortSignal): Promise<Uint8Array>;
-}
-/** Thin adapter over SmartBucket's provider-probed, create-only exact upload API. */
-export declare class AuthoritySmartBucketStore implements IAuthorityBackupObjectStore {
-    private readonly bucket;
-    private capability?;
-    constructor(bucket: plugins.smartbucket.Bucket);
-    prepare(signal?: AbortSignal): Promise<void>;
-    putExact(path: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;
-    get(path: string, maxBytes: number, signal?: AbortSignal): Promise<Uint8Array>;
-}
-export interface IAuthorityRestoredRecord extends IAuthorityBackupRecord {
-}
-export interface IAuthorityRestoredSource {
-    kind: 'source';
-    sourceKind: string;
-    sourceId: string;
-    sourceDigest: string;
-    linkedModel: string;
-    linkedId: string;
-    linkedDigestField: IAuthorityBackupSourceCapsule['linkedDigestField'];
-    bytes: Uint8Array;
-}
-export type TAuthorityRestoredEntry = IAuthorityRestoredRecord | IAuthorityRestoredSource;
-export interface IAuthorityBackupRehearsalReadback {
-    records: AsyncIterable<IAuthorityRestoredRecord>;
-    sources: AsyncIterable<IAuthorityRestoredSource>;
-    /** Stops the isolated database and child, then removes every disposable artifact. */
-    close(): Promise<void>;
-}
-/** Must restore into an isolated, runtime-closed target and read its stored postimage back. */
-export interface IAuthorityBackupRehearsal {
-    restoreClosed(entries: AsyncIterable<TAuthorityRestoredEntry>): Promise<IAuthorityBackupRehearsalReadback>;
-}
-export interface IAuthorityBackupSourceProof {
-    kind: string;
-    id: string;
-    linkedModel: string;
-    linkedId: string;
-    linkedDigestField: IAuthorityBackupSourceCapsule['linkedDigestField'];
-    digest: string;
-}
-/** Factual portable proof only. Production admission must additionally bind configured bucket and key custody. */
-export interface IAuthorityBackupVerification {
-    backupId: string;
-    manifestPath: string;
-    manifestDigest: string;
-    snapshotDigest: string;
-    sourceEpoch: string;
-    sourceRevision: number;
-    restoredEpoch: string;
-    recordCount: number;
-    sources: IAuthorityBackupSourceProof[];
-    rehearsalDigest: string;
-    verifiedAt: string;
-    /** Portable recovery proves data integrity, never that a surviving native writer has stopped. */
-    restoreAdmission: 'closed_pending_codex_and_native_reconciliation';
-}
-/** An object locator and digest only; this carries no recoverability or deletion authority. */
-export interface IAuthorityBackupPublication {
-    backupId: string;
-    manifestPath: string;
-    manifestDigest: string;
-    sourceEpoch: string;
-    sourceRevision: number;
-    snapshotDigest: string;
-}
-export declare class AuthorityBackupPublicationUnknownError extends Error {
-    readonly path: string;
-    constructor(path: string, cause: unknown);
-}
-interface IAuthorityBackupCommonOptions {
-    store: IAuthorityBackupObjectStore;
-    secrets: IAuthSwitchSecretCodec;
-    prefix: string;
-    recipientKeyId: string;
-    signal?: AbortSignal;
-}
-export interface IAuthorityBackupPublisherOptions extends IAuthorityBackupCommonOptions {
-    source: IAuthorityBackupSnapshotSource;
-    recipientPublicKey: Uint8Array;
-}
-export interface IAuthorityBackupVerifierOptions extends IAuthorityBackupCommonOptions {
-    rehearsal: IAuthorityBackupRehearsal;
-    recipientPrivateKey: Uint8Array;
-}
-export type TAuthorityBackupOptions = IAuthorityBackupPublisherOptions | IAuthorityBackupVerifierOptions;
-/** Portable backup codec; the daemon's SmartData repository supplies the snapshot and persists the verified receipt. */
-export declare class AuthSwitchAuthorityBackup {
-    private readonly options;
-    constructor(options: TAuthorityBackupOptions);
-    private publisher;
-    private verifier;
-    private secretFor;
-    private sourceDigestInRecord;
-    private assertPreparedClaudeSourceCoverage;
-    private stage;
-    private publish;
-    publishSnapshot(): Promise<IAuthorityBackupPublication>;
-    /** Rehearse a previously published object set; no caller-supplied success flag is accepted. */
-    rehearsePublished(input: IAuthorityBackupPublication): Promise<IAuthorityBackupVerification>;
-    private verifyPublished;
-    private restoreRecord;
-}
-export {};