@modelprofile.com/authswitch 9.0.0 → 9.2.0

package/dist_ts/classes.authoritydatabase.d.ts

@@ -19,6 +19,7 @@ export declare class AuthSwitchAuthorityDatabase {
     private engine?;
     private database?;
     private started;
+    private readonly deviceOperationObservers;
     constructor(options: IAuthSwitchAuthorityDatabaseOptions);
     private privateDirectory;
     start(): Promise<void>;
@@ -46,6 +47,13 @@ export declare class AuthSwitchAuthorityDatabase {
     readEnrollment(id: string): Promise<IStoredAuthorityEnrollment | null>;
     readHandoff(id: string): Promise<IStoredAuthorityHandoff | null>;
     readMigrationLedger(id: string): Promise<IStoredAuthorityMigrationLedger | null>;
+    /**
+     * Calls `observer` with the id of every device sign-in this database writes, after the write committed or
+     * was proven. The writers below are the only ones, so an observer misses no change; it runs synchronously
+     * and must only wake a reader. Returns the unsubscribe.
+     */
+    observeDeviceOperations(observer: (operationId: string) => void): () => void;
+    private deviceOperationChanged;
     readOperation(id: string): Promise<IStoredAuthorityOperation | null>;
     operationsPage(after: string | null, limit?: number): Promise<{
         operations: IStoredAuthorityDeviceOperation[];
@@ -101,14 +109,20 @@ export declare class AuthSwitchAuthorityDatabase {
     readUsage(accountId: string, loginId: string): Promise<IAuthSwitchStoredUsage | null>;
     /** Publish one credential-free usage result only if its authority and predecessor still match. */
     publishUsageIfCurrent(context: IAuthSwitchUsageContext, previousUpdateId: string | null, next: IAuthSwitchStoredUsage): Promise<boolean>;
-    page(accountAfter: string | null, grantAfter: string | null, bindingAfter: string | null, limit: number): Promise<{
+    /**
+     * One repeatable-read page of the published authority state. Native homes are part of it: every write that
+     * changes which account a home runs on appends an account event, so the metadata revision covers them.
+     */
+    page(accountAfter: string | null, grantAfter: string | null, bindingAfter: string | null, claudeHomeAfter: string | null, limit: number): Promise<{
         meta: IStoredAuthorityMeta;
         accounts: IStoredAuthorityAccount[];
         grants: IStoredAuthorityGrant[];
         bindings: IStoredAuthorityBinding[];
+        claudeHomes: IStoredAuthorityClaudeHome[];
         nextAccountCursor: string | null;
         nextGrantCursor: string | null;
         nextBindingCursor: string | null;
+        nextClaudeHomeCursor: string | null;
     }>;
     /**
      * One bounded, repeatable-read diagnostic page. Its metadata revision is authority state,
@@ -175,20 +189,31 @@ export declare class AuthSwitchAuthorityDatabase {
         account: IStoredAuthorityAccount;
         grant: IStoredAuthorityGrant;
     }>;
-    /** Remove all managed grants in one transaction; native owners must be stopped and handed off first. */
+    /**
+     * Remove all managed grants in one transaction. Native owners must be stopped and handed off first, and a
+     * runtime binding its holder releases must be released first; the daemon's own managed Codex bindings go
+     * with the account.
+     */
     removeAccountAndGrants(updateId: string, accountId: string, expectedRevision: number, statusObservedAt: string): Promise<IStoredAuthorityAccount>;
     changeAccount(updateId: string, accountId: string, change: (draft: IStoredAuthorityAccount | null) => IStoredAuthorityAccount): Promise<{
         meta: IStoredAuthorityMeta;
         account: IStoredAuthorityAccount;
     }>;
-    changeBinding(updateId: string, bindingId: string, accountId: string, grantId: string, change: (draft: IStoredAuthorityBinding | null, account: IStoredAuthorityAccount, grant: IStoredAuthorityGrant | null) => IStoredAuthorityBinding): Promise<{
+    /**
+     * Binds a runtime and scope, or rebinds them. The binding's revision is the authority revision of the event
+     * that writes it, handed to `change` as `revision`: the authority revision never repeats, so no two binds of
+     * a runtime and scope ever share one -- not even across a release, which deletes the record, followed by a
+     * bind that inserts it again -- and a holder that names a binding by the revision it read never names its
+     * successor. Records written before carry smaller revisions, which a later bind therefore still exceeds.
+     */
+    changeBinding(updateId: string, bindingId: string, accountId: string, grantId: string, change: (draft: IStoredAuthorityBinding | null, account: IStoredAuthorityAccount, grant: IStoredAuthorityGrant | null, revision: number) => IStoredAuthorityBinding): Promise<{
         meta: IStoredAuthorityMeta;
         binding: IStoredAuthorityBinding;
     }>;
     private revokeBindingExact;
     /** Closing an authority-owned runtime revokes its exact capability after owned cleanup. */
     revokeBinding(updateId: string, bindingId: string, capabilityHash: string): Promise<boolean>;
-    /** External callers can release only Flex/OpenCode bindings; managed Codex cleanup stays daemon-owned. */
+    /** External callers release only Flex, OpenCode and Claude bindings; managed Codex cleanup stays daemon-owned. */
     releaseExternalBinding(updateId: string, bindingId: string, capabilityHash: string): Promise<boolean>;
     /** Enrollment metadata is sealed by the caller and cannot become detached from an account. */
     changeEnrollment(updateId: string, enrollmentId: string, accountId: string, change: (current: IStoredAuthorityEnrollment | null) => IStoredAuthorityEnrollment): Promise<IStoredAuthorityEnrollment>;